Re: How to deny getting static ip address via pf ?

2011-07-26 Thread Balázs Mátéffy
2011/7/26 Matthew Seaman m.sea...@infracaninophile.co.uk On 26/07/2011 11:44, Yavuz Maşlak wrote: I use pf on freebsd as packet filter. I have a wireless area. The users get to the internet using automatic ip from the dhcp server. I wish to deny to assign a static ip address by manual.

Re: before i ugrade from 7.3 to 8.x....

2011-07-16 Thread Balázs Mátéffy
On 16 July 2011 11:27, Matthew Seaman m.sea...@infracaninophile.co.ukwrote: On 16/07/2011 06:45, Gary Kline wrote: i ant to be as sure as possible that my network stuff and mail Works! how can i test my /etc/namedb/* 'stuff'? pretty sure mail works .. AND finally, i'm glad i stuck with

Re: Upgrading very old installation

2011-07-15 Thread Balázs Mátéffy
On 15 July 2011 22:46, Roland Smith rsm...@xs4all.nl wrote: On Fri, Jul 15, 2011 at 08:20:52AM -0400, Jaime Kikpole wrote: I'm running a FreeBSD 6.x server that hasn't been updated in about 1.5 years. atlas:~uname -mprs FreeBSD 6.4-RELEASE-p8 i386 i386 I've been using the cvsup/make

Re: ghghg

2011-07-14 Thread Balázs Mátéffy
On 14 July 2011 23:58, Jerry je...@seibercom.net wrote: On Wed, 13 Jul 2011 21:48:43 -0700 Gary Kline articulated: testing What? Did you check this URL out: http://lists.freebsd.org/mailman/listinfo/freebsd-test -- Jerry ✌ jerry+f...@seibercom.net Disclaimer: off-list followups

Re: Limitting SSH access

2011-05-04 Thread Balázs Mátéffy
On 4 May 2011 13:35, Matthew Seaman m.sea...@infracaninophile.co.uk wrote: On 04/05/2011 10:08, Jack Raats wrote: I have a question concerning SSH op a FreeBSD 7.4-STABLE server. Is it possible to limit the SSH access? I want t o restrict a user to his own home directory. So that if he

Re: Why are YT vids on FreeBSD all about hacking MSN? (solved)

2010-12-31 Thread Balázs Mátéffy
Hi, I don't know about this, but you should definitely check out bsdconferences. http://www.youtube.com/bsdconferences Regards, MB. On 31 December 2010 02:13, Xn Nooby xno...@gmail.com wrote: I wanted to watch some videos about FreeBSD, so I went to Youtube and searched on FreeBSD. Then I

Re: Certification

2010-11-07 Thread Balázs Mátéffy
Hi, You can find all the information here: http://www.bsdcertification.org/ Regards, MB. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to

Re: automake

2010-09-24 Thread Balázs Mátéffy
Hi, Try this: portmaster -od /usr/ports/devel/automake19/ automake-1.4.6_5 or your automake version, look it up with pkg_info | grep automake Hope this helps! If needed try to update everything that was depending on automake! BR, Balazs. On 24 September 2010 23:20, ajtiM lum...@gmail.com

Re: rebuilding world - is chflags -R noschg * necessary?

2010-09-23 Thread Balázs Mátéffy
Hello! Anton is right, really the handbook says that it MAY contain, so it's not necessary that after every build there will be some files with the immutable flag. OFF: Long long time ago one night when I was playing with jails (to be exact I was building and making work my first jail by hand) I

Re: Correct syntax of supfile to keep ports upgraded?

2010-07-30 Thread Balázs Mátéffy
Hi, If you want to stick with cvsup, or csup, you can use the example port updating supfile (if you have the example files). for example: csup -L 2 -g -h cvsup10.us.freebsd.org/usr/share/examples/cvsup/ports-supfile You can check the example file, what csup or cvsup needs in the supfile, and

Re: FreeBSD 8.0 p#3

2010-06-27 Thread Balázs Mátéffy
Hi, Maybe portsnap fetch extract ? Maybe the tag in your supfile was wrong for the ports. MB. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to

Re: system is under attack (what can I do more?)

2010-06-18 Thread Balázs Mátéffy
Hello, 1, maybe the line with the rule is in a bad place in the conf, but even if it's working it's possible that it wont be triggered. As far as I can see there are 30 sec interval pauses between attacks from one host. Your rule is looking for connections in 30 sec ranges. 2,You should use a

Re: installworld and sources

2010-06-06 Thread Balázs Mátéffy
Hi! It's good practice to keep /usr/src (your source) intact and the same version as your worldkernel is and vica versa. For the particular installworld step AFAIK /usr/obj is used, where the system has the compiled world made in the build process. steps here:

Re: chroot scp only network storage?

2010-05-25 Thread Balázs Mátéffy
Hello, Try /usr/ports/shells/scponly . Look up the features, this way you can assign the restrictive scponly shell to the users: http://sublimation.org/scponly/wiki/index.php/Main_Page Best Regards: Balázs Mátéffy On 26 May 2010 00:05, Matthew Seaman m.sea...@infracaninophile.co.ukwrote

Re: jails and one dynamic ip address

2010-05-25 Thread Balázs Mátéffy
Hi, Sure there can be a better solution (I think :)): Use an rfc1918 private address range for your Jail, and use nat, to forward your external interface IP to the private address of the jail. This can be done in ipnat, PF, or the other natting, packet filtering tools. Hope I understood your

Re: where can i dl freebsd?

2010-05-06 Thread Balázs Mátéffy
Hi, I smell something fishy here, but whatever, here's a link to the gzipped 8.0 DVD ISO: ftp://ftp.freebsd.org/pub/FreeBSD/releases/i386/ISO-IMAGES/8.0/8.0-RELEASE-i386-dvd1.iso.gz 7.3: ftp://ftp.freebsd.org/pub/FreeBSD/releases/i386/ISO-IMAGES/7.3/FreeBSD-7.3-RELEASE-i386-dvd1.iso.gz On 7

Re: pf suggestions for paced attack

2010-05-03 Thread Balázs Mátéffy
Hello, What if you use a perl or whatever script, to look in the logs, and after a number of bad password attempts you just add that IP to the badboys table? Some programs out there are capable to do this eg. Daniel Gerzo' bruteforceblocker (you have to edit it), or bruteblock (if i'm right with

Re: pf suggestions for paced attack

2010-05-03 Thread Balázs Mátéffy
Hi, I'm interested, by the way, is there a max size limit to a pf table? Mine always stops working at 2megs... On 3 May 2010 18:48, Adam Vande More amvandem...@gmail.com wrote: On Mon, May 3, 2010 at 11:39 AM, John j...@starfire.mn.org wrote: Hi, Matthew. Indeed, yes, you may not recall,

Re: Gaming

2010-04-29 Thread Balázs Mátéffy
Hi, I lolled on the comment from David Kelly :D. By the way some time in the past I managed to use Counter-Stike 1.6 on wine with approx 20fps, and without sound :). On linux there is cedega, but cedega won't be ported to FreeBSD there was an old abandoned project to do it, but it died ;\. Your

Re: ping: sendto: No buffer space available

2010-04-24 Thread Balázs Mátéffy
I almost forgot! And if you find out the reason for shortage you can tweak it with the appropiate sysctl value. At the moment I'm not sure which value you should tweak, but if you search for this issue, maybe you can find the appropiate net. values. Regards, MB. On 24 April 2010 22:35, Balázs

Re: ping: sendto: No buffer space available

2010-04-24 Thread Balázs Mátéffy
Hello, I had a similar problem sometimes on one or two of my machines, look up netstat -m, usually if you run out of buffer space you have to tweak the mbuf memory size. You can see the memory usage current / cache / total, if the current or cache is the same value as the total, you have memory

Re: Online school for FreeBSD

2010-04-10 Thread Balázs Mátéffy
Sorry David for the mail before, I've got the wrong address! +1 :) I like the books of M.W.Lucas, easy to read, funny and on the other hand they have the needed details about the subject. On 11 April 2010 01:14, David Newman dnew...@networktest.com wrote: On 4/10/10 3:08 PM, Chris Whitehouse