OSPFD on a VLAN Trunk Interface

2013-01-15 Thread MJ
for 10.1.8.0/22 should be 10.1.8.1 (vlan3 interface on box2), and so forth. -mj

Re: Pf with multi gateways

2013-02-13 Thread MJ
Best solution is ECMP combined with ifstated - you get double bandwidth until one link goes down, in which case it is automatically removed from the routing table until it comes up again. This is a pretty common setup in e.g. Top Of Rack (ToR) switching setups. I just wrote a blog post mentioning

Re: Millions of files in /var/www inode / out of space issue.

2013-02-19 Thread MJ
Which app are you running that is generating millions of tiny files in a single directory? Regardless, in this case OpenBSD is not the right tool for the job. You need either FreeBSD or a Solaris variant to handle this problem because you need ZFS. What limits does ZFS have?

Re: EIGRP implementation?

2013-02-21 Thread MJ
IGRP is a 28 year old routing protocol from the stone ages, no wonder it was retired. EIGRP is a bit more modern ;-) Cisco won't be discontinuing EIGRP anytime soon; it's the preferred routing protocol for building DMVPNs and Cisco DMVPN is a very widely used technology. Cisco definitely

strange bash (prompt) problem

2013-03-19 Thread MJ
Hi, Sometimes, maybe once ever 100 commands or so, I get the following type of error: [root@black socklog]# dmesg | less -bash: $'\302\240less': command not found It is not reproducible, at least I don't know how to reproduce it. Hitting up arrow will reproduce it, but typing the command

Re: strange bash (prompt) problem

2013-03-20 Thread MJ
On Mar 19, 2013, at 11:17 PM, jca+o...@wxcvbn.org (Jérémie Courrèges-Anglas) wrote: MJ m...@netauth.com writes: Hi, Sometimes, maybe once ever 100 commands or so, I get the following type of error: [root@black socklog]# dmesg | less -bash: $'\302\240less': command not found Here

ospfd OOM crash

2013-03-21 Thread MJ
Hi, On two occasions (had to test it to see if it was repeatable), ospfd has crashed on my 5.2 release i386 machine while I was running a ruby script that consumed too much memory (which also crashed). No other daemons on the machine crashed except ospfd. Needless to say, my network also went

Re: ospfd OOM crash

2013-03-21 Thread MJ
On Mar 21, 2013, at 10:46 PM, Ted Unangst t...@tedunangst.com wrote: There is no OOM killer. Your bug report also lacks crucial details like what it means to crash. Do you mean it logged a message like fatal: out of memory? That's not a crash, that's a message informing you about an error

Re: strange error on openbsd

2013-05-07 Thread MJ
Why reinvent the wheel? [root@black ~]# getent passwd 1 daemon:*:1:1:The devil himself:/root:/sbin/nologin [root@black ~]# -mike On May 7, 2013, at 4:06 AM, Friedrich Locke friedrich.lo...@gmail.com wrote: Dear list members, I am in need to write a simple program to return the passwd

Re: wanna be sys admin question

2013-11-06 Thread MJ
On 07 Nov 2013, at 06:09, Predrag Punosevac punoseva...@gmail.com wrote: I am soliciting opinions and some guidance on few very general sys admin questions. 1. What do people in general use to parse large amount of log files received in the form of e-mails? security/logsurfer and similar.

Re: NPPPD and IPSec

2013-12-02 Thread MJ
This works with Windows 8, OSX, Android and iOS: ike passive esp transport \ proto udp from $public_ip to any port 1701 \ main auth hmac-sha1 enc aes group modp1024 \ quick auth hmac-sha1 enc aes \ psk $psk On 03 Dec 2013, at 00:28, Frans Haarman

Re: Security

2014-01-11 Thread MJ
On 11 Jan 2014, at 13.36, Craig R. Skinner skin...@britvault.co.uk wrote: Hosts in hinet have been relentlessly attacking my mail web servers for over 8 years. I feed them rubbish to play with, A good technique is to run a geospatially-enabled DNS server that maps AS numbers to locations

Re: Request for Funding our Electricity

2014-01-15 Thread MJ
On 15 Jan 2014, at 16.35, Gilles LAMIRAL gilles.lami...@laposte.net wrote: Dear Theo, Don't we do enough? You already do too much. I have long held the opinion that Theo is probably the best coder on this planet. That’s not any sort of ass-kissing, either, it’s my objective, unbiased

NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread MJ
Hello, I would like to inquire as to which OpenBSD RELEASE will offer the possibility to avoid NIST crypto for everything in Base (isakmpd, openssh, openssl, https, nginx being the key items in mind)? BTW, looks like things are heading in the right direction

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread MJ
On 16 Jan 2014, at 18.23, Chris Cappuccio ch...@nmedia.net wrote: For instance, you may have noticed that OpenSSH is moving towards an openssl-free mode by importing NaCl components directly? One problem with abandoning OpenSSL is that you lose SSL, TLS, (oh, and everything has to be

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread MJ
On 16 Jan 2014, at 18.23, Chris Cappuccio ch...@nmedia.net wrote: For instance, you may have noticed that OpenSSH is moving towards an openssl-free mode by importing NaCl components directly? One problem with abandoning OpenSSL is that you lose SSL, TLS, (oh, and everything has to be

Re: Request for Funding our Electricity

2014-01-16 Thread MJ
On 16 Jan 2014, at 19.45, Jack Woehr jwo...@softwoehr.com wrote: I think Theo has answered this previously. His point was that he doesn't want to spend his time year after year running campaigns. Being neither a politician nor a diplomat nor a grantmaster, he wants a sustainable model.

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread MJ
On 16 Jan 2014, at 19.17, Chris Cappuccio ch...@nmedia.net wrote: OpenBSD has already began incorporating NaCl by bypassing OpenSSL entirely. Good news - perhaps my philosophy is “why lay a lot of small bricks here and there when you can lay a cornerstone and be done with it?”. But perhaps I am

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread MJ
On 16 Jan 2014, at 20.24, Chris Cappuccio ch...@nmedia.net wrote: Block traffic with specific ciphers from traversing the network? That's sci.fi You’re right again - this stuff is futuristic but could potentially be accomplished via inspection of unencrypted packet headers, etc (i.e. via

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread MJ
On 16 Jan 2014, at 20.49, Nicolai nicolai-om...@chocolatine.org wrote: Things are moving in the right direction! The last six months have seen MAJOR improvements in crypto. If you want to be a part of it, pick up DNSCrypt or DNSCurve. Get a recent Chromium and play with QUIC. Read about

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread MJ
On 16 Jan 2014, at 23.55, Chris Cappuccio ch...@nmedia.net wrote: All until we learn from the newest Snowden slide that Dan Bernstein is actually on the NSA payroll :) All your DJBs belong to us!

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread MJ
On 17 Jan 2014, at 00.54, Christian Weisgerber na...@mips.inka.de wrote: MJ m...@sci.fi wrote: I would like to inquire as to which OpenBSD RELEASE will offer the possibility to avoid NIST crypto for everything in Base (isakmpd, openssh, openssl, https, nginx being the key items in mind

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-17 Thread MJ
On 17 Jan 2014, at 17.30, Christian Weisgerber na...@mips.inka.de wrote: As guenther@ has pointed out, refusing all crypto covered by that definition is silly. But even if you limit yourself to the specification part, you should be very disappointed about the newly added Curve25519 key

Re: Request for Funding our Electricity

2014-01-18 Thread MJ
On 18 Jan 2014, at 04.33, Theo de Raadt dera...@cvs.openbsd.org wrote: Why is there this effort to convince us to do less? I do not propagate such a train of thought; only said that if you want corporate funding then be prepared to detail your costs and justify each and every one of them

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-18 Thread MJ
On 18 Jan 2014, at 01.13, Christopher Ahrens n...@leviacomm.net wrote: In reality, I don't give a shit about any else who doesn't pay me, make my life easier or make my life more enjoyable. It’s a rare moment when I feel the need to publicly bitch-slap someone, but you triggered it. That

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-18 Thread MJ
On 17 Jan 2014, at 06.05, Philip Guenther guent...@gmail.com wrote: Ah, so if NIST looked at work done by someone completely unrelated to NIST and said looks good, we'll standardize exactly what you did, you think that it's now contaminated by NISTs talking about it? For example, AES, which

Re: OPENBSD FUNDING SOLUTION -- COME AND PARTICIPATE

2014-01-18 Thread MJ
On 18 Jan 2014, at 22.25, Chris Cappuccio ch...@nmedia.net wrote: Mike, maybe you can stop your rambling, and just do the same. Because otherwise, I don't understand why you feel justified to be on this mailing list. You were henning's roommate, so that means that you know all about OpenBSD,

Re: Request for Funding our Electricity

2014-01-18 Thread MJ
On 18 Jan 2014, at 20.15, Jan Stary h...@stare.cz wrote: On Jan 18 16:29:46, m...@sci.fi wrote: On 18 Jan 2014, at 04.33, Theo de Raadt dera...@cvs.openbsd.org wrote: And I hope it?s the thought that counts more than the amount. LOL, yes, especially when it comes to bills being paid.

Re: Request for Funding our Electricity

2014-01-18 Thread MJ
On 19 Jan 2014, at 01.36, Jan Stary h...@stare.cz wrote: So, the 1 is the thought, and the 0 is the amount? Sorry, but your comments were so ridiculous I couldn't help it. Saying it's the thougth that counts to people who have repeated explicitly they need MONEY. There you go again with

Re: OpenBSD funding status

2014-01-18 Thread MJ
On 18 Jan 2014, at 20.01, Desktop User OpenBSD openbsd.desktop.u...@gmail.com wrote: Hello, I would love to subscribe to the monthly donation on: http://openbsdfoundation.org/donations.html but I need to ask, say a few things before: 1) The

carp backup and disconnecting ssh session

2021-05-23 Thread MJ J
Hi, I have a carp master and backup on a pair of one-armed Rapsberry Pi 4B devices (router1 and router2) and when I ssh to the backup using the carp IP as my gateway, it repeatedly throws me out after a few seconds with the message: My laptop's network config: ---