Re: OpenBGPd SNMP

2015-10-06 Thread Bret Lambert
soon understand why. (lm_sensor on linux also uses its own MIB > for this). > > There's nothing currently public for bgpd. Bret has a WIP diff though. > I'd contacted the author of the original email off-list, but after much ill-mannered name calling from sthen have mailed the diff to tech, for those interested in guineaing in the pig fashion.

Re: SNMP on 5.7/5.8

2015-08-09 Thread Bret Lambert
On Sat, Aug 08, 2015 at 08:47:21PM +0300, Kapetanakis Giannis wrote: > sorry for top post. > > I believe I had the problem with both base and netsnmpd versions. "Believe" and "have verified that" are two functionally different statements. I've only seen evidence that netsnmp, not snmpd from OpenB

Re: httpd

2014-11-18 Thread Bret Lambert
On Tue, Nov 18, 2014 at 02:20:40PM +0200, Gregory Edigarov wrote: > Hi, > > While downloading a big file from httpd it eats somewhere from 77 to 100% or > even 150% cpu. > Is it normal? > I've never seen such numbers with nginx. There was a known issue with that that has been fixed in -current; i

Re: Shadow TCP stacks

2014-10-17 Thread Bret Lambert
On Fri, Oct 17, 2014 at 02:59:26PM -0400, Ian Grant wrote: > On Fri, Oct 17, 2014 at 2:49 PM, Bret Lambert wrote: > > Well, if, as Herr Schroeder seems to be implying, this is used to > > avoid port scans, I'd look for traffic to/from address:port which > > don't sh

Re: Shadow TCP stacks

2014-10-17 Thread Bret Lambert
On Fri, Oct 17, 2014 at 12:13:55PM -0400, Ian Grant wrote: > On Fri, Oct 17, 2014 at 4:24 AM, Bret Lambert wrote: > > On Thu, Oct 16, 2014 at 02:48:22PM +0200, Martin Schr??der wrote: > >> 2014-10-16 13:16 GMT+02:00 Kevin Chadwick : > >> The impossibility to scan for se

Re: Shadow TCP stacks

2014-10-17 Thread Bret Lambert
On Fri, Oct 17, 2014 at 12:56:48PM +0200, Martin Schr??der wrote: > 2014-10-17 10:24 GMT+02:00 Bret Lambert : > > On Thu, Oct 16, 2014 at 02:48:22PM +0200, Martin Schr??der wrote: > >> The impossibility to scan for services - which the NSA/GHCQ/... do. > > > >

Re: Shadow TCP stacks

2014-10-17 Thread Bret Lambert
On Thu, Oct 16, 2014 at 02:48:22PM +0200, Martin Schr??der wrote: > 2014-10-16 13:16 GMT+02:00 Kevin Chadwick : > > I still don't see the benefit though but do see added complexity or > > more code to audit. > > > > Reducing DDOS against a visible SSH service maybe? Reduce password > > attempts on

Re: Does OpenBSD's wpa_supplicant support PSK?

2014-02-10 Thread Bret Lambert
On Mon, Feb 10, 2014 at 10:20:44PM +0100, Zbigniew wrote: > 2014-02-10 22:00 GMT+01:00, Jeff Goettsch : > > I don't know anything about wpa_supplicant, but does > > > > # ifconfig rum0 nwid wpakey > > > > work? > > No, it says it wants passphrase length in range from 8 to 63 > characters, w

Re: Documentation on rc.conf.local lacks important warning

2014-02-09 Thread Bret Lambert
On Sun, Feb 09, 2014 at 08:28:43PM +0200, VaZub wrote: > Hi all, > > There is a small nuisance I've stumbled upon during my first > experiments with OpenBSD. > > Both the man page for rc.conf(8) as well as the official OpenBSD FAQ > (10.3) suggest to avoid editing /etc/rc.conf directly and instea

Re: More detailed information about last commands executed than lastcomm

2013-09-16 Thread Bret Lambert
On Mon, Sep 16, 2013 at 07:48:14AM -0400, Jiri B wrote: > On Mon, Sep 16, 2013 at 01:33:33PM +0200, Bret Lambert wrote: > > On Mon, Sep 16, 2013 at 01:31:58PM +0200, Bret Lambert wrote: > > > On Mon, Sep 16, 2013 at 07:28:21AM -0400, Jiri B wrote: > > > > Usual un

Re: More detailed information about last commands executed than lastcomm

2013-09-16 Thread Bret Lambert
On Mon, Sep 16, 2013 at 01:31:58PM +0200, Bret Lambert wrote: > On Mon, Sep 16, 2013 at 07:28:21AM -0400, Jiri B wrote: > > On Mon, Sep 16, 2013 at 11:38:18AM +0200, Wies??aw Kielas wrote: > > > Dear misc@, > > > > > > Is there any way to get informati

Re: More detailed information about last commands executed than lastcomm

2013-09-16 Thread Bret Lambert
On Mon, Sep 16, 2013 at 07:28:21AM -0400, Jiri B wrote: > On Mon, Sep 16, 2013 at 11:38:18AM +0200, Wies??aw Kielas wrote: > > Dear misc@, > > > > Is there any way to get information about last commands executed on a > > OpenBSD machine? I'm interested in getting the command name along with > > ar

Re: bioctl & replacing a failed mirror

2013-09-02 Thread Bret Lambert
On Mon, Sep 02, 2013 at 02:30:23PM +0200, Stefan Sperling wrote: > On Mon, Sep 02, 2013 at 08:17:27AM -0400, John Hynes wrote: > > On Mon, Sep 2, 2013 at 8:10 AM, Stefan Sperling wrote: > > > What commands did you run to "copy" the disklabel? > > Oh - I did a "disklabel sd0 > disklabel.sd2; diskla

Re: OpenBSD's webpage desing

2012-06-28 Thread Bret Lambert
Talk ajax to me, baby. On Thu, Jun 28, 2012 at 10:31 AM, Marc Espie wrote: > On Wed, Jun 27, 2012 at 03:46:12PM -0700, Chris Cappuccio wrote: >> IIRC, Theo did the current design himself after everyone else failed to come >> up with something good. > > Well, Theo had some rather fun constraints,

Re: OpenBSD's webpage desing

2012-06-27 Thread Bret Lambert
> PHP is like s early 2000s.  When's Python gonna go into base? You're behind the times; python's been replaced by ruby running on top of mongodb

Re: Can someone describe these possible long term effects and provide an explicit description of these kernel parameters?

2012-06-14 Thread Bret Lambert
On Thu, Jun 14, 2012 at 8:54 PM, Tristin Davis wrote: > Upgrading is simply not an option. It all comes down to having the > engineering staff, money, and downtime available. Unfortunatly, we have > none of the above right now.  I realize we *need* to upgrade, but right > now, tuning the kernel is

Re: spamd-setup fails from cron

2012-05-29 Thread Bret Lambert
> Please avoid 15 minutes past the hour ;-) sleep $(($RANDOM % 2048)) && /usr/libexec/spamd-setup -d

Re: undeadly

2012-04-24 Thread Bret Lambert
well, I've been gathering responses off-list, and have been putting together at least two articles. Sorry if the speed is not to your satisfaction, but major version release time at work is eating me right now. /snark On Tue, Apr 24, 2012 at 10:32 AM, Marc Espie wrote: > Come on guys, the rthrea

Re: Assigning OpenBSD server to a single IP to Two NICs , Connect to Two Switches

2012-03-07 Thread Bret S. Lambert
On Thu, Mar 08, 2012 at 01:25:35PM +0800, Pok Yie wrote: > Hye guys, > > I have an issue to ask here. I have two core switches. Am I able to use a > single IP for two NICs, and each NICs connecting to each core switches to > provide fail-over? > > > Core 1 == NIC 1 [192.168.0.1 ] NIC 2 == Core 2

Re: No schizophrenia

2012-01-11 Thread Bret Lambert
On Wed, Jan 11, 2012 at 12:19 AM, John Tate wrote: > Just an idiot, Jan Stary, who turned the sentence "7 years of > FreeBSD/OpenBSD experience" into "OpenBSD Guru." I wish I had more time and > less faith in minds like hers. What an embarrassment... oh dear. She should > learn to read. > > I'm ba

Re: OpenBSD PF tables

2011-12-08 Thread Bret S. Lambert
Take a look at pf anchors. On Thu, Dec 08, 2011 at 10:21:14PM +1100, John Tate wrote: > Is there a way to control ports on a filter from the command line? I guess > I just have manually adding and deleting rules. > > On Thu, Dec 8, 2011 at 10:19 PM, Andres Perera wrote: > > > the documentation

Re: Developing software on OpenBSD

2011-12-02 Thread Bret S. Lambert
On Fri, Dec 02, 2011 at 03:15:16AM -0800, Neoklis Kyriazis wrote: > Hi > > I hesitate somewhat to post this, being aware of the recommendations to > look for answers in the extensive documentation of OpenBSD, but I just > don't > seem to find the information I need. > > I have been using Linux fo

Re: Narcicism?

2011-12-01 Thread Bret S. Lambert
On Fri, Dec 02, 2011 at 02:25:06AM +1100, John Tate wrote: > On Thu, Dec 1, 2011 at 7:20 PM, Scott McEachern wrote: > > > On 12/01/11 02:28, John Tate wrote: > > > >> I think I've found a bug in the OpenBSD crowd. They bug the hell out of me > >> and my little mistakes. > >> > >> I am not talking

Re: Kernel without INET6 error on pipex.c

2011-11-24 Thread Bret S. Lambert
On Thu, Nov 24, 2011 at 12:20:29PM +, Kevin Chadwick wrote: > On Thu, 24 Nov 2011 22:12:10 +1100 > "Rod Whitworth" wrote: > > > You are the only one who knows exactly what you did. Maybe. > > Why should we waste time guessing? > > > > It's a pretty damn stupid thing to do anyway when it is

Re: traffic shaping in OpenBSD

2011-11-01 Thread Bret S. Lambert
On Tue, Nov 01, 2011 at 12:26:30PM +0400, ZZ Wave wrote: > For example, in FreeBSD there is "slow" pf in userspace and "fast" > kernel-level netgraph. *headasplode* > > 2011/11/1 Gregory Edigarov > > > On Tue, 1 Nov 2011 11:17:56 +0400 > > ZZ Wave wrote: > > > > > What solution should be used

Re: traffic shaping in OpenBSD

2011-11-01 Thread Bret S. Lambert
On Tue, Nov 01, 2011 at 09:47:35AM +0200, Gregory Edigarov wrote: > On Tue, 1 Nov 2011 11:17:56 +0400 > ZZ Wave wrote: > > > What solution should be used for traffic shaping on real-life, > > "production" gateways with tens and hundreds users? PF queues seem to > > be too "userspace"-ish and CPU

Re: query bug reports?

2011-10-13 Thread Bret S. Lambert
On Thu, Oct 13, 2011 at 12:28:59PM +0200, Johan Ryberg wrote: [cut to the chase] > I would love to help writing a new bug tracker that could be merged > into base but I'm no skilled coder but I have engagement and I want to > help testing. I can probably provide server and space but for sure > gi

Re: Recompile OpenBSD without built-in Apache 1.3

2011-06-29 Thread Bret S. Lambert
On Wed, Jun 29, 2011 at 08:56:38AM -0400, sven falempin wrote: > This is almost equivalent. > And that's probably the way I will do it. > > But as comp, is separated from base, I'm saying that this minimal_base.tgz > would be useful. > Of course, only thinking about the talking around what to put

Re: Recompile OpenBSD without built-in Apache 1.3

2011-06-28 Thread Bret S. Lambert
On Tue, Jun 28, 2011 at 09:46:25PM -0700, Zeb Packard wrote: > I say go for it. > > File is: > usr.sbin/Makefile > > Code is: > # $OpenBSD: Makefile,v 1.154 2011/02/09 17:17:47 jasper Exp $ > > .include > > SUBDIR= ac accton acpidump adduser amd apm apmd arp \ > authpf bgpctl b

Re: Crash when using the graphviz library

2011-05-19 Thread Bret S. Lambert
On Thu, May 19, 2011 at 02:32:39PM +0200, Reto Schneider wrote: > Hi > > I have a fresh installation of openBSD 4.9-release where the sample code of > the graphviz library > fails. It also fails on openBSD 4.8 but works perfectly on > 4.7/Ubuntu/Debian/FreeBSD/etc. > > How to get the error: >

Re: new upper limit with BIGMEM

2011-04-05 Thread Bret S. Lambert
On Tue, Apr 05, 2011 at 02:02:10PM -0700, James A. Peltier wrote: > - Original Message - > | > > real mem = 137428045824 (131061MB) > | > > avail mem = 133755703296 (127559MB) > | > > > | > > seems to work ok... > | > > | > But have you hit the limit? > | > > | The sky is the limit, but his

Re: MAXDSIZ

2011-03-30 Thread Bret S. Lambert
On Wed, Mar 30, 2011 at 01:22:19PM +0200, Tony Berth wrote: > I can't??? So the limit of 4G physical memory still exists? And why was this > statement made from 4.4 release? physical vs virtual memory, as has been explained already it's no longer 1950; we've got this thing called "swap" > > Tha

Re: pfsync and ifstated

2011-03-23 Thread Bret Lambert
On Mon, Mar 21, 2011 at 10:27 PM, Kapetanakis Giannis wrote: > Hi, > > I'm testing a new setup of a pair of firewalls (master/backup) using carp, > pfsync etc. > > Can I use ifstated to monitor virtual interfaces like pfsync0 and enc0? > > I want the master after it reboots (if backup is up) to wa

Re: Removing secondary groups with usermod -G

2011-03-21 Thread Bret Lambert
On Mon, Mar 21, 2011 at 9:45 PM, William Boshuck wrote: > On Mon, Mar 21, 2011 at 01:18:41PM -0500, Chris Bennett wrote: > >> OpenBSD's form of sed requires you to output to a new file and >> mv that back to original. > > .. or one could use ed, or perl, to change a file in place. What happens if

Re: Firewall rules to block unwanted protocolls on given ports

2011-03-19 Thread Bret Lambert
On Sat, Mar 19, 2011 at 2:05 PM, johhny_at_poland77 wrote: > Does somebody has an idea, that what kind of iptables/pf rule must i use to > achieve this?: > > i only want to allow these connections [on the output chain]: > > on port 53 output only allow udp - dns > on port 80 output only allow tcp

Re: Choosing a window manager...

2011-03-15 Thread Bret Lambert
On Tue, Mar 15, 2011 at 8:03 PM, Kevin Smith wrote: >> I'm deciding between kde, xfce, gnome, and fluxbox (in order of >> preference). Any experiences? Any relevant security issues on any of them? >> > > What you're asking is akin to: > > "Hey everyone, I'm trying to decide between: > Catholicism

Re: kernel leaks (was: Re: network bandwith with em(4))

2011-03-10 Thread Bret Lambert
On Fri, Mar 11, 2011 at 12:22 AM, Leen Besselink > Hi folks, > > Sorry for hijacking this thread. > > I also have a Dell machine with em(4)'s. > > When I upgraded a machine from 4.3 or 4.4 to 4.7 the kernel is leaking > memory I've been looking at it ever since. This was just before 4.8 came > out

Re: Constant rate mbuf leak

2011-02-11 Thread Bret S. Lambert
Prime suspect here would be the network driver. dlg@ had a nice mbuf leak detect-o-matic diff a while back. I'll have to see if I can find it. In the meantime knowing which board it is (or, even better, what network drivers are in use) would help immensely. On Fri, Feb 11, 2011 at 06:20:50PM +000

Re: is SHA256 file used or not ?

2011-02-08 Thread Bret Lambert
> Maybe some of user will eventually > get a clue glueing all the answer scattered on this list and FAQ. http://www.openbsd.org/faq/faq4.html#shamismatch That entry contains all the relevant details end users should need, which is "we're aware that checksum mismatches happen on snapshots; it's no

Re: nat static-port option

2011-02-04 Thread Bret Lambert
On Fri, Feb 4, 2011 at 2:45 PM, Martin Schrvder wrote: > 2011/2/4 Pete Vickers : >> He don't appear to 'have' IPv6... > > DTAG will offer v6 to all it's customers later this year. > It's only the largest telco in Germany. :-) The US has been "offering" "freedom" to the world for a while now. It's

Re: nat static-port option

2011-02-03 Thread Bret S. Lambert
On Thu, Feb 03, 2011 at 07:31:01AM -0800, Johan Beisser wrote: > On Feb 3, 2011, at 5:17, Martin SchrC6der wrote: > > > 2011/2/3 Bret Lambert : > >> Counting my toaster? > > > > Your toaster has an IP? > > > > Yours doesn't? > He's got IPv6! His *cockroaches' toasters* have IPs!

Re: nat static-port option

2011-02-03 Thread Bret Lambert
On Thu, Feb 3, 2011 at 2:17 PM, Martin Schrvder wrote: > 2011/2/3 Bret Lambert : >> Counting my toaster? > > Your toaster has an IP? yes, and can be viewed at http://www.goldentoasting.com/

Re: nat static-port option

2011-02-03 Thread Bret Lambert
On Wed, Feb 2, 2011 at 11:57 PM, Martin Schrvder wrote: > 2011/2/2 Bret S. Lambert : >> On Wed, Feb 02, 2011 at 10:23:43PM +0100, Martin Schr?der wrote: >>> Yeah. And there'll never be more than 2^32 IP devices in the world. >> >> Inorite? I mean, if I can&#

Re: nat static-port option

2011-02-02 Thread Bret S. Lambert
On Wed, Feb 02, 2011 at 10:23:43PM +0100, Martin Schr?der wrote: > 2011/2/2 Kevin Chadwick : > > Also, If you look at the GeoIP lookup data you'll see great swathes were > > allocated early on and seemingly never actually used. > > Yeah. And there'll never be more than 2^32 IP devices in the world

Re: BPF device limitations

2011-02-01 Thread Bret S. Lambert
On Tue, Feb 01, 2011 at 09:23:05AM -0500, Steve Johnson wrote: > Hi, > > I wanted to know what was the restriction on BPF devices and how to possibly > go around it. We are currently running a 4.8 GENERIC.MP system with 3 > dhcrelay processes (and would need to run more very soon), along with ladv

Re: Let's talk about HTTPS Everywhere

2011-01-19 Thread Bret Lambert
I think you mispelled "gene...@mozilla.org" On Wed, Jan 19, 2011 at 12:29 PM, S Mathias wrote: > Ok. It's a Firefox Add-on: > > https://www.eff.org/https-everywhere > > Questions: > > 1) But: Why can't i find it on the offical Firefox Add-ons site?: > https://addons.mozilla.org/en-US/firefox/ >

Re: Final Penultimate last Call for Papers for CanSecWest 2011 (deadline Jan. 17th, conf March 9-11)

2011-01-13 Thread Bret Lambert
On Thu, Jan 13, 2011 at 5:02 PM, Randal L. Schwartz wrote: >> "Dragos" == Dragos Ruiu writes: > > Dragos> It's been up on the site for a while with a Dec 29 deadline, > Dragos> but this is the real last call for submissions. > > Really? Then why did you use "Penultimate" (which means "next t

Re: remove users from group

2010-12-25 Thread Bret Lambert
On Fri, Dec 24, 2010 at 1:56 PM, Henning Brauer wrote: > * Bret Lambert [2010-12-13 10:32]: >> You're all wrong. We obviously need XML user databases. > > go play with phk, only JSON is web scale. Talk YAML to me, baby. > > -- > Henning Brauer, h...@bsws.de,

Re: remove users from group

2010-12-13 Thread Bret Lambert
On Mon, Dec 13, 2010 at 10:14 AM, MERIGHI Marcus wrote: > h...@stare.cz (Jan Stary), 2010.12.13 (Mon) 09:15 (CET): >> On Dec 13 12:01:58, OpenBSD Geek wrote: >> > I have 100 users in groups : clients, and ftp_group >> > How can i remove these 100 users from ftp_group ? >> > I have already try user

Re: Donations

2010-12-09 Thread Bret S. Lambert
> you come back as a cow ^^^ I thought it was a toilet brush? You just can't trust reincarnation this life.

Re: nis/ldap/login class

2010-12-08 Thread Bret Lambert
login_ldap (not in base) or ypldap (in base) On Wed, Dec 8, 2010 at 11:49 AM, Friedrich Locke wrote: > Dear friends, > > i am running my OBSD server using NIS and i would like to change this for > LDAP. > My doubt is: how is the login class field handle in a scenario defined > by OpenLDAP? > > T

Re: OpenBSD in Rock Band 3

2010-12-08 Thread Bret Lambert
My guess would be strlcpy() and/or friends, but IIRC that's millert@'s copyright. Time to get a lawyer, Todd! On Tue, Dec 7, 2010 at 11:55 PM, Ted Unangst wrote: > That's a little strange, because I don't think there is any code > anywhere copyrighted by OpenBSD. All the code is copyright by th

Re: Advice on learning C as first language

2010-11-24 Thread Bret Lambert
On Wed, Nov 24, 2010 at 3:55 PM, James Hozier wrote: > My first programming language ever was Visual Basic, but I was 11 years old at the time and it was just a mandatory elective class I had to take to get credits in order to graduate school, and I didn't even know what a programming language was

Re: OT: Disadvantages of using virtual firewalls like OpenBSd

2010-11-23 Thread Bret Lambert
On Tue, Nov 23, 2010 at 1:38 PM, carlopmart wrote: > Hi all, > > First of all, I don't want to start a flame. I will to know your opinion > about using virtual firewalls in virtual infraestructures like vmware, kvm > ,xen, etc ... like OpenBSD. > > Advantages are very clear for me: provisioning,

Re: (Perhaps?) dumb pf question relating to tables

2010-11-10 Thread Bret S. Lambert
On Wed, Nov 10, 2010 at 01:45:16PM +0100, Tor Houghton wrote: > Hello, > > May I ask whether or not "per user" ownership (or permission to update) a > table is/will be possible? > > I am pondering the best mechanism for a non-root process to add/remove > addresses to a table. Privilege separati

Re: How to convert .img to .iso

2010-11-08 Thread Bret S. Lambert
On Mon, Nov 08, 2010 at 08:22:13AM -0800, James Hozier wrote: > Since there are apparently is no software for this kind of conversion, by > what other > means or methods are there to do this on OpenBSD? I cannot mount .img at all > with > either vnconfig or '-o loop'. Just FYI re: 'mount -o loop

Re: relayd port to linux

2010-11-06 Thread Bret S. Lambert
On Sat, Nov 06, 2010 at 03:08:12PM -0400, Joe McDonagh wrote: > >Move your puppet to apache+passenger instead of starting serveral > >mongrel instances. It is much simpler to manage. > > > > > >Claer > I guess that depends on your definition of simple; I've done this setup but > there are version

Re: how to repeat messages about manual configuration

2010-10-22 Thread Bret S. Lambert
On Thu, Oct 21, 2010 at 05:27:02PM +, Jay K wrote: > You know, installing ports/packages often gives you random manual > configuration advise, like: > > > ===> Installing jdk-1.6.0.03p9 from /usr/ports/packages/amd64/all/ > jdk-1.6.0.03p9: > ok

Re: password-less console-only access and ssh remote access?

2010-10-21 Thread Bret S. Lambert
On Thu, Oct 21, 2010 at 05:38:54PM +, Jay K wrote: > My ideal setup would be: > 1) no passwords ("*" in /etc/passwd or via vipw) > 2) only ssh for remote access >i.e. no password-based security, only something better > 3) except console, where anyone should be able to login > wit

Re: CARP, no IPsec, Dell 1950 or NIC-less: boot crash, (uvm_fault)

2010-10-21 Thread Bret S. Lambert
On Thu, Oct 21, 2010 at 11:28:51AM +0200, chefren wrote: > CARP, no IPsec, Dell 1950 or NIC-less: boot crash > > Our custom OpenBSD kernel crashes (uvm_fault) at boot on a Dell 1950. > > We've tracked down the problem: > carpattach() > ... > if_creategroup("carp") >

Re: FW: Force passwordcheck in login.conf

2010-10-14 Thread Bret S. Lambert
On Thu, Oct 14, 2010 at 10:16:12AM -0400, Brad Tilley wrote: > Stuart VanZee wrote: > > For 8.5.12 see login.conf man page, look for passwordcheck. > > You will have to write (or find) a program that keeps track > > of previously used passwords. I just stored a hash of them > > in a file and have

Re: Why renice not work in OpenBSD?

2010-10-11 Thread Bret S. Lambert
On Mon, Oct 11, 2010 at 12:45:39PM +0400, Dmitry-T wrote: > 11.10.10, 12:13, "Claudio Jeker" : > > > You try to renice I/O bound > > processes. The scheduler priority only matters when processes are CPU > > bound. > > Yes of course, but... all my "dd" processes use CPU. > After run "dd if=

Re: Can't boot from 05-Oct-2010 snapshot's install48.iso

2010-10-07 Thread Bret S. Lambert
On Fri, Oct 08, 2010 at 06:24:23AM +0200, Dmitrij D. Czarkoff wrote: > Nick Holland wrote: > > > On 10/07/10 18:24, Dmitrij D. Czarkoff wrote: > > > Should I conclude nobody else gets this? > > > > > > (The story was about install48.iso from 05-Oct-2010 hanging on boot with > > > no > > > error

Re: Bandwidth consume by IP address

2010-10-02 Thread Bret S. Lambert
man pflow On Fri, Oct 01, 2010 at 08:57:07PM -0500, Hermes Ojeda Ruiz wrote: > Hi, > > I'm working with a OpenBSD firewall on embedded hardware, and the client > want to know the bandwidth consume by IP address. > > I don't know if this is possible using PF, another tool or making scripts to > g

Re: Minor nits in 4.7/001_kerberos.patch

2010-09-16 Thread Bret S. Lambert
All that, and you don't provide your own diff fixing these? On Thu, Sep 16, 2010 at 08:41:18PM +1200, Richard Toohey wrote: > Hi all. > > Patching a 4.7 box from the errata patch and noticed this: > > + > +if (len < checksum_sz + et->confoundersize) { > + krb5_set_error_string(context,

Re: kernel hangs by many connections (reproducable)

2010-09-12 Thread Bret S. Lambert
On Mon, Sep 13, 2010 at 10:12:44AM +0600, Anton Maksimenkov wrote: > 2010/9/13 Henning Brauer : > >> hangs. 1-2 sec after start. > >> --- interrupt --- > >> pool_do_get(d0a10b60,0,0,0,60) at pool_do_get+0x2c2 > >> pool_get(d0a10b60,0,8000,0,0) at pool_get+0x54 > >> m_gethdr(1,1,8000,369e99,

Re: pf.conf : rdr-to IF rather than IP

2010-09-12 Thread Bret S. Lambert
wing example : > > match in on $ext_if proto tcp from any to any port 1050 rdr-to 192.168.1.10:50 > > Regards > > Le dimanche 29 ao?t 2010 15:15:28, Bret S. Lambert a ?crit : > > On Sun, Aug 29, 2010 at 02:05:40PM +0200, Jean-Francois wrote: > > > Hello, > > >

Re: automounter

2010-09-10 Thread Bret S. Lambert
On Fri, Sep 10, 2010 at 10:37:50PM +0200, Jean-Francois wrote: > Hello, > > Do you have an idea where to look for an auto mounter in openbsd ? I > installed > gnome as a server for a friend and would like that his fat32 usb disks are > auto mounted ... > > It might be useful to auto mount also

Re: 4.8 Release and Download and

2010-09-09 Thread Bret S. Lambert
On Fri, Sep 10, 2010 at 12:58:40AM +0100, Keith wrote: > Seeing that orders are being taken for the 4.8 release got me thinking > about purchasing a copy, I don't need a copy on CD so just a download > for my architecture would be fine. In the past I've sent a small donated > to the project an

Re: How to find out if process runs chrooted?

2010-09-08 Thread Bret S. Lambert
On Wed, Sep 08, 2010 at 02:55:19PM +0200, Elmar Bschorer wrote: > hi list, > > short question - how can i find out if a process runs chrooted? You write a syscall to check if fdp->fd_rdir is not NULL? > i couldn't find any hints in man chroot :-( > > thx, > Elmar

Re: eSATA Hotplug

2010-09-04 Thread Bret S. Lambert
On Sat, Sep 04, 2010 at 10:48:46AM +0200, Gerald Holl wrote: > On 2010-08-30 01:57, David Gwynne wrote: > > we'll happily take diffs though. > > Which diffs? Although my first instinct is to immediately degenerate into an hilarious who's on first parody, I'm just going to tell you "ones that fix

Re: System Hangs

2010-09-04 Thread Bret S. Lambert
On Sat, Sep 04, 2010 at 09:40:30AM +0200, Guillermo Bernaldo de Quiros Maraver wrote: > I've been seeing in these last days as OpenBSD hangs (I can not use the > mouse or the keyboard and I can not return to the console) I ask here > because I want to know if anyone has had a similar problem and i

Re: How MAC address is incorporated in packets

2010-08-30 Thread Bret S. Lambert
On Mon, Aug 30, 2010 at 10:07:06AM +0200, Jean-Francois wrote: > Hi, > > Might you please indicate how in the construction of an IP packet the mac > address in incorporated into it. Is the job of the OS or of the IF ? If the > OS > is responsible for it, how is it processed and is it possible t

Re: pf.conf : rdr-to IF rather than IP

2010-08-29 Thread Bret S. Lambert
On Sun, Aug 29, 2010 at 02:05:40PM +0200, Jean-Francois wrote: > Hello, > > I would like to redirect particular ports on the sub-network, not only on one > ip adress of the subnetwork. > > Taking an example, I would like some software that listen to ports on > different > machines with differe

Re: Checking Routes/Gateways For Good Connection

2010-08-28 Thread Bret S. Lambert
On Sat, Aug 28, 2010 at 09:50:30PM -0500, dontek wrote: > This is even more strange to me. If I change rule 39 and 40 by taking out > the "on" interface to the following: > > PF Rules: (rule number prepended, these are the _last_ 6 lines in my > pf.conf) > > 39: pass out quick log from 172.16.0.

Re: pf.conf : rdr-to IF rather than IP

2010-08-28 Thread Bret S. Lambert
On Sat, Aug 28, 2010 at 11:08:10PM +0200, Jean-Francois wrote: > Good evening, > > Is it possible to redirect to an IF or at least an IP range such as following > rules ? > > match in on $ext_if proto tcp from any to any port 1024:32768 \ > rdr-to $int_if Since all of the manpages

Re: cardbus on sparc64

2010-08-25 Thread Bret S. Lambert
On Wed, Aug 25, 2010 at 08:12:34PM +0200, Pete Vickers wrote: > I have a SunBlade100 running 4.7RELEASE which I stuck a PCI/Cardbus adapter > in; and it appears to be recognised in dmesg: > > . . . > cbb0 at pci1 dev 2 function 0 "Ricoh 5C475 CardBus" rev 0x80: ivec 0x7d5 > cardslot0 at cbb0 slot

Re: Pragmatics of Following current

2010-08-19 Thread Bret S. Lambert
On Thu, Aug 19, 2010 at 12:02:11PM -0400, Luis Useche wrote: > Hi Guys, > > I have been meaning to follow current for a couple of weeks now. I read the > "Building Sources" page and it seems like I should follow the process of: > cvs up src xenocara ports -> compile -> install, where install inclu

Re: Smtpd use

2010-08-17 Thread Bret S. Lambert
On Wed, Aug 18, 2010 at 12:09:31AM +0400, open...@e-solutions.re wrote: > On Tue, 17 Aug 2010 21:57:03 +0200, "Bret S. Lambert" > > $ man smtpd.conf | grep "accept for all relay" > >accept for all relay via smtp.gmail.com tls enable auth

Re: Smtpd use

2010-08-17 Thread Bret S. Lambert
On Tue, Aug 17, 2010 at 11:55:43PM +0400, open...@e-solutions.re wrote: > On Tue, 17 Aug 2010 21:34:56 +0200, "Bret S. Lambert" > > The magic word is "relay", IIRC. > > add "accept for all relay" to the end of my smtpd.conf ? $ man smtpd.conf | grep

Re: Smtpd use

2010-08-17 Thread Bret S. Lambert
On Tue, Aug 17, 2010 at 11:24:37PM +0400, open...@e-solutions.re wrote: > Hi, > Today, i tried to build a mailserver for one domain : totoxx.org > Here my smtpd.conf : > > listen on lo0 > listen on em0 > hostname "puffymail.my.domain" > map "aliases" { source db "/etc/mail/aliases.db" } > map "vir

Re: undeadly article

2010-08-17 Thread Bret S. Lambert
On Tue, Aug 17, 2010 at 01:50:55PM -0400, Mike Erdely wrote: > On Tue, Aug 17, 2010 at 07:30:55PM +0300, Paul Irofti wrote: > > jcr, please forgive my fellow romanian as us gypsies don't get to travel > > much and don't know the mysteries of these flying birds and their inner > > workings. > > Gyp

Re: [OT] securely sharing documents on OpenBSD?

2010-08-17 Thread Bret S. Lambert
On Tue, Aug 17, 2010 at 02:19:07PM +0200, Jiri B. wrote: > what's up with vpn and samba? And what's the deal with airline food?! > > jirib

Re: Web hosting, restrict user to access only his folder

2010-08-13 Thread Bret S. Lambert
On Sat, Aug 14, 2010 at 12:04:56AM +0400, open...@e-solutions.re wrote: > Hi, > > I installed OpenBSD 4.7 for web hosting (test). > So i have 3 websites for 3 users (1 site per user) : > www.first.xx (user : firstxx) > www.2nd.xx (user : 2ndxx) > www.third.xx (user : thirdxx) > > All web pages a

Re: MTA choice

2010-08-13 Thread Bret S. Lambert
Real hackers do their email with awk and nc.

Re: Disable Relayd's error message

2010-08-13 Thread Bret S. Lambert
On Fri, Aug 13, 2010 at 03:41:08PM +0100, Keith wrote: > I just realized that if I telnet to our web servers on port 80 and > press enter a few times that I get a reply back from relayd that I > didn't expect "OpenBSD relayd at 127.0.0.1 port > 8080" This error is correct as we use a PF rdr rule to

Re: cwm: don't warp to ignored windows

2010-08-09 Thread Bret S. Lambert
On Mon, Aug 09, 2010 at 09:28:40PM +0200, Christian Neukirchen wrote: > Hi, > > cwm currently warps to all newly mapped windows. I think it would be > nice to not warp to windows marked as "ignore" in .cwmrc, so popping > windows you are not interested in don't disturb you. I think your mailer a

Re: developing openbsd?

2010-08-08 Thread Bret S. Lambert
On Sun, Aug 08, 2010 at 08:23:03AM +, Jay K wrote: > I've looked all over www.openbsd.org. > Any sort of guide/projects for new wannabe developers? > (not new to programming) man style > Just the bug list? That's a good start, probably. > Fix something & send diffs? As mentioned on these

Re: Anyone playing with Active Protection System (hdaps) here ?

2010-08-07 Thread Bret S. Lambert
On Sat, Aug 07, 2010 at 06:07:56PM +0800, aaron lewis wrote: > > from man aps: > > > > SEE ALSO > > isa(4), sensorsd(8), sysctl(8) > > > > That's your money reading, right there. > > > > $ sysctl | grep -c aps > > 9 > > > >

Re: Anyone playing with Active Protection System (hdaps) here ?

2010-08-07 Thread Bret S. Lambert
On Sat, Aug 07, 2010 at 03:11:01PM +0800, Aaron Lewis wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Hi, > Mon Laptop has a device aps0 , and hdapsd works fine on Gentoo Box , i'm > wondering how should i activate it on OpenBSD ? > > /etc/rc.conf doesn't have anything re

Re: Secret key in the packet filter.

2010-07-13 Thread Bret S. Lambert
On Tue, Jul 13, 2010 at 06:18:12PM +0400, jackwssp q wrote: > Hello brothers and sisters, Backatcha! > > Who knows anything about the secret keys in the packet filter(pf), such as > way only for developers. Secret...huh? Who're we talkin about? > > Is it real in the open source, and how can I

Re: PTY allocation error

2010-07-11 Thread Bret S. Lambert
The reasons that a read-only CF card is irrelevant for any reasonably modern CF card have been discussed to death on this list; save yourself the headache and just do a normal install. On Sun, Jul 11, 2010 at 04:31:20PM -0700, Peter Bako wrote: > I'm setting up (well, trying to I guess :-) ) a rea

Re: OpenBSD : FFS : Large Directories : Small files

2010-07-11 Thread Bret S. Lambert
On Sun, Jul 11, 2010 at 08:05:59PM +0200, Mayuresh Kathe wrote: > On Sun 11/07/10 23:05, "Ted Unangst" ted.unan...@gmail.com wrote: > > On Sun, Jul 11, 2010 at 4:22 AM, Mayuresh Kathe > the.in> wrote: > > Hello, may I know of limitations on supporting large > > directories (over 5 > > million file

Re: Ospfd -- Default config produces syntax error

2010-07-07 Thread Bret S. Lambert
On Wed, Jul 07, 2010 at 01:08:02PM -0700, Andrew Klettke wrote: > All, > > A fresh install of OpenBSD 4.7 includes the default ospfd.conf (here > are just the first 11 lines): > > # $OpenBSD: ospfd.conf,v 1.4 2007/06/19 16:49:56 reyk Exp $ > > # macros > password="secret" > > # global configura

Re: OpenBSD & OpenSSL Lib

2010-07-06 Thread Bret S. Lambert
On Tue, Jul 06, 2010 at 01:21:49PM +0100, Keith wrote: > We are trying to install URLfilterDB on OpenBSD 4.7 but while doing > a ./configure we keep getting. > > ./configure --with-bz2-lib=/usr/local/lib --with-ssl-lib=/usr/lib/ > > > checking for library containing pthread_creat

Re: matching escape string , doesn't work ?

2010-07-05 Thread Bret S. Lambert
On Mon, Jul 05, 2010 at 06:35:01PM +0800, Aaron Lewis wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Hi, > echo %A3 | sed 's/(%[0-9A-Z]{2})//g' > > I'd like %A3 like string to be removed , what's wrong with my script ? > According to the sed manpage, it doesn't use {}

Re: mt_soname mbufs keep increasing steadily, where can I look?

2010-07-03 Thread Bret S. Lambert
On Fri, Jul 02, 2010 at 10:14:37PM +0200, Jurjen Oskam wrote: > Hi everyone, > > I still haven't upgraded to 4.7 yet (I will do soon), so I'm still on 4.6. > On my home server, I run symon and syweb to monitor several stats about my > machine. I noticed that since about 3-4 months ago, the mbuf us

Re: Donation issues with OpenBSD???

2010-07-02 Thread Bret S. Lambert
On Sat, Jul 03, 2010 at 10:21:00AM +0800, Brent Shumacher wrote: > http://www.trollaxor.com/2010/06/why-i-almost-gave-openbsd-10-didnt.html > You're a douchebag: http://www.trollaxor.com/2001/06/another-apology.html

Re: Patch for mtree (the "-X" flag)

2010-06-30 Thread Bret S. Lambert
On Wed, Jun 30, 2010 at 12:51:17PM +0300, Teemu Rinta-aho wrote: > Hi all, > > I need the "-X" flag for mtree on OpenBSD to exclude certain paths. > So, I ported the functionality from NetBSD. Seems to work for me. > > I was just thinking, whether anyone else cares about such patch, and > what is

Re: Launching bgpd restricted control socket without terminating bgpd ?

2010-06-23 Thread Bret S. Lambert
On Wed, Jun 23, 2010 at 09:09:02PM +0100, rh...@hushmail.com wrote: > Hi, > > Is it possible to launch the second restricted control socket > without having to pkill bgpd first ? > > I tried running "bgpd -r" without pkill first and that did not have > the desired effect, it simply tried to rel

  1   2   3   >