search for: sshd_enabl

...2.168.1.101" gateway_enable="YES" hostname="test2.cho.it" ifconfig_ed0="inet 192.168.1.246 netmask 255.255.255.0" ifconfig_rl0="inet 192.168.0.246 netmask 255.255.255.0" keymap="it.iso" saver="daemon" sendmail_enable="YES" sshd_enable="YES" firewall_enable="YES" # Set to YES to enable firewall functionality firewall_script="/etc/rc.firewall" # Which script to run to set up the firewall firewall_type="OPEN" # Firewall type (see /etc/rc.firewall) firewall_logging=&quot...

...no # override default of no subsystems Subsystem sftp /usr/libexec/sftp-server ------------------------------------------------------------------- Everything else is default.I'm not starting SSHD with any additional parameters than the defaults in /etc/defaults/rc.conf and just added sshd_enable="YES" in /etc/rc.conf I have of course restarted sshd after changes in the config. Nothing is patched or updated in any ways, its from the stock install from the ISOs. Any ideas? Regards /Nils Nils von Greyerz Senior Network Consultant, Juniper Certified Internet Associate: JNCIA-M #009...

...ountpoint FStype Options Dump Pass# /dev/xbd0s1a / ufs rw 1 1 EOF # Start and rc.conf(5) file # NOTE: You won''t be able to login via SSH until users are added. cat >>/media/etc/rc.conf <<EOF hostname="${VMNAME}" ifconfig_xn0=''dhcp'' sshd_enable=''YES'' EOF # BUILD Server - Unmount the filesystem, the image is done. umount /media mdconfig -d -u 0 ===END=== The following section is the script I actually used to create a VM that is more-or-less realistic as a template. ==BEGIN-Advanced-Option== truncate -s 20G /mnt/${FSI...

....us.pool.ntp.org" ntpdate_enable="YES" ntpd_enable="YES" snmpd_enable="YES" rpcbind_enable="YES" nfs_server_enable="YES" nfs_server_flags="-u -t -n 4" mountd_flags="-r" amd_enable="YES" inetd_enable="YES" sshd_enable="YES" font8x16="iso15-8x16" #font 8x16 from /usr/share/syscons/fonts/* (or NO). font8x14="iso15-8x14" #font 8x14 from /usr/share/syscons/fonts/* (or NO). font8x8="iso15-8x8" #font 8x8 from /usr/share/syscons/fonts/* (or NO). vidcontrol VGA_80x60 cya...

...system if I launch a netstat inside a jail, I get a unlimited amount of lines that look like this, until I ^C netstat: short read netstat: short read netstat: short read ... The rc.conf of the jail : hostname="jail.kmem.org" portmap_enable="NO" network_interfaces="" sshd_enable="YES" sendmail_enable="NO" inetd_flags="-wW -a 10.0.2.6" - this is what ifconfig looks like OUT of jail : rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500 inet 10.0.0.2 netmask 0xffffff00 broadcast 10.0.0.255 inet6 fe80::250:8d...

..."ns.xxx.mn" ifconfig_bge0="inet 122.254.1x.x netmask 255.255.255.224" defaultrouter="122.254.1x.x" keymap="us.iso" moused_enable="YES" moused_flags="-3" moused_port="/dev/psm0" moused_type="auto" saver="logo" sshd_enable="YES" usbd_enable="YES" sendmail_enable="NONE" log_in_vain="YES" named_enable="YES" #named_flags="-u bind -t /etc/namedb/sandbox -c named.conf -d 9" named_flags="-c named.conf" #syslogd_flags="-ss -l /etc/namedb/sandbox/dev...

Greetings list, As a newbie to security I would like to ask any recommendation that the list might have. We are about to "install" a new box with 4.9 stable to the nice and innocent internet world. :-P The box has no services running expect apache and we telnet to it via SSH. Main function of this box will be graphing various interfaces via rrdtool. So, I would like to ask if there is

...can access the box from remote locations here is my rc.conf: host# more /etc/rc.conf network_interfaces="lo0 em0 dc0 rl0 plip0" kern_securelevel="2" kern_securelevel_enable="YES" linux_enable="YES" named_enable="YES" nisdomainname="NO" sshd_enable="YES" usbd_enable="YES" hostname="sis" tcp_keepalive="YES" tcp_extensions="YES" ifconfig_em0="inet 192.168.128.222/24" ifconfig_dc0="inet 192.168.1.4/24" ifconfig_rl0="inet 10.10.75.126/24" defaultrouter="192.168....

...FreeBSD. IV. Workaround Do one of the following: 1) Disable the base system sshd by executing the following command as root: # kill `cat /var/run/sshd.pid` Be sure that sshd is not restarted when the system is restarted by adding the following line to the end of /etc/rc.conf: sshd_enable="NO" AND Deinstall the openssh or openssh-portable ports if you have one of them installed. V. Solution Do one of the following: [For OpenSSH included in the base system] 1) Upgrade your vulnerable system to 4-STABLE or to the RELENG_5_1, RELENG_4_8, or RELENG_4_7 sec...

...FreeBSD. IV. Workaround Do one of the following: 1) Disable the base system sshd by executing the following command as root: # kill `cat /var/run/sshd.pid` Be sure that sshd is not restarted when the system is restarted by adding the following line to the end of /etc/rc.conf: sshd_enable="NO" AND Deinstall the openssh or openssh-portable ports if you have one of them installed. V. Solution Do one of the following: [For OpenSSH included in the base system] 1) Upgrade your vulnerable system to 4-STABLE or to the RELENG_5_1, RELENG_4_8, or RELENG_4_7 sec...

...FreeBSD. IV. Workaround Do one of the following: 1) Disable the base system sshd by executing the following command as root: # kill `cat /var/run/sshd.pid` Be sure that sshd is not restarted when the system is restarted by adding the following line to the end of /etc/rc.conf: sshd_enable="NO" AND Deinstall the openssh or openssh-portable ports if you have one of them installed. V. Solution Do one of the following: [For OpenSSH included in the base system] 1) Upgrade your vulnerable system to 4-STABLE or to the RELENG_5_1, RELENG_4_8, or RELENG_4_7 sec...

...FreeBSD. IV. Workaround Do one of the following: 1) Disable the base system sshd by executing the following command as root: # kill `cat /var/run/sshd.pid` Be sure that sshd is not restarted when the system is restarted by adding the following line to the end of /etc/rc.conf: sshd_enable="NO" AND Deinstall the openssh or openssh-portable ports if you have one of them installed. V. Solution Do one of the following: [For OpenSSH included in the base system] 1) Upgrade your vulnerable system to 4-STABLE or to the RELENG_5_1, RELENG_4_8, or RELENG_4_7 sec...

Hi there, Is there some way to configure ipfw to do traffic normalizing ("scrubbing", as in ipf for OpenBSD)? Is there any tool to do it for FreeBSD firewalling? I've heard that ipf was ported on current, anything else? TIA, /Dorin. __________________________________ Do you Yahoo!? Yahoo! Mail SpamGuard - Read only the mail you want. http://antispam.yahoo.com/tools

...le os_type; + data.hostname <- check_hostname_freebsd () + +(* Parse the hostname from /etc/rc.conf. On FreeBSD and NetBSD + * this file contains comments, blank lines and: + * hostname="freebsd8.example.com" + * ifconfig_re0="DHCP" + * keymap="uk.iso" + * sshd_enable="YES" + *) +and check_hostname_freebsd () = + let chroot = Chroot.create ~name:"check_hostname_freebsd" () in + let filename = "/etc/rc.conf" in + + try + let lines = Chroot.f chroot (fun () -> read_small_file filename) () in + let lines = + match lin...

...le os_type; + data.hostname <- check_hostname_freebsd () + +(* Parse the hostname from /etc/rc.conf. On FreeBSD and NetBSD + * this file contains comments, blank lines and: + * hostname="freebsd8.example.com" + * ifconfig_re0="DHCP" + * keymap="uk.iso" + * sshd_enable="YES" + *) +and check_hostname_freebsd () = + let chroot = Chroot.create ~name:"check_hostname_freebsd" () in + let filename = "/etc/rc.conf" in + + try + let lines = + Chroot.f chroot ( + fun () -> + if not (is_small_file filename) then...

Hello -STABLE@, So I've seen this situation seemingly randomly on a number of both physical 9.1 boxes as well as VMs for I would say 6-9 months at least. I finally have a physical box here that reproduces it consistently that I can reboot easily (ie; not a production/client server). No matter what I do: reboot shutdown -p shutdown -r This specific server will stop at "All buffers

v9 was here: https://www.redhat.com/archives/libguestfs/2017-July/msg00139.html This depends on these three series (the first two being single minor patches): https://www.redhat.com/archives/libguestfs/2017-July/msg00207.html https://www.redhat.com/archives/libguestfs/2017-July/msg00209.html https://www.redhat.com/archives/libguestfs/2017-July/msg00215.html There is no substantive change. I

This depends on the patch series "[PATCH 00/27] Reimplement many daemon APIs in OCaml." (https://www.redhat.com/archives/libguestfs/2017-July/msg00098.html) v8 was posted here: https://www.redhat.com/archives/libguestfs/2017-June/msg00274.html v9: - I split up the mega-patch into a more reviewable series of smaller, incremental patches. There are some other changes vs v8, but

This fixes almost everything. Note that it adds an extra commit which fixes the whole utf8/iconv business. It's probably better to list what isn't fixed: (1) I didn't leave the osinfo code around because I'm still haven't looked too closely at virt-builder-repository. Can't we just fetch this code from the git history when we need it? (2) I didn't change the way

v10: https://www.redhat.com/archives/libguestfs/2017-July/msg00245.html No actual change here, but I rebased and retested. Also this series now does not depend on any other patch series since everything else needed is upstream. Rich.