Re: Username and/or password lengths for OpenIKED with EAP MSCHAP-V2

2023-03-10 Thread Tobias Heider
On Fri, Mar 10, 2023 at 05:00:36PM -0500, A Tammy wrote: > > On 3/10/23 15:42, J Doe wrote: > > On 2023-03-05 17:19, A Tammy wrote: > > > >> > >> On 3/5/23 16:49, J Doe wrote: > >>> Hello, > >>> > >>> I was wondering if there is a limit to the number of characters that > >>> the username and/or

Re: Username and/or password lengths for OpenIKED with EAP MSCHAP-V2

2023-03-10 Thread A Tammy
On 3/10/23 15:42, J Doe wrote: > On 2023-03-05 17:19, A Tammy wrote: > >> >> On 3/5/23 16:49, J Doe wrote: >>> Hello, >>> >>> I was wondering if there is a limit to the number of characters that >>> the username and/or password can be when using EAP MSCHAP-V2 in >>> OpenIKED. >>> >>> In

Re: Username and/or password lengths for OpenIKED with EAP MSCHAP-V2

2023-03-10 Thread J Doe
On 2023-03-05 17:19, A Tammy wrote: On 3/5/23 16:49, J Doe wrote: Hello, I was wondering if there is a limit to the number of characters that the username and/or password can be when using EAP MSCHAP-V2 in OpenIKED. In particular, I was wondering if either OpenIKED enforced a limit or

Re: Route selected IP traffic across wg(4) tunnel

2023-03-10 Thread Zack Newman
Hey Zach It's actually "Zack". I thought I would try to use the pf routing option `route-to` to accomplish this as it seemed like it might be a simple solution. You might be able to, but I prefer using pf to only filter traffic when I can get away with it-obviously for things like NAT I use

Re: Route selected IP traffic across wg(4) tunnel

2023-03-10 Thread Chris Jones
On 9 Mar 2023, at 12:01, Zack Newman wrote: Wondering if anyone has a "best practice" for pealing IP traffic off (in this case an AppleTV) and routing all the traffic across a Wireguard tunnel. Not sure what you mean by "pealing [sic] IP traffic off"; but when I need source-based routing, I

Re: Using gzip-static with httpd location

2023-03-10 Thread Marcus MERIGHI
j...@carnat.net (Joel Carnat), 2023.03.10 (Fri) 17:41 (CET): > Le 10/03/2023 à 16:41, Marcus MERIGHI a écrit : > > j...@carnat.net (Joel Carnat), 2023.03.10 (Fri) 02:31 (CET): > > > I just tried applying gzip compression on a simple test web site using > > > httpd > > > and the gzip-static option

Re: Using gzip-static with httpd location

2023-03-10 Thread Joel Carnat
Le 10/03/2023 à 16:41, Marcus MERIGHI a écrit : Hello, j...@carnat.net (Joel Carnat), 2023.03.10 (Fri) 02:31 (CET): I just tried applying gzip compression on a simple test web site using httpd and the gzip-static option ; using OpenBSD 7.2/amd64. As I understood the man page, gzip-static is

Re: openbsd get really hot/warm

2023-03-10 Thread Marcus MERIGHI
Hello, l...@netc.fr (l...@netc.fr), 2023.03.09 (Thu) 19:20 (CET): > unfortuately obsdfreqd didnt solved the problem... > with just less half of hour uptime, plus running firefox without going > on the internet, it's going up to 55°C did you use any options to obsdfreqd(1)? Like in

Re: Using gzip-static with httpd location

2023-03-10 Thread Marcus MERIGHI
Hello, j...@carnat.net (Joel Carnat), 2023.03.10 (Fri) 02:31 (CET): > I just tried applying gzip compression on a simple test web site using httpd > and the gzip-static option ; using OpenBSD 7.2/amd64. > > As I understood the man page, gzip-static is supposed to be used inside the > server

Re: Folks are there any tips to improve page load times on smokeping running on OpenBSD

2023-03-10 Thread Stuart Henderson
On 2023-03-10, Tom Smyth wrote: > I think I understand better. Now .. but is there still a security > benefit from having the different services in their own jails ? > (even if the jail cells come with their own metaphorical swimming > pool and armoury ) > > > > or is it that the jails don’t

Re: Folks are there any tips to improve page load times on smokeping running on OpenBSD

2023-03-10 Thread Tom Smyth
I think I understand better. Now .. but is there still a security benefit from having the different services in their own jails ? (even if the jail cells come with their own metaphorical swimming pool and armoury ) or is it that the jails don’t offer enough compared with the additional

Re: sftp-server listening port how-to

2023-03-10 Thread Daniele B.
Stuart Henderson : > Do you have the correct directory? > > The user's home directory is appended to ChrootDirectory. e.g. in your example > something like /home/of/the/hackers/home/myftpuser. Super good, now I'm also chrooted.. Thanks a lot, Stuart! -- Daniele Bonini

Re: sftp-server listening port how-to

2023-03-10 Thread Stuart Henderson
On 2023-03-09, Daniele Bonini wrote: > I configured sshd to chroot ftp requests in this way: > > Match User myftpuser > ChrootDirectory /home/of/the/hackers > ForceCommand internal-sftp > > giving the proper permissions to the destination dir, etc. > as from Peter doc too. Do you have