Re: saslauthd issue?

2006-08-08 Thread J Moore
On Mon, Aug 07, 2006 at 10:51:02PM -0700, the unit calling itself Kian Mohageri wrote: B14xVu: Undefined variable. where B14xVu is a fragment of the password. The full password was: V$B14xVu I tried this on other user/password combinations, and got reasonable results. But the $ char

problems compiling -current kernel

2006-08-08 Thread Francisco Valladolid
Hi, folks Today I update my src tree in -current, I have some problems compiling it. I'm using OpenBSD 3.9 -current in amd64 port. [EMAIL PROTECTED]:[/usr/src/sys/arch/amd64/compile/GENERIC]% sudo make depend Password: mkdir -p /usr/src/sys/arch/amd64/compile/GENERIC/lib/kern depending the kern

Re: saslauthd issue?

2006-08-08 Thread Kian Mohageri
On 8/7/06, J Moore [EMAIL PROTECTED] wrote: On Mon, Aug 07, 2006 at 10:51:02PM -0700, the unit calling itself Kian Mohageri wrote: B14xVu: Undefined variable. where B14xVu is a fragment of the password. The full password was: V$B14xVu I tried this on other user/password

Re: problems compiling -current kernel

2006-08-08 Thread Matthias Kilian
On Tue, Aug 08, 2006 at 01:18:02AM -0500, Francisco Valladolid wrote: the -current guide in OpenBSD FAQ, dodn't contain sufficient support for me at this moment. http://www.openbsd.org/faq/current.html#20060727

Re: saslauthd issue?

2006-08-08 Thread Nick Guenther
On 8/8/06, J Moore [EMAIL PROTECTED] wrote: On Mon, Aug 07, 2006 at 10:51:02PM -0700, the unit calling itself Kian Mohageri wrote: Have you tried escaping the $ char to make sure the shell doesn't interpret it? V\$B14xVu Yes - sorry I failed to mention that... esc'ing the $ does get by,

Re: problems compiling -current kernel

2006-08-08 Thread Francisco Valladolid
Yes, Thank you, I see this note, I'm compiling gcc ! Thank you very much. On 8/8/06, Matthias Kilian [EMAIL PROTECTED] wrote: On Tue, Aug 08, 2006 at 01:18:02AM -0500, Francisco Valladolid wrote: the -current guide in OpenBSD FAQ, dodn't contain sufficient support for me at this moment.

broadcast IPs in a public /29 block

2006-08-08 Thread Jacob Yocom-Piatt
while mucking around with reverse DNS for a /29 public netblock i use, i noticed that my ISP, SBC, had only aliased 6 of the 8 IPs in the /29 block for use with rDNS. after seeing this, i did a bit of homework and found graham toal's explanation of the missing IPs (

Alternative superuser aside from root

2006-08-08 Thread Tito Mari Francis Escaño
Is it possible to replace root with another username as superuser? This could make the system very secure because when it comes to BSD/Unix/Linux, the root is the most coveted user account. That is, hackers would all be barking the wrong tree if the real superuser is actually another username. I

Re: Alternative superuser aside from root

2006-08-08 Thread Rogier Krieger
On 8/8/06, Tito Mari Francis Escaqo [EMAIL PROTECTED] wrote: Is it possible to replace root with another username as superuser? Sure, just change its password entry. That said, I wouldn't recommend wasting your time on this. This could make the system very secure because when it comes to

Re: Alternative superuser aside from root

2006-08-08 Thread Stef K
Hi, It is possible to rename your root account... You have to change it's name in /etc/passwd and maybe change its home directory. BUT: a) some programs may not work properly 'cause they depend on the name of the super-user account (I can't remember of any example right-now, but I'm sure some

Re: PF development

2006-08-08 Thread Tobias Ulmer
On Tue, Aug 08, 2006 at 12:41:13AM +0200, Pierre-Yves Rofes wrote: Hi guys, I've got some skills in C language, and as a project for my studies, I'd like to develop a layer-7 filtering tool with PF, like this one which works with Linux/Netfilter: http://l7-filter.sourceforge.net/ So I'd

Re: Apache proxy settings not working

2006-08-08 Thread Martin Schröder
2006/8/7, Bruno S. Delbono [EMAIL PROTECTED]: I have a couple of apps (webmail) that sit behind the OpenBSD gateway running httpd. When I enable the proxy module and try to access the app behind it fails with this error: Are you trying a transparent proxy? I was unable to get this working with

Upgrade from obsd 3.7 - 3.8 - 3.9: DMA issues

2006-08-08 Thread Jens Mayer
Dear all, I upgraded an OpenBSD 3.7 system, taking the steps mentioned in the upgrade guides from 3.7 - 3.8 and 3.8 - 3.9, using official OpenBSD CD media. While OpenBSD 3.7 and 3.8 used to connect my hard drive using UDMA 5, OpenBSD 3.9 only uses DMA 2: pciide1 at pci0 dev 15 function 1 VIA

sshd question

2006-08-08 Thread holger glaess
hi i hope this list is the right one for my question . i look for an funktion to limit the login by name AND ip range. example. root login ALLOW from www.xxx.yyy.zzz deny from all myname login ALLOW from all deny from www.xxx.yyy.zzz if there exist an feature / funktion of sshd to do this

Re: OpenBSD and high availability

2006-08-08 Thread Jens Mayer
Dear all, * On Tuesday 08 August 2006 05:11, Nick Holland wrote: [rsync vs. nfs approach] Simplicity is your friend. rsync is simple, easy to understand, and easy to recover. [...] No, I can't prove it, but I much prefer the simple solution which has simple and understood problems, than the

Re: sshd question

2006-08-08 Thread Dmitri A. Alenitchev
Hello, On 8/8/06, holger glaess [EMAIL PROTECTED] wrote: hi i hope this list is the right one for my question . i look for an funktion to limit the login by name AND ip range. example. root login ALLOW from www.xxx.yyy.zzz deny from all myname login ALLOW from all deny from www.xxx.yyy.zzz

Smallest OpenBSD box

2006-08-08 Thread Siju George
Hi, I would like to know that is the smallest box ( in terms of size ) that can be used to Install OpenBSD and used as a firewall. It should have a hard disk also, and atleast 2 NIC Interfaces. Thankyou so much Kind Regards Siju

Re: carp in PF interface context.

2006-08-08 Thread Henning Brauer
* Gustavo Rios [EMAIL PROTECTED] [2006-08-07 04:46]: I am playing with openbsd PF, and i read the text below: (http://www.countersiege.com/doc/pfsync-carp/) When writing the rest of the pf ruleset, it is important to keep in mind that from pf's perspective, all traffic comes from the

Re: Smallest OpenBSD box

2006-08-08 Thread openbsd misc
Hello, Hi, I would like to know that is the smallest box ( in terms of size ) that can be used to Install OpenBSD and used as a firewall. It should have a hard disk also, and atleast 2 NIC Interfaces. The smallest box I know is a WRAP system (www.pcengines.ch). It's 15x15cm, up to 3 nics,

Re: problems compiling -current kernel

2006-08-08 Thread Henning Brauer
* Francisco Valladolid [EMAIL PROTECTED] [2006-08-08 08:25]: Today I update my src tree in -current, I have some problems compiling it. the -current guide in OpenBSD FAQ, dodn't contain sufficient support for me at this moment. that's a very very very strong hint that you should just use

Systrace Logging Redirection

2006-08-08 Thread Seth Hanford
Hey all, I've been experimenting with systrace and several programs on OpenBSD 3.9-stable. I'm pleased with what the tool lets me do, and with its output, but can't find a way to get it to log to a different file for each systrace'd service. For example, I prepend the following to my

Tuning OpenBSD network throughput

2006-08-08 Thread Matthew R. Dempsky
I have three machines that I'm using for testing network performance: - 2.0GHz Pentium 4, 256MiB RAM, Ubuntu 6.06, e1000 - 266MHz Pentium II, 192MiB RAM, Debian Unstable, sk98lin - 600MHz Pentium M, 256MiB RAM, OpenBSD 4.0-current, em(4) All network settings are still at their

spamd and spamlogd syslog level

2006-08-08 Thread Will H. Backman
Does anyone know why spamd and spamlogd log to syslog at different log levels. It isn't too hard to change syslog.conf to include daemon.debug in order to capture output from spamlogd, but why the difference?

Re: Systrace Logging Redirection

2006-08-08 Thread Jiri Belka
Cituji Seth Hanford [EMAIL PROTECTED]: Hey all, I've been experimenting with systrace and several programs on OpenBSD 3.9-stable. I'm pleased with what the tool lets me do, and with its output, but can't find a way to get it to log to a different file for each systrace'd service. For example,

Re: Tyan v. Supermicro for Opteron?

2006-08-08 Thread Darrin Chandler
On Sun, Aug 06, 2006 at 03:47:02PM -0700, Darrin Chandler wrote: Ok, I've got it narrowed down a bit. Anyone have experiences good or bad to report with Tyan versus Supermicro mobos? I find archives for people using one or the other, so they both seem workable. Anyone used both and prefer one

Re: Tuning OpenBSD network throughput

2006-08-08 Thread knitti
On 8/8/06, Matthew R. Dempsky [EMAIL PROTECTED] wrote: First, I connected the two Linux boxes with an Ethernet cable and ran ``iperf -s'' on the 2.0GHz machine and ``iperf -c 192.168.10.1'' on the 266MHz machine, and iperf reported a bandwidth of about 224 Mbits/sec. Then, I substituted out the

Re: spamd and spamlogd syslog level

2006-08-08 Thread Darrin Chandler
On Tue, Aug 08, 2006 at 11:39:22AM -0400, Will H. Backman wrote: Does anyone know why spamd and spamlogd log to syslog at different log levels. It isn't too hard to change syslog.conf to include daemon.debug in order to capture output from spamlogd, but why the difference? I would consider

Re: spamd and spamlogd syslog level

2006-08-08 Thread Joachim Schipper
On Tue, Aug 08, 2006 at 11:39:22AM -0400, Will H. Backman wrote: Does anyone know why spamd and spamlogd log to syslog at different log levels. It isn't too hard to change syslog.conf to include daemon.debug in order to capture output from spamlogd, but why the difference? Presumably, as

Re: Systrace Logging Redirection

2006-08-08 Thread Joachim Schipper
On Tue, Aug 08, 2006 at 11:00:14AM -0400, Seth Hanford wrote: Hey all, I've been experimenting with systrace and several programs on OpenBSD 3.9-stable. I'm pleased with what the tool lets me do, and with its output, but can't find a way to get it to log to a different file for each

Re: Apache proxy settings not working

2006-08-08 Thread Bruno S. Delbono
o?= wrote: 2006/8/7, Bruno S. Delbono [EMAIL PROTECTED]: I have a couple of apps (webmail) that sit behind the OpenBSD gateway running httpd. When I enable the proxy module and try to access the app behind it fails with this error: Are you trying a transparent proxy? I was unable to get this

Re: Systrace Logging Redirection

2006-08-08 Thread Hannah Schroeter
Hi! On Tue, Aug 08, 2006 at 06:05:22PM +0200, Joachim Schipper wrote: [...] What about systrace -e? It logs to stdout. Write a little program in your favourite language[1] to send it to syslog with the proper facility/priority. You mean something like logger(1)? Joachim Kind

Re: Apache proxy settings not working

2006-08-08 Thread openbsd misc
Hello, No it's reverse. I want all incoming requests from the Internet to a certain virtual host (in this case webmail.sendmail.tv) to be redirected to an internal host running the webmail app server (on 10.10.33.3 port 81). For some reason, the proxy in OpenBSD's httpd doesn't take the

Re: XOrg upgrade problem

2006-08-08 Thread Guillermo Garcia-Rojas
UNSUSCRIBE

Re: Smallest OpenBSD box

2006-08-08 Thread z0mbix
The wrap does not support HDD's, CF only. You'll be better off with a soekris: http://www.soekris.com/ Cheers z0mbix On 08/08/06, openbsd misc [EMAIL PROTECTED] wrote: Hello, Hi, I would like to know that is the smallest box ( in terms of size ) that can be used to Install OpenBSD and

Re: Apache proxy settings not working

2006-08-08 Thread Bruno S. Delbono
openbsd misc wrote: Did you try it with a dns name? I'm using /var/www/etc/hosts (httpd is chrooted per default) for that. Bingo! # mkdir /var/www/etc/ # cp /etc/hosts /var/www/etc/hosts # chown -R www:www /var/www/etc/hosts - Enabled mod_proxy - Changed the IP address of the app server to

Re: Systrace Logging Redirection

2006-08-08 Thread Seth Hanford
Hannah Schroeter wrote: Hi! On Tue, Aug 08, 2006 at 06:05:22PM +0200, Joachim Schipper wrote: [...] What about systrace -e? It logs to stdout. Write a little program in your favourite language[1] to send it to syslog with the proper facility/priority. You mean something like

Re: Smallest OpenBSD box

2006-08-08 Thread Diana Eichert
You didn't provide all your requirements for your firewall. How many PPS do you need to support? This will drive what kind of hardware you should get, not just physical size and number of interfaces. diana

Re: broadcast IPs in a public /29 block

2006-08-08 Thread openbsd misc
Hello, while mucking around with reverse DNS for a /29 public netblock i use, i noticed that my ISP, SBC, had only aliased 6 of the 8 IPs in the /29 block for use with rDNS. after seeing this, i did a bit of homework and found graham toal's explanation of the missing IPs (

sasyncd and ISAKMP SA

2006-08-08 Thread Floroiu, John Williams
hi, I was recently looking for IPsec failover functionality and come across the sasyncd daemon. didn't have time to try it out, but maybe someone could give me a brief answer to the following question: does sasyncd enable the IPsec failover gateways to also share the ISAKMP SA (so that DPD

Re: Alternative superuser aside from root

2006-08-08 Thread Lukasz Sztachanski
On Tue, Aug 08, 2006 at 03:54:45PM +0800, Tito Mari Francis Esca?o wrote: Is it possible to replace root with another username as superuser? This could make the system very secure because when it comes to BSD/Unix/Linux, the root is the most coveted user account. That is, hackers would all be

Server question

2006-08-08 Thread Alex Stamatis
Hello BSD'S :) I want to rent a box in 1und1.de. I wanted to ask the following questions. It has software raid. Do you think I might have a compartability problem with that ? Also has anyone tried from misc to install via serial console an OpenBSD in this company ? This is my main concern ... I

Re: Apache proxy settings not working

2006-08-08 Thread openbsd misc
openbsd misc wrote: Did you try it with a dns name? I'm using /var/www/etc/hosts (httpd is chrooted per default) for that. Bingo! ;-) # mkdir /var/www/etc/ # cp /etc/hosts /var/www/etc/hosts # chown -R www:www /var/www/etc/hosts Your chown is not a good idea. Should be: chown

Re: saslauthd issue?

2006-08-08 Thread Alexander Hall
J Moore wrote: As I was inching my way along, testing as I go, I noticed something odd. /usr/local/sbin/testsaslauthd -u user -p password This test worked on the first user id and pw I tried, so I assumed saslauthd was working correctly. Later, while troubleshooting a stubborn issue, I

Re: Server question

2006-08-08 Thread Joachim Schipper
On Tue, Aug 08, 2006 at 10:19:41PM +0300, Alex Stamatis wrote: Hello BSD'S :) I want to rent a box in 1und1.de. I wanted to ask the following questions. It has software raid. Do you think I might have a compartability problem with that ? In the sense that it's the Linux kernel doing

Re: sshd question

2006-08-08 Thread Dag Richards
holger glaess wrote: hi i hope this list is the right one for my question . i look for an funktion to limit the login by name AND ip range. example. root login ALLOW from www.xxx.yyy.zzz deny from all myname login ALLOW from all deny from www.xxx.yyy.zzz if there exist an feature /

Re: Smallest OpenBSD box

2006-08-08 Thread openbsd misc
That's true. He didn't write his requirements. I'm handling everything on ramdisks (dnscache from djbdns, squid, log-files) and it's working fine (for a small environment). Soekris are more expensive, but they have advantages... :-) Openbrick could also be an option. I bought some machines here:

Re: Tuning OpenBSD network throughput

2006-08-08 Thread Luiz Souza
knitti wrote: On 8/8/06, Matthew R. Dempsky [EMAIL PROTECTED] wrote: First, I connected the two Linux boxes with an Ethernet cable and ran ``iperf -s'' on the 2.0GHz machine and ``iperf -c 192.168.10.1'' on the 266MHz machine, and iperf reported a bandwidth of about 224 Mbits/sec. Then, I

cpu1: unknown i686 model 1, can't get bus clock

2006-08-08 Thread Sevan / Venture37
I have just installed the 4.0-beta snapshot noticed a error message when booting GENERIC.MP cpu1: unknown i686 model 1, can't get bus clock the machine is a old IBM PC 365, dual p-pro. the machine was previously running 3.9-STABLE without any such errors. Regards Sevan / Venture37 OpenBSD

OT: Request for Help on 2.5 HardDisk (Don't open if you disklike OT)

2006-08-08 Thread Gustavo Rios
I am trying to buy 24/7 rated 2.5 hard disks to use within soekris running openbsd for a firewall system. I am trying hard to find a reliable supplier of such devices. The problem i am facing i cannot find a reseller anywhere in the word that could deliver it to Brazil (where i am right now).

Re: Alternative superuser aside from root

2006-08-08 Thread Alexander Hall
Tito Mari Francis Escaqo wrote: Is it possible to replace root with another username as superuser? This could make the system very secure because when it comes to ^^^ No. ^^ No. BSD/Unix/Linux, the root is the most

ProLiant with RILOE keyboard freezes after boot sometimes

2006-08-08 Thread Robert Urban
Hello, has anyone else noticed that after booting, the keyboard on a ProLiant (DL380-G2) with the RILOE (Remote Insight Lights-Out Edition) card often freezes? If I take the RILOE card out, the kb is always ok. Rob Urban Here's my dmesg: OpenBSD 3.9 (GENERIC) #617: Thu Mar 2 02:26:48 MST

Re: cpu1: unknown i686 model 1, can't get bus clock

2006-08-08 Thread Dimitry Andric
Sevan / Venture37 wrote: I have just installed the 4.0-beta snapshot noticed a error message when booting GENERIC.MP cpu1: unknown i686 model 1, can't get bus clock the machine is a old IBM PC 365, dual p-pro. the machine was previously running 3.9-STABLE without any such errors. Can you

Re: ProLiant with RILOE keyboard freezes after boot sometimes

2006-08-08 Thread Vydrin Artem
Hello! When you turn on RILOE, local keyboard is turned of by RILOE. You may use remote keyboard. Correct me if I wrong, but how on ProLiant DL380-G2 installed Pentium III - 1266 Mhz? They have Xion*2 on a board. Artem V. Vydrin -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

Re: sshd question

2006-08-08 Thread Jeff Nelson
On Tue, Aug 08, 2006 at 10:04:03AM +0200, holger glaess wrote: i hope this list is the right one for my question . i look for an funktion to limit the login by name AND ip range. example. root login ALLOW from www.xxx.yyy.zzz deny from all myname login ALLOW from all deny from

Re: problems compiling -current kernel

2006-08-08 Thread Francisco Valladolid
Today, I compile OpenBSD 4.0 beta, sucessfully, both Kernel and Userland without problems. the dmesg is here: http://bsdguy.net/data/dmesg-4.txt Thank you for the support. On 8/8/06, Henning Brauer [EMAIL PROTECTED] wrote: * Francisco Valladolid [EMAIL PROTECTED] [2006-08-08 08:25]: Today

Re: ProLiant with RILOE keyboard freezes after boot sometimes

2006-08-08 Thread Nick Holland
Robert Urban wrote: Hello, has anyone else noticed that after booting, the keyboard on a ProLiant (DL380-G2) with the RILOE (Remote Insight Lights-Out Edition) card often freezes? If I take the RILOE card out, the kb is always ok. WARNING: Complete and total speculation (or Wild-A**ed-Guess)

Re: Smallest OpenBSD box

2006-08-08 Thread Siju George
On 8/8/06, Diana Eichert [EMAIL PROTECTED] wrote: You didn't provide all your requirements for your firewall. How many PPS do you need to support? This will drive what kind of hardware you should get, not just physical size and number of interfaces. diana Thankyou so much Andreas and

Re: Tuning OpenBSD network throughput

2006-08-08 Thread Antti Harri
On Tue, 8 Aug 2006, Matthew R. Dempsky wrote: but running ``iperf -c 192.168.10.1'' under OpenBSD reported a mere 3.8 Mbits/sec---nearly two orders of magnitude less! The version of iperf in ports is broken for at least i386. It needs a patch to run correctly. I wrote one but someone replied

Re: carp in PF interface context.

2006-08-08 Thread Ryan McBride
On Tue, Aug 08, 2006 at 12:33:23PM +0200, Henning Brauer wrote: Why the carp interface cannot be used in context of the interface? well, because it is that way. Because of the way that the routing currently works, if both the carpdev 'physical' interface and the carp interfaces have

Re: Tuning OpenBSD network throughput

2006-08-08 Thread Michal Soltys
Matthew R. Dempsky wrote: I have three machines that I'm using for testing network performance: - 2.0GHz Pentium 4, 256MiB RAM, Ubuntu 6.06, e1000 - 266MHz Pentium II, 192MiB RAM, Debian Unstable, sk98lin - 600MHz Pentium M, 256MiB RAM, OpenBSD 4.0-current, em(4) [cut] Can