Re: Did anybody hear this??

2005-07-26 Thread Siju George
On 7/27/05, Chris Kuethe <[EMAIL PROTECTED]> wrote: > On 7/26/05, Siju George <[EMAIL PROTECTED]> wrote: > > On 7/26/05, Bruno Delbono <[EMAIL PROTECTED]> wrote: > > > +++ Siju George [Tue Jul 26, 2005 at 10:18:56AM +0530]: > > > > > > > how much truth is actually in this article??? > > > > > > It

Problem with NFS, everything freeze

2005-07-26 Thread Adam Papai
Regards. I've got a problem with nfs. There are 2 servers. A and B. On server A I export one dir and start nfsd, portmap, mountd. On server B in mount A's exported dir. I begin to copy approxymately 40Mb up to A from B. At 30Mb the copy brokens and everything freeze on server B. B replyes to pin

Re: openbsd & rpc/xdr

2005-07-26 Thread Artur Grabowski
Gustavo Rios <[EMAIL PROTECTED]> writes: > Hey folks, > > i am doing efforts in order to learn about xdr/rpc. So, i decided to > read some code in src/lib/libc/rpc. I found it to be a little heavy, > cause there too many function invocation overhead between the caller > and the "real" function th

Re: Anyone know of a mavell based dual gigE copper card

2005-07-26 Thread Brad
On Tue, Jul 26, 2005 at 08:06:59PM +0200, Henning Brauer wrote: > * Bill Chmura <[EMAIL PROTECTED]> [2005-07-26 19:48]: > > For dual it only lists the SK-9822 SK-NET GE-T dual port, copper > > adapter, which from threads I read is now realTek chips in the newer > > revs. > > huh? that was linksys

Re: Did anybody hear this??

2005-07-26 Thread Chris Kuethe
On 7/26/05, Siju George <[EMAIL PROTECTED]> wrote: > On 7/26/05, Bruno Delbono <[EMAIL PROTECTED]> wrote: > > +++ Siju George [Tue Jul 26, 2005 at 10:18:56AM +0530]: > > > > > how much truth is actually in this article??? > > > > It makes a lot of sense and is right on. What I take out of this arti

Re: Did anybody hear this??

2005-07-26 Thread Siju George
On 7/26/05, Bruno Delbono <[EMAIL PROTECTED]> wrote: > +++ Siju George [Tue Jul 26, 2005 at 10:18:56AM +0530]: > > > how much truth is actually in this article??? > > It makes a lot of sense and is right on. What I take out of this article is > that having one single firewall (can be any type: ne

Re: Apache icons inside chroot (SOLVED)

2005-07-26 Thread Chris Zakelj
Chris Zakelj wrote: I've done the googling and turned up empty :( I'm trying to get the included icons to show when someone does a directory view, but everything I try comes back with: [Wed Jul 27 01:35:57 2005] [error] [client 192.168.0.3] (13)Permission denied: access to /icons/movie.gif

openbsd & rpc/xdr

2005-07-26 Thread Gustavo Rios
Hey folks, i am doing efforts in order to learn about xdr/rpc. So, i decided to read some code in src/lib/libc/rpc. I found it to be a little heavy, cause there too many function invocation overhead between the caller and the "real" function that do the job. So, i wonder if anybody knows an alter

Apache icons inside chroot

2005-07-26 Thread Chris Zakelj
I've done the googling and turned up empty :( I'm trying to get the included icons to show when someone does a directory view, but everything I try comes back with: [Wed Jul 27 01:35:57 2005] [error] [client 192.168.0.3] (13)Permission denied: access to /icons/movie.gif failed because search

Re: rdr question

2005-07-26 Thread Stuart Henderson
--On 27 July 2005 00:27 +0200, GV wrote: is it possible to have the following: rdr on $ext_if proto tcp from any to any port 80 -> $server re-written as: rdr on $ext_if proto tcp from any to domain.com port 80 -> $server where "$server" an internal web server and "domain.com" a specific doma

rdr question

2005-07-26 Thread GV
Hi list, is it possible to have the following: rdr on $ext_if proto tcp from any to any port 80 -> $server re-written as: rdr on $ext_if proto tcp from any to domain.com port 80 -> $server where "$server" an internal web server and "domain.com" a specific domain name? In general I would like

Re: MySQL socket problem (solved)

2005-07-26 Thread Jonathan Schleifer
Another way is this: # MySQL if [ -x /usr/local/bin/mysqld_safe ]; then echo -n ' mysqld' rm -f /var/www/var/run/mysql/mysql.sock /usr/local/bin/mysqld_safe > /dev/null & sleep 10 ln /var/run/mysql/mysql.sock /var/www/var/run/mysql/mysql.sock fi That's my r

Re: Bridge Interface stop ICMP redirects?

2005-07-26 Thread Steve Williams
Hi, That sounds great! Thanks very much for pointing that out, I would never have thought about sysctl to control that... Cheers, Steve Spruell, Darren-Perot wrote: From: Steve Williams [mailto:[EMAIL PROTECTED] The main network is 192.168.11.0/24. The default gateway for the network

Re: Other Sharp Zauri?

2005-07-26 Thread Stefan Johnson
On 7/26/05, Greg Thomas <[EMAIL PROTECTED]> wrote: > On 7/26/05, STeve Andre' <[EMAIL PROTECTED]> wrote: > >Hopefully this more general question is appropriate here. I've > > noticed sales for the Zaurus SL-5500. Geeks.com has a sale on > > them right now. > > > > I've been thinking about o

Re: Bridge Interface stop ICMP redirects?

2005-07-26 Thread Spruell, Darren-Perot
From: Steve Williams [mailto:[EMAIL PROTECTED] > The main network is 192.168.11.0/24. The default gateway for the > network is the OpenBSD server at 192.168.11.20/32. The router that > can't be changed is 192.168.11.1/32. I figure I can still plug the > 192.168.11.1/32 router into it's own NI

Re: Other Sharp Zauri?

2005-07-26 Thread Greg Thomas
On 7/26/05, STeve Andre' <[EMAIL PROTECTED]> wrote: >Hopefully this more general question is appropriate here. I've > noticed sales for the Zaurus SL-5500. Geeks.com has a sale on > them right now. > I've been thinking about one myself even if I have to stick with Linux. How much are they

Re: isakmpd stops forwarding data over enc0

2005-07-26 Thread Sean Knox
Forgot to mention this is on a machine running a snapshot from May 27th. On Tue, 26 Jul 2005, Sean Knox wrote: > Sometime this morning, our openbsd firewall/VPN server entered a state > where it stopped forwarding encrypted traffic over the enc0 interface. > Incoming > roadwarrior connections e

Bridge Interface stop ICMP redirects?

2005-07-26 Thread Steve Williams
Hi, I had a great design redesign and secure a client's network. Once I got on site, there was a little surprise for me ... I can't re number a router that I had hoped to. Right now, there are multiple gateways on one network (all the gateways are plugged into one switch). They have a defau

Re: Updating packages

2005-07-26 Thread Dimitri Yioulos
On Tuesday July 26 2005 11:09 am, Edd Barrett wrote: > Today 11:09:49 am > > On 26/07/05, Kevin MacPherson <[EMAIL PROTECTED]> wrote: > > Hello, > > > > I'm trying to go from stable to current. > > I have the kernel and userland in place but having trouble updating my > > desktop. When trying to co

isakmpd stops forwarding data over enc0

2005-07-26 Thread Sean Knox
Sometime this morning, our openbsd firewall/VPN server entered a state where it stopped forwarding encrypted traffic over the enc0 interface. Incoming roadwarrior connections establish tunnels fine, but nothing is sent over enc0. There have been no isakmpd or pf configuration changes. There's nothi

Re: Anyone know of a mavell based dual gigE copper card

2005-07-26 Thread Henning Brauer
* Bill Chmura <[EMAIL PROTECTED]> [2005-07-26 19:48]: > For dual it only lists the SK-9822 SK-NET GE-T dual port, copper > adapter, which from threads I read is now realTek chips in the newer > revs. huh? that was linksys or dlink or netgear or one of the usual bandits. The SysKonnect stuff was an

Other Sharp Zauri?

2005-07-26 Thread STeve Andre'
Hopefully this more general question is appropriate here. I've noticed sales for the Zaurus SL-5500. Geeks.com has a sale on them right now. My question is if it makes sense for efforts to support any of the other units besides the C3000 and C3100. I know very little about the Zaurus in

Anyone know of a mavell based dual gigE copper card

2005-07-26 Thread Bill Chmura
>From what everyone told me last time, the SK stuff is good. So I can fit my network together with a few dual cards, trunk the smaller stuff together and then be on my way. Trouble is I cannot find (for the life of me) anything dual based on the marvell stuff. The obsd man page http://www.openbs

chrooted httpd and

2005-07-26 Thread Vlad Ciubotariu
Which path should I use in a directive in the config file for a chrooted httpd? In both cases below, changing Deny to Allow achieves the desired effect. thanks! AllowOverride FileInfo AuthConfig Limit Options Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec ExecCGI

Re: Did anybody hear this??

2005-07-26 Thread Jurjen Oskam
On Tue, Jul 26, 2005 at 11:20:35AM -0500, Terry Tyson wrote: > I only have one firewall but it is three legged, the DMZ box and the > LAN are seperate. Is this what you mean by "different (protected) > networks"? Everything depends on your particular situation and needs, but the general idea is t

Re: Did anybody hear this??

2005-07-26 Thread Spruell, Darren-Perot
From: Terry Tyson [mailto:[EMAIL PROTECTED] > > Generally, that is a bad situation. So, the advice to put > different types > > of machines into different (protected) networks is good. > > I only have one firewall but it is three legged, the DMZ box and the > LAN are seperate. Is this what you me

Re: Did anybody hear this??

2005-07-26 Thread Terry Tyson
On Tue, Jul 26, 2005 at 03:20:05PM +0200, Jurjen Oskam wrote: snip > It does look like the "before" situation in the article is one where there > is only one firewall that separates the LAN from the Internet, and > everything on the LAN is treated equally, workstations and servers alike. > > Gen

Re: Updating packages.

2005-07-26 Thread Edd Barrett
On 26/07/05, Kevin MacPherson <[EMAIL PROTECTED]> wrote: > Hello, > > I'm trying to go from stable to current. > I have the kernel and userland in place but having trouble updating my > desktop. > When trying to compile gnome I'm getting errors on the dependencies > conflicting with older versio

Updating packages.

2005-07-26 Thread Kevin MacPherson
Hello, I'm trying to go from stable to current. I have the kernel and userland in place but having trouble updating my desktop. When trying to compile gnome I'm getting errors on the dependencies conflicting with older versions of themselves? Is there anyway to tell the make command to force rein

Re: Did anybody hear this??

2005-07-26 Thread Jurjen Oskam
On Mon, Jul 25, 2005 at 10:05:32PM -0700, Bruno Delbono wrote: > > how much truth is actually in this article??? > It makes a lot of sense and is right on. What I take out of this article is > that having one single firewall (can be any type: network, application etc.) > at the perimeter doesn't s

Re: Create my own shell?

2005-07-26 Thread Jon Drews
On 7/25/05, Jon Drews <[EMAIL PROTECTED]> wrote: > On 7/25/05, Abel Talaversn Estevez <[EMAIL PROTECTED]> wrote: > > I need to create a particular but simple shell for a firewall running > > OpenBSD > > 3.6. The idea is create a user whose shell is a very limited one. > Hi: > > Operating ksh i

spamd greylisting, masking on /24

2005-07-26 Thread Stuart Henderson
I seem to remember seeing a patch to spamd that makes greylisting only look at the first /24 of the address, but I can't find it after fairly extensive searching with google/marc. Does anyone have a copy they could point me at? The whitelists on puremagic.com (on which greylisting.org's lists

Re: Disable IPv6 on 3.7

2005-07-26 Thread Henning Brauer
* Russell J. Wood <[EMAIL PROTECTED]> [2005-07-26 02:36]: > Yes, one can by commenting out `OPTION INET6' in the kernel > configuration. the question was specifically (and for good reasons) for doing so WITHOUT compiling a custom kernel. > And one would want to do that if they don't use, IPv6, s

Re: Disable IPv6 on 3.7

2005-07-26 Thread Adam Papai
knitti said: >> > What is it that you think you're gaining from this? >> >> A system without IPv6. > > you won't. you'll get a kernel without IPv6. and a broken system. knitti's right. But why do you so much against Ipv6? -- Adam Papai D i g i t a l Influence E-mail: [EMAIL PROTECTED] Phone: +

Re: MySQL socket problem (solved)

2005-07-26 Thread Edd Barrett
> chown _mysql:_mysql /var/www/var/run/mysql/ Because mine was on my laptop (which isnt connected to the network when I run mysql. Infact I hardly ever run mysql), I took the shortcut 'mysqld_safe --user=root' to start it. You are right, the mysql user will have to have access Edd

Re: Disable IPv6 on 3.7

2005-07-26 Thread Russell J. Wood
On Tue, Jul 26, 2005 at 03:05:37AM +0200, knitti wrote: > On 7/26/05, Russell J. Wood <[EMAIL PROTECTED]> wrote: > > On Mon, Jul 25, 2005 at 08:42:29PM -0400, Brad wrote: > > > Go ahead if you want to use a custom un-supported system. > > > > Thanks, I will. > > > > > What is it that you think yo

Re: MySQL socket problem (solved)

2005-07-26 Thread Uwe Dippel
On Thu, 21 Jul 2005 13:22:43 +0300, Tomas wrote: > BTW Edd, I liked your trick :) Me, too !! maybe something wrong still on my side, though; because the trick only works with an additional chown _mysql:_mysql /var/www/var/run/mysql/ in my case, otherwise I get 050726 16:57:22 mysqld started

Re: carp failover on DSL and Cable connection?

2005-07-26 Thread Stephen Marley
On Mon, Jul 25, 2005 at 08:57:06PM -0700, Jonathan Walther wrote: > >You could run ospfd (or quagga) on each host. (You'll need to use gif > >or gre tunnels to give a multicast capable link over the vpns). Make > >the dsl tunnel the lower cost route and ospf will change the routing > >tables to use

Re: HP DL145 G2?

2005-07-26 Thread Johan M:son Lindman
On Monday 25 July 2005 16.52, Mike Shaw wrote: > Hey folksI'm about to build another obsd server for some pseudo-mission > critical work, and HP is kind of our standard now. I've verified with > someone off list that a DL140's run well, but for performance and > philosophical reasons I'm choosi