Re: [External] : Re: pf route-to issues

2021-01-24 Thread Sven F.
On Sun, Jan 24, 2021 at 11:51 PM David Gwynne wrote: > On Mon, Jan 25, 2021 at 02:50:12AM +0100, Alexandr Nedvedicky wrote: > > Hello, > > > > > > > > ok. i don't know how to split up the rest of the change though. > > > > > > here's an updated diff that includes the rest of the kernel changes

Re: [External] : Re: pf route-to issues

2021-01-24 Thread David Gwynne
On Mon, Jan 25, 2021 at 02:50:12AM +0100, Alexandr Nedvedicky wrote: > Hello, > > > > > ok. i don't know how to split up the rest of the change though. > > > > here's an updated diff that includes the rest of the kernel changes and > > the pfctl and pf.conf tweaks. > > > > it's probably useful

Re: grep: add --null flag

2021-01-24 Thread Ted Unangst
On 2021-01-25, Sebastian Benoit wrote: > Sebastian Benoit(be...@openbsd.org) on 2021.01.25 00:27:05 +0100: > > Theo de Raadt(dera...@openbsd.org) on 2021.01.24 16:01:32 -0700: > > > Stuart Henderson wrote: > > > > > > > On 2021/01/24 12:10, Theo de Raadt wrote: > > > > > I completely despise

Re: [External] : Re: pf route-to issues

2021-01-24 Thread Alexandr Nedvedicky
Hello, > > ok. i don't know how to split up the rest of the change though. > > here's an updated diff that includes the rest of the kernel changes and > the pfctl and pf.conf tweaks. > > it's probably useful for me to try and explain at a high level what > i think the semantics should be,

Re: [External] : Re: tell pfctl(8) route-to and reply-to accept next-hop only

2021-01-24 Thread David Gwynne
> On 25 Jan 2021, at 10:43, Alexandr Nedvedicky > wrote: > > hello, > > On Fri, Jan 22, 2021 at 05:32:47PM +1000, David Gwynne wrote: >> I tried this diff, and it broke the ability to use dynamic addresses. >> ie, the following rules should work: >> >> pass in on gre52 inet proto icmp

Re: [External] : Re: tell pfctl(8) route-to and reply-to accept next-hop only

2021-01-24 Thread Alexandr Nedvedicky
hello, On Fri, Jan 22, 2021 at 05:32:47PM +1000, David Gwynne wrote: > I tried this diff, and it broke the ability to use dynamic addresses. > ie, the following rules should work: > > pass in on gre52 inet proto icmp route-to (gre49:peer) > pass in on vmx0 inet proto icmp route-to (gre:peer)

Re: grep: add --null flag

2021-01-24 Thread Sebastian Benoit
Sebastian Benoit(be...@openbsd.org) on 2021.01.25 00:27:05 +0100: > Theo de Raadt(dera...@openbsd.org) on 2021.01.24 16:01:32 -0700: > > Stuart Henderson wrote: > > > > > On 2021/01/24 12:10, Theo de Raadt wrote: > > > > I completely despise that the option is called "--null". > > > > > > > >

Re: grep: add --null flag

2021-01-24 Thread Sebastian Benoit
Theo de Raadt(dera...@openbsd.org) on 2021.01.24 16:01:32 -0700: > Stuart Henderson wrote: > > > On 2021/01/24 12:10, Theo de Raadt wrote: > > > I completely despise that the option is called "--null". > > > > > > Someone was a complete idiot. > > > > gnu grep has both --null and -z for this

Re: grep: add --null flag

2021-01-24 Thread Theo de Raadt
Stuart Henderson wrote: > On 2021/01/24 12:10, Theo de Raadt wrote: > > I completely despise that the option is called "--null". > > > > Someone was a complete idiot. > > gnu grep has both --null and -z for this (why do they do that?!). > If it's added as --null it should be added as -z too. >

Re: grep: add --null flag

2021-01-24 Thread Stuart Henderson
On 2021/01/24 12:10, Theo de Raadt wrote: > I completely despise that the option is called "--null". > > Someone was a complete idiot. gnu grep has both --null and -z for this (why do they do that?!). If it's added as --null it should be added as -z too. Looking at Debian codesearch most things

Re: [PATCH v3 (resend)] tee: Add -q, --quiet, --silent option to not write to stdout

2021-01-24 Thread Otto Moerbeek
On Sun, Jan 24, 2021 at 01:01:45PM -0700, Alex Henrie wrote: > On Sun, Jan 24, 2021 at 10:51 AM Otto Moerbeek wrote: > > > > Please stop pushing your diff to this list. So far nobody showed any > > interest. > > I am definitely interested. Bernhard Voelker seemed to express > interest as well,

Re: [PATCH v3 (resend)] tee: Add -q, --quiet, --silent option to not write to stdout

2021-01-24 Thread Alex Henrie
On Sun, Jan 24, 2021 at 10:51 AM Otto Moerbeek wrote: > > Please stop pushing your diff to this list. So far nobody showed any > interest. I am definitely interested. Bernhard Voelker seemed to express interest as well, conditional on -q being added to POSIX first.[1] Also, a --quiet flag was

Re: grep: add --null flag

2021-01-24 Thread Theo de Raadt
I completely despise that the option is called "--null". Someone was a complete idiot. Ted Unangst wrote: > On 2021-01-22, Omar Polo wrote: > > > > quasi three-weekly ping. > > > > Is this such a bad idea? > > This seems reasonable. I think there's no need to change print line calls >

Re: grep: add --null flag

2021-01-24 Thread Ted Unangst
On 2021-01-22, Omar Polo wrote: > > quasi three-weekly ping. > > Is this such a bad idea? This seems reasonable. I think there's no need to change print line calls though, just patch the implementation once. > > (TBH: I have still to look at how to write a regression test for this) > > Omar

Re: unwind: silence "udp connect failed" errors

2021-01-24 Thread Otto Moerbeek
On Sun, Jan 24, 2021 at 07:24:07PM +0100, Florian Obser wrote: > On Sun, Jan 24, 2021 at 01:06:31PM +0100, Klemens Nanni wrote: > > On Sun, Jan 24, 2021 at 12:52:50PM +0100, Theo Buehler wrote: > > > Probably better to sync first with the corresponding unbound commit > > >

Re: route sourceaddr: simplify code & get out of ART

2021-01-24 Thread Martin Pieuchot
On 23/01/21(Sat) 21:59, Vitaliy Makkoveev wrote: > Hello. > > According the code `ifaddr’ struct has `ifa_refcnt’ field. Also it seems `ifa’ > could exist while corresponding `ifp’ was destroyed. Is this true for `rt’ > case? Should `ifa_refcnt' be bumped while you return `ifa’? What is stored

Re: unwind: silence "udp connect failed" errors

2021-01-24 Thread Florian Obser
On Sun, Jan 24, 2021 at 01:06:31PM +0100, Klemens Nanni wrote: > On Sun, Jan 24, 2021 at 12:52:50PM +0100, Theo Buehler wrote: > > Probably better to sync first with the corresponding unbound commit > > https://cvsweb.openbsd.org/src/usr.sbin/unbound/services/outside_network.c#rev1.21 > > then

Re: [PATCH v3 (resend)] tee: Add -q, --quiet, --silent option to not write to stdout

2021-01-24 Thread Theo de Raadt
Otto Moerbeek wrote: > On Sun, Jan 24, 2021 at 01:18:46PM +0100, Alejandro Colomar wrote: > > > This is useful for using tee to just write to a file, > > at the end of a pipeline, > > without having to redirect to /dev/null > > > > Example: > > > > echo 'foo' | sudo tee -q /etc/foo; > > > >

Re: [PATCH v3 (resend)] tee: Add -q, --quiet, --silent option to not write to stdout

2021-01-24 Thread Otto Moerbeek
On Sun, Jan 24, 2021 at 01:18:46PM +0100, Alejandro Colomar wrote: > This is useful for using tee to just write to a file, > at the end of a pipeline, > without having to redirect to /dev/null > > Example: > > echo 'foo' | sudo tee -q /etc/foo; > > is equivalent to the old (and ugly) You keep

Re: unwind(8): Implement DNS64 synthesis.

2021-01-24 Thread Klemens Nanni
On Sun, Jan 24, 2021 at 04:55:25PM +0100, Florian Obser wrote: > Are you sure you are running with the config you think you are running > with? I can not reproduce and from the logging, especially the > check_resolver_done bits it very much looks like you are running > without any config at all.

Re: [PATCH v3 (resend)] tee: Add -q, --quiet, --silent option to not write to stdout

2021-01-24 Thread Alejandro Colomar (man-pages)
On 1/24/21 5:11 PM, Teran McKinney wrote: > On 2021-01-24 13-18-46, Alejandro Colomar wrote: >> This is useful for using tee to just write to a file, >> at the end of a pipeline, >> without having to redirect to /dev/null >> >> Example: >> >> echo 'foo' | sudo tee -q /etc/foo; >> >> is

Re: unwind(8): Implement DNS64 synthesis.

2021-01-24 Thread Florian Obser
On Sun, Jan 24, 2021 at 11:12:49AM +0100, Klemens Nanni wrote: > What I'm seeing here is that unwind forwards the very first query to my > gateway (learned via SLAAC), that one succeeds, but all successive > queries of A only domains do not work... that's what makes the query in > my previous

Re: grep: add --null flag

2021-01-24 Thread Sebastian Benoit
Hi, the diff looks good, i would change the wording in the manpage a bit, see below. Anyone else who wants to ok it? /Benno Omar Polo(o...@omarpolo.com) on 2021.01.22 12:19:08 +0100: > > quasi three-weekly ping. > > Is this such a bad idea? > > (TBH: I have still to look at how to write a

snmpd: remove print_{verbose,debug}

2021-01-24 Thread Martijn van Duren
Nothing seems to use them and I see no reason in the forseeable future to start using them. OK? martijn@ Index: snmpd.h === RCS file: /cvs/src/usr.sbin/snmpd/snmpd.h,v retrieving revision 1.91 diff -u -p -r1.91 snmpd.h --- snmpd.h

[PATCH v3 (resend)] tee: Add -q, --quiet, --silent option to not write to stdout

2021-01-24 Thread Alejandro Colomar
This is useful for using tee to just write to a file, at the end of a pipeline, without having to redirect to /dev/null Example: echo 'foo' | sudo tee -q /etc/foo; is equivalent to the old (and ugly) echo 'foo' | sudo tee /etc/foo >/dev/null; Signed-off-by: Alejandro Colomar --- Resend as

Re: unwind: silence "udp connect failed" errors

2021-01-24 Thread Klemens Nanni
On Sun, Jan 24, 2021 at 12:52:50PM +0100, Theo Buehler wrote: > Probably better to sync first with the corresponding unbound commit > https://cvsweb.openbsd.org/src/usr.sbin/unbound/services/outside_network.c#rev1.21 > then adjust udp_connect_needs_log() as needed. Good call, thanks. Here's the

Re: unwind: silence "udp connect failed" errors

2021-01-24 Thread Theo Buehler
On Sun, Jan 24, 2021 at 12:44:39PM +0100, Klemens Nanni wrote: > unwind/libunbound always tries to connect to nameservers using both > address families, even if only one is configured on the local machine. > > So on IPv6 only boxes for example syslog gets spammed with these > > Jan 24 12:23:06

unwind: silence "udp connect failed" errors

2021-01-24 Thread Klemens Nanni
unwind/libunbound always tries to connect to nameservers using both address families, even if only one is configured on the local machine. So on IPv6 only boxes for example syslog gets spammed with these Jan 24 12:23:06 eru unwind[38261]: [38261:0] error: udp connect failed: Can't assign

some fvwmrc defautlts changes

2021-01-24 Thread Matthieu Herrb
Hi, The patch below aims a making the default system.fvwmrc a bit less obsolete. - remove xman (was removed from xenocara base) - replace rlogin with ssh in modules - make the fg color for ssh / telnet prompts black so that's it's readable. Comments? oks? Index: sample.fvwmrc/system.fvwmrc

Re: unwind(8): Implement DNS64 synthesis.

2021-01-24 Thread Klemens Nanni
On Sun, Jan 24, 2021 at 10:14:22AM +0100, Florian Obser wrote: > On Sun, Jan 24, 2021 at 09:35:26AM +0100, Klemens Nanni wrote: > > On Thu, Jan 21, 2021 at 05:16:24PM +0100, Florian Obser wrote: > > > When unwind(8) learns new autoconf resolvers (from dhcp or router > > > advertisements) it checks

Re: Wireguard: can't remove multiple peers at once.

2021-01-24 Thread Richard Procter
Hi, > On 14/01/2021, at 8:33 PM, YASUOKA Masahiko wrote: > > Hi, > > On Thu, 14 Jan 2021 08:54:36 +0900 > Yuichiro NAITO wrote: >> Does anybody please review my code? >> >> Yasuoka-san is my coleague of my work. >> So, he is interested in this topic. That’s why I CCed this mail. >> I don’t

Re: unwind(8): Implement DNS64 synthesis.

2021-01-24 Thread Florian Obser
On Sun, Jan 24, 2021 at 09:35:26AM +0100, Klemens Nanni wrote: > On Thu, Jan 21, 2021 at 05:16:24PM +0100, Florian Obser wrote: > > When unwind(8) learns new autoconf resolvers (from dhcp or router > > advertisements) it checks if a DNS64 is present in this network > > location and tries to

Re: unwind(8): Implement DNS64 synthesis.

2021-01-24 Thread Klemens Nanni
On Thu, Jan 21, 2021 at 05:16:24PM +0100, Florian Obser wrote: > When unwind(8) learns new autoconf resolvers (from dhcp or router > advertisements) it checks if a DNS64 is present in this network > location and tries to recover the IPv6 prefix used according to > RFC7050. I noticed that unwind