Re: What would you like to see in upcoming PF tutorials?

2017-12-15 Thread Peter N. M. Hansteen
still reasonably useful, I hear ;) - P -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.

Re: Library versions mismatch in the 14-Dec-2017 14:45 amd64 snapshot?

2017-12-14 Thread Peter N. M. Hansteen
it for the next snapshot. And indeed, the next snapshot (bsd.rd dated 14-Dec-2017 20:32) has my laptop running in its usual soft purring mode :) - P -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ &

What would you like to see in upcoming PF tutorials?

2017-12-14 Thread Peter N. M. Hansteen
year's session at BSDCan can be found here: https://home.nuug.no/~peter/pftutorial/ - we're basically looking for ways to make those sessions more useful (the last one wasn't awful we hear, but there's always room for improvement). - Peter -- Peter N. M. Hansteen, member of the first RFC 1149

Re: Library versions mismatch in the 14-Dec-2017 14:45 amd64 snapshot?

2017-12-14 Thread Peter N. M. Hansteen
I'll be looking forward to a clean upgrade hopefully within some hours. Keep up the good work! All the best, Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on a

Library versions mismatch in the 14-Dec-2017 14:45 amd64 snapshot?

2017-12-14 Thread Peter N. M. Hansteen
bit others and is being addressed already)? -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147:

Re: Suggestions home server

2017-12-14 Thread Peter N. M. Hansteen
nstead of the default hardware raid mode. Haven't had a chance to try the newer versions, but I wouldn't expect any trouble -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil

HDD fail signal

2017-11-16 Thread Peter Kay
On various SATA/SAS backplanes, notably the Icy Box/Raidsonic IB555SK, there is a 'HDD fail signal IN' connector and a note that this can be provided by the controller, to make the failure LED flash. I can't find any controller that supports this, and presume it's directly supported by the

Re: password-free SSH was Re: [ot] Security of my bit coin wallet

2017-11-15 Thread Peter N. M. Hansteen
osting would help follow the discussion a lot - a rant about that and a couple of other things can be had at[1] for those in need). [1] https://bsdly.blogspot.com/2011/02/problem-isnt-email-its-microsoft.html -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.b

Re: session security on OpenBSD vs popular options

2017-11-15 Thread Peter N. M. Hansteen
ld be possible to answer in a mailing list message. - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]:

odd problem with etherip(4)

2017-11-10 Thread Peter J. Philipp
o me. Can someone concurr? Regards, -peter

In httpd redirecting and preserving the query parameters.

2017-11-09 Thread Peter Fraser
location match "^(.*)[.]shtml$" { block return 301 "https://$SERVER_NAME%1.htm?$QUERY_STRING; } I used the above to change and web address ending in .shtml to the same ending in .htm The redirect went to the right spot, but each

Re: Bad network performance on apu2c4

2017-11-05 Thread Peter Faiman
generate traffic of its own. Peter > On Nov 4, 2017, at 10:49 AM, miraculli . <miracu...@gmail.com> wrote: > > Hi, > > i´ve also an APU2 as router. > The uplink connection (16Mbit/s) is via pppoe(4) on em0 > and i couldn´t manage to messure the throughput of this i

Re: Bad network performance on apu2c4

2017-11-04 Thread Peter Faiman
> On Nov 4, 2017, at 13:15, Stuart Henderson <s...@spacehopper.org> wrote: > >> On 2017-11-04, Peter Faiman <peterfai...@gmail.com> wrote: >> Thank you for this explanation. My uplink is only 240mbit and my APU2 >> handles that perfectly, so

Re: Bad network performance on apu2c4

2017-11-04 Thread Peter Faiman
networking/comments/6upchy/can_a_bsd_system_replicate_the_performance_of/dlvdq2e/ > > Chris Thank you for this explanation. My uplink is only 240mbit and my APU2 handles that perfectly, so I’m not having any of these problems. But the insight into the current state of networking was great! :) Peter

Re: FOSDEM 2018 - Distributions Devroom Call for Participation

2017-11-04 Thread Peter Hessler
On 2017 Nov 03 (Fri) at 20:57:52 +0100 (+0100), leo_...@volny.cz wrote: :Hi, : :[I don't normally respond to spam, but I need to blow off some : frustration =)] : This is amazingly insulting, and *you* don't get to do it on our lists. Do not attack people sending useful emails, just because you

Re: Cheap 2x NIC OpenBSD device

2017-11-01 Thread Peter Faiman
Do you mean it runs OpenBSD by default, or you can install OpenBSD? I have a Ubiquiti UniFi and it runs Linux. The Edgerouter Lite looks like a cool little piece of hardware, good tip! > On Nov 1, 2017, at 11:36 AM, Sean Murphy wrote: > > Check out the Ubiquiti

Re: Cheap 2x NIC OpenBSD device

2017-11-01 Thread Peter Faiman
I have an APU2 from PC Engines, which has 3 gigabit ports. I think it’s a bit above your budget of €100, but if you can’t find anything else I highly recommend it. I use one as my edge firewall and haven’t had any problems. > On Nov 1, 2017, at 07:27, Alex Waite wrote: > > I'm

Re: Fail2ban alternative for OpenBSD

2017-10-30 Thread Peter Hessler
On 2017 Oct 30 (Mon) at 11:06:02 +0200 (+0200), Gregory Edigarov wrote: :On 29.10.17 03:20, x9p wrote: :> :> Coming from the Linux world, I wonder if there is a better alternative to :> fail2ban, already being used in OpenBSD servers by the majority. :> :I suggest you NEVER use such "solutions".

Re: is there something missing in pledge?

2017-10-26 Thread Peter J. Philipp
} for (i = 0; i < sb.st_size; i++) { printf("%c", mm[i]); } munmap(mm, sb.st_size); close(fd); exit(0); } <- beta$ ./mmaptest | strings | grep '$2b' |wc -l open: Operation not permitted reopening O_RDWR.. 6 I think this could be abused... Regards, -peter

Re: is there something missing in pledge?

2017-10-24 Thread Peter J. Philipp
) and it bypasses all pledge checks, which satisfies me. When someone comes along and has the same problem all they have is search engines to find out why this all is. :-) I'm good with it. Cheers, -peter On 10/24/17 20:25, Ingo Schwarze wrote: > Hi Peter, > > Peter J. Philipp wrote on

Re: is there something missing in pledge?

2017-10-24 Thread Peter J. Philipp
esent, if it's wanted. So that efforts don't seem like a total waste of time. Extra thanks to Daniel, Theo and Sebastien. Patch to open manpage after my signature. -peter Index: open.2 === RCS file: /cvs/src/lib/libc/sys/open.2,v

Re: is there something missing in pledge?

2017-10-24 Thread Peter J. Philipp
.cpio And here is a userland demonstration of why cpio doesn't work for backing up this file: beta# cpio -o -F spwd.db /etc/spwd.db cpio: Unable to open /etc/spwd.db to read: Operation not permitted This is why I asked if the pledge is too tight on cpio. Regards, -peter On 10/23/17 19:25

Re: is there something missing in pledge?

2017-10-23 Thread Peter J. Philipp
Deal, I'll redesign it, with imsg and privsep to do the inet functions. In the process it'll probably fix what I want from it. Thanks! -peter On 10/23/17 19:25, Theo de Raadt wrote: > Basically, you want your program to be able to do everything. > > pledge isn't a wand you wave over

Re: is there something missing in pledge?

2017-10-23 Thread Peter J. Philipp
cpio(1) will still fail because it's pledged similar, at least that's what I noticed when I removed pledge() from this program to test. Question then is... is cpio(1) pledged wrong? Regards, -peter On 10/23/17 18:06, Theo de Raadt wrote: > That is working as intended. > > Hoist the pw looku

is there something missing in pledge?

2017-10-23 Thread Peter J. Philipp
/var/run/ypbind.lock enables inet operations. Maybe I'm reading all code wrong, so how would I fix this? I just need to somehow read these files...and be pledged. My system is 6.2. Regards, -peter

Re: DMCA Free OpenBSD VPS Hosting, multiple payment methods

2017-10-19 Thread Peter Faiman
You use OpenBSD, so why are you worried about DMCA? That is, you must care about security so you’re already using aggressive blocklists, encrypted peers only, etc etc. A well configured torrent client leaks very little info. Unless laws have changed and you don’t need any proof of wrongdoing

Re: cyrus imapd in 6.2 ports

2017-10-19 Thread Peter J. Philipp
my time. Then perhaps I can go back to the major version 3. What I foolishly did was I did a pkg_add -u and expected everything to still function without informing myself earlier. Thanks Antoine for the link again, -peter On 10/19/17 17:55, Antoine Jacoutot wrote: > On Mon, Oct 16, 2017 at

cyrus imapd in 6.2 ports

2017-10-16 Thread Peter J. Philipp
s they took greater care than me to get this going otherwise the downgrade seems to have worked for me. Cheers, -peter

multiple aliases files in opensmtpd

2017-10-15 Thread Peter Hessler
I'm in the process of migrating my email server from Postfix to OpenSMTPd, and are running into a small issue. In my postfix configuration, I had multiple aliases files. The system default one, my local one, and one for the mailing list software I use. according to the aliases(5) man page, I

Re: php-fpm and OpenBSD 6.2

2017-10-12 Thread Peter Faiman
but it didn’t make it into 6.2. You can read more about the repackaging effort on the ports mailing list; the thread was updated just yesterday. I believe php-fastcgi is a legacy module of some kind, and fpm is the preferred way to run php. So you just need the plain php package that comes with fpm. Peter

Re: du algorithm to calculate diskspace

2017-10-02 Thread Peter Hessler
hardlinks will not duplicate disk space. scp doesn't understand hardlinks. On 2017 Oct 02 (Mon) at 12:08:28 +0200 (+0200), rosjat wrote: :hi there, : :I just noticed, while copying stuf from a very old OpenBSD 4.2 to a OpenBSD :6.1 that du on both systems gives me different results. Did

Re: the whole greylisting, spam filtering thing

2017-09-30 Thread Peter N. M. Hansteen
ntally more fun (fsvo) as more of the traffic moves to IPv6. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.

Re: the whole greylisting, spam filtering thing

2017-09-29 Thread Peter N. M. Hansteen
se sending domains to greylisting at all. My sedimentary nospamd file, built on discovering SPF info for badly behaved domains, is available here https://home.nuug.no/~peter/nospamd - I only started commenting entries after a while, but it's a Works for me(tM) file. See man spamd for examples of how to in

Re: fs level 0

2017-09-23 Thread Peter N. M. Hansteen
ould be to simply reinstall with as little deviation from the defaults as possible. I didn't get hold of a ThinkPad that I was allowed to install OpenBSD on until about 2006, but by then the install and use experience was straightforward. - P -- Peter N. M. Hansteen, member of the first RFC 1149 imp

Re: running spamd on firewall ord on the mailsystem

2017-09-19 Thread Peter N. M. Hansteen
be a lot less of the heavy computation tasks involved in content filtering that need to be performed. - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all mal

isakmp crash

2017-09-13 Thread Peter van Oord van der Vlies
but on 5.9 we had the same issue. Anyone know a fix/workaround for this ? Br, Peter

FYI: man.openbsd.org uses an invalid security certificate.

2017-09-11 Thread Steiner Peter
man.openbsd.org uses an invalid security certificate. The certificate expired on 11.09.2017 06:27. The current time is 11.09.2017 11:31.

Re: Amazon AWS, OpenBSD and IPv6

2017-09-05 Thread Peter Hessler
On 2017 Sep 05 (Tue) at 10:58:41 +0200 (+0200), Zbyszek Żółkiewski wrote: :Hello all, : :Anyone on the list had problem with IPv6 on AWS? :Image (AMI) build from https://github.com/kolargol/openbsd-aws/ (OpenBSD 6.1) : :cat /etc/hostname.xnf0

Moving a Web site from IIS to httpd

2017-08-31 Thread Peter Fraser
The move was no trouble and simple except of one problem. I originally moved the files as is to OpenBSD, but the web site at times referred to files using different cases and those references failed, and since IIS ignores the case in filenames there was no problem. I then lower cased all the

Re: reiser4fs in openbsd

2017-08-25 Thread Peter N. M. Hansteen
t;> zfs is already there: https://marc.info/?l=openbsd- >> cvs=136482823110105= >> <https://marc.info/?l=openbsd-cvs=136482823110105=2> > > Why not implement it? There is reason to believe that a port of the hitherto linux-only CPIP (http://www.blug.linux.no/rfc11

Re: Any update on the current status of BFD?

2017-08-24 Thread Peter Hessler
The update is that it was blocking efforts to unlock the network stack. We decided to disable BFD so everyone could benefit from the performance boosts. It looks like the blocking parts have been addressed and fixed. I still need to fix a few bugs before we can consider enabling it. On 2017

Re: ftp.eu.openbsd.org no longer accepts anonymous ftp?

2017-08-19 Thread Peter N. M. Hansteen
On 08/19/17 11:44, Andreas Thulin wrote: > Also, yesterday's > > # pkg_add -u > > failed for me, apparently for that same reason. Yes, that would happen. Then again, changing ftp:// to https:// in /etc/installurl would make pkg_add -u work. - P -- Peter N. M. Hansteen, member o

ftp.eu.openbsd.org no longer accepts anonymous ftp?

2017-08-19 Thread Peter N. M. Hansteen
downloading bsd.rd only and then doing an http install as much of a hardship (the process takes only a few minutes total either way), but if the change was intentional it would probably be a good thing to update the relevant web pages. - Peter -- Peter N. M. Hansteen, member of the first RFC 1149

Re: keyboard layout 6.1 obsd

2017-08-18 Thread Peter Hessler
xenodm uses .xsession instead of .xinitrc. I highly recommend symlinking them, so both of them one have the same environment. On 2017 Aug 17 (Thu) at 17:19:05 -0300 (-0300), Friedrich Locke wrote: :It did not work. : :On Thu, Aug 17, 2017 at 11:49 AM, Matias Moreno Meringer <

Re: lock X on suspend

2017-08-15 Thread Peter Hessler
I use this, with /etc/apm/hibernate as a symlink. $ cat /etc/apm/suspend #!/bin/sh pkill -USR1 -x xidle #EOF and my .Xdefaults have: XIdle.timeout: 300 XLock.grabmouse: on XLock.mode: blank XLock.mousemotion: on XLock.usefirst: yes XLock.lockdelay: 10 XLock.nice: 19 #EOF On 2017 Aug 15

Re: odd segfault when adding -lutil

2017-08-08 Thread Peter J. Philipp
sent. -peter On 08/08/17 01:36, Jeremie Courreges-Anglas wrote: > On Mon, Aug 07 2017, "Peter J. Philipp" <p...@centroid.eu> wrote: >> Hi, > Hi, > >> I'm writing to misc because I did a change with my programming project and >> it doesn't

odd segfault when adding -lutil

2017-08-07 Thread Peter J. Philipp
has an idea as to what could be the cause of this I'd be grateful. What follows after my signature is the diff I'm working on and my dmesg.boot: Thanks, -peter Index: axfr.c === RCS file: /var/cvsroot/delphinusdns/delphinusdnsd/axfr.c

Re: octeon port, ubiquity edgerouter

2017-07-26 Thread Peter J. Philipp
On Wed, Jul 26, 2017 at 12:20:23AM +0200, Doggie wrote: > W dniu 2017-07-25 o 19:39, Peter J. Philipp pisze: > > Actually I bought the silent fans. So I don't have to write any code, > > too bad the foxconn fans are a misdesign. I'll maintenance this router > > next week f

Re: octeon port, ubiquity edgerouter

2017-07-25 Thread Peter J. Philipp
Actually I bought the silent fans. So I don't have to write any code, too bad the foxconn fans are a misdesign. I'll maintenance this router next week for the new fans. I'm putting it into production at home tomorrow though. Cheers, -peter On 07/25/17 18:38, Peter J. Philipp wrote: > On

Re: octeon port, ubiquity edgerouter

2017-07-25 Thread Peter J. Philipp
On Tue, Jul 25, 2017 at 10:58:13AM +0200, Peter J. Philipp wrote: > Hi, I got the ER-8. First impression is that it's in good condition, but the > fans are a little noisy, hoping it won't be a pain. cnmac0 starts on eth4 > instead of eth0 but that's no problem as long as I remember

Re: octeon port, ubiquity edgerouter

2017-07-25 Thread Peter J. Philipp
On Mon, Jul 24, 2017 at 07:21:36PM +0200, Peter J. Philipp wrote: > > Now it would be very interesting to see dmesg coming from 8-port ER. Hi, I got the ER-8. First impression is that it's in good condition, but the fans are a little noisy, hoping it won't be a pain. cnmac0 starts o

Re: octeon port, ubiquity edgerouter

2017-07-24 Thread Peter J. Philipp
we'll have to wait about a day until I get the rollover cable that I purchased on Amazon yesterday. Cheers, -peter

Re: octeon port, ubiquity edgerouter

2017-07-22 Thread Peter J. Philipp
On Sat, Jul 22, 2017 at 11:55:17AM -0400, Sean Murphy wrote: > Hi Peter, > > This is a solid machine, if you can get it, do so. OpenBSD 6.1 works > very well on this hardware, I have used mine variously as a gateway > router with PF, DHCP server, DNS server with unbound, and loca

octeon port, ubiquity edgerouter

2017-07-22 Thread Peter J. Philipp
Hi, Someone has offered me a deal on a somewhat used Ubiquiti Edgerouter, https://www.ubnt.com/edgemax/edgerouter/ <-- this one. Is it supported by OpenBSD/octeon and if not what needs to be done to make it work? Has anyone experience with this hardware? Regards, -peter

Re: Read sysctl from file

2017-07-21 Thread Peter Faiman
> On Jul 21, 2017, at 1:30 PM, Mihai Popescu <mih...@gmail.com> wrote: > >> Also it does not fail halfway, it will report errors for each of the >> settings that cannot > be applied, > > So Peter, just to check if i got it right, you did a script who > repo

Re: Read sysctl from file

2017-07-21 Thread Peter Faiman
> On Jul 21, 2017, at 3:42 PM, li...@wrant.com wrote: > > Fri, 21 Jul 2017 12:33:31 -0700 Peter Faiman <peterfai...@gmail.com> >> # ./sysctl -p example.conf >> Peter > > Hi Peter, ansibles, > > No guarantee systems controls stay affixed, wrapper tools

Re: Read sysctl from file

2017-07-21 Thread Peter Faiman
is MUST be done with these workflow constraints, I think this is the "best" way to do it. Also it does not fail halfway, it will report errors for each of the settings that cannot be applied, e.g. with a config that sets kern.securelevel=0 and net.inet.udp.sendspace=9216, this happens: # ./sysctl -p example.conf sysctl: kern.securelevel: Operation not permitted net.inet.udp.sendspace: 9216 -> 9216 Peter

Re: Read sysctl from file

2017-07-21 Thread Peter Faiman
man/5b67c530b0ffa009ebef904ed0678e26 Ideally these tools wouldn't use Linux-specific features. But emulating simple features like sysctl -p in a non-invasive way isn't too hard. Peter

Re: Preferred configuration for SLAAC in hostname.if

2017-07-21 Thread Peter N. M. Hansteen
' and 'inet6 autoconf' are > "equivalent" as far as /etc/netstart is concerned. > > What's the preferred setting for SLAAC in hostname.if(5)? "inet6 autoconf" is what you get if you choose the autoconf option during install. I wasn't even aware that the old style "rtsol"

Re: AMD64 modern laptop recommendation

2017-07-18 Thread Peter N. M. Hansteen
s can be had lightly used at attractive prices via ebay and similar. For UEFI and such, for my latest I simply did not change the BIOS defaults away from "Secure Boot" and things just worked. -- B< ------ - Peter -- Peter N. M. Hansteen, member of the first RFC 1149

Re: AMD64 modern laptop recommendation

2017-07-18 Thread Peter N. M. Hansteen
t that device. [1] http://bsdly.blogspot.com/2017/07/openbsd-and-modern-laptop.html - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traff

Re: Robust ThinkPad suggestions for running OpenBSD.

2017-07-12 Thread Peter N. M. Hansteen
trackpoint, but then my typical work is not too mouse-intensive. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29

Re: Problems with IPv6 and routing domains

2017-07-04 Thread Peter Hessler
On 2017 Jul 04 (Tue) at 16:24:53 +0200 (+0200), Claus Lensbøl wrote: :Hi Peter, : :I'm getting: :# route -T75 default ::1 -blackhole :route: botched keyword: default :usage: route [-dnqtv] [-T tableid] command [[modifiers] args] :commands: add, change, delete, exec, flush, get, monitor, show

Re: Problems with IPv6 and routing domains

2017-07-04 Thread Peter Hessler
Always Always ALWAYS ALWAYS create a default route in each routing domain. !/sbin/route -T XXX default ::1 -blackhole On 2017 Jul 04 (Tue) at 15:16:24 +0200 (+0200), Claus Lensbøl wrote: :Hi misc, : :I'm having trouble with implementing rdomains and IPv6. : :I have followed this guide which

Re: Enabling BFD on a VLAN interface

2017-06-30 Thread Peter Hessler
Hi Tristan BFD is not yet finished, so it is disabled. It was not enabled for the 6.1-release, sorry. On 2017 Jun 30 (Fri) at 20:24:49 +0200 (+0200), Tristan Delsol wrote: :Hi all, : :I currently have BGP setup to our ISP using openBGPd, this works great. I saw that the current stable 6.1 has

Re: Can I use OpenBSD in a virtual machine, for example, VirtualBox?

2017-06-27 Thread Peter N. M. Hansteen
oud' providers such as Amazon, Microsoft and others have tended to be usable and some are now even adding official support. So the short answer applies. (In addition we hav LDOMs on SPARC64, and possibly others I've forgotten just now) -- Peter N. M. Hansteen, member of the first RFC 1149 implementat

Re: bgp-spamd added 192.43.244.163

2017-06-13 Thread Peter Hessler
51 8107227 : :Bitte prüfen Sie, ob diese Mail wirklich ausgedruckt werden muss! Before you :print it, think about your responsibility and commitment to the ENVIRONMENT : -- If two wrongs don't make a right, try three. -- Laurence J. Peter

Re: Current FreeBSD looking to switch to OpenBSD

2017-06-10 Thread Peter N. M. Hansteen
Also, http://man.openbsd.org/ is very useful - go there, type your keyword in the search field, click apropos and you get all the man pages matching that keyword. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http:/

Re: bgp-spamd added 192.43.244.163

2017-06-04 Thread Peter Hessler
Please double check your setup. That IP is for 'lists.openbsd.org', and should be listed in the *whitelist*. I do distrubute the whitelist next to the blacklist, so you MUST NOT blindly block every IP that I distribute to you. On 2017 Jun 03 (Sat) at 23:30:36 +0200 (+0200), Markus Rosjat

Re: smtpd doesn't start

2017-05-30 Thread Peter Hessler
On 2017 May 30 (Tue) at 10:37:37 +0100 (+0100), Craig Skinner wrote: :.localdomain (.local interferes with iStuff, avoid it) :.internal :.private :.priv :.lan NO NO NO NO NO NO NO NO NO All of those domains may (or have been) issued by ICANN, and can be used for real. The only domains you

Re: Can I bind USB/other interface/device number (e.g. cdceX) to particular MAC, USB serial number or the like?

2017-05-30 Thread Peter Hessler
On 2017 May 29 (Mon) at 02:13:57 + (+), Tinker wrote: :Hi misc@, : :For pluggable devices such as USB NIC:s, is there any way to make OpenBSD :bind a particular device based on its MAC or USB serial number or the like :variable, to a particular interface or device filename? : :E.g. MAC X

Re: file systems

2017-05-26 Thread Peter Hessler
On 2017 May 26 (Fri) at 11:35:49 -0300 (-0300), Friedrich Locke wrote: :Hi folks, : :does anybody here run OBSD with a file system bigger than 10TB ? :How much time boot takes to bring the system up (i mean fsck) ? :Are you using ffs2 ? With softdep ? : :Thanks. I created a 24T disk with ff2. I

Banana Pi R1 - working dwge(4)

2017-05-26 Thread Peter J. Philipp
. -peter rebooting... U-Boot SPL 2017.03 (Apr 01 2017 - 16:25:44) DRAM: 1024 MiB CPU: 91200Hz, AXI/AHB/APB: 3/2/2 Trying to boot from MMC1 U-Boot 2017.03 (Apr 01 2017 - 16:25:44 -0600) Allwinner Technology CPU: Allwinner A20 (SUN7I) Model: Lamobo R1 I2C: ready DRAM: 1 GiB MMC: SUNXI

Valgrind W^X Violation

2017-05-25 Thread Peter Ezetta
2**3 filesz 0x0290 memsz 0x0290 flags r-- Dynamic Section: NEEDED libc.so.89.3 HASH0x101f40 STRTAB 0x102558 SYMTAB 0x1020a8 STRSZ 0x11c SYMENT 0x18 DEBUG 0x0 PLTGOT 0x203ee0 PLTRELSZ0x2b8 PLTREL 0x7 JMPREL 0x1026f0 RELA0x102678 RELASZ 0x78 RELAENT 0x18 RELACOUNT 0x2 === Thanks in advance for any advice that you might be able to offer. Peter

Re: Spamtrap doesn't work for me

2017-05-18 Thread Peter N. M. Hansteen
I can come up with suitable wording unless somebody beats me to it. - P -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah s

Re: Spamtrap doesn't work for me

2017-05-17 Thread Peter N. M. Hansteen
; But the spamd-greytrap table remains empty > Peter, do you have any entries when you do pfctl -t spamd-greytrap -T show Actually, I don't have that table at all. The greytrapping parts uses the database, not tables. The thinking is roughly that it makes sense to have the whitelisted addresses

Re: Spamtrap doesn't work for me

2017-05-17 Thread Peter N. M. Hansteen
ngle brackets - I have both kinds in my spamdb: [Wed May 17 16:56:00] peter@skapet:~/upgrade$ doas spamdb | grep SPAMTRAP | grep lorgnette SPAMTRAP|<lorgne...@dataped.no> SPAMTRAP|<openinglorgne...@dataped.no> SPAMTRAP|peninglorgne...@dataped.no SPAMTRAP|openinglorgne...@dataped.no SPAMTRA

Re: Libreoffice Calc (sometimes) kills X when attempting to import a CSV file?

2017-05-13 Thread Peter N. M. Hansteen
And it happened again - On 05/07/17 23:48, Stuart Henderson wrote: > On 2017-05-06, Peter N. M. Hansteen <pe...@bsdly.net> wrote: >> And it happened again - >> https://home.nuug.no/~peter/soffice_vs_x_csv/fehfeh.csv triggered >> another kaboom, producing the log f

Re: OpenBSD and you

2017-05-10 Thread Peter N. M. Hansteen
On Wed, May 10, 2017 at 01:20:06PM +0300, Manolis Tzanidakis wrote: > On Wed (10/05/17), Peter N. M. Hansteen wrote: > > That was the first option that came to mind, and the one I may go for as > > a supplemental format *if* I can find a way to generate PDFs from this > > so

Re: OpenBSD and you

2017-05-10 Thread Peter N. M. Hansteen
upt other things I need to get done. The in-browser print preview method is simply not a practical option. And reverting to the previous powerpoint clone rubbish is right out. If I do find a workable option, I'll let you all know. -- Peter N. M. Hansteen, member of the first RFC 1149 implementa

Re: OpenBSD and you

2017-05-09 Thread Peter N. M. Hansteen
And I was just reminded off-list that the remark markdown variant (https://github.com/gnab/remark) used for this presentation requires javascript enabled in your browser. Sorry about that. I'll be looking into workarounds, hopefully some can be found. - Peter -- Peter N. M. Hansteen, member

Re: OpenBSD and you

2017-05-09 Thread Peter N. M. Hansteen
/~peter/openbsd_and_you/ Updates may happen occasionally. - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah s

Packet in and out on the same eithernet port.

2017-05-09 Thread Peter Fraser
Because of one user's misconfiguration of Microsoft's HypeV, his virtual machines were not getting the results of arp. As a result of that configuration all the packets going to machines on the same subnetwork were going to the default gateway. The default gateway was an OpenBSD 6.1 server.

Re: Libreoffice Calc (sometimes) kills X when attempting to import a CSV file?

2017-05-07 Thread Peter N. M. Hansteen
On 05/07/17 23:48, Stuart Henderson wrote: > On 2017-05-06, Peter N. M. Hansteen <pe...@bsdly.net> wrote: >> And it happened again - >> https://home.nuug.no/~peter/soffice_vs_x_csv/fehfeh.csv triggered >> another kaboom, producing the log file >> https://home.nuug.

Re: Libreoffice Calc (sometimes) kills X when attempting to import a CSV file?

2017-05-06 Thread Peter N. M. Hansteen
And it happened again - https://home.nuug.no/~peter/soffice_vs_x_csv/fehfeh.csv triggered another kaboom, producing the log file https://home.nuug.no/~peter/soffice_vs_x_csv/Xorg.0.log and the core file https://home.nuug.no/~peter/soffice_vs_x_csv/Xorg.core I'll have to read up on usefully

Re: Libreoffice Calc (sometimes) kills X when attempting to import a CSV file?

2017-05-06 Thread Peter N. M. Hansteen
ome useful information. > - look at /var/crash and profit :D - P -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" del

Libreoffice Calc (sometimes) kills X when attempting to import a CSV file?

2017-05-06 Thread Peter N. M. Hansteen
lled in such a way that it left a corefile: [Sat May 06 09:50:22] peter@elke:~$ ls -ltr *core -rw--- 1 peter peter 1528700960 May 5 22:56 firefox.core -rw--- 1 peter peter56259040 May 6 09:25 emacs-25.2.core (the firefox.core here is too old to be relevant here). So the ques

Re: Incorrect file destination when logging with syslogd

2017-05-05 Thread Peter Hessler
it is picked up. On 2017 May 05 (Fri) at 16:30:33 +0200 (+0200), Paolo Aglialoro wrote: :Sorry Peter, what do '2' or '5' stand for? :And what does creating a file with '5' mean? : :This was my procedure: : :# cat "" > c2851.log :# chown root:wheel c2851.log :# chmod 644 c2851.log : :

Re: Incorrect file destination when logging with syslogd

2017-05-05 Thread Peter Hessler
On 2017 May 05 (Fri) at 15:38:36 +0200 (+0200), Paolo Aglialoro wrote: :As written, mtime was due by me recreating the file trying to make things :work, not by syslog. :As of today, in fact, mtime is still unchanged, while output to :/var/log/messages still flowing from router. : : :On Fri, May 5,

Re: Pf with secondary DNS resolution

2017-05-04 Thread Peter N. M. Hansteen
and some fairly straightforward scripting involving host and pfctl commands. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" del

Re: Pf with secondary DNS resolution

2017-05-03 Thread Peter N. M. Hansteen
uleset. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.

/etc/rc.d/nsd start/stop/restart fails in nsd.conf does not enable "Remote Control"

2017-05-02 Thread Peter Fraser
/etc/rc.d/nsd uses nsd-control to start/stop/restart nsd. nsd.conf tells you that "Remote Control" is by default disabled. It would be nice if some part of the documentation pointed out that it must be enabled.

Re: Need some pointers regarding ELF

2017-04-28 Thread Peter J. Philipp
One quick note. The sources here are against 6.1 not -current, in order to compile against -current I'M sure it'll have to be put up to speed. Regards, -peter

Re: Need some pointers regarding ELF

2017-04-28 Thread Peter J. Philipp
On Tue, Apr 25, 2017 at 10:07:37AM +, Stuart Henderson wrote: > On 2017-04-25, Peter J. Philipp <p...@centroid.eu> wrote: > > Hi, > > > > In the past I've been examining signed binaries in the OpenBSD system. > > I wrote some kernel code for this,

man.openbsd.org via HTTPS

2017-04-28 Thread Peter Bill
I found a website that provides man.openbsd.org via HTTPS: https://twitter.com/FiloSottile/status/845068942762762241 https://man.filippo.io/ Have a great weekend!

Re: torrent downloads

2017-04-27 Thread Peter Hessler
yes, but unlike those distros the openbsd installers aren't measured in gigabytes. The site mentioned by OP (http://openbsd.somedomain.net) is up to date, and has the torrents mentioned. it just seems, nobody cares. On 2017 Apr 27 (Thu) at 15:07:38 +0200 (+0200), Nicolas Schmidt wrote: :Many

Need some pointers regarding ELF

2017-04-25 Thread Peter J. Philipp
found a patch by matt dempsky online which does the randomize stuff, but that didn't help me much either. Thanks! -peter

Re: OpenBSD 6.1, spamd strange behavior

2017-04-21 Thread Peter N. M. Hansteen
u're not showing us? (see the GREYTRAPPING section of the man page) -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah

Re: spamd and outlook.com

2017-04-21 Thread Peter N. M. Hansteen
And apropos of the subject, quite on-topic: https://home.nuug.no/~peter/dmarc-reject_openbsd-misc_spadm_and_spf.txt - P (pats robot on virtual head) -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no

Re: spamd and outlook.com

2017-04-21 Thread Peter N. M. Hansteen
domains is one solution, and in addition you will find my collection of manually maintained SPF sedimentation is available at https://home.nuug.no/~peter/nospamd The problem is that the 'architects' behind outlook.com and their ilk are really not on board with the idea that having some tiny bit

<    2   3   4   5   6   7   8   9   10   11   >