Re: Logging Password change attempts

2014-11-01 Thread Craig R. Skinner
On 2014-10-31 Fri 11:52 AM |, Alexander Hall wrote: > > However, for the purpose of indicating password changes, this is pretty > useless anyway, since: > > - You can change to the same password > - logger(1) is available for anyone to use (AFAIK) > > $ while sleep $((3600*24*7)); do logger "I c

Re: Question about FAQ section 10.3

2014-10-24 Thread Craig R. Skinner
On 2014-10-24 Fri 15:29 PM |, Worik Stanton wrote: > > I installed postgresql (with pkg_add) and it did not change this, I had > to change /etc/rc.local by hand. Is there some reason why postgresql > should not be started after a reboot? Have I completely got the wrong > end of the stick? > Yo

Re: Why .cshrc and .profile in / ?

2014-10-22 Thread Craig R. Skinner
On 2014-10-20 Mon 11:32 AM |, worik wrote: > In a fresh(ish) OpenBSD installation I note .cshrc and .profile in /. > Rename them to /.cshrc~ & /.profile~ and see what breaks... I always delete them due to having /etc/{profile,csh.cshrc,csh.login} install.site (http://www.openbsd.org/faq/faq4.ht

Re: Publishing SSH public key fingerprints bit length?

2014-10-21 Thread Craig R. Skinner
On 2014-10-20 Mon 21:37 PM |, Christian Weisgerber wrote: > On 2014-10-20, Craig R. Skinner wrote: > > > I noticed OpenBSD anon CVS SSH fingerprints have the bit length > > published with the algorithm type: > > http://www.openbsd.org/anoncvs.html > > That seems u

Publishing SSH public key fingerprints bit length?

2014-10-20 Thread Craig R. Skinner
Hi, I noticed OpenBSD anon CVS SSH fingerprints have the bit length published with the algorithm type: http://www.openbsd.org/anoncvs.html A couple of other popular non-OpenBSD sites omit the bit length: 16:27:ac:a5:76:28:2d:36:63:1b:56:4d:eb:df:a6:48 (RSA) ad:1c:08:a4:40:e3:6f:9c:f5:66:26:5d:4b

Re: host(1) prints errors to STDOUT

2014-10-15 Thread Craig R. Skinner
On 2014-10-14 Tue 10:41 AM |, Theo de Raadt wrote: > Unfortunately host is maintained upstream, in the bind codebase, > by ISC. > > You should file your bug report there, because that is the right way > to get change into the ecosystem. > Submitted, with their GITWEB line number refs. "ISC's bu

host(1) prints errors to STDOUT

2014-10-14 Thread Craig R. Skinner
$ host loopy.loo.found.not; print $? Host loopy.loo.found.not not found: 3(NXDOMAIN) 1 $ host loopy.loo.found.not > /dev/null; print $? 1 $ host loopy.loo.found.not 2>/dev/null; print $? Host loopy.loo.found.not not found: 3(NXDOMAIN) 1 There's a printf at line 429 of /usr/src/usr.sbin/bind/bin

head(1) returns 0 on failure

2014-10-07 Thread Craig R. Skinner
I'm seeing head return 0 on failures: $ for tool in head tail cat; do $tool /var/empty/non-existant; print $?; done head: /var/empty/non-existant: No such file or directory 0 tail: /var/empty/non-existant: No such file or directory 1 cat: /var/empty/non-existant: No such file or directory 1 $ for

Re: Thanks for ksh

2014-09-27 Thread Craig R. Skinner
On 2014-09-25 Thu 15:18 PM |, Maurice McCarthy wrote: > > http://www.theregister.co.uk/2014/09/24/bash_shell_vuln/ > More vulnerabilities in #bashbug: #Shellshock becomes whack-a-mole for security engineers http://ars.to/1uOtJcN "... he was able to bypass the fixes in the latest bash patch and

Re: Android Studio

2014-09-27 Thread Craig R. Skinner
On 2014-09-27 Sat 00:33 AM |, Nick Holland wrote: > > Sorry, I've had the honor of working with some amazing malware experts > (AND the OpenBSD developers. Have I had a rockin' life or what? :), > Absolutely, like 11:33 of this: http://www.youtube.com/watch?v=S72I-nSgQek & http://www.NavalTanke

Re: Android Studio

2014-09-27 Thread Craig R. Skinner
On 2014-09-27 Sat 00:33 AM |, Nick Holland wrote: > > I'd LOVE to think Google took security more seriously than other > dipshits in the computer industry, but sadly, the Android platform did > not show it. I have an Android phone, I would not trade it for an > iProduct...but I will never trust i

Thanks for ksh

2014-09-25 Thread Craig R. Skinner
All the highly skilled work invested in the project, keeping ordinary users secure, is appreciated.

Re: quotas grace period "none" right away

2014-09-25 Thread Craig R. Skinner
On 2014-09-24 Wed 09:22 AM |, Boris Goldberg wrote: > > Does this mean you tried and found out (or knew) that disk quotas where > not going to work for you? > At the moment Boris, I'm not using quotas - but did a few years ago. I don't remember having any problems then. I guessed Dovecot woul

Re: quotas grace period "none" right away

2014-09-24 Thread Craig R. Skinner
On 2014-09-23 Tue 10:06 AM |, Boris Goldberg wrote: > This might have something to do with the fact that this is a mail server, > and mail is being delivered by root (by procmail to maildirs if it makes a > difference). > How about Dovecot & sieve (rules can be edited remotely in Thunderbird):

Re: unbound

2014-09-23 Thread Craig R. Skinner
On 2014-09-22 Mon 16:51 PM |, Giancarlo Razzolini wrote: > Craig, > > If I understood this correctly this "almost" replace the view > function on bind? Now that it was dropped I need to start planning my > transition. > Yes. Until 5.3 I was running a split horizon master zone, with differen

Re: unbound

2014-09-19 Thread Craig R. Skinner
On 2014-09-19 Fri 12:28 PM |, Krzysztof Strzeszewski wrote: > > I want add my global domain in my serwer dns unbound... How to do? > > I konw how add my domain in named(bind): > $ man 8 unbound ... .. DESCRIPTION Unbound is an implementation of a DNS resolver, that does caching .

Signing siteXX.tgz files?

2014-09-03 Thread Craig R. Skinner
I found a couple of threads related to signing the siteXX.tgz install files, and was wondering what the future (5.6) of this might look like. If I understand the present (5.5) situtation correctly, if site*.tgz are created & distributed, you have to trust your own files & method of distribution.

new httpd and cachability?

2014-09-03 Thread Craig R. Skinner
For the new httpd, will there be a mechanism to set cachability? Browser/proxy caching reduces both bandwidth costs & server load. Rough nginx e.g: http { ... .. expires 3d; add_header Pragma public; add_header Cache-Control public; server {

Re: unbound reverse DNS problem to local stub zone

2014-09-02 Thread Craig R. Skinner
On 2014-09-01 Mon 08:58 AM |, Arthur Mesh wrote: > > I have the same exact symptom, unbound.conf: > > local-zone: "10.in-addr.arpa." nodefault Change this to: local-zone: "10.in-addr.arpa" typetransparent See under the section 'local-zone' of unbound.conf(5)

Re: FAQ4 -vs- disklabel(8) re /tmp space?

2014-08-30 Thread Craig R. Skinner
On 2014-08-30 Sat 08:19 AM |, Nick Holland wrote: > > Was there a point you are trying to make? No: > > Just an FYI;-

FAQ4 -vs- disklabel(8) re /tmp space?

2014-08-30 Thread Craig R. Skinner
Just an FYI;- While preparing to wipe & reinstall a box with a different partitioning layout, I noticed these 2 items about /tmp space: http://www.openbsd.org/faq/faq4.html#Partitioning o /tmp: 50M is usually many times what you should ever need, disklabel(8) AUTOMATIC DISK ALLOCATION

Re: httpd URI rewriting / try_files

2014-08-29 Thread Craig R. Skinner
On 2014-08-28 Thu 22:14 PM |, Liviu Daia wrote: > > What about redirect, say from http://mumble to https://mumble? > Or: http://example.org -> http://www.example.org http://www.example.com -> http://www.example.net

Re: maybe OT 10 year anniversay of Chuck Yerkes death

2014-08-28 Thread Craig R. Skinner
On 2014-08-27 Wed 17:21 PM |, Diana Eichert wrote: > I'm writing this post to remember Chuck Yerkes, He must've made quite an impact for you to respect him every year. Cool.

Re: Postfix and SASL authentication.

2014-08-26 Thread Craig R. Skinner
On 2014-08-25 Mon 21:40 PM |, giacomo wrote: > > > > Join the Postfix users mailing list (http://www.postfix.org/lists.html) > > > > Send them a problem description & the output of both: > > $ postconf -nf > > $ postconf -Mf REALLY: Join the Postfix users mailing list and send them the output.

Re: Postfix and SASL authentication.

2014-08-25 Thread Craig R. Skinner
On 2014-08-24 Sun 18:44 PM |, giacomo wrote: > Hi. > Here there are other informations about the configuration of mail system. > > 1. The mail system use virtual users. > 2. The postfix main.cf is: > > # Enable SASL authentication in the Postfix SMTP server > smtpd_sasl_auth_enable =

Re: 5.4 (GENERIC) box has begun to randomly reboot

2014-08-09 Thread Craig R. Skinner
On 2014-08-05 Tue 16:13 PM |, STeve Andre' wrote: > > In decreasing order I'd say 5) motherboard problem, 4) power > supply, 3) memory, 2) cabling failure, 1) disk controller. > Thanks gents. After a night with the power off, the same phatom rebooting started within 10 minutes the next day. T

5.4 (GENERIC) box has begun to randomly reboot

2014-08-05 Thread Craig R. Skinner
Hi, A reliable box has begun to randomly reboot in the last couple of days. There's nothing obviously unusual in /var/log/* $ ls -ld /var/crash drwxrwx--- 2 root wheel 512 Dec 24 2013 /var/crash/ $ ls -lA /var/crash total 4 -rw-r--r-- 1 root wheel 5 Jul 30 2013 minfree I set up a 1 min

[OT] Commonwealth Games Ceremonies

2014-07-22 Thread Craig R. Skinner
Last night at a dress reversal of the 2014 Commonwealth Games Opening Ceremony, I thrilled to walk my New Zealand flag in to the packed stadium of 71 nations from the British Empire!!! The opening is on Wednesday (tomorrow) & closing on 3rd August. They're a lot of fun - I know as I'm performing

Re: rc script problem with pgrep / pkill

2014-07-03 Thread Craig R. Skinner
On 2014-07-02 Wed 11:18 AM |, Leclerc, Sebastien wrote: > > $ pgrep -f "^tarpitd: \[priv\]" > 22014 > > But a check or stop doesn't: > > $ sudo /etc/rc.d/tarpitd -d check ; echo $? > doing rc_read_runfile > doing rc_check > 1 > Show the output of: $ cat /etc/rc.d/tarpitd; \ ls -l /var/run/rc.d

Re: 8 port serial card connections

2014-06-20 Thread Craig R. Skinner
On 2014-06-20 Fri 16:14 PM |, Maurice Janssen wrote: > ># FIXME No. 9 Moxa card port: > >moxa09:dv=/dev/tty10:common: > > > ># FIXME No. 10 Moxa card port: > >moxa10:dv=/dev/tty11:common: > > Try /dev/tty0a and /dev/tty0b > Perfect! Here's a man page diff to sync with lines 1383-1397 of /usr/s

Re: 8 port serial card connections

2014-06-20 Thread Craig R. Skinner
On 2014-06-14 Sat 16:33 PM |, Christian Weisgerber wrote: > On 2014-06-14, Craig R. Skinner wrote: > > > To connect a Moxa 8 port serial card with octopus cable to an i386 > > serial port, do I need just a DB9 (2x female) gender changer, or a null > > modem cable/mini a

8 port serial card connections

2014-06-14 Thread Craig R. Skinner
To connect a Moxa 8 port serial card with octopus cable to an i386 serial port, do I need just a DB9 (2x female) gender changer, or a null modem cable/mini adapter as well? The octopus cable ends are all male, as are the serial/comm ports. I've standard Cisco rollover cables to connect to my Sun

Re: sudo -u & environment help

2014-05-28 Thread Craig R. Skinner
FYI;- The sudo users mailing list quickly said the 3 issues I identified are known bugs, which have been fixed in newer sudo versions. http://www.sudo.ws/sudo/stable.html "The current stable release of sudo is 1.8.10p3" $ sudo -V Sudo version 1.7.2p8 $ uname -a OpenBSD teak.britvault.co.uk 5.4 G

Re: NFS server export node

2014-04-22 Thread Craig R. Skinner
On 2014-04-21 Mon 21:39 PM |, Alessandro DE LAURENZIS wrote: > Folks, > > still unclear after reading the hier man page where is the most suitable > node for a NFS server export directory. > > I would like to stay as much close as possible to the "BSD tradition", > so I would put data for or from

Re: alias's - ksh

2014-04-22 Thread Craig R. Skinner
On 2014-04-21 Mon 14:22 PM |, Martin Brandenburg wrote: > > # tset on interactive login shells. > case "$-" in > *i*) > eval `tset -sQ '-munknown:?vt220' $TERM` > ;; > esac > # /etc/profile: [[ -o interactive ]] && { [[ ${SHELL} == '/bin/ksh' ]] && . /etc/ksh.kshrc

Re: ghostscript 9.06 in OpenBSD AGPL or GNU GPL version?

2014-04-18 Thread Craig R. Skinner
On 2014-04-17 Thu 17:12 PM |, Chris Cappuccio wrote: > noah pugsley [noah.pugs...@gmail.com] wrote: > > You know Chris, if you grew a beard..nmedia.net/bsdsexy? wopsexy? > > Maybe a sexy developer calendar can help with the donations... > > > > Perhaps a swimsuit calendar? I'll volunteer for

Re: OpenBSD users web page updates

2014-04-11 Thread Craig R. Skinner
ping (http://thread.gmane.org/gmane.os.openbsd.misc/211666) On 2014-03-31 Mon 14:59 PM |, Brad Smith wrote: > On 31/03/14 1:34 PM, Craig R. Skinner wrote: > >A few updates for the page: http://www.OpenBSD.org/users.html#isp > > > > * Fix broken Swebase link. > > >

Re: PF for a VPS

2014-04-11 Thread Craig R. Skinner
On 2014-04-11 Fri 09:10 AM |, Sinosuke Noara wrote: > 1) This is the host (physical machine) > http://www.hetzner.de/hosting/produkte_rootserver/ex40 Have you seen this: http://www.bsws.de/en/root-server/

Re: sudo -u & environment help

2014-04-11 Thread Craig R. Skinner
Would this be better asked on tech@? On 2014-04-08 Tue 09:26 AM |, Craig R. Skinner wrote: > To clarify, there are no ~/. shell dot files. > > $PATH & umask are set in /etc/login.conf > $MAIL is the default set by login(1) > > /etc/profile sources /etc/ksh.kshrc, which ju

Re: sudo -u & environment help

2014-04-08 Thread Craig R. Skinner
On 2014-04-08 Tue 07:17 AM |, Andres Perera wrote: > > You do that with `sudo -c - -l`: > > $ sudo -c - -i 'ulimit -a; env' > eb > $ diff -u ea e > --- ea Tue Apr 8 07:13:11 2014 > +++ eb Tue Apr 8 07:14:22 2014 > @@ -1,29 +1,24 @@ > -LOGNAME=a > +LOGNAME=root > > Also see `use_loginclass` in

Re: sudo -u & environment help

2014-04-08 Thread Craig R. Skinner
ia "sudo su -l user" >From my reading of sudo(8), I thought the same environment could be gained with something like "sudo -H -i -u username". Am I missing sudo flags or settings in /etc/sudoers? On 2014-04-04 Fri 11:30 AM |, Craig R. Skinner wrote: > Hi, > >

Re: sudo -u & environment help

2014-04-05 Thread Craig R. Skinner
On 2014-04-04 Fri 12:01 PM |, Todd wrote: > I think this should work > > sudo su - user > Yes, going via root works. How do I get the same user environment with something like: "sudo -H -i -u username" See below: > > > > > > When I use sudo in this manner, settings such as $PATH, $MAIL > > >

sudo -u & environment help

2014-04-04 Thread Craig R. Skinner
Hi, When sudo'ing to another user, how can I obtain all of their environment settings as they receive when logging in themselves? When I use sudo in this manner, settings such as $PATH, $MAIL & umask aren't being honoured: $ echo $LOGNAME; echo $PATH; echo $MAIL; umask craig /usr/bin:/bin:/usr/

OpenBSD users web page updates

2014-03-31 Thread Craig R. Skinner
A few updates for the page: http://www.OpenBSD.org/users.html#isp * Fix broken Swebase link. * Add Devio.us * Add Grex * Add Polar Home Index: www/users.html === RCS file: /cvs/www/users.html,v retrieving revision 1.132 diff -

Re: upgrades no longer allow ftp for sets

2014-03-31 Thread Craig R. Skinner
On 2014-03-29 Sat 19:26 PM |, Ted Unangst wrote: > > > > Eventually, will base ftpd be removed? > > The program (some might say pogrom) to delete old shit doesn't really > need any more suggestions at this time. I'm happily using it & was wondering if I should plan to stop doing so.

Re: upgrades no longer allow ftp for sets

2014-03-29 Thread Craig R. Skinner
On 2014-03-29 Sat 02:10 AM |, Eric Oyen wrote: > > . > > > On 2014-03-26 Wed 16:06 PM |, Craig R. Skinner wrote: > > > > Eventually, will base ftpd be removed? > > *BASE*

Re: upgrades no longer allow ftp for sets

2014-03-29 Thread Craig R. Skinner
On 2014-03-26 Wed 16:06 PM |, Craig R. Skinner wrote: > On 2014-03-25 Tue 18:34 PM |, Theo de Raadt wrote: > > > > The 5.5 release will support FTP releases, but after that we are > > disabling FTP and thus pushing people to use HTTP installs. > > > > In

Re: In OpenBSD how to upgrade individual system files like (grep, rcs, rlog ) to latest version?

2014-03-27 Thread Craig R. Skinner
On 2014-03-27 Thu 19:47 PM |, jignesh desai wrote: > ? > Any advice what to type in "Pkg_add .. ??? "? command to install > GNU stuff ? There are other wikis already ported & come with specific instructions on how to use them on OpenBSD. If you have the ports tree installed, do this: $ cd /usr/p

Re: In OpenBSD how to upgrade individual system files like (grep, rcs, rlog ) to latest version?

2014-03-27 Thread Craig R. Skinner
On 2014-03-27 Thu 14:12 PM |, jignesh desai wrote: > I am attempting to run foswiki on OpenBSD. Things are installed and i am > able to open "/bin/Configure" page of foswiki configuration screen. but the > page reports few errors, complaining that following files are either not found > or outdated

Re: upgrades no longer allow ftp for sets

2014-03-26 Thread Craig R. Skinner
On 2014-03-25 Tue 18:34 PM |, Theo de Raadt wrote: > > The 5.5 release will support FTP releases, but after that we are > disabling FTP and thus pushing people to use HTTP installs. > > In this day and age, it is somewhat irresponsible for us to put > people into a situation where they might inst

Re: FOSS Open Hardware Documentation

2014-03-25 Thread Craig R. Skinner
What was the long term fall out of this? Sell out to Oracle, etc. On 2007-08-28 Tue 10:43 AM |, Theo de Raadt wrote: > > On Tue, Aug 28, 2007 at 04:08:02PM +0100, Edd Barrett wrote: > > > On 28/08/07, Craig Skinner - Sun Microsystems - Linlithgow - Scotland > > > > Yay! Action at last. > > > > >

Re: OpenBSD email provider

2014-03-18 Thread Craig R. Skinner
On 2014-03-17 Mon 20:25 PM |, Jean-Francois Simon wrote: > > Just to mention, I'm looking for a more private ESP. As I know that > OpenBSD conveys an idea of security, I tend to trust a provider > relying on this OS. > > >If you want to read documentation, become your own "mail provider > >using

Re: ffs2

2014-03-18 Thread Craig R. Skinner
On 2014-03-17 Mon 21:19 PM |, Adam Thompson wrote: > OK, obviously I missed something. > How do you resize ffs filesystems without a dump/restore step? http://thread.gmane.org/gmane.os.openbsd.misc/207756

Re: Security

2014-01-11 Thread Craig R. Skinner
On 2014-01-10 Fri 21:12 PM |, Jan Stary wrote: > > > 2 references to hinet (chinese) > > What "references"? > What's "hinet" and how do you know it is chinese? > > > > intenting to send spam (relay). > > How do you know that "hinet" (whatever it is) > was intenting to send or relay spam? > Ho

Re: Security

2014-01-10 Thread Craig R. Skinner
On 2014-01-10 Fri 07:44 AM |, Nick Holland wrote: > On 01/10/14 01:36, agrquinonez wrote: > ... > [compromised box] > ... > > Ideas are going to be really appreciated, because i am not a technical guy. > > ok, this is the unpopular answer, but here it is anyway: > Stop. You should not be running

Re: Security

2014-01-10 Thread Craig R. Skinner
On 2014-01-09 Thu 22:36 PM |, agrquinonez wrote: > > This time, i installed DokuWiki, and Running dynamic web content (wikis, etc.) on the public Internet is a massive risk. I've seen multi-national companies' websites fail penetration testing, and they employee teams of skilled developers..

Re: popa3d removed from base - what do people recommend?

2014-01-06 Thread Craig R. Skinner
On 2014-01-04 Sat 21:04 PM |, John Smith wrote: > > What would people recommend for a simple replacement for SSL pop3? I use dovecot for IMAP only (no POP). It can do SSL & authenticate against the /etc password arrangement. Cheers, -- Craig Skinner | http://twitter.com/Craig_Skinner | http://

Re: Running security(8): Root sh startup files do not set the umask.

2013-12-19 Thread Craig R. Skinner
On 2013-12-17 Tue 11:25 AM |, Craig R. Skinner wrote: > The umask is set in /etc/login.conf: > > default:\ > ... > ... > :umask=022:\ > ... > ... > > staff:\ > ... > ... > :umask=027:\ > ... >

Re: Bizarre pf/sendmail interaction

2013-12-17 Thread Craig R. Skinner
On 2013-12-17 Tue 17:05 PM |, Tethys wrote: > On Tue, Dec 17, 2013 at 4:43 PM, Craig R. Skinner > wrote: > > > I guess you have net.inet.forwarding=1 in /etc/sysctl.conf > > Yes, I do. I can browse the web etc from inside the firewall without problems. > > > Doe

Running security(8): Root sh startup files do not set the umask.

2013-12-17 Thread Craig R. Skinner
The umask is set in /etc/login.conf: default:\ ... ... :umask=022:\ ... ... staff:\ ... ... :umask=027:\ ... ... Is this still a problem? (e.g. cron jobs) - Forwarded message from Charlie Root - Date: Tue

Re: spamd in blacklist only modexd

2013-12-10 Thread Craig R. Skinner
On 2013-12-10 Tue 09:26 AM |, Alexander Hall wrote: > > The OP is referring to this part of /etc/rc, which has nothing to do > with neither crontab nor /etc/rc.d/*. > > if [ X"${spamd_flags}" != X"NO" ]; then > /usr/libexec/spamd-setup -D > fi > > Indeed, please suggest a diff. > > Mayb

Re: Are there any default password managers in OpenBSD?

2013-12-05 Thread Craig R. Skinner
On 2013-12-05 Thu 12:50 PM |, InterNetX - Robert Garrett wrote: > > use sticky notes.. preferably on your monitor > Just use the word 'incorrect' everywhere. Whenever a mistake is entered, the system will say: "Your password is incorrect." Done, -- Craig Skinner | http://twitter.com/Craig_Ski

Re: OT: OpenBSD website scores high in Google PageSpeed Insight

2013-11-20 Thread Craig R. Skinner
On 2013-11-19 Tue 21:23 PM |, Theo de Raadt wrote: > That is the score you get when you don't leverage "all the latest new cool > but heavy shit". > +12 votes for flat static HTML without client scripts.

[Waaaay O/T Humour] Avenging narwhal toy impales a penguin

2013-11-09 Thread Craig R. Skinner
Maybe But WTF is the koala doing in the ice? No polar bears??? http://distractify.com/fun/fails/20-horrifying-toys-to-traumatize-your-child/ What colour magical tusk are you? -- Craig Skinner | http://twitter.com/Craig_Skinner | http://linkd.in/yGqkv7

Re: DNS Hosting & Managed DNS

2013-10-26 Thread Craig R. Skinner
On 2013-10-24 Thu 10:35 AM |, Predrag Punosevac wrote: > We have one domain name, small web server and a mail server. > In that situation, I'd: 1) run a master DNS server on the public web/mail server 2) find a domain name registrar that: 1. will slave the zone from your master 2. has 2-4 ser

Re: Blocking facebook.com: PF or squid?

2013-10-19 Thread Craig R. Skinner
On 2013-10-19 Sat 01:56 AM |, Stefan Wollny wrote: > > No, no: The squid is running on a regular server at home securing the > PCs and the laptop once I am around. Maybe feed a modified version of this list to Squid (fb ad servers are in there, adjust to block the whole thing): http://pgl.yoyo.or

Re: dump(8) and permissions

2013-10-12 Thread Craig R. Skinner
On 2013-10-12 Sat 11:47 AM |, Rodolfo Gouveia wrote: > > When /var is a real partition, there is a device node that corresponds to it > and the > group operator has read permissions on it. > Where possible, unmount partitions before dumping & dump the RAW character device: $ ls -l /dev/sd5f br

Re: OpenBSD site SSL

2013-10-12 Thread Craig R. Skinner
On 2013-10-11 Fri 22:42 PM |, John Darrah wrote: > Hi. Would it be possible to get SSL on the OpenBSD website(s)? Please don't. That would slow it down & eliminate cachability - increasing network load & costs. There's no personal data & no point. Anyway, THIS email is being sent in clear text

growfs - thanks!

2013-10-09 Thread Craig R. Skinner
Thanks for growfs - phew me@small-host$ sudo umount /var/growing-app operator@larger-host$ ssh small-host dump -0anu -f - -h 0 /dev/rwd1f | dd of=small-host_var_growing-app.dump operator@larger-host$ chflags nodump small-host_var_growing-app.dump operator@larger-host$ restore -if small-host_

Re: PostgreSQL "samenet" in pg_hba.conf

2013-10-04 Thread Craig R. Skinner
No? On 2013-10-02 Wed 18:06 PM |, Craig R. Skinner wrote: > Does the ADDRESS keyword "samenet" work in OpenBSD's PostgreSQL pg_hba.conf? > > Manually specifying an address block works, as does a DNS hostname & > domain name. > > $ pkg_info -I postgr

PostgreSQL "samenet" in pg_hba.conf

2013-10-02 Thread Craig R. Skinner
Does the ADDRESS keyword "samenet" work in OpenBSD's PostgreSQL pg_hba.conf? Manually specifying an address block works, as does a DNS hostname & domain name. $ pkg_info -I postgresql-server postgresql-server-9.2.3 PostgreSQL RDBMS (server) $ uname -a OpenBSD oak.britvault.co.uk 5.3 GENERIC#50 i

Re: mailx : mime handling?

2013-09-26 Thread Craig R. Skinner
On 2013-09-26 Thu 10:15 AM |, Roberto E. Vargas Caballero wrote: > I use mutt basically because it has threading support, and I cannot live > without it. > Same, -- Craig Skinner | http://twitter.com/Craig_Skinner | http://linkd.in/yGqkv7

Re: Alternate authentication source in OpenSMTPd

2013-09-25 Thread Craig R. Skinner
On 2013-09-25 Wed 11:39 AM |, Gilles Chehade wrote: > > It's officially still true, unofficially you can do it on recent > versions by declaring a table (i'll use a static table for the example > but you can use a file, db, sqlite or ldap one): > > $ encrypt > mypassword > $2a$06$BTOM8Ck.HEInGF88

Re: daily insecurity output: Login operator is off but still....

2013-09-12 Thread Craig R. Skinner
On 2013-09-11 Wed 11:47 AM |, Rogier Krieger wrote: > >On Wed, Sep 11, 2013 at 11:37 AM, Craig R. Skinner ><[1]skin...@britvault.co.uk> wrote: > > Do I need to change operator's password to be 13 *'s? > >No, you need to change the value

daily insecurity output: Login operator is off but still....

2013-09-11 Thread Craig R. Skinner
For backups, I set up operator to dump & scp to another box, so he needs $HOME/.ssh/: $ sudo usermod -L daemon operator $ sudo chsh -s /bin/ksh operator $ sudo mkdir /operator $ sudo chown operator:operator /operator $ sudo chmod 750 operator /operator $ userinfo operator login operator passwd

[OT] "New Zealand Ends Patents for Basic Software" & Dilbert's opinion

2013-09-04 Thread Craig R. Skinner
"International technology giants won't be able to get patents for basic software under a law passed by the New Zealand government, although protection for significant innovations and programs will remain under the country's copyright law." http://blogs.wsj.com/digits/2013/09/01/new-zealand-ends-pa

Re: Compiling BOINC/Seti Home for OpenBSD 5.3 Sparc64

2013-08-30 Thread Craig R. Skinner
On 2013-08-29 Thu 17:02 PM |, Daniel Ouellet wrote: > > > > Wonder why keep running something doing nothing ;) > > > > Still happily married I see. (:> > Install a network of multiple machines at home. There'll be lots to do.. -- Craig Skinner | http://twitter.com/Craig_Skinner | http://linkd

diff: INSTALL: etcXX: (addition of opening quotes)

2013-08-17 Thread Craig R. Skinner
Here's an addition of opening quotes in this INSTALL file: --- INSTALL.i386.53 Wed Mar 13 00:58:19 2013 +++ INSTALL.i386.changedSat Aug 17 10:11:40 2013 @@ -359,7 +359,7 @@ upgrading. (If you are upgrading, it's recommended that you get a copy of this

dump(8): unify grammar of both 'file system(s)' & 'filesystem(s)'

2013-08-16 Thread Craig R. Skinner
The existing grammar is erratic: $ fgrep filesystem dump.8 | wc -l 15 $ fgrep 'file system' dump.8 | wc -l 6 Uniformly concatenate both words into one: Index: dump.8 === RCS file: /cvs/src/sbin/dump/dump.8,v retrie

Re: Other mailers failing on spamd's 451?

2013-08-14 Thread Craig R. Skinner
On 2013-08-14 Wed 07:43 AM |, Nick Holland wrote: > that are having the same problem from seemingly other servers -- I send > them a 451 and they toss up their arms and immediately quit trying and > bounce the message back to the sender. And yes, the bounce message is > funny -- clearly saying the

Re: /etc/mail/spamd.key permissions/ownership?

2013-08-13 Thread Craig R. Skinner
On 2013-08-09 Fri 14:23 PM |, Peter N. M. Hansteen wrote: > > I checked the nearest couple of spamd equipped boxes, and it tends to be > > [Fri Aug 09 14:21:47] peter@skapet:~/www_sider$ ls -l /etc/mail/spamd.key > -rw-r--r-- 1 root wheel 2048 Nov 1 2009 /etc/mail/spamd.key > It's been sy

/etc/mail/spamd.key permissions/ownership?

2013-08-09 Thread Craig R. Skinner
On a multi-user box, what are the recommended permissions/ownership of /etc/mail/spamd.key? Or is the question irrelevant as a checksum of the file is used, not its contents? Thanks, -- Craig Skinner | http://twitter.com/Craig_Skinner | http://linkd.in/yGqkv7

Re: ifconfig(8) --frontend

2013-08-09 Thread Craig R. Skinner
On 2013-08-04 Sun 14:30 PM |, Gregor Best wrote: > > known wireless ESSIDs, known gateway MAC addresses and known network > topologies, for example "When I'm at home, my gateway is 192.168.2.1, > there's a host named Zim and one named Gir and my public IP address > resolves back to Unity Media". T

Re: spamd: sync init: Device not configured

2013-07-31 Thread Craig R. Skinner
On 2013-07-31 Wed 14:25 PM |, Peter Hessler wrote: > You need to change those to the correct IPs or hostnames for your > configuration. > Thanks Peter. This works: spamd_flags="-y [ip.address] -Y mx-backup" When testing with various hostnames with the -y option, all failed with the "Device not

spamd: sync init: Device not configured

2013-07-31 Thread Craig R. Skinner
When attempting to sync spamd between 2 hosts via unicast, I see this error when starting spamd: spamd: sync init: Device not configured Web searching with this phrase didn't yeild useful pointers. In /etc/rc.conf.local I have: spamd_flags="-y smtp.example.com -Y mx-backup.example.com" I'm not

Re: Wake via serial port?

2013-07-13 Thread Craig R. Skinner
On 2013-07-12 Fri 17:39 PM |, Diana Eichert wrote: > > What you are asking only makes sense, unfortunately > Craig appears to be like a lot of malling list > subscribers. They are "takers" not "givers". > Lady Di, It's gracious to be respectful of other's timezone's & life schedules. Cheers,

Re: Wake via serial port?

2013-07-13 Thread Craig R. Skinner
On 2013-07-12 Fri 23:12 PM |, Thomas Reiter wrote: > > would you mind to share how you have solved the problem? > otherwise someone has to ask the same question some day. > Of course Thomas, but as each piece of hardware is different, I doubt what worked in this case will be transferable. I

Re: Wake via serial port?

2013-07-12 Thread Craig R. Skinner
On 2013-07-12 Fri 10:42 AM |, Nick Holland wrote: > > but I'll tell you how to figure it out. > > [ wise words of practical relevance ] > Solved! Thanks, -- Craig Skinner | http://twitter.com/Craig_Skinner | http://linkd.in/yGqkv7

Wake via serial port?

2013-07-12 Thread Craig R. Skinner
I've a box that won't self start after a power failure. The BIOS docs shows: Remote Ring On This allows you to wake up the system from a serial port modem. How could this be done from another OpenBSD box connected via a serial cross over cable + cu/tip/etc? The serial link is operational & I get

Re: apropos

2013-06-29 Thread Craig R. Skinner
On 2013-06-29 Sat 10:09 AM |, Ingo Schwarze wrote: > > In OpenBSD, all elementary userland utilities are actively maintained, Appreciated, -- Craig Skinner | http://twitter.com/Craig_Skinner | http://linkd.in/yGqkv7