Re: Fail2ban alternative for OpenBSD

2017-10-29 Thread x9p
On 2017-10-29 04:35, Rupert Gallagher wrote: Note that PF cannot discriminate between legitimate and abusive multiple connections from same cidr. If you whitelist the cidr of a mobile network, to avoid banning yourself on port 993, you also whitelist bruteforce attacks from the same cidr. Sent f

desync: scheduling fib reload

2017-10-29 Thread Robert Blacquiere
Hi I'me running a couple of openbsd routers running (still OpenBSD 6.0) with carp failover and ospfd+ospf6d. Everything seems running fine but i see clockwork every 5 min the following message: ospfd[PROCESSID]: desync; scheduling fib reload ospfd[PROCESSID]: reload interface list and routing ta

late ro remount to permit reorder_kernel on 6.2

2017-10-29 Thread Marko Cupać
Hi, on 6.2, kernel relinking is done last in rc: # Re-link the kernel, placing the objects in a random order. # Replace current with relinked kernel and inform root about it. /usr/libexec/reorder_kernel & I have some boxes which have /var /tmp and /dev mounted as mfs, while others are mounted fr

Re: mandoc output paper size

2017-10-29 Thread Mike Williams
Hiya On 10/27/17 14:31, Ingo Schwarze wrote: [ sending this particular one back to the list because it contains something useful for everyone and nothing private ] Replying to list to archive comments even if not acted on. Hi Jan, Jan Stary wrote on Fri, Oct 27, 2017 at 12:46:00PM +0200:

switching to DUIDs (and back)

2017-10-29 Thread Alan Corey
I thought this was documented somewhere but I'm not finding it in Googling. I don't really like DUIDs, but I want to stick in a second drive controller temporarily to recover data off some old hard drives. Which means /dev/wd0a etc is going to change since the added controller (in a PCI slot) beco

Re: switching to DUIDs (and back)

2017-10-29 Thread Josh Grosse
On Sun, Oct 29, 2017 at 11:25:22AM -0400, Alan Corey wrote: > I thought this was documented somewhere but I'm not finding it in Googling. > > I don't really like DUIDs, but I want to stick in a second drive > controller temporarily to recover data off some old hard drives. > Which means /dev/wd0a

Re: 5-button wheeled mouse and X

2017-10-29 Thread gwes
On 10/25/17 07:20, Cág wrote: Natasha Kerensikova wrote: it started as a bug report: it have a 5-button mouse with a wheel, even though I don't use much the buttons 4 and 5 (I think only for previous and next in firefox history). I recently switched to OpenBSD, and I was surprised to find these

Re: switching to DUIDs (and back)

2017-10-29 Thread Josh Grosse
On Sun, Oct 29, 2017 at 11:30:51AM -0400, Josh Grosse wrote: > Basically, replace "wd0" with the drive's DUID. I'm wrong, of course. Replace "/dev/wd0" with the drive's DUID, then append "." followed by the partition.

Re: mandoc output paper size

2017-10-29 Thread Walter Alejandro Iglesias
In article Mike Williams wrote: > Hiya > > On 10/27/17 14:31, Ingo Schwarze wrote: > > [ sending this particular one back to the list > > because it contains something useful for everyone and nothing private ] > > Replying to list to archive comments even if not acted on. > > > Hi Jan, > >

Re: desync: scheduling fib reload

2017-10-29 Thread Theo de Raadt
> I'me running a couple of openbsd routers running (still OpenBSD 6.0) > with carp failover and ospfd+ospf6d. Everything seems running fine but i > see clockwork every 5 min the following message: > > ospfd[PROCESSID]: desync; scheduling fib reload > ospfd[PROCESSID]: reload interface list and rou

Re: late ro remount to permit reorder_kernel on 6.2

2017-10-29 Thread Klemens Nanni
On Sun, Oct 29, 2017 at 12:32:58PM +0100, Marko Cupać wrote: > I know read-only setups are unsupported, modifying base files as > well, but if someone has an advice on what would be a better way of > remounting local file systems read-only after kernel relinking is done, > I'd be grateful. You can

Re: late ro remount to permit reorder_kernel on 6.2

2017-10-29 Thread Robert Peichaer
On Sun, Oct 29, 2017 at 06:54:29PM +0100, Klemens Nanni wrote: > On Sun, Oct 29, 2017 at 12:32:58PM +0100, Marko Cupa?? wrote: > > I know read-only setups are unsupported, modifying base files as > > well, but if someone has an advice on what would be a better way of > > remounting local file syste

Re: late ro remount to permit reorder_kernel on 6.2

2017-10-29 Thread Theo de Raadt
> > On Sun, Oct 29, 2017 at 12:32:58PM +0100, Marko Cupa?? wrote: > > > I know read-only setups are unsupported, modifying base files as > > > well, but if someone has an advice on what would be a better way of > > > remounting local file systems read-only after kernel relinking is done, > > > I'd

Re: CUPS and AVAHI (bloatware)

2017-10-29 Thread gwes
On 10/26/17 07:24, Rupert Gallagher wrote: It is well known that cups does not need avahi. Avahi is an option, it requires dbus, which requires X11. If you have a server with limited resources and without X11, you cannot install the present cups package. Please remove cups's dependency on av

Re: mandoc output paper size

2017-10-29 Thread Ingo Schwarze
Hi Mike, hi Jan, Mike Williams wrote on Sun, Oct 29, 2017 at 10:26:08AM +: > If the media size is important for a page then there > should be a PS setpagedevice call like the following: [...] > Basically don't rely on DSC comments to do media selection. [...] > It may be useful to use a med

Re: CUPS and AVAHI (bloatware)

2017-10-29 Thread Ingo Schwarze
Hi, gwes wrote on Sun, Oct 29, 2017 at 03:40:48PM -0400: > On 10/26/17 07:24, Rupert Gallagher wrote: >> If you have a server with limited resources and without X11, >> you cannot install the present cups package. I can't comment on CUPS and avahi in particular, but yes, in general, X libraries

Re: CUPS and AVAHI (bloatware)

2017-10-29 Thread Stuart Henderson
On 2017-10-29, gwes wrote: > When this works you should probably work with the ports > group to make this version available. They may not accept > it because compiling another version of cups on their > build systems would take too long. Build time of cups isn't really an issue. But the dependenc

Re: Fail2ban alternative for OpenBSD

2017-10-29 Thread Jacob Leifman
You might also want to check out http://openports.se/security/sshguard which integrates directly with PF. I find it quite effective. On 29 Oct 2017 at 6:30, x9p wrote: > On 2017-10-29 04:35, Rupert Gallagher wrote: > > Note that PF cannot discriminate between legitimate and abusive > > multiple

Re: pkg_add -u skipping mutt and python

2017-10-29 Thread Stuart Henderson
On 2017-10-26, Alex Holst wrote: > mutt is linked against two libc. To make matters worse, I am running > mutt 1.6.2 from 6.0, not 1.9.x from OpenBSD 6.2. Mutt isn't linked against two libc. Some of the libraries it use have been updated (pulling in new libc) but mutt itself hasn't been updated.

Re: CUPS and AVAHI (bloatware)

2017-10-29 Thread Cág
Stuart Henderson wrote: > Build time of cups isn't really an issue. But the dependency chain > around cups is already very delicate, and anything involving optional > dependencies for a library gets *really* awkward further down the chain. How about package splitting? cups doesn't require avahi

Re: CUPS and AVAHI (bloatware)

2017-10-29 Thread Theo de Raadt
> > Build time of cups isn't really an issue. But the dependency chain > > around cups is already very delicate, and anything involving optional > > dependencies for a library gets *really* awkward further down the chain. > > How about package splitting? cups doesn't require avahi binaries or XML

Re: CUPS and AVAHI (bloatware)

2017-10-29 Thread Ingo Schwarze
Hi, Cag wrote on Sun, Oct 29, 2017 at 09:49:49PM +: > headers and such - in -dev; No. OpenBSD is a developer-oriented system, so headers are an integral part of the installation. Installing them must not be optional, or it will cause nothing but needless confusion as soon as people actuall

Re: CUPS and AVAHI (bloatware)

2017-10-29 Thread Cág
> So basically you are saying the ports developers, who have worked very > hard, haven't built things exactly the way you want. > Did I get that right? Nobody apparently cared about it (neither do I really). It's an idea to be discussed (or not), not a proposal to have an answer right now. > By t

Re: CUPS and AVAHI (bloatware)

2017-10-29 Thread Theo de Raadt
> > So basically you are saying the ports developers, who have worked very > > hard, haven't built things exactly the way you want. > > Did I get that right? > > Nobody apparently cared about it (neither do I really). It's an idea to > be discussed (or not), not a proposal to have an answer right

Re: CUPS and AVAHI (bloatware)

2017-10-29 Thread Cág
Ingo Schwarze wrote: > No. OpenBSD is a developer-oriented system, so headers are an > integral part of the installation. Installing them must not be > optional, or it will cause nothing but needless confusion as soon > as people actually start using what they installed. And what if someone wan

Re: CUPS and AVAHI (bloatware)

2017-10-29 Thread Theo de Raadt
> > No. OpenBSD is a developer-oriented system, so headers are an > > integral part of the installation. Installing them must not be > > optional, or it will cause nothing but needless confusion as soon > > as people actually start using what they installed. > > And what if someone wants to buil

Re: CUPS and AVAHI (bloatware)

2017-10-29 Thread Jeremie Courreges-Anglas
On Sun, Oct 29 2017, Ingo Schwarze wrote: [...] >> /usr/local/share/locale files - in -lang; > > In most cases useless on OpenBSD, most of that stuff isn't used > in the first place. Most of what can be found in /usr/local/share/locale are LC_MESSAGES files handled by gettext, they are actuall

Re: CUPS and AVAHI (bloatware)

2017-10-29 Thread Ingo Schwarze
Hi Cag, Cag wrote on Sun, Oct 29, 2017 at 10:51:29PM +: > Ingo Schwarze wrote: >> No. OpenBSD is a developer-oriented system, so headers are an >> integral part of the installation. Installing them must not be >> optional, or it will cause nothing but needless confusion as soon >> as peopl

Gateway - Cannot bring WiFi up or broadcast ssid

2017-10-29 Thread Kurtis
I am configuring my home gateway. Being enthusiastically new to OpenBSD, I followed the directions here along with other various bits of documentation along the way: https://www.openbsd.org/faq/pf/example1.html Unfortunately, I can't seem to understand how to bring my WiFi network "up" and broadc

Re: Gateway - Cannot bring WiFi up or broadcast ssid

2017-10-29 Thread Carlos Cardenas
On 10/29/17 17:51, Kurtis wrote: I am configuring my home gateway. Being enthusiastically new to OpenBSD, I followed the directions here along with other various bits of documentation along the way: https://www.openbsd.org/faq/pf/example1.html Unfortunately, I can't seem to understand how to br

Need to swap partitions: /tmp amd /usr

2017-10-29 Thread Jay Hart
Good Evening Fellow OpenBSDers, Below is currently how I have my disk laid out partition wise. I have a feeling I need to swap /tmp and /usr in order to gain additional space for /usr. What is the best way to go about that? Filesystem SizeUsed Avail Capacity Mounted

Re: Gateway - Cannot bring WiFi up or broadcast ssid

2017-10-29 Thread Kurtis
Thank you very much, Carlos! That explains a lot, and you probably just saved me many more hours of frustration. I purchased this WiFi device with my new APU2. Is there a guide or list to find decent devices which will support hostap mode? I'm not quite sure what to look for when reading specs or

Re: Gateway - Cannot bring WiFi up or broadcast ssid

2017-10-29 Thread Carlos Cardenas
On 10/29/17 18:38, Kurtis wrote: Thank you very much, Carlos! That explains a lot, and you probably just saved me many more hours of frustration. I purchased this WiFi device with my new APU2. Is there a guide or list to find decent devices which will support hostap mode? I'm not quite sure what

Re: 5-button wheeled mouse and X

2017-10-29 Thread Daniel Jakots
On Sun, 29 Oct 2017 11:37:45 -0400, gwes wrote: > On 10/25/17 07:20, Cág wrote: > > Natasha Kerensikova wrote: > > > >> it started as a bug report: it have a 5-button mouse with a wheel, > >> even though I don't use much the buttons 4 and 5 (I think only for > >> previous and next in firefox hi

Re: CUPS and AVAHI (bloatware)

2017-10-29 Thread Kurt H Maier
I don't like the idea of splitting packages, but I get weirded out when ghostscript (which DOES have a no_x11 variant) winds up pulling in dbus. I guess there's no escaping freedesktop.org. khm

Re: MATE Desktop Environment 1.18.0

2017-10-29 Thread tec...@protonmail.com
Hi, apmd -A I didn't try the other one you mentioned though and it's too late for me to try unfortunately. > On Sat, Oct 28, 2017 at 06:12:33PM -0400, tec...@protonmail.com wrote: > >> A little off topic.. but.. >> I haven't tried MATE, but I have the same laptop (T430) and can report that >>

Re: CUPS and AVAHI (bloatware)

2017-10-29 Thread gwes
The last time AVAHI got installed on one of my systems the installer started it immediately. Avahi then proceeded to scribble on that system's network configuration and confuse other systems on that subnet. I would assert that Avahi should be either (a) not automatically started when installed or