Malformed request shuts down httpd

2014-11-28 Thread Ezequiel Garzon
Hello! I know a lot is happening to httpd lately, so maybe this is not an issue anymore. I've noticed that a malformed HTTP request such as $ printf 'GET /file\r\n\r\n'| nc myhost 80 doesn't just silently fail, but rather shuts down httpd. My /etc/httpd.conf is minimal: server default {listen

Re: Packet Filter router i368 vs 64bit

2014-11-28 Thread Stan Gammons
On 11/28/14 01:32, Blaise Hizded wrote: On 11/28/2014 06:01 AM, Brad Smith wrote: On 11/27/14 23:50, jungle Boogie wrote: Hi, On 27 November 2014 at 20:38, thev...@openmailbox.org wrote: you can just use old hardware for these purposes. from the man who literally wrote the book on pf (from

Re: Malformed request shuts down httpd

2014-11-28 Thread Ville Valkonen
On 28 November 2014 at 13:26, Ezequiel Garzon m...@ezequiel-garzon.net wrote: Hello! I know a lot is happening to httpd lately, so maybe this is not an issue anymore. I've noticed that a malformed HTTP request such as $ printf 'GET /file\r\n\r\n'| nc myhost 80 doesn't just silently fail, but

Re: Malformed request shuts down httpd

2014-11-28 Thread Bertrand Janin
Ezequiel Garzon wrote : Hello! I know a lot is happening to httpd lately, so maybe this is not an issue anymore. I've noticed that a malformed HTTP request such as $ printf 'GET /file\r\n\r\n'| nc myhost 80 doesn't just silently fail, but rather shuts down httpd. My /etc/httpd.conf is

Re: sensorsd, upd, and state changes

2014-11-28 Thread David Higgs
On Fri, Nov 28, 2014 at 2:45 AM, Marcus MERIGHI mcmer-open...@tor.at wrote: What I have now: $ getcap -a -f /etc/sensorsd.conf hw.sensors.upd0.indicator0:low=1:high=2:command=/etc/sensorsd/upd.sh \ %l %n %s %x %t %2 %3 %4 hw.sensors.upd0.indicator1:low=1:high=2:command=/etc/sensorsd/upd.sh \

Re: sensorsd, upd, and state changes

2014-11-28 Thread Steven Surdock
I have two different APC units... uhidev0 at uhub1 port 1 configuration 1 interface 0 American Power Conversion Smart-UPS 1500 FW:601.3.D USB FW:1.3 rev 1.10/0.06 addr 2 uhidev0: iclass 3/0, 54 report ids upd0 at uhidev0 $ sysctl | grep upd hw.sensors.upd0.indicator0=Off (Charging), OK

Small fix at openbsd.org/policy.html

2014-11-28 Thread Mariano Baragiola
Hello, first time contributing to this wonderful project (if you may consider this silly thing as contributing). On openbsd.org/policy.html, it reads as it follows: For historical reasons, the OpenBSD base system still includes the following GPL-licensed components: the GNU compiler

Re: smtpd: mail stuck in queue

2014-11-28 Thread Gilles Chehade
On Fri, Nov 28, 2014 at 01:31:53AM +0100, Alexander Hall wrote: Hi, I noticed a box of mine having had a misconfigured mail relay, resulting in lots of mail queuing up. Now, after fixing the configuration, new mail are properly sent. However, it seems the invalid 'mta-relay' setting, as

Re: smtpd: mail stuck in queue

2014-11-28 Thread Gilles Chehade
On Thu, Nov 27, 2014 at 10:00:19PM -0500, Hugo Villeneuve wrote: On Fri, Nov 28, 2014 at 01:31:53AM +0100, Alexander Hall wrote: Hi, I noticed a box of mine having had a misconfigured mail relay, resulting in lots of mail queuing up. Now, after fixing the configuration, new mail are

Re: Small fix at openbsd.org/policy.html

2014-11-28 Thread Nick Holland
On 11/28/14 10:32, Mariano Baragiola wrote: Hello, first time contributing to this wonderful project (if you may consider this silly thing as contributing). On openbsd.org/policy.html, it reads as it follows: For historical reasons, the OpenBSD base system still includes the following

Re: sensorsd, upd, and state changes

2014-11-28 Thread Joe Gidi
On Fri, November 28, 2014 2:45 am, Marcus MERIGHI wrote: j...@entropicblur.com (Joe Gidi), 2014.11.27 (Thu) 16:41 (CET): I just spent some more time poking at this and I'm still unable to get So did I... sensorsd to recognize upd state changes. This is a bit of a frustrating regression from

Re: Confused about authpf real world usage

2014-11-28 Thread Christian Weisgerber
On 2014-11-28, thev...@openmailbox.org thev...@openmailbox.org wrote: If say machine 192.168.0.2 and 192.168.0.3 needs unrestricted access to the net, then wont it be as easy as Joe changing his machines IP address to 192.168.0.2 to gain access without authentication? theoretically this is

Re: sensorsd, upd, and state changes

2014-11-28 Thread Joe Gidi
On Fri, November 28, 2014 9:43 am, David Higgs wrote: On Fri, Nov 28, 2014 at 2:45 AM, Marcus MERIGHI mcmer-open...@tor.at wrote: What I have now: $ getcap -a -f /etc/sensorsd.conf hw.sensors.upd0.indicator0:low=1:high=2:command=/etc/sensorsd/upd.sh \ %l %n %s %x %t %2 %3 %4

Re: Confused about authpf real world usage

2014-11-28 Thread Josh Grosse
On Fri, Nov 28, 2014 at 03:27:38PM +0100, Martin Hanson wrote: theoretically this is possible, but only if the original machine holding the ip was down. just as a nameserver converts to an ip, the ip is converted to a MAC-address, which is associated with the NIC. if you want you can

Re: Packet Filter router i368 vs 64bit

2014-11-28 Thread trondd
On Fri, Nov 28, 2014 at 12:00 AM, Edgar Pettijohn pettijo...@hotmail.com wrote: This is something I've been interested in trying, but I would want it as a wireless access point as well and not sure what cards are supported and work well. Does anyone know of any good choices? I went with an

Re: smtpd: mail stuck in queue

2014-11-28 Thread Alexander Hall
On 11/28/14 17:04, Gilles Chehade wrote: On Thu, Nov 27, 2014 at 10:00:19PM -0500, Hugo Villeneuve wrote: On Fri, Nov 28, 2014 at 01:31:53AM +0100, Alexander Hall wrote: Hi, I noticed a box of mine having had a misconfigured mail relay, resulting in lots of mail queuing up. Now, after fixing

Re: Confused about authpf real world usage

2014-11-28 Thread Christian Weisgerber
On 2014-11-28, Martin Hanson greencopperm...@yandex.com wrote: How does one secure against MAC/IP spoofing? Is there a way to prevent this. 1. You separate the traffic so that potential attackers cannot access this network segment. a. Physically: Run a wire. b. Logically: Use a

Re: Confused about authpf real world usage

2014-11-28 Thread lists
On Fri, Nov 28, 2014 at 03:27:38PM +0100, Martin Hanson wrote: First I would scan the network for MACs and matching IPs, then I would spoof one at a time until I am out. Don't forget about the differentiation between authpf and authpf-noip. The latter can make things interesting for some use

Re: CUPS printer problems - #!/bin/bash

2014-11-28 Thread Duncan Patton a Campbell
On Fri, 28 Nov 2014 17:38:46 +0100 Antoine Jacoutot ajacou...@bsdfrog.org wrote: On Fri, Nov 28, 2014 at 09:23:41AM -0700, Duncan Patton a Campbell wrote: On Fri, 28 Nov 2014 11:15:26 +0100 Antoine Jacoutot ajacou...@bsdfrog.org wrote: On Thu, Nov 27, 2014 at 03:54:10PM -0700, Duncan

Ancient source-changes archive

2014-11-28 Thread Kent R. Spillner
Does anyone happen to have a personal archive of the source-changes mailing list going back at least as far as September 1997? Please contact me off-list. I have a code archaeology question that my Google-fu is too weak to answer. Thanks in advance!

Re: Confused about authpf real world usage

2014-11-28 Thread Martin Hanson
theoretically this is possible, but only if the original machine holding the ip was down. just as a nameserver converts to an ip, the ip is converted to a MAC-address, which is associated with the NIC. if you want you can permantly associate an ip with a mac, that way another machine cannot

Re: CUPS printer problems - #!/bin/bash

2014-11-28 Thread Antoine Jacoutot
I only used that to point out that there's bashisms thruout the codebase... but I'd guess that somewhere Fruitco is conflating apples and oranges into the round_fruit set (as distinct from long_fruit like bananas and pine cones). If I build foomatic from net sources I get What net

Re: Ancient source-changes archive

2014-11-28 Thread Ingo Schwarze
Hi Kent, Kent R. Spillner wrote on Fri, Nov 28, 2014 at 10:57:21AM -0600: Does anyone happen to have a personal archive of the source-changes mailing list going back at least as far as September 1997? Please contact me off-list. I have a code archaeology question that my Google-fu is too

Re: Ancient source-changes archive

2014-11-28 Thread Miod Vallat
Use ftp://ftp.openbsd.org/pub/OpenBSD/Changelogs/ or any mirror. For developers, the same is available in /cvs/CVSROOT/ChangeLog*. Ah, but these files lack about one month of changes in 1996.

Re: Malformed request shuts down httpd

2014-11-28 Thread Stuart Henderson
On 2014-11-28, Ezequiel Garzon m...@ezequiel-garzon.net wrote: Hello! I know a lot is happening to httpd lately, so maybe this is not an issue anymore. I've noticed that a malformed HTTP request such as $ printf 'GET /file\r\n\r\n'| nc myhost 80 doesn't just silently fail, but rather shuts

Re: Ancient source-changes archive

2014-11-28 Thread Christian Weisgerber
On 2014-11-28, Ingo Schwarze schwa...@usta.de wrote: For developers, the same is available in /cvs/CVSROOT/ChangeLog*. For anybody mirroring the repository. -- Christian naddy Weisgerber na...@mips.inka.de

Staying -current with cvsup or cvsync

2014-11-28 Thread Jungle Boogie
Hello All, For the last several updates I've applied to my system, I've used plain CVS: cvs -q up -Pd This is pretty slow for some reason, but I understand that's just how CVS works. Michael W. Lucas' book Absolute OpenBSD (first edition) talks about using CVSup to update the local copy

Re: Confused about authpf real world usage

2014-11-28 Thread Stuart Henderson
On 2014-11-28, Christian Weisgerber na...@mips.inka.de wrote: On 2014-11-28, Martin Hanson greencopperm...@yandex.com wrote: How does one secure against MAC/IP spoofing? Is there a way to prevent this. 1. You separate the traffic so that potential attackers cannot access this network

Re: Malformed request shuts down httpd

2014-11-28 Thread Eric Lalonde
I upgraded to 5.6-STABLE (amd64) on November 26th and when I ran this against my httpd instance it returned: !DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN html head title500 Internal Server Error/title style type=text/css!-- body { background-color: white; color: black;

Re: Staying -current with cvsup or cvsync

2014-11-28 Thread Einfach Jemand
Am 28.11.2014 21:33, schrieb Jungle Boogie: Hello All, For the last several updates I've applied to my system, I've used plain CVS: cvs -q up -Pd This is pretty slow for some reason, but I understand that's just how CVS works. Michael W. Lucas' book Absolute OpenBSD (first edition)

Re: Staying -current with cvsup or cvsync

2014-11-28 Thread Jungle Boogie
Dear Einfach, From: Einfach Jemand rru@gmail.com Sent: Fri, 28 Nov 2014 22:30:29 +0100 To: misc@openbsd.org Subject: Re: Staying -current with cvsup or cvsync On the footer of this site you will find -- Quote -- This site Copyright © 1996-2009

Re: Malformed request shuts down httpd

2014-11-28 Thread Ezequiel Garzon
Thanks for all the replies. Ville, I'm using -release, on the i386 architecture... inside a VPS. I can gather from the replies that indeed httpd is changing quite fast right now, so it doesn't seem very useful to report on -release. (In fact, apologies for my question a few days ago on the

Re: Staying -current with cvsup or cvsync

2014-11-28 Thread Einfach Jemand
Am 28.11.2014 22:38, schrieb Jungle Boogie: [...] I'll give this a shot and see how much faster the update is with cvsync! You are aware that this might not be much faster since - first you synchronize your local repository with cvsync, which takes some time - then you synchronize your

Re: Ancient source-changes archive

2014-11-28 Thread Kent R. Spillner
Thanks guys, but this is for the same problem I was complaining about on icb ~1 month ago. There's a tiny discrepancy between the ChangeLogs and CVS history, and I'm hoping some long-time user that is also a pack rat might have a private archive that would help figure out which is correct.

Re: making firefox less insecure

2014-11-28 Thread Ted Unangst
On Thu, Nov 27, 2014 at 01:07, Jonathan Thornburg wrote: Summary --- As described in another thread (http://marc.info/?l=openbsd-miscm=141677224322425w=1), I'm trying to run firefox as a non-privileged user _firefox, talking to my X server (no Xephyr yet) via an ssh tunnel. But I've

Re: CUPS printer problems - #!/bin/bash

2014-11-28 Thread Duncan Patton a Campbell
On Fri, 28 Nov 2014 19:34:35 +0100 Antoine Jacoutot ajacou...@bsdfrog.org wrote: I only used that to point out that there's bashisms thruout the codebase... but I'd guess that somewhere Fruitco is conflating apples and oranges into the round_fruit set (as distinct from long_fruit like

Re: CUPS printer problems - #!/bin/bash

2014-11-28 Thread Antoine Jacoutot
I'm not running that code. As I pointed out the official openbsd foomatic packages are NAME/NUMBERED like like the openprinting version 4.012, but inside they are something else branched from a much older version: version 1.1 is from circa 2002. This is version 1.0.54 # which

Re: CUPS printer problems - #!/bin/bash

2014-11-28 Thread Duncan Patton a Campbell
On Sat, 29 Nov 2014 00:34:17 +0100 Antoine Jacoutot ajacou...@bsdfrog.org wrote: I'm not running that code. As I pointed out the official openbsd foomatic packages are NAME/NUMBERED like like the openprinting version 4.012, but inside they are something else branched from a

Re: CUPS printer problems - #!/bin/bash

2014-11-28 Thread Antoine Jacoutot
Not that I can find, but what you're saying here is what I'm seeing: bash _was_ on the system for a short time a while back when it was needed to get grolog to run on OBSD64. Afterward it was removed. But cups-foomatic is going out when it gets installed, and finding some bashism,

Re: smtpd: mail stuck in queue

2014-11-28 Thread Liviu Daia
On 28 November 2014, Gilles Chehade gil...@poolp.org wrote: On Thu, Nov 27, 2014 at 10:00:19PM -0500, Hugo Villeneuve wrote: [...] No, it is not proper behavior. As a store and forward system with potentially 4-5 days between submission and delivery, any MTA needs to be able to adapt in

rdomain != 0 lo0 in table

2014-11-28 Thread Geoff Steckel
When an interface is given an IP6 address in anew rdomain, lo0 is named in various routes when that table is queried via netstat -r -f inet Does the pseudo-interface lo0 actually exist in multiple routing tables simultaneously, or does the name 'lo0' signify an otherwise anonymous point to hang

Re: Staying -current with cvsup or cvsync

2014-11-28 Thread Jungle Boogie
Dear Einfach, From: Einfach Jemand rru@gmail.com Sent: Fri, 28 Nov 2014 22:59:05 +0100 To: misc@openbsd.org Subject: Re: Staying -current with cvsup or cvsync Am 28.11.2014 22:38, schrieb Jungle Boogie: [...] I'll give this a shot and see how

Error while building current

2014-11-28 Thread Edgar Pettijohn
Not terribly concerned just wanted to let the powers that be know about this error. Will try and update src and rebuild tomorrow. === usr.sbin/httpdcc -O2 -pipe -Wall -I/usr/src/usr.sbin/httpd -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wshadow -Wpointer-arith -Wsign-compare

Re: Error while building current

2014-11-28 Thread Nick Holland
On 11/28/14 20:52, Edgar Pettijohn wrote: Not terribly concerned just wanted to let the powers that be know about this error. Will try and update src and rebuild tomorrow. === usr.sbin/httpdcc -O2 -pipe -Wall -I/usr/src/usr.sbin/httpd -Wstrict-prototypes -Wmissing-prototypes

Re: Ancient source-changes archive

2014-11-28 Thread Kent R. Spillner
Or barring that does anyone happen to recall the full name of pierre@? On Nov 28, 2014, at 14:43, Kent R. Spillner kspill...@acm.org wrote: Thanks guys, but this is for the same problem I was complaining about on icb ~1 month ago. There's a tiny discrepancy between the ChangeLogs and CVS