Re: lost pf state - disappeared before expiration?

2020-05-18 Thread Strahil Nikolov
On May 18, 2020 1:58:49 AM GMT+03:00, "Paul B. Henson" wrote: >I'm trying to set a longer timeout on a udp state, and for some reason >it >seems to be disappearing before the expiration 8-/. > >There are 3 rules involved: > >pass in quick on vlan110 proto udp from any to port = 9430 tag VOIP_UDP

Re: RT_TABLEID_MAX behavior changed?

2020-05-18 Thread Claudio Jeker
On Sun, May 17, 2020 at 10:16:28PM +0300, Bars Bars wrote: > it seems the things work just when i rebuild userland completely (im pretty > sure i did it only with compiling kernel in past, correct me if i wrong?). > > btw, questions for the Devs. > Looking at the cvs history, i really worried

Re: RT_TABLEID_MAX behavior changed?

2020-05-18 Thread Bars Bars
Hi, Claudio I mean these in sys/socket.h /* * Maximum number of alternate routing tables */ #define RT_TABLEID_MAX 8000 #define RT_TABLEID_BITS 16 #define RT_TABLEID_MASK 0x пн, 18 мая 2020 г. в 10:18, Claudio Jeker : > On Sun, May 17, 2020 at 10:16:28PM +0300,

Re: RT_TABLEID_MAX behavior changed?

2020-05-18 Thread Bars Bars
To be more convinient, when i said about that its limit became shorter its relevant to sys/net/rtable.c struct dommp. struct dommp { unsigned int limit; /* * Array to get the routing domain and loopback interface related to * a routing table. Format:

Re: Why isn't src included with OpenBSD? (documentation)

2020-05-18 Thread Ingo Schwarze
Hi Andras, Andras Farkas wrote on Mon, May 18, 2020 at 01:07:36PM -0400: > Lots of documentation is unavailable outside of the /usr/src tree. It isn't "lots", it's only a tiny number of documents. > that the answers could be found in > Fsck_ffs - The UNIX File System Check Program > This is

Re: Why isn't src included with OpenBSD? (documentation)

2020-05-18 Thread Marc Espie
On Mon, May 18, 2020 at 01:07:36PM -0400, Andras Farkas wrote: > I saw in fsck_ffs.8 > https://man.openbsd.org/fsck_ffs.8 > that the answers could be found in > Fsck_ffs - The UNIX File System Check Program > This is perfectly fine. Not every piece of information belongs in a > man page. Man

dmesg spam bsd: cannot forward from 2601:283... to fe80:8... nxt 58 received on inteface 8

2020-05-18 Thread Daniel Melameth
I've tracked this down to a misbehaving Chrome OS device. Since I cannot fix the issue with the device itself (already on the latest version), what's the best way to keep this seemingly broken device from spamming dmesg and related on my IPv6/v4 router? Thank you!

Re: ULTRASPARC vs ARMv7 (Sun Netra T1 vs Orange PI ONE) from ONLY a security point of view

2020-05-18 Thread Riccardo Mottola
Hi, Глеб Рахмановский wrote: >   > Dear Gurus, > Please let me know, are there any advantages of UltraSparc IIe over Cortex A7 > AllWinner H3 for a secure communication host ignoring a factor of power > efficiency, size and loud noise? > IMHO the only feature OpenBSD can benefit from

Re: Why isn't src included with OpenBSD? (documentation)

2020-05-18 Thread Frank Beuth
On Mon, May 18, 2020 at 11:10:59AM -0600, Theo de Raadt wrote: People too young to have grown up with Unix need this sort of documentation. We can't live on man pages alone. YES WE CAN. Proposed release poster design: Puffy with puffed out cheeks & paper sticking out of his mouth.

Re: Why isn't src included with OpenBSD? (documentation)

2020-05-18 Thread Christopher Turkel
On Monday, May 18, 2020, Frank Beuth wrote: > On Mon, May 18, 2020 at 11:10:59AM -0600, Theo de Raadt wrote: > >> People too young to have grown up with Unix need this sort of >>> documentation. We can't live on man pages alone. >>> >> >> YES WE CAN. >> > > Proposed release poster design: > >

[www] wrong release date of rpki-client 6.6p2

2020-05-18 Thread Alex Naumov
Hey, there is a typo on /cvs/www/rpki-client/portable.html Cheers, Alex Index: portable.html === RCS file: /cvs/www/rpki-client/portable.html,v retrieving revision 1.8 diff -u -p -r1.8 portable.html --- portable.html 21 Apr 2020

ULTRASPARC vs ARMv7 (Sun Netra T1 vs Orange PI ONE) from ONLY a security point of view

2020-05-18 Thread Глеб Рахмановский
Dear Riccardo,    >MIPS is in a little better shape, but there too you need to resort to Little >Endian if you want something cheap as ARM.   Are all:   https://www.openbsd.org/octeon.html little endian? According to: https://www.debian.org/releases/stretch/ppc64el/ch02s01.html.en 32bit MIPS

Re: Why isn't src included with OpenBSD? (documentation)

2020-05-18 Thread Theo de Raadt
Andras Farkas wrote: > Not sure whether to post this on misc@ or tech@, so trying misc@ first: > > Why isn't src included on OpenBSD, perhaps as an install fileset? Because then we'd need to adjust the disk-layout expectations on every architecture, and consider and match a variety of build

segmentation fault when useing libmongoc call to strlen

2020-05-18 Thread Bars Bars
Hi, Really often application core dumped, when sending mongodb query with some mongoc driver writing function like insert or update, or even when iterating cursor returned frome the mongoc driver. Moreover, it may complete with no issues with the absolutely identical queries. Following the gdb

Why isn't src included with OpenBSD? (documentation)

2020-05-18 Thread Andras Farkas
Not sure whether to post this on misc@ or tech@, so trying misc@ first: Why isn't src included on OpenBSD, perhaps as an install fileset? Lots of documentation is unavailable outside of the /usr/src tree. For example, today I had a server mishap which had me using fsck_ffs after. I needed to

ULTRASPARC vs ARMv7 (Sun Netra T1 vs Orange PI ONE) from ONLY a security point of view

2020-05-18 Thread Михаил Попов
>MIPS is in a little better shape, but there too you need to resort to Little >Endian if you want something cheap as ARM. Dear Riccardo,  Are all: https://www.openbsd.org/octeon.html little endian? According to: https://www.debian.org/releases/stretch/ppc64el/ch02s01.html.en 32bit MIPS

sha256 of the install67.img is missing in the snapshot

2020-05-18 Thread Andre S
The sha256 checksum data of the install67.img file is missing in the snapshot.

Re: lost pf state - disappeared before expiration?

2020-05-18 Thread Paul B. Henson
On 5/17/2020 8:40 PM, Strahil Nikolov wrote: > What is your conf having as a timeout ? Both of the rules explicitly override the default timeout with a six minute rule level timeout: pass in quick on vlan110 proto udp from any to port = 9430 tag VOIP_UDP keep state (udp.multiple 360)

Re: Why isn't src included with OpenBSD? (documentation)

2020-05-18 Thread Ottavio Caruso
On Mon, 18 May 2020 at 18:07, Andras Farkas wrote: > > Not sure whether to post this on misc@ or tech@, so trying misc@ first: > > Why isn't src included on OpenBSD, perhaps as an install fileset? > Lots of documentation is unavailable outside of the /usr/src tree. > > For example, today I had a

Re: sha256 of the install67.img is missing in the snapshot

2020-05-18 Thread Theo de Raadt
Andre S wrote: > The sha256 checksum data of the install67.img file is missing in the > snapshot. Fixed.