Re: Strange sshd + /etc/nologin behaviour

2012-03-11 Thread Alexander Schrijver
On Sun, Mar 11, 2012 at 08:21:10PM +0100, "Andr?? S." wrote: > Am I missing something? Is your user in the staff class? It has "ignorenologin" set by default. See login.conf(5) and /etc/login.conf.

Re: My thoughts on OpenBSD - is advocacy working ?

2011-09-06 Thread Alexander Schrijver
On Wed, Sep 07, 2011 at 02:42:04PM +1000, john slee wrote: > VROOOM cars, meh.

Re: How does OpenBSD compare to Ubuntu Server?

2011-07-07 Thread Alexander Schrijver
> For starters, there is 100% consensus among developers that we'll never > use newfangled overengineered stuff like System V init. > You mean Upstart! or wait You mean systemd!

Re: Better security? Haha

2011-05-20 Thread Alexander Schrijver
On Sat, May 21, 2011 at 08:26:50AM +1000, Rod Whitworth wrote: > Better tha > iptables? > http://www.esecurityplanet.com/news/article.php/3934151/Fedora-15-Boosts > -Linux-Security.htm > maybe... Imagine the dynamic firewall technology in the cloud!

Re: irc

2011-04-28 Thread Alexander Schrijver
On Thu, Apr 28, 2011 at 12:44:24AM +0200, David Steiner wrote: > thoughts? Some people don't like it when you make IRC logs publicly available.

Re: a GOOD idea to harden OpenSSH!

2011-04-19 Thread Alexander Schrijver
> Your right that there are other ways to still login. I meant "you're".

Re: a GOOD idea to harden OpenSSH!

2011-04-19 Thread Alexander Schrijver
On Mon, Apr 18, 2011 at 07:54:13PM -0400, swilly wrote: > On Wed, Mar 30, 2011 at 03:22, Alexander Schrijver > wrote: > > It's a great way to keep someone out of their own system. > > Huh? Wouldn't securely backing up the RSA keys prevent this? If you > are mi

Re: a GOOD idea to harden OpenSSH!

2011-03-30 Thread Alexander Schrijver
On Wed, Mar 30, 2011 at 03:00:18PM +0700, Edho P Arief wrote: > On Wed, Mar 30, 2011 at 2:22 PM, Alexander Schrijver > wrote: > > It's a great way to keep someone out of their own system. > > > > Unless you enable root login... How does that help?

Re: a GOOD idea to harden OpenSSH!

2011-03-30 Thread Alexander Schrijver
On Wed, Mar 30, 2011 at 10:06:14AM +0300, Gregory Edigarov wrote: > IMHO it is absolutelly useless, objections are: > 1. You can limit connections using firewall. > 2. You already have the feature by name "limiting the number of > retries" > 3. If you really want PROTECTION - you should turn off pa

Re: Firewall rules to block unwanted protocolls on given ports

2011-03-19 Thread Alexander Schrijver
On Sat, Mar 19, 2011 at 06:05:49AM -0700, johhny_at_poland77 wrote: > Does somebody has an idea, that what kind of iptables/pf rule must i use to > achieve this?: > > i only want to allow these connections [on the output chain]: > > on port 53 output only allow udp - dns > on port 80 output only

Re: Need help with logging fork() calls

2011-03-16 Thread Alexander Schrijver
On Tue, Mar 15, 2011 at 10:07:48PM -0500, Amit Kulkarni wrote: > When we build a project using ./configure && make && make install, > inevitably there are invocations of all sorts of things. Is there a > utility which can log which process was created, its invocation > command, and then record it i

Re: Please help me decide: OpenWrt vs. OpenBSD

2011-01-20 Thread Alexander Schrijver
On Wed, Jan 19, 2011 at 04:32:21PM -0800, Scott Stanley wrote: > b. have been on this list for a while and totally disregarded the > culture you were within. grepping my mailbox it looks this is the case. Although he might be just a troll.

Re: Linux or OpenBSD

2010-11-23 Thread Alexander Schrijver
On Tue, Nov 23, 2010 at 01:50:09PM +0100, Toni Mueller wrote: > nope. I regularly see hardware which is supposed to be good, and which > gives no problems under Linux, which causes a lot of problems under > OpenBSD. I'm just about to throw away a bunch of recent machines that > worked fine with old

Re: Enough is enough!

2010-11-02 Thread Alexander Schrijver
On Tue, Nov 02, 2010 at 04:18:08AM -0400, bsdmas...@hushmail.com wrote: > FTP server down, amd64 snapshot packages way out of sync with > latest libc bump... What the hell! > > If you guys don't get your sh*t together, I'm done. > > Yeah, you read that right. > > If this whole situation is not

Re: Same shit all over again

2010-08-16 Thread Alexander Schrijver
>Absolutely, the U.S. Navy will know precisely where you are if you use >TOR, but no one else will. >Sincerely, >IR I meant that your IP address isn't the only thing you should try to hide. There are a lot of very noisy protocols which can give your location or identity away.

Re: Same shit all over again

2010-08-16 Thread Alexander Schrijver
On Mon, Aug 16, 2010 at 05:45:22PM +, Internet Retard wrote: > Wow... just wow... that is slick and *so* simple! Just like OpenBSD. > > So you sent that tinyurl link to the email account created by the imaginary, > anonymous, disgruntled OpenBSD developers and the person who created the > acco

Re: OpenBSD users.

2010-07-18 Thread Alexander Schrijver
On Sun, Jul 18, 2010 at 01:07:12AM +0200, Mateusz Gierblinski wrote: > I'm just wondering. Where are you OpenBSD users from? The Netherlands!

Re: Mailing list headers

2010-06-23 Thread Alexander Schrijver
On Wed, Jun 23, 2010 at 02:36:41AM -0400, Casey Allen Shobe wrote: > On Wednesday 23 June 2010 02:10:56 am Alexander Schrijver wrote: > > I use the Sender: header. > > How is it that you manage to filter on that in gmail? Because it's not > documented anywhere that I

Re: Mailing list headers

2010-06-22 Thread Alexander Schrijver
On Wed, Jun 23, 2010 at 01:16:38AM -0400, Casey Allen Shobe wrote: > On Tuesday 22 June 2010 11:11:59 pm you wrote: > > I use gmail and I filter on: > > > > Matches: to:(misc@openbsd.org) > > A mail that is sent to misc@openbsd.org, and CC to my personal address, > should > have the mailing

Re: Editing C with...

2008-05-03 Thread Alexander Schrijver
Real men use butterflies. On Sat, May 03, 2008 at 02:15:19PM -0400, bofh wrote: > Real men use ed. > > > > On 5/3/08, Jordi Espasa Clofent <[EMAIL PROTECTED]> wrote: > > Yes, I know, it's completely a dumb question; but I'm curious about it. > > > > I'm just learning C applied in networking are

Re: How to HIDE "OpenBSD" as user-agent?

2008-05-03 Thread Alexander Schrijver
On Sat, May 03, 2008 at 09:38:01PM +1000, Sunnz wrote: > 2008/4/30 macintoshzoom <[EMAIL PROTECTED]>: > > "" > > # block nmap OS detection scans somewhat (-O) > > block in quick proto tcp flags FUP/WEUAPRSF > > block in quick proto tcp flags WEUAPRSF/WEUAPRSF > > block in quick proto tcp flags

Re: How to HIDE "OpenBSD" as user-agent?

2008-04-29 Thread Alexander Schrijver
Write your own TCP/IP stack. But please read all the other replies before you do so. On Tue, Apr 29, 2008 at 6:30 PM, macintoshzoom <[EMAIL PROTECTED]> wrote: > seen some pf.conf settings against remote OS detection at > http://nmap.org/misc/defeat-nmap-osdetect.html#OPENBSD: > > ""The OpenBSD p

Re: How to HIDE "OpenBSD" as user-agent?

2008-04-29 Thread Alexander Schrijver
IIRC privoxy does what you want. On Tue, Apr 29, 2008 at 2:18 PM, macintoshzoom <[EMAIL PROTECTED]> wrote: > How to HIDE "OpenBSD" as user-agent? > > For security reasons it is sometimes interesting to hide GLOBALLLY th > O.S. you are running on AGAINST GIVING ANY CLUE TO HACKERS ABOUT HOW TO >

Re: [Invitation] Almighty GOD never forsake his people @ Fri Apr 4 05:00 - 06:00 ()

2008-04-04 Thread Alexander Schrijver
Who needs god? We have daemon(3).

Re: Sed or perl subsitutions - in place

2008-04-04 Thread Alexander Schrijver
>sed 's/$OLD/$NEW/' $file <-I know this will only > search and replace but how do I do in in-place so that the file itself is > modified.* sed -a 's/old/new/wfilename' filename It is explained in: cd /usr/share/doc/usd/15.sed/; make paper.txt; less paper.txt Why dont you

Re: About Squid port for OpenBSD 4.2

2008-03-30 Thread Alexander Schrijver
On Sun, Mar 30, 2008 at 3:22 PM, Comhte <[EMAIL PROTECTED]> wrote: > Thanks but that doesn't help me, could you explain please ? > > Alexander Schrijver a icrit : > > > > openldap includes are installed in /usr/local/include/ and libraries > > in /usr/local/

Re: About Squid port for OpenBSD 4.2

2008-03-30 Thread Alexander Schrijver
openldap includes are installed in /usr/local/include/ and libraries in /usr/local/lib/.

Re: Limiting CPU to a process or process group?

2008-01-14 Thread Alexander Schrijver
On Jan 14, 2008 2:34 PM, Andreas Kahari <[EMAIL PROTECTED]> wrote: > > On 14/01/2008, Alexander Schrijver <[EMAIL PROTECTED]> wrote: > > On Jan 14, 2008 1:30 PM, Andreas Kahari <[EMAIL PROTECTED]> wrote: > > > On 14/01/2008, Alexander Schrijver <[EMAIL PRO

Re: Limiting CPU to a process or process group?

2008-01-14 Thread Alexander Schrijver
On Jan 14, 2008 1:30 PM, Andreas Kahari <[EMAIL PROTECTED]> wrote: > On 14/01/2008, Alexander Schrijver <[EMAIL PROTECTED]> wrote: > > On Jan 14, 2008 11:52 AM, Andreas Kahari <[EMAIL PROTECTED]> wrote: > > > Hi, > > > > > > Is there a w

Re: Limiting CPU to a process or process group?

2008-01-14 Thread Alexander Schrijver
On Jan 14, 2008 11:52 AM, Andreas Kahari <[EMAIL PROTECTED]> wrote: > Hi, > > Is there a way of limiting the amount of CPU given to a particular > process or process group? For example, I would want the build of the > qt4 port to use a maximum of 25% of the available CPU, leaving the CPU > 75% idle

Re: Using PostgreSQL as an user database

2007-11-22 Thread Alexander Schrijver
On Nov 22, 2007 2:10 PM, Gilles Chehade <[EMAIL PROTECTED]> wrote: > > On Thu, Nov 22, 2007 at 05:35:00PM +0100, Alexander Schrijver wrote: > > Hi everybody, > > > > I am trying to configure a virtual hosting system on OpenBSD, and I am > > currently looking a

Using PostgreSQL as an user database

2007-11-22 Thread Alexander Schrijver
format as master.passwd. Are there any other methods for doing this, or are there things I am overlooking with this configuration? Thanks, Alexander Schrijver

Re: Slow Sparc Ultra 5

2005-09-16 Thread Alexander Schrijver
On 9/16/05, BadMagic <[EMAIL PROTECTED]> wrote: > Hello, > > I installed OpenBSD 3.7 (Sparc64) on my Ultra 5 and it's performance is not > what I'd expected. I'd recently had Solaris on there (using CDE) and it ran > quite quickly but with OpenBSD, when I do an 'ls -la', it takes forever for >