OT marc.theaimsgroup.com

2006-01-23 Thread Daniel Ouellet
Sorry to have to asked this, but I fell at a lots now. Is there an other location a kind sole could provide me to access their content? Looking for the various openbsd lists here. Or an other archive list that is as friendly to use as well. Look likes the site was very slow, then on/off time

Re: Anonym.OS - OpenBSD-based live CD

2006-01-23 Thread Scott Francis
On 1/22/06, NetNeanderthal <[EMAIL PROTECTED]> wrote: > On 1/22/06, Scott Francis <[EMAIL PROTECTED]> wrote: > > you mean, aside from including man38.tgz? What else are you looking > > for? There's some docs on their website, but why would you need > > anything beyond what ships with OpenBSD? There

pf queue

2006-01-23 Thread Axton
Is there a capability with pf to send packets to userspace for handling/manipulation, whereby they can be returned back to the kernel, similar to the queue facilities available in iptables? Axton

Re: pf on loopback interfaces?

2006-01-23 Thread Prabhu Gurumurthy
If I understand correctly, pf will see packets on all interfaces by default unless you specify set skip on lo { which tells pf to skip seeing packets on the specified interface, in this case loopback } - Prabhu Christian Weisgerber wrote: Say I create a loopback interface lo1 lo1: flags=80

Re: S5120 Tomcat weirdness

2006-01-23 Thread Ted Unangst
On 1/23/06, Chris <[EMAIL PROTECTED]> wrote: > I am trying to install OBSD 3.8 on my new Tyan S5120 tomcat i915 mobo. > I have a pIV chip and 2gb of ram. It has an ICH6 chipset in it. > > So I bought a 250 gb IDE drive. After a strugle, I finally got the > thing in there, and the mobo detects it.

S5120 Tomcat weirdness

2006-01-23 Thread Chris
Hello. I am trying to install OBSD 3.8 on my new Tyan S5120 tomcat i915 mobo. I have a pIV chip and 2gb of ram. It has an ICH6 chipset in it. Initially I tried it with a 200GB sata drive. Whenever I booted to the bootcd, however, it always hung at: rd0: fixed, 3800 blocks wd0(pciide0:0:0): tim

user directories to have a cgi-bin directory

2006-01-23 Thread ejun
guys have you ever tried setting up openbsd as vhosting and each users have their own cgi-bin directory? i have a problem running SSI for each user, maybe you have some idea where to look for some tutorials. thanks a lot. this is what i'm looking for: ScriptAliasMatch ^/~([^/]*)/cgi-bin/(.*) /home

Re: LE-564 embedded single board computer (Via EDEN)

2006-01-23 Thread Nick Holland
marrandy wrote: > Treid it with a Hitachi micro-drive (Compact Flash fitting). It works but I > see pciide errors listed below. Is this fixable ? > I have seen the FAQ entry on pciide, but obviously, it isn't a cable issue as > there isn't one. ... > pciide0:0:0: bus-master DMA error: missing

Re: Suggestions about a replacement for FTP over SSL [long]

2006-01-23 Thread Smith
It would be nice if sftp/scp/ssh could be chrooted. But I'm sure you can always mess with the rights for each user though. As for "warns of k1dd13s", why care? If you open a port, someone will find you. If you're concerned about the kiddies using up your bandwidth, have pf running on the sa

Re: Securia Rates OpenBSD

2006-01-23 Thread Tony
Bob Beck wrote: > * Matthias Kilian <[EMAIL PROTECTED]> [2006-01-23 15:58]: > > On Mon, Jan 23, 2006 at 05:08:00PM -0500, Dave Feustel wrote: > > > Securia gives OpenBSD a pretty nice security rating at > > > http://secunia.com/product/100/ > > > > Those statistics say nothing at first glance. For

pf on loopback interfaces?

2006-01-23 Thread Christian Weisgerber
Say I create a loopback interface lo1 lo1: flags=8049 mtu 33224 groups: lo inet 172.16.2.1 netmask 0xff00 and have a network program bind to that IP address. On any external interface, the address is NATed. Will pf ever see any packets on lo1? -- Christian "naddy" Weisge

Re: Securia Rates OpenBSD

2006-01-23 Thread Dave Feustel
On Monday 23 January 2006 18:37, Bill wrote: > On Mon, 23 Jan 2006 17:08:00 -0500 > Dave Feustel <[EMAIL PROTECTED]> spake: > > > Securia gives OpenBSD a pretty nice security rating at > > http://secunia.com/product/100/ > > Hi Dave, > > I did not see how Securia gives OpenBSD a high rating...

Re: Securia Rates OpenBSD

2006-01-23 Thread Dave Feustel
On Monday 23 January 2006 18:41, eric wrote: > On Mon, 2006-01-23 at 17:08:00 -0500, Dave Feustel proclaimed... > > > Securia gives OpenBSD a pretty nice security rating at > > http://secunia.com/product/100/ > > Shouldn't this go to advocacy@ ? That did not occur to me, but you have a point the

Re: Securia Rates OpenBSD

2006-01-23 Thread eric
On Mon, 2006-01-23 at 17:08:00 -0500, Dave Feustel proclaimed... > Securia gives OpenBSD a pretty nice security rating at > http://secunia.com/product/100/ Shouldn't this go to advocacy@ ?

Re: Securia Rates OpenBSD

2006-01-23 Thread Bill
On Mon, 23 Jan 2006 17:08:00 -0500 Dave Feustel <[EMAIL PROTECTED]> spake: > Securia gives OpenBSD a pretty nice security rating at > http://secunia.com/product/100/ Hi Dave, I did not see how Securia gives OpenBSD a high rating... All I could find on that page were statistics on vulnerabilitie

Re: Securia Rates OpenBSD

2006-01-23 Thread Bob Beck
* Matthias Kilian <[EMAIL PROTECTED]> [2006-01-23 15:58]: > On Mon, Jan 23, 2006 at 05:08:00PM -0500, Dave Feustel wrote: > > Securia gives OpenBSD a pretty nice security rating at > > http://secunia.com/product/100/ > > Those statistics say nothing at first glance. For example, I could > argue th

Re: Securia Rates OpenBSD

2006-01-23 Thread Matthias Kilian
On Mon, Jan 23, 2006 at 05:08:00PM -0500, Dave Feustel wrote: > Securia gives OpenBSD a pretty nice security rating at > http://secunia.com/product/100/ Those statistics say nothing at first glance. For example, I could argue that PHP 4.3.x is more secure than OpenBSD because there were less advis

Securia Rates OpenBSD

2006-01-23 Thread Dave Feustel
Securia gives OpenBSD a pretty nice security rating at http://secunia.com/product/100/ -- Lose, v., experience a loss, get rid of, "lose the weight" Loose, adj., not tight, let go, free, "loose clothing"

Re: ClamAV and its socket

2006-01-23 Thread Joachim Schipper
On Mon, Jan 23, 2006 at 12:12:28PM -0800, Rick Agha wrote: > Where does everyone else put ClamAV's socket? I tried to create a > directory structure similar to mysql's, ie, put clamav.sock in > /var/run/clamav/, but when I restart the machine this directory gets > deleted. I can't put it in /var/cl

Re: ClamAV and its socket

2006-01-23 Thread Antoine Jacoutot
On Mon, 23 Jan 2006, Rick Agha wrote: Where does everyone else put ClamAV's socket? I tried to create a directory structure similar to mysql's, ie, put clamav.sock in /var/run/clamav/, but when I restart the machine this directory gets deleted. I can't put it in /var/clamav/ because of permis

Re: ClamAV and its socket

2006-01-23 Thread janus
On Mon, Jan 23, 2006 at 12:12:28PM -0800, Rick Agha wrote: > Where does everyone else put ClamAV's socket? I tried to create a > directory structure similar to mysql's, ie, put clamav.sock in > /var/run/clamav/, but when I restart the machine this directory gets > deleted. I can't put it in /var/cl

ClamAV and its socket

2006-01-23 Thread Rick Agha
Where does everyone else put ClamAV's socket? I tried to create a directory structure similar to mysql's, ie, put clamav.sock in /var/run/clamav/, but when I restart the machine this directory gets deleted. I can't put it in /var/clamav/ because of permissions. Do people put it in /tmp? That see

SSH, sftp-server subsystem not logging to utmp ?

2006-01-23 Thread turha turha
Hey all, After reading all I could think of, and skimming thru even more man pages and websites, I couldn't find any useful info on why my box doesn't log sftp users to utmp.. If I use 'w' or 'who', they properly tell me all the ssh, telnet, ftp, console users logged in, but sftp users are not sh

Re: pf by mac address?

2006-01-23 Thread Tobias Weingartner
On Sunday, January 22, David Benfell wrote: > > Is it possible? You have hostile users. They know how to change IP addresses. You want to block by another means they are able to change. Instead have a look at authpf. --Toby.

Re: Downloads limiting with PF

2006-01-23 Thread Maxim Vetsalo
On Monday 23 January 2006 21:18, you wrote: > A non-technical suggestion: > > Keep in mind your *real* goals instead of focusing too closely on one > particular solution. Thanks! This is extremly usefull advice! Now I understand that I need rethink my problem. And misc@ was *very* helpfull. Th

Re: Suggestions about a replacement for FTP over SSL [long]

2006-01-23 Thread Joachim Schipper
On Mon, Jan 23, 2006 at 10:55:31AM -0800, Smith wrote: > Easiest solution: > > Setup a ftp server or sftp/scp/ssh server with OpenBSD on a separate IP > Address from your firewall/gateway. I once setup a ftp server out in > the open like that with OpenBSD. I ran no firewalls. I never had any

LE-564 embedded single board computer (Via EDEN)

2006-01-23 Thread marrandy
Treid it with a Hitachi micro-drive (Compact Flash fitting). It works but I see pciide errors listed below. Is this fixable ? I have seen the FAQ entry on pciide, but obviously, it isn't a cable issue as there isn't one. NOTE: "pciide0:0:0: bus-master DMA error: missing interrupt, status=0x21"

Re: Downloads limiting with PF

2006-01-23 Thread Darrin Chandler
Maxim Vetsalo wrote: On Monday 23 January 2006 00:36, you wrote: On 2006/01/23 00:23, Maxim Vetsalo wrote: Greate thanks for your answer, Marco! I had read it, but didn't find solution for my problem yet. You missed the pf.conf(5) section on service curves, then. Yes, you

Re: Suggestions about a replacement for FTP over SSL [long]

2006-01-23 Thread Smith
Easiest solution: Setup a ftp server or sftp/scp/ssh server with OpenBSD on a separate IP Address from your firewall/gateway. I once setup a ftp server out in the open like that with OpenBSD. I ran no firewalls. I never had any problems. If you do this and say if it does get hacked, broken

Re: Downloads limiting with PF

2006-01-23 Thread Maxim Vetsalo
On Monday 23 January 2006 00:36, you wrote: > On 2006/01/23 00:23, Maxim Vetsalo wrote: > > Greate thanks for your answer, Marco! I had read it, but didn't find > > solution for my problem yet. > > You missed the pf.conf(5) section on service curves, then. Yes, you are right. I missed it. Shame on

Re: Ralink - device timeout

2006-01-23 Thread Jonas Fischer
I also have a Ralink adapter. But mine works perfectly. I'm getting good speed and it is reliable! What I can remember from when did my setup is that I had to specify 54Mbit to get optimal speed. This is my hostname.ral0: nwid media OFDM54 mode 11g dhcp And here is ifconfig: ral0: flags=8

Re: Ralink - device timeout

2006-01-23 Thread Anders Normann
Based on this excerpt from dmesg, I assume that the ral card has been detected: " ral0 at pci0 dev 6 function 0 "Ralink RT2560" rev 0x01: irq 11, address 00:14:a5:0b:85:2b ral0: MAC/BBP RT2560 (rev 0x04), RF RT2525 " I also tried to check whether the driver had been loaded using config(8)

Re: Ralink - device timeout

2006-01-23 Thread Ray Lai
On Mon, Jan 23, 2006 at 01:20:36PM +0100, Joakim Aronius wrote: > * Jonathan Gray ([EMAIL PROTECTED]) wrote: > > On Mon, Jan 23, 2006 at 12:36:46PM +0100, Joakim Aronius wrote: > > > Hi Anders, > > > > > > >From your dmesg: > > > pcibios0 at bios0: rev 2.1 @ 0xfd7a0/0x860 > > > > > > >From RAL(4)

Re: Ralink - device timeout

2006-01-23 Thread Joakim Aronius
I had the same problem, worked on it for a while, was pointed at the Caveats section of the man page and gave up. I just found the mobo documentation at Dell and my system should support PCI 2.2 so i guess it should have worked.. As i remember the interface seemed to be up but it was not possibl

Re: where to buy LSI hardware

2006-01-23 Thread Johan L
Joakim Roubert wrote: Hi! I would like to find a LSI SATA RAID card which is as simple (and thus cheap) as possible. Perhaps you guys could help me with these questions: * I cannot find MegaRAID 150-2 in ami(4). Am I right supposing this one is not supported? * Which of the supported LSI SATA R

Re: Ralink - device timeout

2006-01-23 Thread Stuart Henderson
On 2006/01/23 23:04, Jonathan Gray wrote: > On Mon, Jan 23, 2006 at 12:36:46PM +0100, Joakim Aronius wrote: > > Hi Anders, > > > > >From your dmesg: > > pcibios0 at bios0: rev 2.1 @ 0xfd7a0/0x860 > > > > >From RAL(4) > > CAVEATS > > PCI ral adapters seem to strictly require a system supporti

Re: Ralink - device timeout

2006-01-23 Thread Joakim Aronius
* Jonathan Gray ([EMAIL PROTECTED]) wrote: > On Mon, Jan 23, 2006 at 12:36:46PM +0100, Joakim Aronius wrote: > > Hi Anders, > > > > >From your dmesg: > > pcibios0 at bios0: rev 2.1 @ 0xfd7a0/0x860 > > > > >From RAL(4) > > CAVEATS > > PCI ral adapters seem to strictly require a system support

Re: Ralink - device timeout

2006-01-23 Thread Anders Normann
Joakim Aronius skrev: Hi Anders, >From your dmesg: pcibios0 at bios0: rev 2.1 @ 0xfd7a0/0x860 >From RAL(4) CAVEATS PCI ral adapters seem to strictly require a system supporting PCI 2.2 or greater and will likely not work in systems based on older revisions of the PCI specificatio

Re: Ralink - device timeout

2006-01-23 Thread Jonathan Gray
On Mon, Jan 23, 2006 at 12:36:46PM +0100, Joakim Aronius wrote: > Hi Anders, > > >From your dmesg: > pcibios0 at bios0: rev 2.1 @ 0xfd7a0/0x860 > > >From RAL(4) > CAVEATS > PCI ral adapters seem to strictly require a system supporting PCI 2.2 or > greater and will likely not work in sys

Re: pf by mac address?

2006-01-23 Thread David Benfell
On Mon, 23 Jan 2006 10:49:32 +0100, viq wrote: > > How about a different approach? Limit everyone by default, and then remove > limits via authpf. As someone somewhere said, ssh can be made into > "double-click here to be able to surf" ;) > *This* seems like it could work. I will look into it

Re: Ralink - device timeout

2006-01-23 Thread Joakim Aronius
Hi Anders, >From your dmesg: pcibios0 at bios0: rev 2.1 @ 0xfd7a0/0x860 >From RAL(4) CAVEATS PCI ral adapters seem to strictly require a system supporting PCI 2.2 or greater and will likely not work in systems based on older revisions of the PCI specification. /jkm * Anders Norma

Re: float question

2006-01-23 Thread Peter Strömberg
On 23 Jan 2006 at 2:10, ramrunner wrote: > why does the add loses a decimal point? > again sorry if it's my mistake (probably) but i'm confused ;) . What Every Computer Scientist Should Know About Floating-Point Arithmetic http://docs.sun.com/source/806-3568/ncg_goldberg.html

Ralink - device timeout

2006-01-23 Thread Anders Normann
For about a month now I have been trying to get my Ralink PCI card working under OpenBSD - I have had it working under FreeBSD, but could not get my wireless mouse working there. I a last effort to figure out why Ralink isn't working on my Fujitsu-Siemens Amilo L7300 laptop I have to ask the li

Re: where to buy LSI hardware

2006-01-23 Thread Joakim Roubert
On 2006-01-23 11:30, Joakim Roubert wrote: > * I cannot find MegaRAID 150-2 in ami(4). Am I right supposing this one > is not supported? Please ignore that question; as so often, I found the answer soon after posting. (http://marc.theaimsgroup.com/?l=openbsd-misc&m=110176873614887&w=2) Sorry abo

where to buy LSI hardware

2006-01-23 Thread Joakim Roubert
Hi! I would like to find a LSI SATA RAID card which is as simple (and thus cheap) as possible. Perhaps you guys could help me with these questions: * I cannot find MegaRAID 150-2 in ami(4). Am I right supposing this one is not supported? * Which of the supported LSI SATA RAID card would you say i

Re: pf by mac address?

2006-01-23 Thread viq
On Monday 23 January 2006 06:08, David Benfell wrote: > So I'm thinking I'd like to be able to write packet filter rules based > on MAC address. I'm not necessarily going to want to simply cut off > all their Internet access, but pf offers a lot of options to do what I > think I might want to do,

Re: Suggestions about a replacement for FTP over SSL [long]

2006-01-23 Thread Joachim Schipper
On Mon, Jan 23, 2006 at 12:14:52AM +, Stuart Henderson wrote: > On 2006/01/23 00:57, Joachim Schipper wrote: > > The main problem, right now, is file transfers. The old server serves > > FTP over SSL. > > Is passive FTP over SSH-tunnel any good? It's easy enough to use a > win32 build of OpenS

Re: Suggestions about a replacement for FTP over SSL [long]

2006-01-23 Thread Joachim Schipper
On Mon, Jan 23, 2006 at 01:30:21AM +0100, viq wrote: > Just a thought - why not samba? > With some additions, like > http://www.camden.rutgers.edu/HELP/Documentation/Unix/stunnel/S50-1331_stunnel.php > or otherwise VPN it. > ...yeah, i guess it deviates then from the simple setup you had before...

Re: Suggestions about a replacement for FTP over SSL [long]

2006-01-23 Thread Olivier Mehani
On Mon, Jan 23, 2006 at 12:57:34AM +0100, Joachim Schipper wrote: > [1] Though if I can get everyone to use public key authentication, I > could use the command= syntax in ~/.ssh/authorized_keys (where is this > documented, anyway?). it is, in sshd(8), under AUTHORIZED_KEYS FILE FORMAT -- Olivi