Securing communications with OpenBSD

2014-10-05 Thread C. L. Martinez
Hi all, I appeal to you to see if you can give me some advice. I need to secure communications between my front-end and back-end servers. First, my infrastructure: Internet ---> Public OpenBSD Carp'ed fws ---> FreeBSD front-end web servers (https) ---> Internal OpenBSD Carp'ed fws ---> CentOS

Trying to create softraid crypto part

2014-10-05 Thread STeve Andre'
So I am missing something, or being dumb. sd0j is a 128g piece of disk. Doing bioctl -c C -l /dev/sd0j softraid0 Gives softraid0: invalid metadata format What am I missing? This is an amd64 snap of Oct 4th. The vnconfig way of encryption has worked till I decided to do things the new w

Re: Trying to create softraid crypto part

2014-10-05 Thread STeve Andre'
So The partition has to be raid, vs 4.2 BSD Onward to my new disk... --STeve Andre' Sent with AquaMail for Android http://www.aqua-mail.com On October 6, 2014 12:22:25 AM "STeve Andre'" wrote: So I am missing something, or being dumb. sd0j is a 128g piece of disk. Doing bioctl

Re: [Bulk] Re: openbsdstore: enable javascript and buy something or gtfo

2014-10-05 Thread Kevin Chadwick
People wrote: > There are two things which irritates me in computing: > > 1. Need of security updates > 2. Two pieces of technology which are not compatible with each other. > > I'm GLAD that finally we have Javascript. At last, we have language and > platform that WORKS universally. Except it

Re: NAT logging and limits using pf

2014-10-05 Thread Stuart Henderson
On 2014-10-03, Russell Sutherland wrote: > I am trying to determine whether using an OpenBSD system to perform > institutional NAT for our wireless users would be a viable option. > > At the present time we are evaluating the A10 Thunder CGN appliance. > > There are a few issues for which I would

relayd url redirection

2014-10-05 Thread Olivier Cherrier
Hi, Following http://marc.info/?l=openbsd-misc&m=140508090726719&w=2, I'm trying to implement a similar setup. relayd(8) is listening on a public IP. httpd(8) is listening on localhost:80 and apache-httpd-openbsd is listening on localhost:81. I would like to handle all traffic with httpd

Re: npppd ipsec port 500 INVALID_MESSAGE_ID

2014-10-05 Thread Швецов Михаил
Thanks for your guide. But my truble is: 1. isp lan - i get IP by dhclient(ip + default route + dns) 2. I have global ip, but this is not working. In ifconfig i cant see my global ip.((( How setup /etc/ipsec.conf with dhclient with global IP??? 04.10.2014 18:54, Zhi-Qiang Lei пишет: On Oct 4,

Re: NAT logging and limits using pf

2014-10-05 Thread Kapetanakis Giannis
On 03/10/14 19:07, Russell Sutherland wrote: I am trying to determine whether using an OpenBSD system to perform institutional NAT for our wireless users would be a viable option. At the present time we are evaluating the A10 Thunder CGN appliance. There are a few issues for which I would like

Re: openbsdstore: enable javascript and buy something or gtfo

2014-10-05 Thread Matti Karnaattu
>1. OpenBSD is a great example of the difference that having security as >a primary design and development objective makes, unlike most other >OSes (including all flavors of linux) which do "added" security. Yes, primary objective. Definitely. It is also form of "added" security, because it is ba

Re: openbsdstore: enable javascript and buy something or gtfo

2014-10-05 Thread Otto Moerbeek
On Sun, Oct 05, 2014 at 11:36:33AM +0200, Ingo Schwarze wrote: > Hi, > > talking about setting the record straight... > > System Administrator wrote on Sat, Oct 04, 2014 at 11:57:56PM -0400: > > > 2. Open*BSD* as the name implies, had no "decades old" Unix code and > > by now has had much of th

Re: openbsdstore: enable javascript and buy something or gtfo

2014-10-05 Thread Ingo Schwarze
Hi, talking about setting the record straight... System Administrator wrote on Sat, Oct 04, 2014 at 11:57:56PM -0400: > 2. Open*BSD* as the name implies, had no "decades old" Unix code and > by now has had much of the _original_ BSD code replaced as well. The ancestors of OpenBSD are, in direct