How to tweak the limit of RAM for a daemon started by a user?

2009-11-30 Thread Matthew Young
Hello, Ive been reading at man login.conf and specifically the parameters for memoryuse . I have raised these for 1024MB for the specific user in question as per blow console:\ :ignorenologin:\ :datasize=infinity:\ :maxproc=infinity:\ :memoryuse=1024

Questions about chrooted apache and exec() in php

2009-11-18 Thread Matthew Young
Hello, Iam running the apache in base 4.5 with the chroot. Iam trying to run this simple script (as a test) but I cannot make it to output anything... I have done a cp /usr/bin/whoami /var/www/bin/ , made sure that ownership is root:daemon, and permissions are 600, i have even tried 777 i

Re: 4.6 hang

2009-10-30 Thread Matthew Young
Iam very curious about your problem, we all fear encountering something similar in the future... Why wasnt anybody able to help out based on your DDB trace ? If I ever get such event what is the best information then that one should post to recieve help? (provided off course people are wanting

PF challenge dealing with HTTPS URL restriction policies.. would it help, other possible solution?

2009-10-29 Thread Matthew Young
Hello, Iam looking for a way to have an allowed list of SSL enabled sites that a end user can browse, but this entirely done on a server level with _zero_ configuration on the pc. In a dream world, squid would be able to tranparently proxy https and thus I would create an allowed list of ssl

Re: PF challenge dealing with HTTPS URL restriction policies.. would it help, other possible solution?

2009-10-29 Thread Matthew Young
/29 Matthew Young myoung24...@gmail.com: Hello, Iam looking for a way to have an allowed list of SSL enabled sites that a end user can browse, but this entirely done on a server level with _zero_ configuration on the pc. In a dream world, squid would be able to tranparently proxy https

Re: PF challenge dealing with HTTPS URL restriction policies.. would it help, other possible solution?

2009-10-29 Thread Matthew Young
good domains. Then the proxy can only find the things you want it to. On Oct 29, 2009 1:03 PM, Matthew Young myoung24...@gmail.com wrote: Hello, If I use a reverse proxy I would have to know the SSL key of the remote SSL site. (gmail.com) so that the reverse proxy server would decrypt

Re: PF challenge dealing with HTTPS URL restriction policies.. would it help, other possible solution?

2009-10-29 Thread Matthew Young
willing to do that, they're willing to have your stupid reverse proxy mitm all your certificates since they'll also fail. Perhaps between my extermely subtle taunting, I should give up and just ask you *why* the hell do you want to do this? 2009/10/29 Matthew Young myoung24...@gmail.com

Help with simple pf, how to let traffic out from the firewall ?

2009-10-27 Thread Matthew Young
Hello, I have this very simple pf.conf . However Iam unable to specify that the firewall itself should have unrestricted access, the port blockings should only apply to the users on the LAN. What is the best way to accomplish this? Ive tried tagging 127.0.0.1 to be unrestricted but that didn't

RARITAN KVM COMPATIBLE? uhidev0 at uhub2 port 2 configuration 1 interface 0 RU RU-CIM rev 2.00/0.00 addr 2

2009-09-29 Thread Matthew Young
Hello, Iam having issues with Raritan Dominion KX II 32 Most of the macros dont work (most important the one to cal DDB), and Iam suspecting that is making some OBSD 4.5 boxes to freeze. Before they froozed this is what the boxes (raritan usb error ) had in common: uhidev0 at uhub2 port 2

PF binat: How to Binat bewteen two public IPs?

2009-09-21 Thread Matthew Young
Hello, Iam trying to setup a PF box with ONE interface on a public IP to be able to redirect all packets that come to one of its IPs to another IP. The objective is to cloak the IP of the final destination. Please note that there is a public IP on both sides. 1.1.1.1 (me) --- 2.2.2.2 (PF box

Re: PF binat: How to Binat bewteen two public IPs?

2009-09-21 Thread Matthew Young
to relay the connection to the other box, I believe that would get you what you want. J On Mon, Sep 21, 2009 at 10:50 AM, Matthew Young myoung24...@gmail.comwrote: Hello, Iam trying to setup a PF box with ONE interface on a public IP to be able to redirect all packets that come to one

Re: PF binat: How to Binat bewteen two public IPs? *NOT RESOLVED*

2009-09-21 Thread Matthew Young
Hello guys, Wouldnt a BINAT bewteen to public ips be possible, or wouldnt that make a difference to what iam trying to achieve? Thank you. Matt On Mon, Sep 21, 2009 at 12:50 PM, Matthew Young myoung24...@gmail.comwrote: Hello, Iam trying to setup a PF box with ONE interface on a public IP