Re: Hotmail (was Re: Insider's scoop: Why FreeBSD is dying)

2002-08-18 Thread Wouter Van Hemel

On Sun, 2002-08-18 at 19:34, Terry Lambert wrote:
 
 [...]
 
 So if they were widely deployed, you would expect maybe 8 VIPs
 per colocation facility... but you would not expect them to be
 in a large, contiguous netblock: you'd expect them to be 8 here,
 and 8 there, etc., based on geographic location.
 

Microsoft seems to like putting everything in the same subnet - remember
their nameserver incident a while ago?

http://www.theregister.co.uk/content/archive/16321.html

Painfully hilarious. I wonder if they hire MCSE's themselves...




To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-hackers in the body of the message



Re: release variability

2002-08-10 Thread Wouter Van Hemel

On Sat, 2002-08-10 at 15:13, Colin Percival wrote:
 [...]
This raises two questions:
 1. Is there any way I can set up my system to consistently build the same 
 world?  The user and host are of course easy to fix; I'd consider running a 
 daemon to reset my clock every second in order to keep the time stamps 
 consistent, except that I don't think it would work, and I worry that it 
 might break `make` anyway.

I think what you're trying to do here is impossible. Every condition would
have to be the same as on the initial build machine, and even then, your
time will not always match. Whatever you're trying to do, it seems like
the wrong solution to me...

 2. Is this really a desireable state of affairs at all?  As it is, it is 
 practically impossible for someone to `make release` on their own and 
 compare their version to the official version to ensure that the build was 
 correct.  Reproducibility and verifiability are rather important matters 
 when it comes to security.
 

There are better ways to check the integrity of the code. The most simple
way I can think of, is if you e.g. install from a cd, check the md5sum.
(Maybe a md5sum/pgp key could be distributed with the announcement
itself?) If your code is clean, so will be your compiled software. Except
when you have something (somebody?) in resident memory that screws it
after installation, but this is unlikely if you just reinstalled the whole
machine, and there's nothing you can do about that either way.

If you sync from source and want to build a full release when one is made
instead of downloading an iso (which is a pretty reasonable and common
thing to do, I think), you have AFAIK no way to check if the source has
not been tampered with.

It might be better to download the release source packages then, those
contain md5sums: 

  ftp://ftp.freebsd.org/pub/FreeBSD/releases/i386/4.6-RELEASE/src/

,,, but this seems like something you don't want to do?


  wouter




To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-hackers in the body of the message



Re: unsubscribe

2002-08-09 Thread Wouter Van Hemel

On Fri, 2002-08-09 at 19:48, Terry Lambert wrote:
 It's a means of collecting email addresses, like the joke of the
 day subscriptions with reply addresses that don't go to the
 joke of the day site they pretend to be from.
 
 The expectation is that people will reply with information on
 how to unsubscribe, thereby validating their emial addresses...
 just like you do if you try to unsubscribe from the mailing
 list that you never subscribed to in the first place.
 

Why not catch (un)subscribe's to mailing lists? That wouldn't only stop
people fishing for addresses, but also newbies and distracted people...





To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-hackers in the body of the message



Re: dhcp problems with my ISP

2002-08-04 Thread Wouter Van Hemel

On Sun, 2002-08-04 at 15:23, Scott M. Nolde wrote:
 Wouter Van Hemel([EMAIL PROTECTED])@2002.08.03 23:23:11 +:
  On Sat, 2002-08-03 at 12:17, Terry Lambert wrote:
   Bri wrote:
Hi I have a Cable and have a Cable Modem for my internet connection of which
you use dhcp to obtain an IP address great but this only seems to work
successfully on a Windows machine I've registered all the other mac
addresses of unix boxes and Apple macs I have and they seem to have alot of
difficulty obtaining IP addresses. Especially the UNIX machines which run
FreeBSD 4.5-RELEASE or 5.0-CURRENT on sparc64 at the moment the sparc64 box
which is a Sun Ultra 5 which is the worst for detecting an IP with dhclient.

What I would really like to know is what does the windows dhcp do
differently than say dhclient.

I would be very interested to know as I would like a UNIX machine that can
maintain and IP address.
   
   Use the same exact NIC.
   
  
  Wouldn't it be possible to change the mac address? A friend of mine used
  this method once to obtain a new ip address from the server when he was
  being DoS'ed on his home ip by some irc kiddies.
  
  Ofcourse, you'd have to change the other cards' mac too, if possible.
  
   [...]
   
  
  Regards,
  
wouter
  
 
 here's the way to change the MAC on freeBSD.  I had to do it a few days
 ago.  No big deal, this is VERY simple.
 
 A little background: If you read /etc/rc.network you'll find, before the
 ethernet interfaces are started a particular file is sought in /etc:
 start_if.nic:
   for ifn in ${network_interfaces}; do
 if [ -r /etc/start_if.${ifn} ]; then
 . /etc/start_if.${ifn}
 eval showstat_$ifn=1
 fi
 
 So, for me it was /etc/start_if.fxp1.  What I had to put in this file was
 the command to change the MAC to the MAC of the old NIC.
 
 #!/bin/sh
 # force fxp1 on dual card to 00:a0:cc:28:89:82
 ifconfig fxp1 ether 00a0cc288982
 

Oh... that's even more simple than using arp(1). Does it set the card, or
just the kernel interface? I suspect the latter...

 And that took care of it.  I don't need to call my cable co to reprovision
 the cablemodem for each computer.  I just change the MAC at the FreeBSD
 firewall.
 
 And that's how you do it in FreeBSD.
 
 - Scott
 -- 
 Scott Nolde
 GPG Key 0xD869AB48
 




To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-hackers in the body of the message



Re: dhcp problems with my ISP

2002-08-03 Thread Wouter Van Hemel

On Sat, 2002-08-03 at 12:17, Terry Lambert wrote:
 Bri wrote:
  Hi I have a Cable and have a Cable Modem for my internet connection of which
  you use dhcp to obtain an IP address great but this only seems to work
  successfully on a Windows machine I've registered all the other mac
  addresses of unix boxes and Apple macs I have and they seem to have alot of
  difficulty obtaining IP addresses. Especially the UNIX machines which run
  FreeBSD 4.5-RELEASE or 5.0-CURRENT on sparc64 at the moment the sparc64 box
  which is a Sun Ultra 5 which is the worst for detecting an IP with dhclient.
  
  What I would really like to know is what does the windows dhcp do
  differently than say dhclient.
  
  I would be very interested to know as I would like a UNIX machine that can
  maintain and IP address.
 
 Use the same exact NIC.
 

Wouldn't it be possible to change the mac address? A friend of mine used
this method once to obtain a new ip address from the server when he was
being DoS'ed on his home ip by some irc kiddies.

Ofcourse, you'd have to change the other cards' mac too, if possible.

 [...]
 

Regards,

  wouter




To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-hackers in the body of the message