Re: Suppessing logging of arp movement messages

2017-11-09 Thread OpenBSD
Torsten, Thanks for responding to my question. I know about this specific sysctl on FreeBSD. Used this one on pfSense as well. The issue is that this one, or functional similar seems not available on OpenBSD. Maybe someone else has run into this before and found a way? Marco PC > Op 8 nov. 20

Re: Suppessing logging of arp movement messages

2017-11-09 Thread Daniel Gracia
AFAIK there is no way to turn off those messages in the default kernel. You could try to write a patch if you care: take a look at src/sys/netinet/if_ether.c, line #625. Regards! 2017-11-09 9:14 GMT+01:00 OpenBSD : > Torsten, > > Thanks for responding to my question. > I know about this specifi

6.1, opensmtpd: unable to verify the first certificate

2017-11-09 Thread Harald Dunkel
Hi folks, opensmtpd problem on openbsd 6.1: smtpd.conf says xname = "mail.example.de" pki $xname key "/etc/ssl/private/smtpd.key.pem" pki $xname certificate "/etc/ssl/public/mail.example.de.pem" ca $xname certificate "/etc/ssl/public/DigiCertCA.crt" limit mta inet4 listen on lo0 tls pki $xname

Re: spamd.conf with rsync and DNS-based lists

2017-11-09 Thread Stuart Henderson
On 2017-11-08, Mark Carroll wrote: > I am looking to expand my spamd.conf's blacklisting and I now see that > some providers prefer one to rsync their blacklist rather than simply > fetching it and more others make their lists queryable by DNS only. Commercial dnsbl operators will be taking value

Re: Bad network performance on apu2c4

2017-11-09 Thread Rupert Gallagher
The test had PF, NFS, and other services up. The mtu/JumboPacket on both nics is 9K bit. The wires are class 5e. The switch is a 1Gbps cisco. Sent from ProtonMail Mobile On Thu, Nov 9, 2017 at 08:19, Christer Solskogen wrote: > On Thu, Nov 9, 2017 at 1:42 AM, Rupert Gallagher wrote: > >> New

Re: Suppessing logging of arp movement messages

2017-11-09 Thread OpenBSD
Thanks Daniel, Great direction on where to look at in the code. Even without programming experience I will be able to remove the logging part. No idea yet on how I can make this configurable via sysctl.conf, but that’s for later. Marco PC > Op 9 nov. 2017, om 10:07 heeft Daniel Gracia het >

Re: Suppessing logging of arp movement messages

2017-11-09 Thread OpenBSD
Torsten, Thanks for responding to my question. I know about this specific sysctl on FreeBSD. Used this one on pfSense as well. The issue is that this one, or functional similar seems not available on OpenBSD. MarcoPC > Op 8 nov. 2017, om 16:44 heeft torsten het volgende > geschreven: > >>

Re: Hellos from the Lands of Norway.

2017-11-09 Thread Eivind Eide
>> On Tue, Nov 7, 2017 at 3:55 PM, Ywe Cærlyn >> wrote: >> >> > Well I have introduced myself then. >> > To make it clear: No name anywhere like the probably pure fantasy name of this specimen have ever been held by any human, pixie, faery, troll or any other entity in Norway, nor in any other sc

pf queueing syntax question

2017-11-09 Thread Marko Cupać
Hi, I'm (re)trying out queuing possibilities in 6.2. I am trying out different possibilities, mixing queue with prio. I have accidentally put two different lines in my pf.conf: match proto tcp to any port domain set prio 6 set queue dns match proto udp to any port domain set queue dns pri

Keeping up to date with ports and putting ports/pobj on wxallowed filesystem

2017-11-09 Thread Jeff
Hello all, Is this the sane/correct thing to do? What is the impact? Running: OpenBSD6.2-release Goal: To run a secure and functional web server. (the server is currently up and running and used by the public at large) Previously: Only installing needed packages as binaries via pkg_add. Now:

Re: Keeping up to date with ports and putting ports/pobj on wxallowed filesystem

2017-11-09 Thread Scott Bennett
On 11/9/2017 2:04 PM, Jeff wrote: > Hello all, > > [...] > > Also, is there an easy/sane way to remove packages that were only > required for building once the ports have been updated? You could use: $ pkg_info -t to show packages which are not required by any other packages (man.openbsd.org/pkg

In httpd redirecting and preserving the query parameters.

2017-11-09 Thread Peter Fraser
location match "^(.*)[.]shtml$" { block return 301 "https://$SERVER_NAME%1.htm?$QUERY_STRING"; } I used the above to change and web address ending in .shtml to the same ending in .htm The redirect went to the right spot, but each

Upgrade OpenVPN 2.3.1 server >> OpenVPN 2.4.1 server produces an write to TUN/TAP : Address family not supported error

2017-11-09 Thread Denis
Hi All, Have working setup with OpenVPN 2.3.1 on 54amd64 as a server side. As a client side supposedly using hardcoded OpenVPN 2.1.2. I can't affect to that version, just added ovpn.cnf to it to have it working. All work fine on OpenBSD54 amd64 for years... #openvpn --version OpenVPN 2.3.1 x86_6

Partitioning on MacBook Pro for triple booting

2017-11-09 Thread SFM
Hi everyone ! Up to now I have failed to do what the header says and I would love to know the reason, probably I am missing an/some important step(s). The hardware: MacBook Pro mid 2012 with EFI, a single 480GB SSD and 16GB RAM. The preps: Installed latest MacOS X (I am using the new “Appl

Re: Bad network performance on apu2c4

2017-11-09 Thread Rupert Gallagher
I forgot, the switch must be compatible with jumbo frames. If you have a managed switch, you need to enable it. Sent from ProtonMail Mobile On Thu, Nov 9, 2017 at 14:58, Rupert Gallagher wrote: > The test had PF, NFS, and other services up. > The mtu/JumboPacket on both nics is 9K bit. > The w

Re: Keeping up to date with ports and putting ports/pobj on wxallowed filesystem

2017-11-09 Thread Jeff
On Thu, 9 Nov 2017 14:04:39 -0500 Jeff wrote: > Is it not worth it to update ports in this way; meaning, is it better > to simply wait for OpenBSD6.3 and stick with binary packages only > (as recommended on the openbsd.org site)? It is has been pointed out to me that my meaning here is unclear.

Re: Keeping up to date with ports and putting ports/pobj on wxallowed filesystem

2017-11-09 Thread Daniel Boyd
On Thu, 2017-11-09 at 14:52 -0500, Jeff wrote: > Is it not worth it to update ports in this way; meaning, > is it better to simply wait for OpenBSD6.3 and stick with > binary packages? > > The openbsd.org site says: > The ports tree is meant for advan

Re: Keeping up to date with ports and putting ports/pobj on wxallowed filesystem

2017-11-09 Thread Allan Streib
Jeff writes: > I do not imply that openbsd.org recommends waiting for the next release > and not patching software. I personally use openup from m:tier, they provide updated packages as errata are released. https://www.mtier.org/solutions/apps/openup/ Allan

Re: Keeping up to date with ports and putting ports/pobj on wxallowed filesystem

2017-11-09 Thread Christoph R. Murauer
If I understood your question correct ... > Running: OpenBSD6.2-release > > Goal: To run a secure and functional web server. > (the server is currently up and running and used by > the public at large) If you apply the patches from the errata page using syspatch(8) (if you are on i386 / amd64) th

Re: Keeping up to date with ports and putting ports/pobj on wxallowed filesystem

2017-11-09 Thread Jeff
On Thu, 9 Nov 2017 22:06:43 +0100 "Christoph R. Murauer" wrote: > If I understood your question correct ... > > > Running: OpenBSD6.2-release > > > > Goal: To run a secure and functional web server. > > (the server is currently up and running and used by > > the public at large) > > If there ar

Re: Keeping up to date with ports and putting ports/pobj on wxallowed filesystem

2017-11-09 Thread trondd
On Thu, November 9, 2017 4:54 pm, Jeff wrote: > On Thu, 9 Nov 2017 22:06:43 +0100 > "Christoph R. Murauer" wrote: > >> If I understood your question correct ... >> >> > Running: OpenBSD6.2-release >> > >> > Goal: To run a secure and functional web server. >> > (the server is currently up and runni

Re: Keeping up to date with ports and putting ports/pobj on wxallowed filesystem

2017-11-09 Thread Marc Espie
On Thu, Nov 09, 2017 at 02:04:39PM -0500, Jeff wrote: > Is this a rational solution to the problem? I'm somewhat regretting > going this route as, unlike with pkg_add, building some ports from the > tree pulls in more dependencies than via pkg_add (I am assuming that > these are build dependencies

Re: Partitioning on MacBook Pro for triple booting

2017-11-09 Thread Nick Holland
On 11/09/17 13:42, SFM wrote: ... > The target: > > Triple boot Mac OS X, OpenBSD and DragonFly BSD from the same drive > (there are quite a few reasons for this, do not call me a masochist, > at least not in public). no need, you already described your behavior. ;) > > The problem: As I, of co

Re: Keeping up to date with ports and putting ports/pobj on wxallowed filesystem

2017-11-09 Thread Christoph R. Murauer
> Thanks for your replay Christoph. > > Please correct me if I'm wrong, but as I understand things, this only > works if one is following OpenBSD-current. I am running -release. > This is an in-use production server; I don't feel wise running > -current. If you install for example OpenBSD 6.2 you

Re: Keeping up to date with ports and putting ports/pobj on wxallowed filesystem

2017-11-09 Thread Christoph R. Murauer
Sorry, typo. Meaned pkg_delete -a

Fwd: Partitioning on MacBook Pro for triple booting

2017-11-09 Thread SFM
Sorry, I meant “A6” of course! بداية الرسالة المحولة: > من: Nick Holland > التاريخ: ٩ نوفمبر، ٢٠١٧، ١١:٣٢:١٢ م جرينتش+١ > إلى: misc@openbsd.org > الموضوع: رد:⁨ Partitioning on MacBook Pro for triple booting⁩ > >> On 11/09/17 13:42, SFM wrote: >> ... >> The target: >> >> Triple boot Mac OS X, O