Re: [OpenIndiana-discuss] CIFS automount share visibility

2014-02-12 Thread Jim Klimov
On 2014-02-12 08:54, Stefan Müller-Wilken wrote: Dear all, I'm currently having problems with CIFS automount shares being visible to all connected users and not only to each user personally. Quick search has revealed that similar has happened in the past (https://www.mail-archive.com/cifs-dis

Re: [OpenIndiana-discuss] CIFS automount share visibility

2014-02-12 Thread Stefan Müller-Wilken
Hi Jim, unfortunately that didn't change a bit. I switched off sharesmb on all relevant shares, doublechecked /etc/smbautohome and restarted the box twice. No luck - the autohome shares are still visible to anyone. Any other place I could check this? Cheers Stefan

[OpenIndiana-discuss] Avoiding the NTP amplification exploit

2014-02-12 Thread Gary Mills
For those who haven't already heard about this NTP exploit, it begins with a single UDP packet sent to a computer running the NTP service. With the default configuration, a monlist query will result in many packets being returned to the source of the query. All it takes is a spoofed source address

Re: [OpenIndiana-discuss] Avoiding the NTP amplification exploit

2014-02-12 Thread Saso Kiselkov
On 2/12/14, 2:43 PM, Gary Mills wrote: > For those who haven't already heard about this NTP exploit, it begins > with a single UDP packet sent to a computer running the NTP service. > With the default configuration, a monlist query will result in many > packets being returned to the source of the q

Re: [OpenIndiana-discuss] Avoiding the NTP amplification exploit

2014-02-12 Thread Gary Mills
On Wed, Feb 12, 2014 at 02:48:20PM +, Saso Kiselkov wrote: > On 2/12/14, 2:43 PM, Gary Mills wrote: > > For those who haven't already heard about this NTP exploit, it begins > > with a single UDP packet sent to a computer running the NTP service. > > With the default configuration, a monlist qu

Re: [OpenIndiana-discuss] Avoiding the NTP amplification exploit

2014-02-12 Thread John D Groenveld
In message <20140212154040.ga10...@mail.messagingengine.com>, Gary Mills writes : >4.2.7p411, which I assume is not vulnerable. My Solaris 11.1 desktop >only runs version 4.2.5p200, putting it behind the OI version. It >likely is vulnerable. Oracle's Solaris support repo is serving: pkg://solari

Re: [OpenIndiana-discuss] Avoiding the NTP amplification exploit

2014-02-12 Thread Bob Friesenhahn
On Wed, 12 Feb 2014, Saso Kiselkov wrote: Prudent advice, yes, but I can't think of any situation where an openly accessible NTP service on an Internet-facing machine that isn't *specifically* configured to be an NTP server isn't a case of bad admin negligence. *All* Internet-facing machines sho

Re: [OpenIndiana-discuss] Avoiding the NTP amplification exploit

2014-02-12 Thread Saso Kiselkov
On 2/12/14, 5:35 PM, Bob Friesenhahn wrote: > On Wed, 12 Feb 2014, Saso Kiselkov wrote: >> >> Prudent advice, yes, but I can't think of any situation where an openly >> accessible NTP service on an Internet-facing machine that isn't >> *specifically* configured to be an NTP server isn't a case of b

Re: [OpenIndiana-discuss] Avoiding the NTP amplification exploit

2014-02-12 Thread Bob Friesenhahn
On Wed, 12 Feb 2014, Saso Kiselkov wrote: What services was the system providing? Was NTP one of them? If not, then why were you not running ipf? Always use layered defenses, minimize attack surfaces and don't assume services are configured properly out of the box, or that they are without bugs.

Re: [OpenIndiana-discuss] FW: Low low end server

2014-02-12 Thread Ben Taylor
On Tue, Feb 11, 2014 at 8:17 PM, Ben Taylor wrote: > > > > On Tue, Feb 11, 2014 at 3:20 PM, Saso Kiselkov wrote: > >> On 2/11/14, 7:59 PM, Ben Taylor wrote: >> > That's a cool unit. Could use something like that internal drive bay >> that >> > supported SAS disks. >> >> Don't know if somebody men

Re: [OpenIndiana-discuss] FW: Low low end server

2014-02-12 Thread Saso Kiselkov
On 2/12/14, 7:16 PM, Ben Taylor wrote: > On Tue, Feb 11, 2014 at 8:17 PM, Ben Taylor wrote: > >> >> >> >> On Tue, Feb 11, 2014 at 3:20 PM, Saso Kiselkov wrote: >> >>> On 2/11/14, 7:59 PM, Ben Taylor wrote: That's a cool unit. Could use something like that internal drive bay >>> that sup

Re: [OpenIndiana-discuss] FW: Low low end server

2014-02-12 Thread Ben Taylor
On Wed, Feb 12, 2014 at 2:49 PM, Saso Kiselkov wrote: > On 2/12/14, 7:16 PM, Ben Taylor wrote: > > On Tue, Feb 11, 2014 at 8:17 PM, Ben Taylor >wrote: > > > >> > >> > >> > >> On Tue, Feb 11, 2014 at 3:20 PM, Saso Kiselkov >wrote: > >> > >>> On 2/11/14, 7:59 PM, Ben Taylor wrote: > That's a

[OpenIndiana-discuss] HP Proliant Microserver N54L questions for those who've already tried it

2014-02-12 Thread Hans J. Albertsson
A: I found a web page on http://terfmop.co.uk/blog/2013/07/31/hp-proliant-n54l-bios-modification-guide-allow-hot-plug-sata-and-5th-sata-port/ describing a procedure for creating a BIOS restore USB stick and a BIOS modification USB stick. So I wonder: will the N54L run XP or W7 Home well enough t

Re: [OpenIndiana-discuss] HP Proliant Microserver N54L questions for those who've already tried it

2014-02-12 Thread Philip Robar
I've seen discussions on modifying the BIOS to enabling hot-swapping and up SATA levels of the HP Proliant Microserver N54L in other forums-- FreeNAS if I recall correctly--when I was looking into HP Microservers a couple of days ago. A little searching should quickly turn up those thread. I got th

Re: [OpenIndiana-discuss] FW: Low low end server

2014-02-12 Thread Floris van Essen ..:: House of Ancients Amstafs ::..
I got this one : http://www.sharkoon.com/?q=en/node/1824 Bought it for about 30 euro's Met vriendelijke groet / With kind regards,     Floris van Essen -Oorspronkelijk bericht- Van: Saso Kiselkov [mailto:skiselkov...@gmail.com] Verzonden: woensdag 12 februari 2014 20:50 A

[OpenIndiana-discuss] Virtualbox, OI 151a8 and vboxflt problem

2014-02-12 Thread Carl Brewer
G'day, I have a pretty happy OI151a8 server running Virtualbox 4.3.6 It's got 3 guests (2 NetBSD, one CentOS 5). They mostly just burble along, except every now and then (roughly every 7-10 days) they lose network connectivity. The only way I've found to get them online again is to shut the

Re: [OpenIndiana-discuss] Virtualbox, OI 151a8 and vboxflt problem

2014-02-12 Thread Geoff Nordli
On 14-02-12 04:43 PM, Carl Brewer wrote: G'day, I have a pretty happy OI151a8 server running Virtualbox 4.3.6 It's got 3 guests (2 NetBSD, one CentOS 5). They mostly just burble along, except every now and then (roughly every 7-10 days) they lose network connectivity. The only way I've foun

[OpenIndiana-discuss] OpenIndiana problems recognizing all disks/vdev

2014-02-12 Thread Randall Svancara
Hi, I am using openindiana and I have disk shelves, with 24-4TB drives each. I have two shelves setup already, and I purchased a third. I thought adding the next batch of disks would be easy, but apparently it is not as OpenIndiana refuses to see all the disks. parted -l shows: Disk /dev/

Re: [OpenIndiana-discuss] OpenIndiana problems recognizing all disks/vdev

2014-02-12 Thread Udo Grabowski (IMK)
On 13/02/2014 02:32, Randall Svancara wrote: Hi, I am using openindiana and I have disk shelves, with 24-4TB drives each. I have two shelves setup already, and I purchased a third. I thought adding the next batch of disks would be easy, but apparently it is not as OpenIndiana refuses to see al

Re: [OpenIndiana-discuss] Virtualbox, OI 151a8 and vboxflt problem

2014-02-12 Thread Carl Brewer
On 13/02/2014 12:27 PM, Geoff Nordli wrote: Hi Carl. I have a few OI+VBox boxes in production right now and I haven't experienced any networking failure. The only part isn't supported is the crossbow network stack, you need to use the streams version. They have absolutely been rock solid. I

Re: [OpenIndiana-discuss] Virtualbox, OI 151a8 and vboxflt problem

2014-02-12 Thread Geoff Nordli
On 14-02-12 06:55 PM, Carl Brewer wrote: On 13/02/2014 12:27 PM, Geoff Nordli wrote: Hi Carl. I have a few OI+VBox boxes in production right now and I haven't experienced any networking failure. The only part isn't supported is the crossbow network stack, you need to use the streams version.

Re: [OpenIndiana-discuss] OpenIndiana problems recognizing all disks/vdev

2014-02-12 Thread Predrag Zecevic [Unix Systems Administrator]
On 02/13/14 02:42 AM, Udo Grabowski (IMK) wrote: On 13/02/2014 02:32, Randall Svancara wrote: Hi, I am using openindiana and I have disk shelves, with 24-4TB drives each. I have two shelves setup already, and I purchased a third. I thought adding the next batch of disks would be easy, but app