Re: Configure User-Agent is relayd HTTP Check ?

2024-05-29 Thread Kirill A . Korinsky
On Wed, 29 May 2024 17:19:32 +0100, Joel Carnat wrote: > > Thank you! I went for solution 2 but it seems the string is not send > properly by relayd. > It sends as is, so the rigth approach, let me quote the man is: check binary send data expect data [tls] For each host in the

Re: [7.5/amd64] ipsec + npppd + sasyncd + carp - doesn't pick up the VPN session at switchover

2024-05-29 Thread Vitaliy Makkoveev
> On 29 May 2024, at 18:50, Hrvoje Popovski wrote: > > On 29.5.2024. 12:48, Radek wrote: >> Thank you, that explains everything. >> Does wireguard support replication? Will it work properly in my CARP setup? >> > > > why not use iked as vpn solution ? i'm not sure but i think that iked is

Re: [7.5/amd64] ipsec + npppd + sasyncd + carp - doesn't pick up the VPN session at switchover

2024-05-29 Thread Vitaliy Makkoveev
> On 29 May 2024, at 18:50, Hrvoje Popovski wrote: > > On 29.5.2024. 12:48, Radek wrote: >> Thank you, that explains everything. >> Does wireguard support replication? Will it work properly in my CARP setup? >> > > Hi, > > I have wg listen on carp interface for redundancy and it's working > w

Re: [7.5/amd64] ipsec + npppd + sasyncd + carp - doesn't pick up the VPN session at switchover

2024-05-29 Thread obsdml
> On May 29, 2024, at 3:48 AM, Radek wrote: > > Thank you, that explains everything. > Does wireguard support replication? Will it work properly in my CARP setup? wireguard doesn’t have “state” per se. it remembers the last address a key was associated with. In the event of a failover, if

Serial console on vmware esxi 8

2024-05-29 Thread Hrvoje Popovski
Hi all, this could be useful information to those who are using openbsd on vmware. while testing jan@ vmx LRO diffs, openbsd machine panic. I've sent him few screenshots and those screenshots are awful. Good thing is that vmware have virtual serial port https://docs.vmware.com/en/VMware-vSphere/8

Re: Configure User-Agent is relayd HTTP Check ?

2024-05-29 Thread Joel Carnat
Le 29/05/2024 à 14:45, Kirill A. Korinsky a écrit : On Wed, 29 May 2024 12:19:15 +0100, Joel Carnat wrote: Is there a way to specify a User-Agent value for the check http or shall I rather tell relayd to validate on "code 418"? here two possible way to overstep it. 1. Use `check script /so

Re: binding on privileged ports as user

2024-05-29 Thread Stuart Henderson
On 2024-05-29, Gregory Edigarov wrote: > Hello, everybody > > I remember exactly, that I was able to do that with systrace. > Can I do that now? Is there any workaround for that? You could listen on another port and rdr-to. > If for example I need to run some potentially exploitable service, >

Re: [7.5/amd64] ipsec + npppd + sasyncd + carp - doesn't pick up the VPN session at switchover

2024-05-29 Thread Hrvoje Popovski
On 29.5.2024. 12:48, Radek wrote: > Thank you, that explains everything. > Does wireguard support replication? Will it work properly in my CARP setup? > Hi, I have wg listen on carp interface for redundancy and it's working without admins or clients needs to do anything when primary carp firewa

Re: [7.5/amd64] ipsec + npppd + sasyncd + carp - doesn't pick up the VPN session at switchover

2024-05-29 Thread Stuart Henderson
On 2024/05/29 18:08, Vitaliy Makkoveev wrote: > On Wed, May 29, 2024 at 01:23:47PM -, Stuart Henderson wrote: > > On 2024-05-29, Vitaliy Makkoveev wrote: > > > On Wed, May 29, 2024 at 12:48:41PM +0200, Radek wrote: > > >> Thank you, that explains everything. > > >> Does wireguard support repl

Re: [7.5/amd64] ipsec + npppd + sasyncd + carp - doesn't pick up the VPN session at switchover

2024-05-29 Thread Vitaliy Makkoveev
On Wed, May 29, 2024 at 01:23:47PM -, Stuart Henderson wrote: > On 2024-05-29, Vitaliy Makkoveev wrote: > > On Wed, May 29, 2024 at 12:48:41PM +0200, Radek wrote: > >> Thank you, that explains everything. > >> Does wireguard support replication? Will it work properly in my CARP setup? > >> >

binding on privileged ports as user

2024-05-29 Thread Gregory Edigarov
Hello, everybody I remember exactly, that I was able to do that with systrace. Can I do that now? Is there any workaround for that? If for example I need to run some potentially exploitable service, and cannot change the port it listens on, and therefore want to chroot -u and allow it to grab th

Re: OpenBSD bgpd / rad "Permission denied" messages ?

2024-05-29 Thread Stuart Henderson
On 2024-05-28, Claudio Jeker wrote: > On Tue, May 28, 2024 at 06:28:27PM +0200, Rachel Roch wrote: >> Hi >> >> I'm struggling to understand what is going on here. >> >> I have an Openbsd 7.2 box which has been working beautifully for about 3 >> years. >> >> Now it seemingly suddenly refuses to

Re: [7.5/amd64] ipsec + npppd + sasyncd + carp - doesn't pick up the VPN session at switchover

2024-05-29 Thread Stuart Henderson
On 2024-05-29, Vitaliy Makkoveev wrote: > On Wed, May 29, 2024 at 12:48:41PM +0200, Radek wrote: >> Thank you, that explains everything. >> Does wireguard support replication? Will it work properly in my CARP setup? >> > > No for both questions. However, wireguard allows to create complicated >

Re: Configure User-Agent is relayd HTTP Check ?

2024-05-29 Thread Kirill A . Korinsky
On Wed, 29 May 2024 12:19:15 +0100, Joel Carnat wrote: > > Is there a way to specify a User-Agent value for the check http or shall I > rather tell relayd to validate on "code 418"? here two possible way to overstep it. 1. Use `check script /some/script` which uses curl, wget, ftp or any other

Re: OpenBSD bgpd / rad "Permission denied" messages ?

2024-05-29 Thread Willy Manga
Hi, On 28/05/2024 20:28, Rachel Roch wrote: Hi I'm struggling to understand what is going on here. I have an Openbsd 7.2 box which has been working beautifully for about 3 years. Now it seemingly suddenly refuses to do anything involving the outside world, posting weird messages such as th

Re: httpd & pixelfed

2024-05-29 Thread Kirill A . Korinsky
Greetings, On Wed, 29 May 2024 00:01:07 +0100, Am Jam wrote: > > For posterity's sake, my working /etc/httpd.conf is below: > Maybe it is worth making a port for pixelfed to allow others to install it as easily as pkg_add pixelfed with some polish documented in the description? -- wbr, Kirill

Re: [7.5/amd64] ipsec + npppd + sasyncd + carp - doesn't pick up the VPN session at switchover

2024-05-29 Thread Vitaliy Makkoveev
On Wed, May 29, 2024 at 12:48:41PM +0200, Radek wrote: > Thank you, that explains everything. > Does wireguard support replication? Will it work properly in my CARP setup? > No for both questions. However, wireguard allows to create complicated connections where one wg(4) interface could have mu

Configure User-Agent is relayd HTTP Check ?

2024-05-29 Thread Joel Carnat
Hi, Some web applications don’t like when relayd connects to them, for health-checks, without providing a User-Agent HTTP header. They return an HTTP/418. So something like relay "ipv4" { listen on www.example.com port 443 tls protocol "https" forward to port 8080 check

Re: [7.5/amd64] ipsec + npppd + sasyncd + carp - doesn't pick up the VPN session at switchover

2024-05-29 Thread Radek
Thank you, that explains everything. Does wireguard support replication? Will it work properly in my CARP setup? Radek On Mon, 27 May 2024 21:00:40 +0300 Vitaliy Makkoveev wrote: > npppd does not support replication > > > On 27 May 2024, at 19:58, Radek wrote: > > > > Hello, > > I have two

Re: Sudden reboot every 5-10 minutes on latest snapshot

2024-05-29 Thread Ali Farzanrad
Ali Farzanrad wrote: > Thomas Frohwein wrote: > > On Sat, May 25, 2024 at 12:06:39PM +, Ali Farzanrad wrote: > > > Ali Farzanrad wrote: > > > > Alexandre Ratchov wrote: > > > > > On Fri, May 24, 2024 at 09:04:29PM +, Ali Farzanrad wrote: > > > > > > Alexandre Ratchov wrote: > > > > > >

Re: Sudden reboot every 5-10 minutes on latest snapshot

2024-05-29 Thread Ali Farzanrad
Thomas Frohwein wrote: > On Sat, May 25, 2024 at 12:06:39PM +, Ali Farzanrad wrote: > > Ali Farzanrad wrote: > > > Alexandre Ratchov wrote: > > > > On Fri, May 24, 2024 at 09:04:29PM +, Ali Farzanrad wrote: > > > > > Alexandre Ratchov wrote: > > > > > > On Fri, May 24, 2024 at 04:30:52P

Re: x64

2024-05-29 Thread Philip Guenther
On Wednesday, May 29, 2024, Gustavo Rios wrote: > Dear OpenBSD-Misc. > > i have installed obsd 7.5 amd64. I wrote a small function and apparently, > obsd is not generating x64 bit code. I am very confused by the output os > file and nm program on my anci c code. > > Here you have them: > > etosha

Re: x64

2024-05-29 Thread Stuart Henderson
On 2024-05-29, Gustavo Rios wrote: > i have installed obsd 7.5 amd64. I wrote a small function and apparently, > obsd is not generating x64 bit code. I am very confused by the output os > file and nm program on my anci c code. > > Here you have them: > > etosha# file xdr_vopq.o > xdr_vopq.o: ELF 6

x64

2024-05-29 Thread Gustavo Rios
Dear OpenBSD-Misc. i have installed obsd 7.5 amd64. I wrote a small function and apparently, obsd is not generating x64 bit code. I am very confused by the output os file and nm program on my anci c code. Here you have them: etosha# file xdr_vopq.o xdr_vopq.o: ELF 64-bit LSB relocatable, x86-64,