Re: Security blocking question

2009-10-09 Thread Svante Kvarnstrom


On Oct 9, 2009, at 11:56 PM, Matthew Seaman wrote:

plus you'll need to add a cron job to clear old entries out of the  
ssh-bruteforce
table after a suitable amount of time has passed.  Use expiretable  
to do

that.



I believe that security/expiretable is superfluous nowadays since  
pfctl supports the -T expire directive.


Best wishes,

Svante Kvarnström
Mob.: +46 702 38 34 00









PGP.sig
Description: This is a digitally signed message part


Re: Remote ssh tunnel in background or script?

2009-11-09 Thread Svante Kvarnstrom

Hello

Have you tried -f (for background) and -N for Do not execute a remote  
command? See man 1 ssh for more details.


Svante


On Nov 9, 2009, at 7:30 PM, Kevin Kinsey wrote:


Greetings!

I have a client who recently dropped static IP service in
favor of a cheaper solution, so they're now on a DHCP network
blocking port 25, etc.

In order to continue to allow them to connect to an outbound
SMTP box on the LAN, I've done this on their server:

sudo ssh -L thisbox:24:remotebox:52525 m...@remotebox

I've got Sendmail listening there on 52525, and it works
fine; the local clients are told to connect to thisbox
port 24.  The only issue is that I have to run it from
a terminal session.  When I tried to bg the process (cmdstring )
it doesn't work, exactly.  I've gotten an error message
at times*, and at other times I apparently get thisbox
listening on port 24 but it's not an SMTP daemon that's
listening.

I have a feeling it's cause I'm in csh, which is notorious
for backgrounding issues.  ?  At any rate, what I'd
like to do is have a script set up the connection, or
write some daemon that would monitor the connection and
fix it if it gets reset.  At any rate, if I could get this
SSH process to detach from a terminal, it'd be great.

Any suggestions?

Kevin Kinsey

* I'm sorry, but I can't reproduce the error message
this morning.  IIRC, something to the effect of
I can't do nothing, give me a command please?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org 



Best wishes,

Svante J. Kvarnström
http://sjk.ankeborg.nu/
Mob.: +46 702 38 34 00









___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Dump

2009-11-19 Thread Svante Kvarnstrom


On Nov 19, 2009, at 4:22 PM, Bernt Hansson wrote:


How does one set the nodump flag on a filesystem/directory




chflags nodump file

See man 1 chflags for more information.

Best wishes,

Svante J. Kvarnström
http://sjk.ankeborg.nu/
Mob.: +46 702 38 34 00









___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org