Re: Restore pf tables metadata after a reboot

2020-06-04 Thread Anatoli
> Even then it seems that some of them turn up again pretty much > instantly after expiry. You could update the expire time on each new connection/port scan attempt. This way you could put say 4 days expire time and block these IPs on all ports on all your systems and new connection attempts would

Re: I unveil()ed ftp(1)!

2020-06-04 Thread Theo de Raadt
No. I'm guessing you don't understand symbolic links. Look, this is a waste of time. Luke Small wrote: > --80daf105a7444c30 > Content-Type: text/plain; charset="UTF-8" > Content-Transfer-Encoding: 8bit > > In the case of 1 URLs couldn’t you at least merely unveil “./“ a

Re: I unveil()ed ftp(1)!

2020-06-04 Thread Luke Small
In the case of 1 URLs couldn’t you at least merely unveil “./“ as “cw”; make any specified cafile/capath including shortcut resolution as “r” (perhaps with the shell “x”) so that at worst, current directory files could be overwritten, but not read? On Wed, Jun 3, 2020 at 10:39 AM Theo de Raadt

Re: I unveil()ed ftp(1)!

2020-06-04 Thread Luke Small
I made symbolic links “ln -s /etc/ssl/cert.pem ”. I used the realpath command and it worked in the software I submitted. On Thu, Jun 4, 2020 at 11:06 AM Theo de Raadt wrote: > No. > > I'm guessing you don't understand symbolic links. > > Look, this is a waste of time. > > > Luke Small wrote: >

Problems with clementine music player with 6.7

2020-06-04 Thread Why 42? The lists account.
Hi All, My preferred music player application is (was) clementine. But with a 6.7 snapshot (GENERIC.MP#213 amd64) and clementine-1.4.0rc1p0 the application seems to have problems opening files. For example the file open dialog opens a blank dialog box and a series of assertion failures/errors a

Re: Restore pf tables metadata after a reboot

2020-06-04 Thread Brian Brombacher
No reason to expire ssh brute force. They will never stop. Manual flush if someone accidentally locked themselves out. Just my two cents :) > On Jun 4, 2020, at 12:48 AM, Anatoli wrote: > >  >> >> Even then it seems that some of them turn up again pretty much >> instantly after expiry. > >

realpath(3) to unveil() symbolic links!

2020-06-04 Thread Luke Small
You can use unveil() on both a symbolic link and the value recovered by putting it in realpath(3)! I used it in what I submitted for unveiling ftp(1) -- -Luke

Re: Problems with clementine music player with 6.7

2020-06-04 Thread Raymond, David
I like clementine as well but it disappeared from the compiled ports going from 6.5 to 6.6. I went to musique, which is much simpler but does the job. I haven't migrated to 6.7 yet. Dave Raymond On 6/4/20, Why 42? The lists account. wrote: > > Hi All, > > My preferred music player application

state replication bug in pfsync?

2020-06-04 Thread Paul B. Henson
I've been trying to diagnose a mysterious issue where a UDP state disappears before it's supposed to expire. I finally tracked it down to pfsync. On the primary server, the state entries look like: all udp 198.148.6.55:9430 <- 10.128.110.73:9430 MULTIPLE:MULTIPLE age 00:02:21, expires

Re: Filling a 4TB Disk with Random Data

2020-06-04 Thread Justin Noor
Thanks you @misc. Using dd with a large block size will likely be the course of action. I really need to refresh my memory on this stuff. This is not something we do, or need to do, everyday. Paul your example shows: bs=1048576 How did you choose that number? Could you have gone even bigger? O

Problem booting OpenBSD on IGEL M320c (amd64)

2020-06-04 Thread Larkin Nickle
I am unable to boot OpenBSD 6.7 on an IGEL M320c machine I have. Booting begins, but after the message `0:1:0: mem address conflict 0x3800/0x800` appears, the screen appears to be cleared and the cursor continues blinking on the bottom left of the screen. After a few seconds, it moves

Re: Filling a 4TB Disk with Random Data

2020-06-04 Thread Paul de Weerd
Hi Justin, On Thu, Jun 04, 2020 at 08:39:24PM -0700, Justin Noor wrote: | Thanks you @misc. | | Using dd with a large block size will likely be the course of action. | | I really need to refresh my memory on this stuff. This is not something we | do, or need to do, everyday. | | Paul your examp

Re: Filling a 4TB Disk with Random Data

2020-06-04 Thread Otto Moerbeek
On Thu, Jun 04, 2020 at 08:39:24PM -0700, Justin Noor wrote: > Thanks you @misc. > > Using dd with a large block size will likely be the course of action. > > I really need to refresh my memory on this stuff. This is not something we > do, or need to do, everyday. > > Paul your example shows: >