Re: Kernel and drivers

2006-08-24 Thread Bertrand CHERRIER
Thanks, for the links, I didn't go that far back in time for my research ! Well I guess I'll get back to the list when the install will give me a result with the included driver (whether it works or not). Josh Grosse a icrit : > On Fri, Aug 25, 2006 at 03:53:21PM +1100, Bertrand CHERRIER wrote: >

Re: Kernel and drivers

2006-08-24 Thread Josh Grosse
On Fri, Aug 25, 2006 at 03:53:21PM +1100, Bertrand CHERRIER wrote: > ...the generic kernel does not have the > twe driver, while the i386 one has. > Any special reason for this ? ... Previous thread regarding twe on amd64: http://marc.theaimsgroup.com/?l=openbsd-misc&m=112674319520417&w=2 Previ

Kernel and drivers

2006-08-24 Thread Bertrand CHERRIER
Greetings, I've started the process of migrating a few servers from Gentoo to OpenBSD. All my servers are using 3ware RAID cards ... I've read the forums about 3ware ! The first server is running a P4, and was easily done. The second one is the object of my question. It's running a bi-opteron,

Re: Code beautifiers, anyone?

2006-08-24 Thread Han Boetes
Nick Holland wrote: > Use vi or emacs. :) Additionally for emacs users: You can define how c code should be indented for the openbsd project with this code in your .emacs. (defun KNF-c-style () "OpenBSD KNF C-style." (interactive) (local-set-key "\C-c\C-c" 'compile) (c-set-style "bsd")

Re: sysctl modifications during install?

2006-08-24 Thread Matthew R. Dempsky
On Fri, Aug 25, 2006 at 05:38:19AM +1000, Scott Radvan wrote: > Or am I missing something which could allow the install to use all > available bandwidth? Can you first choose S for shell, run the necessary sysctl commands, then exit the shell and start the install process as usual?

Re: 4.0-beta SSH and GSSAPI Segmentation fault.

2006-08-24 Thread Darren Tucker
On Thu, Aug 24, 2006 at 11:29:54AM +0200, Jan Johansson wrote: > Hello. > > ssh on a recent snapshot does not like trying gssapi-with-mic when there > is no ticket file. > > I did not see any relevant patches in the CVS web. According to Simon Wilkinson (the author of the code that makes that li

Re: sysctl modifications during install?

2006-08-24 Thread Theo de Raadt
> > > But, out of curiosity, is there a reasoning for not including the > > > sysctl binary on the install image, and hence not allowing sysctl > > > modifications during the installation of these snapshots? > > > > Besides that the install media are totally full? > > Ok, hadn't considered that.

Re: Code beautifiers, anyone?

2006-08-24 Thread Pedro Martelletto
> The OpenBSD developers spend a lot of time making code fit what they > call "KNF" -- Kernel Normal Form, documented in style(7) style(9) -p.

Re: Code beautifiers, anyone?

2006-08-24 Thread Nick Holland
Kyrre Nygerd wrote: Hello people, I'm looking for the best ways to create a line of code beautification (reformatting) scripts -- one for C, one for Ruby, one for Bash and one for web development languages like XHTML, XML, CSS, PHP and Ajax. Whether as frontline warriors or household maids, t

Re: sysctl modifications during install?

2006-08-24 Thread Scott Radvan
On Thu, 24 Aug 2006 15:40:45 -0600 Theo de Raadt <[EMAIL PROTECTED]> wrote: > > But, out of curiosity, is there a reasoning for not including the > > sysctl binary on the install image, and hence not allowing sysctl > > modifications during the installation of these snapshots? > > Besides that th

Re: Volume manager

2006-08-24 Thread Joachim Schipper
On Thu, Aug 24, 2006 at 10:55:40PM +0200, openbsd misc wrote: > Hello, > > I'm looking for a volume manager comparable to LVM. Is there > a well-tended solution for openbsd? I want to be able to > create / resize partitions at runtime, raid functionality > is not needed. No. You can just ccd eve

Re: Kernel panic in openssl on fresh minimal install

2006-08-24 Thread Jeff Bromberger
This sounds like bad hardware to me. Have you tried installing your CD set elsewhere? Ok, so I made a memtest86 boot cd to test out this machine. At the moment it is 59% of the way through the testing and it's only found 7,016 memory errors, that's not that bad, right? :-) So bad hardware it

Re: Why no compiler on prod system [Was: Re: How to update httpd without a compiller]

2006-08-24 Thread beck
[Bleat bleat.. "Don't install the compiler it makes it a "little bit safer"] [Bleat bleat "No it doesn't make a difference"] Mooseapples. Both herds are wrong. *Not* having the compiler makes the system *Less* secure, because it's more of a PITA for the admin to apply fixes. Doesn't matter

Re: Why no compiler on prod system [Was: Re: How to update httpd without a compiller]

2006-08-24 Thread Philip Guenther
On 8/24/06, Nick Shank <[EMAIL PROTECTED]> wrote: ... Regardless, I was simply asking if 1) The possibility of a user who has access to the system had been thought of, and 2) Would it matter. Umm, hasn't this whole discussion been about the situation when the user has access? If they don't ha

Re: sysctl modifications during install?

2006-08-24 Thread Theo de Raadt
> But, out of curiosity, is there a reasoning for not including the > sysctl binary on the install image, and hence not allowing sysctl > modifications during the installation of these snapshots? Besides that the install media are totally full?

Re: packages failure (was dsniff ports failure)

2006-08-24 Thread Will Maier
On Thu, Aug 24, 2006 at 01:44:04PM -0700, Edward Ray wrote: [...] > >> > # export PKG_PATH=ftp://ftp.openbsd.org/pub/OpenBSD/3.9/packages/i386/ > > # pkg_add bash-3.1.1p0.tgz > Error from ftp://ftp.openbsd.org/pub/OpenBSD/3.9/packages/i386/: > Unknown command. > Not an

Re: Code beautifiers, anyone?

2006-08-24 Thread Tim Donahue
I have used tidy (for html) and perltidy to clean up messy/generated code in the past. Both are extremely customizable in the format they output code. Tim Donahue On Thu, 24 Aug 2006 14:59:31 +0200 Kyrre Nygerd <[EMAIL PROTECTED]> wrote: > Hello people, > > I'm looking for the best ways to cre

Re: packages failure (was dsniff ports failure)

2006-08-24 Thread Edward Ray
This is annoying. Every time I try to build with packages I get an error with libiconv-1.9.2p3 . Unfortunately, this failure screws up every other package I try to install >> # export PKG_PATH=ftp://ftp.openbsd.org/pub/OpenBSD/3.9/packages/i386/ # pkg_add bash-3.1.

OpenSSL: heap-thrashing...

2006-08-24 Thread Jack Bates
Good day. This is not a request to do anything - just a statement of fact. On the server-side, when performing DHE-enabled SSL_accept(), I have been shown that several hundred malloc()/free() calls are made. CHEERS -- Jack Bates Placitas, NM, USA I play Texas Hold'Em at http://www.fulltiltpoke

Volume manager

2006-08-24 Thread openbsd misc
Hello, I'm looking for a volume manager comparable to LVM. Is there a well-tended solution for openbsd? I want to be able to create / resize partitions at runtime, raid functionality is not needed. Regards Hagen Volpers

Redundant PSU + obsd sensors (dell2850)

2006-08-24 Thread b4ka
Hello list! We are planning to buy some Dell PowerEdge 2850's with PERC4e/DCs and redundant powersupply for good availability. It looks like the PERC4e/DC (PCIe) is well supported and that's not a problem, it doesnt mention the PCI-Express version thou. This is going to be a remote machin

FreeBDS to OpenBDS

2006-08-24 Thread Manuel Lamas
Hi, I have a machine with FreeBSD (5.3). I cannot use the CD nor the floppy disk. I have just an access with ssh and KVM. Which is best the way of installing OpenBSD in this situation? Thank you very much Manuel

Re: Code beautifiers, anyone?

2006-08-24 Thread matthew . garman
On Thu, Aug 24, 2006 at 02:59:31PM +0200, Kyrre Nyg?rd wrote: > to all my code. I find myself always reformatting whatever my > associates give me. Not that they're bad programmers, they just > care more about the code itself rather than its structure, and I > dare not argue with that. When their c

Re: Why no compiler on prod system [Was: Re: How to update httpd without a compiller]

2006-08-24 Thread David Terrell
On Thu, Aug 24, 2006 at 12:38:26PM -0700, Nick Shank wrote: > Through all of this, and maybe I've just missed it, what happens when a > user tries to make spl01t.c? stop it, please, you're killing me. There is nothing special about your machine that makes binaries compiled somewhere else not be

Re: Why no compiler on prod system [Was: Re: How to update httpd without a compiller]

2006-08-24 Thread Nick Shank
Scott Plumlee wrote: NetNeanderthal wrote: On 8/24/06, Anton Karpov <[EMAIL PROTECTED]> wrote: Removing compiler doesn't bring much more security to your system, but it can make it a little bit safer. Very little bit, but safer. I mean, if your system has local root hole, for example, in this

Re: FreeBDS to OpenBDS

2006-08-24 Thread fv
Hello, You may use a TFTP server on another box. The simple way may be to use PXE boot method. You can also use a grub boot sector with grub compiled with support for your network card. Grub can be compiled with a tftp server, dhcp client and support for some network cards. You can build a cust

Re: Why no compiler on prod system [Was: Re: How to update httpd without a compiller]

2006-08-24 Thread Nick Shank
David Terrell wrote: On Thu, Aug 24, 2006 at 12:38:26PM -0700, Nick Shank wrote: Through all of this, and maybe I've just missed it, what happens when a user tries to make spl01t.c? stop it, please, you're killing me. There is nothing special about your machine that makes binaries com

Re: Redundant PSU + obsd sensors (dell2850)

2006-08-24 Thread Theo de Raadt
> We are planning to buy some Dell PowerEdge 2850's with PERC4e/DCs and > redundant powersupply for good availability. It looks like the > PERC4e/DC (PCIe) is well supported and that's not a problem, it doesnt > mention the PCI-Express version thou. I am not using the PCIe models, but I supp

Re: Is it possible that source spoof IP bypass the three step handshake of the TCP connection to apache in an attack?

2006-08-24 Thread Daniel Ouellet
Here is an interesting approach. Could spamd be use here? I was suggested that may be I fight to much spamer and that I got reposted to this. Well very possible. I got a suggested that may be trapitting the connections might help. Hmmm. Could this be done. Obviously not want to delay connecti

Re: FreeBDS to OpenBDS

2006-08-24 Thread viq
On 8/24/06, Manuel Lamas <[EMAIL PROTECTED]> wrote: Hi, I have a machine with FreeBSD (5.3). I cannot use the CD nor the floppy disk. I have just an access with ssh and KVM. Which is best the way of installing OpenBSD in this situation? Thank you very much Manuel If you have a keyboard and

sysctl modifications during install?

2006-08-24 Thread Scott Radvan
Hello misc, I have been installing 4.0- beta snapshots via FTP on a few machines (i386 and amd64) and after installation, one of the sysctl modifications I always make is increasing net.inet.tcp.recvspace so I can make full use of my 9Mbit ADSL2+ line. While performing installs, I have discovere

Re: FreeBDS to OpenBDS

2006-08-24 Thread Spruell, Darren-Perot
> I have a machine with FreeBSD (5.3). I cannot use the CD nor the > floppy disk. I have just an access with ssh and KVM. > > Which is best the way of installing OpenBSD in this situation? Can you take the HDD out and install it on a machine you do have access to working CDROM or floppy at? Alte

Re: CARP + individual services ?

2006-08-24 Thread Henning Brauer
* ben <[EMAIL PROTECTED]> [2006-08-24 21:11]: > I just spent more time than I would have liked to searching for info > on providing HA/LB via CARP (and possibly other tools) for individual > services (such as http) rather than IP addresses. I was surprised to > find just about nothing on the topic

Re: CARP + individual services ?

2006-08-24 Thread Joachim Schipper
On Thu, Aug 24, 2006 at 12:00:10PM -0700, ben wrote: > I just spent more time than I would have liked to searching for info > on providing HA/LB via CARP (and possibly other tools) for individual > services (such as http) rather than IP addresses. I was surprised to > find just about nothing on the

Re: ccd harddisk error?

2006-08-24 Thread Joachim Schipper
On Thu, Aug 24, 2006 at 06:09:11PM +0200, Hans van Leeuwen wrote: > Hello misc, > > > I run a server with two harddiscs running as a software RAID1 using ccd. Erm... search the archives for why you shouldn't use ccd to mirror and then think you have a RAID. > Yesterday I started to import a lar

Re: CARP + individual services ?

2006-08-24 Thread Marcus Popp
Hi ben, On 2006-08-24T12:00, ben wrote: > I just spent more time than I would have liked to searching for info > on providing HA/LB via CARP (and possibly other tools) for individual > services (such as http) rather than IP addresses. I was surprised to > find just about nothing on the topic since

CARP + individual services ?

2006-08-24 Thread ben
I just spent more time than I would have liked to searching for info on providing HA/LB via CARP (and possibly other tools) for individual services (such as http) rather than IP addresses. I was surprised to find just about nothing on the topic since it seems like something people would want to us

Re: ccd harddisk error?

2006-08-24 Thread Marco Peereboom
Those are intermittent errors that are not relevant to your failure. I did fix those in -current. You simply have a dying HDD. On Thu, Aug 24, 2006 at 06:09:11PM +0200, Hans van Leeuwen wrote: > Hello misc, > > > I run a server with two harddiscs running as a software RAID1 using ccd. > Yester

Re: Kernel panic in openssl on fresh minimal install

2006-08-24 Thread Marco Peereboom
This sounds like bad hardware to me. Have you tried installing your CD set elsewhere? /marco On Thu, Aug 24, 2006 at 10:00:50AM -0500, Jeff Bromberger wrote: > I'm a new openbsd user (or I should say I'm attempting to be) and I'm not > having a ton of luck here. I bought the cd set (i386) and

Re: Looking for general info on OpenBSD

2006-08-24 Thread marrandy
On Thursday 24 August 2006 12:48, you wrote: > > Would this not qualify as a signature and/or footer? > > Other than that, I agree with Marco's comment. I only bothered to respond with some comments and advice as this issue keeps coming up every few months. I left it in on purpose. Are you alw

Re: Kernel panic in openssl on fresh minimal install

2006-08-24 Thread Arnaud Bergeron
On 8/24/06, Jeff Bromberger <[EMAIL PROTECTED]> wrote: I'm a new openbsd user (or I should say I'm attempting to be) and I'm not having a ton of luck here. I bought the cd set (i386) and it arrived yesterday. During the install, the base39.tgz file seemed to be corrupt and the install would cr

Re: Why no compiler on prod system [Was: Re: How to update httpd without a compiller]

2006-08-24 Thread Scott Plumlee
NetNeanderthal wrote: On 8/24/06, Anton Karpov <[EMAIL PROTECTED]> wrote: Removing compiler doesn't bring much more security to your system, but it can make it a little bit safer. Very little bit, but safer. I mean, if your system has local root hole, for example, in this case cracker should

Re: Is it possible that source spoof IP bypass the three step handshake of the TCP connection to apache in an attack?

2006-08-24 Thread Daniel Ouellet
Many thanks, Already have that in place. But doesn't always help for AOL proxy for example that actually will have more connection then this. If you look here: http://webmaster.info.aol.com/proxyinfo.html I can have the list of Proxy used for them, so I can also allow this list to connect

Re: hotplugd

2006-08-24 Thread Joachim Schipper
On Thu, Aug 24, 2006 at 04:56:03PM +0200, Bachman Kharazmi wrote: > I use hotplugd to attach my usbstick. I works well, but I miss a > detach script which I couldn't find as a example in the manual so I > wonder if it's necessary. I've tried once to just disconnect the stick > without umounting the

Re: Is it possible that source spoof IP bypass the three step handshake of the TCP connection to apache in an attack?

2006-08-24 Thread Daniel Ouellet
Joachim Schipper wrote: Did you already check that the page is, indeed, the page you expect it to be? And not, say, some botnet-controller? Yes I did and even moved it and replace it with special hacking of my own there. (;> Not that dumm. But thanks for your concern. (;> Plus it is really

Re: Why no compiler on prod system

2006-08-24 Thread Spruell, Darren-Perot
> > If a hacker is on your system, he'll also manage to install > the compiler > > himself before using it. > > It's still a valid concern. If someone's going to try to > break into your system and do nefarious deeds, you should be > trying to make them work for it as much as possible. Layered

Re: Is it possible that source spoof IP bypass the three step handshake of the TCP connection to apache in an attack?

2006-08-24 Thread Joachim Schipper
On Thu, Aug 24, 2006 at 12:30:13PM -0400, Daniel Ouellet wrote: > Ryan Corder wrote: > >On Wed, 2006-08-23 at 20:36 -0400, Daniel Ouellet wrote: > >>200.82.74.176 - - [23/Aug/2006:12:42:37 -0400] "GET > >>/events/index.php?EventID=58 HTTP/1.1" 200 5 "-" "Mozilla/4.0 > >>(compatible; MSIE 6.0; Windo

Re: How to update httpd without a compiller

2006-08-24 Thread Ingo Schwarze
Hi Tomas, Tomas wrote on Thu, Aug 24, 2006 at 09:18:26AM +0300: > Han Boetes wrote: >> Tomas wrote: > Thank you very much, I think that's the way I will do it :) Then do it very carefully! I see at least one trap you might stumble into... > It's quicker then compilling all the release... Proba

Re: Is it possible that source spoof IP bypass the three step handshake of the TCP connection to apache in an attack?

2006-08-24 Thread Daniel Ouellet
If I may ask. One part of my original question was if the CARP interface is view as a bridge setup as far as Sync Proxy is concern. Is it the case here? What I understand of the FaQ is clear for not working on bridge setup, however, it's not clear to me if CARP setup is view as bridge as well.

ccd harddisk error?

2006-08-24 Thread Hans van Leeuwen
Hello misc, I run a server with two harddiscs running as a software RAID1 using ccd. Yesterday I started to import a large database in PostgreSQL, and found allot of these errors in my logs: error reading: Processor VRM error code: ae error code: ae kcs_sendmsg: 18 22 bmc_io_wait fails : v=88

Re: Is it possible that source spoof IP bypass the three step handshake of the TCP connection to apache in an attack?

2006-08-24 Thread Ryan Corder
On Thu, 2006-08-24 at 12:30 -0400, Daniel Ouellet wrote: > I am now up to 11,149 simultaneous sources for the last 22 hours. > > Someone is having fun at my expense. > > But still holding on remarkably well! sounds like it is time to deploy some PF hackery... table persist block in quick on $ext

Re: Why no compiler on prod system [Was: Re: How to update httpd without a compiller]

2006-08-24 Thread NetNeanderthal
On 8/24/06, Anton Karpov <[EMAIL PROTECTED]> wrote: Removing compiler doesn't bring much more security to your system, but it can make it a little bit safer. Very little bit, but safer. I mean, if your system has local root hole, for example, in this case cracker should compile his sploit someth

Re: Looking for general info on OpenBSD

2006-08-24 Thread Alexander Hall
marrandy wrote: On Thursday 24 August 2006 10:51, you wrote: Remove signatures and footers. Dan Farrell Applied Innovations [EMAIL PROTECTED] Would this not qualify as a signature and/or footer? Other than that, I agree with Marco's comment.

Re: Why no compiler on prod system

2006-08-24 Thread Dan Farrell
> It's still a valid concern. If someone's going to try to break into your > system and do nefarious deeds, you should be trying to make them work for > it as much as possible. > > Physical security standards recommending not leaving toolboxes outside > your backdoor so that a thief won't take you

Re: Is it possible that source spoof IP bypass the three step handshake of the TCP connection to apache in an attack?

2006-08-24 Thread Daniel Ouellet
Ryan Corder wrote: On Wed, 2006-08-23 at 20:36 -0400, Daniel Ouellet wrote: 200.82.74.176 - - [23/Aug/2006:12:42:37 -0400] "GET /events/index.php?EventID=58 HTTP/1.1" 200 5 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)" the following URL may be of interest to

Re: Looking for general info on OpenBSD

2006-08-24 Thread Dan Farrell
> Dan, is it possible for you to use a different mail server than your > work's > Exchange platforms? POP/IMAP and SMTP elsewhere? Yahoo, hotmail, or > gmail? It is entirely possible as far as this list is concerned-- I suppose I have been avoiding this because I wanted have my cake and eat it,

Re: Looking for general info on OpenBSD

2006-08-24 Thread LY-209
On Thu, Aug 24, 2006 at 10:51:48AM -0400, Dan Farrell wrote: > > I'm forced to use Outlook at work (don't get me started, I hate it), > as I'm sure a few others here are... I've tried a few crappy add-ons > that will reverse the top-posting nature of Outlook, and they have all > failed. If anyon

Binary system updates, was: Why no compiler...

2006-08-24 Thread Ingo Schwarze
Hi Siju, > I 'll stop installing compilers Still a bad idea IMHO, but this has been discussed to death. > when OpenBSD incorporates binary system updates ;-) Please, don't bug the developers about that. They have explained several times why their time is better put elsewhere. Please also note

Re: Looking for general info on OpenBSD

2006-08-24 Thread Marco Peereboom
blah blah blah On Thu, Aug 24, 2006 at 11:16:46AM -0400, marrandy wrote: > On Thursday 24 August 2006 10:51, you wrote: > > > And dammit don't top post. You're using outlook aren't you? God, fuck > > > outlook. Fuck outlook and it's shitty non-standard "look let's pretend > > > the reply button is

Re: Why no compiler on prod system

2006-08-24 Thread pauljgreene
-- Original message -- From: "Stephan A. Rickauer" <[EMAIL PROTECTED]> > Tomas wrote: > > Yes it's too late, but why to let a hacker to compile his exploits on > > your system and to go compromising other PCs (from your DMZ or from > > internet, it doesn't matter).

Re: Why no compiler on prod system [Was: Re: How to update httpd without a compiller]

2006-08-24 Thread Adam
"Stephan A. Rickauer" <[EMAIL PROTECTED]> wrote: > People from time to time say they don't want to have a compiler > installed on a productive system due to security issues. I don't > understand this. Isn't is too late anyway, if someone's already able to > make use of the compiler? Yes, its too

Re: hotplugd

2006-08-24 Thread Marcus Popp
On 2006-08-24T16:56, Bachman Kharazmi wrote: > I use hotplugd to attach my usbstick. I works well, but I miss a > detach script which I couldn't find as a example in the manual so I > wonder if it's necessary. I've tried once to just disconnect the stick > without umounting the FS manually, and it

Re: Looking for general info on OpenBSD

2006-08-24 Thread marrandy
On Thursday 24 August 2006 10:51, you wrote: > > And dammit don't top post. You're using outlook aren't you? God, fuck > > outlook. Fuck outlook and it's shitty non-standard "look let's pretend > > the reply button is the forward button" design. And then that forces > > you into top posting because

Re: Problem upgrading to 3.9 - Proliant dl380 g2 with LSI MegaRAID 320-1 RAID-card

2006-08-24 Thread Steve Shockley
Jonas Thambert wrote: Proliant bios Im using is P29 and MegaRAID bios is from mid 2004. On HP/Compaq servers, P29 refers to the firmware class, i.e. what motherboard is installed. (Also, if you really have P29 firmware, you've got a DL380 G3.) You can find a revision history of the P29 BIOS

Kernel panic in openssl on fresh minimal install

2006-08-24 Thread Jeff Bromberger
I'm a new openbsd user (or I should say I'm attempting to be) and I'm not having a ton of luck here. I bought the cd set (i386) and it arrived yesterday. During the install, the base39.tgz file seemed to be corrupt and the install would crash, the kernel would panic and the machine would reboot.

WARNING: automake-1.7 is needed

2006-08-24 Thread WR
Hi all, Got this error trying to compile libiconv, which says obviously that I need automake-1.7. On my newly-installed obsd system I already have automake, automake-1.4, automake-1.8, and automake-1.9, and I don't see automake-1.7 in ports or packages. Question: What's the best way to appr

hotplugd

2006-08-24 Thread Bachman Kharazmi
I use hotplugd to attach my usbstick. I works well, but I miss a detach script which I couldn't find as a example in the manual so I wonder if it's necessary. I've tried once to just disconnect the stick without umounting the FS manually, and it worked. messages shows: Aug 24 16:24:54 venus /bsd:

Re: Looking for general info on OpenBSD

2006-08-24 Thread Josh Grosse
On Thu, Aug 24, 2006 at 10:51:48AM -0400, Dan Farrell wrote: > > I'm forced to use Outlook at work (don't get me started, I hate it), as > I'm sure a few others here are... I've tried a few crappy add-ons that > will reverse the top-posting nature of Outlook, and they have all > failed. If anyone k

Re: Looking for general info on OpenBSD

2006-08-24 Thread Dan Farrell
> And dammit don't top post. You're using outlook aren't you? God, fuck > outlook. Fuck outlook and it's shitty non-standard "look let's pretend > the reply button is the forward button" design. And then that forces > you into top posting because otherwise it looks like the way the > message looks

Re: Problem upgrading to 3.9 - Proliant dl380 g2 with LSI MegaRAID 320-1 RAID-card

2006-08-24 Thread Jonas Thambert
David Gwynne wrote: > On 24/08/2006, at 7:39 PM, Jonas Thambert wrote: > >> Hello list, >> >> I'm having problem upgrading a 3.8 stable to 3.9 stable. The server is >> a Prolian dl380 g2 with a LSI MegaRAID 320-1. When booting the >> CD it stops right after ami driver is loaded: > > can you try a

Re: IPSec Tunnel - OpenBSD to NetScreen

2006-08-24 Thread Steve Glaus
Sean Hafeez wrote: Can someone help me. I am quite stuck. I have spend hours trying various combinations in order to get an 3.9 box bring up a tunnel to a NetScreen 25. Below is all the information. I have full control over both boxes and I am willing to try anything at this point.

Re: Problem upgrading to 3.9 - Proliant dl380 g2 with LSI MegaRAID 320-1 RAID-card

2006-08-24 Thread David Gwynne
On 24/08/2006, at 7:39 PM, Jonas Thambert wrote: Hello list, I'm having problem upgrading a 3.8 stable to 3.9 stable. The server is a Prolian dl380 g2 with a LSI MegaRAID 320-1. When booting the CD it stops right after ami driver is loaded: can you try a snapshot and see if the problem still

Re: Why no compiler on prod system [Was: Re: How to update httpd without a compiller]

2006-08-24 Thread Stephen Takacs
Anton Karpov wrote: > Removing compiler doesn't bring much more security to your system, but > it can make it a little bit safer. Very little bit, but safer. I mean, > if your system has local root hole, for example, in this case cracker > should compile his sploit somethere outside your box, and t

Re: Dsniff ports failure

2006-08-24 Thread Ryan Corder
On Wed, 2006-08-23 at 21:53 -0700, Edward Ray wrote: > It has been awhile since I used ports, and have not kept up on the latest > OpenBSD stuff. What and where are packages? everything that is in ports, just compiled for you already. check your local mirror. later. ryanc -- Ryan Corder <[EMA

Re: Is it possible that source spoof IP bypass the three step handshake of the TCP connection to apache in an attack?

2006-08-24 Thread Ryan Corder
On Wed, 2006-08-23 at 20:36 -0400, Daniel Ouellet wrote: > 200.82.74.176 - - [23/Aug/2006:12:42:37 -0400] "GET > /events/index.php?EventID=58 HTTP/1.1" 200 5 "-" "Mozilla/4.0 > (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)" the following URL may be of interest to you: http://g

Re: Code beautifiers, anyone?

2006-08-24 Thread Joachim Schipper
On Thu, Aug 24, 2006 at 02:59:31PM +0200, Kyrre Nyg?rd wrote: > Hello people, > > I'm looking for the best ways to create a line of code beautification > (reformatting) scripts -- one for C, one for Ruby, one for Bash and > one for web development languages like XHTML, XML, CSS, PHP and Ajax. >

Re: compiling problems `-Wstack-larger-than-2047'

2006-08-24 Thread Stuart Henderson
On 2006/08/21 14:47, Marcos Marconcini wrote: > I did an upgrade from 3.8 stable to 3.9 current ( I don't know if this is > the problem ) > > I followed the upgrade guide, not quite - there's a bit about "upgrade to the most recent binary" - install a snapshot. You probably don't need to build fr

Code beautifiers, anyone?

2006-08-24 Thread Kyrre Nygård
Hello people, I'm looking for the best ways to create a line of code beautification (reformatting) scripts -- one for C, one for Ruby, one for Bash and one for web development languages like XHTML, XML, CSS, PHP and Ajax. Whether as frontline warriors or household maids, they would ensure pro

Re: Why no compiler on prod system [Was: Re: How to update httpd without a compiller]

2006-08-24 Thread Siju George
On 8/24/06, Stephan A. Rickauer <[EMAIL PROTECTED]> wrote: People from time to time say they don't want to have a compiler installed on a productive system due to security issues. I don't understand this. Isn't is too late anyway, if someone's already able to make use of the compiler? I 'll st

Re: Why no compiler on prod system [Was: Re: How to update httpd without a compiller]

2006-08-24 Thread Nick Holland
Anton Karpov wrote: 2006/8/24, Stephan A. Rickauer <[EMAIL PROTECTED]>: People from time to time say they don't want to have a compiler installed on a productive system due to security issues. I don't understand this. Isn't is too late anyway, if someone's already able to make use of the compile

4.0-beta SSH and GSSAPI Segmentation fault.

2006-08-24 Thread Jan Johansson
Hello. ssh on a recent snapshot does not like trying gssapi-with-mic when there is no ticket file. I did not see any relevant patches in the CVS web. Jan J :; sysctl kern.version kern.version=OpenBSD 4.0-beta (GENERIC) #1083: Mon Aug 21 21:24:02 MDT 2006 [EMAIL PROTECTED]:/usr/src/sys/arch

Re: Questions about cfs

2006-08-24 Thread Michael
Ok I played around a bit and what I got so far is this. A file or directory created by a common user can be access by root as it should be. A file created by root can not read by a user even though the permissions allow it (644). When I issue "chmod 644 file" as root, it works. A directory cre

Problem upgrading to 3.9 - Proliant dl380 g2 with LSI MegaRAID 320-1 RAID-card

2006-08-24 Thread Jonas Thambert
Hello list, I'm having problem upgrading a 3.8 stable to 3.9 stable. The server is a Prolian dl380 g2 with a LSI MegaRAID 320-1. When booting the CD it stops right after ami driver is loaded: ami0 at pci3 dev 4 function 0 "Symbios Logic MegaRAID" rev 0x01: irq 7 Under 3.8 it works great. I have

Polish diffs to calendar.history

2006-08-24 Thread Mikolaj Kucharski
Hello, I think that you can remove out obsolete holidays and put there our current dates. Sorry, but references are in Polish language. References 1. http://pl.wikipedia.org/wiki/Narodowe_%C5%9Awi%C4%99to_Niepodleg%C5%82o%C5%9Bci 2. http://pl.wikipedia.org/wiki/Narodowe_%C5%9Awi%C4%99to_Odrodz

Re: Dsniff ports failure

2006-08-24 Thread David T Harris
Packages are precompiled binary executable forms of programs. They're typically located at OpenBSD mirrors, and on the OpenBSD website. http://www.openbsd.org/3.9_packages/ is one such location to start finding packages for 3.9. If you're running 3.8 or 3.7 just replace 3.9 with 3.8/3.7.

Re: Questions about cfs

2006-08-24 Thread Michael
Ok I played around a bit and what I got so far is this. A file or directory created by a common user can be access by root as it should be. A file created by root can not read by a user even though the permissions allow it (644). When I issue "chmod 644 file" as root, it works. A directory cre

if_spppsubr.c overflow

2006-08-24 Thread Dries Schellekens
Hey, Is OpenBSD vunerable to NetBSD Security Advisory 2006-019? http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-019.txt.asc FreeBSD seems to contain the same bugs and has issued advisory as well: http://security.freebsd.org/advisories/FreeBSD-SA-06:18.ppp.asc The FreeBSD patc

Re: Questions about cfs

2006-08-24 Thread Michael
Even though I can mount the same encrypted folder with different users and create files, and permissions are 644 or 755 it is not possible to access files/folders created by other users, only own stuff. Neither is it possible, even as the owner, to change the ownership of files/folders inside the

Re: Why no compiler on prod system [Was: Re: How to update httpd without a compiller]

2006-08-24 Thread Anton Karpov
2006/8/24, Stephan A. Rickauer <[EMAIL PROTECTED]>: > > People from time to time say they don't want to have a compiler > installed on a productive system due to security issues. I don't > understand this. Isn't is too late anyway, if someone's already able to > make use of the compiler? > > -- >

Re: Why no compiler on prod system [Was: Re: How to update httpd without a compiller]

2006-08-24 Thread Jaye Mathisen
Well, given the prevalance of scripting languages and such, it seems like a false sense of security. And frankly, why can't the cracker that already knows what OS he's working on, not just supply a pre-compiled binary... But whatever works for people. Han Boetes wrote: Tomas wrote: Yes

Re: Why no compiler on prod system [Was: Re: How to update httpd without a compiller]

2006-08-24 Thread Stephan A. Rickauer
Tomas wrote: > Yes it's too late, but why to let a hacker to compile his exploits on > your system and to go compromising other PCs (from your DMZ or from > internet, it doesn't matter). If a hacker is on your system, he'll also manage to install the compiler himself before using it. Stephan [de

Re: Why no compiler on prod system [Was: Re: How to update httpd without a compiller]

2006-08-24 Thread Han Boetes
Tomas wrote: > Yes it's too late, but why to let a hacker to compile his > exploits on your system and to go compromising other PCs (from > your DMZ or from internet, it doesn't matter). Exactly, all compilers should be forbidden! # Han

Re: Why no compiler on prod system [Was: Re: How to update httpd without a compiller]

2006-08-24 Thread Tomas
Yes it's too late, but why to let a hacker to compile his exploits on your system and to go compromising other PCs (from your DMZ or from internet, it doesn't matter). Stephan A. Rickauer wrote: People from time to time say they don't want to have a compiler installed on a productive system du

Why no compiler on prod system [Was: Re: How to update httpd without a compiller]

2006-08-24 Thread Stephan A. Rickauer
People from time to time say they don't want to have a compiler installed on a productive system due to security issues. I don't understand this. Isn't is too late anyway, if someone's already able to make use of the compiler? -- Stephan A. Rickauer