Re: I predict Theo De Raadt will have a nervous breakdown in the near future.

2005-08-16 Thread Rod.. Whitworth
On Tue, 16 Aug 2005 21:00:48 -0500, Marco Peereboom wrote: I predict that you are a moron. On Aug 16, 2005, at 7:47 PM, Anon Y. Mous wrote: Hi: Based on the vituperative replies to questions posted on misc@openbsd.org by Theo, I think he is either very insecure about his status as

Modifying man pages and composing new ones

2005-08-21 Thread Rod.. Whitworth
What format(s) are acceptable for submitting minor changes to man pages? I assume unified diff - but against what? The man page as distributed (e.g. in /usr/share/man/cat?/ ?) or the file that produced that? If the file should be the one input to the -mdoc process, where can it be found? I guess

Re: Modifying man pages and composing new ones

2005-08-21 Thread Rod.. Whitworth
On Sun, 21 Aug 2005 10:22:46 +0100, Stuart Henderson wrote: --On 21 August 2005 17:44 +1000, Rod.. Whitworth wrote: What format(s) are acceptable for submitting minor changes to man pages? The few I've submitted have been to the input files, in the hope that it gives jmc@ less to do by hand

Re: Modifying man pages and composing new ones

2005-08-21 Thread Rod.. Whitworth
On Sun, 21 Aug 2005 11:01:36 +0100, Jason McIntyre wrote: On Sun, Aug 21, 2005 at 05:44:56PM +1000, Rod.. Whitworth wrote: What format(s) are acceptable for submitting minor changes to man pages? I assume unified diff - but against what? The man page as distributed (e.g. in /usr/share/man

OT - Zombied ?

2005-08-22 Thread Rod.. Whitworth
Is undeadly.org nailed to the same perch as the Norwegian Blue? (Just resting!) or has it succumbed to a Central American interpretation of its name? I miss my morning hit... From the land down under: Australia. Do we look umop apisdn from up over? Do NOT CC me - I am subscribed to the

Re: OT - Zombied ?

2005-08-23 Thread Rod.. Whitworth
On Mon, 22 Aug 2005 22:45:37 -0600, Chris Kuethe wrote: On 8/22/05, Siju George [EMAIL PROTECTED] wrote: On 8/23/05, Rod.. Whitworth [EMAIL PROTECTED] wrote: Is undeadly.org nailed to the same perch as the Norwegian Blue? (Just resting!) or has it succumbed to a Central American

Re: 3.8 beta requests

2005-08-23 Thread Rod.. Whitworth
On Tue, 23 Aug 2005 01:37:12 -0600, Theo de Raadt wrote: We are heading towards making the real 3.8 release soonish. I was wondering, when can we start pre-ordering our cd-sets? We normally setup pre-orders 1 month before. We might do it a bit earlier... dunno. But it is hard to do when

Re: BSD PPPoA Hardware

2005-08-25 Thread Rod.. Whitworth
On Thu, 25 Aug 2005 15:28:36 +1000, Shane J Pearson wrote: Hi Jared, On 25/08/2005, at 1:55 PM, jared r r spiegel wrote: the thread has kinda gone this way already, but i believe the only way you can get true i don't have NAT on PPPoA, outside of getting a business class service

Re: routing question - why one way?

2005-09-01 Thread Rod.. Whitworth
On Thu, 1 Sep 2005 01:01:08 -0400, Bill wrote: OBSD 3.7 - new install I am building a router. And I am having a routing problem. I am not doing any packet filtering, NAT or anything... its all strictly private address space nets I also most definately have ip forwarding set in sysctl Right

Re: Fw: Re: routing question - why one way?

2005-09-01 Thread Rod.. Whitworth
On Thu, 1 Sep 2005 08:11:28 -0400, Bill wrote: Date: Thu, 1 Sep 2005 08:09:24 -0400 From: Bill [EMAIL PROTECTED] To: Rod.. Whitworth [EMAIL PROTECTED] Subject: Re: routing question - why one way? On Thu, 01 Sep 2005 16:36:13 +1000 Rod.. Whitworth [EMAIL PROTECTED] wrote: On Thu, 1 Sep 2005 01

Re: routing question

2005-09-06 Thread Rod.. Whitworth
On Tue, 6 Sep 2005 15:25:29 -0500, John Brooks wrote: My office network has an adsl connection with a single static ip as follows: 209.145.160.141/24 (gw 209.145.160.1) I requested additional ip's from my provider and they gave me 8 addresses at: 207.246.198.216/29 They are routing

Random reboots with 3.8 beta i386 on multiple boxes

2005-09-11 Thread Rod.. Whitworth
I have been running 3.7snaps and 3.8beta snaps for a while for testing. Build #111 seemed stable enough here that I put onto some low utilisation boxes in the field and onto a Soekris 4801 here just to get a bit more exposure. I started to get reports of machines randomly rebooting and my 4801

Re: Random reboots with 3.8 beta i386 on multiple boxes

2005-09-12 Thread Rod.. Whitworth
On Mon, 12 Sep 2005 15:15:57 +1000 (EST), Damien Miller wrote: On Mon, 12 Sep 2005, Rod.. Whitworth wrote: Any clues/ things to try? I am a bit worried about the build #137 as that's pretty close to release but I haven't heard anybody else reporting problems and the archives don't show any

PPP through console of Soekris 4801

2005-09-16 Thread Rod.. Whitworth
I have a need to access a remote Soekris in two ways. First a console login for admin purposes and secondly for a DBA to use RDP to access SQLserver on a win 2k3 behind the firewall. On the face of it I could log in as Rod and have shell access, even reboot viewing. Good! Love that. Then DBA

Re: PPP through console of Soekris 4801

2005-09-17 Thread Rod.. Whitworth
On Fri, 16 Sep 2005 20:02:21 -0700, J.C. Roberts wrote: On Sat, 17 Sep 2005 09:39:26 +1000, Rod.. Whitworth [EMAIL PROTECTED] wrote: I have a need to access a remote Soekris in two ways. First a console login for admin purposes and secondly for a DBA to use RDP to access SQLserver on a win 2k3

Re: pf, dfd_keeper, and dynamic firewalls

2005-09-17 Thread Rod.. Whitworth
On Sat, 17 Sep 2005 04:35:18 -0500, Travis H. wrote: You can find it here: http://www.lightconsulting.com/dfd/dfd_keeper/ Uhhh? === Not Found The requested URL /dfd/dfd_keeper was not found on this server. === From the land down under: Australia. Do we look umop apisdn from up over? Do NOT CC

Re: PPP through console of Soekris 4801

2005-09-17 Thread Rod.. Whitworth
On Sat, 17 Sep 2005 11:40:42 +0100, Stuart Henderson wrote: --On 17 September 2005 09:39 +1000, Rod.. Whitworth wrote: My question is: Will this be a relaible set-up for both purposes? Usually we have the console port running 9600 no handshakes. I'll bet RDP looks very sad on that setting

Re: pf, dfd_keeper, and dynamic firewalls

2005-09-17 Thread Rod.. Whitworth
On Sat, 17 Sep 2005 13:09:52 +0200, Tobias Ulmer wrote: http://www.lightconsulting.com/~travis/dfd/ And we should have to google, why? I can't be bothered if the author can't be bothered to get his own URL correct. That page said, inter alia, : First set your umask to something sensible so that

Re: Wireless Strangeness

2005-09-20 Thread Rod.. Whitworth
On Tue, 20 Sep 2005 12:49:16 +0100, Stuart Henderson wrote: --On 19 September 2005 20:24 -0400, Alex Kirk wrote: wi0 at pci0 dev 12 function 0 National Datacomm Corp NCP130 Rev A2 rev 0x01: irq 9 wi0: PRISM2 HWB3163 rev.B, Firmware 0.3.0 (primary), 1.7.1 (station), address

Re: Time limited internet connection

2005-09-24 Thread Rod.. Whitworth
On Sat, 24 Sep 2005 13:29:18 +0300, Kiraly Zoltan wrote: I want to build a home network using OpenBSD as gateway. A child in network have a computer, and like to surf the Internet. I want to drop her Internet connection at night (11:00AM) because the child don't go to sleep. 11 AM at night is

ASUS P4S800-MX mobo runs (seemingly fine) won't reboot on command.

2005-09-26 Thread Rod.. Whitworth
Well, it reboots using the reset button. # halt gets the usual strings, I hit a key, it says rebooting but it doesn't. # reboot hangs forever at the same point (why did I think it might be otherwise? - desperation?) I grabbed some Linux live-cd it did the same thing. Tech support for ASUS is

Re: stubid litte speaker beep that doesn't stop

2005-09-28 Thread Rod.. Whitworth
On Wed, 28 Sep 2005 13:03:11 +0200, Didier Wiroth wrote: Hi, Thanks for replying The brand is: foxconn type is: 915A03-20-P-8KS I had a look in the bios but could not find something related to the speaker. thx didier -Original Message- From: Christer Solstrand Johannessen

Re: stubid litte speaker beep that doesn't stop

2005-09-28 Thread Rod.. Whitworth
On Wed, 28 Sep 2005 13:53:17 +0200, Didier Wiroth wrote: Do I follow the etiquette correctly? I didn't see a dmesg anywhere. That is a guarantee of one of two things: a you will be ignored because you look ignorant. or b you will be treated to strong language to encourage better behaviour in the

Re: One time passwords?

2005-09-28 Thread Rod.. Whitworth
On Wed, 28 Sep 2005 08:20:50 -0700, Donald J. Ankney wrote: On Sep 27, 2005, at 11:37 PM, Jurjen Oskam wrote: On Tue, Sep 27, 2005 at 11:36:22PM -0500, C. Bensend wrote: 1) Log into system via ssh skey, which is a one-time auth method 2) Type 'sudo farfegnugen blahblah yadda' 3) Log out

Re: Migration to PF - some questions

2005-10-01 Thread Rod.. Whitworth
On Sat, 1 Oct 2005 04:43:40 -0500, Travis H. wrote: In pf nat rules also the first match wins __but__ in pf filter rules the __last__ match wins. In fact that is the one thing I don't like in pf, but to have a first match win you can use the magic word quick in all your pass and block rules.

Re: USB to RS232

2005-10-07 Thread Rod.. Whitworth
On Fri, 7 Oct 2005 12:07:29 +0200, Eric Dillenseger wrote: Hi, I'll soon buy a soekris, but just realized i have no serial port on my laptop (duh!), has someone already tried to use a usb serial adapter? Most of the time this works as a traditional com port on windows, but what about openbsd,

Re: Sun Ultra 5 as a firewall?

2005-10-07 Thread Rod.. Whitworth
On 07 Oct 2005 18:07:30 -0700, Byron Morton wrote: Well, I have successfully run my Ultra5 (270ghz) as a natting firewall with caching dns, apache, ices, mysql, php(6 dynamic sites) sendmail w/auth smtp (also for the 6 domains) and never saw problems or bottlenecks. I ran it with the hme($ext_if

Re: Two Isp Fault Tollerance Help

2005-10-09 Thread Rod.. Whitworth
On Sun, 9 Oct 2005 15:04:42 +0300, nikns wrote: I have the same issue. Resolved it with ifstated. In OpenBSD 3.8 comes in base system. With pf switches route-to. my setup: ifstated.conf: $OpenBSD: ifstated.conf,v 1.6 2005/02/07 06:08:10 david Exp $ init-state primary net = '( ping -t 128 -q

Re: RAID for dummies

2005-10-10 Thread Rod.. Whitworth
On Mon, 10 Oct 2005 23:09:39 -0500, J Moore wrote: I want to set up an OBSD box as a file server for some Windoze boxes. I think a RAID 1 setup will provide sufficient reliability - and it appears to be the cheapest way to go. I don't desire to become an expert on RAID, I don't want to spend

Re: Blocking p2p via pf

2005-10-11 Thread Rod.. Whitworth
On Tue, 11 Oct 2005 20:24:01 -0400, Nick Holland wrote: David Elze wrote: Hi, I'm trying to block p2p traffic via pf on OpenBSD 3.x. Unfortunately, all new p2p-clients are able to use dynamic ports or even (ab-)use http-ports etc. so blocking well known p2p-ports is not enough. yep.

Re: OpenBSD Metastore: New kit, thanks

2005-10-14 Thread Rod.. Whitworth
On Fri, 14 Oct 2005 07:19:49 -0400, Matt Rowley wrote: what i can't really understand is, why bother making a tool like this, if you are afraid that it is going to be used, or that someone will ssh scan you from taiwan? so let's just block all the non us countries or what? I'm not afraid

Re: Guruness (was the bug report thread)

2005-10-18 Thread Rod.. Whitworth
On Tue, 18 Oct 2005 18:26:50 -0600, Wolfpaw - Dale Corse wrote: Before anyone reads further down .. I wish to invoke one of the points on the mailing list page: Respect differences in opinion and philosophy Intelligent people may look at the same set of facts and come to very different

Re: Large partition

2005-10-24 Thread Rod.. Whitworth
On Mon, 24 Oct 2005 11:42:45 +0200 (CEST), Beck Zoltan Gyula wrote: Hi! I would like to ask if it is possible to use a large, more than 2T diskarray or CCD? In FAQ: 14.7 - What are the issues regarding large drives with OpenBSD? OpenBSD supports an individual file system of up to 231-1, or

Re: Head command

2005-11-07 Thread Rod.. Whitworth
On Tue, 8 Nov 2005 03:11:43 -0300, Marcos Marconcini wrote: Hi, I am trying to extract a portion of a large file, to do a sha1 check, it's greater than 2.7Gb. I was reading help for head command, but it's only permit me put number of lines to extract, and I need to extract the portion of

Re: 3.6 caching resolver

2005-05-05 Thread Rod.. Whitworth
On Thu, 5 May 2005 10:31:56 -0700 (PDT), Brian W. wrote: Anyone else notice this performing slowly. I did a tcpdump and it appears localhost gets queried 2-3 times before a packet goes out. I see quite a few delays and some failures to resolve that work with one or two retries. I am using the

Atheros news

2005-05-05 Thread Rod.. Whitworth
Saw this today:http://www.internetnews.com/dev-news/article.php/3502786 Haven't found a licence yet to see how free it really is but it sounds like progress. Anyone know more/better ? From the land down under: Australia. Do we look umop apisdn from up over? Do NOT CC me - I am subscribed to

Re: File system mirroring for SMTP/POP Servers

2005-05-13 Thread Rod.. Whitworth
On Fri, 13 May 2005 16:43:42 +0200, kami petersen wrote: anyway, have you any good examples to throw back at me? No. I was merely interested why you specifically said that maildirs were *not* the choice for replication. and what you thought might be. I would be surprised if anybody thought

spamdb migration

2005-05-16 Thread Rod.. Whitworth
For a few weeks I have been running 3.7 release on a lab machine. Love it! It is time for me to change my firewall from 3.6 to get the benefit of the updates that 3.7 has but I have one little question: Can I copy /var/db/spamd to the new install so that I don't lose my grey/white data but can

Re: spamdb migration

2005-05-16 Thread Rod.. Whitworth
. -- Allie D. Allnix,LLC. http://www.allnix.net PGP Public key: http://www.allnix.net/ads_public_key Rod.. Whitworth said: For a few weeks I have been running 3.7 release on a lab machine. Love it! It is time for me to change my firewall from 3.6 to get the benefit of the updates that 3.7 has but I

hp DL360 Smart Array 6i

2005-05-19 Thread Rod.. Whitworth
The HP DL360 series servers come with a raid controller that I can only identify as a Smart Array 6i which is integrated into the motherboard. It doesn't show up on the HCL and googling for it with OpenBSD only found a vendor who also promotes OpenBSD but not the two in conjunction. I can't get

Re: hp DL360 Smart Array 6i

2005-05-19 Thread Rod.. Whitworth
On Thu, 19 May 2005 21:37:28 -0400, Steve Shockley wrote: Rod.. Whitworth wrote: I can't get my hands on one of these servers until Monday and my client who asked for a solution based on OpenBSD would like some idea of the probability of using the hotswap raid capability of the DL360

Re: how to ifconfig another ip address in a network device

2005-05-25 Thread Rod.. Whitworth
On Wed, 25 May 2005 15:09:35 -0700, wang fei wrote: i tried ifconfig xxx:1 inet xxx.xxx.xxx.xxxwhich worked at linux, but it doesn't work. I guess that man ifconfig doesn't work on Linux or you would have known to use it. Or maybe you just are not used to having on-line documents for nearly

Re: howto clean disks ?

2005-05-31 Thread Rod.. Whitworth
On Wed, 1 Jun 2005 07:36:22 +0200, Ed White wrote: Hi, I'm going to give away some old hard disks and I'm planning to delete/overwrite all the data on them. Is there any tool to make this automagically ? Thanks. dd From the land down under: Australia. Do we look umop apisdn from up over?

Re: Problems with CPU/ARCH specific compilation!?

2005-06-02 Thread Rod.. Whitworth
On Thu, 2 Jun 2005 12:06:05 +0200, Markus Kolb wrote: Do this owner offend you or even kick you out of his pub? No. You do it here. Unfortunately (thanks to the policy of freedom to post to these lists, even by idiots) you have not been thrown out. Offended? You? Never! One can't offend a

Re: OT: Programming portability

2005-06-19 Thread Rod.. Whitworth
On Sun, 19 Jun 2005 16:23:16 +1000, Darren Tucker wrote: Chris Zakelj wrote: I'm curious as to how programs actually get ported from one OS to another, Yes, some techniques make the job easier, but it depends on what the program does and whether you're doing a one-way port or an ongoing

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Rod.. Whitworth
On Mon, 20 Jun 2005 00:07:13 -0500, Dave Feustel wrote: On Sunday 19 June 2005 08:51 pm, Nick Holland wrote: Dave Feustel wrote: http://bs.somewhere.real.not This has nothing to do with OpenBSD. It isn't new. It isn't unique. In effect, you just spammed the list, advertising someone's

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Rod.. Whitworth
On Mon, 20 Jun 2005 16:36:28 +1000, Timothy A. Napthali wrote: You can't sell that bridge - I own it... :) Given your office address I'd bet you are keeping a close watch to see if I sell it again, too! ~|^ = From the land down under: Australia. Do we look umop apisdn from up over? Do NOT

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Rod.. Whitworth
On Mon, 20 Jun 2005 07:08:18 -0500, Dave Feustel wrote: On Monday 20 June 2005 06:36 am, Marc Espie wrote: On Mon, Jun 20, 2005 at 12:07:13AM -0500, Dave Feustel wrote: On Sunday 19 June 2005 08:51 pm, Nick Holland wrote: Dave Feustel wrote:

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread Rod.. Whitworth
On Mon, 20 Jun 2005 07:32:09 -0500, Dave Feustel wrote: On Monday 20 June 2005 01:32 am, Ben Hooper wrote: |I thought you had more insight. All of OpenBSD's security is |at risk with |this technology. | |The security features of an OS will not stop a physical attack, no |matter how well

Re: spamd greylisting and server pools

2005-06-21 Thread Rod.. Whitworth
On Tue, 21 Jun 2005 15:17:14 +0200, Heinrich Rebehn wrote: Hi all, I have configured spamd with greylisting on our OpenBSD Firewall and it works very well, spam went close to zero :-). There is one issue though that can cause long delay of mails: If a mail is sent via a server pool, it can

Re: SH programming

2005-06-26 Thread Rod.. Whitworth
On Sun, 26 Jun 2005 20:51:07 -0700, Peter Bako wrote: Hum, I get a syntax error: '*' unexpected IJWFM using sh or ksh on 3.7 i386 entering year and the calc line at the prompt and echoing $daycount at the prompt. -Original Message- From: Michael Erdely [mailto:[EMAIL PROTECTED] Sent:

Re: openbsd as basis for something better?

2005-06-27 Thread Rod.. Whitworth
On Mon, 27 Jun 2005 06:30:22 -0700, [EMAIL PROTECTED] wrote: What point are you trying to make here? I have 19 kernel hackers, 3 architects and 5 multimedia designers on my team so far. And I expect it to grow; as our codebase gradually inclines with our goal. Who haven't any code to show?

Re: WHAT KIND OF SH*T IS THIS: telnet and ssh

2005-07-02 Thread Rod.. Whitworth
On Sat, 2 Jul 2005 20:36:54 -0500, eric wrote: On Thu, 2005-02-17 at 17:47:31 -0500, Fafa Diliha Romanova proclaimed... whenever i telnet or ssh to something that's offline, i get e.g.: ssh: hostname.domain.com: hostname nor servname provided, or not known comeon, can't you guys at least

Hidden restore space on laptop drives

2005-07-04 Thread Rod.. Whitworth
I am about to be supplied with a Thinkpad r50e and I am sure that it will arrive with one monster C: thing that will fill the drive and that the drive will appear to be smaller than the label on it says due to the restore space that is hidden. I was able to do some work on a desktop drive a while

Re: links vs firefox vs ..

2005-07-13 Thread Rod.. Whitworth
On Wed, 13 Jul 2005 12:27:40 +0700, Neta wrote: Just curious! Could you show me some related paper that java script completely insecure? Just curious! Could you show me how Google did not supply you with an answer? 166000 hits 40400 if Internet Explorer excluded. Lazy boy! From the land down

Re: links vs firefox vs ..

2005-07-13 Thread Rod.. Whitworth
On Wed, 13 Jul 2005 16:16:10 +0700, Neta wrote: On 7/13/05, Rod.. Whitworth [EMAIL PROTECTED] wrote: On Wed, 13 Jul 2005 12:27:40 +0700, Neta wrote: Just curious! Could you show me some related paper that java script completely insecure? Just curious! Could you show me how Google did

Choices for Soekris disk drives

2005-07-15 Thread Rod.. Whitworth
I am about to implement some firewalls using Soekris 4801 systems. There are many good documents about using various ways to do this using CF and assorted RAM-drive etc methods. What I am looking for are comments from people who have tried some of these techniques and have experience on some

Re: ATH AR5212 hangs machine just after boot

2005-07-23 Thread Rod.. Whitworth
On Fri, 22 Jul 2005 14:46:46 +0100, Sevan / Venture37 wrote: I had the same problem, It turned out to be the whitelable oem Atheros card that I was using. http://www.mail-archive.com/misc@openbsd.org/msg04338.html Well my dmesg lines don't look like either set of yours BUT disabling 802.11a

Re: ATH AR5212 hangs machine just after boot

2005-07-23 Thread Rod.. Whitworth
On Sat, 23 Jul 2005 18:59:13 +1000, Damien Miller wrote: Rod.. Whitworth wrote: Well my dmesg lines don't look like either set of yours BUT disabling 802.11a didn't fix it but disabling 802.11g as well leaves me with a working 11b. After I paid for a brandname a/b/g, dammit! One day

Re: Disable IPv6 on 3.7

2005-07-25 Thread Rod.. Whitworth
On Tue, 26 Jul 2005 08:29:19 +0800, Russell J. Wood wrote: Yes, one can by commenting out `OPTION INET6' in the kernel configuration. You have the OP asking if he can disable it on OpenBSD 3.7 without building a custom kernel ? and you offer that really bright solution ? Just commenting it out

Ammunition needed to defend OpenBSD/pf

2005-08-02 Thread Rod.. Whitworth
Somebody sent me a query asking for a justification for my proposal to supply a firewall/router using OpenBSD when there was thsi device: http://www.dlink.com/products/?pid=327 , with all its claimed bells and whistles. Anybody know what, if anything, it does that an OBSD solution doesn't/

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Rod.. Whitworth
On Tue, 02 Aug 2005 22:54:22 -0500, Shawn K. Quinn wrote: On Tue, 2005-08-02 at 22:09 -0400, Jim Fron wrote: What it does that an OBSD solution can't is be low power, cheap, and bought off the shelf (maybe there are off-the-shelf suppliers of OBSD machines, but they aren't in every strip

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Rod.. Whitworth
On Wed, 3 Aug 2005 11:03:23 +0200, Paul de Weerd wrote: On Wed, Aug 03, 2005 at 10:30:25AM +0200, Alexander Farber wrote: | Hi, | | I have 1 argument for D-Link and against OpenBSD: | | D-Link can DSL. OpenBSD can not. So you have to | buy at least a DSL modem for OpenBSD. And since you | are

Re: timekeeping on Soekris net4801 w/ ntpd. 3.8

2005-11-19 Thread Rod.. Whitworth
On Sat, 19 Nov 2005 00:51:05 -0600, J Moore wrote: I agree that it's easy enough to do a search, and discover what ntpd is actually doing. That was actually accomplished within the first 2-3 responses to my OP - that was the easy part :) I now understand what the author *intended* in the log

Re: PF NAT Address Pool Source Interface

2005-12-06 Thread Rod.. Whitworth
On Mon, 5 Dec 2005 10:40:31 -0500 (EST), Brian A. Seklecki wrote: All: It may seem rudimentary, but no where in the FAQ or man pages is it explicitly stated that the source address or address pool of a NAT translation must be assigned to an interface. Obviously it can be either be a primary

Re: OT: spf use in the Open lists

2005-12-09 Thread Rod.. Whitworth
On Fri, 09 Dec 2005 16:58:19 -0600, Chris wrote: Would be nice if the mail server(s) for the Open lists would implement spf. No, it would not. Spammers love it. Perhaps it's being looked into? See: http://www.benzedrine.cx/pf/msg07413.html and evaluate it as a reference answer from a developer.

Re: Henning is gone?

2006-01-11 Thread Rod.. Whitworth
On Wed, 11 Jan 2006 10:32:58 +0059, Han Boetes wrote: Hi, I just send an email to [EMAIL PROTECTED] but I got a bounce back. Has he stopped working for OpenBSD? I haven't seen a commit from him in month. Also I don't know any other email-address of him so I can't email him any other way. I

Re: Henning is gone?

2006-01-11 Thread Rod.. Whitworth
On Wed, 11 Jan 2006 11:19:09 +0100, Han Boetes wrote: Rod.. Whitworth wrote: On Wed, 11 Jan 2006 10:32:58 +0059, Han Boetes wrote: I just send an email to [EMAIL PROTECTED] but I got a bounce back. Has he stopped working for OpenBSD? I haven't seen a commit from him in month

Re: Need advice about VPN

2006-01-19 Thread Rod.. Whitworth
On Thu, 19 Jan 2006 11:28:31 +, Stuart Henderson wrote: On 2006/01/19 10:39, Simon Slaytor wrote: Stuart Henderson wrote: On 2006/01/19 09:38, Simon Slaytor wrote: When comparing the two vpn solutions for speed, subjectively the OpenVPN feels slightly faster If you're using

Re: redirecting domain names

2006-01-22 Thread Rod.. Whitworth
On Sun, 22 Jan 2006 12:39:15 -0500, Peter Fraser wrote: On my windows machines, I use the hosts file from http://www.mvps.org/winhelp2002/hosts.htm; which removes a lot of junk from the internet. Rather than going to each machine an installing this hosts file in \windows\system32\drivers\etc I

Daylight saving time changes for Eastern parts of Australia

2006-01-24 Thread Rod.. Whitworth
Due to the Commonwealth Games being held in Victoria daylight saving time will end one week later than usual in NSW/VIC/SA/TAS on April 2 this year. Jason Tubnor kindly posted a link to the amended datfile in tech@ some time ago so recompiling the zoneinfo files was easy for me. It isn't always

Re: sendmail/pop3 setup question

2006-01-26 Thread Rod.. Whitworth
On Thu, 26 Jan 2006 16:44:19 -0500, James Strandboge wrote: On Thu, 2006-01-26 at 14:17 -0600, Robert C Wittig wrote: Mmap indicates that pop3 is listening and smtp is present but closed on the WAN side of my firewall, and I have pinholes setup for both pop3 and smtp as per the instructions

Re: NTPD connection refused ntp keygen

2006-01-28 Thread Rod.. Whitworth
On Sat, 28 Jan 2006 21:29:12 +1100, atstake atstake wrote: I am running OpenNTPD in OpenBSD 3.8 and /var/log/daemon shows it is working fine - peer IP now valid adjusting local clock by -0.434343 clock is now synced But if I run ntpq -p (as root) it says ntpq? Where did you get that?

Re: A small patch to make input style in license.template consistent

2006-01-29 Thread Rod.. Whitworth
On Sun, 29 Jan 2006 10:12:28 -0300, AndrC)s Delfino wrote: Maybe it may help someone, :P --- license.template Tue Jun 3 19:37:00 2003 +++ license.template.1 Sun Jan 29 10:00:22 2006 @@ -5,11 +5,14 @@ should be separated by a comma, e.g. Copyright (c) 2003, 2004 +Note that less

Re: inet failover solution

2006-02-06 Thread Rod.. Whitworth
On Mon, 6 Feb 2006 23:54:21 -0500, Steven S wrote: [EMAIL PROTECTED] wrote: John R. Shannon wrote: On Monday 06 February 2006 06:46, Nickolay A Burkov wrote: Hi, All! I have a router with two external ethernet links to two different ISPs. Could someone recommend me a good technique to

Re: building a kernel for net4801 from dmassage

2008-01-16 Thread Rod Whitworth
On Wed, 16 Jan 2008 12:01:28 +0100, Piotrek Kapczuk wrote: 2008/1/16, Henning Brauer [EMAIL PROTECTED]: * Lars Noodin [EMAIL PROTECTED] [2008-01-15 17:42]: What is recommended for using a second machine to compile a kernel for the soekris? nothing. there is no need to compile a kernel for

Re: Looking for advice on wireless mini-pci cards for WAP (Soekris4801, OpenBSD4.2)

2008-01-20 Thread Rod Whitworth
On Sun, 20 Jan 2008 10:49:11 -0500, Andre Pierre wrote: Hi I recently built an wireless access point using a Soekris 4801 with Atheros AR5212 and OBSD4.2 (flashimg-2007110) I bought two Atheros cards for the WAP and the client laptop, because the ath(4) manpage indicated that 802.11a/g

Looks like MSFT is pleased that RMS makes software for windows

2008-02-02 Thread Rod Whitworth
In an article at http://blogs.zdnet.com/microsoft/?p=1142 there is an opinion: Microsoft is looking at open-source software (OSS) as just another flavor of independent software vendors (ISV) software. Microsofts goal is to convince OSS vendors to port their software to Windows. Looks like the

Re: Zombie Network Spam Attack

2008-02-08 Thread Rod Whitworth
On Fri, 8 Feb 2008 11:07:15 +0100, Raimo Niskanen wrote: Apparently we (our mail server) got targeted by a zombie network since suddenly there were some 3 hosts on spamd's whitelist, continously some 600 connections to spamd, and only mails to unknown users coming in. The network connection

Re: : Zombie Network Spam Attack

2008-02-08 Thread Rod Whitworth
On Fri, 8 Feb 2008 15:36:01 +0100, Raimo Niskanen wrote: On Fri, Feb 08, 2008 at 10:08:19PM +1100, Rod Whitworth wrote: On Fri, 8 Feb 2008 11:07:15 +0100, Raimo Niskanen wrote: : : * To make the greylist herustics validate the hosts by reverse DNS PTR lookup and then forward A lookup

ifconfig or install hangs when trying to use fxp on new Intel mobo

2008-02-09 Thread Rod Whitworth
I have just spent a lot of frustrating time doing a clean install on a new Intel mobo based system. [dmesg follows] The system came with an onboard re and an Intel GigE (em). The customer's preference is to have fxp nics everywhere and supplied me with new ones. So out with the em, disbled the

Re: What is our ultimate goal??

2008-02-21 Thread Rod Whitworth
On Thu, 21 Feb 2008 13:15:41 +0530, Mayuresh Kathe wrote: On Thu, Feb 21, 2008 at 1:05 PM, ropers [EMAIL PROTECTED] wrote: On 20/02/2008, Mayuresh Kathe [EMAIL PROTECTED] wrote: On Feb 20, 2008 4:58 PM, Henning Brauer [EMAIL PROTECTED] wrote: * Mayuresh Kathe [EMAIL PROTECTED]

Re: Cold Boot Attacks on Encryption Keys

2008-02-21 Thread Rod Whitworth
On Thu, 21 Feb 2008 23:32:22 -0500 (EST), mcb, inc. wrote: On Thu, 21 Feb 2008, Marco Peereboom wrote: Let me give you an engineering opinion: bwahahahahahaha this is retarded. A lesson from history for those who fail to learn from it. Rebooting from the latent image in core memory after

Re: man dhcpd.interfaces ?

2008-02-25 Thread Rod Whitworth
On Mon, 25 Feb 2008 15:43:55 +0100, Kasper Revsbech wrote: Hi I have some problems with my dhcp server, and is trying to debug the setup. I would like to have a subnet on each interface and therefore dhcpd to span both interfaces. For that purpose I use /etc/dhcpd.interfaces where i have: vr0

Re: Singularity OS (O/T Trolling)

2008-03-06 Thread Rod Whitworth
On Thu, 6 Mar 2008 22:27:49 +, Andris wrote: I wonder if anyone actually took a look to the code before opening his/her mouth. Note that I don't trust Microsoft either, but giving that Singularity is not planned to be a successor to Windows, but a research experiment, makes me think it _can_

Re: question re spamd.alloweddomains file

2008-03-17 Thread Rod Whitworth
On Mon, 17 Mar 2008 20:30:53 -0400 (EDT), Juan Miscaro wrote: I have populated /etc/mail/spamd.alloweddomains with all email addresses serviced by my Postfix server. Nevertheless, I still see entries in my mail log that submissions to non-existent addresses are being attempted. One thing I have

Re: RAMdisk, not for boot, how?

2008-03-27 Thread Rod Whitworth
On Thu, 27 Mar 2008 18:09:37 +0800, Uwe Dippel wrote: I don't know if this makes a lot of sense or any, but I was thinking that flash memory doesn't like too many writes. So I was thinking of creating one or two RAMdisks, for all those temporary reads and writes that I need, and only store the

Re: RAMdisk, not for boot, how?

2008-03-27 Thread Rod Whitworth
On Fri, 28 Mar 2008 02:51:33 +0100, chefren wrote: On 3/28/08 1:20 AM, Rod Whitworth wrote: The CF wearout meme needs to die. Specs, it's all about specs, it seems a fact to me that standard CF cards, as used in camera's, often without any technical specification other than size, cannot

Re: RAMdisk, not for boot, how?

2008-03-29 Thread Rod Whitworth
On Sat, 29 Mar 2008 13:29:41 -0400, Douglas A. Tutty wrote: I have my old IBM ValuePoint 486 that has a bios that really only likes drives under 512 MB. It has worked with one 8 GB drive, but not another seemingly identical WD 8 GB drive, yet alone a new-off-the-shelf 80 GB PATA drive. The IBM

Re: Possible daytime saving bug?

2008-03-31 Thread Rod Whitworth
On Mon, 31 Mar 2008 19:00:29 +1000, Sunnz wrote: Hello, Running 4.2 here, and it seems like OpenBSD is one week early can it comes to turning off daylight saving time, it is already one hour slow and this should only happen next week. And you just found out that it was changing? It was in the

Re: Possible daytime saving bug?

2008-03-31 Thread Rod Whitworth
On Mon, 31 Mar 2008 20:30:56 +1000, Sunnz wrote: Right, this is fix up on my machine by editing the /usr/src/share/zoneinfo/datfiles/australasia file... I am not sure if I had a diff or not... I had `ci -l` the original file then `ci` again once it is done. It is only 3 lines of change anyway...

Re: Possible daytime saving bug?

2008-03-31 Thread Rod Whitworth
On Mon, 31 Mar 2008 20:32:28 +1030, Edwards, David (JTS) wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sunnz Sent: Monday, 31 March 2008 7:30 PM To: OpenBSD Misc Subject: Possible daytime saving bug? Hello, Running 4.2 here, and it

Re: Verify authenticity of installation files on mirrors?

2008-04-07 Thread Rod Whitworth
On Tue, 8 Apr 2008 06:54:10 +0300, Nikns Siankin wrote: You see how openbsd cares about secure distribution ;] Don't be a moron. OpenBSD is built by the developers, for the developers. Luckily, you can obtain an official copy of each release by CD (and support the project in so doing). That's

Re: Optimising OpenBSD

2008-04-08 Thread Rod Whitworth
On Wed, 09 Apr 2008 08:21:52 +0930, Matthew Smith wrote: Hi Folks As part of my move from GNU/Linux to OpenBSD on my server, I just want to clarify what I need to do to ensure that I have performance optimised. I am coming from Gentoo Linux, where optimisation is mostly about using the

spamd fake MX

2008-04-09 Thread Rod Whitworth
Reality check please. I see quite a few attempts to access port 25 on boxes that don't have externally listening smtpd. They show up in firewall logs. It is a possibility to let spamd listen (as usual, redirected from 25 to 8025, or even on 25 itself) and feed the IP over to my real MX using the

Re: OpenBSD isakmpd and pf vs Cisco PIX or ASA

2008-04-10 Thread Rod Whitworth
On Thu, 10 Apr 2008 12:27:32 +0200, Reyk Floeter wrote: - PIX/ASA has some magical black-box inline transparent protocol fixups Yeah, they have a magical smtp f**-up that is famous for breaking things. Have a look at http://www.postfix.org/postconf.5.html and search the page for pix. Not

Re: install42.iso hangs....any ideas?

2008-04-16 Thread Rod Whitworth
On Wed, 16 Apr 2008 15:15:02 +, Matthew Szudzik wrote: On Wed, Apr 16, 2008 at 05:45:56AM -0700, Unix Fan wrote: I thought DVD-RAM were unique in that, unlike DVD-RW, you can write to the disk as if it's simply an optical hard drive... I have only used DVD+RW and CD media in my DVDRAM

Re: More factoids about OpenBSD folks use in advocacy?

2008-04-18 Thread Rod Whitworth
On Fri, 18 Apr 2008 11:34:14 -0400, Protocol Six Consulting wrote: Hi, I love using OpenBSD in the networks I administer. It does what I need simply, elegantly and with great power (not to mention for free) When I tell others about OpenBSD I can easily tell them what I like, but I was also

Re: tutorial for securing wifi networks with ipsec and openbsd, somewhere?

2006-02-17 Thread Rod.. Whitworth
On Mon, 6 Feb 2006 23:49:50 + (UTC), Christian Weisgerber wrote: Christian Weisgerber [EMAIL PROTECTED] wrote: Okay, this is as good an opportunity as any to write down what I did to my wireless a while ago: Meanwhile, ipsecctl has gained support for pre-shared key authentication. So in

Re: Sera Systems no more

2006-02-18 Thread Rod.. Whitworth
On Sun, 19 Feb 2006 01:09:21 -0500 (EST), Matthew Closson wrote: Maybe someone else has mentioned this already on the list, I happened to go to Sera Systems site today while looking for some 1U OpenBSD boxes, and I found this:

  1   2   3   4   5   >