Merry Christmas from AnthonysTshirts.com

2006-12-21 Thread Tony
Greetings! ~ Merry Christmas! Wishing you... and your family the Christmas season's joys and wonders. Enjoy the holiday. Sincerely, AnthonysTshirts.com ~ AnthonysTshirts.com 2269 S. University Drive -

Re: Moving a 100GB directory tree with lots of hardlinks

2006-12-21 Thread Otto Moerbeek
On Thu, 21 Dec 2006, Matthias Bertschy wrote: Matthias Bertschy wrote: Otto Moerbeek wrote: Ok, I assume you no longer have the core file you generated early. If there's a bug i pax, I really like to fix it... I'll see if I can reproduce the problem on a file system with lots of links

Re: revision control system for system administration

2006-12-21 Thread Brian Candler
On Wed, Dec 20, 2006 at 08:53:41AM -0600, Will Maier wrote: On Wed, Dec 20, 2006 at 02:31:09PM +, Brian Candler wrote: That makes a lot of sense. But enforcing that policy might be difficult. This is important if you're relying on your gold server for disaster recovery purposes - if the

Re: Disable IPv6 on OpenBSD 4.0 - forking discussion to icmp echo request blockage

2006-12-21 Thread David Golden
On Monday 18 December 2006 19:29, Jon Radel wrote: I suppose it all comes down to such unresolvable matters such as is making it harder for outsiders to map your network merely security through obscurity, which is naturally below the dignity of any right thinking network engineer, or does it

Re: Disable IPv6 on OpenBSD 4.0 - forking discussion to icmp echo request blockage

2006-12-21 Thread Toni Mueller
Hi Dag, I find myself pressed to rant a bit on the myths you spread because I come across such arguments all too often, and they are, umm, unfounded. On Sun, 17.12.2006 at 20:03:08 -0800, Dag Richards [EMAIL PROTECTED] wrote: Tools can be written to use icmp as a transport, obviously anything

Re: pf http reporting tool

2006-12-21 Thread Johan Petersson
Hi Edy, You could try using snort behind your firewall and then write a tool to analyze the snort logfile, presenting its result in html if that is what you want Haven't heard of such tool though. And most common services produce nice logfiles if you ask them to. Many forms of attacs that

Re: pf http reporting tool

2006-12-21 Thread Josh Grosse
On Thu, Dec 21, 2006 at 11:04:54PM +0800, Edy wrote: Hi, I am wondering if there is any tool which is able to show the attacks that has passed through PF and present it on a web based? Google for IDS or Intrusion Detection Systems -- the most popular free IDS is likely to be snort, which is

Re: OpenBSD and antispam - question

2006-12-21 Thread Toni Mueller
Hello, On Mon, 18.12.2006 at 12:07:34 +0100, =?UTF-8?Q? smonek ?= [EMAIL PROTECTED] wrote: I have lan ( 50 computers ) and router OpenBSD 4.0 / Pf I also have mail server ( external isp ) mailserver -internet-router-lan a need antispam gateway for my lan but i dont know who

1) ami0: timeout ccb 18 ... and 2) memory problem on current amd64

2006-12-21 Thread Didier Wiroth
Hello, I got my new pc today with a MegaRAID SATA 300-8X and an asus P5WDG2 WS Professional motherboard. 1) I'm not able to boot the bsd.mp kernel on amd64, when I try the current amd64 bsd.mp kernel. I get the following timeout messages: ami0: timeout ccb 18 ami0: timeout ccb 19 etc The

Re: pf http reporting tool

2006-12-21 Thread Jason Dixon
On Dec 21, 2006, at 10:04 AM, Edy wrote: Hi, I am wondering if there is any tool which is able to show the attacks that has passed through PF and present it on a web based? You could try Hatchet. It sucks, but there aren't many alternatives. Beware though, the developer is lazy and

Re: 1) ami0: timeout ccb 18 ... and 2) memory problem on current amd64

2006-12-21 Thread Marco Peereboom
There seem to be interrupt routing issues on your box. Try booting with -c and enable acpi. You have to install a very recent snapshot for this to have a chance. Please report that dmesg to the list. On Thu, Dec 21, 2006 at 04:44:01PM +0100, Didier Wiroth wrote: Hello, I got my new pc today

Re: Squid 2.6 transparent proxy with pf

2006-12-21 Thread Peter N. M. Hansteen
Dominik Zalewski [EMAIL PROTECTED] writes: I have OpenBSD 4.0 firewall and I would like to redirect all outgoing http requests to my squid web proxy. Daniel Hartmeier wrote about this a while back, his article can be found at http://www.benzedrine.cx/transquid.html -- Peter N. M. Hansteen,

Squid 2.6 transparent proxy with pf

2006-12-21 Thread Dominik Zalewski
I have OpenBSD 4.0 firewall and I would like to redirect all outgoing http requests to my squid web proxy. INTERNET --- $ext_if - OpenBSD - $int_if --- Switch --- squid |

Re: Squid 2.6 transparent proxy with pf

2006-12-21 Thread Dominik Zalewski
On Thursday 21 December 2006 15:04, Peter N. M. Hansteen wrote: Dominik Zalewski [EMAIL PROTECTED] writes: I have OpenBSD 4.0 firewall and I would like to redirect all outgoing http requests to my squid web proxy. Daniel Hartmeier wrote about this a while back, his article can be found at

Re: Squid 2.6 transparent proxy with pf

2006-12-21 Thread Marcus Popp
On 2006-12-21T15:29, Dominik Zalewski wrote: On Thursday 21 December 2006 15:04, Peter N. M. Hansteen wrote: Dominik Zalewski [EMAIL PROTECTED] writes: I have OpenBSD 4.0 firewall and I would like to redirect all outgoing http requests to my squid web proxy. Daniel Hartmeier wrote

Re: Squid 2.6 transparent proxy with pf

2006-12-21 Thread Can Erkin Acar
On Thu, Dec 21, 2006 at 03:29:51PM +0200, Dominik Zalewski wrote: On Thursday 21 December 2006 15:04, Peter N. M. Hansteen wrote: Dominik Zalewski [EMAIL PROTECTED] writes: I have OpenBSD 4.0 firewall and I would like to redirect all outgoing http requests to my squid web proxy.

Re: Squid 2.6 transparent proxy with pf

2006-12-21 Thread Dominik Zalewski
On Thursday 21 December 2006 15:59, Marcus Popp wrote: On 2006-12-21T15:29, Dominik Zalewski wrote: On Thursday 21 December 2006 15:04, Peter N. M. Hansteen wrote: Dominik Zalewski [EMAIL PROTECTED] writes: I have OpenBSD 4.0 firewall and I would like to redirect all outgoing http

Re: Squid 2.6 transparent proxy with pf

2006-12-21 Thread Peter N. M. Hansteen
Dominik Zalewski [EMAIL PROTECTED] writes: My question is can redirect traffic on $int_if to another machine connected to the same interface? Does this rule is corrrect ? You can redirect, but you need to let the packets from the proxy pass without redirection to the rest of the world. rdr

Re: Squid 2.6 transparent proxy with pf

2006-12-21 Thread Jorge Valbuena
Dominik, Internetext_if---BSD---int_if int_if = Gateway default for all Pcs and proxy ? If so, you have to redirect all the traffic to the proxy (you know that) and then, only allow nat on the BSD firewall from the proxy to any destination on port 80. an example from my pf.conf:

Re: Squid 2.6 transparent proxy with pf

2006-12-21 Thread Stuart Henderson
On 2006/12/21 15:29, Dominik Zalewski wrote: In this article squid is running on the same machine as OpenBSD firewall. In my case I have squid running on different machine connected to LAN interface. My question is can redirect traffic on $int_if to another machine connected to the same

Re: Squid 2.6 transparent proxy with pf

2006-12-21 Thread Fabian Keil
Dominik Zalewski [EMAIL PROTECTED] wrote: On Thursday 21 December 2006 15:04, Peter N. M. Hansteen wrote: Dominik Zalewski [EMAIL PROTECTED] writes: I have OpenBSD 4.0 firewall and I would like to redirect all outgoing http requests to my squid web proxy. Daniel Hartmeier wrote about

Re: Squid 2.6 transparent proxy with pf

2006-12-21 Thread Can Erkin Acar
On Thu, Dec 21, 2006 at 02:39:50PM +, Stuart Henderson wrote: On 2006/12/21 15:29, Dominik Zalewski wrote: In this article squid is running on the same machine as OpenBSD firewall. In my case I have squid running on different machine connected to LAN interface. My question is

Re: Squid 2.6 transparent proxy with pf

2006-12-21 Thread Clinton Sigmon
i seem to remember someone saying that you could NOT redirect out the same interface but not 100% sure. cs -Original Message- From: [EMAIL PROTECTED] on behalf of Dominik Zalewski Sent: Thu 12/21/2006 8:29 AM To: Peter N. M. Hansteen Cc: misc@openbsd.org; pf@benzedrine.cx

Re: Squid 2.6 transparent proxy with pf

2006-12-21 Thread Wade, Daniel
-Original Message- From: Stuart Henderson [mailto:[EMAIL PROTECTED] Sent: Thursday, December 21, 2006 9:40 AM To: Dominik Zalewski Cc: Peter N. M. Hansteen; misc@openbsd.org; pf@benzedrine.cx Subject: Re: Squid 2.6 transparent proxy with pf On 2006/12/21 15:29, Dominik Zalewski

Re: Squid 2.6 transparent proxy with pf

2006-12-21 Thread Fabian Keil
Fabian Keil [EMAIL PROTECTED] wrote: Dominik Zalewski [EMAIL PROTECTED] wrote: On Thursday 21 December 2006 15:04, Peter N. M. Hansteen wrote: Dominik Zalewski [EMAIL PROTECTED] writes: I have OpenBSD 4.0 firewall and I would like to redirect all outgoing http requests to my squid

Re: 1) ami0: timeout ccb 18 ... and 2) memory problem on current amd64

2006-12-21 Thread Didier Wiroth
From Marco Peereboom [EMAIL PROTECTED] There seem to be interrupt routing issues on your box. Try booting with -c and enable acpi. You have to install a very recent snapshot for this to have a chance. Please report that dmesg to the list. Here it is ... I've experienced some severe data

Re: Disable IPv6 on OpenBSD 4.0 - forking discussion to icmp echo request blockage

2006-12-21 Thread Igor Sobrado
Yes, you can use anything as a transport, probably even pidgeon carriers, but you need a receiving end to effect anything. Indeed, see RFCs 1149 and 2549... two excellent april fools on avian carriers! So, unless you fear that someone is able to install a trojan on your OpenBSD server by

Mouse not Responding

2006-12-21 Thread Randy Sato
I just installed 4.0 release then compiled and installed 4-current including X on a brand new HP xw6400. I started X using the vesa driver, and it works (unlike the nv driver), but the mouse does not seem to work. The keyboard may also not be working. I see the following: pckbc: command timeout

OT: TinyMCE security and track records

2006-12-21 Thread Daniel Ouellet
Hi All, Sorry for this off topic question, but I get more and more requests to have WYSIWYG editing on web management servers. I have been resisting this for many years so far as I hate this, but look likes more and more demands may force me to do it anyway. Any valid feedback on the

Re: uaudio trouble

2006-12-21 Thread Alexandre Ratchov
On Tue, Dec 19, 2006 at 04:56:45PM -0500, Steve Shockley wrote: I've got a Xitel DG2, which is a USB sound card with optical output. I previously set up a nice music player using mpd, and it worked great. Unfortunately the drive died, so I'm building a new one. (The old install's dmesg is

Re: pf http reporting tool

2006-12-21 Thread Henning Brauer
* Edy [EMAIL PROTECTED] [2006-12-21 16:18]: I am wondering if there is any tool which is able to show the attacks that has passed through PF sure, tcpdump the attack0 interface -- Henning Brauer, [EMAIL PROTECTED], [EMAIL PROTECTED] BS Web Services, http://bsws.de Full-Service ISP - Secure

disable SpeedStep ?

2006-12-21 Thread Rich Dunkle
How can I disable the SpeedStep feature in OpenBSD 4.0 ? Is there something in UKC ? The machine hangs during cpu0 checks: -88-8- OpenBSD/i386 BOOT 2.12 boot booting hd0a:/bsd: 5572500+869372 [52+284400+264825]=0x6aaea4 entry point at 0x200120, [ using 549652 bytes of bsd

Re: disable SpeedStep ?

2006-12-21 Thread Dimitry Andric
Rich Dunkle wrote: How can I disable the SpeedStep feature in OpenBSD 4.0 ? You can't, yet. The machine hangs during cpu0 checks: ... cpu0: unknown Enhanced SpeedStep CPU, msr 0x0b280b2886000b28 cpu0: using only highest and lowest power states cpu0: Enhanced SpeedStep 2933 MHz (1340

Re: hotplugd umass kernel crash

2006-12-21 Thread Michael
Michael schrieb: Otto Moerbeek schrieb: On Wed, 20 Dec 2006, Michael wrote: Since it doesn't write anything to messages or any other file I wonder how I can get the kernel crash message + ddb trace + ddb ps into a file so I can post it here? attach a serial console, see

Re: OT: TinyMCE security and track records

2006-12-21 Thread Marc Espie
On Thu, Dec 21, 2006 at 03:02:11PM -0500, Daniel Ouellet wrote: Sorry for this off topic question, but I get more and more requests to have WYSIWYG editing on web management servers. I have been resisting this for many years so far as I hate this, but look likes more and more demands may

Re: Mouse not Responding

2006-12-21 Thread Joachim Schipper
On Thu, Dec 21, 2006 at 11:01:15AM -0800, Randy Sato wrote: I just installed 4.0 release then compiled and installed 4-current including X on a brand new HP xw6400. I started X using the vesa driver, and it works (unlike the nv driver), but the mouse does not seem to work. The keyboard may

Re: disable SpeedStep ?

2006-12-21 Thread Michael Lockhart
On my laptop this is disabled via the BIOS. Regards, Mike Lockhart -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rich Dunkle Sent: Thursday, December 21, 2006 3:47 PM To: misc@openbsd.org Subject: disable SpeedStep ? How can I disable the SpeedStep

Re: Mouse not Responding

2006-12-21 Thread Randy Sato
The non-mp kernel with and without ACPI seemed to work. The mp with ACPI kernel would only boot after I changed my BIOS SATA emulation setting to combined IDE controller. Previously I had it set to separate IDE controller and the kernel only booted part way before I got timeout errors probing the

Re: Mouse not Responding

2006-12-21 Thread Randy Sato
Spoke too soon. I lost my network. I can ping localhost, but that is about it. Randy On 12/21/06, Randy Sato [EMAIL PROTECTED] wrote: The non-mp kernel with and without ACPI seemed to work. The mp with ACPI kernel would only boot after I changed my BIOS SATA emulation setting to combined IDE

Re: hotplugd umass kernel crash

2006-12-21 Thread Jon Simola
On 12/21/06, Michael [EMAIL PROTECTED] wrote: Got no serial cable available right now so I made some photos... :D http://wp1050733.wp078.webpack.hosteurope.de/hotplug/dsci1679.jpg http://wp1050733.wp078.webpack.hosteurope.de/hotplug/dsci1680.jpg

Re: OT: TinyMCE security and track records

2006-12-21 Thread Gaby Vanhegan
On 21 Dec 2006, at 20:02, Daniel Ouellet wrote: Any valid feedback on the security and stability of this one on OpenBSD, or any other prefer. I am looking more for security and stability oppose to bell and whistle and features. I was under the impression that TinyMCE, and other htmlarea

spamd deny users from using the SMTP

2006-12-21 Thread Edy
Hi, Spamd is running fine now but when an user trying to send out email using the SMTP he is getting Server temporary failure please try again later error message. They have to retry many times before the IP address is whitelisted. Any workaround to that? We would not be able to add the IP

VPN solutions for OpenBSD to Windows

2006-12-21 Thread pmatulis
Hi gang, I'm looking for peoples' experiences and advice for setting up a VPN between OpenBSD (I will be using 4.0) and Windows XP/2000 systems. I have tested the Greenbow client and it seems ok. What of the built-in VPN client for the Windows OS? I am mostly interested in ease of

Re: spamd deny users from using the SMTP

2006-12-21 Thread Peter Hessler
Configure your MTA to listen on port 587 (submission) with smtp-auth, and have your users send mail using that. That also solves the 'random network blocks port 25 traffic' problem. On 2006 Dec 22 (Fri) at 12:38:07 +0800 (+0800), Edy wrote: :Hi, : :Spamd is running fine now but when an user

Re: VPN solutions for OpenBSD to Windows

2006-12-21 Thread Edy
Hi Peter, Have you look at OpenVPN? Please check out this document http://blog.innerewut.de/articles/2005/07/04/openvpn-2-0-on-openbsd Cheers, Edy [EMAIL PROTECTED] wrote: Hi gang, I'm looking for peoples' experiences and advice for setting up a VPN between OpenBSD (I will be using 4.0)

Re: spamd deny users from using the SMTP

2006-12-21 Thread Mike Erdely
Edy wrote: Spamd is running fine now but when an user trying to send out email using the SMTP he is getting Server temporary failure please try again later error message. They have to retry many times before the IP address is whitelisted. Any workaround to that? Making many, many

Re: VPN solutions for OpenBSD to Windows

2006-12-21 Thread Lars Hansson
On Friday 22 December 2006 13:03, [EMAIL PROTECTED] wrote: What of the built-in VPN client for the Windows OS? While it works it suffers mainly from two things; being confusing to configure and lacking strong ciphers (you only get DES and 3DES). --- Lars Hansson

Re: spamd deny users from using the SMTP

2006-12-21 Thread Edy
Hi Mike, MTA is Qmail and it is running on a separate server ... Thanks, Edy Mike Erdely wrote: Edy wrote: Spamd is running fine now but when an user trying to send out email using the SMTP he is getting Server temporary failure please try again later error message. They have to retry

Re: VPN solutions for OpenBSD to Windows

2006-12-21 Thread pmatulis
- Original Message -From: Edy [EMAIL PROTECTED]Date: Friday, December 22, 2006 12:17 amSubject: Re: VPN solutions for OpenBSD to WindowsTo: [EMAIL PROTECTED]: misc@openbsd.org Hi Peter, Have you look at OpenVPN? Please check out this document

Re: VPN solutions for OpenBSD to Windows

2006-12-21 Thread Axton
On 12/22/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hi gang, I'm looking for peoples' experiences and advice for setting up a VPN between OpenBSD (I will be using 4.0) and Windows XP/2000 systems. I have tested the Greenbow client and it seems ok. What of the built-in VPN client for

Re: spamd deny users from using the SMTP

2006-12-21 Thread Edy
Good Day, port 587 (submission) has been working great and it is enabled on Qmail :) Thank you. Edy Mike Erdely wrote: Edy wrote: Spamd is running fine now but when an user trying to send out email using the SMTP he is getting Server temporary failure please try again later error message.

Re: hotplugd umass kernel crash

2006-12-21 Thread Marc Balmer
* Michael wrote: Noone got an idea what I can do about this? Currently the whole system crashes when starting hotplugd... please look at the images for error messages. I assume you have an /etc/hotplugd/attach script, can you post that?