minor tcpdump.8 inconsistency

minor inconsistency diff --git a/tcpdump.8 b/tcpdump.8 index ce16951..8c2cf33 100644 --- a/tcpdump.8 +++ b/tcpdump.8 @@ -1257,7 +1257,7 @@ end of this connection. .Ar window is the number of bytes of receive buffer space available at the other end of this connection. -.Ar urg +.Ar urgent

s/specifies to/specifies how to/ in elf.5

Index: elf.5 === RCS file: /cvs/src/share/man/man5/elf.5,v retrieving revision 1.27 diff -u -p -r1.27 elf.5 --- elf.5 10 Sep 2015 17:55:21 - 1.27 +++ elf.5 7 Sep 2016 00:35:29 - @@ -147,7 +147,7 @@ typedef

recompile packages to include base / libressl errata?

I'm following 5.7-stable but I'm not confident if my dovecot server has the recent OBJ_obj2txt fix (019) for it's tls connections. Should I start using the dovecot port and recompile instead of using the dovecot package in order to get the fix? I'm using dovecot with IMAP over tls.

Re: mini itx from intel

Op 03-10-15 om 02:45 schreef Brian Conway: FYI- My 2820 won't boot reliably headless without an HDMI dummy plug attached (such as my NUC 5CPYH won't boot either without an hdmi cable attached.

Re: X security claims in FAQ considering Xorg setuid root binary (was: Slightly OT, .. 5.5 Nagios)

Op 28-09-15 om 23:29 schreef Philip Guenther: On Mon, Sep 28, 2015 at 1:31 PM, L. V. Lammert wrote: ... X has never been installed on this box, .. why now? http://www.openbsd.org/faq/faq4.html#FilesNeededX From the FAQ: "By itself, installing X on a system does not

Re: Cheap hardware for router, perhaps fileserver?

Op 20-09-15 om 11:23 schreef Mark Carroll: even to the level of Intel NUCs which look pretty good if their hardware is solid. I've recently installed an Intel NUC NUC5CPYH to be used as a quiet low power sftp file server. Support for the nic is recently added and the machine works perfect

Re: dmesg Intel NUC NUC5CPYH

Op 04-09-15 om 21:06 schreef Tim Kuijsten: Op 04-09-15 om 21:01 schreef Ted Unangst: Tim Kuijsten wrote: tl;dr no network, dmesg for 5.7 release, 5.8 current mp and sp included. With 5.7 release a dhcp response is received, but no other addresses than the one that is assigned to the machine

dmesg Intel NUC5CPYH

tl;dr no network, dmesg for 5.7 release, 5.8 current mp and sp included. With 5.7 release a dhcp response is received, but no other addresses than the one that is assigned to the machine can be pinged (the dhcp server is in the arp cache, but no ping reply is received from it). with 5.8 no

Re: dmesg Intel NUC5CPYH

Op 04-09-15 om 21:01 schreef Ted Unangst: Tim Kuijsten wrote: tl;dr no network, dmesg for 5.7 release, 5.8 current mp and sp included. With 5.7 release a dhcp response is received, but no other addresses than the one that is assigned to the machine can be pinged (the dhcp server is in the arp

Re: NSA transition to quantum resistant algorithms

Op 15-08-15 om 21:14 schreef Devin Reade: Interesting background info, including recommended minimum key sizes during the interim: http://m.nsa.gov/ia/programs/suiteb_cryptography/index.shtml I find it interesting that symmetric ciphers like 256 bit AES are probably quantum resistant[0],

cert.pem 400 after updating stable 5.7

Every time I update my 5.7 systems by following stable the permissions of /etc/ssl/cert.pem are set to 400. Noticed this because OpenSMTPD stopped sending mail since it can not verify ssl connections: TempFail, stat=Network error on destination MXs. Cheers, -Tim

Re: cert.pem 400 after updating stable 5.7

Op 13-08-15 om 14:59 schreef Tim Kuijsten: Every time I update my 5.7 systems by following stable the permissions of /etc/ssl/cert.pem are set to 400. Noticed this because OpenSMTPD stopped sending mail since it can not verify ssl connections: TempFail, stat=Network error on destination MXs

Re: ifconfig.if rtsol autoconf diff

Op 06-06-15 om 13:24 schreef Florian Obser: On Fri, Jun 05, 2015 at 03:41:22PM +0200, Tim Kuijsten wrote: Had some trouble this morning in configuring inet6 on a new laptop. What problems did you encounter? inet6 autoconf or rtsol in hostname.if are supposed to work exactly the same. Mmm, I

ifconfig.if rtsol autoconf diff

Had some trouble this morning in configuring inet6 on a new laptop. Finally figured out that rtsol is dropped and that the functionality is moved to the kernel. Diff for hostname.if(5) included. Someone might want to replace the rtsol keyword in the installer as well. Index: hostname.if.5

Re: openntpd portable sync fails

Op 29-05-15 om 20:05 schreef Theo de Raadt: Just a quick question, why is S in sensors uppercase? Is that not to confuse it with status? % ntpctl usage: ntpctl -s all | peers | Sensors | status yes... whoops, should have read a bit better. trustlevel and stratum it is.

Re: openntpd portable sync fails

Op 29-05-15 om 20:05 schreef Theo de Raadt: Just a quick question, why is S in sensors uppercase? Is that not to confuse it with status? % ntpctl usage: ntpctl -s all | peers | Sensors | status yes... while on the topic. I didn't find an explanation of the header in ntpctl(8). I'm curious

chacha20 cipher_algbits is 0

Since I'm running postfix with LibreSSL, some clients encrypt the connection using ECDHE-RSA-CHACHA20-POLY1305. Now I'm used to seeing headers like using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits) . But these ChaCha20 headers look like using TLSv1.2 with cipher

Re: chacha20 cipher_algbits is 0

ps. this is a cross post from the postfix-users mailing list where they advised me to contact the LibreSSL developers*. recap: Postfix outputs: cipher_usebits/cipher_algbits obtained via: cipher = SSL_get_current_cipher(ssl); cipher_usebits = SSL_CIPHER_get_bits(cipher,

syslogd doesn't daemonize without inet6 since 5.7

I've upgraded some 5.6 boxes to 5.7 and found out that syslogd doesn't start in daemon mode if there is no inet6 address configured (i.e. -inet6 in hostname.*). Starting syslogd either in the foreground with -d or binding on inet only with -4 makes it start again. -Tim

Re: snmpd

, Tim - Original Message From: Brian A. Seklecki [EMAIL PROTECTED] To: Tim Kuijsten [EMAIL PROTECTED] Cc: misc@openbsd.org Sent: Friday, May 9, 2008 1:35:46 AM Subject: Re: snmpd On Thu, 2008-05-08 at 15:22 -0700, Tim Kuijsten wrote: It looks like there is no info about disk usage

snmpd

I'm a total noob to snmp and was excited snmpd from Reyk is included in 4.3. I started snmpd with the default config and net-snmp-walked the tree. It looks like there is no info about disk usage, memory usage, load and other sensor stuff. I have no clue where to find the mibs (locate mib or