Re: sftp server empty password login

On Tue, 26 Mar 2024 10:28:11 +0100 Sylvain Saboua wrote: > Match User media > ForceCommand internal-sftp -d /home/media > ChrootDirectory /home/media > PasswordAuthentication yes > AuthenticationMethods none > PermitEmptyPasswords yes you probably

Re: Ignore some USB devices

On Mon, 19 Feb 2024 19:43:14 +0100 Kirill A. Korinsky wrote: > I do have two USB audio device: > > ~ $ usbdevs -v > Controller /dev/usb0: > ... > addr 07: 043e:9a66 LG Electronics Inc., LG UltraFine Display Audio >high speed, self powered, config 1, rev 0.03 >

crontab and /usr/local/{,s}bin

hi, what is the reason that /usr/local/{,s}bin is not in PATH in crontab? this seems to be the case on all unix-like systems and it regularly bites people. sometimes someone says it's for security w/o being able to tell what is being prevented by this. or is it just some historic default noone

Re: tcpdump rotating issue with newsyslog

On Sun, 10 Apr 2022 17:00:25 -0400 Nick Holland wrote: > On 4/10/22 9:39 AM, Yogendra Kumar Chaudhary wrote: > > I am running the following command in the OpenBSD 6.2. You should really upgrade. That version no longer gets security patches for several years. > So, I'm thinking you probably want

Re: video shows green box on -current

On Wed, 17 Mar 2021 00:05:24 +0100 Pau wrote: > Any idea? https://www.openbsd.org/faq/current.html#r20201229 by any chance? > thanks, > > Pau Kind regards, Thomas

Any experience with 10Gbe?

managing to get close to line speed above 1 Gbe. I don't want to just buy expensive hardware and hope that it works. Has anyone here been able to get close to 10 Gb/s networking with OpenBSD? I don't need to be able to have more than a few pf-rules. -- Nicholas C. L. Ipsen

Re: Strange behavior when I try to use lladdr

On Fri, 22 May 2020 13:12:15 +0300 Денис Давыдов wrote: > P.S. offtopic: I turn to the developers: I tearfully ask you to add > python to the base installation. This would allow the configuration > to be rolled automatically using Ansible right after install an OS. > It would simplify the task

Re: pkg_add: how to specify both flavor and branch

On Sun, 26 Jan 2020 10:54:25 - (UTC) Stuart Henderson wrote: > You need to know the name of the directory in ports to use this > notation. Formats vary. Here you would use "pkg_add gnupg--%gnupg2". > > If you don't have a ports tree installed and need to find the path, > install the package

pkg_add: how to specify both flavor and branch

Hello, `pkg_add gnupg` is ambiguous since there is both gnupg-1.4.23p3-card-ldap, gnupg-1.4.23p3 and gnupg-2.2.12p0, but neither `pkg_add gnupg%2.2`, `pkg_add gnupg--%2.2` nor `pkg_add gnupg%2.2--` work. So how do i specify the exact package in this case? (I know that `pkg_add gnupg-2.2.12p0`

Re: openup service question

On Mon, 16 Sep 2019 at 09:13:13 +, rsyk...@disroot.org wrote: > Dear list, > > > I have been using the "openup" service to keep my amd64 machine updated > to the latest stable, i.e. 6.5, available at > > https://www.mtier.org/solutions/apps/openup/ > > Recently I get: > > odin# ./openup

Re: Upgrade procedure (6.4 -> 6.5)

On Thu, 02 May 2019 at 11:46:20 +0200, Noth wrote: > > On 02/05/2019 11:02, Consus wrote: > > On 10:27 Thu 02 May, Markus Hennecke wrote: > > > Am 02.05.2019 um 09:52 schrieb Consus: > > > > I've upgraded my systems from 6.4 to 6.5 without a glitch, but I see > > > > that /etc/networks and some

Re: NextCloud: failed integrity checks

On [22/07/18] [08:32P], Johan Huldtgren wrote: On 2018/07/22 15:39, Nicolas Schmidt wrote: After installation on OpenBSD 6.3 with pkg_add, NextCloud complains about files failing the integrity checks. More specifically: - occ * expected hash:

Re: NextCloud: failed integrity checks

On [22/07/18] [07:39P], Nicolas Schmidt wrote: After installation on OpenBSD 6.3 with pkg_add, NextCloud complains about files failing the integrity checks. More specifically: - occ * expected hash:

Re: roundcube installation php modules

On [10/07/18] [02:59P], Danny AwesomeRetro wrote: No problem,that fixed the issue for me ;) thank you,this has cost me around 18 hours of searching Cheers, Danny On 07/10/2018 04:25 PM, Vijay Sankar wrote: Sorry to interject -- just wondering if you read the instructions towards the bottom

Re: WHere to put certificates for IKEDv2?

On Sun, Jun 24, 2018 at 12:42:15PM +0200, C. L. Martinez wrote: > On Sun, Jun 24, 2018 at 08:43:32AM +, Stuart Henderson wrote: > > On 2018-06-23, C. L. Martinez wrote: > > > Hi all, > > > > > > I am using Easy-RSA to manage my home's CA (using ellipti

Re: WHere to put certificates for IKEDv2?

On Sun, Jun 24, 2018 at 08:43:32AM +, Stuart Henderson wrote: > On 2018-06-23, C. L. Martinez wrote: > > Hi all, > > > > I am using Easy-RSA to manage my home's CA (using elliptic curve > > certificates). I have created a certificate for my OpenBSD gw for IK

WHere to put certificates for IKEDv2?

N1_DN ca_validate_cert: /C=ES/... ok Do i need to install user certificates also in OpenBSD gw? thanks -- Greetings, C. L. Martinez

Re: Autocompletion with pass in ksh

On Fri, 25 May 2018 08:36:44 +0200 Niels Kobschaetzki wrote: > I got a reply on twitter from Roman Zolltarif who wrote a blog post > about it :) > https://www.romanzolotarev.com/pass.html#Completions%20in%20Korn%20shell This seems to be a custom pass implementation.

Re: Errors with Php and curl under OpenBSD 6.3

akis wrote: > > Hello, > > try copying cert.pem to the www chroot: > > > > # mkdir -p /var/www/etc; cp /etc/ssl/cert.pem /var/www/etc/ssl > > > > and restart php-fpm. > > > > On Tue (24/04/18), C. L. Martinez wrote: > > > Hi all, > >

Errors with Php and curl under OpenBSD 6.3

Hi all, Since this morning my OpenBSD 6.3 host (with tt-rss installed) returns the following error when I try to add some feeds: Couldn't download the specified URL: ; 77 error setting certificate verify locations: CAfile: /etc/ssl/cert.pem CApath: none It seems some type of problem with

Re: OpenBSD blocks IPsec traffic

> On Wed, 18 Apr 2018 15:01:24 +0200 > "C. L. Martinez" <carlopm...@gmail.com> wrote: > > > Hi all, > > > > I am trying to configure an ipsec tunnel (host-to-host) between two > > hosts that go through an openbsd firewall. Tunnel is established,

OpenBSD blocks IPsec traffic

Hi all, I am trying to configure an ipsec tunnel (host-to-host) between two hosts that go through an openbsd firewall. Tunnel is established, but when I try to, for example, connect via ssh from one host to the other, pf blocks traffic: Apr 18 12:53:00.286351 rule 24/(match) [uid 0, pid 19127]

Migrating nginx config to OpenBSD's httpd

Hi all, I am trying to migrate nginx configuration to OpenBSD's httpd. All it is working ok, except for some proxy reverse config that I use with nginx's config, like for example: server { listen 80; server_name internal.w01.domain.org; location / { proxy_pass

Re: Writing "ones" instead of "zeroes" when wiping disk

On Thu, 11 Jan 2018, STeve Andre' wrote: > Don't bother. Wiping the disk twice is enough. If you are storing state > secrets melt the disk. > An anvil big hammer also works well and gives some exercise in the process. Lee

Re: Testing IKEv2 with Android devices

On Wed, Nov 29, 2017 at 9:33 AM, Stuart Henderson <s...@spacehopper.org> wrote: > On 2017-11-26, C. L. Martinez <carlopm...@gmail.com> wrote: >> >> Ok, it is seems the prolem is that iked(8) does not know how to perform >> Diffie-Hellman group negotiation: >&g

Re: Testing IKEv2 with Android devices

On Sun, Nov 26, 2017 at 09:02:46PM +0100, C. L. Martinez wrote: > Hi all, > > I am testing IKEv2 for Android roadwarriors clients ... I have done a very > basic config: > > ikev2 "roadwarriors" passive esp \ > from 0.0.0.0/0 to 172.22.55.0/27 \ >

Testing IKEv2 with Android devices

e SIGNATURE_HASH_ALGORITHMS ikev2_msg_send: IKE_SA_INIT response from 172.17.35.9:500 to 172.17.35.20:500 msgid 0, 451 bytes config_free_proposals: free 0x1ccfc4952580 Android device is a Samsung Galaxy Edge S7 (Adnroid 7.0) and OpenBSD is 6.2 with all patches ... What ma I doing wrong? Thanks. -- Greetings, C. L. Martinez

Re: Problems configuring ifstated with dhcp interfaces /etc/ifstated.conf:4: macro '2' not defined (SOLVED)

On Fri, Nov 10, 2017 at 07:28:19PM +, C. L. Martinez wrote: > Hi all, > > I need to configure ifstated for two public interfaces and one of them is a > dhcp interface. To accomplish this I have configured the following macro in > ifcstated.conf's file: > > wired_ga

Problems configuring ifstated with dhcp interfaces /etc/ifstated.conf:4: macro '2' not defined

onf:4: macro '2' not defined /etc/ifstated.conf:34: macro 'wired_gate_test' not defined /etc/ifstated.conf:34: syntax error ifstated: invalid start state wired From command line, ping command works ... What am I doing wrong? Thanks. -- Greetings, C. L. Martinez

Re: Debugging a php's script startup

te_rss.log" daemon_user="www" . /etc/rc.d/rc.subr pexp="${daemon}${daemon_flags:+ ${daemon_flags}}" rc_bg=YES rc_reload=NO rc_post() { rm -f /var/www/htdocs/rss/lock/update_daemon.lock } rc_cmd $1 Inside .ini I have configured mysqli.default_socket option: mysqli.default_socket = /var/www/var/run/mysql/mysql.sock -- Greetings, C. L. Martinez

Debugging a php's script startup

ly daemon_class + unset _rcflags _rcrtable _rcuser _rctimeout + pexp=/usr/local/bin/php-7.0 /var/www/htdocs/rss/update_daemon2.php --log /tmp/update_rss.log + rcexec=su -l -c daemon -s /bin/sh www -c + [ 0 -eq 0 ] + pexp= /usr/local/bin/php-7.0 /var/www/htdocs/rss/update_daemon2.php --log /tmp/update

About WPA2 compromised protocol

HI all, Regarding WPA2 alert published today: https://www.krackattacks.com/, if I use an IPSec tunnel with shared-key or certifcate or an OpenVPN connection to authenticate and protect clients and hostAP comms, is this vulnerability mitigated? Thanks.

Re: sysmerge is not needed when updating to 6.2?

of the updated system. > Perfect. Many thanks. -- Greetings, C. L. Martinez

sysmerge is not needed when updating to 6.2?

thanks. -- Greetings, C. L. Martinez

Running OpenBSD 6.1 under vmware fusion

Section Section "Device" Identifier "default device" Driver "vmware" EndSection Section "Screen" Identifier "default screen" Device "default device" Monitor "

Re: Problem with key bindings with mutt under OpenBSD 6.1

On Sat, Sep 02, 2017 at 02:48:12PM +0200, Anton Lindqvist wrote: > On Sat, Sep 02, 2017 at 11:01:14AM +, C. L. Martinez wrote: > > Hi all, > > > > I have used mutt over several months under FreeBSD and RHEL/CentOS. I have > > migrated my desktop to OpenB

Problem with key bindings with mutt under OpenBSD 6.1

;\CI" or "\CH", for example, works without problems ... Is it "\CO" defined by default under OpenBSD? How can I revert this behavior? Thanks. -- Greetings, C. L. Martinez

Re: Can I use OpenBSD in a virtual machine, for example, VirtualBox?

On Mon, 26 Jun 2017, SOUL_OF_ROOT 55 wrote: > Can I use OpenBSD in a virtual machine, for example, VirtualBox? > Yep, .. have had them for many years, VirtualBox & Xen. Lee

Re: Sad story

>Simply restore from backup. I have only one old backup, not the newest changes... >10% are files you will not ever need >20% are files that you will never use That's not my case, sadly.

Sad story

Forgot the passphrase of a full-disk encrypted OpenBSD system ;_; So many documents will be lost, like [coughs] accesses to NULL. --luiz r.

OpenBSD 6.1 on Lenovo P50

Hi there, Anybody running OpenBSD on a Lenovo P50 laptop? I am looking for tips and experiences. Regards, LJ -- Shall artificial plants be given artificial water?

Re: After applying patches, kernel version is slower?

On Thu, May 04, 2017 at 07:49:04AM +, Stuart Henderson wrote: > On 2017-05-04, C. L. Martinez <carlopm...@gmail.com> wrote: > > Hi all, > > > > I have applied the recent patches for OpenBSD 6.1 in two hosts and I see a > > strange behavior. In a non-patched O

After applying patches, kernel version is slower?

GENERIC#4 amd64 Any idea why?? -- Greetings, C. L. Martinez

Sysctl options to install IDS software

irst stage :) ... I prefer to do some type of control first and after apply these changes. Any recommendation? Many thanks. -- Greetings, C. L. Martinez

Re: What does it mean this error when I try install a package?

es at > http://ftp.openbsd.org/pub/OpenBSD/6.1/packages/amd64/index.txt > > So, try > > pkg_add -v python-2.7.13p0 > > or, check the -z switch of pkg_add (man pkg_add) > > pkg_add -v -z python-2.7.13 > Yep, undertood. Many thanks. -- Greetings, C. L. Martinez

What does it mean this error when I try install a package?

amd64; -- Greetings, C. L. Martinez

Re: Why isn't OpenBSD in Google Summer of Code 2017?...

Security and correctness should never be an after-thought. Have you done any real software development? And have you ever tried to find your way through cruddy code? 999 times out of 1000 it is less painful and much more effective to rewrite from scratch. So what's the point of having that

Re: Please: Is there ANY chance that Linux binaries might run again???

On 11 Mar 2017 at 15:47, ropers wrote: > On 11 March 2017 at 15:18, Stuart Henderson wrote: > > > On 2017/03/10 23:56, ropers wrote: > > > On 10 March 2017 at 01:30, Stuart Henderson > > > wrote: > > > > > > (And unlike Linux, 32-bit OpenBSD

Re: New features in VMM for OpenBSD 6.1?

On Mon, Mar 06, 2017 at 10:55:23AM -0800, Mike Larkin wrote: > On Mon, Mar 06, 2017 at 06:22:07PM +0100, Juan Francisco Cantero Hurtado > wrote: > > On Mon, Mar 06, 2017 at 10:40:52AM +, C. L. Martinez wrote: > > > Hi all, > > > > > > Where can I

New features in VMM for OpenBSD 6.1?

Hi all, Where can I see what new features will be released in VMM for OpenBSD 6.1? For example, it could be possible to run linux or freebsd guests apart of openbsd guests? Many thanks. -- Greetings, C. L. Martinez

Re: How easy is to do a MITM/spoof/etc. a public IP address?

On Thu, Jan 26, 2017 at 10:51:14AM +, Stuart Henderson wrote: > On 2017-01-25, C. L. Martinez <carlopm...@gmail.com> wrote: > > On Wed, Jan 25, 2017 at 02:07:55PM +, Stuart Henderson wrote: > >> On 2017-01-25, C. L. Martinez <carlopm...@gmail.com> wrote: >

Re: How easy is to do a MITM/spoof/etc. a public IP address?

On Wed, Jan 25, 2017 at 08:20:32PM +0100, Daniel Gillen wrote: > On 25.01.2017 15:42, C. L. Martinez wrote: > > On Wed, Jan 25, 2017 at 02:07:55PM +, Stuart Henderson wrote: > >> On 2017-01-25, C. L. Martinez <carlopm...@gmail.com> wrote: > >>> Hi all,

Re: How easy is to do a MITM/spoof/etc. a public IP address?

On Wed, Jan 25, 2017 at 02:07:55PM +, Stuart Henderson wrote: > On 2017-01-25, C. L. Martinez <carlopm...@gmail.com> wrote: > > Hi all, > > > > I have received a (maybe) "stupid" request from one of our customers. > > We have a pair of public Open

How easy is to do a MITM/spoof/etc. a public IP address?

p address) in this scenario? Many thanks. -- Greetings, C. L. Martinez

Re: PCI Express wireless adapter supported under OpenBSD

On Wed 30.Nov'16 at 11:44:13 +0100, Stefan Sperling wrote: > On Wed, Nov 30, 2016 at 10:12:32AM +, C. L. Martinez wrote: > > I have discoverd that Asus AC88 AC3100 uses BCM4366 chip, but if I am not > > wrong this chip is not supported under OpenBSD, is it right? > >

Re: PCI Express wireless adapter supported under OpenBSD

On Wed 30.Nov'16 at 10:26:32 +0100, Peter N. M. Hansteen wrote: > On Wed, Nov 30, 2016 at 08:09:24AM +, C. L. Martinez wrote: > > I would like to install OpenBSD on a HP Microserver Gen8 to act as a > > firewall and hostap. I am searching what components I need and I have a

Re: PCI Express wireless adapter supported under OpenBSD

On Wed 30.Nov'16 at 10:04:25 +0100, Stefan Sperling wrote: > On Wed, Nov 30, 2016 at 08:09:24AM +, C. L. Martinez wrote: > > Hi all, > > > > I would like to install OpenBSD on a HP Microserver Gen8 to act as a > > firewall and hostap. I am searching what c

PCI Express wireless adapter supported under OpenBSD

. -- Greetings, C. L. Martinez

FW Hardware

There have been some good discussions lately about HW capable of running a lot of traffic, .. but this question is about the other end of the spectrum. Have a need for a small FW appliance that can be used to protect a single machine and provide a simple way to whitelist a single IP or two. Two

Re: httpd: old behavior returns: Couldn't resolve host (SOLVED)

On Mon 5.Sep'16 at 16:15:12 +, C. L. Martinez wrote: > Hi all, > > I have upgraded my TT-RSS server based on OpenBSD 5.9 to OpenBSD 6.0. All > goes perfect, except when I try to add news feeds. Like I have reported in > the past: http://marc.info/?l=openbsd-misc=1467390246

httpd: old behavior returns: Couldn't resolve host

Hi all, I have upgraded my TT-RSS server based on OpenBSD 5.9 to OpenBSD 6.0. All goes perfect, except when I try to add news feeds. Like I have reported in the past: http://marc.info/?l=openbsd-misc=146739024615025=2, tt-rss returns "Couldn't resolve host" every time that I try to

Recommendation about an Alfa usb wireless adapter to use it as HostAP

about which of them can run as a HostAP. Any recommendation? Maybe AWUS036ACH can supports this functionality, but I am not sure ... Thanks. -- Greetings, C. L. Martinez

Re: Encrypting carp traffic with ipsec

On Thu 4.Aug'16 at 12:30:56 +, C. L. Martinez wrote: > On Tue 2.Aug'16 at 7:54:08 +, C. L. Martinez wrote: > > On Mon 1.Aug'16 at 7:54:57 +0000, C. L. Martinez wrote: > > > On Fri 29.Jul'16 at 10:55:01 +0300, Kapetanakis Giannis wrote: > > > > On 28/07/

Re: Encrypting carp traffic with ipsec

On Tue 2.Aug'16 at 7:54:08 +, C. L. Martinez wrote: > On Mon 1.Aug'16 at 7:54:57 +, C. L. Martinez wrote: > > On Fri 29.Jul'16 at 10:55:01 +0300, Kapetanakis Giannis wrote: > > > On 28/07/16 22:47, C. L. Martinez wrote: > > > > Hi all, > > > >

Re: Encrypting carp traffic with ipsec

On Mon 1.Aug'16 at 7:54:57 +, C. L. Martinez wrote: > On Fri 29.Jul'16 at 10:55:01 +0300, Kapetanakis Giannis wrote: > > On 28/07/16 22:47, C. L. Martinez wrote: > > > Hi all, > > > > > > I will try to encrypt all carp traffic between two OpenBSD 5.9

Re: Encrypting carp traffic with ipsec

On Fri 29.Jul'16 at 10:55:01 +0300, Kapetanakis Giannis wrote: > On 28/07/16 22:47, C. L. Martinez wrote: > > Hi all, > > > > I will try to encrypt all carp traffic between two OpenBSD 5.9 fws > > (fully patched). According to ifconfig(8) man page: > > &

Re: Encrypting carp traffic with ipsec

On Fri 29.Jul'16 at 10:55:01 +0300, Kapetanakis Giannis wrote: > On 28/07/16 22:47, C. L. Martinez wrote: > > Hi all, > > > > I will try to encrypt all carp traffic between two OpenBSD 5.9 fws > > (fully patched). According to ifconfig(8) man page: > > &

Encrypting carp traffic with ipsec

Hi all, I will try to encrypt all carp traffic between two OpenBSD 5.9 fws (fully patched). According to ifconfig(8) man page: carppeer peer_address Send the carp advertisements to a specified point-to-point peer or multicast group instead of sending the messages to the default carp multicast

Using "> /tmp/debug.log 2>&" in a startup script

/debug.log 2>&1" and using the following rc_start options: ${rcexec} "${daemon} ${daemon_flags} ${more_flags} ${_bg}" (rc_bg=YES in the startup script). c/ And tha last try is to use rc_start options: ${rcexec} "${daemon} ${daemon_flags}" > /tmp/debug.log 2

Re: Core dumps with sphinx package

On Fri 8.Jul'16 at 12:40:57 +0200, Adam Wolk wrote: > On Fri, Jul 08, 2016 at 09:16:15AM +, C. L. Martinez wrote: > > Hi all, > > > > Once a day, searchd daemon (installed from OpenBSD's packages repository) > > generate a core dump. How can I report thi

Core dumps with sphinx package

Hi all, Once a day, searchd daemon (installed from OpenBSD's packages repository) generate a core dump. How can I report this problem? To openbsd-ports mailing list?? Thanks. -- Greetings, C. L. Martinez

Strange behavior with php config

s were fed into the above file inside of /var/www chroot, and it does. But it does also under system's /tmp directory. In resume, I have two php_errors.log file where I can see all ducplicated errors ... Why?? How can I fix it? Thanks. -- Greetings, C. L. Martinez

Re: Installing NextCloud under OpenBSD 5.9

On Sat 2.Jul'16 at 22:37:49 +0200, Adam Wolk wrote: > On Sat, 2 Jul 2016 19:26:57 + > "C. L. Martinez" <carlopm...@gmail.com> wrote: > > > Hi all, > > > > I am trying to install NextCloud under an OpenBSD 5.9 host using > > OpenBSD's

Installing NextCloud under OpenBSD 5.9

}] RewriteRule ^\.well-known/host-meta /public.php?service=host-meta [QSA,L] RewriteRule ^\.well-known/host-meta\.json /public.php?service=host-meta-json [QSA,L] RewriteRule ^\.well-known/carddav /remote.php/dav/ [R=301,L] RewriteRule ^\.well-known/caldav /remote.php/dav/ [R=301,L] RewriteRule ^remote

Re: I am not sure if it is a problem with OpenBSD's httpd

On Fri 1.Jul'16 at 16:21:27 +, Stuart Henderson wrote: > On 2016-07-01, C. L. Martinez <carlopm...@gmail.com> wrote: > > Recently, I have installed an OpenBSD virtual machine in my laptop with > > TT-RSS, and all works perfectlly. Until I try to subscribe to a new feed

I am not sure if it is a problem with OpenBSD's httpd

tpd daemon that runs in chroot?? Thanks. -- Greetings, C. L. Martinez

Re: Clean OpenBSD's httpd logs

On Fri 1.Jul'16 at 7:39:13 +, Stuart Henderson wrote: > On 2016-06-30, C. L. Martinez <carlopm...@gmail.com> wrote: > > Hi all, > > > > Sorry if this question sounds stupid, but how can I avoid this type of > > entry in OpenBSD's httpd acce

Re: Clean OpenBSD's httpd logs

On Thu 30.Jun'16 at 15:21:05 +0200, Thuban wrote: > * C. L. Martinez <carlopm...@gmail.com> le [30-06-2016 12:50:36 +]: > > Hi all, > > > > Sorry if this question sounds stupid, but how can I avoid this type of > entry in OpenBSD's httpd access.log: > > &

Clean OpenBSD's httpd logs

Hi all, Sorry if this question sounds stupid, but how can I avoid this type of entry in OpenBSD's httpd access.log: 172.22.55.1:44710 -> 172.22.55.10, /favicon.ico (404 Not Found), [/] [/favicon.ico] ?? Thanks. -- Greetings, C. L. Martinez

Re: OT: Toosl to manage PKI under OpenBSD

On Fri 24.Jun'16 at 18:59:09 -0400, Predrag Punosevac wrote: > > On Fri 24.Jun'16 at 12:46:48 +, Dahlberg, David wrote: > > > Am Freitag, den 24.06.2016, 11:45 +0000 schrieb C. L. Martinez: > > > > > > > I would like to deploy/setup a PKI under OpenBSD for

Re: OT: Toosl to manage PKI under OpenBSD

On Sat 25.Jun'16 at 13:56:38 +, Stuart Henderson wrote: > On 2016-06-24, C. L. Martinez <carlopm...@gmail.com> wrote: > > On Fri 24.Jun'16 at 12:46:48 +, Dahlberg, David wrote: > >> Am Freitag, den 24.06.2016, 11:45 + schrieb C. L. Martinez: > >> &g

Re: where is the image of openbsd arm ?

Is it possible to add more wired NICs to the APU? Alternatively, is there a comparably robust and OpenBSD supported low-wattage platform with at least 4 (and preferrably 5-6) NICs? Thank you. On 24 Jun 2016 at 13:37, Chris Cappuccio wrote: > li...@wrant.com [li...@wrant.com] wrote: > > > >

Re: OT: Toosl to manage PKI under OpenBSD

On Fri 24.Jun'16 at 12:46:48 +, Dahlberg, David wrote: > Am Freitag, den 24.06.2016, 11:45 + schrieb C. L. Martinez: > > > I would like to deploy/setup a PKI under OpenBSD for my home lab. > > Searching about this topic, I think the best option is to use > > cus

OT: Toosl to manage PKI under OpenBSD

option? Thanks -- Greetings, C. L. Martinez

support new

0 C Philippines P National Capital Region T Makati City Z 1203 O OpenBSD Philippines I Onofre L. Alvarado, Jr. A 8400 Mayapis st., Bgy. San Antonio M i...@openbsd.org.ph U http://www.openbsd.org.ph/ B 63-2-7281903 X 63-2-7281903 N Over a decade and a half's experience in the use and deployment

Error loading pf rules: Device busy

Hi all, I have a strange problem. Every time that I try to reload my pf rules I see the following error message: pfctl: DIOCADDRULE: Device busy. I am using OpenBSD 5.8 amd64 fully patched. Any idea??

Clarification on vhid/carpnode settings for load-balanced fw configuration

Hi, all. I'm setting up a pair of load-balanced firewalls using carp. I've got nearly everything going, but encountered this in the man page: "If IP balancing is being used on a firewall, it is recommended to configure the carpnodes in a symmetrical manner. This is achieved by simply using the

Re: text-mode gui

On 20 Dec 2015 at 17:25, Luke Small wrote: 8<-- lots of drivel snipped --->8 >... but a >normal user shouldn't have to wade through man pages to discover how to fix >... This is the crux of the issue -- linux upbringing! If you bothered to read the FAQ or scan through some

Remove "flags S/SA keep state" for tcp packets

Hi all, I am trying to remove "flags S/SA keep state" for tcp packets inside pf.conf and use "keep state" only, as it can do with udp and icmp. According to pf.conf man page, this is possible inserting "no state" in tcp rule, but I can't use keep state. Is it possible to remove "flags S/SA

Re: Remove "flags S/SA keep state" for tcp packets

On Tue, Dec 15, 2015 at 9:49 AM, Peter N. M. Hansteen <pe...@bsdly.net> wrote: > On Tue, Dec 15, 2015 at 09:24:03AM +0000, C. L. Martinez wrote: >> >> I am trying to remove "flags S/SA keep state" for tcp packets inside >> pf.conf and use "keep state"

Re: Remove "flags S/SA keep state" for tcp packets

On Tue, Dec 15, 2015 at 9:56 AM, David Dahlberg <david.dahlb...@fkie.fraunhofer.de> wrote: > Am Dienstag, den 15.12.2015, 09:24 + schrieb C. L. Martinez: >> I am trying to remove "flags S/SA keep state" for tcp packets inside >> pf.conf and use "kee

Re: athn0: device timeout

I have the same problem with a new macbookpro12,1 my urtwn adapter work just fine in a regular ehci(4) machine, but on xhci(4)'s macbookpro I need to reconnect like 10 times, and even that way, doesn't work. :/ On 28/11, Stefan Sperling wrote: ; On Sat, Nov 28, 2015 at 07:35:00AM -0700,

Re: EFI: Booting from other (not the first) GPT partition possible? How? It's an Apple :-O

Oh yes, so then on 8,2 still you can boot legacy, on 12,1 you don't :( Enviado desde mi tostadora de mano > El 19 nov 2015, a las 15:53, Marc escribió: > > Thank you Gonzalo. > > Just to make sure we are talking about the same thing: > > I was already able to boot OpenBSD in

Re: EFI: Booting from other (not the first) GPT partition possible? How? It's an Apple :-O

Hello, I'm kinda at the same step, but in a macbookpro12,1 I resize my OSX partition, burn a install58.fs on a usb stick, boot holding ALT, install OpenBSD on the part of resize partition, and then follow jcs@ tutorial: https://gist.github.com/jcs/5573685 Now, "El Capitan" have like a

PF tables -- anchors and scope

Can anyone confirm whether it is possible to modify a global table within an anchor? If so, what is the proper syntax for referencing it? I have a dynamic table of addresses to block declared and updated in the main body of pf.conf. I would like to update the same table using 'overload'

Re: Captive portal with OpenBSD as a hostap

On Mon, Oct 5, 2015 at 1:26 PM, laudarch wrote: > I made a custom implementation and a diff to authpf, will share that > later just in case anyone wants it. > > I hope this helps you, it pretty simple > http://bastienceriani.fr/?p=70 > Thanks laudarch ... Very close to what I

5.7 & Nagios

What is the intended upgrade path for i386 versions of monitoring software? No Nagios in packages, .. icinga is reported amd only, .. Nagios in ports is amd only, .. and nagioscore will not build: # make all cd ./base && make make -C ../lib Using $< in a non-suffix rule context is a GNUmake idiom

nginx & Perl on 5.6

What is the prefered configuration for using Perl & Nginx? php is fairly straightforward, .. but can't find anything for perl except some Linux notes to recompile. Thanks! Lee

Slightly OT, .. 5.5 Nagios

Trying to upgrade our 5.4 Nagios system to 5.5, .. everything went fine with the system, but it appears that there are some new dependencies for the web UI: # pkg_add nagios-web-4.0.1-chroot Can't install php-gd-5.4.24 because of libraries |library X11.16.0 not found | not found anywhere |library

Re: Slightly OT, .. 5.5 Nagios

On Mon, 28 Sep 2015, Philip Guenther wrote: > On Mon, Sep 28, 2015 at 1:31 PM, L. V. Lammert <l...@omnitec.net> wrote: > > Trying to upgrade our 5.4 Nagios system to 5.5, .. everything went fine > > with the system, but it appears that there are some new dependenci

  1   2   3   4   5   6   7   8   9   >