Re: How to open PDF that requires Adobe 9

2010-12-06 Thread Clint Pachl
Joel Wiramu Pauling wrote: I would be surprised if okular didn't open it. (okular being the KDE viewer) I don't have KDE so I can't test. But I did find this link: http://forum.kde.org/viewtopic.php?f=20t=91242 It looks like portfolio PDFs are not supported, although someone there

Re: How to open PDF that requires Adobe 9

2010-12-06 Thread Clint Pachl
ropers wrote: On 6 December 2010 22:42, Clint Pachlpa...@ecentryx.com wrote: Still get a single page PDF stating the above message. I guess it has to do with this PDF being a portfolio, like Anthony Bentley mentioned. How are the constituent PDFs stored in the portfolio PDF?

Re: How to open PDF that requires Adobe 9

2010-12-06 Thread Clint Pachl
Anthony Bentley wrote: This happens when there are multiple PDFs embedded in a single PDF file. I remember reading a Ghostscript bug about this (could probably find it again if I had the exact error message), but unfortunately Mupdf still doesn't support it. Here is the Ghostscript bug:

Re: Donations

2010-12-07 Thread Clint Pachl
Jason Crawford wrote: Better add Visa to the list as well And Swiss banks and Swedish women. :-)

Re: OT - secondary DNS recommendations

2010-12-08 Thread Clint Pachl
Scott McEachern wrote: It seems my free-as-in-beer secondary DNS service, EveryDNS.net, has abandoned WikiLeaks, so I'd like to return the favour. Given the (general) support of WikiLeaks here, I was wondering if anyone could recommend a free alternative to replace EveryDNS.net? I'm not

Re: OpenBSD 4.8's bsd.mp doesn't detect 4GB Memory

2010-12-14 Thread Clint Pachl
Denise H. G. wrote: I've switched to FreeBSD for my desktop with 4G memory... Unnecessary fear : $ sysctl kern.version kern.version=OpenBSD 4.8-current (GENERIC.MP) #547: Tue Dec 7 23:16:34 MST 2010

Re: OpenBSD 4.8's bsd.mp doesn't detect 4GB Memory

2010-12-14 Thread Clint Pachl
roberth wrote: omg, i am using 95% of my memory all the time, should i be worried? maybe kern.bufcachepercent=95 has something to do with it; blame Bob. Holy shit! Mine's at 10%. Maybe I should crank mine up to to 95% and then buy more RAM.

find(1) manpage caveats section

2011-02-08 Thread Clint Pachl
In the caveats section it states the following: Passing the output of find to other programs requires some care: $ find . -name \*.jpg | xargs rm or $ rm `find . -name \*.jpg` would, given files ``important .jpg'' and ``important'', remove

Re: find(1) manpage caveats section

2011-02-09 Thread Clint Pachl
Subtle; and what a caveat it is. Thanks Paul and Otto for setting me straight. Paul de Weerd wrote: On Wed, Feb 09, 2011 at 12:25:09AM -0700, Clint Pachl wrote: | In the caveats section it states the following: | | | Passing the output of find to other programs requires some care

Re: cwm: xterm -e and ssh-to

2011-02-22 Thread Clint Pachl
Dmitrij D. Czarkoff wrote: Hello! I'm running OpenBSD 4.9-beta (GENERIC.MP) #754: Thu Jan 20 17:49:26 MST 2011. I want my cwm to open xterm window with tmux on CM-Return, so I write in my ~/.cwmrc: command termuxterm +sb -bg #000 -fg #aaa -e tmux That does the trick with tmux, but ssh-to

ruby-thin: Errno::EPERM wtih QUIT Signal

2011-02-23 Thread Clint Pachl
I use Thin (ruby-thin) as the HTTP frontend for my web frameworks. STARTING/STOPPING: $ sudo -u #{USER} thin -C #{THIN_PRODUCTION_CONF} start $ sudo -u #{USER} thin -C #{THIN_PRODUCTION_CONF} stop THIN_PRODUCTION_CONF: --- rackup: config/config.ru address: localhost port: 3020 servers: 4

Re: ruby-thin: Errno::EPERM wtih QUIT Signal

2011-02-23 Thread Clint Pachl
Thanks Jeremy. I also reported this on Thin's bug tracking system as well. Jeremy Evans wrote: On Wed, Feb 23, 2011 at 4:32 PM, Clint Pachlpa...@ecentryx.com wrote: I use Thin (ruby-thin) as the HTTP frontend for my web frameworks. STARTING/STOPPING: $ sudo -u #{USER} thin -C

Re: laptop questions/comments

2011-04-19 Thread Clint Pachl
STeve Andre' wrote: On 04/15/11 19:03, Paul M wrote: Hi all, It's time for a new OpenBSD laptop, and I have a couple of questions. Note that I dont want to spend money on performance I dont need, but I do want to spend money on a decent quality machine. First, finding quality machines in

Re: intel pro/1000 PT PF

2007-10-30 Thread Clint Pachl
Kai Mosebach wrote: Does this also apply to amd64 ? If it didn't, there will usually be a mention of it in the bugs section of the driver's man page. I just wanted to know if the network cards : - - intel pro/1000 PT quad port - - intel pro/1000 PF (SX) quad port are surported by

Re: deploy openssl patch

2007-11-01 Thread Clint Pachl
Markus Wernig wrote: Dear list I have a couple of 4.1 firewalls that I would like to upgrade to 4.2. Before taking them online again I'd like to deploy the openssl patch from ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.2/common/002_openssl.patch I feel your pain. Others have dissed on you

Re: : deploy openssl patch

2007-11-02 Thread Clint Pachl
on the network. On Thu, Nov 01, 2007 at 02:25:31PM -0700, Clint Pachl wrote: Markus Wernig wrote: Dear list I have a couple of 4.1 firewalls that I would like to upgrade to 4.2. Before taking them online again I'd like to deploy the openssl patch from ftp://ftp.openbsd.org

Re: ftpd follow symlinks

2007-11-02 Thread Clint Pachl
Lord Sporkton wrote: OpenBSD 4.2 on i386: does ftpd have the capability to follow sym links? or is there a work around that would allow it to? Are these symlinks pointing outside the chroot? if not, will that support be added any time soon?

Re: ftpd follow symlinks

2007-11-02 Thread Clint Pachl
Lord Sporkton wrote: ahh, yes, they are, i have it chrooting to the user home, however the symlink in the user home is linked to something in /mnt hadnt thought of that, any way around that then? Yeah, don't chroot or bring the linked stuff into the chroot. On 02/11/2007, Clint Pachl

Re: Slow Performance on Encrypted svnd

2007-11-14 Thread Clint Pachl
knitti wrote: Instead of e.g. /dev/sd0a try /dev/rsd0a. I didn't try with svnd, but when copying partitions with dd I use this. I tried that, but like I said fdisk complained when the svnd device is associated with the raw direct access disk device. For example # vnconfig -k svnd0

Re: Slow Performance on Encrypted svnd

2007-11-14 Thread Clint Pachl
knitti wrote: On 11/14/07, Clint Pachl [EMAIL PROTECTED] wrote: knitti wrote: Instead of e.g. /dev/sd0a try /dev/rsd0a. I didn't try with svnd, but when copying partitions with dd I use this. I tried that, but like I said fdisk complained when the svnd device is associated

Re: Slow Performance on Encrypted svnd

2007-11-15 Thread Clint Pachl
%CP /sec %CP foo.mokaz.com 40M 8085 99 9444 99 6324 93 10517 96 15885 97 202.6 15 Clint Pachl wrote: Reading through the archives I have found several people say that encrypting via an svnd device isn't much slower than writing directly to a raw unencrypted disk. While I found

Re: securing OpenBSD wireless network

2007-11-18 Thread Clint Pachl
Lars Hansson wrote: On Nov 17, 2007 8:35 AM, David Higgs [EMAIL PROTECTED] wrote: I combined authpf with OpenVPN, using some big hints from some easily google-able places. Even though WEP and WPA aren't supported by OpenBSD, OpenBSD supports WEP. Does it even matter?

Compromising a host with pf enabled?

2007-11-19 Thread Clint Pachl
Is it possible for a cracker to compromise or root a machine on a network that has pf enabled with the single rule block all in?

Re: can't change password with passwd comand

2007-11-19 Thread Clint Pachl
Jumping Mouse wrote: When I try to change a user password I get an error. I do this: # passwd username enter a new password and get: pwd_mkdb: corrupted entrypwd_mkdb: at line #24pwd_mkdb: /etc/ptmp: Innapropriate file type or formatpasswd: etc/master.passwd unchanged how can I fix this?

Re: Compromising a host with pf enabled?

2007-11-19 Thread Clint Pachl
Chris Zakelj wrote: Clint Pachl wrote: Is it possible for a cracker to compromise or root a machine on a network that has pf enabled with the single rule block all in? I suspect you're just fishing, but in the interests of spirited debate - Is block in all the first rule, the last rule

Re: Compromising a host with pf enabled?

2007-11-19 Thread Clint Pachl
Chris Zakelj wrote: Greg Thomas wrote: It does say single rule. Yes, but at that point it becomes a rather useless system. It's likely to break in curious ways, since anything using the 127.0.0.1 loopback will, I think, either become unresponsive or start throwing errors. Ok, I'm in

Re: can't change password with passwd comand

2007-11-20 Thread Clint Pachl
Jumping Mouse wrote: Hi Clint and others, I tried: # rm spwd* pwd* passwd* ptmp # pwd_mkdb /etc/master.passwd then #passwd username but I am still getting: (for all users) pwd_mkdb: corrupted entrypwd_mkdb: at line #24pwd_mkdb: /etc/ptmp: Inappropriate file type or formatpasswd:

Re: can't change password with passwd comand

2007-11-20 Thread Clint Pachl
Jumping Mouse wrote: One more follow up: I added a new user. then tried to change the users password with the passwd command and I get the same results: pwd_mkdb: corrupted entrypwd_mkdb: at line #25pwd_mkdb: /etc/ptmp: Inappropriate file type or formatpasswd: /etc/master.passwd: unchanged

Re: can't change password with passwd comand

2007-11-20 Thread Clint Pachl
Jumping Mouse wrote: Hi Clint, Yes I am the one. as for changing the password this seems to happen to any user except for the root acount, I am able to use passwd to change the root account password. Here is line 24: (I removed the password and real usernmame)

Re: can't change password with passwd comand

2007-11-21 Thread Clint Pachl
. This should test whether your passwd program is working properly. It is weird that vipw works, but passwd complains. - Original Message - From: Clint Pachl To: Jumping Mouse Cc: misc@openbsd.org Sent: Tuesday, November 20, 2007 8:56 PM Subject: Re: can't change password with passwd

Re: can't change password with passwd comand

2007-11-21 Thread Clint Pachl
Jumping Mouse wrote: Ok, Ok I get the point. I agree that posting line 24 will not help, any user except root gives the same issues. And as a last and final attempt I will check the end of the file for any spaces as Clint suggested. You mean you haven't check for empty lines and trailing

Re: Compromising a host with pf enabled?

2007-11-21 Thread Clint Pachl
Darren Spruell wrote: On Nov 19, 2007 10:53 PM, Clint Pachl [EMAIL PROTECTED] wrote: In my DMZ research, some sources state that all services need to be replicated in each DMZ. Following that advice, I would have to setup Kerberos, ntp, backup, and DNS in each DMZ and the LAN; that sounds

Re: Using tip or cu with a multi-port serial card

2007-11-28 Thread Clint Pachl
Jeff Ross wrote: Hi, I got my 4 port serial card and installed it in my firewall today puc0 at pci1 dev 0 function 0 Oxford OX16PCI954 rev 0x00: ports: 4 com pccom3 at puc0 port 0 irq 11: st16650, 32 byte fifo pccom3: probed fifo depth: 16 bytes pccom4 at puc0 port 1 irq 11: st16650, 32 byte

Re: mutt and Stallman

2007-12-18 Thread Clint Pachl
Girish Venkatachalam wrote: I am giving first aid after the war but still it will help. I can give a lot of relief to those of you who had nervous breakdowns and blood pressure problems due to spam mails getting in the way of useful technical stuff. It is not hard at all. First thing is

Emacs Meta bindings not working after upgrade

2012-09-11 Thread Clint Pachl
After upgrading my system to the latest snapshot my Emacs META bindings are not working properly in the terminal. For instance, from xterm, the bindings: M-B (backward-word), M-F (forward-word), M-D (kill-word), output the the characters, â, æ, ä, respectively. However, the standard or

Re: Emacs Meta bindings not working after upgrade

2012-09-12 Thread Clint Pachl
I would like to clarify that I'm using cwm. However, I have the same issue from a login terminal (without X). Also, I don't use Emacs, the editor, just the emulation on the command line. So in my ~/.kshrc I have: set -o emacs Clint Pachl wrote: After upgrading my system to the latest snapshot

Is fdisk, disklabel and newfs enough to reset an SSD

2013-05-13 Thread Clint Pachl
I would like to reinstall a fresh system on an SSD that contains an existing installation. From my limited knowledge of SSDs, I wonder if the drive controller may retain data from the old filesystem, unaware that there is a new filesystem put in place. Is this a concern? If so, how does one

Re: Is fdisk, disklabel and newfs enough to reset an SSD

2013-05-13 Thread Clint Pachl
Scott McEachern wrote: 2) Do you mean there could still be data residing on unused parts of the SSD? Yes, it can happen. Yes, this is what I'm referring to. I was hoping there was some way to instruct the drive controller that the entire drive space is free? SSDs have their own way of

Re: Is fdisk, disklabel and newfs enough to reset an SSD

2013-05-15 Thread Clint Pachl
Jan Stary wrote: If so, how does one reset a used SSD for optimal operation with a fresh install? Just treat it as any other disk - which it is. This is wrong, unfortunately. From the OS perspective, sure, sort of. But there is more to the story. There is overprovising, garbage collection,

FFS vs FFS2: newfs fsck

2013-05-23 Thread Clint Pachl
I created a new filesystem on a 232.9 GB partition on a 500 GB external USB drive that will be used as backup storage for dump files. Out of curiosity, I recreated the filesystem using FFS2 (I never created an FFS2 before). I noticed it was much faster, so I clocked it for comparison: # ###

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Clint Pachl
mia wrote, On 10/18/13 16:33: If you're handling DHCP for all of the traffic for your site, why not just set up a dns server, point your dhcp clients to this DNS server and create an authoritative zone for facebook.com that points to somewhere other than facebook? Running your own own DNS

Generating a secret: /dev/random vs openssl rand

2013-10-24 Thread Clint Pachl
For years I've been using `openssl rand -base64 N` to generate secrets. However, I recently saw `dd if=/dev/random bs=N count=1 | openssl base64` used. Is one more secure and random than the other? Is openssl rand not secure if the -rand file option is omitted? I'm guessing openssl may suck

Terminate session on serial terminal (com0) when ssh disconnects

2014-08-12 Thread Clint Pachl
Here's my situation: I ssh into a remote server in my group. From that server, I connect to an adjacent, local server in the group via the serial terminal using tip(1) or cu(1). If the ssh connection is disconnected, the login session to the second server's serial com0 will remain open/active.

Generating random.seed for network boot clients

2014-08-15 Thread Clint Pachl
Is it safe to generate some randomness in /tftpboot/etc/random.seed for clients that PXE boot? My concern is that this file will be available to everyone on the network via TFTP. So does knowing this randomness help predict the PRNG output of the clients that use it? I read in a de Raadt

Re: Generating random.seed for network boot clients

2014-08-16 Thread Clint Pachl
Paul de Weerd wrote, On 08/15/14 14:51: At any rate, this changes that to allow world readable files (still not taking world writable files). We can't check S_IWOTH over tftp, we should probably assume 0777 for files transferred that way. But, if you're trusting the kernel you're getting over

Re: Generating random.seed for network boot clients

2014-08-16 Thread Clint Pachl
Christian Weisgerber wrote, On 08/15/14 18:36: On 2014-08-15, Paul de Weerd we...@weirdnet.nl wrote: What you could do is use the -r option to tftpd(8) to hand out a new file to each client that connects. Or just periodically (like, every hour or every minute, depending on the load of your

Why are there NSA, CSIS, and GOOGLE IDs in my ftplist.cgi

2014-08-16 Thread Clint Pachl
I checked out my saved install configurations at http://129.128.5.191/cgi-bin/ftplist.cgi and noticed that at the end of the file there are fields named NSA_ID, CSIS_ID, and GOOGLE_ID. They all sound scary. Each time I refresh the page, only one of the three IDs appear, but they seem to

Re: Generating random.seed for network boot clients

2014-08-17 Thread Clint Pachl
Christian Weisgerber wrote, On 08/16/14 08:54: On 2014-08-16, Christian Weisgerber na...@mips.inka.de wrote: How about making etc/random.seed a named pipe and feeding chunks of /dev/random to it? I've now put this into my /etc/rc.local: --- # Provide fresh random.seed for

Re: Why are there NSA, CSIS, and GOOGLE IDs in my ftplist.cgi

2014-08-17 Thread Clint Pachl
Theo de Raadt wrote, On 08/16/14 09:39: On Sat, Aug 16, 2014 at 04:03, Clint Pachl wrote: I checked out my saved install configurations at http://129.128.5.191/cgi-bin/ftplist.cgi and noticed that at the end of the file there are fields named NSA_ID, CSIS_ID, and GOOGLE_ID. They all sound scary

Re: hang at syncing disks... done

2014-08-25 Thread Clint Pachl
Marko Cupać wrote, On 08/21/14 15:32: On 21-08-2014 11:38, Marko Cupać wrote: I have just installed OpenBSD 5.5 on my ThinkPad T440. At first glance everything seems to work OK, except for the fact that, when shutting down or restarting, system hangs at 'hang at syncing disks... done'. This

Re: How to log in automatically to GUI?

2014-08-25 Thread Clint Pachl
somelooser3...@hushmail.com wrote, On 08/25/14 12:54: I installed an OpenBSD desktop and in the /etc: rc.conf.local:xdm_flags=# enabled during install How can I set the automatic login for a user without prompting for password? It seems one should be able to get

Re: Problems with older nc without -N option ... also how to detect nc version

2014-08-29 Thread Clint Pachl
Alan McKay wrote, On 08/27/14 09:56: I'm writing some scripts to clone over the network, and since I have mostly boxes that do not have the -N option on nc, this is proving to be an issue. I have a bunch of dump files - one for each filesystem - that were created from a live system. When I

Re: How to log in automatically to GUI?

2014-09-01 Thread Clint Pachl
Clint Pachl wrote, On 08/25/14 16:36: It seems one should be able to get getty(8) to do this using /etc/ttys. I tried: console /usr/bin/su -l USER -c /usr/X11R6/bin/startx xterm on secure which automatically launched X, but I didn't have access to the console (i.e., no write permission

Re: How to log in automatically to GUI?

2014-09-01 Thread Clint Pachl
Andy Bradford wrote, On 08/27/14 08:35: Thus said Clint Pachl on Mon, 25 Aug 2014 16:36:26 -0700: If someone knows how to do this properly via getty(8), I would be very interested. I've used this successfully (not sure how proper it is): /etc/ttys: ttyC0 /usr/libexec/getty console.nopw

Retired 4.4-beta

2014-09-24 Thread Clint Pachl
I just wanted to share my story ... I finally retired my old AOpen desktop router which was running 4.4-beta from July 2008 until now. I originally set it up to test pf and routing for my company's network. It seemed to work fine so I put it into production. Then I just kind of forgot about

Re: What are the disadvantages of soft updates?

2015-02-02 Thread Clint Pachl
Alexandre Ratchov wrote, On 01/19/15 02:44: On Mon, Jan 19, 2015 at 03:59:34AM +, currellbe...@gmail.com wrote: Hello, The FAQ[1] states that soft updates result in a large performance increase in disk writing performance, and links to a resource[2] which claims that soft updates, in

Re: dump and duid

2015-03-07 Thread Clint Pachl
Jan Stary wrote, On 02/27/15 06:09: This is current/amd64. After cleaning my machine I reconnected two of my disks in reverse; what was sd0 is sd1 now, and vice versa. I do nightly dumps of the filesystems, starting with level 0 on early Monday morning, continuing with incremental 1, 2 etc

Re: hw.sensors and high fan RPM

2015-03-13 Thread Clint Pachl
I have a T410 as well and I don't use it because of the fan noise. I bought it to replace my T61, but I continue to use the T61 because it's slightly less noisy at 2935 RPM. I looked for solutions several times but never found one. I even laid down new Arctic Silver 5 thermal paste and

Re: Recommended Industrial PCs?

2015-12-01 Thread Clint Pachl
Martin Haufschild wrote on 08/26/15 12:11: can someone recommend me an Industrial PC (IPC) to use with OpenBSD? I would like to have a lot of hardware supported from this IPC by OpenBSD. I've had great luck with Lanner (http://www.lannerinc.com/). I've been running a LEC-2280 and FW-7541 for

doas(1) -s argument; What's the benefit?

2016-01-12 Thread Clint Pachl
First, thank you Mr. Unangst for a beautifully simple piece of code. The configuration file is a delight as well. I was happy to remove sudo from my servers. What I don't understand is the `-s` argument used to execute a shell. What would a corresponding doas.conf(5) look like? Can't shell

Re: the problem with the OpenBSD installer

2016-01-17 Thread Clint Pachl
Jan Stary wrote on 01/17/16 14:29: After installing various UNIX-like systems today, I realized what the problem is with the installer: it makes installing any other system a DAMN ORDEAL. The installer is what initially addicted me to OpenBSD. Back in the late 90s until about 2003 I used

Re: Mouse click problems with firefox and firefox-esr (and Seamonkey)

2016-04-23 Thread Clint Pachl
Nick wrote on 03/30/16 11:23: I have tried both firefox and firefox-esr in both OpenBSD 5.8 and 5.9 and can say that there are issues with the mouse not picking up 10-15% of my clicks, sometimes having to click a good 3 times or more for it to actually work correctly! When I select and drag

Spammer whitelisted by spamd. How?

2017-02-04 Thread Clint Pachl
Can someone explain how the spammer at 81.7.16.33 got white listed by spamd and delivered 3 spam emails to me? What exactly triggered the white listing? I may not understand spamd's behavior, but according to the spamd log below, the spammer attempted only 5 deliveries via spamd, each with a

Re: Removal of old libraries

2016-11-07 Thread Clint Pachl
Ax0n wrote on 09/03/16 13:12: I've got a Toshiba NB305 netbook that's been my daily-use laptop for more than 6 years now. The last fresh install I did was OpenBSD 4.9-RELEASE in early May 2011. I've been quite happy with how it works, and I've been doing bsd.rd upgrades and M:Tier binary updates

Re: Removal of old libraries

2016-11-14 Thread Clint Pachl
Jan Stary wrote on 11/14/16 03:00: On Nov 14 00:14:19, pa...@ecentryx.com wrote: But the very next step in the upgrade blows away the system by overwriting it anyway. Right? What could happen? What if following the normal procedure of untaring the OS sets on top of the existing system fails

Re: Removal of old libraries

2016-11-13 Thread Clint Pachl
Amit Kulkarni wrote on 11/08/16 07:22: On Tue, Nov 8, 2016 at 12:53 AM, Clint Pachl <pa...@ecentryx.com> wrote: Ax0n wrote on 09/03/16 13:12: I've got a Toshiba NB305 netbook that's been my daily-use laptop for more than 6 years now. The last fresh install I did was OpenBSD 4.9-R

Re: Recommendation for firewall appliance running of and OpenBSD

2016-11-25 Thread Clint Pachl
Tito Mari Francis H. Escaño wrote on 11/24/16 13:15: Hi everyone, Can somebody please recommend me a firewall appliance that can run OpenBSD and pf, and can be upgradeable to the latest version? It would be a great plus if the appliance can also be configured as part of CARP firewall group.

Re: Saw-shaped load on idle computer

2016-11-16 Thread Clint Pachl
li...@wrant.com wrote on 11/16/16 18:07: Tue, 15 Nov 2016 14:34:28 -0700 Clint Pachl <pa...@ecentryx.com> Does /var/log/* have any clues? No. Philippe Meunier wrote on 11/15/16 06:11: Hello, I'm just curious: what is it in the kernel that wakes up about every minute to do some wor

Re: Saw-shaped load on idle computer

2016-11-15 Thread Clint Pachl
Does /var/log/* have any clues? Philippe Meunier wrote on 11/15/16 06:11: Hello, I'm just curious: what is it in the kernel that wakes up about every minute to do some work even on a completely idle machine? I'm asking because xload shows some curious looking saw shaped load like this:

spamd and network whitelisting

2016-12-16 Thread Clint Pachl
I would like to share my 45-day experience with running spamd and my observations and how I'm allowing mail from SMTP clusters to bypass spamd. Feedback and discussion would be greatly appreciated. I have two domains that I have been using for my businesses: one is 13 years old and the other

Re: Installer : deselecting X* sets if user doesn't want to run X

2016-12-05 Thread Clint Pachl
Clément 'wxcafé' Hertling wrote on 12/03/16 07:29: Hey, So each time I install an OpenBSD system I have to both answer no as to whether I want to run X on the system, and then deselect the X* sets. It's not a big thing, but I thought it couldn't be that hard to make it automatic, that is, if

Re: spamd and network whitelisting

2016-12-20 Thread Clint Pachl
Some have requested my scripts and configurations so here it is. Below you fill find the spamd-dnsbl and spamclusterd scripts that are used for blacklisting spammers and whitelisting networks, respectively. Also included is dnsbl-check which I use for testing IPs against multiple DNSBLs. In

Re: spamd and network whitelisting

2016-12-20 Thread Clint Pachl
Devin Reade wrote on 12/19/16 12:59: You might also want to look at bgp-spamd. Yes, this was on my radar for quite some time. However, my simple spamd setup with assistance from the zen.spamhaus.org DNSBL has been extremely effective. It's nice to know we've got more big guns if needed.

Unexpected security(8) output

2018-01-26 Thread Clint Pachl
I received the following output from security(8): Running security(8): Can't opendir(/home/pachl/.cache/mozilla/seamonkey/e8cxa4g0.default/safebrowsing-backup): No such file or directory at /usr/libexec/security line 594. I didn't realize security parses through user files; beyond a few dot

How to split (A/B) test landing pages using httpd(8)

2021-04-15 Thread Clint Pachl
Does anyone know if it's possible to rotate/alternate between two files for the same given request path, using just httpd? For example, I want to split test two pages: /test/A & /test/B. I would like to serve half of the traffic to each for the request path /test/. Ideally, I would like to do an

Suspend/hibernate broken [upgrade: 6.9 to 7.0] (solution)

2021-12-29 Thread Clint Pachl
This is how I got suspend and hibernate working again on my Huawei Matebook after upgrading to 7.0 release. I thought I'd share here in case it helps someone else. SYNOPSIS: Initiating a "sleep" state blanks the screen and illuminates the keyboard (indicating sleep is immenent); but the laptop

Understanding pf statistics

2022-04-27 Thread Clint Pachl
In the following command, is "Packets" the number of dropped packets after 5,435,315 evaluations of that block rule? If so, is "Bytes" the total size of those 16,303 dropped packets? And is "States" zero because it is a block rule, thus no state created? # pfctl -s rules -vR11 block drop in log

<    1   2