Re: Startup script for Netbox: can't start with a user and can't stop

2024-07-25 Thread Mik J
Hello Stuart, Thank you for your answer. 1) >but you start as _netbox: >> daemon_user="_netbox" >that won't work, it needs root to change uid (to www). I finally chose to run it as _netbox and change this line daemon_flags="--name netbox --pid /var/run/netbox.pid --user=_netbox --group=_netbox -

Startup script for Netbox: can't start with a user and can't stop

2024-07-24 Thread Mik J
Hello, I'm trying to write a startup script for an application called netbox (it's an opensource IPAM). I created a user and a group # grep netbox /etc/group _netbox:*:9994: # grep netbox /etc/passwd _netbox:*:9994:9994::/home/netbox:/sbin/nologin And I have this script #!/bin/ksh _BASEDIR=/va

Re: tcpdump on openbsd

2024-07-06 Thread Mik J
48 AM MDT, Mik J wrote: >  Hello, > > I notice that tcpdump on openbsd differs from the linux version. > > Some options don't exist: > - G rotate_seconds > - W filecount > > Do you know why tcpdump on openbsd don't include these switch ? > > W

tcpdump on openbsd

2024-07-05 Thread Mik J
Hello, I notice that tcpdump on openbsd differs from the linux version. Some options don't exist: - G rotate_seconds - W filecount Do you know why tcpdump on openbsd don't include these switch ? Would it be possible to implement them on openbsd ? Regards

Re: how to fsck automatically at boot

2024-05-22 Thread Mik J
Hello Nick, Stuart, Kirill, Jan, Thank you for all your answers. Le mardi 21 mai 2024 à 14:31:13 UTC+2, Stuart Henderson a écrit : On 2024-05-21, Nick Holland wrote: > On 5/20/24 09:37, Jan Stary wrote: >> On May 20 13:22:26, mikyde...@yahoo.fr wrote: >>> Hello, >>> >>> I have two u

how to fsck automatically at boot

2024-05-20 Thread Mik J
Hello, I have two use cases and problems with fsck. 1) When my openbsd boots after an outage, the system asks me to fsck /, /usr, /var or /home manually. So I do fsck /dev/sd0a And then I'm asked questions and I usually answer F So my question is that I want this process to be done automaticall

Compilation fails for port ruby-passenger - Openbsd 7.5

2024-04-16 Thread Mik J
Hello, when I try to install ruby passenger from ports it fails. mkdir -p buildout/nginx_dynamic/module_libpassenger_common/AppTypeDetector c++ -o buildout/nginx_dynamic/module_libpassenger_common/AppTypeDetector/CBindings.o  -Isrc/cxx_supportlib -Isrc/cxx_supportlib/vendor-copy -Isrc/cxx_supp

Re: Script doesn't stop opensearch

2024-01-04 Thread Mik J
4 janvier 2024 à 14:36:05 UTC+1, Stuart Henderson a écrit : On 2024-01-03, Mik J wrote: > Hello, > > I don't understand how the startup/stop script works It uses the string from pexp (as it was when the daemon was _started_; changes to the rc script after startup are ignored)

Script doesn't stop opensearch

2024-01-03 Thread Mik J
Hello, I don't understand how the startup/stop script works # cat /etc/rc.d/opensearch #!/bin/ksh daemon="/usr/local/opensearch/bin/opensearch" daemon_flags="-d -p /var/run/opensearch/opensearch.pid" daemon_user="_opensearch" . /etc/rc.d/rc.subr pexp="$(/usr/local/bin/javaPathHelper -c opensea

Re: Logging daemon message in a specific file

2023-11-12 Thread Mik J
Hello Ze, Stuart, Thank you for your answers.Yes I did read the man page before sending my message but I understood "that further blocks would be evaluated cancelling !!prog" and therefore isakmpd and unbound would be logged in messages. At the end I didn't give a chance to this !*. Probably I'

Logging daemon message in a specific file

2023-11-11 Thread Mik J
Hello, I would like to log isakmpd and unbound messages in a specific file but I don't want them to be logged in messages or daemon. 1) With this first method, the messages are logged in their files but also in messages and I don't want them to be logged in messages: I find many queries and isak

rc script won't stop

2023-04-20 Thread Mik J
Openbsd 7.3 Hello, I'm trying to make a startup script for an application called netbox.I'm able to start it but it won't stop I tried thisrc_stop() { #   if [[ -f /var/run/netbox.pid ]]; then   kill `cat /var/run/netbox.pid`   rm /var/run/netbox.pid #   fi } as I have# c

Re: scp doesn't work properly when the file name begins with a dash h

2022-12-17 Thread Mik J
Hello, Thank you both for your answers. Le vendredi 16 décembre 2022 à 01:59:41 UTC+1, Geoff Steckel a écrit : On 12/15/22 18:59, Mik J wrote: > Hello, > > I have a file named like this > -hh-6CP0_3Xf9nreW45XSBGrstMsovnIX6tTe45Enk4 > > and when I do a scp i have

scp doesn't work properly when the file name begins with a dash h

2022-12-15 Thread Mik J
Hello, I have a file named like this -hh-6CP0_3Xf9nreW45XSBGrstMsovnIX6tTe45Enk4 and when I do a scp i have this output scp: unknown option -- h I feel like there's a limitation because "scp * destination" shouldn't output an error, * is considered as files not options What do you think about

Re: Opensearch can't start if memory is ore than 4g

2022-11-23 Thread Mik J
last message to disable it. My message should be in simple text. Thank you for your answers and helping solving this question. Regards Le mercredi 23 novembre 2022 à 18:55:33 UTC+1, Stuart Henderson a écrit : On 2022-11-23, Mik J wrote: >  Hello Stuart, Otto,Thank you for your answers.

Re: Opensearch can't start if memory is ore than 4g

2022-11-23 Thread Mik J
Hello Stuart, Otto,Thank you for your answers. Stuart, I ran this command and got this output# su -c opensearch root -c 'ulimit -a' time(cpu-seconds)    unlimited file(blocks) unlimited coredump(blocks) unlimited data(kbytes) 4194304 stack(kbytes)    8192 lockedmem(kbytes)

Re: Opensearch can't start if memory is ore than 4g

2022-11-22 Thread Mik J
:\ #   :datasize-max=infinity:\ #   :datasize-cur=8192M:\     :datasize=8192M:\     :openfiles=65536:\     :tc=daemon: Le mardi 22 novembre 2022 à 13:17:16 UTC+1, Stuart Henderson a écrit : On 2022-11-22, Mik J wrote: >  Hello Stuart, > Thank you for you

Re: Opensearch can't start if memory is ore than 4g

2022-11-22 Thread Mik J
UTC+1, Stuart Henderson a écrit : On 2022-11-22, Mik J wrote: > Hello, > Starting opensearch fails if memory is 4G or more.My VM has 12Gb memory > # sysctl -a... > hw.physmem=17161977856hw.usermem=17161961472 > > # vmstat >  procs    memory   page 

Opensearch can't start if memory is ore than 4g

2022-11-21 Thread Mik J
Hello, Starting opensearch fails if memory is 4G or more.My VM has 12Gb memory # sysctl -a... hw.physmem=17161977856hw.usermem=17161961472 # vmstat  procs    memory   page    disks    traps  cpu  r   s   avm fre  flt  re  pi  po  fr  sr sd0 cd0  int   sys   cs us sy

Re: Named: max open files (7030) is smaller than max sockets (21000)

2022-09-22 Thread Mik J
Thank you I understand now. Le jeudi 22 septembre 2022 à 15:04:03 UTC+2, Otto Moerbeek a écrit : kern.maxfiles needs to be increased to a value larger than the largest openfiles used.     -Otto On Thu, Sep 22, 2022 at 01:02:11PM +, Mik J wrote: >  Thank you Otto for y

Re: Named: max open files (7030) is smaller than max sockets (21000)

2022-09-22 Thread Mik J
écrit : kern.maxfiles is a system wide max. openfiles is per user. Increase system wide limnit by puttting kern.maxfiles= in /etc/sysctl.conf     -Otto On Thu, Sep 22, 2022 at 12:37:51PM +0000, Mik J wrote: > Hello, > When I restart ISC Bind I get this messagenamed[95122]: max open files (

Named: max open files (7030) is smaller than max sockets (21000)

2022-09-22 Thread Mik J
Hello, When I restart ISC Bind I get this messagenamed[95122]: max open files (7030) is smaller than max sockets (21000) I know that this 7030 comes from the kernel settings However, I thought that changing values in /etc/login.conf would help named:\     :openfiles=20009:\     :openfiles-

Re: smtpd

2022-09-21 Thread Mik J
Hello Todd, I didn't understand your previous answer.You're saying that the remote connection, google, is using a self signed certificate but at the end you say gmail has a real certificate. I had the same behavior when I wrote to a gmail address. Regards Le mercredi 8 juin 2022 à 17:29:32

Can't compile php from ports

2021-05-07 Thread Mik J
Hello, Does anyone knows why compiling php from ports systematically fails ? It's been since openbsd 6.8 that it acts this way /usr/ports/pobj/php-7.4.19/bin/install -c -m 644 /usr/ports/pobj/php-7.4.19/php-7.4.19/modules/opcache.so  /usr/ports/pobj/php-7.4.19/fake-amd64/usr/local/lib/php-7.4/mo

Can't compile ruby passenger ports 6.8

2020-12-26 Thread Mik J
Hello, It has been many releases that I systematically have a problem compiling ruby-passenger in the portsDo you know what could be the issue ? checking for rb_thread_call_without_gvl() in ruby/thread.h... yes creating Makefile cd 'buildout/ruby/ruby-2.6.6-x86_64-openbsd6.8/' && make compiling /

Can't compile /usr/ports/www/ruby-passenger

2020-12-20 Thread Mik J
Hello, It has been many releases that I systematically have a problem compiling ruby-passenger in the portsDo you know what could be the issue ? checking for rb_thread_call_without_gvl() in ruby/thread.h... yes creating Makefile cd 'buildout/ruby/ruby-2.6.6-x86_64-openbsd6.8/' && make compiling /

How to set up default permission and group

2020-01-18 Thread Mik J
Hello, I want one for one of my user this behavior.Each time he creates a file it needs to have permission/owner of rw-rw myuser www This user is executing a php script that creates a file and I want that file to be read/write access by the user wwwI don't want to touch to the php script. Wha

Re: dmesg for Riverbed Steelhead 250/550

2019-11-21 Thread Mik J
Hello, > The primary and AUX NICs work, the LAN0/0 and WAN0/0 ports do not, > likely because there's some GPIO magic required to switch back the > relays. It's strange because when the OS is switched off, the relays are closed (act as a wire). I would have thought at least, you could plug cables

Re: acme-client issue with domain w/ alternative name

2019-11-07 Thread Mik J
Hello, What this does mean ?> Just to follow up: Of my two problem domains, one was caused by pebkac I tried to force the renewal -F but have that error. Also I read that someone had a A record missing, I have a CNAME with NOERROR. It should also work with a valid CNAME. Regards Le mercred

Re: Dig on openbsd too old ?

2019-07-17 Thread Mik J
Thank you Otto for your quick answer. Le jeudi 18 juillet 2019 à 08:54:02 UTC+2, Otto Moerbeek a écrit : On Thu, Jul 18, 2019 at 06:41:12AM +, Mik J wrote: > Hello, > I'm using Openbsd 6.5 and have DiG 9.4.2-P2 provided with it.This version > seems to be old (fr

Dig on openbsd too old ?

2019-07-17 Thread Mik J
Hello, I'm using Openbsd 6.5 and have DiG 9.4.2-P2 provided with it.This version seems to be old (from 2009) but I couldn't find exactly when it dates. However new DNS records appeared in 2013 such as CAA in RFC 6844When I dig the CAA record dig returns NXDOMAIN insteadhttps://dns.google.com/que

Re: dhcpd on openbsd no class / if

2019-07-11 Thread Mik J
t classes seems not to work so I was wondering if there was a different syntax or if some features were not supported. Regards Le mercredi 10 juillet 2019 à 19:29:42 UTC+2, Stuart Henderson a écrit : On 2019-07-10, Mik J wrote: > Hello, > I'm wondering if the dhcpd provided by

dhcpd on openbsd no class / if

2019-07-10 Thread Mik J
Hello, I'm wondering if the dhcpd provided by openbsd is the same as the one from isc I don't understand why my dhcpd complains option  domain-name "mydomain.org";option  domain-name-servers 8.8.8.8; option  ntp-servers 18.18.16.54; option  time-offset 3600; subnet 100.64.1.0 netmask 255.255.255.

Re: man bgpd.conf + question

2019-06-30 Thread Mik J
Thank you for your answer Claudio Le samedi 29 juin 2019 à 19:56:41 UTC+2, Claudio Jeker a écrit : On Fri, Jun 28, 2019 at 10:52:01PM +, Mik J wrote: > Hello, > I have a syntax error with  announce none > group "spam-bgp" { >     remote-as   $spa

man bgpd.conf + question

2019-06-28 Thread Mik J
Hello, I have a syntax error with  announce none group "spam-bgp" {     remote-as   $spamASN     multihop 64     announce none I was told recently that everything is filtered by default from 6.4 and read on Internet that announce none is deprecated However man bgpd.conf (Openbsd 6.5) sti

Re: How to synchronise 2 spamd instances

2019-05-30 Thread Mik J
anche 26 mai 2019 à 22:49:25 UTC+2, Sean Kamath a écrit : On May 26, 2019, at 04:41, Mik J wrote: > > Hello, > > I'm coming back on this topic. I added the -K option > # /usr/libexec/spamd -v -s 5 -S 5 -w 1 -G5:24:2400 -l 127.0.0.1 -h > myhost.mydomain.org -y vmx

Re: How to synchronise 2 spamd instances

2019-05-26 Thread Mik J
:31 UTC+2, Rudy Baker a écrit : On Mon, Apr 22, 2019, 10:43 AM Thuban, wrote: > * Otto Moerbeek le [21-04-2019 12:49:07 +0200]: > > On Sun, Apr 21, 2019 at 09:53:52AM +, Mik J wrote: > > > > > Hello, > > > I read the man but it's not so clear to m

Re: Double nat with pf ?

2019-05-12 Thread Mik J
to MyOpenbsd and it worked perfectly. However I'd be interested to know what can be done with PF Regards Le jeudi 9 mai 2019 à 17:57:18 UTC+2, Chris Cappuccio a écrit : Mik J [mikyde...@yahoo.fr] wrote: > Hello, > Is it possible to nat both source and destination IP on the sa

Double nat with pf ?

2019-05-06 Thread Mik J
Hello, Is it possible to nat both source and destination IP on the same openbsd pf instance aka double nat ? If yes do someone has an example of it ? Thank you

Tcpdump on enc0 how to filter port 443

2019-05-05 Thread Mik J
Hello, Does anyone know how can I capture flows to port 443 on an enc0 interface # tcpdump -ni enc0tcpdump: listening on enc0, link-type ENC 12:29:52.626065 (authentic,confidential): SPI 0x63b38934: 192.168.2.1.18413 > 192.168.1.1.443: S 3266713948:3266713948(0) win 16384 (DF) (encap) But tcpd

OpenBSD 6.5

2019-04-24 Thread Mik J
Thank you for this new release and all of those who contributed.

Re: eBGP routes are not reannounced

2019-04-22 Thread Mik J
umber) > > TLDR version of the new  eBGP RFC is that unfiltered bgp will by > default, deny any announcements and only announce what is explicitly > allowed by filters added by the administrator of the BGP router... > > Check out Job@  & Claudio@ >  *NOG  videos on BGPD /

Re: eBGP routes are not reannounced

2019-04-22 Thread Mik J
ter... Check out Job@  & Claudio@ *NOG  videos on BGPD / OpenBGPD for more details (they are on youtube) I hope this helps Bon Chance :) On Mon, 22 Apr 2019 at 11:17, Mik J wrote: > > Hello, > > I'm trying to set up openbgpd. > > On site 2, I'm peering with us

eBGP routes are not reannounced

2019-04-22 Thread Mik J
Hello, I'm trying to set up openbgpd. On site 2, I'm peering with us.bgp-spamd.net and eu.bgp-spamd.net sucessfully. The problem is that these routes are not in the bgp table on site 3. The BGP peerings are up. >From site 3 I can ping 192.0.2.2/site 2. I sucessfully receive prefixes >announced

Re: How to synchronise 2 spamd instances

2019-04-22 Thread Mik J
Hello Otto, Thank you for your answer. I'm working on it right now. Regards Le dimanche 21 avril 2019 à 12:50:08 UTC+2, Otto Moerbeek a écrit : On Sun, Apr 21, 2019 at 09:53:52AM +0000, Mik J wrote: > Hello, > I read the man but it's not so clear to me > https://ma

How to synchronise 2 spamd instances

2019-04-21 Thread Mik J
Hello, I read the man but it's not so clear to me https://man.openbsd.org/spamd#SYNCHRONISATION a) I chose unicast synchronisation but I don't know which port should I open on the firewall ? Is it going to use the spamd-cfg service ? b) The synchronisation section mention a key and there's an opt

Re: Changing kern.nprocs and kern.nfiles

2018-11-16 Thread Mik J
k a écrit : On Fri, Nov 16, 2018 at 10:46:12AM +0000, Mik J wrote: >  Hello, > Thank you to both of you. > I had already changed openfiles-max=65536 in login.conf and > kern.maxproc=16384 in sysctl.conf. > Have a nice day But why?     -Otto > >    Le vendredi 16 nove

Re: Changing kern.nprocs and kern.nfiles

2018-11-16 Thread Mik J
: > On 11/16/18 10:24 AM, Mik J wrote: > > Hello, > > > > Does anyone know how to change these values ? > > > > # sysctl kern.nprocs=52 > > sysctl: kern.nprocs: Operation not permitted > > # sysctl kern.nfiles=575 > > sysctl: kern.nfiles: Operation

Changing kern.nprocs and kern.nfiles

2018-11-16 Thread Mik J
Hello, Does anyone know how to change these values ? # sysctl kern.nprocs=52 sysctl: kern.nprocs: Operation not permitted # sysctl kern.nfiles=575 sysctl: kern.nfiles: Operation not permitted Regards

Re: spamd and google smtp ips

2018-11-04 Thread Mik J
t send mails to more than 500 people within 24h Le dimanche 4 novembre 2018 à 23:49:47 UTC+1, Misc User a écrit : On 11/4/2018 2:25 PM, Mik J wrote: >  Hello Peter, > > Thank you for this article. > Do you know why, and particularly Microsoft, use very random IPs to se

Re: spamd and google smtp ips

2018-11-04 Thread Mik J
Hello Peter, Thank you for this article. Do you know why, and particularly Microsoft, use very random IPs to send mails. In that way, they make greylisting not as reliable as it should be. We could all use greylisting if google or microsoft would use the same 4 or 5 IPs to retry sending the mai

Problem installing port ruby24-passenger / nginx

2018-11-04 Thread Mik J
Hello, It's been a few releases that I noticed I can't install nginx from the ports. The problem is not nginx itself but the package ruby24-passenger-5.1.11p0 I make install in the nginx port directory, I get the crash messages below. mv: /usr/ports/pobj/passenger-5.1.11-ruby24/gem-tmp/.gem/ruby

equivalent to UserTasksMax in openbsd

2018-11-03 Thread Mik J
Hello, Does anyone know if there is an equivalent for UserTasksMax in openbsd ? UserTasksMax= - Sets the maximum number of OS tasks each user may run concurrently. This controls theTasksMax=setting of the per-user slice unit

Re: _writes_to_HOME directories in /

2018-10-18 Thread Mik J
Hello, Did you have a full partition at some moment ? I had the same, as far as I remember I had a partition full at some point. Regards Le jeudi 18 octobre 2018 à 19:55:49 UTC+2, schwack a écrit : Was prepping for 6.4 upgrade and noticed a bunch of *_writes_to_HOME directories in my

Re: Running your own mail server

2018-09-17 Thread Mik J
a écrit : On Mon, Sep 17, 2018 at 06:33:52PM +, Mik J wrote: > > Really it will take time, here are the components I installed for this to > work: opensmtp, dkimproxy, clamav, clamsmtp, nginx, roundcube, prosody, > dovecot, let's encrypt, bind > > I'm u

Re: Running your own mail server

2018-09-17 Thread Mik J
Hello, I started to use my own mail server two years ago, but a few years ago I tried it unsuccessfully. So yes it will take you some time to set it up with all options. Now for your needs I would advice you openbsd+opensmtpd, you don't especially need performance just a one box solution. The

Re: IPQoS values in sshd

2018-08-08 Thread Mik J
Hello Daren, Thank you for your answer, I didn't see it earlier today. This change in current makes sense to me. Regards Le mercredi 8 août 2018 à 06:07:10 UTC+2, Darren Tucker a écrit : On 8 August 2018 at 05:29, Mik J wrote: > Does anyone knows what means lowdelay and t

Re: IPQoS values in sshd

2018-08-08 Thread Mik J
Le mercredi 8 août 2018 à 11:31:39 UTC+2, Dahlberg, David a écrit : Am Dienstag, den 07.08.2018, 19:29 +0000 schrieb Mik J: > Does anyone knows what means lowdelay and thoughput for IPQoS > parameter ? Bits 3 and 4 of old IP TOS field. > To what DSCP correspond these words Y

IPQoS values in sshd

2018-08-07 Thread Mik J
Hello, Does anyone knows what means lowdelay and thoughput for IPQoS parameter ? To what DSCP correspond these words I did a capture when writing ls in my terminal and I see DSCP=cs0. I would have expected something else. Regards

Re: pkg_add with packages created by ports

2018-05-10 Thread Mik J
Thank you for your answers. I did a first test with exporting the variable and it worked fine. Have a nice week Le mercredi 9 mai 2018 à 16:17:01 UTC+2, Marc Espie a écrit : On Wed, May 09, 2018 at 01:08:49PM +, Mik J wrote: >  Thank you Martijn for this quick answer.So shoul

Re: pkg_add with packages created by ports

2018-05-09 Thread Mik J
Thank you Martijn for this quick answer.So should I do something likeexport TRUSTED_PKG_PATH=/usr/ports/packages/amd64/all/ Le mercredi 9 mai 2018 à 15:04:29 UTC+2, Martijn van Duren a écrit : On 05/09/18 15:00, Mik J wrote: > Hello, > > I probably miss something in what

pkg_add with packages created by ports

2018-05-09 Thread Mik J
Hello, I probably miss something in what I'm doing. I install packages through ports, for example I want to install php.Many other packages are also built but not installed (php-imap, php-curl...) So when I want to install this kind of packages I dopkg_add /usr/ports/packages/amd64/all/php-imap

Re: Check if fsck will be run on a partition

2018-04-02 Thread Mik J
#x27;s 0,1% fragmentation. >From what I understand in your answer is that I should search why I have this >0,1% fragmentation rather than something else.I don't know if this >fragmentation is expected. Regards Le lundi 2 avril 2018 à 14:08:45 UTC+2, Nick Holland a écrit :

Re: Check if fsck will be run on a partition

2018-04-01 Thread Mik J
Hello, Thank you for your answers@Christian: The command takes 1s, and seem to work as you said# dumpfs sd1c | grep clean cgrotor 64  fmod    0   ronly   0   clean   0 @Theo: The fsck is not superfast, it takes 20s I end with that message39256 files, 5904368 used, 10865841 free (1534

Check if fsck will be run on a partition

2018-04-01 Thread Mik J
Hello, I have a script that mounts a partition and it works well except when the partition needs to be fsck checked.How can I know if the partition needs to be checked by fsck, I'd like to test that.If the partition needs to be checked by fsck, I run fsck firstElse I mount the partition Happy ea

Re: Kernel panic with openbsd 6.2

2018-01-22 Thread Mik J
22 janvier 2018 à 10:35:47 UTC+1, Stuart Henderson a écrit : On 2018/01/22 00:22, Mik J wrote: > Le dimanche 21 janvier 2018 à 11:48:00 UTC+1, Stuart Henderson > a écrit : > On 2018-01-19, Mik J wrote: > > I had many kernel panic these past days. This is a 6.2 openbsd VM r

Re: Kernel panic with openbsd 6.2

2018-01-21 Thread Mik J
à 11:48:00 UTC+1, Stuart Henderson a écrit : On 2018-01-19, Mik J wrote: > I had many kernel panic these past days. This is a 6.2 openbsd VM running o= > n esxi 5.5 > > # grep "" /tmp/if_vmx.dis I've reported a lot of vmxnet3_getbuf panics, nobody seems interes

Re: Start 2 instances of ftp-proxy one for ftp one for reverse proxy

2018-01-18 Thread Mik J
xy_flags="-D7 -v -R 10.1.1.1 -p21 -b 3.1.1.1" However I can start it manually like this# /etc/rc.d/ftpreverseproxy start So this is not executed during the boot sequence. Thank you Le jeudi 18 janvier 2018 à 11:57:34 UTC+1, Mathieu BLANC a écrit : Le 17/01/2018 à 22

Start 2 instances of ftp-proxy one for ftp one for reverse proxy

2018-01-17 Thread Mik J
Hello, I'd like my firewall to start two instances one for ftp proxy and one for ftp proxy.So far I have in rc.confftpproxy_flags="-D7 -v -p 8021" I can run manually/usr/sbin/ftp-proxy -D7 -v -R 10.1.1.1 -p21 -b 3and the reverse proxy works But I would like these to instance to start automatical

Re: warn: smtpd: parent_forward_open

2018-01-12 Thread Mik J
rom source for any relay via smtp://127.0.0.1:10025 Le samedi 6 janvier 2018 à 17:00:55 UTC+1, Edgar Pettijohn a écrit : On Sat, Jan 06, 2018 at 02:40:00PM +, Mik J wrote: > Hello Edgar, > I just found that the path is related to the home directory of the virtual > us

Re: warn: smtpd: parent_forward_open

2018-01-06 Thread Mik J
home directory path specified in /etc/passwd although it's might not be specified in the smtpd.confIs it normal that the home directory of that user should be used ? Le samedi 6 janvier 2018 à 00:52:15 UTC+1, Edgar Pettijohn a écrit : On Fri, Jan 05, 2018 at 11:09:13PM +0000,

Should I enable APM on VMs ?

2018-01-02 Thread Mik J
Hello, I have multiple VMs running on ESXi.I would like to know if it's worth enabling the apm daemon on my VM in order to spare ressources of the ESXi Thank you

Re: Security report with mail permissions

2017-07-17 Thread Mik J
Thank you for your answer Ingo. I'll reconfigure my mailbox to use text only Le Dimanche 16 juillet 2017 18h45, Ingo Schwarze a écrit : Hi Mik, not quoting anything because your posting is too ill-formatted. Yours is a frequently answered question. The directory /var/mail/ is intended fo

Security report with mail permissions

2017-07-16 Thread Mik J
Hello, I'm storing my mailboxes in the following directory# ls -l /var/mail/ drwx--  11 _virtmail  _virtmail 512 Jun 28 19:37 _virtmail And it has subdirectories per domain# ls -l /var/mail/_virtmail/ drwx--  4 _virtmail  _virtmail  512 May  6 12:16 domain1.org The problem is that th

Re: smtpd doesn't start

2017-05-26 Thread Mik J
Hello,I had the same problem recently.Please check the rights on the file smtpd.conf and if necessary chmod 600 smtpd.conf Le Vendredi 26 mai 2017 15h08, Ted Unangst a écrit : Choose a display name wrote: > >As always, you can post your smtpd.config, dmesg and any errors > >you're rec

Re: Spamtrap doesn't work for me

2017-05-19 Thread Mik J
, Boudewijn Dijkstra a écrit : Op Thu, 18 May 2017 10:23:40 +0200 schreef Peter N. M. Hansteen  : > On Thu, May 18, 2017 at 06:09:19AM +, Mik J wrote: >> I was reading the man spamd >> http://man.openbsd.org/spamd >> >> Which was saying >> >> "W

Re: Spamtrap doesn't work for me

2017-05-18 Thread Mik J
ss, it is blacklisted for 24 hours by adding the host to the spamd blacklist . Spamtrap addresses are added to the /var/db/spamd database with the following spamdb(8) command:" So I'm expecting a spamd-greytrap table Le Mercredi 17 mai 2017 19h10, Peter N. M. Hansteen a écrit : On 0

Re: Spamtrap doesn't work for me

2017-05-17 Thread Mik J
spamd-greytrap -T show Regards Le Mercredi 17 mai 2017 17h00, Peter N. M. Hansteen a écrit : On 05/17/17 16:51, Boudewijn Dijkstra wrote: > Op Wed, 17 May 2017 13:55:58 +0200 schreef Mik J : >> Hello, >> I'm trying to make spamtrap to work >> I added a spamt

Spamtrap doesn't work for me

2017-05-17 Thread Mik J
Hello, I'm trying to make spamtrap to work I added a spamtrap address# spamdb | grep trap SPAMTRAP| I started spamd with these parametersspamd_flags="-v -s 5 -S 2 -w 1 -G5:12:2400 -l 127.0.0.1 -h mx.mydomain.org -n String" When I send an email to t...@mydomain.org, it's greylisted instead of bei

Re: Isakmpd and NAT-T

2017-03-16 Thread Mik J
They are using CISCO 6509 with IOS 12.2-33.SXH3a. Thanks by advance, Sebastien On Tue, Mar 14, 2017 at 12:46 AM, Mik J wrote: > Hello Sebastien, > I'm not sure there's something special to force nat-t, it's automatic. > The natted side has to initiate the flow to the non

Re: Isakmpd and NAT-T

2017-03-13 Thread Mik J
Hello Sebastien,I'm not sure there's something special to force nat-t, it's automatic.The natted side has to initiate the flow to the non natted side.If the two sides are natted then there should be a port forward to one of them.There should be a nat keepalive parameter as well. Le Lundi 13

Spamd question with Spamtrap

2017-03-13 Thread Mik J
Hello, Spamd has been really efficient in blocking spam. A few of them passed through once in a while but there's no discomfort. But, I'm not able to use spamtrap. #spamdb -T -a ""# spamdb | grep SPAMTRAP SPAMTRAP| But when I telnet port 25 and try to send a mail, a GREY entry is created, and af

Re: Monitoring relayd via SNMP

2017-03-13 Thread Mik J
llo, Thanks for the idea, but how are you triggering a script on polling ? BTW, I think that if snmp is not available I will stick to check_relayd wth NRPE. Cf. http://undeadly.org/cgi?action=article&sid=20110220204953 -- Cordialement, Pierre BARDOU De : Mik J [mailto:mikyde...@yahoo.fr] E

Re: Monitoring relayd via SNMP

2017-03-11 Thread Mik J
Hello Pierre,I don't use relayd but for some of my needs with snmp, I retrieve the statistics through a script that is executed everytime I poll a specific OID.It might be dirty, but does the job.Regards Le Mardi 7 mars 2017 16h08, BARDOU Pierre a écrit : I found nothing to implement the

Re: FTP behind PF

2017-01-15 Thread Mik J
: On Sat, Jan 14, 2017 at 11:23:22PM +, Mik J wrote: > Hmmm I don't know# pfctl -f /etc/pf.conf > /etc/pf.conf:95: unknown user _ftp-proxy > pfctl: Syntax error in config file: pf rules not loaded > > I would like to make sure that this rule would match only if it's

Re: FTP behind PF

2017-01-14 Thread Mik J
int_add to $ftp_internal_address Thank you Le Samedi 14 janvier 2017 14h40, Sebastien Marie a écrit : On Sat, Jan 14, 2017 at 12:11:54PM +0000, Mik J wrote: > Openbsd 6.0 > Hello, > I have a ftp server behind my PF firewall and I would like to be able to ftp in from the internet > It d

FTP behind PF

2017-01-14 Thread Mik J
Openbsd 6.0 Hello, I have a ftp server behind my PF firewall and I would like to be able to ftp in from the internet It doesn't work with# /usr/sbin/ftp-proxy -D7 -v -R @ftp_internal_address -p21 -b @external_address anchor "ftp-proxy/*" pass in quick on $ext_if inet proto tcp to $ext_add port 21

Re: How to make spamd more annoying ?

2016-12-13 Thread Mik J
atched send the mail to spamd configured with -b3) for other IPs send the mail to my mx Regards Le Mardi 13 décembre 2016 14h24, Craig Skinner a écrit : Hi Mik, On Mon, 12 Dec 2016 23:21:51 +0100 Peter Hessler wrote: > On 2016 Dec 12 (Mon) at 21:31:25 +0000 (+), Mik J wrote: >

Re: How to make spamd more annoying ?

2016-12-12 Thread Mik J
000 (+0000), Mik J wrote: :Hello, :I've been annoyed for months/years by a few marketing companies from which I regularly unsubriscribed (according to the law in my country they should have done it).A few days ago I decided to make spamd work on my pf machine. :And I trapped that spam company

How to make spamd more annoying ?

2016-12-12 Thread Mik J
Hello, I've been annoyed for months/years by a few marketing companies from which I regularly unsubriscribed (according to the law in my country they should have done it).A few days ago I decided to make spamd work on my pf machine. And I trapped that spam companyDec 12 19:25:55 openbsd spamd[996

IPSec flow not properly routed

2016-11-07 Thread Mik J
Openbsd: 6.0 Hello, I have an ipsec vpn set up but I don't understand why my packets are going out on the wrong interface. # ipsecctl -sa FLOWS: flow esp in from 192.168.8.0/24 to 10.2.89.224/27 peer remote.y.y.y srcid external.ip.x.x/32 dstid remote.y.y.y/32 type use flow esp out from 10.2.89

Allow FTP through Openbsd firewall

2016-10-27 Thread Mik J
Hello, I have FTP clients behind my Openbsd firewall and they want to access ftp sites on the internet I have read numerous documentations but haven't found the answer yet. * I start the ftp-proxy like this /usr/sbin/ftp-proxy -D7 -v * I have rules in my pf.conf anchor "ftp-proxy/*" pass in qu

Re: How to both redirect to console and screen

2016-10-19 Thread Mik J
rit : > > On Mon, Oct 17, 2016 at 11:34:02AM +0000, Mik J wrote: > >> Hello, >> It is possible to redirect the boot sequence to the console using >> # cat /etc/boot.conf >> set tty com0 >> But then there is no screen output. How is it possible to have bot

Re: How to both redirect to console and screen

2016-10-17 Thread Mik J
Hello, It is possible to redirect the boot sequence to the console using # cat /etc/boot.conf set tty com0 But then there is no screen output. How is it possible to have both of them ? Thank you

Re: Dovecot errors on startup

2016-07-30 Thread Mik J
.conf should appear Thanks Le Samedi 30 juillet 2016 21h19, Mik J a écrit : Hello Olivier, About your configuration, I don't understand why you use "mail_privileged_group = vmail" because it's only for mailbox not for MaildirThey say "Currently this is used only with

Re: Dovecot errors on startup

2016-07-30 Thread Mik J
special_use = \Sent   }   mailbox Trash {     special_use = \Trash   }   prefix = } passdb {   args = /etc/dovecot/dovecot.passwd   driver = passwd-file } protocols = imap ssl_ca = /etc/ssl/certs/CA_Root_and_Intermediate.crt ssl_cert = a écrit : On Sat, 30 Jul 2016 10:39:30 +000

Re: Dovecot errors on startup

2016-07-30 Thread Mik J
I was feeling the login.conf parameters were not taken into account. Do you know how my login.conf should look like if I run dovecot with the _vmail user ? Regards Le Samedi 30 juillet 2016 12h10, Olivier Burelli a écrit : On Sat, 30 Jul 2016 08:56:18 + (UTC) Mik J wrote: &g

Dovecot errors on startup

2016-07-30 Thread Mik J
Hello, I'm able to start dovecot manually as a root# dovecot But I can't using the startup script# /etc/rc.d/dovecot start I notice errorsJul 30 10:50:52 x dovecot: master: Dovecot v2.2.21 (5345f22) starting up for imap Jul 30 10:50:52 x dovecot: master: Error: service(imap-login): pipe() failed: T

Re: Install VMWare tools on Openbsd 5.9

2016-07-14 Thread Mik J
Hello,Thank you. You are right, it's working now.Thank you Le Jeudi 14 juillet 2016 14h38, trondd a écrit : On Thu, July 14, 2016 7:00 am, Mik J wrote: > Hello, > Does anyone know how to install the VMWare tools on Openbsd 5.9 ?I > understood that I will not install some

Install VMWare tools on Openbsd 5.9

2016-07-14 Thread Mik J
Hello, Does anyone know how to install the VMWare tools on Openbsd 5.9 ?I understood that I will not install some vmware program and rather use the vmt driver which is enabled by default in GENERIC.I can see it's loaded at bootup dmesg | grep vmt But what's next ?When I edit the VM parameters, E

  1   2   >