Re: sshd segfaults with incomplete /etc/hosts

2014-05-13 Thread Eric Faurot
On Mon, May 12, 2014 at 09:47:19PM +, Florian Obser wrote: Eric? I think the bug is in hostent_file_match. The following diff has the advantage that this works in /etc/hosts: 192.0.2.1 192.0.2.1 foo $ getent hosts 192.0.2.1 192.0.2.1 foo hm, maybe this is

something fishy with portmapper on i386 snapshot?

2014-05-13 Thread Sebastian Reitenbach
Hi, I've installed a i386 soekris box (10.0.0.27, called wormhole) from current snapshot, and trying to netboot a vax and a sparc, but I guess, they don't get to the bootparamd. Here what I see from the vax (10.0.0.30), which loads the boot.mop from mopd running on the same server fine, then

Re: firefox with H264

2014-05-13 Thread Tristan PILAT
Thanks Antoine, gstreamer-plugins-bad did the trick, but as the performances are really bad i will keep using chromium. Maybe Firefox 29 is not mature enough as well, I find it particularly slow. Tristan 2014-05-12 18:11 GMT+02:00 Antoine Jacoutot ajacou...@bsdfrog.org: On Mon, May 12, 2014

Postfix to OpenSMTPD - virtual domains transport map

2014-05-13 Thread Martijn Rijkeboer
Hi, I'm trying to migrate our Postfix setup to OpenSMTPD (OpenBSD 5.5). The current setup contains two mx servers that run spamd and forward the mail to the mailbox server using a transport map. On the mailbox server we use virtual domains so mail for i...@domain1.com and i...@domain2.com go to

hardware question: ASUS ET1612IUTS

2014-05-13 Thread Marko Cupać
Hi, does anyone have experience with ASUS ET1612IUTS? https://www.asus.com/AllinOne_PCs/ET1612IUTS/ Do touchscreen and network work on OpenBSD? Thank you in advance. -- Marko Cupać

Re: icalendar support on openbsd 5.5 - mod_dav removed

2014-05-13 Thread Steve Fairhead
Thanks for the responses, Stuart and Johan. Will investigate and play... [I'm a little reluctant to go for Apache2, simply because I've never tried it, and I have other webserver stuff to support... perhaps I'm being a wuss ;).] Steve

Re: icalendar support on openbsd 5.5 - mod_dav removed

2014-05-13 Thread Stefan Sperling
On Tue, May 13, 2014 at 09:57:28AM +0100, Steve Fairhead wrote: Thanks for the responses, Stuart and Johan. Will investigate and play... [I'm a little reluctant to go for Apache2, simply because I've never tried it, and I have other webserver stuff to support... perhaps I'm being a wuss ;).]

Re: icalendar support on openbsd 5.5 - mod_dav removed

2014-05-13 Thread Marcus MERIGHI
johan+openbsd-m...@huldtgren.com (Johan Huldtgren), 2014.05.12 (Mon) 13:20 (CEST): Quoting Stuart Henderson s...@spacehopper.org: On 2014-05-12, Steve Fairhead st...@fivetrees.com wrote: Hi folks, I'm aware that mod_dav has been removed from 5.5. I was supporting a group of icalendar

Re: sshd segfaults with incomplete /etc/hosts

2014-05-13 Thread Seth Hanford
On 5/13/14, 2:59 AM, Eric Faurot wrote: Yes, but the check must be done for all cases. The following diff also fixes getnetnamadr. getaddrinfo is already fine. Eric. Thanks, everyone! I see it's committed. http://marc.info/?l=openbsd-cvsm=139998227611174w=2 - Seth

linux port of systrace

2014-05-13 Thread Илья Аржанников
Hello. I am trying to use linux port systrace. And I found the problem. When I run under systrace (it does not matter with -A or -a (actually it never came till -a)) something that use vfork systrace and children processes hangup. I saw in sources that linux port uses ptrace as backend because

Re: linux port of systrace

2014-05-13 Thread Vadim Zhukov
2014-05-13 19:06 GMT+04:00 Илья Аржанников iarzhanni...@gmail.com: Hello. I am trying to use linux port systrace. And I found the problem. When I run under systrace (it does not matter with -A or -a (actually it never came till -a)) something that use vfork systrace and children processes

Re: linux port of systrace

2014-05-13 Thread Илья Аржанников
On May 13, 2014, at 21:13, Vadim Zhukov persg...@gmail.com wrote: 2014-05-13 19:06 GMT+04:00 Илья Аржанников iarzhanni...@gmail.com: Hello. I am trying to use linux port systrace. And I found the problem. When I run under systrace (it does not matter with -A or -a (actually it never came

Re: linux port of systrace

2014-05-13 Thread Илья Аржанников
[xandox@localhost ~]$ dmsg -bash: dmsg: command not found [xandox@localhost ~]$ dmesg Initializing cgroup subsys cpuset Initializing cgroup subsys cpu Linux version 2.6.32-431.el6.x86_64 (mockbu...@c6b8.bsys.dev.centos.org) (gcc version 4.4.7 20120313 (Red Hat 4.4.7-4) (GCC) ) #1 SMP Fri Nov 22

Re: sshd segfaults with incomplete /etc/hosts

2014-05-13 Thread Héctor Luis Gimbatti
On the same topic, $ man 5 hosts BUGS: Lines in /etc/hosts are limited to BUFSIZ characters (currently 1024). Longer lines will be ignored. I've made a couple of test: 1. If the line has the following pattern: 10.0.1.1 aa b c z $ getent hosts 10.0.1.1

firefox-26.0p1.tgz signature verification FAIL

2014-05-13 Thread Alexej
Greetings gentlemen, Downloaded and installed install55.iso, SHA256 was verified successfuly. Downloaded firefox-26.0p1.tgz from Canada (Alberta) mirror site along with SHA256 files. /pub/OpenBSD/5.5/packages/amd64/SHA256 /pub/OpenBSD/5.5/packages/amd64/SHA256.sig

Multihoming with carp possible? and ipsec failover?

2014-05-13 Thread Magnus
Hello Misc-Users, I'm looking in to the possibility to do multihoming (more than one isp) on a Carp setup. To do live failover if one isp goes down, the other takes over. Just as carp does if one of the routers goes down. I'm thinking that in combination with ifstated it might be possible, but

Re: Multihoming with carp possible? and ipsec failover?

2014-05-13 Thread Johan Beisser
On Tue, May 13, 2014 at 4:58 AM, Magnus mag...@tokra.org wrote: Hello Misc-Users, I'm looking in to the possibility to do multihoming (more than one isp) on a Carp setup. To do live failover if one isp goes down, the other takes over. Just as carp does if one of the routers goes down. You

Re: Multihoming with carp possible? and ipsec failover?

2014-05-13 Thread Giancarlo Razzolini
Em 13-05-2014 08:58, Magnus escreveu: Hello Misc-Users, I'm looking in to the possibility to do multihoming (more than one isp) on a Carp setup. To do live failover if one isp goes down, the other takes over. Just as carp does if one of the routers goes down. I'm thinking that in

Strange route entry from China

2014-05-13 Thread Johan Ryberg
Hi, Please forgive my ignorance. I have a small lab and I noticed this IP in the routing table: 61.174.51.232, resolves to 232.51.174.61.dial.wz.zj.dynamic.163data.com.cn # route -n show Routing tables Internet: DestinationGatewayFlags Refs Use Mtu Prio Iface

Re: Strange route entry from China

2014-05-13 Thread Amit Kulkarni
On Tue, May 13, 2014 at 3:27 PM, Johan Ryberg jo...@securit.se wrote: Hi, Please forgive my ignorance. I have a small lab and I noticed this IP in the routing table: 61.174.51.232, resolves to 232.51.174.61.dial.wz.zj.dynamic.163data.com.cn # route -n show Routing tables Internet:

Re: Strange route entry from China

2014-05-13 Thread Stuart McMurray
On Tuesday, May 13, 2014, Amit Kulkarni amitk...@gmail.com wrote: On Tue, May 13, 2014 at 3:27 PM, Johan Ryberg jo...@securit.sejavascript:; wrote: Hi, Please forgive my ignorance. I have a small lab and I noticed this IP in the routing table: 61.174.51.232, resolves to

Re: Strange route entry from China

2014-05-13 Thread Johan Beisser
On May 13, 2014, at 18:47, Stuart McMurray kd5...@gmail.com wrote: And, 163data.com.cn is a large source of shady activity. I blocked the bulk of China and Asia outright at the router. Quick solution, if not clean.

Re: linux port of systrace

2014-05-13 Thread Philip Guenther
On Tue, May 13, 2014 at 8:06 AM, Илья Аржанников iarzhanni...@gmail.comwrote: I am trying to use linux port systrace. And I found the problem. When I run under systrace (it does not matter with -A or -a (actually it never came till -a)) something that use vfork systrace and

Re: cron reload

2014-05-13 Thread Philip Guenther
On Sun, May 11, 2014 at 10:34 PM, Tomek Wałaszek tmwalas...@gmail.comwrote: I'm trying to understand the reason of using unix socket to poke cron daemon via crontab. If we would remove this feature from the cron then the functionality will be the same, I mean the cron would update the

Re: Strange route entry from China

2014-05-13 Thread Johan Ryberg
Yes, it's related to a SSH brute force attack. I have just never seen the the client IP in the routing table before. My IP does not exist in the routing table when I SSH to the host. I have a hard time to understand the mechanism that added the IP to the table. Is this something that can be

Re: Strange route entry from China

2014-05-13 Thread Johan Beisser
On Tue, May 13, 2014 at 10:31 PM, Johan Ryberg jo...@securit.se wrote: Yes, it's related to a SSH brute force attack. I have just never seen the the client IP in the routing table before. My IP does not exist in the routing table when I SSH to the host. The IP shouldn't be there, at all. But,