Re: simple way to block one word domains?

2014-12-10 Thread David Dahlberg
Am Dienstag, den 09.12.2014, 11:01 -0500 schrieb Ted Unangst: Curious if anyone knows a simple way to prevent resolution of one word hostnames. Maybe I just think to simple here, but how about just switching on DNSSEC (auto-trust-anchor-file in unbound.conf)? David -- David Dahlberg

Re: simple way to block one word domains?

2014-12-10 Thread Stuart Henderson
On 2014-12-09, Joshua Smith juice...@gmail.com wrote: Does ndots:0 in your resolv.conf not achieve what you want? That's about the reverse of what's wanted, ndots sets the number of dots when it should always do an absolute query and avoid using search domains. Ted is asking for a way to never

Re: INVALID ROOT NODE

2014-12-10 Thread Stuart Henderson
On 2014-12-09, Philip Guenther guent...@gmail.com wrote: On Sun, Nov 30, 2014 at 2:48 AM, Max Power open...@cpnetserver.net wrote: I have a CRYPTO - RAID 1 softraid device /dev/sd4a [3TB OpenBSD 5.6/amd64] on which I have about 1,400,000 files and I've never had problems reading or writing.

Traffic shaping on small network.

2014-12-10 Thread Paco Esteban
Hi, I've an ALIX board running 5.6-stable acting as a router/firewall on a small network. It does its job perfectly and it's easy to manage. So thanks to all devs for that. Some time ago I played a bit with traffic shaping on this box, but did not have the time to test it properly and left that

Re: Traffic shaping on small network.

2014-12-10 Thread Daniel Melameth
On Wed, Dec 10, 2014 at 4:30 AM, Paco Esteban p...@onna.be wrote: The box has an vr(4) interface connected to a ADSL modem that provides roughly 14Mbps/910Kbps (down/up) thought pppoe. I've set up some queues on pppoe0 interface (I use $gw_if in rules). There are also basically 3 subnets

Re: USB printer not working with CUPS 2.0.1 (in -current)

2014-12-10 Thread Raf
Hi Alessandro, On Mon, Dec 08, 2014 at 11:45:43AM EST, Alessandro DE LAURENZIS wrote: Laptop's USB ports are 2.0; I do not know if there could be an impact of the xhci driver anyway, but how could I check? Any chances to switch off xhci and revert to uhci/ehci? Sure there is: #xhci* at

Re: Packet Filter router i368 vs 64bit

2014-12-10 Thread Darren Tucker
On Sat, Dec 6, 2014 at 9:25 AM, Stuart Henderson s...@spacehopper.org wrote: Linux developers were seeing higher throughput (though obviously higher cpu usage) when offload was disabled. Apparently the checksum offload can't pipeline. I'm not sure if vlan hw tagging was also implicated. IIRC

Remember to update /etc/machine-id

2014-12-10 Thread Anthony Campbell
Whenever I upgrade to a new snapshot I receive these messages: Remember to update /var/db/dbus/machine-id Remember to update /etc/machine-id I don't know how to do this and I couldn't find much about machine-id on the net and the OBSD faq doesn't mention it. There is a discussion

Re: Remember to update /etc/machine-id

2014-12-10 Thread Antoine Jacoutot
On Wed, Dec 10, 2014 at 02:02:52PM +, Anthony Campbell wrote: Whenever I upgrade to a new snapshot I receive these messages: Remember to update /var/db/dbus/machine-id Remember to update /etc/machine-id It's just a generic pkg_add warning for @extra files IIRC. You can ignore

Re: Remember to update /etc/machine-id

2014-12-10 Thread Josh Grosse
On 2014-12-10 09:02, Anthony Campbell wrote: Whenever I upgrade to a new snapshot I receive these messages: Remember to update /var/db/dbus/machine-id Remember to update /etc/machine-id I don't know how to do this and I couldn't find much about machine-id on the net and the

Re: Traffic shaping on small network.

2014-12-10 Thread Paco Esteban
On Wed, 10 Dec 2014, Daniel Melameth wrote: On Wed, Dec 10, 2014 at 4:30 AM, Paco Esteban p...@onna.be wrote: Basically I want google hangouts traffic to be priorized as much as possible, then DNS resolutions. Torrent traffic comming from a specific subnet should work, but at low prio and

Re: Traffic shaping on small network.

2014-12-10 Thread Paco Esteban
On Wed, 10 Dec 2014, Paco Esteban wrote: Set a max on your root queue. Ok, I'll try. But, again, it is confusing how some examples on both pf.conf(5) and The Book of PF are written. Ok, that was it. I needed to set the max on root queue. Now the numbers match the queue definitions. I've

Re: Remember to update /etc/machine-id

2014-12-10 Thread Anthony Campbell
On 10 Dec 2014, Josh Grosse wrote: On 2014-12-10 09:02, Anthony Campbell wrote: Whenever I upgrade to a new snapshot I receive these messages: Remember to update /var/db/dbus/machine-id Remember to update /etc/machine-id I don't know how to do this and I couldn't find much about

Re: Hide VM data from customer

2014-12-10 Thread Nathan Wheeler
Eric, thats an interesting way to do it. Though I think it would take more changes in the system than we'd like to implement. I was actually able to get full disk encryption to work without entering the passphrase. I edited softraid.c

Re: Hide VM data from customer

2014-12-10 Thread trondd
What about using a kay partition local to the VM disk http://marc.info/?l=openbsd-miscm=141435482820277w=2 You'd be maintaining code either way, though. Or add an additional disk to the VM that is the keydisk. Tim.

Filter by originating IP on relayd

2014-12-10 Thread Felipe Brant Scarel (Mirante)
Hello all, First of all, I'd like to thank Reyk, Pierre-Yves and OpenBSD for this fantastic piece of software, alongside pf. SSL inspection was a total breeze, and my current test installation is working perfectly. I've configured relayd to act as a forward proxy for basic URL filtering using

Re: Hide VM data from customer

2014-12-10 Thread Nathan Wheeler
Tim, I didn't even think about just using another disk. That's the simpler solution by far, but does come with some drawbacks. A very small partition or disk by itself is pretty conspicuous, and wouldn't be very hard to figure out what its for. It also does make our install a bit more complex. We

AMD64 packages

2014-12-10 Thread Stan Gammons
When will new packages be built for AMD64? I'm getting library errors with the latest snapshot and the current packages. Stan

wacom tablets

2014-12-10 Thread Joel Rees
Found an old post indicating that wacom tablets are functional: http://marc.info/?l=openbsd-miscm=130458853424142w=2 Wondering if they (still?) require configuration sections in xorg.conf , and, if so, where. My ancient ET-0405-U isn't automatically found. I tried just pasting Stuart's

Re: wacom tablets

2014-12-10 Thread Joel Rees
Followup: On Thu, Dec 11, 2014 at 11:03 AM, Joel Rees joel.r...@gmail.com wrote: Found an old post indicating that wacom tablets are functional: http://marc.info/?l=openbsd-miscm=130458853424142w=2 Wondering if they (still?) require configuration sections in xorg.conf , and, if so, where.

Re: AMD64 packages

2014-12-10 Thread STeve Andre'
On 12/10/14 20:51, Stan Gammons wrote: When will new packages be built for AMD64? I'm getting library errors with the latest snapshot and the current packages. Stan They come out frequently, but not on a set schedule. Since the last set came out on the 6th, I would expect the next set in

Re: AMD64 packages

2014-12-10 Thread Stan Gammons
On Dec 10, 2014 10:03 PM, STeve Andre' and...@msu.edu wrote: On 12/10/14 20:51, Stan Gammons wrote: When will new packages be built for AMD64? I'm getting library errors with the latest snapshot and the current packages. Stan They come out frequently, but not on a set schedule. Since

Missing libcanberra for Firefox on current

2014-12-10 Thread bodie
Hi, starting Firefox result in: $ firefox Gtk-Message: Failed to load module canberra-gtk-module there are 3 versions available on mirror: $ pkg_info -Q canberra libcanberra-0.30p1 libcanberra-gtk-0.30p1 libcanberra-gtk3-0.30p1 $ but no one of them is installed: $ pkg_info | grep -i

Re: Missing libcanberra for Firefox on current

2014-12-10 Thread Antoine Jacoutot
On Thu, Dec 11, 2014 at 07:03:27AM +0100, bodie wrote: Hi, starting Firefox result in: $ firefox Gtk-Message: Failed to load module canberra-gtk-module there are 3 versions available on mirror: $ pkg_info -Q canberra libcanberra-0.30p1 libcanberra-gtk-0.30p1

Re: AMD64 packages

2014-12-10 Thread Liviu Daia
On 10 December 2014, Stan Gammons sg063...@gmail.com wrote: When will new packages be built for AMD64? I'm getting library errors with the latest snapshot and the current packages. There are bigger problems with the latest snapshot: $ ldd /usr/sbin/unbound

Re: AMD64 packages

2014-12-10 Thread Theo de Raadt
Look, this is rather simple. If you don't understand that snapshots get built, that libraries crank, that there are PEOPLE building this, that the data takes time to get to the mirrors, and that this is a non-static situation, that small catch-up syncronization errors are made, that they get

Re: AMD64 packages

2014-12-10 Thread Liviu Daia
On 11 December 2014, Theo de Raadt dera...@cvs.openbsd.org wrote: On 10 December 2014, Stan Gammons sg063...@gmail.com wrote: When will new packages be built for AMD64? I'm getting library errors with the latest snapshot and the current packages. There are bigger problems with