Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Melameth, Daniel D.
Rod.. Whitworth wrote: Somebody sent me a query asking for a justification for my proposal to supply a firewall/router using OpenBSD when there was thsi device: http://www.dlink.com/products/?pid=327 , with all its claimed bells and whistles. Anybody know what, if anything, it does that an

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Rod.. Whitworth
On Tue, 02 Aug 2005 22:54:22 -0500, Shawn K. Quinn wrote: On Tue, 2005-08-02 at 22:09 -0400, Jim Fron wrote: What it does that an OBSD solution can't is be low power, cheap, and bought off the shelf (maybe there are off-the-shelf suppliers of OBSD machines, but they aren't in every strip

Re: YENTA compliant PCI-PCMCIA adapters?

2005-08-03 Thread Stephen Marley
On Tue, Aug 02, 2005 at 01:53:07PM -0700, Greg Thomas wrote: Does anyone know if the RICOH R5C485 chipset is YENTA compliant and/or will work with OpenBSD/i386? I haven't found a definitive answer Googling. I have a Senao 802.11b card I'd like to use in a desktop PC. Yes, works out of the

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Alexander Farber
Hi, I have 1 argument for D-Link and against OpenBSD: D-Link can DSL. OpenBSD can not. So you have to buy at least a DSL modem for OpenBSD. And since you are buying a DSL modem, why not add 20 Euros and buy a DSL-router? At least for a small home network. Regards Alex

Re: openbsd 3.7 in-kernel pppoe issues

2005-08-03 Thread Jason McIntyre
On Wed, Aug 03, 2005 at 07:14:54AM +0200, Alexis de BRUYN wrote: pppoe0: flags=8851UP,POINTOPOINT,RUNNING,SIMPLEX,MULTICAST mtu 1492 dev: ne3 state: session sid: 0xc368 PADI retries: 0 PADR retries: 0 time: 0:2:38 inet 84.97.3.232 -- 0.0.0.1 netmask 0x

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Paul de Weerd
On Wed, Aug 03, 2005 at 10:30:25AM +0200, Alexander Farber wrote: | Hi, | | I have 1 argument for D-Link and against OpenBSD: | | D-Link can DSL. OpenBSD can not. So you have to | buy at least a DSL modem for OpenBSD. And since you | are buying a DSL modem, why not add 20 Euros and | buy a

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Raymond Lillard
Melameth, Daniel D. wrote: Rod.. Whitworth wrote: Somebody sent me a query asking for a justification for my proposal to supply a firewall/router using OpenBSD when there was thsi device: http://www.dlink.com/products/?pid=327 , with all its claimed bells and whistles. Anybody know what, if

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Erik Wikström
On 2005-08-03 03:03, Rod.. Whitworth wrote: Somebody sent me a query asking for a justification for my proposal to supply a firewall/router using OpenBSD when there was thsi device: http://www.dlink.com/products/?pid=327 , with all its claimed bells and whistles. Anybody know what, if anything,

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread J.C. Roberts
On Wed, 03 Aug 2005 11:03:34 +1000, Rod.. Whitworth [EMAIL PROTECTED] wrote: Somebody sent me a query asking for a justification for my proposal to supply a firewall/router using OpenBSD when there was thsi device: http://www.dlink.com/products/?pid=327 , with all its claimed bells and whistles.

Running OpenBGPd on a loopback interface

2005-08-03 Thread David Ulevitch
Hi, I am curious to know if anyone is running OpenBGPd attached to a loopback interface with specific listen directives for their BGP sessions. In cisco land this is not atypical. Are folks doing this with OpenBGPd? Would it even work as expected? From just thinking about it for a

Re: qemu and tun device

2005-08-03 Thread Markus Friedl
On Tue, Aug 02, 2005 at 05:02:05PM +0200, umaxx wrote: # ifconfig tun0 create # ifconfig tun0 10.0.0.1 10.0.0.2 up try ifconfig tun0 10.0.0.1 netmask 255.255.255.0 link0

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Rod.. Whitworth
On Wed, 3 Aug 2005 11:03:23 +0200, Paul de Weerd wrote: On Wed, Aug 03, 2005 at 10:30:25AM +0200, Alexander Farber wrote: | Hi, | | I have 1 argument for D-Link and against OpenBSD: | | D-Link can DSL. OpenBSD can not. So you have to | buy at least a DSL modem for OpenBSD. And since you | are

cross-tools, m68k build, libgcc2 build throws bad assembler code

2005-08-03 Thread Randy Lewis
While building 'cross-tools' on i386 host, OpenBSD 3.7 (with current patches.) Environment var: TARGET=m68k From /usr/src Command: make cross-tools (TARGET=m68k already defined in ENV ) ... Goes well for m68k build (always) until it gets into the 'libgcc2' floating point

Re: Shell scripting problem -- help, please!

2005-08-03 Thread Otto Moerbeek
On Wed, 3 Aug 2005, Dave Anderson wrote: Something's screwy here, using the 'set -A' command in /bin/sh on 3.7-release. AFAICT the complicated file-match expression should (in this case) produce the same results as the simple one, but it doesn't seem to match at all when used in this script

Re: Shell scripting problem -- help, please!

2005-08-03 Thread Andreas Kahari
See sh(1), under Command execution: [...] Just to confuse things, if the posix option is turned off (see the set command below), some special commands are very special in that no field splitting, file globbing, nor tilde expansion is performed on arguments that look like assignments. Andreas

Re: authpf-like functionality via a web interface?

2005-08-03 Thread Barry, Christopher
-Original Message- From: Lars Hansson [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 03, 2005 12:20 AM To: misc@openbsd.org Subject: Re: authpf-like functionality via a web interface? On Tue, 2 Aug 2005 18:43:56 -0400 Barry, Christopher [EMAIL PROTECTED] wrote: Authpf

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Will H. Backman
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rod.. Whitworth Sent: Tuesday, August 02, 2005 9:04 PM To: Miscellaneous OBSD Subject: Ammunition needed to defend OpenBSD/pf Somebody sent me a query asking for a justification for my proposal to

Re: authpf-like functionality via a web interface?

2005-08-03 Thread Diana Eichert
On Tue, 2 Aug 2005, Bob Beck wrote: SNIP installer, and gives windows people putty with pages of 8x10 color glossy screenshots with circles and arrows and a paragraph on the back of each one explaining how to install putty and authenticate (and pick up the garbage). your Windows users can

Re: openbsd 3.7 in-kernel pppoe issues

2005-08-03 Thread Alexis de BRUYN
Hi jmc, Thanks for your answer. My connection works with an userland pppoe config (ppp.conf, ...). I also tested with pf disabled. Same result... I cannot obtain my remote address. Unfortunately my local and remote (gateway) isp ip addresses are dynamic (so I use wildcard addresses for both).

Re: openbsd 3.7 in-kernel pppoe issues

2005-08-03 Thread Schöberle Dániel
I am trying to setup the new in-kernel pppoe on a openbsd 3.7-stable with a custom kernel. snip, snip pppoe0: flags=8851UP,POINTOPOINT,RUNNING,SIMPLEX,MULTICAST mtu 1492 dev: ne3 state: session sid: 0xc368 PADI retries: 0 PADR retries: 0 time: 0:2:38 inet

isakmpd question

2005-08-03 Thread Brandon Mercer
Hello all, I've been setting up a hub and spoke VPN for a while now and for the most part things are working as normal. However, I have one box a netgear FVS318v1 that doesn't give me the flexibility in creating my VPN policies and IKE setup that the other ones do (FVS318v3). I keep seeing a no

Via C3 IPSec test result

2005-08-03 Thread Massimo
I've made up a test LAN built on two mini-ITX Via C3 based board to test the AES encryption functionality of this CPU on a real setup. I've used flashboot 0.7.2 from Damien simply for a matter of time (I've some flash card already configured) and since it seems to me a very good product, the

cksum file missing - pub/OpenBSD/3.#/*

2005-08-03 Thread djgoku
I couldn't find a cksum file for any file in the release directory ftp://ftp.openbsd.org/pub/OpenBSD/3.#/*. I was just wanting to make sure src.tar.gz was the correct file I was supposed to download.

Re: generel software RAID-Question (IBMx330, raid failed, where to look for errors? )

2005-08-03 Thread Stephan Tesch
Am Mittwoch, 3. August 2005 02:11 schrieben Sie: Hi Sebastian, Are there any problems known with the raidframe-device? Not that I know of. In my case: I've a IBM X330 with dual P3 800Mhz and 2 SCSI-HDDs. One is about 160Gb and the other is smaler. I created a raid for the /home but today

Re: openbsd 3.7 in-kernel pppoe issues

2005-08-03 Thread Alexis de BRUYN
Try to remove your /etc/mygate if exists. Hi, I have the same problem here in Hungary, running 3.7- (almost)stable. My ISP is Axelero (T-Online Hungary now) and the userland ppp worked like a charm. I switched to kernel pppoe but it only works if I specify the remote peer (gateway) IP address by

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Rob
I do not know what a system looks like to an attacker trying to fingerprint you using boxes from Office Depot. However, I would hope that using OpenBSD/pf that I could advertise the fact that I am using OpenBSD/pf, and someone would just move on to their next target. Sincerely, Rob

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Frank Bax
At 04:30 AM 8/3/05, Alexander Farber wrote: I have 1 argument for D-Link and against OpenBSD: D-Link can DSL. Does it really? My D-link router (at home) is tossing SYN attacks back to the modem (as determined by ISP monitoring) causing the DSL modem to lockup. I am eager to learn how to

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Shawn K. Quinn
On Wed, 2005-08-03 at 10:30 +0200, Alexander Farber wrote: Hi, I have 1 argument for D-Link and against OpenBSD: D-Link can DSL. OpenBSD can not. So you have to buy at least a DSL modem for OpenBSD. And since you are buying a DSL modem, why not add 20 Euros and buy a DSL-router? At

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Larry McKevitt
On Wed, 2005-08-03 at 09:47 -0400, Will H. Backman wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rod.. Whitworth Sent: Tuesday, August 02, 2005 9:04 PM To: Miscellaneous OBSD Subject: Ammunition needed to defend OpenBSD/pf

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Shawn K. Quinn
On Wed, 2005-08-03 at 09:47 -0400, Will H. Backman wrote: Many of these devices provide the what if I get hit by a bus protection of a simple, single purpose system. If you use something like OpenBSD, it can be viewed as a homegrown application that must be supported by the organization, and

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Matt Garman
On Wed, Aug 03, 2005 at 02:35:07AM -0700, J.C. Roberts wrote: your FUD look, just level with them. If you really want me to go into all the various technical details involved in a full source code audit the costs you would bear to do an equivalent audit on a closed source binary through

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Jim O'Donald
That logic is completely false and you contradict yourself. Allowing for multiple points of failure does not mean that something is less reliable as you have described. It means that if/when one fails, the other will still be available. Using your example of a power supply lasting 10 years,

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Dave Feustel
On Wednesday 03 August 2005 01:15 pm, Jim O'Donald wrote: Using your example of a power supply lasting 10 years, that would translate to 2 failures in 10 years, not 1 failure in 5 years. And if the box is properly designed, it will continue running unless both power supplies fail simultaneously

Random lladdr to ifconfig for ath0 - cannot connect

2005-08-03 Thread Nick Holmes
Hi all. I'm setting up a laptop to generate test traffic against one of our APs so that we can look at logs, pf configs etc. We have a Dell C840 laptop with Proxim Orinoco 802.11b/g Gold PCMCIA card. As part of the testing, I'm changing the MAC on the wireless card and refreshing the dhcp

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread chefren
On 08/03/05 20:55, Dave Feustel wrote: On Wednesday 03 August 2005 01:15 pm, Jim O'Donald wrote: Using your example of a power supply lasting 10 years, that would translate to 2 failures in 10 years, not 1 failure in 5 years. And if the box is properly designed, it will continue running

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread chefren
On 08/03/05 20:15, Jim O'Donald wrote: That logic is completely false and you contradict yourself. Pooh pooh. Allowing for multiple points of failure does not mean that something is less reliable as you have described. It means that if/when one fails, the other will still be available. But

OpenBSD at OSCON

2005-08-03 Thread Jason Dixon
I'm making OpenBSD's presence known at the OSCON expo right now, sharing a booth with the FreeBSD/PC-BSD folks. They've been overly generous, even allowing me to setup the OpenBSD/CARP/pfsync demo servers that will also be in use at my presentation tomorrow (http://

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Kevin
On 8/3/05, Matt Garman [EMAIL PROTECTED] wrote: I think everyone on this list has done a wonderful job explaining why an OpenBSD box will beat the D-Link practically hands-down. The cynical side of me thinks that managers, no matter how great the reality of OpenBSD, are likely to reject it

[OpenBSD 3.7] Is it really OK?

2005-08-03 Thread Denis Augusto Araujo de Souza
I want to upgrade my OpenBSD firewall box and I want to know: is really OK the version 3.7? Thanks, Denis

Re: DDOS Attack!!!who can help me?

2005-08-03 Thread Denis Augusto Araujo de Souza
There are exemples for this configuration? Thanks, Denis -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Friday, July 29, 2005 4:12 AM To: Sean Knox Cc: jeff; misc@openbsd.org; jking1 Subject: Re: DDOS Attack!!!who can help me? Define a filter to drop

Mastering FreeBSD and OpenBSD Security -- worth reading?

2005-08-03 Thread Matthias Kilian
Hi, did anyone here allready had a look at this book? http://www.oreilly.com/catalog/mfreeopenbsd/index.html After having read the sample chapter available for download, I'm not yet convinced that it may be really interesting, and from the title, TOC, and the reviews O'Reilly mentions[1], one

Re: [OpenBSD 3.7] Is it really OK?

2005-08-03 Thread Kevin
On 8/3/05, Denis Augusto Araujo de Souza [EMAIL PROTECTED] wrote: I want to upgrade my OpenBSD firewall box and I want to know: is really OK the version 3.7? In my experience, every release version of OpenBSD has beenOK, ready for production use the day it is officially released. This isn't

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Jesper Louis Andersen
chefren wrote: Two equal power supplies in line: Twice as much the risk of a brakedown of the system and two times as much failures of power supplies. Lets see. Let X be the (boolean) random variable designating ''system X breaks down in the first N years''. Equally, let Y be the random

Re: OpenCVS interview

2005-08-03 Thread Wijnand Wiersma
2005/8/3, Matthias Kilian [EMAIL PROTECTED]: On Wed, Aug 03, 2005 at 11:01:48PM +0200, Wijnand Wiersma wrote: The interview is at http://nedbsd.nl/modules/static/page/JorisVinkInterview | Anything you want to add to this interview? | | Humppa! I wonder wether the 3.8 song will be Humppa

remove

2005-08-03 Thread Ann Leggett
please delete my details [EMAIL PROTECTED] as,I have never asked for this service

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Karsten McMinn
On 8/3/05, Matt Garman [EMAIL PROTECTED] wrote: The cynical side of me thinks that managers, no matter how great the reality of OpenBSD, are likely to reject it based on a fear and/or ignorance of open source, or with logic like, Well if it's so good, how come I've never heard of it? The same

Re: Random lladdr to ifconfig for ath0 - cannot connect

2005-08-03 Thread Justin Reigle
etc and works fine. When we change the MAC to something random with ifconfig and then associate, we get nothing. No surprise here. When you change the lladdr you're only changing what's sent as the source ethernet address on ethernet-style frames. This will not affect the 802.11 level

Re: isakmpd question

2005-08-03 Thread David M. N. Bryan
This is what I have that I got working 2+ years ago... Hope this helps. [Netgear-FVS318-main-mode] EXCHANGE_TYPE= ID_PROT Transforms=3DES-SHA,AES-SHA [Netgear-FVS318-quick-mode] DOI=IPSEC EXCHANGE_TYPE=QUICK_MODE Suites=QM-ESP-3DES-SHA-PFS-SUITE,QM-ESP-AES-SHA-PFS-SUITE [AES-SHA]

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Diana Eichert
just use some 50cal BMG rounds, that should be effective ammunition. sorry, I just had to after following this thread for awhile

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Graeme Lee
Rod.. Whitworth wrote: Somebody sent me a query asking for a justification for my proposal to supply a firewall/router using OpenBSD when there was thsi device: http://www.dlink.com/products/?pid=327 , with all its claimed bells and whistles. Well, I we connected a new client with straight

Device not configured (APM, sound, modem)

2005-08-03 Thread Z L
I installed OBSD3.7 on my laptop. Things that are not working are: sound and modem (dial-up internal laptop modem) and apm. For modem, sound and apm it says: Device not configured. For APM I tried to set the apmd_flags=YES in rc.conf. For sound and modem I tried the things that are described in

Re: Device not configured (APM, sound, modem)

2005-08-03 Thread Raymond Lillard
Z L wrote: I installed OBSD3.7 on my laptop. Things that are not working are: sound and modem (dial-up internal laptop modem) and apm. For modem, sound and apm it says: Device not configured. For APM I tried to set the apmd_flags=YES in rc.conf. For sound and modem I tried the things that are

Your Requested Change to Motley Fool Email Subscriptions

2005-08-03 Thread [EMAIL PROTECTED]
Dear Fool, You've subscribed to the following Motley Fool Free Emails where we deliver our best financial insights right to your inbox: FoolWatch Daily FoolWatch Weekly Special Offers Personal Finance Investing Strategies: Mutual Funds Investing Strategies: Value Plays Investing Strategies:

Re: VIA VT1211 termperature readout

2005-08-03 Thread Rickard Dahlstrand
The VT1211 chip is now supported thanks to some excellent work by Alexander Yurchenko. Thanks for all the help, Alexander! The Lex box actually keeps quite cool (~48 C) regardless of load, probably due to the cpu-heatpipe. When I replace the hard drive with a flash it will probably drop a