Re: Preventing man-in-the-middle attack on authpf?

2007-05-07 Thread Ted Unangst
On 5/7/07, Darren Spruell <[EMAIL PROTECTED]> wrote: On 5/7/07, Matthew R. Dempsky <[EMAIL PROTECTED]> wrote: > An attacker sets up a system with two wireless NICs: one associated to > my network and another configured as an access point pretending to be > an access point for my network. He runs

Softupdates question

2007-05-07 Thread George C
I've just stumbled across the SoftUpdates section in the FAQ, and was rather surprised that I had never seen/heard of this feature before. Before I mount any partition using softdep, I thought I'd google, browse the archives, etc. for any information about when/where they should be used. Althoug

Re: Preventing man-in-the-middle attack on authpf?

2007-05-07 Thread Darren Spruell
On 5/7/07, Matthew R. Dempsky <[EMAIL PROTECTED]> wrote: Suppose I setup a wireless network and use authpf to restrict access to some resource (e.g., Internet access) to registered users. It seems there's a fairly simple man-in-the-middle attack: An attacker sets up a system with two wireless N

Preventing man-in-the-middle attack on authpf?

2007-05-07 Thread Matthew R. Dempsky
Suppose I setup a wireless network and use authpf to restrict access to some resource (e.g., Internet access) to registered users. It seems there's a fairly simple man-in-the-middle attack: An attacker sets up a system with two wireless NICs: one associated to my network and another configured as

Re: Routing to host over IPsec

2007-05-07 Thread RW
On Mon, 7 May 2007 23:01:15 -0600, Joel Knight wrote: >--- Quoting RW on 2007/04/30 at 16:52 +1000: > >> Existing setup: >> >> Head Office: >> WAN IP=165.x.y.z >> LAN = 172.22.22.0/24 >> Extranet gateway = 10.x.y.1 >> >> Branch Office: >> WAN IP=150.x.y.z >> LAN= 172.22.23.0/24 >> >> IPsec end

Re: Routing to host over IPsec

2007-05-07 Thread Joel Knight
--- Quoting RW on 2007/04/30 at 16:52 +1000: > Existing setup: > > Head Office: > WAN IP=165.x.y.z > LAN = 172.22.22.0/24 > Extranet gateway = 10.x.y.1 > > Branch Office: > WAN IP=150.x.y.z > LAN= 172.22.23.0/24 > > IPsec endpoints are OpenBSD firewalls and LAN to LAN connectivity is > fine. >

Re: Thecus N2100 and RAID 1

2007-05-07 Thread Bryan Vyhmeister
On May 7, 2007, at 4:11 PM, Joachim Schipper wrote: On Mon, May 07, 2007 at 02:02:19PM -0700, Bryan Vyhmeister wrote: On May 7, 2007, at 11:56 AM, Matthieu Herrb wrote: I'm using a thecus 2100 with raidframe to do raid 1. A bit slow, but with 512MB RAM it's acceptable. Would ccd(4) be any f

Re: malo driver

2007-05-07 Thread Default User
On Sun, 2007-05-06 at 11:14 +0200, Henning Brauer wrote: > * Default User <[EMAIL PROTECTED]> [2007-05-05 05:03]: > > cbb0 at pci1 dev 4 function 0 "ENE CB-1410 CardBus" rev > > 0x01pci_intr_map: no mapping for pin A > > : couldn't map interrupt > > there's your problem, your cardbus slot is not w

Re: Prevent circumventing dansguardian with pf

2007-05-07 Thread Open Phugu
On 5/7/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: >From: Sebastian Benoit <[EMAIL PROTECTED]> > >If you want deny users the possiblility to smuggle data outside of their >workplace (or whatever) then don't connect them to the internet. No, no, no. You must go one step beyond this if you w

Re: booteasy fate?

2007-05-07 Thread Nick Holland
Michael Dexter wrote: > Hello, > > I have found references to: /pub/OpenBSD/3.6/tools/booteasy suggesting that > it was part of the distribution but I do not see it listed for 3.7 and newer. > I do not see a 3.7 changelist entry for it and I the online man pages to not > seem to refer to it. Fr

OpenBSD CD(4.1) & T-Shirts arrivaled at China(Shenzhen).

2007-05-07 Thread Bibby
Hi all, OpenBSD CD(4.1 -release) and T-Shirts arrivaled at China(Shenzhen) this morning, It looks really nice. Thanks to all OpenBSD developers for the hard work, thanks to Wim for the patience. ^_^ MB 2007.05.08 -- OpenBSD Store in China Mainland: http://shop34421310.taobao.com/

Re: wi pcmcia card configuration Problem (added the errors)

2007-05-07 Thread Bret
Bret wrote: Greetings All. I will start with my dmesg: See below---> I have tried many ways to get the 300mw Z-COM WLAN PC Card, RP-MMCX, 802.11b Higher Power card to work with the system. I am trying to setup the first Wlan (wi0) as an access point and the second (wi1) as a bridge/link

wi pcmcia card configuration Problem

2007-05-07 Thread Bret
Greetings All. I will start with my dmesg: See below---> I have tried many ways to get the 300mw Z-COM WLAN PC Card, RP-MMCX, 802.11b Higher Power card to work with the system. I am trying to setup the first Wlan (wi0) as an access point and the second (wi1) as a bridge/link to a distant s

Re: Prevent circumventing dansguardian with pf

2007-05-07 Thread Bryan Irvine
On 4/25/07, Allen Theobald <[EMAIL PROTECTED]> wrote: Greetings! Included below is my pf.conf set up to use dansguardian (proxyport 3128, filterport 8080) and tinyproxy (listen port 3128) as a transparent proxy. What changes do I need to make to keep someone on int_if/int_net from circumventing

Re: booteasy fate?

2007-05-07 Thread Aaron Hsu
On Mon, 07 May 2007 16:51:32 -0500, Bruce Bauer <[EMAIL PROTECTED]> wrote: Don't beat a dead horse. This should do whatever you need: http://gag.sourceforge.net/ Aaah, yes, I remember someone recommending this to me before. It does work well. -- Aaron Hsu <[EMAIL PROTECTED]> "No one co

Re: OpenBSD 4.1 Torrents

2007-05-07 Thread Sebastian Rother
Guys if you realy "care" about security why does nobody asks about using gzsig. Even useable for the packages... Kind regards, Sebastian

Re: BGP + Multiple Providers + Redundant Firewalls

2007-05-07 Thread askthelist
yah theyre valid, there was a point when i first set this up i remember one of the nexthops being invalid but this hasnt been the case for sometime. cool, i think ill stick to the without ospf for now until it becomes a necessity. thanks. On 5/7/07, Stuart Henderson <[EMAIL PROTECTED]> wrote: > >

Re: Prevent circumventing dansguardian with pf

2007-05-07 Thread a666
>From: Sebastian Benoit <[EMAIL PROTECTED]> > >If you want deny users the possiblility to smuggle data outside of their >workplace (or whatever) then don't connect them to the internet. No, no, no. You must go one step beyond this if you want to prevent employees from smuggling data. To do thi

Re: BGP + Multiple Providers + Redundant Firewalls

2007-05-07 Thread Stuart Henderson
On 2007/05/07 16:31, [EMAIL PROTECTED] wrote: > when i do a bgpctl show fib i see the two routes, 1 thru connected provider, > 1 to other router's crossover interface - which is connected then to 2nd > provider, so why would i need to redistribute my routes when its already in > the fib? maybe im c

Re: BGP + Multiple Providers + Redundant Firewalls

2007-05-07 Thread askthelist
when i do a bgpctl show fib i see the two routes, 1 thru connected provider, 1 to other router's crossover interface - which is connected then to 2nd provider, so why would i need to redistribute my routes when its already in the fib? maybe im confused but I dont think i necessarily need ospf in my

Re: BGP + Multiple Providers + Redundant Firewalls

2007-05-07 Thread askthelist
On 5/5/07, Henning Brauer <[EMAIL PROTECTED]> wrote: > > * [EMAIL PROTECTED] <[EMAIL PROTECTED]> [2007-05-03 20:58]: > > Any recommendations on running BGP on redundant firewalls to multiple > > providers advertising the same network thru both links, and talking iBGP > > with the other firewall? >

Re: Dual-port Gigabit SX NICs?

2007-05-07 Thread Joachim Schipper
On Mon, May 07, 2007 at 04:23:00PM -0500, K K wrote: > Am I the only one having a difficult time keeping track of which cards > on the "Supported hardware" list are merely tolerated, and which > vendors/chipsets are truly "supported" and cooperative? No, that's why http://www.vendorwatch.org exist

Re: Thecus N2100 and RAID 1

2007-05-07 Thread Joachim Schipper
On Mon, May 07, 2007 at 02:02:19PM -0700, Bryan Vyhmeister wrote: > On May 7, 2007, at 11:56 AM, Matthieu Herrb wrote: > > >I'm using a thecus 2100 with raidframe to do raid 1. A bit slow, but > >with 512MB RAM it's acceptable. > > Would ccd(4) be any faster? Also, what sort of RAM does it take?

Re: 4.0 locked up over the weekend

2007-05-07 Thread Joachim Schipper
On Mon, May 07, 2007 at 12:42:55PM -0700, Bruce Bauer wrote: > On 5/7/07, Jack J. Woehr <[EMAIL PROTECTED]> wrote: > >On May 7, 2007, at 12:20 PM, Bruce Bauer wrote: > > >This system has been running flawlessly since mid-March with GENERIC > > >plus the 010 patch. dmesg below > > >This morning I fo

Re: Dual-port Gigabit SX NICs?

2007-05-07 Thread Henning Brauer
* K K <[EMAIL PROTECTED]> [2007-05-07 23:52]: > Am I the only one having a difficult time keeping track of which cards > on the "Supported hardware" list are merely tolerated, and which > vendors/chipsets are truly "supported" and cooperative? > > On 5/5/07, Henning Brauer <[EMAIL PROTECTED]> wrot

question about delayed ACKs on OpenBSD

2007-05-07 Thread Michal Soltys
Hello I've noticed a bit different behaviour with regard to delayed acks on OBSD. Some other systems (2 linux distros, win2k/xp) I tested, pretty much acted as I've always seen it - 1 ack per max. 2 segments, but no bigger delay than some arbitrary value (looking at rfc, no more than 500ms, bu

Re: booteasy fate?

2007-05-07 Thread Bruce Bauer
Don't beat a dead horse. This should do whatever you need: http://gag.sourceforge.net/ On 5/7/07, Aaron Hsu <[EMAIL PROTECTED]> wrote: On Mon, 07 May 2007 15:09:34 -0500, Michael Dexter <[EMAIL PROTECTED]> wrote: > I have found references to: /pub/OpenBSD/3.6/tools/booteasy suggesting > that

Re: Dual-port Gigabit SX NICs?

2007-05-07 Thread K K
Am I the only one having a difficult time keeping track of which cards on the "Supported hardware" list are merely tolerated, and which vendors/chipsets are truly "supported" and cooperative? On 5/5/07, Henning Brauer <[EMAIL PROTECTED]> wrote: On 5/4/07, K K <[EMAIL PROTECTED]> wrote: > This wo

Re: booteasy fate?

2007-05-07 Thread Aaron Hsu
On Mon, 07 May 2007 15:09:34 -0500, Michael Dexter <[EMAIL PROTECTED]> wrote: I have found references to: /pub/OpenBSD/3.6/tools/booteasy suggesting that it was part of the distribution but I do not see it listed for 3.7 and newer. I do not see a 3.7 changelist entry for it and I the online

Re: Thecus N2100 and RAID 1

2007-05-07 Thread Bryan Vyhmeister
On May 7, 2007, at 11:56 AM, Matthieu Herrb wrote: I'm using a thecus 2100 with raidframe to do raid 1. A bit slow, but with 512MB RAM it's acceptable. Would ccd(4) be any faster? Also, what sort of RAM does it take? Thanks for your response. Bryan

booteasy fate?

2007-05-07 Thread Michael Dexter
Hello, I have found references to: /pub/OpenBSD/3.6/tools/booteasy suggesting that it was part of the distribution but I do not see it listed for 3.7 and newer. I do not see a 3.7 changelist entry for it and I the online man pages to not seem to refer to it. From the looks however, it was an of

Re: OT: GUI programming languages

2007-05-07 Thread Marc Balmer
* Jacob Yocom-Piatt wrote: > have been coding touchscreen-driven applications using visual basic > lately and am sick of VB. i would much rather be using openbsd with > another programming language that allows me to accomplish the same sort > of stuff. > > i have no "formal" CS background so am

Problem with lockups after upgrade from 3.8

2007-05-07 Thread Bill
* * A recent post and a router blowout today has sparked me to report this * * Hey all, We've had a router running openbsd for a while now. A few months ago we upgraded from 3.8 to 4.0 (upgrade technically was 3.8 -> 3.9 -> 4.0) and it seemed to go as smooth as possible. Then we started havi

Re: 4.0 locked up over the weekend

2007-05-07 Thread Bruce Bauer
On 5/7/07, Jack J. Woehr <[EMAIL PROTECTED]> wrote: On May 7, 2007, at 12:20 PM, Bruce Bauer wrote: This system has been running flawlessly since mid-March with GENERIC plus the 010 patch. dmesg below This morning I found it totally unresponsive both through network and at the console. Had to

Re: 4.0 locked up over the weekend

2007-05-07 Thread Joachim Schipper
On Mon, May 07, 2007 at 11:20:00AM -0700, Bruce Bauer wrote: > This system has been running flawlessly since mid-March with GENERIC > plus the 010 patch. dmesg below > This morning I found it totally unresponsive both through network and > at the console. Had to use the power switch to recover. >

Re: 4.0 locked up over the weekend

2007-05-07 Thread Jack J. Woehr
On May 7, 2007, at 12:20 PM, Bruce Bauer wrote: > This system has been running flawlessly since mid-March with GENERIC > plus the 010 patch. dmesg below > This morning I found it totally unresponsive both through network and > at the console. Had to use the power switch to recover. > > Where do I

Re: Thecus N2100 and RAID 1

2007-05-07 Thread Matthieu Herrb
On 5/7/07, Bryan Vyhmeister <[EMAIL PROTECTED]> wrote: I was just wondering about whether the Thecus N2100 running OpenBSD/ armish can operate in RAID 1 mode. Maybe this is a stupid question but I couldn't find anything about it and I am interested to know. Obviously I would not be running the fi

Re: Error building 4.1-stable kernel from source on sparc64

2007-05-07 Thread Luca Corti
On Mon, 2007-05-07 at 14:42 +0200, Michael wrote: > I got a sparc64 (Sun Ultra 5) running here which I upgraded from > 4.0-stable to 4.1-stable. Just recompiled the kernel without any problems. I've got an Ultra 5 too. I'll retry a fresh source checkout from CVS. thanks Luca

4.0 locked up over the weekend

2007-05-07 Thread Bruce Bauer
This system has been running flawlessly since mid-March with GENERIC plus the 010 patch. dmesg below This morning I found it totally unresponsive both through network and at the console. Had to use the power switch to recover. Where do I start trying to track this down? The system is running ss

Re: Really stuck and help needed of resources depletions on web servers.

2007-05-07 Thread Daniel Ouellet
Maurice Janssen wrote: Now, why PERL would do this, I have no clue, but it does anyway in the usage done by awstats. So far I reproduce this 5 times, so it's pretty consistent. What may cause this, I do not know more, but look like when PERL needs to process huge amount of data, it end up aff

Re: acpi vaio lcd brightness driver

2007-05-07 Thread Ted Unangst
On 5/7/07, Marco Peereboom <[EMAIL PROTECTED]> wrote: Cool. What I am not sure about is if we want to have a bunch of little vendor drivers or a big driver that does all the vendor stuff. I need to think this through. Any comments? this could all be taken care of by button, no? even if they

Re: Really stuck and help needed of resources depletions on web servers.

2007-05-07 Thread Maurice Janssen
On Monday, May 7, 2007 at 11:27:50 -0400, Daniel Ouellet wrote: >Maurice Janssen wrote: >>On Monday, May 7, 2007 at 03:11:41 -0400, Daniel Ouellet wrote: >>>Every time, I process the logs with webalizer, no problem what so ever. >>>Then a few customers wants the awstats version. So, I process th

Re: new openbsd 4.0 server, panic on ufsdirhash

2007-05-07 Thread John Mendenhall
Artur, > Have you done forced fsck of the partitions? This sounds like a > problem with the data you have on disk. It would be even nicer if you > could update to a newer fsck because it has been updated to deal with > many new strange corner cases we've been seeing. Although, that might > or migh

question about multiple pflog interfaces on openbsd 4.1

2007-05-07 Thread carlopmart
Hi all, I have tried to setup a new pflog interface to monitor ipsec traffic and it works ok. Afterwards I have setup another pflogd daemon to store logs on another pcap file under /var/log. But I have one question: how do i to configure newsyslog.conf entry for this new pflogd daemon? If I p

Re: new openbsd 4.0 server, panic on ufsdirhash

2007-05-07 Thread John Mendenhall
I have yet to receive any response to the panics I have been experiencing. Is there something else I need to provide that will get me pointed in the right direction? Are there tools available to test the connection to the hard drive, or to test the hard drive itself? I used format when administ

OT: GUI programming languages

2007-05-07 Thread Jacob Yocom-Piatt
have been coding touchscreen-driven applications using visual basic lately and am sick of VB. i would much rather be using openbsd with another programming language that allows me to accomplish the same sort of stuff. i have no "formal" CS background so am at a loss for good candidates. the a

Re: FREEZE UPS! (I'M STILL HERE WOLF!)

2007-05-07 Thread Peter Philipp
On Sat, May 05, 2007 at 09:38:02AM +0200, Little Red Riding Hood marching through the forest wrote: > Not sent to bugs@ because I'm not sure it could do much there. I'm hoping > someone may be able to give hints on what to check, so I can resolve this > small issue. Why would you wanna do that

Re: Really stuck and help needed of resources depletions on web servers.

2007-05-07 Thread Daniel Ouellet
Maurice Janssen wrote: On Monday, May 7, 2007 at 03:11:41 -0400, Daniel Ouellet wrote: Every time, I process the logs with webalizer, no problem what so ever. Then a few customers wants the awstats version. So, I process that as well, however it's also processing multiple logs, but when the aw

Re: master volume problem

2007-05-07 Thread Deanna Phillips
bdz writes: > I have an ASUS notebook that uses the azalia driver for the > sound. The problem is that I can not adjust the volume with > applicaions' volume control. That includes xfce and xmms > too. In xfce's Sound setting panel there is only one mixer > (mixer0) that is set, in xmms there is n

Your GIS subscription

2007-05-07 Thread gisadmin
A subscription change or cancellation request for your email address misc@openbsd.org was just received on GISCafe. This message is to inform you of this action and to provide you with a personalized URL that you can use to make such modifications now or at any time in the future. If you did not r

GIS Weekly Review : May 07, 2007

2007-05-07 Thread GISCafe Newsletter
GIS Weekly Review May 07, 2007 From: GISCafe Previous Issues NAVTEQ Review Article eMail Article Print Article Susan Smith - Managing Editor Goog

Re: OpenBSD 4.1 Torrents

2007-05-07 Thread Darren Spruell
On 5/7/07, Tobias Ulmer <[EMAIL PROTECTED]> wrote: Btw, pgp requires a working web of trust, it's not secure just because you can sign something. Joe Cracker can easily generate a key with "Theo de Raadt <[EMAIL PROTECTED]>" and provides you with "signed" filesets. Who steps up to organise key si

Re: acpi vaio lcd brightness driver

2007-05-07 Thread Marco Peereboom
Cool. What I am not sure about is if we want to have a bunch of little vendor drivers or a big driver that does all the vendor stuff. I need to think this through. Any comments? giovanni wrote: hello, because I could not change the excessive lcd brightness of my laptop under openbsd I sta

Re: Error building 4.1-stable kernel from source on sparc64

2007-05-07 Thread Michael
Hi, Luca Corti schrieb: > No. I've just reextracted it just to be sure, but I still get the same > error. I got a sparc64 (Sun Ultra 5) running here which I upgraded from 4.0-stable to 4.1-stable. Just recompiled the kernel without any problems. Michael OpenBSD 4.1-stable (GENERIC) #1: Mon May

Re: Really stuck and help needed of resources depletions on web servers.

2007-05-07 Thread Maurice Janssen
On Monday, May 7, 2007 at 03:11:41 -0400, Daniel Ouellet wrote: >Every time, I process the logs with webalizer, no problem what so ever. >Then a few customers wants the awstats version. So, I process that as >well, however it's also processing multiple logs, but when the awstats >PERL stuff kic

Re: OpenBSD 4.1 Torrents

2007-05-07 Thread Tobias Ulmer
On Mon, May 07, 2007 at 11:57:50AM +0200, Martin Schr?der wrote: > 2007/5/7, Adam Hawes <[EMAIL PROTECTED]>: > >MD5 is proven weak. It's possible to take almost any file and its > >MD5 then create an identically sized file with the same hash in a > >reasonable time. This can be used to pass out a

master volume problem

2007-05-07 Thread bdz
I have an ASUS notebook that uses the azalia driver for the sound. The problem is that I can not adjust the volume with applicaions' volume control. That includes xfce and xmms too. In xfce's Sound setting panel there is only one mixer (mixer0) that is set, in xmms there is no mixer in the drop

Re: ACPI question and status request

2007-05-07 Thread Alexander Hall
Gordon Willem Klok wrote: On Sat, May 05, 2007 at 02:32:17AM +0200, Alexander Hall wrote: acpicpu0 at acpi0: CPU0: 866, 667 MHz apmd -C is your friend, without acpi this is done in SMM by the bios at least it was on my lattitude before it kicked the bucket. $ pgrep -fl apmd 214 /usr/sbin/apmd

Re: OpenBSD 4.1 Torrents

2007-05-07 Thread Martin Schröder
2007/5/7, Adam Hawes <[EMAIL PROTECTED]>: MD5 is proven weak. It's possible to take almost any file and its MD5 then create an identically sized file with the same hash in a reasonable time. This can be used to pass out an arbitrary CD image that completely trashes the contents of your hard dis

Re: : : : Serial console on OpenBSD 4.1 on HP ProLiant DL145 G3

2007-05-07 Thread Raimo Niskanen
On Thu, May 03, 2007 at 03:52:11PM +0200, Raimo Niskanen wrote: > Beautiful! Thanks a lot! > > But, which FM should I R? I have searched high and low > alas apparently not right. > Found it! Not a very illogical place, just one of many possible. The "HP ProLiant Lights-Out 100 Remote Management

Re: Error building 4.1-stable kernel from source on sparc64

2007-05-07 Thread Luca Corti
On Wed, 2007-05-02 at 14:11 -0400, Josh Grosse wrote: > Just a wild guess, but did you forget to include comp41.tgz in your > install/upgrade? No. I've just reextracted it just to be sure, but I still get the same error. ciao Luca

Re: Really stuck and help needed of resources depletions on web servers.

2007-05-07 Thread Daniel Ouellet
OK, I have some update on this one. It's not fix, but I was finally able to isolate how that problem is trigger. May be fix now, I don't know, but I am passing the informations in case it's useful and also if someone could tell me if there was a logic behind it and if yes it would not happen