hardware monitoring

2005-08-04 Thread Shawn K. Quinn
I'm able to get sensor data from the BIOS; is there something I'm missing to be able to get them from within OpenBSD on this system? dmesg follows... OpenBSD 3.7-current (GENERIC) #1: Sat Jul 30 19:44:49 CDT 2005 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: AMD-K7(tm) Processor

login_ldap

2005-08-04 Thread Alexander Farber
Hi, we have a mostly RH Linux environment were the PCs authenticate against a Netscape LDAP server. They have a quite short /etc/ldap.conf: host 172.25.93.242 <-- that is our LDAP server base o=bonmp.XXX.com ssl no pam_password crypt And I'm tryi

Re: hardware monitoring

2005-08-04 Thread Lars Hansson
On Thu, 04 Aug 2005 02:14:38 -0500 "Shawn K. Quinn" <[EMAIL PROTECTED]> wrote: > I'm able to get sensor data from the BIOS; is there something I'm > missing to be able to get them from within OpenBSD on this system? dmesg > follows... Your hardware sensor, whatever it is is, isn't supported. ---

Re: hardware monitoring

2005-08-04 Thread Shawn K. Quinn
On Thu, 2005-08-04 at 15:44 +0800, Lars Hansson wrote: > Your hardware sensor, whatever it is is, isn't supported. Okay, next question: where in the dmesg is it? Does it show up in the dmesg at all? -- Shawn K. Quinn <[EMAIL PROTECTED]>

Re: login_ldap

2005-08-04 Thread John Wright
On Thu, Aug 04, 2005 at 09:43:28AM +0200, Alexander Farber wrote: > Also, does anybody know, how to run /usr/local/libexec/auth/login_-ldap > on a command line, to see if it works at all? I try following: > > blowfish# /usr/local/libexec/auth/login_-ldap afarber > blowfish# echo $? >

Re: raid for boot/root disk ?

2005-08-04 Thread Stefan Sczekalla-Waldschmidt
> > Would a hardware el-cheapo raid-controller be of any help in a way > > that the joe-user standard setup procedure will work ? > > If your mobo supports booting from the controller that would > probably be the easies way, just create the array and install > onto it just as if it had been a n

Re: hardware monitoring

2005-08-04 Thread Alexander Yurchenko
On Thu, Aug 04, 2005 at 03:06:34AM -0500, Shawn K. Quinn wrote: > On Thu, 2005-08-04 at 15:44 +0800, Lars Hansson wrote: > > Your hardware sensor, whatever it is is, isn't supported. > > Okay, next question: where in the dmesg is it? Does it show up in the > dmesg at all? since the most of sensor

Re: raid for boot/root disk ?

2005-08-04 Thread Tobias Weingartner
On Thursday, August 4, "Stefan Sczekalla-Waldschmidt" wrote: > > > Would a hardware el-cheapo raid-controller be of any help in a way > > > that the joe-user standard setup procedure will work ? > > > > If your mobo supports booting from the controller that would > > probably be the easies way,

Re: login_ldap

2005-08-04 Thread Alexander Farber
2005/8/4, John Wright <[EMAIL PROTECTED]>: > /usr/libexec/auth/login_-ldap -d afarber should be more verbose. > Thank you, now I get: blowfish# /usr/local/libexec/auth/login_-ldap -d afarber Password: couldn't get x-ldap-server reject Aug 4 10:11:43 blow

Re: login_ldap

2005-08-04 Thread Alexander Farber
Here is what I get on the command line (a "result: 0 Success", so I wonder why does login_-ldap fail?) blowfish# ldapsearch -x -h 172.25.93.242 \ -b o=bonmp.XXX.com "(uid=afarber)" # extended LDIF # # LDAPv3 # base with scope sub # filter: (uid=afarber) # requesting: ALL #

Re: login_ldap

2005-08-04 Thread John Wright
On Thu, Aug 04, 2005 at 10:47:00AM +0200, Alexander Farber wrote: > # base with scope sub Maybe the scope? If I'm reading the code correctly the default is onelevel (or "-s one" on the ldapsearch command line) but the default for ldapsearch is subtree.

Re: Device not configured (APM, sound, modem)

2005-08-04 Thread Rogier Krieger
On 8/4/05, Z L <[EMAIL PROTECTED]> wrote: > I installed OBSD3.7 on my laptop. Things that are not working are: > sound and modem (dial-up internal laptop modem) and apm. Apart from providing the *complete* dmesg output already requested by someone else, you will also want to check the notes on the

Re: login_ldap

2005-08-04 Thread Alexander Farber
2005/8/4, John Wright <[EMAIL PROTECTED]>: > On Thu, Aug 04, 2005 at 10:47:00AM +0200, Alexander Farber wrote: > > # base with scope sub > > Maybe the scope? If I'm reading the code correctly the default is onelevel > (or "-s one" on the ldapsearch command line) but the default for ldapsearch >

Re: Device not configured (APM, sound, modem)

2005-08-04 Thread Z L
> Apart from providing the *complete* dmesg output already requested by > someone else Below is the complete dmesg output: OpenBSD 3.7 (GENERIC) #50: Sun Mar 20 00:01:57 MST 2005 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Mobile Intel(R) Pentium(R) 4 CPU 3.20GHz ("GenuineI

pf problem

2005-08-04 Thread westboy
hi: my content of pf.conf is #set macros ext_if="vr0" int_if="bge0" ext_ip="222.185.xxx.xxx" int_ip="192.168.0.1" webserver="192.168.0.2" priv_net="{127.0.0.0/8,192.168.0.0/16,172.16.0.0/12,10.0.0.0/8}" scrub in all #give NAT to the internal address nat on $ext_if from $webserver to any ->$ext_

The Motley Fool Password Assistance

2005-08-04 Thread [EMAIL PROTECTED]
Hello from The Motley Fool. Please click the link below to create a Motley Fool password. Once you do, you will have access to areas of Fool.com that require a password: http://www.fool.com/EditPassword.asp?U=184191259&C=0F4849F393EA0204&FP=1 Need Help? If you experience problems creating a p

ospfd priority problem

2005-08-04 Thread Lars Hansson
Running a recent snapshot (a few days ago) ospfd seems to have a problem with correctly joining an ospf area unless it's router-priority is 0 or higher than the current BDR. Ospfd is here connected to our ospf backbone wich is a mix of openbsd boxes running gated, Huawei 1760's and Cisco's running

VPN behind a router, now with OpenVPN

2005-08-04 Thread Helio Santana
Hi, I've disabled AH in my sysctl.conf but it doesn't work... No I have been trying to do with OpenVPN. After read all how-to, and some samples the connection successfull with 2 obsd behind routers. It's very simple to do... I can see servers, but, how can I do to check my connections is encrypted

Re: isakmpd question

2005-08-04 Thread jared r r spiegel
On Wed, Aug 03, 2005 at 09:28:32AM -0400, Brandon Mercer wrote: > I've tried running the debug, but I > can't figure out which part of the proposal is incompatible. My config has: when i had to setup a tunnel against a speedstream 5930 ( dsl modem/router ), i told the speedstream to make an

nForce SATA testers required

2005-08-04 Thread Jonathan Gray
Can people who are able to test SATA on any nForce board mail me off list?

Re: openbsd 3.7 in-kernel pppoe issues

2005-08-04 Thread Schöberle Dániel
There's no /etc/mygate. That's why I suggested hardwiring the IP. But in your case there was, so this is completely another issue. > From: Alexis de BRUYN [mailto:[EMAIL PROTECTED] > Sent: Wednesday, August 03, 2005 6:23 PM > To: Schvberle Daniel; misc@openbsd.org > Subject: RE: openbsd 3.7 in-

Re: ospfd priority problem

2005-08-04 Thread Claudio Jeker
On Thu, Aug 04, 2005 at 06:49:58PM +0800, Lars Hansson wrote: > Running a recent snapshot (a few days ago) ospfd seems to have a problem > with correctly joining an ospf area unless it's router-priority is 0 > or higher than the current BDR. Ospfd is here connected to our ospf backbone > wich is a

Re: VPN behind a router, now with OpenVPN

2005-08-04 Thread Janne Johansson
Helio Santana wrote: > Hi, > I've disabled AH in my sysctl.conf but it doesn't work... > > No I have been trying to do with OpenVPN. After read all how-to, and > some samples the connection successfull with 2 obsd behind routers. > It's very simple to do... I can see servers, but, how can I do to

Re: ospfd priority problem

2005-08-04 Thread Lars Hansson
On Thu, 4 Aug 2005 13:39:57 +0159 Claudio Jeker <[EMAIL PROTECTED]> wrote: > Could you test the following diff and see if this fixes the problem. > It looks like the RFC is busted and we need to find out how to fix it > without generating more troubles. Getting the CVS as I type and will test as s

Re: nForce SATA testers required

2005-08-04 Thread Matteo Mancini
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ya ..I could test it Bye Matteo Jonathan Gray wrote: > Can people who are able to test SATA on any nForce board mail > me off list? iD8DBQFC0lwE/TjXD9LUVswRAjQfAJ4tC4p05yvI9b1Xz4KpG0n9xTr2BwCfQxqL 4UvYnTItQViOd+OotekeeNk= =WKFS -END PGP SIGNATUR

Stupid Carp question

2005-08-04 Thread Monah Baki
Hi all, Implementing carp, I have 2 net4801's that seem to be synchronizing, when I do a ifconfig -a on the secondary I see carp0 on the slave becomes Master when the primary goes down. The internal machines are working fine accessing the internet and all. The pf.conf rule has the 2 rules: pass

Re: Stupid Carp question

2005-08-04 Thread Todd Boyer
On Thursday, August 04, 2005 Monah Baki wrote: > However when I physiclly remove the ethernet cable from sis0 > on the master, the internal machine cannot access the net anymore. > Do I need to copy the pf.conf from the master to the scondary > unit, have them both identical Sorry about my

Re: Stupid Carp question

2005-08-04 Thread Todd Boyer
On Thursday, August 04, 2005 Monah Baki wrote: > However when I physiclly remove the ethernet cable from sis0 > on the master, the internal machine cannot access the net anymore. > Do I need to copy the pf.conf from the master to the scondary > unit, have them both identical arp cache on t

Re: Ammunition needed to defend OpenBSD/pf

2005-08-04 Thread J.C. Roberts
On Wed, 3 Aug 2005 18:26:52 -0600 (MDT), Diana Eichert <[EMAIL PROTECTED]> wrote: >just use some 50cal BMG rounds, that should be effective ammunition. > >sorry, I just had to after following this thread for awhile I think you're taking the phrase "Bullet-Proof Software" a bit too literally. ;-)

IPSEC between OpenBSD (isakmpd) and Linux (FreeS/Wan)

2005-08-04 Thread Guido Tschakert
Hello All, I'm trying to build a vpn between an OpenBSD and a Linux Router. (If I could, I would directly replace the linux box to simplify matters ;-) but that's not possible at the moment :-( BTW: I want to use RSA-based authentication using x509 certificates. I have already build the CA a

Re: IPSEC between OpenBSD (isakmpd) and Linux (FreeS/Wan)

2005-08-04 Thread Hans-Joerg Hoexer
Hi, yes, this howto is basically unmaintained since, uhm, several years and I actually should remove it. However, I have configs for interop with Openswan (don't know what's different to Freeswan) somewhere, will dig them out tonight... On Thu, Aug 04, 2005 at 04:09:56PM +0200, Guido Tschakert w

Re: Stupid Carp question

2005-08-04 Thread Barry, Christopher
> -Original Message- > From: Monah Baki [mailto:[EMAIL PROTECTED] > Sent: Thursday, August 04, 2005 8:29 AM > To: misc@openbsd.org > Subject: Stupid Carp question > > Hi all, > > Implementing carp, I have 2 net4801's that seem to be > synchronizing, when I do > a ifconfig -a on the seco

make /dev/pf world readable? CLOSED

2005-08-04 Thread Jan Sepp
On Jul 27 09:31 AM, Jan Sepp wrote: > Hello, > > I am creating a shell script that gathers PF statistics for my various > interfaces, as in pfctl -i <> -vvsI . (Yes, I am aware of the > existence of rpfcd, but as I want to monitor only one local box and > write the output directly to console, th

Re: Stupid Carp question

2005-08-04 Thread Jon Hart
On Thu, Aug 04, 2005 at 08:28:49AM -0400, Monah Baki wrote: > Hi all, > > Implementing carp, I have 2 net4801's that seem to be synchronizing, when I do > a ifconfig -a on the secondary I see carp0 on the slave becomes Master when > the primary goes down. > The internal machines are working fine a

Re: make /dev/pf world readable? CLOSED

2005-08-04 Thread Artur Grabowski
Jan Sepp <[EMAIL PROTECTED]> writes: > The answer was surprisingly simple. I just had to create a second pf > device, chown it and make it read-only for the new owner, and I could get > my statistics. These are the actual commands: > > soekris # mknod /dev/pf2 c 73 0 > soekris # chown myUser /dev

Re: ospfd priority problem

2005-08-04 Thread Lars Hansson
On Thu, 4 Aug 2005 13:39:57 +0159 Claudio Jeker <[EMAIL PROTECTED]> wrote: > Could you test the following diff and see if this fixes the problem. No go, still the same problem with router-priority set to 1 and now i doesnt work with router-priority set to 0 either. Other routers shows it as 2way/d

non-prased headers in openbsd apache

2005-08-04 Thread Ami Emanuel Bizamcher
hey all, how i can use non-prased headers in apache ?!? i have mod_perl installed! im using CGI written in perl. this is my script: (i have used a famous one) #!/usr/local/bin/perl $server_protocol = $ENV{'SERVER_PROTOCOL'}; $server_software = $ENV{'SERVER_SOFTWARE'}; print "$server_protocol 20

Re: non-prased headers in openbsd apache

2005-08-04 Thread Henning Brauer
* Ami Emanuel Bizamcher <[EMAIL PROTECTED]> [2005-08-04 17:58]: > how i can use non-prased headers in apache ?!? maybe by reading the supplied documentation... > i have mod_perl installed! > im using CGI written in perl. SetHandler perl-script PerlHandler Apache::Registry PerlSe

Re: non-prased headers in openbsd apache

2005-08-04 Thread Ami Emanuel Bizamcher
i have tryed what you said but i get nothing... i just waits for the loop to finish then sends the data. i also checked the output directly echo "GET /cgi-bin/somefile.pl" | nc 127.0.0.1 80 but no output came out (also plz direct me to the supplied documentation) thanks, ami. On 8/4/05, Henn

fw(s) w/ NAT, pf and carp - failover during large download

2005-08-04 Thread Barry, Christopher
Hi. I researched this on MARC, and while I did find posts relating to it, I found no definitive answer as to how to solve the problem. I setup two firewalls, each with in/dmz/out/sync interfaces - 4 interfaces each. preempt=1,forward=1,allow=1 I have basic failover working great, but if

x86 rings?

2005-08-04 Thread Ed White
Is there any plan to use x86 cpus rings (0..3) to improve OpenBSD security?

Re: make /dev/pf world readable? CLOSED

2005-08-04 Thread Matt Provost
On Aug 04 05:21 PM, Artur Grabowski wrote: > Jan Sepp <[EMAIL PROTECTED]> writes: > > > The answer was surprisingly simple. I just had to create a second pf > > device, chown it and make it read-only for the new owner, and I could get > > my statistics. These are the actual commands: > > > > soek

Re: x86 rings?

2005-08-04 Thread Tobias Weingartner
On Thursday, August 4, Ed White wrote: > > Is there any plan to use x86 cpus rings (0..3) to improve OpenBSD security? Can you enlighten me how that would improve security? If you can show me a way that does not break the unix/posix model of the universe, I'm all ears. --Toby.

Re: x86 rings?

2005-08-04 Thread Jon Simola
On 8/4/05, Ed White <[EMAIL PROTECTED]> wrote: > Is there any plan to use x86 cpus rings (0..3) to improve OpenBSD security? /usr/src/sys/arch/i386/i386/machdep.c has: #if defined(I486_CPU) || defined(I586_CPU) || defined(I686_CPU) /* * On a 486 or above, enable ring 0 write prot

Re: x86 rings?

2005-08-04 Thread Theo de Raadt
> Is there any plan to use x86 cpus rings (0..3) to improve OpenBSD security? Ed, Will you please stop asking uneducated questions like that?

Re: x86 rings?

2005-08-04 Thread eric
On Thu, 2005-08-04 at 17:56:06 +0200, Ed White proclaimed... > Is there any plan to use x86 cpus rings (0..3) to improve OpenBSD security? > No, so go back to using Windows and leave us alone.

Re: Eschelon IPO

2005-08-04 Thread Karsten McMinn
On 8/4/05, Scott Call <[EMAIL PROTECTED]> wrote: > On Thu, 2005-08-04 at 13:07 -0500, Tom Kegerreis wrote: > > Despite everything we've been told, Eschelon went public today. ESCH > > on the Nasdaq > > There was an all "associates" call about an hour ago where they made it > pretty clear they wer

Re: Eschelon IPO

2005-08-04 Thread Karsten McMinn
oh snap. hi [EMAIL PROTECTED] sorry! On 8/4/05, Karsten McMinn <[EMAIL PROTECTED]> wrote: > On 8/4/05, Scott Call <[EMAIL PROTECTED]> wrote: > > On Thu, 2005-08-04 at 13:07 -0500, Tom Kegerreis wrote: > > > Despite everything we've been told, Eschelon went public today. ESCH > > > on the Nasdaq >

Re: Eschelon IPO

2005-08-04 Thread Karsten McMinn
On 8/4/05, Tom Kegerreis <[EMAIL PROTECTED]> wrote: > Previous calls had all said it would be at the end of the year - thats what > I meant > > And since I work nights, I was asleep during the surprise conference call > :-) yea its kind of a odd feeling aint it?? remember back in the day "w

Re: x86 rings?

2005-08-04 Thread Dave Feustel
On Thursday 04 August 2005 10:56 am, Ed White wrote: > Is there any plan to use x86 cpus rings (0..3) to improve OpenBSD security? Intel VanderPool and AMD Pacifica Virtual PC technologies will add the equivalent of ring(-1) to the x86 architecture. This new hardware capability will permit multipl

Re: x86 rings?

2005-08-04 Thread Ed White
> Can you enlighten me how that would improve security? I'm not saying that rings improve security. In fact I'm asking *if* there is any plan to use them to improve security. I think that OpenBSD (and Linux and Windows) uses ring 0 for kernel and ring 3 for userland. I was asking if they planne

pf syntax error (nat tag)

2005-08-04 Thread Roland Penner
I am setting up new firewall running OpenBSD 3.7. I am trying to implement rules using tagging. I ran into trouble with the following line: nat on $ext_if tagged LAN_INET tag LAN_INET_NAT -> ($ext_if) I get the following error: /etc/pf.conf:16: syntax error I am starting with a sample rule se

Re: x86 rings?

2005-08-04 Thread Theo de Raadt
> However, I think that the "uneducated" answer by Theo means "no". No, what I mean is that asking a stupid question, which shows you did NO WORK AT ALL TO LEARN ABOUT THIS, just makes you look like some low-grade slashdot dumbfuck. You heard about rings somewhere. Whooptie doo. You didn't even

Re: make /dev/pf world readable? CLOSED

2005-08-04 Thread Jan Sepp
Matt Provost wrote: On Aug 04 05:21 PM, Artur Grabowski wrote: Jan Sepp <[EMAIL PROTECTED]> writes: The answer was surprisingly simple. I just had to create a second pf device, chown it and make it read-only for the new owner, and I could get my statistics. These are the actual comman

Re: x86 rings?

2005-08-04 Thread Dave Feustel
Ed, Ever read anything about MIT's Multics and the GE 645?

Re: hardware monitoring

2005-08-04 Thread Rickard Dahlstrand
Shawn K. Quinn wrote: >I'm able to get sensor data from the BIOS; is there something I'm >missing to be able to get them from within OpenBSD on this system? dmesg >follows... > > Give xmbmon a try. Rickard.

Re: pf syntax error (nat tag)

2005-08-04 Thread Johan Fredin
On Thu, 4 Aug 2005, Roland Penner wrote: I am setting up new firewall running OpenBSD 3.7. I am trying to implement rules using tagging. I ran into trouble with the following line: nat on $ext_if tagged LAN_INET tag LAN_INET_NAT -> ($ext_if) I get the following error: /etc/pf.conf:16: syntax

Re: non-prased headers in openbsd apache

2005-08-04 Thread Ami Emanuel Bizamcher
Anyone on this list can help ?!? On 8/4/05, Ami Emanuel Bizamcher <[EMAIL PROTECTED]> wrote: > i have tryed what you said but i get nothing... > i just waits for the loop to finish then sends the data. > > i also checked the output directly > echo "GET /cgi-bin/somefile.pl" | nc 127.0.0.1 80 > >

ath0: unable to gain access to wireless unencrypted network

2005-08-04 Thread Bryan
I've been trying to figure this out for a while now. I've consulted the man pages for ath, ifconfig, and dhclient. I've checked the mailing lists, and done many searches, even looking at Free and NetBSD examples... but I am stumped. I bought for my Dell Inspiron 5150 laptop a DWL-650. Hardware

syslogd udp port

2005-08-04 Thread poncenby
I remember asking how to stop syslogd opening udp port 514 a while ago and never doing anything about it, here goes again... hopefully a relevant part of /etc/rc echo 'starting system logger' rm -f /dev/log if [ "X${named_flags}" != X"NO" ]; then rm -f /var/named/dev/log syslogd

Re: x86 rings?

2005-08-04 Thread Tony
Unless I am very much mistaken, this is Unix not Multics. To do anything with the rings, you must make userland into a three-ring circus. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Dave Feustel Sent: Thursday, August 04, 2005 4:05 PM To: Theo de Raadt Cc

Re: syslogd udp port

2005-08-04 Thread Theo de Raadt
The port is also used to (potentially) send data out to other syslog servers. Therefore, it is left open. This is made ASTOUNDINGLY clear in the manual page, if you would read it: syslogd opens the above described socket whether or not it is running in secure mode. If syslogd is runni

Re: syslogd udp port

2005-08-04 Thread Tobias Weingartner
On Thursday, August 4, poncenby wrote: > > I remember asking how to stop syslogd opening udp port 514 a while ago > and never doing anything about it, here goes again... And people asked you to search the archives. > Proto Recv-Q Send-Q Local Address Foreign Address(state) >

Re: syslogd udp port

2005-08-04 Thread Kevin
On 8/4/05, poncenby <[EMAIL PROTECTED]> wrote: > I remember asking how to stop syslogd opening udp port 514 a while ago > and never doing anything about it, here goes again... Sure, syslogd opens UDP/514, but unless you use the '-u' flag the very next thing it does is call shutdown(), which preven

software testing

2005-08-04 Thread Gustavo Rios
Hey folks, i have written a piece of code i would like to test with openbsd on soekris hardware. My work is a replacement for DJB CDB with a the nice BSD license. I wonder if some in this list could provide me such environment in the following sense: 0) grant me a shell access for doing my tests

Re: Via C3 IPSec test result

2005-08-04 Thread Mike
On Wed, 2005-08-03 at 15:29 +0200, Massimo wrote: > I've made up a test LAN built on two mini-ITX Via C3 based board to test > the AES encryption functionality of this CPU on a real setup. > > I've used flashboot 0.7.2 from Damien simply for a matter of time (I've > some flash card already configu

Re: x86 rings?

2005-08-04 Thread Dave Feustel
On Thursday 04 August 2005 04:47 pm, [EMAIL PROTECTED] wrote: > Unless I am very much mistaken, this is Unix not Multics. > To do anything with the rings, you must make userland > into a three-ring circus. That is precisely the point. The C programming language and Unix are incompatible with the

Re: software testing

2005-08-04 Thread Bob Beck
if it's in userland you don't need to do anything special for it to run on "soekris hardware" i386 is i386 is i386. Have you run your stuff on OpenBSD i386? -Bob * Gustavo Rios <[EMAIL PROTECTED]> [2005-08-04 16:31]: > Hey folks, > > i have written a piece of code i would like

Re: software testing

2005-08-04 Thread Gustavo Rios
Yeah! On 8/4/05, Bob Beck <[EMAIL PROTECTED]> wrote: > > > if it's in userland you don't need to do anything > special for it to run on "soekris hardware" i386 is i386 is > i386. Have you run your stuff on OpenBSD i386? > > -Bob > > > * Gustavo Rios <[EMAIL PROTECTED]> [2005-0

Re: x86 rings?

2005-08-04 Thread Roger Neth Jr
Hello, I have been reading this thread as of some interest that I have read some stuff on rings. Are you able to elaborate on C programming and Unix incompatible with x86. Does this mean that other architectures such as Alpha, SGI and Sparc more compatible? Thank you, rogern From: Dave Feus

Re: x86 rings?

2005-08-04 Thread Dave Feustel
On Thursday 04 August 2005 06:24 pm, Roger Neth Jr wrote: > Hello, I have been reading this thread as of some interest that I have read > some stuff on rings. > Are you able to elaborate on C programming and Unix incompatible with x86. Not with x86, but with x86 segmentation. Note that segments

Re: x86 rings?

2005-08-04 Thread Tony
Rings and segments are pretty much orthogonal concepts. C is hardly unique in not supporting segmentation. The only languages I am aware of that even come close are Burroughs Algol and PL/I (and as always Basic Assembly). (Lisp?) But overriding is the fact that x86 supporting segments does not im

Requesting an change in the installer

2005-08-04 Thread sebastian . rother
Hello everybody, I wanna request a little change in the installer. If I install OpenBSD on SMP-Computers I select bsd.mp during the install. I noticed that bsd.mp will not be renamed to bsd if I don't select any other Kernels during the setup. Is it possible to provide a renaming in the installer

Re: Requesting an change in the installer

2005-08-04 Thread Lars Hansson
On Fri, 5 Aug 2005 03:39:01 +0200 (CEST) [EMAIL PROTECTED] wrote: > It's not that bad but so I've to reboot one time more because I've to do a > 'cd / && mv bsd.rd bsd && reboot'. Or you could just set the kernel image to bsd.mp. man boot.conf. --- Lars Hansson

Re: Requesting an change in the installer

2005-08-04 Thread Theo de Raadt
> > It's not that bad but so I've to reboot one time more because I've to do a > > 'cd / && mv bsd.rd bsd && reboot'. > > Or you could just set the kernel image to bsd.mp. > man boot.conf. No. That is not the same. Bad advice.

Re: x86 rings?

2005-08-04 Thread Dave Feustel
On Thursday 04 August 2005 08:34 pm, [EMAIL PROTECTED] wrote: > C is hardly unique in not supporting segmentation. > The only languages I am aware of that even come close are Burroughs > Algol and PL/I (and as always Basic Assembly). (Lisp?) Plm86 and Asm86 provided good support for segmentation a

Re: Requesting an change in the installer

2005-08-04 Thread Chris Kuethe
On 8/4/05, Lars Hansson <[EMAIL PROTECTED]> wrote: > On Fri, 5 Aug 2005 03:39:01 +0200 (CEST) > [EMAIL PROTECTED] wrote: > > > It's not that bad but so I've to reboot one time more because I've to do a > > 'cd / && mv bsd.rd bsd && reboot'. > > Or you could just set the kernel image to bsd.mp. >

Re: Requesting an change in the installer

2005-08-04 Thread Lars Hansson
On Thu, 04 Aug 2005 20:06:55 -0600 Theo de Raadt <[EMAIL PROTECTED]> wrote: > > Or you could just set the kernel image to bsd.mp. > > man boot.conf. > > No. That is not the same. Bad advice. My bad then. You learn sometihng new every day. --- Lars Hansson

Re: chroot sftp/sftp-server help needed...

2005-08-04 Thread Scott Francis
On 8/2/05, Michael C. Ibarra <[EMAIL PROTECTED]> wrote: > Just ran into a wall with the scponly option: > > "If you do use chroot(), your binary will need to be setuid." > > I'll pass on that one for now... systrace could probably mitigate most of the risk here ... (privsep, if you're good enoug

Soekris & OBSD as servers

2005-08-04 Thread Gustavo Rios
I would like to set a obsd and soekris boxes as a server for about 100 users. This box is supposed to handle NIS + Kerberos. Does such configuration can handle the task ? I mean on a performance matter. Does anybody have such configuration? Thanks.

Re: software testing

2005-08-04 Thread Gustavo Rios
I asked to see how the box would behave in terms of performance. Thanks. On 8/4/05, Bob Beck <[EMAIL PROTECTED]> wrote: > > > if it's in userland you don't need to do anything > special for it to run on "soekris hardware" i386 is i386 is > i386. Have you run your stuff on OpenBSD i386?

Re: Requesting an change in the installer

2005-08-04 Thread Roger Neth Jr
From: Lars Hansson <[EMAIL PROTECTED]> To: misc@openbsd.org Subject: Re: Requesting an change in the installer Date: Fri, 5 Aug 2005 10:19:41 +0800 On Thu, 04 Aug 2005 20:06:55 -0600 Theo de Raadt <[EMAIL PROTECTED]> wrote: > > Or you could just set the kernel image to bsd.mp. > > man boot.conf.

pf overload - Banning hosts for n Minutes?

2005-08-04 Thread sebastian . rother
Hello again everybody, With the overload-option in PF it's possible to block connections from hosts wich break my FW-Rules like e.g. too many connection in n Minutes. 'overload' will include the IP into a table and flush every connection created by this IP. I would like to know if there's any tim

Re: Soekris & OBSD as servers

2005-08-04 Thread Scott Francis
On 8/4/05, Gustavo Rios <[EMAIL PROTECTED]> wrote: > I would like to set a obsd and soekris boxes as a server for about 100 users. > This box is supposed to handle NIS + Kerberos. > > Does such configuration can handle the task ? I mean on a performance matter. > Does anybody have such configurati

Re: software testing

2005-08-04 Thread Scott Francis
On 8/4/05, Gustavo Rios <[EMAIL PROTECTED]> wrote: > I asked to see how the box would behave in terms of performance. go grab the oldest PC you can find and you'll probably have roughly equivalent CPU and RAM performance. I hope you're not considering disk I/O as part of "performance", because Soe

Re: Soekris & OBSD as servers

2005-08-04 Thread Gustavo Rios
On 8/5/05, Scott Francis <[EMAIL PROTECTED]> wrote: > On 8/4/05, Gustavo Rios <[EMAIL PROTECTED]> wrote: > > I would like to set a obsd and soekris boxes as a server for about 100 > > users. > > This box is supposed to handle NIS + Kerberos. > > > > Does such configuration can handle the task ? I

Re: software testing

2005-08-04 Thread Gustavo Rios
> You're also likely to get more useful responses if you include _any_ > details about what your software does, what it's written in, or even a > URL to the source (if you really want useful comments). Here you have it: http://www.cyberspace.org/~grios/project.html Since, i would really appreciat

Re: 3.7 Kernel pppoe not accepting incoming connections, userland works 100%

2005-08-04 Thread Matthew L. Shobe
On Mon, Aug 01, 2005 at 11:24:32AM -0400, Steve Williams wrote: > I upgraded an OpenBSD server from 3.0 to 3.7-current. I am trying to > switch the pppoe from the user land pppoe to the kernel pppoe. The user > land one works 100% on 3.7, so I know it's not a physical problem. > Outgoing conn

Re: syslogd udp port

2005-08-04 Thread J.C. Roberts
On Thu, 04 Aug 2005 15:50:58 -0600, Theo de Raadt <[EMAIL PROTECTED]> wrote: >The port is also used to (potentially) send data out to other syslog >servers. Therefore, it is left open. This is made ASTOUNDINGLY >clear in the manual page, if you would read it: > > syslogd opens the above desc

HP thin Client

2005-08-04 Thread Gustavo Rios
Anyone running HP thin client with OPENBSD (netbooting from a openbsd server)? What is your experience with them? thanks.

Re: syslogd udp port

2005-08-04 Thread poncenby
Firstly I never said mentioned the word security, so I don't know where Tobias got that from. I apologise once again for not searching the archives and reading the man pages. May I suggest some tolerance(doesn't have to be sincere) for people who are simply either too busy or too lazy to rea

Re: syslogd udp port

2005-08-04 Thread Theo de Raadt
> May I suggest some tolerance(doesn't have to be sincere) for people who > are simply either too busy or too lazy to read man pages in their > entirety. Absolutely not. You were lazy and unwilling to educate yourself, and are making other people watch you sluffing your way through life.