Re: OpenOSPFD (6.4) "depend on" feature forces "type 1"

2019-01-10 Thread Sebastian Benoit
Remi Locherer(remi.loche...@relo.ch) on 2019.01.10 21:18:58 +0100: > On Fri, Jan 11, 2019 at 12:06:09AM +0700, Igor Podlesny wrote: > > On Thu, 10 Jan 2019 at 21:11, Remi Locherer wrote: > > [...] > > > I can reproduce it. Interestingly it only sends out the wrong type when > > > the "depend on" i

Re: Blocking "shodan.io" - What are my options?

2019-01-10 Thread Aaron Mason
I knew it wouldn't trigger on the first attempt, but I had a sneaking suspicion that you'd need something to listen on that port. Is there a way to achieve what we seek, in that case, without userland tools? On Thu, Jan 10, 2019 at 9:18 PM Stuart Henderson wrote: > > On 2019-01-09, Aaron Mason

Re: OpenOSPFD (6.4) "depend on" feature forces "type 1"

2019-01-10 Thread Remi Locherer
On Fri, Jan 11, 2019 at 12:06:09AM +0700, Igor Podlesny wrote: > On Thu, 10 Jan 2019 at 21:11, Remi Locherer wrote: > [...] > > I can reproduce it. Interestingly it only sends out the wrong type when > > the "depend on" interfac (carp1 in your example) is down or in backup > > state and the config

Re: OpenOSPFD (6.4) "depend on" feature forces "type 1"

2019-01-10 Thread Igor Podlesny
On Thu, 10 Jan 2019 at 21:11, Remi Locherer wrote: [...] > I can reproduce it. Interestingly it only sends out the wrong type when > the "depend on" interfac (carp1 in your example) is down or in backup > state and the configured type is 2. That's an irony for real! -- Type 1 is "heavier" than Ty

Re: Slow clock on vmd guest, i386-specific

2019-01-10 Thread Brian Conway
Understood, thanks for the update. At least the i386 angle it will be a little more searchable now. Brian Conway On Thu, Jan 10, 2019 at 12:28 AM Mike Larkin wrote: > > On Wed, Jan 09, 2019 at 11:18:16PM -0600, Brian Conway wrote: > > After looking through the mailing list archives, I'm seeking

Re: OpenOSPFD (6.4) "depend on" feature forces "type 1"

2019-01-10 Thread Remi Locherer
On Thu, Jan 10, 2019 at 03:06:59PM +0700, Igor Podlesny wrote: > On Thu, 10 Jan 2019 at 01:21, Remi Locherer wrote: > [...] > > > > It is not intended. I'll look into it. I can reproduce it. Interestingly it only sends out the wrong type when the "depend on" interfac (carp1 in your example) is do

Re: could use some spamdb output

2019-01-10 Thread Boudewijn Dijkstra
Op Fri, 21 Dec 2018 17:10:46 +0100 schreef Gilles Chehade : spamdb | grep -E '^(GREY|WHITE)\|' | cut -d\| -f1,2 -- Gemaakt met Opera's e-mailprogramma: http://www.opera.com/mail/

Re: iked.conf insanity (passing traffic locally between two tunneled subnets)

2019-01-10 Thread Daniel Ouellet
> OpenBSD's implementation of ipsec doesn't use the routing table, if you > want that (unless you make code changes) you will need to use a > different tunnel interface (gif or others) and just use ipsec to protect > the gif traffic. The point is to keep the configuration simple and gif doesn't ma

Re: Blocking "shodan.io" - What are my options?

2019-01-10 Thread Stuart Henderson
On 2019-01-09, Aaron Mason wrote: > Hi Jordan > > I've set it up to try it, but I'm not having much luck. Even when I > trigger more than one, it still doesn't populate the bad_hosts table, > even again when I extend the rate period to 86400 seconds. I've added > logging so I know the rule is tr

Re: iked.conf insanity (passing traffic locally between two tunneled subnets)

2019-01-10 Thread Stuart Henderson
On 2019-01-10, Daniel Ouellet wrote: > I have two separate subnets (on different interfaces) on a router. I am > trying to tunnel both subnets over the internet to another router on my > network. I can tunnel one subnet easily and everything works as > expected, but when I tunnel the 2nd subnet, t

Re: OpenOSPFD (6.4) "depend on" feature forces "type 1"

2019-01-10 Thread Igor Podlesny
On Thu, 10 Jan 2019 at 01:21, Remi Locherer wrote: [...] > > It is not intended. I'll look into it. I see, thank you. BTW, if-when it's fixed would such a fix be brought within standard syspatch update process or what would it be otherwise? Can you also explain why Type 1 has been chosen as defa