Re: using ifstated(8) to monitor wireless connections?

2013-10-29 Thread Fred Snurd
On Monday, October 28, 2013 6:10 AM, Stefan Sperling s...@openbsd.org wrote: On Sun, Oct 27, 2013 at 10:43:05PM -0700, Fred Snurd wrote: $ sudo ifconfig ath0 nwid my-id wpakey my-password $ ifconfig ath0ath0: flags=8822BROADCAST,NOTRAILERS,SIMPLEX,MULTICAST mtu 1500     lladdr

Re: system seems deadlock

2013-10-29 Thread Sébastien Marie
Hi, Just to signal that the last change on spec_vnops.c (1.77) correct my problem: now the system don't deadlock. Thanks a lot. -- Sebastien Marie On Mon, Oct 21, 2013 at 09:59:43AM +0200, Sébastien Marie wrote: On Sat, Oct 19, 2013 at 05:54:22PM +0200, Sébastien Marie wrote: Hi, I

Unattended installation - install.conf per server

2013-10-29 Thread Jiri B
Hi, how would we define specific install.conf for specific host? We could you rewrite rules based on client's IP but what based on other attributes (hwaddr...)? I was thinking if it would be possible to pass such values as HTTP headers values but our `ftp' seems to not allow us to define own

Re: nvidia driver what do you recommend

2013-10-29 Thread Peter J. Philipp
On 10/28/13 11:44, Brett Mahar wrote: On Mon, 28 Oct 2013 11:20:32 +0100 Peter J. Philipp p...@centroid.eu wrote: | I remember someone else writing to this list before saying the nvidia | driver is really slow. I just upgraded my main workstation from 5.3 to | 5.4 and it indeed is. | |

Re: Request to OpenBSD Dev's - Beer on offer

2013-10-29 Thread Andy
Yea its 24.. Would even be happy to offer some champers.. I think this is more of a Maudite crowd.. Connoisseurs on here... As I understand it you would need to write a small daemon to do the BFD state monitoring for the transmission and reception of the heartbeats with various peers. The

Re: Request to OpenBSD Dev's - Beer on offer

2013-10-29 Thread Andy
Code snippets can be seen on; http://sourceforge.net/projects/kbfd/ http://sourceforge.net/projects/bfdd/ Editing these to compile and work on OpenBSD and run 'bgpctl neighbor $bfdpeer down' etc is beyond my skills.. Thanks for reading, Andy. On Tue 29 Oct 2013 11:16:20 GMT, Andy wrote:

Re: Notifies on CARP failover

2013-10-29 Thread Andy
Thanks for ideas and examples guys :) Cheers, Andy. On 24/10/13 14:18, Comète wrote: I use ifstated for that. This is my config file: init-state auto carp_up = carp3.link.up carp10.link.up carp101.link.up carp100.link.up carp254.link.up carp2.link.up carp7.link.up carp4.link.up

Re: Request to OpenBSD Dev's - Beer on offer

2013-10-29 Thread Artturi Alm
On 10/29/13 13:45, Andy wrote: Code snippets can be seen on; http://sourceforge.net/projects/kbfd/ http://sourceforge.net/projects/bfdd/ Editing these to compile and work on OpenBSD and run 'bgpctl neighbor $bfdpeer down' etc is beyond my skills.. No editing will make the license work in

Re: Unattended installation - install.conf per server

2013-10-29 Thread Uwe Stuehler
On Tue, Oct 29, 2013 at 06:16:54AM -0400, Jiri B wrote: Hi, how would we define specific install.conf for specific host? We could you rewrite rules based on client's IP but what based on other attributes (hwaddr...)? I was thinking if it would be possible to pass such values as HTTP

Re: Request to OpenBSD Dev's - Beer on offer

2013-10-29 Thread Adam Thompson
On 13-10-28 11:54 AM, Andy wrote: Would any of the esteemed OpenBSD developers be interested in adding support for BFD (Bidirectional Forward Detection) to OpenBSD. [...] '+1's welcome from others who would be interested to show signs of support/interest.. I can only agree, BFD support would

Re: Request to OpenBSD Dev's - Beer on offer

2013-10-29 Thread Andy
On Tue 29 Oct 2013 14:55:05 GMT, Adam Thompson wrote: On 13-10-28 11:54 AM, Andy wrote: Would any of the esteemed OpenBSD developers be interested in adding support for BFD (Bidirectional Forward Detection) to OpenBSD. [...] '+1's welcome from others who would be interested to show signs of

Re: Request to OpenBSD Dev's - Beer on offer

2013-10-29 Thread sven falempin
So this is an ICMP ping with some authentification (on the gateway of a route) ?? Why is this not overkill ? On Tue, Oct 29, 2013 at 11:01 AM, Andy a...@brandwatch.com wrote: On Tue 29 Oct 2013 14:55:05 GMT, Adam Thompson wrote: On 13-10-28 11:54 AM, Andy wrote: Would any of the esteemed

Re: Request to OpenBSD Dev's - Beer on offer

2013-10-29 Thread Adam Thompson
On 13-10-29 10:01 AM, Andy wrote: Amazing! So we just need to find an alcoholic developer and we're on our way ;) Could maybe send some caffeine and pro plus in the mean time .. Are there any OpenBSD developers who don't like beer and/or caffeine? Mind you, many of them are getting as old

Re: Request to OpenBSD Dev's - Beer on offer

2013-10-29 Thread Andy
No this is more than ping.. In essence it is, but is standardised and is supported on many vendors equipment including Cisco and Juniper etc as used by all our Transit providers.. It means that not only do we remove our BGP routes, but it means that our carriers also remove the routes for our

Re: Request to OpenBSD Dev's - Beer on offer

2013-10-29 Thread Gregory Edigarov
On 10/28/2013 06:54 PM, Andy wrote: Hi all, Would any of the esteemed OpenBSD developers be interested in adding support for BFD (Bidirectional Forward Detection) to OpenBSD. The protocol itself seems pretty simple and provides a sub-second keep-alive mechanism to monitor links for routes.

Re: Request to OpenBSD Dev's - Beer on offer

2013-10-29 Thread Peter Hessler
On 2013 Oct 29 (Tue) at 17:44:51 +0200 (+0200), Gregory Edigarov wrote: :On 10/28/2013 06:54 PM, Andy wrote: :Hi all, : :Would any of the esteemed OpenBSD developers be interested in adding support for BFD (Bidirectional Forward Detection) to OpenBSD. : :The protocol itself seems pretty simple

Re: Help vote for OpenBSD

2013-10-29 Thread opendaddy
Don't forget to vote! On 9. oktober 2013 at 2:09 PM, openda...@hushmail.com wrote: Hi, Could you guys help me vote for OpenBSD at Digital Ocean? https://digitalocean.uservoice.com/forums/136585-digital-ocean/suggestions/3232571-support-bsd-os- Basically it's the only SSD cloud hosting

Re: Request to OpenBSD Dev's - Beer on offer

2013-10-29 Thread Antoine Jacoutot
On Tue, Oct 29, 2013 at 10:15:38AM -0500, Adam Thompson wrote: Are there any OpenBSD developers who don't like beer and/or caffeine? You can try bananas, but only monkeys will step up. -- Antoine

Re: Request to OpenBSD Dev's - Beer on offer

2013-10-29 Thread David Coppa
On Tue, Oct 29, 2013 at 4:53 PM, Antoine Jacoutot ajacou...@bsdfrog.org wrote: On Tue, Oct 29, 2013 at 10:15:38AM -0500, Adam Thompson wrote: Are there any OpenBSD developers who don't like beer and/or caffeine? You can try bananas, but only monkeys will step up. masturbating monkeys.

/dev/urandom in chroot

2013-10-29 Thread Gabriel Guzman
Hello Misc, I have a web program that attempts to access /dev/urandom from within the /var/www chroot. Based on archive searches and googling, I've removed the nodev flag from that mount and have created the random devices in /var/www/dev/* This allows the program to work, but I'm wondering

Re: /dev/urandom in chroot

2013-10-29 Thread Theo de Raadt
I have a web program that attempts to access /dev/urandom from within the /var/www chroot. Based on archive searches and googling, I've removed the nodev flag from that mount and have created the random devices in /var/www/dev/* So basically remove a layer of security. Awesome. See what

Re: nvidia driver what do you recommend

2013-10-29 Thread Gilles Cafedjian
I have the same problem but on a dell laptop with integrated NVidia chip. The chip is NVidia Geforce 8600M GS and since I upgraded to 5.4 my laptop is unusable (very slow window movement). I'm thinking of reinstall 5.3 to have a working laptop. I can't change GPU chipset. There is a solution

General question about openbgpd and PF

2013-10-29 Thread OCEANET - Cédric BASSAGET
Hi, Simple and general question : Is it a good thing to run PF on an openbgpd server (for security reasons), or should I de-activate PF ? Regards, Cédric -- OCEANET --- [AGENCE DU MANS] 7, rue des Frênes ZAC de la Pointe 72190 SARGE

Re: /dev/urandom in chroot

2013-10-29 Thread Gabriel Guzman
On 10/29, Theo de Raadt wrote: I have a web program that attempts to access /dev/urandom from within the /var/www chroot. Based on archive searches and googling, I've removed the nodev flag from that mount and have created the random devices in /var/www/dev/* So basically remove a layer

Re: Request to OpenBSD Dev's - Beer on offer

2013-10-29 Thread Claudio Jeker
On Tue, Oct 29, 2013 at 11:16:20AM +, Andy wrote: Yea its 24.. Would even be happy to offer some champers.. I think this is more of a Maudite crowd.. Connoisseurs on here... As I understand it you would need to write a small daemon to do the BFD state monitoring for the transmission

downing vlan(4) doesn't remove routes

2013-10-29 Thread Adam Thompson
(Posted last week to tech@, no bites there. Re-summarizing here.) I've noticed that downing a vlan(4) interface does not remove the associated link-local route from the default routing table. This seems to directly contradict the ifconfig(8) manpage, which says This action automatically

bgpd(8) EGP vs IGP question

2013-10-29 Thread Adam Thompson
I've got two border gateways that peer (eBGP) with the same external AS; they also peer with each other (iBGP) as per normal BGP design. Naturally, the BGP RIB contains two copies of every route; one learned from the external peer and one learned from the internal peer. However, when I run

Re: Request to OpenBSD Dev's - Beer on offer

2013-10-29 Thread Kenneth R Westerback
On Tue, Oct 29, 2013 at 03:01:22PM +, Andy wrote: On Tue 29 Oct 2013 14:55:05 GMT, Adam Thompson wrote: On 13-10-28 11:54 AM, Andy wrote: Would any of the esteemed OpenBSD developers be interested in adding support for BFD (Bidirectional Forward Detection) to OpenBSD. [...] '+1's welcome

Re: General question about openbgpd and PF

2013-10-29 Thread Loïc BLOT
Hi, I use PF on some OpenBSD BGP+OSPF routers on Renater (IPv4 + IPv6), it works like a charm. Why this question ? pf rule are simple: pass in quick proto tcp from $bgp_neighbor_1 to $self_peering_1 port 179 pass out quick proto tcp from $self_peering_1 to $bgp_neighbor_1 port 179 -- Best

Re: bgpd(8) EGP vs IGP question

2013-10-29 Thread Sebastian Benoit
Adam Thompson(athom...@athompso.net) on 2013.10.29 15:20:04 -0500: I've got two border gateways that peer (eBGP) with the same external AS; they also peer with each other (iBGP) as per normal BGP design. Naturally, the BGP RIB contains two copies of every route; one learned from the

Re: bgpd(8) EGP vs IGP question

2013-10-29 Thread Stuart Henderson
On 2013-10-29, Sebastian Benoit benoit-li...@fb12.de wrote: It is a information added by the originating router of that route: or in some cases, by a transit provider trying to steer traffic towards them ;)

Re: General question about openbgpd and PF

2013-10-29 Thread Stuart Henderson
On 2013-10-29, OCEANET - Cédric BASSAGET ced...@oceanet.com wrote: Hi, Simple and general question : Is it a good thing to run PF on an openbgpd server (for security reasons), or should I de-activate PF ? I use it, partly to mitigate ssh brute-force, partly so I can easily enable pflow if I

Re: General question about openbgpd and PF

2013-10-29 Thread Sebastian Benoit
OCEANET - C?dric BASSAGET(ced...@oceanet.com) on 2013.10.29 18:27:09 +0100: Hi, Simple and general question : Is it a good thing to run PF on an openbgpd server (for security reasons), or should I de-activate PF ? Yes, in general you should: At least to make sure only traffic from your own

Re: Yubikey login: bad file descriptor.

2013-10-29 Thread Stuart Henderson
On 2013-10-28, Pieter Verberne pieterverbe...@xs4all.nl wrote: What I actually wanted to do: I want to use two-factor authentication over ssh using passwd+yubikey. Is this possible? It looks like yubikey will 'replace' passwd authentication, and cannot supplement it. You're right,

Coursera

2013-10-29 Thread moss
Hi, I lurk here as I'm learning OpenBSD but I write now because I'm a little alarmed with a feature called Signature Track on Coursera. I'm doing a free online course on the Introduction to Philosophy run from the University of Edinburgh. https://www.coursera.org/course/introphil The course is

[Fwd: Coursera]

2013-10-29 Thread Maurice McCarthy
OK here is the screen dump. Moss - Original Message - Subject: Coursera From:McCarthy, Maurice maurice.mccar...@maerskoil.com Date:Wed, October 30, 2013 12:47 am To: 'm...@mythic-beasts.com' m...@mythic-beasts.com

Coursera

2013-10-29 Thread Maurice McCarthy
Yes, I'd forgotten about demime. For anyone who is interested the screen dump is now posted at https://ubuntuone.com/3PBTfO0UENZO8yS8xvVqcF Apologies to Monty, I'd intend to reply to the list and not personally. So this is a resend to the right address. As it happens next week's lecture is on

OpenBSD maintenance compared to FreeBSD

2013-10-29 Thread David Noel
I started playing around with FreeBSD back in the 2.2.7 days. I'd describe myself as a casual desktop/workstation user. Back in the day I was attracted to OpenBSD's heavy focus on security but was pulled towards FreeBSD due to a good friend of mine being a FreeBSD contributor (dude, trust me, it's

5.4 CDs in New Zealand

2013-10-29 Thread Richard Toohey
Hi, all. CD sets arrived today in Tauranga, New Zealand. Thanks to Theo and all the developers and other people behind OpenBSD - your work is much appreciated.

Looking for a laptop in the Toronto area

2013-10-29 Thread Brad Smith
Hi, I added an entry to want.html as I am looking for a laptop to replace the laptop I have at the moment which has some really bad heat related issues and I have been hobbling along with it for awhile now. I am in the Toronto area. I thought I would post to misc@ for some greater exposure.