incorrect pf rule?

2020-11-28 Thread Родин Максим
Hello I have a small 5 year old home router (upgraded to OpenBSD 6.8 stable) with a static white IP from my internet provider (gotten by dhcp) and a simple http/https server (OpenBSD httpd) in my network using VirtualBox VM (OpenBSD 6.8) which has a static IP 192.168.1.102. The http server is

Re: ldapd.conf certificate directive not working?

2020-11-28 Thread Jonathan Matthew
On Sun, Nov 29, 2020 at 12:23:51AM +0100, Theo Buehler wrote: > On Sun, Nov 29, 2020 at 12:00:29AM +0100, Martijn van Duren wrote: > > On Sat, 2020-11-28 at 23:08 +0100, Theo Buehler wrote: > > > > "If the certificate name is an absolute path, a .crt and .key > > > > extension are appended to form

Re: ldapd.conf certificate directive not working?

2020-11-28 Thread Theo Buehler
On Sun, Nov 29, 2020 at 12:00:29AM +0100, Martijn van Duren wrote: > On Sat, 2020-11-28 at 23:08 +0100, Theo Buehler wrote: > > > "If the certificate name is an absolute path, a .crt and .key > > > extension are appended to form the certificate path and key path > > > respectively." > > > This

Re: ldapd.conf certificate directive not working?

2020-11-28 Thread Martijn van Duren
On Sat, 2020-11-28 at 23:08 +0100, Theo Buehler wrote: > > "If the certificate name is an absolute path, a .crt and .key > > extension are appended to form the certificate path and key path > > respectively." > > This part does not seem to work at all. > > Neither it tries to search certificates

Re: ldapd.conf certificate directive not working?

2020-11-28 Thread Theo Buehler
> "If the certificate name is an absolute path, a .crt and .key > extension are appended to form the certificate path and key path > respectively." > This part does not seem to work at all. > Neither it tries to search certificates using the absolute path nor > it tries to append .crt or .key

Re: pflogd: Corrupted log file, move it away

2020-11-28 Thread Jan Stary
On Nov 28 16:13:35, s...@spacehopper.org wrote: > On 2020-11-27, Harald Dunkel wrote: > > Hi folks, > > > > I got a bazillion of error messages in /var/log/daemon > > > >: > > Nov 27 08:33:25 gate6a pflogd[26893]: Corrupted log file. > > Nov 27 08:33:25 gate6a pflogd[26893]: Invalid/incompatible

Re: Reinstall to upgrade

2020-11-28 Thread Gregory Edigarov
On 11/25/20 3:26 PM, Manuel Giraud wrote: > Hi, > > I'd like to upgrade (on -current) and, in the process, remove some cruft > accumulated over the years. I usually do sysupgrade and sysclean for > system. > > But for packages, I think I would be better to reinstall everything > since

Recommendations regarding configuring IPv6 for the first time

2020-11-28 Thread Erik Lauritsen
Hi, I'm slowly beginning to look at IPv6 in preparations for my ISP to roll out IPv6. Currently I'm running an IPv4 LAN with physically segmented networks. I'm using dhcpd with fixed IP addresses based upon MAC, and have these setup in Unbound as well, as I have many clients and don't want to

Re: development best practices

2020-11-28 Thread Stuart Henderson
Your i3status problem with an out-of-ports build is probably because the configure script runs "make" with a file that has GNU make syntax. Running it with "MAKE=gmake" in the environment fixes this (this is one of many things that are set automatically by the ports infrastructure). On

Re: pflogd: Corrupted log file, move it away

2020-11-28 Thread Stuart Henderson
On 2020-11-27, Harald Dunkel wrote: > Hi folks, > > I got a bazillion of error messages in /var/log/daemon > >: > Nov 27 08:33:25 gate6a pflogd[26893]: Corrupted log file. > Nov 27 08:33:25 gate6a pflogd[26893]: Invalid/incompatible log file, move it > away > Nov 27 08:33:25 gate6a

Re: development best practices

2020-11-28 Thread Hannu Vuolasaho
la 28. marrask. 2020 klo 16.11 Stefan Sperling (s...@stsp.name) kirjoitti: > You can then extract your fix and apply it to an upstream development tree. > If additional patches are required to get the software to compile, you > might as well attempt to upstream those changes, too, while at it. >

Re: pflogd: Corrupted log file, move it away

2020-11-28 Thread Jan Stary
On Nov 27 09:02:04, harald.dun...@aixigo.com wrote: > Hi folks, > > I got a bazillion of error messages in /var/log/daemon > > : > Nov 27 08:33:25 gate6a pflogd[26893]: Corrupted log file. > Nov 27 08:33:25 gate6a pflogd[26893]: Invalid/incompatible log file, move it > away Last time I had

Re: pflogd: Corrupted log file, move it away

2020-11-28 Thread Jan Stary
On Nov 27 09:02:04, harald.dun...@aixigo.com wrote: > Hi folks, > > I got a bazillion of error messages in /var/log/daemon > > : > Nov 27 08:33:25 gate6a pflogd[26893]: Corrupted log file. > Nov 27 08:33:25 gate6a pflogd[26893]: Invalid/incompatible log file, move it > away > Nov 27 08:33:25

Re: development best practices

2020-11-28 Thread Stefan Sperling
On Sat, Nov 28, 2020 at 12:27:47PM +, björn gohla wrote: > hi all, > > i'm fairly new to openbsd. and i've run into the following problem, > where i want to hack a project (most recently trying to fix a possible > issue with i3status), but building the from the git source > tree fails. > >

ldapd.conf certificate directive not working?

2020-11-28 Thread Родин Максим
Hello When I use the following directive in ldapd.conf: 1) ... listen on em0 ldaps ... or ... listen on em0 tls ... and the certificate (em0.crt) and key (em0.key) files are in /etc/ldap/certs, then "ldapd -n" shows OK. When I use: 2) ... listen on em0 ldaps certificate

Re: development best practices

2020-11-28 Thread Ingo Schwarze
Hi Bjoern, bjoern gohla wrote on Sat, Nov 28, 2020 at 12:27:47PM +: > i'm fairly new to openbsd. and i've run into the following problem, > where i want to hack a project (most recently trying to fix a possible > issue with i3status), but building the from the git source > tree fails. > >

development best practices

2020-11-28 Thread björn gohla
hi all, i'm fairly new to openbsd. and i've run into the following problem, where i want to hack a project (most recently trying to fix a possible issue with i3status), but building the from the git source tree fails. now, in the specific case, i'm trying to build a version that, also exists in

Re: Large Filesystem

2020-11-28 Thread infoomatic
On 28.11.20 05:51, Nick Holland wrote: > I've heard that from a lot of people. > And yet, those same people, when pressed, will tell you that a ZFS-equipped > system will crash much more often than simpler file systems. That's one > heck of a real penalty to pay for a theoretical advantage. > >