Re: Why can I ping but not curl google.com?

[Stuart Henderson]

On 2016-05-29, Murk Fletcher  wrote:
> % git clone https://github.com/openbsd/openbsd.git

I don't know what you're trying to do here..

> and pf.conf:
> https://gist.github.com/anonymous/69e047797f696c1df8eaa0c82e39e01d

| ext_if = "vtnet0"

What is vtnet0?

Re: Why can I ping but not curl google.com?

[Murk Fletcher]

> You had obviously tested without any of your own PF rules?

You're right, something must have changed from 5.8 to 5.9 to cause my
ruleset to do bananas. Being a local VirtualBox development machine, I
reckon I don't need a ruleset at all?

Many thanks!

--Murk

On Mon, May 30, 2016 at 8:53 AM, Raf Czlonka  wrote:

> On Sun, May 29, 2016 at 11:01:14PM BST, Murk Fletcher wrote:
>
> This:
>
> > This is my Windows 10 VirtualBox set to Bridged Networking.
>
> and this:
>
> > It's been working flawlessly for years.
>
> is a direct contradiction.
>
> > I recently upgraded to OpenBSD 5.9, I think that's when the problems
> started.
> ^
> I *think* this is a crucial bit here ;^)
>
> You had obviously tested without any of your own PF rules?
>
> Raf

Re: Why can I ping but not curl google.com?

[Murk Fletcher]

Obviouisly it doesn't a ruleset. What was I thinking.

Have a good one guys!

--Murk

On Mon, May 30, 2016 at 11:36 AM, Murk Fletcher 
wrote:

> > You had obviously tested without any of your own PF rules?
>
> You're right, something must have changed from 5.8 to 5.9 to cause my
> ruleset to do bananas. Being a local VirtualBox development machine, I
> reckon I don't need a ruleset at all?
>
> Many thanks!
>
> --Murk
>
> On Mon, May 30, 2016 at 8:53 AM, Raf Czlonka  wrote:
>
>> On Sun, May 29, 2016 at 11:01:14PM BST, Murk Fletcher wrote:
>>
>> This:
>>
>> > This is my Windows 10 VirtualBox set to Bridged Networking.
>>
>> and this:
>>
>> > It's been working flawlessly for years.
>>
>> is a direct contradiction.
>>
>> > I recently upgraded to OpenBSD 5.9, I think that's when the problems
>> started.
>> ^
>> I *think* this is a crucial bit here ;^)
>>
>> You had obviously tested without any of your own PF rules?
>>
>> Raf

Re: Why can I ping but not curl google.com?

[Raf Czlonka]

On Sun, May 29, 2016 at 11:01:14PM BST, Murk Fletcher wrote:

This:

> This is my Windows 10 VirtualBox set to Bridged Networking.

and this:

> It's been working flawlessly for years.

is a direct contradiction.

> I recently upgraded to OpenBSD 5.9, I think that's when the problems started.
^
I *think* this is a crucial bit here ;^) 

You had obviously tested without any of your own PF rules?

Raf

Re: Why can I ping but not curl google.com?

[Murk Fletcher]

> Where is this:

This is my Windows 10 VirtualBox set to Bridged Networking.

It's been working flawlessly for years. I recently upgraded to OpenBSD 5.9,
I think that's when the problems started.

> As in, is that a pf.conf for the thing that tries to run curl or is it a
separate system?

That's from the VirtualBox, yeah.

--Murk


On Sun, May 29, 2016 at 11:24 PM, Peter N. M. Hansteen <pe...@bsdly.net>
wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> On 05/29/16 23:09, Murk Fletcher wrote:
> > Hi! Why can I ping but not curl google.com? Or clone a GitHub
> > repo?
> >
>
> Where is this:
>
> > % ping google.com PING google.com (213.155.151.184): 56 data bytes
> > 64 bytes from 213.155.151.184: icmp_seq=0 ttl=57 time=19.949 ms 64
> > bytes from 213.155.151.184: icmp_seq=1 ttl=57 time=20.554 ms ---
> > google.com ping statistics --- 2 packets transmitted, 2 packets
> > received, 0.0% packet loss round-trip min/avg/max/std-dev =
> > 19.949/20.252/20.554/0.303 ms % curl google.com curl: (7) Couldn't
> > connect to server % git clone
> > https://github.com/openbsd/openbsd.git Cloning into 'openbsd'...
> > fatal: unable to access 'https://github.com/openbsd/openbsd.git/':
> > Couldn't connect to server
> >
>
> in relation to this:
>
> > and pf.conf:
> > https://gist.github.com/anonymous/69e047797f696c1df8eaa0c82e39e01d
>
> As in, is that a pf.conf for the thing that tries to run curl or is it
> a separate system?
>
> - --
> Peter N. M. Hansteen, member of the first RFC 1149 implementation team
> http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/
> "Remember to set the evil bit on all malicious network traffic"
> delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.
> iQIcBAEBCAAGBQJXS14AAAoJELJiGF9h4DyebMQP/jLWZy8Bm8WT4sSaqMlT8Cz2
> IkRlpxUq6UH57bXkniO7MxaVNtDyZkzkrbOpDkamihDBPe2JsCZM4AK4jh3RZWul
> 2PeXVUodVZj/fBduV/T0/Z/hvacqz23racbMmG+VaPsESL5Nm+waFiB88oganuyl
> QOKGAqQcV9EK4Kp8vHFO1CgYTDh/EQmzA4iRhNVlS+K7SJTkwOaYgXUTZLwXrlpP
> 6OSJEEoyE9T9kjV3GLStueVGoRDjtGhkrsXml9q/op36ikfkWQnSGlHrgWuW97KL
> W9FOBD7uEeb3Um0yFMqDwqo6P3AFWvkYWAFVPop2Grl3tftKVZCi6Tk7uacZMfqk
> Co8gRiLVIQ4DvMs1JOayRI3Ywj9ZHWLMMHpVxpNC622YtNuLK6QLJbOJOk79lTVT
> 4Xd/I7Kcp29YZNTj3lKhNwHlmmCZH++Uk1nKjTLTzffIrLwZ0JTkmvNhg4nHYLiE
> sIOS9m0pFJsFDid4DW2fsJJ6ZODc4rV806uu72/6f37Yvv1I1IyyBgJKhcSlFmhW
> U+2qsQTr51CwncTtpSFE+Uojlt958P1iox5t+FQeOQoX9UtB6SXjnnXo06z7JR+n
> WpvXkqkqvC86TXv7JGtmFWQtPe2HyGzN6xdL7OC4vojNtznbEy6QfpZGEE+pqHJF
> f+8uv2ROJYJcJZCqdRZk
> =lrRM
> -END PGP SIGNATURE-

Re: Why can I ping but not curl google.com?

[Peter N. M. Hansteen]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 05/29/16 23:09, Murk Fletcher wrote:
> Hi! Why can I ping but not curl google.com? Or clone a GitHub
> repo?
> 

Where is this:

> % ping google.com PING google.com (213.155.151.184): 56 data bytes 
> 64 bytes from 213.155.151.184: icmp_seq=0 ttl=57 time=19.949 ms 64
> bytes from 213.155.151.184: icmp_seq=1 ttl=57 time=20.554 ms ---
> google.com ping statistics --- 2 packets transmitted, 2 packets
> received, 0.0% packet loss round-trip min/avg/max/std-dev =
> 19.949/20.252/20.554/0.303 ms % curl google.com curl: (7) Couldn't
> connect to server % git clone
> https://github.com/openbsd/openbsd.git Cloning into 'openbsd'... 
> fatal: unable to access 'https://github.com/openbsd/openbsd.git/': 
> Couldn't connect to server
> 

in relation to this:

> and pf.conf: 
> https://gist.github.com/anonymous/69e047797f696c1df8eaa0c82e39e01d

As in, is that a pf.conf for the thing that tries to run curl or is it
a separate system?

- -- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/
"Remember to set the evil bit on all malicious network traffic"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.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=lrRM
-END PGP SIGNATURE-

Why can I ping but not curl google.com?

[Murk Fletcher]

Hi! Why can I ping but not curl google.com? Or clone a GitHub repo?

% ping google.com
PING google.com (213.155.151.184): 56 data bytes
64 bytes from 213.155.151.184: icmp_seq=0 ttl=57 time=19.949 ms
64 bytes from 213.155.151.184: icmp_seq=1 ttl=57 time=20.554 ms
--- google.com ping statistics ---
2 packets transmitted, 2 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 19.949/20.252/20.554/0.303 ms
% curl google.com
curl: (7) Couldn't connect to server
% git clone https://github.com/openbsd/openbsd.git
Cloning into 'openbsd'...
fatal: unable to access 'https://github.com/openbsd/openbsd.git/':
Couldn't connect to server

and pf.conf:
https://gist.github.com/anonymous/69e047797f696c1df8eaa0c82e39e01d

Thanks!

--Murk