Re: OpenBSD Monitor Sleep No Response

2020-12-21 Thread Ricky Cintron
As previously mentioned, you can use xset(1) to disable DPMS (and the 
screensaver,
if necessary). I use the following commands to disable and re-enable these
temporarily.

xset s off -dpms
xset s on +dpms

Since your keyboard also becomes unresponsive, it looks like you're problem is
something else, but if that problem is triggered when your display enters power
saving mode, this could help until you find a solution.


Sent with ProtonMail Secure Email.

‐‐‐ Original Message ‐‐‐
On Monday, December 21, 2020 5:09 PM, ben  wrote:

> > Did you see Jordan's reply?
>
> Yes, I did. My keyboard is also non-responsive after the monitor goes off, so
> CTRL-ALT-F* is not an option.
>
> Ben Raskin




Re: pf.conf parser/lint

2020-12-21 Thread Chris Bennett
On Mon, Dec 21, 2020 at 07:28:54PM -0800, Sean Kamath wrote:
> > On Dec 21, 2020, at 14:24, Aham Brahmasmi  wrote:
> > For the defaults, I try to explicitly write some of them sometimes. I
> > find this helpful because it is difficult for me to remember what the
> > defaults are. However, I do understand that I run the risk of being
> > caught unawares if the defaults are changed for some good reason.
> > Trade-offs :)
> 
> That is what I use comments for. ;-)
> 
> a) Tells me what I *think* the defaults are
> b) Reminds me I’m *using* the defaults
> c) When the defaults change, makes it easy to find out why things break (if 
> they break, which they haven’t in recent memory)
> 
> Sean

Which raises the question of knowing when the defaults change.
Waiting until things *obviously* break doesn't address the time that
things *silently* break.
Silent breakage seems like a pretty serious security problem.
Having the syntax pass OK is not the same thing as having what you need
or want.
I really don't see how any linter can accomplish such a complex question.
Is my conf REALLY doing the right thing? Seems to. But maybe not.

For a good example, a small mistake in smtpd.conf will run just fine,
but with truly disastrous results.

Chris Bennett




Re: Enhancing Privacy in 2020 attached screenshot

2020-12-21 Thread Ashton Fagg
pipus  writes:

> Interesting 28 public and private emails protecting Stuart and his
> parts  2 really nice private emails on the product itself :)

You're a real super good salesperson, it seems.

Nobody in their right mind would buy whatever it is you're trying to
flog after seeing you act this way on the list.

0/10 troll harder.



Re: Enhancing Privacy in 2020 attached screenshot

2020-12-21 Thread pipus
First rule Dunning-Kruger club is to suck on Stuart's bits and bless him as 
much as possible  and ignore innovation that could change the security of 
the normie home. :). Based on your own development.

Interesting 28 public and private emails protecting Stuart and his parts  2 
really nice private emails on the product itself :)

They were right Unix is dead.

Australia is nearing a totalitarian state, Netherlands in many ways too, 
Curacao  (due to the Dutch government) now has a law that removes all rights to 
ownership and freedom, Poland is folding in on itself, the China digital model 
is expanding at an alarming rate  in western cultures ... so laugh it up boys 
. who gives a fuck right? :)

Sent with ProtonMail Secure Email.

‐‐‐ Original Message ‐‐‐
On Monday, 21 December 2020 23:39, Predrag Punosevac  
wrote:

> Arib Mason wrote:
>
> > On Sat, Dec 19, 2020 at 2:01 PM Ashlen euryd...@riseup.net wrote:
> >
> > > On 20/12/16 22:55, pipus wrote:
> > >
> > > > haha Stuart.
> > > > Always there to make a low IQ entrance :)
> > > > Ever hear of Dunning-Kruger, pipus?
> > >
> > > https://lsa.umich.edu/psych/news-events/all-news/faculty-news/the-dunning-kruger-effect-shows-why-some-people-think-they-re-gr.html
> >
> > First rule of Dunning-Kruger club is you don't know you're in
> > Dunning-Kruger club.
>
> Russell's paradox!
>
> > --
> > Aaron Mason - Programmer, open source addict
> > I've taken my software vows - for beta or for worse




Re: pf.conf parser/lint

2020-12-21 Thread Sean Kamath
> On Dec 21, 2020, at 14:24, Aham Brahmasmi  wrote:
> For the defaults, I try to explicitly write some of them sometimes. I
> find this helpful because it is difficult for me to remember what the
> defaults are. However, I do understand that I run the risk of being
> caught unawares if the defaults are changed for some good reason.
> Trade-offs :)

That is what I use comments for. ;-)

a) Tells me what I *think* the defaults are
b) Reminds me I’m *using* the defaults
c) When the defaults change, makes it easy to find out why things break (if 
they break, which they haven’t in recent memory)

Sean


Re: OpenBSD Monitor Sleep No Response

2020-12-21 Thread Mitch K.
ben  wrote on Mon [2020-Dec-21 16:09:28 -0500]:
> >Did you see Jordan's reply?
> 
> Yes, I did. My keyboard is also non-responsive after the monitor goes off, so
> CTRL-ALT-F* is not an option.
> 
> 
> Ben Raskin

Hi Ben,

Definitely puzzling. Does the motherboard have onboard graphics to try?

Mitch K.



Re: Enhancing Privacy in 2020 attached screenshot

2020-12-21 Thread Predrag Punosevac
Arib Mason wrote:

> On Sat, Dec 19, 2020 at 2:01 PM Ashlen  wrote:
> > 
> > On 20/12/16 22:55, pipus wrote:
> > > haha Stuart.
> > > Always there to make a low IQ entrance :)
> > Ever hear of Dunning-Kruger, pipus?
> > 
> > https://lsa.umich.edu/psych/news-events/all-news/faculty-news/the-dunning-kruger-effect-shows-why-some-people-think-they-re-gr.html
> >  
> 
> First rule of Dunning-Kruger club is you don't know you're in
> Dunning-Kruger club.
> 

Russell's paradox!

> -- 
> Aaron Mason - Programmer, open source addict
> I've taken my software vows - for beta or for worse



Re: pf.conf parser/lint

2020-12-21 Thread Aham Brahmasmi
Namaste Peter,

Tusen takk for your reply.

> Sent: Saturday, December 19, 2020 at 3:32 PM
> From: "Peter Nicolai Mathias Hansteen" 
> To: "misc" 
> Subject: Re: pf.conf parser/lint
>
> 
> 
> > 19. des. 2020 kl. 14:50 skrev Aham Brahmasmi :
> >>> 
> >> 
> >> Always put your interfaces into groups.  Identify based upon the groups.
> > 
> > In case there are more such simple rules of thumb, could you please
> > share them?
> 
> I think that piece of advice is one of the more important ones you’re likely 
> to get.
> 
> Adding to that, in my experience, the important thing is to make your 
> configurations as simple as possible but not simpler :)
> 
> I would like to stress using pf.conf readability features as helpers to 
> keeping your config maintainable, so
> 
> * use service names when feasible instead of port numbers,
> * use tables for groups of IP addresses
> * use macros where they do help readability
> * write rules that specify only what would be deviation from the default (the 
> defaults are, in general sane)
> * before actually loading a changed config, run pfctl -vnf /etc/pf.conf to se 
> what *actually* loads
> 
> That last one will among other things show you the result of the ruleset 
> optimizer’s work, so when you see obviously generated table names, you likely 
> have a set of rules that differ only in their source or destination address. 
> That is a surprisingly frequent phenomenon, and for some reason more people 
> than you would think are unaware that you can initialize a table or even load 
> new content into one from a separate file.

All of the above are good simple rules of thumb.

For the defaults, I try to explicitly write some of them sometimes. I
find this helpful because it is difficult for me to remember what the
defaults are. However, I do understand that I run the risk of being
caught unawares if the defaults are changed for some good reason.
Trade-offs :)

> If you haven’t already, you might glean a few useful bits from going through 
> the PF tutorial slides at https://home.nuug.no/~peter/pftutorial/ 
>  and links therein.

I have, and tusen takk once again for the slides, tutorials and talks.

> All the best,
> Peter

Additionally, I encountered some more such useful rules of thumb from
Stuart's reply[0] on another thread, which co-incidentally also mentions
interface groups.

"
...Tagging...received-on...interface groups...priority or queues or flow
queues...
"

Dhanyavaad,
ab
[0] - https://marc.info/?l=openbsd-misc&m=160068271606631&w=2
-|-|-|-|-|-|-|--



Re: OpenBSD Monitor Sleep No Response

2020-12-21 Thread ben
>Did you see Jordan's reply?

Yes, I did. My keyboard is also non-responsive after the monitor goes off, so
CTRL-ALT-F* is not an option.


Ben Raskin



Re: OpenBSD Monitor Sleep No Response

2020-12-21 Thread Mitch K.
ben  wrote on Mon [2020-Dec-21 15:28:38 -0500]:
> >This is a long shot but, do you have your keyboard/mouse connected to
> >the monitor instead of directly to the motherboard ?
> 
> What's weird is that my keyboard is connected directly to the motherboard of
> the machine. I've tried reconnecting the keyboard to a different usb port and
> it still didn't work.
> 
> I'm going to try and expose the machine via SSH, wait for the system to go to
> sleep and stop waking up the monitor and try and access it to see whether or
> not it's just Xenodm or the whole machine.
> 
> I'll also try using xset as mentioned in a previous email.

Hi Ben,

Did you see Jordan's reply? He had the same issue and found a
workaround:

>>I've found the only way I can get output to the screen again is by switching
>>consoles with CTRL+ALT+F1 and then switching back to the xorg console with
>>CTRL+ALT+F5.

Mitch



Re: OpenBSD Monitor Sleep No Response

2020-12-21 Thread ben
>This is a long shot but, do you have your keyboard/mouse connected to
>the monitor instead of directly to the motherboard ?

What's weird is that my keyboard is connected directly to the motherboard of
the machine. I've tried reconnecting the keyboard to a different usb port and
it still didn't work.

I'm going to try and expose the machine via SSH, wait for the system to go to
sleep and stop waking up the monitor and try and access it to see whether or
not it's just Xenodm or the whole machine.

I'll also try using xset as mentioned in a previous email.


Ben Raskin



Re: Acer Extensa 5635Z RAM and net boards.

2020-12-21 Thread Bodie




On 21.12.2020 19:00, Isaia Luciano wrote:

Hello

I tried  with the current.

Unfortunelly not work.

Thanks.



Any chance to test that particular module with some memtest app?



Il 21/12/20 17:59, Isaia Luciano ha scritto:

Hello.
The BIOS is the last version for this old model.
I don't understand why if remove the second bank of RAM the interfaces 
work.

I will try with the current snapshot.

Thanks.



Il 20/12/20 21:01, Bodie ha scritto:




On 20.12.2020 20:08, Isaia Luciano wrote:

Hello,

it would seam a OpenBSB problem, the other SO (Linux, FreeBSD)
properly activate the interface.



OpenBSD is using own implementation of https://man.openbsd.org/acpi

BIOS seems to be latest available for that machine, which does not
mean that most of the problems really get fixed at that time 10
years ago

Can you try with current snapshot?



# sh /etc/netstart alc0
alc0: writev(DHCPDISCOVER): No buffer space available
alc0: writev(DHCPDISCOVER): No buffer space available
alc0: writev(DHCPDISCOVER): No buffer space available
alc0: no leasealc0: writev(DHCPDISCOVER): No buffer space 
available

.alc0: writev(DHCPDISCOVER): No buffer space available
.alc0: writev(DHCPDISCOVER): No buffer space avialable
.alc0: writev(DHCPDISCOVER): No buffer space available
.alc0: writev(DHCPDISCOVER): No buffer space available
.alc0: writev(DHCPDISCOVER): No buffer space available
.alc0: writev(DHCPDISCOVER): No buffer space available
sleeping

# ifconfig alc0 down
alc0: could not disable RxQ/TxQ (0x)!
alc0: could not disable Rx/Tx MAC(0x)!


I tried with live CD of Sistem Rescue CD and MidnighBSD.
It has already happened to someone.

Thanks.

Luciano.

Il 19/12/20 11:36, luis...@tin.it ha scritto:

  Hi,I have install OpenBSD 6.8 on Acer Laptop with 2GB of RAM.
I have upgrade the memory added a new 2 GB RAM bank.On boot the net 
interface not running.The dmesg is:

OpenBSD 6.8 (GENERIC.MP) #98: Sun Oct  4 18:13:26 MDT 2020
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 4105977856 (3915MB)
avail mem = 3966488576 (3782MB)
random: good seed from bootblocks
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.5 @ 0xb5ec (33 entries)
bios0: vendor Phoenix version "V1.3311" date 12/21/2009
bios0: Acer Extensa 5635Z
acpi0 at bios0: ACPI 3.0
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP HPET MCFG APIC BOOT SSDT SSDT SSDT SSDT
acpi0: wakeup devices USB0(S3) USB1(S3) USBR(S3) EHC1(S3) USB3(S3) 
EHC2(S3) HDEF(S3) GLAN(S4)

acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpihpet0 at acpi0: 14318179 Hz
acpimcfg0 at acpi0
acpimcfg0: addr 0xe000, bus 0-255
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Pentium(R) Dual-Core CPU T4300 @ 2.10GHz, 2095.34 MHz, 
06-17-0a
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,EST,TM2,SSSE3,CX16,xTPR,PDCM,XSAVE,NXE,LONG,LAHF,PERF,SENSOR,MELTDOWN

cpu0: 1MB 64b/line 4-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 7 var ranges, 88 fixed ranges
cpu0: apic clock running at 199MHz
cpu0: mwait min=64, max=64, C-substates=0.2.2.2, IBE
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Pentium(R) Dual-Core CPU T4300 @ 2.10GHz, 2094.99 MHz, 
06-17-0a
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,EST,TM2,SSSE3,CX16,xTPR,PDCM,XSAVE,NXE,LONG,LAHF,PERF,SENSOR,MELTDOWN

cpu1: 1MB 64b/line 4-way L2 cache
cpu1: smt 0, core 1, package 0
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 10 (P0P1)
acpiprt2 at acpi0: bus 2 (RP01)
acpiprt3 at acpi0: bus -1 (RP02)
acpiprt4 at acpi0: bus -1 (RP03)
acpiprt5 at acpi0: bus 7 (RP04)
acpiprt6 at acpi0: bus -1 (RP05)
acpiec0 at acpi0
acpiac0 at acpi0: AC unit online
acpibat0 at acpi0: BAT1 model "AS09C31" serial 9418 type LION oem 
"SANYO"

acpibtn0 at acpi0: LID_
acpibtn1 at acpi0: PWRB
acpibtn2 at acpi0: SLPB
"PNP0C14" at acpi0 not configured
acpipci0 at acpi0 PCI0
acpicmos0 at acpi0
"SYN1B20" at acpi0 not configured
"PNP0C14" at acpi0 not configured
acpicpu0 at acpi0: !C3(250@17 mwait.3@0x20), !C2(500@1 
mwait.1@0x10), C1(1000@1 mwait.1), PSS
acpicpu1 at acpi0: !C3(250@17 mwait.3@0x20), !C2(500@1 
mwait.1@0x10), C1(1000@1 mwait.1), PSS

acpitz0 at acpi0: critical temperature is 108 degC
acpivideo0 at acpi0: VGA_
acpivideo1 at acpi0: GFX0
acpivout0 at acpivideo1: DD02
cpu0: Enhanced SpeedStep 2095 MHz: speeds: 2100, 1600, 1200 MHz
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "Intel GM45 Host" rev 0x07
inteldrm0 at pci0 dev 2 function 0 "Intel GM45 Video" rev 0x07
drm0 at inteldrm0
intagp0 at inteldrm0
agp0 at intagp0: aperture at 0xd000, size 0x1000
inteldrm0: apic 2 int 16, GM45, gen 4
"Inte

Re: Acer Extensa 5635Z RAM and net boards.

2020-12-21 Thread Isaia Luciano

Hello.
The BIOS is the last version for this old model.
I don't understand why if remove the second bank of RAM the interfaces work.
I will try with the current snapshot.

Thanks.


Il 20/12/20 21:01, Bodie ha scritto:



On 20.12.2020 20:08, Isaia Luciano wrote:

Hello,

it would seam a OpenBSB problem, the other SO (Linux, FreeBSD)
properly activate the interface.



OpenBSD is using own implementation of https://man.openbsd.org/acpi

BIOS seems to be latest available for that machine, which does not
mean that most of the problems really get fixed at that time 10
years ago

Can you try with current snapshot?



# sh /etc/netstart alc0
alc0: writev(DHCPDISCOVER): No buffer space available
alc0: writev(DHCPDISCOVER): No buffer space available
alc0: writev(DHCPDISCOVER): No buffer space available
alc0: no leasealc0: writev(DHCPDISCOVER): No buffer space available
.alc0: writev(DHCPDISCOVER): No buffer space available
.alc0: writev(DHCPDISCOVER): No buffer space avialable
.alc0: writev(DHCPDISCOVER): No buffer space available
.alc0: writev(DHCPDISCOVER): No buffer space available
.alc0: writev(DHCPDISCOVER): No buffer space available
.alc0: writev(DHCPDISCOVER): No buffer space available
sleeping

# ifconfig alc0 down
alc0: could not disable RxQ/TxQ (0x)!
alc0: could not disable Rx/Tx MAC(0x)!


I tried with live CD of Sistem Rescue CD and MidnighBSD.
It has already happened to someone.

Thanks.

Luciano.

Il 19/12/20 11:36, luis...@tin.it ha scritto:

  Hi,I have install OpenBSD 6.8 on Acer Laptop with 2GB of RAM.
I have upgrade the memory added a new 2 GB RAM bank.On boot the net 
interface not running.The dmesg is:

OpenBSD 6.8 (GENERIC.MP) #98: Sun Oct  4 18:13:26 MDT 2020
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 4105977856 (3915MB)
avail mem = 3966488576 (3782MB)
random: good seed from bootblocks
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.5 @ 0xb5ec (33 entries)
bios0: vendor Phoenix version "V1.3311" date 12/21/2009
bios0: Acer Extensa 5635Z
acpi0 at bios0: ACPI 3.0
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP HPET MCFG APIC BOOT SSDT SSDT SSDT SSDT
acpi0: wakeup devices USB0(S3) USB1(S3) USBR(S3) EHC1(S3) USB3(S3) 
EHC2(S3) HDEF(S3) GLAN(S4)

acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpihpet0 at acpi0: 14318179 Hz
acpimcfg0 at acpi0
acpimcfg0: addr 0xe000, bus 0-255
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Pentium(R) Dual-Core CPU T4300 @ 2.10GHz, 2095.34 MHz, 06-17-0a
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,EST,TM2,SSSE3,CX16,xTPR,PDCM,XSAVE,NXE,LONG,LAHF,PERF,SENSOR,MELTDOWN

cpu0: 1MB 64b/line 4-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 7 var ranges, 88 fixed ranges
cpu0: apic clock running at 199MHz
cpu0: mwait min=64, max=64, C-substates=0.2.2.2, IBE
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Pentium(R) Dual-Core CPU T4300 @ 2.10GHz, 2094.99 MHz, 06-17-0a
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,EST,TM2,SSSE3,CX16,xTPR,PDCM,XSAVE,NXE,LONG,LAHF,PERF,SENSOR,MELTDOWN

cpu1: 1MB 64b/line 4-way L2 cache
cpu1: smt 0, core 1, package 0
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 10 (P0P1)
acpiprt2 at acpi0: bus 2 (RP01)
acpiprt3 at acpi0: bus -1 (RP02)
acpiprt4 at acpi0: bus -1 (RP03)
acpiprt5 at acpi0: bus 7 (RP04)
acpiprt6 at acpi0: bus -1 (RP05)
acpiec0 at acpi0
acpiac0 at acpi0: AC unit online
acpibat0 at acpi0: BAT1 model "AS09C31" serial 9418 type LION oem 
"SANYO"

acpibtn0 at acpi0: LID_
acpibtn1 at acpi0: PWRB
acpibtn2 at acpi0: SLPB
"PNP0C14" at acpi0 not configured
acpipci0 at acpi0 PCI0
acpicmos0 at acpi0
"SYN1B20" at acpi0 not configured
"PNP0C14" at acpi0 not configured
acpicpu0 at acpi0: !C3(250@17 mwait.3@0x20), !C2(500@1 
mwait.1@0x10), C1(1000@1 mwait.1), PSS
acpicpu1 at acpi0: !C3(250@17 mwait.3@0x20), !C2(500@1 
mwait.1@0x10), C1(1000@1 mwait.1), PSS

acpitz0 at acpi0: critical temperature is 108 degC
acpivideo0 at acpi0: VGA_
acpivideo1 at acpi0: GFX0
acpivout0 at acpivideo1: DD02
cpu0: Enhanced SpeedStep 2095 MHz: speeds: 2100, 1600, 1200 MHz
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "Intel GM45 Host" rev 0x07
inteldrm0 at pci0 dev 2 function 0 "Intel GM45 Video" rev 0x07
drm0 at inteldrm0
intagp0 at inteldrm0
agp0 at intagp0: aperture at 0xd000, size 0x1000
inteldrm0: apic 2 int 16, GM45, gen 4
"Intel GM45 Video" rev 0x07 at pci0 dev 2 function 1 not configured
uhci0 at pci0 dev 26 function 0 "Intel 82801I USB" rev 0x03: apic 2 
int 16
uhci1 at pci0 dev 26 function 1 "Intel 82801I USB" rev 0x03: apic 2 
int 21
ehci0 at pci0 dev 26 fu

Re: OpenBSD Monitor Sleep No Response

2020-12-21 Thread Paco Esteban
On Mon, 21 Dec 2020, ben wrote:

> Hello;
> 
> >You could try typing your password to see if it wakes up.
> 
> For whatever reason my keyboard shuts off as well, as in I can't type 
> anything.
> I've tried entering my password, trying caps and num lock, and yet nothing
> seems to work.
> 
> >Last thought, maybe there's a relevant BIOS setting?
> 
> I've disabled everything that could be problematic in the BIOS, such as secure
> boot, and a bunch of other built in features which could cause problems.
> 
> Is there a way to just shut off the screensaver in OpenBSD? I've tried taking 
> a
> look at the output of sysctl(8) and I couldn't find any relevant information.

This is a long shot but, do you have your keyboard/mouse connected to
the monitor instead of directly to the motherboard ?  (Some monitors
like mine have a USB hub).  In that case when the monitor "suspends" it
removes power from the USB hub, at least my monitor does that.  Touching
any button on the monitor brings back everything.

As I said, long shot ...

Cheers,

-- 
Paco Esteban.
0x5818130B8A6DBC03



Re: OpenBSD Monitor Sleep No Response

2020-12-21 Thread Paul de Weerd
On Mon, Dec 21, 2020 at 09:46:34AM -0500, ben wrote:
| Hello;
| 
| >You could try typing your password to see if it wakes up.
| 
| For whatever reason my keyboard shuts off as well, as in I can't type 
anything.
| I've tried entering my password, trying caps and num lock, and yet nothing
| seems to work.
| 
| >Last thought, maybe there's a relevant BIOS setting?
| 
| I've disabled everything that could be problematic in the BIOS, such as secure
| boot, and a bunch of other built in features which could cause problems.
| 
| Is there a way to just shut off the screensaver in OpenBSD? I've tried taking 
a
| look at the output of sysctl(8) and I couldn't find any relevant information.

You may want to have a look at https://man.openbsd.org/xset.1#s

Cheers,

Paul 'WEiRD' de Weerd

-- 
>[<++>-]<+++.>+++[<-->-]<.>+++[<+
+++>-]<.>++[<>-]<+.--.[-]
 http://www.weirdnet.nl/ 



Re: OpenBSD Monitor Sleep No Response

2020-12-21 Thread ben
Hello;

>You could try typing your password to see if it wakes up.

For whatever reason my keyboard shuts off as well, as in I can't type anything.
I've tried entering my password, trying caps and num lock, and yet nothing
seems to work.

>Last thought, maybe there's a relevant BIOS setting?

I've disabled everything that could be problematic in the BIOS, such as secure
boot, and a bunch of other built in features which could cause problems.

Is there a way to just shut off the screensaver in OpenBSD? I've tried taking a
look at the output of sysctl(8) and I couldn't find any relevant information.


Ben Raskin



Connecting to a Fortinet VPN SSL gateway with OpenBSD 6.8 as a client

2020-12-21 Thread Carlos Lopez
Hi all,

 Does anyone know of a valid option to connect an OpenBSD host as a roadwarrior 
to a Fortinet SSL-VPN gateway? Using VPN-SSL ...

Regards,
C. L. Martinez



Re: httpd fastcgi socket option not working as expected

2020-12-21 Thread Родин Максим

Hello once again!
I figured it out.
The right syntax is now:

fastcgi socket tcp 127.0.0.1 3031

Thank you Adriano!


21.12.2020 14:53, Adriano Barbosa пишет:
Hi, I’m not able to read the details of your email right now. Are you on 
6.8? httpd(8) changed syntax for fastcgi socket.



Em seg., 21 de dez. de 2020 às 06:48, Родин Максим > escreveu:


Hello.
I have a working Django project
which can be run by its own http-server
using

"./manage.py runserver 0.0.0.0:8000 "

One of the apps is available then on

"http://192.168.1.102:8000/it";

The same project can be run using uwsgi's own
http server by adding the option
"http-socket = :8000"
to the uwsgi.ini file:
The whole file is:

[uwsgi]
fastcgi-socket = 127.0.0.1:3031 
http-socket = :8000
chdir = /home/someuser/DJANGO/main_site/
wsgi-file = main_site/wsgi.py
master = True
max-requests = 5000
processes = 2
threads = 2
stats = 127.0.0.1:9191 
venv = /home/someuser/work_env
touch-reload = /home/someuser/DJANGO/main_site/reload
safe-pidfile2 = /home/someuser/DJANGO/main_site/uwsgi.pid
logto2 = /tmp/uwsgi.log
vacuum = True
# daemonize = yes

I was able to set up OpenBSD httpd to serve
Django applications two years ago.
I lost httpd.conf file which was working for me
but it did not seem too much complicated.
Now I try to reproduce my setup by using the
simplest httpd.conf:

server "192.168.1.102" {
          listen on * port 8000
          fastcgi socket ":3031"


fastcgi socket tcp 127.0.0.1 3031


}

Now I start uwsgi after commenting out the option "http-socket = :8000"
and it is ready to serve on 127.0.0.1:3031 :

someuser$ uwsgi uwsgi.ini
[uWSGI] getting INI configuration from uwsgi.ini
*** Starting uWSGI 2.0.19.1 (64bit) on [Mon Dec 21 13:25:29 2020] ***
compiled with version: OpenBSD Clang 10.0.1  on 21 December 2020
07:54:16
os: OpenBSD-6.8 GENERIC#1
nodename: somewebserver
machine: amd64
clock source: unix
pcre jit disabled
detected number of CPU cores: 1
current working directory: /home/someuser/DJANGO/main_site
detected binary path: uwsgi

and its log:

chdir() to /home/someuser/DJANGO/main_site/
your processes number limit is 256
your memory page size is 4096 bytes
detected max file descriptor number: 512
lock engine: ipcsem
thunder lock: disabled (you can enable it with --thunder-lock)
uwsgi socket 0 bound to TCP address 127.0.0.1:3031
 fd 3
Python version: 3.8.6 (default, Oct 13 2020, 09:04:17)  [Clang 10.0.1 ]
PEP 405 virtualenv detected: /home/someuser/work_env
Set PythonHome to /home/someuser/work_env
Python main interpreter initialized at 0xa81c55ec00
python threads support enabled
your server socket listen backlog is limited to 100 connections
your mercy for graceful operations on workers is 60 seconds
mapped 250080 bytes (244 KB) for 4 cores
*** Operational MODE: preforking+threaded ***
WSGI app 0 (mountpoint='') ready in 1 seconds on interpreter
0xa81c55ec00 pid: 89605 (default app)
*** uWSGI is running in multiple interpreter mode ***
spawned uWSGI master process (pid: 89605)
spawned uWSGI worker 1 (pid: 70095, cores: 2)
writing pidfile to /home/someuser/DJANGO/main_site/uwsgi.pid
spawned uWSGI worker 2 (pid: 17757, cores: 2)
writing pidfile to /home/someuser/DJANGO/main_site/uwsgi.pid
writing pidfile to /home/someuser/DJANGO/main_site/uwsgi.pid
*** Stats server enabled on 127.0.0.1:9191 
fd: 11 ***

And this is what httpd shows:

user$ httpd -d
startup
socket_rlimit: max open files 1024
socket_rlimit: max open files 1024
socket_rlimit: max open files 1024
server_privinit: adding server 192.168.1.102
server_privinit: adding server 192.168.1.102
server_launch: configuring server 192.168.1.102
server_launch: configuring server 192.168.1.102
server_launch: running server 192.168.1.102
server_launch: configuring server 192.168.1.102
server_launch: running server 192.168.1.102
server_launch: running server 192.168.1.102
server_launch: configuring server 192.168.1.102
server_launch: running server 192.168.1.102
server_launch: configuring server 192.168.1.102
server_launch: running server 192.168.1.102
server_launch: configuring server 192.168.1.102
server_launch: running server 192.168.1.102

Then I try to access http://192.168.1.102:8000/it/

And than httpd shows:

192.168.1.102 192.168.1.57 - - [21/Dec/2020:13:33:21 +0300] "GET /it/
HTTP/1.1"
500 0
server 192.168.1.102, client 1 (1 active), 192.168.1.57:34196
 ->
192.

ssh_packet_write_poll: Permission denied

2020-12-21 Thread Aleksander De
Hi,

While running below cmd for backup purposes from one OpenBSD to another:

# rsync -av --progress -e 'ssh -i /my/key -l root -p ' ./bigfile.tar.gz 
enxio:/backup/
sending incremental file list
bigfile.tar.gz
14,843,904 0% 7.06MB/s 1:04:08 client_loop: ssh_packet_write_poll: Connection 
to W.X.Y.Z
port : Permission denied

The sender is OpenBSD 6.8 with all patches applied.
The receiver (same OS version) is in different location / different ISP.

I have also another OpenBSD box in the same location as the sender (same OS 
version too),
but different DC and different network. Transfer to this another local server 
works fine -
- it has slower link and weaker CPU than remote one - not sure if it is related.

The transfer get always interrupted, but each time after different amount of 
data sent.
Tried 'ssh -vvv' but found no more details.

# rsync -av --progress -e 'ssh -vvv -i /my/key -l root -p ' 
./bigfile.tar.gz enxio:/backup/
[cut]
debug2: channel 0: rcvd adjust 131072
60,194,816 0% 11.72MB/s 0:38:33 debug2: channel 0: rcvd adjust 131072
debug2: channel 0: rcvd adjust 131072
[cut]
debug2: channel 0: rcvd adjust 131072
client_loop: ssh_packet_write_poll: Connection to W.X.Y.Z port : Permission 
denied

rsync: [sender] write error: Broken pipe (32)
rsync error: error in socket IO (code 10) at io.c(823) [sender=3.2.3]

I don't think it is pf-related issue - I found similar mail thread here from 
February this year, no resolution.
Changing pf rules to pass in/out all does not help.
# pfctl -s rules
pass in all flags S/SA
pass out all flags S/SA

I found on the Internet that some IPS may cause such connectivity issues 
(google for SSH_EVENT_RESPOVERFLOW).
But I don't think if in such case error would be permission denied, I would 
expect just closed connection?

Please advise how can I find the root cause or workaround.
--
Aleksander



httpd fastcgi socket option not working as expected

2020-12-21 Thread Родин Максим

Hello.
I have a working Django project
which can be run by its own http-server
using

"./manage.py runserver 0.0.0.0:8000"

One of the apps is available then on

"http://192.168.1.102:8000/it";

The same project can be run using uwsgi's own
http server by adding the option
"http-socket = :8000"
to the uwsgi.ini file:
The whole file is:

[uwsgi]
fastcgi-socket = 127.0.0.1:3031
http-socket = :8000
chdir = /home/someuser/DJANGO/main_site/
wsgi-file = main_site/wsgi.py
master = True
max-requests = 5000
processes = 2
threads = 2
stats = 127.0.0.1:9191
venv = /home/someuser/work_env
touch-reload = /home/someuser/DJANGO/main_site/reload
safe-pidfile2 = /home/someuser/DJANGO/main_site/uwsgi.pid
logto2 = /tmp/uwsgi.log
vacuum = True
# daemonize = yes

I was able to set up OpenBSD httpd to serve
Django applications two years ago.
I lost httpd.conf file which was working for me
but it did not seem too much complicated.
Now I try to reproduce my setup by using the
simplest httpd.conf:

server "192.168.1.102" {
listen on * port 8000
fastcgi socket ":3031"
}

Now I start uwsgi after commenting out the option "http-socket = :8000"
and it is ready to serve on 127.0.0.1:3031:

someuser$ uwsgi uwsgi.ini
[uWSGI] getting INI configuration from uwsgi.ini
*** Starting uWSGI 2.0.19.1 (64bit) on [Mon Dec 21 13:25:29 2020] ***
compiled with version: OpenBSD Clang 10.0.1  on 21 December 2020 07:54:16
os: OpenBSD-6.8 GENERIC#1
nodename: somewebserver
machine: amd64
clock source: unix
pcre jit disabled
detected number of CPU cores: 1
current working directory: /home/someuser/DJANGO/main_site
detected binary path: uwsgi

and its log:

chdir() to /home/someuser/DJANGO/main_site/
your processes number limit is 256
your memory page size is 4096 bytes
detected max file descriptor number: 512
lock engine: ipcsem
thunder lock: disabled (you can enable it with --thunder-lock)
uwsgi socket 0 bound to TCP address 127.0.0.1:3031 fd 3
Python version: 3.8.6 (default, Oct 13 2020, 09:04:17)  [Clang 10.0.1 ]
PEP 405 virtualenv detected: /home/someuser/work_env
Set PythonHome to /home/someuser/work_env
Python main interpreter initialized at 0xa81c55ec00
python threads support enabled
your server socket listen backlog is limited to 100 connections
your mercy for graceful operations on workers is 60 seconds
mapped 250080 bytes (244 KB) for 4 cores
*** Operational MODE: preforking+threaded ***
WSGI app 0 (mountpoint='') ready in 1 seconds on interpreter 
0xa81c55ec00 pid: 89605 (default app)

*** uWSGI is running in multiple interpreter mode ***
spawned uWSGI master process (pid: 89605)
spawned uWSGI worker 1 (pid: 70095, cores: 2)
writing pidfile to /home/someuser/DJANGO/main_site/uwsgi.pid
spawned uWSGI worker 2 (pid: 17757, cores: 2)
writing pidfile to /home/someuser/DJANGO/main_site/uwsgi.pid
writing pidfile to /home/someuser/DJANGO/main_site/uwsgi.pid
*** Stats server enabled on 127.0.0.1:9191 fd: 11 ***

And this is what httpd shows:

user$ httpd -d
startup
socket_rlimit: max open files 1024
socket_rlimit: max open files 1024
socket_rlimit: max open files 1024
server_privinit: adding server 192.168.1.102
server_privinit: adding server 192.168.1.102
server_launch: configuring server 192.168.1.102
server_launch: configuring server 192.168.1.102
server_launch: running server 192.168.1.102
server_launch: configuring server 192.168.1.102
server_launch: running server 192.168.1.102
server_launch: running server 192.168.1.102
server_launch: configuring server 192.168.1.102
server_launch: running server 192.168.1.102
server_launch: configuring server 192.168.1.102
server_launch: running server 192.168.1.102
server_launch: configuring server 192.168.1.102
server_launch: running server 192.168.1.102

Then I try to access http://192.168.1.102:8000/it/

And than httpd shows:

192.168.1.102 192.168.1.57 - - [21/Dec/2020:13:33:21 +0300] "GET /it/ 
HTTP/1.1"

500 0
server 192.168.1.102, client 1 (1 active), 192.168.1.57:34196 -> 
192.168.1.102:8

000, No such file or directory (500 Internal Server Error)

No change on uwsgi.log
No change on uwsgi stdout

netstat -naf inet
Active Internet connections (including servers)
Proto   Recv-Q Send-Q  Local Address  Foreign Address(state)
tcp  0  0  127.0.0.1.3031 *.*LISTEN
tcp  0  0  *.8000 *.*LISTEN

httpd does not seem to use the fastcgi socket it is pointed to
or is it my annoying mistake?

--
Best regards
Maksim Rodin