Re: OpenBSD 6-stable vmd

2016-10-24 Thread Ax0n
Thanks for the update, ml. The VM Just did it again in the middle of backspacing over uname -a... $ uname -a OpenBSD vmmbsd.labs.h-i-r.net 6.0 GENERIC.MP#0 amd64 $ un <-- frozen Spinning like mad. [axon@transient ~]$ vmctl status ID PID VCPUSMAXMEMCURMEM TTY NAME

Re: OpenBSD 6-stable vmd

2016-10-24 Thread Mike Larkin
On Mon, Oct 24, 2016 at 07:36:48PM -0500, Ax0n wrote: > I suppose I'll ask here since it seems on-topic for this thread. Let me > know if I shouldn't do this in the future. I've been testing vmm for > exactly a week on two different snapshots. I have two VMs: One running the > same snapshot (amd64,

Re: OpenBSD 6-stable vmd

2016-10-24 Thread Ax0n
I suppose I'll ask here since it seems on-topic for this thread. Let me know if I shouldn't do this in the future. I've been testing vmm for exactly a week on two different snapshots. I have two VMs: One running the same snapshot (amd64, Oct 22) I'm running on the host vm, the other running amd64 6

Re: OpenBSD 6-stable vmd

2016-10-24 Thread R0me0 ***
Hey @Peter, one more time thank so much for the heads up :) For those that interest. I'm running OpenBSD-Current under VMware-Workstation 12 ( just need to set processor proprieties to virtualize intel VT-x/EPT or AMD-V/RVI ) And have fun to test VMD :) Thank you 2016-10-22 8:43 GMT-02:00

dante socksify authenticate a different user

2016-10-24 Thread Rashad Kanavath
Hello, Can someone provide a sample configuration for socks.conf to use socsk5 protocol with authentication. after basic configuration it uses a system user but I have a different username for proxy server here is /etc/socks.conf route { from: 0.0.0.0/0 to: 0.0.0.0/0 via: x.x.x.x p

Re: pf rule for openvpn

2016-10-24 Thread R0me0 ***
Assuming you block the traffic by default pf.conf block log all # tcpdump -e -ttt -ni pflog0 action block You will be able to see what exactly is being blocked :) -Regards 2016-10-24 12:19 GMT-02:00 Kenneth Gober : > On Sun, Oct 23, 2016 at 4:46 PM, Thuban wrote: > > Here are the relevant

Re: openbsd bgp problem send /128 ipv6 announcement for remote blackhole

2016-10-24 Thread Claudio Jeker
On Mon, Oct 24, 2016 at 04:03:01PM +0200, Thomas Boernert wrote: > Dear List, > > with ipv4 it works fine: > bgpctl network add ipv4-address/32 community 1:0 > > but with ipv6 it won't work: > > # bgpctl network add ipv6-address/128 community 1:0 > request sent. > > => but no update wil

Re: pf rule for openvpn

2016-10-24 Thread Kenneth Gober
On Sun, Oct 23, 2016 at 4:46 PM, Thuban wrote: > Here are the relevant parts of my pf.conf : > > ext_if = "re0" > tcp_pass = "{ gopher ipp 8000 }" > udp_pass = "{ 1194 }" > > pass in quick on $ext_if proto tcp to any port $tcp_pass keep state > pass in quick on $ext_if proto ud

openbsd bgp problem send /128 ipv6 announcement for remote blackhole

2016-10-24 Thread Thomas Boernert
Dear List, with ipv4 it works fine: bgpctl network add ipv4-address/32 community 1:0 but with ipv6 it won't work: # bgpctl network add ipv6-address/128 community 1:0 request sent. => but no update will be send to the neighbor, checked with tcpdump too, no packet will be send. # bgpctl

Re: dmidecode and access to /dev/mem denied

2016-10-24 Thread Raul Miller
On Fri, Oct 21, 2016 at 11:56 AM, Theo de Raadt wrote: > For the simple reason that this is 2016 not 1986, and userland code that > can sniff through the kernel's physical address space is a ridiculous > process. It needs to die; or have proper device driver interface that > gives it exactly what

Re: pf rule for openvpn

2016-10-24 Thread Thuban
* Predrag Punosevac le [23-10-2016 20:18:27 -0400]: > Op 23-10-2016 om 17:01 schreef Thuban: > > Hi, > > I have an openvpn server running and working, but can't > > go "outside" the server to access the web. > > > > To configure the server, I followed this : > > http://2f30.org/guides/openvpn.html

Re: How to analyse excessive PF states?

2016-10-24 Thread Patrick Lamaiziere
Le Sat, 22 Oct 2016 18:12:37 +0200, Federico Giannici a écrit : > We have a firewall with OpenBSD 6.0 amd64 that handles about 1.5 Gbps > of traffic. > > I noticed that from a few weeks the number of states is increased > from around 250.000 to almost 2 millions (no change in PF config)! > > At