Re: Strange PF behaviour after 6.0 -> 6.1 pgrade

2017-04-22 Thread Sjöholm Per-Olov
> On 21 Apr 2017, at 14:22, Sjöholm Per-Olov <p...@incedo.org> wrote: > > >> On 21 Apr 2017, at 10:34, Stuart Henderson <s...@spacehopper.org> wrote: >> >> On 2017-04-20, Sjöholm Per-Olov <p...@incedo.org> wrote: >>> Could it be

Re: Strange PF behaviour after 6.0 -> 6.1 pgrade

2017-04-21 Thread Sjöholm Per-Olov
> On 21 Apr 2017, at 10:34, Stuart Henderson <s...@spacehopper.org> wrote: > > On 2017-04-20, Sjöholm Per-Olov <p...@incedo.org> wrote: >> Could it be any buffers that is causing this in 6.1 but not in 6.0 ? > > There were changes that would allow larger

Re: Strange PF behaviour after 6.0 -> 6.1 pgrade

2017-04-21 Thread Sjöholm Per-Olov
> On 21 Apr 2017, at 10:34, Stuart Henderson <s...@spacehopper.org> wrote: > > On 2017-04-20, Sjöholm Per-Olov <p...@incedo.org> wrote: >> Could it be any buffers that is causing this in 6.1 but not in 6.0 ? > > There were changes that would allow larger

Re: Strange PF behaviour after 6.0 -> 6.1 upgrade

2017-04-20 Thread Sjöholm Per-Olov
> On 20 Apr 2017, at 13:00, Sjöholm Per-Olov <p...@incedo.org> wrote: > > >> On 20 Apr 2017, at 01:18, Sjöholm Per-Olov <p...@incedo.org> wrote: >> >> >>> On 20 Apr 2017, at 00:39, Fred <open...@crowsons.com> wrote: >>> >>

Re: Strange PF behaviour after 6.0 -> 6.1 pgrade

2017-04-20 Thread Sjöholm Per-Olov
> On 20 Apr 2017, at 01:18, Sjöholm Per-Olov <p...@incedo.org> wrote: > > >> On 20 Apr 2017, at 00:39, Fred <open...@crowsons.com> wrote: >> >> On 04/19/17 23:30, Sjöholm Per-Olov wrote: >>> Anyone with a clue would be _very_ much appreciat

Re: Strange PF behaviour after 6.0 -> 6.1 pgrade

2017-04-19 Thread Sjöholm Per-Olov
> On 20 Apr 2017, at 00:39, Fred <open...@crowsons.com> wrote: > > On 04/19/17 23:30, Sjöholm Per-Olov wrote: >> Anyone with a clue would be _very_ much appreciated…. >> I upgraded from 6.0 to 6.1 two days ago and **did not change anything to the >> network**

Strange PF behaviour after 6.0 -> 6.1 pgrade

2017-04-19 Thread Sjöholm Per-Olov
Anyone with a clue would be _very_ much appreciated…. I upgraded from 6.0 to 6.1 two days ago and **did not change anything to the network** stuff at all. After that clients have random problems reaching my dmz web server (centos + nginx). I have checked the release notes, but could not see

Modulate state now fails with OpenBSD 6.1

2017-04-18 Thread Sjöholm Per-Olov
Hi I have had this rule for some time without issues. But since the upgrade from OpenBSD 6.0 to 6.1 yesterday I have had issues. Today when I sniffed incoming traffic on port 80 on my FW internet interface, the firewall did no longer send it out on my dmz1 to the web server. After removing

Get active IP from an dhcp enabled interface

2016-10-27 Thread Sjöholm Per-Olov
Hi If you use a dhclient on the Internet interface, what is the best method to get the currently used IP address? A regexp to get the IP from "ifconfig inet” output or check the dhclient lease file? Or maybe use python with of http://pypi.python.org/pypi/netifaces/ or perl with

Long life on SSD in a firewall environment

2016-06-19 Thread Sjöholm Per-Olov
Hi Does anyone know if there exist any list of recommendations about how to make an SSD disk to live as long as possible when using it for firewall purpose on OpenBSD? It seems that OpenBSD lack some features related to SSDs like TRIM. SSDs are getting more popular, but I cannot find much info

Re: watchdog issues ?

2016-05-08 Thread Sjöholm Per-Olov
> On 08 May 2016, at 00:39, Sjöholm Per-Olov <p...@incedo.org> wrote: > > Hi > > I have skipped all major releases of OpenBSD after 5.4 for one firewall due to > watchdog timeout resets on the em driver. Earlier today I fired up a 5.9 > release and patched it up to 5.9

watchdog issues ?

2016-05-07 Thread Sjöholm Per-Olov
Hi I have skipped all major releases of OpenBSD after 5.4 for one firewall due to watchdog timeout resets on the em driver. Earlier today I fired up a 5.9 release and patched it up to 5.9 stable and let it take over from the old one. It seems to go very well. But I do have one question. The

Watchdog issue

2016-03-11 Thread Sjöholm Per-Olov
Hi Yes I after upgrade had a watchdog issue on the em driver and created a lot of patch diffs of this from cvs without getting rid of the issue. I also tried 5.8 and a lot of em diffs after 5.8. But this problem lead to the fact I reverted two firewalls to 5.4. Now… I could see at