Re: acpitz3: critical temperature exceeded with HP nc6320 Laptop

2014-04-10 Thread Tomas Bodzar
On Fri, Apr 11, 2014 at 3:18 AM, Steve Quinn wrote: > On Thu, Apr 10, 2014 at 7:31 AM, Tomas Bodzar > wrote: > > > Just one side note. Most (or all?) "major" operating systems are using > > implementation of ACPI from Intel, but OpenBSD has own implementation > > > http://www.openbsd.org/cgi-bin

Re: PF for a VPS

2014-04-10 Thread Tomas Bodzar
On Fri, Apr 11, 2014 at 1:35 AM, Sinosuke Noara wrote: > Hi guys, > > I've rented a virtual private server with some friends and we would like to > deploy a firewall. I suggested packet filter and OpenBSD because I have it > at home, but really don't know about the performace of the OpenBSD packet

Re: # rm ../snapshots/i386/INSTALL.linux

2014-04-10 Thread Amit Kulkarni
nowadays in the days of UEFI, it is just plain wrong. that document will probably be deleted. On Thu, Apr 10, 2014 at 7:19 PM, Fung wrote: > out of sync? > http://ftp.openbsd.org/pub/OpenBSD/snapshots/i386/INSTALL.linux

Re: acpitz3: critical temperature exceeded with HP nc6320 Laptop

2014-04-10 Thread Theo de Raadt
> I have access to several of these HP models and can test locally, > provide remote access or ship one if required > Again, I'm from the Toronto area and am hitting my first BSDCan in May > if that helps. A very helpful approach would be: 1. Find a few cheap machines that are 100% confirmed to h

Re: acpitz3: critical temperature exceeded with HP nc6320 Laptop

2014-04-10 Thread Steve Quinn
On Thu, Apr 10, 2014 at 9:16 PM, Theo de Raadt wrote: >> I had the same issue a couple of weeks ago with my Sager laptop. An >> update to a newer snapshot seemed to "solve" it. > > From time to time we have to explain this one. > > There is unknown and not yet understood bug, which we think is rel

Re: acpitz3: critical temperature exceeded with HP nc6320 Laptop

2014-04-10 Thread Steve Quinn
On Thu, Apr 10, 2014 at 7:31 AM, Tomas Bodzar wrote: > Just one side note. Most (or all?) "major" operating systems are using > implementation of ACPI from Intel, but OpenBSD has own implementation > http://www.openbsd.org/cgi-bin/man.cgi?query=acpi&sektion=4&apropos=0&manpath=OpenBSD+Current&arc

Re: acpitz3: critical temperature exceeded with HP nc6320 Laptop

2014-04-10 Thread Theo de Raadt
> I had the same issue a couple of weeks ago with my Sager laptop. An > update to a newer snapshot seemed to "solve" it. >From time to time we have to explain this one. There is unknown and not yet understood bug, which we think is related to acpi EC handling. It seems to affect HP laptops more

Re: acpitz3: critical temperature exceeded with HP nc6320 Laptop

2014-04-10 Thread Mike Bregg
I had the same issue a couple of weeks ago with my Sager laptop. An update to a newer snapshot seemed to "solve" it. Sorry, I can't really offer any advice as the issue seemed to resolve on its own after the update and hasn't surfaced on any snapshots since then. Mike On Apr 9, 2014 4:37 PM, S

Re: PF for a VPS

2014-04-10 Thread Martin Brandenburg
Sinosuke Noara wrote: > Hi guys, > > I've rented a virtual private server with some friends and we would like to > deploy a firewall. I suggested packet filter and OpenBSD because I have it > at home, but really don't know about the performace of the OpenBSD packet > filter into a virtual machin

Re: acpitz3: critical temperature exceeded with HP nc6320 Laptop

2014-04-10 Thread Steve Quinn
On Thu, Apr 10, 2014 at 3:53 AM, Riccardo Mottola wrote: > If that temperature were to be correct, your Silicon would be liquid or > possibly even gaseous :) :-) I noticed it would even boil a Titanium case ! http://www.chemicalelements.com/elements/ti.html > I had a nc6120 and there was an A

PF for a VPS

2014-04-10 Thread Sinosuke Noara
Hi guys, I've rented a virtual private server with some friends and we would like to deploy a firewall. I suggested packet filter and OpenBSD because I have it at home, but really don't know about the performace of the OpenBSD packet filter into a virtual machine. The idea is to have some (6-9) di

Re: Nonexistant domains resolve to my local domain

2014-04-10 Thread Stuart Henderson
On 2014-04-10, Hugo Osvaldo Barrera wrote: > I've wildcard CNAME set up (which responds for any non-existant > subdomain": > > *.barrera.io IN CNAME elysion.barrera.io. ah. when people say not to use wildcard DNS records because they cause hard to debug problems, this is exactly what they're ta

Re: FYA: http://heartbleed.com/

2014-04-10 Thread John Moser
On Thu, Apr 10, 2014 at 4:18 PM, John Moser wrote: > Also why has nobody corrected me on this yet? I've read El Reg's > analysis, and they missed a critical detail that I didn't see until I read > the code in context: IT ALLOCATES TOO SMALL OF A WRITE BUFFER, TOO. Okay, > it would send out the

Re: FYA: http://heartbleed.com/

2014-04-10 Thread Theo de Raadt
> Maybe in your imaginary world where your malloc() library is a static code > correctness analysis tool instead of a behavioral anomaly detection tool. > > The fact remains that this was a boundary error triggered by incorrect user > input validation--that it would not crash under any circumstanc

Smokeping on -current

2014-04-10 Thread Atanas Vladimirov
On the last snapshot smokeping failed at startup. It fails even when I run it manually via rc.d script. $ sudo /etc/rc.d/smokeping -d start doing rc_read_runfile doing rc_check smokeping doing rc_pre doing rc_start Dropping privileges to _smokeping ... require Smokeping::probes::FPing failed: Can

Re: FYA: http://heartbleed.com/

2014-04-10 Thread Giancarlo Razzolini
Em 10-04-2014 15:22, Theo de Raadt escreveu: >>> Compile libssl with -DDOPENSSL_NO_BUF_FREELIST >>> >>> >> Yes but that's because OpenSSL is broken. > If OpenSSL had not been broken in this respect, Segglemann's bug > would not have survived any sort of testing or peer review. > >> So no, fixing Op

Re: FYA: http://heartbleed.com/

2014-04-10 Thread Theo de Raadt
> > Compile libssl with -DDOPENSSL_NO_BUF_FREELIST > > > > > Yes but that's because OpenSSL is broken. If OpenSSL had not been broken in this respect, Segglemann's bug would not have survived any sort of testing or peer review. > So no, fixing OpenSSL to work without its freelist would not necess

Re: FYA: http://heartbleed.com/

2014-04-10 Thread Theo de Raadt
> The moment this went out, some blackhat may have secretly analyzed the > diff between 1.0 and 1.0.1 and gone, "Oh lol!" Or maybe saw the new > support for TLS Heartbeat and gone, "Hey man, a new feature. I bet I > can break it!" Security researchers took until 1.0.1f to do this. Even before h

Re: FYA: http://heartbleed.com/

2014-04-10 Thread John Moser
Theo de Raadt cvs.openbsd.org> writes: > > So then a bug shows up which leaks the content of memory mishandled by > that layer. If the memoory had been properly returned via free, it > would likely have been handed to munmap, and triggered a daemon crash > instead of leaking your keys. > So m

Re: OpenBSD Foundation 2014 Fundraising Campaign.

2014-04-10 Thread Loganaden Velvindron
On Thu, Apr 10, 2014 at 8:23 PM, Bob Beck wrote: > > The OpenBSD Foundation is happy to report that the $150,000 goal of the 2014 > fundraising campaign has been reached. > > We wish to thank our contributors large and small. We will continue > our fundraising efforts both in the current year and

OpenBSD Foundation 2014 Fundraising Campaign.

2014-04-10 Thread Bob Beck
The OpenBSD Foundation is happy to report that the $150,000 goal of the 2014 fundraising campaign has been reached. We wish to thank our contributors large and small. We will continue our fundraising efforts both in the current year and next year. The success of this year's effort has allowed th

Re: Nonexistant domains resolve to my local domain

2014-04-10 Thread Giancarlo Razzolini
Em 10-04-2014 01:51, Hugo Osvaldo Barrera escreveu: > > > As I mentioned before, I tried different nameservers including my ISPs > and Google's Public DNS (so a "misconfigured dns server" is extremely > unlikely). > > I didn't mention any transparent proxies because there aren't any > either. Conne

Re: Nonexistant domains resolve to my local domain

2014-04-10 Thread Stuart Henderson
On 2014/04/10 17:32, Wesley wrote: > On 10.04.2014 13:41, Stuart Henderson wrote: > >Try "ASR_DEBUG=1 ping somehost" and post the result.. > > Very useful, where can we find informations about these kind of > variables like LD_DEBUG, ASR_DEBUG or other ?? > > Thank you very much > > LD_DEBUG i

Re: Nonexistant domains resolve to my local domain

2014-04-10 Thread Wesley
On 10.04.2014 13:41, Stuart Henderson wrote: Try "ASR_DEBUG=1 ping somehost" and post the result.. Very useful, where can we find informations about these kind of variables like LD_DEBUG, ASR_DEBUG or other ?? Thank you very much

Re: Nonexistant domains resolve to my local domain

2014-04-10 Thread Hugo Osvaldo Barrera
On 2014-04-10 00:43, Hugo Osvaldo Barrera wrote: > Hi, > > I've having this extremely wierd issue. > My hostname is elysion.barrera.io. When I try to ping, curl, or something > alike aDomainIReallySureDoeNotExist.com, it pings/curls/whatever > my local domain. Maybe an example can me clearer: > >

Re: Nonexistant domains resolve to my local domain

2014-04-10 Thread Vladislav Manchev
It looks like a misconfigured split DNS to me, but that's just a wild-ass guess.

Re: acpitz3: critical temperature exceeded with HP nc6320 Laptop

2014-04-10 Thread Tomas Bodzar
On Thu, Apr 10, 2014 at 12:37 AM, Steve Quinn wrote: > Hi folks > > I have been recently playing with OpenBSD. > I am very impressed with the whole experience, great job people !! > Just one side note. Most (or all?) "major" operating systems are using implementation of ACPI from Intel, but Open

Re: Nonexistant domains resolve to my local domain

2014-04-10 Thread Richard Toohey
On 04/10/14 21:24, Zé Loff wrote: On 10-04-2014 05:51, Hugo Osvaldo Barrera wrote: On 2014-04-10 01:16, Giancarlo Razzolini wrote: Em 10-04-2014 00:43, Hugo Osvaldo Barrera escreveu: Hi, I've having this extremely wierd issue. My hostname is elysion.barrera.io. When I try to ping, curl, or s

Re: Nonexistant domains resolve to my local domain

2014-04-10 Thread Stuart Henderson
Try "ASR_DEBUG=1 ping somehost" and post the result..

Re: Nonexistant domains resolve to my local domain

2014-04-10 Thread Zé Loff
On 10-04-2014 05:51, Hugo Osvaldo Barrera wrote: On 2014-04-10 01:16, Giancarlo Razzolini wrote: Em 10-04-2014 00:43, Hugo Osvaldo Barrera escreveu: Hi, I've having this extremely wierd issue. My hostname is elysion.barrera.io. When I try to ping, curl, or something alike aDomainIReallySureDoe

Re: acpitz3: critical temperature exceeded with HP nc6320 Laptop

2014-04-10 Thread Riccardo Mottola
Hi, Steve Quinn wrote: I have been recently playing with OpenBSD. I am very impressed with the whole experience, great job people !! I am using an HP nc6320 Laptop. Quite often, I get an error similar to this with amd64 5.4 and 5.5 acpitz3: critical temperature exceeded 3786C, shutting down If