Re: iked without psk

2014-11-10 Thread Peter J. Philipp
On Mon, Nov 10, 2014 at 02:06:33PM +0100, Mike Belopuhov wrote: > hi, > > psk is now fixed in current. > > there are two other ways to authenticate hosts: rsa pubkeys (a recent > addition - works the same way as in isakmpd) and x.509 certificates. > both these options do not require any special

Re: nsd_flags

2014-11-10 Thread Ingo Schwarze
Hi, David Dahlberg wrote on Fri, Nov 07, 2014 at 08:11:50AM +: > Am Donnerstag, den 06.11.2014, 21:24 +0100 schrieb Maurice Janssen: >> I suppose the comment in rc.conf should be: for normal use: "" >> Just like most other services. Is that correct? It doesn't really matter, IMHO. Both are

Re: httpd slowcgi notes

2014-11-10 Thread Jean-Francois Simon
Hi All, With httpd as of 5.6 I do not understand how to make cgi script work eg just bgokg installed by default at address /cgi-bin/bgplg ==httpd.conf== prefork 2 server "local" { listen on egress port 80 } server "local-fastcgi" { listen on egress port 80 fastcgi } ==EOF== /etc/rc.d/http

Re: Turning off Nvidia GPU card in Optimus configuration

2014-11-10 Thread Mike Larkin
On Sun, Nov 09, 2014 at 11:01:32AM +0100, Lampshade wrote: > Hi > I was trying half year ago to use OpenBSD 5.5, but system heated my laptop. I > have Intel and Nvidia GPU in laptop. I can not disable Nvidia GPU via BIOS. > Laptop always exposes and enables two GPUs by default. OpenBSD does not

Re: Firewall: Where is the bottleneck?

2014-11-10 Thread Patrick
Hi Hrvoje, nestat -i shows nothing special. NameMtu Network Address Ipkts IerrsOpkts Oerrs Colls lo0 3315291235 091235 0 0 lo0 33152 localhost/1 localhost91235 091235 0 0 lo0 33152 fe80:

munin plugin to watch pf queues

2014-11-10 Thread Zé Loff
Hi all I came up with a munin plugin to monitor pf queues, so here it is, in case anyone cares. I'm a pretty shitty scripter, so suggestions and comments are mostly welcome, either by mail or on https://gist.github.com/zeloff/60ec3b546fcab6e1c8cf Cheers Zé -- #!/bin/sh # POD documentation :

Re: netflow + carp + nat problem

2014-11-10 Thread Daniel Melameth
On Mon, Nov 10, 2014 at 2:36 AM, jean-yves boisiaud wrote: > I use OpenBSD 5.5 as a firewall gateway. > > I also use nfsen/nfdump as the netflow collector/analyzer. > > pf.conf enables netflow for every pf rule (set state-defaults pflow). > > On the netflow collector host, when I analyse traffic u

Re: USB ports not working on a mid-2012 MacBookAir5,1

2014-11-10 Thread Sevan / Venture37
Just to follow up, I apologised to Martin off list regarding the dmesg photos. Reason for the photos was that this laptop only has 2x USB ports & a thunderbolt port as expansion but unfortunately the USB ports are not working hence resorting to photos. Then I remembered that my previous attempt of

symon: mbuf() failed (508)

2014-11-10 Thread Atanas Vladimirov
Hi, After the upgrade to the recent snapshot I got many symon: mbuf() failed (508) in /var/log/messages. # cat /etc/symon.conf monitor { cpu(0), cpu(1), cpu(2), cpu(3), mem, if(vlan41), if(vlan81), pf, mbuf, sensor(cpu0.temp0), sensor(nvt0.temp1), sensor

Re: Static routing question

2014-11-10 Thread Peter Hessler
As I said before. _This_ _Is_ _Not_ _Possible_. Period. On 2014 Nov 10 (Mon) at 17:30:50 -0200 (-0200), "Dante F. B. Col?" wrote: :Hi : :This is a part of the output containing the static routes related to :*bnx0* , *bnx1 *, i was trying to make a static route for the :189.92.72.11 pointing t

Re: Static routing question

2014-11-10 Thread Dante F. B. Colò
Hi This is a part of the output containing the static routes related to *bnx0* , *bnx1 *, i was trying to make a static route for the 189.92.72.11 pointing to *bnx1* but without success, is it possible ? below the routes is the output of ifconfig these interfaces, i'm gonna try a bridge also.

Re: netflow + carp + nat problem

2014-11-10 Thread Peter N. M. Hansteen
jean-yves boisiaud writes: > I also use nfsen/nfdump as the netflow collector/analyzer. > > pf.conf enables netflow for every pf rule (set state-defaults pflow). One of the more common mistakes in configs using set state-defaults is to assume that the default will append itself to rules where y

Re: Sun/Cassini Quad Gigabit Card Not Detected

2014-11-10 Thread Jeff
# arp -a # arp -a firewall-x.usedmoviefinder.com (172.16.103.1) at 00:00:00:00:00:00 on cas0 static # netstat -in NameMtu Network Address Ipkts IerrsOpkts Oerrs Colls lo0 327680 00 0 0 lo0 32768 ::1/128 :

Re: question about hosts.equiv and ssh

2014-11-10 Thread Theo de Raadt
>On Fri, Nov 07, 2014 at 09:14:05PM -0500, System Administrator wrote: >> In OpenBSD 5.6, the prototype and man-page for hosts.equiv(5) have >> disappeared. However, this file is still referenced in sshd_config(5) >> and (if I'm searching the sources correctly) in /usr/src/usr.bin/ssh >> auth-rh

Re: Sun/Cassini Quad Gigabit Card Not Detected

2014-11-10 Thread Jeff
Here's why I think that they're zero. Should I look somewhere else? # ifconfig cas cas0: flags=28863 mtu 1500 lladdr 00:00:00:00:00:00 priority: 0 media: Ethernet autoselect (1000baseT full-duplex) status: active inet 172.16.103.1 netmask 0x broadca

Re: Sun/Cassini Quad Gigabit Card Not Detected

2014-11-10 Thread Theo de Raadt
> I've made progress. OpenBSD now recognizes the four cas NIC's >and detects active/no carrier, but won't pass any traffic. I suspect >that it's because the mac addr (lladdr) is all zero's Doubt it is all zero. I suspect you will find that they have been changed to the kernel to somew

Re: USB ports not working on a mid-2012 MacBookAir5,1

2014-11-10 Thread Martin Pieuchot
Hello Sevan, On 10/11/14(Mon) 15:45, Sevan / Venture37 wrote: > Now that xhci is enabled in -current I gave the snapshots a try again > on my 11" mid-2012 MacBook Air. The system has USB3 ports but it seems > that these are not detected & so it is left without any working ports. > > snippets from

Re: Question about /etc/mail post 5.6 upgrade

2014-11-10 Thread Scott Vanderbilt
On 11/8/2014 10:43 PM, Eric Lalonde wrote: I recently upgraded from 5.5 to 5.6. I was surprised to see that the various apparently sendmail-specific files in /etc/mail are not in the ‘Files to delete and move’ list in upgrade56.html, now that sendmail is no longer in base. I suspect that either

Question about /etc/mail post 5.6 upgrade

2014-11-10 Thread Eric Lalonde
Hello, I recently upgraded from 5.5 to 5.6. I was surprised to see that the various apparently sendmail-specific files in /etc/mail are not in the ‘Files to delete and move’ list in upgrade56.html, now that sendmail is no longer in base. I suspect that either there are other reasons to keep the

USB ports not working on a mid-2012 MacBookAir5,1

2014-11-10 Thread Sevan / Venture37
Hi, Now that xhci is enabled in -current I gave the snapshots a try again on my 11" mid-2012 MacBook Air. The system has USB3 ports but it seems that these are not detected & so it is left without any working ports. snippets from dmesg http://imgur.com/9b1xZA9 http://imgur.com/OKzAfGe dmesg http:

Re: iked without psk

2014-11-10 Thread Mike Belopuhov
On 6 November 2014 10:19, Peter J. Philipp wrote: > Hi, > > Since my upgrade on saturday to 5.6 my iked stopped working with psk. > I've disabled it by now but the config was something of the order of: > > ikev2 active esp from 192.168.179.1 to 192.168.179.10 psk "icutwithanulu!" > ikev2 active es

Re: No closing quote

2014-11-10 Thread Eric Huiban
Jason Adams wrote: On 11/09/2014 02:30 PM, h410g3n wrote: I encountered the same problem. You must have just upgraded from 5.5 and forgot to run sysmerge, right? :D Jason Adams wrote: Everytime /etc/netstart runs I get a no closing quote message. Hate to obsess about trivialities but wonderi

netflow + carp + nat problem

2014-11-10 Thread jean-yves boisiaud
hello, I use OpenBSD 5.5 as a firewall gateway. I also use nfsen/nfdump as the netflow collector/analyzer. pf.conf enables netflow for every pf rule (set state-defaults pflow). On the netflow collector host, when I analyse traffic using nfdump, some packets are missing. But on the firewall, tcp