VPN Howto

Hello, I want to replace my linux firewall/vpn-server with an openbsd 4.0 installation. My problem is, that the linux server is a vpn-endpoint with two draytek vigor 2900. At the moment I'm looking for a vpn-documentation (or a howto) for ipsec and openbsd 4.0. Does somebody have a link for me?

Pipes, redirects, and rc.local (was: Conundrum with aucat and rc_scripts)

G0kita, I've had a chance to review your advice, and I believe I've spotted a problem with your redirects. The command that works for me is: /usr/bin/aucat -o - 2/dev/null /dev/null | /usr/local/bin/lame -r -a -b 56 - - 2/dev/null | /usr/local/bin/ezstream -c /etc/ezstream.xml /dev/null 21

Re: Pipes, redirects, and rc.local (was: Conundrum with aucat and rc_scripts)

Correction: This works fine from a script executed by cron. Still doesn't work from rc.local. Anyone willing to impart some additional wisdom? Breeno Quoting misc.open...@mail.usask.ca: G0kita, I've had a chance to review your advice, and I believe I've spotted a problem with your

Atheros AR9001U chipset - maybe Otus driver ?

I was given a AVM FRITZ!WLAN USB Stick N and I found some references to it in a man page for otus driver (rel 1.3 and 1.4). However searching the man pages via openbsd.org I can't find any mention of a released otus driver at least in 4.5 (as per my official CD). Also I noticed this line in

Re: Atheros AR9001U chipset - maybe Otus driver ?

wrote: try -current. On 2009-05-13, openbsd misc open...@6wells.com wrote: I was given a AVM FRITZ!WLAN USB Stick N and I found some references to it in a man page for otus driver (rel 1.3 and 1.4). However searching the man pages via openbsd.org I can't find any mention of a released otus

Re: OT: Old School Unix vs. Modern Day Support Professionals - was (Defending OpenBSD Performance)

Fact of the matter is that I have become convinced that those that know how to actually TROUBLESHOOT problems are in the very small minority in this industry. I think this is really the crux of the matter, I find the ability to troubleshoot multi-vendor complexity is getting to be a rare

Re: openbsd ca tutorial

Look at this, its not a tutorial but it works ok with some tuning. http://devel.it.su.se/pub/jsp/polopoly.jsp?d=1026a=3290 CSP The simple PKI toolkit Certificate Service Provider is a perl wrapper around openssl that allows you to run multiple simple certificate authorities (CAs). CSP is

Multiple obsd installations on one harddrive

Hi @all, I have a question regarding openbsd and partitions. I want to have more than one obsd installation on one harddrive. The idea behind that question ist to be able to install a newer release in parallel, chroot into it, compile stuff, install packages etc and boot into that partition when

Re: Multiple obsd installations on one harddrive

-Urspr|ngliche Nachricht- Von: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] Im Auftrag von Ingo Schwarze Gesendet: Freitag, 27. Mdrz 2009 03:12 An: Volpers, Hagen Cc: misc@openbsd.org Betreff: Re: Multiple obsd installations on one harddrive Volpers, Hagen wrote on Fri

Re: Multiple obsd installations on one harddrive

-Urspr|ngliche Nachricht- Von: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] Im Auftrag von Mike Erdely Gesendet: Freitag, 27. Mdrz 2009 20:25 An: misc(at)openbsd.org Cc: misc@openbsd.org Betreff: Re: Multiple obsd installations on one harddrive On Fri, Mar 27, 2009 at 12

Re: European orders

Damn, this is degenerating into mud slinging bollocks, what with full value, owed for CD Sales , transfers of undisclosed amounts - some clear facts would be nice, this sounds like waffle. 1. There appear to be no contracts, so Theo and Wim or the bodies they represent or act for, have no

Re: where to order now ?

On Thu, Apr 2, 2009 at 11:48 PM, Theo de Raadt dera...@cvs.openbsd.org wrote: I see OpenBSDEurope appear to advertise the CDs for about 30 euro a pop: http://www.openbsdeurope.com/45.htm Other sellers offer the CDs for the usual 50 euro. Does the lower price @ openbsdeurope mean they have

Re: Transparent firewall (bridge) with DMZ + LAN

You can either read the code or listen to somebody who has. I don't know you either, but I know Henning and I know the bridge code, and the short version is he's right. Has anyone noticed That if you substitute BIble for code , in the section quoted above- its like listening to someone who

Re: OT: 10GbE Physical Network Taps

On Wed, May 6, 2009 at 3:42 PM, Diana Eichert deich...@wrench.com wrote: On Wed, 6 May 2009, J.C. Roberts wrote: I need to collect raw throughput statistics without increasing latency or reducing bandwidth on 10GbE fiber links, so most of the typical methods are out of the question (i.e. like

NFS-e No. 14469897

Esta mensagem refere-se à Nota Fiscal Paulistana - NFS-e No. 14469897 emitida pelo prestador de serviços:E-mail: misc@openbsd.orgPara visualizá- la acesse o link a seguir: https://nfe.prefeitura.sp.gov.br/nfe.aspx?ccm=32189060amp;nf=14469247amp;co d=FKT4XVPG

Contato,sexta-feira, 20 de julho de 2012

Contato Site Assunto: OrcamentoNome: Marcos S SousaEmail: macossousa.compras@gmail.comTelefone:  (11) 3904- 1478Mensagem: Bom dia gostaria de um orcamento sobre alguns itens,que necessito com urgencia. Orcamento-doc.pdf 78K   Visualizar   Baixar  

Aviso de Protesto, 30/08/2012

Anexo: 2ª Via Fatura (3.73 mb) Prezado Senhor(a), Comunicamos que ainda continua em nosso sistema um boleto atrasado referente ao mês de fevereiro, pedimos a gentileza que regularize o mesmo o mais rapido possivel. Segue o anexo da (2ª)segunda via do boleto. Caso ja tiver pago, favor

Dear undeadly.org admins

Thank you for maintaining for so many years OpenBSD's official news site. I understand that you are not paid for the time you have dedicated. That being said, please fix the fucking archive search. I know i can use google to search undeadly. However, nobody should have to. In addition, when the

issues with firefox

Firefox becomes non-responsive for a small amount of time when viewing large (wallpaper sized) jpg images. In OpenBSD 5.4 firefox would block for several seconds. In OpenBSD 5.5 the situation improved considerably but it's still not perfect. The lag persists for a very short but visible amount

Re: issues with firefox

Sent: Tuesday, July 08, 2014 at 9:05 PM From: Stuart Henderson s...@spacehopper.org To: misc@openbsd.org Subject: Re: issues with firefox Any improvement with GENERIC rather than GENERIC.MP? Actually GENERIC.MP performs better than GENERIC.SP. I have discovered through experience

rtl8192cu firmware trouble

I'm running OpenBSD 5.5 amd64 release. I am testing a tl-wn821n usb wifi adapter which uses the rtl8192cu chipset (supported by OpenBSD). During boot (with or without the usb attached), i get the following: urtwn0: failed loadfirmware of file urtwn-rtl8192cfwT (error 2) I have run fw_update

mount fails with a micro sd

When i try to mount (via a card adapter) a specific Kingston 32GB micro sd card i get: mount_msdos: /dev/sdXi on /mnt: Inappropriate file type or format (X is the device number) It is strange because i can mount it in windows and linux. I have other micro sd cards that mount normally on my

Re: mount fails with a micro sd

Sent: Wednesday, September 17, 2014 at 7:31 PM From: Josh Grosse j...@jggimi.homeip.net First step: issue: # disklabel sdX This will output either an actual disklabel, if one exists, or it will output a psuedo-disklabel containing any recognized partitions from the drive's MBR

no connectiion to phone's AP

. As you can see it actually lists a nearby wifi hotspot. Then i tried this http://marc.info/?l=openbsd-misc=142197120017573=2 : # ifconfig iwn0 down # ifconfig iwn0 nwid myid wpakey mykey # ifconfig iwn0 up # ifconfig ... iwn0: flags=8843<UP,DROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500 ll

Re: no connectiion to phone's AP

nterface up. My bad. I thought it also read hostname.iwn0. > What do you mean by "no deal" - it's clearly connected to 'myid'? > > Have you forgotten to run: > > dhclient iwn0 > > ? Yep. Many thanks to Raf and Peter for their swift replies. Sorry for polluting misc people. Everything works as intented!

release and patch/errata info in (easily) machine readable format?

I mostly follow -stable, and have scripts/tools that enable me to (re)build stable from source with minimal human intervention. To further automate this process, it would be helpful to have the current release number and (at least) the most current patch number. Obviously this information is

Re: release and patch/errata info in (easily) machine readable format?

> On Dec 5, 2015, at 11:51 AM, trondd wrote: > > On Sat, December 5, 2015 2:20 pm, openbsd-m...@clark-communications.com > wrote: >> I mostly follow -stable, and have scripts/tools that enable me to >> (re)build >> stable from source with minimal human intervention. >> >>

Re: Thinkpad X220, can't control screen brightness via keyboard

after suspending or package installation. In any case, thank you all for your replies. > Sent: Sunday, September 18, 2016 at 9:38 AM > From: "Henrik Friedrichsen" <hen...@diff.cc> > To: misc@openbsd.org > Subject: Re: Thinkpad X220, can't control screen brightness via

Thinkpad X220, can't control screen brightness via keyboard

To be more precise, i can't control screen brightness by pressing Fn + Home (increase) or Fn + End (decrease). These are thinkpad's shortcuts for controlling brightness. Controlling brightness by command line works. The shortcuts worked in OpenBSD 5.9. Dmesg: OpenBSD 6.0 (RAMDISK_CD) #2100:

thinkpad x220 with OpenBSD 6.1

This e-mail is complementary to the one i sent at dm...@openbsd.org. After the completion of the installation process, everything works except: -screen brightness controlled by the keyboard -suspend/resume when i close the lid Both minor issues were resolved when i suspended the laptop from the

Robust ThinkPad suggestions for running OpenBSD.

into the direction where I could get informed, I'm all ears. -- J. Misc.

Re: af-to ipv6 -> ipv4 server

On Wed, Oct 04, 2017 at 11:50:10PM +, lists+m...@ggp2.com wrote: > It looks like I'm being delegated a /64 from Comcast no matter what I > ask for. Actually... I spoke too soon. After digging around some more, it appears that Comcast appears to have some sort of caching going on. If I spoof

Re: af-to ipv6 -> ipv4 server

It looks like I'm being delegated a /64 from Comcast no matter what I ask for. Here's the relevant portion of my dhcpcd.conf: interface re1 ipv6rs ia_na 0 ia_pd 1/::/60 vlan10/1/64 vlan1001/2/64 I've also tried ia_pd 1/::/56 my original config line before testing was: ia_pd 1 vlan10/0

Re: af-to ipv6 -> ipv4 server

> No, that makes sense. Thanks! > SLAAC requires /64 interfaces. Does your ISP *only* give a /64? Many > will give a larger block using DHCPv6-PD (e.g. following Broadband > Forum TR-187). Unfortunately, (my tests seem to confirm) Comcast only gives me a single /64. I'm moving to a new ISP

6.2 starts nsd before slaacd binds ipv6 address

Hello all - I don't feel this warrants a bug report, but nevertheless feel that this behavior is inconsistent with the way dhclient works. I have a vultr server running nsd/OpenBSD 6.2, and I suspect that the move to slaacd from kernel code in 6.1 is what has broken my nsd config (it fails to

Re: af-to ipv6 -> ipv4 server

On Wed, Oct 04, 2017 at 07:54:45PM +0200, Jeremie Courreges-Anglas wrote: > I'm reading contradicting stuff on the net, some posts say that comcast > will hand you more than a /64... if you ask for more, say a /60. Maybe > this is worth trying? I'll give that a shot when I get home. It may have

af-to ipv6 -> ipv4 server

Hello all! I'm new to ipv6, and was hoping that someone could check my understanding of the af-to option. My ISP has given me a /64 block - say 1234:1234:1234:5d6f:/64 I have a subnet of servers that are ipv4-only, and want to use the af-to option to provide some of these servers with ipv6

wireless installation

I would like to install OpenBSD wirelessly, but my card requires additional firmware (iwn) that is not included in the installer. Is there a way to overcome this obstacle?

Re: Thinkpad T430

On 10/30/2018 11:51 AM, leroy jordan wrote: Hello, I have a question about the config, A. and the BIOS setup if any for obsd6.4, please point me in the right direction. Also, is it possible to activate Sim, as I don't trust public Wi-Fi. Thank you very much Leroy Jordan I'm running a

OpenBSD site

I was wondering how you maintain and update such high quality content in OpenBSD's site. Do you manually edit html files, use a cms, or something else? I am asking to shamelessly copy your best practices. ;-) Thanks, Nick

Re: Dell PowerEdge R410 not booting 6.4

Why are so many people lining up to die on the "One big root partition" hill?  Partition your disks for fuck's sake, or if you are too lazy to do that, just let the installer do it for you.  And, no, it doesn't "just work", it doesn't, it just hasn't broken yet. Also, both install.i386 and

Re: 6.4 - Unable to boot after successfully installed

hing -- Sent from: http://openbsd-archive.7691.n7.nabble.com/openbsd-user-misc-f3.html Let me guess, you built your system using just one big root partition instead of actually partitioning your disks or using the defaults?

Re: Cannot mount install.fs disk image to create custom auto_install.conf based USB flash drive

On 11/11/2018 1:28 PM, Andrew Lemin wrote: Hi list, I really need some help mounting an install.fs disk image, and hope someone can help :) I have been trying and failing to create an auto-installing USB flash drive for OpenBSD. All of the below steps are being performed using an existing

Re: spamd and google smtp ips

On 11/4/2018 3:06 PM, Mik J wrote: Thank you Peter for this opinion. Misc User, these gmail, live, yahoo spams you're talking about are really comming from IP addresses that belong to them ? Because on my side it seems it's not the case. In my greylist right now I have rosaronald70s

Re: spamd and google smtp ips

On 11/4/2018 2:25 PM, Mik J wrote: Hello Peter, Thank you for this article. Do you know why, and particularly Microsoft, use very random IPs to send mails. In that way, they make greylisting not as reliable as it should be. We could all use greylisting if google or microsoft would use the

Re: Missing LVM (Logical Volume Manager)

On 11/18/2018 2:54 AM, Stuart Henderson wrote: On 2018-11-17, Misc User wrote: I concur, software raid is a bug, not a feature, especially since if you truly need RAID, hardware cards are fairly cheap. Never had a RAID controller die? I've had plenty die, but the number of HW raid chips

Re: Experiences with single mode fibre on OpenBSD ?

On 1/2/2019 12:12 PM, Rachel Roch wrote: Hi, I see the man pages mention the odd SM fibre NIC, which is a good start. However I could do with some real-world feedback from people in terms of the SM NICs they're using and any other experiences with SM on OpenBSD. Thanks ! Rachel There

Re: Advice on Security Cameras

On 1/1/2019 9:46 AM, Elias M. Mariani wrote: Hi list, I'm thinking in installing some cameras in my private home, I have been looking for solutions, my concern is that I wish to be able to look the videos from outside the house and I'm a little paranoid about the quality of the software that the

Re: mount_ffs Permission denied as root

On 1/2/2019 4:21 PM, myml...@gmx.com wrote: On 1/1/19 10:02 PM, Philip Guenther wrote: On Tue, Jan 1, 2019 at 6:27 PM myml...@gmx.com mailto:myml...@gmx.com>> wrote:     I just did a new install of current AMD64 from the 12/31/2018     snapshot     and having some

Re: vultr

On 1/5/2019 2:22 PM, ed...@pettijohn-web.com wrote: I was thinking about spinning up a new instance on vultr to play with. They have an option to install OBSD 6.3/4. Has anyone tried these? I attempted the FBSD one in the past, but the default install was all whacked out and I had to start over

Re: Where can I find X server's core files?

On 1/16/2019 12:44 PM, Leonid Bobrov wrote: X server crashes and I can't find its core file for debugging purposes. #find / -name '*.core'

Re: setup authoritative DNS for myself with nsd + unbound

On 1/18/2019 11:10 AM, Kaya Saman wrote: It really depends on what you want/need. If you would like to host your own DNS servers, then multi location is a good idea: Example: Master NS1 in LA and Slave NS2 in Miami. I have no idea about GoDiddy but my US based domain hosting company

Re: syspatch, relink and kernel version/date

I can't confirm, but I think I noticed this on a box that was using the MP kernel even though it was an SP machine. On Thu, Dec 20, 2018 at 12:14:14PM +0200, Kapetanakis Giannis wrote: > Hi, > > I'm a bit confused about syspatch and kernel updates. One of machines after > latest syspatch (009)

Re: Thinkpad T430 random power off while sleeping

On 12/4/2018 2:12 PM, Charles A Daniels wrote: Closing the lid on the T430 causes OpenBSD to suspend, as per my setting for machdep.lidaction=1. This usually works as expected, but occasionally I take my laptop out of my bag to find it sitting on the xenodm login screen, not suspended, with the

Re: With all this CPU/hardware mess, any advice on what to use for an organization?

On 11/20/2018 8:43 AM, Chris Bennett wrote: I am almost certainly going to be replacing with a new server for an organization I am a member of. With all of this mess with Meltdown, Spectre, insecure motherboard chips,etc. I am pretty clueless on exactly what is going to be a secure set of server

Re: Supermicro X7SPA-HF D510 and OpenBSD

On 11/22/2018 6:13 AM, Stuart Henderson wrote: On 2018-11-22, Radek wrote: Hello, does anybody run OpenBSD 6.3/amd64 or 6.4/amd64 on SUPERMICRO X7SPA-HF D510? Does it work well together? I need to build a backup server (rsync only) with 2-3x 4TB HDD, 3U/4U Rack case for better cooling. RAID

Re: With all this CPU/hardware mess, any advice on what to use for an organization?

On 11/22/2018 12:56 PM, Chris Bennett wrote: On Thu, Nov 22, 2018 at 09:55:35AM -0600, Boris Goldberg wrote: Hello Chris, There is something extremely weird going on around lately. People are easily take offense where no offense where intended (and hard to find anyway). Nick was just

Re: Missing LVM (Logical Volume Manager)

On 11/17/2018 10:53 AM, Predrag Punosevac wrote: On Sat, Nov 17, 2018 at 01:35:05AM +0100, Willi Rauffer wrote: Hello, we want to make one logical volume out of several physical volumes, but there is no \ LVM (Logical Volume Manager) in OpenBSD! Will there be a LVM in OpenBSD in the future?

Re: Blocking "shodan.io" - What are my options?

On 1/8/2019 3:16 PM, Aaron Mason wrote: On Sat, Jan 5, 2019 at 5:46 AM Misc User wrote: On 1/3/2019 11:20 PM, Radek wrote: A little ncat, sed, pfctl, and a dash of cron are able to do the job just fine. cron is just there to start the ncat processes at boot and run an hourly script to do

Re: vultr

On Mon, Jan 07, 2019 at 08:44:03AM -0500, Nick Holland wrote: > Use their install ONLY to put your own bsd.rd in root (everyone seems to > obsess over loading an ISO. Who cares? Just use a -current bsd.rd!), > boot off that, reinstall exactly as you want it. The Vultr console > works great on

Re: Blocking "shodan.io" - What are my options?

On 1/3/2019 11:20 PM, Radek wrote: A little ncat, sed, pfctl, and a dash of cron are able to do the job just fine. cron is just there to start the ncat processes at boot and run an hourly script to do a pfctl -T expire 86400 to keep the table clean of old attackers. Sounds good. Could you

Re: Blocking "shodan.io" - What are my options?

On 1/3/2019 3:06 PM, Jordan Geoghegan wrote: Hello, I wrote a small script called 'pf-badhost' to block shodan and other annoyances via pf firewall. Check out www.geoghegan.ca/pf-badhost.html to see the script. pf-badhost also blocks ssh bruteforcers and other annoyances by loading a list

Re: trackpad reversed scrolling broken on -current

On Mon, Mar 25, 2019 at 10:53:08PM +0100, Ulf Brosziewski wrote: > You can make that permanent with an entry in wsconsctl.conf. However, > please note that the "param" field is for debugging and development, > there are no guarantees about its future. Thanks yet again, Ulf. For long term plans,

trackpad reversed scrolling broken on -current

Hello all - On the latest snap of -current, my reversed trackpad scrolling seems to have broken. My xorg.conf is as follows: Section "InputClass" Identifier "ws pointer" MatchIsPointer "true" Option "AccelerationProfile" "2" Option "AccelerationNumerator" "5" Option

Re: The su manual doesn't mention use root account by default

On 6/13/2019 9:42 AM, Adam Thompson wrote: On 2019-06-12 03:55, Ingo Schwarze wrote: During initial system installation & deployment, before doas is configured, and assuming you haven't [yet] added your SSH keys to ~root/.ssh/allowed_keys, it's quite impossible to avoid using su. (AFAIK.  If

Re: Ansible install Re: Reboot and re-link

On 6/21/2019 11:02 AM, Frank Beuth wrote: On Wed, Jun 19, 2019 at 11:29:32PM +0200, Maxim Bourmistrov wrote: Installing via NOT RECOMMENDED WAY(following upgrade65.html) - scripting on steroides (ansible). I don't want to re-open the hostilities, but installing OpenBSD via Ansible is very

Re: Ansible install Re: Reboot and re-link

On 6/21/2019 1:08 PM, Frank Beuth wrote: On Fri, Jun 21, 2019 at 12:36:22PM -0700, Misc User wrote: I use PXE + install.conf + siteXX.tgz + siteXX-%hostname%.tgz for my installs.  I also have an rc.firsttime to download and install the required packages. Thanks, but neither this nor

Re: single user question

On 5/9/2019 9:21 AM, James Huddle wrote: If the following questions trigger a sense of road rage, you may safely assume they are not directed to you. Is anyone running in single-user mode regularly? Is anyone running a web server, for instance, in single-user mode? Many thanks in advance.

Re: single user question

On 5/10/2019 1:28 AM, cho...@jtan.com wrote: Misc User writes: It is theoretically possible to do that, but you'd have to do -a lot- of work to get it to do so. It'd be much easier finding a proper way to accomplish what you want without running single-user. I wouldn't recommend using single

Re: Secondary monitor switches off when inteldrm switches on

On 7/2/2019 2:45 PM, Henry Jensen wrote: Greetings, to keep it short: - older Fujitsu Esprimo PC, Core2Duo, Integrated Intel Graphics - 2 monitors, connected at VGA and DVI - during installation both monitors were on all the time. - Computer switched on, both displays on, boot begins -

Re: OT: hardware war with manufacturers (espionage claims)

On 7/2/2019 12:43 AM, John Long wrote: On Tue, 2 Jul 2019 10:07:59 +0300 Mihai Popescu wrote: Hello, I keep finding articles about some government bans against some hardware manufacturers related to some backdoor for espionage. I know this is an old talk. Most China manufacturers are under

using webcam with webex

Greetings I can't use my webcam while hosting a webex session from Chrome. Specifically, when i start my session the webcam turns on for an instant and then shuts down. When i try to start the video stream again the webcam flickers on and off a couple of times and then i get a message from

Re: umount at boot possible?

Thanks for the prompt reply. I will do what you suggested and report back. > Sent: Tuesday, February 02, 2021 at 2:38 PM > From: "Paul de Weerd" > To: "misc nick" > Cc: "misc" > Subject: Re: umount at boot possible? > > On Tue, Feb 02, 2

umount at boot possible?

Hello I have a separate disk that i was mounting as a nfs partition. That disk crashed (it was very old). Now that OpenBSD 6.7/i386 release system cannot boot because it can't mount the disk. Is it possible to umount the partition or somehow skip mounting it at boot time and continue booting

Re: umount at boot possible?

It worked exactly as you explained it and i learned how to use ed on the way. A million thanks Paul! > Sent: Tuesday, February 02, 2021 at 2:38 PM > From: "Paul de Weerd" > To: "misc nick" > Cc: "misc" > Subject: Re: umount at boot possible? >

Re: Please explain this disk (?) error

On Fri, 2008-01-11 at 16:05:49 +0100, jere proclaimed... I suddenly got this error (while surfing the web in default Gnome session) on OpenBSD 4.2 release (patched up to patch_004, including it). Is it a disk error or something else ? Please help. This is just a soft disk error; you may

Re: brute force voip QoS

My bandwidth is very very limited. Not more than 140 Kbps on both sides at any time. I use G729 as a codec in order to reduce consumption. Use the pf.conf below, when VoIP is the only traffic, the quality of the calls is excelent with no voice cutting at all. Now if I start a download I

Re: low-MHz server

You said you live rurally - in that case, perhaps you should build/buy a small quality (read as: won't get wet) shed, have your systems there and run some outdoor-rated CAT5e from it to your house. That should allow you to use KVM extenders, serial, etc. Remember the inverse-square law for RF.

Re: brute force voip QoS

To: Stuart Henderson [EMAIL PROTECTED] Subject: Re: brute force voip QoS pass out queue (std_out,lowdelay) here, you place ACKs from downloads at a higher priority than your voip calls. this is unlikely to be what you want with priq over a 140Kb/s link.. According to pf.conf, that also

Blackhole / reject routes

Currently I'm blackholing and rejecting some traffic with route add -reject/-blackhole address 127.0.0.1; this works fine, but bounces all the rejected/blackholed traffic to the loopback interface. This behaviour is.. annoying, and possibly ineffecient. I'm probably searching for a

Redirect to ftp-proxy when client is on localhost?

Hello, I like the 3.9 ftp-proxy so much I'm thinking wouldn't it be nice if, in addition to the clients inside my lan, ftp connections from this very openbsd machine went through it also. Is this just a silly idea? Is this possible, trivial, tricky? Done before? I found nada on google, but a

OpenBGPD IPv6 problems

I'm running OpenBSD 4.2 on SPARC64. I have managed to get a simple BGP setup working on IPv4, however the IPv6 version of the same setup fails. A BGP session is established in both cases and peer B claims to be announcing what it should be announcing, yet in the IPv6 version peer A does not add

Re: ssh-keygen not reading stdin as expected

Option -f filename, Filename of the key file, seems to be the right option and '-' is the usual way of indicating stdin. So? Just use /dev/stdin.

Re: Any offshore OpenBSD hosting?

But if ISP's must have blackbox on their interfaces (hello FBI),than you can't trust your local hosting company even if they are very friendly ;-) Cisco prefers a blueish-black color. Juniper boxes tend to be white and blue. In most Western countries there are many ISPs; if many of them were

Re: Hardware recommendation for firewalls (more than 4 NICs)

On Fri, Aug 08, 2008 at 06:54:05PM -0500, patric conant wrote: You strongly overestimate the value of your comments (3 cents), it seems like there are many places more appropriate than this one for you to suggest middle-of-the-road hardware running a proprietary OS that has among the worst

Re: Hardware recommendation for firewalls (more than 4 NICs)

So you expect additional reliability from stacking ebayed cisco equipment with OpenBSD bridges behind them, as the original poster mentioned, and cost effectiveness by buying used cisco equipment and paying for relicensing so that you can get updates, compared to setting up OpenBSD boxes as

Re: Packet Filter: how to keep device names on hardware failure?

Question: How can I make sure that em2 doesn't become em0 if my dual-port NIC dies? This would be fatal for my firewall setup. At least the antispoof rules _must_ be bound to the network devices. Yep, this is an ugly problem. You could have a shellscript at boot scan ifconfig output and

Re: Sun M-class hardware denial of service

My understanding of this issue is that it is only likely to be caused by an exploited domain, or running OpenBSD. Both should be a rare event (OpenBSD isn't really production-ready on this hardware). It's acceptable in the majority of cases to just let the domain be unused. It's a bug, it's

Re: Stuck with Dualdisplay xorg

This is not an OpenBSD question but since you ask, and I toyed with this just yesterday: To make dual head work with my ATI Radeon 9000 (on a T41) I need only one line in the Device section:

Re: Stuck with Dualdisplay xorg

This is not an OpenBSD question but since you asked and I toyed with this just yesterday... To make dual head work with my ATI Radeon 9000 (on a T41) I need only one line in the Device section: Option CRT2Position RightOf #(or LeftOf) And as my screens are different sizes I also added

Re: new home box for secure data storage

On Thu, 2008-10-30 at 10:45:20 -0400, Douglas A. Tutty proclaimed... Yes. Then keep it off a computer. Otherwise look for solutions that have already been presented...because they work. - Eric

Re: OpenLDAP w/o bdb okay?

Henning Brauer(lists-open...@bsws.de)@2009.01.06 14:42:09 +0100: I am not aware of any. Lack of options doesn't make openldap better. There is an option for people who have very basic LDAP needs - tinyldap from fefe.de. It's high quality but lacks many features at the time.

kernel hiccups with two OpenVPN tunnels

So a few releases ago, I found that if I had OpenVPN running on an OpenBSD box as a hub, and I did a large transfer from one client to another, the OpenBSD box would occasionally kernel panic - something about mbufs, I can pull the kernel stack traces up if desired. The hosting company said they

miscellaneous unofficial OpenBSD ports

http://www.subspacefield.org/~travis/OpenBSD/ Need to be updated - last update was for 4.1 -- A Weapon of Mass Construction My emails do not have attachments; it's a digital signature that your mail program doesn't understand. | http://www.subspacefield.org/~travis/ If you are a spammer, please

host(1) oddities

Hey all, I ran host www.google.com on a new OpenBSD 4.8 install and got this: 13:50:28.132052 127.0.0.1.41209 127.0.0.1.48830: udp 31 13:50:28.132081 127.0.0.1 127.0.0.1: icmp: 127.0.0.1 udp port 48830 unreachable 13:50:29.133552 ::1.38033 ::1.48830: udp 31 13:50:29.133577 ::1 ::1: icmp6:

Re: equivalent of Linux mount -o bind

On Fri, Jan 28, 2011 at 03:52:53PM -0800, Travis H. wrote: So I'm curious if there's something in OpenBSD that's similar to the mount -o bind /dir1 /dir2 to make dir1 appear where dir2 is. For those who asked, one sample use is for something like this: Starting with the 2.4-series Linux

openvpn openbsd = kernel lockups

Hey there, I have been asked to help a friend whose system is used as a VPN hub. It used to be an older OpenBSD, possibly 4.5 or 4.6, and he got many kernel panics around some buffer routines (possibly mbuf) that led to disk corruption. It's now OpenBSD 4.8 amd64, and if the system has transit

LibreSSL Official T-shirts

Hi everyone, Some new awesome LibreSSL T-shirts are available to help fund developments. You can see them on https://www.openbsdstore.com. We’re running a small pre-order for about 2 weeks. If you have any questions please email us off list. Yes, these are official products with funds

Re: OpenBSD 5.7 Released

OpenBSD Store Misc wrote: We are very sorry, but there has been a production problem with 5.7 CDs - this is NOT a problem with the 5.7 release, but a manufacturing problem in that one of the master CD's was damaged in transit to the production facility, and this has resulted in a delay

Re: OpenBSD 5.7 Released

Ralph Siegler wrote: On Fri, 01 May 2015 00:06:46 +0200, Stefan Sperling wrote: May 1, 2015. We are pleased to announce the official release of OpenBSD 5.7. This is our 37th release on CD-ROM strange, this time round the pre-ordered (hours after announcement) CD's haven't shown up by now,

<    1   2   3   >