Re: What are the security features in OpenBSD 6.0 that are by default disabled?

2016-10-16 Thread Otto Moerbeek
On Sun, Oct 16, 2016 at 08:37:54PM +0200, Peter Janos wrote: > use S for extras security at the expense of performance. Use other options > only if you know what you are doing and have specific needs. > BTW, ssh and sshd enable S by themselves. >   > -Otto Some background on the current state of

Re: What are the security features in OpenBSD 6.0 that are by default disabled?

2016-10-16 Thread Otto Moerbeek
On Sun, Oct 16, 2016 at 07:10:54PM -0500, Patrick Dohman wrote: > > > nonsense. daily security is mailed *if it is non-empty*. Same goes for > > weekly and mothly. > > > > -Otto > > i guess that’s explains why the output of who was omitted from the insecurity > out either be specific, pro

Re: What are the security features in OpenBSD 6.0 that are by default disabled?

2016-10-16 Thread Aaron Mason
There needs to be a new law like Godwin's Law that states that any technical discussion will eventually and inevitably lead to Hitchhiker's Guide references. But to follow on from what Raul said, it may be impossible to make your system 100% secure without violating part 15 of the FCC rules, proba

Re: What are the security features in OpenBSD 6.0 that are by default disabled?

2016-10-16 Thread Patrick Dohman
> nonsense. daily security is mailed *if it is non-empty*. Same goes for > weekly and mothly. > > -Otto i guess that’s explains why the output of who was omitted from the insecurity out

Re: What are the security features in OpenBSD 6.0 that are by default disabled?

2016-10-16 Thread Peter Janos
use S for extras security at the expense of performance. Use other options only if you know what you are doing and have specific needs. BTW, ssh and sshd enable S by themselves.   -Otto   -> so "S" is the best way, Thanks! :)   Sent: Friday, October 14, 2016 at 12:20 PM From: "Otto Moerbeek" To:

Fw: RE: RE: OpenBSD PaX Test question

2016-10-16 Thread Peter Janos
if anyone interested, correction for the pax topic Sent: Tuesday, October 11, 2016 at 3:57 PM From: "W. Dean Freeman" To: "'Peter Janos'" Subject: RE: RE: OpenBSD PaX Test questionIncreasing the stack gap size isn't necessarily bad or good. Basically, you're adjusting the run-time value of a gap

Re: relayd.conf error

2016-10-16 Thread Ali H. Fardan
On 2016-10-16 01:47, trondd wrote: This has an error: listen 127.0.0.1 port 7000 This does not: listen on 127.0.0.1 port 7003 This has an error: forward with tls to 6697 The rest of your forward to lines do not. Tim. Sorry for late response, this mail server went down for a while, anyway, t

Re: What are the security features in OpenBSD 6.0 that are by default disabled?

2016-10-16 Thread Mihai Popescu
... Still nothing about NSA or other conspiracies in security field?