From owner-freebsd-questions@FreeBSD.ORG Tue Aug 17 21:54:43 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A032916A4CE for ; Tue, 17 Aug 2004 21:54:43 +0000 (GMT) Received: from ms-smtp-01.rdc-kc.rr.com (ms-smtp-01.rdc-kc.rr.com [24.94.166.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1E98C43D55 for ; Tue, 17 Aug 2004 21:54:43 +0000 (GMT) (envelope-from mcabanatuan@wi.rr.com) Received: from [192.168.0.3] (CPE-65-31-156-223.wi.rr.com [65.31.156.223]) i7HLse8o029368; Tue, 17 Aug 2004 16:54:40 -0500 (CDT) Message-ID: <41227E9F.3010204@wi.rr.com> Date: Tue, 17 Aug 2004 16:54:39 -0500 From: Marc Cabanatuan User-Agent: Mozilla Thunderbird 0.7.3 (X11/20040814) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Chuck Swiger References: <412279F4.7040805@wi.rr.com> <41227CC2.7060303@mac.com> In-Reply-To: <41227CC2.7060303@mac.com> X-Enigmail-Version: 0.85.0.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: Symantec AntiVirus Scan Engine cc: freebsd-questions@freebsd.org Subject: Re: multi-homing and pf; removing user with uid 0 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Aug 2004 21:54:43 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Alright as far as netmasks goes, am i allowed to add an ip with netmask 255.255.255.255 for each IP? Chuck Swiger wrote: | Marc Cabanatuan wrote: [ ... ] | |> Right now I've got a /27 and I am attemtpting to add 5 addresses |> of that adress block (ipv4) to the box as either seperate |> addreses (not aliases to the primary interface) or seperate |> addresses bound to sub-interfaces. So far I have been |> unsuccessful and the host told me to use aliases. | | | FreeBSD doesn't let you configure multiple IP addresses within the | same subnet. You will either have to use different netmasks, or | else use aliases as recommended. | |> I also wish for these settings to stay after (re)boot. | | | See /etc/rc.conf, and add something like: | | # Sample alias entry. #ifconfig_lo0_alias0="inet 127.0.0.254 | netmask 0xffffffff" | |> Not to mention they say my firewall is the problem and they |> couldn't get out to the internet from root console (im using pf |> and have the rule of 'pass out all'. | | | Hmm. | |> Next thing, a second account just 'showed up' on the box with uid |> 0. |> |> toor:*:0:0:Bourne-again Superuser:/root: - from |> /etc/master.passwd |> |> I suspect it was techs from the host, but I want it off the |> machine. How do I do this? | | | FreeBSD ships with a toor account available but disabled, which can | be useful if someone breaks the shell used by the root account | itself. If you want to get rid of it, run vipw. | - -- Marc Cabanatuan Network and Systems Administrator A+, Net+, Linux+, CCNA, MCP -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBIn6fQXmDWC9ByjIRAivrAKDcyJ62CuBDxZwLlt4FFqK483EiBgCbBkxk ai4Q2sV0j9iK9DxEHeC/Tlk= =jE6o -----END PGP SIGNATURE-----