Re: Problems installing OpenBSD 5.8

2016-01-06 Thread Peter N. M. Hansteen
o > shell and the sets could inded be fetched with "ftp" program from > that location. BTW ftp is also not offered, only disc and http. were those files also visible by pointing a browser at http://10.0.0.1/5.8/i386 ? -- Peter N. M. Hansteen, member of

Re: if I were to make a pkg-add diff

2016-01-04 Thread Peter Hessler
All of the functionality you are requesting is already provided. look at finish_up() in src/distrib/miniroot/install.sub. There is no reason at all to modify pkg_add. Just setup /etc/pkg.conf. On 2016 Jan 04 (Mon) at 04:02:07 -0600 (-0600), Luke Small wrote: :I am realistically thinking more

Errors in compiling the /usr/src

2016-01-03 Thread Peter Fraser
Because there seemed to be more patches than normal in 5.8, and I am lazy and there was lots of time over the holidays. I thought I would compile the all the source rather than do the patches piecemeal. I have never tried to compile all the source, I ran into some errors. First: Several make

Re: High interrupt load using 5.8 Release GENERIC i386 on Acer Aspire 3630 laptop

2015-12-27 Thread peter . foster . lists
7 26 processes: 25 idle, 1 on processor CPU states: 0.7% user, 0.0% nice, 0.8% system, 0.1% interrupt, 98.4% idle Memory: Real: 15M/48M act/tot Free: 378M Cache: 17M Swap: 0K/514M PID USERNAME PRI NICE SIZE RES STATE WAIT TIME CPU COMMAND 1 root 100 468K 464K

High interrupt load using 5.8 Release GENERIC i386 on Acer Aspire 3630 laptop

2015-12-27 Thread peter . foster . lists
9M act/tot Free: 326M Cache: 50M Swap: 0K/514M PID USERNAME PRI NICE SIZE RES STATE WAIT TIMECPU COMMAND 1 root 100 472K 456K idle wait 0:01 0.00% init 14061 _ntp 2 -20 1120K 2264K sleep poll 0:00 0.00% ntpd 30305 _ntp 20 932K

Re: if I were to make a pkg-add diff

2015-12-25 Thread Peter Hessler
On 2015 Dec 24 (Thu) at 20:23:38 -0600 (-0600), Luke Small wrote: :I wanna make a c program that checks for a PKG_PATH that exists and :connects to a workable link for pkg_add(). If you ever upgraded using :http mirrors on the install disk, it offers list# which links directly :to numbered

Re: i386 packages - snapshot 23/12/2015

2015-12-25 Thread Peter Hessler
On 2015 Dec 24 (Thu) at 22:53:24 -0600 (-0600), Amit Kulkarni wrote: :Ugh, that wasn't worded properly. Proposed diffs of new versions of ports, :which might break other ports, are also built, in a bulk build. This might :cause mismatches... : Those are *not* done on the real build clusters.

Re: i386 packages - snapshot 23/12/2015

2015-12-24 Thread Peter N. M. Hansteen
it a few hours and try again. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected a

Re: Boot loader uses INT 13h [WAS BIOS call fallback]

2015-12-24 Thread Peter Kay
On 24 December 2015 08:00:01 GMT+00:00, Dragos Ruiu wrote: >Returning back to the discussion where I suggested it would be nice to >build >OS kernels that would fail deliberately when virtualized to close off >that >class of malware, especially on the new Intel Skylake chips that

Re: Boot loader uses INT 13h [WAS BIOS call fallback]

2015-12-23 Thread Peter Kay
On 23 December 2015 02:04:01 GMT+00:00, Dragos Ruiu wrote: >I would be interested in any code that can knowingly break inside a VM >to >verify unvirtualized status, esp. on Skylake. Older processors can >probably >use the virtualization bugs in the hardware for this function. Who

Re: text-mode gui

2015-12-21 Thread Peter Hessler
This has gone wildly off-topic, please take it off list -- A fool must now and then be right by chance.

Re: 5.8 bgpd, network connected behaves like 5.6

2015-12-17 Thread Peter Hessler
1) does "bgpctl reload" detect it? 2) does -current work as you expect? On 2015 Dec 17 (Thu) at 09:38:45 +0100 (+0100), Tony Sarendal wrote: :"network inet connected" does not pick up new vlan interfaces, same problem :as 5.6. : :bmr0.esp1# ifconfig vlan69 create :bmr0.esp1# ifconfig vlan69

Re: Playing with rdomains and bridge on 5.8 and current

2015-12-17 Thread Peter Hessler
pair(4) was created for this exact situation, and is available in -current and will be in 5.9 and later. On 2015 Dec 17 (Thu) at 12:19:42 +0100 (+0100), Claer wrote: :Hello, : :I'm trying a "strange" setup with rdomains, bridge and vether. As there is :something I don't understand, I'd like to

Re: Memory exhaustion

2015-12-16 Thread Peter N. M. Hansteen
es usually helps, and of course some version of throwing more or faster hardware at the problem might also help. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit o

iwm(4) 11n support: it just works

2015-12-16 Thread Peter N. M. Hansteen
in a lot of laptops out there but possibly more in the slightly older ones such as the one mentioned in my old piece[1] Case in point, with a simple /etc/hostname.iwm0 nwid we_see_all_your_naughty_bits wpakey alltomorrowsparties[2] the resulting config becomes [Wed Dec 16 22:31:42] peter@elke

Re: Remove "flags S/SA keep state" for tcp packets

2015-12-15 Thread Peter N. M. Hansteen
an override the default flags by specifying a different set or even 'flags any' but the question remains, why? -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious ne

Re: Help

2015-12-14 Thread Peter N. M. Hansteen
to be fully supported. Now, as Jiri said already, what's the real problem you need help solving? -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious ne

Mg and extensions.

2015-12-11 Thread Peter Fraser
I have been an Emac user for 20 plus years, and I often look at mg to replace it. The functionality of mg is getting close. To get some degree of programmability, I suggest that you could implement Emac's "name-last-kbd-macro" then allow one to bind that named-kbd-macro to a key. To be really

Re: Octeon snapshots

2015-12-05 Thread Peter Kay
On 5 December 2015 09:36:29 GMT+00:00, Daniel Ouellet wrote: >On 11/13/15 12:02 PM, Daniel Ouellet wrote: >To the kind sole. > >Not sure who did the new current updated release, but many thanks to >who >ever did it! It cod not have come at a better time, it stopped me going

Re: A branded USB stick as an alternative to the CD set?

2015-12-01 Thread Peter J. Philipp
n, as I'm sick of doing bank transfers. As far as the USB stick goes, I think it's a good idea, I'd buy it but if it's too much effort and cost then don't worry about it. -peter

Re: The kernels of *BSD include nonfree firmware blobs?

2015-11-27 Thread Peter Hessler
this has been discussed ad-nauseam, please search the archives. (ps: do not respond to this, we are not interested in having this discussion again) On 2015 Nov 27 (Fri) at 08:33:00 -0700 (-0700), fran??ais wrote: :The Free Software Foundation (FSF) says that: : :"FreeBSD, NetBSD, and OpenBSD

Re: The kernels of *BSD include nonfree firmware blobs?

2015-11-27 Thread Peter N. M. Hansteen
ndles the situation. Go search the archives, nothing much has changed since the first time this issue came up on misc. And I remember this actually being a topic of one of Theo's presentations and possibly others. Seek and you shall find. -- Peter N. M. Hansteen, member of the first RFC

Re: The kernels of *BSD include nonfree firmware blobs?

2015-11-27 Thread Peter N. M. Hansteen
do a bit of reading? HTH, HAND -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected a

Re: OpenBGPd on OpenBSD 5.8 crashing during startup

2015-11-25 Thread Peter Hessler
Hi Thorleif Looks like you are hitting the openfiles limit. You'll need to edit /etc/login.conf and look at the bgpd:\ :openfiles-cur=512:\ :tc=daemon: block. bgpd takes approx 30 files to run, then one per session. I would recommend bumping it up to 2048 for a route server.

Re: Daily digest, Issue 3641 (37 messages)

2015-11-25 Thread Peter Kay
Yes, it is possible for grub to boot Windows. LILO too, it can even boot Xen if you use mbootpack (otherwise it doesn't support initrd). The point is that if you use Windows you must use its boot menu, and it's easier to configure it to boot multiple OS than grub or lilo. EasyBSD handles all

Re: Hitting the bootable cylinder limit?

2015-11-24 Thread Peter Kay
You are making life unnecessarily difficult for yourself, even apart from running multi boot (mind, I have multi boot here on various legacy systems, but not for anything serious). Install Windows first, although I would note a 32GB boot partition is not large enough to properly maintain any

inotifywait alternative

2015-11-22 Thread Peter Hajdu
experiment with pledge, kqueue and c anyway, I've implemented the bare minimum I needed. I'm not sure however if there are other solutions that would fit my need. Do you know about one? If not, feel free to try out the outcome and give feedback. http://github.com/peterhajdu/fwa -- Peter Hajdu

Re: Virtualization: vmm with Linux guests - when?

2015-11-17 Thread Peter Kay
On 17 November 2015 15:46:59 GMT+00:00, "Luis P. Mendes" wrote: > Hi, > > I know that development time is not a determinisc thing, but > nonetheless I'd like to know if it's closer to one, six, twelve (or > more) months until we get the possibility to run Linux guests >

Re: LC_COLLATE

2015-11-08 Thread Peter Hessler
Don't insult other people on the mailing list. -- SCCS, the source motel! Programs check in and never check out! -- Ken Thompson

Re: firefox-esr 38.4.0 build, Missing library for sqlite>=31.0

2015-11-07 Thread Peter Hessler
Your userland and ports are out of sync. http://www.openbsd.org/faq/faq15.html#NoFun On 2015 Nov 06 (Fri) at 17:06:02 + (+), gso...@yahoo.co.uk wrote: :Building firefox38.4.0esr : :===>?? Verifying specs:?? icudata icui18n icuuc X11 Xext Xrender Xt atk-1.0 c :cairo?? fontconfig freetype

Re: no connectiion to phone's AP

2015-11-03 Thread Peter J. Philipp
Hi, could it be that you need to 'sh /etc/netstart iwn0' for it to negotiate DHCP? That, or do a dhclient iwn0. It's not apparent by your series of commands if you left out dhclient.. Regards, -peter On 11/03/15 13:59, misc nick wrote: > I can't connect my Thinkpad x220 to my phone's hots

Re: Firefox Worked Slowly...

2015-11-02 Thread Peter N. M. Hansteen
eed to adjust some of the rather conservatively set resource limits upwards. Some relevant, possiby suboptimal choices but of the WorkedForMe(TM) kind, see http://home.nuug.no/~peter/transition/eurobsdcon2014/desktop.html and the following slide. -- Peter N. M. Hansteen, member of the first RFC 1149 i

Re: Any opinion, policy or conclusion about easy and accessible MAC implementations like tomoyo or SMACK?

2015-10-29 Thread Peter J. Philipp
Hi, There is IPC between the seperated parts though. Which makes me wonder if someone gets the protocol right on the compromised part they would be able to pull the certificates no? What would need to be done to get the protocol right then? Regards, -peter On 10/29/15 11:34, ludovic coues

Re: difficulties with ext2 drives

2015-10-26 Thread Peter Van Eenoo
Oh interesting. My drive is a Seagate 2TB drive as well On Mon, Oct 26, 2015 at 1:14 PM, Matej Nanut wrote: > Hey, > > I've reported, possibly incorrectly, the exact same issue here: > > https://www.marc.info/?l=openbsd-misc=144408289116398 > > I tried formatting a different

difficulties with ext2 drives

2015-10-26 Thread Peter Van Eenoo
ter. I've attempted to mount using options nosuid and nodev but that doesn't help. Is this a known problem or am I missing something obvious, a mount option I skipped over? Any other diagnostics that someone would like to see? Thanks, Peter

Re: apu1d as an NTP server

2015-10-24 Thread Peter Hessler
works perfectly fine as an ntp server. you won't see any problems. On 2015 Oct 23 (Fri) at 15:39:26 -0700 (-0700), Gene wrote: :Howdy, : :Has anyone here used the PC Engines apu1d system board as an NTP server? : :I'm looking at setting up some in house stratum-2 servers so I can be a :better

Re: Upgrade from 5.7 to 5.8 : bsd.rd doesn't complete boot

2015-10-19 Thread Peter N. M. Hansteen
bugs, see http://www.openbsd.org/report.html Good luck! -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29

Re: Because Theo and various users told them that the projects GnoBSD and Comixwall were worthless and that they weren't contributing to OpenBSD?

2015-10-18 Thread Peter N. M. Hansteen
hat fairly basic fact, that's their loss, not ours. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.2

Re: bgp with failover & load balance

2015-10-14 Thread Peter Hessler
If you are using bgp, then you shouldn't have a default route. Do you see routes from both peers? bgpctl show should give you something like: T-LEVEL3 3549 60101591 399386 0 04w1d23h 552098 T-COGENT 174 26910070 397509 0 06w2d20h 548495 the

Re: verification spamd and traffic

2015-10-13 Thread Peter N. M. Hansteen
ou add entries to your blacklist would be useful -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.1

signify: signature verification failed

2015-10-02 Thread Peter J. Philipp
; patch -p0) signify: signature verification failed Hmm... I can't seem to find a patch in there anywhere. Anyone else seeing the same problem? -peter

Tame and log files

2015-10-02 Thread Peter Fraser
Looking at http://www.openbsd.org/papers/tame-fsec2015/ When I first heard of "tame", I thought there would be a problem with log files. I assume that is what the "Whitelist path feature" is being added to try to solve. I wonder if a new system primitive could solve the log file problem in a

Re: APU re(4) how can I debug this further?

2015-10-01 Thread Peter J. Philipp
, -peter On 09/30/15 11:10, Peter J. Philipp wrote: > On Wed, Sep 30, 2015 at 10:36:21AM +0200, Benny Lofgren wrote: >>> Thanks for your help, >> I assume you are not able to ping the other way around either when the >> network goes down, i e from gamma to fritzbox? > Si

APU re(4) how can I debug this further?

2015-09-30 Thread Peter J. Philipp
es its linkspeed or does otherwise operations that would impact the net? Thanks for your help, -peter

Re: APU re(4) how can I debug this further?

2015-09-30 Thread Peter J. Philipp
al first question on this list is: can you provide a full > dmesg from gamma? > It is almost always more helpful than people think, so never leave home > without it! :-) > > > Regards, > > /Benny Thanks for your effort Benny. The dmesg follows... -peter

Re: FreeBSD or OpenBSD for my (server/router) purposes? (Total n00b)

2015-09-27 Thread Peter N. M. Hansteen
my own part, getting any real work done requires a unix, whick in my case tends to be OpenBSD unless something specific to the occasion trips me up. - - Peter - -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.n

Re: Adding zombies to a pf table?

2015-09-24 Thread Peter Hessler
On 2015 Sep 24 (Thu) at 12:37:03 +0300 (+0300), Pantelis Roditis wrote: :On 09/24/2015 11:39 AM, Peter Hessler wrote: :>On 2015 Sep 23 (Wed) at 18:14:51 +0100 (+0100), Craig Skinner wrote: :>:Hello, :>: :>:Zombies are often attacking ports which don't have services running, :>:such

Re: Adding zombies to a pf table?

2015-09-24 Thread Peter Hessler
On 2015 Sep 23 (Wed) at 18:14:51 +0100 (+0100), Craig Skinner wrote: :Hello, : :Zombies are often attacking ports which don't have services running, :such as telnet (most popular indeed), mysql, 3551, 8080, 13272, etc. : :With a default pf block drop in on $ext_if, how can those source ips be

Re: rookie questions about flavors

2015-09-23 Thread Peter N. M. Hansteen
sysmerge will be quicker and easier, but in the general case, yes. > 3. If one use a 5.8 snapshot (i.e [1] ), is it possible to apply updates > for 5.8 *-stable* later? No. As I said earlier (and would be clear from a careful reading of the FAQ), snapshots track -current, not -stable. - Peter --

Re: speedup shutdown

2015-09-21 Thread Peter Hessler
On 2015 Sep 21 (Mon) at 09:37:11 -0400 (-0400), Quartz wrote: :>>I took that to mean: :>> :>>1) run (presumably as root) 'time sh /etc/rc shutdown' :>>2) check 'ps -aux' to see what's still running :>>3) 'kill -HUP [PID]' for each of the remaining processes :>>4) check 'ps -aux' again :>>5) 'kill

Re: urtwn driver has problems

2015-09-20 Thread Peter Hessler
On 2015 Sep 19 (Sat) at 20:26:02 + (+), Alexey Suslikov wrote: :Stuart Henderson spacehopper.org> writes: : :> On 2015-09-18, Alexey Suslikov gmail.com> wrote: :> > I think you should try 5.8, there was stability fixes in urtwn(4). :> :> 5.8 hasn't been released yet. : :How about

Re: LIST_PREV?

2015-09-13 Thread Peter J. Philipp
Actually never mind, I think I'm gonna switch to TAILQ instead. Cheers, -peter On 09/13/15 09:56, Peter J. Philipp wrote: > Hi, > > I'm programming with queue(3) and noticed there is no LIST_PREV. LIST > is a doubly linked list, no? > FreeBSD's LIST_PREV (from an older 11-curr

LIST_PREV?

2015-09-13 Thread Peter J. Philipp
ULL : \ __containerof((elm)->field.le_prev, \ QUEUE_TYPEOF(type), field.le_next)) But I don't know if we can just stick that in OpenBSD's? Could someone do the work for me, pretty please? Even then my development has stalled here at home. Cheers, -peter

OpenBGPd and ARIN allocations smaller than /24

2015-09-11 Thread Peter Hessler
When ARIN prepared for the IPv4-pocolypse[1], they put aside a /10 for **smaller than /24 allocations**. Our default ruleset will not allow those, even though they will be for various pieces of critical dual-stack infrastructure to help IPv6-only systems survive. RIPE is currently[2] announcing

Re: spamdb

2015-09-10 Thread Peter N. M. Hansteen
spamdb corrupted, not that I've noticed. What are the symptoms more specifically? -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" del

Re: issue with pf syntax parser

2015-09-04 Thread Peter Hessler
Backslash says "ignore the following charecter". You are using it to ignore the newline. If you ignore the space instead, the newline then matters. This is not a bug, this is 100% by design. You'll need to ensure there are no trailing spaces after a backslash (and we do recommend removing

Re: pf vs mp

2015-09-01 Thread Peter Hessler
Are you doing anything above 5Gbps? Or above 500k pps? if not, get whichever. If you are, then higher frequency cores are better; today. If you are running dhcp server, then you are likely not. On 2015 Aug 31 (Mon) at 22:38:47 -0400 (-0400), Quartz wrote: :Quick question: I need to make a

Re: Thinkpad spyware

2015-08-28 Thread Peter Hessler
Keep this off list.

Re: bluetooth keyboard [was:Re: Intel Edison]

2015-08-28 Thread Peter Hessler
On 2015 Aug 28 (Fri) at 06:32:54 -0400 (-0400), Quartz wrote: :Just out of curiosity, are there any plans to support bluetooth at some point :in the future? : There needs to be interest from a developer who can write a not-crappy bluetooth stack. Odds are fairly low right now.

Re: Intel Edison

2015-08-27 Thread Peter Hessler
On 2015 Aug 27 (Thu) at 10:16:31 -0400 (-0400), Quartz wrote: :OpenBSD doesn't support bluetooth on any hardware. : :Does that also include usb-bluetooth dongles for wireless keyboards? : That includes all forms of bluetooth where it is presented to the OS. If it fakes a keyboard, and shows up

Re: Thinkpad spyware

2015-08-27 Thread Peter Hessler
Please keep this off list.

Re: Intel Edison

2015-08-27 Thread Peter Hessler
OpenBSD doesn't support bluetooth on any hardware. On 2015 Aug 27 (Thu) at 07:59:22 +0100 (+0100), Gareth Nelson wrote: :Hi all : :I'm thinking of building a project (for those curious, it's an implant - :see biohack.me for info on this kind of stuff) on top of the Intel Edison :and was curious

Re: KeePass 2.30- libpng and other errors

2015-08-20 Thread Peter Van Eenoo
If you don't need the keepass 2x functionality, then the keepass 1x package is available and works great. On Aug 20, 2015 8:28 AM, Andrzej Drewnowski andrewdrewnow...@gmail.com wrote: Hello! I am trying to run KeePass on OpenBSD (amd64)- current (but on 5.7 are the same errors). I installed

Re: 64 Queue Sizes in OpenBSD 5.8

2015-08-15 Thread Peter N. M. Hansteen
version are you running now? Peeking at /usr/src/sys/net/hfsc.{c,h} appears to indcate that hfsc (which is what the 5.5 and later queues uses) has 64 bit values where it counts. - - Peter - -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http

Re: resource impact of bgp-spamd

2015-08-11 Thread Peter Hessler
I'm currently seeing 32M of memory used on my amd64 system. 20M of it is the feed itself. CPU usage is minor. Disk use is only the trapped list, which is currently at 1.1M on disk. Hope this helps. On 2015 Aug 10 (Mon) at 15:15:42 -0600 (-0600), Devin Reade wrote: :In general terms, what

Re: Possible fix for i217 problem

2015-08-05 Thread Peter Hessler
On 2015 Aug 05 (Wed) at 10:08:05 +0200 (+0200), Mark Patruck wrote: :No issues on systems running : :em0 at pci3 dev 0 function 0 Intel I210 rev 0x03: msi, address 0c:.. :em1 at pci4 dev 0 function 0 Intel I210 rev 0x03: msi, address 0c:.. : :Also working on : :em0 at pci1 dev 0 function 0 Intel

Re: Possible fix for i217 problem

2015-08-05 Thread Peter Hessler
:with 1000baseT as well. : :em0 at pci1 dev 0 function 0 Intel 82574L rev 0x00: msi, address 00:.. :em1 at pci0 dev 25 function 0 Intel I218-V rev 0x00: msi, address f0:.. : : :On Wed, Aug 05, 2015 at 12:24:42PM +0200, Peter Hessler wrote: : On 2015 Aug 05 (Wed) at 10:08:05 +0200 (+0200), Mark Patruck wrote

Re: Maintaining CAs not in cert.pem

2015-07-31 Thread Peter Hessler
this is a real problem for real people. On 2015 Jul 31 (Fri) at 02:33:00 +0300 (+0300), li...@wrant.com wrote: :Congrats to raising another time wasting topic for a public commentary. : -- Love thy neighbor as thyself, but choose your neighborhood. -- Louise Beal

Re: Support wifi-dongle Asus USB-N10 NANO in OpenBSD

2015-07-31 Thread Peter N. M. Hansteen
it in an OpenBSD system and see if it comes up as something useful. Check -current too. If it isn't supported, consider tracking down a developer to send the part to. - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http

Re: OpenBSD machine was hacked

2015-07-29 Thread Peter J. Philipp
On 07/29/15 03:33, Wong Peter wrote: Q:why do you believe that your machine was hacked? A: My pf rules was flushed.This can prove using pfctl -sr. The whoe firewall was not usable anymore. NO NAT nor packet filtering. Hi Peter, Can you let us know the version and architecture of OpenBSD you

OpenBSD machine was hacked

2015-07-28 Thread Wong Peter
Dear All, Recently, I'm realized that my openbsd firewall router was not usable anymore due to pf rules had changed by using carp and pfsync mechanism. Here is my prove. I'm tried to reinstall the whole machine and plugged in the modem LAN cable to NIC card. All my written pf rules was flush

Re: OpenBSD machine was hacked

2015-07-28 Thread Wong Peter
What information you all require? On Tue, Jul 28, 2015 at 10:28 PM, Giancarlo Razzolini grazzol...@gmail.com wrote: Em 28-07-2015 06:17, Wong Peter escreveu: Dear All, Recently, I'm realized that my openbsd firewall router was not usable anymore due to pf rules had changed by using carp

Re: OpenBSD machine was hacked

2015-07-28 Thread Wong Peter
might help. It almost sounds like you are saying that you cannot figure out how whatever happened occurred so it must have been someone at your ISP. That is a pretty big leap to make without some evidence that actually points at your ISP. -Danny On Jul 28, 2015, at 18:00 , Wong Peter peterap

Re: OpenBSD machine was hacked

2015-07-28 Thread Wong Peter
. If this doesn't help it is beyond my knowledge. Good luck! STEFAN *Gesendet:* Dienstag, 28. Juli 2015 um 11:17 Uhr *Von:* Wong Peter peterap...@gmail.com *An:* misc@openbsd.org *Betreff:* OpenBSD machine was hacked Dear All, Recently, I'm realized that my openbsd firewall router was not usable

Re: OpenBSD machine was hacked

2015-07-28 Thread Peter N. M. Hansteen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/28/15 11:17, Wong Peter wrote: Recently, I'm realized that my openbsd firewall router was not usable anymore due to pf rules had changed by using carp and pfsync mechanism. It would be a lot easier to offer assistance if you offer some

Re: Alleged OpenSSH bug

2015-07-23 Thread Peter N. M. Hansteen
gaps. - -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ Remember to set the evil bit on all malicious network traffic delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds

Re: Bluetooth Support

2015-07-23 Thread Peter Hessler
All bluetooth support was removed some releases ago. The code rotted. If someone wants to work on this again, they are welcome to. On 2015 Jul 23 (Thu) at 10:02:55 -0400 (-0400), Richard E. Thornton wrote: :I am just curious - is Bluetooth supported on any bluetooth enabled :computers? Or is

Acer Aspire V3-112 was Re: which netbook not to buy?

2015-07-15 Thread Peter J. Philipp
On Sun, Jul 12, 2015 at 02:39:50PM +, Peter J. Philipp wrote: Hi, I'm considering buying a new netbook (currently I have an October 2012 Acer Aspire One). If at all I'd like to stay with Acer but not necessarily. I'm worried about UEFI secure boot on these netbooks. Is there any Acer

Re: Acer Aspire V3-112 was Re: which netbook not to buy?

2015-07-15 Thread Peter J. Philipp
the 350 euros that I paid. Maybe my own fault then, but I wanted to be adventurous. Cheers, -peter

Re: tor not working in 5.8 #1024

2015-07-14 Thread Peter Hessler
On 2015 Jul 15 (Wed) at 05:27:37 +0200 (+0200), L.R. D.S. wrote: :Not that nice. This hardware have many fancy things like UEFI and intel :ME. :I run i386 mostly because the /amd64.html say that it is thus safer to :run those machines in i386 mode That is an incredibly ancient comment, and is

which netbook not to buy?

2015-07-12 Thread Peter J. Philipp
Hi, I'm considering buying a new netbook (currently I have an October 2012 Acer Aspire One). If at all I'd like to stay with Acer but not necessarily. I'm worried about UEFI secure boot on these netbooks. Is there any Acer models that I definitely should not buy? Regards, -peter

Re: GPT should work? (was Re: Dual Booting OpenBSD vs Windows7)

2015-07-04 Thread Peter Kay
OK, I should be more specific - what I got working was an OpenBSD install on a GPT disk which included Windows 7 installed in MBR mode. This involves some nasty hackery with OpenBSD fdisk, and was done at the time because I thought I'd be installing OS X on the same disk. What I haven't

Re: Dual Booting OpenBSD vs Windows7

2015-06-30 Thread Peter Kay
The method in the OpenBSD docs is a no extra tools required method. BCDedit makes it even easier. 1) Install Windows 7/8 on an MBR disk. GPT should work but requires more effort. 2) As part of 1) create a partition for OpenBSD 3) Use OpenBSD fdisk to change partition type to A6, install on that

Re: Why does my 5.7 laptop suspend when I close the lid?

2015-06-30 Thread Peter Hessler
On 2015 Jun 30 (Tue) at 14:45:16 -0400 (-0400), Adam Van Ymeren wrote: :Also the installer prompts you if you want this behaviour, so its :hardly undocumented. not in -current. -- Do not meddle in the affairs of wizards, for you are crunchy and good with ketchup.

Re: trying to send packet on wrong domain. if 0 vs. mbuf 1

2015-06-29 Thread Peter Hessler
On 2015 Jun 29 (Mon) at 15:29:57 +0200 (+0200), Mattieu Baptiste wrote: :Hi, : :I'm running a setup where my gateway (a PC Engines APU with :-current/amd64) have two rdomains : : :rdomain 0 : :- re0 : internal interface (IP 192.168.50.1) :- re1 : dmz interface :- re2 : external interface :

Re: Cannot run Snort

2015-06-28 Thread Wong Peter
Dear All, OpenBSD 5.7 Arch: i386 Snort Version:2.9.7.3 Installed from packages Start by typing snort. Thanks. On Sat, Jun 27, 2015 at 6:49 PM, Nigel J Taylor ni...@openbsd.org wrote: On 06/27/15 09:12, Wong Peter wrote: Dear All, I had installed Snort but cannot run it. Error

Cannot run Snort

2015-06-27 Thread Wong Peter
Dear All, I had installed Snort but cannot run it. Error Message: Can't load library liblzma.s0.2.0 What need to install? I had install the lzlib but still cannot solved it. Which packages need to install or how to tell snort to look up the shared library? -- Linux

Re: OpenBGPd forward update configuration

2015-06-26 Thread Peter Hessler
On 2015 Jun 26 (Fri) at 00:18:40 -0600 (-0600), dsp wrote: :On Thu, Jun 11, 2015 at 03:21:31PM -0600, dsp wrote: : On Wed, Jun 10, 2015 at 08:18:34PM -0600, dsp wrote: : Hello list! : : please excuse my probably idiotic question, but i'm still a new OpenBGPd user. : (5.7 release) : : what

dnssec-signzone and NSEC3

2015-06-26 Thread Peter J. Philipp
. -peter

Re: dnssec-signzone and NSEC3

2015-06-26 Thread Peter J. Philipp
On 06/26/15 10:10, David Dahlberg wrote: Am Freitag, den 26.06.2015, 09:53 +0200 schrieb Peter J. Philipp: I can't find the -3 - option to generate NSEC3 RR's with dnssec-signzone. Am I reading the manual page wrong or is this a missing feature? If it is I'll probably leave NSEC3 out

Re: nsd configuration problem

2015-06-24 Thread Peter Pauly
NSD (name server daemon) is for authoritative DNS - answering the question for internet users what is the IP address of my servers. You may want to use Unbound. It is a recursive DNS lookup that answers the question: what is the IP address of a server out on the internet that belongs to someone

Experimenting with httpd

2015-06-23 Thread Peter Fraser
The httpd.conf man page uses the term request path, which I assumed when reading the man page would be the full http://company.com/web/page;, but I found through experimentation that it would be /web/page. The httpd.conf man page says that for the location directive The path argument will be

Re: Testing changes in current using a liveCD

2015-06-21 Thread Peter Pauly
A twenty percent power reduction is no improvement? You have high expectations. On Sun, Jun 21, 2015 at 5:13 PM, Walter Alejandro Iglesias roque...@gmail.com wrote: After realizing that FuguIta runs stable and not current like I thought (sorry for the noise) I decided to download a snapshot

Re: Encrypted root - booting problems on USB3 only

2015-06-19 Thread Peter Pauly
) On Fri, Jun 19, 2015 at 10:16 AM, Peter Pauly ppa...@gmail.com wrote: I have an ADATA AUV128-32G-RBE USB3 stick that I've installed 5.7 (release) AMD64 on with encrypted root. It works fine on other computers and this computer using USB2, but when booting inserted into a USB3 port I get

Encrypted root - booting problems on USB3 only

2015-06-19 Thread Peter Pauly
I have an ADATA AUV128-32G-RBE USB3 stick that I've installed 5.7 (release) AMD64 on with encrypted root. It works fine on other computers and this computer using USB2, but when booting inserted into a USB3 port I get the following: root device not found http://i.imgur.com/pflOwXC.jpg and

route-to looking for better ways

2015-06-05 Thread Peter J. Philipp
192.168.181.0/24 to any match out on tun1 inet from rfc1916 to any nat-to (tun1) ### Is there a way I missed other than the pfclt -k id -k stateid, and the pfctl -Fstate? Cheers, -peter

OpenBSD 5.7 Asterisk sendmail voice mail as email

2015-05-28 Thread Peter Fraser
Asterisk seems to run fine on 5.7 with one exception. I normally have voice mail messages send as emails. These emails are not being send. /usr/local/share/examples/asterisk/default/voicemail.conf has a variable ;mailcmd=/usr/sbin/sendmail -t which I believe will end up using smptd since I

Re: OpenBSD 5.7 Asterisk sendmail voice mail as email

2015-05-28 Thread Peter Fraser
-Original Message- From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf Of Peter Fraser Sent: Thursday, May 28, 2015 2:18 PM To: 'misc@openbsd.org' Subject: OpenBSD 5.7 Asterisk sendmail voice mail as email Asterisk seems to run fine on 5.7 with one exception. I

Re: Openbsd 5.7 and sendmail

2015-05-27 Thread Peter Fraser
Thanks I managed to miss noting that I should look at /usr/local/share/doc/pkg-readmes/sendmail-* -Original Message- From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf Of John Merriam Sent: Tuesday, May 26, 2015 12:20 PM To: Peter Fraser Cc: 'misc@openbsd.org

Re: Random PID implementation and security

2015-05-26 Thread Peter J. Philipp
Don't use PID for seeding ever, in fact don't use seeding. If you want a random integer use arc4random(), if you want a random buffer use arc4random_buf(). There is more even to arc4random(3) which is up to you to read in the manpage system. Sincerely, -peter

<    5   6   7   8   9   10   11   12   13   14   >