FAQ PF Clarification

$ cvs diff -Nup example1.html Index: example1.html === RCS file: /cvs/www/faq/pf/example1.html,v retrieving revision 1.39 diff -N -u -p example1.html --- example1.html 16 Oct 2009 19:12:42 - 1.39 +++ example1.html

Re: suggested patch to httpd.conf in base

is backed up by the specification defining the web traffic > you are asking about: > > Hypertext Transfer Protocol -- HTTP/1.1. RFC 2616. W3C. (1999) > http://tools.ietf.org/html/rfc2616 > > On 2010-3-13 4:18 AM, Brad Tilley wrote: > > I can make the config cha

Re: suggested patch to httpd.conf in base

On Fri, 12 Mar 2010 19:21 -0700, "Theo de Raadt" wrote: > > On Fri, 12 Mar 2010 18:25 -0700, "Theo de Raadt" > > wrote: > > > That's a lot of words. > > > > > > The default configuration is not going to be changed in this way. > > > > To be honest, my patch is selfish. I get perfect vulnerabili

Re: suggested patch to httpd.conf in base

On Fri, 12 Mar 2010 18:25 -0700, "Theo de Raadt" wrote: > That's a lot of words. > > The default configuration is not going to be changed in this way. To be honest, my patch is selfish. I get perfect vulnerability assessment scores on OpenBSD boxes when doing vulnerability scans until I enable A

Re: suggested patch to httpd.conf in base

On Fri, 12 Mar 2010 16:44 -0700, "Bob Beck" wrote: > What in god's name do you need sshv1 for anymore? What client are you > using that still > uses it? how old and vulnerable is it? That was my hyperbole... remember? Apache 1.3.x anyone? Brad

Re: suggested patch to httpd.conf in base

On Fri, 12 Mar 2010 16:17 -0700, "Bob Beck" wrote: > >> > >> It *IS* off by default. I have yet to see an OpenBSD machine that I > >> can install that > >> will come up with httpd turned on. > > > > We are not talking about the same thing. I understand that httpd is off > > by default. The *optio

Re: suggested patch to httpd.conf in base

On Fri, 12 Mar 2010 16:05 -0700, "Bob Beck" wrote: > On 12 March 2010 12:53, Brad Tilley wrote: > > On Fri, 12 Mar 2010 10:10 -0800, "patrick keshishian" > > wrote: > >> does disabling this option /really/ improve security? > > >

Re: suggested patch to httpd.conf in base

by default posture, that is the only reason I suggested it. > On Fri, Mar 12, 2010 at 9:41 AM, Brad Tilley wrote: > > When ran against default OpenBSD servers that have Apache enabled, > > vulnerability assessment software (Nessus, Rapid7, etc.) complain about > > "brow

suggested patch to httpd.conf in base

When ran against default OpenBSD servers that have Apache enabled, vulnerability assessment software (Nessus, Rapid7, etc.) complain about "browesable web directories". The concern is that someone may accidentally place inappropriate files in the web directories that will then be visible to others.

Re: i386 bsd.rd snapshot ftp set install error

On Sun, 07 Mar 2010 10:52 -0700, "Theo de Raadt" wrote: > > I downloaded a snapshot i386 bsd.rd this morning to update a box. Things > > are OK until I try to install sets via ftp or http. I get this error: > > > > "No such file or directory." > > > > The installer then asks for the location of

Re: i386 bsd.rd snapshot ftp set install error

On Sun, 07 Mar 2010 12:41 -0500, "Brad Tilley" wrote: > I downloaded a snapshot i386 bsd.rd this morning to update a box. Things > are OK until I try to install sets via ftp or http. I get this error: > > "No such file or directory." > > The installer th

i386 bsd.rd snapshot ftp set install error

I downloaded a snapshot i386 bsd.rd this morning to update a box. Things are OK until I try to install sets via ftp or http. I get this error: "No such file or directory." The installer then asks for the location of sets again (looping). It's looking for path [pub/OpenBSD/4.7/i386] by default. I'

Re: Possible issue with srand or rand in base?

on to demonstrate the difference I was seeing. Brad On Mon, 08 Feb 2010 07:57 -0500, "Brad Tilley" wrote: > Thought the discussion was over. We repost it later. > > On Mon, 08 Feb 2010 09:07 +0100, "Marc Espie" wrote: > > On Sun, Feb 07, 2010 at 01:59:33PM -0500, Brad

Re: Possible issue with srand or rand in base?

Thought the discussion was over. We repost it later. On Mon, 08 Feb 2010 09:07 +0100, "Marc Espie" wrote: > On Sun, Feb 07, 2010 at 01:59:33PM -0500, Brad Tilley wrote: > > I wrote a small cpp application to generate randomish passwords. It > > compiles and runs OK on

Re: Possible issue with srand or rand in base?

On Sun, 07 Feb 2010 22:03 +0100, "Otto Moerbeek" wrote: > On Sun, Feb 07, 2010 at 03:43:59PM -0500, Brad Tilley wrote: > > > That's OK, my skin is thick. Thanks for the feedback. I had some older fltk > > code there initially that behaves in a similar fashion (

Re: Possible issue with srand or rand in base?

On Sun, 07 Feb 2010 21:40 +0100, "Otto Moerbeek" wrote: > On Sun, Feb 07, 2010 at 03:39:25PM -0500, Brad Tilley wrote: > > > > > > > On Sun, 07 Feb 2010 21:32 +0100, "Otto Moerbeek" wrote: > > > On Sun, Feb 07, 2010 at 12:26:43PM -

Re: Possible issue with srand or rand in base?

On Sun, 07 Feb 2010 21:32 +0100, "Otto Moerbeek" wrote: > On Sun, Feb 07, 2010 at 12:26:43PM -0800, Philip Guenther wrote: > > > On Sunday, February 7, 2010, Otto Moerbeek wrote: > > > That is still wrong for this purpose. Although random(3) is a better > > > random number generator than rand, i

Possible issue with srand or rand in base?

I wrote a small cpp application to generate randomish passwords. It compiles and runs OK on OpenBSD, however, it does not seem to create random strings (the first and last chars seldom ever change, etc). The same code compiles and runs on Linux and Windows and *does* produce randomish strings (n

www incorrect link in faq1

http://www.openbsd.com/faq/faq1.html There's an incorrect link on this page. goals should link to goals.html not policy.html. I don't have a cvs checkout on this computer, so here's a manual diff: b...@semp:~/Downloads$ diff -Nup faq1.html faq1.rbt.html --- faq1.html 2010-01-22 20:07:47.

ping and host names that start with numbers

It's probably unwise to use a number as a host name, but I do at times and most things work just fine. RFC 1123 OK's this practice and notes that host software *must* support host names that begin with digits (3com.com, etc). I have a host named 700.nnn.com and I can ping it by FQDN or by its IP

typos /cvs/src/sbin/ping6/ping6.c

# cvs diff -Nup ping6.c Index: ping6.c === RCS file: /cvs/src/sbin/ping6/ping6.c,v retrieving revision 1.76 diff -N -u -p ping6.c --- ping6.c 2 Nov 2009 22:31:50 - 1.76 +++ ping6.c 23 Dec 2009 01:20:03 - @@ -566,7

typo /cvs/src/sbin/shutdown/shutdown.c

# cvs diff -Nup shutdown.c Index: shutdown.c === RCS file: /cvs/src/sbin/shutdown/shutdown.c,v retrieving revision 1.35 diff -N -u -p shutdown.c --- shutdown.c 27 Oct 2009 23:59:34 - 1.35 +++ shutdown.c 23 Dec 2009 01:23:31

typo /cvs/src/sbin/ping/ping.c

# cvs diff -Nup ping.c Index: ping.c === RCS file: /cvs/src/sbin/ping/ping.c,v retrieving revision 1.85 diff -N -u -p ping.c --- ping.c 15 Dec 2009 21:09:43 - 1.85 +++ ping.c 23 Dec 2009 01:16:59 - @@ -1085,7 +10

typos /cvs/src/sbin/pflogd/privsep.c

# cvs diff -Nup privsep.c Index: privsep.c === RCS file: /cvs/src/sbin/pflogd/privsep.c,v retrieving revision 1.16 diff -N -u -p privsep.c --- privsep.c 25 Oct 2006 20:55:04 - 1.16 +++ privsep.c 23 Dec 2009 01:13:04 -

typo /cvs/src/sbin/pfctl/pfctl_parser.c

# cvs diff -Nup pfctl_parser.c Index: pfctl_parser.c === RCS file: /cvs/src/sbin/pfctl/pfctl_parser.c,v retrieving revision 1.253 diff -N -u -p pfctl_parser.c --- pfctl_parser.c 14 Dec 2009 12:31:45 - 1.253 +++ pfctl_pars

typo /cvs/src/sbin/pfctl/parse.y

# cvs diff -Nup parse.y Index: parse.y === RCS file: /cvs/src/sbin/pfctl/parse.y,v retrieving revision 1.576 diff -N -u -p parse.y --- parse.y 10 Dec 2009 15:57:20 - 1.576 +++ parse.y 23 Dec 2009 01:08:38 - @@ -546

typo /cvs/src/sbin/pfctl/pfctl_osfp.c

# cvs diff -Nup pfctl_osfp.c Index: pfctl_osfp.c === RCS file: /cvs/src/sbin/pfctl/pfctl_osfp.c,v retrieving revision 1.15 diff -N -u -p pfctl_osfp.c --- pfctl_osfp.c13 Dec 2006 05:10:15 - 1.15 +++ pfctl_osfp.c

typos /cvs/src/sbin/newfs/mkfs.c

# cvs diff -Nup mkfs.c Index: mkfs.c === RCS file: /cvs/src/sbin/newfs/mkfs.c,v retrieving revision 1.72 diff -N -u -p mkfs.c --- mkfs.c 8 Aug 2008 23:49:53 - 1.72 +++ mkfs.c 23 Dec 2009 00:55:40 - @@ -592,7 +59

arrayified - consistent usage

The made up words arrayified and arrayify are found several other times in this file. In this instance, it is misspelled: # cvs diff -Nup dump.h Index: dump.h === RCS file: /cvs/src/sbin/dump/dump.h,v retrieving revision 1.16 diff -N

typos in /cvs/src/sbin/disklabel/editor.c

# cvs diff -Nup editor.c Index: editor.c === RCS file: /cvs/src/sbin/disklabel/editor.c,v retrieving revision 1.224 diff -N -u -p editor.c --- editor.c12 Nov 2009 16:21:03 - 1.224 +++ editor.c23 Dec 2009 00:33:28 -

typo /cvs/src/sbin/bioctl/bioctl.c

# cvs diff -Nup bioctl.c Index: bioctl.c === RCS file: /cvs/src/sbin/bioctl/bioctl.c,v retrieving revision 1.86 diff -N -u -p bioctl.c --- bioctl.c24 Nov 2009 06:06:06 - 1.86 +++ bioctl.c23 Dec 2009 00:23:53 - @@ -

comment typo /cvs/src/sbin/fdisk/cmd.c

# cvs diff -Nup cmd.c Index: cmd.c === RCS file: /cvs/src/sbin/fdisk/cmd.c,v retrieving revision 1.43 diff -N -u -p cmd.c --- cmd.c 8 Feb 2009 18:03:18 - 1.43 +++ cmd.c 23 Dec 2009 00:18:42 - @@ -294,7 +294,7

typo /cvs/src/bin/pax/buf_subs.c

# cvs diff -Nup buf_subs.c Index: buf_subs.c === RCS file: /cvs/src/bin/pax/buf_subs.c,v retrieving revision 1.22 diff -N -u -p buf_subs.c --- buf_subs.c 27 Oct 2009 23:59:22 - 1.22 +++ buf_subs.c 22 Dec 2009 00:15:18 -

typo /cvs/src/bin/pax/cache.c

# cvs diff -Nup cache.c Index: cache.c === RCS file: /cvs/src/bin/pax/cache.c,v retrieving revision 1.18 diff -N -u -p cache.c --- cache.c 27 Oct 2009 23:59:22 - 1.18 +++ cache.c 22 Dec 2009 00:12:13 - @@ -267,7 +2

typo /cvs/src/bin/pax/file_subs.c

# cvs diff -Nup file_subs.c Index: file_subs.c === RCS file: /cvs/src/bin/pax/file_subs.c,v retrieving revision 1.31 diff -N -u -p file_subs.c --- file_subs.c 27 Oct 2009 23:59:22 - 1.31 +++ file_subs.c 22 Dec 2009 00:13:27 -0

spelling gnu/usr.bin/binutils/gdb/ser-go32.c

# cvs diff -Nup gnu/usr.bin/binutils/gdb/ser-go32.c Index: gnu/usr.bin/binutils/gdb/ser-go32.c === RCS file: /cvs/src/gnu/usr.bin/binutils/gdb/ser-go32.c,v retrieving revision 1.4 diff -N -u -p gnu/usr.bin/binutils/gdb/ser-go32.c --- g

spelling sys/arch/vax/qbus/uda.c

# cvs diff -Nup sys/arch/vax/qbus/uda.c Index: sys/arch/vax/qbus/uda.c === RCS file: /cvs/src/sys/arch/vax/qbus/uda.c,v retrieving revision 1.6 diff -N -u -p sys/arch/vax/qbus/uda.c --- sys/arch/vax/qbus/uda.c 12 Nov 2005 03:44:24

spelling gnu/usr.bin/perl/util.c

If these are annoying, I will stop sending. # cvs diff -Nup gnu/usr.bin/perl/util.c Index: gnu/usr.bin/perl/util.c === RCS file: /cvs/src/gnu/usr.bin/perl/util.c,v retrieving revision 1.13 diff -N -u -p gnu/usr.bin/perl/util.c --- gn

spelling gnu/usr.bin/perl/t/op/array.t

# cvs diff -Nup gnu/usr.bin/perl/t/op/array.t Index: gnu/usr.bin/perl/t/op/array.t === RCS file: /cvs/src/gnu/usr.bin/perl/t/op/array.t,v retrieving revision 1.10 diff -N -u -p gnu/usr.bin/perl/t/op/array.t --- gnu/usr.bin/perl/t/op/ar

Spelling vhold.9

# cvs diff -Nup vhold.9 Index: vhold.9 === RCS file: /cvs/src/share/man/man9/vhold.9,v retrieving revision 1.5 diff -N -u -p vhold.9 --- vhold.9 31 May 2007 19:20:01 - 1.5 +++ vhold.9 15 Dec 2009 01:02:06 - @@ -53,

Spelling uvm.9

# cvs diff -Nup uvm.9 Index: uvm.9 === RCS file: /cvs/src/share/man/man9/uvm.9,v retrieving revision 1.40 diff -N -u -p uvm.9 --- uvm.9 20 Apr 2009 00:44:48 - 1.40 +++ uvm.9 15 Dec 2009 01:00:00 - @@ -698,7 +69

Spelling ieee80211_node.9

# cvs diff -Nup ieee80211_node.9 Index: ieee80211_node.9 === RCS file: /cvs/src/share/man/man9/ieee80211_node.9,v retrieving revision 1.5 diff -N -u -p ieee80211_node.9 --- ieee80211_node.916 Jun 2007 13:21:44 - 1.5 +++ ie

Spelling glob.7

# cvs diff -Nup glob.7 Index: glob.7 === RCS file: /cvs/src/share/man/man7/glob.7,v retrieving revision 1.1 diff -N -u -p glob.7 --- glob.7 5 Mar 2009 15:13:30 - 1.1 +++ glob.7 15 Dec 2009 00:25:21 - @@ -136,4 +

Spelling packages-specs.7

# cvs diff -Nup packages-specs.7 Index: packages-specs.7 === RCS file: /cvs/src/share/man/man7/packages-specs.7,v retrieving revision 1.10 diff -N -u -p packages-specs.7 --- packages-specs.715 Jul 2008 11:10:51 - 1.10 +++

Re: spelling gif.4

On Sat, Dec 12, 2009 at 2:26 AM, Jason McIntyre wrote: > On Fri, Dec 11, 2009 at 09:49:43PM -0500, Brad Tilley wrote: >> Index: gif.4 >> === >> RCS file: /cvs/src/share/man/man4/gif.4,v >> retrieving rev

spelling gpio.4

Index: gpio.4 === RCS file: /cvs/src/share/man/man4/gpio.4,v retrieving revision 1.15 diff -N -u -p gpio.4 --- gpio.4 27 Nov 2008 14:15:02 - 1.15 +++ gpio.4 12 Dec 2009 02:59:26 - @@ -160,7 +160,7 @@ Only GPIO pi

spelling ichwdt.4

Index: ichwdt.4 === RCS file: /cvs/src/share/man/man4/ichwdt.4,v retrieving revision 1.5 diff -N -u -p ichwdt.4 --- ichwdt.425 Apr 2009 15:42:20 - 1.5 +++ ichwdt.412 Dec 2009 02:48:23 - @@ -30,7 +30,7 @@ driver sup

spelling kate.4

Index: kate.4 === RCS file: /cvs/src/share/man/man4/kate.4,v retrieving revision 1.1 diff -N -u -p kate.4 --- kate.4 27 Mar 2008 01:54:44 - 1.1 +++ kate.4 12 Dec 2009 02:49:24 - @@ -56,7 +56,7 @@ temperature sens

spelling gif.4

Index: gif.4 === RCS file: /cvs/src/share/man/man4/gif.4,v retrieving revision 1.24 diff -N -u -p gif.4 --- gif.4 24 Nov 2009 19:13:07 - 1.24 +++ gif.4 12 Dec 2009 02:47:49 - @@ -39,7 +39,7 @@ .Sh DESCRIPTION

spelling ahci.4

Index: ahci.4 === RCS file: /cvs/src/share/man/man4/ahci.4,v retrieving revision 1.7 diff -N -u -p ahci.4 --- ahci.4 19 Apr 2008 01:18:39 - 1.7 +++ ahci.4 12 Dec 2009 02:44:09 - @@ -30,7 +30,7 @@ The driver prov

finger.c set pointer to NULL

Not sure this is an acceptable patch. Certainly not required, but maybe good practice? # cvs diff -Nup finger.c Index: finger.c === RCS file: /cvs/src/usr.bin/finger/finger.c,v retrieving revision 1.18 diff -N -u -p finger.c --- finge

misspelling in icmp6.4

# cvs diff -Nup icmp6.4 Index: icmp6.4 === RCS file: /cvs/src/share/man/man4/icmp6.4,v retrieving revision 1.22 diff -N -u -p icmp6.4 --- icmp6.4 31 May 2007 19:19:50 - 1.22 +++ icmp6.4 8 Dec 2009 02:06:24 - @@ -95

small grammar correction in faq4.html

# cvs diff -uNp faq4.html Index: faq4.html === RCS file: /cvs/www/faq/faq4.html,v retrieving revision 1.290 diff -N -u -p faq4.html --- faq4.html 30 Nov 2009 03:03:02 - 1.290 +++ faq4.html 6 Dec 2009 00:55:39 - @@ -214

misspelling in pfsync.4

Index: pfsync.4 === RCS file: /cvs/src/share/man/man4/pfsync.4,v retrieving revision 1.29 diff -N -u -p pfsync.4 --- pfsync.417 Jun 2009 08:56:43 - 1.29 +++ pfsync.427 Nov 2009 02:09:56 - @@ -83,7 +83,7 @@ Where mo

Spacing between words in pflow.4 license

Index: pflow.4 === RCS file: /cvs/src/share/man/man4/pflow.4,v retrieving revision 1.9 diff -N -u -p pflow.4 --- pflow.4 29 Oct 2008 14:49:39 - 1.9 +++ pflow.4 27 Nov 2009 01:59:56 - @@ -7,12 +7,12 @@ .\" purpose

misspelling in azalia.4

Index: azalia.4 === RCS file: /cvs/src/share/man/man4/azalia.4,v retrieving revision 1.24 diff -N -u -p azalia.4 --- azalia.429 Oct 2009 21:25:28 - 1.24 +++ azalia.424 Nov 2009 23:36:42 - @@ -230,7 +230,7 @@ VRef i

Re: Asus USB-N13 802.11 Adapter

On Sun, Nov 22, 2009 at 7:21 PM, Stuart Henderson wrote: > This should be supported as of 2009/11/17, try a snapshot. > Yes, the usbdevs output you included was useful - but in future > please send a complete dmesg rather than an exert. Thanks. I did a bsd.rd install from the latest i386 snapsho

Asus USB-N13 802.11 Adapter

Anyone working on the Asus USB-N13 802.11 adapter? I have one and would be glad to test. It's listed as a ugen device right now (on an almost current box). I thought the run0 driver might support it. I think it has the Ralink 3070 chipset: dmesg: ugen0 at uhub0 port 1 "Ralink 802.11 n WLAN" rev 2.