Re: help needed with httpd.conf and rewrite directive

2021-01-06 Thread John McGuigan
httpd's regex is based on Lua's, the following site will help you figure it out: https://riptutorial.com/lua/example/20315/lua-pattern-matching Keep in mind that this list isn't really tolerant of those who just want pre-packaged solutions, you'll have to put in some elbow work. On Wed, Jan 6,

Re: help needed with httpd.conf and rewrite directive

2021-01-07 Thread John McGuigan
rite "/sendy/l.php?i=$1" I didn't hear back if it worked or not though. John On Thu, Jan 7, 2021 at 2:44 PM Christian Weisgerber wrote: > On 2021-01-07, John McGuigan wrote: > > > httpd's regex is based on Lua's, the following site will help you figure > it ou

Re: Security & Compliance - A/V

2020-11-25 Thread John McGuigan
I've seen people install ClamAV on an OpenBSD box and have it do a filesystem scan on a cron job just to meet audit requirements... On Wed, Nov 25, 2020 at 3:23 PM Brogan Beard wrote: > > In the enterprise context, there are often extensive security compliance > rules, which include but are not

A bridge(4) too far, time to switch(4)?

2020-12-17 Thread John McGuigan
Howdy misc, A few months ago I posted some issues I was having with switch(4) on my APU2: https://marc.info/?t=16039908201=1=2 I've come to the conclusion that maybe switch(4) isn't as mature as I thought, or perhaps, I'm just using it wrong. At the time I was convinced that bridge(4) was

Re: APU4 hardware network interfaces tied together

2020-11-16 Thread John McGuigan
On Mon, Nov 16, 2020, 6:05 PM Stuart Henderson wrote: > > bridge (and theoretically switch but I never got it to do anything > useful) make a group of ports act like a network switch (maybe with > filtering between the ports). > I've been having issues with switch (4) as well... The reason I

Re: Issues converting from bridge(4) to switch(4)

2020-10-29 Thread John McGuigan
000 match type OXM length 24 (padded to 26) ox match class OPENFLOW_BASIC type IN_PORT hasmask no length 4 2 ox match class OPENFLOW_BASIC type META hasmask no length 8 0 On Thu, Oct 29, 2020 at 11:22 AM Tom Smyth wrote: > > what output does > switchctl monitor > > gi

Re: sd0-n vs wd0-n

2020-10-30 Thread John McGuigan
Ahoy! Two things that jump to mind are weirdness with Apple hardware (not sure this is the case or not) but I recall that in Bootcamp mode the EFI displays IDE devices instead of SATA in some cases. I remember Theo(?) mentioning this about a MacBookAir some time ago. The other is if you've

Re: sd0-n vs wd0-n

2020-10-30 Thread John McGuigan
> I remember Theo(?) mentioning this about a MacBookAir some time ago. Oops, that was jsg, sorry Theo: http://www.undeadly.org/cgi?action=article=20130608064453

Issues converting from bridge(4) to switch(4)

2020-10-29 Thread John McGuigan
Howdy misc, I have an APU2 with the following configuration under 6.8: em0 = WAN em1 = bridge0 LAN em2 = bridge0 LAN vether = 10.0.0.1 prometheus$ cat /etc/hostname.bridge0 add vether0 add em1 add em2 up prometheus$ cat /etc/hostname.vether0 inet 10.0.0.1 255.255.255.0 10.0.0.255 I have dhcpd

Re: Issues converting from bridge(4) to switch(4)

2020-10-29 Thread John McGuigan
autoselect (none) status: no carrier prometheus$ cat /etc/hostname.em0 dhcp prometheus$ cat /etc/hostname.em1 up prometheus$ cat /etc/hostname.em2 up On Thu, Oct 29, 2020 at 11:10 AM Tom Smyth wrote: > > what is your ifconfig em0 > ifconfig em1 > ? > > On Thu, 29 Oct 2020 at 17

Re: Issues converting from bridge(4) to switch(4)

2020-11-06 Thread John McGuigan
After reading through the switch section of the ifconfig manpage I changed the line in /etc/hostname.switch0 from: add vether0 to: addlocal vether0 Unfortunately, I'm still having the same issue, I can see ARP and DHCP packets from the client computer on em1, vether0 and switch0, and can see

Re: Issues converting from bridge(4) to switch(4)

2020-11-06 Thread John McGuigan
ch0 or em1 however. John On Fri, Nov 6, 2020 at 3:21 PM John McGuigan wrote: > > After reading through the switch section of the ifconfig manpage I > changed the line in /etc/hostname.switch0 from: > > add vether0 > > to: > > addlocal vether0 > > Unfortunat

Re: pf: block drop not working

2021-05-05 Thread John McGuigan
I think you've used "black_hole" and "black_whole" as table names. They should all be the same. John On Wed, May 5, 2021, 5:18 AM Axel Rau wrote: > Hi all, > > in pf.conf, I have at the beginning: > - - - > table persist file "/etc/pf/black_hole.txt" > block drop in quick on $red_if from