Re: hardware needed for network stack performance work

2007-06-13 Thread Will H. Backman
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Theo de Raadt Sent: Wednesday, June 13, 2007 1:30 PM To: Jack J. Woehr Cc: [EMAIL PROTECTED] Org Subject: Re: hardware needed for network stack performance work On Jun 13, 2007, at 11:02 AM, Theo de Raadt

Re: Problem routing 10.x.x.x networks through a firewall

2007-01-30 Thread Will H. Backman
John Brahy wrote: Hello, I am having a problem routing IP traffic on my network. my firewall has three interfaces. | +-+--+ | P2P - t1 | | router | | 10.1.2.1 | +-+--+ | +-+--+ | 10.1.2.2 | | router | | 10.1.3.1 | +-+--+ |

/etc/rc.local changes not picked up by first insecurity report

2007-01-25 Thread Will H. Backman
Running 4.0 RELEASE in i386. I installed yesterday, and today, received my nice daily insecurity output. I love this report because it is a great way to document my initial configuration changes. I noticed that it didn't pick up my changes to /etc/rc.local that I made to start mysql. Looking in

amd64 4.0 on Dell 2950 install problem

2006-12-19 Thread Will H. Backman
I have a Dell 2950, and I'm trying to install the amd64 port of 4.0 release. Install goes fine until the card tries to get an IP address from dhcp. Then I get: Fatal protection fault in supervisor mode. Trap type 4 code 0 rip802c279c cs 8 rflags 10286 cr 2 4a8f40 cpl 7 rsp

Re: layout of filesystems on OpenBSD

2006-11-10 Thread Will H. Backman
Robert Urban wrote: to me, this just looks like a horrible mess. I have never understood why people should be so keen on creating thousands of microscopic filesystems. For me, the advantage of being able to have several classes of filesystem content all take advantage of the available free

Re: proposed patch for ifconfig(8) man page

2006-11-07 Thread Will H. Backman
Bob Beck wrote: * Jason McIntyre [EMAIL PROTECTED] [2006-11-07 11:25]: On Tue, Nov 07, 2006 at 06:52:19PM +0100, Igor Sobrado wrote: Can I suggest adding atalk(4), inet6(4), ipsec(4), pf(4), pflog(4), eon(5), hostapd(8), and tcpdump(8) to the SEE ALSO section of ifconfig(8)? I think

help with uaudio device

2006-11-03 Thread Will H. Backman
I'm trying to get an external usb audio device working on 4.0 release: uaudio0 at uhub1 port 2 configuration 1 interface 0: FORTEMEDIA FM1083, rev 1.10/0.01, addr 2 uaudio0: ignored audio interface with 2 endpoints uaudio0: audio rev 1.00, 5 mixer controls audio1 at uaudio0 I'm a little

Month of the Kernel bug fuzzing tools

2006-11-02 Thread Will H. Backman
Anyone tried these fuzzing tools on OpenBSD? http://projects.info-pull.com/mokb/ What's the purpose of the MoKB ? Publish one bug on daily basis for the month of November, 2006. Show tools and procedures useful for testing the strength and quality of kernel code (ex. networking,

sensorsd.conf multiple thresholds for the same sensor allowed?

2006-10-31 Thread Will H. Backman
Is it possible to specify multiple thresholds for the same sensor in /etc/sensorsd.conf? For example: hw.sensors.2:low=50F:high=70F:command=/bin/echo Ambient Temp %2 | /usr/bin/mail -s Hardware Sensors Warning [EMAIL PROTECTED] hw.sensors.2:low=55F:high=68F:command=/bin/echo Ambient Temp %2 |

Re: OpenBSD Audio series other than bsdtalk ?

2006-10-25 Thread Will H. Backman
Jon Simola wrote: On 10/25/06, Douglas Hunter [EMAIL PROTECTED] wrote: Other than bsdtalk, NYCBUG and some rare one off taster programmes are there any recordings of talks about OpenBSD (OGG or MP3) available on the web ? I'm really hoping someone recorded Theo's talk at the CUUG last

spamd statistics

2006-10-23 Thread Will H. Backman
Some interesting spamd statistics gathered from /var/log/daemon: From 8am Oct 22 to noon Oct 23: 19112 connected messages from spamd, which means connections from IPs that are not in the whitelist. 2247 inbound messages from spamlogd, which mean connection from IPs that are already on the

Re: Spamd - whitelist of mis-behaving SMTP server POOLS

2006-10-20 Thread Will H. Backman
Steve Williams wrote: Hi, I have been running spamdb greylisting only for several years as my only line of defense at home. At work I have managed to sneak in a Sparc64 Sunfire 120 (OpenBSD 3.9) as a caching web proxy default gateway. Today, we had a fairly agressive attack on our email

spamd tolower or (char)tolower

2006-10-20 Thread Will H. Backman
While wandering around the source code to spamd looking to see if trapping was case insensitive, I noticed a slight difference in how spamd and spamdb convert addresses to all lower case: Spamd does the following in the greyupdate function: for (i = 0; trap[i] != '\0'; i++)

spamdb man page - greytrap address

2006-10-16 Thread Will H. Backman
In the man page for spamdb, it states: If adding or deleting a SPAMTRAP address (-T), key should be specified as an email address: [EMAIL PROTECTED] But this only works with quotes around the address for me, ie: [EMAIL PROTECTED] Should the man page be updated, or am I doing

Re: Oldest Server you run

2006-10-12 Thread Will H. Backman
Falk Husemann wrote: Hello List! We're trying to put an old server to good use again and would like to know what's exactly the oldest machine running OpenBSD? As machine we defined something with processor, ram, network, hard disk and a connection to the internet. So no Newton or toaster

multiple ways to build a kernel in docs

2006-09-26 Thread Will H. Backman
In the FAQ for building a kernel: http://www.openbsd.org/faq/faq5.html#Building After the make, it says to do a make install. In the section about following stable: http://www.openbsd.org/stable.html#building It instead says to backup the old kernel move the new kernel into the right place.

Re: multiple ways to build a kernel in docs

2006-09-26 Thread Will H. Backman
Henning Brauer wrote: * Greg Thomas [EMAIL PROTECTED] [2006-09-26 22:36]: Having just done it with make install for the first time, I'd always copied and moved it manually, it looks like it saves the previous kernel as /obsd. it actually replaces the kernel atomically by doing mv

Re: Experience with isakmpd/ipsec in production?

2006-08-21 Thread Will H. Backman
Have you experienced any interoperability problems when establishing tunnels with peers that run other implementations (cisco, checkpoint, etc)? And if so, how do you work around those? None--after finding the correct initial configuration everything just worked and continued to. One

Aladdin eToken (WSO) to donate

2006-08-18 Thread Will H. Backman
Any OpenBSD developers interested in an Aladdin eToken (WSO)? -- Will Backman Network Administrator Coastal Enterprises, Inc.

spamd and TLS on port 25

2006-08-10 Thread Will H. Backman
Am I correct in assuming that spamd and TLS on port 25 don't get along? -- Will

Re: spamd and TLS on port 25

2006-08-10 Thread Will H. Backman
Darrin Chandler wrote: On Thu, Aug 10, 2006 at 09:39:56AM -0400, Will H. Backman wrote: Am I correct in assuming that spamd and TLS on port 25 don't get along? -- Will Remember that you get *either* spamd *or* your MTA. So there's no getting along to deal with. However

spamd and spamlogd syslog level

2006-08-08 Thread Will H. Backman
Does anyone know why spamd and spamlogd log to syslog at different log levels. It isn't too hard to change syslog.conf to include daemon.debug in order to capture output from spamlogd, but why the difference?

spamd greylist and stutter/delay

2006-08-07 Thread Will H. Backman
I have spamd get up in a simple greylist mode, but I left the default /etc/spamd.conf file intact. I'm not running spamd-setup. By default, spamd is stuttering for 10 seconds, but watching /var/log/daemon, I also noticed that connections from spews and other lists are lasting for over 400

Re: simple spamd greylisting on transparent bridge

2006-08-04 Thread Will H. Backman
Will H. Backman wrote: Will H. Backman wrote: Is this a sane minimum configuration for spamd -g on a transparent bridge? Is it unwise to only greylist? 1. Create bridge with no IP's. 2. pf=YES and spamd_flags=-g in /etc/rc.conf.local 3. Simple three line /etc/pf.conf: ext_if=xl0 rdr

simple spamd greylisting on transparent bridge

2006-08-03 Thread Will H. Backman
Is this a sane minimum configuration for spamd -g on a transparent bridge? Is it unwise to only greylist? 1. Create bridge with no IP's. 2. pf=YES and spamd_flags=-g in /etc/rc.conf.local 3. Simple three line /etc/pf.conf: ext_if=xl0 rdr pass inet proto tcp from !spamd-white to any \

Re: simple spamd greylisting on transparent bridge

2006-08-03 Thread Will H. Backman
Will H. Backman wrote: Is this a sane minimum configuration for spamd -g on a transparent bridge? Is it unwise to only greylist? 1. Create bridge with no IP's. 2. pf=YES and spamd_flags=-g in /etc/rc.conf.local 3. Simple three line /etc/pf.conf: ext_if=xl0 rdr pass inet proto tcp

Re: GRE tunnel setup problem?

2006-08-01 Thread Will H. Backman
Alex Berdan wrote: Hi All, I set up a GRE tunnel between two sites to have the broadcast/multicast passing between the two but nothing is passing! I'm not using for the moment any firewall and the configuration straight forward as per man gre. 192.168.1.2/24 | | | |--

where is gif tunnel syntax in the man pages

2006-07-18 Thread Will H. Backman
I can't seem to find the man page that mentions the tunnel option for gif interfaces. There is a lot of information out there on the net, but I don't see it in the man page for gif or hostname.if. Also, is it true that giftunnel is the old syntax? -- Will

best place to specify ipv6 default route

2006-07-18 Thread Will H. Backman
The man page for mygate says that one can add an IPv6 gateway address to /etc/mygate, but it doesn't seem to add an entry to the routing table upon reboot. I'm not using rtsol anywhere. Most of my searching on the internet shows people adding a line to the /etc/hostname.gif0 file, i.e:

Re: best place to specify ipv6 default route

2006-07-18 Thread Will H. Backman
Darrin Chandler wrote: On Tue, Jul 18, 2006 at 04:37:23PM -0400, Will H. Backman wrote: The man page for mygate says that one can add an IPv6 gateway address to /etc/mygate, but it doesn't seem to add an entry to the routing table upon reboot. I'm not using rtsol anywhere. Most of my

Logging failed console login attempts

2006-07-13 Thread Will H. Backman
Is my memory fuzzy? The console on OpenBSD 3.9 release doesn't seem to log unknown username or failed login attempts anywhere. It does keep a count of failed logins for an existing account, which is displayed upon successful login. Somehow I remember the console being more verbose in previous

Re: Logging failed console login attempts

2006-07-13 Thread Will H. Backman
Dimitry Andric wrote: Will H. Backman wrote: The console on OpenBSD 3.9 release doesn't seem to log unknown username or failed login attempts anywhere. See this commit: http://www.openbsd.org/cgi-bin/cvsweb/src/etc/syslog.conf#rev1.14 Make the default syslog.conf not make the console

Re: apply updates to kernel and userland without recompiling?

2006-07-10 Thread Will H. Backman
Joe wrote: I manage a few openbsd 3.9-release firewalls and I need to update the OS, but I don't want to cvsup and recompile on each system. Is there a documented/recommended way to do update a system by creating a tarball or package of what was upgraded? I'm looking to apply security fixes

Re: UTF-8 text editor

2006-07-10 Thread Will H. Backman
Mackan wrote: On 10 jul 2006, at 20.43, Spruell, Darren-Perot wrote: From: [EMAIL PROTECTED] Is there any UTF-8-aware text editor (for terminal use) available for OpenBSD? Vi(m) and similar is out of question for me, I never learned those. As ubiquitous as vi is on Unix, it seems a shallow

Re: tcpdump on enc0

2006-07-05 Thread Will H. Backman
Otto Moerbeek wrote: On Wed, 5 Jul 2006, Stephen Bosch wrote: Otto Moerbeek wrote: On Wed, 5 Jul 2006, Stephen Bosch wrote: Does tcpdump work on enc0? Are you really too lazy to read a manual page? And for the record -- since some people found that question

Re: Support Needed for GPS and Time Signal Station Receiver Development

2006-06-02 Thread Will H. Backman
Have you looked at gpsd, which is BSD licensed? According to the author, they have very good device detection, so maybe you could use their device info database. http://gpsd.berlios.de/ -- Willg

license for getopt.c?

2006-05-31 Thread Will H. Backman
While wandering through the usr.bin source tree (not to imply that I am qualified to take the journey), I noticed that getopt.c doesn't have a license clause in it. Anyone know who david might be? $OpenBSD: getopt.c,v 1.6 2003/07/10 00:06:51 david Exp $ -- Will

Re: license for getopt.c?

2006-05-31 Thread Will H. Backman
Ted Unangst wrote: On 5/31/06, Will H. Backman [EMAIL PROTECTED] wrote: While wandering through the usr.bin source tree (not to imply that I am qualified to take the journey), I noticed that getopt.c doesn't have a license clause in it. Anyone know who david might be? $OpenBSD: getopt.c,v

head.c usage function

2006-05-26 Thread Will H. Backman
Looking at /bin/head source code. The usage function uses: fputs(usage: head [-n line_count] [file ...]\n, stderr); While many other programs use: fprintf(stderr, usage: arch [-ks]\n); Is there a difference? Is one preferred? Yes, I know. I should take a C programming course.

Re: basic questions regarding patching, errata and stable branch

2006-05-22 Thread Will H. Backman
Tobias Weisserth wrote: Hi everybody, I am still trying to sort out some of the information on the OpenBSD website about how to follow a specific branch and what are the benefits of each method. I understood what STABLE, CURRENT and RELEASE are and how to follow them. I still have some

Re: 002_xorg.patch compile error i386

2006-05-08 Thread Will H. Backman
Didier Wiroth wrote: Hello, The answer is the same as previous posts ;-) 1) man 8 release 2) tcl and tk installed ( or perhaps old versions - pkg_add -u) 3) clean sources? if not, delete your sources and refetch them 4) do not build in your src directory!!! - see man 8 release (use for example:

Re: /dev/rst[01] Question

2006-05-05 Thread Will H. Backman
dave feustel wrote: I have just installed OpenBSD 3.9 and I am running into some strangeness. What are the devices /dev/rst[01]used for? Thanks, Dave rewinding tape device, usually for backups.

002 patch and priv sep

2006-05-03 Thread Will H. Backman
002 patch for 3.9 says crash it and to execute malicious code within the X server. What side of the privilege separated X does this apply to? -- Will Happy I don't install X on my servers Backman

Evaluating load average

2006-05-03 Thread Will H. Backman
I'm looking for some hints on evaluating load average. I have a new system that is showing load averages over .50 most of the time, but I don't see that it is doing much according to systat vmstat. I figured that this machine would be way overpowered for the job it is doing. Is load average

Patch make question

2006-05-02 Thread Will H. Backman
001_sendmail.patch for 3.9 says: make obj make depend make make install Is there anything wrong with make obj make depend make make install ? -- Will

Ethereal Problems

2006-04-25 Thread Will H. Backman
From http://www.incidents.org/ Yes, if you use Ethereal, it is time to upgrade. According an advisory posted by Frsirt, 28 vulnerabilities has been identified in Ethereal which could be exploited by remote attackers to compromise a vulnerable system or cause a denial of service. Thanks for

Re: install sets as packages

2006-04-20 Thread Will H. Backman
Daniel Ouellet wrote: Will H. Backman wrote: Would there be a benefit to use the pkg_ tools to install and manage the install sets? I fail to see the point of it really. The install set is done at install time, or to add it if you miss it at the install. Plus packages tools

Re: Mounting remote filesystems from OpenBSD to OS X

2006-04-20 Thread Will H. Backman
Hans-Joerg Hoexer wrote: On Thu, Apr 20, 2006 at 02:11:36PM +0100, Constantine A. Murenin wrote: Hi, I have an OpenBSD (file-)server at a remote location on the internet that is around 137ms away from an OS X 10.4 laptop. Is there a way to securely mount OpenBSD's filesystems from OS X in

install sets as packages

2006-04-19 Thread Will H. Backman
As no answer came up after a little searching on google and the openbsd FAQ... Would there be a benefit to use the pkg_ tools to install and manage the install sets? The pkg_ tools seem to be a fairly elegent system. So if money and time and developers grew on trees, would it be a reasonable

Server Compatibility List

2006-04-18 Thread Will H. Backman
I don't know if this has been posted before, but I found a nice openbsd server compatibility list: To ensure availability of appropriate server hardware platforms for Profense, Armorlogic is testing new server models from major manufacturers on an ongoing basis. It is our goal to provide our

Re: Patch for asynch sendmail vulnerability on OPENBSD_3_6 stable

2006-04-14 Thread Will H. Backman
Michael Flanagan wrote: I found myself needing up apply the recent patch for sendmail against an aging 3.6 stable box. I took the sendmail patch for the 3.7 stable branch and applied it against 3.6 stable. It applied cleanly with the exception of a half dozen hunks in a couple of files. I

Re: OpenBGP: aggregating routes / set neighbor next-hop

2006-03-29 Thread Will H. Backman
On Cisco I configured neighbor 10.0.0.2 next-hop-self, but how to do this with openbgp? that, again, is sth nobody ever asked for or missed :) however, the (completely untested except for compilation) diff below should add set nexthop self. Index: bgpd.h How come Cisco doesn't send me the

3.9 patch 001 needed for CD release?

2006-03-27 Thread Will H. Backman
I assume this is an obvious question, but I just wanted to be sure. Was the release that was sent to the CD manufacturer created before the 3.9 001 errata? -- Will

Future licensing trouble for Sendmail

2006-03-27 Thread Will H. Backman
No, this isn't another Sendmail needs to be replaced because there was a security hole email. I was following the thread on BugTraq regarding the Sendmail vulnerability, and saw this from Theo (Mar 24 2006): Luckily within a few months you will be able to tell Sendmail how to disclose their bugs

Re: Small office with BSD blueprint

2006-03-21 Thread Will H. Backman
Will H. Backman wrote: Looking for feedback on a basic blueprint for a small office using BSD. Situation: Small office with maybe five workstations. Question: What would an all BSD setup look like? Solution that comes to mind: * Single server for DNS, DHCP, LPD, SMTP, IMAP, and home directories

Re: flash plugin mozilla-firefox

2006-03-21 Thread Will H. Backman
Hannah Schroeter wrote: Hello! On Tue, Mar 21, 2006 at 10:29:50AM -0500, Roy Morris wrote: Try this http://www.openbsd.org/faq/faq13.html#javaflash Nowadays, the recommendation to fetch a flashplugin and install it by hand is outdated. There's /usr/ports/www/opera/opera-flashplugin. Kind

Re: flash plugin mozilla-firefox

2006-03-21 Thread Will H. Backman
Hannah Schroeter wrote: Hello! On Tue, Mar 21, 2006 at 10:42:31AM -0500, Will H. Backman wrote: Hannah Schroeter wrote: On Tue, Mar 21, 2006 at 10:29:50AM -0500, Roy Morris wrote: Try this http://www.openbsd.org/faq/faq13.html#javaflash Nowadays, the recommendation to fetch

Small office with BSD blueprint

2006-03-20 Thread Will H. Backman
Looking for feedback on a basic blueprint for a small office using BSD. Situation: Small office with maybe five workstations. Question: What would an all BSD setup look like? Solution that comes to mind: * Single server for DNS, DHCP, LPD, SMTP, IMAP, and home directories. * Full install with

Re: Small office with BSD blueprint

2006-03-20 Thread Will H. Backman
Joachim Schipper wrote: On Mon, Mar 20, 2006 at 09:53:30AM -0500, Will H. Backman wrote: Looking for feedback on a basic blueprint for a small office using BSD. Situation: Small office with maybe five workstations. Question: What would an all BSD setup look like? Solution that comes to mind

Re: Small office with BSD blueprint

2006-03-20 Thread Will H. Backman
John R. Shannon wrote: Will H. Backman wrote: Looking for feedback on a basic blueprint for a small office using BSD. Situation: Small office with maybe five workstations. Question: What would an all BSD setup look like? Solution that comes to mind: * Single server for DNS, DHCP, LPD, SMTP

Re: Small office with BSD blueprint

2006-03-20 Thread Will H. Backman
Peter wrote: --- Joachim Schipper [EMAIL PROTECTED] wrote: [snip] Do you usually assign static IPs? Yes, on a small LAN such as this - why not? It cuts out one bad idea (DHCP), and does not have any disadvantages I can see. Except maybe that you need to update the DNS server(s) on all the

Re: Small office with BSD blueprint

2006-03-20 Thread Will H. Backman
Will H. Backman wrote: Looking for feedback on a basic blueprint for a small office using BSD. Situation: Small office with maybe five workstations. Question: What would an all BSD setup look like? Solution that comes to mind: * Single server for DNS, DHCP, LPD, SMTP, IMAP, and home directories

Re: Reminder about the X Aperture

2006-03-15 Thread Will H. Backman
Daniel Ouellet wrote: Sorry for my ignorance on the subject and this issue and the use of X all together. Not critical what so ever by any long shoot, but I was curious as to if there is some window manage that actually DO NOT need any of the X stuff all together? Meaning something that

Re: php in cgi mode suphp missing(?) from packages

2006-03-15 Thread Will H. Backman
Brandon Mercer wrote: Anon wrote: Hello :) My questions can be summarised as : 1) What is the easiest way to install php in CGI mode on OBSD? 2) Why doesn't OBSD have a package for php that includes the CGI version? 3) Why doesn't OBSD have a suphp package? Is there any special reason? I ask

Re: Openbgpd kernel tuning

2006-03-08 Thread Will H. Backman
Henning Brauer wrote: * Marcel Prisi [EMAIL PROTECTED] [2006-03-08 16:42]: OpenBGPD's config seems OK, but I need some help about OpenBSD's tunable parameters using sysctl. the only thing you might want to change is net.inet.ip.ifq.maxlen the default is a little low for routing at higher

Re: make build error on 3.9 (-current) i386

2006-03-01 Thread Will H. Backman
Reza Muhammad wrote: Hi guys, I was just updating my source tree through cvsup, and I've been following -current for a while. There hadn't been any problems before. But today, make build returned errors. The last time I cvsup'd was today around 10pm (GMT +7), and here's some of the

Re: integrating windows client and server with openbsd servers

2006-02-24 Thread Will H. Backman
-Original Message- From: [EMAIL PROTECTED] on behalf of Gustavo Rios Sent: Fri 2/24/2006 9:39 PM To: misc@openbsd.org Subject: integrating windows client and server with openbsd servers Hey folks, i am in need to make windows and openbsd machines to live together and happy. I have

3.8 mountd -n

2006-02-23 Thread Will H. Backman
Trying to get OS X to mount an openbsd nfs share. I can force OS X to use reserved ports by using mount_nfs -P from the command line, but users mounting from the finder don't have that option. OpenBSD man page for mountd says that there is an -n option to allow mounting from unreserved ports,

Re: 3.8 mountd -n

2006-02-23 Thread Will H. Backman
Will H. Backman wrote: Trying to get OS X to mount an openbsd nfs share. I can force OS X to use reserved ports by using mount_nfs -P from the command line, but users mounting from the finder don't have that option. OpenBSD man page for mountd says that there is an -n option to allow

More reasons to like OpenBSD

2006-02-22 Thread Will H. Backman
Just a note to the OpenBSD community: I have been helping a friend clean up after a security incident with a PHP web app that hadn't been patched on a Linux server. I run the same app on OpenBSD, and I worry a lot less. I still patch my PHP apps because it would be stupid to assume that OpenBSD

web FAQ 15 correction?

2006-02-16 Thread Will H. Backman
Possible correction? http://openbsd.org/faq/faq15.html#Intro Invoking pkg_add(1) with the -u flag and no package name will just examine all installed packages for updated versions. When a package has dependencies, they are also examined for updates. pkg_add -u now also does the upgrade, doesn't

Re: NIS server/client on OpenBSD

2006-02-10 Thread Will H. Backman
Edd Barrett wrote: On 2/10/06, Budhi Setiawan [EMAIL PROTECTED] wrote: Dear All, Can you give me a link HOWTO/FAQ/tutorial to create a NIS server/client on OpenBSD. Found this on google, but dont know how accurate it is. http://www.openbsdsupport.org/sharedhomes.html I could have swore

Status of pkg_add -u?

2006-02-10 Thread Will H. Backman
How functional and safe is pkg_add -u at this point? Also, I just wanted to say thanks for the hard work on the pkg_* tools. They just keep getting better. -- Will Backman - Network Administrator Coastal Enterprises, Inc. http://www.ceimaine.org

Re: OpenBSD hardware router

2006-02-02 Thread Will H. Backman
Kenny Mann wrote: I'm looking for something that which I can slap OpenBSD 3.8 on and use it as a router. This will be used for a house (~ 4 people) and I'm looking for something small in form factor and that which doesn't run hot because it will run in a closet. I'm seeking to replace our

Re: MS Security VP Mike Nash remarks on MS vs OpenBSD security.

2006-01-26 Thread Will H. Backman
Shane J Pearson wrote: What an incredible load of tripe!... From:http://interviews.slashdot.org/article.pl?sid=06/01/26/131246 Second, it is not completely accurate to say that OpenBSD is more secure. If you compare vulnerability counts just from the last 3 months, OpenBSD had 79 for

NYCBUG dmesg tracker

2006-01-26 Thread Will H. Backman
For those of you who are sending dmesg output to the developers, you may also want to post your dmesg to the New York City BSD Users Group dmesg tracker. From their site: Upload your dmesg so others can see your kernel boot messages and related troubleshooting details. Each dmesg is

Re: MS Security VP Mike Nash remarks on MS vs OpenBSD security.

2006-01-26 Thread Will H. Backman
Rob W wrote: http://www.securityfocus.com/bid/16375 is minor but important enough to report? A way to remotly crash a OpenBSD box is minor? From http://openbsd.org/security.html: Security information moves very fast in cracker circles. On the other hand, our experience is that coding and

Release Song License

2006-01-19 Thread Will H. Backman
Are the OpenBSD Release songs also BSD licenced? The lyrics page doesn't specify. I wanted to know if they are podcast safe.

NFS Book offer

2006-01-09 Thread Will H. Backman
Would any OpenBSD developer be interested in the book NFS Illustrated? http://www.awprofessional.com/bookstore/product.asp?isbn=0201325705redi r=1 I'll ship it to you. It got it for free, but it is over my head. -- Will Backman - Network Administrator Coastal Enterprises, Inc.

OpenBSD VMWare image too popular

2006-01-05 Thread Will H. Backman
I've just crossed the 10,000 downloads of the OpenBSD VMWare image since I posted it a few weeks ago. Unfortunately, it is a little too popular for the people providing my bandwidth. Is anyone else willing to host the file? I'll just point my page to you. You would be looking at about a

Re: OpenBSD VMWare image too popular

2006-01-05 Thread Will H. Backman
Jasper Lievisse Adriaanse wrote: On Thu, 5 Jan 2006 13:41:50 -0500 Will H. Backman [EMAIL PROTECTED] wrote: I've just crossed the 10,000 downloads of the OpenBSD VMWare image since I posted it a few weeks ago. Unfortunately, it is a little too popular for the people providing my bandwidth

Re: VPN packets not passing remote gateway [RESOLVED... sorta]

2006-01-04 Thread Will H. Backman
Jason Dixon wrote: On Jan 4, 2006, at 9:32 AM, Hekan Olsson wrote: On 4 jan 2006, at 05.57, Jason Dixon wrote: After some gentle persuading by Adrian Close, I dropped ipsecadm and went back to automatic key exchange with isakmpd. A quick configuration based on the east/west and all is

Re: Blowfish still good enough?

2006-01-03 Thread Will H. Backman
Ted Unangst wrote: On 12/31/05, Travers Buda [EMAIL PROTECTED] wrote: The Nazis thought their Enigma machine was perfect. Do you know why Enigma was broken? Primarily because the operators didn't follow procedure and made a series of other mistakes (This doesn't seem too important). As is

Possible error in vpn(8) man page

2005-12-23 Thread Will H. Backman
According to the vpn(8) man page: Paragraph just before section header for Creating IPsec Flows [manual keying] Note that when no authentication and encryption algorithms are defined, ipsecctl(8) will automatically use HMAC-SHA2-256 for authentication and AES-128 in countermode for

OpenBSD is popular as a VM image

2005-12-22 Thread Will H. Backman
Just an update on the popularity of the OpenBSD 3.8 VM image: Since it was posted on Dec 19 (4 days ago), apache logs have shown 2826 hits on the file with just over 277 gigs of traffic created by those downloads. Not bad for only a few days. -- Will Backman - Network Administrator Coastal

Re: Unable to build Gateway route

2005-12-22 Thread Will H. Backman
martin wrote: --- Jason Crawford [EMAIL PROTECTED] wrote: IP - 209.216.76.1 Netmask - 255.255.255.252 GW - 209.216.77.6 Either a typo in your netmask, or a typo in your gateway, since your gateway IP does not belong to the current netmask you assigned to your external IP. I have a feeling

ipsecctl writev failed

2005-12-21 Thread Will H. Backman
OpenBSD 3.8 release. I'm getting the same errors as this thread: http://archives.neohapsis.com/archives/openbsd/2005-11/1980.html I'm trying to use as many defaults as possible in this test setup, and sha1 is not being chosen by the defaults. Any ideas? Here is my ipsec.conf (yes, key values

OpenBSD on virtual machine community page

2005-12-19 Thread Will H. Backman
My OpenBSD 3.8 virtual machine image has made it on to the VMWare community virtual machine page. Perhaps this means that more people will be trying out OpenBSD. My page does warn people not to expect the OpenBSD project to support this. I hope this will be a benefit to the OpenBSD community by

Re: browser security

2005-12-14 Thread Will H. Backman
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bob Smith Sent: Wednesday, December 14, 2005 11:37 AM To: J. C. Roberts Cc: misc@openbsd.org Subject: Re: browser security thanks for the explanation. so it would be less work to try to chroot a

Re: browser security

2005-12-14 Thread Will H. Backman
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Simon Morgan Sent: Wednesday, December 14, 2005 2:32 PM To: J.C. Roberts Cc: misc@openbsd.org Subject: Re: browser security On 14/12/05, J.C. Roberts [EMAIL PROTECTED] wrote: When you think about

Re: WebTools

2005-12-09 Thread Will H. Backman
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ricardo Lucas Sent: Friday, December 09, 2005 10:17 AM To: misc@openbsd.org Subject: WebTools Hello everybody, that's my doubt, what program can I use to monitoring the traffic of my LAN, and

Re: NFS and Rebooting problem

2005-12-09 Thread Will H. Backman
If you want to do it properly, use fdisk -e wd1, disklabel -E wd1, and newfs /dev/rwd1a, in that order. Joachim Which is the short version of the New Disk FAQ: http://www.openbsd.org/faq/faq14.html#NewDisk

Re: Updated CCD Mirroring HOWTO

2005-11-29 Thread Will H. Backman
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Greg Oster Sent: Tuesday, November 29, 2005 12:26 PM To: Robbert Haarman Cc: misc@openbsd.org Subject: Re: Updated CCD Mirroring HOWTO Robbert Haarman writes: Greg, Again, you raise some

Re: #define failure opportunity

2005-11-29 Thread Will H. Backman
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Spruell, Darren-Perot Sent: Tuesday, November 29, 2005 2:57 PM To: 'misc@openbsd.org' Subject: Re: #define failure opportunity From: pete wright [mailto:[EMAIL PROTECTED] Not that I don't think

Re: Where to get md5 of X* install sets and packages

2005-11-22 Thread Will H. Backman
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Siju George Sent: Monday, November 21, 2005 10:46 PM To: misc Subject: Re: Where to get md5 of X* install sets and packages On 11/18/05, Siju George [EMAIL PROTECTED] wrote: Hi all,

Re: skype security?

2005-11-18 Thread Will H. Backman
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tobias Ulmer Sent: Friday, November 18, 2005 3:50 AM To: misc@openbsd.org Subject: Re: skype security? On Fri, Nov 18, 2005 at 11:14:22AM +0800, Lars Hansson wrote: Skype was brought to you by the

Re: pre defined macro

2005-11-16 Thread Will H. Backman
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David fire Sent: Wednesday, November 16, 2005 10:29 AM To: misc@openbsd.org Subject: pre defined macro hi i almost finish my network the only think i need to finish is a way to tell to PF what it

Re: Filesystem redundancy

2005-11-16 Thread Will H. Backman
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marco Peereboom Sent: Wednesday, November 16, 2005 11:41 AM To: knitti Cc: Julian Smith; misc@openbsd.org Subject: Re: Filesystem redundancy This is actually pretty common believe it or not. This

Re: isakmp implementation vulnerabilities

2005-11-15 Thread Will H. Backman
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dries Schellekens Sent: Tuesday, November 15, 2005 9:26 AM To: Chad Loder Cc: misc@openbsd.org Subject: Re: isakmp implementation vulnerabilities Chad Loder wrote: I just tested our isakmpd(8)

Yeah - not vulnerable to lynx vulnerability

2005-11-15 Thread Will H. Backman
http://www.idefense.com/application/poi/display?id=338type=vulnerabilit iesflashstatus=true Other vendors are suspected as also being vulnerable. The following vendors include Lynx packages that are not susceptible to exploitation as the lynxcgi feature is not compiled into Lynx by default:

  1   2   3   >