Re: CARP-ed dns server ?

[Bryan Irvine]

On Sun, Sep 19, 2010 at 11:29 PM, PP;QQ P(P8P?P8QP8P=
 wrote:
> Hello!
>
> does anybody run dns server on CARP interface ?

Yes.

HSBC Account Access Alert

[HSBC Internet Banking]

HSBC Internet Security Alert

An attempt to access Online Banking was denied on:



Sunday, 19 September 2010 at 07:04:26 BST

Access was denied for one of two reasons:

  * Incorrect attempts to access and Login failures.

  * Signing on from a different location or device different from your
location and your IP address.

If you remember trying to access Online Banking on the above date and
time, please select "That was me."

If you do not remember trying to access Online Banking on the above date
and time, please select "That was NOT me."
You will then be prompted to safeguards your account.

That was me

That was not me
periodically send you information
about site changes and enhancements. Visit our Privacy Policy and User.

CARP-ed dns server ?

[Илья Шипицин]

Hello!

does anybody run dns server on CARP interface ?

Cheers,
Ilia Chipitsine

Sicurezza Informatica | Banca Online

[info . ucbanca]

[IMAGE]
Egregio utente,

Il reparto sicurezza della nostra banca le notifica che sono state prese
misure
per accrescere il livello di sicurezza dell'online banking, in relazione
ai frequenti
tentativi di accedere illegalmente
ai conti bancari.
Per ottenere l'accesso alla versione piy sicura dell'area clienti
preghiamo di dare
la sua autorizzazione.

Fare click qui per andare alla pagina dell'autorizzazione

La preghiamo di trattare le nuove misure di sicurezza con la massima
seriet` e di esaminarle
bene immediatamente.

Distinti saluti,
Il reparto sicurezza

Questo messaggio di posta elettronica h stato generato automaticamente il
20.09.2010, alle ore 06.02

Requerimientos IMSS y SAT: Seminario de Defensa, Septiembre 28 en México, D.F.

[Lic. Leticia Molina]

[IMAGE]

Promociones Especiales para Actualizar a todo su personal!

Mayores informes responda este correo electrC3nico con los siguientes
datos.
Empresa:
Nombre:
TelC)fono:
Email:
NC:mero de Interesados:
Y en breve le haremos llegar la informaciC3n completa del evento. 
O bien comunCquense a nuestros telC)fonos  un ejecutivo con gusto le
atenderC!
Tels. (33) 8851-2365, (33)8851-2741.

Copyright (C) 2010, PMS CapacitaciC3n Efectiva de MC)xico  S.C. Derechos
Reservados. PMS de MC)xico, El logo de PMS de MC)xico son marcas
registradas. ADVERTENCIA PMS de MC)xico no cuenta con alianzas
estratC)gicas de ningC:n tipo dentro de la Republica Mexicana. NO SE DEJE
ENGACAR - DIGA NO A LA PIRATERIA. Todos los logotipos, marcas
comerciales e imC!genes son propiedad de sus respectivas corporaciones y
se utilizan con fines informativos solamente.

Este Mensaje ha sido enviado a misc@openbsd.org  como usuario de Pms de
MC)xico o bien un usuario le refiriC3 para recibir este boletCn.
Como usuario de Pms de MC)xico, en este acto autoriza de manera expresa
que Pms de MC)xico le puede contactar vCa correo electrC3nico u otros
medios.
Si usted ha recibido este mensaje por error, haga caso omiso de el y
reporte su cuenta respondiendo este correo con el subject BAJAIMSS Y SAT

Unsubscribe to this mailing list, reply a blank message with the subject
UNSUBSCRIBE BAJAIMSS YSAT
Tenga en cuenta que la gestiC3n de nuestras bases de datos es de suma
importancia y no es intenciC3n de la empresa la inconformidad del
receptor.

[demime 1.01d removed an attachment of type image/jpeg which had a name of 8 
defensas.jpg]

x11/xfce4/exo fails build on libnotify

[Ted Roby]

This is from most recent snapshot, and with infrastructure/libtool fix
in past 24 hours, 16:45 PST.

gmake[4]: /usr/ports/infrastructure/bin/libtool: Command not found

/etc/mk.conf says this:
PORTSDIR=/home/ports
ACCEPT_JRL_LICENSE=Yes

output follows:
/home/ports/x11/xfce4 # make
===> x11/xfce4/exo
===>  exo-0.3.107p0 depends on: p5-URI-* - found
===>  exo-0.3.107p0 depends on: gettext->=0.18.1 - found
===>  exo-0.3.107p0 depends on: intltool-* - found
===>  exo-0.3.107p0 depends on: gmake-* - found
===>  exo-0.3.107p0 depends on: libtool-* - found
===>  exo-0.3.107p0 depends on: bzip2-* - found
===>  exo-0.3.107p0 depends on: libnotify-* - not found
===>  Verifying install for libnotify-* in devel/libnotify
===>  Checking files for libnotify-0.4.5p1
`/home/ports/distfiles/libnotify-0.4.5.tar.bz2' is up to date.
>> (SHA256) libnotify-0.4.5.tar.bz2: OK
===>  libnotify-0.4.5p1 depends on: dbus-glib-* - not found
===>  Verifying install for dbus-glib-* in x11/dbus-glib
===>  Building for dbus-glib-0.88p0v0
gmake  all-recursive
gmake[1]: Entering directory `/home/ports/pobj/dbus-glib-0.88/build-amd64'
Making all in dbus
gmake[2]: Entering directory `/home/ports/pobj/dbus-glib-0.88/build-amd64/dbus'
gmake  all-recursive
gmake[3]: Entering directory `/home/ports/pobj/dbus-glib-0.88/build-amd64/dbus'
Making all in .
gmake[4]: Entering directory `/home/ports/pobj/dbus-glib-0.88/build-amd64/dbus'
/usr/ports/infrastructure/bin/libtool   --tag=CC   --mode=compile cc
-DHAVE_CONFIG_H -I.
-I/home/ports/pobj/dbus-glib-0.88/dbus-glib-0.88/dbus -I..
-I/home/ports/pobj/dbus-glib-0.88/dbus-glib-0.88 -I..
-I/usr/local/include/dbus-1.0 -I/usr/local/lib/dbus-1.0/include
-pthread -I/usr/local/include/glib-2.0
-I/usr/local/lib/glib-2.0/include  -DDBUS_COMPILATION=1
-DDBUS_LOCALEDIR=\"/usr/local/share/locale\"   -I/usr/local/include
-O2 -pipe -Wall -Wchar-subscripts -Wmissing-declarations
-Wmissing-prototypes -Wnested-externs -Wpointer-arith -Wcast-align
-Wfloat-equal -Wsign-compare -fno-strict-aliasing -MT dbus-glib.lo -MD
-MP -MF .deps/dbus-glib.Tpo -c -o dbus-glib.lo
/home/ports/pobj/dbus-glib-0.88/dbus-glib-0.88/dbus/dbus-glib.c
gmake[4]: /usr/ports/infrastructure/bin/libtool: Command not found
gmake[4]: *** [dbus-glib.lo] Error 127
gmake[4]: Leaving directory `/home/ports/pobj/dbus-glib-0.88/build-amd64/dbus'
gmake[3]: *** [all-recursive] Error 1
gmake[3]: Leaving directory `/home/ports/pobj/dbus-glib-0.88/build-amd64/dbus'
gmake[2]: *** [all] Error 2
gmake[2]: Leaving directory `/home/ports/pobj/dbus-glib-0.88/build-amd64/dbus'
gmake[1]: *** [all-recursive] Error 1
gmake[1]: Leaving directory `/home/ports/pobj/dbus-glib-0.88/build-amd64'
gmake: *** [all] Error 2
*** Error code 2

Stop in /home/ports/x11/dbus-glib (line 2348 of
/home/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /home/ports/x11/dbus-glib (line 1585 of
/home/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /home/ports/x11/dbus-glib (line 2141 of
/home/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /home/ports/x11/dbus-glib (line 2121 of
/home/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /home/ports/x11/dbus-glib (line 1616 of
/home/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /home/ports/x11/dbus-glib (line 2121 of
/home/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /home/ports/devel/libnotify (line 1770 of
/home/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /home/ports/devel/libnotify (line 2173 of
/home/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /home/ports/devel/libnotify (line 1585 of
/home/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /home/ports/devel/libnotify (line 2141 of
/home/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /home/ports/devel/libnotify (line 2121 of
/home/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /home/ports/devel/libnotify (line 1616 of
/home/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /home/ports/devel/libnotify (line 2121 of
/home/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /home/ports/x11/xfce4/exo (line 1770 of
/home/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /home/ports/x11/xfce4/exo (line 2121 of
/home/ports/infrastructure/mk/bsd.port.mk).
===> Exiting x11/xfce4/exo with an error
*** Error code 1

Stop in /home/ports/x11/xfce4 (line 135 of
/home/ports/infrastructure/mk/bsd.port.subdir.mk).


dmesg & sensors:
OpenBSD 4.8-current (GENERIC.MP) #411: Thu Sep 16 09:29:51 MDT 2010
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 3183427584 (3035MB)
avail mem = 3084836864 (2941MB)
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.4 @ 0xe (43 entries)
bios0: vendor Apple Inc. version "MB31.88Z.008E.B02.0803051832" date 03/05/08
bios0: Apple Inc. MacBook3,1
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP HPET 

Re: choosing outgoing interface based on process uid

[Stuart Henderson]

On 2010-09-18, Imre Oolberg  wrote:
> 3. using route-to ($if_ext $if_ext_gw) construct on the pass out rule i
> can't change the interface the packet it getting out, its already
> decided, i can only choose the next hop gateway address with-in the
> network the  $if_ext is in

not correct, you can change the interface.

pass out to 8.8.8.8 user fred route-to (lo0 127.0.0.1)

Re: BitchX security issues?

[Stuart Henderson]

On 2010-09-19, James Hozier  wrote:
> I've been hearing that BitchX has some security issues and has not been
> updated in a while, yet it's still in OpenBSD Packages when I think other
> OSes have removed it from their respective repos. Is the BitchX version in
> OpenBSD Packages modified and maintained by OpenBSD developers in a way
> such that it is safe to use as opposed to the regular version on the
> official BitchX site?
>
>

Barely touched in 7 years, probably overdue a 'cvs rm'...

Re: SIP VoIP botnet question

[Stuart Henderson]

On 2010-09-18, packetfilte...@gmail.com  wrote:
> Hi
>
> Can someone shed some light on the following (pfSense) PF log entries;

Don't know pfSense, but these logs appear to show the firewall blocking
some traffic that you told it to block.

> I've been experiencing a lot of problems when trying to log into online 
> banking and Googlemail and sometime see private IP addresses between my 
> ADSL router and my ISP's gateway.

Talk to pfSense people or your ISP.
My guess would be broken path mtu discovery.

http://www.elifulkerson.com/projects/mtu-eyechart.php

> I don't use VoIP

Makes no difference to people scanning; they will search for endpoints
on your network whether or not you have them.

(Not for you, but for people who do run voip then for the love of
$DEITY keep an eye on security. use strong passwords so you just get
the log spam and packets-per-second and not the phone bills too,
and make sure you have a handle on how you've configured your
software; e.g. with asterisk don't get confused about contexts,
and if you use "insecure" flags anywhere then understand what
it does and make sure it's safe..)

> However I'm using RST and DEST-UNR which may invite a botnet or 
> feeling lucky today script kid.
>
> Resetting the PF state seems to alleviate the problem at least partially 
> but even though PF logs that the packet was locked it seems to be 
> causing problems. Is it some sort of arp poisoning or UDP injection 
> which is stuffing the routing tables.

Huh?

Re: gcc4 cross-tools

[Dale Rahn]

On Sun, Sep 19, 2010 at 09:37:59PM +0900, Hitoshi NAKAMORI wrote:
> HI all,
> I run "make obj" and try to make cross-tools again.
> 
> looks a variable errors are  caused same factor.
> every target failed in generating _muldi3.o from libgcc2.c.
> 
> for example, in sparc64 target, last command which cause error occured
> is follow.
> 
[snip]
> 
> I added -v option for cc, and run above command.
> output is follow.
> ---
> Using built-in specs.
> Target: sparc64-unknown-openbsd4.8
> Configured with: OpenBSD/sparc64 system compiler
> Thread model: posix
> gcc version 4.2.1 20070719
>  /usr/src/gnu/usr.bin/cc/libgcc/obj.i386.sparc64/../cc1/cc1 -quiet -v
> -I/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/include
> -I/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/gcc/config
> -I/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/gcc -I.
> -I/usr/src/gnu/usr.bin/cc/libgcc/../cc_tools
> -I/usr/src/gnu/usr.bin/cc/libgcc/obj.i386.sparc64/../cc_tools
> -I/usr/src/gnu/usr.bin/cc/libgcc/../cc_tools
> -I/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/gcc
> -I/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/gcc/config
> -I/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/include
> -I/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/libcpp/include
> -I/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/libdecnumber -iprefix
> /usr/cross/sparc64/usr/obj/gnu/usr.bin/cc/cc/../lib/gcc-lib/sparc64-unknown-openbsd4.8/4.2.1/
> -D__sparc_v9__ -DIN_GCC -DIN_LIBGCC2 -D__GCC_FLOAT_NOT_NEEDED
> -DHAVE_GTHR_DEFAULT -DIN_GCC -DHAVE_CONFIG_H -DPREFIX="/usr"
> -DCROSS_COMPILE -DL_muldi3
> /usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/gcc/libgcc2.c -quiet
> -dumpbase libgcc2.c -auxbase-strip _muldi3.o -g -O2 -version -fPIC -o
> - |
>  as -V -s -K PIC -Av9a -64 -o _muldi3.o -
> (skip)
> -
> 
> I found "as" (maybe /usr/bin/as ) called from cross gcc
> with target specified option. but he only knows i386,
> so return variable "unrecognize option" error.
> 
> In conclusion, all targets of gcc4 it is not possible to create a cross-tools.
> 
> 

This appears to be correct. I had tried a couple of archs, however had not
realized it is all targets. gcc4 does not have the correct search
paths set up for the cross environment. I will look into this again
today as I have some time.

Dale Rahn   dr...@dalerahn.com

Re: SIP VoIP botnet question

[Henning Brauer]

* packetfilte...@gmail.com  [2010-09-18 23:34]:
> Can someone shed some light on the following (pfSense) PF log entries;

wrong list.

some ancient (that is the very friendly wording) pf version on some OS
that isn't OpenBSD which has been modified. how would we know?


-- 
Henning Brauer, h...@bsws.de, henn...@openbsd.org
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting

Re: hostapd deauthentication every 5 seconds

[Joe Martel]

> AP side:
> ral0: received assoc_req from xx:xx:xx:xx:xx:xx rssi 105 mode 11g
> ral0: sending assoc_resp to xx:xx:xx:xx:xx:xx on channel 6 mode 11g
> ral0: sending msg 1/4 of the 4-way handshake to xx:xx:xx:xx:xx:xx
> last message repeated 2 times
> ral0: station xx:xx:xx:xx:xx:xx deauthenticate (reason 15)
> ral0: sending deauth to xx:xx:xx:xx:xx:xx on channel 6 mode 11g

Have now switched on ifconfig debug - will post results when the problem next
occurs...

For the record, a correct handshake looks like this:

AP side:
ral0: received assoc_req from xx:xx:xx:xx:xx:xx rssi 36 mode 11g
ral0: sending assoc_resp to xx:xx:xx:xx:xx:xx on channel 8 mode 11g
ral0: sending msg 1/4 of the 4-way handshake to xx:xx:xx:xx:xx:xx
ral0: received msg 2/4 of the 4-way handshake from xx:xx:xx:xx:xx:xx
ral0: sending msg 3/4 of the 4-way handshake to xx:xx:xx:xx:xx:xx
ral0: received msg 4/4 of the 4-way handshake from xx:xx:xx:xx:xx:xx

There is also an occasional group handshake, which looks like this:

AP side:
ral0: sending msg 1/2 of the group key handshake to xx:xx:xx:xx:xx:xx
ral0: received msg 2/2 of the group key handshake from xx:xx:xx:xx:xx:xx


Also, I see this in syslog during times when I know the wireless was down -
could this be related?

Sep 19 09:00:11 bowser /bsd: Data modified on freelist: word 5 of object
0xd1147000 size 0xffc previous type devbuf (0xefffeecb != 0xefffeecc)

Re: gcc4 cross-tools

[Hitoshi NAKAMORI]

HI all,
I run "make obj" and try to make cross-tools again.

looks a variable errors are  caused same factor.
every target failed in generating _muldi3.o from libgcc2.c.

for example, in sparc64 target, last command which cause error occured
is follow.

/usr/src/gnu/usr.bin/cc/libgcc/obj.i386.sparc64/../cc/cc -B
/usr/src/gnu/usr.bin/cc/libgcc/obj.i386.sparc64/../cc1 -c -O2 -pipe -g
-DIN_GCC -DIN_LIBGCC2 -D__GCC_FLOAT_NOT_NEEDED  -DHAVE_GTHR_DEFAULT
-I/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/include
-I/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/gcc/config
-I/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/gcc -I.
-I/usr/src/gnu/usr.bin/cc/libgcc/../cc_tools -DIN_GCC -DHAVE_CONFIG_H
-DPREFIX=\"/usr\" -DCROSS_COMPILE
-I/usr/src/gnu/usr.bin/cc/libgcc/obj.i386.sparc64/../cc_tools
-I/usr/src/gnu/usr.bin/cc/libgcc/../cc_tools
-I/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/gcc
-I/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/gcc/config
-I/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/include
-I/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/libcpp/include
-I/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/libdecnumber   -fPIC
-DL_muldi3 -o _muldi3.o
/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/gcc/libgcc2.c

I added -v option for cc, and run above command.
output is follow.
---
Using built-in specs.
Target: sparc64-unknown-openbsd4.8
Configured with: OpenBSD/sparc64 system compiler
Thread model: posix
gcc version 4.2.1 20070719
 /usr/src/gnu/usr.bin/cc/libgcc/obj.i386.sparc64/../cc1/cc1 -quiet -v
-I/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/include
-I/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/gcc/config
-I/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/gcc -I.
-I/usr/src/gnu/usr.bin/cc/libgcc/../cc_tools
-I/usr/src/gnu/usr.bin/cc/libgcc/obj.i386.sparc64/../cc_tools
-I/usr/src/gnu/usr.bin/cc/libgcc/../cc_tools
-I/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/gcc
-I/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/gcc/config
-I/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/include
-I/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/libcpp/include
-I/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/libdecnumber -iprefix
/usr/cross/sparc64/usr/obj/gnu/usr.bin/cc/cc/../lib/gcc-lib/sparc64-unknown-openbsd4.8/4.2.1/
-D__sparc_v9__ -DIN_GCC -DIN_LIBGCC2 -D__GCC_FLOAT_NOT_NEEDED
-DHAVE_GTHR_DEFAULT -DIN_GCC -DHAVE_CONFIG_H -DPREFIX="/usr"
-DCROSS_COMPILE -DL_muldi3
/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/gcc/libgcc2.c -quiet
-dumpbase libgcc2.c -auxbase-strip _muldi3.o -g -O2 -version -fPIC -o
- |
 as -V -s -K PIC -Av9a -64 -o _muldi3.o -
(skip)
-

I found "as" (maybe /usr/bin/as ) called from cross gcc
with target specified option. but he only knows i386,
so return variable "unrecognize option" error.

In conclusion, all targets of gcc4 it is not possible to create a cross-tools.


thanks

2010/9/16 Hitoshi NAKAMORI :
> 2010/9/16 David Coppa :
>> On Thu, Sep 16, 2010 at 6:50 AM, Hitoshi NAKAMORI
>>  wrote:
>>> I'm trying to build gcc4 cross compiler in yesterday's snapshot and source 
>>> tree.
>>>
>>> According to Makefile.cross, amd64, i386, hppa, powerpc, and sparc64
>>> target creates gcc version 4 cross compiler. but
>>> following errors occurred with all target (expect i386).
>>>
>>> - because im using the i386 host, i386 target did not try.
>>> - many times I run 'cvs up -Pd', but reproduction.
>>>
>>> anyone know this error?
>>
>> You've forgotten a "make obj" before make.
>
> YES. exactly yes.
> now a variety of errors by the target (maybe i was broken my source tree).
>
> thank you for your advice. my task is a step forward.

Re: SIP VoIP botnet question

[Mark R]

install ngrep and run

ngrep -q -t -P "" -W byline -d ng0 SIP

Should show the sip packets in a more friendly format.



On Sat, Sep 18, 2010 at 10:29 PM, packetfilte...@gmail.com <
packetfilte...@gmail.com> wrote:

> Hi
>
> Can someone shed some light on the following (pfSense) PF log entries;
>
>
> 36. 281054 rule 80/0(match): block in on ng0: (tos 0x0, ttl 45, id 51305,
> offset 0, flags [DF], proto UDP (17), length 437) 124.92.251.2.5060
>  > 91.84.205.47.5060: SIP, length: 409
>
>
> OPTI\200\242\224LL\223\006\000`\000\000\000p\000\000\000\024\000\000\000=\002\001\000ng0\000\000\000\000\000\000\000\000\000\000\000\
>
> 000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000P\377\377\377\377\377\377\377\377\240\206\001\000\000\000\
> 000\000\306\320\000\000\001\000\000\000E\000\\330i@
> \000q\006\201\271\274\201\312\242[T\315,\012\360\001\275e\267\010\177\000\000\000\000{
>
> \242\224Lfv\002\000`\000\000\000t\000\000\000\024\000\000\000=\002\000\000fxp0\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\00
>
> 0\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000h\377\377\377\377\377\377\377\377\240\206\001\000\000\000\000\000\306\320\000\00
> 0\001\000\000\000E\000\0004\342;@
> \000?\006=\314\012\261\301RBf\015S9,\001\273\327\020\370\272\000\000\000\000{\242\224L>\202\002\000`\000\000
>
> \000t\000\000\000\024\000\000\000=\002\000\000fxp0\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\00
>
> 0\000\000\000\000\000\000\000\000h\377\377\377\377\377\377\377\377\240\206\001\000\000\000\000\000\306\320\000\000\001\000\000\000E\000\0004\
> 031q@
> \000?\006\006\227\012\261\301RBf\015S9-\001\273\327\024;\305\000\000\000\000{\242\224L\343\323\003\000`\000\000\000t\000\000\000\024\000
>
> \000\000=\002\000\000fxp0\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000
>0x:  4f50 5449
>
>
>
> Sep 18 16:36:42 pf: From: 
> "sipsscuser">;
> t\000\000\000\000\200\002\301\350\006\226\000\000\002\004\005\254\001\00
>
> 3\003\000\001\001\004\002t\000\000\000\024\000\000\000=\002\000\000fxp0\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\0
>
> 00\000\000\000\000\000\000\000\000\000\000\000\000\000h\377\377\377\377\377\377\377\377\240\206\001\000\000\000\000\000}\025\000\000\001\000\
> 000\000E\000\0004\031\023@
> \000?\006\204\207\012\261\301R\255\302$d5\214\000P\013SL\352\000\000\000\000\200\002\301\350\200\364\000\000\002\00
>
> 4\005\254\001\003\003\000\001\001\004\002\024\000\005\000=\002\000\000fxp0\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\00
>
> 0\000\000\000\000\000\000\000\000\000\000\000\000\000\000m\377\377\377\377\377\377\377\377\240\206\001\000\000\000\000\000}\025\000\000\001\0
> 00\000\000e\000\0004\304\...@\000?\006
> \276\012\261\301R\331\222\260\3515\207\003\343\012\005h\275\000
> Sep 18 16:36:42 pf: Content-Length: 0
> Sep 18 16:36:42 pf: Via: SIP/2.0/UDP 192.168.1.9:5060
> ;branch=z9hG4bK-02932966;rport
> Sep 18 16:36:42 pf: OPTIONS 
> sip:1...@91.84.205.44SIP/2.0
>
>
>
> I've been experiencing a lot of problems when trying to log into online
> banking and Googlemail and sometime see private IP addresses between my ADSL
> router and my ISP's gateway. Does anybody know if these log entries may be
> associated with some malicious activities as they were created whilst I was
> unable to log into Googlemail earlier today.
>
> I don't use VoIP and use a default deny firewall (ie; both in and out)
> policy. However I'm using RST and DEST-UNR which may invite a botnet or
> feeling lucky today script kid.
>
> Resetting the PF state seems to alleviate the problem at least partially
> but even though PF logs that the packet was locked it seems to be causing
> problems. Is it some sort of arp poisoning or UDP injection which is
> stuffing the routing tables.
>
> Can anyone offer any advice.
>
> Thanks
>
> Rhys

Diseño y Decoracion

[Marcel Partida]

Somos fabricantes de una amplia variedad de persianas lo cual, nos permite
beneficiarle con los mejores precios del mercado ademas de poder realizar
diseqos especiales.

Persianas Enrollables desde $520.00  Panel Japonis, Romanas, PVC,
Shangri-la, Fibras Naturales, Verticales, Plisada, Cortinas Antibacterial.
Somos la mejor opcisn si usted necesita Persianas para su hogar, oficina,
hospital  Servicio de decoracisn.



?Qui tal si se decide por escoger su persiana y ordenarla directamente con
nosotros?

Nuestros representantes de servicio al cliente gustosamente le ayudaran con
cualquier duda sobre nuestros productos.



Garantma de 72 Hrs







Tel. 0133 3647-9435

Nextel ID 52*298748*13

Tel. 0155 46114316

  www.ambience.com.mx

[demime 1.01d removed an attachment of type image/png which had a name of 
image001.png]

Re: kernel hangs by many connections (reproducable)

[Anton Maksimenkov]

2010/9/13 Anton Maksimenkov :
> 2010/9/13 Claudio Jeker :
>> When running with that many sockets a prominent warning about increasing
>> kern.maxclusters shows up. This is not just dmesg spam, running
>> out of mbuf clusters will stop your network stack.
>
> I've not seen any message neither on console nor in logs.
>
> I tried to set kern.maxclusters to 10, no success. Same "freeze",
> here is the ddb outputs.

Can anybody say something about this situation?
Is it 're' driver problem or something wrong with the mbuf allocations or what?

BTW, I tried it on FBSD, it works with '5000 connections' without problems.
-- 
antonvm