Re: Multiple ftp servers behind nat using pf-proxy?

2007-01-22 Thread Camiel Dobbelaar
On Mon, 22 Jan 2007, Satadru Pramanik wrote: > /usr/sbin/ftp-proxy -r -R 192.168.19.4 -p 21 -b externalip1 > /usr/sbin/ftp-proxy -r -R 192.168.19.122 -p 21 -b externalip2 > > Connections to externalip1 work just fine using ftp. > > Am I doing something wrong or is this just an unsupported configu

Re: setting up a memory file system

2007-01-22 Thread Peter Matulis
Le Mardi 23 Janvier 2007 00:04, Greg Thomas a icrit : > On 1/22/07, Peter Matulis <[EMAIL PROTECTED]> wrote: > > I am having difficulty finding documentation on how to set up a > > memory file system from beginning to end. I keep reading about > > /tmp and swap and docs that presume certain steps

OpenBSD on software raid

2007-01-22 Thread doc Hyde
Hello! I have setup a raid for my system (sd0 and sd1). Since I only have 2 hdds I set it up initially as a broken mirror. But I just can't seem to be able to squeeze back my other drive in the array. # raidctl -s raid0 raid0 Components: component0: failed /dev/sd1d: optimal Spa

Re: setting up a memory file system

2007-01-22 Thread Marco S Hyman
Peter Matulis writes: > I am having difficulty finding documentation on how to set up a memory > file system from beginning to end. I keep reading about /tmp and swap > and docs that presume certain steps have been accomplished (disklabel). I suspect your difficulty is in expecting it to be

SVN question

2007-01-22 Thread Jean-Daniel Beaubien
Hi everyone, Firstly, I know my question is a bit off-topic for this list...but I don't exactly trust the subversion mailing list to give me an objective view if subversion is safe or not. Basically I'd like to know what people think about having a svn repository on a web host like dreamhost.com

Re: 802.11n Sent to vote

2007-01-22 Thread Travers Buda
On Mon, 22 Jan 2007 21:31:22 -0600 "Sam Fourman Jr." <[EMAIL PROTECTED]> wrote: > hello misc@ > > I was reading FreeBSD news Groups and I found this link > > http://blog.matthewgast.com/2007/01/19/tgn-draft-2-out-for-vote/ > > My question is about future 802.11n support in OpenBSD, are update

Re: IP change trouble

2007-01-22 Thread Lawrence Teo
Paul Irofti wrote: I have changed one of my workstation's IP with: $ sudo ifconfig vr0 inet 192.168.1.64 Afterwards some applications (trn, rtorrent, gaim) acknowledged the change and worked on the fly. Others, such as irssi, worked on a random basis (i.e. restarting it would lead to connecti

Re: OT: Getting a premade box or doing it yourself (was "OT:")

2007-01-22 Thread Lawrence Teo
Brian Keefer wrote: There ARE a number of vendors selling OBSD solutions, actually. One I remember running across is LOK Technologies. Drivers should NOT be an issue - you're building an appliance, it should be pretty simple to picl compatible s/w. Lee It's not to say there aren't vendors

Re: Do you virtualize w/OpenBSD as host?

2007-01-22 Thread Christian Ney
Yary, > I have two uses in mind, one is trying out/debugging network scenarios, > the other is creating a virutal machine where a couple trusted users can > set up some network services (webserver, svn repository) separate from > my own. The first pretty much requires some kind of virutalization,

Re: Do you virtualize w/OpenBSD as host?

2007-01-22 Thread Jason George
>On 1/22/07, Joachim Schipper <[EMAIL PROTECTED]> wrote: >> Finally, while OpenBSD does not run many virtualization environments, it >> does run *in* most virtualization environments. At least VMWare should >> work, and Xen is being developed [1]. >> >> Joachim >> >> [1] Or might be

Re: setting up a memory file system

2007-01-22 Thread Greg Thomas
On 1/22/07, Peter Matulis <[EMAIL PROTECTED]> wrote: I am having difficulty finding documentation on how to set up a memory file system from beginning to end. I keep reading about /tmp and swap and docs that presume certain steps have been accomplished (disklabel). I want to set up /var/blah as

Re: Do you virtualize w/OpenBSD as host?

2007-01-22 Thread bofh
On 1/22/07, Joachim Schipper <[EMAIL PROTECTED]> wrote: Finally, while OpenBSD does not run many virtualization environments, it does run *in* most virtualization environments. At least VMWare should work, and Xen is being developed [1]. Joachim [1] Or might be ready, or might b

Re: IBM ServeRAID

2007-01-22 Thread Damian Wiest
On Mon, Jan 22, 2007 at 08:57:58PM -0500, Nick Holland wrote: > Peter Matulis wrote: > > Hi. I would like to install OpenBSD 4.0 on an IBM eServer (xSeries 220) > > that contains a ServeRAID SCSI controller. I see that in OpenBSD > > Current a driver has been added (ips). Does that mean I cann

Re: amavisd-new under OpenBSD 4.0

2007-01-22 Thread J.C. Roberts
On Monday 22 January 2007 11:38, Bob Eby wrote: > [EMAIL PROTECTED] > > > freeze is not available as package, you need to install it from the > > ports > tree. > > Good to know, but painful to hear. Guess I'll have to work on > learning ports... > > [EMAIL PROTECTED] > > > > > I don't use anti-vi

An ipsec question

2007-01-22 Thread stan
I've got some basic tuneling working using ipsec, and I'm trying to make it a bit more robuts. Here's what works: Machine A: ike esp from 192.168.1.0/24 to 192.168.9.0/24 peer XX.92.176.37 ike esp from XX.92.176.33 to 192.168.9.0/24 peer XX.92.176.37 ike esp from XX.92.176.33 to XX.92.176.37 Mac

802.11n Sent to vote

2007-01-22 Thread Sam Fourman Jr.
hello misc@ I was reading FreeBSD news Groups and I found this link http://blog.matthewgast.com/2007/01/19/tgn-draft-2-out-for-vote/ My question is about future 802.11n support in OpenBSD, are updated drivers the only work that has to be done. or does the whole 802.11 networking need to be ov

ipcomp

2007-01-22 Thread Richard Thornton
Hi Just trying to ascertain if ipcomp(4) is fully integrated with ipsecctl(8), if it is can someone detail the ipsec.conf(5) config to use it, also does it support RFC2394 IP Payload Compression Using DEFLATE? Thanks for your time. Kind Regards Richard Thornton

setting up a memory file system

2007-01-22 Thread Peter Matulis
I am having difficulty finding documentation on how to set up a memory file system from beginning to end. I keep reading about /tmp and swap and docs that presume certain steps have been accomplished (disklabel). I want to set up /var/blah as mfs. What are the basic steps? Peter

Re: IP change trouble

2007-01-22 Thread Nick Holland
Wrap your lines, please... Paul Irofti wrote: > I have changed one of my workstation's IP with: > > $ sudo ifconfig vr0 inet 192.168.1.64 > > Afterwards some applications (trn, rtorrent, gaim) acknowledged the > change and worked on the fly. Others, such as irssi, worked on a > random basis (i.e

Re: IBM ServeRAID

2007-01-22 Thread Nick Holland
Peter Matulis wrote: > Hi. I would like to install OpenBSD 4.0 on an IBM eServer (xSeries 220) > that contains a ServeRAID SCSI controller. I see that in OpenBSD > Current a driver has been added (ips). Does that mean I cannot install > OpenBSD 4.0 and have access to the controller on this ma

Re: Do you virtualize w/OpenBSD as host?

2007-01-22 Thread yary
On 22/01/07, Joachim Schipper <[EMAIL PROTECTED]> wrote: On Mon, Jan 22, 2007 at 12:42:03PM -0800, yary wrote: For real virtual stuff, qemu works well - although not exactly swiftly. It's usable for testing, but don't try to run it in production. If you can handle being a little less virtual, ch

Re: Using isakmpd to build a bridge

2007-01-22 Thread stan
On Mon, Jan 22, 2007 at 04:03:18PM +, Brian Candler wrote: > > > >Maybe I'm confused here. Let me explain what I am trying to do. I have to > > > >locations at location A I have a subnet of 192.168.1.0/24 at location B I > > > >have a subnet of 192.168.20/24. Presently I am able to ping from >

Re: Do you virtualize w/OpenBSD as host?

2007-01-22 Thread Joachim Schipper
On Mon, Jan 22, 2007 at 12:42:03PM -0800, yary wrote: > Hello, > > wondering what state-of-the-art is for running virtual machines under > OpenBSD. I don't see anything with particularly good performance (like > Solairs "zones"), which would be great, but anything resonable would > work for my pur

Multiple ftp servers behind nat using pf-proxy?

2007-01-22 Thread Satadru Pramanik
Is this possible? I have ftp-proxy working for the first ftp server in behind the NAT. The second ftp server can not be connected to from outside the NAT using the external ip I have assigned for it. I have added rules to rc.local thus, and also have the ftp-proxy/* anchors in pf.conf: /

Re: amavisd-new under OpenBSD 4.0

2007-01-22 Thread Joachim Schipper
On Mon, Jan 22, 2007 at 11:38:06AM -0800, Bob Eby wrote: > [EMAIL PROTECTED] > > freeze is not available as package, you need to install it from the > > ports tree. > > Good to know, but painful to hear. Guess I'll have to work on learning > ports... It's not that difficult; in this case, cd /u

IP change trouble

2007-01-22 Thread Paul Irofti
I have changed one of my workstation's IP with: $ sudo ifconfig vr0 inet 192.168.1.64 Afterwards some applications (trn, rtorrent, gaim) acknowledged the change and worked on the fly. Others, such as irssi, worked on a random basis (i.e. restarting it would lead to connecting or not to the serv

Re: Do you virtualize w/OpenBSD as host?

2007-01-22 Thread yary
On 22/01/07, Stuart Henderson <[EMAIL PROTECTED]> wrote: qemu is less elegant than, say, dfbsd virtual kernels but it works pretty well. Hadn't heard about DragonFly virtual kernels, they do look cool, but they aren't yet ready for prime time and there isn't anything like it in OpenBSD! Still t

Re: Openbsd+Spamassassin+milter-spamd

2007-01-22 Thread Tiago Marques
Hi, You may be interested in trying milter-greylist. It's been very effective for me in blocking spam email. http://hcpnet.free.fr/milter-greylist/ Best regards, Tiago Marques On 1/18/07, Tim Jones <[EMAIL PROTECTED]> wrote: > > On Jan 17, 2007, at 11:41 PM, Mike Spenard wrote: > > > Could so

Re: Dell SC1435, does it work?

2007-01-22 Thread z0mbix
On 22/01/07, Alejandro Lozanoff <[EMAIL PROTECTED]> wrote: Hello list! We were planning to buy a bunch of Dell SC1435 servers with Opterons (we have only intel servers right now), it is a pretty new server so i couldn't find any info on the list archive/google. I was wondering if anyone has trie

OpenBSD on software raid

2007-01-22 Thread doc Hyde
Hello, I'm struggling to get my raid software working. I am running OBSD 4.0. I have 2 hdds sd0 and sd1. I installed the system on sd0 in a standard way. Compiled a raid kernel and created a raid0 config file for sd1 and sd2 (fake mirror just here for setup since I only have 2 hdds). disklabeled s

altq hfsc issue

2007-01-22 Thread Piotr Lukawski
Dear misc@openbsd.org, I wanted to share bandwidth 512Kb between 4 users with guaranted bandwidth 20Kb for each of them and the maximum bandwidth 256Kb for the first user, and 128 Kb for any other. Of course if all of them are connected in the same time I assume that they share existing bandwidth

Dell SC1435, does it work?

2007-01-22 Thread Alejandro Lozanoff
Hello list! We were planning to buy a bunch of Dell SC1435 servers with Opterons (we have only intel servers right now), it is a pretty new server so i couldn't find any info on the list archive/google. I was wondering if anyone has tried one with OpenBSD, if it works, does it work well wit

Re: Do you virtualize w/OpenBSD as host?

2007-01-22 Thread Stuart Henderson
On 2007/01/22 12:42, yary wrote: > wondering what state-of-the-art is for running virtual machines under > OpenBSD. I don't see anything with particularly good performance (like > Solairs "zones"), which would be great, but anything resonable would > work for my purposes- I don't really need the bl

Re: Firewall, high interrupt load, is this a driver problem (dc) ?

2007-01-22 Thread Henning Brauer
* Ronnie Garcia <[EMAIL PROTECTED]> [2007-01-22 21:10]: > Ronnie Garcia a icrit : > >I recently switched one of our firewalls from Linux to oBSD 4.0. > >Its handling approx 8-9 kpps (in+out) on both interfaces. It has a > >D-Link DFE-570TX quad ports NIC (dc driver), two ports are used. > >On Linu

Do you virtualize w/OpenBSD as host?

2007-01-22 Thread yary
Hello, wondering what state-of-the-art is for running virtual machines under OpenBSD. I don't see anything with particularly good performance (like Solairs "zones"), which would be great, but anything resonable would work for my purposes- I don't really need the blazing speed. I want to run a few

Re: amavisd-new under OpenBSD 4.0

2007-01-22 Thread Vijay Sankar
On Monday 22 January 2007 13:38, Bob Eby wrote: > [EMAIL PROTECTED] > > > freeze is not available as package, you need to install it from the > > ports > tree. > > Good to know, but painful to hear. Guess I'll have to work on learning > ports... > > [EMAIL PROTECTED] > > > > > I don't use anti-vi

Re: Idea for additionnal funding

2007-01-22 Thread Martin Schröder
2007/1/21, L. V. Lammert <[EMAIL PROTECTED]>: Actually, I talked to Theo about this last year, as we currently operate a non-profit that is underutilized. The problem is that since OBSD is NOT a non-profit, a 'regular' corp cannot transfer funds without a TON of justification paperwork (especiall

Re: mexico city

2007-01-22 Thread Jack J. Woehr
You might ask on http://groups.google.com.mx/group/OpenBSD-Mexico/topics On Jan 22, 2007, at 12:47 PM, Reyk Floeter wrote: hi, are there any openbsd users in mexico city? please respond in private, reyk -- Jack J. Woehr Director of Development Absolute Performance, Inc. [EMAIL PROTECTED] 3

IBM ServeRAID

2007-01-22 Thread Peter Matulis
Hi. I would like to install OpenBSD 4.0 on an IBM eServer (xSeries 220) that contains a ServeRAID SCSI controller. I see that in OpenBSD Current a driver has been added (ips). Does that mean I cannot install OpenBSD 4.0 and have access to the controller on this machine? Any comments welcome

Re: Firewall, high interrupt load, is this a driver problem (dc) ?

2007-01-22 Thread Ronnie Garcia
Ronnie Garcia a icrit : I recently switched one of our firewalls from Linux to oBSD 4.0. Its handling approx 8-9 kpps (in+out) on both interfaces. It has a D-Link DFE-570TX quad ports NIC (dc driver), two ports are used. On Linux, the CPU was loaded at approx 20% when, and on oBSD, its actually

mexico city

2007-01-22 Thread Reyk Floeter
hi, are there any openbsd users in mexico city? please respond in private, reyk

Re: amavisd-new under OpenBSD 4.0

2007-01-22 Thread Bob Eby
[EMAIL PROTECTED] > freeze is not available as package, you need to install it from the ports > tree. Good to know, but painful to hear. Guess I'll have to work on learning ports... [EMAIL PROTECTED] > > I don't use anti-virus mail scanners. > Well, I'm really just interested in a bayes based

Erlangen Mirror temporarily down

2007-01-22 Thread Alexander von Gernler
Hi crowd, openbsd.informatik.uni-erlangen.de has locked up and has to be hard resetted, which I can't do myself from here. I'll have a guy from University of Erlangen kick the machine tomorrow, that is in about 16 hours. Thanks for your patience, -- Alexander "grunk" von Gernler PGP 0

Re: Using isakmpd to build a bridge

2007-01-22 Thread Brian Candler
> > >Maybe I'm confused here. Let me explain what I am trying to do. I have to > > >locations at location A I have a subnet of 192.168.1.0/24 at location B I > > >have a subnet of 192.168.20/24. Presently I am able to ping from > > >192.168.1.100 to 192.168.2.100, thus the IP layer is working. > >

Re: Why setresuid() and not setuid() is used?

2007-01-22 Thread Matthew R. Dempsky
On Mon, Jan 22, 2007 at 12:19:16PM +0100, Alexander Farber wrote: > I'm writing a small network daemon program and > want it to drop priviliges after it opens a listening port. You might also be interested in looking at the ucspi-tcp and ipsvd packages. They both include programs to listen on a p

Newsletter BorghiToscani.com n°4 - 2007

2007-01-22 Thread newsletter
NEWSLETTER N0 4 DAL 22 AL 28 GENNAIO 2007 23/01/2007 Arcobaleni SESTO FIORENTINO (Sagre e Fiere) 24/01/2007 Vino & Pizza (Sagre e Fiere) 24/01/2007 Festa della canzonetta e del teatro dialettale pietrasantino (Teatro) 25/01/2007 Memorie del paradiso PISA (Mostre) 26/01/2007 Cinematori

Re: Why setresuid() and not setuid() is used?

2007-01-22 Thread Henning Brauer
* Alexander Farber <[EMAIL PROTECTED]> [2007-01-22 12:54]: > Hello, > > I'm writing a small network daemon program and > want it to drop priviliges after it opens a listening port. > > I've looked at the several programs in /usr/src/usr.sbin > and many do it in the similar way: > > 1) getpwnam(N

Re: Why setresuid() and not setuid() is used?

2007-01-22 Thread Alexander Farber
Hello Stuart, On 1/22/07, Stuart Henderson <[EMAIL PROTECTED]> wrote: On 2007/01/22 12:19, Alexander Farber wrote: > 1) Can't a compromised process change back to its saved root uid? setresuid/setresgid: set real, effective, *and saved* uid/gid ok! > 2) Why is setresuid() used and not setuid

Re: Why setresuid() and not setuid() is used?

2007-01-22 Thread Damien Miller
On Mon, 22 Jan 2007, Alexander Farber wrote: > Hello, > > I'm writing a small network daemon program and > want it to drop priviliges after it opens a listening port. > > I've looked at the several programs in /usr/src/usr.sbin > and many do it in the similar way: > > 1) getpwnam(NTPD_USER) to

Re: Why setresuid() and not setuid() is used?

2007-01-22 Thread Stuart Henderson
On 2007/01/22 12:19, Alexander Farber wrote: > 5) Finally call setresgid(pw->pw_gid, pw->pw_gid, pw->pw_gid) >and setresuid(pw->pw_uid, pw->pw_uid, pw->pw_uid) > > 1) Can't a compromised process change back to its saved root uid? setresuid/setresgid: set real, effective, *and saved* uid/gid

Re: Why setresuid() and not setuid() is used?

2007-01-22 Thread Alexander Farber
Oops I meant "Privilege revocation", like here: http://www.openbsd.org/papers/ven05-deraadt/mgp00033.html On 1/22/07, Alexander Farber <[EMAIL PROTECTED]> wrote: Also is there maybe a good guide on priv. sep. on OpenBSD?

Why setresuid() and not setuid() is used?

2007-01-22 Thread Alexander Farber
Hello, I'm writing a small network daemon program and want it to drop priviliges after it opens a listening port. I've looked at the several programs in /usr/src/usr.sbin and many do it in the similar way: 1) getpwnam(NTPD_USER) to find its home dir 2) check that the home dir belongs to root an

Re: OT: Getting a premade box or doing it yourself (was "OT:")

2007-01-22 Thread Lars Hansson
Jeroen Massar wrote: > Same reason why Windows Servers are a good thing to give to > organizations that have stupid people, they won't be able to understand > OpenBSD either, but clicking is something that almost everybody can do. Going OT but it is interesting how this argument works in IT but as