Re: 'Nother broken package - git-1.5.4.2

2008-07-16 Thread Damien Miller
On Wed, 16 Jul 2008, L. V. Lammert wrote: > On Thu, 17 Jul 2008, Marc Espie wrote: > > > On Wed, Jul 16, 2008 at 09:30:02AM -0500, L. V. Lammert wrote: > > > If a command line tool like git has a 'GUI Helper', then that package is > > > broken (which, I believe, is the case in this situation). >

Re: Postfix race condition at boot

2008-07-20 Thread Damien Miller
On Sun, 20 Jul 2008, Uwe Dippel wrote: > On Mon, 14 Jul 2008 12:47:40 -0500, Karl O. Pinc wrote: > > > I've an OpenBSD box that's been running postfix for a few > > years, strictly as a "send-only" mta, and every night the > > box gets rebooted. Every couple of months postfix does > > not come u

Re: svnd questions (encrypting all of a partition or disk)

2008-07-20 Thread Damien Miller
On Sun, 20 Jul 2008, Aaron Stellman wrote: > Now, on boot, the softraid0 doesn't attach itself to sd0n, perhaps not > implemented yet? I was wondering if there were any plans to create > support for crypto devices so that they could be mounted on boot as > specified in fstab(5). Yes, but someone

Re: failed make on openssh 5.1

2008-07-22 Thread Damien Miller
On Tue, 22 Jul 2008, Joel Dinel wrote: > > To answer my own question, no sooner had I hit 'send' than I noticed the > > patch number indicated 4.3. I have downloaded OpenSSH 5.0, the > > appropriate 4.1 -> 5.0 patch and all is well. > > Well I am getting the exact same compilation error as you,

Re: failed make on openssh 5.1

2008-07-23 Thread Damien Miller
.patch) = d45b51c446f08e2f1356ef77c4d004814d27c572 Sorry for the confusion. -d On Wed, 23 Jul 2008, Renaud Allard wrote: > Damien Miller wrote: > > On Tue, 22 Jul 2008, Joel Dinel wrote: > > > > > > To answer my own question, no sooner had I hit 'send' th

Re: failed make on openssh 5.1

2008-07-23 Thread Damien Miller
On Wed, 23 Jul 2008, Joel Dinel wrote: > On Wed, Jul 23, 2008 at 9:42 AM, Damien Miller <[EMAIL PROTECTED]> wrote: > > I have just updated the patch, please try again once it has hit the > > ftp server: > > > > -rw-r--r-- 1 djm djm 6411 Jul 23 23:31 openbsd4

Re: bad tcp cksum and odd delay to close a connection on OpenBSD?

2008-07-25 Thread Damien Miller
On Sat, 26 Jul 2008, Frank Denis wrote: > Le Fri, Jul 25, 2008 at 05:54:28PM -0600, Daniel Melameth ecrivait : > > Can't reproduce on a 4.2 -stable box with fxp NICs: > > Hello Daniel, > > Try to with net.inet.tcp.ecn=1 This is ECN blackhole detection at work, making a 2nd ECN-less connecti

Re: Performance issues with the DNS patch?

2008-07-28 Thread Damien Miller
On Sat, 26 Jul 2008, J Duke wrote: > I realize that the whole fix to this DNS cache poisoning is to have > random ports and random query ids, and that generating good, strong, > random numbers costs cpu cycles and time. Has anyone else noticed the > performance hit? Anything that I can do? Particu

Re: sub-notebook computers

2008-08-02 Thread Damien Miller
On Fri, 1 Aug 2008, Anathae Townsend wrote: > Besides the ASUS EEEPCs, has anyone tried to get other sub-notebooks working > under OpenBSD? http://openbsd.org/zaurus.html -d

Re: free plot software

2008-08-02 Thread Damien Miller
On Sat, 2 Aug 2008, Pau wrote: > PS: Still, a BSD-licensed programme like R or gnuplot seems not to > exist, right? It isn't exactly a plotting "program", but ports/graphics/py-matplotlib is BSD licensed and has a matlab-like interface. Then again I don't consider gnuplot's license to be particu

Re: blurb blurb

2006-10-11 Thread Damien Miller
On Thu, 12 Oct 2006, Paul Stoeber wrote: > I wonder if the following language would provide the same level of > protection or better: > > We, the authors of this work, are giving it away to you, dear > reader (and to everyone else), as an opportunity, not as a > service. Do with it w

Re: Solution to -> Re: SSH upgrade to ver 4.4 on OBSD 3.9 stable broke key auth

2006-10-22 Thread Damien Miller
On Sun, 22 Oct 2006, Girish Venkatachalam wrote: > You mean to say that newer versions of OpenSSL do not allow you to > create DSA keys longer than 1024 bits, but then isn't there an export > and a non export version? No, longer DSA keys do not offer extra cryptographic strength unless you make o

Re: OpenBSD AJAX

2006-10-24 Thread Damien Miller
On Tue, 24 Oct 2006, Sam Fourman Jr. wrote: > I am Searching the Internet for a Basic Hello World Ajax sample > written in C if anyone has one laying around please reply to this post I think you would be nuts to write your web applications in C, unless you are a master with a good reason. -d

Re: Whatever happened to the 64bit SH-5 dsign?

2006-10-25 Thread Damien Miller
On Wed, 25 Oct 2006, Miod Vallat wrote: > > Santa doesn't exist, you know? > > That's what people told me, but since he used to spam my mailbox, he > must exist somehow. Yes, and we know that he suffers from erectile dysfunction... -d

Re: Sun T1 105

2006-11-01 Thread Damien Miller
On Tue, 31 Oct 2006, Daniel Ouellet wrote: > I am looking for some feedback on this DMESG if possible. > > I am playing with an old Sun T1 105 and does look like it work well, but I > never saw so many not configure message in a single DMESG. This is normal and harmless - openfirmware identifies

Re: SFTP only access to sshd

2006-11-23 Thread Damien Miller
On Thu, 23 Nov 2006, Ingo Schwarze wrote: > From time to time, people come here to ask: > How can i set up an account for SFTP only, forbidding shell access? > > One common answer is scponly, http://sublimation.org/scponly/wiki/ > This looks quite powerful, in particular if you intend to chroot.

Re: NIC bonding/trunking/802.3ad

2005-05-25 Thread Damien Miller
Dries Schellekens wrote: http://marc.theaimsgroup.com/?l=openbsd-cvs&m=111690466011478&w=2 How does this compare to NetBSD agr(4)? Is this also IEEE 802.3AD? It does some things that agr does not, but doesn't do 802.3ad yet. Probably soon though. -d

Re: [Fwd: Re: djbdns DNS server? Status, Pros and Cons?]

2005-05-27 Thread Damien Miller
Marc Peters wrote: does anyone on this list has experience with powerdns? iirc it can use several databases as backend and is released under the GPL2. If you want a good, authoritative-only DNS server then you might want to try ports/net/nsd -d

Re: Summer of Code ?

2005-06-02 Thread Damien Miller
Joseph Kiniry wrote: Hi, On 2 Jun 2005, at 16:20, Ed White wrote: http://code.google.com/summerofcode.html Where is OpenBSD ? Google only gave "external" projects one day to hear about this event and submit mentoring proposals. :\ ... and it isn't even summer here.

Re: ThinkPad x40 ath problems

2005-06-07 Thread Damien Miller
steven n fettig wrote: Dunno' what I'm doing wrong. I have 3.7 installed on a ThinkPad x40 that has: ath0 at pci1 dev 2 function 0 "Atheros AR5212" rev 0x01: irq 11 ath0: mac 80.9 phy 4.3 radio 4.6, 802.11a/b/g, WOR4W, address 00:0e:9b:6f:4a:b0 Mine works fine with -current: ath0 at pci1

Re: Suggested hardware for server?

2005-06-28 Thread Damien Miller
Matt Garman wrote: So, still, the question remains: what do folks recommend as "good" hardware for hard disk controllers? The LSI cards supported by the ami(4) driver are excellent. I recently purchased a LSI MegaRAID SATA 150-4 and have been very impressed with it. -d

Re: secure ftpd upload for specific file restricted by type?

2005-06-30 Thread Damien Miller
Daniel Ouellet wrote: The goal: Only allow PDF upload to that directory with the ftp client and also no possibility to rename the files to .php for example. ... Allow, delete, replace, upload of *.pdf ONLY via ftpd for the reason above? First, ftpd isn't responsible for sftp - you are afte

Re: openbsd and dietlibc

2005-07-01 Thread Damien Miller
poncenby wrote: Hello all being a naturally lazy person i was wondering whether anyone knows of a nice easy, step-by-step guide to modifying the dietlibc source so it will compile on openbsd 3.7. Why? OpenBSD's libc is pretty slim already. If you have need of a further cut-down libc, you c

Re: Flash Plugin for Firefox

2005-07-05 Thread Damien Miller
Jim Beard wrote: Can anyone point me in the right direction to get flash working with firefox? I notice there is a nsplugin.so in ports/graphics/flash. Would this work for firefox or would it work with netscape? Another alternative would be to port swfdec[1], which includes a mozilla-style pl

Re: Release/version/patch management question

2005-07-07 Thread Damien Miller
Markus Wernig wrote: 3) At the time I installed the systems, openssl.org was at version 0.98. OpenSSL 0.9.8 was released only two days ago. Because it is a significant change, it probably won't be in OpenBSD before 3.9. OpenBSD -current (to be 3.8) includes 0.9.7g. I've cvs up'd and recompil

Re: syslogd-capabilities

2005-07-08 Thread Damien Miller
M. Schatzl wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi list, is there a reason why the OpenBSD-shipped syslogd cannot write directly into a pipe? This would come in quite handy for just-in-time log-processing. pipes can go away and block, what should syslogd do then? I would bet t

Re: Installing on discless (no removable media) machine from Linux

2005-07-15 Thread Damien Miller
Jason Burrell wrote: Here's a new one. Okay, well, it probably isn't. I have an old Pentium 133 that I want to use as an internal server to serve files on encrypted filesystems, act as a database server, and securely store mail. The idea is that if the machine reboots, I have to ssh into it, ent

Re: Where to get a good seed for srandom()

2005-07-18 Thread Damien Miller
Alexander Farber wrote: Hi, I'm developing a small multiplayer card game on OpenBSD (but also try to keep it at least compilable on Linux). After 32 cards have been shuffled, each of 3 players gets 10 cards. At the moment I use the sum of time()s when any data has been received from a playe

Re: ATH AR5212 hangs machine just after boot

2005-07-23 Thread Damien Miller
Rod.. Whitworth wrote: Well my dmesg lines don't look like either set of yours BUT disabling 802.11a didn't fix it but disabling 802.11g as well leaves me with a working 11b. After I paid for a brandname a/b/g, dammit! One day there will be hardware makers across the range of product lines that

Re: 3.8 beta requests

2005-08-24 Thread Damien Miller
Genadijus Paleckis wrote: Theo de Raadt wrote: Oh well -- we've decided that we will try to ship with this protection mechanism in any case, and try to solve the problems as we run into them. Is that means that 3.8 might be unstable ? Maybe all who wants/needs stable systems need to run 3.7

Re: what is next? 3.10 or 4.0???

2006-03-03 Thread Damien Miller
On Fri, 3 Mar 2006, Reid Nichol wrote: > I find it interesting that you didn't send this entirely condisending > superior reply to the list. Now why is that? because it is off topic. Please stop this thread, which has nothing to do with OpenBSD anymore.

Re: OpenBSD has bad security

2006-03-06 Thread Damien Miller
Please, This troll is several years old, let it go already. -d On Mon, 6 Mar 2006, Jon Hart wrote: > On Mon, Mar 06, 2006 at 09:09:35PM +0100, RedShift wrote: > > [EMAIL PROTECTED] ~]$ nslookup > > > www.wideopenbsd.org > > www.wideopenbsd.org A 129.128.5.191 > > > 129.128.5.191 > > N

Re: sshfs on OpenBSD

2006-03-07 Thread Damien Miller
On Wed, 8 Mar 2006, Lars Hansson wrote: > On Tue, 07 Mar 2006 19:59:43 -0800 > smith <[EMAIL PROTECTED]> wrote: > > > Are there any plans for an OpenBSD implementation of sshfs? > > Or has someone successfully installed fuse and sshfs on OpenBSD > > (preferably 3.8)? > > IIRC, fuse is pretty ti

Re: Sun Ultra 1

2006-03-08 Thread Damien Miller
On Wed, 8 Mar 2006, Gustavo Rios wrote: > Hey folks, > > i have just installed 3.8 in my sun desktop. It installed ok, 100% perfect. > > Know, i would like to strip the kernel to the bare minimum > ... No, you don't know.

Re: what happened to union fs ?

2006-03-09 Thread Damien Miller
On Thu, 9 Mar 2006, Jean-Yves Boisiaud wrote: > hello, > > in OBSD 3.8, union filesystem (mount_union(8)) has been removed. > > http://www.openbsd.org/plus38.html does not say nothing about that. > > Will union fs be back ? Not in its previous form, and so far no one has expressed an interest

Re: openbsd and the money -solutions

2006-03-23 Thread Damien Miller
On Thu, 23 Mar 2006, Paul Greene wrote: > Just another idea. Start making the mega-companies like IBM, RedHat, > etc pay a license fee for the use of OpenSSH. They save literally > millions of dollars incorporating this into their own products, and > don't give anything back to the project. No, w

Re: openbsd and the money -solutions

2006-03-24 Thread Damien Miller
On Fri, 24 Mar 2006, chefren wrote: > Demand something like $50 a year for access to the ftp.openbsd.org now!!! You are suggesting that we screw the people who have contributed by far the most to OpenBSD and OpenSSH, individual users and small organisations. Not a very bright idea. -d

Re: openbsd and the money -solutions

2006-03-24 Thread Damien Miller
On Fri, 24 Mar 2006, Andris Delfino wrote: > Please, stop wanting companies to support you. It doesn't work that > way. To develop an OS under a licence like the ISC has a big hole: > funding. You can't just go: Hey, you use the implementation that I > develop and give away for free, you should pa

Re: OpenBSD to Cisco VPN - help needed

2006-04-05 Thread Damien Miller
On Wed, 5 Apr 2006, Karl Kopp wrote: > crypto isakmp policy 10 > encr 3des > hash md5 > authentication pre-share > group 2 Last time I tried, I had to specify an explicit lifetime for the phase 1 policy here. > run isakmpd -K -d, then ipsecctl -f /etc/ipsec.conf and get: > > 170525.073348 D

Re: OpenBSD to Cisco VPN - help needed

2006-04-05 Thread Damien Miller
On Wed, 5 Apr 2006, Karl Kopp wrote: > Hi Damien, > > Firstly, do you think I will be able to do this with the > /etc/ipsec.conf setup, or will I have to go thru all the > /etc/isakmpd/* stuff? I haven't yet used ipsecctl to set up a VPN, but in theory it shouldn't matter which way you go. > >

Re: BSD-licensed Camellia 128-bit block cipher

2006-04-20 Thread Damien Miller
so? we don't need more symmetric ciphers... On Thu, 20 Apr 2006, Alexey E. Suslikov wrote: > Camellia was certified as the IETF standard cipher (Proposed > Standard) for SSL/TLS cipher suites (RFC4132) and IPsec (RFC4312). > > Source: > https://info.isl.ntt.co.jp/crypt/eng/camellia/source_s.htm

Re: pf blocking nets in a way like *.google.com ?

2006-04-20 Thread Damien Miller
On Fri, 21 Apr 2006, [EMAIL PROTECTED] wrote: > Is it maybe planed to add any joker to PF so that such stuff would be > possible in the future if it isn`t already possible? think about why this is undesirable and practically impossible for five minutes. (hint: you are confusing DNS names and net

Re: priv sep in syslogd

2006-04-29 Thread Damien Miller
On Fri, 28 Apr 2006, Brian wrote: > I am in the process of making syslogd more protocol independent (IPv4 > & IPv6). I am just about ready to add a priviledged fuction for > getnameinfo, but what I do not understand is why the the DNS lookups > are priviledged separated. I do understand the securi

Re: Linksys support... hmm

2006-04-30 Thread Damien Miller
On Sun, 30 Apr 2006, Marco Castronovo wrote: > > Linksys answering: > > "I apologize but we are not allowed to disclose any information > > regarding the > > chipsets of any of our devices. Besides, we do not have any access with > > those > > information. Again, we apologize for any inconvenien

Re: (PC video card memory aperture !=0) =>OS Rootability?

2006-04-30 Thread Damien Miller
On Mon, 1 May 2006, Dave Feustel wrote: > After looking at the slides for Loic Duffet's presentation > http://72.14.203.104/search?q=cache:y-G4z3W2zuQJ:www.cansecwest.com/slides06/csw06-duflot.ppt+%27Lo%C3%AFc+Duflot%27&hl=en&gl=us&ct=clnk&cd=1&ie=UTF-8 > on x86 hardware vulnerabilities at CanSecW

Re: Compilers make a system less secure?

2006-05-01 Thread Damien Miller
On Tue, 2 May 2006, josh wrote: > Hello... > > Some people seem to think that installing a compiler inherently makes > their system less secure... despite never being able to cite any > actual reasons why. > > Personally, I really dont see how a compiler is going to lessen > security, particuarly

Re: Red Black Trees

2006-05-01 Thread Damien Miller
On Mon, 1 May 2006, Brian wrote: > I am reading through the tree(3), and I need some clarification. If I > want to correctly remove an element from a red black tree that I have > found and free it's memory allocation, this code should work, right? > > find.i = 400; > n = RB_FIND(inttree, &head, &f

Re: exploit for openbsd 3.9 php 4.4.1p0/5.0.5p0

2006-05-03 Thread Damien Miller
On Tue, 2 May 2006, paul dansing wrote: > Is there some reason this issue is being ignored? What, you people > need to see an exploit before you will even LOOK at it and answer > whether it is vuln? It isn't our job to tell you what software is vulnerable. But maybe you should read your own emai

Re: Magic numbers, signed binaries (Re: Compilers make a system less secure?)

2006-05-04 Thread Damien Miller
On Thu, 4 May 2006, Eric Ziegast wrote: > An 3l33t hacker might figure out that all he/she had to do was > modify the magic number to get their program to run, but most people > (including script kiddies) wouldn't figure it out, give up, and move > on to softer targets. Typical security-through-o

Re: Magic numbers, signed binaries (Re: Compilers make a system less secure?)

2006-05-05 Thread Damien Miller
On Fri, 5 May 2006, Brett Lymn wrote: > Otto is correct about exploiting a buffer overflow to run code > (certainly veriexec won't stop that trick) but I do wonder if it would > be possible to enforce a restriction that any executable page must be > backed by an on-disk object and how much pain/lo

Re: PHP vs Mason vs Ruby vs JSP/Tomcat

2006-05-23 Thread Damien Miller
This has nothing to do with OpenBSD. Please take your childish language flamewars to private email. On Wed, 24 May 2006, Jonathan Weiss wrote: > Cheers, > > Adam wrote: > > On Wed, 24 May 2006 02:08:45 +0200 Jonathan Weiss <[EMAIL PROTECTED]> wrote: > > > > > So Ruby is slower than Python for y

Re: 標題: Re: ThinkPad testers required

2005-08-28 Thread Damien Miller
w.sensors" and see if the numbers change when you tilt the laptop. Next, suspend and resume and see if they still respond to tilting. Thanks, Damien Miller

Re: superviser daemon

2005-09-08 Thread Damien Miller
On Thu, 8 Sep 2005, Gustavo Rios wrote: By using BSD license, would i be able to confidently consider my tools to be included wihtin OBSD? this is a necessary but by no means sufficient quality.

Re: Guidelines for kern.maxfiles and kern.maxvnodes...

2005-09-08 Thread Damien Miller
On Thu, 8 Sep 2005, Jeff Ross wrote: This morning httpd was failing to deliver files because of a "too many open files" error. I'd previously bumped kern.maxfiles from the default 1772 to 2048 and kern.maxvnodes from its default 1310 to 2048, so this morning I doubled them both to 4096. You p

Re: superviser daemon

2005-09-08 Thread Damien Miller
On Thu, 8 Sep 2005, Gustavo Rios wrote: Ok, i see! What, then, should i address more? There is no guarantee that 3rd party code will be included in OpenBSD. Frankly, the odds are against importing random software into base unless it is quite wonderful, but getting software in to ports is som

Re: nsswitch and/or hesiod support

2005-09-09 Thread Damien Miller
Lukasz Sztachanski wrote: On Sat, Sep 03, 2005 at 10:11:51PM +0200, Antoine Jacoutot wrote: Hi... Some months ago, a patch to import nsswitch into OpenBSD was post on tech@ : http://marc.theaimsgroup.com/?l=openbsd-tech&m=110098242313143&w=2 I was wondering if there was any ongoing work on n

Re: nsswitch and/or hesiod support

2005-09-09 Thread Damien Miller
Antoine Jacoutot wrote: And what about hesiod ? Was it ever considered to be included ? As in unauthenticated distribution of private account data via DNS? I strongly doubt it. -d

Re: Random reboots with 3.8 beta i386 on multiple boxes

2005-09-11 Thread Damien Miller
On Mon, 12 Sep 2005, Rod.. Whitworth wrote: Any clues/ things to try? I am a bit worried about the build #137 as that's pretty close to release but I haven't heard anybody else reporting problems and the archives don't show any relevant posts. Can you plug a serial console onto the systems to

Re: OpenSSH Patch still missing on Errata

2005-09-12 Thread Damien Miller
On Mon, 12 Sep 2005, Theo de Raadt wrote: Because it is boring and largely irrelevant. We don't write errata up for every stupid retarded little thing that noone uses and which really is causing NOONE ANY GRIEF AT ALL. In this case, the two "vulnerabilities" do not expose the server at all -

Re: OpenSSH Patch still missing on Errata

2005-09-12 Thread Damien Miller
On Mon, 12 Sep 2005, Juan J.Martmnez wrote: > I know other projects have ChangeLog files and other ways to track > versions. In fact I don't know if there's a changelog around for > OpenSSH, I usually check the announce and I evaluate if it's worth > updating or not. Yes, the announcement message

Re: Obtaining glibc on OpenBSD?

2005-09-13 Thread Damien Miller
Arthur Bebak wrote: I'm trying to run famd (the port of the file monitoring utility from SGI) on OpenBSD 3.7. In order to do this it appears I need a bunch of functions such as getmntent, which apparently are in the GNU libc. Doing some Google searches I find references to a linux_base port w

Re: Catching WINCH signal during sleep...

2005-09-19 Thread Damien Miller
Andreas Kahari wrote: (the WINCH signal is delivered when the terminal window changes size) SIGWINCH is ignored by default, otherwise your sleep(1) would exit if you changed the size of your xterm. See signal(3) for the full list. So it is doing the right thing wrt your quote of SUSv3: The S

Re: DTrace

2005-10-09 Thread Damien Miller
On Sun, 9 Oct 2005, Gustavo Rios wrote: Does OBSD support something like Solaris DTrace? no

Re: Assigning static device names for USB devices

2005-10-16 Thread Damien Miller
On Sun, 16 Oct 2005, Antti Harri wrote: Hi, I have two USB printers, is there a way to assign a fixed device name instead of device name being assigned dynamically? If it's not possible at all, are there plans to implement it? You could try making symlinks using hotplugd(8) attach and detach

Re: scp/sftp performance myths

2005-10-30 Thread Damien Miller
frantisek holop wrote: so before anyone tags this mail as a trolling flamebait (which it is not), i just would like to ask -have others tried HPN-SSH? -have ssh developers tried it? -or simply, has ssh hit its performance limit and can't get any better? the "HPN" patch greatly improves through

Re: OpenSSH, ssh-agent question

2005-10-31 Thread Damien Miller
Sebastian Rother wrote: I've a question because ssh-agent. Why do I've to start an ssh-agent for each Console even sudo works for all consoles if I entered the password once? Maybe I missed something in the configuration but I don#t think so. As usual, you missed reading the manpage. If not

Re: preventing OS fingerprint

2005-11-03 Thread Damien Miller
On Thu, 3 Nov 2005, Gustavo Rios wrote: Dear gentleman, i have an obsd firewall and would like to prevent external entities discovering that firewall is openbsd, is that possible? why care? fingerprinting is such a non-issue, and spending effort to avoid it is just security through obscurity

Re: OT: 10 things i hate most on unix

2005-11-05 Thread Damien Miller
On Sun, 6 Nov 2005 00:40:12 -0200 Gustavo Rios <[EMAIL PROTECTED]> wrote: > Hey folks, > > sorry, but i found this on the web. May someone tell if it is serious, > i myself could not believe it. > > http://www.informit.com/articles/article.asp?p=424451&seqNum=1 Just another troll for 10+ pages

Re: Telnet daemon retired in 3.8 ?

2005-11-07 Thread Damien Miller
On Tue, 8 Nov 2005, Ioan Nemes wrote: It in not the question of sshd works or, not! In large environments, where you have a large number of legacy hardware (like Apollo 700, HP 3000, HP 7000, Solaris 2.5.1 etc., etc.), You can compile portable OpenSSH (or another ssh client) on most of these.

Re: Head command

2005-11-07 Thread Damien Miller
man dd On Tue, 8 Nov 2005, Marcos Marconcini wrote: Hi, I am trying to extract a portion of a large file, to do a sha1 check, it's greater than 2.7Gb. I was reading help for head command, but it's only permit me put number of lines to extract, and I need to extract the portion of 1.5Gb in by

Re: ssh brute force attacks

2005-11-11 Thread Damien Miller
On Fri, 11 Nov 2005 16:44:46 -0500 stan <[EMAIL PROTECTED]> wrote: > I;ve got a machien that seems to getting atacked by what appears to be a > simplistic "brute force" attck. it's getting hit multiple ties a second > with bogus root login attempts, my guess is that they are trying dictionary > at

Re: DNS attack?

2005-11-12 Thread Damien Miller
On Sat, 12 Nov 2005 20:15:18 -0600 "J.D. Bronson" <[EMAIL PROTECTED]> wrote: > I am starting to see TONS of these things in my pflog > > Nov 12 19:50:58.030904 rule 48/(match) block in on tun0: > 63.219.179.130.13519 > 65.x.x.169.53: 47505+[|domain] > > Nov 12 19:51:08.037007 rule 48/(match) b

Re: Building a bootable CF w/ a RAM-disk kernel

2005-11-13 Thread Damien Miller
On Sat, 12 Nov 2005 21:54:42 -0600 J Moore <[EMAIL PROTECTED]> wrote: > The readme file in flashboot contains an overview of building the > ram-disk kernel. What it doesn't explain is how to install the kernel on > the CF, or prepare the CF for booting the kernel. There are some extra instructi

Re: net4801 with NL-2511MP+, Copper to Radio Bridge Trouble Shooting

2005-11-15 Thread Damien Miller
On Mon, 14 Nov 2005 23:16:26 -0800 tuco <[EMAIL PROTECTED]> wrote: > The IP-less, OpenBSD copper to radio bridge I put together lets my only > wireless client, a PowerBook G4, get an IP issued to it from a bridged > wired network but friends wireless Windows clients cannot. If they are using a r

Re: timekeeping on Soekris net4801 w/ ntpd. 3.8

2005-11-15 Thread Damien Miller
On Tue, 15 Nov 2005, J Moore wrote: Nov 15 04:13:30 opie dhcpd: DHCPREQUEST for 192.168.1.207 from 00:e0:4c:cf:15:90 via sis1 Now that one doesn't fit on a single line, does it? How would you propose exactly to make that entry both clear and < 80 chars? This message is long because it conveys

Re: slightly OT: TCP checksum and RFC conformity

2005-11-16 Thread Damien Miller
On Thu, 17 Nov 2005, Andreas Bartelt wrote: As much better algorithms for error detection are known and PC performance (and also Internet traffic) has increased a lot since the introduction of TCP - do you think that the original checksum algorithm is still the best choice in terms of a reliab

Re: tcpdump and libpcap versions...

2005-11-20 Thread Damien Miller
On Sat, 19 Nov 2005, poncenby smythe wrote: Dear list, Does anyone why the versions of tcpdump and libpcap in 3.8 GENERIC (3.2(i think) and 0.5 respectively) are quite a way off from the current stable releases (0.9.4). Exactly what do you want from the tcpdump.org version? -d

Re: tcpdump and libpcap versions...

2005-11-21 Thread Damien Miller
On Mon, 21 Nov 2005 08:40:59 + poncenby smythe <[EMAIL PROTECTED]> wrote: > > On 20 Nov 2005, at 23:16, Damien Miller wrote: > > > On Sat, 19 Nov 2005, poncenby smythe wrote: > > > >> Dear list, > >> > >> Does anyone why the versions of

Re: Something hosing my msdos/FAT32 file system

2005-11-28 Thread Damien Miller
On Mon, 28 Nov 2005, Tan Dang wrote: I have had this problem of files not showing up on the fat partition after moving the files over from ffs also. I dual boot OpenBSD 3.8 and Windows XP on my laptop. Both os's share a fat partition. For my particular case, I put Windows XP into hibernation

Re: ip_forward() function

2005-12-27 Thread Damien Miller
Matthew Closson wrote: > Where is the code for the ip_forward() function in 3.8? > > I found the prototype in: /usr/src/sys/netinet/ip_var.h > > void ip_forward(struct *mbuf, int); > > but no function definition. > > I also did a grep -sR "ip_forward" /usr/src > and all I found was the functio

Re: A Little Tip for OpenBSD Users of KDE

2005-12-27 Thread Damien Miller
Dave Feustel wrote: > The problem with /tmp/.X11-unix/X0 addressed by the > 2003 paper on XFree86 still exists today with Xorg. What problem? X11 implements its own authentication. -d

Re: Blowfish still good enough?

2005-12-29 Thread Damien Miller
On Thu, 29 Dec 2005, Travers Buda wrote: > The key schedule in both is _much_ faster than Blowfish. That is not a feature, at least not in the contexts where we use blowfish most. > The password file and > others would require the use of salts in order to resist dictionary attacks, > especially

Re: Current installed on 1.1: Problems using svnd?

2006-01-01 Thread Damien Miller
[EMAIL PROTECTED] wrote: > Hello everybody, > > I installed oBSD current for AMD64 on 1.1.2006, created a encrypted > partition for /home and ran into some trouble. > > The permissions for /home or /tmp didn't changed: > drwxr-xr-x 6 root wheel 512 Jan 2 07:59 tmp > drwxr-xr-x 2 root

Re: "DadOS" - sys shutdown with XDM

2006-01-03 Thread Damien Miller
Dave Feustel wrote: > Check the ownership/privileges on /tmp/.X11-unix/X0 after you start kde or > Xorg. You can stop repeating this now, you have already demonstrated your ignorance.

Re: CGD

2006-01-03 Thread Damien Miller
Travers Buda wrote: > Ted Unangst, > > Yes, I've looked at the archives. > > You've made it very clear that CGD won't be imported into OpenBSD, yet > you've never explained why, or why you ported it in the first place. > > Care to let us in on why? I expect your reply will be a short "no" just

Re: CGD

2006-01-06 Thread Damien Miller
Travers Buda wrote: > On Friday 06 January 2006 14:46, Ted Unangst wrote: > >>i had an afternoon free and nothing better to do. i probably stored >>about 10k of data on a cgd partition for about 5 minutes to see if it >>worked, then deleted it. the stats with encrypted svnd are pretty >>similar,

Re: OT: event driven processing

2006-01-08 Thread Damien Miller
Gustavo Rios wrote: > Dear fellows, > > i am in need to write event driven processing applications. I must > avoid sequential processing. I will be mixing RPC queries and dns > ones. > > I saw, at the first sigh, writing non batch program is very hard to > accomplish. So i wonder how openbsd mana

Re: i2c question

2006-01-12 Thread Damien Miller
On Thu, 12 Jan 2006, Diana Eichert wrote: > I've been following all the i2c work lately and have a question. I have > some blade servers that use i2c as a control path between a master blade > and the child blades. This is in addition to sensor info. > > Has there been any thought towards suppo

Re: New release of Sealing Wafter.

2006-01-14 Thread Damien Miller
ober wrote: > http://www.linbsd.org/wafter.c > Updates to include icmp, and udp support as well > as a code cleanup. > Works on i386. > Feel free to provide any feedback. You could do pretty much everything that this module provides using a small bpf(4) program with the BIOCSFILDROP ioctl set, wit

Re: Temperature

2006-01-15 Thread Damien Miller
On Sun, 15 Jan 2006, Ricardo Lucas wrote: > Hello misc, > anyone knows a program that monitoring the cpu temperature and hard disk > temperature and rotation?! There has been a lot of hardware monitoring work that has been happening in -current recently. Grab a snapshot and try it out - the resul

Re: Temperature

2006-01-16 Thread Damien Miller
On Mon, 16 Jan 2006, Ricardo Lucas wrote: > Any ideias? we can't help you without a dmesg. -d

Re: Novice compile question

2006-01-17 Thread Damien Miller
Didier Wiroth wrote: > Hello, > (I'm a compile novice) Then you shouldn't be cross-compiling. In fact, cross-compiling isn't supported on OpenBSD for end-users at all. Check the archive to see reams of discussion on this. If you want your fast amd64 machine to make i386 snapshots, then consider m

Re: time warp in -current

2006-01-18 Thread Damien Miller
On Wed, 18 Jan 2006, Wolfgang S. Rupprecht wrote: > Upon booting I also get quite a bit of hex-dump output right after the > iic line. I'm not sure if that is related and an indication that > something on the iic bus is not getting configured. (dmesg appended) This is the i2c sensor probe findi

Re: ipv6 tentative address generation

2006-01-18 Thread Damien Miller
On Wed, 18 Jan 2006, Travers Buda wrote: > I'm suggesting it as the default behavior. Ya' know, secure by default. by default we don't turn rtsold on. If you want this now (i.e. while you are working on a full implementation for us), then you can manually set a different (randomly generated) lla

Re: error on ifconfig, bssid

2006-01-28 Thread Damien Miller
Lucas Reddinger wrote: > so the question is: is wi(4) secure at all? if i choose to run openbsd > for a point-to-point wifi connection, i choose a specific nwid and > channel. but since i cannot select bssid nor even chan, the two nodes > just connect to the best looking signal under the given nwid

Re: error on ifconfig, bssid

2006-01-29 Thread Damien Miller
On Mon, 30 Jan 2006, Lucas Reddinger wrote: > On 1/28/06, Damien Miller <[EMAIL PROTECTED]> wrote: > > > use ipsec if you care about the traffic that does over such a link > > ipsec protects the traffic, but it doesn't mean that the link won't > drop. i

Re: IPMI / SNMP / MRTG (WAS: RE: ipmi(4) (IPMI MIB?))

2006-02-03 Thread Damien Miller
(trimming absurdly long Cc list) On Fri, 3 Feb 2006, Brian A. Seklecki wrote: > I will say this, though. It takes about 35 seconds to do an "ipmitool sdr > list full". Thus, for every two values you would like to graph in MRTG, > you can add 35 seconds to the job's run time. The time it takes

Re: Need for a benchmark recommendation

2006-02-05 Thread Damien Miller
On Sat, 4 Feb 2006, Andris Delfino wrote: > I need to run a benchmark for testing the temperature of my system, > which of these (http://www.openbsd.org/cgi-bin/cvsweb/ports/benchmarks/?only_with_tag=OPENBS D_3_8) > do you recommend? If you just want to make your CPU hot, then running "openssl sp

Re: syslog: Memory buffered logging

2006-02-09 Thread Damien Miller
On Fri, 10 Feb 2006, Jonas Davidsson wrote: > syslog.conf: > # Keep a copy of all logging in a 32k memory buffer named "debug" > *.debug :32:debug > > #>pkill syslogd; syslogd -s /var/run/syslogd.sock This is wrong. Look at the options th

Re: ssh remote execution: PATH

2006-02-12 Thread Damien Miller
On Mon, 13 Feb 2006, Peter wrote: > $ ssh [EMAIL PROTECTED] /usr/local/sbin/command > > The PATH of the user (given in ~/.profile) contains /usr/local/sbin but > evidently this file remains unread. .profile is only used for interactive sessions. Try .kshrc

<    1   2   3   >