Search results

  1. anomie

    sftp chroot does not honor umask - how to fix?

    sftp-server has a -u option for specifying umask. AFAIK, that option does not work with internal-sftp. (I don't know of a good "fix" for this one.)
  2. anomie

    pam_mysql - PAM authentication module

    Anything that sheds further light on this in /var/log/auth.log or /var/log/messages?
  3. anomie

    connexion SSHD with user sshd ? Help please

    Have you made any changes to sshd_config? Specifically, are you using ChrootDirectory? Check /var/log/auth.log to see if a user named "sshd" has actually authenticated. (Not likely. It is a system / service account.) Search for the offending IP in that log file. He may just be launching a...
  4. anomie

    connexion SSHD with user sshd ? Help please

    May be OK. You have removed potentially relevant information from your command output, and it's hard to know what is going on without it. For starters, you may wish to use: sockstat -4c Less noise in that output. As for the connected IP: ~> dig -x 201.116.36.180 ;; ANSWER SECTION...
  5. anomie

    'echo' in 'if' block not working

    @ven, although your thread is marked solved, please carefully read the feedback from the folks who replied. In addition to using /bin/sh (you are on a FreeBSD forum, so presumably you care about portability) as your interpreter, also: Quote string comparisons [ "$val" = "something" ]...
  6. anomie

    Making a server into a switch

    @crazychip: What made you select a layer 2 switch implementation for this purpose? You said you want to "enable/disable one of the 'ports' using cron", but how is a switch uniquely suited for that? Would this not be a reasonable candidate for a FreeBSD gateway that provides NAT?
  7. anomie

    apache22 install problem

    I'd check the output from two commands: # ls -lod /usr/local/etc/rc.d # ls -lo /usr/local/etc/rc.d/apache22 If there are any strange flags or permissions set, correct them. Failing that, make distclean, ensure you have the latest port revision, and try again?
  8. anomie

    Looking to learn bash scripting

    That's probably a wise philosophy. bash(1) offers a number of features to make it more like a "real" programming language, but it also comes complete with some scary, unintuitive pitfalls: http://mywiki.wooledge.org/BashPitfalls/ http://tldp.org/LDP/abs/html/gotchas.html The (arguably)...
  9. anomie

    What processes belong in a jail?

    What exact tasks do the end users need to be able to perform? If they need to transfer files to/from the server, then SFTP may be a good candidate. If they legitimately need to work (e.g. edit files, execute programs) on the server, then they may need a shell. OpenSSH itself can be placed...
  10. anomie

    What processes belong in a jail?

    Each 'net-facing daemon in its own FreeBSD Jail is great, where possible/practical. The idea is: if one service suffers any form of compromise, it will likely be more difficult for it to affect a) other services; b) the host system. Not sure I understand your second question. What are you...
  11. anomie

    Edit a directory

    What FreeBSD version? Are you using nvi or vim? Both should barf out similar warnings about this. A directory is really just a special type of file, as you can see with: od -c directory_here Even if you somehow managed to "edit" the directory, the files would still be there, presumably...
  12. anomie

    Dealing with slow ssh?

    Just be thankful you weren't in the middle of an "installworld". (That could have caused a serious problem.) From this point, simply start over: # cd /usr/src && make cleanworld Take it from there. And, as already mentioned, if you're on an unstable connection, use sysutils/tmux! Don't...
  13. anomie

    Unknown TCP Connections

    Does your ipfw ruleset have a check-state ??
  14. anomie

    Passing credentials to SSH and is the read command in a bash script secure?

    I too prefer the perl approach. For an example of the latter (that SirDice pointed to) module's usage: #!/usr/bin/perl # AUTHOR: anomie # LICENSE: Simplified BSD License # DESCRIPTION: Connects to ssh servers that support password # authentication. Examples of executing a...
  15. anomie

    sshd - security run output

    Thank you for sharing your changes. If you're accepting code suggestions, you might consider replacing the pipeline to wc with a simple addition to your egrep options instead. -c, --count Suppress normal output; instead print a count of matching lines for...
  16. anomie

    Can Linux keep growing?

    Does Android count? http://en.wikipedia.org/wiki/Android_%28operating_system%29
  17. anomie

    Intercepting system calls

    Also, see if truss meets your needs. (Don't totally understand your requirements, so just offering an additional, general suggestion.)
  18. anomie

    So Many Choices

    I believe one of the central questions in your post is, "Should I use Postfix?" The good news is there is a variety of excellent FOSS MTAs to choose from. The bad news (if you're just getting started) is there is a variety of excellent FOSS MTAs to choose from. Even if I don't agree with...
  19. anomie

    Are you fit?

    That's an astute observation. Understanding the problem is often the trickiest part of the battle. Now attack it like you'd attack an out-of-control process on your production FreeBSD system. I'll share something of (questionable, anecdotal) value, that may interest you: I have been weight...
  20. anomie

    ServerTokens not working

    What is it you were expecting a visitor to see? See attached images for the DocumentRoot page, and an HTTP 404 that I forced.
Back
Top