Re: pf and nat

2014-03-21 Thread Loïc BLOT
Hello, you are right, you need the both rules. -- Best regards, Loïc BLOT, UNIX systems, security and network engineer http://www.unix-experience.fr Le mardi 18 mars 2014 à 15:19 -0300, Friedrich Locke a écrit : Hi folks, i am studying pf and a doubt arose! Since my state policy if

Re: PPTP after removing of userland ppp(8)

2014-03-21 Thread Stefan Sperling
On Thu, Mar 20, 2014 at 11:57:57AM -0700, patrick keshishian wrote: On 3/20/14, Stefan Sperling s...@openbsd.org wrote: [...] And, as goes without saying, if possible, please consider using a different protocol. PPTP's weaknesses have been well understood for a long time now. Much better

Re: Where is this device attached?

2014-03-21 Thread John Long
On Fri, Mar 21, 2014 at 02:50:17PM +1100, Jonathan Gray wrote: On Thu, Mar 20, 2014 at 04:33:01PM +, John Long wrote: On Fri, Mar 21, 2014 at 03:08:31AM +1100, Jonathan Gray wrote: Thanks. How do I build this? You need to build and install a new kernel. After checking out the src

{r,s}mkx entries in terminfo db missing

2014-03-21 Thread Nils R
Hi misc, i have a problem with my terminal, st [1]. Just for the record, i am using the latest -current snapshot (but the problem existed before). I had an unrelated problem with zsh, where my HOME and DEL key were not working properly (the related thread on the st-mailing list can be found

Re: {r,s}mkx entries in terminfo db missing

2014-03-21 Thread Tethys
On Fri, Mar 21, 2014 at 11:41 AM, Nils R m...@hxgn.net wrote: The original st.info contains entries for {r,s}mkx, but when i query the system terminfo database with 'infocmp -1 st', no entries for {r,s}mkx are found: % egrep '[rs]mkx' st.info rmkx=\E[?1l\E, smkx=\E[?1h\E=, %

Re: {r,s}mkx entries in terminfo db missing

2014-03-21 Thread Nils R
Tethys schrieb am 21.03.2014 13:39: On Fri, Mar 21, 2014 at 11:41 AM, Nils R m...@hxgn.net wrote: The original st.info contains entries for {r,s}mkx, but when i query the system terminfo database with 'infocmp -1 st', no entries for {r,s}mkx are found: % egrep '[rs]mkx' st.info

Re: Unbound in base, yes, what about ldns?

2014-03-21 Thread Chris Smith
On Wed, Mar 19, 2014 at 7:44 PM, Chris Smith obsd_m...@chrissmith.org wrote: See the thread unbound dnssec revisited I started on 12/30/2013 for some hints. Looks like creating a new directory with the proper permissions is the best way to go. Now fixed in -current with a /var/unbound/db

Re: Unbound in base, yes, what about ldns?

2014-03-21 Thread Stuart Henderson
On 2014/03/21 09:30, Chris Smith wrote: On Wed, Mar 19, 2014 at 7:44 PM, Chris Smith obsd_m...@chrissmith.org wrote: See the thread unbound dnssec revisited I started on 12/30/2013 for some hints. Looks like creating a new directory with the proper permissions is the best way to go. Now

Re: {r,s}mkx entries in terminfo db missing

2014-03-21 Thread Nils R
After replacing the st-entries in /usr/share/mish/termcap and recreating the db with cap_mkdb, i also had to rename the terminfo.db to make it work. I could not find any program to rebuild the terminfo db, how is it done? Or is terminfo.db not needed at all? Still looking for a simpler

Re: {r,s}mkx entries in terminfo db missing

2014-03-21 Thread Stuart Henderson
On 2014-03-21, Nils R m...@hxgn.net wrote: i think thats it. When i install st.info to home, the {r,s}mkx entries are indeed included: $ rm -r ~/.terminfo $ tic ~/st/st.info $ infocmp -1 -A /home/nils/.terminfo st | egrep '(/home|[sr]mkx)' # Reconstructed via infocmp from file:

sysmerge error

2014-03-21 Thread Kent Fritz
I get the following after upgrading to the latest snapshot. Am I doing something wrong? Thanks, Kent. # pwd /root # ls -l total 18812 -rw-r--r-- 1 root wheel 22 Jul 30 2013 .Xdefaults drwx-- 3 root wheel 512

Re: sysmerge error

2014-03-21 Thread Antoine Jacoutot
On Fri, Mar 21, 2014 at 11:46:49AM -0400, Kent Fritz wrote: I get the following after upgrading to the latest snapshot. Am I doing something wrong? It got fixed earlier today. You can use the full path to the sets for now. Thanks, Kent. # pwd

xnecview broken?

2014-03-21 Thread Alan Corey
This should probably go to ports@ but I don't belong to that. I'm running 5.2 as the latest, but 5.4 looks the same (has the same setjmp patch). There was an old problem with xnecview under OpenBSD that caused it to crash if you tried to use it on more than about 6 frequencies, but this is new

[patch] usr.bin/mg/theo.c

2014-03-21 Thread Josh Grosse
I thought http://marc.info/?l=openbsd-miscm=139534238408590w=2 deserved recognition. Index: theo.c === RCS file: /cvs/src/usr.bin/mg/theo.c,v retrieving revision 1.131 diff -u -r1.131 theo.c --- theo.c 5 Mar 2014 21:45:54

Re: [patch] usr.bin/mg/theo.c

2014-03-21 Thread Bernte
On 21/03/14 22:56, Josh Grosse wrote: Complaint forms are handled in another department. + You'd be safer using Windows than the code which was just deleted. Isn't there a comma missing ... ? Bernd

Re: OpenBSD email provider

2014-03-21 Thread Stuart Henderson
On 2014-03-19, Giancarlo Razzolini grazzol...@gmail.com wrote: Em 19-03-2014 09:41, Stuart Henderson escreveu: you have more trust in ISP DNS servers honouring TTLs than I do. if you can only get a dynamic IP at home and would like to host mail there yourself, in a machine which only you have

Re: OpenBSD email provider

2014-03-21 Thread Stuart Henderson
On 2014-03-18, Craig R. Skinner skin...@britvault.co.uk wrote: On 2014-03-17 Mon 20:25 PM |, Jean-Francois Simon wrote: Just to mention, I'm looking for a more private ESP. As I know that OpenBSD conveys an idea of security, I tend to trust a provider relying on this OS. If you want to

Re: xnecview broken?

2014-03-21 Thread Stuart Henderson
On 2014-03-21, Alan Corey alan01...@gmail.com wrote: This should probably go to ports@ but I don't belong to that. It should indeed, and you can post without subscribing. You should also include dmesg, or at the very least mention the cpu architecture, it is important. I'm running 5.2 as the

Re: Questions about monitoring LAN traffic with openbsd/pf/pflog/pflow

2014-03-21 Thread Giancarlo Razzolini
Em 20-03-2014 19:21, Don Jackson escreveu: On Mar 20, 2014, at 2:14 PM, Giancarlo Razzolini grazzol...@gmail.com wrote: Em 20-03-2014 17:12, Don Jackson escreveu: I’m attempting to monitor traffic on my LAN, I have inserted a non-aggregating network tap between my firewall (not openbsd) and