Remove all password restrictions?

2006-01-09 Thread Peter Bako
I have an internal OpenBSD 3.8 system that I use as a data dump, internal source for PXE installs and the like. It is not accessible to the outside world, so security is not exactly critical. In fact I would like to setup a user with a very minimal password (four characters and all lower case let

Re: Tripwire/AIDE functionality in daily status reports

2006-01-09 Thread Kelly Martin
On 1/9/06, Michael Erdely <[EMAIL PROTECTED]> wrote: > On 1/9/06, Kelly Martin <[EMAIL PROTECTED]> wrote: > > I see etc/daily.local but am not sure how to add new directories to be > > watched. I already use rc.local and would like to star using > > daily.local too. The OpenBSD scripts are more to

Re: Tripwire/AIDE functionality in daily status reports

2006-01-09 Thread Michael Erdely
On 1/9/06, Kelly Martin <[EMAIL PROTECTED]> wrote: > I see etc/daily.local but am not sure how to add new directories to be > watched. I already use rc.local and would like to star using > daily.local too. The OpenBSD scripts are more to my liking and seem > Tripwire/AIDE-like too. Take a look at

Tripwire/AIDE functionality in daily status reports

2006-01-09 Thread Kelly Martin
Greetings, I use bash and AIDE (similar to Tripwire) today for integrity monitoring on 3.8. The OpenBSD 3.x daily status reports (along with the security check) are more to my liking and are already being mailed to me as well; now how do I feed it user-defined directories like /var/www and stop usi

Recommendations for wireless ethernet adapters for AP

2006-01-09 Thread Damon McMahon
Greetings, Does anyone have any recommendations for a wireless ethernet adapter for a Pentium III 500 MHz box which will become a wireless access point for a 2-3 node network? I note a large number of adapters listed in the i386 hardware compatibility list with a number of chipsets served by a va

Re: slightly OT: OpenNTPd on Linux still allows drift

2006-01-09 Thread Joachim Schipper
On Mon, Jan 09, 2006 at 03:45:41PM -0600, [EMAIL PROTECTED] wrote: > This is probably kind of a long shot, but does anyone use OpenNTPd > on Linux machines? > > I've struggled for what seems like forever trying to get "regular" > NTP to properly sync my clock on my Linux boxes, but have never been

Re: Users

2006-01-09 Thread Darrin Chandler
Jim Razmus wrote: * Christopher Vance <[EMAIL PROTECTED]> [060109 19:02]: On Mon, Jan 09, 2006 at 01:47:54PM -0500, Jim Razmus wrote: * Jason Balan <[EMAIL PROTECTED]> [060109 13:26]: Is there a way to migrate the users from a 3.6 box to a 3.8 box i.e. passwd files user direct

Re: Users

2006-01-09 Thread Jim Razmus
* Christopher Vance <[EMAIL PROTECTED]> [060109 19:02]: > On Mon, Jan 09, 2006 at 01:47:54PM -0500, Jim Razmus wrote: > >* Jason Balan <[EMAIL PROTECTED]> [060109 13:26]: > >>Is there a way to migrate the users from a 3.6 box to a 3.8 box i.e. > >>passwd > >>files user directories and such. > > >

Re: Users

2006-01-09 Thread Christopher Vance
On Mon, Jan 09, 2006 at 01:47:54PM -0500, Jim Razmus wrote: * Jason Balan <[EMAIL PROTECTED]> [060109 13:26]: Is there a way to migrate the users from a 3.6 box to a 3.8 box i.e. passwd files user directories and such. 1. Use tar to copy /home 2. grab /etc/group and /etc/master.passwd 3. use p

Re: ftp-proxy help needed...

2006-01-09 Thread Bob Beck
Judging by the error message, likely you are either blocking the outbound data channel connection to the real server, or the server itself is filtering it. The first place I'd start looking is in your "other" pf rules to see what's getting blocked. set your block rules to log stuf

Re: [unclassified] Simple Question about PF

2006-01-09 Thread Chris Zakelj
Giancarlo Razzolini wrote: > Hello folks, > >I finally did took some time and did my pf.conf firewall from scratch, >actually learning it (i did my first using fwbuilder. It worked, but i >wanted to do a "hands on" approach). And know i must say i'm almost >proficient in pf. I must confess i

Re: Execution problem : getinterfaces: Failed to open ethernet in terface (fxp9)

2006-01-09 Thread Dom Devitto
[ This is all quite OpenBSD-specific, but maybe it'll save someone a few ] [ hours one day. Crossposted to misc@openbsd.org for extra karma] Hmmm, Lots of digging later shows that: a) ifconfig doesn't know about BPF devices, whatever the changelog says. e.g. # ifconfig bpf20 create ifco

Re: using cvs to access stable branch

2006-01-09 Thread David Higgs
1) What is there to be confused about? Try a different cvs mirror or try again later. Probably heavy load from everyone trying to pull -stable at once. 2) AFAIK, the patch branch and the stable branch are one and the same. Note that these may not necessarily be the same as the release branch wi

Re: pf not logging to /var/log/pflog...

2006-01-09 Thread Russell Fulton
Olivier Mehani wrote: > On Mon, Jan 09, 2006 at 08:37:04PM +0100, Otto Moerbeek wrote: >>> adsl: >>>! sh -c "/sbin/ifconfig pflog0 up" > > As far as I remember, it's not necessary to ifconfig pflog0 up to use it. > >> Why enable pf only when the link is up? It's non-standard and >> potent

Re: using cvs to access stable branch

2006-01-09 Thread Russell Fulton
Christopher Pascoe wrote: > Hi Russell, > > Try switching to anoncvs3.usa.openbsd.org. It looks like anoncvs1 may be > having problems at the moment - it isn't responding at all now. > Doh! Whose bright idea was it to get pf to send RST for outbound dropped ssh sessions? :) :) If they had ti

Re: pf not logging to /var/log/pflog...

2006-01-09 Thread Olivier Mehani
On Mon, Jan 09, 2006 at 08:37:04PM +0100, Otto Moerbeek wrote: > > adsl: > >! sh -c "/sbin/ifconfig pflog0 up" As far as I remember, it's not necessary to ifconfig pflog0 up to use it. > Why enable pf only when the link is up? It's non-standard and > potentially dangarous. You're better o

Re: Dell 1855 Blade Perc 4\IM (LSI) controller problem

2006-01-09 Thread Bob Bostwick \(Lists\)
>>-Original Message- >>From: Marco Peereboom [mailto:[EMAIL PROTECTED] >>Sent: Friday, January 06, 2006 4:10 PM >>To: Bob Bostwick (Lists) >>Subject: Re: Dell 1855 Blade Perc 4\IM (LSI) controller problem >> >>That sounds like over heating to me. Have you tried powering of the box >>for an

Re: [fbsd] Re: [fbsd] Re: IPSEC documentation

2006-01-09 Thread Jeremie Le Hen
Hi Phil, > > I personally find the gif(4)/transport mode setup neater than the > > single tunnel mode - though I am not aware of initial constrains > > when IPSec RFCs were written - especially because one can look after the > > traffic going through the VPN link in a very natural way. I forgot t

Re: patch management on larger install bases

2006-01-09 Thread Jason Crawford
On 1/9/06, Russell Fulton <[EMAIL PROTECTED]> wrote: > I am just starting to upgrade all my obsd boxes to 3.8. I have a copy > of the official CDs -- I know the the ISOs are copyright but is there a > way of burning an updated set so I don't have to patch each system > individually? > > Alternatel

Re: patch management on larger install bases

2006-01-09 Thread Moritz Grimm
Russell Fulton wrote: I am just starting to upgrade all my obsd boxes to 3.8. I have a copy of the official CDs -- I know the the ISOs are copyright but is there a way of burning an updated set so I don't have to patch each system individually? Alternately, with the kernel I'm guessing I can re

Re: isakmpd + gre crashing on OpenBSD 3.8

2006-01-09 Thread Brian A. Seklecki
But as soon as I start an scp from Perspex to Soekris, Perspex reboots after a few hundred kb. Unfortunately, Perspex is in a datacenter and I do not have console access to it to see what the heck is happening at that exact moment. I don't recall. But for the record (IPSEC inside GRE): If the

using cvs to access stable branch

2006-01-09 Thread Russell Fulton
With the recent release of two patches I have finally been forced to come to grips with CVS and the source tree. I have unpacked the source tarballs on the target machine and read through http://www.openbsd.org/anoncvs.html#starting and http://www.openbsd.org/anoncvs.html#CVSROOT following the e

Re: slightly OT: OpenNTPd on Linux still allows drift

2006-01-09 Thread Andrew Rucker Jones
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 > Why don't you just figure out what is wrong in the first place? Changing > hammers doesn't change the size of the nail. Sometimes easier said than done. I fought with a problem with ntpd on Linux for days on end multiple times over the course o

patch management on larger install bases

2006-01-09 Thread Russell Fulton
I am just starting to upgrade all my obsd boxes to 3.8. I have a copy of the official CDs -- I know the the ISOs are copyright but is there a way of burning an updated set so I don't have to patch each system individually? Alternately, with the kernel I'm guessing I can replace /bsd (and /bsd.rd)

ftp-proxy help needed...

2006-01-09 Thread Peter Landry
Hello list, I'm working on getting Active FTP Connections working (a requirement of an app used by a client) through our 3.8 firewall. Following the PF FAQ, I was able to get passive FTP working fine with the following pf.conf lines: rdr pass on $int_usr_if proto tcp from $int_usr_if:network to an

Simple Question about PF

2006-01-09 Thread Giancarlo Razzolini
Hello folks, I finally did took some time and did my pf.conf firewall from scratch, actually learning it (i did my first using fwbuilder. It worked, but i wanted to do a "hands on" approach). And know i must say i'm almost proficient in pf. I must confess i found it much simpler than iptab

Re: slightly OT: OpenNTPd on Linux still allows drift

2006-01-09 Thread eric
On Mon, 2006-01-09 at 15:45:41 -0600, [EMAIL PROTECTED] proclaimed... > I've struggled for what seems like forever trying to get "regular" > NTP to properly sync my clock on my Linux boxes, but have never been > successful. OpenNTPd's goals are perfectly in line with my needs, > so I figured, why

slightly OT: OpenNTPd on Linux still allows drift

2006-01-09 Thread matthew . garman
This is probably kind of a long shot, but does anyone use OpenNTPd on Linux machines? I've struggled for what seems like forever trying to get "regular" NTP to properly sync my clock on my Linux boxes, but have never been successful. OpenNTPd's goals are perfectly in line with my needs, so I figu

Re: DRI on OpenBSD (again, but with Xorg)

2006-01-09 Thread Andreas Bihlmaier
On Mon, Jan 09, 2006 at 03:25:34PM +0400, Bruno Carnazzi wrote: >Hi All, > > Referencing to this post : > http://www.monkey.org/openbsd/archive/misc/0303/msg01384.html there is > (was ?) some work in progress in supporting DRI on OpenBSD. As this > post was written when XFree86 was still in th

Linksys WMP55AG (ath0) Not Finding Wireless Network

2006-01-09 Thread Alex Kirk
Hello All, I've got a Linksys WMP55AG that's refusing to see my wireless network. While it's entirely possible that I've misconfigured it, given other somewhat recent posts I've seen about problems with ath devices (i.e. http://marc.theaimsgroup.com/?l=openbsd-misc&m=113166150212987&w=2), I figure

Re: OT: event driven processing

2006-01-09 Thread Nick Nauwelaerts
On Mon, 09 Jan 2006 18:44:53 +1100 Damien Miller <[EMAIL PROTECTED]> wrote: > > i am in need to write event driven processing applications. I must > > avoid sequential processing. I will be mixing RPC queries and dns > > ones. > > > > I saw, at the first sigh, writing non batch program is very ha

Building Fox gui on 3.8 -- threadsafe versions of getpwuid and friends

2006-01-09 Thread Russell Fulton
Hi I am trying to install Fox on a 3.8 system but the compilation fails because several functions such as getpwuid_r are missing. These functions are part of the posix standard and are thread safe versions of the originals which use static buffers to return results. I've done some search

Re: Tuning NFS file transfer speed

2006-01-09 Thread Denny White
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 9 Jan 2006, Denny White wrote: Date: Mon, 9 Jan 2006 12:13:38 + (UTC) From: Denny White <[EMAIL PROTECTED]> To: OpenBSD Questions Mailing List Subject: Tuning NFS file transfer speed I know the usual complaint is, it's not fast eno

Re: pf not logging to /var/log/pflog...

2006-01-09 Thread Matthias Kilian
On Mon, Jan 09, 2006 at 07:43:29PM +, poncenby smythe wrote: > Making PF=YES in /etc/rc.conf does not seem to work as required due > to my pf complaining it cannot determine an ip address for the tun0 > interface [...] Put it with parentheses, i.e. `(tun0)'. Ciao, Kili

Re: pf not logging to /var/log/pflog...

2006-01-09 Thread Otto Moerbeek
On Mon, 9 Jan 2006, poncenby smythe wrote: > On 9 Jan 2006, at 19:37, Otto Moerbeek wrote: > > > > > On Mon, 9 Jan 2006, poncenby smythe wrote: > > > > > On 9 Jan 2006, at 10:43, Olivier Mehani wrote: > > > > > > > On Sun, Jan 08, 2006 at 10:51:12PM +, poncenby smythe wrote: > > > > > I am

Re: pf not logging to /var/log/pflog...

2006-01-09 Thread poncenby smythe
On 9 Jan 2006, at 19:37, Otto Moerbeek wrote: On Mon, 9 Jan 2006, poncenby smythe wrote: On 9 Jan 2006, at 10:43, Olivier Mehani wrote: On Sun, Jan 08, 2006 at 10:51:12PM +, poncenby smythe wrote: I am running 3.8 GENERIC on i386 and can't figure out why pf isn't logging the packets I'

Re: pf not logging to /var/log/pflog...

2006-01-09 Thread Otto Moerbeek
On Mon, 9 Jan 2006, poncenby smythe wrote: > On 9 Jan 2006, at 10:43, Olivier Mehani wrote: > > > On Sun, Jan 08, 2006 at 10:51:12PM +, poncenby smythe wrote: > > > I am running 3.8 GENERIC on i386 and can't figure out why pf isn't > > > logging > > > the packets I've told it to, here is a sn

Re: pf not logging to /var/log/pflog...

2006-01-09 Thread Matthias Kilian
On Mon, Jan 09, 2006 at 07:21:51PM +, poncenby smythe wrote: > pf is set to NO in /etc/rc.conf, but is enabled with the following > commands in ppp.linkup script: If you enable pf manually, you've also to configure pflog0 up and to start pflogd(8) manually. But it would be much better to ju

Re: pf not logging to /var/log/pflog...

2006-01-09 Thread Jason Crawford
On 1/9/06, poncenby smythe <[EMAIL PROTECTED]> wrote: > On 9 Jan 2006, at 10:43, Olivier Mehani wrote: > > > On Sun, Jan 08, 2006 at 10:51:12PM +, poncenby smythe wrote: > >> I am running 3.8 GENERIC on i386 and can't figure out why pf > >> isn't logging > >> the packets I've told it to, here

Re: pf not logging to /var/log/pflog...

2006-01-09 Thread poncenby smythe
On 9 Jan 2006, at 10:43, Olivier Mehani wrote: On Sun, Jan 08, 2006 at 10:51:12PM +, poncenby smythe wrote: I am running 3.8 GENERIC on i386 and can't figure out why pf isn't logging the packets I've told it to, here is a snippet from /etc/ pf.conf... Maybe a stupid check, but did you

Re: Tuning NFS file transfer speed

2006-01-09 Thread ober
What are your nfs mount options? Those could help in determining the issue. -Ober On Mon, 9 Jan 2006, Denny White wrote: Date: Mon, 9 Jan 2006 12:13:38 + (UTC) From: Denny White <[EMAIL PROTECTED]> To: OpenBSD Questions Mailing List Subject: Tuning NFS file transfer speed -BEGIN PGP

Re: Users

2006-01-09 Thread Jim Razmus
* Jason Balan <[EMAIL PROTECTED]> [060109 13:26]: > Hi > > Is there a way to migrate the users from a 3.6 box to a 3.8 box i.e. passwd > files user directories and such. > 1. Use tar to copy /home 2. grab /etc/group and /etc/master.passwd 3. use pwd_mkdb on the target machine with the master.pa

NFS Book offer

2006-01-09 Thread Will H. Backman
Would any OpenBSD developer be interested in the book NFS Illustrated? http://www.awprofessional.com/bookstore/product.asp?isbn=0201325705&redi r=1 I'll ship it to you. It got it for free, but it is over my head. -- Will Backman - Network Administrator Coastal Enterprises, Inc. http://www.ceimai

Users

2006-01-09 Thread Jason Balan
Hi Is there a way to migrate the users from a 3.6 box to a 3.8 box i.e. passwd files user directories and such.

Tuning NFS file transfer speed

2006-01-09 Thread Denny White
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I know the usual complaint is, it's not fast enough. My question is, after doing much googling - mail archive reading, is there a way to slow the file transfer speed down? I've asked the list before about a rebooting problem I have on this box, & it'

Moving to a bigger HD <- thanks everyone!

2006-01-09 Thread Bill
Well, it is done. Thanks to the FAQ writer (Nick?) and other information in the FAQ (well done), all the people who reminded me about the boot process and boot install and all the people who suggested the TMPDIR for the dump / restore problem (that was it). The new drive is up, running smoothly s

Re: Security Mailing List

2006-01-09 Thread marrandy
On Monday 09 January 2006 11:02, Jasper Lievisse Adriaanse wrote: > On Mon, 09 Jan 2006 09:05:19 -0600 > > Kenny Mann <[EMAIL PROTECTED]> wrote: > > I thought the security-announce mailing list would have sent an email > > out about the 3.8 errata, but I was wrong. I found out on undeadly.org. > >

Re: Moving to a bigger HD, is dump still the best way

2006-01-09 Thread Hannah Schroeter
Hi! On Mon, Jan 09, 2006 at 05:22:47PM +0059, Han Boetes wrote: >I recently had to migrate my HD for another reason, and I wrote it >all down: > http://www.xs4all.nl/~hanb/documents/hd-migration I think async + softdep as mount option doesn't make sense. And I still think the dump/restore comb

Re: Moving to a bigger HD, is dump still the best way

2006-01-09 Thread Han Boetes
I recently had to migrate my HD for another reason, and I wrote it all down: http://www.xs4all.nl/~hanb/documents/hd-migration # Han

Re: Security Mailing List

2006-01-09 Thread Jasper Lievisse Adriaanse
On Mon, 09 Jan 2006 09:05:19 -0600 Kenny Mann <[EMAIL PROTECTED]> wrote: > I thought the security-announce mailing list would have sent an email > out about the 3.8 errata, but I was wrong. I found out on undeadly.org. > Is their such an OpenBSD mailing list that would send an email out when > pos

Security Mailing List

2006-01-09 Thread Kenny Mann
I thought the security-announce mailing list would have sent an email out about the 3.8 errata, but I was wrong. I found out on undeadly.org. Is their such an OpenBSD mailing list that would send an email out when posts are added onto the errata? If so, it might be nice to place a link somewhere

Re: Moving to a bigger HD, is dump still the best way <- dump problem

2006-01-09 Thread Todd C. Miller
In message <[EMAIL PROTECTED]> so spake Hannah Schroeter (hannah): > dump/restore need some space in /tmp. Just mount a mfs to /tmp so > that that doesn't fill up the initial ramdisk. Or just point the TMPDIR environment variable to a mounted partition with enough space. - todd

Re: Moving to a bigger HD, is dump still the best way <- dump problem

2006-01-09 Thread Hannah Schroeter
Hello! On Mon, Jan 09, 2006 at 01:40:19AM -0500, Bill wrote: >[...] >Now here is what I did then... ># cd /mnt/newr ># ../oldr/sbin/dump 0af - /mnt/oldr | restore rf - >(the old drive is also openbsd 3.8) >This worked like a charm for the root fs >Then I tried the var and I got a slew of error

Re: mergemaster

2006-01-09 Thread Craig Skinner
On Sun, Jan 08, 2006 at 04:18:32PM +0100, Jonathan Weiss wrote: > > I would really appreciate having mergemaster in the base system. > mergemaster or mergeslave in base would be fantastic as I ONLY use binaries. At the moment I have a file server that runs rsnapshot /etc on all boxes, so I go

Re: Moving to a bigger HD, is dump still the best way <- dump problem

2006-01-09 Thread Nick Holland
Bill wrote: ... > Now here is what I did then... > > # cd /mnt/newr > # ../oldr/sbin/dump 0af - /mnt/oldr | restore rf - > > (the old drive is also openbsd 3.8) > > This worked like a charm for the root fs > Then I tried the var and I got a slew of errors about the disk being > full. But its the

Sony DSC T7 camera works with OpenBSD

2006-01-09 Thread Fred Crowson
Hi Misc, This is just a quick message to say that the issue [1] I had with a Sony DSC T7 camera not attaching has been resolved with the snapshots from 5 Jan 06. Thanks to all the developers for a great OS! Fred [1] http://marc.theaimsgroup.com/?l=openbsd-misc&m=113283811919298&w=2

Re: pf and 1-1 static nat

2006-01-09 Thread Stuart Henderson
On 2006/01/09 10:53, Johan Linner wrote: > Is binat the key here Yes.

Re: OpenBGP & IPv6

2006-01-09 Thread Henning Brauer
* Sylvain Coutant <[EMAIL PROTECTED]> [2006-01-07 11:04]: > I was just about to create a new thread when I read : > > > I have not seen it discussed much on the list, but OpenBGP works *very* > > well and is easy to setup using Hurricane Electrics free (ipv6-in-ipv4) > > I try to setup a BGP pee

DRI on OpenBSD (again, but with Xorg)

2006-01-09 Thread Bruno Carnazzi
Hi All, Referencing to this post : http://www.monkey.org/openbsd/archive/misc/0303/msg01384.html there is (was ?) some work in progress in supporting DRI on OpenBSD. As this post was written when XFree86 was still in the distro, I'd like to know if this work is curently progressing with Xorg ?

Re: pf not logging to /var/log/pflog...

2006-01-09 Thread Olivier Mehani
On Sun, Jan 08, 2006 at 10:51:12PM +, poncenby smythe wrote: > I am running 3.8 GENERIC on i386 and can't figure out why pf isn't logging > the packets I've told it to, here is a snippet from /etc/ pf.conf... Maybe a stupid check, but did you enable pf in rc.conf ? -- Olivier Mehani <[EMAIL

pf and 1-1 static nat

2006-01-09 Thread Johan Linner
Hi, I'm pretty new to pf and OpenBSD which maybe explains why I'm still not sure after reading the man pages and docs how to solve this; I'm trying to figure out how do use rdr in combination with outgoing nat. External interface is 213.115.246.36/29 net with a 213.115.161.0/25 alias net. Dmz

Re: dhcpd: Multiple interfaces match the same shared network

2006-01-09 Thread Alexander Farber
Argh I should have reread the (man dhcpd.conf", sorry! This has helped, thank you On 1/9/06, Rod.. Whitworth <[EMAIL PROTECTED]> wrote: > What you need is 2 shared networks with individual names and their own > subnet entries. > > Here is the relevant bit of my box doing exactly what you want ( 1

Re: OpenBSD VMWare image too popular

2006-01-09 Thread Shane J Pearson
Hello Julien, On 09/01/2006, at 7:26 PM, Julien Bonastre wrote: I can actually fully understand your disapproval at the idea of using a torrent to distribute this file, and I can also emphasise with your dislikening of trying to create some validation system for the image. But I don't di

Re: OpenBSD VMWare image too popular

2006-01-09 Thread Julien Bonastre
Yes as my recent post to this topic related to my apology to the wrongfully accused my actual argument was towards the disdain of the BT network I can actually fully understand your disapproval at the idea of using a torrent to distribute this file, and I can also emphasise with your dislik

Fw: OpenBSD VMWare image too popular

2006-01-09 Thread Julien Bonastre
Meh! My deepest apologies Graham, I need some more sleep ;-) php is an amazing creature once you dive into it.. haha.. Bob! You are a bad bad man! Thanks Mark for that rectification.. - Original Message - From: "Mark Rolen" <[EMAIL PROTECTED]> To: "Julien Bonastre" <[EMAIL PROTEC

Re: biosboot broken?

2006-01-09 Thread Uwe Dippel
M. Schatzl wrote: No, I boot as if OpenBSD was on the first partition through setting the boot-flag active on this partition. I hardly use the other ones. I suspect that biosboot just gets installed at the wrong location if you don't set the active partition the right way at install time. But I