Re: ikev2 and road warriors setup

2018-11-05 Thread Kim Zeitler
Hello Radek, On 11/2/18 10:16 PM, Radek wrote: Thank you for your response, Following your suggestion I removed IP from enc0 and changed iked.conf as below: $ cat /etc/iked.conf dns1 = "8.8.8.8" dns2 = "8.8.4.4" ikev2 "roadWarrior" ipcomp esp \ from 0.0.0.0/0 to 0.0.0.0/0 \

colorls: How to make the blue bright for readability, and a note about its origins

2018-11-05 Thread Joseph Mayer
Hi, This is how to make OpenBSD's colorls show directories bright blue, instead of dark blue which may be too dark to be readable on some screens: export LSCOLORS="Ex" As pointed out elsewhere colorls is taken in use as default ls by: alias ls="colorls -G" The colorls port [1] is

Re: [OpenIKED] Is it impossible to differentiate the policies by dstid?

2018-11-05 Thread 雷致强
All incoming connections go to “redheart” policy. “blackjack” users cannot connect. I’m using 6.4. # iked -dv set_policy: could not find pubkey for /etc/iked/pubkeys/fqdn/blackjack.local ikev2 "blackjack" passive esp inet from 0.0.0.0/0 to 10.0.0.2 local 45.32.34.115 peer any ikesa

sessioninfo 70b1fa4b721bb9c9332c513227c838a520d2772c

2018-11-05 Thread Heinrich Rebehn
sessioninfo 70b1fa4b721bb9c9332c513227c838a520d2772c

Re: Persistent flags for disabled daemons?

2018-11-05 Thread Stuart Henderson
On 2018-11-04, John Long wrote: > On Sun, 2018-11-04 at 10:46 +0100, Antoine Jacoutot wrote: >> On Sun, Nov 04, 2018 at 03:57:30AM +0100, Klemens Nanni wrote: >> > On Sun, Nov 04, 2018 at 12:41:17AM +, John Long wrote: >> > > If I use rcctl set to set minidlna's flags to -R it seems it will

ldap search fails with Let's Encrypt certificate

2018-11-05 Thread Joel Carnat
Hi, I'm using ldap(1) to query a remote Synology Directory Server (OpenLDAP 2.4.x). Unfortunately, it fails saying: TLS failed: handshake failed: error:14004410:SSL routines:CONNECT_CR_SRVR_HELLO:sslv3 alert handshake failure ldap: LDAP connection failed When I use the OpenLDAP

Re: ldap search fails with Let's Encrypt certificate

2018-11-05 Thread Joel Carnat
Le 05/11/2018 13:48, Stuart Henderson a écrit : On 2018-11-05, Joel Carnat wrote: Hi, I'm using ldap(1) to query a remote Synology Directory Server (OpenLDAP 2.4.x). Unfortunately, it fails saying: TLS failed: handshake failed: error:14004410:SSL routines:CONNECT_CR_SRVR_HELLO:sslv3

Re: Reduced network performance since installing 6.4

2018-11-05 Thread Tony Sarendal
Hola, Unrelated to wifi, I have seen a dramatic drop in forwarding performance in 6.4 and later. I run some basic performance tests to verify the releases before we deploy them. For the same test on the same hardware I have this: Release, pps snapshot, 340k 6.4, 340k 6.3, 450k 6.2, 430k 6.1,

Re: ldap search fails with Let's Encrypt certificate

2018-11-05 Thread Stuart Henderson
On 2018-11-05, Joel Carnat wrote: > Hi, > > I'm using ldap(1) to query a remote Synology Directory Server (OpenLDAP > 2.4.x). > Unfortunately, it fails saying: >TLS failed: handshake failed: error:14004410:SSL > routines:CONNECT_CR_SRVR_HELLO:sslv3 alert handshake failure >ldap: LDAP

Re: colorls: How to make the blue bright for readability, and a note about its origins

2018-11-05 Thread Chris Bennett
On Mon, Nov 05, 2018 at 08:53:58AM +, Joseph Mayer wrote: > Hi, > > This is how to make OpenBSD's colorls show directories bright blue, > instead of dark blue which may be too dark to be readable on some > screens: > > export LSCOLORS="Ex" > > As pointed out elsewhere colorls is taken

Re: Persistent flags for disabled daemons?

2018-11-05 Thread John Long
On Mon, 2018-11-05 at 11:55 +, Stuart Henderson wrote: > On 2018-11-04, John Long wrote: > > On Sun, 2018-11-04 at 10:46 +0100, Antoine Jacoutot wrote: > > > On Sun, Nov 04, 2018 at 03:57:30AM +0100, Klemens Nanni wrote: > > > > On Sun, Nov 04, 2018 at 12:41:17AM +, John Long wrote: > > >

6.4 - Unable to boot after successfully installed

2018-11-05 Thread Luthing
Hello there, I'm facing a strange issue and I need help to fix it. I created a bootable USB key using Rufus3.3 (Windows) and I successfully installed OpenBSD 6.4 on my Dell server. After the installation is done, I cannot boot on my system... I can see the boot> prompt but, just after the

Re: spamd and google smtp ips

2018-11-05 Thread William Ahern
On Sun, Nov 04, 2018 at 02:49:44PM -0800, Misc User wrote: > On 11/4/2018 2:25 PM, Mik J wrote: > > Hello Peter, > > > > Thank you for this article. > > Do you know why, and particularly Microsoft, use very random IPs to send > > mails. > > In that way, they make greylisting not as reliable as

Fw: Re: ikev2 and road warriors setup

2018-11-05 Thread Radek
Hello Kim, > Could you post your pf.conf? My VPN_server's(A.B.C.77/23) pf.conf is: (1) $ cat /etc/pf.conf set skip on {lo, enc} match in all scrub (no-df random-id max-mss 1310) match out on egress from lan:network to any nat-to egress #match out on egress from enc0:network to any nat-to

Re: colorls: How to make the blue bright for readability, and a note about its origins

2018-11-05 Thread Christian Weisgerber
On 2018-11-05, Joseph Mayer wrote: > This is how to make OpenBSD's colorls show directories bright blue, > instead of dark blue which may be too dark to be readable on some > screens: This is a general problem with the primitive 8/16-color system from ECMA-48 ("ANSI colors"). Some text colors

Re: ldap search fails with Let's Encrypt certificate

2018-11-05 Thread Stuart Henderson
On 2018/11/05 17:02, Joel Carnat wrote: > Le 05/11/2018 16:38, Stuart Henderson a écrit : > > On 2018-11-05, Joel Carnat wrote: > > > Le 05/11/2018 13:48, Stuart Henderson a écrit : > > > > On 2018-11-05, Joel Carnat wrote: > > > > > Hi, > > > > > > > > > > I'm using ldap(1) to query a remote

Re: ldap search fails with Let's Encrypt certificate

2018-11-05 Thread Stuart Henderson
On 2018-11-05, Joel Carnat wrote: > Le 05/11/2018 13:48, Stuart Henderson a écrit : >> On 2018-11-05, Joel Carnat wrote: >>> Hi, >>> >>> I'm using ldap(1) to query a remote Synology Directory Server >>> (OpenLDAP >>> 2.4.x). >>> Unfortunately, it fails saying: >>>TLS failed: handshake

Re: ldap search fails with Let's Encrypt certificate

2018-11-05 Thread Joel Carnat
Le 05/11/2018 16:38, Stuart Henderson a écrit : On 2018-11-05, Joel Carnat wrote: Le 05/11/2018 13:48, Stuart Henderson a écrit : On 2018-11-05, Joel Carnat wrote: Hi, I'm using ldap(1) to query a remote Synology Directory Server (OpenLDAP 2.4.x). Unfortunately, it fails saying: TLS

Re: 6.4 - Unable to boot after successfully installed

2018-11-05 Thread Misc User
On 11/5/2018 8:24 AM, Luthing wrote: Hello there, I'm facing a strange issue and I need help to fix it. I created a bootable USB key using Rufus3.3 (Windows) and I successfully installed OpenBSD 6.4 on my Dell server. After the installation is done, I cannot boot on my system... I can see

Re: ldap search fails with Let's Encrypt certificate

2018-11-05 Thread Joel Sing
On Monday 05 November 2018 17:02:50 Joel Carnat wrote: > Le 05/11/2018 16:38, Stuart Henderson a écrit : > > On 2018-11-05, Joel Carnat wrote: > >> Le 05/11/2018 13:48, Stuart Henderson a écrit : > >>> On 2018-11-05, Joel Carnat wrote: > TLS: > New, TLSv1/SSLv3, Cipher is

performance of intel multithreading

2018-11-05 Thread Kihaguru Gathura
Hi, >From a security standpoint, which platform will offer better performance solution in web and database now that OpenBSD multithreading is switched off for Intel? (Fujitsu PRIMEPOWER 250 - Version F - 2 X SPARC64 V 1.98 GHz) or (Fujitsu PRIMERGY RX300 S6 - 2 X Xeon 6 core 12 thread E5620 2.4

Re: performance of intel multithreading

2018-11-05 Thread Kihaguru Gathura
The PRIMERGY registers more cpu's a total of 24 when OpenBSD is installed On Tuesday, November 6, 2018, Kihaguru Gathura wrote: > Hi, > > From a security standpoint, which platform will offer better performance solution in web and database now that OpenBSD multithreading is switched off for

Re: spamd and google smtp ips

2018-11-05 Thread Misc User
On 11/4/2018 3:06 PM, Mik J wrote: Thank you Peter for this opinion. Misc User, these gmail, live, yahoo spams you're talking about are really comming from IP addresses that belong to them ? Because on my side it seems it's not the case. In my greylist right now I have

growfs(8) to lower offset

2018-11-05 Thread David Higgs
I read both the FAQ section and the growfs(8) man page but I am not yet confident that what I want to do is supported / safe. http://www.openbsd.org/faq/faq14.html#GrowPartition I started with a number of partitions and a bunch of free space. I later needed the free space and allocated a

Re: ikev2 and road warriors setup

2018-11-05 Thread Kim Zeitler
Good morning Radek, I have a suspicion ... For (1), (2) and (3) VPN is working just fine with Win7_warrior and puffy_warrior if they are connecting from A.B.C.0/23 (it does not matter if warrior has public IP or it is behind NAT). The rest of the world fails to connect the VPN_server. My