Slashdot Mirror

darkuncle writes: "While doing some research into setting up an OpenBSD box as a firewall/NAT box/DHCP server for my home network, I ran across a cool writeup at 2600 Australia about how to implement IPv6 on OpenBSD. For anybody that's been thinking about exploring IPv6, this article (along with the FAQ linked above) provides some good starting points. "

Fans of the OpenBSD artwork (like myself) can now get two posters with the infamous blowfish. The first is armed to the gills, while the second includes the OpenSSHeriff. Get thee to the order page and spend some money.

Fans of the OpenBSD artwork (like myself) can now get two posters with the infamous blowfish. The first is armed to the gills, while the second includes the OpenSSHeriff. Get thee to the order page and spend some money.

Fans of the OpenBSD artwork (like myself) can now get two posters with the infamous blowfish. The first is armed to the gills, while the second includes the OpenSSHeriff. Get thee to the order page and spend some money.

Fans of the OpenBSD artwork (like myself) can now get two posters with the infamous blowfish. The first is armed to the gills, while the second includes the OpenSSHeriff. Get thee to the order page and spend some money.

Bob Bruce writes: "There will be a BSD BOF (Birds Of a Feather meeting) at Spring Comdex, on Wednesday April 19 from 5:30 p.m. to 7:30 p.m. The BOF is at the Essex Inn at Grant Park, Chicago. You do not need to be a Comdex attendee to come along, everyone is welcome." Read on for more details.

Bob continues: "There will be speakers from BSD/OS, Darwin, FreeBSD, NetBSD, and OpenBSD. This is a great opportunity to meet some of the leaders in the BSD community. There will be plenty of technical information available. Whether you are a BSD expert, a newbie, or just thinking of switching over, you can get your questions answered."

"Several BSD celebrities will be attending, including Chris Coleman, an editor of Daemonnews, and cartoonist Susannah Coleman, creator of Darby Daemon, who will be signing prints."

"We will have installation CDROMs, BSD paraphernalia, and free food and beer. We will even have free Daemon horns!"

"This BOF is being co-sponsored by BSDi and Daemon News."

As seen on the OpenBSD -announce list, OpenBSD now has hardware cryptographic support to boost IPSEC performance. "Currently, only cards using the HiFn 7751 chip can be used. This Hifn chip is an IPSEC-oriented DES/3DES and SHA1/MD5 hmac engine; ie. only symmetric cryptography..&nbsp.we are getting 63.12Mb/s 3des/sha1 ESP IPSEC. That's documented as the top performance the chip can provide. In other words, we're pretty damn impressed at ourselves." Read on for more from the message, or go straight to the OpenBSD Hardware Crypto page.

"Further work will now happen. We wish to support other products (ie. IRE, Bluesteelnet, perhaps even 3COM or PCC-ISES if they would open their minds). Some crypto chip vendors are being extremely friendly to us. If anyone wants to help write drivers, get in touch."

We also hope to add more parts to our cryptography framework so that it can supply RSA/DSA type operations for chips that support that, so that OpenSSL can use the framework, and thus enhancing everything from https to ssh performance. We have grand schemes in mind."

"If you order a card from www.powercrypt.com, tell them you intend to use it with OpenBSD. I have heard rumours they are allowed to export it."

"Most of this work was done by Jason Wright and Angelos Keromytis."

As seen on the OpenBSD -announce list, OpenBSD now has hardware cryptographic support to boost IPSEC performance. "Currently, only cards using the HiFn 7751 chip can be used. This Hifn chip is an IPSEC-oriented DES/3DES and SHA1/MD5 hmac engine; ie. only symmetric cryptography..&nbsp.we are getting 63.12Mb/s 3des/sha1 ESP IPSEC. That's documented as the top performance the chip can provide. In other words, we're pretty damn impressed at ourselves." Read on for more from the message, or go straight to the OpenBSD Hardware Crypto page.

"Further work will now happen. We wish to support other products (ie. IRE, Bluesteelnet, perhaps even 3COM or PCC-ISES if they would open their minds). Some crypto chip vendors are being extremely friendly to us. If anyone wants to help write drivers, get in touch."

We also hope to add more parts to our cryptography framework so that it can supply RSA/DSA type operations for chips that support that, so that OpenSSL can use the framework, and thus enhancing everything from https to ssh performance. We have grand schemes in mind."

"If you order a card from www.powercrypt.com, tell them you intend to use it with OpenBSD. I have heard rumours they are allowed to export it."

"Most of this work was done by Jason Wright and Angelos Keromytis."

vrkid writes: "Found this on OpenBSD Journal: OpenBSD just moved up a notch in its minor number and is now at 7. The first beta release of 2.7 is out. For people with strong stomachs, a habit of banging the head against the wall and a love for testing other's software: Download, install and send bug reports. "

Duke of URL writes: "Boardwatch interviewed OpenBSD contributor Louis Bertrand. It's an excellent article about OpenBSD's niche and mission. They discussed the continued code audit, OpenSSH, and future version plans, including SMP development, ports rework, and continued integration of IPv6. Journalist Jeffrey Carl does a good job of pointing out OpenBSD's strengths and tradeoffs."

sekure writes "I was just on OpenBSD.org, and as I was reading the wanted hardware page I noticed that the OpenBSD project needed more Alpha gear, and if they don't get what they need, they won't ship OpenBSD/alpha on the 2.7 CD-ROM. I don't know what everyone else thinks, but I think it would be a shame. I know I'm going to talk to my boss about lending (or maybe even giving?) an Alpha to the OpenBSD project. Maybe people have old (or new) Alpha's kicking around they don't use anymore, or maybe there are some multi[million|billion]aires that wouldn't mind donating some fresh new Alpha's. What do you think?"

Louis Bertrand noted that in another win for free software, OpenBSD can now be found in the guts of the Stallion ePipe, a dial-up network gateway, a little like the IBM InterJet we mentioned a few days ago. Playing to OpenBSD's strengths, the core processor is a Motorola ColdFire 5307 VL-RISC chip, and the encryption is provided by OpenBSD's built-in encryption code. They've even written a cooperative press release about it, complete with OpenBSD's very cool blowfish.

Silmaril writes "OpenBSD started a CVS branch to add SMP to the kernel." Meanwhile, over on the NetBSD side of the fence, Bill Sommerfeld has committed his i386 MP spinup work. See both those links for more details.

Python writes "OpenBSD have issued a security advisory describing a buffer overflow problem in the RSA crypto reference implementation. RSA crypto is patented in the US (expiring Sept 20, 2000), and for non-commercial use, RSA Inc. requires the use of their reference implementation (called RSAREF2). So not only are software patents a bad thing - they can even force you into using a crypro reference implementation with known security bugs..." It's worth noting that this is not just an OpenBSD issue. Anything that uses the RSA reference implementation will have the problem.

Lots of you wrote in with this -- we've been holding back at Theo's request until the CDs were available, but OpenBSD 2.6 is now released and available from the FTP sites, or by ordering CDs. There are lots of technical enhancements to this release (which are detailed below), and if they don't grab you, check out the very cool CD cover art.

The complete list of changes to 2.6 is too long to list here. However, some of the highlights are:

• Add ssh (OpenSSH) to the base system
• Reliability patches for the PowerPC port
• Improved support for ext2fs
• Perl 5.005_03 in the base system
• Support Joliet filesystems
• More security fixes
• USB support
• Fixes to the ATAPI support
• Speed up the install process
• Many manual page updates

and much more.

Lots of you wrote in with this -- we've been holding back at Theo's request until the CDs were available, but OpenBSD 2.6 is now released and available from the FTP sites, or by ordering CDs. There are lots of technical enhancements to this release (which are detailed below), and if they don't grab you, check out the very cool CD cover art.

The complete list of changes to 2.6 is too long to list here. However, some of the highlights are:

• Add ssh (OpenSSH) to the base system
• Reliability patches for the PowerPC port
• Improved support for ext2fs
• Perl 5.005_03 in the base system
• Support Joliet filesystems
• More security fixes
• USB support
• Fixes to the ATAPI support
• Speed up the install process
• Many manual page updates

and much more.

Lots of you wrote in with this -- we've been holding back at Theo's request until the CDs were available, but OpenBSD 2.6 is now released and available from the FTP sites, or by ordering CDs. There are lots of technical enhancements to this release (which are detailed below), and if they don't grab you, check out the very cool CD cover art.

The complete list of changes to 2.6 is too long to list here. However, some of the highlights are:

• Add ssh (OpenSSH) to the base system
• Reliability patches for the PowerPC port
• Improved support for ext2fs
• Perl 5.005_03 in the base system
• Support Joliet filesystems
• More security fixes
• USB support
• Fixes to the ATAPI support
• Speed up the install process
• Many manual page updates

and much more.

Lots of you wrote in with this -- we've been holding back at Theo's request until the CDs were available, but OpenBSD 2.6 is now released and available from the FTP sites, or by ordering CDs. There are lots of technical enhancements to this release (which are detailed below), and if they don't grab you, check out the very cool CD cover art.

The complete list of changes to 2.6 is too long to list here. However, some of the highlights are:

• Add ssh (OpenSSH) to the base system
• Reliability patches for the PowerPC port
• Improved support for ext2fs
• Perl 5.005_03 in the base system
• Support Joliet filesystems
• More security fixes
• USB support
• Fixes to the ATAPI support
• Speed up the install process
• Many manual page updates

and much more.

Lots of you wrote in with this -- we've been holding back at Theo's request until the CDs were available, but OpenBSD 2.6 is now released and available from the FTP sites, or by ordering CDs. There are lots of technical enhancements to this release (which are detailed below), and if they don't grab you, check out the very cool CD cover art.

The complete list of changes to 2.6 is too long to list here. However, some of the highlights are:

• Add ssh (OpenSSH) to the base system
• Reliability patches for the PowerPC port
• Improved support for ext2fs
• Perl 5.005_03 in the base system
• Support Joliet filesystems
• More security fixes
• USB support
• Fixes to the ATAPI support
• Speed up the install process
• Many manual page updates

and much more.

nicedream writes "Linux.com is running a feature on BSD, and the latest installment profiles one guy's experience with OpenBSD. Haven't read a thorough review of OpenBSD ever, so it was nice to check this out.

wozz writes "Kurt Seifried, author of the Linux Administrator's Security Guide, has written good article which discusses OpenBSD and demonstrates how to set up a simple NAT/IPF gateway box."

Mr. Mot writes (from LWN) "OpenSSH: an Open Source Secure Shell program has been integrated into the OpenBSD operating system."

One of the many Anonymous Cowards let me know that OpenBSD has received a donation of equipment worth $10,000 from Network Security Technologies and Network Security Wizards. This is obviously excellent news for the OpenBSD team, and is yet more evidence of the seriousness with which the wider commercial world is treating free software.

Marcos Lopez writes "Good article on Theo de Raadt and his developement of the OpenBSD system and why he is based in Canada due to crypto laws in the US. Well written article/interview, was printed todays in the Calgary Herald, Theo's home town. " A generalist overview of OpenBSD and its security-conscious direction.

smkndrkn asks: "I'm looking to change our firewall config at work from a dual-homed host architecture to an OpenBSD based Screened Subnet Architecture, however I have a PPTP (yes I know it is horrible but our customer isn't changing to IPSec for another couple months )VPN that needs to work. I've looked at www.OpenBSD.org but cannot find much in the way of documentation ( other than the FAQ ). My current Linux firewall does this fine. I'm looking to have the Exterior router setup with Slackware Linux and the interior router setup with OpenBSD for more security ( and a diversity of architectures ). I'm a little worried that the PPTP connection will not work ( Does it filter GRE? )and that possibly I'll run into other issues. Just for some additional info I need the VPN to go through both routers to get to our internal network ( where the machines that use the connection are located ). Is there another way of doing this? Say have a machine on the perimeter network connect and then allow the machines to connect to that server, which would then route their traffic over the VPN? "

Bryan Andersen asks: "I'm looking for information on securing web servers against hacking. In particular, I'm interested in securing Apache on Debian Linux and OpenBSD, but discussion on other server/OS combinations are welcome. Links to sites with good information would be greatly appreciated."

Chris Frost writes "As found on OpenBSD's website today (www.openbsd.org), "The current release of OpenBSD is 2.5 which started shipping May 19, 1999." Not sure what calendering method was used to calculate this and then post, but nonetheless OpenBSD 2.5 has been released. "

Woody writes "There is tons of stuff happening on the BSD front. The NetBSD Foundation is scheduled to release version 1.4 of their multi-platform OS tomorrow, May 12. The OpenBSD group is scheduled to release version 2.5 of their super-secure multi-platform OS on May 19. Finally, those boys over at FreeBSD are scheduled to release version 3.2 of their i386 optimized OS on or around May 15. Lots of rumblings in the BSD world! "

When I put out my call for Geek Christmas Gift ideas, I had no idea what I was in for. But after the storm of email that followed was washed away, I was left with a list of toys that any geek would be excited to give or get this year for whatever holiday it is you celebrate this time of year. Hit the link below and read the list if you're curious. Random Stuff There were a few things that were suggested, that, well, I bet Santa won't come through for them. Hemos asks for Nanites. Thats all he wants. Nanites. Somebody smack him. Nima Negahban says "I would like the beowolf cluster avalon for christmas, dont worry about it fitting it under the tree. " david yates wrote in and simply said "Half naked Princess Leia ,as Jabba's prisoner, action figure." I'm sure his mother is proud. He can have the Action Figure, I want 1976 Carrie Fisher. Games Everyone and their brother wrote in to say that Nintendo 64's and Playstations are great. And the game of choice is definitely Zelda 64. I second that motion. I suggested it to my dad as a Christmas Present. Terrible idea- now I gotta wait until xmas to find out if he got it, and if he *didn't* I gotta buy in on Dec 26. Hard as hell to find. Folks suggested other things like the original Kings Quest or Leisure Suit Larry. Prince of Persia. Commander Keen. Ultima. All those games that aren't around any more, but with their original packaging. Finding a 5.25" drive to play them with might be a tad tricky tho. Clothing It's a well known fact that its better to be clothed at least part of the time. And no self respecting geek should be without a vast array of appropriately political t-shirts to pad out your closet full of suits, jackets, and ties (cough). Daniel suggested checking out the Free BSD Mall for BSD clothing. Jonathan Moore suggested the ever popular KMFMS t-shirts for your local microsoft hater. If thats a bit to exotic for you, how about the classic that Doug Boettcher sent us: the Hack Naked shirt. Since we're mentioning all these t-shirts, we ought to mention that CopyLeft has several shirts including my Don't Fear the Penguins ones, and Slashdot ones too. Software Several folks wrote in to say that they were buying Linux CDs from any of the various places that sell them, and giving them away to the needy. I tend towards Linux Central, and in addition to them Cheap Bytes OpenBsd.org and The Linux Mall were all suggested as places where you can buy the stuff we like. Hardware By far the largest catagory for gift ideas was of course Hardware:The Gift that Costs to much. Of course, anyone would want a a Palm III- it's hard to think of a better stocking stuffer. And besides, they're practically money in the bank now that you can use them to collect automobiles of the rich and famous. But if you've already got a Pilot, James A. Hillyerd suggests a GoType keyboard as the perfect accessory. If the pilot isn't your bag, but you want to read on the road, Mahlen Morris suggested A Rocket E-Book which is basically a tablet computer that is designed to replace books You can get them here. And apparently they have some sort of deal with Barnes & Nobles so you can get content to read on it. They're pretty sweet looking- someday we'll have a wireless version with net access, then we can forget paper. But for now, this'll do.

Have trouble remembering passwords? Digital Persona sells sweet hardware that that you can use to do finger print identification. Suggested by Andrew Lepisto. The pdQ was suggested by Adam D. McKenna. Its a cel phone with an integrated Pilot. Another fairly common suggestion for geek gifts was cel service from your local provider, and a cel modem for the laptop equipped gift getter. Sean McPherson suggested a Kodak DC210+ digital camera. Saves big bucks on film, and is supposed to be supported by SANE. I'm actually planning on getting a Digital Camera before the upcoming string of conferences, and I'll probably look at this one (unless Santa already has one in his bag for me, although at $400 a pop, I highly doubt it) Steven McDonald suggests that we look at DVD RAM Drives as a new huge backup device for storing your MP3s and Porn. Oh, and legit data too.

Mike Miller sent us several suggestions including the Happy Hacking Keyboard. I played with one at ALS- they're not bad. Just as cool are the new Color Gamesboys. I suppose tetris wouldn't be vastly improved by color, but its still pretty sweet. For those with a hugeass budget, How about your very own Alpha Cluster? Obviously Jakob is a lot more hopeful for Saint Nick than I am this year *grin*. How about a vt320 Terminal? Daniel Morrison suggested it, and I think it sounds pretty cool. I had a terminal attached to one of my Linux boxes for awhile. I Let it tail log files and stuff. Kinda fun for reading documentation and stuff too. Can't afford a Multi-Head X-Server, video card, and spare monitor anyway. Plus you can run them into another room and check your email from your kitchen/dining room/bathroom.

Matthew J. Allen sent us a pricey one, but its oh so sweet: Remember those Huge Flat LCD Screens from SGI? I sure do. I wake up after erotic dreams about them. (SUBLIMINAL MESSAGE:Hey SGI: Give Rob one of those things for banner ads. You've got a spare one just sitting around, right?). Matthew also suggested an Iomega Clik Drive if you're on a more reasonable budget. Those things do look pretty sweet. Do cables piss you off? How about the gift of a tangle free workspace? Scott Donovan sent us a link to Cordless Mice and Keyboards from Logitech that will free you up for spinning on your swivel chair really fast until you fall over from getting dizzy instead of getting tangled up in your keyboard cable.

Toys By far the single most suggested toy of all was the Lego Mindstorms. The robotic legos are quite possibly the coolest toy in the history of toys. They aren't cheap, but they are oh so sweet. Else you could consider X-Files Action Figures suggested by E. Waugh. Home Entertainment and Audio Gear The Panasonic Portable DVD Theater was sent in by Joel Telling. Its a tiny portable DVD player obviously designed to make me froth at the mouth like a rabid dog. Several folks wrote in to suggest something I would like, but I wouldn't want to froth on. The Empeg Car CD Player. We've mentioned this before, and although they won't be ready for christmas, they are pretty amazing. 2.1 gigs of MP3s in a car stereo. They need a 9 gig version mounted in a home stereo component too.

Jon Jones (is that a real name? *grin*) wrote in to send a link to ADB I/O which you can use to automate your home for the ultimate in comfort and/or laziness. For the true audio junkie, how about the THX Speakers sent in by Chad R. Henry. Sure, they cost more than my car, but I bet they sound amazing. If you're on a more modest budget Cambridge SoundWorks has some slightly more reasonably priced speakers that I'm told sound awesome. Andrew Hobgood suggests checking out Panasonic SJ-MJ70 MiniDisc Player (portable). Pretty sweet if you aren't willing to chance it on the Diamond Rio (which was also one of the most common suggestions). Frankly any geek should be excited to get either. Rob Sheehy pointed out that Philips has 42 inch widescreen flat TVs that you could hang on your wall if you happen to be rich and wanna watch letterbox movies. This one has a VGA input too.

Random Terry A. Braun suggests that geeks need to get into making our own beer. Sounds like a great idea to me, although I tend to screw up toast. But if you're man enough to try it, you can get Your Own Grain Mill. Alan Mathews wrote in to suggest a A dilbert M&M dispensor McPhee's has some strange stuff, including a Punching Nun suggested by Glen Lipka Tom Berger suggested A VI Command Set Mug STriker RedWolf sent us a link to a chocolate bar shaped like a Pentuim II Chip.

Jason Grundy suggests the $6 card game Kill Dr. Lucky and a Card both from the aptly titled Cheapass.com. Rob Pelkey sent in a pair of gift ideas that are a world apart. The first is An Authentic Moon Rock and the second is a Jesse Ventura T-Shirt or Bumper Sticker. One is probably worth a little more than the other. The concept kitchen has this wierd Finger Stylus Thingee that you can use instead of a pen for some pen machines. Kinda wacky. Sent to us by Wyatt Earp.

Justin Higgins suggests that geeks should all own a copy of the Star Wars Radio Drama. Sure, it costs almost a hundred bucks, but at 15 CDs, it balances out to almost be a bargain. They ought to package it on 1 CD full of MP3s, throw a copy of the script on the disc and sell it for $20. I'd never heard of the Leatherman Wave before, but several folks emailed me to say they are cool. And then I noticed that they were actually advertising here. Shows how much attention I pay to who advertises on my own site I guess. But still several people raved about them, claiming that they're ideal for mucking around inside computer cases with. And Traci Earl sent a link to a site that makes nice Leather Cases for them.

Do you think stuffed animals are stupid? Well how about a Stuffed Plush Space Shuttle? Dave Brunberg sent us that gem. Stirling Westrup sent in a link to something called the Hoberman Sphere which basically is a crazily designed sphere thingee that expands from 9.5" to 30". Crazy looking. If you're looking for something caffienated that you can put in your mouth, several folks reminded us about caffienated penguin mints.

Wrap Up Well this was fun guys. Spending hours looking at crazy things that I can't afford has convinced me to take up cracking banks as an evening hobby. But what is quite obvious is that 1998 is a good year to be a geek. And maybe in 1999 Hemos can have his nanites. Nah.

And lastly, with all the commercial hub bub that tends to go on during this season, don't forget the true meaning of Christmas: Ham.

bghandhi was the first to let us know that OpenBSD 2.4 has been released. The new release contains lots of new ethernet drivers (esp. for SBUS cards), security improvements, and a lot more integrated crypto: a shared SSL library, IPSEC improvements, and more. You can find a summary of the most important changes here. If you would like to support the project, please order the US$30 CD set (which includes stickers!)

bghandhi was the first to let us know that OpenBSD 2.4 has been released. The new release contains lots of new ethernet drivers (esp. for SBUS cards), security improvements, and a lot more integrated crypto: a shared SSL library, IPSEC improvements, and more. You can find a summary of the most important changes here. If you would like to support the project, please order the US$30 CD set (which includes stickers!)

OpenBSD 2.3 is now shipping in a 2 CD set. The two CDs cost $30 plus shipping and handling. OpenBSD is an excellent OS, chock full of crypto, and is probably the most secure OS out there. The OS can also run binaries for other operating systems, including Linux. The release will be available soon via FTP, but users are encouraged to help the project by purchasing a CD, as head developer Theo de Raadt has put forth thousands upon thousands of dollars of his own money into the project. Besides, what other OS comes with cool stickers?

OpenBSD 2.3 is now shipping in a 2 CD set. The two CDs cost $30 plus shipping and handling. OpenBSD is an excellent OS, chock full of crypto, and is probably the most secure OS out there. The OS can also run binaries for other operating systems, including Linux. The release will be available soon via FTP, but users are encouraged to help the project by purchasing a CD, as head developer Theo de Raadt has put forth thousands upon thousands of dollars of his own money into the project. Besides, what other OS comes with cool stickers?

OpenBSD 2.3 is now shipping in a 2 CD set. The two CDs cost $30 plus shipping and handling. OpenBSD is an excellent OS, chock full of crypto, and is probably the most secure OS out there. The OS can also run binaries for other operating systems, including Linux. The release will be available soon via FTP, but users are encouraged to help the project by purchasing a CD, as head developer Theo de Raadt has put forth thousands upon thousands of dollars of his own money into the project. Besides, what other OS comes with cool stickers?

OpenBSD 2.3 is now shipping in a 2 CD set. The two CDs cost $30 plus shipping and handling. OpenBSD is an excellent OS, chock full of crypto, and is probably the most secure OS out there. The OS can also run binaries for other operating systems, including Linux. The release will be available soon via FTP, but users are encouraged to help the project by purchasing a CD, as head developer Theo de Raadt has put forth thousands upon thousands of dollars of his own money into the project. Besides, what other OS comes with cool stickers?

The XFree86 project has issued a press release regarding the status of the X11R6.4 licensing issues, and the SI (sample implementation). Also in the release are statements from Theo De Raadt and Linus Torvalds. Thanks to Andy Tai (who has a very funny image everyone should look at) for pointing this out.