Hot answers tagged

3

Your /var/www/var/run/mysql points to /var/run/mysql. By the directory structure I presume, you are chrooting your apache/php into /var/www. It probably is a default of OpenBSD. When chrooted into /var/www your link actually becomes /var/run/mysql -> /var/run/mysql, which is pretty much infinite loop. You either need to provide socket inside that ...


3

No, there isn't. You know that it's trivial for people to change their MAC addresses, correct? Additionally, the instant a packet passes through a later 3 routing device, the Mac address information of the source machine is lost. So even if you did want to do something like this, it would only ever work for clients that are on the same L2 LAN as your ...


2

From the OpenBSD 5.3 upgrade guide: pfctl(8) will abort and fail to load the rule set if the 'frags' limit in pf.conf is higher than the kern.maxclusters sysctl This is to guard against allowing a system to run out of mbuf clusters. If it is not set, the new default is 25% of kern.maxclusters. If you increase kern.maxclusters, you will also raise the ...


2

Try: /etc/rc.d/smtpd restart If that doesn't work, go for /etc/rc.d/smtpd stop /etc/rc.d/smtpd start


1

To do that you have to tag the ethernet frame. (http://www.openbsd.org/faq/pf/tagging.html) Tagging can be performed at the Ethernet level if the machine doing the tagging/filtering is also acting as a bridge(4). By creating bridge(4) filter rules that use the tag keyword, PF can be made to filter based on the source or destination MAC address. Bridge(4) ...


1

In OpenBSD 5.7 ssh-keygen uses SHA256 for the default fingerprint hash. You're looking for the MD5 hash of the fingerprint: # ssh-keygen -l -E md5 -f /etc/ssh/ssh_host_ecdsa_key.pub


1

Use Windows Firewall's Connection Security Rules to configure IPsec on Windows 7. Open the Start Menu, search for "Windows Firewall with Advanced Security". Open it. In the left-hand panel, right-click on "Windows Firewall with Advanced Security". Select "Properties". Open the tab labelled "IPsec Settings". Click on "Customize". In the section labelled ...


1

alternately, use netsh advfirewall consec add rule from the command line. You get some useful help text when you type just that. Note that you need the "advanced firewall" that comes with windows 7 professional (I think) and enterprise (I'm sure). I don't think it is part of the "home" edition. It's a complicated topic, and the answer is going to ...


1

Use your firewall to reject (not drop) UDP packets from squid. It'll soon get the message. I do wonder why on earth you'd want to do this, though.


1

The main path is to have your OpenBSD box join the AD Domain as a Member Server. So you could offer smb shares and authenticate your users on AD Domain Controller. This is well documented on the samba wiki (of course you don't need to enable any 'additional service', but still it can be quite a bit of work)



Only top voted, non community-wiki answers of a minimum length are eligible