IPsec related issue.

2007-05-13 Thread zion
Greetings all, I'm trying to implement an IPsec tunnel from my LAN to a dedicated box. I've met with a common issue where some TCP packets cannot be fragmented due to a DF flag is set, and the packet is unable to pass through a tunnel. In that case an informing icmp packet is sent to the destinatio

Re: Failing to get [EMAIL PROTECTED] in X

2007-05-13 Thread Ted Unangst
On 5/13/07, Alex Holst <[EMAIL PROTECTED]> wrote: I set VertRefresh to 60-60, included a modeline generated by gtf and disabled DDC, resulting in X being a smartarse ("Sure, I can do 60Hz"): can you post the full log somewhere? if you can wait to tuesday, i'll also try to get it working myself

Re: rdate issue

2007-05-13 Thread Ted Unangst
On 5/13/07, John Nietzsche <[EMAIL PROTECTED]> wrote: In the other two boxes (lion and etosha) i have: */5 * * * * /usr/sbin/rdate -4cva gw | Everything is working ok except because of those two boxes always have a time about 20/22 seconds after my gateway time, like

"startx" problem

2007-05-13 Thread arnuld
i have configures X and my "/etc/X11/xorg.conf" file is same as i have used on DragonFyBSd and Gentoo, Arch Linux etc. when i do "startx" on OpenBSD amd64 4.1 it 1st turns-OFF and then after 2 seconds turns-ON my monitor *automatically*. i had the same problem in OpenBSD 3.9 i386. any solution ?

Troubleshooting NFS/SFU

2007-05-13 Thread David Higgs
I've tried to configure NFS and am nearly all the way there, but it seems like I've hit a pretty big stumbling block. I've got OpenBSD 4.1-stable (10.0.0.1) with an NFS export of my home directory. I also have a Windows XP machine (10.0.0.2) and installed the SFU 3.5 NFS client. [/etc/exports]

Re: Chrooting users the right way

2007-05-13 Thread Rico Secada
On Mon, 14 May 2007 02:43:59 +0200 [EMAIL PROTECTED] wrote: Follow-up: I found some posts on the archive about this being a very bad idea, would someone mind explaining why? On this particular system some users are trusted, but others are "less" trusted. The system contains some different speci

Re: NEW: education/stardict

2007-05-13 Thread Bibby
It's really a good application. i like it. Thanks ^_^

Re: rdate issue

2007-05-13 Thread Adam Hawes
> I decided to get the time syncronization for all those boxes. In the > gateway machine, i managed to get the following in crontab: > > */5 * * * * /usr/sbin/rdate -4ncva > ptbtime1.ptb.de | /usr/bin/logger -t NTP > Everything is working ok except because of those tw

Re: rdate issue

2007-05-13 Thread Nick Holland
John Nietzsche wrote: ... > Everything is working ok except because of those two boxes always have > a time about 20/22 seconds after my gateway time, like in the output > for date command: > > [EMAIL PROTECTED] date > Sun May 13 23:04:35 BRT 2007 > [EMAIL PROTECTED] date > Sun May 13 23:04:59 BRT

rdate issue

2007-05-13 Thread John Nietzsche
Dear gentleman/madam, i have a home network composed of 1 gateway and two boxes. All of them running openbsd 4.1 of course. I decided to get the time syncronization for all those boxes. In the gateway machine, i managed to get the following in crontab: */5 * * * * /u

Chrooting users the right way

2007-05-13 Thread coolzone
Hi I am setting up a new OpenBSD machine in which I want to chroot users. I don't want to use any of the patching solutions to OpenSSH but want to implement a real system chroot solution so any user, who is chrooted, is jailed even if he logs in manually. I have tried to find articles on this, bu

spamd synchronization

2007-05-13 Thread Chad M Stewart
I have two mail servers running 4.1-stable and am trying to get spamd synchronization working between them. During testing using a basic set of options /usr/libexec/spamd -y nfe0 -Y nfe0 -d in the resulting debug I see using multicast spam sync mode (ttl 1, group 224.0.1.240, port 8025) on

Re: dual g4 needed for hackathon

2007-05-13 Thread Brian A. Seklecki
How about a dual G5? PowerMac Dual G5 7,3 2.2 Open Firmware 4. I don't follow Apple hardware, so I don't know what the difference between a G4 and a G5 is architecture wise; but I do know that OS/X has to come off of this thing with a quickness. ~BAS On Fri, 2007-05-11 at 20:31 +0200, Mark Kette

Re: s3virge pci card on xenocara/sparc64 ?

2007-05-13 Thread Edd Barrett
Hi, On 13/05/07, Landry Breuil <[EMAIL PROTECTED]> wrote: Hello, i'm trying to make an old Ultra 10 working in dual-screen/xinerama, with onboard ati (works fine at [EMAIL PROTECTED]) and additional old s3 pci (detected by kernel). As far as I am aware sparc64 requires "OpenBoot aware" grap

Re: Failing to get [EMAIL PROTECTED] in X

2007-05-13 Thread Alex Holst
Quoting Ted Unangst ([EMAIL PROTECTED]): > >Any idea why the i810 driver attempts to use 75Hz? Maybe if I could get > >it to try 60Hz at that point would make it work.. > > > >I appreciate the suggestions. Any other hints? > > change the modeline to only support 60hz refresh. I set VertRefresh to

Re: Failing to get [EMAIL PROTECTED] in X

2007-05-13 Thread Ted Unangst
On 5/13/07, Alex Holst <[EMAIL PROTECTED]> wrote: (II) I810(0): External Monitor: Using hsync range of 30.00-83.00 kHz (II) I810(0): External Monitor: Using vrefresh range of 56.00-75.00 Hz (II) I810(0): Not using built-in mode "1600x1200" (height too large for virtual size) (--) I810(0): Virtua

ppp dial on demand server

2007-05-13 Thread Sean Brown
I have unfortunately been stuck with having to use a 56k dialup connection at home at least until the phone company runs DSL out here, (6 months, but I won't hold my breath). Anyway there are a few computers here, that need to have access so since had used OpenBSD as a firewall when I had c

ADVERT: Secure communications software

2007-05-13 Thread Robin Carey
C12-GAMMA: free/open-source FreeBSD/Linux software; http://www.caesarion.org.uk Sincerely, R Carey.

s3virge pci card on xenocara/sparc64 ?

2007-05-13 Thread Landry Breuil
Hello, i'm trying to make an old Ultra 10 working in dual-screen/xinerama, with onboard ati (works fine at [EMAIL PROTECTED]) and additional old s3 pci (detected by kernel). I've seen on xenocara/driver/Makefile that s3virge driver, which this card normally uses on other archs/OS, is not enabled

Re: cannot make squidclamav --> issues with libcurl not found [solved]

2007-05-13 Thread Frederic Durodie
Hi Tobias, Thanks a lot for the help. However I had to slightly correct your recipe below. So, for future reference for poor souls such as myself : $ env CFLAGS=-I/usr/local/include LDFLAGS=-L/usr/local/lib ./configure $ vi Makefile to change the line with LIBS = -lcurl to : LIBS

Re: cannot make squidclamav --> issues with libcurl not found

2007-05-13 Thread Tobias Ulmer
On Sun, May 13, 2007 at 11:20:14AM +0200, Frederic Durodie wrote: > Apologies if this mail is a bit long, but I included most of the output > of some commands as I think they might help you helping me telling how > to proceed. > > I'm trying to make/install squidclamav on a newly configured OBSD 4

cannot make squidclamav --> issues with libcurl not found

2007-05-13 Thread Frederic Durodie
Apologies if this mail is a bit long, but I included most of the output of some commands as I think they might help you helping me telling how to proceed. I'm trying to make/install squidclamav on a newly configured OBSD 4.1 firewall / squid proxy on a i386 AMD/K6 450MHz 200MB pc for use at home.

Re: Failing to get [EMAIL PROTECTED] in X

2007-05-13 Thread Alex Holst
Quoting Jimmy Mitchener ([EMAIL PROTECTED]): > Have you tried starting X several times in a row? I have this issue > when I connect my external display to my laptop. Sometimes X comes up > at [EMAIL PROTECTED] and sometimes it is at 56Hz and looks awful. The > only solution seems to be to restart X

Re: RDR rule on PF

2007-05-13 Thread Nick Guenther
On 5/13/07, Alberich de megres <[EMAIL PROTECTED]> wrote: On 5/13/07, Johan Linner <[EMAIL PROTECTED]> wrote: > > Is IP forwarding enabled? > > # sysctl net.inet.ip.forwarding=1 > > /Johan I checked tcpdump on internal if, and it's not working. I enabled ip forwarding on sysctl.conf, yes. It's

Re: Failing to get [EMAIL PROTECTED] in X

2007-05-13 Thread Alex Holst
Quoting Ted Unangst ([EMAIL PROTECTED]): > from the end of your x log. seems the x40 simply can't handle a > monitor that big. Indeed, the specs for the X40 seems to indicate it can't, but booting the other (disgusting) OS installed on the same harddrive outputs [EMAIL PROTECTED] perfectly. Also,

Re: RDR rule on PF

2007-05-13 Thread Alberich de megres
I checked tcpdump on internal if, and it's not working. I enabled ip forwarding on sysctl.conf, yes. It's so weird. I'm shure it's a very stupid mistake but i can't find it... On 5/13/07, Johan Linner <[EMAIL PROTECTED]> wrote: > > Is IP forwarding enabled? > > # sysctl net.inet.ip.forwarding=1