Re: OpenBSD 4.2 released Nov 1, 2007

2007-11-01 Thread Allie D.
I think I sent out my thanks beforebut what the hell, thanks again for another kick ass release. -- ~Allie D.

Re: inetd needed for basic NAT/Firewall operation?

2007-12-05 Thread Allie D.
I have run an OBSD firewall for years and run nothing on it...the only listening port is 22 on one of the internal interfaces. You don't need identd or any of that crap on a firewall...it's forwarding or blocking packets only. -- ~Allie D. On Wed, December 5, 2007 10:58, Andreas

Re: Real men don't attack straw men

2007-12-15 Thread Allie D.
Can someone just kill this thread PLEASEonly a few posts were actually good, the rest is filling my inbox Jason Dixon wrote: On Dec 15, 2007, at 6:00 PM, Gilles Chehade wrote: On Sat, Dec 15, 2007 at 04:36:51PM -0500, Richard Stallman wrote: I know of at least four companies I'v

Re: pf visible bridge/router

2007-12-27 Thread Allie D.
It's the same as an invisible bridge except you have IP's on the if's, that's the only diff. Beavis wrote: > Hi all!, > > I've been searching lists with regards to building a Visible > Bridge/Router with PF on OpenBSD. > But most of the material I see are for invisible bridge configs. I > wanted

When spammers get whitelisted...

2007-12-27 Thread Allie D.
I have had to wipe my spamdb twice in the last month because spammers get past my blacklists (I run the ones that come in spamd.conf) and my greylisting and just hammer a few of my customers. The spam comes from multiple IP's so it's a bitch to block by hand...anyone have any tips on blocking these

Re: Real men don't attack straw men

2008-01-03 Thread Allie D.
Mayuresh Kathe wrote: > Mr. Stallman, I respect you for what you've managed to achieve as an > individual. > > But, frankly, this thread has really gotten way out of control. > > A few days back everything had kind-a settled down and we got the > impression that the thread had fortunately died,

ssh complaining about bad file descriptor on 4.3beta.

2008-02-21 Thread Allie D.
I'm getting bad file descriptor errors on every ssh connection on a box that I built from source on 4.3 beta last night. Anyone else seeing this as well ? Feb 21 09:54:43 crusty sshd[21741]: error: getsockname failed: Bad file descriptor Wanted to see if anyone else is seeing it as well before I

Re: spamd unnecessarily abrasive?

2007-02-20 Thread Allie D.
ld poop on the connecting MTA ;) Bob...can it be done ? -- ~Allie D. On Tue, February 20, 2007 12:23, Theo de Raadt wrote: >> I haven't looked at the implementation in OpenBSD extensively, but at > > Well, perhaps you should, instead of commenting before you do. > >>

Re: OpenBSD 4.1 Pre-Orders...

2007-03-12 Thread Allie D.
Oh hell yea I did.right when it came out on undeadly I ordered -- ~Allie D. On Mon, March 12, 2007 15:01, Darrin Chandler wrote: > Have you got yours yet?! > > http://undeadly.org/cgi?action=article&sid=20070312181549 > > -- > Darrin Chandler

[Fwd: Shipped Order:2007/3/12-13:27:10-21493:]

2007-04-19 Thread Allie D.
YES ! It's on it's way !! -- ~Allie D. Original Message Subject: Shipped Order:2007/3/12-13:27:10-21493: From:"OpenBSD Shipping" <[EMAIL PROTECTED]> Date:Thu, April 19, 2007 15:30

Re: OpenBSD 4.1 Released

2007-05-01 Thread Allie D
Thanks to all the developers for your continued hard work and dedication. -- ~Allie D. On Tue, May 1, 2007 07:54, Bob Beck wrote: > > May 1, 2007. > > We are pleased to announce the official release of OpenBSD 4.1. snip...

Re: log rotation

2007-05-15 Thread Allie D.
Cronolog...no restart needed. -- ~Allie D. On Tue, May 15, 2007 12:11, John Mendenhall wrote: >> If you don't mind a second or two of down time then you can use >> something like this in newsyslog.conf as a restart command: >> >> "apachectl stop;sleep 1;apach

Re: log rotation

2007-05-15 Thread Allie D.
I run it on a chrooted server...works fine. ErrorLog "|/usr/local/sbin/cronolog /var/www/logs/%Y/%m/%d/error.log" CustomLog "|/usr/local/sbin/cronolog /var/www/logs/%Y/%m/%d/access.log" combined I don't think there's any more configuration than that. -- ~Allie D

Re: SSH brute force attacks no longer being caught by PF rule

2007-08-08 Thread Allie D.
3 times in 30 seconds as a src connection rate is pretty conservative and you don't have a connection rate trap. I run max-src-conn 5, max-src-conn-rate 5/5 and nail every one. Of course you'll see the first few attempts, but once they tickle that max-src-conn rule they get shutdown. --

Re: SSH brute force attacks no longer being caught by PF rule

2007-08-08 Thread Allie D.
Block: [ Packets: 0 Bytes: 0 ] Out/Pass:[ Packets: 0 Bytes: 0 ] -- ~Allie D. On Wed, August 8, 2007 10:26, David Newman wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 6/27/07 10:39 PM, Daniel Ouellet wrote:

Qemu + auich = sound ?

2007-09-12 Thread Allie D.
Can anyone give me a hint how to get sound working in Qemu ? I'm running an X31 and am starting -soundhw all but I don't think it covers my sound hardware. The precompiled 4.1 package has: pcspk PC speaker sb16Creative Sound Blaster 16 es1370 ENSONIQ AudioPCI ES1370 But my soun

Re: Qemu + auich = sound ?

2007-09-12 Thread Allie D.
try and build from ports and see if I can get it to work. > > never tried audio though... *shrug* > > On 9/12/07, Allie D. <[EMAIL PROTECTED]> wrote: >> Can anyone give me a hint how to get sound working in Qemu ? I'm running >> an X31 and am starting -soundh

Re: qemu speed

2007-10-04 Thread Allie D.
I'm bitter because I can't run java on it. I have to use ubuntu with VirtualBox to run some critical work apps that use java :( -- ~Allie D. On Thu, October 4, 2007 15:41, Jacob Yocom-Piatt wrote: > Gerald Thornberry wrote: >> I've never used QEMU so I may be talking out

Re: OpenBSD 4.0 released Nov 1, 2006

2006-11-01 Thread Allie D.
Thanks for an early xmas/Hanukkah present ! -- ~Allie D. On Tue, October 31, 2006 16:15, Theo de Raadt wrote: > Nov 1, 2006. > > We are pleased to announce the official release of OpenBSD 4.0. > This is our 20th release on CD-ROM (and 21st via FTP). We remain > proud of OpenBSD&

Re: Problem when apply 001_httpd.patch

2006-11-09 Thread Allie D.
On Thu, November 9, 2006 12:49, Maverick wrote: > Oop > The rest of the post is gone :-( > > The thing that i got back after patch -p0 < 001_httpd.patch is this > > Hmm... Looks like a unified diff to me... > The text leading up to this was: > -- > |Apply by doing: > |

Re: OpenBSD 4.0 sparc64

2006-11-10 Thread Allie D.
I'm running a Blade 150 that I recently upgraded and have no complaints. You need to make a bootable install disk or boot into bsd.rd to get the install going. -- ~Allie D. On Thu, November 9, 2006 23:42, Ikmal Ahmad wrote: > Hi all, > > Based on http://www.openbsd.org.my/spar

Re: Problems applying 002_openssl.patch for OpenBSD 4.0

2006-11-12 Thread Allie D.
rm -rf /usr/obj/* and then try again. P.S. I have an error code 71 on one of my boxes on the make install...think my disk is now full of cruft from countless upgrades, it's time to wipe it and start over. -- ~Allie D. On Sun, November 12, 2006 09:28, Andreas Maus wrote: > Hi. &

Re: MySQL, pulling my hair out

2006-11-19 Thread Allie D.
ock /var/www/var/run/mysql/mysql.sock rc.shutdown ### MySQL /usr/local/share/mysql/mysql.server stop -- ~Allie D. On Sun, November 19, 2006 10:50, Otto Moerbeek wrote: > On Sun, 19 Nov 2006, Gaby Vanhegan wrote: > >> I'm really having an incredibly painful time with MySQL

Re: flashdist-20050601 for OpenBSD 3.7

2005-06-03 Thread Allie D
Thanks Chris for all your work on flashdist...it helps me spread the gospel ;)

Re: What's wrong with these pf rules

2005-07-31 Thread Allie D
om. This is on a 3.5 > system. > > Cany anyone sugest what I'm doing wrong. > > -- > U.S. Encouraged by Vietnam Vote - Officials Cite 83% Turnout Despite Vietcong > Terror > - New York Times 9/3/1967 > -- Allie D. Allnix,LLC. http://www.allnix.net People are beginning to notice you. Try dressing before you leave the house.

Re: Chrooted apache with chrooted ftp - how users can upload websites now?

2005-11-04 Thread Allie D
ith such configuration? > Is there any way to do that, or do i have to use some other FTP server? > If i have to use other ftp, what will give features that i need? > > Bes

Re: Chrooted apache with chrooted ftp - how users can upload websites now?

2005-11-04 Thread Allie D
Not out of the box you can't. I'd rather run an audited piece of software that's less secure but chroots a user than a band-aid that could open yourself up to other problems. Bob Ababurko([EMAIL PROTECTED])@Fri, Nov 04, 2005 at 08:51:52PM -0500: > Allie D wrote: > >Rea

Re: spamdb migration

2005-05-16 Thread Allie D.
I have done it...you should be fine. I also dump my whitelisted IP's from my spamdb nightly and have had to whip together a quick shell script with spamdb -a in front of over 1K IP's and that's worked well as an additional method. -- Allie D. Allnix,LLC. http://www.allnix.net PGP P

Re: ssh

2005-05-17 Thread Allie D.
Why don't you deny root login within ssh, login as a regular user and su ? Seems pretty simple with no mess ;) You can use the venerable sudo as well if you'd like..painlessly. I agree with your theory on using shared accounts...it's bad juju's. -- Allie D. Allnix,LLC. http:

Re: Dell HW?

2005-05-19 Thread Allie D.
I run SC400's, various laptops (old and new),and desktops (old and new) without any issues. -- Allie D. Allnix,LLC. http://www.allnix.net PGP Public key: http://www.allnix.net/ads_public_key Marco Peereboom said: > I run just about any imaginable server they sell. Works for me tm. >

Re: IMAP servers

2005-05-23 Thread Allie D.
I have run courier-imap for years... Niclas Sodergard said: > On 5/22/05, Gaby vanhegan <[EMAIL PROTECTED]> wrote: > >> What IMAP servers do people use for email access? I use Dovecot at the >> moment under 3.6, as it supports SSL, Maildir and mbox, but it has some >> problems with indexes. I us

Re: djbdns DNS server? Status, Pros and Cons?

2005-05-24 Thread Allie D.
I have used djbdns since '02with no issues whatsoever. You'll love the data file structure compared with BIND. Anders Jvnsson said: > Hello folks. > I recently bought a very good book: Mastering FreeBSD and OpenBSD security > They have a chapter dealing with DNS servers and there they mention