Re: Playstations and PF de-fragmentation

2017-05-03 Thread Maxim Bourmistrov
Thanks for sharing. I’ll re-use this at home. Br > 1 maj 2017 kl. 01:43 skrev Kevin Chadwick : > > > I find that to prevent connection timeouts on playstations, the > following is required. Hopefully they will fix their packet AND > connection handling one day. > > match

Re: 6.1 syspatch installed SP kernel on MP system

2017-05-03 Thread Antoine Jacoutot
On Tue, May 02, 2017 at 08:00:15PM -0500, Aaron Riekenberg wrote: > Have a 6.1 amd64 MP system running the generic MP kernel from the > installation. MP was automatically chosen by the installer - this is an > Intel Atom 330 dual core box. > > Ran syspatch today which installed 4 new patches: >

Re: 6.1 syspatch installed SP kernel on MP system

2017-05-03 Thread Remco
Antoine, I noticed "/obsd" on my system. Does it make sense to handle this as "previously installed kernel" as part of a kernel update ? AFAICT this is how the manual procedure works as well. Regards, Remco

Re: 6.1 syspatch installed SP kernel on MP system

2017-05-03 Thread Theo de Raadt
> Seems like syspatch should install new /bsd.sp and /bsd.mp and then link > /bsd to the correct one based on whether sp or mp kernel is running. This > would be consistent with the installer. You are pretty sure of yourself, but that isn't what the installer does. It does not "link". You can go

Re: syspatch dhcpd

2017-05-03 Thread Renaud Allard
On 03/05/17 16:52, Christer Solskogen wrote: On May 3, 2017 15:34, "Renaud Allard" > wrote: Hello, Since I installed all the new patches with syspatch I get this in the logs: May 3 15:30:22 isildur dhcpd[79314]: pf pipe closed

Re: syspatch dhcpd

2017-05-03 Thread Christer Solskogen
On May 3, 2017 15:34, "Renaud Allard" wrote: Hello, Since I installed all the new patches with syspatch I get this in the logs: May 3 15:30:22 isildur dhcpd[79314]: pf pipe closed May 3 15:30:22 isildur dhcpd[79314]: pf pipe error: Broken pipe May 3 15:30:22 isildur

Re: syspatch dhcpd

2017-05-03 Thread Ted Unangst
Renaud Allard wrote: > I did not reboot directly, I first tried a "ktrace dhcpd" which > instantly lead to a kernel panic. After the mandatory reboot, everything well that's somewhat disturbing.

Re: 6.1 syspatch installed SP kernel on MP system

2017-05-03 Thread Marco Bonetti
- On May 3, 2017, at 7:16 AM, Antoine Jacoutot ajacou...@bsdfrog.org wrote: > On Tue, May 02, 2017 at 08:00:15PM -0500, Aaron Riekenberg wrote: >> Have a 6.1 amd64 MP system running the generic MP kernel from the >> installation. MP was automatically chosen by the installer - this is an >>

Re: 6.1 syspatch installed SP kernel on MP system

2017-05-03 Thread Aaron Riekenberg
Thanks. Seems like syspatch should install new /bsd.sp and /bsd.mp and then link /bsd to the correct one based on whether sp or mp kernel is running. This would be consistent with the installer. In 002 and 004 syspatch /bsd is updated with sp kernel, /bsd.mp is updated with mp kernel, and

Re: iwm0 problems

2017-05-03 Thread Stefan Sperling
On Tue, May 02, 2017 at 10:13:01AM +0200, Stefan Sperling wrote: > Thank you all for the additional reports! So there is indeed a regression > in 6.1 which is causing this problem. > > I will try to find a 3165 device to play with. Thanks to benno@ I got my hands on a machine with a 3165 device.

Re: 6.1 syspatch installed SP kernel on MP system

2017-05-03 Thread Antoine Jacoutot
On Wed, May 03, 2017 at 03:23:10PM +0200, Marco Bonetti wrote: > - On May 3, 2017, at 7:16 AM, Antoine Jacoutot ajacou...@bsdfrog.org > wrote: > > > On Tue, May 02, 2017 at 08:00:15PM -0500, Aaron Riekenberg wrote: > >> Have a 6.1 amd64 MP system running the generic MP kernel from the > >>

syspatch dhcpd

2017-05-03 Thread Renaud Allard
Hello, Since I installed all the new patches with syspatch I get this in the logs: May 3 15:30:22 isildur dhcpd[79314]: pf pipe closed May 3 15:30:22 isildur dhcpd[79314]: pf pipe error: Broken pipe May 3 15:30:22 isildur dhcpd[11508]: pf pipe error: Broken pipe May 3 15:30:22 isildur

Re: syspatch on diskless fails (stat -qf %Sd / issue)

2017-05-03 Thread Theo de Raadt
> After a bit of investigation, I found that it was becasuse the unpriv > shell function generated an error upon invoking su: > > su: approval failure: Undefined error: 0 > > Is there no way to run syspatch in a chroot either? No. And that's just plain crazy.

Re: syspatch on diskless fails (stat -qf %Sd / issue)

2017-05-03 Thread Andreas Kusalananda Kähäri
On Wed, May 03, 2017 at 11:41:27AM -0600, Theo de Raadt wrote: > > After a bit of investigation, I found that it was becasuse the unpriv > > shell function generated an error upon invoking su: > > > > su: approval failure: Undefined error: 0 > > > > Is there no way to run syspatch in a chroot

Re: syspatch on diskless fails (stat -qf %Sd / issue)

2017-05-03 Thread Andreas Kusalananda Kähäri
On Wed, May 03, 2017 at 11:54:13AM +0200, Antoine Jacoutot wrote: > On Wed, May 03, 2017 at 11:39:48AM +0200, Andreas Kusalananda Kähäri wrote: > > Hi, > > > > syspatch seems to work fine for keeping my ordinary server and router on > > -stable, thanks! > > > > However, on my diskless

Pf with secondary DNS resolution

2017-05-03 Thread Luke Small
Is it worthwhile to set up a hook for pf to load rules that have URLs after the network services that can resolve them come into effect?

Re: syspatch on diskless fails (stat -qf %Sd / issue)

2017-05-03 Thread Ted Unangst
Andreas KusalanandaKähäri wrote: > I'll try copying from an existing installation, and if that proves to be > too problematic, I guess I just have to check out the OPENBSD_6_1 branch > and build a new release (which I really had hoped I would not have to > do). There's nothing magic about the

Re: Pf with secondary DNS resolution

2017-05-03 Thread Peter N. M. Hansteen
On 05/03/17 22:16, Luke Small wrote: > Is it worthwhile to set up a hook for pf to load rules that have URLs after > the network services that can resolve them come into effect? This sounds like you have a pf.conf that contains host names, and for some reason you are not sure that those names

Re: syspatch on diskless fails (stat -qf %Sd / issue)

2017-05-03 Thread Andreas Kusalananda Kähäri
On Wed, May 03, 2017 at 03:47:00PM -0400, Ted Unangst wrote: > Andreas KusalanandaKähäri wrote: > > I'll try copying from an existing installation, and if that proves to be > > too problematic, I guess I just have to check out the OPENBSD_6_1 branch > > and build a new release (which I really had

Official OpenBSD 6.1 CD !

2017-05-03 Thread Bob Beck
So. There *Is* an official OpenBSD 6.1 CD Just One. If you are interested, please bid on ebay : http://www.ebay.com/itm/The-only-Official-OpenBSD-6-1-CD-set-to-be-made-For-auction-for-the-project-/252910718452?hash=item3ae2a74df4:g:SJQAAOSwrhBZBqkd (It's a pretty cool little CD set!)

Re: Official OpenBSD 6.1 CD !

2017-05-03 Thread Erling Westenvik
On Wed, May 03, 2017 at 11:48:42PM +0200, Sterling Archer wrote: > On Wed, May 3, 2017 at 10:33 PM, Bob Beck wrote: > > > So. There *Is* an official OpenBSD 6.1 CD > > > > Just One. > > > > If you are interested, please bid on ebay : > > > >

Re: Pf with secondary DNS resolution

2017-05-03 Thread Luke Small
Four words Peter..."dynamic IP address". I'm sure that there are folks that ssh into machines that are on a dynamic IP address that don't have a modem on a power backup, or even possibly on an ISP that may down, possibly when they are out of town. I don't know if it is possible or already done,

Re: Official OpenBSD 6.1 CD !

2017-05-03 Thread Sterling Archer
On Wed, May 3, 2017 at 10:33 PM, Bob Beck wrote: > So. There *Is* an official OpenBSD 6.1 CD > > Just One. > > If you are interested, please bid on ebay : > > http://www.ebay.com/itm/The-only-Official-OpenBSD-6-1-CD- > set-to-be-made-For-auction-for-the-project-/252910718452?

Pf with secondary DNS resolution

2017-05-03 Thread Luke Small
Four words Peter..."dynamic IP address". I'm sure that there are folks that ssh into machines that are on a dynamic IP address that don't have a modem on a power backup, or even possibly on an ISP that may down, possibly when they are out of town. I don't know if it is possible or already done,

Multiple pppoe(4) interfaces

2017-05-03 Thread Steve
Hello, In 5.7 this used to work fine with ifstated monitoring for outage and rerouting appropriatelyIn either 5.8 or 5.9 this seems to have stopped working.With both interfaces configured only one interface will ever become active. I am unable to test with 6.0 or 6.1 at the moment. Is anyone

Re: Playstations and PF de-fragmentation

2017-05-03 Thread Kevin Chadwick
On Wed, 3 May 2017 08:02:10 +0200 > Thanks for sharing. > I’ll re-use this at home. > > Br > > > 1 maj 2017 kl. 01:43 skrev Kevin Chadwick : > > > > > > I find that to prevent connection timeouts on playstations, the > > following is required. Hopefully they will fix

syspatch on diskless fails (stat -qf %Sd / issue)

2017-05-03 Thread Andreas Kusalananda Kähäri
Hi, syspatch seems to work fine for keeping my ordinary server and router on -stable, thanks! However, on my diskless workstation it doesn't work so well: Get/Verify syspatch61-001_dhcpd.tgz 100% |*| 71733 00:00 Installing patch 001_dhcpd /usr/sbin/syspatch: ??=1147776:

Re: syspatch on diskless fails (stat -qf %Sd / issue)

2017-05-03 Thread Antoine Jacoutot
On Wed, May 03, 2017 at 11:39:48AM +0200, Andreas Kusalananda Kähäri wrote: > Hi, > > syspatch seems to work fine for keeping my ordinary server and router on > -stable, thanks! > > However, on my diskless workstation it doesn't work so well: > > Get/Verify syspatch61-001_dhcpd.tgz 100%

openssl/libressl ocsp error in 6.1 stable

2017-05-03 Thread Renaud Allard
Hello, I noticed in my logs things like this. May 1 03:00:02 isildur openssl: vfprintf %s NULL in "%s %2d %02d:%02d:%02d%.*s %d%s" It comes down to this command to fetch ocsp response: openssl ocsp -respout ocsp.der -no_nonce -issuer chain.pem -cert cert.pem -url

Re: openssl/libressl ocsp error in 6.1 stable

2017-05-03 Thread Theo de Raadt
> I noticed in my logs things like this. > May 1 03:00:02 isildur openssl: vfprintf %s NULL in "%s %2d > %02d:%02d:%02d%.*s %d%s" > > It comes down to this command to fetch ocsp response: > openssl ocsp -respout ocsp.der -no_nonce -issuer chain.pem -cert > cert.pem -url