Connecting to a GRE Transparent Ethernet Bridging host

2016-09-13 Thread Russell Sutherland
Is it possible to use one of OpenBSD’s tunnelling interfaces (gre/gif/etherip) to connect to a remote host (Edgerouter Lite) which is using GRE in Transparent Ethernet (protocol type 0x6558) mode? Looking at the source code in /usr/src/sys/net there is a flag for this mode defined but I do not

Re: PPPoE (5.9 still): https gets stuck

2016-09-13 Thread Harald Dunkel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi Markus, On 09/13/16 13:07, Harald Dunkel wrote: > Hi Markus, > > On 09/13/2016 12:42 PM, Markus Hennecke wrote: >> >> Damn. Of course without this line it won't work: >> >> match out on $ext_if all scrub (max-mss 1440) >> > > I have > >

Testing the waters - BUG in Indianapolis, IN USA

2016-09-13 Thread Bryan C. Everly
All, If anyone is in the area and would be interested, please let me know through the form below: http://techpoint.org/2016/09/indianapolis-bsd-user-group/ Thanks, Bryan

Re: sockaddr_in initialization in ttcp (possibly other programs affected)

2016-09-13 Thread Héctor Luis Gimbatti
Hi, The main reason I've notified this ''bug'' to .misc is because other (important, maintained, in base? , etc) code may fail too. Cheers > -Original Message- > From: Jeremie Courreges-Anglas [mailto:j...@wxcvbn.org] > Sent: Monday, September 12, 2016 10:30 > To: Héctor Luis Gimbatti

Re: acpithinkpad(4): mute speaker on boot

2016-09-13 Thread Theo de Raadt
> Anton Lindqvist wrote: > > I'm trying to fix a minor annoyance on my x240: the speaker mute key > > LED-state is not respected at boot. Pressing the mute key will mute the > > speaker while the expected behavior is to unmute. The LED-state will > > remain out-of-sync until I run `mixerctl -t

Re: acpithinkpad(4): mute speaker on boot

2016-09-13 Thread Ted Unangst
Anton Lindqvist wrote: > I'm trying to fix a minor annoyance on my x240: the speaker mute key > LED-state is not respected at boot. Pressing the mute key will mute the > speaker while the expected behavior is to unmute. The LED-state will > remain out-of-sync until I run `mixerctl -t

Re: doas.conf, no persist option in 6.0 Release

2016-09-13 Thread bytevolcano
On Tue, 13 Sep 2016 10:28:56 -0400 Eike Lantzsch wrote: > On Dienstag, 13. September 2016 06:46:04 PYT jungle Boogie wrote: > > On 13 September 2016 at 05:55, Eike Lantzsch > > wrote: > > > but in man doas.conf of 6.0 Release it is not mentioned and using > > >

Re: OpenBSD 6.0 CDs arrived today

2016-09-13 Thread Ralph Siegler
On Wed, 07 Sep 2016 18:49:50 -0400, Kenneth Gober wrote: > Shipments of OpenBSD 6.0 CDs have started arriving, I'm in the USA, > New York area. > > -ken Hurray, mine finally arrived north of Chicago, IL USA.It went through UK post office Aug 31 so probably U.S. side delay. Must wipe a

Booting 6.0 on a Thinkpad Tablet 2, Almost

2016-09-13 Thread Lars Lehtonen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I have a Lenovo Thinkpad 2 tablet that I'm attempting to install OpenBSD on. It originally shipped with Windows 8. I've disabled Secure Boot in the BIOS, and the tablet makes it to the boot> prompt when started with a USB stick. The boot process

Re: Booting 6.0 on a Thinkpad Tablet 2, Almost

2016-09-13 Thread Edgar Pettijohn
On 16-09-13 18:59:11, Lars Lehtonen wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > I have a Lenovo Thinkpad 2 tablet that I'm attempting to install OpenBSD > on. It originally shipped with Windows 8. > > I've disabled Secure Boot in the BIOS, and the tablet makes it to the > boot>

Re: Booting 6.0 on a Thinkpad Tablet 2, Almost

2016-09-13 Thread Bryan Steele
On Tue, Sep 13, 2016 at 06:59:11PM -0700, Lars Lehtonen wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > I have a Lenovo Thinkpad 2 tablet that I'm attempting to install OpenBSD > on. It originally shipped with Windows 8. > > I've disabled Secure Boot in the BIOS, and the tablet

Re: doas.conf, no persist option in 6.0 Release

2016-09-13 Thread Eike Lantzsch
On Dienstag, 13. September 2016 06:46:04 PYT jungle Boogie wrote: > On 13 September 2016 at 05:55, Eike Lantzsch wrote: > > but in man doas.conf of 6.0 Release it is not mentioned and using that > > option rightly results in a syntax error if used. > > It's not in -release. > >

Re: IPv6 fragmentation woes

2016-09-13 Thread Fernando Gont
On 08/09/2016 07:42 AM, Laurent CARON wrote: > Hi, > > Does anybody have a clue about this issue ? Thanks Based on a quick look at what you sent, this is not what I would expect. > Am I mistaken on something, or is this behavior perfectly normal ? > > Please note # tracepath6 from the linux

PPPoE (5.9 still): https gets stuck

2016-09-13 Thread Harald Dunkel
Hi folks, I am using an openbsd (5.9) box as gateway/firewall to the internet. ISP is Deutsche Telekom. In between is a Vigor 130 VDSL2 modem, configured to PPPoE passthrough. The PPPoE connection is initiated on the openbsd box. Problem: https via the tunnel gets stuck for some sites, e.g.

Re: PPPoE (5.9 still): https gets stuck

2016-09-13 Thread Harald Dunkel
Hi Peter, On 09/13/2016 12:13 PM, Peter J. Philipp wrote: > > can try this: > > T-Online uses vlan tag 7, IP-TV uses vlan tag 8. So it depends on your > plan I guess? I'd appreciate if someone told me if this information is > outdated but I'm probably going to have to ask in february again >

Re: PPPoE (5.9 still): https gets stuck

2016-09-13 Thread Markus Hennecke
Am 13.09.2016 um 12:38 schrieb Markus Hennecke: Am 13.09.2016 um 11:51 schrieb Harald Dunkel: Hi folks, I am using an openbsd (5.9) box as gateway/firewall to the internet. ISP is Deutsche Telekom. In between is a Vigor 130 VDSL2 modem, configured to PPPoE passthrough. The PPPoE connection is

Re: PPPoE (5.9 still): https gets stuck

2016-09-13 Thread Harald Dunkel
Hi Daniel, On 09/13/2016 12:00 PM, Daniel Gillen wrote: > > I had a similar problem. In my case it had to do with Path MTU issues. > > This site f.ex.: http://test-ipv6.com/ will check for that. > > The solution for me was to switch to "jumbo" frames below the pppoe > device (1508 bytes if I

Re: Routing 10-40 Mpps on OpenBSD

2016-09-13 Thread Martin Pieuchot
On 11/09/16(Sun) 18:04, K K wrote: > [...] > > There is a lot of ongoing work in this area, OpenBSD doesn't claim to > > be the performance leader today. > > What is the take of OpenBSD developers on this? > Are they any plans? > > Many options seems available, but I have no idea how they could

Re: PPPoE (5.9 still): https gets stuck

2016-09-13 Thread Peter J. Philipp
Hello Harri, This interests me because I'm switching to Deutsche Telekom in february 2017. I did research back in march or april of 2016 on how to connect to Telekom with an allnet vdsl modem and I came across hints that Telekom uses vlan tagging. I made notes but I don't know how updated they

Re: PPPoE (5.9 still): https gets stuck

2016-09-13 Thread Markus Hennecke
Am 13.09.2016 um 11:51 schrieb Harald Dunkel: Hi folks, I am using an openbsd (5.9) box as gateway/firewall to the internet. ISP is Deutsche Telekom. In between is a Vigor 130 VDSL2 modem, configured to PPPoE passthrough. The PPPoE connection is initiated on the openbsd box. Problem: https via

Re: spamd question

2016-09-13 Thread Kasper Haitsma
Happy days, spamd-sync is working. - pf.conf still needs rdr-to instead of divert-to - rc.conf.local is picky on the quotes for -n and sequence of -Y and -y (no sync proc in ps list) - the 5.0 machines are not using spamd.key :( I'm glad it is all well documented Date: Fri, 9 Sep 2016 12:14:18

Re: PPPoE (5.9 still): https gets stuck

2016-09-13 Thread Daniel Gillen
On 13/09/2016 11:51, Harald Dunkel wrote: > Hi folks, > > I am using an openbsd (5.9) box as gateway/firewall to the > internet. ISP is Deutsche Telekom. In between is a Vigor 130 > VDSL2 modem, configured to PPPoE passthrough. The PPPoE > connection is initiated on the openbsd box. > > Problem:

Re: PPPoE (5.9 still): https gets stuck

2016-09-13 Thread Harald Dunkel
Hi Markus, On 09/13/2016 12:42 PM, Markus Hennecke wrote: >> >> I use the same VDSL modem with Deutsche Telekom and can reach >> https://telekom.de/ >> The only MTU related setting in pf.conf seems to be this: >> >> ext_if = pppoe0 >> match in on $ext_if all scrub (no-df max-mss 1440) >> >> It is

Re: httpd: certificate files with prepended intermediates

2016-09-13 Thread Philip Guenther
On Mon, Sep 12, 2016 at 11:16 PM, Ian Sutton wrote: > httpd currently fails to serve over TLS if the certificate file > specified in httpd.conf contains an intermediate certificate ahead of > the site's certificate. httpd still starts with no error indication > (with rcctl) but `httpd

httpd: certificate files with prepended intermediates

2016-09-13 Thread Ian Sutton
httpd currently fails to serve over TLS if the certificate file specified in httpd.conf contains an intermediate certificate ahead of the site's certificate. httpd still starts with no error indication (with rcctl) but `httpd -d` shows: server_tls_init: failed to configure tls - failed to load

tip for inter-KVM VMs traffic filtering with PF running on separate box

2016-09-13 Thread Jiri B
Hi, I'm curious how to filter inter-VMs (running on Linux KVM host) traffic on a remote bare-metal host running OpenBSD and PF. Any tip? So, there would be a Linux KVM host running various VMs and separate OpenBSD box and I'd like to achieve that all traffic betweens those VMs running on that

Re: PPPoE (5.9 still): https gets stuck

2016-09-13 Thread Stuart Henderson
On 2016-09-13, Harald Dunkel wrote: > Hi Daniel, > > On 09/13/2016 12:00 PM, Daniel Gillen wrote: >> >> I had a similar problem. In my case it had to do with Path MTU issues. >> >> This site f.ex.: http://test-ipv6.com/ will check for that. >> >> The solution for me

acpithinkpad(4): mute speaker on boot

2016-09-13 Thread Anton Lindqvist
I'm trying to fix a minor annoyance on my x240: the speaker mute key LED-state is not respected at boot. Pressing the mute key will mute the speaker while the expected behavior is to unmute. The LED-state will remain out-of-sync until I run `mixerctl -t outputs.master.mute`. I've managed to

Re: doas.conf, no persist option in 6.0 Release

2016-09-13 Thread jungle Boogie
On 13 September 2016 at 05:55, Eike Lantzsch wrote: > but in man doas.conf of 6.0 Release it is not mentioned and using that option > rightly results in a syntax error if used. It's not in -release. If you take a look here:

Re: UPS, Network UPS Tools and UPD(4)

2016-09-13 Thread Stuart Henderson
On 2016-09-12, Lawrence Wieser wrote: > Todd/Stuart, thanks for the responses. Permissions set correctly on > /dev/usb1 -- the device the UPS is connected to. And I had been through > the package readme. A couple of times! > > As is often the case I was making this

Re: PPPoE (5.9 still): https gets stuck

2016-09-13 Thread Stuart Henderson
On 2016-09-13, Harald Dunkel wrote: > Hi folks, > > I am using an openbsd (5.9) box as gateway/firewall to the > internet. ISP is Deutsche Telekom. In between is a Vigor 130 > VDSL2 modem, configured to PPPoE passthrough. The PPPoE > connection is initiated on the openbsd

Re: Dell Latitude E5570 on current/amd64

2016-09-13 Thread Jan Stary
On Aug 09 21:10:52, mlar...@azathoth.net wrote: > On Tue, Aug 09, 2016 at 07:43:38PM +0200, Jan Stary wrote: > > This is Dell Latitude E5570 running current (full dmesg below). > > Basically works, but I experience problems with resuming the video. > > > > You have Skylake video which does not

doas.conf, no persist option in 6.0 Release

2016-09-13 Thread Eike Lantzsch
Hi to all, (Running 6.0 Release) On http://www.tedunangst.com/flak/post/doas-mastery the "persist" option is mentioned: "By adding the persist keyword, doas will remember that the user authenticated previously and not require further confirmation for a timeout of five minutes. permit persist

Re: PPPoE (5.9 still): https gets stuck

2016-09-13 Thread Kapfhammer, Stefan
Hello Harald, use the setup from there: http://www.un.geeig.net/openbsd-vdsl.html ‎if you don't have IPTV, leave everything after 'ping' probe and reboot out. I didn't use the 5 sysctl settings. Update ALLNET Bridge to at least fw c46a, reboot the device and reset to factory defaults. Don't

Re: IPv6 fragmentation woes

2016-09-13 Thread Stuart Henderson
On 2016-09-13, Fernando Gont wrote: > On 08/09/2016 07:42 AM, Laurent CARON wrote: >> Hi, >> >> Does anybody have a clue about this issue ? Thanks > > Based on a quick look at what you sent, this is not what I would expect. > > >> Am I mistaken on something, or is this

Re: httpd: certificate files with prepended intermediates

2016-09-13 Thread Ian Sutton
On Tue, Sep 13, 2016 at 12:05:53AM -0700, Philip Guenther wrote: > See, here's where you're taking a wrong turn that I should have caught > earlier: your first post should answer this question: > What problem are you trying to solve? > > httpd may be able to do what you want *already*,

Re: httpd: certificate files with prepended intermediates

2016-09-13 Thread Ian Sutton
On Tue, Sep 13, 2016 at 09:50:43AM +0200, Robert Klein wrote: > Did you try to /append/ the intermediate certificate(s) to the server > certificate? That worked for me on OpenBSD 6.0's httpd. Yes. Uncanny timing on your mail -- I just got it to work. httpd(8) needs the intermediate certificate

Re: httpd: certificate files with prepended intermediates

2016-09-13 Thread Robert Klein
On Tue, 13 Sep 2016 03:15:18 -0400 Ian Sutton wrote: > On Tue, Sep 13, 2016 at 12:05:53AM -0700, Philip Guenther wrote: > > See, here's where you're taking a wrong turn that I should have > > caught earlier: your first post should answer this question: > > What problem are

Re: httpd: certificate files with prepended intermediates

2016-09-13 Thread Otto Moerbeek
On Tue, Sep 13, 2016 at 03:57:33AM -0400, Ian Sutton wrote: > On Tue, Sep 13, 2016 at 09:50:43AM +0200, Robert Klein wrote: > > Did you try to /append/ the intermediate certificate(s) to the server > > certificate? That worked for me on OpenBSD 6.0's httpd. > > Yes. > > Uncanny timing on your