Re: Brain wash for live partition, or directory mirroring concept idea(s)?

2006-02-01 Thread Ray Lai
On Wed, Feb 01, 2006 at 11:37:19PM -0500, Daniel Ouellet wrote: > This way, continuous live mirroring can be done and no need for cronjob, > etc. And this would be much more efficient as well. https://marc.theaimsgroup.com/?l=openbsd-misc&m=86187916316 https://marc.theaimsgroup.com/?l=openb

Brain wash for live partition, or directory mirroring concept idea(s)?

2006-02-01 Thread Daniel Ouellet
Hi, I would like to try to break my teeth on a small ( hopefully) project that is missing for me in the OpenBSD kernel. A way to have live mirror of pre determine directory, or may be if that's easier to implement, full partition(s). The idea is to configure a directory on a master server t

Re: RAIDframe question

2006-02-01 Thread Nick Holland
Greg Oster wrote: > "Peter Fraser" writes: >> I had a disk drive fail while running RAIDframe. >> The system did not survive the failure. Even worse >> there was data loss. > > Ow. Welcome to the REALITY of RAID. If you rely on RAID to always work, and never go down, you Just Don't Understand.

Your Message Could Not Be Delivered

2006-02-01 Thread TELUS.net Postmaster
Your message could not be delivered. The recipient's computer rejected your e-mail. Please verify the recipient's e-mail address and resend. Recipient: <[EMAIL PROTECTED]> Reason:<[EMAIL PROTECTED]>: Recipient address rejected: User unknown in virtual alias table We hope this inf

Re: MAC filter Bridge

2006-02-01 Thread Lars Hansson
On Wed, 1 Feb 2006 16:25:44 +0100 "Badbanchi Hossein" <[EMAIL PROTECTED]> wrote: > Does this really mean that no hash function is used? I mean if I have 2 > MAC Addresses and want to check **each packet** against this list serially, > I suppose I had better forget about it! If you have 2

Windows CLI FTP and OBSD 3.9 ftp-proxy

2006-02-01 Thread Karl Kopp
Hi Everyone! I just upgraded one of our firewalls from 3.0 OBSD (I know, I know, I've been busy, for 4 years :) to 3.8 (which took 30 mins - LOVE that!). I've also added ftp-proxy from current to handle all our FTP connections. Things are working MUCH better now (browsers can hit FTP servers on th

Re: Fw: smp kernel

2006-02-01 Thread Nicholas Young
On Wed, Feb 01, 2006 at 02:00:28AM +0200, [EMAIL PROTECTED] wrote: > Begin forwarded message: > > Date: Tue, 31 Jan 2006 23:19:01 +0200 > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > Subject: smp kernel > > > hi! > > i am using OpenBSD_3_8 stable and i have intel-1386-pc with intel-p4-ht s

Re: Making FAT play nice

2006-02-01 Thread Stuart Henderson
On 2006/02/01 16:45, Nick Guenther wrote: > > /dev/wd0p /data msdos rw,-l,-m=777,nodev,nosuid,noauto 0 0 > > You can add switches like "-m" above. > > Ah! Thank you very much. That's exactly what I was looking for. That > little detail isn't explicitly documented anywhere I could see. for future

Re: Making FAT play nice

2006-02-01 Thread Nick Guenther
On 2/1/06, Alexander Hall <[EMAIL PROTECTED]> wrote: > Nick Guenther wrote: > > I dual boot OpenBSD with Windows and have a third partition for data > > which is mounted on /home. The data partition is FAT32 since that's > > the only type that both OSes support well. > > I am not rally happy to use

Re: RAIDframe question

2006-02-01 Thread Greg Oster
Andy Hayward writes: > On 2/1/06, Greg Oster <[EMAIL PROTECTED]> wrote: > > "Peter Fraser" writes: > > > and as a result all file writes to the failed > > > drive queued up in memory, > > > > I've never seen that behaviour... I find it hard to believe that > > you'd be able to queue up 2 days wort

Re: mediawiki - php - apache

2006-02-01 Thread Tobias Ulmer
On Wed, Feb 01, 2006 at 01:40:00PM -0700, Jack Woehr wrote: > Thanks everyone for helping me get mediawiki started ... sorta ... > but I have one problem left ... mysqld isn't installed. > > > ports/www/mediawiki descended into ports/databases/mysql, but even > though that dir *builds* the mysqld

Re: mediawiki - php - apache

2006-02-01 Thread Jack Woehr
Thanks everyone for helping me get mediawiki started ... sorta ... but I have one problem left ... mysqld isn't installed. ports/www/mediawiki descended into ports/databases/mysql, but even though that dir *builds* the mysqld, it only installs the client. What do I have to do to get mysqld ins

Re: RAIDframe question

2006-02-01 Thread Andy Hayward
On 2/1/06, Greg Oster <[EMAIL PROTECTED]> wrote: > "Peter Fraser" writes: > > and as a result all file writes to the failed > > drive queued up in memory, > > I've never seen that behaviour... I find it hard to believe that > you'd be able to queue up 2 days worth of writes without a) any reads >

Re: MAC filter Bridge

2006-02-01 Thread Badbanchi Hossein
> Basing security policies on something as easily changable as a MAC > address (and as public as a MAC address) is stupid. Thanks for the complement. Although this might seem (or actually BE) stupid in environments publicly accessible, but for a closed environment like our company LAN, this is g

Re: RAIDframe question

2006-02-01 Thread Andy Hayward
On 2/1/06, Peter Fraser <[EMAIL PROTECTED]> wrote: > But why was there a crash, I would of thought > that the system should run after a disk failure. > And even more to my surprise, about two days > of my work disappeared. > > I believe, the disk drive died about 2 days before > the crash. I also b

Re: MAC filter Bridge

2006-02-01 Thread Tobias Weingartner
On Wednesday, February 1, "Badbanchi Hossein" wrote: > > I intend to switch the traffic originating from "unknown" MACs to a "quaranti > ne" > subnet, connected to a third interface member of the bridge. Basing security policies on something as easily changable as a MAC address (and as public as

Re: RAIDframe question

2006-02-01 Thread Peter Fraser
> You havn't said what types of disks. I've had IDE disks fail that > take down the entire system. I've had IDE disks fail but the system > remains up and happy. I've had SCSI disks fail that have made the > SCSI cards *very* unhappy (and had the system die shortly after). > None of these t

Re: MAC filter Bridge

2006-02-01 Thread Tobias Weingartner
On Wednesday, February 1, "Badbanchi Hossein" wrote: > > Does this really mean that no hash function is used? I mean if I have 2 > MAC Addresses and want to check **each packet** against this list serially, > I suppose I had better forget about it! The immediate question that rises to the s

Re: RAIDframe question

2006-02-01 Thread Greg Oster
"Peter Fraser" writes: > I had a disk drive fail while running RAIDframe. > The system did not survive the failure. Even worse > there was data loss. Ow. > The system was to be my new web server. The system > had 1 Gig of memory. I was working, slowly, on > configuring apache and web pages. Mo

Re: Small pauses with a trunk(4) interface

2006-02-01 Thread Reyk Floeter
hi, On Wed, Feb 01, 2006 at 06:42:47PM +0400, Bruno Carnazzi wrote: > I use OpenBSD/i386 3.8 with GENERIC.MP. trunk(4) support in OpenBSD 3.8 was quite new and there were some bugfixes and improvements during the last development cycle. these fixes, like trunkproto failover and multicast support

Re: RAIDframe question

2006-02-01 Thread Joachim Schipper
On Wed, Feb 01, 2006 at 11:02:22AM -0500, Peter Fraser wrote: > I had a disk drive fail while running RAIDframe. > The system did not survive the failure. Even worse > there was data loss. > > The system was to be my new web server. The system > had 1 Gig of memory. I was working, slowly, on > co

Re: Making FAT play nice

2006-02-01 Thread Alexander Hall
Nick Guenther wrote: I dual boot OpenBSD with Windows and have a third partition for data which is mounted on /home. The data partition is FAT32 since that's the only type that both OSes support well. I am not rally happy to use FAT partitions from OBSD. There has been recently fixed issues, a

Re: mediawiki - php - apache

2006-02-01 Thread Stuart Henderson
On 2006/02/01 09:54, Jack Woehr wrote: > I'm confused ... I built /usr/ports/www/mediawiki but php (built > automagically > as a pre-req) doesn't seem to work in the server. Do I have to change the > default OBSD 3.8 web server config (or chrooting) to run PHP stuff? Did you enable it with 'phpxs

Re: RAIDframe question

2006-02-01 Thread Greg Oster
Peter writes: > > I tried unsuccessfully using the same procedure to set up two disks (sd0 > and sd1) attached to a QLogic FibreChannel controller (isp driver). I > probably don't have the correct terminology but upon startup the boot code > could not be found (would not get beyond the point where

Re: MAC filter Bridge

2006-02-01 Thread Badbanchi Hossein
>> Don't you already have problems if you have 20,000 nodes communicating on >> one flat broadcast domain already? OK. I was exaggerating! I have a little more than 2100 MACs. But even with this number, a sequential search doesn't seem to be acceptable. Regards, Amir

Re: MAC filter Bridge

2006-02-01 Thread Badbanchi Hossein
Hi, >> An alternative approach might be to turn off learning and discovery on the >> interface and add MAC addresses that are allowed to communicate statically. As a matter of fact I can add MACs supposed to be reached from each interface of the bridge, at the same time I update Bridge Rules. But t

mediawiki - php - apache

2006-02-01 Thread Jack Woehr
I'm confused ... I built /usr/ports/www/mediawiki but php (built automagically as a pre-req) doesn't seem to work in the server. Do I have to change the default OBSD 3.8 web server config (or chrooting) to run PHP stuff? -- Jack J. Woehr # "Men never do evil so completely and PO

Re: clamshell ibook trackpad

2006-02-01 Thread linc
Hi Nick, Thanks for responding. Unfortunately I am only using base system window managers (twm and fvwm). I believe this is a new feature in the wsmouse or ams layer. But I haven't found any docco yet. Linc On Wed, 2006-02-01 at 00:25 -0500, Nick Guenther wrote: > On 1/30/06, LINCOLN RUTLEDGE <

Re: RAIDframe question

2006-02-01 Thread Peter Fraser
I had a disk drive fail while running RAIDframe. The system did not survive the failure. Even worse there was data loss. The system was to be my new web server. The system had 1 Gig of memory. I was working, slowly, on configuring apache and web pages. Moving to a chroot'ed environment was none t

Re: MAC filter Bridge

2006-02-01 Thread Camiel Dobbelaar
On Wed, 1 Feb 2006, Badbanchi Hossein wrote: > What is bothering me is the sentence: > Rules are processed in the order in which they were added to the interface, > and the first rule matched takes the action ... > > Does this really mean that no hash function is used? I mean if I have 2 > MAC

Re: RAIDframe question

2006-02-01 Thread Nick Bender
> Side question: > I tried unsuccessfully using the same procedure to set up two disks (sd0 > and sd1) attached to a QLogic FibreChannel controller (isp driver). I > probably don't have the correct terminology but upon startup the boot code > could not be found (would not get beyond the point wher

Re: MAC filter Bridge

2006-02-01 Thread Spruell, Darren-Perot
From: [EMAIL PROTECTED] > What is bothering me is the sentence: > Rules are processed in the order in which they were added to > the interface, > and the first rule matched takes the action ... > > Does this really mean that no hash function is used? I mean > if I have 2 > MAC Addresses and

Re: RAIDframe question

2006-02-01 Thread Greg Oster
=?ISO-8859-1?Q?H=E5kan_Olsson?= writes: > On 1 feb 2006, at 08.38, Jurjen Oskam wrote: > > > On Wed, Feb 01, 2006 at 01:19:58AM -0500, Peter wrote: > > > >> raid0: Device already configured! > >> "ioctl (RAIDFRAME_CONFIGURE) failed" > >> > >> Can anyone lend a hand in this important matter? > > >

MAC filter Bridge

2006-02-01 Thread Badbanchi Hossein
Hi, I am trying to implement a MAC filter, based on OpenBSD Bridging facilities. One can read in BRCONFIG(8) man page: rule [rulespec] Add a filtering rule to an interface. Rules have a similar syn- tax to those in pf.conf(5). Rules can be used to selectively

Re: 3.9beta on macppc snapshot 30-01-06: no keyboard

2006-02-01 Thread Martin Reindl
Antoine Jacoutot <[EMAIL PROTECTED]> wrote: > On Tue, 31 Jan 2006, Pete Vickers wrote: > > > on my powerbook5,2 (G4 15"), runs through booting fine, but at the > > install,upgrade,shell prompt, the keyboard doesn't work ( but still > > lights the LED) > > Hi. > > I've been experiencing the s

Re: RAIDframe question

2006-02-01 Thread Joachim Schipper
On Wed, Feb 01, 2006 at 08:45:42AM -0500, Peter wrote: > --- Ho?=kan Olsson <[EMAIL PROTECTED]> wrote: > > > On 1 feb 2006, at 08.38, Jurjen Oskam wrote: > > > > > On Wed, Feb 01, 2006 at 01:19:58AM -0500, Peter wrote: > > > > > >> raid0: Device already configured! > > >> "ioctl (RAIDFRAME_CONFIG

Re: how to manage big pf-rulesets in a comfortable way

2006-02-01 Thread Joachim Schipper
On Wed, Feb 01, 2006 at 12:28:33PM +0100, Joerg Streckfuss wrote: > Hi list, > > i need some hints to manage a pf ruleset of about more than 150 rules. > > In my company we want to design a firewall-cluster with about > 10 interfaces. We plan to use two dell 1850 with two DFE-580TX > quad port NI

Re: SATA support in 3.8

2006-02-01 Thread David Wilk
thank you so much for your valuable input. I've found personal experience to trump just about any other information, especially the 'official docs'. I've decided to stick with PATA for now, knowing that it's stable, reliable and really not much slower than SATA for the drives I'm looking at. tha

Re: smtp-vilter + spam filtering question

2006-02-01 Thread Paul Pruett
FYI, the version on the stable port is old, it is upto smtp-vilter-1.2.5 http://www.etc.msys.ch/software/smtp-vilter/ I was using monit to restart the port milter-spamd when it would die about one or two times a week, I downloaded 1.2.4 and did the make install - went non standard and set it to

Re: RAIDframe question

2006-02-01 Thread Peter
--- Ho?=kan Olsson <[EMAIL PROTECTED]> wrote: > On 1 feb 2006, at 08.38, Jurjen Oskam wrote: > > > On Wed, Feb 01, 2006 at 01:19:58AM -0500, Peter wrote: > > > >> raid0: Device already configured! > >> "ioctl (RAIDFRAME_CONFIGURE) failed" > >> > >> Can anyone lend a hand in this important matter?

Small pauses with a trunk(4) interface

2006-02-01 Thread Bruno Carnazzi
Hi all, I use OpenBSD/i386 3.8 with GENERIC.MP. I use a trunk interface based on 2 physical devices as you can see here : $ ifconfig -a lo0: flags=8049 mtu 33224 groups: lo inet 127.0.0.1 netmask 0xff00 inet6 ::1 prefixlen 128 inet6 fe80::1%lo0 prefixlen 64 s

Re: OpenBSD PF IP Fragment Remote Denial Of Service

2006-02-01 Thread Rob W
MK wrote: So my question is simple, is there any project which delas in all security problems in OpenBSD? Or is it really necessary to check misc list and other lists, many webpages every day? You have to read source-changes or view the cvs logs. It is apparently only in commit comments such

Votre compte ACC�S D

2006-02-01 Thread [EMAIL PROTECTED]
[IMAGE] Chhr Client , Nos systhmes indiques que votre compte ACCHS D ne sera plus accessible a compter du : 2 Fivrier 2006 pour riactiver l'acchs a votre compte ACCHS D veuillez tout simplement consultez votre relevi mensuel en ligne . Veuillez prendre note que si vous ne consultez pas votre rel

Re: RAIDframe question

2006-02-01 Thread Håkan Olsson
On 1 feb 2006, at 08.38, Jurjen Oskam wrote: On Wed, Feb 01, 2006 at 01:19:58AM -0500, Peter wrote: raid0: Device already configured! "ioctl (RAIDFRAME_CONFIGURE) failed" Can anyone lend a hand in this important matter? Let me guess (since you didn't post any configuration): you enabled RAI

Re: Pf que for voip

2006-02-01 Thread shanejp
Hi Alex, Quoting Alex Stamatis <[EMAIL PROTECTED]>: > Now I need an advise from you who know it very well and especially the pf (i > am a total noob on pf). I bought a voip device today. And i want the router > no matter what the network usage is and packets to always give full priority > and the

how to manage big pf-rulesets in a comfortable way

2006-02-01 Thread Joerg Streckfuss
Hi list, i need some hints to manage a pf ruleset of about more than 150 rules. In my company we want to design a firewall-cluster with about 10 interfaces. We plan to use two dell 1850 with two DFE-580TX quad port NIC's. Each interface points to a separate subnet. The cluster should use carp for

Re: RAIDframe question

2006-02-01 Thread Joachim Schipper
On Wed, Feb 01, 2006 at 01:19:58AM -0500, Peter wrote: > I am running 3.8-stable with RAIDframe RAID-1 and two IDE disks (wd0 > and wd1). Everything thing seems to work (parity is good) but when I > boot up I get two messages that worry me: > > raid0: Device already configured! > "ioctl (RAIDFRAM

Votre message à la liste linux est en attente d'approbation

2006-02-01 Thread linux-bounces
Votre courrier ` 'linux' dont l'objet est *FILENAME* MAIL SYSTEM ERROR - RETURNED MAIL est en attente jusqu'` ce que le modirateur de la liste puisse le consulter pour approbation. La raison de cette mise en attente : Envoi par un non-abonni sur une liste reservie aux abonnis L

Re: Fw: smp kernel

2006-02-01 Thread Joachim Schipper
On Wed, Feb 01, 2006 at 02:00:28AM +0200, [EMAIL PROTECTED] wrote: > Begin forwarded message: > > Date: Tue, 31 Jan 2006 23:19:01 +0200 > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > Subject: smp kernel > > > hi! > > i am using OpenBSD_3_8 stable and i have intel-1386-pc with intel-p4-ht s

Re: OpenBSD PF IP Fragment Remote Denial Of Service

2006-02-01 Thread Joachim Schipper
On Wed, Feb 01, 2006 at 10:45:39AM +0100, MK wrote: > Hello everybody > > I undersatnd that this issue doesn't affect many people even though I'd > like to know about the problem. > Is there any mailing list related to newly discovered security problems in > OpenBSD? I know only about security-a

Re: OpenBSD PF IP Fragment Remote Denial Of Service

2006-02-01 Thread MK
Hello everybody I undersatnd that this issue doesn't affect many people even though I'd like to know about the problem. Is there any mailing list related to newly discovered security problems in OpenBSD? I know only about security-announce list but as far as I know there are only messages rela

Re: Intalling freetype error - Size does not match for /usr/ports/distfiles/freetype-1.3.1.tar.gz

2006-02-01 Thread steven mestdagh
On Wed, Feb 01, 2006 at 10:28:37AM +, Pavel M. Ivanchev wrote: > Hi there! > I am trying to install freetype on OpenBSD 3.8 and it crashes with the > error below. As i can se there is any problem with the file size,i > haven't met such things until now. > I downloaded the port "freetype" for

Re: OpenBSD PF IP Fragment Remote Denial Of Service

2006-02-01 Thread Dries Schellekens
Subcommander l0r3zz wrote: This came across security focus and I haven't seen it mentioned here. THey claim 3.8 is vulnerable, anybody know anything? This has been fixed in -current, 3.8-stable and 3.7-stable. This crash only works if you have 'scrub fragment crop' or 'scrub fragment drop-ov