Re: volatility or something like that in the future ?

2023-08-17 Thread Scott Cheloha
> On Aug 17, 2023, at 10:28, whistlez wrote: > > [...] I believe we need to realize that, while the kernel is very > secure, zero-day vulnerabilities are always a lurking threat. > > For those that don't know what is volatility, this is github page >

Re: OpenBSD 7.3 and some old IA32 CPUs

2023-07-04 Thread Scott Cheloha
> On Jun 28, 2023, at 13:26, Anton Borisov wrote: > > Hi all, > > here's sysctl extracts from Rise iDragon, IDT WinChip C6/2A running > OpenBSD 7.3. All seems quite stable. Interesting. Can you post a full dmesg for each of these?

Unbound rlimits when reloading vs. restarting

2023-03-20 Thread Scott Colby
of restarting it? Thanks, Scott

veb(4) with multiple vlan(4)'s

2023-01-21 Thread Scott Colby
l? 2) What is the right way to filter packets transiting between subnets in this configuration? I see in the man page that the directionality of packets emerging from a veb to the network stack is not normal. I've seen things with adding groups to the interfaces, but not sure what that gets me that using interface names in pf.conf doesn't. Thanks in advance for any help that you can provide! Scott

rtl8192ee currently supported?

2022-12-01 Thread Heppler, J. Scott
-rtl8723 rtwn-rtl8188e rtwn-rtl8192cU_Brtwn-rtl8723_B Would a rtl8192ee chipset be supported? There are a plethora a cheap 1200mbps cards with 8821ce chips. Is there inclinations/efforts to add support? Thanks -- J. Scott Heppler

Re: PC Engines APU alternative for OpenBSD - 2022h2

2022-12-01 Thread Scott Vanderbilt
On 11/24/2022 1:22 PM, Stuart Henderson wrote: Yes. Sometimes they even have stock. PCEngines have stock again. Just ordered an apu2e4, and it shipped within hours after placing my order and making payment.

Re: mSATA woes on APU2D0

2022-08-26 Thread Scott Seekamp
That was the first thing PCEngines folks had me change. I tried 3 different official power supplies with no change > On Aug 25, 2022, at 11:09, Mike Larkin wrote: > > On Thu, Aug 25, 2022 at 05:51:18PM +0200, Jan Stary wrote: >> This is current/amd64 on and APU2D0 (dmesg below) >> upgraded to

aligned_alloc shouldn't require size to be a multiple of alignment

2022-06-07 Thread John Scott
Hi, On OpenBSD, aligned_alloc currently fails with EINVAL if the requested size is not a multiple of the requested alignment. Indeed, this stems from a botch in the original specification in the C11 standard. See Defect Report 460 or the NetBSD man page for more details, but this silly

faq4.html multibooting grub

2022-01-26 Thread Heppler, J. Scott
I believe the FAQ4 section on multibooting is placing all Grub2 based distributions into the same bucket incorrectly. Debian and its derivatives utilize a different path to BOOTX64.EFI and are amendable to multibooting with OpenBSD. See attached patch for details. -- J. Scott Heppler --- faq4

using a thread-local buffer for strerror()

2021-12-18 Thread John Scott
Hi, I don't use OpenBSD, but I've played with it and am interested in making my code portable to it. A trend which the GNU C Library recently got on board with is to use a thread-local storage buffer for strerror() which makes it safe to use across multiple threads. I was wondering if there is a

Re: EC 25 pci-express support in arm64

2021-11-20 Thread Heppler, J. Scott
On Nov 20, 2021: 17:38, Łukasz Moskała wrote: W dniu 20.11.2021 o 16:34, Heppler, J. Scott pisze: I live in a rural area with poor broadband.  T-mobile is introducing a cellular based home internet plan and if the speeds are 1/3 of what they tout, my bandwidth will increase 20x. This would

EC 25 pci-express support in arm64

2021-11-20 Thread Heppler, J. Scott
ethernet port on the arm64; Rasberry Pi4/M3/BPI-M2, Banana Pi, Nano Pi. These appear to be Realtek or Broadcom. Questions: Is there pci-e interface support for the Quectel EC25? Broadcom (bge) vs Realtek (re) NIC's; is one better supported than the other? -- J. Scott Heppler

libsqlite3 errors while attempting to install numerous packages...

2021-08-22 Thread Scott Vargovich
s to point to. Please help me figure this out and fix it. Thanks in advance, -- --- <>< Scott Vargovich <>< Ham Call Sign: KE8CQC GMRS Call: WQXJ287 ---

Re: unexpected behavior with pf queues (bandwidth allocations seemingly ignored)

2021-07-24 Thread Scott Lewandowski
nal Message- > From: David Dahlberg > Sent: Saturday, July 24, 2021 8:47 AM > To: Scott Lewandowski > Cc: misc@openbsd.org > Subject: Re: unexpected behavior with pf queues (bandwidth allocations > seemingly ignored) > > Please try first to remove „min“. „Min“ makes it

unexpected behavior with pf queues (bandwidth allocations seemingly ignored)

2021-07-23 Thread Scott Lewandowski
I am attempting to prioritize traffic from a particular host. I have the following queue definitions, with this match rule: queue rootq on $ext_if bandwidth 13M max 13M queue file1_bak parent rootq bandwidth 10M min 8M qlimit 1024 queue std parent rootq bandwidth 3M min 2M default qlimit 1024

Re: [EXTERNAL] Why demotion counter for group carp is set to 33 on boot?

2021-07-15 Thread Scott Reese
ugh of a problem to justify digging into it. Sorry I don't have an answer for you. I just wanted you to know that it isn't just you. -Scott

Re: Not possible to sysupgrade via snapshots right now?

2021-05-11 Thread Scott Vanderbilt
On 5/11/2021 3:41 AM, Edgar Pettijohn wrote: On May 11, 2021 3:42 AM, Robert Klein wrote: On Sun, 9 May 2021 07:47:32 -0700 Scott Vanderbilt wrote: > On 5/9/2021 4:04 AM, Stuart Henderson wrote: > > On 2021-05-08, Scott Vanderbilt wrote: > >> Apologies if

Re: Not possible to sysupgrade via snapshots right now?

2021-05-11 Thread Scott Vanderbilt
On 5/11/2021 1:42 AM, Robert Klein wrote: On Sun, 9 May 2021 07:47:32 -0700 Scott Vanderbilt wrote: On 5/9/2021 4:04 AM, Stuart Henderson wrote: On 2021-05-08, Scott Vanderbilt wrote: Apologies if this is a question to which there is an obvious answer, but I could not find one

Re: Not possible to sysupgrade via snapshots right now?

2021-05-09 Thread Scott Vanderbilt
On 5/9/2021 4:04 AM, Stuart Henderson wrote: On 2021-05-08, Scott Vanderbilt wrote: Apologies if this is a question to which there is an obvious answer, but I could not find one in the sysupgrade man page, in the FAQ, or by Googling. Is it not possible to do a sysupgrade from 6.9-current

Re: Not possible to sysupgrade via snapshots right now?

2021-05-08 Thread Scott Vanderbilt
On 5/8/2021 6:04 PM, trondd wrote: On Sat, May 8, 2021 7:58 pm, Scott Vanderbilt wrote: Apologies if this is a question to which there is an obvious answer, but I could not find one in the sysupgrade man page, What is sysupgrade trying to do? What do you want it to do? No? Read it again

Not possible to sysupgrade via snapshots right now?

2021-05-08 Thread Scott Vanderbilt
Apologies if this is a question to which there is an obvious answer, but I could not find one in the sysupgrade man page, in the FAQ, or by Googling. Is it not possible to do a sysupgrade from 6.9-current to latest using snapshots at the moment? When I try, I get the following response from

Re: Understanding download speed reduction by introducing an inline Ubiquity ERL device

2020-10-04 Thread Scott Seekamp
I had a similar speed drop on an Edge Router 4. I don’t know if it’s the same situation on the Lite, but I believe it’s expected due to hardware acceleration support (or lack of) and single core performance on the pf side. Scott > On Oct 4, 2020, at 17:24, Amarendra Godbole >

Re: [EXTERNAL] Re: Troubleshooting pf congestion

2020-09-16 Thread Scott Reese
> On 2020-09-14, Scott Reese wrote: >> Greetings: >> >> - Original Message - >>> From: "Uwe Werler" >>> To: "misc" , "Scott Reese" , "misc" >>> >>> Sent: Monday, September 14, 2020 12:47:

Re: [EXTERNAL] Re: Troubleshooting pf congestion

2020-09-14 Thread Scott Reese
Greetings: - Original Message - > From: "Uwe Werler" > To: "misc" , "Scott Reese" , "misc" > > Sent: Monday, September 14, 2020 12:47:31 PM > Subject: [EXTERNAL] Re: Troubleshooting pf congestion > Without seeing a rule set wh

Troubleshooting pf congestion

2020-09-14 Thread Scott Reese
yone could spare a couple of sentences or a share a link to a page detailing what state causes the system to consider itself contested, I would appreciate it. Thanks for your time. -Scott System dmesg: OpenBSD 6.7 (GENERIC.MP) #6: Thu Sep 3 14:08:18 MDT 2020 r...@syspatch-67-amd64.openbsd.or

Re: OpenBSD alternatives to Pi-Hole

2020-06-12 Thread Scott Seekamp
"https://pgl.yoyo.org/adservers/serverlist.php?hostformat=unbound=0=plaintext; unbound-control reload and then unbound pull that file in as a local zone: # Ad servers block include: /var/unbound/etc/unbound_ad_servers Scott On 6/12/20 1:24 PM, George wrote: Hi guys, I am trying to setup

Re: reorder_kernel: failed

2019-12-11 Thread Heppler, J. Scott
ts softraid0 at root scsibus3 at softraid0: 256 targets root on wd0a (5463234f8754b441.a) swap on wd0b dump on wd0b fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec Organization: -- J. Scott Heppler

ahci cd/dvd failure key_sense

2019-11-18 Thread Heppler, J. Scott
is post. It appears this is device dependent. Can anyone recommend a make/model of SATA drive that can be used in OpenBSD. The recommended to use "xorriso -as cdrecord" in OpenBSD? Lastly, are any developer interested in addressing key sense in the ahci driver? I'm willing to test on the h

Re: GPS hardware and TTYs

2019-07-23 Thread Scott Seekamp
On 23.07.2019 16:16, Theo de Raadt wrote: > Todd C. Miller wrote: > > On Tue, 23 Jul 2019 13:42:28 -0600, Scott Seekamp wrote: > > I tested by: > > - unplugging the sensor > > - changing /etc/ttys > > - kill -HUP 1 > > - plugging sensor in and

Re: GPS hardware and TTYs

2019-07-23 Thread Scott Seekamp
On 23.07.2019 11:56, Theo de Raadt wrote: > Scott Seekamp wrote: > >> I purchased an inexpensive USB GPS receiver to test with time keeping on >> my OpenBSD 6.5 box. It's a "u-blox" supported by the nmea driver. >> >> Following the man pages for ldatt

GPS hardware and TTYs

2019-07-23 Thread Scott Seekamp
m constantly impressed with the work put into the OS and associated tools. Thanks Scott Links: -- [1] https://man.openbsd.org/cua.4 [2] https://man.openbsd.org/init.8 [3] https://man.openbsd.org/tty.4

Re: 4GB RAM too little for Firefox?

2019-07-06 Thread Heppler, J. Scott
version. Unfortunately, there is not a buildbot for iridium or chromium so you either have to wait for 6.6 to get the latest version or run -current. Still, I do not believe it has any major security issues at this time. Scott

Re: 4GB RAM too little for Firefox?

2019-07-05 Thread Heppler, J. Scott
ophone etc. Consider www/iridium as an alternative browser. You can export your firefox bookmarks.html and import it into iridium. Although I do not have solid numbers, I thought it was better in this regard than firefox. -- J. Scott Heppler

Re: Upgrade procedure encrypted filesystem (6.4 -> 6.5)

2019-05-06 Thread Scott Bonds
On 05/06, shadrock uhuru wrote: hi everyone when upgrading my laptop which is encrypted with a keydisk i assume that i boot the 6.5 kernel which will be on a usb stick with the keydisk inserted, will the hard drive still be decrypted and upgraded, yes also will the encryption step need to be

Re: Is anyone able to use certificates with openbsd iked/ikev2 and Apple iOS (iphone)?

2019-04-05 Thread Scott Bonds
On 04/05, Michael Lam wrote: Are you able to have 2 clients connected at the same time? When I tried that (I am using mschap) whenever the 2nd client connects the 1st one's traffic will not go through anymore (it stays connected but no traffic can go through). I've noticed that, if my 2 ikedv2

Re: Multiple instances of OSPFD in different RDomains - rcctl behavior

2019-02-19 Thread Scott Reese
y syntax incorrect? Would /etc/daily be doing something here to my > configuration? > Why would this line keep being automatically removed? > > Thanks in advance! Greetings Henry: Looks like you're running Saltstack. Any chance that your Salt master has a copy of the rc.conf.local that doesn't have the ospf2d_flags line and is resetting the file back to its "correct" values? -Scott

Intel Celeron SoC support

2018-11-18 Thread Heppler, J. Scott
use the keyboard etc. Will support come for this SoC architecture? Or am I better of selling this board? Think its a Gemini Lake SoC Chipset; -- J. Scott Heppler

OpenBSD 6.2 - 6.4 crash on ASRock Q1900 ITX boards

2018-11-14 Thread Heppler, J. Scott
#Baytrail_complete_freeze I disabled all c-states in the bios although C1 will probably be OK. Crashes/Lockups went away. -- J. Scott Heppler

Re: spamd and google smtp ips

2018-10-30 Thread Scott Seekamp
and doesn't require much handholding. Thanks Scott

Dual boot OpenBSD with DragonFly BSD

2018-10-08 Thread Heppler, J. Scott
/ If you need GPT/UEFI, then you choosing a bootloader that is capable of GPT/UEFI dual booting. According to OpenBSD FAQ, Grub2 or reFIND will work. https://www.openbsd.org/faq/faq4.html#Multibooting -- J. Scott Heppler

Block TLD senders with opensmtpd

2018-08-30 Thread Scott Seekamp
processing altogether. Thanks Scott

Re: wifi gui manager

2018-08-28 Thread Heppler, J. Scott
It is possible to put together a gui, wifi tray applet that utilizes doas. http://daemonforums.org/showthread.php?t=10400 -- J. Scott Heppler

Re: Introducing pf-badhost and unbound-adblock

2018-08-06 Thread Scott Bonds
On 08/05, Jordan Geoghegan wrote: Hi everyone, I thought I would share a couple scripts I wrote to block ads and bad hosts. I have found them to increase web-browsing speed and reduce battery consumption, especially on mobile devices. They also help reduce pop ups and fake sites, especially

Re: newaliases vs makemap

2018-07-16 Thread Scott Vanderbilt
On 7/16/2018 9:15 AM, Todd C. Miller wrote: On Mon, 16 Jul 2018 09:11:50 -0700, Scott Vanderbilt wrote: BTW, newaliases seg faults for me with latest couple of snapshots (amd64). No message other than "segmentation fault". Just submitted a PR with sendbug. Already fixed i

Re: newaliases vs makemap

2018-07-16 Thread Scott Vanderbilt
On 7/16/2018 8:32 AM, Todd C. Miller wrote: On Sun, 15 Jul 2018 17:59:58 -0700, Scott Vanderbilt wrote: In /etc/mail/aliases, there is the following note: # >>>>>>>>>>The program "newaliases" must be run after # >>

Re: newaliases vs makemap

2018-07-16 Thread Scott Vanderbilt
On 7/16/2018 3:01 AM, Benjamin Baier wrote: On Sun, 15 Jul 2018 19:54:12 -0700 Joshua Taylor Eppinette wrote: On Sun, Jul 15, 2018 at 05:59:58PM -0700, Scott Vanderbilt wrote: In /etc/mail/aliases, there is the following note: # >>>>>>>>>>The pr

newaliases vs makemap

2018-07-15 Thread Scott Vanderbilt
In /etc/mail/aliases, there is the following note: # >>The program "newaliases" must be run after # >> NOTE >> this file is updated for any changes to # >>show through to smtpd. Yet the man page for newaliases(8) says:     Note: this utility

Re: httpd setup info?

2018-07-02 Thread Scott Vanderbilt
On 7/2/2018 8:05 AM, John Long wrote: What userid does httpd run under? I have some kind of permission problem, httpd can't serve some of the content. ps aux|grep httpd

Re: httpd setup info?

2018-07-02 Thread Scott Vanderbilt
On 7/2/2018 8:03 AM, John Long wrote: On Mon, 2018-07-02 at 17:18 +0300, IL Ka wrote: What's the appropriate way to let the browser know it should open it in Acrobat See "Content-Disposition" header. https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Dis position It tells

Re: httpd rewrite and REQUEST_URI value

2018-06-30 Thread Scott Vanderbilt
n access log: nomina2.onomasticon.org 162.229.162.103 - scott [30/Jun/2018:10:20:47 -0700] "GET /hello/fred HTTP/1.1" 404 0 The index.php file is in the location specified: $ ls -al /var/www/htdocs/lpn/src/public/ total 24 drwxr-xr-x 4 root daemon 512 Jun 21 13:13 . drwxr-xr-x 5 root daem

Re: httpd chroot outbound

2018-06-25 Thread Scott Vanderbilt
On 6/25/2018 9:37 AM, Elias M. Mariani wrote: Does anybody knows what is needed to allow php to retrieve files while under httpd chrooted ? I recall the need of /etc/resolv.conf on the jail but that didn't work. Also: http://php.net/manual/en/install.unix.openbsd.php

Re: httpd chroot outbound

2018-06-25 Thread Scott Vanderbilt
On 6/25/2018 9:37 AM, Elias M. Mariani wrote: Does anybody knows what is needed to allow php to retrieve files while under httpd chrooted ? I recall the need of /etc/resolv.conf on the jail but that didn't work. See /usr/local/share/doc/pkg-readmes/php-*

httpd rewrite and REQUEST_URI value

2018-06-23 Thread Scott Vanderbilt
I was very eager to implement the new rewrite functionality in httpd. However, I've run into an issue, and I am uncertain whether the new behavior is CGI-compliant or not. The app I am attempting to convert to httpd is currently built on nginx, and the rewrite functionality it offers

Re: New laptop recommendations

2018-06-19 Thread Scott Bonds
On 06/19/18 03:37, Rupert Gallagher wrote: I have 1500EUR for a new laptop. What would you buy with it? On 06/19, Jordan Geoghegan wrote: Have you considered one of the Librem laptops by Purism? I hear they're quite nice, and are running coreboot straight from the factory. They run

Another Lock Order Reversal with amd64 snapshot

2018-06-09 Thread Scott Vanderbilt
Not quite the same as earlier reports. Also not sure if this qualifies as something reportable to bugs@ or not. The system appears to be working normally otherwise. scott #sysctl kern.version kern.version=OpenBSD 6.3-current (GENERIC.MP) #90: Thu Jun  7 09:08:25 MDT 2018 dera...@amd64

Re: acme-client new cert error

2018-05-26 Thread Scott Vanderbilt
On 5/26/2018 4:54 AM, Stuart Henderson wrote: aeneas.datagenic.com doesn't respond on port 80. (And if I can't fetch it, letsencrypt's checkers are also unlikely to be able to). Firewall issue? Oh, FFS. Yes. A silly pf rule blocking incoming traffic from outside my LAN that I overlooked

Re: acme-client new cert error

2018-05-25 Thread Scott Vanderbilt
. At least that’s my understanding. Or maybe I misunderstood the error message. V/r, Bryan Thanks for chipping in. Regrettably, I get the same error with -D flag only (i.e., no -A). On May 25, 2018, at 4:10 PM, Scott Vanderbilt <li...@datagenic.com> wrote: I'm having difficulty creating a n

Re: acme-client new cert error

2018-05-25 Thread Scott Vanderbilt
On 5/25/2018 2:20 PM, Fred wrote: On 05/25/18 21:10, Scott Vanderbilt wrote: I'm having difficulty creating a new SSL cert for a virtual host I'm just standing up for the first time. I get the following error on successive attempts: urn:acme:error:unauthorized Error creating new cert

acme-client new cert error

2018-05-25 Thread Scott Vanderbilt
I'm having difficulty creating a new SSL cert for a virtual host I'm just standing up for the first time. I get the following error on successive attempts: urn:acme:error:unauthorized Error creating new cert :: authorizations for these names not found or expired: aeneas.datagenic.com I've

thank you for 6.3

2018-04-18 Thread Scott Bonds
Under 6.2 my laptop would hang a few hours after waking from sleep, and it was my own damn fault for running an unsupported config (Lenovo x200 + coreboot + SeaBIOS). But after upgrading to 6.3 I haven't been able to get it to hang and I find myself back in 'it just works' land which is so, so

Relayd and ipv6

2018-04-10 Thread Scott Seekamp
0 inet proto tcp from any to “ip4 addr" port = 389 flags S/SA keep state (tcp.established 600) rdr-to port 389 round-robin } with the table containing both the ip4 and ip6 address. Thanks! Scott

is there foomatic-rip for lpd on openBSD 6.3?

2018-04-09 Thread Heppler, J. Scott
It is in print/cups-filters http://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/ports/print/cups-filters/pkg/README?rev=1.9=text/plain -- J. Scott Heppler

Re: Switchd-VMD

2018-01-29 Thread Scott Seekamp
On 29.01.2018 17:28, Mike Larkin wrote: On Mon, Jan 29, 2018 at 03:07:49PM -0700, Scott Seekamp wrote: I'm attempting to set up an OpenBSD virtualized environment and running into issues. OpenBSD 6.2 AMD64 hypervisor vm.conf: vm "vm1" { disable memory 1g disk "/vmm/vm1

Switchd-VMD

2018-01-29 Thread Scott Seekamp
I'm attempting to set up an OpenBSD virtualized environment and running into issues. OpenBSD 6.2 AMD64 hypervisor vm.conf: vm "vm1" { disable memory 1g disk "/vmm/vm1.img" interface { switch "uplink" } } vm "vm2" { disable memory 1g

Re: bsd.mp not installed on EdgeRouter Lite

2018-01-18 Thread Scott Bennett
On 1/18/2018 9:23 AM, Stefan Sperling wrote: > On Thu, Jan 18, 2018 at 09:06:44AM -0500, Sean Murphy wrote: >> I performed the steps as indicated n the links above and now have GENERIC.MP >> running on my ERL. I did see that KARL failed on the initial install and >> reboot, > > It looks like

Re: bsd.mp not installed on EdgeRouter Lite

2018-01-16 Thread Scott Bennett
On 1/15/2018 5:30 PM, jungle Boogie wrote: > On 12 January 2018 at 08:24, Scott Bennett <sbennett1...@gmail.com> wrote: >> After reading INSTALL.octeon, I was able to write miniroot62.fs to a usb, >> plug that into the ERL, and perform a normal installation. The problem is

Re: bsd.mp not installed on EdgeRouter Lite

2018-01-16 Thread Scott Bennett
On 1/13/2018 5:01 AM, Stefan Sperling wrote: > On Fri, Jan 12, 2018 at 11:24:59AM -0500, Scott Bennett wrote: >> After reading INSTALL.octeon, I was able to write miniroot62.fs to a usb, >> plug that into the ERL, and perform a normal installation. The problem is >> that the i

bsd.mp not installed on EdgeRouter Lite

2018-01-12 Thread Scott Bennett
and copied that to the FAT partition. My ERL can now run SMP, but as you probably guessed this does break KARL. Has anyone been able to install bsd.mp on the ERL and not break KARL? Selected snippets from the install process below. Cheers, Scott [snip] Octeon

Re: rdomain/rtable

2017-12-24 Thread Scott Nicholas
Hello You may need a direct route to the gateway as well Happy holidays, Scott On Dec 24, 2017 4:08 PM, "Paul B. Henson" <hen...@acm.org> wrote: Thanks for the info. I don't want to move any interfaces to a non-default routing domain, I just want to be able to run a process

Re: Solved IPMI, but I can't get onto network to outside

2017-12-21 Thread Scott Nicholas
admit I really don't see what IP addresses I get with 104.217.196.248/29. Especially confusing with 104.217.196.249 as the gateway address Chris Bennett You get 6 addresses from that, but one is used by the gateway. Use 104.217.196.250 to 254 for your devices. em0: inet 104.217.196.250 255.255.255.248 104.217.196.255 Regards, Scott

Re: no registration exists matching provided key

2017-12-19 Thread Scott Nicholas
On Tue, Dec 19, 2017 at 3:26 AM, ?? ?? wrote: > Hello, I am very new to all these things, and wanted to have ssl for my own > server (Openbsd6.2, Openbsd httpd, Openbsd acme-client), which will be my > first ssl, other than previous self-signed one. > > Previously, to

Multicast in OSPF with shared interface addresses

2017-12-03 Thread Scott Nicholas
I joined a VPN network (dn42) to learn BGP and such and decided to do so with OpenBSD, which I'm also learning. Most peers are Linux machines and they re-use their address on each VPN tunnel as a /32. I have been successful doing the same until I decided I needed ospf for my internal routes.

Re: Keeping up to date with ports and putting ports/pobj on wxallowed filesystem

2017-11-09 Thread Scott Bennett
s (man.openbsd.org/pkg_info#t). Obviously this will also show you packages that you want to keep, such as mariadb, firefox, etc... But this should help in determining some packages to remove. Scott

Re: pf not redirecting DNS queries

2017-11-07 Thread Scott Bennett
On 11/7/2017 9:39 AM, Jeremie Courreges-Anglas wrote: On Mon, Nov 06 2017, Scott Bennett <sbennett1...@gmail.com> wrote: [...] $ cat /etc/resolv.conf.tail search 123090.net lookup file bind options edns0 Just being curious, why use "options edns0" here? I haven't a

Re: pf not redirecting DNS queries

2017-11-07 Thread Scott Bennett
On 11/7/2017 8:46 AM, Stuart Henderson wrote: On 2017-11-07, Scott Bennett <sbennett1...@gmail.com> wrote: I want to be able to enforce that all queries get funneled to OpenDNS. I don't want someone to be able to outsmart the filter, at least at this one level. Redirection lets me con

Re: pf not redirecting DNS queries

2017-11-06 Thread Scott Bennett
On 11/6/2017 9:29 PM, trondd wrote: On Mon, November 6, 2017 8:50 pm, Scott Bennett wrote: pass quick proto { tcp, udp } to port $udp_ports Because you're telling pf to pass all taffic on port domain to anywhere. Quick rules stop evaluation and you never hit the rdr-to rules below. Oh, duh

pf not redirecting DNS queries

2017-11-06 Thread Scott Bennett
actually supposed to work, I can still see evidence where my LAN clients are able to go around the internal unbound. Relevant APU2 configurations are below. Omitting the unbound configuration as it seems unhelpful. I have verified that it works; just the redirection isn't working. What have I goofed up?

Re: Openbsd 6.1 and Current Console Freezes and lockup Proxmox PVE5.0

2017-10-12 Thread Scott Reese
, and the qemu-kvm package version is 2.7.1-7. If there's any information I can provide, please let me know. -Scott

pf route-to vs static route

2017-10-03 Thread Scott Bonds
Hi everybody. I used to host my own email and I have ambitions to give it another try. I prefer to keep my email on my home server if I can, but I use Comcast and they block port 25. So, I thought I'd try setting up an IKEDv2 based VPN between my home network (including my email server at

MediaTek Mt7601

2017-08-25 Thread Heppler, J. Scott
few months? I'm presently using an older, larger rum(4) usb device. Thanks -- J. Scott Heppler

httpd and URL rewriting

2017-07-06 Thread Scott Vanderbilt
I am investigating the feasibility of migrating aRESTful webapp currently hosted on nginx and6.1-currentto use httpd. Naturally, such an application requires a URL-rewriting facility. Perusing the httpd.conf(5) and httpd(8) man pages, this list's archive, and Google, I see nothing that

Re: Doubling in Size of base61.tgz

2017-06-14 Thread Scott Vanderbilt
On 6/14/2017 3:37 PM, Theo de Raadt wrote: Please forgive me if this has been noted on misc@, as I've overlooked it, but, just out of curiosity, can anyone account for the recent doubling in size of base61.tgz in recent amd64 snapshots of -current? As recently as 7 June, it was ~58 MB in size,

Doubling in Size of base61.tgz

2017-06-14 Thread Scott Vanderbilt
Please forgive me if this has been noted on misc@, as I've overlooked it, but, just out of curiosity, can anyone account for the recent doubling in size of base61.tgz in recent amd64 snapshots of -current? As recently as 7 June, it was ~58 MB in size, but over the last couple of days at

PSA: autodisklabel '\' must be configured

2017-05-28 Thread Scott Bonds
You might get the error "'\' must be configured" when trying to autoinstall, if your autodisklabel layout is only minimums, and the minimums add up to more than the total available disk size. So, you know, don't do that. Putting this out there to save someone some troubleshooting time when

Re: file systems

2017-05-26 Thread Scott Bonds
I've got a 27T drive, single partition, about half full. Combination of big files and lots of small ones. 32G of ECC RAM. Hardware RAID5 ATM though I've used software RAID5 on the same array and that was good too. I keep offline backups of everything. I think it takes around an hour to fsck,

Re: cloud docs

2017-05-24 Thread Scott Bonds
unison? On 05/24, Asbel Kiprop wrote: Yeah, i was using it for some time and i wonder if there is some more text document based solution. 2017-05-24 20:33 GMT+03:00 Ulises M. Alvarez : On 24/05/17 12:22, Asbel Kiprop wrote: Hello, friends. Is there is some solution (in

Re: tmux.conf syntactic change

2017-04-20 Thread Scott Bonds
Yah, I ran into that too, syntax for that sorta stuff changed, now its like this: bind -T copy-mode-vi v send -X begin-selection On 04/20, Predrag Punosevac wrote: Not really a question but one thing I noticed after upgrading dozen or so OpenBSD servers from 6.0 to 6.1 per official

ikedv2 + rdomains + nat = tcp works, udp doesn't

2017-04-03 Thread Scott Bonds
Hi everyone! I like to play with all the cool toys the devs give us, because, you know, they are there, and it helps me learn. One of my favorite walls to bang my head against is automatically connecting my (OpenBSD-stable) laptop to the internet and automatically keeping it connected as I

Re: strange behaviour with etherip bridge over IPSEC and UDP queries

2017-03-28 Thread Scott Bonds
Interesting. I may have a similar problem and was planning to post about it soon...in my case I've been playing with rdomains, using PF to NAT between them, and ikedv2. I've found that when I use ikedv2 to layer IPSEC on top of my NATing traffic between rdomains, TCP passes fine, UDP does not,

Re: dmesg for Lenovo ThinkPad x200 w/coreboot

2017-03-19 Thread Scott Bonds
unfortunately no, I don't know what it is or how to solve it On 03/19, Robert Campbell wrote: Thanks Scott, I've followed your instructions and everything seems to be working well on my x200. I'll let you know if I experience the period locking you mentioned. We both get this error: error

Re: better way to detect new display

2017-03-01 Thread Scott Bonds
Czlonka <rczlo...@gmail.com> wrote: On Wed, Mar 01, 2017 at 10:14:39AM GMT, Marcus MERIGHI wrote: sc...@ggr.com (Scott Bonds), 2017.02.28 (Tue) 02:21 (CET): > I'm polling using xrandr to check whether a new display was plugged > in, so I can run a script to switch to it, i.e. plug in

Re: better way to detect new display

2017-03-01 Thread Scott Bonds
On 03/01, Marcus MERIGHI wrote: sc...@ggr.com (Scott Bonds), 2017.02.28 (Tue) 02:21 (CET): I'm polling using xrandr to check whether a new display was plugged in, so I can run a script to switch to it, i.e. plug in an external VGA monitor and it lights up automatically, unplug it and my laptop

Re: dmesg for Lenovo ThinkPad x200 w/coreboot

2017-02-28 Thread Scott Bonds
Everyone once in a while, while I'm actively using the laptop, it just...locks up: what's on the screen stops changing, the hard drive light is pegged on with no fluctuation, moving the mouse doesn't move the pointer, typing doesn't effect anything, I cannot switch to a different tty

better way to detect new display

2017-02-27 Thread Scott Bonds
I'm polling using xrandr to check whether a new display was plugged in, so I can run a script to switch to it, i.e. plug in an external VGA monitor and it lights up automatically, unplug it and my laptop automatically switches back to using its internal display. But, every time I run xrandr my

Re: dmesg for Lenovo ThinkPad x200 w/coreboot

2017-02-27 Thread Scott Bonds
By popular demand (ok, just 2 people asked)...now with instructions on how to do this yourself: https://ggr.com/how-to-install-coreboot-on-your-x200.html On 02/27, Scott Bonds wrote: I flashed a Lenovo x200 with Coreboot with Intel microcode enabled, ME removed, and the gigabit ethernet

dmesg for Lenovo ThinkPad x200 w/coreboot

2017-02-27 Thread Scott Bonds
I flashed a Lenovo x200 with Coreboot with Intel microcode enabled, ME removed, and the gigabit ethernet firmware from libreboot. Everything seems to work. Unlike with Libreboot, which comes with a Grub2 payload, Coreboot uses the SeaBIOS payload by default and it can boot an encrypted OpenBSD

splassert: yield message on 5 Feb snapshot (amd64)

2017-02-08 Thread Scott Vanderbilt
Updated a machine to latest (5 Feb.) snapshot of amd64. I'm now seeing the following message after booting that I've not recalled seeing before: splassert: yield: want 0 have 1 Looking in the list archives, I see a thread from Sept. 2016 where the following response from Theo Buehler is

Re: Troubleshooting JDK Segmentation Faults

2017-01-27 Thread Scott Vanderbilt
Super. Thanks! On 1/27/2017 11:10 AM, Pablo Méndez Hernández wrote: Hi Scott, Yes, it was a bug that was fixed some hours ago by sthen@: https://marc.info/?l=openbsd-cvs=148551522630798=2 Next snap should have the fix. Regards. Pablo On Fri, Jan 27, 2017 at 7:28 PM, Scott Vanderbilt <

Re: Troubleshooting JDK Segmentation Faults

2017-01-27 Thread Scott Vanderbilt
On 1/27/2017 9:58 AM, Philip Guenther wrote: On Fri, Jan 27, 2017 at 8:43 AM, Scott Vanderbilt <li...@datagenic.com> wrote: I recently upgraded the -current snapshot on an amd64 host running Apache Solr, and am now getting segmentation faults on Solr start-up that weren't occ

Troubleshooting JDK Segmentation Faults

2017-01-27 Thread Scott Vanderbilt
I recently upgraded the -current snapshot on an amd64 host running Apache Solr, and am now getting segmentation faults on Solr start-up that weren't occurring with the previous snapshot ((GENERIC) #145: Mon Jan 16 11:42:53 MST 2017). Currently running: # uname -a OpenBSD vergil.rockology.com

  1   2   3   4   5   6   >