Re: PF Tagging

2014-09-03 Thread Indunil Jayasooriya
Oooo, thats an exciting possibility :) > > Any opportunities for reducing PF rule sets is always great. > > Yes, Indeed. +1 -- cat /etc/motd Thank you Indunil Jayasooriya http://www.theravadanet.net/ http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala Fonts

OT? - people going to EuroBSDcon in Sofia

2014-09-03 Thread Rod Whitworth
Hello from Aus. I don't want to clutter this list so I have provided a temporary email address for ALL replies. Please use nods dot 20 dot wtw at xoxy dot net I am going to Sofia and it is about 32+ hours from home to hotel flying out of Sydney Aus. So I am arriving on Thursday 25 Sep. and I ha

Re: Kernel build instructions

2014-09-03 Thread Ted Unangst
On Wed, Sep 03, 2014 at 12:08, Stan Gammons wrote: > Shouldn't the "rebuilding the kernel" instructions on this page > > http://www.openbsd.org/stable.html > > also state that you need to specify GENERIC.MP in order to build a > multiprocessor kernel on a multiprocessor machine? updated. thanks.

Re: OpenBSD 5.5 + FreeRADIUS 2.2: PID directory deleted on reboot?

2014-09-03 Thread Stuart Henderson
On 2014-09-01, Andrew Lester wrote: > This is probably a very simple question, but for the life of me I have not > been able to > locate a solution. I am running a RADIUS server on OpenBSD 5.5 stable (+ > openssl patches) > using FreeRADIUS 2.2.0p2 from the ports tree. When I first installed >

Re: PF Tagging

2014-09-03 Thread andy
On Wed, 3 Sep 2014 21:41:48 + (UTC), Stuart Henderson wrote: > On 2014-09-03, andy wrote: >> I'm just trying to ask why this doesn't work; >> >> pass out quick on $if_ext tagged { T_LAN, T_DMZ } keep state >> >> It gets a PF syntax error? Why? > > It's just not implemented in the parser in p

Re: Managed DNS recommendation

2014-09-03 Thread Stuart Henderson
On 2014-08-29, Adam Thompson wrote: > I've been dealing with (and recommending) EasyDNS since 1999, and their > technical support is easily the best in the industry - call their support # > and talk to a human. +1, I have absolutely no hesitation in recommending them.

Re: PF Tagging

2014-09-03 Thread Stuart Henderson
On 2014-09-03, andy wrote: > I'm just trying to ask why this doesn't work; > > pass out quick on $if_ext tagged { T_LAN, T_DMZ } keep state > > It gets a PF syntax error? Why? It's just not implemented in the parser in pfctl, it shouldn't be terribly hard to add..

Re: 5.5 Upgrade Without Uninstalling Packages

2014-09-03 Thread Stuart Henderson
On 2014-09-03, Chaz Gilbert wrote: > Hi All, > Why yes, I'm an idiot. I upgraded to 5.5 AMD64 via CD just now without > reading the instructions. As a result, I didn't first uninstall the packages > that were on my 5.4 system. Do I have any recourse now? Can I just delete > the packages now

Re: mpd unable to start on recent snapshots

2014-09-03 Thread Nicholas Fleisher
On Wed Sep 03 9:39 PM, David Coppa wrote: > > Thanks, but unfortunately getting rid of the corrupted database doesn't > > help. mpd can't seem to create a good new one from scratch. > > Double check your /etc/mpd.conf, check that /var/spool/mpd has the > right owner/group and permissions, have a

Re: PF Tagging

2014-09-03 Thread andy
On Wed, 03 Sep 2014 09:33:24 -0300, Giancarlo Razzolini wrote: > On 03-09-2014 09:08, andy wrote: >> The DMZ was just an example.. We can call it anything ;) >> >> I'm just trying to ask why this doesn't work; >> >> pass out quick on $if_ext tagged { T_LAN, T_DMZ } keep state >> >> It gets a PF sy

Re: mpd unable to start on recent snapshots

2014-09-03 Thread David Coppa
On Wed, Sep 3, 2014 at 8:38 PM, Nicholas Fleisher wrote: > > On Wed Sep 03 8:05 PM, David Coppa wrote: >> > With some help from ajacoutot@, I've managed to learn that there is a >> > problem with the mpd.db database file getting corrupted upon launch. >> > Here is the output from /etc/rc.d/mpd -d

Re: Intel i354 Quad GbE network adapter failed on 5.5-RELEASE

2014-09-03 Thread Axel Rau
Am 02.09.2014 um 15:45 schrieb Axel Rau : > The i347 device (em5) has a hardware-MAC of 00:60:e0:5a:75:45, but shows up > above as 00:60:e0:5a:75:39. > The answer to the pppoe server with MAC address 00:30:88:1f:18:9a is being > sent to MAC 00:30:75:39:00:30 instead. Nobody any idea? Axel --- PGP

Signing siteXX.tgz files?

2014-09-03 Thread Craig R. Skinner
I found a couple of threads related to signing the siteXX.tgz install files, and was wondering what the future (5.6) of this might look like. If I understand the present (5.5) situtation correctly, if site*.tgz are created & distributed, you have to trust your own files & method of distribution.

Re: mpd unable to start on recent snapshots

2014-09-03 Thread Nicholas Fleisher
On Wed Sep 03 8:05 PM, David Coppa wrote: > > With some help from ajacoutot@, I've managed to learn that there is a > > problem with the mpd.db database file getting corrupted upon launch. > > Here is the output from /etc/rc.d/mpd -d start: > > > > doing _rc_parse_conf > > doing _rc_quirks > > mpd

new httpd and cachability?

2014-09-03 Thread Craig R. Skinner
For the new httpd, will there be a mechanism to set cachability? Browser/proxy caching reduces both bandwidth costs & server load. Rough nginx e.g: http { ... .. expires 3d; add_header Pragma public; add_header Cache-Control public; server {

Re: mpd unable to start on recent snapshots

2014-09-03 Thread David Coppa
On Wed, Sep 3, 2014 at 7:29 PM, Nicholas Fleisher wrote: > On Wed Sep 03 10:12 AM, Mike Larkin wrote: >> On Wed, Sep 03, 2014 at 10:55:47AM -0500, Nicholas Fleisher wrote: >> > With the two latest snapshots I've installed (Aug 29 and Sep 2, amd64) >> > and the most recent package of mpd (built Aug

Re: mpd unable to start on recent snapshots

2014-09-03 Thread Nicholas Fleisher
On Wed Sep 03 10:12 AM, Mike Larkin wrote: > On Wed, Sep 03, 2014 at 10:55:47AM -0500, Nicholas Fleisher wrote: > > With the two latest snapshots I've installed (Aug 29 and Sep 2, amd64) > > and the most recent package of mpd (built Aug 30 on my mirror), mpd no > > longer starts up, either at boot

Re: mpd unable to start on recent snapshots

2014-09-03 Thread Mike Larkin
On Wed, Sep 03, 2014 at 10:55:47AM -0500, Nicholas Fleisher wrote: > With the two latest snapshots I've installed (Aug 29 and Sep 2, amd64) > and the most recent package of mpd (built Aug 30 on my mirror), mpd no > longer starts up, either at boot (via "pkg_scripts" in > /etc/rc.conf.local) or manu

Kernel build instructions

2014-09-03 Thread Stan Gammons
Shouldn't the "rebuilding the kernel" instructions on this page http://www.openbsd.org/stable.html also state that you need to specify GENERIC.MP in order to build a multiprocessor kernel on a multiprocessor machine? Stan

Re: pflow(4) sampling rate

2014-09-03 Thread Giancarlo Razzolini
On 03-09-2014 13:28, Paul S. wrote: > Unfortunately, this is a gateway box -- there aren't really any > firewall rules that I can individually apply the filter to. I do have pflow plus nfsen setups on lots of firewalls. All of them are gateways. And I don't use state-defaults. You only need to set

Re: OpenBSD on a 2013 MacBook Air

2014-09-03 Thread Eric Lalonde
The Mid-2013 MBA technical specs[1] list USB 3.0 ports only. I suspect it is similar to my late 2013 MBP in that the built-in keyboard is also treated as a USB 3.0 device. Since the OpenBSD’s xhci driver is still in development, you will have to force the firmware into legacy USB 2.0 mode[2] to

Re: pflow(4) sampling rate

2014-09-03 Thread Paul S.
Giancarlo, Thank you for your reply. Unfortunately, this is a gateway box -- there aren't really any firewall rules that I can individually apply the filter to. On 9/4/2014 午前 01:22, Giancarlo Razzolini wrote: On 03-09-2014 11:06, Paul S. wrote: Hi folks, I've setup a netflow collector and

Re: pflow(4) sampling rate

2014-09-03 Thread Giancarlo Razzolini
On 03-09-2014 11:06, Paul S. wrote: > Hi folks, > > I've setup a netflow collector and have begun exporting flow data from > one of my OpenBSD edge systems. > > All appeared well at first glance, but I've noticed that the amount of > flow data exported appears excessive. > > (i.e: My hardware route

mpd unable to start on recent snapshots

2014-09-03 Thread Nicholas Fleisher
With the two latest snapshots I've installed (Aug 29 and Sep 2, amd64) and the most recent package of mpd (built Aug 30 on my mirror), mpd no longer starts up, either at boot (via "pkg_scripts" in /etc/rc.conf.local) or manually ("/etc/rc.d/mpd start" yields "mpd(failed)"). Attempting to connect w

Re: OpenBSD on a 2013 MacBook Air

2014-09-03 Thread David Coppa
On Wed, Sep 3, 2014 at 12:38 PM, wrote: > I was recently gifted a 2013 Haswell MacBook Air. While OS X is nice, I would > like to run OpenBSD as the only OS on the machine. > > Is anyone doing this on a Haswell MBA? When I Google this, I can't seem to > find info on running it as the sole OS. >

OpenBSD on a 2013 MacBook Air

2014-09-03 Thread nuu66gg
I was recently gifted a 2013 Haswell MacBook Air. While OS X is nice, I would like to run OpenBSD as the only OS on the machine. Is anyone doing this on a Haswell MBA? When I Google this, I can't seem to find info on running it as the sole OS. Thank you.

pflow(4) sampling rate

2014-09-03 Thread Paul S.
Hi folks, I've setup a netflow collector and have begun exporting flow data from one of my OpenBSD edge systems. All appeared well at first glance, but I've noticed that the amount of flow data exported appears excessive. (i.e: My hardware router for nearly 7-8 gbit/s of actual traffic, co

Re: PF Tagging

2014-09-03 Thread Giancarlo Razzolini
On 03-09-2014 09:08, andy wrote: > The DMZ was just an example.. We can call it anything ;) > > I'm just trying to ask why this doesn't work; > > pass out quick on $if_ext tagged { T_LAN, T_DMZ } keep state > > It gets a PF syntax error? Why? > > > Thanks for your time, Andy. I replied before witho

Re: PF Tagging

2014-09-03 Thread andy
On Tue, 02 Sep 2014 18:33:02 -0300, Giancarlo Razzolini wrote: > On 02-09-2014 17:12, andy wrote: >> So why does; >> pass out quick on $if_ext tagged { T_LAN, T_DMZ } keep state >> >> NOT expand out to; >> pass out quick on $if_ext tagged T_LAN keep state >> pass out quick on $if_ext tagged T_DMZ

Re: Can OpenBSD access BBC Iplayer?

2014-09-03 Thread Stuart Henderson
On 2014/09/03 11:56, David Coppa wrote: > On Wed, Sep 3, 2014 at 9:32 AM, Anthony Campbell > wrote: > > On 02 Sep 2014, Stuart Henderson wrote: > >> On 2014-09-02, Anthony Campbell wrote: > >> > As a workaround I can use get_iplayer to download BBC programmes but is > >> > >> You can also use it

Re: Can OpenBSD access BBC Iplayer?

2014-09-03 Thread David Coppa
On Wed, Sep 3, 2014 at 9:32 AM, Anthony Campbell wrote: > On 02 Sep 2014, Stuart Henderson wrote: >> On 2014-09-02, Anthony Campbell wrote: >> > As a workaround I can use get_iplayer to download BBC programmes but is >> >> You can also use it to stream them live. Or some ISPs have live >> multica

trunk(4) does not failover

2014-09-03 Thread Kapetanakis Giannis
Hi, I'm trying apply trunk(4) on my secondary firewall and although I'm using the same configuration as the primary firewall or other systems I use with trunk I have problems failover on the slave port. Here is my config: # cat hostname.bge0 up # cat hostname.bge1 up # cat hostname.trunk0

Re: Can OpenBSD access BBC Iplayer?

2014-09-03 Thread Hugo Osvaldo Barrera
On 2014-09-02 08:57, Anthony Campbell wrote: > Greetings, list! > > I'm a long-standing user of Linux (currently ArchLinux) who is just > trying out OpenBSD and so far is much impressed. I'm using a Thinkpad > T42. > > The main outstanding problem at the moment is accessing BBC Iplayer, > which ins

Re: Can OpenBSD access BBC Iplayer?

2014-09-03 Thread Anthony Campbell
On 02 Sep 2014, Stuart Henderson wrote: > On 2014-09-02, Anthony Campbell wrote: > > As a workaround I can use get_iplayer to download BBC programmes but is > > You can also use it to stream them live. Or some ISPs have live > multicast streams that VLC can play. > > > it possible to get a brows