Re: [Newbie] OpenBSD HTTP proxy

2007-10-12 Thread Clint M. Sand
On Mon, Oct 08, 2007 at 10:00:34PM -0400, Jeremy Huiskamp wrote: On 8-Oct-07, at 8:43 PM, Lars Noodin wrote: Tony Bruguier wrote: ... I would like to install an HTTP proxy. ... Squid is recommended. Read the directions carefully and you will have to make one or two changes to the

Re: How to track port updates in stable?

2007-08-03 Thread Clint M. Sand
On Fri, Aug 03, 2007 at 06:35:51PM -0500, Todd Pytel wrote: I don't spend as much time following OpenBSD as I used to, so perhaps I'm missing something. But there used to be a ports-security mailing list used for announcing updated ports. That list doesn't exist any more, or at least doesn't

Re: a cd key

2007-05-18 Thread Clint M. Sand
On Fri, May 18, 2007 at 08:47:21PM +1000, Timothy Wilson wrote: Had you thought about mounting certain areas as read only? For example, /etc, /local can be mounted as read only. When you want to make changes, such as installing a new package or whatever, just remount the file systems

pkg_add -u question

2007-05-06 Thread Clint M. Sand
man pkg_add states: -u Update the given pkgname(s), and anything it depends upon. If no pkgname is given, pkg_add will update all installed packages. This relies on PKG_PATH to figure out the new package names. However if I run -u with no package name, it tells me a list of possible candidates,

Re: pkg_add -u question

2007-05-06 Thread Clint M. Sand
On Sun, May 06, 2007 at 04:28:45PM +0200, Cabillot Julien wrote: pkg_add -ui Ah. Thanks. Seems the man page should be changed to be more clear. If no pkgname is given and -u is combined with -i, pkg_add will... On 5/6/07, Clint M. Sand [EMAIL PROTECTED] wrote: man pkg_add states

Re: OpenBSD 4.1 Torrents

2007-05-05 Thread Clint M. Sand
On Sat, May 05, 2007 at 12:43:34PM +0200, Justin Smith wrote: Just out of curiosity... Is it logical to use an OS for the intense focus on security and correctness, yet download the binaries from a random person on a mailing list instead of any official source with reasonable file

Re: OpenBSD 4.1 Torrents

2007-05-02 Thread Clint M. Sand
On Tue, May 01, 2007 at 02:33:50PM -0700, andrew fresh wrote: Probably everyone knows already, but I just wanted to get the word out that there are OpenBSD 4.1 torrents now on the torrent site: http://openbsd.somedomain.net/index.php?version=4.1 So far they are mostly just the files off of

Re: cvs or cvsup

2007-03-21 Thread Clint M. Sand
On Wed, Mar 21, 2007 at 10:59:22AM +0100, Stefan Sperling wrote: On Wed, Mar 21, 2007 at 01:39:51AM -0700, Kernel Monkey wrote: I've been using the cvsup client to update my sources. What is the difference between cvs and cvsup when updating sources? Is one better than the other?

stupid question re kernal build make install

2007-03-14 Thread Clint M. Sand
I know this is a dumb question but make install on a kernel build does: rm -f /obsd ln /bsd /obsd cp bsd /nbsd mv /nbsd /bsd But I can't see the reasoning here. Why do we copy it then move it rather than just copying it straight to /bsd?

Re: stupid question re kernal build make install

2007-03-14 Thread Clint M. Sand
On Wed, Mar 14, 2007 at 04:34:02PM -0500, Jacob Yocom-Piatt wrote: Clint M. Sand wrote: I know this is a dumb question but make install on a kernel build does: rm -f /obsd ln /bsd /obsd cp bsd /nbsd mv /nbsd /bsd But I can't see the reasoning here. Why do we copy it then move

Re: new tool: openportd

2006-10-22 Thread Clint M. Sand
On Sun, Oct 22, 2006 at 03:55:39AM -0700, Kian Mohageri wrote: On 10/22/06, Steffen Wendzel [EMAIL PROTECTED] wrote: You normaly have different open ports pf(4) makes this a minor issue. No offense, but what you have there (in the example specifically) is no better than a limited

Re: bsdstats.org WOW

2006-10-19 Thread Clint M. Sand
On Thu, Oct 19, 2006 at 12:04:45AM -0600, Breen Ouellette wrote: Miod Vallat wrote: For historical reference, info taken from bsdstats.org: [...] What is the point discussing completely bogus so-called statistics? At best, I would suggest that some are proud to be OpenBSD users.

Re: MAC - IP - MAC

2006-06-03 Thread Clint M. Sand
On Sat, Jun 03, 2006 at 12:10:55AM +0100, Gaby vanhegan wrote: From thinking about it more, it's just simpler to track which IP address belongs to which login, and then when that user tries to login on a second client, the first one is barred access. This only allows one IP address per

Re: ssh attacks

2006-05-31 Thread Clint M. Sand
If these attempts all come from the same source, why not filter that ip at the gateway level. What legit use does this person have on your network on any port, much less ssh? On Wed, May 31, 2006 at 03:15:34PM -0400, Peter Fraser wrote: Expect I was not clear. Someone is attacking address

Re: Symantec firewalls

2006-04-06 Thread Clint M. Sand
On Thu, Apr 06, 2006 at 08:56:44AM +0300, Gabriel George POPA wrote: Hello, I've heard a lot about those Symantec firewall machines (that cost something around 15000$-3$). In fact I don't know many details, just that customers are pleased to give the money and say that

Re: Security tools

2006-03-15 Thread Clint M. Sand
On Wed, Mar 15, 2006 at 12:31:06PM +, Gaby vanhegan wrote: Hi, I'm running 3.6 (yes, due for an upgrade) and I keep getting hit by snip My questions are: 1. How do I find out their attack vector? I have had a nessus scan performed on the machine, but it did not present any

Re: Did my -stable upgrade work?

2006-03-12 Thread Clint M. Sand
On Sun, Mar 12, 2006 at 09:42:50PM -0600, Mike Loiterman wrote: How can I tell if my -stable binary upgrade was successful? check the last modified timestamps on the userland binaries. they should all be the day you compiled. chances are it didn't finish and you'll see some dates from when you

Re: thttpd with php

2006-02-19 Thread Clint M. Sand
Sorry, I did not read like an idiot. Maybe this is more helpful. http://halplant.com:88/server/thttpd_FAQ.html#PHP On Sun, Feb 19, 2006 at 09:40:33AM -0500, Clint M. Sand wrote: On Sun, Feb 19, 2006 at 03:31:47PM +0200, Kiraly Zoltan wrote: Anyone use thttpd webserver with PHP in OpenBSD

Re: httpd question - solved

2006-02-04 Thread Clint M. Sand
On Sat, Feb 04, 2006 at 07:07:52PM -0500, Dave Feustel wrote: On Saturday 04 February 2006 16:57, L. V. Lammert wrote: On Sat, 4 Feb 2006, Dave Feustel wrote: I am now starting httpd at boot. It reports that it cannot determine the fully qualified domain name and listens to only

Re: windows - pf - inet - pf - ftpd [not working]

2006-01-19 Thread Clint M. Sand
To even begin to get help on this, you'd need to submit the pf rules on those obsd boxen. On Thu, Jan 19, 2006 at 05:36:02PM -0500, Price, Joe wrote: I have a problem that when a Windows client tries to connect to this ftp site, windows explorer returns 'The operation timed out'. The

Re: errata 001_perl.patch

2006-01-12 Thread Clint M. Sand
On Thu, Jan 12, 2006 at 09:38:07PM +0100, Han Boetes wrote: I doubt you need perl at all on a box like that. You can also consider to simply remove all the perl on that system. # Han The pkg_* tools are perl. Even though its a firewall he may need to install/remove/maintain pkg's of some

Re: errata 001_perl.patch

2006-01-12 Thread Clint M. Sand
not need perl at all. I think you are missinterpreting. On 1/12/06, Clint M. Sand [EMAIL PROTECTED] wrote: On Thu, Jan 12, 2006 at 09:38:07PM +0100, Han Boetes wrote: I doubt you need perl at all on a box like that. You can also consider to simply remove all the perl on that system

Re: What does this error message mean?

2006-01-01 Thread Clint M. Sand
man rc.conf On Sun, Jan 01, 2006 at 11:50:01PM -0600, Jim Mays wrote: How do you turn off Sendmail? What starts it in obsd? (Like where is the equivalent of /etc/rc2.d? Jim Daniel Ouellet wrote: Jim Mays wrote: Jan 1 23:05:16 balrog sm-msp-queue[1531]: k024U2n0023755: timeout

Re: #define failure opportunity

2005-11-30 Thread Clint M. Sand
On Tue, Nov 29, 2005 at 06:12:29PM -0600, Qv6 wrote: Has any company ever approached the openssh dev team and offered to buy a support contract from them? Did they refuse? Come to think of it, why doesn't the openssh team sell support contracts to companies that want it? Or maybe they

Re: Portmap non-local set / unset attempt

2005-09-22 Thread Clint M. Sand
On Thu, Sep 22, 2005 at 02:02:13PM -0600, Theo de Raadt wrote: snip People keep yammering this bullshit about Security is a process. Bullshit! Lies! It's about paying attention to the frigging details when they are right in front of your face. And it is very clear other vendors do not pay

Re: Portmap non-local set / unset attempt

2005-09-22 Thread Clint M. Sand
On Thu, Sep 22, 2005 at 07:09:12PM -0600, Theo de Raadt wrote: People keep yammering this bullshit about Security is a process. Bullshit! Lies! It's about paying attention to the frigging details when they are right in front of your face. And it is very clear other vendors do not

Re: back and neck pain

2005-08-18 Thread Clint M. Sand
On Thu, Aug 18, 2005 at 07:24:56PM -0400, [EMAIL PROTECTED] wrote: A friend told me about you- i have a' spondie'-l4-l5, that surgey helped a little, and 10 mos. later my car fell off the jacks, breaking my back-burst fracture of t-12, and aggrivating the 'spondie'. I have a lot of pain and

Re: About DNS

2005-08-14 Thread Clint M. Sand
On Sun, Aug 14, 2005 at 09:49:12PM +0200, Mike Henker wrote: Thanks James, I don t have the file you talked about but I will create it (resolve.conf) with the info you explained. resolv.conf not resolve.conf

Re: pkg_add -r question?

2005-07-30 Thread Clint M. Sand
On Sat, Jul 30, 2005 at 04:45:55PM -0500, L. V. Lammert wrote: After experimenting with pkg_add -r on a 3.6 - 3.7 upgrade, it is **NICE**!! One question, however, .. is there a way to use the *OLD* package name, instead of the *NEW* package name? pkg_add would then query PKG_PATH for an

Re: 005_libz.patch - fails to change directory

2005-07-25 Thread Clint M. Sand
On Fri, Jul 22, 2005 at 08:00:50PM -0600, Todd C. Miller wrote: In message [EMAIL PROTECTED] so spake Uwe Dippel (udippel): Strange, we had the same thing with the last patch. Looks like the main ftp mirror is not updating. I've left a message but it may not get fixed for a

Re: Easiest way to include PHP in a release

2005-07-03 Thread Clint M. Sand
On Sun, Jul 03, 2005 at 06:30:10PM -0400, Robert Jacobs wrote: Hello, I want to make an OpenBSD release that includes php right from install (like perl is included). I am not very good with makefiles and stuff, so I am seeking advice for the easiest way to do this. Is there a way to

Re: snort homedir ?

2005-06-19 Thread Clint M. Sand
On Sun, Jun 19, 2005 at 03:17:48PM +0200, mess-mate wrote: Hi, i've installed snort and created the user/group snort. Since snort runs as a daemon a homdir is not necessary, isn't ? How can i remove / setup the user snort without a homedir ( /home/snort)? The homedir was setted-up