How to patch a physically weak system recommended use of sudo?

2005-08-18 Thread Tim
Hello 1. I have a old computer that is slow and has little memory. But I want to keep it updated with patches. I can't compile these patches on the system but I could do it on another faster system. But how can I later apply the compiled patches to the weak system? 2. Alot of you seem to

ami0 and bioctl.

2005-08-18 Thread Laurens Vets
Hi all, I've just upgraded to -current (3.8-beta, snapshots op August 16th) to try out the bioctl utility on my raid controller. However, when I try to access it, I always get the error bioctl: bioc_ioctl() call failed: # bioctl -Dhiv ami0 bioctl: cookie = 0xd0c56e80 bio_inq bioctl:

Re: How to patch a physically weak system recommended use of sudo?

2005-08-18 Thread Stuart Henderson
--On 18 August 2005 13:03 +0200, Tim wrote: 1. I have a old computer that is slow and has little memory. But I want to keep it updated with patches. I can't compile these patches on the system but I could do it on another faster system. But how can I later apply the compiled patches to the weak

Re: 8/13 snapshot and DHCP

2005-08-18 Thread Emmett Pate
Christian Jones wrote: On 8/17/05, Kenneth R Westerback [EMAIL PROTECTED] wrote: I would find it helpful. An exact model of Linksys device would also help. The specific model I've had problems with (don't know about the OP) is a BEFW11S4 ver. 2 Wireless Access Point and Cable/DSL

fortinet experiences

2005-08-18 Thread mdff
dear misc, not related to misc, but to security, so has anyone experiences with boxes from fortinet? details: http://www.fortinet.com/ cu...

Re: OBSD on Dell C640

2005-08-18 Thread J. Lievisse Adriaanse
According to http://www.openbsd.org/i386-laptop.html, yes. But you could've found it out yourself! If you did some research. Jasper On Thu, 18 Aug 2005 19:26:54 +0600 Chanka A. Perera [EMAIL PROTECTED] wrote: Hi, If anyone has successfully installed OBSD 3.7 on Dell Latitude C640 please

Re: How to patch a physically weak system recommended use of sudo?

2005-08-18 Thread Scott Francis
On 8/18/05, Stuart Henderson [EMAIL PROTECTED] wrote: [snip] 2. Alot of you seem to use sudo instead of su - when you want to do something that requires privileges. Why is this? What settings are you using for sudo? Various reasons .. if you use sudo on each command you want to execute

Re: How to patch a physically weak system recommended use of sudo?

2005-08-18 Thread John Wright
On Thu, Aug 18, 2005 at 01:03:27PM +0200, Tim wrote: Hello 1. I have a old computer that is slow and has little memory. But I want to keep it updated with patches. I can't compile these patches on the system but I could do it on another faster system. But how can I later apply the compiled

latest bsd.rd crashes during boot

2005-08-18 Thread Paul de Weerd
Hi All, While trying to upgrade to the latest snapshot (dated August 17) I'm experiencing some issues with the bsd.rd kernel. Below is the dmesg for bsd.rd and the normal kernel (from a ~3 weeks old snapshot). Has anyone else seen this ? This is on a Toshiba Tecra 8100 laptop. If any other info

Re: fortinet experiences

2005-08-18 Thread Johan P . Lindström
On 8/18/05, mdff [EMAIL PROTECTED] wrote: dear misc, not related to misc, but to security, so has anyone experiences with boxes from fortinet? details: http://www.fortinet.com/ cu... Fortinet and Clavister seems to be similar, though Fortinet a little looks better in terms of proxying

Re: more 1 than client can use same port from router (for bittorrent)

2005-08-18 Thread Ray Lai
On Sat, Aug 06, 2005 at 05:19:46PM +0200, Erik Wikstrvm wrote: On 2005-08-06 16:48, Vivek Ayer wrote: Hi guys, I was wondering if it was possible to port forward the same port to more than one client behind a router. Currently, my client is the only one using bittorrent behind the router. I

Re: How to patch a physically weak system recommended use of sudo?

2005-08-18 Thread Jason Crawford
On 8/18/05, Tim [EMAIL PROTECTED] wrote: Hello 1. I have a old computer that is slow and has little memory. But I want to keep it updated with patches. I can't compile these patches on the system but I could do it on another faster system. But how can I later apply the compiled patches

Re: ami0 and bioctl.

2005-08-18 Thread Marco Peereboom
This controller is currently not supported. On Thu, Aug 18, 2005 at 01:14:01PM +0200, Laurens Vets wrote: Hi all, I've just upgraded to -current (3.8-beta, snapshots op August 16th) to try out the bioctl utility on my raid controller. However, when I try to access it, I always get the

Re: Hard Disk Password Security Info

2005-08-18 Thread Dave Feustel
On Thursday 18 August 2005 09:38, Dimitry Andric wrote: See the atactl(8) manpage, in particular the sec* commands. I was looking that that manpage yesterday. It confirms that it is possible to make the disk data inaccessible to anyone without the user password. However, I don't believe these

Re: How to patch a physically weak system recommended use of sudo?

2005-08-18 Thread Nick Holland
Tim wrote: Hello 1. I have a old computer that is slow and has little memory. But I want to keep it updated with patches. I can't compile these patches on the system but I could do it on another faster system. But how can I later apply the compiled patches to the weak system? In addition

Re: ami0 and bioctl.

2005-08-18 Thread Laurens Vets
Thanks for the information. Will it ever be? Marco Peereboom wrote: This controller is currently not supported. On Thu, Aug 18, 2005 at 01:14:01PM +0200, Laurens Vets wrote: Hi all, I've just upgraded to -current (3.8-beta, snapshots op August 16th) to try out the bioctl utility on my

Re: Hard Disk Password Security Info

2005-08-18 Thread Timothy Donahue
On Thursday 18 August 2005 11:02 am, Dave Feustel wrote: On Thursday 18 August 2005 09:38, Dimitry Andric wrote: See the atactl(8) manpage, in particular the sec* commands. I was looking that that manpage yesterday. It confirms that it is possible to make the disk data inaccessible to anyone

Re: Hard Disk Password Security Info

2005-08-18 Thread Dave Feustel
On Thursday 18 August 2005 10:16, Timothy Donahue wrote: The only way to recover information off of a disk that has the ata security password protection implemented correctly is to transplant the platters into another disk (of the same type). The c't article, the link to which I posted to

Re: How to patch a physically weak system recommended use of sudo?

2005-08-18 Thread Scott Plumlee
Nick Holland wrote: Tim wrote: Hello 1. I have a old computer that is slow and has little memory. But I want to keep it updated with patches. I can't compile these patches on the system but I could do it on another faster system. But how can I later apply the compiled patches to the weak

Re: ami0 and bioctl.

2005-08-18 Thread Marco Peereboom
Maybe. The older cards have some issues that need to be worked around in the driver. This is very tricky stuff though and takes a lot of time to get right. On Thu, Aug 18, 2005 at 05:13:38PM +0200, Laurens Vets wrote: Thanks for the information. Will it ever be? Marco Peereboom wrote:

Re: Xorg Problems on 3.7

2005-08-18 Thread Dan Smythe
It appears that the Xorg bug is one that will always default the resolution down to 640x480 on the Dell Latitude with ATI Mobility M3 chipsets. Dave Feustel [EMAIL PROTECTED] wrote:On Tuesday 16 August 2005 13:43, you wrote: the resolution bug for Xorg I also have a Dell Latitude running

umts mtu

2005-08-18 Thread Bolke de Bruin
Hi, I am working on an UMTS (via ppp) connection. This connection seems to have a very small mtu namely 480 bytes. If found this out using different sizes when pinging. To accomodate vor this I have added a scrub rule to pf.conf: scrub out on tun0 all fragment reassemble max-mss 472 in

OpenBSD 3.7 and web cameras - searching for a definitive answer

2005-08-18 Thread Jyri Hovila
Hi everyone! Despite a thorough search through mailing list archives and Google, I was not able to find a clear answer to this question: is it possible to use a modern USB webcam, such as Logitech QuickCam or Vimicro webcam, with OpenBSD 3.7? The graphics/cqcam port only support parallel

Re: How to patch a physically weak system recommended use of su do?

2005-08-18 Thread Spruell, Darren-Perot
From: Scott Plumlee [mailto:[EMAIL PROTECTED] Took me a while to get interested in sudo, which is unfortunate. Way cool program. When I set up an OpenBSD system, one of the first things I do is create a personal user for myself, put myself in the wheel group, configure sudo to

Re: Hard Disk Password Security Info

2005-08-18 Thread Dimitry Andric
On 2005-08-18 at 00:46:39 Dave Feustel wrote: With most notebooks it is possible to secure the hard disk against unauthorized access with the aid of a password. See the atactl(8) manpage, in particular the sec* commands. However, I don't believe these harddisks actually encrypt all data on

Re: How to patch a physically weak system recommended use of sudo?

2005-08-18 Thread Jason Crawford
On 8/18/05, Scott Plumlee [EMAIL PROTECTED] wrote: Nick Holland wrote: Tim wrote: Hello 1. I have a old computer that is slow and has little memory. But I want to keep it updated with patches. I can't compile these patches on the system but I could do it on another faster system. But

Re: umts mtu

2005-08-18 Thread Bolke de Bruin
Additionally it seems that the mtu using the same card using windows actually is 1500. Bolke de Bruin wrote: Hi, I am working on an UMTS (via ppp) connection. This connection seems to have a very small mtu namely 480 bytes. If found this out using different sizes when pinging. To

Re: Hard resets with onboard auvia(4)

2005-08-18 Thread Fábio Olivé Leite
I have this Gigabyte 7VM400M-RZ motherboard with VIA KM400/VIA 8235 chipset and the auvia(4) driver (3.7-stable) attaches and plays distorted sound, but trying to play sound sometimes also leads to instant hard resets. BTW, I'm not subscribed to the list, so please keep me in the Cc:.

Re: Hard Disk Password Security Info

2005-08-18 Thread Andrew Dalgleish
On Thu, Aug 18, 2005 at 10:28:45AM -0500, Dave Feustel wrote: The c't article, the link to which I posted to misc@ yesterday, stated that a data recovery company was able to retrieve the user disk password (set by the authors of the article) from the disk, aparently without opening (and

Re: Hard Disk Password Security Info

2005-08-18 Thread Dave Feustel
On Thursday 18 August 2005 11:19, Andrew Dalgleish wrote: On Thu, Aug 18, 2005 at 10:28:45AM -0500, Dave Feustel wrote: The c't article, the link to which I posted to misc@ yesterday, stated that a data recovery company was able to retrieve the user disk password (set by the authors

Re: How to patch a physically weak system recommended use of sudo?

2005-08-18 Thread J.C. Roberts
On Thu, 18 Aug 2005 14:12:00 -0400, Nick Holland [EMAIL PROTECTED] wrote: I also tend to have an alias ]=sudo in my .profiles. It's obvious you can type accurately *and* you don't have a cat... (; JCR

ayuda con sendmail

2005-08-18 Thread Efrén Sánchez
no pueden salir ni entrar correos Aug 18 14:09:06 sanjorge sm-mta[10537]: j7IJ8xb5010537: ruleset=check_mail, arg1=[EMAIL PROTECTED], relay=xproxy.gmail.com [66.249.82.194], reject=553 5.1.8 [EMAIL PROTECTED]... Domain of sender address [EMAIL PROTECTED] does not exist Aug 18 14:09:06 sanjorge

Re: backup filesystem

2005-08-18 Thread Masoud Sharbiani
Hello, How about a _encrypted_ tarball on a filesystem that both of the OS'es understand? cheers, Masoud On Thu, Aug 18, 2005 at 06:03:58PM +0100, Edd Barrett wrote: Hi, I shall be transporting a hard disk between two sites for backup purposes. The backup shall be on a RAID-1 mirror in an

Re: backup filesystem

2005-08-18 Thread J. Lievisse Adriaanse
On Thu, 18 Aug 2005 16:35:31 -0400 Masoud Sharbiani [EMAIL PROTECTED] wrote: Hello, How about a _encrypted_ tarball on a filesystem that both of the OS'es understand? Like FFS, right? cheers, Masoud On Thu, Aug 18, 2005 at 06:03:58PM +0100, Edd Barrett wrote: Hi, I shall be

Re: Hard Disk Password Security Info

2005-08-18 Thread Jonathan Schleifer
Chris Kuethe [EMAIL PROTECTED] wrote: Before we get too worked up over this, can someone who actually cares spend an afternoon with a pair of identical disks to tell us whether or not a board swap will defeat the password (and on what sort of drive)? It won't. The password isn't saved in the

OpenBSD and web cameras - searching for a definitive answer

2005-08-18 Thread Jyri Hovila
Hi everyone! Despite searching thoroughly through the mailing list archives and Google, I was not able to find a clear answer to this question: are there any programs available to control a modern USB webcam, such as Logitech QuickCam or Vimicro webcam, using OpenBSD (3.7)? The

Shared memory / SQL

2005-08-18 Thread David Hill
Hello - I need to build a server that will run PostgreSQL 8, handling up to 150 connections. The current database size is roughly 2GB now with 2.8 million rows in it's biggest table. This is expected to continue to grow steadily over time. The hardware I have to work with is a single 3Ghz p4

Re: umts mtu

2005-08-18 Thread Bolke de Bruin
It is a Novatel Wireless / Qualcomm. Support has been added for this card has been added in -CURRENT, but this version is running on 3.6. It seems a little bit different than the one vodafone is offering. I cant set the speed 115200 Reyk Floeter wrote: On Thu, Aug 18, 2005 at 06:23:50PM

Re: ayuda con sendmail

2005-08-18 Thread Gerardo Santana Gómez Garrido
2005/8/18, Efrin Sanchez [EMAIL PROTECTED]: no pueden salir ni entrar correos [snip] que puedo hacer La lista de corre en espaqol esta aqum/The Spanish mailing list is here: http://groups.google.com.mx/group/OpenBSD-Mexico/ ?Seguro que es un OpenBSD? Tal parece que no pudo resolver el

Re: ayuda con sendmail

2005-08-18 Thread Claus Assmann
On Thu, Aug 18, 2005, Efrin Sanchez wrote: Aug 18 14:22:55 sanjorge sm-mta[17316]: ruleset=check_relay, arg1=localhost.my.domain, arg2=127.0.0.1, relay=localhost.my.domain [127.0.0.1], reject=553 5.3.0 RELAY #Relevo de Correo desde That's funny we are just discussing what to do about

Re: backup filesystem

2005-08-18 Thread Edd Barrett
Hello, How about a _encrypted_ tarball on a filesystem that both of the OS'es understand? Im not interested in encryption (this time). Like FFS, right? See this is why I asked here, I know that FFS is close friends with UFS, but I wasnt sure. So you reckon I can use native solaris FS

vge0 on Abit Av8 (amd64)

2005-08-18 Thread Tony Lambiris
I recently installed a snapshot (august 17th) from ftp.rt.fm using FTP install. When I booted from the CDROM, I was able to use the vge0 interface to download the packages. I rebooted and flashed the BIOS because the system/BIOS was saying it couldn't detect the CPU model. I rebooted after the

kernel page fault on initial login (OpenBSD 3.7 Release)

2005-08-18 Thread Dave Wickberg
Hi, I've just recently installed OpenBSD 3.7 (Release) on a Celeron 466 w/ 256MB of RAM. I created a boot floppy and from there the install went flawlessly. However, after booting the systems for first time I am getting a kernel page fault error as soon as I try to type in a userid. This is

Re: back and neck pain

2005-08-18 Thread Clint M. Sand
On Thu, Aug 18, 2005 at 07:24:56PM -0400, [EMAIL PROTECTED] wrote: A friend told me about you- i have a' spondie'-l4-l5, that surgey helped a little, and 10 mos. later my car fell off the jacks, breaking my back-burst fracture of t-12, and aggrivating the 'spondie'. I have a lot of pain and

Re: Shared memory / SQL

2005-08-18 Thread Graeme Lee
David Hill wrote: Hello - I need to build a server that will run PostgreSQL 8, handling up to 150 connections. The current database size is roughly 2GB now with 2.8 million rows in it's biggest table. This is expected to continue to grow steadily over time. The hardware I have to work with

Re: backup filesystem

2005-08-18 Thread Masoud Sharbiani
/me puts the anti flame suit on: How about vfat? Masoud Edd Barrett wrote: Hello, How about a _encrypted_ tarball on a filesystem that both of the OS'es understand? Im not interested in encryption (this time). Like FFS, right? See this is why I asked here, I know that

sendmail and mutt (RunAsUser for MSP ignored)

2005-08-18 Thread auto196629
I've checked the FAQ, I've checked the list archives, I've even checked the bug reports. I'm running OpenBSD 3.7-stable. I've installed mutt-1.4.2ip0 from /usr/ports/mail/mutt/stable . sendmail is using the default localhost.mc with just a few lines added so that it can relay via SMTP AUTH

Re: Amanda clients, behind a pf firewall?

2005-08-18 Thread Andrew Rucker Jones
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 You can build Amanda Yourself and specify certain port ranges, which is a big win when configuring a firewall. Here are the rules i have in a neutral format (i actually use Netfilter on that firewall): server/src ports 702:712/udp - clients/dst

Re: backup filesystem

2005-08-18 Thread Siju George
On 8/19/05, Masoud Sharbiani [EMAIL PROTECTED] wrote: /me puts the anti flame suit on: How about vfat? Masoud then you wont be able to preserve the permissions exactly. --Siju

Re: sendmail and mutt (RunAsUser for MSP ignored)

2005-08-18 Thread Claus Assmann
On Thu, Aug 18, 2005, [EMAIL PROTECTED] wrote: SMTP AUTH to my ISP. mutt is using the default submit.mc, calling via /usr/sbin/sendmail -C/etc/mail/submit.cf -oem -oi . Don't use -C, sendmail doesn't like that. (see man sendmail and doc/op/op.*) -r-xr-sr-x 1 root smmsp 606532 Aug 16

Re: Shared memory / SQL

2005-08-18 Thread Graeme Lee
Adam wrote: On Fri, 19 Aug 2005 12:28:20 +1000 Graeme Lee [EMAIL PROTECTED] wrote: Postgresql uses the os disk buffer. It does not maintain its own. Yes it does. Postgresql uses a shared buffer cache, and increasing the number of shared buffers in your postgresql.conf can make a

ipcheck.py

2005-08-18 Thread Blake Darche
I have a basic shell script that cron runs periodically to update my dyndns.org account. It invokes ipcheck.py: [EMAIL PROTECTED] cat /usr/local/sbin/ipcheck.sh #!/bin/sh /usr/local/bin/python /usr/local/bin/ipcheck.py -l -d /etc/ipcheck -i tun0 -w user pass xxx.dyndns.org However, I keep