Re: cleaning up /usr/local/lib after (many) upgrades?

...on 2024-01-27 17:46:07, Alexander Bochmann wrote: > Is this expected, or a result of some error I made during upgrades? As it turns out, the error I made was not actually running pkg_delete -a at any point, and misinterpreting the output of pkg_delete -an (which is why I didn't

Re: cleaning up /usr/local/lib after (many) upgrades?

...on 2024-01-27 19:58:45, Alexander Bochmann wrote: > I tried pkg_delete -a earlier today, but while it gave me a bunch > of files that I think were from base (/usr/X11R6 mostly), it didn't > turn up anything from /usr/local on this system. It's been pointed out that this is i

Re: cleaning up /usr/local/lib after (many) upgrades?

...on 2024-01-27 20:43:17, Jan Stary wrote: > That's definitely weird. Which packages own these files? > $ pkg_info -E /usr/local/lib/libvpx.so.8.0 > $ doas pkg_check -Fq pkg_info -E returns no output for any version but the latest, which is then (in this case - I just picked libvpx as an

Re: cleaning up /usr/local/lib after (many) upgrades?

...on 2024-01-27 20:01:55, Omar Polo wrote: > I think you're mixing up pkg_delete and sysclean. sysclean will give > you a list of extra files that are not needed, while pkg_delete handles > packages. Nope, I looked at both, and neither handles old shared libraries from upgraded packages in

Re: cleaning up /usr/local/lib after (many) upgrades?

...on 2024-01-27 18:50:01, Nowarez Market wrote: > _Did_ you check sysclean for your own purpose ? sysclean (also mentioned in a direct mail by someone else) doesn't seem to help in this case. While it gives me input for yet another cleanup task, none of the files mentioned in sysclean

Re: cleaning up /usr/local/lib after (many) upgrades?

...on 2024-01-27 19:35:18, Omar Polo wrote: > does pkg_delete -a help? It should remove all the packages not needed, I tried pkg_delete -a earlier today, but while it gave me a bunch of files that I think were from base (/usr/X11R6 mostly), it didn't turn up anything from /usr/local on this

cleaning up /usr/local/lib after (many) upgrades?

Hi - I'm looking at one of my OpenBSD systems here that has been upgraded over a long time, and has /usr/local running out of space. It seems there's a lot of old versions of shared libraries in /usr/local/lib, like for example: > # ls -al /usr/local/lib/libvpx.so.* > -rw-r--r-- 1 root

Re: Historical Reasons For Default NAT Source Port Modification

...on 2022-05-16 17:57:06, Stuart Henderson wrote: > On 2022-05-16, Alexander Bochmann wrote: > > I seem to remember firewall rules that allowed only udp/53 as _source_ > > port > > for DNS traffic. > Such rules often existed to cover replies, before the days >

Re: Historical Reasons For Default NAT Source Port Modification

Hi, ...on 2022-05-16 13:23:31, Philipp Buehler wrote: > I cannot recall many applications from 20y ago that have been very keen > on sending from certain ports (besides IKE already mentioned by JJ). I seem to remember firewall rules that allowed only udp/53 as _source_ port for DNS traffic.

Re: lighttpd vs. libressl on 6.9?

Hi Ben - thanks for replying :) ...on Mon, Aug 23, 2021 at 09:48:16AM -0400, b...@0x1bi.net wrote: > Try compiling lighthttpd by hand from the ports tree with > debug flags and run it with ktrace to see what's happening. I fear that might be more effort than I'm able to invest right now,

lighttpd vs. libressl on 6.9?

Hi - I've been running lighttpd from ports as web server on one of my OpenBSD systems for years, with no problems. Ever since upgrading to 6.9, it's been crashing every few weeks, and the last lines in the lighttpd error log are something like this each time: > mod_openssl.c.3095) SSL: 1

Re: ssh X forwarding and google-chrome

...on Thu, Jul 02, 2020 at 05:33:20PM +0300, Gregory Edigarov wrote: > "ssh -Y google-chrome" just shows an empty and blank window, no > menu, no address bar. > May be there is some command line flags I am not aware of? You could try google-chome --disable-gpu, though I don't know if that

Re: Adding default IPv6 route fails on 6.1

...on Wed, Apr 12, 2017 at 11:12:28AM +0200, Sterling Archer wrote: > On Wed, Apr 12, 2017 at 9:59 AM, Dimitris Papastamos wrote: > > Try this instead: > > !/sbin/route add -inet6 default -ifp pppoe0 fe80::%pppoe0 > That did the trick, dhcpcd is receiving router advertisments

Re: how to debug OpenBSD virtio-scsi killing qemu-kvm VM?

...on Wed, Mar 15, 2017 at 10:29:25AM -0400, Jiri B wrote: > > > bios0: vendor SeaBIOS version > > "debian/1.7.5-1-0-g506b58d-dirty-20140812_231322-gandalf" date 04/01/2014 > > > bios0: QEMU Standard PC (i440FX + PIIX, 1996) > it doesn't say anything about qemu-kvm version :/ Nope, but:

Re: how to debug OpenBSD virtio-scsi killing qemu-kvm VM?

Hi, ...on Mon, Mar 13, 2017 at 11:26:42AM -0400, Jiri B wrote: > it seems virtio-scsi is not working correctly in OpenBSD, I gave it > a try today and OpenBSD VM was killed with: > 2017-03-13T15:29:00.814657Z qemu-kvm: wrong size for virtio-scsi headers > on EL7 with

Re: softraid crypto performance on Sun Fire T1000

Hi, ...on Sat, Oct 29, 2016 at 03:06:05PM +0200, Jonathan Schleifer wrote: > While a single core of the T1000 is quite slow, this just seems too slow, > making this setup unusable. openssl speed shows 10 MB/s for AES-128-CBC and 7 > MB/s for AES-256-CBC on a single core. So a single core is

Re: LibreSSL on old OpenBSD

...on Fri, Aug 12, 2016 at 08:53:36AM +, Roderick wrote: > I know, you will complain, because I mention here that I still use > OpenBSD 4.8 in a machine. But my question is more general. > I was unable to install LibreSSL-2.4.2, but installing openssl-1.0.2h > was possible without

Re: 5.8/sparc64 - boot from softraid(4) fails?

Hi, > ...on Sun, Dec 06, 2015 at 06:02:35PM +0100, Stefan Sperling wrote: > > Can you show the output of 'devalias' at the ok> prompt? > > If your disks are more than 4 levels deep inside the device tree > > then the diskprobe loop in the boot loader won't see them. Finally got around

Re: 5.8/sparc64 - boot from softraid(4) fails?

Hi, coming back to this after some time... ...on Sun, Dec 06, 2015 at 06:02:35PM +0100, Stefan Sperling wrote: > Can you show the output of 'devalias' at the ok> prompt? > If your disks are more than 4 levels deep inside the device tree > then the diskprobe loop in the boot loader won't see

Re: 5.8/sparc64 - boot from softraid(4) fails?

Hi, thanks for your answer. ...on Sun, Dec 06, 2015 at 06:02:35PM +0100, Stefan Sperling wrote: > Can you show the output of 'devalias' at the ok> prompt? Will need a couple of days, as the machine is currently at a friend's place. I'll post an update as soon as I have the devalias output.

5.8/sparc64 - boot from softraid(4) fails?

I recently tried to install OpenBSD 5.8 on a Sun Fire, using a RAID-1 softraid as boot device. System doesn't boot though, and ends up with this: > Sun Fire V245, No Keyboard > Copyright 2007 Sun Microsystems, Inc. All rights reserved. > OpenBoot 4.25.10, 4096 MB memory installed, Serial

Re: Backup of OpenBSD to Linux box

...on Mon, Jun 15, 2015 at 07:46:31AM +0100, Bernd Schoeller wrote: There are a number of remote backup systems floating around (rdiff-backup, rsnapshot, etc.) and of course there are in-house solutions (dump/restore), though I don't know if these are interoperable. restore on Linux can

Re: Comparing large amounts of files

Hi, ...on Fri, Dec 11, 2009 at 06:52:09PM -0500, STeve Andre' wrote: Compare how? I should have been more clear I suppose. I'd like to know the files that are identical, files that are of the same name but different across directories, possibly several directories. Maybe you could

Re: How to disable IPv6?

Hi, ...on Sun, Dec 06, 2009 at 05:15:14PM -0600, Todd T. Fries wrote: Between pf, 'ifconfig em0 -inet6' and 'echo family inet4 /etc/resolv.conf' you should have about all the anti v6 knobs a budding newbie should need. Thanks for putting all the required info into one place. Alex.

pf route-to doesn't work for me after upgrading to 4.6

Hi, did anything change in regard to pf rules with the route-to option in recent versions of OpenBSD? I've just reinstalled an old system that was running OpenBSD 3.9 with 4.6, and gave it my old pf rulesets. There is a rule that is supposed to send all traffic originating from a certain

Re: pf route-to doesn't work for me after upgrading to 4.6

Hi, ...on Fri, Dec 04, 2009 at 03:46:22PM +, Fred Crowson wrote: pf has virtually been rewritten in that time Ok, what bit me from that is that the default for rules was changed to keep state in the meantime and some other stuff that was relying on the old semantics interfered with

Re: Anyone using munin?

Hi, ...on Thu, Apr 02, 2009 at 05:44:32PM -0700, Marc Runkel wrote: Trying to set up munin work with OpenBSD and was wondering if anyone had some plugins pre-written? In particular interface statistics but I'll take just about anything. I have a bunch of badly hacked munin plugins I've

Re: European orders

Hi, ...on Mon, Mar 30, 2009 at 10:35:08PM +0200, Daniel Seuffert wrote: I know Wim personally for many years, I have seen some of his work and I have the deepest respect for him and what he has done. Absolutely. From my point of view, Wim's constant presence and marketing activity was an

the death of the oldest OpenBSD system on the net...

...was rather unspectacular: Hardware failiure. The system's name was base, originally installed with OpenBSD 2.3 on Jun 12, 1998: -rw-r--r-- 1 root wheel 5 Jun 12 1998 etc/myname It ran the OpenBSD 2.3 kernel and most of the userland until it stopped responding about three weeks ago and

Re: the death of the oldest OpenBSD system on the net...

...on Sun, Mar 16, 2008 at 05:11:10PM +0300, Nickolay A. Burkov wrote: Thanks for interesting story; very sadly. Just out of curiosity, what hardware was it? Can't find a dmesg currently, but from memory the original setup was something like: Pentium-133, 32MB RAM. 4GB Quantum IDE HDD,

Re: 202 days Uptime in OpenBSD 3.6

...on Mon, Jan 15, 2007 at 11:20:27AM -0700, Darren Spruell wrote: On 1/15/07, Alexander Bochmann [EMAIL PROTECTED] wrote: Last login: Sun Jan 7 19:22:19 2007 from xxx OpenBSD 2.3 (LOCAL) #0: Wed Jul 31 12:51:38 CEST 2002 Do you sleep well at night exposing that system

Re: 202 days Uptime in OpenBSD 3.6

...on Thu, Jan 11, 2007 at 08:42:35AM +0100, Marc Balmer wrote: hmm, why are people so proud of their uptimes when it only show they don't care for their systems? Bah, uptimes (is it that time of the year again?)... Last login: Sun Jan 7 19:22:19 2007 from xxx OpenBSD 2.3 (LOCAL) #0:

Re: Compilers make a system less secure?

...on Tue, May 02, 2006 at 03:49:26PM +0400, Anton Karpov wrote: But what if your system has no compiler? When attacker should compile his sploit anywhere, and transfer binary evil code onto your box. E.g. he has to have access to the similar machine, maybe with similas OS version and arch.

Re: Compilers make a system less secure?

...on Tue, May 02, 2006 at 09:46:01AM -0500, Graham Toal wrote: Back in the old days when the only access to a system was by a modem to a login prompt, and there was no networking available to make things easy, the only way to get a binary on to a machine was to somehow enter it from the

Re: C Compiler Prob

...on Thu, Mar 30, 2006 at 12:49:29PM +0200, oliver simon wrote: checking for gcc... egcc egcc? Alex.

Re: openbsd and the money -solutions

...on Sat, Mar 25, 2006 at 08:25:32AM +0100, Jurjen Oskam wrote: There is no reason to provide funding from a business standpoint. What does the business gain? Does having a business standpoint require shutting off all common sense? In todays world: Mostly. Modern businesses have

Re: Sendmail security problem

...on Thu, Mar 23, 2006 at 12:22:37PM +0100, Anthony Howe wrote: I installed 8.13.6 last night from the source tar ball on two machines (one is OpenBSD 3.6, the other an old Linux box). Appears to be chugging along happily. Can't speak to the specific security issue though. Replacing

Re: OpenBSD and the money

...on Thu, Mar 23, 2006 at 02:20:08PM -0500, Peter Fraser wrote: I recognize that government grants come with red-tape, and people are often disdainful of taking hand-outs. In this case, however, I'd think the pros outweigh the cons. Don't you have a wish-list of things you'd implement

Re: openbsd and the money

...on Fri, Mar 24, 2006 at 01:42:48PM +0100, Hannah Schroeter wrote: I don't actually understand what that whining about tax deduction is about. My guess is that it's not about the tax deduction in itself (although that certainly helps), it's about the receipt. Companies very much like to

Re: openbsd and the money

...on Fri, Mar 24, 2006 at 02:52:55PM +0100, Alexander Bochmann wrote: So it's probably easier to get a company to order a few hundred CDs instead of a donation. By the way, the golden CD signed by all core developers for $9000 might just be the thing to add to the store. :) Alex.

Re: Reminder about the X Aperture

...on Tue, Mar 14, 2006 at 05:41:44PM -0700, Theo de Raadt wrote: Yes, they have DMA engines. If the privilege seperate X server has a bug, it can still wiggle the IO registers of the card to do DMA to physical addresses, entirely bypassing system security. Wow. As if running a

Re: Traffic analysis on a per service basis

...on Fri, Mar 03, 2006 at 03:33:53AM +0100, Martin Schr?der wrote: On 2006-03-02 19:01:13 -0600, eric wrote: Best you'll find for reliable traffic accounting (and the most flexible) is argus http://www.qosient.com/argus/. I'd recommend that route, then using Seems to be quiet since

Re: help with source-routing

Hi, ...on Fri, Mar 03, 2006 at 01:08:43PM +0100, oliver simon wrote: hme1 - 10.50.0.10 hme0 - 217.5.23.69 hme0_alias - 217.5.23.70 default-gw is 10.50.0.1 If you want to connect to e.g. 193.44.25.2, the machine has to go there with one of it4s official IPs 217... Are you shure

Re: help with source-routing

...on Fri, Mar 03, 2006 at 03:03:23PM +0100, oliver simon wrote: Internal Network is another IP-Range ... DMZ has official IPs for the services and its private ip-range for the hosts themself. DMZ: 10.50.0.0/24 + Official IPs for services Internal(!)Lan: 10.23.0.0/24 DBNet (e.g.):

Re: sendmail and Undeliverables

...on Wed, Mar 01, 2006 at 05:01:52PM -0600, Joel Gudknecht wrote: I'm concerned that sendmail is even accepting these messages as they have nothing to do with my domain and I don't know how to prevent this behavior, any info on this subject would be appreciated, thank you. From the

Re: Problem with squirrelmail

...on Thu, Mar 02, 2006 at 01:07:09PM +0200, Gabriel George POPA wrote: I have a small problem with squirrelmail. The problem is that users cannot read their mail messages if they are too large (though not very [..] going on? Settings from /etc/inetd.conf: # IMAP server from PINE

Re: Regarding a SPARCSTATION 1+

...on Sun, Jan 29, 2006 at 02:14:38PM +0200, Gabriel George POPA wrote: I'm wondering if OpenBSD 3.8 will work on a SPARCSTATION 1+ computer. Does anyone have a toy like this running OpenBSD? Not currently, but I had an SS1+ under OpenBSD until about 3.2 (I think). Everything should work

Re: Regarding a SPARCSTATION 1+

...on Sun, Jan 29, 2006 at 07:38:50PM +0100, Alexander Bochmann wrote: The other standard advice is to recompile at least libssl with -mcpu=supersparc, otherwise you won't Sorry, that's crap - the SS1+ doesn't have a supersparc CPU. Alex.

Re: Squid and named DNS

Hi, ...on Fri, Jan 27, 2006 at 12:10:22PM +0200, Kiraly Zoltan wrote: I use Squid to filter web content like ad and pop-up (adzaper), I don't use Squid for cache. The problem is, when i use Squid many webpage open slow, for example sometimes i wait much in Firefox at Waiting for

Re: Possible implication of a Sendmail on OpenBSD 3.8 in a spam attack

...on Wed, Jan 25, 2006 at 02:09:58PM +0200, Gabriel George POPA wrote: Yahoo! do not accept some mails from me). I've noticed that the mailstats command reports 13 (!!!) messages sent (!) outside. My computer is a small server running OpenBSD 3.8, MySQL+PHP+Apache for the website;

OpenBSD-specific plugins for Munin, anyone?

Hi, I've recently been playing with Munin again (http://munin.projects.linpro.no/), and noticed there are nearly no plugins for OpenBSD. While I have adapted a few for my needs, I shurely can't be the first to do that? (Munin is a(nother) simple, low-configuration software using rrdtool to

Re: Apache logs filled with remote exploit trials

...on Mon, Jan 16, 2006 at 12:34:54PM +0100, Didier Wiroth wrote: [Sun Jan 15 20:53:24 2006] [error] [client 69.60.121.159] File does not exist: /htdocs/xmlsrv/xmlrpc.php How do you handle these kind of attacks? Ignoring them, mostly. It's the attack script of the month. How or what do

Re: CPU time off by a factor of two

...on Fri, Nov 25, 2005 at 03:43:52PM +0800, Uwe Dippel wrote: It's a bug, so it seems now. Sorry, last night I didn't have access so my answer is late: I simply rebooted to single-CPU-kernel; compiled by myself, just as well, and it runs like hell. Exact, I mean. Not a single second off

Re: certification of firewall product / mess in my head

Hi, ...on Tue, Sep 13, 2005 at 10:12:11AM +0200, qstreb wrote: Yesterday i got surprised, it looks that in Germany (and some other countries) there are some lows/requirenments/obligations that in case a firewall (appliance) is owned by third parties and they produce any damages to

Re: sendmail and clamd

...on Tue, Sep 06, 2005 at 03:13:01PM +0200, Cristian Del Carlo wrote: i am planning to use openbsd as mail server with sendmail and clamd as antivirus on intel machine. What can i use to connect sendmail and clamd? I know that there are several methods : milter, amavis etc... Depends

Re: Lifecycle question

...on Mon, Sep 05, 2005 at 03:35:19PM +0200, Stephan A. Rickauer wrote: Henning Brauer schrieb: you don't have to reinstall at all. hogwash by some people here. I have about a hundred servers in production, some are upgraded ever since 2.7 times or so. upgrade typically takes us 5

Re: OpenBSD 3.8 negative free space (?WTF?)

...on Wed, Aug 24, 2005 at 12:24:46PM -0700, Ray Percival wrote: ~5% to be exact. To be more exact, it depends on the -m option value you used when last running newfs or tunefs on the filesystem. :) See the description in the tunefs(8) man page. Alex.

Re: 3.8 beta requests

...on Tue, Aug 23, 2005 at 09:42:02AM +0200, J. Lievisse Adriaanse wrote: I wonder what the theme for this release will be... Something like we help making your software more secure - by default? (Ok, it's not more secure, but more correct, probably...) Generally I think it's a really good

Re: x86 rings?

...on Thu, Aug 04, 2005 at 08:18:40PM -0500, Dave Feustel wrote: some very specialized applications. Intel had a chip (the 960mp?) used in the military that used segmented addressing, but I don't think it has been used anywhere else but possibly in HP printers years ago, and (I think)

Re: Need Quad Ethernet for router box

Hi, ...on Thu, Jul 21, 2005 at 11:50:20AM -0400, Bill Chmura wrote: Ethernet wise, currently the whole mess is at 100MB... It will be that way at least for 12 months after this. As far as heavily used, I just got on the scene myself and the usage is way down. School, summers off.

Re: Amanda port WO gnuplot?

Hi, ...on Tue, Jul 19, 2005 at 09:43:45PM -0400, stan wrote: I'm building several new 3.7 machines. These machines will be Amanda clients (only, not servers)/ Looks like the amanda port depends on gnuplot, which depends on X11. Build on a machine that has the dependencies installed and

Re: How to change flags of a route?

...on Tue, Jul 19, 2005 at 10:29:34AM +0200, Michael Adam wrote: The scenario is the following: On an OpenBSD firewall and router, I have an interface if0 with address 192.168.1.1/24. Now, there is a host 192.168.1.2 which sits behind a third host 192.168.1.3 from the network segment of

Re: Compiling for VIA Samuel 2 (CentaurHauls 686-class) 533 MHz

...on Sun, Jul 17, 2005 at 05:25:39PM +0100, matt lawless wrote: fed up of kernel panics on my EPIA 5000 I decided to make from source but can't find what settings use to get it to compile for this restricted processor. GCC borks when I try and compile it on the EPIA :

Re: getting dhclient to update bind forwarders IPs

Hi, ...on Tue, Jul 12, 2005 at 02:02:11PM +0200, Rapha??l Berbain wrote: I have a box running bind as a cache+forwarder setup. It connects to the ISP through DHCP. When dhclient kicks in, it fetches the ISP-provided DNS IPs and by default puts those in /etc/resolv.conf. Instead of

Re: OT: Hardware keyloggers embedded in new keyboards?

...on Mon, Jun 20, 2005 at 07:08:18AM -0500, Dave Feustel wrote: If one-time passwords capability is built into OpenBSD, where can I read about how to use them? skey(1) will start you off. Alex.

Re: OT: Hardware keyloggers embedded in new keyboards?

...on Mon, Jun 20, 2005 at 07:32:09AM -0500, Dave Feustel wrote: One Time Passwords such as skey(1) are also good for insecure environments. I just read the man page for skey, but I still don't quite understand how it works. Would I use a calculator to generate a response that I type in

Re: OT: Hardware keyloggers embedded in new keyboards?

...on Mon, Jun 20, 2005 at 07:24:16AM -0500, Dave Feustel wrote: Here is a relevant link: http://www.rumormillnews.com/cgi-bin/forum.cgi?read=73190 That's just the same thing all over. We may get to find out - see the above link which is apparently the source material for the snopes

Re: Sun ELC?

...on Fri, Jun 03, 2005 at 07:15:51AM +0100, Peter Galbavy wrote: Gordon Grieder wrote: Before I start following sparc@ (if I go ahead with this): I recently inherited a Sun ELC. It's an ancient all-in-one thing that looks Now ? Might work as a non caching nameserver - memory is rather

Re: Wifi frustration (SUCCESS)

Hi, ...on Sun, May 22, 2005 at 03:16:51PM -0400, Steve Shockley wrote: No, it's hard to find new Prism-based cards anymore except for a few USB ones, and last I looked wi on usb didn't work as an access point. At least according to the manpage, it still doesn't work is supposed to be