Re: VMs as real hosts on the same network

2018-12-07 Thread Martin Sukany
could you post here your /etc/pf.conf rules? Dne 07. 12. 18 v 12:40 Mischa napsal(a): On 7 Dec 2018, at 12:32, mabi wrote: ‐‐‐ Original Message ‐‐‐ On Friday, December 7, 2018 11:43 AM, Mischa wrote: It might be as easy as adding: up cat /etc/hostname.bridge6

Re: Thinkpad T430 random power off while sleeping

2018-12-07 Thread Charles A Daniels
> I have a similar issue with the X220, the problem is a watchdog > timer, > that I suspect is in the Intel ME. It expires without being reset > and > forces the machine to restart. Or at least that is the cause of > that > happening on my X230's. I've ripped a few of them apart and >

Re: sh /etc/netstart interface counter intuitive behaviour with multiple inet aliases 6.4 and 6.3

2018-12-07 Thread Tom Smyth
Thanks Tom Smyth On Fri, 7 Dec 2018 at 13:09, Martin Pieuchot wrote: > > On 06/12/18(Thu) 22:49, Tom Smyth wrote: > > Hello, > > > > Im running a router with multiple ips on an interface using the > > inet alias > > > > issue: > > when commenting out configured aliases on hostname.if > > after

Re: VMs as real hosts on the same network

2018-12-07 Thread Mischa
> On 7 Dec 2018, at 11:35, mabi wrote: > > Hello, > > I am trying out VMM on an OpenBSD 6.4 server which has the following network > interfaces defined: > > [bnx0]+[bnx1]-->[trunk0]-->[vlan2] > [bnx0]+[bnx1]-->[trunk0]-->[vlan6]-->[bridge6] > > The vlan2 is for the internal (management)

Re: VMs as real hosts on the same network

2018-12-07 Thread mabi
‐‐‐ Original Message ‐‐‐ On Friday, December 7, 2018 12:57 PM, Martin Sukany wrote: > could you post here your /etc/pf.conf rules? Sure, it's actually the default OpenBSD 6.4 one as you can see below: # $OpenBSD: pf.conf,v 1.55 2017/12/03 20:40:04 sthen Exp $ # # See pf.conf(5)

VMs as real hosts on the same network

2018-12-07 Thread mabi
Hello, I am trying out VMM on an OpenBSD 6.4 server which has the following network interfaces defined: [bnx0]+[bnx1]-->[trunk0]-->[vlan2] [bnx0]+[bnx1]-->[trunk0]-->[vlan6]-->[bridge6] The vlan2 is for the internal (management) network and vlan6 for the public (internet) network. I manage my

Re: sh /etc/netstart interface counter intuitive behaviour with multiple inet aliases 6.4 and 6.3

2018-12-07 Thread Martin Pieuchot
On 06/12/18(Thu) 22:49, Tom Smyth wrote: > Hello, > > Im running a router with multiple ips on an interface using the > inet alias > > issue: > when commenting out configured aliases on hostname.if > after running sh /etc/netstart vio4 > > if you run ifconfig vio4 after the restart of the

Re: VMs as real hosts on the same network

2018-12-07 Thread mabi
‐‐‐ Original Message ‐‐‐ On Friday, December 7, 2018 11:43 AM, Mischa wrote: > It might be as easy as adding: up > > cat /etc/hostname.bridge6 > > == > > add vlan6 > up > > By default the bridge interface is not brought up. > You can also run: ifconfig bridge6 up

Re: VMs as real hosts on the same network

2018-12-07 Thread Mischa
> On 7 Dec 2018, at 12:32, mabi wrote: > > ‐‐‐ Original Message ‐‐‐ > On Friday, December 7, 2018 11:43 AM, Mischa wrote: > >> It might be as easy as adding: up >> >> cat /etc/hostname.bridge6 >> >> == >> >> add vlan6 >> up >> >> By default the bridge

Re: VMs as real hosts on the same network

2018-12-07 Thread mabi
‐‐‐ Original Message ‐‐‐ On Friday, December 7, 2018 12:40 PM, Mischa wrote: > The VLAN does require an IP address as far as I am aware. Thanks that worked. I now have network connectivity on my public VM VLAN. I saw that adding an IP to my VLAN interface automatically set the trunk

Renew/extend CA created with ikectl

2018-12-07 Thread Kim Zeitler
Hello, before I start getting creative with openssl(1) on my ikectl(8) created ca. Yesterday my ca certificate expired and I need to renew it (without loosing all the client certificates) Is there a recommended way of renewing the ca.crt created using ikectl ca create? I didn't find

Pass, gpg2, gpg

2018-12-07 Thread Lucas López
Hi everyone, I can not seem to find a solution to this. I like https://www.passwordstore.org/ and I am so gratefull to have it in OpenBSD as a package! I can deduce pass command uses gpg2 command which in turn uses gpg command. The issue is *gpg is always in batch mode*, so if I want to use

Re: relayd: Layer 7 proxy: forward failed

2018-12-07 Thread trondd
On Thu, December 6, 2018 12:04 pm, Leo Unglaub wrote: > Hi, > i am trying to use relayd as an outbound proxy. I am following the > manual page and also the book "Httpd and Relayd Mastery". I did this on > the latest release 6.4 and also on the latest snapshot to make sure this > was not already

Re: OpenBSD current & Firefox

2018-12-07 Thread Oriol Demaria
So seems that going back to default configuration fixed for a bit ublock. But adding lists seems to break it (I really don't have time to debug this further). Trying now with umatrix instead and seems to work without any issues. Just in case someone has the same problem. Regards, --- Oriol

Re: iked : pf.conf rule for outgoing traffic

2018-12-07 Thread Radek
> I'm confused how to replace "$some_address". Isn't it "(egress)" ? "(egress)" or your_WAN_IP On Fri, 7 Dec 2018 10:00:07 +0100 Thuban wrote: > * Stuart Henderson le [06-12-2018 13:44:50 +]: > > On 2018-12-06, Thuban wrote: > > > * Thuban le [02-12-2018 19:16:09 +0100]: > > >> Hi, > >

Re: default terminal autoload disable afater xenodm login

2018-12-07 Thread Denis
.spectrwm.conf should contain or commented it out: ... autorun = ws[1]:/usr/X11R6/bin/xterm -bg black -fg white +sb ... to fix unexpected terminals load after xenodm login. On 12/7/2018 7:59 PM, Anthony Campbell wrote: > On 07 Dec 2018, Denis wrote: >> Additional terminal loads by spectrwm

Re: sh /etc/netstart interface counter intuitive behaviour with multiple inet aliases 6.4 and 6.3

2018-12-07 Thread Radek
I have tried '-inet' on 6.3/i386 firewall/GW/VPN/etc.. adding 4 aliases (public IPs) and then removing 2 of them. If_driver was vr(4). I did it few times over SSH without any meltdown of the network. Everything seems to work as expected. $ cat /etc/hostname.vr0 -inet inet A.B.C.77 255.255.254.0

Re: default terminal autoload disable afater xenodm login

2018-12-07 Thread Anthony Campbell
On 07 Dec 2018, Denis wrote: > Additional terminal loads by spectrwm because of config settings. > > Fixed it already. > > On 12/6/2018 9:33 PM, Denis wrote: > > After changing X Display Manager to xenodm + spectrwm as win manager I > > have an additional terminal load just after xenodm login. >

Re: sh /etc/netstart interface counter intuitive behaviour with multiple inet aliases 6.4 and 6.3

2018-12-07 Thread Florian Obser
One possible workaround is putting -inet as the first line in /etc/hostname.vio4 It will nuke all v4 addresses and re-add them. Depending on your usecase this might work for you or it might melt down your whole network ;) On Thu, Dec 06, 2018 at 10:49:01PM +, Tom Smyth wrote: > Hello, > >

Re: sh /etc/netstart interface counter intuitive behaviour with multiple inet aliases 6.4 and 6.3

2018-12-07 Thread tomr
On 12/8/18 6:09 AM, Tom Smyth wrote: > Hi Florian, > > i had the inet address as the first line ... > and then all the inet alias lines were after that... > the behaviour was as described... > Thanks for the suggestion though > On Fri, 7 Dec 2018 at 18:48, Florian Obser wrote: I think

Re: sh /etc/netstart interface counter intuitive behaviour with multiple inet aliases 6.4 and 6.3

2018-12-07 Thread Tom Smyth
Hi Florian, i had the inet address as the first line ... and then all the inet alias lines were after that... the behaviour was as described... Thanks for the suggestion though On Fri, 7 Dec 2018 at 18:48, Florian Obser wrote: > > One possible workaround is putting > -inet as the first line in

Re: ikev2 and road warriors setup

2018-12-07 Thread Radek
Hello, I am still almost in the same point. If I want to reach my GW88_LAN I have to check "use default gateway on remote network" box (Windows roadwarrior), but this option makes me reaching the internet through GW88. I want to use VPN GW88 to access 192.168.2.0/24 ONLY and roadwarrior's

Re: Pass, gpg2, gpg

2018-12-07 Thread Kai Wirt
On Fri, Dec 07, 2018 at 04:33:36PM +0100, Lucas López wrote: > > I can deduce pass command uses gpg2 command which in turn uses gpg command. > The issue is *gpg is always in batch mode*, so if I want to use pass, I > have to manually decrypt something directly using gpg2 (gpg2 -d bla -> > prompt

Re: Pflow granularity

2018-12-07 Thread Thomas Boernert
Hi have you tried the diff by yourself ? i cant remember. someone else was working on that at the same time bck then, if i remember correctly. But it might still work. If it does, report back, i might pick the topic up again. I patched it yesterday night and it seems work. i have an

OpenBSD install on a g5 imac power pc

2018-12-07 Thread Mehma Sarja
Installed openbsd on a model A1058, imac g5. The install was uneventful. However, I cannot boot to it. I've tried what the documentation says for booting off the HD using open prom and the error is that /bsd does not exist. I'm going off memory now. Is anyone running off a g5? Yudhvir

net/unifi fails to start

2018-12-07 Thread Jordan Geoghegan
Hello, I just got my hands on some Ubiquity kit, and I wanted to try running the Unifi Controller software on OpenBSD. I installed the port (there's no unifi package due to licence issues). When I start unifi (rcctl start unifi) it seems to start ok, but unfortunately the web interface

Re: radeon driver bug?

2018-12-07 Thread 岡本健二
I installed Ubuntu 18.04 to a AMD 6450 graphic card, and played Jahshaka. It has mesa version 18.2, and runs Jahshaka very smoothly. The colors I reported before are same in this machine, so that report was not correct. Kenji 2018年12月7日(金) 11:09 岡本健二 : > I checked mesa-18.3.0 sources under

Re: default terminal autoload disable afater xenodm login

2018-12-07 Thread Denis
Additional terminal loads by spectrwm because of config settings. Fixed it already. On 12/6/2018 9:33 PM, Denis wrote: > After changing X Display Manager to xenodm + spectrwm as win manager I > have an additional terminal load just after xenodm login. > > I've disabled 'xconsole' in

Re: iked : pf.conf rule for outgoing traffic

2018-12-07 Thread Thuban
* Stuart Henderson le [06-12-2018 13:44:50 +]: > On 2018-12-06, Thuban wrote: > > * Thuban le [02-12-2018 19:16:09 +0100]: > >> Hi, > >> I need help to write a correct rule in pf.conf. > >> > >> I want : > >> > >> A -> B --> web > >> > >> The appearing IP of A is the B's one on