Re: facts about OpenBSD

2008-01-14 Thread johan beisser
On Jan 14, 2008, at 12:09 PM, Nikns Siankin wrote: If you get money from selling CDs/soft, its just clearly unfair to not support it. Yes, I'm talking about stable ports. Actually, the OpenBSD OS is supported. Your argument is pointless. Stable ports are NOT supported because, well, it's

Re: Suggested PF Setup when using BitTorrent?

2008-01-14 Thread johan beisser
On Jan 14, 2008, at 5:10 PM, Brian wrote: --- Max Hayden Chiz [EMAIL PROTECTED] wrote: Perhaps this problem is specific to my configuration (or specific to DOCSIS cable modems). But if it makes Brian (or someone else's problem) go away, then it is likely that this problem is not unique.

Re: Suggested PF Setup when using BitTorrent?

2008-01-15 Thread johan beisser
On Jan 15, 2008, at 1:35 AM, Stuart Henderson wrote: On 2008/01/14 19:40, johan beisser wrote: The hardware is a slightly loaded Soekris net4501 with 64mb of RAM running OpenBSD 4.1 (GENERIC). This will handle much more traffic if you upgrade to 4.2. I thought the performance improvement

Re: Suggested PF Setup when using BitTorrent?

2008-01-15 Thread johan beisser
On Jan 15, 2008, at 9:34 AM, Stuart Henderson wrote: I thought the performance improvement came from 4.1 with the removal of per packet interrupts. http://www.openbsd.org/42.html Huge performance improvements in the network stack, including: # In pf, store routing table ID, queue ID etc

Re: Why do clients running BitTorrent make my router's latency go through the roof?

2008-01-15 Thread johan beisser
On Jan 15, 2008, at 5:23 PM, Brian wrote: How are you testing for latency, so I can duplicate on my side? When I was doing my tests, I was running a simple ICMP echo through the default queue (what bittorrent runs in). Were I to test this again, I'd probably run a full test using

Re: Why do clients running BitTorrent make my router's latency go through the roof?

2008-01-16 Thread johan beisser
Just a fast followup. While pulling 133K down via BitTorrent I decided to run some tests through the 4.1 firewall with hping. Nothing serious, just different flags. My queues, from pftop: qo_tcp_ack priq 7 790K 49M 0 0 0 163 9939 qo_dns

Re: Why do clients running BitTorrent make my router's latency go through the roof?

2008-01-16 Thread johan beisser
On Jan 16, 2008, at 3:58 PM, Unix Fan wrote: I notice a lot of people forward several ports when using bittorrent You know, It's not written in stone that you need to use more then a single port... The standard bittorrent client usually only handles a single port at a time per

Re: most secure graphical browser

2008-01-17 Thread johan beisser
On Jan 17, 2008, at 3:36 PM, Frank Bax wrote: Have you considered running the browser in a virtual environment? Outside of virtualization providing snapshots, it doesn't do anything to truly improve security.

Re: most secure graphical browser

2008-01-17 Thread johan beisser
On Jan 17, 2008, at 5:02 PM, ropers wrote: It can be useful for (esp. junior) sysadmins who've hooked up a monitor and keyboard to a server and are sitting in front of it to administer it, and who may not be confident enough of their choices without googling and reading through a number of

Re: modifying base system, need to recompile?

2008-01-17 Thread johan beisser
On Jan 17, 2008, at 5:37 PM, Douglas A. Tutty wrote: However, there have been threads here detailing the recompilation necessary for sendmail to handle SSL Auth (or whatever its called). If you have to recompile sendmail (as opposed to changing a config), presumably you'd have to make the

Re: separate processors

2008-01-28 Thread johan beisser
On Jan 27, 2008, at 9:24 PM, Lord Sporkton wrote: I am setting up a duel core server, the server will be doing 2 things, firewall/routing and user-services since my needs are pretty small for this server and its a duel 2.0 64bit i was hoping to sort of partition the cpus such that

Re: separate processors

2008-01-28 Thread johan beisser
On Jan 28, 2008, at 11:46 AM, Lord Sporkton wrote: what keywords should be be searching for? i have no idea what this would be called? Parallel processing. Massively Parallel-processing Systems can usually have assigned CPU usage. I believe Solaris permits some level of CPU assignment,

Re: Petition to VIA

2008-01-28 Thread johan beisser
On Jan 28, 2008, at 11:10 AM, Gilles Chehade wrote: RELEASE DECENT LINUX DRIVERS! I won't sign and I doubt it is a good idea to say to a vendor that we want decent drivers when this will only encourage them into providing blobs instead of documentation. The average user doesn't know the

Re: low-MHz server

2008-01-30 Thread johan beisser
On Jan 30, 2008, at 7:45 PM, scott wrote: If MHz are the issue ... you can get SUN NETRA T1 machine off ebay from 50-300$ depending on its age and ingredients. These used Netra's range from 400M-1.2G Hz. These are 1U units. They offer far greater performance bang then x86's at at like

Re: avoid logging useless ssh brute force attempts

2008-01-31 Thread johan beisser
I've simply added in an overload rule to pf on my server. This has helped significantly. On Jan 31, 2008, at 11:11 PM, Chris wrote: my logs are filled with useless ssh bruteforce attempts - is there anything i can do to avoid logging random brute force attacks? since i disallow ssh root

Re: avoid logging useless ssh brute force attempts

2008-02-02 Thread johan beisser
On Feb 2, 2008, at 6:32 AM, Wijnand Wiersma wrote: I don't think bogons are able to complete the TCP handshake since you don't know how to route back. Filtering those will not make sure there are less log messages about ssh logins Not entirely true. Bogons are not supposed to be routed,

Re: Prolific USB-Serial Controller

2008-02-02 Thread johan beisser
A) don't bother initializing a modem. Forget minicom. It's nearly useless for what you're doing. B) openbsd has a utility built in to do just these kinds of things: cu(1) C) to use cu(1) with a USB serial: cu -l /dev/cuaU0 On Feb 2, 2008, at 1:57 PM, Chris wrote: On Feb 2, 2008 10:29

Re: Prolific USB-Serial Controller

2008-02-02 Thread johan beisser
On Feb 2, 2008, at 3:17 PM, Chris wrote: On Feb 3, 2008 9:27 AM, johan beisser [EMAIL PROTECTED] wrote: C) to use cu(1) with a USB serial: cu -l /dev/cuaU0 I tried cu -l /dev/cuaU0, cu -l /dev/cuaU0 -s 9600 - it says Connected after that nothing happens. Should I try changing the baud rate

Re: avoid logging useless ssh brute force attempts

2008-02-03 Thread johan beisser
On Feb 3, 2008, at 9:12 PM, Ted Unangst wrote: you still don't gain anything. what percentage of your traffic is coming from unallocated space? I'm not disagreeing with you in that it's wasted effort. It is. This is why I personally use overload tables.

Re: pf issues with a web-server

2008-02-04 Thread johan beisser
Your pass rule for the web server is screwed up, so it won't match. The rule after it matches and should permit it to pass. On Feb 3, 2008, at 10:31 PM, Bales, Tracy wrote: # macros ext_if=dc0 int_if=dc1 web_server=192.168.0.4 # scrub scrub in # nat nat on $ext_if from !($ext_if) to any -

Re: blade servers

2008-02-08 Thread johan beisser
On Feb 6, 2008, at 5:45 PM, Need Coffee wrote: Does anyone run OpenBSD on blade servers? I don't mean Sun Blade 150 kind of hardware, but rather blade chassis with server blades (a la Sun Blade 8000, HP, Dell, etc.). I've been running FreeBSD on an Intel blade chassis with varying amounts

Re: DHCP client failure with cable modem

2008-02-22 Thread johan beisser
On Feb 22, 2008, at 5:32 PM, David Murphy wrote: PS: another piece of info I left out is that my modem is a Motorola Surfboard SB5120, and my cable ISP is Charter. Does charter require PPPoE?

Re: DHCP client failure with cable modem

2008-02-22 Thread johan beisser
On Feb 22, 2008, at 8:19 PM, David Murphy wrote: I'd be happy to provide any information requested. I'm quite new to *BSD, but I'm pretty well-versed in Linux, so tell me what you need, and I'll find it. If you need more information about the box than what I gave at the end of my first

Re: upgrading to 4.3-beta

2008-02-23 Thread johan beisser
I On Feb 23, 2008, at 1:26 PM, Chris wrote: I have upgraded my 4.2-release to 4.3-beta. But I am a bit confused as I cannot see snmpd.conf, relayd in /etc. However, I can see them in /usr/src/etc/. When I login it says, 4.3-beta and uname -amp shows 4.3 I've been using mergemaster(8) to

Re: Updates for old releases

2008-02-23 Thread johan beisser
On Feb 23, 2008, at 5:44 PM, Antonio Lobato wrote: I know it is better to use 4.2, but it does not depends only of my opnion, I'm configuring the firewall for a customer, and now I can at most make a advice. Advise them to use 4.2. There are significant speed improvements to pf, among

Re: changing bash prompt escape sequences

2008-02-23 Thread johan beisser
On Feb 23, 2008, at 6:29 PM, Jay Hart wrote: I use bash as my shell. I'm trying to set the bash prompt to display: ttyC1 [EMAIL PROTECTED] I've created a .bashrc in the users home directory (in this case root), and used the following line: PS1=\l [EMAIL PROTECTED] # So, what happens

Re: changing bash prompt escape sequences

2008-02-23 Thread johan beisser
On Feb 23, 2008, at 7:35 PM, Jay Hart wrote: I've looked at or modified every file in roots and one users home directory without having the prompt displayed upon initial login. Once I login, and run 'bash', the prompt will be displayed as I set it. This leads me to believe that I have an

Re: Cannot install 4.3-beta firefox from snapshots/packages/amd64

2008-02-23 Thread johan beisser
On Feb 23, 2008, at 2:54 PM, Mark Zimmerman wrote: I just installed the latest amd64 snapshot and wanted to test some packages. Firefox will not install due to a chain of dependencies stretching back to glitz which requires libGL.6. The snapshot I installed this morning has libGL.7. Since the

Re: OT: fully interconnect switches: interesting problem

2008-02-24 Thread johan beisser
Did you configure STP, or are the switches figuring this out on their own? On Feb 24, 2008, at 1:09 PM, John Nietzsche wrote: Dear gentleman/madam, i was given 4 2724 dell powerconnect switches and only 6 patch cords. Besides that, i was given a challenge to connect them each other having a

Re: OT: fully interconnect switches: interesting problem

2008-02-25 Thread johan beisser
On Feb 25, 2008, at 6:39 AM, Douglas A. Tutty wrote: But if the switches don't know how to handle this setup, then they'll go crazy. I don't know if these switches can be told how to handle this. They can. The Dell Powerconnect 2700 are basically rebranded Cisco switches running CatOS.

Re: Setting up a HA server with limited resources

2008-03-22 Thread johan beisser
On Mar 22, 2008, at 5:44 AM, Rico Secada wrote: Hi. A customer with very limited resources needs to set up a high available system running apache, mysql, postfix and dovecot and I have gotten the task. it's doable, but the unanswered question is what do each of these components have

Re: Setting up a HA server with limited resources

2008-03-23 Thread johan beisser
Hmm. Gotta review CARP again, it seems. When did this go in? On Mar 23, 2008, at 2:29 AM, Ryan McBride wrote: On Sat, Mar 22, 2008 at 10:49:26AM -0700, johan beisser wrote: I would like to reach a state, if possible, in which load balancing is performed, but at the same time, if one machine

Re: maybe somebody can help me please

2008-08-08 Thread Johan Beisser
On Fri, Aug 8, 2008 at 2:39 PM, phoenixcomm [EMAIL PROTECTED] wrote: hi gang, I have a OpenBSD transparent bridge running (pf)!!! Best firewall yet.. PROBLEM (Beware my stupid light is light. :-O any way. a few months ago I upgraded my login password from 8 chars to 10, and then promptly

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-08-08 Thread Johan Beisser
On Fri, Aug 8, 2008 at 2:59 PM, phoenixcomm [EMAIL PROTECTED] wrote: Hi Gang, well heres my 3 cents, first why use a stupid PC (any os) for routing.. REALY BAD jue,jue brake down and buy a old Cisco 7200, 7500, 3600 they are all very good routers, I used a 7500 for a while and now use a

Re: How to copy an entire directory to my home directory

2008-08-14 Thread Johan Beisser
On Thu, Aug 14, 2008 at 11:14 AM, skogzort [EMAIL PROTECTED] wrote: Hello, Ib m trying to copy all the contents of /root/var/namedb from a remote OpenBSD3.8 DNS server to my local PC. I am using WinSCP for file transfer. I have found that I am unable to download some of the directories:

Re: How to copy an entire directory to my home directory

2008-08-14 Thread Johan Beisser
On Thu, Aug 14, 2008 at 1:15 PM, Pedro Martelletto [EMAIL PROTECTED] wrote: You're all apparently missing out on a great tool called GHome Mover (http://www.brookepeig.com/ghomemover/). I know the guy said he is logging in from remote, but it is definitely worth the effort having X installed

Re: installing ports across multiple machines

2008-08-16 Thread Johan Beisser
On Sat, Aug 16, 2008 at 12:37 PM, David Newman [EMAIL PROTECTED] wrote: Is there some other way to install ports across machines? You'll have to either map the root user (-maproot=user) in exports(5), or build the package (see ports(7)) on the build system, then install it via pkg_add(1) on the

Re: OpenBSD at Defcon 16

2008-08-16 Thread Johan Beisser
On Sat, Aug 16, 2008 at 2:33 PM, Travers Buda [EMAIL PROTECTED] wrote: Are they protecting DefCon from the internet or the internet from DefCon? Does it have to be one or the other?

Re: FYI: Some gloating redditors are currently trolling OpenBSD

2008-08-21 Thread Johan Beisser
On Thu, Aug 21, 2008 at 2:39 PM, ropers [EMAIL PROTECTED] wrote: http://www.openbsd.org/cgi-bin/cvsweb/src/?sortby=;h1 style=position:absolute;top:10px;font-size:150ptblinkOnly 2 Remote bugs/blink/h1 I find it more amusing that it's just injecting HTML in to what's being rendered. CVSWEB has

Re: Howto connect to several wireless network ?

2008-08-28 Thread johan beisser
On Aug 28, 2008, at 12:48 PM, Vadim Zhukov wrote: ifstated(8) + ifconfig(8) (see -M option of ifconfig)? Interestingly, I had a script that would use ifconfig -M to figure out which AP it should use, sorted by rank (first match) and avoiding using generic or brand names. No match, and it

Re: Howto connect to several wireless network ?

2008-08-28 Thread johan beisser
On Aug 28, 2008, at 4:06 PM, Nick Guenther wrote: The trouble with that is that these days you rarely want to just connect to the first open wifi you see (and most wifi isn't open anyway). Well, admittedly, it'd have to be rewritten and revised anyway. Ifstated(8) didn't exist the last time

Mesh wireless routing with OpenBSD

2008-08-30 Thread johan beisser
I've been poking around the Misc archives, and haven't seen anything related to solving this specific issue, at least with my own preferred router software: OpenBSD. So, while researching on implementation details for a community wireless system, I found out about Hazy-Sighted Link State

Re: A place for a perl library in the hierarchy

2008-08-31 Thread Johan Beisser
As a rule, anything not in base is installed to /usr/local. Take the time to make sure your library isn't already in ports (or a package) before installing it. I've recently taken to putting my own packages and manually compiled binaries under /opt/local. It's non-standard, but works for me. -jb

Re: wd0(wdc1:0:0): timeout on openbsd 4.0 macppc

2008-09-01 Thread johan beisser
On Sep 1, 2008, at 11:44 AM, Khalid Schofield wrote: Hi, I'm running openbsd 4.0 (yeh old I know but it's a vital system that I'm replacing but it processes data that makes a lot of money). Better replace the disk tomorrow, then. Or, implement the software on a new system, and take the

Re: question on nat behaviour ....

2008-09-02 Thread johan beisser
On Sep 2, 2008, at 10:08 AM, Stefan Sczekalla wrote: I'm somewhat uncertain on how NAT behaves especially on nearly concurrent rules. e.g. assumption: ( ext_if has two addresse e.g. 82.100.200.1 and and ALIAS 82.100.200.2 ) nat pass on $ext_if form $internal_networks to 192.168.47.11 -

Re: pf to block against DDoS?

2008-09-04 Thread johan beisser
On Sep 4, 2008, at 12:23 PM, Redd Vinylene wrote: I was quite shocked today when I heard I could use pf to block against DDoS attacks, using Stateful Tracking Options, http://www.openbsd.org/faq/pf/filter.html#stateopts. But does anybody have any nice setups of this they'd want to share?

Re: Patching a SSH 'Weakness'

2008-09-10 Thread Johan Beisser
Hell you say. I wear glasses and have been punched. Hard. In the face. Good to know I'll be immune from you. On 9/10/08, Aaron Glenn [EMAIL PROTECTED] wrote: On Wed, Sep 10, 2008 at 7:56 PM, STeve Andre' [EMAIL PROTECTED] wrote: How about people with severe physical problems? I know a C4

Re: Patching a SSH 'Weakness'

2008-09-12 Thread johan beisser
On Sep 12, 2008, at 1:16 PM, Stuart Henderson wrote: Wait, how do you know someone is typing a password inside the session and not just writing a text file or typing arbitrary commands? e.g. when eve's machine that's hijacking the network packets picks up an outgoing SSH connection. I'm not

Re: Patching a SSH 'Weakness'

2008-09-12 Thread johan beisser
On Sep 12, 2008, at 7:02 AM, Kevin Neff wrote: Thanks for all the comments. I think we're all pretty much on the same page. First order of business is to look at how much of a weakness this may be. Then, implement several potential solutions. Finally, test to see if the fixes improved

Re: Patching a SSH 'Weakness'

2008-09-12 Thread johan beisser
On Sep 12, 2008, at 2:28 PM, Stuart Henderson wrote: On 2008/09/12 14:05, johan beisser wrote: I'm not going to say It's impossible. It's not. How about really highly unlikely that Eve will pick up enough useful signal to decrypt which letters are being typed by the user. You might like

Re: Patching a SSH 'Weakness'

2008-09-12 Thread johan beisser
On Sep 12, 2008, at 2:28 PM, Stuart Henderson wrote: On 2008/09/12 14:05, johan beisser wrote: I'm not going to say It's impossible. It's not. How about really highly unlikely that Eve will pick up enough useful signal to decrypt which letters are being typed by the user. You might like

Re: Patching a SSH 'Weakness'

2008-09-12 Thread johan beisser
On Sep 12, 2008, at 3:12 PM, Philip Guenther wrote: On Fri, Sep 12, 2008 at 2:05 PM, johan beisser [EMAIL PROTECTED] wrote: This about security. Being realistic means *not* being optimistic that extracting data will be too hard, too unlikely, only applicable to a subset of people

Re: Patching a SSH 'Weakness'

2008-09-12 Thread johan beisser
On Sep 12, 2008, at 4:08 PM, Damien Miller wrote: There is no reason to believe that keystroke timing attacks will be impossible against protocol 2 where they work against protocol 1. They might just be a little more tricky. I don't think I discounted an updated version of this attack against

Re: Patching a SSH 'Weakness'

2008-09-12 Thread johan beisser
On Sep 12, 2008, at 6:41 PM, Darrin Chandler wrote: On Fri, Sep 12, 2008 at 05:42:08PM -0700, johan beisser wrote: It's just a improbable attack. One that's easily defended against by maintaining the interactive shell/echoback and simply push additional Was it you who said earlier that you

Re: Patching a SSH 'Weakness'

2008-09-13 Thread johan beisser
On Sep 12, 2008, at 9:43 PM, Darrin Chandler wrote: I'm saying what he's wanting to prevent - Eve watching input and output to figure out passwords, based on keyboard timing and typing patterns - isn't really an easy attack for Eve to accomplish without a huge amount of data being

Re: Patching a SSH 'Weakness'

2008-09-13 Thread johan beisser
On Sep 13, 2008, at 3:21 AM, Toni Spets wrote: What about some known patterns like screen (-r) from the start of every session for example in an IRC shell where most people do that first? Could it be used with lots of data to crack open future sessions? I would say yes it's possible. But

Re: Patching a SSH 'Weakness'

2008-09-13 Thread johan beisser
On Sep 13, 2008, at 5:49 AM, steve szmidt wrote: Yes, the US had it for a while but a recent ruling has reversed that. Really? I never heard of it ever being passed in the first place. If it's the case I'm thinking of, the key couldn't be compelled from the guy due to how they were trying

Re: NSA Resources For Rapid Targeting and Routing Analysis

2008-09-19 Thread Johan Beisser
It's always time for that hat. On 9/19/08, Stuart VanZee [EMAIL PROTECTED] wrote: From: Ted Unangst Sent: Friday, September 19, 2008 1:12 PM Cc: Misc OpenBSD Subject: Re: NSA Resources For Rapid Targeting and Routing Analysis On Fri, Sep 19, 2008 at 12:38 PM, Doug Milam [EMAIL PROTECTED]

Re: Dell SC440 hangs

2008-09-26 Thread johan beisser
On Sep 26, 2008, at 9:16 PM, Steve Shockley wrote: I'm running -current from September 9 on a Dell SC440. When I try to do a bulk ports build using dpb, it runs for a couple of hours and hangs. The console screen is blank and doesn't respond to keyboard, but I can still ping the machine. If

Re: what exactly is enc0?

2008-10-16 Thread Johan Beisser
The board's PCI slot has to be molded to support it. If not, a dremmel and a little precision will permit the card to sit in the slot with no problems. Shave a few mm off the PCI slot's side, don't cut the card. . On 10/16/08, J.C. Roberts [EMAIL PROTECTED] wrote: On Wednesday 15 October 2008,

Re: package ports tools, ftp and pf

2008-10-16 Thread Johan Beisser
Either switch to passive ftp, or open your ftp-data port. That should solve some of your problems. On 10/16/08, Kendall Shaw [EMAIL PROTECTED] wrote: I get no reply when I try to subscribe to the pf mailing list, so I'll ask here. I'm running OpenBSD 4.3 stable on amd64. I use what is in the

Re: whitelisting X DSL (dynamic IP)s

2008-10-16 Thread johan beisser
On Oct 16, 2008, at 1:59 PM, Jose Fragoso wrote: So my question is: what is the best way to deal with this kind of situation. Should I reduce the value of whiteexp ? Has anybody thought of way of cleaning such road-warrior addresses on a daily basis ? To be fare, these address should not stay

Re: reliable, dd over simple ip network

2008-10-18 Thread Johan Beisser
You know ssh will compress what goes through its tunnel to begin with, right? So, you can eliminate at least one command there.. On 10/17/08, Girish Venkatachalam [EMAIL PROTECTED] wrote: On 17:29:56 Oct 17, Mike wrote: will work out much faster and better than plain old dd(1). On the

Re: reliable, dd over simple ip network

2008-10-18 Thread johan beisser
On Oct 18, 2008, at 2:23 AM, Matthew Dempsky wrote: I know, but I understood ssh will compress what goes through its tunnel to begin with to imply this is the default behavior. Maybe Johan meant can instead of will. You're right, I did. Sorry for the confusion, I was typing on the

Re: prob d'affichage minicom sur FreeBSD

2008-10-27 Thread Johan Beisser
Problem 1: you're asking about FreeBSD on an OpenBSD mailing list. Problem 2: this list has standardized on English, since that is the common language for most (if not all) of the developers. Problem 3: misc@ doesn't really support minicom directly. Someone may be able to help you anyway,

Re: prob d'affichage minicom sur FreeBSD

2008-10-27 Thread Johan Beisser
No need to appoligize. If you ask in English I'll do my best to help you out. I've been using Soekris hardware for a while now. My french, for what it's worth, is so bad I didn't try too hard to read yours, so the person who should appoligize is me. And I was right in guessing that your English

Re: 4.3 won't boot at all on my laptop

2008-10-28 Thread johan beisser
On Oct 28, 2008, at 4:11 PM, Stevoid wrote: I've burnt the various *.iso files to CD but my laptop doesn't recognise them as bootable but I know whet work. I've begun the installation process on several machines using these disks and they work. Are you 100% certain you burned the iso as

Re: openbsd-current strange keyboard behaviour

2008-10-31 Thread Johan Beisser
Interesting. I had this problem on an IBM 600x, but due to the age of the hardware assumed it was some quirkiness with its ACPI/apm implementation. In the end, I had to use a Windows install to manage the IRQs to stop a conflict between sone subsystems. It helped make the keyboard freeze less

Re: 4.4 sshd didn't start

2008-11-03 Thread johan beisser
On Nov 3, 2008, at 11:28 AM, elflord woods wrote: hello i've just installed 4.4 and answered yes during installation for the default start of sshd yet the sshd didn't start after reboot and then i add enable_sshd=YES in /etc/rc.local but then it complains that it could not load host key

Re: Packet Filter: how to keep device names on hardware failure?

2008-11-07 Thread johan beisser
On Nov 7, 2008, at 9:44 AM, Dave Anderson wrote: Network configuration has bugged me a bit ever since I started using OpenBSD, not just the real security issue that Harald Dunkel points out but general ease of administration issues. For example, on a typical single-NIC system one ought to

Re: Gateway setup

2008-11-08 Thread johan beisser
On Nov 8, 2008, at 4:21 PM, Alfredo Perez wrote: On Sat, Nov 08, 2008 at 04:00:23PM -0800, johan beisser wrote: On Nov 8, 2008, at 3:34 PM, Alfredo Perez wrote: Hi I have the following configuration router/firewall --- OPENBSD BOX - Wireless switch I'm confused. Why isn't

Re: Gateway setup

2008-11-08 Thread johan beisser
On Nov 8, 2008, at 3:34 PM, Alfredo Perez wrote: Hi I have the following configuration router/firewall --- OPENBSD BOX - Wireless switch I'm confused. Why isn't the OpenBSD box the router/firewall? nat.conf shows nat on rl0 from dc0/24 to any - rl0 nat.conf? Do you mean pf.conf?

Re: pf.conf

2008-11-11 Thread johan beisser
On Nov 11, 2008, at 5:38 PM, igor denisov wrote: ??? Would you tell me for sure what ports http, ssl, https, X, and lpt runs on, as well as daemons for them? Why? These are all documented already. Look at /etc/services and man pages.

Re: DNS Server behind Router

2008-11-15 Thread Johan Beisser
Check your bind config. It's likely not configured to respond to non-local network IP addresses. On 11/15/08, Vivek Ayer [EMAIL PROTECTED] wrote: Hey guys, Need some help with DNS queries behind a router. I set up a DNS server in my network and it responds when I'm within my network. I

Re: jdk for amd64!

2008-11-16 Thread Johan Beisser
It may not work with the release version of 4.4. Upgreade to a snapshot and cross your fingers. On 11/16/08, Tony Berth [EMAIL PROTECTED] wrote: On 11/16/08, Stephan Andreas [EMAIL PROTECTED] wrote: Am Sonntag, 16. November 2008 18:32:55 schrieben Sie: Dear Group, I just realised that

Re: apache 1.3.29 + PHP 5.2.6 on OpenBSD 4.4

2008-11-17 Thread Johan Beisser
Did you turn off chroot? Also, why is Starting Pure-FTPd in the log? On 11/16/08, Andrei Pirvan [EMAIL PROTECTED] wrote: Hello The problem I have is that default apache can't load PHP module. PHP was installed from packages (php5-core-5.2.6.tgz), so here is nothing custom made. The only

Re: vpn with an iphone

2008-11-17 Thread Johan Beisser
PoPToP is in ports. On 11/17/08, jul [EMAIL PROTECTED] wrote: Hello has someone setup a vpn tunnel between openbsd and an iphone ? it seems ipsec part is strictly limited to cisco ipsec with a user account/password so not good for us. Else there is pptp and l2tp but i'm not sure there is

Re: smb protocol not supported error using konqueror on 4.4 with samba package

2008-12-21 Thread johan beisser
You need the KDE Samba package. http://www.openbsd.org/4.4_packages/i386/kdesamba-3.5.9.tgz-long.html On Dec 21, 2008, at 10:41 PM, Siju George wrote: Hi, I am running 4.4 and have both kdebase package and samba package installed. $ uname -a OpenBSD risen.hifxchn2.local 4.4 GENERIC#1021

Re: CARP with a single public IP address

2008-12-22 Thread johan beisser
On Dec 22, 2008, at 12:27 PM, Henning Brauer wrote: * Todd T. Fries t...@fries.net [2008-12-05 13:27]: Ironically, IPv6 cannot solve this scenario either, since by definition using ipv6 tends to require a tunnel a few ISPs here (too many) are stupid enough to deal with v6 to the extend of

Re: CARP with a single public IP address

2008-12-22 Thread johan beisser
On Dec 22, 2008, at 5:25 PM, Henning Brauer wrote: yurop is different And one day, the US might stop playing ketchup.

Re: Trouble ticket system suggestions

2008-12-23 Thread Johan Beisser
I don't think any are bankrupt due to RT. On 12/23/08, Ted Unangst ted.unan...@gmail.com wrote: On Tue, Dec 23, 2008 at 6:44 PM, bofh goodb...@gmail.com wrote: Here's a vote for RT. I've installed it, and also used it at F100 companies. Faint praise considering how many F100 companies are

Re: ftp from script

2009-01-03 Thread johan beisser
On Jan 3, 2009, at 7:27 AM, Ed Ahlsen-Girard wrote: You're right. You're so right, in fact, that I'd already changed the code; even I noticed that my original was bad practice. You're doing this in perl, and not using Net::FTP? But my real problem was getting the download to work inside a

Re: REPLY ME IMMEDIATELY

2009-01-13 Thread johan beisser
On Jan 13, 2009, at 6:42 AM, Dan Colish wrote: On Tue, Jan 13, 2009 at 8:11 AM, Arno Kumpel arkump...@yahoo.com wrote: I have a new email address!You can now email me at: arkump...@yahoo.com *- I have the sum of $8.5USD for offshore investment*. I will appreciate it so immersely if you

Re: Port ZFS to OpenBSD

2009-01-15 Thread johan beisser
On Jan 15, 2009, at 9:38 AM, Sevan / Venture37 wrote: The hammer FS seems promising from the BSDtalk Will Matthew did. Outside of a single person who's doing porting (to an unknown OS), there's not been much in the way of updates on the status. It's a BETA filesystem at best, and still

Re: Virtualization, OpenBSD as host

2009-01-16 Thread johan beisser
On Jan 16, 2009, at 11:00 AM, Allie Daneman wrote: I need to run Java on the guest...hence the reason Qemu doesn't work for me. T need virtualization software that runs java on an XP guest. The version of OpenBSD doesn't matter ;) I've been running it since 2.8 and am running current today

Re: Virtualization, OpenBSD as host

2009-01-16 Thread johan beisser
On Jan 16, 2009, at 12:05 PM, Allie Daneman wrote: BingoI don't run this stuff voluntarily...I have to for work. If work is all SAE, and you have metric and SAE tools, do you bring your metric tools on the job site? No, because for the most part they won't fit, and you might strip the

Re: dhclient, resolv.conf

2011-10-20 Thread Johan Beisser
Check dhclient.conf(5) and read about the supersede statement. jb Semt frim my ipHnoe. On Oct 20, 2011, at 8:35, sophia.ort...@googlemail.com wrote: Dear Sirs! I realy do not want that dhclient touch resolv.conf. The recomendation in

Re: dhclient, resolv.conf

2011-10-20 Thread Johan Beisser
On Thu, Oct 20, 2011 at 11:11 AM, sophia.ort...@googlemail.com wrote: Johan Beisser j...@caustic.org wrote: Check dhclient.conf(5) and read about the supersede statement. Thank you very much for your kind answer. Of course I read not only dhclient.conf (5), but also a lot of man pages

Re: Narcicism?

2011-12-01 Thread Johan Beisser
On Thu, Dec 1, 2011 at 8:02 AM, Rares Aioanei bsdlis...@gmail.com wrote: As a citizen of an English-speaking country AND a guru, John, you should at least know how to spell. David's right, you know. You don't need to know how to spell. People have spell checkers these days.

Re: OpenVPN issues on 5.0

2011-12-14 Thread Johan Beisser
On Wed, Dec 14, 2011 at 5:54 PM, Erling Westenvik erling.westen...@gmail.com wrote: After upgrading (re-installing from scratch) my firewall from 4.6 (or 4.7) to 5.0, I have not been able to get OpenVPN back working. Please forgive me for asking here at misc but I have spent two days Googling,

Re: CF Card setup

2011-12-20 Thread Johan Beisser
On Tue, Dec 20, 2011 at 2:41 PM, Jannik Pruitt pruttel...@googlemail.com wrote: Hi everyone. i am brand new purchased my open bsd 5.0 on 11 Nov 2011. I booted the CD on another computer installed every thing on a 32GB CF card. Placed in my old thin client and it booked. But the network card

Where do I buy Lemote Loongson/Godson MIPS hardware? (was Re: Longsoon/Godson MIPS boxes, where to buy?)

2011-12-27 Thread Johan Beisser
On Tue, Dec 27, 2011 at 10:09 AM, Dave U. Random anonym...@anonymitaet-im-inter.net wrote: Are the Longson/Godson MIPS boxes available over the counter yet? If so where is the best place to order one? Thanks. A brief search of the archives gives a few resources. Spelling the architecture right

Re: Longsoon/Godson MIPS boxes, where to buy?

2012-01-02 Thread Johan Beisser
On Mon, Jan 2, 2012 at 10:59 AM, ropers rop...@gmail.com wrote: On 2 January 2012 18:10, Nomen Nescio nob...@dizum.com wrote: I don't rely on anyone's work. Ladies and gentlemen: The great American delusion. Randian delusion. It's not purely American, and never has been.

Re: smartphones and managing openbsd servers

2012-02-19 Thread Johan Beisser
On Sun, Feb 19, 2012 at 7:14 AM, Luke Tymowski l...@veldt.ca wrote: I use iSSH on an iPhone. But only in an emergency when I don't have anything else. I wouldn't make regular use of it. (ie, twice in the last year) I've grown to like Panic's Prompt, and found it does really well with tmux,

Re: smartphones and managing openbsd servers

2012-02-19 Thread Johan Beisser
On Sun, Feb 19, 2012 at 9:14 AM, Anonymous cri...@ecn.org wrote: BlackBerry has built in VPN and you can also buy a few different SSH and SFTP apps. If you're cheap, there's also BBSSH. While it's not perfect, it is under active -if slow- development. As of November 2011, the developer claims

Re: smartphones and managing openbsd servers

2012-02-19 Thread Johan Beisser
On Sat, Feb 18, 2012 at 3:06 PM, Marcos Ariel Laufer mar...@ipversion4.com wrote: What newer smartphones do you recommend for using also as a tool for managing OpenBSD servers (maybe windogs too) ? What experiences had you had with smartphones and OpenBSD managing? Your experience really

Re: smartphones and managing openbsd servers

2012-02-20 Thread Johan Beisser
On Feb 20, 2012, at 8:49, Jan Stary h...@stare.cz wrote: On Feb 20 10:19:48, Daniel mora wrote: I've worked with several different OS and phone brands (Nokia/Symbian, iPhone, HTC/Android). The one I feel more comfortable is the Nokia N900 it runs Maemo 5, is a Debian like Linux, you can use

Re: Snappy Answers to Stupid Questions - WTF?

2012-03-09 Thread Johan Beisser
Sent form my iFoe. On Mar 9, 2012, at 10:19, Nick Holland n...@holland-consulting.net wrote: pitch mode=money benefactor=OpenBSD Hey, if having an OS which takes the quality of its product -- and not much else! -- seriously is important to you, this would be a good time to make a donation to

Re: My OpenBSD 5.0 installation experience (long rant)

2012-03-10 Thread Johan Beisser
On Sat, Mar 10, 2012 at 9:15 AM, Nico Kadel-Garcia nka...@gmail.com wrote: With multiple drives, especially for bulky softraid setups, it might get overwhelming pretty fast. The idea is interesting, and especially helpful if the machine was previously built and the drives ordered differently

Re: pfctl: DIOCADDRULE: Operation not supported by device

2011-05-08 Thread Johan Beisser
On Sun, May 8, 2011 at 3:25 PM, roberth rob...@openbsd.pap.st wrote: Uhum. Sure that's a way to approach this. That's the supported way. With that ammount of support required. Fine with that. I usually build the new kernel, major utilities that require the new kernel as per

  1   2   3   >