Why is pf blocking some port 80 traffic??

2007-05-07 Thread Rob Waite
Hello.. I just added a rule to allow port 80 traffic into my server and started noticing some odd blocks occuring. It seems that some web connections are losing their state and sending an R or F flag which gets blocked. I am not sure of the time but I think once I was refreshing the page and it

Re: Really stuck and help needed of resources depletions on web servers.

2007-05-07 Thread Daniel Ouellet
OK, I have some update on this one. It's not fix, but I was finally able to isolate how that problem is trigger. May be fix now, I don't know, but I am passing the informations in case it's useful and also if someone could tell me if there was a logic behind it and if yes it would not

Re: Error building 4.1-stable kernel from source on sparc64

2007-05-07 Thread Luca Corti
On Wed, 2007-05-02 at 14:11 -0400, Josh Grosse wrote: Just a wild guess, but did you forget to include comp41.tgz in your install/upgrade? No. I've just reextracted it just to be sure, but I still get the same error. ciao Luca

Re: OpenBSD 4.1 Torrents

2007-05-07 Thread Martin Schröder
2007/5/7, Adam Hawes [EMAIL PROTECTED]: MD5 is proven weak. It's possible to take almost any file and its MD5 then create an identically sized file with the same hash in a reasonable time. This can be used to pass out an arbitrary CD image that completely trashes the contents of your hard

Re: ACPI question and status request

2007-05-07 Thread Alexander Hall
Gordon Willem Klok wrote: On Sat, May 05, 2007 at 02:32:17AM +0200, Alexander Hall wrote: acpicpu0 at acpi0: CPU0: 866, 667 MHz apmd -C is your friend, without acpi this is done in SMM by the bios at least it was on my lattitude before it kicked the bucket. $ pgrep -fl apmd 214

master volume problem

2007-05-07 Thread bdz
I have an ASUS notebook that uses the azalia driver for the sound. The problem is that I can not adjust the volume with applicaions' volume control. That includes xfce and xmms too. In xfce's Sound setting panel there is only one mixer (mixer0) that is set, in xmms there is no mixer in the

Re: OpenBSD 4.1 Torrents

2007-05-07 Thread Tobias Ulmer
On Mon, May 07, 2007 at 11:57:50AM +0200, Martin Schr?der wrote: 2007/5/7, Adam Hawes [EMAIL PROTECTED]: MD5 is proven weak. It's possible to take almost any file and its MD5 then create an identically sized file with the same hash in a reasonable time. This can be used to pass out an

Re: Really stuck and help needed of resources depletions on web servers.

2007-05-07 Thread Maurice Janssen
On Monday, May 7, 2007 at 03:11:41 -0400, Daniel Ouellet wrote: Every time, I process the logs with webalizer, no problem what so ever. Then a few customers wants the awstats version. So, I process that as well, however it's also processing multiple logs, but when the awstats PERL stuff kicks

Re: Error building 4.1-stable kernel from source on sparc64

2007-05-07 Thread Michael
Hi, Luca Corti schrieb: No. I've just reextracted it just to be sure, but I still get the same error. I got a sparc64 (Sun Ultra 5) running here which I upgraded from 4.0-stable to 4.1-stable. Just recompiled the kernel without any problems. Michael OpenBSD 4.1-stable (GENERIC) #1: Mon May

Re: acpi vaio lcd brightness driver

2007-05-07 Thread Marco Peereboom
Cool. What I am not sure about is if we want to have a bunch of little vendor drivers or a big driver that does all the vendor stuff. I need to think this through. Any comments? giovanni wrote: hello, because I could not change the excessive lcd brightness of my laptop under openbsd I

Re: OpenBSD 4.1 Torrents

2007-05-07 Thread Darren Spruell
On 5/7/07, Tobias Ulmer [EMAIL PROTECTED] wrote: Btw, pgp requires a working web of trust, it's not secure just because you can sign something. Joe Cracker can easily generate a key with Theo de Raadt [EMAIL PROTECTED] and provides you with signed filesets. Who steps up to organise key signing

GIS Weekly Review : May 07, 2007

2007-05-07 Thread GISCafe Newsletter
GIS Weekly Review May 07, 2007 From: GISCafe Previous Issues NAVTEQ Review Article eMail Article Print Article Susan Smith - Managing Editor

Your GIS subscription

2007-05-07 Thread gisadmin
A subscription change or cancellation request for your email address misc@openbsd.org was just received on GISCafe. This message is to inform you of this action and to provide you with a personalized URL that you can use to make such modifications now or at any time in the future. If you did not

Re: master volume problem

2007-05-07 Thread Deanna Phillips
bdz writes: I have an ASUS notebook that uses the azalia driver for the sound. The problem is that I can not adjust the volume with applicaions' volume control. That includes xfce and xmms too. In xfce's Sound setting panel there is only one mixer (mixer0) that is set, in xmms there is no

Re: Really stuck and help needed of resources depletions on web servers.

2007-05-07 Thread Daniel Ouellet
Maurice Janssen wrote: On Monday, May 7, 2007 at 03:11:41 -0400, Daniel Ouellet wrote: Every time, I process the logs with webalizer, no problem what so ever. Then a few customers wants the awstats version. So, I process that as well, however it's also processing multiple logs, but when the

Re: FREEZE UPS! (I'M STILL HERE WOLF!)

2007-05-07 Thread Peter Philipp
On Sat, May 05, 2007 at 09:38:02AM +0200, Little Red Riding Hood marching through the forest wrote: Not sent to bugs@ because I'm not sure it could do much there. I'm hoping someone may be able to give hints on what to check, so I can resolve this small issue. Why would you wanna do

OT: GUI programming languages

2007-05-07 Thread Jacob Yocom-Piatt
have been coding touchscreen-driven applications using visual basic lately and am sick of VB. i would much rather be using openbsd with another programming language that allows me to accomplish the same sort of stuff. i have no formal CS background so am at a loss for good candidates. the

Re: new openbsd 4.0 server, panic on ufsdirhash

2007-05-07 Thread John Mendenhall
I have yet to receive any response to the panics I have been experiencing. Is there something else I need to provide that will get me pointed in the right direction? Are there tools available to test the connection to the hard drive, or to test the hard drive itself? I used format when

question about multiple pflog interfaces on openbsd 4.1

2007-05-07 Thread carlopmart
Hi all, I have tried to setup a new pflog interface to monitor ipsec traffic and it works ok. Afterwards I have setup another pflogd daemon to store logs on another pcap file under /var/log. But I have one question: how do i to configure newsyslog.conf entry for this new pflogd daemon? If I

Re: new openbsd 4.0 server, panic on ufsdirhash

2007-05-07 Thread John Mendenhall
Artur, Have you done forced fsck of the partitions? This sounds like a problem with the data you have on disk. It would be even nicer if you could update to a newer fsck because it has been updated to deal with many new strange corner cases we've been seeing. Although, that might or might

Re: acpi vaio lcd brightness driver

2007-05-07 Thread Ted Unangst
On 5/7/07, Marco Peereboom [EMAIL PROTECTED] wrote: Cool. What I am not sure about is if we want to have a bunch of little vendor drivers or a big driver that does all the vendor stuff. I need to think this through. Any comments? this could all be taken care of by button, no? even if they

Re: Really stuck and help needed of resources depletions on web servers.

2007-05-07 Thread Daniel Ouellet
Maurice Janssen wrote: Now, why PERL would do this, I have no clue, but it does anyway in the usage done by awstats. So far I reproduce this 5 times, so it's pretty consistent. What may cause this, I do not know more, but look like when PERL needs to process huge amount of data, it end up

4.0 locked up over the weekend

2007-05-07 Thread Bruce Bauer
This system has been running flawlessly since mid-March with GENERIC plus the 010 patch. dmesg below This morning I found it totally unresponsive both through network and at the console. Had to use the power switch to recover. Where do I start trying to track this down? The system is running

Re: Error building 4.1-stable kernel from source on sparc64

2007-05-07 Thread Luca Corti
On Mon, 2007-05-07 at 14:42 +0200, Michael wrote: I got a sparc64 (Sun Ultra 5) running here which I upgraded from 4.0-stable to 4.1-stable. Just recompiled the kernel without any problems. I've got an Ultra 5 too. I'll retry a fresh source checkout from CVS. thanks Luca

Re: Thecus N2100 and RAID 1

2007-05-07 Thread Matthieu Herrb
On 5/7/07, Bryan Vyhmeister [EMAIL PROTECTED] wrote: I was just wondering about whether the Thecus N2100 running OpenBSD/ armish can operate in RAID 1 mode. Maybe this is a stupid question but I couldn't find anything about it and I am interested to know. Obviously I would not be running the

Re: 4.0 locked up over the weekend

2007-05-07 Thread Jack J. Woehr
On May 7, 2007, at 12:20 PM, Bruce Bauer wrote: This system has been running flawlessly since mid-March with GENERIC plus the 010 patch. dmesg below This morning I found it totally unresponsive both through network and at the console. Had to use the power switch to recover. Where do I

Re: 4.0 locked up over the weekend

2007-05-07 Thread Joachim Schipper
On Mon, May 07, 2007 at 11:20:00AM -0700, Bruce Bauer wrote: This system has been running flawlessly since mid-March with GENERIC plus the 010 patch. dmesg below This morning I found it totally unresponsive both through network and at the console. Had to use the power switch to recover.

Re: 4.0 locked up over the weekend

2007-05-07 Thread Bruce Bauer
On 5/7/07, Jack J. Woehr [EMAIL PROTECTED] wrote: On May 7, 2007, at 12:20 PM, Bruce Bauer wrote: This system has been running flawlessly since mid-March with GENERIC plus the 010 patch. dmesg below This morning I found it totally unresponsive both through network and at the console. Had to

Problem with lockups after upgrade from 3.8

2007-05-07 Thread Bill
* * A recent post and a router blowout today has sparked me to report this * * Hey all, We've had a router running openbsd for a while now. A few months ago we upgraded from 3.8 to 4.0 (upgrade technically was 3.8 - 3.9 - 4.0) and it seemed to go as smooth as possible. Then we started

Re: OT: GUI programming languages

2007-05-07 Thread Marc Balmer
* Jacob Yocom-Piatt wrote: have been coding touchscreen-driven applications using visual basic lately and am sick of VB. i would much rather be using openbsd with another programming language that allows me to accomplish the same sort of stuff. i have no formal CS background so am at a

booteasy fate?

2007-05-07 Thread Michael Dexter
Hello, I have found references to: /pub/OpenBSD/3.6/tools/booteasy suggesting that it was part of the distribution but I do not see it listed for 3.7 and newer. I do not see a 3.7 changelist entry for it and I the online man pages to not seem to refer to it. From the looks however, it was an

Re: Thecus N2100 and RAID 1

2007-05-07 Thread Bryan Vyhmeister
On May 7, 2007, at 11:56 AM, Matthieu Herrb wrote: I'm using a thecus 2100 with raidframe to do raid 1. A bit slow, but with 512MB RAM it's acceptable. Would ccd(4) be any faster? Also, what sort of RAM does it take? Thanks for your response. Bryan

Re: booteasy fate?

2007-05-07 Thread Aaron Hsu
On Mon, 07 May 2007 15:09:34 -0500, Michael Dexter [EMAIL PROTECTED] wrote: I have found references to: /pub/OpenBSD/3.6/tools/booteasy suggesting that it was part of the distribution but I do not see it listed for 3.7 and newer. I do not see a 3.7 changelist entry for it and I the online

Re: Dual-port Gigabit SX NICs?

2007-05-07 Thread K K
Am I the only one having a difficult time keeping track of which cards on the Supported hardware list are merely tolerated, and which vendors/chipsets are truly supported and cooperative? On 5/5/07, Henning Brauer [EMAIL PROTECTED] wrote: On 5/4/07, K K [EMAIL PROTECTED] wrote: This would be

Re: booteasy fate?

2007-05-07 Thread Bruce Bauer
Don't beat a dead horse. This should do whatever you need: http://gag.sourceforge.net/ On 5/7/07, Aaron Hsu [EMAIL PROTECTED] wrote: On Mon, 07 May 2007 15:09:34 -0500, Michael Dexter [EMAIL PROTECTED] wrote: I have found references to: /pub/OpenBSD/3.6/tools/booteasy suggesting that it

question about delayed ACKs on OpenBSD

2007-05-07 Thread Michal Soltys
Hello I've noticed a bit different behaviour with regard to delayed acks on OBSD. Some other systems (2 linux distros, win2k/xp) I tested, pretty much acted as I've always seen it - 1 ack per max. 2 segments, but no bigger delay than some arbitrary value (looking at rfc, no more than 500ms,

Re: Dual-port Gigabit SX NICs?

2007-05-07 Thread Henning Brauer
* K K [EMAIL PROTECTED] [2007-05-07 23:52]: Am I the only one having a difficult time keeping track of which cards on the Supported hardware list are merely tolerated, and which vendors/chipsets are truly supported and cooperative? On 5/5/07, Henning Brauer [EMAIL PROTECTED] wrote: On

Re: 4.0 locked up over the weekend

2007-05-07 Thread Joachim Schipper
On Mon, May 07, 2007 at 12:42:55PM -0700, Bruce Bauer wrote: On 5/7/07, Jack J. Woehr [EMAIL PROTECTED] wrote: On May 7, 2007, at 12:20 PM, Bruce Bauer wrote: This system has been running flawlessly since mid-March with GENERIC plus the 010 patch. dmesg below This morning I found it

Re: Thecus N2100 and RAID 1

2007-05-07 Thread Joachim Schipper
On Mon, May 07, 2007 at 02:02:19PM -0700, Bryan Vyhmeister wrote: On May 7, 2007, at 11:56 AM, Matthieu Herrb wrote: I'm using a thecus 2100 with raidframe to do raid 1. A bit slow, but with 512MB RAM it's acceptable. Would ccd(4) be any faster? Also, what sort of RAM does it take?

Re: Dual-port Gigabit SX NICs?

2007-05-07 Thread Joachim Schipper
On Mon, May 07, 2007 at 04:23:00PM -0500, K K wrote: Am I the only one having a difficult time keeping track of which cards on the Supported hardware list are merely tolerated, and which vendors/chipsets are truly supported and cooperative? No, that's why http://www.vendorwatch.org exists. Or

Re: BGP + Multiple Providers + Redundant Firewalls

2007-05-07 Thread askthelist
On 5/5/07, Henning Brauer [EMAIL PROTECTED] wrote: * [EMAIL PROTECTED] [EMAIL PROTECTED] [2007-05-03 20:58]: Any recommendations on running BGP on redundant firewalls to multiple providers advertising the same network thru both links, and talking iBGP with the other firewall? that is

Re: BGP + Multiple Providers + Redundant Firewalls

2007-05-07 Thread askthelist
when i do a bgpctl show fib i see the two routes, 1 thru connected provider, 1 to other router's crossover interface - which is connected then to 2nd provider, so why would i need to redistribute my routes when its already in the fib? maybe im confused but I dont think i necessarily need ospf in

Re: BGP + Multiple Providers + Redundant Firewalls

2007-05-07 Thread Stuart Henderson
On 2007/05/07 16:31, [EMAIL PROTECTED] wrote: when i do a bgpctl show fib i see the two routes, 1 thru connected provider, 1 to other router's crossover interface - which is connected then to 2nd provider, so why would i need to redistribute my routes when its already in the fib? maybe im

Re: Prevent circumventing dansguardian with pf

2007-05-07 Thread a666
From: Sebastian Benoit [EMAIL PROTECTED] If you want deny users the possiblility to smuggle data outside of their workplace (or whatever) then don't connect them to the internet. No, no, no. You must go one step beyond this if you want to prevent employees from smuggling data. To do this

Re: BGP + Multiple Providers + Redundant Firewalls

2007-05-07 Thread askthelist
yah theyre valid, there was a point when i first set this up i remember one of the nexthops being invalid but this hasnt been the case for sometime. cool, i think ill stick to the without ospf for now until it becomes a necessity. thanks. On 5/7/07, Stuart Henderson [EMAIL PROTECTED] wrote: On

Re: OpenBSD 4.1 Torrents

2007-05-07 Thread Sebastian Rother
Guys if you realy care about security why does nobody asks about using gzsig. Even useable for the packages... Kind regards, Sebastian

Re: booteasy fate?

2007-05-07 Thread Aaron Hsu
On Mon, 07 May 2007 16:51:32 -0500, Bruce Bauer [EMAIL PROTECTED] wrote: Don't beat a dead horse. This should do whatever you need: http://gag.sourceforge.net/ Aaah, yes, I remember someone recommending this to me before. It does work well. -- Aaron Hsu [EMAIL PROTECTED] No one could

Re: Prevent circumventing dansguardian with pf

2007-05-07 Thread Bryan Irvine
On 4/25/07, Allen Theobald [EMAIL PROTECTED] wrote: Greetings! Included below is my pf.conf set up to use dansguardian (proxyport 3128, filterport 8080) and tinyproxy (listen port 3128) as a transparent proxy. What changes do I need to make to keep someone on int_if/int_net from circumventing

wi pcmcia card configuration Problem

2007-05-07 Thread Bret
Greetings All. I will start with my dmesg: See below--- I have tried many ways to get the 300mw Z-COM WLAN PC Card, RP-MMCX, 802.11b Higher Power card to work with the system. I am trying to setup the first Wlan (wi0) as an access point and the second (wi1) as a bridge/link to a distant

Re: wi pcmcia card configuration Problem (added the errors)

2007-05-07 Thread Bret
Bret wrote: Greetings All. I will start with my dmesg: See below--- I have tried many ways to get the 300mw Z-COM WLAN PC Card, RP-MMCX, 802.11b Higher Power card to work with the system. I am trying to setup the first Wlan (wi0) as an access point and the second (wi1) as a bridge/link

OpenBSD CD(4.1) T-Shirts arrivaled at China(Shenzhen).

2007-05-07 Thread Bibby
Hi all, OpenBSD CD(4.1 -release) and T-Shirts arrivaled at China(Shenzhen) this morning, It looks really nice. Thanks to all OpenBSD developers for the hard work, thanks to Wim for the patience. ^_^ MB 2007.05.08 -- OpenBSD Store in China Mainland: http://shop34421310.taobao.com/

Re: booteasy fate?

2007-05-07 Thread Nick Holland
Michael Dexter wrote: Hello, I have found references to: /pub/OpenBSD/3.6/tools/booteasy suggesting that it was part of the distribution but I do not see it listed for 3.7 and newer. I do not see a 3.7 changelist entry for it and I the online man pages to not seem to refer to it. From

Re: Prevent circumventing dansguardian with pf

2007-05-07 Thread Open Phugu
On 5/7/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: From: Sebastian Benoit [EMAIL PROTECTED] If you want deny users the possiblility to smuggle data outside of their workplace (or whatever) then don't connect them to the internet. No, no, no. You must go one step beyond this if you want to

Re: malo driver

2007-05-07 Thread Default User
On Sun, 2007-05-06 at 11:14 +0200, Henning Brauer wrote: * Default User [EMAIL PROTECTED] [2007-05-05 05:03]: cbb0 at pci1 dev 4 function 0 ENE CB-1410 CardBus rev 0x01pci_intr_map: no mapping for pin A : couldn't map interrupt there's your problem, your cardbus slot is not working

Re: Thecus N2100 and RAID 1

2007-05-07 Thread Bryan Vyhmeister
On May 7, 2007, at 4:11 PM, Joachim Schipper wrote: On Mon, May 07, 2007 at 02:02:19PM -0700, Bryan Vyhmeister wrote: On May 7, 2007, at 11:56 AM, Matthieu Herrb wrote: I'm using a thecus 2100 with raidframe to do raid 1. A bit slow, but with 512MB RAM it's acceptable. Would ccd(4) be any

Re: Routing to host over IPsec

2007-05-07 Thread Joel Knight
--- Quoting RW on 2007/04/30 at 16:52 +1000: Existing setup: Head Office: WAN IP=165.x.y.z LAN = 172.22.22.0/24 Extranet gateway = 10.x.y.1 Branch Office: WAN IP=150.x.y.z LAN= 172.22.23.0/24 IPsec endpoints are OpenBSD firewalls and LAN to LAN connectivity is fine. My

Re: Routing to host over IPsec

2007-05-07 Thread RW
On Mon, 7 May 2007 23:01:15 -0600, Joel Knight wrote: --- Quoting RW on 2007/04/30 at 16:52 +1000: Existing setup: Head Office: WAN IP=165.x.y.z LAN = 172.22.22.0/24 Extranet gateway = 10.x.y.1 Branch Office: WAN IP=150.x.y.z LAN= 172.22.23.0/24 IPsec endpoints are OpenBSD

Preventing man-in-the-middle attack on authpf?

2007-05-07 Thread Matthew R. Dempsky
Suppose I setup a wireless network and use authpf to restrict access to some resource (e.g., Internet access) to registered users. It seems there's a fairly simple man-in-the-middle attack: An attacker sets up a system with two wireless NICs: one associated to my network and another configured