Re: fsck Segmentation fault on 4.1

2007-07-13 Thread Bob Beck
I want to report a problem i experienced while testing OpenBSD 4.1 . I've installed it, increased VM_PHYSSEG_MAX to 16 in /usr/src/sys/arch/i386/include/vmparam.h to make it work with this particular motherboard and made a stable release. Fluffy!!! There be dragons..

Re: Publishing your spamtraps list, is that a wise move?

2007-07-05 Thread Bob Beck
The only downside to this that I can see is that occasionally somebody naive and innocent sending backscatter (bounces of undeliverable spam) would be tarpitted for a while. I do not view such people as innocent - having your mail server configured to do this is acting as a DOS

Re: authpf allows only one user from the same source ip; kicks off previous user

2007-06-25 Thread Bob Beck
Nope. That's how it is supposed to work. The point of authpf is for the user to say this IP is me - if that IP could perhaps not be him, well, this is not an application for authpf. I.E. if your users are coming in from a NAT, you should rethink what you are doing. -Bob

Re: authpf allows only one user from the same source ip; kicks off previous user

2007-06-25 Thread Bob Beck
I fully understand your reasoning. Under normal circumstances users authenticate from their desktop machines (which is a unique IP) and therefore not a problem. However, sometimes they are VNC'd into servers (more CPU power) and want to access resources behind the internal 'firewall'.

Re: Security of the keyboard

2007-06-20 Thread Bob Beck
And guess what. Keyboards use a serial protocol. Which means that there will be slightly different voltage drops in the system varying with the keys you press. ZOMG! OpenBSD provides a side channel for attackers through the sensors framework! And don't forget the aps(4) sensor on

Re: hardware needed for network stack performance work

2007-06-13 Thread Bob Beck
3) Use info garnered through survey to a) craft appeals on website Don't need a survey for this. we have a pretty good idea what biggies are using it. b) create email appeals to self-identified users in correct classes. Oh, a directed spam

Re: hardware needed for network stack performance work

2007-06-13 Thread Bob Beck
Or maybe we need 20 more people like Jason Dixon, to make an appeal to a company where they have contacts, where the message will at least be read. That's directly targetted, and therefore more meaningful, and I think has a higher chance of success. Anyone out there know companies using and

Re: greylisting and mailer pools redux

2007-06-13 Thread Bob Beck
* Satadru Pramanik [EMAIL PROTECTED] [2007-06-13 16:00]: I have OpenBSD 4.0 setup with spamd doing greylisting for a mail server, and I am having a problem with more and more companies sending mail that is getting stuck in spamd from having a pool of mail servers sending mail from several

Re: Spamd variation

2007-06-12 Thread Bob Beck
* Praveen [EMAIL PROTECTED] [2007-06-12 05:14]: Hi, From the man page it appears that spamd relies on static information about spam originators. Why not a more dynamic scheme ?. No, it doesn't. please read the man page instead of trolling. Why not run the content of the mail

Re: hoststated/spamd

2007-06-12 Thread Bob Beck
I still don't see how hosts in spamd-white are not sent to spamd. what if a host is in spamd-white, but not in spamd-exempt.. -Bob * Stuart Henderson [EMAIL PROTECTED] [2007-06-11 17:21]: On 2007/06/08 16:02, Bob Beck wrote: rdr-anchor hoststated/smtp from spamd-white rdr

Re: beck's greyscanner for spamd 4.1

2007-06-11 Thread Bob Beck
read the archives for the answer to this and other fascinating questions. or look very carefully at the contents of that directory. * Anton Karpov [EMAIL PROTECTED] [2007-06-09 04:53]: I've noticed that original greyscanner by beck@ doesn't work with latest spamd. Is there

Re: simple spamd questions

2007-06-10 Thread Bob Beck
* Juan Miscaro [EMAIL PROTECTED] [2007-06-10 10:24]: --- Jeff Santos [EMAIL PROTECTED] wrote: Hi, Thank you. Can I assume that all connected/disconnected messages I see in /var/log/daemon are from blacklisted hosts or some are still greylisted (undefined)? Either

Re: hoststated/spamd

2007-06-08 Thread Bob Beck
rdr-anchor hoststated/smtp from spamd-white rdr proto tcp from !spamd-exempt to $MX port smtp - 127.0.0.1 port spamd The fact that those two table names are different looks suspiciously wrong to me. -Bob

Re: spamd

2007-06-04 Thread Bob Beck
Many things. according to the logs you have there it didn't even talk smtp to you, so it shouldn't pass. * Edgars Mak??a [EMAIL PROTECTED] [2007-06-04 12:07]: Hi! I have some problems with spamd. A lot of smtp servers stops at this point of cycle: Jun 4 20:40:17 firewall

Re: OpenBSD sucks

2007-06-01 Thread Bob Beck
* Miod Vallat [EMAIL PROTECTED] [2007-05-31 23:05]: Good! You only have to buy a boat then, since you've already got the boat anchor! Miod This from the man with an mcd(4) hooked up to an isa bus on his hp300 That's kinda like a guy with a pierced nipple being called a freak

Re: Spamd default behaviour of accepting everything

2007-05-24 Thread Bob Beck
yes, but not in response to the DATA command (what I was talking about) but after. no, you're wrong. right from rfc 2821: 8 DATA I: 354 - data - S: 250 E: 552, 554, 451, 452 E: 451, 554, 503 8 explicitly - if I decide something is wrong

Re: Dell PERC 3/Di - No Disks Found

2007-05-23 Thread Bob Beck
Things are better with an ebay'd ami(4) (PERC3/SC, PERC3/DC, etc) which shouldn't be too expensive or hard to find, are supported by GENERIC, and work with bioctl/sensorsd. Yes, if you can get an ami based perc, they rock. -Bob

Re: Spamd default behaviour of accepting everything

2007-05-22 Thread Bob Beck
I just used dnsstuff to test one of my domain names and it showed me (the first time only) that my server is an openrelay, which is obviously not true. This is due to the default behaviour of spamd of accepting everything, even when a spamd.alloweddomains file is present. I think this could

Re: smtp auth + greylisting

2007-05-22 Thread Bob Beck
Trust me - bit the bullet and change to 587/465 anyway. we had to for road warriors because 25 is blocked in so many places anyway from walkups. You're better just getting your users to switch. * Chad M Stewart [EMAIL PROTECTED] [2007-05-22 12:46]: Since having users change

Re: Spamd default behaviour of accepting everything

2007-05-22 Thread Bob Beck
just deduced from trial and error. Also greylisting should happen at RCPT TO, and probably not at DATA as there are some widely used MTAs that are buggy and choke when a 4xx error is sent in the DATA phase. I've been running this at DATA for months, and not seen any issues with it.

Re: smtp auth + greylisting

2007-05-22 Thread Bob Beck
arlo guthrie ... We walked in, sat down, Obie brought up the the help desk page with the twenty seven 800 x 600 colour glossy screenshots with circles and arrows and a paragraph below each one explaining what each one was to be used to show Windows users what to do. Luser came in and

Re: Spamd default behaviour of accepting everything

2007-05-22 Thread Bob Beck
I manage about 30 mail servers, all using greylisting for years (not OpenBSD spamd, but a version running in the MTA). But as I greylist at RCPT TO, I only noticed the problem it when clamav did go down and the server was producing a 4xx error at DATA when it should have scanned the mail.

Re: OpenBSD serial terminal binary programs

2007-05-11 Thread Bob Beck
Makes me think some sort of OS has to be present before using cu. I have a couple of sparc machines with no monitor/OS that I would love to throw an OS on.. Zach sure you can, but the hardware boot ROM has to support it. I ran most of my non-intel systems headless for years. If

Re: Spamd Q

2007-05-10 Thread Bob Beck
The example in the man page assumes your mail server requires no redirection. If you actually redirect connections to your real mail server, then you will need to modify the example appropriately. -Bob * Steve Shockley [EMAIL PROTECTED] [2007-05-03 19:02]: I've just

Re: authpf: real world uses of $user_id ?

2007-05-02 Thread Bob Beck
* Matthias Bertschy [EMAIL PROTECTED] [2007-05-02 11:26]: I think this would only make sense if authpf could stand multiple connections from same host... Unfortunately, it is not possible: http://www.mail-archive.com/[EMAIL PROTECTED]/msg08318.html So, I still wonder why such a feature

OpenBSD 4.1 Released

2007-05-01 Thread Bob Beck
, Antoine Jacoutot, Artur Grabowski, Ben Lindstrom, Bernd Ahlers, Bjorn Sandell, Bob Beck, Brad Smith, Brandon Creighton, Brian Caswell, Brian Somers, Bruno Rohee, Camiel Dobbelaar, Can Erkin Acar, Cedric Berger, Chad Loder, Chris Cappuccio, Chris Kuethe, Christian Weisgerber

Re: spamd - good job!

2007-04-20 Thread Bob Beck
Thanks. 4.1 has some major changes too, so bear in mind spamd wise it's a big change from 4.0 -Bob * Frank Bax [EMAIL PROTECTED] [2007-04-20 08:29]: I'm finally upgrading from 3.5 to 4.0! I use the whitelist from puremagic and in the past 2.5 years I have also added another

Re: Webservers with Terrabytes of Data in - recomended setups

2007-04-20 Thread Bob Beck
Bullshit. just use NFS :) -Bob * Steven Harms [EMAIL PROTECTED] [2007-04-19 17:01]: This isn't an OpenBSD specific solution, but you should be able to use an EMC san to accomplish this (we use a fiber channel setup) On 4/19/07, Stuart Henderson [EMAIL PROTECTED] wrote:

Re: spamd - good job!

2007-04-20 Thread Bob Beck
features? I'm actually running a February snapshot (early 4.1 beta) if that makes a difference; this is considered living on the edge for me. At 12:59 PM 4/20/07, Bob Beck wrote: Thanks. 4.1 has some major changes too, so bear in mind spamd wise it's a big change from 4.0

Re: Mail Server (seeking recommendations)

2007-04-14 Thread Bob Beck
We have settled on what software to use for everything but the mail server. I'm reasonably happy using the Courier-MTA suite on OpenBSD. It's had four reported vulnerabilities (http://secunia.com/product/2557/?task=advisories), three DOS and one remote-code-execution in a corner case

Re: using spamd to block outbound spam

2007-04-14 Thread Bob Beck
You are going about this all wrong. First step is finding a suitable blunt instrument and getting the developers to fix it. The second step is configuring rate limiting, along the lines of '1000 mails/hour'; this will allow a large batch of e-mail to get through immediately, but stop

Re: using spamd to block outbound spam

2007-04-14 Thread Bob Beck
* Paolo Supino [EMAIL PROTECTED] [2007-04-14 08:43]: Hi Kyle 1. Fixing the code is impossible :-( I already tried it, the developers keep saying that they're code is sound and safe. I've shown logs and statistics to the bosses of the company that owns the webapp, but the only response I

Re: using spamd to block outbound spam

2007-04-13 Thread Bob Beck
* Paolo Supino [EMAIL PROTECTED] [2007-04-12 22:12]: Hi I have the following problem: I host a group of windows servers that run a webapp using IIS6 ASP technology. The webapp was written and is maintained by a small private company that develops custom webapps for companies. One of

Re: Text about openbsd's security technology

2007-03-23 Thread Bob Beck
* Rafael Almeida [EMAIL PROTECTED] [2007-03-23 14:52]: I'm aware that OpenBSD's developers create new technology for making the exploiter's life harder. On the OpenBSD site I could find a list of some of those kinda features (following this paragraph). Yet, I could not find any article

Re: Microsoft gets the Most Secure Operating Systems award

2007-03-22 Thread Bob Beck
Siju George wrote: Hi, http://www.internetnews.com/security/article.php/3667201 Just for some entertainment, no troll :-) --Siju IMHO it's not a fair comparison, most linux distributions ship with alot more software than microsoft windows does, and most bugreports indicate an

Re: Saving memory on small machines

2007-03-22 Thread Bob Beck
* Artur Grabowski [EMAIL PROTECTED] [2007-03-22 10:32]: Kamil Monticolo [EMAIL PROTECTED] writes: # ls -lhS /usr/lib/libcrypto*a -r--r--r-- 1 root bin 11.7M Mar 22 13:53 /usr/lib/libcrypto_pic.a -r--r--r-- 1 root bin 11.6M Mar 22 13:53 /usr/lib/libcrypto_p.a -r--r--r-- 1 root

Re: USB Printer Recommendation

2007-03-21 Thread Bob Beck
Although this seems like a great printer, my biggest limitation is price. We have a university property disposition near me, which I'm going to go check out later today. My friend has gotten a couple sun sparc stations from them for under $20 bucks. I'm hoping they will have some cheap

Re: USB Printer Recommendation

2007-03-21 Thread Bob Beck
* Darrin Chandler [EMAIL PROTECTED] [2007-03-21 11:30]: On Wed, Mar 21, 2007 at 10:27:40AM -0600, Bob Beck wrote: LexMark C510 laser. Color, ethernet, postscript. $325 CDN 6 months ago just works. I've had nothing but pain and aggravation with bullshit inkjets. Was that new

Re: USB Printer Recommendation

2007-03-21 Thread Bob Beck
* James Turner [EMAIL PROTECTED] [2007-03-21 00:11]: I'm looking to finally cut the last strand that keeps windows on my hard drive. I currently have a brother mfc-210c printer. I'm looking to replace it with a cheap openbsd/lpr friendly solution. Although the mfc is a multifunction

Re: is the Thinkpad T30 supported?

2007-03-20 Thread Bob Beck
I have a T30. pretty much everything works on it and very well, it suspends and resumes again. It would be a good choice for a used laptop. -Bob * Igor Sobrado [EMAIL PROTECTED] [2007-03-20 03:19]: Hello. I am looking for a laptop to replace my old, but excellent,

Re: Daylight savings fix with OpenNTPD

2007-03-20 Thread Bob Beck
* Bray Mailloux [EMAIL PROTECTED] [2007-03-20 13:33]: Have a patch been issued? Yes. see the errata page It might just be the time servers, but date is reporting 11:04:31 when it is 12:05. It aint the time servers they report in UCT. Your timezone is wrong

Re: NOOP and Spamd

2007-03-19 Thread Bob Beck
* Sid Carter [EMAIL PROTECTED] [2007-03-19 03:25]: Regardless, if NOOP is in the SMTP standard, and spamd does not handle it correctly, that is a bug that needs to be fixed. Bullshit. that's not a good enough reason - spamd does not implement all of smtp, and never will. saying it's

Re: Is OpenBSD VuXML broken?

2007-03-17 Thread Bob Beck
* Siju George [EMAIL PROTECTED] [2007-03-17 13:45]: Hi, The latest entry in http://www.vuxml.org/openbsd/ is 2006-01-10clamav -- heap overflow in the UPX code more than a year now? Certainly looks that way. is there any other place to get updated RSS feed for the

Re: warning Yet Another Inane Post or every six month wierdness on misc@ list

2007-03-17 Thread Bob Beck
* Diana Eichert [EMAIL PROTECTED] [2007-03-17 08:39]: I don't know what's worse, the junky posts from people who come out of the woodwork around release dates or the Two chick f/cking in wild orgy \ Normalize your Cholesterol \ mature blonde milf f/cking hardcore s/cking \ Time is running

Re: OpenBSD 4.1 Pre-Orders...

2007-03-17 Thread Bob Beck
* Sunnz [EMAIL PROTECTED] [2007-03-16 20:50]: I don't live in US Canada nor Europe... but I am worried if I ordered From North America to anywhere worldwide, would the CD have the lack of built-in cryptography due to the US Export laws? Hate to tell you this, but Canada is not the

Re: OpenBSD 4.1 Pre-Orders...

2007-03-17 Thread Bob Beck
* Bryan Allen [EMAIL PROTECTED] [2007-03-17 16:22]: On Mar 17, 2007, at 4:12 PM, Bob Beck wrote: Hate to tell you this, but Canada is not the United States. Give us a couple years. Pax Americana, yo. Nah, at the rate it's going in a couple years your deficit and dollar won't

Re: No Blob without Puffy

2007-03-16 Thread Bob Beck
* Karel Kulhavy [EMAIL PROTECTED] [2007-03-16 12:20]: Is it true that Puffy is not here because of Theo's concerns about his copyrighted Puffy logo? http://misc.allbsd.de/Kampagnen/NoBlob/NoBlob-en-Poster.jpg Hunh? a No Blob poster with FreeBSD on it? that's a fucking joke. they're the

Re: Greytrapper and invalid source addresses (rfc822)

2007-03-14 Thread Bob Beck
Your problem is that you are running the greytrapper script for 4.0 on 4.1 - the spamdb database has changed - there is a new field in the spamdb output. you should not run that old greytrapper script on 4.1 spamd. -Bob * Jeff Ross [EMAIL PROTECTED] [2007-03-14 09:55]:

Re: spamd and MailEnable mta problems

2007-03-11 Thread Bob Beck
Guess this is a MailEnable bug, but maybe anyone has the possibility to test if this patch helps to workaround the problem. This is completely a mailenable bug and should be reported to them. They are assuming that the sending mta can always send the numeric code as one byte. in fact,

Re: Stanford SRP auth.

2007-03-08 Thread Bob Beck
* Johan P. Lindstrvm [EMAIL PROTECTED] [2007-03-08 05:25]: The Stanford SRP Authentication Project The Secure Remote Password protocol is the core technology behind the Stanford SRP Authentication Project. The Project is an Open Source initiative that integrates secure password

Re: authpf - update user rules without kicking them out

2007-03-08 Thread Bob Beck
# cat /etc/authpf/users/cyoub/authpf.rules external_if = bge0 internal_if = bge1 pass in quick on $external_if from $user_ip to 172.16.0.0/22 pass in quick on $external_if from $user_ip to 172.16.4.0/22 pass in quick on $external_if from $user_ip to 172.16.8.0/22 -- I add this after I

Re: a few questions on spamdb

2007-03-08 Thread Bob Beck
* Tom Bombadil [EMAIL PROTECTED] [2007-03-08 19:39]: I'm currently going in to test some new stuff that will fix this problem. so as theo said. wait a few days.. damn... you guys rock! Will it be something in the lines of pfsync? Yes. go read undeadly. -Bob

Re: yelp...bit screwed, cyrus-imap not starting after switch to 64bit

2007-03-05 Thread Bob Beck
* Paul Pruett [EMAIL PROTECTED] [2007-03-05 07:04]: Okay, sorry to pester list, but I jumped and fell short on an active mail machine, about 6 hours ago. I knew doing this on a cyrus-imapd server was insane I Upgraded from i386 openbsd 4.0 to amd64 openbsd 4.0 So if someone

Re: amusing greylisting HELO/EHLO identification side-effect

2007-02-28 Thread Bob Beck
* Marco S Hyman [EMAIL PROTECTED] [2007-02-27 19:27]: I found it highly amusing that as a result of runnig the latest spamd in greylisting mode with this change Make spamd include the HELO/EHLO identification string sent by the connecting hosts in the tuple key when greylisting. catches

Re: a few questions on spamdb

2007-02-28 Thread Bob Beck
* Tom Bombadil [EMAIL PROTECTED] [2007-02-28 12:59]: I wonder how people are coping with master downtime when using spamd? Is it a good idea to regularly dump spamd-white into a file, rsync it to the backup carp server, and load these IPs in a separate table? I was thinking of lowering

Re: kadmin problem

2007-02-27 Thread Bob Beck
* RJ45 [EMAIL PROTECTED] [2007-02-27 02:40]: actually i just need ssh kerberos authentication but the problem is that using ssh kerberos authentication I got an error upon autghentication Feb 26 21:42:54 bastionbox1 krb5: verify: Server not found in Kerberos database Feb 26 21:42:54

Re: Concerning Filesystem Mini-Hackathon and faster kernel building (distcc)

2007-02-27 Thread Bob Beck
It was just targeted at THIS particular issue and the future ideas to continue making OpenBSD (development) better/more fun. And by detracting from the important issue which is: * We need gear in europe for f2k7 * You manage to sidetrack something important with your hack. So in

Re: spamd-white

2007-02-27 Thread Bob Beck
* Tom Bombadil [EMAIL PROTECTED] [2007-02-27 15:09]: Greetings... By any chance, will spamd delete any IPs that I add manually to spamd-white? Yes. spamd(8) says: spamd regularly scans the /var/db/spamd database and configures all whitelist addresses as the spamd-white pf(4)

Re: CUPS

2007-02-24 Thread Bob Beck
* Tang Tse [EMAIL PROTECTED] [2007-02-24 04:38]: Hi, Thanks for your answear. So best i use linux for a printer server? No, I've used the CUPS/ghostscript mashups to attempt to make hundred dollar inkjets work on linux. similarly handbuilt them on openbsd. neither with any reliable

Re: spamd unnecessarily abrasive?

2007-02-20 Thread Bob Beck
I was thinking the exact same thing. A number of our customers use the ability to customize their SMTP banner via our products in order to avoid some very basic system identification by spammers (Cisco PIX does this too for instance, but in a very broken and disruptive way). It

Re: spamd unnecessarily abrasive?

2007-02-20 Thread Bob Beck
i have seen a number of spammer outfits doing this: following the RFC and retrying until the spam gets though and they're whitelisted, then they're free to push crap through. any thoughts on how to best combat this behavior besides spamassassin + amavisd (i.e. wasting cpu cycles and

Re: spamd - SPEWS status

2007-02-05 Thread Bob Beck
* smith [EMAIL PROTECTED] [2007-02-01 17:15]: On Thu, 01 Feb 2007 15:38:37 -0500, Daniel Ouellet wrote May be if there was a way to distribute one own addition only may be a good idea as then we could merge traplist from multiple locations if one wants to do this. I wouldn't have any

Re: How to create /var/db/spamd

2007-02-05 Thread Bob Beck
it is created automatically by spamd when you run it in greylisting mode -Bob * Vijay Sankar [EMAIL PROTECTED] [2007-02-02 10:34]: How can /var/db/spamd be created? I went through spamd.conf(5), pfctl(8), spamd-setup(8), spamdb(8), spamlogd(8) etc. and did not see it

Re: Idea for additionnal funding

2007-01-29 Thread Bob Beck
And the other thing people forget who try to helpfully set us up a 501(c) in the US is that most of our expenses are *NOT* in the united states. and a 501(c) has to spend most of it's money in the united states. This is not helpful to us. A Canadian solution is in the works.

Re: http load balancing with pf (apache access log)

2007-01-29 Thread Bob Beck
* Marian Hettwer [EMAIL PROTECTED] [2007-01-29 09:49]: Hi OpenBSD'lers, I'm about to use OpenBSD's pf(4) for load balancing some webservers. So far, everything is looking just perfect. Compared to pound, pf(4) is incredibly fast with few CPU and memory usage. So I'd say: Thats great :)

Re: Idea for additionnal funding

2007-01-29 Thread Bob Beck
* Jack J. Woehr [EMAIL PROTECTED] [2007-01-29 11:49]: On Jan 29, 2007, at 9:00 AM, Bob Beck wrote: a 501(c) has to spend most of it's money in the united states. This is not helpful to us. A Canadian solution is in the works. Hmm, that must be a 501(a) :-) you mean 501

Re: Is Theo still hiking ????

2007-01-27 Thread Bob Beck
Yes, theo is still hiking, although I'm quite surprised that the usual pack of idiots on misc@ can't contribut adequatly to comic relief - in my experience they are usually much funnier than theo. -Bob * Allie Daneman [EMAIL PROTECTED] [2007-01-26 22:59]: Is Theo still hiking,

Re: Greyscaner question

2007-01-17 Thread Bob Beck
1) I don't have enough information to tell what you are asking. show the real logs. 2) greyscanner is not part of openbsd - it is a proof of concept piece written by me, so you should probably ask me directly (with full logs) rather than asking the list. -Bob * Ramdas [EMAIL

Re: greylisting

2007-01-09 Thread Bob Beck
Sounds to me like your pf rules and/or bridge setup are not set up correctly to allow the connections to be redirected. -Bob * Stephen Schaff [EMAIL PROTECTED] [2007-01-08 18:52]: tail -f /var/log/daemon shows: Jan 8 02:23:38 spamd spamd[4966]: listening for incoming

Re: spam story

2006-12-14 Thread Bob Beck
is there any way to work around users like this besides not whitelisting outbound mail? a spamlogd blacklist of users that do not have the outbound mail IPs whitelisted is a thought, but maybe not the right idea. Actually, come to think of it, if I could get away with it, I'd

Re: Is it safe to use group 'users' in /etc/group?

2006-12-06 Thread Bob Beck
* Stas Myasnikov [EMAIL PROTECTED] [2006-12-06 11:57]: Hello, is it safe to use group 'users' from /etc/group as the login group for the users? Or it is reserved for some system use? While I actually believe it is safe on OpenBSD, I never give users groups from the system groups

Re: problem with spamd-white table and greylisting

2006-12-06 Thread Bob Beck
[private email from bob saying you've screwed up, show me this] [public reply spewing output to list.] Obviously you still have a configuration problem, but if I contact you in a private email to sort out your problem because I am willing to help you, and you then start spewing the

Re: pf load balancer and server health

2006-11-30 Thread Bob Beck
* Miguel [EMAIL PROTECTED] [2006-11-30 16:41]: Hi, how can i check the servers' health and delete a server from the pool when it loses connection with the load balancer, is such thing posible? thanks http://www.ualberta.ca/~beck/nycbug06/scripts/sslchecker is set up for checking an ssl

Re: Which tools the OpenBSD developers are using?

2006-11-28 Thread Bob Beck
* Alvaro Mantilla Gimenez [EMAIL PROTECTED] [2006-11-28 14:03]: Hi OpenBSD developers, Which are your preferred tools for develop? (For C, C++, Java, etcno matter the language) Visual C++, .NET, and C sharp of course. Theo mandates taht we all to use only the 7337est

Re: spamd [-c maxcon]

2006-11-28 Thread Bob Beck
spamd(8) says the default is 800, which is actually a compiled-in limit and is quite generous for most situations. The consequences of raising it are not immediately obvious, but I imagine could be entertaining. because if you go much beyond it you need to consider things like

Re: webmail

2006-11-23 Thread Bob Beck
All webmail products suck. I am using horde in one location and squirrelmail in another. -Bob * Jasper Bal [EMAIL PROTECTED] [2006-11-23 07:48]: Anyone using webmail on OpenBSD? What's good, what's not? Jasper -- #!/usr/bin/perl if ((not 0 not 1) != (! 0 ! 1)) {

U of A havin network issues...

2006-11-18 Thread Bob Beck
this means that access to ftp. and www. will suck. we're busy trying to fix. thank you for your patience. -Bob -- #!/usr/bin/perl if ((not 0 not 1) != (! 0 ! 1)) { print Larry and Tom must smoke some really primo stuff...\n; }

Re: Wild card greytrapping setup in spamdb

2006-11-14 Thread Bob Beck
Hi Daniel, I don't do this in spamd at the moment, because I want to keep spamd small and secure, and regex code is amazingly big and scary. have a look at my prototype greylist scanner from my nycbug talk for a way to do this. -Bob * Daniel Ouellet [EMAIL PROTECTED]

Re: spamd

2006-11-07 Thread Bob Beck
No, not yet. see http://www.ualberta.ca/~beck/nycbug06/spamd/ * edgarz [EMAIL PROTECTED] [2006-11-07 01:54]: Hi misc! Is it possible to keep in sync two or more spamdb over the network? :) Thanks. Edgars. -- #!/usr/bin/perl if ((not 0 not 1) != (! 0 ! 1)) { print Larry

Re: proposed patch for ifconfig(8) man page

2006-11-07 Thread Bob Beck
* Jason McIntyre [EMAIL PROTECTED] [2006-11-07 11:25]: On Tue, Nov 07, 2006 at 06:52:19PM +0100, Igor Sobrado wrote: Can I suggest adding atalk(4), inet6(4), ipsec(4), pf(4), pflog(4), eon(5), hostapd(8), and tcpdump(8) to the SEE ALSO section of ifconfig(8)? I think that, as these

Re: Large scale deployments

2006-11-03 Thread Bob Beck
* Michael Lockhart [EMAIL PROTECTED] [2006-11-02 18:33]: All, Wrap your bloody lines! Here's a question that I wanted to pose to the OpenBSD community about managing and maintaining a large number of OpenBSD systems in the field. To provide some background, we currently have

Re: krb5 login help

2006-10-24 Thread Bob Beck
I'm trying to configure 3.9 to authenticate against a Kerberos 5 realm. Kerberos is correctly configured (I can get a ticket via kinit). I've created a new user class and assigned krb5-or-pwd authentication (relevant portion of login.conf is below). I assigned a user to the class and

Re: krb5 login help

2006-10-24 Thread Bob Beck
that is of the form host/[EMAIL PROTECTED] How your campus kerberos admins choose to do this I wouldn't know, sorry, you'll have to break down and ask them. -Bob * Donald J. Ankney [EMAIL PROTECTED] [2006-10-24 14:27]: On Oct 24, 2006, at 12:29 PM, Bob Beck wrote: Did you give the wee

Re: Spamd - whitelist of mis-behaving SMTP server POOLS

2006-10-20 Thread Bob Beck
I am 99% sure that I have seen on the internet SOMEWHERE a whitelist of servers that are like this. I thought Bob Beck had forwarded one at one point in time, but I can only find his post regarding the tarfile he maintains for the zombie hosts. Bob, if you are listening, what do you do

Re: Is doing a network restore from bsd.rd at all possible?

2006-10-19 Thread Bob Beck
My typical way to do his is find my latest dump(s) on tape or elsewhere - chuck them on an nfs server accesible to the machine to be restored, boot from bsd.rd, mount the nfs location with the dump files and proceed. -Bob * Michal Soltys [EMAIL PROTECTED] [2006-10-19 09:19]: So

Re: Happy Birthday OpenBSD!

2006-10-18 Thread Bob Beck
Theo president ! :) What an interesting idea. I would vote for him... I wouldn't, and I count him as a friend. The president is a puppet whore of special interest groups and shitheads, made to manipulate to the lowest common denominator so the USA gets the government it

Re: spamdb man page - greytrap address

2006-10-17 Thread Bob Beck
Should the man page be updated, or am I doing something wrong? Both. Know what shell you are running and know if it eats and in a string. Having said that it's nicer if the man page makes you not have to think. I've changed it to single quotes in the example. -Bob

Re: 421 error on ftp.openbsd.org

2006-10-13 Thread Bob Beck
Hi gang, we've had a machine failure here that's impacting ftp.openbsd.org. We are working on correcting the problem. Please be patient. -Bob Beck * Uwe Dippel [EMAIL PROTECTED] [2006-10-13 02:31]: Trying to download the latest patches, I have been getting this error

Re: 421 error on ftp.openbsd.org

2006-10-13 Thread Bob Beck
421 There are too many connected users, please try later. Hi gang, we've had a machine failure here that's impacting ftp.openbsd.org. We are working on correcting the problem. Please be patient. Problem now fixed. sorry for the inconvenience everyone. -Bob --

Re: Swedish speakers -- OpenBSD and IBM Tivoli TSM BA

2006-10-13 Thread Bob Beck
While I'm mildly terrified, if it actually works perhaps shit should be a port with a linux-lib dependency? There is a use for this if someone is up to building it. * ropers [EMAIL PROTECTED] [2006-10-12 16:27]: For the benefit of the archives: I also did touch /emul/linux/etc/mtab

Re: Swedish speakers -- OpenBSD and IBM Tivoli TSM BA

2006-10-13 Thread Bob Beck
It appears, though I've not done more than take a quick glance, that this product can back up from NFS exports. If so, that might be the least hackish solution. Sorry to appear lazy, but do you remember where you saw that? IMHO IBM's Tivoli documentation is all over the place, that's why I

Re: blurb blurb

2006-10-12 Thread Bob Beck
We, the authors of this work, are giving it away to you, dear reader (and to everyone else), as an opportunity, not as a service. Do with it whatever you want. We welcome your contributions, and we owe you nothing. This fails to grant the rights explicitly identified

Re: Swedish speakers -- OpenBSD and IBM Tivoli TSM BA

2006-10-12 Thread Bob Beck
Hi. I happen to also run Tivoli/TSM. As far as I know there is no native OpenBSD Tivoli client. and for disaster recovery purposes (if that's all you are using it for) you don't really need one - the tivoli client does object by object (read that - file by file) backup

Re: /etc/motd SHA1 checksum keeps changing

2006-10-10 Thread Bob Beck
* Tobias Weisserth [EMAIL PROTECTED] [2006-10-09 16:39]: AIDE keeps reporting a change in the SHA1 checksum of /etc/motd. Even ... I did a thorough check of the system and didn't notice any funny Well, you may not have noticed anything funny, but what you're seeing is normal.

Re: OLPC

2006-10-10 Thread Bob Beck
How so? They've both been clear about what they want and what they stand for. Every book is new until one has read it. It's interesting to see the different take these two crusaders have on the firmware. How so? that RMS is ranting about another undoable unmaintainable

Re: Letter to OLPC

2006-10-06 Thread Bob Beck
if they want to fix third world countries they should start with the governments, this seems more like a marketing excercise Unfortunately, fixing the government while maintaining the universal democracy that is practically insisted upon by the USA as world uber-cop makes that a very

Re: The new 4.0 song(s)

2006-10-05 Thread Bob Beck
Thoroughly enjoyed the bonus track. Ty's ramblings reminded me of Ruby Rhod's in Luc Besson's The Fifth Element. Ty as Ruby.. OMG, you just made me lose my coffee. can't wait to tell him that one although theo will beat me to it :) -Bob

Re: Letter to OLPC

2006-10-05 Thread Bob Beck
* Travers Buda [EMAIL PROTECTED] [2006-10-05 14:56]: It sure seems that OpenBSD and a few others with the FSF are the last bastions of freedom. I guess no one else understands how it serves their interests to demand openness. Was it always this way or have we somehow lost the picture?

Re: Letter to OLPC

2006-10-05 Thread Bob Beck
In a private reply to my initial mail Jim Gettys (OLPC / Red Hat) said: Free and open software is a means to an end, rather than the sole end unto itself for OLPC. I was totally stunned by this admission. morally bankrupt, as Bob says, is exactly what is going on. I

Re: Letter to OLPC

2006-10-05 Thread Bob Beck
* Jack J. Woehr [EMAIL PROTECTED] [2006-10-05 16:03]: Free and open software is a means to an end, rather than the sole end unto itself for OLPC. I was totally stunned by this admission. morally bankrupt, as Bob says, is exactly what is going on. Hmm, sounds like you are

<    1   2   3   4   5   >