Re: hardware needed for network stack performance work

2007-06-13 Thread Will H. Backman
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Theo de Raadt Sent: Wednesday, June 13, 2007 1:30 PM To: Jack J. Woehr Cc: [EMAIL PROTECTED] Org Subject: Re: hardware needed for network stack performance work > On Jun 13, 2007, at 11:02 AM, Theo de Raadt w

Re: Problem routing 10.x.x.x networks through a firewall

2007-01-30 Thread Will H. Backman
John Brahy wrote: Hello, I am having a problem routing IP traffic on my network. my firewall has three interfaces. | +-+--+ | P2P - t1 | | router | | 10.1.2.1 | +-+--+ | +-+--+ | 10.1.2.2 | | router | | 10.1.3.1 | +-+--+ | +-+--

/etc/rc.local changes not picked up by first insecurity report

2007-01-25 Thread Will H. Backman
Running 4.0 RELEASE in i386. I installed yesterday, and today, received my nice daily insecurity output. I love this report because it is a great way to document my initial configuration changes. I noticed that it didn't pick up my changes to /etc/rc.local that I made to start mysql. Looking in /v

Negative temp sensor readings?

2006-12-20 Thread Will H. Backman
Has anyone else seen negative temperature sensor readings through sysctl? hw.sensors.0=ipmi0, Temp, -54.00 degC, OK hw.sensors.1=ipmi0, Temp, -51.00 degC, OK hw.sensors.2=ipmi0, Temp, 40.00 degC, WARNING OpenBSD 4.0 (GENERIC.MP) #967: Sat Sep 16 20:38:15 MDT 2006 [EMAIL PROTECTED]:/usr/src/sy

amd64 4.0 on Dell 2950 install problem

2006-12-19 Thread Will H. Backman
I have a Dell 2950, and I'm trying to install the amd64 port of 4.0 release. Install goes fine until the card tries to get an IP address from dhcp. Then I get: Fatal protection fault in supervisor mode. Trap type 4 code 0 rip802c279c cs 8 rflags 10286 cr 2 4a8f40 cpl 7 rsp 80006bea7c50

Re: layout of filesystems on OpenBSD

2006-11-10 Thread Will H. Backman
Robert Urban wrote: to me, this just looks like a horrible mess. I have never understood why people should be so keen on creating thousands of microscopic filesystems. For me, the advantage of being able to have several classes of filesystem content all take advantage of the available free space

Re: proposed patch for ifconfig(8) man page

2006-11-07 Thread Will H. Backman
Bob Beck wrote: * Jason McIntyre <[EMAIL PROTECTED]> [2006-11-07 11:25]: On Tue, Nov 07, 2006 at 06:52:19PM +0100, Igor Sobrado wrote: Can I suggest adding atalk(4), inet6(4), ipsec(4), pf(4), pflog(4), eon(5), hostapd(8), and tcpdump(8) to the "SEE ALSO" section of ifconfig(8)? I thin

help with uaudio device

2006-11-03 Thread Will H. Backman
I'm trying to get an external usb audio device working on 4.0 release: uaudio0 at uhub1 port 2 configuration 1 interface 0: FORTEMEDIA FM1083, rev 1.10/0.01, addr 2 uaudio0: ignored audio interface with 2 endpoints uaudio0: audio rev 1.00, 5 mixer controls audio1 at uaudio0 I'm a little confus

Month of the Kernel bug fuzzing tools

2006-11-02 Thread Will H. Backman
Anyone tried these fuzzing tools on OpenBSD? http://projects.info-pull.com/mokb/ What's the purpose of the "MoKB" ? Publish one bug on daily basis for the month of November, 2006. Show tools and procedures useful for testing the strength and quality of kernel code (ex. networking, files

sensorsd.conf multiple thresholds for the same sensor allowed?

2006-10-31 Thread Will H. Backman
Is it possible to specify multiple thresholds for the same sensor in /etc/sensorsd.conf? For example: hw.sensors.2:low=50F:high=70F:command=/bin/echo "Ambient Temp %2" | /usr/bin/mail -s "Hardware Sensors Warning" [EMAIL PROTECTED] hw.sensors.2:low=55F:high=68F:command=/bin/echo "Ambient Temp %2

Re: OpenBSD Audio series other than bsdtalk ?

2006-10-25 Thread Will H. Backman
Jon Simola wrote: On 10/25/06, Douglas Hunter <[EMAIL PROTECTED]> wrote: Other than bsdtalk, NYCBUG and some rare one off taster programmes are there any recordings of talks about OpenBSD (OGG or MP3) available on the web ? I'm really hoping someone recorded Theo's talk at the CUUG last nigh

spamd statistics

2006-10-23 Thread Will H. Backman
Some interesting spamd statistics gathered from /var/log/daemon: From 8am Oct 22 to noon Oct 23: 19112 "connected" messages from spamd, which means connections from IPs that are not in the whitelist. 2247 "inbound" messages from spamlogd, which mean connection from IPs that are already on the wh

spamd tolower or (char)tolower

2006-10-20 Thread Will H. Backman
While wandering around the source code to spamd looking to see if trapping was case insensitive, I noticed a slight difference in how spamd and spamdb convert addresses to all lower case: Spamd does the following in the greyupdate function: for (i = 0; trap[i] != '\0'; i++)

Re: Spamd - whitelist of mis-behaving SMTP server POOLS

2006-10-20 Thread Will H. Backman
Steve Williams wrote: Hi, I have been running spamdb greylisting only for several years as my only line of defense at home. At work I have managed to sneak in a Sparc64 Sunfire 120 (OpenBSD 3.9) as a caching web proxy & default gateway. Today, we had a fairly agressive attack on our email

spamdb man page - greytrap address

2006-10-16 Thread Will H. Backman
In the man page for spamdb, it states: If adding or deleting a SPAMTRAP address (-T), key should be specified as an email address: <[EMAIL PROTECTED]> But this only works with quotes around the address for me, ie: "<[EMAIL PROTECTED]>" Should the man page be updated, or am I doing

Re: Oldest Server you run

2006-10-12 Thread Will H. Backman
Falk Husemann wrote: Hello List! We're trying to put an old server to good use again and would like to know what's exactly the oldest machine running OpenBSD? As machine we defined something with processor, ram, network, hard disk and a connection to the internet. So no Newton or toaster (at

Re: multiple ways to build a kernel in docs

2006-09-26 Thread Will H. Backman
Henning Brauer wrote: * Greg Thomas <[EMAIL PROTECTED]> [2006-09-26 22:36]: Having just done it with "make install" for the first time, I'd always copied and moved it manually, it looks like it saves the previous kernel as /obsd. it actually replaces the kernel atomically by doing mv

multiple ways to build a kernel in docs

2006-09-26 Thread Will H. Backman
In the FAQ for building a kernel: http://www.openbsd.org/faq/faq5.html#Building After the make, it says to do a make install. In the section about following stable: http://www.openbsd.org/stable.html#building It instead says to backup the old kernel move the new kernel into the right place. Th

Re: Experience with isakmpd/ipsec in production?

2006-08-21 Thread Will H. Backman
Have you experienced any interoperability problems when establishing tunnels with peers that run other implementations (cisco, checkpoint, etc)? And if so, how do you work around those? None--after finding the correct initial configuration everything "just worked" and continued to. One

Aladdin eToken (WSO) to donate

2006-08-18 Thread Will H. Backman
Any OpenBSD developers interested in an Aladdin eToken (WSO)? -- Will Backman Network Administrator Coastal Enterprises, Inc.

Re: spamd and TLS on port 25

2006-08-10 Thread Will H. Backman
Darrin Chandler wrote: On Thu, Aug 10, 2006 at 09:39:56AM -0400, Will H. Backman wrote: Am I correct in assuming that spamd and TLS on port 25 don't get along? -- Will Remember that you get *either* spamd *or* your MTA. So there's no getting along to deal with. Howev

spamd and TLS on port 25

2006-08-10 Thread Will H. Backman
Am I correct in assuming that spamd and TLS on port 25 don't get along? -- Will

spamd and spamlogd syslog level

2006-08-08 Thread Will H. Backman
Does anyone know why spamd and spamlogd log to syslog at different log levels. It isn't too hard to change syslog.conf to include daemon.debug in order to capture output from spamlogd, but why the difference?

spamd greylist and stutter/delay

2006-08-07 Thread Will H. Backman
I have spamd get up in a simple greylist mode, but I left the default /etc/spamd.conf file intact. I'm not running spamd-setup. By default, spamd is stuttering for 10 seconds, but watching /var/log/daemon, I also noticed that connections from spews and other lists are lasting for over 400 secon

Re: simple spamd greylisting on transparent bridge

2006-08-04 Thread Will H. Backman
Will H. Backman wrote: Will H. Backman wrote: Is this a sane minimum configuration for "spamd -g" on a transparent bridge? Is it unwise to only greylist? 1. Create bridge with no IP's. 2. pf=YES and spamd_flags="-g" in /etc/rc.conf.local 3. Simple three line /

Re: simple spamd greylisting on transparent bridge

2006-08-03 Thread Will H. Backman
Will H. Backman wrote: Is this a sane minimum configuration for "spamd -g" on a transparent bridge? Is it unwise to only greylist? 1. Create bridge with no IP's. 2. pf=YES and spamd_flags="-g" in /etc/rc.conf.local 3. Simple three line /etc/pf.conf: ext_if=&

simple spamd greylisting on transparent bridge

2006-08-03 Thread Will H. Backman
Is this a sane minimum configuration for "spamd -g" on a transparent bridge? Is it unwise to only greylist? 1. Create bridge with no IP's. 2. pf=YES and spamd_flags="-g" in /etc/rc.conf.local 3. Simple three line /etc/pf.conf: ext_if="xl0" rdr pass inet proto tcp from ! to any \ po

Re: GRE tunnel setup problem?

2006-08-01 Thread Will H. Backman
Alex Berdan wrote: Hi All, I set up a GRE tunnel between two sites to have the broadcast/multicast passing between the two but nothing is passing! I'm not using for the moment any firewall and the configuration straight forward as per man gre. 192.168.1.2/24 | | | |-- 192.168.1.

Re: best place to specify ipv6 default route

2006-07-18 Thread Will H. Backman
Eric Pancer wrote: On Tue, 2006-07-18 at 16:37:23 -0400, Will H. Backman wrote... The man page for mygate says that one can add an IPv6 gateway address to /etc/mygate, but it doesn't seem to add an entry to the routing table upon reboot. I'm not using rtsol anywhere. Most of my

Re: best place to specify ipv6 default route

2006-07-18 Thread Will H. Backman
Darrin Chandler wrote: On Tue, Jul 18, 2006 at 04:37:23PM -0400, Will H. Backman wrote: > The man page for mygate says that one can add an IPv6 gateway address to > /etc/mygate, but it doesn't seem to add an entry to the routing table > upon reboot. I'm not using rtsol any

best place to specify ipv6 default route

2006-07-18 Thread Will H. Backman
The man page for mygate says that one can add an IPv6 gateway address to /etc/mygate, but it doesn't seem to add an entry to the routing table upon reboot. I'm not using rtsol anywhere. Most of my searching on the internet shows people adding a line to the /etc/hostname.gif0 file, i.e: !route

where is gif tunnel syntax in the man pages

2006-07-18 Thread Will H. Backman
I can't seem to find the man page that mentions the "tunnel" option for gif interfaces. There is a lot of information out there on the net, but I don't see it in the man page for gif or hostname.if. Also, is it true that "giftunnel" is the old syntax? -- Will

Re: Logging failed console login attempts

2006-07-13 Thread Will H. Backman
Dimitry Andric wrote: Will H. Backman wrote: The console on OpenBSD 3.9 release doesn't seem to log unknown username or failed login attempts anywhere. See this commit: http://www.openbsd.org/cgi-bin/cvsweb/src/etc/syslog.conf#rev1.14 "Make the default syslog.conf no

Logging failed console login attempts

2006-07-13 Thread Will H. Backman
Is my memory fuzzy? The console on OpenBSD 3.9 release doesn't seem to log unknown username or failed login attempts anywhere. It does keep a count of failed logins for an existing account, which is displayed upon successful login. Somehow I remember the console being more verbose in previous r

Re: UTF-8 text editor

2006-07-10 Thread Will H. Backman
Mackan wrote: On 10 jul 2006, at 20.43, Spruell, Darren-Perot wrote: From: [EMAIL PROTECTED] Is there any UTF-8-aware text editor (for terminal use) available for OpenBSD? Vi(m) and similar is out of question for me, I never learned those. As ubiquitous as vi is on Unix, it seems a shallow r

Re: apply updates to kernel and userland without recompiling?

2006-07-10 Thread Will H. Backman
Joe wrote: I manage a few openbsd 3.9-release firewalls and I need to update the OS, but I don't want to cvsup and recompile on each system. Is there a documented/recommended way to do update a system by creating a tarball or package of what was upgraded? I'm looking to apply security fixes

Re: tcpdump on enc0

2006-07-05 Thread Will H. Backman
Otto Moerbeek wrote: On Wed, 5 Jul 2006, Stephen Bosch wrote: Otto Moerbeek wrote: On Wed, 5 Jul 2006, Stephen Bosch wrote: Does tcpdump work on enc0? Are you really too lazy to read a manual page? And for the record -- since some people found that question b

Re: Where to start studying OpenBSD networking code

2006-06-28 Thread Will H. Backman
joakinen wrote: Greetings to all, I'm a programmer and network administrator and want to study the code of OpenBSD related to TCP/IP & Ethernet to understand networking from inside and also to see if I can be of any help to the rest of developers. I'm interested specifically in the following

Re: Support Needed for GPS and Time Signal Station Receiver Development

2006-06-02 Thread Will H. Backman
Have you looked at gpsd, which is BSD licensed? According to the author, they have very good device detection, so maybe you could use their device info database. http://gpsd.berlios.de/ -- Willg

Re: license for getopt.c?

2006-05-31 Thread Will H. Backman
Ted Unangst wrote: On 5/31/06, Will H. Backman <[EMAIL PROTECTED]> wrote: While wandering through the usr.bin source tree (not to imply that I am qualified to take the journey), I noticed that getopt.c doesn't have a license clause in it. Anyone know who "david" might be?

license for getopt.c?

2006-05-31 Thread Will H. Backman
While wandering through the usr.bin source tree (not to imply that I am qualified to take the journey), I noticed that getopt.c doesn't have a license clause in it. Anyone know who "david" might be? $OpenBSD: getopt.c,v 1.6 2003/07/10 00:06:51 david Exp $ -- Will

head.c usage function

2006-05-26 Thread Will H. Backman
Looking at /bin/head source code. The usage function uses: fputs("usage: head [-n line_count] [file ...]\n", stderr); While many other programs use: fprintf(stderr, "usage: arch [-ks]\n"); Is there a difference? Is one preferred? Yes, I know. I should take a C programming course.

Re: basic questions regarding patching, errata and stable branch

2006-05-22 Thread Will H. Backman
Tobias Weisserth wrote: Hi everybody, I am still trying to sort out some of the information on the OpenBSD website about how to follow a specific branch and what are the benefits of each method. I understood what STABLE, CURRENT and RELEASE are and how to follow them. I still have some diff

Re: 002_xorg.patch compile error i386

2006-05-08 Thread Will H. Backman
Didier Wiroth wrote: Hello, The answer is the same as previous posts ;-) 1) man 8 release 2) tcl and tk installed ( or perhaps old versions -> pkg_add -u) 3) clean sources? if not, delete your sources and refetch them 4) do not build in your src directory!!! -> see man 8 release (use for example

Re: /dev/rst[01] Question

2006-05-05 Thread Will H. Backman
dave feustel wrote: I have just installed OpenBSD 3.9 and I am running into some strangeness. What are the devices /dev/rst[01]used for? Thanks, Dave rewinding tape device, usually for backups.

Evaluating load average

2006-05-03 Thread Will H. Backman
I'm looking for some hints on evaluating load average. I have a new system that is showing load averages over .50 most of the time, but I don't see that it is doing much according to systat vmstat. I figured that this machine would be way overpowered for the job it is doing. Is load average (like

002 patch and priv sep

2006-05-03 Thread Will H. Backman
002 patch for 3.9 says "crash it and to execute malicious code within the X server." What side of the privilege separated X does this apply to? -- Will "Happy I don't install X on my servers" Backman

Patch make question

2006-05-02 Thread Will H. Backman
001_sendmail.patch for 3.9 says: make obj make depend make make install Is there anything wrong with make obj && make depend && make && make install ? -- Will

Interesting sensorsd.conf examples?

2006-04-27 Thread Will H. Backman
Anyone running interesting sensorsd.conf files that they would like to share with the list? I don't see a lot of examples out there. What actions are you having sensord performs? Are most people just sending to syslog and using something else to notify you of alerts? Thanks in advance. -- Will

Ethereal Problems

2006-04-25 Thread Will H. Backman
>From http://www.incidents.org/ Yes, if you use Ethereal, it is time to upgrade. According an advisory posted by Frsirt, 28 vulnerabilities has been identified in Ethereal "which could be exploited by remote attackers to compromise a vulnerable system or cause a denial of service." Thanks for rem

Re: Mounting remote filesystems from OpenBSD to OS X

2006-04-20 Thread Will H. Backman
Hans-Joerg Hoexer wrote: On Thu, Apr 20, 2006 at 02:11:36PM +0100, Constantine A. Murenin wrote: Hi, I have an OpenBSD (file-)server at a remote location on the internet that is around 137ms away from an OS X 10.4 laptop. Is there a way to securely mount OpenBSD's filesystems from OS X in s

Re: install sets as packages

2006-04-20 Thread Will H. Backman
Daniel Ouellet wrote: Will H. Backman wrote: Would there be a benefit to use the pkg_ tools to install and manage the install sets? I fail to see the point of it really. The install set is done at install time, or to add it if you miss it at the install. Plus packages tools is there to

install sets as packages

2006-04-19 Thread Will H. Backman
As no answer came up after a little searching on google and the openbsd FAQ... Would there be a benefit to use the pkg_ tools to install and manage the install sets? The pkg_ tools seem to be a fairly elegent system. So if money and time and developers grew on trees, would it be a reasonable goal?

Server Compatibility List

2006-04-18 Thread Will H. Backman
I don't know if this has been posted before, but I found a nice openbsd server compatibility list: "To ensure availability of appropriate server hardware platforms for Profense, Armorlogic is testing new server models from major manufacturers on an ongoing basis. It is our goal to provide our cust

Re: Patch for asynch sendmail vulnerability on OPENBSD_3_6 stable

2006-04-14 Thread Will H. Backman
Michael Flanagan wrote: I found myself needing up apply the recent patch for sendmail against an aging 3.6 stable box. I took the sendmail patch for the 3.7 stable branch and applied it against 3.6 stable. It applied cleanly with the exception of a half dozen hunks in a couple of files. I mer

Re: OpenBGP: aggregating routes / set neighbor next-hop

2006-03-29 Thread Will H. Backman
>> On Cisco I configured >> "neighbor 10.0.0.2 next-hop-self", but how to do this with openbgp? > >that, again, is sth nobody ever asked for or missed :) >however, the (completely untested except for compilation) diff below >should add "set nexthop self". > >Index: bgpd.h How come Cisco doesn't se

Future licensing trouble for Sendmail

2006-03-27 Thread Will H. Backman
No, this isn't another "Sendmail needs to be replaced because there was a security hole" email. I was following the thread on BugTraq regarding the Sendmail vulnerability, and saw this from Theo (Mar 24 2006): "Luckily within a few months you will be able to tell Sendmail how to disclose their bu

3.9 patch 001 needed for CD release?

2006-03-27 Thread Will H. Backman
I assume this is an obvious question, but I just wanted to be sure. Was the release that was sent to the CD manufacturer created before the 3.9 001 errata? -- Will

Re: flash plugin & mozilla-firefox

2006-03-21 Thread Will H. Backman
Hannah Schroeter wrote: Hello! On Tue, Mar 21, 2006 at 10:42:31AM -0500, Will H. Backman wrote: Hannah Schroeter wrote: On Tue, Mar 21, 2006 at 10:29:50AM -0500, Roy Morris wrote: Try this http://www.openbsd.org/faq/faq13.html#javaflash Nowadays, the recommendation to fetch a

Re: flash plugin & mozilla-firefox

2006-03-21 Thread Will H. Backman
Hannah Schroeter wrote: Hello! On Tue, Mar 21, 2006 at 10:29:50AM -0500, Roy Morris wrote: Try this http://www.openbsd.org/faq/faq13.html#javaflash Nowadays, the recommendation to fetch a flashplugin and install it by hand is outdated. There's /usr/ports/www/opera/opera-flashplugin. Kind r

Re: Small office with BSD blueprint

2006-03-21 Thread Will H. Backman
Will H. Backman wrote: Looking for feedback on a basic blueprint for a small office using BSD. Situation: Small office with maybe five workstations. Question: What would an all BSD setup look like? Solution that comes to mind: * Single server for DNS, DHCP, LPD, SMTP, IMAP, and home directories

Re: Small office with BSD blueprint

2006-03-20 Thread Will H. Backman
Will H. Backman wrote: Looking for feedback on a basic blueprint for a small office using BSD. Situation: Small office with maybe five workstations. Question: What would an all BSD setup look like? Solution that comes to mind: * Single server for DNS, DHCP, LPD, SMTP, IMAP, and home directories

Re: Small office with BSD blueprint

2006-03-20 Thread Will H. Backman
Peter wrote: --- Joachim Schipper <[EMAIL PROTECTED]> wrote: [snip] Do you usually assign static IPs? Yes, on a small LAN such as this - why not? It cuts out one bad idea (DHCP), and does not have any disadvantages I can see. Except maybe that you need to update the DNS server(s) on all the

Re: Small office with BSD blueprint

2006-03-20 Thread Will H. Backman
John R. Shannon wrote: Will H. Backman wrote: Looking for feedback on a basic blueprint for a small office using BSD. Situation: Small office with maybe five workstations. Question: What would an all BSD setup look like? Solution that comes to mind: * Single server for DNS, DHCP, LPD, SMTP

Re: Small office with BSD blueprint

2006-03-20 Thread Will H. Backman
Joachim Schipper wrote: On Mon, Mar 20, 2006 at 09:53:30AM -0500, Will H. Backman wrote: Looking for feedback on a basic blueprint for a small office using BSD. Situation: Small office with maybe five workstations. Question: What would an all BSD setup look like? Solution that comes to mind

Small office with BSD blueprint

2006-03-20 Thread Will H. Backman
Looking for feedback on a basic blueprint for a small office using BSD. Situation: Small office with maybe five workstations. Question: What would an all BSD setup look like? Solution that comes to mind: * Single server for DNS, DHCP, LPD, SMTP, IMAP, and home directories. * Full install with what

Re: php in cgi mode & suphp missing(?) from packages

2006-03-15 Thread Will H. Backman
Brandon Mercer wrote: Anon wrote: Hello :) My questions can be summarised as : 1) What is the easiest way to install php in CGI mode on OBSD? 2) Why doesn't OBSD have a package for php that includes the CGI version? 3) Why doesn't OBSD have a suphp package? Is there any special reason? I ask

Re: Reminder about the X Aperture

2006-03-15 Thread Will H. Backman
Daniel Ouellet wrote: Sorry for my ignorance on the subject and this issue and the use of X all together. Not critical what so ever by any long shoot, but I was curious as to if there is some window manage that actually DO NOT need any of the X stuff all together? Meaning something that obv

Re: Openbgpd & kernel tuning

2006-03-08 Thread Will H. Backman
Henning Brauer wrote: * Marcel Prisi <[EMAIL PROTECTED]> [2006-03-08 16:42]: OpenBGPD's config seems OK, but I need some help about OpenBSD's tunable parameters using sysctl. the only thing you might want to change is net.inet.ip.ifq.maxlen the default is a little low for routing at higher

Re: make build error on 3.9 (-current) i386

2006-03-01 Thread Will H. Backman
Reza Muhammad wrote: Hi guys, I was just updating my source tree through cvsup, and I've been following -current for a while. There hadn't been any problems before. But today, make build returned errors. The last time I cvsup'd was today around 10pm (GMT +7), and here's some of the log:

Re: integrating windows client and server with openbsd servers

2006-02-24 Thread Will H. Backman
-Original Message- From: [EMAIL PROTECTED] on behalf of Gustavo Rios Sent: Fri 2/24/2006 9:39 PM To: misc@openbsd.org Subject: integrating windows client and server with openbsd servers Hey folks, i am in need to make windows and openbsd machines to live together and happy. I have kerber

Re: 3.8 mountd -n

2006-02-23 Thread Will H. Backman
Will H. Backman wrote: Trying to get OS X to mount an openbsd nfs share. I can force OS X to use reserved ports by using "mount_nfs -P" from the command line, but users mounting from the finder don't have that option. OpenBSD man page for mountd says that there is an -n

3.8 mountd -n

2006-02-23 Thread Will H. Backman
Trying to get OS X to mount an openbsd nfs share. I can force OS X to use reserved ports by using "mount_nfs -P" from the command line, but users mounting from the finder don't have that option. OpenBSD man page for mountd says that there is an -n option to allow mounting from unreserved ports,

More reasons to like OpenBSD

2006-02-22 Thread Will H. Backman
Just a note to the OpenBSD community: I have been helping a friend clean up after a security incident with a PHP web app that hadn't been patched on a Linux server. I run the same app on OpenBSD, and I worry a lot less. I still patch my PHP apps because it would be stupid to assume that OpenBSD w

web FAQ 15 correction?

2006-02-16 Thread Will H. Backman
Possible correction? http://openbsd.org/faq/faq15.html#Intro "Invoking pkg_add(1) with the -u flag and no package name will just examine all installed packages for updated versions. When a package has dependencies, they are also examined for updates." "pkg_add -u" now also does the upgrade, doesn

Status of pkg_add -u?

2006-02-10 Thread Will H. Backman
How functional and safe is pkg_add -u at this point? Also, I just wanted to say thanks for the hard work on the pkg_* tools. They just keep getting better. -- Will Backman - Network Administrator Coastal Enterprises, Inc. http://www.ceimaine.org

Re: NIS server/client on OpenBSD

2006-02-10 Thread Will H. Backman
Edd Barrett wrote: On 2/10/06, Budhi Setiawan <[EMAIL PROTECTED]> wrote: Dear All, Can you give me a link HOWTO/FAQ/tutorial to create a NIS server/client on OpenBSD. Found this on google, but dont know how accurate it is. http://www.openbsdsupport.org/sharedhomes.html I could have swor

Re: OpenBSD hardware router

2006-02-02 Thread Will H. Backman
Kenny Mann wrote: I'm looking for something that which I can slap OpenBSD 3.8 on and use it as a router. This will be used for a house (~ 4 people) and I'm looking for something small in form factor and that which doesn't run hot because it will run in a closet. I'm seeking to replace our D-Lin

Re: MS Security VP Mike Nash remarks on MS vs OpenBSD security.

2006-01-26 Thread Will H. Backman
Rob W wrote: http://www.securityfocus.com/bid/16375 is minor but important enough to report? A way to remotly crash a OpenBSD box is minor? From http://openbsd.org/security.html: "Security information moves very fast in cracker circles. On the other hand, our experience is that coding and re

NYCBUG dmesg tracker

2006-01-26 Thread Will H. Backman
For those of you who are sending dmesg output to the developers, you may also want to post your dmesg to the New York City BSD Users Group dmesg tracker. From their site: "Upload your dmesg so others can see your kernel boot messages and related troubleshooting details. Each dmesg is searchabl

Re: MS Security VP Mike Nash remarks on MS vs OpenBSD security.

2006-01-26 Thread Will H. Backman
Shane J Pearson wrote: What an incredible load of tripe!... From:http://interviews.slashdot.org/article.pl?sid=06/01/26/131246 Second, it is not completely accurate to say that OpenBSD is more secure. If you compare vulnerability counts just from the last 3 months, OpenBSD had 79 for Novem

Release Song License

2006-01-19 Thread Will H. Backman
Are the OpenBSD Release songs also BSD licenced? The lyrics page doesn't specify. I wanted to know if they are "podcast safe".

NFS Book offer

2006-01-09 Thread Will H. Backman
Would any OpenBSD developer be interested in the book NFS Illustrated? http://www.awprofessional.com/bookstore/product.asp?isbn=0201325705&redi r=1 I'll ship it to you. It got it for free, but it is over my head. -- Will Backman - Network Administrator Coastal Enterprises, Inc. http://www.ceimai

Re: OpenBSD VMWare image too popular

2006-01-05 Thread Will H. Backman
Jasper Lievisse Adriaanse wrote: On Thu, 5 Jan 2006 13:41:50 -0500 "Will H. Backman" <[EMAIL PROTECTED]> wrote: I've just crossed the 10,000 downloads of the OpenBSD VMWare image since I posted it a few weeks ago. Unfortunately, it is a little too popular for the people p

OpenBSD VMWare image too popular

2006-01-05 Thread Will H. Backman
I've just crossed the 10,000 downloads of the OpenBSD VMWare image since I posted it a few weeks ago. Unfortunately, it is a little too popular for the people providing my bandwidth. Is anyone else willing to host the file? I'll just point my page to you. You would be looking at about a terabyte

Re: VPN packets not passing remote gateway [RESOLVED... sorta]

2006-01-04 Thread Will H. Backman
Jason Dixon wrote: On Jan 4, 2006, at 9:32 AM, Hekan Olsson wrote: On 4 jan 2006, at 05.57, Jason Dixon wrote: After some gentle persuading by Adrian Close, I dropped ipsecadm and went back to automatic key exchange with isakmpd. A quick configuration based on the east/west and all is goo

Re: Blowfish still good enough?

2006-01-03 Thread Will H. Backman
Ted Unangst wrote: On 12/31/05, Travers Buda <[EMAIL PROTECTED]> wrote: The Nazis thought their Enigma machine was perfect. Do you know why Enigma was broken? Primarily because the operators didn't follow procedure and made a series of other mistakes ("This doesn't seem too important"). As

default pf rules - possible to add vpn?

2005-12-23 Thread Will H. Backman
I noticed that pf will load a default rule set if there is no valid /etc/pf.conf file. Is it unwise to depend on this default rule set if it works? The default rule set makes exceptions for carp and pfsync traffic. Any possibility of adding exceptions for vpn traffice also?

Possible error in vpn(8) man page

2005-12-23 Thread Will H. Backman
According to the vpn(8) man page: Paragraph just before section header for Creating IPsec Flows [manual keying] "Note that when no authentication and encryption algorithms are defined, ipsecctl(8) will automatically use HMAC-SHA2-256 for authentication and AES-128 in countermode for encryptio

Re: ipsecctl writev failed

2005-12-23 Thread Will H. Backman
Hans-Joerg Hoexer wrote: the defaults are hmac-sha2-256 and aesctr which uses a 160 bit key. On Wed, Dec 21, 2005 at 03:25:26PM -0500, Will H. Backman wrote: OpenBSD 3.8 release. I'm getting the same errors as this thread: http://archives.neohapsis.com/archives/openbsd/2005-11/1980.htm

Re: Unable to build Gateway route

2005-12-22 Thread Will H. Backman
martin wrote: --- Jason Crawford <[EMAIL PROTECTED]> wrote: IP - 209.216.76.1 Netmask - 255.255.255.252 GW - 209.216.77.6 Either a typo in your netmask, or a typo in your gateway, since your gateway IP does not belong to the current netmask you assigned to your external IP. I have a feelin

OpenBSD is popular as a VM image

2005-12-22 Thread Will H. Backman
Just an update on the popularity of the OpenBSD 3.8 VM image: Since it was posted on Dec 19 (4 days ago), apache logs have shown 2826 hits on the file with just over 277 gigs of traffic created by those downloads. Not bad for only a few days. -- Will Backman - Network Administrator Coastal Enterpri

ipsecctl writev failed

2005-12-21 Thread Will H. Backman
OpenBSD 3.8 release. I'm getting the same errors as this thread: http://archives.neohapsis.com/archives/openbsd/2005-11/1980.html I'm trying to use as many defaults as possible in this test setup, and sha1 is not being chosen by the defaults. Any ideas? Here is my ipsec.conf (yes, key values a

OpenBSD on virtual machine community page

2005-12-19 Thread Will H. Backman
My OpenBSD 3.8 virtual machine image has made it on to the VMWare community virtual machine page. Perhaps this means that more people will be trying out OpenBSD. My page does warn people not to expect the OpenBSD project to support this. I hope this will be a benefit to the OpenBSD community by

Re: browser security

2005-12-14 Thread Will H. Backman
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Simon Morgan > Sent: Wednesday, December 14, 2005 2:32 PM > To: J.C. Roberts > Cc: misc@openbsd.org > Subject: Re: browser security > > On 14/12/05, J.C. Roberts <[EMAIL PROTECTED]> wrote: > > When you

Re: browser security

2005-12-14 Thread Will H. Backman
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Bob Smith > Sent: Wednesday, December 14, 2005 11:37 AM > To: J. C. Roberts > Cc: misc@openbsd.org > Subject: Re: browser security > > thanks for the explanation. > > so it would be less work to try to

Re: NFS and Rebooting problem

2005-12-09 Thread Will H. Backman
> If you want to do it properly, use fdisk -e wd1, disklabel -E wd1, and > newfs /dev/rwd1a, in that order. > > Joachim Which is the short version of the New Disk FAQ: http://www.openbsd.org/faq/faq14.html#NewDisk

Re: WebTools

2005-12-09 Thread Will H. Backman
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Ricardo Lucas > Sent: Friday, December 09, 2005 10:17 AM > To: misc@openbsd.org > Subject: WebTools > > Hello everybody, > that's my doubt, what program can I use to monitoring the traffic of my > LAN,

Re: #define failure opportunity

2005-11-29 Thread Will H. Backman
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Spruell, Darren-Perot > Sent: Tuesday, November 29, 2005 2:57 PM > To: 'misc@openbsd.org' > Subject: Re: #define failure opportunity > > From: pete wright [mailto:[EMAIL PROTECTED] > > Not that I don't

Re: Updated CCD Mirroring HOWTO

2005-11-29 Thread Will H. Backman
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Greg Oster > Sent: Tuesday, November 29, 2005 12:26 PM > To: Robbert Haarman > Cc: misc@openbsd.org > Subject: Re: Updated CCD Mirroring HOWTO > > Robbert Haarman writes: > > Greg, > > > > Again, you ra

  1   2   3   >