Re: Limit on Alias

2011-01-22 Thread Adam M. Dutko
 give it up. you obviously have no idea what you're talking about. an
 ifaddr is tiny.

So what is the base size of one?  Can you elaborate how it grows over
time based on various levels of traffic?



Re: Limit on Alias

2011-01-21 Thread Adam M. Dutko
 What it's the limit of number alias that a single ethernet interface can
 support?

I believe 254?



Re: Limit on Alias

2011-01-21 Thread Adam M. Dutko
 Hahaha.

I don't understand the humor.

 I've had over 300k addresses on a single interface in a test environment
 before.

Very cool, so it was a test environment.  Did you roll it to
production?  How well did it work?

 Like Henning said, the limit is memory.

I imagine memory would be a big factor.  I guess I should have added
that as a qualifier but in general unless you have gobs of RAM more
than a few hundred in production might be an issue.



Re: multicore processors gain

2011-01-07 Thread Adam M. Dutko
 A lot has changed since 1995.

pthreads -- https://computing.llnl.gov/tutorials/pthreads/

rthreads -- 
http://www.informatik.uni-augsburg.de/~ungerer/rthreads/RThreads.html

and etc.



Re: OT - gmail alternatives

2010-12-09 Thread Adam M. Dutko
How do they deal with legal jurisdiction?  Technically the government can
still subpoena and they'd have to turn over the documents in the persons
account, including backups.  I pine for Sealand but even then one would
have to trust the owners of Sealand not to snoop.  Again, the best solution
is probably run your own.

On Thu, Dec 9, 2010 at 2:50 PM, Josh Rickmar joshua_rick...@eumx.netwrote:

 On Thu, December 9, 2010 2:37 pm, Scott McEachern wrote:
On 12/09/10 10:01, lh wrote:
  Hi,
 
  what are the good available alternatives (security/privacy) for gmail
  you're using?
 
  Cheers!
 
 
  As many others suggested, using your own mail server that you control is
  the *best* way, but that doesn't answer your question.
 
  I know people that use Lavabit.com for free email and they swear by it.
  (I use my own mail server, thank-you.)
 
  The lavabit page boasts of privacy (a system so secure
  http://lavabit.com/secure.html that even our administrators can t read
  your e-mail) but you can never really know unless you're an admin
  there. They offer encrypted connections/ports to send/receive on top of
  port 25.
 
  HTH,
 
  - Scott
 
 

 Their encryption is only for paid users, not free accounts.

 I have an enhanced account with them that I use for my personal email.
 I have the asynchronous encryption option enabled, but yeah, there's no
 real way of knowing for sure.

 No complaints about the service though.

 Josh



Re: OT - gmail alternatives

2010-12-09 Thread Adam M. Dutko
IANAL but can't they hold you in jail for contempt or insert charge here
until you hand it over.  I thought I remember something similar in the news
recently.

On Thu, Dec 9, 2010 at 3:38 PM, Brad Tilley b...@16systems.com wrote:

 Adam M. Dutko wrote:
  How do they deal with legal jurisdiction?  Technically the government can
  still subpoena and they'd have to turn over the documents in the persons
  account, including backups.

 Use GPG so all the ISP could do is hand over the encrypted bits. You
 hold the key.

 Brad



Re: OT - gmail alternatives

2010-12-09 Thread Adam M. Dutko
On Thu, Dec 9, 2010 at 8:20 PM, James Hozier guitars...@yahoo.com wrote:

 My ISP refuses to modify any DNS settings and won't give me a static IP
 address  without a business account, so no proper reverse DNS. I don't have
 the resources to run my own nameservers, so what alternatives do I have in
 terms of running my own mailserver?


I use a Linode VPS (~20 USD).  They give full root access and a bunch of
distributions to choose from (unfortunately no OpenBSD atm).  They also give
you the ability to manage your own host records via a web interface and a
cheap backup option.



Re: Donations

2010-12-05 Thread Adam M. Dutko
  Are you planning on having the OpenBSD development team perform some
  sort of illegal activity soon?
 
  If not, you shouldn't be worried about Paypal.


You're discussing intent.  Intent is a tricky thing that in the past lawyers
had to jump through hoops to prove in the (fed)nited States.  Now with the
(un)Patriot Act and other legislation they can rely on the whole notion of
pre-crime.

Seems like most of America is happy with point and click hegemony and I'm
glad the Internet is trying to block the interrupts.



Re: Donations

2010-12-05 Thread Adam M. Dutko
 I hope that one day due process is denied you.


I am wondering what type of due process should be granted to these
individuals.  What basis/jurisdiction of law are we talking about?  Natural
human rights? US law? International Law?  I'm just wondering because I think
it's critical to the whole discussion.  Julian Assange isn't a US citizen so
the US Government probably feels justified doing whatever they want even if
it is unethical, yet many think he should be protected by some of the US
justice code/process.  Is due process universal?



Re: soekris + openbsd server buy question

2010-12-03 Thread Adam M. Dutko
On Fri, Dec 3, 2010 at 5:28 AM,  shweg...@gmail.com wrote:

 Hello, I'm considering buying a Soekris net5501-70 and install OpenBSD on
 it
 to make myself a small server and use it as a proxy (ssh tunnel), it
 might
 serve as backup file sever as well. I guess at the most there will be
 two-three computers connnected at the same time, and there might be some
 streaming video going through, like the videos you find on online
 newspapers. I have googled around, and read that this kind of hardware is
 fine as a router but not so much as a server. Is it true?
 Thank you for any suggestions.
 I was also considering using a netbook for the task. What about it?
 Thanks in advance.



I own a 45xx series Soekris system which handles DMZ traffic (2 low load
production web servers + RCS repositories, and 3 build systems for MariaDB),
internal traffic (my home network for streaming movies and internet access)
and ssh access to my DMZ just fine.  The specifications for the Soekris
system you mentioned don't lead me to be believe they'd be great for file
server duty.  When I think of file servers I think of fast disk (5501 can
use SATA so that's a plus) coupled with a battery backed RAID controller
with gobs of cache and redundancy somewhere preserving my data in case of
disk failure.  If your disk goes on the 5501 I imagine you're toast unless
you have a continual backup process that doesn't chew your available
bandwidth to zero.


 So, if I use it only for ssh tunneling both soekris and netbook would be
 fine? Of course, it has to be on 24*7.


When I think of these machines and similar ones I think configuration file
backup and restore.  What I mean by that is you should be OK with waking up
one day and finding your machine dead but able to get backup and running in
a less than 20 minutes using a new device and your configuration file
backups.  I am NOT implying Soekris boards are unreliable, I love mine and
would buy more if I needed to, but I am saying that planning for failure
should be one of the first things considered when you're constructing a
critical piece of your home/business network.



Re: virtualhost and httpd -U output

2010-11-18 Thread Adam M. Dutko
You probably have another NameVirtualHost *:80 directive set in another
included config file.  You can also check
http://httpd.apache.org/docs/2.2/vhosts/name-based.html for more
information.



Re: nfsv4?

2010-10-29 Thread Adam M. Dutko
Interesting read(s)...

http://www.ietf.org/rfc/rfc2623.txt
http://www.ietf.org/rfc/rfc3530.txt
http://www.ietf.org/rfc/rfc1813.txt

On Fri, Oct 29, 2010 at 9:26 AM, Jan Stary h...@stare.cz wrote:

 On Oct 29 06:05:28, James A. Peltier wrote:
  - Original Message -
  | On Fri, 29 Oct 2010 08:23 +0200, Henning Brauer
  | lists-open...@bsws.de wrote:
  |  * James A. Peltier jpelt...@sfu.ca [2010-10-28 20:23]:
  |   What it offers:
  |   Kerberos security,
  | 
  |  what again?
  | 
  |   selectable security level (-o sec=krb5/krb5i/krb5p),
  | 
  |  ha ha ha ha
  | 
  |   firewall friendly
  | 
  |  right
  |
  | And this huge infrastructure creation (nfsv4/Kerberos/blah blah) all
  | so
  | his users can type 'cp' and 'mv' instead of 'put' and 'get'?
  | I don't get it.
  | Also the last time I checked SFTP was supported on all the
  | platforms he listed
  | Or did I miss something?
 
  No I cannot just put and get.  Moving hundreds of gigabytes of medical
 imaging data around with FTP/SSH would be out of the question.

 Yet moving hundreds of gigabytes of medical imaging data
 around with NFS is OK. More specifically yet, moving them
 around with NFSv4 is OK, but moving them around with NFSv3
 is not.  Right?

 Let's stay technical: what exactly does NFSv4 do for you in your
 situation that NFSv3 does not? Kerberos security, as in users
 authenticate themselvzes? Firewall friendly? How exactly is
 NFSv4 more firewall friendly than NFSv3?

 (Don't get me wrong: I want a multi-platform shared storage too.
 I do it with NFSv3. You use NFSv4, Kerberos, and Samba. How exactly
 is that better?)

 Do you need file access or file transfer, in the sense of
 Callahan's standard NFS Illustrated book?

Jan



Re: softraid ignorance (mine).

2010-10-22 Thread Adam M. Dutko
Yes it is possible.  The actual commands are dependent on the firmware and
device manufacturer.  For instance if you have an LSI card you'll want to
look into the MegaCLI.



CVS ls Disabled on Mirrors?

2010-10-21 Thread Adam M. Dutko
I recently tried to list contents of some of the CVS servers without doing a
checkout to see if it would be feasible to write a small script to identify
hot spots in the development tree based on recent commits.  I believe this
functionality is disabled due to security or resource usage concerns.

The anoncvs.shar file shows most anon servers should chroot, drop
privileges, and use read only mounts.  I imagine it's the read only mount
that's the sticking point.  This can probably be accomplished using a local
copy or a cloned server using cvssync.  I just wanted to make sure I wasn't
missing something with regard to why ls/dir doesn't seem to work.  Thanks.



Re: java/amd64/4.7?

2010-10-21 Thread Adam M. Dutko
I think i386 prebuilds b/c of the Kaffe piece.  Should be in the FAQ.

On Thu, Oct 21, 2010 at 1:19 PM, Jay K jay.kr...@cornell.edu wrote:

 ok, 1.5 built, 1.6 built, 1.7 in progress. Thanks.
 I did say A for all during 15's extract.
 Maybe there is a way to automate that.
 I can remove 1.5 and 1.6 once 1.7 is there.
 Still not understanding why i386 prebuilds this but amd64 does not.

  - Jay

 
  Date: Thu, 21 Oct 2010 12:00:24 +0300
  Subject: Re: java/amd64/4.7?
  From: tomas.bod...@gmail.com
  To: jay.kr...@cornell.edu
  CC: misc@openbsd.org
 
  Didn't have any problems with that anytime before. Just 'sudo make
  install' or 'make install' as root in that directory ('make package
  BULK=Yes' is better) and when it asks for some file, I download it and
  place in /usr/distfiles and start that command again.
 
  On Thu, Oct 21, 2010 at 11:19 AM, Jay K  wrote:
   Ah, thanks. But there is i386. And I only need jre, not jdk or plugin.
   I'll try from source within a few days (or maybe wait to see about
 4.8).
  
   
You missed important part which is
http://www.openbsd.org/faq/faq13.html#javaplugin
  
  
   So 1.7 requires 1.6.
   1.6 requires 1.5.
   They all require manual downloading lots of files.
   And then it doesn't work anyway..
  
   (SHA256) xalan-j_2_7_0-bin.tar.gz: OK
   ===  Extracting for jdk-1.5.0.16
   /usr/local/bin/gtar: A lone zero block at 121752
   replace control/make/Makefile? [y]es, [n]o, [A]ll, [N]one, [r]ename:
 NULL
   (assuming [N]one)
   *** Error code 1
  
  
   Arg.
  
   Presumably I need to eithe redownload that file?
Though I bet that won't fix it.
   Probably need to unpack, delete some file, hope it isn't used, repack..
  
  
- Jay
  
  
 
 
 
  --
   If you re good at something, never do it for free.   The Joker



Re: CVS ls Disabled on Mirrors?

2010-10-21 Thread Adam M. Dutko
 It's quite old, but I think that answer may be inside
 http://www.openbsd.org/papers/anoncvs-paper.pdf


A listing would require write ability to /tmp and the paragraph right before
section 4 indicates this is disabled (in the chroot environment).  That
seems to be the answer.  Thanks.



Re: Force passwordcheck in login.conf

2010-10-18 Thread Adam M. Dutko
 Thanks. I'll add that as a possible solution for folks who wish to add
 Python to the base install.

 Brad

  http://www.deweyonline.com/files/openbsd/login_-custompasswd


Thanks for sharing.

I didn't see any explicit log file closing but then again sys.exit() should
clean up.



Re: Auto Logout Idle Users

2010-10-14 Thread Adam M. Dutko
 Any good reason to not do this?


They're not the same shell.  I can't think of any security reasons because
I'm not familiar with the code but as far as logs and noise factor I imagine
it would go up or various things might start breaking that depend on csh.



Re: Connecting to Oracle DB from OpenBSD

2010-10-07 Thread Adam M. Dutko
 Can any one share any wisdom on connecting to an Oracle DB from OpenBSD?


The above is a rather nebulous question...are you doing this from a program
and if so, in what language?



Re: Finicky Website and Outbound Load Balancing

2010-09-08 Thread Adam M. Dutko
Are you seeing proper responses after requests or are some responses getting
lost.  That would seem more probable.  Have you done a tcpdump to check for
timeouts or missing ACKs?

On Wed, Sep 8, 2010 at 11:56 AM, dontek don...@gmail.com wrote:

 Both.  Redundancy, and mostly, because they are both relativity slow links
 it helps speed things up.

 On Wed, Sep 8, 2010 at 10:46 AM, Adam M. Dutko dutko.a...@gmail.comwrote:

 Are you using two ISP's for redundancy or throughput because I would
 probably opt for a Virtual IP to make sure the session management system
 isn't getting confused with different source IP's which is probably your
 issue.



Re: Phoronix Test Suite

2010-06-23 Thread Adam M. Dutko
crickets chirping

 yawn 

/crickets chirping

Continues working...



Re: Phoronix Test Suite

2010-06-23 Thread Adam M. Dutko
 By the way, I like OpenBSD and I really appreciate its strong points
 but, unlike You, I have no problems in admitting its weaknesses (I see
 to much zealotry here)...


Not that I have a lot of room to talk because I haven't submitted a patch
yet...  However, I think the general belief is that submitting patches with
the identification of a weakness is the best way to get peoples attention
and to start a meaningful discussion.  Otherwise, I imagine submitting a bug
with specifics or paying for a feature fix would also work?  Am I wrong
folks?



Re: Phoronix Test Suite

2010-06-23 Thread Adam M. Dutko
 this statement is weird, in some way.


I concur.  I'll shutup.  :-)



Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Adam M. Dutko
 when ford sold the pinto with the 'exploding' gas tank, it just paid money
 out to settle claims after many people were burned to death. although i
 don't believe there is a precedent for it, possibly until now, many software
 companies have been doing the same thing: selling crap products that in
 essence 'explode' and hemorrhage valuable personal data to script kiddies,
 etc.


If we are to compare the nature of software to a physical product, we need
to remember a few things...

1) Proving software to be 100% correct is nearly impossible and in some
cases completely impossible.  (think halting problem and state space
explosion)
2) Physical products often have a calculable degradation curve whereas given
consistent conditions, software does not deteriorate in a way that is
easily quantifiable.  It does degrade under different conditions but see
point #1 for another problem.
3) Even the best tested and mathematically proven software (think IBM space
shuttle code) has bugs.  I forget the exact cost because I don't have the
paper nearby but the per line cost of the shuttle code was astronomical!  If
all software cost as much per line, no one would own a computer, except
maybe governments and multi-billionaires.

There are other points but I'm sure you get the gist...  I'm glad I have a
job, even if it means being a high-priced janitor.



Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Adam M. Dutko
 I disagree with this. How many times a year are motor vehicles recalled?

 They don't replace the car, they fix it.
 Why can't defective software get a recall or a hefty fine if they refuse to
 fix it? This is a major reason I walked away from the paid software world,
 impossible to pay for quality.


Hrm...seems you disagree with your own point.  It is nearly impossible to
pay for true 100% quality.


 Almost all physical devices come in models, which the next one usually
 fixes the defects. Software is very easy to fix the same model. So I see
 software as much simpler to improve on.


That's why there are patches.  But, just like physical products, patches can
introduce new bugs because they too introduce new execution paths/change
behavior.  I believe one good approach to improving quality (whether it be
real or not) is to reduce functionality.  Such a move should reduce code
complexity and execution paths.  But, afaik code quality and code size are
not strongly associated.

I'm not making excuses for software.  Software is hard which imho is what
makes it appealing.

I do love the paper Jan mentioned because it highlights the importance of
standards bodies.  It also highlights the potential use of government
organizations to regulate markets, which is what the original article
mentions.  I won't say which I prefer because you can probably determine
that on your own.  Good discussion.



Re: OT: Australia may allow punitive damages for security vulns

2010-06-22 Thread Adam M. Dutko
 This is obviously not the intent.  The intent is to have software that
 is reasonably crafted by software engineers.  Not some slapped together
 turd with peanuts from different development teams.


I agree it shouldn't be slapped together but you strike upon an interesting
debate...  Should developers have to be software engineers and be certified?
 Or are we OK with the hacker model?  I hope you realize I'm not
insinuating hacker means crap coder!  I tend to think it's a superior
model but it's also an evolutionary one, something most people don't have
time for.


 Not interesting and not even true.  Anyone who coded in the old world
 with lets say threads, knew that going to a newer better faster machine
 would always result in nice new racing bugs.  I won't get into why this
 happened though.


Sure, doing things faster doesn't mean it'll be better.  Often it just means
you'll hit a lock problem quicker than if you went slower.  Can you
elaborate on what you mean though...what's the equivalent to code rust?  API
breakage? Windows seems to have maintained crazy backwards compatibility.
 Not that I'm applauding it because it also means malicious can still run
unless other means are leveraged to block it.


 Reasonable quality control is something people shouldn't hope for it
 should be something people demand.  The reason why we have windows the
 way it is today is that in the early days people didn't put their foot
 down and said ENOUGH.  The rest is history.


I agree that's part of the reason.


 The reason why Apple is making such big strides with OSX is because they
 are capitalizing on this general feeling.  OSX unlike windows isn't
 naturally chaotic and Apple does a fine job pretending they are secure.
 All in all a pretty smart marketing campaign that seems to be paying the
 bills just fine.


Yes, until the other shoe drops.


 Your car runs hundreds of thousands (if not millions) of lines of code.
 Does it crash all the time?  Microsoft spends more money on RD than
 NASA has to develop a rocket.  Are you sure that they should not have
 been capable of any standard of quality?


Not all the time, but there are many documented cases, not the least of
which being the current popular hybrid car maker debacle.

I've looked up a couple of reports on money spent specifically to improve
quality for Microsoft and for NASA.  NASA gives us a number at
http://www.nasa.gov/pdf/420990main_FY_201_%20Budget_Overview_1_Feb_2010.pdfbut
the number I found was specific to a group within NASA not as a whole.
 If you also count the Air Force space program which is much bigger but is
also involved with NASA, the number becomes much larger:
http://www.saffm.hq.af.mil/shared/media/document/AFD-100201-050.pdf.  Most
of the information I found in Microsoft's filing and various news media
articles doesn't talk about specific research for quality improvements.
 They talk about vague concepts.

I do believe they're all capable of better quality software, it's just hard
and expensive.  Each are avoided like the plague in most corporate
environments.



Re: OT: Australia may allow punitive damages for security vulns

2010-06-21 Thread Adam M. Dutko
 Illegal to run without antivirus ... disconnection of vulnerable
 computers.  A much needed kick up the arse for software makers or just
 bat-shit insane?  Coming soon...


I tend to agree with your last comment.

begin article summary
Idiotic politicians with no business setting arbitrary rules on something
they don't understand...
end article summary



Re: ABOUT PEOPLE WITH WHOM MATRIMONY IS PROHIBITED

2010-06-15 Thread Adam M. Dutko
What about marrying blowfish?

On Tue, Jun 15, 2010 at 8:34 AM, S H sahservi...@gmail.com wrote:

 And the relevance of this to the OpenBSD community is?

 On Tue, Jun 15, 2010 at 8:22 AM, Sam Singh samsingh...@absamail.co.za
 wrote:
  1 : If a man commits adultery with a woman, then it is not permissible
 for
  him to marry her mother or her daughters.
 
  2 : If a woman out of sexual passion and with evil intent commits sexual
  intercourse with a man, then it is not permissible for the mother or
  daughters of that woman to merry that man. In the same way, the man who
  committed sexual intercourse with a woman, because prohibited for her
 mother
  and daughters.
 
  Download the attached article to read.
 
 
 
 
   The original file name is PROHIBITED_MATRIMONY.rar and compressed by
  WinRAR no virus found.
   Use WinRAR to decompress the file.
 
  [demime 1.01d removed an attachment of type application/ms-tnef which had
 a
 name of winmail.dat]



Re: It is 2010. Still no 3GB support by default?

2010-06-07 Thread Adam M. Dutko
Maybe it's more attributable to increased interest and the increase has
brought a proportional increase in what you call trolls.  More noise is
distracting but has fringe benefits...sometimes...

On Jun 7, 2010 9:01 PM, Jason Beaudoin jasonbeaud...@gmail.com wrote:

maybe I haven't been on this list long enoug.. but it seems like 2010
has been the year of the troll, first update to the chinese calander
in ages..



On Mon, Jun 7, 2010 at 2:52 PM, Dexter Tomisson dexterto...@gmail.com
wrote:
 I'd really, reall...



Re: new mirror: ftp.halifax.rwth-aachen.de

2010-05-27 Thread Adam M. Dutko
Regardless of what list is appropriate...thank you for mirroring!



Re: Openbsd 4.6 free ram

2010-05-20 Thread Adam M. Dutko
 This list is NOT a handholding bureau for lazy people.


Dangit!  I knew I was subscribed to the wrong list...



Re: Openbsd 4.6 bash and email notification

2010-05-19 Thread Adam M. Dutko
Wow.  Sorry for my massive fail...I totally misread your question. Seems Jan
read it correctly.  :-/

On Tue, May 18, 2010 at 4:45 PM, Hect tagah...@email.it wrote:

 I can't get to disable email notification with bash.
 You know the message that says You have new mail in /var/mail/user.
 I tried, as bash manual says, to add variable MAILPATH to profile but
 doesn't
 do the job. There's no biff in ps command output, anyway i tried also with
 biff n. no way.
 Can anybody help me?
 Thanks a lot
 Hect


  --
  Caselle da 1GB, trasmetti allegati fino a 3GB e in piu' IMAP, POP3 e SMTP
 autenticato? GRATIS solo con Email.it http://www.email.it/f

  Sponsor:
  Apri Conto Arancio entro il 28 febbraio 2010 e ricevi 50 Euro da spendere
 presso Media World. Aprilo adesso
  Clicca qui: http://adv.email.it/cgi-bin/foclick.cgi?mid=10035d=18-5



Re: Openbsd 4.6 bash and email notification

2010-05-18 Thread Adam M. Dutko
 I can't get to disable email notification with bash.
 You know the message that says You have new mail in /var/mail/user.
 I tried, as bash manual says, to add variable MAILPATH to profile but
 doesn't
 do the job. There's no biff in ps command output, anyway i tried also with
 biff n. no way.
 Can anybody help me?
 Thanks a lot
 Hect


Are you sure the shell you're using is BASH and not KSH?

echo $SHELL

If it is BASH then are you exporting the variable such as...

export MAILPATH='/var/mail/bfox?You  have mail:~/shell-mail?$_
has mail!'

Also, be aware that you need a ? separating the files to search and the
message.

HTH



Re: something to do

2010-05-17 Thread Adam M Dutko

On 5/17/10 9:13 PM, Ted Unangst wrote:

Here's something for the great OpenBSD todo list.  George Neville-Neil
gave a talk at BSDCan about hardware performance monitors in FreeBSD.
There was a similar talk at DCBSDCon too.  You should be able to find
the slides online.  It sounds like the driver framework should be easy
enough to port to OpenBSD without getting too tangled up in weird
complications.

   

http://www.bsdcan.org/2010/schedule/events/186.en.html

and slides at

http://www.dcbsdcon.org/speakers/slides/neville-neil_dcbsdcon2009.pdf

That is what you're referring to, correct?



Re: Semi-newbie NAT question

2010-05-06 Thread Adam M. Dutko
 vr0 and vr1 are bridged together as bridge0.


I was puzzled as to how it was working until you said this...

I have a similar setup as you.  I have a public interface with my public IP
attached to the cable modem, then I have two other interfaces, one for
internal hosts and another for DMZ hosts.  In order to give a good amount of
separation, logical and physical, I've setup two unique subnets, one for
private side and the other for the DMZ.  I simply point the DMZ hosts to the
DMZ gateway address and then handle it through pf and do the same with
internal/private hosts.  I understand you don't want to use the fourth port,
but it would make for clean separation and wouldn't require another public
IP if you used a private subnet.  An added benefit of such a setup is port
redirects from the public IP to the other hosts, or using some sort of proxy
to proxy connections to the DMZ hosts.



Re: Source Overview

2010-04-25 Thread Adam M. Dutko
I've started the list at http://openbsdsupport.org/todo and have taken what
was posted during our conversation(s) on that list.  I will look for others
and will be happy to post links given to me for others.

Thank you for the account Daniel.



Re: Source Overview

2010-04-21 Thread Adam M. Dutko
I've taken the shut up and hack as an answer and started working on
testing a potential patch for an atheros problem with Luis.

If you provide me an account and if everyone is OK sending me minimally
formatted TODO lists I will gladly be the point of contact and maintain that
list.

What qualifies as minimally formatted?

1) Each item on a separate line prepended with a *.
2) (OPTIONAL) If you want, order them by importance.

I will attempt to clean-up grammar and spelling.

Daniel, please contact me off list, if you'd like, with the account
information.

On Tue, Apr 20, 2010 at 6:02 PM, Daniel Ouellet dan...@presscom.net wrote:

 Please read as this is your challenge back should you actually step up to
 it with the usual line shut up and hack type of answer.

 This tread now spread on tech@ too and include may be 3 or 4 treads all
 referring to todo lists, janitor and all.

 I don't find it interesting anymore and plenty of answers were provided,
 but again nothing is done about it so in the same spirit of the well knows
 shut up and hack, I decided to show again how useless this might be and I
 would be more then happy to be proven wrong big time. I will even pay the
 beer if I am proven wrong for good.

 Now to close this for good and to show as many time in the pass that it
 will not go anyway, I setup yet one more users maintain lists here:

 http://todo.openbsdsupport.org/

 or here if you prefer:

 http://openbsdsupport.org/todo/

 same place anyway, but the URL is obvious I guess in the first one.

 There is nothing there and I challenge anyone that complain in the last
 week or so about not having a list and that it would be useful and allow
 great things to happened to do it.

 I WILL PROVIDE AN ACCOUNT to anyone that is actualy serious in doing this
 list and that will take it on. Collect all the variosu todo lists, make it
 clean and real here, not with funny pictures, design, and all. Just the
 list. It could be even as simple as a simple list of URL to places that have
 todo already. I don't think it will go anyway, but in the same spirit of
 showing the true color of winners, I raise yet again this variation on the
 same idea and same challenge as before.

 I have that domain as far back as 2004 following yet an other endless
 discussion about documentations/howto and all.

 Yes, I got minimal amount of contributions to it after all was setup but
 the wining stop. Just no progress however. I do have very minimal
 contribution in my inbox that I haven't been able to update yet as for lack
 of time on my part, but at the same time I sure do not get a regular flow of
 updates either in the 6+ years it exists.

 I know it will not go anywhere, but that's not the developers jog to make
 these lists that no one look at anyway, but many have done so.

 Also, I want to make it VERY CLEAR that this have nothing to do with the
 project what so ever. It's not endorse or supported by the project what so
 ever and it not associated with it in any shape or form. If you have a
 problem with that, take it with me, not the project. Theo knows about it, he
 told me log ago that was a waste of time and useless things to do and he was
 100% right! But it still exists to stop the wining if nothing else as looks
 like we have more noise on the list always as time pass.

 So, may be if the only contribution this does is to reduce it, then so be
 it and just that is worth my time.

 Now, take the challenge on and show that everyone was wrong by doing your
 part.

 Contact me off list if you are serious and will do the list and i will give
 you access as long as you are not abusing of it.

 Hopefully this will close the subject and if anything good come out of it
 then great.

 Let see where it goes from here. The ball is in your camp now. You want a
 list, then make it so.

 Best,

 Daniel



Re: Source Overview

2010-04-21 Thread Adam M. Dutko
If you have to know why I didn't send a patch yet, it's because I'm working
on a patch for an Atheros chip at the moment.  That's also why I didn't do
much with Ted's stuff and other things since yesterday.  I did read the
e-mails.

I figured one could partake in the community when their schedule permitted.
 Maybe I'm wrong on that front as it seems like I should be hacking 24/7 and
should have submitted patches to finish the RThreads code to even be allowed
to post to the list.

I simply requested the account on that persons system because I offered to
help maintain the task list.  I've not been contacted so I assume they're
not interested.

On Wed, Apr 21, 2010 at 2:35 PM, Theo de Raadt dera...@cvs.openbsd.orgwrote:

   I concur.  In summary, everyone offering help is lying; fact is they
   are unwilling to get off the couch.
 
  I appreciate the sentiment, but this isn't true. How many new developers
  have been added over the past few of years? How many patches have been
  taken from non-comitters? Never enough, but plenty to clearly show how it
  works.

 If you go back and look at who actually got an account, I bet you'll
 find they have one thing in common:

 They mailed diffs.  Not requests for tasks.

 End of story.



Re: Source Overview

2010-04-21 Thread Adam M. Dutko
 You are not the only one with limited time. Sorry for the late reply, but
 also I wanted to provide details as to why.


I realize.



 The short of it is that in it if you look at it. It add more work to the
 developers by asking them to send in stuff. They already have it done for
 some. So, why duplicate the list. It will just get out of sync and obsolete
 very soon. Plus they have a list, so I think the most logical and efficient
 way to do it would be just like this:

 1. Name

 2. Very short blurb for area the todo cover

 3. URL to the developers list.

 And that's it.


Very good point.  In my haste to volunteer I overlooked the extra burden
placed on others by my suggested approach.  If you'd like I can do what you
recommended.


 The only think that this gives me as an idea that may have some merit is
 that a list of user group might be good to have and I can add that to the
 site. But again, that should be as minimal as possible.

 City, state or province, country, language and URL to the site for the
 group. If no URL, then some details could be added and that may actually get
 some usage may be.

 But keeping the time needed to maintain anything like this is a plus and
 not required any more from the developers have to be the goal. But again, I
 am not sure it's even good, but like I said, I am not oppose to. Like
 everyone else I have very little time and I didn't reply before, nor this
 morning to your email at 5:32AM when I saw it at 7:30 AM EST as I just
 finish an other project and I do need to get some sleep sometime as little
 as it might be and I have some kind of a life too and kids to take care of
 as well.


I have similar obligations.  Thank you for the salient points.



Re: Source Overview

2010-04-20 Thread Adam M. Dutko
 Looking at this and Peters message, I think there may be an answer much
 simpler than a TODO list, which I think will never work out. If developers
 wanted a TODO list, we would already have one.



Good point.

 ...snip...

Perhaps the useful emails that have suitable TODO items could simply be
 tagged with a TODO.


From a newcomers perspective that seems like a good idea.

...snip...

Thanks for more input everyone.



Re: Source Overview

2010-04-19 Thread Adam M. Dutko
On Mon, Apr 19, 2010 at 2:02 PM, Christiano F. Haesbaert 
haesba...@haesbaert.org wrote:

 I know this has been discussed before, yet I call for your attention.

 This post seems like a genuine attempt on getting pointers on starting
 hacking in OpenBsd. I remember doing the same a while ago.

 How about having a very simple per-developer(or project)
 wish-list/todo-list ?


To a new-comer like myself, that seems like an excellent idea.  I know
developers are busy and synchronous meetings would be tough, but if it were
possible, asynchronous mentoring using a TODO list would be nice.
 (Definitely a big wish though... :-) ).

snip...


 No, I'm not trolling, just an idea.


As an aside, I must say I am amazed at the response to this question.  Thank
you for your insight everyone!



Re: Source Overview

2010-04-19 Thread Adam M. Dutko
I read that thread and will now shut up and 'attempt to' hack.  Thanks.

On Mon, Apr 19, 2010 at 2:42 PM, Ted Unangst ted.unan...@gmail.com wrote:

 On Mon, Apr 19, 2010 at 2:02 PM, Christiano F. Haesbaert
 haesba...@haesbaert.org wrote:
  I know this has been discussed before, yet I call for your attention.
 
  This post seems like a genuine attempt on getting pointers on starting
  hacking in OpenBsd. I remember doing the same a while ago.
 
  How about having a very simple per-developer(or project)
 wish-list/todo-list ?

 http://marc.info/?t=11937733634r=1w=2