Re: OpenBSD insecurity rumors from isopenbsdsecu.re

2020-05-11 Thread Brian Waters
If any widely-used open source software had government backdoors in it, nobody in the know would be telling folks about it in random IRC chat rooms. BW On Mon, 11 May 2020 18:13:35 -0700 wrote I was told on the chat that Linux GNU software has hardly visible NSA backdoors

Re: IPv4 traffic over IPv6 tunnel approach

2020-05-08 Thread Brian Brombacher
>From your description, you want to pass IPv4 inside a tunnel that has an outer >protocol of IPv6. Your resulting hostname.gif0 looks like the exact opposite >of your description (IPv6 inside the tunnel with IPv4 outer). Clarify what you need please. Provide your existing hostname.if files

Re: Routing and forwarding: directly connected computers

2020-09-03 Thread Brian Brombacher
> On Sep 3, 2020, at 11:02 AM, Ernest Stewart > wrote: > > I forgot to say, in every computer I have /etc/sysctl.conf with > "net.inet.ip.forwarding=1". > > And I insist, what shocks me the most is that tcpdump shows in both computers > the right icmp packets but ping says 100% packets

Re: Routing and forwarding: directly connected computers

2020-09-03 Thread Brian Brombacher
> On Sep 3, 2020, at 12:38 PM, Brian Brombacher wrote: > >  > >>>> On Sep 3, 2020, at 12:15 PM, Ernest Stewart >>>> wrote: >>> Theo de Raadt wrote: >>> Oh my. Have you considered hiring a consultant? >>> >>> Of

Re: Routing and forwarding: directly connected computers

2020-09-03 Thread Brian Brombacher
>> On Sep 3, 2020, at 12:15 PM, Ernest Stewart >> wrote: > Theo de Raadt wrote: > Oh my. Have you considered hiring a consultant? > > Of course. As you have already noticed, I have no idea about how to do what > I'm trying to do. But a consultant is out of my budget. > > Are you guys

Re: Routing and forwarding: directly connected computers

2020-09-03 Thread Brian Brombacher
> On Sep 3, 2020, at 11:44 AM, Ernest Stewart > wrote: > > On Sep 3, 2020, at 15:07 AM, Brian Brombacher wrote: > > "Your setup ... requires pf \rules and additional routing tables to make this > work." > > And which pf rules and how to establish

Re: Assigning the same IP address to multiple interfaces

2020-09-10 Thread Brian Brombacher
> On Sep 10, 2020, at 11:16 AM, Demi M. Obenour wrote: > > How do I assign the same IP and MAC address to multiple interfaces? > This is easy on Linux, but I cannot figure out how to do it on > OpenBSD. The (virtual) machine is assigned a single IP address by > the hypervisor, so changing

Re: Must disable /usr/libexec/security on backup disks

2020-09-14 Thread Brian Brombacher
> On Sep 14, 2020, at 8:11 AM, Ingo Schwarze wrote: > > Hi Brian, > > Brian Brombacher wrote on Mon, Sep 14, 2020 at 07:55:11AM -0400: > >> Love the idea; however, the only drawback is if some Bad Person >> is twiddling around and leaves a suid

Re: Must disable /usr/libexec/security on backup disks

2020-09-14 Thread Brian Brombacher
> On Sep 14, 2020, at 7:43 AM, Ingo Schwarze wrote: > > Hi Theo, > > Theo de Raadt wrote on Mon, Sep 14, 2020 at 04:06:08AM -0600: >> Ingo Schwarze wrote: > >>> are used for. Some such file systems may permit SUID and/or device >>> files, so not checking them may be a dubious idea. > >>

Re: pf.conf parser/lint

2020-09-04 Thread Brian Brombacher
> On Sep 4, 2020, at 10:51 AM, Tommy Nevtelen wrote: > > Hi there misc! > > Is there an external pfctl linter? we have bunch pf firwalls for which we > generate rules but also write some manual ones that get merged. Would be nice > if we could lint the rules before committed to vcs.. (yes

Re: pf.conf parser/lint

2020-09-04 Thread Brian Brombacher
> On Sep 4, 2020, at 12:03 PM, Tommy Nevtelen wrote: > > On 04/09/2020 17.40, Brian Brombacher wrote: >>>> On Sep 4, 2020, at 11:28 AM, Brian Brombacher wrote: >>> >>> >>>> On Sep 4, 2020, at 10:51 AM, Tommy Nevtelen wrote: >>>&

Re: pf.conf parser/lint

2020-09-04 Thread Brian Brombacher
> On Sep 4, 2020, at 11:28 AM, Brian Brombacher wrote: > >  > >> On Sep 4, 2020, at 10:51 AM, Tommy Nevtelen wrote: >> >> Hi there misc! >> >> Is there an external pfctl linter? we have bunch pf firwalls for which we >> generate rules

Re: tmux rc script not stopping

2020-10-07 Thread Brian Brombacher
> On Oct 7, 2020, at 2:35 PM, ben wrote: > > Hello, Misc; > > I'm attempting to write an rc script to start a tmux session: > >#!/bin/sh > >daemon="/usr/bin/tmux" >daemon_flags=" new -d -s MAINTMUX -n SHELL" > >. /etc/rc.d/rc.subr > >rc_reload=NO > >rc_stop() {

Re: South American mirrors?

2020-10-19 Thread Brian Brombacher
he situation of the >>> pandemic and the closure of the s.am. universities? >>> Does anyone know? >>> Cheers >>> Eike >>> -- >>> Eike Lantzsch ZP6CGE >>> 01726 Asuncion / Paraguay >>> >> >> Hey Eike, https://mirror.planetunix.net/pub/OpenBSD has a local endpoint in São Paulo, Brazil if that is helpful. Everything except packages are stored on the endpoint. If you need greater speed from the node, I can upgrade it for a short period of time. Cheers, Brian

Re: About pf max-src-conn-rate

2020-05-27 Thread Brian Brombacher
Keep in mind operations using pfctl such as reloading rule set or table from file, any IP’s caught in the smtp table by the max-src-conn-rate will be flushed depending on your command line. > On May 27, 2020, at 4:29 PM, Walter Alejandro Iglesias > wrote: > > Hello Brian, >

Re: About pf max-src-conn-rate

2020-05-27 Thread Brian Brombacher
What do you do with table in other rules? If you’re doing nothing, you need to do something like block additional connections, or adjust the pass rule to include from ! Run: pfctl -t smtp -T show Does it show the offending IP? If so, the rule worked as you defined it. > On May 27, 2020,

Re: Setting permanent neighbor entry

2020-05-26 Thread Brian Brombacher
Do it in hostname.if. You’ll win the race. > On May 26, 2020, at 2:14 PM, Demi M. Obenour wrote: > > On 2020-05-26 09:34, Kanto Andria wrote: >> Hello, >> man ndp is probably another solution >> >>On Tuesday, May 26, 2020, 9:17:25 a.m. EDT, Tommy Nevtelen >> wrote: >> >>> On

Re: wg(4) listen on a specific interface / address

2020-10-27 Thread Brian Brombacher
> On Oct 27, 2020, at 5:33 PM, Pierre Emeriaud > wrote: > > Howdy misc@, > > I have a fairly complicated setup with lots of interfaces, a couple of > rdomains etc. > > I'd like wireguard to listen only on an IP address, not all. But if my > understanding of ifconfig(8) is correct, this

Re: softraid/bioctl cant find device /dev/bio

2020-08-03 Thread Brian Brombacher
> On Aug 3, 2020, at 11:51 AM, sven falempin wrote: > >  > > >> On Mon, Aug 3, 2020 at 11:38 AM Brian Brombacher >> wrote: >> >> >> > On Aug 3, 2020, at 9:54 AM, sven falempin wrote: >> > >> > Hello >>

Re: softraid/bioctl cant find device /dev/bio

2020-08-03 Thread Brian Brombacher
> On Aug 3, 2020, at 12:22 PM, sven falempin wrote: > > On Mon, Aug 3, 2020 at 12:00 PM Brian Brombacher > wrote: > >> >> >> On Aug 3, 2020, at 11:51 AM, sven falempin >> wrote: >> >>  >> >> >>> On Mon, Aug 3,

Re: can't install some packages on -current

2020-08-04 Thread Brian Brombacher
> On Aug 4, 2020, at 4:33 PM, Sonic wrote: > > On Tue, Aug 4, 2020 at 4:24 PM wrote: >> Update the installed packages first pkg_add -Uu > > It's a fresh install based on -current just downloaded. First attempt > at installing packages, so no packages to upgrade. > Just wait for new

Re: Does OpenBSD support Carrier Grade Nat?

2020-08-08 Thread Brian Brombacher
setup accomplish a CGN using PF and other base utilities plus crafty scripting/API integration with PF? I can surmise PF rules that cover at least the two final reasons you’ve mentioned but I’m sure there’s more to it that I’m not understanding. Thanks, Brian

Re: Relayd with TLS and non-TLS backends - bug

2020-07-04 Thread Brian Brombacher
ttp "/webservice.asmx" code 405 > forward with tls to port 443 check https > "/Client/SupportedBrowsers.html" host "myhost.example.com" code 200 > } > EOF > Hi Toyam, Split http and https into two separate relay stanzas. The “with tls” will be needed on your https relay and not the http backhaul. I believe this gets what you want. I do not think this is a bug, but perhaps a design choice by the developers. Cheers, Brian

Re: Relayd with TLS and non-TLS backends - bug

2020-07-04 Thread Brian Brombacher
> On Jul 3, 2020, at 7:17 PM, Henry Bonath wrote: > > Daniel, > > Thanks for taking the time to test this out. > I just reloaded a test machine from scratch with -current and > installed the HAProxy 2.0.15-4f39279 package. > I loaded a very basic config file, and am also seeing the same

Re: strlcpy version speed tests?

2020-07-04 Thread Brian Brombacher
be made over time for the various arch’s, if such an approach is desirable by the project. You can pull a well-optimized version based on your code, for your arch, and then slim it down a bunch. Cheers, Brian [Not a project developer. Just an observer.]

Re: relayd multiple listen on same redirect

2020-07-04 Thread Brian Brombacher
o since I concentrated on TCP relays, I don’t know how effective these directives would be for redirects. My end config has separate relays per TCP service except passive FTP relaying. Also, make sure your pf.conf has the right anchor. Only mentioning it because your original email skips this detail. I doubt this would be missing if you have a working setup already, so ignore if so. Cheers, Brian

Re: Unbound Problems (Reverse Direction)

2020-07-10 Thread Brian Brombacher
Use these directives also in unbound (see the pattern and choose what you need, like 24.172.IN-ADDR.ARPA, to cover your 172.24.* reverse. local-zone: "168.192.IN-ADDR.ARPA" nodefault local-zone: "16.172.IN-ADDR.ARPA" nodefault local-zone: "17.172.IN-ADDR.ARPA" nodefault local-zone:

Re: Issue with relayd and redirections

2020-07-13 Thread Brian Brombacher
no wrote: >>>> It isn’t. rdr-to, and by extension redirects, are not natting the source >>>> address. >>>> Clients connecting through relayd and to the backend will have source >>>> addresses >>>> not that of the relayd machine but of the or

Re: ls -R bug?

2020-07-04 Thread Brian Brombacher
Hmm... /bin/ls, a utility that has existed since 1960’s. This is not a bug. https://en.m.wikipedia.org/wiki/Ls > On Jul 4, 2020, at 3:02 PM, Richard Ipsum wrote: > > Hi, > > Output of ls -R between OpenBSD and GNU coreutils seems to differ, > OpenBSD ls -R will apparently list "hidden"

Re: ls -R bug?

2020-07-04 Thread Brian Brombacher
> On Jul 4, 2020, at 3:38 PM, Ottavio Caruso > wrote: > > On Sat, 4 Jul 2020 at 19:59, Richard Ipsum wrote: >> >> Hi, >> >> Output of ls -R between OpenBSD and GNU coreutils seems to differ, >> OpenBSD ls -R will apparently list "hidden" directories like .git, >> whereas GNU coreutils

Re: ls -R bug?

2020-07-04 Thread Brian Brombacher
I’ll be explicit. Did the OP run ls(1) as superuser? See -A flag in man ls We have no idea. > On Jul 4, 2020, at 3:44 PM, Brian Brombacher wrote: > >  > >>> On Jul 4, 2020, at 3:38 PM, Ottavio Caruso >>> wrote: >>> >>> On Sat, 4 Jul

Re: ls -R bug?

2020-07-04 Thread Brian Brombacher
> On Jul 4, 2020, at 3:10 PM, Brian Brombacher wrote: > > Hmm... > > /bin/ls, a utility that has existed since 1960’s. > > This is not a bug. > > https://en.m.wikipedia.org/wiki/Ls > Please disregard this poor advice. Obviously this isn’t the 1960

Re: Relayd with TLS and non-TLS backends - bug

2020-07-03 Thread Brian Brombacher
nd NAT designs. Pimp out the configs of your networking groups’ routers to de-encapsulate and decrypt the traffic for even more performance and compatibility. Anything is possible as a front-end relay server with OpenBSD. Why? Well for one, you save on many rounds of TLS negotiation. Upcoming performance enhancements to the networking stack will only help scale this method of relaying to more and more acceptable levels compared to non-encrypted networking. My subjective net gain is simplicity, security, performance, and flexibility. -Brian

Re: Relayd with TLS and non-TLS backends - bug

2020-07-03 Thread Brian Brombacher
> On Jul 3, 2020, at 9:46 PM, Daniel Jakots wrote: > > On Fri, 3 Jul 2020 20:25:12 -0400, Brian Brombacher > wrote: > >> My subjective net gain is simplicity, security, performance, and >> flexibility. > > I don't think adding ipsec (or a mesh vpn) int

Re: Issue with relayd and redirections

2020-07-10 Thread Brian Brombacher
> On Jul 10, 2020, at 9:15 PM, Gabri Tofano wrote: > > Here: > > LAB1-LB1$ relayctl sh sum > Id TypeName Avlblty Status > 1 redirecthttp active > 1 table web_servers:80 active (1 hosts) > 1

Re: sysupgrade failure due to boot.conf

2020-07-10 Thread Brian Brombacher
> On Jul 10, 2020, at 7:31 PM, Alfred Morgan wrote: > >  >> >> You claimed sysupgrade does this. >> sysupgrade does nothing like that. It placed a /bsd.upgrade file, and > that is the end of the story. >> You told boot (via commands in boot.conf) to do something, so it did, > before

Re: Issue with relayd and redirections

2020-07-11 Thread Brian Brombacher
ce handling, etc., all get lost, among other issues. I hope this is the cause of your issues, otherwise you’re going to need to include more information for your setup, or at a minimum some relayd logs. -Brian

Re: Issue with relayd and redirections

2020-07-11 Thread Brian Brombacher
>> On Jul 11, 2020, at 11:20 AM, Gabri Tofano wrote: > On 2020-07-11 06:33, Brian Brombacher wrote: >>>>>>> On Jul 10, 2020, at 11:42 PM, Gabri Tofano wrote: >>>>>  >>>>>> Does http work with redirects? It wasn’t clear if

Re: Restore pf tables metadata after a reboot

2020-06-04 Thread Brian Brombacher
No reason to expire ssh brute force. They will never stop. Manual flush if someone accidentally locked themselves out. Just my two cents :) > On Jun 4, 2020, at 12:48 AM, Anatoli wrote: > >  >> >> Even then it seems that some of them turn up again pretty much >> instantly after expiry. >

Re: sysupgrade failure due to boot.conf

2020-07-16 Thread Brian Brombacher
> On Jul 13, 2020, at 6:58 AM, Alfred Morgan wrote: > >  > Brian wrote: > > (echo boot /bsd.upgrade; echo boot) > /etc/boot.conf > > Brian, that doesn't work. I tried that already before. It seems to stop at > the error not finding bsd.upgrade and won't

Re: OpenBSD 6.7-current VM on vmd collectd timesync problem

2020-07-30 Thread Brian Brombacher
Are you using: kern.timercounter.hardware=tsc ? I’m on 6.7 release and no issue with collectd. > On Jul 30, 2020, at 4:53 PM, Martin wrote: > > I can test it on 6.7-current only, and I haven't tested collectd on 6.6 - > 6.7 -stable. TSC looks synchronized, ntpd corrects small amount of time

Re: wg(4) listen on a specific interface / address

2020-10-28 Thread Brian Brombacher
> On Oct 28, 2020, at 6:21 PM, Brian Brombacher wrote: > >  > >> On Oct 28, 2020, at 5:07 PM, Pierre Emeriaud >> wrote: >> >> Le mar. 27 oct. 2020 à 23:46, j...@snoopy.net.nz a >> écrit : >>> >>> >>> >

Re: IPsec and MTU / fragmentation

2020-10-30 Thread Brian Brombacher
> On Oct 30, 2020, at 11:44 AM, Brian Brombacher wrote: > >  > >>> On Oct 29, 2020, at 11:56 PM, David Diggles wrote: >>> >>> On Mon, Feb 10, 2020 at 05:15:00PM +, Peter M??ller wrote: >>> Hello Lucas, >>> >>> as fa

Re: IPsec and MTU / fragmentation

2020-10-30 Thread Brian Brombacher
> On Oct 29, 2020, at 11:56 PM, David Diggles wrote: > > On Mon, Feb 10, 2020 at 05:15:00PM +, Peter M??ller wrote: >> Hello Lucas, >> >> as far as I understood, setting MTU on encN interfaces is not supported >> since it is not mentioned by enc(4) and setting it manually fails: >> >>>

Re: Are relayd and httpd my future buddy?

2020-10-31 Thread Brian Brombacher
> On Oct 30, 2020, at 6:32 PM, Lars Bonnesen wrote: > > I have been using a combination of Apache, mod_proxy and letsencrypt to set > up different loadbalancing/https offload solution like this: > > https://URL1[Apache http_1] > ---| >

Re: wg(4) listen on a specific interface / address

2020-10-29 Thread Brian Brombacher
> On Oct 29, 2020, at 11:21 AM, Pierre Emeriaud > wrote: > > Le jeu. 29 oct. 2020 à 00:09, Brian Brombacher a > écrit : >> >> Scratch that, use the ifconfig wgrtable option to specify separate routing >> domains for the port 53. This lets you initiate

Re: wg(4) listen on a specific interface / address

2020-10-28 Thread Brian Brombacher
> On Oct 28, 2020, at 5:07 PM, Pierre Emeriaud > wrote: > > Le mar. 27 oct. 2020 à 23:46, j...@snoopy.net.nz a > écrit : >> >> >> >> Hi Pierre, >> >> The error may indicate that port 53 on 127.0.0.1 is already used by another >> service. This appears to be confirmed by your netstat

Re: wg(4) listen on a specific interface / address

2020-10-29 Thread Brian Brombacher
> On Oct 29, 2020, at 6:09 PM, Pierre Emeriaud > wrote: > > Le jeu. 29 oct. 2020 à 21:03, Stuart Henderson a > écrit : >> Which DNS server do you have bound on 53? > > unwind > > >>> Is there a reason why wg needs such a large bind? >> Unless/until it gets an option to bind to a

TTY Count

2021-06-18 Thread Brian Empson
What is the proper way to increase the number of TTYs available on the system? I have alot of users logged in on a machine and we run out of TTYs every once in awhile. Thanks, Brian

Re: TCP FIN hangups in encrypted ESP tunnel

2021-07-08 Thread Brian Brombacher
dy. A sysctl also exists to turn TCP keep alive on for all connections by default. Not sure it’ll help. Does your download crawl to a halt, then after a period of time, you get the FIN? (Note: I don’t have any Hetzner hosts and I’m just guessing based on my experience with Azure) -Brian

udp sendto performance

2021-07-05 Thread Brian Empson
direction, Brian

Re: nmea/udcf recommendation

2021-08-02 Thread Brian Empson
Sounds like a good  driver to learn from for driver dev stuff. On 8/2/2021 6:11 PM, Christian Weisgerber wrote: > Jan Stary: > >> playing with ntpd a bit, I am looking for a working >> nmea or udcf sensor. Can people please recommend >> an easy to use device known to work? > The Gude mouseCLOCKs

Re: Azure VMs

2021-08-08 Thread Brian Brombacher
> On Aug 8, 2021, at 9:15 PM, Steven Shockley > wrote: > > Does anyone know if OpenBSD still works in Azure? I found the docs on > uploading a VM, but they cover OpenBSD 6.1. I also found > https://github.com/Azure/WALinuxAgent/issues/1360, where someone was trying > to use 6.3 and

Re: CARP Cold Spare

2021-09-24 Thread Brian Brombacher
> On Sep 24, 2021, at 6:16 PM, Don Tek wrote: > > Would there be any ‘problem’ with configuring a 2-machine CARP setup and > then just keeping one machine powered-off until needed? > > I realize this defeats live failover, but this is not a requirement for my > customer. > > I just want

Re: Ifconfig error - SIOCSETPFLOW

2021-10-15 Thread Brian Brombacher
> On Oct 15, 2021, at 7:09 PM, Antonino Sidoti wrote: > > HI, > > I am getting this error since upgrading to v7.0; > > pf enabled > net.inet.ip.forwarding: 0 -> 1 > net.inet6.ip6.forwarding: 0 -> 1 > starting network > > ifconfig: SIOCSETPFLOW: Can't assign requested address > ifconfig:

Re: Ifconfig error - SIOCSETPFLOW

2021-10-16 Thread Brian Brombacher
sing “dhcp” in there. > >>> On 16 Oct 2021, at 10:39 am, Brian Brombacher wrote: >>> >>> >>> >>>> On Oct 15, 2021, at 7:09 PM, Antonino Sidoti wrote: >>> >>> HI, >>> >>> I am getting this error since upgra

Re: I did not realize I was an OpenBSD user!

2021-12-27 Thread Brian Brombacher
Hi David, Thank you for the write-up, this was an awesome read. I was on the edge of a cliff waiting to hear what device or app you replaced next. Bravo, excellent job done! -Brian > On Dec 27, 2021, at 1:03 AM, David Rinehart wrote: > > A long read, but may be interesting.

Re: rc Re: distributive glob Re: type checking/signalling shell and utilities?

2021-11-19 Thread Brian Brombacher
You have a fundamental misunderstanding of what a shell is, how a program executes, and how arguments to that program are passed. You pass arguments to a program through a SINGLE ARRAY. This is true in every operating system. Stop advocating for things you don’t understand. > On Nov 19, 2021,

Re: Using OpenBSD as an L2TP client with A ISP

2021-10-26 Thread Brian Brombacher
> On Oct 26, 2021, at 9:31 AM, Matt Dainty wrote: > > I'm currently using OpenBSD with an Andrews & Arnold vDSL connection so I > have > a pppoe(4) interface, etc. and this works for IPv4 & IPv6. > > The problem is because of the rubbish rural Openreach infrastructure here in > the UK I

Re: send help ( chroot php fpm refuse to exec/popen/procopen... on 7.0 )

2021-10-26 Thread Brian Brombacher
> On Oct 26, 2021, at 9:22 AM, Sven F. wrote: > > }{ello, > > I updated a device and use php fpm on openbsd 7.0 > everything works fine after putting a resolv file in the chroot > but i can't send email from the chroot > > I hope I didn't see something obvious. > > to troubleshoot i drop

Re: Is it true that `dd` is almost not needed?

2021-12-11 Thread Brian Brombacher
> On Dec 11, 2021, at 11:12 AM, u...@mailo.com wrote: > > The article: > https://eklitzke.org/the-cult-of-dd > > The content of the article: > > The Cult of DD > Mar 17, 2017 > You'll often see instructions for creating and using disk images on Unix > systems making use of the dd command.

Re: Is it true that `dd` is almost not needed?

2021-12-11 Thread Brian Brombacher
> On Dec 11, 2021, at 11:22 AM, Brian Brombacher wrote: > >  >> On Dec 11, 2021, at 11:12 AM, u...@mailo.com wrote: >> >> The article: >> https://eklitzke.org/the-cult-of-dd >> >> The content of the article: >> >> The Cu

Re: disk i/o test

2022-03-07 Thread Brian Brombacher
> On Mar 7, 2022, at 12:10 PM, Brian Brombacher wrote: > > Hi Mihai, > > Not exactly related to disk speed, but have you cranked up the following > sysctl to see if it helps? > > sysctl kern.bufcachepercentage=9 > > I put an entry in /etc/sysctl.conf for per

Re: disk i/o test

2022-03-07 Thread Brian Brombacher
Correction: kern.bufcachepercentage=90 > On Mar 7, 2022, at 12:07 PM, Brian Brombacher wrote: > > Hi Mihai, > > Not exactly related to disk speed, but have you cranked up the following > sysctl to see if it helps? > > sysctl kern.bufcachepercentage=9 >

Re: disk i/o test

2022-03-07 Thread Brian Brombacher
. Not sure if that helps but I use that value on every install, including desktop and servers. I can’t remember if the default value has changed in the past 10 years but I always go with 90%. -Brian > On Mar 7, 2022, at 6:17 AM, Mihai Popescu wrote: > > On Mon, Mar 7, 2022 at 8:46

Re: disk i/o test

2022-03-06 Thread Brian Brombacher
> On Mar 6, 2022, at 7:41 AM, Mihai Popescu wrote: > > Since this thread is moving slowly in another direction, let me > reiterate my situation again: I am running a browser (mostly chromium) > and the computer slows down on downloads. Since I've checked the > downloads rates, I observed

Re: libressl vs openssl

2022-01-28 Thread Brian Brombacher
> On Jan 28, 2022, at 9:46 AM, dansk puffer wrote: > > Are there any major security differences between libressl and openssl > nowadays? From what I read the situation for openssl improved and some Linux > distros switched back to openssl again with mostly? OpenBSD remaining to use >

Re: httpd.conf: 2 interfaces, 2 listen, IPv6, only one server works

2022-02-06 Thread Brian Brombacher
> On Feb 6, 2022, at 4:51 PM, Brian Brombacher wrote: > >  > >> On Feb 6, 2022, at 4:32 PM, Mike Fischer wrote: >> >>  >>>> Am 06.02.2022 um 21:13 schrieb Brian Brombacher : >>> >>>>> You can work around it by putting b

Re: httpd.conf: 2 interfaces, 2 listen, IPv6, only one server works

2022-02-06 Thread Brian Brombacher
> On Feb 6, 2022, at 12:07 PM, Mike Fischer wrote: > > Hi Łukasz, > >>> Am 06.02.2022 um 12:08 schrieb Łukasz Moskała : >>> >>> W dniu 6.02.2022 o 05:28, Mike Fischer pisze: >>> OpenBSD 7.0 stable amf64 >>> My host has two ethernet interfaces, em0 and em1. >>> Note: The host is a VM with

Re: httpd.conf: 2 interfaces, 2 listen, IPv6, only one server works

2022-02-06 Thread Brian Brombacher
> On Feb 6, 2022, at 4:32 PM, Mike Fischer wrote: > >  >> Am 06.02.2022 um 21:13 schrieb Brian Brombacher : >> >>>> You can work around it by putting both interfaces in diffrent rdomains, >>>> then running two httpd instances, one in r

Re: libressl vs openssl

2022-01-28 Thread Brian Brombacher
> On Jan 28, 2022, at 11:53 AM, Laura Smith > wrote: > > ‐‐‐ Original Message ‐‐‐ > >> On Friday, January 28th, 2022 at 14:43, dansk puffer >> wrote: >> >> Are there any major security differences between libressl and openssl >> nowadays? From what I read the situation for

Browser access to file system on new install OpenBSD missing.

2022-07-11 Thread Brian Durant
I have a problem with both Firefox and Chromium being unable to access the file system using the "open" dialog. The dialog appears, but no files or directories appear regardless of path. Things function normally however, with both Midori and Thunderbird. I assume that Firefox and Chromium are

Re: Browser access to file system on new install OpenBSD missing.

2022-07-11 Thread Brian Durant
On 7/11/22 14:40, Björn Gohla wrote: > > Brian Durant writes: > >> I have a problem with both Firefox and Chromium being unable to access >> the file system using the "open" dialog. The dialog appears, but no >> files or directories appea

Re: Browser access to file system on new install OpenBSD missing.

2022-07-11 Thread Brian Durant
Actually, there is one major difference between the two systems that I had forgotten about. While both use the Calm window manager, the system that is experiencing problems with the browser file dialogs, uses PCManFM...

Re: Browser access to file system on new install OpenBSD missing.

2022-07-11 Thread Brian Durant
On 7/11/22 17:53, Stuart Henderson wrote: > I guess your locate database was last generated when firefox was > installed but chromium was not > >> Wondering if something else is at play here... > grep unveil /usr/local/share/doc/pkg-readmes/* > > ls /etc/*/*unveil* $ grep unveil

Re: Browser access to file system on new install OpenBSD missing.

2022-07-11 Thread Brian Durant
On 7/11/22 15:25, Stuart Henderson wrote: > On 2022-07-11, Björn Gohla wrote: >> >> Brian Durant writes: >> >>> I have a problem with both Firefox and Chromium being unable to access >>> the file system using the "open" dialog. The dialo

Behringer UMC404HD USB soundcard with OpenBSD 7.1.

2022-07-16 Thread Brian Durant
of which work with a direct audio connection (midi jack cable)... Brian

Re: Behringer UMC404HD USB soundcard with OpenBSD 7.1.

2022-07-16 Thread Brian Durant
On Sat, 16 Jul 2022 11:23:16 +0200 Alexandre Ratchov wrote: > On Sat, Jul 16, 2022 at 08:26:49AM +0200, Brian Durant wrote: > > I have thus far been using an audio direct out to my speakers, but would > > like to get my USB soundcard working in OpenBSD. Without the soundca

Re: Behringer UMC404HD USB soundcard with OpenBSD 7.1.

2022-07-16 Thread Brian Durant
On 7/16/22 3:54 PM, Alexandre Ratchov wrote: On Sat, Jul 16, 2022 at 03:36:18PM +0200, Brian Durant wrote: # mixerctl -f /dev/audioctl1 mixerctl: /dev/audioctl1: Device not configured # dmesg forgot to mention: connect and power on the audio interface first ;-) It was. This time I waited

Re: Behringer UMC404HD USB soundcard with OpenBSD 7.1.

2022-07-16 Thread Brian Durant
On 7/16/22 6:26 PM, Alexandre Ratchov wrote: On Sat, Jul 16, 2022 at 05:37:35PM +0200, Brian Durant wrote: On 7/16/22 3:54 PM, Alexandre Ratchov wrote: On Sat, Jul 16, 2022 at 03:36:18PM +0200, Brian Durant wrote: # mixerctl -f /dev/audioctl1 mixerctl: /dev/audioctl1: Device not configured

Re: Behringer UMC404HD USB soundcard with OpenBSD 7.1.

2022-07-16 Thread Brian Durant
On 7/16/22 11:23 AM, Alexandre Ratchov wrote: On Sat, Jul 16, 2022 at 08:26:49AM +0200, Brian Durant wrote: I have thus far been using an audio direct out to my speakers, but would like to get my USB soundcard working in OpenBSD. Without the soundcard, (direct connection) everything works

Multiple OpenBSD mirror issues for i386.

2022-07-17 Thread Brian Durant
that I haven't just pressed the wrong link. I have gone into the mirrors manually under the correct architecture directory and downloaded the files... Brian

Re: Browser access to file system on new install OpenBSD missing.

2022-07-14 Thread Brian Durant
On 7/14/22 12:09 PM, Zé Loff wrote: On Thu, Jul 14, 2022 at 09:44:20AM +0200, Brian Durant wrote: The browser issue has returned. An open dialog window to upload a file or to open a file cannot find the downloads directory and it is impossible to access by using "recents" or

Re: Browser access to file system on new install OpenBSD missing.

2022-07-13 Thread Brian Durant
hit save. Also as others have said, Midori and Thunderbird don't have this issue because neither of them use unveil. It would be really cool if one day at least Thunderbird did. Courtney On 7/10/22 23:46, Brian Durant wrote: I have a problem with both Firefox and Chromium being unable

Re: Web MIDI, Firefox, OpenBSD.

2022-07-15 Thread Brian Durant
On 7/15/22 12:54 PM, Alexandre Ratchov wrote: On Thu, Jul 14, 2022 at 10:05:43AM +0200, Brian Durant wrote: On a possibly related issue to my browser access to file system problem, has anyone been able to get Web MIDI working with Firefox on OpenBSD 7.1? Here I am referring to bandcamp.com

Re: Web MIDI, Firefox, OpenBSD.

2022-07-15 Thread Brian Durant
On 7/15/22 2:53 PM, Alexandre Ratchov wrote: On Fri, Jul 15, 2022 at 02:28:37PM +0200, Brian Durant wrote: On 7/15/22 12:54 PM, Alexandre Ratchov wrote: On Thu, Jul 14, 2022 at 10:05:43AM +0200, Brian Durant wrote: On a possibly related issue to my browser access to file system problem

Re: Browser access to file system on new install OpenBSD missing.

2022-07-14 Thread Brian Durant
The browser issue has returned. An open dialog window to upload a file or to open a file cannot find the downloads directory and it is impossible to access by using "recents" or "computer" in the open dialog window. Not sure what is going on, but it sure is irritating.

Web MIDI, Firefox, OpenBSD.

2022-07-14 Thread Brian Durant
On a possibly related issue to my browser access to file system problem, has anyone been able to get Web MIDI working with Firefox on OpenBSD 7.1? Here I am referring to bandcamp.com and flowkey.com in particular. Neither site appears to be receiving any MIDI signal despite an Akai LPK25 (for

Recently acquired Ryzen 5 computer lacks sound with OpenBSD 7.1.

2022-10-26 Thread Brian Durant
The computer has a Ryzen 5 4600G processor, as well as AMD High Def and Realtek audio. I have tried unsuccessfully to get audio through the HDMI connection as well as a Behringer UMC20HD USB sound card. I have looked at the relevant man pages and tried to solve this on Reddit. It has been

Re: Xterm copy-paste not happening on OpenBSD 7.1 i386.

2022-08-05 Thread Brian Durant
On Thu, 4 Aug 2022, Alexander Hall wrote: > > > On August 4, 2022 5:42:13 PM GMT+02:00, Brian Durant > wrote: > > > > > >On Thu, 4 Aug 2022, Lucas wrote: > > > >> Brian Durant wrote: > >> > I have installed OpenBSD 7.1 i386 on my

Re: Xterm copy-paste not happening on OpenBSD 7.1 i386.

2022-08-05 Thread Brian Durant
On Fri, 5 Aug 2022, Alexander Hall wrote: > > > On August 5, 2022 8:32:25 AM GMT+02:00, Brian Durant > wrote: > > > > > >On Thu, 4 Aug 2022, Alexander Hall wrote: > > > >> > >> > >> On August 4, 2022 5:42:13 PM GMT+02:00, Br

Re: Xterm copy-paste not happening on OpenBSD 7.1 i386.

2022-08-04 Thread Brian Durant
On Thu, 4 Aug 2022, Lucas wrote: > Brian Durant wrote: > > I have installed OpenBSD 7.1 i386 on my Lenovo T60 and am experiencing a > > couple of issues. The first is related to the following addition that I > > made to my .Xdefaults file, which works with OpenB

Xterm copy-paste not happening on OpenBSD 7.1 i386.

2022-08-04 Thread Brian Durant
I have installed OpenBSD 7.1 i386 on my Lenovo T60 and am experiencing a couple of issues. The first is related to the following addition that I made to my .Xdefaults file, which works with OpenBSD 7.1 amd64 installs, but not with the OpenBSD 7.1 i386 install on my Lenovo T60:

Re: Xterm copy-paste not happening on OpenBSD 7.1 i386.

2022-08-04 Thread Brian Durant
On Thursday, August 4, 2022, Michael Hekeler wrote: > Am 04.08.22 15:27 schrieb Brian Durant: > > I have installed OpenBSD 7.1 i386 on my Lenovo T60 and am experiencing a > > couple of issues. The first is related to the following addition that I made > > to my .Xdefau

"/bsd: cannot forward" ip6 traffic messages

2022-12-30 Thread Landy, Brian
, and if there is anything I can tune with sysctl or pf to prevent it. I’m on 7.2 with the latest patches. Thanks, Brian

Re: "/bsd: cannot forward" ip6 traffic messages

2022-12-31 Thread Landy, Brian
these messages. Thanks, Brian > On Dec 31, 2022, at 5:45 AM, Gábor LENCSE wrote: > > Hi Brian, > > I am not familiar with Apple devices, but I am familiar with IPv6. > > The IPv6 addresses in your log file have the fc00::/7 prefix, that is, they > are from the RFC4193 &quo

OpenBSD 7.2 amd64, MIDI error "midi/0: couldn't open port".

2023-01-06 Thread Brian Durant
conf.local pkg_scripts=avahi_daemon messagebus gdm cups_browsed sndiod_flags=-z 128 -f rsnd/1 $ cat /etc/sysctl.conf kern.audio.record=1 sndiod flags are for reduced latency and for audio to work properly on my Huawei MateStation. Brian

Re: OpenBSD 7.2 amd64, MIDI error "midi/0: couldn't open port".

2023-01-06 Thread Brian Durant
On 1/6/23 18:40, Alexandre Ratchov wrote: On Fri, Jan 06, 2023 at 10:18:37AM +0100, Brian Durant wrote: Hi, Completely lost as to the cause for the error. I have read the relevant man pages as well as searching the mail archive. System info: OpenBSD 7.2 amd64, GNOME 42.5, Huawei MateStation S

Re: OpenBSD 7.2 amd64, MIDI error "midi/0: couldn't open port".

2023-01-06 Thread Brian Durant
On 1/6/23 13:42, Alexandre Ratchov wrote: could you post the output of dmesg (at least the midi-related lines). I haven't been able to find any. I should add that this is a fresh install of OpenBSD 7.2. For thoroughness, The entire dmesg is available Here: https://pastebin.com/McSXuvu9

Re: poor routing/nat performance

2022-12-19 Thread Brian Conway
ive alternatives to the APU2+ platform, and there are plenty in the $100-200 USD range for amd64. Most of my APU2s have been retired to terminal/console server duty. > CPU bored, max. load 25% It sounds like 1 of your 4 cores is maxed, which would not be surprising. Brian Conway

<    2   3   4   5   6   7   8   >