Re: Ping blocked by firewall

2024-04-14 Thread Karel Lucas
What should I add to get it working? Op 13-04-2024 om 02:39 schreef Alexis: Karel Lucas writes: Ping only works partially. For example, this works: ping -c 10 195.121.1.34. But this doesn't work: ping -c 10 www.apple.com. I suspect this has to do with DNS servers, but I don't know where to

Re: Ping blocked by firewall

2024-04-14 Thread Karel Lucas
This makes no difference. Op 13-04-2024 om 22:06 schreef Peter J. Philipp: On Sat, Apr 13, 2024 at 09:32:48PM +0200, Karel Lucas wrote: What should I add then, considering my PF ruleset? To be honest, all of this is very unclear to me at the moment, so any help is appreciated. How about: pass

Re: No internet connection (firewall block)

2024-04-14 Thread Karel Lucas
Output from "tcpdump -neti pflog0": tcpdump: WARNING: snaplen raised from 116 to 160 tcpdump: listening on pflog0, link-type PFLOG ... rule 4/(match) pass in on igc1: 192.168.2.252 > 17.253.53.207: icmp: echo request ... output from "pfctl -sr -R 4": pass log inet proto icmp all icmp-type echor

Firewall setup

2024-04-14 Thread Karel Lucas
Hi all, Everything about PF is all very confusing to me at the moment, so any help is appreciated. So let's start simple and then proceed step by step. I want to continue with ping so that I can test the connection to the internet. This works: ping -c 10 195.121.1.34. But this doesn't work: p

Re: No internet connection (firewall block)

2024-04-14 Thread Zé Loff
On Sun, Apr 14, 2024 at 04:33:58PM +0200, Karel Lucas wrote: > Output from "tcpdump -neti pflog0": > tcpdump: WARNING: snaplen raised from 116 to 160 > tcpdump: listening on pflog0, link-type PFLOG > ... > rule 4/(match) pass in on igc1: 192.168.2.252 > 17.253.53.207: icmp: echo > request > ... >

Re: Firewall setup

2024-04-14 Thread Zé Loff
On Sun, Apr 14, 2024 at 05:09:01PM +0200, Karel Lucas wrote: > Hi all, > > Everything about PF is all very confusing to me at the moment, so any help > is appreciated. So let's start simple and then proceed step by step. I want > to continue with ping so that I can test the connection to the inter

Re: Firewall setup

2024-04-14 Thread Michael Lambert
There is a typo on the second line of the martians definition (spurious comma and space). Michael > On Apr 14, 2024, at 11:09, Karel Lucas wrote: > > Hi all, > > Everything about PF is all very confusing to me at the moment, so any help is > appreciated. So let's start simple and then procee

Re: Firewall setup

2024-04-14 Thread Peter N. M. Hansteen
On Sun, Apr 14, 2024 at 05:09:01PM +0200, Karel Lucas wrote: > Hi all, > > Everything about PF is all very confusing to me at the moment, so any help > is appreciated. So let's start simple and then proceed step by step. I want > to continue with ping so that I can test the connection to the inter

Re: SATA slow/timeouts, AMD 600 Series AHCI, OpenBSD 7.4 amd64

2024-04-14 Thread Divan Santana
I've found trying to upgrade such a system with this bug to be very difficult. It just hangs while attempting the upgrade (post the reboot). Attempting an upgrade via a usb install does much the same. Is slow to prompt to ask for keyboard layout. After that, just hangs. Perhaps me having setup

Re: Firewall setup

2024-04-14 Thread Jens Kaiser
Hello Karel, if you want to start simply, then I would recommend to remove all marcos from your pf.conf which are not referenced. You can add them later if needed. As already state by others, there is a syntax error in marco martians. If there are syntax errors in pf.conf, the rules are not loade

Re: Firewall setup

2024-04-14 Thread Sean Kamath
> On Apr 14, 2024, at 08:09, Karel Lucas wrote: > > Hi all, Hi. > So let's start simple and then proceed step by step. I want to continue with > ping so that I can test the connection to the internet. This works: ping -c > 10 195.121.1.34. But this doesn't work: ping -c 10 www.apple.com. A

Re: Firewall setup

2024-04-14 Thread deich...@placebonol.com
I'm a long time network engineer/firewall admin/make things work on our network when it is broken. First, ICMP Echo Request ( "ping" ) works, you proved that when you sent an Echo Request to a host using it's IP address. The fact that DNS host resolution fails has nothing to do with ICMP Echo

Re: 7.5 /var/log/messages - vfprintf %s NULL in "%.*s"

2024-04-14 Thread Jeremy Mates
TL;DR it's TERMINFO related or when ~/.terminfo exists and no TERM file exists therein. Also trying to read "none" (or maybe also "none.db" when the TERMINFO thing happens) from the current working directory might not be a good idea, if an attacker can put naughty things into either of those files

sip proxy (I'm starting one)

2024-04-14 Thread Peter J. Philipp
Hi, In this mail: https://marc.info/?l=openbsd-misc&m=170759396512738&w=2 I asked people what sip proxy they use. And got feedback, thank you! However after a short code-reading of the software mentioned I became distraught and want to do my own. I have worked on this saturday and sunday and i

OpenBSD Installation Doesn't Detect NVMe SSD, but Detects My USB Drives

2024-04-14 Thread aliyuruk
Hello, I'm currently trying to install OpenBSD on my laptop, and I'm coming across a problem. The installation only detects my installation drive and my other USB flash drive that I use for data storage, but not my NVMe SSD I want to do an installation on. This same problem also occurs in NetBSD,