Re: The Dao of pf?

2014-10-25 Thread Peter N. M. Hansteen
Giancarlo Razzolini grazzol...@gmail.com writes: Also, besides the excellent manual pages, and the pf user guide on the openbsd site, there is a great book by Peter Hansteen: http://www.bsdly.net/~peter/ I'm happy to hear you like it. But the better URL (better bandwidth) is

Re: Binat purpose?

2014-10-25 Thread Peter N. M. Hansteen
Theron ZORBAS theronzor...@yahoo.com writes: Modems are in bridge mode. OpenBSD is getting public addresses via pppoe. 1.1.1.1 is default gateway on OpenBSD. I'm trying to reach https server behind 2.2.2.2 ip address on pppoe1. So i have this rule for this aim: pass log quick from

Re: multiple calls to OpenSSL_add_all_algorithms

2014-10-25 Thread Joel Sing
On Thu, 23 Oct 2014, Martijn van Duren wrote: Hello misc@, I'm currently trying to write a library that heavily relies on libcrypto. Because I don't want applications linking to it, to have to call OpenSSL_add_all_algorithms, for convenience, I added those calls to the appropriate places in

mutt and gmail

2014-10-25 Thread frantisek holop
i'd like to ask other gmail on mutt users if they experience a Mailbox closed issue if they have it open for longer stretches of time. reopening the mailbox works but it is kind of a PITA. after making a debug enabled mutt, its debug log reveals the following: [2014-10-25 15:44:16] SSL error:

Re: The Dao of pf?

2014-10-25 Thread Артур Истомин
On Sat, Oct 25, 2014 at 01:44:14PM +0200, Peter N. M. Hansteen wrote: Giancarlo Razzolini grazzol...@gmail.com writes: Also, besides the excellent manual pages, and the pf user guide on the openbsd site, there is a great book by Peter Hansteen: http://www.bsdly.net/~peter/ I'm happy to

Re: pool_do_get panic

2014-10-25 Thread frantisek holop
a similar panic. looks like i am off to memtest86 savecore: reboot after panic: pool_do_get: mcl2k free list modified: page 0xd8af7000; item addr 0xd8af7800; offset 0x0=0x80 != 0x416a2108 savecore: writing core to /var/crash/bsd.1.core savecore: writing kernel to /var/crash/bsd.1 (gdb) file

Re: Binat purpose?

2014-10-25 Thread Theron ZORBAS
Hi Peter, Here is my pf.conf file: # Macros wan1 = pppoe0 wan2 = pppoe1 lan = em0 https_server = 192.168.101.168 # Options set skip on { lo0 enc0 } set optimization normal set block-policy drop set fingerprints /etc/pf.os # FTP Proxy anchor ftp-proxy/* # NAT Lan users on pppoe0

Re: The Dao of pf?

2014-10-25 Thread Peter N. M. Hansteen
Артур Истомин art.is...@yandex.ru writes: Are there any difference between http://home.nuug.no/~peter/pf/ and http://home.nuug.no/~peter/pf/newest/ besides slides? Yes. The slides cover a much wider range of topics (at the moment, roughly the same topics as in the third edition). Compare the

The Book of PF, 3rd ed: You own the first author signed copy and support OpenBSD!

2014-10-25 Thread Peter N. M. Hansteen
Hi, It's that scribe from the fjords again. Today I took delivery of my The Book of PF 3rd edition author copies, and I blogged about it: http://bsdly.blogspot.no/2014/10/the-book-of-pf-3rd-edition-is-here.html The main point here is that in cooperation with the OpenBSD Foundation I'm auctioning

Mount RAID 1, CRYPTO softraid at boot

2014-10-25 Thread Laurence Rochfort
Hello, I have a 2 disk RAID 1 softraid volume on top of which I have created a CRYPTO softraid volume. The combination appears to be working correctly when mounted manually, however I don't know how to automatically mount the CRYPTO volume at boot. The problem is that the nested CRYPTO device

Re: mutt and gmail

2014-10-25 Thread Dmitrij D. Czarkoff
frantisek holop said: i'd like to ask other gmail on mutt users if they experience a Mailbox closed issue if they have it open for longer stretches of time. reopening the mailbox works but it is kind of a PITA. after making a debug enabled mutt, its debug log reveals the following: FWIW I

Re: Question about FAQ section 10.3

2014-10-25 Thread Ingo Schwarze
Hi Marcus, Marcus MERIGHI wrote on Fri, Oct 24, 2014 at 04:22:02PM +0200: But I think I've carefully read everything publicly available wrt rcctl(8) lately. While i have contributed a few patches to rcctl(8), mostly of a technical nature, not adding to functionality, it's still Antoine's baby

Re: Mount RAID 1, CRYPTO softraid at boot

2014-10-25 Thread trondd
I added it /etc/rc (at my own peril). In 5.6, they added they net option to mount so in fstab I label the encrypted file systems as net, then call bioctl before the net partitions are mounted and fsck'ed. I also called it 3 times: bioctl || bioctl || bioctl to give me 3 shots at the password.

Re: The Book of PF, 3rd ed: You own the first author signed copy and support OpenBSD!

2014-10-25 Thread Peter N. M. Hansteen
In addition to a missing 'can' in the subject, there is a problem that the auction as outlined at first is in fact not feasible. But I'm working to fix that; for some weird reason setting up an ebay auction for this item was not straighforward, as you can glean from the updated blog entry (which

Re: The Book of PF, 3rd ed: You own the first author signed copy and support OpenBSD!

2014-10-25 Thread Peter N. M. Hansteen
Ebay situation resolved, the link to the auction is http://www.ebay.com/itm/The-Book-of-PF-3rd-ed-signed-by-the-author-First-Copy-signed-/321563281902? I will look into extending the auction's lifetime toward the original 30 days. The interface for doing so is not the most intuitive I've

Re: The Book of PF, 3rd ed: You own the first author signed copy and support OpenBSD!

2014-10-25 Thread Aaron Poffenberger
For what it’s worth, first bid. That and $4.00 will get me a nice cappuccino. ;-) Thanks for both the book (I received my No Starch copy a week or two ago) and for donating the signed edition to the OpenBSD Foundation. —Aaron On Oct 25, 2014, at 17:59, Peter N. M. Hansteen pe...@bsdly.net

unknown ethernet: intel dual-port gig copper

2014-10-25 Thread Jim Rowan
Hi, On 5.6 (I haven't tried this with anything older yet) my network card isn't recognized. It's an intel dual-port gig-e card. unknown vendor 0x8096 product 0x1010 (class network subclass ethernet, rev 0x11) at pci0 dev 8 function 0 not configured Can I do something to use this card?

Re: unknown ethernet: intel dual-port gig copper

2014-10-25 Thread Jonathan Gray
On Sat, Oct 25, 2014 at 07:35:46PM -0500, Jim Rowan wrote: Hi, On 5.6 (I haven't tried this with anything older yet) my network card isn't recognized. It's an intel dual-port gig-e card. unknown vendor 0x8096 product 0x1010 (class network subclass ethernet, rev 0x11) at pci0 dev 8

Re: The Book of PF, 3rd ed: You own the first author signed copy and support OpenBSD!

2014-10-25 Thread Michael W. Lucas
On Sun, Oct 26, 2014 at 12:59:03AM +0200, Peter N. M. Hansteen wrote: Ebay situation resolved, the link to the auction is http://www.ebay.com/itm/The-Book-of-PF-3rd-ed-signed-by-the-author-First-Copy-signed-/321563281902? Peter, BAH! You think you can steal my idea for supporting OpenBSD?

Re: The Dao of pf?

2014-10-25 Thread Артур Истомин
On Sat, Oct 25, 2014 at 07:11:04PM +0200, Peter N. M. Hansteen wrote: Артур Истомин art.is...@yandex.ru writes: Are there any difference between http://home.nuug.no/~peter/pf/ and http://home.nuug.no/~peter/pf/newest/ besides slides? Yes. The slides cover a much wider range of topics (at

Re: unknown ethernet: intel dual-port gig copper

2014-10-25 Thread Jim Rowan
On Oct 25, 2014, at 9:47 PM, Jonathan Gray wrote: On Sat, Oct 25, 2014 at 07:35:46PM -0500, Jim Rowan wrote: Hi, On 5.6 (I haven't tried this with anything older yet) my network card isn't recognized. It's an intel dual-port gig-e card. unknown vendor 0x8096 product 0x1010 (class network