vsrion of openbsd installer in one usb drive

2020-05-26 Thread man Chan
Hello, I tried this work for me. 1. Install openbsd (basic packages:- bsd,bsd.rd and basexx.tgz) in a usb drive2. use the newly installed usb drive to boot up the system and then shut it down.3. use other openbsd system to delete all the contents of the usb drive except bsd.rd, bsd, boot. Then

Restore pf tables metadata after a reboot

2020-05-26 Thread Walter Alejandro Iglesias
I understand that this command: # pfctl -t spam -T expire Takes in care the "Cleared" date: # pfctl -t spam -vT show ___.___.22.65 Cleared: Mon May 25 16:10:22 2020 ___.___.167.62 Cleared: Mon May 25 16:10:22 2020 [...] Is there a way to save and

Re: Setting permanent neighbor entry

2020-05-26 Thread Tommy Nevtelen
On 26/05/2020 15.34, Kanto Andria wrote: Hello, man ndp is probably another solution This is the correct way since it is v6 :) /T

Re: sysupgrade confused by additional disk?

2020-05-26 Thread Joseph A Borg
shouldn’t sysupgrade default to use the disk where bad.rd launched from? I assume it’s the same disk that was running the system before boot. This would be ideal default behaviour since this is an upgrade. regards > On 25 May 2020, at 18:26, Nick Holland wrote: > > On 2020-05-25 10:21, Why

Re: rc.conf.local sorted?

2020-05-26 Thread Why 42? The lists account.
On Mon, May 25, 2020 at 04:51:51PM +0200, Antoine Jacoutot wrote: > > ... > > It looks as if the file has been sorted e.g. > Did you use rcctl(8) ? Hi Antoine, You are correct, that does it. I checked the history and after the upgrade I had run rcctl to enable sensorsd. Just tested it again

Re: Setting permanent neighbor entry

2020-05-26 Thread Tommy Nevtelen
On 26/05/2020 11.38, Demi M. Obenour wrote: What is the OpenBSD equivalent to this Linux command? ip neighbor add 2001:db8::1 dev xnf0 lladdr fe:ff:ff:ff:ff:ff router nud permanent It doesn’t need to be a single command. If the existing userspace tooling does not support this, is it possible

Openbsd 6.6 httpd custom 404 page

2020-05-26 Thread Riccardo Giuntoli
Hello there dear OpenBSD fellows. I would like to change default 404 page in httpd(8), and I've seen in this list that in past versions is hardcoded into the C sources. Now it's possible in httpd.conf(5) ? Very nice regards, RG. -- Name: Riccardo Giuntoli Email: tag...@gmail.com Location:

Setting permanent neighbor entry

2020-05-26 Thread Demi M. Obenour
What is the OpenBSD equivalent to this Linux command? ip neighbor add 2001:db8::1 dev xnf0 lladdr fe:ff:ff:ff:ff:ff router nud permanent It doesn’t need to be a single command. If the existing userspace tooling does not support this, is it possible to do it via the kernel APIs? Sincerely,

Re: rc.conf.local sorted?

2020-05-26 Thread Antoine Jacoutot
On Tue, May 26, 2020 at 05:16:44PM +0200, Why 42? The lists account. wrote: > > On Mon, May 25, 2020 at 04:51:51PM +0200, Antoine Jacoutot wrote: > > > ... > > > It looks as if the file has been sorted e.g. > > Did you use rcctl(8) ? > > Hi Antoine, > > You are correct, that does it. I checked

Re: sysctl for meltdown and mds mitigations

2020-05-26 Thread Elias Carter
Fair enough. Thanks for the information. I will look at doing some profiling to figure out what the routing bottleneck is instead of going off a hunch. On Tue, May 26, 2020 at 5:13 PM Theo de Raadt wrote: > > And by the way, if it is *just routing* -- in the kernel -- then > neither Meltdown NOR

Re: Restore pf tables metadata after a reboot

2020-05-26 Thread Walter Alejandro Iglesias
On Tue, May 26, 2020 at 11:25:21PM +0200, Anders Andersson wrote: > On Tue, May 26, 2020 at 2:14 PM Walter Alejandro Iglesias > wrote: > > > > I understand that this command: > > > > # pfctl -t spam -T expire > > > > Takes in care the "Cleared" date: > > > > # pfctl -t spam -vT show > >

sysctl for meltdown and mds mitigations

2020-05-26 Thread Elias Carter
Would there be any interest in having a sysctl to enable/disable meltdown and mds mitigations? I was poking around 'sys/arch/amd64/amd64/cpu.c' and it appears that these mitigations are currently hardcoded. The benefit of having these sysctl's is that they would allow users to disable the

Re: sysctl for meltdown and mds mitigations

2020-05-26 Thread Theo de Raadt
Absolutely no interest at all. Not interested in the source code complexity (it is worse than you think), nor do we believe people's ability to make correct decisions in regards to complicated security issues. dhcpd, you say... Elias Carter wrote: > Would there be any interest in having a

Re: sysctl for meltdown and mds mitigations

2020-05-26 Thread Theo de Raadt
And by the way, if it is *just routing* -- in the kernel -- then neither Meltdown NOR MDS are involved in what you perceive as performance problems, since those only happen upon *context switch to/from userland*. As I was saying... we don't want to provide these knobs for people who cannot make

Re: Restore pf tables metadata after a reboot

2020-05-26 Thread Anders Andersson
On Tue, May 26, 2020 at 2:14 PM Walter Alejandro Iglesias wrote: > > I understand that this command: > > # pfctl -t spam -T expire > > Takes in care the "Cleared" date: > > # pfctl -t spam -vT show > ___.___.22.65 > Cleared: Mon May 25 16:10:22 2020 > ___.___.167.62 >

Re: sysupgrade confused by additional disk?

2020-05-26 Thread Florian Obser
On Mon, May 25, 2020 at 12:26:43PM -0400, Nick Holland wrote: > While OpenBSD itself is great about using duids, those are defined in > the 'a' partition of the boot disk..which is usually the first disk. But > in your case, the "first disk" doesn't include the 'a' partitionand the > /etc/fstab

Re: Openbsd 6.6 httpd custom 404 page

2020-05-26 Thread prx
No, it's not. But that would be nice, at least to suggest a link to à search page for a lost user. For now, you have to modify sources and compile again. Le 26 mai 2020 17:34:11 GMT+02:00, Riccardo Giuntoli a écrit : >Hello there dear OpenBSD fellows. > >I would like to change default 404

Re: Setting permanent neighbor entry

2020-05-26 Thread Demi M. Obenour
On 2020-05-26 09:34, Kanto Andria wrote: > Hello, > man ndp is probably another solution > > On Tuesday, May 26, 2020, 9:17:25 a.m. EDT, Tommy Nevtelen > wrote: > > On 26/05/2020 11.38, Demi M. Obenour wrote: >> What is the OpenBSD equivalent to this Linux command? >> >> ip neighbor

Re: Setting permanent neighbor entry

2020-05-26 Thread Kanto Andria
Hello, man ndp is probably another solution On Tuesday, May 26, 2020, 9:17:25 a.m. EDT, Tommy Nevtelen wrote: On 26/05/2020 11.38, Demi M. Obenour wrote: > What is the OpenBSD equivalent to this Linux command? > > ip neighbor add 2001:db8::1 dev xnf0 lladdr fe:ff:ff:ff:ff:ff router

Re: Setting permanent neighbor entry

2020-05-26 Thread Brian Brombacher
Do it in hostname.if. You’ll win the race. > On May 26, 2020, at 2:14 PM, Demi M. Obenour wrote: > > On 2020-05-26 09:34, Kanto Andria wrote: >> Hello, >> man ndp is probably another solution >> >>On Tuesday, May 26, 2020, 9:17:25 a.m. EDT, Tommy Nevtelen >> wrote: >> >>> On