Re: bwfm bcm43569

2019-06-24 Thread Brian Brombacher
Provide a dmesg before you rant. Thanks, Brian > On Jun 24, 2019, at 5:06 PM, 3 wrote: > > i know that wifi adapters never worked in obsd(excluding those > adapters for which drivers were written by vendors), but i found one > that shows signs of life in 11n(11ac 2t2r supported by chip). it

Re: Ansible install Re: Reboot and re-link

2019-06-22 Thread Brian Brombacher
Using Ansible to reinstall the operating system is like trying to turn a four door sedan into a monster truck with a hammer. Wrong tool for the job. > On Jun 22, 2019, at 6:46 PM, Frank Beuth wrote: > >> On Sat, Jun 22, 2019 at 03:06:30AM +0100, Andrew Luke Nesbit wrote: >>> On 21/06/2019

Re: OT: hardware war with manufacturers (espionage claims)

2019-07-03 Thread Brian Brombacher
Mihai, Do you want to protest companies by not buying their equipment? That is the only feasible outcome from this conversation. The other outcome would be you want advice on what models will work on OpenBSD. -Brian > On Jul 3, 2019, at 12:11 PM, Zack Lofgren wrote: > > Mihai, > > It

Re: bwfm bcm43569

2019-06-28 Thread Brian Brombacher
You’re always welcome to submit a patch for functionality you want. It might not be accepted but your own use case would be covered. Statements on the intentions of others, as the way you continue to do, is a sign of a troll. Submit a patch and you’ll be a helpful troll, if such a thing

Re: Bypass doas password check with chroot

2019-07-02 Thread Brian Brombacher
Use doas.conf to permit root with nopass option. See doas.conf(5). > On Jul 2, 2019, at 4:43 AM, cho...@jtan.com wrote: > > This isn't a bug per se, more of an incongruity in how security-centric tools > work wrt root, specifically doas and chroot/su/other: > > joe@drogo$ doas -s > drogo#

Re: OT: hardware war with manufacturers (espionage claims)

2019-07-02 Thread Brian Brombacher
I’m fine with hardware implants snooping on me. But if I was a CISO for a huge company, I might go the extra mile to care about said implants. I’ll continue living carefree. > On Jul 2, 2019, at 1:42 PM, Nathan Hartman wrote: > > On Tue, Jul 2, 2019 at 1:28 PM Brian Brombacher

Re: OT: hardware war with manufacturers (espionage claims)

2019-07-02 Thread Brian Brombacher
Oh and if the implant is smart, it’ll detect you’re trying to find it and go dormant. Even more good luck! > On Jul 2, 2019, at 1:24 PM, Brian Brombacher wrote: > > Hardware implants go beyond just sending packets out your network card. They > have transceivers that let ag

Re: OT: hardware war with manufacturers (espionage claims)

2019-07-02 Thread Brian Brombacher
Hardware implants go beyond just sending packets out your network card. They have transceivers that let agents control or snoop the device from a distance using RF. You need to scan the hardware with RF equipment to be sure. Good luck! > On Jul 2, 2019, at 12:27 PM, Misc User wrote: > >>

Re: IPv6 problems

2019-08-13 Thread Brian Brombacher
You can also add a second line to /etc/mygate if you’re using that. > On Aug 13, 2019, at 1:11 PM, Thomas Bohl wrote: > > Hello, > >> My hostname.vio0 looks like this: >> dhcp >> inet6 alias > provider> 64 >> > > You most likely need to add a route. Add something like this to your hostname

Re: Best 1Gbe NIC

2019-08-02 Thread Brian Brombacher
I find cheap PCI-Express and PCI-X em(4) cards suffice for my needs. 990-992 Mbps with tcpbench. > On Aug 2, 2019, at 11:26 AM, Claudio Jeker wrote: > >> On Fri, Aug 02, 2019 at 12:28:58PM +0100, Andy Lemin wrote: >> Ahhh, thank you! >> >> I didn’t realise this had changed and now the

Re: Write to DVD-RAM

2019-07-27 Thread Brian Brombacher
See cd(4): https://man.openbsd.org/cd.4 It’s not a real block device. You’ll need to use something like the dvd+rw tools package already mentioned in order to write data to it. The man page talks about how cd devices are represented as block devices for consistency with other tools like

Re: sysupgrade (Was: Re: Kernel crash in OpenBSD 6.5)

2019-08-01 Thread Brian Brombacher
Use the -n option to sysupgrade to not reboot after files are downloaded and verified. Then delete the unwanted tarballs as mentioned from /home/_sysupgrade/ and reboot. See sysupgrade(8): https://man.openbsd.org/sysupgrade > On Aug 1, 2019, at 7:31 AM, Antal Ispanovity wrote: > >

Re: Best Practices for growing disk partitions on a server

2019-11-17 Thread Brian Brombacher
Boot into single user mode. At the boot loader prompt, type boot -s. This will drop you to a root shell. > On Nov 17, 2019, at 3:39 PM, Lev Lazinskiy wrote: > > Hi folks, > > I am new to openBSD, so forgive me if I am missing something obvious. > > I recently installed openBSD on a

Re: VLAN or aliases or? best way to isolate untrustable hosts in a small network

2020-02-05 Thread Brian Brombacher
The OP’s hostname.vlan* files never specify a vnetid. I get an error trying to configure and bring up the second vlan interface the same way without vnetid specified. Regardless of my error, the ifconfig(8) man page says without vnetid specified, vlan tag 0 will be used. You need to specify

Re: OpenBSD's extremely poor network/disk performance?

2020-01-07 Thread Brian Brombacher
There might be something wrong with your setup. I routinely get 500+ MB/s disk and full 1 GBit Ethernet. > On Jan 7, 2020, at 9:38 AM, Hamd wrote: > > It's 2020 and it's -still- sad to see OpenBSD -still- has the > lowest/poorest (general/overall) performance ever: >

Re: OpenBSD VPS hoster with unlimited/limited nonfiltered traffic

2020-04-19 Thread Brian Brombacher
Try setting sysctl kern.timecounter.hardware=tsc on the OpenBSD vmm guest and run ntpd. I have not tried without ntpd but I know without using tsc, time skews too much. > On Apr 19, 2020, at 10:25 AM, Martin wrote: > > Thanks all of you guys for suggestions. > > Just one question to

Re: multihomed routing issue

2020-04-27 Thread Brian Brombacher
Try something like this in pf.conf: pass in on hvn1 proto tcp from to (hvn1) port 22 reply-to 10.0.0.1@hvn1 The reason you have to do this is because you have the same router address on hvn0 and hvn1 (10.0.0.1). Another option is to use route tables. Let me know if you have any questions.

Re: IPv4 traffic over IPv6 tunnel approach

2020-05-08 Thread Brian Brombacher
>From your description, you want to pass IPv4 inside a tunnel that has an outer >protocol of IPv6. Your resulting hostname.gif0 looks like the exact opposite >of your description (IPv6 inside the tunnel with IPv4 outer). Clarify what you need please. Provide your existing hostname.if files

Re: Routing and forwarding: directly connected computers

2020-09-03 Thread Brian Brombacher
> On Sep 3, 2020, at 11:02 AM, Ernest Stewart > wrote: > > I forgot to say, in every computer I have /etc/sysctl.conf with > "net.inet.ip.forwarding=1". > > And I insist, what shocks me the most is that tcpdump shows in both computers > the right icmp packets but ping says 100% packets

Re: Routing and forwarding: directly connected computers

2020-09-03 Thread Brian Brombacher
> On Sep 3, 2020, at 12:38 PM, Brian Brombacher wrote: > >  > >>>> On Sep 3, 2020, at 12:15 PM, Ernest Stewart >>>> wrote: >>> Theo de Raadt wrote: >>> Oh my. Have you considered hiring a consultant? >>> >>> Of

Re: Routing and forwarding: directly connected computers

2020-09-03 Thread Brian Brombacher
>> On Sep 3, 2020, at 12:15 PM, Ernest Stewart >> wrote: > Theo de Raadt wrote: > Oh my. Have you considered hiring a consultant? > > Of course. As you have already noticed, I have no idea about how to do what > I'm trying to do. But a consultant is out of my budget. > > Are you guys

Re: Routing and forwarding: directly connected computers

2020-09-03 Thread Brian Brombacher
> On Sep 3, 2020, at 11:44 AM, Ernest Stewart > wrote: > > On Sep 3, 2020, at 15:07 AM, Brian Brombacher wrote: > > "Your setup ... requires pf \rules and additional routing tables to make this > work." > > And which pf rules and how to establish

Re: Assigning the same IP address to multiple interfaces

2020-09-10 Thread Brian Brombacher
> On Sep 10, 2020, at 11:16 AM, Demi M. Obenour wrote: > > How do I assign the same IP and MAC address to multiple interfaces? > This is easy on Linux, but I cannot figure out how to do it on > OpenBSD. The (virtual) machine is assigned a single IP address by > the hypervisor, so changing

Re: Must disable /usr/libexec/security on backup disks

2020-09-14 Thread Brian Brombacher
> On Sep 14, 2020, at 8:11 AM, Ingo Schwarze wrote: > > Hi Brian, > > Brian Brombacher wrote on Mon, Sep 14, 2020 at 07:55:11AM -0400: > >> Love the idea; however, the only drawback is if some Bad Person >> is twiddling around and leaves a suid

Re: Must disable /usr/libexec/security on backup disks

2020-09-14 Thread Brian Brombacher
> On Sep 14, 2020, at 7:43 AM, Ingo Schwarze wrote: > > Hi Theo, > > Theo de Raadt wrote on Mon, Sep 14, 2020 at 04:06:08AM -0600: >> Ingo Schwarze wrote: > >>> are used for. Some such file systems may permit SUID and/or device >>> files, so not checking them may be a dubious idea. > >>

Re: pf.conf parser/lint

2020-09-04 Thread Brian Brombacher
> On Sep 4, 2020, at 10:51 AM, Tommy Nevtelen wrote: > > Hi there misc! > > Is there an external pfctl linter? we have bunch pf firwalls for which we > generate rules but also write some manual ones that get merged. Would be nice > if we could lint the rules before committed to vcs.. (yes

Re: pf.conf parser/lint

2020-09-04 Thread Brian Brombacher
> On Sep 4, 2020, at 12:03 PM, Tommy Nevtelen wrote: > > On 04/09/2020 17.40, Brian Brombacher wrote: >>>> On Sep 4, 2020, at 11:28 AM, Brian Brombacher wrote: >>> >>> >>>> On Sep 4, 2020, at 10:51 AM, Tommy Nevtelen wrote: >>>&

Re: pf.conf parser/lint

2020-09-04 Thread Brian Brombacher
> On Sep 4, 2020, at 11:28 AM, Brian Brombacher wrote: > >  > >> On Sep 4, 2020, at 10:51 AM, Tommy Nevtelen wrote: >> >> Hi there misc! >> >> Is there an external pfctl linter? we have bunch pf firwalls for which we >> generate rules

Re: tmux rc script not stopping

2020-10-07 Thread Brian Brombacher
> On Oct 7, 2020, at 2:35 PM, ben wrote: > > Hello, Misc; > > I'm attempting to write an rc script to start a tmux session: > >#!/bin/sh > >daemon="/usr/bin/tmux" >daemon_flags=" new -d -s MAINTMUX -n SHELL" > >. /etc/rc.d/rc.subr > >rc_reload=NO > >rc_stop() {

Re: South American mirrors?

2020-10-19 Thread Brian Brombacher
> On Oct 19, 2020, at 10:29 AM, Stuart Henderson wrote: > > On 2020-10-19, Rachel Roch wrote: >> One of the CDNs would seem the obvious answer to your problem. Or have you >> already tried them ? > > They fetch files from origin sources on the fly, mostly from Canada > (for

Re: About pf max-src-conn-rate

2020-05-27 Thread Brian Brombacher
>> On Wed, May 27, 2020 at 02:35:46PM -0400, Brian Brombacher wrote: >> What do you do with table in other rules? If you’re doing nothing, >> you need to do something like block additional connections, or adjust the >> pass rule to include from ! > > You're r

Re: About pf max-src-conn-rate

2020-05-27 Thread Brian Brombacher
What do you do with table in other rules? If you’re doing nothing, you need to do something like block additional connections, or adjust the pass rule to include from ! Run: pfctl -t smtp -T show Does it show the offending IP? If so, the rule worked as you defined it. > On May 27, 2020,

Re: Setting permanent neighbor entry

2020-05-26 Thread Brian Brombacher
Do it in hostname.if. You’ll win the race. > On May 26, 2020, at 2:14 PM, Demi M. Obenour wrote: > > On 2020-05-26 09:34, Kanto Andria wrote: >> Hello, >> man ndp is probably another solution >> >>On Tuesday, May 26, 2020, 9:17:25 a.m. EDT, Tommy Nevtelen >> wrote: >> >>> On

Re: wg(4) listen on a specific interface / address

2020-10-27 Thread Brian Brombacher
> On Oct 27, 2020, at 5:33 PM, Pierre Emeriaud > wrote: > > Howdy misc@, > > I have a fairly complicated setup with lots of interfaces, a couple of > rdomains etc. > > I'd like wireguard to listen only on an IP address, not all. But if my > understanding of ifconfig(8) is correct, this

Re: softraid/bioctl cant find device /dev/bio

2020-08-03 Thread Brian Brombacher
> On Aug 3, 2020, at 11:51 AM, sven falempin wrote: > >  > > >> On Mon, Aug 3, 2020 at 11:38 AM Brian Brombacher >> wrote: >> >> >> > On Aug 3, 2020, at 9:54 AM, sven falempin wrote: >> > >> > Hello >>

Re: softraid/bioctl cant find device /dev/bio

2020-08-03 Thread Brian Brombacher
> On Aug 3, 2020, at 12:22 PM, sven falempin wrote: > > On Mon, Aug 3, 2020 at 12:00 PM Brian Brombacher > wrote: > >> >> >> On Aug 3, 2020, at 11:51 AM, sven falempin >> wrote: >> >>  >> >> >>> On Mon, Aug 3,

Re: can't install some packages on -current

2020-08-04 Thread Brian Brombacher
> On Aug 4, 2020, at 4:33 PM, Sonic wrote: > > On Tue, Aug 4, 2020 at 4:24 PM wrote: >> Update the installed packages first pkg_add -Uu > > It's a fresh install based on -current just downloaded. First attempt > at installing packages, so no packages to upgrade. > Just wait for new

Re: Does OpenBSD support Carrier Grade Nat?

2020-08-08 Thread Brian Brombacher
>> On Aug 8, 2020, at 4:36 AM, Stuart Henderson wrote: > On 2020-08-07, Edward Carver wrote: >> Hi Misc, >> >> Does OpenBSD support Carrier Grade Nat (cg-nat)? >> Thanks for helping.. > > What do you mean by 'support'? > > Running as a client behind one? Yes, that's transparent anyway

Re: Relayd with TLS and non-TLS backends - bug

2020-07-04 Thread Brian Brombacher
> On Jun 11, 2020, at 4:28 PM, Toyam Cox wrote: > > Hello Misc, > > Full config at end of email. > > I've discussed the below in #openbsd on freenode, and was told to come > here. At present, I have a setup where I need multiple unrelated > servers under a single IP address. I used relayd

Re: Relayd with TLS and non-TLS backends - bug

2020-07-04 Thread Brian Brombacher
> On Jul 3, 2020, at 7:17 PM, Henry Bonath wrote: > > Daniel, > > Thanks for taking the time to test this out. > I just reloaded a test machine from scratch with -current and > installed the HAProxy 2.0.15-4f39279 package. > I loaded a very basic config file, and am also seeing the same

Re: strlcpy version speed tests?

2020-07-04 Thread Brian Brombacher
>> On Jul 1, 2020, at 1:14 PM, gwes wrote: >> >> On 7/1/20 8:05 AM, Luke Small wrote: >> I spoke to my favorite university computer science professor who said >> ++n is faster than n++ because the function needs to store the initial >> value, increment, then return the stored value in the

Re: relayd multiple listen on same redirect

2020-07-04 Thread Brian Brombacher
> On Jul 3, 2020, at 3:34 AM, Kapetanakis Giannis > wrote: > > Hi, > > My setup in relayd is like this: > > redirect radius { > listen on $radius_addr udp port radius interface $ext_if > pftag RELAYD_radius > sticky-address > forward to mode least-states check icmp demote carp > } >

Re: Unbound Problems (Reverse Direction)

2020-07-10 Thread Brian Brombacher
Use these directives also in unbound (see the pattern and choose what you need, like 24.172.IN-ADDR.ARPA, to cover your 172.24.* reverse. local-zone: "168.192.IN-ADDR.ARPA" nodefault local-zone: "16.172.IN-ADDR.ARPA" nodefault local-zone: "17.172.IN-ADDR.ARPA" nodefault local-zone:

Re: Issue with relayd and redirections

2020-07-13 Thread Brian Brombacher
no wrote: >>>> It isn’t. rdr-to, and by extension redirects, are not natting the source >>>> address. >>>> Clients connecting through relayd and to the backend will have source >>>> addresses >>>> not that of the relayd machine but of the or

Re: ls -R bug?

2020-07-04 Thread Brian Brombacher
Hmm... /bin/ls, a utility that has existed since 1960’s. This is not a bug. https://en.m.wikipedia.org/wiki/Ls > On Jul 4, 2020, at 3:02 PM, Richard Ipsum wrote: > > Hi, > > Output of ls -R between OpenBSD and GNU coreutils seems to differ, > OpenBSD ls -R will apparently list "hidden"

Re: ls -R bug?

2020-07-04 Thread Brian Brombacher
> On Jul 4, 2020, at 3:38 PM, Ottavio Caruso > wrote: > > On Sat, 4 Jul 2020 at 19:59, Richard Ipsum wrote: >> >> Hi, >> >> Output of ls -R between OpenBSD and GNU coreutils seems to differ, >> OpenBSD ls -R will apparently list "hidden" directories like .git, >> whereas GNU coreutils

Re: ls -R bug?

2020-07-04 Thread Brian Brombacher
I’ll be explicit. Did the OP run ls(1) as superuser? See -A flag in man ls We have no idea. > On Jul 4, 2020, at 3:44 PM, Brian Brombacher wrote: > >  > >>> On Jul 4, 2020, at 3:38 PM, Ottavio Caruso >>> wrote: >>> >>> On Sat, 4 Jul

Re: ls -R bug?

2020-07-04 Thread Brian Brombacher
> On Jul 4, 2020, at 3:10 PM, Brian Brombacher wrote: > > Hmm... > > /bin/ls, a utility that has existed since 1960’s. > > This is not a bug. > > https://en.m.wikipedia.org/wiki/Ls > Please disregard this poor advice. Obviously this isn’t the 1960

Re: Relayd with TLS and non-TLS backends - bug

2020-07-03 Thread Brian Brombacher
> On Jun 11, 2020, at 4:28 PM, Toyam Cox wrote: > > Hello Misc, > > Full config at end of email. > > I've discussed the below in #openbsd on freenode, and was told to come > here. At present, I have a setup where I need multiple unrelated > servers under a single IP address. I used relayd

Re: Relayd with TLS and non-TLS backends - bug

2020-07-03 Thread Brian Brombacher
> On Jul 3, 2020, at 9:46 PM, Daniel Jakots wrote: > > On Fri, 3 Jul 2020 20:25:12 -0400, Brian Brombacher > wrote: > >> My subjective net gain is simplicity, security, performance, and >> flexibility. > > I don't think adding ipsec (or a mesh vpn) int

Re: Issue with relayd and redirections

2020-07-10 Thread Brian Brombacher
> On Jul 10, 2020, at 9:15 PM, Gabri Tofano wrote: > > Here: > > LAB1-LB1$ relayctl sh sum > Id TypeName Avlblty Status > 1 redirecthttp active > 1 table web_servers:80 active (1 hosts) > 1

Re: sysupgrade failure due to boot.conf

2020-07-10 Thread Brian Brombacher
> On Jul 10, 2020, at 7:31 PM, Alfred Morgan wrote: > >  >> >> You claimed sysupgrade does this. >> sysupgrade does nothing like that. It placed a /bsd.upgrade file, and > that is the end of the story. >> You told boot (via commands in boot.conf) to do something, so it did, > before

Re: Issue with relayd and redirections

2020-07-11 Thread Brian Brombacher
> On Jul 10, 2020, at 11:42 PM, Gabri Tofano wrote: > >  >> Does http work with redirects? It wasn’t clear if it did or not in >> your first post. > > It doesn't work with http and that is the redirect that I was testing. > >> Indications from your pf anchor rules and the down >> status

Re: Issue with relayd and redirections

2020-07-11 Thread Brian Brombacher
>> On Jul 11, 2020, at 11:20 AM, Gabri Tofano wrote: > On 2020-07-11 06:33, Brian Brombacher wrote: >>>>>>> On Jul 10, 2020, at 11:42 PM, Gabri Tofano wrote: >>>>>  >>>>>> Does http work with redirects? It wasn’t clear if

Re: Restore pf tables metadata after a reboot

2020-06-04 Thread Brian Brombacher
No reason to expire ssh brute force. They will never stop. Manual flush if someone accidentally locked themselves out. Just my two cents :) > On Jun 4, 2020, at 12:48 AM, Anatoli wrote: > >  >> >> Even then it seems that some of them turn up again pretty much >> instantly after expiry. >

Re: sysupgrade failure due to boot.conf

2020-07-16 Thread Brian Brombacher
> On Jul 13, 2020, at 6:58 AM, Alfred Morgan wrote: > >  > Brian wrote: > > (echo boot /bsd.upgrade; echo boot) > /etc/boot.conf > > Brian, that doesn't work. I tried that already before. It seems to stop at > the error not finding bsd.upgrade and won't continue. > > -alfred Thanks for

Re: OpenBSD 6.7-current VM on vmd collectd timesync problem

2020-07-30 Thread Brian Brombacher
Are you using: kern.timercounter.hardware=tsc ? I’m on 6.7 release and no issue with collectd. > On Jul 30, 2020, at 4:53 PM, Martin wrote: > > I can test it on 6.7-current only, and I haven't tested collectd on 6.6 - > 6.7 -stable. TSC looks synchronized, ntpd corrects small amount of time

Re: wg(4) listen on a specific interface / address

2020-10-28 Thread Brian Brombacher
> On Oct 28, 2020, at 6:21 PM, Brian Brombacher wrote: > >  > >> On Oct 28, 2020, at 5:07 PM, Pierre Emeriaud >> wrote: >> >> Le mar. 27 oct. 2020 à 23:46, j...@snoopy.net.nz a >> écrit : >>> >>> >>> >

Re: IPsec and MTU / fragmentation

2020-10-30 Thread Brian Brombacher
> On Oct 30, 2020, at 11:44 AM, Brian Brombacher wrote: > >  > >>> On Oct 29, 2020, at 11:56 PM, David Diggles wrote: >>> >>> On Mon, Feb 10, 2020 at 05:15:00PM +, Peter M??ller wrote: >>> Hello Lucas, >>> >>> as fa

Re: IPsec and MTU / fragmentation

2020-10-30 Thread Brian Brombacher
> On Oct 29, 2020, at 11:56 PM, David Diggles wrote: > > On Mon, Feb 10, 2020 at 05:15:00PM +, Peter M??ller wrote: >> Hello Lucas, >> >> as far as I understood, setting MTU on encN interfaces is not supported >> since it is not mentioned by enc(4) and setting it manually fails: >> >>>

Re: Are relayd and httpd my future buddy?

2020-10-31 Thread Brian Brombacher
> On Oct 30, 2020, at 6:32 PM, Lars Bonnesen wrote: > > I have been using a combination of Apache, mod_proxy and letsencrypt to set > up different loadbalancing/https offload solution like this: > > https://URL1[Apache http_1] > ---| >

Re: wg(4) listen on a specific interface / address

2020-10-29 Thread Brian Brombacher
> On Oct 29, 2020, at 11:21 AM, Pierre Emeriaud > wrote: > > Le jeu. 29 oct. 2020 à 00:09, Brian Brombacher a > écrit : >> >> Scratch that, use the ifconfig wgrtable option to specify separate routing >> domains for the port 53. This lets you initiate

Re: wg(4) listen on a specific interface / address

2020-10-28 Thread Brian Brombacher
> On Oct 28, 2020, at 5:07 PM, Pierre Emeriaud > wrote: > > Le mar. 27 oct. 2020 à 23:46, j...@snoopy.net.nz a > écrit : >> >> >> >> Hi Pierre, >> >> The error may indicate that port 53 on 127.0.0.1 is already used by another >> service. This appears to be confirmed by your netstat

Re: wg(4) listen on a specific interface / address

2020-10-29 Thread Brian Brombacher
> On Oct 29, 2020, at 6:09 PM, Pierre Emeriaud > wrote: > > Le jeu. 29 oct. 2020 à 21:03, Stuart Henderson a > écrit : >> Which DNS server do you have bound on 53? > > unwind > > >>> Is there a reason why wg needs such a large bind? >> Unless/until it gets an option to bind to a

Re: TCP FIN hangups in encrypted ESP tunnel

2021-07-08 Thread Brian Brombacher
> On Jul 8, 2021, at 8:05 AM, Peter J. Philipp wrote: > > On Wed, Jul 07, 2021 at 11:57:50PM +0300, Ville Valkonen wrote: >> Hi, >> >> not sure if related but my Linux box (also in Hetzner) also started to have >> flaky connection lately. >> >> -- >> Regards, >> Ville > > I opened a

Re: Azure VMs

2021-08-08 Thread Brian Brombacher
> On Aug 8, 2021, at 9:15 PM, Steven Shockley > wrote: > > Does anyone know if OpenBSD still works in Azure? I found the docs on > uploading a VM, but they cover OpenBSD 6.1. I also found > https://github.com/Azure/WALinuxAgent/issues/1360, where someone was trying > to use 6.3 and

Re: CARP Cold Spare

2021-09-24 Thread Brian Brombacher
> On Sep 24, 2021, at 6:16 PM, Don Tek wrote: > > Would there be any ‘problem’ with configuring a 2-machine CARP setup and > then just keeping one machine powered-off until needed? > > I realize this defeats live failover, but this is not a requirement for my > customer. > > I just want

Re: Ifconfig error - SIOCSETPFLOW

2021-10-15 Thread Brian Brombacher
> On Oct 15, 2021, at 7:09 PM, Antonino Sidoti wrote: > > HI, > > I am getting this error since upgrading to v7.0; > > pf enabled > net.inet.ip.forwarding: 0 -> 1 > net.inet6.ip6.forwarding: 0 -> 1 > starting network > > ifconfig: SIOCSETPFLOW: Can't assign requested address > ifconfig:

Re: Ifconfig error - SIOCSETPFLOW

2021-10-16 Thread Brian Brombacher
sing “dhcp” in there. > >>> On 16 Oct 2021, at 10:39 am, Brian Brombacher wrote: >>> >>> >>> >>>> On Oct 15, 2021, at 7:09 PM, Antonino Sidoti wrote: >>> >>> HI, >>> >>> I am getting this error since upgra

Re: I did not realize I was an OpenBSD user!

2021-12-27 Thread Brian Brombacher
Hi David, Thank you for the write-up, this was an awesome read. I was on the edge of a cliff waiting to hear what device or app you replaced next. Bravo, excellent job done! -Brian > On Dec 27, 2021, at 1:03 AM, David Rinehart wrote: > > A long read, but may be interesting... > > I

Re: rc Re: distributive glob Re: type checking/signalling shell and utilities?

2021-11-19 Thread Brian Brombacher
You have a fundamental misunderstanding of what a shell is, how a program executes, and how arguments to that program are passed. You pass arguments to a program through a SINGLE ARRAY. This is true in every operating system. Stop advocating for things you don’t understand. > On Nov 19, 2021,

Re: Using OpenBSD as an L2TP client with A ISP

2021-10-26 Thread Brian Brombacher
> On Oct 26, 2021, at 9:31 AM, Matt Dainty wrote: > > I'm currently using OpenBSD with an Andrews & Arnold vDSL connection so I > have > a pppoe(4) interface, etc. and this works for IPv4 & IPv6. > > The problem is because of the rubbish rural Openreach infrastructure here in > the UK I

Re: send help ( chroot php fpm refuse to exec/popen/procopen... on 7.0 )

2021-10-26 Thread Brian Brombacher
> On Oct 26, 2021, at 9:22 AM, Sven F. wrote: > > }{ello, > > I updated a device and use php fpm on openbsd 7.0 > everything works fine after putting a resolv file in the chroot > but i can't send email from the chroot > > I hope I didn't see something obvious. > > to troubleshoot i drop

Re: Is it true that `dd` is almost not needed?

2021-12-11 Thread Brian Brombacher
> On Dec 11, 2021, at 11:12 AM, u...@mailo.com wrote: > > The article: > https://eklitzke.org/the-cult-of-dd > > The content of the article: > > The Cult of DD > Mar 17, 2017 > You'll often see instructions for creating and using disk images on Unix > systems making use of the dd command.

Re: Is it true that `dd` is almost not needed?

2021-12-11 Thread Brian Brombacher
> On Dec 11, 2021, at 11:22 AM, Brian Brombacher wrote: > >  >> On Dec 11, 2021, at 11:12 AM, u...@mailo.com wrote: >> >> The article: >> https://eklitzke.org/the-cult-of-dd >> >> The content of the article: >> >> The Cu

Re: disk i/o test

2022-03-07 Thread Brian Brombacher
> On Mar 7, 2022, at 12:10 PM, Brian Brombacher wrote: > > Hi Mihai, > > Not exactly related to disk speed, but have you cranked up the following > sysctl to see if it helps? > > sysctl kern.bufcachepercentage=9 > > I put an entry in /etc/sysctl.conf for per

Re: disk i/o test

2022-03-07 Thread Brian Brombacher
Correction: kern.bufcachepercentage=90 > On Mar 7, 2022, at 12:07 PM, Brian Brombacher wrote: > > Hi Mihai, > > Not exactly related to disk speed, but have you cranked up the following > sysctl to see if it helps? > > sysctl kern.bufcachepercentage=9 >

Re: disk i/o test

2022-03-07 Thread Brian Brombacher
Hi Mihai, Not exactly related to disk speed, but have you cranked up the following sysctl to see if it helps? sysctl kern.bufcachepercentage=9 I put an entry in /etc/sysctl.conf for persistence. This will cause up to 90% of system memory to be used as a unified buffer cache for disk access.

Re: disk i/o test

2022-03-06 Thread Brian Brombacher
> On Mar 6, 2022, at 7:41 AM, Mihai Popescu wrote: > > Since this thread is moving slowly in another direction, let me > reiterate my situation again: I am running a browser (mostly chromium) > and the computer slows down on downloads. Since I've checked the > downloads rates, I observed

Re: libressl vs openssl

2022-01-28 Thread Brian Brombacher
> On Jan 28, 2022, at 9:46 AM, dansk puffer wrote: > > Are there any major security differences between libressl and openssl > nowadays? From what I read the situation for openssl improved and some Linux > distros switched back to openssl again with mostly? OpenBSD remaining to use >

Re: httpd.conf: 2 interfaces, 2 listen, IPv6, only one server works

2022-02-06 Thread Brian Brombacher
> On Feb 6, 2022, at 4:51 PM, Brian Brombacher wrote: > >  > >> On Feb 6, 2022, at 4:32 PM, Mike Fischer wrote: >> >>  >>>> Am 06.02.2022 um 21:13 schrieb Brian Brombacher : >>> >>>>> You can work around it by putting b

Re: httpd.conf: 2 interfaces, 2 listen, IPv6, only one server works

2022-02-06 Thread Brian Brombacher
> On Feb 6, 2022, at 12:07 PM, Mike Fischer wrote: > > Hi Łukasz, > >>> Am 06.02.2022 um 12:08 schrieb Łukasz Moskała : >>> >>> W dniu 6.02.2022 o 05:28, Mike Fischer pisze: >>> OpenBSD 7.0 stable amf64 >>> My host has two ethernet interfaces, em0 and em1. >>> Note: The host is a VM with

Re: httpd.conf: 2 interfaces, 2 listen, IPv6, only one server works

2022-02-06 Thread Brian Brombacher
> On Feb 6, 2022, at 4:32 PM, Mike Fischer wrote: > >  >> Am 06.02.2022 um 21:13 schrieb Brian Brombacher : >> >>>> You can work around it by putting both interfaces in diffrent rdomains, >>>> then running two httpd instances, one in r

Re: libressl vs openssl

2022-01-28 Thread Brian Brombacher
> On Jan 28, 2022, at 11:53 AM, Laura Smith > wrote: > > ‐‐‐ Original Message ‐‐‐ > >> On Friday, January 28th, 2022 at 14:43, dansk puffer >> wrote: >> >> Are there any major security differences between libressl and openssl >> nowadays? From what I read the situation for