running spamd on firewall ord on the mailsystem

2017-09-19 Thread rosjat
Hi there, I like to get some opinions on where to use the spamd daemon. Is it better to do the heavy stuff on the firewall or let it all pass to the mailsystem and do the filtering there? regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla

Crash on stopping relayd

2017-09-19 Thread rosjat
hing with relayd on that machine because it will cause me just pain if the system crashes again. so if someone knows if this issue is fixed with an full patched system it would help a lot. And as the name suggest its a firewall machine and my SPOF :-( Regards -- Markus Rosjatfon: +49 351 810

Re: Crash on stopping relayd

2017-09-19 Thread rosjat
b/src/sys/net/pf.c <http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/net/pf.c> Looks like this bug is fixed after 6.1 , e.g. in 6.2. 19 sep. 2017 kl. 18:43 skrev rosjat : Hi there, I don't know if someone had also a problem like this. What happen is: I was stopping the relayd daemon

relayd https relay

2017-09-20 Thread rosjat
ne for these domains because the are on the webserver machine. So it all boils down to the question, do I have to set up my certificates on the relay host to be able to use a https relay ? regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzoll

Re: relayd https relay

2017-09-20 Thread rosjat
there is of course a tls to much in the config its just relay "proxyssl" { listen on $gateway port https protocol "httpproxy" forward to port https } Am 20.09.2017 um 10:19 schrieb rosjat: Hi there, just a simple question about the  relaying

Re: relayd https relay

2017-09-20 Thread rosjat
. Look at phrase "/etc/ssl/address:port.crt" in relayd.conf(5). The book below shows this scenario and how to use acme-client to get a free certificate from Let's Encrypt. https://www.michaelwlucas.com/tools/relayd V/r, Bryan On Wed, Sep 20, 2017 at 4:37 AM, rosjat wrote: there i

Re: relayd https relay

2017-09-20 Thread rosjat
ocol section if you want relayd to check the certificate of your target's server (see relayd.conf man). Ronan -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220

Re: relayd https relay

2017-09-20 Thread rosjat
21.09.2017 um 07:19 schrieb rosjat: Hi Ronan, thanks for the hint I'll give it a try! regards Markus Am 20.09.2017 um 21:30 schrieb Ronan Viel: Hi, This kind of config works perfectly on my box. I am not sure SNI has something to do here as relayd terminates the https connection, gets al

Re: relayd https relay

2017-09-21 Thread rosjat
out like in a normal rdr-to rule in pf? Like I said pf rule just works fine so the traffic can go thorugh all the interfaces just fine. regards MArkus Am 21.09.2017 um 08:27 schrieb rosjat: Hi there, ok I tried the with tls option and I can al least see relayd tries to send the request to

relayd multiple values in match rules ?

2017-09-21 Thread rosjat
quot; value "*.domain.tld" forward to or at least match request quick header "Host" value {"domain.tld" "www.domain.tld"} forward to Regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann K

Re: relayd multiple values in match rules ?

2017-09-21 Thread rosjat
Ok it seems I got myself a bit mixed up with the wildcard problem. I testet *.domain.tld and didnt got it to work but it seems *doamin.tld does the trick. So this one seems to be solved :) Regards MArkus Am 21.09.2017 um 11:59 schrieb rosjat: Hi there, in my battle with relayd I noticed

Re: relayd https relay

2017-09-21 Thread rosjat
I try to figure out the ca file option mentioned by ronan maybe this is some kind of option here. Am 21.09.2017 um 14:11 schrieb trondd: On Thu, September 21, 2017 3:49 am, rosjat wrote: Hi, so I added the with tls keywords to the relay and my webserver gets request now but from my relayhost

Re: relayd https relay

2017-09-21 Thread rosjat
ns as in the SAN field. Am 21.09.2017 um 14:49 schrieb trondd: On Thu, September 21, 2017 8:25 am, rosjat wrote: I try to figure out the ca file option mentioned by ronan maybe this is some kind of option here. Using 'ca file' means you have to decrypt the SSL connection from t

Re: the whole greylisting, spam filtering thing

2017-10-02 Thread rosjat
ering because it could make some transitioning a little easier but if the amount of "workarounds" to relays mails through another instance is not worth it then I will go with spamfilterting on the mailsystem. regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H

du algorithm to calculate diskspace

2017-10-02 Thread rosjat
regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfen Sie, ob diese Mail wirklich ausgedruckt werden muss! Before you print it

httpd.conf authenticate with question

2017-10-02 Thread rosjat
and it will ask for the password but if I request https://my.domain.tld/some/secret/location/index.php It will simply load the site without asking for credentials. So how do I prevent the access over a full url ??? Regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de

[solved]httpd.conf authenticate with question

2017-10-02 Thread rosjat
index.php authenticate with "/path/to/the/htpasswd/file" } Can we use "authenticate [realm] with htpasswd" in a location? From httpd.conf(5) I thought http-Auth is enabled in server section and only disabled in location. No? -- Markus Rosjatfon: +49 351 8107223

migrate .htaccess conent to httpd.conf

2017-10-03 Thread rosjat
might mess things up regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfen Sie, ob diese Mail wirklich ausgedruckt werden mu

openSMTPD relaying and aliases

2017-10-04 Thread rosjat
a it with From: r...@machinename.domain.tld To: logs+...@domain.tld to make my filtering easier in the mail account. So is it possible to get smtpd to use the alias in the to: field by default when sending a mail from a user account? Regards -- Markus Rosjatfon: +49 351 8107223mail

httpd.conf and directory index

2017-10-04 Thread rosjat
on, wrong on so many lvls and it also works ... could someone that is more skilled in httpd.conf give me some insight here? regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.

spamd randomly and silently dying on OpenBSD 6.1

2017-10-06 Thread rosjat
isnt really a solution ... regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfen Sie, ob diese Mail wirklich ausgedruckt

acme-client problem when requesting certificate

2017-11-20 Thread rosjat
45): 1 so as far as I understand files get created and right away deleted on the whole certificate creating process and if I look in /var/www/acme there isnt any file so what is acme-client telling me with File exists? Where do I find this file? regards -- Markus Rosjatfon: +49 351 8107223

Relayd 2 domains on 2 seperate vm

2017-04-26 Thread Markus Rosjat
relayd? Regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfen Sie, ob diese Mail wirklich ausgedruckt werden muss! Before

Re: Relayd 2 domains on 2 seperate vm

2017-04-26 Thread Markus Rosjat
t;Host" value "www.mydomain.fr" forward to match request quick header "Host" value "app2-1.mydomain.fr" forward to } relay "proxy" { listen on $ext_addr port 443 tls protocol "httpsproxy" forward with tls to port 443 forward w

OpenLDAP and filesystem permission

2017-04-27 Thread Markus Rosjat
considerd secure or should I stick with the LDAP+local User approach? regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfen

Re: torrent downloads

2017-04-27 Thread Markus Rosjat
seems up to date [1]. If the reason is a lack of human ressources, I think I can handle it. Regards. [1] : http://openbsd.somedomain.net/ -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghwe

relayd splice timeout

2017-04-27 Thread Markus Rosjat
relayd in foreground shows a splice timeout. So question is, can I and if so where can I adjust the timeout value. SSH might be a bad example for relayd use but its the easiest starting point thought. Better to discover stuff befor a setup gets more complicated. Regards -- Markus Rosjatfon

Re: relayd splice timeout

2017-04-28 Thread Markus Rosjat
Ursprüngliche Nachricht Von: Hiltjo Posthuma Datum: 28.04.17 11:34 (GMT+01:00) An: Markus Rosjat Cc: misc@openbsd.org Betreff: Re: relayd splice timeout On Thu, Apr 27, 2017 at 07:11:56PM +0200, Markus Rosjat wrote: > Hi there, > > I was playing arround w

(solved) relayd splice timeout

2017-05-02 Thread Markus Rosjat
Hi Hiltjo, just to let you know seesion timeout did the try and works like a charm Regards Markus Am 28.04.2017 um 11:34 schrieb Hiltjo Posthuma: On Thu, Apr 27, 2017 at 07:11:56PM +0200, Markus Rosjat wrote: Hi there, I was playing arround wit relayd just to get a feeling for it. So I

Re: What is "activity" on a relayed SSH connection? (Re: (solved) relayd splice timeout)

2017-05-02 Thread Markus Rosjat
Am 02.05.2017 um 14:50 schrieb Andreas Kusalananda Kähäri: On Tue, May 02, 2017 at 12:35:22PM +0200, Markus Rosjat wrote: Hi Hiltjo, just to let you know seesion timeout did the try and works like a charm On a related note: What constitutes "activity" on a relayed SSH connec

bgp-spamd question

2017-05-08 Thread Markus Rosjat
ed without any rules for the tables. I can also ping the bgp-spamd servers. So any advice would be helpful here :) Regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon:

Re: bgp-spamd question

2017-05-08 Thread Markus Rosjat
I won't see any IP's in a spamlist file at all regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfen Sie, ob diese

pf route-to only with multipath enabled?

2017-05-23 Thread Markus Rosjat
Hi there, just to clarify this a rule in pf with the route-to keyword only works when multipath routing is enable in sysctl.conf? regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http

OpenBSD on Synology devices

2017-05-24 Thread Markus Rosjat
Hi there, has someone ever done it and if so could he share some knowledge about it :) regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49

rspamd or spamassasin

2017-05-31 Thread Markus Rosjat
wondering which of the tools mentions is the best fit. regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfen Sie, ob

httpd and wordpress

2017-06-03 Thread Markus Rosjat
t let me know :) advice is most apreciated Regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfen Sie, ob diese

bgp-spamd added 192.43.244.163

2017-06-03 Thread Markus Rosjat
arkus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfen Sie, ob diese Mail wirklich ausgedruckt werden muss! Before you print it, think

OpenBSD and Zope2

2017-06-09 Thread Markus Rosjat
totally I wanted to check it out but even I get the instance up and running I dont cant connect to it. I know its not really a OpenBSD Question but since we are on misc I might get lucky :) regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla

Re: bgp-spamd added 192.43.244.163

2017-06-12 Thread Markus Rosjat
just a short head up, 192.43.244.163 got added to the 666 community again if anyone ist wondering why mails from the list dont show up. regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http

sshd and key auth problem

2017-06-13 Thread Markus Rosjat
it should work but its seems I still miss something here. Any advice is appreciated Regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351

httpd and phpyMyAdmin

2017-06-13 Thread Markus Rosjat
Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfen Sie, ob diese Mail wirklich ausgedruckt werden muss! Before you print it, think about

Re: httpd and phpyMyAdmin

2017-06-13 Thread Markus Rosjat
heads up on the 403 error fixed it by put diffrent locations for php and other files in the server config. would like to get opinions on securing the whole thing ...still :) regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann

Re: httpd and phpyMyAdmin

2017-06-13 Thread Markus Rosjat
Am 13.06.2017 um 23:56 schrieb Stuart Henderson: On 2017-06-13, Markus Rosjat wrote: would like to get opinions on securing the whole thing ...still :) Deleting phpmyadmin would be a good start :-) yeah but I'm not the boss :( besides this is a dev machine I don't let t

sftp chroot

2017-06-14 Thread Markus Rosjat
to achieve this. I could simply make /var/www/htdocs/some_dir the home dir of the user but Im not sure if this is the recommended way. so once again adivce is helpful :) regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann

Re: sftp chroot

2017-06-14 Thread Markus Rosjat
bcontent folder as home and chroot this for sftp but then again how to handle the .ssh or other . folders and files? I read somthing about placing it outside the home dir and define the location over sshd_config but not sure if this is proper solution. -- Markus Rosjatfon: +49 351 81

Re: sftp chroot

2017-06-14 Thread Markus Rosjat
Am 14.06.2017 um 15:53 schrieb Markus Rosjat: Am 14.06.2017 um 13:42 schrieb Jiri B: On Wed, Jun 14, 2017 at 01:09:47PM +0200, Solne Rapenne wrote: Je 2017-06-14 13:02, Bryan Harris skribis: On Linux I have mounted another fs inside the user's home folder (it is mounted twice). I

Re: sftp chroot

2017-06-14 Thread Markus Rosjat
without a wheel :-p ... just kinding regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfen Sie, ob diese Mail wirklich

Re: sftp chroot

2017-06-14 Thread Markus Rosjat
ay with it. So lets wait for the crybabies to complain about all the things they can't do without asking for permission first. Regards MArkus Am 14.06.2017 um 20:53 schrieb Ville Valkonen: On 14 June 2017 at 11:33, Markus Rosjat wrote: Hi there, I want to build an sftp environment wh

guidelines for migration openldap directory to ldapd ?

2017-06-18 Thread Markus Rosjat
simple as possible. So since ldapd and smtpd bothe ship with the system I thought this would be the way to go. Since I dont have much experience with both tools I was looking for some advice from all the gurus out there :) regards -- Markus Rosjatfon: +49 351 8107223mail: ros

OpenSMTP and OpenLDAP

2017-07-25 Thread Markus Rosjat
-- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfen Sie, ob diese Mail wirklich ausgedruckt werden muss! Before you print it, think

Re: OpenSMTP and OpenLDAP

2017-07-25 Thread Markus Rosjat
OpenSMTP at all? And if so, where to find a piece of information how to configure it? regards MArkus Am 25.07.2017 um 10:50 schrieb Markus Rosjat: Hi there, I was just wondering if does two work together at all? I saw examples with ldapd that ships with the OS but not with OpenLDAP. Since I try

Re: OpenSMTP and OpenLDAP

2017-07-25 Thread Markus Rosjat
Tue, Jul 25, 2017 at 10:50:32AM +0200, Markus Rosjat wrote: > I was just wondering if does two work together at all? I saw examples with > ldapd that ships with the OS but not with OpenLDAP. Since I try to get my > user table defined, and the man only has options for db and file, whats the

Opensmtpd-extras documentation

2017-07-31 Thread Markus Rosjat
Hi there, Is there some documentation on the ldapFilter ? It's kinda frustrating to see a 535 Auth failed even you are sure you got the right credentials.  I have openldap running but without some basic info on how to pass looked  up information  on to smtpd I'm lost here Regards  Markus V

Re: Opensmtpd-extras documentation

2017-08-01 Thread Markus Rosjat
ok turns out it's not a LDAP problem at all ... since openSMTPD doesn't authenticate with a plain password at all it will always fail. regards markus Am 31.07.2017 um 17:44 schrieb Markus Rosjat: Hi there, Is there some documentation on the ldapFilter ? It's kinda

OpenBSDI 6.1 some Warnings when using OpenLDAP Tools

2017-08-09 Thread Markus Rosjat
program It's a fresh install from the ports so some of the maintainers might like to know that. regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220

maildrop-postfix question

2017-08-10 Thread Markus Rosjat
aemon: s_connect() failed: No such file or directory /usr/local/bin/maildrop: Temporary authentication failure. regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 81

maybe misc can help even it's not openbsd related

2017-08-24 Thread Markus Rosjat
ix to ignore the forwarding to dkimproxy for local delivery ? regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfen Sie, ob

Re: maybe misc can help even it's not openbsd related

2017-08-25 Thread Markus Rosjat
is at least willing to responde to a dummy like me so thumbs up guys !!! regards markus Am 24.08.2017 um 21:43 schrieb Mike Coddington: On Thu, Aug 24, 2017 at 11:49:19AM +0200, Markus Rosjat wrote: so here is my problem, I konfigured postfix and dkimproxy to work together. So far so good becau

routing problem with wordpress and external and internal traffic

2017-09-27 Thread Markus Rosjat
right direction regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfen Sie, ob diese Mail wirklich ausgedruckt werden muss

Re: routing problem with wordpress and external and internal traffic

2017-09-27 Thread Markus Rosjat
outed wen it hits the firewall in a pf rule or rules something like: https://unix.stackexchange.com/questions/44129/conditional-directoryindex-based-on-ip-address-using-htaccess cheers. x9p regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gor

Re: routing problem with wordpress and external and internal traffic

2017-09-27 Thread Markus Rosjat
s the problem complex, should be a simple solution. cheers. x9p regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfe

the whole greylisting, spam filtering thing

2017-09-29 Thread Markus Rosjat
enough to have a shit load of users that do the training for your systems? some informations about this would be helpful regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon

Re: the whole greylisting, spam filtering thing

2017-09-29 Thread Markus Rosjat
Hi, Am 29.09.2017 um 15:39 schrieb Larry Hynes: Markus Rosjat wrote: my boss is getting on my nerves It may be mutual. of course but well :) that greylisting is basically out of date because of things like outlook.com and mails ending up delayed for ever. So the next logical step would

Re: the whole greylisting, spam filtering thing

2017-09-29 Thread Markus Rosjat
Hi Leo, Am 29.09.2017 um 16:57 schrieb Leo Unglaub: Hey, On 09/29/17 15:06, Markus Rosjat wrote: my boss is getting on my nerves that greylisting is basically out of date because of things like outlook.com and mails ending up delayed for ever. So the next logical step would be to deploy a

Re: the whole greylisting, spam filtering thing

2017-09-30 Thread Markus Rosjat
m there to the mailsystem or simply run rspamd on the mailsystem und plug it front of the mailserver like postfix? Regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 3

Re: migrate .htaccess conent to httpd.conf

2017-10-05 Thread Markus Rosjat
so this would mean if I have 20 files spread over 10 directories I need for all of them a location statement to block or otherwise auth befor someone could access it? Regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker S

Re: migrate .htaccess conent to httpd.conf

2017-10-05 Thread Markus Rosjat
You can do thinks like: location "/.ht*" { block } and with Lua's pattern matching you can do really cool things. See patterns(7) and httpd.conf(5) I'll check it out Thank you -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, H

php-fpm and OpenBSD 6.2

2017-10-12 Thread Markus Rosjat
Hi there, I can't find a php-fpm package under 6.2 but there are php-fastcgi packages. Is this the new php-fpm naming convention starting with 6.2 or do I get this wrong here? regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Her

Re: php-fpm and OpenBSD 6.2

2017-10-12 Thread Markus Rosjat
Hi Peter, thank you for the hint :) In the end I would simply try to run a php script and see if it works ;) regards Markus Am 12.10.2017 um 10:20 schrieb Peter Faiman: On Oct 12, 2017, at 00:39, Markus Rosjat wrote: Hi there, I can't find a php-fpm package under 6.2 but there ar

spamd pf rule question

2017-10-12 Thread Markus Rosjat
0.0.1 port spamd the mailserver isn't the same machine. regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfen Sie

a pf question maybe asked a 1000 times

2017-10-20 Thread Markus Rosjat
fom lo and for that not passed to the following rules - 3rd my rules are just wrong :) So for all the more skilled human beings out there can you help me with it? regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker S

Re: a pf question maybe asked a 1000 times

2017-10-20 Thread Markus Rosjat
ut on hvn0 inet proto tcp from (hvn0) port = 587 to any flags S/SA I dont have a pass out all rule this would match every outgoing traffic then but maybe match is the key here :) regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königs

Re: a pf question maybe asked a 1000 times

2017-10-20 Thread Markus Rosjat
the flush that makes it all work. I will try that :) regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfen Sie, ob diese

Re: a pf question maybe asked a 1000 times

2017-10-20 Thread Markus Rosjat
Hi again, okay big time PEBKAC ... if you do the the -d you should at some point do the -e ... haha anyway always fun to brainstorm with you guys this list rocks !!! Am 20.10.2017 um 14:11 schrieb Markus Rosjat: Hi, yeah well the rules are loaded, I could flush befor do pfctl -f to make

Re: a pf question maybe asked a 1000 times

2017-10-20 Thread Markus Rosjat
nal set of rules. regards Am 20.10.2017 um 14:27 schrieb Michael Hekeler: On Fri, Oct 20, 2017 at 12:59:51PM +0200, Markus Rosjat wrote: ... block return# block stateless traffic Hi Markus, here´s another hint: no matter if you want to drop silently or send a return for the dropped packet

Re: a pf question maybe asked a 1000 times

2017-10-20 Thread Markus Rosjat
ctivated it I could ping from the host and to the host. Without the rule I couldn't. On a host with just one nic it might be redundant but if you have more the one nic this might be a valid choice. regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webservice G

Re: spamd randomly and silently dying on OpenBSD 6.1

2017-10-22 Thread Markus Rosjat
/spamd but in my opinion this shouldnt cause trouble at all. If I can produce more verbose output in anyway give me a hint I'll do :) Regards Markus Am 06.10.2017 um 10:49 schrieb rosjat: Hi there, it seems spamd daemon is siliently and randomly dying on a OpenBSd 6.1 machine. The logs

Re: spamd randomly and silently dying on OpenBSD 6.1

2017-10-22 Thread Markus Rosjat
1 20:24:56 heimdal spamd[46664]: 217.12.203.2: From: "Valgosocks" Oct 21 20:24:56 heimdal spamd[46664]: 217.12.203.2: To: Oct 21 20:24:56 heimdal spamd[46664]: 217.12.203.2: Subject: =?utf-8?B?ZmFjaG3DpG5uaXNjaGUga29ycmVrdHVyIGRlcyBoYWxsdXggdmFsZ3VzIGFtIGZ1c3M=?= Am 22.10.2017 um 12:59

httpd index directive confusion

2018-05-30 Thread Markus Rosjat
} in my opinion this should show me the generated index.php but instead I get file not found. When I call the index.php explicitly like https://UrlToMySite.tld/admin/index.php it works. so where do I go wrong here? regards -- Markus Rosjatfon: +49 351 8107223mail: ros...@ghweb.de G+H Webse

Re: httpd index directive confusion

2018-05-30 Thread Markus Rosjat
hi Paco, Am 30.05.2018 um 13:31 schrieb Paco Esteban: On Wed, 30 May 2018, Markus Rosjat wrote: so I Configure my Location in httpd.conf like this location "/admin/*" { root "/path/to/my/site/admin" root strip 1 direc

OT: how do you write your tools /scripts for everyday tasks

2018-05-30 Thread Markus Rosjat
most of the time you ending up using subprocess to call a existing tool that you would use on a cmd anyway. So what you guys using these days, is it shellscripts, c programs, perl or? Would be cool to get some feedback on that :) regards -- Markus Rosjatfon: +49 351 8107223mail

CARP on Hyper-V VM

2018-10-16 Thread Markus Rosjat
6.3? regards -- Markus Rosjatfon: +49 351 8107224mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfen Sie, ob diese Mail wirklich ausgedruckt werden muss! Before you

Re: CARP on Hyper-V VM

2018-10-16 Thread Markus Rosjat
Switch too but I did't changed that because of the probable network disconnection. I will give it a shot later. regards MArkus -- Markus Rosjatfon: +49 351 8107224mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de

migrate users from old system

2018-10-16 Thread Markus Rosjat
themself. Any advice would be helpful. Regards -- Markus Rosjatfon: +49 351 8107224mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfen Sie, ob diese Mail wirklich

FAM Question

2018-10-19 Thread Markus Rosjat
pkgconfig doesnt say anything regarding this so Im kinda lost here. So if someone hast som information about that share please. regards -- Markus Rosjatfon: +49 351 8107224mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http

relayd smtp traffic

2018-10-19 Thread Markus Rosjat
redirect mailtraffic for a domain to this machine. regards -- Markus Rosjatfon: +49 351 8107224mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfen Sie, ob diese

Re: FAM Question

2018-10-21 Thread Markus Rosjat
hi Julian, Am 20.10.2018 um 01:01 schrieb Julian Suschlik: Would sysutils/entr help? canyou be more specific? thank you -- Markus Rosjatfon: +49 351 8107224mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49

Re: FAM Question

2018-10-21 Thread Markus Rosjat
-- Markus Rosjatfon: +49 351 8107224mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfen Sie, ob diese Mail wirklich ausgedruckt werden muss! Before you print it, think

cyrus-sasl/openldap question

2018-10-24 Thread Markus Rosjat
sasl are a big fk^ in my opinion but thats another story. regards -- Markus Rosjatfon: +49 351 8107224mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfen Sie, ob

Re: 6.4 doas gives "command not found" if no #!/bin/sh up top

2018-10-30 Thread Markus Rosjat
change was made doas worked as expected with the script regards -- Markus Rosjatfon: +49 351 8107224mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden http://www.ghweb.de fon: +49 351 8107220 fax: +49 351 8107227 Bitte prüfen Sie, ob diese Mai

migrate python script from sudo to doas

2018-10-30 Thread Markus Rosjat
'-s /sbin/nologin', '-d /var/mail/domain.tld/vmailuser666', 'vmailuser666']' returned non-zero exit status 1 So does someone had some issues with migrating scripts from sudo to doas, then some help or hintw would be very appreciated. regards -- Markus Rosja

Re: migrate python script from sudo to doas

2018-10-30 Thread Markus Rosjat
Hi, as I stated before on a cmd is no problem, Im using 6.4 release Am 30.10.2018 um 12:56 schrieb Solene Rapenne: Markus Rosjat wrote: hi all, I have some old python scripts that using os.spawnl to execute stuff like useradd  combined with sudo. This worked just fine on systems with sudo

Re: migrate python script from sudo to doas

2018-10-31 Thread Markus Rosjat
ms a doas related issue and needs some adjustment in doas.conf. If this isnt resolvable I will just install sudo package using the "pointing a cannon at a sparrow" approach :( regards -- Markus Rosjatfon: +49 351 8107224mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrman

syntax error and doas.conf

2018-10-31 Thread Markus Rosjat
stuff but you may have learn at least one thing ... read again what you just wrote before you save it :) Have a nice day list :) and happy helloween -- Markus Rosjatfon: +49 351 8107224mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker Str. 70, 01099 Dresden

Re: syntax error and doas.conf

2018-10-31 Thread Markus Rosjat
/this/cmd because 99% of the time you only need root priv to do something like that. So some very nice guy, I think is name is Ted, thought "hey lets simplify it and skip all the heavy stuff that sudo brings along". At least I imagine he thought something like that :) regard -- Marku

Re: syntax error and doas.conf

2018-10-31 Thread Markus Rosjat
Hi Bruno, Am 31.10.2018 um 12:23 schrieb Bruno Flueckiger: On 31.10.18 10:42, Markus Rosjat wrote: Losing ten minutes time because of a mistake you've made all by yourself made you write this useles mail. Imagine how many times you could have read the man page of doas(8) and find out

httpd rewiterules like apache

2018-11-01 Thread Markus Rosjat
!) Since there is redirection I can do this but then the url gets of course replaced  in a block directive  block return 301 "http://dome.tld$REQUEST_URI"; I read that there is rewrite support but as far as I figured it's just for location on the filesystem ? regards -- Markus Ros

Re: httpd rewiterules like apache

2018-11-01 Thread Markus Rosjat
^(.*)http://some.tld/someotherdir/$1 [L,P] so a http://www.my.tld would go to http:/some.tld/something.http but woudnt http://some.tld/someotherdir/something.http or do I get it wrong? -- Markus Rosjatfon: +49 351 8107224mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann Königsbrücker St

relayd.conf it's so confusing

2018-11-02 Thread Markus Rosjat
ween the changes was checking sysntax and a rcctl reload relayd I am relucdent to do a restart because it happens to crash the VM. The VM is running 6.1 with all syspatches applied. regards -- Markus Rosjatfon: +49 351 8107224mail: ros...@ghweb.de G+H Webservice GbR Gorzolla, Herrmann

Re: relayd.conf it's so confusing

2018-11-02 Thread Markus Rosjat
Hi again, Am 02.11.2018 um 11:26 schrieb Markus Rosjat: ..  but also the match defined in the new defined protocol is still working. Thats something that shouldn't happen at all. this seems to be resolved and was more or less browser related -- Markus Rosjatfon: +49 351 8107224

  1   2   3   >