Re: match quick in pf.conf doesn't terminate ruleset evaluation

2013-08-01 Thread Stuart Henderson
On 2013/07/31 09:04, Maxim Khitrov wrote: On Wed, Jul 31, 2013 at 3:53 AM, Stuart Henderson st...@openbsd.org wrote: On 2013/07/30 14:41, Maxim Khitrov wrote: I expected a match quick ... rule in pf.conf to terminate ruleset evaluation without changing the pass/block state. match quick

Re: Any acceptance of TCP connections suddenly BREAKS without provocation globally: gives 'connection reset by peer', 'connection refused' or blocks. Only solved by reboot. Detailsanalysis provided.

2013-08-14 Thread Stuart Henderson
On 2013/08/13 21:16, Kārlis Miķelsons wrote: Now let me explain hanging up. When it hangs up, it responds to ICMP echo requests but none of TCP services respond (it is running sshd, Apache httpd, OpenBSD spamd, Postfix). none of TCP services respond - please expand on this: if you try and

Re: pf user (and probably group) rules don't behave as documented in 5.3

2013-08-15 Thread Stuart Henderson
You need a copy of the shell too, but then you can use shell variable functions to avoid the need for sed. (heheh) Andres Perera andre...@zoho.com wrote: the kernel can make identd queries with setenv(remote_port, 123); setenv(local_port, 456); popen(echo $remote_port, $local_port|nc localhost

Re: pf user (and probably group) rules don't behave as documented in 5.3

2013-08-15 Thread Stuart Henderson
On 2013/08/14 22:05, Philip Guenther wrote: # Only match connections that will be forwarded (or nothing listening on the local host) pass in proto tcp user unknown pass in proto tcp to !self (Does this hit the optimizer issue?) This one is fun. It depends on how many addresses self

Re: pf user (and probably group) rules don't behave as documented in 5.3

2013-08-15 Thread Stuart Henderson
On 2013/08/15 15:36, Henning Brauer wrote: * Stuart Henderson st...@openbsd.org [2013-08-15 12:28]: On 2013/08/14 22:05, Philip Guenther wrote: # Only match connections that will be forwarded (or nothing listening on the local host) pass in proto tcp user unknown pass

Re: suspected bug in ipsec/isakmpd implementation of RFC3947-NAT-Traversal

2013-09-12 Thread Stuart Henderson
On 2013/09/12 16:52, Christoph Leser wrote: Please also note the message in the debug output: Sep 9 10:36:51 q-dsl isakmpd[8122]: nat_t_exchange_check_nat_d: NAT detected, we're behind it Which seems either wrong or at least misleading: we are directly connect to the internet, it

Re: bgpd bug

2013-09-27 Thread Stuart Henderson
On 2013/09/27 10:09, Thomas Greer wrote: Hi All I'm seeing high CPU usage with bgpd session engine, and this was knocking out all my routing. The only way to get routing back is to pill the bgpd and then start it again. sthen suggested I ktraced it and the output is below. To clarify from

Re: bgpd bug

2013-10-09 Thread Stuart Henderson
I've been taking a look on the machine, the EAGAIN is not from the SERDE socketpair, but the TCP socket, I think there was some confusion between ktrace from one run and fstat from another before. When pushing routes out to the neighbour things stop progressing: Neighbor AS

Re: shuttle DS47 - RTL8168 no link / lladdr

2013-10-11 Thread Stuart Henderson
On 2013/10/11 00:23, m...@m021.nl wrote: Synopsis:Realtek 8168 ethernet not working Category:bugs Environment: System : OpenBSD 5.3 Details : OpenBSD 5.3 (GENERIC.MP) #62: Tue Mar 12 18:21:20 MDT 2013

Re: shuttle DS47 - RTL8168 no link / lladdr

2013-10-11 Thread Stuart Henderson
On 2013/10/11 11:09, Stuart Henderson wrote: On 2013/10/11 00:23, m...@m021.nl wrote: Synopsis: Realtek 8168 ethernet not working Category: bugs Environment: System : OpenBSD 5.3 Details : OpenBSD 5.3 (GENERIC.MP) #62: Tue Mar 12 18:21:20 MDT 2013

Re: repeatable isakmpd kernel panic using shrewsoft vpn client

2013-10-19 Thread Stuart Henderson
Please include the panic message and output from 'trace' in ddb. iamatt iam...@gmail.com wrote: Synopsis: Shrewsoft vpn client 2.2.0 (linux) causes openbsd to kernel panic Category: isakmpd using basic psk Environment: System : OpenBSD 5.4 Details : OpenBSD

Re: repeatable isakmpd kernel panic using shrewsoft vpn client

2013-10-21 Thread Stuart Henderson
On 2013/10/21 10:29, iamatt wrote: I do not have the console debug screen but I do have the files from /var/crash/ Is there some commands I can run on them using gdb that can be of use? If you have a crashdump, possibly, see man crash. As the panic message goes, RUN AT LEAST 'trace' AND

Re: repeatable isakmpd kernel panic using shrewsoft vpn client

2013-10-23 Thread Stuart Henderson
0 0 30x100200 kmalloc kmthread 1 0 1 0 30x82 wait init 0 -1 0 0 3 0x200 scheduler swapper ddb On Mon, Oct 21, 2013 at 5:20 PM, Stuart Henderson st...@openbsd.org wrote: On 2013/10/21 10:29, iamatt wrote: I do not have

Re: panic: timeout_add: to_ticks (-1) 0

2013-11-11 Thread Stuart Henderson
On 2013/11/11 09:53, RD Thrush wrote: Synopsis:Firewall panic with Nov 10 snapshot Category:kernel Environment: System : OpenBSD 5.4 Details : OpenBSD 5.4-current (GENERIC) #142: Sun Nov 10 22:52:49 MST 2013

Re: panic: timeout_add: to_ticks (-1) 0

2013-11-22 Thread Stuart Henderson
On 2013/11/22 08:47, RD Thrush wrote: On 11/11/13 11:22, Stuart Henderson wrote: On 2013/11/11 09:53, RD Thrush wrote: Synopsis: Firewall panic with Nov 10 snapshot Category: kernel Environment: System : OpenBSD 5.4 Details : OpenBSD 5.4-current (GENERIC) #142: Sun Nov

Re: hp mini 200 - kernel panic with ACPI on 5.4

2013-11-27 Thread Stuart Henderson
On 2013/11/26 17:39, Dmitrij D. Czarkoff wrote: Hello! I've got my hands on HP Mini 200, which panics with ACPI enabled. Disabling ACPI makes it boot. Most likely I'll keep it until next Tuesday, so if the issue is of any interest, and there is more information I can provide, ask freely.

Re: panic: timeout_add: to_ticks (-1) 0

2013-11-29 Thread Stuart Henderson
On 2013/11/29 14:34, Ted Unangst wrote: On Fri, Nov 29, 2013 at 13:31, RD Thrush wrote: I've tried -current (Nov 28) on two real machines (soekris and amd64 homebrew) which panic with apparently the same problem. FWIW, I have not been able to panic a virtualbox i386 machine. The panic

Re: Segmentation fault in __powerpc_read_tcb on G3

2013-12-14 Thread Stuart Henderson
On 2013/12/14 12:11, Donovan Watteau wrote: A very reproduceable way of seeing this crash is to launch fw_update on -current, now that Perl has threads enabled. To be more specific: perl doesn't have threads enabled, it is linked with libpthread so that functions are available for modules that

Re: panic: timeout_add: to_ticks (-1) 0

2013-12-18 Thread Stuart Henderson
On 2013/12/18 00:46, RD Thrush wrote: FWIW, I built a GENERIC kernel from cvs as of Nov 11 00:00 GMT and that kernel did *not* panic. I noticed that although bpf.c was reverted, bpfdesc.h was not. hmmm, bpfdesc.h *was* reverted... - PatchSet 3506 Date: 2013/11/11

Re: 5.5 snapshot: installboot not found

2014-02-02 Thread Stuart Henderson
On 2014/02/01 23:11, Eric Brown wrote: I am trying to install the current snapshot, where I boot from the install55.iso CD and then install sets from http. You are trying to use an old install script with current sets. Don't do that, it won't work correctly ;) The install almost completes,

Re: pkg_add update errs out with latest snap

2014-02-03 Thread Stuart Henderson
On 2014/02/03 07:05, Eivind Eide wrote: With i386 snapshot of February 2 2014 trying to update packages with `pkg_add -uiv' simply errs out with following message: Can't use an undefined value as a HASH reference at /usr/libdata/perl5/OpenBSD/Dependencies.pm line 387. Suggestions?

Re: 5.5-beta freez as wlan router. nokeyboard/console response

2014-02-08 Thread Stuart Henderson
On 2014/02/07 13:29, Aleksandar Lazic wrote: Dear list members. Due to the problem described in bug report http://marc.info/?l=openbsd-bugsm=139077913408576 5.5-beta freez as wlan router. nokeyboard/console response I thought this could be the same reason as we have found in Re:

Re: 5.5-beta freez as wlan router. nokeyboard/console response

2014-02-09 Thread Stuart Henderson
On 2014/02/09 00:14, Aleksandar Lazic wrote: Am 08-02-2014 13:09, schrieb Stuart Henderson: On 2014/02/07 13:29, Aleksandar Lazic wrote: Dear list members. Due to the problem described in bug report http://marc.info/?l=openbsd-bugsm=139077913408576 5.5-beta freez as wlan router

Re: Bad return value for getpwnam_r et al

2014-02-18 Thread Stuart Henderson
On 2014/02/18 18:25, Ingo Schwarze wrote: Yes, i guess that behaviour would conform to POSIX. However, the way i read it, it is unspecified whether getpwnam_r() sets errno in addition to returning the error code. So we have two options: a) leave the errno setting inside getpwnam_r(),

Re: zeromq package lacks zmq.hpp = bug or feature?

2014-02-26 Thread Stuart Henderson
On 2014/02/26 10:30, Mikael wrote: zeromq-depending apps use zmq.hpp . From where are they supposed to get it? Thanks This was removed in zeromq upstream: commit 9ccfbf8d3048cc3d006a0ce97c8d5d99527b2eb1 Author: Pieter Hintjens p...@imatix.com Date: Sat Mar 17 11:12:11 2012 -0500

Re: Beagle Bone packages issue

2014-03-18 Thread Stuart Henderson
For arm packages, it's more a case of no machines rather than slow machines. On 18 March 2014 18:57:46 GMT+00:00, Ted Unangst t...@tedunangst.com wrote: On Tue, Mar 18, 2014 at 11:44, jungleboogie0 wrote: Hi All, I followed these instructions on how to install openBSD 5.5 snapshot onto my

Re: Beagle Bone packages issue

2014-03-18 Thread Stuart Henderson
On 2014/03/18 21:03, Ted Unangst wrote: On Tue, Mar 18, 2014 at 17:53, jordon wrote: Has anyone successfully built any ports on the BBB? I tried (with /usr/ports, /usr/src, and /usr/obj symlinked to directories on an NFS share) and always got errors, even though I was doing it as root.

Re: groff build error (and partial solution)

2014-03-26 Thread Stuart Henderson
On 2014/03/26 17:30, jordon wrote: In trying to build git on armv7 (BeagleBone Black) I encountered an error building groff-1.22.2p4.tgz. test -d examples || /bin/sh /nfs/ports/wrkobjdir/groff-1.22.2/groff-1.22.2/mkinstalldirs examples You cannot reliably build ports with an NFS wrkobjdir.

Re: groff build error (and partial solution)

2014-03-26 Thread Stuart Henderson
On 2014/03/26 19:04, jordon wrote: On Mar 26, 2014, at 18:30, Stuart Henderson st...@openbsd.org wrote: On 2014/03/26 17:30, jordon wrote: In trying to build git on armv7 (BeagleBone Black) I encountered an error building groff-1.22.2p4.tgz. test -d examples || /bin/sh /nfs/ports

Re: ix0 driver missing

2014-05-01 Thread Stuart Henderson
On 2014/05/01 08:27, Jan P. Sørensen wrote: I have an HP Proliant server with 2 * 10 Gb/s interfaces named ix0 and ix1. It works correctly with OpenBSD 5.1, 5.4, and snapshot 5.5 taken April 21 (OpenBSD natgw303.ait.dtu.dk 5.5 GENERIC.MP#54 i386) However OpenBSD 5.5 final (bsd and bsd.rd)

Re: ix0 driver missing

2014-05-01 Thread Stuart Henderson
: state transition: BACKUP - MASTER carp2: state transition: BACKUP - MASTER carp3: state transition: BACKUP - MASTER carp1: state transition: MASTER - BACKUP carp3: state transition: MASTER - BACKUP Mvh Jan P. Sorensen -Original Message- From: Stuart Henderson [mailto:st...@openbsd.org

Re: Download releases via Torrent

2014-05-01 Thread Stuart Henderson
Between them, the file mirrors listed on ftp.html have significant bandwidth available, and it's not like this is some 4GB-per-arch OS for a basic installation, you're talking a couple of hundred MB. Just pick a mirror from the list and download the relevant installation files. If it's too slow,

Re: uvm_fault(0xd0b8b8e0, 0xefffe000, 0, 1) - d unp_disconnect

2014-05-12 Thread Stuart Henderson
On 2014/05/12 16:25, Philip Guenther wrote: On Mon, 12 May 2014, RD Thrush wrote: I use this box mostly w/amd64 -current. I boot in i386 appx. weekly to do a partial dpb bulk build. I don't use tmpfs (or mfs) in i386 mode. I do the dpb builds (both i386 and amd64) w/ chroot. This is

Re: wrong MHz displayed in dmesg and apm

2014-05-22 Thread Stuart Henderson
On 2014/05/21 23:00, Philip Guenther wrote: On Wed, 21 May 2014, Nils R wrote: since the snapshot from 18.05., the wrong MHz of my CPU is displayed in both dmesg and apm. apmd is started at boot, here is my rc.conf.local: Approximately what was the date of the build you were running

Re: KASSERT in tcp_input

2014-05-26 Thread Stuart Henderson
On 2014/05/26 09:46, Peter Haag wrote: Is there a way to patch the kernel at tcp_input to automatically generate a core, if it crases? If sysctl net.inet.ddb.panic is set to 0, the os will attempt to produce a crash dump automatically when it panics. It would help if this is done from a kernel

Re: KASSERT in tcp_input

2014-05-26 Thread Stuart Henderson
On 2014/05/26 12:57, Peter Haag wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 26.05.14 12:34, Stuart Henderson wrote: On 2014/05/26 09:46, Peter Haag wrote: Is there a way to patch the kernel at tcp_input to automatically generate a core, if it crases? If sysctl

Re: KASSERT in tcp_input

2014-05-27 Thread Stuart Henderson
On 2014/05/27 12:13, Peter Haag wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 .. next kernel crash ... same place savecore: reboot after panic: tcp_input:647: 0xfe84f2e93b88 != 0xfe8524ad1480 savecore: /var/crash/bounds: No such file or directory savecore: writing

Re: OpenSSL checks outfille permissions during dhparam generation incorrectly

2014-06-03 Thread Stuart Henderson
On 2014/06/03 13:29, ian kremlin wrote: hi, this is my first time submitting a bug, please let me know if I'm doing anything wrong. OpenSSL irritatingly waits until after it generates diffie-hellman parameters to check to see if the outpath is writable, throwing them away if it is not: $

Re: Issues with spamd (/var/db/spamd corruption)

2014-06-10 Thread Stuart Henderson
On 2014/06/10 22:57, Kamil Andrusz wrote: I tried it on my virtual machine (running the exact same config, except for the HW), the results for each step were: Same OS version or snapshot build date/time, or different? Same CPU architecture?

Re: named exits due to assertion failure

2014-06-21 Thread Stuart Henderson
On 2014/06/21 13:51, x...@eideltown.de wrote: Synopsis:named exits due to assertion failure Category:system Environment: System : OpenBSD 5.5 Details : OpenBSD 5.5 (GENERIC) #0: Fri Apr 25 15:04:32 CEST 2014

Re: bioctl: Can't locate mfii0 device via /dev/bio

2014-07-08 Thread Stuart Henderson
On 2014/07/08 18:32, Otto Moerbeek wrote: On Tue, Jul 08, 2014 at 06:27:26PM +0200, Otto Moerbeek wrote: On Tue, Jul 08, 2014 at 01:01:12PM -0300, Kor son of Rynar wrote: Synopsis: bioctl: Can't locate mfii0 device via /dev/bio Category: system kernel amd64 Environment: System

Re: IP packets with Router Alert option are not forwarded by bridge

2014-07-17 Thread Stuart Henderson
On 2014/07/17 14:43, Alexander Okonnikov wrote: Hello, Description: There is bridge interface is created on the host with two ports. An IP packet with Router Alert option is coming on one of bridge port, but is not forwarded to another bridge port. Other IP packets (without this IP

Re: Number conversion in ksh fails

2014-08-01 Thread Stuart Henderson
On 2014/08/01 18:28, Guenther Niess wrote: Hello, In the latest snapshot on amd64: OpenBSD 5.6 (GENERIC.MP) #314: Thu Jul 31 15:16:43 MDT 2014 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP I ran into a strange bug. In one backup script I calculate with the

Re: 5.5 pkg_add hangs/crashes on Soekris net4511

2014-08-04 Thread Stuart Henderson
The user write of XX failed message relates to a failure to write a core dump. You may be able to get more information if you run pkg_add under gdb (try: gdb /usr/bin/perl, set args /usr/sbin/pkg_add emacs-24.3p4-no_x11, run, then when it crashes 'bt').

Re: Incorrect result for %s in strftime

2014-08-18 Thread Stuart Henderson
On 2014/08/18 15:46, Daurnimator wrote: The %s specifier in strftime doesn't respect timezones. Example: #include time.h #include stdio.h int main() { time_t t = 1234567890; struct tm *tmp = gmtime(t); char output[200]; strftime(output,

Re: Incorrect result for %s in strftime

2014-08-18 Thread Stuart Henderson
On 2014/08/18 16:08, Daurnimator wrote: On 18 August 2014 16:01, Stuart Henderson st...@openbsd.org wrote: That said, given that you have just found 3 implementations which have the same (frankly IMHO sensible) behaviour, musl seems to be the odd one out. It is correctly documented

Re: OpenBSD not booting on a Nexcom NSA 5150

2014-09-25 Thread Stuart Henderson
This came up before - http://comments.gmane.org/gmane.os.openbsd.misc/214708 I don't know what nexcom are like but I wonder if it might be worth attempting to talk to their support people. Perhaps their BIOS vendor has new code that they could update to. If I understand one of the posts

Re: OpenBSD 5.5 panics when pulling power cord from HP Mini 9 netbook

2014-09-26 Thread Stuart Henderson
On 2014/09/26 00:18, Eric Nadeau wrote: Hi, It seems unplugging the power cable on my HP Mini 9 netbook makes OpenBSD 5.5 panic. I just reproduced by booting up the machine and pulling the cord without even logging into the system, the first time I tripped in the cable by accident. See

Re: tor segmentation fault on amd64 current

2014-09-30 Thread Stuart Henderson
On 2014/09/30 10:36, Landry Breuil wrote: On Tue, Sep 30, 2014 at 11:30:06AM +0400, ba...@yandex.ru wrote: it sounds funny, but you are doing something wrong :) i simply have no place to make a mistake. on virtual machine(i use vmware) install _CURRENT_, install mc, install there's your

Re: Natted, keep-alive UDP connections not killed on PPPoE address change

2014-10-11 Thread Stuart Henderson
On 2014/10/11 09:18, Peter J. Philipp wrote: On 10/11/14 01:17, Yann Hamon wrote: Workaround: Flushing the state table whenever an IP changes. Rather than flushing the entire state table, you could keep track of the IP address, watch for changes and kill states associated with the old

Re: OpenBSD 5.5 CARP Active/Active Alias IP problem

2014-10-15 Thread Stuart Henderson
For active/active you should usually set ifconfig pfsync0 defer (add defer to hostname.pfsync0 to do this from boot). Does that help? -- Sent from a phone, please excuse the formatting.

Re: segfault caused by ping if hostname contains slash '/'

2014-10-16 Thread Stuart Henderson
On 2014/10/16 09:47, Eric Faurot wrote: On Wed, Oct 15, 2014 at 11:31:12PM -0400, Daniel Dickman wrote: ping hostname which has slash in the name causes seg fault # ping a/aa Segmentation fault ping6 seems to be ok reporting no address associated with name 5.4 ping is

Re: Mediatomb on sparc64

2014-10-24 Thread Stuart Henderson
On 2014/10/24 18:27, Andrew Grillet wrote: Hi I have a fresh install of 5.5 on a Sun V100. I am attempting to install the Mediatomb package. It fails due to numerous dependency issues. I am quite sure some of these are due to over-specifying the dependency - ie claims to require an older

Re: owtemp device no longer functioning under OpenBSD 5.6

2014-11-04 Thread Stuart Henderson
On 2014/11/05 05:53, joe...@gmail.com wrote: Hi Miod -- sorry, I can’t spare the hardware for 5.4 reinstall to get you a dmesg just yet. Do you have an old one in /var/log/messages.X.gz?

Re: Feature request: hostname.default

2014-11-12 Thread Stuart Henderson
On 2014/11/12 09:49, rjc wrote: On Wed, Nov 12, 2014 at 09:13:37AM EST, Stefan Sperling wrote: On Wed, Nov 12, 2014 at 03:26:02PM +0200, Lars Engblom wrote: I guess you mean the case of having several network interfaces. Let all of the unconfigured interfaces get the IP settings from

Re: Problem with VLAN tagging of packets

2014-11-15 Thread Stuart Henderson
On 2014/11/16 00:11, Alexander Okonnikov wrote: Hello, Look at attachment for description of the problem. Try the patch in Rafael Zalamena's recent post to the VLAN + bridge regression thread on tech@..

Re: pfctl patch for 5.6 lacks signature

2014-11-18 Thread Stuart Henderson
On 2014/11/18 12:42, Timo Trinks wrote: Hi! At the time of writing (Tue Nov 18 11:40:42 UTC 2014) the recently published patch for PF (007_pfctl.patch.sig) for OpenBSD 5.6 lacks a signature [1]. The patch for OpenBSD 5.5 includes a signature though [2]. Best regards, Timo [1]

Re: your mail

2014-11-19 Thread Stuart Henderson
On 2014/11/19 08:54, j...@tcpapplication.com wrote: Description: While reading the manual page packages(7) a couple of days ago, I found it reference under PACKAGE VERSIONS section of packages(7) a link to out-of-date(1). Following out-of-date(1) through the cgi manual page results

Re: OpenBSD 5.6 BugsReport about pf from chengang ...

2014-12-10 Thread Stuart Henderson
Your ping traffic creates a state table entry in PF. Packets matching this state (further pings between the same addresses before a timeout) are passed unless the state entry is flushed (pfctl -k).. On 2014/12/10 00:47, zje.net.cn wrote: Hello, my name is chengang, I'm from china. yesterday, I

Re: /upgrade: //install.sub[168]: sleep: Cannot allocate memory

2015-02-08 Thread Stuart Henderson
On 2015/02/08 14:14, pe...@bsdly.net wrote: Synopsis:Cannot allocate memory message during upgrade (2015-02-07 snapshot amd64) Thanks for the report, this is known and being investigated.

Re: Default pf-ruleset not using /etc/services

2015-01-22 Thread Stuart Henderson
On 2015/01/22 09:12, Kenneth Westerback wrote: The default value for 'ssh' in /etc/services would be 22. So you're going to have to remember to change either /etc/pf.conf or /etc/services to avoid the problem. You don't describe enough of your situation to make clear why editing

Re: bce(4) - descriptor error

2015-01-22 Thread Stuart Henderson
On 2015/01/22 11:34, John Merriam wrote: On 2015-01-21 18:36, John Merriam wrote: On 1/21/2015 1:43 PM, Stefan Sperling wrote: There is supposed to be a bounce buffer in bce to cope with systems with more than 1GB but perhaps it is broken. I installed the old 1GB DIMM that came with the

Re: bce(4) - descriptor error

2015-01-22 Thread Stuart Henderson
On 2015/01/22 17:05, Stuart Henderson wrote: Would presumably be a change in uvm somewhere. (paddr_t)(0x4000 - 1) is passed as 'high' to uvm_km_kmemalloc_pla - uvm_pglistalloc and is meant to constrain the addresses. Identifying when (at least which release) it broke might be a good

Re: uvm_fault with bwi on i386 when scanning or bringing up.

2015-02-20 Thread Stuart Henderson
On 2015/02/19 17:30, Mike Larkin wrote: On Thu, Feb 19, 2015 at 09:02:42PM -0330, Michael wrote: There's a slim chance that killing processes (sshd, smtpd, dhclient, cron, pflogd, ntpd) might free up enough to help. Maybe also worth trying ddb.console=0, it will try to print a

Re: RSDT corruption, acpidump problems

2015-01-06 Thread Stuart Henderson
On 2015/01/06 23:26, Mark Kettenis wrote: From: Kasper Steensig Jensen ksj...@student.aau.dk Date: Tue, 6 Jan 2015 21:23:53 + On 2015/01/05 15:17, Kasper Steensig Jensen wrote: acpidump not working because corrupted RSDT. When the command acpidump -o mydump is run it gives the

Re: documentation error in man page

2015-01-13 Thread Stuart Henderson
On 2015/01/13 07:08, Jason McIntyre wrote: On Sun, Jan 11, 2015 at 12:13:09AM -0700, Shane Manjarres wrote: http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/unbound.conf.5?query=unbound%2econfsec=5 uncounf.conf(5) In Openbsd the default directory for unbound.conf file is

Re: uvm_fault with bwi on i386 when scanning or bringing up.

2015-02-19 Thread Stuart Henderson
On 2015/02/19 20:08, Michael wrote: On 19 February 2015 at 19:57, Stefan Sperling s...@stsp.name wrote: On Thu, Feb 19, 2015 at 06:26:10PM -0330, Michael wrote: Hi, When doing a scan or bringing up the bwi0 interface a uvm fault occurs. This is always repeatable and nothing specific has

ospfd crash

2015-03-12 Thread Stuart Henderson
While investigating a problem reported by Sevan Janiyan (where interface pppoe0 { passive } didn't get redisted) I ran into this reproducible crash. - start ospfd with a p2p interface (tried with pppoe and gif here). passive is required, e.g. interface gif0 { passive } - remove above p2p

Re: openbsd 5.6 pf sends all inbound traffic to default queue

2015-03-25 Thread Stuart Henderson
On 2015/03/25 12:28, Petr Topiarz wrote: Stuart Henderson sthen at openbsd.org writes: On 2015/03/25 10:56, Petr Topiarz wrote: Cannot queue inbound traffic, is that a BUG or PEBCAK? I am on 5.6 default kernel (tried amd64 and i386 - the same result). . . . Queueing is only done

Re: openbsd 5.6 pf sends all inbound traffic to default queue

2015-03-25 Thread Stuart Henderson
On 2015/03/25 13:25, Petr Topiarz wrote: The direction on the pass rule is related to which packets that rule matches. So a packet comes in and matches a rule and creates a state table entry. If that rule has a queue specifier, the state entry is marked with the queue name. Now

Re: openbsd 5.6 pf sends all inbound traffic to default queue

2015-03-25 Thread Stuart Henderson
On 2015/03/25 11:12, Ted Unangst wrote: Stuart Henderson wrote: No, queuing incoming packets was never supported. What are you going to do with them anyway? You can't stop the other device on the network from sending to you. But you could create back pressure. I may want to prevent

Re: [PATCH] Fix telnet not sending return

2015-03-29 Thread Stuart Henderson
On 2015/03/29 14:16, Mark Kettenis wrote: I think we should either take Fred's diff, or revert the previous change. Any preferences? The ability to use telnet to connect to some of the affected devices is more important now that ssh no longer supports v1. Revert the diff. It introduced

Re: [PATCH] Fix telnet not sending return

2015-03-29 Thread Stuart Henderson
On 2015/03/28 23:28, Fred wrote: On 03/24/15 07:51, Fred wrote: Synopsis:Fix bug introduced by rev 1.29 Category:system Environment: System : OpenBSD 5.7 Details : OpenBSD 5.7-current (GENERIC.MP) #888: Sat Mar 14 14:39:44 MDT 2015

Re: HFSC on non existing lo2 interface

2015-03-02 Thread Stuart Henderson
On 2015/03/02 14:00, Kevin Chadwick wrote: If you set up a queue on a non existing loopback interface then you get a panic. queue rootq on lo2 bandwidth 35M Do you have the actual panic message, too? hfsc_attach(0,0,3370cca5,d1403000,0) at hfsc_attach+0xf

Re: OpenVPN crashes after some days of operation

2015-02-23 Thread Stuart Henderson
On 2015/02/23 15:55, Alexander Haensch wrote: Synopsis: OpenVPN process crashes from time to time Category: OpenVPN Environment: System : OpenBSD 5.7 Details : OpenBSD 5.7-beta (GENERIC.MP) #828: Thu Jan 29 14:28:19 MST 2015

Re: dvdcpy + usb cdrom read errors = ddb(4)

2015-02-26 Thread Stuart Henderson
On 2015/02/26 14:47, Marcus MERIGHI wrote: st...@openbsd.org (Stuart Henderson), 2015.02.26 (Thu) 13:05 (CET): On 2015/02/26 11:40, Marcus MERIGHI wrote: use dvdcpy to backup copy protected DVD. sorry, no console, just fotos: last lines of dvdcpy, cd0 read errors, trace cpu0

Re: dvdcpy + usb cdrom read errors = ddb(4)

2015-02-26 Thread Stuart Henderson
On 2015/02/26 11:40, Marcus MERIGHI wrote: use dvdcpy to backup copy protected DVD. sorry, no console, just fotos: last lines of dvdcpy, cd0 read errors, trace cpu0: http://www.tor.at/openbsd/20150226_111508.jpg Copying the lines from this one into text in an email will make it more

Re: [PATCH] Fix telnet not sending return

2015-03-24 Thread Stuart Henderson
On 2015/03/24 07:51, Fred wrote: Synopsis: Fix bug introduced by rev 1.29 Category: system Environment: System : OpenBSD 5.7 Details : OpenBSD 5.7-current (GENERIC.MP) #888: Sat Mar 14 14:39:44 MDT 2015

Re: openbsd 5.6 pf sends all inbound traffic to default queue

2015-03-25 Thread Stuart Henderson
On 2015/03/25 10:56, Petr Topiarz wrote: Cannot queue inbound traffic, is that a BUG or PEBCAK? I am on 5.6 default kernel (tried amd64 and i386 - the same result). 1. what works - queueing OUTBOUND TRAFFIC with pass out: CODE START - ext_if=em0 int_if=axe0 pass in all pass

Re: typo in pf.conf - allow X11 connections from external interface

2015-04-26 Thread Stuart Henderson
On 2015/04/26 12:48, Danilo Falcão wrote: Closed means the range 6000:6009 isn't filtered when I want only 22 to be open. That's incorrect. *block return in on ! lo0 proto tcp to port 6000:6010* This rule says: Block TCP packets to port 6000-6010 coming in on any interface other than

Re: Predictable Timeout on ThinkPad X201 Intel Centrino Advanced-N 6200 (iwn)

2015-04-20 Thread Stuart Henderson
On 2015/04/20 13:23, mm...@mykolab.com wrote: I run snapshots and upgrading frequently, installing most that are released. My wireless predictably times out after a minute or two on two different WPA wireless networks. This is particularly noticeable and disruptive on

Re: Abort trap -- amd64 OpenBSD 5.7

2015-05-04 Thread Stuart Henderson
On 2015/05/03 19:49, Ken.Dickey wrote: Perhaps src.tar.gz should follow the common pattern... This would help this problem (which I've done myself before) but loses a valuable learning experience: never untar files to a system directory like this (or even your home directory, etc) if you haven't

Re: em0 interface on Lenovo T60 hangs starting as of OpenBSD 5.7

2015-05-02 Thread Stuart Henderson
Not sure if it will help, but it might be useful to show 'systat mb' and 'sysctl kern.netlivelocks'. You mention updating packages, I've definitely had systems which have been pretty much flattened with netlivelocks/mitigation while doing this, perhaps some em(4) don't react very well to

Re: Ipsec NAT multiple subnets to same source ip

2015-05-08 Thread Stuart Henderson
On 2015/05/08 11:05, Erwin Schliske wrote: Hello, I have one question regarding ipsec with NAT. With one customer I have to setup a site2site vpn. To avoid address conflicts I'd use NAT. Because multiple of our subnets have to use the tunnel, I have this config in ipsec.conf: ike esp

Re: Ipsec NAT multiple subnets to same source ip

2015-05-08 Thread Stuart Henderson
On 2015/05/08 11:45, Erwin Schliske wrote: Can you just use this? ike esp from {192.168.10.0/24 (192.168.0.0/22)} to 10.78.1.0/24 [...] This would mean that 192.168.0.0/24 is covered in the flow as well, but unless you also have a matching NAT rule, packets from 192.168.0.0 won't

Re: em0 interface on Lenovo T60 hangs starting as of OpenBSD 5.7

2015-05-11 Thread Stuart Henderson
On 2015/05/09 17:10, Brad Smith wrote: On Sun, May 03, 2015 at 12:16:21PM +0200, Mark Kettenis wrote: Date: Sun, 3 May 2015 02:38:12 -0700 From: Bryan Linton b...@shoshoni.info The key difference is the following two lines. The first wedged, the second unwedged: em0

tmux crash, mar 8 snap (5.7 ish)

2015-04-17 Thread Stuart Henderson
I'm not sure how much use this is without symbols, but thought I should mention it anyway. I was just typing into tmux-ssh-mutt at the time. Core was generated by `tmux'. Program terminated with signal 11, Segmentation fault. (no debugging symbols found) Loaded symbols for /usr/bin/tmux Reading

Re: tmux crash, mar 8 snap (5.7 ish)

2015-04-17 Thread Stuart Henderson
On 2015/04/17 10:22, Mark Kettenis wrote: Date: Fri, 17 Apr 2015 09:04:26 +0100 From: Nicholas Marriott nicholas.marri...@gmail.com Hi No not much use without symbols unfortunately. Stuart, If your didn't update your source tree, building tmux with make DEBUG=-g and it should

Re: Lenovo G50-70 : kernel panic for sh /etc/netstart (current apr 1, amd64, re0, bsd.mp - reproducible)

2015-04-04 Thread Stuart Henderson
Hi Adam. Are you able to build a kernel with the last re(4) commits reverted to make sure that didn't introduce a bug? If not then I could build one for you to test (let me know which arch). - PatchSet 4925 Date: 2015/03/20 12:04:09 Author: dlg Branch: HEAD Tag: (none) Log:

Re: Lenovo G50-70 : kernel panic for sh /etc/netstart (current apr 1, amd64, re0, bsd.mp - reproducible)

2015-04-04 Thread Stuart Henderson
On 2015/04/04 14:40, Adam Wolk wrote: On Sat, Apr 4, 2015, at 01:53 PM, Stuart Henderson wrote: Hi Adam, you can find kernels that are quite likely to be identical to before that commit if you'd like to give that a try. I did a test with the kernels you provided. Here

Re: Panic: malloc: out of space in kmem_map

2015-04-05 Thread Stuart Henderson
On 2015/04/04 18:16, Ted Unangst wrote: Evgeniy Sudyr wrote: How can I help identify this bug, so developers can fix it :) Run sudo pstat -d ld acpi_nalloc; then wait some time and run it again. Though this looks like it could be a bug not in the OpenBSD ACPI code, but in the interpreted

Re: (no subject)

2015-08-19 Thread Stuart Henderson
On 2015/08/19 18:52, Witold Cichoń wrote: Hello I use OpenBSD version 5.7. I noticed a problem with the routing of the IPsec. I'm trying to redirect all traffic from a private subnet (192.168.127.0/24) to another host. .. FLOWS: flow esp in from 0.0.0.0/0 to 192.168.127.0/24 peer b.b.b.b

Re: (no subject)

2015-08-19 Thread Stuart Henderson
On 2015/08/19 20:47, Witold Cichoń wrote: Thanks for the clarification. This means that it is not possible to create a IPsec channel between any subnet and 0.0.0.0/0? Like I said: You need a bypass flow to go with this 0.0.0.0/0 entry.

Re: (no subject)

2015-08-19 Thread Stuart Henderson
On 2015/08/19 21:15, Witold Cichoń wrote: I'm sorry, I missed sentence: You need a bypass flow to go with this 0.0.0.0/0 entry. Any advice how to do that? If I understand correctly what you're trying to do, I think perhaps this: flow esp from 192.168.127.0/24 to 192.168.127.0/24 type

multiple pxe structures; pxeboot picks the wrong one

2015-08-18 Thread Stuart Henderson
Synopsis: multiple pxe structures; pxeboot picks the wrong one Category: system Environment: System : OpenBSD 5.8 Details : OpenBSD 5.8 (GENERIC.MP) #1236: Sun Aug 16 02:31:04 MDT 2015

Re: ftp not working

2015-07-18 Thread Stuart Henderson
On 2015/07/18 09:04, Rene Galera wrote: Hi, Love your focus on security. I am trying to build a virtual machine in Virtualbox version 4.3.26 in Ubuntu 15.04. When trying to download nano from your 5.7 repository I get a message stating Can't connect or login to host 'ftp.openbsd.com'

Re: Snapshots drop to ddb on boot on Lenovo E520

2015-11-14 Thread Stuart Henderson
On 2015/11/14 13:30, Lubos Boucek wrote: > Hello, > > After installation of the Nov 13 snapshot (snapshot from around Oct 31 > failed too) on Lenovo E520, booting drops to ddb. This is output (different > from 5.8 -release, see below) after line "[TTM] Memory type 2 has not been > initialized": >

Re: inet6 route not added for autoconf prefix

2015-11-02 Thread Stuart Henderson
On 2015/11/02 18:56, Lauri Tirkkonen wrote: > On Mon, Nov 02 2015 16:40:15 +0000, Stuart Henderson wrote: > > On 2015/11/02 13:56, loth...@iki.fi wrote: > > > The machine sending the router advertisements in question is OpenBSD > > > 5.8-stable > > &g

Re: Watchdog timeouts with em on recent snapshots

2015-11-01 Thread Stuart Henderson
On 2015/11/01 20:05, Gregor Best wrote: > Hi people, > > I just upgraded one of my routers to todays snapshot and I'm seeing > > em0: watchdog timeout -- resetting > > in the dmesg. How can I debug this properly? Full dmesg and the output > of ifconfig are below the signature. What

Re: ni_pledge kills Linux binary and crashes system

2015-11-05 Thread Stuart Henderson
On 2015/11/05 16:40, Stefan Wollny wrote: > HI! > > I attach 3 pictures taken from sceen. If they got lost drop me a line. To isolate it, can you try changing your shell to something from ports and see if it does the same? panic: ni_pledge running process is sh trace: panic pledge_namei namei

<    1   2   3   4   5   6   7   8   9   >