Re: Ral0, WPA2 and ASCII keys?

2009-05-27 Thread woolsherpahat
. ifconfig: wpapsk: bad pre-shared key length ral0: no link . sleeping ifconfig: wpa-psk blahrg SECRET: bad value I have found this in wpa-psk(1): The passphrase must be a sequence of between 8 and 63 ASCII-encoded characters. The length of the SSID must be between 1 and 32

Re: Letting FTP out through PF with a default block all

2009-05-27 Thread Lars Nooden
Andres Salazar wrote: ... based on that this is my PF config: ... set block-policy drop Something to consider regarding drop versus reject: http://www.chiark.greenend.org.uk/~peterb/network/drop-vs-reject Regards -Lars

Re: active ftp over IPv6 to OpenBSD's ftpd not working

2009-05-27 Thread Maurice Janssen
On Tue, May 26, 2009 at 08:50:32PM +, Stuart Henderson wrote: On 2009-05-25, Maurice Janssen maur...@z74.net wrote: I have an FTP-server (running OpenBSD 4.5-stable) that is only reachable over IPv6. Passive FTP works fine, but active FTP doesn't seem to work. I run ftpd from rc.conf.local

Re: IMPORTANT, DO THIS OR YOUR E-MAIL WON'T WORK

2009-05-27 Thread Gregory Edigarov
Bob Beck wrote: * Chris Harries ch...@sharescope.co.uk [2009-05-26 10:48]: it sure beats everyone moaning at me as they cannot read e-mails clearly marked IMPORTANT, DO THIS OR YOUR E-MAIL WONT WORK, then moaning when their email doesn't work IMPORTANT, DO THIS OR YOUR E-MAIL WON'T

HFSC AltQ

2009-05-27 Thread Georg Kahest
sys/altq/altq_hfsc.h set to support #define HFSC_MAX_CLASSES 64 what is the maximum value you can use there? kernel did compile with 1024, not sure yet will it work thou, what is the maximum value you have used ? would it be safe to use something like 2048? -- Georg Kahest ge...@viatel.ee

Re: IMPORTANT, DO THIS OR YOUR E-MAIL WON'T WORK

2009-05-27 Thread Otto Moerbeek
On Wed, May 27, 2009 at 10:29:10AM +0300, Gregory Edigarov wrote: Bob Beck wrote: * Chris Harries ch...@sharescope.co.uk [2009-05-26 10:48]: it sure beats everyone moaning at me as they cannot read e-mails clearly marked IMPORTANT, DO THIS OR YOUR E-MAIL WONT WORK, then moaning when their

Re: IMPORTANT, DO THIS OR YOUR E-MAIL WON'T WORK

2009-05-27 Thread patrick keshishian
On Wed, May 27, 2009 at 12:29 AM, Gregory Edigarov g...@bestnet.kharkov.ua wrote: Bob Beck wrote: * Chris Harries ch...@sharescope.co.uk [2009-05-26 10:48]: it sure beats everyone moaning at me as they cannot read e-mails clearly marked IMPORTANT, DO THIS OR YOUR E-MAIL WONT WORK, then

Re: IMPORTANT, DO THIS OR YOUR E-MAIL WON'T WORK

2009-05-27 Thread Otto Moerbeek
On Wed, May 27, 2009 at 09:43:18AM +0200, Otto Moerbeek wrote: On Wed, May 27, 2009 at 10:29:10AM +0300, Gregory Edigarov wrote: Bob Beck wrote: * Chris Harries ch...@sharescope.co.uk [2009-05-26 10:48]: it sure beats everyone moaning at me as they cannot read e-mails clearly

Re: pf, altq, packet rate

2009-05-27 Thread Henning Brauer
* irix i...@ukr.net [2009-05-27 06:14]: May be someone better to write in a kind of pseudo device ifb may be someone better to do my laundry -- Henning Brauer, h...@bsws.de, henn...@openbsd.org BS Web Services, http://bsws.de Full-Service ISP - Secure Hosting, Mail and DNS Services

Re: IMPORTANT, DO THIS OR YOUR E-MAIL WON'T WORK

2009-05-27 Thread patrick keshishian
On Wed, May 27, 2009 at 1:01 AM, Otto Moerbeek o...@drijf.net wrote: On Wed, May 27, 2009 at 09:43:18AM +0200, Otto Moerbeek wrote: On Wed, May 27, 2009 at 10:29:10AM +0300, Gregory Edigarov wrote: Bob Beck wrote: * Chris Harries ch...@sharescope.co.uk [2009-05-26 10:48]: it sure beats

Re: IMPORTANT, DO THIS OR YOUR E-MAIL WON'T WORK

2009-05-27 Thread Otto Moerbeek
On Wed, May 27, 2009 at 01:13:26AM -0700, patrick keshishian wrote: explanation will follow once you provide the neccesary provide of ehhh s/provide/proof huh? sed: 1: s/provide/proof: unterminated substitute in regular expression who said I was using sed? vi allows that.

Re: IMPORTANT, DO THIS OR YOUR E-MAIL WON'T WORK

2009-05-27 Thread Pete Vickers
On 27 May 2009, at 10:01, Otto Moerbeek wrote: On Wed, May 27, 2009 at 09:43:18AM +0200, Otto Moerbeek wrote: On Wed, May 27, 2009 at 10:29:10AM +0300, Gregory Edigarov wrote: Bob Beck wrote: * Chris Harries ch...@sharescope.co.uk [2009-05-26 10:48]: it sure beats everyone moaning at me

Re: pf, altq, packet rate

2009-05-27 Thread Nido
2009/5/27, Henning Brauer lists-open...@bsws.de: may be someone better to do my laundry you mean you don't have a laundromat yet?

Re: OpenBSD router stops functioning but still send CARP advertisements

2009-05-27 Thread Simon Morvan
Le 27/05/2009 01:52, Samiuela LV Taufa a icrit : Simon Morvan wrote the following on 27/05/2009 2:28 AM:Hello all, I've set up two OpenBSD boxes to act as redundant firewalls in front of our network and I experience a strange behavior : After a couple of hours/days one of the box stop

Re: OpenNTPD warning

2009-05-27 Thread Vadim Zhukov
On Friday 22 May 2009 18:05:16 Jordi Espasa wrote: Looks like you do not think at all. The reason was told to you, and you didn't ever tried to do something. You prefer to think instead of doing, aren't you? I've fixed the commented conf error already, but it seems that the FIRST warning

Re: OpenBSD router stops functioning but still send CARP advertisements

2009-05-27 Thread Jussi Peltola
I'd rather run pfsync in its own vlan than over a realtek card. It's probably not any slower (what could be slower than a realtek...) and it's not really any less reliable (what use is pfsync if your business network goes down?)

Re: OpenBSD router stops functioning but still send CARP advertisements

2009-05-27 Thread Henning Brauer
* Jussi Peltola pe...@pelzi.net [2009-05-27 12:11]: I'd rather run pfsync in its own vlan than over a realtek card. It's probably not any slower (what could be slower than a realtek...) and it's not really any less reliable (what use is pfsync if your business network goes down?) oh cut the

Re: OpenBSD router stops functioning but still send CARP advertisements

2009-05-27 Thread Simon Morvan
Le 27/05/2009 12:08, Jussi Peltola a icrit : I'd rather run pfsync in its own vlan than over a realtek card. It's probably not any slower (what could be slower than a realtek...) and it's not really any less reliable (what use is pfsync if your business network goes down?) I tought I'd

Re: QEMU, tun, and tap.

2009-05-27 Thread Sunnz
2009/5/27 Christopher J. Gibbons cgibb...@dragonfire.dyndns.org: I found this in the README.OpenBSD for QEMU to be most helpful when doing a similar sort of thing (plus you get the bonus of not having to run QEMU as root): $ sudo sh -c sudo -u $USER qemu -nographic -net nic -net tap,fd=3 \

Re: binding services on carp

2009-05-27 Thread Stephan A. Rickauer
On Tue, 2009-05-26 at 16:18 -0400, uday wrote: Hey guys, A quick question, is there a way to bind services to the carp interface ? You see I have an ftp-proxy running and I wanted to use carp since I'm already doing fail-over with PF. FTP client -- Redundant Firewall w/ftp-proxy --

OpenBSD and Realtek rtl8187: 8187B wireless chipset

2009-05-27 Thread John .
Hello list, Are there any plans to support the realtek rtl8187: 8187B wireless chipset? Is it available in -current? thanks -- John

Re: OpenBSD and Realtek rtl8187: 8187B wireless chipset

2009-05-27 Thread Martynas Venckus
From owner-misc+m85945=martynas=altroot@openbsd.org Wed May 27 15:35:42 2009 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:content-type:content-transfer-encoding;

Re: spamd question

2009-05-27 Thread Stephan A. Rickauer
On Fri, 2009-05-22 at 15:53 -0400, Jim Razmus wrote: beck@ created the greyscanner Perl script to address the issues you've highlighted. It does deeper inspection of grey listed senders before they are white listed. It validates the DNS setup of the sending server, the validity of the

Re: OpenBSD router stops functioning but still send CARP advertisements

2009-05-27 Thread Stuart Henderson
Simon Morvan gar...@zone84.net wrote: After a couple of hours/days one of the box stop functioning properly : no ping, no more SSH access but I still capture CARP avertisement on the network segments (when it occurs on the master). As a result, when it happens on the master, the slave does not

Re: pf, altq, packet rate

2009-05-27 Thread Stuart Henderson
On 2009-05-27, irix i...@ukr.net wrote: Hello Misc, Or may be remove from altq distinguish incoming traffic or outgoing. What could box up to the queue as incoming and outgoing. since queueing only happens at output, that's going to be totally useless. it's not just a question of how altq

Re: OpenBSD and Realtek rtl8187: 8187B wireless chipset

2009-05-27 Thread John .
yup; i am writing this email from one. ;-) got it working couple of months ago but was slac^H^H^H^Hbusy and did not clean it up yet; which one do you have? usbdevs -v? oh wow that's great news! I don't have openbsd installed on (the machine) yet - lack of support for this device was a

Re: OpenBSD and Realtek rtl8187: 8187B wireless chipset

2009-05-27 Thread Nido
2009/5/27, Martynas Venckus marty...@altroot.org: snip From: John . comp.j...@googlemail.com snip Hello list, Are there any plans to support the realtek rtl8187: 8187B wireless chipset? Is it available in -current? yup; i am writing this email from one. ;-) got it working couple of

Re: OpenBSD router stops functioning but still send CARP advertisements

2009-05-27 Thread Simon Morvan
Le 27/05/2009 15:38, Stuart Henderson a icrit : I tought I'd better run pfsync over a direct connection rather that through the switches. In case of failure of a switch, the sync has a chance to be complete and the failover cleaner, but maybe I'm wrong... If your firewalls are

Re: OpenBSD router stops functioning but still send CARP advertisements

2009-05-27 Thread Stuart Henderson
On 2009/05/27 16:09, Simon Morvan wrote: Le 27/05/2009 15:38, Stuart Henderson a icrit : I tought I'd better run pfsync over a direct connection rather that through the switches. In case of failure of a switch, the sync has a chance to be complete and the failover cleaner, but maybe I'm

Re: OpenBSD and Realtek rtl8187: 8187B wireless chipset

2009-05-27 Thread John .
2009/5/27 Nido n...@foxserver.be: 2009/5/27, Martynas Venckus marty...@altroot.org: snip From: John . comp.j...@googlemail.com snip Hello list, Are there any plans to support the realtek rtl8187: 8187B wireless chipset? Is it available in -current? yup; i am writing this email from

Re: OpenBSD and Realtek rtl8187: 8187B wireless chipset

2009-05-27 Thread Martynas Venckus
From owner-misc+m85949=martynas=altroot@openbsd.org Wed May 27 16:51:34 2009 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:content-type

Re: IMPORTANT, DO THIS OR YOUR E-MAIL WON'T WORK

2009-05-27 Thread ropers
* Chris Harries ch...@sharescope.co.uk [2009-05-26 10:48]: it sure beats everyone moaning at me as they cannot read e-mails clearly marked IMPORTANT, DO THIS OR YOUR E-MAIL WONT WORK, then moaning when their email doesn't work Bob Beck wrote: IMPORTANT, DO THIS OR YOUR E-MAIL WON'T WORK

Re: Get Top 10 Search Engine Ranking at Low Cost

2009-05-27 Thread ropers
snip spam email 2009/5/27 Anton Parol anton.pa...@sun.com: How does one take advantage of such a good offer, when theres no URL? The spammer almost certainly did include a URL in his HTML-format email, but misc's MTA piped the message through demime, and demime's conversion of the HTML message

8 526 Case per le vacanze, Appartamenti per le vacanze, Hotel

2009-05-27 Thread Maik Schmidt
Ferienunterkunft vacation rentals worldwide * secondcasa.com * vacation rentals worldwide * Reuchlinstrasse 23 * 72800 Eningen unter Achalm * Germania * Telefono/Telefax +49 (0)7123 2846889/2846892 * E-Mail i...@secondcasa.com * Greece Gentili signore ed egregi signori,

Re: IMPORTANT, DO THIS OR YOUR E-MAIL WON'T WORK

2009-05-27 Thread Bob Beck
joke accessory=can-opener Original thread: http://marc.info/?t=12428629293r=1w=2 Message that Bob replied to, starting a new thread (at least as far as Gmail is concerned): The in-reply-to header was correct, just because the subject line changes doesn't make it a new

[no subject]

2009-05-27 Thread Bob Beck Via Secure Email
Hi this is bob. really. I can haz Ur Passwordz plz? ohai, and Ur bank accountz and sinz too?

Re: pf, altq, packet rate

2009-05-27 Thread irix
Hello Misc, since queueing only happens at output, that's going to be totally useless. it's not just a question of how altq distinguishes traffic, you're asking to totally change how altq works. Okey, i see. But I can not understand why you are sure that traffic can only outlet Shape , You

Re: IMPORTANT, DO THIS OR YOUR E-MAIL WON'T WORK

2009-05-27 Thread Bob Beck
That's not *just* funny...it makes my sides hurt. To others thinking about responding: Check the OP's email address. Note that it doesn't end with openbsd.org or similar. Oh please. like the address coming from openbsd.org matters... It's *email*... $ dig openbsd.org mx ; DiG

Re:

2009-05-27 Thread demuel
Hi this is bob. really. I can haz Ur Passwordz plz? ohai, and Ur bank accountz and sinz too? Hi sure why not. Here are mine: Username: lowboot Password: oten Bank Account: xxx-007

Re:

2009-05-27 Thread Gaby Vanhegan
On 27 May 2009, at 16:54, Bob Beck Via Secure Email wrote: Hi this is bob. really. I can haz Ur Passwordz plz? Yes, my passwords are: god, sex and please. ohai, and Ur bank accountz and sinz too? Account no. 7337h4x0r5, my SIN is one of omission. I'm trusting you with these so don't do

4.5 on Thinkpad 600x issue

2009-05-27 Thread Donald Allen
I'm an experienced hand with Linux (Gentoo, more recently Arch) and with FreeBSD. I've recently become interested in OpenBSD and have just done a test install of 4.5 on an old Thinkpad 600x (650 mhz, .5 Gb, 20 Gb 5400 rpm disk, 3com Megahertz pcmcia ethernet adapter) for purposes of evaluation.

Re: 4.5 works on ALIX.1C - power management options?

2009-05-27 Thread Chris Cappuccio
Jan Stary [h...@stare.cz] wrote: Does disabling the unused devices (audio, lpt, ...) make any difference in power consumption? GENERIC doesn't mention any acpi* so I guess I need to use APM. Given that there is no hw.setperf, what are my options? What, 1 watt usage from that CPU is too

Re:

2009-05-27 Thread bofh
You laugh, but I actually had a senior manager (of HR no less) whose passwords were sex, sexygirl and various permutations of that. On a post it in her drawer (and no, I will not be drawn into a discussion of the possible meanings of drawer in the .us vs .uk versions). On 5/27/09, Gaby Vanhegan

Re:

2009-05-27 Thread Gaby Vanhegan
On 27 May 2009, at 17:38, bofh wrote: On a post it in her drawer (and no, I will not be drawn into a discussion of the possible meanings of drawer in the .us vs .uk versions). benny-hill Something about rifling through her drawers /benny-hill -- When I die I want to go peacefully in my

Re: IMPORTANT, DO THIS OR YOUR E-MAIL WON'T WORK

2009-05-27 Thread J Sisson
On Wed, May 27, 2009 at 10:58 AM, Bob Beck b...@obtuse.com wrote: Oh please. like the address coming from openbsd.org matters... It's *email*... You seem to have misunderstood my comment. If e-mail address A is in the set {legit, potentially spoofed}, then you have to have additional

Re: 4.5 on Thinkpad 600x issue

2009-05-27 Thread Donald Allen
Update: rsync completed. I brought up X, Firefox, emacs and was downloading packages when the curse struck again. Little or no response to the mouse. ctrl-alt F2 got me to a fresh login prompt, but every character I type is repeated 7 times, so login is impossible. No response to ping and, not

Re: pf, altq, packet rate

2009-05-27 Thread Henning Brauer
* irix i...@ukr.net [2009-05-27 18:12]: But I can not understand why you are sure that traffic can only outlet Shape i can not understand why you want to shape outlets. you don't understand that inbound shaping doesn't work because you have obviously no idea how the network stack works. there

Re: pf, altq, packet rate

2009-05-27 Thread SJP Lists
2009/5/28 irix i...@ukr.net: Okey, i see. But I can not understand why you are sure that traffic can only outlet Shape , You can say that's silly to try to Shape traffic that came, but if it works it's worse than outgoing (if only for tcp) it is not stupid ? How do you shape traffic

Re: pf, altq, packet rate

2009-05-27 Thread Lars Nooden
SJP Lists wrote: 2009/5/28 irix i...@ukr.net: Okey, i see. But I can not understand why you are sure that traffic can only outlet Shape , You can say that's silly to try to Shape traffic that came, but if it works it's worse than outgoing (if only for tcp) it is not stupid ? How do

Re: 4.5 on Thinkpad 600x issue

2009-05-27 Thread STeve Andre'
On Wednesday 27 May 2009 13:12:26 you wrote: Update: rsync completed. I brought up X, Firefox, emacs and was downloading packages when the curse struck again. Little or no response to the mouse. ctrl-alt F2 got me to a fresh login prompt, but every character I type is repeated 7 times, so

Re: pf, altq, packet rate

2009-05-27 Thread Johan Beisser
On Wed, May 27, 2009 at 11:04 AM, SJP Lists sjp.li...@flashbsd.net wrote: How do you shape traffic that you have already received? Or to put it another way, how do you alter the past? I've always just assigned inbound traffic to the existing outbound queues. My assumption is that the

Re: 4.5 on Thinkpad 600x issue

2009-05-27 Thread Donald Allen
On Wed, May 27, 2009 at 1:26 PM, STeve Andre' and...@msu.edu wrote: On Wednesday 27 May 2009 13:12:26 you wrote: Update: rsync completed. I brought up X, Firefox, emacs and was downloading packages when the curse struck again. Little or no response to the mouse. ctrl-alt F2 got me to a fresh

Re: pf, altq, packet rate

2009-05-27 Thread irix
Hello , * irix i...@ukr.net [2009-05-27 18:12]: But I can not understand why you are sure that traffic can only outlet Shape i can not understand why you want to shape outlets. you don't understand that inbound shaping doesn't work because you have obviously no idea how the network stack

Re: pf, altq, packet rate

2009-05-27 Thread SJP Lists
2009/5/28 Johan Beisser j...@caustic.org: On Wed, May 27, 2009 at 11:04 AM, SJP Lists sjp.li...@flashbsd.net wrote: How do you shape traffic that you have already received? Or to put it another way, how do you alter the past? I've always just assigned inbound traffic to the existing outbound

Re: ral(4) driver and RT2860 + RT2850 chips

2009-05-27 Thread Chris Jones
I thought I would update the list with some new info I have now that I am running a PC engines alix2d2 and OpenBSD 4.5-stable. When I received the alix board I just swapped the CF card out of my Soekris net4501 and put it in the alix board. At that time I was running OpenBSD 4.4-stable. After

Re: 4.5 on Thinkpad 600x issue

2009-05-27 Thread Johan Beisser
On Wed, May 27, 2009 at 10:26 AM, STeve Andre' and...@msu.edu wrote: I've never tried installing OpenBSD on a 600x but I'm a little surprised that it isn't working fine. You're in for a few surprises when you do then. It should work fine, but there's some ACPI issues that have never been

xdm xinerama

2009-05-27 Thread Need Coffee
I have an OpenBSD-current machine running xdm, xdmcp enabled. If I try to connect to it from a Solaris 9 machine with Xinerama enabled, I get this in /var/log/xdm.log: X Error of failed request: BadPixmap (invalid Pixmap parameter) Major opcode of failed request: 129 (XINERAMA) Minor

Re: OpenBSD and Realtek rtl8187: 8187B wireless chipset

2009-05-27 Thread John .
2009/5/27 Nido n...@foxserver.be: 2009/5/27, Martynas Venckus marty...@altroot.org: snip From: John . comp.j...@googlemail.com snip Hello list, Are there any plans to support the realtek rtl8187: 8187B wireless chipset? Is it available in -current? yup; i am writing this email from

Re: pf, altq, packet rate

2009-05-27 Thread Johan Beisser
On Wed, May 27, 2009 at 12:02 PM, SJP Lists sjp.li...@flashbsd.net wrote: Thanks Lars and Johan, I was trying to highlight to irix that once traffic is received, it is too late to alter the bandwidth it already used coming in. In other words, doing it on the incoming is pointless. Thus, as

Re: pf, altq, packet rate

2009-05-27 Thread (private) HKS
2009/5/27 irix i...@ukr.net: Hello Misc, since queueing only happens at output, that's going to be totally useless. it's not just a question of how altq distinguishes traffic, you're asking to totally change how altq works. Okey, i see. But I can not understand why you are sure that

Re: OpenBSD and Realtek rtl8187: 8187B wireless chipset

2009-05-27 Thread Nido
2009/5/27, John . comp.j...@googlemail.com: 2009/5/27 Nido n...@foxserver.be: 2009/5/27, Martynas Venckus marty...@altroot.org: snip From: John . comp.j...@googlemail.com snip Hello list, Are there any plans to support the realtek rtl8187: 8187B wireless chipset? Is it available in

multilink VPN

2009-05-27 Thread James Mackinnon
Hi All Here is my situation and I am hoping for a little guidance on this one I have 2 locations, both with 2 fiber internet connections I need to setup redundant VPN's between these locations without the use of BGP. So, my setup would be something like this Location A Firewall 1 Connection

Re: pf, altq, packet rate

2009-05-27 Thread Stuart Henderson
On 2009-05-27, irix i...@ukr.net wrote: Assume that you are right and the traffic can Shape only outlet for what purpose then in other projects (freebsd, linux, netbsd) including the original altqd opportunity for shaping incoming traffic via CDNR has been included? so, let's look at

Re: pf, altq, packet rate

2009-05-27 Thread Anthony Roberts
I was trying to highlight to irix that once traffic is received, it is too late to alter the bandwidth it already used coming in. Dropping packets you've already received can have the impact of causing well-behaved hosts to back off when sending future packets. That's a useful result in itself,

Re: pf, altq, packet rate

2009-05-27 Thread SJP Lists
2009/5/28 Johan Beisser j...@caustic.org: I was trying to highlight to irix that once traffic is received, it is too late to alter the bandwidth it already used coming in. In other words, doing it on the incoming is pointless. Thus, as in your examples, the logic behind shaping only on the

Re: pf, altq, packet rate

2009-05-27 Thread Johan Beisser
On Wed, May 27, 2009 at 10:44 PM, SJP Lists sjp.li...@flashbsd.net wrote: I know this is an option, but forcing the resending of traffic doesn't seem to be the most efficient method to me, when I could instead just shape that same traffic when it leaves another interface. It's a horrible