rum.4

2008-03-04 Thread giovanni
Chipset: Ralink RT2501USB. (RT2528+RT2571W) rum0 at uhub0 port 1 Ralink 802.11 bg WLAN rev 2.00/0.01 addr 3 rum0: MAC/BBP RT2573 (rev 0x2573a), RF RT2528, address 00:0e:e8:e0:c4:17 Index: rum.4 === RCS file:

Re: pf tag goes missing post sshd tcp decapsulization

2008-03-04 Thread Reyk Floeter
On Mon, Mar 03, 2008 at 11:41:39AM -0500, scott wrote: Thanks, everyone, for the user- vs kernel-land info. As soon as I read it, I got it. Disappointed but I got it. ipsec/isakpmd is, I think, kernel-land and it has some very flexible (per ipsec rule, not just daemon level, as in user or

zcat in root partition

2008-03-04 Thread Raimo Niskanen
Hi! I am writing a script that would be nice to be able to run with only the root partition mounted, and it works fine except that I find no way to read .gz compressed files without e.g /usr/bin/zcat. So my questions are: is there a program in /sbin:/bin that can decompress .gz compressed files?

Re: zcat in root partition

2008-03-04 Thread Han Boetes
Raimo Niskanen wrote: I am writing a script that would be nice to be able to run with only the root partition mounted, and it works fine except that I find no way to read .gz compressed files without e.g /usr/bin/zcat. You can do it with something like this in single user mode: # mount /usr

Re: rum.4

2008-03-04 Thread Jason McIntyre
On Tue, Mar 04, 2008 at 10:23:47AM +0100, giovanni wrote: Chipset: Ralink RT2501USB. (RT2528+RT2571W) rum0 at uhub0 port 1 Ralink 802.11 bg WLAN rev 2.00/0.01 addr 3 rum0: MAC/BBP RT2573 (rev 0x2573a), RF RT2528, address 00:0e:e8:e0:c4:17 Index: rum.4

Re: : zcat in root partition

2008-03-04 Thread Raimo Niskanen
On Tue, Mar 04, 2008 at 02:30:27PM +0100, Han Boetes wrote: Raimo Niskanen wrote: I am writing a script that would be nice to be able to run with only the root partition mounted, and it works fine except that I find no way to read .gz compressed files without e.g /usr/bin/zcat. You can

opensnmpd and net-snmp conflicting ?

2008-03-04 Thread Agung T. Apriyanto
dear list, recently i upgrade one of my machine to 4.3-beta, and found the new snmp program, but i'm still using the net-snmp from ports, and somehow when i try to issue the oid .1.3.6.1.2.1.4.20.1.2 ( ip address look up ) it did not show anything, but if i use opensnmpd and issue the same oid,

Re: opensnmpd and net-snmp conflicting ?

2008-03-04 Thread Stuart Henderson
On 2008-03-04, Agung T. Apriyanto [EMAIL PROTECTED] wrote: recently i upgrade one of my machine to 4.3-beta, and found the new snmp program, but i'm still using the net-snmp from ports Did you upgrade net-snmp to a version that will match your new kernel?

Re: Nfsen and php problems...?

2008-03-04 Thread Peter Haag
1. In php.ini, set short_open_tag = On 2. Apply the following patch where you have installed NfSen: --- libexec/Nfcomm.pm.orig Sun Feb 17 13:12:15 2008 +++ libexec/Nfcomm.pm Sun Feb 17 13:12:20 2008 @@ -753,6 +753,7 @@ return undef; }

Re: Nfsen and php problems...?

2008-03-04 Thread Balgaa
Peter, Thank you very much. Is there way to see protocol based graph view like ftp, http, ssh, voip, P2P (bittorrent, edonkey, kazaa etc.,). I saw Nfsen only show tcp/udp, icmp and port based graph. Peter Haag-2 wrote: 1. In php.ini, set short_open_tag = On 2. Apply the following

Re: opensnmpd and net-snmp conflicting ?

2008-03-04 Thread Agung T. Apriyanto
yes i did upgrade ports to current too, now its net-snmp 5.4.1 On Tue, Mar 4, 2008 at 11:15 PM, Stuart Henderson [EMAIL PROTECTED] wrote: On 2008-03-04, Agung T. Apriyanto [EMAIL PROTECTED] wrote: recently i upgrade one of my machine to 4.3-beta, and found the new snmp program, but i'm

Re: Nfsen and php problems...?

2008-03-04 Thread Peter Haag
--On March 4, 2008 10:03:43 AM -0800 Balgaa [EMAIL PROTECTED] wrote: | Peter, | | Thank you very much. Is there way to see protocol based graph view like ftp, | http, ssh, voip, P2P (bittorrent, edonkey, kazaa etc.,). | | I saw Nfsen only show tcp/udp, icmp and port based graph. Create a

Installation freeze....

2008-03-04 Thread Massimiliano Giorgi
Hi, this is my first attemp to installa OpenBSD on a system... I have an Epia PD mini-itx system (http://www.via.com.tw/en/products/mainboards/motherboards.jsp?motherboard_id=241) with a Intel PCI ethernet card (Intel PRO/1000MT Dual Port Server Adapter - PWLA8492MT) when I try to install OpenBSD

main mode produces comm losses

2008-03-04 Thread catalin visinescu
Hi, I am running OpenBSD 4.0 with carp+isakmpd+sasyncd+pf on 166MHz Pentium boards. Everything is working well. There are 6 locations, all clustered (2 redundant firewalls). When I fail one cluster the other one takes over with some packet loss. I see the carp is doing its thing.

Re: opensnmpd and net-snmp conflicting ?

2008-03-04 Thread Reyk Floeter
hi! On Tue, Mar 04, 2008 at 10:57:57PM +0700, Agung T. Apriyanto wrote: recently i upgrade one of my machine to 4.3-beta, and found the new snmp program, but i'm still using the net-snmp from ports, and somehow when i try to issue the oid .1.3.6.1.2.1.4.20.1.2 ( ip address look up ) it did

high load spamd bridge in greylisting mode

2008-03-04 Thread Jeff Santos
Hi, I need to setup a bridge to run spamd in greylisting mode. Since there have been some changes in spamd recently and the ruleset that appeared in the article in the OpenBSD Journal in the past (http://undeadly.org/cgi?action=articlesid=20061108134508) is more appropriate for blacklist mode, I

Re: high load spamd bridge in greylisting mode

2008-03-04 Thread Theo de Raadt
I need to setup a bridge to run spamd in greylisting mode. Since there have been some changes in spamd recently and the ruleset that appeared in the article in the OpenBSD Journal in the past (http://undeadly.org/cgi?action=articlesid=20061108134508) is more appropriate for blacklist mode, I

Re: high load spamd bridge in greylisting mode

2008-03-04 Thread bofh
On Tue, Mar 4, 2008 at 5:50 PM, Theo de Raadt [EMAIL PROTECTED] wrote: Yes, things changed. Check the manual pages. They are accurate. Also, since this bridge is going to have to handle a lot of messages (some 50K legitimate and possibly some 450k spams) daily, what kind of tunning

Re: opensnmpd and net-snmp conflicting ?

2008-03-04 Thread Agung T. Apriyanto
you mean the new snmpd is working correctly but net-snmp is not? this doesn't surprise me, there were some issues with net-snmp in the past, this was one of my reasons to start working on a new implementation. yes, concerning i'm just graphing interface traffic via mrtg/cacti there is no

Pre-release tests

2008-03-04 Thread Theo de Raadt
Right about now is a great time for our user community to jump in and do some install and upgrade tests. The 4.3 release cycle is fully in swing, and I hope that I can get it over with soon so that the developers can start work on the bug fixes and new work that can't make it into 4.3. Here's a

OBSD hacks at ruxcon

2008-03-04 Thread steve szmidt
Hi, I'm curious what the developers think about the attack angles Ben Hawkes put forth at Ruxcon in 2006. I did manage to find a note in an archive suggesting that these doors were closed, but I could not tell if they are? Ref: http://ruxcon.org.au/files/hawkes_openbsd.pdf Exploiting OpenBSD

Re: OBSD hacks at ruxcon

2008-03-04 Thread David Higgs
On Tue, Mar 4, 2008 at 9:57 PM, steve szmidt [EMAIL PROTECTED] wrote: Hi, I'm curious what the developers think about the attack angles Ben Hawkes put forth at Ruxcon in 2006. I did manage to find a note in an archive suggesting that these doors were closed, but I could not tell if they

Re: Nfsen and php problems...?

2008-03-04 Thread Balgaa
Peter, How can I create profile? I am new to Nfsen+Nfdump. I need to create profile on Nfsen or? Peter Haag-2 wrote: --On March 4, 2008 10:03:43 AM -0800 Balgaa [EMAIL PROTECTED] wrote: | Peter, | | Thank you very much. Is there way to see protocol based graph view like ftp, | http,

floppy.fs

2008-03-04 Thread Paul Greidanus
Hi All I'm just wondering how many people out there are using the floppy.fs installer still? I'm wondering if it would be a worthwhile thought to expand past the 1.44Mb limit for the CD and .rd install options if there are features that can be added to the installer. No, I'm not thinking a

Re: OBSD hacks at ruxcon

2008-03-04 Thread steve szmidt
On Tuesday 04 March 2008, David Higgs wrote: I'm curious what the developers think about the attack angles Ben Hawkes put forth at Ruxcon in 2006. I did manage to find a note in an archive suggesting that these doors were closed, but I could not tell if they are?

Re: floppy.fs

2008-03-04 Thread Theo de Raadt
I'm just wondering how many people out there are using the floppy.fs installer still? I think your assumption is that we are facing the space problem just from the i386 side. We are not. We run on lots of architectures. There is some semblance of size pressure from all architectures. But in

Re: Nfsen and php problems...?

2008-03-04 Thread Peter Haag
--On March 4, 2008 19:38:58 -0800 Balgaa [EMAIL PROTECTED] wrote: | Peter, | | How can I create profile? | | I am new to Nfsen+Nfdump. I need to create profile on Nfsen or? Please read the documentation. Everything is written there. - Peter | | | | Peter Haag-2 wrote: | | --On March 4,

Re: floppy.fs

2008-03-04 Thread Theo de Raadt
Theo de Raadt wrote: I'm just wondering how many people out there are using the floppy.fs installer still? I think your assumption is that we are facing the space problem just from the i386 side. We are not. We run on lots of architectures. There is some semblance of size

Re: floppy.fs

2008-03-04 Thread Predrag Punosevac
Paul Greidanus wrote: Theo de Raadt wrote: I'm just wondering how many people out there are using the floppy.fs installer still? I think your assumption is that we are facing the space problem just from the i386 side. We are not. We run on lots of architectures. There is some semblance

Re: OBSD hacks at ruxcon

2008-03-04 Thread Ted Unangst
On 3/5/08, steve szmidt [EMAIL PROTECTED] wrote: Looks like the malloc is addressed. Anything on the other attack vectors? Do you have a particular concern or are you asking for a 53 slide response presentation?

Re: floppy.fs

2008-03-04 Thread Paul Greidanus
Theo de Raadt wrote: I'm just wondering how many people out there are using the floppy.fs installer still? I think your assumption is that we are facing the space problem just from the i386 side. We are not. We run on lots of architectures. There is some semblance of size pressure from

Re: floppy.fs

2008-03-04 Thread Paul Greidanus
Theo de Raadt wrote: In a worst case, if there is a useful, yet large feature, it can be added into cd and bsd.rd, but leaving it out of floppy? Having the floppy makes Open unique, and it's a good thing to have. Like what? Where's the diff for this useful, very large feature?