Re: icanhaze.c OpenSSH exploit?

2014-05-06 Thread jared r r spiegel
On Tue, May 06, 2014 at 02:32:16PM -0700, Chris Cappuccio wrote: Giancarlo Razzolini [grazzol...@gmail.com] wrote: My gut feeling when I first read your message was that you're joking. But, since it was a subtle joke, I got suspicious. Better to safe than sorry. Anyway, I hardly believe the

obsd.cec.mtu.edu rsync 'ftp' target doesn't have 5.0

2011-12-05 Thread jared r r spiegel
openbsd.mirror.frontiernet.net rsyncs from obsd.cec.mtu.edu and thus the former doesn't have 5.0 either. i don't have / didn't find any contact info for the maintainer of the cec.mtu.edu mirror beyond 'cel...@mtu.edu' listed as the contact for the AnonCVS service. i sent an email to

Re: Latest snapshot packages: Interloper?

2011-06-21 Thread jared r r spiegel
On Mon, Jun 20, 2011 at 01:34:47PM +1000, Rod Whitworth wrote: On Sun, 19 Jun 2011 18:28:10 -0400, STeve Andre' wrote: On 06/19/11 18:19, Rod Whitworth wrote: This popped up as the first file (in name order) when I went to see if there was a new bunch of pkgs to go with the install iso I'm

opencvs@ support for openbsd.mirror.frontiernet.net

2011-06-16 Thread jared r r spiegel
in response to the 18x18ja.bdf out of memory issue while using GNU cvs on the server, i've implemented support for opencvs to run the cvs server also. as it has always been, one can access GNU cvs on the server side with: CVSROOT=anon...@openbsd.mirror.frontiernet.net:/cvs and now one

openbsd.mirror.frontiernet.net downtime

2010-07-27 Thread jared r r spiegel
swinging the mirror to a new machine today; i'll post again when it's complete. -- jared

Re: openbsd.mirror.frontiernet.net downtime

2010-07-27 Thread jared r r spiegel
On Tue, Jul 27, 2010 at 03:08:03PM -0700, jared r r spiegel wrote: swinging the mirror to a new machine today; i'll post again when it's complete. this is all set. things should be way faster now. i had to juggle some IPs, so there might be some DNS entries in TTL cache referring

ipsecctl/ipsec.conf: number-only macros not dereferencing

2010-07-22 Thread jared r r spiegel
in 4.2/i386, number-only macros in ipsec.conf worked fine/parsed OK, syntax-wise: --- # cat test.conf cat = dog cow = $cat cat = 1234abc cow = $cat cat = 1234 cow = $cat # uname -msr; ipsecctl -nvvf ./test.conf OpenBSD 4.2 i386 cat = dog cow = dog cat = 1234abc cow = 1234abc cat = 1234 cow

Re: ipsecctl/ipsec.conf: number-only macros not dereferencing

2010-07-22 Thread jared r r spiegel
for what it's worth, pfctl in -current parses this situation fine, but ipsecctl does not: # cat cow.conf cow = 'moo' moo = $cow cow = '1234' moo = $cow cow = ' 1234 ' moo = $cow cow = '12a34' moo = $cow # ipsecctl -nvf ./cow.conf cow = moo moo = moo cow = 1234 ./cow.conf: 4: syntax error cow

Re: ipsecctl/ipsec.conf: number-only macros not dereferencing

2010-07-22 Thread jared r r spiegel
On Thu, Jul 22, 2010 at 08:05:55PM -0600, Theo de Raadt wrote: i went on and tested '-nvf ./cow.conf' in each of: bgpd, ldapd, ldpd, ospfd, relayd, ripd, snmpd, smtpd, ypldap. they all errored out only exactly on lines 4 and 6 m4(1) seems to parse the file fine though.

Re: ipsecctl/ipsec.conf: number-only macros not dereferencing

2010-07-22 Thread jared r r spiegel
On Thu, Jul 22, 2010 at 07:43:55PM -0701, jared r r spiegel wrote: is this specific behaviour the way of the future or accidental? if it helps answer that, ipsecctl/parse.y r1.126 (first ipsecctl/parse.y of 4.2-current) is the first revision that all-number macros can't be used

openbsd.mirror.frontiernet.net downtime and new upstream

2009-09-09 Thread jared r r spiegel
i've been looking around for an optimal rsync upstream for openbsd.mirror.frontiernet.net and it looks like openbsd.mirrors.tds.net is optimal for me to use. i'd like to run it by the maintainer of that site first for clearance but don't know any contact info for them, so if anyone

Re: openbsd.mirror.frontiernet.net downtime and new upstream

2009-09-09 Thread jared r r spiegel
On Wed, Sep 09, 2009 at 03:50:58PM -0400, Brynet wrote: http://openbsd.mirrors.tds.net/ or http://mirrors.tds.net/ that has contact info, thank you -- jared

Re: apc ups daemon

2009-06-10 Thread jared r r spiegel
On Wed, Jun 10, 2009 at 03:01:38AM +0300, Thanasis wrote: on 06/10/2009 01:45 AM Diana Eichert wrote the following: Look in the Makefile for the port and see if the sparc platform is excluded. If not then build it yourself from ports. diana +1. diana is right a LOT. If I search

Re: autowhitelister for spamd needs testing

2009-04-22 Thread jared r r spiegel
On Thu, Apr 23, 2009 at 12:30:28AM +, Stuart Henderson wrote: I see a tiny little problem with this method... sometimes people send spam from domains whose DNS they control. +1 i think part of the success i experience using SPF as a means to create whitelists is in the fact that i

Re: nc -w with -z does not seems to work.

2009-01-30 Thread jared r r spiegel
On Fri, Jan 30, 2009 at 01:34:51PM +0530, Rajkumar S wrote: 2009/1/30 jared r r spiegel j...@ice-nine.org: check the obsd manpage, it is specifically different and does not mention connects:' But nc -h gives -w secs Timeout for connects and final net reads yup, you're

Re: Is it possible to increase wscale multiplier?

2009-01-30 Thread jared r r spiegel
On Fri, Jan 30, 2009 at 05:55:48PM -0800, Philip Guenther wrote: It seems the only significantly value for net.inet.tcp.rfc1323 is 0 (disabled) vs. non-0 (ws=0). Am I missing something? You'll never see a scale size larger than zero unless the involved program sets a socket receive

Re: nc -w with -z does not seems to work.

2009-01-29 Thread jared r r spiegel
On Thu, Jan 29, 2009 at 12:26:21PM +0530, Rajkumar S wrote: Help says -w is timeout for connects and final net reads, so nc should exit after 2 seconds, and it does exit when tested under linux, but not under openbsd. check the obsd manpage, it is specifically different and does not

Re: KDE/DCOP vs pf

2009-01-25 Thread jared r r spiegel
On Sun, Jan 25, 2009 at 03:45:25AM -0800, Ken Dickey wrote: On 2009 January 24 03:09:57 pm Pereresus ne Vlezaet Buggy wrote: Add set skip on lo. Searching for the right place of this string will be your homework. Thanks much. My working pf.conf now contains: i'll take the opportunity

Re: Mount directories of unmounted disks/partitions

2009-01-16 Thread jared r r spiegel
On Thu, Jan 15, 2009 at 10:46:35PM +0100, Jon Sj?stedt wrote: I want a mounting point in the root file system to be mounted with a directory found inside a device that is not yet mounted. I also want this transparent to samba and NFS (I'll use both). so: - you have a device, /dev/wd0d. -

Re: Release IP-adress OpenBSD 3.8

2009-01-14 Thread jared r r spiegel
On Tue, Jan 06, 2009 at 06:37:14PM +0100, Anders ?quist wrote: Hello. I have been looking for information on how to release the current lease of IP-adress. you install the isc-dhcp port (or isc-dhcp3, whatever it is called). the dhclient in base does not have release functionality

Re: Release IP-adress OpenBSD 3.8

2009-01-14 Thread jared r r spiegel
On Wed, Jan 07, 2009 at 05:52:48PM -0600, Andrew Daugherity wrote: On Tue, Jan 6, 2009 at 3:11 PM, Stuart Henderson s...@spacehopper.org wrote: Release is an optional part of DHCP but some servers won't reassign the IP address to a client with another MAC unless it happens. In that case

Re: panic on 08 jan 2009 snapshot. **update**

2009-01-09 Thread jared r r spiegel
On Fri, Jan 09, 2009 at 09:26:00PM -0800, Bryan wrote: On Fri, Jan 9, 2009 at 9:16 PM, Bryan bra...@gmail.com wrote: Greetings, previous snapshots were able to boot with no issues. I'm using GENERIC.MP, and the panic occurs when using GENERIC.SP. be sure to sendbug(1) this if you have

Re: mutt and ffs stat performance when starting mutt

2008-12-03 Thread jared r r spiegel
On Wed, Dec 03, 2008 at 03:38:07PM +0800, David Schulz wrote: maildir_header_cache_verify means : Check for Maildir unaware programs other than Mutt-ng having modified maildir files when the header cache is in use. This incurs one stat(2) per message every time the folder is opened. Can

Re: uvm_mapent_alloc

2008-10-13 Thread jared r r spiegel
fwiw, i had uvm_mapent_alloc terrors a while back, which have been nonpresent since the july 14th 2008 snapshots -- jared

Re: cp error message Invalid character in program

2008-10-06 Thread jared r r spiegel
On Sat, Oct 04, 2008 at 03:44:37PM -0600, Jack Woehr wrote: Philip Guenther wrote: What's the output of ktrace rm ccreply.rex kdump | egrep -A1 -B2 'execv|errno' You answered it. Look here: 16524 rm CALL open(0xcfbd1e60,0,0) 16524 rm NAMI /opt/ooRexx/bin/rexx.cat

Re: The correct way to use bsd.rd

2008-09-29 Thread jared r r spiegel
On Sat, Sep 27, 2008 at 11:02:24PM +0900, Jordi Beltran Creix wrote: However, when I place my newly generated image in / and boot from it yeah, it's way easier to not generate them but just do Reading the FAQ I found out that the official way to follow current snip is to snip download a

Re: Mirror/anoncvs traffic stats?

2008-09-19 Thread jared r r spiegel
On Fri, Sep 19, 2008 at 02:47:43AM +0400, Vadim Zhukov wrote: Hello to all, especially ones running mirrors/anoncvs servers. Does anyone have traffic statistics, especially inbound traffic? openbsd.mirror.frontiernet.net gets its anoncvs via sup and its ftp root via rsync; incoming

ip.ipsec-enc-alg

2008-09-07 Thread jared r r spiegel
does isakmpd(8) actually use this and the other ipsec-* sysctls? ip.ipsec-enc-alg has been aes for as long as i've ever noticed it and it seems isakmpd always wants to use 3des for as long as i've known about it (perhaps because it performs an explicit default of the

Re: macbook / azalia(4) / amd64 / -current / nosound?

2008-09-05 Thread jared r r spiegel
On Thu, Sep 04, 2008 at 05:29:08AM +, Jacob Meuser wrote: curious, what makes you think it's line3? came to the conclusion because if i set, like, mix3 to have a volume of something high, and mix4 to something lower, and then change the source for line3 between them, i can hear that

Re: macbook / azalia(4) / amd64 / -current / nosound?

2008-09-03 Thread jared r r spiegel
On Wed, Sep 03, 2008 at 10:32:42AM +0200, Tim Saueressig, thepixelz.com wrote: jared r r spiegel schrieb: i cannot get sound output to happen on this thing; i see indication that others with macbooks (pro and regular) have had sound since sometime in 4.2-current land. azalia(4) says

Re: Spamd - whitelisting round robin mail servers?

2008-09-03 Thread jared r r spiegel
On Wed, Sep 03, 2008 at 08:26:25PM -0700, Jeff Simmons wrote: So I just set up a nice spamd for a client, and then watched Google's Postini try to resend a single email message from just about every IP they own. There are some whitelists for commercial servers available, mainly one at

macbook / azalia(4) / amd64 / -current / nosound?

2008-09-02 Thread jared r r spiegel
i cannot get sound output to happen on this thing; i see indication that others with macbooks (pro and regular) have had sound since sometime in 4.2-current land. azalia(4) says 'Known supported devices are Intel 82801FB/GB/HB/IB', and per my dmesg i have an '82801H', so maybe this is

Re: odd greyscanner behaviour

2008-08-30 Thread jared r r spiegel
On Sat, Aug 30, 2008 at 08:30:22AM +, Stuart Henderson wrote: In any event, it's definitely not all that unusual... seconded. the closest i've come to being able to deal with this is having written a script who performs SPF lookups on the domain in question (eg, will recurse up to

Re: isakmpd from XX to any; possible to offer choice of algorithm?

2008-08-29 Thread jared r r spiegel
On Fri, Aug 29, 2008 at 11:02:18PM +, Stuart Henderson wrote: Does anyone know of a way, either using ipsec.conf or isakmpd.conf, to permit use of _either_ AES _or_ 3DES in phase 1? Or do I need to go to all the other endpoints and reconfigure them to a common algorithm (i.e. 3DES)?

Re: isakmpd from XX to any; possible to offer choice of algorithm?

2008-08-29 Thread jared r r spiegel
On Fri, Aug 29, 2008 at 11:02:18PM +, Stuart Henderson wrote: Now someone would like to add a device which (like some other devices connecting to this machine) is not on a fixed address so it needs to use the to any rule. Though it supports AES in phase 2, only DES or 3DES are permitted

cwm(1) maximize vs. xrandr dualhead

2008-08-27 Thread jared r r spiegel
macbook amd64 with aug.12 snapshots, inteldrm enabled in ukc (this situation exists either way tho) using macbook LCD and external LCD (dell 2001FP) via VGA cable. external LCD physically rotated 90degrees CW and situated directly above mac LCD. xrandr told to rotate the VGA

Re: maybe OT 4 year anniversay of Chuck Yerkes death

2008-08-27 Thread jared r r spiegel
On Wed, Aug 27, 2008 at 04:32:34PM -0600, Diana Eichert wrote: Just wanted to remember you Chuck, take it easy wherever you are. think of him every time i go past

Re: OpenBGPd: don't announce a specified prefix to a peer

2008-08-27 Thread jared r r spiegel
On Wed, Aug 27, 2008 at 04:18:07PM +, Stuart Henderson wrote: On 2008-08-27, smartTERRA NOC [EMAIL PROTECTED] wrote: Hi, is there a way to dynamically deny prefixes learned via iBGP / IGP or have I to specify all the prefixes manually? Regards, Falk Communities.

Re: Altq number of queues

2008-08-27 Thread jared r r spiegel
On Wed, Aug 27, 2008 at 10:04:25AM -0300, Fabio Almeida wrote: Ooops Yes, I mean HFSC :) http://marc.info/?l=openbsd-pfm=105686547406316w=2 http://marc.info/?l=openbsd-pfm=105696331913195w=2 maybe it just fell off the radar, or maybe there turned out to be a good reason to not

Re: Daily script leaving processes

2008-08-27 Thread jared r r spiegel
On Mon, Aug 04, 2008 at 02:38:15PM +0200, Ivo van der Sangen wrote: When I tried to kill these processes I noticed that I culdn't kill the find processes that are apparently stuck in the kernel having WAIT status nfsrcvl. The obvious issue here is the nfs mount, but why does this cause the

Re: Role of the package system when following -current

2008-08-27 Thread jared r r spiegel
On Mon, Aug 04, 2008 at 01:43:31PM -0400, aeonsystems.com wrote: when one follows -current aggressively (ie. one rebuilds everything at least monthly) should one opt to compile all software from ports, or is the package system still useful and reliable? My guess is that installing all

Re: Role of the package system when following -current

2008-08-27 Thread jared r r spiegel
On Wed, Aug 27, 2008 at 10:04:08PM -0400, jared r r spiegel wrote: On Mon, Aug 04, 2008 at 01:43:31PM -0400, aeonsystems.com wrote: when one follows -current aggressively (ie. one rebuilds everything at least monthly) should one opt to compile all software from ports

Re: How much RAM is needed for cvs(1)?

2008-08-27 Thread jared r r spiegel
On Thu, Aug 28, 2008 at 06:23:13AM +0100, Tomas Bodzar wrote: Hi all, I tried # cd /usr # export [EMAIL PROTECTED]:/cvs # cvs -d$CVSROOT checkout -P xenocara i did a while sleep ps loop somefile while doing a fresh checkout of xenocara and see the following as max values

Re: Packet Filter: how to keep device names on hardware failure?

2008-08-22 Thread jared r r spiegel
On Fri, Aug 22, 2008 at 04:16:38PM +0200, Harald Dunkel wrote: Hi folks, Question: How can I make sure that em2 doesn't become em0 if my dual-port NIC dies? This would be fatal for my firewall setup. At least the antispoof rules _must_ be bound to the network devices. first thing that

Re: ipsec vpn problem

2008-08-22 Thread jared r r spiegel
On Fri, Aug 22, 2008 at 03:11:16PM +0200, Claus Larsen wrote: Well I did get a bit futher with the problem, it seems it was cause by a firewall blocking some of the traffic. So new problem now. Using the Greenbow vpn client. It says Phase 2 algoritm problem. From the isakmpd output I

Re: shell not reading login script

2008-08-21 Thread jared r r spiegel
On Thu, Aug 21, 2008 at 10:30:32AM +0900, Joel Rees wrote: Added markers to each of .profile, login and .cshrc: PROFMARKER=.profile etc. But none of the markers show up in a printenv, whether I simply start a new xterm, or go to the trouble of logging out and back in. when i have stuff

Re: FFS2

2008-08-01 Thread jared r r spiegel
On Thu, Jul 24, 2008 at 08:53:24PM -0400, jmc wrote: --- John Nietzsche [Thu, Jul 24, 2008 at 07:19:11PM -0300]: --- Dear OpenBSD friends, how may i format a slice with FFS2? and what to put into /etc/fstab IIRC from some list traffic, you have to be careful what filesystems you format

Re: uvm_mapent_alloc: out of static map entries

2008-08-01 Thread jared r r spiegel
On Wed, Jul 16, 2008 at 11:15:50PM -0401, jared r r spiegel wrote: On Wed, Jul 16, 2008 at 09:13:14PM -0400, jared r r spiegel wrote: on jul 11 snapshots now, have gone thru i think 2 or 3 snapshot iterations since ~early/mid june. cracked out again hardcore a bit ago (when

uvm_mapent_alloc: out of static map entries

2008-07-16 Thread jared r r spiegel
cri on jul 11 snapshots now, have gone thru i think 2 or 3 snapshot iterations since ~early/mid june. first recorded/noticed incident of the 'uvm_mapent_alloc: out of static map entries' jobby was jun.16th while running a DEBUG.MP kernel i had made in attempt to catch more info on a

Re: 'Nother broken package - git-1.5.4.2

2008-07-16 Thread jared r r spiegel
On Wed, Jul 16, 2008 at 04:54:34PM -0500, L. V. Lammert wrote: At 05:23 PM 7/16/2008 -0400, William Boshuck wrote: On Wed, Jul 16, 2008 at 03:42:15PM -0500, L. V. Lammert wrote: I always do my homework, Is the following mindless word-drool about 'put startx into rc' an example of how you

Re: uvm_mapent_alloc: out of static map entries

2008-07-16 Thread jared r r spiegel
On Wed, Jul 16, 2008 at 09:13:14PM -0400, jared r r spiegel wrote: on jul 11 snapshots now, have gone thru i think 2 or 3 snapshot iterations since ~early/mid june. cracked out again hardcore a bit ago (when it shits out it seems accurate to call it a deadlock), so now am on: OpenBSD

Re: rtorrent problems - solved?

2008-07-14 Thread jared r r spiegel
On Sun, Jul 13, 2008 at 11:16:59PM -0700, Aaron Stellman wrote: On Mon, Jul 14, 2008 at 07:55:23AM +0200, Bj??rn Ketelaars wrote: viq wrote: Sorry for the carpet bombing, I grabbed the list of people who I saw report problems with rtorrent. I'm writing to ask those who had problems

Re: Recommendation for a UPS

2007-04-16 Thread jared r r spiegel
On Sun, Apr 15, 2007 at 03:45:35PM -0400, Jean-Daniel Beaubien wrote: What are your power requirements? Just a single server? How big of a system are we talking about? ...mainframe, onyx, or a single opteron? Regards, ~Jason My power requirements are very small. The server is running

Re: SSH/SFTP question

2007-04-15 Thread jared r r spiegel
On Sat, Apr 14, 2007 at 05:32:38PM -0400, Frank Bax wrote: Based on what your vendor says; it looks like the file originally contains only LF and not CRLF; so enabling ASCII transfer should convert LF to CRLF. If your transfer software doesn't have this option find another that does.

Re: SSH/SFTP question

2007-04-14 Thread jared r r spiegel
On Fri, Apr 13, 2007 at 09:37:14AM -0400, stuart van Zee wrote: I was under the impression that when using SFTP to transfer files they were automatically treated as Binary files. i might totally be wrong, but i had the impression that sftp doesn't incorporate the 'legacy ftp' concept of

Re: best userland visibility IDE/ATA hotswap-compatible controller

2007-04-12 Thread jared r r spiegel
On Fri, Apr 06, 2007 at 02:15:34AM -0400, jared r r spiegel wrote: poking archives, i have the impression that ami(4) family has the best chance of being the card with the greatest degree of userland visibility, but wanted to check if that's the case. gonna try arc(4) arc-1110

Re: undeadly.org down?

2007-04-11 Thread jared r r spiegel
On Wed, Apr 11, 2007 at 11:48:04PM -0400, Jason Dixon wrote: Unfortunately, it's the middle of the night where he's at, probably dreaming of anything but missing NS records. :) needs more benzedrine :( -- jared

Re: scp problem with remote filename escaping

2007-04-11 Thread jared r r spiegel
On Wed, Apr 11, 2007 at 05:01:40PM -0500, Matthew R. Dempsky wrote: On Wed, Apr 11, 2007 at 04:33:32PM -0400, Nick ! wrote: Karel, single quotes cause backslashes to be backslashes, instead of escape chars (*except* if it's a backslash in front of a single quote, so that you can escape

Re: scp problem with remote filename escaping

2007-04-11 Thread jared r r spiegel
On Thu, Apr 12, 2007 at 04:05:36AM +0200, Karel Kulhavy wrote: scp needs one (1) \ for one space in case of remote file and zero (0) \ in case of local one. The extra \'s are for bash but bash is irrelevant in this case. It's just one possible method of calling the process. Another method is

Re: OpenBGPd + pf + pf tables.

2007-04-10 Thread jared r r spiegel
On Tue, Apr 10, 2007 at 06:33:12PM +0200, Xavier Beaudouin wrote: The problem I have is if I have a subnet removed from bgp (eg my AS35189 neighbor) it is not removed from pf table bgp. Do you have an little idea to do this automaticaly ? does it work how you want to if you change from

Re: date -u gives wrong timezone output?

2007-04-10 Thread jared r r spiegel
On Tue, Apr 10, 2007 at 06:17:58PM -0400, Nick ! wrote: On 4/10/07, Markus Bergkvist [EMAIL PROTECTED] wrote: Hi, 'date -u' on a 4.0 -stable will give something like Tue Apr 10 22:03:24 GMT 2007 but shouldn't it be Tue Apr 10 22:03:24 UTC 2007 UTC = GMT for all that we care about.

Re: Problem: Raid mounting root as read-only, and not from the partition desired...

2007-04-07 Thread jared r r spiegel
On Sat, Apr 07, 2007 at 02:41:50AM -0700, Merp.com Volunteer wrote: I'm trying to have it setup as: /raid0a = /boot /raid0d = / /raid0e = /usr Instead it's coming up as: /raid0a = / /raid0e = /usr first, caveat that i've never

best userland visibility IDE/ATA hotswap-compatible controller

2007-04-06 Thread jared r r spiegel
poking archives, i have the impression that ami(4) family has the best chance of being the card with the greatest degree of userland visibility, but wanted to check if that's the case. need a low-profile ATA (parallel) controller who can take four drives. it'd be cool if it does

Re: spamdb: convert greylisted addresses to whitelisted servers?

2007-04-06 Thread jared r r spiegel
On Thu, Apr 05, 2007 at 11:38:51PM -0400, Trash Compactor wrote: And since the greylisted entry doesn't see anymore activity, after the 4 hours elapse, it just quietly bows out and exits... stage-left even! /Jason spamd used to reaper any outstanding GREYs when an IP ascended to

Re: Booting a Thinkpad T23

2007-04-04 Thread jared r r spiegel
On Wed, Apr 04, 2007 at 10:39:30AM -0700, sweetnsourbkr wrote: The packages aren't included in cd40.iso, are they? no. you're correct. no install sets (base40.tgz, comp40.tgz, etc) or packages are in the cdXY.iso. From what I understand, I must either do what I did, or burn 2 CDs, one

Re: vi keys in mg

2007-04-03 Thread jared r r spiegel
On Tue, Apr 03, 2007 at 01:58:42PM -0400, Christopher Linn wrote: On Tue, Apr 03, 2007 at 11:14:48AM -0600, Kjell Wooding wrote: On Tue, Apr 03, 2007 at 12:57:09PM -0400, Nick ! wrote: mg is a fine little editor, but it just seems so emacs-centric. This little diff fixes that. Please

Re: firewall stopped working unexpectedly

2007-04-03 Thread jared r r spiegel
On Tue, Apr 03, 2007 at 04:34:26PM -0700, [EMAIL PROTECTED] wrote: thanks for the replies -- I actually got a real time caller who helped me check various items until we narrowed the problem down further. Got the connection back manually. 1. 3.5 vs 4.0

Re: use OpenBSD to blacklist phone calls?

2007-03-20 Thread jared r r spiegel
On Tue, Mar 20, 2007 at 01:34:29PM -0500, Sam Fourman Jr. wrote: What Would you do in the case of Telemarketers using caller ID block (*69 for my Phone Company) I get 2 or 3 calls a week From some stupid bank wanting to refinance a mortage all of these calls come up Restricted or Private on

Re: forcing WD0/WD1 designation (soekris)

2007-03-17 Thread jared r r spiegel
On Sat, Mar 17, 2007 at 03:33:30PM -0700, Marco S Hyman wrote: i don't think you can modify attachments with config(8), but You can. Or you can build a custom kernel. My box finds my SATA drive before my ATA drive though I use the ATA drive as wd0. My kernel config has: wd1 at

Re: make release question for a non developer

2007-03-16 Thread jared r r spiegel
On Fri, Mar 16, 2007 at 11:51:15AM +0100, Alexander Hall wrote: Miod Vallat wrote: 2) Do I have to modify another file? No. Very much noted. I have been wondering about this too. it's the 'i want to create my own style ramdisk kernels with their own unique in-the-ramdrive-userland

Re: forcing WD0/WD1 designation (soekris)

2007-03-16 Thread jared r r spiegel
On Sat, Mar 17, 2007 at 05:41:23AM +, Brad Brad wrote: When I connect a second drive to a sil3114 controller that drive is assigned wd0 and my real boot drive becomes wd1. How can I force the drive I choose to be wd0? Its a soekris 4801. I assume its not a BIOs issue because it does

Re: Problem connecting to internet through DSL

2007-03-11 Thread jared r r spiegel
On Mon, Mar 12, 2007 at 12:36:22AM +0530, sac wrote: The interface: #cat /etc/hostname.bce0 inet 192.168.1.3 255.255.255.0 NONE The routing tables do not show any problems. But I'm not able to connect or ping my DSL router. Have I missed out anything or is there anything else that has

IPcomp - bad-ip-version-2 *or* gre-proto-0x100 proto 47 unreachable

2007-03-10 Thread jared r r spiegel
have two machines with hifn 7955 in them, trying to get IPcomp working across an existing esp tunnel. local is 4.1 current from mar.7; remote is 4.0 stable. there are other peers currently in the IPsec ESP bandwagon, but these two are the only ones i'm trying IPcomp with, because

corrupted MAC on input came back

2007-03-10 Thread jared r r spiegel
http://marc.theaimsgroup.com/?l=openbsd-miscw=2r=1s=corrupted+mac+inputq=b happening for anyone else with: OpenBSD 4.1 (GENERIC) #1430: Wed Mar 7 01:04:27 MST 2007 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC have been running a 3.9-current on there up till last week with

Re: RTorrent and memory leak

2007-03-03 Thread jared r r spiegel
On Fri, Mar 02, 2007 at 11:34:49AM +0100, Dolphy wrote: After rtorrent starts on a freshly rebooted system memory disapearing /50M every second, till 1M. I dont really get it what can be the problem, maybe some kernel bug? uname -psr OpenBSD 4.0 Genuine Intel(R) CPU 3.20GHz

Re: spamd-white

2007-02-27 Thread jared r r spiegel
On Tue, Feb 27, 2007 at 05:44:05PM -0700, Bob Beck wrote: * Tom Bombadil [EMAIL PROTECTED] [2007-02-27 15:09]: Greetings... By any chance, will spamd delete any IPs that I add manually to spamd-white? Yes. consider the entries in spamd-white to be the exclusive stomping

circumventing spamd-setup's supernet/sort function

2007-02-13 Thread jared r r spiegel
in trying to get a spamd server to eat a boatload of RBLs, i've come across what i believe is a situation in which it would be desirable for spamd-setup to not perform the supernet/sort/nonoverlap functions in collapse_blacklist(). this test host is freebsd 6.2-RC2 running amd64 on a

Re: Adding /dev/sd5?

2007-02-08 Thread jared r r spiegel
On Thu, Feb 08, 2007 at 09:33:27AM -0700, Jeff Ross wrote: [EMAIL PROTECTED]:/home/jross $ sudo fdisk -i sd5 Password: fdisk: sd5: No such file or directory sudo sh /dev/MAKEDEV sd5

Re: Adding /dev/sd5?

2007-02-08 Thread jared r r spiegel
On Thu, Feb 08, 2007 at 09:33:27AM -0700, Jeff Ross wrote: Any gotchas on adding the other sd device? Should this be something that is added to MAKEDEV? gotcha wise, if you MAKEDEV a pseudo device beyond a count that is allocated in kernel config, that's probably bad. ( eg, trying to

Re: Question about syslog-ng

2007-02-06 Thread jared r r spiegel
On Tue, Feb 06, 2007 at 08:21:38AM -0600, Phusion wrote: When installing syslog-ng on a OpenBSD 4.0 machine should I start the daemon in /etc/rc.local or /etc/rc.securelevel? taking a peek at /etc/rc, the base syslogd is started unconditionally before even rc.securelevel is sourced. it

Re: VIA-CPUs crypto support for IPSec

2007-02-02 Thread jared r r spiegel
On Thu, Feb 01, 2007 at 07:05:24PM +0100, Andreas Bihlmaier wrote: On Thu, Feb 01, 2007 at 05:29:46PM +0100, Heinrich Rebehn wrote: I read that the VIA CPUs have crypto support built in. I am a bit unsure however, which CPU is actually supported by OpenBSD and which ones support the

Re: PlayStation 3

2007-01-23 Thread jared r r spiegel
On Tue, Jan 23, 2007 at 05:06:20PM -0800, Abraham Rolick wrote: Rather, my question is, have any of you successfully configured pf to allow your PS3 to join hosted games more than 0.1 percent of the time? If you feel this is unfit for discussion on misc@, feel free to just email me directly.

Re: more than one OBSD slice on the same harddisk?

2007-01-20 Thread jared r r spiegel
On Sat, Jan 20, 2007 at 09:58:00PM +0100, Patrick Useldinger wrote: If I have a harddisk with one OBSD slice and one other slice (say Linux), can I convert that second slice to OBSD A6 and use it from the same OBSD installation? If so, what will be the disklabel numbering? i did this

Re: Proposal for uname / cvs

2006-12-09 Thread jared r r spiegel
On Sat, Dec 09, 2006 at 07:04:22PM +0800, Uwe Dippel wrote: Thanks Darren, but I'd written this myself faster than it took me to write the message. I am still sure, that most users, including writers (and updaters) of the FAQ would profit from this addition. The FAQ is full of this `arch`,

Re: pf

2006-12-09 Thread jared r r spiegel
On Sat, Dec 09, 2006 at 02:43:38AM -0700, David B. wrote: I've looked an man pf, and it's way too confusing; read pf.conf(5) instead. pf(4) isn't going to be very useful to you if you're not writing code who wants to interact with pf. like go into a file, and have a command in the form

Re: 4.0 and 4GB ram?

2006-12-06 Thread jared r r spiegel
On Wed, Dec 06, 2006 at 04:07:16PM +0100, Cristiano Deana wrote: Hi, i have a system (dell 1950) with 4GB ram. OpenBSD (amd64) only detects: real mem = 3488907264 (3407136K) avail mem = 2990874624 (2920776K) bios detects all 4 GB's. kernel is GENERIC.MP. Is it possible to use all

Re: prepping for big spamd(8) rollout

2006-12-01 Thread jared r r spiegel
On Fri, Dec 01, 2006 at 07:43:05AM +0100, Srebrenko Sehic wrote: AFAIK, amd64 does not support 4GB, unless that patch from tech@ somehow sneaked into the tree without me noticing. this one? http://marc.theaimsgroup.com/?l=openbsd-techm=114498992417267w=2 it's not in -current. i'll

prepping for big spamd(8) rollout

2006-11-30 Thread jared r r spiegel
working on getting a dual core dual cpu 64b 2MB cache xeon 2.8GHz w/12GB RAM and dual copper em(4) put in place in front of our MX vip for a greylisting spamd(8). i've got a similar machine with faster CPU ( 3.0 GHz / 4MB ) but it only has 4GB of RAM with 4.0 installed on it now that

Re: spamd [-c maxcon]

2006-11-28 Thread jared r r spiegel
On Tue, Nov 28, 2006 at 07:43:48PM -0500, Daniel Ouellet wrote: Thanks for the update. I understand that. Not a complain what so ever, but just a thought that may be the man page should include the default of 800 to be also the max allow. jmc@ took care of that 2w ago -- jared

Re: ports installing files in /etc?

2006-11-18 Thread jared r r spiegel
On Sat, Nov 18, 2006 at 08:53:04AM -0600, Will Maier wrote: On Sat, Nov 18, 2006 at 02:35:27PM +0100, Igor Sobrado wrote: I read a lot of documentation on the utilities for managing packages on NetBSD, where /usr/pkg/etc is used. I expected the same behaviour on OpenBSD. Why would

Re: Problems with java

2006-11-16 Thread jared r r spiegel
On Thu, Nov 16, 2006 at 09:35:56PM -0500, ICMan wrote: Thank you everyone. I discovered that ulimit -d 20 works on my system. I don't really know what that means, and I have yet to figure out how to set this for all users (so they can use java), but that's stuff I can puzzle out.

Re: Troubles trying to configure non-default VPN

2006-11-12 Thread jared r r spiegel
On Fri, Nov 10, 2006 at 05:50:54AM +1100, nuffnough wrote: On 11/9/06, jared r r spiegel [EMAIL PROTECTED] wrote: No Phase one. Just a packet to initiate, then a packet back to say that the far end doesn't like me. Debug on the other end indicated that when my end initiates, it does

Re: Troubles trying to configure non-default VPN

2006-11-08 Thread jared r r spiegel
On Wed, Nov 08, 2006 at 07:50:46AM +1100, nuffnough wrote: I have an OpenBSD 3.9 box and I've been asked to configure it to terminate a VPN using AES-256 encryption with SHA authentication, DH Group 5 (rather than the default group 2) and a lifetime of one day. I configured my isakmpd.conf

Re: Wild card greytrapping setup in spamdb

2006-11-08 Thread jared r r spiegel
On Wed, Nov 08, 2006 at 02:46:35PM -0500, Daniel Ouellet wrote: So, I see absolutely nothing wrong with this, but only huge benefit. with the not wildcard stuff, it seems like that would perhaps be a bit heavier to implement than the definately is matching. grep vs. egrep, only for

Re: named bug?

2006-11-08 Thread jared r r spiegel
On Wed, Nov 08, 2006 at 05:07:36PM +0100, Michael wrote: ... /var/named/etc/named.conf [...] listen-on { localhost; 80.237.156.59; }; //listen-on-v6 { any; }; [...] did you make sure that /etc/hosts isn't the reason for what

Re: increasing the speed of an openbsd firewall

2006-11-08 Thread jared r r spiegel
On Wed, Nov 08, 2006 at 10:44:46PM -0500, Michael Lockhart wrote: Looking for thoughts on improving performance, throughput, etc. I'm leaning towards just throwing up 2 better boxes with 2GB of ram and P4's. Wish I could show the pf.conf rules but that's out of the question. if sanitizing

Re: hostname.wi0 nwflag hidenwid oddity

2006-10-18 Thread jared r r spiegel
On Wed, Oct 18, 2006 at 11:05:51AM -0400, William Graeber wrote: The up doesn't make a difference if I add it before the inet line :( output of sh -v /etc/netstart is pretty lengthy, but I can post it somewhere if someone would like to take a look. output of that is probably no

Re: pf / pkg_add broken in latest snapshot?

2006-10-18 Thread jared r r spiegel
On Wed, Oct 18, 2006 at 08:45:31PM +0200, Michael wrote: Too bad I can't go back to my old snapshot, or is there any chance to get the 4.0 packages before official release so I can downgrade to a working state? ja; cvs -qd${your_favourite_cvs_mirror}:/cvs co -r OPENBSD_4_0_BASE src

Re: /stand still useful?

2006-10-18 Thread jared r r spiegel
On Wed, Oct 18, 2006 at 10:15:21PM +1000, Rod.. Whitworth wrote: On Wed, 18 Oct 2006 13:50:41 +0200, Martin Schrvder wrote: hier(7) says: man 7 hier oops. Do we look umop apisdn from up over? i don't know if you look like a mop that had been pissed in. Do NOT CC me - I am subscribed

Re: hostname.wi0 nwflag hidenwid oddity

2006-10-17 Thread jared r r spiegel
On Tue, Oct 17, 2006 at 09:38:48PM -0400, William Graeber wrote: I have managed to gain a bit more information regarding my problem - I added an echo statement in /etc/netstart to get a copy of the command which was being run. netstart, if has no args, runs thru the whole hostname/bridgename

  1   2   3   >