Re: Telnet daemon retired in 3.8 ?

2005-11-08 Thread Blake Darche
If you really need telnetd that badly, you could just run netcat with a listener on port 23 (nc -l 23). It would be about as secure as telnet ever was...

Re: Telnet daemon retired in 3.8 ?

2005-11-08 Thread Xavier Beaudouin
Shawn K. Quinn wrote: On Mon, 2005-11-07 at 17:28 -0600, Matthew S Elmore wrote: I understand the advantages of ssh over telnet, but telnet is still heavily used in many environments. Telnet is a horribly insecure protocol subject to at least two attacks by third parties with access to any

Re: Mplayer DVD problem

2005-11-08 Thread Jacob Meuser
On Tue, Nov 08, 2005 at 07:22:19AM +, Edd Barrett wrote: On 07/11/05, Nikolaus Hiebaum [EMAIL PROTECTED] wrote: The selected video_out device is incompatible with this codec. Have you tried both -vo x11 and -vo xv? Just a stab in the dark. this message is taken out of context here.

Re: Telnet daemon retired in 3.8 ?

2005-11-08 Thread Stuart Henderson
On 2005/11/08 02:58:42, Blake Darche wrote: If you really need telnetd that badly, you could just run netcat with a listener on port 23 (nc -l 23). It would be about as secure as telnet ever was... More modern telnet wasn't *quite* that bad..still, better avoided. How about having telnet

Re: IPsec performance

2005-11-08 Thread J.C. Roberts
On Tue, 08 Nov 2005 08:51:06 +0100, Vincent Bernat [EMAIL PROTECTED] wrote: Hi ! I have several questions about IPsec performance in OpenBSD. I am using IPsec to maintain more than 60 tunnels and it performs well when those tunnels are idle. Tunnels are either using 3DES or AES. 3DES is

Re: IPsec performance

2005-11-08 Thread Otto Moerbeek
On Tue, 8 Nov 2005, J.C. Roberts wrote: On Tue, 08 Nov 2005 08:51:06 +0100, Vincent Bernat [EMAIL PROTECTED] wrote: Hi ! I have several questions about IPsec performance in OpenBSD. I am using IPsec to maintain more than 60 tunnels and it performs well when those tunnels are idle.

Re: Can't set environment variable on OpenBSD 3.8

2005-11-08 Thread Fergus Wilde
On Tuesday 08 November 2005 07:17, Tomas wrote: Hello, I cant set environment variable on OpenBSD 3.8. I issue command env testvar=var and I get printout with all the environment variables: and so on I seem to be having no difficulty setting $TESTVAR on 3.8 here using these commands; in

Re: IPsec performance

2005-11-08 Thread Vincent Bernat
OoO En cette fin de matinie radieuse du mardi 08 novembre 2005, vers 11:05, Otto Moerbeek [EMAIL PROTECTED] disait: OpenBSD is running on a Celeron 2.4 GHz and openssl speed aes gives 70 MB/s and des-ede3 gives 15 MB/s. With 40 Mb/s (megabits/s) of traffic, the processor is used at 100%.

Re: Telnet daemon retired in 3.8 ?

2005-11-08 Thread Nick Holland
Xavier Beaudouin wrote: ... Personnaly I don't use telnetd for ages especialy on systems that are security based... there's a point. You use OpenBSD for security. Then you do horribly insecure things to access it. huh? Nick.

Re: mainting a mirror

2005-11-08 Thread Nick Holland
Martin Ekendahl wrote: What do you guys use to update your mirrors? I have a colo server that I'm not doing much with and I thought about setting up a mirror and just running `cvs up -Pd` twice a day or something to update it. Am I on the right track or is there a better or more official

Re: Symbios Logic 53C1030 error

2005-11-08 Thread J.D. Bronson
At 12:21 AM 11/08/2005, Per-Olov Sjvholm wrote: OK. Thanks for the reply B t w... What is IM? Regards Per-Olov Integrated Mirroring. LSI cards that I tested work fine under OBSD, but not the IM support. It is not there yet. If you can -even- get it to mirror, performance is quite sub

Re: Mplayer DVD problem

2005-11-08 Thread Edd Barrett
the two switches no give me a picture. ;-) -vo xv works best. Thanks a lot. Glad I could help. Best Regards Edd

[no subject]

2005-11-08 Thread Antoine Jacoutot
Hi... I'm having a problem starting gnome-terminal under current/macppc. ie (from an xterm): $ gnome-terminal ** (gnome-terminal:23098): WARNING **: Error setting PTY size: Bad file descriptor. ** (gnome-terminal:23098): WARNING **: Error reading PTY size, using defaults: Bad file

Re: your mail

2005-11-08 Thread Antoine Jacoutot
Oops, sorry I forgot to include a subject... On Tue, 8 Nov 2005, Antoine Jacoutot wrote: Hi... I'm having a problem starting gnome-terminal under current/macppc. ie (from an xterm): $ gnome-terminal ** (gnome-terminal:23098): WARNING **: Error setting PTY size: Bad file descriptor. **

Re: OpenBSD official media

2005-11-08 Thread Martin Schröder
On 2005-11-07 21:54:30 -0900, JR Dalrymple wrote: Track 2 on the 2nd CD is an audio track. Which is the main problem. :-) Also, as someone so cleverly put before me, Marco missed Vax, which is on the CD media. Excuse me, but how many vaxen where shipped with CD-ROMs? Best Martin (who

Re: Telnet daemon retired in 3.8 ?

2005-11-08 Thread Matthew S Elmore
Martin, That's what I was looking for. Many thanks! :) Matt Martin Ekendahl wrote: http://www.gnu.org/software/inetutils/inetutils.html Download that and just compile the telnet server Ta Da! -Martin Matthew S Elmore wrote: I cannot appear to locate a telnet daemon in 3.8 installs now. It

Re: Telnet daemon retired in 3.8 ?

2005-11-08 Thread Tobias Weingartner
On Tuesday, November 8, Shawn K. Quinn wrote: Telnet is a horribly insecure protocol subject to at least two attacks by third parties with access to any part of the network between the two hosts. Thus, telnetd is gone for a damn good reason, that being that it's a turd that has no place in a

Re: Telnet daemon retired in 3.8 ?

2005-11-08 Thread Luís Bruno
Shawn K. Quinn wrote: only telnet connections from networks where you know for sure nobody with root access will try to hijack or eavesdrop on connections (such as a LAN where either you are the sole admin or you know and trust the other admins). And where other people can't connect their own

Re: Symbios Logic 53C1030 error

2005-11-08 Thread Per-Olov Sjöholm
On Tuesday 08 November 2005 13.07, J.D. Bronson wrote: At 12:21 AM 11/08/2005, Per-Olov Sjvholm wrote: OK. Thanks for the reply B t w... What is IM? Regards Per-Olov Integrated Mirroring. LSI cards that I tested work fine under OBSD, but not the IM support. It is not there yet.

Re: Telnet daemon retired in 3.8 ?

2005-11-08 Thread Xavier Beaudouin
Xavier Beaudouin wrote: ... Personnaly I don't use telnetd for ages especialy on systems that are security based... there's a point. You use OpenBSD for security. Then you do horribly insecure things to access it. huh? I don't use telnetd for ages. I don't bother about the removing of

Re: Symbios Logic 53C1030 error

2005-11-08 Thread J.D. Bronson
At 09:30 AM 11/08/2005, Per-Olov Sjvholm wrote: On Tuesday 08 November 2005 13.07, J.D. Bronson wrote: At 12:21 AM 11/08/2005, Per-Olov Sjvholm wrote: OK. Thanks for the reply B t w... What is IM? Regards Per-Olov Integrated Mirroring. LSI cards that I tested work fine under

Re: FYI: new mailing list anti-spam measures

2005-11-08 Thread Bob Beck
This is horseshit. the SORBS dialup list is inaccurate as hell. it includes my legitimately purchased static business IP's. They are not dialups, and it is impossible to get SORBS to correct it. It also includes my ISP's mail server, and in any case relaying mail through a smarthost such

Re: Anyone tried a sun fire X2100 server yet?

2005-11-08 Thread Timo Schoeler
thus Reyk Floeter spake: On Tue, Nov 08, 2005 at 10:54:39AM -0500, Will H. Backman wrote: Anyone put OpenBSD 3.8 on a Sun Fire X2100 AMD server yet? a sun guy said that the x2100 is based on the same platform as the U20 workstation. in contrast to the x4x00 galaxy servers reyk hm, time

how to bridge

2005-11-08 Thread David fire
hi i need to comunicate 3 net so i will use a brigde so i am looking a how to, i read manual page but i am prety new whit openbsd so i prefer a how to to do this quickly have anyone one? or any text wich can help me. Thanks David

Re: Big discrepancy between df and du used space values (3.8)

2005-11-08 Thread Ted Unangst
On 11/8/05, Daniel Hamlin [EMAIL PROTECTED] wrote: I'm trying to track down why /var is full, and df and du report major differences (or else I'm reading something wrong, in which case I submit to the verbal beatings). Pay attention to what it says for /var. Running OpenBSD 3.8 GENERIC as a

Re: Telnet daemon retired in 3.8 ?

2005-11-08 Thread Peter Philipp
On Tue, Nov 08, 2005 at 07:05:24AM -0500, Nick Holland wrote: there's a point. You use OpenBSD for security. Then you do horribly insecure things to access it. huh? Nick. Yeah using telnet these days is not a good idea. General Question: Anyone bored and got nothing to do? Then

Re: Anyone tried a sun fire X2100 server yet?

2005-11-08 Thread Daniel Ouellet
Will H. Backman wrote: Anyone put OpenBSD 3.8 on a Sun Fire X2100 AMD server yet? Not yet. My shipping date for the X2100 is: **BACK ORDERED ETA OF 11/22/05** For the X4100, well... **BACK ORDERED CONSTRAINED** (NO ETA AS OF 11-07-05) So, my guess is not before December will have be able

Re: FYI: new mailing list anti-spam measures

2005-11-08 Thread Allie Daneman
I've had good results using Spamhaus XBL/SBL...if you want to be aggressive use Spews level 2. On Tue, November 8, 2005 08:38, Bob Beck wrote: This is horseshit. the SORBS dialup list is inaccurate as hell. it includes my legitimately purchased static business IP's. They are not

Re: how to bridge

2005-11-08 Thread Will H. Backman
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David fire Sent: Tuesday, November 08, 2005 1:17 PM To: misc@openbsd.org Subject: how to bridge hi i need to comunicate 3 net so i will use a brigde so i am looking a how to, i read manual page

httpd: semop permission denied

2005-11-08 Thread Need Coffee
Hi. I have an amd64/3.7-stable machine here running apache with mod_ssl and php 5.0.4. SSLMutex is set to 'sem', the default. Intermittently the httpds start segfaulting. Of course the parent process remains, and respawns them. There's a large number of clients and the machine is kept pretty

Re: Big discrepancy between df and du used space values (3.8)

2005-11-08 Thread Daniel A. Ramaley
On Tuesday 08 November 2005 10:36, you wrote: I'm trying to track down why /var is full, and df and du report major differences (or else I'm reading something wrong, in which case I submit to the verbal beatings). Pay attention to what it says for /var. Running OpenBSD 3.8 GENERIC as a

SOLVED: Re: Big discrepancy between df and du used space values (3.8)

2005-11-08 Thread Daniel Hamlin
Ted Unangst wrote: On 11/8/05, Daniel Hamlin [EMAIL PROTECTED] wrote: I'm trying to track down why /var is full, and df and du report major differences (or else I'm reading something wrong, in which case I submit to the verbal beatings). Pay attention to what it says for /var. Running

Re: pf.conf to only allow port 22, 25 and 80 to my server.

2005-11-08 Thread Larry Llong
From: Daniel Ouellet [EMAIL PROTECTED] To: Larry Llong [EMAIL PROTECTED] CC: misc@openbsd.org Subject: Re: pf.conf to only allow port 22, 25 and 80 to my server. Date: Mon, 07 Nov 2005 22:24:01 -0500 Larry Llong wrote: I just want to allow port 22, 25 and 80 to my server. I know I can activate

OpenBSD Desktop Document

2005-11-08 Thread Roy Morris
I have been working on a document for newbies that helps them put together a basic/functional desktop under OpenBSD. If anyone has time, I'd like feed back. www.openalternatives.com/OpenBSD/OpenBSD-Desktop.pdf Thanks Roy

Re: OT: Compact Flash Longevity; was Re: dd image file to compact flash takes very long

2005-11-08 Thread Alexander Hall
Matt Garman wrote: Has anyone else out there been brave enough to go rw on their CF cards? Results? I have been brave (read: lazy) enough to keep my Soekris running with a single root partition mounted r/w on my (home) gateway Soekris box since i got it for my birthday in June (how pleased

Re: pf.conf to only allow port 22, 25 and 80 to my server.

2005-11-08 Thread Daniel Ouellet
Larry Llong wrote: this list is no where as bad as people say. The list is very good and welcoming to users that do their homework and try to find the answer first before asking. I think it's even one of the best one, if not THE BEST one! People that told you the list is bad are most

Re: OpenBSD Desktop Document

2005-11-08 Thread Will H. Backman
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Roy Morris Sent: Tuesday, November 08, 2005 2:38 PM To: misc@openbsd.org Subject: OpenBSD Desktop Document I have been working on a document for newbies that helps them put together a

Re: OT: Compact Flash Longevity; was Re: dd image file to compact flash takes very long

2005-11-08 Thread Shane J Pearson
On 09/11/2005, at 6:38 AM, Alexander Hall wrote: Has anyone else out there been brave enough to go rw on their CF cards? Results? I have been brave (read: lazy) enough to keep my Soekris running with a single root partition mounted r/w on my (home) gateway Soekris box since i got it for

Re: OpenBSD Desktop Document

2005-11-08 Thread Joe S
Roy Morris wrote: I have been working on a document for newbies that helps them put together a basic/functional desktop under OpenBSD. If anyone has time, I'd like feed back. www.openalternatives.com/OpenBSD/OpenBSD-Desktop.pdf Thanks Roy 1. I'd get rid of the rdate cron job and just turn on

Re: OpenBSD Desktop Document

2005-11-08 Thread Peter Hessler
don't use rdate, `echo 'ntpd_flags=' /etc/rc.conf.local` it gives the user better time, and has less damaging effects on the pool.ntp.org members. On Tue, Nov 08, 2005 at 02:38:15PM -0500, Roy Morris wrote: :I have been working on a document for newbies that helps :them put together a

Re: OpenBSD Desktop Document

2005-11-08 Thread Roy Morris
Joe S wrote: Roy Morris wrote: I have been working on a document for newbies that helps them put together a basic/functional desktop under OpenBSD. If anyone has time, I'd like feed back. openntpd www.openalternatives.com/OpenBSD/OpenBSD-Desktop.pdf Thanks Roy 1. I'd get rid of the rdate

ipsecctl general questions

2005-11-08 Thread Will H. Backman
Trying to get a handle on the new ipsecctl tool, and how it relates to the 10 steps in the vpn man page. If I go with a simple network to network vpn setup in the ipsec.conf: ike esp from 10.1.1.0/24 to 10.1.2.0/24 peer 192.168.3.2 Does that take the place of steps 2 through 6? -- Will Backman

Re: Telnet daemon retired in 3.8 ?

2005-11-08 Thread Alexander Farber
1 arg. for telnetd: MUDs :-)

future support for WPA and WPA2?

2005-11-08 Thread Didier Wiroth
Hello, I saw today that freebsd6 supports wpa (actually, I haven't tried it yet). I don't a doubt that ipsec, or other vpn software is more secure. But from a feature point of view, are there any plans to implement wpa/wpa-psk, wpa2 in future openbsd versions or not? Thank you very much

Re: OpenBSD Desktop Document

2005-11-08 Thread Darrin Chandler
Will H. Backman wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Roy Morris Sent: Tuesday, November 08, 2005 2:38 PM To: misc@openbsd.org Subject: OpenBSD Desktop Document I have been working on a document for newbies that helps them

Re: Telnet daemon retired in 3.8 ?

2005-11-08 Thread Hannah Schroeter
Hello! On Tue, Nov 08, 2005 at 09:33:19PM +0100, Alexander Farber wrote: 1 arg. for telnetd: MUDs :-) For MUDs you need a telnet client, but no telnet server unless I'm wrong. The telnet client (telnet w/o 'd') is still shipped with OpenBSD. Kind regards, Hannah.

Re: OpenBSD Desktop Document

2005-11-08 Thread Roy Morris
Darrin Chandler wrote: Will H. Backman wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Roy Morris Sent: Tuesday, November 08, 2005 2:38 PM To: misc@openbsd.org Subject: OpenBSD Desktop Document I have been working on a document for

Re: ALTQ-Bandwidth management is not working as expected

2005-11-08 Thread Chris Cappuccio
altq is looking at kilobits per second and you're probably looking at kiloBytes per second (237Kb/sec / 8bits/Byte=29KB/sec) [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hi everyone, Problem: Bandwidth management is not working as expected; instead of streaming data inbound with 237 Kb/sec

Re: ipsecctl general questions

2005-11-08 Thread Jason McIntyre
On Tue, Nov 08, 2005 at 03:34:54PM -0500, Will H. Backman wrote: Trying to get a handle on the new ipsecctl tool, and how it relates to the 10 steps in the vpn man page. for the manual keying sections, both (old-style) ipsecadm(8) commands and (new-style) ipsecctl(8) commands are given. the

Re: OT: Compact Flash Longevity; was Re: dd image file to compact flash takes very long

2005-11-08 Thread Andreas Bartelt
Hi, Matt Garman wrote: ... Has anyone else out there been brave enough to go rw on their CF cards? Results? I'm using a 512 MB Sandisk Ultra II 24/7 in a home server for about 2 years now. No problems. I suppose power failures can be a problem with CompactFlash cards (don't know if it

Weirdness with ARP on an IBM HS20 blade

2005-11-08 Thread Sean Dogar
I've installed OpenBSD 3.8 on an IBM HS20 blade (model 8678). Everything generally works OK (even multiprocessor support!), except for some weirdness with the network interface, which is the onboard Broadcom BCM57xx (bge) interface. The kernel does correctly enumerate and bring up the network

Re: Weirdness with ARP on an IBM HS20 blade

2005-11-08 Thread Melameth, Daniel D.
Sean Dogar wrote: I've installed OpenBSD 3.8 on an IBM HS20 blade (model 8678). Everything generally works OK (even multiprocessor support!), except for some weirdness with the network interface, which is the onboard Broadcom BCM57xx (bge) interface. The kernel does correctly enumerate and

Re: Telnet daemon retired in 3.8 ?

2005-11-08 Thread Janjaap van Velthooven
On Tue, Nov 08, 2005 at 09:33:19PM +0100, Alexander Farber wrote: 1 arg. for telnetd: MUDs :-) You want to hang a MUD behind a telnet deamon? Afaik most MUDs know how the telnet protocol works by themselves... Wanting to have a telnet _client_ I can understand; but I rather use tf as a client.

individual file system bigger than 1Tbyte anytime soon?

2005-11-08 Thread Matthias Bertschy
Hello, I am in the process of creating a server codenamed terabyte server which will hold some of our backups. The setup is fairly easy: a RAID card and four 300G ATA drives which will make approx 1.2Tbyte. Of course I chose OpenBSD 3.8 for it. During the installation process, I realised

[ Re: Weirdness with ARP on an IBM HS20 blade]

2005-11-08 Thread Sean Dogar
How about an ifconfig -a from both systems, clearing the arp cache of both hosts and capturing tcpdumps on both ends during an entire connection attempt? OK. Here's the ifconfig -a from the OpenBSD box (IP address 172.16.1.22) lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST mtu 33224

Re: Can't set environment variable on OpenBSD 3.8

2005-11-08 Thread Alexander Hall
Tomas wrote: I cant set environment variable on OpenBSD 3.8. I issue command env testvar=var and I get printout with all the environment variables: PS1=# ... testvar=var And after that I issue command env and I get printout without my testvar: PS1=# ... What could I be doing wrong?

Re: [ Re: Weirdness with ARP on an IBM HS20 blade]

2005-11-08 Thread Melameth, Daniel D.
Sean Dogar wrote: How about an ifconfig -a from both systems, clearing the arp cache of both hosts and capturing tcpdumps on both ends during an entire connection attempt? OK. Here's the ifconfig -a from the OpenBSD box (IP address 172.16.1.22) lo0:

Re: individual file system bigger than 1Tbyte anytime soon?

2005-11-08 Thread Ted Unangst
On 11/8/05, Matthias Bertschy [EMAIL PROTECTED] wrote: I am in the process of creating a server codenamed terabyte server which will hold some of our backups. The setup is fairly easy: a RAID card and four 300G ATA drives which will make approx 1.2Tbyte. Of course I chose OpenBSD 3.8 for it.

Re: Weirdness with ARP on an IBM HS20 blade

2005-11-08 Thread Sean Dogar
How about an ifconfig -a from both systems Done. Submitted to the list in a previous message. clearing the arp cache of both hosts Done. and capturing tcpdumps on both ends during an entire connection attempt? I ran tcpdump on both hosts while attempting to secure shell from the