low priority, pf rule set debugging

2005-12-20 Thread ed
Hello, Just a stab in the dark, does anyone have advise/experience/suggestions for debugging firewall problems? Every now and then I do something which is just brain dead but takes a while to figure out, its usually a typo in my rule set, but just wondering if there's any tools out there to help

Unexpected "Expect timeout" in chat script (ppp -auto)

2005-12-20 Thread Andrew C
I'm running PPP 3.1 (/usr/sbin/ppp) on OpenBSD 3.7 / i386. Every now and then, I run into a problem in which the chat script stops working in -auto mode: Dec 20 20:45:05 wally ppp[20296]: tun0: Physical: write Dec 20 20:45:05 wally ppp[20296]: tun0: Physical: 41 54 44 54 36 32 33 37 30 37 31 30

Re: OpenBSD 3.8 PPPoE Broadband Connection Howto

2005-12-20 Thread Alex M.
Siju George wrote: Hi all, I have a new Broadband Internet connection. It uses PPPoE with a username and password to connect to internet. I can connect to Internet with Windows 2003 (easy click and configure) so the DSL Router is working and the username and password is correct. I would like to

exit and eject should have their second letter in upper-case in cdio(1) help output

2005-12-20 Thread Andrés Delfino
Since E is an "ambiguous command", one must use either type EJ or EX to eject a cd or otherwise exit cdio, but both have an E shorcut. That's why these two lines must be changed: { CMD_EJECT, "eject", 1, "" } to: { CMD_EJECT, "eject", 2, "" }, { CMD_QUIT, "exit", 1, "" }, to: { CMD_QUIT, "exit",

OBSD indirect call

2005-12-20 Thread Gustavo Rios
Hey folks, i wonder if OpenBSD allows for RPC Indirect (RPC_PROC_CALLIT) call message to be received by means of TCP too, or it is only by UDP? Thanks for your time and cooperation. best regards.

Re: isakmpd does not enter phase 2

2005-12-20 Thread Tamas TEVESZ
On Tue, 20 Dec 2005, Matthew Closson wrote: matt, all, [Remote-peer-quick-mode] EXCHANGE_TYPE= QUICK_MODE Transforms= QM-ESP-3DES-SHA-SUITE notice the typo (s/Transforms/Suites/ for correct operation) that only became obvious after a healthy dose of sleep. thanks anyway.

Re: BGPD on FreeBSD

2005-12-20 Thread Claudio Jeker
On Tue, Dec 20, 2005 at 03:53:45PM +0100, Reto Burkhalter wrote: > Hi list > > May be a little bit OT - but are there any users with experiences > in using OpenBGPD on FreeBSD? I have some strange problems here. > Are you using the FreeBSD port or did you patch OpenBGPD yourself? > Setup is Ope

Re: OpenBSD 3.8 PPPoE Broadband Connection Howto

2005-12-20 Thread J.C. Roberts
On Wed, 21 Dec 2005 02:54:23 +0530, Siju George <[EMAIL PROTECTED]> wrote: >I have a new Broadband Internet connection. It uses PPPoE with a >username and password to connect to internet. Hi Siju, You left out a few important details about the service package from your provider. PPPoE is cheap w

Re: OpenBSD related wallpaper

2005-12-20 Thread ed
On Sun, 18 Dec 2005 23:50:02 -0800 (PST) Viktor Berke <[EMAIL PROTECTED]> wrote: > I've found some nice wallpapers here: > > http://www.bsdnexus.com/wallpapers.htm Hummm it promotes bad code: http://www.bsdnexus.com/wallpapers/carry_code_single.jpg Should never allocate memory within the funct

Re: OpenBSD 3.8 PPPoE Broadband Connection Howto

2005-12-20 Thread Jason McIntyre
On Wed, Dec 21, 2005 at 02:54:23AM +0530, Siju George wrote: > > I have two interfaces "rl0" "rl1" > > rl0 has the PPPoE connection and rl1 is connected to the LAN Switch. > > # ifconfig -a > lo0: flags=8049 mtu 33224 > groups: lo > inet 127.0.0.1 netmask 0xff00 > ine

Re: src.tar.gz and sys.tar.gz in snapshots?

2005-12-20 Thread Nick Holland
On Tue, Dec 20, 2005 at 09:36:05PM +0100, Andreas Bihlmaier wrote: > On Tue, Dec 20, 2005 at 07:10:02PM +0100, Raul Aldaz wrote: > > On Tue, 20 Dec 2005 18:59:35 +0100, Raul Aldaz wrote > > > Hi, > > > > > > Why are not provided the corresponding source files? a resource limit I > > > suppose... >

OpenBSD 3.8 PPPoE Broadband Connection Howto

2005-12-20 Thread Siju George
Hi all, I have a new Broadband Internet connection. It uses PPPoE with a username and password to connect to internet. I can connect to Internet with Windows 2003 (easy click and configure) so the DSL Router is working and the username and password is correct. I would like to use OpenBSD 3.8 to co

Re: Hardware RNG speed

2005-12-20 Thread Jack Bates
> Hello to the list, > > ...I set up OpenBSD on a board with a (Soekris) Hifn 7955 > accelerator card, but the rate I'm getting by reading out of /dev/srandom > is pretty low (200B/s). I am happily using VIA C3s for a project that requires high-quality entropy. In the industry I'm involved in, ha

Re: src.tar.gz and sys.tar.gz in snapshots?

2005-12-20 Thread Andreas Bihlmaier
On Tue, Dec 20, 2005 at 07:10:02PM +0100, Raul Aldaz wrote: > On Tue, 20 Dec 2005 18:59:35 +0100, Raul Aldaz wrote > > Hi, > > > > Why are not provided the corresponding source files? a resource limit I > > suppose... > > I've found the reasons in the archives, sorry for the noise! A link to you

Re: OpenBSD 3.8 and slapd 2.0.27

2005-12-20 Thread Daniel Ouellet
Bryan Irvine wrote: On 12/20/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: Hi all, I am learning to install and configure slapd on OpenBSD 3.8. Followed the installation howto (http://www.openbsdsupport.org/qmail-ldap-OpenBSD.html#2.0) but here is what I get when I run slapd -d -1 line 10

Re: OpenBSD 3.8 and slapd 2.0.27

2005-12-20 Thread Bryan Irvine
On 12/20/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > Hi all, > > I am learning to install and configure slapd on OpenBSD 3.8. Followed the > installation howto > (http://www.openbsdsupport.org/qmail-ldap-OpenBSD.html#2.0) > but here is what I get when I run slapd -d -1 > > > line 10 (includ

Re: ruby on rails derailed, chroot httpd reported DOA

2005-12-20 Thread Zachery Hostens
id almost guaruntee this has to do with chrooting. i havent touched fastcgi with rails in a long time :x but id imagine its set to look in '/var/www/users/...' where infact it would want to look for '/users/...'. personally id recommend looking at scgi, and its apache module. thats what i us

pflog and ftp

2005-12-20 Thread Sizov Alexander
Hi! I have OpenBSD 3.8+vsftpd (from ports)+pf on my box. pfrules: table persist file "/etc/rusip" block in from any to xx.xxx.xx.xxx pass in from to xx.xxx.xx.xxx pass in from yy.yy.yyy.yy to xx.xxx.xx.xxx where xx.xxx.xx.xxx - server's ip. when I try to exec 'tcpdump -n -e -ttt

Re: src.tar.gz and sys.tar.gz in snapshots?

2005-12-20 Thread Raul Aldaz
On Tue, 20 Dec 2005 18:59:35 +0100, Raul Aldaz wrote > Hi, > > Why are not provided the corresponding source files? a resource limit I > suppose... I've found the reasons in the archives, sorry for the noise! "Este correo electrsnico y la informacisn contenida en el mismo es de caracter conf

src.tar.gz and sys.tar.gz in snapshots?

2005-12-20 Thread Raul Aldaz
Hi, Why are not provided the corresponding source files? a resource limit I suppose... "Este correo electrsnico y la informacisn contenida en el mismo es de caracter confidencial y esta sometida al secreto profesional, dirigiindose exclusivamente al destinatario mencionado en el

Re: cruft?

2005-12-20 Thread J.C. Roberts
On Tue, 20 Dec 2005 18:28:27 +0100 (CET), Tamas TEVESZ <[EMAIL PROTECTED]> wrote: >On Tue, 20 Dec 2005, J.C. Roberts wrote: > > > I hit a panic while doing make build on the Alpha PSW-433. My uneducated > > guess > >http://marc.theaimsgroup.com/?t=11082572061&r=1&w=2 Thanks Tamas! jcr

Re: pf and two ADSL links

2005-12-20 Thread Craig Skinner
On Tue, Dec 20, 2005 at 04:05:31PM +, Stuart Henderson wrote: > > Have you looked at the lists of LLU exchanges recently? It's not so > minor any more. > I think Oftel are pushing though the anti-competitive legislation against the BT monoply.

Re: cruft?

2005-12-20 Thread Tamas TEVESZ
On Tue, 20 Dec 2005, J.C. Roberts wrote: > I hit a panic while doing make build on the Alpha PSW-433. My uneducated > guess http://marc.theaimsgroup.com/?t=11082572061&r=1&w=2 -- [-] mkdir /nonexistent

cruft?

2005-12-20 Thread J.C. Roberts
I hit a panic while doing make build on the Alpha PSW-433. My uneducated guess is that I somehow managed to leave cruft in my -STABLE tree when I moved it over from an i386 box. I did all the expected cleaning (make clean and rm -rf /usr/obj/*) and I tried to repeat the problem a second time while

Re: Hardware RNG speed

2005-12-20 Thread J.C. Roberts
On Tue, 20 Dec 2005 00:52:13 -0500 (EST), Michael Alexander Hamburg <[EMAIL PROTECTED]> wrote: >On Mon, 19 Dec 2005, Theo de Raadt wrote: > >> Until you can justify actual real scientific reasons why you cannot >> use it, I think you should use arc4random(). >> >> And I am entirely serious. The e

Re: pf and two ADSL links

2005-12-20 Thread Stuart Henderson
--On 20 December 2005 14:32 +, Craig Skinner wrote: On Tue, Dec 20, 2005 at 02:40:28AM +, pedro la peu wrote: > all UK ADSL is operated by them, with the minor exception of LLU. What? > AFAIK there is only one UK operator unbundling for ADSL, in some > southern exchanges (eg London &

BGPD on FreeBSD

2005-12-20 Thread Reto Burkhalter
Hi list May be a little bit OT - but are there any users with experiences in using OpenBGPD on FreeBSD? I have some strange problems here. Setup is OpenBGPD 3.7 on FreeBSD 6-RELEASE. Just a basic config with one transit and one iBGP session with some standard filters (check prefixlen and rfc1918

Re: pf and two ADSL links

2005-12-20 Thread Craig Skinner
On Tue, Dec 20, 2005 at 02:40:28AM +, pedro la peu wrote: > > all UK ADSL is operated by them, with the minor exception of LLU. > > What? > > > AFAIK there is only one UK operator unbundling for ADSL, in some southern > > exchanges (eg London & there abouts). > > What? > I can see from who

Re: MN-520 802.11b wireless PCMCIA card not found in -CURRENT on AMD Sempron?

2005-12-20 Thread C. Bensend
> The CardBus slot can not be used as interrupt routing is busted > in ways not apparent without documentation. ... > Depends if you can find documentation on the ATI chipset the > laptop is based on... Doh. I figured it was going to be something like that. I'll do some searching, but if you'v

Re: pfsync/carp via 2 ISP's

2005-12-20 Thread eneville (sent by Nabble.com)
Stoyan Genov wrote: > > Joachim Schipper wrote: >> On Tue, Nov 29, 2005 at 10:31:03AM +0100, David Coppa wrote: >> >>>On 11/29/05, Joachim Schipper wrote: >>> >>> Why don't you just put a switch in front of the two firewalls, and then do CARP (for firewall failover) plus some smart rout

Re: VPN: solutions that interoperate with win xp

2005-12-20 Thread Giancarlo Razzolini
Stuart Henderson wrote: > The same problem probably won't affect ipsec, since there's no extra > network interface involved there. http://openvpn.se/xpsp2_problem.html I meant that if one user can misconfigure the openvpn setup, he or she have the same potential to misconfigure the ipsec setup.

Re: VPN: solutions that interoperate with win xp

2005-12-20 Thread Stuart Henderson
> > i have also setup openvpn, which works great for me from home, and i have > > been > > able to successfully get this working. however, one of the users that > > connects > > to my VPN is having problems making openvpn and his kerio firewall "play > > nice", > > and a working openvpn configur

Re: pid of last started process

2005-12-20 Thread Andreas Kahari
Dimaz, #!/bin/ksh somecommand & echo "PID of last backgrounded command is $!" Read the manual for more info. Andreas On 20/12/05, dMITRIJ lEBEDX <[EMAIL PROTECTED]> wrote: > Sorry, may be I've written in wrong place, but what variable contained pid > of last started process from this shell (scri

pid of last started process

2005-12-20 Thread Дмитрий Лебедь
Sorry, may be I've written in wrong place, but what variable contained pid of last started process from this shell (script) in ksh?

Re: MN-520 802.11b wireless PCMCIA card not found in -CURRENT on AMD Sempron? ScanMail has blocked your mail due to a mail policy.

2005-12-20 Thread IOT-DTAG
[EMAIL PROTECTED] Reason the mail was blocked: Scanned by ScanMail for Lotus Notes 2.6 SP1 with scanengine 7.510-1002 and pattern version 3.115.00

Re: MN-520 802.11b wireless PCMCIA card not found in -CURRENT on AMD Sempron?

2005-12-20 Thread Jonathan Gray
On Mon, Dec 19, 2005 at 10:57:44PM -0600, C. Bensend wrote: > Hey folks, > >I've never been lucky enough to actually own my own laptop until > yesterday, when a friend pointed me at a special at Staples. I > picked up a Compaq Presario V2405US (AMD Sempron) for a pretty good > price. Yes, I

OpenBSD 3.8 and slapd 2.0.27

2005-12-20 Thread yance
Hi all, I am learning to install and configure slapd on OpenBSD 3.8. Followed the installation howto (http://www.openbsdsupport.org/qmail-ldap-OpenBSD.html#2.0) but here is what I get when I run slapd -d -1 line 10 (include/etc/openldap/schema/krb5-kdc.schema) could not open config file

Re: disklabel and ext3 partitions on amd64

2005-12-20 Thread steven mestdagh
On Mon, Dec 19, 2005 at 12:00:52PM +, Simon Morgan wrote: > On 18/12/05, steven mestdagh <[EMAIL PROTECTED]> wrote: > > I see the same happening on 3.8-release vs. 3.8-current on i386 for > > systems with foreign filesystems. Not sure why. > > Think it could be a bug? this change in behavior

Re: Hardware RNG speed

2005-12-20 Thread Michael Alexander Hamburg
On Mon, 19 Dec 2005, Theo de Raadt wrote: > Until you can justify actual real scientific reasons why you cannot > use it, I think you should use arc4random(). > > And I am entirely serious. The entire idea in OpenBSD is to have many > consumers, as this strengthens the source. Thanks for your co