Re: Secure Apache Webserver

On Thu, 2006-09-28 at 10:55 +0200, Aiko Barz wrote: > Hi *, > > I use OpenBSD+Apache+Chroot for my webservices. The users can access > their vhosts by using scponly, which is chrooted into /var/www as > well. > /htdocs/www.example.net belongs to theuser:www and has the > permissions rwxr-x---. >

Possible systrace evidence [Was: Re: Sendmail security problem]

On Fri, 2006-03-24 at 14:14 +, Stuart Henderson wrote: > The patch is in 3.8-stable now, and -current has 8.13.6, so > people following either of these just need to update. > I run sendmail under systrace (OpenBSD 3.8) and a couple of weeks ago (sometime after the exploit was initially repor

Re: Unsafe Sockets

On Sun, 2006-02-26 at 09:11 -0500, James Strandboge wrote: > On Sat, 2006-02-25 at 14:13 -0700, Jason Balan wrote: > > > Feb 25 13:53:22 bua2 sendmail[13279]: k1PKrMv5013279: Milter (cvgfilter): > > local socket name /var/run/cvgfilter/cvgfilter.sock > > unsafe > >

Re: Unsafe Sockets

On Sat, 2006-02-25 at 14:13 -0700, Jason Balan wrote: > Feb 25 13:53:22 bua2 sendmail[13279]: k1PKrMv5013279: Milter (cvgfilter): > local socket name /var/run/cvgfilter/cvgfilter.sock > unsafe > Feb 25 13:53:22 bua2 sendmail[13279]: k1PKrMv5013279: Milter (cvgfilter): to > error state > > Not

occassional carp incorrect hash message

I am trying to use carp in a high availability cluster with an i386 and an amd64 machine and OpenBSD 3.8. Most of the time, everything is working fine, but occasionally on the i386 machine I get: Feb 22 21:24:12 host386 /bsd: carp0: incorrect hash I have switched out network cards, moved the car

mountd startup conflict

Hi, Today I rebooted my file server (OpenBSD 3.8-STABLE), and when it came back up mountd decided to use tcp port 873. However, I run rsyncd which also listens on port 873 by default, and since it starts (via rc.local) after mountd, it failed to start. Short of either moving my rsyncd startup to

Re: /etc default dir and file permissions.

On Sat, 2006-01-28 at 06:30 -0800, Anon Y. Mous wrote: > How do I restore the default permissions for /etc > (and any) directory on > my hdd? See the manpage for mtree(8) and /etc/security for the automatic mtree checks. mtree can even do the changes automatically. -- James S

Re: sendmail/pop3 setup question

ur sendmail server and see if traffic is arrives from your ISP after you send an email like above. If you do get packets from your ISP, then check /var/log/maillog for what might be happening, but I bet your ISP isn't delivering to you at all. You'll get a bounce or failed delivery e

Re: Possible implication of a Sendmail on OpenBSD 3.8 in a spam attack

o this is only a guess. You need to look in /var/log/maillog and see where those messages are coming from. Also, look in php.ini and turn on debugging. Try disabling the php application and see if the messages stop. -- James Strandboge [EMAIL PROTECTED]

Re: browser security

On Thu, 2005-12-15 at 03:02 +0100, Andreas Bartelt wrote: > Hi, > > James Strandboge wrote: > ... > >>While we're at systrace, I was wondering - could systrace reduce the risks > >>associated with running apache with PHP? > > > > > > Defau

Re: browser security

On Wed, 2005-12-14 at 23:38 +0100, viq wrote: > On Wednesday 14 December 2005 23:15, James Strandboge wrote: > > > systrace could provide an effective jail for firefox. 'man systrace'. > > Yes, it was mentioned, and it sounds like a good idea. > > While

Re: browser security

On Wed, 2005-12-14 at 21:58 +0100, viq wrote: > On Wednesday 14 December 2005 19:48, Bob Smith wrote: > > > Just a thought: sudo -u $some_restricted_user $your_preffered_browser ? > > > > good that you brought this up; i been wondering about this too. > > > > does it help? if so how come there isn

Re: Soekris

On Thu, 2005-12-08 at 12:47 +0100, Thomas BC6rnert wrote: > Yes, you need only 22 MB :-) > > Thomas > > On Thu, 2005-12-08 at 09:41 -0200, Gustavo Rios wrote: > > One ore question: > > > > I was thinking going for net4526-30 model. Is 64MB CF enough to run > > openbsd 3.8 for a wireless router?

Re: PHP or Mysql problem?

On Thu, 2005-06-16 at 09:22 +0200, Per Engelbrecht wrote: > James Strandboge wrote: > > On Wed, 2005-06-15 at 11:30 +0200, Nico Meijer wrote: > > > >>Hi Kiraly, > >> > >> > >>>mysql error: Can't create/write to file '/tmp/ > >&

Re: PHP or Mysql problem?

On Wed, 2005-06-15 at 11:30 +0200, Nico Meijer wrote: > Hi Kiraly, > > > mysql error: Can't create/write to file '/tmp/ > > #sql_4c99_0.MYD' (Errcode: 9) > > MySQL problem. > > Simple suggestions, not idiot-proof: I prefer this on OpenBSD 3.6 (should be same on 3.7): Add to /etc/login.conf: #