Re: rc default PF ruleset too restrictive for DHCPv6

2014-01-19 Thread Brad Smith
On Sun, Jan 19, 2014 at 04:10:21AM +0100, Claudio Jeker wrote: On Sat, Jan 18, 2014 at 09:57:26PM -0500, Brad wrote: On Thu, Jan 09, 2014 at 03:55:44PM -0500, Brad Smith wrote: The default PF ruleset as setup by rc is too restrictive. Have the default ruleset allow for DHCPv6.

Re: rc default PF ruleset too restrictive for DHCPv6

2014-01-19 Thread Kenneth Westerback
*But what is the practical problem being addressed? Is dhcp not functional with the existing default **ruleset?* * Ken* On 19 January 2014 19:39, Brad Smith b...@comstyle.com wrote: On Sun, Jan 19, 2014 at 04:10:21AM +0100, Claudio Jeker wrote: On Sat, Jan 18, 2014 at 09:57:26PM -0500,

Re: rc default PF ruleset too restrictive for DHCPv6

2014-01-19 Thread Henning Brauer
* Kenneth Westerback kwesterb...@gmail.com [2014-01-19 09:56]: *But what is the practical problem being addressed? Is dhcp not functional with the existing default **ruleset?* it's not correct and we rely on dhclient falling back to a new discovery eventually. -- Henning Brauer, h...@bsws.de,

Re: report icmp error drops because of rate limiting

2014-01-19 Thread Mike Belopuhov
On 19 January 2014 12:03, Claudio Jeker cje...@diehard.n-r-g.com wrote: As done in IPv6 land report how many packets are dropped because we hit the rate limiter (net.inet.icmp.errppslimit). On bigger routers it may be needed to tune that value up in case to many packets are dropped. OK? --

slowcgi(8): small wording tweak

2014-01-19 Thread Patrik Lundin
Hello, I just read slowcgi(8) and one of the sentences read a bit strange to me. Anyone agree? Regards, Patrik Lundin Index: slowcgi.8 === RCS file: /cvs/src/usr.sbin/slowcgi/slowcgi.8,v retrieving revision 1.5 diff -u -p -u -r1.5

Get random data very early

2014-01-19 Thread Theo de Raadt
This change allows the arc4random() subsystem to self-initialize from boot-supplied data, upon first call. It uses rs_buf[] to build the chacha context, then permits drawing of up to 1GB of data without entering the difficult reseeding or rekeying codepaths. When other required subsystems are

signed base installs

2014-01-19 Thread Theo de Raadt
I suspect only a few have noticed, so it probably should be mentioned that install/upgrades are also signed now. The documentation isn't written yet because change is ongoing. Here is a rough primer, for one or two usage cases. More install methods will work, but some are not perfect yet. As

Re: signed base installs

2014-01-19 Thread Ray Percival
On Jan 19, 2014, at 8:47, Theo de Raadt dera...@cvs.openbsd.org wrote: I suspect only a few have noticed, so it probably should be mentioned that install/upgrades are also signed now. The documentation isn't written yet because change is ongoing. Here is a rough primer, for one or two

Re: lpd: race condition

2014-01-19 Thread Philip Guenther
On Sun, Jan 19, 2014 at 10:48 AM, Todd C. Miller todd.mil...@courtesan.com wrote: Perhaps something like this? Only compile-tested. Looks good. We also need to fix the 'S' line parsing code in sendit() and printit() in lpd/printjob.c to use unsigned long long when parsing the ino_t instead of

Re: lpd: race condition

2014-01-19 Thread Tobias Stoeckmann
On Mon, Jan 20, 2014 at 10:11:53AM +1300, Philip Guenther wrote: On Sun, Jan 19, 2014 at 10:48 AM, Todd C. Miller todd.mil...@courtesan.com wrote: Perhaps something like this? Only compile-tested. Looks good. We also need to fix the 'S' line parsing code in sendit() and printit() in

Re: ibss and hostap support for urtwn(4)

2014-01-19 Thread Stefan Sperling
On Thu, Jan 16, 2014 at 01:43:22AM +0100, Stefan Sperling wrote: I had almost forgotten that wifi hacking can be fun if it results in something working. Tested between two laptops (hostap) and with Berlin's freifunk network (ibss). Seems to work but I have no idea about long term stability

Re: Get random data very early

2014-01-19 Thread Mike Belopuhov
On 20 January 2014 02:05, Theo de Raadt dera...@cvs.openbsd.org wrote: This change allows the arc4random() subsystem to self-initialize from boot-supplied data, upon first call. It uses rs_buf[] to build the chacha context, then permits drawing of up to 1GB of data without entering the

extent_supply_region_descriptor

2014-01-19 Thread Mark Kettenis
In order to make the sparc64 iommu code mpsafe, I need to make sure the extent manager can be used in an mpsafe manner. The current code isn't really safe since the extent manager needs to allocate region descriptors whenever we do a bus_dmamap_load(). The diff below adds a function to provide

Switch ppb(4) from workq to task

2014-01-19 Thread Mark Kettenis
Currently not able to test this myself. Can somebody verify that hotplug a *real* expresscard device still works? Thanks, Mark Index: ppb.c === RCS file: /home/cvs/src/sys/dev/pci/ppb.c,v retrieving revision 1.56 diff -u -p

More cleanup in radix.c and route.h

2014-01-19 Thread Claudio Jeker
Try to be more consistent in how various variables are setup and named. Also remove a memset that is already happeing because we use PR_ZERO on the allocation. Move to memmove to memcpy because the addrs can not overlap. Make some simple helper functions static __inline and remove one of the