Re: pf and load balancing some webservers

2007-01-18 Thread Marian Hettwer
Hej Bryan, On Wed, 17 Jan 2007 16:32:43 -0500, Bryan Chapman [EMAIL PROTECTED] wrote: Do you have a pass rule along with that rdr rule? Nope. But IIRC it's pass in and pass out anyway by default. And I have no block rule (yet) :) Correct me if I'm wrong... ./Marian

Re: hoststated and 802.11

2007-01-18 Thread Pierre-Yves Ritschard
Sam Fourman Jr. wrote: I was reading about the new hoststated tool in OpenBSD, and wondering if it would be possible to use rssi as a link health check. Short answer: not at the moment. Scripting will soon be enabled and will allow you to specify external health checkers. Of course with RSSI

Re: Flash Player 9 on OpenBSD

2007-01-18 Thread RedShift
Frank Denis wrote: Le Wed, Jan 17, 2007 at 03:36:07PM -0500, Matthew Szudzik ecrivait : Adobe released Flash Player 9 for Linux today. (I know, it's not open-source, but it's sometimes hard to navigate the web without it.)

Re: pf and load balancing some webservers

2007-01-18 Thread Marian Hettwer
Hej Stuart, On Thu, 18 Jan 2007 09:52:15 +, Stuart Henderson [EMAIL PROTECTED] wrote: On 2007/01/18 09:17, Marian Hettwer wrote: That doesn't make sense to me... why should the destination reply directly to the origin? That's because rdr only rewrites the destination address, not the

Re: disk quota

2007-01-18 Thread Otto Moerbeek
On Thu, 18 Jan 2007, [EMAIL PROTECTED] wrote: guys i want ask to regarding quota this is my fstab: /dev/wd0a / ffs rw 1 1 /dev/sd0a /data ffs rw,nodev,nosuid 1 2 /dev/wd0g /home ffs rw,nodev,nosuid 1 2 /dev/wd0d /tmp ffs rw,nodev,nosuid 1 2 /dev/wd0e /usr ffs rw,nodev 1 2 /dev/wd0f /var

Re: pf and load balancing some webservers

2007-01-18 Thread Pierre-Yves Ritschard
PS.: although wrong thread, any chance to use the brand new hoststated in OpenBSD 4.0 ? If I get it via CVS, will it build? I don't like the idea to upgrade my production box to -CURRENT at all ;) What you can do is get the 4.0 source, then just checkout latest hoststated and hoststatectl

Re: disk quota

2007-01-18 Thread Otto Moerbeek
On Thu, 18 Jan 2007, Otto Moerbeek wrote: On Thu, 18 Jan 2007, [EMAIL PROTECTED] wrote: guys i want ask to regarding quota this is my fstab: /dev/wd0a / ffs rw 1 1 /dev/sd0a /data ffs rw,nodev,nosuid 1 2 /dev/wd0g /home ffs rw,nodev,nosuid 1 2 /dev/wd0d /tmp ffs rw,nodev,nosuid

delay_pools

2007-01-18 Thread Artyom Goryainov
Is any difference in two configs:NEINEIAcl office src 192.168.0.0/24NEINEIdelay_pools 1NEIdelay_class 1 1NEIdelay_access allow officeNEIdelay_parameters 12000/12000NEINEIdelay_pools 1NEIdelay_class 1 2NEIdelay_access allow officeNEIdelay_parameters 12000/12000 -1/-1NEI

Re: delay_pools

2007-01-18 Thread Artyom Goryainov
Excuse me, something wrong with my mailNEINEI-Original Message-NEIFrom: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Artyom GoryainovNEISent: Thursday, January 18, 2007 4:55 PMNEITo: misc@openbsd.orgNEISubject: delay_poolsNEINEIIs any difference in two configs:NEINEIAcl office

Re: 202 days Uptime in OpenBSD 3.6

2007-01-18 Thread Joe
Alexander Bochmann wrote: ...on Thu, Jan 11, 2007 at 08:42:35AM +0100, Marc Balmer wrote: hmm, why are people so proud of their uptimes when it only show they don't care for their systems? Bah, uptimes (is it that time of the year again?)... Last login: Sun Jan 7 19:22:19 2007 from

Re: Flash Player 9 on OpenBSD

2007-01-18 Thread Alexander Farber
Hi, On 1/17/07, Darrin Chandler [EMAIL PROTECTED] wrote: most real content in flash is about using the newest coolest features to get across what could easily be done in plain old HTML. Most clicked item on the web: Skip Intro sorry, you are wrong: there is some very cool flash stuff: like

Re: About pf states

2007-01-18 Thread Brian Candler
On Wed, Jan 17, 2007 at 02:29:13PM +0100, Samuel Mo?ux wrote: every state is a [src, dst, direction] tuple which lets pass [src - dst, direction ] and [dst - src, not(direction)], but not [ src- dst, not(direction) ] packets. Very clear - I think that description should go into pf.conf(5)

spamd started missing some fakes?

2007-01-18 Thread Seth Hanford
I've been VERY pleased with spamd performance on my system. My mail volume is so low (~300 msgs/day) that I may consider removing SpamAssassin, because spamd catches just about everything. I've gone from about 80 spam messages caught by SA to less than 2 caught, per day. Users are also reporting

Re: spamd started missing some fakes?

2007-01-18 Thread Darrin Chandler
On Thu, Jan 18, 2007 at 07:41:07AM -0500, Seth Hanford wrote: I've been VERY pleased with spamd performance on my system. My mail volume is so low (~300 msgs/day) that I may consider removing SpamAssassin, because spamd catches just about everything. I've gone from about 80 spam messages

Re: spamd started missing some fakes?

2007-01-18 Thread Matthew R. Dempsky
On Thu, Jan 18, 2007 at 07:41:07AM -0500, Seth Hanford wrote: 1) Does it make sense to have spamd discard malformed sender / recipient addresses? In this case, there is no envelope sender address at all, which I seem to recall violates an RFC Null return paths are used for delivery failure

Re: spamd started missing some fakes?

2007-01-18 Thread Stuart Henderson
On 2007/01/18 07:12, Darrin Chandler wrote: On Thu, Jan 18, 2007 at 07:41:07AM -0500, Seth Hanford wrote: 1) Does it make sense to have spamd discard malformed sender / recipient addresses? In this case, there is no envelope sender address at all, which I seem to recall violates an RFC I

isakmpd + carp + sasyncd failover problems

2007-01-18 Thread Kai Mosebach
Hi guys, we are using 3 Soekris firewall pairs in our companies setup to provide failover IPSec connections between 3 sites using OpenBSD 4.0 RELEASE. The big picture looks like this : A - B (passive) A - C (passive) B - C (passive) By now its basically working fine, but with the IPSec

Re: spamd started missing some fakes?

2007-01-18 Thread Seth Hanford
Stuart Henderson wrote: RFC2821 6.1 - also see 3.7, 4.5.5: If there is a delivery failure after acceptance of a message, the receiver-SMTP MUST formulate and mail a notification message. This notification MUST be sent using a null () reverse path in the envelope. - do not

spamd question

2007-01-18 Thread Martin
Hello. I'm using spamd but am noticing that some SPAM is still coming though It's probably more dev but I don't like posting to the dev/tech lists. If the ideas/info have merit, then perhaps it can be forwarded to that list. Can (or does) spamd look at the From:, do a MX/A record dns lookup

Re: spamd question

2007-01-18 Thread Marcus Popp
On 2007-01-18T11:27, Martin wrote: Hello. I'm using spamd but am noticing that some SPAM is still coming though It's probably more dev but I don't like posting to the dev/tech lists. If the ideas/info have merit, then perhaps it can be forwarded to that list. Can (or does) spamd

Re: spamd question

2007-01-18 Thread Otto Moerbeek
On Thu, 18 Jan 2007, Martin wrote: Hello. I'm using spamd but am noticing that some SPAM is still coming though It's probably more dev but I don't like posting to the dev/tech lists. If the ideas/info have merit, then perhaps it can be forwarded to that list. Can (or does) spamd

Re: spamd question

2007-01-18 Thread Darrin Chandler
On Thu, Jan 18, 2007 at 11:27:29AM -0500, Martin wrote: I'm using spamd but am noticing that some SPAM is still coming though Me, too. But spamd stops over 90% with minimal overhead. dig mx tnnb.com SNIP ;; ADDITIONAL SECTION: mx1.tnnb.com. 3600IN A

Re: Performance Statistics: -current

2007-01-18 Thread Otto Moerbeek
On Thu, 18 Jan 2007, Vijay Sankar wrote: Good day, I purchased a new server two days ago so that I can help test applications like OpenOffice, Asterisk, and gCompris. It has Core 2 Duo 6400, 4GB of RAM, reasonable disk space etc. Compiling the kernel took about 25 minutes. After

Re: Openbsd+Spamassassin+milter-spamd

2007-01-18 Thread Tim Jones
On Jan 17, 2007, at 11:41 PM, Mike Spenard wrote: Could someone direct me to a howto on setting up Openbsd,sendmail and spamassassin to use milter-spamd? Thank you, -Mike Mike - Check out: http://erdelynet.com/2005/03/26/openbsd/site-side-spamassassin-for- openbsd-36/ While this uses

Re: Sun Type 6 USB kbd on amd64

2007-01-18 Thread Iain Morgan
Sometime ago, Christian Weisgerber wrote: Iain Morgan [EMAIL PROTECTED] wrote: I'm attempting to use a Sun Type 6 USB keyboard on 4.0/amd64. The keyboard works, but extra functionality such as the compose key does not work. Further, wsconsctl detects it as a plain vanilla PC-XT keyboard.

Re: Performance Statistics: -current

2007-01-18 Thread Vijay Sankar
On Thursday 18 January 2007 11:19, Claudio Jeker wrote: On Thu, Jan 18, 2007 at 11:02:12AM -0600, Beavis wrote: A suggestion would be to enable softdep on your /etc/fstab softdep is nice but running without it does not make a core 2 duo as slow as a PIII. A good sugestion would be to look

Re: Performance Statistics: -current

2007-01-18 Thread Vijay Sankar
On Thursday 18 January 2007 11:46, Marc Balmer wrote: Claudio Jeker wrote: On Thu, Jan 18, 2007 at 11:02:12AM -0600, Beavis wrote: A suggestion would be to enable softdep on your /etc/fstab softdep is nice but running without it does not make a core 2 duo as slow as a PIII. A good

Re: spamd question

2007-01-18 Thread Martin
On Thursday 18 January 2007 11:48, you wrote: This turns out not to be the case. MX records tell you where to send mail TO that domain, and have nothing to do with mail FROM that domain. While the TO/FROM servers are often the same, they are also often not the same, especially for large

Re: spamd question

2007-01-18 Thread Steve Tornio
Martin wrote: Can (or does) spamd look at the From:, do a MX/A record dns lookup and compare. it to the sender IP to see if it's valid during the SMTP transaction ? Assuming you're talking about spamd in greylisting mode, here's your answer from spamd (8): spamd will use the db file in

Re: spamd question

2007-01-18 Thread Martin
On Thursday 18 January 2007 13:02, you wrote: I need to spend more time doing scripting anyway...so it could be a good learning curve. I never seem to have the time ordinarily. But there again, it looks like it's likely impossible without doing too much damage. At least I understand the

Re: Performance Statistics: -current

2007-01-18 Thread Marc Balmer
Vijay Sankar wrote: On Thursday 18 January 2007 11:46, Marc Balmer wrote: Claudio Jeker wrote: On Thu, Jan 18, 2007 at 11:02:12AM -0600, Beavis wrote: A suggestion would be to enable softdep on your /etc/fstab softdep is nice but running without it does not make a core 2 duo as slow as a

Re: nullconsole?

2007-01-18 Thread fabioFVZ
On 10:15 Wed 17 Jan , Martin Hedenfalk wrote: Hello list, Is there a nullconsole in OpenBSD, similar to the nullconsole in FreeBSD? in /usr/src/sys/kern/subr_prf.c in printf function: -- retval = kprintf(fmt, TOCONS | TOLOG, NULL, NULL, ap); ++ retval = kprintf(fmt, TOLOG,

Re: Performance Statistics: -current

2007-01-18 Thread Stuart Henderson
On 2007/01/18 11:46, Vijay Sankar wrote: apps1# vmstat -i interrupt total rate irq7/ohci0 30 irq5/ehci01280 irq10/pciide1 126946 irq5/azalia0 5760

Re: Performance Statistics: -current

2007-01-18 Thread Vijay Sankar
On Thursday 18 January 2007 12:12, Stuart Henderson wrote: On 2007/01/18 11:46, Vijay Sankar wrote: apps1# vmstat -i interrupt total rate irq7/ohci0 30 irq5/ehci01280 irq10/pciide1

Re: OT Re: 'database filesystems'

2007-01-18 Thread bofh
On 1/11/07, Stuart Henderson [EMAIL PROTECTED] wrote: On 2007/01/10 20:45, bofh wrote: However, it won't be easy porting it. It's been out in opensolaris for over a year+, but only showed up in solaris 10 6/06. However the linux folks have to do it through fuse that's because it's not

Redundant web servers

2007-01-18 Thread Jeff Simmons
I'm setting up some auto-failover web servers (load balancing isn't needed). CARP would seem ideal for the case where a machine fails, but I'd also like to failover if httpd stops responding for some reason. Some research has shown a couple of possible solutions, but there doesn't seem to be a

Re: Redundant web servers

2007-01-18 Thread Nick Ryan
If you haven't already seen it on undeadly.org this might be what you're after: http://spootnik.org/hoststated/hoststated_introduction.html Cheers On 18 Jan 2007, at 18:08, Jeff Simmons wrote: I'm setting up some auto-failover web servers (load balancing isn't needed). CARP would seem

gigabit lan chipset

2007-01-18 Thread Joerg Zinke
Hi, I'm planning to buy this: http://www.msi.com.tw/program/products/mainboard/mbd/pro_mbd_detail.php?UID=730 or as alternative this mainboard: http://de.asus.com/products4.aspx?modelmenu=2model=1163l1=3l2=101l3=300 First one has a Vitesse VSC8601 LAN-Chipset. Second one has a NVIDIA nForce 590

OpenBSD 4.0 Routing Issue

2007-01-18 Thread Satadru Pramanik
Hello all. I have an OpenBSD 4.0 system with three interfaces. My interfaces are setup as follows: /etc/hostname.bge0 inet xx.yy.101.98 255.255.255.224 xx.yy.101.127 /etc/hostname.em0 inet xx.yy.125.130 255.255.255.224 xx.yy.125.159 /etc/hostname.em1 inet 192.168.19.1 255.255.255.0 NONE

Re: gigabit lan chipset

2007-01-18 Thread Vijay Sankar
On Thursday 18 January 2007 16:05, Joerg Zinke wrote: Hi, I'm planning to buy this: http://www.msi.com.tw/program/products/mainboard/mbd/pro_mbd_detail.php?UID =730 or as alternative this mainboard: http://de.asus.com/products4.aspx?modelmenu=2model=1163l1=3l2=101l3=300 First one has a

Re: pf examples needed [solved]

2007-01-18 Thread Scott416
Glad it's working; however, depending on your security level needs there are some variants on the configuration you may wish to consider. rdr pass is an unrestricted pass or opening. An improvement to it follows. #---EG1--- rdr log (all) on $external proto tcp from any to $external port 80 \

Should fopen() succeed on a directory?

2007-01-18 Thread Adam
Why does fopen()ing a directory for reading succeed instead of failing with EISDIR? This has the possibly unexpected consequence of letting you pass yyin to yylex() as a fopen()ed directory, which then thinks it finished successfully because fread() returns 0 immediately. Adam

EUSecWest 2007 Papers

2007-01-18 Thread Dragos Ruiu
Hi, For those who asked, we are still processing the submissions for CanSecWest and the call closed, please stand by. The paper selections are back from the reviewers for EUSecWest, in London on March 1-2. In absolutely random order: Threats against and protection of Microsoft's internal

Re: Should fopen() succeed on a directory?

2007-01-18 Thread Marco S Hyman
Adam writes: Why does fopen()ing a directory for reading succeed instead of failing with EISDIR? This has the possibly unexpected consequence of letting I believe it is so things like grep -r regex * work. // marc

Re: reading sensor RS-232/485 output

2007-01-18 Thread Damian Wiest
On Thu, Jan 11, 2007 at 10:23:31PM -0800, J.C. Roberts wrote: [snip] Since I'm probably the worst person you could ask, hopefully one of the many shell scripting gods inhabiting this mailing list will chime in on how do useful work in shell scripts with serial. I've typically used kermit

Re: pf freezing with MS remote desktop

2007-01-18 Thread Peter Matulis
Le Jeudi 18 Janvier 2007 02:00, Allen a icrit : Peter Matulis wrote: I am using OBSD 3.8 as a firewall for a small office and I have an XP user that connects to a remote host via MS Remote Desktop (TCP 3389). Occasionally, this user complains that her connection is severed and that

Re: gigabit lan chipset

2007-01-18 Thread Joerg Zinke
On Thu, 18 Jan 2007 16:36:21 -0600 Vijay Sankar [EMAIL PROTECTED] wrote: On Thursday 18 January 2007 16:05, Joerg Zinke wrote: Hi, I'm planning to buy this: http://www.msi.com.tw/program/products/mainboard/mbd/pro_mbd_detail.php?UID =730 or as alternative this mainboard: