Re: Safe bruteforce rule for mobile-friendly website

2013-02-07 Thread Mikkel Bang
Thanks guys! I had to disable it as soon as I found out so the relevant logs are probably too far up the buffer, but I'll set up a test server ASAP and study the tcpdump in detail. Somehow your mobiles hit either the fifteen new connections per five seconds max (that's only three new

syncing hardware clock

2013-02-07 Thread Lars Nooden
I've got a small system running 5.2-stable and the clock seems off. NTP is making entries like this on startup: Jan 31 10:15:31 net5501 ntpd[20060]: adjusting local clock by 93.846882s I've looked around in the mail archives for various mailing lists and have the impression that a proper

Re: UNIX A to Z List RFC

2013-02-07 Thread russell
On 02/02/2013 01:59 PM, Chris Hettrick wrote: Hi Misc, I made a list of the most classical UNIX commands / utilities from section one where there is only one per letter of the english alphabet (it's for my OpenBSD obsessed five year old son :) ). I know that this subject is very personal and

relayd and icecast

2013-02-07 Thread Kapetanakis Giannis
Hi, I'm trying to use an OB server as an icecast streaming server. I'm also trying to use relayd as a relay between the client and icecast server to limit access to admin pages of icecast. I have a problem with relayd closing connections. I believe it does that because of the session

Re: syncing hardware clock

2013-02-07 Thread Christian Weisgerber
Lars Nooden lars.noo...@gmail.com wrote: I've got a small system running 5.2-stable and the clock seems off. NTP is making entries like this on startup: Jan 31 10:15:31 net5501 ntpd[20060]: adjusting local clock by 93.846882s I've looked around in the mail archives for various mailing

Re: syncing hardware clock

2013-02-07 Thread Otto Moerbeek
On Thu, Feb 07, 2013 at 03:36:43PM +, Christian Weisgerber wrote: Lars Nooden lars.noo...@gmail.com wrote: I've got a small system running 5.2-stable and the clock seems off. NTP is making entries like this on startup: Jan 31 10:15:31 net5501 ntpd[20060]: adjusting local clock

Re: syncing hardware clock

2013-02-07 Thread Lars Nooden
On Thu, 7 Feb 2013, Otto Moerbeek wrote: On Thu, Feb 07, 2013 at 03:36:43PM +, Christian Weisgerber wrote: Lars Nooden lars.noo...@gmail.com wrote: I've got a small system running 5.2-stable and the clock seems off. NTP is making entries like this on startup: Jan 31

Re: syncing hardware clock

2013-02-07 Thread Otto Moerbeek
On Thu, Feb 07, 2013 at 05:52:08PM +0200, Lars Nooden wrote: On Thu, 7 Feb 2013, Otto Moerbeek wrote: On Thu, Feb 07, 2013 at 03:36:43PM +, Christian Weisgerber wrote: Lars Nooden lars.noo...@gmail.com wrote: I've got a small system running 5.2-stable and the clock seems

Re: openbsd and vmware

2013-02-07 Thread Jan Lambertz
I also tried the socket trick in different setups but couldn't make it work. I tried a smp 4,threads 1 cores 1 sockets 4. Sysctl tells cpus are found but not used. Did you pass any special cpu information to qemu ? Virtio: i'm not following current right now, but this are great news. Thank you.

Re: openbsd and vmware

2013-02-07 Thread Norman Golisz
On Thu Feb 7 2013 05:33, Jan Lambertz wrote: problems i found using kvm and openbsd: SMP not working as it should. I usually increase the number of virtual sockets to get those extra cores recognised by OpenBSD. This seems to make the hypervisor produce better ACPI routing information ... No

Re: Safe bruteforce rule for mobile-friendly website

2013-02-07 Thread Kevin Chadwick
I had to disable it as soon as I found out so the relevant logs are probably too far up the buffer, but I'll set up a test server ASAP and study the tcpdump in detail. I forget if mobiles do more prefetching on dns and/or tcp on mobiles but perhaps that's worth considering as a culprit. Does

softraid RAID1 + CRYPTO error writing metadata

2013-02-07 Thread Scott McEachern
I get a rather curious error when shutting down a machine with a RAID 1 setup that contains a crypto partition and a normal partition: syncing disks... done sd3 detached softraid0: I/O error 5 on dev 0x433 at block 16 softraid0: could not write metadata to sd3d sd4 detached rebooting... When

pf blocking active connections

2013-02-07 Thread Martijn van Duren
Hello misc, Today I watch the current connections on my small home server and I noticed an unfamiliar ftp-connection. Upon inspecting the connection I noticed it was a brute force attack, so I fired up my pfctl-utility and tried to block the attack by adding the ip to my quick drop table. After

Re: pf blocking active connections

2013-02-07 Thread patrick keshishian
look in 'man pfctl' and search for killing active sessions. On Thu, Feb 7, 2013 at 12:13 PM, Martijn van Duren martijn...@gmail.com wrote: Hello misc, Today I watch the current connections on my small home server and I noticed an unfamiliar ftp-connection. Upon inspecting the connection I

Re: pf blocking active connections

2013-02-07 Thread Scott McEachern
On 02/07/13 15:13, Martijn van Duren wrote: Hello misc, Today I watch the current connections on my small home server and I noticed an unfamiliar ftp-connection. Upon inspecting the connection I noticed it was a brute force attack, so I fired up my pfctl-utility and tried to block the attack by

Re: pf blocking active connections

2013-02-07 Thread Martijn van Duren
Thanks for all the quick responses, but if I understand you all correctly there is no way to cut off an established connection by adding an ip address to a blocked table, so I'm still left with my two stage drop off the connection (both adding the the ip to the table and killing the connection

Re: pf blocking active connections

2013-02-07 Thread Scott McEachern
On 02/07/13 15:31, Martijn van Duren wrote: Thanks for all the quick responses, but if I understand you all correctly there is no way to cut off an established connection by adding an ip address to a blocked table, so I'm still left with my two stage drop off the connection (both adding the the

Re: OpenBSD 5.2 isakmpd sequence number problem

2013-02-07 Thread Mike Belopuhov
On Wed, Jan 30, 2013 at 14:59 +0100, Bartosz Brzozowski wrote: Hi Misc. I have two location A i B in my lab. In the location A there is isakmpd + carp + pfsync + sasync cluster on which there is installed OpenBSD 5.2 GENERIC.MP#339 i386 In the location B there is single OpenBSD 5.2

Re: pf blocking active connections

2013-02-07 Thread Jan Stary
On Feb 07 21:31:11, martijn...@gmail.com wrote: Thanks for all the quick responses, but if I understand you all correctly there is no way to cut off an established connection by adding an ip address to a blocked table, so I'm still left with my two stage drop off the connection (both adding

Re: Safe bruteforce rule for mobile-friendly website

2013-02-07 Thread Mikkel Bang
I forget if mobiles do more prefetching on dns and/or tcp on mobiles but perhaps that's worth considering as a culprit. My God Kevin, that's gotta be it! Does the page have more than 15 links? Yep, like 16-17 or so :) Mikkel 2013/2/7 Kevin Chadwick ma1l1i...@yahoo.co.uk I had to

Re: pf blocking active connections

2013-02-07 Thread Ville Valkonen
On Feb 7, 2013 11:20 PM, Jan Stary h...@stare.cz wrote: On Feb 07 21:31:11, martijn...@gmail.com wrote: Thanks for all the quick responses, but if I understand you all correctly there is no way to cut off an established connection by adding an ip address to a blocked table, so I'm still