Installing apsfilter package fails

2008-03-19 Thread Ed Flecko
I have an OpenBSD 4.2 box without X installed, and I'm trying to install apsfilter to set up printing. Apsfilter fails with the following message: # pkg_add apsfilter-7.2.8p0.tgz Can't install gettext-0.14.6p0: lib not found expat.8.0 Dependencies for gettext-0.14.6p0 resolve to:

Re: Installing apsfilter package fails

2008-03-20 Thread Ed Flecko
Thank you Preston. You said, If I remember correctly, you need to have the x-base package installed for the libiconv / gettext dependencies to be met. It's an issue with 4.2. How did you know that? Is there a source that I should reference that I'm not aware of to keep up on the latest

Setting up an HP laserjet with apsfilter unknown printer error

2008-03-20 Thread Ed Flecko
Hi folks, I'm using apsfilter on OBSD 4.2, and trying to set up an HP LaserJet printer. I have an HP P2015DN and a 4240n, so printing to either one would be fine with me. After running apsfilter SETUP, here's my /etc/printcap file: lp|PSgs;r=300x300;q=medium;c=mono;p=letter;m=auto:\ :lp=:\

Would OpenBSD and Squid be considered a Proxy Firewall?

2008-03-22 Thread Ed Flecko
Hi folks, I'm reading a book on network security and it mentions proxy firewalls, so I'm wondering if an OpenBSD box with Squid installed would fit this description? Or, are there other proxy firewalls the author is referring to? The book mentions that although proxy firewalls tend to slow

Re: Would OpenBSD and Squid be considered a Proxy Firewall?

2008-03-22 Thread Ed Flecko
formidable firewall. I wonder if PF would analyze the incoming data stream first and then Squid, or would that be Squid first and then PF? Ed On Sat, Mar 22, 2008 at 6:05 AM, Denise H. G. [EMAIL PROTECTED] wrote: Ed Flecko [EMAIL PROTECTED] writes: Hi folks, I'm reading a book on network

Re: Would OpenBSD and Squid be considered a Proxy Firewall?

2008-03-23 Thread Ed Flecko
and implies they are more secure than traditional firewalls because they ignore typical reconnaissance, probing attempts like nmap, etc. because they function at the application layer. Ed On Sat, Mar 22, 2008 at 7:38 AM, Lars Noodin [EMAIL PROTECTED] wrote: Ed Flecko wrote: I'm reading a book

Re: Would OpenBSD and Squid be considered a Proxy Firewall?

2008-03-23 Thread Ed Flecko
! :-) Ed On Sun, Mar 23, 2008 at 1:42 PM, System Administrator [EMAIL PROTECTED] wrote: On 23 Mar 2008 at 7:58, Ed Flecko wrote: The book is called Counter Hack Reloaded: A Step-by-Step Guide to Computer Attacks and Effective Defenses (2nd Edition) - http://www.amazon.com/Counter-Hack

Simple OBSD/Samba sharing/restart question

2008-03-31 Thread Ed Flecko
Hi folks, I'm running OpenBSD 4.2, I've installed and configured Samba. I have a shared directory on the OBSD box that I store some backup log files stored in. I want to be able to read the log files (or any other files as well) from the shared directory, but I'm not able to do so. Here's my

Correctly uninstall default Apache and install Apache 2.2.4?

2008-04-21 Thread Ed Flecko
Hi folks, For a variety of reasons and features, I'd like to install the apache-httpd-2.2.4.tgz package. As a side note, I tried to install it on OpenBSD 4.2, and there are a few package dependencies it apparently is missing (at least on my box, which runs 4.2 without X) because the install fails.

My ntpd isn't starting on OBSD 4.3?

2008-05-01 Thread Ed Flecko
Hi folks, O.K., I'm stumped. I've just installed 4.3, and I have the typical: ntpd_flags=-s entry in /etc/rc.conf.local and # sync to a single server 128.9.176.30 # use a random selection of 8 public stratum 2 servers # see http://support.ntp.org/bin/view/Servers/NTPPoolServers # servers

Re: My ntpd isn't starting on OBSD 4.3?

2008-05-01 Thread Ed Flecko
Yep, that was it. Thanks guys. :-) On Thu, May 1, 2008 at 1:21 PM, Martin Toft [EMAIL PROTECTED] wrote: On Thu, May 01, 2008 at 01:06:41PM -0700, Ed Flecko wrote: Hi folks, O.K., I'm stumped. I've just installed 4.3, and I have the typical: ntpd_flags=-s entry in /etc

How do I set up personal web sites for users?

2008-05-06 Thread Ed Flecko
Hi folks, I have a few questions about how to set up users on my OBSD 4.3 box. I've created a user (Stephanie) on the box, and I've added her to the /etc/ftpchroot file so she can upload stuff to her directory; now I just want her to be able to reach whatever she uploads (which probably will be

How do I use digest authentication to allow/deny directory access

2008-05-06 Thread Ed Flecko
Hi folks, I'm trying to use digest authentication and require a visitor to supply a password in order to be able to access a certain subdirectory. Here's my scenario: I have a directory called download which is located at: /var/www/htdocs/stephanie/download. I've created a file called digest

Re: How do I use digest authentication to allow/deny directory access

2008-05-06 Thread Ed Flecko
either module, I can't even access the stephanie directory with the referenced entries to my httpd.conf file. That really puzzzles me. Suggestions? Ed On Tue, May 6, 2008 at 2:31 PM, Adam Patterson [EMAIL PROTECTED] wrote: Ed Flecko wrote: ...snip... Directory /stephanie/download

Re: How do I use digest authentication to allow/deny directory access

2008-05-06 Thread Ed Flecko
It seems like, from what I see on the web, that I should be using: AuthDigestFile instead of AuthUserFile however when I do that, save the httpd.conf and restart Apache, I get the following error message: Syntax error on line 61 of /var/www/conf/httpd.conf: Invalid command 'AuthDigestFile',

Re: How do I use digest authentication to allow/deny directory access

2008-05-07 Thread Ed Flecko
Thanks, Adam. To test even Basic authentication, I created a file named passwords in the htdocs directory to confirm that Apache could reach it. :-) Then I made this entry in the httpd.conf file: Directory /download AuthType Basic AuthName Private AuthUserFile /var/www/htdocs/passwords Require

How to use fdisk and manually create partitions at 4K increments?

2012-09-11 Thread Ed Flecko
I'd like to install OBSD, and I'd like to manually create my partition structure. 1.) Can someone tell me how to use fdisk to create my partitions at 4K increments? 2.) How do I confirm that the partitions are, in fact, aligned at 4K intervals after I've created them? 3.) Can you recommend a

Auto partition starting at Sector 32 and not Sector 64? That's not right, is it?

2012-09-12 Thread Ed Flecko
I started installing 5.1, and selected the auto partition. I saw the first partition starting at Sector 64, which was what I expected. I had to restart my install (through no fault of OBSD), only this time I noticed that the auto install, first partition starting at Sector 32. That's odd, isn't

Applying 001_libcrypto.patch prompts for File to Patch:

2012-09-13 Thread Ed Flecko
I've created a /usr/src/patches directory which I've downloaded and untarred the 5.1.tar.gz into. Per the patch instructions, I cd to /usr/src and then: # patch -p0 /usr/src/patches/5.1/common/001_libcrypto.patch this is what I get: # patch -p0 /usr/src/patches/5.1/common/001_libcrypto.patch

Re: Applying 001_libcrypto.patch prompts for File to Patch:

2012-09-13 Thread Ed Flecko
: On Thu, Sep 13, 2012 at 10:15, Ed Flecko wrote: I've read some prior posts, and I THOUGHT the patch is wanting me to tell it the path to the buffer.c file, but I don't have a /usr/src/lib/libssl/src/crypto/buffer/ directory with the buffer.c file (I only have a /usr/src/lib/libssl/src/crypto

Re: Applying 001_libcrypto.patch prompts for File to Patch:

2012-09-13 Thread Ed Flecko
Thank you Ted...I appreciate the advice and tips! Ed

How to PROVE your system is up to date?

2012-09-18 Thread Ed Flecko
I have State and Federal regulators that want me to PROVE (since their only used to looking at Micro$oft servers) my OBSD 5.1 server is up to date, and there are no outstanding patches that need to be applied. *I* know that's the case, because I follow the patch branch, but how do I show (i.e.,

Re: How to PROVE your system is up to date?

2012-09-18 Thread Ed Flecko
Thanks Michael! I guess what I'm really asking is... if and when there ARE patches that you've applied, either manually or via following the patch branch, how do you know (i.e., prove to someone like my pesky regulators) that the patches have been applied? For example, I'm sure there's a log

Re: How to PROVE your system is up to date?

2012-09-18 Thread Ed Flecko
Thanks Ted! You lost me - could you explain what you mean, Make a list of files affected, and then demonstrate that their timestamps occur after the patch publication.? Ed

Re: How to PROVE your system is up to date?

2012-09-18 Thread Ed Flecko
Excellent!...thanks Steve. :-) Ed

How to stress (performance?) test my PF rules?

2012-09-21 Thread Ed Flecko
Does anyone have any suggestions on how to best test the performance of my PF ruleset? Maybe iperf? I'm just diving into learning PF and as I make changes to my ruleset, it would be great if there's a good way of testing the traffic flow through my OBSD box. Suggestions? Thank you, Ed