Re: What's good safe PPC/MIPS/SPARC networking hardware with open firmware that works well with OpenBSD? Many ethernet plugs and 1U rack mount = bonus.

2016-02-27 Thread Tinker
On 2016-02-28 05:26, Karel Gardas wrote: Open firmware? What do you mean by that precisely? Or just as little firmware as possible, just to minimize that as attack vector. Anyway, while asking such question it would also help if you tell something about intended usage scenario of such

IKE phase 2 failing, but don't see any obvious problem

2016-02-27 Thread Andrew Lester
Hi all, I'm working on bringing up a remote-access L2TP + IPSec VPN on an OpenBSD 5.8 workstation. Note that this system is the client side L2TP LAC, not a server-side L2TP LNS. Therefore I am using xl2tpd instead of npppd, which will only handle server-side configurations. My issue actually

Estudia un curso de Postgrado en Chile desde cualquier lugar.

2016-02-27 Thread UOnline - Educaci�n permanente
Vea esta información en su navegador

Re: What's good safe PPC/MIPS/SPARC networking hardware with open firmware that works well with OpenBSD? Many ethernet plugs and 1U rack mount = bonus.

2016-02-27 Thread Karel Gardas
Open firmware? What do you mean by that precisely? Anyway, while asking such question it would also help if you tell something about intended usage scenario of such box(es). fw?/app server?/storage?/nas? etc. On Sat, Feb 27, 2016 at 11:10 PM, Tinker wrote: > Hi! > >

Re: Again SNMP: No UCD-SNMP-MIB found

2016-02-27 Thread Stuart Henderson
On 2016-02-26, Alex Naumov wrote: > Hello, > > just want to ask why our snmpd(8) doesn't understand MIBs from UCD-SNMP-MIB. > Is there some workaround? > > I need information about CPU and Memory usage... > > > OpenBSD 5.6 GENERIC#274 i386 > net-snmp-5.7.2.1p2 snmpd(8) aka

What's good safe PPC/MIPS/SPARC networking hardware with open firmware that works well with OpenBSD? Many ethernet plugs and 1U rack mount = bonus.

2016-02-27 Thread Tinker
Hi! What's good PPC/MIPS/SPARC networking hardware with open firmware that works well with OpenBSD? Minimalistic for minimizing attack surface. (Many ethernet ports would be a bonus. 1U rack mount would be a bonus. ECC would be a bonus.) Thanks! Tinker

Re: sndiod fallback trouble

2016-02-27 Thread Michael Reed
On 02/27/16 04:15, Alexandre Ratchov wrote: A nicer approach would be to handle this in sndiod by allowing sub-devices (aka -s options) to change their device (aka -f option). The advantage of doing it in sndiod is that later this could happen dynamically (ex. unplug usb cable and programs

OpenSSL/IPsec certificate creation error or error in man pages

2016-02-27 Thread igor.kos
I have created certificates in accordance to isakmpd man page: # env CERTIP=10.0.0.1 openssl x509 -req \ -days 365 -in 10.0.0.1.csr \ -CA /etc/ssl/ca.crt -CAkey /etc/ssl/private/ca.key \ -CAcreateserial -extfile /etc/ssl/x509v3.cnf \ -extensions x509v3_IPAddr -out 10.0.0.1.crt But in

Re: What are the disadvantages of soft updates?

2016-02-27 Thread Lampshade
Hello Given that one could change options for filesystem such as sync to async without remounting using mount -u -o options /what /where is this possible to disable softdep on the fly (without unmounting)? Second question: Does mounting fs with softdep *and* sync options is secure? For example

Re: how to send email via Mail

2016-02-27 Thread Craig Skinner
G'day Eric, On 2016-02-26 Fri 14:52 PM |, Eric Furman wrote: > > What Nick was trying to say was, "If you do not understand internet > e-mail from end-to-end please do not run an e-mail server." Yes. > There is a lot more to it than just installing some packages. Yes, he'll need at least: *)

Re: Firefox W^X isn't a part of Pwn2Own contest

2016-02-27 Thread Lampshade
About X.Org isolation I have heard of Xpra - "screen for X11" but haven't used this yet.

Re: Remote access VPN on OpenBSD workstation...

2016-02-27 Thread Stuart Henderson
On 2016-02-27, Andrew Lester wrote: > For simplicity sake I'm not yet concerned about getting the IPSec layer > operational, which seems slightly more straightforward. Is there a way to > configure npppd as a LAC client or does it only function as an LNS? If the > latter,

Re: how to send email via Mail

2016-02-27 Thread Roderick
On Fri, 26 Feb 2016, Steffen Nurpmeso wrote: But it's shit [pipes in mail(1)]. You cannot say "rawpipe" etc. It is not flexible, not configurable, it is dumb and cannot really be used for anything real, It is very flexible. The inflated programs with cool features do not allow you to use the

Re: asking for help compiling dns stats collector (dsc)

2016-02-27 Thread Imre Oolberg
Hi! On 2016-02-25 12:52, Oliver Peter wrote: On Thu, Feb 25, 2016 at 09:42:25AM +0200, Imre Oolberg wrote: Hi! On 2016-02-22 20:08, Stuart Henderson wrote: >On 2016-02-21, Imre Oolberg wrote: >>Hi! >> >>I am in the middle of implementing https://www.dns-oarc.net/tools/dsc/

Supermicro AOC-SG-I2 (two port Intel 82575EB) hwfeatures

2016-02-27 Thread Atanas Vladimirov
Hi, I'm running -current on Supermicro X9SCL-F with two on-board Gigabit Intel (82579LM and 82574L) and one PCI-e 4x Supermicro AOC-SG-I2 [0] (two port Intel 82575EB). The question is why 82575EB doesn't support hwfeatures (CSUM_TCPv4,CSUM_UDPv4 and VLAN_HWTAGGING) as 82579LM and 82574L.

Re: sndiod fallback trouble

2016-02-27 Thread Matej Nanut
On 27 February 2016 at 10:15, Alexandre Ratchov wrote: > One option would to patch libsndio to try more devices (how many?). I've also noticed this issue and have hacked libsndio to try snd/0 and snd/1 first, which is basically the same as your suggestion. > A nicer approach

Re: sndiod fallback trouble

2016-02-27 Thread Alexandre Ratchov
On Fri, Feb 26, 2016 at 07:18:06PM -0500, Michael Reed wrote: > Hello, > > I use OpenBSD on my laptop to listen to music, using an external DAC > (USB) at home and built-in audio elsewhere. > > In rc.conf.local I have > > # see http://thread.gmane.org/gmane.os.openbsd.misc/213373/focus=213377