Re: ftps?

2012-11-30 Thread Franco Fichtner
On Nov 29, 2012, at 11:35 PM, Theo de Raadt dera...@cvs.openbsd.org wrote: Because they can just hack it on top of their crusty old ftp server software, whereas using sftp would need much bigger changes? SSL/TLS makes everything more secure And DPI-based products are slow to fix their

Re: softraid to encrypt _AND_ raid?

2012-11-30 Thread Alexis de BRUYN
On 30.11.2012 06:29, zgeggy2k wrote: Yes, I tried stacking them one after the other (first raiding, then crypto'ing) - didn't work. Try that : wd0a wd1a are RAID partitions. bioctl -c 1 -l wd0a,wd1a softraid0 Create a RAID partition on the new raid device sd0. bioctl -c C -r 8192 -l

Re: ftps?

2012-11-30 Thread Stuart Henderson
On 2012-11-29, Chris Smith obsd_m...@chrissmith.org wrote: On Wed, Nov 28, 2012 at 12:48 PM, Chris Smith obsd_m...@chrissmith.org wrote: Looks like skipping ftp-proxy for that target address works. Thanks! Is there any way to make this work automagically for ftps? Right now I'm doing this:

Re: Best Performance Server Strategy(Probably OBSD OffTopic)

2012-11-30 Thread Henning Brauer
* Friedrich Locke friedrich.lo...@gmail.com [2012-11-13 00:05]: i am planning to write a simple web server. My initial ideia for this server is that it will only serve static content. So, i would like to have the best possible performance. you are reinevnting the wheel, to put it nicely. I

Re: bsd cloud

2012-11-30 Thread Chris Cappuccio
Jiri B [ji...@devio.us] wrote: On Tue, Nov 27, 2012 at 04:13:47PM -0200, Friedrich Locke wrote: So what would a BSD cloud be different in the context of cloud (not openbsd features) ? You can of course try to port KVM to OpenBSD, hehe. OpenBSD supports Sun's LDom hypervisor hardware

Re: ftps?

2012-11-30 Thread Chris Smith
On Fri, Nov 30, 2012 at 7:47 AM, Stuart Henderson s...@spacehopper.org wrote: Not exactly, but you might be able to do something with this, *before* your ftp-proxy rule: pass out quick proto tcp to 0.0.0.0/0 port 8821 rdr-to 0.0.0.0/0 port 21 bitmask Then if you tell your ftp client to