Re: what all touches the carp demote counter?

> On 11 okt. 2016, at 23:56, Paul B. Henson wrote: > > Does pfsync fiddle with the carp > demotion value even if it's not configured? No. But as R0me0 stated, you should probably re-check your configuration. carp.preempt=1 ( /etc/sysctl.conf ) on both nodes, if not node which toke over master

Re: Multiple web servers behind NAT

Am 10. Oktober 2016 14:35:00 MESZ, schrieb Markus Hennecke : > Am 10.10.2016 um 12:01 schrieb Radek: > > > The second thing to do is enabling > > wesites' SSL/TLS certs. > > Each website has its own certificate > > on its server. […] > > > You can't do that. TLS exchange is done > before the host

Re: what all touches the carp demote counter?

On Tue, Oct 11, 2016 at 08:44:05AM +0200, mxb wrote: > Master-Backup setup with pfsync in place, means that you synchronize > states between boxes. Then Master is rebooted, it becomes out-of-sync > then it comes to states. So until it is in sync with Backup (which > became Master after reboot),

Re: Failure to get unbound to talk to nsd on the same server

So as to how it flies, here's my line of thought: Unbound should serve my network including the dns server machine itself with DNS, hence the external IP address in resolv.conf. dig and nslookup run on the dns server itself both use this with no problem and the rest of my network seems happy as we

Re: opensmtpd-extras-[clamav|spamassassin] packages in 6.0

> Am 10.10.2016 um 17:59 schrieb mabi : > > Hi, > > Just noticed that the OpenBSD 6.0 release does not include the opensmtpd-extras-clamav nor the opensmtpd-extras-spamassassin packages. I would like to upgrade my 5.9 OpenBSD mail gateway to 6.0 and was wondering if I can use the old packages from

Re: Failure to get unbound to talk to nsd on the same server

(Resending to list) Yes, I thought of and tried that too with similar lack of success. But as I could see from the tcpdump (see reply to Raimo's mail) NSD responds so it's probably an Unbound issue. The forward-zone directive can be used but it expects the forward-addr to be able to provide recursi

Re: netsnmpd Fails to Start on Current [Solved]

On 2016-10-08, Theodore Wynnychenko wrote: > On 2016-10-04, Theodore Wynnychenko wrote: >> # /usr/local/sbin/snmpd -L e >> kvm_openfiles: Operation not permitted >> kvm_openfiles: /dev/mem: Operation not permitted > > On 2016-10-06, Stuart Henderson wrote: > >> Kernel virtual memory access is no

Re: Failure to get unbound to talk to nsd on the same server

On 2016-10-11, Raimo Niskanen wrote: > And -l Port to dig selects a non-default port. N.B. dig in OpenBSD base doesn't support this.

Re: Failure to get unbound to talk to nsd on the same server

Thanks. Here's the output of the various dig commands and the tcpdump where relevant. pf is unchanged and there is no difference whether disabled with pfctl -d or not. The tcpdump is interesting since apparently the query reached NSD and it replies - but Unbound does not see/accept it (?). Could i

Re: Failure to get unbound to talk to nsd on the same server

Hi Johan, On Mon, 10 Oct 2016 23:42:16 +0200 Johan Mellberg wrote: > I have tried multiple combinations of ports and interface bindings and > I suspect that I am missing something simple here. Currently I have > set NSD to listen on 127.0.0.1 and Unbound listens on 192.168.x.91 - > so there should

Re: Failure to get unbound to talk to nsd on the same server

I run a similar setup, NSD serving my local zones (on ::1@54) and unbound querying those local zones there. Comparing your config with mine, I didn't spot an obvious explanation for why it wouldn't work for you, but I do note that your unbound isn't configured to listen on 127.0.0.1, whilst your N

Re: OpenBSD on HPE DL20 G9

Nice idea. Sadly, I tried and it seems not to work : the boot can't find any serial boot> set tty com0 switching console to com0 com0 console not present boot> set tty pc0 -- Cordialement, Pierre BARDOU -Message d'origine- De : Todd C. Miller [mailto:todd.mil...@courtesan.com] Envoyé :