Re: openvpn multihome on OpenBSD?

2017-06-18 Thread Harald Dunkel
Hi Stuart, On 06/17/17 17:09, Stuart Henderson wrote: > > It's trying to use a single socket for v4 and v6. That is never going > to work on OpenBSD. > > Try "bind ipv6only" and see if that helps. > Currently I have 2 openvpn servers listening on either IPv4 or IPv6, each with its own address

ospf gre carp

2017-06-18 Thread Marko Cupać
Hi, I have setup similar to: R1 bnx0--bnx1 | |R3 LAN1---carp0 carp1--em0--em2---LAN2 | | bnx0--bnx1 R2 How can I run OSPF between R3 and carped R1 and R2? I tried with gre tunnel from carp

Re: openvpn multihome on OpenBSD?

2017-06-18 Thread Stuart Henderson
On 2017-06-18, Harald Dunkel wrote: > Hi Stuart, > > On 06/17/17 17:09, Stuart Henderson wrote: >> >> It's trying to use a single socket for v4 and v6. That is never going >> to work on OpenBSD. >> >> Try "bind ipv6only" and see if that helps. >> > > Currently I have 2 openvpn servers listening

Re: spamd does not start

2017-06-18 Thread Hrishikesh Muruk
Thank you for the response. I restarted syslogd after using $ doas rcctl restart syslogd syslogd(ok) syslogd(ok) So it should pick up the new config. Perhaps /var/log/spamd is not created because nothing has been logged by spamd (since it is not running) When I run spamd with debug (thanks for

Re: Is this an intrusion?

2017-06-18 Thread Maurice McCarthy
On 17/06/17 15:01, Stuart Henderson wrote: > On 2017-06-17, Maurice McCarthy wrote: > > On 17/06/17 09:27, Stuart Henderson wrote: > >> On 2017-06-16, Maurice McCarthy wrote: > >> > Ooops! ... Well, I moved the .Xauthority file aside and restarted X to > >> > create a new one. Obviously it has on

Re: ospf gre carp

2017-06-18 Thread Stuart Henderson
On 2017-06-18, Marko Cupać wrote: > Hi, > > I have setup similar to: > > R1 > bnx0--bnx1 >| |R3 > LAN1---carp0 carp1--em0--em2---LAN2 >| | > bnx0--bnx1 > R2 > > How can I run OSPF between

Fwd: Boot issue 6.1

2017-06-18 Thread Martin Oppegaard
-- Forwarded message -- From: Martin Oppegaard Date: Sun, Jun 18, 2017 at 10:56 AM Subject: Re: Boot issue 6.1 To: Donald Allen Now I've been able to look at this more. My computer doesn't support booting from USB, so I reupdated; from the CD this time. I get the error Message

Re: DNS hijacking (was Re: Is this an intrusion?)

2017-06-18 Thread Stuart Henderson
On 2017-06-17, Paul Suh wrote: > Folks,=20 > > My understanding of the way that this is done is by returning a CNAME = > when the ISP's DNS recursive DNS server would otherwise return a = > NXDOMAIN result, followed by a HTTP 302 when the browser attempts to = > reach the host via the bogus CNAME

Re: ospf gre carp

2017-06-18 Thread Marko Cupać
On Sun, 18 Jun 2017 09:52:13 + (UTC) Stuart Henderson wrote: > On 2017-06-18, Marko Cupać wrote: > > Hi, > > > > I have setup similar to: > > > > R1 > > bnx0--bnx1 > >| |R3 > > LAN1---carp0 carp1--em0--em2---LAN2 > >

Re: spamd does not start

2017-06-18 Thread Hrishikesh Muruk
Worked after I regenerated the key and crt file On Sun, Jun 18, 2017 at 3:16 PM, Hrishikesh Muruk wrote: > Thank you for the response. I restarted syslogd after using > > $ doas rcctl restart syslogd > syslogd(ok) > syslogd(ok) > > So it should pick up the new config. Perhaps /var/log/spamd is

Re: spamd does not start

2017-06-18 Thread Hrishikesh Muruk
almost everything works...logging to /var/log/spamd still not happening though I have restarted syslogd with $ rcctl restart syslogd On Sun, Jun 18, 2017 at 4:52 PM, Leighton Sheppard < leigh...@openbsd.leighling.co.uk> wrote: > On Sun, Jun 18, 2017 at 04:36:06PM +0530, Hrishikesh Muruk wrote:

guidelines for migration openldap directory to ldapd ?

2017-06-18 Thread Markus Rosjat
Hi there, I was wondering if there is something like that for migration an exisiting openLDAP directory to ldapd? I took a look at he config files and some stuff was basically the same information with diffrent syntax. The aim ist to make working with ldap authentication and opensmtp as si

Re: spamd does not start

2017-06-18 Thread Leighton Sheppard
I've just changed my mail relay from Exchange Online to Gmail, seems it was getting blocked. Hopefully this works. On Sun, Jun 18, 2017 at 12:49:43PM +0100, Leighton Sheppard wrote: > Try creating the file first: > > $ doas touch /var/log/spamd > $ doas chmod 640 /var/log/spamd > > > On Sun, J

Re: Is this an intrusion?

2017-06-18 Thread Maurice McCarthy
Just for info: So I rang Virgin to ask them to turn off their ANES for me (Advanced Network Error Search). 2 phone calls, 57 minutes and 7 advisors later they managed to find someone who knew what I was talking about. That's why I don't phone them unless I see no option. Now if I run with their d

Re: spamd does not start

2017-06-18 Thread Hrishikesh Muruk
Thank you sir. That worked. I also restarted syslogd just in case it was required On Sun, Jun 18, 2017 at 5:19 PM, Leighton Sheppard < leigh...@openbsd.leighling.co.uk> wrote: > Try creating the file first: > > $ doas touch /var/log/spamd > $ doas chmod 640 /var/log/spamd > > > On Sun, Jun 18,

DHCP server for IPv6

2017-06-18 Thread mabi
Hello, Does anyone have any recommendations on which package to use on OpenBSD 6.1 for a DHCP server for IPv6? AKFAIK the default dhcpd does not do IPv6. Regards, M.

Re: spamd does not start

2017-06-18 Thread Stuart Henderson
On 2017-06-18, Leighton Sheppard wrote: > I've just changed my mail relay from Exchange Online to Gmail, seems it was > getting blocked. Quite likely - Microsoft's outbound mail relays don't play well with spamd.

Re: spamd does not start

2017-06-18 Thread Leighton Sheppard
On Sun, Jun 18, 2017 at 05:35:13PM +, Stuart Henderson wrote: > On 2017-06-18, Leighton Sheppard wrote: > > I've just changed my mail relay from Exchange Online to Gmail, seems it was > > getting blocked. > > Quite likely - Microsoft's outbound mail relays don't play well with spamd. > > Y

dhclient won't get any IP

2017-06-18 Thread Christer Solskogen
I'm running the latest snapshot, and I suspect that there is something wrong with dhclient. (or at least, that is the symptom) Jun 18 20:50:14 tugs dhclient[79331]: DHCPDISCOVER on re2 - interval 1 Jun 18 20:50:14 tugs dhclient[79331]: DHCPOFFER from 51.174.112.1 (00:02:00:01:00:01) Jun 18 20:50:

Re: DHCP server for IPv6

2017-06-18 Thread Mike
On 6/18/2017 9:20 AM, mabi wrote: > Hello, > > Does anyone have any recommendations on which package to use on OpenBSD 6.1 > for a DHCP server for IPv6? AKFAIK the default dhcpd does not do IPv6. I've used both isc-dhcp (isc-dhcp-4.3.5) and kea (kea-1.1.0) packages on my home network as an IPv6

Re: dhclient won't get any IP

2017-06-18 Thread Edgar Pettijohn
On 06/18/17 14:38, Christer Solskogen wrote: I'm running the latest snapshot, and I suspect that there is something wrong with dhclient. (or at least, that is the symptom) Jun 18 20:50:14 tugs dhclient[79331]: DHCPDISCOVER on re2 - interval 1 Jun 18 20:50:14 tugs dhclient[79331]: DHCPOFFER fr

Re: ospf gre carp

2017-06-18 Thread Claer
On Sun, Jun 18 2017 at 47:12, Marko Cupać wrote: > On Sun, 18 Jun 2017 09:52:13 + (UTC) > Stuart Henderson wrote: > > > On 2017-06-18, Marko Cupać wrote: > > > Hi, > > > > > > I have setup similar to: > > > > > > R1 > > > bnx0--bnx1 > > >| |

Re: DNS hijacking (was Re: Is this an intrusion?)

2017-06-18 Thread Joe Holden
On 18/06/2017 10:59, Stuart Henderson wrote: > On 2017-06-17, Paul Suh wrote: >> Folks,=20 >> >> My understanding of the way that this is done is by returning a CNAME = >> when the ISP's DNS recursive DNS server would otherwise return a = >> NXDOMAIN result, followed by a HTTP 302 when the browse

Re: Fwd: Boot issue 6.1

2017-06-18 Thread Theo de Raadt
> I get the error Message that "installboot: /mnt/usr/mdec/biosboot extends > Beyond sector 268435455. OpenBSD might not boot." I'm dual booting with > Windows using Windows' boot loader first. You've created an OpenBSD MBR partition too far up your disk. It won't work in legacy mode. The BIOS w

Re: Can't connect from StrongSWAN to OpenBSD's iked

2017-06-18 Thread Tim Stewart
theblo...@gmail.com writes: > Hello, > > I’ve been trying to create an IPSec VPN in my OpenBSD computer and > every time I connect my Android phone (running StrongSWAN) to the > server I get the following errors in the logs (running iked -dvvv): > >> ikev2_sa_responder_dh: invalid dh, size 4096 >>

openiked configuration help: name, location and format of certificate and private key files

2017-06-18 Thread Agoston Toth
Hello, I would like to ask some help. It is not clear to me from the below man pages and I couldn't find answer on the net either: where shall I place the local certificate file (including the public key) and the private key if I would like to authenticate both sides with an X.509 certificate?(

Re: dhclient won't get any IP

2017-06-18 Thread Christer Solskogen
On Sun, Jun 18, 2017 at 10:54 PM, Edgar Pettijohn wrote: > > What is the `host-name` that it claims to be invalid? > I have no idea. dhclient.conf is empty.