Re: PPPoE and static IP block

2005-11-12 Thread Greg Thomas
On 11/11/05, Joe S <[EMAIL PROTECTED]> wrote: > > >> SBC equipment with an OpenBSD box. Get the WAN IP from SBC's tech, or > > > this is trivial to do. I run SBC static and use OpenBSD for PPPoE and > pf. > > This *should* be simple, but it's not. SBC no longer provides WAN IPs > for home users tha

Re: ssh brute force attacks

2005-11-12 Thread Joachim Schipper
On Sat, Nov 12, 2005 at 01:14:08AM +, Stuart Henderson wrote: > On 2005/11/12 01:11:02, Joachim Schipper wrote: > > > pass in quick on $ext_if proto tcp from any to ($ext_if) port 22 keep > > > state > > > (max-src-conn-rate 3/10, overload flush) > > > > This sort of thing is really popular,

Re: ssh brute force attacks

2005-11-12 Thread Fabien Germain
On 11/11/05, J Moore <[EMAIL PROTECTED]> wrote: > > > pass in quick on $ext_if proto tcp from any to ($ext_if) port 22 keep > > > state > > > (max-src-conn-rate 3/10, overload flush) > > > > which only works with OpenBSD >= 3.7 ( and my server is 3.5 :-( ) > > > Just out of curiosity, why haven't

Re: ports out-of-date question

2005-11-12 Thread Denny White
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Nov 10, 2005 at 12:40:46PM -0600, Denny White wrote: Okay Andy, I appreciate the info. If you have time, can you answer one more question? Could I alleviate this discrepancy by pkg_delete all installed packages and also deleting all of /us

machdep.allowaperture for remote x

2005-11-12 Thread Michael Quaintance
Hi I apologise if this has been answered before but googling for related info and scouring sysctl-related man pages has not been fruitful so far. I have a headless server box (sparc64) from which I want to run a diskless client (i386). I want the client to have its own X server but run X app

Re: identd - what am I missing

2005-11-12 Thread Dirk-Willem van Gulik
On Fri, 11 Nov 2005, J.D. Bronson wrote: > I am running 3.8 and on a single machine with no pf or nat... > > I disabled identd in inetd.conf. > I issued a kill -1 on the identd process. ^ identd process or inetd process ? After a change in inetd.conf you want to k

Re: machdep.allowaperture for remote x

2005-11-12 Thread Christian Weisgerber
Michael Quaintance <[EMAIL PROTECTED]> wrote: > My question is... as I am not intending to run an X Server on my > headless box but I do want to run X Clients, do I agree to the > installation question (on the sparc64 box) > > Do you expect to run the X Window System? [yes] > > With yes or no?

Re: ssh brute force attacks

2005-11-12 Thread Edd Barrett
On 11/11/05, stan <[EMAIL PROTECTED]> wrote: > I;ve got a machien that seems to getting atacked by what appears to be a > simplistic "brute force" attck. it's getting hit multiple ties a second > with bogus root login attempts, my guess is that they are trying dictionary > atacks on the password fo

Re: identd - what am I missing

2005-11-12 Thread J.D. Bronson
At 06:08 AM 11/12/2005, you wrote: > I disabled identd in inetd.conf. > I issued a kill -1 on the identd process. ^ identd process or inetd process ? After a change in inetd.conf you want to kill -HUP the latter, inetd. If you see an identd running than you may e

Re: Anyone tried a sun fire X2100 server yet?

2005-11-12 Thread Daniel Hartmeier
> > cpu0: AMD Opteron(tm) Processor 148, 1005.28 MHz > > 1Ghz? So slow? :-) It's cheaper and shows the superiority of low-tech cgi more clearly ;) http://undeadly.org/cgi?action=article&sid=20051112002121&pid=1&mode=flat (yes, Will, 3.8-release and -stable work fine) Daniel

Re: machdep.allowaperture for remote x

2005-11-12 Thread Theo de Raadt
> I apologise if this has been answered before but googling for related > info and scouring sysctl-related man pages has not been fruitful so far. > > I have a headless server box (sparc64) from which I want to run a > diskless client (i386). I want the client to have its own X server but > run

Re: PPPoE and static IP block

2005-11-12 Thread L. V. Lammert
On Fri, 11 Nov 2005, Joe S wrote: > >> SBC equipment with an OpenBSD box. Get the WAN IP from SBC's tech, or > > this is trivial to do. I run SBC static and use OpenBSD for PPPoE and pf. > > This *should* be simple, but it's not. SBC no longer provides WAN IPs > for home users that want static. >

Re: ssh brute force attacks

2005-11-12 Thread Melameth, Daniel D.
Joachim Schipper wrote: > > See pf.conf(5) about max-src-conn, and compare it with > > max-src-states. > > That's true. Sorry, should have RTFMP. > > Regardless, while this makes the attack more difficult, the added > difficulty doesn't amount to much. Hubs will allow sniffing easily, > and swit

Re: Accounting with "ac" in /etc/monthly

2005-11-12 Thread Jason McIntyre
On Thu, Nov 10, 2005 at 06:56:46AM +0100, Andreas Bihlmaier wrote: > Hello misc@, > > a question that bugged me for quite a while: > > Why is the accounting in /etc/monthly? > I reffer to these (commented out) lines: > > #echo "" > #echo "Doing login accounting:" > #ac -p | sort -nr +1 > # > #ec

Re: ath0: bogus xmit rate 0x0

2005-11-12 Thread Sevan / Venture37
Alexandre wrote: On the other hand, I can't use OFDM54 and use the 802.11g feature. What if you leave the media on autoselect but specify mode 11g in your /etc/hostname.ath0 file?? Sevan

Re: OpenBSD Desktop Document

2005-11-12 Thread bofh
On 11/8/05, Joe S <[EMAIL PROTECTED]> wrote: > > In general, this is a good start. One more piece of advice, try not to > make the document too narrative, but rather just put in what the user > needs to know to get a desktop working. One piece of advice, take a look at gentoo's install docs. Jus

selecting a wireless networking card

2005-11-12 Thread Reza Muhammad
Hi misc, Please mind my stupidity for asking this. I'm trying to replace my 802.11b wireless card with the 802.11g card on my openbsd box. I think im going to go with either the ath driver or ral since I want it to run on hostap mode. However, I just bought a D-Link G520 (Hardware rev: b3) and i

Re: OpenBSD Desktop Document

2005-11-12 Thread Derek Tracy
I have to agree, Gentoo's install docs are some of the best out there and will allow just about anybody to install OpenBSD. On 11/12/05, bofh <[EMAIL PROTECTED]> wrote: > > On 11/8/05, Joe S <[EMAIL PROTECTED]> wrote: > > > > In general, this is a good start. One more piece of advice, try not to >

51� Feira do Livro de Porto Alegre

2005-11-12 Thread 51� Feira do Livro
Veja comentarios e os livros no WWW.SUBMARINO.COM.BR clicando [IMAGE] Veja comentarios e os livros no WWW.SUBMARINO.COM.BR clicando Veja comentarios e os livros no WWW.SUBMARINO.COM.BR clicando

Re: selecting a wireless networking card

2005-11-12 Thread Darrin Chandler
Reza Muhammad wrote: Hi misc, Please mind my stupidity for asking this. I'm trying to replace my 802.11b wireless card with the 802.11g card on my openbsd box. I think im going to go with either the ath driver or ral since I want it to run on hostap mode. However, I just bought a D-Link G520

routing over IPSEC tunnel

2005-11-12 Thread Matthew Closson
Hello, I have an IPSEC tunnel on OpenBSD3.8 to a cisco3000 concentrator. I am able to successfully reach several subnets through the tunnel, however one of the sites I need to reach through the tunnel is in the range of 50.0.0.0/8. So I setup a flow to it in my /etc/isakmpd/ipsec.conf file, but

Re: Accounting with "ac" in /etc/monthly

2005-11-12 Thread Andreas Bihlmaier
> On Thu, Nov 10, 2005 at 06:56:46AM +0100, Andreas Bihlmaier wrote: > > Hello misc@, > > > > a question that bugged me for quite a while: > > > > Why is the accounting in /etc/monthly? > > I reffer to these (commented out) lines: > > > > #echo "" > > #echo "Doing login accounting:" > > #ac -p |

DNS attack?

2005-11-12 Thread J.D. Bronson
I am starting to see TONS of these things in my pflog Nov 12 19:50:58.030904 rule 48/(match) block in on tun0: 63.219.179.130.13519 > 65.x.x.169.53: 47505+[|domain] Nov 12 19:51:08.037007 rule 48/(match) block in on tun0: 63.219.179.130.13519 > 65.x.x.169.53: 59022+[|domain] I have a bloc

Re: DNS attack?

2005-11-12 Thread Damien Miller
On Sat, 12 Nov 2005 20:15:18 -0600 "J.D. Bronson" <[EMAIL PROTECTED]> wrote: > I am starting to see TONS of these things in my pflog > > Nov 12 19:50:58.030904 rule 48/(match) block in on tun0: > 63.219.179.130.13519 > 65.x.x.169.53: 47505+[|domain] > > Nov 12 19:51:08.037007 rule 48/(match) b

Re: routing over IPSEC tunnel

2005-11-12 Thread Matthew Closson
Never mind, I found the solution and it is working properly now. I am using an ifconfig alias on my dc0 interface as part of our internal subnet. I just added a route from the 50.x.x.x/xx subnet to that internal ip alias on my dc0 and now traffic is routed over the enc0 interface. Thanks anyw

Re: ssh brute force attacks

2005-11-12 Thread J Moore
On Sat, Nov 12, 2005 at 12:04:38PM +0100, the unit calling itself Fabien Germain wrote: > On 11/11/05, J Moore <[EMAIL PROTECTED]> wrote: > > > > pass in quick on $ext_if proto tcp from any to ($ext_if) port 22 keep > > > > state > > > > (max-src-conn-rate 3/10, overload flush) > > > > > > which

Building a bootable CF w/ a RAM-disk kernel

2005-11-12 Thread J Moore
The readme file in flashboot contains an overview of building the ram-disk kernel. What it doesn't explain is how to install the kernel on the CF, or prepare the CF for booting the kernel. There must be some documentation out there that describes these steps, but I'm having no luck finding it.

Re: selecting a wireless networking card

2005-11-12 Thread Reza Muhammad
Thanks for the help. I guess I'll have to check the store myself. It'll be too risky buying online. If I still can't get it right, I might as well order from kd85. Thanks again :) > When I bought mine the version was on the box. It's not obvious, but > it's located on a small sticker along wit

Re: Building a bootable CF w/ a RAM-disk kernel

2005-11-12 Thread Chris Kuethe
man -k boot there are two manpages that will be especially useful. read them, pay attention to the see also section... or read the installer scripts to see how they work. or read the makefiles for the floppy disk images. On 12/11/05, J Moore <[EMAIL PROTECTED]> wrote: > The readme file in flashb

Re: Accounting with "ac" in /etc/monthly

2005-11-12 Thread Hugo Villeneuve
On Sat, Nov 12, 2005 at 04:21:38PM +0001, Jason McIntyre wrote: > On Thu, Nov 10, 2005 at 06:56:46AM +0100, Andreas Bihlmaier wrote: > > Hello misc@, > > > > a question that bugged me for quite a while: > > > > Why is the accounting in /etc/monthly? > > I reffer to these (commented out) lines: >

Re: Hardware RAID

2005-11-12 Thread Josh Tolley
On 11/10/05, Jason Dixon <[EMAIL PROTECTED]> wrote: > > There are a number of examples and projects online. The Soekris > lists are a fountain of good information. Personally, I like the > flashdist project. > > http://www.nmedia.net/~chris/soekris/ > > -- > Jason Dixon > DixonGroup Consulting >

Re: Building a bootable CF w/ a RAM-disk kernel

2005-11-12 Thread J Moore
On Sat, Nov 12, 2005 at 10:17:20PM -0700, the unit calling itself Chris Kuethe wrote: > man -k boot > > there are two manpages that will be especially useful. read them, pay > attention to the see also section... which two?... biosboot & installboot for my architecture? > or read the installer