Re: smtpd.conf.5 relay tls | verify

2015-08-04 Thread David Dahlberg
Am Mittwoch, den 05.08.2015, 00:31 +0100 schrieb Jason McIntyre: > if this were the case, i'd say we want: > [tls [verify]] Hmm, I think I have heard this proposal before ;-) https://marc.info/?l=openbsd-misc&m=140196108217209 > but the doc currently says: > > Note that the tls and

Re: Show us your /etc/profile

2015-08-04 Thread Sean Kamath
On Aug 2, 2015, at 8:49 AM, li...@wrant.com wrote: >> never >> thought of using a shell function in .profile till I read this thread. > > ... > > Functions has always been impressive once you move past the alias > shortcomings (can't handle arguments etc), so also worth a read the > "Functio

Re: Possible fix for i217 problem

2015-08-04 Thread Josh Grosse
On Tue, Aug 04, 2015 at 07:16:48PM -0600, Theo de Raadt wrote: > > On Wed, Aug 05, 2015 at 02:04:28AM +0200, Hrvoje Popovski wrote: > > > On 4.8.2015. 23:47, Stuart Henderson wrote: > > > > On 2015/08/04 22:40, Stefan Fritsch wrote: > > > >> someone mentioned to me the i217-LM problems that were re

Re: Possible fix for i217 problem

2015-08-04 Thread Theo de Raadt
> On Wed, Aug 05, 2015 at 02:04:28AM +0200, Hrvoje Popovski wrote: > > On 4.8.2015. 23:47, Stuart Henderson wrote: > > > On 2015/08/04 22:40, Stefan Fritsch wrote: > > >> someone mentioned to me the i217-LM problems that were reported on misc > > >> end of May. It is possible that the patch below

Re: Possible fix for i217 problem

2015-08-04 Thread Josh Grosse
On Wed, Aug 05, 2015 at 02:04:28AM +0200, Hrvoje Popovski wrote: > On 4.8.2015. 23:47, Stuart Henderson wrote: > > On 2015/08/04 22:40, Stefan Fritsch wrote: > >> someone mentioned to me the i217-LM problems that were reported on misc > >> end of May. It is possible that the patch below helps. > >

Re: Is lack of a prompt in shell after building the kernel bad news?

2015-08-04 Thread Joel Rees
Thanks for the comments. On Tue, Aug 4, 2015 at 5:43 PM, Joel Rees wrote: > I did a cvs update yesterday (-rOPENBSD_5_7, previous update toward the end > of June) in the middle of network problems. > > Updated src and then ports and then xenocara. Took from about eight in the > morning to about e

Re: Possible fix for i217 problem

2015-08-04 Thread Hrvoje Popovski
On 4.8.2015. 23:47, Stuart Henderson wrote: > On 2015/08/04 22:40, Stefan Fritsch wrote: >> someone mentioned to me the i217-LM problems that were reported on misc >> end of May. It is possible that the patch below helps. > > This fixes my Dell poweredge T20: > em0 at pci0 dev 25 function 0 "Inte

Re: smtpd.conf.5 relay tls | verify

2015-08-04 Thread Jason McIntyre
On Tue, Aug 04, 2015 at 04:00:58PM -0700, Doug Hogan wrote: > On Tue, Aug 04, 2015 at 04:02:10PM +0200, L?VAI D?niel wrote: > > I maybe have overlooked something, but this syntax mentioned in the > > manual didn't work: > > > > accept from any for domain "..." relay backup verify expire 30d > > >

Re: smtpd.conf.5 relay tls | verify

2015-08-04 Thread Doug Hogan
On Tue, Aug 04, 2015 at 04:02:10PM +0200, L?VAI D?niel wrote: > I maybe have overlooked something, but this syntax mentioned in the > manual didn't work: > > accept from any for domain "..." relay backup verify expire 30d > > ... on the other hand, this has been working: > accept from any for dom

Re: Possible fix for i217 problem

2015-08-04 Thread Theo de Raadt
> On 2015/08/04 22:40, Stefan Fritsch wrote: > > someone mentioned to me the i217-LM problems that were reported on misc > > end of May. It is possible that the patch below helps. > > This fixes my Dell poweredge T20: > em0 at pci0 dev 25 function 0 "Intel I217-LM" rev 0x04: msi, address > f8:b1

Re: Possible fix for i217 problem

2015-08-04 Thread Stuart Henderson
On 2015/08/04 22:40, Stefan Fritsch wrote: > someone mentioned to me the i217-LM problems that were reported on misc > end of May. It is possible that the patch below helps. This fixes my Dell poweredge T20: em0 at pci0 dev 25 function 0 "Intel I217-LM" rev 0x04: msi, address f8:b1:56:... And d

Re: new (nasty) spam pattern

2015-08-04 Thread Steve Fairhead
On 30/07/2015 23:07, Steve Fairhead wrote: Oooh, nice. Some meat there for me to look into. Thanks. Well, it seems I could have phrased that better... (one private response had me nonplussed until I googled the phrase - refers to a male with a larger than average... errr... never mind.) Th

Re: Docker on OpenBSD?

2015-08-04 Thread Mike Larkin
On Tue, Aug 04, 2015 at 09:30:37PM +, openda...@hushmail.com wrote: > Hi! > > On Tuesday, August 04, 2015 at 4:47 PM, "Mike Larkin" > wrote: > > > >From your first link: > > > >"Docker on FreeBSD relies heavily on ZFS, jail and the 64bit Linux > >compatibility layer" > > > >I think that say

Re: Docker on OpenBSD?

2015-08-04 Thread Giancarlo Razzolini
Em 04-08-2015 18:28, openda...@hushmail.com escreveu: > a) Discourse is not a conventional Rails app. It has been abstracted to the > point of insanity and will require you to make a ton of modifications and > disable a ton of stuff if you decide to go that route, Kind figured. To me, any syste

Re: Docker on OpenBSD?

2015-08-04 Thread opendaddy
Hi! On Tuesday, August 04, 2015 at 4:47 PM, "Mike Larkin" wrote: > >From your first link: > >"Docker on FreeBSD relies heavily on ZFS, jail and the 64bit Linux >compatibility layer" > >I think that says enough to answer your question. Sort of, but https://news.ycombinator.com/item?id=8480433 d

Re: Docker on OpenBSD?

2015-08-04 Thread opendaddy
Hi! On Tuesday, August 04, 2015 at 4:44 PM, "Giancarlo Razzolini" wrote: > >From what I read on their site, they use off the shelf software that >might have a package/port on OpenBSD. You could succeed in installing it >outside a docker. Unless their software is stupid and try to >verify if you

Re: Docker on OpenBSD?

2015-08-04 Thread Giancarlo Razzolini
Em 04-08-2015 17:48, Etienne escreveu: > Couldn't agree more. And someone else writes it better than I do: > http://www.vitavonni.de/blog/201503/2015031201-the-sad-state-of-sysadmin-in-the-age-of-containers.html I truly don't know which is worse: Developers pretending to be sysadmins or sysadmins

Possible fix for i217 problem

2015-08-04 Thread Stefan Fritsch
Hi, someone mentioned to me the i217-LM problems that were reported on misc end of May. It is possible that the patch below helps. For us, it fixed a problem on a laptop with i217-LM (pci id 8086:153a) where the receiving of packets would stop until the battery of the laptop was removed (or un

Re: Docker on OpenBSD?

2015-08-04 Thread lists
> Are there any efforts being made to port the FreeBSD Docker port to OpenBSD? Should there be any effort to port some trendy this year marketed commercially supported tool while the entire OpenBSD feature set totally obsoletes the tool on application design stage, or is there any good reason to b

Re: Docker on OpenBSD?

2015-08-04 Thread Giancarlo Razzolini
Em 04-08-2015 13:50, Gregory Edigarov escreveu: > They just use RoR, and it definitely run on OpenBSD. Do you know what these docker ready images sound to me? Laziness. Truth is, we have an avalanche of developers that are empowered by these so called devops tools, puppet, chef, docker ready imag

Re: Docker on OpenBSD?

2015-08-04 Thread Gregory Edigarov
On 08/04/2015 07:44 PM, Giancarlo Razzolini wrote: Em 04-08-2015 12:59, openda...@hushmail.com escreveu: Are there any efforts being made to port the FreeBSD Docker port to OpenBSD? Not that I know of, but I'm not a dev and might be wrong. I do follow @tech, and didn't saw anything docker relat

Re: Docker on OpenBSD?

2015-08-04 Thread Mike Larkin
On Tue, Aug 04, 2015 at 03:59:38PM +, openda...@hushmail.com wrote: > Hi! > > Are there any efforts being made to port the FreeBSD Docker port to OpenBSD? > > https://wiki.freebsd.org/Docker > https://github.com/kvasdopil/docker > > Wish I didn't have to ask, but it's the only way I can inst

Re: Docker on OpenBSD?

2015-08-04 Thread Giancarlo Razzolini
Em 04-08-2015 12:59, openda...@hushmail.com escreveu: > Are there any efforts being made to port the FreeBSD Docker port to OpenBSD? Not that I know of, but I'm not a dev and might be wrong. I do follow @tech, and didn't saw anything docker related, ever since I'm on the list. My personal opinion

Docker on OpenBSD?

2015-08-04 Thread opendaddy
Hi! Are there any efforts being made to port the FreeBSD Docker port to OpenBSD? https://wiki.freebsd.org/Docker https://github.com/kvasdopil/docker Wish I didn't have to ask, but it's the only way I can install Discourse (https://github.com/discourse/discourse) without being shunned by its com

SNMP on 5.7/5.8

2015-08-04 Thread Steven Surdock
The broken SNMP on i386/5.7 is preventing me from upgrading. I tried i386/5.8 but I'm still seeing net-snmpd crash with the following error. NET-SNMP version 5.7.3 Error expanding HCInReceives to 64bits in ipSystemStatsTable.ipv4 Error expanding HCInDelivers to 64bits in ipSystemStatsTa

smtpd.conf.5 relay tls | verify

2015-08-04 Thread LÉVAI Dániel
Hi! I maybe have overlooked something, but this syntax mentioned in the manual didn't work: accept from any for domain "..." relay backup verify expire 30d ... on the other hand, this has been working: accept from any for domain "..." relay backup tls verify expire 30d ... and writing only 'tls

Re: reply-to for blocked packets

2015-08-04 Thread Giancarlo Razzolini
Em 04-08-2015 04:52, Kapetanakis Giannis escreveu: > I've already have rules for outgoing traffic that utilize route-to. > However this applies only for new packets generated from host itself. > It does not match on returns. Not necessarily true. You can filter on your outgoing interfaces as this:

samba - bad performance

2015-08-04 Thread Mark Patruck
Hi, is anyone running samba with decent performance willing to help? I'm running samba-3.6.15 on OpenBSD 5.8 (amd64) on a Supermicro D525 Atom board with 4GB memory and em(4) nics. When transferring a 1GB file from Windows 7 to samba, it won't exceed 22-25MB/s. After lots of testing, the only t

Re: Is lack of a prompt in shell after building the kernel bad news?

2015-08-04 Thread trondd
On Tue, August 4, 2015 7:09 am, Stuart Henderson wrote: > > This kernel and userland are out of sync, there was a change made > at some point (I think it was between 5.7 and now but I could be wrong) > which did exactly this. IIRC this is the behaviour when you have newer > userland and old kernel.

Re: Is lack of a prompt in shell after building the kernel bad news?

2015-08-04 Thread Stuart Henderson
On 2015-08-04, Joel Rees wrote: > Thought login was freezing after the welcome message, beacause there was no > prompt. So I hit the power button, watched it stop CUPS and something else > and sync, and moved the old kernel back in for a build with GPT enabled, as > a first wild guess. Same result

Re: Is lack of a prompt in shell after building the kernel bad news?

2015-08-04 Thread Joel Rees
On Tue, Aug 4, 2015 at 6:22 PM, Kapetanakis Giannis wrote: > On 04/08/15 11:43, Joel Rees wrote: >> >> I did a cvs update yesterday (-rOPENBSD_5_7, previous update toward the >> end >> of June) in the middle of network problems. >> >> Updated src and then ports and then xenocara. Took from about e

Re: Is lack of a prompt in shell after building the kernel bad news?

2015-08-04 Thread Kapetanakis Giannis
On 04/08/15 11:43, Joel Rees wrote: I did a cvs update yesterday (-rOPENBSD_5_7, previous update toward the end of June) in the middle of network problems. Updated src and then ports and then xenocara. Took from about eight in the morning to about eleven at night. So, without doing a build, I we

Is lack of a prompt in shell after building the kernel bad news?

2015-08-04 Thread Joel Rees
I did a cvs update yesterday (-rOPENBSD_5_7, previous update toward the end of June) in the middle of network problems. Updated src and then ports and then xenocara. Took from about eight in the morning to about eleven at night. So, without doing a build, I went back and updated ports and then src

Re: Any way to tell what the last cvs module checked before a broken pipe was?

2015-08-04 Thread Joel Rees
2015/08/04 6:24 "dan mclaughlin" : > > On Mon, 3 Aug 2015 21:17:12 +0900 Joel Rees wrote: > > I try a cvs update on xenocara and it just sits there for over an hour > > and then tells me I have a broken pipe. > > > > cvs log seems to yield the same behavior, which I might interpret as > > re-assur

Re: reply-to for blocked packets

2015-08-04 Thread Kapetanakis Giannis
On 03/08/15 16:45, Giancarlo Razzolini wrote: Em 03-08-2015 05:23, Kapetanakis Giannis escreveu: Is there a way to sort this out and route packets to the correct interface? You can try to create "enforcing" rules. Create 2 rules in your outgoing interfaces that, when they detect a packet leavin