Re: OpenBSD 5.2 AutoFSCK at boot

2016-11-28 Thread Stuart Henderson
On 2016-11-24, Peter N. M. Hansteen wrote: > As far as I can remember, OpenBSD does indeed run a file system check at > boot if there are indications that the system did not shut down cleanly. > I don't think the system has changed very much in that respect at all > for a very

Re: OpenBSD 5.2 AutoFSCK at boot

2016-11-28 Thread Stuart Henderson
On 2016-11-24, Markus Hennecke wrote: > Am 24.11.2016 um 14:31 schrieb Luescher Claude: >> I have couple of OpenBSD 5.2 vms where I could use automatic file system >> repair at start. In most other OS'es I have running virtualized >> (windows, linux) it's not a

Re: OpenBSD's binutils

2016-11-28 Thread Jeremie Courreges-Anglas
Stuart Longland writes: > Hi all, > > Well, my experiments with loongson have proven fruitful, except for the > need of a web browser. Part of this is due to the webkit browsers > needing the libav gstreamer plug-in. > > Now, this fails to build because of the

relayd and SNI

2016-11-28 Thread Steve Shockley
I saw that httpd was updated to support SNI; is anything already in the works to add SNI to relayd? Thanks!

Re: Recommendation for firewall appliance running of and OpenBSD

2016-11-28 Thread Kenneth Gober
On Thu, Nov 24, 2016 at 3:15 PM, Tito Mari Francis H. Escaño wrote: > Hi everyone, > Can somebody please recommend me a firewall appliance that can run OpenBSD and > pf, and can be upgradeable to the latest version? It would be a great plus if > the appliance can also

acer swift 7, atheros qca6174 wireless and intel hd 615 video

2016-11-28 Thread Peter Miller
I'm running the nov 17th amd64 snapshot and the wifi device is not recognized, and I think the video is not recognized as well. I get errors when I try to start X. X works on CentOS using version 1.17.2, so I'm confident that it should run on OpenBSD just fine as X is at version 1.18.4 on this

Re: iked.conf - ikelifetime?

2016-11-28 Thread Mike Belopuhov
On 26 November 2016 at 03:29, wrote: > Hello: > > What are the units for "ikelifetime" in iked.conf? > > Per the man page, for "lifetime," it states: > lifetime time [bytes bytes] ... Several unit specifiers are recognized > (ignoring case): ‘m’ and ‘h’ for minutes and

Re: acer swift 7, atheros qca6174 wireless and intel hd 615 video

2016-11-28 Thread Stefan Sperling
On Mon, Nov 28, 2016 at 11:09:12AM -0600, Peter Miller wrote: > As for the wifi, I don't see support for the atheros 6174 chipest in > the man pages, and I don't know if anyone is working on it. As of now > it is "unknown product" in the dmesg. If it is not soldered in, I > would be willing to

Re: Fresh install ftp SSL handshake failed

2016-11-28 Thread Janne Johansson
Fix the clock so its not 7th of March? 2016-11-28 21:55 GMT+01:00 Oliver Marugg : > Hi > > I did a complete new install of OpenBSD 6.0-current today. > > After first boot I followed FAQ, sent dmesg, and read afterboot(8) but I > am running in some trouble downloading the

Fresh install ftp SSL handshake failed

2016-11-28 Thread Oliver Marugg
Hi I did a complete new install of OpenBSD 6.0-current today. After first boot I followed FAQ, sent dmesg, and read afterboot(8) but I am running in some trouble downloading the initial ports.tar.gz, packages install and DNS works fine. Just found out that Ntpd in /var/log/messages shows the

Re: Fresh install ftp SSL handshake failed

2016-11-28 Thread Oliver Marugg
Superb, many thanks. On 28 Nov 2016, at 22:02, Janne Johansson wrote: > Fix the clock so its not 7th of March? > > > 2016-11-28 21:55 GMT+01:00 Oliver Marugg : > >> Hi >> >> I did a complete new install of OpenBSD 6.0-current today. >> >> After first boot I followed FAQ, sent

Re: IPSec

2016-11-28 Thread Damian McGuckin
Hi Stuart, On Mon, 28 Nov 2016, Stuart Henderson wrote: ipsec.conf isn't required for this (or anything that you can do with ipsec.conf; though not all of it is documented in the isakmpd.conf manual, i.e. NAT-ID). With the kind help of 'mxb' with a Swedish email address, I learned that.

clang(1) not picking up headers from /usr/include

2016-11-28 Thread Benjamin Baier
Hello, what am I doing wrong? clang(1) from ports claims to look under /usr/include by default [0] but for me it doesn't work unless -I/usr/includes or C_INCLUDE_PATH=/usr/include is defined. After that I even hacked around in InitHeaderSearch.cpp[1] but no luck so far. Greetings Ben [0] $

Re: IPSec

2016-11-28 Thread Stuart Henderson
On 2016/11/29 06:49, Damian McGuckin wrote: > > Hi Stuart, > > On Mon, 28 Nov 2016, Stuart Henderson wrote: > > > ipsec.conf isn't required for this (or anything that you can do with > > ipsec.conf; though not all of it is documented in the isakmpd.conf > > manual, i.e. NAT-ID). > > With the

Re: network address in vm by kvm - default gw

2016-11-28 Thread Chris Cappuccio
Max Power [open...@cpnetserver.net] wrote: > Hi guys, > Forgive me, but I am not very expert of OpenBSD. > Guide, about Virtual Host, show examples for all > Operating System but not for OpenBSD. Stupid OVH! > This is the FreeBSD 8.0 way: > > Contents of the file : /etc/rc.conf >

OpenBGPD support for BGP-MPLS VPN with IPv6

2016-11-28 Thread Matt Kassawara
Hi, Do any plans exist to implement the BGP-MPLS IP VPN extension for IPv6 VPN (RFC 4659) in OpenBGPD? Thanks, Matt

Re: IPSec

2016-11-28 Thread mxb
> On 28 nov. 2016, at 20:49, Damian McGuckin wrote: > > While I am here, I still see on the passive IPSec Port 500 traffic > > got AES_CBC, expected 3DES_CBC Running 'isakmpd -L’ will produce more debug info. Later this can be processed by tcpdump: # tcpdump -n -vs

ftp(1) downloads a broken file; curl(1) doesn't

2016-11-28 Thread Moviuro
Hi, I noticed that ftp(1) acts strange when it downloads some specific files from Internet: $ ftp -o zeus.ftp 'https://zeustracker.abuse.ch/blocklist.php?download=badips' $ curl -o zeus.curl 'https://zeustracker.abuse.ch/blocklist.php?download=badips' $ diff zeus.ftp zeus.curl # should not

long fat pipe problem

2016-11-28 Thread gwes
I've got 2 6.0 systems: one in BOS one in LA. Transit time is about 100ms. There's adequate bandwidth end-to-end. I can only get 1.5 - 2.5 MB/sec due to the long fat pipe problem: the receiving system won't open the window large enough to let the sender put enough bytes in the pipe. It's not

openbsd -current: can't find firefox

2016-11-28 Thread jungle boogie
Hi All, I'm running the latest i386 snapshot: OpenBSD 6.0-current (GENERIC.MP) #0: Mon Nov 28 20:52:50 MST 2016 bu...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP cpu0: Intel(R) Core(TM)2 CPU T7200 @ 2.00GHz ("GenuineIntel" 686-class) 2 GHz cpu0:

Re: IPSec

2016-11-28 Thread Damian McGuckin
Hi Stuart, On Mon, 28 Nov 2016, Stuart Henderson wrote: For completeness of description, for the latter I use ike passive esp transport \ proto udp from egress to any port 1701 \ main auth "hmac-sha1" enc "3des" group modp1024 \ quick

Re: network address in vm by kvm

2016-11-28 Thread Stuart Henderson
On 2016-11-26, patric conant wrote: > On Sat, Nov 26, 2016 at 3:03 PM, Max Power wrote: > >> Hi guys, >> I need to configure my Virtual Host [OpenBSD 6.0 amd64] >> in the way [bottom: Linux example]: >> >> auto eth0 >> iface eth0 inet static

Re: OpenDKIM on stable 6.0

2016-11-28 Thread Stuart Henderson
On 2016-11-26, Paolo Aglialoro wrote: > Hello, > > I noticed some days ago the new package for opendkim emerged into -current > repo. > > Is there any way to run it on 6.0 stable? > What files/libraries/dependencies would I have to manually add? > > Thanks > > Don't try and

Re: ral(4) problems on current/i386 ALIX

2016-11-28 Thread Richard Procter
On 28/11/2016, at 4:25 AM, Jan Stary wrote: > [...] > What kind of wifi are people using > on the ALIX serving as an AP? I'm running an RT2860 via ral(4) on an Alix 2d2 -- I'm seeing about 1.1MB/s when transferring 47MB from it through a couple of walls, and with another network at -74dBm on the

Re: OpenBSD's binutils

2016-11-28 Thread Stuart Henderson
Not answering every point but: You are right, gcc 4.9 generates some code using opcodes that need newer gas. Try building the port with clang (it would also help the case where the port itself has asm needing a newer assembler; clang has an integrated assembler which generally has better opcode

Re: IPSec

2016-11-28 Thread Stuart Henderson
On 2016-11-24, Damian McGuckin wrote: > Can you mix the use of 'isakmpd.conf' and 'ipsec.conf'? > > I currently use the former for port 500 stuff. We use both predefined > network-to-networks IPSec links with PreShared Secrets and also dynamic, > i.e. negotiated,