Tag Info

Hot answers tagged

7

Well vSphere 4.x only supports FreeBSD 6.x-8.x while vSphere 5.x also supports Mac OSX 10.6-10.7 - so one of those, anything else isn't supported.


5

Please see security(8) in NetBSD manual. You can: Set securelevel in rc.conf to harden a production system Enable security.curtain = 1 in sysctl.conf to limit users from seeing each other. Make relevant files immutable or append only with chflags Enable PaX mprotect and Address Space Layout Randomization (aslr) extensions in sysctl.conf ...


5

Although OP's problem has already been solved, I decided to share the solution for my problem, because I got the same error message from ssh and I didn't found any solution on other sites. In my case I had to connect to the service which listens only on IPv6. I tried: ssh -f root@192.168.0.18 -L 51005:127.0.0.1:51005 -N ssh -f root@192.168.0.18 -L ...


5

Unless you have some very specific use-case or code then I'd strongly urge you to simply pick the OS you're most comfortable installing, configuring and maintaining as most times these days they're much the same from a security, performance and functionality standpoint. So basically go with the latest version of the one you're already happy with. Good ...


4

http://www.fwbuilder.org/ Firewall Builder supports a wide range of firewall platforms, including Cisco ASA & PIX, Linux iptables, BSD pf and many more. You’re not confined to one platform—or locked into a single vendor. See the intro: http://www.fwbuilder.org/4.0/docs/firewall_builder_intro.html


4

From practical experience I can tell you all of the Big 3 BSDs (FreeBSD, OpenBSD, NetBSD) will run in VMWare, but as Chopper3 said, only FreeBSD and Apple's OS X (Mach/BSD Hybrid) are officially supported by VMWare. If this is going to be a production system and support from the VMWare folks is important to you I would stick to a stripped-down version ...


3

NetBSD does not support the pw command in its default install. You can: Compile the pw command for NetBSD and install it on your systems Write a utility that performs the equivalent functionality Update the password by manipulating the shadow file directly Note that depending on your script you should probably be using -H (and supplying an ...


2

I would first try this. $ ssh -L 7000:127.0.0.1:7000 user@host -N -v -v You can use "-v" up to 3 times to increase verbosity. I think this error message can arise if a firewall blocks port 7000, but you had already ruled that out. (If later readers haven't ruled that out, look at the output of netstat --numeric-ports.) I think I might have seen this ...


2

It's the same with every system: Install and configure a firewall. Make it as restrictive as possible. Make sure the system is updated regularly Disable password login for ssh, only allow certificates Set up good logging and log-analyzing procedures. When setting up servers: If possible, but it behind bars (chroot jails) Don't install X11, a web ...


2

What is "a very low memory footprint"? 64MB? 64KB? OpenBSD probably fits your requirements and is my router OS of choice. My HQ router is running at about 17MB with 1700 states in memory.


2

Why not run benchmarks on your particular server hardware and figure out what is best for your combination of hardware and file usage? One tip: RAID5 will take forever to rebuild an array on modern size hard disks (2TB or higher), and during that time the performance of the RAID array will be compromised. Modern setups use stripes of mirrored hard disks: ...


1

You didn't mention if the hardware raid controller has a battery backup module on it or not. If so, the controller will be able to commit writes as soon as they're in RAM on the controller... if not, it will have to wait until they are actually committed to disk. Depending on your workload, this can make a major difference in performance of the raid ...


1

ZFS can be raid-z{1,2,3}, stripe, mirror, and even RAID-10. Meanwhile RAID-5 is always just RAID-5. Hence you're comparing juice to apple. RAID-5 is efficient capacity user, but very laggy data writer. RAID-10 is often preferable instead.


1

Keep in mind that if you're dealing with big throughputs, you might be CPU-constrained with a software solution. By saying you want to use "ZFS" i assume you want to use a software solution using ZFS as the filesystem of choice for the raid volume (with all the perks that it brings to the table). If you are CPU-constrained, leave the raid management to ...


1

Do you have all of the binary packages that kde depends on available (like lcms)? It's not enough just to have the kde package. You can set up your machine to use a remote repository, see: http://www.netbsd.org/docs/pkgsrc/using.html#using-pkg Section 4.1.2 in particular.


1

As SvenW said, the basic concepts pretty well apply across the board. For a detailed read, the Center for Internet Security has a Benchmark available for FreeBSD. I imagine that it should be fairly easy to translate to your environment.


1

Such conversion is not always possible, since different packet filters have different logic and packet processing scheme. For example, there is no simple and straight way to convert iptables rules (with all those tables and chains) to ipfw or pf rules. It's better to just write new ruleset for needed firewall type with knowing what you need to get in the ...


1

Vyatta Community Edition will do what you want. Also check out their docs. Here is an informative site that should help get you started. If you do set up Vyatta, be sure to save you configuration after making changes, or you'll lose them after rebooting the router.


1

I encountered this same error while trying to connect to mysql on another server via an ssh tunnel. I found that the bind-address parameter in /etc/my.cnf on the target server was bound to my external ip (dual NIC server) rather than internal, which I had no use for. When I set bind-address=127.0.0.1, I could successfully use my ssh tunnel as follows: ssh ...



Only top voted, non community-wiki answers of a minimum length are eligible