ssh vpn from mac os x to openbsd server howto

2010-11-01 Thread Siju George
Hi , I created SSH VPN from my OpenBSD client at home to OpenBSD Server at office to work when I am sick. It is working great. I created it using the instructions in http://www.undeadly.org/cgi?action=article&sid=20090903183235 now mtu@ suggests there that dlg@ knows elegant methods on how a Mac

Re: Does ldapd work?

2010-11-01 Thread Tomas Bodzar
On Tue, Nov 2, 2010 at 3:08 AM, Hugo Osvaldo Barrera wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > http://www.openbsd.org/cgi-bin/man.cgi?query=ldapd > > Caveats says: " ldapd does not fully work yet." It was first implemented in 4.8 so if using current then you will have most up t

sendmail relay defaults

2010-11-01 Thread Edwin Eyan Moragas
hi misc, i was looking at rc.conf to activate sendmail and i ran into this: # For normal use: "-L sm-mta -bd -q30m", and note there is a cron job sendmail_flags="-L sm-mta -C/etc/mail/localhost.cf -bd -q30m" as i understand, sendmail is initially configured to send emails locally (ie, users on t

Re: Lenovo ThinkPad T60 won't resume

2010-11-01 Thread Philip Guenther
On 11/1/10, Philip Guenther wrote: ... > I mean, come on, "worked before, stopped working, still doesn't work" > gives us nothing to go on for what broke your box. That last commit > was what broke resume on _my_ thinkpad... ...or not. Further testing on my T60 (running i386) and T510 (running

Recursos Humanos 2011, Noviembre 18 en México D.F.

2010-11-01 Thread Iveth Vasconcelos
[IMAGE] !Promociones Especiales para Grupos! Mayores informes responda este correo electrsnico con los siguientes datos. Empresa: Nombre: Telifono: Email: Nzmero de Interesados: Y en breve le haremos llegar la informacisn completa del evento. O bien comunmquense a nuestros telifonos un eje

Does ldapd work?

2010-11-01 Thread Hugo Osvaldo Barrera
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 http://www.openbsd.org/cgi-bin/man.cgi?query=ldapd Caveats says: " ldapd does not fully work yet." Is this outdated? Is there any place I can find out exactly what DOESN'T work? Also, should ldapd be considered stable for actual usage (I mean, not j

A propos de votre NewsLetter

2010-11-01 Thread Marie
Si vous ne lisez pas correctement ce mail vous devez le visualiser en html

Re: OpenBSD-capable, fanless, diskful computer with ECC RAM

2010-11-01 Thread Peter Theunis
The D945GCLF2D (Atom) doesn't do ECC. On Nov 1, 2010, at 5:42 PM, Hugo Osvaldo Barrera wrote: > On 10/29/10 21:14, Damien Miller wrote: >> Hi, >> >> Can anyone recommend a small, fanless computer that will accept a HD (perhaps >> a 2.5" drive) that uses ECC RAM? Needless to say, it must run Ope

Re: OT IPv6 Was: nfsv4?

2010-11-01 Thread Marco Peereboom
I bet they don't like IPX either. On Nov 1, 2010, at 18:58, FRLinux wrote: > On Sun, Oct 31, 2010 at 10:09 PM, Theo de Raadt wrote: >> I'm proud of it. > > Well actually, University of Alberta doesn't sound v6 enabled either... > > Steph

Re: OT IPv6 Was: nfsv4?

2010-11-01 Thread Diana Eichert
On Mon, 1 Nov 2010, Marco Peereboom wrote: I bet they don't like IPX either. NO, bad nightmares IPX over a T1 bridge make it stop, make it stop

Re: OpenBSD-capable, fanless, diskful computer with ECC RAM

2010-11-01 Thread Hugo Osvaldo Barrera
On 10/29/10 21:14, Damien Miller wrote: > Hi, > > Can anyone recommend a small, fanless computer that will accept a HD (perhaps > a 2.5" drive) that uses ECC RAM? Needless to say, it must run OpenBSD. > > Being 64 bit, having accellerated crypto and/or supporting multiple drives > would be bonus p

Re: OT IPv6 Was: nfsv4?

2010-11-01 Thread FRLinux
On Sun, Oct 31, 2010 at 10:09 PM, Theo de Raadt wrote: > I'm proud of it. Well actually, University of Alberta doesn't sound v6 enabled either... Steph

Re: RESOLVED: segmentation faults during compiling

2010-11-01 Thread Amit Kulkarni
Hi, The exact value which solved my problem is definitively. staff:\ :datasize-cur=1G:\ I found out that datasize-cur is a hard limit which causes a virtual memory exhausted message. As soon as memory comes close to 512M (old value), the compile process used to terminate. Just a F

Re: something weird with perl in CVS?

2010-11-01 Thread Joachim Schipper
On Sat, Oct 30, 2010 at 02:44:50PM -0700, Philip Guenther wrote: > On Sat, Oct 30, 2010 at 10:34 AM, Maurice Janssen wrote: > > (...) I extracted the src.tar.gz from the 4.8 CDROM and > > synchronized the src tree to -stable through CVS. I expected to see > > about 5 files being changed, but to m

Call for Papers: AsiaBSDCon 2011

2010-11-01 Thread Hiroki Sato
Hello, I would like to announce AsiaBSDCon the next year, 17-20 March 2011 in Tokyo. You can find the details at: http://2011.asiabsdcon.org and the CFP can be found at: http://2011.asiabsdcon.org/cfp.html Papers, videos, and photos of the past AsiaBSDCon can also be found there. Th

Re: OpenBSD 4.8 released Nov 1, 2010

2010-11-01 Thread Allie Daneman
Again a phenomenal release...thanks again for the best OS in existence. On Nov 1, 2010, at 8:02, Theo de Raadt wrote: > > Nov 1, 2010. > > We are pleased to announce the official release of OpenBSD 4.8. > This is our 28th r

Re: OpenBSD 4.8 released Nov 1, 2010

2010-11-01 Thread Karl O. Pinc
On 11/01/2010 10:02:28 AM, Theo de Raadt wrote: > We are pleased to announce the official release of OpenBSD 4.8. I notice that the Errata link on the OpenBSD home page gets a 404. Are there no errata? Thanks for all the great work. Karl Free Software: "You don't pay back, you pay forward."

Re: OpenBSD-capable, fanless, diskful computer with ECC RAM

2010-11-01 Thread Jean-Francois
Le Saturday 30 October 2010 02:14:21, Damien Miller a icrit : > Hi, > > Can anyone recommend a small, fanless computer that will accept a HD > (perhaps a 2.5" drive) that uses ECC RAM? Needless to say, it must run > OpenBSD. > > Being 64 bit, having accellerated crypto and/or supporting multiple dr

Re: OpenBSD 4.8 released Nov 1, 2010

2010-11-01 Thread André
> Nov 1, 2010. > > We are pleased to announce the official release of OpenBSD 4.8. > > > ThanX to EVERYONE for this greatl OS! bb

Re: Multi-Port SSH brute force protection

2010-11-01 Thread Henning Brauer
* Dennis Davis [2010-11-01 17:19]: > More precisely, Peter Hansteen is your friend: > > http://home.nuug.no/~peter/pf/en/bruteforce.html and funny enough - I use that technique for ages, and only ever trapped myself with it once. While sitting on a table at ottawa uni - with peter. -- Henning

spamd -G whiteexp not honored?

2010-11-01 Thread Daniel Perup
Hi, I'm having problems with spamd and the -G option. It seems that spamd does not honor the whiteexp value at all, but uses the default value at all times: # pkill spam # /usr/libexec/spamd -G 4:10:500 # /usr/libexec/spamd-setup -D # /usr/libexec/spamlogd # spamdb -a 1.2.3.4 # spamdb|grep 1.2.3.

Re: error when compile the kernel

2010-11-01 Thread Peter N. M. Hansteen
OpenBSD Geek writes: > Hi, I just installed an OpenBSD 4.7. > > Now i want to update it to 4.7 > -current what i ve done : cd /usr/src ; tar zxvf src.tar.gz ; tar zxvf > sys.tar.gz You're at least six months too late to get 4.7-current. After those steps you have 4.7-release and matching sour

Any improvements in mgetty/ppp for 4.8?

2010-11-01 Thread Orestes Leal R.
I would like to know if the mgetty/ppp userland code in 4.8 has improvements, only that because I'm getting weird problems right now with 4.3, thanks. ;) LeaL

Re: suggestion for a new/additional OpenBSD release media option

2010-11-01 Thread J Sisson
On Mon, Nov 1, 2010 at 11:11 AM, Michal wrote: > You can have CD's with multiple types of OS and you have a choice screen. > MS MSDN CD's often have different versions; server OS cd's have web, > stranded and enterprise and you just get a choice screen. But again, its all > time and effort at the

Re: suggestion for a new/additional OpenBSD release media option

2010-11-01 Thread Johan Beisser
On Sun, Oct 31, 2010 at 3:39 PM, Jamie Paul Griffin wrote: >> Everytime one of you write to Theo directly, >> I feel like I'm watching gay porn. > > would someone please block this prick. it was funny to start with but now > it's intensely annoying. You could just toss his email in to your killf

Re: OpenBSD 4.8 released Nov 1, 2010

2010-11-01 Thread Jesus Sanchez
El 01/11/2010 16:02, Theo de Raadt escribis: Nov 1, 2010. We are pleased to announce the official release of OpenBSD 4.8. This is our 28th release on CD-ROM (and 29th via FTP). We remain proud of OpenBSD's record of more t

Re: suggestion for a new/additional OpenBSD release media option

2010-11-01 Thread Michal
For me, the ability to boot of the install media is not a requirement. I do all my installs via pxeboot. If there were enough room on the DVD, you could also provide the CDROM ISOs. If a user REALLY needed bootable media, they could burn the ISOs to CDROMs, and do that. Again, these are only su

Re: suggestion for a new/additional OpenBSD release media option

2010-11-01 Thread Theo de Raadt
> > For me, the ability to boot of the install media is not a requirement. I do > > all my installs via pxeboot. > > > > If there were enough room on the DVD, you could also provide the CDROM ISOs. > > If a user REALLY needed bootable media, they could > > burn the ISOs to CDROMs, and do that. > >

Re: error when compile the kernel

2010-11-01 Thread Nick Holland
On 11/01/10 10:01, roberth wrote: On Mon, 1 Nov 2010 08:40:04 -0500 "Josh Grosse" wrote: In gerneral, if you want to run -current, you start by upgrading to/installing the latest snapshot. =That= is the reason the OP's build failed. Othere general advice for OP, if he wants to follow

Re: Lenovo ThinkPad T60 won't resume

2010-11-01 Thread Philip Guenther
On Mon, Nov 1, 2010 at 4:38 AM, LEVAI Daniel wrote: > On Sun, Oct 31, 2010 at 15:06:29 -0700, Philip Guenther wrote: >> On Sunday, October 31, 2010, LEVAI Daniel wrote: >> > My Lenovo ThinkPad won't resume after suspend. When suspending, the >> > little moon led lights up, and when resuming it bl

Re: Multi-Port SSH brute force protection

2010-11-01 Thread Dennis Davis
On Mon, 1 Nov 2010, Gonzalo L. R. wrote: > From: Gonzalo L. R. > To: misc@openbsd.org > Date: Mon, 1 Nov 2010 14:39:41 > Subject: Re: Multi-Port SSH brute force protection > > pf and tables are your friends. More precisely, Peter Hansteen is your friend: http://home.nuug.no/~peter/pf/en/brutef

Re: error when compile the kernel

2010-11-01 Thread Josh Grosse
On Mon, 1 Nov 2010 14:28:00 +0100, roberth wrote > Your config is broken? Mine prints: > # config GENERIC > Don't forget to run "make depend" The OP's config is "broken" because of the 25 May 2010 change to config(8) for kernel builds. It was in the "Following -current" FAQ until today, when all

OpenBSD 4.8 released Nov 1, 2010

2010-11-01 Thread Theo de Raadt
Nov 1, 2010. We are pleased to announce the official release of OpenBSD 4.8. This is our 28th release on CD-ROM (and 29th via FTP). We remain proud of OpenBSD's record of more than ten years with only two remote holes in the

Re: Multi-Port SSH brute force protection

2010-11-01 Thread onteria
> This problem is quite active for at least last two years and quite a > lot about that was written eg. here http://bsdly.blogspot.com/ so I > can recommend it for reading. If you will disable passwords completely > and use keys instead then you will have much less problems. Yes, looking over a fe

Re: Multi-Port SSH brute force protection

2010-11-01 Thread Tomas Bodzar
On Mon, Nov 1, 2010 at 3:30 PM, onteria wrote: > I was checking my authlog today and noticed the following series of > brute force login attempts: > > Nov B 1 01:37:04 solar sshd[8173]: Failed password for root from > 58.211.1.163 port 8895 ssh2 > Nov B 1 01:37:04 solar sshd[10692]: Received disco

Re: Multi-Port SSH brute force protection

2010-11-01 Thread Ari Constancio
On Mon, Nov 1, 2010 at 2:30 PM, onteria wrote: > I was checking my authlog today and noticed the following series of > brute force login attempts: > > Nov 1 01:37:04 solar sshd[8173]: Failed password for root from > 58.211.1.163 port 8895 ssh2 > Nov 1 01:37:04 solar sshd[10692]: Received disconn

Re: Multi-Port SSH brute force protection

2010-11-01 Thread Abel Abraham Camarillo Ojeda
On Mon, Nov 1, 2010 at 8:30 AM, onteria wrote: > I was checking my authlog today and noticed the following series of > brute force login attempts: > > Nov B 1 01:37:04 solar sshd[8173]: Failed password for root from > 58.211.1.163 port 8895 ssh2 > Nov B 1 01:37:04 solar sshd[10692]: Received disco

Re: Multi-Port SSH brute force protection

2010-11-01 Thread Josh Grosse
On Mon, 1 Nov 2010 07:30:50 -0700, onteria wrote > I was checking my authlog today and noticed the following series of > brute force login attempts: > > Nov 1 01:37:04 solar sshd[8173]: Failed password for root from > 58.211.1.163 port 8895 ssh2 > Nov 1 01:37:04 solar sshd[10692]: Received disco

Re: Multi-Port SSH brute force protection

2010-11-01 Thread onteria
> You are confusing the origination port numbers, which can be any random port > number, with the destination port number -- the destination port number is the > port your server is listening on, and that will be 22 by default. Ouch, I just realized the idiocy of my previous email upon reading tha

Re: Multi-Port SSH brute force protection

2010-11-01 Thread Gonzalo L. R.
pf and tables are your friends. On 11/01/10 11:30, onteria wrote: > I was checking my authlog today and noticed the following series of > brute force login attempts: > > Nov 1 01:37:04 solar sshd[8173]: Failed password for root from > 58.211.1.163 port 8895 ssh2 > Nov 1 01:37:04 solar sshd[1069

Multi-Port SSH brute force protection

2010-11-01 Thread onteria
I was checking my authlog today and noticed the following series of brute force login attempts: Nov 1 01:37:04 solar sshd[8173]: Failed password for root from 58.211.1.163 port 8895 ssh2 Nov 1 01:37:04 solar sshd[10692]: Received disconnect from 58.211.1.163: 11: Bye Bye Nov 1 01:37:06 solar ss

Re: error when compile the kernel

2010-11-01 Thread roberth
On Mon, 1 Nov 2010 08:40:04 -0500 "Josh Grosse" wrote: > On Mon, 1 Nov 2010 14:28:00 +0100, roberth wrote > > > Your config is broken? Mine prints: > > # config GENERIC > > Don't forget to run "make depend" > > The OP's config is "broken" because of the 25 May 2010 change to > config(8) for ker

Re: error when compile the kernel

2010-11-01 Thread roberth
On Mon, 01 Nov 2010 16:36:35 +0400 OpenBSD Geek wrote: > when this last is done, i start to compile kernel : cd > /usr/src/sys/arch/i386/conf > > config GENERIC > > cd ../compile/GENERIC > > make > clean Your config is broken? Mine prints: # config GENERIC Don't forget to run "make depend"

Packet Loss on Wireless (RAL and WI)

2010-11-01 Thread Jammer
Hi I'm experiencing problems setting up an OpenBSD box as a firewall/Wireless Access Point and wonder if I can get some advice from someone who has previously set this up. I've tried everything I can think of but have run out of ideas. Firstly my setup: * I've tried this using OpenBSD v4.1,

Re: error when compile the kernel

2010-11-01 Thread Josh Grosse
On Mon, 01 Nov 2010 16:36:35 +0400, OpenBSD Geek wrote > Hi, I just installed an OpenBSD 4.7. > > Now i want to update it to 4.7 > -current... > ...I don't understand why it doesn't work. If > someone can help me. thanks >From FAQ 5.1: "If you desire to run -current, a recent snapshot is often a

error when compile the kernel

2010-11-01 Thread OpenBSD Geek
Hi, I just installed an OpenBSD 4.7. Now i want to update it to 4.7 -current what i ve done : cd /usr/src ; tar zxvf src.tar.gz ; tar zxvf sys.tar.gz cd /usr export cvsroot=anon...@anoncvs.fr.openbsd.org:/cvs cvs -d$CVSROOT checkout -P src cd /usr/src cvs -d $CVSROOT up -Pd when this la

Re: Dynamic web hosting and OpenBSD

2010-11-01 Thread Matt Bettinger
On Mon, Nov 1, 2010 at 6:10 AM, Jan Stary wrote: > This is a good one again. Thanks! > > Yeah! even fwd it to a couple of buddies not on the list. Surely much more important things to talk about like why NFS is so fucking slow on openbsd?

Re: Dynamic web hosting and OpenBSD

2010-11-01 Thread Hugo Osvaldo Barrera
On 10/31/10 18:12, bsdmas...@hushmail.com wrote: > Dear Friends, > > I am currently starting my very own hosting business, > as I'm horribly tired of all the incompetence in the > field. Obviously I take security seriously, and therefore > will be using OpenBSD exclusively. > > One thing is bother

Re: Lenovo ThinkPad T60 won't resume

2010-11-01 Thread LEVAI Daniel
On Sun, Oct 31, 2010 at 15:06:29 -0700, Philip Guenther wrote: > On Sunday, October 31, 2010, LEVAI Daniel wrote: > > My Lenovo ThinkPad won't resume after suspend. When suspending, the > > little moon led lights up, and when resuming it blinks, but that's all. > ... > > Problem commit has been b

Re: Dynamic web hosting and OpenBSD

2010-11-01 Thread Jan Stary
On Oct 31 17:12:17, bsdmas...@hushmail.com wrote: > Dear Friends, > > I am currently starting my very own hosting business, > as I'm horribly tired of all the incompetence in the > field. Obviously I take security seriously, and therefore > will be using OpenBSD exclusively. > > One thing is both

Re: Dynamic web hosting and OpenBSD

2010-11-01 Thread David Coppa
Why not filtering hushmail and living in peace again? -david-

Re: Dynamic web hosting and OpenBSD

2010-11-01 Thread Mikle Krutov
Sir, You Are Awesome. > I am currently starting my very own hosting business, > as I'm horribly tired of all the incompetence in the > field. Obviously I take security seriously, and therefore > will be using OpenBSD exclusively. -- Old mercenaries never die. They go to hell and regroup. With

Re: Lenovo ThinkPad T60 won't resume

2010-11-01 Thread LEVAI Daniel
On Sun, Oct 31, 2010 at 23:07:40 +, percy piper wrote: > >> It has an ATI Radeon Mobility X1400 btw. > > > I have the same issue with resume. > > Did either of you have working resume ever before? The farthest I could got with resume was a not resumed video display. I could type in reboot a