Re: 6.3 router crash

2018-09-10 Thread Jay Hart
> > On Sep 8, 2018 11:27 AM, Jay Hart wrote: >> >> Hello, >> >> My new router crashed this morning.  About 4-5 days ago I ran 'syspatch' >> and think that 14, 15, >> and 16 patches were installed. At the conclusion of the install, the kernel >> "relinked". No >> issues >> reported.  I did not

IKED not sending packets ?

2018-09-10 Thread Tim Jones
Hi, Thinking it might be something with my earlier config, I created a simple one-liner: ikev2 esp from 172.16.1.2 to 172.16.1.3 However iked does not appear to be sending out any packets ?  Which I thought would be the case in its default active mode ?  It seems to just load the config and

Re: IKED "not a valid authentication mode"

2018-09-10 Thread Tim Jones
> Note that this isn't commenting a line, this is commenting all lines > that come after it. The parser joins the line first and removes > comments afterwards, so the config above becomes > > ... group curve22519 #childsa enc aes-128 auth hmac-sha2-256 srcid ... > > and then everything after the #

Re: Running your own mail server

2018-09-10 Thread Luke A. Call
On 09-10 13:30, Craig Skinner wrote: > Being a postmaster (email server administrator) and hostmaster (DNS > server administrator) is fun, hectic, and takes about 5 years to learn. > [] > Save yourself the trouble and let them use their gMail > accounts/addresses directly. They'll soon be

Re: APU2 and Spectre

2018-09-10 Thread Zbyszek Żółkiewski
> Wiadomość napisana przez Consus w dniu 25.08.2018, o godz. > 17:08: > > Seems like APU2 board is vulnerable to Spectre: seems there is microcode update with mitigations but looks like none want to claim where that microcode comes from:

Re: Equipment for OBSD based firewall

2018-09-10 Thread Jordan Geoghegan
On 09/10/18 08:22, Sonic wrote: How does the Edgerouter compare in performance to an Atom 2358/2558 based system? Especially interested in firewall performance using site-to-site VPN's. There's trade-offs for everything. The x86 platform is fundamentally flawed and contains innumerable

Re: IKED "not a valid authentication mode"

2018-09-10 Thread Stuart Henderson
On 2018-09-10, Tim Jones wrote: > Unless I misunderstand the 6.3 docs, the following should be valid : > childsa auth enc chacha20-poly1305 group curve25519 For the AEAD types like chacha20-poly1305 and aes-256-gcm, just specify them in "enc" and leave out "auth". > But i get an error "not a

Domain name including openbsd

2018-09-10 Thread John Naggets
Hi, I was wondering if the OpenBSD community permits the usage of the "openbsd" word inside a domain name with the purpose of offering commercial OpenBSD-based services? For example let's say I want to sell OpenBSD-based cloud services, would I be allowed to purchase the domain name openbsd.cloud

Re: Equipment for OBSD based firewall

2018-09-10 Thread Sonic
How does the Edgerouter compare in performance to an Atom 2358/2558 based system? Especially interested in firewall performance using site-to-site VPN's. On Mon, Sep 3, 2018 at 8:01 PM Jordan Geoghegan wrote: > > On 09/03/18 16:17, Bogdan Kulbida wrote: > > Ladies and gentlemen, > > > > I need

IKED "not a valid authentication mode"

2018-09-10 Thread Tim Jones
Unless I misunderstand the 6.3 docs, the following should be valid : childsa auth enc chacha20-poly1305 group curve25519 But i get an error "not a valid authentication mode".  If I comment out that line, my configuration validates OK. The same happens if I copy/paste one of the examples from

Re: Vultr hosting of OpenBSD

2018-09-10 Thread Merv Hammer
> On 8. Sep 2018, at 19:55, Ken M wrote: ... > 1. Is it still current information that it would be better to use my own > image/install/iso for openbsd on Vultr? > I’ve run general purpose OpenBSD boxes on Vultr for several years, mostly for development while travelling and without access

Re: iked[12345]: pfkey_reply: no reply from PF_KEY (-current)

2018-09-10 Thread Mark Patruck
Yes, a short test shows no errors anymore. On Mon, Sep 10, 2018 at 10:39:56AM -0300, Martin Pieuchot wrote: > On 10/09/18(Mon) 12:15, Mark Patruck wrote: > > I've tested with a current snapshot and two freshly installed systems > > and get the same error, but... > > > > reverting mpi@s 'Add

Re: iked[12345]: pfkey_reply: no reply from PF_KEY (-current)

2018-09-10 Thread Martin Pieuchot
On 10/09/18(Mon) 12:15, Mark Patruck wrote: > I've tested with a current snapshot and two freshly installed systems > and get the same error, but... > > reverting mpi@s 'Add per-TDB counters and a new SADB extension (1)' > changes make the issues disappear. > > (1)

Re: Duplicate IP Address -> Spoof/Verizon???

2018-09-10 Thread Mikkel C. Simonsen
Den 08-09-2018 kl. 14:47 skrev Pierre Emeriaud: Le sam. 8 sept. 2018 à 13:40, Jay Hart a écrit : -ifconfig -A from the router-- re1: flags=8843 mtu 1500 lladdr 00:22:4d:d1:48:d5 inet 192.168.1.1 netmask 0xff00 broadcast 192.168.1.255 Some CPEs have

Re: Running your own mail server

2018-09-10 Thread Craig Skinner
Hi Ken, On Sat, 8 Sep 2018 11:23:35 -0400 Ken M wrote: > Just curious how many of you use openbsd to run your own personal > email server? Do you find it a hassle to manage in any way? Being a postmaster (email server administrator) and hostmaster (DNS server administrator) is fun, hectic, and

Re: iked[12345]: pfkey_reply: no reply from PF_KEY (-current)

2018-09-10 Thread Mark Patruck
I've tested with a current snapshot and two freshly installed systems and get the same error, but... reverting mpi@s 'Add per-TDB counters and a new SADB extension (1)' changes make the issues disappear. (1) https://marc.info/?l=openbsd-cvs=153546931106420=2 On Mon, Sep 10, 2018 at 10:13:12AM

Re: iked[12345]: pfkey_reply: no reply from PF_KEY (-current)

2018-09-10 Thread Mark Patruck
Unfortunately the last kernel i could test with, is from 12 Aug 2018 - no issues here. I've also built a new kernel about 12h ago (just to make sure) but the error stays. Every few hours (lifetime?) the following errors pops up pfkey_write: writev failed: Invalid argument I'll create an easier

Re: "Transit" BGPD not announcing learnt routes to neighbors

2018-09-10 Thread Tim Jones
> I think you are mixing up 6.3 code with docs for -current, this was > changed mid-June: > https://marc.info/?l=openbsd-cvs=152888243922828=2 > > There have been big changes in bgpd since 6.3, there are now methods > to give a simpler/clearer configuration, and some big improvements in >

Re: OpenBSD and letsencrypt in Amazon AWS

2018-09-10 Thread Jordan Geoghegan
On 09/09/18 07:05, Monah Baki wrote: Hi All, I have a OpenBSD 6.3 server in Amazon AWS, and I am trying to install from ports letsencrypt. Install was running fine till I got a Fatal message after it was done with the patching process ... Thanks Monah acme-client(1) is in base and is used