Fastnetmon on openBSD Can't pass data to stdin of program /usr/local/bin/notify_about_attack.sh

2024-03-26 Thread Tom Smyth
. ? Im running OpenBSD 7.4 Stable on amd 64 I have upgraded to OpenBSD 7.5 snapshot and updated the Fastnetmon package Thanks Tom Smyth

Re: ssh IPV6 link local through jumphost

2024-02-23 Thread tom...@yandex.ru
On Fri, 23 Feb 2024 10:49:05 -0700 Ian Timothy wrote: > > On Feb 23, 2024, at 10:33, Tom wrote: > > > > command `ssh user@fe80::262:bff::@em0` works just fine. > > > > `ssh -J user9001@jumpserver user@fe80::262:bff::%em0` > > Don’t know

ssh IPV6 link local through jumphost

2024-02-23 Thread Tom
Hi list! Could you please guide me how to use link-local addresses with jumphost? I have a server 'X' with a link local IPv6 address of fe80::262:bff:: that IP is reachable from the server 'jumpserver' via interface em0, command `ssh user@fe80::262:bff::@em0` works just fine.

Re: coverity running on OpenBSD to scan a port

2023-04-13 Thread Tom Smyth
Thanks for that... Ill setup a test system so ... Thanks On Thu, 13 Apr 2023 at 07:33, Stuart Henderson wrote: > > On 2023-04-12, Tom Smyth wrote: > > does anyone have experience on running coverity on OpenBSD ... > > Im trying to scan a port im maintaining at the minute

coverity running on OpenBSD to scan a port

2023-04-12 Thread Tom Smyth
Folks, does anyone have experience on running coverity on OpenBSD ... Im trying to scan a port im maintaining at the minute... there does not seem to be binaries for coverity for OpenBSD Tjanks -- Kindest regards, Tom Smyth.

Re: How to announce over OSPF only one IP address

2023-03-17 Thread Tom Smyth
to your ospf area in your ospfd.conf file Note when you redistribute a static address it will appear as an external route in the The link state advertisements from the router ... (it wont be an intra area route) which can affect the route metric during the route selection process... Thanks Tom Smyth

Re: Folks are there any tips to improve page load times on smokeping running on OpenBSD

2023-03-10 Thread Tom Smyth
safer not to) - smokeping_fcgi > > > does not chroot. > > > > > > > > Hmm, I did this on the basis of a post by you (5/11/20) in response to Tom > > (5/10/20) which I interpreted as needing several files moved into www > > "jail." > > No th

Re: Folks are there any tips to improve page load times on smokeping running on OpenBSD

2023-03-08 Thread Tom Smyth
> > You shouldn't need that bit (and it is safer not to) - smokeping_fcgi > > does not chroot. > > > > > Hmm, I did this on the basis of a post by you (5/11/20) in response to Tom > (5/10/20) which I interpreted as needing several files moved into www "jail."

Re: Upgrading from 7.2 stable to 7.3 current dig crashes (core-dumped) breaking smokeping

2023-03-08 Thread Tom Smyth
Folks, just on this changing the binary /usr/sbin/dig... to /usr/bin/dig and going from 7.2 to 7.3 massive drop in latency of queries in a local dns server in the same datacentre ... just thought it would be useful ... before and after smoke graph below On Tue, 7 Mar 2023 at 14:30, Tom Smyth

Re: Folks are there any tips to improve page load times on smokeping running on OpenBSD

2023-03-08 Thread Tom Smyth
is way faster ... for the user interface... ... Ill let you know if there are any negative impact on the graphs ... Thanks Tom Smyth On Wed, 8 Mar 2023 at 15:21, Tom Smyth wrote: > > Hello > I found that RRDCached helps with the gaps in the graphs... (write > i/o burst sm

Re: Folks are there any tips to improve page load times on smokeping running on OpenBSD

2023-03-08 Thread Tom Smyth
4:16, Stuart Henderson wrote: > > On 2023/03/07 14:38, Tom Smyth wrote: > > the config below seems to get rrdcached working with httpd in OpenBSD. ... > > Thanks, I've added this to the pkg-readme. > > > the loading of the smokeping detailed graphs still takes a while ..

Re: Folks are there any tips to improve page load times on smokeping running on OpenBSD

2023-03-07 Thread Tom Smyth
ePing of Wireless Connect Ltd. \ This Tool Shows the latency of the \ Wireless Connectnetwork. alerts = Sustained_5%_loss,Sudden_10%_Loss,Sporadic_Loss,Latency_Over_50ms,Offline_at_startup #####config-sniped# smoke1# rcctl ls started cron dhcpleased ht

Re: Folks are there any tips to improve page load times on smokeping running on OpenBSD

2023-03-07 Thread Tom Smyth
0 1264K 1956K idle kqread0:00 0.00% ntpd 30532 root 20 1716K 2164K idle kqread0:00 0.00% smtpd On Tue, 7 Mar 2023 at 08:36, Stuart Henderson wrote: > On 2023/03/07 07:10, Tom Smyth wrote: > > I m running smokeping fcgi and rrdcached ontop of OpenbSD, to smok

Re: Upgrading from 7.2 stable to 7.3 current dig crashes (core-dumped) breaking smokeping

2023-03-07 Thread Tom Smyth
Hi Peter, Thanks for that ... you are 100% correct... I was caught off guard with that thanks ... I Think I need to go through my upgrades ... for more RmFiles... :/ Thanks it worked just fine... Much Obliged, Tom Smyth On Tue, 7 Mar 2023 at 12:48, Peter Hessler wrote: > On 2023

Upgrading from 7.2 stable to 7.3 current dig crashes (core-dumped) breaking smokeping

2023-03-07 Thread Tom Smyth
1.00/1.00 addr 1 isa0 at pcib0 isadma0 at isa0 pckbc0 at isa0 port 0x60/5 irq 1 irq 12 pckbd0 at pckbc0 (kbd slot) wskbd0 at pckbd0: console keyboard, using wsdisplay0 pms0 at pckbc0 (aux slot) wsmouse0 at pms0 mux 0 pcppi0 at isa0 port 0x61 spkr0 at pcppi0 vmm0 at mainbus0: VMX/EPT (using slow L1TF mitigation) vscsi0 at root scsibus3 at vscsi0: 256 targets softraid0 at root scsibus4 at softraid0: 256 targets root on sd0a (59cdf031e4c1fe67.a) swap on sd0b dump on sd0b smoke1# uname -va OpenBSD smoke1server.com 7.3 GENERIC.MP#1094 amd64 -- Kindest regards, Tom Smyth.

Folks are there any tips to improve page load times on smokeping running on OpenBSD

2023-03-06 Thread Tom Smyth
ol Shows the latency of the \ Wireless Connectnetwork. alerts = Sustained_5%_loss,Sudden_10%_Loss,Sporadic_Loss,Latency_Over_50ms,Offline_at_startup #config-sniped######### smoke1# rcctl ls started cron dhcpleased httpd ntpd pflogd resolvd rrdcached smokeping smokeping_fcgi smtpd sshd syslogd -- Kindest regards, Tom Smyth.

Re: fragmented ipv4[udp] ignored by server.

2023-03-05 Thread Tom Smyth
; id=5 > 12 0.26551410.10.2.1 ? 10.10.2.10 RADIUS 161 > Access-Challenge id=5 > 13 0.266328 10.10.2.10 ? 10.10.2.1RADIUS 191 Access-Request > id=6 > 14 0.28460710.10.2.1 ? 10.10.2.10 RADIUS 226 Access-Accept id=6 > > Question: How to avoid altering fragment_size to get this working ? > > Some clients could not be set so easily like phones. > > Thank you. > > Mikhael. > > -- Kindest regards, Tom Smyth.

Re: Lightweight Web browser

2023-02-06 Thread Tom Smyth
this issue (of network timeouts for certain applications I hope this helps, Tom Smyths On Mon, 6 Feb 2023 at 15:41, Riccardo Mottola wrote: > Hi, > > Rodrigo Readi wrote: > > Can someone recommend a lightweight Browser that support javascript? > > "Lightw

Re: How to announce over OSPF only one IP address

2023-02-04 Thread Tom Smyth
t; > $ cat /etc/hostname.vr3 > inet 10.1.111.1 255.255.255.0 > > $ cat /etc/ospfd.conf > router-id 10.109.3.15 > redistribute connected > > area 0.0.0.0 { > interface vr0 > interface vr3 > } > > Thanks, > Radek > > -- Kindest regards, Tom Smyth.

Re: OpenBSD as a transparent switch filter

2023-01-25 Thread Tom Smyth
(ususally ) moan about it watch your mac address table size and your hardware capacity on your switch...with this stuff... (know your switch hardware capacity and specs) i hope ths helps... On Wed, 25 Jan 2023 at 15:14, Cristian Danila wrote: > Thank you so much Tom and David for giving me id

Re: OpenBSD as a transparent switch filter

2023-01-25 Thread Tom Smyth
minimising broadcast waste of bandwidth (on large wireless access networks) On Tue, 24 Jan 2023 at 23:53, David Gwynne wrote: > > > > On 25 Jan 2023, at 09:47, Tom Smyth > wrote: > > > > Hi David is that like a local proxy arp type setup (on typical > > netwo

Re: OpenBSD as a transparent switch filter

2023-01-24 Thread Tom Smyth
ARP for. eg: > > $ cat /etc/commarp.conf > interface em0 { > allow 192.168.1.16 - 192.168.1.254 > } > > There’s no point rewriting ARP requests for the IP your router is using on > that subnet, or carp addresses on that subnet, etc. > > > > On 24 Jan 2023,

Re: Software RAID5 write performance

2023-01-24 Thread Tom Smyth
nyone using RAID5 with SSD drives? How is the write speed there? > > Best wishes, > Atanas > -- Kindest regards, Tom Smyth.

Re: OpenBSD as a transparent switch filter

2023-01-24 Thread Tom Smyth
this helps... On Tue, 24 Jan 2023 at 12:24, Claudio Jeker wrote: > > On Tue, Jan 24, 2023 at 11:43:08AM +0000, Tom Smyth wrote: > > Hello Cristian, > > if you want to filter on layer 2 ... you would need to use Bridge > > have a look at man ifconfig(8) > > bridge filt

Re: OpenBSD as a transparent switch filter

2023-01-24 Thread Tom Smyth
t I miss a > starting point and I would > really appreciate any hint. > > Kind regards, > Claudiu > -- Kindest regards, Tom Smyth.

Re: Max number of NICs

2023-01-24 Thread Tom Smyth
> expecting some kind of issue, but when I told him they were dc(4)s, > he was disappointed and said, "Well, of course those will work". > > I had a machine for a while with something like ten or > eleven em(4)s in it, I had fired it up, don't recall seeing any > problems with it identifying all the ports (in fact, iirc, it found > a port on the MoBo that was not extended to the outside). Again, > no issue, but after staring at the power hungry box for many years > and never doing anything with it, it finally got recycled. Again, > that was many releases ago...so not sure how it applies today. > > Current FW box is a old citrix appliance with a six port NIC and two > onboard ports, for eight em(4)s. > > Nick. > -- Kindest regards, Tom Smyth.

Re: Max number of NICs

2023-01-23 Thread Tom Smyth
D host (vmx) > > I am asking because I am running an OpenBSD on a VMware host but apparently > OpenBSD can only see 8 of them. > > Can I raise the limit somehow? > > Regards, Lars. -- Kindest regards, Tom Smyth.

Re: BiDi sfp in ix

2023-01-02 Thread Tom Smyth
on mikrotik > RB5009UG+S+IN and cisco 2960 switch. On aruba 2540 (allow unsupported > transceiver), ibm switch and openbsd ix(4) it won't work. > > I've ordered few BiDi sfp from fs.com and maybe my ISP will lend me > MaxLink sfp so I could test them in lab. > > Thank you Stuart for information ... > -- Kindest regards, Tom Smyth.

Re: bgpd.conf rules changed?

2022-12-19 Thread Tom Smyth
prefixes to your upstream peers... man bgpd.conf will show any other syntax that may be depreciated... ( I have nevever set the softreconfig I *think* it is now a default ... I hope this helps, Tom Smyth On Mon, 19 Dec 2022 at 11:59, Toni Mueller wrote: > > > Hi, > > I am tr

Re: VMM FAQ - 802.11 Prevents Bridging?

2022-12-12 Thread Tom Smyth
want to decend into plugging a propietary solution ... I hope this helps Tom Smyth On Mon, 12 Dec 2022 at 22:35, Stuart Henderson wrote: > > On 2022-12-12, c0ry wrote: > > Hey folks, > > > > I noticed this line in the VMM FAQ ( > > https://www.ope

Re: OpenBSD File systems , on Flash / SSD CPE (in sites with uncontrolled power (CPE customer sites)

2022-11-28 Thread Tom Smyth
## On Mon, 28 Nov 2022 at 21:46, Tom Smyth wrote: > Hello, Folks, > > Im reviewing our filesystem setup for OpenBSD CPEs that we deploy in the > field > > in order to minimise the impact of Power Outages / Customer interference > on the boxes, > we install a 4G root partition

OpenBSD File systems , on Flash / SSD CPE (in sites with uncontrolled power (CPE customer sites)

2022-11-28 Thread Tom Smyth
/dev/MAKEDEV /persist-fs/dev/ cd /persist-fs/dev/ /persist-fs/dev/MAKEDEV all any feedback welcome, are there other folders that could be heavily written to ? is there shortcommings I have ommited swap (because of flash and ssd wear concerns) I hope this helps... Tom Smyth -- Kindest regards

Re: Suggestions for miniPCI wireless card for an accesspoint on OpenBSD - 2022q4

2022-11-24 Thread Tom Smyth
/www.pcengines.ch/wle200nx.htm > > If you would build today an accesspoint, on hardware with miniPCI, what > would you choose, for OpenBSD? > > -- > Regards, > Mikolaj > > -- Kindest regards, Tom Smyth.

Re: 0.0.0.0/32 in pf's tables

2022-11-11 Thread Tom Smyth
yeah 0.0.0.0/32 ,( legacy broadcast address is a valid address and would be included in very verbose explicit rules blocking traffic from invalid src addresses ( for example) hope this helps On Fri 11 Nov 2022, 20:23 3, wrote: > a very clever man once said that God does not play dice.. and he

Re: 2FA VPNs

2022-11-01 Thread Tom Smyth
passowrds listed on a card , and ask the user to enter password X ? Thanks, Tom Smyth On Wed, 2 Nov 2022 at 02:14, Stuart Henderson wrote: > If anyone's got any good suggestions on how to do VPNs with 2FA > on an OpenBSD gateway for non-technical users to access (iOS, Android, >

Re: HP PA-RISC / IA64 hardware platform for Linux Debian, Gentoo, NetBSD, OpenBSD and HP-UX Unix

2022-10-07 Thread Tom Smyth
Hi Jesse, you can check out https://www.openbsd.org/want.html perhaps there is an overlap between developers requirements and what you have surplus, it is a voluntary project so consider donating some hardware to the developers according to that list, Hope this helps, Tom Smyth On Fri, 7

Re: embarrassing mail problem

2022-10-05 Thread Tom Smyth
howdy Steve... on newer versions of openBSD open SMTPD legacy tls versions / ciphers are disabled by default... there is an option to allow legact tls versions ( i cant remember the option off hand but man smtpd.conf and search for tls you should find it handy enough...( this caught me out on an

Re: Is OpenBSD suited for old Dell Precision T5500 (Dual Xeon X5675, 72GB RAM)

2022-09-07 Thread Tom Smyth
os over > > > the entire USB stick before expecting it to actually work. Nothing to > > > do with the T5500. > > I am puzzled: how exactly is a zero filled USB stick > less panicky than another USB stick? > > -- Kindest regards, Tom Smyth.

Re: Is OpenBSD suited for old Dell Precision T5500 (Dual Xeon X5675, 72GB RAM)

2022-09-07 Thread Tom Smyth
be a separate card or i/o module to the onboard sata ... Hope this helps On Wed, 7 Sept 2022 at 12:19, Erling Westenvik wrote: > On Wed, Sep 07, 2022 at 11:41:49AM +0100, Tom Smyth wrote: > > hi > > > > i would check bios / firmware settings > > > > try disabling memory

Re: Is OpenBSD suited for old Dell Precision T5500 (Dual Xeon X5675, 72GB RAM)

2022-09-07 Thread Tom Smyth
hi i would check bios / firmware settings try disabling memory mapped i/o in bios check processor settings enable vt-d disable hyper threading ensure execute disable is enabled update the bios as it will update cpu microcode ... dell alow you to select the emulation of sata ahci vs raid

Re: vxlan operational question

2022-07-16 Thread Tom Smyth
has an idea, please let me know. > > Best regards > Florian > > -- Kindest regards, Tom Smyth.

Re: OpenBGPD via (WG?) Tunnel Not Learning Routes

2022-07-12 Thread Tom Smyth
valid.. I hope this helps, Tom Smyth On Wed, 13 Jul 2022 at 02:38, Tobias Fiebig < tob...@reads-this-mailinglist.com> wrote: > Heho, > I am running OpenBGPd (on 7.1+binpatches), and have some tunnel links > between hosts and up/downstreams over wg tunnels. > > I am basica

Re: httpd not reachable from outside

2022-06-22 Thread Tom Smyth
hi Adriano can you just restart httpd with rcctl restart httpd did your ip addresses on external interface change ? what are the loadef firewall rules Thanks Tom Smyth On Thu 23 Jun 2022, 00:05 Adriano Barbosa, wrote: > Hi. > > My httpd was working perfectly for the las

Hello Folks Im in Brussles for the evening if anyone wants to meet up

2022-06-17 Thread Tom Smyth
Hello Folks Im in Brussles for the evening if anyone wants to meet up -- Kindest regards, Tom Smyth.

Re: documentation

2022-05-24 Thread Tom Smyth
es do not perform > in the circus > -- Kindest regards, Tom Smyth.

Re: Wireguard IP packets fragmentation issue

2022-05-17 Thread Tom Smyth
in tunnels (layer3) ) the benefit of being able to send the full packet over the fragmented tunnel does not in any way increase perf... and the TCP MSS clamping gives the best throughput (in my experience) ... Thanks again, Tom Smyth On Sun 15 May 2022, 21:02 Stuart Henderson, wrote: > On 2022-05

Re: Wireguard IP packets fragmentation issue

2022-05-15 Thread Tom Smyth
ace) the Router on the VPN wont sent a Fragment needed IP message to the client because the MTU of the Tunnel was not exceeded (but the MTU on the underlay was exceeded) I hope the clarifications helps and that im right or at least that I learn something new :) Thanks Tom Smyth On Sun,

Re: Wireguard IP packets fragmentation issue

2022-05-15 Thread Tom Smyth
i have knowledge of > > - "more information in pf.conf": yes there is information in pf.conf on > mtu, mss, and nat, including the syntax for using them. again, why > wouldn;t we point people there? > > i'm happy to try and rework the text if you think it can be improved. > > jmc > -- Kindest regards, Tom Smyth.

Re: calling all PFsync users for experience, gotchas, feedback, tips and tricks

2022-05-14 Thread Tom Smyth
Hello all, Thanks for the feedback it is really helpful to have peoples experiences in the wild to help feed into the training course content. and certainly better than just my humble experience I really appreciate all of your feedback. Thanks again folks, Tom Smyth Tom Smyth On Fri, 13 May

calling all PFsync users for experience, gotchas, feedback, tips and tricks

2022-05-11 Thread Tom Smyth
regards, Tom Smyth.

Re: time drift in OpenBSD in proxmox (qemu-kvm) guest

2022-04-15 Thread Tom Smyth
or balanced I hope this helps, ( and thanks for your patience with my previous impulsive (albeit trying to help) replies earlier Tom Smyth On Fri, 15 Apr 2022 at 11:12, Stuart Henderson wrote: > > On 2022-04-14, Stefan Sperling wrote: > > On Thu, Apr 14, 2022 at 09:26:41PM -, Stuart Hen

Re: time drift in OpenBSD in proxmox (qemu-kvm) guest

2022-04-14 Thread Tom Smyth
to the preemption timer on the Proxmox Host Sorry for bombing the list on this one ... On Thu, 14 Apr 2022 at 22:54, Tom Smyth wrote: > > Stuart, > sorry I wasnt entirely clear in my last email > > 1) you can try the /sys/module/kvm_intel/parameters/preemption_timer > > if the s

Re: time drift in OpenBSD in proxmox (qemu-kvm) guest

2022-04-14 Thread Tom Smyth
I have an Intel based Proxmox 7.1 being built pre-Production Ill have a go with it... Tomorrow and let you know On Thu, 14 Apr 2022 at 22:54, Tom Smyth wrote: > > Stuart, > sorry I wasnt entirely clear in my last email > > 1) you can try the /sys/module/kvm_intel/parameters/p

Re: time drift in OpenBSD in proxmox (qemu-kvm) guest

2022-04-14 Thread Tom Smyth
Kernel sorted it On Thu, 14 Apr 2022 at 22:45, Tom Smyth wrote: > > Stuart > > is your host on an Intel System ? > > I had an awful time with Proxmox 5.0 and 5.1 > > with clock drift and console freezes > > can you try to disable the following feature in the Proxm

Re: time drift in OpenBSD in proxmox (qemu-kvm) guest

2022-04-14 Thread Tom Smyth
irq 6 drq 2 > pckbc0 at isa0 port 0x60/5 irq 1 irq 12 > pckbd0 at pckbc0 (kbd slot) > wskbd0 at pckbd0: console keyboard, using wsdisplay0 > pms0 at pckbc0 (aux slot) > wsmouse0 at pms0 mux 0 > pcppi0 at isa0 port 0x61 > spkr0 at pcppi0 > usb0 at uhci0: USB revision 1.0 > uhub0 at usb0 configuration 1 interface 0 "Intel UHCI root hub" rev 1.00/1.00 > addr 1 > uhidev0 at uhub0 port 1 configuration 1 interface 0 "QEMU QEMU USB Tablet" > rev 2.00/0.00 addr 2 > uhidev0: iclass 3/0 > ums0 at uhidev0: 3 buttons, Z dir > wsmouse1 at ums0 mux 0 > vscsi0 at root > scsibus3 at vscsi0: 256 targets > softraid0 at root > scsibus4 at softraid0: 256 targets > root on sd0a (cf14a346fbf0559d.a) swap on sd0b dump on sd0b > fd0 at fdc0 drive 1: density unknown > > > -- Kindest regards, Tom Smyth.

Re: pf documentation

2022-04-07 Thread Tom Smyth
Steve, if you like books ... Peter Hansteen has written a book the book of pf which I have read and would recommend https://nostarch.com/pf3 and if you are interested in firewalls ingeneral and comparing features On Thu, 7 Apr 2022 at 10:40, Tom Smyth wrote: > > Hi Steve, > Im goin

Re: pf documentation

2022-04-07 Thread Tom Smyth
of Openbsd you are running ... man pfctl or man pf.conf will help you ... if you need a intro to the intro ... https://openbsdjumpstart.org by Wesley is pretty cool and gets you started on OpenBSD and PF Hope this helps, Tom Smyth On Thu, 7 Apr 2022 at 10:28, Brodey Dover wrote: > > To be

Re: TLS library problme: tlsv1 alert protocol

2022-04-06 Thread Tom Smyth
:/usr/src/lib/libssl/tls13_lib.c:150: > lost connection after STARTTLS from mout.web.de > > Can anybody with more knowledge of libressl and it's error messages tell by > this error what is wrong? > > Best regards, > Stephan > -- Kindest regards, Tom Smyth.

Re: Changing rdomain on an interface after the rdomain has already been set openbsd7.0 / 7.1snapshots

2022-04-02 Thread Tom Smyth
Hey David thanks for reply makes more sens to me now ... Thanks again... Tom Smyth On Sat, 2 Apr 2022 at 04:11, David Gwynne wrote: > > loopback interfaces are special and kind of end up representing an rdomain > inside the kernel, which is where this restriction comes from

Changing rdomain on an interface after the rdomain has already been set openbsd7.0 / 7.1snapshots

2022-04-01 Thread Tom Smyth
: Operation not permitted tobsd# ifconfig -- Kindest regards, Tom Smyth.

Re: issue with move to php8 as default

2022-03-28 Thread Tom Smyth
ng something, or is this a bug? If the latter, is this email > sufficient to get it looked at, or i would need to report it more > formally? > > Thanks, > ITwrx > > -- Kindest regards, Tom Smyth.

Re: Advice for hardening a PHP webserver on OpenBSD

2022-03-09 Thread Tom Smyth
e all the > dangerous functions, you can hardly use PHP. And then.. its on the PHP > level, sooo. But maybe every little bit counts? > > Anyway, what are you guys doing if you're running PHP in production on > OpenBSD? Besides from NOT running PHP in production at all. > > Kindest regards. > > -- > Sent with Tutanota, the secure & ad-free mailbox. > -- Kindest regards, Tom Smyth.

Re: shells/nsh network shells, feedback and comments requested,

2022-02-20 Thread Tom Smyth
Hello all, just following up on this as a call out to anyone who use nsh or have used it in the past, if you have any feedback / suggestions I would really appreciate that, Thanks Tom Smyth On Sun, 18 Apr 2021 at 13:31, Tom Smyth wrote: > Hello, > > If anyone has used shells/

Re: smtpd bounce messages and non-existent users

2022-02-16 Thread Tom Szilagyi
recipients up front with a message of your choosing: filter validuser phase rcpt-to match !rcpt-to \ reject "550 5.1.1 Mailbox does not exist" and then include that filter in the chain for the exchanger listener. HTH, Tom > > > Configurations are below; thank you very much

Re: NSD: Could not tcp connect to X Operation timed out

2022-01-19 Thread Tom Smyth
is pf allowing tcp port53 as well as udp port53 ? On Wed 19 Jan 2022, 11:46 Laura Smith, wrote: > Hi > > OpenBSD NSD slave is driving me nuts with the following message in the > logs "Could not tcp connect to X Operation timed out". > > The answer sounds obvious, but I can: > > - Ping the IP >

Re: Error on xenocara.tar.gz extraction

2022-01-13 Thread Tom Smyth
i think u need to do as root or configure doas to perform privleged operation... On Thu 13 Jan 2022, 17:26 Rob Whitlock, wrote: > Attempting to extract xenocara.tar.gz while avoiding root proviliges as > described here https://www.openbsd.org/faq/faq5.html#wsrc, I ran into an > error, shown

Re: Help with basic pf rule to open port 25

2022-01-05 Thread Tom Smyth
... It is awesome ... Tom Smyth On Wed, 5 Jan 2022 at 16:09, Sean McBride wrote: > Hi all, > > (Newbie and first time poster, please be gentle :)) > > I'm trying to set up spamd, and I think I'm having trouble with pf. So > I tried to add a very basic test rule. I added to the b

Re: Recommendations on Buffer Space for Busy Unbound Resolver Service for a network

2021-12-22 Thread Tom Smyth
again, Really appreciate your Tom Smyth On Wed, 22 Dec 2021 at 11:26, Stuart Henderson wrote: > On 2021-12-22, Dirk Coetzee wrote: > > Hi Tom, > > > > I would recommend debugging using "unbound-control stats_noreset" and > referencing the unbound conf

Re: Recommendations on Buffer Space for Busy Unbound Resolver Service for a network

2021-12-21 Thread Tom Smyth
THanks Dirk Ill give that a go Cheers, Tom Smyth On Wed, 22 Dec 2021 at 00:30, Dirk Coetzee wrote: > Hi Tom, > > I would recommend debugging using "unbound-control stats_noreset" and > referencing the unbound configuration documentation at > https://www.nlnetlabs

Re: Recommendations on Buffer Space for Busy Unbound Resolver Service for a network

2021-12-21 Thread Tom Smyth
Sorry forgot to say running OpenBSD on an amd64, and hosted in a KVM environment, Thanks Tom Smyth On Tue, 21 Dec 2021 at 21:15, Tom Smyth wrote: > Recommendations on Buffer Space for Busy Unbound Resolver Service for a > network serving a 3000, customers > > Thanks >

Recommendations on Buffer Space for Busy Unbound Resolver Service for a network

2021-12-21 Thread Tom Smyth
Recommendations on Buffer Space for Busy Unbound Resolver Service for a network serving a 3000, customers Thanks -- Kindest regards, Tom Smyth.

Radiusd anyone know of a Simple to use web front end for usermanagement ?

2021-09-22 Thread Tom Smyth
thanks -- Kindest regards, Tom Smyth.

Re: ipsec with default route and routing of internal networks

2021-09-13 Thread Tom Smyth
13.9.2021. 12:58, Tom Smyth wrote: > > Hi Hrvoje, > > > > is 10.90.0.0/24 <http://10.90.0.0/24> local to your firewall, and if I > > understand your rule, > > ike esp from 10.90.0.0/24 <http://10.90.0.0/24> to anyyou are > saying > > encryp

Re: ipsec with default route and routing of internal networks

2021-09-13 Thread Tom Smyth
se point me in the right direction on what to look and > configure? > > Thank you .. > > -- Kindest regards, Tom Smyth.

Re: DNS resolution after VPN?

2021-07-20 Thread Tom Smyth
you might be able to statically configure > > it, if not then you could modify vpnc-script to have it update the > > address in unwind.conf and reload it. > > Thanks, this works somewhat: > > forwarder { $ip1 $ip2 } > force accept bogus forwarder { $internal_domain1 } &g

Re: Why demotion counter for group carp is set to 33 on boot?

2021-07-15 Thread Tom K
Am 2021-07-14 13:01, schrieb Stefan Sperling: If the demote count never drops then perhaps pfsync traffic isn't passing properly? tcpdump on pfsync device shows me PFSYNCv6 traffic all the time as well comparing the results of "pfctl -s state" on both systems shows no differences. The same

Re: Why demotion counter for group carp is set to 33 on boot?

2021-07-14 Thread Tom K
but why? If I reboot the other node, the system become MASTER. That is because the other system stops sending carp announcements when you reboot it. This is unrelated to the demote counter. The demote counter only matters as long as another carp MASTER remains visible. A forced failover like

Re: Why demotion counter for group carp is set to 33 on boot?

2021-07-14 Thread Tom K
2021-07-13 18:12, schrieb Jorge Peixoto: Tom, Assuming the fw cluster is properly set up, I guess because PF rule states is unsync. As times goes by, states gets synchronized. JP

Why demotion counter for group carp is set to 33 on boot?

2021-07-13 Thread Tom K
system as expected. This ar physical machines. I try to simulate this on vmware, but there is everything fine. Both system starting with demote count 0. I would appreciate any hint to understand this. Tom

Re: fighting amplification attack --was: Re: pf: block drop not working

2021-05-07 Thread Tom Smyth
not possible with udp? > > Axel > --- > PGP-Key: CDE74120computing @ chaos claudius > -- Kindest regards, Tom Smyth.

Re: gnome, gdm problem on lenovo e14 gen2

2021-05-06 Thread SP2L Tom
regards. Tom

Re: gnome, gdm problem on lenovo e14 gen2

2021-05-05 Thread SP2L Tom
. Best regards. Tom On 2021-05-04 13:58, Nam Nguyen wrote: Hrvoje Popovski writes: Problem is that when i should get login screen, gdm to ask me for user and password, i'm getting blank grey screen .. after moving through terminals with ctrl-alt fX, from time to time i can get this (screenshot

Re: pf: block drop not working

2021-05-05 Thread Tom Smyth
68.163.94.443 > x.y.z.171.53: [no udp cksum] 1+ RRSIG? > pizzaseo.com.(30) (ttl 249, id 55913, len 58) > 0800 532: x.y.z.171.53 > 146.168.163.94.443: [udp sum ok] 1- 0/13/14(490) > (ttl 62, id 53578, len 518) > > > What is wrong in my setup? > > Thanks, Axel > --- > PGP-Key: CDE74120computing @ chaos claudius > -- Kindest regards, Tom Smyth.

Re: default Offset to 1MB boundaries for improved SSD (and Raid Virtual Disk) partition alignment

2021-04-21 Thread Tom Smyth
ant ,for now anyway, Ill do a little digging on FFS and FFS2 and see how the filesystem database (or table) is structured... Thanks for the feedback it is very helpful to me All the best, Tom Smyth On Wed, 21 Apr 2021 at 15:25, Christian Weisgerber wrote: > > Tom Smyth: > > > i

Re: default Offset to 1MB boundaries for improved SSD (and Raid Virtual Disk) partition alignment

2021-04-21 Thread Tom Smyth
to reduce wear on SSDs, and improve performance in Virtualized Environments with large allocation units on what ever storage subsystem they are running. Thanks for your time Tom Smyth On Wed, 21 Apr 2021 at 08:49, Otto Moerbeek wrote: > > On Wed, Apr 21, 2021 at 08:20:10AM +0100, Tom

Re: default Offset to 1MB boundaries for improved SSD (and Raid Virtual Disk) partition alignment

2021-04-21 Thread Tom Smyth
hardware) Thanks Tom Smyth On Tue, 20 Apr 2021 at 22:52, Christian Weisgerber wrote: > > Tom Smyth: > > > just installing todays snapshot and the default offset on amd64 is 64, > > (as it has been for as long as I can remember) > > It was changed from 63 in 20

default Offset to 1MB boundaries for improved SSD (and Raid Virtual Disk) partition alignment

2021-04-20 Thread Tom Smyth
but It might be worth re-visiting as it would make for more straightforward aligned partitions on OpenBSD installs.. my experience is more for x86 / amd64 rather than other platforms .. Kindest Regards, Tom Smyth -- Kindest regards, Tom Smyth.

shells/nsh network shells, feedback and comments requested,

2021-04-18 Thread Tom Smyth
in NSH that you can do in base. We will be working on it to track current, and hopefully 7.0 release. Thanks Tom Smyth

Re: Last shutdown date of old OpenBSD machine

2021-04-15 Thread Tom Smyth
I think i know what it is, but i'm not sure > since it was so long ago. > Therefore booting into single user mode is probably the only choice for > option 1. > > Thank you for your suggestions. > > Br, Ales > > -- Kindest regards, Tom Smyth.

Re: Technical Documentation - CARP

2021-04-13 Thread Tom Smyth
od context and insights... but refer to the manuals also to validate any improved syntax and or features Hope this helps Tom Smyth On Tue, 13 Apr 2021 at 09:34, jannick Weiss wrote: > > Hello,my name is Jannick Weiss and i am currently in the process of taking > my education as a datatechni

Re: 6.9 Current amd64 xfce seems to freeze and not respond to mouse clicks or keystrokes

2021-04-10 Thread Tom Smyth
: > > On Sat, Apr 10, 2021 at 10:22:17PM +0100, Tom Smyth wrote: > > Hello, > > > > 1) issue does not occur with fvwm or with chrome running in fvwm > > > > so the issue seems to be confined to xfce, and I was running just 1 > > xfce terminal session >

Re: 6.9 Current amd64 xfce seems to freeze and not respond to mouse clicks or keystrokes

2021-04-10 Thread Tom Smyth
Geoff, The force is strong with you :) Thanks that worked xfce-screensaver was active but I was not seeing the screen-saver Appreciate your help Tom Smyth On Sat, 10 Apr 2021 at 22:48, gwes wrote: > > > > On 4/10/21 5:22 PM, Tom Smyth wrote: > > Hello, > > >

Re: 6.9 Current amd64 xfce seems to freeze and not respond to mouse clicks or keystrokes

2021-04-10 Thread Tom Smyth
Hello, 1) issue does not occur with fvwm or with chrome running in fvwm so the issue seems to be confined to xfce, and I was running just 1 xfce terminal session 2) (so the issue is not related to chromium) Thanks On Fri, 9 Apr 2021 at 19:09, Tom Smyth wrote: > > just to update this

Re: OT: Dell EMC switches

2021-04-09 Thread Tom Smyth
he Mellanox 655902-001 QSA adapter. > > > > Which is pretty much what we have in production. :) > > Are you planning to buy new or eBay? There are some pretty good deals on > eBay. > > > > Mischa > > -- Kindest regards, Tom Smyth.

Re: 6.9 Current amd64 xfce seems to freeze and not respond to mouse clicks or keystrokes

2021-04-09 Thread Tom Smyth
Apr 2021 at 19:33, Tom Smyth wrote: > > Hello > > 6.9 Current amd64 xfce seems to freeze and not respond to mouse > clicks or keystrokes. I cant seem to change windows or enter text on > the X terminal > > > im running OpenBSD on an Oracle Virtualbox VM > > h

6.9 Current amd64 xfce seems to freeze and not respond to mouse clicks or keystrokes

2021-04-09 Thread Tom Smyth
Hello 6.9 Current amd64 xfce seems to freeze and not respond to mouse clicks or keystrokes. I cant seem to change windows or enter text on the X terminal im running OpenBSD on an Oracle Virtualbox VM however + does work and im able to restart the x session using the console rcctl

Re: Does intel(4) support Iris Xe Graphics?

2021-04-07 Thread Tom Smyth
... suggested current as the bug might already be fixed in current as opposed to release ... On Wed, 7 Apr 2021 at 11:56, Jonathan Gray wrote: > > On Wed, Apr 07, 2021 at 11:34:54AM +0100, Tom Smyth wrote: > > Try Current and 6.8 and see if you get a different result in each.. > &

Re: Does intel(4) support Iris Xe Graphics?

2021-04-07 Thread Tom Smyth
Try Current and 6.8 and see if you get a different result in each.. dmesgs are key for getting help on this type of query ... On Wed, 7 Apr 2021 at 11:33, Tom Smyth wrote: > > Hi Michel, > if you send the dmesg from OpenBSD when it is installed and Ubuntu > it would hel

Re: Does intel(4) support Iris Xe Graphics?

2021-04-07 Thread Tom Smyth
fferent here. > > > > > > > > Any pointing to the right direction would be appreciated. (If this > > problem > > > relates to Xorg specifically and not to OpenBSD please let me know). > > > > > > [1] https://marc.info/?l=openbsd-bugs=161754767328009=2 > > > > > > Regards, > > > > > > Michel > > > > > -- Kindest regards, Tom Smyth.

Re: sndiod on by default (does it need to be ? )

2021-02-21 Thread Tom Smyth
of other software that I use on top of OpenBSD I couldn't agree more with you Thanks again.. On Sun, 21 Feb 2021 at 18:42, Stuart Henderson wrote: > > On 2021-02-21, Tom Smyth wrote: > > my thinking is by having the service off by default would reduce the > > default attack

  1   2   3   4   5   6   7   8   >