rthreads enabled in -current

2012-04-06 Thread swilly
http://marc.info/?l=openbsd-cvsm=132928856921225w=2

I'm not sure how I missed this news until now, but it's really great
to see things like this being moved along. Congratulations to everyone
who has helped make this possible, and know that your work is
appreciated - I've been patiently looking forward to OpenBSD's
solution to such a complex problem.



Re: ikev2

2011-09-06 Thread swilly
On Mon, Sep 5, 2011 at 09:15, Wesley M. open...@e-solutions.re wrote:
 Is there someone who have already
 tried a vpn
 using ikev2 with EAP-MSCHAP-V2 support ?

I may be wrong about this, but I think iked is still under active
development, which is why you may not be getting replies (also fairly
likely that it works fine and the M$ client is horribly broken).

http://marc.info/?l=openbsd-miscm=127564809105256w=2

I'm still quite excited to see development happening though :)



Re: OT:Re: Apache Killer - Does it affect OpenBSD's patched version of Apache?

2011-08-31 Thread swilly
On Tue, Aug 30, 2011 at 19:51, frantisek holop min...@obiit.org wrote:
 why would i _not_ use another free alternative with a spotless security
 record, that has small, isolated processes communicating with each other
 in chroot, outputting very nice logs, having human readable
 configuration with fantastic documentation and as an added bonus an
 amazing mailing list where the author himself helps you out in difficult
 situations?

http://www.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/smtpd/

It seems that none of the other daemons were a good fit. Cue OpenSMTPd.



Re: a GOOD idea to harden OpenSSH!

2011-04-18 Thread swilly
On Wed, Mar 30, 2011 at 03:22, Alexander Schrijver
alexander.schrij...@gmail.com wrote:
 It's a great way to keep someone out of their own system.

Huh? Wouldn't securely backing up the RSA keys prevent this? If you
are mindful enough to use keys in the first place and don't back up
such critical data, wouldn't you deserve to be locked out until
someone can cart over an IP KVM?

-William



Re: Is OpenBSD + PF accredited or certified in any way ?

2010-02-02 Thread swilly
On Mon, Feb 1, 2010 at 18:06, Keith ke...@scott-land.net wrote:
 I am very happy with my PF firewalls and their reliability and don't want to
 be forced into purchasing some cisco / forenet comercial firewall that I've
 never used before so am desperate to find some details of any foreign
 governments that are using OpenBSD / PF as a firewall or any details of any
 certification of the PF firewall.

It is my opinion that its use at Defcon should be more than adequate
to certify it for your needs.