Re: kern.bufcachepercent

2009-11-03 Thread Bob Beck
2009/11/3 Luis Useche : > > I read in the 4.6 changelog that his was part of the release. > > Am I missing something? Do I have to recompile? Or this is just a bug? Yeah you are missing something. Listen to the *whole* presentation and read the *whole* changelog. This is *not* in 4.6 It is in cu

Re: http://www.theregister.co.uk/2009/11/03/linux_kernel_vulnerability/

2009-11-03 Thread Bob Beck
2009/11/3 Gilles Chehade : > On Tue, Nov 03, 2009 at 04:58:25PM -0700, Theo de Raadt wrote: >> [bcc'd to Dan Goodin @ theregister] >> >> If anyone wants a choice quote from me about the recent Linux holes, >> this is what I have to say: >> >> Linus is too busy thinking about masturabating monke

Re: http://www.theregister.co.uk/2009/11/03/linux_kernel_vulnerability/

2009-11-03 Thread Theo de Raadt
> Theo de Raadt wrote: > >http://article.gmane.org/gmane.linux.kernel/706950 > > > > > > > I replaced Linux around '01 or '02 with OpenBSD both at companies I've > worked for since and at home. I don't really care what other people use > for their needs, and I've been neutral in my opinio

Re: http://www.theregister.co.uk/2009/11/03/linux_kernel_vulnerability/

2009-11-03 Thread Scott McEachern
Theo de Raadt wrote: http://article.gmane.org/gmane.linux.kernel/706950 I replaced Linux around '01 or '02 with OpenBSD both at companies I've worked for since and at home. I don't really care what other people use for their needs, and I've been neutral in my opinion about Torvalds and

Re: http://www.theregister.co.uk/2009/11/03/linux_kernel_vulnerability/

2009-11-03 Thread Aaron Mason
On Wed, Nov 4, 2009 at 1:04 PM, Gonzalo Lionel Rodriguez wrote: > 2009/11/3 Claire beuserie : >> Hi, >> >> On Wed, Nov 4, 2009 at 12:58 AM, Theo de Raadt > wrote: >> >>> 2) At least three of our developers were aware of this exploitation >>> method going back perhaps two years before than the co

Re: http://www.theregister.co.uk/2009/11/03/linux_kernel_vulnerability/

2009-11-03 Thread Cor
My interpretation is that yes, they identified it as a possibility, but due to limitations of the Intel platform, there wasn't an obvious, clean, "correct" way to fix it. I don't think this is a "primary" exploit, however. You would have to have a buffer overflow or something in some other ap

Re: http://www.theregister.co.uk/2009/11/03/linux_kernel_vulnerability/

2009-11-03 Thread Tobias Ulmer
On Wed, Nov 04, 2009 at 02:57:59AM +0100, Claire beuserie wrote: > Hi, > > On Wed, Nov 4, 2009 at 12:58 AM, Theo de Raadt wrote: > > > 2) At least three of our developers were aware of this exploitation > > method going back perhaps two years before than the commit, but we > > gnashed our tee

Re: linksys wusb600n panic with wep

2009-11-03 Thread FRLinux
On Tue, Nov 3, 2009 at 11:24 AM, FRLinux wrote: > I am doing some testing on OpenBSD 4.6-release and when i insert that > Linksys Wireless key (WUSB600N), if I assign a wep key to it to > connect to a test access point (due to some situation, I cannot change > the access point just now), i get a p

http://www.theregister.co.uk/2009/11/03/linux_kernel_vulnerability/

2009-11-03 Thread Theo de Raadt
[bcc'd to Dan Goodin @ theregister] If anyone wants a choice quote from me about the recent Linux holes, this is what I have to say: Linus is too busy thinking about masturabating monkeys, he doesn't have time to care about Linux security. For the record, this particular problem was reso

GLOBAL TRADUZIONI PROFESSIONALI

2009-11-03 Thread GLOBAL TRADUZIONI PROFESSIONALI
GLOBAL TRADUZIONI PROFESSIONALI [demime 1.01d removed an attachment of type image/jpeg which had a name of 1.jpg] [demime 1.01d removed an attachment of type image/jpeg which had a name of 2.jpg] [demime 1.01d removed an attachment of type image/jpeg which had a name of 3.jpg] [demime 1.01d

Re: Mention no-df bug in upgrade46.html?

2009-11-03 Thread Stuart Henderson
On 2009-10-19, Matthew Dempsky wrote: > Just since upgrade46.html mentions the new syntax for packet scrubbing > and specifically describes the behavior of the no-df flag, perhaps it > should mention that the 4.6-release (and 4.6-stable?) kernel uses the > opposite semantics for this setting? (Se

Re: pf changes the order of filtering rules

2009-11-03 Thread Stuart Henderson
On 2009-11-03, Alexander Shikoff wrote: > Because I need queuing for outgoing traffic on vlan* interfaces. > When keep state is used then queues for outgoing traffic do not work. this (and variations) keep coming up (and has been answered 3 or 4 times in various mailing lists), but it's incorrect

Re: http://www.theregister.co.uk/2009/11/03/linux_kernel_vulnerability/

2009-11-03 Thread Gilles Chehade
On Tue, Nov 03, 2009 at 04:58:25PM -0700, Theo de Raadt wrote: > [bcc'd to Dan Goodin @ theregister] > > If anyone wants a choice quote from me about the recent Linux holes, > this is what I have to say: > > Linus is too busy thinking about masturabating monkeys, he doesn't > have time to

kern.bufcachepercent

2009-11-03 Thread Luis Useche
Hi Guys, Today I watched the presentation by Bob Beck about the OpenBSD VFS hacking where he talked about the buffer cache and how it recently changed (among many other things). Following his advice, I tried to increase my buffer cache size with no success. The commands I am running: $ sysctl ker

Re: pf changes the order of filtering rules

2009-11-03 Thread Alexander Shikoff
On Wed, Nov 04, 2009 at 01:43:08AM +0200, Alexander Shikoff wrote: > On Tue, Nov 03, 2009 at 10:44:08PM +, Stuart Henderson wrote: > > On 2009-11-03, Alexander Shikoff wrote: > > > Because I need queuing for outgoing traffic on vlan* interfaces. > > > When keep state is used then queues for ou

Re: pf changes the order of filtering rules

2009-11-03 Thread Alexander Shikoff
On Tue, Nov 03, 2009 at 10:44:08PM +, Stuart Henderson wrote: > On 2009-11-03, Alexander Shikoff wrote: > > Because I need queuing for outgoing traffic on vlan* interfaces. > > When keep state is used then queues for outgoing traffic do not work. > > this (and variations) keep coming up (and

Re: http://www.theregister.co.uk/2009/11/03/linux_kernel_vulnerability/

2009-11-03 Thread Gonzalo Lionel Rodriguez
2009/11/3 Claire beuserie : > Hi, > > On Wed, Nov 4, 2009 at 12:58 AM, Theo de Raadt wrote: > >> 2) At least three of our developers were aware of this exploitation >> method going back perhaps two years before than the commit, but we >> gnashed our teeth a lot to try to find other solutions.

Re: pf changes the order of filtering rules

2009-11-03 Thread Cor
Henning Brauer wrote: how about reading the manpages for a change. sometimes i wonder why we write them. Please, PLEASE don't stop :) Seriously, this is one area where OpenBSD (and probably other BSDs, too) romp on Linux. I was debugging my pf syntax last weekend and took the time to

riaddebito estratto conto numero prat. 8091066

2009-11-03 Thread CartaSi
Gentile Cliente, l abbiamo provata a contattare telefonicamente senza nessun esito, in rif alla sua carta n 4539 la banca dove addebita l estratto conto ha stornato l addebito del mese di settembre. La preghiamo di confermare i dati in nostro possesso accedendo ai servizi on line

Re: http://www.theregister.co.uk/2009/11/03/linux_kernel_vulnerability/

2009-11-03 Thread Claire beuserie
Hi, On Wed, Nov 4, 2009 at 12:58 AM, Theo de Raadt wrote: > 2) At least three of our developers were aware of this exploitation > method going back perhaps two years before than the commit, but we > gnashed our teeth a lot to try to find other solutions. Clever > cpu architectures don't ha

Re: kern.bufcachepercent

2009-11-03 Thread Robert
On Tue, 3 Nov 2009 19:34:24 -0500 Luis Useche wrote: > Hi Guys, > > Today I watched the presentation by Bob Beck about the OpenBSD VFS > hacking where he talked about the buffer cache and how it recently > changed (among many other things). Following his advice, I tried to > increase my buffer c

Re: Starting a Radius / Nas in openbsd

2009-11-03 Thread Brian A. Seklecki
On Fri, 2009-10-30 at 22:08 +0100, C. Diego Raffaelli A. wrote: > Any idea? Am i right using OpenBSD and trying to use Radius and/or > NAS?? RADIUS Authentication and RADIUS Accounting are what you want, but that's off-topic for this list. Look in ports for RADIUS servers. Good luck. ~BAS

Re: cell card on vaio p

2009-11-03 Thread Brian A. Seklecki
On Fri, 2009-10-30 at 12:01 -0700, Lawrence-Sporkton wrote: > I believe its the Gobi 1000 or Gobi UNDP-1 which appear to be the same > device Very odd. This is a CDMA/3G/GSM/EVDO modem? Normally they show up as PCMICIA, USB, or PCI Serial devices. A lot of times the PCMCIA ones present a USB Ho

Re: MD Lists

2009-11-03 Thread scallop Zapata
Please let me know if you were still looking for directories of US doctors or dentists. I have US medical professional lists, let me know what you need and I will get you some more info, samples and a very reasonable price. you can reach me at: ste...@bestchoiceformed.org For your subscrip

Re: linksys wusb600n panic with wep

2009-11-03 Thread FRLinux
On Tue, Nov 3, 2009 at 1:32 PM, Stuart Henderson wrote: > dmesg, trace, ps. > Device is at home but will provide that tomorrow. Cheers, Steph

Re: pf changes the order of filtering rules

2009-11-03 Thread Alexander Shikoff
On Tue, Nov 03, 2009 at 05:00:39PM +0300, Vadim Zhukov wrote: > > Does anyone know how to disable this? Thanks in advance! > > 1. Why do you want to disable this? Did you even noticed actual problems? > > 2. See pf.conf(5), particularly part about "ruleset-optimization" option. > But better you

Re: pf changes the order of filtering rules

2009-11-03 Thread Vadim Zhukov
On 3 November 2009 G. 16:32:29 Alexander Shikoff wrote: > Hello! > > I have strange behavior of pf on my 4.6 box. > > Filtering rules are present in pf.conf in next order: > block in all > pass in quick on $ext_if proto tcp from any to ($ext_if) port ssh > pass out quick on $ext_if > pass in quick

Re: pf changes the order of filtering rules

2009-11-03 Thread Alexander Shikoff
On Tue, Nov 03, 2009 at 02:49:36PM +0100, Paul de Weerd wrote: > On Tue, Nov 03, 2009 at 03:32:29PM +0200, Alexander Shikoff wrote: > | Hello! > | > | I have strange behavior of pf on my 4.6 box. > | > | Filtering rules are present in pf.conf in next order: > | block in all > | pass in quick on $

Re: pf changes the order of filtering rules

2009-11-03 Thread Henning Brauer
* Alexander Shikoff [2009-11-03 14:40]: > I have strange behavior of pf on my 4.6 box. no. > Filtering rules are present in pf.conf in next order: > But after they loaded pfctl -sr shows another order: how about reading the manpages for a change. sometimes i wonder why we write them. oh sorry

Re: pf changes the order of filtering rules

2009-11-03 Thread Paul de Weerd
On Tue, Nov 03, 2009 at 03:32:29PM +0200, Alexander Shikoff wrote: | Hello! | | I have strange behavior of pf on my 4.6 box. | | Filtering rules are present in pf.conf in next order: | block in all | pass in quick on $ext_if proto tcp from any to ($ext_if) port ssh | pass out quick on $ext_if | p

pf changes the order of filtering rules

2009-11-03 Thread Alexander Shikoff
Hello! I have strange behavior of pf on my 4.6 box. Filtering rules are present in pf.conf in next order: block in all pass in quick on $ext_if proto tcp from any to ($ext_if) port ssh pass out quick on $ext_if pass in quick on $ext_if no state pass in quick on vlan609 from vlan609:network to a

Re: linksys wusb600n panic with wep

2009-11-03 Thread Stuart Henderson
On 2009-11-03, FRLinux wrote: > Hello, > > I am doing some testing on OpenBSD 4.6-release and when i insert that > Linksys Wireless key (WUSB600N), if I assign a wep key to it to > connect to a test access point (due to some situation, I cannot change > the access point just now), i get a panic th

Re: İhracat Pazar Araştırması ve Müşteri Bulma

2009-11-03 Thread DT Akademi
]hracat Pazarlar} ve M|~teri Ar ]hracat Pazarlar} ve M|~teri Ara~t}rma Teknikleri Epitimi Epitimin Amac} Epitimimizin temel amac} depi~en d|nya pazarlar

linksys wusb600n panic with wep

2009-11-03 Thread FRLinux
Hello, I am doing some testing on OpenBSD 4.6-release and when i insert that Linksys Wireless key (WUSB600N), if I assign a wep key to it to connect to a test access point (due to some situation, I cannot change the access point just now), i get a panic then get put in dbd. Does anyone know of tha

Re: seeing separate logs for differrent interfaces.

2009-11-03 Thread Henning Brauer
* Siju George [2009-11-03 07:07]: > I have 2 interfaces rl1 and sk0. I would like to see their logs separately > using > > #pfctl -s info can't. > if I put > > set loginterface rl1 > set loginterface sk0 > > in /etc/pf.conf and type > > #pfctl -s info > > it only shows log for sk0 yes, th

Re: seeing separate logs for differrent interfaces.

2009-11-03 Thread Michiel van Baak
On 11:34, Tue 03 Nov 09, Siju George wrote: > Hi, > > I have 2 interfaces rl1 and sk0. I would like to see their logs separately > using > > #pfctl -s info > > if I put > > set loginterface rl1 > set loginterface sk0 > > in /etc/pf.conf and type > > #pfctl -s info > > it only shows log for