Re: keep state for http connections

2007-01-25 Thread Brian Candler
On Wed, Jan 24, 2007 at 02:39:42PM -0600, Travers Buda wrote: > Last time I checked though, clients only talk with the web server on > port 80. So, the only reason you would want to keep state would be if > you have a ruleset like block out all (which is generally only usefull > if you don't trust

Re: Performance Statistics: -current

2007-01-25 Thread Brian Candler
ers put lowest priority boxes on the bottom of the cart. Clearly it's impractical to unload starting from the middle or the bottom of the cart. I'm afraid I don't understand the point though... Regards, Brian.

Re: Inetd rejecting connection from privileged port

2007-01-26 Thread Brian Candler
example being "echo" :-) The assumption here of course is that the only services worth attacking are on ports <1024 or 2049. This still doesn't prevent your box being used as a DoS repeater, but that's a pretty fundamental limitation of simple UDP request-response exchanges. Regards, Brian.

Re: Friendly registrar

2007-01-26 Thread Brian Keefer
On Jan 19, 2007, at 10:58 AM, Tonnerre LOMBARD wrote: We chose Gandi for controversial web sites (like ffii.org) because they tend not to shut down the delegation whenever they receive a preliminary injunction. For any kind of Open Source movement, this might become crucial in the future...

Re: Is Theo still hiking ????

2007-01-28 Thread Brian Candler
As a result, I don't see much commercial reason to roll it out, and certainly no commercial reason to switch off the existing IPv4 Internet. Arguments here: http://pobox.com/~b.candler/doc/misc/ipv6.txt Regards, Brian.

Re: Slow write performance on Compaq Smart Array 64xx (ciss0)

2007-01-28 Thread Brian Candler
formace, try setting up your six-disk array as three separate mirrored pairs, or as a single RAID-01 (strip/mirror) and see what you get. Of course your available storage size will be reduced to 3/5ths of what it was. Regards, Brian.

Re: Slow write performance on Compaq Smart Array 64xx (ciss0)

2007-01-28 Thread Brian Candler
> 262144 bytes transferred in 29.696 secs (88274982 bytes/sec) RAID 0 is just striping, so half the data gets written to one disk while half gets written to the other, so that would be expected to have better performance than a single disk. Regards, Brian.

Re: Is Theo still hiking ????

2007-01-29 Thread Brian Candler
allocations than /48, making them second-class to customers of "real" ISPs. Some of the initial rigid design of IPv6, totally divorced from commercial reality, has thankfully now gone: remember the 13-bit "top level aggregator" and 13-bit "second level aggregator"? But from a micro-ISP's point of view, it lives on in the /32 (provider) to /48 (end site) divide. Not that it matters a jot if IPv6 never rolls out. I'll get off my soap box now. Regards, Brian.

Re: New routing ideas for OpenBSD ;) (Was: Is Theo still hiking ????)

2007-01-30 Thread Brian Candler
ient? The former leaves the clients vulnerable to all sorts of attacks from malicious servers. The latter allows the firewall to validate data. As a side effect it can also give an audit log of activity at layer 7, which many companies require for compliance reasons anyway. Regards, Brian.

Re: spamd unnecessarily abrasive?

2007-02-20 Thread Brian Keefer
arounds. In the case of a greylisting type of solution, it seems that identification would be especially devastating since the work-around is so trivial. Unless my understanding is very wrong, the whole effectiveness of the solution depends on the spammers not realizing the differe

Re: spamd unnecessarily abrasive?

2007-02-20 Thread Brian Keefer
;t have to pay for them (or very little for a bot herd compared to "bulletproof hosting"), but it could make them a little more efficient. The history of fighting spam has tended to show that if any form of combating spam becomes too effective (and wide-spread), spammers wi

Re: spamd unnecessarily abrasive?

2007-02-20 Thread Brian Keefer
On Feb 20, 2007, at 12:36 PM, Darren Spruell wrote: On 2/20/07, Brian Keefer <[EMAIL PROTECTED]> wrote: In the case of a greylisting type of solution, it seems that identification would be especially devastating since the work-around is so trivial. Unless my understanding is very wron

Re: spamd unnecessarily abrasive?

2007-02-20 Thread Brian Keefer
On Feb 20, 2007, at 1:51 PM, [EMAIL PROTECTED] wrote: On Tue, 20 Feb 2007 12:57:54 -0800, "Brian Keefer" <[EMAIL PROTECTED]> said: Now they've evolved to using botnets and the vast majority of spam comes from such systems, so the bandwidth costs are gone and the hosting

Max amount of RAM

2007-03-01 Thread Brian Martinez
Hello folks, I was curious about the maximum amount of RAM an OpenBSD system will recognize. Is there any way at all to get it to recognize more? Kernel recompile? Sysctl options? I've browsed through the archives here a bit and have found a few answers relating to my question, but there

Re: Max amount of RAM (inc. dmesg)

2007-03-01 Thread Brian Martinez
John, others, Upon closer look, it only shows roughly 3.5GB of RAM, see below: + paste + OpenBSD 4.0 (GENERIC.MP) #967: Sat Sep 16 20:38:15 MDT 2006 [EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 3757342720 (3669280K) avail mem = 3223769088 (3148212K) us

Re: taking over a LAN I didn't set up

2007-03-06 Thread Brian Candler
artup. These are likely called something like /etc/hostname.em0 (if your network card is called 'em0') /etc/pf.conf /etc/rc.conf and/or /etc/rc.conf.local /etc/named.conf Regards, Brian.

waitpid() thread race

2007-04-07 Thread Brian Candler
n the wait manpage for OpenBSD (4.0) which works this way. Any other suggestions as to the best way to avoid this problem? I'm sure this must be old ground :-) Thanks, Brian.

Re: waitpid() thread race

2007-04-09 Thread Brian Candler
icult for me to understand the subtleties involved in asynchronous signal-driven programming. And that's with a copy of the Stevens book beside me :-) Many thanks for giving me more food for thought. Regards, Brian.

Re: waitpid() thread race

2007-04-09 Thread Brian Candler
On Mon, Apr 09, 2007 at 01:40:06PM -0700, Darrin Chandler wrote: > On Mon, Apr 09, 2007 at 09:10:39PM +0100, Brian Candler wrote: > > I'm not saying that anything is actually wrong with the code you've > > provided; rather, that it's difficult for me to understand

Re: waitpid() thread race

2007-04-10 Thread Brian Candler
pid and removes that entry. This eliminates the need for dealing with signals. The extra overhead of a linear search is small, given that children don't die that often. Cheers, Brian.

Re: [OFF-TOPIC] MRTG and disk / CPU monitoring

2007-06-17 Thread Brian Candler
It uses a simple plain-text protocol which you can drive easily using telnet. It's also trivial to extend to monitor any other parameters of interest. Regards, Brian.

Re: i386 performance degradation since recent snapshots

2007-06-28 Thread Brian Candler
tive answer in a reasonably short period of time, and "nslookup xyz" gives you an NXDOMAIN answer also in a reasonably short period of time) Regards, Brian.

Re: openbsd 4.0 installed, need to add network interface after install

2007-06-29 Thread Brian Candler
open(0x3c002b8b,0x2,0) 4341 lspciNAMI "/dev/pci" 4341 lspciRET open -1 errno 1 Operation not permitted ... Regards, Brian.

Re: openbsd 4.0 installed, need to add network interface after install

2007-06-29 Thread Brian Candler
On Fri, Jun 29, 2007 at 03:16:36PM +0200, St?phane Chausson wrote: > Brian Candler wrote, On 29/06/07 14:43: > >Also, under Linux, "lspci -v" gives useful info about the PCI cards you > >have > >installed. In theory, you should be able to do this with O

Re: openbsd 4.0 installed, need to add network interface after install

2007-06-29 Thread Brian Candler
which definitely works in another unit (say something which appears as fxp0 in another box), so much the better. Given that your on-board LAN isn't working either, maybe the motherboard has a serious fault. But you might not be able to return it until you can prove that *Windows* can't find any network cards either :-) Regards, Brian.

Re: Setting up a virtual hosting machine w. SSH/SFTP accounts - pitfalls/experiences?

2007-06-30 Thread Brian Candler
t solution ultimately is to go with jails, or full VMs. In that case, when user 1 asks you to upgrade mod_fribble from version 0.99a to 1.73b, you can do this confidently (or even let them do it themselves) without any risk of accidentally breaking other users. Disk space is very cheap these days, although RAM and other virtualisation overhead is less so. Regards, Brian.

Re: Setting up a virtual hosting machine w. SSH/SFTP accounts - pitfalls/experiences?

2007-06-30 Thread Brian Candler
ad/write access on their own files of course, and grant read/write access to the webserver's gid, but without being members of the webserver group themselves (otherwise they'd be able to read/write all the other users' files). You may be able to achieve this by suitable checks on the top-level directory, and making files world-writable inside (ergh). Otherwise, welcome to sticky-bit city :-) Regards, Brian.

Re: Setting up a virtual hosting machine w. SSH/SFTP accounts - pitfalls/experiences?

2007-07-03 Thread Brian Candler
> > >You don't want user 1's web applications to be able to access data in user > > >2's web application storage space. > > I will only be using mod_php. In the past, without the user shell > > accounts, this has worked rather well for me in combination with the > > "open_base_dir" directive in

Re: Live Earth - Power management

2007-07-09 Thread Brian Candler
e the Soekris, you could look at mini-ITX motherboards from the likes of Epia. My home desktop system is an Epia M-1 in a fanless case. I've not measured its power consumption, but I think it's pretty low. Regards, Brian.

Re: print filter?

2007-07-15 Thread Brian Candler
cence(*) is extremely unclear. However, it is published on the Internet for anyone to download. Do you believe the author would take you to court for not sending a postcard? Pragmatically, if the software does want you want, I suggest you could take that (minimal) risk. Or, just send the guy a post

Re: Live Earth - Power management

2007-07-18 Thread Brian Candler
On Mon, Jul 09, 2007 at 11:02:46PM +0100, Brian Candler wrote: > My home desktop system is an > Epia M-1 in a fanless case. I've not measured its power consumption, but > I think it's pretty low. I just got an Electrisave. Its resolution is only 10W, but according to that

About encryption

2007-07-24 Thread Brian Hansen
task and using what algorithms? Thanks. Brian

Re: About encryption

2007-07-24 Thread Brian Hansen
Brian Hansen wrote: >> Hi >> >> I have no prior experience in encryption but wants to figure out how to - as >> safe as possible - encrypt some files on my computer. I have been looking at >> both GNUPG and Mcrypt. I am not interested in the KEY part of GNUP

Re: how to confirm i am gaining advantage from floating state-policy

2007-07-31 Thread Brian Candler
presume it's just to allow for networks which load-share across multiple paths. However, this is just my understanding of things from a user point of view, which may very well be flawed. Someone with a knowledge of pf internals could give a more authoritative answer. Regards, Brian.

Re: OT: mail retrieval software

2007-08-01 Thread Brian Candler
On Tue, Jul 31, 2007 at 09:59:23PM +0100, poncenby wrote: > Grateful if anyone could recommend a mail retrieval program which does > not require a local SMTP service like fetchmail does. >From 'man fetchmail': -m | --mda (Keyword: mda) You can force mail to be pass

Re: Yaifo on a Server with fBSD preinstalled...

2007-08-06 Thread Brian Candler
d be great! Well, you could try remounting the filesystem as read-only. Also, I seem to remember that geom had a sysctl for allowing dangerous operations such as writing to the MBR while partitions were in use. Hmm, a quick google suggests: sysctl kern.geom.debug = 16 This is known as the "foot-shooting" flag :-) See http://www.freebsd.org/cgi/man.cgi?query=geom&sektion=4&apropos=0&manpath=FreeBSD+6.2-RELEASE HTH, Brian.

Re: [OT] cisco switch, router and firewall suggestions

2007-08-12 Thread Brian Candler
gigabit). The big advantage of this is that it is silent and fanless, which you'll appreciate if you've ever had a Catalyst on your desk. Regards, Brian.

Re: [OT] cisco switch, router and firewall suggestions

2007-08-12 Thread Brian Candler
On Sun, Aug 12, 2007 at 09:39:04AM +0100, Brian Candler wrote: > > Could anyone recommend anything that would be great for leaning > > purposes Sorry, my mistake - I thought you said for *learning* purposes. For *leaning* purposes, an empty 72xx chassis is probably heavy enough :-)

Re: OT: reliable 4-port switches

2007-08-15 Thread Brian Candler
he Broadcom > chipset...) Equivalent Broadcom hardware, but even cheaper and smaller: Buffalo WHR-G54S. Under 30 UKP. Both these devices have a built in 6-port hardware switch (5 ports brought out as RJ45, one port connected to the CPU internally) and even has VLAN capability. The "no-nonsense replacement Linux" referred to is probably OpenWrt: http://www.openwrt.org/ Regards, Brian.

Re: permission for /var/mail

2007-08-22 Thread Brian Candler
and haven't looked back. Get your MTA to deliver to ~/Maildir/ and the problem goes away. It solves a lot of problems to do with locking too. Regards, Brian.

Re: nat ipv6 -> ipv4 using pf

2007-08-27 Thread Brian Candler
oxy would be better, in that it could add an X-Forwarded-For: header which contained the original source IPv6 address. However, I think you'd find life far, far easier just by recompiling Apache to work with IPv6 natively. Regards, Brian.

Re: nat ipv6 -> ipv4 using pf

2007-08-27 Thread Brian Candler
On Mon, Aug 27, 2007 at 04:36:06PM +0200, alwin wrote: > the faithd daemon als looks quit cool, although it maps the other way > around, it will be usefull when you have an ipv6 only network. "When faithd receives TCPv6 traffic, faithd will relay the TCPv6 traffic to TCPv4." Hmm, sounds

ldd will not check shared libraries for dependancies

2007-08-29 Thread Brian Bentley
es on OpenBSD? Thanks in advance, Brian # ldd /usr/bin/more /usr/bin/more: StartEnd Type Open Ref GrpRef Name exe 10 0 /usr/bin/more 00745000 20758000 rlib 01 0 /usr/lib/libcurses.so.10.0 00951000 20985000 rlib

Re: OBSD's perspective on SELinux

2007-09-23 Thread Brian Candler
On Sat, Sep 22, 2007 at 08:38:17PM +0300, Ihar Hrachyshka wrote: > The problem of Linux as a whole is that it tries to resolve security > problems not by auditing code but by implementing SELinux. But what > the problem would be if OpenBSD has "SeBSD" extension? I think the nearest equivalent is "

Re: OBSD's perspective on SELinux

2007-09-24 Thread Brian Candler
of this to do, then consider an 'open server' which returns the open file descriptor. Regards, Brian.

Re: To whom can I direct email for artwork use permission pls?

2007-10-02 Thread Brian Candler
n only help your customers, and help OpenBSD gain mindshare which would otherwise go to Linux. Good luck in your venture. Regards, Brian. P.S. If you still feel uncomfortable by what others have said in this thread: then I suggest you make, sell and evangelise FreeBSD DVDs instead. Unlike OpenBSD, the FreeBSD project releases ISO images which you are free to copy.

Re: To whom can I direct email for artwork use permission pls?

2007-10-03 Thread Brian Candler
n end, as you threaten, IMO it won't be because people don't buy the CDs - it will be because it continues to cut itself off from the mainstream and simply becomes irrelevant. Regards, Brian.

Re: Brother HL-5250DN printer w/OpenBSD

2007-10-16 Thread Brian Havens
built-in lpd/lpr without the need of filters or extra stuff. I think that BR-Script3 is Brother's own PostScript Level 3 emulation (renamed to avoid paying licenses to Adobe). -Brian

OpenBSD-current (Changelog): Disable Speedstep and p4tcc setperf mechanisms on SMP systems

2006-08-22 Thread Brian Curtis
to OpenBSD? Is this something a developer should look into fixing (i.e. I'm a developer, I might want to fix it for the experience)? Brian

Re: BIND and file descriptors

2008-08-11 Thread Brian Keefer
on these issues over the last several weeks. The normal caveat applies of course: OpenBSD named is not stock BIND, but it'll point you in the right direction. Brian Keefer Sr. Systems Engineer www.Proofpoint.com "Defend email. Protect data."

OS X as an NFS client

2008-08-25 Thread Brian Curran
-P flag. I receive the error "mount_nfs: /mnt: Permission denied". I've also played around with maproot and mapall, thinking the permission denied error could be related to users, but any combination of these options and user options always yielded the same result: the -P flag made the difference. Any help would be much appreciated. -Brian

Re: Any users in Romania?

2008-08-26 Thread Brian Drain
see: http://bsdforums.unixro.net/forum/16 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Traian Ciobanu Sent: Tuesday, August 26, 2008 12:01 PM To: misc@openbsd.org Subject: Re: Any users in Romania? Hello Marc. Why are you asking? I'm not from Romania

Intel x86-64 using the amd64 platform

2008-09-04 Thread Brian Drain
under an Intel proc, will support W^X? If not it looks like I should stick with 32-bit... and if not, any plans in the future on implementing Intel's specific XD bit? Thanks, Brian Drain

Re: Intel x86-64 using the amd64 platform

2008-09-04 Thread Brian Drain
days closed hardware vendors like Intel, Creative, etc., will open up a bit and provide the necessary support to people trying to write software that will flawlessly work with various hardware, much better than the original vendor could ever dream of doing. Best regards, Brian Drain -Original

Re: Intel x86-64 using the amd64 platform

2008-09-04 Thread Brian Drain
een in, NX never stopped anything, just slightly mitigated the damage done (and even that was debatable). I would have to assume that with the stability and maturity I've come to find in OpenBSD W^X may never come in to play or ever be needed. Cheers, Brian Drain ___

Re: Intel x86-64 using the amd64 platform

2008-09-04 Thread Brian Drain
al Message- From: Ted Unangst [mailto:[EMAIL PROTECTED] Sent: Thursday, September 04, 2008 1:04 PM To: Brian Drain Cc: Theo de Raadt; misc@openbsd.org Subject: Re: Intel x86-64 using the amd64 platform On 9/4/08, Brian Drain <[EMAIL PROTECTED]> wrote: > Maybe one of these days closed ha

"suspend" command - curious of function

2008-09-19 Thread Brian Drain
7;t ^C or ^Z or anything out of it. Does it have a purpose? This is being run from an i386 desktop and I have no real need for it, just curious about it's function. Thank you. Brian

Re: Postfix race condition at boot

2008-09-22 Thread Brian Keefer
On Jul 20, 2008, at 1:48 AM, Uwe Dippel wrote: On Mon, 14 Jul 2008 12:47:40 -0500, Karl O. Pinc wrote: I've an OpenBSD box that's been running postfix for a few years, strictly as a "send-only" mta, and every night the box gets rebooted. Every couple of months postfix does not come up on reb

Re: Can one dd to /dev/rwd0c?

2008-09-23 Thread Brian Keefer
On Sep 20, 2008, at 10:02 PM, Sunnz wrote: OK I am trying to completely erase the data of a hard disk so I though I can just do `dd if=/dev/arandom of=/dev/rwd0c` as to my understanding that is the entire hard disk (slice c) of wd0 in 'raw' mode? But that dd refuse to do it. This is running of

Re: Can one dd to /dev/rwd0c?

2008-09-23 Thread Brian Keefer
On Sep 23, 2008, at 8:49 PM, Ted Unangst wrote: On Tue, Sep 23, 2008 at 11:28 PM, Brian Keefer <[EMAIL PROTECTED]> wrote: I booted a Sunfire V120 off a 4.4 snapshot CD and dd if=/dev/zero of=/rsd0 was humming along quite nicely when I left this evening. You may want to go back a

Re: Can one dd to /dev/rwd0c?

2008-09-24 Thread Brian Keefer
On Sep 23, 2008, at 11:17 PM, Brian Keefer wrote: On Sep 23, 2008, at 8:49 PM, Ted Unangst wrote: On Tue, Sep 23, 2008 at 11:28 PM, Brian Keefer <[EMAIL PROTECTED]> wrote: I booted a Sunfire V120 off a 4.4 snapshot CD and dd if=/dev/zero of=/rsd0 was humming along quite nicely when

Re: New tcp stack attack

2008-10-01 Thread Brian Keefer
On Oct 1, 2008, at 11:11 AM, Peter J. Philipp wrote: Fernando Gont wrote: If the discoverers of this bug don't make their sockstress available to OpenBSD then I have a userland TCP/IP stack for OpenBSD developers (mail me), but it's only written to be a server, but I suspect it would be ea

Packages list on website down - links included

2008-10-09 Thread Brian Drain
x27;s not ready yet. Would assume it's tied to 4.4 coming out... but just in case. Brian

Re: dmesg IBM x3650 OpenBSD 4.3

2008-10-10 Thread Brian Drain
2008/10/10 Theo de Raadt <[EMAIL PROTECTED]>: >> Wow. Good luck. Can't you see we've been down that road before with >> those bastards? But really. Good luck. You really are too >> optimistic, but sure, learn the reality for yourself. >I'm sure calling vendors 'bastards' on a public mailing

4.4 in California, USA

2008-10-11 Thread Brian Keefer
The t-shirt looks great. Thanks to everyone involved for another great release! -- bk

Recommend hardware for video surveillance system?

2008-10-31 Thread Brian Keefer
I'm finally getting around to starting my project to build a home- monitoring system. I'm going to need multiple capture devices inside the home, and at least one outside as well. I'm looking for recommendations on a video capture card, and wireless video cameras. I don't mind spending >

Re: Recommend hardware for video surveillance system?

2008-11-01 Thread Brian Keefer
On Nov 1, 2008, at 10:21 PM, Duncan Patton a Campbell wrote: On Fri, 31 Oct 2008 20:28:34 -0700 Brian Keefer <[EMAIL PROTECTED]> wrote: I'm finally getting around to starting my project to build a home- monitoring system. I'm going to need multiple capture devices inside

Re: Recommend hardware for video surveillance system?

2008-11-02 Thread Brian Keefer
On Nov 2, 2008, at 6:52 AM, Stuart Henderson wrote: On 2008-11-02, Brian Keefer <[EMAIL PROTECTED]> wrote: On Nov 1, 2008, at 10:21 PM, Duncan Patton a Campbell wrote: Unless you have a good reason not to, use "WebCams" that implement an http(s) server on camera. The u

Re: dhcpd problem on OpenBSD 4.4 with release / renew

2008-11-11 Thread Brian Keefer
On Nov 11, 2008, at 2:01 PM, Administrator wrote: Brian Keefer wrote: On Nov 11, 2008, at 12:42 PM, Administrator wrote: Nope, didn't help. There must be some other mistery. Now it stops at DHCPOFFER part. DHCPDISCOVER from 00:50:18:48:cb:3d via vlan51 DHCPOFFER on 192.168.51.3 to

Re: Missing security announcements

2008-11-13 Thread Brian Drain
ng it once a day and posting any relevant updates as they appear on errata. Cheers, Brian >From http://www.openbsd.org/mail.html "security-announce Security announcements. This low volume list receives OpenBSD security advisories and pointers to security patches as they become available."

Re: sunfire v100 hardware

2008-11-24 Thread Brian Keefer
On Nov 24, 2008, at 9:32 AM, K H A I wrote: Hello, I receive sunfire V100 hardware wifh 512K RAM , IDE cdrom without hard disk. Does any one know it support regular ide hard drive? what bsd architecture support it? is it sparc 64 or sun ? if any one has experience helps to make it work is

Re: pf log question

2008-06-24 Thread Brian Keefer
Make sure you're setting a state. I had the same problem with gmail, and then I realized that I had accidentally preempted the rule which was setting state on my DMZ interface. Once I fixed that I didn't have any more problems. -- chort On Jun 24, 2008, at 10:56 AM, Monah Baki wrote:

Re: PF and Binat

2008-07-14 Thread Brian Keefer
On Jul 14, 2008, at 10:28 PM, Parvinder Bhasin wrote: On Jul 14, 2008, at 10:00 PM, Ryan McBride wrote: On Mon, Jul 14, 2008 at 09:48:22PM -0700, Parvinder Bhasin wrote: what gives? Oh, I missed this before: pass in on $ext_if proto tcp from any to 75.36.44.22 port 80 pass in on $ext_if

Re: webbased authpf ?

2006-09-18 Thread Brian Shackelford
hide everything behind a pretty GUI and do the same things through a custom written app. Please feel free to tear my every simple plan to shredsI can take it. Thanks, Brian Shackelford -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lars Hansson

Re: Problem with Intel PRO/1000GT (82541GI) adaptors

2006-11-14 Thread Brian Keefer
om this morning's snapshot and the issue hasn't resurfaced yet... Brian Keefer www.Tumbleweed.com "The Experts in Secure Internet Communication"

Re: Problem with Intel PRO/1000GT (82541GI) adaptors

2006-11-15 Thread Brian Keefer
On Nov 15, 2006, at 9:25 AM, Kian Mohageri wrote: > > > On 11/14/06, Brian Keefer <[EMAIL PROTECTED]> wrote: > > FWIW I was having very similar problems with em(4) in OpenBSD 4.0- > release under VMware (amd64 SMP). It would cease to recognize ARP > replies and just

ipsecctl setting up multiple SAs

2006-11-24 Thread Brian Candler
tcpdump -nxr /var/log/isakmpd.pcap' shows that only one quick mode exchange took place; crypto debug output on the Cisco shows the same. Looking at this, it seems that the last entry in /etc/ipsec.conf has taken precedence over the others. Is there a way to achieve what I'm trying to

Re: ipsecctl setting up multiple SAs

2006-11-24 Thread Brian Candler
On Fri, Nov 24, 2006 at 09:45:45AM +, Brian Candler wrote: > Looking at this, it seems that the last entry in /etc/ipsec.conf has taken > precedence over the others. > > Is there a way to achieve what I'm trying to do, either using ipsecctl, or > manually configuring is

Re: ipsecctl setting up multiple SAs

2006-11-24 Thread Brian Candler
On Fri, Nov 24, 2006 at 10:22:26AM +, Brian Candler wrote: > To answer my own question: inspired by the output of ipsecctl, I wrote a > perl program (attached) to generate a suitable isakmpd.conf (also attached), > and this appears to work just fine. And now I seem to have hit som

Re: ipsecctl setting up multiple SAs

2006-11-24 Thread Brian Candler
[IPsec-10.1.1.6-10.1.1.1-17] or [IPsec-10.1.1.6:0-10.1.1.1:0-17] # protocol specified but ports not specified [IPsec-10.1.1.6-10.1.1.1] or [IPsec-10.1.1.6:0-10.1.1.1:0-0] # no protocol specified Regards, Brian.

Mail to 'misc' being forwarded to 'ports'?

2006-11-24 Thread Brian Candler
I'm getting the following when posting to 'misc'. Is this known and/or intentional? I'm not bcc'ing to 'ports' - honest! Regards, Brian. Return-path: <[EMAIL PROTECTED]> Envelope-to: [EMAIL PROTECTED] Delivery-date: Fri, 24 Nov 2006 14:50:

Re: Mail to 'misc' being forwarded to 'ports'?

2006-11-24 Thread Brian Candler
On Fri, Nov 24, 2006 at 08:20:02AM -0700, Darrin Chandler wrote: > On Fri, Nov 24, 2006 at 02:52:23PM +0000, Brian Candler wrote: > > I'm getting the following when posting to 'misc'. Is this known and/or > > intentional? > > > > I'm not bcc'in

New Article

2006-11-24 Thread Brian O'Sullivan
Has anyone seen http://uncyclopedia.org/wiki/OpenBSDhttp://uncyclopedia.org/wiki/OpenBSD ? Quite informative. _ The new Windows Live Toolbar helps you guard against viruses http://toolbar.live.com/?mkt=en-gb

Re: Mail to 'misc' being forwarded to 'ports'?

2006-11-24 Thread Brian Candler
ne.pobox.com (Postfix) with ESMTP id 92A15964BF > > for ; Fri, 24 Nov 2006 07:42:33 -0500 (EST) > >Received: from mappit.linnet.org (212-74-113-67.static.dsl.as9105.com > >[212.74.113.67]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No > >client certificate requ

Re: ipsecctl setting up multiple SAs

2006-11-24 Thread Brian Candler
t sure how to probe deeper to get a handle on what's actually happening though. Perhaps isakmpd -L logging might shed some light, although I don't fancy decoding QM exchanges by hand :-( Regards, Brian.

Re: ipsecctl setting up multiple SAs

2006-11-25 Thread Brian Candler
rame, 0 overrun, 0 ignored 0 watchdog, 0 multicast, 0 pause input 0 input packets with dribble condition detected 1015 packets output, 221409 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0 pause output 0 output buffer failures, 0 output buffers swapped out Regards, Brian.

Re: ipsecctl setting up multiple SAs

2006-11-26 Thread Brian Candler
On Sat, Nov 25, 2006 at 02:29:46PM +, Brian Candler wrote: > So now I need to establish whether those original 1,000 sent packets were > actually arriving at the Cisco or not, which perhaps careful use of > interface counters might reveal, or else I need to dig out a switch wi

Boot above cylinder 1024

2006-11-28 Thread Brian Candler
could use the FreeBSD boot loader (first and/or second stage) to boot OpenBSD? And if so, has anyone got a recipe for this that they would care to share? Thanks, Brian.

Re: Boot above cylinder 1024

2006-11-29 Thread Brian Candler
within the BIOS supported part of the hard disk -- this would typically be 504MB, 2GB, 8GB or 128GB, depending upon the age of the machine and its BIOS." which implies it should work above 8GB with a modern BIOS. Regards, Brian. (*) Such as: http://geodsoft.com/howto/dualboot/openbsd.htm http://www.packetwatch.net/documents/guides/misc/multi-boot.php

dlopen() functions calling symbols in parent

2006-11-29 Thread Brian Candler
ecause without this it also fails. However I don't know what the OpenBSD equivalent is. Could someone provide me with the necessary clue please? Thanks, Brian.

Re: dlopen() functions calling symbols in parent

2006-11-29 Thread Brian Candler
/callbacks Thank you - although that would involve rather more radical surgery on rp-l2tp than I was hoping to make. Dale Rahn's option of -Wl,-E does the trick though - thank you Dale. Now I just need to work out if and how OpenBSD's PPPDISC differs from Linux's N_HDLC :-) Regards, Brian.

Re: Mac Mini (intel) status

2006-12-01 Thread Brian Keefer
8. Of course you can only upgrade if you install a minimal OS X... :-/ I don't have a mini (or any reasonably current Apple hardware) but the issue you mentioned reminded me of this post by Brian Keefer: http://marc.theaimsgroup.com/?l=openbsd-sparc&m=116483175532387&w=2 It may

Re: Boot above cylinder 1024

2006-12-04 Thread Brian Candler
DOS > > partitions MUST EXIST ENTIRELY BELOW cylinder 1024, or you will either not > > be able to boot OpenBSD, not be able to boot DOS, or you may experience > > data loss or filesystem corruption." > > That's an oops. > That's a big oops. > That gives me something to do this evening... > > Nick. Thanks for picking this up. Regards, Brian.

rp-l2tp, ppp and pty problem

2006-12-06 Thread Brian Candler
#x27;s happening. I've also tried to replicate this problem in a small program using forkpty, but not been able to. Maybe it's related specifically to the ppp(4) driver sending data over a pty. Anyway, if there's anyone on this list who know is intimate with the internals of pty(4) and ppp(4), knows enough about rp-l2tp to set up a test rig, and would like to see the OpenBSD port working, I'd be very grateful for your assistance. Many thanks, Brian Candler.

Re: rp-l2tp, ppp and pty problem

2006-12-06 Thread Brian Candler
On Wed, Dec 06, 2006 at 11:35:00AM +, Brian Candler wrote: > Anyway, if there's anyone on this list who know is intimate with the > internals of pty(4) and ppp(4), knows enough about rp-l2tp to set up a test > rig, and would like to see the OpenBSD port working, I'd be very

Userland ppp over UDP

2006-12-06 Thread Brian Candler
4:43PM0:00.02 ppp -direct ppp-in root 23090 0.0 0.3 736 1592 p2 S+ 4:43PM0:00.01 ppp So, something's not right here. Have I just made a simple error, or is there something other than inetd required to accept incoming PPP-over-UDP connections? Regards, Brian.

uhci, usb keyboard and mouse

2006-12-06 Thread Scott, Brian
rs to the front would also be a problem. These conenctors are normally kept free for adhoc connection of devices by students, so a manual procedure would be needed. Are there ways for me to influence the behaviour of uchi (sysctl

Sun Netra T1 105

2005-06-02 Thread Brian McKerr
and if so do you reckon it would be able to boot from a compact flash ? Cheers in advance. Brian.

pf and "rdr pass" nat

2005-06-08 Thread Brian McKerr
ord) altq ? Cheers, Brian.

3.7 mac install problem

2005-06-12 Thread brian pink
ry and copy the ofwboot file over, I get this message: Copying 'ofwboot' to the boot partition (wd0i)...mount_msdos: /dev/wd0i on /mnt2: Device not configured FAILED. I am then, unable to boot from wd0. I've Googled, read the INSTALL.macppc doc, and still have been unable to get this to work. All help is much appreciated, - brian

<    1   2   3   4   5   6   7   8   9   >