PF blocking outbound packets that don't have S/SA flags

2008-11-21 Thread Joe S
OS: OpenBSD 4.4 RELEASE i386 PF is blocking traffic that I want it to pass. I notice this when I run nmap 4.76 (compiled from source). It appears that my packets are being dropped because they don't match the "pass out quick" rule in my pf.conf. I noticed this rule is modified due to the default s

USB RFID Reader misreads

2008-11-21 Thread David Schulz
Hi all, i have a RFID Proximity Card Reader connected to a Computer via USB. Basically how they work is that as soon a RFID Card comes near it, the Reader reads the Number on the Card, and sends it to STDIN followed by a newline Character. It really works the same as a Magnetic Card Reader, B

Re: PF blocking outbound packets that don't have S/SA flags

2008-11-21 Thread Girish Venkatachalam
On 01:10:03 Nov 21, Joe S wrote: > OS: OpenBSD 4.4 RELEASE i386 > > PF is blocking traffic that I want it to pass. I notice this when I > run nmap 4.76 (compiled from source). It appears that my packets are > being dropped because they don't match the "pass out quick" rule in my > pf.conf. I notic

Re: PF blocking outbound packets that don't have S/SA flags

2008-11-21 Thread Stuart Henderson
On 2008-11-21, Joe S <[EMAIL PROTECTED]> wrote: > How do I create a rule to ignore the flags S/SA Read pf.conf(5) about flags.

4.4 installation on a large disk

2008-11-21 Thread Chris
I'm trying to install x86 4.4-release on a RAID mirror 465.8g disk. The installation hangs after the last file set is installed (xserv44.tgz): it just sits there and I cannot use my keyboard anymore. The BIOS shows there are two disks of 500G. During the the installation I can see two disks: wd0 a

softraid(4) in production environment

2008-11-21 Thread Jordi Espasa Clofent
Hi all, As post subject says, it's a clear question ?Is it softraid(4) ready for a production system? I have to build a authentication (with OpenLDAP) system and I want to do it with OpenBSD; I absolutely tust on Marco's good job, but I must to know if softraid(4) is ready for a real and critical

Re: softraid(4) in production environment

2008-11-21 Thread Jordi Espasa Clofent
Sorry, I mean "I've used raidframe in the past..." -- Thanks, Jordi Espasa Clofent

Re: Research for a Software Security paper

2008-11-21 Thread Nick Holland
Jose de Paula Eufrasio Junior wrote: > Hello, before anything else, I did read all material about the OpenBSD > security policies on the website. Now I am trying to get some more > insider insight on it. > Writing a paper about open source software security and not including > OpenBSD case is kinda

Re: softraid(4) in production environment

2008-11-21 Thread Guido Tschakert
Jordi Espasa Clofent schrieb: > Hi all, > > As post subject says, it's a clear question ?Is it softraid(4) ready for > a production system? > I have to build a authentication (with OpenLDAP) system and I want to do > it with OpenBSD; I absolutely tust on Marco's good job, but I must to > know if s

Re: help with network connectivity

2008-11-21 Thread Nick Holland
Maurice Janssen wrote: > On Thursday, November 20, 2008 at 20:07:02 -0800, Jon wrote: >>the /etc/hostname.em0 has 'inet 255.255.255.0 NONE' in it. wrong subnet mask, so I am going to guess anything else you have could be wrong, too, but that's the right syntax, a broadcast is NOT needed for a sim

softraid(4) in production environment

2008-11-21 Thread Jordi Espasa Clofent
Hi all, As post subject says, it's a clear question ?Is it softraid(4) ready for a production system? I have to build a authentication (with OpenLDAP) system and I want to do it with OpenBSD; I absolutely tust on Marco's good job, but I must to know if softraid(4) is ready for a real and criti

Re: atheros 5424 wireless chipset

2008-11-21 Thread Neal Hogan
I mailed this to Aaron offlist, but he suggested that someone else may have more to say about. So, I thought I'd send it on. The message I'm responding to is below mine. It merely indicates that his Atheros 5424 chipset works. On Thu, Nov 20, 2008 at 8:49 PM, Neal Hogan <[EMAIL PROTECTED]> wrote:

Re: PF blocking outbound packets that don't have S/SA flags

2008-11-21 Thread Vinicius Vianna
Joe S escreveu: OS: OpenBSD 4.4 RELEASE i386 PF is blocking traffic that I want it to pass. I notice this when I run nmap 4.76 (compiled from source). It appears that my packets are being dropped because they don't match the "pass out quick" rule in my pf.conf. I noticed this rule is modified du

Re: 4.4 installation on a large disk

2008-11-21 Thread Stuart Henderson
On 2008-11-21, Chris <[EMAIL PROTECTED]> wrote: > I'm trying to install x86 4.4-release on a RAID mirror 465.8g disk. > The installation hangs after the last file set is installed > (xserv44.tgz): it just sits there and I cannot use my keyboard > anymore. The BIOS shows there are two disks of 500G.

Re: 4.4 installation on a large disk

2008-11-21 Thread J.C. Roberts
On Fri, 21 Nov 2008 03:35:54 -0800 Chris <[EMAIL PROTECTED]> wrote: > I'm trying to install x86 4.4-release on a RAID mirror 465.8g disk. ... > The BIOS shows there are two disks of 500G. Sorry, my mind reading skills are less than perfect, but since your BIOS shows two disks, you might not using

Re: atheros 5424 wireless chipset

2008-11-21 Thread Peter Hessler
Yup. Some of the 5424 chips work, and some don't. I have the same chipset as Neal, and are looking at it, but haven't had as much time as I would like. On 2008 Nov 21 (Fri) at 06:59:24 -0600 (-0600), Neal Hogan wrote: :I mailed this to Aaron offlist, but he suggested that someone else may have

possibly generic disk copy and restore question

2008-11-21 Thread John .
Hello misc, I want to install OpenBSD/amd64 on my laptop (a recent Toshiba amd turon with 3GB RAM) and ONLY have OpenBSD on it, but before I do this, I need to know how I can image the disk and restore it subsequently. It has vista on, and I may need to restore vista should I subsequently need to

Re: possibly generic disk copy and restore question

2008-11-21 Thread John .
> 2008/11/21 dermiste <[EMAIL PROTECTED]>: > cat(1) is the way to go. LOL. actually, dunno why I didn't see it before, but g4u seems to do what I want, sorry for the noise. -- John

IPsec: The same srcid, dstid and peer for multiple tunnels

2008-11-21 Thread Mikolaj Kucharski
Hi, Is it possible to have two or more subnets, each configured with the same srcid, dstid and peer? Currently I cannot make it work. It works only for the first subnet in the roadwarior config file. Is is possible at all, no matter what IPsec implementation I would like to use? # router: /etc/i

Re: Latest Portable OpenNTPD?

2008-11-21 Thread Henning Brauer
* Anirban Sinha <[EMAIL PROTECTED]> [2008-11-21 04:33]: > On 2008-11-21, Don Hiatt <[EMAIL PROTECTED]> wrote: > > I was looking at http://openntpd.org/ for the latest Portable > > OpenBSD an saw that it is at 3.9p1 while the non-portable is > > at 4.3. A colleague of mine is tired of fighting with

Re: possibly generic disk copy and restore question

2008-11-21 Thread Robert
On Fri, 21 Nov 2008 14:14:19 + "John ." <[EMAIL PROTECTED]> wrote: > Hello misc, > > I want to install OpenBSD/amd64 on my laptop (a recent Toshiba amd > turon with 3GB RAM) and ONLY have OpenBSD on it, but before I do this, > I need to know how I can image the disk and restore it subsequentl

Re: possibly generic disk copy and restore question

2008-11-21 Thread Nick Holland
John . wrote: Hello misc, I want to install OpenBSD/amd64 on my laptop (a recent Toshiba amd turon with 3GB RAM) and ONLY have OpenBSD on it, but before I do this, I need to know how I can image the disk and restore it subsequently. It has vista on, and I may need to restore vista should I subse

Re: IPsec: The same srcid, dstid and peer for multiple tunnels

2008-11-21 Thread Mikolaj Kucharski
On Fri, Nov 21, 2008 at 02:52:53PM +, Mikolaj Kucharski wrote: > Hi, > > Is it possible to have two or more subnets, each configured with the > same srcid, dstid and peer? Currently I cannot make it work. It works > only for the first subnet in the roadwarior config file. Is is possible > at a

Re: possibly generic disk copy and restore question

2008-11-21 Thread Chris Zakelj
An even easier solution would be to just buy a new HDD, and stick the original into a static bag. Why make it harder than it needs to be? On 11/21/08, Robert <[EMAIL PROTECTED]> wrote: > On Fri, 21 Nov 2008 14:14:19 + > "John ." <[EMAIL PROTECTED]> wrote: > >> Hello misc, >> >> I want to inst

Re: IPsec: The same srcid, dstid and peer for multiple tunnels

2008-11-21 Thread Stuart Henderson
On 2008-11-21, Mikolaj Kucharski <[EMAIL PROTECTED]> wrote: > On Fri, Nov 21, 2008 at 02:52:53PM +, Mikolaj Kucharski wrote: >> Hi, >> >> Is it possible to have two or more subnets, each configured with the >> same srcid, dstid and peer? Currently I cannot make it work. It works >> only for th

Re: possibly generic disk copy and restore question

2008-11-21 Thread John .
2008/11/21 Chris Zakelj <[EMAIL PROTECTED]>: > An even easier solution would be to just buy a new HDD, and stick the > original into a static bag. Why make it harder than it needs to be? True, but this is a home system, and I'm cheap. I want that 170GB drive ;) A side issue I have found is some

Re: possibly generic disk copy and restore question

2008-11-21 Thread John .
Thanks for all your help. certainly have some good pointers there. At least I'm not now in the dark, so to speak. -- John

Re: possibly generic disk copy and restore question

2008-11-21 Thread Robert
On Fri, 21 Nov 2008 11:05:58 -0500 "Chris Zakelj" <[EMAIL PROTECTED]> wrote: > An even easier solution would be to just buy a new HDD, and stick the > original into a static bag. Why make it harder than it needs to be? Oh my, what a question, but a valid point. To fully answer it i would have t

Re: PF blocking outbound packets that don't have S/SA flags

2008-11-21 Thread Joe S
On Fri, Nov 21, 2008 at 2:11 AM, Stuart Henderson <[EMAIL PROTECTED]> wrote: > On 2008-11-21, Joe S <[EMAIL PROTECTED]> wrote: >> How do I create a rule to ignore the flags S/SA > > Read pf.conf(5) about flags. > > Thanks. I read everything but that man page. I added "flags any" to my "pass out"

Re: help with network connectivity

2008-11-21 Thread Jon
Hi So - finally got it.. I have the right gateway, ip, subnet masks, dns servers etc.. how ever I have to reboot the modem and the server multiple time to finally get it to work. It works - but it is really slowww... will check the network speeds and the dns order once more - but it is real

Re: softraid(4) in production environment

2008-11-21 Thread Lars Noodén
Jordi Espasa Clofent wrote: > As post subject says, it's a clear question ?Is it softraid(4) ready for > a production system? I can only provide anecdotal support. I've been using it since August in a proxy-cache for a classroom of 24 dual boot Kubuntu/OS X machines. Seems ok. /Lars

laptop page for amd64 laptops

2008-11-21 Thread John .
Hello misc, There's a laptop page for i386 laptops at http://www.openbsd.org/i386-laptop.html but none for amd64. Something that has success/failure stories plus dmesg & xorg. Would it be a good idea to have one? Who to suggest to? I thought it'd be a good idea as it is a separate arch and there's

Re: laptop page for amd64 laptops

2008-11-21 Thread Ted Unangst
On Fri, Nov 21, 2008 at 2:10 PM, John . <[EMAIL PROTECTED]> wrote: > There's a laptop page for i386 laptops at > http://www.openbsd.org/i386-laptop.html but none for amd64. Something > that has success/failure stories plus dmesg & xorg. Would it be a good > idea to have one? Who to suggest to? I th

Re: possibly generic disk copy and restore question

2008-11-21 Thread Rod Whitworth
On Fri, 21 Nov 2008 16:40:26 +0100, Robert wrote: >On Fri, 21 Nov 2008 14:14:19 + >"John ." <[EMAIL PROTECTED]> wrote: > >> Hello misc, >> >> I want to install OpenBSD/amd64 on my laptop (a recent Toshiba amd >> turon with 3GB RAM) and ONLY have OpenBSD on it, but before I do this, >> I need

Re: PF blocking outbound packets that don't have S/SA flags

2008-11-21 Thread Daniel Melameth
On Fri, Nov 21, 2008 at 10:46 AM, Joe S <[EMAIL PROTECTED]> wrote: > I added "flags any" to my "pass out" rule and my packets are no longer > blocked by rule 0. > > # pfctl -s rules > block return log all > block return in quick inet6 all > pass quick proto icmp all keep state allow-opts > pass out

Re: Logging interface state changes

2008-11-21 Thread (private) HKS
> "route monitor" ? > > -- > WBR, >Pereresus ne Vlezaet Buggy That's an interesting tool, but it's not what I'm looking for. My current solution is an incredibly awkward ifstated.conf (pasted below). Is this really the best way to do it? I have no idea what's involved with logging interface

Re: PF blocking outbound packets that don't have S/SA flags

2008-11-21 Thread Joe S
On Fri, Nov 21, 2008 at 2:13 PM, Daniel Melameth <[EMAIL PROTECTED]> wrote: > Perhaps you're hitting pf's default state limit? If you're going to > be nmapping, I highly recommend doing it from a host that's not > firewalled. Could be. I will look into that. I'm starting to wonder if the error

Re: Logging interface state changes

2008-11-21 Thread (private) HKS
On Fri, Nov 21, 2008 at 5:18 PM, (private) HKS <[EMAIL PROTECTED]> wrote: >> "route monitor" ? >> >> -- >> WBR, >>Pereresus ne Vlezaet Buggy > > That's an interesting tool, but it's not what I'm looking for. > > My current solution is an incredibly awkward ifstated.conf (pasted below). > > Is

Re: PF blocking outbound packets that don't have S/SA flags

2008-11-21 Thread Joe S
On Fri, Nov 21, 2008 at 2:29 PM, Joe S <[EMAIL PROTECTED]> wrote: > On Fri, Nov 21, 2008 at 2:13 PM, Daniel Melameth <[EMAIL PROTECTED]> wrote: > >> Perhaps you're hitting pf's default state limit? If you're going to >> be nmapping, I highly recommend doing it from a host that's not >> firewalled.

any binary compatibility on sparc64 port?

2008-11-21 Thread Vivek Ayer
Hey guys, Just wondering if the sparc64 ports supports any binary emulation modes. COMPAT_LINUX perhaps. That would be great cuz I have all this RAM on my servers and people in my lab would like to use MATLAB to run computations. Currently, I have Octave on there, but we need MATLAB for some speci

Re: PF blocking outbound packets that don't have S/SA flags

2008-11-21 Thread Stuart Henderson
On 2008-11-21, Joe S <[EMAIL PROTECTED]> wrote: > On Fri, Nov 21, 2008 at 2:13 PM, Daniel Melameth <[EMAIL PROTECTED]> wrote: > >> Perhaps you're hitting pf's default state limit? If you're going to >> be nmapping, I highly recommend doing it from a host that's not >> firewalled. > > Could be. I w

Re: Logging interface state changes

2008-11-21 Thread Stuart Henderson
On 2008-11-21, (private) HKS <[EMAIL PROTECTED]> wrote: > My current solution is an incredibly awkward ifstated.conf (pasted below). it's still a hack, but a little less awkward to run ospfd with all the interfaces set as passive which just happens to log this information..

Re: Fresh install question

2008-11-21 Thread Denny White
On Mon, Nov 17, 2008 at 01:14:46AM -0600, Denny White spoke thusly: > I've always tried to do a fresh install any time possible, > and then copy all my backed up /home and /data stuff back > to the new installed system. I'm just trying to figure out > if there's a way to keep those 2 slices intact

Re: USB RFID Reader misreads

2008-11-21 Thread Travers Buda
* David Schulz <[EMAIL PROTECTED]> [2008-11-21 17:17:57]: > Hi all, > > i have a RFID Proximity Card Reader connected to a Computer via USB. > Basically how they work is that as soon a RFID Card comes near it, the > Reader reads the Number on the Card, and sends it to STDIN followed by a > n

Re: Latest Portable OpenNTPD?

2008-11-21 Thread Darren Tucker
On Fri, Nov 21, 2008 at 04:36:36PM +0100, Henning Brauer wrote: > * Anirban Sinha <[EMAIL PROTECTED]> [2008-11-21 04:33]: > > On 2008-11-21, Don Hiatt <[EMAIL PROTECTED]> wrote: > > > I was looking at http://openntpd.org/ for the latest Portable > > > OpenBSD an saw that it is at 3.9p1 while the no

A Distancia. Inscripcion 2009.

2008-11-21 Thread Psicologia Social
Por favor Por favor, no responda este mail. Si desea responder, hagalo a la direccion que figura al pie. Inscripciones 2009 Psicologia Social Organiza Fundacion Tehuelche SupervisionGeneral Licenciada Diana Coblier P

ping: sendto: No buffer space avaible

2008-11-21 Thread Yuriy A. Dmitrishin
Hi. I get such message every morning when I come to my work. I try to increase limits in pf.conf: set limit { states 5, frags 5, src-nodes 5 } but it doesn't solve this problem. My ip: 193.239.143.252. Routing table: default193.239.143.193UGS 314062