Re: Upgrading questions

2006-07-04 Thread Joachim Schipper
On Tue, Jul 04, 2006 at 12:34:53AM -0700, Rob Baldassano wrote: I have been running OpenBSD 3.6 since the day it came out, and am now in need up going to 3.9 The question is: What upgrade issues have folks run into? I'm running it on a DELL desktop. BTW, some of the reasons I want to

Re: kernel settings for pf default block

2006-07-04 Thread Joachim Schipper
On Tue, Jul 04, 2006 at 12:12:45PM -0700, c.s.r.c.murthy wrote: Hello Joachim, Sorry I could not get on internet the answer from Alexey. Can you please give the URL for this. Also please confirm that there is no kernel parameter to make pf block everything by default. This has been

Re: DDOS attack

2006-07-04 Thread Joachim Schipper
On Tue, Jul 04, 2006 at 08:08:39PM +0700, sonjaya wrote: Dear all How to blok ddos/Flooding/ssh brute attack with pf . Since there is no context: 'block all' works pretty well. Joachim

Re: Question related to automaticly encrypted /tmp /vat/tmp (like swap..?)

2006-07-04 Thread Joachim Schipper
On Tue, Jul 04, 2006 at 04:14:51PM +0200, [EMAIL PROTECTED] wrote: Some days ago I read a question related to encrypting a partition. I just know that swap gets encrypted automaticly. Wouldn`t it be possible to encrypt also /tmp and /var/tmp also automaticly with the same mechanism wich is

Re: News From HiFn

2006-07-04 Thread Joachim Schipper
On Tue, Jul 04, 2006 at 12:16:45PM -0400, Nick Guenther wrote: On 7/4/06, Peter Blair [EMAIL PROTECTED] wrote: On 6/29/06, J.C. Roberts [EMAIL PROTECTED] wrote: I just got a call this afternoon from Tom Moore to let me know they've set up an anon FTP site (no registration) with their

Re: File Server Advice Required

2006-07-04 Thread Joachim Schipper
On Tue, Jul 04, 2006 at 11:07:37AM -0700, Ginja_Ninja wrote: Hello, I was wondering if i could pick the brains of more experienced inividuals to provide me with a more suited solution. I am a total beginner at this so please bear with me. I wish to setup a file server to sit on my networ

Re: starting Apache in SSL mode

2006-07-03 Thread Joachim Schipper
On Sun, Jul 02, 2006 at 10:32:12PM +0200, FTP wrote: On Tue, Jun 27, 2006 at 05:03:52PM +0200, FTP wrote: when I try to access the site via lynx I do get an SSL error message moaning that I have a self-signed cert. After accepting this, the page gets dispalyed. So it looks like the problem

Re: ftp-proxy does not work in secure level 2

2006-07-03 Thread Joachim Schipper
On Mon, Jul 03, 2006 at 05:25:31PM -0700, c.s.r.c.murthy wrote: Hi, We have configured a firewall with pf on openbsd-3.9. It is found that ftp-proxy is unable to operate when system is put in secure level 2. This is due to the fact that ftp-proxy can't add/delete rules in pf in secure

Re: kernel settings for pf default block

2006-07-03 Thread Joachim Schipper
On Mon, Jul 03, 2006 at 05:30:44PM -0700, c.s.r.c.murthy wrote: Hi, This seems to be widely discussed problem in openbsd pf. There is no kernel parameter that makes the pf to block all packets by default. I have searched on the internet and found some discussion taken place in 2005

Re: Encrypting files

2006-07-02 Thread Joachim Schipper
On Sun, Jul 02, 2006 at 02:14:59AM +0200, Rico Secada wrote: Hi I have been thinking about encrypting some private files on my laptop, in case it gets stolen. I have no prior experience in this field. I have been thinking about using mcrypt with blowfish, but is this a good way to go

Re: Encrypting files

2006-07-02 Thread Joachim Schipper
On Sun, Jul 02, 2006 at 12:00:34PM +0200, Sigfred H?versen wrote: Joachim Schipper wrote: On Sun, Jul 02, 2006 at 02:14:59AM +0200, Rico Secada wrote: Hi I have been thinking about encrypting some private files on my laptop, in case it gets stolen. I have no prior experience

Re: Encrypting files

2006-07-02 Thread Joachim Schipper
On Sun, Jul 02, 2006 at 10:57:42AM -0600, Chris Kuethe wrote: Bear in mind that if you're serious about keeping plaintext away from people who you don't want to see it, this could get quite tricky. What happens if an application generates temporary files? What happens if an application

Re: Encrypting files

2006-07-02 Thread Joachim Schipper
On Sun, Jul 02, 2006 at 02:56:03PM -0400, Nick Guenther wrote: On 7/2/06, Chris Kuethe [EMAIL PROTECTED] wrote: Bear in mind that if you're serious about keeping plaintext away from people who you don't want to see it, this could get quite tricky. And that's not even taking into account

Re: Encrypting files

2006-07-02 Thread Joachim Schipper
On Sun, Jul 02, 2006 at 09:34:50PM +0200, Peter Philipp wrote: On Sun, Jul 02, 2006 at 02:56:03PM -0400, Nick Guenther wrote: I have some questions though: How can you make a keylogger on UNIX? I thought that UNIX segmented it's memory spaces, unlike Windows which has the problem of a

Re: Encrypting files

2006-07-02 Thread Joachim Schipper
On Sun, Jul 02, 2006 at 03:59:41PM -0400, Nick Guenther wrote: On 7/2/06, Peter Philipp [EMAIL PROTECTED] wrote: On Sun, Jul 02, 2006 at 02:56:03PM -0400, Nick Guenther wrote: How can you make a keylogger on UNIX? I think this was meant. (...) Ah, okay, thank you! I see a lot go across on

Re: Boost OpenBSD security - Zophie for 3.9

2006-07-02 Thread Joachim Schipper
On Sun, Jul 02, 2006 at 12:20:49PM -0700, Greg Thomas wrote: On 7/2/06, Tobias Ulmer [EMAIL PROTECTED] wrote: On Sun, Jul 02, 2006 at 03:13:59PM +0200, Tomasz Zielinski wrote: Hello, Zophie is patch that contains new security features for OpenBSD 3.9. BSD license. I have not tested it

Re: News From HiFn

2006-07-01 Thread Joachim Schipper
On Fri, Jun 30, 2006 at 02:27:53PM -0400, Nick Guenther wrote: On 6/30/06, Breen Ouellette [EMAIL PROTECTED] wrote: J.C. Roberts wrote: This should take care of any of the long standing issues OpenBSD has had with the HiFn's procedures for releasing documentation. Someone who participates in

Re: Partitions

2006-07-01 Thread Joachim Schipper
On Sat, Jul 01, 2006 at 05:32:27PM +0100, Stefan Olsson wrote: From: Lars Hansson [EMAIL PROTECTED] On Friday 30 June 2006 20:45, Craig Skinner wrote: I always symlink /var/tmp to my /tmp partition and mount /tmp with: nodev,noexec,nosuid,noatime,async - as it gets wiped at boot anyway.

Re: Mixing queues in pf

2006-06-30 Thread Joachim Schipper
On Thu, Jun 29, 2006 at 05:26:30PM -0700, Lawrence Horvath wrote: Is it possible to mix queue types with pf, for instance all http traffic is sent to a hfsc queue while all ssh traffic is sent to a priq queue, or could you have a master priq queue and child cbq queues under it? thanks All

Re: Recommendation for RAID-Array

2006-06-29 Thread Joachim Schipper
On Thu, Jun 29, 2006 at 11:24:25AM +0200, [EMAIL PROTECTED] wrote: Hello list! I'm looking into buying hardware for a RAID5. The system I have spare is an Athlon XP 2500, 1.5G memory, PCI-architecture, one fxp and one em network cards. The system will be used for backing up my personal

Re: Open BSD commands

2006-06-29 Thread Joachim Schipper
On Thu, Jun 29, 2006 at 08:19:32AM -0600, Adam Douglas wrote: Hi. When I try doing sysctl on hw.vendor and hw.product I receive a message of sysctl: second level name vendor in hw.vendor is invalid and sysctl: second level name product in hw.product is invalid. Does this mean syctl is unable

Re: Recommendation for RAID-Array

2006-06-29 Thread Joachim Schipper
On Thu, Jun 29, 2006 at 07:39:16PM +0200, Falk Husemann wrote: Hi again! I'll be buying four SATA disks, three for a RAID5 using RAIDframe and one as spare (put in my closet). It'll run via two SATA controllers. I'll stick with the cheapo stuff, as Stuart suggested and add some 2gig

Re: gcc support to stack-smashing attacks protection

2006-06-29 Thread Joachim Schipper
On Thu, Jun 29, 2006 at 04:48:24PM -0300, Jo?o Salvatti wrote: Hi all... I'd like to know if OpenBSD's gcc build binary files with built-in stack-smashing attacks protection. As Theo pointed out, yes. Be aware that there are still plenty of problems that can occur with less-than-perfectly

Re: NFSd problem

2006-06-29 Thread Joachim Schipper
On Thu, Jun 29, 2006 at 10:44:51PM +0200, Rico Secada wrote: Hi I am having problems with one of our NFS servers at our datacenter. I have just set it up. I have edited /etc/rc.conf and changes the portmap and nfs_server to YES. I have created the /var/db/mountdtab file. I have

Re: Partitions

2006-06-29 Thread Joachim Schipper
On Thu, Jun 29, 2006 at 02:00:17PM -0700, John Brahy wrote: At first I didn't understand the reason for all the partitions ( http://archives.neohapsis.com/archives/openbsd/2001-01/1654.html) now I can't have enough partitions In my official OpenBSD CD sleeve it says to create these

Re: no raid reconstruction with autoconfigured sets

2006-06-29 Thread Joachim Schipper
On Thu, Jun 29, 2006 at 03:16:26PM -0600, Greg Oster wrote: Walter Haidinger writes: First of all: Thanks for replying to an issue with a non-generic kernel! I really appreciate that! That it was a non-generic kernel didn't even cross my mind... it was an issue w/ RAIDframe, and that's

Re: sasync questions

2006-06-28 Thread Joachim Schipper
On Tue, Jun 27, 2006 at 04:15:58PM -0300, James Mackinnon wrote: Hey all I'm here setting up a nice little setup with 2 3.9 OBSD boxes using pfsync and it works great. I'm now at the point to create tunnels to other systems which need to use sasync but not finding alot of documentation

Re: Where to start studying OpenBSD networking code

2006-06-28 Thread Joachim Schipper
On Wed, Jun 28, 2006 at 09:10:54AM -0700, Scott Francis wrote: On 6/28/06, joakinen [EMAIL PROTECTED] wrote: Greetings to all, I'm a programmer and network administrator and want to study the code of OpenBSD related to TCP/IP Ethernet to understand networking from inside and also to see if

Re: Dump question...

2006-06-27 Thread Joachim Schipper
On Mon, Jun 26, 2006 at 03:56:53PM -0600, Jeff Ross wrote: Can someone please point me in the right direction (with a clue by four) on how to do this? (from the dump manpage) If dump receives a SIGINFO signal (see the ``status'' argument of stty(1)) whilst a backup is in progress,

Re: CARP + OpenBGPd, fail-over

2006-06-27 Thread Joachim Schipper
On Tue, Jun 27, 2006 at 10:44:20AM +0200, Thomas Bader wrote: Henning Brauer schrieb: * Thomas Bader [EMAIL PROTECTED] [2006-06-14 09:02]: In one case the fail-over does not work well: If the BGP-peering on r0a to the upstream goes down all traffic will be routed from r0a via $pfsync_if

Re: Change MTU size TCP/IP Packets for 'black hole routers' within B SD 3.8 possible ?

2006-06-27 Thread Joachim Schipper
On Tue, Jun 27, 2006 at 09:52:02AM +0200, forums wrote: Hello, I use BSD3.8 to connect some sites with a VPN tunnel (using the wonderful 'ipsecctl' ). The connections are (more or less) stable, but I have some issues making RDP (Remote Desktop from Micro$oft) connections. It tells

Re: lightweight openbsd

2006-06-25 Thread Joachim Schipper
On Sun, Jun 25, 2006 at 01:14:24AM +0300, [EMAIL PROTECTED] wrote: Thank you very much for info! It will definetely help me! Even when you install all the sets and source code, you only need a modest amount of space. Are you sure it is worth the hassle trying to trim things down

Re: netcat slow scan

2006-06-25 Thread Joachim Schipper
On Sun, Jun 25, 2006 at 05:41:42PM +1000, atstake atstake wrote: I am probing a host using OpenBSD 3.9-release's netcat. # nc -v -w 3 -z host.com 80-81 If it finds port 80 open and 81 closed it sits there in an endless loop for about 1 minute and 10 seconds and after that it gives a

Re: Yahoo messenger not working

2006-06-25 Thread Joachim Schipper
On Sun, Jun 25, 2006 at 04:13:20PM +0800, S t i n g r a y wrote: My Yahoo Messenger on Clients isnt working .. please have a look at my rules tell whats wrong ? regards intif=epic0 intad=10.0.0.0/16 extif=fxp0 extad=192.168.0.6/32 chadd=10.0.0.6/32 dmzser=10.0.0.1/32

Re: Chrooted sftp-server and /dev/null

2006-06-23 Thread Joachim Schipper
On Fri, Jun 23, 2006 at 12:00:17PM +1200, Joshua Sandbrook wrote: On Thursday 22 June 2006 22:26, Joachim Schipper wrote: A quick grep through /usr/src/usr.bin/ssh suggests that ssh (and, most likely, sftp) interacts with /dev/null quite a bit. It might be possible to change the code

Re: Configuring pppoe during installation?

2006-06-23 Thread Joachim Schipper
On Fri, Jun 23, 2006 at 02:19:54PM +0530, Siju George wrote: On 6/22/06, Theo de Raadt [EMAIL PROTECTED] wrote: | Wich device should be used for pppoe? [fxp0] : | pppoe protocol? [bla]: I can add ppooe to the floppy, but to make it fit I am going to have to remove the fxp driver. OK?

Re: Chrooted sftp-server and /dev/null

2006-06-22 Thread Joachim Schipper
On Wed, Jun 21, 2006 at 09:41:42AM +1200, Joshua Sandbrook wrote: Gidday Im writing a shell at the moment that chroots into a users home dir and then runs only the sftp-server program ( which is in the uses home dir ). Anyway, it wont work unless /dev/null is present in the chroot...

Re: SMP

2006-06-22 Thread Joachim Schipper
On Thu, Jun 22, 2006 at 08:32:00AM -0300, Gustavo Rios wrote: Dear folks, some time ago, i posted a message asking about SMP support in openbsd. I wondered what was the state-of-art algorithm for massive parallel performance and the one openbsd picked. Sorry, but i turn to this subject

Re: Doubts about OpenBSD security.

2006-06-22 Thread Joachim Schipper
On Thu, Jun 22, 2006 at 01:04:00PM +0100, Constantine A. Murenin wrote: On 21/06/06, Joco Salvatti [EMAIL PROTECTED] wrote: So the attacker could enter in single user mode, without the need for the root password, and load a malicious kernel module. The attacker cannot load a malicious

Re: Configuring pppoe during installation?

2006-06-22 Thread Joachim Schipper
On Thu, Jun 22, 2006 at 06:36:04PM +0200, Martin Schr?der wrote: 2006/6/22, Michael Lechtermann [EMAIL PROTECTED]: Why not just make it a special feature for people who buy the CD? Go ahead. Roll your own version of OpenBSD with your special installer and sell the CDs. Or, rather, don't. It

Re: independence from dependencies

2006-06-21 Thread Joachim Schipper
On Tue, Jun 20, 2006 at 05:26:51PM -0700, prad wrote: i'm running koffice which wants postgre8.1.3 but i want to use postgre8.1.4 (not sure why other than because the postgre site told me to) however, when i pkg_add we get a conflict with the postgresql-client-8.1.3 which has already

Re: release email in amavis temp

2006-06-21 Thread Joachim Schipper
On Wed, Jun 21, 2006 at 04:30:20PM +0200, Guido Tschakert wrote: sonjaya schrieb: some email detect spam also most importan email ,so how to restore email in /var/virusmail/xxx because taht email is important. also any body have some tip to make amavisd-new in openbsd 3.9 most faster

Re: release email in amavis temp

2006-06-21 Thread Joachim Schipper
On Wed, Jun 21, 2006 at 08:23:11PM +0700, sonjaya wrote: You can, however, configure amavisd to save pretty much exactly what you want to a temporary directory. As to the tmp directory and the directory amavisd saves to, set up a cron job to clean it out unless you want to do so manually (I

Re: Sendmail patch 001

2006-06-20 Thread Joachim Schipper
On Mon, Jun 19, 2006 at 07:19:44PM -0400, Michael Erdely wrote: I was wondering if anyone knew why there had been two versions of 001_sendmail.patch for 3.9. When the patch was first released, I downloaded it and updated some of my systems. This was the patch I downloaded:

Re: release email in amavis temp

2006-06-20 Thread Joachim Schipper
On Tue, Jun 20, 2006 at 07:42:19PM +0700, sonjaya wrote: dear all i have installed amavisd-new by port but amavisd-new trap email that not spam or virus ana locate at /var/amavisd/tmp/x so i wan release, i see in manual that using amavisd-release , but i can find it . Erm... sorry, what

Re: Reading a file that is been written make the system freeze?

2006-06-20 Thread Joachim Schipper
On Tue, Jun 20, 2006 at 10:59:58AM +0200, Federico Giannici wrote: As I have already told in a couple of previous emails, I'm experiencing occasional computer freezes (the PC lockups with no error at all, and I can only reset it). I replaced all the hardware (motherboard, cpu, ram, disc

Re: named on udp ports only

2006-06-20 Thread Joachim Schipper
On Tue, Jun 20, 2006 at 04:07:25PM +0100, Constantine A. Murenin wrote: Hello, I'm running an sshd on port 53 (domain) as there is some convenient wireless hot-spot that allows for both udp and tcp connection on this port without any authentication. :) (Yes, there is not even a need for

Re: package dependencies

2006-06-19 Thread Joachim Schipper
On Sun, Jun 18, 2006 at 09:24:24PM +0100, poncenby wrote: On 17 Jun 2006, at 11:24, Joachim Schipper wrote: On Thu, Jun 15, 2006 at 10:47:40PM +0100, poncenby wrote: quick one for you knowledgeable chaps/chapesses... If one does not have OpenBSD installed how would one obtain a list

Re: cruxports for OpenBSD

2006-06-19 Thread Joachim Schipper
On Sun, Jun 18, 2006 at 08:49:09PM -0400, Nick Guenther wrote: On the other hand, realize that no one asked you in the first place, you provided your list voluntarily (without even being prompted by a single 'so?'). No one asked you to defend your opinion. Anyway, you should care why Joachim

Re: package dependencies

2006-06-18 Thread Joachim Schipper
On Thu, Jun 15, 2006 at 10:47:40PM +0100, poncenby wrote: quick one for you knowledgeable chaps/chapesses... If one does not have OpenBSD installed how would one obtain a list of the dependencies of a certain package, say gnome-desktop for arguments sake? Many thanks poncenby

Re: ddos mail attack thwarted by spamd greylisting!

2006-06-18 Thread Joachim Schipper
On Fri, Jun 16, 2006 at 09:44:32AM -0600, Bob Beck wrote: * Joachim Schipper [EMAIL PROTECTED] [2006-06-15 18:03]: On Tue, Jun 13, 2006 at 01:07:46AM -0600, Bob Beck wrote: Luckily, spamd greylisting saved the day. If it wasn't for BASE/snort reporting of the portscan, I wouldn't have

Re: cruxports for OpenBSD

2006-06-18 Thread Joachim Schipper
On Sat, Jun 17, 2006 at 05:45:23AM +0200, Han Boetes wrote: Hi, I've been working for quite some time now on an alternative package-manager for OpenBSD, and since things start working rather fine now I think it's time to let you guys know. As you can see it contains nothing more than the

Re: ddos mail attack thwarted by spamd greylisting!

2006-06-15 Thread Joachim Schipper
On Thu, Jun 15, 2006 at 10:02:49AM +0700, riwanlky wrote: Hi Guys, I am going to install IDS for my firewall. According to this message snort have problem, is there any alternative IDS? Is there any IPS? I've heard good things about Bro-IDS http://www.bro-ids.org. It's not in ports, though,

Re: Erro compilirg eet-0.9.10.027 Your OS does not support C99's '%a'

2006-06-15 Thread Joachim Schipper
On Mon, Jun 12, 2006 at 02:34:33PM -0500, uv negativa wrote: hi i compiled eet an say: configure: error: Unsupported Operating System! Your OS does not support C99's '%a' string format. Eet cannot function without it. Please contact your OS vendor to get updates for C99 '%a' floating

Re: ddos mail attack thwarted by spamd greylisting!

2006-06-15 Thread Joachim Schipper
On Tue, Jun 13, 2006 at 01:07:46AM -0600, Bob Beck wrote: Luckily, spamd greylisting saved the day. If it wasn't for BASE/snort reporting of the portscan, I wouldn't have even bothered looking in my logs tonite, and probably would never have been aware of the thwarted attempt.

Re: Spam Trapping

2006-06-15 Thread Joachim Schipper
On Wed, Jun 14, 2006 at 08:29:17PM +0100, tony sarendal wrote: On 14/06/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: On Wed, Jun 14, 2006 at 09:31:49AM -0700, John Draper wrote: Mike Spenard wrote: What are some thoughts on purposely getting a spam trap email address acquired by

Re: developing a backup strategy

2006-06-15 Thread Joachim Schipper
On Wed, Jun 14, 2006 at 03:27:18AM +, Travers Buda wrote: On Mon, 12 Jun 2006 10:41:55 -0700 prad [EMAIL PROTECTED] wrote: i've gone through the threads: Recommendations for an OpenBSD-based Backup Solution remote data backup and am contemplating the ideas as they apply to

Re: Filesystem using tags, not folders?

2006-06-12 Thread Joachim Schipper
On Fri, Jun 09, 2006 at 04:40:19PM +0200, Kyrre Nygard wrote: Hello! Just a wild thought here ... After noticing how much simpler it is using tags, for instance with my bookmarks at http://del.icio.us -- compared to hours of frustration trying find the right combination of folders and

Re: Which free board software for PostgeSQL?

2006-06-09 Thread Joachim Schipper
On Thu, Jun 08, 2006 at 11:09:15PM -0700, prad wrote: On Thursday 08 June 2006 13:03, Joachim Schipper wrote: I use PHPBB with PostgreSQL 8.0, so it should work - 8.1 has changed nothing which I could imagine breaking PHPBB i just tried to get phpBB to work with postgresql8.1.3

Re: Mail Server configuration question(s)

2006-06-09 Thread Joachim Schipper
On Fri, Jun 09, 2006 at 07:07:19AM -0400, Pancho Cole wrote: I have been building and testing some postfix mail server configurations recently, and I am looking for advice. I currently have postfix authenticating against the password file, but I think I want to use SQL (PostgreSQL) or LDAP,

Re: Mail Server configuration question(s)

2006-06-09 Thread Joachim Schipper
On Fri, Jun 09, 2006 at 12:54:49PM -0400, Adam wrote: On Fri, 9 Jun 2006 14:24:11 +0200 Joachim Schipper [EMAIL PROTECTED] wrote: I've never used LDAP for anything 'real', but I've heard that the only really useful Open Source implementation is OpenLDAP, and that OpenLDAP is *very* slow

Re: Mail Server configuration question(s)

2006-06-09 Thread Joachim Schipper
On Fri, Jun 09, 2006 at 03:01:18PM -0400, Adam wrote: On Fri, 9 Jun 2006 20:39:24 +0200 Joachim Schipper [EMAIL PROTECTED] wrote: Does it even work on openbsd yet? Its got a long history of corrupting indexes, and spinning out of control sucking up 100% of the CPU. There is a port

Re: Which free board software for PostgeSQL?

2006-06-08 Thread Joachim Schipper
On Wed, Jun 07, 2006 at 08:46:56PM +0200, Michael Lechtermann wrote: Hi, anyone can recommend a free PHP board/forums software for use with PostgreSQL 8.x? PgSQL isn't mentioned in the vBulletin homepage. PHPBB is supposed to work with 7.x, not sure about 8.x I use PHPBB with PostgreSQL

Re: ip address ?

2006-06-08 Thread Joachim Schipper
On Wed, Jun 07, 2006 at 10:42:41PM -0700, akonsu wrote: hello, my openbsd machine is conected to a windows machine. the windows machine has a wireless connection and gets its ip using dhcp. the openbsd machine gets its ip from the windows machine also by using dhcp on boot. the windows

Re: Combining boot floppies

2006-06-08 Thread Joachim Schipper
On Wed, Jun 07, 2006 at 11:36:14PM -0700, Darrin Chandler wrote: On Thu, Jun 08, 2006 at 01:08:04AM -0500, Michael White wrote: Hi all, I'm attempting my first install of OpenBSD (version 3.9) on an HP Omnibook 800CT (Pentium 166, 80 MB RAM, 4.3 GB HD, 3COM 3CXEM556 Carbus Ethernet

Yes, MySQL sucks (was: Re: Lockups and Semop panics)

2006-06-08 Thread Joachim Schipper
On Thu, Jun 08, 2006 at 10:19:31AM -0600, Bob Beck wrote: * Otto Moerbeek [EMAIL PROTECTED] [2006-06-08 10:00]: On Thu, 8 Jun 2006, Michael Erdely wrote: Hi, I've got a Dell Dimension XPS B866r desktop running as my web/mail server (recently upgraded to 3.9).

Re: like the faq 14.16.1, partition is not in my disklabel ... need help anyway

2006-06-08 Thread Joachim Schipper
On Thu, Jun 08, 2006 at 08:31:59PM +, Didier Wiroth wrote: Hello, My ntfs amd comaq diag. partition is not in the disklabel. Unfortunately I don't know how to add correctly in the disklabel. I've read the faq 14.16.1 but it only shows a modification. Here is my fdisk output, which shows

Re: malloc option 'G'

2006-06-07 Thread Joachim Schipper
On Sat, Jun 03, 2006 at 05:38:25PM -0300, Kroty wrote: Hi folks, I'm running OpenBSD 3.9 and I have a program that is giving some unexpected output. But, if I run it with MALLOC_OPTIONS=G, I works fine. What does it mean? I've read the malloc(3) manpage, but I don't quite understand what

Re: they say openbsd is not as scalable as others

2006-06-07 Thread Joachim Schipper
On Sun, May 28, 2006 at 03:14:12PM -0500, Tony Abernethy wrote: Henning Brauer wrote: OpenBSD scales very well an most tasks you'll find. There are some exceptions tho. That unfortunately includes threads. Out of curiosity, what happens when you run apache on SMP hardware where the

Re: Spam Trapping

2006-06-07 Thread Joachim Schipper
On Thu, Jun 01, 2006 at 05:42:02PM -0700, Kian Mohageri wrote: Maybe you're really looking for something like spamd: http://www.openbsd.org/spamd/ Much more effective than a trap e-mail address in my opinion? Spamd can be configured to use a 'trap' e-mail address... See under

Re: ssh attacks

2006-06-07 Thread Joachim Schipper
On Wed, May 31, 2006 at 10:19:42PM +0200, Matthias Kilian wrote: On Wed, May 31, 2006 at 03:15:34PM -0400, Peter Fraser wrote: Expect I was not clear. Someone is attacking address 1, address 2, address 3, those address are all blocked with respect to ssh. , but because he is attacking

Re: RAID on 3.9 hangs

2006-06-07 Thread Joachim Schipper
On Sun, Jun 04, 2006 at 03:26:24PM +0200, Simon Vallet wrote: Hi, I'm just in the process of upgrading to 3.9 from a root-on-RAID 3.8 -stable install. I fetched the sources from the CD, built a RAID-enabled kernel, and rebooted : the kernel hangs after issuing Kernelized RAIDframe activated

Re: Libpcap library version

2006-06-01 Thread Joachim Schipper
On Wed, May 31, 2006 at 06:29:13PM -0400, Bryan Chapman wrote: I was trying working with ettercap today, and found out the only version 0.6.bp3 is in the ports tree. This version is described as deprecated on the ettercap webpage. I downloaded the most recent version (0.7.3) and tried to

Re: Problems trying to log on squirrelmail - part 2.

2006-06-01 Thread Joachim Schipper
On Thu, Jun 01, 2006 at 04:11:49PM +0200, Per-Olov Sjoholm wrote: On Thursday 01 June 2006 15:44, Joco Salvatti wrote: Hi all, Thank you very much for the tips you sent me. I could finally put squirrelmail to work. Now everything is almost fine, but there is still a little problem: I

Re: CGI in C: getenv(CONTENT_LENGTH)

2006-05-31 Thread Joachim Schipper
On Wed, May 31, 2006 at 02:14:09AM +0900, vladas wrote: Does (the above) really mean that URL more than 8190 bytes would be rejected? Or I am mixing something here? Yes, overly-long URLs will be rejected. Use POST, not GET, in such cases. All recent Apache versions are configured this way, I

Re: OpenBSD Newbie

2006-05-26 Thread Joachim Schipper
On Fri, May 26, 2006 at 11:21:54PM +0200, misiu wrote: Tony Abernethy schrieb: The problem with a changed root is that everything you will ever need to access needs to be inside this changed root. All the libriaries, etc etc --- that's right, another copy. One advantage of OpenBSD is

Re: OpenBSD Newbie

2006-05-26 Thread Joachim Schipper
On Fri, May 26, 2006 at 03:02:04PM -0700, Chris Cappuccio wrote: Joachim Schipper [EMAIL PROTECTED] wrote: On Fri, May 26, 2006 at 11:21:54PM +0200, misiu wrote: Tony Abernethy schrieb: The problem with a changed root is that everything you will ever need to access needs

Re: OT: DDoS questions

2006-05-23 Thread Joachim Schipper
On Mon, May 22, 2006 at 10:52:53PM -0500, Jacob Yocom-Piatt wrote: let's say that someone doesn't like me and/or a site that i run and they decide to DDoS me. i have a couple of questions since i'm not too familiar with the mechanics of a DDoS. what are some methods of launching a DDoS

Re: traffic shaping question.

2006-05-23 Thread Joachim Schipper
On Tue, May 23, 2006 at 03:56:31AM -0700, S t i n g r a y wrote: I want to do traffic shaping as per protocol basis so if i give a certian bandwith to HTTP protocole , isnt there any way i can diffrenciate between HTTP webpages HTTP downloads of huge .iso files ? i dont want users who are

Re: ServeRAID 4M

2006-05-22 Thread Joachim Schipper
On Mon, May 22, 2006 at 08:35:35AM +0600, Anton Maksimenkov wrote: Aside from the other comments, I'll add that aac(4) was disabled because it was buggy and Adaptec wouldn't provide documentation. Theo was quite clear about this at the time, see the 3.8 release notes. Ok, I remember about

Re: ServeRAID 4M

2006-05-21 Thread Joachim Schipper
On Sun, May 21, 2006 at 11:54:21AM +0600, Anton Maksimenkov wrote: Joachim Schipper wrote: 'not configured' typically means the kernel knows what it is, but doesn't know what to do with it. More specifically, it means that the kernel knows the PCI device's ID and vendor, but doesn't have

Re: Splitting xbaseXY.tgz - stupid idea?

2006-05-20 Thread Joachim Schipper
On Sat, May 20, 2006 at 10:09:15AM +0300, Liviu Daia wrote: On 19 May 2006, Jacob Meuser [EMAIL PROTECTED] wrote: no, I'm not suggesting that xbase be a port; I'm just offering some perspective. as far as biweekly question, that should be a clue that the people asking the question

Re: XF4.tar.gz in /usr or /usr/src?

2006-05-20 Thread Joachim Schipper
On Fri, May 19, 2006 at 09:06:24PM +0200, Tobias Weisserth wrote: Hi everybody, I hope this is the right place to post this. (...) I read the instructions for the second errata (ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.9/common/002_xorg.patch). It reads: Apply by doing: cd

Re: New server

2006-05-20 Thread Joachim Schipper
On Sat, May 20, 2006 at 02:14:34PM +0100, Gaby vanhegan wrote: On 20 May 2006, at 00:44, Stuart Henderson wrote: move the files under /var/www, and nfs mount to 127.0.0.1 back into the homes? you probably want to look at amd for this. of course the ftpd could sit on another machine if you

Re: Raid 1 and 2 Disks: kernel panic with init: not found when reboot into broken mirror

2006-05-20 Thread Joachim Schipper
On Wed, May 17, 2006 at 12:39:57AM +0200, ip wrote: On 5/14/06, Joachim Schipper [EMAIL PROTECTED] wrote: While wd1a does have a kernel, it does not have a proper root filesystem - for instance, no /dev directory, or more specifically no /dev/console. Fix this, and also have a look

Re: New server

2006-05-20 Thread Joachim Schipper
On Sat, May 20, 2006 at 03:45:35PM +0100, Gaby vanhegan wrote: On 20 May 2006, at 15:15, Joachim Schipper wrote: Something's got to give here. I suspect that I'm going to have to un- chroot the ftp daemon. Is there an ftpd somewhere that can prevent users from looking at certain

Re: ServeRAID 4M

2006-05-20 Thread Joachim Schipper
On Sun, May 21, 2006 at 12:39:30AM +0600, Anton Maksimenkov wrote: Hi. Reading through misc archives I found this post http://marc.theaimsgroup.com/?l=openbsd-miscm=112454454105020w=2 Currently I got number of IBM ServeRAID 4M controllers (plus batteries packs) in couple with some IBM

Re: Group editing

2006-05-18 Thread Joachim Schipper
On Wed, May 17, 2006 at 10:59:10AM -0700, stupidmail4me wrote: I've thought about this yes, but the developers aren't that tech savvy to understand cvs. They'll most likely be using FTP. I know I know, use cvs. FWIW, and I am not the first to say this, but CVS really is better. As a small

Re: security bug in x86 hardware (thanks to X WIndows)

2006-05-16 Thread Joachim Schipper
On Tue, May 16, 2006 at 03:26:39PM +1000, Steffen Kluge wrote: On Sat, 2006-05-13 at 16:18 +0200, Ed White wrote: It seems XFree people disagree... [...] ...and some Linux developers too... Alan Cox: What it essentially says is if you can hack the machine enough to get the

Re: question, 3.9 amd64, large memory needs

2006-05-16 Thread Joachim Schipper
On Tue, May 16, 2006 at 07:29:17AM -0500, jon butchar wrote: Greetings. I have a single-CPU Xeon-based system running FreeBSD's amd64, along with other computers running various OSs to use and look after. Due to the quality of OpenBSD, I switched all my other computers to OpenBSD and

Re: newbie: panic question (azalia driver)

2006-05-15 Thread Joachim Schipper
On Mon, May 15, 2006 at 10:13:47AM +0200, Srebrenko Sehic wrote: How do you debug/{copy,paste} a panic on pc or laptop that has no serial ports? I think IBM thinkpads docking stations have a serial port. Not sure about the Lenovo. Or you can just use a digital camera and take a picture of

Re: Raid 1 and 2 Disks: kernel panic with init: not found when reboot into broken mirror

2006-05-14 Thread Joachim Schipper
On Sat, May 13, 2006 at 01:38:40PM +0200, ip wrote: Hello misc, I spent two days to read man and how-tos, but today I don't succeed again to make raid 1 to work. I want to install openbsd 3.9 on two ide disks (wd0,wd1) of 10 gb with raidframe raid 1. Following the main steps that I have

Re: ksh and X windows.

2006-05-14 Thread Joachim Schipper
On Sat, May 13, 2006 at 01:53:36PM -0400, Peter Fraser wrote: My apologies, for not noticing that faq entry. But is is not a solution in general. I had a menu entry for emacs, The effect I got was the shell inside emacs didn't have ENV set, and by that time ksh is not going to look at

Re: OpenBSD 3.9 current, AMD Geode SC1200UFH-266, kontron on a scandisk 128mb

2006-05-14 Thread Joachim Schipper
On Sat, May 13, 2006 at 10:04:29PM +0200, Wild Karl-Heinz wrote: hi. I'm working on a openbsd kernel and an image for an AMD Geode SC1200UHF-266. I got a cpu-module and the eval-board. The manufactor is kontor. I configured a kernel similar to my wrap-boxe and changed some entries for

Re: Firefox keeps crashing

2006-05-12 Thread Joachim Schipper
On Thu, May 11, 2006 at 10:14:47PM -0400, Nick Holland wrote: Rico wrote: Hi I have a problem with Mozilla Firefox on obsd 3.9 running KDE. Whenever I am using firefox and tabbrowsing it keeps crashing. I only need to have about 4-10 tabs open at it will crash each and every time.

Re: Firefox keeps crashing

2006-05-12 Thread Joachim Schipper
On Fri, May 12, 2006 at 10:54:21AM +0200, Nico Meijer wrote: Hi, FWIW, I guess KDE is more than a bit resource-happy too; does the problem persist when using a simple window manager (fvwm, for instance)? I use Firefox under fluxbox under 3.9 with great succes. Cannot remember it

Re: Converting from WMA to MP3

2006-05-04 Thread Joachim Schipper
On Thu, May 04, 2006 at 09:43:45PM +0200, Rico wrote: Thanks you very much. Trying to do so I get the following: Opening audio decoder: [dmo] Win32/DMO decoders install_fs: Function not implemented Couldn't install fs segment, expect segfault Did you reconfigure the kernel with options

Re: AMD64 still broken...

2006-05-02 Thread Joachim Schipper
On Tue, May 02, 2006 at 01:23:21PM -0600, Ed V. wrote: Initial install was with media from: ftp://ftp.openbsd.org/pub/OpenBSD/3.9/amd64 CVS checkout was done with: CVS_RSH='/usr/bin/ssh' CVSROOT='[EMAIL PROTECTED]:/cvs' cvs -q checkout -rOPENBSD_3_9 -P src Which, if I understand

Re: Best firewall for OpenBSD ?

2006-04-30 Thread Joachim Schipper
On Sun, Apr 30, 2006 at 01:44:18AM -0700, S t i n g r a y wrote: I want to use OpenBSD as the network firewall of my network. Now which firewall should i use ? i heard people say pf is outdated use IP Filter instead. what you recommend ? If you use OpenBSD, use pf(4) - it's what OpenBSD

Re: pf firewall question

2006-04-30 Thread Joachim Schipper
On Sun, Apr 30, 2006 at 06:34:09AM -0700, S t i n g r a y wrote: Now what i want to know , maybe is O T in this list but what is the diffrence , i mean pf in openBSD is refered to as a firewall for home or small offices ? why is that , i mean what is the criteria of an enterprise firewall

<    4   5   6   7   8   9   10   11   12   13   >