ipsec.conf parsing

2014-03-19 Thread Zé Loff
As far as I can tell, if a commented line on ipsec.conf ends with \ then the following line will also be considered a comment (if the next line also ends with \ the commenting is propagated). For example #ike esp from A.A.A.A to C.C.C.C \ ike esp from A.A.A.A to B.B.B.B \ srcid

Re: ipsec.conf parsing

2014-03-19 Thread mathieu . blanc
On Wed, Mar 19, 2014 at 10:22:43AM +, Zé Loff wrote: As far as I can tell, if a commented line on ipsec.conf ends with \ then the following line will also be considered a comment (if the next line also ends with \ the commenting is propagated). For example #ike esp from A.A.A.A to

Re: A small package browser

2014-03-19 Thread Thomas Adam
On 19 March 2014 01:56, marst mario@videotron.ca wrote: Really, nothing out of the ordinary... Been working lately on a simple OpenBSD package browser. No extensive graphics, works from the terminal with navigation similar to vim. I do this for fun. I find it convenient for exploring

Re: OpenBSD email provider

2014-03-19 Thread Stuart Henderson
On 2014-03-18, Giancarlo Razzolini grazzol...@gmail.com wrote: But, with a very small ttl on the dns record (I use 60 seconds), this risk can be reduced. you have more trust in ISP DNS servers honouring TTLs than I do. if you can only get a dynamic IP

Re: ipsec.conf parsing

2014-03-19 Thread Stuart Henderson
On 2014-03-19, Zé Loff zel...@zeloff.org wrote: As far as I can tell, if a commented line on ipsec.conf ends with \ then the following line will also be considered a comment (if the next line also ends with \ the commenting is propagated). For example #ike esp from A.A.A.A to C.C.C.C \

Re: obsd pf

2014-03-19 Thread Stuart Henderson
On 2014-03-18, Marko Cupać marko.cu...@mimar.rs wrote: On Tue, 18 Mar 2014 01:15:16 + (UTC) Stuart Henderson s...@spacehopper.org wrote: The ruleset is now traversed in order, changes made in match rules are sticky and affect rules lower down in the ruleset. More predictable, no more oh

Re: ipsec.conf parsing

2014-03-19 Thread Jean-Philippe Ouellet
On 3/19/14 6:22 AM, Zé Loff wrote: As far as I can tell, if a commented line on ipsec.conf ends with \ then the following line will also be considered a comment (if the next line also ends with \ the commenting is propagated). For example #ike esp from A.A.A.A to C.C.C.C \ ike esp from

Setup a RAID

2014-03-19 Thread Matias Moreno Meringer
Hi! Have a 5.4 currently installed in sd0 and want to build a softraid1 to use the disk in conjunction with a secondary sd1. I know a way to build the raid at installation point, but not sure how to do it after the installation without reinstalling. Is possible? Thanks, Matias.-

Re: Setup a RAID

2014-03-19 Thread Nick Holland
On 03/19/14 09:30, Matias Moreno Meringer wrote: Hi! Have a 5.4 currently installed in sd0 and want to build a softraid1 to use the disk in conjunction with a secondary sd1. I know a way to build the raid at installation point, but not sure how to do it after the installation without

Re: Setup a RAID

2014-03-19 Thread Josh Grosse
On 2014-03-19 09:31, Matias Moreno Meringer wrote: Hi! Have a 5.4 currently installed in sd0 and want to build a softraid1 to use the disk in conjunction with a secondary sd1. I know a way to build the raid at installation point, but not sure how to do it after the installation without

Re: Setup a RAID

2014-03-19 Thread Matias Moreno Meringer
On Wed, Mar 19, 2014 at 10:48 AM, Josh Grosse j...@jggimi.homeip.netwrote: On 2014-03-19 09:31, Matias Moreno Meringer wrote: Hi! Have a 5.4 currently installed in sd0 and want to build a softraid1 to use the disk in conjunction with a secondary sd1. I know a way to build the raid at

Trouble with connect to www.aeroflot.ru

2014-03-19 Thread Leonov Aleksey
Hi folks, I can`t connect to www.aeroflot.ru from lynx on openbsd 5.4. I can connect from gentoo, windows. Anybody can connect to wwe.aeroflot.ru from openbsd 5.4? -- Aleksey Leonov

Re: Trouble with connect to www.aeroflot.ru

2014-03-19 Thread Marcus MERIGHI
gimliandcomp...@gmail.com (Leonov Aleksey), 2014.03.19 (Wed) 15:07 (CET): I can`t connect to www.aeroflot.ru from lynx on openbsd 5.4. I can connect from gentoo, windows. Anybody can connect to wwe.aeroflot.ru from openbsd 5.4? OpenBSD 5.5-beta (GENERIC.MP) #284: Mon Feb 3 07:57:32 MST 2014

Re: Trouble with connect to www.aeroflot.ru

2014-03-19 Thread Leonov Aleksey
On 19.03.2014 20:32, Marcus MERIGHI wrote: gimliandcomp...@gmail.com (Leonov Aleksey), 2014.03.19 (Wed) 15:07 (CET): I can`t connect to www.aeroflot.ru from lynx on openbsd 5.4. I can connect from gentoo, windows. Anybody can connect to wwe.aeroflot.ru from openbsd 5.4? OpenBSD 5.5-beta

softraid(4)/bioctl(8) vs. non-512-byte sectors disks

2014-03-19 Thread Marcus MERIGHI
Reference: ``Softraid 3TB Problems'' http://marc.info/?l=openbsd-miscm=136225193931620 Difference: My HDDs show up as 4096 bytes/sector in dmesg. Short: Are there any options for disks that come with 4096 bytes/sector to use with softraid(4)/bioctl(8)? Long: So I got these lovely large disks:

Re: Trouble with connect to www.aeroflot.ru

2014-03-19 Thread Shawn K. Quinn
On Wed, Mar 19, 2014, at 09:07 AM, Leonov Aleksey wrote: Hi folks, I can`t connect to www.aeroflot.ru from lynx on openbsd 5.4. I can connect from gentoo, windows. Anybody can connect to wwe.aeroflot.ru from openbsd 5.4? Right now according to http://isup.me/aeroflot.ru it's down for

Re: Trouble with connect to www.aeroflot.ru

2014-03-19 Thread Marcus MERIGHI
gimliandcomp...@gmail.com (Leonov Aleksey), 2014.03.19 (Wed) 16:18 (CET): On 19.03.2014 20:32, Marcus MERIGHI wrote: gimliandcomp...@gmail.com (Leonov Aleksey), 2014.03.19 (Wed) 15:07 (CET): I can`t connect to www.aeroflot.ru from lynx on openbsd 5.4. I can connect from gentoo, windows.

Re: Trouble with connect to www.aeroflot.ru

2014-03-19 Thread Kent Fritz
Odd. Just tried it. Works on Linux, doesn't on OpenBSD. Not related to user agent; it seems to not respond to SYN. Perhaps their running PF and filtering us!

Re: Trouble with connect to www.aeroflot.ru

2014-03-19 Thread Leonov Aleksey
On 19.03.2014 21:52, Marcus MERIGHI wrote: gimliandcomp...@gmail.com (Leonov Aleksey), 2014.03.19 (Wed) 16:18 (CET): On 19.03.2014 20:32, Marcus MERIGHI wrote: gimliandcomp...@gmail.com (Leonov Aleksey), 2014.03.19 (Wed) 15:07 (CET): I can`t connect to www.aeroflot.ru from lynx on openbsd

Re: Trouble with connect to www.aeroflot.ru

2014-03-19 Thread Mikkel C. Simonsen
Marcus MERIGHI wrote: gimliandcomp...@gmail.com (Leonov Aleksey), 2014.03.19 (Wed) 16:18 (CET): On 19.03.2014 20:32, Marcus MERIGHI wrote: gimliandcomp...@gmail.com (Leonov Aleksey), 2014.03.19 (Wed) 15:07 (CET): I can`t connect to www.aeroflot.ru from lynx on openbsd 5.4. I can connect from

Re: OpenBSD email provider

2014-03-19 Thread Giancarlo Razzolini
Em 19-03-2014 09:41, Stuart Henderson escreveu: you have more trust in ISP DNS servers honouring TTLs than I do. if you can only get a dynamic IP at home and would like to host mail there yourself, in a machine which only you have physical access to, etc. (i.e. do *not* want to keep your email

Re: softraid(4)/bioctl(8) vs. non-512-byte sectors disks

2014-03-19 Thread Kenneth Westerback
Alas, softraid only supports 512 byte block devices at the moment. Ken On Mar 19, 2014 11:36 AM, Marcus MERIGHI mcmer-open...@tor.at wrote: Reference: ``Softraid 3TB Problems'' http://marc.info/?l=openbsd-miscm=136225193931620 Difference: My HDDs show up as 4096 bytes/sector in dmesg.

Re: file system and memory limitation

2014-03-19 Thread Shane Holding
On 16/03/2014 4:24 AM, Friedrich Locke wrote: Hi folks, i wonder what are the limitations on main memory and file system sizes ! Thanks a lot. gustavo. How long is a piece of string?

npppd can't open /dev/pppx1

2014-03-19 Thread Paul B. Henson
I set up an L2TP VPN with npppd recently using pppx, and other than some routing issues with ospfd it works great. I'm trying to add a second VPN connection, but that doesn't seem to work using pppx. With this config: interface pppx0 address 10.128.120.1 ipcp IPCP_admin interface pppx1 address

ciss driver status

2014-03-19 Thread Boris Goldberg
Hello guys, It says in the man ciss: CAVEATS For purposes of status monitoring, the current code only supports one logical volume per controller. Is this still true? If I make more than one array with one controller and type bioctl ciss0 - what will it show me? -- Best regards,

Re: npppd can't open /dev/pppx1

2014-03-19 Thread Paul B. Henson
D'oh, I finally realized I needed to go to /dev and MAKEDEV pppx1 8-/. Now it's working fine. I had thought pppx was one of those magic clonable devices that you didn't need to explicitly create, I guess I was mistaken. When I was testing the vpn, there were pppx1 and pppx2 interfaces that showed

Unbound in base, yes, what about ldns?

2014-03-19 Thread Chris Smith
Great to see Unbound in base, thanks. But what about ldns? I still have that installed as a package - removed the unbound package as per the -current instructions, but shouldn't the ldns package package be removed as well as I believe unbound requires it and therefore it would have to be built by

Re: Unbound in base, yes, what about ldns?

2014-03-19 Thread Kenneth Westerback
On 19 March 2014 18:09, Chris Smith obsd_m...@chrissmith.org wrote: Great to see Unbound in base, thanks. But what about ldns? I still have that installed as a package - removed the unbound package as per the -current instructions, but shouldn't the ldns package package be removed as well as

PPTP after removing of userland ppp(8)

2014-03-19 Thread Атанас Владимиров
Hi, I was running PPTP client pptp-1.7.2p4 with userland ppp(8). It was a basic setup from pptp(8) manual page and specifically PPTP on a router example. What are my alternatives to run PPTP to connect to Microsoft VPN server? May I use ppp(4) and pppd(8) and if so can you point me to the right

Re: Unbound in base, yes, what about ldns?

2014-03-19 Thread Chris Smith
On Wed, Mar 19, 2014 at 6:12 PM, Kenneth Westerback kwesterb...@gmail.com wrote: The unbound in base has it's own cut down version of ldns. No need for the package. Can I just uninstall the package after the fact or do some files need to be replaced? Thanks, Chris

Re: Unbound in base, yes, what about ldns?

2014-03-19 Thread Атанас Владимиров
Hi, Sorry for Off-topic, but when you enable DNSSEC validation and fetch a root key with unbound-anchor(8) (needs root) the following error shows up in /var/log/messages: unbound: [0:0] error: could not open autotrust file for writing, /etc/root.key.29136-0: Permission denied May be this is

Re: PPTP after removing of userland ppp(8)

2014-03-19 Thread Stefan Sperling
On Thu, Mar 20, 2014 at 12:39:50AM +0200, Атанас Владимиров wrote: Hi, I was running PPTP client pptp-1.7.2p4 with userland ppp(8). It was a basic setup from pptp(8) manual page and specifically PPTP on a router example. What are my alternatives to run PPTP to connect to Microsoft VPN server?

Re: Unbound in base, yes, what about ldns?

2014-03-19 Thread Chris Smith
See the thread unbound dnssec revisited I started on 12/30/2013 for some hints. Looks like creating a new directory with the proper permissions is the best way to go. On Wed, Mar 19, 2014 at 7:01 PM, Атанас Владимиров don.na...@gmail.com wrote: Hi, Sorry for Off-topic, but when you enable

npppd with two pppx interfaces causes kernel panic

2014-03-19 Thread Paul B. Henson
After successfully setting up an L2TP VPN with npppd and pppx, I tried to add a second VPN subnet with a different authentication base. I was working remotely, and after starting npppd in debug mode: bash-4.2# npppd -d 2014-03-19 14:41:50:NOTICE: Starting npppd pid=32407 version=5.0.0 2014-03-19

Re: Trouble with connect to www.aeroflot.ru

2014-03-19 Thread Steve Shockley
On 3/19/2014 12:22 PM, Leonov Aleksey wrote: I think what they filtered traffic from non windows or linux machine. I think this is the case. I'm behind a transparent http proxy (Squid) on OpenBSD, and from Windows http://www.aeroflot.ru times out, and https://www.aeroflot.ru (which bypasses

Re: PPTP after removing of userland ppp(8)

2014-03-19 Thread YASUOKA Masahiko
On Thu, 20 Mar 2014 00:39:50 +0200 Атанас Владимиров don.na...@gmail.com wrote: I was running PPTP client pptp-1.7.2p4 with userland ppp(8). It was a basic setup from pptp(8) manual page and specifically PPTP on a router example. What are my alternatives to run PPTP to connect to Microsoft VPN

Re: npppd with two pppx interfaces causes kernel panic

2014-03-19 Thread YASUOKA Masahiko
On Wed, 19 Mar 2014 16:45:46 -0700 Paul B. Henson hen...@acm.org wrote: After successfully setting up an L2TP VPN with npppd and pppx, I tried to add a second VPN subnet with a different authentication base. I was working remotely, and after starting npppd in debug mode: pppx will be fixed.

Re: Trouble with connect to www.aeroflot.ru

2014-03-19 Thread Mikkel C. Simonsen
Claus Assmann wrote: On Wed, Mar 19, 2014, Steve Shockley wrote: On 3/19/2014 12:22 PM, Leonov Aleksey wrote: I think what they filtered traffic from non windows or linux machine. I think this is the case. I'm behind a transparent http proxy (Squid) on Just for the fun of it: it works

Re: npppd with two pppx interfaces causes kernel panic

2014-03-19 Thread Paul B. Henson
On Thu, Mar 20, 2014 at 10:22:51AM +0900, YASUOKA Masahiko wrote: pppx will be fixed. Great :). This is a known bug then? Should I just keep an eye on the changelog for mention of pppx changes to tell when it's safe to try again? You can use tun(4) instead if you want to use multiple

Re: npppd with two pppx interfaces causes kernel panic

2014-03-19 Thread YASUOKA Masahiko
On Wed, 19 Mar 2014 21:05:35 -0700 Paul B. Henson hen...@acm.org wrote: On Thu, Mar 20, 2014 at 10:22:51AM +0900, YASUOKA Masahiko wrote: pppx will be fixed. Great :). This is a known bug then? It's new for me. I had not even try MAKEDEV pppx1 yet. Should I just keep an eye on the