Re: encryption

2009-08-27 Thread Otto Moerbeek
On Wed, Aug 26, 2009 at 09:46:11PM -0400, My List Mail wrote: Been waiting for a while to see some current encryption added to openbsd. Surprised it has not been already, and frankly find it weak that the 'worlds most secure OS' does not have current encryption. Why is this? I use vnconfig

Re: bgpd q

2009-08-27 Thread Claudio Jeker
On Wed, Aug 26, 2009 at 01:00:05PM +0300, Gregory Edigarov wrote: Hi, Could I rewrite as-paths in bgpd? I.e. if I have an incoming as-path like this: 1 2 3 3 3 3 3 3 3 3 4 and would like for some reason to rewrite it like: 1 2 3 4, or 1 2 3 3 4, can I do this? No. You're not

Re: encryption

2009-08-27 Thread Stuart Henderson
On 2009-08-27, My List Mail emaillistem...@gmail.com wrote: I use vnconfig for encryption, which uses Blowfish. softraid(4) crypto uses AES.

[pf question] Positive condition for adding in the table?

2009-08-27 Thread Ivan Radovanovic
I am new into pf configuration and I am curious if it is possible to add some host into table in firewall rules if some conditions are met (not if they are broken). I was thinking about some way to prevent port scanning of machine and what came to me as obvious way to do it is this (in some

Re: [pf question] Positive condition for adding in the table?

2009-08-27 Thread Girish Venkatachalam
On Thu, Aug 27, 2009 at 4:32 PM, Ivan Radovanovicriv...@gmail.com wrote: I am new into pf configuration and I am curious if it is possible to add some host into table in firewall rules if some conditions are met (not if they are broken). I was thinking about some way to prevent port scanning

Re: [pf question] Positive condition for adding in the table?

2009-08-27 Thread Ivan Radovanovic
Girish Venkatachalam napisa: Please read up on pf(4) anchors. And also on connection overloads in pf.conf(5). Stuff like max-conn-rate and so on. You already said you know about pf(4) tables. You need to populate the tables based on different criteria. I know that connection overload is one.

Softraid crypto - stable in 4.6?

2009-08-27 Thread Robert
I read somewhere [1] on misc@ that softraid-crypto is still considered experimental. Can one of developers confirm that in 4.6 it will be safe to use it in production? Actually I would like to use crypto on top of RAID 1 (both softraid) - good/bad idea? (before anyone asks: backups are in

Re: [pf question] Positive condition for adding in the table?

2009-08-27 Thread Girish Venkatachalam
On Thu, Aug 27, 2009 at 4:59 PM, Ivan Radovanovicriv...@gmail.com wrote: Thanks for your respone. If I understand you correctly pf kernel module actually supports operating with tables based on positive conditions (ie not only when rule is broken, but also when rule is true), and the way to

Re: [pf question] Positive condition for adding in the table?

2009-08-27 Thread Ivan Radovanovic
Girish Venkatachalam napisa: On Thu, Aug 27, 2009 at 4:59 PM, Ivan Radovanovicriv...@gmail.com wrote: Thanks for your respone. If I understand you correctly pf kernel module actually supports operating with tables based on positive conditions (ie not only when rule is broken, but also when

tmux status bar

2009-08-27 Thread Daniel Bolgheroni
Hi misc@, just noticed the status bar of tmux gone with the latest snapshot. I didn't followed the cvs entries for a couple of days. Is this a normal behaviour? My .tmux.conf is below: --.tmux.conf-- set-option -g status-bg default set-option -g status-fg black set-option -g message-bg yellow

Re: Authentication method fallback not working

2009-08-27 Thread Schöberle Dániel
Hi, I'm using OpenBSD 4.5-stable, and I'm trying to configure RADIUS authentication. What I want is for the system to try the RADIUS server, and if it fails, fall back to the local password file. In login.conf I have auth-defaults:auth=radius,passwd:radius-server=my.radius.server If

Re: tmux status bar

2009-08-27 Thread Han Boetes
Daniel Bolgheroni wrote: just noticed the status bar of tmux gone with the latest snapshot. I didn't followed the cvs entries for a couple of days. Is this a normal behaviour? Works fine here. Are you sure you ran make depend all or make clean all? Otherwises changes in tmux.h won't propagate

Fully Automatic (network-based) Installation of OpenBSD?

2009-08-27 Thread Toni Mueller
Hi, I dimly remember seeing a short thread flowing by that mentions someone's hacks to bsd.rd to arrive at an installation system that works w/o human intervention, but can't seem to find it anymore. Pointers are greatly appreciated! -- Kind regards, --Toni++

Revista D Agosto - No te pierdas la nueva forma en info-entretenimiento social. Solo da click en la portada

2009-08-27 Thread Revista D- Agosto09
Su servicio de correo no permite lectura de Html por favor visite http://www.revistad.com.mx/06/ para ver el contenido de este mensaje. [demime 1.01d removed an attachment of type application/octet-stream which had a name of edi06-RD.jpg]

Re: Automated service/daemon management

2009-08-27 Thread Toni Mueller
Hi, On Tue, 09.06.2009 at 15:52:55 -0400, Bryan Allen b...@mirrorshades.net wrote: My suggestion would be to move all your services to run under runit or daemontools. You can manage both with Puppet. I'm not familiar with runit, really, but I've used daemontools for years, quite happily, on

Funny T22 Freezes with 4.5

2009-08-27 Thread Johan SANCHEZ
Hi list, I m experiencing random freezes with few T22 fairly old laptops. I know those have crazy bios with few bugs. I tried a jump at UKC then disabled the acpi with no effect. I disabled the power mangement for cpu and pci bus with no more luke. I ve been amused to discover at last boot the

Re: tmux status bar

2009-08-27 Thread Nicholas Marriott
Hi On Thu, Aug 27, 2009 at 11:00:54AM +, Daniel Bolgheroni wrote: Hi misc@, just noticed the status bar of tmux gone with the latest snapshot. I didn't followed the cvs entries for a couple of days. Is this a normal behaviour? My .tmux.conf is below: --.tmux.conf-- set-option -g

Re: tmux status bar

2009-08-27 Thread Daniel Bolgheroni
On Thu, 27 Aug 2009, Han Boetes wrote: Daniel Bolgheroni wrote: just noticed the status bar of tmux gone with the latest snapshot. I didn't followed the cvs entries for a couple of days. Is this a normal behaviour? Works fine here. Are you sure you ran make depend all or make clean

listserver test

2009-08-27 Thread stan
Sorry for the noise. My messages don't seem to be getting to the list. -- One of the main causes of the fall of the roman empire was that, lacking zero, they had no way to indicate successful termination of their C programs.

mail issue

2009-08-27 Thread Stuart VanZee
I am using OpenBSD 4.5 When I try to use mail to send email from a user account I get an error: can not chdir(/var/spool/mqueue/): Permission denied Program mode requires special privileges, e.g., root or TrustedUser. Searching for this, I have found in various places many different

SFTP - Max Users

2009-08-27 Thread Morris, Roy
G'day, I searched around but couldn't find a simple answer to this question. I want to host a sftp server and there could be thousands of accounts, although not all used at once. I was wondering if there is a limit to the number of user accounts I can create on a machine? I had originally thought

Re: a dump question

2009-08-27 Thread stan
On Thu, Aug 27, 2009 at 12:15:50PM -0400, stan wrote: I am still fiighting with Amanda on 4.5 It seems to invoke dump as follows: /sbin/dump dump 0usf 1048576 - /dev/rwd0a Which reesults in the follwing error: $ /sbin/dump dump 0usf 1048576 - /dev/rwd0a | cat /tmp/foo dump: density is

Re: mail issue

2009-08-27 Thread John Cosimano
--- Stuart VanZee [Thu, Aug 27, 2009 at 11:55:39AM -0400]: --- I am using OpenBSD 4.5 When I try to use mail to send email from a user account I get an error: can not chdir(/var/spool/mqueue/): Permission denied Program mode requires special privileges, e.g., root or TrustedUser. what

Re: mail issue

2009-08-27 Thread Stuart VanZee
From: John Cosimano Sent: Thursday, August 27, 2009 1:41 PM To: Openbsd Misc (E-mail) Subject: Re: mail issue --- Stuart VanZee [Thu, Aug 27, 2009 at 11:55:39AM -0400]: --- I am using OpenBSD 4.5 When I try to use mail to send email from a user account I get an error: can not

Re: Fully Automatic (network-based) Installation of OpenBSD?

2009-08-27 Thread Soeren Aurehoej
Hi Toni Is it this one you are thinking of ? http://nbender.com/install.netboot/install.html Kind regards Sxren Aurehxj Den 27/08/2009 kl. 17.53 skrev Toni Mueller: Hi, I dimly remember seeing a short thread flowing by that mentions someone's hacks to bsd.rd to arrive at an installation

Re: encryption

2009-08-27 Thread pu
Brad Tilley wrote: They still have mainframes. Sure. And mainframes have very good encryption, see for example http://www-03.ibm.com/support/techdocs/atsmastr.nsf/WebIndex/WP100810 -pu

Re: Softraid crypto - stable in 4.6?

2009-08-27 Thread Marco Peereboom
As long as you can deal with the limitations then it is fine. The really big one being unable to change the password. Stacking RAID sets can be done but isn't a good idea. We are debating options but no decision has been made. On Thu, Aug 27, 2009 at 01:59:58PM +0200, Robert wrote: I read

Re: SFTP - Max Users

2009-08-27 Thread Robert
On Thu, 27 Aug 2009 13:23:18 -0400 Morris, Roy rmor...@internetsecure.com wrote: G'day, I searched around but couldn't find a simple answer to this question. I want to host a sftp server and there could be thousands of accounts, although not all used at once. I was wondering if there is a

JenJOBS.com - Where Employers Jobseekers Win

2009-08-27 Thread JenJOBS.com
img file Please add customerserv...@jenjobs.net to your address book to ensure job alerts and updates are sent directly to your Inbox! JenJOBS.com Logo Dear Friend, Whether you are an employer with a vacancy to advertise or a job seeker looking for your first or next job, JenJOBS.com can help!

Re: encryption

2009-08-27 Thread Brad Tilley
On Thu, Aug 27, 2009 at 2:22 PM, puuselpa.l...@gmail.com wrote: Brad Tilley wrote: They still have mainframes. Sure. And mainframes have very good encryption [snip] Yes, my point exactly. Those mainframes *still* support plain, old DES. Read the link you sent.

maybe OT 5 year anniversay of Chuck Yerkes death

2009-08-27 Thread Diana Eichert
I don't think it's off topic but others might. I'm writing this post to remember Chuck Yerkes, a long time contributor to the m...@openbsd list. Chuck died 5 years ago today while riding his motorcycle.

/dev in mfs permissions

2009-08-27 Thread Lars Nooden
I'm running OpenBSD 4.6-current (GENERIC) #125: Tue Aug 25 06:13:48 MDT 2009 on an i386 and notice that mfs seems different than earlier versions. What have I missed in mounting /dev ram using MFS? From /etc/fstab: /dev/wd0a / ffs ro 1 1 swap /dev mfs

Re: encryption

2009-08-27 Thread pu
Brad Tilley wrote: On Thu, Aug 27, 2009 at 2:22 PM, puuselpa.l...@gmail.com wrote: Brad Tilley wrote: They still have mainframes. Sure. And mainframes have very good encryption [snip] Yes, my point exactly. Those mainframes *still* support plain, old DES. Read the link you sent. Unless I

Re: Fully Automatic (network-based) Installation of OpenBSD?

2009-08-27 Thread Toni Mueller
Thank you both, Miod and Soeren - I think I was actually after the link Soeren posted, but didn't think that it was that long ago already. -- Kind regards, --Toni++

Re: SFTP - Max Users

2009-08-27 Thread Morris, Roy
excellent thanks. -Original Message- From: Robert [mailto:rob...@openbsd.pap.st] Sent: Thursday, August 27, 2009 2:53 PM To: Morris, Roy Cc: misc@openbsd.org Subject: Re: SFTP - Max Users On Thu, 27 Aug 2009 13:23:18 -0400 Morris, Roy rmor...@internetsecure.com wrote: G'day, I

rwho protocol and bridging

2009-08-27 Thread stan
I have 2 4.5 machine functioning as a bridge between 2 physical locations. I have teh 4.6. rwhod daemon running on both. I'm running the 4.6 version because it appears that teh 4.5 version is a listner only. All teh macines at both ends (Linux FreeBSD, HP-UX and OpenBSD) are all running rwhod.

Re: Softraid crypto - stable in 4.6?

2009-08-27 Thread Robert
Those limitations are ok. You said it isn't a good idea; is there a possibility for data loss or will it just be slow an ugly hack? So what would currently (4.6) be a sane way to have an encrypted disk mirrored? (no hardware raid, except if someone gives me the hardware for free...) *

Re: encryption

2009-08-27 Thread Brad Tilley
On Thu, Aug 27, 2009 at 3:35 PM, puuselpa.l...@gmail.com wrote: Unless I misunderstood, you seem to imply that using a mainframe means you *need* to use weak encryption. That's wrong. Yes, you misunderstand. Financial institutions use DES today because of backward compatibility. They've been

Re: SFTP - Max Users

2009-08-27 Thread Brynet
Robert wrote: Number of local user accounts is liminted by the available user id's. Since that's a 16 bit limit and if you stick to the 'from uid 1000 up' rule, that'd leave you with 64536 possible accounts. Hi, Thats wrong, uid_t and gid_t are 32-bit unsigned integers on at least i386.

Re: /dev in mfs permissions

2009-08-27 Thread Philip Guenther
On Thu, Aug 27, 2009 at 12:20 PM, Lars Noodenlars.cura...@gmail.com wrote: I'm running OpenBSD 4.6-current (GENERIC) #125: Tue Aug 25 06:13:48 MDT 2009 on an i386 and notice that mfs seems different than earlier versions. What have I missed in mounting /dev ram using MFS? ... $ cat /etc/fstab

Sendmail and SMTPAuth

2009-08-27 Thread stupidmail4me
I know this topic has been touched on before but I have what I believe is a simple question. Instead of creating a SASL password db and having to keep two password databases in check I want SASL to use OpenBSD's password file. There's no definitive answer so I want to try and put it out there.

Re: [pf question] Positive condition for adding in the table?

2009-08-27 Thread Ivan Radovanovic
Iqigo Ortiz de Urbina napisa: You could also take a look at the match, tag and tagged keywords in pf.conf. Additionally, you may require parsing your custom logs (pflogN interfaces or binary logs in /var/log/) in order to populate your tables for use in the main ruleset or anchors. Have a

Re: SFTP - Max Users

2009-08-27 Thread Robert
On Thu, 27 Aug 2009 16:43:34 -0400 Brynet bry...@gmail.com wrote: Robert wrote: Number of local user accounts is liminted by the available user id's. Since that's a 16 bit limit and if you stick to the 'from uid 1000 up' rule, that'd leave you with 64536 possible accounts. Hi, Thats

Re: SFTP - Max Users

2009-08-27 Thread Todd T. Fries
Not sure what unix you're running, over here, uid_t is 32bit. Penned by Robert on 20090827 20:52.31, we have: | On Thu, 27 Aug 2009 13:23:18 -0400 | Morris, Roy rmor...@internetsecure.com wrote: | | G'day, | I searched around but couldn't find a simple answer to this | question. I want

Re: /dev in mfs permissions

2009-08-27 Thread Stuart Henderson
On 2009-08-27, Lars Nooden lars.cura...@gmail.com wrote: I'm running OpenBSD 4.6-current (GENERIC) #125: Tue Aug 25 06:13:48 MDT 2009 on an i386 and notice that mfs seems different than earlier versions. What have I missed in mounting /dev ram using MFS? From /etc/fstab: /dev/wd0a /

Re: tmux status bar

2009-08-27 Thread Daniel Bolgheroni
On Thu, 27 Aug 2009, Nicholas Marriott wrote: This is probably because the behaviour changed a while ago so reverse is no longer in the default status-attr and message-attr, so this now sets the colours to black on black. Change these it should be fine (I guess you want green on black?).

pppd

2009-08-27 Thread 4625
pppd: PPP device not available. Why? -- 4625

Re: Funny T22 Freezes with 4.5

2009-08-27 Thread Nick Holland
Johan SANCHEZ wrote: Hi list, I m experiencing random freezes with few T22 fairly old laptops. I know those have crazy bios with few bugs. I tried a jump at UKC then disabled the acpi with no effect. I disabled the power mangement for cpu and pci bus with no more luke. I think you are going

Re: pppd

2009-08-27 Thread Philip Guenther
On Thu, Aug 27, 2009 at 6:59 PM, 46254625...@gmail.com wrote: pppd: PPP device not available. Why? Hmm, I don't see that message in pppd on an OpenBSD 4.6 system. Or rather, I only see it in the source as the beginning of a much longer message that describes what your next steps should be, so