relayd, how to customize error messages?

Hello, Is there any way to customize the blank screen if the relayd address is down? Also, if I do some layer 7 filtering and use label "something" .. isnt there a way to customize that page also? For example remove the operatin system name. I tried it with response header change "relayd" to "xx

Re: Apache Seg Fault after upgrade to 4.6 stable

Recompile php from ports, there is an issue with suhosin and PHP included in the packages of 4.6 . http://www.pubbs.net/openbsd/200910/61579/ Or apply the "quick fix" by disablign session encryption in your PHP.ini in the suhosin section. David On Fri, Jan 8, 2010 at 7:35 AM, Devin Ceartas wro

Re: compilation performance on Dual Atom 330 proc?

Sorry for not specifiying, could anybody give an example of time taken to compile userland and the kernel on this proc? Thanks. David On Mon, Dec 28, 2009 at 4:43 PM, Brad Tilley wrote: > On Mon, 28 Dec 2009 16:09 -0600, "David Taveras" wrote: >> Hello, >> >

compilation performance on Dual Atom 330 proc?

Hello, Ive recently began using a Intel Atom 330 @ 2 x 1.60GHz (Silverthorne 45nm) with 2GB of RAM. However Ive noticed that compilation of userland takes 130minutes to complete, versus 45min on a standard machine (Dual Core, Core2Duo, i7) and a Kernel recompile takes 15 min vrs 5 min before. Ha

Re: POOR support for layer 7 security in OBSD. Options or another OS?

Hello Theo, On Wed, Nov 11, 2009 at 10:15 PM, Theo de Raadt wrote: > Well perhaps more people should have gotten upset when Apache started > adding contract law language to their copyright notice. Yes, I understand the fundamentals of this decision which in turn gives us an operating system aime

Re: POOR support for layer 7 security in OBSD. Options or another OS?

Hi, On Wed, Nov 11, 2009 at 9:38 PM, Jason Dixon wrote: > There are plenty of L7 tools in OpenBSD base and ports/packages to help > you reach your goals. It's up to you to deploy and configure them > properly for your environment. Just a few off the top of my head: > > relayd(8) > authpf(8) > n

POOR support for layer 7 security in OBSD. Options or another OS?

I love OpenBSD focused security in many areas, and in the ones not included in base there are always options in packages. However specifically speaking about the options to complement as an application level firewall seems it is truly underestimated the way I see it: What is the option for a web

PF: Is it possible to route a LAN IP through a specific IP of the EXT nic?

Hello community, I have a LAN of 10 users connected to a box that nats them all through the external NIC and thus the default servers public IP. THat box has several public IPs. Is there anyway I can NAT a specific user to use a specific IP as their translated IP? Thank you. -- David

Re: Can be PF block skype?

her client skype > in the same network. > > > Regards, > > Yamidt > > On Wed, Nov 4, 2009 at 1:48 PM, David Taveras > wrote: >> >> Greetings, >> >> Can PF be programmed to block skype ? Provided we have port 80 and 443 >> Opened to the world,

Can be PF block skype?

Greetings, Can PF be programmed to block skype ? Provided we have port 80 and 443 Opened to the world, and perhaps DNS port too... skype finds any open port to connect to. Regards, David Taveras