Re: l2tp and openbsd 6.1

2017-10-04 Thread lilit-aibolit
Hi, I've just try your suggestion and IPhone could connect but Windows gives new errors in log: Oct  5 09:05:44 gw isakmpd[19354]: attribute_unacceptable: GROUP_DESCRIPTION: got MODP_1024, expected MODP_2048 Oct  5 09:05:46 gw npppd[10826]: l2tpd ctrl=6 logtype=Started RecvSCCRQ from=37.73.214.

Re: af-to ipv6 -> ipv4 server

2017-10-04 Thread lists+misc
On Wed, Oct 04, 2017 at 11:50:10PM +, lists+m...@ggp2.com wrote: > It looks like I'm being delegated a /64 from Comcast no matter what I > ask for. Actually... I spoke too soon. After digging around some more, it appears that Comcast appears to have some sort of caching going on. If I spoof

Re: l2tp and openbsd 6.1

2017-10-04 Thread Vivek Vinod
I do not understand the question ‎but this may be connected... My Wi-Fi uses AD (LDAP) auth with certificates‎. I set this up using some "guide" without understanding a thing. My IOS, Android and Mac clients connect without a hitch. Windows 10 do not.  To get my windows 10 to work, I have to co

The dlopen manual lacks RTLD_TRACE info

2017-10-04 Thread Nan Xiao
Hi misc@, I find the ldd program actually uses "RTLD_TRACE" when calling "dlopen": dlhandle = dlopen(buf, RTLD_TRACE); While the manual (https://man.openbsd.org/dlopen.3) seems doesn't provide introduction of RTLD_TRACE. Should OpenBSD manual add RTLD_TRACE info? Thanks in advance! Best Re

Re: af-to ipv6 -> ipv4 server

2017-10-04 Thread lists+misc
It looks like I'm being delegated a /64 from Comcast no matter what I ask for. Here's the relevant portion of my dhcpcd.conf: interface re1 ipv6rs ia_na 0 ia_pd 1/::/60 vlan10/1/64 vlan1001/2/64 I've also tried ia_pd 1/::/56 my original config line before testing was: ia_pd 1 vlan10/0

Re: Resize partitions?

2017-10-04 Thread Alexander Hall
On October 4, 2017 6:58:52 PM GMT+02:00, Niels Kobschaetzki wrote: > /.../ And I >don't know OpenBSD enough to know how "dangerous" it is to use >"pkg_delete -a". I used similar functions with linux-distributions and >they wanted to remove a tool like git because nothing depended on it. It w

Re: af-to ipv6 -> ipv4 server

2017-10-04 Thread lists+misc
On Wed, Oct 04, 2017 at 07:54:45PM +0200, Jeremie Courreges-Anglas wrote: > I'm reading contradicting stuff on the net, some posts say that comcast > will hand you more than a /64... if you ask for more, say a /60. Maybe > this is worth trying? I'll give that a shot when I get home. It may have

patch - xrstor link on errata61.html

2017-10-04 Thread Emille Blanc
https://www.openbsd.org/errata61.html Because current link to the xrstore patch is a 404, because probably copy/pasta error - the sort of thing I do to myself, all. the. time. Crude patch inline, because I don't actually have a source tree in front of me anywhere. --- errata61.html.orig Wed

Re: af-to ipv6 -> ipv4 server

2017-10-04 Thread Jeremie Courreges-Anglas
On Wed, Oct 04 2017, lists+m...@ggp2.com wrote: >> No, that makes sense. > > Thanks! > >> SLAAC requires /64 interfaces. Does your ISP *only* give a /64? Many >> will give a larger block using DHCPv6-PD (e.g. following Broadband >> Forum TR-187). I don't remember if I already opened https://www.br

Re: l2tp and openbsd 6.1

2017-10-04 Thread Vijay Sankar
Quoting Charles Amstutz : Yes, I would like to know this as well, it seems annoying that Android 8/4.x and IOS can connect, but not windows 10 (I haven't tried earlier windows 10) and android 7. Its either a user error (which I am willing to admit) or something very annoying. Especia

Re: Resize partitions?

2017-10-04 Thread Niels Kobschaetzki
On 17/10/04 01:48, Nick Holland wrote: On 10/03/17 10:10, Niels Kobschaetzki wrote: On 17/10/03 13:48, Niels Kobschaetzki wrote: Hi, I am running currently constantly into the problem that I do not have enough space left for installing packages and today even upgrading a snapshot failed becaus

Re: l2tp and openbsd 6.1

2017-10-04 Thread Charles Amstutz
Yes, I would like to know this as well, it seems annoying that Android 8/4.x and IOS can connect, but not windows 10 (I haven't tried earlier windows 10) and android 7. Its either a user error (which I am willing to admit) or something very annoying. Especially when my l2tp PSK windows serve

Re: af-to ipv6 -> ipv4 server

2017-10-04 Thread lists+misc
> No, that makes sense. Thanks! > SLAAC requires /64 interfaces. Does your ISP *only* give a /64? Many > will give a larger block using DHCPv6-PD (e.g. following Broadband > Forum TR-187). Unfortunately, (my tests seem to confirm) Comcast only gives me a single /64. I'm moving to a new ISP soon

Re: the whole greylisting, spam filtering thing

2017-10-04 Thread Marc Peters
On Mon, Oct 02, 2017 at 07:16:43AM +, rosjat wrote: > Hi there again, > > so I will try to ask the question about implementing rspam on a dedicated > machine oder at the mailsystem again because I don't know if it was lost in > the converstion :). How is you setup now? Do you do any analysis

httpd.conf and directory index

2017-10-04 Thread rosjat
hi there, I can't get it around my head how this should work if different locations have diffrent index files. so I have a config like so: server "domain.tld" { alias "*.domain.tld" listen on $ext_addr tls port https log error "domain_ssl_error" log access "

Re: Can't boot from encrypted disk after attaching/detaching from another machine

2017-10-04 Thread Zé Loff
On Wed, Oct 04, 2017 at 12:18:20PM +0200, Stefan Sperling wrote: > On Wed, Oct 04, 2017 at 10:57:28AM +0100, Zé Loff wrote: > > On Wed, Oct 04, 2017 at 10:41:56AM +0100, Zé Loff wrote: > > > > > > Hi all > > > > > > I connected my laptop's encrypted HDD to my desktop machine to copy some > > > st

Re: Can't boot from encrypted disk after attaching/detaching from another machine

2017-10-04 Thread Stefan Sperling
On Wed, Oct 04, 2017 at 10:57:28AM +0100, Zé Loff wrote: > On Wed, Oct 04, 2017 at 10:41:56AM +0100, Zé Loff wrote: > > > > Hi all > > > > I connected my laptop's encrypted HDD to my desktop machine to copy some > > stuff and when I put it back on the laptop the boot loader no longer > > asks for

Re: Can't boot from encrypted disk after attaching/detaching from another machine

2017-10-04 Thread Zé Loff
On Wed, Oct 04, 2017 at 10:41:56AM +0100, Zé Loff wrote: > > Hi all > > I connected my laptop's encrypted HDD to my desktop machine to copy some > stuff and when I put it back on the laptop the boot loader no longer > asks for the passphrase and thus I can't boot from it. Any clues? Some > note

Can't boot from encrypted disk after attaching/detaching from another machine

2017-10-04 Thread Zé Loff
Hi all I connected my laptop's encrypted HDD to my desktop machine to copy some stuff and when I put it back on the laptop the boot loader no longer asks for the passphrase and thus I can't boot from it. Any clues? Some notes: - Both machines are amd64 running snapshots, 6.2 #115 (Sep 27) on t

openSMTPD relaying and aliases

2017-10-04 Thread rosjat
Hi there, just a simple question about relaying a local mail with an alias instead of the user name. so it works to relay mail to the alias address via the relay aliases file: root: logs+...@domain.tld secrets file: test acco...@domain.tld:secret_pass smtpd.conf table aliases file:/etc/m

Re: l2tp and openbsd 6.1

2017-10-04 Thread lilit-aibolit
Hi, with l2tp I have situation when iOS  and Android devices could connect but Windows 7 and Windows 10 couldn't. Is it possible to adjust ipsec.conf somehow so it could accept connection from Windows clients too? Or is there a way to adjust some settings in Windows so it will work with current i

Re: af-to ipv6 -> ipv4 server

2017-10-04 Thread Stuart Henderson
On 2017-10-04, lists+m...@ggp2.com wrote: > Hello all! > > I'm new to ipv6, and was hoping that someone could check my > understanding of the af-to option. > > My ISP has given me a /64 block - say 1234:1234:1234:5d6f:/64 > > I have a subnet of servers that are ipv4-only, and want to use the af-to

Re: Why the executable file type is also "DYN", not "EXEC"?

2017-10-04 Thread Stuart Henderson
On 2017-10-04, Nan Xiao wrote: > Hi all, > > I find the type of executable file format on OpenBSD is "DYN", not > "EXEC": > > # readelf -h /usr/bin/ldd > ELF Header: > Magic: 7f 45 4c 46 02 01 01 00 00 00 00 00 00 00 00 00 > Class: ELF64 > Data:

Why the executable file type is also "DYN", not "EXEC"?

2017-10-04 Thread Nan Xiao
Hi all, I find the type of executable file format on OpenBSD is "DYN", not "EXEC": # readelf -h /usr/bin/ldd ELF Header: Magic: 7f 45 4c 46 02 01 01 00 00 00 00 00 00 00 00 00 Class: ELF64 Data: 2's complement, little endian Versi

Re: can't use external monitor after plugging to docking station

2017-10-04 Thread Jiri B
Just to clarify, I talked about X11. Restarting X11 makes my external monitor connected to the docking station be available. But I'm surprised, IIRC I could use the external monitor without restarting X11 just after plugging laptop to the docking station. j. On Wed, Oct 04, 2017 at 02:37:29AM -