Re: Security Patch Announcements

On Tuesday, May 1, 2012 18:36 CEST, Martin SchrC6der wrote: > 2012/5/1 llemike...@aol.com : > > security-announce > > This list is not used. > > > Did I miss something? Was it announced on another list? > > This has been discussed before: Patches are not announced. But citing the 5.1 Announce E-

problem with multicast on OpenBSD

Hi, I got no answer on the ports@ list, therefore I hope someone here has an idea. I am having difficulties to get multicast communication running on the heartbeat (http://www.linux-ha.org) port. When I configure it for multicast and startup the cluster node, I see the following in /var/log/mes

Re: problem with multicast on OpenBSD

Stuart Henderson <[EMAIL PROTECTED]> wrote: > On 2007/10/26 10:23, Sebastian Reitenbach wrote: > > I got no answer on the ports@ list, > > Yes, you did. http://marc.info/?l=openbsd-ports&m=119330454825541&w=2 > argh, now I found the mail in my ports@ folder too.

boot old Indy with OpenBSD?

Hi, as I read on sgi.html that the SGI port will run on e.g R4000 processors and up. I have an old Indy, not listed under the supported devices, but I wanted to try to boot the bsd.rd via network. I got a netbsd installation image booted via network. NetBSD provides an image in ecoff format.

Re: boot old Indy with OpenBSD?

Miod Vallat <[EMAIL PROTECTED]> wrote: > > First, objcopy does not provide the target ecoff-littlemips. It took me a > > while to get objcopy reconfigured on sparc64 and on i386. On sparc64 objcopy > > says it is unable to change endianness, therefore I tried on i386 too, but > > there objco

Re: boot old Indy with OpenBSD?

Hi, just a quick update. I got a ecoff boot image yesterday. Unfortunately it was stripped, and the machine was unable to relocate. I hope to get another one. sebastian "Sebastian Reitenbach" <[EMAIL PROTECTED]> wrote: > Miod Vallat <[EMAIL PROTECTED]> wrote: >

OT: travel to opencon from berlin

Hi, I'd like to take the train to opencon in venice, starting from somewhere near berlin. In case there is someone else going by train, let me know, maybe we can take the same. I haven't booked anything yet, but want to do so this week. Let me know either here or offlist. thanks Sebastian

getopt(3) differences OpenBSD/GNU

Hi, I run into troubles with getopt(3). the test program below shows the problem. It produces different output on Linux and OpenBSD, when it is called like this on Linux it looks like this: ./a.out asdf -n option char: 110, n on OpenBSD, getopt returns -1 and no output is shown. what would be

Re: getopt(3) differences OpenBSD/GNU

Hi, "Pierre Riteau" <[EMAIL PROTECTED]> wrote: > On Jan 16, 2008 10:35 PM, Sebastian Reitenbach > <[EMAIL PROTECTED]> wrote: > > Hi, > > > > I run into troubles with getopt(3). the test program below shows the > > problem. It produces differen

problems with hoststated and relayd

Hi, this is the first time I play around with hoststated/relayd. I have a stateful web application, and try to use hoststated/relayd in front of it. Because the application is stateful, the client has to be redirected to the same instance for the session lifetime. The session id is encoded as GET

Re: problems with hoststated and relayd

Hi, Reyk Floeter <[EMAIL PROTECTED]> wrote: > On Mon, Mar 03, 2008 at 10:29:30AM +0100, Wijnand Wiersma wrote: > > Sebastian Reitenbach wrote: > > > > > > > > Also a http redirect did not work. I get a timeout in the browser. With > > >tcpdump

Re: problems with hoststated and relayd

ch thing in the app I want to use, at least not that I am aware of, but I think the ordinary http check is ok for now. Sebastian > > reyk > > On Mon, Mar 03, 2008 at 07:45:00AM +0100, Sebastian Reitenbach wrote: > > Hi, > > > > this is the first time I play around wi

Re: problems with hoststated and relayd

ENERIC.MP the system is from the same download. Sebastian > > On Mon, Mar 03, 2008 at 07:37:53PM +0100, Sebastian Reitenbach wrote: > > Reyk Floeter <[EMAIL PROTECTED]> wrote: > > > hi! > > > > > > it tested your config and it works fine

problem with ipsec

Hi, in /etc/ipsec.conf I have the following configured: ike active esp from 192.168.14.12/24 to 172.22.34.0/16 \ local $our_gw peer $remote1_gw \ main auth hmac-sha2-256 enc 3des group grp2 \ quick auth hmac-sha2-256 enc aes group modp1024 \ psk "AKey" ike active esp

Re: problem with ipsec

"Sebastian Reitenbach" <[EMAIL PROTECTED]> wrote: > Hi, > > in /etc/ipsec.conf I have the following configured: > > ike active esp from 192.168.14.12/24 to 172.22.34.0/16 \ >local $our_gw peer $remote1_gw \ >main auth hmac-sha2-256 enc 3des

problem to chroot ftp users

Hi all, I try to setup the ftpd and to have chrooted users. 1. according to the ftpd man page, the users are in the password database, have a password and ksh as shell 2. their login name is not in /etc/ftpusers 3. their login name is in /etc/ftpchroot when I start the ftpd with -US the use

Re: problem to chroot ftp users

Hi, Otto Moerbeek <[EMAIL PROTECTED]> wrote: > On Fri, 8 Dec 2006, Sebastian Reitenbach wrote: > > > Hi all, > > > > I try to setup the ftpd and to have chrooted users. > > > > 1. according to the ftpd man page, the users are in the password databa

Re: problem to chroot ftp users

Hi, thanks for your answer, but I still have no luck. > > I have the same problem on two servers, OpenBSD 4.0 and 3.9. > > And I do it on both ... > ... but differently: > > ftpd_flags="-DllUS" > Their HOME is where I want to chroot them > Their shell is /usr/bin/passwd (to change the passwd and

Re: problem to chroot ftp users

[EMAIL PROTECTED] wrote: > On Fri, 08 Dec 2006 12:24:48 +0100, "Sebastian Reitenbach" <[EMAIL PROTECTED]> wrote: > > I thought that, after reading ftpd(8), and therefore I have the user in > > /etc/ftpchroot. > > > > I have the same problem on tw

Re: problem to chroot ftp users

Hi, > > Hmm, look for some funny chars, missing newlines or spurious > whitespace in ftpchroot: > > vis -tl /etc/ftpchroot Thanks for the hint, I have done that, but everything looks good, tried with an empty newline at the end, and with the last user at the last line, but without a differ

Re: problem to chroot ftp users

Hi, > Hmm, look for some funny chars, missing newlines or spurious > whitespace in ftpchroot: > > vis -tl /etc/ftpchroot > yes, after some more fiddling, I checked again, and there were trailing whitespaces behind the user names, on both hosts. removing them, fixed the problem. I did not e

two servers (4.0 and 3.9) constantly keep freezing

Hi list, I have two servers, one running 4.0 and one with 3.9, they are used as web servers, with a mysql database running on them. Both are more or less idle, but I have seem these messages in /var/log/messages on both servers: bsd: uvm_mapent_alloc: out of static map entries I found this thr

Re: two servers (4.0 and 3.9) constantly keep freezing

Hi Tico, Pedro, > have time to debug the issue since it was a production box, so I just > changed the /usr/src/sys/uvm/uvm_map.h KMAP_ENT #define to be 4000 > instead of 1000, recompiled the kernel, and also added crontab entries > to stop and start most of the daemons running on that machine

isakmpd Default main: select: Bad file descriptor

Hi list, I try to setup ipsec with isakmpd -K and ipsecctl on a OpenBSD 4.0 host. I had it running on friday, using the following configuration: ike active esp from 192.168.100.0/24 to 192.168.101.0/24 \ local 24.24.24.24 peer 42.173.16.1 \ main auth hmac-md5 enc aes group grp2 \

Re: isakmpd Default main: select: Bad file descriptor

Hi, > > > > ike active esp from 192.168.100.0/24 to 192.168.101.0/24 \ > > local 24.24.24.24 peer 42.173.16.1 \ > > main auth hmac-md5 enc aes group grp2 \ > > quick auth hmac-md5 enc aes group grp2 \ > > psk MySekret > I opened a bug when the symetric encryptin is

problems with reply-to and carped firewall

Hi list, I have a carped firewall cluster which is connected to the internet via a cable interface, and one dsl interface, which is used as the default route. The cable IP address is static, and the dsl IP address is dynamic. On the static IP address the traffic is redirected into the DMZ. The

Re: problems with reply-to and carped firewall

Hi, "Sebastian Reitenbach" <[EMAIL PROTECTED]> wrote: > Hi list, > > I have a carped firewall cluster which is connected to the internet via a cable > interface, > and one dsl interface, which is used as the default route. The cable IP address > is st

problems with reply-to and carped firewall

Hi list, again with wrapped lines. sorry for the first one... I have a carped firewall cluster which is connected to the internet via a cable interface, and one dsl interface, which is used as the default route. The cable IP address is static, and the dsl IP address is dynamic. On the static IP ad

reverse ftp-proxy and reply-to?

Hi list, I use ftp-proxy on my firewall as a reverse proxy for a host on the dmz. The incoming connections come in on one of the the external interfaces, which is not the default gateway of the firewall. Therefore I use reply-to statements on the pass in rules to make sure the answer packets are l

ipsec between openbsd 4.0 and checkpoint

Hi list, I have a problem to setup an ipsec tunnel between my openbsd box and a checkpoint firewall. Our Gateway IP: 123.123.123.123 Our Network behind the Gate: 192.168.100.0/24 Remote Gateway IP address: 42.173.16.1 Remote VPN Domain: 42.173.128.0/20 IKE Phase 1: 3DES/MD5 - Group 2 (1024bit) -

ISDN PRI cards on openbsd?

Hi, does there exist any ISDN PRI card that is supported by OpenBSD and can be used with Asterisk? As far as I can read here: http://www.voip-info.org/wiki/index.php?page=Asterisk+OpenBSD , none is supported up to OpenBSD 3.8. I have seen, that there are zaptel drivers available on FreeBSD, but

Re: ISDN PRI cards on openbsd?

Hi all, Stuart Henderson <[EMAIL PROTECTED]> wrote: > On 2007/04/10 12:23, Sebastian Reitenbach wrote: > > does there exist any ISDN PRI card that is supported by OpenBSD and can be > > used with Asterisk? > > No, you'll need something else to support physical

tftp-proxy without nat?

Hi, I have an OpenBSD 4.0 firewall between two networks. The traffic between these two is routed. when I take a look at the manual pages, then it looks like the tftp-proxy only useful for connections that do NAT, where the client is in a private network, and the server has a public IP. Without

questions regarding ipsec tunnel

Hi all, I have a problem to get a stable IPsec connection running from my OpenBSD 4.1 host to some kind of VPN appliance. ike active esp from 192.168.27.0/24 to 192.168.0.0/16 \ local 223.150.201.44 peer 34.123.15.43 \ main auth hmac-md5 enc 3des group grp2 \ quick auth hmac

Re: questions regarding ipsec tunnel

Hi, Stuart Henderson <[EMAIL PROTECTED]> wrote: > On 2007/06/15 15:39, Claer wrote: > > There is a mistake in the main mode declaration. Your group cannot be > > set to "grp2". You should use modp1024 as in the quick mode statement. > > It's not that, either form is actually permitted. > after

software watchdog

Hi, is there sth. like a software watchdog for OpenBSD available? searching the manuals or in the ports does not show up anything. In the ddb manual I read I can drop into ddb when I press Ctrl+Alt+DEL, do I can drop into ddb programatically without the need of a human entering this key combin

problem with ipsec tunnel between pix and openbsd

Hi, I setup a tunnel between a pix and an openbsd isakmpd to connect two networks behind each tunnel endpoint. pinging through the tunnel from both sides works, for the first 15 minutes. then the ping stops working. When I recreate the tunnel, then the ping starts to work again. I start isakmpd

Re: problem with ipsec tunnel between pix and openbsd

Hi, I forgot to mention, I am running OpenBSD 4.1 stable. Sebastian "Sebastian Reitenbach" <[EMAIL PROTECTED]> wrote: > Hi, > > I setup a tunnel between a pix and an openbsd isakmpd to > connect two networks behind each tunnel endpoint. > pinging through the tu

Re: problem with ipsec tunnel between pix and openbsd

Hi, [EMAIL PROTECTED] wrote: > > It will be helpful, if you can give the corresponding PIX configuration as well. > your ipsecctl.conf seems to be good! Can you give us the output of ipsecctl -vv > -sa and tail -f /var/log/{daemon, messages} > just got the relevant part of the PIX config, so

Re: problem with ipsec tunnel between pix and openbsd

Hi, > > > > > > I setup a tunnel between a pix and an openbsd isakmpd to > > > connect two networks behind each tunnel endpoint. > > > pinging through the tunnel from both sides works, for > > > the first 15 minutes. then the ping stops working. > > > When I recreate the tunnel, then the ping st

misc@openbsd.org

__ Verschicken Sie romantische, coole und witzige Bilder per SMS! Jetzt bei WEB.DE FreeMail: http://f.web.de/?mc=021193

re0: eeprom autoload timeout

Hi, I have a problem with re0 Realtek 8169 Network card and OpenBSD 3.9. When OpenBSD starts up, it recognizes the card, I can configure IP address... But ifconfig -m re0 shows: none as the only available media option. the part of dmesg where the re0 is initialized: re0 at pci0 dev 13 function

carp with hosts in different vlans

Hi, I have two root servers @hetzner here in germany and thought I can setup carp between them. Both hosts are in the same subnet, the third IP address, used for carp, too. Both hosts are in different VLAN's. to reach each other I have to set a host route via the default gateway to reach the ot

Re: carp with hosts in different vlans

Hi, sorry for late reply, unfortunately I was a bit off... > On 2006/06/23 12:53, Sebastian Reitenbach wrote: >> Both hosts are in different VLAN's. to reach each other >> I have to set a host route via the default gateway to reach >> the other system. > >

relayd and ftp

Hi, I want to load balance an ftp server, so I thought about setting up relayd in front of it. but due to the nature of the ftp protocol, using separate connection for control and data, therefore I expect some trouble. I found some sites, mentioning that ftp will not work with relayd, but other

2 questions regarding carp and dhcp

Hello everybody, two questions regarding carp and dhcp, one running the firewall as a dhcp client, and one running as server. I want to provide dhcp from the firewall. Therefore I did setup the dhcp server on both hosts of the cluster. The firewall is configured as master/backup mode. The back

strange problem with carp

Hello everybody, I asked about one or two weeks ago regarding problems of carp and dhcp. After some more investigation, the dhcpd doesn't seem to be the problem. That's the situation: I've two firewalls, running as master/slave pair. One of my uplinks is a cable connection. Due to the fact that t

slow network performance behind cisco

Hello everybody, I'm experiencing a very bad network performance, when I try to connect to a remote server. The point-to-point connection is a E3 line, with 34MBit/s, with a cisco 2800 router on each side, terminating the point-to-point connection. These cisco routers have two gigabit interfaces,

Re: slow network performance behind cisco

Hi, > -Urspr|ngliche Nachricht- > Von: "Otto Moerbeek" <[EMAIL PROTECTED]> > Gesendet: 24.10.08 13:11:39 > An: Sebastian Reitenbach <[EMAIL PROTECTED]> > CC: misc@openbsd.org > Betreff: Re: slow network performance behind cisco > On Fri,

Re: slow network performance behind cisco

> -Urspr|ngliche Nachricht- > Von: "Lars Noodin" <[EMAIL PROTECTED]> > Gesendet: 24.10.08 17:34:03 > An: Sebastian Reitenbach <[EMAIL PROTECTED]> > CC: misc@openbsd.org > Betreff: Re: slow network performance behind cisco > Sebastian Reitenba

SGI C-BRICK Origin Onyx R12000

Hi, I just bought such a machine on ebay. The seller has a second one available. Just in case there is an OpenBSD developer interested in getting such a box into the list of supported SGI hardware, I'd buy a second one, and would offer to donate it to the developer in question. I'd prefer to de

bundling the speed of two ADSL lines with OpenBSD

Hi, I'd like to know, whether it is possible to bundle two ADSL interfaces, just like trunking ethernet cards. I know it is not that hard to use two or more lines for outgoing traffic, and just route source or destination based via pf. I'd need to the doubled speed for incoming traffic. The ADS

Re: bundling the speed of two ADSL lines with OpenBSD

Hi, Stuart Henderson <[EMAIL PROTECTED]> wrote: > On 2008-07-03, Sebastian Reitenbach <[EMAIL PROTECTED]> wrote: > > I'd need to the doubled speed for incoming traffic. The ADSL lines would be > > from the same ISP, and the IP addresses will be static. >

Re: bundling the speed of two ADSL lines with OpenBSD

VPN tunnels between the two endpoints, and on my side, one tunnel per DSL line, and then route the traffic via some kind of multipath routing, what I need to read up, between the two hosts. Or maybe I could just add a trunk interface on top of tun0 and tun1 interfaces? thanks Sebastian > > HT

question regarding multipath routing

Hi, I have a question regarding equal-cost multipath routing. Here is what I want to do: couple two 16 MBit DSL lines, as I'd need the speed of both combined. Here on my side, a FTP server will run, and on the other side, a FTP client, doing up to 20 connections in parallel. Between the ftp clien

Re: question regarding multipath routing

Hi Stuart, Stuart Henderson <[EMAIL PROTECTED]> wrote: > On 2008-07-07, Sebastian Reitenbach <[EMAIL PROTECTED]> wrote: > > I have a question regarding equal-cost multipath routing. > > oh damn, forgot about that when I suggested mpath :( of course, > that's

ppp -foreground fails with NO CARRIER, manually dialling works

Hi all, I have a problem to establish a connection with ppp automatically, or from commndline. below is my ppp.conf file. with this file in place I can dial manually using ppp: # ppp Working in interactive mode Warning: iface rm: ioctl(SIOCDIFADDR_IN6, fe80:a::240:5ff:feaf:4c5f/64): Can't a

Re: avoiding INTEL

Dear Mr. Majid Awad, I am working here in Germany for a satellite based remote sensing corporation. Well, we won't go buy thousands of desktops or notebooks, as we do not need that many of them, but we are just in the phase of buying our image processing cluster hardware. I just wanted to let y

noisy sound output from SPARCstation 5

Hi, out of curiosity I connected some active PC speakers to my SS5, but so far, I was not yet successful to play something good. I made some minimal tests using an au file downloaded from here: http://www-mmsp.ece.mcgill.ca/documents/AudioFormats/AU/Samples/AFsp/M1F1-int8-AFsp.au playing this o

Re: whiteboard over the net

On Tuesday 30 March 2010 02:29:06 pm Bryan wrote: > On 3/30/2010 2:54 AM, Donald Cooley wrote: > > On 3/29/10, Marco Peereboom wrote: > >> I have been looking for some sort of whiteboard like software that runs > >> over the net. Anyone know a name of a port? > > > > "Coccinella is a Jabber chat

Re: Libretto 70CT Debugging

Hi, with all this libretto thread, I backed out my old Libretto 60, but I can only confirm that it also has the same problem: booting hd0a:/bsd: 8254588+118 [61+372400+358030]=0x99e480 entry point at 0x200120 [ using 730908 bytes of bsd ELF symbol table ] Copyright (c) 1982, 1986, 1989, 1991

Re: laptop HP 530 - acpitz3: Critical temperature, shutting down

Jiri B. wrote: On Thu, 22 Jul 2010 10:13:01 +0200 Paolo Aglialoro wrote: Just in case Personally I'd open the machine and clean all its dust with compressed air some old laptops sometimes have "geological layers" of dust, especially around the cpu fan. Even if this should reveal it

Re: "Hardening" halt process

Armando wrote: Good evening everyone, I'm more or less a newbie in the OpenBSD world and I'm trying to prepare three virtual OpenBSD in my small home-network. The question I'd like to ask is simple: is it possible to issue the halt command using an unprivileged user? This because I have to set

X stays black

Hi, in order to prepare for p2k10 I reinstalled my notebook with latest snapshot, but now the X screen stays black. I don't get the usual grey screen with the blue login prompt. The notebook runs i386, the snapshot is from today, 21.10, only the X tarballs are from 19.10. Before that, I had a snap

Re: X stays black

Sebastian Reitenbach wrote: > Hi, > > in order to prepare for p2k10 I reinstalled my notebook with latest > snapshot, but now the X screen stays black. I don't get the usual grey > screen with the blue login prompt. The notebook runs i386, the snapshot > is from today, 21.

Re: The choice was: Sun V20z. And Now?

Felipe Mesquita de Oliveira wrote: > :) > > Actually the air isn't hot... Even in the front dysplay, navigating it, the > temps are really low... around 28c... > > I'll check the BIOS version tonight... Of course I don't wanna burn the > CPU's, but the more fan works (maybe, un-necessarily), the m

Re: Troubles compiling 4.8-stable userland on amd64

On Wednesday 24 November 2010 08:07:49 am Don Jackson wrote: > OK, removing DESTDIR from my "build-userland" shell script fixed the > problem. > > To be specific, the FAQ says: > > Make sure all the appropriate directories are created. > # cd /usr/src/etc && env DESTDIR=/ make distrib-dirs He

Re: Can't build SOPE from ports.

Hi, I don't know for what you need sope, maybe for sogo? I just updated sope in cvs to 1.3.4, and imported www/sogo. However, the problem will probably persist with the new version, since in the configure script, nothing changed. And it works for me on i386, but I see you are on amd64, which I do

Re: How to open PDF that requires Adobe 9

On Tuesday 07 December 2010 08:40:01 am Clint Pachl wrote: > Anthony Bentley wrote: > >> This happens when there are multiple PDFs embedded in a single PDF file. > >> I remember reading a Ghostscript bug about this (could probably find it > >> again if I had the exact error message), but unfortunat

<    1   2