Re: deep packet inspection over no TLS/SSL traffic

2022-05-09 Thread Stuart Henderson
On 2022-05-09, Riccardo Giuntoli wrote: > I've found a distfiles on the fr openbsd mirror: > > https://ftp.fr.openbsd.org/pub/OpenBSD/distfiles/ndpi-4.2.tar.gz > > Someone try it? This is used by ntopng, we don't have anything to use this to make packet forwarding decisions (anyway, by the time

Re: deep packet inspection over no TLS/SSL traffic

2022-05-09 Thread Stuart Henderson
On 2022/05/09 10:46, Riccardo Giuntoli wrote: > Yes I know. With rdomains and pair it would be nice to write a daemon > that inspect L7 search for bittorrent identification and take action > above those packets.  > Yes. DMCA is a complete overkill. Vultr applies it. When business will It doesn't

Re: Modern RFC3442 (Classless DHCP Static Routes)

2022-05-09 Thread Stuart Henderson
On 2022-05-09, Stuart Henderson wrote: >>> >>> That doesn't seem like correct behavior (the ISC version certainly >>> offers both). Both options should be sent if configured, it's up to >>> the client to properly handle this. >>> Clients that are rfc3442 compliant will install the option 121

Re: Atom code environment

2022-05-09 Thread Alexis
jeanfrancois writes: Specifically the multiline work is very helpful that ought to be enough. Have I missed other editors with this ? There are extensions for both Vim and Emacs for this, e.g.: https://github.com/mg979/vim-visual-multi https://github.com/magnars/multiple-cursors.el

Re: deep packet inspection over no TLS/SSL traffic

2022-05-09 Thread Riccardo Giuntoli
Yes I know. With rdomains and pair it would be nice to write a daemon that inspect L7 search for bittorrent identification and take action above those packets. Yes. DMCA is a complete overkill. Vultr applies it. When business will grow I will host in some data center a pair of servers and do vmd

Re: Atom code environment

2022-05-09 Thread Fabio Martins
On Monday, May 9, 2022, Alexis wrote: > > jeanfrancois writes: > > Specifically the multiline work is very helpful that ought to be >> enough. Have I missed other editors with this ? >> > > There are extensions for both Vim and Emacs for this, e.g.: > > https://github.com/mg979/vim-visual-multi

Re: Modern RFC3442 (Classless DHCP Static Routes)

2022-05-09 Thread Stuart Henderson
On 2022-05-06, Florian Obser wrote: > On 2022-05-06 10:28 -04, Sonic wrote: >> On Fri, May 6, 2022 at 7:18 AM Florian Obser wrote: >>> Also, dhcpd(8) does not even hand out option 3 when option 121 is >>> configured. >> >> That doesn't seem like correct behavior (the ISC version certainly >>

Re: Modern RFC3442 (Classless DHCP Static Routes)

2022-05-09 Thread Sonic
On Mon, May 9, 2022 at 6:03 AM Stuart Henderson wrote: > On 2022-05-09, Stuart Henderson wrote: > > ...so the correct configuration is clear: list both a 0.0.0.0/0 > classless route and "option routers", and it should work for all > cases. Yes. The server sends both, the clients that handle

Re: deep packet inspection over no TLS/SSL traffic

2022-05-09 Thread Riccardo Giuntoli
Correct it simple pass through interfaces: root@arnuwanda:/etc# ipsecctl -sa | grep 94.72.143.163 flow esp in proto gre from 94.72.143.163 to 65.20.98.172 peer 94.72.143.163 srcid ASN1_DN//C=ES/ST=Madrid/L=Madrid/O=Telecom Lobby/OU=VPNC/CN= choopa.telecomlobby.com dstid

WhatsApp Web in Chromium under OpenBSD 7.1

2022-05-09 Thread Federico Giannici
I'm not able to use WhatsApp Web in Chromium under OpenBSD 7.1 (amd64), no login page appears. Is there something bad in my configuration or is this a known problem? Thanks.

Re: WhatsApp Web in Chromium under OpenBSD 7.1

2022-05-09 Thread Maurice McCarthy
At home, once I reconnected to my own wifi the whatsapp QR reader login came up. After that the linking of Chrome on OpenBSD device went as expected. Before the reconnection to wifi there was no login whatsoever. Good Luck.

hw.perfpolicy behavior on desktop/server

2022-05-09 Thread Atanas Vladimirov
Hi Guys, I'm running -current. Recently I noticed (not sure when it changed) that my CPU is not throttling anymore. The `hw.perfpolicy` is set to auto and `hw.setperf` is always at 100%. I red that there was a change in 7.1: - Changed the power management sysctl(8) hw.perfpolicy to "auto" at

Re: hw.perfpolicy behavior on desktop/server

2022-05-09 Thread Stuart Henderson
On 2022-05-09, Atanas Vladimirov wrote: > Hi Guys, > > I'm running -current. > Recently I noticed (not sure when it changed) that my CPU is not > throttling anymore. The `hw.perfpolicy` is set to auto and `hw.setperf` > is always at 100%. I red that there was a change in 7.1: > > - Changed the

Re: WhatsApp Web in Chromium under OpenBSD 7.1

2022-05-09 Thread Caspar Schutijser
On Mon, May 09, 2022 at 01:16:15PM +0200, Federico Giannici wrote: > I'm not able to use WhatsApp Web in Chromium under OpenBSD 7.1 (amd64), no > login page appears. > Is there something bad in my configuration or is this a known problem? > Thanks. That's because by default WebAssembly is not

Re: WhatsApp Web in Chromium under OpenBSD 7.1

2022-05-09 Thread Federico Giannici
On 5/9/22 18:40, Caspar Schutijser wrote: On Mon, May 09, 2022 at 01:16:15PM +0200, Federico Giannici wrote: I'm not able to use WhatsApp Web in Chromium under OpenBSD 7.1 (amd64), no login page appears. Is there something bad in my configuration or is this a known problem? Thanks. That's

Re: hw.perfpolicy behavior on desktop/server

2022-05-09 Thread Atanas Vladimirov
On 2022-05-09 20:17, Stuart Henderson wrote: Currently, you can either set it manually to low speed (hw.perfpolicy=manual, hw.setperf=0), modify the kernel (e.g. with the diff below), or use obsdfreqd from packages. The latter is only in -current packages not 7.1, but it could be built from

Re: WhatsApp Web in Chromium under OpenBSD 7.1

2022-05-09 Thread Gleydson Soares
> Now the question is: why WebAssembly is disabled by default under OpenBSD? > Is there any contraindication to activate it? do you want to run someone else's binary on your browser? by disabling WebAssembly, the browser will have less shit running to handle therefore decreases the attack

Re: Modern RFC3442 (Classless DHCP Static Routes)

2022-05-09 Thread Sonic
Dealing with broken clients can be handled with separate groups or even "deny booting;" instead of breaking the dhcp server.

Re: WhatsApp Web in Chromium under OpenBSD 7.1

2022-05-09 Thread Bryan Steele
On Mon, May 09, 2022 at 06:50:16PM +0200, Federico Giannici wrote: > On 5/9/22 18:40, Caspar Schutijser wrote: > > On Mon, May 09, 2022 at 01:16:15PM +0200, Federico Giannici wrote: > > > I'm not able to use WhatsApp Web in Chromium under OpenBSD 7.1 (amd64), no > > > login page appears. > > > Is

Re: OpenBSD ports require xbase set - still true?

2022-05-09 Thread Theo de Raadt
The people who do the work make the decisions. Steffen Nurpmeso wrote: > Hello. > > Just a rant, not for ports@. > I am installing OpenBSD 7.1 right now; this is only a VM, and > i want to create / manage ports there. > Until now whenever i wanted to do this i had to install xbase, > otherwise

Re: OpenBSD ports require xbase set - still true?

2022-05-09 Thread Theo de Raadt
I looked very closely, it started like this "Just a rant" And I knew the email was coming from a self-centered individual who is unhappy with the entirely volunteer work done by others, yet not unhappy enough to quit OpenBSD and switch to another operating sytem where there will be similar

Re: Firefox and stuttering USB audio

2022-05-09 Thread Michael Stolovitzsky
On 5/6/22 10:29, Courtney wrote: Hello all, [snip] * Setting dom.ipc.processCount to a lower number in about:config * Muddled with sndiod -b and -z flags * Set softdep,noatime for my different partitions in fstab (NVMe drive) * Tried with/without SMT (Intel 10700k) * Set some sysctl flags:

Re: OpenBSD ports require xbase set - still true?

2022-05-09 Thread Stuart Henderson
On 2022-05-09, Steffen Nurpmeso wrote: > Until now whenever i wanted to do this i had to install xbase, > otherwise the port makefile complained some. (I am afraid i have > forgotten the details.) Is this still true? Yes. We don't particularly want to deal with reports of build failures or

OpenBSD ports require xbase set - still true?

2022-05-09 Thread Steffen Nurpmeso
Hello. Just a rant, not for ports@. I am installing OpenBSD 7.1 right now; this is only a VM, and i want to create / manage ports there. Until now whenever i wanted to do this i had to install xbase, otherwise the port makefile complained some. (I am afraid i have forgotten the details.) Is

Re: time drift in OpenBSD in proxmox (qemu-kvm) guest

2022-05-09 Thread Steffen Nurpmeso
Stuart Henderson wrote in : |On 2022/04/15 22:02, Tom Smyth wrote: ... |Thanks for the suggestions - since the change I made in the last mail |("I've changed mine to acpihpet0 and it seems much happier", i.e. setting |the kern.timecounter.hardware sysctl to acpihpet0, based on Stefan's

Re: OpenBSD ports require xbase set - still true?

2022-05-09 Thread Steffen Nurpmeso
Theo de Raadt wrote in <36104.1652132...@cvs.openbsd.org>: |The people who do the work make the decisions. Ok i will at least look what i was talking about. |Steffen Nurpmeso wrote: | |> Hello. |> |> Just a rant, not for ports@. |> I am installing OpenBSD 7.1 right now; this is only a

Re: deep packet inspection over no TLS/SSL traffic

2022-05-09 Thread deich...@placebonol.com
On May 9, 2022 2:16:51 AM MDT, Stuart Henderson wrote: > SNIP > (anyway, by the time you have used DPI >to detect the protocol, it is too late to make a decision on packet >routing). SNIP Well, not necessarily true, imagine GCHQ ... Just saying Hope you are doing well, diana

Re: deep packet inspection over no TLS/SSL traffic

2022-05-09 Thread Riccardo Giuntoli
I know. But yes it is to not get provider fees or shutdown. When I'll have more fees from my service, a rural wireless service provider, I'll acquire space in some IXP and then mount a vmd based host. >Hope you are doing well, Fighting hard because I'm a victim of human trade. Kindly regards,