Re: Question about PHP safe mode

2015-06-23 Thread Stuart Henderson
On 2015-06-23, Markus Rosjat ros...@ghweb.de wrote: Hi there, just a short question... I have quiet old 4.2 OpenBSD with a 5.2.4 PHP version. The safe_mode is on, a Costumer wants to have it off. Is there any security risk to it or do I need to check something on the system level to

Re: httpd feature request: auto index.txt

2015-06-23 Thread Craig Skinner
On 2015-06-23 Tue 08:23 AM |, Nick Holland wrote: On 06/23/15 06:14, Craig Skinner wrote: Ummm I was thinking of something that could generate $RELEASE index.txt files, including siteXX.tgz siteXX-hostname.tgz files. oh please no. That is NOT the web server's job! This is a

Re: httpd feature request: auto index.txt

2015-06-23 Thread trondd
On Tue, June 23, 2015 6:15 am, Craig Skinner wrote: On 2015-06-22 Mon 12:39 PM |, Noah wrote: On Mon, Jun 22, 2015 at 11:58 AM, Craig Skinner skin...@britvault.co.uk wrote: *) either/both .txt/.html *) .txt output something like: ls [-l[h]] | fgrep -v index.txt Does auto index do the

Re: httpd feature request: auto index.txt

2015-06-23 Thread Nick Holland
On 06/23/15 06:14, Craig Skinner wrote: On 2015-06-22 Mon 12:39 PM |, Noah wrote: On Mon, Jun 22, 2015 at 11:58 AM, Craig Skinner skin...@britvault.co.uk wrote: *) either/both .txt/.html *) .txt output something like: ls [-l[h]] | fgrep -v index.txt Does auto index do the trick? It

Re: enable-ec_nistp_64_gcc_128 available with LibreSSL or does it require OpenSSL?

2015-06-23 Thread Stuart Henderson
On 2015-06-22, nusenu nus...@openmailbox.org wrote: when starting tor on OpenBSD, tor complains about missing accelerated support for P-224/P-256: [notice] We were built to run on a 64-bit CPU, with OpenSSL 1.0.1 or later, but with a version of OpenSSL that apparently lacks accelerated

Re: PF Packet Flow Diagram

2015-06-23 Thread Andy Lemin
Haha, Oops! thanks Doug.. Here it is instead.. http://s12.postimg.org/i4pggq465/Open_BSDPFPacket_Flow.jpg http://s12.postimg.org/i4pggq465/Open_BSDPFPacket_Flow.jpg Cheers, Andy. On 23 Jun 2015, at 14:13, Doug Hogan d...@acyclic.org wrote: On Tue, Jun 23, 2015 at 11:56:17AM +0100, Andy

Experimenting with httpd

2015-06-23 Thread Peter Fraser
The httpd.conf man page uses the term request path, which I assumed when reading the man page would be the full http://company.com/web/page;, but I found through experimentation that it would be /web/page. The httpd.conf man page says that for the location directive The path argument will be

Re: mail server on rental server ,cannot send mail

2015-06-23 Thread Tuyosi Takesima
sorry , i hide real adress and name for my privacy . Vice versa at my home , i cansentmail but cannot recieve mail . i first doubt dovecot setting . /etc/dovecot/dovecot.conf -- protocols = imap listen = * !include conf.d/*.conf

panic during boot of 5.7 in de(4) running in Hyper-V

2015-06-23 Thread Tom Schutter
I installed 5.7 from http://ftp3.usa.openbsd.org/pub/OpenBSD/5.7/amd64/install57.iso in a Windows Server 2012 R2 Hyper-V VM using the Legacy Network Adapter. I always get a kernel panic in the de(4) driver during boot. If I remove the legacy NIC from the VM config, then I successfully boot, but

ifconfig carp30 state backup

2015-06-23 Thread mxb
Hey misc@, I have 2-node CARP setup in master/backup. carp30 configuration follows: carp30: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 lladdr 00:00:5e:00:01:0f description: EXT_30 priority: 0 carp: carpdev trunk0 advbase 1 balancing ip-stealth

Re: panic during boot of 5.7 in de(4) running in Hyper-V

2015-06-23 Thread Theo de Raadt
I looked into this last year but lost interest. It seems like the DMA buffer is being placed past the UVM constraint for DMA ( eg 4GB). A configuration buffer is in the softc. It should be allocated to be dma-reachable. This driver is quite ugly. Maybe the following diff works? Index:

Re: HA / load balancing / fail-over using CARP

2015-06-23 Thread Andy Lemin
Hi, You can already do active-active CARP with OpenBSD. I believe it hashes by the MAC address (the MAC hash dictates which firewall responds to an ARP for the gateway IP). However you may have issues with states and state synchronisation depending on the pps and firewall hardware performance,

Question about PHP safe mode

2015-06-23 Thread Markus Rosjat
Hi there, just a short question... I have quiet old 4.2 OpenBSD with a 5.2.4 PHP version. The safe_mode is on, a Costumer wants to have it off. Is there any security risk to it or do I need to check something on the system level to disable it but still have my environement secured ?

Re: Question about PHP safe mode

2015-06-23 Thread Heiko Zimmermann
Markus, are you kidding? http://www.cvedetails.com/vulnerability-list/vendor_id-74/product_id-128/version_id-50739/PHP-PHP-5.2.5.html And OpenBSD 4.2 is released Nov 1, 2007. You dont think it is important to upgrade? Best Regards, Heiko Am 23.06.2015 um 11:44 schrieb Markus Rosjat: Hi

Re: mail server on rental server ,cannot send mail

2015-06-23 Thread Tuyosi Takesima
thanks Matthew Martin. you give me important hints . i rewrite main.cf /etc/postfix/main.cf myhostname = abc.vs.sakura.ne.jp mydomain = vs.sakura.ne.jp myorigin = $myhostname inet_interfaces = all home_mailbox = Maildir/ relay_domains = $mydestination #- relayhost =

Illumos adopting arc4random

2015-06-23 Thread Karel Gardas
Hello, haven't seen this in OpenBSD related press nor mailing list, so I've thought it may be good to let you know that Illumos which is former-OpenSolaris fork has adopted arc4random from OpenBSD in a commit done on April 7 by Robert Mustacchi. Kudos to OpenBSD team and especially to people who

Issue with OpenBGPD

2015-06-23 Thread HaTiM Chikhi
Hi, I'm adding a static route to the OpenBGPD process. The route is distributed correctly. But when I delete the route, OpenBGPD still distribute it, even it is no longer in the routing table ( netstat -rn4). I have to restart the OpenBGPD process to delete the route. I'm using pfsense 2.2.2

Re: HA / load balancing / fail-over using CARP

2015-06-23 Thread Andy Lemin
Hi, On 23 Jun 2015, at 10:50, Aviolat Romain romain.avio...@nagra.com wrote: Hi Andy, Thanks for your detailed answer. Yes we are doing statefull firewalling and we want to keep it like that, we of course plan to have servers that are able to take the full load in case of failure of the

Re: HA / load balancing / fail-over using CARP

2015-06-23 Thread Aviolat Romain
Hi Andy, Thanks for your detailed answer. Yes we are doing statefull firewalling and we want to keep it like that, we of course plan to have servers that are able to take the full load in case of failure of the other. We don't have yet requirements to go higher than the actual 1Mpps limit

Re: mail server on rental server ,cannot send mail

2015-06-23 Thread Matthew Martin
On 6/23/15, Tuyosi Takesima nakajin.fu...@gmail.com wrote: thanks Matthew Martin. you give me important hints . i rewrite main.cf /etc/postfix/main.cf myhostname = abc.vs.sakura.ne.jp mydomain = vs.sakura.ne.jp myorigin = $myhostname inet_interfaces = all

PF Packet Flow Diagram

2015-06-23 Thread Andy Lemin
Hi, I was updating an old copy of the PF flow diagram I had lying around and thought I'd post here quickly for comments / additions / corrections? Would be nice to update this and make it comprehensive as possible. [demime 1.01d removed an attachment of type application/pdf which had a name of

Re: httpd feature request: auto index.txt

2015-06-23 Thread Craig Skinner
On 2015-06-22 Mon 12:39 PM |, Noah wrote: On Mon, Jun 22, 2015 at 11:58 AM, Craig Skinner skin...@britvault.co.uk wrote: *) either/both .txt/.html *) .txt output something like: ls [-l[h]] | fgrep -v index.txt Does auto index do the trick? It doesn't make an index.html/txt file, but

Re: mail server on rental server ,cannot send mail

2015-06-23 Thread Edgar Pettijohn
On 06/22/15 23:15, Tuyosi Takesima wrote: few days ago i rented renal server for coninience . and i made mail server. but i cannot send mail although i receive mail. i think problems is in postfix setting . please point out problems . /etc/postfix/main.cf - myhostname =

Re: mail server on rental server ,cannot send mail

2015-06-23 Thread carlos albino garcia grijalba
Log when sending and receiving to see what is happening i have postfix, dovecot, amavisd and works ok! Date: Tue, 23 Jun 2015 05:22:36 -0500 Subject: Re: mail server on rental server ,cannot send mail From: matt.a.mar...@gmail.com To: nakajin.fu...@gmail.com CC: misc@openbsd.org On

Re: Illumos adopting arc4random

2015-06-23 Thread Chris Cappuccio
It's like, adopt, or die! Karel Gardas [gard...@gmail.com] wrote: Hello, haven't seen this in OpenBSD related press nor mailing list, so I've thought it may be good to let you know that Illumos which is former-OpenSolaris fork has adopted arc4random from OpenBSD in a commit done on April 7

Re: panic during boot of 5.7 in de(4) running in Hyper-V

2015-06-23 Thread Mike Larkin
On Tue, Jun 23, 2015 at 02:57:51PM -0600, Tom Schutter wrote: I installed 5.7 from http://ftp3.usa.openbsd.org/pub/OpenBSD/5.7/amd64/install57.iso in a Windows Server 2012 R2 Hyper-V VM using the Legacy Network Adapter. I always get a kernel panic in the de(4) driver during boot. If I