serial & console access

2016-04-26 Thread jungle Boogie
Hi All, I would like to connect to a laptop via serial so I set this in /etc/boot.conf: set tty com0 Unexpectedly to me, I could not see the machine actually boot up until it went to the login prompt. Is there an /etc/boot.conf option I can set to support both console and serial access? Thanks!

Re: OpenBSD mailserver success stories ?

2016-04-26 Thread Bruno Flueckiger
On 26.04.2016 18:32, stan wrote: Given that, most of the things we are doing with FreeBSD, Apache, Samba, NFS etc, do not concern me as to doing them with OpenBSD. but I am a bit concerned about the mailserver. We use it for internal mail, and it gets mail from a large variety of systems, an

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Steve Shockley
On 04/26/2016 04:47 AM, Erling Westenvik wrote: $ pkg_info blogsum I use(d) Blogsum, but last I looked it pulled in Apache 1.3. I tried and failed to get it working under the new httpd chroot (too many Perl dependencies). I have a better understanding of httpd now, but I've lost enthusiasm

Re: OpenBSD mailserver success stories ?

2016-04-26 Thread Steve Shockley
On 04/26/2016 12:32 PM, stan wrote: I'd like to hear the experience of others using OpenBSD for mailserver. I used the guide from http://technoquarter.blogspot.com/2015/02/openbsd-mail-server.html to walk through the setup of OpenSMTPD, Dovecot, and Roundcube. It's a little dated now (based

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Michael McConville
David Lou wrote: > (btw, isn't the "built-in" httpd webserver just Apache? Google seems > to tell me that they're synonyms) Nope, Apache was bundled a long time ago and was replaced with Nginx, which was replaced with httpd in July 2014. httpd is an HTTP server that is developed in the OpenBSD sou

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread David Lou
Hello, Wow, thank you for all responses. I did not expect this many. You guys are really helpful! I had a feeling my original plan was too complicated. I appreciate that you guys are pointing it out. Honest feedback is good feedback. No need to spare any feelings if I'm doing something wrong. :)

Re: OpenBSD mailserver success stories ?

2016-04-26 Thread Zhang Huangbin
> On Apr 27, 2016, at 12:32 AM, stan wrote: > > With this in mid, I'd like to hear the experience of others using OpenBSD for > mailserver. You may give iRedMail a try, it's free and open source, works on OpenBSD: http://www.iredmail.org/

Re: OT: Any experience connecting OpenBSD via ONT ?

2016-04-26 Thread Joel Wirāmu Pauling
In New Zealand - 802.11ad VLAN's are stripped at the fibre Side of the ONT and the Layer2 (whatever it is ) is preserved throughout the access network to the ISP handover. If you get VLAN's (802.1q) on the customer ethernet port side, it will be entirely entirely dependent on the service that you

Re: OT: Any experience connecting OpenBSD via ONT ?

2016-04-26 Thread Joel Wirāmu Pauling
​Oh one other caveat; your dhcpclient MUST support dhcp-option-82 in some situations. On 27 April 2016 at 11:20, Joel Wirāmu Pauling wrote: > In New Zealand - 802.11ad VLAN's are stripped at the fibre Side of the ONT > and the Layer2 (whatever it is ) is preserved throughout the access networ

Re: OT: Any experience connecting OpenBSD via ONT ?

2016-04-26 Thread Jeremy
On Tue, 26 Apr 2016 17:53:32 -0500 Adam Thompson wrote: > If all else fails, run "ifconfig em2 up", and then "tcpdump -i em2 > - -l -n" and see what, if any, traffic is coming from the ONT on > the raw ethernet port (this will include the VLAN 10 packets, too). > If you're lucky, something it

Re: OT: Any experience connecting OpenBSD via ONT ?

2016-04-26 Thread Adam Thompson
On 16-04-26 05:29 PM, Jeremy wrote: Yeah, that's half the problem. My ISP isn't telling me much. Their helpdesk is handled out of the Philippines and it seems they're reading off a script. They don't mention PPPoE but from what I've tried so far, this looks like it will be necessary. Jeremy

Re: OT: Any experience connecting OpenBSD via ONT ?

2016-04-26 Thread Jeremy
On Tue, 26 Apr 2016 10:09:41 + (UTC) Stuart Henderson wrote: > Yes, I set one up via pppoe. But the ONT is just providing the > physical connection, the specifics of what you need to do on top of > that are ISP-dependent. If they are telling you DHCP then use DHCP :) Yeah, that's half the pro

Re: OpenBSD mailserver success stories ?

2016-04-26 Thread carlos albino garcia grijalba
i have been using OBSD mail server for 12 years its medium but it just works no problem at all with mail server i dont think you will have any problem by the way im using postfix as mta > Date: Tue, 26 Apr 2016 12:32:22 -0400 > From: st...@panix.com > To: misc@openbsd.org > Subject: OpenBSD mailse

Re: systrace removed? Why?

2016-04-26 Thread Kevin Chadwick
> it is not important. > > systrace was effectively deprecated 4-10 years ago, when there stopped > being a maintainer for it, or the broken ecosystem surrounding. > > That was a gap needed to consider a replacement model. > > What do you want here? I guess nothing important. I am happy with p

Re: systrace removed? Why?

2016-04-26 Thread Theo de Raadt
>> how do you mean? what happens on 5.9 when you use systrace with pledged >> programs? Does cpu usage go through the roof by any chance? That would >> explain why I have had to disable it to avoid waiting so long for >> systraced desktop programs. > >hmmm, actually I guess the claws-mail port may

Re: systrace removed? Why?

2016-04-26 Thread Theo de Raadt
>> > Unfortunately systrace overhead can be significant for monitoring >> > complex programs but it could potentially be useful as a part of a >> > (HIPS or system intrusion or malfunction detection for a secure >> > server). hmmm, assuming pledge doesn't kill the offending process first, >> > haha

Re: systrace removed? Why?

2016-04-26 Thread Kevin Chadwick
> how do you mean? what happens on 5.9 when you use systrace with pledged > programs? Does cpu usage go through the roof by any chance? That would > explain why I have had to disable it to avoid waiting so long for > systraced desktop programs. hmmm, actually I guess the claws-mail port may not be

Re: systrace removed? Why?

2016-04-26 Thread Kevin Chadwick
> > Unfortunately systrace overhead can be significant for monitoring > > complex programs but it could potentially be useful as a part of a > > (HIPS or system intrusion or malfunction detection for a secure > > server). hmmm, assuming pledge doesn't kill the offending process first, > > haha. >

/var/db/ntpd.drift is empty

2016-04-26 Thread bluesun08
/etc/ntpd.conf: # $OpenBSD: ntpd.conf,v 1.14 2015/07/15 20:28:37 ajacoutot Exp $ # # See ntpd.conf(5) and /etc/examples/ntpd.conf servers pool.ntp.org sensor * constraints from "https://www.google.com"; __ /var/log/messages: ntpd[32440]: /var/db/ntpd.drif

Fwd: Intel Compute Stick BOXSTK1AW32SC

2016-04-26 Thread Scott Bonds
I thought I'd try installing OpenBSD on an Intel Compute Stick using install.fs and the UEFI boot support. Worked like a charm. :) Dmesg below. I plan on building a wireless access point with it using a USB athn adapter (since the built in iwm doesn't support AP mode). I might use the Sticks to re

Re: systrace removed? Why?

2016-04-26 Thread Theo de Raadt
> > I guess the question is: how many people actually use systrace in > > scripts? Probably very very few. >From yesterday onwards, noone uses it. > I use it in scripts but will look to switching to pledge when I > have time, which I *should* be able to find in the next 6 months, haha. > It is ho

/bsd: login_reject(29034): syscall 5 "wpath"

2016-04-26 Thread Kevin Chadwick
/bsd: login_reject(29034): syscall 5 "wpath" Just an FYI as this poses no problem for me and perhaps it is more secure as is? *if* pledge *is* killing login_reject? than adding syscall priviledges but I have noticed that whilst login_reject is in effect and a login is attempted the above message i

Re: systrace removed? Why?

2016-04-26 Thread Kevin Chadwick
> I guess the question is: how many people actually use systrace in > scripts? Probably very very few. I use it in scripts but will look to switching to pledge when I have time, which I *should* be able to find in the next 6 months, haha. It is however sometimes insightful as a quick and dirty deb

Re: OpenBSD mailserver success stories ?

2016-04-26 Thread Rubén Llorente
On Tue, 26 Apr 2016 12:32:22 -0400, stan wrote: > Given that, most of the things we are doing with FreeBSD, Apache, > Samba, NFS etc, do not concern me as to doing them with OpenBSD. but I > am a bit concerned about the mailserver. We use it for internal mail, > and it gets mail from a large vari

Re: Can't use sshfs as user

2016-04-26 Thread Daniel Boyd
Any idea how to get it to map the uid? Once I mount the folder, I can't access it. I've tried -o idmap=user, -o uid=1000, etc. None of that seems to work. On Mon, Apr 25, 2016 at 6:18 AM, Dmitrij D. Czarkoff wrote: > Thuban said: > > Oh, that was it. > > It works after a > > # chmod 666 /d

Re: OpenBSD mailserver success stories ?

2016-04-26 Thread Mark Carroll
On 26 Apr 2016, stan wrote: > Given that, most of the things we are doing with FreeBSD, Apache, Samba, > NFS etc, do not concern me as to doing them with OpenBSD. but I am a bit > concerned about the mailserver. We use it for internal mail, and it gets mail > from a large variety of systems, and

OpenBSD mailserver success stories ?

2016-04-26 Thread stan
WE are in the early engineering stages of building a replacement system for one that we installed about 25 years ago that has served us well, and aged gracefully. However it is tied to some commercial software for a vendor that long ago fell into the back hole of commercial software vendors. Yep, n

Re: Fwd: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Murk Fletcher
> Anyway, if you wnat to add comments to a static site, you can host it yourself instead of using Disqus. Disqus is unfortunately Linux only due to Docker. There's an effort to port Docker to FreeBSD but I haven't tested it yet. Disqus, being Ruby on Rails, could be deployed like a conventional R

Re: Not enough Memory!

2016-04-26 Thread Kamil Cholewiński
On Mon, 25 Apr 2016, Mohammad BadieZadegan wrote: > Hi everybody, > I want to install wireshark but my memory was full! > Is that a way to increase /dev/sd0h? > Regards. Do you have any unallocated disk space? "disklabel sd0" should show us your disk layout. Easiest is to use this unallocated sp

Re: FW: Re: watchdog suport for new hardware

2016-04-26 Thread Stuart Henderson
On 2016-04-26, Theo de Raadt wrote: >> int >> selwd_probe(struct device *parent, void *match, void *aux) >> { >> struct isa_attach_args *ia = aux; >> bus_space_tag_t iot; >> bus_space_handle_t ioh; >> >> /* Match by device ID */ >> iot = ia->ia_iot; >> if (bus_space_

pf and filter for stp

2016-04-26 Thread steve kolars
I have been working on getting rid of stp on my network (not really interested in a diatribe on the pros and cons of stp). I have searched for information on doing this in pf. So far my searches have come up dry. Wondering if anyone on the list can assist. Thanks in advance.

Not enough Memory!

2016-04-26 Thread Mohammad BadieZadegan
Hi everybody, I want to install wireshark but my memory was full! Is that a way to increase /dev/sd0h? Regards. # pkg_add wireshark quirks-2.197 signed on 2016-02-24T23:26:39Z Error: /dev/sd0h is not large enough (/usr/local/lib/qt5/plugins/bearer/libqgenericbearer.so) Error: /dev/sd0h is not lar

FW: Re: watchdog suport for new hardware

2016-04-26 Thread stan
- Forwarded message from stan - From: stan To: Theo de Raadt Subject: Re: watchdog suport for new hardware Date: Tue, 26 Apr 2016 09:19:20 -0400 User-Agent: Mutt/1.5.4i X-Operating-System: Debian GNU/Linux X-Kernel-Version: 2.4.23 X-Uptime: 09:17:17 up 91 days, 8:18, 1 user, load ave

Re: FW: Re: watchdog suport for new hardware

2016-04-26 Thread Theo de Raadt
> int > selwd_probe(struct device *parent, void *match, void *aux) > { > struct isa_attach_args *ia = aux; > bus_space_tag_t iot; > bus_space_handle_t ioh; > > /* Match by device ID */ > iot = ia->ia_iot; > if (bus_space_map(iot, ia->ipa_io[0].base, SELWD_IOSIZE

Fwd: Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread rain1
On 2016-04-26 14:24, Kamil Cholewiński wrote: On Tue, 26 Apr 2016, ra...@openmailbox.org wrote: If you want to make a dynamic "web application" then consider using ur/web [1]. The programming language itself protects against SQL injection, XSS attacks, CSRF attacks. I hate to bring the bad new

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread lists
Tue, 26 Apr 2016 09:29:30 +0200 Kamil Cholewiński > On Tue, 26 Apr 2016, David Lou wrote: > > Hello, > > > > This is my first post. :) I suppose this is a high level kind of > > question. And can have way too many answers, not that many of them OpenBSD related. > > When I say 'blog', I'm referr

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread lists
Tue, 26 Apr 2016 12:36:32 +0200 Kamil Cholewiński > On Tue, 26 Apr 2016, li...@wrant.com wrote: > > Reality check, structured text presentation beats any sort of generator: > > > > [https://en.wikipedia.org/wiki/Lightweight_markup_language] > > I agree with using an LML, but that's just one piece

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Alex Poslavsky
On 04/26, David Lou wrote: When I say 'blog', I'm referring to a website that contains essentially many pages of content. Each content page has attributes such as title, date, category, tags, and so on. When a user browsers this website, the content pages are served in a visually attractive layou

Re: Fwd: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Thuban
The thing you should ask yourself is "what do I really need?" before installing a huge and useless CMS. +1 for a static site generator. I use swx [1] on my own, its just a markdown converter with some script to add rss feed, sitemap and so. But there are so many. There is also many small blog uti

Re: Error pkg_add -ui 5.8 -> 5.9

2016-04-26 Thread Marc Espie
On Mon, Apr 25, 2016 at 09:54:50PM -0600, Jack J. Woehr wrote: > {snip} > --- -upower-0.99.3 --- > You should also run rm -f /var/db/upower/history-* > --- +cantarell-fonts-0.0.21 --- > You may wish to update your font path for /usr/local/share/fonts/cantarell > Fata

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Kamil Cholewiński
On Tue, 26 Apr 2016, ra...@openmailbox.org wrote: > If you want to make a dynamic "web application" then consider using > ur/web [1]. The programming language itself protects against SQL > injection, XSS attacks, CSRF attacks. I hate to bring the bad news, but this language / framework has close

Re: watchdog suport for new hardware

2016-04-26 Thread Theo de Raadt
obviously you show the code, and then when the complexity/simplicity of it is seen, some people can jump in and help. that is the traditional way: show it > We are embarking on a project where we will be using a number of > industrially hardened computers manufactured by Schweitzer Engineering >

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread rain1
On 2016-04-26 10:03, Rubén Llorente wrote: On Tue, 26 Apr 2016 06:15:22 +, David Lou wrote: When I say 'blog', I'm referring to a website that contains essentially many pages of content. Each content page has attributes such as title, date, category, tags, and so on. When a user browsers t

Fwd: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Murk Fletcher
If I'm not mistaken Obama used Jekyll (https://jekyllrb.com/) for his campaign. --Murk -- Forwarded message -- From: Kristaps Dzonsons Date: Tue, Apr 26, 2016 at 2:10 PM Subject: Re: Creating a blog using OpenBSD: technology choices and security considerations To: misc@openbsd.or

watchdog suport for new hardware

2016-04-26 Thread stan
We are embarking on a project where we will be using a number of industrially hardened computers manufactured by Schweitzer Engineering Laboratories, Inc. (SEL). SEL provides a very well whiten document describing certain special features of these computers. One of these is a hardware watchdog.

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Kristaps Dzonsons
FWIW, I use my own http://kristaps.bsd.lv/sblg all the time. It just knits together HTML (XML style) articles via a Makefile. No python or markdown or any crap. Not sure if it's in ports yet. (I think A. Bentley had one?)

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Pablo Méndez Hernández
Hi David: I'd recommend you using a static content generator like pelikan (which is in ports). The generator is written in python but the content is static. Regards. Pablo On Tue, Apr 26, 2016 at 12:54 PM, Murk Fletcher wrote: > Hi! > > Both Perl and PHP are dying languages. Python is nice, bu

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Murk Fletcher
> This is infantile, and stupid beyond acceptable. [...snip...] Bullshit. Usually when people get this emotional it's because they either a) spent their entire lifes learning one of these obsolete languages and are now getting defensive, b) never actually built anything that people want to use. P

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Martijn van Duren
On 04/26/16 12:54, Murk Fletcher wrote: > Hi! > > Both Perl and PHP are dying languages. Python is nice, but Ruby on Rails is > way nicer. That's just my opinion though, and I build tons of super cool > web and mobile apps. I'm looking forward to your reimplementation of pkg_* and dpb in ruby. Ho

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Murk Fletcher
Hi! Both Perl and PHP are dying languages. Python is nice, but Ruby on Rails is way nicer. That's just my opinion though, and I build tons of super cool web and mobile apps. Ruby on Rails vs PHP - Commercial #3 of 9: https://www.youtube.com/watch?v=p5EIrSM8dCA etc. --Murk On Tue, Apr 26, 2016 a

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Kamil Cholewiński
On Tue, 26 Apr 2016, li...@wrant.com wrote: > Reality check, structured text presentation beats any sort of generator: > > [https://en.wikipedia.org/wiki/Lightweight_markup_language] I agree with using an LML, but that's just one piece of the puzzle. There are numerous converters available: - htt

Re: Change MTU for IPSec

2016-04-26 Thread lilit-aibolit
On 04/25/2016 06:13 PM, Marc Peters wrote: Am 04/25/16 um 16:00 schrieb lilit-aibolit: Hi list. I've typical site-to-site IPsec tunnel. On rare occasions users got infinite loop in their browser while opening web-sites in opposite endpoints, however in same time ping works well from one network

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Craig Skinner
On 2016-04-26 Tue 05:03 AM |, Jiri B wrote: > or you can choose perl Template Toolkit > This is a superb static page generator David: http://www.template-toolkit.org/ OpenBSD ported & packaged as 'p5-Template' Web experts say "write articles not blogs": http://www.nngroup.com/articles/write-arti

Re: systrace removed? Why?

2016-04-26 Thread Stuart Henderson
On 2016-04-26, arrowscr...@mail.com wrote: > Of course, you can put it on packages Nope.

Re: OT: Any experience connecting OpenBSD via ONT ?

2016-04-26 Thread Stuart Henderson
On 2016-04-26, wrote: > Does anyone have experience connecting an OpenBSD box via a fibre ONT ? Yes, I set one up via pppoe. But the ONT is just providing the physical connection, the specifics of what you need to do on top of that are ISP-dependent. If they are telling you DHCP then use DHCP :)

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Rubén Llorente
On Tue, 26 Apr 2016 06:15:22 +, David Lou wrote: > When I say 'blog', I'm referring to a website that contains essentially > many pages of content. Each content page has attributes such as title, > date, category, tags, and so on. When a user browsers this website, the > content pages are serv

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Jiri B
This thread is unreleated to OpenBSD. If you like to have a blog, there is a trillion of template systems like one used by OpenBSD to build web pages (perl, awk, shell) or you can choose perl Template Toolkit, jinja2, whatever... j.

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Erling Westenvik
On Tue, Apr 26, 2016 at 06:15:22AM +, David Lou wrote: > Hello, Hi there, > This is my first post. :) I suppose this is a high level kind of > question. > > When I say 'blog', I'm referring to a website that contains > essentially many pages of content. Each content page has attributes > suc

Re: problem with carp on 5.9, MAC address of carp interface?

2016-04-26 Thread Martin Pieuchot
On 26/04/16(Tue) 09:07, Sebastian Reitenbach wrote: > root@srv80:~# ifconfig carp7 > carp7: flags=8843 mtu 1500 > lladdr 00:00:5e:00:01:01 > description: IT > priority: 15 > carp: BACKUP carpdev vlan7 vhid 1 advbase 1 advskew 100 > groups: carp > stat

Re: Python requirements.

2016-04-26 Thread Jay Patel
Hi Giancarlo, I did upgrade to celery and also django-celery but i am getting this : Traceback (most recent call last): File "manage.py", line 9, in execute_from_command_line(sys.argv) File "/home/jay/biostar-central/lib/python2.7/site-packages/django/core/management/__init__.py", line 3

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Kamil Cholewiński
On Tue, 26 Apr 2016, David Lou wrote: > Hello, > > This is my first post. :) I suppose this is a high level kind of > question. > > When I say 'blog', I'm referring to a website that contains > essentially many pages of content. Each content page has attributes > such as title, date, category, tag

Re: problem with carp on 5.9, MAC address of carp interface?

2016-04-26 Thread Sebastian Reitenbach
On Monday, April 25, 2016 11:56 CEST, Martin Pieuchot wrote: > On 25/04/16(Mon) 11:35, Kim Zeitler wrote: > > Hello Martin > > > > > > On 04/25/16 11:12, Martin Pieuchot wrote: > > >On 25/04/16(Mon) 10:47, Kim Zeitler wrote: > > > > >>He is running a carp interface on top of a vlan interface. In