Re: IPv6 virtual hosts

2008-12-06 Thread Jeroen Massar
Simon Vallet wrote: [..] > Would I be missing something? The fact that generally people use NAMES and not IP addresses? It is not called "__Name__VirtualHost" for nothing ;) That said, afaik it does work in the real apache2's, but this is afaik a special patch for apache1. But as mentioned above

Re: IPv6 virtual hosts

2008-12-06 Thread Jeroen Massar
Simon Vallet wrote: > On Sat, 06 Dec 2008 21:17:39 +0100 > Jeroen Massar <[EMAIL PROTECTED]> wrote: > >> Simon Vallet wrote: >> [..] >>> Would I be missing something? >> The fact that generally people use NAMES and not IP addresses? >> >&

Re: ipv6/pf/relayd/totd

2008-12-17 Thread Jeroen Massar
Matthew Dempsky wrote: > On Tue, Dec 16, 2008 at 7:14 AM, Stephan A. Rickauer > wrote: >> An ipv6 only host with a non-link-local address should be able to use >> the ipv4 world. > > Is this just for fun/practice, or is there a reason you can't just > configure the host with both an IPv4 and an IP

Re: ipv6/pf/relayd/totd

2008-12-17 Thread Jeroen Massar
Matthew Dempsky wrote: > On Wed, Dec 17, 2008 at 12:43 AM, Jeroen Massar wrote: >> I guess there is a practical use here, that is, if your tools all >> understand IPv6, because then you only have an IPv6 "NAT" to IPv4 and >> you skip the IPv4 NAT to IPv4 in case yo

Re: ipv6/pf/relayd/totd

2008-12-17 Thread Jeroen Massar
Stephan A. Rickauer wrote: > On Wed, 2008-12-17 at 11:11 +0100, Jeroen Massar wrote: >> You are trying to solve the wrong problem with the wrong hammer. > > "I need to go the bus station. Do you know the way?" > "If I were you, I wouldn't start from here.&qu

Re: ipv6/pf/relayd/totd

2008-12-17 Thread Jeroen Massar
Stephan A. Rickauer wrote: [..] > Bingo! Our institute ran out of ipv4 addresses and we were assigned a > couple of ipv6 address ranges by University. However, University who > operates the network (gateways, routers etc.) don't route/care > about/support ipv6 yet officially. Well, it's a Universit

Re: git0 tunnel with any remote endpoint

2009-04-04 Thread Jeroen Massar
Garry Dolley wrote: > On Fri, Apr 03, 2009 at 02:17:41PM +, Stuart Henderson wrote: >> On 2009-04-03, Garry Dolley wrote: >>> Dear misc, >>> >>> Is it possible to have a git0 tunnel that accepts a remote endpoint >>> of any address? I'm trying to set up a 6to4 anycast relay router. >> 6to4 is

Re: Hardware rec, 10 gigabit home firewall

2024-08-24 Thread Jeroen Massar
> On 24 Aug 2024, at 10:23, jslee wrote: > > Hi, > > On Sat, 24 Aug 2024, at 09:15, Anders Andersson wrote: >> I bought an 85 year old house in the woods, and apparently I can get 10 >> Gbit/s there. My good old APU4 firewall is barely keeping up with 100 Mbit/s >> so I need to look for an

Re: OT: 10GbE Physical Network Taps

2009-05-06 Thread Jeroen Massar
Diana Eichert wrote: > On Wed, 6 May 2009, openbsd misc wrote: > >> On Wed, May 6, 2009 at 3:42 PM, Diana Eichert >> wrote: >> >>> We use physical taps at work, when I get the chance I'll take a look at >>> the vendor. >>> >>> Also, you really think you can capture 10GE? Chuckle, good luck. Prett

Re: OT: 10GbE Physical Network Taps

2009-05-06 Thread Jeroen Massar
Diana Eichert wrote: [...] > AKA what kind of money you have to throw at it. Isn't that always the case? ;) > Ours was the 2nd or third built, you could still get to > the FPGA with Xilinx development tools. A grad student, Jonathon > Donaldson, working in our organization used it > in the work

Re: Fping & smokeping 2.0 problem in obsd 4.5

2009-05-11 Thread Jeroen Massar
sonjaya wrote: > Hi > i success installed smokeping in openbsd 4.5. > i made some custom config as i need > when i try running always get error message like this : > #smokeping --debug > Dropping privilges to _smokeping ... > ERROR: Fping must be installed setuid root or it will not work > at

Re: httpdv6

2007-12-08 Thread Jeroen Massar
Frank Habicht wrote: > Hi misc, > > [i guess misc is better than ports for that..] > > I ran the patched httpdv6 with the stock httpd.conf > -> it was only bound to v6 > > README.v6 suggests _for_Vhost_operation_ one needs > Listen :: 80 > Listen 0.0.0.0 80 > > my test suggests even without vhosts

Re: Real men don't attack straw men

2007-12-15 Thread Jeroen Massar
Richard Stallman wrote: > RMS' statement that OpenBSD endorses non-free software goes too far, > > What I said is that the ports system contains recipes for installing > non-free software. Just a quick question then: what about Debian GNU/Linux? (note the GNU part there) $ apt-cache show mstt

Re: dhclient clobbers default route, even though configured not to

2006-12-15 Thread Jeroen Massar
James Herbert (Lists) wrote: > Hi misc! > > I have a home router which is connected to a DSL line as its primary > connection, with static IPs and the like. I have a secondary cable > connection with a dynamic IP, and I have to use dhcp to get the IP for > this link. > > I have the following in my

Re: 23C3 Chaos Communication Congress in Berlin, December 27 - 30, 2006, Berlin, Germany.

2006-12-22 Thread Jeroen Massar
Wim Vandeputte wrote: > Hi, > > In the spirit of Xmas or should I say vapor of spirits, Those spirits are actually quite liquid ;) Enjoy your whiskey guys! Oh and of course the large number of great talks they are giving, they managed to get a great lineup again! Greets, Jeroen [demime 1.01d r

Re: VOIP NAT

2007-01-12 Thread Jeroen Massar
Bob DeBolt wrote: [ Note your PGP armor was broken in the previous message, please check and fix if possible, it could be of course that the mailinglist peeped it up somewhere. Best solution: don't use inline PGP signing, but use the MIME variant, which is available in enigmail, eg I use it :) ] >

Re: mysql + phpmyadmin

2007-01-16 Thread Jeroen Massar
Der Engel wrote: > Hi, > > Installed mysql+phpmyadmin on OBSD 4.0, when doing > http://host/phpMyAdmin/index.php i get the following error: > > #2002 - The server is not responding (or the local MySQL server's > socket is not correctly configured) > > I can connect remotely just fine using mysql qu

Re: Idea for additionnal funding

2007-01-20 Thread Jeroen Massar
Jean-Daniel Beaubien wrote: [..] > My idea is the following: The mozilla foundation now makes a boat > load of money by shipping firefox with a default search page set to > google > (http://www.google.ca/firefox?client=firefox-a&rls=org.mozilla:en-GB:official What has open and free to do with be

OT: Getting a premade box or doing it yourself (was "OT:")

2007-01-21 Thread Jeroen Massar
Tautvydas wrote: > Hey List, > > Little off topic, but I need some help. For a week I'm working in a > small company. (~250 workstations). Till 2008 there will be 400-600 > workstations. So, they are planning to buy something for spam/mail > filtering (http://www.barracudanetworks.com/ns/products/s

Re: OT: Getting a premade box or doing it yourself (was "OT:")

2007-01-21 Thread Jeroen Massar
[reordered mail to let the reply make sense again] > On 1/21/07, Henning Brauer <[EMAIL PROTECTED]> wrote: >> * Tautvydas <[EMAIL PROTECTED]> [2007-01-21 20:33]: >> > What I know now - barracuda is a blackbox. I've read that there is >> > "simple web interface". IMHO, it sounds not very good at al

Re: PlayStation 3

2007-01-23 Thread Jeroen Massar
Abraham Rolick wrote: > I do apologize in advance if this is not appropriate discussion for this > list, but I've been having problems with my PS3 sitting behind my > OpenBSD 4.0 machine with pf using nat. > > Until I do some more "reverse engineering" (in a sense) on how this > retarded PS3 actual

Re: Virtualisation on OpenBSD?

2007-01-24 Thread Jeroen Massar
Lachlan Gunn wrote: > Sorry, accidentally sent that to the wrong address. > >> vmware could run on OpenBSD if you have linux compatibility turned on >> i think > > It uses a number of kernel modules, so I doubt it. However, the > source may be available, so someone could probably try to implement

Re: Is Theo still hiking ????

2007-01-28 Thread Jeroen Massar
Brian Candler wrote: > On Sun, Jan 28, 2007 at 12:36:38AM -0800, Joe wrote: >> whats sad is how many people will never let go of NAT after they migrate >> to ipv6. > > It's not sad; for many people it would be essential. How would you like your > 48-bit MAC address to become a permanent cookie, fol

IPv6 allocations (Was: Is Theo still hiking ????)

2007-01-28 Thread Jeroen Massar
Marc Espie wrote: > On Sun, Jan 28, 2007 at 03:17:14PM +0000, Jeroen Massar wrote: >> Also note that FT serves the whole country of France, you might not like >> them, but they also have a right to use the Internet ;) Most ISP's get >> only a /32 and there are millions

FUDv6 (Re: Is Theo still hiking ????)

2007-01-29 Thread Jeroen Massar
Claudio Jeker wrote: > On Sun, Jan 28, 2007 at 03:17:14PM +0000, Jeroen Massar wrote: >> Brian Candler wrote: >>> On Sun, Jan 28, 2007 at 12:36:38AM -0800, Joe wrote: >>>> whats sad is how many people will never let go of NAT after they migrate >>>> to

New routing ideas for OpenBSD ;) (Was: Is Theo still hiking ????)

2007-01-29 Thread Jeroen Massar
[changed subject to something more related ;) ] Brian Candler wrote: > On Sun, Jan 28, 2007 at 03:17:14PM +0000, Jeroen Massar wrote: >>> And if you need to change ISP, and >>> therefore get a new address allocation, many people would rather just put in >>> some N

Re: Is Theo still hiking ????

2007-02-09 Thread Jeroen Massar
Tonnerre LOMBARD wrote: > Salut, > > On Mon, Jan 29, 2007 at 10:45:08AM +0100, Claudio Jeker wrote: >> Note: the OpenBSD routing table does not do that. > > It's hard to do hardware accelerated FIBs without the hardware, isn't it? Addon cards can always be done. I am pretty sure that one could dev

Re: Exploit mitigation techniques and kernel code

2007-03-17 Thread Jeroen Massar
Theo de Raadt wrote: [..] >> privilege revocation/separation, > > split the kernel? huh? Well, one could do it, but then you end up with a micro-kernel or at least something that passes, and verifies, messages between the components which run in separate subsystems. Having it compartmentali

Re: l2tp solution wanted

2007-03-24 Thread Jeroen Massar
Gregory Edigarov wrote: > Hello list, > > I am trying to build a drop-in replacement for one of my linux vpn > servers(it is dying). I've decided now it will be OpenBSD. Having found > nearly all the necessary components compilable under openbsd, the only > stop is the lack of L2TP support, wh

Re: Long WEP key

2007-03-28 Thread Jeroen Massar
Nick ! wrote: > On 3/28/07, Rafael Morales <[EMAIL PROTECTED]> wrote: [..] > Your symptons are pretty obviously the result of the key being set > wrong, as you guessed. I don't know what it might be. Try reading the > /etc/netstart script. By pen and paper, trace the values of variables. In case y

Re: bcw(4) is gone

2007-04-09 Thread Jeroen Massar
Shawn K. Quinn wrote: [..] > Nothing in the GPL prohibits commercial use of code released under the > GPL. It is perfectly fine to sell copies of GPLed code at any price. > What is *not* perfectly fine is to sell copies of GPLed code without > allowing access to the source code. Not exactly. The c

GPL is free for forcing people to free code, not free as in free to do what you want, which is actually what free as in BSD and real freedom is (Was: bcw(4) is gone)

2007-04-11 Thread Jeroen Massar
[set the topic to make it nice and clear, this has nothing to do with bcw(4) for a long time now, actually the whole thread avoided it] Rui Miguel Silva Seabra wrote: > Seg, 2007-04-09 C s 18:29 +0100, Jeroen Massar escreveu: >> GPL is good though if you want to force people to give back

Re: GPL is free for forcing people to free code when they publish, not free as in free to do what you want, which is actually what free as in BSD, and real freedom ends at the tip of my nose

2007-04-11 Thread Jeroen Massar
Rui Miguel Silva Seabra wrote: > [correct the subject] ;) > > Qua, 2007-04-11 C s 14:26 +0100, Jeroen Massar escreveu: >> [set the topic to make it nice and clear, this has nothing to do with >> bcw(4) for a long time now, actually the whole thread avoided it] >> >&

Re: pf block IP range

2007-05-26 Thread Jeroen Massar
Jim M wrote: > I know I can block an outgoing IP address such as > > block out quick on $external from any to 123.123.123.123 > > But can you also block a range of IP addresses? Such as > > block out quick on $external from any to 123.123.100.0-123.123.200.255 Yes, but one writes this in CIDR sty

Re: Building a Centralized Authentication Server

2007-06-03 Thread Jeroen Massar
Max Clark wrote: > Hi all, > > I need to develop a secure way for our staff/outside contractors to be able > to securely connect (via SSH - rdesktop/vnc in the future) to our internal > and customer systems. We do need heterogeneous client system support (BSD, > Linux, Solaris, Windows, etc..?) wit

Re: dns caching server (not bind)

2007-06-04 Thread Jeroen Massar
Juan Miscaro wrote: > I am running OpenBSD 4.0 and 4.1 systems. On a standalone mail gateway > I have successfully deployed pdnsd as a local dns caching server. > However, on a company network I am having difficulty running this > daemon. Often the thing replies by stating that a domain exists bu

Re: Quad ethernet card

2007-06-05 Thread Jeroen Massar
Fredrik Carlsson wrote: > Hi, > > I'm planing to set up a new firewall and have a few questions about what > quad ethernet cards people recommend? > The server will probably be a Dell PE860 (they seem to be well supported > by OpenBSD), but what quad cards should i buy? what cards have good > perfo

Re: Only one core of an amd X2 4600 is in use

2007-06-26 Thread Jeroen Massar
Stephan Andreas wrote: > See my dmesg.txt > Multicoreprocessor support is enabled in BIOS and I boot the bsd.mp. > I have upgraded my system from 4.1 to a current snapshot of OpenBSD 4.1, but > the problem is the same. [..] > acpi at mainbus0 not configured Is ACPI disabled on your box? -> check

Re: Zurich OpenBSD

2007-07-18 Thread Jeroen Massar
Claudio Jeker wrote: > On Wed, Jul 18, 2007 at 08:56:34AM +0200, Karel Kulhavy wrote: >> Hi >> >> I saw someone at Zurich Central with an OpenBSD t-shirt 2 days ago, I wonder >> if he's subscribed to this list. I should have stopped him ;-) >> > > Most probably it was me. Or it could have been Pau

Re: nat ipv6 -> ipv4 using pf

2007-08-26 Thread Jeroen Massar
alwin wrote: > hi misc mailinglist users, > > i have a webserver and i'm using ipv6 and ipv4 addresses. the apache > server in openbsd does not support ipv6 Stop exactly there. Upgrade to either Apache 2.x or patch your Apache 1.3 with IPv6 patches. Don't even THINK further of going where you th

Re: nat ipv6 -> ipv4 using pf

2007-08-26 Thread Jeroen Massar
Lars NoodC)n wrote: > Jeroen Massar wrote: >> Stop exactly there. >> Upgrade to either Apache 2.x or patch your Apache 1.3 with IPv6 patches. > > Is there a conveniently chrooted version (port or package) of > Apache2.x? Or is chrooting the new version entirely up

Re: nat ipv6 -> ipv4 using pf

2007-08-26 Thread Jeroen Massar
Christian Weisgerber wrote: > Jeroen Massar <[EMAIL PROTECTED]> wrote: > >> And as mentioned, you can always apply the 1.3 patches if you don't like >> going that route. (I still actually don't understand why those patches >> are not integrated yet in the

Re: That whole "Linux stealing our code" thing

2007-09-01 Thread Jeroen Massar
David H. Lynch Jr. wrote: [..] >The law requires complying with the license not preserving it. And the license request you to preserve the license, thus if you do not preserve the license you are not complying with it. >The ISC License requires little more than preserving the copyright >

Re: That whole "Linux stealing our code" thing

2007-09-02 Thread Jeroen Massar
Rui Miguel Silva Seabra wrote: [..] > I wanted to understand the facts but nobody here wants to acknowledge that > 3 of those files have *alternative* licensing. Yes, indeed you can choose between the two licenses, but you CANNOT *REMOVE* either of them. Only the Copyright holder who put that lice

Re: That whole "Linux stealing our code" thing

2007-09-02 Thread Jeroen Massar
he other one: > On Sun, Sep 02, 2007 at 10:32:05AM +0100, Jeroen Massar wrote: >> Because of the choice between licenses you can either choose to adhere >> to the GPL (thus forcing you to open up your changes) >^^^ > > Tha

Re: Ultraportable Laptop

2007-09-04 Thread Jeroen Massar
Raimo Niskanen wrote: > Hi all! > > I am pondering on which ultraportable laptop would be fine > for OpenBSD. The Lenovo ThinkPad X61 comes first to mind > since OpenBSD traditionally has been good at ThinkPads, > but a display of 1024x768 is too small. They should be > bigger nowdays. Get the x61

Re: The Atheros story in much fewer words

2007-09-14 Thread Jeroen Massar
Rui Miguel Silva Seabra wrote: > On Fri, Sep 14, 2007 at 11:49:33AM +0200, Paul de Weerd wrote: >> | I don't establish *anything*. It's in the preamble. >> >> Your exact words are "that's in the preamble, which establishes the >> spirit" (I left them in my reply so you can see for yourself). So the

Re: The Atheros story in much fewer words

2007-09-14 Thread Jeroen Massar
David H. Lynch Jr. wrote: > Paul de Weerd wrote: >> >> Scenario A, this code is released under the BSD license. You can take >> it, improve it and never share your changes with anyone. >> >> Scenario B, this code is released under the GPL license. You can take >> it, improve it and never share your

Re: The Atheros story in much fewer words

2007-09-15 Thread Jeroen Massar
Rui Miguel Silva Seabra wrote: > On Fri, Sep 14, 2007 at 03:25:38PM -0700, J.C. Roberts wrote: >>> I'd love to see how an user who gets a modified binary version has >>> the freedom to modify it. Go ahead. Prove me that it doesn't allow >>> some users to loose freedom... >> Hello again Rui, >> >> t

Re: ipv6 in openbsd 3.9

2006-06-08 Thread Jeroen Massar
On Thu, 2006-06-08 at 02:40 +, Lars Hansson wrote: [..] > I wanted to try SixXs but I dont have an apnic (or other rir) handle. I guess you missed http://www.sixxs.net/signup/create/ Of course, if you are in APNIC area it is much wiser to use a broker from that area, see http://www.sixxs.net/t

Re: IPv6 kindergarten

2006-07-11 Thread Jeroen Massar
On Tue, 2006-07-11 at 17:54 +1000, Rod.. Whitworth wrote: > Absolute beginner at practical use of IPv6. Reading man pages and > tutorials and presentations. Now for a bit of hands-on to make sure I'm > not storing inaccurate concepts by misinterpreting something so it > won't work in practice. > >

Re: IPv6 kindergarten

2006-07-11 Thread Jeroen Massar
On Tue, 2006-07-11 at 11:03 +0200, Peter Philipp wrote: > On Tue, Jul 11, 2006 at 10:22:09AM +0200, Claudio Jeker wrote: > > > inet6 fe80::201:80ff:fe0f:6683%rl0 prefixlen 64 scopeid 0x1 > ^^^ > > Because IPv6 is a broken and

Re: BSD kernel going to be included in University

2006-07-12 Thread Jeroen Massar
On Wed, 2006-07-12 at 10:12 +0530, Siju George wrote: > Hi, > > One of the Universities in India is going to include teaching the BSD > kernel in their syllabus. > Unfortunately this has been met with quite irrational opposition from > some Linux Junkies ( dirty politics ). Inorder to compile bette

Re: IPv6 routing

2008-11-05 Thread Jeroen Massar
Michael wrote: > Hi, > > I've got trouble adding a IPv6 route to the routing table. Looked at the > man pages and searched the web but that didn't help. > > I've got a setup like this > > [ISP A]--- >|---[router] > [ISP B]--- > > [ISP A] and [ISP B] are ALIX boxes and [router] is anothe

Re: ipv6.undeadly.org

2008-06-16 Thread Jeroen Massar
Sevan / Venture37 wrote: > ipv6.undeadly.org doesn't resolve, is the site not offered via IPv6 anymore?? www.undeadly.org2001:4978:129::1 216.194.67.89 Works like a charm. Greets, Jeroen [demime 1.01d removed an attachment of type application/pgp-signature whic

Re: Intel Xeon 64 Bit

2008-07-20 Thread Jeroen Massar
John Nietzsche wrote: > Dear gentleman, > > i am planning to install openbsd on a 64 bit intel dual core server. > But, i believe that openbsd plataform i386 runs only on 32 bit mode. > Which plataform should i choose from http://www.openbsd.org/plat.html > ? http://www.openbsd.org/amd64.html Whi

Re: Letter to OLPC

2006-10-10 Thread Jeroen Massar
Daniel Ouellet wrote: [..] > Let me put it better then. I use their GPL part here ONLY to show how > more ridiculous the answer was and oppose to what you say, they wrote > and quote "A GPL Linux device driver for the Marvell wireless chip..." > and then at the same time, they say they can't releas

Re: OpenBSD hoodies

2006-11-11 Thread Jeroen Massar
Damian Wiest wrote: [..] > I'm hoping I won't get scolded for mentioning this: http://bsd.ee/~olev/ If you spend 770+ hours on that, I don't think anybody will even try to make an argument with you ;) Looks really cool! Greets, Jeroen [demime 1.01d removed an attachment of type application/pgp-