Re: Apache Firefox and Ogg Theora (Byte-range requests)

2010-02-17 Thread Dan Harnett
On Wed, Feb 17, 2010 at 02:04:03AM +, Stuart Henderson wrote: > On 2010-02-16, trustlevel-...@yahoo.co.uk wrote: > > I've seen examples of earlier versions than Apache 1.3.29 said to be working > > with byte-range requests, has anyone got the byte range requests to work > > with > > openbsd w

Re: OpenBGP filter question

2010-02-17 Thread Ivo Chutkin
On 12.2.2010 P3. 11:10, Stuart Henderson wrote: On 2010-02-11, Ivo Chutkin wrote: match to $my_upstream_1 source-as {some_as} set prepend-self 4 I would like to prepend my as to make as path longer for "some_as" trough my_upstream_1 and make it to prefer path trough my_upstream_2. It does not

Re: PF log parser and dynamic PF rules...

2010-02-17 Thread Kenneth R Westerback
On Wed, Feb 17, 2010 at 07:51:03AM +0100, Per-Olov Sj?holm wrote: > On 17 feb 2010, at 02.07, Randal L. Schwartz wrote: > > >> "Paul" == Paul de Weerd writes: > > > > Paul> Jeez... As an asker, you don't really get to decide how or what other > > Paul> people answer, or if they even answer at

Re: PF log parser and dynamic PF rules...

2010-02-17 Thread Peter Hessler
On 2010 Feb 17 (Wed) at 07:51:03 +0100 (+0100), Per-Olov Sjvholm wrote: :Answer correctly or don't answer at all. It seems to me that people *did* answer correctly. But, their answer was not what you wanted to hear. The answer: don't use port knocking, use a randomized url. https://example.com/

active-active firewall setup

2010-02-17 Thread Kapetanakis Giannis
I've setup successfully a pair of 4.7-current obsd load balanced firewall/routers I'd like some clarification on the manual page of carp(4). from carp(4): "If IP balancing is being used on a firewall, it is recommended to config- ure the carpnodes in a >>symmetrical<< manner. This is achieved

Re: network performance problems

2010-02-17 Thread Pete Vickers
On 17. feb. 2010, at 08.47, Claudio Jeker wrote: > On Wed, Feb 17, 2010 at 03:35:24AM +0200, Kapetanakis Giannis wrote: >> On 17/02/10 03:16, FRLinux wrote: >> >>> Mmmh, you picked my interest here. You mentioned your cisco 6500 but I >>> guess you are going to use only gigabit NICs, so you have n

Re: network performance problems

2010-02-17 Thread Tomas Bodzar
I'm not an expert in this area, but it looks like OpenBSD can do some parts too and for much more lower price. DHCP snooping >From info on Cisco page it looks like simple combination of lists/macros for blocking/allowing certain ports. Tables are possible with OpenBSD too and you can limit flow r

Security feed

2010-02-17 Thread Jean-Francois
Hello All, I am a little bit out of subject but please allow me to ask you about feeds of security issues. Thank you

Re: Security feed

2010-02-17 Thread Thomas Pfaff
On Wed, 17 Feb 2010 20:05:47 +0100 "Jean-Francois" wrote: > Hello All, > > I am a little bit out of subject but please allow me to ask you about > feeds of security issues. > http://www.undeadly.org has it and the errata pages are of course updated. I just have a cron that diffs a local copy

Re: Security feed

2010-02-17 Thread Brad Tilley
On Wed, 17 Feb 2010 20:05 +0100, "Jean-Francois" wrote: > Hello All, > > I am a little bit out of subject but please allow me to ask you about > feeds of > security issues. > > Thank you I read this page and the links off of it: http://www.openbsd.org/errata.html

How to change pciide to ahci if there is no option for this in BIOS

2010-02-17 Thread Tomas Bodzar
Hi all, my friend started using of OpenBSD on his server, but he has quite bad perfomance with his disk. Actually it's running under native mode : pciide1 at pci0 dev 31 function 2 "Intel 82801EB SATA" rev 0x02: DMA, channel 0 configured to native-PCI, channel 1 configured to native-PCI pciide1:

OSPFd on Feb 17th 2010 -current Incompatibilities

2010-02-17 Thread Insan Praja SW
Hi Misc@, Recently I updated one of my routers into current. We runs OSPFd as an IGP for our network. The update went success, but OSPFd wont get synchronized. On the kernel-updated routers "ospfctl sh neig" shows: $ ospfctl sh neig ID Pri StateDeadTime Address I

Re: Security feed

2010-02-17 Thread Jim Dew
If you're set on a rss feed: http://page2rss.com/rss/ba0de3240eb2c00c09f20d963c4a9067 On Wed, Feb 17, 2010 at 02:57:38PM -0500, Brad Tilley wrote: > On Wed, 17 Feb 2010 20:05 +0100, "Jean-Francois" > wrote: > > Hello All, > > > > I am a little bit out of subject but please allow me to ask you ab

Re: PF log parser and dynamic PF rules...

2010-02-17 Thread Per-Olov Sjöholm
On 17 feb 2010, at 12.38, Peter Hessler wrote: > On 2010 Feb 17 (Wed) at 07:51:03 +0100 (+0100), Per-Olov Sjvholm wrote: > :Answer correctly or don't answer at all. > > It seems to me that people *did* answer correctly. But, their answer > was not what you wanted to hear. > > The answer: don't us

Cursos intensivos

2010-02-17 Thread Psicología Aplicada
IAPSA Instituto Argentino de Psicologma Aplicada Si no se muestra correctamente el contenido del mensaje (por ejemplo, si los acentos estan sustituidos por otros smmbolos) puede

Re: OSPFd on Feb 17th 2010 -current Incompatibilities

2010-02-17 Thread Stuart Henderson
On 2010-02-17, Insan Praja SW wrote: > On the kernel-updated routers "ospfctl sh neig" shows: "kernel-updated routers" - you did update kernel and binaries in-sync, right??

Re: OSPFd on Feb 17th 2010 -current Incompatibilities

2010-02-17 Thread Claudio Jeker
On Thu, Feb 18, 2010 at 03:03:34AM +0700, Insan Praja SW wrote: > Hi Misc@, > Recently I updated one of my routers into current. We runs OSPFd as > an IGP for our network. The update went success, but OSPFd wont get > synchronized. On the kernel-updated routers "ospfctl sh neig" shows: > > $ ospfc

xterm + tmux 256 colors

2010-02-17 Thread frantisek holop
hi there, i am trying to make tmux use 256 colors. i have found this: http://www.mail-archive.com/debian-bugs-d...@lists.debian.org/msg707066.html i have done step 2: $ xterm $ echo TERM $ TERM=xterm-256color $ tput colors 256 but it is not clear to me how can i do step 1. what is the proper w

Re: xterm + tmux 256 colors

2010-02-17 Thread James Records
Here is how I handle this, *make sure you have vim and colorls packages installed, then for your .vimrc do something like this:* syntax on set nocompatible set autoindent set smartindent set tabstop=4 set shiftwidth=4 set showmatch set vb t_vb= set ruler set incsearch set number *put this in you

Re: xterm + tmux 256 colors

2010-02-17 Thread Ted Unangst
On Wed, Feb 17, 2010 at 5:38 PM, frantisek holop wrote: > i am trying to make tmux use 256 colors. > > i have found this: > http://www.mail-archive.com/debian-bugs-d...@lists.debian.org/msg707066.html > > i have done step 2: > > $ xterm > $ echo TERM > $ TERM=xterm-256color It's probably worth no

Re: OSPFd on Feb 17th 2010 -current Incompatibilities

2010-02-17 Thread Stuart Henderson
On 2010-02-17, Stuart Henderson wrote: > On 2010-02-17, Insan Praja SW wrote: >> On the kernel-updated routers "ospfctl sh neig" shows: > > "kernel-updated routers" - you did update kernel and binaries in-sync, right?? > > > spf-delay msec 1000 > spf-holdtime msec 5000 ...hmm, yes you did. Anyt

Re: xterm + tmux 256 colors

2010-02-17 Thread Nicholas Marriott
The two common ways are to set default-terminal and not touch TERM elsewhere, or to do something like [ -n "$TMUX" ] && export TERM=screen-256color. in .profile or whatnot. You can do it whichever way you like. On Wed, Feb 17, 2010 at 11:38:22PM +0100, frantisek holop wrote: > hi there

Re: xterm + tmux 256 colors

2010-02-17 Thread joshua stein
> It's probably worth noting at this point that the xterm shipped with > OpenBSD doesn't support 256 colors. it is supported in snapshots after january 13th; it was enabled following nicm's ncurses update: http://www.openbsd.org/cgi-bin/cvsweb/xenocara/app/xterm/xtermcfg.h

Re: xterm + tmux 256 colors

2010-02-17 Thread frantisek holop
hmm, on Wed, Feb 17, 2010 at 05:58:12PM -0500, Ted Unangst said that > On Wed, Feb 17, 2010 at 5:38 PM, frantisek holop wrote: > > i am trying to make tmux use 256 colors. > > > > i have found this: > > http://www.mail-archive.com/debian-bugs-d...@lists.debian.org/msg707066.html > > > > i have don

Re: xterm + tmux 256 colors

2010-02-17 Thread Ted Unangst
On Wed, Feb 17, 2010 at 5:58 PM, Ted Unangst wrote: > It's probably worth noting at this point that the xterm shipped with > OpenBSD doesn't support 256 colors. Oh never mind, I missed a commit. If you're running current, you do get 256 colors.

Re: xterm + tmux 256 colors

2010-02-17 Thread Ryan Flannery
On Wed, Feb 17, 2010 at 5:58 PM, Ted Unangst wrote: > On Wed, Feb 17, 2010 at 5:38 PM, frantisek holop wrote: >> i am trying to make tmux use 256 colors. >> >> i have found this: >> http://www.mail-archive.com/debian-bugs-d...@lists.debian.org/msg707066.html >> >> i have done step 2: >> >> $ xter

Re: xterm + tmux 256 colors

2010-02-17 Thread Ryan Flannery
On Wed, Feb 17, 2010 at 6:17 PM, Ted Unangst wrote: > Nice catch, I missed that. > I know getting 256 color support working requires touching a few things. I don't know if that commit says "it now works" or simply "it's one step closer" So ya, I was really asking. :)

Re: xterm + tmux 256 colors

2010-02-17 Thread J.C. Roberts
On Wed, 17 Feb 2010 23:38:22 +0100 frantisek holop wrote: > i am trying to make tmux use 256 colors. > > i have found this: > http://www.mail-archive.com/debian-bugs-d...@lists.debian.org/msg707066.html > > i have done step 2: > > $ xterm > $ echo TERM > $ TERM=xterm-256color > $ tput colors >

Installer caching selections across different installations... how?

2010-02-17 Thread Matt Van Mater
I have been installing OpenBSD 4.6 inside a VMWare ESXi 4.0 virtual machine and ran into a strange behavior I can't explain... it seems to cache my installation options between totally unrelated virtual machines. The process goes like this: I create a new 'Typical' virtual machine, select 'Other'

Re: Installer caching selections across different installations... how?

2010-02-17 Thread joshua stein
> The install process goes as expected and the virtual machine is running > happily along... The thing is, when I create a second brand new virtual > machine using the process described above and get to the 'select install > media' step, it already has my local ftp server's name populated! As far

Re: Installer caching selections across different installations... how?

2010-02-17 Thread Matt Van Mater
On Wed, Feb 17, 2010 at 7:45 PM, joshua stein wrote: > at the end of the installation, the mirror you chose (in your case, > your local ftp server) is sent back to ftp.openbsd.org so that it > will be given to you again the next time, assuming your ip is the > same. > ... because your vmware ins

Re: Jacek Books

2010-02-17 Thread ropers
On 16 February 2010 12:26, SJP Lists wrote: > In fact, I have worked in landmark copyright cases for one of the > Worlds most successful IP lawyers (and continue to do so). "IP lawyers", eh? Exactly what is this "IP" you speak of? (SCNR.) regards, --ropers

Re: xterm + tmux 256 colors

2010-02-17 Thread J.C. Roberts
On Wed, 17 Feb 2010 15:48:42 -0800 "J.C. Roberts" wrote: > On Wed, 17 Feb 2010 23:38:22 +0100 frantisek holop > wrote: > > > i am trying to make tmux use 256 colors. > > > > i have found this: > > http://www.mail-archive.com/debian-bugs-d...@lists.debian.org/msg707066.html > > > > i have done

OT: opinions on IDS / IPS solutions

2010-02-17 Thread Jason Beaudoin
Hi There, As I often have greater respect for a much larger portion of this list than the rest of the internet, I am curious what is thought about current IDS/IPS hardware from vendors like Trustwave, Checkpoint, Alert Logic, mod_security, even snort.. etc, and in particular, the sensibility and e

Re: network performance problems

2010-02-17 Thread David Gwynne
a lot of the features you list below are only useful or usable at the switching layer, and therefore not really fair when compared to what openbsd can do. eg, the dhcp snooping is done on the switches at the client access layer to prevent rouge dhcp servers on an l2 network. unless you put openbsd

Re: OT: opinions on IDS / IPS solutions

2010-02-17 Thread Johan Beisser
On Wed, Feb 17, 2010 at 7:59 PM, Jason Beaudoin wrote: > From a compliance perspective, I don't have much choice. From the > costs, infrastructure, and administrative perspectives, I am currently > evaluating whether or not I should be leaning towards and IDS or IPS > solution, and of course which

Re: OT: opinions on IDS / IPS solutions

2010-02-17 Thread mehma sarja
Don't bypass Snort because PFSense package makes it so easy to install and configure. A a one-click install of Snort and the only thing left to do was register and select what you want it to do. Mehma === On Wed, Feb 17, 2010 at 8:28 PM, Johan Beisser wrote: > On Wed, Feb 17, 2010 at 7:59 PM, J

Re: Jacek Books

2010-02-17 Thread Bill Dunshie
By posting regarding this situation, possibly it will help others from being swindled. I paid for the "Firewall Book", and as stated, did receive a few PDF's, but that's it, no paper copy. Going through PayPal is is waste of time, as their time limits have been exceeded many times over (my purc

write uhid0 error EIO

2010-02-17 Thread Kemtole Ernesto
hi all, i'm new here :) i have a I/O card in the usb port, can read but can't write uhid0 uname -a: OpenBSD myhost.my.domain 4.6 GENERIC.MP#81 amd64 dmesg: uhidev0 at uhub5 port 2 configuration 1 interface 0 "Anchor Chips product 0x7453" rev 2.00/0.00 addr 2 uhidev0: iclass 3/0 uhid0 at uhidev0

Re: Jacek Books

2010-02-17 Thread Scott Learmonth
The real point in all of this is that, right or wrong, it doesn't belong on this mailing list. On Wed, Feb 17, 2010 at 10:51:16PM -0600, Bill Dunshie wrote: > By posting regarding this situation, possibly it will help others > from being swindled. I paid for the "Firewall Book", and as stated, >

Re: Apache Firefox and Ogg Theora (Byte-range requests)

2010-02-17 Thread Pierre-Yves Ritschard
> This appears to be due to the format of the string being passed to > strtonum(). ap_strtol() was tolerant of it. It's being passed the > string from the Range: header. > > For example, the following valid request (taken directly from sniffing a > wget session). > > GET /testfile HTTP/1.0 > Ra

Re: Strange problem | routing issue

2010-02-17 Thread Shailesh Tyagi
It seems there is a bug in routing with current 4.7 amd64 (build 10 Feb.). I tried i386 and it worked with same configuration and without any issues. Just to make sure I even tried reinstalling the amd64 once again thinking I might have made some mistakes the first time but same results. Following