Re: Important OpenBSD errata

2007-03-16 Thread Sunnz
It is not just an implication, that's exactly what it said: receives OpenBSD security advisories and pointers to security patches as they become available. If I tell you that I'll give you fries as they become available what would you think I am saying? It is really simple English and as there

Re: Important OpenBSD errata

2007-03-16 Thread Lars Hansson
On Fri, 16 Mar 2007 18:03:02 +1100 Sunnz [EMAIL PROTECTED] wrote: If I tell you that I'll give you fries as they become available what would you think I am saying? Unless it's your job to give them to me now and I have paid you to do so I'd expect to get them whenever you have them and feel

Re: Dump(8) not honoring nodump flag

2007-03-16 Thread daniele . pilenga
[EMAIL PROTECTED] wrote on 15/03/2007 19:26:48: * [EMAIL PROTECTED] [EMAIL PROTECTED] Trying to dump a filesystem with nodump flags on some folders results in these folders been dumped anyway, even on higher level dump and even if I specify -h flag to dump. Your correct, the nodump

Re: Important OpenBSD errata

2007-03-16 Thread Sunnz
2007/3/16, Travers Buda [EMAIL PROTECTED]: * tony sarendal [EMAIL PROTECTED] [2007-03-16 06:03:49]: of ingratitude... because there is ingratitude. To add insult to injury, people ask for more than what is freely offered. Example: this thread. Are people really asking for more than what is

Re: Important OpenBSD errata

2007-03-16 Thread Sunnz
But if you see fries do become available wouldn't you ask me what happened? Yes I may have no obligation to give you fries, but since I said I will give you the fries when they become available, should I not expect you to ask me what's went wrong with my offering? 2007/3/16, Lars Hansson [EMAIL

Re: Important OpenBSD errata

2007-03-16 Thread tony sarendal
On 16/03/07, Travers Buda [EMAIL PROTECTED] wrote: * tony sarendal [EMAIL PROTECTED] [2007-03-16 06:03:49]: http://www.openbsd.org/mail.html --- *security-announce* Security announcements. This low volume list receives OpenBSD security advisories and pointers to security patches as

Re: Important OpenBSD errata

2007-03-16 Thread Artur Grabowski
Karl O. Pinc [EMAIL PROTECTED] writes: On 03/15/2007 11:04:49 PM, Jeremy Huiskamp wrote: That's what I was going to say. If you did things properly, you would have had this patch applied before you knew that it was a remote hole. You have a valid point: any bug is a security problem.

Contradictory statement on vulnerability

2007-03-16 Thread Karel Kulhavy
http://www.coresecurity.com/index.php5?module=ContentModaction=itemid=1703 says: Vulnerable Packages OpenBSD 4.1 prior to Feb. 26th, 2006. OpenBSD 4.0 Current OpenBSD 4.0 Stable [...] OpenBSD-current, 4.1, 4.0 and 3.9 have the fix incorporated in their source code tree and kernel binaries for

Re: inet6 buffer overflow

2007-03-16 Thread Karel Kulhavy
On Thu, Mar 15, 2007 at 11:52:44AM +0100, Claudio Jeker wrote: On Thu, Mar 15, 2007 at 10:26:23AM +, Gaby Vanhegan wrote: Hi, Reading the security advisory for the ipv6 buffer issue, the workaround is to block inet6 traffic in pf.conf. My default block line is actually:

Re: Important OpenBSD errata

2007-03-16 Thread Karel Kulhavy
On Tue, Mar 13, 2007 at 04:46:26PM -0600, Theo de Raadt wrote: This means everyone should have our latest patches installed. [...] *Solution/Vendor Information/Workaround* The OpenBSD team has released a security fix to correct the mbuf problem, it is available as a source code patch for

Re: Important OpenBSD errata

2007-03-16 Thread Kian Mohageri
On 3/16/07, Lars Hansson [EMAIL PROTECTED] wrote: On Fri, 16 Mar 2007 18:03:02 +1100 Sunnz [EMAIL PROTECTED] wrote: If I tell you that I'll give you fries as they become available what would you think I am saying? Unless it's your job to give them to me now and I have paid you to do so

Re: Contradictory statement on vulnerability

2007-03-16 Thread Joachim Schipper
On Fri, Mar 16, 2007 at 09:42:47AM +0100, Karel Kulhavy wrote: http://www.coresecurity.com/index.php5?module=ContentModaction=itemid=1703 says: Vulnerable Packages OpenBSD 4.1 prior to Feb. 26th, 2006. OpenBSD 4.0 Current OpenBSD 4.0 Stable [...] OpenBSD-current, 4.1, 4.0 and 3.9 have

OpenBSD-Entwickler wollten kritische Lu:cke kleinreden

2007-03-16 Thread Karel Kulhavy
Heise.de http://www.heise.de/security/news/meldung/86730 CL

Re: Important OpenBSD errata

2007-03-16 Thread Reyk Floeter
On Fri, Mar 16, 2007 at 02:31:09AM +, Karl O. Pinc wrote: I agree. I'm very annoyed that I have to read about this problem on slashdot. The misc list is not the right place for this announcement, some low-traffic announce list that goes right into my inbox is where this stuff belongs. I

Re: Important OpenBSD errata

2007-03-16 Thread Karel Kulhavy
On Wed, Mar 14, 2007 at 05:45:39PM +0100, Tom Van Looy wrote: What about: Release Mode: FORCED RELEASE? This is about the exploit, right? And not the advisory. Why isn't anything written on the title page openbsd.org? Having a remote root exec proof of concept is not enough to ask the users to

Re: Important OpenBSD errata

2007-03-16 Thread Martin Schröder
2007/3/16, Kian Mohageri [EMAIL PROTECTED]: Yeah. Expectations aside, being condescending is never warranted. Both Karl and Martin did just that. They could have asked if there was a reason it wasn't sent to security-announce@ instead of misc@, rather than saying This is terrible handling of

Re: Important OpenBSD errata

2007-03-16 Thread Joachim Schipper
On Fri, Mar 16, 2007 at 09:54:16AM +0100, Karel Kulhavy wrote: On Tue, Mar 13, 2007 at 04:46:26PM -0600, Theo de Raadt wrote: This means everyone should have our latest patches installed. *Solution/Vendor Information/Workaround* The OpenBSD team has released a security fix to correct

Re: inet6 buffer overflow

2007-03-16 Thread Joachim Schipper
On Fri, Mar 16, 2007 at 09:48:19AM +0100, Karel Kulhavy wrote: I have put block in inet6 into my /etc/pf.conf. Do I need to do anything else (turn something on somewhere else) or does it already protect against the overflow? How can I test that the protection really works? Is there somewhere a

OpenBSD cartoons

2007-03-16 Thread Karel Kulhavy
Who's drawing those OpenBSD cartoons like http://www.openbsd.org/images/openbsd41_cover.gif They are cool. Can Theo draw so well or does he employ an artist? CL

Re: Important OpenBSD errata

2007-03-16 Thread Martin Schröder
2007/3/16, Theo de Raadt [EMAIL PROTECTED]: I don't know what to say. I am trying to get past the first impression of you being a whining liar who quotes some fiction author. Theo, is flaming all you have to say in this thread? Seriously: Do you think this bug was handled in the right way?

Re: Dump(8) not honoring nodump flag

2007-03-16 Thread Alexander Hall
[EMAIL PROTECTED] wrote: This also means that every time I want to dump a fs I have to reset the nodump flags for all the files in those directories I don't want to include as newer files won't keep that. Since dump does not traverse filesystyems, an alternative solution is to store the

Re: OpenBSD-Entwickler wollten kritische Lu:cke kleinreden

2007-03-16 Thread Lars Hansson
On Fri, 16 Mar 2007 10:08:02 +0100 Karel Kulhavy [EMAIL PROTECTED] wrote: http://www.heise.de/security/news/meldung/86730 And for the majority of the worlds population that doesn't speak German this says exactly what? -- Lars Hansson [EMAIL PROTECTED]

make release question for a non developer

2007-03-16 Thread Didier Wiroth
Hello, I'm not a developer and I don't have any programming skills ... sadly ... ;-( From time to time I build my own releases on a i386. When I do a make release I would like 2 additional kernels to be build automatically. A (standard) Make release builds the following kernels: 1) bsd 2)

Re: Important OpenBSD errata

2007-03-16 Thread Tor Houghton
On Fri, Mar 16, 2007 at 09:54:16AM +0100, Karel Kulhavy wrote: Is it possible to fix OpenBSD 4.0 system without compiling anything, by e. g. somehow rewriting the file that contains the kernel? I have never compiled OpenBSD, ports etc. and don't have time to study all the theory around

Re: Important OpenBSD errata

2007-03-16 Thread Martin Schröder
2007/3/16, Lars Hansson [EMAIL PROTECTED]: OpenBSD project isn't exactly overflowing with personell. But maybe Karl and Martin are volunteering to maintain security-announce. I'd be willing to do that (forward erratas to security-announce), but let's not forget that OpenBSD is a dictatorship,

Re: weird PF behavior

2007-03-16 Thread Alexander Hall
Ryan Corder wrote: alternatively, I did this and it seemed to work pass out on bge0 from inside to { any, !outside } pass out on bge0 from inside to { any, !llcidr } The above is an overkill equivalent to pass out on bge0 from inside to any which I doubt is what you want. /Alexander

Re: Important OpenBSD errata

2007-03-16 Thread Stuart Henderson
Is it possible to fix OpenBSD 4.0 system without compiling anything, by e. g. somehow rewriting the file that contains the kernel? Yes, if you have a copy of the kernel from someone you trust to provide it. I have never compiled OpenBSD, ports etc. No need to compile all of OpenBSD. 1. If

Re: make release question for a non developer

2007-03-16 Thread Miod Vallat
etc.i386/Makefile.inc, line 24: Need an operator You need an empty line before each target... (here, bsd.acpi) etc.i386/Makefile.inc, line 26: Need an operator etc.i386/Makefile.inc, line 29: Need an operator etc.i386/Makefile.inc, line 31: Need an operator And commands used to build them

Re: OpenBSD-Entwickler wollten kritische Lu:cke kleinreden

2007-03-16 Thread Stéphane Chausson
Report states that OpenBSD developers played down critical vulnerability http://www.heise-security.co.uk/news/86757 Lars Hansson wrote: On Fri, 16 Mar 2007 10:08:02 +0100 Karel Kulhavy [EMAIL PROTECTED] wrote: http://www.heise.de/security/news/meldung/86730 And for the majority of the

Re: Important OpenBSD errata

2007-03-16 Thread Alexander Hall
Karel Kulhavy wrote: On Tue, Mar 13, 2007 at 04:46:26PM -0600, Theo de Raadt wrote: This means everyone should have our latest patches installed. [...] *Solution/Vendor Information/Workaround* The OpenBSD team has released a security fix to correct the mbuf problem, it is available as a

pfctl question

2007-03-16 Thread Bill Meigs
If I run the command # pfctl -vsr I get counters started from the last time I loaded the rule set. Is there a way to find out the Date and Time I last loaded the rule set so that I can know the length of time it took to acquire x number of packets, etc? I see a line for Status: Enabled ...

Re: Important OpenBSD errata

2007-03-16 Thread Richard Thornton
Hi I have donated, my hard earned. I don't involve myself commercially in OBSD but I listen. This is idiotic, a big hole was found and the devs pissed about because they didn't want to admit it. OBSD's strength is in being open, be open. Move on and end this. Theo, chill out. Cheers Rich

Re: OpenBSD-Entwickler wollten kritische Lu:cke kleinreden

2007-03-16 Thread Frank Tegtmeyer
Lars Hansson [EMAIL PROTECTED] writes: And for the majority of the worlds population that doesn't speak German this says exactly what? The article claims that the OpenBSD developers tried to deny that the ICMPv6 bug is a remotely exploitable security hole. Regards, Frank

Re: Important OpenBSD errata

2007-03-16 Thread John Gould
On Fri, 16 Mar 2007, Joachim Schipper wrote: On Fri, Mar 16, 2007 at 09:54:16AM +0100, Karel Kulhavy wrote: On Tue, Mar 13, 2007 at 04:46:26PM -0600, Theo de Raadt wrote: This means everyone should have our latest patches installed. *Solution/Vendor Information/Workaround* The OpenBSD

Re: OpenBSD-Entwickler wollten kritische Lu:cke kleinreden

2007-03-16 Thread Ralph Gessner
Lars Hansson wrote: And for the majority of the worlds population that doesn't speak German this says exactly what? http://www.heise-security.co.uk/news/86757

Re: OpenBSD-Entwickler wollten kritische Lu:cke kleinreden

2007-03-16 Thread Didier Wiroth
Lars Hansson wrote: On Fri, 16 Mar 2007 10:08:02 +0100 Karel Kulhavy [EMAIL PROTECTED] wrote: http://www.heise.de/security/news/meldung/86730 And for the majority of the worlds population that doesn't speak German this says exactly what? Hello, It says more or less: That the OpenBSD

Re: OpenBSD cartoons

2007-03-16 Thread Anton Karpov
2007/3/16, Karel Kulhavy [EMAIL PROTECTED]: Who's drawing those OpenBSD cartoons like http://www.openbsd.org/images/openbsd41_cover.gif They are cool. Can Theo draw so well or does he employ an artist? CL It's Ty Semaka (http://www.tysemaka.com/), he did all the graphics and lyrics in

Re: OpenBSD-Entwickler wollten kritische Lu:cke kleinreden

2007-03-16 Thread Lars Hansson
On Fri, 16 Mar 2007 11:23:59 +0100 Frank Tegtmeyer [EMAIL PROTECTED] wrote: The article claims that the OpenBSD developers tried to deny that the ICMPv6 bug is a remotely exploitable security hole. Aha. Slow newsday in Germany, eh? -- Lars Hansson [EMAIL PROTECTED]

Re: Important OpenBSD errata

2007-03-16 Thread Stuart Henderson
On 2007/03/16 11:02, Alexander Hall wrote: I added block quick inet6 to pf.conf. I obviously do not use IPv6. IPv6 link-local (which doesn't need any configuration, it's enabled by default) can be a useful backup to have in the event of accidentally breaking IPv4 (missing 'alias' to ifconfig(8)

Re: Dump(8) not honoring nodump flag

2007-03-16 Thread daniele . pilenga
[EMAIL PROTECTED] wrote on 03/16/2007 10:43:44 AM: [EMAIL PROTECTED] wrote: This also means that every time I want to dump a fs I have to reset the nodump flags for all the files in those directories I don't want to include as newer files won't keep that. Since dump does not traverse

Re: make release question for a non developer

2007-03-16 Thread Alexander Hall
Miod Vallat wrote: You need an empty line before each target... (here, bsd.acpi) I should know better than to correct a developer, but apart from that it would look better and help avoiding issues with trailing backslashes (which should not be there anyway), this is not really _needed_, is

Re: Important OpenBSD errata

2007-03-16 Thread Lars Hansson
On Fri, 16 Mar 2007 21:22:58 +1100 Richard Thornton [EMAIL PROTECTED] wrote: This is idiotic, a big hole was found and the devs pissed about because they didn't want to admit it. Say what? Didn't want to admit it? In what alternative universe was this? OBSD's strength is in being open, be

Re: OpenBSD-Entwickler wollten kritische Lu:cke kleinreden

2007-03-16 Thread Christian Fuchs
Greetings! As i happen to speak german, here's a small summary: The article, which is from the 14th of March, quotes an Article from the 13th where heise.de reported on the fix that has been quite an issue here on the mailing list. The article then goes on to state that n article by core

Re: OpenBSD-Entwickler wollten kritische Lu:cke kleinreden

2007-03-16 Thread Matthias Kilian
On Fri, Mar 16, 2007 at 05:56:03PM +0800, Lars Hansson wrote: http://www.heise.de/security/news/meldung/86730 And for the majority of the worlds population that doesn't speak German this says exactly what? It looks like some kind of (deliberate?) misinterpretation of the Core report. Heise

sshd configure howto

2007-03-16 Thread Jay Jesus Amorin
hi gurus, how will i configure sshd to allow only one username at a time. example: on pc1 ssh [EMAIL PROTECTED] on pc2 ssh [EMAIL PROTECTED] now what i like to happen is ssh on pc2 should be drop bec. the user root is already connected from pc1. is it possible with to configure

Re: OpenBSD cartoons

2007-03-16 Thread Andrei GUDIU
http://www.tysemaka.com/openbsd.html Karel Kulhavy wrote: Who's drawing those OpenBSD cartoons like http://www.openbsd.org/images/openbsd41_cover.gif They are cool. Can Theo draw so well or does he employ an artist? CL

Important OpenBSD errata

2007-03-16 Thread Almir Karic
is this a second remote hole in default install? -- almir

Re: OpenBSD-Entwickler wollten kritische Lu:cke kleinreden

2007-03-16 Thread Artur Grabowski
Stiphane Chausson [EMAIL PROTECTED] writes: Report states that OpenBSD developers played down critical vulnerability Report states that you can either choose spam about every single crash in the system fixed which would lead to a couple of security advisory spam every week if we were serious

Re: Contradictory statement on vulnerability

2007-03-16 Thread Karel Kulhavy
On Fri, Mar 16, 2007 at 09:54:47AM +0100, Vincent GROSS wrote: On 3/16/07, Karel Kulhavy [EMAIL PROTECTED] wrote: http://www.coresecurity.com/index.php5?module=ContentModaction=itemid=1703 says: Vulnerable Packages OpenBSD 4.1 prior to Feb. 26th, 2006. OpenBSD 4.0 Current OpenBSD 4.0 Stable

heise online: Report states that OpenBSD developers played down critical vulnerability

2007-03-16 Thread Martin Schröder
This piece of news from the heise security newsticker has been sent to you by Martin Schrvder [EMAIL PROTECTED]. The sender's address has not been verified. If you doubt the sender's authenticy please ignore this mail.

Re: Important OpenBSD errata

2007-03-16 Thread Theo de Raadt
This is idiotic, a big hole was found and the devs pissed about because they didn't want to admit it. Noone in OpenBSD is pissed off about this. We posted the bug fix as soon as we became aware of the problem. The timeline goes like this: 1) We were told there was a mbuf crash, which could

Re: OpenBSD-Entwickler wollten kritische Lu:cke kleinreden

2007-03-16 Thread Theo de Raadt
wether the bug has really been fixed. Later, some reader told them that this was related to the suggested workaround (scrub vs. block), and today that statement has been removed. Without any comment. The problem with scrub is that Core thought it was a sufficient workaround. Itojun looked at

Re: Important OpenBSD errata

2007-03-16 Thread Jason Dixon
On Mar 16, 2007, at 6:20 AM, John Gould wrote: On Fri, 16 Mar 2007, Joachim Schipper wrote: Is it possible to fix OpenBSD 4.0 system without compiling anything, by e. g. somehow rewriting the file that contains the kernel? I have never compiled OpenBSD, ports etc. and don't have time to

Re: OpenBSD-Entwickler wollten kritische Lu:cke kleinreden

2007-03-16 Thread Christian Fuchs
Hi again! Dammit now iv'e translated it altough there was an english version of it online? Better read the real version, not my sloppy transcript :) Best regards, Christian Fuchs On Mar 16, 2007, at 11:27 AM, Ralph Gessner wrote: Lars Hansson wrote: And for the majority of the worlds

Re: make release question for a non developer

2007-03-16 Thread Miod Vallat
You need an empty line before each target... (here, bsd.acpi) I should know better than to correct a developer, but apart from that it would look better and help avoiding issues with trailing backslashes (which should not be there anyway), this is not really _needed_, is it? You're indeed

Re: OpenBSD-Entwickler wollten kritische Lu:cke kleinreden

2007-03-16 Thread Shane J Pearson
On 16/03/2007, at 8:56 PM, Lars Hansson wrote: On Fri, 16 Mar 2007 10:08:02 +0100 Karel Kulhavy [EMAIL PROTECTED] wrote: http://www.heise.de/security/news/meldung/86730 And for the majority of the worlds population that doesn't speak German this says exactly what? There is an English

pkg_add -ui auto update choses lower version of package by default if there is only one option

2007-03-16 Thread Siju George
Hi, I tried today to update my packages with the $sudo pkg_add -ui command. I found that it selected lower versions of the packages automatically :-( as senn in the sample below. Candidates for updating vim-7.0.109-gtk2 - vim-7.0.42-gtk2 Candidates for updating vlc-0.8.4ap7 - vlc-0.8.4ap6

Re: Important OpenBSD errata

2007-03-16 Thread z0mbix
On 16/03/07, Almir Karic [EMAIL PROTECTED] wrote: is this a second remote hole in default install? -- almir http://www.openbsd.org/

Re: Contradictory statement on vulnerability

2007-03-16 Thread Marius ROMAN
You need to read the FAQ : http://cvs.openbsd.org/faq/faq10.html#Patches http://cvs.openbsd.org/faq/upgrade40.html Read the ENTIRE FAQ, because it's there for a GOOD reason. Marius On 3/16/07, Karel Kulhavy [EMAIL PROTECTED] wrote: On Fri, Mar 16, 2007 at 09:54:47AM +0100, Vincent GROSS

ral, ibss and packets larger than 200 bytes

2007-03-16 Thread Stefan Sperling
Hello, I've recently got a ral-based card and I have a problem in IBSS mode. It seems that ral fails to send any kind of packets larger than 200 bytes (192 bytes + 8 bytes icmp header). I want to use my ral-based card to connect to the freifunk network in Berlin, Germany. (Freifunk can be

Re: OpenBSD-Entwickler wollten kritische Lu:cke kleinreden

2007-03-16 Thread Henning Brauer
* Lars Hansson [EMAIL PROTECTED] [2007-03-16 12:24]: On Fri, 16 Mar 2007 11:23:59 +0100 Frank Tegtmeyer [EMAIL PROTECTED] wrote: The article claims that the OpenBSD developers tried to deny that the ICMPv6 bug is a remotely exploitable security hole. Aha. Slow newsday in Germany, eh? no,

Re: Contradictory statement on vulnerability

2007-03-16 Thread Paul de Weerd
On Fri, Mar 16, 2007 at 12:09:28PM +0100, Karel Kulhavy wrote: | I am not following anything - just installed OpenBSD 4.0 from a CD. What should | I follow, then? | | In other operating system the concept of upgrading is straightforward - Windows | ask you and you press OK, in Gentoo Linux you

Re: Contradictory statement on vulnerability

2007-03-16 Thread Tobias Weisserth
Hi, On Friday, 16. March 2007 12:09, Karel Kulhavy wrote: I am not following anything - just installed OpenBSD 4.0 from a CD. What should I follow, then? That's your choice. If you just want a stable and reliable OpenBSD then install -release (that's what you did). If you want to keep it

Re: Important OpenBSD errata

2007-03-16 Thread Karl O. Pinc
On 03/16/2007 02:51:48 AM, Kian Mohageri wrote: Expectations aside, being condescending is never warranted. Both Karl and Martin did just that. I did not intend to be condesending and apologise if it was taken that way. Karl [EMAIL PROTECTED] Free Software: You don't pay back, you pay

Re: Dump(8) not honoring nodump flag

2007-03-16 Thread Jim Razmus
* [EMAIL PROTECTED] [EMAIL PROTECTED] [070316 03:58]: [EMAIL PROTECTED] wrote on 15/03/2007 19:26:48: * [EMAIL PROTECTED] [EMAIL PROTECTED] Trying to dump a filesystem with nodump flags on some folders results in these folders been dumped anyway, even on higher level dump and even

Re: Important OpenBSD errata

2007-03-16 Thread Diana Eichert
On Fri, 16 Mar 2007, Jason Dixon wrote: You're welcome to use my unsupported -stable kernel that I make available for aac users. Please read the aac.README for more details. http://colo2.dixongroup.net/releases/unsupported/4.0-stable-20070314/i386/ P.S. As Joachim mentions, you have to

Re: Important OpenBSD errata

2007-03-16 Thread Martin Schröder
2007/3/16, Karl O. Pinc [EMAIL PROTECTED]: On 03/16/2007 02:51:48 AM, Kian Mohageri wrote: Expectations aside, being condescending is never warranted. Both Karl and Martin did just that. I did not intend to be condesending and apologise if it was taken that way. Same here. It was a

Re: Contradictory statement on vulnerability

2007-03-16 Thread Anton Karpov
In other operating system the concept of upgrading is straightforward - Windows ask you and you press OK, in Gentoo Linux you type a magic sequence of magic commands and your system is up to date. In OpenBSD, you type a logical sequence of logical commands and your system is up to date. No

Re: Contradictory statement on vulnerability

2007-03-16 Thread Lars D . Noodén
On Fri, 16 Mar 2007, Tobias Weisserth wrote: A nice newbie site explaining this with examples is www.openbsd101.com, if you don't understand the OpenBSD FAQ. Thanks for posting that one. It hadn't turned up in any of my searches and if it was in any documents I already looked at, I must have

Re: Important OpenBSD errata

2007-03-16 Thread Jason Dixon
On Mar 16, 2007, at 9:53 AM, Diana Eichert wrote: On Fri, 16 Mar 2007, Jason Dixon wrote: You're welcome to use my unsupported -stable kernel that I make available for aac users. Please read the aac.README for more details. http://colo2.dixongroup.net/releases/unsupported/4.0-

Re: Contradictory statement on vulnerability

2007-03-16 Thread Ray Percival
On Mar 16, 2007, at 4:09 AM, Karel Kulhavy wrote: snip I am not following anything That's obvious. - just installed OpenBSD 4.0 from a CD. What should I follow, then? In other operating system the concept of upgrading is straightforward - Windows ask you and you press OK, in Gentoo Linux

Re:

2007-03-16 Thread Nick !
On 3/15/07, x x [EMAIL PROTECTED] wrote: I on Ok, I'm using 4.0 from the FTP install for the sets, I still have find how to get the ports installed, and wanted to see if, and how, to get K 3.5.6 installed, or should I just use what's ever in the ftp directory for 4.0. So you don't

Request for dmesg with Gigabyte GA-M61PM-S2

2007-03-16 Thread Mikolaj Kucharski
Hi, Could someone who submit dmesg with GA-M61PM-S2 motherboard be so kind and send it to me off the list with `sysctl hw' output. Thanks in advance. On Wed, Mar 14, 2007 at 11:30:33PM -0600, Jonathan Gray wrote: CVSROOT: /cvs Module name: src Changes by: [EMAIL PROTECTED]

Re: inet6 buffer overflow

2007-03-16 Thread Darren Spruell
On 3/16/07, Karel Kulhavy [EMAIL PROTECTED] wrote: On Thu, Mar 15, 2007 at 11:52:44AM +0100, Claudio Jeker wrote: On Thu, Mar 15, 2007 at 10:26:23AM +, Gaby Vanhegan wrote: Hi, Reading the security advisory for the ipv6 buffer issue, the workaround is to block inet6 traffic in

Re: Important OpenBSD errata

2007-03-16 Thread Miod Vallat
PS Besides the aac stuff I noticed marc-20070203. What is marc? MARC is a top secret project only US government agencies and their contractors know about. The name stands for : Moderately Advanced Rumours Creator and is being used as part of an evil conspiracy to reduce the

Re: weird PF behavior

2007-03-16 Thread Ryan Corder
On Fri, 2007-03-16 at 11:09 +0100, Alexander Hall wrote: Ryan Corder wrote: alternatively, I did this and it seemed to work pass out on bge0 from inside to { any, !outside } pass out on bge0 from inside to { any, !llcidr } The above is an overkill equivalent to pass out on bge0

Re: Important OpenBSD errata

2007-03-16 Thread Travers Buda
* tony sarendal [EMAIL PROTECTED] [2007-03-16 08:15:18]: I don't see how your excuses apply here. I can't help this =) : I noticed your quote about metaphysics. Well it's metaphysically ridiculous to even expect excuses from people who owe you nothing. If Theo made a mistake by not sending

Re: Contradictory statement on vulnerability

2007-03-16 Thread Travers Buda
* Karel Kulhavy [EMAIL PROTECTED] [2007-03-16 12:09:28]: In other operating system the concept of upgrading is straightforward - Windows ask you and you press OK, in Gentoo Linux you type a magic sequence of magic commands and your system is up to date. But in OpenBSD it seems that the

Re: Dump(8) not honoring nodump flag

2007-03-16 Thread daniele . pilenga
[EMAIL PROTECTED] wrote on 03/16/2007 02:40:38 PM: [...] I'm working on a patch. The hold up is digging through restore to make sure I do this correctly. No point in frogging up dumpinomap, dumpdirmap, and usedinomap if restore doesn't do what you expect. Why should this

Re: Important OpenBSD errata

2007-03-16 Thread Diana Eichert
On Fri, 16 Mar 2007, Miod Vallat wrote: PS Besides the aac stuff I noticed marc-20070203. What is marc? MARC is a top secret project only US government agencies and their contractors know about. The name stands for : Moderately Advanced Rumours Creator and is being used as part of an evil

Re: Important OpenBSD errata

2007-03-16 Thread Jacob Yocom-Piatt
Miod Vallat wrote: PS Besides the aac stuff I noticed marc-20070203. What is marc? MARC is a top secret project only US government agencies and their contractors know about. The name stands for : Moderately Advanced Rumours Creator and is being used as part of an evil conspiracy to

Re: Important OpenBSD errata

2007-03-16 Thread Greg Thomas
On 3/16/07, Travers Buda [EMAIL PROTECTED] wrote: * tony sarendal [EMAIL PROTECTED] [2007-03-16 08:15:18]: I don't see how your excuses apply here. I can't help this =) : I noticed your quote about metaphysics. Well it's metaphysically ridiculous to even expect excuses from people who owe

Re: pkg_add -ui auto update choses lower version of package by default if there is only one option

2007-03-16 Thread Marc Espie
On Fri, Mar 16, 2007 at 05:50:45PM +0530, Siju George wrote: Hi, I tried today to update my packages with the $sudo pkg_add -ui command. I found that it selected lower versions of the packages automatically :-( as senn in the sample below. Candidates for updating

No Blob without Puffy

2007-03-16 Thread Karel Kulhavy
Is it true that Puffy is not here because of Theo's concerns about his copyrighted Puffy logo? http://misc.allbsd.de/Kampagnen/NoBlob/NoBlob-en-Poster.jpg I also couldn't use Puffy logo on Ronja because then I wouldn't be able to talk about OpenBSD negatively if it came out there is some serious

Re: No Blob without Puffy

2007-03-16 Thread Jack J. Woehr
On Mar 16, 2007, at 12:18 PM, Karel Kulhavy wrote: I think Theo should stop being paranoid about his Puffy. You don't understand! Theo's just trying to protect us. Handling the deadly pufferfish is very dangerous, and best left to experts! -- Jack J. Woehr Director of Development Absolute

Re: Important OpenBSD errata

2007-03-16 Thread Darren Spruell
On 3/16/07, Martin Schrvder [EMAIL PROTECTED] wrote: [snip blah blah blah...] After all the kvetching and sensationalism that's characterized both this thread and the release of this errata, there's a few things I wanted to point out. Theo's already put out the timeline and circumstances around

Re: No Blob without Puffy

2007-03-16 Thread Greg Thomas
On 3/16/07, Karel Kulhavy [EMAIL PROTECTED] wrote: Is it true that Puffy is not here because of Theo's concerns about his copyrighted Puffy logo? http://misc.allbsd.de/Kampagnen/NoBlob/NoBlob-en-Poster.jpg I also couldn't use Puffy logo on Ronja because then I wouldn't be able to talk about

Re: No Blob without Puffy

2007-03-16 Thread Theo de Raadt
Is it true that Puffy is not here because of Theo's concerns about his copyrighted Puffy logo? http://misc.allbsd.de/Kampagnen/NoBlob/NoBlob-en-Poster.jpg No. That is false. Whoever told you that lied to you. I also couldn't use Puffy logo on Ronja because then I wouldn't be able to talk

Re: Router performance on OpenBSD and OpenBGPD

2007-03-16 Thread Dan Farrell
Yeah that's what I was thinking... you not only eliminate a single point of failure, but you also split your pps throughput requirements in half. Danno Danno.appliedi.net/drupal/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Martin Toft Sent:

Re: weird PF behavior

2007-03-16 Thread Ryan Corder
On Fri, 2007-03-16 at 19:29 +0100, Almir Karic wrote: the {} thingy is strictly text expansion, which means your rules expand to: pass out on bge0 from inside to any pass out on bge0 from inside to !outside pass out on bge0 from inside to any pass out on bge0 from inside to !llcidr if you

Re: pkg_add -ui auto update choses lower version of package by default if there is only one option

2007-03-16 Thread Siju George
On 3/16/07, Marc Espie [EMAIL PROTECTED] wrote: Wait for 4.2. Sorry, it's not implemented yet. pkg_add doesn't really know how to compare versions. And in case you're wondering, it's harder than it seems... Thankyou so much marc for the reply :-) In the mean time what would be the best way to

Re: No Blob without Puffy

2007-03-16 Thread K K
It'd be great if Theo could make a clear statement on Puffy, the same as Marshall Kirk McKusick has for the daemon. I had cause to use a variant of Marshall's beastie for a project which was marginally within his published guidelines, and had no problem getting permission. On 3/16/07, Karel

Re: weird PF behavior

2007-03-16 Thread Dave Anderson
** Reply to message from Ryan Corder [EMAIL PROTECTED] on Fri, 16 Mar 2007 14:01:38 -0500 very simply, this thread could have ended a day or two ago if the following process would have taken place: 1) is my syntax wrong? YES 2) OK, what is wrong with it? Pointed out and understood.

Re: Important OpenBSD errata

2007-03-16 Thread Kian Mohageri
On 3/16/07, Karl O. Pinc [EMAIL PROTECTED] wrote: On 03/16/2007 02:51:48 AM, Kian Mohageri wrote: Yeah. Expectations aside, being condescending is never warranted. We've all spent more time on this than it's worth, but I would appreciate it if you'd point out any condescension in my

can CARP monitor an interface?

2007-03-16 Thread Alex Berdan
Hi, Is it possible to make CARP to monitor an interface and if that interface is down to switch to slave from master? (I know this is possible with HSRP) Thanks -- Alex

Re: Important OpenBSD errata

2007-03-16 Thread Karel Kulhavy
On Fri, Mar 16, 2007 at 01:26:39PM +, Karl O. Pinc wrote: On 03/16/2007 03:54:16 AM, Karel Kulhavy wrote: On Tue, Mar 13, 2007 at 04:46:26PM -0600, Theo de Raadt wrote: This means everyone should have our latest patches installed. [...] *Solution/Vendor Information/Workaround*

Re: No Blob without Puffy

2007-03-16 Thread Bob Beck
* Karel Kulhavy [EMAIL PROTECTED] [2007-03-16 12:20]: Is it true that Puffy is not here because of Theo's concerns about his copyrighted Puffy logo? http://misc.allbsd.de/Kampagnen/NoBlob/NoBlob-en-Poster.jpg Hunh? a No Blob poster with FreeBSD on it? that's a fucking joke. they're the

Re: Contradictory statement on vulnerability

2007-03-16 Thread Karel Kulhavy
On Fri, Mar 16, 2007 at 01:33:36PM +0100, Vincent GROSS wrote: ok, I'll try to be clear : there is a -current branch (HEAD in CVS technobabble). nearly every six month, -current give birth to a release (CDs). a release shall move as little as possible. but sometimes, (like now) there is a

Re: can CARP monitor an interface?

2007-03-16 Thread Jacob Yocom-Piatt
Alex Berdan wrote: Hi, Is it possible to make CARP to monitor an interface and if that interface is down to switch to slave from master? (I know this is possible with HSRP) ifstated(8) Thanks

Upgrade direction from older to newer

2007-03-16 Thread Karel Kulhavy
One should also understand that the update process is supported in only one direction: from older to newer, and from -stable to -current. http://openbsd.org/faq/faq5.html Is it possible to upgrade from 4.0-current to 4.1-stable? CL

  1   2   >