Re: Help setting up email with opensmtp.

On 2018/02/23 15:32, leroy jordan wrote: >  can you be more pacific on the fdm what does it stand for. so when I go to > pkg_add I can then > read the Man page please. $ pkg_info fdm Information for inst:fdm-1.9p0 Comment: fetch, filter and deliver mail Description: fdm is a simple,

Re: Help setting up email with opensmtp.

On 2018-02-23, ed...@pettijohn-web.com wrote: > > On Feb 22, 2018 9:44 PM, mazocomp wrote: >> >> On Thu, Feb 22, 2018 at 08:36:49PM -0600, Edgar Pettijohn wrote: >> > However, with this setup you should be able to just use sendbug(1). >> > >> >

Re: Help questions

On Feb 23, 2018 5:48 AM, Fabio Almeida wrote: > > Hi Leroy, > > I recommend you to read and study at least: > - https://www.openbsd.org/faq/ - Everything, from top to bottom. > - DNS & Bind - To get a good understanding of Internet and how things work > in general. > - Some

Re: Help questions

Hi Leroy, I recommend you to read and study at least: - https://www.openbsd.org/faq/ - Everything, from top to bottom. - DNS & Bind - To get a good understanding of Internet and how things work in general. - Some network and TCP/IP specific books** - Absolute OpenBSD - The Book of PF **For me

Re: Help questions

This is great, thank you so much! I have read all of those books but thank you for the information. thanks Leroy Jordan On Feb 23, 2018 6:48 AM, "Fabio Almeida" wrote: > Hi Leroy, > > I recommend you to read and study at least: > - https://www.openbsd.org/faq/ -

Re: Help setting up email with opensmtp.

On Feb 22, 2018 9:44 PM, mazocomp wrote: > > On Thu, Feb 22, 2018 at 08:36:49PM -0600, Edgar Pettijohn wrote: > > However, with this setup you should be able to just use sendbug(1). > > > > sendbug will envoke sendmail aka smtpctl and then submit it your local smtpd > >

Re: Help setting up email with opensmtp.

On Thu, Feb 22, 2018 at 08:36:49PM -0600, Edgar Pettijohn wrote: > However, with this setup you should be able to just use sendbug(1). > > sendbug will envoke sendmail aka smtpctl and then submit it your local smtpd > who will then relay it via gmail. Hi! Excuse me for ignorant question below.

Re: Help setting up email with opensmtp.

leroy jordan writes: > Thanks! I will let you know the results thanks. One more question, is > there a man page for the secrets. The secrets are documented in smtpd.conf(5), if I'm understanding your question correctly. Take a look at the EXAMPLES section.

Re: Help setting up email with opensmtp.

> table viruals file:/etc/mail/viruals > > accept from local for local alias deliver to lmtp > "/var/dovecot/lmtp" rcpt-to > > accept from any for domain virtual deliver to lmtp > "/var/dovecot/lmtp" rcpt-to > > accept from local for any relay > >

Re: Help setting up email with opensmtp.

ins table passwd file:/etc/mail/passwd table viruals file:/etc/mail/viruals accept from local for local alias deliver to lmtp "/var/dovecot/lmtp" rcpt-to accept from any for domain virtual deliver to lmtp "/var/dovecot/lmtp" rcpt-to accept from local for any relay Thank

Re: Help setting up email with opensmtp.

cot/lmtp" rcpt-to accept from any for domain virtual deliver to lmtp "/var/dovecot/lmtp" rcpt-to accept from local for any relay Thanks for the help Leroy Jordan On Feb 22, 2018 8:21 PM, <ed...@pettijohn-web.com> wrote: > Please provide your smtpd.conf. > On Feb 22,

Re: Help setting up email with opensmtp.

Please provide your smtpd.conf. On Feb 22, 2018 6:51 PM, leroy jordan wrote: > > hello all, > > I'm trying to set up my email.conf. So I can send my Dmessage + log files. > I don't know the way to attach the log files so I can send via my Gmail > account. I've used this

Help setting up email with opensmtp.

hello all, I'm trying to set up my email.conf. So I can send my Dmessage + log files. I don't know the way to attach the log files so I can send via my Gmail account. I've used this as https://www.opensmtpd.org/faq/example1.html a point of reference. However, when I try to start smtpd I get

Re: Help questions

No flame from here, but, you did receive a very valuable reply from Michael Hekeler regarding your emails. The history of the reply is located here: https://marc.info/?l=openbsd-misc=151575921608315=2 On Thu, Feb 22, 2018 at 2:36 PM, leroy jordan wrote: > I'm new to

Help questions

I'm new to oBSD. However, I do wont to learn so i can contribute. The skills; that I have so far has came from the books that are suggested from the Open website. Which are useful in getting me started. but they don't have all the answers and when I post o misc no one seems to reply I know this

Re: IPsec help: too much NAT!

When faced with an ISP modem/router, I generally try to switch it to bridge mode and move the PPPoE / DHCP client formerly handled by the ISP hardware to the OpenBSD system instead. This rather simplifies things if you can make it work because then your OpenBSD system has the Internet-facing

Re: IPsec help: too much NAT!

On 2018-01-25, Lyndon Nerenberg wrote: > I have an IPsec conundrum I'm trying to solve. Yes, the scenario > is somewhat absurd; it's also the problem I've been taksed with > solving, so spare the peanut gallery comments, okay? > > > NET-P GW-Q <-> internet <-> GW-H GW-V

Re: IPsec help: too much NAT!

NET-P GW-Q <-> internet <-> GW-H GW-V NET-V In the schematic above, '' represents a NAT translation point. '<->' is a regular router interconnect. Except for where I screwed up, of course. That should read: NET-P GW-Q <-> internet <-> GW-H GW-V <-> NET-V I.e. the GW-V <-> NET-V

IPsec help: too much NAT!

I have an IPsec conundrum I'm trying to solve. Yes, the scenario is somewhat absurd; it's also the problem I've been taksed with solving, so spare the peanut gallery comments, okay? NET-P GW-Q <-> internet <-> GW-H GW-V NET-V NET-P is 10.0.2.0/24 NET-V is 10.0.11.0/24 GW-Q is an OpenBSD

OpenSMTPD mail server help

Hi, I am using *OpenBSD 6.1 *and need help in setting up mail server tried to send a test mail to gmail account and couldn't get it working How can i tell OpenSMTPD to forget about the mail and stop trying ? *smtpd.conf * ### pki setup pki mail.plrzeal.in certificate "/et

Re: Help moving OpenBSD installation to new machine

, Randall Gellens wrote: Thank you for your help, Stuart. I've tried booting 6.2 in the amd64, but that won't boot either, it just hangs: Using drive 0, partition 3. Loading

Re: Help moving OpenBSD installation to new machine

Thank you for your help, Stuart. I've tried booting 6.2 in the amd64, but that won't boot either, it just hangs: Using drive 0, partition 3. Loading.. probing: pc0 com0 mem

Re: Help moving OpenBSD installation to new machine

isc@). It would be worth trying a -current snapshot on this before spending more time on debugging. If that does indeed fixes things then you can just run that and update to 6.3 when it's released. (Also I would generally suggest running in 64-bit mode by using the amd64 version rather than the i386 vers

Re: Help moving OpenBSD installation to new machine

To clarify, the box is a Protectli Firewall Micro Appliance, 6x Gigabit Intel LAN, AES-NI, Barebones. I've installed a Crucial BX300 120GB SATA 2.5 Inch Internal Solid State Drive and two Crucial 4GB DDR4 2133 MT/s (PC4-17000) SR x8 SODIMM 260-Pin memory sticks into it. During boot, it

Re: Help moving OpenBSD installation to new machine

Have you tried doing a clean installation, then coping over the configs? If your goal is to update to a supported version, you will eventually have to deal with any incompatible changes. My advise is to deal with any trouble spots now, before migration. On Tue, Jan 16, 2018 at 8:44 PM, Randall

Re: Help moving OpenBSD installation to new machine

On Wed, January 17, 2018 12:44 am, Randall Gellens wrote: > I have a pretty old OpenBSD that's been running on a Soekris Net5501, > an AMD Geode LX single chip processor with CS5536 companion chip, > classified as a "586 class processor". > > I have a new box, a Protectli with a dual core Intel

Re: Help moving OpenBSD installation to new machine

On 2018-01-17, Randall Gellens wrote: > I have a pretty old OpenBSD that's been running on a Soekris Net5501, > an AMD Geode LX single chip processor with CS5536 companion chip, > classified as a "586 class processor". > > I have a new box, a Protectli with a dual

Help moving OpenBSD installation to new machine

I have a pretty old OpenBSD that's been running on a Soekris Net5501, an AMD Geode LX single chip processor with CS5536 companion chip, classified as a "586 class processor". I have a new box, a Protectli with a dual core Intel Celeron 3865U. I want to first move the existing OpenBSD system

Re: help understanding ikectl error messages

Thanks Stuart for replies! I can confirm that I could proceed without issues on 6.2-current. :-) BR, Andreas mån 15 jan. 2018 kl. 10:31 skrev Stuart Henderson : > On 2018/01/15 06:35, Andreas Thulin wrote: > > Sorry, my bad! > > > > 6.2-stable. And after sending my e-mail,

Re: help understanding ikectl error messages

On 2018/01/15 06:35, Andreas Thulin wrote: > Sorry, my bad! > > 6.2-stable. And after sending my e-mail, I found a post about this issue, > that ended up in > ikeca.c (?) having been patched on 8 November last year to resolve the same > issue, I believe. I > have installed 6.2-current on

Re: help understanding ikectl error messages

Sorry, my bad! 6.2-stable. And after sending my e-mail, I found a post about this issue, that ended up in ikeca.c (?) having been patched on 8 November last year to resolve the same issue, I believe. I have installed 6.2-current on another machine to figure out if that solves the problem. BR,

Re: help understanding ikectl error messages

On 2018-01-09, Andreas Thulin wrote: > Hi! > > Following the example on https://man.openbsd.org/ikectl, I > > # ikectl ca test create > ...and then > # ikectl ca test certificate sub.domain.com create > ...filled out "the form", but after that... > Using configuration

Re: OpenVPN Help

On Sun, Jan 07, 2018 at 01:31:02PM -0500, leroy jordan wrote: > Hi, All > > I am useing openbsd 6.2 release, as an server production. My network is > split with vlan into int_ and ext_ . However, I'm not sure which way to > run the VPN in a virtual machine or configure it on the int_ or ext_ so

help understanding ikectl error messages

Hi! Following the example on https://man.openbsd.org/ikectl, I # ikectl ca test create ...and then # ikectl ca test certificate sub.domain.com create ...filled out "the form", but after that... Using configuration from /etc/ssl/test/sub.domain.com-ssl.cnf Check that the request matches the

OpenVPN Help

Hi, All I am useing openbsd 6.2 release, as an server production. My network is split with vlan into int_ and ext_ . However, I'm not sure which way to run the VPN in a virtual machine or configure it on the int_ or ext_ so that all the traffic from the int_ side is encrypted tun when it hit

Openvpn configure help

Hi, All I am useing openbsd 6.2 release, as an server production. My network is split with vlan into int_ and ext_ . However, I'm not sure which way to run the VPN in a virtual machine or configure it on the int_ or ext_ so that all the traffic from the int_ side is encrypted tun when it hit

Re: help updating EHCI driver

move events, and properly initializing the wireless modem. > What makes you think that the quirks below > will help? What do you mean with 'work fine on those systems'? If they > work fine, which issues are you having? The same board when booted up under either Linux or FreeBSD appears to have

Re: help updating EHCI driver

ou having? What makes you think that the quirks below will help? What do you mean with 'work fine on those systems'? If they work fine, which issues are you having? > I've got a pretty rough draft of one of them, which disables low-power > mode during transfers, but would appreciate a littl

help updating EHCI driver

I'm trying to port some quirks for AMD USB chipsets from other operating systems to OpenBSD to hopefully resolve issues I am having with the pc engines APU3 EHCI ports, as they seem to work fine on those systems. I've got a pretty rough draft of one of them, which disables low-power mode during

Re: Unsure if I can help update the drivers?

On Fri, 17 Nov 2017 18:50:35 + > > I would like to get a number of intel device IDs and/or drivers > > working with OpenBSD including broxton graphics 0x5a85 > > hmmm, 0x5a85 seems to already be present in the OpenBSD code despite > unknown product except broxton may be being dropped by

Re: Unsure if I can help update the drivers?

On Wed, 15 Nov 2017 19:13:50 + > I would like to get a number of intel device IDs and/or drivers > working with OpenBSD including broxton graphics 0x5a85 hmmm, 0x5a85 seems to already be present in the OpenBSD code despite unknown product except broxton may be being dropped by intel and

Unsure if I can help update the drivers?

http://www.congatec.com/en/products/smarc/conga-sa5.html I would like to get a number of intel device IDs and/or drivers working with OpenBSD including broxton graphics 0x5a85 and azalia sound 0x5a98. Can I help in any way such as by providing patches or is it simply a case of waiting for a sync

Re: How help about to review FAQ?

previous poster said someone can just approve it as a patch instead of doing some work to type it in. Ken > Original Message > Subject: Re: How help about to review FAQ? > Local Time: November 4, 2017 3:12 PM > UTC Time: November 4, 2017 10:12 PM > From: b...@s

Re: How help about to review FAQ?

Le 11/04/17 à 22:59, Marc Espie a écrit : > On Sat, Nov 04, 2017 at 10:49:57PM +0100, Stephane HUC "PengouinBSD" wrote: >> Thank you! :D >> >> Do I have to create a new mail with just the page name to put the >> corrections proposals I was talking about "OpenBSD/macppc" page? >> > if you're

Re: How help about to review FAQ?

On Sat, Nov 04, 2017 at 10:49:57PM +0100, Stephane HUC "PengouinBSD" wrote: > Thank you! :D > > Do I have to create a new mail with just the page name to put the > corrections proposals I was talking about "OpenBSD/macppc" page? > if you're familiar with cvs and diff, best way is to cook an

Re: How help about to review FAQ?

On Sat, Nov 04, 2017 at 10:49:57PM +0100, Stephane HUC "PengouinBSD" wrote: > Thank you! :D > > Do I have to create a new mail with just the page name to put the > corrections proposals I was talking about "OpenBSD/macppc" page? Not necessary. I fixed both typos you found. Thanks! (note that

Re: How help about to review FAQ?

gt;> Hi. >> >> My question is how help about to review FAQ. Where submit corrections? >> >> Example with https://www.openbsd.org/macppc.html >> >> => Into "Getting and installing OpenBSD/macppc" section, it wrote: >> boot cd:,ofwboot 6.

Re: How help about to review FAQ?

On Sat, Nov 04, 2017 at 09:54:32PM +0100, Stephane HUC "PengouinBSD" wrote: > Hi. > > My question is how help about to review FAQ. Where submit corrections? > > Example with https://www.openbsd.org/macppc.html > > => Into "Getting and installing OpenB

How help about to review FAQ?

Hi. My question is how help about to review FAQ. Where submit corrections? Example with https://www.openbsd.org/macppc.html => Into "Getting and installing OpenBSD/macppc" section, it wrote: boot cd:,ofwboot 6.1/macppc/bsd.rd isn't that more like it? boot cd:,ofwboot 6.2/

Re: Need help setting http headers using relayd (and httpd)

tend my gratitude into the pockets of the Foundation and finally >> donate >> > this time. >> > >> > Then: >> > >> > I’m a relayd virgin. Consider all the following a lab exercise, I want >> to >> > learn and understand more. >&

Re: Need help setting http headers using relayd (and httpd)

id=BT1UmswV > > > > First objective: > > Set HTTP headers, such as > > > > CONTENT-SECURITY-POLICY > > X-CONTENT-TYPE-OPTIONS > > X-XSS-PROTECTION > > > > using relayd (since httpd can’t help out here). > > > > Assumptions etc: > &

Re: Need help setting http headers using relayd (and httpd)

est. > https://www.htbridge.com/websec/?id=BT1UmswV > > First objective: > Set HTTP headers, such as > > CONTENT-SECURITY-POLICY > X-CONTENT-TYPE-OPTIONS > X-XSS-PROTECTION > > using relayd (since httpd can’t help out here). > > Assumptions etc: > - I suppose

Need help setting http headers using relayd (and httpd)

to score an A+ on the htbridge web server security test. https://www.htbridge.com/websec/?id=BT1UmswV First objective: Set HTTP headers, such as CONTENT-SECURITY-POLICY X-CONTENT-TYPE-OPTIONS X-XSS-PROTECTION using relayd (since httpd can’t help out here). Assumptions etc: - I suppose only

Re: requesting help

On Thu, Sep 21, 2017 at 02:18:30AM +, Jules Gilbert wrote: > Can someone at OpenBSD help?? > > I recently switched over from FreeBSD to OpenBSD, I needed the bump up in > security. > Anyway, the dlfunc routine seems not to work in OpenBSD.  You know, this is > part of t

requesting help

Can someone at OpenBSD help?? I recently switched over from FreeBSD to OpenBSD, I needed the bump up in security. Anyway, the dlfunc routine seems not to work in OpenBSD.  You know, this is part of the dynamic library stuff. And very recently I moved to the clang system, again something

Re: maybe misc can help even it's not openbsd related

thanks all for the suggetions I will take a look at it and come back with some kind of config output thought. sorry for less usefull input but I'm trying to put pieces together in a way I can work with and this work is in progress and in a very early stage. And once again this list is at

Re: maybe misc can help even it's not openbsd related

On Thu, Aug 24, 2017 at 11:49:19AM +0200, Markus Rosjat wrote: > so here is my problem, I konfigured postfix and dkimproxy to work together. > So far so good because it works for outgoing mail. The problem i face is > with local mails. Postfix somehow rewrites the reciepent from the mail > adress

Re: maybe misc can help even it's not openbsd related

On 2017-08-24, Markus Rosjat <ros...@ghweb.de> wrote: > Hi there, > > since I know ppl on this list are always willing to help even it's not a > real openbsd problem I will give it a try. > I tried to ask this on the postfix list but after a week without any > response a

Re: maybe misc can help even it's not openbsd related

* StackOverflow = Server Fault On Thu, Aug 24, 2017 at 12:50 PM, BergenBergen BergenBergen < murk.fletc...@gmail.com> wrote: > OpenBSD uses OpenSMTPD, which is much better than Postfix. You're much > more likely to get help with that. > > As for Postfix, have you tried StackOv

Re: maybe misc can help even it's not openbsd related

OpenBSD uses OpenSMTPD, which is much better than Postfix. You're much more likely to get help with that. As for Postfix, have you tried StackOverflow or Freenode? On Thu, Aug 24, 2017 at 11:49 AM, Markus Rosjat <ros...@ghweb.de> wrote: > Hi there, > > since I know ppl on this

maybe misc can help even it's not openbsd related

Hi there, since I know ppl on this list are always willing to help even it's not a real openbsd problem I will give it a try. I tried to ask this on the postfix list but after a week without any response and resending the mail I gave up. so here is my problem, I konfigured postfix

Re: Need help securing SMTP (thunderbird says it's not encrypted)

as to why this is not using TLS. When I telnet to the machine on port 587 and issue the EHLO command, STARTTLS does appear in the response. Also, OpenSMTPD shows when I type the help command. issuing a Mail command comes back with the response that STARTTLS must be done first. Can someone clue me

Re: Need help securing SMTP (thunderbird says it's not encrypted)

On 07/27/17 08:56, Paul Covello wrote: ... > I can send and receive mail ok using Apple Mail on my mac. > Thunderbird is another story… I am warned when I set up the > account that SMTP is NOT encrypted. Thunderbird is a mail CLIENT. It knows nothing about what encryption your mail TRANSPORT

Need help securing SMTP (thunderbird says it's not encrypted)

Google-Foo fails me and reading through my Dovecot book and smtpd man pages have not enlightened me as to why this is not using TLS. When I telnet to the machine on port 587 and issue the EHLO command, STARTTLS does appear in the response. Also, OpenSMTPD shows when I type the help com

openiked configuration help: name, location and format of certificate and private key files

Hello, I would like to ask some help. It is not clear to me from the below man pages and I couldn't find answer on the net either: where shall I place the local certificate file (including the public key) and the private key if I would like to authenticate both sides with an X.509 certificate

Help setting up an IKEv2 IPSec Road Warrior VPN on OpenBSD

ng else like MOBIKE I keep hearing about, since it’s a road warrior style vpn? If so, how should I configure it? Thank you for your help.

Re: Unable to establish ikev2 vpn with ios using current - OpenBSD 6.1 GENERIC.MP#106 amd64 - can anyone help?

On 2017-06-07, Theodore Wynnychenko wrote: > I have updated to the last several snapshots as they have come out, but > continue > to be unable to establish a VPN between iOS and OpenBSD. As the iOS device > has > not been updated recently, the "problem" appears to relate to

Re: Unable to establish ikev2 vpn with ios using current - OpenBSD 6.1 GENERIC.MP#106 amd64 - can anyone help?

and don't even have an idea of how I could find out, if this is a problem with iOS not following some standard, or if it is an issue with OpenBSD's iked. I am not trying to be demanding, and I am not suggesting that I am entitled to any help whatsoever. But, I will admit that I have come to re

Re: HELP! My HTTPD website keeps breaking because the custom directory/user permissions are being reverting for some reason!

On 2017-05-29, tec...@protonmail.com wrote: > I have set the root to be /var/www/htdocs > Whilst others may think that is a bit pointless, it's fine for me. The issue > here is not the chroot, or the location I like to put my web content, it's > permissions and I can't

Re: HELP! My HTTPD website keeps breaking because the custom directory/user permissions are being reverting for some reason!

tec...@protonmail.com writes: > Hi there, > > I have been using httpd for quite a while now, but after a new > project/website having to have read/write/execute permissions (unsafe, > I do realise..) I decided to: > > 1. add root to the www group, > 2. chown -R www:www /var/www/htdocs > 3. chmod

Re: HELP! My HTTPD website keeps breaking because the custom directory/user permissions are being reverting for some reason!

ok up for this or something? Time is of the > essence because I need this website runing properly by tomorrow at latest. > > Many many thanks!! none of the replies to this mail help in resolving the actual problem. please post your httpd.conf and a listing of your directory, ie. ls -lR /var/www and a dmesg.

Re: HELP! My HTTPD website keeps breaking because the custom directory/user permissions are being reverting for some reason!

On 05/29/17 01:57, tec...@protonmail.com wrote: > Hi there, > > I have been using httpd for quite a while now, but after a new > project/website having to have read/write/execute permissions (unsafe, I do > realise..) I decided to: > > 1. add root to the www group, > 2. chown -R www:www

Re: HELP! My HTTPD website keeps breaking because the custom directory/user permissions are being reverting for some reason!

curity'. > >Thanks for your input though. > > Original Message >Subject: Re: HELP! My HTTPD website keeps breaking because the custom >directory/user permissions are being reverting for some reason! >Local Time: May 29, 2017 2:49 AM >UTC Time: May 29, 2017

Re: HELP! My HTTPD website keeps breaking because the custom directory/user permissions are being reverting for some reason!

the issue, and for anyone else who might be interested, then check out the man page for 'security'. Thanks for your input though. Original Message Subject: Re: HELP! My HTTPD website keeps breaking because the custom directory/user permissions are being reverting for some reason! Local

Re: HELP! My HTTPD website keeps breaking because the custom directory/user permissions are being reverting for some reason!

On Sun, May 28, 2017 at 08:13:13PM -0400, tec...@protonmail.com wrote: > I need to use the regular /var/www/htdocs for my site > > Such a strange issue I think that "need" of yours is the strangest issue here. It is /var/www that becomes the root directory when httpd/nginx/apache is chroot'ed,

Re: HELP! My HTTPD website keeps breaking because the custom directory/user permissions are being reverting for some reason!

Oops, forgot to say that it is 6.1 - Release with all patches applied with syspatch. I need to use the regular /var/www/htdocs for my site Such a strange issue Probably (not sure because you didn't care to say which version you're running) because you upgraded to a newer snapshots. Use another

Re: HELP! My HTTPD website keeps breaking because the custom directory/user permissions are being reverting for some reason!

On Sun, 28 May 2017 19:57:41 -0400, tec...@protonmail.com wrote: > Hi there, > > I have been using httpd for quite a while now, but after a new > project/website having to have read/write/execute permissions > (unsafe, I do realise..) I decided to: > > 1. add root to the www group, > 2. chown

HELP! My HTTPD website keeps breaking because the custom directory/user permissions are being reverting for some reason!

Hi there, I have been using httpd for quite a while now, but after a new project/website having to have read/write/execute permissions (unsafe, I do realise..) I decided to: 1. add root to the www group, 2. chown -R www:www /var/www/htdocs 3. chmod -R 775 /var/www/htdocs Everything was

Re: Help with authpf(8)

On 2017-04-30, Michael Graves wrote: > So my question, is there a way to setup authenticate users against > authpf(8) without needing their accounts local or in YP? No. But depending on your environment, maybe it would work to periodically pull from ldap and generate

Help with authpf(8)

Hello I am in the process of setting up the authpf(8) service on OpenBSD 6.1. I would like to have the users authenticate using radius. I have setup the login.conf (below) appropriately to achieve this, however I find that when I try to login with a user that is not on the system, the

Re: help with pf filtering on enc

On Tue, Mar 21, 2017, at 16:56, Marko Cupać wrote: > ... > > What exactly I should pass on enc interface so that the above packet > passes? > > Thank you in advance. Hi, You probably need to allow ipencap protocol packets. I also need l2tp packets, but that depends on whether you use it. --

help with pf filtering on enc

Hi, I have OpenBSD-based branch office router which connects to cisco-based hq router via ipsec-protected gre tunnel (transport mode). If I 'set skip on enc' everything works fine, but I would like to tighten rules on enc a bit as well, not as much for the sake of functionality as for the sake

Re: pppoe does not want to finish connexion :-( please help

On Sat, Feb 18, 2017 at 12:15 AM, sven falempin wrote: > ( stable 5.9 i ll update soon ) > I carefully read man pages, find out i cant use hostname.pppoe > because ??? i am probably not seeing something obvious but ... > > So i execute : > ifconfig pppoe0 destroy # for

pppoe does not want to finish connexion :-( please help

( stable 5.9 i ll update soon ) I carefully read man pages, find out i cant use hostname.pppoe because ??? i am probably not seeing something obvious but ... So i execute : ifconfig pppoe0 destroy # for fresh start :D ifconfig pppoe0 pppoedev em6 authproto pap authname\ YY authkey X

Re: Help with server not accepting new connections but is still accessible through ONE existing open ssh-session

On 02/01/2017 03:41 PM, Erling Westenvik wrote: I have an OpenBSD 5.9 server at a colocation. It stopped accepting new connections (ping, ssh, http, whatever) yesterday night but fortunately I had one ssh session open from my workstation from which I can still access it. Did you think about

Re: Help with server not accepting new connections but is still accessible through ONE existing open ssh-session

On Wed, Feb 01, 2017 at 05:09:43PM +0200, Lars Noodén wrote: > On 02/01/2017 05:06 PM, Erling Westenvik wrote: > > On Wed, Feb 01, 2017 at 03:58:51PM +0100, Manuel Giraud wrote: > >> Erling Westenvik writes: > >> > >>> However, I got inspired and when I disabled pf

Re: Help with server not accepting new connections but is still accessible through ONE existing open ssh-session

On Wed, Feb 01, 2017 at 03:58:51PM +0100, Manuel Giraud wrote: > Erling Westenvik writes: > > > However, I got inspired and when I disabled pf (pfctl -d) I got full > > contact! (But -- when I turned pf back on (pfctl -e) I lost the one > > connection I had... Now I

Re: Help with server not accepting new connections but is still accessible through ONE existing open ssh-session

Erling Westenvik writes: > However, I got inspired and when I disabled pf (pfctl -d) I got full > contact! (But -- when I turned pf back on (pfctl -e) I lost the one > connection I had... Now I have to wait 48 minutes for the server to > reboot. Not much more to do

Re: Help with server not accepting new connections but is still accessible through ONE existing open ssh-session

On Wed, Feb 01, 2017 at 04:26:15PM +0200, lilit-aibolit wrote: > On 02/01/2017 03:41 PM, Erling Westenvik wrote: > > I have an OpenBSD 5.9 server at a colocation. It stopped accepting new > > connections (ping, ssh, http, whatever) yesterday night but fortunately > > I had one ssh session open

Help with server not accepting new connections but is still accessible through ONE existing open ssh-session

I have an OpenBSD 5.9 server at a colocation. It stopped accepting new connections (ping, ssh, http, whatever) yesterday night but fortunately I had one ssh session open from my workstation from which I can still access it. Funny thing is that the server has full access OUT to the internet. I can

Wanted: OpenBSD Help / Tutoring / Mentoring in Montreal or Toronto

Hi. I'm not exactly new to OpenBSD, but there are a few things that I need some help with, and fighting through learning them on my own isn't appealing. I'm looking for some help with: pf, OpenVPN, web hosting, building a robust mail server ... and would expect to pay you for your time. Drop

Re: help with pf queueing in ipsec over gre

On Fri, 2 Dec 2016 12:14:56 + (UTC) Stuart Henderson wrote: > On 2016-11-25, Marko Cupać wrote: > > Hi, > > > > I'd like to do limit bandwidth on gre tunnel protected with ipsec in > > transport mode. > I haven't tried this exact scenario. But I

Re: help with pf queueing in ipsec over gre

On 2016-11-25, Marko Cupać wrote: > Hi, > > I'd like to do limit bandwidth on gre tunnel protected with ipsec in > transport mode. > > I've set single default queue on gre interface, matched everything > that goes out to that queue, and finally passed everything out that >

help with pf queueing in ipsec over gre

Hi, I'd like to do limit bandwidth on gre tunnel protected with ipsec in transport mode. I've set single default queue on gre interface, matched everything that goes out to that queue, and finally passed everything out that interface: # SNIP queue mother on gre204 bandwidth 25M min 25M max 25M

Re: help

On 17 November 2016 at 11:25, steve kolars wrote: > The 4 lines in between the comments are straight out of several documents, > but when I run "pfctl -nf f-n" these lines are flaged as syntax errors. Any > assistance would be appreciated. “proto tcp” needs to go after the “on

Re: opportunity to help: %s audit in mandoc

Hi everybody, Here is an updated list after doing what I said yesterday. One nit: I count 25 instances in cgi.c, not 27. // 27 cgi.c: all ok // 317: msg is only NULL when status == 200 // 351,353,379,405,409,421,425,497,499,527: compile-time string // constants and/or

Re: opportunity to help: %s audit in mandoc

Dariusz Sendkowski writes: > From the list below: > > 27 cgi.c: >4 dbm.c: >5 dbm_map.c: I'll start on these three... >// 3 eqn.c: ... and check you here. When I get that far I'll post again, or if it's taking me longer than I thought it would I'll post at

Re: opportunity to help: %s audit in mandoc

>From the list below: 27 cgi.c: 4 dbm.c: 5 dbm_map.c: // 3 eqn.c: 5 html.c: 20 main.c: 2 man.c: 2 man_html.c: 5 man_macro.c: // 2 man_term.c: 9 man_validate.c: 37 mandocdb.c: 2 manpath.c: 23 mansearch.c: 4 mdoc_html.c: // 10 mdoc_macro.c: 1

Re: opportunity to help: %s audit in mandoc

Hi {Ingo,Darius,misc@}, Ingo Schwarze writes: > Hi Dariusz, > > Dariusz Sendkowski wrote on Sun, Aug 07, 2016 at 08:27:07PM +0200: > >> OK, but from which branch? > > We don't use branches in OpenBSD. > Just use the HEAD of the OpenBSD CVS repository. > > You don't need to

Re: opportunity to help: %s audit in mandoc

Hi Dariusz, Dariusz Sendkowski wrote on Sun, Aug 07, 2016 at 08:27:07PM +0200: > OK, but from which branch? We don't use branches in OpenBSD. Just use the HEAD of the OpenBSD CVS repository. You don't need to worry about merging to the portable mandoc on mdocml.bsd.lv. That's a no-brainer

<    1   2   3   4   5   6   7   8   9   10   >