> Call me old-fashioned, but why not just use some paper? As mentioned
> before, flowcharts make poor documentation anyway, and paper is very
> convenient, especially if you're erasing and redrawing a lot.
>
> You could enter the final design in an appropriate program, if so
> inclined, but doing i
Thus Austin Hook <[EMAIL PROTECTED]> spake on Tue, 22 May 2007
15:54:32 -0700 (MST):
> We have a need for a low power OpenBSD device or handheld that can
> connect to a small SCADA device (serial or USB) to collect some
> temperature and voltage data, plus control one light switch, on a
> remote s
>> We have a need for a low power OpenBSD device or handheld that can connect
>> to a small SCADA device (serial or USB) to collect some temperature and
>> voltage data, plus control one light switch, on a remote solar powered
>> wifi repeater tower.
>
>Soekris 4501 or 4801 would be ideal, they use
On 5/19/07, Reiner Jung <[EMAIL PROTECTED]> wrote:
At the moment the OpenBSD core system is not controlled by the EAR so long
you don't download it
from a US server.
As a private person it is not a problem, but when a company want use
OpenBSD and there is US crypto
in, the thing will become ver
On Tue, 22 May 2007 16:08:10 -0600, Bob Beck wrote:
>
>
>...
> We walked in, sat down, Obie brought up the the help desk page with
8>
Hi,
> We have a need for a low power OpenBSD device or handheld that can connect
> to a small SCADA device (serial or USB) to collect some temperature and
> voltage data, plus control one light switch, on a remote solar powered
> wifi repeater tower.
>
> Any suggestions on the lowest powered OpenB
Ah, yes. That refers to normal instructions, usually by corporations
that charge you obscene amounts of money to send you gibberish. But it
is possible to write instructions that people can follow. And if you get
mgmt to agree, you can require people read your instructions. "Do this,
or your
On 2007/05/22 15:54, Austin Hook wrote:
> We have a need for a low power OpenBSD device or handheld that can connect
> to a small SCADA device (serial or USB) to collect some temperature and
> voltage data, plus control one light switch, on a remote solar powered
> wifi repeater tower.
Soekris 450
Bob Beck wrote:
>
> I have definately seen issues here with other implemntations,
> because the 4XX code given, the XX's matter... Have you seen
> this with OpenBSD spamd? (As opposed to something else..)
I have seen this with 451 errors, not on spamd but with the exact same
error code a
We have a need for a low power OpenBSD device or handheld that can connect
to a small SCADA device (serial or USB) to collect some temperature and
voltage data, plus control one light switch, on a remote solar powered
wifi repeater tower.
Any suggestions on the lowest powered OpenBSD runnable box
> I manage about 30 mail servers, all using greylisting for years (not
> OpenBSD spamd, but a version running in the MTA). But as I greylist at
> RCPT TO, I only noticed the problem it when clamav did go down and the
> server was producing a 4xx error at DATA when it should have scanned the
> mail.
Bob Beck wrote:
>> just deduced from trial and error. Also greylisting should happen at
>> RCPT TO, and probably not at DATA as there are some widely used MTAs
>> that are buggy and choke when a 4xx error is sent in the DATA phase.
>
> I've been running this at DATA for months, and not seen
Bob Beck wrote:
>
>> just deduced from trial and error. Also greylisting should happen at
>> RCPT TO, and probably not at DATA as there are some widely used MTAs
>> that are buggy and choke when a 4xx error is sent in the DATA phase.
>
> I've been running this at DATA for months, and not se
...
We walked in, sat down, Obie brought up the the help desk page with
the twenty seven 800 x 600 colour glossy screenshots with circles and
arrows and a paragraph below each one explaining what each one was to
be used to show Windows users what to do. Luser came in and said "My
mail's
On Mon, May 21, 2007 at 12:50:05AM +0200, Martin Toft wrote:
> On Sun, May 20, 2007 at 12:02:11PM -0700, Myk Taylor wrote:
> > I used to have this problem as well. It went away when I upgraded
> > the remote endpoint (your AP, in this model) to OpenSSH_4.5p1.
>
> Okay. Thanks for the advice :)
>
Stephen Schaff wrote:
That's a really good point. However we have about 200 users we'd have to
get to switch their mail settings - 99% of don't know what mail settings
are of course.
Changing ports could prove very painful. I will definitely consider it
though, given how painful email is withou
Write them step by step instructions, with screenshots for the client
they use. Tell them they have 30 days (for example), remind them at 15
and the day before.
I've done the above at several work sites (400ish and 50ish), and once
management was on board, it was very simple. A tiny bit of wo
> just deduced from trial and error. Also greylisting should happen at
> RCPT TO, and probably not at DATA as there are some widely used MTAs
> that are buggy and choke when a 4xx error is sent in the DATA phase.
I've been running this at DATA for months, and not seen any
issues with it.
That's a really good point. However we have about 200 users we'd have
to get to switch their mail settings - 99% of don't know what mail
settings are of course.
Changing ports could prove very painful. I will definitely consider
it though, given how painful email is without greylisting.
Be
Darth Lists wrote:
> Unfortunately, this little MS-behaviour is very likely to be the "last
> straw" that gets our greylisting turned off here.
> Despite my logs that prove that greylisting has removed over 95% of
> incoming spam before spamassassin has to deal with it, the fact that
> some legiti
Trust me - bit the bullet and change to 587/465 anyway.
we had to for road warriors because 25 is blocked in so many
places anyway from walkups. You're better just getting your
users to switch.
* Chad M Stewart <[EMAIL PROTECTED]> [2007-05-22 12:46]:
> Since having users change th
Hi.
I know this is not a proper bug report, but I wanted to know if other
landisk owners experienced the infamous "re0: watchdog timeout"?
When using the landisk as NFS server, I can't write to it without
getting this error which basically cut the network for a minute.
I have hundreds of entrie
Hi,
On Fri, 11.05.2007 at 08:33:03 -0400, Lars D. Noodin <[EMAIL PROTECTED]> wrote:
> However, by connecting MS Windows machines into your VPN you neutralize
> many of the security benefits that you may have in place.
I'd say that depends on your setup. Imho, for many people, using a VPN
is meant
I still want to push this little points directly from the OpenLDAP faq:
* back-ldbm is /obsolete/ and /should not be used/.
*As a historical note, the back-ldbm code is a direct descendant of the
original University of Michigan code. The age of the code and its
byzantine data structures were beco
I just noticed this which seemed a little unusual, so thought I'd throw
it out here in case anyone's interested in looking at it.
I just mounted a CD on my desktop machine to copy some files across to
my laptop (in this case OpenBSD 4.1 CD1, but the same happens with other
CDs that I tried).
I co
We've been having a locking up problem with our openbsd based router for a
while now. I upgraded to 4.1 about a week ago and so far it has not locked.
Later this week we have scheduled some time to take down the router and run
some memory / disk tests on it to make sure its not a hardware issu
Since having users change their settings can be problematic in many
environments, instead change the MX record. This way you can
implement spamd right away and your users will not have to change
anything. Though I would suggest moving the users to 587/465 in the
future so that they don't
Hi,
does anybody get on a OpenBSD 4.x tcpdstat installed?
Tcpdstat from
http://staff.washington.edu/dittrich/talks/core02/tools/tcpdstat-uw.tar
is a very nice tool to get summary information of a tcpdump file.
The output includes the number of packets, the average rate and its standard
deviation
Bob Beck wrote:
>
> Any automated test I've ever set up for open relay, (and I run
> them) as well as any sane ones I ever see test for open relay by
> actually relaying a message not looking at the smtp dialoge.
>
> You're making much ado over nothing and spreading FUD -
> the test
Jacob Yocom-Piatt wrote:
Renaud Allard wrote:
I think a better solution would be for *more* people to use greylisting
implementations which do this, so that more MSexchange users will
either
bother Microsoft to fix their bug, or script 'net stop smtpsvc;net
start
smtpsvc' to run a few times
Bob Beck wrote:
>
> Any automated test I've ever set up for open relay, (and I run
> them) as well as any sane ones I ever see test for open relay by
> actually relaying a message not looking at the smtp dialoge.
>
> You're making much ado over nothing and spreading FUD -
> the teste
have your smtp-auth people use port 587/465[1]. That will also solve
the problem of traveling users being blocked at public access points.
[1] smtp+sasl or smtp wrapped in ssl, depending on the client. Don't
forget to enable this in your MTA.
On 2007 May 22 (Tue) at 10:22:19 -0600 (-0600),
> I just used dnsstuff to test one of my domain names and it showed me
> (the first time only) that my server is an openrelay, which is obviously
> not true. This is due to the default behaviour of spamd of accepting
> everything, even when a spamd.alloweddomains file is present. I think
> this cou
Stephen Schaff wrote:
I just moved my super-fantastic spamd soekris in front of a new mail
server that requires SMTP Auth to send mail... and it broke. No one
can send mail from that server.
My old server didn't require SMTP Auth and it worked fine.
i have spamd setup at work and have users
Stuart Henderson wrote:
> On 2007/05/22 17:12, Renaud Allard wrote:
>> I have only seen this when the 4xx error is sent at DATA time, not when
>> sent at RCPT TO.
>>
>>> How about: --i-dont-want-to-receive-mail-from-people-using-exchange-2003
>>> and --i-dont-want-to-receive-mail-from-people-using-
On Mon, May 21, 2007 at 08:41:18AM +0200, [EMAIL PROTECTED] wrote:
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
> > Behalf Of Anthony Howe
> > Sent: 18 May 2007 07:00 PM
> > Cc: misc@openbsd.org
> > Subject: Re: flowcharts
> >
> > [EMAIL PROTECTED] wrote:
I just moved my super-fantastic spamd soekris in front of a new mail
server that requires SMTP Auth to send mail... and it broke. No one
can send mail from that server.
My old server didn't require SMTP Auth and it worked fine.
I couldn't find anything in the docs or on the net that suggests
On May 22, 2007, at 7:09 AM, T. Ribbrock wrote:
On Sat, May 19, 2007 at 10:16:33PM -0700, Bryan Vyhmeister wrote:
That's too bad. I was hoping I could put larger drives in them. Oh
well, 120 GB it is.
Maybe you can use the same approach I used with my U10 - I've put in a
Promise PCI IDE cont
On 22/05/07, T. Ribbrock <[EMAIL PROTECTED]> wrote:
I don't know whether the X1 has free PCI slots, but if it has, it might
be an option.
I just checked mine. It has no PCI slots, however there are USB ports.
You could add an external one, but I wouldnt rely on it for production
environments.
Hello ,
Just found out what was wrong. I knew that the ruleset was allright...
I just forgot to activate pf by placing pf=YES in rc.local.conf
I'm glad that OpenBSD works just fine, and it's me who needs to be repaired
:)
I am very sorry for the noise , thanks to everybody for the tips and advice
On 2007/05/22 17:12, Renaud Allard wrote:
> I have only seen this when the 4xx error is sent at DATA time, not when
> sent at RCPT TO.
>
> > How about: --i-dont-want-to-receive-mail-from-people-using-exchange-2003
> > and --i-dont-want-to-receive-mail-from-people-using-callout-verification
>
> Th
Renaud Allard wrote:
I think a better solution would be for *more* people to use greylisting
implementations which do this, so that more MSexchange users will either
bother Microsoft to fix their bug, or script 'net stop smtpsvc;net start
smtpsvc' to run a few times a day so they can send mail
Stuart Henderson wrote:
> On 2007/05/22 15:50, Renaud Allard wrote:
>> Stuart Henderson wrote:
>
> You wouldn't need spamd on the address of a send-only instance..
> (if mail's only submitted on 587/465 or from known address ranges, it
> could just RST port 25 to the rest of the world).
Good poin
On 2007/05/22 15:50, Renaud Allard wrote:
> Stuart Henderson wrote:
> >
> > They are broken then... Workaround: use different mailer instances on
> > different IP addresses for incoming and outgoing mail (this is often a
> > good idea anyway).
>
> This workaround only works if the checker connect
On Sat, May 19, 2007 at 10:16:33PM -0700, Bryan Vyhmeister wrote:
> On May 18, 2007, at 2:09 PM, Daniel Ouellet wrote:
[drive > 137GB on Sun X1?]
> >No it doesn't. I have about 30 of them and putting any drives
> >bigger then that will simply not work. Well, actually it work, but
> >you can't
Stuart Henderson wrote:
>
> They are broken then... Workaround: use different mailer instances on
> different IP addresses for incoming and outgoing mail (this is often a
> good idea anyway).
This workaround only works if the checker connects to your MX, not to
the host sending the mail. I know t
Hello, all!
I run an OpenBSD 4.0 system, all patches installed. The installation is
rather basic, the only port open to the world is ssh, which provides
access to a subversion server and to shell logins, both via keys, or
one-time :skey passwords. As the system is exposed to the net, I
regula
On 2007/05/22 14:49, Renaud Allard wrote:
> I speak mostly of SMTP-time checkers. Imagine you are sending a mail to
> someone and while you are doing the SMTP transaction, the remote host
> also connects to your server to see if it may be an openrelay.
They are broken then... Workaround: use diffe
Peter N. M. Hansteen wrote:
> Renaud Allard <[EMAIL PROTECTED]> writes:
>
>> Indeed, but it could cause you to get blacklisted by some automated
>> checkers, which is clearly something you don't want. I know this kind of
>> checker is not accurate, but some local checkers will do it that way and
>
The following items are clearance priced and will
be discontinued after our in stock quantity has
been sold. Please click on the corresponding
link to order a product. Please forward to
anyone who may find it useful. Thank you for
your continuing patronage.
Product and Price
URL
Renaud Allard <[EMAIL PROTECTED]> writes:
> Indeed, but it could cause you to get blacklisted by some automated
> checkers, which is clearly something you don't want. I know this kind of
> checker is not accurate, but some local checkers will do it that way and
> you will end up with the problems.
Peter N. M. Hansteen wrote:
> Renaud Allard <[EMAIL PROTECTED]> writes:
>
>> I just used dnsstuff to test one of my domain names and it showed me
>> (the first time only) that my server is an openrelay, which is obviously
>> not true. This is due to the default behaviour of spamd of accepting
>> e
Hi list.
My network is extremely strange i know, nothing i can do about about it.
Just working with what i got.
I have a local network 10.0.0.0/16. This local network has several
gateways to the internet. for example 10.0.1.1, 10.0.2.1, 10.0.3.1 are
all gateways to the net. I want to make a
WPA is not implemented in OpenBSD
On 5/22/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
>
> Hello!
>
> The man page of the wpi driver states that WEP is supported, but i
> cannot
> see WPA (WPA2) mentioned.
>
> I have a laptop with a 3945 wifi chipset that works under linux
> with WPA2.
>
> I n
Hello!
The man page of the wpi driver states that WEP is supported, but i
cannot
see WPA (WPA2) mentioned.
I have a laptop with a 3945 wifi chipset that works under linux
with WPA2.
I need WPA2, and wonder if it will work under OpenBSD ?
kind regards,
-nn
"Marcos Laufer" <[EMAIL PROTECTED]> writes:
> I am testing pf in an OpenBSD 4.1. This same configuration works
> fine on OpenBSD 3.9, but in 4.1 it is not filtering anything,
> everything is passing thru, just like as if there was no 'block
> all'.
Are you sure that your rule set actually does ge
>> I am testing pf in an OpenBSD 4.1. This same configuration works fine on
>> OpenBSD 3.9, but in 4.1 it is not filtering anything, everything is passing
>> thru, just like as if there was no 'block all'.
Is pf enabled? (pfctl -si)
Did your ruleset load ok? (pfctl -sr)
>> What worries me most is
Marcos Laufer wrote:
Hello,
I am testing pf in an OpenBSD 4.1. This same configuration works fine on
OpenBSD 3.9, but in 4.1 it is not filtering anything, everything is passing
thru,
just like as if there was no 'block all'. What worries me most is that
anyone
on the outside can see my ssh serv
Renaud Allard <[EMAIL PROTECTED]> writes:
> I just used dnsstuff to test one of my domain names and it showed me
> (the first time only) that my server is an openrelay, which is obviously
> not true. This is due to the default behaviour of spamd of accepting
> everything, even when a spamd.allowed
hi all,
i have an Adsl internet connection with the tiscali provider
and i just solved my problem of getting the IP address on my openbsd machine.
i wish to share my experience here, feel free to correct my english :P
tiscali's adsl support only pppoa protocol (rfc 2364) and this is a problem
if
Bryan Irvine wrote:
I've upgraded my firewall to 4.1 and all of the packages. Now squid
fails to start with the new version.
I get the following errors:
2007/05/21 16:22:32| aclParseAclLine: WARNING: empty ACL: acl
BlockSites url_regex "/etc/squid/blocksites.txt"
2007/05/21 16:22:32| parseC
Hello,
I just used dnsstuff to test one of my domain names and it showed me
(the first time only) that my server is an openrelay, which is obviously
not true. This is due to the default behaviour of spamd of accepting
everything, even when a spamd.alloweddomains file is present. I think
this could
Hi,
On Mon, 21.05.2007 at 18:00:30 +0200, Toni Mueller <[EMAIL PROTECTED]> wrote:
> Is this problem worth opening a bug on the OpenBSD web site?
after reading the great advice of Rob Waite, the answer is obviously NO.
Sorry for the noise.
Best,
--Toni++
Henning Brauer wrote:
> * Dave Harrison <[EMAIL PROTECTED]> [2007-05-21 08:26]:
>> Henning Brauer wrote:
>>> * Uv Pzaf <[EMAIL PROTECTED]> [2007-05-20 23:12]:
I wonder why OpenBSD packages (i.e. openldap-server-2.3.24.tgz) still
uses ldbm as database backend especially since the OpenLDAP
64 matches
Mail list logo
