ipsec.conf parsing

2014-03-19 Thread Zé Loff
As far as I can tell, if a commented line on ipsec.conf ends with "\" then the following line will also be considered a comment (if the next line also ends with "\" the commenting is propagated). For example #ike esp from A.A.A.A to C.C.C.C \ ike esp from A.A.A.A to B.B.B.B \ srcid foo.exa

Re: ipsec.conf parsing

2014-03-19 Thread mathieu . blanc
On Wed, Mar 19, 2014 at 10:22:43AM +, Zé Loff wrote: > As far as I can tell, if a commented line on ipsec.conf ends with "\" > then the following line will also be considered a comment (if the next > line also ends with "\" the commenting is propagated). For example > > #ike esp from A.A.A.A

Re: A small package browser

2014-03-19 Thread Thomas Adam
On 19 March 2014 01:56, marst wrote: > Really, nothing out of the ordinary... > > Been working lately on a simple OpenBSD package browser. No extensive > graphics, works from the terminal with navigation similar to vim. I do this > for fun. I find it convenient for exploring existing packages.

Re: OpenBSD email provider

2014-03-19 Thread Stuart Henderson
On 2014-03-18, Giancarlo Razzolini wrote: >But, with a very small ttl on > the dns record (I use 60 seconds), this risk can be reduced. you have more trust in ISP DNS servers honouring TTLs than I do. if you can only get a dynamic IP at home and would

Re: ipsec.conf parsing

2014-03-19 Thread Stuart Henderson
On 2014-03-19, Zé Loff wrote: > As far as I can tell, if a commented line on ipsec.conf ends with "\" > then the following line will also be considered a comment (if the next > line also ends with "\" the commenting is propagated). For example > > #ike esp from A.A.A.A to C.C.C.C \ > ike esp f

Re: obsd pf

2014-03-19 Thread Stuart Henderson
On 2014-03-18, Marko Cupać wrote: > On Tue, 18 Mar 2014 01:15:16 + (UTC) > Stuart Henderson wrote: > >> The ruleset is now traversed in order, changes made in match rules >> are "sticky" and affect rules lower down in the ruleset. More >> predictable, no more "oh this 'nat pass' rule which yo

Re: ipsec.conf parsing

2014-03-19 Thread Jean-Philippe Ouellet
On 3/19/14 6:22 AM, Zé Loff wrote: > As far as I can tell, if a commented line on ipsec.conf ends with "\" > then the following line will also be considered a comment (if the next > line also ends with "\" the commenting is propagated). For example > > #ike esp from A.A.A.A to C.C.C.C \ > ike

Setup a RAID

2014-03-19 Thread Matias Moreno Meringer
Hi! Have a 5.4 currently installed in sd0 and want to build a softraid1 to use the disk in conjunction with a secondary sd1. I know a way to build the raid at installation point, but not sure how to do it after the installation without reinstalling. Is possible? Thanks, Matias.-

Re: Setup a RAID

2014-03-19 Thread Nick Holland
On 03/19/14 09:30, Matias Moreno Meringer wrote: > Hi! > > Have a 5.4 currently installed in sd0 and want to build a softraid1 to use > the disk in conjunction with a secondary sd1. > > I know a way to build the raid at installation point, but not sure how to > do it after the installation withou

Re: Setup a RAID

2014-03-19 Thread Josh Grosse
On 2014-03-19 09:31, Matias Moreno Meringer wrote: Hi! Have a 5.4 currently installed in sd0 and want to build a softraid1 to use the disk in conjunction with a secondary sd1. I know a way to build the raid at installation point, but not sure how to do it after the installation without rein

Re: Setup a RAID

2014-03-19 Thread Matias Moreno Meringer
On Wed, Mar 19, 2014 at 10:48 AM, Josh Grosse wrote: > On 2014-03-19 09:31, Matias Moreno Meringer wrote: > >> Hi! >> >> Have a 5.4 currently installed in sd0 and want to build a softraid1 to use >> the disk in conjunction with a secondary sd1. >> >> I know a way to build the raid at installation

Trouble with connect to www.aeroflot.ru

2014-03-19 Thread Leonov Aleksey
Hi folks, I can`t connect to www.aeroflot.ru from lynx on openbsd 5.4. I can connect from gentoo, windows. Anybody can connect to wwe.aeroflot.ru from openbsd 5.4? -- Aleksey Leonov

Re: Trouble with connect to www.aeroflot.ru

2014-03-19 Thread Marcus MERIGHI
gimliandcomp...@gmail.com (Leonov Aleksey), 2014.03.19 (Wed) 15:07 (CET): > I can`t connect to www.aeroflot.ru from lynx on openbsd 5.4. I can > connect from gentoo, windows. Anybody can connect to wwe.aeroflot.ru > from openbsd 5.4? OpenBSD 5.5-beta (GENERIC.MP) #284: Mon Feb 3 07:57:32 MST 201

Re: Trouble with connect to www.aeroflot.ru

2014-03-19 Thread Leonov Aleksey
On 19.03.2014 20:32, Marcus MERIGHI wrote: gimliandcomp...@gmail.com (Leonov Aleksey), 2014.03.19 (Wed) 15:07 (CET): I can`t connect to www.aeroflot.ru from lynx on openbsd 5.4. I can connect from gentoo, windows. Anybody can connect to wwe.aeroflot.ru from openbsd 5.4? OpenBSD 5.5-beta (GENER

softraid(4)/bioctl(8) vs. non-512-byte sectors disks

2014-03-19 Thread Marcus MERIGHI
Reference: ``Softraid 3TB Problems'' http://marc.info/?l=openbsd-misc&m=136225193931620 Difference: My HDDs show up as 4096 bytes/sector in dmesg. Short: Are there any options for disks that come with 4096 bytes/sector to use with softraid(4)/bioctl(8)? Long: So I got these lovely large disks:

Re: Trouble with connect to www.aeroflot.ru

2014-03-19 Thread Shawn K. Quinn
On Wed, Mar 19, 2014, at 09:07 AM, Leonov Aleksey wrote: > Hi folks, > > I can`t connect to www.aeroflot.ru from lynx on openbsd 5.4. I can > connect from gentoo, windows. Anybody can connect to wwe.aeroflot.ru from > openbsd 5.4? Right now according to http://isup.me/aeroflot.ru it's down for e

Re: Trouble with connect to www.aeroflot.ru

2014-03-19 Thread Marcus MERIGHI
gimliandcomp...@gmail.com (Leonov Aleksey), 2014.03.19 (Wed) 16:18 (CET): > On 19.03.2014 20:32, Marcus MERIGHI wrote: > >gimliandcomp...@gmail.com (Leonov Aleksey), 2014.03.19 (Wed) 15:07 (CET): > >>I can`t connect to www.aeroflot.ru from lynx on openbsd 5.4. I can > >>connect from gentoo, window

Re: Trouble with connect to www.aeroflot.ru

2014-03-19 Thread Kent Fritz
Odd. Just tried it. Works on Linux, doesn't on OpenBSD. Not related to user agent; it seems to not respond to SYN. Perhaps their running PF and filtering us!

Re: Trouble with connect to www.aeroflot.ru

2014-03-19 Thread Leonov Aleksey
On 19.03.2014 21:52, Marcus MERIGHI wrote: gimliandcomp...@gmail.com (Leonov Aleksey), 2014.03.19 (Wed) 16:18 (CET): On 19.03.2014 20:32, Marcus MERIGHI wrote: gimliandcomp...@gmail.com (Leonov Aleksey), 2014.03.19 (Wed) 15:07 (CET): I can`t connect to www.aeroflot.ru from lynx on openbsd 5.4

Re: Trouble with connect to www.aeroflot.ru

2014-03-19 Thread Mikkel C. Simonsen
Marcus MERIGHI wrote: gimliandcomp...@gmail.com (Leonov Aleksey), 2014.03.19 (Wed) 16:18 (CET): On 19.03.2014 20:32, Marcus MERIGHI wrote: gimliandcomp...@gmail.com (Leonov Aleksey), 2014.03.19 (Wed) 15:07 (CET): I can`t connect to www.aeroflot.ru from lynx on openbsd 5.4. I can connect from

Re: OpenBSD email provider

2014-03-19 Thread Giancarlo Razzolini
Em 19-03-2014 09:41, Stuart Henderson escreveu: > you have more trust in ISP DNS servers honouring TTLs than I do. if > you can only get a dynamic IP at home and would like to host mail > there yourself, in a machine which only you have physical access to, > etc. (i.e. do *not* want to keep your em

Re: softraid(4)/bioctl(8) vs. non-512-byte sectors disks

2014-03-19 Thread Kenneth Westerback
Alas, softraid only supports 512 byte block devices at the moment. Ken On Mar 19, 2014 11:36 AM, "Marcus MERIGHI" wrote: > Reference: > ``Softraid 3TB Problems'' > http://marc.info/?l=openbsd-misc&m=136225193931620 > > Difference: > My HDDs show up as 4096 bytes/sector in dmesg. > > Short:

Re: file system and memory limitation

2014-03-19 Thread Shane Holding
On 16/03/2014 4:24 AM, Friedrich Locke wrote: > Hi folks, > > i wonder what are the limitations on main memory and file system sizes ! > > Thanks a lot. > > gustavo. > How long is a piece of string?

npppd can't open /dev/pppx1

2014-03-19 Thread Paul B. Henson
I set up an L2TP VPN with npppd recently using pppx, and other than some routing issues with ospfd it works great. I'm trying to add a second VPN connection, but that doesn't seem to work using pppx. With this config: interface pppx0 address 10.128.120.1 ipcp IPCP_admin interface pppx1 address 10

ciss driver status

2014-03-19 Thread Boris Goldberg
Hello guys, It says in the man ciss: CAVEATS For purposes of status monitoring, the current code only supports one logical volume per controller. Is this still true? If I make more than one array with one controller and type bioctl ciss0 - what will it show me? -- Best regards,

Re: npppd can't open /dev/pppx1

2014-03-19 Thread Paul B. Henson
D'oh, I finally realized I needed to go to /dev and MAKEDEV pppx1 8-/. Now it's working fine. I had thought pppx was one of those magic clonable devices that you didn't need to explicitly create, I guess I was mistaken. When I was testing the vpn, there were pppx1 and pppx2 interfaces that showed

Unbound in base, yes, what about ldns?

2014-03-19 Thread Chris Smith
Great to see Unbound in base, thanks. But what about ldns? I still have that installed as a package - removed the unbound package as per the -current instructions, but shouldn't the ldns package package be removed as well as I believe unbound requires it and therefore it would have to be built by

Re: Unbound in base, yes, what about ldns?

2014-03-19 Thread Kenneth Westerback
On 19 March 2014 18:09, Chris Smith wrote: > Great to see Unbound in base, thanks. > > But what about ldns? I still have that installed as a package - > removed the unbound package as per the -current instructions, but > shouldn't the ldns package package be removed as well as I believe > unbound

PPTP after removing of userland ppp(8)

2014-03-19 Thread Атанас Владимиров
Hi, I was running PPTP client pptp-1.7.2p4 with userland ppp(8). It was a basic setup from pptp(8) manual page and specifically "PPTP on a router" example. What are my alternatives to run PPTP to connect to Microsoft VPN server? May I use ppp(4) and pppd(8) and if so can you point me to the right d

Re: Unbound in base, yes, what about ldns?

2014-03-19 Thread Chris Smith
On Wed, Mar 19, 2014 at 6:12 PM, Kenneth Westerback wrote: > The unbound in base has it's own cut down version of ldns. No need for > the package. Can I just uninstall the package after the fact or do some files need to be replaced? Thanks, Chris

Re: Unbound in base, yes, what about ldns?

2014-03-19 Thread Атанас Владимиров
Hi, Sorry for Off-topic, but when you enable DNSSEC validation and fetch a root key with unbound-anchor(8) (needs root) the following error shows up in /var/log/messages: unbound: [0:0] error: could not open autotrust file for writing, /etc/root.key.29136-0: Permission denied May be this is becau

Re: PPTP after removing of userland ppp(8)

2014-03-19 Thread Stefan Sperling
On Thu, Mar 20, 2014 at 12:39:50AM +0200, Атанас Владимиров wrote: > Hi, > I was running PPTP client pptp-1.7.2p4 with userland ppp(8). It was a basic > setup from pptp(8) manual page and specifically "PPTP on a router" example. > What are my alternatives to run PPTP to connect to Microsoft VPN ser

Re: Unbound in base, yes, what about ldns?

2014-03-19 Thread Chris Smith
See the thread "unbound dnssec revisited" I started on 12/30/2013 for some hints. Looks like creating a new directory with the proper permissions is the best way to go. On Wed, Mar 19, 2014 at 7:01 PM, Атанас Владимиров wrote: > Hi, > Sorry for Off-topic, but when you enable DNSSEC validation an

npppd with two pppx interfaces causes kernel panic

2014-03-19 Thread Paul B. Henson
After successfully setting up an L2TP VPN with npppd and pppx, I tried to add a second VPN subnet with a different authentication base. I was working remotely, and after starting npppd in debug mode: bash-4.2# npppd -d 2014-03-19 14:41:50:NOTICE: Starting npppd pid=32407 version=5.0.0 2014-03-19 1

Re: Trouble with connect to www.aeroflot.ru

2014-03-19 Thread Steve Shockley
On 3/19/2014 12:22 PM, Leonov Aleksey wrote: I think what they filtered traffic from non windows or linux machine. I think this is the case. I'm behind a transparent http proxy (Squid) on OpenBSD, and from Windows http://www.aeroflot.ru times out, and https://www.aeroflot.ru (which bypasses

Re: Trouble with connect to www.aeroflot.ru

2014-03-19 Thread Claus Assmann
On Wed, Mar 19, 2014, Steve Shockley wrote: > On 3/19/2014 12:22 PM, Leonov Aleksey wrote: > >I think what they filtered traffic from non windows or linux machine. > I think this is the case. I'm behind a transparent http proxy (Squid) on Just for the fun of it: it works from FreeBSD 8.x and Sun

Re: PPTP after removing of userland ppp(8)

2014-03-19 Thread YASUOKA Masahiko
On Thu, 20 Mar 2014 00:39:50 +0200 Атанас Владимиров wrote: > I was running PPTP client pptp-1.7.2p4 with userland ppp(8). It was a basic > setup from pptp(8) manual page and specifically "PPTP on a router" example. > What are my alternatives to run PPTP to connect to Microsoft VPN server? > May I

Re: npppd with two pppx interfaces causes kernel panic

2014-03-19 Thread YASUOKA Masahiko
On Wed, 19 Mar 2014 16:45:46 -0700 "Paul B. Henson" wrote: > After successfully setting up an L2TP VPN with npppd and pppx, I tried > to add a second VPN subnet with a different authentication base. I was > working remotely, and after starting npppd in debug mode: pppx will be fixed. You can use

Re: Trouble with connect to www.aeroflot.ru

2014-03-19 Thread Mikkel C. Simonsen
Claus Assmann wrote: On Wed, Mar 19, 2014, Steve Shockley wrote: On 3/19/2014 12:22 PM, Leonov Aleksey wrote: I think what they filtered traffic from non windows or linux machine. I think this is the case. I'm behind a transparent http proxy (Squid) on Just for the fun of it: it works fro

Re: npppd with two pppx interfaces causes kernel panic

2014-03-19 Thread Paul B. Henson
On Thu, Mar 20, 2014 at 10:22:51AM +0900, YASUOKA Masahiko wrote: > pppx will be fixed. Great :). This is a known bug then? Should I just keep an eye on the changelog for mention of pppx changes to tell when it's safe to try again? > You can use tun(4) instead if you want to use multiple interfa

Re: npppd with two pppx interfaces causes kernel panic

2014-03-19 Thread YASUOKA Masahiko
On Wed, 19 Mar 2014 21:05:35 -0700 "Paul B. Henson" wrote: > On Thu, Mar 20, 2014 at 10:22:51AM +0900, YASUOKA Masahiko wrote: >> pppx will be fixed. > > Great :). This is a known bug then? It's new for me. I had not even try MAKEDEV pppx1 yet. > Should I just keep an eye on the changelog for