Subject: Qube 2 running well, couple questions yet....
To: None <port-cobalt@NetBSD.org>
From: Brian <bmcewen@comcast.net>
List: port-cobalt
Date: 02/06/2004 05:45:13
Thanks to all for the help in the last month; the little Qube 2 is up 
and running well with postfix, sshd, and apache.  Thanks again to 
Dennis for the 1.6.1 net boot .iso, and to Andreas for the FAQ preview 
that showed up just as I was booting for the first time.

I have a couple things yet to set up, and some questions for the list 
yet:

-sshd is handling my sftp connections by rolling over to sftp-server (I 
believe so, anyway it works ;)
  but would I gain anything by running proftpd tunnelled through ssh?  
I'm not allowing insecure ftp, and I'd really like to chroot sftp users 
to their own directory.  I haven't found a page yet that tells how to 
do that for sftp-server, and there's not a conf file for sftp-server, 
and the only chroot I find for sshd is that which is enforced right 
before login authentication takes place, which isn't what I am after.  
Advice on any of this topic welcomed.  Should I just make sure my sshd 
is current and not worry about it?

- Anyone want to share their favorite choice for POP3 daemon and why?  
Any reason Qpopper would not be a good choice?  I would like to put 
something up this weekend.

- every couple minutes or so, one of the ISPs DNS servers opens a port 
53 to my server, what's up with that?
  I'm running with a static IP behind a firewall, I don't have named 
running, I'm just using a hosts file.  I don't even have port 53 being 
forwarded thru my firewall; but netstat shows a TIME-WAIT every so 
often with my ISP's DNS IP as the foreign address.  I can't see how I 
could have some sort of loop effect running... but this must be coming 
from internal somehow (?).

- I'd like to try putting X11 on, but I can't find any BSD-specific X11 
base.  Will the .tar files from X11.org compile readily?  They say the 
MIPS.cf hasn't been tested for "a while" and might need work.

- I need to revisit the ices 0.3 icecast streamer; I've not had time to 
do that yet, but appreciate the help so far.

- any comments on using snort or tripwire?   How many people here use 
these?

-other to-do items include routing outgoing mail thru my ISPs 
mailserver instead of directly sending from mine,  getting SCSI support 
going, and playing with providing a PPP dialup (ppp0 is already 
configured in the kernel I built).

	Thanks for the help so far,


	Brian