Re: Your opinion about using rdomain or mpath

2015-10-14 Thread Giancarlo Razzolini
Em 14-10-2015 11:33, C.L. Martinez escreveu: > ALL traffic is routed over tun0 interface. Some of our customers use > the same type of configuration. This is my actual problem: > discriminate when I do requests to my customers and when I do requests > to our internal lans. I need my default gw

Re: Your opinion about using rdomain or mpath

2015-10-14 Thread Jiri B
On Wed, Oct 14, 2015 at 11:57:24AM -0300, Giancarlo Razzolini wrote: > Em 14-10-2015 11:33, C.L. Martinez escreveu: > [...] > through your VPN. In this case, you don't need neither rdomain nor > mpath. Properly crafted route-to rules in your pf.conf should do the > trick. You can even use anchors

UEFI graphical ope login

2015-10-14 Thread Tuyosi Takesima
Hi all . i succeed graphical openbsd login by using refind . 1st story is http://openbsd-akita.blogspot.jp/2015/10/openbsd-uefi.html and 2nd + story is * about** http://marc.info/?l=openbsd-misc=144476075929012=2 i do the following using linux # unzip refind-bin-0.8.2.zip #

Re: Passwd cipher for YP

2015-10-14 Thread Theo de Raadt
> I just found out that ypcipher=old is no longer supported in login.conf. That is correct. We have deprecated and removed the legacy ciphers. Passing such simple hashes over ethernet in 2015 is not best practice. > Since I have a mixed platform lab network using YP (FreeBSD servers) I am >

solved: UEFI graphical openbsd login

2015-10-14 Thread Tuyosi Takesima
Hi all . i succeed graphical openbsd login by using refind . 1st story is http://openbsd-akita.blogspot.jp/2015/10/openbsd-uefi.html and 2nd + story is * about** http://marc.info/?l=openbsd-misc=144476075929012=2 i do the following using linux # unzip refind-bin-0.8.2.zip #

Re: Your opinion about using rdomain or mpath

2015-10-14 Thread Giancarlo Razzolini
Em 14-10-2015 10:31, C.L. Martinez escreveu: > Nop. It is a CentOS 7.x I don't remember if the default dhclient from CentOS works with classless static routes (code 121), but you can install dhcpcd and use it, it certainly works with it. > Yes because sometimes I will need two or more tunX

PF Queuing

2015-10-14 Thread lists
Hi Everyone, Under systat q, I see packets that are being dropped / trimmed by PF in my prioritized ack queue exceed my default queue. If I'm logged in and catch this happening I can usually identify the traffic which I don't want using that queue and add a match rule to pf.conf to push it into

Re: PF Queuing

2015-10-14 Thread Giancarlo Razzolini
Em 14-10-2015 11:15, lists escreveu: > Hi Everyone, > > Under systat q, I see packets that are being dropped / trimmed by PF in > my prioritized ack queue exceed my default queue. If I'm logged in and > catch this happening I can usually identify the traffic which I don't > want using that queue

Re: Your opinion about using rdomain or mpath

2015-10-14 Thread C.L. Martinez
On 10/14/2015 02:20 PM, Giancarlo Razzolini wrote: Em 14-10-2015 10:31, C.L. Martinez escreveu: Yes because sometimes I will need two or more tunX interfaces up (created by openvpn or openconnect) or enc interface. I think you are confusing gateways with default gateways. No, but maybe I am

Re: CD's arrived

2015-10-14 Thread Amarendra Godbole
And in San Francisco, CA. Now I can attach a face to a name! Thanks OpenBSD for all the hard-work and a fantastic, awesome release (again!) -Amarendra On Tue, Oct 13, 2015 at 5:25 PM, Ralph Siegler wrote: > On Wed, 07 Oct 2015 14:51:28 +, M Wheeler wrote: > > > CD's

Re: solved: UEFI graphical openbsd login

2015-10-14 Thread Tuyosi Takesima
graphical log on is seen in next URL http://openbsd-akita.blogspot.jp/2015/10/openbsd-lives-in-sd1-2gb-usb-stick.html

Strange behavior in lastest snapshot

2015-10-14 Thread L.R. D.S.
Just reporting some problems with lastest build (#1477). The first thing I have noticed is the xenocara start. The command 'startx' generally works normally, but when starting with 'startx & lock -np' it fail. Other strange behavior is chmod. Even when given a command to change permissions to

Re: verification spamd and traffic

2015-10-14 Thread Craig Skinner
On 2015-10-13 Tue 18:55 PM |, Stuart Henderson wrote: > > It's totally possible. Blacklist mode by default returns a temporary failure > so a standard MTA would keep trying, whereas with greylisting or no spamd > it would stop after the mail is accepted. And in stuttering mode you send > one

Re: bgp with failover & load balance

2015-10-14 Thread Peter Hessler
If you are using bgp, then you shouldn't have a default route. Do you see routes from both peers? bgpctl show should give you something like: T-LEVEL3 3549 60101591 399386 0 04w1d23h 552098 T-COGENT 174 26910070 397509 0 06w2d20h 548495 the

strange dmesg

2015-10-14 Thread Stefan Wollny
Hi there! A couple of days ago I managed to reactivate my iMac by installing a SSD. Beside the usual glitches from some nVidia-stuff the machine works fine - running OpenBSD, of course! :-) With Theo's request on checking dmesg for pledge(2)-related errors I stumbled upon the following:$ dmesg |

Re: CD's arrived

2015-10-14 Thread Mario St-Gelais
On Tue, Oct 13, 2015 at 10:32:24AM -0300, Luciano Rottava da Silva wrote: >And in Canada as well. (-: > >On 13 October 2015 at 09:44, wrote: > >> Arrived in Australia, along with t???shirts. Saved me some washing before >> work tomorrow :) >> >> > On 8 Oct 2015, at

Context switching in code

2015-10-14 Thread startrekfan
Hello, I`m searching for the code that manages the (timer interrupt) context switching of the os. I already found the INTRENTRY method(in i386\locore.s ) that does the register pushes. INTRENTRY is called by this block: /* * Trap gate entry for int $80 syscall, also used by sigreturn. */

Re: Asterisk + MariaDB + ODBC newbie questions

2015-10-14 Thread Stuart Henderson
On 2015-10-14, Ivo Chutkin wrote: > Hello all, > I want to use Asterisk with MariaDB CDR backend. > I have working Asterisk. > I have working MariaDB. > As far as I understand, since Asterisk 11 I must use ODBC connector to > MariaDB. > Unfortunately I cannot find any

Re: strange dmesg

2015-10-14 Thread Stuart Henderson
On 2015-10-14, Stefan Wollny wrote: > Hi there! A couple of days ago I managed to reactivate my iMac by > installing a SSD. Beside the usual glitches from some nVidia-stuff the > machine works fine - running OpenBSD, of course! :-) With Theo's request > on checking dmesg for

Re: CD's arrived

2015-10-14 Thread Fish Kungfu
CD's and assorted goodies arrived in Greenville, SC today. Thanks to the OpenBSD Team for all of their hard work and passion for excellence! ...James On Wed, Oct 14, 2015 at 5:59 PM, Mario St-Gelais wrote: > On Tue, Oct 13, 2015 at 10:32:24AM -0300, Luciano Rottava da

PF, dup-to and arp requests

2015-10-14 Thread MiƂosz Kaniewski
uname -a: OpenBSD openbsd58.kvm 5.8 GENERIC#1385 amd64 Also tested on OpenBSD 4.5. Hello, I have a little problem with pf and 'dup-to' option. First, ascii diagram of my network: +--++---++--+ | | em0| |em1 | | | host1

Asterisk + MariaDB + ODBC newbie questions

2015-10-14 Thread Ivo Chutkin
Hello all, I want to use Asterisk with MariaDB CDR backend. I have working Asterisk. I have working MariaDB. As far as I understand, since Asterisk 11 I must use ODBC connector to MariaDB. Unfortunately I cannot find any practical info concerning OpenBSD, Asterisk, ODBC and MariaDB. I tried

Your opinion about using rdomain or mpath

2015-10-14 Thread C.L. Martinez
Hi all, I am using an OpenBSD vm to act as a firewall for my laptop and as openVPN client to connect to several openvpn/ipsec servers. Sometimes I need to stay connected to two or more openvpn/ipsec gateways. And at the same time, I need to stay connected to other networks in my company

Passwd cipher for YP

2015-10-14 Thread Raimo Niskanen
Hi misc@ I just found out that ypcipher=old is no longer supported in login.conf. Since I have a mixed platform lab network using YP (FreeBSD servers) I am curious if anyone has some experience of how portable blowfish is as a cipher for YP passwords. FreeBSD man pages say that they support it.

Re: Your opinion about using rdomain or mpath

2015-10-14 Thread Giancarlo Razzolini
Em 14-10-2015 09:28, C.L. Martinez escreveu: > I am using an OpenBSD vm to act as a firewall for my laptop and as > openVPN client to connect to several openvpn/ipsec servers. Your laptop is also running OpenBSD? > In your opinion, what is the best option: rdomains or mpath? In both > cases I

Re: Your opinion about using rdomain or mpath

2015-10-14 Thread C.L. Martinez
On 10/14/2015 01:17 PM, Giancarlo Razzolini wrote: Em 14-10-2015 09:28, C.L. Martinez escreveu: I am using an OpenBSD vm to act as a firewall for my laptop and as openVPN client to connect to several openvpn/ipsec servers. Your laptop is also running OpenBSD? Nop. It is a CentOS 7.x

Re: Passwd cipher for YP

2015-10-14 Thread Raimo Niskanen
Some answers from myself after experimenting and finding Wikipedia :/ On Wed, Oct 14, 2015 at 02:36:09PM +0200, Raimo Niskanen wrote: > Hi misc@ > > I just found out that ypcipher=old is no longer supported in login.conf. > > Since I have a mixed platform lab network using YP (FreeBSD servers)

Re: verification spamd and traffic

2015-10-14 Thread Boudewijn Dijkstra
Op Tue, 13 Oct 2015 20:55:27 +0200 schreef Stuart Henderson : On 2015-10-13, Boudewijn Dijkstra wrote: Op Thu, 08 Oct 2015 11:06:45 +0200 schreef Markus Rosjat : Hi there, I have a spamd running in greylisting mode and

Re: Asterisk + MariaDB + ODBC newbie questions

2015-10-14 Thread Chris Cappuccio
Stuart Henderson [s...@spacehopper.org] wrote: > On 2015-10-14, Ivo Chutkin wrote: > > Hello all, > > I want to use Asterisk with MariaDB CDR backend. > > I have working Asterisk. > > I have working MariaDB. > > As far as I understand, since Asterisk 11 I must use ODBC

Re: CD's arrived

2015-10-14 Thread Carl Trachte
Tucson, Arizona On Tue, Oct 13, 2015 at 5:25 PM, Ralph Siegler wrote: > On Wed, 07 Oct 2015 14:51:28 +, M Wheeler wrote: > >> CD's arrived today UK. Thanks again. > > Just arrived just north of Chicago, IL USA (pre-ordered Sept 15) Many > thanks!

Re: Passwd cipher for YP

2015-10-14 Thread Devin Reade
--On Wednesday, October 14, 2015 08:51:06 AM -0600 Theo de Raadt wrote: Do you have any other tips on how to handle logins in a mixed OS YP network? These days, I would recommend using YP in fewer places. I wrote the code, but even I don't use it. Each time I make

Re: Your opinion about using rdomain or mpath

2015-10-14 Thread Jiri B
On Wed, Oct 14, 2015 at 12:28:21PM +, C.L. Martinez wrote: > Hi all, > > I am using an OpenBSD vm to act as a firewall for my laptop and as openVPN > client to connect to several openvpn/ipsec servers. > > Sometimes I need to stay connected to two or more openvpn/ipsec gateways. > And at