Re: bash for root?

2008-12-02 Thread Sean Kamath
On Dec 1, 2008, at 4:55 AM, Nick Holland wrote: Other than generating duplicate user number error reports from the nightly security check, the generally bad idea of duplicate user numbers, creating confusion and ambiguity that doesn't need to be there, the likelihood that you will have

Re: Hardware recomendations please

2008-12-02 Thread Jussi Peltola
On Tue, Dec 02, 2008 at 05:43:39PM +1100, nuffnough wrote: Hey there. My firewalls are getting old, so I thought it would be a great idea to replace them. I figured that a budget of around $1500 would be more than adequate, but because no one makes mobos with 5 pci slots anymore I am

Re: Hardware recomendations please

2008-12-02 Thread Stuart Henderson
On 2008-12-02, nuffnough [EMAIL PROTECTED] wrote: Hey there. My firewalls are getting old, so I thought it would be a great idea to replace them. I figured that a budget of around $1500 would be more than adequate, but because no one makes mobos with 5 pci slots anymore I am struggling to

4.4 arrives in Brazil

2008-12-02 Thread Ricardo Augusto de Souza
OpenBSD 4.4 arrives in Brazil. http://www.temporeal.com.br/produtos.php?id=172290 It4s just R$ 99,00

Re: PANIC on latest source

2008-12-02 Thread Insan Praja SW
On Tue, 02 Dec 2008 11:17:42 +0700, David Gwynne [EMAIL PROTECTED] wrote: Hi, Here the dmesg attach after compiling the source. It works just fine but I can't change em(4) MTU over 1600. $ sudo ifconfig em0 mtu 1514 ifconfig: SIOCSIFMTU: Invalid argument $ sudo ifconfig re0 mtu 1600 Thanks,

Re: bash for root?

2008-12-02 Thread Juan Miscaro
2008/12/1 Nick Holland [EMAIL PROTECTED]: Juan Miscaro wrote: ... Why not set up a user (ex: bigguy) and then force his uid and gid to be 0 and 0 with vipw? Give that user a nice coloured bash prompt and set up directories in his home. This way you get a customized superuser while keeping

Re: voip card

2008-12-02 Thread Michiel van Baak
On 15:20, Tue 02 Dec 08, sonjaya wrote: have you try in openbsd 4.3 or 4.4 ? I try make one small box for voip service with openbsd 4.3/4.4 At the moment there is no stable zaptel version for OpenBSD 4.4. But I think it's best to ask on the asterisk-bsd mailinglist hosted by Digium (the

Re: sendmail and PF

2008-12-02 Thread Jay Torrini
In response to people who keep telling me to allow SMTP out: that has not and will not help since no outgoing packets are ever filtered. A quick check to pflog reveals many such lines: Dec 02 02:37:42.368333 rule 5/(match) block in on dc0: \ 68.87.69.146.53 192.168.1.102.17175: 41421

Re: voip card

2008-12-02 Thread sonjaya
have you try in openbsd 4.3 or 4.4 ? I try make one small box for voip service with openbsd 4.3/4.4 thank's On Tue, Dec 2, 2008 at 2:04 PM, Zafer Da:tan [EMAIL PROTECTED] wrote: Stuart Henderson yazm}~: On 2008-12-01, sonjaya [EMAIL PROTECTED] wrote: Dear all do you have anyone here

Re: sendmail and PF

2008-12-02 Thread Jay Torrini
Keeping state on the outgoing connections worked like a charm. I also took your advice and removed quick from my SSH rule (don't recall why I had it there in the first place). Thanks to everyone for their help. On Tue, Dec 2, 2008 at 3:11 AM, Martin Toft [EMAIL PROTECTED] wrote: You have

Re: bash for root?

2008-12-02 Thread Tony Abernethy
Juan Miscaro wrote: I turn off those annoying checks and I use the same password. Works great. /juan ... until it doesn't.

Re: sendmail and PF

2008-12-02 Thread Peter N. M. Hansteen
Jay Torrini [EMAIL PROTECTED] writes: In response to people who keep telling me to allow SMTP out: that has not and will not help since no outgoing packets are ever filtered. see what happens if you add logging to your smtp pass rule -- Peter N. M. Hansteen, member of the first RFC 1149

Failure to NAT

2008-12-02 Thread - Tethys
Hi... The hard drive on my firewall machine died overnight, so I rebuilt it with a new hard drive this morning. I grabbed the most recent OpenBSD CD I had to hand (which was 3.8 -- yes, I know, and the order for 4.4 followed as soon as I got to work and had net access again). The problem is that

Re: Hardware recomendations please

2008-12-02 Thread Rod Whitworth
On Tue, 2 Dec 2008 17:43:39 +1100, nuffnough wrote: Hey there. My firewalls are getting old, so I thought it would be a great idea to replace them. I figured that a budget of around $1500 would be more than adequate, but because no one makes mobos with 5 pci slots anymore I am struggling to

Re: Hardware recomendations please

2008-12-02 Thread Louis V. Lambrecht
Stuart Henderson wrote: On 2008-12-02, nuffnough [EMAIL PROTECTED] wrote: Hey there. My firewalls are getting old, so I thought it would be a great idea to replace them. I figured that a budget of around $1500 would be more than adequate, but because no one makes mobos with 5 pci slots

Re: Failure to NAT

2008-12-02 Thread Nick Ryan
is pf enabled? sounds like it's just acting as a router at the mo to me... pf -ef /etc/pf.conf On 2 Dec 2008, at 15:10, - Tethys wrote: Hi... The hard drive on my firewall machine died overnight, so I rebuilt it with a new hard drive this morning. I grabbed the most recent OpenBSD CD I

Re: sendmail and PF

2008-12-02 Thread Martin Toft
On Mon, Dec 01, 2008 at 11:40:17AM -0700, Jay Torrini wrote: Just need to know what to let in. ext_if=dc0 trusted = REMOVED webports = { http } table blockedips persist file /etc/pf.blockedip.conf set block-policy return set optimization aggressive scrub in all antispoof for $ext_if

Re: Hardware recomendations please

2008-12-02 Thread Joseph A Borg
I just bought an Asus P5KPL-C, if you're going really cheap. http://asus.com/products.aspx?l1=3l2=11l3=563l4=0model=1978modelmenu=2 The onboard Gbit ethernet is not compatible with OpenBSD, it lacks onboard graphics, but has 4 onboard sata ports available and 1 pata, if you need them. Has

radeondrm issues

2008-12-02 Thread Mattieu Baptiste
Hi all, I noticed some problems with radeondrm since a few days. I have an IBM T43 (dmesg following) and when I exit X, my system crashes. Since it is a laptop without serial port, I can not give further details. I contacted oga@ about this issue but it's impossible to diagnose without more

Re: sendmail and PF

2008-12-02 Thread Stuart Henderson
On 2008-12-02, Jay Torrini [EMAIL PROTECTED] wrote: In response to people who keep telling me to allow SMTP out: that has not and will not help since no outgoing packets are ever filtered. A quick check to pflog reveals many such lines: Dec 02 02:37:42.368333 rule 5/(match) block in on dc0:

Re: bash for root?

2008-12-02 Thread Juan Miscaro
2008/12/2 Tony Abernethy [EMAIL PROTECTED]: Juan Miscaro wrote: I turn off those annoying checks and I use the same password. Works great. /juan ... until it doesn't. Got anything to back that up? /juan

Re: bash for root?

2008-12-02 Thread Daniel Ouellet
Juan Miscaro wrote: 2008/12/2 Tony Abernethy [EMAIL PROTECTED]: Juan Miscaro wrote: I turn off those annoying checks and I use the same password. Works great. /juan ... until it doesn't. Got anything to back that up? If you really want stories about cases where users got cut into this

Re: bash for root?

2008-12-02 Thread Christopher Linn
On Sat, Nov 29, 2008 at 08:46:00AM +, Dieter wrote: What is wrong with bash as shell for root? (Assuming bash is in /bin and statically linked.) all talk of why or why not misses one highly held best practice for system management, no matter what the OS. never change the default root

Re: bash for root?

2008-12-02 Thread Juan Miscaro
2008/12/2 Daniel Ouellet [EMAIL PROTECTED]: Juan Miscaro wrote: 2008/12/2 Tony Abernethy [EMAIL PROTECTED]: Juan Miscaro wrote: I turn off those annoying checks and I use the same password. Works great. /juan ... until it doesn't. Got anything to back that up? I remember one

Re: bash for root?

2008-12-02 Thread Ted Unangst
On Tue, Dec 2, 2008 at 2:33 PM, Juan Miscaro [EMAIL PROTECTED] wrote: Install bash statically linked. That's all. Never make a mistake. That's all.

Re: bash for root?

2008-12-02 Thread Jim Willis
Really? I mean really are we going to put this to bed yet? Cause I am bored to tears seeing new replies to something so trivial! Next real diagnostic issue please. -Jim

Re: radeondrm issues

2008-12-02 Thread Dan Harnett
On Tue, Dec 02, 2008 at 04:40:28PM +0100, Mattieu Baptiste wrote: I noticed some problems with radeondrm since a few days. I have an IBM T43 (dmesg following) and when I exit X, my system crashes. Since it is a laptop without serial port, I can not give further details. I contacted oga@

Re: bash for root?

2008-12-02 Thread System Administrator
On 2 Dec 2008 at 14:33, Juan Miscaro wrote: 2008/12/2 Daniel Ouellet [EMAIL PROTECTED]: Juan Miscaro wrote: 2008/12/2 Tony Abernethy [EMAIL PROTECTED]: Juan Miscaro wrote: I turn off those annoying checks and I use the same password. Works great. /juan ... until it

Re: radeondrm issues

2008-12-02 Thread Peter Hessler
On 2008 Dec 02 (Tue) at 14:19:42 -0500 (-0500), Dan Harnett wrote: :On Tue, Dec 02, 2008 at 04:40:28PM +0100, Mattieu Baptiste wrote: : : I noticed some problems with radeondrm since a few days. I have an IBM T43 : (dmesg following) and when I exit X, my system crashes. Since it is a laptop :

Re: PANIC on latest source

2008-12-02 Thread David Gwynne
On 02/12/2008, at 11:11 PM, Insan Praja SW wrote: On Tue, 02 Dec 2008 11:17:42 +0700, David Gwynne [EMAIL PROTECTED] wrote: Hi, Here the dmesg attach after compiling the source. It works just fine but I can't change em(4) MTU over 1600. thanks for testing the diff. not all em(4)

Re: radeondrm issues

2008-12-02 Thread Mattieu Baptiste
On Tue, Dec 2, 2008 at 10:08 PM, Peter Hessler [EMAIL PROTECTED] wrote: : :From http://www.openbsd.org/faq/faq2.html#Bugs : : ... In this case, Smart User provided output captured on a serial : console; if you can not do that, you will have to use paper and pencil : to record the crash.

Re: radeondrm issues

2008-12-02 Thread Dan Harnett
On Tue, Dec 02, 2008 at 10:08:49PM +0100, Peter Hessler wrote: minor problem. X doesn't repaint the screen into text mode when it panics, so its not possible to read anything. I'm aware of that. Though, the OP simply mentioned not having a serial port. Nada about there being nothing to

Re: bash for root?

2008-12-02 Thread Juan Miscaro
2008/12/2 System Administrator [EMAIL PROTECTED]: On 2 Dec 2008 at 14:33, Juan Miscaro wrote: 2008/12/2 Daniel Ouellet [EMAIL PROTECTED]: Juan Miscaro wrote: 2008/12/2 Tony Abernethy [EMAIL PROTECTED]: Juan Miscaro wrote: I turn off those annoying checks and I use the same

Re: radeondrm issues

2008-12-02 Thread Stuart Henderson
On 2008-12-02, Dan Harnett [EMAIL PROTECTED] wrote: Also, curious how one can tell the machine panic'd rather than simply not repainting the screen if there is nothing there. ssh'ing in from another machine... The OP hasn't mentioned anything

Da li ste već odabrali poklone za Novu Godinu?

2008-12-02 Thread Top Shop
Top Shop PoruD ite prazniD ne poklone. Veliki izbor, odliD ne ponude. Kliknite ovde i odaberite poklone. PoD etna Kuhinja i domaDinstvo Budi fit! Lepota Zabava Zdravlje IgraD ke Knjige Originalni prazniD ni pokloni samo na e-topshop! PoE!tovani, Praznici su veD pred vratima. Kako bi

Re: radeondrm issues

2008-12-02 Thread Dan Harnett
On Wed, Dec 03, 2008 at 12:12:48AM +0100, Mattieu Baptiste wrote: You can imagine that if I had the oportunity to do something on the console, I would have already done that. You'd be surprised. The point is the screen goes black and the only solution I have is to reboot the machine. oga@

Re: bash for root?

2008-12-02 Thread Jesse Zbikowski
Nick Holland wrote: the generally bad idea of duplicate user numbers I am not aware that this is considered a bad idea to have two usernames for the same UID. It is a pretty established practice to add a so-called toor username for exactly the reason of getting a nice superuser shell. I have

Re: radeondrm issues

2008-12-02 Thread Dan Harnett
On Tue, Dec 02, 2008 at 11:50:16PM +, Stuart Henderson wrote: On 2008-12-02, Dan Harnett [EMAIL PROTECTED] wrote: Also, curious how one can tell the machine panic'd rather than simply not repainting the screen if there is nothing there.

Re: Failure to NAT

2008-12-02 Thread - Tethys
On Tue, Dec 2, 2008 at 9:47 PM, Stijn [EMAIL PROTECTED] wrote: Can you post the output of pfctl -s all. I could do, but the problem was the lack of pf=YES in rc.conf It all works fine now. Tet -- Perl is like vise grips. You can do anything with it but it is the wrong tool for every job.

Re: OpenBSD and XenSource

2008-12-02 Thread Vinicius Vianna
tico escreveu: Stephan A. Rickauer wrote: Those of you interested in running OpenBSD as a Xen guest in XenEnterprise might want to use this opportunity to raise their voice: http://forums.citrix.com/thread.jspa?threadID=151525 Stephan, thanks for the notice -- I just posted my $0.02 on that

Re: OpenBSD and XenSource

2008-12-02 Thread Dongsheng Song
Yes, I running OpenBSD amd64 in Debian 5.0(lenny) kvm box for OpenBSD Translation Status[1] at lease one month, it's fine! [1] http://repo.e2echina.com/status/ --- Dongsheng Song 2008/12/3 Vinicius Vianna [EMAIL PROTECTED]: tico escreveu: Stephan A. Rickauer wrote: Those of you interested

Re: halt -p does not power off ThinkPad X61 under 4.4

2008-12-02 Thread David Schulz
Matthew Szudzik wrote: used halt -p to shutdown the machine and walked away. The next morning i found that while it appears to have shutdown correctly, the machine did not power off but instead showed syncing disks...done uchi2: host controller halted This bug has been supposedly fixed

Re: bash for root?

2008-12-02 Thread Brian
--- On Tue, 12/2/08, Ted Unangst [EMAIL PROTECTED] wrote: Install bash statically linked. That's all. Never make a mistake. That's all. Exactly. I don't get this thread. I mean, I could understand BASH as an option when openBSD was moving off of csh back in the day. But ksh works

mutt and ffs stat performance when starting mutt

2008-12-02 Thread David Schulz
Hi, I am running OpenBSD 4.4 i386. I have a 20 Gigabyte Mailbox inside my Home folder in ~/mail/ in maildir format. Altogether there are about 148800 Mails inside. Yes its too big, and probably should be split up better, but it is what it is, and occasionally i need to search trough it for