advice on router and routing books

2007-01-27 Thread earx
hi everyone i want to learn more in BGP, and ospf routing. can u have an advice on a good book about routing ? or documentation ? and better, with openbsd router. i have seen some book on amazon, but there is not great reviews. thanks

SVND -k and -K

2007-01-27 Thread Don Smith
On the newer versions of OpenBSD, there is -K added as an option for SVND. I always used the -k option with a strong key and no salt file. Is the original -k method still secure, given a strong key? Food

BSD thin client

2007-01-27 Thread Ramdas
Hi Group, Is it possible to convert a old intel ( BSD based ) machine with less ram hdd into a thin client. I want to install minimum BSD on the machine and convert it to a thin client. The idea is to have a secure robust terminals which can have a minimum BSD and a GUI interface for users.

Re: ACPI testing needed for PCI routing code.

2007-01-27 Thread Matiss Miglans
That same happens with snapshot with date 26. Jan. Thank you for your help.If I can give more, any information please ask. Matiss Miglans wrote: I have the same problem with this snapshot ! When I try to enable ACPI, i get crash... I use snapshots with date 24. Jan. with this cksums 1015849754

Re: install image to computer

2007-01-27 Thread Joachim Schipper
On Fri, Jan 26, 2007 at 05:42:14PM -0800, smith wrote: On Fri, 26 Jan 2007 16:07:01 -0600, Damian Wiest wrote On Fri, Jan 26, 2007 at 03:53:48PM -0500, Steve Shockley wrote: smith wrote: Why?: I've received a few new computers that I have to configure.

Re: BSD thin client

2007-01-27 Thread Joachim Schipper
On Sat, Jan 27, 2007 at 03:42:42PM +0530, Ramdas wrote: Hi Group, Is it possible to convert a old intel ( BSD based ) machine with less ram hdd into a thin client. I want to install minimum BSD on the machine and convert it to a thin client. The idea is to have a secure robust

Re: ACPI testing needed for PCI routing code.

2007-01-27 Thread Didier Wiroth
Hello, I'm experiencing random freezes while using X11 on a lenovo thinkpad X60s. As far as I noticed, the freezes only appear with acpi enabled. Here are the dmesg in the following order: bsd, bsd (with acpi), bsd.mp and bsd.mp (with acpi) OpenBSD 4.0-current (GENERIC) #1: Fri Jan 26 19:15:07

Re: NFS export ext2 mounted filesystems

2007-01-27 Thread fv
Hello, Did you enable portmap and nfs services in rc.conf.local? What error message are you getting on the linux client? What does showmount -e show on the server? Both enabled. I can mount /mnt/home2, but i get a Input Output error from my linux box when i try to make a 'ls

Re: install image to computer

2007-01-27 Thread Tony Abernethy
Joachim Schipper wrote On Fri, Jan 26, 2007 at 05:42:14PM -0800, smith wrote: On Fri, 26 Jan 2007 16:07:01 -0600, Damian Wiest wrote On Fri, Jan 26, 2007 at 03:53:48PM -0500, Steve Shockley wrote: smith wrote: Why?: I've received a few new computers that I have to configure.

Can isakmpd based VPN's work with FreeBSD

2007-01-27 Thread stan
I'v just worked through getting IP, and bridge tuneling working using ipsecctl, and isakmpd. One of the places I would like to use this has an exisitng FreebSD machine at one end. Can OpenBSD interoprate with FreeBSD in this context? -- Unix is very simple, but it takes a genius to understand

Re: SVND -k and -K

2007-01-27 Thread Woodchuck
On Sat, 27 Jan 2007, Don Smith wrote: On the newer versions of OpenBSD, there is -K added as an option for SVND. I always used the -k option with a strong key and no salt file. Is the original -k method still secure, given a strong key? No. But that's hearsay. Here's what I heard

Re: [OpenSSH] an option for setting the login name?

2007-01-27 Thread Igor Sobrado
Hi again! I am working on the patch for supporting the -l option in both ssh and sftp. Looking at the OpenSSH source code I found some improvements in the messages returned by sftp and ssh when either the username or the hostname are not provided. The first patch: --- sftp.c Sat Jan 27

Re: SVND -k and -K

2007-01-27 Thread Don Smith
I don't see how adding salt to the key can provide more security if the user has chosen a long key with sufficient entropy. For example, if the user used the original -k option and had a truly random 448 bit key, adding the salt would have no advantage, if the salt only affected the key. It

bridgename.if file format

2007-01-27 Thread stan
I have worked trhough getting bridging working, using a manual startup file, and now I'm ready to set it up to come up autmaticly when the systems boot. I see that I need to create a bridgename.bridge0 file, but I'm still puzzled by exactly what should be in it. Here is my manual start file for

Re: bridgename.if file format

2007-01-27 Thread Stuart Henderson
On 2007/01/27 09:07, stan wrote: Ican't seem to find a man page for gif.if gif (and tun, carp, etc) are just interfaces, they go in hostname.if e.g. hostname.gif0, /etc/netstart brings up the bridges last of all. Would this be the format I need for the bridgename file? not quite... create

Re: [OpenSSH] an option for setting the login name?

2007-01-27 Thread Igor Sobrado
Ok, I have a candidate for a patch: --- sftp.c Sat Jan 27 08:43:11 2007 +++ sftp.c Sat Jan 27 08:46:45 2007 @@ -1415,8 +1415,8 @@ fprintf(stderr, usage: %s [-1Cv] [-B buffer_size] [-b batchfile] [-F ssh_config]\n - [-o ssh_option] [-P

Re: advice on router and routing books

2007-01-27 Thread tony sarendal
On 27/01/07, earx [EMAIL PROTECTED] wrote: hi everyone i want to learn more in BGP, and ospf routing. can u have an advice on a good book about routing ? or documentation ? and better, with openbsd router. i have seen some book on amazon, but there is not great reviews. thanks The cisco

Re: [OpenSSH] an option for setting the login name?

2007-01-27 Thread Igor Sobrado
At last, I want to note that the switch structures in sftp.c and ssh.c related with getopt(3) can be reordered. Currently, its order is very difficult to understand, at least for me. (perhaps my patch does not put the case 'l': in the right place for that reason, beware!) and there are some

Re: advice on router and routing books

2007-01-27 Thread Jan Mason
Building Firewalls with OpenBSD and PF by Jacek Artymiak Second Edition Copyright 2003 ISBN: 83-916651-1-9 Price: USD $40.00 https://https.openbsd.org/cgi-bin/order?B01=1B01%2b=Add Table of Contents Preface . 1 0.1 Acknowledgments . 3 Chapter 1: Introduction

Re: Can isakmpd based VPN's work with FreeBSD

2007-01-27 Thread nuffnough
On 28/01/07, stan [EMAIL PROTECTED] wrote: I'v just worked through getting IP, and bridge tuneling working using ipsecctl, and isakmpd. One of the places I would like to use this has an exisitng FreebSD machine at one end. Can OpenBSD interoprate with FreeBSD in this context? Certainly.

Re: The OACK Project

2007-01-27 Thread stan
On Wed, Jan 24, 2007 at 12:41:23PM +0100, Rogier Krieger wrote: On 1/24/07, Jonathan Eifrig [EMAIL PROTECTED] wrote: tftpd[]: oack: Permission denied That may have something to do with *file* permissions. Quoting tftpd(8): The use of tftp(1) does not require an account or password on

Re: SVND -k and -K ERRATUM

2007-01-27 Thread Woodchuck
On Sat, 27 Jan 2007, Woodchuck wrote: Disclaimer: I am not a cryptanalyst. Maybe that's all FUD and blown smoke. If I recall the source code correctly, using -k, you are already using salt -- of zero. Checked the source code, I was wrong. In the -k case, the passphrase

Re: BSD thin client

2007-01-27 Thread Samurai Chef
On 1/27/07, Ramdas [EMAIL PROTECTED] wrote: Hi Group, Is it possible to convert a old intel ( BSD based ) machine with less ram hdd into a thin client. I want to install minimum BSD on the machine and convert it to a thin client. The idea is to have a secure robust terminals which can have

Re: BSD thin client

2007-01-27 Thread Samurai Chef
On 1/27/07, Samurai Chef [EMAIL PROTECTED] wrote: On 1/27/07, Ramdas [EMAIL PROTECTED] wrote: Hi Group, Is it possible to convert a old intel ( BSD based ) machine with less ram hdd into a thin client. I want to install minimum BSD on the machine and convert it to a thin client. The

Re: Idea for additionnal funding

2007-01-27 Thread Gabe
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of J.C. Roberts Sent: Saturday, January 20, 2007 2:02 PM To: Jean-Daniel Beaubien Cc: misc@openbsd.org Subject: Re: Idea for additionnal funding ... As for the irony of accepting grants from

spamd openbsd 4.0 query

2007-01-27 Thread John .
Hello list, I have an older openbsd 3.5 system that is running well just as a firewall NAT router, with 3 interfaces on it. Behind (and protected by) this is another machine. This particular machine was in use as a shell box, running ssh, web and mail under FreeBSD. I have converted it to

Re: BSD thin client

2007-01-27 Thread Josh Tolley
On 1/27/07, Joachim Schipper [EMAIL PROTECTED] wrote: Without details, that's about the best I can do. Some things which may or may not be useful to you: siteXYtools some form of binary patching freeNX, some VNC, or just plain X-over-the-network; or rdesktop, if you use

Re: spamd openbsd 4.0 query

2007-01-27 Thread Darrin Chandler
On Sat, Jan 27, 2007 at 05:17:04PM +, John . wrote: Hello list, I have an older openbsd 3.5 system that is running well just as a firewall NAT router, with 3 interfaces on it. Behind (and protected by) this is another machine. This particular machine was in use as a shell box, running

Re: spamd openbsd 4.0 query

2007-01-27 Thread Josh Grosse
On Sat, Jan 27, 2007 at 05:17:04PM +, John . wrote: ...It gets lots of mail, and it has about 30 users on it. It has one NIC. I want to use PF to control spam. Question is, the pf.conf seems to want 2 interfaces in order to do this.. Is it permissable to set int_if and ext_if to be the

Re: SVND -k and -K

2007-01-27 Thread Ted Unangst
On 1/27/07, Don Smith [EMAIL PROTECTED] wrote: I don't see how adding salt to the key can provide more security if the user has chosen a long key with sufficient entropy. For example, if the user used the original -k option and had a truly random 448 bit key, adding the salt would have no

SASL Digest-MD5 implementation (BSD licensed)

2007-01-27 Thread Alexey Vatchenko
Hi! I've written library for SASL Digest-MD5 authentication (on client side yet) for my project. If you want you can use it freely in your projects. It lacks auth-int and auth-conf but still very functional for most cases. Source code is BSD licensed.

Re: Is Theo still hiking ????

2007-01-27 Thread Bob Beck
Yes, theo is still hiking, although I'm quite surprised that the usual pack of idiots on misc@ can't contribut adequatly to comic relief - in my experience they are usually much funnier than theo. -Bob * Allie Daneman [EMAIL PROTECTED] [2007-01-26 22:59]: Is Theo still hiking,

Re: Is Theo still hiking ????

2007-01-27 Thread Darrin Chandler
On Sat, Jan 27, 2007 at 12:54:05PM -0700, Bob Beck wrote: Yes, theo is still hiking, although I'm quite surprised that the usual pack of idiots on misc@ can't contribut adequatly to comic relief - in my experience they are usually much funnier than theo. Maybe I can wake them up, then.

Is there an ifconfig flag to put an interface in promiscuous mode?

2007-01-27 Thread stan
I'm trying to set up bridging over gif between multiple locations, the ultimate goal of which is to support Windows machines sharing disks. Now, I don't know *^% about windows, and I got this working perfectly as far as I can tell (I can get dhcp addresses from either end of the bridge for

Re: BSD thin client

2007-01-27 Thread Reiner Jung
In the next 2 weeks, a free NX client will be released which is runs on OpenBSD without Linux emulation. All closed source parts from Nomachine client are rewritten. As there are some parts from original Nomachine client was used, it will be released under the GPL Am Samstag, den 27.01.2007,

Re: Is Theo still hiking ????

2007-01-27 Thread aunty_jane
that the usual pack of idiots on misc@ can't contribut adequatly agree Remember that dimwit I do let the windows machine have web contact to the outside who thinks simple packet filtering will keep his windows children safe.Real 7337,whatever that is.

Re: Is Theo still hiking ????

2007-01-27 Thread bofh
On 1/27/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: that the usual pack of idiots on misc@ can't contribut adequatly agree Remember that dimwit I do let the windows machine have web contact to the outside who thinks simple packet filtering will keep his windows children safe.Real

Re: ACPI testing needed for PCI routing code.

2007-01-27 Thread Marco Peereboom
We have identified this and a fix should follow soonish. On Fri, Jan 26, 2007 at 10:31:03PM +0200, Matiss Miglans wrote: I have the same problem with this snapshot ! When I try to enable ACPI, i get crash... I use snapshots with date 24. Jan. with this cksums 1015849754 6124766 bsd

bro-ids: patch or port?

2007-01-27 Thread Jacob Yocom-Piatt
am currently trying to get bro-ids working on openbsd and noticed this from the 2006 hackathon listing: Alexandre Anriot Alexandre is from Marseille, France. He got started with OpenBSD in 2002 by making a few contributions against the OpenBSD ports tree. Alexandre was first exposed to OpenBSD

Re: BSD thin client

2007-01-27 Thread Josh Tolley
On 1/27/07, Reiner Jung [EMAIL PROTECTED] wrote: In the next 2 weeks, a free NX client will be released which is runs on OpenBSD without Linux emulation. All closed source parts from Nomachine client are rewritten. As there are some parts from original Nomachine client was used, it will be