Re: Bluetooth adapter that works with OpenBSD

2020-09-21 Thread Aaron Mason
On Tue, Sep 22, 2020 at 2:22 PM Tito Mari Francis Escaño wrote: > > Hi misc, > I'm building an OpenBSD desktop PC and would like to use my Royal Kludge > RK71 mechanical keyboard with it via USB Bluetooth dongle. > Can somebody please point me to USB Bluetooth dongles tested working with >

Bluetooth adapter that works with OpenBSD

2020-09-21 Thread Tito Mari Francis Escaño
Hi misc, I'm building an OpenBSD desktop PC and would like to use my Royal Kludge RK71 mechanical keyboard with it via USB Bluetooth dongle. Can somebody please point me to USB Bluetooth dongles tested working with OpenBSD? Hopefully you can guide me. Thanks so much.

Re: dump LOB status

2020-09-21 Thread Juha Erkkilä
> On 16. Sep 2020, at 20.27, Juha Erkkilä wrote: > > >> On 16. Sep 2020, at 0.18, Kenneth Gober wrote: >> I took a very quick look at the source and it appears that 213 is shown in >> octal. I believe that the 200 bit indicates that a core file was produced, >> and 13 is probably a signal

Re: Relayd SSL Configuration with Cerbot Certs

2020-09-21 Thread Graeme Neilson
In relayd.conf you use something like this for each domain you are reverse proxying: # load certs tls keypair www.example.com tls keypair www.another_example.net tls keypair www.third_example.com Put your certs in /etc/ssl/ and keys in /etc/ssl/private/ they have to be named so they match the

OpenDNSSEC signer engine: Bus error: How to get debug information?

2020-09-21 Thread Why 42? The lists account.
Hi All, I am attempting to setup secure DNS on an OpenBSD 6.7 system using NSD, Unbound and a package called Opendnssec. I seem to have arrived at a point where one of the Opendnssec daemons, "ods-signerd", crashes on startup i.e. > # ods-signerd -dv > OpenDNSSEC signer engine version 2.1.6 >

Re: PF Natting before filtering

2020-09-21 Thread Stuart Henderson
On 2020-09-21, open...@kene.nu wrote: >> > My basic ruleset snippet: >> > pass quick on vlan100 from any to any >> > match out on vlan200 nat-to vlan200 >> > pass out on vlan200 >> > block out quick on vlan200 from >> >> If this is your actual ruleset, you are observing the intended behavior. >>

[ANNOUNCE] pledge(1): an unprivileged sandboxing tool for OpenBSD

2020-09-21 Thread Demi M. Obenour
Yesterday, I wrote an unprivileged sandboxing tool for OpenBSD, based on pledge(2) and unveil(2). I have included the complete C source code below, and also attached it in case this makes it easier to use. I called it pledge(1), but am open to suggestions for a better name. The tool makes

Re: [ANNOUNCE] pledge(1): an unprivileged sandboxing tool for OpenBSD

2020-09-21 Thread Demi M. Obenour
On 2020-09-21 12:51, Demi M. Obenour wrote: > Yesterday, I wrote an unprivileged sandboxing tool for OpenBSD, based > on pledge(2) and unveil(2). I have included the complete C source > code below, and also attached it in case this makes it easier to use. I just realized that I forgot to include

Re: video(1) -s size default overrides -r rate

2020-09-21 Thread Laurence Tratt
On Mon, Sep 21, 2020 at 05:44:17PM +0200, Jan Stary wrote: Hello Jan, > Presumably, as the default -s size is picked, and the camera cannot do 30 > fps in that size, -r 20 is chosen instead. > > If that's correct, the default size in effect overrides a specified rate. > Is that intended? > > It

video(1) -s size default overrides -r rate

2020-09-21 Thread Jan Stary
This is 6.8-beta/amd64 on a Thinkpad T400 (dmesg below) using the following cheap USB camera/mic ("SriHome"): uvideo0 at uhub7 port 1 configuration 1 interface 0 "webcam webcam" rev 2.00/0.10 addr 2 video0 at uvideo0 $ video -q video device /dev/video: encodings: yuy2 frame sizes (width x

Re: PF Natting before filtering

2020-09-21 Thread Peter N. M. Hansteen
On Mon, Sep 21, 2020 at 02:14:25PM +0200, open...@kene.nu wrote: > > > can find online seems to suggest otherwise. > > > > It would be interesting to hear which shreds of information you found. > > > Mainly this which I see now contradicts itself. >

Using Acusis USB microphone-speaker from OpenBSD

2020-09-21 Thread Ibsen S Ripsbusker
To whom it may concern, I have an Acusis, which should be a USB microphone and speaker. https://www.crowdsupply.com/antimatter-research/acusis I have managed to use my Acusis in Trisquel (GNU/Linux) to record and play simultaneously. I tried this in OpenBSD, but I manage only to record, never to

Re: PF Natting before filtering

2020-09-21 Thread openbsd
On Mon, Sep 21, 2020 at 1:39 PM Peter N. M. Hansteen wrote: > On Mon, Sep 21, 2020 at 12:46:15PM +0200, open...@kene.nu wrote: > > > I am seeing what could be expected behaviour but the small shreds of > info I > > can find online seems to suggest otherwise. > > It would be interesting to hear

Re: PF Natting before filtering

2020-09-21 Thread Peter N. M. Hansteen
On Mon, Sep 21, 2020 at 12:46:15PM +0200, open...@kene.nu wrote: > I am seeing what could be expected behaviour but the small shreds of info I > can find online seems to suggest otherwise. It would be interesting to hear which shreds of information you found. > > I have a box that acts as a

PF Natting before filtering

2020-09-21 Thread openbsd
Hello, I am seeing what could be expected behaviour but the small shreds of info I can find online seems to suggest otherwise. I have a box that acts as a router and firewall. It forwards packets from the internal lan (call it vlan100) and sends it natted out on the external lan (call it

Re: Does DNS need TCP?

2020-09-21 Thread Stuart Henderson
On 2020-09-21, Predrag Punosevac wrote: > As of the port blocking unfortunately I am old enough to remember this > post > > http://cr.yp.to/djbdns/tcp.html#why > > and the remark that TCP is only needed for records larger than 512 > bytes. > > "You want to publish record sets larger than 512

Re: Relayd SSL Configuration with Cerbot Certs

2020-09-21 Thread Stuart Henderson
On 2020-09-19, Benjamin Raskin wrote: > Hello, Misc; > > I'm attempting to configure relayd to work as a reverse proxy, such that all > web traffic goes through relayd prior to reaching some web server. I'm > confused as to how I am to configure the ssl cert and key options in the > relayd

Re: Does DNS need TCP?

2020-09-21 Thread Otto Moerbeek
On Sun, Sep 20, 2020 at 10:17:47PM -0400, Predrag Punosevac wrote: > Nicolai wrote : > > > On Sun, Sep 20, 2020 at 12:43:41AM -0400, Predrag Punosevac wrote: > > > > > For number of years I had in my /var/unbound/etc/unbound.conf line > > > > > > do-tcp: no > > > > > To make things worse I