smtpd filters: accept bypass in commit stage

2020-08-24 Thread Lucas
Hello tech@, I keep getting a syntax error with the following seemingly correct line: filter "dkimsign-override" phase commit \ match mail-from bypass The problem (`/etc/mail/smtpd.conf:20: syntax error`) arises from smtpd.conf's grammar only allowing

Re: Improve semantics and punctuation in ifconfig.8

2020-08-24 Thread Jason McIntyre
On Sun, Aug 23, 2020 at 10:03:54PM +0100, Jason McIntyre wrote: > On Sat, Aug 22, 2020 at 02:18:48PM -0700, Evan Silberman wrote: > > Not to provoke a deep philosophical debate about the difference between > > Ql, Cm, and Sy, but surely Em isn't the best choice here. A couple other > > nits that

Re: unbound(8): disable explicit port randomisation

2020-08-24 Thread Theo de Raadt
i've discusssed this offline with florian (many times, over the years) It is quite possible there will be subtle behaviour changes, but in a system configuration where "other programs on the machine are using also ports quickly", we both expect unbound will behave *better* using kernel support

Re: Refine IPv6 source address selection

2020-08-24 Thread Florian Obser
On Mon, Aug 24, 2020 at 07:06:26PM +0200, Denis Fondras wrote: > On Mon, Aug 24, 2020 at 06:42:02PM +0200, Florian Obser wrote: > > To clarify, this is independent of my recent work in > > in6_ifawithscope(), -ifa did not work with the old code, either. > > > > Of course ! Sorry if my message

Re: unbound(8): disable explicit port randomisation

2020-08-24 Thread Todd C . Miller
On Mon, 24 Aug 2020 15:39:09 +0200, Florian Obser wrote: > With the update sthen@ just put in we can enable this: > > --disable-explicit-port-randomisation > disable explicit source port randomisation and rely > on the kernel to provide random

Re: Make pipex more common for pppac and pppx

2020-08-24 Thread Vitaliy Makkoveev
On Thu, Aug 20, 2020 at 02:32:57PM +0900, YASUOKA Masahiko wrote: Hello. I pointed some comments inline. > Hi, > > Thank you for your comments. > > On Mon, 17 Aug 2020 00:15:08 +0300 > Vitaliy Makkoveev wrote: > > I like your idea to kill `pipex_iface_context'. I had trying to keep it > > by

Re: Refine IPv6 source address selection

2020-08-24 Thread Denis Fondras
On Mon, Aug 24, 2020 at 06:42:02PM +0200, Florian Obser wrote: > To clarify, this is independent of my recent work in > in6_ifawithscope(), -ifa did not work with the old code, either. > Of course ! Sorry if my message led to think you were responsible for it.

Re: Refine IPv6 source address selection

2020-08-24 Thread Florian Obser
On Mon, Aug 24, 2020 at 05:34:09PM +0200, Denis Fondras wrote: > While working on source selection, I noticed the IPv6 source was not honored > when set from route(8) with -ifa. > > After discussing with florian@, here is a proposed change. It chooses the > source > address associated with the

Refine IPv6 source address selection

2020-08-24 Thread Denis Fondras
While working on source selection, I noticed the IPv6 source was not honored when set from route(8) with -ifa. After discussing with florian@, here is a proposed change. It chooses the source address associated with the route (hence honoring -ifa) instead of the first address of the output

unbound(8): disable explicit port randomisation

2020-08-24 Thread Florian Obser
With the update sthen@ just put in we can enable this: --disable-explicit-port-randomisation disable explicit source port randomisation and rely on the kernel to provide random source ports OK? diff --git Makefile.bsd-wrapper

Re: pf: remove ptr_array from struct pf_ruleset

2020-08-24 Thread Alexandr Nedvedicky
Hello, > > Admins using `once' rules are hopefully aware of this caveat already, > but now the checksum actually indicates out-of-sync rulesets and does > no longer present the same checksum for different rulesets. > > Feedback? OK? > > OK sashan@