Re: openvpn multihome on OpenBSD?

2017-06-18 Thread Harald Dunkel
Hi Stuart, On 06/17/17 17:09, Stuart Henderson wrote: > > It's trying to use a single socket for v4 and v6. That is never going > to work on OpenBSD. > > Try "bind ipv6only" and see if that helps. > Currently I have 2 openvpn servers listening on either IPv4 or IPv6, each with its own address

ospf gre carp

2017-06-18 Thread Marko Cupać
Hi, I have setup similar to: R1 bnx0--bnx1 | |R3 LAN1---carp0 carp1--em0--em2---LAN2 | | bnx0--bnx1 R2 How can I run OSPF between R3 and carped R1 and R2? I tried with gre tunnel from

Re: ospf gre carp

2017-06-18 Thread Claer
On Sun, Jun 18 2017 at 47:12, Marko Cupać wrote: > On Sun, 18 Jun 2017 09:52:13 + (UTC) > Stuart Henderson wrote: > > > On 2017-06-18, Marko Cupać wrote: > > > Hi, > > > > > > I have setup similar to: > > > > > > R1 > > >

Re: DNS hijacking (was Re: Is this an intrusion?)

2017-06-18 Thread Joe Holden
On 18/06/2017 10:59, Stuart Henderson wrote: > On 2017-06-17, Paul Suh wrote: >> Folks,=20 >> >> My understanding of the way that this is done is by returning a CNAME = >> when the ISP's DNS recursive DNS server would otherwise return a = >> NXDOMAIN result, followed by a

Re: spamd does not start

2017-06-18 Thread Stuart Henderson
On 2017-06-18, Leighton Sheppard wrote: > I've just changed my mail relay from Exchange Online to Gmail, seems it was > getting blocked. Quite likely - Microsoft's outbound mail relays don't play well with spamd.

Re: Fwd: Boot issue 6.1

2017-06-18 Thread Theo de Raadt
> I get the error Message that "installboot: /mnt/usr/mdec/biosboot extends > Beyond sector 268435455. OpenBSD might not boot." I'm dual booting with > Windows using Windows' boot loader first. You've created an OpenBSD MBR partition too far up your disk. It won't work in legacy mode. The BIOS

dhclient won't get any IP

2017-06-18 Thread Christer Solskogen
I'm running the latest snapshot, and I suspect that there is something wrong with dhclient. (or at least, that is the symptom) Jun 18 20:50:14 tugs dhclient[79331]: DHCPDISCOVER on re2 - interval 1 Jun 18 20:50:14 tugs dhclient[79331]: DHCPOFFER from 51.174.112.1 (00:02:00:01:00:01) Jun 18

Re: dhclient won't get any IP

2017-06-18 Thread Edgar Pettijohn
On 06/18/17 14:38, Christer Solskogen wrote: I'm running the latest snapshot, and I suspect that there is something wrong with dhclient. (or at least, that is the symptom) Jun 18 20:50:14 tugs dhclient[79331]: DHCPDISCOVER on re2 - interval 1 Jun 18 20:50:14 tugs dhclient[79331]: DHCPOFFER

Re: DHCP server for IPv6

2017-06-18 Thread Mike
On 6/18/2017 9:20 AM, mabi wrote: > Hello, > > Does anyone have any recommendations on which package to use on OpenBSD 6.1 > for a DHCP server for IPv6? AKFAIK the default dhcpd does not do IPv6. I've used both isc-dhcp (isc-dhcp-4.3.5) and kea (kea-1.1.0) packages on my home network as an IPv6

Re: spamd does not start

2017-06-18 Thread Leighton Sheppard
On Sun, Jun 18, 2017 at 05:35:13PM +, Stuart Henderson wrote: > On 2017-06-18, Leighton Sheppard wrote: > > I've just changed my mail relay from Exchange Online to Gmail, seems it was > > getting blocked. > > Quite likely - Microsoft's outbound mail relays

Re: Can't connect from StrongSWAN to OpenBSD's iked

2017-06-18 Thread Tim Stewart
theblo...@gmail.com writes: > Hello, > > I’ve been trying to create an IPSec VPN in my OpenBSD computer and > every time I connect my Android phone (running StrongSWAN) to the > server I get the following errors in the logs (running iked -dvvv): > >> ikev2_sa_responder_dh: invalid dh, size 4096

Re: dhclient won't get any IP

2017-06-18 Thread Christer Solskogen
On Sun, Jun 18, 2017 at 10:54 PM, Edgar Pettijohn wrote: > > What is the `host-name` that it claims to be invalid? > I have no idea. dhclient.conf is empty.

openiked configuration help: name, location and format of certificate and private key files

2017-06-18 Thread Agoston Toth
Hello, I would like to ask some help. It is not clear to me from the below man pages and I couldn't find answer on the net either: where shall I place the local certificate file (including the public key) and the private key if I would like to authenticate both sides with an X.509

Re: spamd does not start

2017-06-18 Thread Hrishikesh Muruk
Worked after I regenerated the key and crt file On Sun, Jun 18, 2017 at 3:16 PM, Hrishikesh Muruk wrote: > Thank you for the response. I restarted syslogd after using > > $ doas rcctl restart syslogd > syslogd(ok) > syslogd(ok) > > So it should pick up the new config.

DHCP server for IPv6

2017-06-18 Thread mabi
Hello, Does anyone have any recommendations on which package to use on OpenBSD 6.1 for a DHCP server for IPv6? AKFAIK the default dhcpd does not do IPv6. Regards, M.

Re: DNS hijacking (was Re: Is this an intrusion?)

2017-06-18 Thread Stuart Henderson
On 2017-06-17, Paul Suh wrote: > Folks,=20 > > My understanding of the way that this is done is by returning a CNAME = > when the ISP's DNS recursive DNS server would otherwise return a = > NXDOMAIN result, followed by a HTTP 302 when the browser attempts to = > reach the

guidelines for migration openldap directory to ldapd ?

2017-06-18 Thread Markus Rosjat
Hi there, I was wondering if there is something like that for migration an exisiting openLDAP directory to ldapd? I took a look at he config files and some stuff was basically the same information with diffrent syntax. The aim ist to make working with ldap authentication and opensmtp as

Re: spamd does not start

2017-06-18 Thread Hrishikesh Muruk
almost everything works...logging to /var/log/spamd still not happening though I have restarted syslogd with $ rcctl restart syslogd On Sun, Jun 18, 2017 at 4:52 PM, Leighton Sheppard < leigh...@openbsd.leighling.co.uk> wrote: > On Sun, Jun 18, 2017 at 04:36:06PM +0530, Hrishikesh Muruk wrote:

Re: spamd does not start

2017-06-18 Thread Hrishikesh Muruk
Thank you sir. That worked. I also restarted syslogd just in case it was required On Sun, Jun 18, 2017 at 5:19 PM, Leighton Sheppard < leigh...@openbsd.leighling.co.uk> wrote: > Try creating the file first: > > $ doas touch /var/log/spamd > $ doas chmod 640 /var/log/spamd > > > On Sun, Jun 18,

Re: Is this an intrusion?

2017-06-18 Thread Maurice McCarthy
On 17/06/17 15:01, Stuart Henderson wrote: > On 2017-06-17, Maurice McCarthy wrote: > > On 17/06/17 09:27, Stuart Henderson wrote: > >> On 2017-06-16, Maurice McCarthy wrote: > >> > Ooops! ... Well, I moved the .Xauthority file aside and restarted X to >

Re: spamd does not start

2017-06-18 Thread Hrishikesh Muruk
Thank you for the response. I restarted syslogd after using $ doas rcctl restart syslogd syslogd(ok) syslogd(ok) So it should pick up the new config. Perhaps /var/log/spamd is not created because nothing has been logged by spamd (since it is not running) When I run spamd with debug (thanks for

Fwd: Boot issue 6.1

2017-06-18 Thread Martin Oppegaard
-- Forwarded message -- From: Martin Oppegaard Date: Sun, Jun 18, 2017 at 10:56 AM Subject: Re: Boot issue 6.1 To: Donald Allen Now I've been able to look at this more. My computer doesn't support booting from USB, so I

Re: openvpn multihome on OpenBSD?

2017-06-18 Thread Stuart Henderson
On 2017-06-18, Harald Dunkel wrote: > Hi Stuart, > > On 06/17/17 17:09, Stuart Henderson wrote: >> >> It's trying to use a single socket for v4 and v6. That is never going >> to work on OpenBSD. >> >> Try "bind ipv6only" and see if that helps. >> > > Currently I have 2 openvpn

Re: spamd does not start

2017-06-18 Thread Leighton Sheppard
I've just changed my mail relay from Exchange Online to Gmail, seems it was getting blocked. Hopefully this works. On Sun, Jun 18, 2017 at 12:49:43PM +0100, Leighton Sheppard wrote: > Try creating the file first: > > $ doas touch /var/log/spamd > $ doas chmod 640 /var/log/spamd > > > On Sun,

Re: Is this an intrusion?

2017-06-18 Thread Maurice McCarthy
Just for info: So I rang Virgin to ask them to turn off their ANES for me (Advanced Network Error Search). 2 phone calls, 57 minutes and 7 advisors later they managed to find someone who knew what I was talking about. That's why I don't phone them unless I see no option. Now if I run with their

Re: ospf gre carp

2017-06-18 Thread Stuart Henderson
On 2017-06-18, Marko Cupać wrote: > Hi, > > I have setup similar to: > > R1 > bnx0--bnx1 >| |R3 > LAN1---carp0 carp1--em0--em2---LAN2 >| | > bnx0--bnx1 > R2 > > How

Re: ospf gre carp

2017-06-18 Thread Marko Cupać
On Sun, 18 Jun 2017 09:52:13 + (UTC) Stuart Henderson wrote: > On 2017-06-18, Marko Cupać wrote: > > Hi, > > > > I have setup similar to: > > > > R1 > > bnx0--bnx1 > >| |R3 > > LAN1---carp0