[OT] ssh security

2010-03-07 Thread Angelin Lalev
Greetings, I'm doing some research into ssh and its underlying cryptographic methods and I have questions. I don't know whom else to ask and humbly ask for forgiveness if I'm way OT. So, SSH uses algorithms like ssh-dss or ssh-rsa to do key exchange. These algorithms can defeat any attempts on

Re: [OT] ssh security

2010-03-07 Thread Angelin Lalev
On Sun, Mar 7, 2010 at 11:25 PM, Angelin Lalev lalev.ange...@gmail.com wrote: Greetings, I'm doing some research into ssh and its underlying cryptographic methods and I have questions. I don't know whom else to ask and humbly ask for forgiveness if I'm way OT. So, SSH uses algorithms like

Dual booting Windows 7 and FreeBSD (and possibly GRUB)

2010-02-23 Thread Angelin Lalev
Well, Windows 7 isn't playing nicely with FreeBSD (and some other OS systems). I have my first primary partition (MBR scheme) installed with Windows 7 and I want to have FreeBSD as second primary partition. Eventually, I want to have Ubuntu on my first and second extended partitions. Any

Re: portsnap - broken metadata

2010-02-03 Thread Angelin Lalev
On Sat, Jan 23, 2010 at 9:52 AM, Angelin Lalev lalev.ange...@gmail.com wrote: Greetings, I believe I have broken the metainformation folders of portsnap. How to fix them? ironholm# rm -rf /var/db/portsnap/ ironholm# mkdir /var/db/portsnap ironholm# portsnap fetch Looking up

portsnap - broken metadata

2010-01-23 Thread Angelin Lalev
Greetings, I believe I have broken the metainformation folders of portsnap. How to fix them? ironholm# rm -rf /var/db/portsnap/ ironholm# mkdir /var/db/portsnap ironholm# portsnap fetch Looking up portsnap.FreeBSD.org mirrors... 3 mirrors found. Fetching public key from portsnap2.FreeBSD.org...

Secure method for fetching freebsd sources ?

2010-01-16 Thread Angelin Lalev
Greetings, Which is the *secure* way of fetching freebsd sources? Cvsup looks prone to MiM attacks, CTM looks promising, but only if I have been member of the appropriate ctm list since the release of 8.0. (it seems that the ctm deltas on the ftp are not signed.). Do FreeBSD cvs servers support

geli problem (???)

2010-01-15 Thread Angelin Lalev
I have Intel DG45ID + Core2 machine with USB keyboard and I want to use geom_eli to encrypt my entire freebsd partition. My FreeBSD version is freebsd 8.0p2, my Drive is SATA and I have USB keyboard and mouse. I intend to boot via USB flash disk and attach the partition at boot. Everything works

Can freebsd-update update kernels with option IPFIREWALL_FORWARD

2007-06-14 Thread Angelin Lalev
Greetings, Several weeks ago I tried to change the way my FreeBSD servers are updated. Instead of the lengthy procedure of building FreeBSD from sources, I tried to use freebsd-update. On two of the servers, I ran into a problem. Obviously GENERIC kernel with ipfw module loaded couldn't

passing parameters to configure script of a port

2007-06-10 Thread Angelin Lalev
Hi, I want to build squid from ports, but I need to pass some custom options to configure script. Something more, I want to be sure that when I run portupdate it won't revert to default options. Which is the right way to do this ? ___

ipfw forward from GENERIC kernel - is it possible?

2007-05-31 Thread Angelin Lalev
From ipfw manpage: To enable fwd a custom kernel needs to be compiled with the option options IPFIREWALL_FORWARD. Is there any workaround that would allow me to use ipfw fwd with GENERIC kernel? ___

is it possible to set the following IPC options at boot instead of hard-coding them in kernel

2007-05-27 Thread Angelin Lalev
Hi list, I'm running squid diskd on my proxy machines and I want to be able to use freebsd-update. Squid diskd requires the following options set in the kernel (example from daemon news http://ezine.daemonnews.org/200209/squid.html) options SYSVMSG options

Re: is it possible to set the following IPC options at boot insteadof hard-coding them in kernel

2007-05-27 Thread Angelin Lalev
Thanks, it worked! On Sun, 27 May 2007 12:40:09 +0100, Matthew Seaman [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Angelin Lalev wrote: Hi list, I'm running squid diskd on my proxy machines and I want to be able to use freebsd-update. Squid diskd requires

ifconfig seems to not accept inet and ether parameters on one line

2007-05-17 Thread Angelin Lalev
Hi everyone, I'm running FreeBSD 6.2. and I'm trying in short to change the MAC address of my network interface at boot. So I wrote something like this in my rc.conf file: ifconfig_xl0=inet 192.168.1.1 netmask 255.255.255.0 ether 00:00:11:11:22:22 at next boot the interface was not configured

freebsd-update question

2007-05-02 Thread Angelin Lalev
I have machine wich is build from sources (FreeBSD 6.2p3 , RELENG_6_2). Can I use freebsd-update on that machine straight away? In the article that appears on top of google (http://www.daemonology.net/freebsd-update/binup.html), there is section about removing kernel counters, perllocal.pod

FreeBSD machine instead of wireless hotspot device

2007-04-21 Thread Angelin Lalev
I have wireless hotspot device (Handlink WG-601) which I need to replace with FreeBSD machine. The device has following functionality I need to replicate: 1. It has dhcp server (that's easy) 2. It makes NAT between it's internal interfaces and wan interface (easy too, but look at 3). 3. It

Re: FreeBSD machine instead of wireless hotspot device

2007-04-21 Thread Angelin Lalev
On Sat, 21 Apr 2007 09:38:36 -0400, Chris Slothouber [EMAIL PROTECTED] wrote: Chris Slothouber wrote: Angelin Lalev wrote: I have wireless hotspot device (Handlink WG-601) which I need to replace with FreeBSD machine. The device has following functionality I need to replicate: 1. It has

advice on anti-spam tools

2007-04-02 Thread Angelin Lalev
Hi List, My e-mail server is running the latest spamassassin with all of the blacklist enabled and etc. but I still receive over 20 spam messages a day (image spam mostly). The situation with other users may be worse. That's why I was thinking about some tool that 1. store incoming

Firefox, TrueType, Windows Fonts

2006-05-31 Thread Angelin Lalev
I'm not certain to even ask the right question here, but here I go. Apparently, there are certain web pages that require specifically Arial and look like sh*th on Firefox. Since there is no Arial on FreeBSD and since I'm aware of the copyright and patent issues which prevent copying and

Re: Using Flash on FreeBSD [Fwd: Macromedia Customer Service Request [8564611]]

2006-05-31 Thread Angelin Lalev
On Wed, 31 May 2006 13:35:53 -0500 Don Hinton [EMAIL PROTECTED] wrote: Hi: When trying to upgrade Flash, I ran into the following in the UPDATING file: 20060408: AFFECTS: users of www/linux-flashplugin* AUTHOR: [EMAIL PROTECTED] These ports have been removed because the End

Acroread7

2006-05-19 Thread Angelin Lalev
Greetings, I've installed acrobat reader from /usr/ports/print/acroread7 and have some trouble with it. When I start it with acroread, it crashes with message: /usr/X11R6/Adobe/Acrobat7.0/ENU/bin/acroread: /dev/null: Operation not supported /usr/X11R6/Adobe/Acrobat7.0/ENU/bin/acroread:

Re: Acroread7

2006-05-19 Thread Angelin Lalev
On Fri, 19 May 2006 08:03:08 -0400 Robert Huff [EMAIL PROTECTED] wrote: Angelin Lalev writes: $ pkg_info|grep linux linux-XFree86-libs-4.3.99.902_7 XFree86 libraries, Linux binary linux-atk-1.8.0_2 Accessibility Toolkit, Linux/i386 binary linux-expat-1.95.7_1 Linux/i386 binary

Resolved: Acroread7

2006-05-19 Thread Angelin Lalev
On Fri, 19 May 2006 16:40:25 +0300 Angelin Lalev [EMAIL PROTECTED] wrote: On Fri, 19 May 2006 08:03:08 -0400 Robert Huff [EMAIL PROTECTED] wrote: Angelin Lalev writes: $ pkg_info|grep linux linux-XFree86-libs-4.3.99.902_7 XFree86 libraries, Linux binary linux-atk-1.8.0_2

Re: Installing gdm themes?

2006-05-19 Thread Angelin Lalev
On Thu, 18 May 2006 19:18:25 -0400 Lowell Gilbert [EMAIL PROTECTED] wrote: Angelin Lalev [EMAIL PROTECTED] writes: gdmsetup binary seem to miss from the last gnome gdm port. Look in /usr/X11R6/sbin. ___ freebsd-questions@freebsd.org mailing

Installing gdm themes?

2006-05-17 Thread Angelin Lalev
gdmsetup binary seem to miss from the last gnome gdm port. If that's normal, what is the proper manual way of installing themes? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe,

Intelligent way of dealing with dependancies in ports

2006-05-11 Thread Angelin Lalev
I'm rather tired of having to update firefox port due security fixes and then having to build the new versions of glib, expat, and so on an so on, every one of which complains that tere are older versions of the lib installed. I've tried pkg_delete -f and install of the newer version, but then

Re: qmail + vpopmail + procmail

2005-12-29 Thread Angelin Lalev
Michael P. Soulier wrote: On 12/28/05, Angelin Lalev [EMAIL PROTECTED] wrote: But now my friend's clients want all mail that is tagged as spam (in my case, prefixed with [SPAM] in the subject) moved to separate courier imap folder (for example .SPAM). I figured out (maybe I make error here

qmail + vpopmail + procmail

2005-12-28 Thread Angelin Lalev
Greetings, It's been a long time since my last day as a system administrator, but recently I needed to install a qmail server for a friend. Although I had forgoten many things, I've managed to make a working netqmail 1.05 + SMTP-AUTH + TLS patch + qmail-scanner + spam-assassin + courier imap +

net-snmp and mrtg question

2005-04-10 Thread Angelin Lalev
I have FreeBSD router with two interfaces. Every interface has several networks. The basic configuration of snmpd and mrtg allow me to monitor the load only on per-interface basis, but I need to be able to monitor the traffic on each network separately. Is there a way to do it via net-snmp /

Re: ipfilter problems

2005-04-04 Thread Angelin Lalev
Thank You very much! Well, the short answer is: there is no keep state in the line pass in quick on rl0 all the dns reply you get back times out because your default rule is block and there is nowhere in the in rules for rl1 that allows the reply back. This makes sense... And I probably have

ipfilter problems

2005-04-02 Thread Angelin Lalev
Two days ago I've switched the firewall on my FreeBSD 5.3 RELEASE router from ipfw to ipfilter. The firewalls are not my speciality and ipfilter looked simplier way to do NAT with firewall, because it separates NAT rules from filtering rules. The router has two interfaces rl0 (192.168.0.254/24)

curious about da_quirk_table

2005-03-18 Thread Angelin Lalev
Greetings, I have an usb flash disk which does not support cache synchronization. Usb vendor 0x1005. (The inscription on it says Apacer HandySTENO). On FreeBSD 5.3 RELEASE it generates several of umass0: Phase Error, residue = 0 (da0:umass-sim0:0:0:0): Synchronize cache failed, status == 0x4,

what is S.M.A.R.T and do I need it when I'm using freebsd (5.x...)

2004-09-03 Thread Angelin Lalev
Hi everyone, I've got this question that bugs me. It seems that the bios setup utility on my desktop machine (MB. GA-8IPE1000-G Pro) does not support turning on S.M.A.R.T. I remember that long ago I've read somewhere in the net that S.M.A.R.T has to do something with remapping the bad sectors on