Re: Faking the same LAN over the Internet

2020-04-03 Thread Matt Schwartz
I think as long as one side of the tunnel is not doing NAT then you would be okay. For a while I had an IPSEC VPN going between my cloud server and my home desktop so that I could access my home desktop remotely and it worked well. Although, I have never tried any layer two tunneling. Report back

Re: Faking the same LAN over the Internet

2020-04-01 Thread Matt Schwartz
You could also consider using etherip(4). I think the etherip(4) interface might be more NAT tolerant but I am not really sure.

www.openbsd.org copyright notice

2018-10-19 Thread Matt Schwartz
Just saw today that the copyright notice on the website is from 1996-2017. You guys might want to update it to 2018. :-) -Matt

Re: [patch] 6.3 relayd.conf(5) man page correction

2018-04-08 Thread Matt Schwartz
, Mar 24, 2018 at 09:51:59AM -0400, Matt Schwartz wrote: Hi tech@, One small correction to relayd.conf(5). In the examples section for TLS acceleration, the configuration option match hash "sessid" results in a syntax error. Diff below. Thanks, Matt hi. i'm having trouble getting anyo

Re: Issues with relayd

2018-04-07 Thread Matt Schwartz
ot;$TIMEOUT"     tcp { nodelay, sack, socket buffer 65536, backlog 128 }     tls { no tlsv1.0, ciphers HIGH }     tls no session tickets } relay ghost {     listen on vio0 port 443 tls     protocol https     forward to 127.0.0.1 port 2368 } On 4/7/2018 3:32 AM, Cla

Issues with relayd

2018-04-06 Thread Matt Schwartz
Hi misc@ I am running relayd as a reverse TLS proxy on OpenBSD 6.3 release with the GENERIC kernel. I have noticed two issues that happen: (1) netstat reports that the Recv-q for the ip protocol steadily climbs and never goes back to 0 unless I restart relayd and (2) I am getting a lot of

Re: bioctl disk encryption

2016-04-09 Thread Matt Schwartz
Okay, I wasn't screaming - cheering on a great operating system, most definitely. I'll dig into the source code a bit to see what I can learn. On Apr 9, 2016 9:12 PM, "Jiri B" wrote: > > On Sat, Apr 09, 2016 at 08:18:11PM -0400, Matt Schwartz wrote: > > I really lik

bioctl disk encryption

2016-04-09 Thread Matt Schwartz
I really like the bioctl full disk encryption feature. I would love to see it extended to support multiple users/passkeys. I once worked with a commercial full disk encryption product that allowed this and could even be managed over a network. Coming up with a solution to manage encryption keys

BGP MPLS VPN Question

2016-03-20 Thread Matt Schwartz
Is it possible to setup a multi-site BGP MPLS VPN? Currently, I have it working great between two sites running OpenBSD 5.9-current. I tried adding a third site to my simulation but it hasn't worked. The third site I have sharing the same MPLS label and routing domain. Is this where I am going

Re: ipsec ipcomp howto - OpenBSD 5.7

2016-03-19 Thread Matt Schwartz
ipcomp has not been implemented in ipsec/isakmpd. I've gotten it to work quite well with iked. iked is the key management daemon for IKEv2. On Thu, Mar 17, 2016 at 6:00 PM, Motty Cruz wrote: > configuring ipsec.conf with ipcomp seem to be difficult then I thought. I > enable ipcomp > # sysctl -a

Re: openbsd.org, openssh.com server(s) down

2016-03-15 Thread Matt Schwartz
Seems like there might be an outage. I cannot reach either openbsd.org or openssh.com. On Mar 15, 2016 9:32 AM, "Rudolf Sykora" wrote: > > Hello, > > is it only I who cannot connect to either > of openbsd.org and openssh.com, or > is the server down? > > Thanks > Ruda

bgpd not importing routes from rdomain 1

2016-03-10 Thread Matt Schwartz
I am running OpenBSD 5.8 Release and I have a very simple BGP MPLS VPN setup. I'm close to getting it to work but for bgpd. I think I have my bgpd.conf setup correctly but I'm still having difficulty. Below I gave as much diagnostic info as I could think of. Kindly let me know if I am missing

Re: bgpd network connected

2016-03-09 Thread Matt Schwartz
the default. Frustrating because I'm so close to getting BGP MPLS VPN to work. Of course it still could be me but I've looked at this 6 ways to Saturday and I'm at a loss. > On Mar 9, 2016 6:00 AM, "Tony Sarendal" wrote: > > > > > > > 2016-03-08 15:38 GMT+01:00 Matt Schwa

Re: BGPD not adding routes

2016-03-08 Thread Matt Schwartz
Jeker" wrote: > > On Mon, Mar 07, 2016 at 11:29:48AM -0500, Matt Schwartz wrote: > > Thank you much, Claudio! That was the ticket. I had put my depend on mpe0 > > in the wrong place. I was mostly using your mpls example. Dumb questions: > > Why do you not create a defaul

Re: bgpd network connected

2016-03-08 Thread Matt Schwartz
I did not even know it was broken? On Mar 8, 2016 1:26 AM, "Tony Sarendal" wrote: > > Is there any chance of getting "network inet connected" fixed to 5.9 ? > > Regards Tony

Re: BGPD not adding routes

2016-03-07 Thread Matt Schwartz
Thank you much, Claudio! That was the ticket. I had put my depend on mpe0 in the wrong place. I was mostly using your mpls example. Dumb questions: Why do you not create a default route in rdomain 1 on the 2nd PE in your mpls example network? Why do you not have network 0.0.0.0/0 on the 2nd PE?

BGPD not adding routes

2016-03-05 Thread Matt Schwartz
Hello @misc, I am running OpenBSD 5.8 release and I am finding that BGPD is not adding routes. When I type bgpctl show rib, I don't see any routes added. Did I goof up this configuration? Below are my bgpd.conf files. I do not even see any routes added when I run route -T1 show. I have no

Re: kernel pppoe performance problems

2010-07-14 Thread Matt Schwartz
Hi. I don't see that option available for kernel pppoe. I see it for a userland version. man 4 pppoe shows the same as man 8 pppoe. On Jul 14, 2010, at 1:25 PM, Mitja MuEeniD mi...@muzenic.net wrote: Sounds like you didn't clamp the MSS, see man 4 pppoe towards the end. It's not a

Re: routing problem

2010-07-09 Thread Matt Schwartz
Thank you everyone. I cannot believe I forgot to set up that static route from the DSL modem back to the 10.40.60.0 network. Works like a charm. Next comes ipv6! On Jul 9, 2010, at 2:31 PM, Jussi Peltola pe...@pelzi.net wrote: On Fri, Jul 09, 2010 at 02:19:42PM -0700, Matt S wrote: Given

Re: intel q35 on-board graphics card

2008-11-02 Thread Matt Schwartz
I will get that dmesg together. Discovered that it just doesn't want to work on amd64 platform. I booted with an i386 cdrom and the card was discovered. Bummer thing is that I won't be able to take advantage of my Quad core with 8GB ram. That said, OpenBSD offers everything I want and need in

intel q35 on-board graphics card

2008-10-31 Thread Matt Schwartz
Hello, I have the intel q35 on-board graphics card and am tearing my hair out to get it to work. Dmesg finds it but states that it is not configured??. X errors out with a cannot allocate video ram error. Unfortunately, I am not in a position to post my logs just yet. Could someone at