ipsec with ipcomp configuration challange.

2013-09-09 Thread Lundal, Gaute
Hello Configuration challenge for ipsec.conf with ipcomp. the reason for doing this is an attempt to speed up the connection to a site in singapore from norway. The Singapore site has OpenBSD 5.3 but is not used in the config test. What I have been using and is working in the test(ipsec.conf):

Re: how to set framebuffer resolution

2013-09-09 Thread Janne Johansson
The FAQ has some info on making the text console have more lines on x86-y machines, if that is what you are after. 2013/9/9 remy couture remycout...@gmail.com Hi, i'm looking for infos on how to play with the screen resolution on intel framebuffer. Other OSes have some kind of mode

Re: spamd(8) more persistent greytrapping

2013-09-09 Thread Boudewijn Dijkstra
Op Thu, 29 Aug 2013 14:04:59 +0200 schreef Boudewijn Dijkstra sp4mtr4p.boudew...@indes.com: Here's a suggested improvement to spamlogd(8) which keeps greytrap entries tarpitted while they keep trying. [...] Because at least one person expressed an interest in my modification, find below an

Re: uaudio0: audio descriptors make no sense, with Schiit Bifrost USB DAC

2013-09-09 Thread Martin Pieuchot
On 07/09/13(Sat) 12:17, Martijn Rijkeboer wrote: Hi, I have a Schiit Bifrost USB DAC that includes an uaudio device for audio playback. When I plug the device in I'm getting uaudio0: audio descriptors make no sense, error=4. Any suggestions on how to make this work? Here are the relevant

Help with ISAKMP Nat Traversal Problem needed

2013-09-09 Thread Christoph Leser
Hello misc, My openBSD Gateway seems to have a problem with ISAKMP Nat Traversal to a remote Sonicwall. The ISAKMP Exchange fails in pase 2. The remote Sonicwall is behind a NAT device. Before I blame one side or the other for misbehavior, I would like you to take a look at the traces I will

Re: uaudio0: audio descriptors make no sense, with Schiit Bifrost USB DAC

2013-09-09 Thread James Griffin
!-- On Sat 7.Sep'13 at 11:17:56 BST, Martijn Rijkeboer (mart...@bunix.org), wrote: Hi, I have a Schiit Bifrost USB DAC that includes an uaudio device for audio playback. When I plug the device in I'm getting uaudio0: audio descriptors make no sense, error=4. Any suggestions on how to

Re: Exploits

2013-09-09 Thread Andy
On first look I couldn't see the exploit in that old PDF being listed on the errata's. Maybe I'm being blind ;) On Sat 07 Sep 2013 19:45:38 BST, Greg Thomas wrote: Does this document still hold any truth with current OpenBSD; Come on, really? http://www.openbsd.org/errata40.html On Sat,

Re: Exploits

2013-09-09 Thread Jérémie Courrèges-Anglas
Andy a...@brandwatch.com writes: On first look I couldn't see the exploit in that old PDF being listed on the errata's. Maybe I'm being blind ;) Or maybe you need to take a second look (010). The security problem is described, a workaround and a patch are available. Publishing an exact

Re: ISAKMPD NAT/Traversal

2013-09-09 Thread Stuart Henderson
On 2013-09-07, Christoph Leser le...@sup-logistik.de wrote: Von: owner-m...@openbsd.org [owner-m...@openbsd.org]quot; im Auftrag von quot;Stuart Henderson [s...@spacehopper.org] Gesendet: Samstag, 7. September 2013 00:11 An: misc@openbsd.org Betreff: Re: ISAKMPD NAT/Traversal On 2013-09-06,

Re: A suggestion for snapshots

2013-09-09 Thread Stuart Henderson
On 2013-09-07, Lars Engblom lars.engb...@kimitotelefon.fi wrote: I think the issue is more about space than bandwidth. No, it's about bandwidth, first from the build machines to the main distribution site (fanout), and then from the fanout to mirrors. Between them, amd64 and i386 packages take

Re: nat-to static-port chooses random ports

2013-09-09 Thread Stuart Henderson
On 2013-09-07, Christopher Zimmermann madro...@gmerlin.de wrote: Hi, as far as I understand pf, the following rules should behave exactly the same: pass out log on pppoe0 inet proto udp from mortimer-ipsec port 5061 nat-to (pppoe0) static-port and pass out log on pppoe0 inet proto udp

Re: how to set framebuffer resolution

2013-09-09 Thread Stuart Henderson
On 2013-09-09, remy couture remycout...@gmail.com wrote: Hi, i'm looking for infos on how to play with the screen resolution on intel framebuffer. Other OSes have some kind of mode setting at the boot loader level, what about OpenBSD ? Thank you very much At the moment, all you can do

Re: uaudio0: audio descriptors make no sense, with Schiit Bifrost USB DAC

2013-09-09 Thread Martijn Rijkeboer
I have a Schiit Bifrost USB DAC that includes an uaudio device for audio playback. When I plug the device in I'm getting uaudio0: audio descriptors make no sense, error=4. Any suggestions on how to make this work? Here are the relevant lines from usbdevs -v (debugging enabled for uaudio):

Re: Help with ISAKMP Nat Traversal Problem needed

2013-09-09 Thread Christoph Leser
Here is another debug output and tcpdump for the same problem. Following the advice from Stuart Henderson I change the debug levels to isakmpd -D0=29 -D1=49 -D2=10 -D3=30 -D6=99 -D7=99 -D8=99 -D9=30 -D10=20 -K -L Here again the tcpdump and the new debug output 16:08:35.114550 0.0.0.0.500

Re: Strange vlan interface behavior/crash

2013-09-09 Thread Wiesław Kielas
* Wiesław Kielas wieslaw.kie...@bluemedia.pl [04.09.2013. @15:44:05 +0200]: Hi misc@, I have a Dell PowerEdge M600 machine running OpenBSD 5.3 which causes frequent problems - once about every few days vlan interfaces stop working. Ifconfig reports them being up the whole time, but when

yubikey offline login

2013-09-09 Thread alex
Hi! Is anybody know about possibility local (offline) login to OpenBSD? I found this article http://www.h-ein.de/projekte/yubikey-login-auth-module-openbsd.html (i know about yubikey for ssh auth : http://undeadly.org/cgi?action=articlesid=20130616112437 Thanks, Alex Popov

pflow packets before state expires

2013-09-09 Thread Matt Hamilton
Hi All, We use pflow with pf to export packets to a collector for billing/monitoring purposes. The problem we have is that someone at the weekend had a very long running scp connection over several days that transferred a TB of data. The data was not logged via pflow until the state expired, so

Re: pflow packets before state expires

2013-09-09 Thread sven falempin
The manual say the information is extracted from the state table. So you should have seen the info. First: are you sure the information wasnt in the udp pflow packets ? maybe the collector was wrong. Second: man says The packet size and thus the maximum number of flows is controlled by the mtu.

Re: yubikey offline login

2013-09-09 Thread Alexander Hall
On 09/09/13 16:48, alex wrote: Hi! Is anybody know about possibility local (offline) login to OpenBSD? I found this article http://www.h-ein.de/projekte/yubikey-login-auth-module-openbsd.html (i know about yubikey for ssh auth : http://undeadly.org/cgi?action=articlesid=20130616112437 Thanks,