Re: filesystems?

2007-09-03 Thread Douglas A. Tutty
On Tue, Sep 04, 2007 at 12:23:34AM +0200, Tonnerre LOMBARD wrote: On Mon, Sep 03, 2007 at 05:10:57PM +0200, Eric Elena wrote: I think fat32 is a good choice: you have nothing to install. Did you ever have to debug a deep directory structure where something caused all directory to become

Re: partioning for multiple OS's

2007-09-03 Thread Douglas A. Tutty
On Mon, Sep 03, 2007 at 08:23:30PM -0400, stan wrote: I have a new laptop. It came with Vista on it. I used gpartd to resize those partions, and added Ubuntu. Now I want to add OpenBSD, and FreeBSD. I'd like to do OpenBSD next. When I boot the 4.1 CD, I get to the partioning step, and I

Re: how get colour mutt when ssh from OBSD?

2007-09-11 Thread Douglas A. Tutty
On Mon, Sep 10, 2007 at 02:40:03PM -0300, Gleydson Soares wrote: On 9/10/07, Douglas A. Tutty [EMAIL PROTECTED] wrote: I have a box that runs OpenBSD that sshes into my Debian box. On OpenBSD, the default colour term is vt220 so when I ssh to debian, TERM is set to vt220. env TERM=xterm

Re: how get colour mutt when ssh from OBSD?

2007-09-11 Thread Douglas A. Tutty
On Mon, Sep 10, 2007 at 02:54:11PM -0400, Jeff Quast wrote: On 9/10/07, Douglas A. Tutty [EMAIL PROTECTED] wrote: Hello, I have a box that runs OpenBSD that sshes into my Debian box. On OpenBSD, the default colour term is vt220 so when I ssh to debian, TERM is set to vt220. Anyway

Re: scanner??

2007-09-11 Thread Douglas A. Tutty
On Tue, Sep 11, 2007 at 09:01:23AM +0200, Vim Visual wrote: thanks for the answers. I am looking now for a _fast_ epson. The purpose is to be able to scan pictures with a good resolution but, more importantly, to scan *hundreds* of pages... What about a nice digital camera setup with

Re: how get colour mutt when ssh from OBSD?

2007-09-11 Thread Douglas A. Tutty
On Mon, Sep 10, 2007 at 08:00:25PM -0400, Douglas A. Tutty wrote: On Mon, Sep 10, 2007 at 02:54:11PM -0400, Jeff Quast wrote: On 9/10/07, Douglas A. Tutty [EMAIL PROTECTED] wrote: Hello, I have a box that runs OpenBSD that sshes into my Debian box. On OpenBSD, the default colour

WARNING: / was not properly unmounted

2007-09-11 Thread Douglas A. Tutty
I have recently installed 4.1 on a P-II with an 850 MB drive and 64 MB ram. Right from the first reboot, I get WARNING: / was not properly unmounted The boot then gets delayed during the fsck. I've never had an unclean shutdown, always doing # shutdown -h now or # shutdown -r now I reviewed

Re: how get colour mutt when ssh from OBSD?

2007-09-11 Thread Douglas A. Tutty
On Tue, Sep 11, 2007 at 03:53:11PM +0200, Vim Visual wrote: I had the same problem. I solved it using xterm-xfree86 but now I have a different one. I cannot use backspace to scroll up. The error message is Key is not bound. any idea of how to fix that? Try TERM=screen. I didn't know

Re: Show your appreciation and get your 4.2 DVD

2007-09-11 Thread Douglas A. Tutty
On Tue, Sep 11, 2007 at 03:27:20PM -0400, Daniel Ouellet wrote: On Tue, 11 Sep 2007, Siju George wrote: Can't find a DVD in [snip] As stated in the beginning of this thread, DVD discs are not available, just CDs in DVD case. Yes guys. It was my mistake in my Divine Vast Drewling extase

Re: WARNING: / was not properly unmounted

2007-09-11 Thread Douglas A. Tutty
On Tue, Sep 11, 2007 at 04:22:49PM +0300, Evgeniy Sudyr wrote: I have recently installed 4.1 on a P-II with an 850 MB drive and 64 MB ram. Right from the first reboot, I get WARNING: / was not properly unmounted The boot then gets delayed during the fsck. I've never had an

Re: how get colour mutt when ssh from OBSD?

2007-09-12 Thread Douglas A. Tutty
On Wed, Sep 12, 2007 at 07:55:27AM +0200, Pau Amaro-Seoane wrote: yes, I tried this before I posted here but no way... it's not working in my case... mmmh... thanks anyway Did you use TERM=screen on both ends of the ssh, i.e. on OBSD before ssh and on linux after ssh? Try TERM=screen.

Re: Setting up ccd RAID 1 Howto OpenBSD 4.1

2007-09-12 Thread Douglas A. Tutty
On Wed, Sep 12, 2007 at 04:53:29AM -0700, Jake Conk wrote: I have OpenBSD 4.1 installed on one disk and I have an exact duplicate disk where i want to mirror my installation to incase of disk failure. If this needs to be setup during install I'm willing reinstall everything or if there is a

suggestions for good video card

2007-09-16 Thread Douglas A. Tutty
Hello, I'm transitioning my systems from Debian to OpenBSd. For my older boxes, this is just fine as Xorg comes with great drivers for the video on them. However, my year-old amd64 will need some verifying before I wipe out debian and put on OBSD. Its an AMD Athlon64 3800+ with 1 GB ram,

Re: embedded device

2007-09-18 Thread Douglas A. Tutty
On Tue, Sep 18, 2007 at 11:36:54AM -0400, Jason Dixon wrote: On Sep 18, 2007, at 11:03 AM, Tang Tse [EMAIL PROTECTED] wrote: I had a soekis 4801 and pf performs only about 28Mb/s I think. I trying to set up a router for about 50-100 users and only with 28Mb/s i hadn't enought there's a

Re: OpenBSD Install Goal

2007-09-18 Thread Douglas A. Tutty
On Tue, Sep 18, 2007 at 07:00:01PM +0200, Jan Stary wrote: I hope one day soon OpenBSD will adopt a nice ncurses setup similar to something like FreeBSD with ease to it. There is no _need_ for a nice curses setup - the current installer already has ease to itw, to put it mildly. In fact,

Re: operator permissions: a wish-list

2007-09-19 Thread Douglas A. Tutty
On Wed, Sep 19, 2007 at 11:12:33PM +0100, Stuart Henderson wrote: On 2007/09/19 17:46, Matthew Szudzik wrote: I was wondering if the participants in misc@openbsd.org would help me brainstorm. I want to give the operator group greater permissions than it currently has, so that any member

Re: 2 internet connections on 1 router

2007-09-20 Thread Douglas A. Tutty
On Thu, Sep 20, 2007 at 04:43:29PM +0200, Marian Hettwer wrote: However, the old DSL provider tries to get on my ass, and I figured, okay boys, if you don't let me outta this contract, I'll use your uplink to the max 24/7 (while true; do wget -O /dev/null http://something.iso; done). If you

Re: FW: Microsoft gets the Most Secure Operating Systems award

2007-09-20 Thread Douglas A. Tutty
On Thu, Sep 20, 2007 at 11:13:48AM -0400, stuart van Zee wrote: There is no such thing as Solving Security. It does not exist. It could only exist in a perfect world and as you know, or at least should know, this is NOT a perfect world. I have one absolutely secure computer. Actually I

Re: FW: Microsoft gets the Most Secure Operating Systems award

2007-09-21 Thread Douglas A. Tutty
On Fri, Sep 21, 2007 at 08:53:02AM +0100, Craig Skinner wrote: The One. The one gonad. Get a proper email account you cowardly faggot. Lets not get into WW II morale-boosting songs :) Doug.

Re: OpenBSD firewalls as virtual machine ?

2007-09-21 Thread Douglas A. Tutty
Josh wrote: Hello there. We have a bunch of obsd firewalls, 8 at the moment, all working nice and so forth. But we need to add about another 4 in there for new connections and networks, which means more machines to find room for. So basically I have been asked to investigate running

lock(1) to lock all virtual terminals?

2007-09-21 Thread Douglas A. Tutty
I don't use X much and instead use lots of Virtual Terminals. Since I'm on dialup, sometimes I need to leave multiple VTs open to do things, perhaps downloading something, or its just that I'm in the middle of things. How can I lock the whole virtual termial setup? lock(1) only lets me lock

Re: OpenBSD firewalls as virtual machine ?

2007-09-21 Thread Douglas A. Tutty
On Fri, Sep 21, 2007 at 11:12:10PM -0400, [EMAIL PROTECTED] wrote: Douglas A. Tutty wrote: ... I don't understand the logic of having multiple firewalls on one box. If one box can handle the throughput requirements of all the NICs, why not just one big firewall? There are lots of places

OBSD's perspective on SELinux

2007-09-22 Thread Douglas A. Tutty
Hello all, I'm running OBSD on my older boxes but still Debian on my big box (not ready yet). Linux has SELinux in its 2.6 kernel and debian has gone ahead and compiled SELinux into the libraries, although the SELinux policies aren't ready on debian yet. The whole focus seems to be to make

Re: OpenBSD firewalls as virtual machine ?

2007-09-22 Thread Douglas A. Tutty
On Sat, Sep 22, 2007 at 10:53:05AM -0400, Nick Holland wrote: Douglas A. Tutty wrote: ... Hi Nick. I understand your reasons. To me they look like reasons for separate firewalls on separate boxes. In the scenarios you mention, would you put separate firewalls on one machine

Re: OBSD's perspective on SELinux

2007-09-22 Thread Douglas A. Tutty
On Sat, Sep 22, 2007 at 12:20:34PM -0400, Jason Dixon wrote: On Sep 22, 2007, at 12:00 PM, Darrin Chandler wrote: On Sat, Sep 22, 2007 at 11:34:33AM -0400, Douglas A. Tutty wrote: Linux has SELinux in its 2.6 kernel and debian has gone ahead and compiled SELinux into the libraries, although

Re: lock(1) to lock all virtual terminals?

2007-09-22 Thread Douglas A. Tutty
On Sat, Sep 22, 2007 at 06:08:53PM +0200, Joachim Schipper wrote: On Fri, Sep 21, 2007 at 12:46:40PM -0400, Douglas A. Tutty wrote: I don't use X much and instead use lots of Virtual Terminals. Since I'm on dialup, sometimes I need to leave multiple VTs open to do things, perhaps

Re: OBSD's perspective on SELinux

2007-09-22 Thread Douglas A. Tutty
On Sat, Sep 22, 2007 at 11:50:08AM -0700, Ted Unangst wrote: On 9/22/07, Douglas A. Tutty [EMAIL PROTECTED] wrote: Linux has SELinux in its 2.6 kernel and debian has gone ahead and compiled SELinux into the libraries, although the SELinux policies aren't ready on debian yet. rhetorical

Re: lock(1) to lock all virtual terminals?

2007-09-23 Thread Douglas A. Tutty
On Sun, Sep 23, 2007 at 05:23:37PM -0600, Chris Kuethe wrote: On 9/23/07, Todd Alan Smith [EMAIL PROTECTED] wrote: Does lock -nv not work? I just read about this in BSD Hacks last night, oddly enough. # lock -nv lock: unknown option -- v usage: lock [-np] [-a style] [-t timeout] -np

minimum hard-drive space to compile patches?

2007-09-24 Thread Douglas A. Tutty
I currently have OBSD running on my P-II with an 850 MB drive and 64 MB ram. On install, I chose not to include the compiler set over concern re drive space. The FAQ says how much space is required to minimally run OBSD and it says how much to be able to comfortably compile (4G is not a bad

Re: OpenBSD on decTOP?

2007-09-26 Thread Douglas A. Tutty
On Wed, Sep 26, 2007 at 08:47:04AM -0600, Diana Eichert wrote: On Wed, 26 Sep 2007, Markus Hennecke wrote: As it won't probe on port 0x2e8 it will not find it. Thats why it was disabled, the probe will have negative effects on other hardware. Greetings Markus that's what I assumed,

Re: OpenBSD Desktop sighted in Yahoo Bangalore, India

2007-10-03 Thread Douglas A. Tutty
On Wed, Oct 03, 2007 at 09:10:59AM -0400, Nick Guenther wrote: On 10/2/07, Siju George [EMAIL PROTECTED] wrote: One of my best friends who was working with me for about 5 years recently got job in Bangalore. He had repeatedly turned down my offer to teach him OpenBSD and even teased me

partition layout

2007-10-03 Thread Douglas A. Tutty
Hello all, I have a 486DX4-100 with 32 MB ram. I bought an 8 GB drive to put in my P-II and it won't boot it so I've put in in the 486 along with a 1 GB drive. I'm on dialup and would like to avoid a bad partitioning decision requring a whole new install/download cycle (I'm on slow dialup).

Re: OpenBSD Desktop sighted in Yahoo Bangalore, India

2007-10-03 Thread Douglas A. Tutty
On Wed, Oct 03, 2007 at 11:23:03AM -0400, Nick Guenther wrote: On 10/3/07, Douglas A. Tutty [EMAIL PROTECTED] wrote: On 10/2/07, Siju George [EMAIL PROTECTED] wrote: As he Joined Yahoo Bangalore to his horror he found that the desktop assigned to him Booted OpenBSD. As soon as he

Re: OpenBSD Desktop sighted in Yahoo Bangalore, India

2007-10-03 Thread Douglas A. Tutty
On Wed, Oct 03, 2007 at 06:28:52PM +0200, Paul de Weerd wrote: I think the project is always in need of money. There's no steady supply of incoming cash except for the (dropping) CD sales etc. Always try to persuade your employer to donate if they're using OpenBSD or OpenBSD-derived software

Re: partition layout

2007-10-03 Thread Douglas A. Tutty
On Wed, Oct 03, 2007 at 12:40:25PM -0400, Stephan Andre' wrote: On Wednesday 03 October 2007 11:50:40 Douglas A. Tutty wrote: Here's what I'm thinking: wd0 (1.1 GB drive): a100 MB / b128 MB swap c1.1 GB d256 MB /tmp e ~640 MB /var wd1 (8.1 GB drive

Re: sign and timestamp

2007-10-03 Thread Douglas A. Tutty
On Wed, Oct 03, 2007 at 06:21:53PM +0200, G??bri M??t?? wrote: I've read a lot about timestamping a document, but dunno how it works in practice. How can i apply a timestamp to a digitally signed or encrypted document? Like i encrypt or sign a document with gnupg, but before the process how

Re: sign and timestamp

2007-10-03 Thread Douglas A. Tutty
specific. Yes, later on the reciever need to verify the timestamp. I was looking for an oss application but couldn't find any for timestamping. Douglas A. Tutty ?rta: On Wed, Oct 03, 2007 at 06:21:53PM +0200, G??bri M??t?? wrote: I've read a lot about timestamping a document, but dunno how

Re: sign and timestamp

2007-10-03 Thread Douglas A. Tutty
On Wed, Oct 03, 2007 at 09:45:30PM +0200, G?bri M?t? wrote: A service will gather data in a database and this data has to be signed and timestamped for security reasons, and the archives of these data are also need to signed and timestamped. The data will be used for internal purposes, so

Re: partition layout

2007-10-03 Thread Douglas A. Tutty
On Wed, Oct 03, 2007 at 07:46:01PM -0400, Nick Holland wrote: Douglas A. Tutty wrote: Hello all, I have a 486DX4-100 with 32 MB ram. I bought an 8 GB drive to put in my P-II and it won't boot it so I've put in in the 486 along with a 1 GB drive. you might want to spend more time

Re: partition layout

2007-10-04 Thread Douglas A. Tutty
On Thu, Oct 04, 2007 at 08:39:57AM -0300, Marcus Andree wrote: On 10/4/07, Douglas A. Tutty [EMAIL PROTECTED] wrote: On Wed, Oct 03, 2007 at 07:46:01PM -0400, Nick Holland wrote: Douglas A. Tutty wrote: I have a 486DX4-100 with 32 MB ram. I bought an 8 GB drive to put in my P-II

Re: sign and timestamp

2007-10-05 Thread Douglas A. Tutty
On Thu, Oct 04, 2007 at 05:03:41PM +0200, G?bri M?t? wrote: There'll be two main servers, a web server and a sql server. We have to insert a timestamp and a signature in the specified rows of tables. Periodically the sql server will make pdf documents from the data and we have to sign and

Re: partition layout

2007-10-06 Thread Douglas A. Tutty
On Sat, Oct 06, 2007 at 05:14:53AM -0500, Shawn K. Quinn wrote: On Thu, 2007-10-04 at 17:10 -0700, Clint Pachl wrote: The only thing I would use that 486 for would be an X client, with a good graphics card, a router, or as a command line tinkering system. Yes, a 486 is still plenty of

[side thread] security implcations of multiple kernel threads?

2007-10-09 Thread Douglas A. Tutty
On Tue, Oct 09, 2007 at 08:03:18PM +0200, Henning Brauer wrote: * Florin Andrei [EMAIL PROTECTED] [2007-10-09 19:34]: then, an i386 kernel should perform considerably better than amd64 for firewalling/routing/... That is surprising. What is the reason? we dunno really. it hasn't been

Re: The Name: UNIX

2007-10-09 Thread Douglas A. Tutty
On Tue, Oct 09, 2007 at 04:50:10PM -0500, Sean Darby wrote: In response to the recent easter egg in 4.2's song, I asked about some possible meaning behind the 11 1010101 bit and only ended up more confused as a result of what one individual provided in their replies. Could anybody

Re: Multi booting OpenBSD and OpenBSD and

2007-10-10 Thread Douglas A. Tutty
On Wed, Oct 10, 2007 at 03:35:30PM +0200, Nico Meijer wrote: Somewhat OT, but I used a different approach, as I had enough IDE disks lying around. I got myself an external USB enclosure with swappable HDD brackets. Then, of course, the POS device broke, but that's not the point I am

Re: Multi booting OpenBSD and OpenBSD and

2007-10-10 Thread Douglas A. Tutty
On Wed, Oct 10, 2007 at 10:51:26PM +0200, Tilo Stritzky wrote: I just got a brand new office PC, 64bit CPU. But I'm stuck with some Apps in i386 compatibility. So I installed i386 for work. Next week I'm going to get an USB stick and put an amd64 install on it, for play :) In Debian amd64

Re: [side thread] security implcations of multiple kernel threads?

2007-10-10 Thread Douglas A. Tutty
On Wed, Oct 10, 2007 at 11:44:05AM -0700, Ted Unangst wrote: On 10/9/07, Douglas A. Tutty [EMAIL PROTECTED] wrote: Why is this? Is there a security reason why the kernel is single-thread; is it OBSD resource limitations (no developer time, no hardware, etc); is it not enough interest yet

Re: How can i boot a bsd.rd from windows 2000 ?

2007-10-10 Thread Douglas A. Tutty
On Wed, Oct 10, 2007 at 09:49:24PM +0200, Christopher Bianchi wrote: Hello everyone. My situation is this: i've a laptop, a Sharp pc-ax10 with Windows 2000 preinstalled , without cdrom, floppy. I wish install OpenBSD on it. Naturally bios can't boot from USB. So i've thinked to boot the

Re: Multi booting OpenBSD and OpenBSD and

2007-10-10 Thread Douglas A. Tutty
On Wed, Oct 10, 2007 at 07:09:35PM -0400, Nick Holland wrote: Douglas A. Tutty wrote: In Debian amd64 Etch (stable), there is no way to use flashplayer (a 32-bit binary plugin that requires a 32-bit browser. To use it, you have to set up a 32-bit chroot. It never has to boot, just

expansion of FAQ# 1.10 re OpenBSD as a desktop system

2007-10-11 Thread Douglas A. Tutty
I've been evaluating OpenBSD as a desktop system while learning about it on my lesser (older) hardware. I've learned a lot and will continue to learn about OpenBSD but I don't think it will work as my primary desktop. Based on what I've learned here on Misc, I'd like to start a discussion

Re: expansion of FAQ# 1.10 re OpenBSD as a desktop system

2007-10-11 Thread Douglas A. Tutty
, at what resolution, full screen, deinterlaced (blend)? On 10/11/07, Douglas A. Tutty [EMAIL PROTECTED] wrote: I've been evaluating OpenBSD as a desktop system while learning about it on my lesser (older) hardware. I've learned a lot and will continue to learn about OpenBSD but I don't think

Re: expansion of FAQ# 1.10 re OpenBSD as a desktop system

2007-10-12 Thread Douglas A. Tutty
On Thu, Oct 11, 2007 at 09:36:33PM -0700, Darrin Chandler wrote: On Thu, Oct 11, 2007 at 11:57:18PM -0400, Kevin Stam wrote: However, it is also worth noting that some typical desktop needs and uses are incompatible with the focus of OpenBSD. There are currently no video cards that provide

Re: OpenBSD replacement for GnuPG

2007-10-12 Thread Douglas A. Tutty
On Fri, Oct 12, 2007 at 12:50:36PM +0200, Gilles Chehade wrote: Sean Darby a icrit : I should add... there seems to be a NetBSD variant, BPG, though I am not sure of the reliability of that (does anyone here use it?). Last time i checked (a year ago) bpg was stalling, I had a contact

Re: : expansion of FAQ# 1.10 re OpenBSD as a desktop system

2007-10-15 Thread Douglas A. Tutty
On Mon, Oct 15, 2007 at 05:31:51AM -0500, Robert C Wittig wrote: Raimo Niskanen wrote: Perhaps the best, but not the only. Flash i all over the net. E.g to see the weather forecasts from the Swedish Meteorology and Hydrology Institute (SMHI), you need Flash 8. Just a few months ago you needed

Re: : expansion of FAQ# 1.10 re OpenBSD as a desktop system

2007-10-15 Thread Douglas A. Tutty
On Mon, Oct 15, 2007 at 03:57:19PM +0200, Jan Stary wrote: On Oct 15 09:16:39, Douglas A. Tutty wrote: Well, at least I know that I'm not alone in needing to use flash to get real work done (not for games or other time-wasters). Which means that for any box from which I want to get real

Re: Tackilng multiple versions of autoconf

2007-10-16 Thread Douglas A. Tutty
On Tue, Oct 16, 2007 at 11:52:27AM +0100, Stuart Henderson wrote: On 2007/10/16 16:10, Amarendra Godbole wrote: A peculiar thing I noticed with many ports is they need different versions of autoconf installed (set through the AUTOCONF_VERSION variable) - so in the end, my system has 3

Re: : Which remvable drive is connected to which USB port

2007-10-16 Thread Douglas A. Tutty
On Tue, Oct 16, 2007 at 12:32:21PM +0930, Edwards, David (JTS) wrote: I was hoping to use physical lables on the USB disks with labelled USB cables but I've just found out during testing that the connection between a USB device and a physical cable is not as simple as I first thought. I

Re: How do I configure sendmail?

2007-10-16 Thread Douglas A. Tutty
On Tue, Oct 16, 2007 at 11:21:36PM +0530, Amarendra Godbole wrote: On 10/16/07, Aaron W. Hsu [EMAIL PROTECTED] wrote: 2007/10/16, Sunnz [EMAIL PROTECTED]: Hi, I have read the man pages of afterboot, sendmail, and also looked at /usr/share/sendmail/README. I also have tried to google,

Re: : expansion of FAQ# 1.10 re OpenBSD as a desktop system

2007-10-16 Thread Douglas A. Tutty
On Tue, Oct 16, 2007 at 02:39:59PM -0500, Shawn K. Quinn wrote: On Mon, 2007-10-15 at 19:34 -0400, Douglas A. Tutty wrote: I need to look something up in a catalog. The catalog doesn't come in print. I phone the supplier, they say look on the web. Its in flash. So, I need flash to get

Re: logs

2007-10-16 Thread Douglas A. Tutty
On Tue, Oct 16, 2007 at 05:55:03PM +, Mike F wrote: is there a similar logwatch program as in other linux systems What do you mean by _other_ linux systems. This isn't a linux system. :))) Doug.

Re: Help! I'm having Linux foisted on me! (PF queuing woes)

2007-10-19 Thread Douglas A. Tutty
On Fri, Oct 19, 2007 at 03:15:03PM +0100, Richard Wilson wrote: I appeal to the PF masters for some education on how to do something, because if I can't work out how to do it using PF, I'll have to do it with iptables. Eep! [snip the details] That's about it really. If I can get it to work,

Re: : cp(1) bug ?

2007-10-19 Thread Douglas A. Tutty
On Fri, Oct 19, 2007 at 09:19:21AM -0400, Nick Guenther wrote: On 10/19/07, Tom Van Looy [EMAIL PROTECTED] wrote: Richard Toohey wrote: On 19/10/2007, at 8:12 PM, Raimo Niskanen wrote: Looks like OpenBSD, FreeBSD, and Mac OS X BSD bits have the same sort of outcome. Copy foo

Re: About Xen: maybe a reiterative question but ..

2007-10-24 Thread Douglas A. Tutty
On Tue, Oct 23, 2007 at 08:35:39PM -0700, Ben Goren wrote: On 2007 Oct 23, at 5:57 PM, [EMAIL PROTECTED] wrote: Virtualization seems to have a lot of security benefits. ``Seems'' is the key word, here. On hardware like an IBM mainframe that can acutally support what's necessary for

sanely designed hardware?

2007-10-24 Thread Douglas A. Tutty
After enjoying the Xen thread, and the comments about the horrid mess that is x86 hardware design, I'm wondering what hardware on which OpenBSD will run _is_ well designed. Who makes a hardware architecture that is open (enough) that OpenBSD can run fully on it, that has good performance. I'm

Re: new dell install completed, but...

2007-10-24 Thread Douglas A. Tutty
On Wed, Oct 24, 2007 at 08:55:14PM -0400, Nick Holland wrote: [EMAIL PROTECTED] wrote: I have a new Dell Optiplex 745 with an Intel Core 2 Duo. this system completed the install. Now on boot it hangs after: wskbd1: connecting to wsdisplay0 the only issue I had during install was

Re: About Xen: maybe a reiterative question but ..

2007-10-25 Thread Douglas A. Tutty
On Wed, Oct 24, 2007 at 10:07:59PM -0500, Tony Abernethy wrote: only an idiot would think that separatey physical machines would NOT increase security Many IBM PCs vs IBM mainframe Apples and oranges. When people compare one box to many, they're talking about the same arch of box. We

Re: About Xen: maybe a reiterative question but ..

2007-10-25 Thread Douglas A. Tutty
On Thu, Oct 25, 2007 at 08:37:02PM +1300, Richard Toohey wrote: On 25/10/2007, at 8:28 PM, Richard Toohey wrote: You are in charge of getting four ambassadors to a meeting. As well as making sure they are happy and fed, you are in charge of their security. All four are hated in their

Re: Network Time Synchronization using timed or ntpd or a Combination?

2007-10-25 Thread Douglas A. Tutty
On Thu, Oct 25, 2007 at 11:39:28AM -0600, Theo de Raadt wrote: While those factors do exist, the biggest factor is probably that the clocking parts are supplied by the lowest bidder, and there is no need to be higher quality than the competition. Leaky capacitors? Who cares. Tantalum and

Re: max number of groups

2007-10-25 Thread Douglas A. Tutty
On Thu, Oct 25, 2007 at 10:19:19AM -0600, Theo de Raadt wrote: I'm running an OpenBSD server with a lot of users and project groups. Each project has its own group or two to protect it's files from other users. How do you guys usually solve this problem when user needs to be member of

Re: max number of groups

2007-10-26 Thread Douglas A. Tutty
On Fri, Oct 26, 2007 at 09:55:13AM -0700, Ted Unangst wrote: On 10/25/07, Douglas A. Tutty [EMAIL PROTECTED] wrote: On Thu, Oct 25, 2007 at 10:19:19AM -0600, Theo de Raadt wrote: Well, there is no solution. 16 was chosen a lot of years ago as a reasonable amount of state to carry around

Re: max number of groups

2007-10-26 Thread Douglas A. Tutty
On Fri, Oct 26, 2007 at 03:38:51PM -0700, Darren Spruell wrote: On 10/26/07, Douglas A. Tutty [EMAIL PROTECTED] wrote: On Fri, Oct 26, 2007 at 09:55:13AM -0700, Ted Unangst wrote: On 10/25/07, Douglas A. Tutty [EMAIL PROTECTED] wrote: On Thu, Oct 25, 2007 at 10:19:19AM -0600, Theo de

Re: Non-x86

2007-10-28 Thread Douglas A. Tutty
On Sun, Oct 28, 2007 at 09:59:43AM -0400, Jeff Quast wrote: On 10/26/07, Matthew Szudzik [EMAIL PROTECTED] wrote: Where are the choices for non-x86? The only remaining alternative is Sparc. Everything else is either old (macppc) or expensive unsupported (IA64). If anyone is

Re: About Xen: maybe a reiterative question but ..

2007-10-28 Thread Douglas A. Tutty
On Sun, Oct 28, 2007 at 05:34:17PM -0400, bofh wrote: Why would you do that? Go read The Software Conspiracy. The author, Minasi, got, on the record, interviews from VPs of development at Microsoft, Netscape, Sun, Oracle, etc basically saying that they don't give a shit about lousy

Re: Limiting CPU to a process or process group?

2008-01-14 Thread Douglas A. Tutty
On Mon, Jan 14, 2008 at 01:34:13PM +, Andreas Kahari wrote: On 14/01/2008, Alexander Schrijver [EMAIL PROTECTED] wrote: On Jan 14, 2008 1:30 PM, Andreas Kahari [EMAIL PROTECTED] wrote: On 14/01/2008, Alexander Schrijver [EMAIL PROTECTED] wrote: On Jan 14, 2008 11:52 AM, Andreas

most secure graphical browser

2008-01-17 Thread Douglas A. Tutty
I have a box that I want to keep as secure as I can but I also need to be able to use a graphical browser from it (I know that this is a trade-off). There is no graphical browser in base. I don't need or want this browser to do javascript or flash (I have a different box for entertainment).

Re: k3b ...is it possible?

2008-01-17 Thread Douglas A. Tutty
On Thu, Jan 17, 2008 at 02:56:29PM -0700, Predrag Punosevac wrote: Jacob Meuser wrote: On Thu, Jan 17, 2008 at 01:06:18PM -0700, Predrag Punosevac wrote: I have heard something about forking cdrtools and dvd+rw probably by the people who want to enforce GPL license. Maybe somebody

Re: most secure graphical browser

2008-01-17 Thread Douglas A. Tutty
On Thu, Jan 17, 2008 at 05:11:53PM -0500, STeve Andre' wrote: On Thursday 17 January 2008 03:42:38 pm Douglas A. Tutty wrote: I have a box that I want to keep as secure as I can but I also need to be able to use a graphical browser from it (I know that this is a trade-off

Re: most secure graphical browser

2008-01-17 Thread Douglas A. Tutty
On Thu, Jan 17, 2008 at 06:36:27PM -0500, Frank Bax wrote: Douglas A. Tutty wrote: I have a box that I want to keep as secure as I can but I also need to be able to use a graphical browser from it (I know that this is a trade-off). Have you considered running the browser in a virtual

Re: most secure graphical browser

2008-01-17 Thread Douglas A. Tutty
On Fri, Jan 18, 2008 at 01:03:07AM +0100, Rico Secada wrote: On Thu, 17 Jan 2008 18:17:54 -0500 Douglas A. Tutty [EMAIL PROTECTED] wrote: On Thu, Jan 17, 2008 at 05:11:53PM -0500, STeve Andre' wrote: On Thursday 17 January 2008 03:42:38 pm Douglas A. Tutty wrote: I have a box that I

Re: modifying base system, need to recompile?

2008-01-17 Thread Douglas A. Tutty
On Thu, Jan 17, 2008 at 04:44:12PM -0800, J.C. Roberts wrote: On Friday 01 February 2008, Aaron wrote: So lets say i start w/the base install and change my rc.conf.local to point at sendmail.cf , edit the appropriate files in the src directory. Things like, sending mail as @mydomain.com

Re: most secure graphical browser

2008-01-18 Thread Douglas A. Tutty
On Thu, Jan 17, 2008 at 10:11:47PM -0500, Steve Shockley wrote: Douglas A. Tutty wrote: I have a box that I want to keep as secure as I can but I also need to be able to use a graphical browser from it (I know that this is a trade-off). Assuming you've already decided to run X, then why

Re: most secure graphical browser

2008-01-18 Thread Douglas A. Tutty
and the access boxes and terminals. Doug. It is a pity that the is nothing like linux vservers for openbsd as yet ;-) On 18/01/2008, Joachim Schipper [EMAIL PROTECTED] wrote: On Thu, Jan 17, 2008 at 06:17:54PM -0500, Douglas A. Tutty wrote: On Thu, Jan 17, 2008 at 05:11:53PM -0500, STeve

Re: modifying base system, need to recompile?

2008-01-18 Thread Douglas A. Tutty
On Fri, Feb 01, 2008 at 08:40:01PM -0600, Aaron wrote: Douglas A. Tutty wrote: However, there have been threads here detailing the recompilation necessary for sendmail to handle SSL Auth (or whatever its called). If you have to recompile sendmail (as opposed to changing a config), presumably

Re: most secure graphical browser

2008-01-18 Thread Douglas A. Tutty
On Thu, Jan 17, 2008 at 06:24:16PM -0700, Clint Pachl wrote: No kidding. Having X installed on a main server is a bad idea. What does this main server do? If you need a GUI on your server you should probably use Linux or Windows. If you just need a browser to view documentation on the

Re: most secure graphical browser

2008-01-18 Thread Douglas A. Tutty
On Fri, Jan 18, 2008 at 08:39:57AM -0600, Tony Abernethy wrote: Alexey Vatchenko wrote: On 2008-01-18, Douglas A. Tutty [EMAIL PROTECTED] wrote: On Thu, Jan 17, 2008 at 06:24:16PM -0700, Clint Pachl wrote: If you want security, get rid of X. Even if it's OpenBSD's X? The one

Re: most secure graphical browser

2008-01-18 Thread Douglas A. Tutty
On Fri, Jan 18, 2008 at 05:10:58PM +0200, Dusty wrote: There are no insecure browsers, just insecure sites. OK, but how do you tell a secure site from an insecure site? If a site turns out to be insecure, if the browser isn't vulnerable to the attacks that the insecure site can exploit, then

Re: most secure graphical browser

2008-01-18 Thread Douglas A. Tutty
On Fri, Jan 18, 2008 at 09:30:01PM +0200, Jussi Peltola wrote: Most of the replies are missing the point. You do not only want to protect the rest of your system from your browser. You also want to avoid your browser doing anything an attacker wants when he finds an exploit in it. If you

Re: most secure graphical browser

2008-01-19 Thread Douglas A. Tutty
On Sat, Jan 19, 2008 at 08:24:27AM +0100, ropers wrote: On 19/01/2008, Douglas A. Tutty [EMAIL PROTECTED] wrote: may just be very insecure. Which is it? You can't tell without looking at the details, or asking somebody who has done so. Your specific questions to this list about Dillo et al

Re: separate processors

2008-01-28 Thread Douglas A. Tutty
On Mon, Jan 28, 2008 at 11:46:44AM -0800, Lord Sporkton wrote: On 28/01/2008, johan beisser [EMAIL PROTECTED] wrote: On Jan 27, 2008, at 9:24 PM, Lord Sporkton wrote: I am setting up a duel core server, the server will be doing 2 things, firewall/routing and user-services since my

Re: rlpr for OpenBSD?

2008-01-29 Thread Douglas A. Tutty
On Tue, Jan 29, 2008 at 04:44:12PM +0100, Pau Amaro-Seoane wrote: Now, admin here is taking security a bit too seriously and it's not possible to telnet the printer over 9100. I was thinking of using rlpr, like rlpr -Plp -HIPaddressOfPrinterHere MyVeryInterestingFile.ps But I don't

low-MHz server

2008-01-30 Thread Douglas A. Tutty
Hello, I have an unusual situation and problem at which I've been chipping away. The resultant system will need to run OpenBSD so I'm asking here for the accumulated wisdom. The base technology predates my IT experience. My wife is sensitive to what she describes as electromagnetic fields. She

Re: low-MHz server

2008-01-30 Thread Douglas A. Tutty
? why not just use your apps on the Athlon and ssh to it? it is multi-user after all On 30/01/2008, Douglas A. Tutty [EMAIL PROTECTED] wrote: Hello, I have an unusual situation and problem at which I've been chipping away. The resultant system will need to run OpenBSD so I'm asking here

Re: low-MHz server

2008-01-30 Thread Douglas A. Tutty
On Wed, Jan 30, 2008 at 01:11:58PM -0600, Daniel A. Ramaley wrote: On Wednesday 30 January 2008 12:35, Douglas A. Tutty wrote: My wife is sensitive to what she describes as electromagnetic fields. She gets headaches and other pains when exposed to equipment: the higher the frequency

Re: low-MHz server

2008-01-30 Thread Douglas A. Tutty
, bofh wrote: So, Look for tempest rated computers? On 1/30/08, Daniel A. Ramaley [EMAIL PROTECTED] wrote: On Wednesday 30 January 2008 12:35, Douglas A. Tutty wrote: My wife is sensitive to what she describes as electromagnetic fields. She gets headaches and other pains when exposed

Re: low-MHz server

2008-01-30 Thread Douglas A. Tutty
Thanks all for your thinking. Yes its getting OT. I don't mind the OTness but I would also like the T discussion to continue as well. On Wed, Jan 30, 2008 at 05:47:42PM -0200, Marcus Andree wrote: The condition your wife is subject to, IMO, is _very_ unusual and deserves better study...

Re: low-MHz server

2008-01-30 Thread Douglas A. Tutty
On Wed, Jan 30, 2008 at 02:02:09PM -0500, STeve Andre' wrote: On Wednesday 30 January 2008 13:35:59 Douglas A. Tutty wrote: Hello, I have an unusual situation and problem at which I've been chipping away. The resultant system will need to run OpenBSD so I'm asking here

Re: low-MHz server

2008-01-30 Thread Douglas A. Tutty
On Wed, Jan 30, 2008 at 09:42:15PM +, [EMAIL PROTECTED] wrote: You said you live rurally - in that case, perhaps you should build/buy a small quality (read as: won't get wet) shed, have your systems there and run some outdoor-rated CAT5e from it to your house. That should allow you to use

Re: low-MHz server

2008-01-30 Thread Douglas A. Tutty
On Wed, Jan 30, 2008 at 04:48:57PM -0500, bofh wrote: And, in all seriousness, has she tried a tin-foil hat? I tried a tin-foil vapour-barrier in the bedroom in our previous house; even tried grounding it.

Re: low-MHz server

2008-01-30 Thread Douglas A. Tutty
On Wed, Jan 30, 2008 at 06:09:36PM -0500, Steve Shockley wrote: Douglas A. Tutty wrote: A medical solution would be very nice but not forthcoming. Note that apparently in either Norway or Sweeden (I forget which), a whole non-electronic, non-EMF village has been set up for such sensitive

Re: low-MHz server

2008-01-30 Thread Douglas A. Tutty
Hi Ropers, We did the double-blind thing many times. She nails it every time: 100% Thanks anyway, Doug.

  1   2   3   4   >