[EMAIL PROTECTED] wrote on 15/03/2007 19:26:48:
> * [EMAIL PROTECTED] <[EMAIL PROTECTED]>
> > Trying to dump a filesystem with nodump flags on some folders results
in
> > these folders been dumped anyway, even on higher level dump and even
if I
> > specify -h flag to dump.
> Your correct, t
On Fri, 16 Mar 2007 18:03:02 +1100
Sunnz <[EMAIL PROTECTED]> wrote:
> If I tell you that I'll give you fries as they become available what
> would you think I am saying?
Unless it's your job to give them to me now and I have paid you to do
so I'd expect to get them whenever you have them and feel
It is not just an implication, that's exactly what it said:
"receives OpenBSD security advisories and pointers to security patches
as they become available."
If I tell you that I'll give you fries as they become available what
would you think I am saying?
It is really simple English and as ther
* tony sarendal <[EMAIL PROTECTED]> [2007-03-16 06:03:49]:
> http://www.openbsd.org/mail.html
> ---
> *security-announce* Security announcements. This low volume list receives
> OpenBSD security advisories and pointers to security patches as they become
> available.---Martin and Karl have valid po
On Fri, 16 Mar 2007 06:03:49 +
"tony sarendal" <[EMAIL PROTECTED]> wrote:
> http://www.openbsd.org/mail.html
> ---
> *security-announce* Security announcements. This low volume list receives
> OpenBSD security advisories and pointers to security patches as they become
> available.---Martin and
http://www.openbsd.org/mail.html
---
*security-announce* Security announcements. This low volume list receives
OpenBSD security advisories and pointers to security patches as they become
available.---Martin and Karl have valid points in their initial emails.
/Tony S
--
Tony Sarendal - [EMAIL PRO
I apologise to the list for responding to
the flames. I made my point and went beyond
into unproductiveness.
I'm sorry and I'll stop now.
Karl <[EMAIL PROTECTED]>
Free Software: "You don't pay back, you pay forward."
-- Robert A. Heinlein
On 03/16/2007 12:40:57 AM, Daniel Ouellet wrote:
And what are the developers doing with their time? They give it to
you and you have the got to complain on top of it!
So next time I shouldn't post when I see a problem?
That'll help, not.
Karl <[EMAIL PROTECTED]>
Free Software: "You don't pa
Hi "x x",
> I have it installed, the sets and that, but no ports or anything.
Okay, that's clear then. You DON'T install snapshot packages on your
brand new 4.0 installation.
IMHO, you need to be comfy with 4.0 release and 4.0 packages before
attempting to do anything which involves -current or
* Karl O. Pinc <[EMAIL PROTECTED]> [2007-03-16 04:23:00]:
> No, but if security errata announcements arn't delivered
> in a fashion that delivers them to a human then they
> do no good. I should not be expected to peruse the
> misc@openbsd.org list to find errata announcements.
> OpenBSD says ann
On 03/15/2007 11:55:44 PM, Kian Mohageri wrote:
Security isn't about receiving notifications to your Inbox in a timely
fashion. It is about being proactive yourself. You should be the one
taking measures to secure your systems, and you should be the one
ACTIVELY
LOOKING for problems. Watching
Karl O. Pinc wrote:
> On 03/15/2007 11:29:22 PM, Theo de Raadt wrote:
>
>> I looked for your name on the donations list. I don't see it.
>
> I only buy CDs and stuff occasionally, and generally
> invest time in what I hope are productive ways.
>
like bitching about stuff that you, as a "security
On 03/16/2007 12:09:46 AM, Theo de Raadt wrote:
>> I looked for your name on the donations list. I don't see it.
>
>I only buy CDs and stuff occasionally, and generally
>invest time in what I hope are productive ways.
I think you bought one CD.
I think I've bought 4 over the last 5 years.
I w
Karl O. Pinc wrote:
On 03/15/2007 11:29:22 PM, Theo de Raadt wrote:
I looked for your name on the donations list. I don't see it.
I only buy CDs and stuff occasionally, and generally
invest time in what I hope are productive ways.
And what are the developers doing with their time? They giv
On Mar 16, 2007, at 1:09 AM, Theo de Raadt wrote:
I looked for your name on the donations list. I don't see it.
I only buy CDs and stuff occasionally, and generally
invest time in what I hope are productive ways.
I think you bought one CD.
Now you spout and whine. Is that a Robert Heinlei
>> I looked for your name on the donations list. I don't see it.
>
>I only buy CDs and stuff occasionally, and generally
>invest time in what I hope are productive ways.
I think you bought one CD.
Now you spout and whine. Is that a Robert Heinlein philosophy?
>How much do I need to donate to k
On 03/15/2007 11:29:22 PM, Theo de Raadt wrote:
I looked for your name on the donations list. I don't see it.
I only buy CDs and stuff occasionally, and generally
invest time in what I hope are productive ways.
How much do I need to donate to keep from having to
waste my time in unproductive
On 3/15/07, Karl O. Pinc <[EMAIL PROTECTED]> wrote:
>
> On 03/15/2007 10:48:49 PM, Ray Percival wrote:
> > On Mar 15, 2007, at 7:31 PM, Karl O. Pinc wrote:
>
> >> I rely on having a clear channel for security related
> >> problems.
>
> > The only communication problem here is that you don't look
>
On Mar 16, 2007, at 12:36 AM, Karl O. Pinc wrote:
You have a valid point: any bug is a security problem.
However, the topic is not my management practices and
the tradeoffs involved therein. The topic is the
efficacy of the security-announce list. If I knew
security-announce was broken I could
> You have a valid point: any bug is a security problem.
> However, the topic is not my management practices and
> the tradeoffs involved therein. The topic is the
> efficacy of the security-announce list. If I knew
> security-announce was broken I could write a screen-scraper
> to check the erra
On 3/15/07, Ray Percival <[EMAIL PROTECTED]> wrote:
You -do- know that this has been on the errata page since
Friday, right? Because as worried as you are and as important
as this is to you you take the responsibility to check said page
every day, of course. Oh wait. No you don't.
Or use the ma
On 03/15/2007 11:04:49 PM, Jeremy Huiskamp wrote:
That's what I was going to say. If you did things properly,
you would have had this patch applied before you knew that it
was a remote hole.
You have a valid point: any bug is a security problem.
However, the topic is not my management practic
On 03/15/2007 10:48:49 PM, Ray Percival wrote:
On Mar 15, 2007, at 7:31 PM, Karl O. Pinc wrote:
I rely on having a clear channel for security related
problems.
The only communication problem here is that you don't look
at the information that the project puts out there for you.
The projec
> Free Software: "You don't pay back, you pay forward."
> -- Robert A. Heinlein
I was trying to decide if I should reply, and if so, how.
I looked for your name on the donations list. I don't see it.
But your quote makes it clear.
I don't know what to say. I am trying to ge
On 03/15/2007 10:24:31 PM, Tony Abernethy wrote:
Karl O. Pinc wrote:
>
> On 03/14/2007 09:13:19 AM, Martin Schrvder wrote:
> > 2007/3/13, Theo de Raadt <[EMAIL PROTECTED]>:
> >> This means everyone should have our latest patches installed.
>
> > Just a reminder: security-announce exists for messa
Karl O. Pinc wrote:
>
> On 03/14/2007 09:13:19 AM, Martin Schrvder wrote:
> > 2007/3/13, Theo de Raadt <[EMAIL PROTECTED]>:
> >> This means everyone should have our latest patches installed.
>
> > Just a reminder: security-announce exists for messages like
> this. Use
> > it or delete it.
> >
On 15-Mar-07, at 11:48 PM, Ray Percival wrote:
On Mar 15, 2007, at 7:31 PM, Karl O. Pinc wrote:
I agree. I'm very annoyed that I have to read about this
problem on slashdot. The misc list is not the right place
for this announcement, some low-traffic announce list that
goes right into my inb
On Mar 15, 2007, at 7:31 PM, Karl O. Pinc wrote:
I agree. I'm very annoyed that I have to read about this
problem on slashdot. The misc list is not the right place
for this announcement, some low-traffic announce list that
goes right into my inbox is where this stuff belongs.
I rely on having
On 03/14/2007 09:13:19 AM, Martin Schrvder wrote:
2007/3/13, Theo de Raadt <[EMAIL PROTECTED]>:
This means everyone should have our latest patches installed.
Just a reminder: security-announce exists for messages like this. Use
it or delete it.
While the bug is bad, the handling of it is eve
No, I'm not talking about a bug in design. Instead, I'm talking about a
new organization for new, old, or yet-to-exist *BSD User Groups.
See http://undeadly.org/cgi?action=article&sid=20070315164840 and
http://metabug.org/ for more info. But in a nutshell we're providing
mutual support for BUGs by
Otto Moerbeek wrote:
> I see the problem. The problem occurs if top bigrams contain spaces.
> These are not handled correctly by awk. We'll have to use a field
> separator that can not be in a bigram. A tab is well suited, AFAKS.
>
> Try this.
[snip: patch]
% sudo /usr/libexec/locate.updatedb --se
On Thu, 2007-03-15 at 22:42 +, Stuart Henderson wrote:
> No, that would expand to three rules, one passing all traffic from
> and the other two as above.
>
> you either need:
>
> pass out on bge0 from
> block out on bge0 from to { , }
>
> or:
>
> block quick out on bge0 from to { ,
On Thu, 15 Mar 2007, Otto Moerbeek wrote:
> On Thu, 15 Mar 2007, Han Boetes wrote:
>
> > Otto Moerbeek wrote:
> > > Hmm, can you instrument /usr/libexec/locate.updatedb with a
> > >
> > > tee /tmp/myflist |
> > >
> > > on line 101 to see the filelist it actualy builds?
> >
> > Sure, I ju
On 2007/03/15 16:00, Ryan Corder wrote:
> > pass out to everyone-apart-from-outside
> > pass out to everyone-apart-from-llcidr
> > This blocks only the intersection of outside and llcidr
> > (probably nobody).
>
> ok, so I want:
>
> pass out to everyone-except-from-outside
> pass out to
On Thu, 2007-03-15 at 15:32 +, Stuart Henderson wrote:
> On 2007/03/15 10:25, Ryan Corder wrote:
> > On Thu, 2007-03-15 at 01:39 +, Stuart Henderson wrote:
> > > feed the rule into "pfctl -nvf -" and see how it's expanded.
> >
> > basically what you would expect...
>
> > pass out on bge0 fr
I have it installed, the sets and that, but no ports or anything. I have
to add a user and all that. I don't use my computer for anything on the
net right now, want to install KDE so I can do all the net\webmail and
music\video stuff I usually do. And for gaim, there's
ftp://ftp.openbsd.org/pub/Ope
Camiel Dobbelaar wrote:
Make sure your addresses are in sync... number of addresses and the
netmask are different.
On Wed, 14 Mar 2007, Dag Richards wrote:
inet 10.120.10.50 netmask 0xff00 broadcast 10.120.10.255
inet 10.120.10.50 netmask 0xff00 broadcast 10.120.10
On Thu, 15 Mar 2007, Han Boetes wrote:
> Otto Moerbeek wrote:
> > Hmm, can you instrument /usr/libexec/locate.updatedb with a
> >
> > tee /tmp/myflist |
> >
> > on line 101 to see the filelist it actualy builds?
>
> Sure, I just did that and examined /tmp/myflist and it looks
> perfectl
2007/3/15, Claudio Jeker <[EMAIL PROTECTED]>:
I think I mentionened this already a few times but I'll do it again.
"sendto: No buffer space available" means an ENOBUF error was returned.
On modern systems ENOBUF is almost only generated by the interfaces and
their queues (e.g. if you enable a too
Otto Moerbeek wrote:
> Hmm, can you instrument /usr/libexec/locate.updatedb with a
>
> tee /tmp/myflist |
>
> on line 101 to see the filelist it actualy builds?
Sure, I just did that and examined /tmp/myflist and it looks
perfectly normal.
# Han
On 3/15/07, x x <[EMAIL PROTECTED]> wrote:
I on
Ok, I'm using 4.0 from the FTP install for the sets, I still have find
how to get the ports installed, and wanted to see if, and how, to get K
3.5.6 installed, or should I just use what's ever in the ftp directory
for 4.0.
So you don't even have
I on
Ok, I'm using 4.0 from the FTP install for the sets, I still have find
how to get the ports installed, and wanted to see if, and how, to get K
3.5.6 installed, or should I just use what's ever in the ftp directory
for 4.0.
-[ Received Mail Content ]--
Subject : Re:
Date : Th
Hey "x x",
> Is it safe to install snapshot packages? For installing like K 3.5.6 or
> gaim 2 beta 6, is it ok?
If you run -current (or a recent snapshot): knock yourself out. If you
run any type of -release or -stable: I wouldn't do that if I were you.
HTH... Nico
On 3/15/07, x x <[EMAIL PROTECTED]> wrote:
Is it safe to install snapshot packages? For installing like K 3.5.6 or
gaim 2 beta 6, is it ok?
They wouldn't be posted as packages if they had huge obvious security
holes. Duh.
That said, they are snapshots (wait, are you talking about OpenBSD
snaps
* [EMAIL PROTECTED] <[EMAIL PROTECTED]> [070315 12:03]:
> Hi,
> I have a problem with dump(8).
>
> Trying to dump a filesystem with nodump flags on some folders results in
> these folders been dumped anyway, even on higher level dump and even if I
> specify -h flag to dump.
>
> I'm rela
Is it safe to install snapshot packages? For installing like K 3.5.6 or
gaim 2 beta 6, is it ok?
Create and Share your own Video Clip Playlist in minutes at Lycos MIX
(http://mix.lycos.com)
On Thu, Mar 15, 2007 at 05:42:48PM +0100, Walter Doerr wrote:
> Hello,
>
> I am using an OpenBSD 4.0 box connected to a 2Mbit SDSL line in
> Germany (using user space PPP).
>
> When pinging a host across the SDSL line, I get an occasional
> "sendto: No buffer space available" message:
>
>
> 64
Hello,
I am using an OpenBSD 4.0 box connected to a 2Mbit SDSL line in
Germany (using user space PPP).
When pinging a host across the SDSL line, I get an occasional
"sendto: No buffer space available" message:
64 bytes from xxx.xxx.xxx.xxx: icmp_seq=566 ttl=254 time=62.674 ms
64 bytes from xxx.
Antoine Jacoutot <[EMAIL PROTECTED]> wrote on 15/03/2007 17:52:58:
> On Thu, 15 Mar 2007, [EMAIL PROTECTED] wrote:
> >> Yes, you have to set the nodump flags recursively for all files under
> >> those directories.
> >> ie. chflags -R nodump /path/to/dir
> >
> > I set this and in fact it works. But
On Thu, 15 Mar 2007, [EMAIL PROTECTED] wrote:
Yes, you have to set the nodump flags recursively for all files under
those directories.
ie. chflags -R nodump /path/to/dir
I set this and in fact it works. But that's strange compared to the other
BSDs and Linux in which the nodump flags on a direc
Antoine Jacoutot <[EMAIL PROTECTED]> wrote on 15/03/2007 17:16:31:
> On Thu, 15 Mar 2007, [EMAIL PROTECTED] wrote:
> > Trying to dump a filesystem with nodump flags on some folders results
in
> > these folders been dumped anyway, even on higher level dump and even
if I
>
> Yes, you have to set
On Thu, 15 Mar 2007, Han Boetes wrote:
> Otto Moerbeek wrote:
> > The problem is here that the amount of data is too little to build a
> > complete bigram table. The situation is detected by the diff below.
> >
> > Did you also experience problems when indexing more files?
>
> Yes. It's the same
[EMAIL PROTECTED] wrote on 15/03/2007 17:16:34:
> * [EMAIL PROTECTED] <[EMAIL PROTECTED]>
> [2007-03-15 17:03]:
> > Hi,
> > I have a problem with dump(8).
> >
> > Trying to dump a filesystem with nodump flags on some folders results
in
> > these folders been dumped anyway, even on high
On Thu, 15 Mar 2007, [EMAIL PROTECTED] wrote:
Trying to dump a filesystem with nodump flags on some folders results in
these folders been dumped anyway, even on higher level dump and even if I
Yes, you have to set the nodump flags recursively for all files under
those directories.
ie. chflags
* [EMAIL PROTECTED] <[EMAIL PROTECTED]> [2007-03-15 17:03]:
> Hi,
> I have a problem with dump(8).
>
> Trying to dump a filesystem with nodump flags on some folders results in
> these folders been dumped anyway, even on higher level dump and even if I
> specify -h flag to dump.
well, ho
Hi,
I have a problem with dump(8).
Trying to dump a filesystem with nodump flags on some folders results in
these folders been dumped anyway, even on higher level dump and even if I
specify -h flag to dump.
I'm relatevely new to OpenBSD, but have plenty of experience with FreeBSD
and L
On 2007/03/15 10:25, Ryan Corder wrote:
> On Thu, 2007-03-15 at 01:39 +, Stuart Henderson wrote:
> > feed the rule into "pfctl -nvf -" and see how it's expanded.
>
> basically what you would expect...
> pass out on bge0 from to ! ...
> pass out on bge0 from to ! ...
i.e.
pass out to eve
On Thu, 2007-03-15 at 01:39 +, Stuart Henderson wrote:
> feed the rule into "pfctl -nvf -" and see how it's expanded.
basically what you would expect...
$ pfctl -nvf -
pass out on bge0 from to { ! , ! } tagged
INSIDE keep state flags S/SA
pass out on bge0 from to ! flags S/SA keep state
ta
Otto Moerbeek wrote:
> The problem is here that the amount of data is too little to build a
> complete bigram table. The situation is detected by the diff below.
>
> Did you also experience problems when indexing more files?
Yes. It's the same error as I get with the complete filesystem.
> Index:
Hi list,
again with wrapped lines. sorry for the first one...
I have a carped firewall cluster which is connected to the internet via a
cable interface, and one dsl interface, which is used as the default route.
The cable IP address is static, and the dsl IP address is dynamic. On the
static IP ad
On 2007/03/15 12:50, Sebastian Reitenbach wrote:
> I just found a workaround to my problem
that's good,
I was thinking of reading your original message, but 100+ chars in
a line results in nasty line breaks, making things really difficult
to read - wrapping at 72 will get you a wider audience.
>
On 3/15/07, Henning Brauer <[EMAIL PROTECTED]> wrote:
do everything else but that.
really.
this is never ever your problem, except you do weird things with
tunnels or the like.
Gotcha.
-Martin
--
"Suburbia is where the developer bulldozes out the trees, then names
the streets after them."
Hi,
"Sebastian Reitenbach" <[EMAIL PROTECTED]> wrote:
> Hi list,
>
> I have a carped firewall cluster which is connected to the internet via a
cable
> interface,
> and one dsl interface, which is used as the default route. The cable IP
address
> is static,
> and the dsl IP address is dynamic
On Wed, 14 Mar 2007, Dag Richards wrote:
> Since reporting this problem I have tried running both systems on one switch,
> and performed a kernel and userland build from stable.
> The behavior is unchanged in both cases.
>
> help? Am I really that stupid? This was working on 3.9
>
> Dag Richards
Hi list,
I have a carped firewall cluster which is connected to the internet via a cable
interface,
and one dsl interface, which is used as the default route. The cable IP address
is static,
and the dsl IP address is dynamic. On the static IP address the traffic is
redirected into
the DMZ. The
carlopmart <[EMAIL PROTECTED]> writes:
> Hi all,
>
> Somebody knows if 4.1 release will be ready for use as a
> paravirtualized or fully virtualized guest under xen 3.x? (I know that
> 4.0 "works" under xen 3.x, but really with very poor performance
> including under XenExpress or VirtualIron)
On Thu, Mar 15, 2007 at 10:26:23AM +, Gaby Vanhegan wrote:
> Hi,
>
> Reading the security advisory for the ipv6 buffer issue, the
> workaround is to block inet6 traffic in pf.conf. My default block
> line is actually:
>
> block in on $ext_if
>
> Where $ext_if is the net connection (the
Thank you a lot Mr. Corder.
You were, simply put, to the point.
On 3/13/07, Ryan Corder <[EMAIL PROTECTED]> wrote:
On Mon, 2007-03-12 at 18:45 -0300, Gustavo Rios wrote:
> All those are disabled!
>
> The fact that it is accepting a password for a users that have no
> password in passwd file whe
Hi,
Reading the security advisory for the ipv6 buffer issue, the
workaround is to block inet6 traffic in pf.conf. My default block
line is actually:
block in on $ext_if
Where $ext_if is the net connection (the only network connection the
machine is plugged into). Is the rule:
block in i
On Thu, 15 Mar 2007, Otto Moerbeek wrote:
> On Thu, 15 Mar 2007, Han Boetes wrote:
>
> > Hi,
> >
> > Thanks for your suggestions. Here is what I found. Please let me
> > know if you need more information.
> >
> > This error happens only with the /mnt/mp3 filesystem. Just to make
> > sure it was
On Thu, 15 Mar 2007, Han Boetes wrote:
> Hi,
>
> Thanks for your suggestions. Here is what I found. Please let me
> know if you need more information.
>
> This error happens only with the /mnt/mp3 filesystem. Just to make
> sure it was not a filesystem inconsistency I fsck'ed it. It turned
> out
71 matches
Mail list logo
