Re: OpenBGPd forward update configuration

2015-06-26 Thread dsp
On Thu, Jun 11, 2015 at 03:21:31PM -0600, dsp wrote: On Wed, Jun 10, 2015 at 08:18:34PM -0600, dsp wrote: Hello list! please excuse my probably idiotic question, but i'm still a new OpenBGPd user. (5.7 release) what i'm trying to achieve is: a) connect to a bunch of peers but

Re: Is PFSync over IPSec still broken?

2015-06-26 Thread Ɓukasz Czarniecki
W dniu 25.06.2015 o 12:19, Jason McIntyre pisze: Please fix this bug or remove this example from documentation. For me this setup is broken since 2011. http://marc.info/?l=openbsd-miscm=130624207811609w=2 Nobody cares or nobody uses? i've just committed something similar to the diff

Re: OpenBGPd forward update configuration

2015-06-26 Thread Peter Hessler
On 2015 Jun 26 (Fri) at 00:18:40 -0600 (-0600), dsp wrote: :On Thu, Jun 11, 2015 at 03:21:31PM -0600, dsp wrote: : On Wed, Jun 10, 2015 at 08:18:34PM -0600, dsp wrote: : Hello list! : : please excuse my probably idiotic question, but i'm still a new OpenBGPd user. : (5.7 release) : : what

dnssec-signzone and NSEC3

2015-06-26 Thread Peter J. Philipp
Hi, I'm a developer of an authoritative nameserver (delphinusdnsd) and I've always developed this on OpenBSD. Lately I've been putting DNSSEC functionality into this daemon and almost completed RFC 4034 which includes NSEC,DS,RRSIG and DNSKEY RR's. I'd like to go further and put in RFC 5155

Re: dnssec-signzone and NSEC3

2015-06-26 Thread Peter J. Philipp
On 06/26/15 10:10, David Dahlberg wrote: Am Freitag, den 26.06.2015, 09:53 +0200 schrieb Peter J. Philipp: I can't find the -3 - option to generate NSEC3 RR's with dnssec-signzone. Am I reading the manual page wrong or is this a missing feature? If it is I'll probably leave NSEC3 out.

Re: dnssec-signzone and NSEC3

2015-06-26 Thread David Dahlberg
Am Freitag, den 26.06.2015, 09:53 +0200 schrieb Peter J. Philipp: I can't find the -3 - option to generate NSEC3 RR's with dnssec-signzone. Am I reading the manual page wrong or is this a missing feature? If it is I'll probably leave NSEC3 out. That's because old OpenBSD used an old version

alternative places to buy the CDs in US are needed

2015-06-26 Thread Boris Goldberg
Hello misc, I've looked (and registered) at openbsdstore.com (USA site) - don't like it (a lot). Use to buy OpenBSD stuff from a US book store, but can't find it (there was a link to it on the openbsd.org, but not any more). Are there alternative (local) options to buy the OpenBSD CDs in the

Re: alternative places to buy the CDs in US are needed

2015-06-26 Thread Alexander Salmin
Download, buy media yourself, and donate. Download docs online, print them, donate. Iterate every release, or more often. Don't understand how this can be so hard? Donations = close to zero effort. Printing CDs = more than zero effort for the project. On 2015-06-26 16:58, Boris Goldberg

Re: alternative places to buy the CDs in US are needed

2015-06-26 Thread L. V. Lammert
On Fri, 26 Jun 2015, Boris Goldberg wrote: Hello misc, I've looked (and registered) at openbsdstore.com (USA site) - don't like it (a lot). Use to buy OpenBSD stuff from a US book store, but can't find it (there was a link to it on the openbsd.org, but not any more). Are there alternative

Re: IPV6 routing issue

2015-06-26 Thread Gregor Best
On Fri, Jun 26, 2015 at 03:07:41PM +0200, Patrik Lundin wrote: [...] This would explain why you see neighbour solicitations on the outside interface. The upstream router is not aware that the prefix should be routed to you. [...] I've also seen something similar. A friend of mine suggested

Re: IPV6 routing issue

2015-06-26 Thread Giancarlo Razzolini
Em 26-06-2015 10:43, Gregor Best escreveu: I've also seen something similar. A friend of mine suggested [0], though I haven't tried it. I circumvented my problem by using a routed /64 on a Hurricane Electric tunnel. I wouldn't like to use a tunnel, since my ISP is (kind of) providing native

Re: IPV6 routing issue

2015-06-26 Thread Patrik Lundin
I have struggled with a similar problem a few years back. Can it be that the upstream equipment does not create a route for the delegated prefix pointing to your openbsd machine? This would explain why you see neighbour solicitations on the outside interface. The upstream router is not aware that

Re: IPV6 routing issue

2015-06-26 Thread Giancarlo Razzolini
Em 26-06-2015 10:43, Gregor Best escreveu: https://github.com/DanielAdolfsson/ndppd This doesn't compile on OpenBSD. I'm correcting it's includes and headers, but it seems it's linux centric. I'll probably need to change it's code. I've found some other tools but it seems almost all of them

ftp://ftp.fr

2015-06-26 Thread Antoine Jacoutot
Hi. As of tomorrow morning (CET), ftp.fr will stop serving files over FTP. It is time people move to HTTP. Everything else will remain the same (cvs, rsync, ...); it's *only* the FTP service that is going away. Thank you. -- Antoine

Re: IPV6 routing issue

2015-06-26 Thread Giancarlo Razzolini
Em 26-06-2015 10:07, Patrik Lundin escreveu: I have struggled with a similar problem a few years back. Can it be that the upstream equipment does not create a route for the delegated prefix pointing to your openbsd machine? This would explain why you see neighbour solicitations on the outside

Re: IPV6 routing issue

2015-06-26 Thread Giancarlo Razzolini
Em 26-06-2015 16:17, Christian Weisgerber escreveu: So you have TWO networks. One between the CPE and your OpenBSD firewall, and one containing the firewall and your internal machines. Yes. Two interfaces, to be more exactly. So you get ONE network address. I get a prefix on the CPE. And

Re: FFS snapshoting/softupdates status

2015-06-26 Thread Christian Weisgerber
On 2015-06-20, Karel Gardas gard...@gmail.com wrote: just going thorough papers/presentations and surprisingly found that kind of snapshoting is already supported in UFS since '99, FreeBSD probably supports that, Yes, FreeBSD has had snapshots on UFS for a long time. It doesn't support the

Re: IPV6 routing issue

2015-06-26 Thread Christian Weisgerber
On 2015-06-26, Giancarlo Razzolini grazzol...@gmail.com wrote: I've recently changed my ISP and they have native IPv6. My customer premises equipment, which is a GPON, supports both stateless as DHCPv6 on it's LAN interface. I want to put a OpenBSD firewall between this CPE and my

Re: IPV6 routing issue

2015-06-26 Thread Christian Weisgerber
On 2015-06-26, Giancarlo Razzolini grazzol...@gmail.com wrote: I don't know if OpenBSD does have any NDP proxying functionality, besides the one in ndp(8). But it seems to me that, besides a bridge, a NDP proxy is the only viable solution (besides my ISP allowing me to change my router

Re: IPV6 routing issue

2015-06-26 Thread Giancarlo Razzolini
Em 26-06-2015 16:44, Christian Weisgerber escreveu: Well, you can add an IPv6 address for each internal host to the external interface of your firewall, use private addresses on the internal network, and then use pf's binat to map between the two. This will preserve port numbers, although it may

Re: dnssec-signzone and NSEC3

2015-06-26 Thread Stuart Henderson
On 2015-06-26, David Dahlberg david.dahlb...@fkie.fraunhofer.de wrote: Am Freitag, den 26.06.2015, 09:53 +0200 schrieb Peter J. Philipp: I can't find the -3 - option to generate NSEC3 RR's with dnssec-signzone. Am I reading the manual page wrong or is this a missing feature? If it is I'll

ThinkPad X1 Carbon Gen3

2015-06-26 Thread Masao Uebayashi
- zzz - I can almost resume it from RAM with Security Chip (TPM) disabled in the BIOS setting. Except display remains off. With TPM enabled, I couldn't power on the machine after suspend to RAM. - ZZZ - Disabling TPM doesn't help hibernation. - I tried disabling various devices

Re: nsd configuration problem

2015-06-26 Thread Craig Skinner
On 2015-06-25 Thu 14:22 PM |, Andrew Daugherity wrote: The important bits to actually make this work are the 'do-not-query-localhost: no' and 'local-zone: C.B.A.in-addr.arpa. transparent' options, needed to override unbound's default behavior of ignoring localhost and RFC1918 addresses. It