Re: perl interface to pf?

2005-11-03 Thread Jesper Louis Andersen
John N. Brahy wrote: Is there a perl interface to pf? No, and it would be totally insane to build one. PF is not a low-level assembly language for expressing ioctl(2) calls. It is an LALR(1) grammar for specifying firewall policies. Because of its high abstraction level compared to said

Re: bgpd.conf md5sig, iBGP and redistributing routes to/from ospf

2005-11-03 Thread Jesper Louis Andersen
per engelbrecht wrote: Q: setting up iBGP I've used our own AS as 'remote-as' but can't find a 'no synchronization' option for this connection. Do I need it at all. Been poking around in /usr/src/usr.sbin/bgpd without solving it, but it's needed in zebra and Cisco IOS hence the question. A: ?

Re: Limiting Shell Access Damage (was Guruness)

2005-10-24 Thread Jesper Louis Andersen
Will H. Backman wrote: Turning this into a learning experience: Does anyone have any hints or advice about hardening OpenBSD for shell accounts. Do people tweak things other than the login.conf settings? I have to deal with student shell accounts where students are learning to program and

Re: ThinkPad testers required

2005-08-28 Thread Jesper Louis Andersen
imEnsion wrote: I have a thinkpad x22.. not sure if I can help, but if i can slap a snapshot on the lappy, would it be of any help? Unfortunately not: Can people with the following laptops: - ThinkPad R50, R50p, R51, R52 - ThinkPad T41, T41p, T42, T42p, T43, T43p - ThinkPad X40 - ThinkPad

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Jesper Louis Andersen
chefren wrote: Two equal power supplies in line: Twice as much the risk of a brakedown of the system and two times as much failures of power supplies. Lets see. Let X be the (boolean) random variable designating ''system X breaks down in the first N years''. Equally, let Y be the random

Re: CVS - Lock File

2005-05-04 Thread Jesper Louis Andersen
Quoting Peter Valchev ([EMAIL PROTECTED]): Have you looked at subversion? A colleague of mine is fanatical about it, athough we don't use it here. You mean the one that has 23 build dependencies, and only compiles on i386? Hah. That is the primary problem. The second problem is the