Fresh New Site

2006-11-23 Thread Brigitta Hansen
Hello! My friend's site, gigabitwireless.com, is finally up and running. I think a link exchange with monkey.org would help make it even better. If you are interested in a link exchange send me the url of the page with a link to my page. Check us out at: Learn all about a

sk0 on 4.0 : routing problems ?

2006-11-23 Thread Pawel S. Veselov
Hi ! thanks to everyone who helped me with getting the sk0 interface working. It only works on 4.0, on 3.9 the interface does appear but attempting to move traffic through it fails, with kernel saying sk0 timeout or something. After upgrading to 4.0, I decided to switch the internal interface

VPN configuration for roadwarrior

2006-11-23 Thread Claude Brassel
Hello, I'm using a OpenBSD 3.9 Box as VPN server for roadwarriors. Everithing works fine, everyone can connect from everiwhere to the VPN server and it's working very stable. The whole configuration is extract from Johan Allard's howto's, on the PC side I'm using safenet remote windows client.

on the remote root login in OpenSSH

2006-11-23 Thread Igor Sobrado
Hi again! I have a question on the default behaviour of OpenSSH. Please, do not understand that I am complaining on it or trying to change its behaviour in relation with remote root logins allowed by default on OpenSSH (but I certainly believe it would be nice, that is the reason I write this

Roadwarriors vpn clients with x509 certs on OpenBSD 4.0

2006-11-23 Thread carlopmart
Hi all, We have several problems with ipsec connections for roadwarriors clients using x509 certificates. We use ipsec.conf to accomplish this configuration: ike passive proto tcp from 192.168.2.3 to { 129.31.0.0/16, 129.11.0.0/16, 129.61.0.0/16, 129.71.0.0/16 } port 5900 \ quick

Re: on the remote root login in OpenSSH

2006-11-23 Thread Anton Karpov
2006/11/23, Igor Sobrado [EMAIL PROTECTED]: Hi again! I have a question on the default behaviour of OpenSSH. Someone that really wants to allow remote root logins should be able to enable this feature just changing /etc/ssh/sshd_config. But, in my humble opinion, most users do not

Can't build VPN with ipsecctl

2006-11-23 Thread Mitja
Hello, I am trying for the past 4 days to set up a simple tunnel, already done that in the past, not so complicated with isakmpd.conf. I am struggling through ipsecctl and ipsec.conf repeating the steps from man and other pages without success. I am doing something wrong I can't find the mistake.

Re: on the remote root login in OpenSSH

2006-11-23 Thread Igor Sobrado
In message [EMAIL PROTECTED], Anton Karpov writes: I'm neither OpenBSD nor an OpenSSH developer, but I think, the main idea of enabling root by default in OpenBSD is... protection from weak passwords! Just look at this. When you're installing OpenBSD, systems asks for a root password. You're

Re: Problem with roadwarriors vpn clients with x509 certs on OpenBSD 4.0

2006-11-23 Thread carlopmart
Sorry I forgot to mention that user1 and user2 has the same public ip. many thanks .. carlopmart wrote: Hi all, We have several problems with ipsec connections for roadwarriors clients using x509 certificates. We use ipsec.conf to accomplish this configuration: ike passive proto tcp from

Re: Can't build VPN with ipsecctl

2006-11-23 Thread Hans-Joerg Hoexer
your tunnel is between 193.189.180.192/28 and 193.189.180.208/28 On Thu, Nov 23, 2006 at 01:10:13PM +0100, Mitja wrote: ... OpenBSD1 # ipsecctl -s all FLOWS: flow esp in from 193.189.180.208/28 to 193.189.180.192/28 peer 172.16.16.6 type require flow esp out from 193.189.180.192/28 to

Re: on the remote root login in OpenSSH

2006-11-23 Thread Uwe Dippel
On Thu, 23 Nov 2006 12:24:38 +0100, Igor Sobrado wrote: I guess that remote root logins are allowed by default to simplify management of small network appliances that do not have user accounts on them. I have no clue on why root logins are actually disabled, but I can tell you one thing: if

ox remove

2006-11-23 Thread Jimmy
Have a rice with soup as breakfast, and cycle my way to school. Its more popular name is D-bol. so I got to go to give him a helping hand. and nothing special up till now. The series follows four unique individuals, two male-to-females and two female-to-males as they struggle to transition from

Why Sendmail?

2006-11-23 Thread Conrad Winchester
First of all hi! My name is Conrad and I am new to the world of OpenBSD, but not unix in general. I have just done my first install of a server using OpenBSD and am extremely impressed. I do have one question though and I apologize if people always ask this: At the end of the install I asked

Re: Why Sendmail?

2006-11-23 Thread Martin Schröder
Search the archives, you troll

Re: on the remote root login in OpenSSH

2006-11-23 Thread Paul de Weerd
On Thu, Nov 23, 2006 at 08:52:22PM +0800, Uwe Dippel wrote: | On Thu, 23 Nov 2006 12:24:38 +0100, Igor Sobrado wrote: | | I guess that remote root logins are allowed by default to simplify | management of small network appliances that do not have user accounts | on them. | | I have no clue on

Re: Why Sendmail?

2006-11-23 Thread Cristiano Deana
2006/11/23, Conrad Winchester [EMAIL PROTECTED]: I do have one question though and I apologize if people always ask this: At the end of the install I asked whether I want to run sshd and ntpd by default - very nice BUT why am I not given the option to turn off Sendmail at this point? I NEVER

Re: Why Sendmail?

2006-11-23 Thread Paul de Weerd
On Thu, Nov 23, 2006 at 01:32:29PM +, Conrad Winchester wrote: | First of all hi! My name is Conrad and I am new to the world of OpenBSD, but | not unix in general. | | I have just done my first install of a server using OpenBSD and am extremely | impressed. | | I do have one question though

Re: Why Sendmail?

2006-11-23 Thread Antoine Jacoutot
Selon Conrad Winchester [EMAIL PROTECTED]: at this point? I NEVER use sendmail and for an OS that prides itself on being as minimal as possible I would have thought giving you the option to Where is it stated that OpenBSD prides itself on being as minimal as possible? -- Antoine

demystify enc interface

2006-11-23 Thread Camiel Dobbelaar
I'm trying to figure out how the enc interface works, and especially how to filter it using pf. This is what enc(4) says: The enc interface allows an administrator to see outgoing packets before they have been processed by ipsec(4), or incoming packets after they have been

Re: Why Sendmail?

2006-11-23 Thread Gregory Edigarov
I think it is because of cron jobs, that use to send mails to root . Conrad Winchester wrote: I do have one question though and I apologize if people always ask this: At the end of the install I asked whether I want to run sshd and ntpd by default - very nice BUT why am I not given the option

Re: Why Sendmail?

2006-11-23 Thread Will Maier
On Thu, Nov 23, 2006 at 01:32:29PM +, Conrad Winchester wrote: I do have one question though and I apologize if people always ask this: At the end of the install I asked whether I want to run sshd and ntpd by default - very nice BUT why am I not given the option to turn off Sendmail at

Re: ktrace interpretation

2006-11-23 Thread Jan Stary
Hi, $ cat foo.c int main() { return 0; } $ cc -static -o foo foo.c $ ktrace ./foo $ kdump 2153 ktrace RET ktrace 0 2153 ktrace CALL execve(0x7f7f910f,0x7f7f8c78,0x7f7f8c88) 2153 ktrace NAMI ./foo 2153 foo EMUL native 2153 foo RET execve 0

webmail

2006-11-23 Thread Jasper Bal
Anyone using webmail on OpenBSD? What's good, what's not? Jasper

Connecting to OpenBSD 4.0 isakmpd with racoon on FC5

2006-11-23 Thread Albert Chin
I'm trying to connect an FC5 laptop behind a firewall to an OpenBSD 4.0 VPN server running isakmpd. I already have things working with Openswan but would like to get it working with racoon for our Mac OS clients. The OpenBSD /etc/ipsec.conf config: ike passive esp from 192.168.1.0/24 to

Re: Why Sendmail?

2006-11-23 Thread z0mbix
On 23/11/06, Conrad Winchester [EMAIL PROTECTED] wrote: First of all hi! My name is Conrad and I am new to the world of OpenBSD, but not unix in general. I have just done my first install of a server using OpenBSD and am extremely impressed. I do have one question though and I apologize if

Re: on the remote root login in OpenSSH

2006-11-23 Thread Igor Sobrado
Hi again. Out of this thread, Mr. Tongson pointed me to an interesting post from march 2005: http://archives.neohapsis.com/archives/openbsd/2005-03/2808.html From this post, it is difficult understanding why disabling remote root logins is not a good idea; but after reading the entire thread

Re: webmail

2006-11-23 Thread Joel Goguen
I've got SquirrelMail running for mine. If you're looking for something full of features it's not for you, but if you're looking for something simple that Just Works with Courier-IMAP and Maildir it may be worth taking a look at. Jasper Bal wrote: Anyone using webmail on OpenBSD? What's good,

Re: webmail

2006-11-23 Thread Tautvydas
Hi On 11/23/06, Jasper Bal [EMAIL PROTECTED] wrote: Anyone using webmail on OpenBSD? What's good, what's not? Jasper roundcube webmail is quite nice. but I use not the latest beta. Latest beta has some problems, I haven't got enough time for debugging :( -- Hi, I'm a .signature virus! Copy

Re: on the remote root login in OpenSSH

2006-11-23 Thread Stuart Henderson
On 2006/11/23 15:14, Igor Sobrado wrote: 2. There are a lot of brute force attacks from countries like Korea these days. These attacks will be less effective if the intruders get access to an unprivileged account (even if it is in the wheel group). On a typical system, these

Re: webmail

2006-11-23 Thread João Salvatti
Horde (www.horde.org) run nice under OpenBSD. My webmail (webmail.openbsd-pa.org). On 11/23/06, Tautvydas [EMAIL PROTECTED] wrote: Hi On 11/23/06, Jasper Bal [EMAIL PROTECTED] wrote: Anyone using webmail on OpenBSD? What's good, what's not? Jasper roundcube webmail is quite nice. but I

Re: on the remote root login in OpenSSH

2006-11-23 Thread Darrin Chandler
On Thu, Nov 23, 2006 at 12:24:38PM +0100, Igor Sobrado wrote: First of all, I understand that remote root logins can be easily avoided by setting PermitRootLogin to no in /etc/ssh/sshd_config. Yes. This is a very simple thing to do. I guess that remote root logins are allowed by default to

Re: webmail

2006-11-23 Thread HARANG Jean-Marc
Jasper Bal wrote: Anyone using webmail on OpenBSD? What's good, what's not? I use http://blog.ilohamail.org/ (imap/pop) , fast (it's running fine on a 330 Mhz sparc64), easy to install and to use ... no problem :) -- jean-marc

Re: webmail

2006-11-23 Thread Bryan Allen
On Nov 23, 2006, at 8:19 AM, Jasper Bal wrote: Anyone using webmail on OpenBSD? What's good, what's not? Roundcube has been the new hotness for a while now. http://www.roundcube.net/ It's trivial to configure, nice UI (shiny, has drag and drop), persistent IMAP connections... That said,

Re: webmail

2006-11-23 Thread Michael
Jasper Bal schrieb: Anyone using webmail on OpenBSD? What's good, what's not? I like http://roundcube.net/, using beta2

Re: BSD laptop

2006-11-23 Thread Michael Widerkrantz
David Chapman [EMAIL PROTECTED] writes: Does anyone have any thoughts or experience with Lenovo or ThinkPad laptops? I have a Lenovo Thinkpad X60s running FreeBSD 6.1. See: http://hack.org/mc/freebsd-x60.html Very short version: Usable after PXE boot and installation: both cores are

OpenBSD 4.0 and VNC

2006-11-23 Thread Dr. Harry Knitter
Having a box running with OpenBSD and KDE I would like to access ma desktop via Openvpn and VNC. Openvpn runns well, however when I try to access my desktop with vncviewer from a remote machine I get the following error message: Error allocating memory for desktop name, 2139029504 bytes Even

Can OpenBSD rfmon WLans

2006-11-23 Thread Carlos A. Garcia G.
is OBSD able to put a cisco aironet card in rfmon, i want to run kismet and some other wardriving tools to audit my wlan

Re: Why Sendmail?

2006-11-23 Thread Josh Grosse
On Thu, Nov 23, 2006 at 01:32:29PM +, Conrad Winchester wrote: ...why am I not given the option to turn off Sendmail at this point? I NEVER use sendmail... See afterboot(8) for a description of the sendmail configuration. See daily(8) for a discussion of system maintenance logs which are

Re: BSD laptop

2006-11-23 Thread Greg Troxel
I tried installing NetBSD 3.0 as well, but it couldn't find any disks to install to. In my T60, I set disk controller to legacy, which makes it look like PIIX rather than AHCI. Doesn't work at all or barely: suspend/resume, WLAN, SD reader, fingerprint reader. wlan is intel? I have

Re: on the remote root login in OpenSSH

2006-11-23 Thread Igor Sobrado
In message [EMAIL PROTECTED], Stuart Henderson writes: On 2006/11/23 15:14, Igor Sobrado wrote: 2. There are a lot of brute force attacks from countries like Korea these days. These attacks will be less effective if the intruders get access to an unprivileged account (even if

Re: on the remote root login in OpenSSH

2006-11-23 Thread Igor Sobrado
In message [EMAIL PROTECTED], Darrin Chandler writes: On Thu, Nov 23, 2006 at 12:24:38PM +0100, Igor Sobrado wrote: First of all, I understand that remote root logins can be easily avoided by setting PermitRootLogin to no in /etc/ssh/sshd_config. Yes. This is a very simple thing to do.

Re: webmail

2006-11-23 Thread Jason Dixon
On Nov 23, 2006, at 10:24 AM, Bryan Allen wrote: On Nov 23, 2006, at 8:19 AM, Jasper Bal wrote: Anyone using webmail on OpenBSD? What's good, what's not? Roundcube has been the new hotness for a while now. http://www.roundcube.net/ It's trivial to configure, nice UI (shiny, has drag and

Re: Can OpenBSD rfmon WLans

2006-11-23 Thread Reyk Floeter
On Thu, Nov 23, 2006 at 08:54:42AM -0700, Carlos A. Garcia G. wrote: is OBSD able to put a cisco aironet card in rfmon, i want to run kismet and some other wardriving tools to audit my wlan jajaja... rf monitoring is supported for most of our wireless drivers. with recent wireless drivers

Re: on the remote root login in OpenSSH

2006-11-23 Thread Nick Holland
Igor Sobrado wrote: Hi again. Out of this thread, Mr. Tongson pointed me to an interesting post from march 2005: http://archives.neohapsis.com/archives/openbsd/2005-03/2808.html i.e., DROP IT. IT WILL NOT CHANGE. The guy in charge has spoken. From this post, it is difficult

Re: webmail

2006-11-23 Thread Joel Goguen
Having tried this just now, I'm now going to have to agree with the other RoundCube users here. In not quite 10 minutes I had RC downloaded and configured, and it's easily the best webmail client I've seen yet. On Thu, 23 Nov 2006 11:40:58 -0500, Jason Dixon [EMAIL PROTECTED] wrote: On Nov

Assistance with kernel pppoe

2006-11-23 Thread Alden Pierre
Hello all, I'm able to get userland pppoe working, but I'm having a hard time getting kernel pppoe to work properly. Here are my config files. Is there anything I'm doing wrong, I believe my config file follows what man 4 pppoe states. # file /etc/hostname.pppoe0 inet 0.0.0.0

Re: on the remote root login in OpenSSH

2006-11-23 Thread Igor Sobrado
In message [EMAIL PROTECTED], Nick Holland writes: Igor Sobrado wrote: Hi again. Out of this thread, Mr. Tongson pointed me to an interesting post from march 2005: http://archives.neohapsis.com/archives/openbsd/2005-03/2808.html i.e., DROP IT. IT WILL NOT CHANGE. The guy in

Re: Assistance with kernel pppoe

2006-11-23 Thread Arnaud Bergeron
On 11/23/06, Alden Pierre [EMAIL PROTECTED] wrote: Hello all, I'm able to get userland pppoe working, but I'm having a hard time getting kernel pppoe to work properly. Here are my config files. Is there anything I'm doing wrong, I believe my config file follows what man 4 pppoe states. #

Re: Assistance with kernel pppoe

2006-11-23 Thread Andreas Bihlmaier
On Thu, Nov 23, 2006 at 12:24:21PM -0500, Alden Pierre wrote: Hello all, I'm able to get userland pppoe working, but I'm having a hard time getting kernel pppoe to work properly. Here are my config files. Is there anything I'm doing wrong, I believe my config file follows what man 4

Re: on the remote root login in OpenSSH

2006-11-23 Thread Steve Williams
Igor Sobrado wrote: In message [EMAIL PROTECTED], Stuart Henderson writes: On 2006/11/23 15:14, Igor Sobrado wrote: 2. There are a lot of brute force attacks from countries like Korea these days. These attacks will be less effective if the intruders get access to an

Re: Assistance with kernel pppoe

2006-11-23 Thread Arnaud Bergeron
On 11/23/06, Andreas Bihlmaier [EMAIL PROTECTED] wrote: On Thu, Nov 23, 2006 at 12:24:21PM -0500, Alden Pierre wrote: Hello all, I'm able to get userland pppoe working, but I'm having a hard time getting kernel pppoe to work properly. Here are my config files. Is there anything I'm

dspam config help?

2006-11-23 Thread Rodney Hopkins
I'm completely confused by dspam. I've installed the package from 4.0 on a 4.0/i386 install. No problems there. I can't figure out what to do to get the thing working and even started for that matter! I made the suggested modifications in the sendmail.txt file to my sendmail.cf file. I

Re: on the remote root login in OpenSSH

2006-11-23 Thread chefren
On 11/23/06 6:35 PM, Igor Sobrado wrote: Participate on flamewars is usually not my style and I have certainly more productive ways to waste my time and patience. Probably not with computer security... Nick is right from start to finish and you can learn a lot of his friendly text.

Re: Can OpenBSD rfmon WLans

2006-11-23 Thread carlos garcia
Ok, jajajaja... On Thu, 23 Nov 2006 17:56:54 +0100, Reyk Floeter wrote On Thu, Nov 23, 2006 at 08:54:42AM -0700, Carlos A. Garcia G. wrote: is OBSD able to put a cisco aironet card in rfmon, i want to run kismet and some other wardriving tools to audit my wlan jajaja... rf monitoring

Re: webmail

2006-11-23 Thread Sam Fourman Jr.
Roundcube looks REALLY cool, does OpenBSD have a Maintainer for it yet? Does anyone know of a tourtorial to set it up with postfix and PostgreSQL support? is it better to use Postfix/Courier-IMAP or Postfix/Dovecot? Sam Fourman Jr. On 11/23/06, Joel Goguen [EMAIL PROTECTED] wrote: Having

Re: Assistance with kernel pppoe

2006-11-23 Thread Alden Pierre
Post the ouput of the 'dmesg' and the 'ifconfig -a' command (watch out for the username printed in the output for pppoe if you are paranoid) and I'll try to figure it out. Here is my dmesg, I'm using a kvm switch btw. OpenBSD 4.0 (GENERIC) #1107: Sat Sep 16 19:15:58 MDT 2006 [EMAIL

Can not boot OpenBSD/macppc 4.0-release from cd40.iso on PowerBook G4 15

2006-11-23 Thread Bruno Carnazzi
Hi misc, I'd like to evaluate OpenBSD/macpcc as a replacement for Mac OS X (or dual boot) on my PowerBook G4 15 (fr keyboard). While OpenBSD 3.9 boots flawlessly, OpenBSD 4.0 hangs with a kernel panic (cd40.iso)... As I reboot and try to retrieve my dmesg, I see that OpenFirmware keeps track

Re: Assistance with kernel pppoe

2006-11-23 Thread Alden Pierre
Andreas Bihlmaier wrote: On Thu, Nov 23, 2006 at 12:24:21PM -0500, Alden Pierre wrote: Hello all, I'm able to get userland pppoe working, but I'm having a hard time getting kernel pppoe to work properly. Here are my config files. Is there anything I'm doing wrong, I believe my config

Re: Assistance with kernel pppoe

2006-11-23 Thread Alden Pierre
I made a typo, it should read: For my username, the quotes are not needed, you are right on this assertion. For my username, the quotes are needed, you are right on this assertion. Regards, Alden

Re: webmail

2006-11-23 Thread Jason Dixon
On Nov 23, 2006, at 2:08 PM, Sam Fourman Jr. wrote: Roundcube looks REALLY cool, does OpenBSD have a Maintainer for it yet? I don't think it needs a port. Squirrelmail has been out there for years, no ports there either. Does anyone know of a tourtorial to set it up with postfix and

Re: webmail

2006-11-23 Thread Joel Goguen
Doesn't seem to be in ports, so I'd guess not. There's directions for setting up with MySQL, PostgreSQL, and SQLite in the INSTALL file once you unpack it. On Thu, 23 Nov 2006 13:08:10 -0600, Sam Fourman Jr. [EMAIL PROTECTED] wrote: Roundcube looks REALLY cool, does OpenBSD have a Maintainer

Re: Assistance with kernel pppoe

2006-11-23 Thread Alden Pierre
Sorry if you see this message twice an error occurred on my end. Here is my dmesg, I'm using a kvm switch btw. OpenBSD 4.0 (GENERIC) #1107: Sat Sep 16 19:15:58 MDT 2006 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel Pentium III (GenuineIntel 686-class) 1 GHz cpu0:

Re: webmail

2006-11-23 Thread Bob Beck
All webmail products suck. I am using horde in one location and squirrelmail in another. -Bob * Jasper Bal [EMAIL PROTECTED] [2006-11-23 07:48]: Anyone using webmail on OpenBSD? What's good, what's not? Jasper -- #!/usr/bin/perl if ((not 0 not 1) != (! 0 ! 1)) {

ulpt and usb-parallel adapters

2006-11-23 Thread Michael Small
Do usb to parallel port adapters work with OpenBSD? There seems to be some code commented out in ulpt.c with names including 1284 in them, but I haven't been able to figure out for sure whether that really means these devices aren't supported. I'm debating whether to buy one of them to connect

Re: Assistance with kernel pppoe

2006-11-23 Thread Alden Pierre
Here is my dmesg, I'm using a kvm switch btw and the ifconfig OpenBSD 4.0 (GENERIC) #1107: Sat Sep 16 19:15:58 MDT 2006 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel Pentium III (GenuineIntel 686-class) 1 GHz cpu0:

Re: Assistance with kernel pppoe

2006-11-23 Thread Alden Pierre
Andreas Bihlmaier wrote: On Thu, Nov 23, 2006 at 12:24:21PM -0500, Alden Pierre wrote: Hello all, I'm able to get userland pppoe working, but I'm having a hard time getting kernel pppoe to work properly. Here are my config files. Is there anything I'm doing wrong, I believe my config

Re: on the remote root login in OpenSSH

2006-11-23 Thread Igor Sobrado
In message [EMAIL PROTECTED], chefren writes: On 11/23/06 6:35 PM, Igor Sobrado wrote: Participate on flamewars is usually not my style and I have certainly more productive ways to waste my time and patience. Probably not with computer security... Do you stand treat? You evidently

SFTP only access to sshd

2006-11-23 Thread Ingo Schwarze
From time to time, people come here to ask: How can i set up an account for SFTP only, forbidding shell access? One common answer is scponly, http://sublimation.org/scponly/wiki/ This looks quite powerful, in particular if you intend to chroot. I just had to implement SFTP only access myself.

Re: Assistance with kernel pppoe

2006-11-23 Thread Alden Pierre
Here is my dmesg, I'm using a kvm switch btw and the ifconfig OpenBSD 4.0 (GENERIC) #1107: Sat Sep 16 19:15:58 MDT 2006 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel Pentium III (GenuineIntel 686-class) 1 GHz cpu0:

Re: on the remote root login in OpenSSH

2006-11-23 Thread Igor Sobrado
In message [EMAIL PROTECTED], Steve Williams writes: I block brute force attacks using PF. They get a small set of attempts before they are blocked. Very trivial. pass in on $ext_if proto tcp to $ext_if port ssh flags S/SA \ keep state (max-src-conn-rate 5/40, overload scanners)

Re: on the remote root login in OpenSSH

2006-11-23 Thread Igor Sobrado
In message [EMAIL PROTECTED], Stuart Henderson writes: On 2006/11/23 17:07, Igor Sobrado wrote: ... to set up a firewall with an ever-growing list of hostile machines. ... I think you misunderstand me. I mean to restrict direct SSH access to only those networks which need access, not to

Re: Assistance with kernel pppoe

2006-11-23 Thread Andreas Bihlmaier
On Thu, Nov 23, 2006 at 01:47:24PM -0500, Arnaud Bergeron wrote: On 11/23/06, Andreas Bihlmaier [EMAIL PROTECTED] wrote: On Thu, Nov 23, 2006 at 12:24:21PM -0500, Alden Pierre wrote: Hello all, I'm able to get userland pppoe working, but I'm having a hard time getting kernel pppoe to

Re: Assistance with kernel pppoe

2006-11-23 Thread Gustavo Rios
Mine works just like yours! I only add to /etc/hostname.pppoe0 a line like that: inet 0.0.0.0 255.255.255.255 0.0.0.1 blah blah (eadem to yours) !/sbin/route delete 0.0.0.1 !/sbin/route add default 0.0.0.1 On 11/23/06, Alden Pierre [EMAIL PROTECTED] wrote: Hello all, I'm able to get

wirless LAN - DWL-G120 on OPENBSD 4.0

2006-11-23 Thread K H A I
Is any one working on this driver? I have D-LINK DWL-G120 USB wireless. dmesg shows some thing like this - ugen0 at uhub2 port 1 ugen0: D-Link product 0x3701, rev 2.00/2.03, addr 2 - I run ifconfig -a but cannot show it at all? DO

Re: webmail

2006-11-23 Thread Michal Lesniewski
Jasper Bal wrote: Anyone using webmail on OpenBSD? What's good, what's not? Jasper Hi, I use: 1. http://hastymail.sourceforge.net/ - by default Hastymail does NOT use HTML frames, Javascript, or cookies. 2. http://www.roundcube.net/ - browser-based multilingual IMAP client with an

Re: webmail

2006-11-23 Thread Vijay Sankar
Last year I replaced an Exchange Server with OpenBSD-based mail, file, print, and webmail server and found the following combination to be the best option for me: Openwebmail Dovecot Samba3 Plone/Zope All work with OpenLDAP so the user needs to remember only one password. They are all available

Re: raidctl: ioctl (RAIDFRAME_CONFIGURE) failed on 4.0 amd64 for RAID 1 (mirroring)

2006-11-23 Thread Joachim Schipper
On Wed, Nov 22, 2006 at 10:35:52PM +0530, Siju George wrote: On 11/22/06, Joachim Schipper [EMAIL PROTECTED] wrote: On Tue, Nov 21, 2006 at 08:22:20PM -0600, Vijay Sankar wrote: Good day, I am pretty sure I was booting from /dev/raid0a on the old server but couldn't repeat that with

Re: on the remote root login in OpenSSH

2006-11-23 Thread Joachim Schipper
On Thu, Nov 23, 2006 at 05:07:52PM +0100, Igor Sobrado wrote: [U]sing certificates is an excellent choice too. I suppose that OpenBSD currently supports using certificates stored in removable media. A bit hard to configure, but highly secure. Indeed. I find it hard to think of a situation

Re: on the remote root login in OpenSSH

2006-11-23 Thread Joachim Schipper
On Thu, Nov 23, 2006 at 10:28:20PM +0100, Igor Sobrado wrote: In message [EMAIL PROTECTED], Steve Williams writes: I block brute force attacks using PF. They get a small set of attempts before they are blocked. Very trivial. pass in on $ext_if proto tcp to $ext_if port ssh flags

Re: Assistance with kernel pppoe

2006-11-23 Thread Alden Pierre
Here's my dmesg and ifconfig Here is my dmesg, I'm using a kvm switch btw and the ifconfig OpenBSD 4.0 (GENERIC) #1107: Sat Sep 16 19:15:58 MDT 2006 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel Pentium III (GenuineIntel 686-class) 1 GHz cpu0:

Re: SFTP only access to sshd

2006-11-23 Thread Antti Harri
On Thu, 23 Nov 2006, Ingo Schwarze wrote: From time to time, people come here to ask: How can i set up an account for SFTP only, forbidding shell access? You can do sftp only with OpenSSH. See the ForceCommand in sshd_config(5). -- Antti Harri

Re: SFTP only access to sshd

2006-11-23 Thread Damien Miller
On Thu, 23 Nov 2006, Ingo Schwarze wrote: From time to time, people come here to ask: How can i set up an account for SFTP only, forbidding shell access? One common answer is scponly, http://sublimation.org/scponly/wiki/ This looks quite powerful, in particular if you intend to chroot. I

Re: Assistance with kernel pppoe

2006-11-23 Thread Alden Pierre
Hello, OpenBSD 4.0 (GENERIC) #1107: Sat Sep 16 19:15:58 MDT 2006 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel Pentium III (GenuineIntel 686-class) 1 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,SER,MMX,FXSR,SSE real mem = 536375296

Re: webmail

2006-11-23 Thread dreamwvr
On Thu, Nov 23, 2006 at 10:28:43PM +0100, Michal Lesniewski wrote: Jasper Bal wrote: Anyone using webmail on OpenBSD? What's good, what's not? Jasper Hi, I use: 1. http://hastymail.sourceforge.net/ - by default Hastymail does NOT use HTML frames, Javascript, or cookies. 2.

Re: Assistance with kernel pppoe

2006-11-23 Thread Alden Pierre
#dmesg OpenBSD 4.0 (GENERIC) #1107: Sat Sep 16 19:15:58 MDT 2006 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel Pentium III (GenuineIntel 686-class) 1 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,SER,MMX,FXSR,SSE real mem = 536375296

Re: Bind performance

2006-11-23 Thread Matt Rowley
I can't reach that value with a Dell OptiPlex GX280 w/ onboard bge(4) MP kernel, net.inet.ip.ifq.maxlen=250, 4.0 or -current, doesn't matter. Collision count increases monotonically. Stops forwarding packets, etc. Switching to em(4) carries limit to ~25k to ~30k. consider trying to increase

bad udp cksum messages from client ipsec connection

2006-11-23 Thread Albert Chin
We have someone connecting from an FC4 host running Openswan 2.4.4 behind a firewall to our VPN server running OpenBSD 4.0. They are able to establish a connection ok but tcpdump shows a bad cksum value for pings from the client connection: # tcpdump -avs 1440 -e -ttt -i fxp4 host 60.44.70.140

Re: raidctl: ioctl (RAIDFRAME_CONFIGURE) failed on 4.0 amd64 for RAID 1 (mirroring)

2006-11-23 Thread Siju George
On 11/24/06, Joachim Schipper [EMAIL PROTECTED] wrote: On Wed, Nov 22, 2006 at 10:35:52PM +0530, Siju George wrote: On 11/22/06, Joachim Schipper [EMAIL PROTECTED] wrote: On Tue, Nov 21, 2006 at 08:22:20PM -0600, Vijay Sankar wrote: Good day, I am pretty sure I was booting from

Re: on the remote root login in OpenSSH

2006-11-23 Thread Bill Maas
Hi, how about this one: PermitRootLogin 192.168.1 Should any of the SSH maintainers be reading this: possible new SSH feature? Bill On Thu, 2006-11-23 at 12:24 +0100, Igor Sobrado wrote: Hi again! I have a question on the default behaviour of OpenSSH. Please, do not understand that I

Re: on the remote root login in OpenSSH

2006-11-23 Thread Han Boetes
Bill Maas wrote: how about this one: PermitRootLogin 192.168.1 Should any of the SSH maintainers be reading this: possible new SSH feature? AllowUsers # Han

Re: Connecting to OpenBSD 4.0 isakmpd with racoon on FC5

2006-11-23 Thread Albert Chin
On Thu, Nov 23, 2006 at 08:21:33AM -0600, Albert Chin wrote: I'm trying to connect an FC5 laptop behind a firewall to an OpenBSD 4.0 VPN server running isakmpd. I already have things working with Openswan but would like to get it working with racoon for our Mac OS clients. The OpenBSD

Re: ktrace interpretation

2006-11-23 Thread Otto Moerbeek
On Thu, 23 Nov 2006, Jan Stary wrote: [snip] 2153 foo CALL munmap(0x470d7000,0x1000) 2153 foo RET munmap 0 2153 foo CALL exit(0) $ thanks! This exactly is the minimal example I wanted to understand. Would you please recommend a piece of literature where I

Re: Connecting to OpenBSD 4.0 isakmpd with racoon on FC5

2006-11-23 Thread Igor Goldenberg
2006/11/24, Albert Chin [EMAIL PROTECTED]: quick auth hmac-sha1 enc aes \ sainfo anonymous { pfs_group 2; encryption_algorithm aes, 3des, blowfish; authentication_algorithm hmac_sha256, hmac_sha1, hmac_md5; compression_algorithm deflate; } I think it's better to

Re: on the remote root login in OpenSSH

2006-11-23 Thread Woodchuck
On Thu, 23 Nov 2006, Darrin Chandler wrote: No. It would be simple enough to disable everything, but that wouldn't be functional. OpenBSD has an excellent track record for security, yet many useful things are enabled by default. Do you *really* believe that nobody has thought about turning

OpenCON hardware.

2006-11-23 Thread laurent FANIS
Greetings Any developer that is going to be at OpenCON and wants a USRobotics WiFi card using the unsupported GW3887 (Conexant) chipset ? Please contact me in private. Best Laurent.

Re: Connecting to OpenBSD 4.0 isakmpd with racoon on FC5

2006-11-23 Thread Albert Chin
On Fri, Nov 24, 2006 at 12:04:57PM +0500, Igor Goldenberg wrote: 2006/11/24, Albert Chin [EMAIL PROTECTED]: quick auth hmac-sha1 enc aes \ sainfo anonymous { pfs_group 2; encryption_algorithm aes, 3des, blowfish; authentication_algorithm hmac_sha256, hmac_sha1,

Re: Connecting to OpenBSD 4.0 isakmpd with racoon on FC5

2006-11-23 Thread Albert Chin
On Fri, Nov 24, 2006 at 12:38:46AM -0600, Albert Chin wrote: On Thu, Nov 23, 2006 at 08:21:33AM -0600, Albert Chin wrote: I'm trying to connect an FC5 laptop behind a firewall to an OpenBSD 4.0 VPN server running isakmpd. I already have things working with Openswan but would like to get it

Re: on the remote root login in OpenSSH

2006-11-23 Thread Woodchuck
On Fri, 24 Nov 2006, Joachim Schipper wrote: While I'm inclined to agree with the last part, setting up a botnet isn't *that* hard. Particularly in the domain .kr, which Igor sees intermittent attack from. Korea has the perfect ecosystem for such a botnet -- very large numbers of pretty fast