Re: relayd ssl termination advice

2023-10-08 Thread Bruno Flueckiger
On 08.10.2023 03:00, Courtney wrote: Hello everyone, I'm seeking an ideal way to make secure https connections to a handful of web servers in my house. Currently I have a Nextcloud server and a gitea server, but only the Nextcloud server is being port forwarded on 80/443. I want to make my

Re: Restore pf tables metadata after a reboot

2020-05-29 Thread Bruno Flueckiger
On 29.05., Walter Alejandro Iglesias wrote: > In article <20200528165448.ga22...@flueckiger.lan> Bruno Flueckiger > wrote: > > On 26.05., Walter Alejandro Iglesias wrote: > > > I understand that this command: > > > > > > # pfctl -t spam -T expire

Re: Restore pf tables metadata after a reboot

2020-05-28 Thread Bruno Flueckiger
On 26.05., Walter Alejandro Iglesias wrote: > I understand that this command: > > # pfctl -t spam -T expire > > Takes in care the "Cleared" date: > > # pfctl -t spam -vT show > ___.___.22.65 > Cleared: Mon May 25 16:10:22 2020 > ___.___.167.62 > Cleared:

Re: Installing OpenBSD -current snapshots

2019-11-28 Thread Bruno Flueckiger
On 27.11., Clay Daniels wrote: > I have successfully installed OpenBSD 6.6 release and would like to give > the Current Snapshots a try. I went to a mirror, and to: > > Index of /pub/OpenBSD/snapshots/amd64/ > > I saw install66.fs (probably for usb memstick) and install66.iso (surely > for a

Re: Ergonomic USB wired mouse

2019-08-25 Thread Bruno Flueckiger
On 24.08., Anatoli wrote: > Hi Bruno, > > AWESOME!! Thanks a lot! You can add "MX Vertical" to the list of the > successfully tested pointing devices :D > > I just made some minor changes as this mouse only has 2 additional physical > buttons (no secondary wheel, nor anything else). I removed the

Re: Ergonomic USB wired mouse

2019-08-20 Thread Bruno Flueckiger
On 19.08., Anatoli wrote: > I'm using Logitech MX Vertical. Nice mouse, IMO one of the most ergonomic > ones though it needs some adaptation. It has 2 additional buttons which do > NOT work on -current (better to say, they work like scrolling the wheel > instead being left and right), I'd like to

Re: Use xenodm like startx?

2019-01-31 Thread Bruno Flueckiger
On 31.01.19 11:57, John Ankarström wrote: > trondd wrote: > > It's not really that complicated. The bare minimum is to copy your > > .xinitrc to .xsession and then just run xenodm on demand with doas. All > > the configs already exist in /etc/X11/xenodm. Nothing requires you to run > > it at

Re: daily cron not starting

2018-11-12 Thread Bruno Flueckiger
On 13.11.18 06:35, Tony Boston wrote: > Hi misc@, > > the daily cron is not running anymore although I can execute '/bin/sh > /etc/daily' by hand just fine. I don't see anything in the logs and I > don't have any clue what else to check. > Do you guys have any idea? > > -- > Tony > > GPG-FP:

Re: growfs(8) to lower offset

2018-11-06 Thread Bruno Flueckiger
On 05.11.18 19:47, David Higgs wrote: > I read both the FAQ section and the growfs(8) man page but I am not > yet confident that what I want to do is supported / safe. > > http://www.openbsd.org/faq/faq14.html#GrowPartition > > I started with a number of partitions and a bunch of free space. I

Re: syntax error and doas.conf

2018-10-31 Thread Bruno Flueckiger
On 31.10.18 10:42, Markus Rosjat wrote: > Hi all, > > just something I notice while trying out stuff with doas and my python > scripts. If you do a mistake and have a syntax error in the doas.conf > file you can easily look you self out from root privilages  :( > > consider a a case where your

Re: Backup of OpenBSD under VMware

2018-07-01 Thread Bruno Flueckiger
On 30.06.18 14:23, Paolo Aglialoro wrote: > Hello, > > the scenario is a cluster of ESXi nodes on which OpenBSD should run as a VM. > > Currently the cluster is being backed up by Veeam, I tried to insert th > obsd VM inside the backup job but no success, with following "Error: An > error

Re: Partitioning recommendations for 6.3?

2018-06-25 Thread Bruno Flueckiger
On 25.06.2018 14:17, John Long wrote: Been a while and don't have my other OpenBSD boxes accessible. What are the recommended partitions and appropriate sizes for people who want to track stable and possibly build the whole ports tree? Thanks, /jl Check the detailed explanation given by

Re: Networking FAQ: VMM internet access

2018-06-01 Thread Bruno Flueckiger
On 01.06.2018 10:54, Leonid Bobrov wrote: # cat /etc/resolv.conf # Generated by vio0 dhclient nameserver 100.64.2.2 nameserver 100.64.2.2 # ping 192.168.1.1 PING 192.168.1.1 (192.168.1.1): 56 data bytes 64 bytes from 192.168.1.1: icmp_seq=0 ttl=63 time=0.938 ms 64 bytes from 192.168.1.1:

Re: smtpd relay problem

2018-05-03 Thread Bruno Flueckiger
On 02.05.18 15:05, Rudolf Sykora wrote: > Hello misc, > > I just wanted to send mail through my gmail account > using smtpd in the relay mode. > I am unsuccessful so far, and do not understand what's > going wrong. > > smtpd log of the attempt to send the email follows. > Can anybody help,

Re: Syn flood crashed my LAN

2018-02-11 Thread Bruno Flueckiger
On 12.02.18 01:26, Martin Hanson wrote: > Hi, > > I have a home network that is segmented into 3 different zones using a NIC > with 4 ports sitting on an OpenBSD firewall/dhcp server. One port is > connected to the Internet (ISP router) and each of the three others has a > D-Link DGS-1005D

Re: font path ignorance

2018-01-24 Thread Bruno Flueckiger
On 24.01.18 06:20, Ed Ahlsen-Girard wrote: > Built a new system, and it didn't have all the fonts that were on the > old one. I looked for msttcorefonts as a package, and didn't find it. So > I went through ports and found it, and some other font sets that I > remembered from before, make, make

Re: touchpad input driver: testing needed

2017-08-03 Thread Bruno Flueckiger
I've tested it on my HP ProBook 450 G3 with the snapshot from July 30. In xorg.conf I've put the block you've proposed, there is nothing else in it. Cursor moves: OK Tapping:OK one finger = left click, two fingers = right click Swapsides: not OK, scroll bar moves the same way my

Re: querying scsi id/wwn for scsi disk

2017-03-30 Thread Bruno Flueckiger
On Thu, Mar 30, 2017 at 07:21:22AM -0400, Jiri B wrote: > On Thu, Mar 30, 2017 at 12:59:00PM +0200, Bruno Flueckiger wrote: > > I see your point with the installer. Default labels make the disks > > indistinguishable. The following diff prints the raw infos from dmesg > > ra

Re: querying scsi id/wwn for scsi disk

2017-03-30 Thread Bruno Flueckiger
On Thu, Mar 30, 2017 at 04:53:51AM -0400, Jiri B wrote: > On Thu, Mar 30, 2017 at 10:25:18AM +0200, Bruno Flueckiger wrote: > > > how to query scsi id or wwn for a scsi disk in OpenBSD? I'd like to get > > > this > > > info and extend installer to provide

Re: querying scsi id/wwn for scsi disk

2017-03-30 Thread Bruno Flueckiger
On Thu, Mar 30, 2017 at 04:04:51AM -0400, Jiri B wrote: > Hi, > > how to query scsi id or wwn for a scsi disk in OpenBSD? I'd like to get this > info and extend installer to provide more info about disks (because currently > it's imposible to distinguish between scsi disks if they are same size

Re: serial port expansion card

2017-03-03 Thread Bruno Flueckiger
On Fri, Mar 03, 2017 at 08:54:02AM +0100, Jan Stary wrote: > On Mar 03 08:46:11, h...@stare.cz wrote: > > This is current/amd64 (dmesg below). I got me this > > https://www.alza.cz/EN/axago-pcea-s2-d277216.htm > > to have two extra serial ports to connect to my ALIXes. > > It shows up in dmesg as

Re: Flaw in ipsec.conf(5)?

2016-05-27 Thread Bruno Flueckiger
After discussing this with Philipp Buehler off list I have reworked my diff to make things easier in the example. The paragraph which contains set skip on enc0 just before the ruleset is removed. All filtering in the rule set is done on sk0, skipping enc0 entirely. The new rule set looks like

Re: Flaw in ipsec.conf(5)?

2016-05-27 Thread Bruno Flueckiger
On Thu, May 26, 2016 at 08:41:49AM +0100, Jason McIntyre wrote: > On Tue, May 24, 2016 at 10:53:16AM +0200, Bruno Flueckiger wrote: > > Hi, > > > > I've tested IPsec connections in my lab. The setup looks like this: > > > > [cli] <-- vlan10 --> [gw1

Flaw in ipsec.conf(5)?

2016-05-24 Thread Bruno Flueckiger
Hi, I've tested IPsec connections in my lab. The setup looks like this: [cli] <-- vlan10 --> [gw1] <> [inet] <> [gw2] <-- vlan20 --> [srv] IPsec= During the testing I think I've found a flaw in ipsec.conf(5). According to the man page the esp

Re: light browsers

2016-05-12 Thread Bruno Flueckiger
On 12.05.2016 00:26, 3sad68+aivzh013i5...@guerrillamail.com wrote: Hi, did anyone try Midori or other light browsers with good results ? Sent using GuerrillaMail.com Block or report abuse: https://www.guerrillamail.com/abuse/?a=TEhnBi0PU7Ebih2wvnENdQ%3D%3D Midori works fine. But if your

Re: OpenBSD mailserver success stories ?

2016-04-26 Thread Bruno Flueckiger
On 26.04.2016 18:32, stan wrote: Given that, most of the things we are doing with FreeBSD, Apache, Samba, NFS etc, do not concern me as to doing them with OpenBSD. but I am a bit concerned about the mailserver. We use it for internal mail, and it gets mail from a large variety of systems,

Re: 5.9 discs in the wild. Europe/Switzerland

2016-04-21 Thread Bruno Flueckiger
On 21.04.2016 05:45, noah pugsley wrote: Thank you all for the best little correctness focused general purpose operating system in the known universe. With all the nonsense created every day, a little sanity now and then, is cherished by the wisest men. http://noahpugsley.net/59.jpg

Re: OpenBSD 5.8 on VMware 5.5

2015-12-01 Thread Bruno Flueckiger
On 01.12.2015 16:50, Felipe Gomes wrote: Folks, I've been trying to search for more information on OpenBSD as a VMWare guest, but I wasn't able to find much... and the information is pretty much outdated. What are the recommendations for OpenBSD 5.8 (amd64) as a guest on VMware 5.5? Guest

Re: Question re dhclient.conf

2014-09-29 Thread Bruno Flueckiger
On 29.09.2014 13:39, Duncan Patton a Campbell wrote: On Mon, 29 Sep 2014 05:28:27 -0600 Duncan Patton a Campbell campb...@neotext.ca wrote: /etc/dhclient.conf used to contain a script tosomfile ; option that could, amongst other things, be used to set a dynamic assigned dns address to a

Re: PF port forwarding issue

2014-01-17 Thread Bruno Flueckiger
On 18.01.2014 01:49, Matt M wrote: I am using PF on 5.4-stable to NAT and firewall my network, but I can't get port forwarding to work. All requests end up at the OpenBSD box and go no further. For instance, I opened port 22 in PF to forward to a Centos box, but ssh on the openbsd box still

Re: open bsd router

2013-10-04 Thread Bruno Flueckiger
On 03.10.2013 23:37, alexey.kurin...@gmail.com wrote: My favorite: http://www.pcengines.ch/product.htm http://en.wikipedia.org/wiki/Raspberry_Pi Question is - what boards succesfully used by members of misc@openbsd.org list? I glad to read members IMHO about used boards. I'm using different

Re: open bsd router

2013-10-04 Thread Bruno Flueckiger
On 04.10.2013 15:05, Jan Stary wrote: Just to praise PC Engines a little bit more: when my ALIX.1C stopped working for some reason, I sent it to PC Engines, who found that the board is completely OK - it was my power supply that was faulty (which I could then confirm). Before sending it back,

Re: VirtualBox+chive+mysql

2013-08-14 Thread Bruno Flueckiger
On 14.08.2013 14:21, Tony Berth wrote: Dear group, I have following configuration: - latest Ubuntu amd64 server - VirtualBox running on the above Ubuntu server - openbsd 5.3 (amd64) with mysql and chive installed and running inside VirtualBox when I try to connect to the openbsd mysql

Re: Sturdy and secure mail server

2013-05-07 Thread Bruno Flueckiger
Hi Irek I had pretty much the same requirements for my mail server at home as you have. Over the time I got different mail accounts for different purposes. So I wanted to consolidate all the accounts on my own server running in my home network. Since several years (and releases) I'm running

nginx in 5.2 without mail proxy features - Reasons?

2013-04-19 Thread Bruno Flueckiger
Today I wanted to test the mail reverse proxy features of nginx. For this I've installed a fresh VM running release 5.2. To my surprise I had to realize that nginx is compiled without the mail proxy features in the base system. [bruno@gateway ~]$ /usr/sbin/nginx -V nginx version: nginx/1.2.2

Re: nginx in 5.2 without mail proxy features - Reasons?

2013-04-19 Thread Bruno Flueckiger
On 19.04.2013 14:32, Jiri B wrote: I would say maybe because nginx' purpose in base install is to be webserver ? :) You can use one from ports. jirib The ports tree didn't come to my mind when I've been writing my mail. Thanks for the hint. I see the point that it is meant to be a

Re: Strange ksh history behaviour

2013-01-07 Thread Bruno Flueckiger
On 07.01.2013 14:54, Sébastien Marie wrote: In order to keep EDITOR to vi, you should set VISUAL to emacs in your .profile: VISUAL=emacs EDITOR=vi export VISUAL EDITOR Thanks a lot. You just solved one of those small problems I've had for years on all my OpenBSD systems. It was a pain in