Re: How to follow -stable and verify it with signify?

2014-09-30 Thread trondd
There are SSH fingerprints published for each of the CVS servers. Alternatively, you use the patch files which are signed. There aren't so many of them that's it hard to catch up. Tim. On Tue, Sep 30, 2014 at 10:37 AM, Alan McKay alan.mc...@gmail.com wrote: On Tue, Sep 30, 2014 at 10:27 AM,

Re: How to follow -stable and verify it with signify?

2014-09-30 Thread trondd
On Tue, Sep 30, 2014 at 11:30 AM, Giancarlo Razzolini grazzol...@gmail.com wrote: On 30-09-2014 11:56, trondd wrote: There are SSH fingerprints published for each of the CVS servers. They are published on a clear http page and there is no SSHFP on the dns. You need to access the anoncvs

Re: How to follow -stable and verify it with signify?

2014-09-30 Thread trondd
On Tue, Sep 30, 2014 at 11:57 AM, Giancarlo Razzolini grazzol...@gmail.com wrote: Is it good enough to grab the signed source tarball, then checkout from CVS over it and make sure nothing changed in the process? No, this won't cut it. Unless you check every line changed, and understand

Re: No SSH fingerprints for Alberta Anon CVS Server?

2014-10-01 Thread trondd
At the bottom of the list: Note: If your server is listed on here with inaccurate or unknown information, please contact b...@openbsd.org There is also a maintainer contact email for each mirror. Coincidentally, the one for Alberta is b...@ualberta.ca Funny, if it is the same beck, seems like

Re: xombrero crashes with 'Bus error'

2014-10-01 Thread trondd
Are you rebuilding xombrero from the ports tree or reinstalling an existing built package? Is your ports tree from the same snapshot as your installed system? Tim.

Re: xombrero crashes with 'Bus error'

2014-10-02 Thread trondd
I can't tell if you're actually rebuilding and reinstalling your ports. What does 'pkg_info | grep gtk' show? Either the src and ports trees are out of sync or your installed ports are.

Re: Changing MTU size

2014-10-02 Thread trondd
I'm pretty sure that any parameter you can pass to ifconfig on the command line, you can also put into the interface's /etc/hostname.* file. It will then be set at every boot or anytime the interface is restarted with netstart. Tim.

Re: Changing MTU size

2014-10-03 Thread trondd
The man page for dhclient.conf shows the ability to ignore options sent by the dhcp server. If hostname.* doesn't do it, that might be necessary. Tim. On Fri, Oct 3, 2014 at 4:10 AM, Daniel Ouellet dan...@presscom.net wrote: On 10/2/14 11:39 PM, Daniel Ouellet wrote: May be a bit more for

Re: smtpd smarthost ISP config

2014-10-08 Thread trondd
What is the failing result? Does the email bounce? Error in the log? Does your smtp server require authentication and you need to provide a password with the secrets.db?

Re: Live resize / filesystem?

2014-10-13 Thread trondd
Hmm...not as easy as a cloud template, but could you dump the installed partition, use bsd.rd or the like to create the partition the desired size then restore the dump to it?

Re: Mount RAID 1, CRYPTO softraid at boot

2014-10-25 Thread trondd
I added it /etc/rc (at my own peril). In 5.6, they added they net option to mount so in fstab I label the encrypted file systems as net, then call bioctl before the net partitions are mounted and fsck'ed. I also called it 3 times: bioctl || bioctl || bioctl to give me 3 shots at the password.

Re: 5.6 arrived

2014-10-28 Thread trondd
As a release engineer, the numbering convention of the snapshots does seem confusing to me at first. But if it works for the project, that's what's important. And as Theo brought up, numbering them 57 snapshots doesn't fix anything. It just changes the confusion. Instead of you asking if the 56

Re: pf rdr-to and access from internal network

2014-10-28 Thread trondd
Are you telnetting to the external IP of the server from the internal client? Have you enabled logging in pf? Are the packets blocked or are they passed by a different rule that doesn't give the expected results? Tim.

Re: Logging Password change attempts

2014-10-30 Thread trondd
The second problem I have is that when I change password, out of habit, I do a passwd instead of mypasswd. Why not call the script passwd and put it in the path ahead of the real one? What is the goal? Are there users on the system trying to brute force change a password? Or are you just

Re: Logging Password change attempts

2014-10-30 Thread trondd
Also check passwd(5), master.passwd holds expiration and last change information (I don't have in enabled anywhere, so I am not sure what it looks like) that maybe you could generate a report from if you are enforcing password expiry that way. Tim.

Re: Logging Password change attempts

2014-10-30 Thread trondd
Only other thing I could think of is monitoring the right file access or system calls or the like and logging that. But the script is probably the simplest and if anyone circumvents the script by calling passwd directly, it only means their password is newer than expected, which isn't as much of

Re: OpenBSD 5.6/amd64 WLE200NX (Atheros AR9280) athn issues

2014-11-02 Thread trondd
Same here. About 3 timeouts a day and I get close to 10% errors on the input on 2 different athn devices. On Nov 2, 2014 7:49 PM, Zé Loff zel...@zeloff.org wrote: On Mon, Nov 03, 2014 at 01:13:40AM +0100, Stefan Krüger wrote: Hi, I have a PC Engines APU board with a Compex WLE200NX

Re: strange behavior in disklabel partitioning of new disk

2014-11-04 Thread trondd
On Tue, Nov 4, 2014 at 12:53 AM, Brian McCafferty br...@mccafferty.ca wrote: On 11/03/14 22:33, Jonathan Thornburg wrote: I'm trying to set up 5.6/amd64 on a new-from-the-factory 750GB disk which I've just had installed in a Thinkpad T60. (This Thinkpad had previously been running

Re: strange behavior in disklabel partitioning of new disk

2014-11-04 Thread trondd
If it's a new disk, you don't need to zero anything. That's to clean up previous RAID array data. That doesn't really answer the question of what is going wrong but at least it gets you up and running. Tim. Well, I take it back. The FAQ does say to zero a crypto partition. I never

Re: Interface sequencing

2014-11-04 Thread trondd
On Tue, Nov 4, 2014 at 2:52 PM, Ted Unangst t...@tedunangst.com wrote: On Tue, Nov 04, 2014 at 11:21, Jason Adams wrote: So can anyone point me to the settings where the sequence of bringing up interfaces is controlled at boot time? Or am I just going to have to set default gateway after

Re: Temperature

2014-11-14 Thread trondd
Did a fan die? Or are you blocking the vent somehow? I killed a laptop like that once by putting it on my lap. Turned out the fan vent was on the bottom and the laptop needed to be on a flat surface. Usually called a desk. So I don't know why it was classified as a laptop. :) Tim.

Re: xombrero crashes with ReferenceError: Can't find variable: iom

2014-11-16 Thread trondd
On Sat, Nov 15, 2014 at 11:21 PM, Luiz Roberto dos Santos arrowscr...@mail.com wrote: Seems to happen not just on OpenBSD, but also on 3.2 linux-libre kernel. Why not remove Xombrero from -current? Any thoughts? I mean, it's good, but is based on webkit, and have some bugs... maybe port Abaco

Re: xombrero crashes with ReferenceError: Can't find variable: iom

2014-11-16 Thread trondd
On Sun, Nov 16, 2014 at 1:10 PM, Kevin Chadwick ma1l1i...@yahoo.co.uk wrote: On Sun, 16 Nov 2014 11:45:46 -0500 trondd wrote: I installed xombrero, but my snapshot is old and I need to update. No issues so far. Maybe it's specific sites? There are definately bugs beyond memory leaks

Re: xombrero crashes with ReferenceError: Can't find variable: iom

2014-11-18 Thread trondd
On Mon, Nov 17, 2014 at 2:39 PM, Stefan Wollny stefan.wol...@web.de wrote: Am 11/17/14 um 20:27 schrieb Stefan Wollny: [ ... ] /usr/local/libexec/gstreamer-1.0/gst-plugin-scanner:/usr/lib/libstdc++.so.57.0: /usr/local/lib/libestdc++.so.16.0 : WARNING:

Re: xombrero crashes with ReferenceError: Can't find variable: iom

2014-11-18 Thread trondd
Quark requires webkit 1.0. I don't even know where to get that anymore. Although their concept of locking a tab to a domain is an interesting one. Tim. Scratch that. I was confusing webkit and webkitgtk{2,3}

Re: apcupsd via USB on 5.6

2014-11-20 Thread trondd
When you sent this, I had a new UPS in the mail on its way to me that I specifically bought to be compatible with OBSD. I, too, have the same issue. Tim. On Thu, Nov 20, 2014 at 11:03 AM, Steven Surdock ssurd...@engineered-net.com wrote: I just upgrade from 5.5 to 5.6 on i386 and apcupsd

Re: apcupsd via USB on 5.6

2014-11-20 Thread trondd
Depending on what you configured apcupsd to do and what sysctl exposes, you may be able to create equivalent behavior using sensorsd(8). There's a brief overview in the comments of the undeadly article below, to serve as starting point for your needs:

Re: pkg_add update checker?

2014-11-22 Thread trondd
At the moment I am on 5.6-release But you want to track -stable OS and packages. There is a -stable ports branch. I don't know what the criteria is for what is checked in there, but there are certainly updates related to security issues at least. Probably depends a lot on the port maintainer.

Re: Is this a gstreamer-issue?

2014-11-22 Thread trondd
This error does not show up with only one regular http-site, but (at least with Firefox) happens with 7+ tabs opened. What sites? Always the same sites? Different sites? What have you tried? How much time goes by before is hangs? Do you have to be doing anything at the time? Both

Re: lii0 no link on 5.6-current i386

2014-11-24 Thread trondd
Just to clarify, these have been fresh installs of 5.6-release and 5.6-current. Both bsd.rd and bsd seem not to find the lii interface. 5.5-release behaves almost the same way, though the link status light stays on until I try to use dhclient on lii0, both in bsd and bsd.rd. Well if I'm

Re: lii0 no link on 5.6-current i386

2014-11-24 Thread trondd
On Mon, Nov 24, 2014 at 3:12 PM, trondd tro...@gmail.com wrote: Just to clarify, these have been fresh installs of 5.6-release and 5.6-current. Both bsd.rd and bsd seem not to find the lii interface. 5.5-release behaves almost the same way, though the link status light stays on until I try

Re: Patch 009_httpd.patch did not apply cleanly

2014-11-25 Thread trondd
I had noticed the same thing. The src tarball on the CD is different from the tarball on the mirrors. I had taken a quick look and it was just whitespace differences that I saw. Tim.

Re: lii0 no link on 5.6-current i386

2014-11-26 Thread trondd
I've now set aside hardware to build on and have been reading up on CVS. More than one file is involved because 'mii_phy_activate' is defined outside of acphy.c so the build stops there. I can see how to roll back the one file (acphy.c) but not how to identify the others that were part of

Re: Packet Filter router i368 vs 64bit

2014-11-28 Thread trondd
On Fri, Nov 28, 2014 at 12:00 AM, Edgar Pettijohn pettijo...@hotmail.com wrote: This is something I've been interested in trying, but I would want it as a wireless access point as well and not sure what cards are supported and work well. Does anyone know of any good choices? I went with an

Re: npppd and vpn connections on the same network

2014-12-01 Thread trondd
I had this set up for an Android and an OSX client. Ignore the networks part and configure the connections for the end points. I took the npppd assigned IPs out of my DHCP range. My problems, though: Needed a specific npppd config for each client. Username, assigned IP, whatever else goes

Re: Upgrade guide 5.5 to 5.6: sysmerge options

2014-12-02 Thread trondd
What would the correct usage of sysmerge be as the online-version of 'man(8) sysmerge' does not know about the options '-s' and '-x'? If they are not valid parameters anymore, did you try it without them? The *etc.tgz tarballs are not standalone anymore, they are part of base and exist in a

Re: OpenBSD 5.6 problem with Firefox,Chrome when playing flash Videos

2014-12-06 Thread trondd
On Thu, Dec 4, 2014 at 4:16 PM, Tasos Tsolakidis 1 ta...@tsolakidis.de wrote: [28.377] (WW) checkDevMem: failed to open /dev/xf86 and /dev/mem (Operation not permitted) Check that you have set 'machdep.allowaperture=1' in /etc/sysctl.conf and reboot your machine

Re: sensorsd, upd, and state changes

2014-12-08 Thread trondd
On Mon, Dec 8, 2014 at 11:47 AM, David Higgs hig...@gmail.com wrote: sysctl(8) will display Off if the value is zero, and On for nonzero. So, using the closed interval rule above, you should use high=0 for indicators that you consider in good state when Off (i.e. ShutdownImminent), and low=1

Re: sensorsd, upd, and state changes

2014-12-08 Thread trondd
On Mon, Dec 8, 2014 at 3:23 PM, trondd tro...@gmail.com wrote: On Mon, Dec 8, 2014 at 11:47 AM, David Higgs hig...@gmail.com wrote: sysctl(8) will display Off if the value is zero, and On for nonzero. So, using the closed interval rule above, you should use high=0 for indicators that you

Re: sensorsd, upd, and state changes

2014-12-08 Thread trondd
On Mon, Dec 8, 2014 at 3:45 PM, David Higgs hig...@gmail.com wrote: I'm working with tech@ and slowly writing diffs to improve these things. --david I saw that. Thanks! Tim.

Re: Hide VM data from customer

2014-12-10 Thread trondd
What about using a kay partition local to the VM disk http://marc.info/?l=openbsd-miscm=141435482820277w=2 You'd be maintaining code either way, though. Or add an additional disk to the VM that is the keydisk. Tim.

Re: x over ssh

2014-12-13 Thread trondd
Option 2 is what I'm looking for. Looks like you are correct after looking through /usr/X11/bin and /usr/X11R6/bin on the mac there is no xserver. OSX does not include X11 anymore, you need to install XQuartz. I've done this setup between Linux and a Mac. Had to add my Mac to the xauth then

Re: Best way to upgrade latest OpenBSD version

2014-12-19 Thread trondd
On Fri, Dec 19, 2014 at 9:51 PM, Ignacio Ocampo naf...@gmail.com wrote: I know that one of the goals of OpenBSD dev team is launch a new version every six months. I'm new here, and, I want to know, what is the best way to update OpenBSD? There is an automated way to do it? Thanks --

Re: Web Browsers crashing

2014-12-21 Thread trondd
On Dec 21, 2014 10:11 AM, Richard E. Thornton thornton.rich...@gmail.com wrote: It seems that a particular c++ library is not linking properly. Any suggestions? Richard Thornton Why do you think this? Can you provide an error message or stack trace? Also what are your ulimits or login.conf

Re: Upgrading issues (i386 on PPro class) 5.4-5.5 leaving system horked

2015-01-02 Thread trondd
Damon Getsman damo.g...@gmail.com wrote: So, can anybody tell me, is my situation just so hosed that it's helpless? I mean, should I stop waiting for potential ways to fix this dependency hosed box and reinstall and try to find a way to re-inject all of my data into it, or are the gurus just

Re: My computer suddenly turned itself off.

2015-01-22 Thread trondd
Joel Rees joel.r...@gmail.com wrote: all at the time. All browser stuff. I was thinking less about load and more about firefox dying and taking the system with it. Firefox 26.0 from the openbsd 5.5 packages. Google even keeps telling me the browser is no longer supported by them. Need to

Re: My computer suddenly turned itself off.

2015-01-21 Thread trondd
Check 'sysctl hw.sensors' and see if you have some temp sensors in there and what they're telling you. Tim.

Re: a thankyou to OpenBSD

2015-02-11 Thread trondd
On 2/10/15, Diana Eichert deich...@wrench.com wrote: names to something more useful than p3p2!!!. That's an easy one. I have eno16780032. Awesome. I try to stay away from as much of the Linux configuration as possible and administer the applications. My contribution is running yum upgrade

Re: Help needed: pkg_add dropps connections

2015-02-17 Thread trondd
On 2/17/15, Gene gh5...@gmail.com wrote: On Tue, Feb 17, 2015 at 2:37 PM, trondd tro...@gmail.com wrote: He's using http protocol. Just because the hostname has ftp in it, doesn't mean it's the ftp protocol. It's not just the hostname I'm basing it off of, it's the error message

Re: OpenBSD firefox useragent Facebook

2015-02-18 Thread trondd
I've got two workstations and one laptop running amd64/current. problem, neither does my laptop when it's connected through various gateways. And what do you think your user agent is when you connect through those other gateways? ipchicken.com should tell you. This might have to do with

Re: Help needed: pkg_add dropps connections

2015-02-17 Thread trondd
When you are behind your server are you using NAT to get to the internet or a proxy? If proxy, do you have the proxy environment variables set? Tim.

Re: Help needed: pkg_add dropps connections

2015-02-17 Thread trondd
On 2/17/15, Stefan Wollny stefan.wol...@web.de wrote: Am 02/17/15 um 20:36 schrieb trondd: When you are behind your server are you using NAT to get to the internet or a proxy? If proxy, do you have the proxy environment variables set? Tim. Hi Tim, thanks for caring. No - I am

Re: Short path to making Android APKs under OpenBSD?

2015-02-19 Thread trondd
On 2/19/15, Alan Corey alan01...@gmail.com wrote: Can't it be done with make or cmake? Perhaps... We use maven, where I work. The benefit of Android Studio (besides an IDE, if you want one) is the emulators which you don't need at the packaging phase.

Help needed: pkg_add dropps connections

2015-02-17 Thread trondd
He's using http protocol. Just because the hostname has ftp in it, doesn't mean it's the ftp protocol. Also, yes, I believe sudo only carries over the environment variables explicitly told to do so. Can you download packages with a web browser? Have you tried using the ftp program directly?

Improved www/links+ with libtls

2015-01-27 Thread trondd
I use www/links+ often as a nice lightweight browser. However, I realized it didn't do any SSL certificate validation. I found a patch that added basic validation (while silently allowing self signed certs) but still didn't do hostname verification. I went in search of some examples of hostname

Re: Updating Ports Question

2015-01-05 Thread trondd
On Mon, Jan 5, 2015 at 4:00 PM, John Merriam j...@johnmerriam.net wrote: If I then do another /usr/ports/infrastructure/bin/out-of-date I still see this: Collecting installed packages: ok Collecting port versions: ok Collecting port signatures: ok Outdated ports: devel/quirks

Re: ntpd.drift values?

2015-01-13 Thread trondd
The only system I have outside that range is my Zaurus SL-C3000 which is e-07. Tim. On 1/12/15, Christian Weisgerber na...@mips.inka.de wrote: I'm interested in what values people have in their /var/db/ntpd.drift files. To prevent a deluge: Looking over my own machines, I see that most

Re: man -m: Bad argument

2015-02-12 Thread trondd
Ok, I don't know how this is controled, but the problem is, you are actually running mandoc for which, -m means something different. I am running actual man, I guess. I just updated -current this morning (snapshot from 2/10) so I don't know what the difference is.

Re: man -m: Bad argument

2015-02-12 Thread trondd
Do you have another man installed somewhere? $ man -V mandoc 1.13.2

Re: man -m: Bad argument

2015-02-12 Thread trondd
On 2/12/15, John Merriam j...@johnmerriam.net wrote: On Thu, 12 Feb 2015, Jan Stary wrote: On Feb 12 11:12:46, j...@johnmerriam.net wrote: On 2015-02-12 10:50, Jan Stary wrote: On Feb 12 10:15:08, j...@johnmerriam.net wrote: What does it show when you run the alias command with no

Re: Maintaining your system with snapshots

2015-02-20 Thread trondd
On 2/20/15, jungle Boogie jungleboog...@gmail.com wrote: If you are on -current but you haven't updated in many, many snapshot cycles, do you update current or just get the latest snapshot? Personally, I don't run -current from source. I have built subsets of the tree to pick up a patch. But

Re: bypass xlock/slock

2015-03-09 Thread trondd
On 3/9/15, Tim van der Molen tb...@xs4all.nl wrote: Another solution: startx lock -np This is the method I use, as well.

Re: httpd tls - what am i missing?

2015-03-25 Thread trondd
On 3/25/15, Theodore Wynnychenko t...@uchicago.edu wrote: Is there anything for me to look at/consider in trying to correct this? Thanks Ted Here is a working example from my server. Note that I don't bother with port 80. You might want to try without the port 80 listen line to rule out

Re: Where is etc57.tgz? in snapshots/amd64/?

2015-02-27 Thread trondd
Sometime after 5.6 release the etc packages went away and the files are part of base packages. On 2/27/2015 12:41 PM, Henrique Lengler wrote: I wanna set a -current openbsd installation. The FAQ [1] for 5.6 say I need etc56.tgz, so my question is do I need a etc57.tgz to install a snapshot?

Re: improving browser security

2015-03-01 Thread trondd
On Sun, March 1, 2015 1:36 pm, Ted Unangst wrote: I'd like to thank the OpenBSD Foundation for supporting this effort, and the many donors who have supported the Foundation. The Foundation wouldn't be in a position to support projects like this if it weren't for you. My thanks, as well.

Re: spamd whitelist

2015-02-21 Thread trondd
On 2015-02-21 18:57, Martin Brandenburg wrote: That doesn't mean you can't find the information somewhere else. I just did this for gmail by simply sending a couple emails, letting gmail retry for a couple hours and grabbing the IPs out of spamdb. Tim.

Re: Maintaining your system with snapshots

2015-02-20 Thread trondd
It is so quick and easy to update to another snapshot, if I find a package that doesn't work, I simply update to the latest snapshot. Maybe once or twice I have hit the situaton where the snapshot was out of date with the snapshot packages and I couldn't use my system right after upgrading. I

Re: spamd whitelist

2015-02-23 Thread trondd
2015 00:54:41 - On Sat, Feb 21, 2015 at 9:09 PM, Edgar Pettijohn ed...@pettijohn-web.com wrote: On 02/21/15 18:29, Martin Brandenburg wrote: Edgar Pettijohn wrote: On 02/21/15 18:09, trondd wrote: On 2015-02-21 18:57, Martin Brandenburg wrote: That doesn't mean you can't find

Re: httpd tls - what am i missing?

2015-03-25 Thread trondd
On 3/25/15, Alexander Hall alexan...@beard.se wrote: I have a feeling you cannot mix encrypted and plaintext in the same block, but I could be wrong. /Alexander The example in the man page implies that it will work, also I just tried it with my config. Seems to be working fine. Tim.

Tmux mouse problem with copy-mode on wheelup

2015-05-03 Thread trondd
With tmux's mouse changes, everything is set up by default except one thing I'm trying to get back. It used to be that if you mouse scrolled up in a pane, it would enter copy mode and start scrolling up through history. It doesn't enter copy mode anymore. If I enter copy mode via the

Re: Tmux mouse problem with copy-mode on wheelup

2015-05-11 Thread trondd
On 2015-05-03 12:07, trondd wrote: With tmux's mouse changes, everything is set up by default except one thing I'm trying to get back. It used to be that if you mouse scrolled up in a pane, it would enter copy mode and start scrolling up through history. It doesn't enter copy mode anymore

Re: OpenBSD 5.7 httpd tls intermediate/chain certificate problem

2015-05-14 Thread trondd
I've only been hacking at this, nothing production but looks like I did it by adding the intermidate cert and CA to cert.pem and keeping the server cert separate. Tim.

Re: Update OpenBSD Remotely

2015-05-17 Thread trondd
On 2015-05-17 10:08, Peter Leber wrote: I do not want to access the machine locally in order to interrupt the automatic reboot in order to trigger the manual upgrading process. I'm not sure what you're talking about here... Is there someone aware of a procedure which could help me solving

Relayd: match...forward to table and a fallback

2015-05-14 Thread trondd
I'm trying to see if I can use relayd as a domain forwarder. Meaning, users connecting to multiple different domains will hit a centralized relayd server which will then relay them to the correct server hosting that domain on the backend. I'm able to accomplish this with: match request quick

Re: AnonCVS and -rHEAD

2015-06-08 Thread trondd
On Sun, June 7, 2015 10:58 pm, bytevolc...@safe-mail.net wrote: I am in some agreement with this; it would certainly make it easier not having to change the -rOPENBSD_x_x option in the .cvsrc every time you upgrade. You shouldn't have to put the tag into your cvsrc. Tags are sticky, meaning

Re: httpd feature request: auto index.txt

2015-06-23 Thread trondd
On Tue, June 23, 2015 6:15 am, Craig Skinner wrote: On 2015-06-22 Mon 12:39 PM |, Noah wrote: On Mon, Jun 22, 2015 at 11:58 AM, Craig Skinner skin...@britvault.co.uk wrote: *) either/both .txt/.html *) .txt output something like: ls [-l[h]] | fgrep -v index.txt Does auto index do the

Re: nsd configuration problem

2015-06-24 Thread trondd
On Wed, June 24, 2015 2:28 pm, Peter Pauly wrote: NSD (name server daemon) is for authoritative DNS - answering the question for internet users what is the IP address of my servers. You may want to use Unbound. It is a recursive DNS lookup that answers the question: what is the IP address of

All traffic over iked VPN

2015-07-03 Thread trondd
I'll jump into the current iked/ipsec/VPN discussions going on. I have used iked to create a road warrior VPN from my OpenBSD laptop to an OpenBSD server in a remote data center. All connections between the two are correctly going through the VPN. What I want to do is force all traffic from

Re: Regarding the default /usr partitioning

2015-06-29 Thread trondd
On Mon, June 29, 2015 4:05 am, Carlos Fenollosa wrote: For a novice user, theyâ**re going to be constrained with the current defaults when they want to compile some big port â** thatâ**s my case, I canâ**t build php-5.6 because of disk space, and Iâ**ve run â**make cleanâ** on all subfolders

iked config options

2015-07-04 Thread trondd
Do the 'config address 123.123.123.123' and other options do anything? Send one or more optional configuration payloads (CP) to the peer. To what do those settings get applied? Or is it for specific implementations to use if designed for it? Tim.

Re: Maintaining CAs not in cert.pem

2015-07-30 Thread trondd
On Thu, July 30, 2015 4:13 am, Raf Czlonka wrote: Why now simply put it in siteXX.tgz? Tim. Raf I guess the meat of the question is is certs.pem the only location for CAs used by the system? (ignoring application certificate stores, ie. Firefox or java). I guess tweaking my upgrade

Maintaining CAs not in cert.pem

2015-07-29 Thread trondd
I have my own CA for home use and my work also has their own CA and intermediate certificates. What is the correct way of maintaining the certificates so that the system always knows about them? I've been appending them to /etc/ssl/cert.pem but it gets replaced every update (not even maintained

Re: Is lack of a prompt in shell after building the kernel bad news?

2015-08-04 Thread trondd
On Tue, August 4, 2015 7:09 am, Stuart Henderson wrote: This kernel and userland are out of sync, there was a change made at some point (I think it was between 5.7 and now but I could be wrong) which did exactly this. IIRC this is the behaviour when you have newer userland and old kernel.

Re: Maintaining CAs not in cert.pem

2015-07-30 Thread trondd
On Thu, July 30, 2015 5:17 pm, Stuart Henderson wrote: On 2015-07-30, Vadim Zhukov persg...@gmail.com wrote: 2015-07-30 20:16 GMT+03:00 Stuart Henderson s...@spacehopper.org: On 2015-07-30, Ted Unangst t...@tedunangst.com wrote: Michael McConville wrote: Another meat could be, why you're

Re: Default OpenBSD browser

2015-07-29 Thread trondd
On Tue, July 28, 2015 11:11 pm, Gerald Hanuer wrote: Hello, Thoughts on Links+. Code quality, security and generial usefulness. Regards Gerald Hanuer Links+ is my prefered light browser. I find it renders the best for what I use. I periodically try and re-try all the

Re: ipsec via iked

2015-11-04 Thread trondd
> I do have read the puffysecurity website Did you? I struggled with this for a while, too, and found the puffysecurity example, when followed, works. > > For example, the laptop is connected to internet through a network > 192.168.100.0/24 (ip 192.168.100.37) > > The working configuration is

Re: Question about core dumps and swap space.

2015-10-19 Thread trondd
On Mon, October 19, 2015 8:01 pm, Joel Rees wrote: > > I have lots of core dumps sitting around. I have not seen any the size > of physical memory. Nothing close. Even firefox doesn't leave that > much of a dump when it bombs. > > Hmm. Xombrero, from when I was playing with that, left a coredump

Re: make release error on 5.8

2015-10-20 Thread trondd
On Tue, October 20, 2015 11:02 am, Joe S wrote: > > since the FAQ didnâ**t mention the need to do this separately. > Sure it does. 5.3.5 describes building userland and 5.4, about building the release, references it several times. "the above build process" "build...then make a release" "The

Re: Private cloud hosting recommendations

2015-10-09 Thread trondd
On Fri, October 9, 2015 4:34 pm, MartÃn Ferco wrote: > I can consider that as well, but I'd like to not depend on someone > inserting CDs or something like that for installing the OS for example > and, > also, I'd like to have the possibility of having our private network > connected via VPN to

Re: Private cloud hosting recommendations

2015-10-09 Thread trondd
On Fri, October 9, 2015 1:57 pm, MartÃn Ferco wrote: > Thanks for all your input! > > I'm not particularly concerned about price -- if they are as expensive as > AWS (paying around $150/mo per instance there), I'd be OK as well. If they > are cheaper, the better, but I want quality and service as

Re: mail server on rental server , cannot send gmail.com

2015-07-10 Thread trondd
On 2015-07-10 16:53, Tuyosi Takesima wrote: Hi ,all . i can send and recieve mail by using mail server on rental server . namely send to tuy...@openbsd.link recieve from tuy...@openbsd.link but now state , i cannot send mail to x...@gmail.com becase of relay host what

Re: release and patch/errata info in (easily) machine readable format?

2015-12-05 Thread trondd
On Sat, December 5, 2015 4:08 pm, openbsd-m...@clark-communications.com wrote: > Yes, if I end up writing a scraper, I will very likely obtain the html > pages > from the www directory of my local CVS mirror, rather than making http > requests > of the OpenBSD website. > > Another nice piece of

Re: release and patch/errata info in (easily) machine readable format?

2015-12-05 Thread trondd
On Sat, December 5, 2015 4:08 pm, openbsd-m...@clark-communications.com wrote: > Yes, if I end up writing a scraper, I will very likely obtain the html > pages > from the www directory of my local CVS mirror, rather than making http > requests > of the OpenBSD website. > > Another nice piece of

Re: release and patch/errata info in (easily) machine readable format?

2015-12-05 Thread trondd
On Sat, December 5, 2015 2:20 pm, openbsd-m...@clark-communications.com wrote: > I mostly follow -stable, and have scripts/tools that enable me to > (re)build > stable from source with minimal human intervention. > > To further automate this process, it would be helpful to have the current >

Re: NOT POSSIBLE: Fully encrypted system with keydisk

2015-12-10 Thread trondd
On Thu, December 10, 2015 6:35 pm, Stefan Wollny wrote: > YES: I did 'disklabel -E sd0' and 'disklabel -E sd1' accordingly, setting every partition to type RAID How many partitions are you making on sd0? For FDE, typically you make one partition of type RAID filling the disk (or your desired

[PATCH] pledge x11/wmii (and other ports?)

2015-11-22 Thread trondd
I haven't seen much discussion about applying pledge to ports, so I thought I'd find out how people feel about it. I chose to start with x11/wmii because a) It's no longer officially developed so (other than updating the port to the last release) it's not going to change. b) I might be the only

Re: OBSD 5.8 and console

2015-11-22 Thread trondd
On Sun, November 22, 2015 11:13 am, Alessandro Baggi wrote: > Hi list, > I've an APU1D where I want install OpenBSD 5.8 amd64. The only option > that I have is install from console. > > I've downloaded install58.fs and modified /etc/boot.conf adding: > set tty com0 > (saved) > > During boot it

Re: pf sanity check

2016-05-25 Thread trondd
On Wed, May 25, 2016 9:01 am, Jeff Ross wrote: > Hi all, > > I am incrementally bringing my server up to date. I was on 5.5-current so > following the instructions I upgraded to 5.6 stable. > > I re-wrote my pf.conf to remove the oldqueue rules and to simplify the > rule set. > > Checks okay for

Re: syslogd on 6.0-beta

2016-05-25 Thread trondd
On Wed, May 25, 2016 6:39 pm, Jeff Ross wrote: > Hello again, > > syslogd doesn't actually work for me on 6.0-beta either. > > OpenBSD 6.0-beta (GENERIC.MP) #1768: Wed May 18 12:01:43 MDT 2016 > dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP I had been running a May 16th

Re: moving postgresql files to seperate mount

2016-06-01 Thread trondd
On Wed, June 1, 2016 3:45 am, Markus Rosjat wrote: > Hi there, > > just need some kind of acknowledgement for my workflow :) > > a naive approach would be: > > - extend the virtual disk > - create a partition /var/postgresql (thats the folder under var right > now) > - move the files to the

  1   2   3   >