Re: cvs fingerprint for anonvs.jp.openbsd.org

2015-05-27 Thread Lars Nooden
On Wed, 27 May 2015, Joel Rees wrote: Currently, when I connect to the server via the usual cvs command, it responds with an ssh256 fingerprint. For some reason, my brain is not helping me find a way to ask the server to give me md5 fingerprints. Is there a way? From what I've tried, the

sshd ignoring UseDNS in host-based authentication?

2015-03-16 Thread Lars Nooden
I wonder if sshd is ignoring UseDNS when trying host-based authentication. The default for UseDNS is listed as 'no' in the man page but even when I set it explicitly to 'no', sshd still seems to perform a lookup on the incoming client.[1] Host-based authentication then fails if the lookup

Re: slow to no throughout on ral

2015-03-05 Thread Lars Nooden
On Wed, 4 Mar 2015, Stefan Sperling wrote: On Wed, Mar 04, 2015 at 05:06:57PM +0200, Lars Nooden wrote: The only other strange symptom is that the machine locks up hard every week or two requiring a powercycle or hardware reset to restart. I can find nothing in the logs anywhere near

slow to no throughout on ral

2015-03-04 Thread Lars Nooden
I have an old Soekris 5501 with a wireless (WL-RT2561-ST 802.11a/b/g) PCI card, running a recent snapshot. I have slow wireless transfer rate and sluggishness that went from being occasional to nearly 100% of the time. Instead of 830kB/s or so from the net, I'm getting transfer rates of

Re: lii0 no link on 5.6-current i386

2014-11-26 Thread Lars Nooden
On Mon, 24 Nov 2014, trondd wrote: On Mon, Nov 24, 2014 at 3:12 PM, trondd tro...@gmail.com wrote: Just to clarify, these have been fresh installs of 5.6-release and 5.6-current. Both bsd.rd and bsd seem not to find the lii interface. 5.5-release behaves almost the same way, though

lii0 no link on 5.6-current i386

2014-11-24 Thread Lars Nooden
I've been trying to move from 5.4 to 5.6 on an old machine. Neither 5.6-release from the CD nor 5.6-current from the recent snapshots seem to be able to use the Ethernet device. During power up, the link status light is on, but then as the kernel loads it goes out and stays out. What have I

Re: lii0 no link on 5.6-current i386

2014-11-24 Thread Lars Nooden
On Mon, 24 Nov 2014, Lars Nooden wrote: I've been trying to move from 5.4 to 5.6 on an old machine. Neither 5.6-release from the CD nor 5.6-current from the recent snapshots seem to be able to use the Ethernet device. During power up, the link status light is on, but then as the kernel

restoring keyboard layout after suspend or hibernate

2014-01-23 Thread Lars Nooden
After suspend or hibernate, I lose my designated console keyboard layout (sv) and it reverts to the default (us?) wsconsctl shows that the encoding to still be sv, keyboard.encoding=sv What setting(s) am I missing to preserve the designated layout across suspend/hibernate? Regards,

Re: restoring keyboard layout after suspend or hibernate

2014-01-23 Thread Lars Nooden
On Thu, 23 Jan 2014, David Coppa wrote: Maybe the following trick? # mkdir -p /etc/apm \ printf #!/bin/sh\n/sbin/wsconsctl keyboard.encoding=sv\n /etc/apm/resume \ chmod 0755 /etc/apm/resume Followed by: # /etc/rc.d/apmd restart Thanks. That was the right direction. It also

watchdog timeouts

2013-11-16 Thread Lars Nooden
I'm getting a lot of watchdog timeouts on re0 with the i386 snapshots. re0 is a Traverse Viking PCI ADSL card. Is there something I need to set or tune on my end to stop the timeouts? Regards, /Lars OpenBSD 5.4-current (GENERIC) #148: Tue Nov 12 15:18:10 MST 2013

Re: matching single-part label in ssh_config ?

2013-11-03 Thread Lars Nooden
On Sun, 3 Nov 2013, Darren Tucker wrote: [snip] Also: it's not in 5.4 but it is in current: check out the Match keyword for a more flexible method. Cool. Were there any particular use cases in mind with 'exec' ? Regards, /Lars

Re: sshd internal-sftp umask

2013-10-23 Thread Lars Nooden
On Wed, 23 Oct 2013, Jiri B wrote: I saw the same and I'm not sure how it should exactly work. Maybe it is only working when explicitly setup in 'Subsystem' line. Although it is works like this, I would like to be able to override it anyway inside a Match block. jbelke It seems to

Re: key precedence in ssh

2013-10-01 Thread Lars Nooden
On Tue, 1 Oct 2013, Christian Weisgerber wrote: Lars Noodén lars.noo...@gmail.com wrote: Is there a way in ssh(1) to get the identity specified by -i to take precedence over what is already in the agent? IdentitiesOnly, see ssh_config(5). -- Christian naddy Weisgerber

Re: Squid3 in intercept mode

2013-06-20 Thread Lars Nooden
On Thu, 20 Jun 2013, Stuart Henderson wrote: On 2013-06-19, Lars Nooden lars.noo...@gmail.com wrote: On Wed, 19 Jun 2013, Reyk Floeter wrote: Anyway, you should make sure to use divert-to instead of rdr-to in your pf.conf. rdr-to is considered to be obsolete for userland proxies (except

Re: Squid3 in intercept mode

2013-06-19 Thread Lars Nooden
On Wed, 19 Jun 2013, Reyk Floeter wrote: Anyway, you should make sure to use divert-to instead of rdr-to in your pf.conf. rdr-to is considered to be obsolete for userland proxies (except for spamd). That solved it exactly. I had not seen the change and had been trying rdr-to instead of

ral(4) or ath(4)

2013-06-01 Thread Lars Nooden
Are there any big reasons not to choose ral(4) over ath(4) for a host ap? I've been trying out three wireless cards on -current as host access points. So far it seems that ral(4) works better, but is quite weak on the overall range in mode 11g as compared to 11a. One message earlier on

Re: Canceled SSH forwarding

2013-05-23 Thread Lars Nooden
On Wed, 22 May 2013, Lars Nooden wrote: [snip] However, the remote machine is still able to use the forwarded port until the connection is finally closed. The same syntax seems to shutdown regular (-L) forwarded ports, just not for reverse (-R) forwarding. What am I missing? What I

Canceled SSH forwarding

2013-05-22 Thread Lars Nooden
I've got OpenSSH_6.2 from the latest snapshot and would like to cancel remote forwarding without closing the existing session. I seem to be missing something with the escape sequence ~CKR If I start remote forwarding like this: ssh -R 9000:localhost:80 192.0.43.10 The remote machine

Forcing choice of keys for ssh

2013-05-16 Thread Lars Nooden
I'm running -current and notice that ssh prefers keys that have been loaded into ssh-agent over those that are being specified on the command line. If I load 'keya' into the agent, ssh-add ~/.ssh/keya and then try to use 'keyb', ssh -i ~/.ssh/keyb 192.0.43.10 then 'keyb' is

OpenSSH sshd -E

2013-04-28 Thread Lars Nooden
I see a useful feature in OpenSSH 6.2(?) in current that is not in the release notes for 6.2. In the man page for sshd(1) in current there is this: -E log_file Append debug logs to log_file instead of the system log. But I can't find anything about it in the release notes:

syncing hardware clock

2013-02-07 Thread Lars Nooden
I've got a small system running 5.2-stable and the clock seems off. NTP is making entries like this on startup: Jan 31 10:15:31 net5501 ntpd[20060]: adjusting local clock by 93.846882s I've looked around in the mail archives for various mailing lists and have the impression that a proper

Re: syncing hardware clock

2013-02-07 Thread Lars Nooden
On Thu, 7 Feb 2013, Otto Moerbeek wrote: On Thu, Feb 07, 2013 at 03:36:43PM +, Christian Weisgerber wrote: Lars Nooden lars.noo...@gmail.com wrote: I've got a small system running 5.2-stable and the clock seems off. NTP is making entries like this on startup: Jan 31 10

Re: project : openbsd as nas

2010-09-01 Thread Lars Nooden
On Mon, 30 Aug 2010, Jean-Francois wrote: I'm thinking about starting something aroung openbsd such as a layer making it an easy enough to manage home nas server of good quality. That capability is already there. As others mention, NFS is in base and Samba can easily be added from ports.

Re: undeadly article

2010-08-17 Thread Lars Nooden
On Tue, 17 Aug 2010, J.C. Roberts wrote: ... I'm trying to learn from any feedback I receive, positive or negative... IMHO it was well-written. Security Theatre is just a more harmful, very expensive, corporate version of Eat-a-Bug. /Lars

Re: [OT] securely sharing documents on OpenBSD?

2010-08-17 Thread Lars Nooden
On Tue, 17 Aug 2010, Matt wrote: Quite possibly more of a 'which software' question: I am looking for a way to have two parties share documents securely through an OpenBSD server. User A can not look into directory B but is allowed in dir C, that sort of thing. Sharing occurs through

Re: OpenBSD on RouterBoard 450G

2010-08-15 Thread Lars Nooden
On Sun, 8 Aug 2010, Jozsi Vadkan wrote: Did anyone manage to install, and use/test OpenBSD on the RouterBoard 450G? Or does anyone has a howto for it, how to do it? IIRC back in March, Mark Kettennis added support for the RouterBoard 600A. However, that's a different processor. The 1000 and

Re: Web hosting, restrict user to access only his folder

2010-08-14 Thread Lars Nooden
On Sat, 14 Aug 2010, open...@e-solutions.re wrote: i used ftpd (-4Dln) for users to upload ... You may wish to reconsider that and use sshd's built in chroot with sftp. Easier to set up and use. A lot of people 'ask' for FTP by name meaning a generic way to up load. Even lame clients like

Re: anyone use these for firewall?

2010-06-16 Thread Lars Nooden
LeviaComm Networks NOC wrote: In the mean time, if anyone can send me dmesgs detailing the hardware they are form, I can start setting some of it up. Mark Kettenis and Dariusz have a port on the RB600A: http://old.nabble.com/RouterBOARD-RB600A-support-td27828265.html /Lars

Re: anyone use these for firewall?

2010-06-15 Thread Lars Nooden
Chris Smith wrote: Thanks for any input on these or other suggestions for quick (new Atom or better) low power network appliance type gear for keeping -current.. Finding out if -current runs on the RB450G, RB493, or RB493AH has made it onto my todo list, but not near the top. They meet that

Re: Installer bug? - Upgrade 4.6 to 4.7 failed to upgrade base47, on i386 and amd64

2010-06-04 Thread Lars Nooden
On Fri, 4 Jun 2010, Jan Stary wrote: 'rm -rf /usr/obj/*' is not your arbitrary choice, it's a documented step when building the system. http://www.openbsd.org/faq/faq5.html#BldUserland Also documented there is keeping /usr/obj/ in its own partition and using 'newfs' to zap everything more

Re: Hardware for a PF box

2010-05-11 Thread Lars Nooden
On Mon, 10 May 2010, Chris Smith wrote: What about logging in this case? Can PF logs be sent to another system running a syslog daemon? You answered your own question. ;) Look at the 'action' field explanation in the manual page for syslog.conf(5) About the diskless machine, many of the

Re: Hardware for a PF box

2010-05-11 Thread Lars Nooden
On Tue, 11 May 2010, BARDOU Pierre wrote: ... I don't think they come from PF BTW, it should be logging/relayd/OpenVPN which makes the box lag. Verify before you flush money. Tools like iostat, vmstat and pftop might help show where the load is. Does the load you have from OpenVPN suggest

Re: Hardware for a PF box

2010-05-11 Thread Lars Nooden
On Tue, 11 May 2010, Chris Smith wrote: ...http://www.openbsd.org/faq/pf/logging.html but the PF logs first have to be written locally to a the pflog file. Or you can pipe to logger(1) directly or go via a FIFO /Lars

Re: State of multiprocessing and multithreading in OpenBSD

2010-05-05 Thread Lars Nooden
On Wed, 5 May 2010, Geoff wrote: There's a paper from Berkeley showing how a threaded program can never be fully debugged and should be presumed to be broken, probably fatally broken. Geoff, can you post the URL or any details that might help finding and retrieving that particular article or

Re: State of multiprocessing and multithreading in OpenBSD

2010-05-05 Thread Lars Nooden
On Wed, 5 May 2010, Tony Abernethy wrote: http://www.eecs.berkeley.edu/Pubs/TechRpts/2006/EECS-2006-1.pdf first choice googling: threads berkeley Thanks. You have better luck with Google than I did. berkeley threading won't find it. Repeating once more for the archive:

Re: OT - UML, can someone state that it works ?

2010-05-05 Thread Lars Nooden
On 05/05/2010 10:08 PM, Christiano F. Haesbaert wrote: Sorry for such an out of topic thread, hear my pain: I'm really sick of hearing about UML/RUP and all this boulshit about software engineering in my university. User Mode Linux works ok, you should probably try asking over on one of the

Re: low httpd performance. Apache 2.2 as default? never? *sighs

2010-05-03 Thread Lars Nooden
On Mon, 3 May 2010, Dexter Tomisson wrote: ab -n 1 -c 10 127.0.0.1/1.tar.gz Apache 1.3.29 Requests per second:149.23 [#/sec] (mean) Apache 2.2.2 Requests per second:375.02 [#/sec] (mean) Apache2 is significantly more complex: ktrace -f /tmp/a2-ktrace.log -di

Re: Questions about tables on pf

2010-04-29 Thread Lars Nooden
On Thu, 29 Apr 2010, Leonardo Carneiro - Veltrac wrote: Tks. This info is very important to me 'cause my disk sucks, Look at the manual page for mount_mfs(8) and the option -P you can load a directory and the files in it into memory. and i'll have to create some tables that will be hitted

Re: Is this a case of paranoia?

2010-04-26 Thread Lars Nooden
On 04/24/2010 10:27 PM, Ed Ahlsen-Girard wrote: Ha. You laugh. at you, not with you My employer is blocking the msdn blogs that we need to troubleshoot SharePoint and SQL. ... Take the hint and get rid of both. Their presence fucks up the net. /Lars

Re: VPN between OpenBSD Gateway and a mac

2010-04-26 Thread Lars Nooden
On Fri, 23 Apr 2010, Firstname Lastname wrote: If you make other use of the tun interface via ssh -w at work, do some homework or you'll get burned. Could you elaborate on the particular mistakes you have in mind? /Lars

Re: Is this a case of paranoia?

2010-04-26 Thread Lars Nooden
Fuck off, Jussi. Serious problems like the one that fellow's network administrator pinged him for should not sit unsolved. It affects the rest of us. Those problem stepchild packages are problems in and of themselves, as is the platform it runs on. The time to condone sloppy practices and

Re: Is this a case of paranoia?

2010-04-24 Thread Lars Nooden
On 04/24/2010 05:14 PM, Danny wrote: My apologies then. It is just a screenshot of our IT {sic} guys classifying OpenBSD as a Hacking website. Of course it is: http://catb.org/~esr/jargon/html/H/hacker.html If you want to get him wound up, point out that it is one of several that

Re: Source Overview

2010-04-22 Thread Lars Nooden
On 4/22/10 2:44 PM, Owain Ainsworth wrote: On Thu, Apr 22, 2010 at 01:40:42PM +0200, Claudio Jeker wrote: In the end all that matters is that someone gets up from his comfy couch, hacks something up and sends a diff around and the only way that is going to happen is because of egoistical

Re: can't do suitable block in firewall

2010-04-21 Thread Lars Nooden
On 04/19/2010 09:12 PM, Leonardo Carneiro - Veltrac wrote: ... the gateway features does not work 100% yet (at least in the server that i use) There are additional solutions. One is to work with the contacts to get them set up with XMPP clients, since the gateway function is there only

Re: Source Overview

2010-04-20 Thread Lars Nooden
On Tue, 20 Apr 2010, J.C. Roberts wrote: The developers *CONSTANTLY* *ASK* *FOR* *YOUR* *HELP* with testing, ... Since validity is critical, if you cannot test properly and hopefully help in the debugging, then you'll never be any good at writing code... That's a very clean way of getting

Re: softraid video

2010-04-19 Thread Lars Nooden
On 04/19/2010 07:18 PM, Paul Irofti wrote: See first post for all videos: http://undeadly.org/cgi?action=articlesid=20100322204337 The short answer is that there are no videos online. How to go about getting the originals from the camera? /Lars

Re: can't do suitable block in firewall

2010-04-19 Thread Lars Nooden
On 04/19/2010 08:43 PM, Leonardo Carneiro - Veltrac wrote: Hi everyone. I'm trying to get some control of the MSN protocol in my network. Upgrade to XMPP (jabber). http://xmpp.org/about/ If you need client software, pidgin is one option available in ports

Re: can't do suitable block in firewall

2010-04-19 Thread Lars Nooden
On 04/19/2010 09:12 PM, Leonardo Carneiro - Veltrac wrote: ... I already have a XMPP server on my network, and it replaces MSN in almost every task, but the gateway features does not work 100% yet (at least in the server that i use)... Which features and which server? /Lars

Re: is skype using encryption?

2010-04-13 Thread Lars Nooden
On Sat, 10 Apr 2010, Jozsi Vadkan wrote: Can someone [same subnet, e.g.: with a hub, not switch..] sniff my skype password when i'm using Skype? Is it encrypted? After looking into the question of Skype's source code, as has been recommended ;) , you may want to look at regular SIP packages:

Re: crontab last day of the month

2010-04-07 Thread Lars Nooden
On Tue, 6 Apr 2010, Antti Harri wrote: OK. How do I reliably get month and year out of the file? awk will work for that and for massaging archived logs. That's also the kind of task perl is best at. Another option is to reconfigure the log file format. The regular Apache format

Re: Installing modules from CPAN

2010-04-07 Thread Lars Nooden
On 4/7/10 12:06 PM, Will wrote: I know some OSes have a right way to install perl modules from CPAN. Does OpenBSD have some similar methodology? Check first in ports for packages, P5-* http://www.openbsd.org/4.6_packages/i386.html If it's not there, you can make your own package:

Re: Installing modules from CPAN

2010-04-07 Thread Lars Nooden
On 4/7/10 2:42 PM, Chris Bennett wrote: More serious question about ports. What about needing a newer version of a perl module than is in packages? The first step would be to move to -current, because -stable must keep the versions it is published with, and check the ports@ list. ... I

Re: how to install OpenBSD in a computer with Linux and Grub2

2010-04-06 Thread Lars Nooden
On Tue, 6 Apr 2010, Salvador Fandino wrote: The procedure I have described shows how to *install* OpenBSD booting from a RAM disk (bsd.rd) placed in a Linux partition. Basically it removes the need to create a booting floppy or to burn a CD in order to install OpenBSD. It documents how to do

Re: question wrt. -current

2010-04-01 Thread Lars Nooden
I am interested in how these things work internally in your project, and I also wondered whether I'd done something wrong (eg. inadvertantly fetched stale code), as, at first, I assumed that all these builds should occur in sync. Now, when I was reporting problems, the large difference in serial

Re: An idea for a very simple port knocking with pf

2010-04-01 Thread Lars Nooden
On 04/01/2010 03:09 PM, Marcus M|lb|sch wrote: 1) Is there any problem with that setup? No, not if you do not deploy it. Yes, if you deploy it, it may implement port-knocking. http://marc.info/?l=openbsd-miscw=4r=1s=port-knocking /Lars

Re: An idea for a very simple port knocking with pf

2010-04-01 Thread Lars Nooden
On 04/01/2010 03:09 PM, Marcus M|lb|sch wrote: Thanks for any pointers, You may instead be interested in exploring authpf + use of one time passwords. Look around for donkey, s/key, opie, yubikey to get ideas.

Re: whiteboard over the net

2010-03-31 Thread Lars Nooden
On Tue, 30 Mar 2010, Marco Peereboom wrote: Drawing shit with the mouse. Not typing stuff with the keybored. Scribus, Dia, OOo and others allow plugins or Python scripting. It might be feasible to slave input devices to a remote application. I wonder about using X11. It's possible to have

Re: whiteboard over the net - piratpad

2010-03-31 Thread Lars Nooden
On 03/30/2010 11:45 PM, Mark Rolen wrote: It looks like EtherPad will be gone after tomorrow, too. Google is killing it and moving the functionality into Google Wave: http://etherpad.com/ep/blog/posts/google-acquires-appjet Piratpartiet hosts a service now that Google has dropped Etherpad:

Re: macbook pro 5,5

2010-03-25 Thread Lars Nooden
On 3/24/10 21:02 , Pau wrote: I was also wondering whether it is possible to have openbsd on the laptop as the only OS. I am guessing that the EFI could give trouble. I've done that with the older macbook pros. I'm sure the openfirmware could be set to boot straight into OpenBSD, but would

Re: installing amd64 using i386 to boot then amd64 for install?

2010-03-16 Thread Lars Nooden
On Tue, 16 Mar 2010, Cameron Simpson wrote: ...I'm considering is booting off the i386 CD1 and then using the CD2 disc for the install data. Will that work, or will the i386 install still load up some inappropriate i386 items (eg the boot sector)? If the network, usb or other media work in the

Re: Opteron 250 Overheating

2010-03-15 Thread Lars Nooden
On 2010-3-15 11:47 AM, Ludo Smissaert wrote: ... Now I can still use it, longer than 30 minutes. To use it really on my lap, is impossible, both my lap and the top will burn ;) The ln2 reservoir may be empty. Those dry out quickly even when the machine is not in use. Seriously, do you find a

Re: help with mail retrieval/cleaning/storage setup using openbsd

2010-03-11 Thread Lars Nooden
On 2010-3-11 6:59 PM, inet_use...@samerica.com wrote: My idea is to have a script that periodically fetches the mail for all users, For that, one option is fetchmail: http://www.openbsd.org/4.6_packages/i386/fetchmail-6.3.9.tgz-long.html /Lars

Re: 4.7 make release fails

2010-03-08 Thread Lars Nooden
On 2010-3-8 8:48 PM, Bryan Irvine wrote: 'su -' should. I'm used to 'su -' also, but noticed that the dash has been depreciated in favor of '-l' for simulating a full login. /Lars

Re: OpenBSD 4.6 Intel Mac Mini

2010-03-07 Thread Lars Nooden
On 2010-3-7 4:21 AM, Devin Ceartas wrote: I run openBSD 4.6 on intel mac minis as production web and email servers. Works great. Nothing special about the install unless you want to keep a mac partion. Put in the i386 disk, reboot. May have hold down c, I forget. The AMD64 CD would give the

Re: OpenBSD 4.6 Intel Mac Mini

2010-03-07 Thread Lars Nooden
On 2010-3-7 12:36 AM, John Hope wrote: Does any clear step by step documentation exist for installing OpenBSD on a Mac Mini? ... One way, not necessarily the best way, if you want dualboot, is * boot the OS X installation disk. * Partition the disk, leaving a FAT32 partition for OpenBSD.

serial bsd.rd on loongson

2010-03-06 Thread Lars Nooden
What is the appropriate way to have bsd.rd (current) use only the serial interface for loongson? The current FAQ 7 does not outline the extra steps needed beyond changing /etc/ttys /Lars

Re: serial bsd.rd on loongson

2010-03-06 Thread Lars Nooden
On Sat, 6 Mar 2010, Otto Moerbeek wrote: The steps are outlined in INSTALL.loongson. You'll need to set some pmon variables. Yes, I have that working the way you do, booting off of wd0a. There are the PMON characteristics outlined in INSTALL.loongson. The serial seems needed for catching

Re: -current or -stable [was: Not another Browser Question]

2010-03-05 Thread Lars Nooden
On 2010-3-5 7:24 PM, Marc Espie wrote: Well, sometimes we fuck up -current. Not on purpose, but it happens. If you run into a broken snapshot, you may have to wait a few days until a new snapshot hits the mirrors, usually with everything fixed. ... and so, your system may be fucked for

Re: How to create an installation image of OpenBSD for a USB stick?

2010-03-04 Thread Lars Nooden
On 2010-3-4 12:22 AM, Ilya Ilembitov wrote: ...Second problem is that I live in a dorn, so I only have access to wireless connection, not wired. And I want to install OpenBSD to a laptop that is currently running Debian Linux. What you are trying to do turns out to be so easy that there's no

Re: -current or -stable [was: Not another Browser Question]

2010-03-04 Thread Lars Nooden
On 2010-3-4 6:44 PM, nixlists wrote: Anyway, I am still not clear where ... 'stable' refers to the APIs and ABIs. It also refers to the selection of packages and libraries and their versions. /Lars

booby trapped firmware (was Re: Dell PE850 CERC SATA controller)

2010-03-04 Thread Lars Nooden
On 2010-3-5 2:47 AM, Nick Holland wrote: Think about this a bit. These people DELIBERATELY put a feature in their firmware to STOP me (and a lot of other people) from using this card. Legit user, but they felt that I was entitled to help them debug their shit for no more than sixty days.

Re: Terminal initialization configuration for multiple consoles on loongson

2010-02-28 Thread Lars Nooden
On Thu, 25 Feb 2010, Otto Moerbeek wrote: The smfb(4) framebufer just does not support more than one screen. On Thu, 25 Feb 2010, Peter Hessler wrote: We don't provide multiple terminals for the loongson platform. You can use tmux, or start X instead. Thanks Otto and Peter. It has been a

Terminal initialization configuration for multiple consoles on loongson

2010-02-25 Thread Lars Nooden
The 22 Feb snapshot for loongson defaults to only one text console. Changing /etc/ttys to add extra terminals does not seem to have any effect: console /usr/libexec/getty std.9600 vt220 off secure ttyC0 /usr/libexec/getty std.9600 vt220 on secure ttyC1

dhcpd no longer providing default route

2010-02-25 Thread Lars Nooden
DHCPd on current serves up leases with no default route. It's been like that for a long while now and I've not been able to find anything about a solution. I notice in particular when connecting with clients from the various debian-based distros' install CDs. Old CDs (e.g. Ubuntu 5.10, 8.10)

VoIP protocols (was Re: $100 to configure ALTQ on a 4.6 router )

2010-02-23 Thread Lars Nooden
Ted Walther wrote: I'd like a configuration to give skype traffic ... SIP and H.323 are the two open protocols for VoIP. Ports has pjsua and Ekiga. http://www.pjsip.org/pjsua.htm http://ekiga.org/ There are many others and they can be used to call any other SIP-phone (or H.323

Re: Current on FuLoong unable to figure out system type

2010-02-19 Thread Lars Nooden
Otto Moerbeek wrote: On Thu, Feb 18, 2010 at 09:44:17PM +0200, Lars Nooden wrote: On Thu, 18 Feb 2010, Otto Moerbeek wrote: Retry with boot -k tftp://..., as suggested by the error message. Also PMON sometimes gets confused, and a power cycle is needed (using the reset button is not enough

Current on FuLoong unable to figure out system type

2010-02-18 Thread Lars Nooden
Installing current on a Yeeloong went rather smoothly. Fuloong 2F6004 is giving a bit more trouble and bsd.rd seems not to be able to identify the system type. What is needed to boot bsd.rd (with serial interface) on the FuLoong? Below is from the 17 feb snapshot. /Lars

Re: Current on FuLoong unable to figure out system type

2010-02-18 Thread Lars Nooden
On Thu, 18 Feb 2010, Otto Moerbeek wrote: Retry with boot -k tftp://..., as suggested by the error message. Also PMON sometimes gets confused, and a power cycle is needed (using the reset button is not enough in all cases). Thanks. I had misinterpreted the message and put the -k as an

Re: OT, .. but has anyone seen a crontab editor

2010-02-18 Thread Lars Nooden
L. V. Lammert wrote: ... no way I'd saddle some of these guys with vi, much less setting the cron time parameters correctly. Then you are far, far better off not letting them anywhere near the server room if they are that unqualified. Give them some time to learn and a training server, but

Re: PF log parser and dynamic PF rules...

2010-02-16 Thread Lars Nooden
Per-Olov SjC6holm wrote: How do you use authpf from a IPhone or similar... Probably Fugu or Cyberduck or, if you can get a shell, plain openssh, as Fugu is a UI for the client. http://rsug.itd.umich.edu/software/fugu/ http://cyberduck.ch/ /Lars

Re: PF log parser and dynamic PF rules...

2010-02-16 Thread Lars Nooden
Per-Olov Sjvholm wrote: On 16 feb 2010, at 11.11, Lars Nooden wrote: http://rsug.itd.umich.edu/software/fugu/ Noop. Can't see that these will work and all phones and computers seamlessly with ease of use for the users. You appear to have asked about clients for the iphone, not all

Re: PF log parser and dynamic PF rules...

2010-02-16 Thread Lars Nooden
Per-Olov Sjvholm wrote: ...Or did miss something here? You missed quite a lot. I would recommend looking up the following before aggravating a larger public: client - server architecture client application server (daemon) rss ssh http, https

Re: New Jacek Book

2010-02-15 Thread Lars Nooden
Aaron Stellman wrote: Nobody sane will give you a copy of copyrighted material, especially on a public mailing list. This matter shouldn't even be discussed here. Here, Aaron, download some copyrighted material all you want regardless of the sanity of these fellows:

Re: Jacek Books

2010-02-15 Thread Lars Nooden
Corey wrote: And if he is not responding to your personal emails, it is unlikely that posting on this list is going to help any further. Try going through his publisher. /Lars

Re: is the Lemote Yeeloong available in the US?

2010-02-04 Thread Lars Nooden
J.C. Roberts wrote: I'm curious if the processor bugs were with the Loongson 2E or 2F ? For notes, I've already started the process of trying to contact Lemote to see about *ahem* availability of their products, but I won't make any promises my wallet can't keep (Sorry Kurt). Can you post

Re: pf and apache: to stop a scripter

2010-02-02 Thread Lars Nooden
Jacob Yocom-Piatt wrote: there is a website protected by pf and running apache on a recent openbsd snapshot that needs to be protected against scripting attacks. i can configure both pf and apache to help block this behavior but am not familiar with the best practices for such configurations.

Re: way to help: laptops and weekly

2010-02-02 Thread Lars Nooden
Ingo Schwarze wrote: David Coppa wrote on Tue, Feb 02, 2010 at 04:19:07PM +0100: Maybe this can be an idea: http://xyne.archlinux.ca/manpages/cronwhip Citing from that page: :: DESCRIPTION :: Cronwhip runs cronjobs that would have been run in the time since the :: last system

cvs using ssh an intermediary machine

2010-02-01 Thread Lars Nooden
I've been trying a method to use CVS with SSH using a middle machine as a stepping stone to cvs.eu.openbsd.org. 4.6 - current - cvs.eu.openbsd.org For regular ssh this works ok to other machines. CVS doesn't seem to like it. The symptom is the message: can't create

Re: Keeping my OpenBSD system up to date

2010-01-31 Thread Lars Nooden
Steve Shockley wrote: On 1/31/2010 5:58 AM, James Stocks wrote: it doesn't presently have enough disk space to store a complete source tree. If there is a free usb port, an external device can be plugged in their and /usr (or specific sub-directories) mounted from that while you build a

Re: way to help: laptops and weekly

2010-01-31 Thread Lars Nooden
Ingo Schwarze wrote: Kevin Kadow wrote on Tue, Jan 26, 2010 at 04:40:13PM -0600: and also like his suggestion to check 'apm' and not launch housekeeping tasks when solely on battery power. I fear that's not an option. The apm(8) utility uses the apm(4) device which is limited to i386,

Re: Finding bsd.rd checksums for sets without booting?

2010-01-28 Thread Lars Nooden
Nick Holland wrote: look around in that file, you should have no problem finding it. you will learn more following that process than me giving you the answer. :) Good point. Grepping the output from 'strings' for large hexadecimal numbers finds the hash. strings /bsd.rd | egrep

Re: vsftpd

2010-01-28 Thread Lars Nooden
Jean-FranC'ois SIMON wrote: Is this normal way or do I miss something ? For ftp the normal way is to work with the chrooted ftp daemon that is part of the OpenBSD base: http://www.openbsd.org/faq/faq10.html#AnonFTP http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd /Lars

ssh - channel x: open failed: connect failed: Connection timed out

2010-01-26 Thread Lars Nooden
I'm getting a lot of timeouts using ssh as a socks proxy between 4.6 (ssh) and current (sshd). This is an example of the messages: channel 20: open failed: connect failed: Connection timed out channel 8: open failed: connect failed: Connection timed out channel 13: open

Re: way to help: laptops and weekly

2010-01-25 Thread Lars Nooden
I used to run into problems on old equipment (old in 1997 already) running the daily and weekly scripts early in the morning around the time I was arriving at work. find and conditional execution are one method available of checking the age of the database. #!/bin/ksh

OT: article comparing SFTP vs FTPS

2010-01-21 Thread Lars Nooden
Can anyone point to an article comparing the protocols SFTP and FTPS that meets all four of the following criteria? a. is well-written b. contains accurate information c. contains uptodate information, not ten years out of date d. is authoritative

Re: Announcing: JigglyPuffBSD

2010-01-20 Thread Lars Nooden
I don't like the color of your mascott, will refork into ReJigglyPuffBSD, with a red one. Dislike your choice of default mutt schemes; will rerefork into HotDogStandBSD. TrollBSD. Forked with a sed one-liner, released via another one that turns all available desktop themes into grey and

Re: Asking

2010-01-14 Thread Lars Nooden
pierre-andre.cheval...@zas.admin.ch wrote: ...address of factory or store OpenBSD to built computer, hardware and software... Try contacting some of the francophones on this list: http://www.openbsd.org/support.html Regards /Lars

Re: problems with emails through pf

2010-01-12 Thread Lars Nooden
Thanks Robert and Peter. Robert wrote: You probalby are using an uplink with a MTU lower than 1500. Peter wrote: match in all scrub (no-df max-mss 1440) the problem went away. tcpdump output of successful and failing connetions would be instructive, along with the actual error

Re: Disable SSH passwords per user

2010-01-05 Thread Lars Nooden
Ted wrote: Now I know I can do a Match pattern on User with PasswordAuthentication. You can also Match a group which will be useful if you wish to disable password authentication for more than one user now or to leave the option open in the future. /Lars

Re: dmassage skipping softraid

2009-12-30 Thread Lars Nooden
patrick keshishian wrote: On Wed, Dec 30, 2009 at 12:54 AM, Alexander Hall ha...@openbsd.org wrote: Lars Nooden wrote: I don't need it currently. I did get good benefits out of it with some embedded devices I used to need frequently. It made start up noticeably faster on a pair of net4801

  1   2   >