Re: rsync -a doesnt keep owner and permissions

2014-08-21 Thread Markus Rosjat
Just a short heads up how I did it now and you guys might want to share your opinion on the security with this scenario. maschine A (from were I want to pull files): - root cant login over ssh - sync user can only connect with auth key and from host B - sync user is allowed to run rsync without

Re: rsync -a doesnt keep owner and permissions

2014-08-21 Thread Janne Johansson
right to run rsync ..as root? Not that this is 0-days information, but scroll down to the rsync part (you can read the rest later, somewhat linux-centric on the tar part I guess) http://www.defensecode.com/public/DefenseCode_Unix_WildCards_Gone_Wild.txt Anyone that can control the contents of

Re: Strip private AS# from AS-PATH with OpenBGPd

2014-08-21 Thread Laurent CARON
On 21/08/2014 00:01, Stuart Henderson wrote: That would deny (reject) routes, it would not strip private ASN from the AS-path, openbgp doesn't have a way to do that. Hi Stuart, That's exactly what I meant to do. The subject I chose is actually wrong misleading. If you actually mean

Re: rsync -a doesnt keep owner and permissions

2014-08-21 Thread Markus Rosjat
Am 21.08.2014 09:01, schrieb Janne Johansson: right to run rsync ..as root? Not that this is 0-days information, but scroll down to the rsync part (you can read the rest later, somewhat linux-centric on the tar part I guess)

Re: Xrdp network times out

2014-08-21 Thread Maurice McCarthy
Hi I've never used it for rdp but Vinagre has some support for it. It is in ports. Documentation is all-but non-existent. Good Luck Moss

Port scan whole countries

2014-08-21 Thread Maurice McCarthy
Just for interest. Likely you've already heard of the HACIENDA program. It was news to me. http://www.heise.de/ct/artikel/NSA-GCHQ-The-HACIENDA-Program-for-Internet-Colonization-2292681.html$ You too can be a cyber spy. Moss

Re: vio0 stops working

2014-08-21 Thread Kapetanakis Giannis
On 19/08/14 14:03, David Coppa wrote: On Tue, Aug 19, 2014 at 11:05 AM, Kapetanakis Giannis bil...@edu.physics.uoc.gr wrote: Hi, I have a random problem with an OB current (5.6 GENERIC#310 amd64) VM running on Linux KVM. This server is doing radio streaming with icecast. It's vio0 interface

Re: iked troubles, SA not installed

2014-08-21 Thread Vincent Gross
On Wed, Aug 20, 2014 at 03:23:29PM +0200, Vincent Gross wrote: Hi folks, I am trying to set up an IPSec VPN between my OpenBSD-current laptop and my OpenBSD-current gateway at home. The gateway is connected with plain old ADSL + PPPoE, and the laptop uses my smartphone tethering functions.

Re: openbgpd ipv6 nexthop

2014-08-21 Thread Mickael Torres
On 2014-08-20 13:30, Mickael Torres wrote: On 2014-08-20 11:21, David Dahlberg wrote: Am Mittwoch, den 20.08.2014, 08:25 +0200 schrieb Henning Brauer: trying to do the same for IPv6, the set nexthop statement in the bgpd.conf has no effect. The cisco receives the prefixes with the non-carp

Re: rsync -a doesnt keep owner and permissions

2014-08-21 Thread Martin Schröder
2014-08-21 8:47 GMT+02:00 Markus Rosjat ros...@ghweb.de: Just a short heads up how I did it now and you guys might want to share your opinion on the security with this scenario. maschine A (from were I want to pull files): - root cant login over ssh - sync user can only connect with auth key

Re: Strip private AS# from AS-PATH with OpenBGPd

2014-08-21 Thread Adam Thompson
I'm still baffled - why do you want to reject routes containing private ASNs? It's strange and odd, but not invalid or illegal. AFAICT, it's analogous to routing public IP traffic across a link that uses RFC1918 addresses - completely irrelevant to the end-user. Am I missing something? -Adam

sshvnc error

2014-08-21 Thread Maurice McCarthy
Hi I've got a small problem with vnc over an ssh tunnel. (sshvnc is a simplied form of ssvnc given in the ssvnc port.) I'm going to try to cure it myself, so I'm just reporting here. I have a virtual server with mythic-beasts, an openbsd-5.5-stable qemu image running on a physical debian

hang at syncing disks... done

2014-08-21 Thread Marko Cupać
Hi, I have just installed OpenBSD 5.5 on my ThinkPad T440. At first glance everything seems to work OK, except for the fact that, when shutting down or restarting, system hangs at 'hang at syncing disks... done'. I need to hold power button in order to power it off. Disks are clean on next boot,

Re: hang at syncing disks... done

2014-08-21 Thread David Dahlberg
Am Donnerstag, den 21.08.2014, 16:38 +0200 schrieb Marko Cupać: I have just installed OpenBSD 5.5 on my ThinkPad T440. At first glance everything seems to work OK, except for the fact that, when shutting down or restarting, system hangs at 'hang at syncing disks... done'. vi /etc/rc.shutdown

Re: hang at syncing disks... done

2014-08-21 Thread Marko Cupać
On Thu, 21 Aug 2014 14:45:42 + David Dahlberg david.dahlb...@fkie.fraunhofer.de wrote: Am Donnerstag, den 21.08.2014, 16:38 +0200 schrieb Marko Cupać: I have just installed OpenBSD 5.5 on my ThinkPad T440. At first glance everything seems to work OK, except for the fact that, when

New queueing system and HZ value limits

2014-08-21 Thread Federico Giannici
We are using a firewall/qos server with a lot of HFSC queues. We have just switched to the new queueing system of 5.5. We'd like to get rid of custom kernels because now there is no longer the limit of 64 HFSC classes, but I have recently read that there are still limits to the efficacy of the

Re: Strip private AS# from AS-PATH with OpenBGPd

2014-08-21 Thread Stuart Henderson
On 2014-08-21, Adam Thompson athom...@athompso.net wrote: I'm still baffled - why do you want to reject routes containing private ASNs? It's strange and odd, but not invalid or illegal. Quite - I don't see much value in doing this, OK so some network in the path screwed up by accepting these

Re: New queueing system and HZ value limits

2014-08-21 Thread Stuart Henderson
On 2014-08-21, Federico Giannici giann...@neomedia.it wrote: We are using a firewall/qos server with a lot of HFSC queues. We have just switched to the new queueing system of 5.5. We'd like to get rid of custom kernels because now there is no longer the limit of 64 HFSC classes, but I have

Re: sshvnc error

2014-08-21 Thread Stuart Henderson
On 2014-08-21, Maurice McCarthy m...@mythic-beasts.com wrote: Hi I've got a small problem with vnc over an ssh tunnel. (sshvnc is a simplied form of ssvnc given in the ssvnc port.) I'm going to try to cure it myself, so I'm just reporting here. I have a virtual server with mythic-beasts,

Re: New queueing system and HZ value limits

2014-08-21 Thread Adam Thompson
Unless I've mis-understood all the emails and reports about this, it affects low-bandwidth queues, not low-bandwidth interfaces. In other words, limiting traffic to 50Mbps on a 1Gb link will work fine, limiting it to 50kbps on the same link will not. Yes/no? -Adam On August 21, 2014 12:03:12

Re: New queueing system and HZ value limits

2014-08-21 Thread Federico Giannici
On 08/21/14 19:03, Stuart Henderson wrote: On 2014-08-21, Federico Giannici giann...@neomedia.it wrote: We are using a firewall/qos server with a lot of HFSC queues. We have just switched to the new queueing system of 5.5. We'd like to get rid of custom kernels because now there is no longer

Re: named does not start?

2014-08-21 Thread Henning Brauer
* Christer Solskogen christer.solsko...@gmail.com [2014-08-20 22:14]: On Wed, Aug 20, 2014 at 9:23 PM, Alan McKay alan.mc...@gmail.com wrote: On Wed, Aug 20, 2014 at 3:08 PM, Christer Solskogen christer.solsko...@gmail.com wrote: named_flags= Try named_flags= I had the same

n00b spamd/spamdb question

2014-08-21 Thread Adam Thompson
I've finally started using spamd on a new mail server, and am seeing some results that I don't understand. (I'm also using smtpd(8) now, so this is all new software to me...) 1 - spamdb(8) shows nothing but WHITE-listed entries 2 - but spamd(8) (running with -v -G 2:4:864) logs almost every

Re: n00b spamd/spamdb question

2014-08-21 Thread Steven Roberts
Date: Thu, 21 Aug 2014 13:11:23 -0500 From: Adam Thompson athom...@athompso.net To: OpenBSD-misc list misc@openbsd.org I've finally started using spamd on a new mail server, and am seeing some results that I don't understand. (I'm also using smtpd(8) now, so this is all new software to

Re: hang at syncing disks... done

2014-08-21 Thread Giancarlo Razzolini
On 21-08-2014 11:38, Marko Cupać wrote: I have just installed OpenBSD 5.5 on my ThinkPad T440. At first glance everything seems to work OK, except for the fact that, when shutting down or restarting, system hangs at 'hang at syncing disks... done'. I had this problem, a long time ago when

SIP and ZRTP

2014-08-21 Thread Ingo Feinerer
Hello, I have been using the telephony/pjsua port (thanks for providing it!) for some time but wondered if there exists a SIP user agent supporting ZRTP (https://en.wikipedia.org/wiki/ZRTP) on OpenBSD? Best regards, Ingo

Re: n00b spamd/spamdb question

2014-08-21 Thread Adam Thompson
On 14-08-21 01:50 PM, Steven Roberts wrote: I recommend you continue to read the man pages until you have a better understanding of how they work. I've already read them several times. The problem, as in all our man pages, is that once I know what I'm looking for, it's (usually)well

dcc port

2014-08-21 Thread Boris Goldberg
Hello misc, We needed to install DCC (to work with SpamAssassin), couldn't find an OpenBSD port, so we've built it ourselves. Does anyone want it? It's for 5.4 i386. We probably can compile it for 5.4 amd64. Wont be able to compile for 5.5 or 5.6, so can't maintain the port. The package

Re: n00b spamd/spamdb question

2014-08-21 Thread Steven Roberts
Oops. I see that now. Then how do I see what IPs are blacklisted without becoming a human version of spamd-setup(8)? If running spamd in default mode ... 1. spamdb(8), TRAPPED entries. 2. The spamd.conf(5) file is read by spamd-setup(8) to configure blacklists for spamd(8). I am not aware

Re: New queueing system and HZ value limits

2014-08-21 Thread Stuart Henderson
On 2014-08-21, Federico Giannici giann...@neomedia.it wrote: On 08/21/14 19:03, Stuart Henderson wrote: On 2014-08-21, Federico Giannici giann...@neomedia.it wrote: We are using a firewall/qos server with a lot of HFSC queues. We have just switched to the new queueing system of 5.5. We'd like

Re: hang at syncing disks... done

2014-08-21 Thread Marko Cupać
On 21-08-2014 11:38, Marko Cupać wrote: I have just installed OpenBSD 5.5 on my ThinkPad T440. At first glance everything seems to work OK, except for the fact that, when shutting down or restarting, system hangs at 'hang at syncing disks... done'. This could be possibly due to my

sound over hdmi?

2014-08-21 Thread Marko Cupać
Hi, I saw question about sound over hdmi on @misc from about a year ago, and the answer was negative. Are there any news? Is this being worked on? Regards, -- Marko Cupać

Re: sound over hdmi?

2014-08-21 Thread Giancarlo Razzolini
On 21-08-2014 19:37, Marko Cupać wrote: Hi, I saw question about sound over hdmi on @misc from about a year ago, and the answer was negative. Are there any news? Is this being worked on? Regards, Marko, I've never tried on OpenBSD. But from someone that had experience from both type

wanted in calgary

2014-08-21 Thread Theo de Raadt
Anyone have two (or four?) HP 1G multimode SFP's available in Calgary? (I am trying to solve a problem fast). Thanks.