Re: blocked FIN packets

2010-12-23 Thread Daniel E. Hassler
Timing. State has probably timed out before the blocked packets are received. Log the whole conversation - both ways for both Firefox and lynx. On 12/23/10 12:47 AM, Jan Stary wrote: On Dec 22 19:54:28, Forman, Jeffrey wrote: On Wed, Dec 22, 2010 at 5:41 PM, Jan Staryh...@stare.cz wrote:

Re: Soekris equivalent

2008-12-17 Thread Daniel E. Hassler
http://www.logicsupply.com/products/ms_9832 Spec says it has dual LAN ports. Dan bofh wrote: On Wed, Dec 17, 2008 at 5:47 PM, Martin Schrvder mar...@oneiros.de wrote: Btw: Has anybody seen Intel Atom boards with 1 NIC for use as routers/firewalls? Intel won't allow it.

Re: dmesg Asus EEE Box 202

2008-12-03 Thread Daniel E. Hassler
Below is dmesg.boot from an Intel D945GCLF2 - MP kernel sees 4 CPU's ;) OpenBSD 4.4-stable (GENERIC.MP) #0: Mon Nov 24 20:06:06 PST 2008 [EMAIL PROTECTED]:/sys/arch/i386/compile/GENERIC.MP RTC BIOS diagnostic error 80clock_battery cpu0: Intel(R) Atom(TM) CPU 330 @ 1.60GHz (GenuineIntel

packages question

2007-01-29 Thread Daniel E. Hassler
Hi, Is it reasonable to assume all of the dependencies for a package should also be available as either packages or via ports? I'm trying to install p5-Mail-Box-2.018. - p5-Mail-Box-2.018:Can't find p5-Convert-BinHex-1.119 I can't find p5-Convert-BinHex-1.119 in either packages or ports.

Re: openssh errata

2006-10-01 Thread Daniel E. Hassler
Humm I just upgraded to 3.9-STABLE on 9/29/06 and ssh/sshd still show OpenSSH_4.3 Martin Toft wrote: nikns wrote: http://www.openssh.com/report.html *patches and notes regarding OpenSSH* points to http://www.openbsd.org/errata.html Shouldn't there be seperate errata for

Re: openssh errata

2006-10-01 Thread Daniel E. Hassler
Ah - it's 4.4 now! Daniel E. Hassler wrote: Humm I just upgraded to 3.9-STABLE on 9/29/06 and ssh/sshd still show OpenSSH_4.3 Martin Toft wrote: nikns wrote: http://www.openssh.com/report.html *patches and notes regarding OpenSSH* points to http://www.openbsd.org/errata.html

Re: scrub reassemble tcp and nat causes problems with some sites

2006-07-20 Thread Daniel E. Hassler
19 19:42:37 obsd38 /bsd: TCP 192.168.1.14:65108 192.168.1.14:65108 17.250.248.95:80 [lo=4276925920 high=4276942304 win=65535 modulator=0 wscale=0] [lo=708430922 high=708496457 win=16384 modulator=0 wscale=0] 9:4 A -Dan Daniel E. Hassler wrote: Hi Walter, I've seen this behavior also. When

Re: scrub reassemble tcp and nat causes problems with some sites

2006-07-20 Thread Daniel E. Hassler
What is 'modulate tcp'? modulate state works fine. I get these errors only with scrub's reassemble tcp option I originally assumed it was an Apple problem since I only had trouble with the OS X Software Update feature. Going back to the beginning of this thread - Walter Haidinger appears to

Re: scrub reassemble tcp and nat causes problems with some sites

2006-07-19 Thread Daniel E. Hassler
Hi Walter, I've seen this behavior also. When I 'set debug loud' I got more information recorded via syslog. Some stuff about RFC1323 and bad-timestamp errors. Below is a section of a pf.conf file. It would be interesting to know if you get similar results with set debug loud when trying to

Re: scrub reassemble tcp and nat causes problems with some sites

2006-07-19 Thread Daniel E. Hassler
obsd38 /bsd: TCP 192.168.1.14:65108 192.168.1.14:65108 17.250.248.95:80 [lo=4276925920 high=4276942304 win=65535 modulator=0 wscale=0] [lo=708430922 high=708496457 win=16384 modulator=0 wscale=0] 9:4 A -Dan Daniel E. Hassler wrote: Hi Walter, I've seen this behavior also. When I 'set debug loud

Re: more re: nfs openbsd setattr bug

2006-03-28 Thread Daniel E. Hassler
Messing with atime mtime like that will really confuse forensics folks. Could lead to false accusations. Otto Moerbeek wrote: On Tue, 28 Mar 2006, [EMAIL PROTECTED] wrote: I've run the little test script and it seemed to be fixed after I had patched my server to set VA_UTIMES_NULL when

Re: openbsd and the money -solutions

2006-03-23 Thread Daniel E. Hassler
I read that FTP is becoming far more popular than CDROMs as a means of obtaining OpenBSD. If this is because it's more convenient (vs. folks just being too cheap) then it might make sense to sell downloadable official (copyright Theo de Raadt) ISO images of releases as well as CDROMs. Yes,

Re: openbsd and the money -solutions

2006-03-23 Thread Daniel E. Hassler
Are you saying we can't propose anything better? I did not mean to step on another sacred cow - I really only wanted to suggest redirecting this thread toward workable solutions. I don't know anything and I can prove it! Theo de Raadt wrote: I read that FTP is becoming far more popular

alternative for logging pf to syslog

2006-03-22 Thread Daniel E. Hassler
After reading the Packet Logging Through Syslog section of the pf FAQ I decided to try a different approach. Now that it's working (for my system and needs) I'm wondering 1) Is it (relatively) safe? 2) Is it useful to others? and 3) Did I re-invent something already available I missed? Here's

Re: alternative for logging pf to syslog

2006-03-22 Thread Daniel E. Hassler
How is the method described in the FAQ any less expensive? Seems to me it's just time delayed/batch oriented - still has the same expensive tcpdump | logger plus you pay a little interest for the cron initiated shell scripts. Theo de Raadt wrote: Isn't the load a function of what I choose