Re: [Q] Building a release, how do I create install60.fs and install60.iso

[Bodie]

On 17.06.2016 03:39, Bryan C. Everly wrote:
Sorry if this is an obvious one but I've been all over the FAQ, read 
the
makefiles, etc. and cannot for the life of me figure out how those 
files
get created.  I have everything else (all of the *.tgz files, etc.) 
just

not these two.


man release

But I suspect you were already there. You can take a look at ISO 
available
from mirrors and check its contents and create that ISO same way with 
your

files



I'm probably on a fool's errand but I'm trying to get this MacBook 
9,1

working.  I have figured out that the PCI identifier for the NVMe
controller in this one is actually 0x2003 (seems like the older model 
was

0x2001 according to the mailing lists).

If I can get an installer image, I'm going to try risking my internal
drive's sanity and see if I can get it partitioned with the NVMe 
driver as
it is today.  I've been looking at the SPI driver code in the Linux 
kernel

and it seems comprehensible...

Thanks for any help folks can provide.


Most easy way is to use snapshot, but because of BETA phase now last 
one is
15 days old so either you can try it if it works else you can try 
something else.
USB flash is simply as HDD so you can eg. make dd of your current to 
flash.
For EFI you can follow 
https://blog.jasper.la/openbsd-uefi-bootloader-howto/
(only "special" part here is -b option for fdisk which is not so 
understandable

in man, rest is easy)

Re: Again, this will be brought to your attention

[Bodie]

On 16.06.2016 17:59, Kevin Gerrard wrote:
Coming from an unintelligent person here, your endless ranting makes 
me have
to ask a stupid question that I shouldn't have to ask. I know that 
this
email list does not like to block people, but is there a way for me 
to block
just this rant and continued ignorance without blocking the rest of 
the

email list?

Kevin



Sure. Use client options to block offending address, put him in 
blacklist, spam or whatever.
Blocking such people on mail list level will deny rule of "Do not feed 
troll" :-)





-Original Message-
From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On 
Behalf Of

outro pessoa
Sent: Thursday, June 16, 2016 10:53 AM
To: adr...@freebsd.org; d...@freebsd.org; freebsd-hack...@freebsd.org;
misc@openbsd.org; sorressean; wbl...@wonkity.com; i...@freebsd.org;
bo...@netbsd.org; freebsd-...@freebsd.org; us...@dragonflybsd.org;
gentoo-sp...@lists.gentoo.org
Subject: Again, this will be brought to your attention

Being that I have offended other people, time was taken to explain 
myself
and not to deny nor excuse my actions. Even though I hope for others 
to do
the same, it appears - that for most of you - it is not your nature 
to

explain yourselves nor to give the benefit of the doubt to another.
Please, hold on for a moment; and, if you would, stop sending the 
childish

and immature bounce messages. It is not cute.

What do I want to "say"? A few things.
SPARC64 OpenBSD and Gentoo. Both emphasize documentation. SILO 
loader.

PowerPC/Power FreeBSD and Debian. Best performance.
AMD64 Dragonfly and OpenSuSE.
ARM(64) NetBSD, Debian, Slackware.

Wait and research before you react and reply.

Proper etiquette: If you would not approach another in "real life" 
with the

replies you give, then why do you give them?
You do not want to be insulted. Why do you insult others?
You do not want to be ignored. Why do you ignore others?



There is a project for hardware design; and yet, many of you would 
rather
just wait around until someone calls you/ contacts you for some 
advice. At

some point in time, the software and hardware needs to be developed
together.

Some of you - and this goes for the foundations as well - keep 
asking, "What

is in it for me?"
If you do not present yourselves to be beneficial to others, how are 
they

even able to see what you have in an open an unbiased way?

If a person has limited resources, that person must go through 
extreme

measures to accomplish a task and a goal.

It is best to explain your situation and to let others know of that 
which

they are dealing.

Very few on here see each other in person. Before you formulate a 
hypothesis
on the character of another, ask yourself as to how you would like to 
be

approached so that respect is given to you.

Do the same to others.



The idea has evolved: Using the laptop for an animation station and 
music is

the next step.
I am working on it. I need spare parts.
I have asked the people here. "Here" is in reference to my physical
location.

You need to join together as a single foundation with different 
parts.


If you would not treat and approach a child in such a manner, then 
why do

you do such to another adult?


Give yourself time to think.

Your species is dying.

Even with this knowledge, you still act and are arrogant, rude, 
selfish, and

narcissistic.

You are so self absorbed that you ignore the future plight of your 
children

and grand children.

support update

[kovert]

0
C USA
P VA
T Purcellville
Z 20132
O Omniscient Technologies
I Todd M. Kover
A 36051 Birch Hollow Lane
M openbsd-consult...@omniscient.com
U http://www.omniscient.com.com/
B +1-540-668-7602
NWashington D.C. based consulting group with a broad array of experience in
*BSD, Solaris, Linux and many other varieties of unix specializing in
highly scalable systems, systems integration and network security.
Custom application design also available.

[Q] Building a release, how do I create install60.fs and install60.iso

[Bryan C. Everly]

Sorry if this is an obvious one but I've been all over the FAQ, read the
makefiles, etc. and cannot for the life of me figure out how those files
get created.  I have everything else (all of the *.tgz files, etc.) just
not these two.

I'm probably on a fool's errand but I'm trying to get this MacBook 9,1
working.  I have figured out that the PCI identifier for the NVMe
controller in this one is actually 0x2003 (seems like the older model was
0x2001 according to the mailing lists).

If I can get an installer image, I'm going to try risking my internal
drive's sanity and see if I can get it partitioned with the NVMe driver as
it is today.  I've been looking at the SPI driver code in the Linux kernel
and it seems comprehensible...

Thanks for any help folks can provide.

-- 

Thanks,
Bryan

Re: Is it possible and not unadvisable to make /src with the -O3 option?...

[STeve Andre']

Go for it.  The beauty of open source is that you are free to
try things.   I would submit your first step of learning is how
to figure out where all the -O2's are.  You will learn a lot about
things if you really dig into the weird problems you will hit.
Probably you won't get much help here, but that shouldn't
stop you.  Hint: start reading about compilers.

--STeve Andre'

On 06/16/16 11:12, Luke Small wrote:

Eh, I run it on a VM. I could copy one and somehow locate all the -O2's and
replace them with -O3's in the files. I'd probably have to write a program
to do it, unless there are easy to find, centrally located ones?

On Thu, Jun 16, 2016 at 9:54 AM Janne Johansson  wrote:


Do you have the skills to detect and handle if gcc miscompiles something
at -O3?
If not, then don't.

Noone else will help you getting a zomg-fast -O3 system working after a
slight miscompile gets a few bad instructions stuffed into some lib
somewhere, so if you break your system, you get to keep all the pieces.

Short version: "if you had to ask, then the answer was no".


2016-06-16 15:42 GMT+02:00 Luke Small :


--
May the most significant bit of your life be positive.

Re: Is it possible and not unadvisable to make /src with the -O3 option?...

[Stuart Henderson]

On 2016-06-16, Luke Small  wrote:
> Eh, I run it on a VM. I could copy one and somehow locate all the -O2's and
> replace them with -O3's in the files. I'd probably have to write a program
> to do it, unless there are easy to find, centrally located ones?
>
> On Thu, Jun 16, 2016 at 9:54 AM Janne Johansson  wrote:
>
>> Do you have the skills to detect and handle if gcc miscompiles something
>> at -O3?
>> If not, then don't.
>>
>> Noone else will help you getting a zomg-fast -O3 system working after a
>> slight miscompile gets a few bad instructions stuffed into some lib
>> somewhere, so if you break your system, you get to keep all the pieces.
>>
>> Short version: "if you had to ask, then the answer was no".

Building it that way is easy.

If you can't figure it out then sorry but you have no chance of
debugging the problems that you might run into, so giving a set
of instructions would be a disservice.

Re: Low brightness in text console

[Alessandro DE LAURENZIS]

Marcus, Walter,

On 06/06/16 10:22, Marcus MERIGHI wrote:

To me this sounds like "Screen brightness is reset when changing from X
to console" thread on bugs@ [1].

[1] http://marc.info/?l=openbsd-bugs=146451346724515

Walter Alejandro Iglesias' workaround worked for me (thank you,
Walter!):

- run -current.
- use /etc/xorg.conf:

Section "Device"
Identifier  "Card0"
Driver  "intel"
Option  "AccelMethod"  "UXA"
EndSection


I confirm that this works as expected. I got the impression that the 
switch is snappier, too.


Sorry for the late feedback, I just had some spare time to try...

Thanks a lot for your help

--
Alessandro DE LAURENZIS
[mailto:just22@gmail.com]
LinkedIn: http://it.linkedin.com/in/delaurenzis

Re: Can't change screen brightness Acer Aspire ES1-411

[jix]

Does this workaround work for you?

http://marc.info/?l=openbsd-misc=146520183827302=2
http://marc.info/?l=openbsd-misc=146523968007324=2

If it does then it's related to this bug:

http://marc.info/?l=openbsd-bugs=146451346724515


(I'm just an user, not a developer)


Hello, thanks for the help, but it doesn't work.

Re: Again, this will be brought to your attention

[rizz2pro]

Dude. You really need to let it go.

Like...really.

On Jun 16, 2016 11:54 AM, "outro pessoa"  wrote:
>
> Being that I have offended other people, time was taken to explain myself
> and not to deny nor excuse my actions. Even though I hope for others to do
> the same, it appears - that for most of you - it is not your nature to
> explain yourselves nor to give the benefit of the doubt to another.
> Please, hold on for a moment; and, if you would, stop sending the childish
> and immature bounce messages. It is not cute.
>
> What do I want to "say"? A few things.
> SPARC64 OpenBSD and Gentoo. Both emphasize documentation. SILO loader.
> PowerPC/Power FreeBSD and Debian. Best performance.
> AMD64 Dragonfly and OpenSuSE.
> ARM(64) NetBSD, Debian, Slackware.
>
> Wait and research before you react and reply.
>
> Proper etiquette: If you would not approach another in "real life" with
the
> replies you give, then why do you give them?
> You do not want to be insulted. Why do you insult others?
> You do not want to be ignored. Why do you ignore others?
>
>
>
> There is a project for hardware design; and yet, many of you would rather
> just wait around until someone calls you/ contacts you for some advice. At
> some point in time, the software and hardware needs to be developed
> together.
>
> Some of you - and this goes for the foundations as well - keep asking,
> "What is in it for me?"
> If you do not present yourselves to be beneficial to others, how are they
> even able to see what you have in an open an unbiased way?
>
> If a person has limited resources, that person must go through extreme
> measures to accomplish a task and a goal.
>
> It is best to explain your situation and to let others know of that which
> they are dealing.
>
> Very few on here see each other in person. Before you formulate a
> hypothesis on the character of another, ask yourself as to how you would
> like to be approached so that respect is given to you.
>
> Do the same to others.
>
>
>
> The idea has evolved: Using the laptop for an animation station and music
> is the next step.
> I am working on it. I need spare parts.
> I have asked the people here. "Here" is in reference to my physical
> location.
>
> You need to join together as a single foundation with different parts.
>
> If you would not treat and approach a child in such a manner, then why do
> you do such to another adult?
>
>
> Give yourself time to think.
>
> Your species is dying.
>
> Even with this knowledge, you still act and are arrogant, rude, selfish,
> and narcissistic.
>
> You are so self absorbed that you ignore the future plight of your
children
> and grand children.

Re: Again, this will be brought to your attention

[Kevin Gerrard]

Coming from an unintelligent person here, your endless ranting makes me have
to ask a stupid question that I shouldn't have to ask. I know that this
email list does not like to block people, but is there a way for me to block
just this rant and continued ignorance without blocking the rest of the
email list?

Kevin

-Original Message-
From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf Of
outro pessoa
Sent: Thursday, June 16, 2016 10:53 AM
To: adr...@freebsd.org; d...@freebsd.org; freebsd-hack...@freebsd.org;
misc@openbsd.org; sorressean; wbl...@wonkity.com; i...@freebsd.org;
bo...@netbsd.org; freebsd-...@freebsd.org; us...@dragonflybsd.org;
gentoo-sp...@lists.gentoo.org
Subject: Again, this will be brought to your attention

Being that I have offended other people, time was taken to explain myself
and not to deny nor excuse my actions. Even though I hope for others to do
the same, it appears - that for most of you - it is not your nature to
explain yourselves nor to give the benefit of the doubt to another.
Please, hold on for a moment; and, if you would, stop sending the childish
and immature bounce messages. It is not cute.

What do I want to "say"? A few things.
SPARC64 OpenBSD and Gentoo. Both emphasize documentation. SILO loader.
PowerPC/Power FreeBSD and Debian. Best performance.
AMD64 Dragonfly and OpenSuSE.
ARM(64) NetBSD, Debian, Slackware.

Wait and research before you react and reply.

Proper etiquette: If you would not approach another in "real life" with the
replies you give, then why do you give them?
You do not want to be insulted. Why do you insult others?
You do not want to be ignored. Why do you ignore others?



There is a project for hardware design; and yet, many of you would rather
just wait around until someone calls you/ contacts you for some advice. At
some point in time, the software and hardware needs to be developed
together.

Some of you - and this goes for the foundations as well - keep asking, "What
is in it for me?"
If you do not present yourselves to be beneficial to others, how are they
even able to see what you have in an open an unbiased way?

If a person has limited resources, that person must go through extreme
measures to accomplish a task and a goal.

It is best to explain your situation and to let others know of that which
they are dealing.

Very few on here see each other in person. Before you formulate a hypothesis
on the character of another, ask yourself as to how you would like to be
approached so that respect is given to you.

Do the same to others.



The idea has evolved: Using the laptop for an animation station and music is
the next step.
I am working on it. I need spare parts.
I have asked the people here. "Here" is in reference to my physical
location.

You need to join together as a single foundation with different parts.

If you would not treat and approach a child in such a manner, then why do
you do such to another adult?


Give yourself time to think.

Your species is dying.

Even with this knowledge, you still act and are arrogant, rude, selfish, and
narcissistic.

You are so self absorbed that you ignore the future plight of your children
and grand children.

Re: Creating https certificates dynamically for redirected/blocked requests

[Stuart Henderson]

On 2016-06-15, Peter Fokker  wrote:
> Ted Wynnychenko wrote:
> [...]
>> I block connections based on a list from malwaredomains.com.
>> A script runs nightly that downloads the list/changes, creates
>> zone files, and reloads unbound/nsd.  The "blocked" zone files
>> point those domains at an internal (10.0.x.x) IP address.
> [...]
>> From my looking, it appears that a certificate is only accepted
>> by browsers with "one level" of domain wildcard present; so I am
>> not sure how to get a certificate with a common name of * to be
>> accepted for any/every domain.
>
> Perhaps this is an idea: enable the v3 extensions in your
> configuration file and add something like
>
> subjectAltName = @bad_actors
>
> [bad_actors]
> DNS.1 = malware1.tld
> DNS.2 = *.malware1.tld
> DNS.3 = malware2.tld
> DNS.4 = *.malware2.tld
> ...
>
> After your nightly download from malwaredomains.com you
> could add the new malware-domains to the list [bad_actors]
> too and regenerate this multi-domain wildcard certificate.
> This should work around the "one level" of wildcards limit
> you discovered in Firefox.
>
> As long as you use your own CA to sign (as opposed to
> selfsigning) and the browser knows about the corresponding
> Root Certificate there should be no problem with having a
> new certificate every morning.
>
> However, this hinges on the fact that entries in the
> subjectAltName section are in fact allowed to contain
> wildcards. RFC5280 [1] carefully avoids "the semantics of
> subject alternative names that include wildcard characters"
> so it may or may not work in different browsers.

Wildcards do work in SAN.

> Also, I am not sure how many entries are allowed in that
> section, I suppose there is some limit somewhere. However,
> perhaps it is worth a try?

There's no specific limit, but ..

a) some browsers might not handle it well

b) your certificate (which is sent whenever somebody connects
to a banned site) starts to get rather large

c) you hand out your list of *all* banned sites in the
certificate to everyone who connects to one of them

Re: Creating https certificates dynamically for redirected/blocked requests

[Stuart Henderson]

On 2016-06-14, Ted Wynnychenko  wrote:
>>From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf Of
> Stuart Henderson
>>Sent: Tuesday, June 14, 2016 12:31 PM
>>
>>On 2016-06-14, Ted Wynnychenko  wrote:
>>> This really isn't a big deal; but as more sites have started using https, 
>>> and
> as
>>> tools such as relayd and squid (and others?) have developed ways to "inject"
>>> https certificates on the fly, I am wondering if there is a way to create
> https
>>> certificates based solely on the requested URL in a connection attempt using
> an
>>> internal CA to avoid the certificate errors with blocked HTTPS connections?
>>
>>How are you identifying connections to block?
>
> I block connections based on a list from malwaredomains.com.  A script runs
> nightly that downloads the list/changes, creates zone files, and reloads
> unbound/nsd.  The "blocked" zone files point those domains at an internal
> (10.0.x.x) IP address.

OK, so in that case you don't need anything special to grab the hostname
from SNI.

I think you should be able to run an https server at the address
you're giving in the "blocked" zone, and have relayd intercept traffic
for that address (use PF to divert traffic to it, use "ca key XX"
in relayd.conf as described in the relayd.conf(5) bit talking about
"TLS inspection mode", and I think you need to have relayd lookup
the original destination address, i.e. your 10.0.x.x address,
via "forward with tls to" for this to work).

Alternatively sslsplit (in packages) should also be able to do
something similar, in this case you can do it without PF divert,
just have it listen on the 10.0.x.x address port 443, and send
all connections to an http daemon running on localhost.

Alternatively you should be able to do this with squid ACLs but that
would be more appropriate for a setup where squid sees all traffic
and does ACL lookups (i.e. without the DNS trick) rather than
just receiving the banned traffic. 

..

> From my looking, it appears that a certificate is only accepted by browsers 
> with
> "one level" of domain wildcard present; so I am not sure how to get a
> certificate with a common name of * to be accepted for any/every domain.

Exactly. Wildcards cover one level only. You can do *.example.com
but if you want to cover host.subdomain.example.com your certificate
also needs to contain *.subdomain.example.com.

Re: Is it possible and not unadvisable to make /src with the -O3 option?...

[Ted Unangst]

Luke Small wrote:
> Would it make it slower, more buggy or make the kernel not fit in the root
> partition?

Yes.

Re: Is it possible and not unadvisable to make /src with the -O3 option?...

[Luke Small]

Would it make it slower, more buggy or make the kernel not fit in the root
partition?

On Thu, Jun 16, 2016 at 9:07 AM Mike Burns 
wrote:

> On 2016-06-16 13.42.44 +, Luke Small wrote:
> > Is it possible and not unadvisable to make /src with the -O3
> > option?...
>
> It is inadvisable to deviate from the documentation here:
> https://www.openbsd.org/faq/faq5.html

Re: Is it possible and not unadvisable to make /src with the -O3 option?...

[Luke Small]

Eh, I run it on a VM. I could copy one and somehow locate all the -O2's and
replace them with -O3's in the files. I'd probably have to write a program
to do it, unless there are easy to find, centrally located ones?

On Thu, Jun 16, 2016 at 9:54 AM Janne Johansson  wrote:

> Do you have the skills to detect and handle if gcc miscompiles something
> at -O3?
> If not, then don't.
>
> Noone else will help you getting a zomg-fast -O3 system working after a
> slight miscompile gets a few bad instructions stuffed into some lib
> somewhere, so if you break your system, you get to keep all the pieces.
>
> Short version: "if you had to ask, then the answer was no".
>
>
> 2016-06-16 15:42 GMT+02:00 Luke Small :
>
>>
>
>
> --
> May the most significant bit of your life be positive.

Re: Again, this will be brought to your attention

[Kevin Gerrard]

-Original Message-
From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf Of
outro pessoa
Sent: Thursday, June 16, 2016 10:53 AM
To: adr...@freebsd.org; d...@freebsd.org; freebsd-hack...@freebsd.org;
misc@openbsd.org; sorressean; wbl...@wonkity.com; i...@freebsd.org;
bo...@netbsd.org; freebsd-...@freebsd.org; us...@dragonflybsd.org;
gentoo-sp...@lists.gentoo.org
Subject: Again, this will be brought to your attention

Being that I have offended other people, time was taken to explain myself
and not to deny nor excuse my actions. Even though I hope for others to do
the same, it appears - that for most of you - it is not your nature to
explain yourselves nor to give the benefit of the doubt to another.
Please, hold on for a moment; and, if you would, stop sending the childish
and immature bounce messages. It is not cute.

What do I want to "say"? A few things.
SPARC64 OpenBSD and Gentoo. Both emphasize documentation. SILO loader.
PowerPC/Power FreeBSD and Debian. Best performance.
AMD64 Dragonfly and OpenSuSE.
ARM(64) NetBSD, Debian, Slackware.

Wait and research before you react and reply.

Proper etiquette: If you would not approach another in "real life" with the
replies you give, then why do you give them?
You do not want to be insulted. Why do you insult others?
You do not want to be ignored. Why do you ignore others?



There is a project for hardware design; and yet, many of you would rather
just wait around until someone calls you/ contacts you for some advice. At
some point in time, the software and hardware needs to be developed
together.

Some of you - and this goes for the foundations as well - keep asking, "What
is in it for me?"
If you do not present yourselves to be beneficial to others, how are they
even able to see what you have in an open an unbiased way?

If a person has limited resources, that person must go through extreme
measures to accomplish a task and a goal.

It is best to explain your situation and to let others know of that which
they are dealing.

Very few on here see each other in person. Before you formulate a hypothesis
on the character of another, ask yourself as to how you would like to be
approached so that respect is given to you.

Do the same to others.



The idea has evolved: Using the laptop for an animation station and music is
the next step.
I am working on it. I need spare parts.
I have asked the people here. "Here" is in reference to my physical
location.

You need to join together as a single foundation with different parts.

If you would not treat and approach a child in such a manner, then why do
you do such to another adult?


Give yourself time to think.

Your species is dying.

Even with this knowledge, you still act and are arrogant, rude, selfish, and
narcissistic.

You are so self absorbed that you ignore the future plight of your children
and grand children.

Again, this will be brought to your attention

[outro pessoa]

Being that I have offended other people, time was taken to explain myself
and not to deny nor excuse my actions. Even though I hope for others to do
the same, it appears - that for most of you - it is not your nature to
explain yourselves nor to give the benefit of the doubt to another.
Please, hold on for a moment; and, if you would, stop sending the childish
and immature bounce messages. It is not cute.

What do I want to "say"? A few things.
SPARC64 OpenBSD and Gentoo. Both emphasize documentation. SILO loader.
PowerPC/Power FreeBSD and Debian. Best performance.
AMD64 Dragonfly and OpenSuSE.
ARM(64) NetBSD, Debian, Slackware.

Wait and research before you react and reply.

Proper etiquette: If you would not approach another in "real life" with the
replies you give, then why do you give them?
You do not want to be insulted. Why do you insult others?
You do not want to be ignored. Why do you ignore others?



There is a project for hardware design; and yet, many of you would rather
just wait around until someone calls you/ contacts you for some advice. At
some point in time, the software and hardware needs to be developed
together.

Some of you - and this goes for the foundations as well - keep asking,
"What is in it for me?"
If you do not present yourselves to be beneficial to others, how are they
even able to see what you have in an open an unbiased way?

If a person has limited resources, that person must go through extreme
measures to accomplish a task and a goal.

It is best to explain your situation and to let others know of that which
they are dealing.

Very few on here see each other in person. Before you formulate a
hypothesis on the character of another, ask yourself as to how you would
like to be approached so that respect is given to you.

Do the same to others.



The idea has evolved: Using the laptop for an animation station and music
is the next step.
I am working on it. I need spare parts.
I have asked the people here. "Here" is in reference to my physical
location.

You need to join together as a single foundation with different parts.

If you would not treat and approach a child in such a manner, then why do
you do such to another adult?


Give yourself time to think.

Your species is dying.

Even with this knowledge, you still act and are arrogant, rude, selfish,
and narcissistic.

You are so self absorbed that you ignore the future plight of your children
and grand children.

Re: Is it possible and not unadvisable to make /src with the -O3 option?...

[Janne Johansson]

Do you have the skills to detect and handle if gcc miscompiles something at
-O3?
If not, then don't.

Noone else will help you getting a zomg-fast -O3 system working after a
slight miscompile gets a few bad instructions stuffed into some lib
somewhere, so if you break your system, you get to keep all the pieces.

Short version: "if you had to ask, then the answer was no".


2016-06-16 15:42 GMT+02:00 Luke Small :

>


-- 
May the most significant bit of your life be positive.

Re: Hello

[outro pessoa]

Now, some would call this -and have -off-topic noise; but, there is a
reason for this post.

Some of you do not think before responding to a post. The words that you
choose need to be diplomatic and honest when you doubt another person's
intention and/or reason for that person's reply.
Your community is open.
For some of you, your minds are not.
It is time for a change in attitude and approach.


On Tue, Jun 14, 2016 at 12:53 PM, outro pessoa 
wrote:

> Seeing that you have quoted me from another email that I sent, my decision
> is to inquire you on different topics.
> Is the cognitive process the same for all members of the human species?
> By which method(s) does the human animal learn?
> By observation, each culture within an area has its own standards of
> normality. The world view of each culture is dependent upon the experience
> and understanding of the members of that culture. Education will coincide
> with the perception of each member of any given society. Now, that which is
> considered sane by the standards of one culture may be considered insane by
> the standards of another.
> In the scientific method, you must form a hypothesis and prove its
> validity.
> I will add this to Schrodinger's Paradox.
> Being that you are able to observe the quantum event from different
> perspectives, you will need to observe the same event from the viewpoint of
> the subject if such is possible. Your first hypothesis is that the subject
> seems incapable of logic and reasoning to such a degree that the subject's
> perception of the events occurring is false and flimsy at best.
> I have not experienced that which you have experienced and therefore I
> have no right to make any assumption about your nature.
> My reactions are erroneous ; yet, the reasons for my reactions are solid.
> Your judgement of me is based upon your own experiences and knowledge.
> The words "you" and "your" are both plural and general simultaneously.
>
> I have approached you openly and honestly, admitting to my faults.
> Each day, I learn.
> Because you are not me, I give you the benefit of the doubt - and, to
> admit, this usually occurs after my reaction - when the situation becomes
> more personal in nature.
>
> If you are not able to see the similarities between myself and another -
> and this being due to a physical condition - and that your experience with
> others has been negative because many do not think about anything but
> themselves, it is understood.
>
> I apologize and attempt to approach differently.
>
> There are times that a person may have a question to the mailing lists and
> that person is not addressed.
>
> I try to address the question to the best of my knowledge. Now, at times,
> I am perceived erroneously by other members of this community.
>
> If I say, " please do not insult me publicly," that does not mean you have
> the right to insult me at all. I did not do this to you. I would not and
> have not condemned you if anything has happened to you personally.
> My "threat" was a reaction to your disrespect.

Re: Hello

[outro pessoa]

Why is this spam, sir?

2016-06-14 13:27 GMT-04:00 Matthias Apitz :

>
> s
> Save to mailbox ('?' for list): SPAM
>
> --
> Matthias Apitz, ✉ g...@unixarea.de, ⌂ http://www.unixarea.de/  ☎
> +49-176-38902045
> "Die Verkaufsschlager des Buchmarkts geben Auskunft über den Zustand einer
> Gesellschaft bzw.
> sind, was diese Zeiten angeht, Gradmesser fortschreitenden Schwachsinns.
> ..." (jW 19.05.2016)

Hello

[outro pessoa]

Seeing that you have quoted me from another email that I sent, my decision
is to inquire you on different topics.
Is the cognitive process the same for all members of the human species?
By which method(s) does the human animal learn?
By observation, each culture within an area has its own standards of
normality. The world view of each culture is dependent upon the experience
and understanding of the members of that culture. Education will coincide
with the perception of each member of any given society. Now, that which is
considered sane by the standards of one culture may be considered insane by
the standards of another.
In the scientific method, you must form a hypothesis and prove its validity.
I will add this to Schrodinger's Paradox.
Being that you are able to observe the quantum event from different
perspectives, you will need to observe the same event from the viewpoint of
the subject if such is possible. Your first hypothesis is that the subject
seems incapable of logic and reasoning to such a degree that the subject's
perception of the events occurring is false and flimsy at best.
I have not experienced that which you have experienced and therefore I have
no right to make any assumption about your nature.
My reactions are erroneous ; yet, the reasons for my reactions are solid.
Your judgement of me is based upon your own experiences and knowledge.
The words "you" and "your" are both plural and general simultaneously.

I have approached you openly and honestly, admitting to my faults.
Each day, I learn.
Because you are not me, I give you the benefit of the doubt - and, to
admit, this usually occurs after my reaction - when the situation becomes
more personal in nature.

If you are not able to see the similarities between myself and another -
and this being due to a physical condition - and that your experience with
others has been negative because many do not think about anything but
themselves, it is understood.

I apologize and attempt to approach differently.

There are times that a person may have a question to the mailing lists and
that person is not addressed.

I try to address the question to the best of my knowledge. Now, at times, I
am perceived erroneously by other members of this community.

If I say, " please do not insult me publicly," that does not mean you have
the right to insult me at all. I did not do this to you. I would not and
have not condemned you if anything has happened to you personally.
My "threat" was a reaction to your disrespect.

Re: Hello

[Joe Nosay]

Why would this be spam, sir?

2016-06-14 13:27 GMT-04:00 Matthias Apitz :

>
> s
> Save to mailbox ('?' for list): SPAM
>
> --
> Matthias Apitz, ✉ g...@unixarea.de, ⌂ http://www.unixarea.de/  ☎
> +49-176-38902045
> "Die Verkaufsschlager des Buchmarkts geben Auskunft über den Zustand einer
> Gesellschaft bzw.
> sind, was diese Zeiten angeht, Gradmesser fortschreitenden Schwachsinns.
> ..." (jW 19.05.2016)
> ___
> freebsd-hack...@freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-hackers
> To unsubscribe, send any mail to "freebsd-hackers-unsubscr...@freebsd.org"

Re: Is it possible and not unadvisable to make /src with the -O3 option?...

[Mike Burns]

On 2016-06-16 13.42.44 +, Luke Small wrote:
> Is it possible and not unadvisable to make /src with the -O3
> option?...

It is inadvisable to deviate from the documentation here:
https://www.openbsd.org/faq/faq5.html

Is it possible and not unadvisable to make /src with the -O3 option?...

[Luke Small]

Re: ipsec routing issues

[mxb]

Hey,

to begin with, it would be nice to see output from ‘netstat -rn’ before
you started adding/deleting routes.

//mxb

> On 15 juni 2016, at 22:56, rizz2pro  wrote:
>
> Hi, im not sure if this is some kind of bug or by design but I thought
> i would ask.
>
> Firstly check out this diagram I made: http://i.imgur.com/EUXqauH.png
> - I hope im allowed to post that link.
>
>
> The servers have default routes to their firewalls.
> Firewall A has a default route to 10.100.100.2
> Firewall B has a default route to 10.100.100.1
>
> I turn off ipsec, kill all my tunnels.
>
> Server A can ping Server Z and on both firewalls I see the ICMP
> traffic coming on em1. Great, thats exactly what I expected.
>
> In /etc/ipsec.conf on each firewall I set the peer to use the
> 172.16.0.x IP instead of using what I've set as the default
> gateways(don't ask why..).
>
> FW1:
> ike esp from 192.168.99.0/24 to 192.168.200.0/24 peer 172.16.0.2
>
> FW2:
> ike esp from 192.168.200.0/24 to 192.168.99.0/24 peer 172.16.0.1
>
> I enable isakmpd, enable ipsec, my flows/SADs are good. My continuous
> ping still works but now I have no traffic flowing through em1 and all
> traffic is encrypted and flowing over em2. I figure that ipsec is
> ignoring the routing table and sending that matching traffic to his
> peer. I deleted the default routes altogether since no traffic is
> being passed through there anymore. All my pings stopped working.
>
> Another interesting thing is it seems like as long as there is any
> kind of entry in the routing table for the network you're trying to
> reach, it will fix things:
>
> On FW1 and FW2 this fixed my pings between Server A and Server Z:
>
> # route add default 127.0.0.1
>
> That fixes my pings. If I delete all default routes and add static routes:
>
> FW1:
> # route delete default
> # route add 192.168.200.0/24 127.0.0.1
>
> FW2:
> # route delete default
> # route add 192.168.99.0/24 127.0.0.1
>
> This also fixes my pings. I can also set the gateway to an IP that
> doesn't even exist:
>
> FW1:
> # route delete default
> # route add 192.168.200.0/24 192.168.99.45
>
> FW2:
> # route delete default
> # route add 192.168.99.0/24 192.168.200.27
>
> All of these things will fix my connectivity. The moment the route
> doesn't exist or I remove the default route it breaks everything.
>
>
> So I am wondering what is going on. I can fix my pings by adding fake
> routes, routes that point at a loopback address and creating default
> routes that lead to non-existant IP's, but everything seems to break
> if I delete the route altogether.
>
> Hopefully someone here can shed some light. If you need to see any
> config files, I can provide them but I felt like it's a pretty
> straight forward issue.
>
> Thanks