GIS Careers Newsletter : April 14, 2007

2007-04-15 Thread GISCafe Newsletter
TechJobsCafe.com GIS Focus GIS and Related Fields [IMAGE] Saturday April 14, 2007 From: TechJobsCafe Map Faster Safer - LaserTech.com Bentley Institue [IMAGE]

Re: Binary kernel and base update

2007-04-15 Thread Maurice Janssen
On Friday, April 13, 2007 at 17:21:14 -0400, Daniel Ouellet wrote: Maurice Janssen wrote: On Friday, April 13, 2007 at 15:16:41 -0400, Daniel Ouellet wrote: If there was a real concrete effort, not just the usual vapor ware, I would/could offer hosting in Equinix peering point, for downloading

Re: Binary kernel and base update

2007-04-15 Thread Maurice Janssen
On Saturday, April 14, 2007 at 07:43:06 +0200, Marc Balmer wrote: My company has to provide -stable base system and especially packages on at least i386 for it's customers. We have a fan-out box to which customer systems connect (the PKG_PATH points to it). This works really nice an we can

Re: Mail Server (seeking recommendations)

2007-04-15 Thread Bryan Vyhmeister
On Apr 13, 2007, at 8:49 PM, Sam Fourman Jr. wrote: Does your Mail setup use a PostgreSQL backend? No. I just used plain text files. This was a small test install to evaluate for my main mail server install. I haven't used any database back-end at this point. I am wanting to know

Re: Mail Server (seeking recommendations)

2007-04-15 Thread Bryan Vyhmeister
On Apr 13, 2007, at 8:46 PM, Vijay Sankar wrote: OpenBSD's sendmail, dovecot, and hastymail is a great solution, in my opinion, for large or small networks. It allows you to support a variety of clients very easily and with excellent security. Like Bryan Vyhmeister mentioned, postfix also is a

Re: Mail Server (seeking recommendations)

2007-04-15 Thread Jacob Yocom-Piatt
Bryan Vyhmeister wrote: On Apr 13, 2007, at 8:46 PM, Vijay Sankar wrote: OpenBSD's sendmail, dovecot, and hastymail is a great solution, in my opinion, for large or small networks. It allows you to support a variety of clients very easily and with excellent security. Like Bryan Vyhmeister

Re: Mail Server (seeking recommendations)

2007-04-15 Thread Bryan Vyhmeister
On Apr 15, 2007, at 2:03 AM, Jacob Yocom-Piatt wrote: Bryan Vyhmeister wrote: Is there any reasonably easy way to get SMTP AUTH functioning with sendmail and dovecot? i asked about this a few weeks back and i think the answer is no. this means you have to maintain 2 pw DBs, one for dovecot,

Re: Binary kernel and base update

2007-04-15 Thread Bryan Vyhmeister
I just skimmed this whole thread and I am wondering about a couple of things. It appears that all of you are talking about basically following the instructions for release(8) and just providing the generated files for people. Is that correct? If the above is true, I can also assist with

Re: 4.1 !

2007-04-15 Thread Renaud Allard
Wijnand Wiersma wrote: Or even more important: how is the song? Wijnand Excellent. Arabic style :) About magic caves and words :)

Re: Mail Server (seeking recommendations)

2007-04-15 Thread Martin Hedenfalk
On 4/15/07, Bryan Vyhmeister [EMAIL PROTECTED] wrote: On Apr 13, 2007, at 8:46 PM, Vijay Sankar wrote: OpenBSD's sendmail, dovecot, and hastymail is a great solution, in my opinion, for large or small networks. It allows you to support a variety of clients very easily and with excellent

Re: Mail Server (seeking recommendations)

2007-04-15 Thread Joachim Schipper
On Sun, Apr 15, 2007 at 02:14:56AM -0700, Bryan Vyhmeister wrote: On Apr 15, 2007, at 2:03 AM, Jacob Yocom-Piatt wrote: Bryan Vyhmeister wrote: Is there any reasonably easy way to get SMTP AUTH functioning with sendmail and dovecot? i asked about this a few weeks back and i think the

Re: Binary kernel and base update

2007-04-15 Thread Marc Balmer
Bryan Vyhmeister wrote: I just skimmed this whole thread and I am wondering about a couple of things. It appears that all of you are talking about basically following the instructions for release(8) and just providing the generated files for people. Is that correct? That is not enough. You

Re: Binary kernel and base update

2007-04-15 Thread Stuart Henderson
On 2007/04/15 02:37, Bryan Vyhmeister wrote: The original poster seemed to be asking more about an incremental update system. Maybe that's the wrong term but something along the lines of the name-your-favorite-linux-distribution setup. An example might be yum in CentOS (and others) or

Re: Binary kernel and base update

2007-04-15 Thread Bryan Vyhmeister
On Apr 15, 2007, at 3:05 AM, Marc Balmer wrote: Bryan Vyhmeister wrote: I just skimmed this whole thread and I am wondering about a couple of things. It appears that all of you are talking about basically following the instructions for release(8) and just providing the generated files

Re: Binary kernel and base update

2007-04-15 Thread Bryan Vyhmeister
On Apr 15, 2007, at 3:09 AM, Stuart Henderson wrote: On 2007/04/15 02:37, Bryan Vyhmeister wrote: The original poster seemed to be asking more about an incremental update system. Maybe that's the wrong term but something along the lines of the name-your-favorite-linux-distribution setup. An

host to host ipsec link

2007-04-15 Thread Markus Wernig
Hello all I am trying a - what I think is - simple ipsec setup. The point is to ipsec-encrypt all traffic between a pair of firewalls (gateA and gateB, both OBSD 4.0), in order to send pfsync traffic over the encrypted link. Although having read through ipsec, ipsec.conf, isakmpd and friend's

Re: SSH/SFTP question

2007-04-15 Thread jared r r spiegel
On Sat, Apr 14, 2007 at 05:32:38PM -0400, Frank Bax wrote: Based on what your vendor says; it looks like the file originally contains only LF and not CRLF; so enabling ASCII transfer should convert LF to CRLF. If your transfer software doesn't have this option find another that does.

Re: host to host ipsec link

2007-04-15 Thread Renaud Allard
Markus Wernig wrote: Hello all I am trying a - what I think is - simple ipsec setup. The point is to ipsec-encrypt all traffic between a pair of firewalls (gateA and gateB, both OBSD 4.0), in order to send pfsync traffic over the encrypted link. Although having read through ipsec,

Re: host to host ipsec link

2007-04-15 Thread Markus Wernig
Renaud Allard wrote: It seems you just forgot to load your rules. Just add ipsecctl -f /etc/ipsec.conf in the rc.local of both your firewalls and everything should just work fine. Hi I've tried to load the rules by hand with ipsecctl -f /etc/ipsec.conf - to no avail. On the other hand I

Re: host to host ipsec link

2007-04-15 Thread Renaud Allard
Markus Wernig wrote: Renaud Allard wrote: It seems you just forgot to load your rules. Just add ipsecctl -f /etc/ipsec.conf in the rc.local of both your firewalls and everything should just work fine. Hi I've tried to load the rules by hand with ipsecctl -f /etc/ipsec.conf - to no

Re: host to host ipsec link

2007-04-15 Thread viq
On 15/04/07, Markus Wernig [EMAIL PROTECTED] wrote: Renaud Allard wrote: It seems you just forgot to load your rules. Just add ipsecctl -f /etc/ipsec.conf in the rc.local of both your firewalls and everything should just work fine. Hi I've tried to load the rules by hand with ipsecctl -f

Re: host to host ipsec link

2007-04-15 Thread Markus Wernig
Renaud Allard wrote: Did you verify that isakmpd is running? Yes. It runs as follows: 11967 ?? Is 0:00.05 isakmpd: monitor [priv] (isakmpd) 18753 ?? I 0:01.40 isakmpd -S -K -f /var/run/isakmpd.fifo

Re: host to host ipsec link

2007-04-15 Thread Renaud Allard
Markus Wernig wrote: Renaud Allard wrote: It seems you just forgot to load your rules. Just add ipsecctl -f /etc/ipsec.conf in the rc.local of both your firewalls and everything should just work fine. Hi I've tried to load the rules by hand with ipsecctl -f /etc/ipsec.conf - to no

Re: host to host ipsec link

2007-04-15 Thread Markus Wernig
Renaud Allard wrote: Maybe also try on both firewalls: cd /etc/isakmpd ln -s private/local.pub . Then restart isakmpd and reload the rules. Hi Tried that as well ... still no go. I have disabled pf for setting the enc up. I suppose, that doesn't matter, does it? krgds /markus

Re: host to host ipsec link

2007-04-15 Thread Renaud Allard
Markus Wernig wrote: Renaud Allard wrote: Did you verify that isakmpd is running? Yes. It runs as follows: 11967 ?? Is 0:00.05 isakmpd: monitor [priv] (isakmpd) 18753 ?? I 0:01.40 isakmpd -S -K -f /var/run/isakmpd.fifo -S is used for redundant setups. Did you try

Re: host to host ipsec link

2007-04-15 Thread Renaud Allard
Markus Wernig wrote: Renaud Allard wrote: Maybe also try on both firewalls: cd /etc/isakmpd ln -s private/local.pub . Then restart isakmpd and reload the rules. Hi Tried that as well ... still no go. I have disabled pf for setting the enc up. I suppose, that doesn't matter, does

sk or em

2007-04-15 Thread Chris C.
Hi, I'm in the need to replace my two 100mbit fxp nic's in my firewall with a 1000mbit one. The hardware is kinda old. (PIII) I'm looking for an inexpensive but not bad (so I think no realtek chips) nic. Have looked at sk and bge, but couldn't find any bge nics at my local vendors. So... which

Re: host to host ipsec link

2007-04-15 Thread Jacob Yocom-Piatt
Markus Wernig wrote: Renaud Allard wrote: It seems you just forgot to load your rules. Just add ipsecctl -f /etc/ipsec.conf in the rc.local of both your firewalls and everything should just work fine. Hi I've tried to load the rules by hand with ipsecctl -f /etc/ipsec.conf -

Re: host to host ipsec link

2007-04-15 Thread Markus Wernig
Hello! Renaud Allard wrote: Markus Wernig wrote: Renaud Allard wrote: Did you verify that isakmpd is running? Yes. It runs as follows: 11967 ?? Is 0:00.05 isakmpd: monitor [priv] (isakmpd) 18753 ?? I 0:01.40 isakmpd -S -K -f /var/run/isakmpd.fifo -S is used for redundant

OpenBSD/alpha Status

2007-04-15 Thread Bryan Vyhmeister
I could have posted this on the alpha list but I thought I might get a better answer here since that list has very little traffic. OpenBSD/ cats is no longer around and is OpenBSD/alpha on its way out as well? I am not intending to cause any rumors or anything but I do have the opportunity

Recommendation for a UPS

2007-04-15 Thread Jean-Daniel Beaubien
Hi everyone, I have to replace a UPS and I was wondering if anyone could make a recommendation (Last time I purchased one was 4 years ago, so I've a bit out of the loop by now). Here is what I will be working with: - Fresh install of 4.1 (as soon as my copy gets here) - I Will probably be

Re: host to host ipsec link

2007-04-15 Thread Hans-Joerg Hoexer
On Sun, Apr 15, 2007 at 05:26:11PM +0200, Markus Wernig wrote: /etc/rc.conf.local ipsec=YES isakmpd_flags=-K -f /var/run/isakmpd.fifo why the -f ...? isakmpd takes care of the fifo itself. You only need -K, nothing else.

Re: Recommendation for a UPS

2007-04-15 Thread Jason Beaudoin
- Fresh install of 4.1 (as soon as my copy gets here) - I Will probably be using nut to shutdown the server. I'm trying to find something that won't require too much configs/poking around. I'm not looking for something fancy either, I just need enough juice to shutdown the server properly when

Re: OpenBSD/alpha Status

2007-04-15 Thread Joachim Schipper
On Sun, Apr 15, 2007 at 11:40:48AM -0700, Bryan Vyhmeister wrote: I could have posted this on the alpha list but I thought I might get a better answer here since that list has very little traffic. OpenBSD/ cats is no longer around and is OpenBSD/alpha on its way out as well? I am not

Re: Recommendation for a UPS

2007-04-15 Thread Jean-Daniel Beaubien
What are your power requirements? Just a single server? How big of a system are we talking about? ...mainframe, onyx, or a single opteron? Regards, ~Jason My power requirements are very small. The server is running an Athlon xp 2000+ with 2 HDDs in raid 1 (no screen). And that's the only

Sending mail from rc.local

2007-04-15 Thread Ivo van der Sangen
I am trying to send mail from rc.local to inform users about reboots. I wrote a script /root/reboot_notification containing the following: #!/bin/sh for user in `/bin/cat /root/reboot_notification_users`; do echo $SERVER has rebooted at `/bin/date` | /usr/bin/mail -s $server reboot $user

Re: Mail Server (seeking recommendations)

2007-04-15 Thread Adam
Bryan Vyhmeister [EMAIL PROTECTED] wrote: On Apr 13, 2007, at 8:46 PM, Vijay Sankar wrote: OpenBSD's sendmail, dovecot, and hastymail is a great solution, in my opinion, for large or small networks. It allows you to support a variety of clients very easily and with excellent security.

Re: Sending mail from rc.local

2007-04-15 Thread Mike Erdely
On Sun, Apr 15, 2007 at 10:00:38PM +0200, Ivo van der Sangen wrote: I am trying to send mail from rc.local to inform users about reboots. I wrote a script /root/reboot_notification containing the following: #!/bin/sh for user in `/bin/cat /root/reboot_notification_users`; do echo

Re: sk or em

2007-04-15 Thread Stuart Henderson
On 2007/04/15 20:27, Chris C. wrote: I'm in the need to replace my two 100mbit fxp nic's in my firewall with a 1000mbit one. The hardware is kinda old. (PIII) I'm looking for an inexpensive but not bad (so I think no realtek chips) nic. Have looked at sk and bge, but couldn't find any bge

Re: Mail Server (seeking recommendations)

2007-04-15 Thread Bryan Vyhmeister
On Apr 15, 2007, at 2:53 AM, Martin Hedenfalk wrote: On 4/15/07, Bryan Vyhmeister [EMAIL PROTECTED] wrote: Is there any reasonably easy way to get SMTP AUTH functioning with sendmail and dovecot? I'm using sendmail, dovecot and a PostgreSQL database with passwords. I got SMTP AUTH working

Re: Mail Server (seeking recommendations)

2007-04-15 Thread Bryan Vyhmeister
On Apr 15, 2007, at 1:09 PM, Adam wrote: Bryan Vyhmeister [EMAIL PROTECTED] wrote: Is there any reasonably easy way to get SMTP AUTH functioning with sendmail and dovecot? Yes, just put WANT_SMTPAUTH=yes in your /etc/mk.conf, install the cyrus-sasl package and recompile sendmail. Then see

Re: Mail Server (seeking recommendations)

2007-04-15 Thread Bryan Vyhmeister
On Apr 15, 2007, at 3:03 AM, Joachim Schipper wrote: On Sun, Apr 15, 2007 at 02:14:56AM -0700, Bryan Vyhmeister wrote: That was the primary reason for using postfix with dovecot. Years back, I tried to get both sendmail and postfix working with SMTP AUTH and Cyrus as I recall. It was a mess.

Re: OpenBSD/alpha Status

2007-04-15 Thread Bryan Vyhmeister
On Apr 15, 2007, at 12:27 PM, Joachim Schipper wrote: On Sun, Apr 15, 2007 at 11:40:48AM -0700, Bryan Vyhmeister wrote: I could have posted this on the alpha list but I thought I might get a better answer here since that list has very little traffic. OpenBSD/ cats is no longer around and is

Re: Mail Server (seeking recommendations)

2007-04-15 Thread Joachim Schipper
On Sun, Apr 15, 2007 at 02:06:56PM -0700, Bryan Vyhmeister wrote: On Apr 15, 2007, at 3:03 AM, Joachim Schipper wrote: On Sun, Apr 15, 2007 at 02:14:56AM -0700, Bryan Vyhmeister wrote: That was the primary reason for using postfix with dovecot. Years back, I tried to get both sendmail and

Re: OpenBSD/alpha Status

2007-04-15 Thread Joachim Schipper
On Sun, Apr 15, 2007 at 02:30:02PM -0700, Bryan Vyhmeister wrote: On Apr 15, 2007, at 12:27 PM, Joachim Schipper wrote: On Sun, Apr 15, 2007 at 11:40:48AM -0700, Bryan Vyhmeister wrote: I could have posted this on the alpha list but I thought I might get a better answer here since that list

Re: Mail Server (seeking recommendations)

2007-04-15 Thread 666a
Here is my recommendation. You only have to install and maintain patches on one piece of software other than OpenBSD. The software is OpenVPN with OpenBSD's sendmail and popa3d. Why popa3d? User can use any mail client he choses and you don't have to worry about your email server running out

Re: Mail Server (seeking recommendations)

2007-04-15 Thread Stuart Henderson
On 2007/04/15 14:06, Bryan Vyhmeister wrote: This is exactly why I have hesitated to move to a system based on postfix and dovecot for my main ISP mail server. This pair are pretty easy. Postfix (also more recent Exim versions) can look at Dovecot for smtp-auth; Dovecot's auth setup is quite

Re: OpenBSD/alpha Status

2007-04-15 Thread Siegbert Marschall
Hi, On the other hand, there seems to be a 'the alpha bug' around. I don't think it's solved yet, and it's been around for a long time. Apparently, it causes random crashes. only on some machines. I was not aware of this bug. That is unfortunate. Hopefully this might be resolved at some

Re: OpenBSD/alpha Status

2007-04-15 Thread Bryan Vyhmeister
On Apr 15, 2007, at 3:08 PM, Siegbert Marschall wrote: Hi, On the other hand, there seems to be a 'the alpha bug' around. I don't think it's solved yet, and it's been around for a long time. Apparently, it causes random crashes. only on some machines. Any idea if it surfaces on dual

Re: OpenBSD/alpha Status

2007-04-15 Thread Bryan Vyhmeister
On Apr 15, 2007, at 2:50 PM, Joachim Schipper wrote: On Sun, Apr 15, 2007 at 02:30:02PM -0700, Bryan Vyhmeister wrote: That is a good sign. Another reason to keep it around is that alpha machines were commercially produced which the cats machines were just evaluation boards. Big difference. I

Re: OpenBSD/alpha Status

2007-04-15 Thread Henning Brauer
* Bryan Vyhmeister [EMAIL PROTECTED] [2007-04-16 00:32]: On Apr 15, 2007, at 3:08 PM, Siegbert Marschall wrote: Hi, On the other hand, there seems to be a 'the alpha bug' around. I don't think it's solved yet, and it's been around for a long time. Apparently, it causes random crashes.

Re: host to host ipsec link

2007-04-15 Thread Mathieu Sauve-Frankel
On Sun, Apr 15, 2007 at 08:32:00PM +0200, Markus Wernig wrote: Hello! Renaud Allard wrote: Markus Wernig wrote: Renaud Allard wrote: Did you verify that isakmpd is running? Yes. It runs as follows: 11967 ?? Is 0:00.05 isakmpd: monitor [priv] (isakmpd) 18753 ?? I

Re: Sending mail from rc.local

2007-04-15 Thread Mathieu Sauve-Frankel
if [ -x /root/reboot_notification ]; then You probably want to use -f here, not -x. man test. -- Mathieu Sauve-Frankel

Re: Mail Server (seeking recommendations)

2007-04-15 Thread John .
On 14/04/07, Steven Presser [EMAIL PROTECTED] wrote: Hello, I'm working for a small company which has settled on OpenBSD as its server software (because the security is excellent). We have settled on what software to use for everything but the mail server. I'd like to request recommendations

Re: OpenBSD/alpha Status

2007-04-15 Thread Chris Cappuccio
Don't lament, 1. There is a potential fix for the alpha bug coming up 2. The cats boards are junk, you didn't want them anyways, As reported by miod@ Make it clear that it was the hardware which turned out to be unreliable, not the software (and after having a cats board catch fire here, I dare

Re: verifying ntp via GPS configuration?

2007-04-15 Thread Chris Cappuccio
James Hartley [EMAIL PROTECTED] wrote: Do you have any other ideas? Thanks. Some receivers I've tried work at 9600 instead of 4800...

Re: Mail Server (seeking recommendations)

2007-04-15 Thread Shane Harbour
I'm running Postfix/Dovecot with PostgreSQL (for authorization and mail routing) all from the ports. I've got it setup so that in the near future I can do virtual hosting of my wife's domains. It's pretty simple to setup and there is a examples at postfix.org and dovecot.org. It would be

Re: Sending mail from rc.local

2007-04-15 Thread Ivo van der Sangen
On Mon, Apr 16, 2007 at 01:40:01AM +0300, Keith Richardson wrote: The fact that touch is not working suggests rc.local is not even being=20 called I tested it again. Touch looks to be working now, although I noticed that I had to fork mysqld_safe. Apparently the script stopped when I didn't. I

Re: CARP access outside a subnet

2007-04-15 Thread david l goodrich
I'm sorry to bring this up again, since it didn't get any responses the first time. But I haven't had any luck on my own, and was hoping someone might have an idea. On 4/9/07, david l goodrich [EMAIL PROTECTED] wrote: I have two hosts in a CARP group. on router-meus-cd1, i have the

Re: Mail Server (seeking recommendations)

2007-04-15 Thread Joel Wiramu Pauling
On 16/04/07, Shane Harbour [EMAIL PROTECTED] wrote: I'm running Postfix/Dovecot with PostgreSQL (for authorization and mail routing) all from the ports. I've got it setup so that in the near future I can do virtual hosting of my wife's domains. It's pretty simple to setup and there is a

Re: using spamd to block outbound spam

2007-04-15 Thread Lars Hansson
Paolo Supino wrote: I appriciate your straight and forward replies :-) but the world isn't black and white and sometime you have to create work arounds to overcome other people's crap (well most of the time). No, in this case it is black and white. There is NO WAY to reliably fix this

Re: OpenBSD/alpha Status

2007-04-15 Thread Bryan Vyhmeister
On Apr 15, 2007, at 3:48 PM, Henning Brauer wrote: all alphas, but it seems to happen more often on miatas than on cs20s. my cs20 is pretty stable. the cs20 is probably the nicest alpha we support. The CS20 does seem to be a pretty nice machine. I noticed that there is one obvious CS20 in