Re: unwind(8): Implement DNS64 synthesis.

2021-01-24 Thread Klemens Nanni
On Thu, Jan 21, 2021 at 05:16:24PM +0100, Florian Obser wrote: > When unwind(8) learns new autoconf resolvers (from dhcp or router > advertisements) it checks if a DNS64 is present in this network > location and tries to recover the IPv6 prefix used according to > RFC7050. I noticed that unwind

Re: unwind(8): Implement DNS64 synthesis.

2021-01-24 Thread Klemens Nanni
On Sun, Jan 24, 2021 at 10:14:22AM +0100, Florian Obser wrote: > On Sun, Jan 24, 2021 at 09:35:26AM +0100, Klemens Nanni wrote: > > On Thu, Jan 21, 2021 at 05:16:24PM +0100, Florian Obser wrote: > > > When unwind(8) learns new autoconf resolvers (from dhcp or router > > > advertisements) it checks

Re: unwind: silence "udp connect failed" errors

2021-01-24 Thread Theo Buehler
On Sun, Jan 24, 2021 at 12:44:39PM +0100, Klemens Nanni wrote: > unwind/libunbound always tries to connect to nameservers using both > address families, even if only one is configured on the local machine. > > So on IPv6 only boxes for example syslog gets spammed with these > > Jan 24 12:23:06

Re: unwind(8): Implement DNS64 synthesis.

2021-01-24 Thread Florian Obser
On Sun, Jan 24, 2021 at 09:35:26AM +0100, Klemens Nanni wrote: > On Thu, Jan 21, 2021 at 05:16:24PM +0100, Florian Obser wrote: > > When unwind(8) learns new autoconf resolvers (from dhcp or router > > advertisements) it checks if a DNS64 is present in this network > > location and tries to

Re: Wireguard: can't remove multiple peers at once.

2021-01-24 Thread Richard Procter
Hi, > On 14/01/2021, at 8:33 PM, YASUOKA Masahiko wrote: > > Hi, > > On Thu, 14 Jan 2021 08:54:36 +0900 > Yuichiro NAITO wrote: >> Does anybody please review my code? >> >> Yasuoka-san is my coleague of my work. >> So, he is interested in this topic. That’s why I CCed this mail. >> I don’t

unwind: silence "udp connect failed" errors

2021-01-24 Thread Klemens Nanni
unwind/libunbound always tries to connect to nameservers using both address families, even if only one is configured on the local machine. So on IPv6 only boxes for example syslog gets spammed with these Jan 24 12:23:06 eru unwind[38261]: [38261:0] error: udp connect failed: Can't assign

Re: unwind: silence "udp connect failed" errors

2021-01-24 Thread Klemens Nanni
On Sun, Jan 24, 2021 at 12:52:50PM +0100, Theo Buehler wrote: > Probably better to sync first with the corresponding unbound commit > https://cvsweb.openbsd.org/src/usr.sbin/unbound/services/outside_network.c#rev1.21 > then adjust udp_connect_needs_log() as needed. Good call, thanks. Here's the

[PATCH v3 (resend)] tee: Add -q, --quiet, --silent option to not write to stdout

2021-01-24 Thread Alejandro Colomar
This is useful for using tee to just write to a file, at the end of a pipeline, without having to redirect to /dev/null Example: echo 'foo' | sudo tee -q /etc/foo; is equivalent to the old (and ugly) echo 'foo' | sudo tee /etc/foo >/dev/null; Signed-off-by: Alejandro Colomar --- Resend as

some fvwmrc defautlts changes

2021-01-24 Thread Matthieu Herrb
Hi, The patch below aims a making the default system.fvwmrc a bit less obsolete. - remove xman (was removed from xenocara base) - replace rlogin with ssh in modules - make the fg color for ssh / telnet prompts black so that's it's readable. Comments? oks? Index: sample.fvwmrc/system.fvwmrc

snmpd: remove print_{verbose,debug}

2021-01-24 Thread Martijn van Duren
Nothing seems to use them and I see no reason in the forseeable future to start using them. OK? martijn@ Index: snmpd.h === RCS file: /cvs/src/usr.sbin/snmpd/snmpd.h,v retrieving revision 1.91 diff -u -p -r1.91 snmpd.h --- snmpd.h

Re: grep: add --null flag

2021-01-24 Thread Ted Unangst
On 2021-01-25, Sebastian Benoit wrote: > Sebastian Benoit(be...@openbsd.org) on 2021.01.25 00:27:05 +0100: > > Theo de Raadt(dera...@openbsd.org) on 2021.01.24 16:01:32 -0700: > > > Stuart Henderson wrote: > > > > > > > On 2021/01/24 12:10, Theo de Raadt wrote: > > > > > I completely despise

Re: [External] : Re: pf route-to issues

2021-01-24 Thread Sven F.
On Sun, Jan 24, 2021 at 11:51 PM David Gwynne wrote: > On Mon, Jan 25, 2021 at 02:50:12AM +0100, Alexandr Nedvedicky wrote: > > Hello, > > > > > > > > ok. i don't know how to split up the rest of the change though. > > > > > > here's an updated diff that includes the rest of the kernel changes

Re: [External] : Re: pf route-to issues

2021-01-24 Thread Alexandr Nedvedicky
Hello, > > ok. i don't know how to split up the rest of the change though. > > here's an updated diff that includes the rest of the kernel changes and > the pfctl and pf.conf tweaks. > > it's probably useful for me to try and explain at a high level what > i think the semantics should be,

Re: [External] : Re: pf route-to issues

2021-01-24 Thread David Gwynne
On Mon, Jan 25, 2021 at 02:50:12AM +0100, Alexandr Nedvedicky wrote: > Hello, > > > > > ok. i don't know how to split up the rest of the change though. > > > > here's an updated diff that includes the rest of the kernel changes and > > the pfctl and pf.conf tweaks. > > > > it's probably useful

Re: grep: add --null flag

2021-01-24 Thread Sebastian Benoit
Hi, the diff looks good, i would change the wording in the manpage a bit, see below. Anyone else who wants to ok it? /Benno Omar Polo(o...@omarpolo.com) on 2021.01.22 12:19:08 +0100: > > quasi three-weekly ping. > > Is this such a bad idea? > > (TBH: I have still to look at how to write a

Re: unwind(8): Implement DNS64 synthesis.

2021-01-24 Thread Klemens Nanni
On Sun, Jan 24, 2021 at 04:55:25PM +0100, Florian Obser wrote: > Are you sure you are running with the config you think you are running > with? I can not reproduce and from the logging, especially the > check_resolver_done bits it very much looks like you are running > without any config at all.

Re: [PATCH v3 (resend)] tee: Add -q, --quiet, --silent option to not write to stdout

2021-01-24 Thread Theo de Raadt
Otto Moerbeek wrote: > On Sun, Jan 24, 2021 at 01:18:46PM +0100, Alejandro Colomar wrote: > > > This is useful for using tee to just write to a file, > > at the end of a pipeline, > > without having to redirect to /dev/null > > > > Example: > > > > echo 'foo' | sudo tee -q /etc/foo; > > > >

Re: route sourceaddr: simplify code & get out of ART

2021-01-24 Thread Martin Pieuchot
On 23/01/21(Sat) 21:59, Vitaliy Makkoveev wrote: > Hello. > > According the code `ifaddr’ struct has `ifa_refcnt’ field. Also it seems `ifa’ > could exist while corresponding `ifp’ was destroyed. Is this true for `rt’ > case? Should `ifa_refcnt' be bumped while you return `ifa’? What is stored

Re: [PATCH v3 (resend)] tee: Add -q, --quiet, --silent option to not write to stdout

2021-01-24 Thread Alejandro Colomar (man-pages)
On 1/24/21 5:11 PM, Teran McKinney wrote: > On 2021-01-24 13-18-46, Alejandro Colomar wrote: >> This is useful for using tee to just write to a file, >> at the end of a pipeline, >> without having to redirect to /dev/null >> >> Example: >> >> echo 'foo' | sudo tee -q /etc/foo; >> >> is

Re: [PATCH v3 (resend)] tee: Add -q, --quiet, --silent option to not write to stdout

2021-01-24 Thread Otto Moerbeek
On Sun, Jan 24, 2021 at 01:18:46PM +0100, Alejandro Colomar wrote: > This is useful for using tee to just write to a file, > at the end of a pipeline, > without having to redirect to /dev/null > > Example: > > echo 'foo' | sudo tee -q /etc/foo; > > is equivalent to the old (and ugly) You keep

Re: unwind: silence "udp connect failed" errors

2021-01-24 Thread Florian Obser
On Sun, Jan 24, 2021 at 01:06:31PM +0100, Klemens Nanni wrote: > On Sun, Jan 24, 2021 at 12:52:50PM +0100, Theo Buehler wrote: > > Probably better to sync first with the corresponding unbound commit > > https://cvsweb.openbsd.org/src/usr.sbin/unbound/services/outside_network.c#rev1.21 > > then

Re: unwind(8): Implement DNS64 synthesis.

2021-01-24 Thread Florian Obser
On Sun, Jan 24, 2021 at 11:12:49AM +0100, Klemens Nanni wrote: > What I'm seeing here is that unwind forwards the very first query to my > gateway (learned via SLAAC), that one succeeds, but all successive > queries of A only domains do not work... that's what makes the query in > my previous

Re: grep: add --null flag

2021-01-24 Thread Stuart Henderson
On 2021/01/24 12:10, Theo de Raadt wrote: > I completely despise that the option is called "--null". > > Someone was a complete idiot. gnu grep has both --null and -z for this (why do they do that?!). If it's added as --null it should be added as -z too. Looking at Debian codesearch most things

Re: grep: add --null flag

2021-01-24 Thread Theo de Raadt
Stuart Henderson wrote: > On 2021/01/24 12:10, Theo de Raadt wrote: > > I completely despise that the option is called "--null". > > > > Someone was a complete idiot. > > gnu grep has both --null and -z for this (why do they do that?!). > If it's added as --null it should be added as -z too. >

Re: grep: add --null flag

2021-01-24 Thread Theo de Raadt
I completely despise that the option is called "--null". Someone was a complete idiot. Ted Unangst wrote: > On 2021-01-22, Omar Polo wrote: > > > > quasi three-weekly ping. > > > > Is this such a bad idea? > > This seems reasonable. I think there's no need to change print line calls >

Re: unwind: silence "udp connect failed" errors

2021-01-24 Thread Otto Moerbeek
On Sun, Jan 24, 2021 at 07:24:07PM +0100, Florian Obser wrote: > On Sun, Jan 24, 2021 at 01:06:31PM +0100, Klemens Nanni wrote: > > On Sun, Jan 24, 2021 at 12:52:50PM +0100, Theo Buehler wrote: > > > Probably better to sync first with the corresponding unbound commit > > >

Re: [PATCH v3 (resend)] tee: Add -q, --quiet, --silent option to not write to stdout

2021-01-24 Thread Alex Henrie
On Sun, Jan 24, 2021 at 10:51 AM Otto Moerbeek wrote: > > Please stop pushing your diff to this list. So far nobody showed any > interest. I am definitely interested. Bernhard Voelker seemed to express interest as well, conditional on -q being added to POSIX first.[1] Also, a --quiet flag was

Re: grep: add --null flag

2021-01-24 Thread Ted Unangst
On 2021-01-22, Omar Polo wrote: > > quasi three-weekly ping. > > Is this such a bad idea? This seems reasonable. I think there's no need to change print line calls though, just patch the implementation once. > > (TBH: I have still to look at how to write a regression test for this) > > Omar

Re: [PATCH v3 (resend)] tee: Add -q, --quiet, --silent option to not write to stdout

2021-01-24 Thread Otto Moerbeek
On Sun, Jan 24, 2021 at 01:01:45PM -0700, Alex Henrie wrote: > On Sun, Jan 24, 2021 at 10:51 AM Otto Moerbeek wrote: > > > > Please stop pushing your diff to this list. So far nobody showed any > > interest. > > I am definitely interested. Bernhard Voelker seemed to express > interest as well,

Re: grep: add --null flag

2021-01-24 Thread Sebastian Benoit
Theo de Raadt(dera...@openbsd.org) on 2021.01.24 16:01:32 -0700: > Stuart Henderson wrote: > > > On 2021/01/24 12:10, Theo de Raadt wrote: > > > I completely despise that the option is called "--null". > > > > > > Someone was a complete idiot. > > > > gnu grep has both --null and -z for this

Re: grep: add --null flag

2021-01-24 Thread Sebastian Benoit
Sebastian Benoit(be...@openbsd.org) on 2021.01.25 00:27:05 +0100: > Theo de Raadt(dera...@openbsd.org) on 2021.01.24 16:01:32 -0700: > > Stuart Henderson wrote: > > > > > On 2021/01/24 12:10, Theo de Raadt wrote: > > > > I completely despise that the option is called "--null". > > > > > > > >

Re: [External] : Re: tell pfctl(8) route-to and reply-to accept next-hop only

2021-01-24 Thread Alexandr Nedvedicky
hello, On Fri, Jan 22, 2021 at 05:32:47PM +1000, David Gwynne wrote: > I tried this diff, and it broke the ability to use dynamic addresses. > ie, the following rules should work: > > pass in on gre52 inet proto icmp route-to (gre49:peer) > pass in on vmx0 inet proto icmp route-to (gre:peer)

Re: [External] : Re: tell pfctl(8) route-to and reply-to accept next-hop only

2021-01-24 Thread David Gwynne
> On 25 Jan 2021, at 10:43, Alexandr Nedvedicky > wrote: > > hello, > > On Fri, Jan 22, 2021 at 05:32:47PM +1000, David Gwynne wrote: >> I tried this diff, and it broke the ability to use dynamic addresses. >> ie, the following rules should work: >> >> pass in on gre52 inet proto icmp