Re: termios, setting stopbits question

2007-10-04 Thread Alexey Vatchenko
On 2007-10-04, Christian Weisgerber <[EMAIL PROTECTED]> wrote: > So you just set five data bits, no parity, CSTOPB, and you'll be > fine. Just why you would need this is beyond me, though. The only > application that comes to mind is interfacing with 50-year-old > teletype equipment. Thanks for

Re: configuring ntpd to use GPS

2007-10-04 Thread James Hartley
On 10/4/07, Chris Kuethe <[EMAIL PROTECTED]> wrote: > On 10/4/07, James Hartley <[EMAIL PROTECTED]> wrote: > > In /etc/ntpd.conf, the only line left enabled is: > > > > sensor cuaU0 > > nope "sensor nmea0" Noted & changed to the above. > > In /etc/rc.conf.local, the only lines are: >

Re: configuring ntpd to use GPS

2007-10-04 Thread Chris Kuethe
On 10/4/07, James Hartley <[EMAIL PROTECTED]> wrote: > After reading the manpages for ntpd(8), ntpd.conf(5), & nmeaattach(8), > I thought I had enough information to use a USB GPS device as a time > source. > > In /etc/ntpd.conf, the only line left enabled is: > > sensor cuaU0 nope "se

configuring ntpd to use GPS

2007-10-04 Thread James Hartley
After reading the manpages for ntpd(8), ntpd.conf(5), & nmeaattach(8), I thought I had enough information to use a USB GPS device as a time source. In /etc/ntpd.conf, the only line left enabled is: sensor cuaU0 In /etc/rc.conf.local, the only lines are: nmeaattach cuaU0

firewall is very slow, something's wrong

2007-10-04 Thread Florin Andrei
Dual-homed firewall, web server on the private network, firewall is doing 1:1 NAT for the web server to the public interface of the firewall. em0 is the public interface, em1 is the private one. In the exact same setup (same hardware even) I am comparing Linux and OpenBSD for a firewall. Insta

Re: [Soekris] Soekris vpn1401 and vpn1411 (use Hi/fn 7955 security accelerator chip) supported?

2007-10-04 Thread Ryan L. Faircloth
Stuart my first two units are on their way what method would give me a better understanding of the benefits of the 1401/11 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stuart Henderson Sent: Thursday, October 04, 2007 7:07 PM To: Brian A. Seklecki Cc:

Re: partition layout

2007-10-04 Thread Clint Pachl
Douglas A. Tutty wrote: Hello all, I have a 486DX4-100 with 32 MB ram. I bought an 8 GB drive to put in my P-II and it won't boot it so I've put in in the 486 along with a 1 GB drive. I'm on dialup and would like to avoid a bad partitioning decision requring a whole new install/download cycle

Re: Soekris vpn1401 and vpn1411 (use Hi/fn 7955 security accelerator chip) supported?

2007-10-04 Thread Stuart Henderson
On 2007/10/04 16:32, Brian A. Seklecki wrote: > On an semi-related note, I recently tested the vpn1411 in a > significantly faster (2.8GHz P4 Celeron D): > > des3/3des: > > w/ acceleration: > > # time dd if=/dev/zero bs=1m count=100 | openssl des3 -pass pass:test ^ T

Re: Sun Hardware

2007-10-04 Thread Jonathan Lindsey
Last call for hardware. I got a few responses but nothing firm. I'm giving these away to a guy here locally if I don't get any response from y'all. I have a sparc 20, 10, 5, 4, 2 all seem to be in working condition. I have 3 or 4 sparc classics, 3 external scsi hard drives, and a sparc tape dri

Re: qemu speed

2007-10-04 Thread Allie D.
I'm bitter because I can't run java on it. I have to use ubuntu with VirtualBox to run some critical work apps that use java :( -- ~Allie D. On Thu, October 4, 2007 15:41, Jacob Yocom-Piatt wrote: > Gerald Thornberry wrote: >> I've never used QEMU so I may be talking out my hat. Looking at the

Re: qemu speed

2007-10-04 Thread Jacob Yocom-Piatt
Gerald Thornberry wrote: I've never used QEMU so I may be talking out my hat. Looking at the docs for it yesterday I remember seeing something about the QEMU accelerator. Is that an option here? "When used as a virtualizer, QEMU achieves near native performances by executing the guest code dir

PF state limits and logs

2007-10-04 Thread Piotrek Kapczuk
Hello Recently I've had problems because my firewall (4.1-stable) has hit states limit. I was surprised when I found nothing in logs (debug urgent) . Is it intented or is it an oversight ? Regards Piotrek

Packets with IP options passed

2007-10-04 Thread Darren Spruell
I've noticed a few of these PF log entries that were logging traffic passed and containing IP options: Sep 30 22:52:12.586548 rule 32/(ip-option) [uid 0, pid 9872] pass in on sis1: 10.0.1.23.1031 > x.x.13.31.1: [udp sum ok] udp 68 (ttl 255, id 5, len 100, optlen=4 IPOPT-148{4})

Re: pf

2007-10-04 Thread Chad M Stewart
On Oct 4, 2007, at 11:11 AM, a.padilla wrote: Hi, I'm a student trying to learn pf on my own. I'm trying to set up a nat. I've read documentation yet I still can't get the internal machine to communicate to the outside world. I've been following this documentation: http://www.openbsd.org

Re: Soekris vpn1401 and vpn1411 (use Hi/fn 7955 security accelerator chip) supported?

2007-10-04 Thread Brian A. Seklecki
> Timo Schoeler <[EMAIL PROTECTED]> wrote: On an semi-related note, I recently tested the vpn1411 in a significantly faster (2.8GHz P4 Celeron D): des3/3des: w/ acceleration: # time dd if=/dev/zero bs=1m count=100 | openssl des3 -pass pass:test -engine cryptodev -out /dev/null engine "cryptodev

Re: Riz Khan Show: One Laptop Per Child

2007-10-04 Thread ropers
Ahrgh. The show's already over. A missed opportunity, but nevermind. The reason why I didn't call them myself, is that I'm not qualified -- I sort of dimly remember the discussion, but I don't really know enough about the issues. Oh, and I got the phone number wrong, sorry. That number was for SM

Re: To whom can I direct email for artwork use permission pls?

2007-10-04 Thread Han Boetes
Brian Candler wrote: > I would argue that OpenBSD is probably the least "free" of all > the free Unix options out there. Why? > > * You cannot download an ISO image and burn it yourself. > * If you buy a CD-ROM, you cannot legally make copies to give to > your friends, your school etc. You mix u

Re: To whom can I direct email for artwork use permission pls?

2007-10-04 Thread pu
Marc Balmer wrote: why are you on our mailing lists? Because he has the freedom to?

vsftpd, pam, virtual users

2007-10-04 Thread nicodache
Hello, I'm busy setting up vsftpd on my OpenBSD 4.1 server, using virtual users, and as adviced on ftp://vsftpd.beasts.org/users/cevans/untar/vsftpd-2.0.5/EXAMPLE/VIRTUAL_USERS/README , with pam. However, it seems pam does not exist on OpenBSD, because of security problems. What would you advice

Re: OpenBSD Desktop sighted in Yahoo Bangalore, India

2007-10-04 Thread Nick Guenther
On 10/4/07, Siju George <[EMAIL PROTECTED]> wrote: > On 10/4/07, Nick Guenther <[EMAIL PROTECTED]> wrote: > > > > To the original poster: can you get your friend to ask about these > > things for us? *Did* Yahoo India buy the OpenBSD discs or did it just > > download them? Is there a large OpenBSD

Re: OpenBSD Desktop sighted in Yahoo Bangalore, India

2007-10-04 Thread Siju George
On 10/4/07, Nick Guenther <[EMAIL PROTECTED]> wrote: > > To the original poster: can you get your friend to ask about these > things for us? *Did* Yahoo India buy the OpenBSD discs or did it just > download them? Is there a large OpenBSD presence or is the desktop an > odd one-off installed by the

Re: hardware for vpn

2007-10-04 Thread Kevin Cheng
> http://code.google.com/p/bsd-appliance/wiki/HardwareVendorsAxi > omtekNA820 > > http://code.google.com/p/bsd-appliance/wiki/HardwareVendorsNex > comNSA1085 > Very solid machines that we run for two years too. Kevin

Re: hardware for vpn

2007-10-04 Thread Brian A. Seklecki
On Thu, 2007-10-04 at 17:54 +0200, Piotrek Kapczuk wrote: > 2007/10/4, Brian A. Seklecki <[EMAIL PROTECTED]>: > > > I'm demo'ing some 1U P4-class network appliance hardware that will > > probably fit your needs well. See URLs below. > [...] > > > http://code.google.com/p/bsd-appliance/wiki/Hardw

Re: pf

2007-10-04 Thread James Mackinnon
make sure you have IP forwarding setup in your /etc/sysctl.conf Nat is pretty easy in pf once forwarding is setup nat on $EXTERNALINTERFACE inet from $INTERNELNETWORK to any -> $EXTERNALINTERFACE where $EXTERNALINTERFACE and $INTERNALNETWORK is your interface settings. James - Origina

Re: pf

2007-10-04 Thread Andreas Andersson
pf/nat.html before I go any further, is this the correct place to ask this sort of question? __ NOD32 2571 (20071004) Information __ This message was checked by NOD32 antivirus system. http://www.eset.com Can you include your pf.conf and dmesg?

Re: hardware for vpn

2007-10-04 Thread Piotrek Kapczuk
2007/10/4, Brian A. Seklecki <[EMAIL PROTECTED]>: > I'm demo'ing some 1U P4-class network appliance hardware that will > probably fit your needs well. See URLs below. [...] > http://code.google.com/p/bsd-appliance/wiki/HardwareVendorsAxiomtekNA820 > > http://code.google.com/p/bsd-appliance/wiki/

Re: To whom can I direct email for artwork use permission pls?

2007-10-04 Thread Jan Stary
On Oct 03 19:27:59, Brian Candler wrote: > The reason nobody makes free OpenBSD ISO images, I presume, is because > the user base is comparatively tiny, and it's not worth the effort. Do you mean the effort of running rsync && mkisofs, or the effort of writing a trivial shell script wrapper around

Re: pf

2007-10-04 Thread Roman Strogin
On 10/4/07, a.padilla <[EMAIL PROTECTED]> wrote: > Hi, I'm a student trying to learn pf on my own. I'm trying to set up > a nat. I've read documentation yet I still can't get the internal > machine to communicate to the outside world. > > I've been following this documentation: http://www.openbs

Re: qemu speed (was: wine question)

2007-10-04 Thread Gerald Thornberry
I've never used QEMU so I may be talking out my hat. Looking at the docs for it yesterday I remember seeing something about the QEMU accelerator. Is that an option here? "When used as a virtualizer, QEMU achieves near native performances by executing the guest code directly on the host CPU. A ho

Re: pf

2007-10-04 Thread Peter N. M. Hansteen
"a.padilla" <[EMAIL PROTECTED]> writes: > Hi, I'm a student trying to learn pf on my own. I'm trying to set up > a nat. I've read documentation yet I still can't get the internal > machine to communicate to the outside world. First thing to check: what are your pass rules? > before I go any f

pf

2007-10-04 Thread a.padilla
Hi, I'm a student trying to learn pf on my own. I'm trying to set up a nat. I've read documentation yet I still can't get the internal machine to communicate to the outside world. I've been following this documentation: http://www.openbsd.org/faq/pf/ nat.html before I go any further, is

Re: sign and timestamp

2007-10-04 Thread Gábri Máté
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 There'll be two main servers, a web server and a sql server. We have to insert a timestamp and a signature in the specified rows of tables. Periodically the sql server will make pdf documents from the data and we have to sign and timestamp these docs t

Re: Encrypting partitions with openbsd 4.1 or 4.2

2007-10-04 Thread Chris Kuethe
On 10/4/07, Julian Leyh <[EMAIL PROTECTED]> wrote: > IIRC, you can't use vnd0 for partitions, somehow it causes problems. But > if you use vnd1 or a higher number, it should just work. About the only reason I could see for that being the case is that the release(8) process is hard-coded to use vnd

Re: qemu speed (was: wine question)

2007-10-04 Thread Frank Bax
Indeed, this is a FoxPro program. I had tried changing the path; and tested it by starting program without using full path to EXE - although the program does startup this way; it still fails at the same point. I also tried QEMU; but was still researching options before bringing speed question

Re: Encrypting partitions with openbsd 4.1 or 4.2

2007-10-04 Thread Jacob Yocom-Piatt
Julian Leyh wrote: On 12:25 Wed 03 Oct , Chris Kuethe wrote: The developer of whom you speak may be slightly misinformed, or just hasn't tried it. There is no need to mention names, but as of ... hmmm... 2 minutes ago, i was able to use vnd to encrypt an entire partition. IIRC, you

Re: termios, setting stopbits question

2007-10-04 Thread Christian Weisgerber
Alexey Vatchenko <[EMAIL PROTECTED]> wrote: > How is it possible to set 1.5 stopbits in tcsetattr(3) ? > The only thing that i found related to stopbits is CSTOPB (2 stopbits). > But iirc 5 databits can be used in conjunction with 1 or 1.5 stopbits. UARTs derived from the Intel 8250 (i.e., PC "CO

Re: hardware for vpn

2007-10-04 Thread Brian A. Seklecki
On Thu, 2007-10-04 at 15:24 +0200, Marc Balmer wrote: > Tang Tse wrote: > > > Just one question regarding VPNs OpenBSD and HW, is there any recomendation > > for hardware? i mean, i want to setup a VPN between 2 offices and i need > > some reasonable speed.. with a computer with some recent hardwa

Re: Cisco 3002 VPN client to OpenBSD?

2007-10-04 Thread Brian A. Seklecki
There is a lot of work in racoon(8) as a server and client on Cisco proprietary extensions. I haven't tested it in about 10 weeks, though. You'll want to run the trunk source code from ipsec-tools if you test it. I'm not sure if the ipsec(4) stack in OpenBSD 4.x will work with racoon, though. ~B

Re: partition layout

2007-10-04 Thread Douglas A. Tutty
On Thu, Oct 04, 2007 at 08:39:57AM -0300, Marcus Andree wrote: > On 10/4/07, Douglas A. Tutty <[EMAIL PROTECTED]> wrote: > > On Wed, Oct 03, 2007 at 07:46:01PM -0400, Nick Holland wrote: > > > Douglas A. Tutty wrote: > > > > > > > > I have a 486DX4-100 with 32 MB ram. I bought an 8 GB drive to put

Re: hardware for vpn

2007-10-04 Thread Marc Balmer
Tang Tse wrote: Just one question regarding VPNs OpenBSD and HW, is there any recomendation for hardware? i mean, i want to setup a VPN between 2 offices and i need some reasonable speed.. with a computer with some recent hardware do i need any vpn card to accelerate encryptation/decryptation?

hardware for vpn

2007-10-04 Thread Tang Tse
Hi again! Just one question regarding VPNs OpenBSD and HW, is there any recomendation for hardware? i mean, i want to setup a VPN between 2 offices and i need some reasonable speed.. with a computer with some recent hardware do i need any vpn card to accelerate encryptation/decryptation? thanks!

Re: sign and timestamp

2007-10-04 Thread Joachim Schipper
On Wed, Oct 03, 2007 at 05:21:09PM -0700, Ted Unangst wrote: > On 10/3/07, Gabri Mati <[EMAIL PROTECTED]> wrote: > > I've read a lot about timestamping a document, but dunno how it works in > > practice. How can i apply a timestamp to a digitally signed or encrypted > > document? Like i encrypt or

Türk Patent Enstitüsü ve Moğolistan Fikri Mülkiyet Ofisi Dayanışması

2007-10-04 Thread NETMARK PATENT
T|rk Patent Enstit|s| ve Mopolistan Fikri M|lkiyet Ofisi Dayan}~mas} T|rk Patent Enstit|s| (TPE) ve Mopolistan Fikri M|lkiyet Ofisi (IPOM) aras}ndaki teknik i~birlipi gvr|~meleri 21-23 Apustos 2007 tarihlerinde Mopolistan'}n Ulan Batur ~ehrinde gergekle~tirildi. IPOM personelinin coprafi i~aretl

Re: partition layout

2007-10-04 Thread Peter N. M. Hansteen
"Marcus Andree" <[EMAIL PROTECTED]> writes: > If you're trying to install OpenBSD on a 486 machine just to keep your > proficience levels, why not just virtualize it on whatever is the OS that will > boot the P-II? I suppose the real answer to that is along the lines of 'there is nothing that

Re: partition layout

2007-10-04 Thread Marcus Andree
On 10/4/07, Douglas A. Tutty <[EMAIL PROTECTED]> wrote: > On Wed, Oct 03, 2007 at 07:46:01PM -0400, Nick Holland wrote: > > Douglas A. Tutty wrote: > > > Hello all, > > > > > > I have a 486DX4-100 with 32 MB ram. I bought an 8 GB drive to put in my > > > P-II and it won't boot it so I've put in in

Re: hoststated with multiple virtual hosts

2007-10-04 Thread José Costa
My scenario is this: ifconfig sis0 10.0.0.1 netmask 255.255.255.0 ifconfig carp0 10.0.0.10 netmask 255.255.255.0 vhid 1 ifconfig carp1 10.0.0.20 netmask 255.255.255.0 vhid 2 (two carp interfaces because I can't have carp with 2 or more IP addresses) ifconfig sis1 172.16.0.1 netmask 255.255.255.0

Re: Encrypting partitions with openbsd 4.1 or 4.2

2007-10-04 Thread Julian Leyh
On 12:25 Wed 03 Oct , Chris Kuethe wrote: > The developer of whom you speak may be slightly misinformed, or just > hasn't tried it. There is no need to mention names, but as of ... > hmmm... 2 minutes ago, i was able to use vnd to encrypt an entire > partition. IIRC, you can't use vnd0 for par

Re: ms exchange replacement

2007-10-04 Thread Lars Noodén
Joachim Schipper wrote: > ... > Sendmail is a lot better. And something like Postfix is even sane ;-). Indeed, you should already be running Postfix, Exim or Sendmail in front to collects, queue and store the messages and to limit contact with the net. > However, integrating all that with a compl

termios, setting stopbits question

2007-10-04 Thread Alexey Vatchenko
Hi guys! I'm adding serial port support to my ``netfwd'' (http://www.bsdua.org/netfwd.html) and faced a problem. How is it possible to set 1.5 stopbits in tcsetattr(3) ? The only thing that i found related to stopbits is CSTOPB (2 stopbits). But iirc 5 databits can be used in conjunction with 1 o

Re: wine question

2007-10-04 Thread Richard Toohey
I do not know much about wine, but the issue interested me ... I've built from ports and I am having a look. From the manual page, re. the wine configuration file, it has this: format: path = default: C:\WINDOWS;C:\WINDOWS\SYSTEM Used to specify the path which will be use