Re: PF for a VPS

2014-04-11 Thread Sinosuke Noara
Thanks for the answers! Yes, it's a single physical machine running Debian (OpenBSD is not an option for my friends, and I don't know anything about virtualization in OpenBSD, just that there isn't a native support). Answering to Tomas: 1) This is the host (physical machine)

Re: FYA: http://heartbleed.com/

2014-04-11 Thread hruodr
John Moser john.r.mo...@gmail.com wrote: On Thu, Apr 10, 2014 at 4:18 PM, John Moser john.r.mo...@gmail.com wrote: Also why has nobody corrected me on this yet? I've read El Reg's analysis, and they missed a critical detail that I didn't see until I read the code in context: IT

Re: sudo -u environment help

2014-04-11 Thread Craig R. Skinner
Would this be better asked on tech@? On 2014-04-08 Tue 09:26 AM |, Craig R. Skinner wrote: To clarify, there are no ~/. shell dot files. $PATH umask are set in /etc/login.conf $MAIL is the default set by login(1) /etc/profile sources /etc/ksh.kshrc, which just sets $PS1, window decor

Re: PF for a VPS

2014-04-11 Thread Craig R. Skinner
On 2014-04-11 Fri 09:10 AM |, Sinosuke Noara wrote: 1) This is the host (physical machine) http://www.hetzner.de/hosting/produkte_rootserver/ex40 Have you seen this: http://www.bsws.de/en/root-server/

Re: OpenBSD users web page updates

2014-04-11 Thread Craig R. Skinner
ping (http://thread.gmane.org/gmane.os.openbsd.misc/211666) On 2014-03-31 Mon 14:59 PM |, Brad Smith wrote: On 31/03/14 1:34 PM, Craig R. Skinner wrote: A few updates for the page: http://www.OpenBSD.org/users.html#isp * Fix broken Swebase link. * Add Devio.us * Add Grex * Add

Re: OpenBSD Foundation 2014 Fundraising Campaign.

2014-04-11 Thread nobody
Hi all, - 1) If I search for openbsdfoundation on: - Facebook - Twitter - Youtube - Instagram - Flickr - Slideshare - etc.. I get ZERO results regarding the topic. We are writing 2014. The people are on social sites.. More could be reached if these mentioned sites

Re: FYA: http://heartbleed.com/

2014-04-11 Thread Carlos Alberto Lopez Perez
On 08/04/14 21:40, Theo de Raadt wrote: On Tue, Apr 08, 2014 at 15:09, Mike Small wrote: nobody openbsd.as.a.desk...@gmail.com writes: read overrun, so ASLR won't save you What if malloc's G option were turned on? You know, assuming the subset of the worlds' programs you use is good enough

Re: feature patch - replace /etc/crontab by /etc/cron.d/

2014-04-11 Thread Sélène
Le 2014-04-09 00:48, czark...@gmail.com a écrit : Remy said: here is a simple patch to replace /etc/crontab by /etc/cron.d/. FWIW why? I find it far easier to have multiples crontab files in /etc/cron.d/ than keeping a single crontab. At works, we are heavily using crontabs, and when we

OpenSMTPD exits with value 1 when clients attempd to authenticate

2014-04-11 Thread Gregor Best
Hi people, I'm running OpenSMTPD 5.4.3 from -current on my private mail server. After a recent update, using authentication for sending mail cause smtpd to exit with exit value 1. A (stripped down) configuration that exhibits the issue is the following: pki server certificate

Re: PF for a VPS

2014-04-11 Thread Giancarlo Razzolini
Em 11-04-2014 04:10, Sinosuke Noara escreveu: Thanks for the answers! Yes, it's a single physical machine running Debian (OpenBSD is not an option for my friends, and I don't know anything about virtualization in OpenBSD, just that there isn't a native support). Answering to Tomas: 1) This

Hardware donation possible - FB-DIMMs and Ultra320 SCSI drive

2014-04-11 Thread Jan Vlach
Hi, I have some leftover hardware available for donation if anyone is interested: - Kingston KVR 2x4G modules (kit) KVR667D2D4F5K2/8G / 4G 2RX4 PC2-5300F-555-11-E0 - new - Micron 4x512M modules, DDR, 400 CL3, ECC, REG / MT9VDDF6472Y-40BF1 / PC3200R-30331-G0 - used - ULTRA320 SCSI ST373307LW

Re: OpenSMTPD exits with value 1 when clients attempd to authenticate

2014-04-11 Thread Eric Faurot
On Fri, Apr 11, 2014 at 12:44:47PM +0200, Gregor Best wrote: Hi people, Hi, I'm running OpenSMTPD 5.4.3 from -current on my private mail server. After a recent update, using authentication for sending mail cause smtpd to exit with exit value 1. A (stripped down) configuration that exhibits

Re: feature patch - replace /etc/crontab by /etc/cron.d/

2014-04-11 Thread Tomas Bodzar
On Fri, Apr 11, 2014 at 12:05 PM, Sélène sel...@bsd.zplay.eu wrote: Le 2014-04-09 00:48, czark...@gmail.com a écrit : Remy said: here is a simple patch to replace /etc/crontab by /etc/cron.d/. FWIW why? I find it far easier to have multiples crontab files in /etc/cron.d/ than

Re: OpenSMTPD exits with value 1 when clients attempd to authenticate

2014-04-11 Thread Remco
Gregor Best wrote: Hi people, I'm running OpenSMTPD 5.4.3 from -current on my private mail server. After a recent update, using authentication for sending mail cause smtpd to exit with exit value 1. A (stripped down) configuration that exhibits the issue is the following: pki server

two node openbsd 5.4 cluster crashed ca 5 min after deleting carp and vlan interfaces

2014-04-11 Thread Imre Oolberg
Hi! I have run two node active-passive cluster with OpenBSD successfully over several years, there have been problems too but at least now i know how to escape them. Now i run into major issue and i would like to ask for help, maybe its software bug or i just manage my system inappropriately, i

Re: OpenSMTPD exits with value 1 when clients attempd to authenticate

2014-04-11 Thread Gregor Best
Hi Remco, On Fri, Apr 11, 2014 at 01:18:54PM +0200, Remco wrote: [...] Is this commit the culprit: http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libssl/cert.pem?rev=1.24 [...] I think that is quite unlikely. I still have the old version of /etc/ssl/cert.pem because I didn't see the point of

Re: feature patch - replace /etc/crontab by /etc/cron.d/

2014-04-11 Thread Sélène
Le 2014-04-11 14:21, Tomas Bodzar a écrit : On Fri, Apr 11, 2014 at 12:05 PM, Sélène sel...@bsd.zplay.eu wrote: Le 2014-04-09 00:48, czark...@gmail.com a écrit : Remy said: here is a simple patch to replace /etc/crontab by /etc/cron.d/. FWIW why? I find it far easier to have

Re: two node openbsd 5.4 cluster crashed ca 5 min after deleting carp and vlan interfaces

2014-04-11 Thread Imre Oolberg
Hi again! I forgot to mention that although carp is configured i do not use there pfsync (even no pfsync0 interface). (There have been problems with pfsync, at least in the past and for me). Imre On Fri, 2014-04-11 at 15:45 +0300, Imre Oolberg wrote: Hi! I have run two node active-passive

Re: OpenBSD Foundation 2014 Fundraising Campaign.

2014-04-11 Thread Jan Stary
On Apr 11 11:46:12, openbsd.as.a.desk...@gmail.com wrote: Hi all, - 1) If I search for openbsdfoundation on: - Facebook - Twitter - Youtube - Instagram - Flickr - Slideshare - etc.. I get ZERO results regarding the topic. If I search for

Re: feature patch - replace /etc/crontab by /etc/cron.d/

2014-04-11 Thread Ted Unangst
On Fri, Apr 11, 2014 at 12:05, Sélène wrote: Le 2014-04-09 00:48, czark...@gmail.com a écrit : Remy said: here is a simple patch to replace /etc/crontab by /etc/cron.d/. FWIW why? I find it far easier to have multiples crontab files in /etc/cron.d/ than keeping a single crontab. At

Re: OpenBSD Foundation 2014 Fundraising Campaign.

2014-04-11 Thread Kenneth Westerback
On 11 April 2014 11:15, Jan Stary h...@stare.cz wrote: On Apr 11 11:46:12, openbsd.as.a.desk...@gmail.com wrote: Hi all, - 1) If I search for openbsdfoundation on: - Facebook - Twitter - Youtube - Instagram - Flickr - Slideshare - etc.. I get ZERO

Re: OpenBSD Foundation 2014 Fundraising Campaign.

2014-04-11 Thread trifle menot
On 4/10/14, Bob Beck b...@openbsdfoundation.org wrote: The Foundation will continue to strive to improve its financial resources, and hopes to be able to provide further support to the projects in the future. Please continue to contribute! Where can I read your financial reports?

Re: OpenBSD Foundation 2014 Fundraising Campaign.

2014-04-11 Thread Bob Beck
On the web site at www.openbsdfoundation.org. On Fri, Apr 11, 2014 at 10:15 AM, trifle menot trifleme...@gmail.com wrote: On 4/10/14, Bob Beck b...@openbsdfoundation.org wrote: The Foundation will continue to strive to improve its financial resources, and hopes to be able to provide further

Re: OpenBSD Foundation 2014 Fundraising Campaign.

2014-04-11 Thread noah pugsley
On Fri, Apr 11, 2014 at 8:15 AM, Jan Stary h...@stare.cz wrote: On Apr 11 11:46:12, openbsd.as.a.desk...@gmail.com wrote: Hi all, - 1) If I search for openbsdfoundation on: - Facebook - Twitter - Youtube - Instagram - Flickr - Slideshare -

grammar error in ssl(8)

2014-04-11 Thread Mike Small
Near the end of ssl(8) there is the following phrase: which allowed users to enable full function without recompiling the applications. The word function here should instead be functionality I assume.

003_ftp.patch, cert ref count

2014-04-11 Thread Mike Small
Was looking at http://ftp.openbsd.org/pub/OpenBSD/patches/5.5/common/003_ftp.patch.sig this last chunk... + if (ssl_verify) { + X509 *cert; + + cert = SSL_get_peer_certificate(ssl); + if (cert == NULL) { +

Re: acpitz3: critical temperature exceeded with HP nc6320 Laptop

2014-04-11 Thread Steve Quinn
On Fri, Apr 11, 2014 at 1:34 AM, Tomas Bodzar tomas.bod...@gmail.com wrote: Using -current is easy, just start with latest snapshot from mirror and use snapshot path for packages in PKG_PATH as well. From that time on easy like with regular system. Plus is you have binary upgrades to new

Re: FYA: http://heartbleed.com/

2014-04-11 Thread patrick keshishian
| [NSA] knew for at least two years about ... the | Heartbleed bug, and regularly used it to gather | critical intelligence, two people familiar with | the matter said. I was waiting for someone to say this. | ... the NSA has more than 1,000 experts | devoted to ferreting out such flaws using |