Re: Programmatically add default IPv6 route

2024-02-23 Thread Denis Fondras
tcpdump: listening on ppp0, link-type PPP 22:25:22.420092 liopen.xco6.lioptic.net > par10s42-in-x04.1e100.net: icmp6: echo request 22:25:22.519524 par10s42-in-x04.1e100.net > liopen.xco6.lioptic.net: icmp6: echo reply Thank you very much Claudio :) Denis

Re: ssh IPV6 link local through jumphost

2024-02-23 Thread Denis Fondras
Le Fri, Feb 23, 2024 at 12:33:42PM -0500, Tom a écrit : > Hi list! > > Could you please guide me how to use link-local addresses with jumphost? > > I have a server 'X' with a link local IPv6 address of > fe80::262:bff:: > that IP is reachable from the server 'jumpserver' via interface

Re: Programmatically add default IPv6 route

2024-02-23 Thread Denis Fondras
drs: ::::::: ppp0 fe80::d97e:e77f:db7e:e780%ppp0 fe80::ca4c:75ff:fe16:9f00%ppp0 ``` Le Fri, Feb 23, 2024 at 06:25:18PM +0100, Denis Fondras a écrit : > Hello, > > I am trying to add IPv6 support for pppd(8) (IPv6CP) and I encounter a blocker > when adding a default IP

Programmatically add default IPv6 route

2024-02-23 Thread Denis Fondras
(8) ? How comes message sent from route(8) have more attributes when received by monitor ? Denis

Re: Checking OpenBSD host type

2023-09-19 Thread Denis Fondras
Le Tue, Sep 19, 2023 at 03:13:21PM +0200, Alessandro Baggi a écrit : > Hi list, > there is a way to check if OpenBSD runs on VM or physical hardware? > > Something like in sysctl or similar. > > Thank you in advance. > You may want to check the `hw` variable : $ sysctl hw [...]

Failure to boot post 04/18 kernel on Deciso DEC750

2023-05-13 Thread Denis Fondras
Hello, Just for your information, when applying this diff : http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/dev/ic/com.c.diff?r1=1.175=1.176=h Deciso DEC750 (based on Ryzen Embedded) cannot boot anymore (reboot or hang when loading kernel). Regards, Denis

Re: Making MS teams work on openbsd

2023-04-18 Thread Denis Fondras
Le Fri, Mar 31, 2023 at 03:42:48PM +0200, Divan Santana a écrit : > > - if no audio, mute and unmute the tab > Thank you for the tip, it solved my audio issue. Unfortunately, I lost the mic in the battle :D So back to Firefox for Teams despite the screen sharing problem.

Re: OpenBSD and AMD EPYC/RYZEN 10gb

2023-04-12 Thread Denis Fondras
Le Wed, Apr 12, 2023 at 10:01:01AM +, Laura Smith a écrit : > Has anyone had the opportunity to experiment using OpenBSD in conjunction > with AMD EPYC/RYZEN native 10gb ports ? > > As far as I can see there are no drivers for it in stable ? But maybe > someone's been playing with it on

Re: Home folder default permission

2023-03-23 Thread Denis Mikhlevich
Hi Chuck, Thank you a lot, for your clear answer! This is exactly what I wanted to find out. -- Best regards, Denis Mikhlevich RIPE NCC nic-hdl: IPv6-RU 23.03.2023 16:54, ch...@qatland.com wrote: useradd makes use of the permissions of /etc/skel The defaults is 755. If you change

Home folder default permission

2023-03-21 Thread Denis Mikhlevich
I change the permision to 750 after creation a new user. Could I change the default behavior without manual change the permission? -- Best regards, Denis Mikhlevich RIPE NCC nic-hdl: IPv6-RU

Re: PC Engines APU alternative for OpenBSD - 2022h2

2022-09-29 Thread Denis Fondras
Le Thu, Sep 29, 2022 at 06:37:16PM +0200, Denis Fondras a écrit : > Le Thu, Sep 29, 2022 at 09:18:44AM -0700, Chris Cappuccio a écrit : > > Denis Fondras [open...@ledeuns.net] wrote: > > > Le Wed, Sep 28, 2022 at 04:55:51PM +0200, Erik van Westen a ?crit : > >

Re: PC Engines APU alternative for OpenBSD - 2022h2

2022-09-29 Thread Denis Fondras
Le Thu, Sep 29, 2022 at 09:18:44AM -0700, Chris Cappuccio a écrit : > Denis Fondras [open...@ledeuns.net] wrote: > > Le Wed, Sep 28, 2022 at 04:55:51PM +0200, Erik van Westen a ?crit : > > > > > > Have a look at shop.opnsense.com, they might have something. > &g

Re: PC Engines APU alternative for OpenBSD - 2022h2

2022-09-28 Thread Denis Fondras
Le Wed, Sep 28, 2022 at 04:55:51PM +0200, Erik van Westen a écrit : > > Have a look at shop.opnsense.com, they might have something. > The DEC6xx/7xx/8xx are not fully supported by OpenBSD. I don't know about the bigger boxes but being based on the same SoC they are probably not supported.

Re: Fanless amd64 sytem recommendations

2022-07-21 Thread Denis Fondras
Le Thu, Jul 21, 2022 at 10:20:25AM +0300, Lars Noodén a écrit : > On 7/11/22 12:25, Denis Fondras wrote: > [snip] > > I use Protectli devices : https://eu.protectli.com/ > > Are all the network interfaces available? > I cannot speak for all the models. Yet, FW6C is fully s

Re: Fanless amd64 sytem recommendations

2022-07-11 Thread Denis Fondras
Le Sun, Jul 10, 2022 at 10:45:40PM -0600, Steve Williams a écrit : > Hi, > > My pcengines APU system died on me catastrophically. It's my primary > router / email / web server. > > First, I built a Raspberry Pi 4b system with a USB wired NIC and went to > restore my backup from Google using

Re: vxlan(4) in endpoint mode

2022-04-04 Thread Denis Fondras
Le Mon, Apr 04, 2022 at 08:23:35PM +1000, David Gwynne a écrit : > > > > On 3 Apr 2022, at 21:46, Denis Fondras wrote: > > > > Hi, > > > > In vxlan(4) manual, we have : > > > > endpoint mode > > When configured without a tunnel d

vxlan(4) in endpoint mode

2022-04-03 Thread Denis Fondras
Hi, In vxlan(4) manual, we have : endpoint mode When configured without a tunnel destination address, vxlan operates as a bridge, but with learning disabled. The question is : is it possible to set tunnel source address without a destination ?

any BFD user ?

2021-12-06 Thread Denis Fondras
The subject says it all. Is there any active BFD (Bidirectionnal Forwarding Detection) user ? Denis

Re: How to restore vendor-specified MAC address

2021-11-17 Thread Denis Fondras
Le Wed, Nov 17, 2021 at 05:03:42AM +0100, Radek a écrit : > > How can I restore the vendor's MAC address? > It is 6.8/amd64. > Check dmesg, it will give you the original MAC address, then ifconfig lladdr...

Re: Dynamic routing and REJECT,LLINFO,CLONED routes

2021-11-07 Thread Denis Fondras
Le Sun, Nov 07, 2021 at 12:58:13PM +0100, Claudio Jeker a écrit : > To be honest, you have arp or ND running on that prefix and then overload > it with a /32 route. You really need to explain why you do that. This is > in my opinion a broken setup. > It seemed like a smart idea back then, but

Re: Dynamic routing and REJECT,LLINFO,CLONED routes

2021-11-07 Thread Denis Fondras
ind the route to be placed after ``rt''. */ while (mrt->rt_priority <= prio && SRPL_NEXT_LOCKED(mrt, rt_next)) { prt = mrt; Le Sun, Nov 07, 2021 at 10:11:54AM +0100, Denis Fondras a écrit : > Hi, > > I am using BGP to connect 2 OpenBSD-current routers

Dynamic routing and REJECT,LLINFO,CLONED routes

2021-11-07 Thread Denis Fondras
l I manually delete the automatically installed HOST route. Is there any way to deal with it without manual intervention ? Denis

Re: supermicro 5019D-FTN4 server with AMD EPYC 3251 SoC Processor

2021-06-30 Thread Denis Fondras
Le Tue, Jun 29, 2021 at 07:46:55PM +0200, EdaSky a écrit : > Good day everyone > > Does anyone use supermicro 5019D-FTN4 server with AMD EPYC 3251 SoC > Processor? > > https://www.supermicro.com/Aplus/system/Embedded/AS-5019D-FTN4.cfm > > Experience and dmesg would be perfect. > Experience is

Re: pflow on PE router

2021-05-30 Thread Denis Fondras
Le Fri, May 28, 2021 at 03:30:58PM -0700, Chris Cappuccio a écrit : > You might try "set state-defaults pflow, sloppy", also in some scenarios you > might need "set state-policy floating" > > If "sloppy" fixes it, there may be some bugs to hunt. > "sloppy" seems to fix the issue. I will do more

Re: pflow on PE router

2021-05-16 Thread Denis Fondras
Here are some more infos : >- does running pf(4) without pflow(4) cause issue? Yes, the issue is linked to pf(4) being enabled. >- can you confirm you were running with pf(4) disabled prior to enabling > pflow(4)? I do confirm. I never enable pf(4) on edge routers, it bit in the past

pflow on PE router

2021-05-14 Thread Denis Fondras
know what are the "right settings" to have pflow(4) enabled on PE router ? Thank you in advance, Denis

Re: DHCPd - option capwap (code 138)

2021-05-06 Thread Denis Fondras
Le Thu, May 06, 2021 at 10:48:55AM +0200, Radek a écrit : > Hello, > I want to use dhcpd server to push Wireless Controller's IP address to the > APs. > > According to this: > http://systemnetworksecurity.blogspot.com/2013/02/adding-custom-options-in-isc-dhcpds.html >

Re: Impact of 002_icmp6.patch

2020-10-30 Thread Denis Fondras
On Fri, Oct 30, 2020 at 11:58:41AM +0100, Martin Schröder wrote: > Am Fr., 30. Okt. 2020 um 11:54 Uhr schrieb Denis Fondras > : > > Please, fix your tweet. The default install answer for IPv6 is 'none'. > > This borders on "switch off v6 for security reasons",

Re: Impact of 002_icmp6.patch

2020-10-30 Thread Denis Fondras
On Fri, Oct 30, 2020 at 11:36:33AM +0100, js-openbsd-m...@webkeks.org wrote: > To close this thread, I found this: > https://twitter.com/m00nbsd/status/1321524807473782784 > Please, fix your tweet. The default install answer for IPv6 is 'none'.

Re: Source address selection algorithm w/ bgp

2020-05-28 Thread Denis Fondras
On Thu, May 28, 2020 at 08:09:25AM -0600, Theo de Raadt wrote: > A few tools have options like -s, but it is a problem. > > I'm also frustrated by this solution, and working on a better method. > > Pierre Emeriaud wrote: > > > What is the current canonical way to tweak source address

Re: net.inet.ip6.forwarding=1 ?

2020-05-19 Thread Denis Fondras
On Tue, May 19, 2020 at 08:36:56PM +0200, Harald Dunkel wrote: > Hi folks, > > congrats to the new release. > > Question about https://www.openbsd.org/faq/upgrade67.html: > Shouldn't it be > > net.inet.ip.forwarding=1 > net.inet6.ip6.forwarding=1 > > Thats what I found in my sysctl.conf

Re: OSPF lsa_check issue

2020-05-05 Thread Denis Fondras
On Tue, May 05, 2020 at 09:07:34AM +0100, Richard Chivers wrote: > Another 5 or so seconds later the same LS-Update comes in with the same seq > number. This appears to continue indefinitely. Our only fix appears to be > restarting ospfd on the routers. > > Does anyone have an idea what is going

Re: VLAN syntax in hostname.vlanxxx

2020-04-29 Thread Denis Fondras
On Wed, Apr 29, 2020 at 09:58:27PM +0200, Lars Bonnesen wrote: > On an obsd 6.6, I use the vmx device, but the syntax: > inet 172.18.11.9 255.255.255.252 NONE vlandev vmx2 description VLAN703 > vlandev is not supported any more. You have to use parent and vnetid, check man ifconfig.

Re: Contributing to spamd

2020-04-03 Thread Denis Fondras
On Fri, Apr 03, 2020 at 08:54:22AM -0400, Aisha Tammy wrote: > Hi devs and all, > I have been using spamd for quite a while and have been loving it. > I've seen that spamd currently only supports ipv4 and have been > wondering if it was possible to extend it to ipv6. I know that workforce > is

NAT on enc0 unexpected behavior. Bug? or misconfiguration

2020-02-12 Thread Denis
I have working IKEv2 VPN between both OpenBSD 6.6 server and 6.6 client which connects to server from behind ISP NAT. My configuration is very close to FAQ with OpenBSD Client connection behind ISP NAT to a server: https://www.openbsd.org/faq/faq17.html#clientikev2 When VPN is disconnected, NAT

Re: IPsec and MTU / fragmentation

2020-02-10 Thread Denis
. By the way, can your let us know "big files" exact size? Denis On 2/9/2020 9:33 PM, Lucas wrote: > Hi misc@, > > I've set up an IPsec tunnel to for serving my website from my home. The > tunnel works quite well most of the time, but if I try to deliver big > files over it, t

Re: VLAN or aliases or? best way to isolate untrustable hosts in a small network

2020-02-06 Thread Denis
netid 100 Ports 1-3 on L3 switch will be used for IoT connection and marked as "Untagged". Do you think will it be right? Denis On 2/5/2020 10:19 PM, Brian Brombacher wrote: > The OP’s hostname.vlan* files never specify a vnetid. I get an error trying > to configure and bring u

Re: VLAN or aliases or? best way to isolate untrustable hosts in a small network

2020-02-06 Thread Denis
ilter in PF by some indication but I don't know which indication for now. I think it will be the next step forward to wireless IoT isolation. Denis On 2/5/2020 5:53 PM, Christian Weisgerber wrote: > On 2020-02-05, Janne Johansson wrote: > >>> # /etc/hostname.vlan101 >>> des

Re: VLAN or aliases or? best way to isolate untrustable hosts in a small network

2020-02-05 Thread Denis
ign address for _untrusted_ from real subnet with no free leases available instead from vlan100 or vlan101 pool provided. How do you set IPs for your trusted/untrusted devices using dhcpd? Could you share your dhcpd.conf setup for vlans you're using? Thanks, Denis On 2/4/2020 8:03 PM, Christian Weisg

VLAN or aliases or? best way to isolate untrustable hosts in a small network

2020-02-03 Thread Denis
Some hosts should be limited in internet access and/or local access or simply be restricted in some way because they are untrusted. I'm looking for a possibility to isolate untrusted inside LAN using any approach applicable. How do people isolate undesirable hosts in their networks? Cheers!

Re: Error: Can't open display: ssvnc-viewer (vncviewer) local connection to QEMU host with -vnc option enabled

2020-01-26 Thread Denis
Crap works as expected. Should be run from unprivileged user only. On 1/25/2020 2:34 PM, Stuart Henderson wrote: > On 2020-01-24, Denis wrote: >> Trying to connect to QEMU 4.1.0 with VNC server enabled by >> $ doas vncviewer -rawlocal 127.0.0.1:0 > > For the love of cthulh

Error: Can't open display: ssvnc-viewer (vncviewer) local connection to QEMU host with -vnc option enabled

2020-01-24 Thread Denis
Trying to connect to QEMU 4.1.0 with VNC server enabled by $ doas vncviewer -rawlocal 127.0.0.1:0 All the time receive 'Error: Can't open display' by vncviewer (ssvnc-viewer package installed on OpenBSD 6.6) when connect to QEMU machine which run on the same localhost and QEMU VNC server listens

Re: ifconfig behavior

2020-01-08 Thread Denis Fondras
On Tue, Jan 07, 2020 at 10:19:36PM +, Pedro Caetano wrote: > Hi misc@ happy new year! > > While running snapshot #584 on amd64 I noticed setting addresses using > ifconfig is not consistent for ipv4 and ipv6. > > Is this expected behavior? I wasn't able to find anything in the FAQ. > It

Re: route an IPv4 /32 to a different interface

2019-12-16 Thread Denis Fondras
On Sun, Dec 15, 2019 at 08:29:42PM +, Tom Smyth wrote: > Hi Denis, > > ok ..I hadnt read your email fully sorry about that... > > what are you trying to achieve here? > > you have a 172.16.0.249/30 address on em3 which includes > 172.16.0.248-127.16.0.25

route an IPv4 /32 to a different interface

2019-12-15 Thread Denis Fondras
-iface em3 but without luck. Thank you in advance, Denis

Re: bgpctl sho ri nei terse output vs man page discrepancy

2019-09-22 Thread Denis Fondras
On Sun, Sep 22, 2019 at 02:08:50PM +0200, Rachel Roch wrote: > Hi, > > Hopefully I'm not missing something silly here but I've read the paragraph in > the man page and it only lists 15 variables: > > "The printed numbers are the sent and received open, > sent and received notifications, sent

Re: IPv6 problems

2019-08-15 Thread Denis Fondras
On Thu, Aug 15, 2019 at 06:50:09PM +0200, list wrote: > Hi, > > EDIT: > > I have taken a look at the website of my hosting provider. > > My IPv6 gateway would be fe80::1. > > When trying to add the route manually i get "network unreachable". > Did you specify the output interface ? With LL

Re: IPv6 problems

2019-08-14 Thread Denis Fondras
On Wed, Aug 14, 2019 at 08:36:45PM +0200, list wrote: > Hello, > > thanks alot for your suggestions! I really appreciate it. > > Unluckily that didn't work out. > > My hostname.vio0 now looks like this: > >         inet6 alias /64 > >         !route add -inet6 default

Re: IPv6 problems

2019-08-13 Thread Denis Fondras
On Tue, Aug 13, 2019 at 05:25:43PM +0200, list wrote: > Hi, > > I have been trying to set up IPv6 on my OpenBSD machine. > > It is running on stable branch.  > > The interface I am trying to configure IPv6 on is "vio". > > My hostname.vio0 looks like this: > > > dhcp > > inet6 alias

Re: Moving from Bird to OpenBGPD

2019-07-14 Thread Denis Fondras
On Sat, Jul 13, 2019 at 09:44:28PM -0700, BSD user wrote: > Hello, > > My apologies for sending this email multiple times. > > I was so mortified by Tutanota's awful text formatting that I created a > new mail account that supported IMAP so that I could load it up in > Thunderbird with text only

Re: Static IPv6, router tries to reach system with unknown fe80 address

2019-07-13 Thread Denis Fondras
On Sat, Jul 13, 2019 at 12:15:30PM +0200, Stefan Hagen wrote: > Hello, > > I have a question regarding the IPv6 behavior of OpenBSD compared to > Linux/FreeBSD. I tried to configure a static IPv6 address on my VPS. > > From my provider, I got the following data: > > IP Address:

bgpd : route in FIB, not in kernel route table

2019-05-10 Thread Denis Fondras
Hi, I had a weird problem today that I can't explain when I tried to add a peer (185.22.129.11) to bgpd. The prefix was accepted, shows up in RIB as valid, installed in FIB according to bgpctl but kernel could not find a route. Group "liopen" provides a fullview. OpenBSD-current from May 8th. I

Re: When will be created a great desktop experience for OpenBSD?

2019-05-07 Thread Denis Fondras
> user-friendly and easy-to-use > Sounds like the exact description of current OpenBSD...

Re: eBGP routes are not reannounced

2019-04-22 Thread Denis Fondras
> I don't understand how to use "allow from group" > Sorry, I responded too fast. You already receive the prefixes from $spamASN and you want to redistribute them. There is no filtering in the (old) versions you use IIRC. > Yes I use 6.0, 6.1 and 5.8 on these machines. I'm waiting for 6.5 to

Re: eBGP routes are not reannounced

2019-04-22 Thread Denis Fondras
On Mon, Apr 22, 2019 at 10:07:52AM +, Mik J wrote: > Hello, > > I'm trying to set up openbgpd. > > On site 2, I'm peering with us.bgp-spamd.net and eu.bgp-spamd.net sucessfully. > The problem is that these routes are not in the bgp table on site 3. The BGP > peerings are up. > From site 3 I

Re: Stunnel 5.44 client syntax to accept connections on pty?

2019-04-17 Thread Denis
You can use this for peer to perform ppp connection once stunnel started up. [ppp] client = yes connect = STUNNEL-SERVER-IP:723 exec = /usr/sbin/pppd execargs = defaultroute persist 10.0.1.2:10.0.1.1 lock local debug noauth name peer's-name pty = yes CAfile = /etc/stunnel/ca.crt cert =

Re: packet loss when > 1000 clients connect

2019-04-16 Thread Denis Fondras
On Tue, Apr 16, 2019 at 11:07:47AM +0200, Torsten wrote: > Hi! > > Problem description: > In a customers network more than 2k clients connect to a server and > perform https requests. When in the morning more and more clients become > active, the number of connections rises until more and more

Re: pppd pty Input/output error

2019-04-10 Thread Denis
Fixed by using different pty (ptypA instead of ptyp0). On 4/10/2019 2:13 PM, Denis wrote: > > Trying to make ppp connection using pty - pseudo terminal driver: > > /usr/sbin/pppd ptyp0 noccp novj novjccomp nopcomp coaccomp noauth debug > passive updetach name -client connec

pppd pty Input/output error

2019-04-10 Thread Denis
Trying to make ppp connection using pty - pseudo terminal driver: /usr/sbin/pppd ptyp0 noccp novj novjccomp nopcomp coaccomp noauth debug passive updetach name -client connect 'stunnel /etc/stunnel/client.conf' tail /var/log/messages pppd[12698]: pppd 2.3.5 started by user, uid 0 pppd[12698]:

Re: openbgpd; strip private ASNs from bgp updates

2019-03-26 Thread Denis Fondras
On Tue, Mar 26, 2019 at 02:54:38PM +0100, open...@kene.nu wrote: > Hello, > > Is there a way to make openbgpd strip private ASNs from updates it > sends to certain neighbors? > I am using openbgpd on my edge routers and distribute routes generated > internally to the rest of the world. However,

Re: Block/allow outgoing traffic by user or application?

2019-02-24 Thread Denis Fondras
On Sun, Feb 24, 2019 at 01:43:08PM +0700, Frank Beuth wrote: > Is it possible to restrict network access on a per-user or per-application > (rather than per-port) basis? > > pf does not seem to have any capability to do this, maybe I missed something. > Don't know what you are aiming to do but

Re: Keeping track of MAC addresses

2019-02-20 Thread Denis Fondras
On Wed, Feb 20, 2019 at 01:05:59PM -0700, j...@bitminer.ca wrote: > > > > did you take a look at net/arpwatch? > > Too many emails; email to root is not a useful mechanism for me. > And net/arpwatch does not handle IPv6. I'll use the route message ABI if I had to do what you are looking for.

Re: Modern CPUs AES-NI enabling system wide

2019-02-04 Thread Denis
They in his usual style... I understand, thanks for reply. Expecting better IO results only. On 2/4/2019 12:00 PM, Theo de Raadt wrote: > Denis wrote: > >> Thank you for answers. >> >> As I understand you right amd64 kernel supports AES-NI for ipsec, >> soft

Re: Modern CPUs AES-NI enabling system wide

2019-02-04 Thread Denis
Thank you for answers. As I understand you right amd64 kernel supports AES-NI for ipsec, softraid, and LibreSSL only. Right? Just wonder, how to check softraid discipline exactly utilizes AES-NI instruction set on amd64 machine? Softraid created bioctl -r 8192 (for test purposes) works

Modern CPUs AES-NI enabling system wide

2019-02-03 Thread Denis
How to enable AES-NI AES system wide hardware acceleration support for crypto disciplines like LibreSSL, softraid0 crypto etc?

Re: bgplg doesn't work with wildcard httpd servers

2019-01-11 Thread Denis Fondras
On Fri, Jan 11, 2019 at 10:50:21AM -0600, Adam Thompson wrote: > Running 6.4 (-stable, via openup/mtier). > I have bgpd(8) talking to my border router, acting as a route collector. > That part seems fine. > I now have httpd(8) configured trivially to run bgplg(8) (per the bgplg(8) > manpage) but

Re: Error output from ndp -an

2018-12-28 Thread Denis Fondras
On Thu, Dec 27, 2018 at 01:39:33PM -0600, Aaron Riekenberg wrote: > I'm using OpenBSD 6.4 on a pcengines apu2 box as a router/firewall for a > CenturyLink DSL (pppoe) connection. > > Today I set up rd6 for ipv6 for the first time, similar to what is > described here: >

OpenVPN in rdomain 1 error

2018-12-13 Thread Denis
Trying to run OpenVPN in rdomain 1 by command # sh /etc/netstart tap0 # cat /var/openvpn.log ... Thu Dec 13 14:40:27 2018 us=655401 TUN/TAP device /dev/tap0 opened Thu Dec 13 14:40:27 2018 us=655456 do_ifconfig, tt->did_ifconfig_ipv6_setup=0 Thu Dec 13 14:40:27 2018 us=655500 /sbin/ifconfig tap0

Re: rtable, rdomain for ppp0 with DHCP assigned IP

2018-12-11 Thread Denis
/openvpn --config /etc/openvpn/server.conf On 12/10/2018 12:56 PM, Stuart Henderson wrote: > On 2018-12-09, Denis wrote: >> Stuck when running cvsync in rdomain 1. It seems cvsync does not using >> second routing table because of pf.conf misconfiguration or something. >> >>

Re: rtable, rdomain for ppp0 with DHCP assigned IP

2018-12-11 Thread Denis
On 12/10/2018 12:56 PM, Stuart Henderson wrote: > On 2018-12-09, Denis wrote: >> Stuck when running cvsync in rdomain 1. It seems cvsync does not using >> second routing table because of pf.conf misconfiguration or something. >> >> em0 as a main ISP channel, ppp0 wor

rtable, rdomain for ppp0 with DHCP assigned IP

2018-12-09 Thread Denis
Stuck when running cvsync in rdomain 1. It seems cvsync does not using second routing table because of pf.conf misconfiguration or something. em0 as a main ISP channel, ppp0 works as reserved wireless ISP channel. Some system services like cvsync, git, ntp should use second routing table (rtable

Re: default terminal autoload disable afater xenodm login

2018-12-07 Thread Denis
.spectrwm.conf should contain or commented it out: ... autorun = ws[1]:/usr/X11R6/bin/xterm -bg black -fg white +sb ... to fix unexpected terminals load after xenodm login. On 12/7/2018 7:59 PM, Anthony Campbell wrote: > On 07 Dec 2018, Denis wrote: >> Additional terminal loads by

Re: default terminal autoload disable afater xenodm login

2018-12-07 Thread Denis
Additional terminal loads by spectrwm because of config settings. Fixed it already. On 12/6/2018 9:33 PM, Denis wrote: > After changing X Display Manager to xenodm + spectrwm as win manager I > have an additional terminal load just after xenodm login. > > I've disabled 'xconsole'

default terminal autoload disable afater xenodm login

2018-12-06 Thread Denis
After changing X Display Manager to xenodm + spectrwm as win manager I have an additional terminal load just after xenodm login. I've disabled 'xconsole' in /etc/X11/xenodm/Xsetup_0 by commenting it. # cat ~/.xsessinon export ENV=$HOME/.kshrc xsetroot -solid grey & xterm -bg black -fg white +sb

Re: X server gbm: failed to open any driver

2018-12-06 Thread Denis
... On 12/5/2018 8:05 PM, Denis wrote: > I've just rebuilt Xenocara from -current with bsd-wrapper patch implemented. > > Getting the error when run startx: > .. > (==) Using system config derectory "/usr/X11R6/share/X11/xorg.conf.d" > (EE) > Fatal server error: &g

Re: X server gbm: failed to open any driver

2018-12-05 Thread Denis
o run Xorg by startx as user since than? Why setuid has been removed from Xorg? On 12/3/2018 8:06 PM, Denis wrote: > When X server starts on OpenBSD6.4amd64 I'm getting the message below > > .. > (II) [KMS] Kernel modesetting enabled. > gbm: failed to open any driver (search paths /

Re: X server gbm: failed to open any driver

2018-12-05 Thread Denis
xinit: server error On 12/4/2018 6:08 AM, Jonathan Gray wrote: > On Mon, Dec 03, 2018 at 08:06:18PM +0300, Denis wrote: >> When X server starts on OpenBSD6.4amd64 I'm getting the message below >> >> ... >> (II) [KMS] Kernel modesetting enabled. >> gbm: failed to ope

Fetching full CVS tree (-current -stable) by /usr/bin/cvs

2018-12-05 Thread Denis
I'm using cvsync currently, but it is not so secure as SSH wrapped /usr/bin/cvs fetching. According to OpenBSD FAQ: https://www.openbsd.org/anoncvs.html I can follow -stable -or current by executing separate commands and it seems I should have to separate directories for -current and -stable.

X server gbm: failed to open any driver

2018-12-03 Thread Denis
When X server starts on OpenBSD6.4amd64 I'm getting the message below ... (II) [KMS] Kernel modesetting enabled. gbm: failed to open any driver (search paths /usr/X11R6/lib/modules/dri) gbm: Last dlopen error: File not found failed to load driver: redeonsi EGL_MESA_drm_image required. spectrwm:

Re: vmm(4) direct device resources access from guests

2018-11-01 Thread Denis
It seems hardware passthrough does not available. On 11/1/2018 11:33 AM, Janne Johansson wrote: > Den tors 1 nov. 2018 kl 08:53 skrev Denis : >> >> Is it possible to have full I/O access to PCI-express devices from guest >> OSes like Penguin? >> > > https://www.openbsd.org/faq/faq16.html >

vmm(4) direct device resources access from guests

2018-11-01 Thread Denis
Is it possible to have full I/O access to PCI-express devices from guest OSes like Linux?

Fwd: vmm(4) direct device resources access from guests

2018-11-01 Thread Denis
Is it possible to have full I/O access to PCI-express devices from guest OSes like Penguin?

Can't change display resolution with xrandr. Possibly Nvidia issue?

2018-10-25 Thread Denis Majer
Trying to change my resolution to 1650x1050: $ gtf 1650 1050 60 > Modeline "1648x1050_60.00" 144.01 1648 1752 1928 2208 1050 1051 1054 1087 -Hsync +Vsync $ xrandr --newmode "1648x1050_60.00" 144.01 1648 1752 1928 2208 1050 1051 1054 1087 -Hsync +Vsync > xrandr: Failed to get size of gamma for

Re: axen Ethernet device errors on both USB3.0 and USB2.0 ports

2018-09-11 Thread Denis
: rxeof: too short transfer axen0: usb drrors on rx: IOERROR Denis Forwarded Message Subject: Re: axen Ethernet device errors on both USB3.0 and USB2.0 ports Date: Sat, 8 Sep 2018 11:50:13 +0300 From: Denis To: sc dying I've just applied both axen5-63.diff and xchi63.diff

cc: dereference NULL pointer inside switch brackets and no exception

2018-09-04 Thread Denis Buga
> As far as I know, since there is no explicit cases in the switch > statement, the value is not used at all, and the compiler never generates code to dereference the pointer. ... That is true. Thank you all for answers and for link.

cc: dereference NULL pointer inside switch brackets and no exception

2018-09-03 Thread Denis Buga
int main() { char * ptr = NULL; switch( *ptr ) { default: fprintf(stderr, "where is exception ? default label exist for" "exclusive value, not for non-existent ! " "it can be security issue, when dereferencing NULL " "in switch formally pass and we go to default label\n"); } } No ? 6.3

Re: OpenBGPD as route server - correct filter syntax ?

2018-08-30 Thread Denis Fondras
On Thu, Aug 30, 2018 at 03:29:50PM +, Bob Smith wrote: > Hi, > > I'm trying to figure out the most suitable config params transform OpenBGPD > into a route server. > > So far I have : > route-collector yes If you are configuring a route server, you don't want "route-collector yes". Or if

Re: OpenBSD on EdgeRouter 4

2018-08-20 Thread Denis Fondras
On Mon, Aug 20, 2018 at 10:22:58PM +, r303 wrote: > Has anyone installed OpenBSD on an EdgeRouter 4? > If so, can you share a quick rundown of the installation steps? > The tutorial for the EdgeRouter Lite doesn't seem to match up with the ER-4. >

USB composite devices & OpenBSD

2018-08-09 Thread Denis
There are a lot of modern composite USB devices on the market now like Modems, cameras, etc. How to make them work in OpenBSD like penguin's usbmodeswitch works?

Create >100 ttyU* by ./MAKEDEV ttyU* command

2018-08-07 Thread Denis
Hi, Is it possible to make more ttys by ./MAKEDEV ttyU* command to have: ttyU0a-ttyUzz?

Re: Adding New Commands to BGP Looking Glass?

2018-07-23 Thread Denis Fondras
> Do you see where I might've gone wrong? I know that my definition in the .h > file is wrong, but I'm trying to get this working in baby steps, and perhaps > I was mistaken but I thought that having a duplicated function would still > make it appear in the bgplg menu. Is there anything obvious

Re: Adding New Commands to BGP Looking Glass?

2018-07-20 Thread Denis Fondras
> If you need specifics I can certainly supply screenshots or code snippets. > It's probably something obvious that I'm just not seeing, but any help would > be greatly appreciated. > Can you show some diff and detailed steps please ?

sndiod internals

2018-06-22 Thread Denis Buga
sorry for bad english if simplify, seems like we have three pairs of concepts, while in audio path from file to card file (Hz/bit), sndiod (Hz/bit), card (Hz/bit) first and third is more or less i understand by second i mean sndiod's "dsp" i understand, that, when i set up "sndiod_flags" with

Huawei 4G stick (Hisilicon Balong V7 chipset) kernel driver

2018-06-20 Thread Denis
Huawei E3372h modem built on Hisilicon Balong V7 SOC. http://www.hisilicon.com/en/Products/ProductList/Balong Does it have (planned) a kernel driver to have it working? Thank you for answer in advance. Denis

Re: rtadvd bug ?

2018-06-17 Thread Denis Fondras
On Mon, Jun 11, 2018 at 10:13:36AM +0200, Bastien Durel wrote: > Because it's lower than RTP_CONNECTED and I don't know what it is. The > /* local address routes (must be the highest) */ comment makes me think > it MAY be 127.0.0.0/8 or ::1/128 (useless for rtadvd then), but it may > be related to

Re: Interest in new network protocols

2018-06-14 Thread Denis Fondras
raction. Among the (new) shiny toys, SRv6 seems like a good bet. Denis

Re: rtadvd bug ?

2018-06-09 Thread Denis Fondras
On Thu, Jun 07, 2018 at 04:02:34PM +0200, Bastien Durel wrote: > shouldn't it check the rtm_priority to be RTP_LOCAL or RTP_CONNECTED ?? > it make no sense to start advertising prefix on an interface if the > prefix is over a gateway. > Why RTP_LOCAL ?

vmm support in QEMU to run Win7 virtually?

2018-06-09 Thread Denis
Does QEMU support vmm on OpenBSD without windows setup on HDD directly? Thanks

Re: Confusing IPv6 route(8) results

2018-05-24 Thread Denis Fondras
On Thu, May 24, 2018 at 08:43:30PM +0200, Sebastian Benoit wrote: > Denis Fondras(de...@openbsd.org) on 2018.05.24 17:57:19 +0200: > > On Thu, May 24, 2018 at 07:04:04AM -0400, David Higgs wrote: > > > But shouldn???t the answer be the same, since I have a valid de

Re: Confusing IPv6 route(8) results

2018-05-24 Thread Denis Fondras
On Thu, May 24, 2018 at 07:04:04AM -0400, David Higgs wrote: > But shouldn’t the answer be the same, since I have a valid default route? > It should but that's not how route(8) works for now :) Barely tested diff, assumes that no netmask means /128 (similar to IPv4 handling where no netmask

  1   2   3   4   5   >