smtpd: IPv6 subnets in accept rule

2011-07-22 Thread Rene Maroufi
Hi, If I use something like this in smtpd.conf: accept from fd07:8085:b92f:2::/64 for domain maroufi.net alias aliases deliver to mbox I get this error: smtpd: inet_net_pton: Address family not supported by protocol family Has smtpd problems with IPv6? Cheers Rene Maroufi -- Reni Maroufi i

OpenBSD Apache with IPv6 VirtualHost

2011-07-17 Thread Rene Maroufi
80 VirtualHost 192.168.0.11:80 [fd07:8085:b92f:1::1:1]:80 ... Both addresses have DNS Entrys (and Reverse DNS Entrys). Whats wrong with this config? Cheers Rene Maroufi -- Reni Maroufi i...@maroufi.net

Re: OpenBSD Apache with IPv6 VirtualHost

2011-07-17 Thread Rene Maroufi
On Sun, Jul 17, 2011 at 12:30:45PM -0500, joshua stein wrote: you need -U in httpd_flags in /etc/rc.conf.local Thank you. It works with -U! Cheers Rene -- Reni Maroufi i...@maroufi.net

USB CD not working in 4.8

2010-11-20 Thread Rene Maroufi
Hi, I have a USB DVD-Burner, but OpenBSD 4.8 (Release) can't use the drive. OpenBSD attach the uk driver instead the cd driver with the drive. dmesg: umass0 at uhub0 port 3 configuration 1 interface 0 TS8XDVDR Transcend rev 2.00/1.66 addr 2 umass0: using ATAPI over Bulk-Only scsibus1 at umass0:

Snapshot: misc48.tgz missing

2010-10-18 Thread Rene Maroufi
Hi, the latest snapshot has no misc48.tgz file. Is this file no longer in the releaseset or what is wrong? Cheers Rene -- Reni Maroufi i...@maroufi.net

Re: 4.7 pf: quick and rdr-to/nat-to

2010-05-24 Thread Rene Maroufi
On Mon, May 24, 2010 at 01:24:26AM +0400, Vadim Jukov wrote: Then maybe, you'll show us output of: 1. cat /etc/pf.conf 2. pfctl -f /etc/pf.conf pfctl -sr 3. pfctl -o none -f /etc/pf.conf pfctl -sr Today it works without the quick. I don't know why, but it works now. Sorry for the

4.7 pf: quick and rdr-to/nat-to

2010-05-23 Thread Rene Maroufi
Hi, i update my firewall to 4.7 and changed my rdr and nat rules. But there is one thing i don't understand: I use a transparent proxy (Squid) on the same machine and in pf.conf this rdr-rule: pass in quick on $ifklan proto tcp from $klan to ! allintern port 80 rdr-to 127.0.0.1 port 3128 This

Re: 4.7 pf: quick and rdr-to/nat-to

2010-05-23 Thread Rene Maroufi
On Sun, May 23, 2010 at 08:07:38PM +0200, Henning Brauer wrote: * Rene Maroufi i...@maroufi.net [2010-05-23 14:04]: Hi, i update my firewall to 4.7 and changed my rdr and nat rules. But there is one thing i don't understand: I use a transparent proxy (Squid) on the same machine

man 4 dc missing

2010-05-02 Thread Rene Maroufi
Hi, the manpage for the dc Ethernetcard isn't on my system and in the online manpages. I have 4.6 stable installed und man 4 dc isn't found. The website shows only the manpage for man 1 dc (desktop calculator) and not man 4 dc. But the list on this site shows a dc manpage for section 4:

Re: man 4 dc missing

2010-05-02 Thread Rene Maroufi
On Sun, May 02, 2010 at 08:51:05PM +0200, Otto Moerbeek wrote: I don't know what you did to your system, but I've checked a 4.6 system and a current system, and both have the dc(4) man page. OK, sorry, after a sh /etc/weekly the manpage is shown. It was on my system, but makewhatis was not up

smtpd Feature Request: max_message_size

2010-04-13 Thread Rene Maroufi
Hi, i use OpenSMTPD in a small homelan with a smarthost configuration: All mail is sent trough a second external mailserver. The other mailserver only accepts mails with a maximum size of 20 MB. Sometimes my users sent to big mails. OpemSMTPD accepts these mails, but the external mailserver

Re: smtpd.conf: syntax error with from local

2010-04-12 Thread Rene Maroufi
On Sun, Apr 11, 2010 at 10:56:03PM +0200, Gilles Chehade wrote: As far as I remember, local is not a supported keyword for the from clause OK, then thats a docuumentation bug. The manpage says: from local The rule matches only locally originating connections. This is the default, and may

smtpd: Aliases only work with for local alias aliases

2010-04-12 Thread Rene Maroufi
Hello, In my smtpd.conf i have this: map aliases { source db /etc/mail/aliases.db } and: accept from all for local deliver to maildir If i send a mail to an alias smtpd rejected the mail. The Log says: 530 Recipient rejected: postmas...@lofn.maroufi I tried something and finally this works:

smtpd.conf: syntax error with from local

2010-04-11 Thread Rene Maroufi
Hi, i tried smtpd on a snapshot from March (GENERIC#556). If i use: accept from local for all relay I get with smtpd -n: /etc/mail/smtpd.conf:11: syntax error If i remove from local, everything is OK. Whats wrong with from local? The manpage says from local is correct (but the default, so it

spamlogd and authenticated synchronisation of spamd

2010-04-10 Thread Rene Maroufi
Hi, I read man spamd and man spamlogd about synchronisation. In man spamlogd i miss a point: If i use the authentication of spamd synchronisation messages with a /etc/mail/spamd.key file, what happens with the sync messages of spamlogd? The manpage of spamlogd doesn't tell me anything about

pf FAQ error

2010-03-30 Thread Rene Maroufi
Hi, Cite from http://www.openbsd.org/faq/pf/logging.html Note that PF can only log packets that it's blocking or passing; you cannot specify a rule that only logs packets. But this is wrong for 4.6 and later. 4.6 has the match Rule. It is possible to log with: match log in on $extif all or

Docu-bug: man login.conf/meaning of tc=

2010-02-09 Thread Rene Maroufi
Hello, maybe i found a documentation bug: In login.conf sometimes the parameter tc is used (for example in the default entry for staff: :tc=default:), but in man login.conf there is no parameter tc explained. I found a explanation of tc in a NetBSD manpage:

umass0: Sometimes on ehci and sometimes on uhci

2009-11-11 Thread Rene Maroufi
Hi, i have a IBM Thinkpad T41 running OpenBSD 4.6 stable. The Thinkpad has 2 USB Ports and supports USB 2.0 (ehci). If i plug in a umass device, sometimes i get USB 2 speed, sometimes not. In my dmesg I can see that uhub0 is on usb0 thats on ehci, but uhub1 - uhub3 are uhci devices. My USB

Re: powering off with shutdown -hp?

2009-10-28 Thread Rene Maroufi
On Tue, Oct 27, 2009 at 10:22:59PM -0700, Fred Snurd wrote: From the dmesg (below), this appears to be an old APM-based motherboard. The shutdown(8) manpage states that not all hardware supports automatic power down. That's fine if this hardware doesn't support it, but given the Attempting to

Re: ldpctl and ldpd

2009-10-27 Thread Rene Maroufi
On Tue, Oct 27, 2009 at 02:56:16PM +0300, Aleksandr Gurbo wrote: Hello, Where is I can found man pages for ldpd and ldpdctl? http://www.openbsd.org/cgi-bin/man.cgi?query=ldpdapropos=0sektion=0manpath=OpenBSD+4.6arch=i386format=html There is no ldpd or ldpdctl program in OpenBSD. Maybe you

igmp packets in pflog

2009-10-27 Thread Rene Maroufi
Hi, I have a (bridging) Firewall with OpenBSD 4.6 stable. In /var/log/pflog I can see many igmp-packets. But I have no log statement for these types of connections in my pf.conf. I have only a log statement for some other hosts (with a different IP). Are igmp packets always logged? Regards Reni

Re: Secure way to delete data in hard disc

2009-10-27 Thread Rene Maroufi
On Tue, Oct 27, 2009 at 04:12:54PM +0100, Jordi Espasa Clofent wrote: Hi all, The subject is auto-descriptive ;) After reading a while about wiping [1] I think there's not a unique way to do it. Finally I've chosen a simple double-step method: First, $ dd if=/dev/urandom

Re: igmp packets in pflog

2009-10-27 Thread Rene Maroufi
On Tue, Oct 27, 2009 at 02:25:03PM +0100, Rene Maroufi wrote: Hi, I have a (bridging) Firewall with OpenBSD 4.6 stable. In /var/log/pflog I can see many igmp-packets. But I have no log statement for these types of connections in my pf.conf. I have only a log statement for some other hosts

Re: smtpd: feature like the transport table in postfix

2009-10-26 Thread Rene Maroufi
On Sun, Oct 25, 2009 at 08:30:59PM +0100, Denis Fondras wrote: Hi Rene, Perhaps I didn't understand correctly your problem but can't you just use : accept from $mynetwork for domain example.net relay ? and let smtpd resolve example.net MX ? Yes, of course, this was a loop in my brain.

mailq: unsupported mode with smtpd

2009-10-26 Thread Rene Maroufi
Hi, The daily script on my Server with running smtpd shows me this error: mailq: unsupported mode In my /etc/mailer.conf mailq is mapped to smtpctl: mailq /usr/sbin/smtpctl Doesn't work the smtpctl command as mailq? The Server is running 4.6 stable (with the 4.6 stable smtpd). Regards

Re: mailq: unsupported mode with smtpd

2009-10-26 Thread Rene Maroufi
On Mon, Oct 26, 2009 at 01:52:24PM +0100, Gilles Chehade wrote: try: maulq /usr/sbin/smtpctl show queue and by maulq i mean mailq ;-) Doesn't work: /etc/mailer.conf: mailq /usr/sbin/smtpctl show queue # mailq mailq: unsupported mode Regards Rene -- Reni Maroufi

smtpd: format for certificates

2009-10-25 Thread Rene Maroufi
Hi, I try out the new smtpd in 4.6 stable. I want to use tls, but i don't know in which format the certificate file must be. I have a private key, and a public key in 2 files, but opensmtpd wants a certificate in one file. I tried to concatenate both in one file, but smtpd -n says:

Re: smtpd: format for certificates

2009-10-25 Thread Rene Maroufi
On Sun, Oct 25, 2009 at 03:41:22PM +0100, Gilles Chehade wrote: you should read man starttls, it provides the exact description of how you setup ssl/tls in smtpd Not really. I tried the procedure in man starttls and ended with 2 file, too. If I use the mycert.pem from the steps in man

Re: smtpd: format for certificates

2009-10-25 Thread Rene Maroufi
On Sun, Oct 25, 2009 at 04:17:46PM +0001, Jason McIntyre wrote: smtpd.conf(5) currently has a simple example for using an rsa certificate (which we should probably change). you can use the info in that page and starttls(8) to do the same using a dsa certificate. Thanks, this example from the

smtpd: feature like the transport table in postfix

2009-10-25 Thread Rene Maroufi
Hi, OpenSMTPD is great. Really simple configuration syntax. But I missed one thing from postfix: Would it be possible to do MX lookups in a relay via statement? I mean: Postfix have the transport table feature. I use this feature to relay some maildomains to their really mailhub instead of my

Re: smtpd: feature like the transport table in postfix

2009-10-25 Thread Rene Maroufi
On Sun, Oct 25, 2009 at 09:00:51PM +0100, Gilles Chehade wrote: Hi, Isn't the following what you're trying to do ? accept from $mynetwork for domain example.org relay via mail.example.org accept from $mynetwork for domain example.net relay Oh, yes, sometimes I'm blind. You are right of

output of daily script and man afterboot

2009-10-22 Thread Rene Maroufi
Hello, I don't want the output of the daily script mailed. In man afterboot (section crontab) is a example to write the output in /var/log/daily.out, but this example doesn't work in 4.6. I used this always and it was no problem in 4.5, but in 4.6 I get always mails. Is this a documentation bug

Re: output of daily script and man afterboot

2009-10-22 Thread Rene Maroufi
On Thu, Oct 22, 2009 at 12:10:06PM +0200, Ingo Schwarze wrote: or a bug of the daily script and how can i turn the mails off? Very probably, setting VERBOSESTATUS=0 in /etc/daily.local is all you want, see daily(8) for details. Thanks for the hint. I tested the daily script with

Patch file for 4.6 isn't on the ftp server

2009-10-22 Thread Rene Maroufi
Hi, the link on this site: http://www.openbsd.org/errata46.html for the .tar.gz file with all patches (001 and 002) isn't on the ftp server. Link directs to: ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.6.tar.gz I get 550 No such file or directory. Regards Reni -- Reni Maroufi i...@maroufi.net

Re: image editor

2009-10-08 Thread Rene Maroufi
On Thu, Oct 08, 2009 at 11:48:32AM +1300, Paul M wrote: All editors that I've seen will re-encode a jpeg whenever any change is made. Whenever that happens, you'll lose information. (Actually, lossless jpeg encoding is possible but I've never seen a publicly available app or library that

serial console with boot floppy

2009-06-08 Thread Rene Maroufi
Hi, since some Releases I use for a i386 machine without monitor a floppy with serial console support. I made it from floppyXX.fs and added on the floppy the etc-directory and a boot.conf file in this directory with this content: set tty com0 But: This doesn't work with the newest Snapshot. I

Re: serial console with boot floppy

2009-06-08 Thread Rene Maroufi
On Mon, Jun 08, 2009 at 12:12:24PM +0200, Rene Maroufi wrote: non-secure fd0a:/etc/boot.conf; will not proceed Sorry, my error! boot.conf wasn't owned by root. Fixed this, and it works. Cheers Rene -- Reni Maroufi i...@maroufi.net

Re: Script checking PERMIT_ values of all lib/run depends

2009-06-08 Thread Rene Maroufi
On Sun, Jun 07, 2009 at 04:47:14AM +0300, Cem Kayali wrote: port=multimedia/k3b Why not $1 instead of $port? It's more flexible, if it isn't hardcoded. Cheers Rene -- Reni Maroufi i...@maroufi.net

Re: problem with some graphical apps in 4.5 on some machines

2009-04-27 Thread Rene Maroufi
Sorry, sorry for this mail, forgot it. On Mon, Apr 27, 2009 at 10:51:43PM +0200, Rene Maroufi wrote: The application package itself can't be damaged, because the same packages work on the third machine. I was wrong. I installed the working machine from a cd, the others from my internal ftp

problem with some graphical apps in 4.5 on some machines

2009-04-27 Thread Rene Maroufi
Hi, i update 3 machines from 4.4 to 4.5. On 2 of these machines I have a very strange problem: Some graphical apps can't display graphical icons or any image. For example: Pidgin: Shows no icons (red cross instead of the icons). Audacious: Unusable, shows no application window GQview: Unusable

Re: European orders

2009-03-30 Thread Rene Maroufi
On Mon, Mar 30, 2009 at 05:10:23PM +0200, Artur Grabowski wrote: the old distributor proved to fall behind on payments, the other side hasn't said anything. Please, enlighten us about further details since The other side has said something here: http://accounting.kd85.com/ Cheers Reni -- Reni

Re: chroot browser

2009-03-26 Thread Rene Maroufi
On Thu, Mar 26, 2009 at 01:58:45AM -0400, punoseva...@gmail.com wrote: Hi misc, I was wondering if you could give me some input about the following security matter. It seems to me that using a web-browser, an email client, and a chat client (if permitted at all) are the un-safest forms of

Re: European orders

2009-03-25 Thread Rene Maroufi
Sorry, I want CC the list, but forgot it. I send this mail to Theo de Raadt: - Forwarded message from Rene Maroufi i...@maroufi.net - Date: Wed, 25 Mar 2009 12:09:49 +0100 From: Rene Maroufi i...@maroufi.net To: Theo de Raadt dera...@cvs.openbsd.org Subject: Re: European orders In-Reply

Re: network manager

2008-12-31 Thread Rene Maroufi
On Wed, Dec 31, 2008 at 01:58:29AM -0800, lordfabri wrote: Hi Nick and thanks for the answer. I have installed openbsd on my laptop and everything works fine,gnome too. What i haven't uderstand is: 1)I have a Digicom usb wifi with Zydas chipset and i 'vre read it's just supported...but i

Re: Any Dev interested in SIS Ethernet/SATA driver development?

2008-12-27 Thread Rene Maroufi
On Fri, Dec 26, 2008 at 10:10:04PM -0500, bofh wrote: On Fri, Dec 26, 2008 at 5:10 PM, Rene Maroufi i...@maroufi.net wrote: On Fri, Dec 26, 2008 at 03:32:50PM -0600, Marco Peereboom wrote: I'll comment by saying that developing a storage driver remotely is a total pain in the ass bordering

Re: Any Dev interested in SIS Ethernet/SATA driver development?

2008-12-27 Thread Rene Maroufi
On Fri, Dec 26, 2008 at 03:16:26PM -0600, Todd T. Fries wrote: You should try current. I have these very chipsets on a board I have, and the IDE support works great for PATA drives, haven't plugged in any SATA drives I will admit, mind showing a dmesg so we can get an idea of how old a kernel

Any Dev interested in SIS Ethernet/SATA driver development?

2008-12-26 Thread Rene Maroufi
Hi, I have a new PC with an Athlon 64 CPU, and SiS Chipsets. The SiS SATA Chip, and the SiS Onboard Ethernet Controller doesn't work on OpenBSD. The SATA-HDD works without DMA. I plugged in a PCI-Ethernet Card and an IDE HDD, but if any developer have interest to develop a driver for the SiS 190

Re: Any Dev interested in SIS Ethernet/SATA driver development?

2008-12-26 Thread Rene Maroufi
On Fri, Dec 26, 2008 at 03:32:50PM -0600, Marco Peereboom wrote: I'll comment by saying that developing a storage driver remotely is a total pain in the ass bordering impossible. Not, if there are 2 hard drives, both connected different (separate Controllers). My OpenBSD System (amd64, 4.4