Re: IPv6 source addresse selection

2015-08-21 Thread Denis Fondras
On Thu, Aug 20, 2015 at 08:28:53AM +, Stuart Henderson wrote: You should be able force it to not be used by doing 'inet6 2001:7f8:81::6:983:1 pltime 0' (just applies to automatic selection, you can still set it manually for IXP peerings), but the behaviour you describe doesn't sound quite

IPv6 source addresse selection

2015-08-19 Thread Denis Fondras
Hi, I have an OpenBSD5.7 router with IPv6 enabled. I have multiple IPv6 addresses : - em0 : 2a00:6060::1/64 - em1 : 2001:7f8:81::6:983:1/64 - gif0 : 2001:470:11:c8::2/128 IPv6 access is provided by HurricaneElectric tunnel with BGP. When I try to reach 2001:7a8:b5ad::1, 2001:7f8:81::6:983:1 is

Re: Update to /etc/services

2015-07-27 Thread Denis Fondras
BTW your diff was line-wrapped, and the BFD entries used spaces instead of tabs, so I hand applied it. Thank you. Sorry for the BFD entries, I copied/pasted from the IANA document and missed that. BTW, what is the prefered way to send diff with lines longer than 80 characters ? I use mutt,

Re: elementary opensmtpd setting on rental server

2015-07-23 Thread Denis Fondras
so , accordingly i rewrite /etc/mail/smtpd.conf listen on lo0 listen on em0 port 587 Tell me if I'm wrong but you don't listen on port 25 or 465.

Re: elementary opensmtpd setting on rental server

2015-07-23 Thread Denis Fondras
buti cannot send mails to x...@gmail.com x...@gmx.com . Do you have any error code or message ?

Re: elementary opensmtpd setting on rental server

2015-07-22 Thread Denis Fondras
Please don't. This will allow people from the outside to send mail to other people not on your machine using your server as a relay. This is most certainly not what you want. Use something like You should re-read the manual :) If from is not specified, from local is assumed.

Updating SSH fingerprints for anoncvs.fr.openbsd.org

2015-05-17 Thread Denis Fondras
Hi, Because I had to check them. Index: build/mirrors.dat === RCS file: /cvs/www/build/mirrors.dat,v retrieving revision 1.421 diff -u -p -r1.421 mirrors.dat --- build/mirrors.dat 13 May 2015 03:01:42 - 1.421 +++

Re: OpenBSD 5.7 release -- CD2 issues

2015-05-15 Thread Denis Fondras
This will be shipped out to everyone, and will be inserted into the orders not yet shipped. If shipping to everyone costs money to the project, I don't want to receive mine. I will burn a CD and keep my non-working set :) Denis

Re: davical on openbsd

2015-04-18 Thread Denis Fondras
the UI is a bit dated (but who needs it besides admin?) That's why I use https://github.com/ledeuns/davical-cmdlnut :)

Re: slow to no throughout on ral

2015-03-06 Thread Denis Fondras
On Thu, Mar 05, 2015 at 08:48:49PM +0200, Lars Nooden wrote: Thanks. I'll investigate that route. Would a weak or dying power supply also affect the throughput on the wireless? It is highly plausible. I discovered it the hard way with my PCI ADSL card. The thoughput has been low until

Re: openbsdstore: enable javascript and buy something or gtfo

2014-10-03 Thread Denis Fondras
Here it is for your convenience: If you wish to contact us by phone, please call +44 (0) 115 986 8786, Monday to Friday 10am-2:30pm - Linda Bramley Email: ord...@openbsdstore.com Address: OpenBSD Store Zednax Limited 241 Wellington Road South Stockport SK2 6NG

Re: Adding RPKI/ROA support to OpenBGPd

2014-08-15 Thread Denis Fondras
Hi, Here is the first patch towards adding RPKI/ROA support to OpenBGPd. It aims at renaming variables functions to prepare the ground for bigger changes. Is it OK ? Denis diff -u bgpd.orig/control.c bgpd/control.c --- bgpd.orig/control.c Fri Aug 15 18:21:53 2014 +++ bgpd/control.c Fri

bgpctl manual has duplicate

2014-08-14 Thread Denis Fondras
Hi, I noticed bgpctl manpage has some duplicate information : --- bgpctl.8.orig Thu Aug 14 18:46:21 2014 +++ bgpctl.8Thu Aug 14 18:46:41 2014 @@ -359,12 +359,6 @@ Multiple options can be used at the same time and the .Ar neighbor filter can be combined with other filters. -.It Cm

anoncvs.fr.openbsd.org down ?

2014-08-09 Thread Denis Fondras
Hi all, I can't seem to reach anoncvs.fr.openbsd.org. Any known incident on this server ? Denis

Re: Not able to pass BIOS drive check with OpenBSD drive attached

2014-07-31 Thread Denis Fondras
Hi, My questions to you are: Has anybody ran into similar issues and was able to resolve them? Do you think this is a OpenBSD related issue and actually solveable (in a reasonable amount of time)? I had the same issue with an Intel NUC D54250WYK. After installing OpenBSD5.5, no way to

Re: CARP cluster: howto keep pf.conf in sync?

2014-07-28 Thread Denis Fondras
Hi, here is my script to sync via rsync. Couldn't rdist(1) help ? Denis

calloc and set var to NULL

2014-07-06 Thread Denis Fondras
Hello all, If I understand correctly calloc(), allocated space is already initialized to zero. So setting var to NULL is not needed. Is it alright or should it be kept just in case ? Regards, Denis --- parse.y.origSun Jul 6 17:51:59 2014 +++ parse.y Sun Jul 6 17:52:15 2014 @@

Re: calloc and set var to NULL

2014-07-06 Thread Denis Fondras
Le 06/07/2014 18:50, Otto Moerbeek a écrit : Please use cvs diff, whcih includes more context. Now we have no idea which parse.y you are patching. Sorry for this oversight and thank you for the mention of cvs diff. Index: parse.y

Re: calloc and set var to NULL

2014-07-06 Thread Denis Fondras
Le 06/07/2014 18:56, Chris Cappuccio a écrit : This is technically correct. So are you, but only because NULL and zero happen to be the same value. They don't necessarily have to be, it is implementation-defined. (Of course there would be fireworks everywhere if they weren't, since lots of

Adding RPKI/ROA support to OpenBGPd

2014-06-08 Thread Denis Fondras
Hello all, I am in the process of adding RPKI/ROA (RFC 6810/RFC 6811) support to OpenBGPd. I have an almost working PoC but I'd like to hear your opinion and discuss implementation details with misc@ before going further. First of all, here is what RPKI-enabled bgpd.conf looks like :

getaddrinfo(3) chroot(2) with root

2014-05-14 Thread Denis Fondras
Hello all, I am burning my last neurons with a behavior I can't explain. I wonder why getaddrinfo() fails when called after chroot() with root user. I have this piece of code : /*--- test.c ---*/ #include sys/types.h #include stdio.h #include sys/socket.h #include netdb.h #include pwd.h int

Re: getaddrinfo(3) chroot(2) with root

2014-05-14 Thread Denis Fondras
Le 14/05/2014 19:14, Peter J. Philipp a écrit : I wonder if you're using the wrong function. There is gethostbyname for forward lookups? I read it was deprecated. Denis

Re: getaddrinfo(3) chroot(2) with root

2014-05-14 Thread Denis Fondras
After chroot, /etc/resolv.conf is no longer available. Thank you very much Ted Vadim. Other daemons like ntpd have a helper process that runs outside chroot and does all of the DNS resolution for them. Ok, I'll look on this side. Thank you, Denis

Re: bgpd/session.c+rde.c code explanation

2014-05-06 Thread Denis Fondras
well, rde_main and session_main fork()... While I'm at it, I can't see where conf = calloc(1, sizeof(struct bgpd_config)) is free()'d. Denis

Re: bgpd/session.c+rde.c code explanation

2014-05-06 Thread Denis Fondras
please, if you want to help, be MUCH more precise (and get clear on what side of the fork() we are). With a report like that I had to go through large parts of code to ecventually maybe spot what you are referring to. That doesn't help, that just costs time. I appreciate the effort, but

Re: bgpd/session.c+rde.c code explanation

2014-05-06 Thread Denis Fondras
By the OS, which cleans up after the process exits. If it wasn't that way, we'd all have a much shorter uptime... Thank you Jérémie :) I had not considered it as I can see ... free(ibuf_rde); ... free(ibuf_main); ... at the end of session_main() in session.c. Denis

Re: icanhaze.c OpenSSH exploit?

2014-05-06 Thread Denis Fondras
Le 06/05/2014 18:50, Dustin Lundquist a écrit : Does anyone have any information that can share? http://pastebin.com/raw.php?i=gjkivAf3 https://lists.cacert.org/wws/arc/cacert-sysadm/2014-05/msg1.html

bgpd/session.c+rde.c code explanation

2014-05-05 Thread Denis Fondras
Hello all, I am hacking around OpenBGPd and there is a portion of code I can't quite understand. I wonder why pipe_m2r[2] is passed as a parameter to pid_t session_main(int pipe_m2s[2], int pipe_s2r[2], int pipe_m2r[2], int pipe_s2rctl[2]) (in session.c) and pipe_s2r[2] is passed to pid_t

Re: bgpd/session.c+rde.c code explanation

2014-05-05 Thread Denis Fondras
Le 05/05/2014 20:35, Stefan Sperling a écrit : Take a look at what fork() does with file descriptors. Thank you Stefan, that's now crystal clear. Denis

BGPd parse.y typo

2014-05-02 Thread Denis Fondras
Hi, A small typo in parse.y : --- parse.y.origSat Apr 26 10:12:32 2014 +++ parse.y Sat Apr 26 10:13:55 2014 @@ -228,7 +228,7 @@ asnumber : NUMBER{ /* -* Accroding to iana 65535 and 4294967295 are reserved

make with argument in port Makefile

2014-04-26 Thread Denis Fondras
Hello all, I'm creating a port for x2goclient (http://www.x2go.org/) but I don't want to build the browser plugin and the documentation, only the heavy client. So instead of the regular make, I have to launch make build_client. Here is my Makefile : --8--- # AGPL-3+ COMMENT=X2GO is for

Keeping OpenBSD installation clean

2014-04-04 Thread Denis Fondras
Hello all, I am using OpenBSD to test multiple softwares of any kind (that might become ports in the future) and I get to install many dependencies and my system becomes rotten and bloated with unused libraries and chunks pretty fast. So I end up reinstalling the system more often than I can

Re: Keeping OpenBSD installation clean

2014-04-04 Thread Denis Fondras
Thank you very much for your answers. Le 04/04/2014 20:55, Mike Erdely a écrit : If you're doing this development in a VM, take a snapshot before making those littering changes. Then revert when you're done. Yep, when doing this kind of thing on a Linux machine, I usually use containers :)

Re: CVS: cvs.openbsd.org: src

2014-03-28 Thread Denis Fondras
Hi all, Why is there cu(1) and tip(1) in base ? I am wondering what is the real difference between these two (apart tip(1) has more options :p) Denis Le 26/03/2014 14:00, Nicholas Marriott a écrit : CVSROOT: /cvs Module name: src Changes by: n...@cvs.openbsd.org2014/03/26

Recovery after pwd.db corruption ?

2014-03-23 Thread Denis Fondras
Hello, After a power-loss, my server rebooted and gave at start : starting network daemons: sshdMar 23 07:59:40 su: /etc/pwd.db: Inappropriate file type or format (failed) smtpdMar 23 07:59:41 su: /etc/pwd.db: Inappropriate file type or format (failed). starting local daemons: cronMar 23

Re: Recovery after pwd.db corruption ?

2014-03-23 Thread Denis Fondras
Thank you very much Ted Theo ! :)

[patch] vmstat(8) usage

2014-03-01 Thread Denis Fondras
Hi all, I've just discovered that OpenBSD vmstat(8) can use wait and count arguments without using -c/-w. Here is a small patch to mention this usage in the manual : Regards, Denis --- vmstat.8.orig Sun Feb 23 15:50:17 2014 +++ vmstat.8Sun Feb 23 15:54:24 2014 @@ -45,6 +45,11 @@ .Op

Re: Trouble with Huawei E5372 (was e3276)

2014-01-24 Thread Denis Fondras
Hello all, I am hijacking this thread because I also have a Huawei LTE device that produces errors when attaching as urndis(4) with OpenBSD5.4-stable. The device is a mobile hotspot Huawei E5372 (http://consumer.huawei.com/en/mobile-broadband/mobile-wifi/features/e5372-en.htm) * dmesg :

Re: Difference between pppoe(8) and pppoe(4) ?

2013-12-27 Thread Denis Fondras
Hi Stuart, As some have replied offlist, I tried to change the MTU and change authentication to pap but to no avail. You can try these to see if they give any clues: - 'ifconfig pppoe0 debug' and watch dmesg - 'tcpdump -nvvs1500 -iem0' (where 'em0' is the parent device of pppoe) Here are

Difference between pppoe(8) and pppoe(4) ?

2013-12-26 Thread Denis Fondras
Hi all ! I'm facing a weirdness with my DSL connection. I have been using pppoe(4) for years and since 2 days it cannot connect (no public IP affected to pppoe0, only PADI retry increments). I guess there have been some changes at the ISP level. Luckily it works with pppoe(8) with identical

Re: [OT] quotes speedup sed

2013-10-01 Thread Denis Fondras
Hi Jérémie, Without the quotes the shell performs splitting, maybe ksh(1) is a bit slow at this... I'd rather download the page to a temp file rather than put that stuff into memory. Ok, thank you. This is actually faster when I use a tempfile. (sed is even faster than gsed in that case)

Re: [OT] quotes speedup sed

2013-10-01 Thread Denis Fondras
Le 01/10/2013 16:56, Alexander Hall a écrit : Without the quotes you get it all on a single line. A 45k line can be tough on a regex. Thank you very much Alexander :) Denis

Re: OpenBSD not forwarding to specific sites

2013-09-30 Thread Denis Fondras
Hi, Le 30/09/2013 15:41, Vijay Sankar a écrit : Quoting John Tate j...@johntate.org: I can ping www.google.com.au and load the page in lynx from the router but not from other machines. Whereas I can use gmail like I am at the moment fine. This is a very, very strange bug I am experiencing.

[OT] quotes speedup sed

2013-09-30 Thread Denis Fondras
Hello all, This afternoon I stumbled upon a weirdness I can't explain. I hope some misc-guru can give a clue. I was parsing a 45kB html document on my OpenBSD 5.3 with the help of sed to extract a value and it was awfully slow. Quoting the input string gave it a real boost : $ time echo

Re: bgpctl sh rib mem

2013-09-28 Thread Denis Fondras
Hi Claudio, You most probably run with softreconf in and therefore there is to prefix entries for each path. This is it, disabling soft-reconfiguration lowers memory usage. Thank you very much for this accurate answer :) Denis

bgpctl sh rib mem

2013-09-22 Thread Denis Fondras
Hello, I have an OpenBGPd router with OpenBSD5.3, peering with two remote routers (one for v4 and one for v6). I expect my peers to send me only valid routes. Is there a way to show every prefixes sent by a peer, even invalid ones ? I know of bgpctl show rib but I'd like to understand what this

Re: bgpctl sh rib mem

2013-09-22 Thread Denis Fondras
Thank you very much Stuart. The most likely reasons are invalid nexthops (bgpctl sh nex) or that the paths are dropped by your filter rules. I have no explicit filter rules in bgpd.conf and bgpctl sh nex shows only valid nexthops. I restarted the daemon but no changes in memory usage.

Re: Network question

2013-09-05 Thread Denis Fondras
Hi Patrick, Le 05/09/2013 05:24, patrick keshishian a écrit : Does there exist a nice way to do this without further sub-dividing the /28? I would bridge the Internet-facing interface and the interface that connects to the switch. This way you can filter with PF without subnetting your

Re: 10GBit OpenBSD Firewall

2013-09-02 Thread Denis Fondras
Hi Mike, Le 02/09/2013 13:21, Mike Belopuhov a écrit : We are trying to address problems with MP networking right now, but due to the lack of manpower the progress is slow. What would you need to accelerate ? Developpers, testers, time, money, hardware, something else ? Denis

Re: IPv6, automatic configuration and nameservers

2013-06-23 Thread Denis Fondras
Hi all, Le 22/06/2013 03:28, Brad Smith a écrit : On 13/06/13 7:53 AM, Gregor Best wrote: Hi list, recently, I've been playing around a bit with IPv6, and IPv6-only networks. While doing that, I have not found an automated way to add nameservers announced via router advertisements. dhclient

Re: IPv6, automatic configuration and nameservers

2013-06-23 Thread Denis Fondras
Le 23/06/2013 22:06, Brad Smith a écrit : That is for rtadvd, which has been integrated, not rtsold. Doh ! You are right, sorry for the noise. Denis

Re: NAT over enc(4)

2013-02-06 Thread Denis Fondras
Hello Mitja, Le 05/02/2013 22:36, Mitja Muženič a écrit : I'm the author of the article you quoted. Your article is really great, I'm glad to get some help from you :) Do you have a default gateway? IPsec on OpenBSD behaves weirdly if you don't have one (even if it's not needed!). This

NAT over enc(4)

2013-02-05 Thread Denis Fondras
Hello all, I'm trying to build an IPSec VPN between two sites and both sites are using the same addressing plan. I'm using OpenBSD 5.1 on a Soekris board on one site and a closed-source appliance on the other end. I remembered an old article on undeadly.org

Re: firefox-18.0p0 segmentation faulting after upgrade to current

2013-01-22 Thread Denis Fondras
I'm also getting segfaults on i386, after a clean install of (not so) -current (#15 Jan 11). Will upgrade to #17 and try again. And I am too. Clean install of snapshot from Jan.14 on an i386 laptop. Exact same backtrace as posted earlier. Denis

Re: How to configure pppoe client on OpenBSD?

2013-01-13 Thread Denis Fondras
Hi, Le 13/01/2013 19:37, Random, Eyes a écrit : I have an OpenBSD 5.1 installed + a cable from my ISP. I have the username/password for the PPPoE connection, but how can I configure the connection to be permanent? (I have 1 interface on the machine.) man 4 pppoe is the way to go.

Re: How to configure pppoe client on OpenBSD?

2013-01-13 Thread Denis Fondras
Le 13/01/2013 21:48, Mihai Popescu a écrit : Would it help to put a link to so called FAQ in the right on the first page of www? Perhaps just below the T-shirts and posters, reading Here you can find help about your questions and for installing. New for me is the basements machines picture ...

Re: Why anyone in their right mind would like to use NAT64

2012-10-24 Thread Denis Fondras
Hello, Le 24/10/2012 18:43, Daniel Ouellet a écrit : Hi, Just saw a few questions and patch for NAT64 on misc and tech@ and I am really questioning the reason to be fore NAT64 and why anyone in their right mind would actually want to use this? What is your proposal to allow a v6-only

Re: Multiple ISP-connections/Routing/Packet filtering

2012-01-14 Thread Denis Fondras
Hello, Unfortunately, the pf.conf syntax has changed since v4.6 and while I do plan to upgrade my own firewall to v5.0 (I've bought the CD already) I haven't yet had time to perform the upgrade. As a result, I haven't worked out what the equivalent 'modern' syntax would be, but you might be

Re: Apache problems

2011-09-18 Thread Denis Fondras
Le 18/09/2011 15:54, L. V. Lammert a icrit : Something is borking Apache and causing it to use UP all resources in an 'unauthorized' manner, or *think* they have all bee used. Could this be linked to some Apache Killer ?

Re: Problem with uplcom(4) - hangs

2010-09-01 Thread Denis Fondras
Hello, Le 29/08/2010 23:38, Martin PelikC!n a C)crit : I've seen way too many faulty/misbehaving uplcom's. Have you tried different piece of hardware? I justed tested with Prolific 2303 (not X) and I could work for 2 hours without disconnection. So it might be a buggy adapter or a buggy

Re: Problem with uplcom(4) - hangs

2010-08-30 Thread Denis Fondras
Le 29/08/2010 23:38, Martin PelikC!n a C)crit : I've seen way too many faulty/misbehaving uplcom's. Have you tried different piece of hardware? I haven't. The only other piece of serial port I have is an integrated stuff on another computer and that one works great :)

Problem with uplcom(4) - hangs

2010-08-29 Thread Denis Fondras
Hello misc@, I have a problem with uplcom(4). Whenever I connect to a remote terminal with cu -l /dev/ttyU0, it hangs after a few seconds (usually under 2 minutes). I tried various settings and still have the same issue : - using /dev/cuaU0 - setting speed 9600 or 19200 - connecting to a

Re: smtpd: feature like the transport table in postfix

2009-10-25 Thread Denis Fondras
Hi Rene, Perhaps I didn't understand correctly your problem but can't you just use : accept from $mynetwork for domain example.net relay ? and let smtpd resolve example.net MX ? Denis

undeadly.org IPv6 reachability

2009-08-16 Thread Denis Fondras
Hello Misc, Since a few day, I can't connect to Undeadly.org over IPv6 (works well over v4). Is there any issue going on these days ? Thanks, Denis

Re: [obsdfr-misc] besoin de comprendre l'install de ma soekris

2008-11-14 Thread Denis Fondras
Salut, voila mon histoire, je viens d'installer openbsd4.4 ( au moin dix fois en 2 jours ;oD ) sur ma soekris en pxe avec l'interface minicom pour girer l'install . Apris de multiples echec de connexion suite ` mon installation ( essais avec 2 postes sous deux distributions Linux

Re: IPv6 routing

2008-11-11 Thread Denis Fondras
A bit late perhaps, but this is how I do it : route add -inet6 -net $PREFIX:: -prefixlen 48 -interface ::1 -reject Of course, you have to set PREFIX to the prefix you want to reject. After this, all routes you add should be more specific (smaller prefix) so should work anyway. I add this line

Re: IPv6 routing

2008-11-07 Thread Denis Fondras
BTW: Don't forget to route the prefix to lo at the last hop so that any unassigned subnets don't cause the packet to be bounced back up to the default route. Could you explain how to do that on OpenBSD please ? Perhaps my box is misconfigured... :p TIA, Denis

Re: CARP not leaving backup state

2008-07-24 Thread Denis Fondras
We have also experienced problems with CARP when moving ESX from 3.0i to 3.5. No solution yet. Have tried to tweak the vSwitch settings ? I remember I made CARP work with 2 OpenBSD 4.2 VM on ESX 3.5 after changing some settings in the networking properties... (I know I should document what

Re: OpenBSD and iSCSI support

2008-07-07 Thread Denis Fondras
Eventually. I started writing the qli driver but have not had time to finish that. I also am planning to do a software initiator/target using softraid however that is further out. *sigh* so much code so little time... Thank you for the answer. Could you share what you've done please ?

OpenBSD and iSCSI support

2008-07-06 Thread Denis Fondras
Hello, I'm doing some testing with iSCSI and I'd like to know if there is any plan to add iSCSI support to OpenBSD (initiator and/or target) ? Denis

Re: Belinea s.Book1 can't boot OpenBSD

2008-04-16 Thread Denis Fondras
Hello all, After upgrading the BIOS, hacking the kernel and fighting with the boot sector, it boots OpenBSD 4.2 :) 1- I'm not sure flashing the BIOS is mandatory 2- The kernel hack (I need to find out what really makes it reboot) : --- wscons_machdep.cWed Apr 16 23:09:35 2008 +++

Re: Belinea s.Book1 can't boot OpenBSD

2008-03-02 Thread Denis Fondras
Andrew Smith a e'crit : Oh my, another Nanobook variant. Try disabling ACPI in the kernel before you boot. You may want to do this from another machine and copy the new kernel to the machine using the Install CD boot because the PS2K device doesn't seem to be handled on mine (Packard Bell

Re: Belinea s.Book1 can't boot OpenBSD

2008-03-02 Thread Denis Fondras
Another piece of information : none of {Open,Free,Net}BSD will boot on the beast :/ (Same result : reboot before kernel loading) Denis

Belinea s.Book1 can't boot OpenBSD

2008-03-01 Thread Denis Fondras
Hello, I'm currently testing a Belinea s.Book1 microlaptop (http://www.belinea.com/en/s_line/product_tagline.jsp?node=652artnr=399501) and I can't install OpenBSD on it. At first sight it seems that every core components are supported (Via VX700 + Via C7-M - you can check the PDF Datasheet

<    1   2