Re: Why .cshrc and .profile in / ?

2014-10-20 Thread Mike Jackson
Quoting worik worik.stan...@gmail.com: In a fresh(ish) OpenBSD installation I note .cshrc and .profile in /. Why? bin:*:3:7:Binaries Commands and Source:/:/sbin/nologin

Re: Fix xfe (Was: sudo bad practice or inconsistency?)

2014-10-20 Thread Raimo Niskanen
On Sat, Oct 18, 2014 at 07:29:59AM +0200, Alessandro DE LAURENZIS wrote: On Fri 17/10 17:39, Raimo Niskanen wrote: As I read the man page for su it is the target's login shell that is invoked, and it need not always be /bin/sh - it can be changed. Therefore I suspect that you want -s

Re: multicast packets on tun interface

2014-10-20 Thread Giancarlo Razzolini
On 20-10-2014 01:53, Nicolas Haller wrote: I have a strange issue while trying to reconfigure my Soekris after the CompactFlash died. Here the picture. I have a dedicated FreeBSD server linked with my Soekris acting as my home gateway(which was running OpenBSD 4.0, and now running OpenBSD

Re: Shadow TCP stacks

2014-10-20 Thread Henning Brauer
* Ian Grant ian.a.n.gr...@googlemail.com [2014-10-20 01:02]: On Sun, Oct 19, 2014 at 1:40 AM, Giancarlo Razzolini I believe that OpenBSD does that. But don't expect them to add a security through obscurity layer to their kernel because I guess they wont. Well, they don't have a choice,

Re: multicast packets on tun interface

2014-10-20 Thread Louis Bailleul
On 2014-10-20 11:31, Giancarlo Razzolini wrote: On 20-10-2014 01:53, Nicolas Haller wrote: I have a strange issue while trying to reconfigure my Soekris after the CompactFlash died. Here the picture. I have a dedicated FreeBSD server linked with my Soekris acting as my home gateway(which was

Re: multicast packets on tun interface

2014-10-20 Thread Nicolas Haller
On 20/10/14 06:31 AM, Giancarlo Razzolini wrote: On 20-10-2014 01:53, Nicolas Haller wrote: I have a strange issue while trying to reconfigure my Soekris after the CompactFlash died. Here the picture. I have a dedicated FreeBSD server linked with my Soekris acting as my home gateway(which was

Re: multicast packets on tun interface

2014-10-20 Thread Nicolas Haller
On 20/10/14 07:08 AM, Louis Bailleul wrote: I am using openvpn (with tun interfaces) and quagga to do something similar between two linux boxes . I experienced that exact issue a while back and managed to solve it by accident while upgrading openvpn ... I am currently using OpenVPN 2.2.1

Re: multicast packets on tun interface

2014-10-20 Thread Giancarlo Razzolini
On 20-10-2014 09:51, Nicolas Haller wrote: Sure I can. Did you see any change fitting with my issue? I took a look on the changelog but I didn't find anything relevant. I think I'll try to reproduce the issue on two 5.5 OpenBSD VMs to rule out (or not) FreeBSD and with the last snapshot to see

Re: multicast packets on tun interface

2014-10-20 Thread Giancarlo Razzolini
On 20-10-2014 09:08, Louis Bailleul wrote: I am using openvpn (with tun interfaces) and quagga to do something similar between two linux boxes . I experienced that exact issue a while back and managed to solve it by accident while upgrading openvpn ... I am currently using OpenVPN 2.2.1

Fan control not working as intended

2014-10-20 Thread dxtr
Hi! I have a Thinkpad X200 where the fan controlling does not seem to be working as intended. It is constantly spinning at 3300-3400 RPM according to 'sysctl hw.sensors.acpithinkpad0.fan0', even under heavy load (100% usage on both cores) and no matter if the cpu temperature is 35 or 55 degrees

Re: Shadow TCP stacks

2014-10-20 Thread Giancarlo Razzolini
On 19-10-2014 21:01, Ian Grant wrote: On the contrary: it_will_ make it impossible for people to know what _we_ are doing. This is not one system I'm talking about: it's countless independent VPNs. No one person in the world will ever know what_we_ are doing. Except perhaps for the nations

Re: multicast packets on tun interface

2014-10-20 Thread Louis Bailleul
On 2014-10-20 13:08, Giancarlo Razzolini wrote: On 20-10-2014 09:08, Louis Bailleul wrote: I am using openvpn (with tun interfaces) and quagga to do something similar between two linux boxes . I experienced that exact issue a while back and managed to solve it by accident while upgrading

Re: multicast packets on tun interface

2014-10-20 Thread Giancarlo Razzolini
On 20-10-2014 11:02, Louis Bailleul wrote: Just to be clear, I did not say that the solution was to upgrade or anything else. To quote you: I experienced that exact issue a while back and managed to solve it by accident while upgrading openvpn ... But I think that asking someone to check the

Some radeon / drm error?

2014-10-20 Thread Stefan Wollny
HI there! As my system (amd64-current) still looses sometimes the routes (?) I am checking the logs to investigate before asking for help. Doing so I run tail -f /var/log/messages in a xterm. I just noticed the following error: ~~~ Oct 20 13:31:13 idefix /bsd: error:

Making tftp download large files from tftpd

2014-10-20 Thread Justin Mayes
I will spare you all the backstory but I found that tftp could not download files over 32 mb by default from tftpd. I know you can pass blocksize to tftpd to handle much larger files but I was originally working with a client where this wasn't possible. Tftp protocol has 2 bytes for block number

tcpdump: WARNING: compensating for unaligned libpcap packets

2014-10-20 Thread Stefan Wollny
Hi there! I use a Lenovo T60 with amd64-5.6-current / #452 from Oct. 20th. Looking at what 'tcpdump -nettti pflog0 inbound and action block' reports I noticed the following: ~ ~ $ sudo tcpdump -nettti pflog0 inbound and action block tcpdump: WARNING: snaplen raised

Re: systat: What are dirty pages?

2014-10-20 Thread Josh Grosse
On 2014-10-20 13:16, Stefan Wollny wrote: Hi there! Still investigating some strange behaviour I run ~ $ sudo systat states Scrolling some pages to the right I get some information related to 'devices' (I reformatted the page showing the last column underneath the first columns for better

Re: systat: What are dirty pages?

2014-10-20 Thread Stefan Wollny
Am 10/20/14 um 19:36 schrieb Josh Grosse: On 2014-10-20 13:16, Stefan Wollny wrote: Hi there! Still investigating some strange behaviour I run ~ $ sudo systat states Scrolling some pages to the right I get some information related to 'devices' (I reformatted the page showing the last

Staus of stacked softraid root (RAID1C for root)?

2014-10-20 Thread John Merriam
Hello. I was wondering if there was any new information about the status of stacked softraid for the root partition? I am particularly interested in using RAID1C for root partitions. I searched and the last message I could find regarding the subject was from over a year ago and I think the

Re: Shadow TCP stacks

2014-10-20 Thread Justin Mayes
On the contrary: it_will_ make it impossible for people to know what _we_ are doing. This is not one system I'm talking about: it's countless independent VPNs. No one person in the world will ever know what_we_ are doing. 'countless independent VPNs' + 'a one-time pre-shared key' = big

Publishing SSH public key fingerprints bit length?

2014-10-20 Thread Craig R. Skinner
Hi, I noticed OpenBSD anon CVS SSH fingerprints have the bit length published with the algorithm type: http://www.openbsd.org/anoncvs.html A couple of other popular non-OpenBSD sites omit the bit length: 16:27:ac:a5:76:28:2d:36:63:1b:56:4d:eb:df:a6:48 (RSA)

Re: Staus of stacked softraid root (RAID1C for root)?

2014-10-20 Thread Ted Unangst
On Mon, Oct 20, 2014 at 14:12, John Merriam wrote: Hello. I was wondering if there was any new information about the status of stacked softraid for the root partition? I am particularly interested in using RAID1C for root partitions. I searched and the last message I could find regarding

Re: current snapshot installer not recognising USB devices

2014-10-20 Thread Mihai Popescu
http://marc.info/?l=openbsd-miscm=141313780003055w=2

openssl: format error in certificate's notBefore field

2014-10-20 Thread Daniel Pajonzeck
Hi list, I'm running OpenBSD-5.5-amd64. Today, I patched the 012_openssl.patch, built and installed the new version, but now, I'm not able to establish secure connections. For example via # https $ wget -O /dev/null https://bitfactory.ws/test.txt $ curl curl https://google.com # smtps

Re: Publishing SSH public key fingerprints bit length?

2014-10-20 Thread Christian Weisgerber
On 2014-10-20, Craig R. Skinner skin...@britvault.co.uk wrote: I noticed OpenBSD anon CVS SSH fingerprints have the bit length published with the algorithm type: http://www.openbsd.org/anoncvs.html That seems useless. The bit length doesn't appear in the known_hosts file. Implicitly it

Realtek RTL8192SE wireless card support in OpenBSD 5.5

2014-10-20 Thread Dylan Socolobsky
Hello. I just decided to give OpenBSD 5.5 (amd64) a go in my netbook, everything is working flawlessly so far, except for the Wireless Network. I did install rsu-firmware which did nothing. My netbook has a Realtek RTL8192SE wireless chip, which I can't get to work with OpenBSD. When running

Re: Realtek RTL8192SE wireless card support in OpenBSD 5.5

2014-10-20 Thread Carl Trachte
On Mon, Oct 20, 2014 at 2:54 PM, Dylan Socolobsky dsocolob...@gmail.com wrote: Hello. I just decided to give OpenBSD 5.5 (amd64) a go in my netbook, everything is working flawlessly so far, except for the Wireless Network. I did install rsu-firmware which did nothing. My netbook has a

Re: Shadow TCP stacks

2014-10-20 Thread john slee
On 20 October 2014 14:13, Worik Stanton worik.stan...@gmail.com wrote: Yes all traffic of a country can be analysed, fairly close to real time. With some basic statistics, smart sampling and a dedicated team crafting cleaver algorithms... That is what those big budgets are for! Can throw in

Re: Realtek RTL8192SE wireless card support in OpenBSD 5.5

2014-10-20 Thread Stefan Sperling
On Mon, Oct 20, 2014 at 06:54:31PM -0300, Dylan Socolobsky wrote: What can I do? Is the card not supported at all? Is it just bad mapping maybe? Not supported. Write a driver for it or find a card that works.

Re: Making tftp download large files from tftpd

2014-10-20 Thread Justin Mayes
Here is my diff to change the data type of the block variable so tftp can handle tftpd block rollover when transferring large files. May not be that useful but I'm just using something trivial (pun intended) to learn the procedure. J From: Justin Mayes Sent: Monday, October 20, 2014 9:26 AM To:

Re: Shadow TCP stacks

2014-10-20 Thread Ian Grant
On Mon, Oct 20, 2014 at 6:18 PM, john slee indig...@oldcorollas.org wrote: On 20 October 2014 14:13, Worik Stanton worik.stan...@gmail.com wrote: Yes all traffic of a country can be analysed, fairly close to real time. With some basic statistics, smart sampling and a dedicated team crafting

Re: Making tftp download large files from tftpd

2014-10-20 Thread James A. Peltier
- Original Message - | I will spare you all the backstory but I found that tftp could not download | files over 32 mb by default from tftpd. I know you can pass blocksize to | tftpd | to handle much larger files but I was originally working with a client where | this wasn't possible. Tftp

current.html: Remove group _lkm

2014-10-20 Thread Max Fillinger
current.html has no instructions to remove the _lkm group yet. Index: www/faq/current.html === RCS file: /cvs/www/faq/current.html,v retrieving revision 1.562 diff -u -p -r1.562 current.html --- www/faq/current.html19 Oct

Re: Shadow TCP stacks

2014-10-20 Thread Giancarlo Razzolini
On 20-10-2014 20:46, Ian Grant wrote: There's analysis, and there's analysis. None of this is particularly interesting without knowledge of what depth of analysis was being done. Yes it is. Because filters can be made to alert you of odd traffic. And certainly a tcp syn to an http port which

Re: Shadow TCP stacks

2014-10-20 Thread Ian Grant
On Mon, Oct 20, 2014 at 8:33 AM, Giancarlo Razzolini grazzol...@gmail.com wrote: On 19-10-2014 21:01, Ian Grant wrote: On the contrary: it _will_ make it impossible for people to know what _we_ are doing. This is not one system I'm talking about: it's countless independent VPNs. No one person

Re: Shadow TCP stacks

2014-10-20 Thread Giancarlo Razzolini
On 20-10-2014 21:52, Ian Grant wrote: How else can one protect a system from DoS attacks, other than by concealing it some way? And what is cryptography if it's not concealing the meaning of a communication in some way? Oh my. DoS can be mitigated. You could never protect a system. Even if

Re: Shadow TCP stacks

2014-10-20 Thread Ian Grant
On Mon, Oct 20, 2014 at 8:01 PM, Giancarlo Razzolini grazzol...@gmail.com wrote: On 20-10-2014 21:52, Ian Grant wrote: How else can one protect a system from DoS attacks, other than by concealing it some way? And what is cryptography if it's not concealing the meaning of a communication in

Re: Shadow TCP stacks

2014-10-20 Thread Theo de Raadt
You are off-topic for this mailing list. Please go discuss it elsewhere.

Re: Making tftp download large files from tftpd

2014-10-20 Thread Justin Mayes
I could. My original problem was with cisco rommon tftpdnld command as client failing talking to tftpd. I just notice the tftp client problem while testing locally. After this I intend to go back and make tftpd work with whatever cisco client is doing. Since that’s a two byte field in the rfc

Re: Staus of stacked softraid root (RAID1C for root)?

2014-10-20 Thread John Merriam
On 10/20/2014 4:42 PM, Ted Unangst wrote: Short answer: It doesn't work yet, and no idea when it will work. Thanks for the replies. I will keep my eye out as to what is brewing. If I find the time maybe I'll read the code and see what needs doing with respect to RAID1C for root. For now

Re: Publishing SSH public key fingerprints bit length?

2014-10-20 Thread Giancarlo Razzolini
On 20-10-2014 19:37, Christian Weisgerber wrote: On 2014-10-20, Craig R. Skinner skin...@britvault.co.uk wrote: I noticed OpenBSD anon CVS SSH fingerprints have the bit length published with the algorithm type: http://www.openbsd.org/anoncvs.html That seems useless. That's not useless. SSHFP

Re: openssl: format error in certificate's notBefore field

2014-10-20 Thread Daniel Pajonzeck
Ok, the problem is fixed now. I think it was solved by rebuilding/-installing the crypto library. Sorry for the disturbance. // Daniel On 20.10.2014 23:31, Daniel Pajonzeck wrote: Hi list, I'm running OpenBSD-5.5-amd64. Today, I patched the 012_openssl.patch, built and installed the new

Re: Realtek RTL8192SE wireless card support in OpenBSD 5.5

2014-10-20 Thread Javier Bassi
On Mon, Oct 20, 2014 at 7:20 PM, Stefan Sperling s...@stsp.name wrote: On Mon, Oct 20, 2014 at 06:54:31PM -0300, Dylan Socolobsky wrote: What can I do? Is the card not supported at all? Is it just bad mapping maybe? Not supported. Write a driver for it or find a card that works. Also,

Re: systat: What are dirty pages?

2014-10-20 Thread Philip Guenther
On Mon, Oct 20, 2014 at 5:16 PM, ropers rop...@gmail.com wrote: Btw., for another guy's question (that I can't seem to google), in this: 6553 avail kvaslots does that mean Kernel Virtual Address space SLOTS (whatever slots mean in this context)? Or does it stand for Kernel Virtual Address

Re: LDAPD indexed key doesn't exist!

2014-10-20 Thread Matthew Weigel
On 10/19/14, 4:36 PM, Predrag Punosevac wrote: I am using stack ldapd on the AMD 5.5 release to manage about 100 users in our distributed UNIX environment. I have noticed the following log message for three users LDAPD indexed key [uid=somebody,ou=users,] doesn't exist! There is nothing at

Strange behaviour with X

2014-10-20 Thread Leonardo Santagostini
Hello @misc. Just for the record (having in mind that 5.6 its almost here !!!), im using 5.5 Release and X was hunged for a while, but get restored. Here goes dmesg OpenBSD 5.5 (GENERIC.MP) #315: Wed Mar 5 09:37:46 MST 2014