Inclusion in the list of providers OpenBSD

2023-07-04 Thread Gerd Theobald
Hi there, We would be happy to be included on your list as a German provider of OpenBSD courses and consulting. Here is the completed template: C Germany P Baden-Wrttemberg T Nrnberg Z D-90411 O New Elements / IT-Schulungen.com I Dr. Gerd Theobald A Thurn-und-Taxis-Str. 10 M

IPsec "road warrior" VPN not getting set up properly.

2023-07-04 Thread Anthony Coulter
Short version: I'm trying to set up a "road warrior"-style VPN like the one described at https://www.openbsd.org/faq/faq17.html but I'm trying to use IPv6 so I can have globally-routable addresses (so I'm not using NAT). So far I've gotten the initiator and the responder to set up a security

Re: ntpd and ppm

2023-07-04 Thread chohag
Theo de Raadt writes: > J Doe wrote: > > > On 2023-07-04 17:27, Martin Schröder wrote: > > > > > Am Di., 4. Juli 2023 um 23:20 Uhr schrieb J Doe > > > : > > >> I checked: man ntpd and: man 2 adjfreq, and while: man 2 adjfreq > > >> mentions the same unit - "ppm" - it doesn't explain what that

Re: ntpd and ppm

2023-07-04 Thread Theo de Raadt
J Doe wrote: > On 2023-07-04 17:27, Martin Schröder wrote: > > > Am Di., 4. Juli 2023 um 23:20 Uhr schrieb J Doe : > >> I checked: man ntpd and: man 2 adjfreq, and while: man 2 adjfreq > >> mentions the same unit - "ppm" - it doesn't explain what that means. > >> > >> What does "ppm" stand for

Re: ntpd and ppm

2023-07-04 Thread J Doe
On 2023-07-04 17:27, Martin Schröder wrote: Am Di., 4. Juli 2023 um 23:20 Uhr schrieb J Doe : I checked: man ntpd and: man 2 adjfreq, and while: man 2 adjfreq mentions the same unit - "ppm" - it doesn't explain what that means. What does "ppm" stand for ? microseconds per second. Hi

Re: ntpd and ppm

2023-07-04 Thread Martin Schröder
Am Di., 4. Juli 2023 um 23:20 Uhr schrieb J Doe : > I checked: man ntpd and: man 2 adjfreq, and while: man 2 adjfreq > mentions the same unit - "ppm" - it doesn't explain what that means. > > What does "ppm" stand for ? microseconds per second.

Re: ntpd and ppm

2023-07-04 Thread Theo de Raadt
J Doe wrote: > Hi, > > I noticed when: ntpd logs time adjustments in: /var/log/daemon it uses a > unit of "ppm": > > Jun 22 23:22:20 server ntpd[45813]: adjusting clock frequency by > -1.127600 to 0.056400ppm > > I checked: man ntpd and: man 2 adjfreq, and while: man 2 adjfreq >

ntpd and ppm

2023-07-04 Thread J Doe
Hi, I noticed when: ntpd logs time adjustments in: /var/log/daemon it uses a unit of "ppm": Jun 22 23:22:20 server ntpd[45813]: adjusting clock frequency by -1.127600 to 0.056400ppm I checked: man ntpd and: man 2 adjfreq, and while: man 2 adjfreq mentions the same unit - "ppm" - it

Restart of syslogd every three hours ?

2023-07-04 Thread J Doe
Hi, I have a question about an OpenBSD 7.3 host that has syspatches up to today (July 4, 2023). I noticed in: /var/log/messages that the: syslogd process is restarting every three hours: /var/log/messages Jun 18 11:00:01 server syslogd[83783]: restart Jun 18 14:00:01

Re: dhcpleased[59824]: sendto: Permission denied

2023-07-04 Thread Zack Newman
On 7/4/23 12:41, Otto Moerbeek wrote: That may be true for reading dhcp packets, but in some cases dhcpleased sends UDP datagram lika any ordinary program, for other cases it uses BPF for sending. As the error reported is for sending, it *is* possible that pf plays a role. -Otto I know

Re: dhcpleased[59824]: sendto: Permission denied

2023-07-04 Thread Otto Moerbeek
On Mon, Jul 03, 2023 at 10:34:24AM -0600, Zack Newman wrote: > On 7/3/23 11:25, Mark wrote: > > I'm getting (I think once per day) "dhcpleased[59824]: sendto: Permission > > denied" error message in my daemon and messages log files. > > > > I think that's happening due to my PF configuration. >

Re: dhcpleased[59824]: sendto: Permission denied

2023-07-04 Thread Zack Newman
On 7/4/23 11:51, Mark wrote: Hi again, thanks for your detailed and very informative reply, Zack. Much appreciated! I wanted to re-try the fact (memories), on FreeBSD 13.2-RELEASE-p1; I removed the pass line from my pf.conf; "pass log quick on $ext_if proto udp from any to any port = 67"

Re: dhcpleased[59824]: sendto: Permission denied

2023-07-04 Thread Mark
Hi again, thanks for your detailed and very informative reply, Zack. Much appreciated! I wanted to re-try the fact (memories), on FreeBSD 13.2-RELEASE-p1; I removed the pass line from my pf.conf; "pass log quick on $ext_if proto udp from any to any port = 67" reloaded PF, then dmesg -a showed;

Re: Data source of record.bytes in audioctl

2023-07-04 Thread Ricky Cintron
On 2023-07-04 12:00, Alexandre Ratchov wrote: On Mon, Jul 03, 2023 at 05:18:13PM -0400, Ricky Cintron wrote: While troubleshooting some audio issues, I noticed that the values of play.bytes and record.bytes in audioctl's output were identical, even when only playing audio. 1) Is this expected

Re: OpenBSD 7.3 and some old IA32 CPUs

2023-07-04 Thread Anton Borisov
On 7/4/23, Scott Cheloha wrote: >> On Jun 28, 2023, at 13:26, Anton Borisov wrote: >> >> Hi all, >> >> here's sysctl extracts from Rise iDragon, IDT WinChip C6/2A running >> OpenBSD 7.3. All seems quite stable. > > Interesting. Can you post a full dmesg for each of these? > > OpenBSD 7.3

Re: Block network access completely for certain programs

2023-07-04 Thread Zack Newman
On 7/4/23 10:16, Kapetanakis Giannis wrote: pf.conf(5) has option for user user user This rule only applies to packets of sockets owned by the specified user. For outgoing connections initiated from the firewall, this is the user that opened the

Re: Question regarding pf rules: block in on em0: ...

2023-07-04 Thread Zack Newman
On 7/4/23 10:36, "Why 42? The lists account.": While trying to debug the issue, it occurred to me that it could be a network / pf problem. This doesn't seem to be the issue though, even after I disable pf (pfctl -d), the scanner is still not seen. However, running "tcpdump -n -e -ttt -i

Re: Block network access completely for certain programs

2023-07-04 Thread Kapetanakis Giannis
On 04/07/2023 16:08, r...@danwin1210.de wrote: How do I block the network access completely for a certain program with a blacklist or whitelist, whitelist prefered, with OpenBSD's pf(4)? My pdf reader, music player, video player, vim and much more shouldnt have access to networking at all. I

Re: Block network access completely for certain programs

2023-07-04 Thread prx
You may use a different rdomain? Le 4 juillet 2023 15:08:35 GMT+02:00, r...@danwin1210.de a écrit : >How do I block the network access completely for a certain program with a >blacklist or whitelist, whitelist prefered, with OpenBSD's pf(4)? My pdf >reader, music player, video player, vim and

Re: Data source of record.bytes in audioctl

2023-07-04 Thread Alexandre Ratchov
On Mon, Jul 03, 2023 at 05:18:13PM -0400, Ricky Cintron wrote: > While troubleshooting some audio issues, I noticed that the values of > play.bytes and record.bytes in audioctl's output were identical, even > when only playing audio. > > 1) Is this expected behavior? yes, by default the device

Re: Block network access completely for certain programs

2023-07-04 Thread Zack Newman
On 7/4/23 13:08, rat1 wrote: How do I block the network access completely for a certain program with a blacklist or whitelist, whitelist prefered, with OpenBSD's pf(4)? My pdf reader, music player, video player, vim and much more shouldnt have access to networking at all. I remember it being

Re: dhcpleased[59824]: sendto: Permission denied

2023-07-04 Thread Zack Newman
On 7/3/23 21:14, Mark wrote: I really do remember, under FreeBSD, I was having a similar "dmesg -a" output telling about DHCP's permission denied issue, and finally I solved it with a pass rule like: "pass log quick on $ext_if proto udp from any to any port = 67 keep state" in

Block network access completely for certain programs

2023-07-04 Thread rat1
How do I block the network access completely for a certain program with a blacklist or whitelist, whitelist prefered, with OpenBSD's pf(4)? My pdf reader, music player, video player, vim and much more shouldnt have access to networking at all. I remember it being possible with the Windows firewall

Question regarding pf rules: block in on em0: ...

2023-07-04 Thread Why 42? The lists account.
Hi All, I just noticed that "simple-scan" no longer discovers my scanner. While trying to debug the issue, it occurred to me that it could be a network / pf problem. This doesn't seem to be the issue though, even after I disable pf (pfctl -d), the scanner is still not seen. However, running

Re: APCI on old Thinkpad

2023-07-04 Thread Michael Hekeler
Am 03.07.23 22:45 schrieb Claudio Jeker: > Also keep in mind that laptops that old most often had bad or broken early > ACPI implementations and it was better to not enable ACPI on those. > Normally there was some BIOS knob to just use apm(4) which often worked > much better. Ah - very

Re: APCI on old Thinkpad

2023-07-04 Thread Michael Hekeler
> Jul 3, 2023 14:47:57 Peter N. M. Hansteen : > > > I had to look this up, since I had forgotten that Thinkpads used to come > with model numbers not prefixed and/or postfixed with letters. > > I think one of several issues you will bump into is that the machine is > almost a quarter century

Re: OpenBSD 7.3 and some old IA32 CPUs

2023-07-04 Thread Scott Cheloha
> On Jun 28, 2023, at 13:26, Anton Borisov wrote: > > Hi all, > > here's sysctl extracts from Rise iDragon, IDT WinChip C6/2A running > OpenBSD 7.3. All seems quite stable. Interesting. Can you post a full dmesg for each of these?

Re: unwind[92074]: bad packet: too large?

2023-07-04 Thread Florian Obser
On 2023-07-04 00:17 +03, Mark wrote: > Hi there. > > I'm getting this one in daemon/messages log files: > > Jul 3 20:52:53 unwind[92074]: bad packet: too large: 65552 - > 1.0.0.127.bl.blocklist.de. IN A > Jul 3 20:52:53 last message repeated 4 times > > What does that mean? The nameservers for