Even and Odd numbered OpenBSD versions

Hello, just a simple question. We have here at work a old hand at openbsd and he says he only uses openbsd versions that are even numbered. (3.8, 4.0, 4.2, 4.4 etc...) I am not sure why, did not have a chance to ask him. I believe that you should use the latest version available, but what doe

Re: Narcicism?

Man, youth is really wasted on the young. On Dec 1, 2011 11:04 AM, "Rares Aioanei" wrote: > On 12/01/2011 05:39 PM, David Coppa wrote: > >> >> See the subject: "Narcicism" >> >> And, btw, the correct spelling is "Narcissism": as a guru, this is >> something you should already have known ;) >>

ipsec tunnel speeds

Can anyone please let me know what kind of through-put I can expect from one client machine to another through an openbsd ipsec tunnel? Thanks, Mark

Re: ipsec tunnel speeds

asure to really know. > > // Johan > On Jun 21, 2012 8:05 PM, "Michael Lechtermann" > wrote: > >> On 21.06.12 19:27, Mark Romer wrote: >> > Can anyone please let me know what kind of through-put I can expect from >> > one client machine to another th

Re: ipsec tunnel speeds

Great question Ted Does anyone know the answer? Thanks Mark On Jun 22, 2012 12:58 PM, "Ted Unangst" wrote: > On Fri, Jun 22, 2012 at 12:52, Ryan McBride wrote: > > > 550Mb/s with aes-128-gcm (requires AES-NI and amd64) on > > hw.model=Intel(R) Xeon(R) CPU E5649 @ 2.53GHz > > hw.vendor=HP > > hw.p

Re: OpenBSD 4.9 pre-orders

Sweet, I am in for one of those hoodies... Thanks Theo and all the Dev's for a great product (refering to openbsd) Mark On Wed, Mar 16, 2011 at 9:45 AM, Denny White wrote: > On Wed, Mar 16, 2011 at 11:14:31AM +0530, Mahesh J spoke thusly: > > OpenBSD developers have done it again > >

Re: Experiences running AIX in Qemu?

Johnny from Poland. Where did you come from, under a polish rock? On Fri, Apr 1, 2011 at 1:38 AM, Tomas Bodzar wrote: > Do you know www.ddg.gg and similar? They are offering sometimes > results for questions ;-) > > http://qemu-forum.ipi.fi/viewtopic.php?f=25&t=5078 > > If you are expecting fun

Re: OpenBSD users.

Maryland, right between DC and Baltimore. Mark On Wed, Jul 21, 2010 at 3:37 PM, kalle wrote: > Fjugesta - Sweden :)

mount /usr partition nosuid

Hello All, Sorry if it has been asked in the past, but is it ok to mount the /usr partition as nosuid? What if any default programs will that break? And also does that give me any added security benefits? Running 4.6 release generic i386 thanks, Mark

Re: mount /usr partition nosuid

nstructions are for redhat and debian, but I want to do this on openbsd.. thanks, Mark On Thu, Dec 3, 2009 at 2:26 PM, Christopher Linn wrote: > On Thu, Dec 03, 2009 at 02:08:29PM -0500, Mark Romer wrote: > > Hello All, > > Sorry if it has been asked in the past, but is it ok t

Re: mount /usr partition nosuid

uch On Thu, Dec 3, 2009 at 2:08 PM, Mark Romer wrote: > Hello All, > Sorry if it has been asked in the past, but is it ok to mount the /usr > partition as nosuid? > What if any default programs will that break? And also does that give me > any added security benefits? >

Re: mount /usr partition nosuid

Ah yes, thanks Otto ! I think I was getting confused between the named binary in /usr/sbin/ and where the bind files are chrooted under /var/named Yes, so this would already be done in openbsd. thanks, Mark On Thu, Dec 3, 2009 at 2:08 PM, Mark Romer wrote: > Hello All, > Sorry if

Re: Can be PF block skype?

Not sure if this is any good, looks like it is opensource though. http://www.lynanda.com/products/software-for-corporations/traffic-filtering/l ynanda-skype-filter Mark 2009/11/4 TomC!E! BodE>C!r > But Cisco can do it on Application layer. I'm not sure about pf, but > last time I read man

Re: Force passwordcheck in login.conf

use passwdqc it is in packages. in login.conf under default I have: :minpasswordlen=12:\ :login-tries=4:\ :passwordtries=3:\ :passwordcheck=/usr/local/libexec/passwdqc -3 12 Mark On Tue, Oct 12, 2010 at 8:46 PM, Brad Tilley wrote: > I was experimenting with a program

ipsec endpoint with multiple tunnels

Hello Misc, I was wondering if this was possible. I have our main site with a openbsd 4.7 system running ipsec in passive mode listening for connections. We currently have 1 other remote building. I have another openbsd 4.7 system there connecting to the system here. Which all works great, I am

Re: ipsec endpoint with multiple tunnels

Never Mind, I found out the answer was yes. and yes it does work well.. Mark On Fri, Oct 15, 2010 at 8:53 AM, Mark Romer wrote: > Hello Misc, > I was wondering if this was possible. I have our main site with a openbsd > 4.7 system running ipsec in passive mode listening for co

Re: password-less console-only access and ssh remote access?

I believe you can do something like this. but I see it not really making you more secure, still questionable sed s/secure/insecure/g /etc/ttys >> /tmp/temp; mv /tmp/temp /etc/ttys Mark On Fri, Oct 22, 2010 at 3:56 PM, Jay K wrote: > > Turn off sudo and don't put users you don't want t