Re: smtpd dies with fatal: smtp: ssltree out of sync

2014-01-03 Thread Gilles Chehade
Hi, A long long time ago, you could never hit that fatal() because it meant we had a logic error somewhere in the startup code. After the many simplifications we did, bad configuration/permissions could lead you to hit that message and fatal() with this cryptic unrelated error when it should

Re: Transparent proxy with Squid on OpenBSD 5.4

2014-01-03 Thread Romain FABBRI - Alien Consulting
Thanks, I tried according to your configuration : First test using the 3128 port as a divert-to port and as a squid http_port with tproxy or intercept statement = No traffic is getting diverted by pf Second test : Same test but using the 3129 port as a divert-to port 2 lines un squid.conf

Re: Suspend/Resume and USB filesystems

2014-01-03 Thread Helg Bredow
Date: Thu, 2 Jan 2014 21:16:53 -0800 From: mlar...@azathoth.net To: t...@tedunangst.com CC: xx...@msn.com; misc@openbsd.org Subject: Re: Suspend/Resume and USB filesystems On Fri, Jan 03, 2014 at 12:13:05AM -0500, Ted Unangst wrote: On Fri, Jan 03,

Re: Transparent proxy with Squid on OpenBSD 5.4

2014-01-03 Thread Giancarlo Razzolini
Em 03-01-2014 07:45, Romain FABBRI - Alien Consulting escreveu: Thanks, I tried according to your configuration : First test using the 3128 port as a divert-to port and as a squid http_port with tproxy or intercept statement = No traffic is getting diverted by pf Second test : Same

Compatibility Intel chipset 87 and openBSD

2014-01-03 Thread Robin Garcia
Hello guys, I wanna know if the new intelchipset 87 does match to openBSD? I intend to build a System with a Haswell CPU i5 4760K (LGA1150). I wanna buy a mainboard from Asus. But I heard Asus does not support openBSD (neither oder BSDs oder Linux Dist.). Now my question is which mainboard is

Re: Transparent proxy with Squid on OpenBSD 5.4

2014-01-03 Thread Romain FABBRI - Alien Consulting
I'm now filtering on the inside interface : pass in quick log on $int_if inet proto tcp to port 80 divert-to 127.0.0.1 port 3128 It seems that pf is diverting the web traffic since the packets are counted : pfctl -sa -vv @0 pass in log quick on bge1 inet proto tcp from any to any port =

[OT] CCC 2013 Videos: X Security (It's worse than it looks)

2014-01-03 Thread Jiri B
Hi, As we (all) use X, I think following video would be interesting for you :) http://media.ccc.de/browse/congress/2013/30C3_-_5499_-_en_-_saal_1_-_201312291830_-_x_security_-_ilja_van_sprundel.html Big thanks to Ilja for making X better for everybody. jirib

Re: VPN Between OpenBSD and iOS

2014-01-03 Thread mxb
I successfully connected my iOS 7.0.4 to an OpenBSD 5.4 (this is pre-release). My ipsec.conf for L2TP is this: ike passive esp transport \ proto udp from $local_gw to any port 1701 \ main auth hmac-sha1 enc 3des group modp1024 \ quick auth hmac-sha1 enc aes \

Re: Suspend/Resume and USB filesystems

2014-01-03 Thread Theo de Raadt
I can make sure that I unmount any externally mounted filesystems before suspending. Seeing as it's not going to be easy to fix, the man page for apm/zzz/ZZZ should probably mention that suspending while a filesystem is mounted is not supported. I do not

Re: Is Ext2 stable enough for normal use?

2014-01-03 Thread Dmitrij D. Czarkoff
On Thursday, January 02, 2014 02:51:52 PM Geoff Steckel wrote: In return, of course, that Linux wouldn't mount an OpenBSD FFS. Currently I have dualboot between Archlinux and OpenBSD, and I FFS mounted in Arch, albeit read-only. (I don't have ext mounted on OpenBSD though, but I don't need it

Re: VPN Between OpenBSD and iOS

2014-01-03 Thread Matthew P. Carlson
mxb, Great. I'll try that this weekend. Thanks, Matt On Jan 3, 2014, at 8:03 AM, mxb m...@alumni.chalmers.se wrote: I successfully connected my iOS 7.0.4 to an OpenBSD 5.4 (this is pre-release). My ipsec.conf for L2TP is this: ike passive esp transport \ proto udp from

Re: Transparent proxy with Squid on OpenBSD 5.4

2014-01-03 Thread Romain FABBRI - Alien Consulting
Could somebody provide me a working configuration exemple for pf.conf and squid.conf on an OpenBSD 5.4 (working as a bridge) ? I still can't manage to make squid working on my bridge and I don't know what more tests I could do. I even tried to compile squid 3.4.2 with '--enable-pf-transparent'

Re: Transparent proxy with Squid on OpenBSD 5.4

2014-01-03 Thread Giancarlo Razzolini
Em 03-01-2014 09:36, Romain FABBRI - Alien Consulting escreveu: I'm now filtering on the inside interface : pass in quick log on $int_if inet proto tcp to port 80 divert-to 127.0.0.1 port 3128 It seems that pf is diverting the web traffic since the packets are counted : pfctl -sa -vv

Re: Transparent proxy with Squid on OpenBSD 5.4

2014-01-03 Thread Remco
Romain FABBRI - Alien Consulting wrote: Hi, I’m trying to do a transparent webfiltering bridge with squid. I’ve used the packages for 5.4 which are squid-3.3.8 and squidGuard-1.4p6 Squid is working fine when the browser uses the vether0 administration interface of the bridge. I mean

Re: Transparent proxy with Squid on OpenBSD 5.4

2014-01-03 Thread Romain FABBRI - Alien Consulting
Good Question ! I uncommented a while back the line set skip on lo I checked that they are processed... They seem to be... # pfctl -sr -R 0 pass in log quick on bge1 inet proto tcp from 192.168.200.0/24 to any port = 80 flags S/SA divert-to 127.0.0.1 port 3129 # tcpdump -neipflog0 -s 500

Re: Transparent proxy with Squid on OpenBSD 5.4

2014-01-03 Thread Romain FABBRI - Alien Consulting
I didn't investigate the bridge in itself since it seems to be working as a bridge... #=== # Bridge configuration #=== #vi /etc/hostname.bge0 up #vi /etc/hostname.bge1 up #vi /etc/hostname.vether0 inet 192.168.200.253 255.255.255.0

Re: dmassage - openbsd 5.4 build failure

2014-01-03 Thread Riccardo Mottola
Hi, Theo de Raadt wrote: Review the lines that dmassage has commented-out. You can fairly safely remove unused drivers for network/scsi/audio controllers/USB devices, but other drivers/pseudo-devices are more likely to give problems. Trimming out devices (especially some scsi and nic drivers)

Re: Compatibility Intel chipset 87 and openBSD

2014-01-03 Thread Chris Cappuccio
Robin Garcia [robingarcia1...@googlemail.com] wrote: Hello guys, I wanna know if the new intelchipset 87 does match to openBSD? I intend to build a System with a Haswell CPU i5 4760K (LGA1150). I wanna buy a mainboard from Asus. But I heard Asus does not support openBSD (neither oder

Re: dmassage - openbsd 5.4 build failure

2014-01-03 Thread Ted Unangst
On Fri, Jan 03, 2014 at 19:28, Riccardo Mottola wrote: If it is not broken don't fix it: fine, but it still can be made user-friendly, e.g. by marking certain commented out devices as to review or by not commenting them out at all if they are known or something like that. Or perhaps a

Re: dmassage - openbsd 5.4 build failure

2014-01-03 Thread Theo de Raadt
On Fri, Jan 03, 2014 at 19:28, Riccardo Mottola wrote: If it is not broken don't fix it: fine, but it still can be made user-friendly, e.g. by marking certain commented out devices as to review or by not commenting them out at all if they are known or something like that. Or perhaps a

Samsung 840 Pro SSD : Incompatible with OpenBSD or defective?

2014-01-03 Thread leonardz
I am running openbsd off a Kingston USB stick. I am trying to install on a Samsung 840 Pro SSD. The same model (but not the same physical drive) works with CentOS 6.5 so I wanted to try it out with OpenBSD. Installation worked but when installing packages I get continuous errors of the following

Re: Samsung 840 Pro SSD : Incompatible with OpenBSD or defective?

2014-01-03 Thread Kyle Isom
I use a Samsung 840 Pro in an X230 that's been running OpenBSD since 5.3, and I've had no issues. - kyle

can i get a flame ?

2014-01-03 Thread Dan Becker
bONG (b is silent OpenBSD is Not Gnu ) -- --Dan

Re: VPN Between OpenBSD and iOS

2014-01-03 Thread Matt Carlson
mxb, I tried that and I'm getting the same results. Any other ideas? What does your npppd.conf look like? Thanks, Matt On Fri, Jan 3, 2014 at 8:03 AM, mxb m...@alumni.chalmers.se wrote: I successfully connected my iOS 7.0.4 to an OpenBSD 5.4 (this is pre-release). My ipsec.conf for L2TP is

Re: [OT] CCC 2013 Videos: X Security (It's worse than it looks)

2014-01-03 Thread patrick keshishian
On 1/3/14, Jiri B ji...@devio.us wrote: Hi, As we (all) use X, I think following video would be interesting for you :) http://media.ccc.de/browse/congress/2013/30C3_-_5499_-_en_-_saal_1_-_201312291830_-_x_security_-_ilja_van_sprundel.html Take away quote in regard to Xorg and X privilege

Re: Samsung 840 Pro SSD : Incompatible with OpenBSD or defective?

2014-01-03 Thread Ted Unangst
or you have a broken usb-sata adapter. On Fri, Jan 03, 2014 at 22:41, leona...@sympatico.ca wrote: I am running openbsd off a Kingston USB stick. I am trying to install on a Samsung 840 Pro SSD. The same model (but not the same physical drive) works with CentOS 6.5 so I wanted to try it out

Re: [OT] CCC 2013 Videos: X Security (It's worse than it looks)

2014-01-03 Thread noah pugsley
On Fri, Jan 3, 2014 at 8:07 PM, patrick keshishian pkesh...@gmail.comwrote: On 1/3/14, Jiri B ji...@devio.us wrote: Hi, As we (all) use X, I think following video would be interesting for you :)

Re: Samsung 840 Pro SSD : Incompatible with OpenBSD or defective?

2014-01-03 Thread Dmitrij D. Czarkoff
On Friday, January 03, 2014 11:08:38 PM Ted Unangst wrote: or you have a broken usb-sata adapter. This may indicate that the flash storage on your USB stick is wearing out. You may want to try network install (boot off from your USB stick but install from internet via cable connection).