Re: Hacked - FreeBSD 7.1-Release

2009-12-30 Thread Stephane Rochoy
On Tue, Dec 29, 2009 at 08:46:57PM +0100, Oliver Fromme wrote: Brian W. br...@brianwhalen.net wrote: [...] That's probably because OpenBSD doesn't have mac_portacl(4). ;-) [...] Arf, but pf allow to regulate traffic according to the user that own the socket, e.g., pass from any to any port www

Re: Hacked - FreeBSD 7.1-Release

2009-12-30 Thread Edwin Groothuis
On Tue, Dec 29, 2009 at 08:10:42AM -0800, Brian W. wrote: On 12/29/2009 3:45 AM, Edwin Groothuis wrote: mpt to pass a Turing test or something. On all systems which need to be accessible from the public Internet: Run sshd on port 22 and port 8022. Block incoming traffic on port 22 on

Re: Most files in subversion stable/8/sys touched by bms

2009-12-30 Thread Pete French
By the way, here is another little tool that can be used to watch changes in 8-stable conveniently: http://www.secnetix.de/olli/FreeBSD/svnews/?p=stable/8/sys Have you seen Fresh BSD ? It does a very similary thing except it's not just restricted to FreeBSD. For example to track RELENG_8...

Re: php5-5.2.11_1 Vulnerabilities

2009-12-30 Thread r00t
On 12/26/09 3:38 AM, Matthew Seaman wrote: I say this as both someone who does web hosting and codes in PHP. I often wonder what the point of PHP is given Markup::Perl[3]'s existence. Ooooh... another way of embedding perl into HTML. That makes ... counts on fingers ... loads. Not to

NFS locking issue with FreeBSD7.1 client

2009-12-30 Thread Mikolaj Golub
Hi, After upgrading our hosts from 6.3 to 7.1 we have been experiencing the issue with our NFS mounts. We have observed the issue on one of the hosts 3 last nights in raw and saw similar thing on another server several weeks ago. NFS server is CentOS 5.3. FreeBSD client had several NFS mounts,

Some fixes for ZFS on 7-stable (more testers wanted)

2009-12-30 Thread Alexander Leidinger
Hi, I backported some changes from 8-stable to 7-stable, I have this running on one 7-stable machine. I would like to get some more feedback for it (even an it works for me would be great). The main part of this change is that the FreeBSD taskqueue is used now instead of the opensolaris

Re: Hacked - FreeBSD 7.1-Release

2009-12-30 Thread Ian Smith
On Tue, 29 Dec 2009, David Wolfskill wrote: On Tue, Dec 29, 2009 at 03:20:37AM -0800, Jeremy Chadwick wrote: ... I've written my own script to do all of this. It parses periodic security mails (on a daily basis), and does WHOIS lookups + parses the results to tell me what

Re: Why does FreeBSD 8.-0 think that my Dell SX260 have non-unform processors?

2009-12-30 Thread Torfinn Ingolfsen
On Wed, 23 Dec 2009 17:08:58 +1100 (EST) Ian Smith smi...@nimnet.asn.au wrote: On Wed, 23 Dec 2009, Torfinn Ingolfsen wrote: I don't know. Since last time, I've upgraded the bios to the latest (A03) and reset bios to default values - but the problem is still there. According to the

USB Regression in 8.0-R and 8-Stable

2009-12-30 Thread Elliot Finley
I have a server that's been running 7-Stable for along time. It's set up with geli at the disk level and ZFS (including root) on top of that. It boots from a USB key. While booting it asks for the geli passphrase for each disk. This worked as expected in the 7-Stable branch. In 8-Stable, when

[releng_8 tinderbox] failure on amd64/amd64

2009-12-30 Thread FreeBSD Tinderbox
TB --- 2009-12-31 03:46:01 - tinderbox 2.6 running on freebsd-current.sentex.ca TB --- 2009-12-31 03:46:01 - starting RELENG_8 tinderbox run for amd64/amd64 TB --- 2009-12-31 03:46:01 - cleaning the object tree TB --- 2009-12-31 03:46:23 - cvsupping the source tree TB --- 2009-12-31 03:46:23 -

[releng_8 tinderbox] failure on i386/i386

2009-12-30 Thread FreeBSD Tinderbox
TB --- 2009-12-31 04:38:38 - tinderbox 2.6 running on freebsd-current.sentex.ca TB --- 2009-12-31 04:38:38 - starting RELENG_8 tinderbox run for i386/i386 TB --- 2009-12-31 04:38:38 - cleaning the object tree TB --- 2009-12-31 04:38:57 - cvsupping the source tree TB --- 2009-12-31 04:38:57 -

[releng_8 tinderbox] failure on i386/pc98

2009-12-30 Thread FreeBSD Tinderbox
TB --- 2009-12-31 05:02:24 - tinderbox 2.6 running on freebsd-current.sentex.ca TB --- 2009-12-31 05:02:24 - starting RELENG_8 tinderbox run for i386/pc98 TB --- 2009-12-31 05:02:24 - cleaning the object tree TB --- 2009-12-31 05:02:44 - cvsupping the source tree TB --- 2009-12-31 05:02:44 -

[releng_8 tinderbox] failure on ia64/ia64

2009-12-30 Thread FreeBSD Tinderbox
TB --- 2009-12-31 05:04:43 - tinderbox 2.6 running on freebsd-current.sentex.ca TB --- 2009-12-31 05:04:43 - starting RELENG_8 tinderbox run for ia64/ia64 TB --- 2009-12-31 05:04:43 - cleaning the object tree TB --- 2009-12-31 05:05:05 - cvsupping the source tree TB --- 2009-12-31 05:05:05 -

[releng_8 tinderbox] failure on powerpc/powerpc

2009-12-30 Thread FreeBSD Tinderbox
TB --- 2009-12-31 05:47:13 - tinderbox 2.6 running on freebsd-current.sentex.ca TB --- 2009-12-31 05:47:13 - starting RELENG_8 tinderbox run for powerpc/powerpc TB --- 2009-12-31 05:47:13 - cleaning the object tree TB --- 2009-12-31 05:47:28 - cvsupping the source tree TB --- 2009-12-31 05:47:28 -

[releng_8 tinderbox] failure on sparc64/sparc64

2009-12-30 Thread FreeBSD Tinderbox
TB --- 2009-12-31 06:09:12 - tinderbox 2.6 running on freebsd-current.sentex.ca TB --- 2009-12-31 06:09:12 - starting RELENG_8 tinderbox run for sparc64/sparc64 TB --- 2009-12-31 06:09:12 - cleaning the object tree TB --- 2009-12-31 06:09:28 - cvsupping the source tree TB --- 2009-12-31 06:09:28 -

atheros broadcast/multicast corruption with multiple hostap's

2009-12-30 Thread Russell Yount
It seems AP to client broadcasts/multicasts traffic is broken when using WPA2/802.11i with multiple hostapds in 8.0. Only the SSID associated with the last hostapd to be started has AP to client broadcasts/multicasts being delivered correctly. The AP and client are 8.0 freebsd systems althought

Re: Why does FreeBSD 8.-0 think that my Dell SX260 have non-unform processors?

2009-12-30 Thread Ian Smith
On Wed, 30 Dec 2009, Torfinn Ingolfsen wrote: On Wed, 23 Dec 2009 17:08:58 +1100 (EST) Ian Smith smi...@nimnet.asn.au wrote: On Wed, 23 Dec 2009, Torfinn Ingolfsen wrote: I don't know. Since last time, I've upgraded the bios to the latest (A03) and reset bios to default