Re: An OpenBSD Consumer Gateway Launch

2021-06-14 Thread Tommy Nevtelen
On 14/06/2021 08.15, Stuart Longland wrote: Secondly, isn't it a bit late to tell me _now_ that your email is confidential _after_ I have read the body in full? I don't know how people read emails in the European Union, but here in Australia, I start at the top and read to the bottom, not

Re: search contains unknown domain in resolv.conf

2020-10-27 Thread Tommy Nevtelen
On 27/10/2020 12.32, Andreas X wrote: Greetings. On OpenBSD 6.8, I have unbound enabled in my server, (server gets its IP via DHCP from my server provider) In resolv.conf I have a "search your-server.de" line and I don't know what hostname is that. My own hostname is something different. That

Re: pf.conf parser/lint

2020-09-04 Thread Tommy Nevtelen
On 04/09/2020 18.07, Brian Brombacher wrote: Well, let’s say a Linter doesn’t exist and you can’t invest time to make one. Do you have a lower environment, mirror-exact ideally, to run tests on the pre-receive hook? It’s an interesting issue you’re trying to solve ;) I didn't say I can't

Re: pf.conf parser/lint

2020-09-04 Thread Tommy Nevtelen
On 04/09/2020 17.40, Brian Brombacher wrote: On Sep 4, 2020, at 11:28 AM, Brian Brombacher wrote: On Sep 4, 2020, at 10:51 AM, Tommy Nevtelen wrote: Hi there misc! Is there an external pfctl linter? we have bunch pf firwalls for which we generate rules but also write some manual ones

Re: pf.conf parser/lint

2020-09-04 Thread Tommy Nevtelen
On 04/09/2020 17.24, Brian Brombacher wrote: On Sep 4, 2020, at 10:51 AM, Tommy Nevtelen wrote: Hi there misc! Is there an external pfctl linter? we have bunch pf firwalls for which we generate rules but also write some manual ones that get merged. Would be nice if we could lint

pf.conf parser/lint

2020-09-04 Thread Tommy Nevtelen
Hi there misc! Is there an external pfctl linter? we have bunch pf firwalls for which we generate rules but also write some manual ones that get merged. Would be nice if we could lint the rules before committed to vcs.. (yes we test before they are applied on the machines as well but that is

Re: Setting permanent neighbor entry

2020-05-26 Thread Tommy Nevtelen
On 26/05/2020 15.34, Kanto Andria wrote: Hello, man ndp is probably another solution This is the correct way since it is v6 :) /T

Re: Setting permanent neighbor entry

2020-05-26 Thread Tommy Nevtelen
On 26/05/2020 11.38, Demi M. Obenour wrote: What is the OpenBSD equivalent to this Linux command? ip neighbor add 2001:db8::1 dev xnf0 lladdr fe:ff:ff:ff:ff:ff router nud permanent It doesn’t need to be a single command. If the existing userspace tooling does not support this, is it possible

Re: @OpenBSD_src Twitter 140char limit?

2020-05-11 Thread Tommy Nevtelen
On 11/05/2020 21.23, Stuart Henderson wrote: On 2020-05-11, Tommy Nevtelen wrote: On 10/05/2020 23.30, Isak Holmström wrote: I do believe it's using the "new" limit introduced 2017 :) my $default_maxlen = 280; I found this on GitHub. Though there a reference in the code to 140

Re: @OpenBSD_src Twitter 140char limit?

2020-05-11 Thread Tommy Nevtelen
On 10/05/2020 23.30, Isak Holmström wrote: > I do believe it's using the "new" limit introduced 2017 :) > > my $default_maxlen = 280; > > I found this on GitHub. Though there a reference in the code to 140. Yes.. I might not have counted the characters actually used and assumed it was 140 since

@OpenBSD_CVS Twitter 140char limit?

2020-05-09 Thread Tommy Nevtelen
Hi there! Does anybody on this list manage @OpenBSD_CVS? Would be nice to lift the message truncation from the old 140char limit to the new 280char limit. Super annoying when I can't read an interesting commit message that is just a little longer :) -- TN

Re: What's up with bluhms perf tests?

2019-12-10 Thread Tommy Nevtelen
On 10/12/2019 01.12, Todd C. Miller wrote: That was probably the following commit: https://www.mail-archive.com/source-changes@openbsd.org/msg111985.html which has since been reverted: https://www.mail-archive.com/source-changes@openbsd.org/msg112279.html Great! Thanks for the info, hope it

What's up with bluhms perf tests?

2019-12-09 Thread Tommy Nevtelen
Hi there misc I can see that there is a big drop in the throughput graphs, is something wrong with the data or was there a change that set performance = false? http://bluhm.genua.de/perform/results/perform.html -- Tommy

Re: fw_update long timeout, how to specify mirror

2019-10-23 Thread Tommy Nevtelen
On 22/10/2019 18.01, Theo de Raadt wrote: The firmwares are intentionally kept out of the standard download zone. I'll talk to some people and see if there is a way we can shift things around, to make slight improvements. However, I don't see how anything we do would fix your problem.

fw_update long timeout, how to specify mirror

2019-10-22 Thread Tommy Nevtelen
Hi! I have some systems without access to the Internets and with internal mirrors for packages and fw_update packages. But when openbsd does a sysupgrade or a new install it runs fw_update against firmware.openbsd.org. The problem here is that it will hang until the timeout is reached. #

Re: bgpd acting up, dropping connected/static network statements

2019-05-31 Thread Tommy Nevtelen
On 24/05/2019 12.25, open...@kene.nu wrote: Hello, I finally got to testing this and the bug seems to be fixed. What is the recommended way of implementing this fix into a critical production environment? Should we wait for a syspatch (will one be made available for this bug)? It is possible

Re: 40G ixl nics

2019-02-04 Thread Tommy Nevtelen
On 03/02/2019 19.09, Tony Sarendal wrote: Good evening, We inserted a 2x40G NIC into one of our old franken-pc's, and got this: ixl0 at pci2 dev 0 function 0 "Intel XL710 QSFP+" rev 0x02: port 0, FW 5.0.40043 API 1.5, msi, address 0c:c4:7a:5e:f9:c8 ixl0: unable to query phy types ixl1 at pci2

Re: Redistributing between bgpd and ospfd

2018-10-16 Thread Tommy Nevtelen
u do with it then? Could this be used for what this thread is talking about or is it totally off? -- Tommy Nevtelen

Re: Selling things through the mailing list allowed? I have compatible THIN CLIENTS for Firewall / Router appliance use Available

2018-09-01 Thread Tommy Nevtelen
On 2018-08-30 22:11, Jon Tabor wrote: > > > Yep, right there with ya. So, ah...what's everyone using for mail > filtering these days? Spamassassin? ClamAV? Something else entirely? > I tag my mail as spam with rspamd and then filter it with sieve in dovecot. Additionally I use a sieve

Re: isakmpd and iked on the same box

2018-08-31 Thread Tommy Nevtelen
On 2018-08-31 10:44, Daniel Polak wrote: Tommy Nevtelen wrote on 30-8-2018 23:13: We use isakmpd to interconnect 30ish routers and I would like to switch to iked, but since there is no support to run both at the same time it makes it quite hard to migrate slowly. Will basically need to do

Re: isakmpd and iked on the same box

2018-08-30 Thread Tommy Nevtelen
On 2018-08-30 22:06, Daniel Polak wrote: > On 30/08/2018 17:39, Philipp Buehler wrote: >> I was not following development too closely, but I think that on the >> kernel side >> things have not changed. Which means iked and isakmpd will happily >> "toe tap" >> on each others SADB in the kernel

Re: Flow Tools

2018-03-14 Thread Tommy Nevtelen
On 03/14/2018 10:06 AM, Gregory Edigarov wrote: > Sorry, if I hijack the thread, but what do you guys use for netflow > analysis? This looks quite interesting https://github.com/robcowart/elastiflow I have not tried it but would like to when time allows. -- Tommy Nevtelen

Re: Forum software

2017-10-24 Thread Tommy Nevtelen
l/awesome-selfhosted/blob/master/README.md#social-networks-and-forums It's a pretty nice repo with cool projects other than forums as well. -- Tommy Nevtelen

Re: Any update on the current status of BFD?

2017-08-24 Thread Tommy Nevtelen
need to fix a few bugs before we can consider enabling it. > Good to know. Thanks for the quick update Peter :) -- Tommy Nevtelen

Any update on the current status of BFD?

2017-08-24 Thread Tommy Nevtelen
a small update :) -- Tommy Nevtelen

Re: Issue with pxebooting on HP DL360 G7

2017-06-14 Thread Tommy Nevtelen
On 2017-06-10 05:25, Edgar Pettijohn wrote: > > > On 06/09/17 11:18, Tommy Nevtelen wrote: >> On 2017-06-09 17:46, Tommy Nevtelen wrote: >> >>> Hello misc! >>> >>> I'm chain-loading pxeboot symlinked to auto_install from ipxe. >> So I tried t

Re: Issue with pxebooting on HP DL360 G7

2017-06-09 Thread Tommy Nevtelen
On 2017-06-09 17:46, Tommy Nevtelen wrote: > Hello misc! > > I'm chain-loading pxeboot symlinked to auto_install from ipxe. So I tried to remove ipxe and specify pxeboot directly in the dhcp filename, that worked. But with that said I still don't understand why it works on a VM but

Issue with pxebooting on HP DL360 G7

2017-06-09 Thread Tommy Nevtelen
: px0 com0 pxe![2.1] pxeinfo: PXENV_GET_CACHED_INFO failed: 0x60 mem[578K 3444M 639M a20=on] disk: fd0 fd1 hd0+ Then it hangs there until I reboot the machine. HALP! ); -- Tommy Nevtelen