Re: crypto disk

2005-12-23 Thread Juha Erkkila
On Thu, Dec 22, 2005 at 07:32:27PM +0100, Ed White wrote: Quoting from: http://www.onlamp.com/lpt/a/6384 The biggest drawback of svnd is its lack of security in the general use case. It is vulnerable to an offline dictionary attack. That is, you can generate a database mapping known

problems with via dp

2005-12-23 Thread SKAL
Hi all, I've just installed a 3.8 on a VIA DP system. In 2 days I had 2 crash of the system :-( The following was the error I had on the display kernel: page fault trap,code=0 stopped ad npxdna_xmm +0x71: movl 0x12c(%ebx),%eax ddb{0} But don't tell me to send

Re: NAT/pf before IPSEC

2005-12-23 Thread Bob DeBolt
On Wednesday 21 December 2005 02:09, you wrote: now I need to nat my internal network to appear to be coming from 10.0.20.254 Is this to accommodate a service of some type or what? Add some more information as there is likely a bunch of ways to do something depending of the expected or

cloned route gets wrong mtu

2005-12-23 Thread Toni Mueller
Hello, I just stumbled across a problem where a directly connected host gets a wrong MTU in his route entry in an OpenBSD 3.7 box. Network diagram: openbsd .1 -- linux .2 The two hosts are connected via Fast Ethernet which has a nominal MTU of 1500. The entry for the linux box in the

Re: cloned route gets wrong mtu

2005-12-23 Thread RedShift
Solar rays. Toni Mueller wrote: Hello, I just stumbled across a problem where a directly connected host gets a wrong MTU in his route entry in an OpenBSD 3.7 box. Network diagram: openbsd .1 -- linux .2 The two hosts are connected via Fast Ethernet which has a nominal MTU of 1500.

Maintain Client Relationships

2005-12-23 Thread Custom Digest
Dear Realtor, Over 70 percent of home buyers today start their home searches online. Introduce yourself to these valuable clients right in their inbox with The Custom Real Estate Digest. Give your current and potential clients the comfort of knowing that you are the internet savvy real estate

Re: Unable to build Gateway route

2005-12-23 Thread Craig Skinner
On Thu, Dec 22, 2005 at 10:12:32AM -0800, martin wrote: Hello. I've been running other firewalls on this IP address with the same settings in the past, but am having problems setting up the Gateway with OpenBSD 3.8. It comes back with no route to host and when I do a nestat -rn, the

Re: Unable to build Gateway route

2005-12-23 Thread Craig Skinner
On Fri, Dec 23, 2005 at 01:12:01PM +, Craig Skinner wrote: On Thu, Dec 22, 2005 at 10:12:32AM -0800, martin wrote: IP - 209.216.76.1 Netmask - 255.255.255.252 GW - 209.216.77.6 The above is wrong. My mistake, I mis-read the above. 209.216.76.1 is the WAN of you router.

calendar(1): localized day/month names in calendar files

2005-12-23 Thread Andriy Gapon
I am playing now with idea of back porting many very useful fixes and additions made in OpenBSD calendar(1) to FreeBSD. The most useful to me are the fixes to handling of dates bound to weekdays. But I think that there is something in FreeBSD version that could be useful in OpenBSD as well: I am

Re: pf rules and binat

2005-12-23 Thread Karl O. Pinc
On 12/23/2005 05:22:28 AM, Kilaru Sambaiah wrote: I have a question regarding pf and binat. I need to protect mail server and web server behind firewall. I am planning to run pf with binat rules. I need to do the following: 1) Allow only ssh to firewall 2) Allow 80, 443 fron net to web

/etc/isakmpd/ missing from etc38.tgz?

2005-12-23 Thread Karl O. Pinc
Hi, I just did a 3.6 - 3.7 - 3.8 upgrade and looking through the /etc/security mailing I see that I don't have /etc/disklabls/ or /etc/isakmpd/. These directories do not seem to be in etc38.tgz, although they do show up on a system I did a clean 3.8 install on. (3.8 patched to stable as of Dec

Re: /etc/isakmpd/ missing from etc38.tgz?

2005-12-23 Thread Karl O. Pinc
On 12/23/2005 09:24:09 AM, Jason Crawford wrote: On 12/23/05, Karl O. Pinc [EMAIL PROTECTED] wrote: Hi, I just did a 3.6 - 3.7 - 3.8 upgrade and looking through the /etc/security mailing I see that I don't have /etc/disklabls/ or /etc/isakmpd/. These directories do not seem to be in

Backup Techniques onto DVD+-RW

2005-12-23 Thread Whyzzi
Hi gang. Running a lightweight mail server here (50 users total) on OpenBSD, and being the cheap bastard that I am I am looking forward to scripting a nightly backup onto some DVD-RW media. Can I assume that dump/restore is out of the question because of the special commands burners require to

Possible error in vpn(8) man page

2005-12-23 Thread Will H. Backman
According to the vpn(8) man page: Paragraph just before section header for Creating IPsec Flows [manual keying] Note that when no authentication and encryption algorithms are defined, ipsecctl(8) will automatically use HMAC-SHA2-256 for authentication and AES-128 in countermode for

Your request for Express Transfer - attn: misc@openbsd.org

2005-12-23 Thread Bank of Oklahoma N.A.
Your request for Express Transfer from your Bank of Oklahoma account to your bank account ending in 8794, has been received and is in process. This process usually takes 6-8 working hours to complete but is dependent on your account preferences. See, Change or Cancel this Transfer at:

Re: Backup Techniques onto DVD+-RW

2005-12-23 Thread L. V. Lammert
At 10:17 AM 12/23/2005 -0700, Whyzzi wrote: Hi gang. Running a lightweight mail server here (50 users total) on OpenBSD, and being the cheap bastard that I am I am looking forward to scripting a nightly backup onto some DVD-RW media. Can I assume that dump/restore is out of the question because

Re: Unable to build Gateway route

2005-12-23 Thread Michael Wilsker
At 05:20 AM 12/23/2005, Craig Skinner wrote: On Fri, Dec 23, 2005 at 01:12:01PM +, Craig Skinner wrote: On Thu, Dec 22, 2005 at 10:12:32AM -0800, martin wrote: IP - 209.216.76.1 Netmask - 255.255.255.252 GW - 209.216.77.6 The above is wrong. My mistake, I mis-read the above. As

Re: Possible error in vpn(8) man page

2005-12-23 Thread Jason McIntyre
On Fri, Dec 23, 2005 at 12:27:55PM -0500, Will H. Backman wrote: According to the vpn(8) man page: Paragraph just before section header for Creating IPsec Flows [manual keying] Note that when no authentication and encryption algorithms are defined, ipsecctl(8) will automatically use

Re: ipsecctl writev failed

2005-12-23 Thread Hans-Joerg Hoexer
Hi, On Fri, Dec 23, 2005 at 11:58:14AM -0500, Will H. Backman wrote: Reducing the enckey to 160 bits worked. Interesting to note that if a key is too short, you get a nice warning that the key is too short and must be 160 bits long. If a key is too long, you don't get a warning, just

Your request for Express Transfer - attn: misc@openbsd.org

2005-12-23 Thread Bank of Oklahoma N.A.
Your request for Express Transfer from your Bank of Oklahoma account to your bank account ending in 8794, has been received and is in process. This process usually takes 6-8 working hours to complete but is dependent on your account preferences. See, Change or Cancel this Transfer at:

Re: Backup Techniques onto DVD+-RW

2005-12-23 Thread Whyzzi
Interesting idea, and have to admit I didn't think of it. There is a second HD ide hard drive slaved in the mail server, as well. I could use the likes of DD or dump/restore onto the second drive (slave). Last time I did that (dump/restore), I screwed up though, which is why a second backup method

Re: Backup Techniques onto DVD+-RW

2005-12-23 Thread L. V. Lammert
At 01:18 PM 12/23/2005 -0700, Whyzzi wrote: Interesting idea, and have to admit I didn't think of it. There is a second HD ide hard drive slaved in the mail server, as well. I could use the likes of DD or dump/restore onto the second drive (slave). Last time I did that (dump/restore), I screwed

Re: Backup Techniques onto DVD+-RW

2005-12-23 Thread Andrew Dalgleish
On Fri, Dec 23, 2005 at 11:51:14AM -0600, L. V. Lammert wrote: Better recommendation - rsync /home to an external system (especially if you're using Maildir). WAY less overhead! You can even backup more often. An archive machine is less costly than a bundle of DVD-RWs, and you don't have to

newsyslogd.conf (please email me your file) the apache log rotation part

2005-12-23 Thread Didier Wiroth
hi, Could someone send me his content of /etc/newsyslog.conf, the part contains the apache log rotation entries?! thx a lot didier

[OT] Backup Techniques onto DVD+-RW

2005-12-23 Thread Matthias Kilian
[Marked OT, since not specially related to OpenBSD] On Fri, Dec 23, 2005 at 01:18:07PM -0700, Whyzzi wrote: Interesting idea, and have to admit I didn't think of it. There is a second HD ide hard drive slaved in the mail server, as well. I could use the likes of DD or dump/restore onto the

Re: Backup Techniques onto DVD+-RW

2005-12-23 Thread Paul de Weerd
76.3M 20051212 103M20051213 102M20051214 85.0M 20051215 81.7M 20051216 105M20051217 81.3M 20051218 81.1M 20051219 84.1M 20051220 108M20051221 116M20051222 84.3M 20051223

Re: Greylisting google's gmail servers

2005-12-23 Thread Moritz Grimm
Joseph C. Bender wrote: Instead, I suggest to use a ``no rdr'' line after rdr'ing those in the blacklists to spamd. Actually, yes, because it makes your filter rulesets easier to parse visually, but you want the no rdr *first*. This is the configuration that we are using. Uh well, to

Re: /etc/isakmpd/ missing from etc38.tgz?

2005-12-23 Thread Nick Holland
Karl O. Pinc wrote: ... Ah, I see the problem. I read the FAQ, chapter 4, install, and it did not point me to the upgrade guide, just said be sure to upgrade /etc (which I did using etc38.tgz as a template, and hence wound up with the missing directories). It would be good if there was a

Re: Backup Techniques onto DVD+-RW

2005-12-23 Thread Steve Shockley
Whyzzi wrote: Hi gang. Running a lightweight mail server here (50 users total) on OpenBSD, and being the cheap bastard that I am I am looking forward to scripting a nightly backup onto some DVD-RW media. Can I assume that dump/restore is out of the question because of the special commands