Re: Single partition fs layout
On 13/02/2024 16:52, Odhiambo Washington wrote: Thanks a million for such a nice explanation. Let me now ask Google about those flags. ^^ you misspelled "the man pages" Frank
Re: PF rules to block out every IP from a given country
Hi, On 07/12/2022 18:36, Peter N. M. Hansteen wrote: ...> and can now be found at https://nxdomain.no/~peter/ripe2cidr_country.sh.txt -- as it says in the script itself, a trivial hack. And I might add, it comes with *NO* warranties of any kind. I think instead of : grep allocated in the two important lines, it should be : egrep '(allocated)|(assigned)' coz both can go to countries. Frank
Re: Unbound Problems (Reverse Direction)
Hi, On 09/07/2020 20:44, ken.hendrick...@l3harris.com wrote: > stub-zone: > name: 30.24.172.in-addr.arpa. good > stub-addr: 127.0.0.1@53053 > stub-zone: > name: 2.168.192.in-arpa.arpa. typo > stub-addr: 127.0.0.1@53053 > stub-zone: > name: 224.in-addr.arpa. > stub-addr: 127.0.0.1@53053 > stub-zone: > name: 255.in-addr.arpa. > stub-addr: 127.0.0.1@53053 Frank
bridge: filter on ethertype??
Hi, a bridge can filter on mac addresses. good. PF can filter on all things IP. good. can anything filter on ethertype like eg filtering out PPPoE? or other garbage seen in the wild. 'man brconfig' didn't give me any hints. other than the more global blocknonip. it's on a OpenBSD 4.5 GENERIC.MP for i386 on amd64 capable hardware, with a fix of bge, fxp and xl cards if newer can do better, i'd like to know. Thanks, Frank
Re: How to find available wifi access points?
man ifconfig: chan [n] Set the channel (radio frequency) to be used for IEEE 802.11-based wireless network interfaces to n. With no channel specified, show the results of an access point scan. In Host AP mode, this will dump the list of known nodes without scanning. Frank On 03/20/09 10:12, Matt wrote: Hi, Happily running a laptop on OpenBSD - but I am a first time wifi-er. I have no trouble connecting to a _known_ SSID, but I would like to find out which wifi networks are within my reach. I did man/search archives but no luck there - I've seen monitoring mode - can set my card to it, which seems a good direction towards my goal. But I simply not have a clue what to do next... ? All I need to be able to do is see what networks are available when out and about, nothing more. Obviously I am not the only user with this wish - so I am probably missing something extremely obvious :-( (Running 4.5 snapshot with onboard iwi0 - but also have external rum0 and ral0 cards available). Thanks! Matt
multiple bgpd ?
Hi misc, is it possible to run multiple bgpd instances on the same box? with different sockets (-s) and non-overlapping listen on and only one with fib-update yes ? doesn't seem to work here. no error message, all sessions only Active Thanks, Frank
Re: IPv6 LAN - IPv4 Internet
Barry Commander wrote: I basically want the IPv6 clients on my LAN to be able to access IPv4 servers on the internet transparantly - the router doing the IPv6-IPv4/IPv4-IPv6 conversion. I was under the impression those tunnel brokers simply allow the IPv4 interface on my router to access the limited IPv6 sites/servers Thanks Barry They did that at recent NANOG and APNIC(APRICOT) meetings: switch off ipv4 (wireless) LAN and have everyone struggle with ipv6. see: http://www.civil-tongue.net/6and4/ you need 2 things: a DNS proxy that will give our clients a ipv6 () answer even if there's none in the real world - one is totd (ftp://ftp.dillema.net/pub/users/feico/totd-latest.tar.gz) and the protocol translator software (on linux) used mentioned here (http://www.civil-tongue.net/6and4/wiki/Linux%20NAT-PT%20Configuration) but leads to parked domain :-( (in cisco they did like this: http://www.civil-tongue.net/6and4/wiki/APRICOT2008-Router) Frank
Re: httpdv6
On 12/8/2007 4:55 PM, Henning Brauer wrote: * Marc Balmer [EMAIL PROTECTED] [2007-12-08 09:51]: httpd with IPv6 support uses IPv6 addresses for ambigious constructs. That is documented in the httpd(8) manpage. that is completely wrong and disqualifies this patch. you are fucking everybody for no good reason, as suddenly their httpds will only listen on v6. so the new httpd should, if there's no Listen in httpd.conf, behave same way as if there was Listen :: 80 Listen 0.0.0.0 80 right? Frank
httpdv6
Hi misc, [i guess misc is better than ports for that..] I ran the patched httpdv6 with the stock httpd.conf - it was only bound to v6 README.v6 suggests _for_Vhost_operation_ one needs Listen :: 80 Listen 0.0.0.0 80 my test suggests even without vhosts these are needed to run both v4 and v6. can anyone confirm? ( if so i'd send diff for README.v6 - anything else? ) system is current (1day old), httpd.conf.orig from http://www.openbsd.org/cgi-bin/cvsweb/~checkout~/src/usr.sbin/httpd/conf/httpd.conf?rev=1.21content-type=text/plain Thanks, Frank PS: if someone can tell me how to replace the 'lsof' - will be appreciated ;-) [EMAIL PROTECTED] /var/www/conf $ sudo cp httpd.conf.orig httpd.conf [EMAIL PROTECTED] /var/www/conf $ sudo apachectl restart /usr/sbin/apachectl restart: httpd restarted [EMAIL PROTECTED] /var/www/conf $ sudo lsof -i -n -P | grep httpd httpd 3912 www 17u IPv6 0xd8663008 0t0 TCP *:80 (LISTEN) httpd 7887 www 17u IPv6 0xd8663008 0t0 TCP *:80 (LISTEN) httpd 9134 www 17u IPv6 0xd8663008 0t0 TCP *:80 (LISTEN) httpd21258 www 17u IPv6 0xd8663008 0t0 TCP *:80 (LISTEN) httpd22168 www 17u IPv6 0xd8663008 0t0 TCP *:80 (LISTEN) httpd23865 www 17u IPv6 0xd8663008 0t0 TCP *:80 (LISTEN) # vi httpd.conf [EMAIL PROTECTED] /var/www/conf $ diff httpd.conf httpd.conf.orig 188,189d187 Listen :: 80 Listen 0.0.0.0 80 [EMAIL PROTECTED] /var/www/conf $ sudo apachectl restart /usr/sbin/apachectl restart: httpd restarted [EMAIL PROTECTED] /var/www/conf $ sudo lsof -i -n -P | grep httpd httpd11048 www 16u IPv4 0xd8663008 0t0 TCP *:80 (LISTEN) httpd11048 www 17u IPv6 0xd8663328 0t0 TCP *:80 (LISTEN) httpd11430 www 16u IPv4 0xd8663008 0t0 TCP *:80 (LISTEN) httpd11430 www 17u IPv6 0xd8663328 0t0 TCP *:80 (LISTEN) httpd15586 www 16u IPv4 0xd8663008 0t0 TCP *:80 (LISTEN) httpd15586 www 17u IPv6 0xd8663328 0t0 TCP *:80 (LISTEN) httpd20686 www 16u IPv4 0xd8663008 0t0 TCP *:80 (LISTEN) httpd20686 www 17u IPv6 0xd8663328 0t0 TCP *:80 (LISTEN) httpd23160 www 16u IPv4 0xd8663008 0t0 TCP *:80 (LISTEN) httpd23160 www 17u IPv6 0xd8663328 0t0 TCP *:80 (LISTEN) httpd27443 www 16u IPv4 0xd8663008 0t0 TCP *:80 (LISTEN) httpd27443 www 17u IPv6 0xd8663328 0t0 TCP *:80 (LISTEN) [EMAIL PROTECTED] /var/www/conf $