IPSec flow not properly routed

2016-11-07 Thread Mik J
Openbsd: 6.0 Hello, I have an ipsec vpn set up but I don't understand why my packets are going out on the wrong interface. # ipsecctl -sa FLOWS: flow esp in from 192.168.8.0/24 to 10.2.89.224/27 peer remote.y.y.y srcid external.ip.x.x/32 dstid remote.y.y.y/32 type use flow esp out from

Re: Removal of old libraries

2016-11-07 Thread Clint Pachl
Ax0n wrote on 09/03/16 13:12: I've got a Toshiba NB305 netbook that's been my daily-use laptop for more than 6 years now. The last fresh install I did was OpenBSD 4.9-RELEASE in early May 2011. I've been quite happy with how it works, and I've been doing bsd.rd upgrades and M:Tier binary updates

Re: OpenBGPD status for RPKI

2016-11-07 Thread Peter Hessler
As far as I know, that effort has been dropped. There is currently no effort, and no interest from the developers. On 2016 Nov 07 (Mon) at 21:51:20 +0100 (+0100), minek van wrote: :oh, sorry, : :I thought it was already in because I seen mails: : :Adding RPKI/ROA support to OpenBGPd Denis

Re: OpenBGPD status for RPKI

2016-11-07 Thread minek van
oh, sorry, I thought it was already in because I seen mails: Adding RPKI/ROA support to OpenBGPd Denis Fondras Sun, 08 Jun 2014 09:28:25 -0700 Any idea when will it get in? It looks promising! Thanks! > Sent: Monday, November 07, 2016 at 9:40 PM > From: "Peter Hessler"

Re: OpenBGPD status for RPKI

2016-11-07 Thread Peter Hessler
There is currently no RPKI in OpenBGPD. On 2016 Nov 07 (Mon) at 21:19:20 +0100 (+0100), minek van wrote: :Hello, : :is RPKI production ready with OpenBGPD? Does anyone uses it? : :Many thanks! :

Re: What is the difference between the security of HardenedBSD, security of FreeBSD, security of NetBSD, security of OpenBSD and security of DragonflyBSD?

2016-11-07 Thread minek van
The rank would be probably (if only counting the OS itself, no ports, no custom things, responsible admin): 1. OpenBSD 2. HardenedBSD the remaining are not security oriented. From what are you trying to defend? > Sent: Monday, November 07, 2016 at 1:32 PM > From: "SOUL_OF_ROOT 55"

OpenBGPD status for RPKI

2016-11-07 Thread minek van
Hello, is RPKI production ready with OpenBGPD? Does anyone uses it? Many thanks!

Re: softraid crypto performance on Sun Fire T1000

2016-11-07 Thread Alexander Bochmann
Hi, ...on Sat, Oct 29, 2016 at 03:06:05PM +0200, Jonathan Schleifer wrote: > While a single core of the T1000 is quite slow, this just seems too slow, > making this setup unusable. openssl speed shows 10 MB/s for AES-128-CBC and 7 > MB/s for AES-256-CBC on a single core. So a single core is

Re: What is the difference between the security of HardenedBSD, security of FreeBSD, security of NetBSD, security of OpenBSD and security of DragonflyBSD?

2016-11-07 Thread Romain FABBRI
Make your homework and come back to this list to ask questions when you have real ones.

Re: What is the difference between the security of HardenedBSD, security of FreeBSD, security of NetBSD, security of OpenBSD and security of DragonflyBSD?

2016-11-07 Thread Tinker
On 2016-11-07 20:32, SOUL_OF_ROOT 55 wrote: Sorry for this question: What is the difference between the security of HardenedBSD, security of FreeBSD, security of NetBSD, security of OpenBSD and security of DragonflyBSD? Thank you Mate, your questions come off as very general, maybe too

What is the difference between the security of HardenedBSD, security of FreeBSD, security of NetBSD, security of OpenBSD and security of DragonflyBSD?

2016-11-07 Thread SOUL_OF_ROOT 55
Sorry for this question: What is the difference between the security of HardenedBSD, security of FreeBSD, security of NetBSD, security of OpenBSD and security of DragonflyBSD? Thank you

Re: Oddness with pkg_add

2016-11-07 Thread Stuart Henderson
On 2016-11-04, Chris Huxtable wrote: > > # doas -u _pkgfetch host ftp.openbsd.org > ftp.openbsd.org is an alias for openbsd.sunsite.ualberta.ca. > openbsd.sunsite.ualberta.ca has address 129.128.5.191 Don't use host(1) to check, it doesn't use the system resolver that is used