Re: AltQ only catching in one queue

2008-05-14 Thread Chris Smith
On Thursday 15 May 2008, Steve B wrote: > pass out on $ext_if inet proto tcp from $ext_if to any flags S/SA > keep state queue ( general, tcp_ack ) last matching rule ? -- Chris

AltQ only catching in one queue

2008-05-14 Thread Steve B
My employer has allowed me to work from home one day per week. As part of the agreement I had to take home a VoIP phone that connects me to work. This seemed like a good excuse to setup AltQ on my OBSD box. I read the man page, the FAQ and Jacek Artymiak's book. I built the queues and loaded the ne

Re: Debian libssl security (OpenSSH safe?)

2008-05-14 Thread Otto Moerbeek
On Wed, May 14, 2008 at 07:43:25PM -0700, Darrin Chandler wrote: > On Wed, May 14, 2008 at 10:22:11PM -0400, Ted Unangst wrote: > > On 5/14/08, Ben Calvert <[EMAIL PROTECTED]> wrote: > > > On May 14, 2008, at 5:22 PM, Darrin Chandler wrote: > > > > Are you sure that's a decent analysis? If you hav

Re: Debian libssl security (OpenSSH safe?)

2008-05-14 Thread Ted Unangst
On 5/14/08, Darrin Chandler <[EMAIL PROTECTED]> wrote: > Sure. Lots of those keys out there already. So is something like > ssh-vulnkey the right approach? I do have a couple of users on one of my > boxes. Mind, they're all good OpenBSD people and I really hope their > keys didn't come from a de

Re: ipsec home network to colo server

2008-05-14 Thread Lord Sporkton
2008/5/14 scott learmonth <[EMAIL PROTECTED]>: >> On Tue, May 13, 2008 at 5:41 PM, Lord Sporkton <[EMAIL PROTECTED]> >> wrote: >>> I am trying to set up a ipsec link between my home network(private ip >>> network behind dynamic public ip) >>> and my colo server(single public static ip). I was a b

Re: geom network driver times out on sparc 4.2?

2008-05-14 Thread Jay
I don't think that is it, but I will try, thank you. I'm pretty sure the label that OpenBSD and/or Ubuntu left me with is a Solaris type. And dumb me, I didn't consider OBP as helping the install too. So the questions remain if I can install OBP without Solaris, and if I'll have to crack open the c

Re: Debian libssl security (OpenSSH safe?)

2008-05-14 Thread Darrin Chandler
On Wed, May 14, 2008 at 10:22:11PM -0400, Ted Unangst wrote: > On 5/14/08, Ben Calvert <[EMAIL PROTECTED]> wrote: > > On May 14, 2008, at 5:22 PM, Darrin Chandler wrote: > > > Are you sure that's a decent analysis? If you have a non-debian system > > > with the full number of keys available, what a

Re: Debian libssl security (OpenSSH safe?)

2008-05-14 Thread Ted Unangst
On 5/14/08, Ben Calvert <[EMAIL PROTECTED]> wrote: > On May 14, 2008, at 5:22 PM, Darrin Chandler wrote: > > Are you sure that's a decent analysis? If you have a non-debian system > > with the full number of keys available, what are the chances that you've > > landed on one of the 32767 keys? Not v

Re: problem building release for 4.3 stable

2008-05-14 Thread Aaron Martinez
Anthony Roberts wrote: On Tue, May 6, 2008 1:27 am, Christer Solskogen wrote: Just to be 100% sure. Do you see libc.so.43.0 in /usr/dest/usr/lib ? I've come across the problem you got just a week ago, and my mistake was wrong tag, but the problem could be that you try to build 4.3 on a 4.3-cu

Re: Debian libssl security (OpenSSH safe?)

2008-05-14 Thread Jussi Peltola
On Wed, May 14, 2008 at 05:30:18PM -0700, Ben Calvert wrote: > On May 14, 2008, at 5:22 PM, Darrin Chandler wrote: > > >On Thu, May 15, 2008 at 01:45:51AM +0200, raven wrote: > >> > >>A decent analysis can be found here... just to understand what can > >>do a > >>comment /* */ :) > >>http://blo

Re: ipsec home network to colo server

2008-05-14 Thread scott learmonth
> On Tue, May 13, 2008 at 5:41 PM, Lord Sporkton <[EMAIL PROTECTED]> > wrote: >> I am trying to set up a ipsec link between my home network(private ip >> network behind dynamic public ip) >> and my colo server(single public static ip). I was a bit unclear on >> how to set up a tunnel between a s

Re: ipsec home network to colo server

2008-05-14 Thread Lord Sporkton
2008/5/13 Jonathan <[EMAIL PROTECTED]>: > On Tue, May 13, 2008 at 5:41 PM, Lord Sporkton <[EMAIL PROTECTED]> wrote: >> I am trying to set up a ipsec link between my home network(private ip >> network behind dynamic public ip) >> and my colo server(single public static ip). I was a bit unclear on

Re: geom network driver times out on sparc 4.2?

2008-05-14 Thread Sevan / Venture37
> apt-get upgrade left Linux failing to boot. > Solaris 9 install fails very early, something about newfs failing. > I really tried a bunch of manual parameters, besides that it > is run automatically.I think 10 is in the mail. (I have 10 on > DVD but so far only a CD drive on the machine). if you

Re: Debian libssl security (OpenSSH safe?)

2008-05-14 Thread Ben Calvert
On May 14, 2008, at 5:22 PM, Darrin Chandler wrote: On Thu, May 15, 2008 at 01:45:51AM +0200, raven wrote: A decent analysis can be found here... just to understand what can do a comment /* */ :) http://blog.drinsama.de/erich/en/linux/2008051401-consequences-of-sslssh-weakness.html Are y

Re: Debian libssl security (OpenSSH safe?)

2008-05-14 Thread Darrin Chandler
On Thu, May 15, 2008 at 01:45:51AM +0200, raven wrote: > Ted Unangst ha scritto: >> On 5/14/08, Gabriel Linder <[EMAIL PROTECTED]> wrote: >> >>> Just wondering... If someone generates ssh keys with flags J or Z >>> set in malloc.conf(5), aren't these keys useless too (since feeding >>> predict

Re: Debian libssl security (OpenSSH safe?)

2008-05-14 Thread raven
Ted Unangst ha scritto: On 5/14/08, Gabriel Linder <[EMAIL PROTECTED]> wrote: Just wondering... If someone generates ssh keys with flags J or Z set in malloc.conf(5), aren't these keys useless too (since feeding predictable data is more or less equal to not feeding data at all) ? A dec

Re: changing api when upgrade (was: security fixes for packages)

2008-05-14 Thread Ted Unangst
On 5/14/08, arthur <[EMAIL PROTECTED]> wrote: > The reason we need to rebuild userland/packages after upgrade base is that > the > API may change, right? The only reason you "need" to rebuild is to get the new versions. The old ones work just fine. > However, if we make the new api always bac

Re: Console no longer clears after upgrade to 4.3

2008-05-14 Thread D. Adam Karim
I was referring to this section that I now quote: "Final steps Whether you upgrade by using an install kernel and doing a formal "upgrade" process, or do a "in-place" binary upgrade, there are certain manual steps that have to be performed." If we look further and

Re: geom network driver times out on sparc 4.2?

2008-05-14 Thread Jay
My OBP is definitely out of date, but I haven't yet been able to fix that. I'm not sure if it requires installing Solaris (which file systems can OB access?), which I've been unable to do, and I'm not sure if it requires cracking open the machine, which I am reluctant to do, but might do. Someone

Re: Console no longer clears after upgrade to 4.3

2008-05-14 Thread Stuart Henderson
On 2008-05-14, Mark Zimmerman <[EMAIL PROTECTED]> wrote: >> default:\ >> :np:im=\r\n%s/%m (%h) (%t)\r\n\r\n:sp#1200:cl=\E[H\E[2J: >> > But the FAQ says to put the "cl=\E[H\E[2J" in the "P|Pc|Pc" entry. > Does this really belong in default? Not entirely, as the escape sequence is terminal-typ

Re: Console no longer clears after upgrade to 4.3

2008-05-14 Thread Mark Zimmerman
On Wed, May 14, 2008 at 10:34:24AM -0700, D. Adam Karim wrote: > By chance did you read this: > > http://www.openbsd.org/faq/upgrade43.html#etcUpgrade > Of course. > If you just blindly did a `tar xzf -C / etc43.tgz` without following > instructions, then it surely would have overwritten what yo

OpenBSD 4.3(or -current) and german UMTS-Provider - generell question

2008-05-14 Thread sebastian . rother
Hello everybody, This is a question specialy to people in germany. I would like to know if somebody uses BASE or any familiar fix price data flat from any provider and uses his mobile phone to get internet. I'm interested into provider details (does it work, are there issues or connection aborts

Re: Console no longer clears after upgrade to 4.3

2008-05-14 Thread D. Adam Karim
By chance did you read this: http://www.openbsd.org/faq/upgrade43.html#etcUpgrade If you just blindly did a `tar xzf -C / etc43.tgz` without following instructions, then it surely would have overwritten what you had added to the file. Also note, /etc/gettytab is the file which handles this. Here

Console no longer clears after upgrade to 4.3

2008-05-14 Thread Mark Zimmerman
Greetings: Following the procedure in FAQ 7.3. I had set up /etc/gettytab to clear the screen after logoff. After upgrading to 4.3, this no longer works. The Upgrade Guide mentions that /etc/ttys has changed; could this have had an impact on this? I would like to get this working again, so advice

changing api when upgrade (was: security fixes for packages)

2008-05-14 Thread arthur
I am new to OpenBSD and I believe there are some reason for that since all the smartest gurus made the decision and went that way: The reason we need to rebuild userland/packages after upgrade base is that the API may change, right? However, if we make the new api always backward compatible (and o

Re: security fixes for packages

2008-05-14 Thread Deanna Phillips
> Edd, although no developer I am interested in assisting. > Personally, following the six month -stable cycle fits my > needs better than following -current. I have used the diffs > at http://openbsd.rutgers.edu/ as a resource for creating > -stable packages and I now see UNSUPPORTED 4.3 packages

Re: security fixes for packages

2008-05-14 Thread Steven Surdock
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Edd > Barrett > Subject: Re: security fixes for packages > > On Tue, May 13, 2008 at 10:07 PM, Unix Fan <[EMAIL PROTECTED]> wrote: > > The developers don't care about your security. > > I'm so s

Re: security fixes for packages

2008-05-14 Thread Edd Barrett
On Tue, May 13, 2008 at 10:07 PM, Unix Fan <[EMAIL PROTECTED]> wrote: > The developers don't care about your security. No, the developers are all very busy and don't have time to work on stable packages. I'm so sick of hearing about this that I am willing to co-ordinate a group of developers to

Re: More details show that someone seriously fucked up in debian. [Was: Re: Debian libssl security (OpenSSH safe?)]

2008-05-14 Thread Otto Moerbeek
On Wed, May 14, 2008 at 08:47:38AM +0200, Otto Moerbeek wrote: > On Wed, May 14, 2008 at 12:48:41AM +0200, chefren wrote: > > > On 5/13/08 7:08 PM, Marc Espie wrote: > > > >> More details show that someone seriously fucked up in debian. > > > > Well, this Kurt has seriously asked for details on th

Re: Debian libssl security (OpenSSH safe?)

2008-05-14 Thread Ted Unangst
On 5/14/08, Gabriel Linder <[EMAIL PROTECTED]> wrote: > Just wondering... If someone generates ssh keys with flags J or Z > set in malloc.conf(5), aren't these keys useless too (since feeding > predictable data is more or less equal to not feeding data at all) ? feeding predictable data + unpred

Re: Debian libssl security (OpenSSH safe?)

2008-05-14 Thread Otto Moerbeek
On Wed, May 14, 2008 at 09:41:43AM +0200, Gabriel Linder wrote: > On Tue, 13 May 2008 11:14:59 -0500 > Sean Malloy <[EMAIL PROTECTED]> wrote: > > > On Tue, May 13, 2008 at 11:37:38AM -0400, Juan Miscaro wrote: > > > I guess everyone by now has heard about the very serious libssl > > > vulnerabili

Re: security fixes for packages

2008-05-14 Thread Nigel J. Taylor
Daniel Ouellet wrote: Comhte wrote: Ok, so does it mean that -stable or -release are useless ??? and people buy useless CDs every 6 monthes ? I can't believe it. I really don't understand why these fixes are not provided anymore. Then do something about it and start contributing too. May be y

Re: geom network driver times out on sparc 4.2?

2008-05-14 Thread Jay
I gets a little more interesting..Linux/sparc was working fine for a few days.Now it seems, merely plugging this machine into the network makes thenetwork barely work -- very slow, connections dropped. Even ifI'm just sitting in various installers. Plugging in the wired on board ethernet. apt-get u

Re: Debian libssl security (OpenSSH safe?)

2008-05-14 Thread Gabriel Linder
On Tue, 13 May 2008 11:14:59 -0500 Sean Malloy <[EMAIL PROTECTED]> wrote: > On Tue, May 13, 2008 at 11:37:38AM -0400, Juan Miscaro wrote: > > I guess everyone by now has heard about the very serious libssl > > vulnerability on Debian/Ubuntu? > > > > Just making sure that the source is safe, thank

Re: Dell Power Edge 1950 SAS Raid1 'sd0: not queued: error 5'

2008-05-14 Thread Claer
On Wed, May 14 2008 at 24:09, David Gwynne wrote: > i believe this has been fixed with revision 1.80 of src/sys/dev/ic/mfi.c. > could you please try -current (or at least 4.3) and see if the problem > persists? OK. I'll try to upgrade these servers asap. (It's have to be done anyway =)) Claer

Offre n°172

2008-05-14 Thread Val�rie Goujon
Si ce message ne s'affiche pas correctement, vous pouvez le visualiser en suivant ce lien. [IMAGE] [IMAGE] [IMAGE] [IMAGE] Bonjour, Obligatoire ` partir du 1er juillet 2008, le kit de sicuriti comprenant un triangle de pri-signalisation et un gilet ritro-riflichissant ` bord de tous les vihic

Re: asus eee ethernet and 4.3

2008-05-14 Thread Rolf Sommerhalder
I have observed the same problem with lii(4) not linking up running the latest i386 snapshot, and using a 10 meter patch cable to the switch. However, when trying a short 1 m cable to the same switch port the link comes up! A fresh kernel build this past weekend from CVS exhibits the same behaviour

Re: security fixes for packages

2008-05-14 Thread Comète
So i make a proposal to avoid "clueless guy" like me to ask this question which seems to cause so many troubles: What do you think about posting a message on this page: http://www.openbsd.org/pkg-stable.html which could say in a better english as mine :) : "OpenBSD -stable packages are not mainta