Re: Are there open source firewall distributions which are built on top of OpenBSD?

2019-03-12 Thread Mehma Sarja
> Are there open source firewall distributions which are built on top > > In the remote past, some existed and died, i'm not aware of any > > Also, wasting time on so-called "distributions" is discouraged Used to run pfsense for many years and once you get used to pf by itself, it just makes sens

OpenBSD install on a g5 imac power pc

2018-12-07 Thread Mehma Sarja
Installed openbsd on a model A1058, imac g5. The install was uneventful. However, I cannot boot to it. I've tried what the documentation says for booting off the HD using open prom and the error is that /bsd does not exist. I'm going off memory now. Is anyone running off a g5? Yudhvir

Re: Community-driven OpenBSD tutorials wiki?

2018-04-16 Thread Mehma Sarja
It is meant as a play on words, a light hearted comment. I see too many "shit" and "fuck" comments in posts these days from people trying to sound important when the subject matter is not. Mehma --- On Mon, Apr 16, 2018, 1:20 AM Stuart Henderson wrote: > On 2018-04

Re: Community-driven OpenBSD tutorials wiki?

2018-04-14 Thread Mehma Sarja
I think what Jan is saying is sometimes we go to the hardware store for a particular task, like weather proofing the home. And sometimes we go to the store just to see what they have and you might want without a particular project in mind. Man pages, as opposed to woman pages, help one accomplish

Re: OpenBSD in April's issue of the CACM

2012-05-29 Thread Mehma Sarja
On 5/29/12 4:35 PM, Theo de Raadt wrote: However, I myself will not send them a letter. If an organization with the size and reputation of ACM cannot self-police their own authors before publishing, then they do not have a high reputation after all, and it is not worth my time writing a dispute

Re: Upgrading OpenBSD

2012-05-21 Thread Mehma Sarja
On 5/21/12 9:34 PM, Matthew Weigel wrote: On 21.05.2012 22:45, Richards, Toby wrote: Granted: I do hold an MCSE certification, but I don't need it. The upgrade just works. Well... despite occasional BSOD's ;) I admit this kind of made me chuckle: http://www.linkedin.com/pub/toby-richards/37/7

Re: How to deal with DDoS ?

2012-02-22 Thread Mehma Sarja
On 2/22/12 12:39 AM, Roger S. wrote: On Tue, Feb 21, 2012 at 9:51 PM, Joachim Schipper wrote: Just the most obvious idea, since you mention that this sort-of-works if you put "block drop in quick from !": does it handle this load if you turn off pf, or only include one or two trivial rules? H

Re: n00b questions -- keyboard messed up

2012-01-23 Thread Mehma Sarja
On 1/22/12 9:47 PM, John Doe wrote: Excuse my good old-fashioned American turkeyness of last year, but if it's not secure by default, it does indeed belong on the website. Why can't we set machdep.allowaperture=1 for n00bs whose first priority is to use X Windows without getting hacked in the ke

Re: Narcicism?

2011-12-01 Thread Mehma Sarja
On 12/1/11 7:25 AM, John Tate wrote: I'm 24 years old. I was a Linux hacker since I was 13. I am a bit of a guru [snip] age, but at an older age I relearned it well. I am the guru sort of guy, I A guru is someone who knows stuff. Mehma

Re: Something similar to Soekris boards, for server applications

2011-11-30 Thread Mehma Sarja
I'm putting a Supermicro Atom D510 in the field as a SSD-based firewall and boot server for 158 users. And a Supermicro D525 as a file server with a 1 TB drive. Where they are going, they have power issues and low-power systems, with a UPS, might just survive. Each is maxed out with 4GB RAM. An

Re: I want copy pf.conf from FreeBSD 8.2 to OpenBSD 5 and use it

2011-11-08 Thread Mehma Sarja
On 11/8/11 4:25 AM, Mostaf Faridi wrote: Thanks My problem is this I do not enough time to start from scratch and make new rule .in my work place , my boss find another person can do internet sharing with Windows 2008 and ISA and this person say he can make best internet sharing server , I said b

Re: USB mouse

2011-10-26 Thread Mehma Sarja
On 10/26/11 5:19 PM, Scott McEachern wrote: On 10/26/11 20:05, Christiano F. Haesbaert wrote: On 26 October 2011 20:52, Zantgo wrote: How I can run USB mouse? Zantgo It should work just by plugging it, have you tried ? Oh that's just pie-in-the-sky craziness. The next thing you'll be s

Re: Detect APC UPS is on battery

2011-10-19 Thread Mehma Sarja
On 10/19/11 1:57 AM, Benny Lofgren wrote: On 2011-10-19 10.23, Paul de Weerd wrote: | I think your methodology is fllawed. think of the situations when you | have power loss, then shutdown is started and then power is back. | or situations where you starting machine after blackout and then there

Re: What should I do with a remote AIX machine if I accidentally "chmod "/usr/bin/ksh"?

2011-08-30 Thread Mehma Sarja
On 8/30/11 6:15 PM, Marcos Ariel Laufer wrote: I didn't mean evangelizing, but you never know who might be a future donator, after all OpenBSD needs donations Donor, not donator. Mehma

Re: Mac Mini Server

2011-07-13 Thread Mehma Sarja
On 7/13/11 11:15 AM, Francois Pussault wrote: hi, of course it makes sense, it is done to make you talk about it, so that works. Try loading an OpenBSD VM on the machine first to see if there are any surprises. Mehma

Re: How does OpenBSD compare to Ubuntu Server?

2011-07-12 Thread Mehma Sarja
On 7/11/11 10:48 PM, Andres Perera wrote: On Mon, Jul 11, 2011 at 11:43 PM, patrick keshishian wrote: you failed at making any point. i'll rebrand it into convenient twitter format: debian splits packages to the point where a single service is a associated to a single top level package, meani

ssh connections load on a server - NEWBIE question

2011-06-23 Thread mehma sarja
What do you call an OpenBSD network admin? The answer is at the end of this message. What kind of server load will 62 sshfs connections have on an Atom server with 4GB RAM? The connections will last a workday. I am assuming that a sshfs connection is basically a ssh connection and hence the post o

Re: 64bit (or better) memory reads in i386

2011-06-12 Thread Mehma Sarja
On 6/12/11 12:28 AM, Otto Moerbeek wrote: > On Sun, Jun 12, 2011 at 04:19:01PM +0930, Giridhari wrote: > >> Your criticism is welcome- it gives me perspective of what I am >> looking at, and how to tackle this. You've told me to think and what >> to think about. I am not trying to get out of work I

Re: Need Suggestion: To limit the access of root account

2011-04-28 Thread Mehma Sarja
On 4/28/11 7:52 PM, Stefan N wrote: Hi All, I would need some suggestions from you. Currently I am setting up OpenBSD Firewall using PF at my working place. However, some of my colleagues are not so familiar with the OpenBSD and we would like to take turn to do that. I have the intention that I

Re: For me, OpenBSD is the operating system that "just works".

2011-04-27 Thread Mehma Sarja
On 4/27/11 6:43 PM, Amit Kulkarni wrote: So it turns out I had this spyware. None of the AVs detected it. cut I tried a Mac, but ultimately had the same problem, without all the crashing. Just removed 11 viruses, that I know of, from my mac laptop. That's called a Mac attack. Mehma

Don't go over to the dark side

2011-04-19 Thread Mehma Sarja
On 4/19/11 8:27 AM, Amit Kulkarni wrote: -> Keeps me from taking that cushy Microsoft job Theo, Don't go over to the dark side. Stay aloof and kick everybody's ass. If Windows were not consistently, inherently and congenitally insecure - there would not be such a great need for OpenBSD

Re: Wildest Africa Tour

2011-04-05 Thread Mehma Sarja
On 4/5/11 9:07 AM, Stuart Henderson wrote: On 2011-04-04, Stuart VanZee wrote: Don't be silly. While Lions do provide excelent physical security they don't provide any data security at all. I love animals: I'm always talking about animals, I love 'em. But the thing is that, you know, whenever

Re: Please help me decide: OpenWrt vs. OpenBSD

2011-01-20 Thread Mehma Sarja
On 1/20/11 1:32 PM, Aaron Glenn wrote: On Thu, Jan 20, 2011 at 9:07 PM, Stuart Henderson wrote: [stuff] it took a full 8 replies to get to the correct response? now I understand why enlightened people find misc@ complete noise with negligible signal. I find the list very informative.

Re: OpenBSD-capable, fanless, diskful computer with ECC RAM

2010-12-09 Thread Mehma Sarja
On 12/9/10 4:47 PM, Joe S wrote: On Fri, Oct 29, 2010 at 5:14 PM, Damien Miller wrote: Hi, Can anyone recommend a small, fanless computer that will accept a HD (perhaps a 2.5" drive) that uses ECC RAM? Needless to say, it must run OpenBSD. Being 64 bit, having accellerated crypto and/or s

Re: Donations

2010-12-09 Thread Mehma Sarja
On 12/9/10 4:54 AM, Chandrakant Kumar wrote: On Thursday 09 December 2010 05:39 PM, Hugo Osvaldo Barrera wrote: On 05/12/10 23:04, Adam M. Dutko wrote: I hope that one day due process is denied you. I am wondering what type of due process should be granted to these individuals. What basis/ju

Re: help

2010-11-08 Thread Mehma Sarja
On 11/8/10 4:29 AM, Ed Ahlsen-Girard wrote: From: Armando Date: 2010-11-08 12:00:56 On 11/08/2010 12:49 PM, Scott McEachern wrote: On 11/08/10 06:40, Gaby Vanhegan wrote: On 8 Nov 2010, at 11:33, Joe Warren-Meeks wrote: On 8 November 2010 10:46, stev

Re: nfsv4?

2010-10-27 Thread Mehma Sarja
On 10/27/10 1:58 PM, James A. Peltier wrote: Now, that said, is there anything that you could recommend instead of NFSv4 for offering secure file services to multiple platforms? My research only led me to NFSv4 and AFS, and AFS would have been a much, much larger project for us than a move to

Re: dhcpd knob

2010-06-20 Thread Mehma Sarja
On 6/20/10 6:43 AM, Jacob Yocom-Piatt wrote: Rod Whitworth wrote: On Sat, 19 Jun 2010 23:38:10 -0700, Mehma Sarja wrote: I can vouch for the water in India. Which is no doubt the reason that Mr Tata supplied us with crates of bottled water when we were working there? So you could vouch for

Re: dhcpd knob

2010-06-19 Thread Mehma Sarja
On 6/19/10 10:08 AM, Theo de Raadt wrote: anyone is welcome to run the official isc stuff if they want. they're also welcome to drink the water in india. we don't mind when other people take risks with their own lives. I can vouch for the water in India. Mehma

Re: OpenBSD culture?

2010-04-14 Thread mehma sarja
Zack et all, The OpenBSD community is neither rude nor anti-newbies - they just take their work personally. I am a newbie and have used this group without any negative responses. The gruff talk people are referring to is based purely on lazy questions. Mehma

Re: Hardening OpenBSD : Just delete!

2010-03-14 Thread mehma sarja
hadly hadened (Boston dialect) if Guido is not watching it. Mehma === On Sun, Mar 14, 2010 at 10:07 PM, Han Boetes wrote: > Chris Bennett wrote: > > You people have no sense of where security really lies at! > > If you don't remove the hard drive, there is no security at all! > > I simply put m

Re: RouterBOARD RB600A support

2010-03-09 Thread mehma sarja
I'l up my bid from 40 to 80 USD. Mehma

Re: RouterBOARD RB600A support

2010-03-08 Thread mehma sarja
Good post Mark, [snip] > If anybody is interested and willing to donate a > development board or a hackable product based on these chips, please > contact me. Let's have a mini rally around providing a board here - I'm in for twenty USD. I am sure 10-15 people can do the trick. [snip] > To gua

Re: Sun Fire 880 phantom disks

2010-03-01 Thread mehma sarja
That's spare change. If you change the 'm' to a 'r', then you can have mine. Mehma === On Mon, Mar 1, 2010 at 3:25 PM, Kenneth R Westerback wrote: > On Mon, Mar 01, 2010 at 10:58:31PM +0100, Pete Vickers wrote: > > Hi, > > > > The 880 is stock from Sun. I've done no hardware plumbing on it. > >

Re: selling bsd in cd for profit??

2010-02-26 Thread mehma sarja
Yea for Steve! Mehma === On Fri, Feb 26, 2010 at 6:37 PM, STeve Andre' wrote: > On Friday 26 February 2010 21:25:51 Richard Toohey wrote: > > On 27/02/2010, at 3:04 PM, Joel Wiramu Pauling wrote: > > > Let me clear on this. > > > > > > Yes you can. > > > > > > Follow the BSD licence terms (none

Re: OT: opinions on IDS / IPS solutions

2010-02-18 Thread mehma sarja
Wed, Feb 17, 2010 at 11:47 PM, mehma sarja > wrote: > > Don't bypass Snort because PFSense package makes it so easy to install > and > > configure. A a one-click install of Snort and the only thing left to do > was > > register and select what you want it to do.

Re: OT: opinions on IDS / IPS solutions

2010-02-17 Thread mehma sarja
Don't bypass Snort because PFSense package makes it so easy to install and configure. A a one-click install of Snort and the only thing left to do was register and select what you want it to do. Mehma === On Wed, Feb 17, 2010 at 8:28 PM, Johan Beisser wrote: > On Wed, Feb 17, 2010 at 7:59 PM, J

Re: Fw: pico and/or nano in the releases and snapshots

2010-02-03 Thread mehma sarja
He's not asking you to do it, it is all up to the LordKrsna in this case. Mehma === On Wed, Feb 3, 2010 at 4:35 PM, Scott McEachern wrote: > Giridhari wrote: > > blah blah > >> pico or nano >> > blah blah > >> part of the distribution. >> > and more blah blah blah. > > All that because you

Re: PowerEdge 850 for a small office firewall

2010-01-26 Thread mehma sarja
I am running an embedded 533 MHz with 256 MB memory and it is woefully inadequate for an office setting. Even for a home setting which wants stuff like snort running as well. I would WAG atleast a 2 GB memory and the Atoms max out at that...? If the firewall will be doing other stuff like snort, vp

Re: Books on reverse engineering?

2010-01-21 Thread mehma sarja
I second that notion. Mehma === On Thu, Jan 21, 2010 at 2:19 PM, Owain Ainsworth wrote: > As someone who went from "knowing a small amount of C " to hacking the > kernel, i call bullshit on your assumptions here. > > On 1/21/10, Tobias Ulmer wrote: > > On Wed, Jan 20, 2010 at 05:52:52PM -0800,

Re: GNOBSD-Project introduction

2010-01-19 Thread mehma sarja
> > Stefan Rinkes > > wrote: > > > Hello, > > > > > > My name is Stefan Rinkes. I'm from munich in germany > > and I want to introduce my OpenBSD-Project. > > Stefan, you seem like a programmer dude looking to contribute to The Cause. > Would you be interested in contributing your skills to Open

Re: hw.sensors jumping up and down

2010-01-03 Thread mehma sarja
On Sun, Jan 3, 2010 at 6:22 PM, frantisek holop wrote: > hi there, > > i have noticed that my hw sensors ouput is changing > in a disturbing way (notice temp0): > > day 1: > hw.sensors.it0.temp0=255.00 degC > hw.sensors.it0.fan0=5625 RPM > hw.sensors.it0.fan1=0 RPM > hw.sensors.it0.fan2=0 RPM > >

Re: DVD burning software besides cdrecord/growisofs

2009-12-22 Thread mehma sarja
My dmesg shows: cd0 at scsibus0 targ 0 lun 0: ATAPI 5/cdrom removable It is some sort of new fangled dvd writer - super multi by LG. I struggled with this for a while and finally the light shone bright as follows: FIRST, as root, type # disklabel cd0 SECOND, this reports, among other things the

Re: Can someone tell me if my disk is dying...

2009-07-15 Thread mehma sarja
Does OpenBSD have the camcontrol package? If so, try camcontrol defects sd0 -f phys -p camcontrol defects sd0 -f phys -g Yudhvir

Re: old and new pf tandem test ---help

2009-05-20 Thread mehma sarja
Wow, I appreciate your insights. Yudhvir === On Tue, May 19, 2009 at 7:23 AM, Jason Dixon wrote: > On Tue, May 19, 2009 at 02:52:03PM +0200, I?igo Ortiz de Urbina wrote: > > On Tue, May 19, 2009 at 2:37 PM, Stuart Henderson > wrote: > > > On 2009-05-19, Iqigo Ortiz de Urbina wrote: > > >> Meh

Re: old and new pf tandem test ---help

2009-05-18 Thread mehma sarja
Otto, Henning and Stuart to-the-point answers. Thanks guys. I have taken the post over to FreeBSD list. However, Henning, I am curious why you call pf on anything but OpenBSD a "starter drug?" Is the performance difference that huge? pf on FreeBSD 7.2 is version 4.1. You have piqued my interes

Re: old and new pf tandem test ---help

2009-05-17 Thread mehma sarja
his be the problem? Yudhvir === On Sun, May 17, 2009 at 6:13 PM, mehma sarja wrote: > Ingo and the rest of OpenBSD pf-ers, > Thanks Ingo for your thoughts. Let me ask a simpler question, is there > something wrong with the following line on a FreeBSD 7.2 pf? > > pass in log qu

Re: old and new pf tandem test ---help

2009-05-17 Thread mehma sarja
Ingo and the rest of OpenBSD pf-ers, Thanks Ingo for your thoughts. Let me ask a simpler question, is there something wrong with the following line on a FreeBSD 7.2 pf? pass in log quick on em0 inet proto tcp from any to 121.209.23.121 port = imaps flags S/SA modulate state Yudhvir

Re: old and new pf tandem test ---help

2009-05-17 Thread mehma sarja
3.234 port = pop3s flags S/SA modulate state Yudhvir === On Sun, May 17, 2009 at 11:09 AM, Ingo Schwarze wrote: > mehma sarja wrote on Sun, May 17, 2009 at 10:35:27AM -0700: > > > I want to test two pf firewalls in-line - an old openBSD (3.7 #50, > > That makes absolutely no

old and new pf tandem test ---help

2009-05-17 Thread mehma sarja
I want to test two pf firewalls in-line - an old openBSD (3.7 #50, i386) is on the 'outside' and a new FreeBSD (7.2 #0 amd64) is on the 'inside.' Here is the setup INTERNET ===[outside port bridged to inside port OLD pf] === [outside port bridged to inside port NEW pf] === LAN I took the old pf.co