Re: unbound/dns issue (malformed packets?)

2019-09-15 Thread Peter J. Philipp
Hi Joe, The domain whatsapp.com doesn't guarantee integrity to you (they have dnssec turned off, at least last I checked). It's possible that someone got in your middle and inserted a bogus record. This being said I'M ignorant to the fact that nlnetlabs have changed their internal database, so

unbound/dns issue (malformed packets?)

2019-09-15 Thread Joe Barnett
I've been seeing some issues which I believe to be related to dns/resolving. The short of it is that the results of # dig web.whatsapp.com start out as: ; <<>> DiG 9.4.2-P2 <<>> web.whatsapp.com ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57

Re: How can I remove sets installed by sysupgrade?

2019-09-15 Thread chohag
Judah Kocher writes: > My router is headless. I have never run into an issue where I have > needed anything from the X sets Apparently you just did. > Therefore it seems like sound logic to not have those > bits and bytes present on the system so any > mis-configurations/bugs/vulnerabilities

Re: How can I remove sets installed by sysupgrade?

2019-09-15 Thread Judah Kocher
Thanks for the replies and ideas. I was introduced to OpenBSD after an acquaintance had their home router compromised in 2016 and I started looking into network hardening/security. In my research trying to find the best firewall that didn't require purchasing commercial hardware/licensing I fo

authpf unable to exit ssh without control C

2019-09-15 Thread shadrock uhuru
hi everyone i can login with authpf but unable to exit or control D out of the ssh session the only way out is to control C which also kills any other ordinary ssh user connected to the server my authpf user has authpf as its login shell and login class, is this normal behaviour  ? shadrock

Re: How can I remove sets installed by sysupgrade?

2019-09-15 Thread Stuart Henderson
On 2019-09-15, Judah Kocher wrote: > Thanks to the OpenBSD team for their awesome software! > > I have been running an Openbsd router for a few years now, mostly > following current. Today I decided to try out sysupgrade rather than > going through the usual manual process. I've read up on it a

Re: How can I remove sets installed by sysupgrade?

2019-09-15 Thread chohag
Marcus MERIGHI writes: > please do *not* copy/paste/run this command! > something along these lines for the sets you did not want: > > $ ftp -MVo- $( tzf - | xargs rm > > you are aware that it is recommended to run with all sets? Despite previous posts requesting assistance with not doing so,