ftp-proxy binat design -- Was: Re: binat questions

2007-07-01 Thread Karl O. Pinc
On 03/22/2007 03:17:00 PM, Stuart Henderson wrote: One thing to watch out for with binat: you can't use it with ftp-proxy(8), since binat is of higher priority than the rdr or nat rules which are added to the anchor. The workaround there is to list nat and rdr separately. I just figured this

Re: Relaying denied. Trying to do TLS+SMTP AUTH. Do I really need SASL?

2007-07-01 Thread Fredrik Staxeng
Lyndon Nerenberg [EMAIL PROTECTED] writes: Well, that is exactly what I want to do. I use the system passwords for imap anyway, so why not? Of course, the channel must be protected by SSL/TLS when you do that. Because there are a large number of IMAP clients that are not aware of

Re: following stable, extra file sets?

2007-07-01 Thread Maurice Janssen
On Saturday, June 30, 2007 at 21:54:00 -0500, Aaron wrote: That sounds good, and i read http://www.openbsd.org/faq/upgrade41.html about upgrading, and http://www.openbsd.org/faq/faq5.html#Release When following stable with the method described in the faq, i didn't notice anything about final

Re: Setting up a virtual hosting machine w. SSH/SFTP accounts - pitfalls/experiences?

2007-07-01 Thread Stuart Henderson
On 2007/06/30 20:23, Chris Cappuccio wrote: For the rest, just give each domain name/user their own httpd instance running with its own config, its own unix user, and its own IP address. Or use different ports and proxy them based on host headers rather than burning IP

Re: ssh and sudo, password not hidden

2007-07-01 Thread Tom Van Looy
Oke, problem solved. But, why doesn't this flag get set implicitly when using a command with ssh? Chris Cohen wrote: On Saturday 30 June 2007 19:31, Tom Van Looy wrote: Hi Today I used sudo as command to ssh and it echoed my sudo password. [EMAIL PROTECTED] ~] $ ssh soekris sudo pfctl -s

no partition number, how to mount a msdos partition

2007-07-01 Thread Alex Kwan
hello, my OpenBSD hard disk have a msdos partition, but it has no partition number like sd0x, (my system's partition no. was from Sd0a to Sd0g) how can I mount it or put it into fstab? thanks!

Re: path traversal exploits

2007-07-01 Thread Nick Guenther
On 6/29/07, J.C. Roberts [EMAIL PROTECTED] wrote: The unarj v2.43 archiver we have for use with clamav virus scanning does not really work. The same is true for the newer 2.65 version released by the author. The problem is unarj is unable to extract with paths, hence it will overwrite files and

books.html out of date?

2007-07-01 Thread Alexander Hall
Is books.html falling behind? FYI, from looking at a few books i suspect the following: - Building Linux and OpenBSD Firewalls describes OpenBSD 2.5 and IPFilter... - Computer Networks does not refer to the latest edition (ISBN 0130661023 is edition 4) Of course there could be other useful

Re: path traversal exploits

2007-07-01 Thread Alexander Hall
Nick Guenther wrote: On 6/29/07, J.C. Roberts [EMAIL PROTECTED] wrote: The unarj v2.43 archiver we have for use with clamav virus scanning does not really work. The same is true for the newer 2.65 version released by the author. The problem is unarj is unable to extract with paths, hence it

Re: no partition number, how to mount a msdos partition

2007-07-01 Thread Alexander Hall
Alex Kwan wrote: my OpenBSD hard disk have a msdos partition, but it has no partition number like sd0x, (my system's partition no. was from Sd0a to Sd0g) how can I mount it or put it into fstab? thanks! First, do `fdisk sd0` and locate the boundaries of the msdos file system. Then `disklabel

Re: path traversal exploits

2007-07-01 Thread Alexander Hall
Alexander Hall wrote: Well, a slash in the beginning of path names made me overwrite my entire /etc dir with another machines configuration... However, that was with tar and not unarj... Correcting myself after some testing. It was using pax. :-) /Alexander

Re: path traversal exploits

2007-07-01 Thread Ingo Schwarze
J.C. Roberts wrote on Fri, Jun 29, 2007 at 12:46:02PM -0700: The unarj v2.43 archiver we have for use with clamav virus scanning does not really work. The same is true for the newer 2.65 version released by the author. The problem is unarj is unable to extract with paths, hence it will

Re: no partition number, how to mount a msdos partition

2007-07-01 Thread Nick Guenther
On 7/1/07, Alexander Hall [EMAIL PROTECTED] wrote: Alex Kwan wrote: my OpenBSD hard disk have a msdos partition, but it has no partition number like sd0x, (my system's partition no. was from Sd0a to Sd0g) how can I mount it or put it into fstab? thanks! First, do `fdisk sd0` and locate the

Re: no partition number, how to mount a msdos partition

2007-07-01 Thread Alexander Hall
Alexander Hall wrote: Then `disklabel -E sd0x` and add a partition of type MSDOS with the For the records; Should be `disklabel -E sd0` /Alexander

Re: path traversal exploits

2007-07-01 Thread Alexander Hall
Perhaps someone more experienced can comment on this one. I'm not exactly sure, but i suspect you found nothing for the following simple reason: if all you want to do is checking for simple path traversal under Unix, m/^\// and m/\.\./ are all you need. Except that it would make valid names

question for install bash-3.2

2007-07-01 Thread Alex Kwan
Hello, thanks for everyone, the mount problem was solved, the msdos partition # was sd0i . I install the bash with pkg_add bash-3.2.tgz, it was failed, I got following error message: Not an ustar archive header at /usr/libdata/perl5/OpenBSD/ustar.pm line 114. what is the problem of me? many

ftp-proxy fxp transfers

2007-07-01 Thread Chris Cohen
Hi, according to http://www.openbsd.org/faq/pf/ftp.html i've setup ftp-proxy and changed my pf.conf. A client on the extern interface of the firewall can upload files, use passive and active mode. But fxp transfers (server to server) doesn't work. My ftpserver (vsftpd) on the host behind the

can not install binaries with pkg_add

2007-07-01 Thread Alden Pierre
Hello All, I'm having a hard time trying to install packages on my machine. 1. PKG_PATH=ftp://ftp.openbsd.org/pub/OpenBSD/4.1/packages/i386/ 2. pkg_add -i screen gives me the following: sh: cannot create /var/tmp/pkgout.V6ybCkITOgB: File exists No packages

Re: ftp-proxy binat design -- Was: Re: binat questions

2007-07-01 Thread Camiel Dobbelaar
On Sun, 1 Jul 2007, Karl O. Pinc wrote: On 03/22/2007 03:17:00 PM, Stuart Henderson wrote: One thing to watch out for with binat: you can't use it with ftp-proxy(8), since binat is of higher priority than the rdr or nat rules which are added to the anchor. The workaround there is to

Re: ftp-proxy fxp transfers

2007-07-01 Thread Stuart Henderson
On 2007/07/01 18:14, Chris Cohen wrote: Doesn't ftp-proxy support fxp transvers in reverse mode? The negotiated IP address for active modes is ignored for security rea- sons. This makes third party file transfers impossible.

Re: ftp-proxy fxp transfers

2007-07-01 Thread Camiel Dobbelaar
On Sun, 1 Jul 2007, Chris Cohen wrote: according to http://www.openbsd.org/faq/pf/ftp.html i've setup ftp-proxy and changed my pf.conf. A client on the extern interface of the firewall can upload files, use passive and active mode. But fxp transfers (server to server) doesn't work. My

Re: ftp-proxy fxp transfers

2007-07-01 Thread Chris Cohen
On Sunday 01 July 2007 18:14, Chris Cohen wrote: Hi, according to http://www.openbsd.org/faq/pf/ftp.html i've setup ftp-proxy and changed my pf.conf. A client on the extern interface of the firewall can upload files, use passive and active mode. But fxp transfers (server to server) doesn't

Re: can not install binaries with pkg_add

2007-07-01 Thread Darren Spruell
On 7/1/07, Alden Pierre [EMAIL PROTECTED] wrote: Hello All, I'm having a hard time trying to install packages on my machine. 1. PKG_PATH=ftp://ftp.openbsd.org/pub/OpenBSD/4.1/packages/i386/ 2. pkg_add -i screen gives me the following: sh: cannot create

Formatting MS-DOS drive

2007-07-01 Thread Matthew Szudzik
I have a usb flash drive that I wish to reformat as an MS-DOS (FAT) file system. How do I do that on OpenBSD? I want the drive to be formatted in the same manner that a Windows machine or Macintosh might format an MS-DOS file system. So clearly, I don't want to use disklabel, since OpenBSD

Soekris net5501 IPsec performance?

2007-07-01 Thread Christian Weisgerber
So... Has anybody checked how much traffic you can push through a net5501 serving as an IPsec gateway? Has anybody tried a vpn1411 in a net5501 yet? -- Christian naddy Weisgerber [EMAIL PROTECTED]

Re: Formatting MS-DOS drive

2007-07-01 Thread Peter N. M. Hansteen
Matthew Szudzik [EMAIL PROTECTED] writes: I have a usb flash drive that I wish to reformat as an MS-DOS (FAT) file system. How do I do that on OpenBSD? You probably want to look into newfs_msdos. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team

Re: ftp-proxy fxp transfers

2007-07-01 Thread Chris Cohen
On Sunday 01 July 2007 19:58, Camiel Dobbelaar wrote: On Sun, 1 Jul 2007, Chris Cohen wrote: according to http://www.openbsd.org/faq/pf/ftp.html i've setup ftp-proxy and changed my pf.conf. A client on the extern interface of the firewall can upload files, use passive and active mode. But

Re: ssh and sudo, password not hidden

2007-07-01 Thread Jose H.
Because it is not necessarily needed, tty allocation may require other tasks like logging the user to wtmp* or creating job control and you may only need to run the command and get the result as if it where a file to read from. Btw, you can use the ssh's -T to log into a server and not to be

Re: Formatting MS-DOS drive

2007-07-01 Thread Adriaan
On 7/1/07, Matthew Szudzik [EMAIL PROTECTED] wrote: I have a usb flash drive that I wish to reformat as an MS-DOS (FAT) file system. How do I do that on OpenBSD? I want the drive to be formatted in the same manner that a Windows machine or Macintosh might format an MS-DOS file system. So

Re: ssh and sudo, password not hidden

2007-07-01 Thread Darren Tucker
Tom Van Looy wrote: Oke, problem solved. But, why doesn't this flag get set implicitly when using a command with ssh? Because it's not 8bit-clean, the tty layer can change the data. It's usually ok for text, but it messes up binary data so having it on all the time would make ssh pipelines

Re: OBSD 4.1 drops to ddb with cdd0: error 22 on component 0 (and 1 (mirror))

2007-07-01 Thread Shawn K. Quinn
On Sat, 2007-06-16 at 15:00 +0200, Marius Hooge wrote: Of course I did.. I just replaced the PSU with a spare one i got lying around. - It didn't work out. (Can a PSU even cause such errors?) A failing PSU is perhaps the least obvious hardware failure of all, because it looks like some