Re: iscsid issues with Synology NAS

2021-03-31 Thread Bruno Flueckiger
On 31.03., David Alten wrote: > Hello, > > I???m having issues getting iscsid to work with my Synology NAS. > > The first issue was that the NAS was returning an error code. Turns out > it didn???t like not?? missing the default SessionType=Normal. > > The second issue was that the login sequence n

Re: iscsid issues with Synology NAS

2021-04-01 Thread Bruno Flueckiger
On 01.04., Claudio Jeker wrote: > On Thu, Apr 01, 2021 at 07:27:10AM +0200, Bruno Flueckiger wrote: > > On 31.03., David Alten wrote: > > > Hello, > > > > > > I???m having issues getting iscsid to work with my Synology NAS. > > > > > > The fi

[patch] azalia: Intel 300 Series HD Audio

2020-05-29 Thread Bruno Flueckiger
Hi, My brand new laptop HP EliteBook 850 G6 comes with an Intel 300 Series HD Audio device rev 0x11. The device shows up as not configured in the dmesg. The PCI config space of the device identifies its subclass as PCI_SUBCLASS_MULTIMEDIA_AUDIO instead of PCI_SUBCLASS_MULTIMEDIA_HDAUDIO The patch

Re: [patch] azalia: Intel 300 Series HD Audio

2020-05-30 Thread Bruno Flueckiger
On 29.05., Jonathan Gray wrote: > On Fri, May 29, 2020 at 11:25:44AM +0200, Bruno Flueckiger wrote: > > Hi, > > > > My brand new laptop HP EliteBook 850 G6 comes with an Intel 300 Series > > HD Audio device rev 0x11. The device shows up as not configured in the > &g

Re: [patch] azalia: Intel 300 Series HD Audio

2020-05-31 Thread Bruno Flueckiger
On 31.05., Benjamin Baier wrote: > On Fri, 29 May 2020 11:25:44 +0200 > Bruno Flueckiger wrote: > > > Hi, > > > > My brand new laptop HP EliteBook 850 G6 comes with an Intel 300 Series > > HD Audio device rev 0x11. The device shows up as not configured in the &

pchtemp add Intel 300 Series Thermal sensor

2020-06-06 Thread Bruno Flueckiger
Hi, My HP EliteBook 850 G6 comes with an Intel 300 Series Thermal sensor. The patch below makes this sensor available as pchtemp(4) device. Cheers, Bruno Index: sys/dev/pci/pchtemp.c === RCS file: /cvs/src/sys/dev/pci/pchtemp.c,v re

Re: httpd(8): don't send HSTS headers over unencrypted connections

2018-10-14 Thread Bruno Flueckiger
On 14.10.18 19:36, Anthony J. Bentley wrote: > Hi, > > RFC 6797 says: > >An HSTS Host MUST NOT include the STS header field in HTTP responses >conveyed over non-secure transport. > > Is this the correct check? With this I get what I expect: HSTS headers > over TLS, and no HSTS headers ov

[PATCH] httpd: Write X-Forwarded-For to access.log

2018-11-11 Thread Bruno Flueckiger
Hi When I run httpd(8) behind relayd(8) the access log of httpd contains the IP address of relayd, but not the IP address of the client. I've tried to match the logs of relayd(8) and httpd(8) using some scripting and failed. So I've written a patch for httpd(8). It stores the content of the X-For

Re: [PATCH] httpd: Write X-Forwarded-For to access.log

2018-11-11 Thread Bruno Flueckiger
On 11.11.18 15:29, Florian Obser wrote: > On Sun, Nov 11, 2018 at 01:46:06PM +0100, Sebastian Benoit wrote: > > Bruno Flueckiger(inform...@gmx.net) on 2018.11.11 10:31:34 +0100: > > > Hi > > > > > > When I run httpd(8) behind relayd(8) the access log of ht

Re: [PATCH] httpd: Write X-Forwarded-For to access.log

2018-11-12 Thread Bruno Flueckiger
On 11.11.18 18:43, Claudio Jeker wrote: > On Sun, Nov 11, 2018 at 06:32:53PM +0100, Bruno Flueckiger wrote: > > On 11.11.18 15:29, Florian Obser wrote: > > > On Sun, Nov 11, 2018 at 01:46:06PM +0100, Sebastian Benoit wrote: > > > > Bruno Flueckiger(inform...@gmx.net

[patch] relayd OCSP stapling for TLS server

2019-06-20 Thread Bruno Flueckiger
Hi, The patch below adds OCSP stapling to the TLS server in relayd(8). The OCSP response is read from a binary encoded DER file that can be created using ocspcheck(8). If a file with the same name as the certificate and private key files is found, its content is loaded and OCSP stapling is active

Re: [patch] relayd OCSP stapling for TLS server

2019-06-22 Thread Bruno Flueckiger
On 22.06., Theo Buehler wrote: > On Fri, Jun 21, 2019 at 01:28:03PM +0200, Reyk Floeter wrote: > > On Thu, Jun 20, 2019 at 07:58:10PM +0200, Bruno Flueckiger wrote: > > > Hi, > > > > > > The patch below adds OCSP stapling to the TLS server in relayd(8). Th

Re: once again: iwm(4) multi-frame rx + monitor mode

2019-09-03 Thread Bruno Flueckiger
On 30.08., Stefan Sperling wrote: > I would like to try this again: In iwm(4), process more than one frame > per Rx interrupt, and enable monitor mode. > > Monitor mode triggers "unhandled fimware response" errors without multi-Rx > support. We have seen these infamous errors in other contexts as w

Re: monitor mode for iwm(4)

2018-05-23 Thread Bruno Flueckiger
Works as expected on a 3165 device: iwm0 at pci2 dev 0 function 0 "Intel Dual Band Wireless AC 3165" rev 0x81, msi iwm0: hw rev 0x210, fw ver 16.242414.0, address xx:xx:xx:xx:xx:xx Cheers, Bruno On 23.05.18 12:31, Stefan Sperling wrote: > This diff implements monitor mode for iwm(4). > > To use

Re: Test needed: Unlock 12 network-related syscalls

2018-06-26 Thread Bruno Flueckiger
On 20.06.2018 13:13, Martin Pieuchot wrote: Diff below unlocks the following syscalls: recvmsg(2), recvfrom(2), accept(2), getpeername(2), getsockname(2), accept4(2), connect(2), bind(2), setsockopt(2), listen(2), getsockopt(2), shutdown(2) It doesn't mean that they won't run without the

Re: Test needed: Unlock 12 network-related syscalls

2018-06-26 Thread Bruno Flueckiger
On 26.06.18 11:47, Martin Pieuchot wrote: > On 26/06/18(Tue) 10:46, Bruno Flueckiger wrote: > > On 20.06.2018 13:13, Martin Pieuchot wrote: > > > Diff below unlocks the following syscalls: > > > > > > recvmsg(2), recvfrom(2), accept(2), getpeername(2

Re: [PATCH] httpd: Write X-Forwarded-For to access.log

2019-02-12 Thread Bruno Flueckiger
On 12.11.18 12:40, Bruno Flueckiger wrote: > On 11.11.18 18:43, Claudio Jeker wrote: > > On Sun, Nov 11, 2018 at 06:32:53PM +0100, Bruno Flueckiger wrote: > > > On 11.11.18 15:29, Florian Obser wrote: > > > > On Sun, Nov 11, 2018 at 01:46:06PM +0100, Sebastian

httpd: New log format to log X-Forwarded-{For|Port} headers

2019-03-04 Thread Bruno Flueckiger
Hi, I've completely reworked my patch for httpd(8). The last patch broke the log format combined. And the config option was ugly. This time I've added another log format called forwarded. It appends two fields to the log format combined: The first field contains the value of the header X-Forwarded

Re: [patch] cwm: filter duplicate hostnames in ssh menu

2019-05-12 Thread Bruno Flueckiger
On 01.05., Marcus MERIGHI wrote: > Hello, > > o...@demirmen.com (Okan Demirmen), 2019.04.29 (Mon) 16:19 (CEST): > > On Fri 2019.04.26 at 07:15 +0200, Bruno Fl?ckiger wrote: > > > Hi, > > > > > > The ssh menu of cwm(1) doesn't filter duplicated hostnames when reading > > > them from ~/.ssh/known_hos

Re: [patch] cwm: filter duplicate hostnames in ssh menu

2019-05-12 Thread Bruno Flueckiger
On 29.04., Okan Demirmen wrote: > On Fri 2019.04.26 at 07:15 +0200, Bruno Fl?ckiger wrote: > > Hi, > > > > The ssh menu of cwm(1) doesn't filter duplicated hostnames when reading > > them from ~/.ssh/known_hosts. This patch makes sure each hostname is > > only displayed once to the menu. > > Sure,

[patch] Make escape character in cu(1) configurable

2017-08-03 Thread Bruno Flueckiger
Hi, Whenever I use cu(1) I miss the possibility to configure the escape character. Both ssh(1) and telnet(1) provide the option -e to change the escape character. So I created the diffs below to implement it. I think it's time to share it with you and ask for your feedback. Cheers, Bruno Index:

Re: patch for httpd implementing clickjacking protection

2023-02-08 Thread Bruno Flueckiger
On 07.02., Peter J. Philipp wrote: > On Tue, Feb 07, 2023 at 10:41:34AM +, Stuart Henderson wrote: > > On 2023/02/07 10:20, Peter J. Philipp wrote: > > > Hi, > > > > > > Arslan Kabeer (on the Internet) made me aware of clickjacking being done > > > on > > > my site using OpenBSD httpd. This f