6.5 Release amd64 upgrade syspatch reports 404 ftp file not found

2019-04-24 Thread Tom Smyth
Hello
Minor  feedback,  that when using amd64 version of OpenBSD

when running syspatch (after the _unwind user are added and the
"intel-firmware is installed,
there is a message saying
checking for binary packages
ftp: Error Retrieving file :404 not found

this is happening on both cdn.openbsd.org and fastly.cdn

it is probably  just that there are no patches available but I was wondering
is there possibly a file missing that would just say no patches needed

Thanks

Tom Smyth



-- 
Kindest regards,
Tom Smyth.



Re: Controlling OSPFD based on HAProxy state

2019-04-24 Thread David Gwynne
I've used relayd to insert routes to a service based on a health check, and
then had ospfd advertise those routes.  That might be good enough for you.

On Fri., 19 Apr. 2019, 00:40 Henry Bonath,  wrote:

> Does anyone suggest any clever way of controlling OSPFD based on the
> status of an HAProxy process?
>
> I like to use OSPFD to advertise /32 loopback IPs which HAProxy binds
> to for anycasted highly-available Reverse Proxy/Load Balancer
> services.
>
> This works great if the whole box goes down, as OSPF would no longer
> be advertising from that site, but if the HAProxy process fails for
> some reason, then it just goes down as the IP will stay in the OSPF
> table.
>
> I know there are tools like monit or supervisord which may help with
> this, but I wanted to see if anyone here may have any ideas on how to
> achieve this that I may be overlooking.
>
> Thanks!
> -Henry
>
>


One-shot upgrade script

2019-04-24 Thread Christian Weisgerber
I don't remember if I ever posted it, but I've been using an "upgrade"
script to download bsd.rd, verify it, move it to /bsd, and reboot.
With florian@'s additions in -current, I have now extended the
script to download the sets and kick off an unattended upgrade.

In the best case, you simply run
# ./upgrade
and the machine will upgrade itself without any further intervention.


#!/bin/sh -e

case $# in
0)  installurl=$(sed 's/#.*//;/^$/d' /etc/installurl) 2>/dev/null ||
installurl=https://ftp.openbsd.org/pub/OpenBSD
;;
1)  installurl=$1
;;
*)  echo "usage: ${0##*/} [server_URL]" >&2 ; exit 1 ;;
esac

arch=$(sysctl -n hw.machine)
urlbase=$installurl/snapshots/$arch

mkdir -p /home/upgrade
cd /home/upgrade
ftp "$urlbase/SHA256.sig"

version=$(sed -n 's/^SHA256 (base\([0-9]\{2,3\}\)\.tgz) .*/\1/p' SHA256.sig)
test -n "$version"
pubkey=/etc/signify/openbsd-$version-base.pub
signify -V -p "$pubkey" -x SHA256.sig -e -m /dev/null

sets=$(sed -e 's/^SHA256 (\(.*\)) .*/\1/' \
-e "/^INSTALL.$arch\$/p;/^bsd/p;/$version\.tgz\$/p;d" SHA256.sig)
ftp $(for i in $sets; do echo "$urlbase/$i"; done)
signify -C -p "$pubkey" -x SHA256.sig $sets
cp bsd.rd /bsd.upgrade
reboot


-- 
Christian "naddy" Weisgerber  na...@mips.inka.de



multiple keyboard with different layout in xorg (OpenBSD 6.4)

2019-04-24 Thread vincent delft
Hello,

I'm facing a small problem with my new dvorak keyboard connected to my
laptop (having an azerty keyboard).
I'm running OpenBSD 6.4

After having performed the following command:
> doas wsconsctl keyboard1.encoding=fr.dvorak

I'm able to use both keyboards on the console ;-)
On the laptop I'm well with Azerty and on the USB I'm well with dvorak.
Great   This is exactly what I'm looking for.

But when I'm starting Xorg (either xenodm or startx), both keyboards are in
dvorak.

If I'm using a linux machines, the command setxkbmap allow me to have both
keyboards in Xorg. The linux command is based on ID and is like this:
> setxkbmap -device 17 -layout fr -variant dvorak.

The ID is identified by the command
> xinput list

Unfortunately, in OpenBSD this xinput command always return the same
output.
It's like it does not see the USB keyboard. Despite I'm able to use it, but
not with the correct layout.

Here after the output
obsd-laptop:~$ xinput list
⎡ Virtual core pointer  id=2[master pointer
(3)]
⎜   ↳ Virtual core XTEST pointerid=4[slave  pointer
(2)]
⎜   ↳ /dev/wsmouse  id=7[slave  pointer
(2)]
⎣ Virtual core keyboard id=3[master keyboard
(2)]
↳ Virtual core XTEST keyboard   id=5[slave  keyboard
(3)]
↳ /dev/wskbdid=6[slave  keyboard
(3)]



I do not use a specific /etc/X11/xorg.conf file
My .xsession file is empty
My .xinitrc file is like this:

obsd-laptop:~$ more .xsession
.xsession: No such file or directory
obsd-laptop:~$ more .xinitrc
export LANG=en_US.UTF-8
exec openbox-session


The OpenBSD's man page about setxkbmap says:
*-device device* Specifies the numeric device id of the input device to be
updated with the new keyboard layout. If not specified, the core keyboard
device of the X server is updated.

How to get this ID ?

How to perform this multi keyboard setup in xorg (xenorca) ?
In which direction should I look for ?


Many thanks


OpenBSD 6.5

2019-04-24 Thread Mik J
Thank you for this new release and all of those who contributed.



Thinkpad X1 Carbon, losing trackpoint after sleep

2019-04-24 Thread Xavier R. Guerin
Hello,

I am following -current. I noticed that I am losing the trackpoint on my 
thinkpad X1 Carbon (2014) after sleep. I don't recall that behavior on 6.4. 
There is a fishy error in my Xorg that happens after resuming:

[ 70963.916] (EE) ws: /dev/wsmouse: GCALIBCOORS failed Inappropriate ioctl for 
device

Please find in attachment my dmesg and my Xorg.log.

Thanks,


dmesg
Description: Binary data
[19.873] (--) checkDevMem: using aperture driver /dev/xf86
[19.889] (--) Using wscons driver on /dev/ttyC4
[19.916] 
X.Org X Server 1.19.7
Release Date: 2019-03-02
[19.916] X Protocol Version 11, Revision 0
[19.916] Build Operating System: OpenBSD 6.5 amd64 
[19.916] Current Operating System: OpenBSD puffy 6.5 GENERIC.MP#20 amd64
[19.916] Build Date: 22 April 2019  05:07:44PM
[19.916]  
[19.916] Current version of pixman: 0.36.0
[19.916]Before reporting problems, check http://wiki.x.org
to make sure that you have the latest version.
[19.916] Markers: (--) probed, (**) from config file, (==) default setting,
(++) from command line, (!!) notice, (II) informational,
(WW) warning, (EE) error, (NI) not implemented, (??) unknown.
[19.916] (==) Log file: "/var/log/Xorg.0.log", Time: Tue Apr 23 12:08:42 
2019
[19.917] (==) Using config directory: "/etc/X11/xorg.conf.d"
[19.917] (==) Using system config directory 
"/usr/X11R6/share/X11/xorg.conf.d"
[19.919] (==) No Layout section.  Using the first Screen section.
[19.920] (==) No screen section available. Using defaults.
[19.920] (**) |-->Screen "Default Screen Section" (0)
[19.920] (**) |   |-->Monitor ""
[19.920] (==) No monitor specified for screen "Default Screen Section".
Using a default monitor configuration.
[19.921] (==) Automatically adding devices
[19.921] (==) Automatically enabling devices
[19.921] (==) Not automatically adding GPU devices
[19.921] (==) Max clients allowed: 256, resource mask: 0x1f
[19.921] (==) FontPath set to:
/usr/X11R6/lib/X11/fonts/misc/,
/usr/X11R6/lib/X11/fonts/TTF/,
/usr/X11R6/lib/X11/fonts/OTF/,
/usr/X11R6/lib/X11/fonts/Type1/,
/usr/X11R6/lib/X11/fonts/100dpi/,
/usr/X11R6/lib/X11/fonts/75dpi/
[19.921] (==) ModulePath set to "/usr/X11R6/lib/modules"
[19.921] (II) The server relies on wscons to provide the list of input 
devices.
If no devices become available, reconfigure wscons or disable 
AutoAddDevices.
[19.921] (II) Loader magic: 0x2cef3066000
[19.921] (II) Module ABI versions:
[19.921]X.Org ANSI C Emulation: 0.4
[19.921]X.Org Video Driver: 23.0
[19.921]X.Org XInput driver : 24.1
[19.921]X.Org Server Extension : 10.0
[19.922] (--) PCI:*(0:0:2:0) 8086:1616:17aa:2227 rev 9, Mem @ 
0xe000/16777216, 0xc000/536870912, I/O @ 0x3000/64
[19.922] (II) LoadModule: "glx"
[19.923] (II) Loading /usr/X11R6/lib/modules/extensions/libglx.so
[19.935] (II) Module glx: vendor="X.Org Foundation"
[19.935]compiled for 1.19.7, module version = 1.0.0
[19.935]ABI class: X.Org Server Extension, version 10.0
[19.935] (==) Matched modesetting as autoconfigured driver 0
[19.935] (==) Assigned the driver to the xf86ConfigLayout
[19.935] (II) LoadModule: "modesetting"
[19.935] (II) Loading /usr/X11R6/lib/modules/drivers/modesetting_drv.so
[19.936] (II) Module modesetting: vendor="X.Org Foundation"
[19.936]compiled for 1.19.7, module version = 1.19.7
[19.936]Module class: X.Org Video Driver
[19.936]ABI class: X.Org Video Driver, version 23.0
[19.936] (II) modesetting: Driver for Modesetting Kernel Drivers: kms
[19.944] (**) modeset(0): claimed PCI slot 0@0:2:0
[19.944] (II) modeset(0): using default device
[19.944] (WW) VGA arbiter: cannot open kernel arbiter, no multi-card support
[19.961] (II) modeset(0): Creating default Display subsection in Screen 
section
"Default Screen Section" for depth/fbbpp 24/32
[19.961] (==) modeset(0): Depth 24, (==) framebuffer bpp 32
[19.961] (==) modeset(0): RGB weight 888
[19.961] (==) modeset(0): Default visual is TrueColor
[19.961] (II) Loading sub module "glamoregl"
[19.961] (II) LoadModule: "glamoregl"
[19.963] (II) Loading /usr/X11R6/lib/modules/libglamoregl.so
[19.976] (II) Module glamoregl: vendor="X.Org Foundation"
[19.976]compiled for 1.19.7, module version = 1.0.0
[19.976]ABI class: X.Org ANSI C Emulation, version 0.4
[19.976] (II) glamor: OpenGL accelerated X.org driver based.
[20.011] (II) glamor: EGL version 1.4:
[20.025] (II) modeset(0): glamor initialized
[20.026] (II) modeset(0): Output eDP-1 has no monitor section
[20.026] (II) modeset(0): Output DP-1 has no monitor section
[20.028] (II) modeset(0): Output HDMI-1 has no monitor section
[20.029] (II) modeset(0): Output DP-2 has no monitor 

Re: Migrating smtpd from OpenBSD 6.3 to 6.4 problems

2019-04-24 Thread Edgar Pettijohn


On Apr 24, 2019 5:30 AM, Noth  wrote:
>
>
> On 24/04/2019 02:13, Edgar Pettijohn wrote:
> > On Apr 23, 2019 6:35 PM, Noth  wrote:
> >>
> >> On 23/04/2019 23:51, Edgar Pettijohn wrote:
> >>> On Apr 23, 2019 2:49 PM, Noth  wrote:
>  Hi,
> 
>       I'm trying to migrate my setups for smtpd+dovecot, and I'm about 
> half
>  there. The scenario is this:
> 
>  - OpenBSD client machines have smtpd set up to send the daily/weekly
>  mails to an address u...@example.org handled by central server also
>  running smtpd
> 
>  - Central server running OpenBSD with smtpd + dovecot for domain
>  example.org. Local mail is also delivered to u...@example.org
> 
>  I can mail u...@example.org using the u...@example.org mail account, and
>  mail from 6.3 machines is still coming in, but I don't receive mail from
>  the 6.4 machines. I'm a bit stumped as to what I've setup wrong here.
>  Any suggestions are welcome. All this was based on the old faq example
>  that was removed in 6.4. Dovecot config works fine.
> 
>  Maillog is full of these errors: result="524 5.2.4 Mailing list
>  expansion problem"
> 
> 
> 
>  Client machines smtpd.conf :
> 
>  listen on lo0
> 
>  table aliases file:/etc/mail/aliases
> 
>  action "relay" relay host "smtp://mail.example.org" tls no-verify
>  action "maildir" maildir alias 
> 
>  match from local for "example.org" action "relay"
>  match from local for local action "maildir"
> 
>  Client machines aliases file has the root entry modified like thus:
> 
>  root: u...@example.org
> 
> 
>  Server smtpd.conf:
> 
>  queue compression
> 
>  # pki setup
>  pki mail.example.org cert "/etc/ssl/mail.example.org.crt"
>  pki mail.example.org key "/etc/ssl/private/mail.example.org.key"
> 
>  # tables setup
>  table aliases file:/etc/mail/aliases
>  table domains file:/etc/mail/domains
>  table passwd passwd:/etc/mail/passwd
>  table virtuals file:/etc/mail/virtuals
> 
> 
>  # listen ports setup
>  listen on lo0
>  listen on egress port 25 tls pki mail.example.org auth-optional
>  listen on egress port submission tls-require pki mail.example.org auth
>  
> 
>  # special case for gmail to avoid ipv6 here
>  #limit mta for domain gmail.com inet4
> 

This looks fishy.

>  action "deliver" mda "/usr/libexec/mail.lmtp -d /var/dovecot/lmtp -f
>  %{sender} %{rcpt}" virtual 
>  action "deliver_local" mda "/usr/libexec/mail.lmtp -d
>  unix:/var/dovecot/lmtp" alias 
>  action "relay" relay
> 
>  match from any for domain  action "deliver"
>  match from any for local   action "deliver"
>  match from local for local action "deliver_local"
> 
> 
>  aliases file same as for clients
> 
>  domain file:
> 
>  example.org
> 
>  virtuals:
> 
>  ab...@example.org     u...@example.org
>  postmas...@example.org    u...@example.org
>  webmas...@example.org    u...@example.org
>  u...@example.org  vmail
> 
> 
> >>> Are the clients clients sending their mail and the server is having 
> >>> problems or vice versa?
> >> Actually the error is 550 invalid recipient because of
> >> r...@hostname.example.org instead of u...@example.org. Sorry about that
> >>
> > Follow the first example from smtpd.conf(5) and set up a "smart host relay" 
> > then set up the server to listen on 587 and authenticate. That should be 
> > the first step. I remember having a similar problem but I don't remember 
> > the exact solution.
> >
> > Edgar
>
> OK, using the example in the manpage for smtpd.conf, the client machines 
> are able to send to the correct address using this:
>
> listen on lo0
>
> table aliases file:/etc/mail/aliases
>
> action "relay" relay host "smtp://mail.example.org" tls no-verify
> action "local" maildir alias 
>
> match for local action "local"
> match for any action "relay"
>
>
> But the central server isn't able to process local mail ( I use 
> /etc/daily as the test). Using the following config, all I get is :
>
> Apr 24 12:19:56 hostname smtpd[35350]:  mda delivery 
> evpid=0301bf137eed1f11 from=<> to= 
> rcpt= user=vmail delay=0s result=PermFail 
> stat=Error ("smtpd: mda command line could not be expanded: No such file 
> or directory")
>
> It seems to either have a problem with my virtual file or with the 
> aliases one. I've tried redoing both to no avail. As you can see below I 
> tried using a different local to local delivery method but that had the 
> exact same error, which really puzzled me as no mda keyword is being 
> invoked, just lmtp!
>
>
> server conf (for tables, see above):
>
> pki mail.example.org cert "/etc/ssl/mail.example.org.crt"
> pki mail.example.org key "/etc/ssl/private/mail.example.org.key"
>
> 

Re: Migrating smtpd from OpenBSD 6.3 to 6.4 problems

2019-04-24 Thread Noth



On 24/04/2019 10:16, Bruno Flückiger wrote:

On 23.04., Noth wrote:

Hi,

   I'm trying to migrate my setups for smtpd+dovecot, and I'm about half
there. The scenario is this:

- OpenBSD client machines have smtpd set up to send the daily/weekly mails
to an address u...@example.org handled by central server also running smtpd

- Central server running OpenBSD with smtpd + dovecot for domain
example.org. Local mail is also delivered to u...@example.org

I can mail u...@example.org using the u...@example.org mail account, and
mail from 6.3 machines is still coming in, but I don't receive mail from the
6.4 machines. I'm a bit stumped as to what I've setup wrong here. Any
suggestions are welcome. All this was based on the old faq example that was
removed in 6.4. Dovecot config works fine.

Maillog is full of these errors: result="524 5.2.4 Mailing list expansion
problem"



Client machines smtpd.conf :

listen on lo0

table aliases file:/etc/mail/aliases

action "relay" relay host "smtp://mail.example.org" tls no-verify
action "maildir" maildir alias 

match from local for "example.org" action "relay"
match from local for local action "maildir"

Client machines aliases file has the root entry modified like thus:

root: u...@example.org


Server smtpd.conf:

queue compression

# pki setup
pki mail.example.org cert "/etc/ssl/mail.example.org.crt"
pki mail.example.org key "/etc/ssl/private/mail.example.org.key"

# tables setup
table aliases file:/etc/mail/aliases
table domains file:/etc/mail/domains
table passwd passwd:/etc/mail/passwd
table virtuals file:/etc/mail/virtuals


# listen ports setup
listen on lo0
listen on egress port 25 tls pki mail.example.org auth-optional
listen on egress port submission tls-require pki mail.example.org auth


# special case for gmail to avoid ipv6 here
#limit mta for domain gmail.com inet4

action "deliver" mda "/usr/libexec/mail.lmtp -d /var/dovecot/lmtp -f
%{sender} %{rcpt}" virtual 
action "deliver_local" mda "/usr/libexec/mail.lmtp -d
unix:/var/dovecot/lmtp" alias 
action "relay" relay

match from any for domain  action "deliver"
match from any for local   action "deliver"
match from local for local action "deliver_local"


aliases file same as for clients

domain file:

example.org

virtuals:

ab...@example.org     u...@example.org
postmas...@example.org    u...@example.org
webmas...@example.org    u...@example.org
u...@example.org  vmail



I had the same problem. I believe the root cause was that there is a
forward(5) for root that redirects all mails to my regular user. Adding
an alias for root seems to confuse smtpd if there is already a .forward
file. My solution was to create an alias for my regular user. The chain
is now:

root -> user -> u...@example.net

Cheers,
Bruno

I ajusted my mail aliases file and removed the .forward file but still 
doesn't work, see my other response.




Re: Migrating smtpd from OpenBSD 6.3 to 6.4 problems

2019-04-24 Thread Noth



On 24/04/2019 02:13, Edgar Pettijohn wrote:

On Apr 23, 2019 6:35 PM, Noth  wrote:


On 23/04/2019 23:51, Edgar Pettijohn wrote:

On Apr 23, 2019 2:49 PM, Noth  wrote:

Hi,

     I'm trying to migrate my setups for smtpd+dovecot, and I'm about half
there. The scenario is this:

- OpenBSD client machines have smtpd set up to send the daily/weekly
mails to an address u...@example.org handled by central server also
running smtpd

- Central server running OpenBSD with smtpd + dovecot for domain
example.org. Local mail is also delivered to u...@example.org

I can mail u...@example.org using the u...@example.org mail account, and
mail from 6.3 machines is still coming in, but I don't receive mail from
the 6.4 machines. I'm a bit stumped as to what I've setup wrong here.
Any suggestions are welcome. All this was based on the old faq example
that was removed in 6.4. Dovecot config works fine.

Maillog is full of these errors: result="524 5.2.4 Mailing list
expansion problem"



Client machines smtpd.conf :

listen on lo0

table aliases file:/etc/mail/aliases

action "relay" relay host "smtp://mail.example.org" tls no-verify
action "maildir" maildir alias 

match from local for "example.org" action "relay"
match from local for local action "maildir"

Client machines aliases file has the root entry modified like thus:

root: u...@example.org


Server smtpd.conf:

queue compression

# pki setup
pki mail.example.org cert "/etc/ssl/mail.example.org.crt"
pki mail.example.org key "/etc/ssl/private/mail.example.org.key"

# tables setup
table aliases file:/etc/mail/aliases
table domains file:/etc/mail/domains
table passwd passwd:/etc/mail/passwd
table virtuals file:/etc/mail/virtuals


# listen ports setup
listen on lo0
listen on egress port 25 tls pki mail.example.org auth-optional
listen on egress port submission tls-require pki mail.example.org auth


# special case for gmail to avoid ipv6 here
#limit mta for domain gmail.com inet4

action "deliver" mda "/usr/libexec/mail.lmtp -d /var/dovecot/lmtp -f
%{sender} %{rcpt}" virtual 
action "deliver_local" mda "/usr/libexec/mail.lmtp -d
unix:/var/dovecot/lmtp" alias 
action "relay" relay

match from any for domain  action "deliver"
match from any for local   action "deliver"
match from local for local action "deliver_local"


aliases file same as for clients

domain file:

example.org

virtuals:

ab...@example.org     u...@example.org
postmas...@example.org    u...@example.org
webmas...@example.org    u...@example.org
u...@example.org  vmail



Are the clients clients sending their mail and the server is having problems or 
vice versa?

Actually the error is 550 invalid recipient because of
r...@hostname.example.org instead of u...@example.org. Sorry about that


Follow the first example from smtpd.conf(5) and set up a "smart host relay" 
then set up the server to listen on 587 and authenticate. That should be the first step. 
I remember having a similar problem but I don't remember the exact solution.

Edgar


OK, using the example in the manpage for smtpd.conf, the client machines 
are able to send to the correct address using this:


listen on lo0

table aliases file:/etc/mail/aliases

action "relay" relay host "smtp://mail.example.org" tls no-verify
action "local" maildir alias 

match for local action "local"
match for any action "relay"


But the central server isn't able to process local mail ( I use 
/etc/daily as the test). Using the following config, all I get is :


Apr 24 12:19:56 hostname smtpd[35350]:  mda delivery 
evpid=0301bf137eed1f11 from=<> to= 
rcpt= user=vmail delay=0s result=PermFail 
stat=Error ("smtpd: mda command line could not be expanded: No such file 
or directory")


It seems to either have a problem with my virtual file or with the 
aliases one. I've tried redoing both to no avail. As you can see below I 
tried using a different local to local delivery method but that had the 
exact same error, which really puzzled me as no mda keyword is being 
invoked, just lmtp!



server conf (for tables, see above):

pki mail.example.org cert "/etc/ssl/mail.example.org.crt"
pki mail.example.org key "/etc/ssl/private/mail.example.org.key"

table aliases file:/etc/mail/aliases
table domains file:/etc/mail/domains
table passwd passwd:/etc/mail/passwd
table virtuals file:/etc/mail/virtuals

listen on lo0
listen on egress tls pki mail.example.org
listen on egress port submission tls-require pki mail.example.org auth 



action mda_with_aliases mda "/usr/libexec/mail.lmtp -d /var/dovecot/lmtp 
-f %{sender} %{rcpt}" alias 

#action lmtp-local lmtp localhost:25 alias 
action mda_without_aliases mda "/usr/libexec/mail.lmtp -d 
/var/dovecot/lmtp -f %{sender} %{rcpt}" virtual 


match for local action mda_with_aliases
#match for local action lmtp-local
match from any for domain  action mda_without_aliases



Re: Migrating smtpd from OpenBSD 6.3 to 6.4 problems

2019-04-24 Thread Bruno Flückiger
On 23.04., Noth wrote:
> Hi,
>
>   I'm trying to migrate my setups for smtpd+dovecot, and I'm about half
> there. The scenario is this:
>
> - OpenBSD client machines have smtpd set up to send the daily/weekly mails
> to an address u...@example.org handled by central server also running smtpd
>
> - Central server running OpenBSD with smtpd + dovecot for domain
> example.org. Local mail is also delivered to u...@example.org
>
> I can mail u...@example.org using the u...@example.org mail account, and
> mail from 6.3 machines is still coming in, but I don't receive mail from the
> 6.4 machines. I'm a bit stumped as to what I've setup wrong here. Any
> suggestions are welcome. All this was based on the old faq example that was
> removed in 6.4. Dovecot config works fine.
>
> Maillog is full of these errors: result="524 5.2.4 Mailing list expansion
> problem"
>
>
>
> Client machines smtpd.conf :
>
> listen on lo0
>
> table aliases file:/etc/mail/aliases
>
> action "relay" relay host "smtp://mail.example.org" tls no-verify
> action "maildir" maildir alias 
>
> match from local for "example.org" action "relay"
> match from local for local action "maildir"
>
> Client machines aliases file has the root entry modified like thus:
>
> root: u...@example.org
>
>
> Server smtpd.conf:
>
> queue compression
>
> # pki setup
> pki mail.example.org cert "/etc/ssl/mail.example.org.crt"
> pki mail.example.org key "/etc/ssl/private/mail.example.org.key"
>
> # tables setup
> table aliases file:/etc/mail/aliases
> table domains file:/etc/mail/domains
> table passwd passwd:/etc/mail/passwd
> table virtuals file:/etc/mail/virtuals
>
>
> # listen ports setup
> listen on lo0
> listen on egress port 25 tls pki mail.example.org auth-optional
> listen on egress port submission tls-require pki mail.example.org auth
> 
>
> # special case for gmail to avoid ipv6 here
> #limit mta for domain gmail.com inet4
>
> action "deliver" mda "/usr/libexec/mail.lmtp -d /var/dovecot/lmtp -f
> %{sender} %{rcpt}" virtual 
> action "deliver_local" mda "/usr/libexec/mail.lmtp -d
> unix:/var/dovecot/lmtp" alias 
> action "relay" relay
>
> match from any for domain  action "deliver"
> match from any for local   action "deliver"
> match from local for local action "deliver_local"
>
>
> aliases file same as for clients
>
> domain file:
>
> example.org
>
> virtuals:
>
> ab...@example.org     u...@example.org
> postmas...@example.org    u...@example.org
> webmas...@example.org    u...@example.org
> u...@example.org  vmail
>
>

I had the same problem. I believe the root cause was that there is a
forward(5) for root that redirects all mails to my regular user. Adding
an alias for root seems to confuse smtpd if there is already a .forward
file. My solution was to create an alias for my regular user. The chain
is now:

root -> user -> u...@example.net

Cheers,
Bruno