Re: security fixes for packages

2008-05-14 Thread Comète
uh uh ! Don't be so nervous guy ! I just would like to know the reason why these fixes weren't provided. I can understand now as you tell me (so gently...) that there isn't enough people to work on it. Ok i know the time such projects can take and it would have been easier to tell things like

Re: Please .Do not neglect this mail,13/05/2008,,

2008-05-14 Thread Tomas Bodzar
Woho, What a great offer.I need 1.000.000 barells.I can pay 1 USD for one barell only.I hope,that is enough for people like you :-) Have a nice day and say hello to uncle Diamant :-D :-D :-D -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Engr.

BSD magazine/ authors needed!

2008-05-14 Thread Katarzyna Kaczor
Good day to all, A new print magazine focused on the various BSD operating systems-FreeBSD, OpenBSD, and NetBSD - has started up. You can get more information about the magazine at http://www.bsdmag.org and http://blogs.ittoolbox.com/unix/bsd/archives/bsd-mag-is-out-23946 In the upcoming issue

Re: ipsec home network to colo server

2008-05-14 Thread Jonathan
On Tue, May 13, 2008 at 5:41 PM, Lord Sporkton [EMAIL PROTECTED] wrote: I am trying to set up a ipsec link between my home network(private ip network behind dynamic public ip) and my colo server(single public static ip). I was a bit unclear on how to set up a tunnel between a static and

Re: More details show that someone seriously fucked up in debian. [Was: Re: Debian libssl security (OpenSSH safe?)]

2008-05-14 Thread Otto Moerbeek
On Wed, May 14, 2008 at 12:48:41AM +0200, chefren wrote: On 5/13/08 7:08 PM, Marc Espie wrote: More details show that someone seriously fucked up in debian. Well, this Kurt has seriously asked for details on the relevant openssl-dev list:

Re: security fixes for packages

2008-05-14 Thread Comète
So i make a proposal to avoid clueless guy like me to ask this question which seems to cause so many troubles: What do you think about posting a message on this page: http://www.openbsd.org/pkg-stable.html which could say in a better english as mine :) : OpenBSD -stable packages are not

Re: asus eee ethernet and 4.3

2008-05-14 Thread Rolf Sommerhalder
I have observed the same problem with lii(4) not linking up running the latest i386 snapshot, and using a 10 meter patch cable to the switch. However, when trying a short 1 m cable to the same switch port the link comes up! A fresh kernel build this past weekend from CVS exhibits the same

Offre n°172

2008-05-14 Thread Val�rie Goujon
Si ce message ne s'affiche pas correctement, vous pouvez le visualiser en suivant ce lien. [IMAGE] [IMAGE] [IMAGE] [IMAGE] Bonjour, Obligatoire ` partir du 1er juillet 2008, le kit de sicuriti comprenant un triangle de pri-signalisation et un gilet ritro-riflichissant ` bord de tous les

Re: Dell Power Edge 1950 SAS Raid1 'sd0: not queued: error 5'

2008-05-14 Thread Claer
On Wed, May 14 2008 at 24:09, David Gwynne wrote: i believe this has been fixed with revision 1.80 of src/sys/dev/ic/mfi.c. could you please try -current (or at least 4.3) and see if the problem persists? OK. I'll try to upgrade these servers asap. (It's have to be done anyway =)) Claer

Re: Debian libssl security (OpenSSH safe?)

2008-05-14 Thread Gabriel Linder
On Tue, 13 May 2008 11:14:59 -0500 Sean Malloy [EMAIL PROTECTED] wrote: On Tue, May 13, 2008 at 11:37:38AM -0400, Juan Miscaro wrote: I guess everyone by now has heard about the very serious libssl vulnerability on Debian/Ubuntu? Just making sure that the source is safe, thanks.

Re: geom network driver times out on sparc 4.2?

2008-05-14 Thread Jay
I gets a little more interesting..Linux/sparc was working fine for a few days.Now it seems, merely plugging this machine into the network makes thenetwork barely work -- very slow, connections dropped. Even ifI'm just sitting in various installers. Plugging in the wired on board ethernet. apt-get

Re: security fixes for packages

2008-05-14 Thread Nigel J. Taylor
Daniel Ouellet wrote: Comhte wrote: Ok, so does it mean that -stable or -release are useless ??? and people buy useless CDs every 6 monthes ? I can't believe it. I really don't understand why these fixes are not provided anymore. Then do something about it and start contributing too. May be

Re: Debian libssl security (OpenSSH safe?)

2008-05-14 Thread Otto Moerbeek
On Wed, May 14, 2008 at 09:41:43AM +0200, Gabriel Linder wrote: On Tue, 13 May 2008 11:14:59 -0500 Sean Malloy [EMAIL PROTECTED] wrote: On Tue, May 13, 2008 at 11:37:38AM -0400, Juan Miscaro wrote: I guess everyone by now has heard about the very serious libssl vulnerability on

Re: Debian libssl security (OpenSSH safe?)

2008-05-14 Thread Ted Unangst
On 5/14/08, Gabriel Linder [EMAIL PROTECTED] wrote: Just wondering... If someone generates ssh keys with flags J or Z set in malloc.conf(5), aren't these keys useless too (since feeding predictable data is more or less equal to not feeding data at all) ? feeding predictable data +

Re: More details show that someone seriously fucked up in debian. [Was: Re: Debian libssl security (OpenSSH safe?)]

2008-05-14 Thread Otto Moerbeek
On Wed, May 14, 2008 at 08:47:38AM +0200, Otto Moerbeek wrote: On Wed, May 14, 2008 at 12:48:41AM +0200, chefren wrote: On 5/13/08 7:08 PM, Marc Espie wrote: More details show that someone seriously fucked up in debian. Well, this Kurt has seriously asked for details on the relevant

Re: security fixes for packages

2008-05-14 Thread Edd Barrett
On Tue, May 13, 2008 at 10:07 PM, Unix Fan [EMAIL PROTECTED] wrote: The developers don't care about your security. No, the developers are all very busy and don't have time to work on stable packages. I'm so sick of hearing about this that I am willing to co-ordinate a group of developers to

Re: security fixes for packages

2008-05-14 Thread Steven Surdock
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Edd Barrett Subject: Re: security fixes for packages On Tue, May 13, 2008 at 10:07 PM, Unix Fan [EMAIL PROTECTED] wrote: The developers don't care about your security. I'm so sick of

Re: security fixes for packages

2008-05-14 Thread Deanna Phillips
Edd, although no developer I am interested in assisting. Personally, following the six month -stable cycle fits my needs better than following -current. I have used the diffs at http://openbsd.rutgers.edu/ as a resource for creating -stable packages and I now see UNSUPPORTED 4.3 packages are

changing api when upgrade (was: security fixes for packages)

2008-05-14 Thread arthur
I am new to OpenBSD and I believe there are some reason for that since all the smartest gurus made the decision and went that way: The reason we need to rebuild userland/packages after upgrade base is that the API may change, right? However, if we make the new api always backward compatible (and

Console no longer clears after upgrade to 4.3

2008-05-14 Thread Mark Zimmerman
Greetings: Following the procedure in FAQ 7.3. I had set up /etc/gettytab to clear the screen after logoff. After upgrading to 4.3, this no longer works. The Upgrade Guide mentions that /etc/ttys has changed; could this have had an impact on this? I would like to get this working again, so advice

Re: Console no longer clears after upgrade to 4.3

2008-05-14 Thread D. Adam Karim
By chance did you read this: http://www.openbsd.org/faq/upgrade43.html#etcUpgrade If you just blindly did a `tar xzf -C / etc43.tgz` without following instructions, then it surely would have overwritten what you had added to the file. Also note, /etc/gettytab is the file which handles this.

OpenBSD 4.3(or -current) and german UMTS-Provider - generell question

2008-05-14 Thread sebastian . rother
Hello everybody, This is a question specialy to people in germany. I would like to know if somebody uses BASE or any familiar fix price data flat from any provider and uses his mobile phone to get internet. I'm interested into provider details (does it work, are there issues or connection aborts

Re: Console no longer clears after upgrade to 4.3

2008-05-14 Thread Mark Zimmerman
On Wed, May 14, 2008 at 10:34:24AM -0700, D. Adam Karim wrote: By chance did you read this: http://www.openbsd.org/faq/upgrade43.html#etcUpgrade Of course. If you just blindly did a `tar xzf -C / etc43.tgz` without following instructions, then it surely would have overwritten what you had

Re: Console no longer clears after upgrade to 4.3

2008-05-14 Thread Stuart Henderson
On 2008-05-14, Mark Zimmerman [EMAIL PROTECTED] wrote: default:\ :np:im=\r\n%s/%m (%h) (%t)\r\n\r\n:sp#1200:cl=\E[H\E[2J: But the FAQ says to put the cl=\E[H\E[2J in the P|Pc|Pc entry. Does this really belong in default? Not entirely, as the escape sequence is terminal-type-specific..

Re: geom network driver times out on sparc 4.2?

2008-05-14 Thread Jay
My OBP is definitely out of date, but I haven't yet been able to fix that. I'm not sure if it requires installing Solaris (which file systems can OB access?), which I've been unable to do, and I'm not sure if it requires cracking open the machine, which I am reluctant to do, but might do. Someone

Re: Console no longer clears after upgrade to 4.3

2008-05-14 Thread D. Adam Karim
I was referring to this section that I now quote: Final steps Whether you upgrade by using an install kernel and doing a formal upgrade process, or do a in-place binary upgrade, there are certain manual steps that have to be performed. If we look further and read

Re: changing api when upgrade (was: security fixes for packages)

2008-05-14 Thread Ted Unangst
On 5/14/08, arthur [EMAIL PROTECTED] wrote: The reason we need to rebuild userland/packages after upgrade base is that the API may change, right? The only reason you need to rebuild is to get the new versions. The old ones work just fine. However, if we make the new api always backward

Re: Debian libssl security (OpenSSH safe?)

2008-05-14 Thread raven
Ted Unangst ha scritto: On 5/14/08, Gabriel Linder [EMAIL PROTECTED] wrote: Just wondering... If someone generates ssh keys with flags J or Z set in malloc.conf(5), aren't these keys useless too (since feeding predictable data is more or less equal to not feeding data at all) ? A

Re: Debian libssl security (OpenSSH safe?)

2008-05-14 Thread Darrin Chandler
On Thu, May 15, 2008 at 01:45:51AM +0200, raven wrote: Ted Unangst ha scritto: On 5/14/08, Gabriel Linder [EMAIL PROTECTED] wrote: Just wondering... If someone generates ssh keys with flags J or Z set in malloc.conf(5), aren't these keys useless too (since feeding predictable data is

Re: Debian libssl security (OpenSSH safe?)

2008-05-14 Thread Ben Calvert
On May 14, 2008, at 5:22 PM, Darrin Chandler wrote: On Thu, May 15, 2008 at 01:45:51AM +0200, raven wrote: A decent analysis can be found here... just to understand what can do a comment /* */ :) http://blog.drinsama.de/erich/en/linux/2008051401-consequences-of-sslssh-weakness.html Are

Re: geom network driver times out on sparc 4.2?

2008-05-14 Thread Sevan / Venture37
apt-get upgrade left Linux failing to boot. Solaris 9 install fails very early, something about newfs failing. I really tried a bunch of manual parameters, besides that it is run automatically.I think 10 is in the mail. (I have 10 on DVD but so far only a CD drive on the machine). if you

Re: ipsec home network to colo server

2008-05-14 Thread Lord Sporkton
2008/5/13 Jonathan [EMAIL PROTECTED]: On Tue, May 13, 2008 at 5:41 PM, Lord Sporkton [EMAIL PROTECTED] wrote: I am trying to set up a ipsec link between my home network(private ip network behind dynamic public ip) and my colo server(single public static ip). I was a bit unclear on how to

Re: ipsec home network to colo server

2008-05-14 Thread scott learmonth
On Tue, May 13, 2008 at 5:41 PM, Lord Sporkton [EMAIL PROTECTED] wrote: I am trying to set up a ipsec link between my home network(private ip network behind dynamic public ip) and my colo server(single public static ip). I was a bit unclear on how to set up a tunnel between a static and

Re: Debian libssl security (OpenSSH safe?)

2008-05-14 Thread Jussi Peltola
On Wed, May 14, 2008 at 05:30:18PM -0700, Ben Calvert wrote: On May 14, 2008, at 5:22 PM, Darrin Chandler wrote: On Thu, May 15, 2008 at 01:45:51AM +0200, raven wrote: A decent analysis can be found here... just to understand what can do a comment /* */ :)

Re: problem building release for 4.3 stable

2008-05-14 Thread Aaron Martinez
Anthony Roberts wrote: On Tue, May 6, 2008 1:27 am, Christer Solskogen wrote: Just to be 100% sure. Do you see libc.so.43.0 in /usr/dest/usr/lib ? I've come across the problem you got just a week ago, and my mistake was wrong tag, but the problem could be that you try to build 4.3 on a

Re: Debian libssl security (OpenSSH safe?)

2008-05-14 Thread Ted Unangst
On 5/14/08, Ben Calvert [EMAIL PROTECTED] wrote: On May 14, 2008, at 5:22 PM, Darrin Chandler wrote: Are you sure that's a decent analysis? If you have a non-debian system with the full number of keys available, what are the chances that you've landed on one of the 32767 keys? Not very

Re: Debian libssl security (OpenSSH safe?)

2008-05-14 Thread Darrin Chandler
On Wed, May 14, 2008 at 10:22:11PM -0400, Ted Unangst wrote: On 5/14/08, Ben Calvert [EMAIL PROTECTED] wrote: On May 14, 2008, at 5:22 PM, Darrin Chandler wrote: Are you sure that's a decent analysis? If you have a non-debian system with the full number of keys available, what are the

Re: geom network driver times out on sparc 4.2?

2008-05-14 Thread Jay
I don't think that is it, but I will try, thank you. I'm pretty sure the label that OpenBSD and/or Ubuntu left me with is a Solaris type. And dumb me, I didn't consider OBP as helping the install too. So the questions remain if I can install OBP without Solaris, and if I'll have to crack open the

Re: ipsec home network to colo server

2008-05-14 Thread Lord Sporkton
2008/5/14 scott learmonth [EMAIL PROTECTED]: On Tue, May 13, 2008 at 5:41 PM, Lord Sporkton [EMAIL PROTECTED] wrote: I am trying to set up a ipsec link between my home network(private ip network behind dynamic public ip) and my colo server(single public static ip). I was a bit unclear on

Re: Debian libssl security (OpenSSH safe?)

2008-05-14 Thread Ted Unangst
On 5/14/08, Darrin Chandler [EMAIL PROTECTED] wrote: Sure. Lots of those keys out there already. So is something like ssh-vulnkey the right approach? I do have a couple of users on one of my boxes. Mind, they're all good OpenBSD people and I really hope their keys didn't come from a debian

Re: Debian libssl security (OpenSSH safe?)

2008-05-14 Thread Otto Moerbeek
On Wed, May 14, 2008 at 07:43:25PM -0700, Darrin Chandler wrote: On Wed, May 14, 2008 at 10:22:11PM -0400, Ted Unangst wrote: On 5/14/08, Ben Calvert [EMAIL PROTECTED] wrote: On May 14, 2008, at 5:22 PM, Darrin Chandler wrote: Are you sure that's a decent analysis? If you have a

AltQ only catching in one queue

2008-05-14 Thread Steve B
My employer has allowed me to work from home one day per week. As part of the agreement I had to take home a VoIP phone that connects me to work. This seemed like a good excuse to setup AltQ on my OBSD box. I read the man page, the FAQ and Jacek Artymiak's book. I built the queues and loaded the

Re: AltQ only catching in one queue

2008-05-14 Thread Chris Smith
On Thursday 15 May 2008, Steve B wrote: pass out on $ext_if inet proto tcp from $ext_if to any flags S/SA keep state queue ( general, tcp_ack ) last matching rule ? -- Chris