Re: pop-before-smtp and spamd

2008-02-27 Thread Stefan Wollny
-Urspr|ngliche Nachricht- Von: Adam Jacob Muller [EMAIL PROTECTED] Gesendet: 27.02.08 05:57:42 An: Juan Miscaro [EMAIL PROTECTED] CC: Cameron Schaus [EMAIL PROTECTED], misc@openbsd.org Betreff: Re: pop-before-smtp and spamd pop-before-smtp is highly insecure. Use SMTP auth.

Re: OpenBSD 4.1 Strange Problem

2008-02-27 Thread Jussi Peltola
On Tue, Feb 26, 2008 at 10:25:04AM +0800, Wong Peter wrote: Hello all respect network administrator, i have set up a openbsd gateway but the wireless connection(gateway) is not detected by client but before this is ok. Can see it widnows but now cannot. I don't know what wrong with it. I

Re: pop-before-smtp and spamd

2008-02-27 Thread Adam Jacob Muller
NAT. -Adam On Feb 27, 2008, at 3:49 AM, Stefan Wollny wrote: Adam, could you please point to where to find more information on why pop- before-smtp is highly insecure? Or provide here a little bit of background information? It would be really appreciated. Thank you! -STEFAN

Re: pop-before-smtp and spamd

2008-02-27 Thread Stefan Wollny
Adam, could you please point to where to find more information on why pop-before-smtp is highly insecure? Or provide here a little bit of background information? It would be really appreciated. Thank you! -STEFAN -Urspr|ngliche Nachricht- Von: Adam Jacob Muller [EMAIL PROTECTED]

Re: spamd and freemail hosts

2008-02-27 Thread Zhang Huangbin
Peter N. M. Hansteen wrote: The spamd.alloweddomains method is useful Hi, Peter. Where can i find more information about spamd.alloweddomains? It doesn't appear in spamd(8) (OpenBSD 4.2 -release, i386). Thanks very much.

Re: spamd and freemail hosts

2008-02-27 Thread Peter N. M. Hansteen
Zhang Huangbin [EMAIL PROTECTED] writes: Where can i find more information about spamd.alloweddomains? It doesn't appear in spamd(8) (OpenBSD 4.2 -release, i386). It should, in the GREYTRAPPING section (page down a few screenfuls) -- Peter N. M. Hansteen, member of the first RFC 1149

Re: kernel naming proposal

2008-02-27 Thread Piotrek Kapczuk
2008/2/25, Don Jackson [EMAIL PROTECTED]: The issue is that when building and installing new kernels (eg, when a new security patch is released), it is not totally obvious to the (automated) build script what the file /bsd really is, is it the uniprocessor kernel, or a link to the

Re: relayd http check connection failures; hoststated operates correctly

2008-02-27 Thread Pierre-Yves Ritschard
Brad Arrington [EMAIL PROTECTED] wrote: Hi, I ran into the same problem you did, I thought it was something I was doing wrong until I read your email... Here is the fix I came up with. --- check_tcp.c-current Mon Feb 25 15:11:40 2008 +++ check_tcp.c Mon Feb 25 23:48:45 2008 @@ -82,6

Re: kernel naming proposal

2008-02-27 Thread mickey
On Wed, Feb 27, 2008 at 01:15:56PM +0100, Piotrek Kapczuk wrote: 2008/2/25, Don Jackson [EMAIL PROTECTED]: The issue is that when building and installing new kernels (eg, when a new security patch is released), it is not totally obvious to the (automated) build script what the file /bsd

OpenBSD and Mysql+Sun

2008-02-27 Thread Gustavo Polillo
Sun +Mysql.. The mysql database will be portable in the next Openbsd versions? How openbsd team loook this?

Re: OpenBSD and Mysql+Sun

2008-02-27 Thread Tim Donahue
Quoting Gustavo Polillo [EMAIL PROTECTED]: Sun +Mysql.. The mysql database will be portable in the next Openbsd versions? How openbsd team loook this? OpenBSD has had a MySQL port for nearly 9 years now.* I would imagine that nothing will change in that respect, and from everything that

Re: OpenBSD and Mysql+Sun

2008-02-27 Thread Mayuresh Kathe
On Wed, Feb 27, 2008 at 6:42 PM, Gustavo Polillo [EMAIL PROTECTED] wrote: Sun +Mysql.. The mysql database will be portable in the next Openbsd versions? How openbsd team loook this? Didn't quite grasp your mail clearly, but based on what-ever I understood of it, here goes; SUN is going to

Re: P2V with VMWare - ERR M

2008-02-27 Thread Ăšlfar M . E . Johnson
Hi, Did you use http://www.openbsd.org/faq/faq14.html#Backup to restore your old box to a vmware server image. The only part I am confused by is At the end I installed the boot loader as described in the manpages with success. What man page are you referring to? What steps did you use to

Re: OpenBSD and Mysql+Sun

2008-02-27 Thread Louis V. Lambrecht
Tim Donahue wrote: Quoting Gustavo Polillo [EMAIL PROTECTED]: Sun +Mysql.. The mysql database will be portable in the next Openbsd versions? How openbsd team loook this? OpenBSD has had a MySQL port for nearly 9 years now.* I would imagine that nothing will change in that respect, and

Re: relayd http check connection failures; hoststated operates correctly

2008-02-27 Thread Brad Arrington
Hi Pierre-Yves, I guess we are both wrong... I used a few different timeout values including 1000 before changing any code. I just checked relayd(the unpatched version) again and I get the same results. These web servers just serve the default apache index page. I can connect to them instantly

Re: relayd http check connection failures; hoststated operates correctly

2008-02-27 Thread Pierre-Yves Ritschard
Brad Arrington [EMAIL PROTECTED] wrote: Hi Pierre-Yves, I guess we are both wrong... I used a few different timeout values including 1000 before changing any code. I just checked relayd(the unpatched version) again and I get the same results. These web servers just serve the default

Re: P2V with VMWare - ERR M

2008-02-27 Thread Fabian Heusser
Sorry, I refered to the second example in installboot(8) : http://www.openbsd.org/cgi-bin/man.cgi?query=installbootapropos=0sektion=0; manpath=OpenBSD+Currentarch=i386format=html It's the same as this step from your linked FAQ # cp /usr/mdec/boot /mnt/boot # /usr/mdec/installboot -v /mnt/boot

Re: Power fluctuation and hard disk crashes

2008-02-27 Thread ropers
This is a totally non-technical solution, but reading what you wrote I immediately thought: How much of these 56 GB of data is changing? Is the bulk of this data stuff that you *need* to constantly access for the next couple of weeks? If not, then wouldn't it be much safer to just take one of the

Re: relayd http check connection failures; hoststated operates correctly

2008-02-27 Thread Ben Lovett
On Wed, Feb 27, 2008 at 11:53:03AM +0100, Pierre-Yves Ritschard wrote: Your fix is wrong, you run in a timeout which happens because the default relayd configuration supposes you are in the same broadcast domain than your relayed host and has a 200ms timeout. While my relay server isn't in the

4.3-beta upgrade stalls on base43.tgz

2008-02-27 Thread Andrew Ruscica
While doing a direct upgrade of an amd64 machine from -current (approx end of Jan) to the Feb 26 snapshot, the installer stalls on base43.tgz. This happens at 99%, 46640KB. I've tried the following three methods with the same results: - bsd.rd and get sets from an ftp mirror - bsd.rd and get

Re: relayd http check connection failures; hoststated operates correctly

2008-02-27 Thread Ben Lovett
On Wed, Feb 27, 2008 at 06:28:40PM +0100, Pierre-Yves Ritschard wrote: Please try with an insanely high value (10seconds) and see if you still get a connection timeout message. To make logging more meaningful you can try with this diff and send me the relayd -dv output: I can't set timeout

Re: relayd http check connection failures; hoststated operates correctly

2008-02-27 Thread Brad Arrington
Hi Ben, Try changing the interval value to a higher value. I tested it the results are the same. (with timeout set to 10 seconds) -Brad -Original Message- From: [EMAIL PROTECTED] Sent: Wed, 27 Feb 2008 11:27:19 -0800 To: [EMAIL PROTECTED] Subject: Re: relayd http check connection

Re: [ami] Unable to set Hot Spare from bioctl on a Dell PERC 4/Di

2008-02-27 Thread Matthew Mulrooney
On Thu, 21 Feb 2008, Matthew Mulrooney wrote: On Wed, 20 Feb 2008, Marco Peereboom wrote: My natural answer is that this is a firmware issue. But since you I will upgrade the firmware and rerun my test case. I've upgraded my firmware to the latest version: Firmware version: 252D

Re: switching off the lid parks and spins up the hard drive too frequently in spite of atactl

2008-02-27 Thread Bryan
From man (8) atactl: apmset power-management-level Enables and sets the advanced power management level to the re- quested level on the specified device (if supported). Device performance may increase with increasing power management levels

Re: 4.3-beta upgrade stalls on base43.tgz (Ok on clean install)

2008-02-27 Thread Andrew Ruscica
On Wed, Feb 27, 2008 at 02:18:12PM -0500, Andrew Ruscica wrote: While doing a direct upgrade of an amd64 machine from -current (approx end of Jan) to the Feb 26 snapshot, the installer stalls on base43.tgz. This happens at 99%, 46640KB. ... Nest step will be to do a clean install. The clean

pf+queue+pass in+statfeful out

2008-02-27 Thread S. Scott Sima, CISA, CISM
I know queuing only applies to outbound traffic. I'm using ssh -w tunnelling to the pf+gateway. I, therefore, have pass in on #ext_if inet proto tcp ... keep state queue (QSHH, QLOWLAT), which, if I understand correctly, should assign the stateful reply/return (outbound) traffic be queued on

netiquette: please don't post to misc with a spamtrap as reply-to

2008-02-27 Thread Peter N. M. Hansteen
I find it somewhat astonishing, bordering on the incredible, that someone who claims to be knowledgeable about such things as spamd and a few related pieces of software would first post to this list with a reply-to address that the recipient mail server bounces as undeliverable, then later

named dhcpd network problems after update

2008-02-27 Thread xSAPPYx
Heya misc: Base dhcpd and named are failing to start after an update. I'm really confused at this point. Other daemons are working fine and I can't see anything else 'wrong' with the system. Any thoughts at all would be greatly appreciated. This was a 4.2-release system. I followed the standard

Re: ipsecctl and isakmpd

2008-02-27 Thread visc
Dear list, I have a firewall and an ipsec.conf with 42 ike esp connections: ike esp from 192.168.100.0/24 to 192.168.129.0/24 peer my.firewall \ main auth hmac-sha1 enc 3des group modp1024 \ quick auth hmac-sha1 enc 3des group modp1024 \ psk mekmitasdigoat tag yet.another.connection

Re: Serial console questions on i386 and amd64

2008-02-27 Thread Nick Holland
Nick Holland wrote: Don Jackson wrote: I use serial consoles on all my OpenBSD servers for remote serial access to the machines, both during initial install via pxeboot, and later on in regular use after the install. I'm currently running either 4.2 or 4.1 on all my machines. The FAQ

OpenBSD Strange Problem

2008-02-27 Thread Wong Peter
Hello all respect network administrator, i have set up a openbsd gateway but the wireless connection(gateway) is not detected by client but before this is ok. Can see it widnows but now cannot. I don't know what wrong with it. I sure my configuration is ok because i didn't edit it. Another problem

Re: OpenBSD Strange Problem

2008-02-27 Thread Richard Daemon
On Wed, Feb 27, 2008 at 9:51 PM, Wong Peter [EMAIL PROTECTED] wrote: Hello all respect network administrator, i have set up a openbsd gateway but the wireless connection(gateway) is not detected by client but before this is ok. Can see it widnows but now cannot. I don't know what wrong with

Re: named dhcpd network problems after update

2008-02-27 Thread Richard Daemon
On Wed, Feb 27, 2008 at 7:38 PM, xSAPPYx [EMAIL PROTECTED] wrote: Heya misc: Base dhcpd and named are failing to start after an update. I'm really confused at this point. Other daemons are working fine and I can't see anything else 'wrong' with the system. Any thoughts at all would be

Re: Power fluctuation and hard disk crashes

2008-02-27 Thread Matt
Girish Venkatachalam schreef: wd0 lost interrupt. fsbn blah blah blah 234023409-234234.. You get it? The SMPS in the PC is not able to provide the power that these higher capacity disk's stepper motors demand. It never occurred to me so far that disk failures were a natural consequence of my

Re: IPSec tunnel problem

2008-02-27 Thread Alexey Vatchenko
Jeff Quast wrote: you need to declare a bypass flow on the side of the network where the router, presumably on 192.168.0.0/24 requires communication to the local network segment also on 192.168.0.0/24. It is probobly trying to send this across the tunneled wire, which won't reach its

Re: bgp routing question

2008-02-27 Thread Erich
i now have a session i turned on update loging ob bpgd but the routes do not get inserted. any ideas? AS41412: update 123.123.123.0/24 via xxx..xx. ( the router where the network is, yes pingable) Erich schrieb: Claudio Jeker schrieb: On Tue, Feb 26, 2008 at 09:51:05AM +0100, Erich