Re: [Newbie] OpenBSD HTTP proxy

2007-10-12 Thread Clint M. Sand
On Mon, Oct 08, 2007 at 10:00:34PM -0400, Jeremy Huiskamp wrote: > On 8-Oct-07, at 8:43 PM, Lars Noodin wrote: > > >Tony Bruguier wrote: > >... > >>I would like to install an HTTP proxy. > >... > > > >Squid is recommended. Read the directions carefully and you will have > >to make one or two chan

Re: How to track port updates in stable?

2007-08-03 Thread Clint M. Sand
On Fri, Aug 03, 2007 at 06:35:51PM -0500, Todd Pytel wrote: > I don't spend as much time following OpenBSD as I used to, so perhaps > I'm missing something. But there used to be a ports-security mailing > list used for announcing updated ports. That list doesn't exist any > more, or at least doesn'

Re: a cd "key"

2007-05-18 Thread Clint M. Sand
On Fri, May 18, 2007 at 08:47:21PM +1000, Timothy Wilson wrote: > Had you thought about mounting certain areas as read only? > For example, /etc, /local can be mounted as read only. When you want > to make changes, such as installing a new package or whatever, just > remount the file systems read/w

Re: pkg_add -u question

2007-05-06 Thread Clint M. Sand
On Sun, May 06, 2007 at 04:28:45PM +0200, Cabillot Julien wrote: > pkg_add -ui > Ah. Thanks. Seems the man page should be changed to be more clear. "If no pkgname is given and -u is combined with -i, pkg_add will..." > On 5/6/07, Clint M. Sand <[EMAIL PROTECTED]> w

pkg_add -u question

2007-05-06 Thread Clint M. Sand
man pkg_add states: -u Update the given pkgname(s), and anything it depends upon. If no pkgname is given, pkg_add will update all installed packages. This relies on PKG_PATH to figure out the new package names. However if I run -u with no package name, it tells me a list of possible candidates,

Re: OpenBSD 4.1 Torrents

2007-05-05 Thread Clint M. Sand
On Sat, May 05, 2007 at 12:43:34PM +0200, Justin Smith wrote: > >Just out of curiosity... > > > Is it logical to use an OS for the intense focus on security and > > correctness, yet download the binaries from a random person on a mailing > > list instead of any official source with reasonable file

Re: OpenBSD 4.1 Torrents

2007-05-02 Thread Clint M. Sand
On Tue, May 01, 2007 at 02:33:50PM -0700, andrew fresh wrote: > Probably everyone knows already, but I just wanted to get the word out > that there are OpenBSD 4.1 torrents now on the torrent site: > > http://openbsd.somedomain.net/index.php?version=4.1 > > So far they are mostly just the files o

Re: cvs or cvsup

2007-03-21 Thread Clint M. Sand
On Wed, Mar 21, 2007 at 10:59:22AM +0100, Stefan Sperling wrote: > On Wed, Mar 21, 2007 at 01:39:51AM -0700, Kernel Monkey wrote: > > I've been using the cvsup client to update my sources. What is the > > difference between cvs and cvsup when updating sources? > > > > Is one better than the other?

Re: stupid question re kernal build make install

2007-03-14 Thread Clint M. Sand
On Wed, Mar 14, 2007 at 04:34:02PM -0500, Jacob Yocom-Piatt wrote: > Clint M. Sand wrote: > >I know this is a dumb question but make install on a kernel build does: > > > >rm -f /obsd > >ln /bsd /obsd > >cp bsd /nbsd > >mv /nbsd /bsd > > > > >

stupid question re kernal build make install

2007-03-14 Thread Clint M. Sand
I know this is a dumb question but make install on a kernel build does: rm -f /obsd ln /bsd /obsd cp bsd /nbsd mv /nbsd /bsd But I can't see the reasoning here. Why do we copy it then move it rather than just copying it straight to /bsd?

Re: new tool: openportd

2006-10-22 Thread Clint M. Sand
On Sun, Oct 22, 2006 at 03:55:39AM -0700, Kian Mohageri wrote: > On 10/22/06, Steffen Wendzel <[EMAIL PROTECTED]> wrote: > > > > > > You normaly have different open ports > > > > pf(4) makes this a minor issue. No offense, but what you have there (in the > example specifically) is no better tha

Re: bsdstats.org WOW

2006-10-19 Thread Clint M. Sand
On Thu, Oct 19, 2006 at 12:04:45AM -0600, Breen Ouellette wrote: > Miod Vallat wrote: > >>For historical reference, info taken from bsdstats.org: > >> > >[...] > > > >What is the point discussing completely bogus so-called statistics? > > At best, I would suggest that some are proud to be Open

Re: MAC -> IP -> MAC

2006-06-03 Thread Clint M. Sand
On Sat, Jun 03, 2006 at 12:10:55AM +0100, Gaby vanhegan wrote: > From thinking about it more, it's just simpler to track which IP > address belongs to which login, and then when that user tries to > login on a second client, the first one is barred access. This only > allows one IP address

Re: "ssh" attacks

2006-05-31 Thread Clint M. Sand
If these attempts all come from the same source, why not filter that ip at the gateway level. What legit use does this person have on your network on any port, much less ssh? On Wed, May 31, 2006 at 03:15:34PM -0400, Peter Fraser wrote: > Expect I was not clear. > > Someone is attacking address

Re: Symantec firewalls

2006-04-06 Thread Clint M. Sand
On Thu, Apr 06, 2006 at 08:56:44AM +0300, Gabriel George POPA wrote: >Hello, > > I've heard a lot about those Symantec firewall machines (that cost > something around 15000$-3$). In fact I don't know many details, just > that customers are pleased to give the money and say that

Re: Security tools

2006-03-15 Thread Clint M. Sand
On Wed, Mar 15, 2006 at 12:31:06PM +, Gaby vanhegan wrote: > Hi, > > I'm running 3.6 (yes, due for an upgrade) and I keep getting hit by > My questions are: > > 1. How do I find out their attack vector? I have had a nessus scan > performed on the machine, but it did not present any se

Re: Did my -stable upgrade work?

2006-03-12 Thread Clint M. Sand
On Sun, Mar 12, 2006 at 09:42:50PM -0600, Mike Loiterman wrote: > How can I tell if my -stable binary upgrade was successful? > check the last modified timestamps on the userland binaries. they should all be the day you compiled. chances are it didn't finish and you'll see some dates from when yo

Re: thttpd with php

2006-02-19 Thread Clint M. Sand
Sorry, I did not read like an idiot. Maybe this is more helpful. http://halplant.com:88/server/thttpd_FAQ.html#PHP On Sun, Feb 19, 2006 at 09:40:33AM -0500, Clint M. Sand wrote: > On Sun, Feb 19, 2006 at 03:31:47PM +0200, Kiraly Zoltan wrote: > > Anyone use thttpd webserver wi

Re: thttpd with php

2006-02-19 Thread Clint M. Sand
On Sun, Feb 19, 2006 at 03:31:47PM +0200, Kiraly Zoltan wrote: > Anyone use thttpd webserver with PHP in OpenBSD? > > I don't know exactly what need to do to run this webserver with PHP in > OpenBSD. Exist a documentation which explain ? > > Thanks ! $ cd /usr/ports/ $ make search key=thttpd Por

Re: httpd question - solved

2006-02-04 Thread Clint M. Sand
On Sat, Feb 04, 2006 at 07:07:52PM -0500, Dave Feustel wrote: > On Saturday 04 February 2006 16:57, L. V. Lammert wrote: > > On Sat, 4 Feb 2006, Dave Feustel wrote: > > > > > I am now starting httpd at boot. It reports that it cannot > > > determine the fully qualified domain name and listens to >

Re: windows -> pf -> inet -> pf -> ftpd [not working]

2006-01-19 Thread Clint M. Sand
To even begin to get help on this, you'd need to submit the pf rules on those obsd boxen. On Thu, Jan 19, 2006 at 05:36:02PM -0500, Price, Joe wrote: > I have a problem that when a Windows client tries to connect to this ftp > site, windows explorer returns 'The operation timed out'. > > > >

Re: errata 001_perl.patch

2006-01-12 Thread Clint M. Sand
e suggesting you do not need perl at all. I think you are missinterpreting. > On 1/12/06, Clint M. Sand <[EMAIL PROTECTED]> wrote: > > On Thu, Jan 12, 2006 at 09:38:07PM +0100, Han Boetes wrote: > > > I doubt you need perl at all on a box like that. You can also > >

Re: errata 001_perl.patch

2006-01-12 Thread Clint M. Sand
On Thu, Jan 12, 2006 at 09:38:07PM +0100, Han Boetes wrote: > I doubt you need perl at all on a box like that. You can also > consider to simply remove all the perl on that system. > > > # Han The pkg_* tools are perl. Even though its a firewall he may need to install/remove/maintain pkg's of so

Re: What does this error message mean?

2006-01-01 Thread Clint M. Sand
man rc.conf On Sun, Jan 01, 2006 at 11:50:01PM -0600, Jim Mays wrote: > How do you turn off Sendmail? What starts it in obsd? (Like where is > the equivalent of /etc/rc2.d? > > Jim > > Daniel Ouellet wrote: > >Jim Mays wrote: > > > >>Jan 1 23:05:16 balrog sm-msp-queue[1531]: k024U2n0023755:

Re: #define failure opportunity

2005-11-30 Thread Clint M. Sand
On Tue, Nov 29, 2005 at 06:12:29PM -0600, Qv6 wrote: > > Has any company ever approached the openssh dev team and offered to buy > a support contract from them? Did they refuse? > > Come to think of it, why doesn't the openssh team sell support contracts > to companies that want it? Or maybe

Re: Portmap non-local set / unset attempt

2005-09-22 Thread Clint M. Sand
On Thu, Sep 22, 2005 at 07:09:12PM -0600, Theo de Raadt wrote: > > > People keep yammering this bullshit about "Security is a process". > > > Bullshit! Lies! It's about paying attention to the frigging details > > > when they are right in front of your face. And it is very clear other > > > vend

Re: Portmap non-local set / unset attempt

2005-09-22 Thread Clint M. Sand
On Thu, Sep 22, 2005 at 02:02:13PM -0600, Theo de Raadt wrote: > People keep yammering this bullshit about "Security is a process". > Bullshit! Lies! It's about paying attention to the frigging details > when they are right in front of your face. And it is very clear other > vendors do not pa

Re: back and neck pain

2005-08-18 Thread Clint M. Sand
On Thu, Aug 18, 2005 at 07:24:56PM -0400, [EMAIL PROTECTED] wrote: > A friend told me about you- i have a' spondie'-l4-l5, that surgey helped a > little, and 10 mos. later my car fell off the jacks, breaking my back-burst > fracture of t-12, and aggrivating the 'spondie'. I have a lot of pain a

Re: About DNS

2005-08-14 Thread Clint M. Sand
On Sun, Aug 14, 2005 at 09:49:12PM +0200, Mike Henker wrote: > Thanks James, I don t have the file you talked about but I will create > it (resolve.conf) with the info you explained. > resolv.conf not resolve.conf

Re: pkg_add -r question?

2005-07-30 Thread Clint M. Sand
On Sat, Jul 30, 2005 at 04:45:55PM -0500, L. V. Lammert wrote: > After experimenting with pkg_add -r on a 3.6 -> 3.7 upgrade, it is > **NICE**!! > > One question, however, .. is there a way to use the *OLD* package name, > instead of the *NEW* package name? pkg_add would then query PKG_PATH for

Re: 005_libz.patch - fails to change directory

2005-07-25 Thread Clint M. Sand
On Fri, Jul 22, 2005 at 08:00:50PM -0600, Todd C. Miller wrote: > In message <[EMAIL PROTECTED]> > so spake Uwe Dippel (udippel): > > > Strange, we had the same thing with the last patch. > > Looks like the main ftp mirror is not updating. I've left a > message but it may not get fixed for

Re: sniffer

2005-07-20 Thread Clint M. Sand
On Tue, Jul 19, 2005 at 11:28:08AM -0500, eric wrote: > On Tue, 2005-07-19 at 17:20:43 +0300, [EMAIL PROTECTED] proclaimed... > > > I need to sniff a network segment and I need to sniff both headers and > > data. Because tcpdump captures only headers its unsuitable for the task. > > I saw that p

Re: Easiest way to include PHP in a release

2005-07-03 Thread Clint M. Sand
On Sun, Jul 03, 2005 at 06:30:10PM -0400, Robert Jacobs wrote: > Hello, > > I want to make an OpenBSD release that includes php right from install > (like perl is included). I am > not very good with makefiles and stuff, so I am seeking advice for the > easiest way to do this. > > Is there a way

Re: snort homedir ?

2005-06-19 Thread Clint M. Sand
On Sun, Jun 19, 2005 at 03:17:48PM +0200, mess-mate wrote: > Hi, > i've installed snort and created the user/group snort. > Since snort runs as a daemon a homdir is not necessary, isn't ? > How can i remove / setup the user snort without a homedir ( > /home/snort)? > The homedir was setted-up autom

Re: phpbb

2005-06-17 Thread Clint M. Sand
On Fri, Jun 17, 2005 at 02:23:23PM -0500, Matthew S Elmore wrote: > This question has been beaten to death. (I was the one of the ones doing > the beating). > Anyone care to share a procmail line to destroy any message with "how do I" "chroot" and "mysql and php"? Next time this question is ask

Re: Problem compiling wget from ports

2005-06-05 Thread Clint M. Sand
On Sun, Jun 05, 2005 at 11:09:23PM +0200, Federico Giannici wrote: > I have a problem compiling wget from the ports. > Here is the final part of the "make" output: > > cc -O2 -pipe -DINET6 -o wget cmpt.o connect.o cookies.o fnmatch.o ftp.o > ftp-basic.o ftp-ls.o ftp-opie.o hash.o headers.o host.o

Re: xwindows screen resolution

2005-05-27 Thread Clint M. Sand
On Fri, May 27, 2005 at 09:39:54AM +0300, Alari Kask wrote: > Chel kenal pC$eval, N, 2005-05-26 kell 21:19, kirjutas Gregory L. > Magnusson: > > Hello all, > > I am wondering how to set the screen resolution for x-windows. How does > > one cycle through the different resolutions? Change resolutio