Fastnetmon on openBSD Can't pass data to stdin of program /usr/local/bin/notify_about_attack.sh

2024-03-26 Thread Tom Smyth
. ? Im running OpenBSD 7.4 Stable on amd 64 I have upgraded to OpenBSD 7.5 snapshot and updated the Fastnetmon package Thanks Tom Smyth

Re: coverity running on OpenBSD to scan a port

2023-04-13 Thread Tom Smyth
Thanks for that... Ill setup a test system so ... Thanks On Thu, 13 Apr 2023 at 07:33, Stuart Henderson wrote: > > On 2023-04-12, Tom Smyth wrote: > > does anyone have experience on running coverity on OpenBSD ... > > Im trying to scan a port im maintaining at the minute

coverity running on OpenBSD to scan a port

2023-04-12 Thread Tom Smyth
Folks, does anyone have experience on running coverity on OpenBSD ... Im trying to scan a port im maintaining at the minute... there does not seem to be binaries for coverity for OpenBSD Tjanks -- Kindest regards, Tom Smyth.

Re: How to announce over OSPF only one IP address

2023-03-17 Thread Tom Smyth
to your ospf area in your ospfd.conf file Note when you redistribute a static address it will appear as an external route in the The link state advertisements from the router ... (it wont be an intra area route) which can affect the route metric during the route selection process... Thanks Tom Smyth

Re: Folks are there any tips to improve page load times on smokeping running on OpenBSD

2023-03-10 Thread Tom Smyth
d down the httpd path. I have been > > running with httpd since that time. > > I can't remember the details, but think I initially tried w/o the cp'd > > files, but was not successful so began incrementally moving goodies into > > /var/www until it worked. > > I will try rm'ing or mv'ing those in /var/www and see how it goes. > > > > Thanks for your help. > > > > Regards, Glen > -- Kindest regards, Tom Smyth.

Re: Folks are there any tips to improve page load times on smokeping running on OpenBSD

2023-03-08 Thread Tom Smyth
that time. > I can't remember the details, but think I initially tried w/o the cp'd files, > but was not successful so began incrementally moving goodies into /var/www > until it worked. > I will try rm'ing or mv'ing those in /var/www and see how it goes. > > Thanks for your help. > > Regards, Glen > -- Kindest regards, Tom Smyth.

Re: Upgrading from 7.2 stable to 7.3 current dig crashes (core-dumped) breaking smokeping

2023-03-08 Thread Tom Smyth
Folks, just on this changing the binary /usr/sbin/dig... to /usr/bin/dig and going from 7.2 to 7.3 massive drop in latency of queries in a local dns server in the same datacentre ... just thought it would be useful ... before and after smoke graph below On Tue, 7 Mar 2023 at 14:30, Tom Smyth

Re: Folks are there any tips to improve page load times on smokeping running on OpenBSD

2023-03-08 Thread Tom Smyth
is way faster ... for the user interface... ... Ill let you know if there are any negative impact on the graphs ... Thanks Tom Smyth On Wed, 8 Mar 2023 at 15:21, Tom Smyth wrote: > > Hello > I found that RRDCached helps with the gaps in the graphs... (write > i/o burst sm

Re: Folks are there any tips to improve page load times on smokeping running on OpenBSD

2023-03-08 Thread Tom Smyth
4:16, Stuart Henderson wrote: > > On 2023/03/07 14:38, Tom Smyth wrote: > > the config below seems to get rrdcached working with httpd in OpenBSD. ... > > Thanks, I've added this to the pkg-readme. > > > the loading of the smokeping detailed graphs still takes a while ..

Re: Folks are there any tips to improve page load times on smokeping running on OpenBSD

2023-03-07 Thread Tom Smyth
ePing of Wireless Connect Ltd. \ This Tool Shows the latency of the \ Wireless Connectnetwork. alerts = Sustained_5%_loss,Sudden_10%_Loss,Sporadic_Loss,Latency_Over_50ms,Offline_at_startup #########config-sniped# smoke1# rcctl ls started cron dhcpleased ht

Re: Folks are there any tips to improve page load times on smokeping running on OpenBSD

2023-03-07 Thread Tom Smyth
0 1264K 1956K idle kqread0:00 0.00% ntpd 30532 root 20 1716K 2164K idle kqread0:00 0.00% smtpd On Tue, 7 Mar 2023 at 08:36, Stuart Henderson wrote: > On 2023/03/07 07:10, Tom Smyth wrote: > > I m running smokeping fcgi and rrdcached ontop of OpenbSD, to smok

Re: Upgrading from 7.2 stable to 7.3 current dig crashes (core-dumped) breaking smokeping

2023-03-07 Thread Tom Smyth
Hi Peter, Thanks for that ... you are 100% correct... I was caught off guard with that thanks ... I Think I need to go through my upgrades ... for more RmFiles... :/ Thanks it worked just fine... Much Obliged, Tom Smyth On Tue, 7 Mar 2023 at 12:48, Peter Hessler wrote: > On 2023

Upgrading from 7.2 stable to 7.3 current dig crashes (core-dumped) breaking smokeping

2023-03-07 Thread Tom Smyth
1.00/1.00 addr 1 isa0 at pcib0 isadma0 at isa0 pckbc0 at isa0 port 0x60/5 irq 1 irq 12 pckbd0 at pckbc0 (kbd slot) wskbd0 at pckbd0: console keyboard, using wsdisplay0 pms0 at pckbc0 (aux slot) wsmouse0 at pms0 mux 0 pcppi0 at isa0 port 0x61 spkr0 at pcppi0 vmm0 at mainbus0: VMX/EPT (using slow L1TF mitigation) vscsi0 at root scsibus3 at vscsi0: 256 targets softraid0 at root scsibus4 at softraid0: 256 targets root on sd0a (59cdf031e4c1fe67.a) swap on sd0b dump on sd0b smoke1# uname -va OpenBSD smoke1server.com 7.3 GENERIC.MP#1094 amd64 -- Kindest regards, Tom Smyth.

Folks are there any tips to improve page load times on smokeping running on OpenBSD

2023-03-06 Thread Tom Smyth
ol Shows the latency of the \ Wireless Connectnetwork. alerts = Sustained_5%_loss,Sudden_10%_Loss,Sporadic_Loss,Latency_Over_50ms,Offline_at_startup #config-sniped######### smoke1# rcctl ls started cron dhcpleased httpd ntpd pflogd resolvd rrdcached smokeping smokeping_fcgi smtpd sshd syslogd -- Kindest regards, Tom Smyth.

Re: fragmented ipv4[udp] ignored by server.

2023-03-05 Thread Tom Smyth
; id=5 > 12 0.26551410.10.2.1 ? 10.10.2.10 RADIUS 161 > Access-Challenge id=5 > 13 0.266328 10.10.2.10 ? 10.10.2.1RADIUS 191 Access-Request > id=6 > 14 0.28460710.10.2.1 ? 10.10.2.10 RADIUS 226 Access-Accept id=6 > > Question: How to avoid altering fragment_size to get this working ? > > Some clients could not be set so easily like phones. > > Thank you. > > Mikhael. > > -- Kindest regards, Tom Smyth.

Re: Lightweight Web browser

2023-02-06 Thread Tom Smyth
t; You might try your luck with ArcticFox. Login works. Reading messages > appears to, replying by detaching into a separate panel does not anymore. > > ArcitcFox received a lot of care since I last tried it with gmail, but > also gmail is a moving JS target... so you are always at Google's mercy. > > Riccardo > > -- Kindest regards, Tom Smyth.

Re: How to announce over OSPF only one IP address

2023-02-04 Thread Tom Smyth
t; > $ cat /etc/hostname.vr3 > inet 10.1.111.1 255.255.255.0 > > $ cat /etc/ospfd.conf > router-id 10.109.3.15 > redistribute connected > > area 0.0.0.0 { > interface vr0 > interface vr3 > } > > Thanks, > Radek > > -- Kindest regards, Tom Smyth.

Re: OpenBSD as a transparent switch filter

2023-01-25 Thread Tom Smyth
1 > > In short the only possible way to pass frames from one device to > another is just through port 20 and 21 > > I am aware about headache related to possible loops but I am curious > if it will work. > > > On Wed, Jan 25, 2023 at 2:33 PM Tom Smyth > wrote: > > >

Re: OpenBSD as a transparent switch filter

2023-01-25 Thread Tom Smyth
minimising broadcast waste of bandwidth (on large wireless access networks) On Tue, 24 Jan 2023 at 23:53, David Gwynne wrote: > > > > On 25 Jan 2023, at 09:47, Tom Smyth > wrote: > > > > Hi David is that like a local proxy arp type setup (on typical > > netwo

Re: OpenBSD as a transparent switch filter

2023-01-24 Thread Tom Smyth
-- > > PORT1 PORT2PORT3 PORT 20 > >| | |_| > >| |_ | > >|__ | > > PHISICAL SWITCH DEVICE | > > ---| > >

Re: Software RAID5 write performance

2023-01-24 Thread Tom Smyth
nyone using RAID5 with SSD drives? How is the write speed there? > > Best wishes, > Atanas > -- Kindest regards, Tom Smyth.

Re: OpenBSD as a transparent switch filter

2023-01-24 Thread Tom Smyth
this helps... On Tue, 24 Jan 2023 at 12:24, Claudio Jeker wrote: > > On Tue, Jan 24, 2023 at 11:43:08AM +0000, Tom Smyth wrote: > > Hello Cristian, > > if you want to filter on layer 2 ... you would need to use Bridge > > have a look at man ifconfig(8) > > bridge filt

Re: OpenBSD as a transparent switch filter

2023-01-24 Thread Tom Smyth
t I miss a > starting point and I would > really appreciate any hint. > > Kind regards, > Claudiu > -- Kindest regards, Tom Smyth.

Re: Max number of NICs

2023-01-24 Thread Tom Smyth
> expecting some kind of issue, but when I told him they were dc(4)s, > he was disappointed and said, "Well, of course those will work". > > I had a machine for a while with something like ten or > eleven em(4)s in it, I had fired it up, don't recall seeing any > problems with it identifying all the ports (in fact, iirc, it found > a port on the MoBo that was not extended to the outside). Again, > no issue, but after staring at the power hungry box for many years > and never doing anything with it, it finally got recycled. Again, > that was many releases ago...so not sure how it applies today. > > Current FW box is a old citrix appliance with a six port NIC and two > onboard ports, for eight em(4)s. > > Nick. > -- Kindest regards, Tom Smyth.

Re: Max number of NICs

2023-01-23 Thread Tom Smyth
D host (vmx) > > I am asking because I am running an OpenBSD on a VMware host but apparently > OpenBSD can only see 8 of them. > > Can I raise the limit somehow? > > Regards, Lars. -- Kindest regards, Tom Smyth.

Re: BiDi sfp in ix

2023-01-02 Thread Tom Smyth
on mikrotik > RB5009UG+S+IN and cisco 2960 switch. On aruba 2540 (allow unsupported > transceiver), ibm switch and openbsd ix(4) it won't work. > > I've ordered few BiDi sfp from fs.com and maybe my ISP will lend me > MaxLink sfp so I could test them in lab. > > Thank you Stuart for information ... > -- Kindest regards, Tom Smyth.

Re: bgpd.conf rules changed?

2022-12-19 Thread Tom Smyth
prefixes to your upstream peers... man bgpd.conf will show any other syntax that may be depreciated... ( I have nevever set the softreconfig I *think* it is now a default ... I hope this helps, Tom Smyth On Mon, 19 Dec 2022 at 11:59, Toni Mueller wrote: > > > Hi, > > I am tr

Re: VMM FAQ - 802.11 Prevents Bridging?

2022-12-12 Thread Tom Smyth
want to decend into plugging a propietary solution ... I hope this helps Tom Smyth On Mon, 12 Dec 2022 at 22:35, Stuart Henderson wrote: > > On 2022-12-12, c0ry wrote: > > Hey folks, > > > > I noticed this line in the VMM FAQ ( > > https://www.ope

Re: OpenBSD File systems , on Flash / SSD CPE (in sites with uncontrolled power (CPE customer sites)

2022-11-28 Thread Tom Smyth
## On Mon, 28 Nov 2022 at 21:46, Tom Smyth wrote: > Hello, Folks, > > Im reviewing our filesystem setup for OpenBSD CPEs that we deploy in the > field > > in order to minimise the impact of Power Outages / Customer interference > on the boxes, > we install a 4G root partition

OpenBSD File systems , on Flash / SSD CPE (in sites with uncontrolled power (CPE customer sites)

2022-11-28 Thread Tom Smyth
/dev/MAKEDEV /persist-fs/dev/ cd /persist-fs/dev/ /persist-fs/dev/MAKEDEV all any feedback welcome, are there other folders that could be heavily written to ? is there shortcommings I have ommited swap (because of flash and ssd wear concerns) I hope this helps... Tom Smyth -- Kindest regards

Re: Suggestions for miniPCI wireless card for an accesspoint on OpenBSD - 2022q4

2022-11-24 Thread Tom Smyth
/www.pcengines.ch/wle200nx.htm > > If you would build today an accesspoint, on hardware with miniPCI, what > would you choose, for OpenBSD? > > -- > Regards, > Mikolaj > > -- Kindest regards, Tom Smyth.

Re: 0.0.0.0/32 in pf's tables

2022-11-11 Thread Tom Smyth
yeah 0.0.0.0/32 ,( legacy broadcast address is a valid address and would be included in very verbose explicit rules blocking traffic from invalid src addresses ( for example) hope this helps On Fri 11 Nov 2022, 20:23 3, wrote: > a very clever man once said that God does not play dice.. and he

Re: 2FA VPNs

2022-11-01 Thread Tom Smyth
passowrds listed on a card , and ask the user to enter password X ? Thanks, Tom Smyth On Wed, 2 Nov 2022 at 02:14, Stuart Henderson wrote: > If anyone's got any good suggestions on how to do VPNs with 2FA > on an OpenBSD gateway for non-technical users to access (iOS, Android, >

Re: HP PA-RISC / IA64 hardware platform for Linux Debian, Gentoo, NetBSD, OpenBSD and HP-UX Unix

2022-10-07 Thread Tom Smyth
Hi Jesse, you can check out https://www.openbsd.org/want.html perhaps there is an overlap between developers requirements and what you have surplus, it is a voluntary project so consider donating some hardware to the developers according to that list, Hope this helps, Tom Smyth On Fri, 7

Re: embarrassing mail problem

2022-10-05 Thread Tom Smyth
howdy Steve... on newer versions of openBSD open SMTPD legacy tls versions / ciphers are disabled by default... there is an option to allow legact tls versions ( i cant remember the option off hand but man smtpd.conf and search for tls you should find it handy enough...( this caught me out on an

Re: Is OpenBSD suited for old Dell Precision T5500 (Dual Xeon X5675, 72GB RAM)

2022-09-07 Thread Tom Smyth
os over > > > the entire USB stick before expecting it to actually work. Nothing to > > > do with the T5500. > > I am puzzled: how exactly is a zero filled USB stick > less panicky than another USB stick? > > -- Kindest regards, Tom Smyth.

Re: Is OpenBSD suited for old Dell Precision T5500 (Dual Xeon X5675, 72GB RAM)

2022-09-07 Thread Tom Smyth
be a separate card or i/o module to the onboard sata ... Hope this helps On Wed, 7 Sept 2022 at 12:19, Erling Westenvik wrote: > On Wed, Sep 07, 2022 at 11:41:49AM +0100, Tom Smyth wrote: > > hi > > > > i would check bios / firmware settings > > > > try disabling memory

Re: Is OpenBSD suited for old Dell Precision T5500 (Dual Xeon X5675, 72GB RAM)

2022-09-07 Thread Tom Smyth
hi i would check bios / firmware settings try disabling memory mapped i/o in bios check processor settings enable vt-d disable hyper threading ensure execute disable is enabled update the bios as it will update cpu microcode ... dell alow you to select the emulation of sata ahci vs raid

Re: vxlan operational question

2022-07-16 Thread Tom Smyth
has an idea, please let me know. > > Best regards > Florian > > -- Kindest regards, Tom Smyth.

Re: OpenBGPD via (WG?) Tunnel Not Learning Routes

2022-07-12 Thread Tom Smyth
valid.. I hope this helps, Tom Smyth On Wed, 13 Jul 2022 at 02:38, Tobias Fiebig < tob...@reads-this-mailinglist.com> wrote: > Heho, > I am running OpenBGPd (on 7.1+binpatches), and have some tunnel links > between hosts and up/downstreams over wg tunnels. > > I am basica

Re: httpd not reachable from outside

2022-06-22 Thread Tom Smyth
hi Adriano can you just restart httpd with rcctl restart httpd did your ip addresses on external interface change ? what are the loadef firewall rules Thanks Tom Smyth On Thu 23 Jun 2022, 00:05 Adriano Barbosa, wrote: > Hi. > > My httpd was working perfectly for the las

Hello Folks Im in Brussles for the evening if anyone wants to meet up

2022-06-17 Thread Tom Smyth
Hello Folks Im in Brussles for the evening if anyone wants to meet up -- Kindest regards, Tom Smyth.

Re: documentation

2022-05-24 Thread Tom Smyth
es do not perform > in the circus > -- Kindest regards, Tom Smyth.

Re: Wireguard IP packets fragmentation issue

2022-05-17 Thread Tom Smyth
in tunnels (layer3) ) the benefit of being able to send the full packet over the fragmented tunnel does not in any way increase perf... and the TCP MSS clamping gives the best throughput (in my experience) ... Thanks again, Tom Smyth On Sun 15 May 2022, 21:02 Stuart Henderson, wrote: > On 2022-05

Re: Wireguard IP packets fragmentation issue

2022-05-15 Thread Tom Smyth
ace) the Router on the VPN wont sent a Fragment needed IP message to the client because the MTU of the Tunnel was not exceeded (but the MTU on the underlay was exceeded) I hope the clarifications helps and that im right or at least that I learn something new :) Thanks Tom Smyth On Sun,

Re: Wireguard IP packets fragmentation issue

2022-05-15 Thread Tom Smyth
i have knowledge of > > - "more information in pf.conf": yes there is information in pf.conf on > mtu, mss, and nat, including the syntax for using them. again, why > wouldn;t we point people there? > > i'm happy to try and rework the text if you think it can be improved. > > jmc > -- Kindest regards, Tom Smyth.

Re: calling all PFsync users for experience, gotchas, feedback, tips and tricks

2022-05-14 Thread Tom Smyth
Hello all, Thanks for the feedback it is really helpful to have peoples experiences in the wild to help feed into the training course content. and certainly better than just my humble experience I really appreciate all of your feedback. Thanks again folks, Tom Smyth Tom Smyth On Fri, 13 May

calling all PFsync users for experience, gotchas, feedback, tips and tricks

2022-05-11 Thread Tom Smyth
regards, Tom Smyth.

Re: time drift in OpenBSD in proxmox (qemu-kvm) guest

2022-04-15 Thread Tom Smyth
or balanced I hope this helps, ( and thanks for your patience with my previous impulsive (albeit trying to help) replies earlier Tom Smyth On Fri, 15 Apr 2022 at 11:12, Stuart Henderson wrote: > > On 2022-04-14, Stefan Sperling wrote: > > On Thu, Apr 14, 2022 at 09:26:41PM -, Stuart Hen

Re: time drift in OpenBSD in proxmox (qemu-kvm) guest

2022-04-14 Thread Tom Smyth
to the preemption timer on the Proxmox Host Sorry for bombing the list on this one ... On Thu, 14 Apr 2022 at 22:54, Tom Smyth wrote: > > Stuart, > sorry I wasnt entirely clear in my last email > > 1) you can try the /sys/module/kvm_intel/parameters/preemption_timer > > if the s

Re: time drift in OpenBSD in proxmox (qemu-kvm) guest

2022-04-14 Thread Tom Smyth
I have an Intel based Proxmox 7.1 being built pre-Production Ill have a go with it... Tomorrow and let you know On Thu, 14 Apr 2022 at 22:54, Tom Smyth wrote: > > Stuart, > sorry I wasnt entirely clear in my last email > > 1) you can try the /sys/module/kvm_intel/parameters/p

Re: time drift in OpenBSD in proxmox (qemu-kvm) guest

2022-04-14 Thread Tom Smyth
Kernel sorted it On Thu, 14 Apr 2022 at 22:45, Tom Smyth wrote: > > Stuart > > is your host on an Intel System ? > > I had an awful time with Proxmox 5.0 and 5.1 > > with clock drift and console freezes > > can you try to disable the following feature in the Proxm

Re: time drift in OpenBSD in proxmox (qemu-kvm) guest

2022-04-14 Thread Tom Smyth
irq 6 drq 2 > pckbc0 at isa0 port 0x60/5 irq 1 irq 12 > pckbd0 at pckbc0 (kbd slot) > wskbd0 at pckbd0: console keyboard, using wsdisplay0 > pms0 at pckbc0 (aux slot) > wsmouse0 at pms0 mux 0 > pcppi0 at isa0 port 0x61 > spkr0 at pcppi0 > usb0 at uhci0: USB revision 1.0 > uhub0 at usb0 configuration 1 interface 0 "Intel UHCI root hub" rev 1.00/1.00 > addr 1 > uhidev0 at uhub0 port 1 configuration 1 interface 0 "QEMU QEMU USB Tablet" > rev 2.00/0.00 addr 2 > uhidev0: iclass 3/0 > ums0 at uhidev0: 3 buttons, Z dir > wsmouse1 at ums0 mux 0 > vscsi0 at root > scsibus3 at vscsi0: 256 targets > softraid0 at root > scsibus4 at softraid0: 256 targets > root on sd0a (cf14a346fbf0559d.a) swap on sd0b dump on sd0b > fd0 at fdc0 drive 1: density unknown > > > -- Kindest regards, Tom Smyth.

Re: pf documentation

2022-04-07 Thread Tom Smyth
Steve, if you like books ... Peter Hansteen has written a book the book of pf which I have read and would recommend https://nostarch.com/pf3 and if you are interested in firewalls ingeneral and comparing features On Thu, 7 Apr 2022 at 10:40, Tom Smyth wrote: > > Hi Steve, > Im goin

Re: pf documentation

2022-04-07 Thread Tom Smyth
of Openbsd you are running ... man pfctl or man pf.conf will help you ... if you need a intro to the intro ... https://openbsdjumpstart.org by Wesley is pretty cool and gets you started on OpenBSD and PF Hope this helps, Tom Smyth On Thu, 7 Apr 2022 at 10:28, Brodey Dover wrote: > > To be

Re: TLS library problme: tlsv1 alert protocol

2022-04-06 Thread Tom Smyth
:/usr/src/lib/libssl/tls13_lib.c:150: > lost connection after STARTTLS from mout.web.de > > Can anybody with more knowledge of libressl and it's error messages tell by > this error what is wrong? > > Best regards, > Stephan > -- Kindest regards, Tom Smyth.

Re: Changing rdomain on an interface after the rdomain has already been set openbsd7.0 / 7.1snapshots

2022-04-02 Thread Tom Smyth
Hey David thanks for reply makes more sens to me now ... Thanks again... Tom Smyth On Sat, 2 Apr 2022 at 04:11, David Gwynne wrote: > > loopback interfaces are special and kind of end up representing an rdomain > inside the kernel, which is where this restriction comes from

Changing rdomain on an interface after the rdomain has already been set openbsd7.0 / 7.1snapshots

2022-04-01 Thread Tom Smyth
: Operation not permitted tobsd# ifconfig -- Kindest regards, Tom Smyth.

Re: issue with move to php8 as default

2022-03-28 Thread Tom Smyth
ng something, or is this a bug? If the latter, is this email > sufficient to get it looked at, or i would need to report it more > formally? > > Thanks, > ITwrx > > -- Kindest regards, Tom Smyth.

Re: Advice for hardening a PHP webserver on OpenBSD

2022-03-09 Thread Tom Smyth
e all the > dangerous functions, you can hardly use PHP. And then.. its on the PHP > level, sooo. But maybe every little bit counts? > > Anyway, what are you guys doing if you're running PHP in production on > OpenBSD? Besides from NOT running PHP in production at all. > > Kindest regards. > > -- > Sent with Tutanota, the secure & ad-free mailbox. > -- Kindest regards, Tom Smyth.

Re: shells/nsh network shells, feedback and comments requested,

2022-02-20 Thread Tom Smyth
Hello all, just following up on this as a call out to anyone who use nsh or have used it in the past, if you have any feedback / suggestions I would really appreciate that, Thanks Tom Smyth On Sun, 18 Apr 2021 at 13:31, Tom Smyth wrote: > Hello, > > If anyone has used shells/

Re: NSD: Could not tcp connect to X Operation timed out

2022-01-19 Thread Tom Smyth
is pf allowing tcp port53 as well as udp port53 ? On Wed 19 Jan 2022, 11:46 Laura Smith, wrote: > Hi > > OpenBSD NSD slave is driving me nuts with the following message in the > logs "Could not tcp connect to X Operation timed out". > > The answer sounds obvious, but I can: > > - Ping the IP >

Re: Error on xenocara.tar.gz extraction

2022-01-13 Thread Tom Smyth
i think u need to do as root or configure doas to perform privleged operation... On Thu 13 Jan 2022, 17:26 Rob Whitlock, wrote: > Attempting to extract xenocara.tar.gz while avoiding root proviliges as > described here https://www.openbsd.org/faq/faq5.html#wsrc, I ran into an > error, shown

Re: Help with basic pf rule to open port 25

2022-01-05 Thread Tom Smyth
... It is awesome ... Tom Smyth On Wed, 5 Jan 2022 at 16:09, Sean McBride wrote: > Hi all, > > (Newbie and first time poster, please be gentle :)) > > I'm trying to set up spamd, and I think I'm having trouble with pf. So > I tried to add a very basic test rule. I added to the b

Re: Recommendations on Buffer Space for Busy Unbound Resolver Service for a network

2021-12-22 Thread Tom Smyth
again, Really appreciate your Tom Smyth On Wed, 22 Dec 2021 at 11:26, Stuart Henderson wrote: > On 2021-12-22, Dirk Coetzee wrote: > > Hi Tom, > > > > I would recommend debugging using "unbound-control stats_noreset" and > referencing the unbound conf

Re: Recommendations on Buffer Space for Busy Unbound Resolver Service for a network

2021-12-21 Thread Tom Smyth
THanks Dirk Ill give that a go Cheers, Tom Smyth On Wed, 22 Dec 2021 at 00:30, Dirk Coetzee wrote: > Hi Tom, > > I would recommend debugging using "unbound-control stats_noreset" and > referencing the unbound configuration documentation at > https://www.nlnetlabs

Re: Recommendations on Buffer Space for Busy Unbound Resolver Service for a network

2021-12-21 Thread Tom Smyth
Sorry forgot to say running OpenBSD on an amd64, and hosted in a KVM environment, Thanks Tom Smyth On Tue, 21 Dec 2021 at 21:15, Tom Smyth wrote: > Recommendations on Buffer Space for Busy Unbound Resolver Service for a > network serving a 3000, customers > > Thanks >

Recommendations on Buffer Space for Busy Unbound Resolver Service for a network

2021-12-21 Thread Tom Smyth
Recommendations on Buffer Space for Busy Unbound Resolver Service for a network serving a 3000, customers Thanks -- Kindest regards, Tom Smyth.

Radiusd anyone know of a Simple to use web front end for usermanagement ?

2021-09-22 Thread Tom Smyth
thanks -- Kindest regards, Tom Smyth.

Re: ipsec with default route and routing of internal networks

2021-09-13 Thread Tom Smyth
13.9.2021. 12:58, Tom Smyth wrote: > > Hi Hrvoje, > > > > is 10.90.0.0/24 <http://10.90.0.0/24> local to your firewall, and if I > > understand your rule, > > ike esp from 10.90.0.0/24 <http://10.90.0.0/24> to anyyou are > saying > > encryp

Re: ipsec with default route and routing of internal networks

2021-09-13 Thread Tom Smyth
se point me in the right direction on what to look and > configure? > > Thank you .. > > -- Kindest regards, Tom Smyth.

Re: DNS resolution after VPN?

2021-07-20 Thread Tom Smyth
you might be able to statically configure > > it, if not then you could modify vpnc-script to have it update the > > address in unwind.conf and reload it. > > Thanks, this works somewhat: > > forwarder { $ip1 $ip2 } > force accept bogus forwarder { $internal_domain1 } &g

Re: fighting amplification attack --was: Re: pf: block drop not working

2021-05-07 Thread Tom Smyth
not possible with udp? > > Axel > --- > PGP-Key: CDE74120computing @ chaos claudius > -- Kindest regards, Tom Smyth.

Re: pf: block drop not working

2021-05-05 Thread Tom Smyth
68.163.94.443 > x.y.z.171.53: [no udp cksum] 1+ RRSIG? > pizzaseo.com.(30) (ttl 249, id 55913, len 58) > 0800 532: x.y.z.171.53 > 146.168.163.94.443: [udp sum ok] 1- 0/13/14(490) > (ttl 62, id 53578, len 518) > > > What is wrong in my setup? > > Thanks, Axel > --- > PGP-Key: CDE74120computing @ chaos claudius > -- Kindest regards, Tom Smyth.

Re: default Offset to 1MB boundaries for improved SSD (and Raid Virtual Disk) partition alignment

2021-04-21 Thread Tom Smyth
ant ,for now anyway, Ill do a little digging on FFS and FFS2 and see how the filesystem database (or table) is structured... Thanks for the feedback it is very helpful to me All the best, Tom Smyth On Wed, 21 Apr 2021 at 15:25, Christian Weisgerber wrote: > > Tom Smyth: > > > i

Re: default Offset to 1MB boundaries for improved SSD (and Raid Virtual Disk) partition alignment

2021-04-21 Thread Tom Smyth
to reduce wear on SSDs, and improve performance in Virtualized Environments with large allocation units on what ever storage subsystem they are running. Thanks for your time Tom Smyth On Wed, 21 Apr 2021 at 08:49, Otto Moerbeek wrote: > > On Wed, Apr 21, 2021 at 08:20:10AM +0100, Tom

Re: default Offset to 1MB boundaries for improved SSD (and Raid Virtual Disk) partition alignment

2021-04-21 Thread Tom Smyth
hardware) Thanks Tom Smyth On Tue, 20 Apr 2021 at 22:52, Christian Weisgerber wrote: > > Tom Smyth: > > > just installing todays snapshot and the default offset on amd64 is 64, > > (as it has been for as long as I can remember) > > It was changed from 63 in 20

default Offset to 1MB boundaries for improved SSD (and Raid Virtual Disk) partition alignment

2021-04-20 Thread Tom Smyth
but It might be worth re-visiting as it would make for more straightforward aligned partitions on OpenBSD installs.. my experience is more for x86 / amd64 rather than other platforms .. Kindest Regards, Tom Smyth -- Kindest regards, Tom Smyth.

shells/nsh network shells, feedback and comments requested,

2021-04-18 Thread Tom Smyth
in NSH that you can do in base. We will be working on it to track current, and hopefully 7.0 release. Thanks Tom Smyth

Re: Last shutdown date of old OpenBSD machine

2021-04-15 Thread Tom Smyth
I think i know what it is, but i'm not sure > since it was so long ago. > Therefore booting into single user mode is probably the only choice for > option 1. > > Thank you for your suggestions. > > Br, Ales > > -- Kindest regards, Tom Smyth.

Re: Technical Documentation - CARP

2021-04-13 Thread Tom Smyth
od context and insights... but refer to the manuals also to validate any improved syntax and or features Hope this helps Tom Smyth On Tue, 13 Apr 2021 at 09:34, jannick Weiss wrote: > > Hello,my name is Jannick Weiss and i am currently in the process of taking > my education as a datatechni

Re: 6.9 Current amd64 xfce seems to freeze and not respond to mouse clicks or keystrokes

2021-04-10 Thread Tom Smyth
: > > On Sat, Apr 10, 2021 at 10:22:17PM +0100, Tom Smyth wrote: > > Hello, > > > > 1) issue does not occur with fvwm or with chrome running in fvwm > > > > so the issue seems to be confined to xfce, and I was running just 1 > > xfce terminal session >

Re: 6.9 Current amd64 xfce seems to freeze and not respond to mouse clicks or keystrokes

2021-04-10 Thread Tom Smyth
Geoff, The force is strong with you :) Thanks that worked xfce-screensaver was active but I was not seeing the screen-saver Appreciate your help Tom Smyth On Sat, 10 Apr 2021 at 22:48, gwes wrote: > > > > On 4/10/21 5:22 PM, Tom Smyth wrote: > > Hello, > > >

Re: 6.9 Current amd64 xfce seems to freeze and not respond to mouse clicks or keystrokes

2021-04-10 Thread Tom Smyth
Hello, 1) issue does not occur with fvwm or with chrome running in fvwm so the issue seems to be confined to xfce, and I was running just 1 xfce terminal session 2) (so the issue is not related to chromium) Thanks On Fri, 9 Apr 2021 at 19:09, Tom Smyth wrote: > > just to update this

Re: OT: Dell EMC switches

2021-04-09 Thread Tom Smyth
he Mellanox 655902-001 QSA adapter. > > > > Which is pretty much what we have in production. :) > > Are you planning to buy new or eBay? There are some pretty good deals on > eBay. > > > > Mischa > > -- Kindest regards, Tom Smyth.

Re: 6.9 Current amd64 xfce seems to freeze and not respond to mouse clicks or keystrokes

2021-04-09 Thread Tom Smyth
Apr 2021 at 19:33, Tom Smyth wrote: > > Hello > > 6.9 Current amd64 xfce seems to freeze and not respond to mouse > clicks or keystrokes. I cant seem to change windows or enter text on > the X terminal > > > im running OpenBSD on an Oracle Virtualbox VM > > h

6.9 Current amd64 xfce seems to freeze and not respond to mouse clicks or keystrokes

2021-04-09 Thread Tom Smyth
Hello 6.9 Current amd64 xfce seems to freeze and not respond to mouse clicks or keystrokes. I cant seem to change windows or enter text on the X terminal im running OpenBSD on an Oracle Virtualbox VM however + does work and im able to restart the x session using the console rcctl

Re: Does intel(4) support Iris Xe Graphics?

2021-04-07 Thread Tom Smyth
... suggested current as the bug might already be fixed in current as opposed to release ... On Wed, 7 Apr 2021 at 11:56, Jonathan Gray wrote: > > On Wed, Apr 07, 2021 at 11:34:54AM +0100, Tom Smyth wrote: > > Try Current and 6.8 and see if you get a different result in each.. > &

Re: Does intel(4) support Iris Xe Graphics?

2021-04-07 Thread Tom Smyth
Try Current and 6.8 and see if you get a different result in each.. dmesgs are key for getting help on this type of query ... On Wed, 7 Apr 2021 at 11:33, Tom Smyth wrote: > > Hi Michel, > if you send the dmesg from OpenBSD when it is installed and Ubuntu > it would hel

Re: Does intel(4) support Iris Xe Graphics?

2021-04-07 Thread Tom Smyth
fferent here. > > > > > > > > Any pointing to the right direction would be appreciated. (If this > > problem > > > relates to Xorg specifically and not to OpenBSD please let me know). > > > > > > [1] https://marc.info/?l=openbsd-bugs=161754767328009=2 > > > > > > Regards, > > > > > > Michel > > > > > -- Kindest regards, Tom Smyth.

Re: sndiod on by default (does it need to be ? )

2021-02-21 Thread Tom Smyth
of other software that I use on top of OpenBSD I couldn't agree more with you Thanks again.. On Sun, 21 Feb 2021 at 18:42, Stuart Henderson wrote: > > On 2021-02-21, Tom Smyth wrote: > > my thinking is by having the service off by default would reduce the > > default attack

Re: sndiod on by default (does it need to be ? )

2021-02-21 Thread Tom Smyth
sndiod to my deploy ment scripts for my use cases :) Thanks again to all who considered it :) On Sun, 21 Feb 2021 at 14:28, Tom Smyth wrote: > > Hi Sebastian > I get users want to listen to audio but if the only hardware is a buzzer and > the user is not running x what are

Re: sndiod on by default (does it need to be ? )

2021-02-21 Thread Tom Smyth
sense as it is likely such system is for users who may need audio Just a thought Thanks On Sunday, 21 February 2021, Sebastian Benoit wrote: > Tom Smyth(tom.sm...@wirelessconnect.eu) on 2021.02.21 04:08:48 +: > > Hello, > > > > I was wondering should sndiod (default)

sndiod on by default (does it need to be ? )

2021-02-20 Thread Tom Smyth
the service off by default would reduce the default attack surface of the OS ? perhaps the installer could use the answer to the question do you intend to run X to determine whether or not to enable the sndiod daemon ? I hope this helps -- Kindest regards, Tom Smyth.

Re: bsd.rd ok , bsd explodes, trying to get traces

2021-02-09 Thread Tom Smyth
ct the errors ? ( i do not see com ports anywhere either ) > > Thank you for reading. > -- > -- > > - > Knowing is not enough; we must apply. Willing is not enough; we must do > > -- Kindest regards, Tom Smyth.

Re: NIC Port L2 Switching capability

2021-01-25 Thread Tom Smyth
at I want to > add a 10GbE NIC and switch into my production router platform while > still keeping the same setup going to the 1GbE switch which is running > in a 4-port LACP trunk. > > > > Of course an alternate would be to link the 1GbE switch to the 10GbE > switch and do things that way, but the above would be more practical > from a cabling sense. > > > > Has anyone got any ideas? > > > Thanks a lot! > > > Kaya > > > > -- Kindest regards, Tom Smyth.

Re: Fw: ospf question

2021-01-08 Thread Tom Smyth
manifested itself. > > > > Is anyone aware of incompatibilities between the OSPF implementation within > > OpenBSD and that provided by quagga on FreeBSD? Or of any limitations of > > OSPF on OpenBSD? > > > > In each setup I have the same hello and dead interval and have md5 crypt > > authentication in place on each link between routers. Each router is in > > area 0.0.0.0. > > > > regards, > > Mark -- Kindest regards, Tom Smyth.

Re: Internal Microphone on Thinkpad X1 Carbon 7th gen not working

2020-12-04 Thread Tom Smyth
v 31 function 6 "Intel I219-V" rev 0x11: msi, address > f8:75:a4:c8:62:06 > isa0 at pcib0 > isadma0 at isa0 > pckbc0 at isa0 port 0x60/5 irq 1 irq 12 > pckbd0 at pckbc0 (kbd slot) > wskbd0 at pckbd0: console keyboard > pms0 at pckbc0 (aux slot) > wsmouse0 at pms0 mux 0 > pcppi0 at isa0 port 0x61 > spkr0 at pcppi0 > vmm0 at mainbus0: VMX/EPT > efifb at mainbus0 not configured > uhidev0 at uhub0 port 3 configuration 1 interface 0 "Yubico YubiKey > OTP+FIDO+CCID" rev 2.00/5.26 addr 2 > uhidev0: iclass 3/1 > ukbd0 at uhidev0: 8 variable keys, 6 key codes > wskbd1 at ukbd0 mux 1 > uhidev1 at uhub0 port 3 configuration 1 interface 1 "Yubico YubiKey > OTP+FIDO+CCID" rev 2.00/5.26 addr 2 > uhidev1: iclass 3/0 > fido0 at uhidev1: input=64, output=64, feature=0 > ugen0 at uhub0 port 3 configuration 1 "Yubico YubiKey OTP+FIDO+CCID" rev > 2.00/5.26 addr 2 > uvideo0 at uhub0 port 8 configuration 1 interface 0 "Azurewave Integrated > Camera" rev 2.01/69.05 addr 3 > video0 at uvideo0 > uvideo1 at uhub0 port 8 configuration 1 interface 2 "Azurewave Integrated > Camera" rev 2.01/69.05 addr 3 > video1 at uvideo1 > vscsi0 at root > scsibus2 at vscsi0: 256 targets > softraid0 at root > scsibus3 at softraid0: 256 targets > sd1 at scsibus3 targ 1 lun 0: > sd1: 976761MB, 512 bytes/sector, 2000407649 sectors > root on sd1a (69b037e186d738a3.a) swap on sd1b dump on sd1b > inteldrm0: 3840x2160, 32bpp > wsdisplay0 at inteldrm0 mux 1: console (std, vt100 emulation), using wskbd0 > wskbd1: connecting to wsdisplay0 > wsdisplay0: screen 1-5 added (std, vt100 emulation) > iwm0: hw rev 0x310, fw ver 34.3125811985.0, address f8:e4:e3:30:0a:07 > > -- Kindest regards, Tom Smyth.

Re: Fwd: PayPal pool for developer M1 Mac mini for OpenBSD port

2020-12-03 Thread Tom Smyth
Clearly I missed Patriks Email ... earlier.. :/ sorry folks +1 if experienced Devs are working on it... it will happen Best of luck to the people working on getting it working ... cant be easy without all the docs ... Thanks On Thu, 3 Dec 2020 at 22:39, Tom Smyth wrote: > Hi J

Re: PayPal pool for developer M1 Mac mini for OpenBSD port

2020-12-03 Thread Tom Smyth
g > > >> OpenBSD to the platform. He apparenetly will also do his work in a > > >> dual-licensed fashion, so the BSDs will easily profit from it. > > >> > > >> So, the first steps are basically to follow Marcan's work and use all > > >> that information and code to port OpenBSD as well. > > >> > > >> This *will* take some time, because essentially there are only the > > >> binary drivers, but it's doable and I think with a bit of patience > > >> we will have OpenBSD running on the M1 as well. > > >> > > >> Biggest hurdle, as always, will be support for graphics acceleration. > > -- Kindest regards, Tom Smyth.

  1   2   3   4   >