Re: relayd bypass SSL interception for URL

2015-06-16 Thread Felipe Scarel
Does anyone have a working Squid peek-n-splice (with optional splicing with SNI lookup, preferably) config I can test with? I'm having trouble finding clear examples, and stage2 bumping is prompting certificate errors. Thanks in advance, fbscarel On Tue, Mar 10, 2015 at 5:00 PM, Felipe Scarel

Re: Dual-NSD setup management

2015-05-27 Thread Felipe Scarel
multiple loopback interfaces if you did want to use divert-to. 'ifconfig create lo1' then you don't need to use weird ports to accomplish things. On Wed, May 27, 2015 at 4:06 AM, Stuart Henderson s...@spacehopper.org wrote: On 2015-05-26, Felipe Scarel fbsca...@gmail.com wrote: after

Dual-NSD setup management

2015-05-26 Thread Felipe Scarel
Hello all, after reading some documentation on the NSD manpage and online, it seems there's no support for views as offered with BIND. I've gathered that the general suggestion is to run two separate instances (running on 127.0.0.1, for example), and divert traffic from pf depending on the

Missing FAQ 10.16 section

2015-05-20 Thread Felipe Scarel
Hello all, I was just reviewing the femail-chroot-1.0p0 post-install README, which reads: # cat /usr/local/share/doc/pkg-readmes/femail-chroot-1.0p0 | grep 'By default' -A2 By default, femail will use `localhost' for smtphost. Make sure to review FAQ Section 10.16 discussing name resolution

Re: Missing FAQ 10.16 section

2015-05-20 Thread Felipe Scarel
On Wed, May 20, 2015 at 2:11 PM, Gleydson Soares gsoa...@gmail.com wrote: Felipe Scarel fbsca...@gmail.com writes: Hello all, I was just reviewing the femail-chroot-1.0p0 post-install README, which reads: # cat /usr/local/share/doc/pkg-readmes/femail-chroot-1.0p0 | grep 'By default' -A2

Re: relayd crashes often

2015-03-26 Thread Felipe Scarel
On Thu, Mar 26, 2015 at 12:37 AM, Yonas Yanfa yo...@fizk.net wrote: On 15-03-24 03:26 AM, Claudio Jeker wrote: On Mon, Mar 23, 2015 at 11:54:41PM -0400, Yonas Yanfa wrote: Hi, I'm running relayd/OpenBSD 5.6-stable on a KVM virtual machine. relayd always crashes within a few hours of

Re: Set PKG_PATH using Time Zone?

2015-03-26 Thread Felipe Scarel
Routing from certain countries can also be funny sometimes (for example, I'm pretty sure users in Peru would get better speeds downloading from US servers rather than from Brazil, despite the geographical proximity). On Thu, Mar 26, 2015 at 4:18 PM, Joshua Smith jsm...@mail.wvnet.edu wrote: On

Re: relayd bypass SSL interception for URL

2015-03-12 Thread Felipe Scarel
On Mon, Mar 9, 2015 at 12:03 PM, Stuart Henderson s...@spacehopper.org wrote: On 2015-03-06, Felipe Scarel fbsca...@gmail.com wrote: Hello all, I'm currently using relayd as a forward proxy, selectively blocking HTTP and HTTPS requests while doing MitM inspection (as per http

Re: httpd + dokuwiki or mailman

2015-03-06 Thread Felipe Scarel
On Fri, Mar 6, 2015 at 9:37 AM, Felipe Scarel fbsca...@gmail.com wrote: On Thu, Mar 5, 2015 at 6:06 PM, agrquinonez agrquino...@agronomos.ca wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/05/2015 12:14 PM, Michael wrote: I run dokuwiki on httpd with php-fpm. I did

Re: httpd + dokuwiki or mailman

2015-03-06 Thread Felipe Scarel
On Thu, Mar 5, 2015 at 6:06 PM, agrquinonez agrquino...@agronomos.ca wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/05/2015 12:14 PM, Michael wrote: I run dokuwiki on httpd with php-fpm. I did an: cd /var/www/htdocs ln -s ../../dokuwiki doku The config in /etc/examples will

relayd bypass SSL interception for URL

2015-03-06 Thread Felipe Scarel
Hello all, I'm currently using relayd as a forward proxy, selectively blocking HTTP and HTTPS requests while doing MitM inspection (as per http://www.reykfloeter.com/post/41814177050/relayd-ssl-interception). To allow certain domains to go through the SSL proxy, a simple 'pass quick url file' is

Re: relayd memory usage when loading large URL lists

2015-03-04 Thread Felipe Scarel
On Wed, Mar 4, 2015 at 6:29 AM, Stuart Henderson s...@spacehopper.org wrote: On 2015-03-01, Felipe Scarel fbsca...@gmail.com wrote: Now loading the phishing/domains URL list, which has about ~63k entries. relayd's parent process ballons to over 2GB memory usage (I'm assuming it's reading

Re: relayd memory usage when loading large URL lists

2015-03-02 Thread Felipe Scarel
On Sun, Mar 1, 2015 at 4:45 PM, Felipe Scarel fbsca...@gmail.com wrote: Hello all, I'm implementing a simple SSL forward proxy using relayd. Configuration has been fine, as was testing. There seems to be one issue with memory consumption, however. To better illustrate my issue, here follows

relayd memory usage when loading large URL lists

2015-03-01 Thread Felipe Scarel
Hello all, I'm implementing a simple SSL forward proxy using relayd. Configuration has been fine, as was testing. There seems to be one issue with memory consumption, however. To better illustrate my issue, here follows an excerpt of /etc/relayd.conf : http protocol httpsfilter { tcp {

httpd client certificates and URL rewriting

2015-02-22 Thread Felipe Scarel
Hello, I'm currently using httpd + php_fpm to serve a Wordpress website with OpenBSD 5.7-snapshot (20/02/2015). The added capabilities to use a fastcgi target as default index and general improvements are really nice, and for the most part there are no issues. I'd like to thank Reyk and all

Re: English and Spanish keyboard at same time?

2009-07-22 Thread Felipe Scarel
Try kbd(8). On Wed, Jul 22, 2009 at 11:43, Chris Bennett ch...@bennettconstruction.biz wrote: I do most of my work in English, but I also do a small amount in Spanish. I have a Spanish keyboard, but when I tried hooking it up, didn't get what was on keys. Is there any way to change this

Re: Stupid Ideas - softraid and ExpEther

2009-04-08 Thread Felipe Scarel
Forgot to CC the list, my bad. On Wed, Apr 8, 2009 at 12:25 PM, Joseph C. Bender jcben...@bendorius.com wrote: J.C. Roberts wrote: As for the mentioned issue of encrypting the bus data, since you've got the VLAN it is feasible, but if you've got an attacker inside the switches of your

Re: (bit)torrent openbsd client

2009-01-28 Thread Felipe Scarel
Currently using rtorrent over here. On Wed, Jan 28, 2009 at 1:12 PM, Mihai Popescu B.S. mihai...@gmail.com wrote: Hello, Could you make some suggestion for a good openbsd (bit)torrent client with or without GUI ? I know some names, but I want to have some user experience presented.

Re: (bit)torrent openbsd client

2009-01-28 Thread Felipe Scarel
I'm using rtorrent on -current, no issues whatsoever. On Wed, Jan 28, 2009 at 1:54 PM, Mattieu Baptiste mattie...@gmail.com wrote: On Wed, Jan 28, 2009 at 4:26 PM, fRANz andrea.francesc...@gmail.com wrote: try rtorrent: http://libtorrent.rakshasa.no/ Any feedback on the status of rtorrent

Re: Letter to OLPC

2006-10-06 Thread Felipe Scarel
I totally agree with Siju on this. Living in a 3rd world country, as I guess he also lives, I am pretty sure that a laptop isn't at all important for disadvantaged children, as said. REAL need in our countries are, as previously said, for food, health care and good education. The most urgent of

Re: GPL = BSD + DRM [Was: Re: Intel's Open Source Policy Doesn't Make Sense]

2006-10-06 Thread Felipe Scarel
Is that all you can say to defend your point of view? If you are wrong (and you probably are), you should admit it, not repeat quote out of context as a silly escape. On 10/6/06, Han Boetes [EMAIL PROTECTED] wrote: quote out of context Rod.. Whitworth wrote: On Fri, 6 Oct 2006 03:50:38 +0159,

Re: xmms does not run smoothly

2006-05-18 Thread Felipe Scarel
I have always had the suspection that desktop software like xmms and firefox run a bit slower on OpenBSD in comparison with other OS's, but never had a clue why it happened, or if it was only happening on my machine. I suspect (and may be completely wrong) that it could be something regarding

Re: Binary Update for Packages

2006-05-08 Thread Felipe Scarel
Why in the hell don't you simply use the provided precompiled packages? From the OpenBSD FAQ: Another advantage is that users rarely need to compile software from source, as packages have already been compiled and are available and ready to be used on an OpenBSD system. The ports tree is

Re: openbsd and the money -solutions

2006-03-24 Thread Felipe Scarel
Copyright law is complex, OpenBSD policy is simple - OpenBSD strives to maintain the spirit of the original Berkeley Unix copyrights. This is the first sentence of this page: http://www.openbsd.org/policy.html Can't people see how ridiculous is all that talk about why don't we change the

Re: OBPkg (Port/Package installer)

2006-03-15 Thread Felipe Scarel
404 Not Found... is the URI correct? On 3/14/06, Steffen Wendzel [EMAIL PROTECTED] wrote: Hi, I wrote an inofficial front-end for the installation of ports and packages under OpenBSD. It is Gtk+-2 based (you need v. 2.6 or newer). You can install local ports, local packages (e.g. mounted

Re: X11 exploit info

2006-02-13 Thread Felipe Scarel
I thought the very same thing yesterday, when he published his web site on the list. I took a look there, and assuming everything is correct, looks like he ported KDE and Qt to OpenBSD, which seems huge (of course he shouldn't have done that alone. Moreover, his job carrer include big companies

Re: The Apache Question

2006-02-08 Thread Felipe Scarel
, as soon as I get the grasp of porting software to OpenBSD I'll try to do that, would be quite helpful. Erm... just a lazy question, but lighttpd has support for DAV? On 2/8/06, Joachim Schipper [EMAIL PROTECTED] wrote: On Tue, Feb 07, 2006 at 11:05:44PM -0200, Felipe Scarel wrote: Since it's an open

Re: The Apache Question

2006-02-08 Thread Felipe Scarel
Thanks there, I'll consider using lighttpd then. On 2/8/06, Bret Lambert [EMAIL PROTECTED] wrote: Felipe Scarel wrote: Well then, I'll take a look at you suggestion, Joachim, seems reasonable. Too bad most developers actually *prefer* FTP over ssh, so it's going to be difficult

Re: The Apache Question

2006-02-07 Thread Felipe Scarel
Sure OpenBSD's modified Apache 1.3 is way more secure than most stuff out there, and is working great. However, the Subversion versioning control system (which my project uses) demands Apache2 in order to do DAV checkouts and commits, better authentication and more. So, my only choice was to

Re: openbsd's future plans?

2006-02-07 Thread Felipe Scarel
Aside from all (somewhat funny, especially the java one) jokes, what are the plans regarding SMP? Recently I had to install FreeBSD on a dual-Xeon server because it's SMP support is kinda better than OpenBSD's, but that did not please me at all, so that is indeed a good question. -- Felipe

Re: The Apache Question

2006-02-07 Thread Felipe Scarel
, Felipe Scarel wrote: Sure OpenBSD's modified Apache 1.3 is way more secure than most stuff out there, and is working great. However, the Subversion versioning control system (which my project uses) demands Apache2 in order to do DAV checkouts and commits, better authentication and more. So

Re: OpenBSD hardware router

2006-02-02 Thread Felipe Scarel
Any chance of buying one of those here from Brazil? On 2/2/06, Will H. Backman [EMAIL PROTECTED] wrote: Kenny Mann wrote: I'm looking for something that which I can slap OpenBSD 3.8 on and use it as a router. This will be used for a house (~ 4 people) and I'm looking for something small

Re: Ruby queries

2005-12-17 Thread Felipe Scarel
Regarding tcl and tk, few days ago i had to compile PIL (Python Imaging Library) for my Zope/Plone server. Since it also requires tcl and tk, this information may be useful for you trouble. I installed both using openbsd packages method, but when I tried to run setup.py, tk complained about