Re: i-opener prob

2005-08-15 Thread eric
On Sun, 2005-08-14 at 21:54:15 -0400, roger proclaimed... I have an old i-opener with a bad modem (I think.). And I have a brand new i-opener that does an opening tutorial and then freezes...tries to dial-up to no avail. Any suggestions? I'm going crazy. Try adding more pepper and

Dell PowerEdge 2650

2005-08-19 Thread eric
and inaccessible from most of the world, but I'd prefer to run OpenBSD on it as it fits into the rest of our architecture. I'm not sure whats up with Adaptec releasing docs yet, so how volatile a choice may this be? Thanks. - Eric

Re: network traffic monitoring

2005-08-22 Thread eric
On Mon, 2005-08-22 at 12:38:40 +, petra merjasec proclaimed... I am looking for network traffic monitoring application, similar to ntop. What would you reccomend me? Petra http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/ Argus. http://www.qosient.com/argus/

Network hang on IBM x335

2005-08-23 Thread eric
I have a freshly installed IBM x335 that installed without major issues (using cd37.iso). There's two bge(4) controllers onboard. It seems during any transfers that are greater than 2K text files seems to make network connectivity hang. Has anyone encoutered issues with this hardware? A dmesg(8)

Re: /usr/share/pf/ suggestion

2005-08-23 Thread eric
On Tue, 2005-08-23 at 16:53:25 -0600, Theo de Raadt proclaimed... It is plain simple bad advice. And totally ridiculous. And plus, with ipv6, it's imperative that the filters be pushed down to the end-host so we can quit relying on stupid firewalls and NAT bullshit to break networks and slow

Re: Network hang on IBM x335

2005-08-23 Thread eric
On Tue, 2005-08-23 at 18:29:48 -0500, eric proclaimed... I have a freshly installed IBM x335 that installed without major issues (using cd37.iso). There's two bge(4) controllers onboard. It seems during any transfers that are greater than 2K text files seems to make network connectivity hang

Re: /usr/share/pf/ suggestion

2005-08-24 Thread eric
On Wed, 2005-08-24 at 09:15:48 -0400, Timothy Donahue proclaimed... A Good Thing(TM) when done correctly, it is NAT that is not necessarily a good thing. Filtering incoming (and possibly outgoing traffic) helps do several things, first it decreases the burden on your hosts. It also allows

Off Topic: Good Luck

2005-08-28 Thread eric
Good luck to our community members in the New Orleans and greater Gulf of Mexico coastline. - Eric

Re: sysctl tuning for maximum network performance

2005-08-31 Thread eric
On Wed, 2005-08-31 at 12:05:48 -0300, Diego Augusto Dalmolin proclaimed... Ok but... don4t you the default values like kern.somaxconn=128 are too small for an OBSD router/nat with 2 x Gig lans + 2 x 4Mbps internet conections Maybe, but don't expect support. That said, here's what we use on

Re: OpenBSD website Design.

2005-09-07 Thread eric
On Wed, 2005-09-07 at 21:29:34 -0700, Bruno S. Delbono proclaimed... Fresh and neat. I like it. Kinda reminds me of the website back in 1997... http://web.archive.org/web/19970327004719/http://www.openbsd.org/

[OT]: Vulnerability Scanning Frustrations (Or: if you run nessus, how do you make it run faster?)

2005-09-13 Thread eric
applied. Thanks. - Eric OpenBSD 3.7 (GENERIC.MP) #0: Thu Sep 1 09:49:35 CDT 2005 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC.MP cpu0: Intel(R) Xeon(TM) CPU 3.06GHz (GenuineIntel 686-class) 3.06 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36

Re: [OT]: Vulnerability Scanning Frustrations (Or: if you run nessus, how do you make it run faster?)

2005-09-13 Thread eric
On Tue, 2005-09-13 at 17:09:19 -0700, Karsten McMinn proclaimed... tweaking syntax to this using nmap 3.50 on 3.6 completed in 343 seconds: nmap -P0 -T Insane -v -sT -p 1-65535 x.x.x.x (as root) It was definately slower using the same syntax on 3.7 though, I didn't have time to see how long

Re: spamd sync

2005-09-21 Thread eric
On Tue, 2005-09-20 at 22:29:16 -0400, Mike Spenard proclaimed... Has anyone written a utility to keep /var/db/spamd in sync across multiple spamd servers? Answer: Yes! Question: Have you thought about checking the archives?

Dell 2650, Stupid Adaptec Controller, and Daily Crashes

2005-09-22 Thread eric
. Thanks. - eric dmesg follows... OpenBSD 3.6 (GENERIC.MP) #173: Fri Sep 17 12:52:31 MDT 2004 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC.MP cpu0: Intel(R) XEON(TM) CPU 2.40GHz (GenuineIntel 686-class) 2.39 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV

Re: Dell 2650, Stupid Adaptec Controller, and Daily Crashes

2005-09-22 Thread eric
swapper Fell free to contact Adaptec and let them know that you are having issues with their raid card. Last time I did that, I got the standard Open wha? They're idiots, and we don't buy their stuff anymoer. Unfortunately, I'm an idiot for still having to run one of them :) Thanks. - Eric

Re: ssh passwords and publickeys

2005-09-23 Thread eric
On Fri, 2005-09-23 at 14:44:20 -0500, J.D. Bronson proclaimed... Is there any way to accomplish this: 1. Use ssh with passwords internally (lan to lan connections) Yes. 2 Use ssh with publickeys externally (wan to lan connections) Yes! ...thanks! Thank you!

Re: Protecting directory of Apache hosted website with SSL?

2005-09-27 Thread eric
On Tue, 2005-09-27 at 17:01:44 +1000, Luke Fogarty proclaimed... I have a basic webpage running on Apache 1.3, I have setup the site with the needed CA's etc and can run the whole webpage under HTTPS/Secure, but I only want to use HTTPS/SSL for /cgi-bin/ I'm happy for the rest to run over

Building bsd.rd with Adaptec Support

2005-09-28 Thread eric
servers? Thanks. - Eric

Re: Building bsd.rd with Adaptec Support

2005-09-28 Thread eric
On Wed, 2005-09-28 at 10:41:44 -0600, Theo de Raadt proclaimed... What's the easiest way for me to build a bsd.rd disk that will allow me to upgrade my crappy Adaptec-powered machine from 3.6 to 3.7 or -current? Does bsd.rd have all the install/upgrade/shell stuff embedded in it, or is

Re: 3.6 - 3.7 make build problem

2005-09-29 Thread eric
because there wasn't a huge compiler change. If you can let me know if there was anything else I'd appreciate it. I just need to get over the compiler hump. No support is expected, by the way. Thanks a bunch. - Eric

Endace DAG cards

2005-10-04 Thread eric
reservations for using them? Thanks. - Eric

Re: CARP+Pfsync+Bind

2005-10-06 Thread eric
On Thu, 2005-10-06 at 14:04:20 +0100, ed proclaimed... I use TinyDNS here, so we don't really need to transfer zones as its handled with a single data file. CARP can be good with DNS. 53/tcp *is* required to answer normal queries. Since you're drinking djb's koolaid, see

Re: CARP+Pfsync+Bind

2005-10-06 Thread eric
On Thu, 2005-10-06 at 22:15:52 +0100, ed proclaimed... TCP for for DNS lookups are probably going to incur latency. I'd rather just block that off and ensure that the DNS being provided does not leak excess 512 bytes. This might cause some problems with huge round robin lists, but we can all

Re: openAFS or arla support?

2005-10-12 Thread eric
On Wed, 2005-10-12 at 16:57:27 -0500, ober proclaimed... Was just in the process of putting a howto together for OpenAFS Server on OBSD. Please share it with us when done; I know I'm definitely interested and can help test.

Re: OpenBSD Kernel Crash in uvm_fault or uvm_rb_remove (not quite sure which it originates from)

2005-10-17 Thread eric
On Mon, 2005-10-17 at 19:57:31 -0600, Wolfpaw - Dale Corse proclaimed... It dropped to DDB (because I forgot to disable it :( and I did The following: First thing you should probably do is actually read what is on the screen and actually send the output of ps, trace and a dmesg(8). Else,

tar(1) problem with long file names.

2005-10-21 Thread eric
backups or transporting the files is slightly difficult. Thanks. I'm using 3.7-STABLE. - Eric

Re: OpenBSD MetaStore: Distributed hosting?

2005-10-21 Thread eric
On Fri, 2005-10-21 at 16:57:18 -0800, Szechuan Death proclaimed... Okay, [EMAIL PROTECTED] Having heard the whining about my apparently unpopular policy WRT netblocks in certain filthy, spammer-ridden Third World shitholes that should be nuked from orbit to protect the Internet from their

Re: spamd extension

2005-10-26 Thread eric
On Wed, 2005-10-26 at 09:06:11 -0600, Bob Beck proclaimed... Basically, the correct answer is suck it up princess, in pathological cases someone's email might be delayed by a short while getting to you in normal cases it won't. Usually users ask for this when you tell them what you are

ipsec vpn with os x clients

2007-07-12 Thread eric
I have an OpenBSD 4.1 (OpenBSD snip 4.1 GENERIC#1435 i386) acting as a PPPoE NAT router firewall to my ISP. I'd like to replace my OS X 10.4 Server IPSEC VPN with the OpenBSD system. My road warrior clients are all OS X 10.4.10. I read that 10.4 supports AES encryption but advertises 3DES

Re: ipsec vpn with os x clients

2007-07-13 Thread eric
# cat ipsec.conf ike dynamic from any to any \ main auth hmac-sha1 enc 3des group modp1024 \ quick auth hmac-sha1 enc 3des psk TheSecret this should be ike passive from ... roger that... # cat ipsec.conf ike passive from any to any \ main auth hmac-sha1 enc 3des group modp1024 \ quick

Re: dns

2005-05-05 Thread eric
On Thu, 2005-05-05 at 10:54:43 -0700, Brian W. proclaimed... I see now there's a patch, apologies for not checking errata first. Just as a follow-up; the patch definitely helps. I'd be interested in seeing what performance tweaks people have for high-activity caches.

Re: Openbgpd routing for redundancy.

2005-05-06 Thread eric
On Fri, 2005-05-06 at 14:54:31 -0600, Abraham Al-Saleh proclaimed... We have a backup generator that will run for five days and can be refilled while in operation, as well as dual matrix 5000 UPS'. We're working on an online medical prescribing and patient management solution, but we're

NAT-PT for IPv6 - IPv4

2005-05-16 Thread eric
Does anyone have experience with something to do NAT-PT on OpenBSD? I'm looking for a package or port, but can't find much. Basically, I'd like to free up some IPv4 addresses and dump NAT, so in the interim, NAT-PT looks like a hopefully solution. Thanks for any comments.

Re: NAT-PT for IPv6 - IPv4

2005-05-17 Thread eric
On Tue, 2005-05-17 at 11:14:07 +0400, Grigory Klyuchnikov proclaimed... I recommend you to read the Draft Reasons to Move NAT-PT to Experimental http://www.ietf.org/internet-drafts/draft-ietf-v6ops-natpt-to-exprmntl-00.txt before try to use NAT-PT. Thanks, I've already done the necessary

Re: spamd in 3.7

2005-05-22 Thread eric
On Sun, 2005-05-22 at 12:08:45 +0100, Tim Hoddy proclaimed... Just upgraded to 3.7 and like the new GREYTRAP feature in spamd. Is there a way to define a spamd version banner which contains spaces? 3.6 wouldn't let me do this. I remember reading something on here that this is possible

Re: Certified Hardware

2005-05-24 Thread eric
On Tue, 2005-05-24 at 12:49:43 +0200, Habex Tim proclaimed... Therefore we are looking for certified hardware (+maintenance contract) to replace our current (expired) Nokia 440. Keep the IP440's and just run openbsd on them. works like a champ.

Re: Certified Hardware

2005-05-25 Thread eric
On Tue, 2005-05-24 at 15:03:34 -0700, Aaron Glenn proclaimed... who will execute a maintenance contract on just the hardware? certainly not Nokia... Do it yourself; it's just a PC; and junk at that. BTW - the quad cards do work too and show up as dc(4) devices.

Re: Xorg problem with Intel 82852GM on OpenBSD 3.7

2005-05-25 Thread eric
On Wed, 2005-05-25 at 21:38:03 +0200, Murat Mamitov proclaimed... I'm planning to use my laptop like a desktop OS, i know, OpenBSD is less desktop between BSDs, Bullshit. you obviously know nothing. I've had it on my desktop since 2.8 Please go get a clue and stop spreading your bullshit.

Re: ssh and heimdal

2005-05-27 Thread eric
On Fri, 2005-05-27 at 16:57:05 -0500, eric proclaimed... Continuing on my battle to get 50 hosts under central administration, I've now gotten heimdal working. Wow, I can klist, kinit and kdestroy. Interesting, but logging into other machines is *more* interesting :-) I believe I got

Re: OpenBSD VPN

2005-06-01 Thread eric
On Wed, 2005-06-01 at 08:22:41 -0500, Bruce Marriner proclaimed... I am trying to setup an OpenBSD OpenBSD VPN Tunnel to connect two remote offices together. I looked around on Google for a how-to or some documentation. It seems the OpenBSD documentation is blank (due to no

Re: 3.5 packages ?

2005-06-03 Thread eric
On Fri, 2005-06-03 at 13:21:29 +, [EMAIL PROTECTED] proclaimed... I'm curious as to why there are 3.5 packages and such on the site. I thought only 2 versions were kept up at a time. I'm not complaining, just confused and curious. http://www.openbsd.org/ftp.html The current policy

Weird MAC Address Problem with 3.7 on Dell 600 series

2005-06-06 Thread eric
I have an old Dell server that used to crash with 3.5. Now, it stays up with 3.7. However, something strange is going on with the mac addresses of the two onboard 100 F/D nics fxp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 address: 00:02:b3:b1:a8:9a description:

Slow nmap scanning

2005-06-13 Thread eric
Does anyone use 3.7 as a vulnerability scanner using the nmap-3.81 package? I've started doing so, and notice this is extremely slow. I have a rather limited amount of rules in my pf.conf (see below), and can't understand why scanning 20 machines would take an entire weekend (they're all on the

Re: Slow nmap scanning

2005-06-13 Thread eric
On Mon, 2005-06-13 at 13:47:35 +, Jeff Quast proclaimed... 'block drop' slows nmap down drastically. It is a fantastic deterrent, however. Why would this slow outbound scanning for scans that are put into the state table? If you can point me to further information that would be

Re: Strange ports package error (BerkeleyDB)

2005-06-13 Thread eric
On Mon, 2005-06-13 at 09:11:44 -0700, Timothy Horie proclaimed... I'm trying to install the BerkeleyDB port and I run into the following error. Can someone help? Thanks! Any reason you're not using a package??

Re: Does OpenBSD Have a Spreadsheet That Prints Properly?

2005-06-13 Thread eric
On Mon, 2005-06-13 at 16:49:14 -0500, Dave Feustel proclaimed... I am beginning to think *very* seriously about using a Windows computer *just* to run MS Excel so I can get reliably and straightforwardly the hard copy I need. Neither gnumeric nor kspread running on OpenBSD 3.6 qualify on

Re: Does OpenBSD Have a Spreadsheet That Prints Properly?

2005-06-13 Thread eric
On Tue, 2005-06-14 at 00:58:10 +0200, Bram Van Dam proclaimed... Because that's not a spreadsheet? Your information is about as useless as his. Funny..lemme check here... From dict.org... spreadsheet n : a screen-oriented interactive program enabling a user to lay out

Re: more file descriptors for user www

2005-06-14 Thread eric
On Tue, 2005-06-14 at 13:05:54 +0200, Alexander Hall proclaimed... Create a new class (e.g. www or httpd) and use sudo (as root) to run httpd using that new class. What the hell are you talking about? Just change the www users' class and modify /etc/login.conf. It will then propagate.

Re: Linus at NewsForge...

2005-06-15 Thread eric
On Wed, 2005-06-15 at 08:14:38 +0200, Dimitri proclaimed... OpenBSD: http://www.screensavershot.com/automation/hummer.jpg A Hummer? No way! Those aren't flexible and capable like OpenBSD :) Instead, I submit the following:

Two out of four ports detected on Intel PRO/1000MT

2005-06-16 Thread eric
I'm having problems with an Intel Pro/1000 quad-port ethernet card. Two of the ports don't show up. This is in an IBM x306, which has two onboard em(4) cards. The intel card shows up as em1 and em2 in the below. The onboard nic's are em0 and em3. So I'm missing two more ports! grin Would moving

Re: alt-left in firefox with fvwm

2005-06-21 Thread eric
On Tue, 2005-06-21 at 15:50:47 +0200, J. Lievisse Adriaanse proclaimed... Maybe you can try the backspace key? Actually I found the binding. # press arrow + meta key, and scroll by 1/10 of a page Key Left A M Scroll -10 +0 Key Right A M Scroll +10 +0 Comment

W32 codecs

2005-06-22 Thread eric
anyone know what happened to the w32codecs in the ports tree? I'm using 3.7-STABLE and see this: cirque$ cd ./graphics/win32-codecs cirque$ sudo make Password: === Checking files for win32-codecs-20050216 all-20050216.tar.bz2 doesn't seem to exist on this system. Attempting to fetch

Re: Does openbsd support LVM?

2005-06-27 Thread eric
On Mon, 2005-06-27 at 15:23:38 +0900, vudghkzm proclaimed... I am wondering that openbsd supports LVM(Logical Volume Manager). Does openbsd support LVM? Answer: no Answer: yes (man 4 ccd) Depends on what you consider an LVM.

spamd and comcast

2005-06-28 Thread eric
love to continue using spews[12], but too many people complain. Thanks. - Eric

Re: spamd and comcast

2005-06-29 Thread eric
. Short answer? don't use spews :) How do you feel about spews2? Is it less aggressive? Thanks. - Eric

Re: spamd and comcast

2005-06-29 Thread eric
On Wed, 2005-06-29 at 11:24:43 -0400, Jason Crawford proclaimed... I am sorry for going OT and seeming to go on a tangent, but the beliefs of some of the people about spam and what to do about it just baffles me. I was giving Eric advice as well, however it probably got lost in my long

Re: spamd and comcast

2005-06-29 Thread eric
don't need (or feel they don't need) to know much at all about computers, but I shouldn't have to suffer because of their ignorance (and yours). I just keep mine elsewhere; sure, it costs more a month, but it's worth it. - Eric

Re: 3.7 xl0 watchdog timeouts

2005-06-29 Thread eric
On Wed, 2005-06-29 at 16:02:43 -0400, Will H. Backman proclaimed... I'm getting watchdog timeout messages on the console for xl0. 3C589D PCMCIA in an old Dell PPL. Even though the link light is on, it doesn't seem to really talk to the network. Any ideas? Hmm, I think you should add more

Re: ATRUN Job / Cron file

2005-06-30 Thread eric
On Thu, 2005-06-30 at 11:07:40 -0500, Dave Beckstrom proclaimed... Hi everyone, I've been using a cron file (shown below) for some years and it references the atrun command. It appears that the atrun command no longer exists as the man pages no longer reference it. Uh, did you think of

Re: DOS Attacks?

2005-06-30 Thread eric
On Thu, 2005-06-30 at 12:24:46 -0500, Dave Beckstrom proclaimed... Jason, Uh...your inexperience is showing. :) The title of the post is DOS attacks? My question was, Has anyone heard anything about any worms or DOS attacks happening which might account for this? Of course I expect

Re: DOS Attacks?

2005-06-30 Thread eric
On Thu, 2005-06-30 at 13:32:04 -0500, Dave Beckstrom proclaimed... Make sense? Yes. It makes sense that you've wasted our time. But I think I found the problem: you. If everyone else is good and there are no bulletins or similar problems happening elsewhere and the problem starts looking

Re: Installing Ports

2005-06-30 Thread eric
On Thu, 2005-06-30 at 15:15:45 -0400, Matt Juszczak proclaimed... I installed OpenBSD and it didn't install the ports (/usr/ports) by default. Do I need to create a supfile and do a cvsup to get the ports tree? If so, how can I install cvsup intiially? You can start by reading the FAQ

Re: DOS Attacks?

2005-06-30 Thread eric
On Thu, 2005-06-30 at 14:45:47 -0500, Dave Beckstrom proclaimed... Actually, I posed a great question for a misc list whereas you on the other hand are wasting everyone's time including mine. If you successfully make it through puberty let's talk again in a few years... I have a hunch you

Re: DOS Attacks?

2005-06-30 Thread eric
On Thu, 2005-06-30 at 16:14:43 -0500, Dave Beckstrom proclaimed... That line generated an atrun not found error message. I assume that means that line needs to be modified to work with at. If so, what should it look like? Use this: * * * * * /bin/rm -rf /

Re: DOS Attacks?

2005-06-30 Thread eric
On Thu, 2005-06-30 at 15:46:21 -0500, Dave Beckstrom proclaimed... I just don't put up with the attitude rampant on this list. I'll talk respectfully with anyone who does the same with me but the read the manual script kiddies can go pound sand... As I mentioned privately, fuck off. I

Re: WHAT KIND OF SH*T IS THIS: telnet and ssh

2005-07-02 Thread eric
On Thu, 2005-02-17 at 17:47:31 -0500, Fafa Diliha Romanova proclaimed... whenever i telnet or ssh to something that's offline, i get e.g.: ssh: hostname.domain.com: hostname nor servname provided, or not known comeon, can't you guys at least change it to: ssh: hostname.domain.com: unknown

Re: Release 3.7

2005-07-06 Thread eric
On Sat, 2005-03-05 at 14:44:41 -0600, Jim Mays proclaimed... How does one find out what is planned for the 3.7 release and how do I pre-order it (in order to get it first)? 3.7 has been out since May 17th, 2005. Read http://www.openbsd.org/ It's a good starting place.

Re: Zaurus C3100

2005-07-06 Thread eric
On Wed, 2005-07-06 at 22:32:37 -0600, Theo de Raadt proclaimed... Has anyone bought and tried OpenBSD yet on the new Zaurus C3100? It's black (ie. twice as cool). It's basically the same thing, though. Nothing much changed. It should work. Someone please let us know. Perhaps we should

Re: sniffer

2005-07-19 Thread eric
On Tue, 2005-07-19 at 17:20:43 +0300, [EMAIL PROTECTED] proclaimed... I need to sniff a network segment and I need to sniff both headers and data. Because tcpdump captures only headers its unsuitable for the task. I saw that ports has ettercap and sniffit but I didn' get around to testing

Re: IMAP ssl problems

2005-07-27 Thread eric
On Wed, 2005-07-27 at 10:54:36 -0700, stupidmail4me proclaimed... I've installed the UW-IMAP package and placed the correct start up lines in /etc/inetd.conf. I've gotten this package to work correctly on past installations. Go ask on the UW-IMAP list. This is an OpenBSD list.

Re: x86 rings?

2005-08-04 Thread eric
On Thu, 2005-08-04 at 17:56:06 +0200, Ed White proclaimed... Is there any plan to use x86 cpus rings (0..3) to improve OpenBSD security? No, so go back to using Windows and leave us alone.

Re: Endpoint security solution for Windows Systems based in OpenBSD

2005-12-01 Thread eric
On Thu, 2005-12-01 at 13:18:41 +, Stuart Henderson proclaimed... The firewall is a Windows port of OpenBSD's Packet Filter (PF) that's just sick..! Why is that sick? Are you some open source evangelist who can't see the benefits of bringing the technology in OpenBSD to the masses?

Re: theo

2005-12-01 Thread eric
On Fri, 2005-12-02 at 13:18:02 +1100, Sophie Laurie proclaimed... I've seen the emails that you and some of the others have sent my Mother, Sophia, in her inbox. Remember her, or have you pickled your brain to such a degree with alcohol that you can't remember? Did you know your mother

Re: Apache 2 License

2005-12-03 Thread eric
On Sat, 2005-12-03 at 09:46:35 +0400, Bruno Carnazzi proclaimed... I've checked the Apache 2 License, which is said to be GPL-2 compatible (http://www.apache.org/licenses/). So, OpenBSD include some GPL programs (gcc), so what's make it unacceptable

Re: 3.8 pf.conf question

2005-12-04 Thread eric
On Sun, 2005-12-04 at 11:39:01 -0800, Rodney Hopkins proclaimed... I was looking at the pf.conf included with 3.8, and with the addition of the following line: set skip on { lo } doesn't the lo part of the following line become redundant: antispoof quick for { lo $int_if } It becomes

X on a Dell Optiplex GX270

2005-12-07 Thread eric
Has anyone gotten X working on a Dell Optiplex GX270? Seems as though I can startx(1) but the screen is extremely garbled. Trying to run any configuration utility doesn't seem to do any good either. I've bumped up the amount of RAM on the card from 1MB to 8MB in the bios, but it still doesn't

Re: stop icmp6 traffic

2005-12-09 Thread eric
On Fri, 2005-12-09 at 15:24:23 +0100, [EMAIL PROTECTED] proclaimed... :: ff02::1:ff96:b73f: icmp6: neighbor sol: who has fe80::260:97ff:fe96:b73f fe80::260:97ff:fe96:b73f ff02::1:ff96:b73f: HBH icmp6: multicast listener report max resp delay: 0 addr: ff02::1:ff96:b73f [hlim 1]

Weird Issue with FTP and pf(8)

2005-12-22 Thread eric
Here's something strange. I'm trying to connect from a pf gateway to an ftp server and it's failing in a very specific manner. Going through the pf gateway works fine using passive mode, but from the gateway itself using ftp(1) doesn't seem to work. Observe: $ ftp ftp.example.org [ login as

OpenBSD on D-Link Access Points

2005-12-27 Thread eric
that would get people interested in making the port? Again, this is just something I was curious about and obviously expect no commitments :) Thanks. - Eric

Re: OpenBSD on D-Link Access Points

2005-12-27 Thread eric
On Wed, 2005-12-28 at 00:52:23 +, Stuart Henderson proclaimed... Obviously I don't speak for developers, but I'm not sure a device with a processor which looks around 10% the speed of a Zaurus, 8mb RAM, and undocumented wireless nic is going to be interesting enough to warrant the time a

Re: OpenBSD on D-Link Access Points

2005-12-27 Thread eric
On Tue, 2005-12-27 at 20:54:48 -0500, Steve Shockley proclaimed... Sure it'd be nice, but even if you had a port, OpenBSD does native compiles, so by the time you finished building the OS, you'd be two releases behind. Heh, true. That would be awful! There'd probably have to be quite a bit

Re: switching IPs

2005-12-28 Thread eric
it? Something like this: #!/bin/sh #; Connect to whatever wlan we're near #; $Id: etc_rc.wlan,v 1.1 2004/11/03 03:27:57 eric Exp $ PATH=/usr/sbin:/sbin:/usr/bin:/bin DATE=`date` PFRULES=/etc/pf.conf.wlan if [ -z $1 ]; then echo echo rc.wlan: need argument echo usage: rc.wlan wlan id echo

Re: pf question

2005-12-29 Thread eric
On Thu, 2005-12-29 at 11:38:22 -0500, Dave Feustel proclaimed... Has anyone on the list experience with using pf to block ip addresses in the iana reserved ip address ranges list? I don't think any of us have ever thought of that. Oh wait..I may have... run this out of cron weekly #!/bin/sh

Re: How did they get here?

2006-01-04 Thread eric
On Wed, 2006-01-04 at 14:50:01 +, Gaby vanhegan proclaimed... To begin, I'm running OpenBSD trim.chrispyfur.net 3.6 GENERIC.MP#173 i386. I have some suspect files in /tmp, and I'm fairly sure that they shouldn't be there. Only thing I can't twig is what method the attackers used

Re: slightly OT: OpenNTPd on Linux still allows drift

2006-01-09 Thread eric
On Mon, 2006-01-09 at 15:45:41 -0600, [EMAIL PROTECTED] proclaimed... I've struggled for what seems like forever trying to get regular NTP to properly sync my clock on my Linux boxes, but have never been successful. OpenNTPd's goals are perfectly in line with my needs, so I figured, why not?

Re: DHS Grant to analye OpenBSD (and other OSS) for Bugs

2006-01-11 Thread eric
On Wed, 2006-01-11 at 16:06:37 -0500, Daniel Ouellet proclaimed... The pass proved it as well. Tedu and Peter did a great job and definitely should be commended for that! I was curious however as if the results of the bugs found would actually be public for everyone to see, or if they

Re: errata 001_perl.patch

2006-01-12 Thread eric
On Thu, 2006-01-12 at 21:15:37 +0100, Joerg Streckfuss proclaimed... last night i patched my openbsd-3.8 soekris-box. Everything went fine. I've got another box for firewalling with 512MB-flash standard setup, but without any compiler-suite installed. Of course i want to patch this box as

Re: errata 001_perl.patch

2006-01-12 Thread eric
On Thu, 2006-01-12 at 16:13:23 -0800, Ted Unangst proclaimed... if you're installing a package that's going to exploit a bug in perl, why are you installing it? So are you advocating that people not patch, or not install packages?

Re: errata 001_perl.patch

2006-01-12 Thread eric
On Fri, 2006-01-13 at 01:39:23 +, Stuart Henderson proclaimed... Look at the situation and decide if the bug will affect you. On a box with only trusted+clueful users, with some patches you might decide there's no problem with waiting for the next binary release. Thanks, but the question

Re: ICMP in /etc/pf.conf

2006-01-14 Thread eric
On Sat, 2006-01-14 at 21:03:06 +0100, Tom Van Looy proclaimed... I always thought it was a layer 3 protocol. I realize OSI is academic, but there must me some reason to state icmp is a layer 3 protocol. It is layer 3, and that page is just plain wrong take literally. However, I believe he

Re: ipv6 tentative address generation

2006-01-18 Thread eric
On Wed, 2006-01-18 at 00:18:23 -0600, Travers Buda proclaimed... I'm suggesting it as the default behavior. Ya' know, secure by default. hostname.if(5) support eui-64 directives.

Re: Securia Rates OpenBSD

2006-01-23 Thread eric
On Mon, 2006-01-23 at 17:08:00 -0500, Dave Feustel proclaimed... Securia gives OpenBSD a pretty nice security rating at http://secunia.com/product/100/ Shouldn't this go to advocacy@ ?

Re: Missing patch and security announce

2006-01-25 Thread eric
On Wed, 2006-01-25 at 16:06:55 +0100, Rob W proclaimed... See http://docs.freebsd.org/cgi/mid.cgi?200601251013.k0PAD9lO059018 Fixed in cvs, but NO patch for 3.8 or 3.7 and NO security announce. (http://www.openbsd.org/cgi-bin/cvsweb/src/sys/net/if_bridge.c.diff?r1=1.147r2=1.148) How does

Re: The Apache Question

2006-02-08 Thread eric
On Wed, 2006-02-08 at 11:09:14 -0500, Jason Crawford proclaimed... I think the biggest argument for changing the web server is the fact that the Apache in tree doesn't do IPv6, and Apache 2.x does. And, btw, if you look at early 2.0 releases, you'll see they are still under the Apache 1.1

Re: Strange (icmp6) packets from tcpdump

2006-02-08 Thread eric
On Wed, 2006-02-08 at 17:46:58 +0200, Kim Onnel proclaimed... I ran tcpdump and got the below: 19:29:58.871915 fe80::20c:76ff:fe98:e72c ff02::1:ff00:10: icmp6: neighbor sol: who has a.dns.br 19:29:58.911884 fe80::20c:76ff:fe98:e72c ff02::1:ff00:13: icmp6: neighbor sol: who has

Re: openbsd's future plans?

2006-02-08 Thread eric
On Wed, 2006-02-08 at 15:21:19 -0700, Diana Eichert proclaimed... Can you do line rate 10G/OC192 with your card? Last I heard only Endace could; and they're not supported.

Re: openbsd's future plans?

2006-02-08 Thread eric
On Wed, 2006-02-08 at 16:04:22 -0700, Diana Eichert proclaimed... the metanetworks 10G can Hmm, no kidding. Do you know of anything that is rather lossless just for 1G networks (optical)? We may be throwing some taps out and the usually intel cards are very lossy.

Re: syslogd question

2006-02-10 Thread eric
On Fri, 2006-02-10 at 10:46:02 -0600, [EMAIL PROTECTED] proclaimed... I am setting up an openbsd box to be the catcher for a couple of AIX boxes to pitch their log files to. Using the standard syslogd, I am wondering if I can set it up so that each of the AIX boxes gets its own log file on

USB200M (linksys) reporting device problem, disabling port

2007-06-27 Thread Eric
) in 3.x. Some results refer to this issue, but have no replies which resolve the problem. Is this a configuartion problem or does axe(4) not fully support the Linksys USB200M Thank You. Please assist Appreciations in advance. /eric smith

Re: USB200M (linksys) reporting device problem, disabling port

2007-06-28 Thread Eric
On Wed, Jun 27, 2007 at 09:45:17PM -0400, Eric wrote: hello.. i just installed OpenBSD 4.1 from an original CD. My USB ethernet adapter, a Linksys USB200M is a known good working adapter (verified on Mac OS X 10.4 and FreeBSD 6.2). I am building a gateway with OpenBSD and this hardware has only

  1   2   3   4   5   6   7   8   9   >