openup vs. syspatch vs. pkg_add -u ?

2017-05-14 Thread Adam Thompson
Now that we’re in the wonderful world of syspatch(8) – which works well for me so far (thanks for the hard work, everyone!), I’m trying to figure out if there’s still any point to using m:tier’s openup tool. >From what I can tell, running “syspatch ; pkg_add -u” is pretty much >equivalent to wh

Does pf support NPT (RFC6296) ?

2017-05-15 Thread Adam Thompson
I still haven't found this answer anywhere... Does OpenBSD (more specifically, pf(4), I guess) support RFC 6296, IPv6-to-IPv6 Network Prefix Translation? Looks like FreeBSD can do it, but I can't tell if that's something they added to their own pf fork, or if I'm just missing something in the

Re: Does pf support NPT (RFC6296) ?

2017-05-16 Thread Adam Thompson
> > I know I can do NAT66, but I don't think it's feasible to emulate NPT > > using NAT66 rules. > > No, NPT is different and can't be emulated by anything that OpenBSD's > PF currently does. Shoot. I was really hoping pfSense managed it through some feature that predated FreeBSD's pf(4) import

inet6 nat-to (group) address selection algorithm question

2017-05-18 Thread Adam Thompson
So I’ve discovered that, when trying to do NAT66 (for a ULA network), a line like: "match out on egress inet6 from !(egress:network) to any nat-to (egress:0)" doesn’t work. (Yes, the network in this case is ridiculously simple.) I believe it doesn’t work because :0 indicates that aliases on the

OpenBSD 6.1 is now supported on Microsoft Azure

2017-06-11 Thread Adam Thompson
Maybe I missed the email here, but in case it actually doesn't exist: OpenBSD 6.1 is now supported on Microsoft Azure courtesy of reyk@ and the team over at Esdenera® Networks, with assistance from Microsoft. At least that's what I got out of the BSDCan announcement. I'll let Reyk blow his o

Re: Doubts about the successors of OpenBSD leadership and development

2017-07-10 Thread Adam Thompson
> From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf Of > Stefan Sperling > Sent: July 10, 2017 16:17 > Subject: Re: Doubts about the successors of OpenBSD leadership and development > > Obviously, Theo de Raadt will succeed Theo de Raadt in the leadership > and development of

Re: Virtualbox vs latest snapshot

2018-04-26 Thread Adam Thompson
On 2018-04-12 20:02, Nick Holland wrote: On 04/12/18 09:47, Consus wrote: On 08:28 Thu 12 Apr, Nick Holland wrote: Another "failure mode" of VirtualBox people should be aware of: I understand through good sources, Oracle monitors the IP addresses that it's downloaded from, and if they can trac

Re: Viewport for man.openbsd.org -- readability on phones

2018-05-24 Thread Adam Thompson
On 2018-05-19 02:59, justina colmena wrote: https://man.openbsd.org/mandoc.css That's the css. You style it how you like it. That's the whole point of it. And I agree. It's very readable on my phone. Original message From: Mihai Popescu Date: 5/18/18 11:04 PM (GMT-09:00) To: m

Re: supported Audio card with SPDIF input

2018-07-25 Thread Adam Thompson
On 2018-07-24 17:54, Diana Eichert wrote: ok, answered my own question by grep'ng within /usr/share/man/man4, looks like azalia(4) systems. Was hoping for something usb attached but no such luck. On Tue, 24 Jul 2018, Diana Eichert wrote: I'm trying to connect to an audio system that only has S

Re: Best way to serve files to Windows?

2018-07-25 Thread Adam Thompson
On 2018-07-18 09:35, Tom Smyth wrote: Hi John, You would need microsoft services for unix (SFU) for NFS connectivity FYI - so no-one goes haring off in the wrong direction. SFU is the server-side component, equivalent to running nfsd(8). On the client side, only certain editions of Windows ca

recommended h/w for fanless audio-out?

2018-11-11 Thread Adam Thompson
Hello, I’d like to use OpenBSD to build a MIDI synthesizer using SoundFonts, as the OpenBSD MIDI and audio subsystems are remarkably understandable and sane, compared to everything else out there today. � However, I’m having difficulty finding a combination of hardware that is known to be su

Re: mount dir over another dir

2020-04-16 Thread Adam Thompson
On 2020-04-16 02:13, Ono Caritofilaxy wrote: Hello. I want to mount /usr/local/srcdir /usr/local/dstdir/subdir answer was "no" 3 years ago https://marc.info/?l=openbsd-misc&m=149743861203607&w=2 Can I do this now? If not - why? Is it dangerous? You should be able to do this as an NFS mount.

RCS file ownership?

2020-04-29 Thread Adam Thompson
When I use co(1) with "-l" to check out a file (and/or "ci -l") is there any way to preserve file ownership and *not* have it reset to the user running co(1) or ci(1)? I don't see anything in rcs(1), co(1) or ci(1) that even mentions the fact that the file will wind up owned by the user running

Re: RCS file ownership?

2020-04-30 Thread Adam Thompson
change the ownership.-Adam > On Apr. 29, 2020 13:32, Anders Andersson wrote: > > On Wed, Apr 29, 2020 at 7:46 PM Adam Thompson > wrote: > > > > When I use co(1) with "-l" to check out a file (and/or "ci -l") is > there > >

Re: Postscript printer recommendations

2019-07-14 Thread Adam Thompson
On 2019-07-14 15:40, Stuart Henderson wrote: If you don't want trackable prints, don't buy a colour laser printer of any brand, it is very common. Unsure about mono and inkjet printers, I would tend to assume that they're common on at least most hi-res colour printers. Nearly every printer sold

ipv6 nmap breakage under 6.5-STABLE ?

2019-07-22 Thread Adam Thompson
Hi, [Cross-posted to misc & ports as I'm not sure if there's a bug in software or in wetware.] I'm trying to run nmap (from ports) on 6.5-STABLE but am getting an ungoogle-able error message every time: root@bgpmirror:~# nmap -Pn -A -n --top-ports=100 -6 2620:132:300e:700::113 Starting

Re: ipv6 nmap breakage under 6.5-STABLE ?

2019-07-22 Thread Adam Thompson
On 2019-07-22 09:51, Adam Thompson wrote: Hi, [Cross-posted to misc & ports as I'm not sure if there's a bug in software or in wetware.] I'm trying to run nmap (from ports) on 6.5-STABLE but am getting an ungoogle-able error message every time: Forgot to mention - this o

Re: SCM

2019-07-23 Thread Adam Thompson
On 2019-07-23 12:43, Stuart Henderson wrote: On 2019-07-22, Stefan Sperling wrote: If your university class prefers using git, I'd recommend the repository at https://github.com/openbsd/src. However, it doesn't include branches/tags, because we haven't found anything that is able to succes

help understanding cua/tty EBUSY behaviour?

2019-08-03 Thread Adam Thompson
Summary: I open cua0 with cu(1), quit cu(1), try to re-open with cu(1) but now it immediately fails with EBUSY. *Usually* doesn't happen with USB-to-serial (cuaU[0-9]) but have still seen it once or twice. I've seen this behaviour on OpenBSD 6.4, OpenBSD 6.5, and FreeBSD 11.2, and on 3 radic

Re: help understanding cua/tty EBUSY behaviour?

2019-08-07 Thread Adam Thompson
On 2019-08-03 18:14, Theo de Raadt wrote: Adam Thompson wrote: Summary: I open cua0 with cu(1), quit cu(1), try to re-open with cu(1) but now it immediately fails with EBUSY. *Usually* doesn't happen with USB-to-serial (cuaU[0-9]) but have still seen it once or twice. [...] Yo

bgpctl(8) community question

2019-10-07 Thread Adam Thompson
[OpenBSD 6.5-STABLE, up to date] When using bgpctl(8), I'm able to do almost everything I need, but I'm having trouble figuring out how to do one thing: How do I show routes that do NOT have a community (or ext-community, or large-community) attribute? The best I can come up with so far is

Re: Tools for writers

2019-11-06 Thread Adam Thompson
On 2019-11-02 11:14, Peter Nicolai Mathias Hansteen wrote: 2. nov. 2019 kl. 16:00 skrev Oliver Leaver-Smith : What tools do people find useful for writing on OpenBSD? By writing I mean long form such as novels and technical books, including plot and character development, outlining, and format

Re: Is there an easier way to browse ports?

2019-11-06 Thread Adam Thompson
On 2019-11-01 06:12, Mischa wrote: On 1 Nov 2019, at 12:08, Alfred Morgan wrote: My current workflow looks something like this: $ cd /usr/ports $ make print-index | less I search and scroll through and find something interesting such as opensonic. I read the Info: game based on the Sonic the H

Re: Is there an easier way to browse ports?

2019-11-07 Thread Adam Thompson
Oh, ok... Do you recall an example offhand? (I haven't noticed systemic problems with either, but then I'm hardly a ports expert!)Thanks,-Adam On Nov. 7, 2019 07:18, Marc Espie wrote: On Wed, Nov 06, 2019 at 04:44:48PM -0600, Adam Thompson wrote: > Also http://openports

Re: Is there an easier way to browse ports?

2019-11-07 Thread Adam Thompson
Ah, there's a good answer to the question I just asked Marc, thanks!-Adam

password-less user (without bothering security(8))?

2019-12-10 Thread Adam Thompson
Hi, On 6.6-STABLE, I'm looking at security(8) and it's not immediately obvious to me how I can have an SSH key-only user who does not have a password, that also does not trigger daily security warnings. The goal is to have a user that can never log in on the console, or via password any other

syspatch(8) return values?

2020-01-31 Thread Adam Thompson
There's no mention of what syspatch(8) returns, in the manpage. I can prove quickly enough that it exits(0) when there's nothing to do, but I'm more interested in knowing (for automation purposes) what the return values are in other circumstances, and all my systems are already up to date. Be

Re: suggestions for USB printer (maybe even with scanner)?

2020-02-05 Thread Adam Thompson
On 2020-02-05 13:56, Claus Assmann wrote: I need to buy a printer to connect to one of my OpenBSD machines and I prefer a USB connection (as I don't control the network at my current place). Can I just buy any USB printer or are there printers which do not work with OpenBSD? If so, what do I nee

Re: Dell Latitude e6400 OpenBSD Drive Issue

2020-02-09 Thread Adam Thompson
On 2020-02-09 06:58, Michael G Workman wrote: Hello, Shout out to the OpenBSD developers for making a great OS! I was able to install OpenBSD 6.6 on a Dell Latitude e6400 laptop, with a USB Install. Sent the dmesg in already. The installer would not recognize the hard drive, a brand new SSD

Re: Dell Latitude e6400 OpenBSD Drive Issue

2020-02-10 Thread Adam Thompson
On 2020-02-10 09:36, Michael G Workman wrote: Ok, thanks for the info. For your E6400, see this guide: https://www.parts-people.com/blog/2012/10/16/dell-latitude-e6420-cmos-battery-removal-and-installation/ I found E6400 CMOS batteries from multiple vendors on the first page of Google resul

Re: syspatch(8) return values?

2020-02-10 Thread Adam Thompson
On 2020-02-08 06:03, Antoine Jacoutot wrote: On Fri, Jan 31, 2020 at 09:03:59AM -0600, Adam Thompson wrote: There's no mention of what syspatch(8) returns, in the manpage. I can prove quickly enough that it exits(0) when there's nothing to do, but I'm more interested

door handles

2020-02-21 Thread Adam Thompson
None of the Taymor levers are quite right. So I went looking, and I found some of what I'm looking for. Short list: (top pick) 1. Omnia 762, plus privacy bolt. I love it but holy shit that's expensive @ ~US$180ea! https://www.omniaindustries.com/product/762/ 2. Rocky Mountain Hardware'

Re: What hardware spec would I need to push 20 gigabit of network traffic on an OpenBSD server?

2015-10-27 Thread Adam Thompson
On 15-10-25 03:46 AM, Some Developer wrote: I'm just wondering what hardware spec I'd need push 20 gigabits of network traffic on an OpenBSD server? Short answer: It's not generally possible today, at least for your use case. Medium answer: Contact Esdenera Networks to find out. They mana

[OT] Re: What hardware spec would I need to push 20 gigabit of network traffic on an OpenBSD server?

2015-10-27 Thread Adam Thompson
On 15-10-27 02:53 PM, Martin Schröder wrote: And then there are SSDs. PCIE SSDs do up to 3000 MB/s write throughput. https://www-ssl.intel.com/content/www/us/en/solid-state-drives/solid-state-drives-dc-p3608-series.html And I'm sure there are tape libraries that can write that, too. :-) I disre

Re: What hardware spec would I need to push 20 gigabit of network traffic on an OpenBSD server?

2015-10-28 Thread Adam Thompson
Thank you for the reply. I see now that my request was wildly unrealistic. Not "wildly", just unrealistic unless you have a massive budget. Basically I'm trying to write a business plan and am trying to plan for the worst case scenario so I don't fall over if traffic somehow spikes to such lev

Re: pfctl -f /etc/pf.conf fails on boot when DNS-resolved symbolic names are used

2015-11-10 Thread Adam Thompson
On 15-11-10 01:45 PM, Giancarlo Razzolini wrote: As a general rule you should avoid using dns names on anything that might cause the boot process to fail. Even more, you should really avoid using names on hostname.if files. Anybody run into this before? - is the fix to add all the symbolic na

Re: Problem with CARP interfaces not responding until VHID is changed.

2016-01-22 Thread Adam Thompson
On 16-01-21 04:02 PM, rizz2pro . wrote: I know the CARP interface's MAC address is generated by the VHID so I am sort of leaning towards it be an ARP issue and possibly not an issue with the OBSD system. But I am hoping for some hints or ideas from you guys. I have a suspicion... what kind of swi

Re: VAX - are we dropping support in 5.9?

2016-01-25 Thread Adam Thompson
On 16-01-23 08:34 PM, Ted Unangst wrote: I will add that one of the reasons we have support for all these museum pieces is that people can build their very own museum and run something interesting on it. But running on emulators doesn't really satisfy that goal. If there are, in fact, no museum

[PATCH INCLUDED] Re: Problem with CARP interfaces not responding until VHID is changed.

2016-01-25 Thread Adam Thompson
On 16-01-25 03:43 PM, rizz2pro . wrote: > Ok we've figured it out. > > We have a couple identical environments all attached to one switch and > they are all advertising the same VHIDs to each other and it looks to > be causing some arp problems. (Environment A was getting CARP > advertisements from

Re: Willing to help

2016-01-26 Thread Adam Thompson
On 16-01-26 10:32 AM, Peter Hessler wrote: On 2016 Jan 26 (Tue) at 08:13:22 -0600 (-0600), Edgar Pettijohn wrote: :> * adduser(8)/useradd(8): :> Needs to be unified into one single One binary, with symlinks. Both methods should still work, however. $0.02: s/sym/hard /g might satisfy a

Re: Can I accelerate my magnet HDD using a SSD in any way?? E.g. softraid patch/ARC, dedicated hardware e.g. Intel RCS25ZB040LX="Nytro MegaRAID", anything

2016-02-01 Thread Adam Thompson
On 16-02-01 12:19 PM, Tinker wrote: My purpose with asking for SSD-accelerated HDD was DOUBLE: 1) I need some SSD storage but don't like that it could break together - I mean, a bug in your system will feed your SSD at full bandwidth for ~7h-7 days, it's completely fried - that's not OK, so

Re: OpenBSD SPARC T4-1 softraid boot issues

2017-12-28 Thread Adam Thompson
On 2017-12-26 14:56, Jordan wrote: I've recently gotten my hands on a couple shiny new SPARC T4-1 and T3-1 servers and I was looking to install OpenBSD with a softraid mirror on them for production use. The problem is, is that I end up with this upon following the install instructions and rebooti

Re: OpenBSD SPARC T4-1 softraid boot issues

2017-12-28 Thread Adam Thompson
e and was hoping to be able to do the 3 disk >RAID1 offered by OpenBSD softraid. Do you know if bioctl(8) is capable >of controlling the onboard raid controller, or will I need to do all >raid rebuilds via the hardware raid bios on the T4? > > >On 12/28/17 08:58, Adam Thomp

Re: Dell Latitude E6540 OpenBSD 6.2 amd64 freezes when adjusting refresh rate using xrandr

2018-03-22 Thread Adam Thompson
On 2018-03-20 15:18, Xianwen Chen wrote: Dear Mihai, Although your tone in your email was not pleasant, You are posting to OpenBSD-misc. Objectionable tone is very common, particularly for users who *appear* to be complaining about immeasurably-small problems that aren't actually significant

Re: How to unlock a serial port

2021-01-19 Thread Adam Thompson
[Replying directly as well, as I believe my MTA is still blacklisted by the OpenBSD mail server. Guess we'll find out! -Adam] On 2021-01-17 20:09, Tilo Stritzky wrote: On 14/01/21 17:38 Andrew Grillet wrote: Hi I am running OpenBSD on a T2000 (Sparc64). I was trying to use the serial port fr

Re: How to unlock a serial port

2021-01-21 Thread Adam Thompson
On 2021-01-19 19:15, Nick Holland wrote: On 1/19/21 4:35 PM, Adam Thompson wrote: I ran into this exact problem last year. It'll be in the list archives. According to Theo (if I understood him correctly) it's partly due to the way BSD serial ports have always worked, i.e. in a ra

Re: Join two overlapping subnets with two way NAT/BINAT

2013-09-08 Thread Adam Thompson
For what it's worth, this is one thing that Cisco PIX firewalls actually do very well. I won't use them for ordinary internet-facing firewalls, but for your scenario they're perfect. -Adam Thompson athom...@athompso.net

Re: responding to buttonpress ACPI event sent by KVM/Qemu (same behavior in v5.2)

2013-09-17 Thread Adam Thompson
possible your hardware has something to do with it, but unlikely. I haven't tested anything illumos-based. -Adam Thompson athom...@athompso.net

Re: Looking for good, small, canadian version laptop suggestions

2013-10-11 Thread Adam Thompson
en run dual-DVI off the laptop! -- -Adam Thompson athom...@athompso.net

Re: Looking for good, small, canadian version laptop suggestions

2013-10-14 Thread Adam Thompson
p, while nifty, is unlikely to work 100% with OpenBSD - the components will likely be too new and support will be lacking. OTOH, the screenshots show Ubuntu Linux, so I could be wrong here.) -- -Adam Thompson athom...@athompso.net

Re: Looking for good, small, canadian version laptop suggestions

2013-10-17 Thread Adam Thompson
t older, and a bit more expensive than the US site, and support isn't *quite* as good, but they still provide a pretty good deal for people with Canadian shipping addresses. Refurb laptops also show up from time to time on Tigerdirect.ca and Newegg.ca, usually at competitive prices. -- -A

Re: virtio network driver multicast support

2013-10-17 Thread Adam Thompson
pfsync, though. -- -Adam Thompson athom...@athompso.net

BGP & CARP - suggestions?

2013-10-18 Thread Adam Thompson
a) does this add much value?, and b) would it work at all if the "LAN" interface [so to speak] is currently not the CARP master? -- -Adam Thompson athom...@athompso.net

Re: DNS Hosting & Managed DNS

2013-10-25 Thread Adam Thompson
s is so far unequalled in my book. I've worked with them since ~1999 and I haven't yet seen any cause to doubt them. I do wish they were a little bit more price-competitive, but at least you get what you pay for. -- -Adam Thompson athom...@athompso.net

Re: RAID Crypt dual booting

2013-10-26 Thread Adam Thompson
ce to load the kernel directly off the root filesystem instead of having two auxiliary filesystems just to hold the kernel. (And, if it does work this way with RAID 1, when did that start happening?) -- -Adam Thompson athom...@athompso.net

Re: RAID Crypt dual booting

2013-10-26 Thread Adam Thompson
keeping the manpages up to date isn't a "feature" I'd like to see brought over to the BSD world. One of the fundamentals of OpenBSD has historically been correct documentation. -- -Adam Thompson athom...@athompso.net

Re: RAID Crypt dual booting

2013-10-28 Thread Adam Thompson
re dead system from affecting a running network. (in theory, anyway :-) Altroot prevents corruption of a root partition from being completely fatal; it's a point-in-time backup copy of / that you can restore from - and in the worst-case scenario, replace the entire root disk with. -- -Adam Thompson athom...@athompso.net

Re: Request to OpenBSD Dev's - Beer on offer

2013-10-29 Thread Adam Thompson
port would be a very nice thing to have, considering that in other ways OpenBSD is already a very capable router. I'm not in a position right now to pay someone properly to implement it, but I can sustain the cost of another case or three of beer. -- -Adam Thompson athom...@athompso.net

Re: Request to OpenBSD Dev's - Beer on offer

2013-10-29 Thread Adam Thompson
ing as old as I am, so large quantities of beer and caffeine may no longer be ideal. -- -Adam Thompson athom...@athompso.net

downing vlan(4) doesn't remove routes

2013-10-29 Thread Adam Thompson
g, or is this broken? -- -Adam Thompson athom...@athompso.net

bgpd(8) EGP vs IGP question

2013-10-29 Thread Adam Thompson
I run "bgpctl show", both routes are marked with origin "i" (i.e. IGP). Do I have to use "set origin egp" in the external neighbour's stanza in /etc/bgpd.conf? Doing so works, and produces the expected output, but should it be necessary? -- -Adam Thompson athom...@athompso.net

matching single-part label in ssh_config ?

2013-11-02 Thread Adam Thompson
ansfer speed and reduce CPU load (both important in my case) by switching to "arcfour". So far, the only workaround is to specify the FQDN or IP address, both of which are less than ideal. -- -Adam Thompson athom...@athompso.net

Re: BGP changes to support CARP better

2013-11-11 Thread Adam Thompson
outer processes any given packet (AFAICT). -Adam Thompson athom...@athompso.net Hi Adam, It almost works.. Sadly I believe the pfsync delay can be higher than the sessions RTT and so it wont always work. I.e. the internal server replies before the other firewall has got the state.. The o

Re: BGP changes to support CARP better

2013-11-11 Thread Adam Thompson
Oh. Duh. That makes perfect sense... I can't test it until tomorrow morning but that solves all the problems, I think. -Adam Chris Cappuccio wrote: >Adam Thompson [athom...@athompso.net] wrote: >> >> Well, you could - perhaps - flip this on its head. Instead of changin

Re: BGP changes to support CARP better

2013-11-13 Thread Adam Thompson
On 13-11-11 11:48 PM, Chris Cappuccio wrote: Adam Thompson [athom...@athompso.net] wrote: Well, you could - perhaps - flip this on its head. Instead of changing BGP, what about forcing one router to be the master (via advbase/advskew), advertising a lower BGP preference (probably by using both

Qsynth midi latency not low enough... what to do?

2018-12-01 Thread Adam Thompson
PROBLEM STATEMENT: driving FluidSynth from a MIDI controller produces ~1/4sec delay between keypress and sound. NARRATIVE: I finally got Qsynth working under Xfce (it freezes X under twm!) so I can control fluidsynth in a reasonably-obvious way... but I am now experiencing substantial latency.

6.4-release tset(1) really slow, what have I missed?

2018-12-02 Thread Adam Thompson
I've successfully installed OpenBSD 6.4-RELEASE at OVH, but I'm noticing one thing there that's different from everywhere else I've used 6.4. tset(1) takes approximately 12-15 seconds to execute, (almost) every time. On a DigitalOcean VPS running 6.3-STABLE (via openup) tset sensibly takes a

Re: 6.4-release tset(1) really slow, what have I missed?

2018-12-02 Thread Adam Thompson
On 2018-12-02 20:50, Philip Guenther wrote: > On Sun, Dec 2, 2018 at 2:15 PM Adam Thompson wrote: > >> I've successfully installed OpenBSD 6.4-RELEASE at OVH, but I'm noticing >> one thing there that's different from everywhere else I've used 6.4. &g

Re: 6.4-release tset(1) really slow, what have I missed?

2018-12-02 Thread Adam Thompson
On 2018-12-02 22:12, Adam Thompson wrote: > I'm unsure if my test is valid, but I switched to i8254 (confirmed successful > via sysctl), and tset(1) continues to pause for an unnaturally long time. > But then I rebooted and re-tested the same sysctl vaules, and this time >

bgplg doesn't work with wildcard httpd servers

2019-01-11 Thread Adam Thompson
Running 6.4 (-stable, via openup/mtier). I have bgpd(8) talking to my border router, acting as a route collector. That part seems fine. I now have httpd(8) configured trivially to run bgplg(8) (per the bgplg(8) manpage) but it's not working, and I can't tell why. **EDIT: yes, I can, see below

smtpd - help needed tranlsating to new virtual map syntax

2019-01-16 Thread Adam Thompson
[Cross-posting here before I give up and switch to Postfix -Adam] I have an old instance that uses smtpd's virtual to rewrite *sender* addresses. Reading the 6.4-STABLE version of the smtpd.conf(5) manpage, I can't see how to accomplish my goal any more - it looks impossible. I don't want t

Re: smtpd - help needed tranlsating to new virtual map syntax

2019-01-16 Thread Adam Thompson
larification. -Adam -Original Message- From: Edgar Pettijohn Sent: Wednesday, January 16, 2019 8:12 AM To: Adam Thompson ; misc@openbsd.org Subject: Re: smtpd - help needed tranlsating to new virtual map syntax It would be helpful if you show what you have tried. Should be as simple as: action

Re: smtpd - help needed tranlsating to new virtual map syntax

2019-01-20 Thread Adam Thompson
addresses.) -Adam -Original Message- From: owner-m...@openbsd.org On Behalf Of Adam Thompson Sent: Wednesday, January 16, 2019 8:26 AM To: 'Edgar Pettijohn' ; misc@openbsd.org Subject: Re: smtpd - help needed tranlsating to new virtual map syntax As I said, I haven't tried

Re: smtpd - help needed tranlsating to new virtual map syntax

2019-01-20 Thread Adam Thompson
I found the "-T" (trace) flag to smtpd(8), and it gives me this, which AFAICT confirms my suspicions: [...] rule #2 matched: match from src allowed-hosts for any => translate lookup: lookup "athom...@athompso.net" as ALIAS in table static:translations -> 0 lookup:

Re: smtpd - help needed tranlsating to new virtual map syntax [FIXED]

2019-01-21 Thread Adam Thompson
On 2019-01-21 04:08, Gilles Chehade wrote: In this test case, my translations map had: What is a translation map ? There is no such thing in OpenSMTPD (as of today). A virtual map that happened to be called . You're feeding the virtual table with invalid values. Apparently, yes. Also, t

purpose of bgpd.conf dump "timeout" parameter?

2019-02-08 Thread Adam Thompson
In bgpd.conf(5), for the "dump" directive there is an optional "timeout" parameter. What is its purpose? I assume from the examples that it's denominated in seconds... my first guess was to time out on attempting to write to the dump file, but that doesn't seem realistic. It looks like it's

Re: purpose of bgpd.conf dump "timeout" parameter?

2019-02-08 Thread Adam Thompson
it would be helpful to me. Which is probably obvious since I'm suggesting it...) Something else to tack onto the to-do list, I guess. Thanks, -Adam On February 8, 2019 5:23:24 PM CST, Claudio Jeker wrote: >On Fri, Feb 08, 2019 at 03:56:12PM -0600, Adam Thompson wrote: >> In bgp

Re: keeping track of MAC addresses

2019-02-19 Thread Adam Thompson
On 2019-02-14 02:01, mailingli...@dotbit.ro wrote: I would like to keep tabs on the MAC/IP addresses in my secure net. I do know how to do this, but keeping track of ethernet MAC addresses seems quite cumbersome in OpenBSD, not that it is more convenient in any other general purpose operating s

cvsweb.openbsd.org - same as cvsweb in ports?

2019-02-21 Thread Adam Thompson
I know this has been asked before, but my google-fu cannot unearth any trace of it, so I have to ask again - sorry! What version of cvsweb does cvsweb.openbsd.org run? And where is that software available? It appears to not quite be the same as cvsweb in ports, so... ? Thanks, -Adam

security - preferred way to make check_access_file happy?

2019-02-25 Thread Adam Thompson
Hi, I'm getting daily insecurity (i.e. security(8)) nags about userids that are off but still have a valid shell and access files. (Specifically, I'm getting the nag from check_access_files() in /usr/libexec/security.) Since ports (at least in my experience) regularly creates userids that wi

Re: security - preferred way to make check_access_file happy?

2019-02-25 Thread Adam Thompson
Whoops... I'm getting the messages from 3 systems, all running 6.4-STABLE, with no local modifications, under both VMware and Openstack, using openup to keep systems updated. Dmesg available if anyone thinks it's relevant. -Adam On 2019-02-25 08:50, Adam Thompson wrote: Hi, I

Re: security - preferred way to make check_access_file happy?

2019-02-25 Thread Adam Thompson
Use vipw to put 13 * in the password field From passwd(5) [...] authentication, conventionally have 13 asterisks in the password field. Thank you! Now that I know what I'm looking for, I can see the relevant code in security(8), too. I wonder if there's a way for ports to do that for me w

Re: security - preferred way to make check_access_file happy?

2019-02-25 Thread Adam Thompson
On 2019-02-25 11:14, Stuart Henderson wrote: On 2019/02/25 09:13, Adam Thompson wrote: > Use vipw to put 13 * in the password field > > From passwd(5) > [...] > authentication, conventionally have 13 asterisks in the password field. Thank you! Now that I know what I'm lo

Re: How to restrict ip to access a directory in OpenBSD's httpd

2019-04-04 Thread Adam Thompson
On 2019-04-03 11:30, Stuart Henderson wrote: On 2019-04-03, =?utf-8?B?RnVuZw==?= wrote: apache support somthing like Order Allow,Deny Allow from all Deny from 1.2.3.4 How to achieve in OpenBSD's httpd? We are using OpenBSD 6.4. There is no built-in simple way. It can be done by having h

post-6.5-upgrade bgpd(8) problem

2019-05-09 Thread Adam Thompson
I've upgraded my looking glass from 6.4 to 6.5, and an experiencing an unexpected problem - routes learned from one (iBGP) peer are not being automatically exported to other (eBGP) peers. I did not change /etc/bgpd.conf, but behaviour seems to have changed nonetheless. The upgrade from 6.4 to

Re: post-6.5-upgrade bgpd(8) problem

2019-05-09 Thread Adam Thompson
On 2019-05-09 13:53, Sebastian Benoit wrote: bgpctl sh rib neigh out for all neighbors. All empty. Also look at bgpctl sh rib best Completely empty. if any routes are actually selected - maybe the "nexthop qualify via default" isnt working. I see two things... 1) when run as "bgpd -d

relayd without pf?

2019-05-14 Thread Adam Thompson
OK, I'm pretty sure this is a dumb question, but... Does relayd work properly, or at all with pf disabled? (in 6.5-RELEASE) It looks like it should as long as I use "relay" instead of "redirect", but I'm having trouble, and don't want to keep banging my head against a wall if it's something t

Re: relayd without pf?

2019-05-14 Thread Adam Thompson
On 2019-05-14 15:42, Adam Thompson wrote: OK, I'm pretty sure this is a dumb question, but... Does relayd work properly, or at all with pf disabled? (in 6.5-RELEASE) I have partially answered my own question. That last message was posted prematurely, in more than one way, sorry! 1

Re: relayd without pf?

2019-05-14 Thread Adam Thompson
FWIW, I also encountered some slightly different error messages, I'll see if I can reproduce those. -Adam On May 14, 2019 4:48:29 p.m. CDT, Reyk Floeter wrote: > >> Am 14.05.2019 um 23:06 schrieb Adam Thompson : >> >>> On 2019-05-14 15:42, Adam Thompson wrote: >

Re: OpenBSD on VMware ESXi

2019-05-22 Thread Adam Thompson
On 2019-05-22 09:25, mxb wrote: I think FreeBSD or any Linux template will work just fine and add vmxnet3. However, last I checked (1year ago) vmxnet3 been less stable than e1000 under pressure. Don't use the Linux templates. I would recommend against using the FreeBSD templates, and go with

"Invalid argument" when exec'ing and/or ktrace'ing a file?

2019-05-24 Thread Adam Thompson
I have a binary - built on this 6.5-STABLE amd64 system by an automatic build process as part of a CPAN module installation, that will not execute: rt@rt$ /var/www/rt/local/plugins/RT-Extension-TicketPDF/bin/wkhtmltopdf ksh: /var/www/rt/local/plugins/RT-Extension-TicketPDF/bin/wkhtmltopdf: In

openup failing?

2019-05-28 Thread Adam Thompson
I've seen a large number failures recently from m:tier's openup tool, complaining of: ftp: connect: Host is down !!! Cannot retrieve https://stable.mtier.org/openup !!! Please verify your Internet connection, proxy settings and firewall. I'm seeing this from two different networks

Re: The su manual doesn't mention use root account by default

2019-06-13 Thread Adam Thompson
On 2019-06-12 03:55, Ingo Schwarze wrote: Even though su(1) can still be used today to relinquish privilege when you are already root, no more development is done on it and people rarely look at the manual page. The last time new functionality was added to the su(1) manual page was almost a deca

Re: How does OpenBSD probe for I/O devices?

2019-06-13 Thread Adam Thompson
On 2019-06-12 13:12, ¯\__/¯ ¯\__/¯ wrote: I've search for the answer to this question, but I can't find it. I also read the source code, but I still don't get how it works. Help pl0x Not sure exactly what you're looking for... On modern architectures, most OSes (including OpenBSD) "walk the h

security(8) question - how to skip a single file?

2016-10-06 Thread Adam Thompson
I have RTFMed and googled, but I still can’t figure out how to do one simple thing: make security(8) ignore a single file that changes on a daily basis, where that file is otherwise monitored due to /etc/mtree/4.4BSD.dist. The file in question is /var/unbound/db/root.key, which I have auto-upd

Re: security(8) question - how to skip a single file?

2016-10-08 Thread Adam Thompson
: October 6, 2016 10:20 To: Adam Thompson Subject: Re: security(8) question - how to skip a single file? Hi Adam, Not replying to list in case I did not understand the question. I have the following towards the end of /etc/changelist . . . /var/nsd/etc/nsd.conf # /var/unbound/etc/root.key /var

Re: Can't install -current on a Dell precision t3500

2017-02-13 Thread Adam Thompson
On 2017-02-13 07:11, STeve Andre' wrote: I'm puzzled and am asking for help. I'm attempting to install the -current snapshot (feb 12) on a Dell precision t3500. The install formats a 6T disk very quickly, like in 25 seconds. Hmm. After installing the tar files, installboot fails with a "Ba

Re: Topics for revised PF and networking tutorial

2017-04-10 Thread Adam Thompson
On 2017-04-07 16:41, Mihai Popescu wrote: I don;t want to offend you folks, but I'm curious and I will ask: is this BSDCon so useful? Does it pay the efforts? If someone has time and knowledge to do a PF tutorial he/she can do it and post. Do you need the Con? I'm asking this having in my mind

Re: Topics for revised PF and networking tutorial

2017-04-11 Thread Adam Thompson
> -Original Message- > From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On > Behalf Of bytevolc...@safe-mail.net > Sent: April 10, 2017 19:31 > > > Plus, this year it appears that Peter is co-delivering the seminar > > with Massimiliano Stucchi from RIPE, so it will presumably c

Re: acme-client(1) and http_proxy

2017-04-24 Thread Adam Thompson
By definition, you will (probably) not be able to use the ACME protocol - it only works (normally) when your system is connected directly to the public internet with a static IP address. Simply because you say "behind a corporate firewall", I already know (or at least assume) that ACME will not

  1   2   3   >