Re: Why is disk full?

2022-03-29 Thread Aner Perez
arse on wd2l? On Tue, Mar 29, 2022 at 11:32 AM Aner Perez wrote: You may have large files with "holes" in them (i.e. sparse files). Rsync has a --sparse (-S) flag that tries to create holes in the replicated files when it finds sequences of nulls in the source file. The -a flag do

Re: Why is disk full?

2022-03-29 Thread Aner Perez
You may have large files with "holes" in them (i.e. sparse files).  Rsync has a --sparse (-S) flag that tries to create holes in the replicated files when it finds sequences of nulls in the source file. The -a flag does not turn on this sparse file handling. You can run "du" on different direc

Re: tcpdump - ifname in filter expression

2022-03-23 Thread Aner Perez
On 3/22/22 00:37, David Gwynne wrote: On Mon, Mar 21, 2022 at 04:37:59PM -0400, Aner Perez wrote: I noticed that if I put an "ifname" (or "on") in a fllter expression for tcpdump, it will show all traffic that has an ifname that *starts with* the name I provided.?? e.g. # t

tcpdump - ifname in filter expression

2022-03-21 Thread Aner Perez
I noticed that if I put an "ifname" (or "on") in a fllter expression for tcpdump, it will show all traffic that has an ifname that *starts with* the name I provided.  e.g. # tcpdump -n -l -e -ttt -i pflog0 ifname vlan1 Will show packets for vlan1 but also for vlan110, vlan140, etc (but not for

Re: FAQ file sets missing cmdbox

2020-08-25 Thread Aner Perez
On 8/25/20 10:33 AM, jungle Boogie wrote: On Tue, 25 Aug 2020 at 00:05, Greg Thomas wrote: I'm getting pretty old and struggle with stuff like this more and more these days but I don't see what is "very difficult to follow" about the current layout, and I'm not sure what's weird about it ei

Re: Ctrl+4 means SIGQUIT+coredump, where is this documented, what more shortcuts are there?

2018-10-31 Thread Aner Perez
On 10/31/18 2:15 PM, Christian Weisgerber wrote: On 2018-10-31, Stuart Henderson wrote: No idea how ^4 is mapped to ^\, but for some reason it is, This goes back to the VT220, if not older terminals. Ctrl-3 for ESC aka ^[ is particularly handy if the Esc key is in some inconvenient place as

Re: Ctrl+4 means SIGQUIT+coredump, where is this documented, what more shortcuts are there?

2018-10-31 Thread Aner Perez
On 10/31/18 10:54 AM, Stuart Henderson wrote: On 2018-10-31, Tinker wrote: Hi, When in "cat" or "dd if=/dev/zero of=/dev/zero" or "gzip < /dev/zero > /dev/zero", if I press ctrl+4, the program coredumps. Doing it in ksh or sh has no effect though. This is in OpenBSD 6.4 AMD64 from Putty on W

Re: Viewport for man.openbsd.org -- readability on phones

2018-05-17 Thread Aner Perez
On 05/17/2018 05:22 PM, x...@dr.com wrote: "Ingo Schwarze" wrote: Absolutely not. Mandoc output is not optimized for any device. Which elements or rules in the current HTML or CSS code make you think it is optimized or it discriminates against any device? I don't know which element or rule i

Re: Domain redirections to Openbsd.org?

2017-05-18 Thread Aner Perez
No redirect and no ripping, he just added a DNS entry for nathanalexander.uk that points to the IP address for openbsd.org (129.128.5.194). On 05/18/2017 09:46 AM, andrew fabbro wrote: On Thu, May 18, 2017 at 8:13 AM, Wylie Bayes wrote: Just curious if is a normal thing for folks to be redir

Re: Alternate Puffy Logo Design

2016-05-19 Thread Aner Perez
On 05/19/2016 03:18 PM, Ted Unangst wrote: Mihai Popescu wrote: First, the webpage design change suggestion, then the logo alternative ... I guess a project name change suggestion will follow, I'm curious if this will be till weekend. We're changing version scheme instead. OpenBSD 6.0 will act

Re: can't run multiple instances of httpd, flags not visible in processes

2016-01-27 Thread Aner Perez
On 01/27/2016 06:12 AM, Jiri B wrote: Hi, I can't run multiple instances of httpd via rc.d as I can't distinguish between httpd instances. ps aux never show flags passed to httpd. Could httpd be extended to show flags like sshd does it? root 15681 0.0 0.1 1196 2308 ?? Ssp 12:08PM

Re: Adding a NIC into cramped micro itx board for firewall

2015-05-20 Thread Aner Perez
On 05/20/2015 04:13 PM, Armin Tanzarian wrote: I have a dilemma, I need to add another Intel NIC to my embedded firewall on a micro atx board. However, I can't seem to find a solution to get another one in there. Any help would be great. Thanks Azarian! Does it have to be a NIC or would VLAN

Re: booting

2014-09-18 Thread Aner Perez
On 09/18/2014 04:28 AM, Gregory Edigarov wrote: Hello, Is boot from zalman's virtual cd (a hard disc case that can store many ISO images and then represent itself as a cd) still unsupported? nearly every other .iso works correctly, but not openbsd. -- With best regards, Gregory Edi

Re: pf looses skip on tun0 after OpenVPN startup

2013-06-20 Thread Aner Perez
On 06/20/2013 09:03 AM, Stuart Henderson wrote: On 2013-06-19, Ryan Slack wrote: In pf.conf I've got skip on {lo,tun0}, however after openvpn starts, skip is removed from tun0. Is there a way to avoid this? In the mean time I've added "pass quick on tun0" to pf.conf. You will probably need to

Re: Manual IPsec setup with ipsec.conf

2012-04-05 Thread Aner Perez
On 04/04/2012 08:23 PM, Girish Venkatachalam wrote: # ipsecctl -sa -v FLOWS: flow esp in from 10.1.23.0/24 to 192.168.1.0/24 peer 173.167.82.52 type require flow esp out from 192.168.1.0/24 to 10.1.23.0/24 peer 173.167.82.52 type require flow esp in from 173.167.82.52 to 59.99.242.167 peer 173.1

Re: IPSEC Site-to-Site not routing packages

2012-02-23 Thread Aner Perez
See the thread titled "ipsec tunnel traffic getting icmp host unreachable" on this same list. In short, the answer is that you need a standard route (in addition to the encap route) to the destination networks. Any route that covers your destination network will do. In my case, instead of a

Re: ipsec tunnel traffic getting icmp host unreachable

2012-02-01 Thread Aner Perez
by our BGP session. - Aner On 01/31/2012 03:08 PM, Aner Perez wrote: We have a pair of VPN/firewall systems running 5.0 GENERIC.MP#59 i386 (Lanner FW-7535B). These machines are also running OpenBGP, OpenOSPF, CARP, pfsync, isakmpd and sasyncd. Everything seems to be working fine except for V

ipsec tunnel traffic getting icmp host unreachable

2012-01-31 Thread Aner Perez
We have a pair of VPN/firewall systems running 5.0 GENERIC.MP#59 i386 (Lanner FW-7535B). These machines are also running OpenBGP, OpenOSPF, CARP, pfsync, isakmpd and sasyncd. Everything seems to be working fine except for VPN traffic. We have 33 active ipsec tunnels set up through isakmpd wh

Re: ksh: bad number (with leading zeroes) should not work for 0 - 7

2011-09-12 Thread Aner Perez
On 09/12/2011 05:45 PM, Abel Abraham Camarillo Ojeda wrote: Some of our shell scripts that work with dates and do something like: month=`date +%m` something&& month=$((month-1)) Suddenly started crashing on august... there seems to be a bug identifying not-numbers (numbers with leading zeroes)

Re: Quad-Gigabit 1U mini-itx board recommendations?

2011-09-01 Thread Aner Perez
On 09/01/2011 06:20 AM, Stuart Henderson wrote: Paul Suh goodeast.com> writes: On Aug 30, 2011, at 2:34 AM, Martin Schrvder wrote: 2011/8/30 Paul Suh goodeast.com>: I'm looking for a mini-ITX motherboard with at least 4 x Gig-E ports. Not a board, but full computers: http://www.lannerin

Interpreting strange pflog output

2009-04-24 Thread Aner Perez
s is on "3.9 GENERIC#617 i386" with pf turned on, NTP server enabled and an OpenVPN server running. - Aner -- Aner Perez NCS Technologies, Inc

Using interface group name in "set skip" directive of pf.conf

2008-05-06 Thread Aner Perez
I have 4.3 (clean install from CDs) running on a pair of Intel servers that will serve as a CARP firewall. The 2 servers each have a separate interface which I am using for pfsync with a crossover cable. I have added a group name to the pfsync interface called "pfsyncif". If I add a "set ski

Re: sh/ksh replacement for the following bash command

2008-02-08 Thread Aner Perez
Michael wrote: Hi, I am looking for sh/ksh replacement for the following bash command: $ X="abcdefghi" $ echo ${X:0:2} ab Anyone got an idea? Michael How about this: $ echo ${X%${X#??}} ab ${X#??} is $X with the first 2 characters (??) removed. ${X%Z} is $X with Z removed from

CARP + pfsync firewall rejects ARP updates

2005-11-17 Thread Aner Perez
I am setting up a redundant OpenBSD firewall using CARP and pfsync. I am using an OpenBSD 3.8 install from the CDs. As part of the work being done, I am also configuring Solaris multipathing on some servers inside the firewall. The way Solaris switches to a redundant interface in case of fai