Re: signify and ftp.eu.openbsd.org

2018-04-11 Thread Peter J. Philipp
ftp.eu.openbsd.org +short 2001:700:3:4017::100 that is in my DNS cache is this all correct? Best Regards, -peter On 04/11/18 19:54, Peter J. Philipp wrote: > Hi, > > I just downloaded this install63.iso from https://ftp.eu.openbsd.org: > > beta$ signify -C -p /etc/signify/open

signify and ftp.eu.openbsd.org

2018-04-11 Thread Peter J. Philipp
nature Verified install63.iso: FAIL beta$ sha256 -C SHA256 install63.iso (SHA256) install63.iso: FAILED What's going on ? Why has the checksum failed? Regards, -peter

Re: Having problems sleeping a used computer

2018-04-10 Thread Peter J. Philipp
On Mon, Apr 09, 2018 at 11:51:19PM +0200, Peter J. Philipp wrote: > Hi, > > I inherited a computer which I want to make a sleeping backup computer. The > idea is that it sleeps during the day and then I wake it with arp -W and it > receives backups and then it goes back to sleep,

Having problems sleeping a used computer

2018-04-09 Thread Peter J. Philipp
ith 2 wake sessions. So I'm wondering if anyone has hints, patches to try, or otherwise? Best Regards, -peter OpenBSD 6.3-current (GENERIC.MP) #0: Mon Apr 9 22:50:34 CEST 2018 p...@theta.centroid.eu:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 4259340288 (4062MB) avail mem = 41231482

is gif(4) not backward compatible between 6.3 and 6.2?

2018-04-06 Thread Peter J. Philipp
!"#   00c0: 2425 2627 2829 2a2b 2c2d 2e2f 3031 3233  $%&'()*+,-./0123   00d0: 3435 3637    4567 Regards, -peter

Re: ipv6 nd

2018-04-03 Thread Peter van Oord van der Vlies
ia_pd 2 vether6/1 #slaac private Van: Peter van Oord van der Vlies Verzonden: dinsdag 20 maart 2018 00:27 Aan: misc@openbsd.org Onderwerp: ipv6 nd Hello Misc, Today i replaced my cisco 881 because it wasn't able to handle the bandwidth anymore. I

Re: bug tracking system for OpenBSD

2018-03-30 Thread Peter Hessler
On 2018 Mar 30 (Fri) at 23:01:16 +0300 (+0300), Sergey Bronnikov wrote: :On 17:54 Tue 19 Dec , Ted Unangst wrote: :> Kai Wetlesen wrote: :> > > > you don't have to announce your bug database the first day you set it up. in :> > > > fact, it's better not to. but in a few months time, when somebody

Re: counting dropped packets for pf

2018-03-30 Thread Peter N. M. Hansteen
not going to get you anywhere. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.

Re: counting dropped packets for pf

2018-03-29 Thread Peter N. M. Hansteen
about pflow unfortunately isn't going to get you anywhere. Exploring the other options might. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network t

Re: counting dropped packets for pf

2018-03-28 Thread Peter N. M. Hansteen
ar 28 16:15:29] peter@skapet:~$ sudo pfctl -vsl blockgen 3739 452 19856 448 19664 4 192 0 portalbrutes 3739 0 0 0 0 0 0 0 abusives 3739 301 14681 301 14681 0 0 0 webtrash 3438 0 0 0 0 0 0 0 bruteforce 3438 0 0 0 0 0 0 0 longterm 3438 0 0 0 0 0 0 0 remotex11 3438 0 0 0 0 0 0 0 man pf.conf is your

Re: ipv6 nd

2018-03-20 Thread Peter van Oord van der Vlies
ption interface_mtu require dhcp_server_identifier allowinterfaces pppoe0 vether6 interface pppoe0 ia_pd 2 vether6/1 #slaac private No prefixes received. Thanks Peter

Re: ipv6 nd

2018-03-19 Thread Peter van Oord van der Vlies
  On Tue, Mar 20, 2018 at 12:19:09AM +, Peter van Oord van der Vlies wrote: > > > > Is slaacd or a dhcpv6 client running? > > Yes i tried with slaacd > Does `slaacctl show interface $if` reflect that a router advertisement > has been received? No, only this :

Re: ipv6 nd

2018-03-19 Thread Peter van Oord van der Vlies
> Is slaacd or a dhcpv6 client running? Yes i tried with slaacd > -- > 0x7D964D3361142ACF On Mon, Mar 19, 2018, at 16:27, Peter van Oord van der Vlies wrote: > Hello Misc, > > > Today i replaced my cisco 881 because it wasn't able to handle the > bandwidth anymor

ipv6 nd

2018-03-19 Thread Peter van Oord van der Vlies
dhcp client pd my_prefix rapid-commit On my obsd wan interface i did ifconfig pppoe0 inet6 autoconf but i am not getting any global address. Anyone here that can set me into the right direction ? Thanks! Peter

Re: last snapshot points to /pub/OpenBSD/6.3/ instead to /pub/OpenBSD/snapshots/

2018-03-19 Thread Peter N. M. Hansteen
;re running a snapshot. It's in the pkg_add man page, but easy to miss I guess. - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all maliciou

monkeying around with pf (why scrub twice?)

2018-03-17 Thread Peter J. Philipp
7;ll just dump the code. The patches to the OS first and then the small program to ioctl the buffer into the kernel. Regards, -peter Index: sbin/pfctl/parse.y === RCS file: /cvs/src/sbin/pfctl/parse.y,v retrieving revision 1.670 d

Re: OT strange nsd behavior

2018-03-17 Thread Peter J. Philipp
nfig file as well. Also try not to combine the A for proprevod.com. that you have in your zone file with the @, otherwise it's confusing for any reader. Regards, -peter > On 16.3.2018 ??. 21:35 ??., Stephane HUC "PengouinBSD" wrote: > > Are you sure your zonefile is re

Re: scsi_xfer pool exhausted

2018-03-14 Thread Peter van Oord v/d Vlies
Hello Martijn, Did you ever found an solution ? I have the same at a customer system. -- Sent from: http://openbsd-archive.7691.n7.nabble.com/openbsd-user-misc-f3.html

Re: Flow Tools

2018-03-13 Thread Peter N. M. Hansteen
k it is awesome ... pmacct is in ports - http://openports.se/net/pmacct so likely straightforward to get started - P -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malic

Re: Flow Tools

2018-03-13 Thread Peter N. M. Hansteen
ules for your netflow data with dup-to, but that may be pushing the number of hoops to jump through too far). Michael's book is probably still the best reference on netflow. I describe a setup with pflow and nfsen at http://bsdly.blogspot.com/2014/02/yes-you-too-can-be-evil-network.html - that p

6.3-beta quirk

2018-03-11 Thread Peter J. Philipp
and back on. dmesg.boot of the machine after my signature. -peter OpenBSD 6.3-beta (RAMDISK_CD) #40: Fri Mar 9 08:27:05 MST 2018 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/RAMDISK_CD real mem = 34006806528 (32431MB) avail mem = 32972382208 (31444MB) mainbus0 at root bios0 at

Re: openbsd 63-eta and dhcpclient problem

2018-03-09 Thread Peter Hessler
think the interface is broken . : :today i try the linux , first and wonder why is ethernet working. : :did you need the tcpdump farther ? : :holger : : : :Am 09.03.2018 um 10:22 schrieb Peter Hessler: :> tcpdump -c100 -ni re0 port 67 or port 6 : -- Miksch's Law: If a string has on

Re: openbsd 63-eta and dhcpclient problem

2018-03-09 Thread Peter Hessler
447]: DHCPDISCOVER from e8:03:9a:b4:f6:48 via :vlan100 :Mar  9 10:05:38 furt dhcpd[72447]: DHCPOFFER on 192.168.131.101 to :e8:03:9a:b4:f6:48 via vlan100 : : :holger : : : :Am 09.03.2018 um 09:37 schrieb Peter Hessler: :> please include the output of "dhclient -vv re0" :> :> :>

Re: openbsd 63-eta and dhcpclient problem

2018-03-09 Thread Peter Hessler
please include the output of "dhclient -vv re0" On 2018 Mar 09 (Fri) at 09:14:08 +0100 (+0100), Holger Glaess wrote: :hi : : :i have here an fresh installed openbsd 6.3-beta on an samsung ultrabook :series 5 : :problem is the he don't get an ip address on his ethernet interface. : : :i see on my

Re: drm permissions error with i965 on amd64 6.2 with libGL applications

2018-03-03 Thread Peter J. Philipp
Hi, does the xf86 manpage help any?  I don't know if the two are related but when it comes to permissions of the vga card, I think this is a spot to look. Regards, -peter On 03/03/18 12:52, Z Ero wrote: > "libGL error: failed to open drm device: Permission denied > libGL error

Re: Queuing faster than 4 Gbps

2018-02-26 Thread Peter N. M. Hansteen
ent queueing code is quite different in most respects. > As of today current, it seem to be still present. Any plans to upgrade this > in the (near) future ? I'm a bit curious as to how you reached this conclusion. You're hitting one or more limits in your environment, but how do yo

Re: Using OpenBSD on a thinkpad?

2018-02-19 Thread Peter N. M. Hansteen
f glance on the specifications for the models you mention do not raise any obvious red flags here. - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malic

Re: Hard disk controller not recognized

2018-02-12 Thread Peter N. M. Hansteen
not support) instead of a more useful SATA mode: > pciide0 at pci0 dev 31 function 2 "Intel 82801HBM RAID" rev 0x04: DMA, > channel 0 wired to native-PCI, channel 1 wired to native-PCI > pciide0: using apic 2 int 19 for native-PCI interrupt See if the BIOS offers a choice of m

Re: Why is so slow the download speed in OpenBSD?

2018-02-11 Thread Peter N. M. Hansteen
some reason did not get one of the better N modes would fit the symptoms you describe. But so would quite a few other things. You really need to supply more information if you want useful help in troubleshooting. - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team htt

Re: samba client

2018-02-08 Thread Peter N. M. Hansteen
ettext devel/gettext-tools devel/gmake textproc/gsed R-deps: STEM->=0.10.38:devel/gettext Archs: any which might fit the scenario. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember

Re: OpenBSD IRQ sharing on ISA

2018-02-08 Thread Peter N. M. Hansteen
any help at all, *please* get hold of a still-supported release (6.1 or 6.2, or even a -current snapshot) and see what happens when you expose your hardware to that. - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.

Re: Wondering if any of my hardware is working on -current

2018-02-07 Thread Peter N. M. Hansteen
is in my OpenBSD/amd64 dmesg: urtwn0 at uhub1 port 2 "Realtek 802.11n WLAN Adapter" rev 2.00/2.00 addr 7 urtwn0: MAC/BB RTL8188CUS, RF 6052 1T1R, address 04:a1:51:6a:0e:3e -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://w

Re: Wondering if any of my hardware is working on -current

2018-02-07 Thread Peter N. M. Hansteen
uld be a wireless network card - there has been some work on athn(4) recently, but I don't have any of the hardware to hand so I'm guessing. - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.n

Re: root autologin?

2018-02-06 Thread Peter N. M. Hansteen
On 02/06/18 14:12, Mohammad BadieZadegan wrote: > Hi everybody, > How can I boot OpenBSD with root autologin? If you have to ask, the you definitely should not try. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net

Re: iked: how to request a virtual IP when running as a road warrior

2018-02-04 Thread Peter Müller
Hello, thanks for the reply. > Hello > > On 01/30/18 22:00, Peter Müller wrote: > > Hello *, > > > > I am trying to set up an IPsec connection between OpenBSD 6.2 > > and an IPFire firewall, while the OpenBSD is a road warrior. > > There, I use "iked

iked: how to request a virtual IP when running as a road warrior

2018-01-30 Thread Peter Müller
o request a virtual IP? Any help is highly appreciated, since I am flying blind here. Thanks and best regards, Peter Müller

Re: identifying software and licenses used in base install

2018-01-17 Thread Peter N. M. Hansteen
ems referenced in Theo's message would serve to convince most sane people that a a significant effort was put in to ensure that the tree has no improperly licensed material. - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://w

Re: risc-v

2018-01-15 Thread Peter J. Philipp
ard-risc-v-core/ But its a little pricy, I suspect there is more of these kinds of dev boards coming. Regards, -peter

Re: risc-v

2018-01-15 Thread Peter J. Philipp
el cross compiled (perhaps with a freebsd locore?) and that would further my goal of booting a bsd.rd or something in qemu. Cheers, -peter > 2018-01-14 21:43 GMT+01:00 Peter J. Philipp : > > > Is anyone interested/working/planning around this ingenious open source > > Inst

risc-v

2018-01-14 Thread Peter J. Philipp
ound at https://riscv.org , there is a FreeBSD port but I had problem building it in vmware. Perhaps FreeBSD can serve as a helping source to port OpenBSD to this? Regards, -peter

Re: Where to get Loongson hardware?

2018-01-08 Thread Peter N. M. Hansteen
's probably wise to check beforehand by email or somesuch just how current the information is. But if the hardware is actually available, it would be quite interesting to play with something very not-intel. - P -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team h

Re: Community-driven OpenBSD tutorials wiki?

2018-01-04 Thread Peter N. M. Hansteen
date and relevant. There are too many cases out there where some abandoned document is so out of date that it's actively harmful or at least very confusing to a newcomer. In these cases it would have been a lot more useful if the material was simply deleted. -- Peter N. M. Hansteen, member of

Re: ssh from cisco to OpenBSD 6.2 error status 0

2017-12-25 Thread Peter N. M. Hansteen
available at either end. Newer ssh versions have incrementally dropped or disabled by default the unsafe ones, but increasing the message verbosity will point you in the right direction. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://ww

Calibre: Add books File dialog never fully displays

2017-12-20 Thread Peter N. M. Hansteen
nbus0: VMX/EPT efifb at mainbus0 not configured uvideo0 at uhub0 port 4 configuration 1 interface 0 "SuYin SuYin USB2.0 RGBIR Camera" rev 2.00/0.11 addr 2 video0 at uvideo0 ugen0 at uhub0 port 5 "Intel Bluetooth" rev 2.00/0.10 addr 3 vscsi0 at root scsibus3 at vscsi0: 256 targ

Re: What would you like to see in upcoming PF tutorials?

2017-12-15 Thread Peter N. M. Hansteen
still reasonably useful, I hear ;) - P -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.

Re: Library versions mismatch in the 14-Dec-2017 14:45 amd64 snapshot?

2017-12-14 Thread Peter N. M. Hansteen
source, > or wait for the next snapshot. And indeed, the next snapshot (bsd.rd dated 14-Dec-2017 20:32) has my laptop running in its usual soft purring mode :) - P -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://

What would you like to see in upcoming PF tutorials?

2017-12-14 Thread Peter N. M. Hansteen
last year's session at BSDCan can be found here: https://home.nuug.no/~peter/pftutorial/ - we're basically looking for ways to make those sessions more useful (the last one wasn't awful we hear, but there's always room for improvement). - Peter -- Peter N. M. Hansteen, mem

Re: Library versions mismatch in the 14-Dec-2017 14:45 amd64 snapshot?

2017-12-14 Thread Peter N. M. Hansteen
lly that was acting up, I'll be looking forward to a clean upgrade hopefully within some hours. Keep up the good work! All the best, Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ &q

Library versions mismatch in the 14-Dec-2017 14:45 amd64 snapshot?

2017-12-14 Thread Peter N. M. Hansteen
appear (in case this has bit others and is being addressed already)? -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spam

Re: Suggestions home server

2017-12-14 Thread Peter N. M. Hansteen
of the default hardware raid mode. Haven't had a chance to try the newer versions, but I wouldn't expect any trouble -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to se

HDD fail signal

2017-11-16 Thread Peter Kay
On various SATA/SAS backplanes, notably the Icy Box/Raidsonic IB555SK, there is a 'HDD fail signal IN' connector and a note that this can be provided by the controller, to make the failure LED flash. I can't find any controller that supports this, and presume it's directly supported by the con

Re: password-free SSH was Re: [ot] Security of my bit coin wallet

2017-11-15 Thread Peter N. M. Hansteen
ow the discussion a lot - a rant about that and a couple of other things can be had at[1] for those in need). [1] https://bsdly.blogspot.com/2011/02/problem-isnt-email-its-microsoft.html -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://w

Re: session security on OpenBSD vs popular options

2017-11-15 Thread Peter N. M. Hansteen
possible to answer in a mailing list message. - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]:

odd problem with etherip(4)

2017-11-10 Thread Peter J. Philipp
ike a tuning fork: (carptest1 vmm)--\ )-bridge(vether if) (carptest2 vmm)--/ The reason that I can't get a preempt or MASTER->BACKUP to take place is because somehow these CARP advertisings make it through even though the int is in down state. It looks wrong to me. Can someone concurr? Regards, -peter

In httpd redirecting and preserving the query parameters.

2017-11-09 Thread Peter Fraser
location match "^(.*)[.]shtml$" { block return 301 "https://$SERVER_NAME%1.htm?$QUERY_STRING"; } I used the above to change and web address ending in .shtml to the same ending in .htm The redirect went to the right spot, but each

Re: Bad network performance on apu2c4

2017-11-05 Thread Peter Faiman
generate traffic of its own. Peter > On Nov 4, 2017, at 10:49 AM, miraculli . wrote: > > Hi, > > i´ve also an APU2 as router. > The uplink connection (16Mbit/s) is via pppoe(4) on em0 > and i couldn´t manage to messure the throughput of this interface: > - iftop doesn´t

Re: Bad network performance on apu2c4

2017-11-04 Thread Peter Faiman
> On Nov 4, 2017, at 13:15, Stuart Henderson wrote: > >> On 2017-11-04, Peter Faiman wrote: >> Thank you for this explanation. My uplink is only 240mbit and my APU2 >> handles that perfectly, so I’m not having any of these problems. >> But the insight into the c

Re: Bad network performance on apu2c4

2017-11-04 Thread Peter Faiman
mments/6upchy/can_a_bsd_system_replicate_the_performance_of/dlvdq2e/ > > Chris Thank you for this explanation. My uplink is only 240mbit and my APU2 handles that perfectly, so I’m not having any of these problems. But the insight into the current state of networking was great! :) Peter

Re: FOSDEM 2018 - Distributions Devroom Call for Participation

2017-11-04 Thread Peter Hessler
On 2017 Nov 03 (Fri) at 20:57:52 +0100 (+0100), leo_...@volny.cz wrote: :Hi, : :[I don't normally respond to spam, but I need to blow off some : frustration =)] : This is amazingly insulting, and *you* don't get to do it on our lists. Do not attack people sending useful emails, just because you d

Re: Cheap 2x NIC OpenBSD device

2017-11-01 Thread Peter Faiman
Do you mean it runs OpenBSD by default, or you can install OpenBSD? I have a Ubiquiti UniFi and it runs Linux. The Edgerouter Lite looks like a cool little piece of hardware, good tip! > On Nov 1, 2017, at 11:36 AM, Sean Murphy wrote: > > Check out the Ubiquiti Edgerouter Lite. Sub $100 (US),

Re: Cheap 2x NIC OpenBSD device

2017-11-01 Thread Peter Faiman
I have an APU2 from PC Engines, which has 3 gigabit ports. I think it’s a bit above your budget of €100, but if you can’t find anything else I highly recommend it. I use one as my edge firewall and haven’t had any problems. > On Nov 1, 2017, at 07:27, Alex Waite wrote: > > I'm deploying a serv

Re: Fail2ban alternative for OpenBSD

2017-10-30 Thread Peter Hessler
On 2017 Oct 30 (Mon) at 11:06:02 +0200 (+0200), Gregory Edigarov wrote: :On 29.10.17 03:20, x9p wrote: :> :> Coming from the Linux world, I wonder if there is a better alternative to :> fail2ban, already being used in OpenBSD servers by the majority. :> :I suggest you NEVER use such "solutions".

Re: is there something missing in pledge?

2017-10-26 Thread Peter J. Philipp
exit(1); } for (i = 0; i < sb.st_size; i++) { printf("%c", mm[i]); } munmap(mm, sb.st_size); close(fd); exit(0); } <- beta$ ./mmaptest | strings | grep '$2b' |wc -l open: Operation not permitted reopening O_RDWR.. 6 I think this could be abused... Regards, -peter

Re: is there something missing in pledge?

2017-10-24 Thread Peter J. Philipp
you think) and it bypasses all pledge checks, which satisfies me. When someone comes along and has the same problem all they have is search engines to find out why this all is. :-) I'm good with it. Cheers, -peter On 10/24/17 20:25, Ingo Schwarze wrote: > Hi Peter, > > Peter J. P

Re: is there something missing in pledge?

2017-10-24 Thread Peter J. Philipp
nity a small present, if it's wanted. So that efforts don't seem like a total waste of time. Extra thanks to Daniel, Theo and Sebastien. Patch to open manpage after my signature. -peter Index: open.2 === RCS file: /cvs/s

Re: is there something missing in pledge?

2017-10-24 Thread Peter J. Philipp
735-1.cpio And here is a userland demonstration of why cpio doesn't work for backing up this file: beta# cpio -o -F spwd.db /etc/spwd.db cpio: Unable to open /etc/spwd.db to read: Operation not permitted This is why I asked if the pledge is too tight on cpio. Regards, -peter On 10/2

Re: is there something missing in pledge?

2017-10-23 Thread Peter J. Philipp
Deal, I'll redesign it, with imsg and privsep to do the inet functions. In the process it'll probably fix what I want from it. Thanks! -peter On 10/23/17 19:25, Theo de Raadt wrote: > Basically, you want your program to be able to do everything. > > pledge isn't a wan

Re: is there something missing in pledge?

2017-10-23 Thread Peter J. Philipp
ular files above pledge() but cpio(1) will still fail because it's pledged similar, at least that's what I noticed when I removed pledge() from this program to test. Question then is... is cpio(1) pledged wrong? Regards, -peter On 10/23/17 18:06, Theo de Raadt wrote: > That is working a

is there something missing in pledge?

2017-10-23 Thread Peter J. Philipp
ment, so a successful open(2) of /var/run/ypbind.lock enables inet operations. Maybe I'm reading all code wrong, so how would I fix this? I just need to somehow read these files...and be pledged. My system is 6.2. Regards, -peter

Re: DMCA Free OpenBSD VPS Hosting, multiple payment methods

2017-10-19 Thread Peter Faiman
You use OpenBSD, so why are you worried about DMCA? That is, you must care about security so you’re already using aggressive blocklists, encrypted peers only, etc etc. A well configured torrent client leaks very little info. Unless laws have changed and you don’t need any proof of wrongdoing bes

Re: cyrus imapd in 6.2 ports

2017-10-19 Thread Peter J. Philipp
all peace and taking my time. Then perhaps I can go back to the major version 3. What I foolishly did was I did a pkg_add -u and expected everything to still function without informing myself earlier. Thanks Antoine for the link again, -peter On 10/19/17 17:55, Antoine Jacoutot wrote: > On

cyrus imapd in 6.2 ports

2017-10-16 Thread Peter J. Philipp
ems perhaps they took greater care than me to get this going otherwise the downgrade seems to have worked for me. Cheers, -peter

multiple aliases files in opensmtpd

2017-10-15 Thread Peter Hessler
I'm in the process of migrating my email server from Postfix to OpenSMTPd, and are running into a small issue. In my postfix configuration, I had multiple aliases files. The system default one, my local one, and one for the mailing list software I use. according to the aliases(5) man page, I sho

Re: php-fpm and OpenBSD 6.2

2017-10-12 Thread Peter Faiman
ake it into 6.2. You can read more about the repackaging effort on the ports mailing list; the thread was updated just yesterday. I believe php-fastcgi is a legacy module of some kind, and fpm is the preferred way to run php. So you just need the plain php package that comes with fpm. Peter

Re: du algorithm to calculate diskspace

2017-10-02 Thread Peter Hessler
hardlinks will not duplicate disk space. scp doesn't understand hardlinks. On 2017 Oct 02 (Mon) at 12:08:28 +0200 (+0200), rosjat wrote: :hi there, : :I just noticed, while copying stuf from a very old OpenBSD 4.2 to a OpenBSD :6.1 that du on both systems gives me different results. Did somethin

Re: the whole greylisting, spam filtering thing

2017-09-30 Thread Peter N. M. Hansteen
this will become incrementally more fun (fsvo) as more of the traffic moves to IPv6. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.

Re: the whole greylisting, spam filtering thing

2017-09-29 Thread Peter N. M. Hansteen
hose sending domains to greylisting at all. My sedimentary nospamd file, built on discovering SPF info for badly behaved domains, is available here https://home.nuug.no/~peter/nospamd - I only started commenting entries after a while, but it's a Works for me(tM) file. See man spamd for examples of

Re: fs level 0

2017-09-23 Thread Peter N. M. Hansteen
l thing to do would be to simply reinstall with as little deviation from the defaults as possible. I didn't get hold of a ThinkPad that I was allowed to install OpenBSD on until about 2006, but by then the install and use experience was straightforward. - P -- Peter N. M. Hansteen, member of th

Re: running spamd on firewall ord on the mailsystem

2017-09-19 Thread Peter N. M. Hansteen
iderably. There will be a lot less of the heavy computation tasks involved in content filtering that need to be performed. - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the

isakmp crash

2017-09-12 Thread Peter van Oord van der Vlies
5.9 we had the same issue. Anyone know a fix/workaround for this ? Br, Peter

FYI: man.openbsd.org uses an invalid security certificate.

2017-09-11 Thread Steiner Peter
man.openbsd.org uses an invalid security certificate. The certificate expired on 11.09.2017 06:27. The current time is 11.09.2017 11:31.

Re: Amazon AWS, OpenBSD and IPv6

2017-09-05 Thread Peter Hessler
On 2017 Sep 05 (Tue) at 10:58:41 +0200 (+0200), Zbyszek Żółkiewski wrote: :Hello all, : :Anyone on the list had problem with IPv6 on AWS? :Image (AMI) build from https://github.com/kolargol/openbsd-aws/ (OpenBSD 6.1) : :cat /etc/hostname.xnf0

Moving a Web site from IIS to httpd

2017-08-31 Thread Peter Fraser
The move was no trouble and simple except of one problem. I originally moved the files as is to OpenBSD, but the web site at times referred to files using different cases and those references failed, and since IIS ignores the case in filenames there was no problem. I then lower cased all the fi

Re: reiser4fs in openbsd

2017-08-25 Thread Peter N. M. Hansteen
ready there: https://marc.info/?l=openbsd- >> cvs&m=136482823110105&w= >> <https://marc.info/?l=openbsd-cvs&m=136482823110105&w=2> > > Why not implement it? There is reason to believe that a port of the hitherto linux-only CPIP (http://www.blug.linux.no/rfc1149/ and link

Re: Any update on the current status of BFD?

2017-08-24 Thread Peter Hessler
The update is that it was blocking efforts to unlock the network stack. We decided to disable BFD so everyone could benefit from the performance boosts. It looks like the blocking parts have been addressed and fixed. I still need to fix a few bugs before we can consider enabling it. On 2017 Aug

Re: ftp.eu.openbsd.org no longer accepts anonymous ftp?

2017-08-19 Thread Peter N. M. Hansteen
On 08/19/17 11:44, Andreas Thulin wrote: > Also, yesterday's > > # pkg_add -u > > failed for me, apparently for that same reason. Yes, that would happen. Then again, changing ftp:// to https:// in /etc/installurl would make pkg_add -u work. - P -- Peter N. M. Hansteen, mem

ftp.eu.openbsd.org no longer accepts anonymous ftp?

2017-08-19 Thread Peter N. M. Hansteen
t see downloading bsd.rd only and then doing an http install as much of a hardship (the process takes only a few minutes total either way), but if the change was intentional it would probably be a good thing to update the relevant web pages. - Peter -- Peter N. M. Hansteen, member of the first RFC

Re: keyboard layout 6.1 obsd

2017-08-17 Thread Peter Hessler
xenodm uses .xsession instead of .xinitrc. I highly recommend symlinking them, so both of them one have the same environment. On 2017 Aug 17 (Thu) at 17:19:05 -0300 (-0300), Friedrich Locke wrote: :It did not work. : :On Thu, Aug 17, 2017 at 11:49 AM, Matias Moreno Meringer < :mmoren...@gmail.co

Re: lock X on suspend

2017-08-15 Thread Peter Hessler
I use this, with /etc/apm/hibernate as a symlink. $ cat /etc/apm/suspend #!/bin/sh pkill -USR1 -x xidle #EOF and my .Xdefaults have: XIdle.timeout: 300 XLock.grabmouse: on XLock.mode: blank XLock.mousemotion: on XLock.usefirst: yes XLock.lockdelay: 10 XLock.nice: 19 #EOF On 2017 Aug 15 (Tue

Re: odd segfault when adding -lutil

2017-08-07 Thread Peter J. Philipp
gain! Donation sent. -peter On 08/08/17 01:36, Jeremie Courreges-Anglas wrote: > On Mon, Aug 07 2017, "Peter J. Philipp" wrote: >> Hi, > Hi, > >> I'm writing to misc because I did a change with my programming project and >> it doesn't work, in fact the

odd segfault when adding -lutil

2017-08-07 Thread Peter J. Philipp
till I get the segmentation fault. If anyone has an idea as to what could be the cause of this I'd be grateful. What follows after my signature is the diff I'm working on and my dmesg.boot: Thanks, -peter Index: axfr.c === R

Re: octeon port, ubiquity edgerouter

2017-07-26 Thread Peter J. Philipp
On Wed, Jul 26, 2017 at 12:20:23AM +0200, Doggie wrote: > W dniu 2017-07-25 o 19:39, Peter J. Philipp pisze: > > Actually I bought the silent fans. So I don't have to write any code, > > too bad the foxconn fans are a misdesign. I'll maintenance this router > > n

Re: octeon port, ubiquity edgerouter

2017-07-25 Thread Peter J. Philipp
Actually I bought the silent fans. So I don't have to write any code, too bad the foxconn fans are a misdesign. I'll maintenance this router next week for the new fans. I'm putting it into production at home tomorrow though. Cheers, -peter On 07/25/17 18:38, Peter J. Philipp

Re: octeon port, ubiquity edgerouter

2017-07-25 Thread Peter J. Philipp
On Tue, Jul 25, 2017 at 10:58:13AM +0200, Peter J. Philipp wrote: > Hi, I got the ER-8. First impression is that it's in good condition, but the > fans are a little noisy, hoping it won't be a pain. cnmac0 starts on eth4 > instead of eth0 but that's no problem as long

Re: octeon port, ubiquity edgerouter

2017-07-25 Thread Peter J. Philipp
On Mon, Jul 24, 2017 at 07:21:36PM +0200, Peter J. Philipp wrote: > > Now it would be very interesting to see dmesg coming from 8-port ER. Hi, I got the ER-8. First impression is that it's in good condition, but the fans are a little noisy, hoping it won't be a pain. cnmac

Re: octeon port, ubiquity edgerouter

2017-07-24 Thread Peter J. Philipp
uld work. Otherwise we'll have to wait about a day until I get the rollover cable that I purchased on Amazon yesterday. Cheers, -peter

Re: octeon port, ubiquity edgerouter

2017-07-22 Thread Peter J. Philipp
On Sat, Jul 22, 2017 at 11:55:17AM -0400, Sean Murphy wrote: > Hi Peter, > > This is a solid machine, if you can get it, do so. OpenBSD 6.1 works > very well on this hardware, I have used mine variously as a gateway > router with PF, DHCP server, DNS server with unbound, and loca

octeon port, ubiquity edgerouter

2017-07-22 Thread Peter J. Philipp
Hi, Someone has offered me a deal on a somewhat used Ubiquiti Edgerouter, https://www.ubnt.com/edgemax/edgerouter/ <-- this one. Is it supported by OpenBSD/octeon and if not what needs to be done to make it work? Has anyone experience with this hardware? Regards, -peter

Re: Read sysctl from file

2017-07-21 Thread Peter Faiman
> On Jul 21, 2017, at 1:30 PM, Mihai Popescu wrote: > >> Also it does not fail halfway, it will report errors for each of the >> settings that cannot > be applied, > > So Peter, just to check if i got it right, you did a script who > reports errors about thing

Re: Read sysctl from file

2017-07-21 Thread Peter Faiman
> On Jul 21, 2017, at 3:42 PM, li...@wrant.com wrote: > > Fri, 21 Jul 2017 12:33:31 -0700 Peter Faiman >> # ./sysctl -p example.conf >> Peter > > Hi Peter, ansibles, > > No guarantee systems controls stay affixed, wrapper tools comply got it? The point of s

<    2   3   4   5   6   7   8   9   10   11   >