Re: tar question

2006-10-31 Thread Joachim Schipper
On Tue, Oct 31, 2006 at 11:06:13AM +0100, ropers wrote: On 31/10/06, Mike Spenard [EMAIL PROTECTED] wrote: After tar has finished writing to the tape device is there a way to see how large the finished tar on tape is? Forgive me if this sounds impressively stupid, but would you not just use

Re: NOD32 Antivirus and OpenBSD?

2006-10-31 Thread Joachim Schipper
On Mon, Oct 30, 2006 at 09:52:00PM -0800, smith wrote: On Thu, 26 Oct 2006 23:28:41 -0400, STeve Andre' wrote On Thursday 26 October 2006 20:16, smith wrote: Some people like to run antivirus software on UNIX boxes to ensure they're not carriers for Windows viruses, etc. Personally, I

Re: Secure Apache Webserver

2006-10-30 Thread Joachim Schipper
On Sun, Oct 29, 2006 at 03:20:25PM +0100, Aiko Barz wrote: Hello, I already discussed this subject on the list. There were several possible solutions for this subject and I have chosen one, I would like to present now. The problem: I have several vhosts, which are used by several people.

Re: new postgresql in ports

2006-10-30 Thread Joachim Schipper
On Sun, Oct 29, 2006 at 11:59:33PM +0100, LeVA wrote: 2006. October 29. 22:30, viq: On 29/10/06, LeVA [EMAIL PROTECTED] wrote: Hi! There was a commit today which updates postgresql to version 8.1.5. This fix made it to the stable branch too, so will there be a package for it, or

Re: I need help in interpreting some Docs

2006-10-30 Thread Joachim Schipper
[Excuse me for the very late reaction, please; I was away this weekend.] On Thu, Oct 26, 2006 at 03:46:45PM -0700, John Draper wrote: Joachim Schipper wrote: I also posted this to the snort users list, [EMAIL PROTECTED], but (sigh) my postings are not making it to the list. Have

Re: I need help in interpreting some Docs

2006-10-26 Thread Joachim Schipper
On Wed, Oct 25, 2006 at 11:32:00AM -0700, John Draper wrote: Joachim Schipper wrote: On Tue, Oct 24, 2006 at 03:17:05PM -0700, John Draper wrote: or would I (...) write [Snort-inline] off as something OpenBSD is not setup to do, or is there an alternative [to IPTables] I can use

Re: OpenBSD AJAX

2006-10-26 Thread Joachim Schipper
On Wed, Oct 25, 2006 at 05:54:37PM -0500, Damian Wiest wrote: On Wed, Oct 25, 2006 at 03:06:36PM +0200, Joachim Schipper wrote: Just a half-baked thought, but escaping any non-constant expression (i.e., actual variable, not fixed string) passed to the browser or a database would go a long

Re: auditing when permissions are changed

2006-10-26 Thread Joachim Schipper
On Thu, Oct 26, 2006 at 11:07:49PM +0200, ropers wrote: Hi, This is a sorta n00bish question, but I've just discovered that unlike what I've always assumed to be the case, changing a file's permissions doesn't touch its last modified time/date stamp. Is there any way to find out when a

Re: I need help in interpreting some Docs

2006-10-25 Thread Joachim Schipper
On Tue, Oct 24, 2006 at 03:17:05PM -0700, John Draper wrote: Hi, I'm posting this to both OpenBSD and Snort mailing lists. In reading through the snort documentation, in section 1.5 (Inline mode), they state the following... In order for Snort Inline to work properly, Download and compile

Re: Problem when mount USB to OpenBSD

2006-10-25 Thread Joachim Schipper
On Tue, Oct 24, 2006 at 05:32:02PM -0700, Maverick wrote: Greg Thomas-3 wrote: On 10/24/06, Maverick [EMAIL PROTECTED] wrote: I am trying to mount a USB pen drive to OpenBSD. When i connect the usb to the computer there is no notice or lines appear. so i tried to mount -t msdos

Re: OpenBSD AJAX

2006-10-25 Thread Joachim Schipper
On Wed, Oct 25, 2006 at 01:56:32AM +0200, ropers wrote: Ryan, Joachim (, others): You mentioned that you dislike PHP. I would be curious to learn your reasons for this. I'm not trying to instigate religious wars or the like, it's just that my programming skills are mostly nonexistant

Re: Automating updates question

2006-10-25 Thread Joachim Schipper
On Tue, Oct 24, 2006 at 07:26:24PM -0600, Michael Osburn wrote: While I fully realize that installing from ports is not the accepted process for anyone except for developers, I wish to start helping out in any way I can; though, being a low-skilled OpenBSD programmer tends to hurt more

Re: OpenBSD AJAX

2006-10-25 Thread Joachim Schipper
On Tue, Oct 24, 2006 at 09:49:33PM -0500, Sam Fourman Jr. wrote: Thank you all for the input this is GREAT I have always liked Procedural languages as well as compiled languages, I tend not to like runtimes. One of the Major reasons for FINALLY ditching Windows, cold turkey and switching to

Re: OpenBSD AJAX

2006-10-25 Thread Joachim Schipper
On Wed, Oct 25, 2006 at 02:21:55PM +0200, ropers wrote: On 25/10/06, bofh [EMAIL PROTECTED] wrote: On 10/24/06, ropers [EMAIL PROTECTED] wrote: You mentioned that you dislike PHP. I would be curious to learn your reasons for this. If you look back at the history of PHP, it was created

Re: OpenBSD AJAX

2006-10-25 Thread Joachim Schipper
On Wed, Oct 25, 2006 at 01:54:47PM -0400, Adam wrote: Joachim Schipper [EMAIL PROTECTED] wrote: Performance is also not bad. A properly written FastCGI program in a 'fast' language like C should outperform mod_php, but there are not many things that will Yes, there are lots of things

Re: OpenBSD AJAX

2006-10-25 Thread Joachim Schipper
On Wed, Oct 25, 2006 at 08:30:45AM -0600, Philip Guenther wrote: On 10/25/06, Joachim Schipper [EMAIL PROTECTED] wrote: ... Just a half-baked thought, but escaping any non-constant expression (i.e., actual variable, not fixed string) passed to the browser or a database would go a long way

Re: Automating updates question

2006-10-25 Thread Joachim Schipper
On Wed, Oct 25, 2006 at 07:01:59AM -0700, [EMAIL PROTECTED] wrote: On Tue, Oct 24, 2006 at 07:26:24PM -0600, Michael Osburn wrote: While I fully realize that installing from ports is not the accepted process for anyone except for developers, I wish to start helping out in any way I can;

Re: nfs failover in openbsd

2006-10-25 Thread Joachim Schipper
On Wed, Oct 25, 2006 at 05:46:37PM +0200, Per-Erik Persson wrote: Earlier on the list there have been discussions on setting up failover solutions with carp. I think most people agree that carp does a wonderful job. However there seems to be problems with nfs servers that needs a little

Re: OpenBSD AJAX

2006-10-24 Thread Joachim Schipper
On Tue, Oct 24, 2006 at 01:30:02AM -0500, Sam Fourman Jr. wrote: Thanks for the Feedback everyone, my next question is Would it be Possible to use AJAX from a CGI made with C running from Apache that Ships w/ OpenBSD? Yes, although you'll be much happier with FastCGI. Also, consider Perl or

Re: need help in dealing with a simple thing (file permissions)

2006-10-21 Thread Joachim Schipper
On Sat, Oct 21, 2006 at 02:50:57PM +0200, LeVA wrote: Hi! I know this is a rather simple problem, but I would like to hear the advices. I'm using a piped Custom- and ErrorLog in apache, it pipes the output to cronolog (the log files are rotated per 24hour). The log files are created

Re: OpenVPN Server and nice setting on OpenBSD

2006-10-20 Thread Joachim Schipper
On Thu, Oct 19, 2006 at 11:31:59PM -0400, Bill wrote: I have had a problem with a new OpenVPN server on an OpenBSD box. I have solved the problem (I think) but was looking for some insight as to why this solved it. The problem was with the ping that happens between OpenVPN endpoints not

Re: Fast Xorg Performance

2006-10-19 Thread Joachim Schipper
On Thu, Oct 19, 2006 at 10:03:37AM +0530, Girish Venkatachalam wrote: On Wed, Oct 18, 2006 at 08:42:45PM +0200, Joachim Schipper wrote: I'm not sure about KDE, but rxvt loads pretty fast (10ms?) on ion. And this is not exactly new hardware (neomagic driver, Thinkpad 390X). aterm takes .5

Re: Vulnerability and Patch Information

2006-10-18 Thread Joachim Schipper
On Wed, Oct 18, 2006 at 05:09:12PM +0200, ropers wrote: On 18/10/06, stuartv [EMAIL PROTECTED] wrote: I have one firewall that is on an external audit/scan list that the people who actually do our audits doesn't believe really even exists because they can't even find it. Basically it has

Re: Fast Xorg Performance

2006-10-18 Thread Joachim Schipper
On Wed, Oct 18, 2006 at 09:55:10AM -0700, Karsten McMinn wrote: On 10/18/06, Jeff Quast [EMAIL PROTECTED] wrote: Documentation is key! http://dri.freedesktop.org/wiki/CategoryHardwareChipset http://www.xfree86.org/current/manindex4.html It took me about 30 minutes to find a $30 ati card

Re: Swedish speakers -- OpenBSD and IBM Tivoli TSM BA

2006-10-15 Thread Joachim Schipper
On Fri, Oct 13, 2006 at 06:16:52PM +0200, ropers wrote: On 13/10/06, Joachim Schipper [EMAIL PROTECTED] wrote: On Thu, Oct 12, 2006 at 06:11:16PM +0200, ropers wrote: I find myself having to use the Tivoli Storage Manager Backup/Archive client (dsmc). As much as I would prefer a free

Re: High availability software for OpenBSD?

2006-10-13 Thread Joachim Schipper
On Thu, Oct 12, 2006 at 02:53:09PM -0400, Peter wrote: I am looking for something comparable to Ultra Monkey (Linux) that runs on OpenBSD. Anyone? Depends on what you want to do. ifstated(8), pfsync(4) and carp(4) can do quite a few useful things, but not everything. Then again, neither can

Re: layer-7 pf loadbalancing

2006-10-13 Thread Joachim Schipper
On Thu, Oct 12, 2006 at 04:13:42PM -0700, Alexander Lind wrote: bumer. anyone know of any alternatives that can run on openbsd? cd /usr/ports make search key=proxy Or was that not what you required? Some other search keys give other software that can perform the same function. A more specific

Re: Swedish speakers -- OpenBSD and IBM Tivoli TSM BA

2006-10-13 Thread Joachim Schipper
On Thu, Oct 12, 2006 at 06:11:16PM +0200, ropers wrote: Hi, Does anybody out there have a working knowledge of Swedish? I find myself having to use the Tivoli Storage Manager Backup/Archive client (dsmc). As much as I would prefer a free solution, this is the only offsite backup

Re: Getting custom code to execute on an invalid password

2006-10-13 Thread Joachim Schipper
On Thu, Oct 12, 2006 at 03:37:38PM -0700, [EMAIL PROTECTED] wrote: Hello everyone. My question is simple: For each user on my system I have a list of passwords which they should never, ever enter. If someone enters a password which is on this list I know that their passwords have been

Re: c.93.3 not found when installing packages

2006-10-13 Thread Joachim Schipper
On Fri, Oct 13, 2006 at 02:24:40PM +0200, Bernd Schoeller wrote: Hello everybody, I am trying to do a fresh install using a current snapshot (tried it with the snapshot from yesterday and today) on i386. I am downloading from 'mirror.switch.ch' and 'ftp.de.openbsd.org'. After

Re: c.93.3 not found when installing packages

2006-10-13 Thread Joachim Schipper
On Fri, Oct 13, 2006 at 10:56:07AM -0400, Martin Gignac wrote: On 10/13/06, Bernd Schoeller [EMAIL PROTECTED] wrote: Do I have to switch to using ports? Any other fix for the problem? A quick fix that worked for me (don't know if it's bad to do this or not, though): # cd /usr/lib # ln

Re: Letter to OLPC

2006-10-08 Thread Joachim Schipper
On Sun, Oct 08, 2006 at 02:22:35PM +0200, Ingo Schwarze wrote: Theo de Raadt wrote on Sat, Oct 07, 2006 at 02:55:22PM -0600: Adriaan [EMAIL PROTECTED] wrote: See Jim Gettys defense at http://www.gettysfamily.org/wordpress/?p=27 [...] You can't say anything bad about the children, can

Re: FTP Account Lockout

2006-10-07 Thread Joachim Schipper
On Fri, Oct 06, 2006 at 12:56:43PM -0400, stuartv wrote: Hello list, The company I work for is required to get PCI (Payment Card something-or-other) certified in order to keep doing some of the things that we are doing with credit card payments. When I started working here it was an all

Re: CARP Backup Interfaces

2006-10-04 Thread Joachim Schipper
On Tue, Oct 03, 2006 at 07:30:38PM -0400, Nick Davey wrote: Hi, I have two firewalls running CARP and pfsync for high availability. The physical interfaces do not have IP addresses, only the CARP interface do. The problem is is that the backup CARP interface still needs to be able to

Re: NFS mount in /etc/fstab

2006-10-04 Thread Joachim Schipper
On Tue, Oct 03, 2006 at 09:19:52PM -0400, stan wrote: Can I use the bg, and soft options in a /etc/fstab entry that references a NFS mounted filesystem? The idea is to allow the machine to boot, even if the machine NFS server machine is unavailable. Yes, although it is not documented (other

Re: NIS server

2006-10-04 Thread Joachim Schipper
On Tue, Oct 03, 2006 at 07:02:30PM +0200, Rogier Krieger wrote: On 10/3/06, Joachim Schipper [EMAIL PROTECTED] wrote: [...] note that at least OpenBSD can authenticate directly against LDAP, using sysutils/login_ldap. Personally, I suspect the OP has a specific interest in implementing NIS

Re: NIS server

2006-10-03 Thread Joachim Schipper
On Tue, Oct 03, 2006 at 01:30:11AM -0300, Gustavo Rios wrote: I wonder if some here knows a NIS server (ypserv) that uses openldap as information source! If so, please, let me know. I am desperately searching for a nis server that uses ldap. This may not be useful, but note that at least

Re: Deploying isakmp/vpn with PKI

2006-10-03 Thread Joachim Schipper
On Tue, Oct 03, 2006 at 12:51:47PM +0200, carlopmart wrote: Hi all, i need to deploy a PKI Linux based infraestructure, including authentication (single sign on) for several Linux and OpenBSD servers. We have two openbsd firewall clusters (3.9) with vpn using isakmpd. Is it possible to

Re: CDROM mounts always on 2nd attempt

2006-10-03 Thread Joachim Schipper
On Tue, Oct 03, 2006 at 08:31:55PM +0200, Karel Kulhavy wrote: When I mount /dev/cd0c I always get this in dmesg: cd0(atapiscsi0:0:0): Check Condition (error 0x70) on opcode 0x0 SENSE KEY: Not Ready ASC/ASCQ: Logical Unit Is in Process Of Becoming Ready And this in application:

Re: dmesg timestamps

2006-10-03 Thread Joachim Schipper
On Tue, Oct 03, 2006 at 08:40:38PM +0200, Karel Kulhavy wrote: Is it possible to turn on some kind of timestamps or sequence numbers in dmesg? When I ocassionally get an error message (uncorrectable error on CD), I would like to know if I got one recently or not. Difficult to distinguish 1000

Re: Change ISAKMP udp port?

2006-10-02 Thread Joachim Schipper
On Mon, Oct 02, 2006 at 03:28:15PM +0800, Lars Hansson wrote: On Friday 29 September 2006 17:01, Joachim Schipper wrote: There also are some IP-over-DNS hacks available; take a look at them, if you want even more stealth. Also, IPsec might slip by some misconfigured firewalls. isakmpd

Re: overwritten file recovery - how ?

2006-10-02 Thread Joachim Schipper
On Mon, Oct 02, 2006 at 08:56:57AM -0400, Jeff Quast wrote: On 10/1/06, Joachim Schipper [EMAIL PROTECTED] wrote: On Sat, Sep 30, 2006 at 07:24:43PM +0200, Bambero wrote: Hello I need to recovery overwritten txt file. Ex. echo my data testfile.txt echo testfile.txt I have

Re: Wireless Auth

2006-10-01 Thread Joachim Schipper
On Sat, Sep 30, 2006 at 03:42:38AM -0500, Sam Fourman Jr. wrote: I am looking for ways to Authenticate Wireless users(Windows Xp , Mac OSX) that connect to a wireless AP (several using OpenBSD's new Roaming in hostapd) running OpenBSD 4.0 the way i understand it if I use authpf that requires

Re: overwritten file recovery - how ?

2006-10-01 Thread Joachim Schipper
On Sat, Sep 30, 2006 at 07:24:43PM +0200, Bambero wrote: Hello I need to recovery overwritten txt file. Ex. echo my data testfile.txt echo testfile.txt I have partition image file creted using dd. Is it possible to dump it and search using grep for example ? Is it possible to

Re: kern.watchdog.period halts the server

2006-10-01 Thread Joachim Schipper
On Sat, Sep 30, 2006 at 07:11:29PM -0300, Fernando Braga wrote: Hi, I'm having a bit of trouble using kern.watchdog.period. Every time I set it, my DELL 1850 turns off. In two different SSH sessions, I did the following: cefeu:2642:$ sysctl kern.watchdog kern.watchdog.period=0

Re: [OT] Raw socket programming

2006-10-01 Thread Joachim Schipper
On Sun, Oct 01, 2006 at 04:25:42PM +0400, Bruno Carnazzi wrote: Hi misc, For my own education, I'm writing in C a PPTP proxy for pf-driven NAT-boxes, based on libevent. A PPTP session is made of a TCP control connection and a GRE tunnel. I've got no trouble handling the control connection,

Re: Open source support for Intel wifi chipsets

2006-10-01 Thread Joachim Schipper
On Sun, Oct 01, 2006 at 03:17:39PM -0400, marrandy wrote: On Sunday 01 October 2006 12:14, Theo de Raadt wrote: I believe that [EMAIL PROTECTED] is another person who is involved. These people will try to tell you that there are parts of the firmware that Intel does not own. They'll

Re: Change ISAKMP udp port?

2006-09-29 Thread Joachim Schipper
On Thu, Sep 28, 2006 at 02:28:54PM -0700, Joe wrote: Joe wrote: Is it possible to configure ISAKMP (500/udp) to listen on another port, such as 53/udp? I want to do this because some wireless networks permit outbound port 53/udp and nothing else... Nevermind. I just realized this won't

Re: Serial ATA raid

2006-09-29 Thread Joachim Schipper
On Fri, Sep 29, 2006 at 03:09:50PM +0200, Francois Slabbert wrote: hi misc, i'm looking to purchase a sata raid controller, and have shortlisted it down to two models for no particular reason other than the controllers being supported by openbsd, being 'afordable',compatible with the

Re: ulimit -a on different terminals

2006-09-28 Thread Joachim Schipper
On Thu, Sep 28, 2006 at 03:09:54AM -0300, Gustavo Rios wrote: Dear folks, after reading setrlimit(2) instructions for RLIMIT_NPROC, i started two terminals into my desktop. In one of them, i issued ulimit -p 30. Since, the number of process per user is global, i was expecting the output

Re: Secure Apache Webserver

2006-09-28 Thread Joachim Schipper
On Thu, Sep 28, 2006 at 10:55:30AM +0200, Aiko Barz wrote: Hi *, I use OpenBSD+Apache+Chroot for my webservices. The users can access their vhosts by using scponly, which is chrooted into /var/www as well. /htdocs/www.example.net belongs to theuser:www and has the permissions rwxr-x---.

Re: com0 at boot prompt input issues

2006-09-28 Thread Joachim Schipper
On Wed, Sep 27, 2006 at 12:29:19AM -0400, William Graeber wrote: I have just installed OpenBSD 3.9 on a net4511. My root partition is read-only, and I have a tarball unzipped into an mfs partition for /var upon boot. /dev/ttyp00-01 and /dev/ptyp00-01 are symlinked to /var/dev so that they are

Re: Secure Apache Webserver

2006-09-28 Thread Joachim Schipper
On Thu, Sep 28, 2006 at 12:52:41PM +0200, Joachim Schipper wrote: On Thu, Sep 28, 2006 at 10:55:30AM +0200, Aiko Barz wrote: Hi *, I use OpenBSD+Apache+Chroot for my webservices. The users can access their vhosts by using scponly, which is chrooted into /var/www as well. /htdocs

Re: Xen?

2006-09-28 Thread Joachim Schipper
On Thu, Sep 28, 2006 at 11:07:33AM -0500, James Blasius wrote: I listened to Christoph Egger's podcast on openbsd + xen. Yowza. Is this a 4.1 timeframe item? I haven't seen code for Xen integration come by at source-changes, so I presume so. Host support may be further off.

Re: Hacking a mail server

2006-09-26 Thread Joachim Schipper
On Tue, Sep 26, 2006 at 04:33:53PM -0700, Carlos A. Garcia G. wrote: knitti escribis: [I reordered the text, so your answer is below my question, I think this is more readable] Seconded. On 9/26/06, Carlos A. Garcia G. [EMAIL PROTECTED] wrote: knitti escribis: On 9/26/06, Carlos A.

Re: Is it possible to install old packages on new release

2006-09-25 Thread Joachim Schipper
On Mon, Sep 25, 2006 at 01:17:45AM -0400, Mike Dalgity wrote: So what does one do if they need a port/package that is available for a previous release but not the latest release? For example, Mysql 4.0 is a package for OBSD 3.8 and I'd like to install Mysql 4.x on OBSD 3.9 or soon to be 4.0

Re: Gimp segfaults during startup

2006-09-24 Thread Joachim Schipper
On Sun, Sep 24, 2006 at 09:28:04AM +0200, Karel Kulhavy wrote: On Sun, Sep 10, 2006 at 05:50:32PM +0200, Paul de Weerd wrote: On Sun, Sep 10, 2006 at 05:09:07PM +0200, Karel Kulhavy wrote: | On Sat, Sep 02, 2006 at 11:38:13AM +0200, Karel Kulhavy wrote: | | GIMP 2.2.10 shows the

Re: ipsec.conf and road warriors

2006-09-24 Thread Joachim Schipper
On Sun, Sep 24, 2006 at 07:10:14PM +0200, Thomas Schoeller wrote: hello all, is it possible with ipsec.conf and ipsecctl in 3.9 to listen for a road warrior with dynamic address. or should i wait for 4.0 where i can specify a fqdn as peer? is it maybe in 4.0 possible to listen for any peer?

Re: couple of scp questions

2006-09-23 Thread Joachim Schipper
On Sat, Sep 23, 2006 at 12:27:21PM +0200, frantisek holop wrote: hi there, i have just moved a couple of big files using scp from my server to my notebook. i left it going all night and when i came back i had a no space left on device. so i made some more space and before restarting the

Re: Support for integrity only ESP and IKE in ipsecctl?

2006-09-22 Thread Joachim Schipper
On Fri, Sep 22, 2006 at 06:08:03PM +0200, Martin Hedenfalk wrote: Hi misc, We've been trying to get integrity only ESP (ie, null encryption) to work using ipsecctl on an OpenBSD 4.0 snapshot. The man page mentions null encryption only in conjunction with setting up manual SAs. In the

Re: obsd installation on a live file system

2006-09-21 Thread Joachim Schipper
On Wed, Sep 20, 2006 at 11:04:13PM -0300, Gustavo Rios wrote: Hi folks, i am preparing a boot server running openbsd for openbsd diskless clients. I am in doubt on how to fake a installation procedure on a directory tree, for instance: /export/client-[0-a]. I would like to install openbsd

Re: kernel rebuild - and rebuild userland?

2006-09-21 Thread Joachim Schipper
On Thu, Sep 21, 2006 at 09:55:13AM +0200, Francois Visconte wrote: Hello, I think the real question is : is there allways a backward compatibility of system calls accross patching ? ... I thinks this is mostly de case Jason Dixon wrote: On Sep 20, 2006, at 8:10 PM, Patsy wrote: On

Re: Some recommendations on file locations sought

2006-09-21 Thread Joachim Schipper
On Thu, Sep 21, 2006 at 11:51:17AM -0700, John Draper wrote: Hi, This finally works... So ignore that last message I first went to conf directory, created an auth directory, and I'm putting it in there. htpasswd -c /var/www/conf/auth/passwd edp # Here is where I set the

Re: trying to build mod_python on OpenBSD

2006-09-20 Thread Joachim Schipper
On Tue, Sep 19, 2006 at 04:49:07PM -0600, edgar mortiz wrote: trying to build mod_python on OpenBSD 3.7 with the following configuration. Python 2.4 (source build) --disabled-share Apache 2.0.59 --enable-so mod_python 3.2.10 --with-apxs I was able to get as far as the make part on

Re: FTP-Proxy

2006-09-20 Thread Joachim Schipper
On Wed, Sep 20, 2006 at 09:22:51AM +0100, Alan Smith wrote: * or a machine with dual nics - one inside and one outside the firewall. * *Rod Dorman wrote: *This is effectively getting rid of the PIX! * *If its got both an inside and outside interface it can be configured as *a gateway such

Re: Help with chroot

2006-09-20 Thread Joachim Schipper
On Tue, Sep 19, 2006 at 09:59:38PM -0400, Kim Mackey wrote: OK, I finally have it working at about 99%. Maybe not quite that much depending on how you look at it. the final problem I am having is probably related to how I set up my network when I installed OpenBSD 3.9 In previous

Re: USB hard drives

2006-09-20 Thread Joachim Schipper
On Wed, Sep 20, 2006 at 12:26:48PM -0500, Rafael Morales wrote: I use OpenBSD 3.8 on a Powerbook G4, and when I connect my USB external hard drive, this is my output: Sep 20 12:10:41 Apocalypsis /bsd: umass0 at uhub0 port 1 configuration 1 interface 0 Sep 20 12:10:43 Apocalypsis /bsd: Sep

Re: spews1- i/o error

2006-09-19 Thread Joachim Schipper
On Mon, Sep 18, 2006 at 03:00:57PM -0700, Bryan Irvine wrote: On 9/18/06, Joachim Schipper [EMAIL PROTECTED] wrote: On Mon, Sep 18, 2006 at 10:20:55AM -0400, Frank Bax wrote: Since 4:00 am EST ... spamd-setup: Could not add blacklist spews1: Input/output error ISTR that spews1

Re: ssh filesystem question

2006-09-19 Thread Joachim Schipper
On Tue, Sep 19, 2006 at 11:25:31AM +0200, Didier Wiroth wrote: Hello, I came accross this recently (ssh filesystem): http://fuse.sourceforge.net/sshfs.html I was wondering if there are any plans to implement this on openbsd in future releases? I don't think so, really.

Re: PF Rule

2006-09-19 Thread Joachim Schipper
On Mon, Sep 18, 2006 at 09:05:53PM -0400, Monah Baki wrote: Hi all, Is there a way to write a single rule to cover these 2 rules: no nat on $ext_if inet proto tcp from 192.168.3.204 to any nat on $ext_if from 192.168.3.0/24 to any - $ext_if Thanks Use a table?

Re: pf.conf question?

2006-09-19 Thread Joachim Schipper
On Tue, Sep 19, 2006 at 06:49:05PM +0800, Jay Jesus Amorin wrote: hi, good day, how do i do an alternate sets of route-to rules for the internal interface loaded in an anchor? btw im doing a failover between two firewalls, |--| |-| |

Re: Getting the latest and greatest X running

2006-09-19 Thread Joachim Schipper
On Tue, Sep 19, 2006 at 10:27:59AM +0530, Girish Venkatachalam wrote: Friends, I have connected two VGA cards and here is the scanpci -vv output. I am running OpenBSD 3.9. pci bus 0x cardnum 0x0e function 0x00: vendor 0x5333 device 0x8811 S3 Inc. 86c764/765 [Trio32/64/64V+] STATUS

Re: playing flash videos

2006-09-19 Thread Joachim Schipper
On Tue, Sep 19, 2006 at 05:05:50PM +0700, riwanlky wrote: After looking for a while for multimedia firefox plugins, I am glad to hear that there is flash plugins (well, after trying to compile, without any luck to get vlc plugin for mozilla from ports) from redhat emulation. However I

Re: webbased authpf ?

2006-09-18 Thread Joachim Schipper
On Sun, Sep 17, 2006 at 08:46:40PM -0600, Chris Kuethe wrote: On 9/17/06, Lars Hansson [EMAIL PROTECTED] wrote: On Saturday 16 September 2006 03:33, Bryan Irvine wrote: Just make a table and write up some script that add to the table. Something like nocat would probably what you are

Re: webbased authpf ?

2006-09-18 Thread Joachim Schipper
On Mon, Sep 18, 2006 at 11:23:52AM -0400, Brian Shackelford wrote: Hello, I have been following this thread and am extremely interested in any solutions to the presented scenarios. We use OpenBSD to build firewall/Spam filtering boxes customized as needed by our customers. I have been

Re: spews1- i/o error

2006-09-18 Thread Joachim Schipper
On Mon, Sep 18, 2006 at 10:20:55AM -0400, Frank Bax wrote: Since 4:00 am EST ... spamd-setup: Could not add blacklist spews1: Input/output error ISTR that spews1 is no longer freely available. See the commit logs and/or the archives of this site; it has been removed from the -current

Re: Power Management on Thinkpads (T42p) under X11

2006-09-18 Thread Joachim Schipper
On Mon, Sep 18, 2006 at 08:56:32AM -0700, Subcommander l0r3zz wrote: Greetz, What do people use to do power management on their thinkpads? I've google openbsd.org and can't seem to find any tools that work on the desktop. I run Gnome and it seems that i want gnome-power, but it doesn't seem

Re: Sharing SATA NTFS disks on network

2006-09-17 Thread Joachim Schipper
On Sun, Sep 17, 2006 at 03:02:29PM -0300, Guilherme wrote: Hi misc@, I must set up 2 new SATA disks into an OpenBSD server running version 3.9. These are on NTFS file system and I must share them on a network so the users can access data. Now my question is: which application will have the

Re: webbased authpf ?

2006-09-16 Thread Joachim Schipper
On Fri, Sep 15, 2006 at 02:18:58PM -0500, Victor Camacho wrote: Jeff Quast wrote: On 9/15/06, Joachim Schipper [EMAIL PROTECTED] wrote: It would probably be best to let a daemon or cronjob outside the chroot read it; a socket or even a simple pipe in the chroot is sufficient to signal

Re: health check for members of round-robin group

2006-09-16 Thread Joachim Schipper
On Sat, Sep 16, 2006 at 08:59:27PM +0200, Markus Wernig wrote: Hi everybody! I am looking at implementing a round-robin load-balanced group of servers behind an OBSD firewall. The pf commands would run along the lines [...] table servers persist file /etc/pf.serverlist rdr on $ext_if

Re: Necessary Files?

2006-09-15 Thread Joachim Schipper
On Thu, Sep 14, 2006 at 10:46:30PM +, Ray wrote: I plan to configure a device to boot from a CF card, but to reduce writes to the CF, run /tmp /var and /dev from a memory (mfs) drive. When preping the device, I copy the contents of the /var directory to another directory path. When

Re: webbased authpf ?

2006-09-15 Thread Joachim Schipper
On Fri, Sep 15, 2006 at 10:27:29AM +0200, Frans Haarman wrote: Is there someting which does Authpf like things, only via a website ? So the users authenticates on the website, then the firewall rules are loaded! Another idea I have is to simply have users authenticate, then they can

Re: webbased authpf ?

2006-09-15 Thread Joachim Schipper
On Fri, Sep 15, 2006 at 09:18:09AM -0500, Jacob Yocom-Piatt wrote: Original message Date: Fri, 15 Sep 2006 14:21:22 +0200 From: viq [EMAIL PROTECTED] Subject: Re: webbased authpf ? To: misc@openbsd.org On 9/15/06, Joachim Schipper [EMAIL PROTECTED] wrote: On Fri, Sep 15

Re: Necessary Files?

2006-09-15 Thread Joachim Schipper
On Fri, Sep 15, 2006 at 09:01:12AM -0600, Chris Kuethe wrote: On 9/15/06, Joachim Schipper [EMAIL PROTECTED] wrote: Certainly, daemons chrooted in /var/empty won't be able to use syslog and there will be something wrong with cron (maybe the notification to re-read changed crontabs?). Bunk

Re: Launching the Internet

2006-09-15 Thread Joachim Schipper
On Fri, Sep 15, 2006 at 03:32:58PM -0700, dilbert wrote: My question is simple- I'm a relative newbie at BSD so please bear with me. I'm trying to launch the internet; so I open a terminal and go percent sign 'Internet' at the prompt ie: %internet and it doesn't work. What gives??!!

Re: NAT Question

2006-09-14 Thread Joachim Schipper
On Wed, Sep 13, 2006 at 10:45:18AM -0400, Monah Baki wrote: Hi all, Yesterday I just received 8 public IP addresses from my ISP. I'm running ppp on my OpenBSD 3.9 server (DSL). My xl0 has the public IP address (67.100.x.x) provided to me by my ISP, my xl1 interface is my 192.168.3.1 Once I

Re: /bsd asking for nonexistent nfs server?

2006-09-14 Thread Joachim Schipper
On Wed, Sep 13, 2006 at 07:10:27PM -0500, Doug Carter wrote: On Sep 12, 2006, at 3:49 AM, Joachim Schipper wrote: On Mon, Sep 11, 2006 at 06:08:22PM -0500, Doug Carter wrote: I really doubt that this is a system problem; I just can't figure out what stupid thing I have done. Using: OpenBSD

Re: Secure file storage.

2006-09-14 Thread Joachim Schipper
On Thu, Sep 14, 2006 at 03:40:59PM +0200, viq wrote: Hmm, I found something that could be interesting... Apparently QEMU images support encryption when the image is in qcow format. From the man page it seems it's 128 bit AES encryption based on password. So, install some very basic system on

Re: /bsd asking for nonexistent nfs server?

2006-09-12 Thread Joachim Schipper
On Mon, Sep 11, 2006 at 06:08:22PM -0500, Doug Carter wrote: I really doubt that this is a system problem; I just can't figure out what stupid thing I have done. Using: OpenBSD 3.9 (GENERIC) #617: Thu Mar 2 02:26:48 MST 2006 on a Dell 1850, RAID 1 (rest of dmesg below). One entry

Re: Feedback wanted on gethttpd graylisting ideas included

2006-09-11 Thread Joachim Schipper
On Sat, Sep 09, 2006 at 08:03:18PM -0400, Daniel Ouellet wrote: I am working on this idea and put into place a series of defense that are proved effective so far, but obviously not as practical and speedy as spamd is at the moment. It's a variable of scripts here and there based on multiple

Re: openBSD 3.9 on hp/comapq proliant 8000

2006-09-11 Thread Joachim Schipper
On Mon, Sep 11, 2006 at 10:50:04PM +0200, Czes??aw Liebert wrote: Mark Kettenis napisaE(a): Hi Czeslaw, Can you try the attached patch? You'll have to do a make in sys/dev/pci after you've applied the patch. Not really, because i cannot get on with the system as it does not see my

Re: XEN

2006-09-09 Thread Joachim Schipper
On Sat, Sep 09, 2006 at 03:00:44PM +0200, Wijnand Wiersma wrote: 2006/9/8, Will Maier [EMAIL PROTECTED]: On Fri, Sep 08, 2006 at 11:08:49PM +0200, openbsd misc wrote: I wasn't able to figure out if it is possible to run openbsd as xen guest system. Does anyone know? Short answer: not yet,

Re: preferred hardware platform

2006-09-09 Thread Joachim Schipper
On Sat, Sep 09, 2006 at 05:33:56PM +0200, Martin Schr?der wrote: 2006/9/9, Benjamin Collins [EMAIL PROTECTED]: mix). In a development environment in which one might have multiple working copies of a large repository (such as OpenBSD's src), all those backups add up, and fast. Not if you use

Re: how does one manage to fill a TB of data

2006-09-09 Thread Joachim Schipper
On Sat, Sep 09, 2006 at 02:33:13PM -0400, Peter Blair wrote: On 9/9/06, Peter Fraser [EMAIL PROTECTED] wrote: On 8/9/06, Pedro la peu wrote: Joachim Schipper wrote: And seriously, how does one manage to fill a TB of data? /rant DVB. Multi system backups to disk Database backups

Re: Simple question

2006-09-09 Thread Joachim Schipper
On Sat, Sep 09, 2006 at 01:25:35PM -0300, Guilherme wrote: I wonder if there is a tool that focus on network bandwidth monitoring such as NTOP, that runs on OpenBSD. I've tried to get NTOP running on my OpenBSD 3.9 server but no further success - I know there is an old version of NTOP on ports

Re: can www execute sendmail -t?

2006-09-09 Thread Joachim Schipper
On Sat, Sep 09, 2006 at 12:30:27PM -0500, Matthew R. Dempsky wrote: On Sat, Sep 09, 2006 at 09:50:16AM -0400, Woodchuck wrote: FILE *mail; char sendmail[512]; sprintf(sendmail, %s %s, SENDMAIL_PATH, RECIPIENT); use snprintf here, this is exactly the sort of code that

Re: broadcom

2006-09-09 Thread Joachim Schipper
On Sat, Sep 09, 2006 at 03:10:14PM -0400, Daniel Ouellet wrote: Tom Bombadil wrote: One funny story about redundancy in general: we run raidframe to mirror the 2 disks in the system... And like I said both firewalls were crashing together... After the crash our allegedly redundant firewalls

Re: OpenBSD Wireless Router

2006-09-08 Thread Joachim Schipper
On Fri, Sep 08, 2006 at 09:39:49PM +1000, John Tate wrote: On 9/8/06, openbsd misc [EMAIL PROTECTED] wrote: On Fri, Sep 08, 2006 at 05:00:16AM +1000, John Tate wrote: I am constantly disappointed with the lack of freedom out-of-the-box wireless routers provide. I am interested in a

Re: preferred hardware platform

2006-09-08 Thread Joachim Schipper
On Fri, Sep 08, 2006 at 04:00:20PM +0200, Francois Slabbert wrote: Hi misc, I'm looking to build soho development and storage server, what would be the most stable current hardware configuration. I was thinking of along the lines of: * Intel 945G motherboard * Celeron CPU * 512MB of

Re: anyone have a recipe for shaping torrent traffic with pf + snort ?

2006-09-08 Thread Joachim Schipper
On Fri, Sep 08, 2006 at 11:12:46AM -0400, Andrew Atrens wrote: Hey Folks, Looking for a simple way to tag bittorent connections based on packet content so that I can shape them with pf/altq... Heard it can be done with a combination of pf and snort .. googled some old references to a

<    2   3   4   5   6   7   8   9   10   11   >