Re: cvs fingerprint for anonvs.jp.openbsd.org

2015-05-27 Thread Lars Nooden
On Wed, 27 May 2015, Joel Rees wrote: > Currently, when I connect to the server via the usual cvs command, it > responds with an ssh256 fingerprint. > > For some reason, my brain is not helping me find a way to ask the > server to give me md5 fingerprints. Is there a way? >From what I've tried,

sshd ignoring UseDNS in host-based authentication?

2015-03-16 Thread Lars Nooden
I wonder if sshd is ignoring UseDNS when trying host-based authentication. The default for UseDNS is listed as 'no' in the man page but even when I set it explicitly to 'no', sshd still seems to perform a lookup on the incoming client.[1] Host-based authentication then fails if the lookup fai

Re: slow to no throughout on ral

2015-03-05 Thread Lars Nooden
On Wed, 4 Mar 2015, Stefan Sperling wrote: > On Wed, Mar 04, 2015 at 05:06:57PM +0200, Lars Nooden wrote: > > The only other strange symptom is that the machine locks up hard every > > week or two requiring a powercycle or hardware reset to restart. I can > > find nothing

slow to no throughout on ral

2015-03-04 Thread Lars Nooden
I have an old Soekris 5501 with a wireless (WL-RT2561-ST 802.11a/b/g) PCI card, running a recent snapshot. I have slow wireless transfer rate and sluggishness that went from being occasional to nearly 100% of the time. Instead of 830kB/s or so from the net, I'm getting transfer rates of aroun

Re: lii0 no link on 5.6-current i386

2014-11-26 Thread Lars Nooden
On Mon, 24 Nov 2014, trondd wrote: > On Mon, Nov 24, 2014 at 3:12 PM, trondd wrote: > > > > >> Just to clarify, these have been fresh installs of 5.6-release and > >> 5.6-current. Both bsd.rd and bsd seem not to find the lii interface. > >> 5.5-release behaves almost the same way, though the li

Re: lii0 no link on 5.6-current i386

2014-11-24 Thread Lars Nooden
On Mon, 24 Nov 2014, Lars Nooden wrote: > I've been trying to move from 5.4 to 5.6 on an old machine. Neither > 5.6-release from the CD nor 5.6-current from the recent snapshots seem > to be able to use the Ethernet device. During power up, the link status > light is on

lii0 no link on 5.6-current i386

2014-11-24 Thread Lars Nooden
I've been trying to move from 5.4 to 5.6 on an old machine. Neither 5.6-release from the CD nor 5.6-current from the recent snapshots seem to be able to use the Ethernet device. During power up, the link status light is on, but then as the kernel loads it goes out and stays out. What have I m

Re: restoring keyboard layout after suspend or hibernate

2014-01-23 Thread Lars Nooden
On Thu, 23 Jan 2014, David Coppa wrote: > Maybe the following trick? > > # mkdir -p /etc/apm && \ > printf "#!/bin/sh\n/sbin/wsconsctl keyboard.encoding=sv\n" > > /etc/apm/resume && \ > chmod 0755 /etc/apm/resume > > Followed by: > > # /etc/rc.d/apmd restart Thanks. That was the right directio

restoring keyboard layout after suspend or hibernate

2014-01-23 Thread Lars Nooden
After suspend or hibernate, I lose my designated console keyboard layout (sv) and it reverts to the default (us?) wsconsctl shows that the encoding to still be sv, keyboard.encoding=sv What setting(s) am I missing to preserve the designated layout across suspend/hibernate? Regards, /

watchdog timeouts

2013-11-16 Thread Lars Nooden
I'm getting a lot of watchdog timeouts on re0 with the i386 snapshots. re0 is a Traverse Viking PCI ADSL card. Is there something I need to set or tune on my end to stop the timeouts? Regards, /Lars OpenBSD 5.4-current (GENERIC) #148: Tue Nov 12 15:18:10 MST 2013 dera...@i386.openbsd.or

Re: matching single-part label in ssh_config ?

2013-11-03 Thread Lars Nooden
On Sun, 3 Nov 2013, Darren Tucker wrote: [snip] > Also: it's not in 5.4 but it is in current: check out the Match keyword > for a more flexible method. Cool. Were there any particular use cases in mind with 'exec' ? Regards, /Lars

Re: sshd internal-sftp umask

2013-10-23 Thread Lars Nooden
On Wed, 23 Oct 2013, Jiri B wrote: > I saw the same and I'm not sure how it should exactly work. Maybe it is > only working when explicitly setup in 'Subsystem' line. > > Although it is works like this, I would like to be able to "override" it > anyway inside a Match block. > > jbelke It seems

Re: key precedence in ssh

2013-10-01 Thread Lars Nooden
On Tue, 1 Oct 2013, Christian Weisgerber wrote: > Lars Noodén wrote: > > > Is there a way in ssh(1) to get the identity specified by -i to take > > precedence over what is already in the agent? > > IdentitiesOnly, see ssh_config(5). > > -- > Christian "naddy" Weisgerber

Re: Squid3 in intercept mode

2013-06-20 Thread Lars Nooden
On Thu, 20 Jun 2013, Stuart Henderson wrote: > On 2013-06-19, Lars Nooden wrote: > > On Wed, 19 Jun 2013, Reyk Floeter wrote: > >> Anyway, you should make sure to use "divert-to" instead of "rdr-to" in > >> your pf.conf. "rdr-to" is consid

Re: Squid3 in intercept mode

2013-06-19 Thread Lars Nooden
On Wed, 19 Jun 2013, Reyk Floeter wrote: > Anyway, you should make sure to use "divert-to" instead of "rdr-to" in > your pf.conf. "rdr-to" is considered to be obsolete for userland > proxies (except for spamd). That solved it exactly. I had not seen the change and had been trying rdr-to instead

ral(4) or ath(4)

2013-06-01 Thread Lars Nooden
Are there any big reasons not to choose ral(4) over ath(4) for a host ap? I've been trying out three wireless cards on -current as host access points. So far it seems that ral(4) works better, but is quite weak on the overall range in mode 11g as compared to 11a. One message earlier on misc

Re: Canceled SSH forwarding

2013-05-23 Thread Lars Nooden
On Wed, 22 May 2013, Lars Nooden wrote: [snip] > However, the remote machine is still able to use the forwarded port until > the connection is finally closed. The same syntax seems to shutdown > regular (-L) forwarded ports, just not for reverse (-R) forwarding. What > am I missin

Canceled SSH forwarding

2013-05-22 Thread Lars Nooden
I've got OpenSSH_6.2 from the latest snapshot and would like to cancel remote forwarding without closing the existing session. I seem to be missing something with the escape sequence ~CKR If I start remote forwarding like this: ssh -R 9000:localhost:80 192.0.43.10 The remote machine c

Forcing choice of keys for ssh

2013-05-16 Thread Lars Nooden
I'm running -current and notice that ssh prefers keys that have been loaded into ssh-agent over those that are being specified on the command line. If I load 'keya' into the agent, ssh-add ~/.ssh/keya and then try to use 'keyb', ssh -i ~/.ssh/keyb 192.0.43.10 then 'keyb' is i

OpenSSH sshd -E

2013-04-28 Thread Lars Nooden
I see a useful feature in OpenSSH 6.2(?) in current that is not in the release notes for 6.2. In the man page for sshd(1) in current there is this: -E log_file Append debug logs to log_file instead of the system log. But I can't find anything about it in the release notes:

Re: syncing hardware clock

2013-02-07 Thread Lars Nooden
On Thu, 7 Feb 2013, Otto Moerbeek wrote: > On Thu, Feb 07, 2013 at 03:36:43PM +, Christian Weisgerber wrote: > > > Lars Nooden wrote: > > > > > I've got a small system running 5.2-stable and the clock seems off. NTP > > > is making entries like th

syncing hardware clock

2013-02-07 Thread Lars Nooden
I've got a small system running 5.2-stable and the clock seems off. NTP is making entries like this on startup: Jan 31 10:15:31 net5501 ntpd[20060]: adjusting local clock by 93.846882s I've looked around in the mail archives for various mailing lists and have the impression that a proper shut

Re: project : openbsd as nas

2010-09-01 Thread Lars Nooden
On Mon, 30 Aug 2010, Jean-Francois wrote: I'm thinking about starting something aroung openbsd such as a layer making it an easy enough to manage home nas server of good quality. That capability is already there. As others mention, NFS is in base and Samba can easily be added from ports. Th

Re: [OT] securely sharing documents on OpenBSD?

2010-08-17 Thread Lars Nooden
On Tue, 17 Aug 2010, Matt wrote: Quite possibly more of a 'which software' question: I am looking for a way to have two parties share documents securely through an OpenBSD server. User A can not look into directory B but is allowed in dir C, that sort of thing. Sharing occurs through untrusted

Re: undeadly article

2010-08-17 Thread Lars Nooden
On Tue, 17 Aug 2010, J.C. Roberts wrote: ... I'm trying to learn from any feedback I receive, positive or negative... IMHO it was well-written. Security Theatre is just a more harmful, very expensive, corporate version of Eat-a-Bug. /Lars

Re: OpenBSD on RouterBoard 450G

2010-08-15 Thread Lars Nooden
On Sun, 8 Aug 2010, Jozsi Vadkan wrote: Did anyone manage to install, and use/test OpenBSD on the RouterBoard 450G? Or does anyone has a howto for it, how to do it? IIRC back in March, Mark Kettennis added support for the RouterBoard 600A. However, that's a different processor. The 1000 and 1

Re: Web hosting, restrict user to access only his folder

2010-08-14 Thread Lars Nooden
On Sat, 14 Aug 2010, open...@e-solutions.re wrote: i used ftpd (-4Dln) for users to upload ... You may wish to reconsider that and use sshd's built in chroot with sftp. Easier to set up and use. A lot of people 'ask' for FTP by name meaning a generic way to up load. Even lame clients like Fi

Re: anyone use these for firewall?

2010-06-16 Thread Lars Nooden
LeviaComm Networks NOC wrote: In the mean time, if anyone can send me dmesgs detailing the hardware they are form, I can start setting some of it up. Mark Kettenis and Dariusz have a port on the RB600A: http://old.nabble.com/RouterBOARD-RB600A-support-td27828265.html /Lars

Re: anyone use these for firewall?

2010-06-15 Thread Lars Nooden
Chris Smith wrote: Thanks for any input on these or other suggestions for quick (new Atom or better) low power network appliance type gear for keeping -current.. Finding out if -current runs on the RB450G, RB493, or RB493AH has made it onto my todo list, but not near the top. They meet that '

Re: Installer bug? - Upgrade 4.6 to 4.7 failed to upgrade base47, on i386 and amd64

2010-06-04 Thread Lars Nooden
On Fri, 4 Jun 2010, Jan Stary wrote: 'rm -rf /usr/obj/*' is not your arbitrary choice, it's a documented step when building the system. http://www.openbsd.org/faq/faq5.html#BldUserland Also documented there is keeping /usr/obj/ in its own partition and using 'newfs' to zap everything more quic

Re: Hardware for a PF box

2010-05-11 Thread Lars Nooden
On Tue, 11 May 2010, Chris Smith wrote: ...http://www.openbsd.org/faq/pf/logging.html but the PF logs first have to be written locally to a the pflog file. Or you can pipe to logger(1) directly or go via a FIFO /Lars

Re: Hardware for a PF box

2010-05-11 Thread Lars Nooden
On Tue, 11 May 2010, BARDOU Pierre wrote: ... I don't think they come from PF BTW, it should be logging/relayd/OpenVPN which makes the box lag. Verify before you flush money. Tools like iostat, vmstat and pftop might help show where the load is. Does the load you have from OpenVPN suggest t

Re: Hardware for a PF box

2010-05-11 Thread Lars Nooden
On Mon, 10 May 2010, Chris Smith wrote: What about logging in this case? Can PF logs be sent to another system running a syslog daemon? You answered your own question. ;) Look at the 'action' field explanation in the manual page for syslog.conf(5) About the diskless machine, many of the so-

Re: OT - UML, can someone state that it works ?

2010-05-05 Thread Lars Nooden
On 05/05/2010 10:08 PM, Christiano F. Haesbaert wrote: Sorry for such an out of topic thread, hear my pain: I'm really sick of hearing about UML/RUP and all this boulshit about software engineering in my university. User Mode Linux works ok, you should probably try asking over on one of the li

Re: State of multiprocessing and multithreading in OpenBSD

2010-05-05 Thread Lars Nooden
On Wed, 5 May 2010, Tony Abernethy wrote: http://www.eecs.berkeley.edu/Pubs/TechRpts/2006/EECS-2006-1.pdf first choice googling: threads berkeley Thanks. You have better luck with Google than I did. berkeley threading won't find it. Repeating once more for the archive: http://www.eecs.ber

Re: State of multiprocessing and multithreading in OpenBSD

2010-05-05 Thread Lars Nooden
On Wed, 5 May 2010, Geoff wrote: There's a paper from Berkeley showing how a threaded program can never be fully debugged and should be presumed to be broken, probably fatally broken. Geoff, can you post the URL or any details that might help finding and retrieving that particular article or o

Re: low httpd performance. Apache 2.2 as default? never? *sighs

2010-05-03 Thread Lars Nooden
On Mon, 3 May 2010, Dexter Tomisson wrote: ab -n 1 -c 10 127.0.0.1/1.tar.gz Apache 1.3.29 Requests per second:149.23 [#/sec] (mean) Apache 2.2.2 Requests per second:375.02 [#/sec] (mean) Apache2 is significantly more complex: ktrace -f /tmp/a2-ktrace.log -di /usr/local/sbin/httpd

Re: Questions about tables on pf

2010-04-29 Thread Lars Nooden
On Thu, 29 Apr 2010, Leonardo Carneiro - Veltrac wrote: Tks. This info is very important to me 'cause my disk sucks, Look at the manual page for mount_mfs(8) and the option -P you can load a directory and the files in it into memory. and i'll have to create some tables that will be "hitted"

Re: Is this a case of paranoia?

2010-04-26 Thread Lars Nooden
Fuck off, Jussi. Serious problems like the one that fellow's network administrator pinged him for should not sit unsolved. It affects the rest of us. Those problem stepchild packages are problems in and of themselves, as is the platform it runs on. The time to condone sloppy practices and atti

Re: VPN between OpenBSD Gateway and a mac

2010-04-26 Thread Lars Nooden
On Fri, 23 Apr 2010, Firstname Lastname wrote: If you make other use of the tun interface via ssh -w at work, do some homework or you'll get burned. Could you elaborate on the particular mistakes you have in mind? /Lars

Re: Is this a case of paranoia?

2010-04-26 Thread Lars Nooden
On 04/24/2010 10:27 PM, Ed Ahlsen-Girard wrote: > Ha. You laugh. at you, not with you > My employer is blocking the msdn blogs that we need to > troubleshoot SharePoint and SQL. ... Take the hint and get rid of both. Their presence fucks up the net. /Lars

Re: Is this a case of paranoia?

2010-04-24 Thread Lars Nooden
On 04/24/2010 05:14 PM, Danny wrote: > My apologies then. It is just a screenshot of our IT {sic} guys > classifying OpenBSD as a Hacking website. Of course it is: http://catb.org/~esr/jargon/html/H/hacker.html If you want to get him wound up, point out that it is one of several that off

Re: Source Overview

2010-04-22 Thread Lars Nooden
On 4/22/10 2:44 PM, Owain Ainsworth wrote: On Thu, Apr 22, 2010 at 01:40:42PM +0200, Claudio Jeker wrote: In the end all that matters is that someone gets up from his comfy couch, hacks something up and sends a diff around and the only way that is going to happen is because of egoistical reasons

Re: can't do suitable block in firewall

2010-04-21 Thread Lars Nooden
On 04/19/2010 09:12 PM, Leonardo Carneiro - Veltrac wrote: ... the gateway features does not work 100% yet (at least in the server that i use) There are additional solutions. One is to work with the contacts to get them set up with XMPP clients, since the gateway function is there only

Re: Source Overview

2010-04-20 Thread Lars Nooden
On Tue, 20 Apr 2010, J.C. Roberts wrote: The developers *CONSTANTLY* *ASK* *FOR* *YOUR* *HELP* with testing, ... Since validity is critical, if you cannot test properly and hopefully help in the debugging, then you'll never be any good at writing code... That's a very clean way of getting intr

Re: can't do suitable block in firewall

2010-04-19 Thread Lars Nooden
On 04/19/2010 09:12 PM, Leonardo Carneiro - Veltrac wrote: ... I already have a XMPP server on my network, and it replaces MSN in almost every task, but the gateway features does not work 100% yet (at least in the server that i use)... Which features and which server? /Lars

Re: can't do suitable block in firewall

2010-04-19 Thread Lars Nooden
On 04/19/2010 08:43 PM, Leonardo Carneiro - Veltrac wrote: Hi everyone. I'm trying to get some control of the MSN protocol in my network. Upgrade to XMPP (jabber). http://xmpp.org/about/ If you need client software, pidgin is one option available in ports http://www.openbsd.org/4.6_p

Re: softraid video

2010-04-19 Thread Lars Nooden
On 04/19/2010 07:18 PM, Paul Irofti wrote: See first post for all videos: http://undeadly.org/cgi?action=article&sid=20100322204337 The short answer is that there are no videos online. How to go about getting the originals from the camera? /Lars

Re: is skype using encryption?

2010-04-13 Thread Lars Nooden
On Sat, 10 Apr 2010, Jozsi Vadkan wrote: Can someone [same subnet, e.g.: with a hub, not switch..] sniff my skype password when i'm using Skype? Is it encrypted? After looking into the question of Skype's source code, as has been recommended ;) , you may want to look at regular SIP packages:

Re: Installing modules from CPAN

2010-04-07 Thread Lars Nooden
On 4/7/10 2:42 PM, Chris Bennett wrote: More serious question about ports. What about needing a newer version of a perl module than is in packages? The first step would be to move to -current, because -stable must keep the versions it is published with, and check the ports@ list. ... I like

Re: Installing modules from CPAN

2010-04-07 Thread Lars Nooden
On 4/7/10 12:06 PM, Will wrote: I know some OSes have a "right way" to install perl modules from CPAN. Does OpenBSD have some similar methodology? Check first in ports for packages, P5-* http://www.openbsd.org/4.6_packages/i386.html If it's not there, you can make your own package:

Re: crontab "last day of the month"

2010-04-07 Thread Lars Nooden
On Tue, 6 Apr 2010, Antti Harri wrote: OK. How do I reliably get month and year out of the file? awk will work for that and for massaging archived logs. That's also the kind of task perl is best at. Another option is to reconfigure the log file format. The regular Apache format L

Re: how to install OpenBSD in a computer with Linux and Grub2

2010-04-06 Thread Lars Nooden
On Tue, 6 Apr 2010, Salvador Fandino wrote: The procedure I have described shows how to *install* OpenBSD booting from a RAM disk (bsd.rd) placed in a Linux partition. Basically it removes the need to create a booting floppy or to burn a CD in order to install OpenBSD. It documents how to do i

Re: An idea for a very simple port knocking with pf

2010-04-01 Thread Lars Nooden
On 04/01/2010 03:09 PM, Marcus M|lb|sch wrote: Thanks for any pointers, You may instead be interested in exploring authpf + use of one time passwords. Look around for donkey, s/key, opie, yubikey to get ideas. http://www.h-online.com/security/features/One-time-passwords-for-home-users-74720

Re: An idea for a very simple port knocking with pf

2010-04-01 Thread Lars Nooden
On 04/01/2010 03:09 PM, Marcus M|lb|sch wrote: 1) Is there any problem with that setup? No, not if you do not deploy it. Yes, if you deploy it, it may implement port-knocking. http://marc.info/?l=openbsd-misc&w=4&r=1&s=port-knocking /Lars

Re: question wrt. -current

2010-04-01 Thread Lars Nooden
I am interested in how these things work internally in your project, and I also wondered whether I'd done something wrong (eg. inadvertantly fetched stale code), as, at first, I assumed that all these builds should occur in sync. Now, when I was reporting problems, the large difference in serial n

Re: whiteboard over the net - piratpad

2010-03-30 Thread Lars Nooden
On 03/30/2010 11:45 PM, Mark Rolen wrote: It looks like EtherPad will be gone after tomorrow, too. Google is killing it and moving the functionality into Google Wave: http://etherpad.com/ep/blog/posts/google-acquires-appjet Piratpartiet hosts a service now that Google has dropped Etherpad:

Re: whiteboard over the net

2010-03-30 Thread Lars Nooden
On Tue, 30 Mar 2010, Marco Peereboom wrote: Drawing shit with the mouse. Not typing stuff with the keybored. Scribus, Dia, OOo and others allow plugins or Python scripting. It might be feasible to slave input devices to a remote application. I wonder about using X11. It's possible to have

Re: macbook pro 5,5

2010-03-25 Thread Lars Nooden
On 3/24/10 21:02 , Pau wrote: I was also wondering whether it is possible to have openbsd on the laptop as the only OS. I am guessing that the EFI could give trouble. I've done that with the older macbook pros. I'm sure the openfirmware could be set to boot straight into OpenBSD, but would n

Re: installing amd64 using i386 to boot then amd64 for install?

2010-03-16 Thread Lars Nooden
On Tue, 16 Mar 2010, Cameron Simpson wrote: ...I'm considering is booting off the i386 CD1 and then using the CD2 disc for the install data. Will that work, or will the i386 install still load up some inappropriate i386 items (eg the boot sector)? If the network, usb or other media work in the

Re: Opteron 250 Overheating

2010-03-15 Thread Lars Nooden
On 2010-3-15 11:47 AM, Ludo Smissaert wrote: > ... Now I can still use it, longer than 30 minutes. To use it really > on my lap, is impossible, both my lap and the top will burn ;) The ln2 reservoir may be empty. Those dry out quickly even when the machine is not in use. Seriously, do you find

Re: help with mail retrieval/cleaning/storage setup using openbsd

2010-03-11 Thread Lars Nooden
On 2010-3-11 6:59 PM, inet_use...@samerica.com wrote: > My idea is to have a script that periodically fetches the mail for all > users, For that, one option is fetchmail: http://www.openbsd.org/4.6_packages/i386/fetchmail-6.3.9.tgz-long.html /Lars

Re: 4.7 make release fails

2010-03-08 Thread Lars Nooden
On 2010-3-8 8:48 PM, Bryan Irvine wrote: > 'su -' should. I'm used to 'su -' also, but noticed that the dash has been depreciated in favor of '-l' for simulating a full login. /Lars

Re: OpenBSD 4.6 Intel Mac Mini

2010-03-07 Thread Lars Nooden
On 2010-3-7 12:36 AM, John Hope wrote: > Does any clear step by step documentation exist for installing OpenBSD > on a Mac Mini? ... One way, not necessarily the best way, if you want dualboot, is * boot the OS X installation disk. * Partition the disk, leaving a FAT32 partition for OpenBSD. U

Re: OpenBSD 4.6 Intel Mac Mini

2010-03-07 Thread Lars Nooden
On 2010-3-7 4:21 AM, Devin Ceartas wrote: > I run openBSD 4.6 on intel mac minis as production web and email > servers. Works great. Nothing special about the install unless you want > to keep a mac partion. Put in the i386 disk, reboot. May have hold down > "c", I forget. The AMD64 CD would give

Re: serial bsd.rd on loongson

2010-03-06 Thread Lars Nooden
On Sat, 6 Mar 2010, Otto Moerbeek wrote: The steps are outlined in INSTALL.loongson. You'll need to set some pmon variables. Yes, I have that working the way you do, booting off of wd0a. There are the PMON characteristics outlined in INSTALL.loongson. The serial seems needed for catching ddb

serial bsd.rd on loongson

2010-03-06 Thread Lars Nooden
What is the appropriate way to have bsd.rd (current) use only the serial interface for loongson? The current FAQ 7 does not outline the extra steps needed beyond changing /etc/ttys /Lars

Re: -current or -stable [was: Not another Browser Question]

2010-03-05 Thread Lars Nooden
On 2010-3-5 7:24 PM, Marc Espie wrote: > Well, sometimes we fuck up -current. > > Not on purpose, but it happens. > > If you run into a broken snapshot, you may have to wait a few days until > a new snapshot hits the mirrors, usually with everything fixed. > > ... and so, your system may be fuck

booby trapped firmware (was Re: Dell PE850 & CERC SATA controller)

2010-03-04 Thread Lars Nooden
On 2010-3-5 2:47 AM, Nick Holland wrote: > Think about this a bit. These people DELIBERATELY put a feature in > their firmware to STOP me (and a lot of other people) from using this > card. Legit user, but they felt that I was entitled to help them > debug their shit for no more than sixty days.

Re: -current or -stable [was: Not another Browser Question]

2010-03-04 Thread Lars Nooden
On 2010-3-4 6:44 PM, nixlists wrote: > Anyway, I am still not clear where ... 'stable' refers to the APIs and ABIs. It also refers to the selection of packages and libraries and their versions. /Lars

Re: How to create an installation image of OpenBSD for a USB stick?

2010-03-04 Thread Lars Nooden
On 2010-3-4 12:22 AM, Ilya Ilembitov wrote: > ...Second problem is that I live in a dorn, so I only have access to > wireless connection, not wired. And I want to install OpenBSD to a > laptop that is currently running Debian Linux. What you are trying to do turns out to be so easy that there's no

Re: Terminal initialization configuration for multiple consoles on loongson

2010-02-28 Thread Lars Nooden
On Thu, 25 Feb 2010, Otto Moerbeek wrote: The smfb(4) framebufer just does not support more than one screen. On Thu, 25 Feb 2010, Peter Hessler wrote: We don't provide multiple terminals for the loongson platform. You can use tmux, or start X instead. Thanks Otto and Peter. It has been a g

dhcpd no longer providing default route

2010-02-25 Thread Lars Nooden
DHCPd on current serves up leases with no default route. It's been like that for a long while now and I've not been able to find anything about a solution. I notice in particular when connecting with clients from the various debian-based distros' install CDs. Old CDs (e.g. Ubuntu 5.10, 8.10) wh

Terminal initialization configuration for multiple consoles on loongson

2010-02-25 Thread Lars Nooden
The 22 Feb snapshot for loongson defaults to only one text console. Changing /etc/ttys to add extra terminals does not seem to have any effect: console "/usr/libexec/getty std.9600" vt220 off secure ttyC0 "/usr/libexec/getty std.9600" vt220 on secure ttyC1 "/u

VoIP protocols (was Re: $100 to configure ALTQ on a 4.6 router )

2010-02-23 Thread Lars Nooden
Ted Walther wrote: > I'd like a configuration to give skype traffic ... SIP and H.323 are the two open protocols for VoIP. Ports has pjsua and Ekiga. http://www.pjsip.org/pjsua.htm http://ekiga.org/ There are many others and they can be used to call any other SIP-phone (or H.323

Re: Current on FuLoong unable to figure out system type

2010-02-19 Thread Lars Nooden
Otto Moerbeek wrote: > On Thu, Feb 18, 2010 at 09:44:17PM +0200, Lars Nooden wrote: > >> On Thu, 18 Feb 2010, Otto Moerbeek wrote: >>> Retry with boot -k tftp://..., as suggested by the error message. >>> Also PMON sometimes gets confused, and a power cycle is need

Re: OT, .. but has anyone seen a crontab editor

2010-02-18 Thread Lars Nooden
L. V. Lammert wrote: > ... no way I'd saddle some of these > guys with vi, much less setting the cron time parameters correctly. Then you are far, far better off not letting them anywhere near the server room if they are that unqualified. Give them some time to learn and a training server, but ma

Re: Current on FuLoong unable to figure out system type

2010-02-18 Thread Lars Nooden
On Thu, 18 Feb 2010, Otto Moerbeek wrote: Retry with boot -k tftp://..., as suggested by the error message. Also PMON sometimes gets confused, and a power cycle is needed (using the reset button is not enough in all cases). Thanks. I had misinterpreted the message and put the -k as an argument

Current on FuLoong unable to figure out system type

2010-02-18 Thread Lars Nooden
Installing current on a Yeeloong went rather smoothly. Fuloong 2F6004 is giving a bit more trouble and bsd.rd seems not to be able to identify the system type. What is needed to boot bsd.rd (with serial interface) on the FuLoong? Below is from the 17 feb snapshot. /Lars ifaddr

Re: PF log parser and dynamic PF rules...

2010-02-16 Thread Lars Nooden
Per-Olov Sjvholm wrote: > ...Or did miss something here? You missed quite a lot. I would recommend looking up the following before aggravating a larger public: client - server architecture client application server (daemon) rss ssh http, https

Re: PF log parser and dynamic PF rules...

2010-02-16 Thread Lars Nooden
Per-Olov Sjvholm wrote: > On 16 feb 2010, at 11.11, Lars Nooden wrote: > >> http://rsug.itd.umich.edu/software/fugu/ > > > Noop. Can't see that these will work and all phones and computers > seamlessly with ease of use for the users. You appear to have asked abou

Re: PF log parser and dynamic PF rules...

2010-02-16 Thread Lars Nooden
Per-Olov SjC6holm wrote: > How do you use authpf from a IPhone or similar... Probably Fugu or Cyberduck or, if you can get a shell, plain openssh, as Fugu is a UI for the client. http://rsug.itd.umich.edu/software/fugu/ http://cyberduck.ch/ /Lars

Re: Jacek Books

2010-02-15 Thread Lars Nooden
Corey wrote: > And if he is not > responding to your personal emails, it is unlikely that posting on this > list is going to help any further. Try going through his publisher. /Lars

Re: New Jacek Book

2010-02-15 Thread Lars Nooden
Aaron Stellman wrote: > Nobody sane will give you a copy of copyrighted material, > especially on a public mailing list. This matter shouldn't even be > discussed here. Here, Aaron, download some copyrighted material all you want regardless of the sanity of these fellows: http://openbsd.o

Re: is the Lemote Yeeloong available in the US?

2010-02-04 Thread Lars Nooden
J.C. Roberts wrote: > I'm curious if the processor bugs were with the Loongson 2E or 2F ? > > For notes, I've already started the process of trying to contact Lemote > to see about *ahem* availability of their products, but I won't make any > promises my wallet can't keep (Sorry Kurt). Can you p

Re: way to help: laptops and weekly

2010-02-02 Thread Lars Nooden
Ingo Schwarze wrote: > David Coppa wrote on Tue, Feb 02, 2010 at 04:19:07PM +0100: > >> Maybe this can be an idea: >> http://xyne.archlinux.ca/manpages/cronwhip > > Citing from that page: > > :: DESCRIPTION > :: Cronwhip runs cronjobs that would have been run in the time since the > :: last

Re: pf and apache: to stop a scripter

2010-02-02 Thread Lars Nooden
> Jacob Yocom-Piatt wrote: >> there is a website protected by pf and running apache on a recent >> openbsd snapshot that needs to be protected against scripting attacks. >> i can configure both pf and apache to help block this behavior but am >> not familiar with the best practices for such configu

cvs using ssh an intermediary machine

2010-02-01 Thread Lars Nooden
I've been trying a method to use CVS with SSH using a middle machine as a stepping stone to cvs.eu.openbsd.org. 4.6 - current - cvs.eu.openbsd.org For regular ssh this works ok to other machines. CVS doesn't seem to like it. The symptom is the message: can't create temp

Re: way to help: laptops and weekly

2010-01-31 Thread Lars Nooden
Ingo Schwarze wrote: > Kevin Kadow wrote on Tue, Jan 26, 2010 at 04:40:13PM -0600: > >> and also like his suggestion to check 'apm' and not launch >> housekeeping tasks when solely on battery power. > > I fear that's not an option. The apm(8) utility uses the apm(4) > device which is limited

Re: Keeping my OpenBSD system up to date

2010-01-31 Thread Lars Nooden
Steve Shockley wrote: > On 1/31/2010 5:58 AM, James Stocks wrote: >> it doesn't presently have enough disk space to store a complete >> source tree. If there is a free usb port, an external device can be plugged in their and /usr (or specific sub-directories) mounted from that while you build a re

Re: vsftpd

2010-01-28 Thread Lars Nooden
Jean-FranC'ois SIMON wrote: > Is this normal way or do I miss something ? For ftp the normal way is to work with the chrooted ftp daemon that is part of the OpenBSD base: http://www.openbsd.org/faq/faq10.html#AnonFTP http://www.openbsd.org/cgi-bin/man.cgi?query=ftpd /Lars

Re: way to help: laptops and weekly

2010-01-28 Thread Lars Nooden
Nick Holland wrote: > however, maybe locate.updatedb could be adjusted to put an optional > delay between disk queries... What would be the relevant metric, how close to capacity a drive is working at? On a one-user system, it could be feasible to wait until usage is zero or close to it. On a m

Re: Finding bsd.rd checksums for sets without booting?

2010-01-28 Thread Lars Nooden
Nick Holland wrote: > look around in that file, you should have no problem finding it. > you will learn more following that process than me giving you the > answer. :) Good point. Grepping the output from 'strings' for large hexadecimal numbers finds the hash. strings /bsd.rd | egrep '^[

Re: way to help: laptops and weekly

2010-01-28 Thread Lars Nooden
stat to see if load is below a certain threshold. If the load is to high, then it can use at, to reschedule that part of the daily. For that to be practical, the components of daily and weekly scripts would need to be set as subroutines so that maintenance activities can be re-called separately using 'at'. /Lars Nooden

Re: Finding bsd.rd checksums for sets without booting?

2010-01-28 Thread Lars Nooden
Aaron Mason wrote: > ftp://ftp.openbsd.org/pub/OpenBSD/4.6/i386/SHA256 > > Replace 4.6 and i386 with the OpenBSD version (or snapshots) and your > arch respectively. Yes, those are the expected checksums and the sets can be tested with 'chksum -c SHA256'. However, bsd.rd itself contains a list

Finding bsd.rd checksums for sets without booting?

2010-01-27 Thread Lars Nooden
What ways are there to get the checksums from bsd.rd without actually booting with it and going through the installation of sets? /Lars

ssh - channel x: open failed: connect failed: Connection timed out

2010-01-26 Thread Lars Nooden
I'm getting a lot of timeouts using ssh as a socks proxy between 4.6 (ssh) and current (sshd). This is an example of the messages: channel 20: open failed: connect failed: Connection timed out channel 8: open failed: connect failed: Connection timed out channel 13: open fa

Re: way to help: laptops and weekly

2010-01-25 Thread Lars Nooden
I used to run into problems on old equipment (old in 1997 already) running the daily and weekly scripts early in the morning around the time I was arriving at work. find and conditional execution are one method available of checking the age of the database. #!/bin/ksh /usr/b

OT: article comparing SFTP vs FTPS

2010-01-21 Thread Lars Nooden
Can anyone point to an article comparing the protocols SFTP and FTPS that meets all four of the following criteria? a. is well-written b. contains accurate information c. contains uptodate information, not ten years out of date d. is authoritative (ideall

Re: Announcing: JigglyPuffBSD

2010-01-20 Thread Lars Nooden
>>> I don't like the color of your mascott, will refork into >>> ReJigglyPuffBSD, with a red one. >> Dislike your choice of default mutt schemes; will rerefork >> into HotDogStandBSD. > > TrollBSD. Forked with a sed one-liner, released via another one that > turns all available desktop themes int

  1   2   >