Re: Supposed way to have a login without password but still able to login via ssh?

2022-09-26 Thread Romain FABBRI
Hi Federico, As far I am aware of, you shouldn't disable your user password... It seems akward to me And you're not telling why you absolutely need to login without the password... Regarding SSH configuration nothing special on openbsd I am aware of... Reading any good faq regarding ssh key

Re: Correct way to implement an IDS between relayd and httpd

2020-11-02 Thread Romain FABBRI
uot;`" -v mywebserver ### curl -vvv -d '{' -H "Content-Type: app/badContent" -X POST http://mywebserver -Message d'origine- De : Romain FABBRI Envoyé : jeudi 29 octobre 2020 15:27 À : misc@openbsd.org Objet : Correct way to implement an IDS between relayd and httpd

Correct way to implement an IDS between relayd and httpd

2020-10-29 Thread Romain FABBRI
Hello misc users, I'm trying to have my http SSL protocol to be terminated by relayd, and then the resulting plain http protocol to be filtered by some WAF before being passed to httpd I'm currently trying with suricata since it's in packages, but I'm open to suggestions. What would be the

Re: Authenticating Location in HTTPD

2020-10-28 Thread Romain FABBRI
I use this config for wordpress : authenticate "WordPress" with "/htdocs/htpasswd" Place the htpasswd file at the root of your chroot This file should not be served of course Check your logs for errors if not working Romain -Message d'origine- De : owner-m...@openbsd.org De la part de

Re: What do you use to generate invoices on OpenBSD?

2019-12-28 Thread Romain FABBRI
I like to use https://www.dolibarr.org/ -Message d'origine- De : owner-m...@openbsd.org De la part de Allan Streib Envoyé : vendredi 27 décembre 2019 19:49 À : jeanfrancois ; misc@openbsd.org Objet : Re: What do you use to generate invoices on OpenBSD? jeanfrancois writes: > Thanks

Re: What is the difference between the security of HardenedBSD, security of FreeBSD, security of NetBSD, security of OpenBSD and security of DragonflyBSD?

2016-11-07 Thread Romain FABBRI
Make your homework and come back to this list to ask questions when you have real ones.

Re: OpenBSD song31.mp3 remix

2016-08-26 Thread Romain FABBRI
Nice one ! saddly the rock spirit is a little bit lost in the cover version :( The first band to have successfully mix electro with rock was the Pink Floyd A contempory band which is worth listening (french lyrics sorry) : https://soundcloud.com/lafemmeressort/sets/psycho-tropical-berlin-1 Thanks

Re: OpenBSD + pf + DPI

2015-12-03 Thread Romain FABBRI
I don't understant your purpose What specific protocols would you like to inspect deeply ? Because the is no base/port complete solution that I am aware of. And the idea sounds crazy. Some vendors have filters/plugins/proxies that are application aware... And it's often disabled by admins

Re: A branded USB stick as an alternative to the CD set?

2015-12-02 Thread Romain FABBRI
I don't think it should be the contributors who should choose directly to who the money is "attributed". That being exactly the role of the foundation, in my opinion. But maybe : - the foundation could take into account the time given by each dev - the devs could have their own votes in regards

Re: OpenBSD Home Server: Hints and Advices

2015-09-28 Thread Romain FABBRI
Nor a safe in case of a major fire. -Message d'origine- De : owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] De la part de Quartz Envoyé : mardi 29 septembre 2015 06:35 À : misc@openbsd.org Objet : Re: OpenBSD Home Server: Hints and Advices >It's gonna be behind a 3020j surge

Re: Native EFI Bootloader Support

2015-09-05 Thread Romain FABBRI
Could help some people like me who have an asus t100 which only accept UEFI boot. (scarry) -Message d'origine- De : owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] De la part de Chris Cappuccio Envoyé : vendredi 4 septembre 2015 20:23 À : Gerald Hanuer

Re: iMac G5 install

2015-08-26 Thread Romain FABBRI
Why don't you make an usb install key ? And you should use 5.7 or 5.8 (almost 5.8 by using snapshot) For an usb installation, I think this method still works : http://undeadly.org/cgi?action=articlesid=20140225072408 Maybe your disk is dying -Message d'origine- De :

Re: HA / load balancing / fail-over using CARP

2015-06-22 Thread Romain FABBRI
Not sure you really want to do that but you could achieve some IP or MAC Load Balancing using this kind of setup : http://www.kernel-panic.it/openbsd/carp/carp4.html -Message d'origine- De : owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] De la part de Aviolat Romain Envoyé :

Re: Permanent network configuration leads to panic

2015-03-12 Thread Romain FABBRI
to wait for your link to be published... -Message d'origine- De : Jonathan Gray [mailto:j...@jsg.id.au] Envoyé : jeudi 12 mars 2015 08:30 À : Romain FABBRI Cc : misc@openbsd.org Objet : Re: Permanent network configuration leads to panic On Wed, Mar 11, 2015 at 09:57:12PM +, Romain FABBRI

Permanent network configuration leads to panic

2015-03-12 Thread Romain FABBRI
If I configure my network card manually using the following commands the system and network work fine : Ifconfig inet {public_ip_/32_address} 255.255.255.255 media 1000baseTX route add -inet {ip_gateway}/32 -link -iface em0 route add default {ip_gateway} If I attempt to configure using

Re: Last snapshots won't install on VMWare ESXi or getting ether_output panic

2015-02-27 Thread Romain FABBRI
 : Reyk Floeter [mailto:r...@openbsd.org] Envoyé : mercredi 25 février 2015 23:03 À : Romain FABBRI Cc : misc@openbsd.org Objet : Re: Last snapshots won't install on VMWare ESXi or getting ether_output panic Hi, I haven't seen such crashes. Can you provide more information incl. dmesg and .vmx file

Last snapshots won't install on VMWare ESXi or getting ether_output panic

2015-02-25 Thread Romain FABBRI
On last snapshots I can't complete the install when installing as a guest VM in VMWare ESXi 5.5. (snap: 20150217-20150223) The install fails when installing sets from CD. So I tried to convert a Hyper-V install which completes correctly and then to deploy the image to VMWare ESXi 5.5. It can

Re: ERP

2015-02-24 Thread Romain FABBRI
Depends on what you call a good ERP. A really simple and efficient one is dolibarr. http://sourceforge.net/projects/dolibarr/files/ -Message d'origine- De : owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] De la part de Cédric Krier Envoyé : mardi 24 février 2015 15:21 À : Jay

Emulate apache mod_rewrite feature with new httpd

2015-02-22 Thread Romain FABBRI
I've managed to configure the new httpd server to use as a replacement for apache. (With is really great. Thanks to Reyk !) I'm strugling to make my drupal site work, because of the clean url module. I used to have the following apache mod_rewrite configuration : RewriteEngine on RewriteBase /

Re: Emulate apache mod_rewrite feature with new httpd

2015-02-22 Thread Romain FABBRI
: sven falempin [mailto:sven.falem...@gmail.com] Envoyé : dimanche 22 février 2015 19:08 À : Romain FABBRI Cc : misc Objet : Re: Emulate apache mod_rewrite feature with new httpd On Sun, Feb 22, 2015 at 5:23 AM, Romain FABBRI romain.fab...@alienconsulting.netmailto:romain.fab

Re: DigitalOcean's BSD debut is FreeBSD only

2014-12-16 Thread Romain FABBRI
online.net is also a great cloud based server hosting service... -Message d'origine- De : owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] De la part de Gene Envoyé : mardi 16 décembre 2014 19:19 À : Richard E. Thornton Cc : misc Objet : Re: DigitalOcean's BSD debut is FreeBSD only

Netasq now named Stormshield Firewalls

2014-10-29 Thread Romain FABBRI
I found something interesting today playing with a Netasq F150 (rebranded Stormshield firewall). The firewall OS (named ASQ) is based on the top of FreeBSD. When I looked at the internal text files which contains the configuration for the firewall rules I found that the rule syntax looks a lot

Re: Why are there no PKG_PATH defaults?

2014-09-24 Thread Romain FABBRI - Alien Consulting
One think that could be done without hammering servers when you install from CD would be to add a question to the install script : Would you like to define the PKG PATH ? : - [1] : propose mirrors based on the timezone given (and then provide a menu and you just have to select the proxy) - [2]

Re: Request for Funding our Electricity

2014-01-15 Thread Romain FABBRI - Alien Consulting
It's been a while I want to buy Tshirts and sweatshirts but they never are available (right size for some, total availability for others). I mean if CD's and shirts do weight for a third of the the fundings... the store should be a little more pro (speaking about products availabilty) It's a

Re: Transparent proxy with Squid on OpenBSD 5.4

2014-01-09 Thread Romain FABBRI - Alien Consulting
know forwading requieres 2 networks De : carlos albino garcia grijalba [mailto:genesi...@hotmail.com] Envoyé : jeudi 9 janvier 2014 07:16 À : Romain FABBRI - Alien Consulting; grazzol...@gmail.com; 'Cremator' Cc : 'Misc OpenBSD' Objet : RE: Transparent proxy with Squid on OpenBSD 5.4 ok

Re: Transparent proxy with Squid on OpenBSD 5.4

2014-01-08 Thread Romain FABBRI - Alien Consulting
 : Romain FABBRI - Alien Consulting; grazzol...@gmail.com; 'Cremator' Cc : 'Misc OpenBSD' Objet : Re: Transparent proxy with Squid on OpenBSD 5.4 i agree with giancarlo why do u need the bridge function? for transparent proxy u dont need the bridge From: romain.fab...@alienconsulting.net To: grazzol

Re: Transparent proxy with Squid on OpenBSD 5.4

2014-01-03 Thread Romain FABBRI - Alien Consulting
... My browser accessed the internet without any restriction and without being cached... -Message d'origine- De : owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] De la part de Cremator Envoyé : jeudi 2 janvier 2014 20:29 À : Romain FABBRI - Alien Consulting Cc : Misc OpenBSD Objet : Re

Re: Transparent proxy with Squid on OpenBSD 5.4

2014-01-03 Thread Romain FABBRI - Alien Consulting
to serve files, like icons...) I find nothing in my squid.conf that would prevent caching when intercepting... That's stange... -Message d'origine- De : Giancarlo Razzolini [mailto:grazzol...@gmail.com] Envoyé : vendredi 3 janvier 2014 11:28 À : Romain FABBRI - Alien Consulting; 'Cremator' Cc

Re: Transparent proxy with Squid on OpenBSD 5.4

2014-01-03 Thread Romain FABBRI - Alien Consulting
[mailto:grazzol...@gmail.com] Envoyé : vendredi 3 janvier 2014 11:28 À : Romain FABBRI - Alien Consulting; 'Cremator' Cc : 'Misc OpenBSD' Objet : Re: Transparent proxy with Squid on OpenBSD 5.4 Em 03-01-2014 07:45, Romain FABBRI - Alien Consulting escreveu: Thanks, I tried according to your

Re: Transparent proxy with Squid on OpenBSD 5.4

2014-01-03 Thread Romain FABBRI - Alien Consulting
janvier 2014 17:46 À : Romain FABBRI - Alien Consulting Cc : misc@openbsd.org Objet : Re: Transparent proxy with Squid on OpenBSD 5.4 Romain FABBRI - Alien Consulting wrote: Hi, I’m trying to do a transparent webfiltering bridge with squid. I’ve used the packages for 5.4 which are squid-3.3.8

Re: Transparent proxy with Squid on OpenBSD 5.4

2014-01-03 Thread Romain FABBRI - Alien Consulting
I didn't investigate the bridge in itself since it seems to be working as a bridge... #=== # Bridge configuration #=== #vi /etc/hostname.bge0 up #vi /etc/hostname.bge1 up #vi /etc/hostname.vether0 inet 192.168.200.253 255.255.255.0

Transparent proxy with Squid on OpenBSD 5.4

2014-01-02 Thread Romain FABBRI - Alien Consulting
Hi, I’m trying to do a transparent webfiltering bridge with squid. I’ve used the packages for 5.4 which are squid-3.3.8 and squidGuard-1.4p6 Squid is working fine when the browser uses the vether0 administration interface of the bridge. I mean sites are cached and squidGuard is filtering