Re: pfsync/carp causing large number of network errors

2012-06-14 Thread Mathieu Blanc
On 06/12/2012 06:38 PM, Peter N. M. Hansteen wrote: Myles Merrellgutter...@yahoo.com writes: Recently, we noticed all of our network traffic inside the firewall slowed down to the point where it was difficult to access anything. After some nosing around we noticed that f2, the em2 interface

Re: Gnome under OpenBSD 5.1

2012-06-14 Thread Paul Irofti
On Sun, Jun 10, 2012 at 06:07:01PM +0200, Antoine Jacoutot wrote: On Sun, Jun 10, 2012 at 04:27:22PM +0200, Francois Pussault wrote: This is strange. Gnome 2.x works fine on same machine ? But for sure, it is already strange to need a gnome running on BSD box instead of a window manager.

Re: Gnome under OpenBSD 5.1

2012-06-14 Thread Tomasz Marszal
On Thu, 14 Jun 2012 12:08:43 +0300, Paul Irofti p...@irofti.net wrote: On Sun, Jun 10, 2012 at 06:07:01PM +0200, Antoine Jacoutot wrote: On Sun, Jun 10, 2012 at 04:27:22PM +0200, Francois Pussault wrote: This is strange. Gnome 2.x works fine on same machine ? But for sure, it is already

let user can only run one command (passwd)?

2012-06-14 Thread f5b
I have setup OpenSMTPD + dovecot + roundcube simple mail server. People can ssh log in to the OpenBSD box, change their password using command passwd, the system account password is also the mail account password. So, for security reason, how to let the user can only run one command(passwd)

Re: smtpd - strange names in maillog

2012-06-14 Thread David Coppa
On Wed, Jun 13, 2012 at 7:49 PM, Jan Stary h...@stare.cz wrote: On Jun 13 19:39:46, Jan Stary wrote: Through my smtpd sorry: current/macppc This is the cause: macppc is BE.

Re: let user can only run one command (passwd)?

2012-06-14 Thread David Diggles
One easy way is to do this. Make their login shell /bin/rksh Make their login PATH /somepath and cp /usr/bin/passwd /somepath You can take it a lot further, but this is an easy start. On Thu, Jun 14, 2012 at 06:01:14PM +0800, f5b wrote: I have setup OpenSMTPD + dovecot + roundcube simple mail

Qemu and audio input?

2012-06-14 Thread Tomas Bodzar
Hi all, have someone working audio input with Qemu on OpenBSD? qemu-system-i386 -audio-help shows that there are two drivers available (sdl and wav), but both states 'Does not support capture'. In Windows 7 guest it shows mic device, but I used qemu-system-i386 -soundhw hda . so it's just

Re: let user can only run one command (passwd)?

2012-06-14 Thread Jiri B
On Thu, Jun 14, 2012 at 06:01:14PM +0800, f5b wrote: I have setup OpenSMTPD + dovecot + roundcube simple mail server. People can ssh log in to the OpenBSD box, change their password using command passwd, the system account password is also the mail account password. So, for security

Re: let user can only run one command (passwd)?

2012-06-14 Thread Nick Holland
On 06/14/12 06:00, f5b wrote: I have setup OpenSMTPD + dovecot + roundcube simple mail server. People can ssh log in to the OpenBSD box, change their password using command passwd, the system account password is also the mail account password. So, for security reason, how to let the user

Re: smtpd - strange names in maillog

2012-06-14 Thread Eric Faurot
Can you try this diff instead? Eric. Index: sockaddr.c === RCS file: /cvs/src/usr.sbin/smtpd/sockaddr.c,v retrieving revision 1.4 diff -u -p -u -r1.4 sockaddr.c --- sockaddr.c 16 May 2011 10:57:41 - 1.4 +++ sockaddr.c 14

Re: let user can only run one command (passwd)?

2012-06-14 Thread Kevin Chadwick
sshd_config ChrootDirectory not suit our needs. Why doesn't it suit your needs (time to work out how to do it?), you could just use a locked down file permission system perhaps even including secondary groups. Force command might come in handy as well as sudo too.

Re: let user can only run one command (passwd)?

2012-06-14 Thread Kevin Chadwick
sshd_config ChrootDirectory not suit our needs. You could also use systrace!! Do a little research and be careful if you use root though. Note contrary to wild statements the atleast published race conditions to be careful of are actually narrowly defined.

Re: smtpd - strange names in maillog

2012-06-14 Thread Jan Stary
On Jun 14 13:18:11, Eric Faurot wrote: Can you try this diff instead? Still the same. Eric. Index: sockaddr.c === RCS file: /cvs/src/usr.sbin/smtpd/sockaddr.c,v retrieving revision 1.4 diff -u -p -u -r1.4 sockaddr.c ---

Re: smtpd - strange names in maillog

2012-06-14 Thread Jan Stary
On Jun 14 14:46:56, Jan Stary wrote: On Jun 14 13:18:11, Eric Faurot wrote: Can you try this diff instead? Still the same. Argh, forgot to restart. Yes, this solves it. Thanks! Jan

Re: smtpd - strange names in maillog

2012-06-14 Thread Gilles Chehade
On Thu, Jun 14, 2012 at 03:05:56PM +0200, Jan Stary wrote: On Jun 14 14:46:56, Jan Stary wrote: On Jun 14 13:18:11, Eric Faurot wrote: Can you try this diff instead? Still the same. Argh, forgot to restart. Yes, this solves it. Thanks! Great, I'll commit the diff on behalf of

Re: errors compiling webkit on lemote

2012-06-14 Thread Rafael Sadowski
On Wed Jun 13, 2012 at 05:03:14PM -0700, Bryan Irvine wrote: Lines leading up the errors: gmake[1]: Entering directory `/home/ports/pobj/webkit-1.6.1/webkit-1.6.1' /usr/ports/infrastructure/bin/libtool --tag=CXX --mode=compile c++ -DHAVE_CONFIG_H -I. -Wall -W -Wcast-align

Re: let user can only run one command (passwd)?

2012-06-14 Thread Nick Holland
On 06/14/2012 08:55 AM, Kevin Chadwick wrote: sshd_config ChrootDirectory not suit our needs. Why doesn't it suit your needs (time to work out how to do it?), you could just use a locked down file permission system perhaps even including secondary groups. Force command might come in handy

ftp-proxy issues

2012-06-14 Thread James Chase
I already have 1 FTP server setup to use ftp-proxy with pf and it works fine. I am trying to add a second. It seemed like this should be straightforward - just add another ftp-proxy instance connected to the proper servers and add some rules to pf.conf. This didn't work (however the first FTP

Re: Can someone describe these possible long term effects and provide an explicit description of these kernel parameters?

2012-06-14 Thread Chris Zakelj
1. Any particular reason your systems have not been updated in at least three years? 2. Kernel defaults are generally chosen for a reason. Unless you have evidence of resource exhaustion, turning knobs generally won't make things better, and could make them worse. On Thu, Jun 14, 2012 at 12:31

Re: Can someone describe these possible long term effects and provide an explicit description of these kernel parameters?

2012-06-14 Thread Otto Moerbeek
On Thu, Jun 14, 2012 at 11:31:32AM -0500, Tristin Davis wrote: Hardware Type: Intel Version: OpenBSD 4.3 Kernel: MP I'm sorry, we do not support old releases like that. Your best bet is to upgrade. Things have improved in various areas, inclusing bufcache and network memory management. To

Re: errors compiling webkit on lemote

2012-06-14 Thread Bryan Irvine
On Thu, Jun 14, 2012 at 6:13 AM, Rafael Sadowski raf...@sizeofvoid.org wrote: On Wed Jun 13, 2012 at 05:03:14PM -0700, Bryan Irvine wrote: Lines leading up the errors: gmake[1]: Entering directory `/home/ports/pobj/webkit-1.6.1/webkit-1.6.1' /usr/ports/infrastructure/bin/libtool   --tag=CXX  

Re: ftp-proxy issues

2012-06-14 Thread James Chase
More details please... how do you start the proxies and what do the rules in pf.conf look like? Now I am starting the proxies via /etc/rc.local (or starting them by hand with the same command and killing them with 'kill') I'm just noticing that there is a binat on .217 (the ip that doesn't

Re: let user can only run one command (passwd)?

2012-06-14 Thread Kevin Chadwick
how WOULD it? passwd has to alter files in /etc (and is setuid root), kinda keeps a chroot from being overly useful. you are going about this the hard way It's not difficult to copy the lines from /etc/passwd into a mfs upon login, you don't necessarily need suid but yeah that's a

Re: Can someone describe these possible long term effects and provide an explicit description of these kernel parameters?

2012-06-14 Thread Tristin Davis
Upgrading is simply not an option. It all comes down to having the engineering staff, money, and downtime available. Unfortunatly, we have none of the above right now. I realize we *need* to upgrade, but right now, tuning the kernel is the only option. I would be extremely greatful if anyone out

Re: Can someone describe these possible long term effects and provide an explicit description of these kernel parameters?

2012-06-14 Thread Ville Valkonen
On 14 June 2012 21:54, Tristin Davis tristin.co...@gmail.com wrote: Upgrading is simply not an option. It all comes down to having the engineering staff, money, and downtime available. Unfortunatly, we have none of the above right now.  I realize we *need* to upgrade, but right now, tuning the

Re: Can someone describe these possible long term effects and provide an explicit description of these kernel parameters?

2012-06-14 Thread Bret Lambert
On Thu, Jun 14, 2012 at 8:54 PM, Tristin Davis tristin.co...@gmail.com wrote: Upgrading is simply not an option. It all comes down to having the engineering staff, money, and downtime available. Unfortunatly, we have none of the above right now.  I realize we *need* to upgrade, but right now,

Re: let user can only run one command (passwd)?

2012-06-14 Thread Alexander Hall
On 06/14/12 17:48, Nick Holland wrote: On 06/14/2012 08:55 AM, Kevin Chadwick wrote: sshd_config ChrootDirectory not suit our needs. Why doesn't it suit your needs (time to work out how to do it?), you could just use a locked down file permission system perhaps even including secondary

Re: let user can only run one command (passwd)?

2012-06-14 Thread Alexander Hall
On 06/14/12 13:09, Nick Holland wrote: On 06/14/12 06:00, f5b wrote: I have setup OpenSMTPD + dovecot + roundcube simple mail server. People can ssh log in to the OpenBSD box, change their password using command passwd, the system account password is also the mail account password. So, for

Re: smtpctl remove kills smtpd

2012-06-14 Thread Gilles Chehade
Ok, I'll try to get my hands on a BE machine this week-end, I suspect it's related to the find envelope by id and load part. I'll let you know when I have diff ready to test Gilles On Wed, Jun 13, 2012 at 09:49:20PM +0200, Jan Stary wrote: On Jun 13 21:21:37, Gilles Chehade wrote: Are you

Re: smtpd - strange names in maillog

2012-06-14 Thread Gilles Chehade
committed ! On Thu, Jun 14, 2012 at 03:11:49PM +0200, Gilles Chehade wrote: On Thu, Jun 14, 2012 at 03:05:56PM +0200, Jan Stary wrote: On Jun 14 14:46:56, Jan Stary wrote: On Jun 14 13:18:11, Eric Faurot wrote: Can you try this diff instead? Still the same. Argh, forgot to

Reunion de Evaluacion del Sector Automotriz (ID:12759)

2012-06-14 Thread Industra Nacional de Autopartes LQQ
[IMAGE] [IMAGE] [IMAGE] Me Interesa Asistir.. dé click aquí Evento Obligado para Directivos del Sector Automotor Reunión de Evaluación del Sector Automotriz El mejor evento para estar en contacto con los líderes de la Industria Automotríz. No se lo pierda. Con la participación de destacados

La base para crecer, Curso de Mercadotecnia Moderna de las 4 P a las 4 C

2012-06-14 Thread Maurin Quintero
¡Muy Importante! Si no puede visualizar correctamente este correo, le pedimos que lo arrastre a su Bandeja de Entrada Apreciable Ejecutivo: TIEM de México Empresa Líder en Capacitación y Actualización de Capital Humano Ponemos a su disposición este excelente curso denominado: Mercadotecnia

Something other than getty/login on console?

2012-06-14 Thread David Diggles
I want the default login console to run something like /usr/games/worms -n100 or rsh host /opt/local/bin/xaos -driver aa -autopilot Instead of /usr/libexec/getty std.9600 I have tried changing it in /etc/ttys but this is not working. How can I go about doing this? It's for a mac68k ascii art

OpenBSD 5.0 Dual ISP , Load balance and Incoming Connections

2012-06-14 Thread Jorge Enrique Valbuena Vargas
Hello List ! I jus want to share my experience with OpenBSD configuring two ISP, load balance and Incoming Connections , maybe it can help. Problem: 1. Two (2) ISP connections for internet access from my LAN to the Internet 2. Remote access to a server in my DMZ from Internet Solution to

Novedades Normativas para el Fin de Sexenio

2012-06-14 Thread Los 40 Mejores Cursos
copy; 2012 Conference Corporativo S.C. Cursos, Contenidos y Metodologiacute;as Desarrollados en Alianza con las Mejores Universidades Europeas con Calidad ISO 9000. LOS 40 MEJORES CURSOS SOBRE ADMINISTRACIOacute;N PUacute;BLICA y GOBIERNOIncluye 4 cursos de ALTO IMPACTO para el

Re: let user can only run one command (passwd)?

2012-06-14 Thread Stuart Henderson
On 2012-06-14, Alexander Hall ha...@openbsd.org wrote: However, combining Match Group ... with ForceCommand ... would be my first choice, but I have a perversion of wanting to use sshd for everything. :-) I think you're going to need something like that if you want to update system passwords

Re: ftp-proxy issues

2012-06-14 Thread Stuart Henderson
On 2012-06-14, James Chase ja...@wintercastle.net wrote: I'm just noticing that there is a binat on .217 (the ip that doesn't work) and none on .146. Could this be the issue? Let's see. Yup. It was the binat that was breaking it. Damn. Makes some sense I guess. Is there a way to do this while

Manual chpass passwd have diff descriptions about /etc/passwd

2012-06-14 Thread f5b
CHPASS(1) FILES /etc/master.passwd user database /etc/passwd a Version 7 format password file /etc/ptmp lock file for the passwd database /etc/shells list of approved shells /var/tmp/pw.XX temporary copy of the user

Re: Can someone describe these possible long term effects and provide an explicit description of these kernel parameters?

2012-06-14 Thread Otto Moerbeek
On Thu, Jun 14, 2012 at 01:54:33PM -0500, Tristin Davis wrote: Upgrading is simply not an option. It all comes down to having the engineering staff, money, and downtime available. Unfortunatly, we have none of the above right now. I realize we *need* to upgrade, but right now, tuning the