Re: Disk encryption

2007-07-17 Thread Die Gestalt
On 7/16/07, Richard Storm [EMAIL PROTECTED] wrote: This is crappy howto. *encryption* there are as much as creating unsecure (without -K) single storage volume... We are talking about full disk encryption here, like mounting encrypted root partition :) Basically you would like to have the

Re: Send E-mail as Different Hostname

2007-07-17 Thread Henning Brauer
* Chris Tankersley [EMAIL PROTECTED] [2007-07-16 22:29]: We're running a web server with PHP 5 and OpenBSD's Apache 1.3.29. Whenever a mail is sent from our site using mini_sendmail it is using the hostname that we gave it, which doesn't exist to the outside world. How can I have it send as

NIS C2 Security

2007-07-17 Thread Edd Barrett
Hi all, Does the OpenBSD implementation of NIS support C2 security as described here: http://docs.sun.com/app/docs/doc/816-4556/6maort2ra?a=view http://www.softpanorama.org/Net/Application_layer/NIS/nis_security.shtml I dont see any mentionof this is the manuals, so I 'm guessing not, but

vodafone usb hsdpa modem

2007-07-17 Thread bdz
my friend has a huawei vodafone hsdpa modem with usb connector. i just asked for it to see what openbsd 4.1-current sees from it. as i attached it recognizeses it as a usb mass storage that contains a cd image: flatline# disklabel cd1 # /dev/rcd1c: type: SCSI disk: ConnectNow_1.09Z label:

Re: Secure Network File System - Or Lack Thereof

2007-07-17 Thread J.C. Roberts
On Sunday 15 July 2007, Edd Barrett wrote: Hi, Also AFS is i386 only. -- Best Regards Edd Hi Edd, I was curious if you ever found a decent answer for your question on secure network file systems? The only way I can think of doing it is kerberos and NFSv4.

Re: vodafone usb hsdpa modem

2007-07-17 Thread bdz
Stuart Henderson wrote: On 2007/07/17 13:00, bdz wrote: my friend has a huawei vodafone hsdpa modem with usb connector. i just asked for it to see what openbsd 4.1-current sees from it. as i attached it recognizeses it as a usb mass storage that contains a cd image: developers will

Re: Secure Network File System - Or Lack Thereof

2007-07-17 Thread Edd Barrett
HI, On 17/07/07, J.C. Roberts [EMAIL PROTECTED] wrote: Hi Edd, I was curious if you ever found a decent answer for your question on secure network file systems? Not really. I have signed up for free academic licenses of sharity (not light), as sharity-light seemed to be sketchy on file

Re: vodafone usb hsdpa modem

2007-07-17 Thread Stuart Henderson
On 2007/07/17 14:21, bdz wrote: Stuart Henderson wrote: On 2007/07/17 13:00, bdz wrote: my friend has a huawei vodafone hsdpa modem with usb connector. i just asked for it to see what openbsd 4.1-current sees from it. as i attached it recognizeses it as a usb mass storage that contains

[[ in sh(1)

2007-07-17 Thread frantisek holop
hi there, i have found a script on hp-ux that uses [[ ]] instead of the if [ ]; then construct so i went to sh(1), and while [[ is listed as a compound command, i couldn't find any explanation of what it does and how is it different if at all. could the doc experts advise please and update the

Re: Disk encryption

2007-07-17 Thread Joachim Schipper
On Mon, Jul 16, 2007 at 07:08:21PM +0300, Richard Storm wrote: This is crappy howto. *encryption* there are as much as creating unsecure (without -K) single storage volume... We are talking about full disk encryption here, like mounting encrypted root partition :) Problems: * vnconfig

Re: [[ in sh(1)

2007-07-17 Thread Stuart Henderson
On 2007/07/17 15:42, frantisek holop wrote: so i went to sh(1), and while [[ is listed see ksh(1)

Re: vodafone usb hsdpa modem

2007-07-17 Thread bdz
Stuart Henderson wrote: On 2007/07/17 14:21, bdz wrote: Stuart Henderson wrote: On 2007/07/17 13:00, bdz wrote: my friend has a huawei vodafone hsdpa modem with usb connector. i just asked for it to see what openbsd 4.1-current sees from it. as i attached it recognizeses it

Re: [[ in sh(1)

2007-07-17 Thread Paul de Weerd
On Tue, Jul 17, 2007 at 03:42:53PM +0200, frantisek holop wrote: | i have found a script on hp-ux that uses | [[ ]] instead of the if [ ]; then construct | so i went to sh(1), and while [[ is listed | as a compound command, i couldn't find any | explanation of what it does and how is it |

Re: [[ in sh(1)

2007-07-17 Thread Stuart Henderson
On 2007/07/17 16:07, Paul de Weerd wrote: On Tue, Jul 17, 2007 at 03:42:53PM +0200, frantisek holop wrote: | i have found a script on hp-ux that uses | [[ ]] instead of the if [ ]; then construct | so i went to sh(1), and while [[ is listed | as a compound command, i couldn't find any |

Re: Secure Network File System - Or Lack Thereof

2007-07-17 Thread Rick Macklem
I was curious if you ever found a decent answer for your question on secure network file systems? The only way I can think of doing it is kerberos and NFSv4. http://mailman.theapt.org/listinfo/openbsd-nfsv4 http://mailman.theapt.org/pipermail/openbsd-nfsv4/2007-January/88.html I

Re: [[ in sh(1)

2007-07-17 Thread Paul de Weerd
On Tue, Jul 17, 2007 at 03:27:51PM +0100, Stuart Henderson wrote: | My manpage (ksh(1)) says : | | [[ expression ]] | Similar to the test and [ ... ] commands (described later), with | the following exceptions: | | And then lists some exceptions. This could

Re: Disk encryption

2007-07-17 Thread bofh
Because you're thinking like an experienced system administrator, not some phb or fresh graduate pretending to be a Big4 auditor. On 7/17/07, Joachim Schipper [EMAIL PROTECTED] wrote: On Mon, Jul 16, 2007 at 07:08:21PM +0300, Richard Storm wrote: This is crappy howto. *encryption* there are

Re: vodafone usb hsdpa modem

2007-07-17 Thread Stuart Henderson
On 2007/07/17 16:05, bdz wrote: it does not matter if umass(4) is enabled or disabled ok, I see why now, no need for a quirk there then. i got that msg from ubsa(4): ubsa0 at uhub2 port 2 ubsa0: HUAWEI Technologies HUAWEI Mobile, rev 1.10/0.00, addr 2 ubsa0: Could not find interrupt in

Re: Secure Network File System - Or Lack Thereof

2007-07-17 Thread J.C. Roberts
On Tuesday 17 July 2007, Edd Barrett wrote: HI, On 17/07/07, J.C. Roberts [EMAIL PROTECTED] wrote: Hi Edd, I was curious if you ever found a decent answer for your question on secure network file systems? Not really. I have signed up for free academic licenses of sharity (not light),

Re: Allocate more memory than 512 MB with squid

2007-07-17 Thread Patrick Hemmen
Thanks for the hint. I will test the memory and view the BIOS settings as soon as possible. Best regards. Patrick Whyzzi schrieb: Again I highly recommend you check the memory for problems: http://www.memtest86.com/ Another thing I've noticed that can cause strange problems: miss-matched

Re: Disk encryption

2007-07-17 Thread Die Gestalt
On 7/17/07, Joachim Schipper [EMAIL PROTECTED] wrote: But why encrypt the whole disk? I can see why you'd want to encrypt user data - say, /home - but why encrypt boring stuff like /usr? This makes cryptanalysis harder since it's impossible to distinguish interesting data from uninteresting

Re: [[ in sh(1)

2007-07-17 Thread Eric Furman
On Tue, 17 Jul 2007 16:35:03 +0200, Paul de Weerd [EMAIL PROTECTED] said: On Tue, Jul 17, 2007 at 03:27:51PM +0100, Stuart Henderson wrote: | My manpage (ksh(1)) says : | | [[ expression ]] | Similar to the test and [ ... ] commands (described later), with |

Re: vodafone usb hsdpa modem

2007-07-17 Thread Stuart Henderson
On 2007/07/17 16:05, bdz wrote: ubsa0: Could not find interrupt in From http://arkiv.freebsd.se/?ml=freebsd-usba=2006-11t=2535430 I sometimes get that message but after a few tries it's ok. http://www.student.tugraz.at/johann.wilhelm/doku.php?id=huaweie220linux suggests the device is

Re: Send E-mail as Different Hostname

2007-07-17 Thread Chris Tankersley
Gordon Stratton wrote: On 7/16/07, Chris Tankersley [EMAIL PROTECTED] wrote: We're running a web server with PHP 5 and OpenBSD's Apache 1.3.29. Whenever a mail is sent from our site using mini_sendmail it is using the hostname that we gave it, which doesn't exist to the outside world. How can I

Re: Send E-mail as Different Hostname

2007-07-17 Thread Chris Tankersley
Henning Brauer wrote: * Chris Tankersley [EMAIL PROTECTED] [2007-07-16 22:29]: We're running a web server with PHP 5 and OpenBSD's Apache 1.3.29. Whenever a mail is sent from our site using mini_sendmail it is using the hostname that we gave it, which doesn't exist to the outside world. How

Re: print filter?

2007-07-17 Thread Fred Crowson
Bob Beck wrote: I used to fight with such insanity constantly. However since printers are frequently sold and shipped with a basically undocumented interface, and more than half the time these filter utilites are barely reverse engineered POS's I decided long ago that fighting with

Re: [[ in sh(1)

2007-07-17 Thread Paul de Weerd
On Tue, Jul 17, 2007 at 11:42:14AM -0400, Eric Furman wrote: | | And then lists some exceptions. This could be a difference between sh | | and ksh (which, I believe, is only a difference in documentation). | | | | It does different things depending on whether it's run as ksh or sh. | | As

Re: [[ in sh(1)

2007-07-17 Thread frantisek holop
hmm, on Tue, Jul 17, 2007 at 11:42:14AM -0400, Eric Furman said that [[ is not listed in sh(1) because this construct doesn't exist in sh(1). There is a difference in the [[ construct in ksh. Read man ksh(1). right, thanks for the answers. but is it supposed to be listed in sh(1) or not at

Re: print filter?

2007-07-17 Thread Otto Moerbeek
On Tue, 17 Jul 2007, Fred Crowson wrote: Bob Beck wrote: I used to fight with such insanity constantly. However since printers are frequently sold and shipped with a basically undocumented interface, and more than half the time these filter utilites are barely reverse engineered

Re: OT: looking for a videocard

2007-07-17 Thread Paul de Weerd
On Mon, Jul 16, 2007 at 10:36:51PM +0200, Matthieu Herrb wrote: | o MUST have two DVI outputs | o MUST be able to drive X with 2x 1600x1200 | o MUST be PCIe-16 | o SHOULD be passively cooled | | You may try the Matrox G550 PCIe. They are PCIe x1, not x16, but it |

Re: Troubleshooting NFS/SFU

2007-07-17 Thread Johan SANCHEZ
On Mon, 16 Jul 2007 07:46:20 -0600 Daniel Melameth [EMAIL PROTECTED] wrote: On 7/2/07, David Higgs [EMAIL PROTECTED] wrote: I followed Microsoft's instructions for SFU and found that it worked quite well if all I cared about was read-only access. I didn't have any further success even

Re: [[ in sh(1)

2007-07-17 Thread Stuart Henderson
On 2007/07/17 19:37, frantisek holop wrote: hmm, on Tue, Jul 17, 2007 at 11:42:14AM -0400, Eric Furman said that [[ is not listed in sh(1) because this construct doesn't exist in sh(1). There is a difference in the [[ construct in ksh. Read man ksh(1). right, thanks for the answers.

OT: seeking advice on how to address closed-source-only websites

2007-07-17 Thread Joris Van Herzele
Hi, I am aware I am going somewhat off-topic with this but I was hoping for some advice on how to handle situations like these : I noticed that my savings-bank is advertising incorrect (false) interest-rates on it's website. I checked the source of the site and found a reference to an Adobe

Re: OT: seeking advice on how to address closed-source-only websites

2007-07-17 Thread Peter N. M. Hansteen
Joris Van Herzele [EMAIL PROTECTED] writes: I wrote them an email politely requesting a copy of the form in an open file-format which I can actually read and fill in. I also hinted at my federal government's guidelines and recommendations for the use of open standards in IT which are

Re: flashdist-20061112 with openbsd 4.1 - SOLVED

2007-07-17 Thread Thomas Börnert
Hi List, the problem is solved with the following patch for the flashdisk.sh ---snip--- --- flashdist.shMon Nov 13 04:15:50 2006 +++ flashdist-new.shWed Aug 1 13:37:49 2007 @@ -473,6 +473,24 @@ # Here we setup an 'a' partition that takes up the whole flash media # and a 'b'

Re: print filter?

2007-07-17 Thread Fred Crowson
Otto Moerbeek wrote: Try surpressing the burst page header: add ``sh''. -Otto Hi Otto, Adding :sh: to my printcap didn't resolve the issue, and the Lexmark C500 is still resetting the connection. I have taken up the issue with Lexmark support, but they are painfully slow and not

spamd bogus config line message

2007-07-17 Thread Barry Grumbine
Good Afternoon, I am using OpenBSD 4.1 Release, patched as of today. When starting spamd in debug mode I receive a bogus config line message. Where it says need 'tag;message;a/m;a/m;a/m...' this looks like the format for spamd.conf, but I am using the default spamd.conf with no changes, so I

Re: print filter?

2007-07-17 Thread Jacob Meuser
On Tue, Jul 17, 2007 at 09:24:06AM -0600, Bob Beck wrote: I used to fight with such insanity constantly. However since printers are frequently sold and shipped with a basically undocumented interface, and more than half the time these filter utilites are barely reverse

Single-user mode stopped

2007-07-17 Thread Kevin Cheng
Hi, Anyone sees boot sequence stopped on Single-User Mode and I need to hit Return key to finish all boot sequence? it boots fine eventually. Using drive 0, partition 3. Loading... probing: pc0 com0 com1 apm mem[639k 223M a20=on] disk: hd0+ OpenBSD/i386 BOOT 2.10 boot here I need to hit

Secure Network File System - Or Lack Thereof

2007-07-17 Thread Linden Varley
Not sure what you were originally after but I came across this the other day http://fuse.sourceforge.net/sshfs.html - Linden. J.C. Roberts wrote: On Tuesday 17 July 2007, Edd Barrett wrote: HI, On 17/07/07, J.C. Roberts [EMAIL PROTECTED] wrote: Hi Edd, I was curious if you ever

Re: Single-user mode stopped

2007-07-17 Thread Alexander Hall
Hello, Kevin. Kevin Cheng wrote: Anyone sees boot sequence stopped on Single-User Mode and I need to hit Return key to finish all boot sequence? it boots fine eventually. Using drive 0, partition 3. Loading... probing: pc0 com0 com1 apm mem[639k 223M a20=on] disk: hd0+ OpenBSD/i386 BOOT 2.10

Single-user mode stopped (re-posted)

2007-07-17 Thread Kevin Cheng
Thanks On the first time, I did see following error: d0(pciide0:0:0): timeout type: ata c_bcount: 512 c_skip: 0 pciide0:0:0: bus-master DMA error: missing interrupt, status=0x21 But it went away once booted and no longer appeared, unless I mirrored my HDD again

Re: Single-user mode stopped

2007-07-17 Thread Kevin Cheng
Hi Alexander, Thanks On the first time, I did see following error: d0(pciide0:0:0): timeout type: ata c_bcount: 512 c_skip: 0 pciide0:0:0: bus-master DMA error: missing interrupt, status=0x21 But it went away once booted and no longer appeared, unless I mirrored

Re: Single-user mode stopped

2007-07-17 Thread Stuart Henderson
On 2007/07/18 07:34, Kevin Cheng wrote: Plain keyboard and monitor, no serial console plugged in. Check the serial console is turned off in BIOS if you don't want it.

Re: Single-user mode stopped

2007-07-17 Thread Stuart Henderson
On 2007/07/18 05:35, Kevin Cheng wrote: Anyone sees boot sequence stopped on Single-User Mode and I need to hit Return key to finish all boot sequence? it boots fine eventually. http://www.axiomtek.com.tw/Download/Spec/na-806b.pdf I don't know the Axiomtek but looks like serial-redirect -

Re: print filter?

2007-07-17 Thread J.C. Roberts
On Tuesday 17 July 2007, Fred Crowson wrote: rp|c500|laser|lexmark:\ :lp=:\ :rm=c500.crowsons.net:\ :rp=ps:\ :sd=/var/spool/C500:\ :lf=/var/log/lpd-errs: x41:fred ~ lpr -Plaser which.ps x41:fred ~ tail -2 /var/log/lpd-errs Jul 17 18:14:36 x41

Re: Single-user mode stopped

2007-07-17 Thread Kevin Cheng
Stuart, Serial Console Redirect, either enabled or disabled would still halt boot sequence. What I worked around it is to disable PCI IDE (slave) which is not used then it boots successfully. You are right that it could be out of irq? Thanks, Kevin -Original Message- From: Stuart

Re: OT: looking for a videocard

2007-07-17 Thread J.C. Roberts
On Monday 16 July 2007, Stuart Henderson wrote: On 2007/07/16 22:36, Matthieu Herrb wrote: You may try the Matrox G550 PCIe. They are PCIe x1, not x16, but it should fulfill all your other constraints. Matrox G-series are really great cards for 2D (and the PCI ones are available very

Alerta Visa!

2007-07-17 Thread Visa
Estimado cliente Visa * Le informamos que tiene hasta el 31 de julio para registrar su cuenta, para mejorar la seguridad entre nuestros clientes. Si todavia no registro su cuenta, puede obtenerla ahora haciendo click aqum

Re: Single-user mode stopped - solved

2007-07-17 Thread Kevin Cheng
Stuart, Thanks. The only cables that connected to such engineering board is VGA and mouse/keyboard. Once those cables are removed it then boots fine - pingable. I shall check with BIOS and cables setting with Axiomtek, they produce low cost yet good quality boards. Kevin -Original

Re: Single-user mode stopped

2007-07-17 Thread J.C. Roberts
Previous message: - same image booted fine with any other P3 or P4 machines. On Tuesday 17 July 2007, Kevin Cheng wrote: Hi Alexander, Thanks On the first time, I did see following error: d0(pciide0:0:0): timeout type: ata c_bcount: 512 c_skip: 0 pciide0:0:0:

Re: Single-user mode stopped

2007-07-17 Thread Kevin Cheng
Thanks J.C. It was done by hardware mirror machine from http://www.logicube.com/. No issues for Intel to intel platform, but if Intel to VIA then you are right that it's better to reinstall whole thing. This works for 5 years since BSD 3.1 When we mount the same mirrored HDD from intel to a VIA,

Re: OT: seeking advice on how to address closed-source-only websites

2007-07-17 Thread J.C. Roberts
On Tuesday 17 July 2007, Peter N. M. Hansteen wrote: Do stay polite and to the point though. - P Peter, As sad as it may seem, remaining polite usually means you are just easier to ignore. This holds true for both proprietary formats as well as getting documentation released. Search the

Re: OT: seeking advice on how to address closed-source-only websites

2007-07-17 Thread Jacob Meuser
On Tue, Jul 17, 2007 at 09:11:58PM -0700, J.C. Roberts wrote: How quickly do you think Google would change from FLV to MPEG for YouTube if they suddenly got hit with a few million invoices and small law suits? then they would probably get hit by lawsuits and invoices from MPEG-LA. I get

Re: Single-user mode stopped

2007-07-17 Thread J.C. Roberts
On Tuesday 17 July 2007, Kevin Cheng wrote: It was done by hardware mirror machine from http://www.logicube.com/. No issues for Intel to intel platform, but if Intel to VIA then you are right that it's better to reinstall whole thing. This works for 5 years since BSD 3.1 Though it may seem to

Re: OT: seeking advice on how to address closed-source-only websites

2007-07-17 Thread J.C. Roberts
On Tuesday 17 July 2007, Jacob Meuser wrote: On Tue, Jul 17, 2007 at 09:11:58PM -0700, J.C. Roberts wrote: How quickly do you think Google would change from FLV to MPEG for YouTube if they suddenly got hit with a few million invoices and small law suits? then they would probably get hit