Re: Blocking Trojans with PF

2011-09-25 Thread Gregory Edigarov
On Mon, 26 Sep 2011 09:48:20 +0330 Hassan Monfared wrote: > Hi, > Any idea for denying connection initiation to outside from any web > server protected by PF? ( wanna block Trojans and reverse connections > while incomming http traffic is allowed) . block all pass in on $if from any to ($if) w

Re: Blocking Trojans with PF

2011-09-25 Thread Johan Beisser
"block all" Permit inbound port 80, but do not permit new outbound connections. Consider each interface a separate firewall, with separate flows entirely, then use policy enforcement (see tagging: http://cvs.openbsd.org/faq/pf/tagging.html) to ensure only properly tagged packets are passed out fro

Blocking Trojans with PF

2011-09-25 Thread Hassan Monfared
Hi, Any idea for denying connection initiation to outside from any web server protected by PF? ( wanna block Trojans and reverse connections while incomming http traffic is allowed) . Regards, Hassan H. Monfared

Re: Help on understanding mbr.S

2011-09-25 Thread Alan Cheng
Thanks Bryan. Your explanation makes things a lot clearer to me. As mentioned in my reply to Daniel, I not cannot figure out why "$1f" will be "". On Fri, Sep 23, 2011 at 12:05 PM, Brynet wrote: > One of the first things an MBR does is do a long jump from where the BIOS > loaded it. > > The

Re: Help on understanding mbr.S

2011-09-25 Thread Alan Cheng
On Fri, Sep 23, 2011 at 11:24 AM, Daniel Dickman wrote: > > What are you trying to do though? Working with x86 in real mode and dealing > with ancient PC conventions is probably not the easiest place to start. I'm trying to learn how kernel (or OS) works. I went through a couple of books on OS de

Write Apt and Accurate English (adv)

2011-09-25 Thread binson
Keyboard "Write Apt And Accurate English" Dear friends, The aim of the LCCI Certificate in English for Business Level 2 programme is to enable candidates to develop the ability to undersatnd and write English using formats that are current and common in business communication. Objectives to enab

Re: OpenBSD 5.0 PF and Syn attak

2011-09-25 Thread Hassan Monfared
Enjoyed the story, by the way CARP & pfsync seems right solution for us today. 2011/9/25 Eukasz Czarniecki > W dniu 2011-09-25 17:50, Pui Edylie pisze: > > Hi Everyone, > > > > I am trying to put a pair of OBSD box together to provide Syn, UDP and > > ICMP flood protection with pretty graphs. >

Only noise from Azalia

2011-09-25 Thread Jairo Souto
I can get only noise from the audio of a notebook Acer Aspire 5820T-6825. The dmesg, audioctl and mixerctl are attached for OpenBSD-4.9 and for the 2011-09-22 snapshot. Can anyone give me an help? --Jairo Souto (38)8816-1254 dmesg: -- OpenBSD 4.9 (GENERIC.MP) #2: Sun Jul 17 09:40:29 BRT 2011

Re: OpenBSD 5.0 PF and Syn attak

2011-09-25 Thread Ɓukasz Czarniecki
W dniu 2011-09-25 17:50, Pui Edylie pisze: > Hi Everyone, > > I am trying to put a pair of OBSD box together to provide Syn, UDP and > ICMP flood protection with pretty graphs. > > May I know if anyone has accomplished this? Check this out: Bakeca.it DDoS: How Evil Forces Have Been Defeated ht

OpenBSD 5.0 PF and Syn attak

2011-09-25 Thread Pui Edylie
Hi Everyone, I am trying to put a pair of OBSD box together to provide Syn, UDP and ICMP flood protection with pretty graphs. May I know if anyone has accomplished this? If you had, I have the following question 1. What is the hardware spec you use? What is the maximum attack PPS and Bandwi

Re: microsoft and UEFI boot

2011-09-25 Thread Mike.
On 9/24/2011 at 6:57 PM Paolo Aglialoro wrote: |Unfortunately, just a tiny percentage of sold X86 boxes is no-OS, and also |dell has stopped selling linux PCs. |The last "no-OS" one I bought was an HP laptop (HP 360) with suse 11 |onboard. Drops within an ocean. |Unless EU Commission helps, it'll

Re: rc_scripts

2011-09-25 Thread Peter Hessler
On 2011 Sep 25 (Sun) at 08:28:10 +0200 (+0200), Remco wrote: :Vijay Sankar wrote: : :> Is it possible that you are installing packages from the wrong :> version? I have done that a couple of times because I copied .profile :> files from the wrong server :> :> Is your PKG_PATH set to /pub/OpenBSD/4

Re: no packages for amd64 snapshot

2011-09-25 Thread Ingo Schwarze
Hi, ropers wrote on Sun, Sep 25, 2011 at 03:25:58AM +0200: >> On 2011-09-23, ropers wrote: >>>$ mandoc -Tascii /usr/ports/infrastructure/build/dpb3.1 | less > mandoc -Tascii /usr/ports/infrastructure/man/man1/dpb.1 | less As you keep citing that line from the outdated undeadly article, here

Re: rc_scripts

2011-09-25 Thread Ingo Schwarze
Hi, Remco wrote on Sun, Sep 25, 2011 at 08:28:10AM +0200: > To avoid release/architecture mixups you could use something > like "/pub/OpenBSD/`uname -r`/packages/`uname -m`/". That sounds like terrible advice: $ sysctl kern.version kern.version=OpenBSD 5.0-current (GENERIC) #7: Wed Sep 21

Catalogo de viajes - Setiembre 2011

2011-09-25 Thread Nap travel
Catalogo de viajes - Setiembre 2011

Re: no packages for amd64 snapshot

2011-09-25 Thread Stuart Henderson
On Sun, 25 Sep 2011 02:25:58 +0100, ropers wrote: > > If the ports tree is in the usual place > > "If" being the operative word; to quote from undeadly, emphasis added: This thread is about building -current packages from the ports tree, so I think it's a reasonable assumption. > > then yes 'm

Re: no packages for amd64 snapshot

2011-09-25 Thread Marc Espie
To put things in perspective, the dpb framework is now about two years old. It was a bit quirky and experimental until 4.9. The addition of /usr/ports/infrastructure/man to man.conf happened a little before 5.0. So, people wanting to build packages *for current* should have no problem accessing

Re: rc_scripts

2011-09-25 Thread Remco
Vijay Sankar wrote: > Is it possible that you are installing packages from the wrong > version? I have done that a couple of times because I copied .profile > files from the wrong server > > Is your PKG_PATH set to /pub/OpenBSD/4.9/packages/amd64, for example? > To avoid release/architecture mi