Re: encrypted vnd Fwd: CVS: cvs.openbsd.org: src

2014-10-15 Thread David Vasek
On Mon, 18 Aug 2014, Jason Tubnor wrote: On 2 June 2014 10:23, Ted Unangst t...@tedunangst.com wrote: Part of the deprecation / migration process is identifying the weird ways people use vnd and finding solutions for them. But as we've seen, people never move forward without the occasional

Re: problem with CARP+VLAN+OpenBSD 5.5

2014-10-15 Thread Andy
Morning, On 15/10/14 03:18, Stuart Henderson wrote: On 2014-10-14, Federico Donati nix.b...@gmail.com wrote: On 10/14/2014 06:53 PM, Andy wrote: Why do you have so many CARP interfaces? Generally it's good practice to have one CARP interface per broadcast domain / VLAN etc, and have all your

Re: shutdown/reboot on acpi/qemu signals

2014-10-15 Thread Kapetanakis Giannis
On 13/10/14 22:50, Mike Larkin wrote: On Mon, Oct 13, 2014 at 07:42:34PM +0100, Nux! wrote: Hello, I'm having an issue with my OpenBSD cloud instance in that it completely ignores the signals sent to it by qemu-kvm, so instead of getting shut down or rebooted gracefully it has to be reset.

Re: current snapshot installer not recognising USB devices

2014-10-15 Thread Carlin Bingham
On Tue, 14 Oct 2014, at 10:24 AM, Carlin Bingham wrote: On Tue, 14 Oct 2014, at 09:05 AM, Martin Pieuchot wrote: On 14/10/14(Tue) 06:40, Carlin Bingham wrote: I have booted the latest (11/10/14) snapshot install56.fs from a USB drive and want to install it to an external USB drive but the

Re: current snapshot installer not recognising USB devices

2014-10-15 Thread Martin Pieuchot
On 16/10/14(Thu) 00:07, Carlin Bingham wrote: On Tue, 14 Oct 2014, at 10:24 AM, Carlin Bingham wrote: On Tue, 14 Oct 2014, at 09:05 AM, Martin Pieuchot wrote: On 14/10/14(Tue) 06:40, Carlin Bingham wrote: I have booted the latest (11/10/14) snapshot install56.fs from a USB drive and

Re: problem with CARP+VLAN+OpenBSD 5.5

2014-10-15 Thread Fede
On 10/15/2014 04:18 AM, Stuart Henderson wrote: The most common cause I've seen for split carp states is a mismatch of IP addresses between master/secondary, though I would think that a combination of using defer and not using no-sync on the carp/pfsync states could very well cause problems

ath stops working until a manual scan

2014-10-15 Thread frantisek holop
ath started misbehaving really bad recently. it works for a couple of minutes and then i have to do ifconfig ath0 scan, and starts working again. i know ath support is very picky, but this one is an older one, and except a hiccup here and there, i dont recall frustration on this scale. any ideas?

Re: host(1) prints errors to STDOUT

2014-10-15 Thread Craig R. Skinner
On 2014-10-14 Tue 10:41 AM |, Theo de Raadt wrote: Unfortunately host is maintained upstream, in the bind codebase, by ISC. You should file your bug report there, because that is the right way to get change into the ecosystem. Submitted, with their GITWEB line number refs. ISC's bug

Re: ath stops working until a manual scan

2014-10-15 Thread Stefan Sperling
On Wed, Oct 15, 2014 at 05:22:00PM +0200, frantisek holop wrote: ath started misbehaving really bad recently. it works for a couple of minutes and then i have to do ifconfig ath0 scan, and starts working again. Can you elaborate on what recently means? Did it ever work properly, and if so,

Re: ath stops working until a manual scan

2014-10-15 Thread frantisek holop
Stefan Sperling, 15 Oct 2014 17:36: On Wed, Oct 15, 2014 at 05:22:00PM +0200, frantisek holop wrote: ath started misbehaving really bad recently. it works for a couple of minutes and then i have to do ifconfig ath0 scan, and starts working again. Can you elaborate on what recently means?

Re: carp not reverting to master

2014-10-15 Thread Marko Cupać
On Thu, 02 Oct 2014 18:02:23 +0100 Andy a...@brandwatch.com wrote: Hi Try setting the advskew to a number greater than 200 and less then 254. This seems to be the most stable. For best practice our primary runs with carp and pfsync values of '1'. And the backup runs with carp and pfsync

Re: carp not reverting to master

2014-10-15 Thread Alan McKay
On Wed, Oct 15, 2014 at 2:13 PM, Marko Cupać marko.cu...@mimar.rs wrote: Oct 14 15:21:19 bgp1 /bsd: carp2: state transition: MASTER - BACKUP Oct 14 15:21:19 bgp1 /bsd: carp1: state transition: MASTER - BACKUP Oct 14 15:21:22 bgp1 /bsd: carp1: state transition: BACKUP - MASTER Oct 14 15:21:22

Re: rcctl ansible service support

2014-10-15 Thread xSAPPYx
On Oct 13, 2014 10:40 PM, Patrik Lundin patrik.lundin@gmail.com wrote: On Sat, Sep 13, 2014 at 02:39:04AM +0200, Patrik Lundin wrote: armani@ has laid the groundwork for this and I recently started contributing to his fork as well. The work-in-progress can be found here:

Re: rcctl ansible service support

2014-10-15 Thread Antoine Jacoutot
On Wed, Oct 15, 2014 at 11:48:20AM -0700, xSAPPYx wrote: On Oct 13, 2014 10:40 PM, Patrik Lundin patrik.lundin@gmail.com wrote: On Sat, Sep 13, 2014 at 02:39:04AM +0200, Patrik Lundin wrote: armani@ has laid the groundwork for this and I recently started contributing to his fork

Re: Route-to with a dynamic 'next hop'

2014-10-15 Thread Giancarlo Razzolini
On 15-10-2014 01:38, Justin Mayes wrote: Thanks to both of you for the advice Just to followup I ended up with the relayd 'routers' setup as described in man page but with a script monitor rather than icmp. The monitor finds gateway for interface in route table and pings it with -I interface

pf matching the ttl of a packet

2014-10-15 Thread Peter J. Philipp
My DNS server is being used in a reflection attack. I can tell its a reflection attack by the incoming ttl of the DNS packet and the ping ttl as returned with ping. They differ, meaning it's spoofed from another site. While the system it's on is FreeBSD and it's pf is outdated, I didn't see an

Re: [Bulk] Re: [Bulk] Re: openbsdstore: enable javascript and buy something or gtfo

2014-10-15 Thread Kevin Chadwick
On Tue, 7 Oct 2014 05:11:30 +0300 Matti Karnaattu wrote: Like removing that stupid web browser idiom that where is addressbar and back/forward buttons. The address bar is one of the only things you can trust when browsing a web page to the point that some mal-sites or mal-ads actually try to

Re: RAID1C discipline and alternatives

2014-10-15 Thread Vladislav Manchev
On Thu, Oct 16, 2014 at 12:36 AM, Joerg Jung m...@umaxx.net wrote: Am 15.10.2014 um 00:58 schrieb Vladislav Manchev v...@bin.bz: I need to set up a few machines in the coming weeks and was wondering what's the status of stacked softraid and especially RAID1C discipline - i.e. CRYPTO on

Re: carp not reverting to master

2014-10-15 Thread Andy Lemin
Please excuse typos, sent from my phone On 15 Oct 2014, at 19:13, Marko Cupać marko.cu...@mimar.rs wrote: On Thu, 02 Oct 2014 18:02:23 +0100 Andy a...@brandwatch.com wrote: Hi Try setting the advskew to a number greater than 200 and less then 254. This seems to be the most stable.

Re: [Bulk] Re: [Bulk] Re: openbsdstore: enable javascript and buy something or gtfo

2014-10-15 Thread Giancarlo Razzolini
On 15-10-2014 17:56, Kevin Chadwick wrote: The address bar is one of the only things you can trust when browsing a web page Provided your dns isn't spoofed. And you're are not being targeted with a mitm attack. And perhaps a few other things. But yeah, the address bar can normally be trusted.

Re: carp not reverting to master

2014-10-15 Thread Andy Lemin
Please excuse typos, sent from my phone On 15 Oct 2014, at 19:13, Marko Cupać marko.cu...@mimar.rs wrote: On Thu, 02 Oct 2014 18:02:23 +0100 Andy a...@brandwatch.com wrote: Hi Try setting the advskew to a number greater than 200 and less then 254. This seems to be the most stable.

libressl.org broken link

2014-10-15 Thread Daniel Dyla
I'm not sure where this sort of thing is supposed to be reported but the Project Goals link on libressl.org (http://libressl.org/goals.html) is giving me a 404 error.

Re: libressl.org broken link

2014-10-15 Thread Dag Richards
Sigh, its sad when a project with that much potential has no goals. Hopefully its just a phase. Daniel Dyla wrote: I'm not sure where this sort of thing is supposed to be reported but the Project Goals link on libressl.org (http://libressl.org/goals.html) is giving me a 404 error.

Re: [Bulk] Re: Shadow TCP stacks

2014-10-15 Thread Ian Grant
On Wed, Oct 15, 2014 at 4:47 PM, Kevin Chadwick ma1l1i...@yahoo.co.uk wrote: On Sat, 11 Oct 2014 13:38:49 -0400 Ian Grant wrote: No, the pre-shared keys are communicated over the VPN, as are the keys which encrypt the VPN's own data as it appears in the actual TCP packets which carry the

Re: [Bulk] Re: Shadow TCP stacks

2014-10-15 Thread Martin Schröder
2014-10-16 2:22 GMT+02:00 Ian Grant ian.a.n.gr...@googlemail.com: Perhaps I have missed something but if you have a ssh tunnel or something then just put that in front of the service without increasing Moved to misc. Yes, you missed something: the point :-) The idea is that the existence

Re: libressl.org broken link

2014-10-15 Thread Theo de Raadt
Sigh, its sad when a project with that much potential has no goals. Hopefully its just a phase. Just a phase. New web pages are being written and commited now. Don't be such a web hipster :)