Re: iptables vs pf

2005-10-19 Thread Andrew Daugherity
On 10/19/05, Roger Neth Jr <[EMAIL PROTECTED]> wrote: > Hello, I put OpenBSD 3.8 snapshot on an old DEC 500pws with pf.conf > and it was okay on response. Then I redid my pf.conf with the tutorial > by Jeff Hansteen posted a couple of days ago. > I assume you meant the one posted by Peter N. M. Ha

Re: Rationale for allowing mount_mfs in securelevel 2?

2005-10-19 Thread Otto Moerbeek
On Wed, 19 Oct 2005, Roman Rodyakin wrote: > On Wed, Oct 19, 2005 at 08:44:49AM +0200, Otto Moerbeek wrote: > > > > On Wed, 19 Oct 2005, Roman Rodyakin wrote: > > > > > I have been recently thinking about trade-offs involved in running > > > servers at the securelevel 2. In securelevel 2, it is

Re: Very high interrupts on a supermicro machine.

2005-10-19 Thread dormando
So, My latest update; Theo mentioned the single CPU kernels don't make use of APIC interrupt controllers, just ISA. I booted my single P4 systems into the bsd.mp kernel, and behold there's a major difference in speed! Now the systems no longer claim 95%+ CPU held in interrupts, but claim to be 1

Re: Guruness (was the bug report thread)

2005-10-19 Thread Siju George
On 10/19/05, Wolfpaw - Dale Corse <[EMAIL PROTECTED]> wrote: > > > > Diddo. > > > > > >- That also being said, as Darren pointed out below, we have > > a group of > > >people on this list, in particular the devs (but others too > > I am sure) > > >that have some serious UNIX skills. I personally,

Re: iptables vs pf

2005-10-19 Thread Roger Neth Jr
On 10/19/05, Edy Purnomo <[EMAIL PROTECTED]> wrote: > i suggested to my friend to replace his linux box to openbsd. > he uses mailnly for internet gateway : pf + squid proxy > after 2 weeks later he switched it back linux and said : linux much faster > to respond the http requests (he had a same co

OpenBSD/SAN success story

2005-10-19 Thread Jason Dixon
Yet another reason to love OpenBSD. Here is a dmesg from a Dell PowerEdge 750 running OpenBSD 3.7 with a new QLA-2310F fibre card connected via Brocade 3900 to a 467GB LUN on an Apple XRaid. All it took was rebuilding the kernel with "option ISP_COMPILE_FW", as described in isp (4). Zone

Re: Multiple connections to n WLANs with one WLAN-NIC?

2005-10-19 Thread Reyk Floeter
On Tue, Oct 18, 2005 at 09:51:42PM +0200, [EMAIL PROTECTED] wrote: > Is it possible to connect to multiple WLANs at the same time with just one > WLAN-NIC? supported- no possible- yes (same channel, not possible with all drivers, probably slow) it's mostly the same as having multiple "virtual" ac

Re: iptables vs pf

2005-10-19 Thread Jason Dixon
On Oct 19, 2005, at 6:21 PM, Edy Purnomo wrote: i suggested to my friend to replace his linux box to openbsd. he uses mailnly for internet gateway : pf + squid proxy after 2 weeks later he switched it back linux and said : linux much faster to respond the http requests (he had a same configura

Re: iptables vs pf

2005-10-19 Thread Han Boetes
Edy Purnomo wrote: > i suggested to my friend to replace his linux box to openbsd. he > uses mailnly for internet gateway : pf + squid proxy after 2 > weeks later he switched it back linux and said : linux much > faster to respond the http requests (he had a same configuration > on openbsd, pf + sq

Re: iptables vs pf

2005-10-19 Thread per engelbrecht
Edy Purnomo wrote: i suggested to my friend to replace his linux box to openbsd. he uses mailnly for internet gateway : pf + squid proxy after 2 weeks later he switched it back linux and said : linux much faster to respond the http requests (he had a same configuration on openbsd, pf + squid pr

Re: Limiting Shell Access Damage (was Guruness)

2005-10-19 Thread Peter Valchev
> > To clarify, if you limit someone's ram use to a certain point, or > > CPU use to a certain point, it will slow down compiling due to > > having less resources :) As I said though - I may be wrong on > > this one. > > Yes, that would be the idea of limiting resources. If I am given the ability

Theo, I am truely sorry. You misunderstood me.

2005-10-19 Thread Sophie L
Hi Theo, Straight up, I'm very sorry. It was not my intention to be rude and I'm not a rude person. All I am is desperate to be able to use OpenBSD again. The fact is I have been a supporter and advocate for OpenBSD for many years and I admire you for what you've done. I just want to be able to us

Re: iptables vs pf

2005-10-19 Thread Wolfpaw - Dale Corse
> Edy Purnomo wrote: > > i suggested to my friend to replace his linux box to > openbsd. he uses > > mailnly for internet gateway : pf + squid proxy after 2 > weeks later he > > switched it back linux and said : linux much faster to respond the > > http requests (he had a same configuration on

Re: Limiting Shell Access Damage (was Guruness)

2005-10-19 Thread Wolfpaw - Dale Corse
> Yes, that would be the idea of limiting resources. If I am > given the ability to use 99% of the CPU compiling software, > how is that different than me running a fork bomb and doing the same? In essanse I suppose it isn't - but if your (as in my case) selling shells, compiling is legitimate,

Re: Rationale for allowing mount_mfs in securelevel 2?

2005-10-19 Thread Roman Rodyakin
On Wed, Oct 19, 2005 at 08:44:49AM +0200, Otto Moerbeek wrote: > > On Wed, 19 Oct 2005, Roman Rodyakin wrote: > > > I have been recently thinking about trade-offs involved in running > > servers at the securelevel 2. In securelevel 2, it is possible to mount > > a MFS over an arbitrary disk dire

Re: Guruness (was the bug report thread)

2005-10-19 Thread knitti
On 10/19/05, Wolfpaw - Dale Corse <[EMAIL PROTECTED]> wrote: > > well, I don't know about BSD in general, but just try it with > > OpenBSD. If the machine is generally capable of this task > > (has the mem and power to suppert n sessions in parallel), > > it's just your task as admin to make it hap

Re: pf : know the traffic amount per IP

2005-10-19 Thread James Mackinnon
IPaudit and IPaudit-web work well for this. On 10/19/2005, "Jason Dixon" <[EMAIL PROTECTED]> wrote: >On Oct 19, 2005, at 3:17 PM, Francisco Josi Nina Rente wrote: > >> Greetings, >> >> I have this situation. >> My ISP limit the amount of traffic that which user can use per month. >> I need to l

Re: iptables vs pf

2005-10-19 Thread Chris
Edy Purnomo wrote: > i suggested to my friend to replace his linux box to openbsd. > he uses mailnly for internet gateway : pf + squid proxy > after 2 weeks later he switched it back linux and said : linux much > faster to respond the http requests (he had a same configuration on > openbsd, pf + sq

Re: em(4) problems with -current

2005-10-19 Thread Brian A. Seklecki
On Wed, 19 Oct 2005, Theo de Raadt wrote: Someone with one of these problematic cards should put it in the It isn't so much a bug; more so a caveat of Dell's implenentation. Maybe you can order PowerEdge 1850s w/o a hardware IPMI implementation, but I don't think it's an issue that warrants

Re: Non Developers allowed to ask questions ?

2005-10-19 Thread Marco Peereboom
blah blah blah Just stop it with this top post horseshit. Nobody cares, for fuck's sake. On Oct 19, 2005, at 2:13 PM, Benjamin Collins wrote: On Wed, Oct 19, 2005 at 10:07:47AM -0600, Ken Gunderson wrote: On Wed, 19 Oct 2005 14:06:11 +0100 "Constantine A. Murenin" <[EMAIL PROTECTED]> wr

iptables vs pf

2005-10-19 Thread Edy Purnomo
i suggested to my friend to replace his linux box to openbsd. he uses mailnly for internet gateway : pf + squid proxy after 2 weeks later he switched it back linux and said : linux much faster to respond the http requests (he had a same configuration on openbsd, pf + squid proxy). is there any

Re: Limiting Shell Access Damage (was Guruness)

2005-10-19 Thread Spruell, Darren-Perot
From: Wolfpaw - Dale Corse [mailto:[EMAIL PROTECTED] > > On 10/19/05, Wolfpaw - Dale Corse <[EMAIL PROTECTED]> wrote: > > > quickly. I try not to use limits, because it slows > > compiling to crap > > > :( > > > > this makes no sense whatsoever. > > To clarify, if you limit someone's ram use

Re: Limiting Shell Access Damage (was Guruness)

2005-10-19 Thread Wolfpaw - Dale Corse
> On 10/19/05, Wolfpaw - Dale Corse <[EMAIL PROTECTED]> wrote: > > quickly. I try not to use limits, because it slows > compiling to crap > > :( > > this makes no sense whatsoever. To clarify, if you limit someone's ram use to a certain point, or CPU use to a certain point, it will slow down

Re: Limiting Shell Access Damage (was Guruness)

2005-10-19 Thread Ted Unangst
On 10/19/05, Wolfpaw - Dale Corse <[EMAIL PROTECTED]> wrote: > quickly. I try not to use limits, because it slows compiling to crap :( this makes no sense whatsoever.

Re: em(4) problems with -current

2005-10-19 Thread Ken Gunderson
On Wed, 19 Oct 2005 16:37:29 -0600 Theo de Raadt <[EMAIL PROTECTED]> wrote: > Someone with one of these problematic cards should put it in the > mail to Brad in Toronto. That is your best bet. > Intel support is presently adopting the position that my card is not "Genuine Intel" product. Appar

Re: em(4) problems with -current

2005-10-19 Thread Theo de Raadt
Someone with one of these problematic cards should put it in the mail to Brad in Toronto. That is your best bet.

Re: Limiting Shell Access Damage (was Guruness)

2005-10-19 Thread Graham Toal
> Turning this into a learning experience: Does anyone have any hints or > advice about hardening OpenBSD for shell accounts. Do people tweak > things other than the login.conf settings? I have to deal with student > shell accounts where students are learning to program and often create > proble

Re: em(4) problems with -current

2005-10-19 Thread Jon Hart
On Wed, Oct 19, 2005 at 12:56:44PM -0400, Jon Hart wrote: > On Wed, Oct 19, 2005 at 12:10:35PM -0400, Brian A. Seklecki wrote: > > > > The Intel IPMI on the motherboard may be to blame. It's always up/on and > > listening. > > > > Also, see my thread in freebsd-questions@ about Dells with Intel

Re: Cards/chips supporting hostap mode

2005-10-19 Thread Steve B
I'm not having any luck finding something locally. Can anyone recommend an online dealer that has a PCI based wireless card supprting hostap mode? Steve

Re: Limiting Shell Access Damage (was Guruness)

2005-10-19 Thread Wolfpaw - Dale Corse
> Turning this into a learning experience: Does anyone have > any hints or advice about hardening OpenBSD for shell > accounts. Do people tweak things other than the login.conf > settings? I have to deal with student shell accounts where > students are learning to program and often create pr

Re: Woohoo!!! Order has shipped

2005-10-19 Thread Gordon Grieder
On Wed, Oct 19, 2005 at 03:24:06PM -0400, Pierre Groulx wrote: > I just got an email indicating that my 3.8 order has shipped. > Now I have to wait for Canada Post to do deliver... Oh man oh man oh man... where's my order confirmation?! And fwiw I'm glad I took a leap of faith with the then-unknow

Re: pf : know the traffic amount per IP

2005-10-19 Thread Jason Dixon
On Oct 19, 2005, at 3:17 PM, Francisco Josi Nina Rente wrote: Greetings, I have this situation. My ISP limit the amount of traffic that which user can use per month. I need to log the amount of traffic that which IP generate in my LAN. I can do this with PF? Other folks are pointing to mrtg,

Re: Limiting Shell Access Damage (was Guruness)

2005-10-19 Thread Wolfpaw - Dale Corse
> If you can port it, you can also use it on your own box, so > where is the problem? No problem there.. Actually looking at the couple of functions I need here to see how difficult to integrate they would be. > login.conf (5) > > > Problem comes into play when a user starts say .. 50 > > Copie

Re: pf : know the traffic amount per IP

2005-10-19 Thread stan
On Wed, Oct 19, 2005 at 08:17:55PM +0100, Francisco Jos? Nina Rente wrote: > Greetings, > > I have this situation. > My ISP limit the amount of traffic that which user can use per month. > I need to log the amount of traffic that which IP generate in my LAN. > I can do this with PF? > ntop --

Re: Limiting Shell Access Damage (was Guruness)

2005-10-19 Thread Tobias Weingartner
On Wednesday, October 19, "Will H. Backman" wrote: > > Turning this into a learning experience: Does anyone have any hints or > advice about hardening OpenBSD for shell accounts. Do people tweak > things other than the login.conf settings? I have to deal with student > shell accounts where stud

I found your email at http://www.openbsd.org/ports.html

2005-10-19 Thread antispam
Hello Mister/Madame, I run a website wich helps people fight spam: Spammers collect e-mail addresses from websites and mass-mail the found e- mail addresses. I tell people where their email adress shown on the web, and tell them about it. If my mail irritates you and you think this is spam too,

Re: pf : know the traffic amount per IP

2005-10-19 Thread Ken Gunderson
On Wed, 19 Oct 2005 20:17:55 +0100 Francisco Josi Nina Rente <[EMAIL PROTECTED]> wrote: > Greetings, > > I have this situation. > My ISP limit the amount of traffic that which user can use per month. > I need to log the amount of traffic that which IP generate in my LAN. > I can do this with PF?

Woohoo!!! Order has shipped

2005-10-19 Thread Pierre Groulx
I just got an email indicating that my 3.8 order has shipped. Now I have to wait for Canada Post to do deliver... Thanks Team, Pierre

Re: Limiting Shell Access Damage (was Guruness)

2005-10-19 Thread Will H. Backman
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > knitti > Sent: Wednesday, October 19, 2005 5:23 AM > To: Wolfpaw - Dale Corse > Cc: misc@openbsd.org > Subject: Re: Guruness (was the bug report thread) > > On 10/19/05, Wolfpaw - Dale Corse <[EMAIL PRO

Re: Guruness (was the bug report thread)

2005-10-19 Thread Benjamin Collins
On Tue, Oct 18, 2005 at 10:14:19PM -0600, Wolfpaw - Dale Corse wrote: > > On Tue, Oct 18, 2005 at 09:14:09PM -0600, Wolfpaw - Dale Corse wrote: > > > Can you please enlighten me as to how this is a web based > > system? It > > > looks to me like a page that says.. Use the UNIX command. > > This is

Re: Non Developers allowed to ask questions ?

2005-10-19 Thread Benjamin Collins
On Wed, Oct 19, 2005 at 10:07:47AM -0600, Ken Gunderson wrote: > On Wed, 19 Oct 2005 14:06:11 +0100 > "Constantine A. Murenin" <[EMAIL PROTECTED]> wrote: > > > On 19/10/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > > > There is a legitimate use for top posting. > > > Deletion and/or answer of

pf : know the traffic amount per IP

2005-10-19 Thread Francisco José Nina Rente
Greetings, I have this situation. My ISP limit the amount of traffic that which user can use per month. I need to log the amount of traffic that which IP generate in my LAN. I can do this with PF? tks in advance, cheers

Re: Guruness (was the bug report thread)

2005-10-19 Thread Matthias Kilian
On Wed, Oct 19, 2005 at 11:26:46AM +0200, Henning Brauer wrote: > my name shall be melinda if report.html, which you apparently STILL > didn't read (I miss words for that level of ignorance. really.) doesn't > mention sendbug. Please, could someone apply the patch below? Quick! (SCNR) K

Re: track release cycle by mumber of whiny posts to misc@

2005-10-19 Thread Will H. Backman
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Spruell, Darren-Perot > Sent: Wednesday, October 19, 2005 2:26 PM > To: misc@openbsd.org > Subject: Re: track release cycle by mumber of whiny posts to misc@ > > From: Emilio Perea [mailto:[EMAIL PROTEC

Re: Guruness (was the bug report thread)

2005-10-19 Thread knitti
On 10/19/05, Wolfpaw - Dale Corse <[EMAIL PROTECTED]> wrote: > Try something for me - toss 40 novice programmers on a machine, and > let them hammer away at it. In this one, I think I have you beat, > running a shell provider for muds, for almost 10 years - I can tell > you, BSD does not stand up t

Re: track release cycle by mumber of whiny posts to misc@

2005-10-19 Thread Joseph C. Bender
On Wed, 19 Oct 2005, Spruell, Darren-Perot wrote: "The cotton fibers are .02 microns too thin for my taste, and the package they came in had a scuff, and my right arm is a little bit longer than my left and the tee shirt makes me look fat." Worst. Shirt. Ever. "Rest assured I was on

RE: Re: Non Developers allowed to ask questions ?

2005-10-19 Thread tony
On Wed, 19 Oct 2005 10:07:47 [EMAIL PROTECTED] > >On Wed, 19 Oct 2005 14:06:11 +0100 >"Constantine A. Murenin" <[EMAIL PROTECTED]> >wrote: > >> On 19/10/05, [EMAIL PROTECTED] ><[EMAIL PROTECTED]> wrote: >> > There is a legitimate use for top posting. >> > Deletion and/or answer of message in 10 to

Re: OpenBSD's 10th birthday

2005-10-19 Thread Ernedin Zajko
Stephan A. Rickauer wrote: On Tue, Oct 18, 2005 at 03:00:12AM -0600, Theo de Raadt wrote: Now it is really OpenBSD's 10th birthday ;) Happy birthday from Switzerland! And many thanks to all active developers and everyone who participates in Free Software! Greatings from Bosnia... Great w

Re: track release cycle by mumber of whiny posts to misc@

2005-10-19 Thread Spruell, Darren-Perot
From: Emilio Perea [mailto:[EMAIL PROTECTED] > On Wed, Oct 19, 2005 at 12:04:33PM -0600, Diana Eichert wrote: > > I just had a major AhHa moment while I was deleting whiny posts from > > [EMAIL PROTECTED] The number of whiny posts increases dramatically > right before, > > during and shortly afte

Re: track release cycle by mumber of whiny posts to misc@

2005-10-19 Thread shanejp
Quoting Diana Eichert <[EMAIL PROTECTED]>: > Perhaps I should post a URL for a plot of whiny posts vs. worthwhile > posts over time. A Signal to Noise Ratio of sorts? We could measure it in decitrolls! This email was sent from Netspa

Re: track release cycle by mumber of whiny posts to misc@

2005-10-19 Thread Emilio Perea
On Wed, Oct 19, 2005 at 12:04:33PM -0600, Diana Eichert wrote: > I just had a major AhHa moment while I was deleting whiny posts from > [EMAIL PROTECTED] The number of whiny posts increases dramatically right > before, > during and shortly after the release of a new version. > > Perhaps I should

track release cycle by mumber of whiny posts to misc@

2005-10-19 Thread Diana Eichert
I just had a major AhHa moment while I was deleting whiny posts from [EMAIL PROTECTED] The number of whiny posts increases dramatically right before, during and shortly after the release of a new version. Perhaps I should post a URL for a plot of whiny posts vs. worthwhile posts over time. Shru

Re: em(4) problems with -current

2005-10-19 Thread Brian A. Seklecki
I'll double check this today and verify. Will the IPMI on the motherboard only work with the onboard ethernet controllers, or will it get its grubby little hands on any/all controllers it finds? If it only The IPMI configuration screen gives you the option of configuring which Interface to bi

Re: "keep state" and PF Queues

2005-10-19 Thread William Bloom
The PF queueing FAQ page at http://www.openbsd.org has a wealth of info that seems to nicely clarify the pf.conf man page. I recall that the FAQ contains an example much as you describe (as I recall, specifying a queue for -incoming- traffic will indeed cause that traffic to be processed throu

Re: Wolfpaw - Dale Corse

2005-10-19 Thread Greg Thomas
On 10/19/05, Wolfpaw - Dale Corse <[EMAIL PROTECTED]> wrote: > > > To those of you who were not rude - sorry about the spam, > and I thank you for that. Most people hate me now .. So > what - maybe the point will sink in somewhere and stop > some poor newbie from getting a bunch of shit they don't

Re: em(4) problems with -current

2005-10-19 Thread Jon Hart
On Wed, Oct 19, 2005 at 12:10:35PM -0400, Brian A. Seklecki wrote: > > The Intel IPMI on the motherboard may be to blame. It's always up/on and > listening. > > Also, see my thread in freebsd-questions@ about Dells with Intel em(4) and > Dell PowerEdge switches w/ NIC Teaming, 802.3ad, ng_many

Re: Wolfpaw - Dale Corse

2005-10-19 Thread Wolfpaw - Dale Corse
Thank you - for making my point. Its good for people to be that way to someone asking a question, But not ok when someone returns the favor. Now I am done being an asshole - but for the record, this was the point intending to be proven. Nice that some of you can give it out, but you can't take

RE: Re: Non Developers allowed to ask questions ?

2005-10-19 Thread tony
On Wed, 19 Oct 2005 14:06:11 [EMAIL PROTECTED] wrote: >On 19/10/05, [EMAIL PROTECTED] ><[EMAIL PROTECTED]> wrote: >> There is a legitimate use for top posting. >> Deletion and/or answer of message in 10 to 15 >seconds or less. > >Nonsense. Just because your MS Outlook does not >support or is not

Wolfpaw - Dale Corse

2005-10-19 Thread Theo de Raadt
People -- just ignore him. He may use OpenBSD, but if he can't stop himself from being a beligerant fool, not submitting the right reports, why bother wasting eveveryone's time by chit-chatting and arguing with him? Do what the developers do -- delete his mail and don't respond.

Re: em(4) problems with -current

2005-10-19 Thread Brian A. Seklecki
The Intel IPMI on the motherboard may be to blame. It's always up/on and listening. Also, see my thread in freebsd-questions@ about Dells with Intel em(4) and Dell PowerEdge switches w/ NIC Teaming, 802.3ad, ng_many2_one, etc. For example, traffic sent from the IPMI IP/MAC of the interface i

Re: Non Developers allowed to ask questions ?

2005-10-19 Thread Ken Gunderson
On Wed, 19 Oct 2005 14:06:11 +0100 "Constantine A. Murenin" <[EMAIL PROTECTED]> wrote: > On 19/10/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > > There is a legitimate use for top posting. > > Deletion and/or answer of message in 10 to 15 seconds or less. > > Nonsense. Just because your MS O

FW: Guruness (was the bug report thread)

2005-10-19 Thread Wolfpaw - Dale Corse
> -Original Message- > From: Wolfpaw - Dale Corse [mailto:[EMAIL PROTECTED] > Sent: Wednesday, October 19, 2005 9:58 AM > To: 'Henning Brauer' > Subject: RE: Guruness (was the bug report thread) > > > > > > > > Correct me if I am wrong, but its still a monolithic > > kernel, based on >

Re: Guruness (was the bug report thread)

2005-10-19 Thread Wolfpaw - Dale Corse
> > I wasn't whining - again - how the hell is justifying what I said > > whining? > > You are saying our libpcap is buggy, but you fail to justify > that claim. No I didn't, I said it was out of date. You want me to justify it? Here. Making all in . /bin/sh ./libtool --mode=link gcc -g -DIPV4

Re: ospf issues

2005-10-19 Thread Claudio Jeker
On Wed, Oct 19, 2005 at 09:41:22AM -0400, stan wrote: > I've set up a machine using a snapshot of ospfd from last week. It's > neighbor router is an Alcatel box. > OK that explains a few things. > The data interchange between these 2 has never really benn totaly happy. > For instnace I'm gettin

Re: Guruness (was the bug report thread)

2005-10-19 Thread Henning Brauer
* Wolfpaw - Dale Corse <[EMAIL PROTECTED]> [2005-10-19 17:28]: > > * Wolfpaw - Dale Corse <[EMAIL PROTECTED]> [2005-10-19 05:13]: > > > you, BSD does not stand up to it .. Now I admit - it was years ago, > > > and it was FreeBSD that we tried > > > > yeah yeah, and we all know that OpenBSD is jus

Re: Guruness (was the bug report thread)

2005-10-19 Thread Otto Moerbeek
On Wed, 19 Oct 2005, Wolfpaw - Dale Corse wrote: > > > > You may well be right, though I would say that the amount of Code > > > changes users would be required to do, to make it work > > Would end up in > > > my lap, seeing as there are some things OpenBSD's Kernel does not > > > have, or ha

Re: Guruness (was the bug report thread)

2005-10-19 Thread Wolfpaw - Dale Corse
> > You may well be right, though I would say that the amount of Code > > changes users would be required to do, to make it work > Would end up in > > my lap, seeing as there are some things OpenBSD's Kernel does not > > have, or has fairly out of date versions of > > > > One example I can thi

Re: Guruness (was the bug report thread)

2005-10-19 Thread Otto Moerbeek
On Wed, 19 Oct 2005, Wolfpaw - Dale Corse wrote: > Heya :) > > > > > well, I don't know about BSD in general, but just try it with > > OpenBSD. If the machine is generally capable of this task > > (has the mem and power to suppert n sessions in parallel), > > it's just your task as admin to m

Re: Guruness (was the bug report thread)

2005-10-19 Thread Wolfpaw - Dale Corse
> * Wolfpaw - Dale Corse <[EMAIL PROTECTED]> [2005-10-19 05:13]: > > you, BSD does not stand up to it .. Now I admit - it was years ago, > > and it was FreeBSD that we tried > > yeah yeah, and we all know that OpenBSD is just ErsatzFreiBSD with > another name on it, right? > sheesh. Correct me

Re: Guruness (was the bug report thread)

2005-10-19 Thread Wolfpaw - Dale Corse
Heya :) > > well, I don't know about BSD in general, but just try it with > OpenBSD. If the machine is generally capable of this task > (has the mem and power to suppert n sessions in parallel), > it's just your task as admin to make it happen. The means are > there. If your users bring down

Re: BSD RSS Feeds

2005-10-19 Thread Linaria vulgaris
Strangely enough, I'm also in the process of constructing a BSD-related RSS feed. You can subscribe to my current efforts at http://feeds.feedburner.com/bsdfeeds The feed is presented in publication date order, so items at the top are the freshest. On 18/10/05, [EMAIL PROTECTED] <[EMAIL PROTECTED

"keep state" and PF Queues

2005-10-19 Thread Brian A. Seklecki
Would anyone like to elaborate on the impacts of using "keep state" on conjunction with pass rules that assign traffic to queues? One might assume that inverted traffic flows would also be queued, however that would break the "traffic can only be queued egress an interface" rule... There sho

ospf issues

2005-10-19 Thread stan
I've set up a machine using a snapshot of ospfd from last week. It's neighbor router is an Alcatel box. The data interchange between these 2 has never really benn totaly happy. For instnace I'm getting invalid checksum message relating to packets coming from this machine. Nevertheless, I was able

Re: Non Developers allowed to ask questions ?

2005-10-19 Thread Diana Eichert
On Tue, 18 Oct 2005, STeve Andre' wrote: SNIP > You can determine to nearly 100% the support of something by > looking at the suported hardware pages. I'm guessing you are > using some i386 machine, and there is a *great deal* of information > on the cards and devices supported. Looking there has

pf w/ squid reroute traffic howto ?

2005-10-19 Thread Stefan Sczekalla-Waldschmidt
Hi, i'm facing a problem where I need to reroute requests made by a squid-cache. I already tried to add a route-to statement to my pf.conf: pass out on ep2 route-to ep0:192.168.110.241 from any to any port 80 flags S/SA keep state ( where ep2 is the "external" interface, ep0 is t

Re: isakmpd, greenbow vpn client and NO PROPOSAL CHOSEN

2005-10-19 Thread Kim Nielsen
Hans-Joerg Hoexer wrote: [AES-SHA-GRP2] ENCRYPTION_ALGORITHM= AES_CBC HASH_ALGORITHM= SHA AUTHENTICATION_METHOD= PRE_SHARED GROUP_DESCRIPTION= MODP_1024 Life= LIFE_1_DAY LIFE_1_DAY is not defined Hi :) I added [LIFE_1_DAY] LIFE_TYPE= SECONDS LIFE_DURATIO

Re: isakmpd, greenbow vpn client and NO PROPOSAL CHOSEN

2005-10-19 Thread Hans-Joerg Hoexer
Hi, On Wed, Oct 19, 2005 at 01:34:45PM +0200, Kim Nielsen wrote: > [greenbow-main-mode] > DOI=IPSEC > EXCHANGE_TYPE= ID_PROT > Transforms= AES-SHA-GRP2 > > [greenbow-quick-mode] > DOI=IPSEC > EXCHANGE_TYPE= QUICK_MODE > Suites= QM-ESP-AES-SHA-PFS-GR2-SUITE >

Re: isakmpd, greenbow vpn client and NO PROPOSAL CHOSEN

2005-10-19 Thread Kim Nielsen
Rogier Krieger wrote: Last time I dealt with the NO_PROPOSAL_CHOSEN issue, it was due to an error in my keynote(4) policy. After re-creating it from scratch using the example files, things worked like a charm for me. Hope this helps, I wish that was it .. I even tried to wget http://www.a

Re: Non Developers allowed to ask questions ?

2005-10-19 Thread Constantine A. Murenin
On 19/10/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > There is a legitimate use for top posting. > Deletion and/or answer of message in 10 to 15 seconds or less. Nonsense. Just because your MS Outlook does not support or is not configured to support bottom-posting, doesn't mean that you shou

Re: isakmpd, greenbow vpn client and NO PROPOSAL CHOSEN

2005-10-19 Thread Kim Nielsen
Hans-Joerg Hoexer wrote: On Wed, Oct 19, 2005 at 01:34:45PM +0200, Kim Nielsen wrote: [greenbow-quick-mode] DOI=IPSEC EXCHANGE_TYPE= QUICK_MODE Suites= QM-ESP-AES-SHA-PFS-GR2-SUITE it's GRP2, not GR2 [AES-SHA-GRP2] ENCRYPTION_ALGORITHM= AES_CBC HASH_ALGORITHM=

Re: isakmpd, greenbow vpn client and NO PROPOSAL CHOSEN

2005-10-19 Thread Hans-Joerg Hoexer
On Wed, Oct 19, 2005 at 01:34:45PM +0200, Kim Nielsen wrote: > [greenbow-quick-mode] > DOI=IPSEC > EXCHANGE_TYPE= QUICK_MODE > Suites= QM-ESP-AES-SHA-PFS-GR2-SUITE it's GRP2, not GR2 > > [AES-SHA-GRP2] > ENCRYPTION_ALGORITHM= AES_CBC > HASH_ALGORITHM= SHA > AUTHENT

isakmpd, greenbow vpn client and NO PROPOSAL CHOSEN

2005-10-19 Thread Kim Nielsen
Hi $misc I have a problem with isakmpd and the greenbow vpn client (actually all windows vpn clients I have tried except freeswan and racoon) The problem is that I specify the protocols that the clients use but it seems that it's ignoring that I have specified A dump from tcpdump -vr /var/r

Re: Non Developers allowed to ask questions ?

2005-10-19 Thread Tony
There is a legitimate use for top posting. Deletion and/or answer of message in 10 to 15 seconds or less. The stunt is essentially the same as stuff in newspapers. The reporter writes. The editor puts as much as will fit in the alloted space and ignores the remainder without even looking. The read

Routing issue with BIND9 and IPsec

2005-10-19 Thread Arrigo Triulzi
Dear all, I have a very strange interaction between BIND9 and IPsec which I can't understand and I hope someone here can shed some light. An OpenBSD primary DNS server, running BIND9 with a simple named.conf (single view, etc.) also has an IPsec connection over which a tunnel runs connecting

"Perished Nations" by Harun Yahya

2005-10-19 Thread Arda Ozdemir
If you cannot view this page, please click here PERISHED NATIONS Harun Yahya The news of previous peoples is certainly one of the matters people ought to contemplate. In history, many societies have been wiped off of the face of the earth because of their denial and perversions. God tells u

Re: OpenBSD's 10th birthday -- how about a present?

2005-10-19 Thread Keith Richardson
STeve Andre' wrote: On Tuesday 18 October 2005 21:07, Paul Greene wrote: STeve Andre' wrote: Seeing all sorts of good wishes to the project, but I haven't seen any gifts, yet. ;-) I just paypaled $25 to the project, as a birthday present. Given what we all get from this OS, OpenBSD

Re: Presario 2100 Laptop overheating

2005-10-19 Thread Gordon Willem Klok
Joe Snikeris wrote: OpenBSD 3.7 (GENERIC) #50: Sun Mar 20 00:01:57 MST 2005 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: mobile AMD Athlon(tm) XP2200+ ("AuthenticAMD" 686-class) 1.79 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE

Re: Guruness (was the bug report thread)

2005-10-19 Thread Henning Brauer
* Wolfpaw - Dale Corse <[EMAIL PROTECTED]> [2005-10-19 05:13]: > you, BSD does not stand up to it .. Now I admit - it was years ago, > and it was FreeBSD that we tried yeah yeah, and we all know that OpenBSD is just ErsatzFreiBSD with another name on it, right? sheesh. > > http://openbsd.rt.fm/q

Re: Very high interrupts on a supermicro machine.

2005-10-19 Thread Henning Brauer
eh, this is really only good for benching, because otherwise we stop traversing the pf ruleset for very short amounts of time if we are about to exhaust CPU. this allows already established connections to live on and the OP to log in to the box via console and take countermeasures. if you alrea

Re: OpenBSD's 10th birthday

2005-10-19 Thread Stephan A. Rickauer
On Tue, Oct 18, 2005 at 03:00:12AM -0600, Theo de Raadt wrote: Now it is really OpenBSD's 10th birthday ;) Happy birthday from Switzerland! And many thanks to all active developers and everyone who participates in Free Software! -- Stephan A. Rickauer (Associate Member of FSF) --

Presario 2100 Laptop overheating

2005-10-19 Thread Joe Snikeris
I just installed 3.7 on a presario 2100 laptop from the openbsd i386 cd. The laptop is having a problem with overheating and then shutting off while it isn't doing anything. top reports that the cpu usage is practically zero (it is 99.8% idle), and if I just let the laptop sit there at a console