Re: Intel Core 2 - errata pulled?!?

2007-08-07 Thread Chris Black
Chris Cappuccio wrote: Toni Mueller [EMAIL PROTECTED] wrote: Leaving these aside, I just discovered that the i386 compatibility page does apparently not list _any_ current intel CPUs (eg. "Pentium D"), and the question about whether recent Xeons still classify as Xeon in this list has been ra

Re: Intel Core 2 - errata pulled?!?

2007-08-07 Thread Chris Cappuccio
Toni Mueller [EMAIL PROTECTED] wrote: > > Leaving these aside, I just discovered that the i386 compatibility page > does apparently not list _any_ current intel CPUs (eg. "Pentium D"), > and the question about whether recent Xeons still classify as Xeon in > this list has been raised. They are al

Ethernet bridge over IPsec in OpenBSD 4.1

2007-08-07 Thread Justin Lindberg
I have not been able to get an Ethernet bridge over IPsec to work in OpenBSD 4.1. I have two machines running as NAT gateways with a gif tunnel between them protected by IPsec ESP. The internal interfaces are both bridged to the gif tunnel. I can ping either gateway from the other over the tunne

Re: updating pf filter rules

2007-08-07 Thread RW
On Tue, 7 Aug 2007 18:31:53 -0500, Mike Piety wrote: >On Tue, 7 Aug 2007 15:46:41 -0400 >"Austin Murphy" <[EMAIL PROTECTED]> wrote: > >> I inherited a "transparent" bridging firewall running >> OpenBSD 3.8 and pf. I would like to add two new filter >> rules without disrupting the current network

Re: updating pf filter rules

2007-08-07 Thread Mike Piety
On Tue, 7 Aug 2007 15:46:41 -0400 "Austin Murphy" <[EMAIL PROTECTED]> wrote: > I inherited a "transparent" bridging firewall running > OpenBSD 3.8 and pf. I would like to add two new filter > rules without disrupting the current network traffic. The > pfctl man page did not seem to indicate a w

Re: systrace/sysjail wrappers security

2007-08-07 Thread Kristaps Dzonsons
> I am using sysjail, so I am very interested how to mitigate attacks or > is there anything OpenBSD could change to mitigate these issues? Until the kernel wrapper issues have been addressed, the sysjail page has been updated to indicate that it SHOULD NOT be used (nor should any systrace(4) sys

OpenBSD/hppa

2007-08-07 Thread Mark Kettenis
Over the last few weeks I've made some important improvements to the OpenBSD/hppa port. Support for newer B/C/J-class workstations was added, and basically anything but the C8000 should just work. I've also fixed a rather critical bug, which makes machines with a PA-7200 CPU usable again (and mak

Re: updating pf filter rules

2007-08-07 Thread Stuart Henderson
On 2007/08/07 15:46, Austin Murphy wrote: > If I made a new file with a just the new rules and loaded it with > something like "pfctl -f two.pf.rules.conf", would all the existing > filter rules be dropped and would only the two new rules be in effect? Yes. > Let's say I updated the existing conf

Re: spamd - 250 return text

2007-08-07 Thread stuart van Zee
ng-MTA: dns; toq7.bellnexxia.net > > Arrival-Date: Fri, 20 Jul 2007 21:26:11 -0400 > > Received-From-MTA: dns; Christine (64.230.70.248) > > Content-Type: text/plain > > > > Final-Recipient: RFC822; <[EMAIL PROTECTED]> > > Action: failed > > Status: 4.4.7

updating pf filter rules

2007-08-07 Thread Austin Murphy
I inherited a "transparent" bridging firewall running OpenBSD 3.8 and pf. I would like to add two new filter rules without disrupting the current network traffic. The pfctl man page did not seem to indicate a way to load a single filter rule to a running configuration. If I made a new file with

Re: spamd - 250 return text

2007-08-07 Thread Tom Bombadil
As far as I understand from them, the sysadmin was showing the defer to his boss using a telnet session, and the boss got pissed off, because they are actually very diligent about their spam policies. Anyways, I just wanted to know if it there was another way to change the 250 messages without cha

Re: gdb - firefox debugging

2007-08-07 Thread Kurt Miller
On Tuesday 07 August 2007 1:43:21 am J.C. Roberts wrote: > I'm looking for all the needed steps to get firefox debug running in > gdb. It's my first attempt at this and I've failed to the correct find > the mozilla docs (assuming they exist) or details in the misc@, ports@ > or tech@ archives. > >

Re: Lenovo 8744-J2U - several questions

2007-08-07 Thread Matthieu Herrb
On 8/7/07, Stephan Andre' <[EMAIL PROTECTED]> wrote: > > Matthieu, I'm also looking at the Lenovo T60. Is the avivo driver > ready for use, and how much effort is there in incorporating it > into Xenocara? I'd really like a new laptop--my A31p is old. > The avivo driver needs X server 1.3 and

Re: Intel Core 2 - errata pulled?!? [SOLVED]

2007-08-07 Thread Toni Mueller
Hi, On Tue, 07.08.2007 at 16:22:08 +0200, Toni Mueller <[EMAIL PROTECTED]> wrote: > On Wed, 27.06.2007 at 11:08:16 -0600, Theo de Raadt <[EMAIL PROTECTED]> wrote: > > http://download.intel.com/design/processor/specupdt/31327914.pdf > looks like intel pulled that paper. I'm unable to find it and

Re: Lenovo 8744-J2U - several questions

2007-08-07 Thread Matthew Szudzik
> Matthieu, I'm also looking at the Lenovo T60. Is the avivo driver Get a T60 with the Intel graphics chipset and an XGA display. You won't have any problems with X Windows.

systrace/sysjail wrappers security

2007-08-07 Thread Richard Storm
In the First USENIX Workshop on Offensive Technologies (WOOT07) there was presentation by Robert N. M. Watson: "Exploiting Concurrency Vulnerabilities in System Call Wrappers" with exploit code included how to bypass restrictions: http://www.watson.org/~robert/2007woot/2007usenixwoot-exploit

Re: Intel Core 2 - errata pulled?!?

2007-08-07 Thread Toni Mueller
Hi, On Wed, 27.06.2007 at 11:08:16 -0600, Theo de Raadt <[EMAIL PROTECTED]> wrote: > http://download.intel.com/design/processor/specupdt/31327914.pdf looks like intel pulled that paper. I'm unable to find it and would like to receive a private copy. > An easier summary document for some people

Re: gdb - firefox debugging

2007-08-07 Thread Tobias Ulmer
On Mon, Aug 06, 2007 at 10:43:21PM -0700, J.C. Roberts wrote: > I'm looking for all the needed steps to get firefox debug running in > gdb. It's my first attempt at this and I've failed to the correct find > the mozilla docs (assuming they exist) or details in the misc@, ports@ > or tech@ archives.

Re: compat_freebsd shared library showstopper

2007-08-07 Thread Michael Dexter
>On Monday 06 August 2007, Michael Dexter wrote: >> Anything else I should try? > >Did you try installing the emulators/freebsd_lib port? Yes. I failed to mention that in my checklist. Michael.

Re: Lenovo 8744-J2U - several questions

2007-08-07 Thread Eric Elena
Le lundi 06 aoC;t 2007 C 21:21 -0400, Stephan Andre' a C)crit : > On Monday 06 August 2007 18:29:12 Matthieu Herrb wrote: > > On 8/6/07, Frank Bax <[EMAIL PROTECTED]> wrote: > > > Just got a new Lenovo 8744-J2U laptop and installed the Aug.1 snapshot: > > > > > > vga1 at pci1 dev 0 function 0 vend

Re: Lenovo 8744-J2U - several questions

2007-08-07 Thread Pierre Riteau
Le 7 ao{t 07 ` 05:23, Frank Bax a icrit : At 06:26 PM 8/6/07, Matthieu Herrb wrote: On 8/6/07, Frank Bax <[EMAIL PROTECTED]> wrote: > Just got a new Lenovo 8744-J2U laptop and installed the Aug.1 snapshot: > > 1) When I shutdown X, text resolution is messed up. Chars are bigger, they > are 40