Re: soekris 5501, ral(4) and 4.5-current

2009-04-26 Thread Markus Hennecke
FRLinux wrote: On Sat, Apr 25, 2009 at 11:17 PM, Jochem Kossen jochem.kos...@gmail.com wrote: Interesting, I've got exactly the same problem with an rt2860. I thought it was just bad hardware (suspecting the rt2860), or temperature issues, and pulled out the card. The machine's been rock-solid

Re: alternate shell not running

2009-04-26 Thread Otto Moerbeek
On Sat, Apr 25, 2009 at 06:14:39PM -0700, Philip Guenther wrote: On Sat, Apr 25, 2009 at 5:48 PM, Aaron Martinez m...@proficuous.com wrote: So: 1) what does the /etc/passwd entry for one of these users look like? lgf:*:1010:1::/home/ght:/usr/local/bbox/bin/login_script Are there

Re: alternate shell not running

2009-04-26 Thread Eric Furman
On Sat, 25 Apr 2009 23:13:26 -0400, Frank Bax f...@sympatico.ca said: Aaron Martinez wrote: Aaron Martinez wrote: On Sat, Apr 25, 2009 at 3:39 PM, Aaron Martinez m...@proficuous.com wrote: 1) what does the /etc/passwd entry for one of these users look like?

Re: 4.5 soon, but ...

2009-04-26 Thread patrick keshishian
On Sat, Apr 25, 2009 at 9:49 PM, J.C. Roberts list-...@designtools.org wrote: On Sat, 25 Apr 2009 21:34:55 -0600 Theo de Raadt dera...@cvs.openbsd.org wrote: So OpenBSD 4.5 will be available soon, next weekend. I feel that I should urge people to avoid the new snapshots until after they

Re: 4.5 soon, but ...

2009-04-26 Thread Otto Moerbeek
On Sun, Apr 26, 2009 at 12:43:24AM -0700, patrick keshishian wrote: On Sat, Apr 25, 2009 at 9:49 PM, J.C. Roberts list-...@designtools.org wrote: On Sat, 25 Apr 2009 21:34:55 -0600 Theo de Raadt dera...@cvs.openbsd.org wrote: So OpenBSD 4.5 will be available soon, next weekend. I

Re: 4.5 soon, but ...

2009-04-26 Thread J.C. Roberts
On Sun, 26 Apr 2009 00:43:24 -0700 patrick keshishian pkesh...@gmail.com wrote: On Sat, Apr 25, 2009 at 9:49 PM, J.C. Roberts list-...@designtools.org wrote: On Sat, 25 Apr 2009 21:34:55 -0600 Theo de Raadt dera...@cvs.openbsd.org wrote: So OpenBSD 4.5 will be available soon, next

Re: svnd is incredible slow... somebody else notice that?

2009-04-26 Thread sebastian . rother
Well bonnie++ finished... Setup + bonie++ result + dmesg The result is HW indipendent for me (compareable results on am64 too on another box). I changed the HDD as well (even I doubt it will help) with no improvement to the writing speed. Setup: OpenBSD-Current, i386 (somebody knows why 1GB

Re: OpenBSD on Sun Netra X1

2009-04-26 Thread vext01
On Sun, Apr 26, 2009 at 01:34:50AM +0200, Christopher Intemann wrote: However could not find any information if I could boot from discs connected via a PCI-IDE controller. Read up on these EEPROM commands: probe-ide-all show-disks They should help. -- Best Regards Edd Barrett (Freelance

Re: OpenBSD on Sun Netra X1

2009-04-26 Thread vext01
Hi, On Sun, Apr 26, 2009 at 01:34:50AM +0200, Christopher Intemann wrote: Hi, does anyone here have experience with OpenBSD on a Sun Netra X1 server? My backup server is one of these. I read somewhere that it does only support hard drives up to 137GB of size. Is there any way to avoid this

Re: soekris 5501, ral(4) and 4.5-current

2009-04-26 Thread Tom
2009/4/25 FRLinux frli...@gmail.com: On Sat, Apr 25, 2009 at 11:17 PM, Jochem Kossen jochem.kos...@gmail.com wrote: Interesting, I've got exactly the same problem with an rt2860. I thought it was just bad hardware (suspecting the rt2860), or temperature issues, and pulled out the card. The

Re: RIT's mirror

2009-04-26 Thread Stuart Henderson
On 2009-04-25, eagir...@cox.net eagir...@cox.net wrote: The RIT mirror is providing 4.2 sets from it's snapshots directory. Should they still be listed? snapshots aren't compulsory for a mirror, and they are providing the required last two releases. that said, given that there is another mirror

Re: Transparent firewall (bridge) with DMZ + LAN

2009-04-26 Thread FRLinux
On Sun, Apr 26, 2009 at 1:39 AM, Daniel Ouellet dan...@presscom.net wrote: But he is suggesting to avoid it at any cost when possible. Sorry but I do not understand why? Cheers, Steph

Re: soekris 5501, ral(4) and 4.5-current

2009-04-26 Thread Stuart Henderson
On 2009-04-25, Tom tdmurp...@gmail.com wrote: I have a ral(4) acting as a hostap. The problems began since ugrading from Feb 28th snapshot to April 10th (and higher). I have a Soekris 5501. I bought 2 different ral(4) PCI cards, one is a RT2661 and the other is a RT2860 (Planex GW-DS3300N).

Re: soekris 5501, ral(4) and 4.5-current

2009-04-26 Thread Tom
On 2009-04-26. Stuart Henderson wrote: On 2009-04-25, Tom wrote: I have a ral(4) acting as a hostap. The problems began since ugrading from Feb 28th snapshot to April 10th (and higher). I have a Soekris 5501. I bought 2 different ral(4) PCI cards, one is a RT2661 and the other is a RT2860

ubt(4) and Internet access

2009-04-26 Thread Thomas Pfaff
Hi. Is it possible to use ubt(4) to connect to my cellphone and then create a ppp interface so I can gain Internet access? My MSI Wind has a built-in USB bluetooth adapter that connects to ubt(4): $ dmesg | grep ubt0 ubt0 at uhub4 port 1 Micro Star International Bluetooth rev 2.00/31.64

Re: 4.5 soon, but ...

2009-04-26 Thread Maurice Janssen
Theo de Raadt wrote: So OpenBSD 4.5 will be available soon, next weekend. I feel that I should urge people to avoid the new snapshots until after they give 4.5 a try, because a few of us have been improving the system installer a little bit. It is night and day. Therefore; don't try to

Re: OpenBSD on Sun Netra X1

2009-04-26 Thread Christopher Intemann
On Sun, Apr 26, 2009 at 12:14 PM, vex...@gmail.com wrote: On Sun, Apr 26, 2009 at 01:34:50AM +0200, Christopher Intemann wrote: However could not find any information if I could boot from discs connected via a PCI-IDE controller. Read up on these EEPROM commands: probe-ide-all

Re: ubt(4) and Internet access

2009-04-26 Thread Thomas Pfaff
On Sun, 26 Apr 2009 13:41:56 +0200 Thomas Pfaff tpf...@tp76.info wrote: Hi. Is it possible to use ubt(4) to connect to my cellphone and then create a ppp interface so I can gain Internet access? My MSI Wind has a built-in USB bluetooth adapter that connects to ubt(4): $ dmesg | grep ubt0

Re: svnd is incredible slow... somebody else notice that?

2009-04-26 Thread sebastian . rother
Bonnie is retarded and proves nothing one way or another. Typical KY for masturbation. Well then simply tell me how to test/benchmark it? You could test the svnd on your own BTW because I doubt it's HW related... I asked you serval times to provide me some hints of what you may need related

Re: svnd is incredible slow... somebody else notice that?

2009-04-26 Thread Marco Peereboom
Bonnie is retarded and proves nothing one way or another. Typical KY for masturbation. On Sun, Apr 26, 2009 at 12:04:04PM +0200, sebastian.rot...@jpberlin.de wrote: Well bonnie++ finished... Setup + bonie++ result + dmesg The result is HW indipendent for me (compareable results on am64

Re: RadiusClient

2009-04-26 Thread Bruno Galindro da Costa
Stuart / Claudio, Thank's very much for anwser my questions. I have read about ppp(8) on OpenBSD and it have a Radius Support, but I don't know how can I use them with pptpd. I need to authenticate the users of my network that uses pptpd on an Active Directory base. On Linux (Ubuntu /

Re: svnd is incredible slow... somebody else notice that?

2009-04-26 Thread Tobias Ulmer
On Sun, Apr 26, 2009 at 03:15:02PM +0200, sebastian.rot...@jpberlin.de wrote: Bonnie is retarded and proves nothing one way or another. Typical KY for masturbation. Well then simply tell me how to test/benchmark it? You could test the svnd on your own BTW because I doubt it's HW

Re: isdn/dsl pci cards? (I4b)

2009-04-26 Thread Tobias Ulmer
On Sun, Apr 26, 2009 at 01:15:13AM +0200, Christopher Intemann wrote: On Sun, Apr 26, 2009 at 12:28 AM, Stuart Henderson s...@spacehopper.orgwrote: However, I did not find much information about which cards are actually supported by OpenBSD? Furthermore, I want to log isdn traffic.

Re: soekris 5501, ral(4) and 4.5-current

2009-04-26 Thread Jochem Kossen
On Sun, Apr 26, 2009 at 12:20:52PM +0100, Tom wrote: On 2009-04-26. Stuart Henderson wrote: On 2009-04-25, Tom wrote: I have a ral(4) acting as a hostap. The problems began since ugrading from Feb 28th snapshot to April 10th (and higher). I have a Soekris 5501. I bought 2 different

Re: isdn/dsl pci cards? (I4b)

2009-04-26 Thread Paul Ouderkirk
On Sat, Apr 25, 2009 at 11:47 AM, Christopher Intemann intem...@gmail.com wrote: Hi, I just got myself a Sun Netra X1 Sparc64 1U server. I wonder if I could use it to either connect to my DSL provider directly (using a DSL-PCI-card, such as this one: http://tinyurl.com/cqddxj). The Netra X1

Re: ubt(4) and Internet access

2009-04-26 Thread J.C. Roberts
On Sun, 26 Apr 2009 15:08:05 +0200 Thomas Pfaff tpf...@tp76.info wrote: On Sun, 26 Apr 2009 13:41:56 +0200 Thomas Pfaff tpf...@tp76.info wrote: Hi. Is it possible to use ubt(4) to connect to my cellphone and then create a ppp interface so I can gain Internet access? My MSI Wind has a

Re: OpenBSD on Sun Netra X1

2009-04-26 Thread Paul Ouderkirk
On Sun, Apr 26, 2009 at 8:59 AM, Christopher Intemann intem...@gmail.com wrote: On Sun, Apr 26, 2009 at 12:14 PM, vex...@gmail.com wrote: On Sun, Apr 26, 2009 at 01:34:50AM +0200, Christopher Intemann wrote: However could not find any information if I could boot from discs connected via a

Re: svnd is incredible slow... somebody else notice that?

2009-04-26 Thread Sebastian Rother
Why exactly does showing benchmark output make you think svnd gets any faster? Do you believe the developers are going to look at your numbers and fix it for you because your numbers show that the cpu sits around doing nothing all day? svnds are used for make release as well But I'm sure

Re: ubt(4) and Internet access

2009-04-26 Thread Paul de Weerd
The cable setup works quite well, and has for years. Nokia phones show up as ucom (I've tried several models (including the 6233), they all worked so far - in many cases you have to select the 'default' USB mode). See http://www.weirdnet.nl/openbsd/gprs/. The phone generally picks the best

Re: svnd is incredible slow... somebody else notice that?

2009-04-26 Thread Marco Peereboom
You are retarded and unable to figure out what is going on. Spouting horeshit as usual. Seriously just go away. On Sun, Apr 26, 2009 at 06:00:04PM +0200, Sebastian Rother wrote: Why exactly does showing benchmark output make you think svnd gets any faster? Do you believe the developers

Re: ubt(4) and Internet access

2009-04-26 Thread Thomas Pfaff
On Sun, 26 Apr 2009 18:24:27 +0200 Paul de Weerd we...@weirdnet.nl wrote: The cable setup works quite well, and has for years. Nokia phones show up as ucom (I've tried several models (including the 6233), they all worked so far - in many cases you have to select the 'default' USB mode). See

Re: svnd is incredible slow... somebody else notice that?

2009-04-26 Thread Tobias Ulmer
On Sun, Apr 26, 2009 at 06:00:04PM +0200, Sebastian Rother wrote: Why exactly does showing benchmark output make you think svnd gets any faster? Do you believe the developers are going to look at your numbers and fix it for you because your numbers show that the cpu sits around doing

Re: Question about security

2009-04-26 Thread Nick Holland
Jean-Francois wrote: Hi All, My question is in two parts. First considering the default install, assuming that one box should be only used for exapample as a firewall, how good is the security level ? what kind of rating system are you looking for? My answer is, better than anything

Re: Question about security

2009-04-26 Thread bofh
You have to think carefully about the question you are asking. If there are two known remote exploits, what do you think any studies would show you? Less exploits? More exploits? If more, wouldn't that make it into the known exploits list, unless it's a private study where nobody can get

Re: svnd is incredible slow... somebody else notice that?

2009-04-26 Thread Ted Unangst
On Sun, Apr 26, 2009 at 12:00 PM, Sebastian Rother sebastian.rot...@jpberlin.de wrote: Why exactly does showing benchmark output make you think svnd gets any faster? Do you believe the developers are going to look at your numbers and fix it for you because your numbers show that the cpu sits

Re: Question about security

2009-04-26 Thread carlos
Hi, First considering the default install, assuming that one box should be only used for exapample as a firewall, how good is the security level ? I mean I know there are only 2 remote holes in 10 years, but my qustion is do we have any experience about the level of security such as studies

4.4 hangs on amd64 if installed on sd1

2009-04-26 Thread Michele Zaffalon
Hi, I am trying to install OpenBSD 4.4 amd64 -release onto sd1. I then reboot the computer and type boot hd1a:/bsd.mp at the boot prompt but the computer hands with the line root device:. As the keyboard is dead, I cannot do anything else but reboot. With exactly the same partitions, OpenBSD 4.4

Re: ubt(4) and Internet access

2009-04-26 Thread FRLinux
On Sun, Apr 26, 2009 at 5:41 PM, Thomas Pfaff tpf...@tp76.info wrote: I'm kind of looking for a yes or no answer, so I can either drop it or do more research. Looks like a yes, recent page too: http://www.daybefore.net/bluetooth_ppp.html Cheers, Steph

Wireless Freeze

2009-04-26 Thread Giancarlo Razzolini
Hi Guys, I finally got rid of my old access point and bought an internal pci wireless card to put on my openbsd firewall. But i've been having some weird freezes. It simply stop sending packets for some seconds, and then get back transmitting then, like nothing have happened. There ain't

Re: 4.4 hangs on amd64 if installed on sd1

2009-04-26 Thread Joe Gidi
Hi, I am trying to install OpenBSD 4.4 amd64 -release onto sd1. I then reboot the computer and type boot hd1a:/bsd.mp at the boot prompt but the computer hands with the line root device:. As the keyboard is dead, I cannot do anything else but reboot. With exactly the same partitions,

Re: Transparent firewall (bridge) with DMZ + LAN

2009-04-26 Thread Felipe Alfaro Solana
On Sat, Apr 25, 2009 at 3:57 PM, Henning Brauer lists-open...@bsws.dewrote: * openbsder openbs...@gmail.com [2009-04-24 12:19]: Recently, it has been suggested that a transparent firewall implementation is ideal where possible. But as far as I understand, transparency is only available

Re: ubt(4) and Internet access

2009-04-26 Thread Paul de Weerd
On Sun, Apr 26, 2009 at 06:41:19PM +0200, Thomas Pfaff wrote: | I still haven't gotten around to getting this to work with bluetooth, | please let the list know once you do. | | Yes, I've been waiting for you to write about that ;-) I suppose I | have to get the thing to register as a serial

Re: 4.4 hangs on amd64 if installed on sd1

2009-04-26 Thread Michele Zaffalon
Your dmesg attachment was stripped, but I have to ask... if you installed to sd1, why are you now trying to boot from hd1? -- Joe Gidi j...@entropicblur.com The attached file seems to contain also part of the dmegs from previous boot-ups: a few page down you see the installation from the

Re: Transparent firewall (bridge) with DMZ + LAN

2009-04-26 Thread Nenhum_de_Nos
On Sun, April 26, 2009 08:01, FRLinux wrote: On Sun, Apr 26, 2009 at 1:39 AM, Daniel Ouellet dan...@presscom.net wrote: But he is suggesting to avoid it at any cost when possible. Sorry but I do not understand why? Cheers, Steph me too. really curious about his. matheus -- We will call

Re: svnd is incredible slow... somebody else notice that?

2009-04-26 Thread Sebastian Rother
On Sun, 26 Apr 2009 11:37:24 -0500 Marco Peereboom sl...@peereboom.us wrote: You are retarded and unable to figure out what is going on. Spouting horeshit as usual. Seriously just go away. From one retard to another: Go and fix the retarded pf code or whatever except of talking in such a way

Re: OpenBSD on Sun Netra X1

2009-04-26 Thread Christopher Intemann
On Sun, Apr 26, 2009 at 5:56 PM, Paul Ouderkirk pouderk...@gmail.comwrote: However, as it comes without hard-drives, I was wondering if i would have to buy a drive 137GB or if I could give a 500Gig drive and a PCI-IDE Card a try. The Netra X1 has no PCI slots.

Re: 4.5 soon, but ...

2009-04-26 Thread patrick keshishian
On Sun, Apr 26, 2009 at 2:48 AM, J.C. Roberts list-...@designtools.org wrote: On Sun, 26 Apr 2009 00:43:24 -0700 patrick keshishian pkesh...@gmail.com wrote: On Sat, Apr 25, 2009 at 9:49 PM, J.C. Roberts list-...@designtools.org wrote: On Sat, 25 Apr 2009 21:34:55 -0600 Theo de Raadt

Re: svnd is incredible slow... somebody else notice that?

2009-04-26 Thread Marco Peereboom
You know what, I actually have figured out a way to make softraid crypto go faster but I'll hang on to that until I figure out how to license code in a way that excludes you using it. I might call it the sebatianrotherisfuckingretardedGPL license. I swear you make my appetite to hack diminish

Re: svnd is incredible slow... somebody else notice that?

2009-04-26 Thread Tony Abernethy
sebastian.rot...@jpberlin.de wrote: Bonnie is retarded and proves nothing one way or another. Typical KY for masturbation. Well then simply tell me how to test/benchmark it? You could test the svnd on your own BTW because I doubt it's HW related... I asked you serval times to

Re: svnd is incredible slow... somebody else notice that?

2009-04-26 Thread Jacob Yocom-Piatt
Sebastian Rother wrote: On Sun, 26 Apr 2009 11:37:24 -0500 Marco Peereboom sl...@peereboom.us wrote: You are retarded and unable to figure out what is going on. Spouting horeshit as usual. Seriously just go away. From one retard to another: Go and fix the retarded pf code or

Re: svnd is incredible slow... somebody else notice that?

2009-04-26 Thread Neal Hogan
On Sun, Apr 26, 2009 at 1:52 PM, Sebastian Rother sebastian.rot...@jpberlin.de wrote: On Sun, 26 Apr 2009 11:37:24 -0500 Marco Peereboom sl...@peereboom.us wrote: You are retarded and unable to figure out what is going on. Spouting horeshit as usual. Seriously just go away. From one

Re: Transparent firewall (bridge) with DMZ + LAN

2009-04-26 Thread bofh
Anyone who puts in an inline IDS is a damned idiot. D stands for detection, so you should always use a tap or something else. Only IPS should be inline. You obviously do not know what you're talking about. Things like NAT have their uses to, but people who design networks including DMZs and

Re: ubt(4) and Internet access

2009-04-26 Thread Vadim Zhukov
On 26 April 2009 c. 15:41:56 Thomas Pfaff wrote: Hi. Is it possible to use ubt(4) to connect to my cellphone and then create a ppp interface so I can gain Internet access? My MSI Wind has a built-in USB bluetooth adapter that connects to ubt(4): $ dmesg | grep ubt0 ubt0 at uhub4 port 1

Re: svnd is incredible slow... somebody else notice that?

2009-04-26 Thread Tony Abernethy
Sebastian Rother wrote: A 16GB backup of /home takes more then 10 hrs to restore. It's like ataching the device, rsync -av SOURCE:/FOO . and wait for 10+ hours. That sounds like you are doing something wrong. And then you come whining here because you do not know how to write to a disk? The

relayd and session cookies

2009-04-26 Thread Magnus Hultman
We have a pair of OpenBSD boxes running 4.5/relayd, loadbalancing two webservers. The webservers identify each session with a unique cookie returned to the client. We have tried to use the hash cookie directive in relayd.conf to force the correct session to the correct webserver, but it is not

Re: Wireless Freeze

2009-04-26 Thread patrick keshishian
On Sun, Apr 26, 2009 at 11:18 AM, Giancarlo Razzolini linux-...@onda.com.br wrote: Hi Guys, B I finally got rid of my old access point and bought an internal pci wireless card to put on my openbsd firewall. But i've been having some B weird freezes. It simply stop sending packets for some

Re: Question about security

2009-04-26 Thread Han Boetes
To quote someone a lot smarter than me: Program testing can be used to show the presence of bugs, but never to show their absence! -- Edsger Dijkstra, [1972] That should answer your question. # Han

Re: ubt(4) and Internet access

2009-04-26 Thread Thomas Pfaff
On Sun, 26 Apr 2009 19:17:45 +0100 FRLinux frli...@gmail.com wrote: On Sun, Apr 26, 2009 at 5:41 PM, Thomas Pfaff tpf...@tp76.info wrote: I'm kind of looking for a yes or no answer, so I can either drop it or do more research. Looks like a yes, recent page too:

4.4 install hangs on eee pc 900

2009-04-26 Thread Mats Blomstrand
Hi Installing 4.4 on my eeepc 900 result in a system that cant boot ( install is working just fine). The message from kernel was ...rewiring... (sorry, all i can remember now) Is there anyone that can offer a clue about how to get it to work? PLEASE, the ubuntu thing I got going now is

Re: Wireless Freeze

2009-04-26 Thread Giancarlo Razzolini
patrick keshishian escreveu: On Sun, Apr 26, 2009 at 11:18 AM, Giancarlo Razzolini linux-...@onda.com.br wrote: Hi Guys, B I finally got rid of my old access point and bought an internal pci wireless card to put on my openbsd firewall. But i've been having some B weird freezes. It simply

Re: Transparent firewall (bridge) with DMZ + LAN

2009-04-26 Thread Felipe Alfaro Solana
On Sun, Apr 26, 2009 at 9:21 PM, bofh goodb...@gmail.com wrote: Anyone who puts in an inline IDS is a damned idiot. D stands for detection, so you should always use a tap or something else. Only IPS should be inline. You should provide arguments, not empty words. At least, if you are

Re: Question about security

2009-04-26 Thread Jean-Francois
Hi This is clear and I truly agree, now maybe not everyone will be capable of breaking into the default system openbsd (this was my first question) and evade from chroot (my second question) therefore the other way around to ask about that concern would be which probability do you estimate for

Re: Question about security

2009-04-26 Thread Jean-Francois
Hi Thanks for your answer. bofh a icrit : You have to think carefully about the question you are asking. If there are two known remote exploits, what do you think any studies would show you? Less exploits? More exploits? I mean what is the experience. If more, wouldn't that make it into

Re: svnd is incredible slow... somebody else notice that?

2009-04-26 Thread Tony Abernethy
If the way you do something take too long. Seems like that is a bug. Most likely in the way you are doing it. A lot of things, you can do them wrong and get away with it for a while. Getting away with doing something wrong is far from proof that you were doing it right. I reserve the right to be

Re: 4.4 install hangs on eee pc 900

2009-04-26 Thread Joe Gidi
Hi Installing 4.4 on my eeepc 900 result in a system that cant boot ( install is working just fine). The message from kernel was ...rewiring... (sorry, all i can remember now) Is there anyone that can offer a clue about how to get it to work? PLEASE, the ubuntu thing I got going now

Re: 4.4 install hangs on eee pc 900

2009-04-26 Thread Joe Gidi
Hi Installing 4.4 on my eeepc 900 result in a system that cant boot ( install is working just fine). The message from kernel was ...rewiring... (sorry, all i can remember now) Is there anyone that can offer a clue about how to get it to work? PLEASE, the ubuntu thing I got going now

Re: svnd is incredible slow... somebody else notice that?

2009-04-26 Thread Sebastian Rother
If the way you do something take too long. Seems like that is a bug. Most likely in the way you are doing it. A lot of things, you can do them wrong and get away with it for a while. Getting away with doing something wrong is far from proof that you were doing it right. That's for sure

Re: Question about security

2009-04-26 Thread FRLinux
On Sun, Apr 26, 2009 at 10:43 PM, Jean-Francois jfsimon1...@gmail.com wrote: I intend to use the box as a simple firewall so I do not intend to have possible break into. The simple task is NAT rule So this is nat + firewalling, not one task, two. Sorry I don't understand. I have just simple

Re: Question about security

2009-04-26 Thread Jean-Francois
Good evening, Thanks for your answer, my comments within. Regards, Jean-Frangois Nick Holland a icrit : Jean-Francois wrote: Hi All, My question is in two parts. First considering the default install, assuming that one box should be only used for exapample as a firewall, how good is the

Re: 4.4 install hangs on eee pc 900

2009-04-26 Thread Thomas Pfaff
On Sun, 26 Apr 2009 23:07:06 +0200 Mats Blomstrand mats.blomstr...@gmail.com wrote: Hi Installing 4.4 on my eeepc 900 result in a system that cant boot ( install is working just fine). The message from kernel was ...rewiring... (sorry, all i can remember now) Is there anyone that

Re: svnd is incredible slow... somebody else notice that?

2009-04-26 Thread Tony Abernethy
Sebastian Rother wrote: ...but I somehow think I know how to use vnconfig. and it takes too long. way too long. Methinks there's something wrong with that logic. Does the excess time have something to do with bugs in pf? If so what? If not, where is the relevance? Seems like you are being

Re: Question about security

2009-04-26 Thread FRLinux
On Sun, Apr 26, 2009 at 11:08 PM, Jean-Francois jfsimon1...@gmail.com wrote: This is just to have the taste of how good is the actual achievement of security in openbsd. Well, reading from the archives, that should give you a fairly good taste. Sorry please tell me how to proceed then ? For

Auto allocations in 4.6 with big drives and bios limitations

2009-04-26 Thread Daniel Ouellet
Hi, First off. I wanted to take a little time to thank you for making the install even simpler and faster. Who would have thought that a simple install could be made simpler. You guys did it again! On a side note, I have a question on the auto partition as I see this changing in very nice

Re: Question about security

2009-04-26 Thread Paul M
You need to understand that you're asking questions for which there is no specific answer. I think Nick's first response to your question answered it best - OpenBSD would be better than anything else. If you were to ask specific, detailed questions about specific attack vectors, then specific

Re: Transparent firewall (bridge) with DMZ + LAN

2009-04-26 Thread bofh
It's called going off on a related tangent - whenever I hear people talking about using something because someone has published a paper and here's all these smart people using it (transparent bridging, etc, or in my case natting externally accessible/routable hosts), it pisses me off. People use

Re: Question about security

2009-04-26 Thread Tony Abernethy
FRLinux wrote: On Sun, Apr 26, 2009 at 11:08 PM, Jean-Francois jfsimon1...@gmail.com wrote: This is just to have the taste of how good is the actual achievement of security in openbsd. Well, reading from the archives, that should give you a fairly good taste. Sorry please tell me

Cannot load Zend/IonCube File not an ELF object

2009-04-26 Thread unix3
HI, I tried installing seperately Zend Optimizer, or IonCube ... but the error that I get is Failed loading /var/www/usr/lib/php/ZendExtensionManager.so: File not an ELF object Failed loading /var/www/usr/lib/php/ZendOptimizer.so: File not an ELF object The error is the same for IonCube

Re: Transparent firewall (bridge) with DMZ + LAN

2009-04-26 Thread Felipe Alfaro Solana
On Mon, Apr 27, 2009 at 1:10 AM, bofh goodb...@gmail.com wrote: It's called going off on a related tangent - whenever I hear people talking about using something because someone has published a paper and here's all these smart people using it (transparent bridging, etc, or in my case natting

Re: Transparent firewall (bridge) with DMZ + LAN

2009-04-26 Thread Tony Abernethy
bofh wrote: ... When you're told there's a better way to do things, pay attention, instead of telling the experts here (and I'm talking about the openbsd developers in this thread - not me, I'm in management now, no brain cells left) ... old age is my excuse ... but it pays to pay attentiion

Re: svnd is incredible slow... somebody else notice that?

2009-04-26 Thread Pau
Hello, I have an old usb drive encrypted with /dev/arandom (much slower than zero) which I mount without softdep I just finished a full backup of 43.98G It took 1h33min He is doing something wrong. And you know... if in my work, somebody comes to me and asks for a favour, I make it, no

Re: OpenBSD on Sun Netra X1

2009-04-26 Thread Daniel Ouellet
Christopher Intemann wrote: On Sun, Apr 26, 2009 at 12:14 PM, vex...@gmail.com wrote: On Sun, Apr 26, 2009 at 01:34:50AM +0200, Christopher Intemann wrote: However could not find any information if I could boot from discs connected via a PCI-IDE controller. Read up on these EEPROM

Re: OpenBSD on Sun Netra X1

2009-04-26 Thread Daniel Ouellet
Paul Ouderkirk wrote: On Sun, Apr 26, 2009 at 8:59 AM, Christopher Intemann intem...@gmail.com wrote: On Sun, Apr 26, 2009 at 12:14 PM, vex...@gmail.com wrote: On Sun, Apr 26, 2009 at 01:34:50AM +0200, Christopher Intemann wrote: However could not find any information if I could boot from

Re: Transparent firewall (bridge) with DMZ + LAN

2009-04-26 Thread patrick keshishian
On Sun, Apr 26, 2009 at 4:10 PM, bofh goodb...@gmail.com wrote: It's called going off on a related tangent - whenever I hear people talking about using something because someone has published a paper and here's all these smart people using it (transparent bridging, etc, or in my case natting

Re: relayd and session cookies

2009-04-26 Thread James Records
Can you show us the relayd protocol definition your using? J On Sun, Apr 26, 2009 at 12:32 PM, Magnus Hultman magnu...@gmail.com wrote: We have a pair of OpenBSD boxes running 4.5/relayd, loadbalancing two webservers. The webservers identify each session with a unique cookie returned to the

Re: OpenBSD on Sun Netra X1

2009-04-26 Thread Daniel Ouellet
OK, Here I put a little bit of details on how to setup that box from scratch. I guess I spend a little bit of time putting it together because I also I remember my first one, years ago, where I did plenty of Google before I could set one up. It wasn't a 5 minutes process then, but it is

Re: Auto allocations in 4.6 with big drives and bios limitations

2009-04-26 Thread Nick Holland
Daniel Ouellet wrote: Hi, First off. I wanted to take a little time to thank you for making the install even simpler and faster. Who would have thought that a simple install could be made simpler. You guys did it again! On a side note, I have a question on the auto partition as I see

Re: Transparent firewall (bridge) with DMZ + LAN

2009-04-26 Thread Daniel Ouellet
patrick keshishian wrote: On Sun, Apr 26, 2009 at 4:10 PM, bofh goodb...@gmail.com wrote: It's called going off on a related tangent - whenever I hear people talking about using something because someone has published a paper and here's all these smart people using it (transparent bridging,

Re: Auto allocations in 4.6 with big drives and bios limitations

2009-04-26 Thread Daniel Ouellet
Nick Holland wrote: The question is WHICH 137GB limit (or 128GB limit as I'd like to call it, but even I'm finding myself rounding up to marketing numbers, but I digress. again). Touchee. (; 137, 128, who is counting right? I used allocation space from disklabel. Now raw or usable, lets not

Re: relayd and session cookies

2009-04-26 Thread Magnus Hultman
James Records wrote: Can you show us the relayd protocol definition your using? J This cookie hash seems to be working in such way that the same cookie is always forwarded to the same backend, but that backend is not always the correct one, i.e. not the same backend that issued the cookie.