Re: no reverse DNS causing connectivity problems

2008-06-09 Thread Jeffrey Goldberg
it a reasonable policy to disallow ssh and telnet (and certainly mail) from hosts that don't have proper PTR records. -j -- Jeffrey Goldberghttp://www.goldmark.org/jeff/ ___ freebsd-questions@freebsd.org mailing list h

Re: generating random passwords

2008-06-11 Thread Jeffrey Goldberg
hings like kwallet or other Unixish password management systems. But once again, I recommend that everyone use a proper password management system. -j -- Jeffrey Goldberghttp://www.goldmark.org/jeff/ ___ freebsd-ques

Re: FreeBSD and User Security

2008-06-11 Thread Jeffrey Goldberg
How to think about security" essay: http://www.schneier.com/crypto-gram-0204.html#1 -j -- Jeffrey Goldberghttp://www.goldmark.org/jeff/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/list

Re: FreeBSD and User Security

2008-06-11 Thread Jeffrey Goldberg
looking at this very briefly. The people who come up with this stuff and do proper analysis are both smarter and more knowledgeable than I am. Cheers, -j -- Jeffrey Goldberghttp://www.goldmark.org/jeff/ ___ freebsd-questions

Re: FreeBSD and User Security

2008-06-11 Thread Jeffrey Goldberg
On Jun 11, 2008, at 8:08 PM, cpghost wrote: On Wed, 11 Jun 2008 19:45:51 -0500 Jeffrey Goldberg <[EMAIL PROTECTED]> wrote: First it should consume memory. A very complete test of memory through a modified memtest should be able to detect whether system reported memory is accurate.

Re: generating random passwords

2008-06-11 Thread Jeffrey Goldberg
On Jun 11, 2008, at 7:46 PM, Andrew Berry wrote: Any idea what the name of the project for the Security framework is? I can't seem to find anything on Google. I'd love to be able to access keychains from OS X on other platforms, without resorting to dumping everything to plaintext. This l

Re: FreeBSD and User Security

2008-06-11 Thread Jeffrey Goldberg
On Jun 11, 2008, at 9:05 PM, [EMAIL PROTECTED] wrote: On Wed, Jun 11, 2008 at 08:51:16PM -0500, Jeffrey Goldberg wrote: The next time I reboot the one server I've got with an SVM capable processor I'm going to disconnect the power (to make sure that I'm getting a real rebo

Re: FreeBSD and User Security

2008-06-12 Thread Jeffrey Goldberg
On Jun 12, 2008, at 8:19 AM, David Naylor wrote: I think this argument is rather mute, just because there are no programs exploiting security vulnerabilities does not been there are not vulnerabilities, But it is far from moot if you are interested in the actual threat against your system.

Re: FreeBSD and User Security

2008-06-12 Thread Jeffrey Goldberg
On Jun 12, 2008, at 3:24 PM, David Naylor wrote: This is a general enquiry. What had sparked my interest in this subject is the above mentioned article. In this case it is a workstation used to access and manage account and cash flows. The threat would be anyone gaining access to 'diver

Re: Enforce minimal file/ dir permissions

2008-06-16 Thread Jeffrey Goldberg
grok this work out a policy and rules that will do more good than harm? Yes, I've used google, but haven't yet come across what I need. Cheers, -j -- Jeffrey Goldberghttp://www.goldmark.org/jeff/ ___ freebsd-ques

Re: /var full

2008-06-19 Thread Jeffrey Goldberg
tion of that of the mysql lists, but I don't follow the lists closely. (For the most part, I just go and clean out the mail folder they collect in every week or so.) Cheers, -j -- Jeffrey Goldberghttp://www.goldmark.org/jeff/

Re: Binary upgrade from legacy version + ports

2008-07-28 Thread Jeffrey Goldberg
ed" a 7-STABLE machine to 7-RELEASE, and discovered, among some other problems, that sudo failed with the same error you report. (I've now put a link to USE-THIS-SUPFiLE to stable-supfile in /usr/ local/etc/cvsup to avoid the blunder in the future.) -j -- Jeffrey Goldberg

Re: email disclaimer

2008-07-29 Thread Jeffrey Goldberg
On Jul 29, 2008, at 6:13 AM, Odhiambo Washington wrote: I can tell you it is "impossible". Why? While you can actually write a script to try to do it, you'll more likely end up breaking the e-mail format, because it will not be too easy to rightly guess the content-type/boundaries in replies.

Re: shutdown/reboot suggestion

2008-08-09 Thread Jeffrey Goldberg
if they could be modified to require the hostname of the machine as their first argument, otherwise, they refuse to bring the machine down? shutdown -h now becomes: shutdown example.com -h now As others have pointed out, you can easily make scripts to do that. -j -- Jeffrey Goldberg

Re: Best SMTP Gateway Program and Reporting Tools

2008-08-12 Thread Jeffrey Goldberg
On Aug 12, 2008, at 3:22 PM, Josh Kidd wrote: I just wanted to pose this question to the list on people's opinions as to what the best SMTP Gateway program (ie. Sendmail, Postfix, etc) [...] Depending on the nature of the site and needs, my preferences tend to run exim, then postfix, then

Re: USB Drive Reliability

2008-08-18 Thread Jeffrey Goldberg
[mailed and posted] On Aug 17, 2008, at 7:36 PM, Jason C. Wells wrote: I realize that this is primarily a tech support forum. I wasn't asking for a solution to the problem. I was asking for other peoples experiences. If the USB support in FreeBSD was spotty according to other people, as h

Re: How to use dig with an ip list

2008-08-18 Thread Jeffrey Goldberg
cleaner output. -j -- Jeffrey Goldberghttp://www.goldmark.org/jeff/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: How to use dig with an ip list

2008-08-18 Thread Jeffrey Goldberg
to do this? Easiest: $ for i in `cat ip-list`; do > echo -n "$i " > dig +short -x $i > done Better might be to use something in p5-net-DNS so that you don't make N separate calls to dig. Cheers, -j -- Jeffrey Goldberg

Re: How to use dig with an ip list

2008-08-19 Thread Jeffrey Goldberg
On Aug 18, 2008, at 10:25 PM, Fraser Tweedale wrote: On Mon, Aug 18, 2008 at 10:18:07PM -0500, Jeffrey Goldberg wrote: You'll want to change line four to echo "$LINE " `dig +short -x $LINE` for a cleaner output. The original works fine for me in ash. Definitely nothing wro

Re: Security questions, seeing more then one dhcp client.

2008-08-22 Thread Jeffrey Goldberg
nmap (available from ports security/nmap) with something like nmap -O -sV IP-ADDRESS-OF-MYSTERY-DEVICE That should give you a fair amount of information about the device. Cheers, -j -- Jeffrey Goldberghttp://www.goldmark.org

Re: MTA advice ??

2008-08-24 Thread Jeffrey Goldberg
ould serve me bet in this instance. exim, postfix and sendmail are all good choices. I personally prefer exim, but I think that someone in your position would do best with postfix. Cheers, -j -- Jeffrey Goldberghtt

Re: MTA advice ??

2008-08-25 Thread Jeffrey Goldberg
On Aug 25, 2008, at 12:49 AM, Matthew Seaman wrote: Jeffrey Goldberg wrote: In the old days, if one MTA couldn't reach another it would hold stuff in its queue for four or five days. Now, most MTAs appear to be configured to give up after 24 hours. In which case those mail system

Re: Complex text layout

2008-08-31 Thread Jeffrey Goldberg
with something like within the HEAD portion of the document. The LANG and DIR attributes are documented at http://htmlhelp.com/reference/html40/attrs.html#lang though that is more of a reference document than a "how to". Cheers, -j -- Jeffrey Goldberg

Re: Forwarding all mail to a local user

2008-08-31 Thread Jeffrey Goldberg
edited the virtusertable file, you should run make maps in that directory. Cheers, -j -- Jeffrey Goldberghttp://www.goldmark.org/jeff/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo

Re: alternatives to mergemaster

2008-09-06 Thread Jeffrey Goldberg
emaster.rc. AUTO_UPGRADE isn't documented in mergemaster(8). I guess it's time for me to submit my first documentation patch (unless someone beats me to it). Cheers, -j -- Jeffrey Goldberghttp://www.goldmark.org/jeff/ ___

Re: USB Drive Reliability

2008-09-07 Thread Jeffrey Goldberg
On Aug 19, 2008, at 9:43 AM, Warren Block wrote: On Mon, 18 Aug 2008, Jeffrey Goldberg wrote: I have one system (7.0) which becomes extremely unstable if I have a USB drive connected. I usually get a system crash in 10 to 30 minutes after mounting the USB drive. It has never crashed

HW recommendations for light weight server

2008-09-08 Thread Jeffrey Goldberg
ing with an amd64 architecture would make the transition easier, since I might be able to use my current disk. So any thoughts or recommendations will be welcome. If people wish to email me off list, I'll provide a summary of responses. Cheers, -j -- Jeffrey Goldberg

<    1   2   3