Re: fw_update

On 2024-05-02 21:25:00, Stuart Henderson wrote: You have an old fw_update(1) manual lying around which should be removed. It moved to fw_update(8). "Moved"? And yet another BTW: https://man.openbsd.org/OpenBSD-7.5/ seems to be forgotten. Regards Harri

Re: fw_update

On 2024-04-30 13:25:39, Страхиња Радић wrote: Дана 24/04/30 01:12PM, Kirill A. Korinsky написа: You may download it by hand and install as fw_update /path/to/firmware.tgz BTW, this is in fw_update(8). man 8 fw_update /SYNOPSIS Another BTW: # fw_update -i fw_update:

Re: USB keyboard quirks may not be properly catered to in bsd.rd kernels

The keyboard is a Newmen GM610 Gaming Keyboard I shot on amazon. Regards Harri

Re: bad first impression [ ...] Fwd: [HUNSN RJ43: USB keyboard lost at boot time]

On 2024-04-26 10:31:17, Stuart Henderson wrote: So another keyboard works with this machine, and this keyboard works with other machines. Not exactly. In the meantime I tried the keyboard on another host (some ancient O-series Zotac box) with the same result: At the boot prompt the keyboard

Re: bad first impression of OpenBSD at install time

On 2024-04-25 17:51:59, Claudio Jeker wrote: Without providing at least a dmesg of that system there is no way we can help you. It is not even clear what kind of system or arch it is? See my post from 2024-04-20. Regards Harri

Re: what became of "apmd -C"?

On 2024-04-24 09:30:29, Stuart Henderson wrote: To get similar to previous behaviour, you can either install obsdfreqd from packages (userland monitoring, similar to old old apmd -C), or some people run with a kernel patch like this: Index: kern/sched_bsd.c

bad first impression of OpenBSD at install time

Hi folks, I posted this before, without any response from the community: At the boot> prompt of the installer image my USB keyboard still works, but at the install prompt the keyboard is ignored. I cannot press "i" to actually install OpenBSD. Fortunately I am with BSD since Ultrix and SunOS

what became of "apmd -C"?

Hi folks, https://www.openbsd.org/faq/upgrade57.html doesn't mention it, so I wonder what became of "apmd -C"? The man page for OpenBSD 5.7 silently dropped this option, but even apmd of 7.5 still accepts it. ? Regards Harri

HUNSN RJ43: USB keyboard lost at boot time

Hi folks, This morning I've got a HUNSN RJ43 network appliance with N100 and 4 2.5Gbit network interfaces. Problem: The keyboard is lost at boot time. It still worked at the boot> prompt, but in OpenBSD's installer menu or at the login prompt it is ignored. I have to pull it out and plug it into

Re: smtpd[68513]: warn: lost processor: spamassassin exited abnormally

Hi Omar, On 2023-11-09 18:22:41, Omar Polo wrote: I've committed the update and backported to -STABLE so the fixed package should appear in the next days. Thanks for the report and sorry for the breakage I highly appreciate your fast response and the fix you have provided. Regards Harri

Re: smtpd[68513]: warn: lost processor: spamassassin exited abnormally

Hi Omar, sorry for the delay, but I have good news: The patch seems to work. Of course I will continue to watch it. Thank you very much Harri

Re: smtpd[68513]: warn: lost processor: spamassassin exited abnormally

On 2023-11-05 10:21:10, Omar Polo wrote: Can you try the following diff to see if it helps? I will try this evening after work, stay tuned. Its been a while since I used CVS. Regards Harri

smtpd[68513]: warn: lost processor: spamassassin exited abnormally

Hi folks, since OpenBSD 7.4 the spamassassin filter seems to be broken. On the first EMail opensmtpd dies with a message in maillog saying Nov 5 08:59:23 mhost smtpd[60460]: bcc4f33a095bb28e smtp connected address=xx.xx.xx.xx host=mail.example.com Nov 5 08:59:23 mhost

Re: 7.4 and hostname.pfsync7

On 2023-10-16 07:59:06, Peter Hessler wrote: On 2023 Oct 16 (Mon) at 07:53:37 +0200 (+0200), Harald Dunkel wrote: :/etc/hostname.vlan111: :vnetid 111 :parent re0 You need to add "up" here. The "up" in hostname.vlan111 makes no difference for the configuration of the

Re: 7.4 and hostname.pfsync7

Hi folks, sorry, I had hoped somebody knew the answer and that the man page could be fixed. I have just limited test equipment for verification, so I have setup a vlan interface for pfsync and tried some combinations. Result: Apparently there is no difference between up syncdev

7.4 and hostname.pfsync7

Hi folks, I learned that pfsync has been rewritten for 7.4 and that up syncdev em7 doesn't work anymore. What about up syncdev em7 (one line), as suggested in the current pfsync(4)? Regards Harri

mg wishlist: vertical split

Hi folks, would it be possible to introduce a vertical split window (Ctrl-X 3) in mg, similar to horizontal split? I am really missing this feature. Vertical split allows me to work with similar files (shown side-by-side) much more efficiently. Regards Harri

improve wireguard logging, please?

Hi folks, would it be possible to improve wireguard logging in OpenBSD? A message like Receiving handshake initiation from peer 17 in /var/log/messages of 2 weeks ago isn't really helpful. Who the heck was peer 17? For forensic measures in case of an incident I need the peers public

Re: 7.3 on Zotac O1520 makes it unbootable

On 2023-06-18 09:03:02, Harald Dunkel wrote: Hi folks, if I install 7.3 on a Zotac O1520 on its internal SATA disk (MBR or UEFI), then the system gets stuck during BIOS self test on the following reboots. Without removing the disk I cannot even enter BIOS or select a boot media. Surely OpenBSD

7.3 on Zotac O1520 makes it unbootable

Hi folks, if I install 7.3 on a Zotac O1520 on its internal SATA disk (MBR or UEFI), then the system gets stuck during BIOS self test on the following reboots. Without removing the disk I cannot even enter BIOS or select a boot media. Surely OpenBSD is not to blame here. But its a pity. I'd

Re: 7.3: high network latency every couple of seconds. Carp?

Please ignore this duplicate post and reply to the other thread on this mailing list. I had used my private EMail account by accident. Regards Harri

7.3: high network latency every couple of seconds. Carp?

Hi folks, Using 7.3 on a HA gateway ("redgatea" and "redgateb", one external network, 2 internal networks, carp on all interfaces) I see a high network latency for incoming network traffic every couple of seconds. Trying to ping redgatea from redgateb over the pfsync interface, for example:

openbsd on nanopi R5C?

Hi folks, has anybody succeeded in running OpenBSD on the Nanopi R5C? https://wiki.friendlyelec.com/wiki/index.php/NanoPi_R5C I haven't bought the hardware yet. The R5S is in OpenBSD's supported hardware list on ARM. Regards Harri

mg: problem with large directory names and open new file

Hi folks, If I have opened a file in a subdirectory with a very long path (larger than the terminal width) and if try to open a new file using ^x^f, then mg seems to be confused. The long path is cut off in the Find File dialog. Only the first chars are shown. The filename I enter is not shown

mailx in pipeline mode: add fields to the EMail header?

Hi folks, is there some way for OpenBSD's mailx (reading an EMail to send from stdin) to add fields to the EMail header, e.g. Auto-Submitted: auto-generated for generated EMails, according to the recommendation in RFC 3834? Or maybe Precedence: bulk Maybe some custom fields

Re: Ctrl key doesn't interrupt boot

On 2022-11-14 13:54:18, Nick Holland wrote: Wild guess, but I suspect that your BIOS isn't setting the marker that /boot uses to see the pressing of the CTRL key on your system with a USB keyboard. /boot is pretty much dependent upon your system BIOS doing The Right Thing, as the OS hasn't

Ctrl key doesn't interrupt boot

Hi folks, according to boot(8) holding the Ctrl key is supposed to interrupt boot before /etc/boot.conf is read. But it doesn't. I see boot's message on VGA that it switches over to serial (as mentioned in boot.conf), and then it doesn't boot for a reason I would like to investigate. The screen

Re: sysmerge: what is [leave it for later] good for, actually?

Hi Amit, On 2022-10-22 18:29:35, Amit Kulkarni wrote: You chose later, so now do a "doas sysmerge", and merge it now? Ah, sorry, my bad. Apparently I wasn't root. Thank you for the hint Harri

using netstat without terminal

Hi folks, would it be possible to fix netstat for 7.3 wrt the assumed screen size, even if there is no terminal involved? Something like netstat -f inet6 -ln

sysmerge: what is [leave it for later] good for, actually?

Hi folks, sysmerge noted that I had modified my /etc/newsyslog.conf. Since I didn't had time for this while other important services were not merged yet I chose the default [leave it for later]. Problem is, when I came back later (after a reboot), sysmerge didn't show me that newsyslog.conf

"fast" reboot without BIOS involved?

Hi folks, would it be possible to add some kind of "fast reboot" to OpenBSD? * shutdown all userspace * run boot, using the old kernel to load a new one * start init again The "traditional" reboot gives me a downtime of 2 to 3 minutes on some hosts, before the boot

Re: Howto do "a detailed cleanup with the aid of the sysclean package"?

Hi folks, I think the main problem is pretty easy to describe: OpenBSD loses track about what it had installed and cannot clean up its own files on a system upgrade. Regards Harri

Re: Howto do "a detailed cleanup with the aid of the sysclean package"?

On 2022-04-20 21:25:49, Ryan Kavanagh wrote: On Wed, Apr 20, 2022 at 08:39:09PM +0200, Harald Dunkel wrote: sysclean lists 4180 files and directories on my home server Could you please elaborate how sysclean is going to help me to keep my openbsd hosts clean? How is the usage model

Howto do "a detailed cleanup with the aid of the sysclean package"?

Hi folks, the upgrade guide claims A detailed cleanup can be done with the aid of the sysclean package. sysclean lists 4180 files and directories on my home server, including mail directories, config files of various external packages, generated files, .git directories, etc. A lot of

RC version internal available only?

Hi folks, I would like to upgrade to OpenBSD beta on a Zotac O-series PC. I found the snapshots directory, but the upgrade71 document appears to be missing. Do you think it could be included into the snapshots directory, next to the INSTALL.amd64 file, for example? It could encourage more people

Re: who is writing to a deleted file?

On 2022-03-18 16:36:18, Janne Johansson wrote: Den fre 18 mars 2022 kl 16:29 skrev Harald Dunkel : How can I find out which process is eating up disk space, without killing it, of course? fstat(8) can help, # fstat | sort -n -k 9 to get the largest open file at the bottom, third column

who is writing to a deleted file?

Hi folks, something on my gateway (7.0) is hiding disk space, AFAICS: # du -hs / 3.4G/ # df -h / Filesystem SizeUsed Avail Capacity Mounted on /dev/sd0a 31.5G5.6G 24.3G19%/ How can I find out which process is eating up

Re: pkg_add -u fails with "failed to open CA file '/etc/ssl/cert.pem': Permission denied"

I highly appreciate the carefulness, but the error message doesn't indicate a user "_pkgfetch", nor is it mentioned on pkg_add(1). Please reconsider my suggestion made on 2022-01-14: > In general, if there is a permission problem due to file system > access bits, then it would be wise to include

Re: pkg_add -u fails with "failed to open CA file '/etc/ssl/cert.pem': Permission denied"

On 2022-01-17 18:02:25, Marc Espie wrote: Lol. cert.pem only contains public certificates. Insisting on only root being able to read it means you are going to run code as root which doesn't require it. That seems way more unreasonable than your original assumption. I am not arguing about

pkg_add -u fails with "failed to open CA file '/etc/ssl/cert.pem': Permission denied"

Hi folks, trying to upgrade the installed packages I get # pkg_add -u https://cdn.openbsd.org/pub/OpenBSD/7.0/packages-stable/amd64/: TLS connect failure: failed to open CA file '/etc/ssl/cert.pem': Permission denied https://cdn.openbsd.org/pub/OpenBSD/7.0/packages/amd64/: TLS connect

Re: pkg_add -u fails with "failed to open CA file '/etc/ssl/cert.pem': Permission denied"

On 2022-01-14 10:42:56, Harald Dunkel wrote: Hi folks, trying to upgrade the installed packages I get # pkg_add -u https://cdn.openbsd.org/pub/OpenBSD/7.0/packages-stable/amd64/: TLS connect failure: failed to open CA file '/etc/ssl/cert.pem': Permission denied https://cdn.openbsd.org/pub

Re: did 70-006_x509 break ikectl ca ?

and it might come back. Regards Harri On 2021-12-13 20:28:11, Tobias Heider wrote: On Sun, Dec 12, 2021 at 10:01:20PM +0100, Harald Dunkel wrote: Hi folks, since syspatch 70-006_x509 and a reboot IKEv2 between 2 OpenBSD clusters (2 hosts on each end, carp interface, passive by default, managed via

did 70-006_x509 break ikectl ca ?

Hi folks, since syspatch 70-006_x509 and a reboot IKEv2 between 2 OpenBSD clusters (2 hosts on each end, carp interface, passive by default, managed via sasyncd) appears to be broken. /var/log/messages says Dec 12 21:40:28 gate5a iked[57676]: spi=0x5a7c2732b4b355e6: ikev2_dispatch_cert: peer

Re: use pfctl to reread /etc/mail/spamd-white table

On 2021-10-28 12:06:24, Zé Loff wrote: From the man page: For the add, delete, replace, and test commands, the list of addresses can be specified either directly on the command line and/or in an unformatted text file, using the -f flag. So: pfctl -t spamd-white -T add -f

use pfctl to reread /etc/mail/spamd-white table

Hi folks, my pf.conf contains table persist file "/etc/mail/spamd-white" I understand that I can add and delete hosts from the table manually later, but on very large tables this is pretty painful. There is a high risk that the table has just been flushed and is not up-to-date

improving wireguard debug & monitor capabilities?

Hi folks, if I turn on debugging for wg0, then I get a lot of lines in /var/log/messages like : Oct 20 10:23:50 wggate /bsd: wg0: Handshake for peer 5 did not complete after 5 seconds, retrying (try 11) Oct 20 10:23:51 wggate /bsd: wg0: Receiving keepalive packet from peer 8 Oct 20 10:23:55

Re: Can't figure out what's taking up space on /

On 8/5/21 11:13 AM, Bastien Durel wrote: Since then, I put the mount points directories immutable (before mount) fremen# mkdir /tmp/foo fremen# chflags schg /tmp/foo fremen# touch /tmp/foo/bar touch: /tmp/foo/bar: Operation not permitted fremen# ls -loa /tmp/foo total 8 drwxr-xr-x 2 root

pf question: IPv6 prefix changed, how to tell pf?

Hi folks, Deutsche Telekom gives me a new /56 prefix for my internal net and a new /64 prefix for the external connection on every reboot of my modem. The old internal prefix is not routed anymore. Question is, how can I tell pf to use the new prefix? There are a few constants in my pf.conf

Re: 6.9 regression: opensmtpd complains "smtp cert-check result=\"no certificate presented\""

On 6/21/21 5:42 PM, naib+li...@xn--bimann-cta.de wrote: You wrote: since the upgrade to 6.9 at the weekend opensmtpd complains smtp cert-check result="no certificate presented" for incoming EMails. Again, this is just a notification from the server, that no client certificates were sent in

Re: 6.9 regression: opensmtpd complains "smtp cert-check result=\"no certificate presented\""

PS: The peer is very picky wrt TLS, thats why this is an important problem. The peer log file shows : Diagnostic-Code: X-Postfix; TLS is required, but was not offered by host mail.example.de[10.145.142.10] Return-Path: Received: from mout01.posteo.de

Re: 6.9 regression: opensmtpd complains "smtp cert-check result=\"no certificate presented\""

On 6/21/21 12:52 PM, n...@xn--bimann-cta.de wrote: since the upgrade to 6.9 at the weekend opensmtpd complains smtp cert-check result="no certificate presented" for incoming EMails. opensmtpd.conf and the certificate chain Hello. This is because clients are not providing a tls client

6.9 regression: opensmtpd complains "smtp cert-check result=\"no certificate presented\""

Hi folks, since the upgrade to 6.9 at the weekend opensmtpd complains smtp cert-check result="no certificate presented" for incoming EMails. opensmtpd.conf and the certificate chain hasn't changed. There is only a single MX defined in DNS (for both "example.com" and "example.de"),

Re: 6.9 + 001: uvm_fault

On 5/17/21 12:27 AM, Antonino Sidoti wrote: Hi, I also have this issue on a fresh install of 6.9 amd64. I reported it as a bug last week to “bugs” mail list with all appropriate information. I can confirm that plugging in a monitor will allow my system to boot. I did not have the 001 patch

6.9 + 001: uvm_fault

Hi folks, after installing syspatch 001 the reboot showed: : scsibus3 at softraid0: 256 targets root on sd0a (614daaae133f0ac5.a) swap on sd0b dump on sd0b uvm_fault(0x82186300, 0xb8, 0, 1) -> e kernel: page fault trap, code=0 Stopped at i915_ggtt_pin+0x29: movq

Re: 6.9 + 001: uvm_fault

And another attempt, see attachment. Seems I have to power cycle to make it boot. Regards Harri OpenBSD/amd64 (redgatea.red.aixigo.de) (tty00) login: root Password: Last login: Sun May 16 11:45:27 on ttyp0 from 2a00:fe0:30:60::7a OpenBSD 6.8 (GENERIC.MP) #5: Mon Feb 22 04:36:10 MST 2021

Re: 6.9 + 001: uvm_fault

PS: The next power cycle went fine, see attachment. Regards Harri boot> NOTE: random seed is being reused. booting hd0a:/bsd: 14415144+3220488+34+0+1171456 [1008375+128+1145856+866050]=0x1526a80 entry point at 0x81001000 [ using 3021440 bytes of bsd ELF symbol table ] Copyright

Re: 6.9 + 001: uvm_fault

PPS: I got a similar panic on another host after installing syspatch 001, see attachment. Regards Harri Last login: Sat May 15 21:46:44 on ttyp0 from 2a00:fe0:30:60::7a OpenBSD 6.8 (GENERIC.MP) #5: Mon Feb 22 04:36:10 MST 2021 Welcome to OpenBSD: The proactively secure Unix-like operating

Re: ifconfig problem with >10 wireguard peers

On 4/7/21 7:44 PM, Stuart Henderson wrote: On 2021-04-07, Harald Dunkel wrote: Do you think it would be possible to increase this limitation to (lets say) 253? I don't see that here: Sorry, my bad. Some lines in my hostname.wg0 were commented out. I didn't notice. We are evaluating

ifconfig problem with >10 wireguard peers

Hi folks, apparently ifconfig (openbsd 6.8) shows only 10 wireguard peers for wg0, even if hostname.wg0 defines 12 peers. This is pretty painful. Do you think it would be possible to increase this limitation to (lets say) 253? Thank you very much in advance Harri

Re: pflogd write /var/run/mypflogdinstance.pid?

On 12/13/20 8:32 PM, Theo de Raadt wrote: If a pflogd dies because of a bug, the pid listed in the file may be reused, and then your kill `cat pidfile` will kill the incorrect process. I understand your concern, but as written before, I am not asking to drop pkill support. How about adding

Re: pflogd write /var/run/mypflogdinstance.pid?

On 12/13/20 7:10 PM, Theo de Raadt wrote: And I'm suggesting the arguments should look like this: pflogd: [priv] -s 160 -i pflog0 -f /var/log/pflog (pflogd) pflogd: [running] -s 160 -i pflog0 -f /var/log/pflog (pflogd) That might allow more accurate pkill targetting. Wouldn't you

Re: pflogd write /var/run/mypflogdinstance.pid?

On 12/7/20 7:19 PM, Theo de Raadt wrote: Yep. It is possible we need a better strategy --- like placing *all* original argv in the [priv] title. If you change the pflogd command line in the process list, what is supposed to happen to the existing code using pkill or pgrep, expecting the

Re: pflogd write /var/run/mypflogdinstance.pid?

On 12/7/20 7:43 AM, Theo de Raadt wrote: We've put some work into making programs not damage their argv. If you provide a strong set of arguments to the programs you start, you may be able to pkill with a more fullsize pattern, increasing the accuracy. AFAICS pflogd rewrites the command

pflogd write /var/run/mypflogdinstance.pid?

Hi folks, I have to run several pflogd in parallel. To make pkill (i.e. newsyslog) work it seems to be necessary to create hard links pflogd1, pflogd2 etc., pointing to /sbin/pflogd. Soft links don't work, because they don't show up in the process table. This introduces new problems on the next

Re: pflogd: Corrupted log file, move it away

Hi folks, On 11/28/20 5:13 PM, Stuart Henderson wrote: It is easy enough to add the filename, but adding that to the log might suggest to users that things are setup to handle multiple pflogd processes and that is not the case. Various parts of the system would need changing in order to

pflogd: Corrupted log file, move it away

Hi folks, I got a bazillion of error messages in /var/log/daemon : Nov 27 08:33:25 gate6a pflogd[26893]: Corrupted log file. Nov 27 08:33:25 gate6a pflogd[26893]: Invalid/incompatible log file, move it away Nov 27 08:33:25 gate6a pflogd[26893]: Logging suspended: open error Nov 27 08:33:32

address lists in iked.conf?

Hi folks, would it be possible to support address lists in iked.conf(5), similar to ipsec.conf(5)? Regards Harri

Re: packet filter question

On 11/13/20 2:06 PM, Harald Dunkel wrote: Hi folks, if it is allowed to ask a question about packet filter here? Found it, please ignore. Harri

packet filter question

Hi folks, if it is allowed to ask a question about packet filter here? Please take a look at the attached pf.conf file. Problem is that incoming traffic from a host in (internal:network) to an external host port is passed in rule 86 (thats one of the debproxy lines) pass $log0 quick

Re: question about hostname.carp

On 11/5/20 9:25 AM, Stuart Henderson wrote: but I prefer this multi-line vhid 41 pass secret advbase 1 advskew 0 carpdev em1 inet 10.0.1.1/24 Thats much better. I was using this "one line for all" thing following some ancient examples. Thanx very much Harri

iked vs IPsec failover (carp & sasyncd)

Hi folks, wrt IPsec failover via sasyncd and carp: sasyncd(8) and iked(8) don't seem to tell, but I would guess that all hosts on the carp interface have to share the private key to support renegotiation. How can I tell iked which private key to use, instead of local.key? Is there a similar

question about hostname.carp

Hi folks short question about hostname.carp1: Is it inet 10.0.1.1 0xff00 NONE vhid 41 pass secret carpdev em1 advbase 1 advskew 0 or inet 10.0.1.1 0xff00 vhid 41 pass secret carpdev em1 advbase 1 advskew 0 ? Using ifconfig I get % ifconfig carp1 -inet

6.8: page fault

Hi folks, after applying the recent 4 syspatches for 6.8 one (of 5) openBSD host ran into the kernel debugger. I missed the error message, but on a reboot there was a page fault. On another reboot there was no problem any more. log is attached. I would be glad to help, but I need some advice

Re: suggestion for the installer

On 10/29/20 3:38 PM, Nick Holland wrote: On 2020-10-29 08:00, Harald Dunkel wrote: Hi folks, do you think it would be possible for the installer to show an eye-catching warning, if "ifconfig" reports "no carrier" for the network port to configure? Just a suggestion, o

suggestion for the installer

Hi folks, do you think it would be possible for the installer to show an eye-catching warning, if "ifconfig" reports "no carrier" for the network port to configure? Just a suggestion, of course Harri

Re: sysupgrade --download ?

Hi Theo, sorry, I missed that. I have associated "-n" with dry-run mode. Thanx for the hint Harri

sysupgrade --download ?

Hi folks, I stumbled over a bad mirror for sysupgrade. Would it be possibe to add an option "-d" to sysupgrade, to just download and verify the required files? A subsequent call without "-d" should verify the signatures in the download directory again and proceed. I would like to make sure

Re: Inphi CS4223 for 4x 10GbE SFP+

Hi folks, below you can find the summary of "openssl speed" on the network appliance. Speed is not amazing, but AFAIU "openssl speed" is single-threaded. The CPU has 8 cores (no hyperthreading). Assuming IPsec encryption/decryption is running in kernel space, I wonder if the OpenBSD kernel can

Re: Inphi CS4223 for 4x 10GbE SFP+

On 10/19/20 4:40 PM, Stuart Henderson wrote: On 2020-10-19, Harald Dunkel wrote: Hi folks, I am about to order 2 network appliances, providing an "Inphi CS4223 for 4x 10GbE SFP+". dmesg would be of interest :) See attachment. Product web site: https://www.ibase.com.

Re: Inphi CS4223 for 4x 10GbE SFP+

On 10/19/20 9:46 PM, Stuart Henderson wrote: On 2020-10-19, Harald Dunkel wrote: What would these bypass problems look like? Hopefully the bypass feature can be turned off/ignored. If there are problems then possibly 2 of the ports either won't work or will be connected directly to 2

Re: Inphi CS4223 for 4x 10GbE SFP+

On 10/19/20 4:36 PM, Stuart Henderson wrote: On 2020-10-19, Tom Smyth wrote: Hi Harald, check the Atom processor and make sure that it is not one of those ones that fail after a while (some electrical issue) ... It isn't. Anyway, some more precise information about the affected models

Re: Inphi CS4223 for 4x 10GbE SFP+

On 10/19/20 4:40 PM, Stuart Henderson wrote: I can't say for sure but I think there's a high chance that the 10G will work, and at least some of the 1G will work, but you might run into problems with the 1G "bypass" ports. dmesg would be of interest :) Of course. The host are already on

Inphi CS4223 for 4x 10GbE SFP+

Hi folks, I am about to order 2 network appliances, providing an "Inphi CS4223 for 4x 10GbE SFP+". Does this ring a bell? Is this already supported by 6.8? Other technical specs can be found on https://www.ibase.com.tw/english/ProductDetail/NetworkAppliance/FWA8506 BTW, congratulations to the

Re: Router advertisements for dynamic IPv6 prefix

On 10/14/20 10:18 AM, Stuart Henderson wrote: On 2020-10-11, Henrik Friedrichsen wrote: Hey, my ISP provides connectivity via PPPoE. An IPv6 prefix is handed out via DHCPv6 PD, which my OpenBSD gateway passes on to clients with the help of router advertisements using rad. This works fine

sasyncd questions about shared secret

Hi folks, question about sasyncd, because the man page doesn't tell: (Please excuse if I am too blind to see.) Do all sasync daemons on all peers have to share the same secret, or is it just the sasync daemons on the same carp interface? Where would I have to look for error messages indicating

spamd vs IPv6

Hi folks, spamd(8) still mentions 127.0.0.1, but no indication of IPv6 support. Looking on Google for "openbsd spamd ipv6" gives me some entries of 2015 and 2016, but no up-to-date information. Please excuse if I am too blind to see. I am a big fan of spamd, but I wonder is spamd in a dead-end

net.inet.ip6.forwarding=1 ?

Hi folks, congrats to the new release. Question about https://www.openbsd.org/faq/upgrade67.html: Shouldn't it be net.inet.ip.forwarding=1 net.inet6.ip6.forwarding=1 Thats what I found in my sysctl.conf (before upgrade). Regards Harri

Re: sysupgrade (Was: Re: Kernel crash in OpenBSD 6.5)

On 8/1/19 2:33 PM, Maurice McCarthy wrote: In the past it was not uncommon for non-X programs in base to have dependencies in Xenocara. Are you certain that this is no longer so? Yup

sysupgrade (Was: Re: Kernel crash in OpenBSD 6.5)

Hi folks, On 7/30/19 3:08 PM, Hrvoje Popovski wrote: try to update both boxes to latest snapshot at least because in snapshot you have excellent tool called sysupgrade ... you will love it :) with this tool you can upgrade os to latest snapshot without any problem over ssh :) This is cool.

6.5: rc.firsttime failed, how to restart?

Hi folks, after the upgrade to 6.5 rc.firsttime was lucky to send me an EMail: Path to firmware: http://firmware.openbsd.org/firmware/6.5/ Installing: inteldrm-firmware intel-firmware vmm-firmware rtwn-firmware http://firmware.openbsd.org/firmware/6.5/: ftp: firmware.openbsd.org: no address

Re: 6.5 on EdgeRouter Lite: 1 CPU offline?

Hi Tobias, On 4/25/19 7:45 PM, Tobias Ulmer wrote: > On Thu, Apr 25, 2019 at 06:14:04PM +0200, Harald Dunkel wrote: >> >> Next it seems that one CPU is offline somehow. ??? >> >> chester# sysctl -a | grep -i cpu >> kern.ccpu=1948 >>

6.5 on EdgeRouter Lite: 1 CPU offline?

There is a suspicious message dev/ksyms: Symbol table not valid. Next it seems that one CPU is offline somehow. ??? chester# sysctl -a | grep -i cpu kern.ccpu=1948 hw.ncpu=1 hw.cpuspeed=500 hw.ncpufound=2 hw.ncpuonline=1 Regards Harri

OpenBSD on Macbook 12" 2017?

Hi folks, does it work, OpenBSD on a 12" Macbook 2017? I tried Linux once, but keyboard and trackpad were not working, so I kept MacOS. Looking on Google I found just Macbook Airs and Pros. Hopefully I wasn't too blind to see. Every helpful comment is highly appreciated Harri

Re: is pfsync loosing data on reboot?

Hi folks, On 2/1/19 1:00 PM, Sebastian Benoit wrote: Janne Johansson(icepic...@gmail.com) on 2019.02.01 12:49:53 +0100: Yes, it will get a full dump since it has zero pre-existing knowledge of the current situation regarding states. I think carp will delay itself until the sync is done, so

is pfsync loosing data on reboot?

Hi folks, I have a question about pfsync protocol in a master-backup firewall configuration (OpenBSD 6.3 and 6.4): If I reboot (let's say) the backup host, will it receive the whole set of state information again, when it gets back online? Hopefully I am not too blind to see, but pfsync(4)

Re: 6.3 just died (not for the first time)

Hi Peter, please check the threads on the b...@openbsd.org mailing list. The patch posted by Martin Pieuchot seemst to help. Its running on my hosts for 5 days without any hiccup. Hope this helps Harri

6.3 just died (not for the first time)

Hi folks, 6.3 just died. Last words: login: kernel: protection fault trap, code=0 Stopped at export_sa+0x5c: movl0(%rcx),%ecx ddb{0}> show panic the kernel did not panic ddb{0}> trace export_sa(10,800033445e70) at export_sa+0x5c pfkeyv2_expire(813d4c00,813d4c00) at

netstat: IPv6 addresses are cut off

Hi folks, netstat cuts off the IPv6 addresses. Sample: # netstat -f inet6 -ln | cat Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address(state) tcp6 0 0 2001:db8:30:7e::.25*.*LISTEN tcp6 0

packet filter: table of tables ?

Hi folks, how can I combine tables into large tables, instead of using inefficient variables? AFAIU I can modify tables using the pfctl command line, but something like this in pf.conf would be nice table const persist { 172.12.127.0/24 172.12.124.0/24 172.12.120.0/24

Re: What would you like to see in upcoming PF tutorials?

Hi Peter, On 12/14/17 9:27 PM, Peter N. M. Hansteen wrote: If you have thoughts on what you would like to see in a tutorial session and would like to share them either with me or the list, we would love to hear from you. What are the risks of ICMP and ICMP6? Is it reasonable to filter these

  1   2   3   >