Re: DDOS Attack!!!who can help me?

2005-07-28 Thread Sean Knox
jeff wrote: Sean Knox wrote: The only people who can help is your ISP. Talk to them and hopefully they can trace the attack upstream. I once added this to pf.conf to mitigate a DDoS. It appeared to have worked, but it may have been a placebo effect ;) set optimization aggressive set ti

=??B?RERPUyBBdHRhY2shISF3aG8gY2FuIGhlbHAgbWU/?=

2005-07-28 Thread =??B?amtpbmcx?=
thank you Matt and jeff ,you are right. now # tcpdump tcp port www # 14:15:07.899030 167.189.45.0.15724 > XXX.XXX.X.XXX.www: S 1731350873:1731350873(0) win 16384 14:15:07.899132 23.138.127.48.17439 > XXX.XXX.X.XXX.www: S 1731350793:1731350793(0)

Re: DDOS Attack!!!who can help me?

2005-07-28 Thread jeff
Sean Knox wrote: The only people who can help is your ISP. Talk to them and hopefully they can trace the attack upstream. I once added this to pf.conf to mitigate a DDoS. It appeared to have worked, but it may have been a placebo effect ;) set optimization aggressive set timeout tcp.first

Re: DDOS Attack!!!who can help me?

2005-07-28 Thread Sean Knox
The only people who can help is your ISP. Talk to them and hopefully they can trace the attack upstream. sk

=??B?RERPUyBBdHRhY2shISF3aG8gY2FuIGhlbHAgbWU/?=

2005-07-28 Thread =??B?amtpbmcx?=
# tcpdump tcp port www # 12:23:56.149316 44.199.41.224.57807 > XXX.XXX.X.XXX.www: S 1731400694:1731400694(0) win 16384 12:23:56.149422 189.51.106.160.64931 > XXX.XXX.X.XXX.www: S 1731400698:1731400698(0) win 16384 12:23:56.149541 193.133.170.

Re: OpenBSD vs FreeBSD (network performance)

2005-07-28 Thread Ted Unangst
On Thu, 28 Jul 2005, Marcelo de Souza wrote: > Or, what would be a good method for tests regarding this subject? install openbsd. put machine on network. does it work? -- And that's why Fischer would have beaten Kasparov.

Re: 1U opteron servers from tier-1 vendors?

2005-07-28 Thread bofh
On 7/28/05, Bob Beck <[EMAIL PROTECTED]> wrote: > > > > Have anyone bought any servers from a Tier-1 (ibm, hp, dell[1]) recently > > that is opteron based, that works fine with openbsd? > > The IBM's I bought are all 325's, I will have a 326 shortly. Can't find any, their website states that 325'

Need help to access files. Please help!

2005-07-28 Thread Doni & Dee Witt
Send data to :[EMAIL PROTECTED], PLEASE!

Re: 1U server recommendation

2005-07-28 Thread Gustavo Rios
And about performance reason? Thanks once more. On 7/28/05, Theo de Raadt <[EMAIL PROTECTED]> wrote: > > * Shawn K. Quinn <[EMAIL PROTECTED]> [2005-07-28 14:58]: > > > On Thu, 2005-07-28 at 17:36 -0300, Gustavo Rios wrote: > > > > Why do you say that? performance and security implications > >

Re: Fwd: OpenBSD 3.7 on Soekris (w/ httpd)

2005-07-28 Thread Marti Martinez
Once again I'm reminded why I rarely participate in [EMAIL PROTECTED] Perhaps someone will find this first part of this thread useful, but beyond that I'm calling it quits. Marti On 7/28/05, Adam <[EMAIL PROTECTED]> wrote: > On Thu, 28 Jul 2005 13:56:28 -0700 Marti Martinez > <[EMAIL PROTECTED]>

Re: 1U server recommendation

2005-07-28 Thread Theo de Raadt
> * Shawn K. Quinn <[EMAIL PROTECTED]> [2005-07-28 14:58]: > > On Thu, 2005-07-28 at 17:36 -0300, Gustavo Rios wrote: > > > Why do you say that? performance and security implications > > > > amd64 supports W^X in hardware, i386 doesn't. > > > > Bingo. You got it. This is hogwash. Our

Re: 1U server recommendation

2005-07-28 Thread Bob Beck
* Shawn K. Quinn <[EMAIL PROTECTED]> [2005-07-28 14:58]: > On Thu, 2005-07-28 at 17:36 -0300, Gustavo Rios wrote: > > Why do you say that? performance and security implications > > amd64 supports W^X in hardware, i386 doesn't. > Bingo. You got it. -Bob

Re: 1U opteron servers from tier-1 vendors?

2005-07-28 Thread Bob Beck
> Have anyone bought any servers from a Tier-1 (ibm, hp, dell[1]) recently > that is opteron based, that works fine with openbsd? The IBM's I bought are all 325's, I will have a 326 shortly. > > Additionally, any success with hardware raid? I realize you can use > non-onboard PCI cards, b

Re: OpenBSD vs FreeBSD (network performance)

2005-07-28 Thread Bob Beck
> Btw. FreeBSD is doing bind so fast because they have random ephemeral > ports disabled by default. Translation for those who don't get that: They sacrifice security for performance by default, making many tcp attacks easier. They then have a knob to turn on better security. -Bo

Re: 1U server recommendation

2005-07-28 Thread Richard Welty
On Thu, 28 Jul 2005 11:38:31 -0600 Bob Beck <[EMAIL PROTECTED]> wrote: > We are running production web servers on OpenBSD running on IBM > 325E's as well as Sun V20Z's, running OpenBSD. We've had decent luck > with both the i386 and amd64 distro on those. I have used a demo HP > with good s

Re: segfaults in OpenBSD 3.7

2005-07-28 Thread Nick Holland
Hannah Schroeter wrote: > Hello! > > On Thu, Jul 28, 2005 at 02:03:49PM -0400, Jason Crawford wrote: >>There is a note somewhere on the OpenBSD website about installing on >>machines with little ram. Basically, you need to drop to a shell, >>manually enable swap, then go back to the installation p

1U opteron servers from tier-1 vendors?

2005-07-28 Thread bofh
Hi, I've been following the discussion about opteron servers, and when I am finally allowed to go get a few servers, I find that HP and IBM have both changed their servers. IBM's eserver 325 is now 326, and HP's DL145 G1 is now the G2. Have anyone bought any servers from a Tier-1 (ibm, hp, dell[1

Re: tcpdump | more doesn't produce output

2005-07-28 Thread Ober Heim
use tethereal(1) :D "I am not your puppet. Since when? Now get your spongy ping ass out there and dance for the cameras" -Nora in (Death to Smoochy) On Fri, 29 Jul 2005, Mike Belopuhov wrote: Date: Fri, 29 Jul 2005 02:55:43 +0400 From: Mike Belopuhov <[EMAIL PROTECTED]> To: Michael Favinsky

Re: 1U server recommendation

2005-07-28 Thread Martin Schröder
On 2005-07-28 13:21:06 -0600, Bob Beck wrote: > BTW, my one bitch about the v20z is sun are a bunch of retards > and put all the vents on the top and bottom, so I'm reluctant to rack > them one on top of the other. The only thing from Sun on the v20z is the label (and an os which you won't u

Re: Recommendet (P)ATA-Controller for Raidframe

2005-07-28 Thread Stuart Henderson
--On 28 July 2005 20:53 +0200, Ulrich Kahl wrote: Stuart Henderson schrieb: Oh, I have one of those. Unless it's a late revision, using the on-board cache only the first 128mb RAM is cacheable (K6-III helps on this motherboard due to the on-chip cache). And don't forget, if your filesystems a

Re: tcpdump | more doesn't produce output

2005-07-28 Thread Mike Belopuhov
On Thu, Jul 28, 2005 at 15:26 -0700, Michael Favinsky wrote: > Has anyone tried a tcpdump | more ? Or a tcpdump | grep? > > When I try to pipe tcpdump output to either more or grep I don't get any > network data output. Anyone have any explanation for this behavior? > use stdout line buffered mod

Re: tcpdump | more doesn't produce output

2005-07-28 Thread Michael Favinsky
That did it. RTFM :) Thanks. -Original Message- From: Stuart Henderson [mailto:[EMAIL PROTECTED] Sent: Thursday, July 28, 2005 3:47 PM To: Michael Favinsky; misc Subject: Re: tcpdump | more doesn't produce output --On 28 July 2005 15:26 -0700, Michael Favinsky wrote: > Has anyone trie

Re: tcpdump | more doesn't produce output

2005-07-28 Thread Stuart Henderson
--On 28 July 2005 15:26 -0700, Michael Favinsky wrote: Has anyone tried a tcpdump | more ? Or a tcpdump | grep? It sounds like you want to make the output line-buffered, see tcpdump(8).

Re: tcpdump | more doesn't produce output

2005-07-28 Thread Sven Ingebrigt Ulland
On Thu, Jul 28, 2005 at 03:26:23PM -0700, Michael Favinsky wrote: > Has anyone tried a tcpdump | more ? Or a tcpdump | grep? > > When I try to pipe tcpdump output to either more or grep I don't get any > network data output. Anyone have any explanation for this behavior? tcpdump -l. see the man p

tcpdump | more doesn't produce output

2005-07-28 Thread Michael Favinsky
Has anyone tried a tcpdump | more ? Or a tcpdump | grep? When I try to pipe tcpdump output to either more or grep I don't get any network data output. Anyone have any explanation for this behavior? This issue's on OpenBSD 3.6. Here's a dmesg from the host in case it helps. OpenBSD 3.6 (GENERIC)

Unsubscribed from Zeus newsletters

2005-07-28 Thread Zeus Newsletter
Thank you for contacting us. As per your request, you will receive no further newsletters from Zeus Technology. If you have received this message in error, or would like to continue to receive newsletters from Zeus, please reply to this email. Zeus receives resounding endorsements for innova

Re: OpenBSD vs FreeBSD (network performance)

2005-07-28 Thread Claudio Jeker
On Thu, Jul 28, 2005 at 04:23:16PM -0500, Ober Heim wrote: > http://www.linbsd.org/bench says it all to me :D > Please no, Fefes benchmark does not measure network performance. The only network related benchmark in that suite is the bind test and this one has nothing todo with network performance

Re: OpenBGPD - advertised-routes

2005-07-28 Thread Claudio Jeker
On Thu, Jul 28, 2005 at 04:54:21PM -0400, G Douglas Davidson wrote: > I'm having an issue announcing a "NO_EXPORT" network to our upstream > and I'd like a way to prove that I am in fact sending the network in > question (if in fact I am). It seems the "log updates" does not apply > to sent upd

Re: amdpm in GENERIC

2005-07-28 Thread Stephan Tesch
Am Donnerstag, 28. Juli 2005 23:43 schrieben Sie: Hi Art, > > I was just wondering why amdpm isnt included in GENERIC. Are there any > > issues one should be aware of? Or is it just that noone uses it at all? > > Why should it be? You might have guessed this, but for people with appropriate hard

Re: Fwd: OpenBSD 3.7 on Soekris (w/ httpd)

2005-07-28 Thread Adam
On Thu, 28 Jul 2005 13:56:28 -0700 Marti Martinez <[EMAIL PROTECTED]> wrote: > Like I said, I'm willing to believe that GENERIC works. But your "1) > Install OpenBSD" suggestion is unrealistic. I'm installed OpenBSD > hundreds of times, and am reasonably good at it. This is, however, the > first t

Re: amdpm in GENERIC

2005-07-28 Thread Artur Grabowski
Stephan Tesch <[EMAIL PROTECTED]> writes: > Hi guys, > > I was just wondering why amdpm isnt included in GENERIC. Are there any issues > one should be aware of? Or is it just that noone uses it at all? Why should it be? //art

Latest newsletter from Zeus Technology

2005-07-28 Thread Jock Busuttil
Please find below a copy of this month's Zeus newsletter. I hope you find it informative, and if you have any questions, please feel free to email me back. It's been a busy month for us here at Zeus. We've announced the launch of a new range of ZXTM appliances (more detail below), and on top of

Re: suggested /etc/skel/ modifications

2005-07-28 Thread Dave Feustel
> suggested /etc/skel/ modifications The reason I proposed a umask of 077 is that I discovered just a few files scattered through my directories with owner:group of root:daf (I'm daf, the only user of this system). All the other files in my directories are daf:daf, and I cannot imagine any scena

Re: suggested /etc/skel/ modifications

2005-07-28 Thread jimmy
Quoting Moritz Grimm <[EMAIL PROTECTED]>: > >>shell server. Who says that the admin is any more trustworthy than some > >>other, regular users? > > > > They are not, but most of the time they give you confidential information > > that you must use on that box that you use for stuff other users may

Re: OpenBSD vs FreeBSD (network performance)

2005-07-28 Thread Ober Heim
http://www.linbsd.org/bench says it all to me :D "I am not your puppet. Since when? Now get your spongy ping ass out there and dance for the cameras" -Nora in (Death to Smoochy) On Thu, 28 Jul 2005, Marcelo de Souza wrote: Date: Thu, 28 Jul 2005 17:44:45 -0300 From: Marcelo de Souza <[EMAIL

Re: OpenBSD vs FreeBSD (network performance)

2005-07-28 Thread STeve Andre'
On Thursday 28 July 2005 16:44, Marcelo de Souza wrote: > Hi there, > > Can anybody point me any technical documentation that compares > OpenBSD vs FreeBSD in terms of network performance? > > Or, what would be a good method for tests regarding this subject? > And what about the appropriate t

Re: 1U server recommendation

2005-07-28 Thread Shawn K. Quinn
On Thu, 2005-07-28 at 17:36 -0300, Gustavo Rios wrote: > Why do you say that? performance and security implications amd64 supports W^X in hardware, i386 doesn't. -- Shawn K. Quinn <[EMAIL PROTECTED]>

Re: Fwd: OpenBSD 3.7 on Soekris (w/ httpd)

2005-07-28 Thread Marti Martinez
Like I said, I'm willing to believe that GENERIC works. But your "1) Install OpenBSD" suggestion is unrealistic. I'm installed OpenBSD hundreds of times, and am reasonably good at it. This is, however, the first time I've done an install on a serial only system, and my post was not a complaint abou

Re: OpenBSD vs FreeBSD (network performance)

2005-07-28 Thread Timothy Donahue
There is not likely to be an up-to-date set of *reliable* performance tests that you can just look at on the web. The best thing you can do is make your own based on the criteria that you are trying to compare them on, then install FreeBSD and OpenBSD and see what works better for your specific

OpenBGPD - advertised-routes

2005-07-28 Thread G Douglas Davidson
I'm having an issue announcing a "NO_EXPORT" network to our upstream and I'd like a way to prove that I am in fact sending the network in question (if in fact I am). It seems the "log updates" does not apply to sent updates, just received. Any suggestions appreciated. -- G. Douglas Davidson

Re: Fwd: OpenBSD 3.7 on Soekris (w/ httpd)

2005-07-28 Thread Adam
On Thu, 28 Jul 2005 13:20:30 -0700 Marti Martinez <[EMAIL PROTECTED]> wrote: > The most obvious problem I had was that /dev/com0 either didn't exist > or didn't work properly, so I'd lose serial access once the kernel > booted. with the new config, /dev/com0 worked, so it was trivial to > get the

Re: suggested /etc/skel/ modifications

2005-07-28 Thread Moritz Grimm
[EMAIL PROTECTED] wrote: Ever heart of a multiuser system where one user shouldn't be able to acces the files of another user? Not all users are thinking about this issue and many forget to change the modes for confidential files. IMO, But keeping confidential files on "true" multiuser systems

OpenBSD vs FreeBSD (network performance)

2005-07-28 Thread Marcelo de Souza
Hi there, Can anybody point me any technical documentation that compares OpenBSD vs FreeBSD in terms of network performance? Or, what would be a good method for tests regarding this subject? And what about the appropriate tools? Thank you in advance. -- Marcelo de Souza

Re: 1U server recommendation

2005-07-28 Thread Gustavo Rios
Sorry for my questions, but: On 7/28/05, Bob Beck <[EMAIL PROTECTED]> wrote: > * Marco Peereboom <[EMAIL PROTECTED]> [2005-07-27 19:52]: > > I run heaps off Dell PowerEdge 1550, 1650, 1750 and 1850 without issues. > >FWIW I also run a pile of dell 650, 750, 1650, 1750 machines > with good

Re: Fwd: OpenBSD 3.7 on Soekris (w/ httpd)

2005-07-28 Thread Marti Martinez
The most obvious problem I had was that /dev/com0 either didn't exist or didn't work properly, so I'd lose serial access once the kernel booted. with the new config, /dev/com0 worked, so it was trivial to get the serial access working throughout the entire boot to login process. I had other problem

Re: Fwd: OpenBSD 3.7 on Soekris (w/ httpd)

2005-07-28 Thread Adam
On Thu, 28 Jul 2005 11:56:03 -0700 Marti Martinez <[EMAIL PROTECTED]> wrote: > OK, in that case, no one has posted easily accessible information on > how to make GENERIC work with Soekris. I spent a few hours searching > the web, the archives, etc and doing several reinstalls. In the end, > recomp

Skey login logging

2005-07-28 Thread Will H. Backman
Is there a way to get the system to report the auth mechanism (skey) used when there is a failed login? -- Will Backman - Network Administrator Coastal Enterprises, Inc. http://www.ceimaine.org

Re: 1U server recommendation

2005-07-28 Thread Bob Beck
> At work I don't really have a choice -- we can either buy Sun or > Dell, or spend weeks justifying not using the approved vendors. > Then my reccomendation under your supported hardware agreement is exactly what I use: sun V20Z server Dell Perc4/DC raid card

Re: suggested /etc/skel/ modifications

2005-07-28 Thread Jonathan Schleifer
Timothy Donahue <[EMAIL PROTECTED]> wrote: > This is fairly easy to customize since the adduser command is just a > perl script. (Hint: I believe that line 1143 in 3.7 might be a good > place to start looking.) I know, just wanted to say that changing it is not stupid. ;) Moritz Grimm <[EMA

Re: segfaults in OpenBSD 3.7

2005-07-28 Thread Sharad Birmiwal
i remember i had read somewhere that it will run well on 16MB ram as long as i don't use X applications. i'll run memtest86+ too and see what comes of it. sharad birmiwal On 7/29/05, Hannah Schroeter <[EMAIL PROTECTED]> wrote: > Hello! > > On Thu, Jul 28, 2005 at 02:03:49PM -0400, Jason Crawford

Re: Recommendet (P)ATA-Controller for Raidframe

2005-07-28 Thread Ulrich Kahl
Edd Barrett schrieb: The raid will use 3 or 4 identical harddrives. Is that mirrored? If so, heres a gotcha: http://www.openbsd.org/cgi-bin/man.cgi?query=raidctl&sektion=8 "Note as well that RAID 1 sets are currently limited to only 2 components. At present, n-way mirroring is not possible.

Re: OpenBSD 3.7 on Soekris (w/ httpd)

2005-07-28 Thread Marti Martinez
the following lines are what I added to the NET4801 config file that I found on the web: option SYSVMSG # System V-like message queues option SYSVSEM # System V-like semaphores option SYSVSHM # System V-like memory sharing These were in an archiv

Re: segfaults in OpenBSD 3.7

2005-07-28 Thread Sharad Birmiwal
i'll try getting more ram although i'm not sure i'll find edoram that easily here. i know i have 32MB more ram somewhere in my closet, will add that too. thanks sharad birmiwal On 7/28/05, Hannah Schroeter <[EMAIL PROTECTED]> wrote: > Hello! > > On Thu, Jul 28, 2005 at 11:17:59PM +0530, Sharad B

Re: 1U server recommendation

2005-07-28 Thread Brandon Mercer
Kevin wrote: >On 7/28/05, Bob Beck <[EMAIL PROTECTED]> wrote: > > >> I don't have an 1850 because by the time they came out, >>Dell didn't have an amd64 based server, and Sun and IBM did, so we >>switched. Prior to that I bought lots of dell stuff and had good >>experiences with them. (sti

Re: Fwd: OpenBSD 3.7 on Soekris (w/ httpd)

2005-07-28 Thread Marti Martinez
OK, in that case, no one has posted easily accessible information on how to make GENERIC work with Soekris. I spent a few hours searching the web, the archives, etc and doing several reinstalls. In the end, recompiling with the NET4801 config gave me a no-problems install, and tweaking a few lines

Re: Recommendet (P)ATA-Controller for Raidframe

2005-07-28 Thread Ulrich Kahl
Stuart Henderson schrieb: --On 27 July 2005 15:13 +0200, Ulrich Kahl wrote: I plan to set up a fileserver using RAIDframe - I can't afford a hardware RAID-controller like Megaraid i4 (around EURO 280,--) and used ones are impossible to get, so I will use the software version. As long as you'

Re: 1U server recommendation

2005-07-28 Thread Kevin
On 7/28/05, Bob Beck <[EMAIL PROTECTED]> wrote: >I don't have an 1850 because by the time they came out, > Dell didn't have an amd64 based server, and Sun and IBM did, so we > switched. Prior to that I bought lots of dell stuff and had good > experiences with them. (still do with their disk

Re: segfaults in OpenBSD 3.7

2005-07-28 Thread Hannah Schroeter
Hello! On Thu, Jul 28, 2005 at 02:03:49PM -0400, Jason Crawford wrote: >There is a note somewhere on the OpenBSD website about installing on >machines with little ram. Basically, you need to drop to a shell, >manually enable swap, then go back to the installation process you >were at, and then hav

Re: suggested /etc/skel/ modifications

2005-07-28 Thread jimmy
Quoting Hannah Schroeter <[EMAIL PROTECTED]>: > Hello! > > On Thu, Jul 28, 2005 at 06:50:19PM +0200, [EMAIL PROTECTED] wrote: > >Quoting Moritz Grimm <[EMAIL PROTECTED]>: > > >> > Ever heart of a multiuser system where one user shouldn't be able to > >> > acces the files of another user? Not all u

Re: segfaults in OpenBSD 3.7

2005-07-28 Thread Jason Crawford
On 7/28/05, Sharad Birmiwal <[EMAIL PROTECTED]> wrote: > hi all > i'm new to OpenBSD. i've worked on linux but wanted to try OpenBSD for > a test firewall and file server that i have to build. > i'm using a Pentium-1 (133 Mhz) box with 16 MB ram. i downloaded the > iso file and all the packages for

Re: 1U server recommendation

2005-07-28 Thread Bob Beck
* Marco Peereboom <[EMAIL PROTECTED]> [2005-07-27 19:52]: > I run heaps off Dell PowerEdge 1550, 1650, 1750 and 1850 without issues. FWIW I also run a pile of dell 650, 750, 1650, 1750 machines with good success. I use the ami builtin for raid on the 1650 and 1750 with good success running

Re: segfaults in OpenBSD 3.7

2005-07-28 Thread Hannah Schroeter
Hello! On Thu, Jul 28, 2005 at 11:17:59PM +0530, Sharad Birmiwal wrote: >hi all >i'm new to OpenBSD. i've worked on linux but wanted to try OpenBSD for >a test firewall and file server that i have to build. >i'm using a Pentium-1 (133 Mhz) box with 16 MB ram. i downloaded the >iso file and all the

Re: segfaults in OpenBSD 3.7

2005-07-28 Thread Stuart Henderson
--On 28 July 2005 23:17 +0530, Sharad Birmiwal wrote: could it be a problem with the ram or hdd? Most likely ram. Try memtest86+. Reseating the memory modules may possibly help.

Re: 1U server recommendation

2005-07-28 Thread Bob Beck
We are running production web servers on OpenBSD running on IBM 325E's as well as Sun V20Z's, running OpenBSD. We've had decent luck with both the i386 and amd64 distro on those. I have used a demo HP with good success too, but don't have one in production anywhere. I'm not using

segfaults in OpenBSD 3.7

2005-07-28 Thread Sharad Birmiwal
hi all i'm new to OpenBSD. i've worked on linux but wanted to try OpenBSD for a test firewall and file server that i have to build. i'm using a Pentium-1 (133 Mhz) box with 16 MB ram. i downloaded the iso file and all the packages for version 3.7. during installation, in the last step when it creat

Re: Fwd: OpenBSD 3.7 on Soekris (w/ httpd)

2005-07-28 Thread Peter Hessler
On Thu, Jul 28, 2005 at 08:30:59AM -0700, Marti Martinez wrote: :In this vein, no one has put a Soekris 4801 kernel config file out :there that works with httpd, so wihtout further ado, Yes they have. Its called GENERIC.

Re: suggested /etc/skel/ modifications

2005-07-28 Thread Hannah Schroeter
Hello! On Thu, Jul 28, 2005 at 06:50:19PM +0200, [EMAIL PROTECTED] wrote: >Quoting Moritz Grimm <[EMAIL PROTECTED]>: >> > Ever heart of a multiuser system where one user shouldn't be able to >> > acces the files of another user? Not all users are thinking about this >> > issue and many forget to

Fwd: OpenBSD 3.7 on Soekris (w/ httpd)

2005-07-28 Thread Marti Martinez
On 7/27/05, Nick Holland <[EMAIL PROTECTED]> wrote: > > If nothing else, dmesg tells us if someone is running a Theo-built > kernel, a home-built GENERIC (which we have to take with a big grain of > salt until we commit those changes that prevent even root from editing > /usr/src/sys/arch/*/conf/G

Re: suggested /etc/skel/ modifications

2005-07-28 Thread Timothy Donahue
On Thursday 28 July 2005 12:37 pm, Dave Feustel wrote: > On Thursday 28 July 2005 11:24 am, Moritz Grimm wrote: > > Dave Feustel wrote: > > >>And [snip] > > of this anecdote: A pal once had to deal with a probably-owned OpenBSD > > box, because his clueless co-admin installed an outdated, vulnerabl

Re: suggested /etc/skel/ modifications

2005-07-28 Thread jimmy
Quoting Moritz Grimm <[EMAIL PROTECTED]>: > > > > Ever heart of a multiuser system where one user shouldn't be able to > > acces the files of another user? Not all users are thinking about this > > issue and many forget to change the modes for confidential files. IMO, > > But keeping confidential

Re: nmap Over pppoe

2005-07-28 Thread Melameth, Daniel D.
I never received any responses on this so I thought I'd rephrase the question before I spend more time on this... Does nmap work for anyone when scanning hosts on the Internet using 3.7's kernel pppoe? Thanks, Danny Melameth, Daniel D. wrote: > Anyone else experiencing issues when scanning a hos

Re: OpenBSD 3.7 on VM Workstation 5

2005-07-28 Thread Greg Thomas
On 7/28/05, Jason Opperisano <[EMAIL PROTECTED]> wrote: > On Wed, Jul 27, 2005 at 11:22:56PM +0200, Johan P. Lindstrvm wrote: > > Just finished installing OpenBSD 3.7 from CD onto VM Ware Workstation > > 5 build 13124 with Windows XP sp2 as host OS. > > > > As Client OS I chose FreeBSD, VM Ware too

Re: suggested /etc/skel/ modifications

2005-07-28 Thread Dave Feustel
On Thursday 28 July 2005 11:24 am, Moritz Grimm wrote: > Dave Feustel wrote: > >>And > >>there are also still numerous ways of breaking OpenBSD inspite of sane > >>defaults and exploit mitigation techniques in place. > > > > Is there any way I can tell whether my system has been broken as you >

Re: suggested /etc/skel/ modifications

2005-07-28 Thread Moritz Grimm
Dave Feustel wrote: And there are also still numerous ways of breaking OpenBSD inspite of sane defaults and exploit mitigation techniques in place. Is there any way I can tell whether my system has been broken as you describe? This really depends ... I can't tell specifics. I mentioned this

Re: OpenBSD 3.7 on VM Workstation 5

2005-07-28 Thread Jason Opperisano
On Wed, Jul 27, 2005 at 11:22:56PM +0200, Johan P. Lindstrvm wrote: > Just finished installing OpenBSD 3.7 from CD onto VM Ware Workstation > 5 build 13124 with Windows XP sp2 as host OS. > > As Client OS I chose FreeBSD, VM Ware tools not installed, virtual > terminals CTRL+ALT+Fn does not work s

Re: IMAP ssl problems

2005-07-28 Thread stupidmail4me
Yes, but I was asking if it was an OpenBSD packaging problem. It's not about startup, it's about file locations, which is specific to this _OpenBSD_ package. Reread the original email. The whole thing. --- eric <[EMAIL PROTECTED]> wrote: > On Wed, 2005-07-27 at 10:54:36 -0700, stupidmail4me > pro

amdpm in GENERIC

2005-07-28 Thread Stephan Tesch
Hi guys, I was just wondering why amdpm isnt included in GENERIC. Are there any issues one should be aware of? Or is it just that noone uses it at all? Thanks, Stephan

Re: suggested /etc/skel/ modifications

2005-07-28 Thread Dave Feustel
On Thursday 28 July 2005 10:09 am, Moritz Grimm wrote: > And > there are also still numerous ways of breaking OpenBSD inspite of sane > defaults and exploit mitigation techniques in place. Is there any way I can tell whether my system has been broken as you describe?

Re: Dell PowerEdge 750 SATA

2005-07-28 Thread Matteo Mancini
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi > Especially if you are slapping dual or quad port cards in there, the > faster PCI will be a big help. Can you advice me a 4 eth pciX card compatible with openbsd Thanks Matteo iD8DBQFC0hAB/TjXD9LUVswRArFuAJ9mn7hHvAZKuW6o7yhZ+VJCVLLnaACfRHXq u

Re: Dell PowerEdge 750 SATA

2005-07-28 Thread Jon Hart
On Mon, Jul 11, 2005 at 06:54:28AM +0200, Matteo Mancini wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Hi *, > > I've to build an high performance openbsd firewall with ids included. > I think to use the server in subject, does any one have tried it?? For a price that is in the sa

Re: suggested /etc/skel/ modifications

2005-07-28 Thread Moritz Grimm
Jonathan Schleifer wrote: This kind of paranoia adds nothing to security (~/.ssh and others that need it are already set to restrictive permissions), and there is no privacy from root no matter what. The rest is, again, personal preference and/or something about local policies. Ever heart of

Re: OpenBSD 3.7 on VM Workstation 5

2005-07-28 Thread Ober Heim
The best way to get the answer is to state a contrary fact, rather than to ask for advice here. :D I would have said "OpenBSD console switching in VMWARE kicks butt!" and waited for those with real information to counter you, then show their cards :D "I am not your puppet. Since when? Now get you

Re: Dell PowerEdge 750 SATA

2005-07-28 Thread Jason Dixon
On Jul 11, 2005, at 12:54 AM, Matteo Mancini wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi *, I've to build an high performance openbsd firewall with ids included. I think to use the server in subject, does any one have tried it?? Avoid the SATA, go with SCSI. Works great. -- Jas

Re: Linksys EG1032 not SysKonnect anymore as of rev. 3

2005-07-28 Thread Johan P . Lindström
For what it's worth, in my efforts of finding and acquiring sk(4) based network adapters I have found that the D-LINK DGE-530T cards are still att first revision as of today's date and the tech support team (.se) knows of no plans to change chipsets. -- JPL

Dell PowerEdge 750 SATA

2005-07-28 Thread Matteo Mancini
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi *, I've to build an high performance openbsd firewall with ids included. I think to use the server in subject, does any one have tried it?? Thanks matteo iD8DBQFC0ft3/TjXD9LUVswRAhZ9AJ0dlMdDutnM+OodDWOl35TCZ/+M3QCgr9g4 OlQ9j7F3pCELrU4GuLHHorM= =H

Re: suggested /etc/skel/ modifications

2005-07-28 Thread Timothy Donahue
On Thursday 28 July 2005 08:00 am, Jonathan Schleifer wrote: > Moritz Grimm <[EMAIL PROTECTED]> wrote: > > This kind of paranoia adds nothing to security (~/.ssh and others that > > need it are already set to restrictive permissions), and there is no > > privacy from root no matter what. The rest i

hifn crypto acc.

2005-07-28 Thread Fredrik Widlund
Hi Hifn has a new crypto card out since may, HIPP 7855 HXL, does anyone know if this is supported? Regards, Fredrik Widlund http://www.hifn.com/products/HIPP7855HXLboard.html

About horde port

2005-07-28 Thread FBN
Hi, Is there horde "sork" module in OpenBSD ports ? I find out imp, turba, kronolith, nag... but no sork Thanks

Re: OpenBSD 3.7 on VM Workstation 5

2005-07-28 Thread Johan P . Lindström
On 7/27/05, Johan P. Lindstrvm <[EMAIL PROTECTED]> wrote: > Just finished installing OpenBSD 3.7 from CD onto VM Ware Workstation > 5 build 13124 with Windows XP sp2 as host OS. --- cut --- Look how interesting this got, now in this thread we have a way to dodge the virtual terminal issue and bet

Re: 1U server recommendation

2005-07-28 Thread Brandon Mercer
Matthew Bettinger wrote: >Hello, > >Can anyone recommend a decent rack server from HP, Dell, IBM or CDW >that will run OpenBSD for webserver use? I would prefer a machine >that has SCSI drives with Mirror Raid capabilities. I know I can go >piecemeal one from FRY's but I need one that can have a

Re: suggested /etc/skel/ modifications

2005-07-28 Thread Jonathan Schleifer
Moritz Grimm <[EMAIL PROTECTED]> wrote: > This kind of paranoia adds nothing to security (~/.ssh and others that > need it are already set to restrictive permissions), and there is no > privacy from root no matter what. The rest is, again, personal > preference and/or something about local polic

Re: suggested /etc/skel/ modifications

2005-07-28 Thread Moritz Grimm
Mh, I just deleted some text I wrote to 1) and 2), because most if it was already said. It boils down to "personal/administrational preference and/or policy", "the current defaults are just fine and logical" and "trivial to change". Dave Feustel wrote: Also modify adduser so that the home dir

Re: no sound on Dell4550 (soundblaster live, emu)

2005-07-28 Thread tony sarendal
>My solution was: unplug that shit and buy a cheap and supported (REAL) >compatible sb. Doh ! Screwed over again. Good answer though, time to hit the shop. Thanks. -- Tony Sarendal - [EMAIL PROTECTED] IP/Unix -= The scorpion replied, "I couldn't help it, it's my nature" =-

Re: no sound on Dell4550 (soundblaster live, emu)

2005-07-28 Thread John Wright
On Thu, Jul 28, 2005 at 09:36:29AM +0200, Juan J. Martmnez wrote: > Woh! I think you're another unhappy user of a SB Live! *5.1* (from > DELL). Welcome to the club. Absolutely ages ago I found http://www.opensound.com/ and was able to use one of their drivers under OpenBSD 2.x. They're still goin

Re: suggested /etc/skel/ modifications

2005-07-28 Thread Paul de Weerd
On Wed, Jul 27, 2005 at 06:11:52PM -0500, Dave Feustel wrote: | On Wednesday 27 July 2005 04:23 pm, Paul de Weerd wrote: | > On Wed, Jul 27, 2005 at 12:13:01PM -0500, Dave Feustel wrote: | > | 1) add the line | > | umask 077 | > | to .profile | > | > This breaks certain ports (as I found out the ha

Re: no sound on Dell4550 (soundblaster live, emu)

2005-07-28 Thread Juan J.
El jue, 28-07-2005 a las 09:15 +0200, tony sarendal escribis: > emu0 at pci2 dev 0 function 0 "Creative Labs SoundBlaster Live" rev 0x00: irq > 10 > ac97: codec id 0x83847608 (SigmaTel STAC9708/11) > ac97: codec features 18 bit DAC, 18 bit ADC, SigmaTel 3D > audio0 at emu0 > > I can't get any sig

Re: no sound on Dell4550 (soundblaster live, emu)

2005-07-28 Thread tony sarendal
emu0 at pci2 dev 0 function 0 "Creative Labs SoundBlaster Live" rev 0x00: irq 10 ac97: codec id 0x83847608 (SigmaTel STAC9708/11) ac97: codec features 18 bit DAC, 18 bit ADC, SigmaTel 3D audio0 at emu0 I can't get any sign of life at all from this one. Even cat'ing a file to /dev/audio0 gives me n