How to remove group1 and group14 from OpenSSH..

2007-01-03 Thread Robert Waite
Hello everyone.. I am fairly new to the patching format.. so I just decided to post a basic info about how to remove group1 and group14 diffie key exchange in OpenSSH. I know that they are listed as required in RFC 4253 but I don't want a client to have the choice to use a 1024 bit prime for the k

Re: problem with gcc

2007-01-03 Thread Peter Philipp
On Wed, Jan 03, 2007 at 05:18:13PM -0700, Theo de Raadt wrote: > > I have a slight problem trying to compile a program on an i386 box that has > > 3.9 installed. The box until recently ran 4.0-beta but I installed the > > base packages as well as comp.tgz from the 3.9 on it. It now runs on a 3.9

Re: .forward for procmail

2007-01-03 Thread Andrew Dalgleish
On Wed, Jan 03, 2007 at 07:47:12PM -0500, Exal de jesus Garcia Carrillo wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Hi list, does anyone knows which is the apropiate way for a > .forward on openbsd?, I have tryed with "|IFS=' ' && exec /usr/bin/procmail > -f- || exit 75 #exal" b

Re: OT Was: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Rico Secada
On Wed, 03 Jan 2007 16:48:05 -0700 Theo de Raadt <[EMAIL PROTECTED]> wrote: > It's true. What all the people say about our mailing > lists is exactly true. There really are about 30-40 people here who > carry out an agenda of hate, quite successfully. Couldn't have been said better!!

Re: .forward for procmail

2007-01-03 Thread Marco S Hyman
Exal de jesus Garcia Carrillo writes: > .forward on openbsd?, I have tryed with "|IFS=' ' && exec /usr/bin/procmail > -f- || exit 75 #exal" but doesn't work. /usr/bin/procmail? The port/package installs procmail in /usr/local/bin // marc

OBSD: OS Of The Rad

2007-01-03 Thread Karl R. Balsmeier
I started with OBSD 2.5, reading a book on making an invisible firewall. I remember because my associate flew up from Orange County CA to SF to show me and my friend how to install openbsd on the quick (basically get through fdisk and cylinder settings). Didn't even order pizza, we were serio

I-O Data LANDISK CHEAP serial cable Not: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Diana Eichert
( I have a sick sense of humor) I want to pass on the cheapest and coolest method I've found to hook up the serial port on a LANDISK box PLUS my original setup. I've posted both methods. The original method: I have a Plextor PX-EH25L sitting in the office which I ordered the day I saw mickey's p

.forward for procmail

2007-01-03 Thread Exal de jesus Garcia Carrillo
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi list, does anyone knows which is the apropiate way for a .forward on openbsd?, I have tryed with "|IFS=' ' && exec /usr/bin/procmail -f- || exit 75 #exal" but doesn't work. anyone?, thanks. . iD8DBQFFnE6VoZmxoVJRtGIRAtQ5AJ9IkQ7fjc5fxUqRrZj/OFF

Re: OT Was: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Theo de Raadt
> Get real, meta postings (postings about other postings) also build > this misc community. You cannot expect a channel to carry 100% data > (relevance), What should we insist on? How about 20%? Or can we aim higher? Nope. We can't aim higher when there are people like you, full of hate, and

Re: OT Was: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread chefren
Get real, meta postings (postings about other postings) also build this misc community. You cannot expect a channel to carry 100% data (relevance), there is always some kind of sync (messages that show all kinds of "borders") necessary. This list is definitely not hurt by messages like these o

Re: Odd OpenVPN/PF issue

2007-01-03 Thread Jim O'Gorman
Just to follow up to myself here - I am more and more convinced this is me screwing up my rules some how. I just can't see where I am making the mistake. Here is what I did: on the tun interface: 18:28:54.271507 10.255.253.37.49359 > 10.10.80.116.135: S 1541251005:1541251005(0) win 8192 (DF) 18

Re: "mindset of OpenBSD users" Was: OT

2007-01-03 Thread Greg Thomas
On 1/3/07, Karl R. Balsmeier <[EMAIL PROTECTED]> wrote: The misc list was the most helpful place to learn. Imagine, asking Jason Wright and Angeleos Keromytis and Daniel Hartmeier direct questions about 'bridge' (jason wrote it), Encryption (angeleos was the expert in it), or Packet Filtering (

Re: "mindset of OpenBSD users" Was: OT

2007-01-03 Thread Karl R. Balsmeier
Diana Eichert wrote: On Wed, 03 Jan 2007 21:07:16 +0100, "Patrick Useldinger" SNIP True. I'm currently evaluating OpenBSD and I am trying to understand the mindset of OpenBSD users by reading the newsgroups. And this thread *is* strange. Patrick, I guess I don't understand why someone

Re: problem with gcc

2007-01-03 Thread Theo de Raadt
> I have a slight problem trying to compile a program on an i386 box that has > 3.9 installed. The box until recently ran 4.0-beta but I installed the > base packages as well as comp.tgz from the 3.9 on it. It now runs on a 3.9 > kernel as well. However I have this problem, when I compile I get

problem with gcc

2007-01-03 Thread Peter Philipp
Hi misc@, I have a slight problem trying to compile a program on an i386 box that has 3.9 installed. The box until recently ran 4.0-beta but I installed the base packages as well as comp.tgz from the 3.9 on it. It now runs on a 3.9 kernel as well. However I have this problem, when I compile I

Re: OT Was: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Theo de Raadt
And if anyone wanted my opinion, I am fine with the occasional (but rare) job posting which is polite, to the point, and relevant to OpenBSD. But I am not OK with all the whiners and lamers who followed up on that posting with trash talk. That's about 35 postings so far, it looks like. And I fee

Re: OT Was: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Diana Eichert
On Wed, 3 Jan 2007, Christopher Snell wrote: > Hi All, > > I apologize if my posting offended anyone. That really was not my > intent. I *do* read this list regularly, attend OpenBSD-related SNIP > Chris Nah, no apology needed, except perhaps an apology from myself, since I never intended this

Re: OT Was: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Christopher Snell
On 1/3/07, Kenny Mann <[EMAIL PROTECTED]> wrote: His response was a bit rude, however at least the courtesy was made to attempt a reading on the rules page. He made the best decision he could given the information he had. Hi All, I apologize if my posting offended anyone. That really was not

Strange VPN problem

2007-01-03 Thread Toni Mueller
Hello, I have a very odd problem with a VPN machine. The situation: Net 1 --- Host 1 - Internet - Host 2 --- Net 2 \ +- Host 3 --- Net 3 The whole thing was working since the days of 3.5 or so with ISAKMPD and X.509 certificate

Re: OT Was: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Daniel Ouellet
Peace, and to move on, I don't know if that's any good or not or even needed really. But like many wanted "How To" saying it would be much better, however the results are not overwhelming, but peace came from it anyway. Here is a place for your job(s) offer instead of your jobs@, etc if you th

Re: OT Was: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Marc Espie
For once, I'm going to say this from my position as an OpenBSD developer who has sunk countless hours into writing code for this OS. It's obvious a lot of wankers around here have nothing better to do than start threads based on that job offer. I am perfectly happy with someone posting a job of

"mindset of OpenBSD users" Was: OT

2007-01-03 Thread Diana Eichert
On Wed, 03 Jan 2007 21:07:16 +0100, "Patrick Useldinger" SNIP > True. I'm currently evaluating OpenBSD and I am trying to understand the > mindset of OpenBSD users by reading the newsgroups. And this thread *is* > strange. Patrick, I guess I don't understand why someone would need to "understand t

Re: OT Was: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Eric Furman
On Wed, 03 Jan 2007 21:07:16 +0100, "Patrick Useldinger" <[EMAIL PROTECTED]> said: > Jack J. Woehr wrote: > > The real problem is that when outsiders stumble into our newsgroups, > > we shriek, "Ni! Ni!" and > > demand another shrubbery. Maybe we should just chill out a bit. > > True. I'm curren

Re: OT Was: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Adam
Kenny Mann <[EMAIL PROTECTED]> wrote: > His response was a bit rude, however at least the courtesy was made to > attempt a reading on the rules page. He made the best decision he could > given the information he had. No, he posted to the openbsd "user questions and answers" list something that

Re: OT Was: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Nick Guenther
On 1/3/07, Patrick Useldinger <[EMAIL PROTECTED]> wrote: Jack J. Woehr wrote: > The real problem is that when outsiders stumble into our newsgroups, > we shriek, "Ni! Ni!" and > demand another shrubbery. Maybe we should just chill out a bit. True. I'm currently evaluating OpenBSD and I am trying

Re: OT Was: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread bofh
On 1/3/07, Patrick Useldinger <[EMAIL PROTECTED]> wrote: Jack J. Woehr wrote: > The real problem is that when outsiders stumble into our newsgroups, > we shriek, "Ni! Ni!" and > demand another shrubbery. Maybe we should just chill out a bit. True. I'm currently evaluating OpenBSD and I am trying

Re: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread bofh
On 1/3/07, Tom Bombadil <[EMAIL PROTECTED]> wrote: > Here, here! I agree with Diana! Now go away with your silly questions! > Why would anyone want to work for you? E... unemployement? *pshaw* I laugh at your unemployment! Nothing builds character like hard work and adversity! <- he who

Re: OT Was: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Marc Balmer
* Patrick Useldinger wrote: > Jack J. Woehr wrote: > >The real problem is that when outsiders stumble into our newsgroups, > >we shriek, "Ni! Ni!" and > >demand another shrubbery. Maybe we should just chill out a bit. > > True. I'm currently evaluating OpenBSD and I am trying to understand the

Re: Wondering about usage of /usr/bin v /usr/local/bin...

2007-01-03 Thread Ingo Schwarze
Hi Dave, Dave Ewart wrote on Wed, Jan 03, 2007 at 01:32:04PM +: > I'm fairly new to OpenBSD right now and at the stage where I'm > trying to understand the differences between what I've been used > to in the past (typically Debian) and OpenBSD. Welcome. :-) > One thing I'm curious about is

Re: OT Was: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Patrick Useldinger
Jack J. Woehr wrote: The real problem is that when outsiders stumble into our newsgroups, we shriek, "Ni! Ni!" and demand another shrubbery. Maybe we should just chill out a bit. True. I'm currently evaluating OpenBSD and I am trying to understand the mindset of OpenBSD users by reading the

Re: OT Was: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Jack J. Woehr
The real problem is that when outsiders stumble into our newsgroups, we shriek, "Ni! Ni!" and demand another shrubbery. Maybe we should just chill out a bit. On Jan 3, 2007, at 12:27 PM, Kenny Mann wrote: > Adam wrote: >> Dan Farrell <[EMAIL PROTECTED]> wrote: >> >> >>> IMHO allowing employers

Re: OT Was: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Jason Dixon
On Jan 3, 2007, at 2:27 PM, Kenny Mann wrote: I'm failing to understand why this is such a big deal... I must be missing something. Some people enjoy patronizing others. It makes them feel better about themselves. -- Jason Dixon DixonGroup Consulting http://www.dixongroup.net

Re: Carp failover times

2007-01-03 Thread Jason Dixon
On Jan 3, 2007, at 2:04 PM, Bob DeBolt wrote: OpenBSD 4.0 stable Greets What are some of the failover times people are getting using carp / pfsync when the plug gets pulled from one of the units. I've generally seen 2-3 seconds for the initial failover. Recovery is virtually instantaneo

Re: OT Was: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Kenny Mann
Adam wrote: Dan Farrell <[EMAIL PROTECTED]> wrote: IMHO allowing employers to seek out OBSD admins for employment helps further encourage OBSD use. misc@ is not for encouraging openbsd use, that's what advocacy@ is for. "Promoting the use of OpenBSD. Non-technical discussions in /m

Re: OT Was: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Dan Farrell
Adam, Allowing the infrequent 'non-poop' job offering without an insane thread like this one is inadvertent encouragement, not tacit advocacy. It supports a friendlier environment than, let's say, you would provide. Heaven forbid this list ever become even slightly friendly, we just might all spo

Re: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Tom Bombadil
> Here, here! I agree with Diana! Now go away with your silly questions! > Why would anyone want to work for you? E... unemployement?

Odd OpenVPN/PF issue

2007-01-03 Thread Jim O'Gorman
I am having a issue that I am having some issues tracking down, and could use a good shove in the right direction. On OBSD 3.9 with PF and OpenVPN 2.0.5 I am getting some odd traffic. OpenVPN runs over a tun interface, tcpdump is showing me: 11:33:41.980730 10.255.253.37.49664 > 10.10.80.116.135

Carp failover times

2007-01-03 Thread Bob DeBolt
OpenBSD 4.0 stable Greets What are some of the failover times people are getting using carp / pfsync when the plug gets pulled from one of the units. BobD

Re: Mac Mini (intel) status

2007-01-03 Thread Tom Cosgrove
(I'm posting this for the archives.) Thanks to a donation from Steven Fettig we have fixed the problem with using the keyboard at the boot> prompt. This is in CVS, and in the latest snapshots. The keyboard does work under OpenBSD (including the installer), as long as ACPI is used. The keyboard

Re: OT Was: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Adam
Dan Farrell <[EMAIL PROTECTED]> wrote: > IMHO allowing employers to seek out OBSD admins for employment helps > further encourage OBSD use. misc@ is not for encouraging openbsd use, that's what advocacy@ is for. > So why can't there be a jobs@ or something similar? Is there a > philosophical re

Re: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Timothy K Ewing
Tom has a point and it's too bad more people don't take his view. I've read this list for a number of years and it always amazes me when people reply and make a big deal over it as opposed to simply ignoring it or using the delete key. While I believe that replies are necessary with repeated i

Re: reverse http proxy on OpenBSD (or not)?

2007-01-03 Thread [EMAIL PROTECTED]
i'm using openbsd with apache and mod_proxy over 4 years in several appications as reverseproxy and it works fine. (owa, several asp applications and normal websites). if you need help, you can contact me. Thomas On Wednesday 03 January 2007 14:45, Joachim Schipper wrote: > On Wed, Jan 03, 2007

Re: [OpenSSH] an option for setting the login name?

2007-01-03 Thread Igor Sobrado
In message <[EMAIL PROTECTED]>, Stuart Henderson writes: > On 2007/01/03 16:37, Igor Sobrado wrote: > > It is certainly better using the "sftp [EMAIL PROTECTED]" syntax, but > > sometimes > > I miss the "user@" part on the command line when the login name on the > > remote system is different to t

Re: [OpenSSH] an option for setting the login name?

2007-01-03 Thread Stuart Henderson
On 2007/01/03 16:37, Igor Sobrado wrote: > It is certainly better using the "sftp [EMAIL PROTECTED]" syntax, but > sometimes > I miss the "user@" part on the command line when the login name on the > remote system is different to the one I am using locally. How about this instead? $ cat >> ~/.ss

Re: reverse http proxy on OpenBSD (or not)?

2007-01-03 Thread Marc Peters
Soner Tari schrieb: Hi All, On my network, ASP sites are served on a Microsoft IIS, and PHP sites are on OpenBSD Apache, and there is only one Internet connection with a single IP (all DNS records point to this IP). Since these web servers run on different hardware/IPs, I need to distribute http

Re: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread chefren
On 01/03/07 01:22, Diana Eichert wrote: On Tue, 2 Jan 2007, Christopher Snell wrote: And who appointed you list manager? My post was permitted based on my reading of the rules in http://www.openbsd.org/mail.html. Chrris Same person who appoints people like you to respond the way you do.

[OpenSSH] an option for setting the login name?

2007-01-03 Thread Igor Sobrado
Hello. I would like to ask if there are plans to implement the "-l" option available in ssh(1) on the secure file transfer program sftp(1). It is certainly better using the "sftp [EMAIL PROTECTED]" syntax, but sometimes I miss the "user@" part on the command line when the login name on the remote

Re: reverse http proxy on OpenBSD (or not)?

2007-01-03 Thread Soner Tari
Thanks for all the replies, public and private. They've provided plenty to work on.

Re: reverse http proxy on OpenBSD (or not)?

2007-01-03 Thread Steve Williams
Soner Tari wrote: Hi All, On my network, ASP sites are served on a Microsoft IIS, and PHP sites are on OpenBSD Apache, and there is only one Internet connection with a single IP (all DNS records point to this IP). Since these web servers run on different hardware/IPs, I need to distribute http r

Re: OT Was: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Peter Landry
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf > Of Diana Eichert > Sent: Wednesday, January 03, 2007 9:03 AM > To: OpenBSD > Subject: OT Was: Wanted: OpenBSD Systems Administrator > > On Tue, 2 Jan 2007, Jack J. Woehr wrote: > > > Tom Bombadil wrote: >

Re: Wondering about usage of /usr/bin v /usr/local/bin...

2007-01-03 Thread Darren Spruell
On 1/3/07, Dave Ewart <[EMAIL PROTECTED]> wrote: One thing I'm curious about is managing locally-maintained applications. Under Debian, anything that was core to the system went into /usr/bin, as did any Debian-supplied packages. In Debian, the location /usr/local is, by policy, never touched by

Re: reverse http proxy on OpenBSD (or not)?

2007-01-03 Thread Craig Skinner
On Wed, Jan 03, 2007 at 03:11:31PM +0200, Soner Tari wrote: > > I could not find another reverse proxy package among OpenBSD > ports/packages (Q3: is there any other reverse proxy package?). > For my simple setup, vanilla squid does it. $ pkg_info | fgrep squid squid-2.5.STABLE13 WWW and FTP p

Re: bridge ip

2007-01-03 Thread Claudio Jeker
On Wed, Jan 03, 2007 at 03:28:30PM +0100, Chris C. wrote: > Hi > > I've got a ne2000 based Card which shows up as ne1 (BNC) and ne3 (RJ45). > Unter linux I can assign an ip address to a bridge: > > brctl show > bridge name bridge id STP enabled interfaces > br0 8000.

Re: OT Was: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Dan Farrell
IMHO allowing employers to seek out OBSD admins for employment helps further encourage OBSD use. Simply telling employers that they aren't welcome fosters a negative attitude that, to me, doesn't encourage OBSD use. But I could see the fine line of 'head-hunter poop' being crossed way too easily, o

bridge ip

2007-01-03 Thread Chris C.
Hi I've got a ne2000 based Card which shows up as ne1 (BNC) and ne3 (RJ45). Unter linux I can assign an ip address to a bridge: brctl show bridge name bridge id STP enabled interfaces br0 8000.0016b6a3ee35 no vlan0

Re: reverse http proxy on OpenBSD (or not)?

2007-01-03 Thread Stuart Henderson
On 2007/01/03 15:11, Soner Tari wrote: > On my network, ASP sites are served on a Microsoft IIS, and PHP sites > are on OpenBSD Apache, and there is only one Internet connection with a > single IP (all DNS records point to this IP). Since these web servers > run on different hardware/IPs, I need to

OT Was: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Diana Eichert
On Tue, 2 Jan 2007, Jack J. Woehr wrote: > Tom Bombadil wrote: > > The just guy sent one single e-mail asking if a bsd user wanted a job, > > which I bet many among us might be interested. > > I've certainly heard from consulting customers who got my info from the > consultants page at OpenBSD ...

Re: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Luca Corti
On Tue, 2007-01-02 at 20:03 -0700, Jack J. Woehr wrote: > postings and headhunter poop of course ... Why should we chase away > employers > looking for experts in our slightly arcane and recondite OBSD environment? What about a jobs@ mailing-list? ciao Luca

Re: reverse http proxy on OpenBSD (or not)?

2007-01-03 Thread Joachim Schipper
On Wed, Jan 03, 2007 at 03:11:31PM +0200, Soner Tari wrote: > Hi All, > > On my network, ASP sites are served on a Microsoft IIS, and PHP sites > are on OpenBSD Apache, and there is only one Internet connection with a > single IP (all DNS records point to this IP). Since these web servers > run on

Wondering about usage of /usr/bin v /usr/local/bin...

2007-01-03 Thread Dave Ewart
I'm fairly new to OpenBSD right now and at the stage where I'm trying to understand the differences between what I've been used to in the past (typically Debian) and OpenBSD. One thing I'm curious about is managing locally-maintained applications. Under Debian, anything that was core to the system

Re: reverse http proxy on OpenBSD (or not)?

2007-01-03 Thread RedShift
Soner Tari wrote: Hi All, On my network, ASP sites are served on a Microsoft IIS, and PHP sites are on OpenBSD Apache, and there is only one Internet connection with a single IP (all DNS records point to this IP). Since these web servers run on different hardware/IPs, I need to distribute http r

reverse http proxy on OpenBSD (or not)?

2007-01-03 Thread Soner Tari
Hi All, On my network, ASP sites are served on a Microsoft IIS, and PHP sites are on OpenBSD Apache, and there is only one Internet connection with a single IP (all DNS records point to this IP). Since these web servers run on different hardware/IPs, I need to distribute http requests based on the

Re: Create New Ramdisk

2007-01-03 Thread Joachim Schipper
On Wed, Jan 03, 2007 at 12:15:51AM +, Ray wrote: > Hello all, > > I would like to build a new bsd.rd that is used to boot over pxe and install > a > system. > > To start, I need to test building the bsd.rd without any changes to files > such > as install.sh, etc... > > If I run Make, t

Re: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Rod.. Whitworth
On Wed, 3 Jan 2007 02:37:34 -0800, J.C. Roberts wrote: >On Tuesday 02 January 2007 13:09, Christopher Snell wrote: >> Screening Questions: >> >> 1. Based on the following statements (props to Lewis Carroll), answer >> the following questions: >> >> a. What can you logically conclude from these sta

Re: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread John Gould
On Wed, 3 Jan 2007, J.C. Roberts wrote: On Tuesday 02 January 2007 13:09, Christopher Snell wrote: Screening Questions: 1. Based on the following statements (props to Lewis Carroll), answer the following questions: a. What can you logically conclude from these statements? b. Explain how you

Re: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread Craig Skinner
On Wed, Jan 03, 2007 at 02:37:34AM -0800, J.C. Roberts wrote: > the same time, I see nothing wrong with the occasional job posting to FWIW, I agree to short posts. As this list is subscibed to globally, please state if you expect a person to appear in the flesh, and therefore where the job is lo

Re: Wanted: OpenBSD Systems Administrator

2007-01-03 Thread J.C. Roberts
On Tuesday 02 January 2007 13:09, Christopher Snell wrote: > Screening Questions: > > 1. Based on the following statements (props to Lewis Carroll), answer > the following questions: > > a. What can you logically conclude from these statements? > > b. Explain how you came to this conclusion (bonus