Re: Adaptec AIC-7860/AIC-7890

2006-10-22 Thread Miod Vallat
> I'm trying to install a snapshot on a Dell PowerEdge 6300 using the > floppyB boot disk. > Unfortunately, the Adaptec AIC-7860/AIC-7890 SCSI Host adapters aren't > being configured so I cannot setup the disks. According to > http://openbsd.org/i386.html the AIC-7860 and AIC-7890 are supported > b

Re: Sun Niagara supported?

2006-10-22 Thread Jason George
>I'm just wondering if the Niagara chip (by Sun) is supported on OpenBSD Full and proper support of the Ultrasparc III processor is pretty much an implied requirement first... and we're still working on that...

Re: new tool: openportd

2006-10-22 Thread Lars Hansson
On Sunday 22 October 2006 22:41, you wrote: > this isn't correct. Every service had some security problems in the > past. Imagin that your service X is vulnerable (only since a few h > by a zero day exploit or so) and someone tries to exploit it at 2:00 in > the morning. Good thing there cant be an

Sun Niagara supported?

2006-10-22 Thread Jean-Daniel Beaubien
Hi, I'm just wondering if the Niagara chip (by Sun) is supported on OpenBSD (On-die encryption would make for very sweet vpn firewalls me thinks). I think I read somewhere something about Sun kind of open sourcing the design of the chip, did I dream this? Thanks, JD P.S. WHEN WILL THOSE

Re: Solution to -> Re: SSH upgrade to ver 4.4 on OBSD 3.9 stable broke key auth

2006-10-22 Thread Damien Miller
On Sun, 22 Oct 2006, Girish Venkatachalam wrote: > You mean to say that newer versions of OpenSSL do not allow you to > create DSA keys longer than 1024 bits, but then isn't there an export > and a non export version? No, longer DSA keys do not offer extra cryptographic strength unless you make o

Re: Adaptec AIC-7860/AIC-7890

2006-10-22 Thread Martin Reindl
Tom <[EMAIL PROTECTED]> wrote: > Hi > I'm trying to install a snapshot on a Dell PowerEdge 6300 using the > floppyB boot disk. it's on floppy A

Re: [OT, rant and despair] Re: More ammunition for the Blob fight

2006-10-22 Thread Ingo Schwarze
Matthias Kilian wrote on Sun, Oct 22, 2006 at 09:14:01PM +0200: > On Mon, Oct 16, 2006 at 04:13:44PM -0500, Robby Workman wrote: >> Linux: NVIDIA Binary Graphics Driver Exploit >> http://kerneltrap.org/node/7228 >> http://www.rapid7.com/advisories/R7-0025.jsp > > Yes, and really scares me are the

Re: [OT, rant and despair] Re: More ammunition for the Blob fight

2006-10-22 Thread ropers
On 22/10/06, ropers <[EMAIL PROTECTED]> wrote: On 22/10/06, Matthias Kilian <[EMAIL PROTECTED]> wrote: > I don't know the english words, so here's my impression of this > situation in german (perhaps someone may translate it): > > Die Leute lassen sich wie die Laemmer zur Schlachtbank >

Sun x2100 M2 DMESG weirdenn and remote access. OpenBSD 4.0

2006-10-22 Thread Daniel Ouellet
Hi, I loaded 4.0 into a nice new Sun x2100 M2 and looks like it's working pretty well so far anyway. But I see a few weird things in the dmesg, like the dual core cpu display one core at 1.8GHz and the other at 2.4 sometime? Some device show not configure, but looks like they work. Compare

Re: pf load balancing and failover

2006-10-22 Thread Per-Olov Sjöholm
On Sunday 22 October 2006 21:13, Kevin Reay wrote: > On 10/22/06, Per-Olov Sjvholm <[EMAIL PROTECTED]> wrote: > > Hi again > > > > I am looking at the CVS. I can't see its possible to out of the box > > remove addresses from a round robin scheme in PF against a faulty web > > server. Am I missing

[OT, rant and despair] Re: More ammunition for the Blob fight

2006-10-22 Thread Matthias Kilian
On Mon, Oct 16, 2006 at 04:13:44PM -0500, Robby Workman wrote: > Linux: NVIDIA Binary Graphics Driver Exploit > > http://kerneltrap.org/node/7228 > http://www.rapid7.com/advisories/R7-0025.jsp Yes, and really scares me are the guys that still don't get it. After some days of vacation I just chec

Adaptec AIC-7860/AIC-7890

2006-10-22 Thread Tom
Hi I'm trying to install a snapshot on a Dell PowerEdge 6300 using the floppyB boot disk. Unfortunately, the Adaptec AIC-7860/AIC-7890 SCSI Host adapters aren't being configured so I cannot setup the disks. According to http://openbsd.org/i386.html the AIC-7860 and AIC-7890 are supported by ahc(4)

Re: pf load balancing and failover

2006-10-22 Thread Per-Olov Sjöholm
On Sunday 22 October 2006 17:29, Bill Marquette wrote: > On 10/22/06, Per-Olov Sjvholm <[EMAIL PROTECTED]> wrote: > > Hi > > > > I have followed this thread. Can anyone point out a working download > > link? Sourceforge does not have any working mirrors for this > > slbd-1.3.tar.gz file.. Probably

Re: [OT, rant and despair] Re: More ammunition for the Blob fight

2006-10-22 Thread ropers
On 22/10/06, Matthias Kilian <[EMAIL PROTECTED]> wrote: I don't know the english words, so here's my impression of this situation in german (perhaps someone may translate it): Die Leute lassen sich wie die Laemmer zur Schlachtbank fuehren -- immer und immer wieder. People let

Re: new tool: openportd

2006-10-22 Thread Jan Stary
> It is like a port knocking service but a little bit different: > > Normaly a port knocking service uses TCP/UDP, but openportd > uses ICMP echo response packets because they are not so easy > to send like echo requests or TCP/UDP port tests (kiddies could > simply use ping or nmap for this job).

Re: pf load balancing and failover

2006-10-22 Thread Kevin Reay
On 10/22/06, Per-Olov Sjvholm <[EMAIL PROTECTED]> wrote: Hi again I am looking at the CVS. I can't see its possible to out of the box remove addresses from a round robin scheme in PF against a faulty web server. Am I missing something? But I maybe misunderstood Kevin Reay that in this thread s

Re: Package update candidates

2006-10-22 Thread Marc Espie
On Sun, Oct 22, 2006 at 02:18:09PM +0400, Bruno Carnazzi wrote: > Hi misc, > > When upgrading some packages with 'pkg_add -u', I sometimes see : > No need to update > and > Candidates for updating -> > > What's the difference ? > Please notice that in first case, the package seems "ignored",

Re: new tool: openportd

2006-10-22 Thread Nick Holland
Steffen Wendzel wrote: > On Sun, 22 Oct 2006 14:42:18 +0200 "Inigo T. A." <[EMAIL PROTECTED]> wrote: ... > : If you have a security problem with a service, the only "more secure" > : action is to fix it, don't to open it eventually. > : > > this isn't correct. Every service had some security prob

Re: new tool: openportd

2006-10-22 Thread ropers
On 22/10/06, Steffen Wendzel <[EMAIL PROTECTED]> wrote: On Sun, 22 Oct 2006 14:42:18 +0200 "Inigo T. A." <[EMAIL PROTECTED]> wrote: : El dom, 22-10-2006 a las 12:40 +0200, Steffen Wendzel escribis: : > On Sat, 21 Oct 2006 20:57:39 -0400 "Nick Guenther" <[EMAIL PROTECTED]> wrote: : : > : : > : So

Re: pf load balancing and failover

2006-10-22 Thread Bill Marquette
On 10/22/06, Per-Olov Sjvholm <[EMAIL PROTECTED]> wrote: Hi I have followed this thread. Can anyone point out a working download link? Sourceforge does not have any working mirrors for this slbd-1.3.tar.gz file.. Probably a misconfiguration somewhere. Hmm, didn't notice that they didn't mirror

Re: new tool: openportd

2006-10-22 Thread Tobias Weisserth
Hi, On Oct 22, 2006, at 4:41 PM, Steffen Wendzel wrote: this isn't correct. Every service had some security problems in the past. Imagin that your service X is vulnerable (only since a few h by a zero day exploit or so) and someone tries to exploit it at 2:00 in the morning. but if you run

Re: new tool: openportd

2006-10-22 Thread Darrin Chandler
On Sun, Oct 22, 2006 at 04:41:17PM +0200, Steffen Wendzel wrote: > > this isn't correct. Every service had some security problems in the > past. Imagin that your service X is vulnerable (only since a few h > by a zero day exploit or so) and someone tries to exploit it at 2:00 in > the morning. >

Re: Solution to -> Re: SSH upgrade to ver 4.4 on OBSD 3.9 stable broke key auth

2006-10-22 Thread Per-Olov Sjöholm
On Sunday 22 October 2006 15:48, Girish Venkatachalam wrote: > On Sat, Oct 21, 2006 at 10:04:19PM +0200, Per-Olov Sj??holm wrote: > > Here is a post with info that solves and explain the case if someone else > > get stuck in the problem. > > > > This problem was actually caused by an updated OpenS

Re: new tool: openportd

2006-10-22 Thread Steffen Wendzel
On Sun, 22 Oct 2006 14:42:18 +0200 "Inigo T. A." <[EMAIL PROTECTED]> wrote: : El dom, 22-10-2006 a las 12:40 +0200, Steffen Wendzel escribis: : > On Sat, 21 Oct 2006 20:57:39 -0400 "Nick Guenther" <[EMAIL PROTECTED]> wrote: : : > : : > : So this is like an insecure version of SSH? : > : > it h

Re: new tool: openportd

2006-10-22 Thread Inigo T. A.
El dom, 22-10-2006 a las 12:40 +0200, Steffen Wendzel escribis: > On Sat, 21 Oct 2006 20:57:39 -0400 "Nick Guenther" <[EMAIL PROTECTED]> wrote: > : > : So this is like an insecure version of SSH? > > it has nothing todo with SSH. And of course it isn't very secure > BUT it adds security where no

Re: Solution to -> Re: SSH upgrade to ver 4.4 on OBSD 3.9 stable broke key auth

2006-10-22 Thread Girish Venkatachalam
On Sat, Oct 21, 2006 at 10:04:19PM +0200, Per-Olov Sj??holm wrote: > Here is a post with info that solves and explain the case if someone else get > stuck in the problem. > > This problem was actually caused by an updated OpenSSL. I have had 2048 and > 4096 SSH keys that have worked perfect unt

Re: pf load balancing and failover

2006-10-22 Thread Per-Olov Sjöholm
On Sunday 22 October 2006 01:44, Kevin Reay wrote: > > Point of correction, slbd didn't have the ability to ping IP addresses. > > Good call. > > > You might check the code in CVS, it should compile and work on 3.9. > > Your right, I didn't notice it was being maintained. Thanks for the > pointer,

Re: new tool: openportd

2006-10-22 Thread Clint M. Sand
On Sun, Oct 22, 2006 at 03:55:39AM -0700, Kian Mohageri wrote: > On 10/22/06, Steffen Wendzel <[EMAIL PROTECTED]> wrote: > > > > > > You normaly have different open ports > > > > pf(4) makes this a minor issue. No offense, but what you have there (in the > example specifically) is no better tha

Re: new tool: openportd

2006-10-22 Thread Kian Mohageri
On 10/22/06, Steffen Wendzel <[EMAIL PROTECTED]> wrote: > > > You normaly have different open ports pf(4) makes this a minor issue. No offense, but what you have there (in the example specifically) is no better than a "limited" (if you consider ability to reboot or kill ssh "limited") version o

Re: new tool: openportd

2006-10-22 Thread Steffen Wendzel
On Sat, 21 Oct 2006 20:57:39 -0400 "Nick Guenther" <[EMAIL PROTECTED]> wrote: : On 10/21/06, Steffen Wendzel <[EMAIL PROTECTED]> wrote: : > hi, : > : > I wrote a new tool I call OpenPortd for my linux distribution : > but since I my linux distribution is still under development : > and I want to r

Re: new tool: openportd

2006-10-22 Thread Antti Harri
On Sat, 21 Oct 2006, Nick Guenther wrote: On 10/21/06, Steffen Wendzel <[EMAIL PROTECTED]> wrote: 40tg340503n5 pf/iptables (load some other rules or whatever) So this is like an insecure version of SSH? If you configure it to behave like that, probably. But if you configure it to open a po

Package update candidates

2006-10-22 Thread Bruno Carnazzi
Hi misc, When upgrading some packages with 'pkg_add -u', I sometimes see : No need to update and Candidates for updating -> What's the difference ? Please notice that in first case, the package seems "ignored", and in the second case, the package seems uninstalled and reinstalled in the sam