Re: syspatch(8): How to install patches?

2016-11-09 Thread Theo de Raadt
> > > > > > In the manual page for syspatch(8), it provides a list of options, > > > yet does not specify how to invoke it for fetching and installing > > > the latest patches. > > > > > > To avoid this confusion, it is worth adding a line like this: > > > > > > "When invoked without options,

Re: syspatch(8): How to install patches?

2016-11-09 Thread bytevolcano
On Wed, 9 Nov 2016 09:58:51 +0100 Antoine Jacoutot wrote: > On Wed, Nov 09, 2016 at 07:12:38PM +1100, bytevolc...@safe-mail.net > wrote: > > Hello, > > > > In the manual page for syspatch(8), it provides a list of options, > > yet does not specify how to invoke it for

tedu /usr/include/ssl symlink

2016-11-09 Thread Jeremie Courreges-Anglas
tedu@ proposed suppressing that symlink a while ago. The base system had been fixed at that time, and a bulk build (thanks ajacoutot@) didn't show any fallout. https://codesearch.debian.net/ doesn't report anything that might be affected. ok? Index: include/Makefile

httpd & relayd: ip ttl / minttl

2016-11-09 Thread Jeremie Courreges-Anglas
The two options metioned in the subject work on IPv4 sockets but are invalid on IPv6 sockets. Tweak code to set different socket options when dealing with a v6 socket. ok? Index: usr.sbin/httpd/server.c === RCS file:

snmpd: listen on multiple addresses

2016-11-09 Thread Jeremie Courreges-Anglas
The following diff adds support for listening multiple addresses (thus for dual-stack setups). Multiple "listen on" settings are allowed, the default is to listen on 0.0.0.0 and :: (currently, only 0.0.0.0). A single "listen on hostname" line arbitrarily supports up to 16 addresses. It also

Re: The end of nd6_output()

2016-11-09 Thread Gregor Best
Hi, On Mon, Nov 07, 2016 at 03:55:29PM +0100, Gregor Best wrote: > [...] > I can't reproduce the problem anymore. If it does turn up again, I'll > collect the output of route monitor. In the mean time, thanks a bunch > for your help :) > [...] It happened again, this time in a slightly more

Re: [PATCH] iked: Bugfixes for IKE rekeying

2016-11-09 Thread Vincent Gross
On Wed, 9 Nov 2016 13:16:46 + Thomas Klute wrote: > Hi tech@, > > this patch contains fixes for two bugs that break IKE rekeying > initiated by iked. Please review, and apply or let me know what has to > be changed! Both bugs are fixed by initializing the respective

[PATCH] umb(4) fixes for ifconfig

2016-11-09 Thread Bryan Vyhmeister
This patch accomplishes two things for umb(4) connections. One, some SIM cards have a plus at the beginning of the phone number while others do not. In my case, an AT Wireless SIM card in the US has the plus where a T-Mobile SIM card in Germany does not. The output of ifconfig(8) originally added

Re: Problems with rdomain and net/if.c v1.455

2016-11-09 Thread Andreas Bartelt
On 11/09/16 16:43, Martin Pieuchot wrote: On 09/11/16(Wed) 16:29, Andreas Bartelt wrote: On 11/09/16 15:11, Martin Pieuchot wrote: ... Fair point. What about adding backward compatible goo to help people doing the transition: # ifconfig lo1 create # ifconfig vether0 rdomain 1 warning: lo1

Re: Problems with rdomain and net/if.c v1.455

2016-11-09 Thread Martin Pieuchot
On 09/11/16(Wed) 16:29, Andreas Bartelt wrote: > On 11/09/16 15:11, Martin Pieuchot wrote: > ... > > Fair point. What about adding backward compatible goo to help people > > doing the transition: > > > > # ifconfig lo1 create > > # ifconfig vether0 rdomain 1 > > warning: lo1 cannot be used for

Re: Problems with rdomain and net/if.c v1.455

2016-11-09 Thread Andreas Bartelt
On 11/09/16 15:11, Martin Pieuchot wrote: ... Fair point. What about adding backward compatible goo to help people doing the transition: # ifconfig lo1 create # ifconfig vether0 rdomain 1 warning: lo1 cannot be used for rdomain 1 # ifconfig lo lo0: flags=8049 mtu

Re: Problems with rdomain and net/if.c v1.455

2016-11-09 Thread Martin Pieuchot
On 09/11/16(Wed) 12:18, Stuart Henderson wrote: > On 2016/11/09 12:55, Martin Pieuchot wrote: > > > > > > I'm using that, and I think many people using an IGP will be too (you > > > want services - e.g. ssh, snmp, ntp, bgp - to stay working even when a > > > physical interface is down - and at

[PATCH] iked: Bugfixes for IKE rekeying

2016-11-09 Thread Thomas Klute
Hi tech@, this patch contains fixes for two bugs that break IKE rekeying initiated by iked. Please review, and apply or let me know what has to be changed! Both bugs are fixed by initializing the respective structures of the new IKE SA (struct iked_sa *nsa in the ikev2_ike_sa_rekey function):

Re: Problems with rdomain and net/if.c v1.455

2016-11-09 Thread Henning Brauer
* Martin Pieuchot [2016-11-09 11:55]: > On 08/11/16(Tue) 17:23, Claudio Jeker wrote: > > On Tue, Nov 08, 2016 at 03:36:22PM +0100, Martin Pieuchot wrote: > > > I'm not sure to understand the benefit. What's the use case for loop(4)? > > 2 name spaces, so that I don't have a

Re: Problems with rdomain and net/if.c v1.455

2016-11-09 Thread Martin Pieuchot
On 09/11/16(Wed) 11:41, Stuart Henderson wrote: > On 2016/11/09 11:55, Martin Pieuchot wrote: > > On 08/11/16(Tue) 17:23, Claudio Jeker wrote: > > > On Tue, Nov 08, 2016 at 03:36:22PM +0100, Martin Pieuchot wrote: > > > > [...] > > > > To add 127.0.0.1 properly it's another story as currently

Re: syspatch(8): How to install patches?

2016-11-09 Thread Antoine Jacoutot
On Wed, Nov 09, 2016 at 07:12:38PM +1100, bytevolc...@safe-mail.net wrote: > Hello, > > In the manual page for syspatch(8), it provides a list of options, yet > does not specify how to invoke it for fetching and installing the > latest patches. > > To avoid this confusion, it is worth adding a

syspatch(8): How to install patches?

2016-11-09 Thread bytevolcano
Hello, In the manual page for syspatch(8), it provides a list of options, yet does not specify how to invoke it for fetching and installing the latest patches. To avoid this confusion, it is worth adding a line like this: "When invoked without options, syspatch(8) will fetch and install the