Re: Open Vs Free BSD

2009-06-22 Thread Daniel Bolgheroni
On Fri, 19 Jun 2009, Holger Kipp wrote: On Fri, Jun 19, 2009 at 09:47:35AM +0100, Michal wrote: For the masses: - NetBSD: Run on any hardware (including toasters) - OpenBSD: Be as secure as possible - FreeBSD: provide best system for x86-platforms It's a mistake to make this association.

Re: exec/unexec

2009-06-22 Thread Joachim Schipper
On Mon, Jun 22, 2009 at 12:00:31AM +0300, Cem Kayali wrote: Hi, Thanks for your reply. -I If scripts exist for a given package, do not execute them. This does not work... I will re-check, but pkg_add -vvvI shows that scripts are executed. Well, one of my client would like

Re: exec/unexec

2009-06-22 Thread Alexander Hall
Joachim Schipper wrote: On Mon, Jun 22, 2009 at 12:00:31AM +0300, Cem Kayali wrote: Hi, Thanks for your reply. -I If scripts exist for a given package, do not execute them. This does not work... I will re-check, but pkg_add -vvvI shows that scripts are executed. Well, one

Re: Open Vs Free BSD

2009-06-22 Thread Anton Parol
OBSD is the best choice of OS for people who like violent little fish mascots. And it has blue-boot-console-thingy (tm) . Ace.

Re: apache DOS tool

2009-06-22 Thread Richard Toohey
On 20/06/2009, at 8:24 AM, Peter van Oord van der Vlies wrote: Hi, Today i some pages are publishing news about a apache DOS tool for example (http://isc.sans.org/diary.html?storyid=6601) and http:// ha.ckers.org/blog/20090617/slowloris-http-dos/ Does this applies to the openbsd apache to

Re: Open Vs Free BSD

2009-06-22 Thread Michal
-Original Message- From: owner-freebsd-sta...@freebsd.org [mailto:owner-freebsd-sta...@freebsd.org] On Behalf Of Charlie Kester Sent: 19 June 2009 20:24 To: freebsd-sta...@freebsd.org Subject: Re: Open Vs Free BSD On Fri 19 Jun 2009 at 11:23:26 PDT Michael R. Wayne wrote: OK, I'm going

Re: Open Vs Free BSD

2009-06-22 Thread Peter Kay - Syllopsium
From: Anton Parol anton.pa...@sun.com OBSD is the best choice of OS for people who like violent little fish mascots. And it has blue-boot-console-thingy (tm) . Ace. I wasn't going to contribute to this thread, but I have to ask. *What* blue-boot-console-thingy? I'm not sure it's sensible

Re: routing/network question

2009-06-22 Thread Claudio Jeker
On Sun, Jun 21, 2009 at 05:57:09PM -0700, patrick keshishian wrote: On Sun, Jun 21, 2009 at 3:42 PM, Philip Guentherguent...@gmail.com wrote: On Sun, Jun 21, 2009 at 10:36 AM, patrick keshishianpkesh...@gmail.com wrote: Maybe I just wrote too many words. In simple terms, once a new route

Re: Open Vs Free BSD

2009-06-22 Thread Holger Kipp
Daniel Bolgheroni schrieb: On Fri, 19 Jun 2009, Holger Kipp wrote: On Fri, Jun 19, 2009 at 09:47:35AM +0100, Michal wrote: For the masses: - NetBSD: Run on any hardware (including toasters) - OpenBSD: Be as secure as possible - FreeBSD: provide best system for x86-platforms

Re: apache DOS tool

2009-06-22 Thread Aiko Barz
On Mon, Jun 22, 2009 at 08:31:01PM +1200, Richard Toohey wrote: On 20/06/2009, at 8:24 AM, Peter van Oord van der Vlies wrote: Hi, Today i some pages are publishing news about a apache DOS tool for example (http://isc.sans.org/diary.html?storyid=6601) and http://

Re: apache DOS tool

2009-06-22 Thread Richard Toohey
On 22/06/2009, at 9:25 PM, Aiko Barz wrote: On Mon, Jun 22, 2009 at 08:31:01PM +1200, Richard Toohey wrote: On 20/06/2009, at 8:24 AM, Peter van Oord van der Vlies wrote: Hi, Today i some pages are publishing news about a apache DOS tool for example

Re: apache DOS tool

2009-06-22 Thread Aiko Barz
On Mon, Jun 22, 2009 at 09:32:56PM +1200, Richard Toohey wrote: The solution, like the problem, lies in the network layer. See iptables and similar network stack filters to provide protection against this vector./unquote Seems like they (and you) are saying are Apache is not the place for

pf logging session init and close with match action

2009-06-22 Thread Csaba Szép
Hi! I would like to log a SYN packet in the beginning of sessions and the FIN and/or RST packet at the end with the new match action. cat pf.conf set skip on lo block in log pass out match in log flags S/S match in log flags F/F match in log flags R/R pass in proto tcp from any to (vic0) port

powerdns port

2009-06-22 Thread Bambero
Hi, It seems there is no ldap backend for powerdns. Does anyone know why ? Bambero

AMD64 with 4GB RAM

2009-06-22 Thread Gaby Vanhegan
Does anybody know the status of large memory support in 4.5/amd64? I found this about 4.4 not finding the full 4GB: http://kerneltrap.org/mailarchive/openbsd-misc/2008/12/15/4420904 And this about bigmem causing boot failure:

openbsd.org nixspam mirror broken

2009-06-22 Thread Andrew Von Cid
Hi all, I just noticed that the link to the OpenBSD Nixspam mirror is broken on http://www.openbsd.org/spamd/. Any ideas what happened? I'm not sure if this is the right place to report this, please let me know if not and who should I ping to get this fixed. Cheers, Andrew.

Re: AMD64 with 4GB RAM

2009-06-22 Thread Thomas Pfaff
On Mon, 22 Jun 2009 12:37:08 +0100 Gaby Vanhegan g...@vanhegan.net wrote: I have a machine with 4GB RAM and a quad core Xeon processor. Will it be able to see the full 4GB of RAM or will I have to tweak bigmem, either by building a custom kernel (really don't want to do that) or by

sftp/ftp best practices

2009-06-22 Thread Dominguez, Roland
I received permission to set up our sftp/ftp server under Openbsd. Is there a best practices doc for doing so? I'm reading: http://www.openbsd.org/faq/faq10.html#ftpchroot and http://www.openbsd.org/cgi-bin/man.cgi?query=ftpdsektion=8 thanks in advance roland dominguez

Re: apache DOS tool

2009-06-22 Thread John Wright
On Mon, Jun 22, 2009 at 04:36:58PM +0200, Jonas Thambert wrote: Aiko Barz wrote: On Mon, Jun 22, 2009 at 09:32:56PM +1200, Richard Toohey wrote: The solution, like the problem, lies in the network layer. See iptables and similar network stack filters to provide protection against this

Re: AMD64 with 4GB RAM

2009-06-22 Thread Gaby Vanhegan
On 22 Jun 2009, at 14:58, Thomas Pfaff wrote: On Mon, 22 Jun 2009 12:37:08 +0100 Gaby Vanhegan g...@vanhegan.net wrote: I have a machine with 4GB RAM and a quad core Xeon processor. Will it be able to see the full 4GB of RAM or will I have to tweak bigmem, either by building a custom

Re: apache DOS tool

2009-06-22 Thread Jonas Thambert
Aiko Barz wrote: On Mon, Jun 22, 2009 at 09:32:56PM +1200, Richard Toohey wrote: The solution, like the problem, lies in the network layer. See iptables and similar network stack filters to provide protection against this vector./unquote Seems like they (and you) are saying are Apache is

Re: AMD64 with 4GB RAM

2009-06-22 Thread Claudio Jeker
On Mon, Jun 22, 2009 at 03:59:35PM +0100, Gaby Vanhegan wrote: On 22 Jun 2009, at 14:58, Thomas Pfaff wrote: On Mon, 22 Jun 2009 12:37:08 +0100 Gaby Vanhegan g...@vanhegan.net wrote: I have a machine with 4GB RAM and a quad core Xeon processor. Will it be able to see the full 4GB of RAM

Re: AMD64 with 4GB RAM

2009-06-22 Thread Philip Guenther
On Mon, Jun 22, 2009 at 7:59 AM, Gaby Vanhegang...@vanhegan.net wrote: I'd gathered that from reading one of those threads to the end. I really wanted to avoid having to build a custom kernel, especially if the results might not even work. I suppose I was just inquiring about the status of

Re: AMD64 with 4GB RAM

2009-06-22 Thread Chris Kuethe
On Mon, Jun 22, 2009 at 8:59 AM, Gaby Vanhegang...@vanhegan.net wrote: I'd gathered that from reading one of those threads to the end. I really wanted to avoid having to build a custom kernel, especially if the results might not even work. I suppose I was just inquiring about the status of

Re: routing/network question

2009-06-22 Thread patrick keshishian
On Mon, Jun 22, 2009 at 1:49 AM, Claudio Jekercje...@diehard.n-r-g.com wrote: On Sun, Jun 21, 2009 at 05:57:09PM -0700, patrick keshishian wrote: On Sun, Jun 21, 2009 at 3:42 PM, Philip Guentherguent...@gmail.com wrote: On Sun, Jun 21, 2009 at 10:36 AM, patrick keshishianpkesh...@gmail.com

Re: routing/network question

2009-06-22 Thread patrick keshishian
On Sun, Jun 21, 2009 at 6:20 PM, Philip Guentherguent...@gmail.com wrote: On Sun, Jun 21, 2009 at 5:57 PM, patrick keshishianpkesh...@gmail.com wrote: On Sun, Jun 21, 2009 at 3:42 PM, Philip Guentherguent...@gmail.com wrote: On Sun, Jun 21, 2009 at 10:36 AM, patrick keshishianpkesh...@gmail.com

CARP problem : slave rioting

2009-06-22 Thread BARDOU Pierre
Hello, I have a setup with 2 openBSD boxes used as firewall, redundancy is made using CARP. Each has 4 NIC : 1 for internet, 1 for pfsync, and the two last are used as a trunk, collecting all other VLANs. Master's advskew is 10, slave's is 50. All worked like a charm since nearly 2 years, but

OpenBSD 4.4: dnsbl just for port 25 (not msa 587)

2009-06-22 Thread Alvaro Mantilla Gimenez
Hello, Is there any way to apply dnsbl feature just on port 25 on the default openbsd sendmail configuration and do not apply that on port 587 (just auth smtp)? I googled it looking for answers but it seems people disabled dnsbl feature on sendmail and used it with spamassasin (which is

Re: sftp/ftp best practices

2009-06-22 Thread Joachim Schipper
On Mon, Jun 22, 2009 at 08:52:23AM -0500, Dominguez, Roland wrote: I received permission to set up our sftp/ftp server under Openbsd. Is there a best practices doc for doing so? I'm reading: http://www.openbsd.org/faq/faq10.html#ftpchroot and

About the OpenBSD repository

2009-06-22 Thread Fernando Quintero
Hello list, I have a question: I was reading about version control systems and i found a lot of the distributed software with best performance, but really i don't know much about it. There are some technicals or philosophicals reasons why the OpenBSD repository does not change to something other

Re: About the OpenBSD repository

2009-06-22 Thread Marco Peereboom
If it ain't broken don't fix it. What is wrong with CVS? And no I am not talking about the hypotheticals and some bugs that exist in the current code (that can also be easily worked around). I have used just about all versioning systems, including ones that have the price tag of islands in the

Re: About the OpenBSD repository

2009-06-22 Thread Anil Madhavapeddy
Pretty much every single new revision control system can import/export from CVS, so use whatever you want... -anil On 22 Jun 2009, at 19:44, Fernando Quintero wrote: Hello list, I have a question: I was reading about version control systems and i found a lot of the distributed software

Re: exec/unexec

2009-06-22 Thread Stuart Henderson
On 2009-06-22, Alexander Hall alexan...@beard.se wrote: Joachim Schipper wrote: On Mon, Jun 22, 2009 at 12:00:31AM +0300, Cem Kayali wrote: Hi, Thanks for your reply. -I If scripts exist for a given package, do not execute them. This does not work... I will re-check, but

OT: Anyone based in Canterbury?

2009-06-22 Thread Edd Barrett
Hi, Are there any students or researchers from Kent Uni or Canterbury on this list? -- Best Regards Edd Barrett (Freelance software developer / technical writer / open-source developer) http://students.dec.bournemouth.ac.uk/ebarrett

Re: pf logging session init and close with match action

2009-06-22 Thread Stuart Henderson
The FIN/RST packets match the existing state created by the pass rule, so these packets don't touch the ruleset at all. Sounds like you either want no state (though this has many drawbacks), extra code to do something between log and log (all), or some other way to record these sessions (pflow?).

Re: powerdns port

2009-06-22 Thread Stuart Henderson
On 2009-06-22, Bambero bamb...@gmail.com wrote: Hi, It seems there is no ldap backend for powerdns. Does anyone know why ? Bambero Because when I last looked at adding it, I found more important problems with the port to fix first.

Re: About the OpenBSD repository

2009-06-22 Thread Paul M
On 23/06/2009, at 6:44 AM, Fernando Quintero wrote: Hello list, I have a question: I was reading about version control systems and i found a lot of the distributed software with best performance, but really i don't know much about it. There are some technicals or philosophicals reasons why

balsa not in ports?

2009-06-22 Thread Eric d'Alibut
What is the rationale for excluding balsa from ports? Some glaring vuln? Best, -- No no no, my fish's name is Eric, Eric the fish. He's an halibut. I am not a looney! Why should I be tarred with the epithet looney merely because I have a pet halibut?

Re: balsa not in ports?

2009-06-22 Thread Ted Unangst
On Mon, Jun 22, 2009 at 8:26 PM, Eric d'Alibuteric.hali...@gmail.com wrote: What is the rationale for excluding balsa from ports? Some glaring vuln? Probably a glaring lack of submissions. You could also mail the ports list, which is the list where the people who know about ports tend to

Re: OpenBSD 4.4: dnsbl just for port 25 (not msa 587)

2009-06-22 Thread Alvaro Mantilla Gimenez
Hi, The openbsd-proto.mc file has these lines: FEATURE(`no_default_msa')dnl DAEMON_OPTIONS(`Family=inet, Address=0.0.0.0, Name=MTA')dnl DAEMON_OPTIONS(`Family=inet6, Address=::, Name=MTA6, M=O')dnl DAEMON_OPTIONS(`Family=inet, Address=0.0.0.0, Port=587, Name=MSA, M=E')dnl

Re: About the OpenBSD repository

2009-06-22 Thread Mike Swanson
Paul M wrote: On 23/06/2009, at 6:44 AM, Fernando Quintero wrote: Hello list, I have a question: I was reading about version control systems and i found a lot of the distributed software with best performance, but really i don't know much about it. There are some technicals or

Re: About the OpenBSD repository

2009-06-22 Thread Eugene Prodeguene
On Mon, 22 Jun 2009, Mike Swanson wrote: Paul M wrote: On 23/06/2009, at 6:44 AM, Fernando Quintero wrote: Hello list, I have a question: I was reading about version control systems and i found a lot of the distributed software with best performance, but really i don't know much about it.

Re: About the OpenBSD repository

2009-06-22 Thread Abel Camarillo
On Mon, Jun 22, 2009 at 07:13:51PM -0700, Mike Swanson wrote: Paul M wrote: On 23/06/2009, at 6:44 AM, Fernando Quintero wrote: Hello list, I have a question: I was reading about version control systems and i found a lot of the distributed software with best performance, but really i

Re: balsa not in ports?

2009-06-22 Thread Eric d'Alibut
On Mon, Jun 22, 2009 at 10:29 PM, Daniel Dickman said, Eric, attached is a starting point if you -- or someone else -- want to finish the work to get balsa ported over. The patches are quick hacks to get it to compile (so you'll need to investigate why it doesn't compile and fix properly) and

Re: balsa not in ports?

2009-06-22 Thread Mike Erdely
A very recent submission (not yet clearly linked) to the OpenBSD website is the ports handbook. You should check it out: http://www.openbsd.org/faq/ports/ I await your submission for the port you'd like. -ME On Tue, Jun 23, 2009 at 12:15:21AM -0400, Eric d'Alibut wrote: On Mon, Jun 22, 2009

Re: OpenBSD 4.4: dnsbl just for port 25 (not msa 587)

2009-06-22 Thread Dan Harnett
On Mon, Jun 22, 2009 at 07:19:09PM -0600, Alvaro Mantilla Gimenez wrote: According to the /usr/share/sendmail/README file, it is necessary to add the a modifier to the line that define the MSA: Additionally, by using the M=a modifier you can require authentication before messages are