Re: upgrading release -> snapshot [was: Re: Characters of various Asian languages not rendering correctly in Firefox and Chromium]

2017-06-22 Thread Theo de Raadt
> On 06/22/17 23:11, Stuart Henderson wrote: > > These warnings mean something like: "don't move straight from a release > > or an older snapshot directly to building new code from source (whether > > that's -current or a newer release)". > > > > If there is much of a gap between the version

Re: Get an MAC address of a LAN PC - OpenBSD

2017-06-22 Thread Theo de Raadt
> Another solution is to smash that device with a hammer. Repeatedly. > Don't stop before you are sure it is destroyed. > > Then it has no MAC address. > > Later, if you search the world, you won't find it's MAC address. > > Eventually through exhaustive search you might be able to make a good

upgrading release -> snapshot [was: Re: Characters of various Asian languages not rendering correctly in Firefox and Chromium]

2017-06-22 Thread tomr
On 06/22/17 23:11, Stuart Henderson wrote: > These warnings mean something like: "don't move straight from a release > or an older snapshot directly to building new code from source (whether > that's -current or a newer release)". > > If there is much of a gap between the version you're running

Re: Get an MAC address of a LAN PC - OpenBSD

2017-06-22 Thread Theo de Raadt
> > > no idea what to do? > > > > Plug it back in. Power it up. Make sure it has a reachable IP. Ping > > it. > > > > very sorry. It is prohibited to plug it back in and power it up. > > To do it, We might need a special request. > > Theo, Anyway, thanks for you support. Another

Re: Get an MAC address of a LAN PC - OpenBSD

2017-06-22 Thread Indunil Jayasooriya
> > > no idea what to do? > > Plug it back in. Power it up. Make sure it has a reachable IP. Ping > it. > very sorry. It is prohibited to plug it back in and power it up. To do it, We might need a special request. Theo, Anyway, thanks for you support. -- cat /etc/motd Thank you

Re: Get an MAC address of a LAN PC - OpenBSD

2017-06-22 Thread Theo de Raadt
> Hi Raul, > > I am very glad your effort to support me since I DO NEED to get an MAC of > an OLD PC. > > This PC was removed from the network last week. > > unfortunately "arp -a" does NOT give the MAC of that PC. > > I am running darkstat as well. It also does NOT give it either. I think >

Re: Get an MAC address of a LAN PC - OpenBSD

2017-06-22 Thread Indunil Jayasooriya
Hi Raul, I am very glad your effort to support me since I DO NEED to get an MAC of an OLD PC. This PC was removed from the network last week. unfortunately "arp -a" does NOT give the MAC of that PC. I am running darkstat as well. It also does NOT give it either. I think This pf box has been

Re: Get an MAC address of a LAN PC - OpenBSD

2017-06-22 Thread Raul Miller
arp caches, of course, because ip packets are only exchanged intermittently. Whether it caches long enough for you is a different question. Thanks, -- Raul On Fri, Jun 23, 2017 at 1:03 AM, Indunil Jayasooriya wrote: > > arp -a gives all. > > thanks a LOT. > > it gives

Re: Get an MAC address of a LAN PC - OpenBSD

2017-06-22 Thread Indunil Jayasooriya
arp -a gives all. thanks a LOT. it gives current list. Is there any way to get an MAC address of a PC that was connected to OpenBSD PF box but now it is NOT connect to. This PC was removed from the network recently for auditing purpose. Can arp give old stuffs? Does it have a caching

Get an MAC address of a LAN PC - OpenBSD

2017-06-22 Thread Indunil Jayasooriya
Hi Misc, I do want to get an MAC address of a LAN PC that is 192.168.1.x This PC is behind OpenBSD pf box. this below command only shows IPs. tcpdump -n -e -ttt -r /var/log/pflog How can I get it from this OpenBSD Pf box? -- cat /etc/motd Thank you Indunil Jayasooriya

Re: Feeding DHCP leases into unbound

2017-06-22 Thread Nick Holland
On 06/22/17 05:47, Andreas Kusalananda Kähäri wrote: > Hi, > > I have unbound(8) and dhcpd(8) running on a router (OpenBSD 6.1-stable). > dhcpd currently hands out fixed addresses to my clients, but I'd like > these to be allocated dynamically from the common pool, while at the > same time being

/bsd: splassert: usb_transfer_complete: want 5 have 6

2017-06-22 Thread Mihai Popescu
The kernel throws this message when kern.splassert=2 and when i don't run X and stay in console looking at my mouse repeated usb disconnection / reconnection. I was able to see that before, but without the splassert warnings. Jun 22 20:02:44 thinkc /bsd: splassert: usb_transfer_complete: want 5

Re: Retro ThinkPad: It’s Alive

2017-06-22 Thread Karel Gardas
On Thu, Jun 22, 2017 at 5:01 PM, Rupert Gallagher wrote: > [...] Grow up, forget about that red button. If that would be that easy...

Re: Usage of global tables and anchors in PF

2017-06-22 Thread Jacob Leifman
Based on a conversation with Henning at BSDCon2017, the limitation is known as well as the reasons for its existence, but at this time there is no developer for whom the pain of the limitation has exceeded the expected pain of diving into this particular section of the code. On 21 Jun 2017 at

Re: Retro ThinkPad: It’s Alive

2017-06-22 Thread Rupert Gallagher
Oh please, nobody managed to give an orgasm to their ThinkPad, . Grow up, forget about that red button. Sent from ProtonMail Mobile On Thu, Jun 22, 2017 at 6:04 AM, Glenn Faustino wrote: Hi All, In case you haven't read it yet...

Re: Characters of various Asian languages not rendering correctly in Firefox and Chromium

2017-06-22 Thread Stuart Henderson
On 2017-06-22, tomr wrote: > > > On 06/21/17 20:17, Bryan Linton wrote: >> Upgrading to a snapshot and seeing if that makes any difference >> would be a simple way to see if anything in -current has fixed the >> issue you're seeing too. > > I thought "upgrading to a snapshot" was

Re: Libressl issue verifying self-signed certs with tls-auth and Openvpn

2017-06-22 Thread Stuart Henderson
On 2017-06-22, Stuart Henderson wrote: > On 2017-06-20, Andrew Lemin wrote: >> Has anyone else come across any issues recently with Openvpn, Libressl and >> TLS on OpenBSD 6.1? > > Yes there have been problems reported like this: (This is from the >

Re: Libressl issue verifying self-signed certs with tls-auth and Openvpn

2017-06-22 Thread Stuart Henderson
On 2017-06-20, Andrew Lemin wrote: > Has anyone else come across any issues recently with Openvpn, Libressl and > TLS on OpenBSD 6.1? Yes there have been problems reported like this: (This is from the "Investigating self-signed cert behavior change" posts on the libressl

Re: 答复: Openbsd6.1 as firewall can access the internet but the LAN behind it cannot

2017-06-22 Thread Edgar Pettijohn
http://www.openbsd.org/faq/pf/example1.html Follow the above links guidance and you should have no problem. ⁣Sent from BlueMail ​ On Jun 22, 2017, 4:56 AM, at 4:56 AM, lu jian wrote: > >According to the page http://www.openbsd.org/faq/pf/nat.html, NAT is a >way to map an

Re: Feeding DHCP leases into unbound

2017-06-22 Thread Stuart Henderson
On 2017-06-22, Jiri B wrote: > On Thu, Jun 22, 2017 at 11:47:03AM +0200, Andreas Kusalananda Khri wrote: >> >> I have unbound(8) and dhcpd(8) running on a router (OpenBSD 6.1-stable). >> dhcpd currently hands out fixed addresses to my clients, but I'd like >> these to be

Re: Feeding DHCP leases into unbound

2017-06-22 Thread Jiri B
On Thu, Jun 22, 2017 at 11:47:03AM +0200, Andreas Kusalananda Khri wrote: > > I have unbound(8) and dhcpd(8) running on a router (OpenBSD 6.1-stable). > dhcpd currently hands out fixed addresses to my clients, but I'd like > these to be allocated dynamically from the common pool, while at the >

Re: 答复: Openbsd6.1 as firewall can access the internet but the LAN behind it cannot

2017-06-22 Thread Bastien Durel
Le jeudi 22 juin 2017 à 06:21 +, lu jian a écrit : > # The line i put here > pass out on fxp0 inet from 192.168.0.0/24 to any nat-to 10.198.1.150 Your egress interface is pppoe0, not fxp0 in my pf.conf, I have : match out on pppoe0 inet from $lan nat-to (pppoe0:0) -- Bastien

Re: isakmpd memory usage

2017-06-22 Thread Martin Pieuchot
On 17/06/17(Sat) 09:49, Nicolas Repentin wrote: > No one ? > > Le 13 juin 2017 09:11:02 GMT+02:00, Nicolas a écrit : > >Hi everyone > > > >I'm searching some help about isakmpd, which is eating a lot of memory, > >until the machine crash. It's an OpenBSD 6.1 on Qemu KVM

答复: Openbsd6.1 as firewall can access the internet but the LAN behind it cannot

2017-06-22 Thread lu jian
According to the page http://www.openbsd.org/faq/pf/nat.html, NAT is a way to map an entire network(or networks) to a single IP address. Ideally, 192.168.0/24 should map to the address of interface which connects to the uplink ISP. So I put the following line to /etc/pf.conf: # cat

Fwd: synproxy state with multipath routing

2017-06-22 Thread Indunil Jayasooriya
Resending Hi Misc, Can We have synproxy state in pf.conf, when net.inet.ip.multipath=1 is set in /etc/sysctl.conf here is my config in /etc/sysctl.conf net.inet.ip.forwarding=1# 1=Permit forwarding (routing) of IPv4 packets #net.inet.ip.mforwarding=1 # 1=Permit forwarding

Feeding DHCP leases into unbound

2017-06-22 Thread Andreas Kusalananda Kähäri
Hi, I have unbound(8) and dhcpd(8) running on a router (OpenBSD 6.1-stable). dhcpd currently hands out fixed addresses to my clients, but I'd like these to be allocated dynamically from the common pool, while at the same time being resolvable. Is there an existing solution for feeding the

Re: Openbsd6.1 as firewall can access the internet but the LAN behind it cannot

2017-06-22 Thread Stuart Henderson
On 2017-06-21, Josh Grosse wrote: > On 2017-06-21 11:36, lu jian wrote: >> Hi >> >> I have an i386 machine with two network interfaces, one of which >> connect to the uplink ISP via pppoe, the other connects to the WAN >> port of a wireless router to which all LAN machines and

Re: splassert: pool_put: want 0 have 4

2017-06-22 Thread Martin Pieuchot
On 21/06/17(Wed) 17:42, Marko Cupać wrote: > On Tue, 20 Jun 2017 12:22:46 +0200 > Martin Pieuchot wrote: > > > On 14/06/17(Wed) 16:56, Marko Cupać wrote: > > > On Tue, 13 Jun 2017 11:38:46 + (UTC) > > > Stuart Henderson wrote: > > > > > > > Can you

authpf error: failed to create table (Device busy)

2017-06-22 Thread md . obsd . bugs
Hi I recently transmitted a bug report concerning an authpf issue in 6.1 (see also [1]) where loading the rules in the authpf anchor fails like this: "pfctl: failed to create table __automatic_ba6b4284_0 in