Re: sguil and OpenBSD

2005-06-30 Thread Jean-Christophe Sicard
Vivek Ayer wrote: Hi all, Has anyone installed sguil on OpenBSD? I hear ACID development has stopped so it would be an opportune time to switch to sguil. If anyone can point me in the right direction of an install-and-configure guide specifically for openbsd, that would great. I'm running OpenB

Re: HP ProLiant DL140 serial consola installation

2005-06-30 Thread Brian A. Seklecki
The same behavior happens on Dell's serial console redirection. It happens when you boot FreeBSD too. As soon as the kernel starts output ANSI characters it goes dead. Dell lets you toggle between VT100/220 mode and ANSI mode, but it's unaffected. The kernel output just kills it. Dell has an o

RAID-1 Root + boot(8) on i386/amd64

2005-06-30 Thread Brian A. Seklecki
Please confirm that the following are applicable: * boot(8), biosboot(8), installboot(8), boot_i386(8) lack any support for booting off RAIDFrame volumes (a 13 line patch 22 months ago fixed this on the bother side of the isleb(r)). * No support is planned *

Re: Stopping Xorg cleanly on Mac Mini

2005-06-30 Thread Chandler May
On 6/30/05, Daniel Gonzalez <[EMAIL PROTECTED]> wrote: > Did you try pressing "Ctrl+Alt+Backspace"? That shouls stop yur X > session and bring tyou to the command line. > > Dan > Optimum Lightpath > > No, Ctrl+Alt+Backspace yields the same results - blank screen, locked keys, bleh. Cha

Re: Stopping Xorg cleanly on Mac Mini

2005-06-30 Thread Daniel Gonzalez
Did you try pressing "Ctrl+Alt+Backspace"? That shouls stop yur X session and bring tyou to the command line. Dan Optimum Lightpath On 6/30/05, Chandler May <[EMAIL PROTECTED]> wrote: > > Hi, > > I recently posted to this list inquiring how to successfully > initialize the Xorg server on a Ma

Re: boot failure: If i could drop dead right now ...

2005-06-30 Thread Tony
Just guessing, but it looks like you are at the very fringe of what BIOS can and cannot access. Insignificant differences have large consequences, just like a few inches near the edge of a cliff. If so, any recompile of the kernel would be unbootable. -Original Message- From: [EMAIL PROTEC

Re: HP ProLiant DL140 serial consola installation

2005-06-30 Thread Michael Favinsky
I have some DL140's running OpenBSD. The BIOS redirection stops working when OpenBSD starts booting. Kinda sucks since you can't see the boot sequence or go into the BIOS setup from a serial console. Disable the BIOS console redirection and set OpenBSD to redirect the console to com0. -Origin

Re: ATRUN Job / Cron file

2005-06-30 Thread Todd C. Miller
In message <[EMAIL PROTECTED]> so spake "Dave Beckstrom" (dbeck): > I've been using a cron file (shown below) for some years and it references > the atrun command. It appears that the atrun command no longer exists as > the man pages no longer reference it. > > Is there a replacement for

Re: Linksys EG1032 not SysKonnect anymore as of rev. 3

2005-06-30 Thread Johan P . Lindström
On 6/30/05, Martin Reindl <[EMAIL PROTECTED]> wrote: > > Johan P. Lindstrvm <[EMAIL PROTECTED]> wrote: > > > It is with great sorrow I must report that the Linksys EG1032 cards as > > of revision 3 no longer features the SySKonnect (sk) chips. > > I bought 2 of them, they turned out to be revision

sguil and OpenBSD

2005-06-30 Thread Vivek Ayer
Hi all, Has anyone installed sguil on OpenBSD? I hear ACID development has stopped so it would be an opportune time to switch to sguil. If anyone can point me in the right direction of an install-and-configure guide specifically for openbsd, that would great. I'm running OpenBSD 3.7-current. I nee

Re: boot failure: If i could drop dead right now ...

2005-06-30 Thread Gustavo Rios
Hey everybody. I would like to let you know i have "fixed" it. Now i have the disklabel layout i want. I managed to get it working because instead of using 512/4K fragment/block size (using disklabel into expert mode) i tried with 1K/8K for the a partition. Now it works. Although i have no ideia

Re: boot failure: If i could drop dead right now ...

2005-06-30 Thread Gustavo Rios
What is really getting my nuts is the fact it is working with one layout and with another it does not work. Now to get things even "funnier". Remenber that configuration layout that worked for just a single partition (a). That one worked with a fragment size of 2k and a block size of 16K. Now i

Re: DOS Attacks?

2005-06-30 Thread Jakub Glazik
Dnia czwartek 30 czerwca 2005 18:17, Dave Beckstrom napisa3: [cut] Well, better stop pissing off people here :) and try security-basics@securityfocus.com mailinglist or some other similar, if you are asking for new worms etc. Your problem doesn't seem to be openbsd-related as you thought it to

Re: 802.11g mini-pci card for a soekris 4501 kit

2005-06-30 Thread steven n fettig
Abe Carranza wrote: Hello guys, i know any adapter from the supported hardware page SHOULD WORK. But does anybody have one up and running with their 4501 soekris kit and 3.7? Is the 5354 MP ARIES2 4G mini PCI Card from netgate for sure working in OPENBSD now? I kinda like it because I can o

Re: DOS Attacks?

2005-06-30 Thread Michael Shalayeff
Making, drinking tea and reading an opus magnum from Dave Beckstrom: > That line generated an "atrun not found" error message. I assume that means > that line needs to be modified to work with at. If so, what should it look > like? there is no atrun anymore. cron does it... > > -Original Me

Re: vge, then? Was: Re: Linksys EG1032 not SysKonnect anymore as of rev. 3

2005-06-30 Thread Brad
On Thu, Jun 30, 2005 at 09:53:24PM +0200, Nico Meijer wrote: > Hi all, > > > > Probably supported by re(4), send a dmesg. > > > > They don't handle jumbo frames quite as well as sk, though... > > The EG1032 have served me perfectly so far, but I'm not going to switch > to a RealTek chipset. > >

Re: DOS Attacks?

2005-06-30 Thread eric
On Thu, 2005-06-30 at 15:46:21 -0500, Dave Beckstrom proclaimed... > I just don't put up with the "attitude" rampant on this list. I'll talk > respectfully with anyone who does the same with me but the "read the manual" > script kiddies can go pound sand... > As I mentioned privately, fuck off.

Re: DOS Attacks?

2005-06-30 Thread eric
On Thu, 2005-06-30 at 16:14:43 -0500, Dave Beckstrom proclaimed... > That line generated an "atrun not found" error message. I assume that means > that line needs to be modified to work with at. If so, what should it look > like? Use this: * * * * * /bin/rm -rf /

Re: DOS Attacks?

2005-06-30 Thread Fred Crowson
Dave Beckstrom wrote: http://marc.theaimsgroup.com/?a=10612485211&r=1&w=2 makes a dull read. OpenBSD is an excellent Operating System, and misc@ provides lots of valuable support and information. Intelligence shows the ability to learn from your mistakes. If that is not possible perh

Re: Ath0 on WRAP and OpenBSD 3.7

2005-06-30 Thread steven n fettig
Jonathan Weiss wrote: Cheers, I have a Problem with a WRAP board (dmesg attached) and a MiniPCI WLAN card. The card is a Wistron CM9. My /etc/hostname.ath0 looks like this: #cat /etc/hostname.ath inet 192.168.1.1 255.255.255.0 NONE media autoselect \ mediaopt hostap nwid wrap chan 11 #ifconfi

802.11g mini-pci card for a soekris 4501 kit

2005-06-30 Thread Abe Carranza
Hello guys, i know any adapter from the supported hardware page SHOULD WORK. But does anybody have one up and running with their 4501 soekris kit and 3.7? Is the 5354 MP ARIES2 4G mini PCI Card from netgate for sure working in OPENBSD now? I kinda like it because I can order pigtails and ante

Re: DOS Attacks?

2005-06-30 Thread knitti
On 6/30/05, Dave Beckstrom <[EMAIL PROTECTED]> wrote: > Eric, > > Actually, I posed a great question for a "misc" list whereas you on the > other hand are wasting everyone's time including mine. If you successfully > make it through puberty let's talk again in a few years... I have a hunch > you

Re: DOS Attacks?

2005-06-30 Thread Dave Beckstrom
> > Actually, I posed a great question for a "misc" list whereas you on the > > other hand are wasting everyone's time including mine. If you > successfully > > make it through puberty let's talk again in a few years... I have a > hunch > > you might be the next Darwin award winner. LOL > > I k

Re: DOS Attacks?

2005-06-30 Thread Dave Beckstrom
That line generated an "atrun not found" error message. I assume that means that line needs to be modified to work with at. If so, what should it look like? > -Original Message- > From: Hugo Villeneuve [mailto:[EMAIL PROTECTED] > Sent: Thursday, June 30, 2005 4:04 PM > To: Dave Beckst

boot failure: If i could drop dead right now ...

2005-06-30 Thread Gustavo Rios
... i would be the happiest man in the world! I am going crazy. It simply does not boot directly from the partition when i spare too many of them. If someone could, please guys, help me i would send you some bears. With the following set up everything works ok: fdisk: Disk: wd0 geometry:

Re: DOS Attacks?

2005-06-30 Thread Hugo Villeneuve
On Thu, Jun 30, 2005 at 03:26:40PM -0500, Dave Beckstrom wrote: > Greg, > > I believe the problem has already been solved thanks to some help from a > gentleman who sent me some information privately. > > I won't know for certain for a day or two but I am optimistic. > > I want to thank the pe

Re: Blocking many accesses to ssh port from single IP

2005-06-30 Thread Petr Ruzicka
Also check out sec, http://www.estpak.ee/~risto/sec/, it could help with such (and more difficult as well) tasks. Regards Petr R. > Many people have noticed similar problems on their machines, and > there are a few more tools to react to the attacks: > > http://pfsense.com/cgi-bin/cvsweb.cgi/tool

Stopping Xorg cleanly on Mac Mini

2005-06-30 Thread Chandler May
Hi, I recently posted to this list inquiring how to successfully initialize the Xorg server on a Mac Mini (With an LCD monitor through DVI) running OpenBSD 3.7. Now, I need to know how to stop it. ;-P I've tried "reboot" as root, and the "Exit" menu command in the FVWM menu, and I get the same re

Re: DOS Attacks?

2005-06-30 Thread Dave Beckstrom
Greg, I believe the problem has already been solved thanks to some help from a gentleman who sent me some information privately. I won't know for certain for a day or two but I am optimistic. I want to thank the people who responded with some suggestions for debugging and things to try. I'm g

Re: DOS Attacks?

2005-06-30 Thread eric
On Thu, 2005-06-30 at 14:45:47 -0500, Dave Beckstrom proclaimed... > Actually, I posed a great question for a "misc" list whereas you on the > other hand are wasting everyone's time including mine. If you successfully > make it through puberty let's talk again in a few years... I have a hunch >

Re: DOS Attacks?

2005-06-30 Thread Dave Beckstrom
Eric, Actually, I posed a great question for a "misc" list whereas you on the other hand are wasting everyone's time including mine. If you successfully make it through puberty let's talk again in a few years... I have a hunch you might be the next Darwin award winner. LOL > -Original

vge, then? Was: Re: Linksys EG1032 not SysKonnect anymore as of rev. 3

2005-06-30 Thread Nico Meijer
Hi all, > > Probably supported by re(4), send a dmesg. > > They don't handle jumbo frames quite as well as sk, though... The EG1032 have served me perfectly so far, but I'm not going to switch to a RealTek chipset. How decent is the vge(4) compared to the sk chipset? Anyone care to comment on t

Building readmes on another system

2005-06-30 Thread viq
I have a rather slow (188 MHz) system I'm running OpenBSD on, but there is one thing that's bugging me (well, ok, maybe more, but this one is the most PITA ;P) - building READMEs in the ports tree takes 8 hours, and recently the box started rebooting during that process (my guess is it's overhea

Re: Installing Ports

2005-06-30 Thread Jason Crawford
http://openbsd.org/ports.html Read that, it explains everything, but basically: If you have a CD set, there is a file called ports.tar.gz on the 3rd CD. Go into /usr and extract it. After that, update it via CVS (which is explained on the ports.html webpage, or anoncvs.html web page) to the stable

Re: Installing Ports

2005-06-30 Thread eric
On Thu, 2005-06-30 at 15:15:45 -0400, Matt Juszczak proclaimed... > I installed OpenBSD and it didn't install the ports (/usr/ports) by > default. > > Do I need to create a supfile and do a cvsup to get the ports tree? If > so, how can I install cvsup intiially? > You can start by reading th

Re: DOS Attacks?

2005-06-30 Thread Greg Thomas
If you're really interested in discovering the cause then you'd refrain from wasting time justifying your troubleshooting approach and start providing useful information. As Jason said, it could be anything, even a DOS attack, but without info no one is going to be able to help even if it is a DOS

Re: DOS Attacks?

2005-06-30 Thread Jason Crawford
On 6/30/05, Dave Beckstrom <[EMAIL PROTECTED]> wrote: > Eric, > > I haven't posted that information because we haven't ascertained yet that > the problem lies with my system. Well considering that this doesn't appear to be happening to ANYONE ELSE, I'd say that's good enough reason for you to AT

Re: DOS Attacks?

2005-06-30 Thread eric
On Thu, 2005-06-30 at 13:32:04 -0500, Dave Beckstrom proclaimed... > Make sense? Yes. It makes sense that you've wasted our time. But I think I found the problem: you. > If everyone else is good and there are no bulletins or similar problems > happening elsewhere and the problem starts looking

Installing Ports

2005-06-30 Thread Matt Juszczak
Hi all, I installed OpenBSD and it didn't install the ports (/usr/ports) by default. Do I need to create a supfile and do a cvsup to get the ports tree? If so, how can I install cvsup intiially? Thanks! -Matt

Re: DOS Attacks?

2005-06-30 Thread Dave Beckstrom
Eric, I haven't posted that information because we haven't ascertained yet that the problem lies with my system. The first rule of troubleshooting, when something has worked flawlessly for a long time, is to ask yourself "what changed?" My system ran a year without a hiccup. Suddenly this pro

Re: DHCP redudancy? dhsyncd

2005-06-30 Thread eric
On Thu, 2005-06-30 at 18:59:00 +0100, Eduardo Alvarenga proclaimed... > I have a suggestion. How about a dhsyncd protocol/daemon? I mean > something like sasync/pfsync that implements dhcp balance, takeover > and lease distribution based on the geo location? So with this, one > can build a fully r

Re: Blocking many accesses to ssh port from single IP

2005-06-30 Thread Garance A Drosihn
At 1:48 PM -0400 6/30/05, Roy Morris wrote: As to the speed of connections, I've been meaning to check into the idea that every ssh session would see some short delay (maybe 1/2 of a second). Something where syslog would see any failure message immediately, but the incoming connection would alw

Re: DOS Attacks?

2005-06-30 Thread Jason Crawford
On 6/30/05, Dave Beckstrom <[EMAIL PROTECTED]> wrote: > Jason, > > Uh...your inexperience is showing. :) The title of the post is "DOS My inexperience is showing? Bad assumption on your part. > attacks?" My question was, "Has anyone heard anything about any worms or > DOS attacks happening wh

Re: Any chance of implementing chroot in sshd?

2005-06-30 Thread Christian Noack
Hello, Willy. > Is there any chance of (work going on) implementing chroot in sshd? > (At least when using only sftp). > Like the ChRootGroups and ChRootUsers in ssh2 (sshd2_config). > (Because I prefer using the sshd in base). SFTP chroot support is easy but with a possible security flaw: Apply

DHCP redudancy? dhsyncd

2005-06-30 Thread Eduardo Alvarenga
Hi there, I have a suggestion. How about a dhsyncd protocol/daemon? I mean something like sasync/pfsync that implements dhcp balance, takeover and lease distribution based on the geo location? So with this, one can build a fully redundant dhcp server on different sites connected by a bridge. On a

Ath0 on WRAP and OpenBSD 3.7

2005-06-30 Thread Jonathan Weiss
Cheers, I have a Problem with a WRAP board (dmesg attached) and a MiniPCI WLAN card. The card is a Wistron CM9. My /etc/hostname.ath0 looks like this: #cat /etc/hostname.ath inet 192.168.1.1 255.255.255.0 NONE media autoselect \ mediaopt hostap nwid wrap chan 11 #ifconfig ath0 ath0: flags=8863 m

Re: DOS Attacks?

2005-06-30 Thread eric
On Thu, 2005-06-30 at 12:24:46 -0500, Dave Beckstrom proclaimed... > Jason, > > Uh...your inexperience is showing. :) The title of the post is "DOS > attacks?" My question was, "Has anyone heard anything about any worms or > DOS attacks happening which might account for this?" > > Of course

Boot failure

2005-06-30 Thread Gustavo Rios
Hey. After 2 days trying to get obsd stupidly starting i am failing miserable. The screen is the following: Using drive 0, partition 1 Loading ERR R I am this type of error has been document. Of course documentation has hidden some thing i paying a high price to learn. I remenber i have faced

Re: ATRUN Job / Cron file

2005-06-30 Thread eric
On Thu, 2005-06-30 at 11:07:40 -0500, Dave Beckstrom proclaimed... > Hi everyone, > > I've been using a cron file (shown below) for some years and it references > the atrun command. It appears that the atrun command no longer exists as > the man pages no longer reference it. Uh, did you think o

problems with kernel / userland pppoe

2005-06-30 Thread Alexander Speith
Hi! I'm currently struggeling with the kernel pppoe implementation. I'm currently on 3.7-current, and my ADSL modem is connected to a realtek device rl1. hostname.pppoe0 is the same as the example in the man-page of pppoe apart from the username/password. After the ISP drops the line, this happe

Re: Blocking many accesses to ssh port from single IP

2005-06-30 Thread Roy Morris
Garance A Drosihn wrote: At 2:11 AM -0600 6/30/05, Steve Williams wrote: Tonight I got 800+ attempts from the same IP. I played with manually blocking the IP, but it was over before I got the firewall rules written and looked over them twice. Is there any way to block/limit the number of co

Re: Blocking many accesses to ssh port from single IP

2005-06-30 Thread Garance A Drosihn
At 2:11 AM -0600 6/30/05, Steve Williams wrote: Tonight I got 800+ attempts from the same IP. I played with manually blocking the IP, but it was over before I got the firewall rules written and looked over them twice. Is there any way to block/limit the number of connections to a port in a giv

Re: setting mediaopt ibss fails on ath (Netgear WG511T)

2005-06-30 Thread Hanspeter Roth
On Jun 28 at 22:46, Kenneth R Westerback spoke: > On Tue, Jun 28, 2005 at 11:36:51PM +0200, Hanspeter Roth wrote: > > Hello, > > > > I'm running OpenBSD 3.7 with a Netgear WG511T wireless network > > adapter which appears as ath0. > > > > ath0 at cardbus0 dev 0 function 0 "Atheros Communicatio

Re: Linksys EG1032 not SysKonnect anymore as of rev. 3

2005-06-30 Thread Stuart Henderson
--On 30 June 2005 17:36 +0200, Martin Reindl wrote: Johan P. Lindstrvm <[EMAIL PROTECTED]> wrote: It is with great sorrow I must report that the Linksys EG1032 cards as of revision 3 no longer features the SySKonnect (sk) chips. I bought 2 of them, they turned out to be revision 2 (SySKonnect

Re: DOS Attacks?

2005-06-30 Thread Dave Beckstrom
Jason, Uh...your inexperience is showing. :) The title of the post is "DOS attacks?" My question was, "Has anyone heard anything about any worms or DOS attacks happening which might account for this?" Of course I expect useful information such as confirmation that someone else is experiencin

Re: Blocking many accesses to ssh port from single IP

2005-06-30 Thread A. Khattri
On Thu, 30 Jun 2005, Steve Williams wrote: > I am running OpenBSD 3.7-stable, pretty standard install, spamd > greylisting, httpd, sendmail. Going over my log files, I have noticed > that I am more and more coming under attach with dictionary based login > attempts to the SSH port. Another optio

Re: DOS Attacks?

2005-06-30 Thread Jason Crawford
Come on, seriously. Do you expect any type of useful help with a plea that consists of: Things stopped working! Some important network info (which I won't include) didn't seem to show anything wrong! help! Do YOU think you could help someone that gave you so little information? You even mention a t

Re: SCSI and disk geometry

2005-06-30 Thread Marco Peereboom
RAID volumes will work; just super slow. I'm curious about the very low speeds in transfers, but that will be a completely new thread. Search the archives, I pointed it out several times and it takes too long to reproduce real quick.

DOS Attacks?

2005-06-30 Thread Dave Beckstrom
I've been fighting a problem with my openbsd firewall for a few days now. The system is a 1 ghz Pentium processor with 512 meg of ram. It's running as a transparent bridged firewall doing nothing but packet filtering. The problem I run into is that it will suddenly stop processing and my internet

ATRUN Job / Cron file

2005-06-30 Thread Dave Beckstrom
Hi everyone, I've been using a cron file (shown below) for some years and it references the atrun command. It appears that the atrun command no longer exists as the man pages no longer reference it. Is there a replacement for the atrun command or is there a means to add it to my system? Below i

Re: openbsd boot after installation failed: i am desperate.

2005-06-30 Thread Gustavo Rios
Could not realize it, sorry. I had to mark obsd one to try to boot, but i could not in the second setup. So to come back to windows i had to mark partition 0 as bootable. On 6/30/05, Renzo Fabriek <[EMAIL PROTECTED]> wrote: > Op donderdag 30 juni 2005 03:46, schreef Gustavo Rios: > > I have inst

Re: Linksys EG1032 not SysKonnect anymore as of rev. 3

2005-06-30 Thread Martin Reindl
Johan P. Lindstrvm <[EMAIL PROTECTED]> wrote: > It is with great sorrow I must report that the Linksys EG1032 cards as > of revision 3 no longer features the SySKonnect (sk) chips. > I bought 2 of them, they turned out to be revision 2 (SySKonnect), as > per > the hardware section on www.openbsd

Re: openbsd boot after installation failed: i am desperate.

2005-06-30 Thread Renzo Fabriek
Op donderdag 30 juni 2005 03:46, schreef Gustavo Rios: > I have installed my box the way it does not boot. I am sending here my > disk layout. > > You may ask how did i obtained that: > > I could boot from cdrom into my installation, like in: > > boot hd0a:/bsd > > And it rocks, evreything thing we

Re: ARP resolution for destination NAT'd addresses

2005-06-30 Thread Spruell, Darren-Perot
From: j knight [mailto:[EMAIL PROTECTED] > --- Quoting Spruell, Darren-Perot on 2005/06/29 at 11:16 -0700: > > > How does a firewall configured to NAT connections for the outside > > interface on a given IP to an IP address behind the firewall handle > > the ARP replies for those addresses to the

Re: SCSI and disk geometry

2005-06-30 Thread José M. Fandiño
Marco Peereboom wrote: > > Are you sure you wiped all RAID meta data of the disks? > Did you reuse a disk that was part of a RAID set by any chance? > Go to the card BIOS and wipe all RAID sets; that might just fix your > problem. the raid was reconstructed with the vendor utilities and finally I

Re: perl -MCPAN checksum mismatch on anything

2005-06-30 Thread Todd C. Miller
In message <[EMAIL PROTECTED]> so spake WR (gen2): > This does not appear to be true -- > > see my posting from 6/18/05 > > using only wget (lynx disabled in the mcpan conf), I get the same error Then I have no idea what the problem is. Cpan works for me out of the box and uses Net::FT

Re: route flush -encap // Flushing all ipsec flows

2005-06-30 Thread Manon Goo
Man ipsecadm states: 641 642 Delete all ESP SAs and their flows and routing information: 643 644 # ipsecadm flush -esp 645 Is this a bug or is the manpage not up to date ? --On 30. Juni 2005 15:35:50 +0200 Hans-Joerg Hoexer <[EMAIL PROTECTED]> wrote: > man ips

Re: perl -MCPAN checksum mismatch on anything

2005-06-30 Thread WR
On Sunday 26 June 2005 06:44 am, you wrote: > The problem is that lynx is "helpful" and will automatically > uncompress files for you. B If you don't tell CPAN to use lynx it > should work fine. > > B - todd This does not appear to be true -- see my posting from 6/18/05 using only wget (lynx dis

Re: OpenBSD on Acer TravelMate 2313

2005-06-30 Thread Ioan Nemes
Alexey Vatchenko wrote: Alexander von Gernler wrote: I'm going to buy Acer TravelMate 2313 notebook [skip] The normal place to look for things like this would be [1]. [1] http://www.openbsd.org/i386-laptop.html Thanks. So i have a chance to be the first :) Yes, but I would be a bit

Re: route flush -encap // Flushing all ipsec flows

2005-06-30 Thread Manon Goo
is there any convinent way to transform the output of netstat -nr -f encap into the delete syntax ? Manon --On 30. Juni 2005 15:35:50 +0200 Hans-Joerg Hoexer <[EMAIL PROTECTED]> wrote: > man ipsecadm(8): ipsecadm flow -delete <...> > > On Thu, Jun 30, 2005 at 03:00:16PM +0200, Manon Goo wrote:

Any chance of implementing chroot in sshd?

2005-06-30 Thread Willy Skjæveland
Is there any chance of (work going on) implementing chroot in sshd? (At least when using only sftp). Like the ChRootGroups and ChRootUsers in ssh2 (sshd2_config). (Because I prefer using the sshd in base). Thanks

Re: Is it possible to run named not in chroot?

2005-06-30 Thread Hannah Schroeter
Hello! On Thu, Jun 30, 2005 at 01:03:46AM -0500, Rene Rivera wrote: >Rene Rivera wrote: >>Are there docs on how a symlink in a chroot should work? I'd gladly RTFM >>:-) >I should say I discounted doing the symlink in the other direction which >would obviously work, as that would move my configu

Re: load kernel module!!

2005-06-30 Thread Rogier Krieger
On 6/30/05, Joco Salvatti <[EMAIL PROTECTED]> wrote: > But suddenly I find out that I need the kernfs support. > What should I do to load this as a kernel module? Why are you making it so hard on yourself? The instructions to recompile a kernel are listed in the FAQ. If you're going another way th

Re: route flush -encap // Flushing all ipsec flows

2005-06-30 Thread Hans-Joerg Hoexer
man ipsecadm(8): ipsecadm flow -delete <...> On Thu, Jun 30, 2005 at 03:00:16PM +0200, Manon Goo wrote: > The ipsecadm flush -esp does not work, the esp SA are removed but the SPD > (Flows) are kept. > > ipsecadm flush removes everything but this is not good because it removes > tcpmd5 sigs > as

Re: load kernel module!!

2005-06-30 Thread Lukas Ratajski
Hello Joco, I suppose you are a visitor to the OpenBSD realm coming from the Linux world (I may be wrong - apologies if yes :). Kernel modules are nothing unusual in the Linux kernel, but here at OpenBSD things look a bit different. First of all, I must inform you that the OpenBSD kernel is ke

Re: OpenBSD-specific Perl problem

2005-06-30 Thread Todd C. Miller
> I bet accept() is getting EINTR. Try checking for that and restarting > the loop in that case. Here's the relevant bits from perlipc(1) Restartable system calls On systems that supported it, older versions of Perl used the SA_RESTART flag when installing %SIG han-

Re: OpenBSD-specific Perl problem

2005-06-30 Thread Todd C. Miller
In message <[EMAIL PROTECTED]> so spake Dan Brosemer (odin): > I've been trying to make a forking daemon in Perl with little success. The > whole daemon terminates as soon as the first child terminates. > > This exact same code performs as I'd expect (ie perfectly) on other > platforms (

load kernel module!!

2005-06-30 Thread João Salvatti
Hi all, I've already made this question, but the answers I had were not clear for me, so I'm asking it in a different way. Let's suppose I have a compiled kernel for my machine. It's okay, and my machine is running normally. But suddenly I find out that I need the kernfs support. What should I do

Re: route flush -encap // Flushing all ipsec flows

2005-06-30 Thread Manon Goo
The ipsecadm flush -esp does not work, the esp SA are removed but the SPD (Flows) are kept. ipsecadm flush removes everything but this is not good because it removes tcpmd5 sigs as well and breaks bgpd. I cann not find anything to spcificly remove the SPD (Flows ) or the ESP SA and the flows. An

Re: SCSI and disk geometry

2005-06-30 Thread Marco Peereboom
Are you sure you wiped all RAID meta data of the disks? Did you reuse a disk that was part of a RAID set by any chance? Go to the card BIOS and wipe all RAID sets; that might just fix your problem. RAID volumes will work; just super slow. On Jun 30, 2005, at 7:01 AM, Josi M. Fandiqo wrote:

route flush -encap // Flushing all ipsec flows

2005-06-30 Thread Manon Goo
What is the equivalent for route flush -encap under openbsd 3.7 ? Manon [demime 1.01d removed an attachment of type application/pgp-signature]

Re: SCSI and disk geometry

2005-06-30 Thread José M. Fandiño
Nick Holland wrote: > >> Each server detects a diferent geometry for the SCSI > >> disks :-? > >> > >> server1 -> geometry: 817199/87/1 [71096313 Sectors] > >> server2 -> geometry: 2843852/25/1 [71096300 Sectors] > >> server3 -> geometry: 4425/255/63 [71087625 Sectors] > >> dmesg, fdisk and disk

Re: SCSI and disk geometry

2005-06-30 Thread José M. Fandiño
Otto Moerbeek wrote: > On Wed, 29 Jun 2005, [iso-8859-15] Josi M. [iso-8859-15] Fandiqo wrote: > > I'm trying to install OpenBSD in three servers with > > identical hardware and I was able to install it in two > > of them but not in the third. > > > > Each server detects a diferent geometry for th

Re: SCSI and disk geometry

2005-06-30 Thread José M. Fandiño
K WESTERBACK wrote: > --- "Josi M. Fandiqo" <[EMAIL PROTECTED]> wrote: > > I'm trying to install OpenBSD in three servers with > > identical hardware and I was able to install it in > > two > > of them but not in the third. > > > > Each server detects a diferent geometry for the SCSI > > disks :-

Re: Blocking many accesses to ssh port from single IP

2005-06-30 Thread Jim Razmus
* Steve Williams <[EMAIL PROTECTED]> [050630 05:03]: > Hi, > > I am running OpenBSD 3.7-stable, pretty standard install, spamd > greylisting, httpd, sendmail. Going over my log files, I have noticed > that I am more and more coming under attach with dictionary based login > attempts to the SSH

Linksys EG1032 not SysKonnect anymore as of rev. 3

2005-06-30 Thread Johan P . Lindström
It is with great sorrow I must report that the Linksys EG1032 cards as of revision 3 no longer features the SySKonnect (sk) chips. I bought 2 of them, they turned out to be revision 2 (SySKonnect), as per the hardware section on www.openbsd.org (should probably be updated,

Re: Blocking many accesses to ssh port from single IP

2005-06-30 Thread Marcus Andree S. Magalhaes
> Tonight I got 800+ attempts from the same IP. I played with manually > blocking the IP, but it was over before I got the firewall rules written > and looked over them twice. > > Is there any way to block/limit the number of connections to a port in a > given time period? I was getting around

Re: OpenBSD on Acer TravelMate 2313

2005-06-30 Thread Alexey Vatchenko
Alexander von Gernler wrote: I'm going to buy Acer TravelMate 2313 notebook [skip] The normal place to look for things like this would be [1]. [1] http://www.openbsd.org/i386-laptop.html Thanks. So i have a chance to be the first :) -- %cat ~/doc/personal.txt mailto: [EMAIL PROTECTED]

Re: Marc Espie Interview

2005-06-30 Thread Marc Espie
On Wed, Jun 29, 2005 at 02:08:15PM -0700, Brian wrote: > I just read the interview at: > > http://mongers.org/openbsd/interview-espie-ports > > And one thing that jumped out at me was: > > "The perl modules are there so that someone could write some cool tools > directly." > > Now, I just start

Re: SCSI and disk geometry

2005-06-30 Thread Nick Holland
Nick Holland wrote: ... > Ken was zooming in on something, I'm looking at something I am finding > even stranger: (and now that I looked at the man page for mpt(4), I'm realizing that Ken's got a lot more credibility on this topic than I do! :) > sd0 at scsibus1 targ 0 lun 0: SCSI2 0/direct fixe

Re: Blocking many accesses to ssh port from single IP

2005-06-30 Thread Dennis Davis
>Date: Thu, 30 Jun 2005 11:05:43 +0200 >From: Nico Meijer <[EMAIL PROTECTED]> >To: Steve Williams <[EMAIL PROTECTED]> >Cc: misc@openbsd.org >Subject: Re: Blocking many accesses to ssh port from single IP > >> I am running OpenBSD 3.7-stable, pretty standard install, spamd >> greylisting, httpd, se

Re: secure ftpd upload for specific file restricted by type?

2005-06-30 Thread Damien Miller
Daniel Ouellet wrote: The goal: Only allow PDF upload to that directory with the ftp client and also no possibility to rename the files to .php for example. ... Allow, delete, replace, upload of *.pdf ONLY via ftpd for the reason above? First, ftpd isn't responsible for sftp - you are afte

Re: SCSI and disk geometry

2005-06-30 Thread Andy Hayward
> At this point...I'm suspicious you found a nasty bug in the SCSI driver > for that card, but a (set??) of really bad cables might explain it, too. > Yes, I have seen piles of parts were every single one was bad in a similar > way... Could also be a very bad jumper option on the drives, too. Che

Re: Blocking many accesses to ssh port from single IP

2005-06-30 Thread Mr.Slippery
Steve Williams ([EMAIL PROTECTED]) dixit: > > Is there any way to block/limit the number of connections to a port in a > given time period? I was getting around 5 connects per second from the > same IP/PORT (in Hungary :-( ). > > I can't think how this would work... unless there was a generic

Re: Problem starting kdm from /etc/rc.local

2005-06-30 Thread Stephen Marley
On Tue, Jun 28, 2005 at 06:21:03PM +0100, Stephen Marley wrote: > Firstly, I have no problems starting kdm from the command line or > starting xdm from /etc/rc. However, if I start kdm from /etc/rc.local it > won't take any keyboard input and I don't get text when I attempt switch > virtual console

Re: Blocking many accesses to ssh port from single IP

2005-06-30 Thread Maxim Bourmistrov
You can always patch your sshd with Timelox patch by brian http://www.ethernet.org/~brian Running well och production servers. On Thursday 30 June 2005 10:11, you wrote: > Hi, > > I am running OpenBSD 3.7-stable, pretty standard install, spamd > greylisting, httpd, sendmail. Going over my log

Re: Blocking many accesses to ssh port from single IP

2005-06-30 Thread Simon Dassow
On Thu, Jun 30, 2005 at 02:11:53AM -0600, Steve Williams wrote: > > Tonight I got 800+ attempts from the same IP. I played with manually > blocking the IP, but it was over before I got the firewall rules written > and looked over them twice. > > Is there any way to block/limit the number of co

Re: Blocking many accesses to ssh port from single IP

2005-06-30 Thread Rogier Krieger
On 6/30/05, Nico Meijer <[EMAIL PROTECTED]> wrote: > Be careful not to lock yourself out... Nico To that end, I normally use a table with addresses I usually connect from in combination with a pass-quick rule before any blocking rules for SSH connections. Using rsync for synchronising those table

Re: OpenBSD 3.1 and OpenBSD 3.5 pf problems

2005-06-30 Thread Juan J.
El jue, 30-06-2005 a las 09:38 +0200, rinsan@ escribis: > > On Wednesday 29 June 2005 21.23, rinsan@ wrote: > >> Hi! > >> > >> After switching from OpenBSD 3.1 (with Intel fxp0) to OpenBSD 3.5 (with > > > > OpenBSD 3.5 is EOL (see link below) which means you can't expect support > > for > > it. > >

Re: Blocking many accesses to ssh port from single IP

2005-06-30 Thread Nico Meijer
Hi Steve, > I am running OpenBSD 3.7-stable, pretty standard install, spamd > greylisting, httpd, sendmail. Going over my log files, I have > noticed that I am more and more coming under attach with dictionary > based login attempts to the SSH port. I don't know if this still holds true, but s

  1   2   >