Re: Unwind in rdomain1 returning NXDOMAIN for local queries

2022-03-25 Thread Stuart Henderson
On 2022-03-25, Francisco Gaitan wrote: > On Fri, Mar 25, 2022 at 07:56:16AM -0400, Josh Grosse wrote: >> On Fri, Mar 25, 2022 at 11:41:08AM +0100, Francisco Gaitan wrote: >> > I have setup a WireGuard VPN so I run two instances of unwind, one for >> > rdomain 0 (unwind) and another for rdomain 1

Tunnel traffic does not match SA on initial connection to remote httpd

2022-03-25 Thread readme
The setup is two gateways with IPsec channels setup in tunnel mode to bridge networks 10.255.255.0/24 and 10.254.255.0/24. Traffic from server-east:enc0 does not match a SA in place when trying to connect to httpd on server-west. Setup in ASCII art: em0:203.0.113.50 -~-~- ipsec tunnel -~-~-~-

Re: Question how to delete somewhat encrypted partisions / softraid?

2022-03-25 Thread Nick Holland
On 3/25/22 5:28 AM, soko.tica wrote: Hello list, ... But I have failed to proceed before the installation with # cd /dev && sh MAKEDEV sd1 # dd if=/dev/zero of=/dev/rsd1c bs=1m count=1 So i ended up with unbootable install. I don't think that is cause and effect. If you want to start over

Re: Desktops and laptops status of firewall and FDE

2022-03-25 Thread Stuart Henderson
On 2022-03-25, Mikolaj Kucharski wrote: > On Thu, Mar 24, 2022 at 09:56:24AM +, Mikolaj Kucharski wrote: >> Hi, >> >> Do you guys have an approach, a software to periodically monitor status of >> endpoint machines, laptops, desktops where the requirement is to have >> full disk encryption

Re: Desktops and laptops status of firewall and FDE

2022-03-25 Thread Mikolaj Kucharski
On Thu, Mar 24, 2022 at 09:56:24AM +, Mikolaj Kucharski wrote: > Hi, > > Do you guys have an approach, a software to periodically monitor status of > endpoint machines, laptops, desktops where the requirement is to have > full disk encryption and firewall enabled, and appropriately

Re: Unwind in rdomain1 returning NXDOMAIN for local queries

2022-03-25 Thread Josh Grosse
On Fri, Mar 25, 2022 at 11:41:08AM +0100, Francisco Gaitan wrote: > I have setup a WireGuard VPN so I run two instances of unwind, one for > rdomain 0 (unwind) and another for rdomain 1 (unwind1) this way: > lrwxr-xr-x 1 root wheel16 Mar 23 13:44 unwind1 -> /etc/rc.d/unwind > > $ cat

Re: Question how to delete somewhat encrypted partisions / softraid?

2022-03-25 Thread Zé Loff
On Fri, Mar 25, 2022 at 10:28:55AM +0100, soko.tica wrote: > Hello list, > > I have tried to encrypt disk before the installation of OpenBSD 7.0 > according to the instructions here > https://www.openbsd.org/faq/faq14.html#softraid and managed to mess it. First of all, if this is a fresh

Question how to delete somewhat encrypted partisions / softraid?

2022-03-25 Thread soko.tica
Hello list, I have tried to encrypt disk before the installation of OpenBSD 7.0 according to the instructions here https://www.openbsd.org/faq/faq14.html#softraid and managed to mess it. I have performed # cd /dev && sh MAKEDEV sd0 # fdisk -iy -g -b 960 sd0 # disklabel -E sd0 Label editor

Re: Cross-build ARM64 on AMD64. Any starting pointers?

2022-03-25 Thread Janne Johansson
Den fre 25 mars 2022 kl 09:23 skrev Slava Voronzoff : > Hello, I want to build ARM64 on my OpenBSD/amd64 machine. Any suggestions > on there to start with? I spent some time in qemu-aarch64, but while it is > working it is obviously pretty slow. http://www.openbsd.org/faq/faq5.html search for

Cross-build ARM64 on AMD64. Any starting pointers?

2022-03-25 Thread Slava Voronzoff
Hello, I want to build ARM64 on my OpenBSD/amd64 machine. Any suggestions on there to start with? I spent some time in qemu-aarch64, but while it is working it is obviously pretty slow.