Urgente! Entrega-Recepción de Cargos Públicos y Rendición de Cuentas!

2012-07-09 Thread Ing. Loana Blum
749859 [IMAGE] Seminario- Taller Rendición de Cuentas al Gobierno Federal Acta ENTREGA-RECEPCIÓN y manejo de LIBROS BLANCOS 30 de Julio, Cd. de México. 10 horas personalizadas de entrenamiento guiado por un experto. Optimice sus procesos y ahorre dinero con esta práctica herramienta! ¡Reciba la i

pf: divert only incomming traffic

2012-07-09 Thread Florian Obser
Hi, so we were used for a dns amplification attack. Some jackass thought it would be a good idea to send us ~50k qps with the DO flag set and type ANY. This would have resulted in ~750mbit/s outbound traffic. For all you masochists out there, this is the iptables rule I came up with: iptables -

Re: gimp 2.8 on OpeBSD -current

2012-07-09 Thread Stuart Henderson
On 2012-07-09, MERIGHI Marcus wrote: > both hints were not enough on my very dirty (as in: updating not > reinstalling for years) notebook: That really shouldn't make a difference. > Though I have run ``pkg_add -v -v -u -i -D update -D updatedepends'', > ports/infrastructure/bin/out-of-date give

Re: "simple" PF rule? redirect port without touching address

2012-07-09 Thread Stuart Henderson
On 2012-07-09, Simon Perreault wrote: > On 2012-07-09 10:17, Stuart Henderson wrote: >> On 2012-07-09, Fil DiNoto wrote: >>> But i was wondering if I could achieve something that would work for >>> ALL the addresses behind the router as well without creating >>> individual rules for each address.

Re: firewall not catching?

2012-07-09 Thread Peter J. Philipp
On Mon, Jul 09, 2012 at 10:21:47PM +0200, Peter Hessler wrote: > Use 'pfctl -vvss' to see which rule it is matching on. I bet you have a > rule that matches that traffic. That was the hint I needed. Thanks! It did cross my mind and I did dump the states before but I must have missed that IP in

Re: firewall not catching?

2012-07-09 Thread Peter Hessler
Use 'pfctl -vvss' to see which rule it is matching on. I bet you have a rule that matches that traffic. On 2012 Jul 09 (Mon) at 20:34:55 +0200 (+0200), Peter J. Philipp wrote: :Hi, : :Was there any bugfixes between 5.0 and 5.1 that would allow certain packets :through the pf filter? I have a ca

Re: OpenBSD - UEFI Secure Boot

2012-07-09 Thread Mihai Popescu
Rudolf Leitgeb wrote: > For 15+ years I read these regular Cassandra calls that this and that > "innovation" will kill free operating systems on commodity hardware, > remember Adaptec SCSI controllers, 3D video cards, I2O, trusted > computing and whatever the "feature of the day" is called. It v

Re: gimp 2.8 on OpeBSD -current

2012-07-09 Thread Mihai Popescu
You should find a file named gaim.core in your home directory, try to analyze it using gdb. Also, better, try to run gaim from gdb and see if you call pull some extra infos. Maybe they are helpful. I got some segmentation faults with blender, another graphical frontend but from a discussion with po

Re: firewall not catching?

2012-07-09 Thread Brian W.
I would take steps to see if another rule is being matched when you see the flaw? Brian On Jul 9, 2012 12:28 PM, "Peter J. Philipp" wrote: > > On Mon, Jul 09, 2012 at 12:47:18PM -0600, Luis Coronado wrote: > > You need to provide more information about your situation to be able to > > help you.

Re: firewall not catching?

2012-07-09 Thread Peter J. Philipp
On Mon, Jul 09, 2012 at 12:47:18PM -0600, Luis Coronado wrote: > You need to provide more information about your situation to be able to > help you. dmesg, pf ruleset, network config., etc. > > -luis Due to the sensitivity of the host I cannot do that. But I'll tell you what I will do. Upgrade.

Re: Running OpenBSD on an Acer Aspire One 110L netbook

2012-07-09 Thread mlambda
On Fri, 2012-07-06 at 10:00 +, Stuart Henderson wrote: > On 2012-07-04, mlambda wrote: > > Sometimes the touchpad doesn't work (the two buttons work, but the > > cursor doesn't move), unfortunately this doesn't seem to be reproducible > > and can only be fixed by rebooting. > > I suspect ther

Re: firewall not catching?

2012-07-09 Thread Luis Coronado
You need to provide more information about your situation to be able to help you. dmesg, pf ruleset, network config., etc. -luis On Mon, Jul 9, 2012 at 12:34 PM, Peter J. Philipp wrote: > Hi, > > Was there any bugfixes between 5.0 and 5.1 that would allow certain packets > through the pf filte

firewall not catching?

2012-07-09 Thread Peter J. Philipp
Hi, Was there any bugfixes between 5.0 and 5.1 that would allow certain packets through the pf filter? I have a case where I cannot block a certain IP on a 5.0 box. I tested that same IP on an 5.1 box with a spoofer and I found my same rules to catch, so it's not my logic I don't think. I tes

Re: gimp 2.8 on OpeBSD -current

2012-07-09 Thread MERIGHI Marcus
Hello, I'm pretty sure the problem is on my end but I'm running out of ideas on how to get gimp to work with jpegs again. Any pointers welcome. Details below. pkesh...@gmail.com (patrick keshishian), 2012.07.05 (Thu) 23:36 (CEST): > On Tue, Jul 3, 2012 at 2:35 PM, Fred Crowson wrote: > > I'm ge

Re: "simple" PF rule? redirect port without touching address

2012-07-09 Thread Simon Perreault
On 2012-07-09 10:17, Stuart Henderson wrote: On 2012-07-09, Fil DiNoto wrote: But i was wondering if I could achieve something that would work for ALL the addresses behind the router as well without creating individual rules for each address. Something like this: pass in on egress proto tcp fr

Re: "simple" PF rule? redirect port without touching address

2012-07-09 Thread Artturi Alm
2012/7/9 Stuart Henderson > On 2012-07-09, Fil DiNoto wrote: > > I am trying to achieve something I thought would be simple, but > > haven't had any luck. > > > > > > I have an OpenBSD 5.0 router/firewall with public IP X.X.X.A > > > > Behind it are a mix of OpenBSD and Linux systems, all with p

Re: "simple" PF rule? redirect port without touching address

2012-07-09 Thread Stuart Henderson
On 2012-07-09, Fil DiNoto wrote: > I am trying to achieve something I thought would be simple, but > haven't had any luck. > > > I have an OpenBSD 5.0 router/firewall with public IP X.X.X.A > > Behind it are a mix of OpenBSD and Linux systems, all with public IP. NO NAT. > > I run ssh on an altern

Re: OpenBSD forked

2012-07-09 Thread Tomas Bodzar
On Mon, Jul 9, 2012 at 11:55 AM, Siju George wrote: > On Sun, Jun 17, 2012 at 2:45 AM, Theo de Raadt > wrote: >> They started the fork because they got kicked out because one >> developer (Marco) hired 5 other developers for his startup company, >> and attempted to hire around 10 other developer

Re: partitioning with more mount points on obsd51

2012-07-09 Thread Norman Golisz
> I tend to get old computers from folks that upgrade and actually > have a DNS Server running on an Intel built for windows95. :) Yeah, BSDs deal fine with old computers and limited resources. I love that, too. :) > And for the sake of comparison, I have a FreeBSD machine with ZFS > filesystem

Re: OpenBSD forked

2012-07-09 Thread Tomas Bodzar
On Mon, Jul 9, 2012 at 11:55 AM, Siju George wrote: > On Sun, Jun 17, 2012 at 2:45 AM, Theo de Raadt > wrote: >> They started the fork because they got kicked out because one >> developer (Marco) hired 5 other developers for his startup company, >> and attempted to hire around 10 other developer

login.conf bcrypt rounds default and bcrypt kicks pams ass

2012-07-09 Thread Kevin Chadwick
http://www.h-online.com/security/news/item/John-the-Ripper-now-able-to-crack-office-files-and-use-GPUs-1631901.html bcrypt kicks pams ass due to being memory intensive. :-) I thought I saw a commit raising the default rounds in login.conf but they don't seem to have raised, am I mistaken? -- __

expired user accounts

2012-07-09 Thread Jan Stary
Hi, I disabled a few user account on my 5.1 by letting them expire yesterday (is that the correct way)? When testing today that the account are indeed unavailable, this is what I get: > > Checking the /etc/master.passwd file: > Login koles has expired. > Login lubosek has expired. # su - expire

Re: OpenBSD - UEFI Secure Boot

2012-07-09 Thread Rudolf Leitgeb
> Well, are you sure "UEFI disable button" will turn off ALL of UEFI > functions? > With that virtualization, both hardware bugs and attacks against > hypervisors are real world cases. So don't be naive. > > Trust me, I'll try hard to avoid virtualization and Fedora@UEFI on my > firewalls, no ma

Re: OpenBSD forked

2012-07-09 Thread Siju George
On Sun, Jun 17, 2012 at 2:45 AM, Theo de Raadt wrote: > They started the fork because they got kicked out because one > developer (Marco) hired 5 other developers for his startup company, > and attempted to hire around 10 other developers in a sneaky and > underhanded way. What about http://aeri

Re: dmesg reporting different clock speeds on different cores

2012-07-09 Thread David Diggles
On Mon, Jul 09, 2012 at 10:22:34AM +0200, Peter Hessler wrote: > On 2012 Jul 09 (Mon) at 15:20:19 +1000 (+1000), David Diggles wrote: > :dmesg|grep ^cpu[0-9]*: > > Every time I see this, I stop reading the mail. Please, for the love of > everything (un)holy, stop doing this. > > -- > An English

Re: OpenBSD - UEFI Secure Boot

2012-07-09 Thread Alexey Suslikov
On Mon, Jul 9, 2012 at 5:03 AM, Nico Kadel-Garcia wrote: > Many of us can comfortably disable UEFI, but it's going to be > problematic for our less skilled colleagues. Well, are you sure "UEFI disable button" will turn off ALL of UEFI functions? >> Also, UEFI will possibly take down a dozens of

Re: dmesg reporting different clock speeds on different cores

2012-07-09 Thread Peter Hessler
On 2012 Jul 09 (Mon) at 15:20:19 +1000 (+1000), David Diggles wrote: :dmesg|grep ^cpu[0-9]*: Every time I see this, I stop reading the mail. Please, for the love of everything (un)holy, stop doing this. -- An Englishman never enjoys himself, except for a noble purpose. -- A. P.

Re: partitioning with more mount points on obsd51

2012-07-09 Thread Darrel
Darrel On Tue, 26 Jun 2012, Micha? Markowski wrote: 2012/6/26 Darrel : does anyone have some neat ideas about partitions under /var? Are you familiar with FAQ? http://openbsd.org/faq/faq4.html#Partitioning Good point, Micha. I should consider /var/www Thank you, Darrel

Re: partitioning with more mount points on obsd51

2012-07-09 Thread Darrel
We have less limitation on partitioning these days, so /usr/obj was obvious- actually had that one before. I chose /usr/src and /usr/local as well, and expect that this was unimportant unless moving into NFS or some special circumstance. I have looked at some of the things that folks are doing w