Re: 6.9 on VMware Workstation networking issues

2021-05-12 Thread Moritz Grimm
. $ doas sysupgrade I am using ESXi 6.7 and VMware Fusion 12.1.1 and em0 both environment, and network is working fine both environment. Isn't it a VMware Workstation problem? Can you try VirtualBox? -- ASOU Masato From: Moritz Grimm Date: Wed, 12 May 2021 00:32:42 +0200 Hi, Networking has become

6.9 on VMware Workstation networking issues

2021-05-11 Thread Moritz Grimm
Hi, Networking has become unusable in all of my virtual installs of 6.9 on VMware Workstation after an (otherwise uneventful) sysupgrade from 6.8 to 6.9. They've been working for years and I've upgraded them several times without any issues so far. netstat -ni shows a huge number of Ofail

Re: Updating past 5.4-current flag day w/ SSH only (amd64, maybe others)

2013-08-20 Thread Moritz Grimm
Hi Paul, Good feedback, thanks. | # cp -p bsd.mp /bsd cp -p bsd.rd /bsd.rd sync So don't copy bsd.rd when copying bsd.mp exited non 0 ? I very much expect that to work, so I'd rather have it stop in case of error. Personal preference, I guess. | d) Destroy the system for good: |

Updating past 5.4-current flag day w/ SSH only (amd64, maybe others)

2013-08-19 Thread Moritz Grimm
Hi, This is an FYI on how to move past flag day with SSH access only. I used this process on my local workstation first, then verified it on a VM actually using SSH only (both amd64). I'll do it again when updating a bunch of important boxes to 5.5 in 2014, so this is also for the archives in

Re: bsd cloud

2012-11-27 Thread Moritz Grimm
i have seen, some minutes ago, a message about cloud with BSD! I have seen announcements on cloud computing every where. What is the difference between a BSD cloud and a linux cloud ? A windows cloud and a linux cloud ? Isn't all that the new buzz word in the market ? It's bullshit

Re: OpenSSL handling intermediate certificates

2012-08-09 Thread Moritz Grimm
Moved from tech@ to misc@ ... On 08/09/12 06:27, Justin N. Lindberg wrote: I do believe this would allow me as a client to validate certs signed by the intermediate certs with no problem, and in fact I seem to recall actually doing the same thing before with self-signed certs for my own use,

Re: IPv6 woes: gateway on different subnet

2011-03-14 Thread Moritz Grimm
Hi Todd, Have you tried ping6 -n ff02::2%re0 ? Does anyone respond? Try using the respond(ers) as your IPv6 default gateway. Link local is best for IPv6 gateways for various reasons, if your upstream isn't picky (unlike he.net tunnels, for example). Awesome, this almost works! :-) When

Re: IPv6 woes: gateway on different subnet

2011-03-14 Thread Moritz Grimm
Hi Gilles, I have a server at hetzner too, after battling for a while I gave up and resorted to a hack - setting up your interface to have the same netmask as the gateway. Dirty, but works.. OK then, good to know that this also works. Thanks. I suppose I'll resort to that, too, if no

Re: IPv6 woes: gateway on different subnet

2011-03-14 Thread Moritz Grimm
Hi Lukas, # HIER ist der Pudel begraben ;-) You need a local IP in the subnet # of the gateway. inet6 alias 2a01:4f8:120:70c0::2 59 Gilles' solution of using (in your case) inet6 alias 2a01:4f8:120:70c1::1 59 instead of inet6 alias 2a01:4f8:120:70c1::1 64 has less potential for mayhem

IPv6 woes: gateway on different subnet

2011-03-13 Thread Moritz Grimm
Hi, after a couple of days of running into dead ends, I would appreciate some help. To summarize: For more than 3 years I'm successfully running OpenBSD (it's now at OPENBSD_4_9/i386, running GENERIC.MP) at the German hoster Hetzner as my expensive little plaything. They offer native IPv6 for

Re: IPv6 woes: gateway on different subnet

2011-03-13 Thread Moritz Grimm
Additional information I forgot previous writeup: at some point in the current setup, the kernel complains. I have one additional line in my dmesg nd6_rtrequest: bad gateway value: re0 Googling this didn't steer me in the right direction. It's also the only error message I'm getting here.

Re: IPv6 woes: gateway on different subnet

2011-03-13 Thread Moritz Grimm
Hi, Have you tried pinging the local interface first? Does ping ::1 works? Then does ping fe80:xxx (replace by output of your interface) works? etc... Ping6ing those two works. The IPv6 network is supposed to be 2a01:4f8:110:4363::/64, the gateway is 2a01:4f8:110:4360::1/59. So again

Re: Skype on OpenBSD 4.1 using Fedora RPM

2007-09-21 Thread Moritz Grimm
Siju George wrote: Call Failed : Problem with audio playback It is unlikely that Skype will ever work on OpenBSD for more than chatting, as it uses ALSA for audio output (same as Flash 9.) That's not something compat_linux(8) can handle, only OSS audio output is emulated. Moritz

Debugging an OpenBSD/vax-only resource leak

2007-01-15 Thread Moritz Grimm
Hi, a strange issue is affecting the system monitor I wrote. It's working fine everywhere (i386, sparc*, amd64, other OSes on various archs), except on OpenBSD/vax (-current snapshot as of Jan 5th, same with 4.0-release) running inside simh-vax. It leaks huge amounts of memory there, and

Re: difference between macros and tables in pf

2007-01-09 Thread Moritz Grimm
Artyom Goryainov wrote: Is any difference when to use macros or tables if there is no need in storing many adresses My suggestion is that you use whatever is easier for you to maintain. The break-even point between tables and macros was somewhere around 5-8 addresses, IIRC, where a small

Re: -current change affects video playback

2007-01-09 Thread Moritz Grimm
Christian Weisgerber wrote: This is weird. Some change to -current between ~Dec 22 and ~Jan 8 has caused video playback (mplayer playing DivX with the xv driver) on my Thinkpad X40 to become headache-inducingly jerky. mplayer itself is not aware of the problem, it doesn't report a low frame

Investigating struct if_data.ifi_link_state

2006-12-15 Thread Moritz Grimm
Hi, not long ago, duplex information was added to if_link_state. Today, I took a closer look and it looks like my sk0 at skc0 port A, address 00:11:95:ff:28:1d eephy0 at sk0 phy 0: Marvell 88E1011 Gigabit PHY, rev. 3 does not set it to 2, even though SIOCGIFMEDIA's output contains IFM_FDX

RFC on XMLSysInfo, and Thanks for the joyride!

2006-11-24 Thread Moritz Grimm
Hi, many moons ago, I mentioned the system monitor I wrote in some thread here on misc@, as it was possibly useful for someone then. I continued working on it, and it has come a long way since. Initially written on and for OpenBSD, it now also runs on FreeBSD, NetBSD, Linux, Solaris, and a

Re: Web access to sysctl hw.sensors

2006-08-17 Thread Moritz Grimm
Douglas Maus wrote: I'd like to be able to remotely observe my server's hardware health. I recently wrote something that might help achieve what you want. It's a bit of a poor-man's SNMP with a slightly different target audience. It's still alpha, but the documentation is complete, making it

Re: Icecast defaults

2006-07-19 Thread Moritz Grimm
Karel Kulhavy wrote: The icecast.xml.dist in Icecast is containing nonexisting directories - maybe it's intended for the user to fill in, maybe it's just forgotten. The way it is right now is intended, see /usr/local/share/doc/icecast/README.OpenBSD Yeah ... I'll fix the grammar in the

Re: latest sendmail patch

2006-06-20 Thread Moritz Grimm
Monah Baki wrote: I'm trying to apply the latest patch for sendmail and on my make, I get the following error: [...] OpenBSD 3.9-current (GENERIC) #685: Mon Apr 10 14:00:41 MDT 2006 Something is quite weird with your system. Try to run either -current, -release+patches or -stable (the

Re: cruxports for OpenBSD

2006-06-17 Thread Moritz Grimm
Siju George wrote: there is a software called foo suppose 3.9 installs foo.1.1.1 if you use ports. now a few security holes are found in foo.1.1.1 So the foo developers release foo.1.1.2 And the foo developers *strongly encourage* everybody running foo.1.1.1 to upgrade to foo.1.1.2 as soon

Bad RAM (?) and freezes

2006-04-22 Thread Moritz Grimm
Hi, my assumption is seriously busted RAM: Apr 22 12:45:02 phoenix /bsd: Data modified on freelist: word 0 of object 0xd1429030 size 0x10 previous type packet tags (invalid addr 0xd14a7350) Apr 22 12:45:02 phoenix /bsd: Data modified on freelist: word 3 of object 0xd1429030 size 0x10

Re: Bad RAM (?) and freezes

2006-04-22 Thread Moritz Grimm
Stuart Henderson wrote: You missed the dmesg.. Sorry. Here it is, though I don't believe it really makes a difference. The messages come from the kernel, 3.9-current (GENERIC), though they do not end up in the dmesg buffer like other blue kernel messages. The logs come from

Re: pf blocking nets in a way like *.google.com ?

2006-04-21 Thread Moritz Grimm
Lars Hansson wrote: Why isn't it feasible to use Googles allocated netblock (216.239.32.0/19)? Because there's nothing that says that every *.google.com site has to be within a block allocated to Google. Duh. The obvious solution is to have pf make a DNS lookup on each and every packet

Re: Sendmail security problem

2006-03-25 Thread Moritz Grimm
Zoong PHAM wrote: Do you mind to share the instruction of how to replace OpenBSD's sendmail with sendmail.org's 8.13.6? Just forget about that administration nightmare and go either -stable or -current. Not sure whether this warrants and errata entry (too much hype for my taste), but if it

Going nuts with wireless (ath(4) in this case)

2006-03-22 Thread Moritz Grimm
Hello, today, I wasted tons of money (from my perspective) ... First, I bought a D-Link DWL-G650. Turns out it was revision C with an AR5213 on it ... the driver complained about the RF radio not being supported. After lots of whining in the store, I got to replace it with a Netgear WG511T.

Re: web FAQ 15 correction?

2006-02-16 Thread Moritz Grimm
Will H. Backman wrote: Possible correction? http://openbsd.org/faq/faq15.html#Intro Invoking pkg_add(1) with the -u flag and no package name will just examine all installed packages for updated versions. When a package has dependencies, they are also examined for updates. pkg_add -u now also

Re: Snapshot and network connections trouble

2006-01-30 Thread Moritz Grimm
Bjvrn Ketelaars wrote: Last week (January 24, 2006) I updated our gateway to snapshot (i386). Everything seems to work fine except that users are complaining about internet-connections being dropped. The main complaint is that it is possible to use the internet but it is not possible to

Re: patch management on larger install bases

2006-01-09 Thread Moritz Grimm
Russell Fulton wrote: I am just starting to upgrade all my obsd boxes to 3.8. I have a copy of the official CDs -- I know the the ISOs are copyright but is there a way of burning an updated set so I don't have to patch each system individually? Alternately, with the kernel I'm guessing I can

Re: How Do I Get snprintf(3) to Return -1?

2006-01-05 Thread Moritz Grimm
Theo de Raadt wrote: I'm having trouble making snprintf return -1. I've tried stuff like: len = snprintf(str, 0, %.-Z\n, 9); printf(%d, len); but that just prints `2'. Does snprintf ever return -1? The new snprintf() returns -1 on ``output or encoding error'', as was

Re: Greylisting google's gmail servers

2005-12-23 Thread Moritz Grimm
Joseph C. Bender wrote: Instead, I suggest to use a ``no rdr'' line after rdr'ing those in the blacklists to spamd. Actually, yes, because it makes your filter rulesets easier to parse visually, but you want the no rdr *first*. This is the configuration that we are using. Uh well, to

Re: C Compiler cannot create executable

2005-12-22 Thread Moritz Grimm
Reza Muhammad wrote: C Compiler cannot create executable ? what does it mean ? It can mean a lot of things, and since this looks like a message from a configure script, it might be the same issue that happened to me once. Check your environment variables -- for example, a

Re: Greylisting google's gmail servers

2005-12-22 Thread Moritz Grimm
Nick Ryan wrote: We have a problem getting mail from gmail through spamd. Google's gmail public mail service use a large number of smtp servers. The first time In addition to that, they also appear to be retrying either too fast or too slow ... *sigh* rdr pass on $EXT_IF inet proto tcp

Re: 3.8 pf.conf question

2005-12-04 Thread Moritz Grimm
eric wrote: On Sun, 2005-12-04 at 11:39:01 -0800, Rodney Hopkins proclaimed... I was looking at the pf.conf included with 3.8, and with the addition of the following line: set skip on { lo } doesn't the lo part of the following line become redundant: antispoof quick for { lo $int_if } It

Re: ftp-proxy upgrade instructions

2005-11-17 Thread Moritz Grimm
Camiel Dobbelaar wrote: Using the parameter ``-q (q_med, q_pri)'' does not result in any error Your testing is correct. ftp-proxy does not understand the queue() syntax like pfctl does, so only one queue name for now. I understand it now ... the literal (q_med, p_pri) is not the same as

Re: ftp-proxy upgrade instructions

2005-11-16 Thread Moritz Grimm
(Moved from tech@ to misc@) Camiel Dobbelaar wrote: ftp-proxy in -current has been replaced with a new one that was previously called pftpx. Very nice, thanks! Works as expected and easier to use than the old one. I have one issue, though, which I cannot seem be able to figure out on my

Re: ftp-proxy upgrade instructions

2005-11-16 Thread Moritz Grimm
Moritz Grimm wrote: Using the parameter ``-q (q_med, q_pri)'' does not result in any error message, however, I have no proof whether this works or not. Actually, [...] Hm, and while I'm at it ... how can things like these be properly tested and debugged in the first place? Other than making

Re: timekeeping on Soekris net4801 w/ ntpd. 3.8

2005-11-14 Thread Moritz Grimm
J Moore wrote: I just installed 3.8 on a Soekris net4801 that's been laying around for a while (unused, unpowered). I noticed after install that time was off by like 5 months, so I set it to within a few minutes of current time/date from the wall clock. I've been checking the logs, and this

Re: timekeeping on Soekris net4801 w/ ntpd. 3.8

2005-11-14 Thread Moritz Grimm
Alexander Hall wrote: You might be interested in the -s switch of ntpd, which is set by default by rc(8). Not any longer. It was removed again to not tempt people to interrupt the booting process via CTRL+C in case it hangs for the one or other reason. It's easy to add back to ntpd_flags in

Re: OpenCVS Questions

2005-11-04 Thread Moritz Grimm
J.C. Roberts wrote: I was looking to learn more about OpenCVS, in particular, reading the While OpenCVS isn't ready, yet, reading the contents of the cvs-guide package (located in books/cvs-guide in the ports tree) is very educational. OpenCVS will probably work in similar ways (I haven't

Re: what am I missing? -sparc64

2005-11-01 Thread Moritz Grimm
John Brahy wrote: OpenBSD is only available via the CD, you have to buy it. That is what Liar. Buying it helps the project, but it is certainly not a requirement. Moritz

Re: Migration to PF - some questions

2005-10-01 Thread Moritz Grimm
Travis H. wrote: Yeah, I neglected stateful matching. I should have said that every packet that has to run the gauntlet of rules, has to run all of them. Not necessarily. Search for pf and skip-steps, something that isn't documented much inside OpenBSD, because it is always on and being

Re: customizing /etc/daily.local

2005-09-21 Thread Moritz Grimm
frantisek holop wrote: 30 1 * * * /bin/sh /etc/daily 21 /var/log/daily .out my problem is, that pfctl's output goes to the terminal and not the log file... If you want both stdout and stderr in /var/log/daily.out, the line needs to read ... /bin/sh /etc/daily

Re: FFS File Recovery

2005-09-15 Thread Moritz Grimm
Leandro Melo de Sales wrote: I deleted an important file of mine and I really need to recover it, how to do this? I'm using openbsd 3.7 and FFS file system. Shut down the computer in question immediately, take out the harddisk, put it in a separate computer(*), dd the entire disk and then

Re: Lifecycle question

2005-09-06 Thread Moritz Grimm
Stephan A. Rickauer wrote: Nick Holland schrieb: There are a lot of measures to how the upgrade process works out. Here are SOME: 1) Frequency (i.e., how often do you need to do upgrades) 2) Difficulty (how much human work is involved) 3) Ugency (when an upgrade is needed, how important

Re: Lifecycle question

2005-09-05 Thread Moritz Grimm
Stephan A. Rickauer wrote: The question is how you OpenBSD guys handle the upgrade issue. From the website I learned that -STABLE is maintained for only one year (= two releases). Given that upgrading by skipping one release is not recommended, does that mean one needs to upgrade the entire OS

Re: smstools compile problem

2005-09-03 Thread Moritz Grimm
[EMAIL PROTECTED] wrote: Makefile, line 19: Missing dependency operator Makefile, line 21: Need an operator Makefile, line 23: Need an operator Try gmake. Moritz

Re: recover directory!!!

2005-08-29 Thread Moritz Grimm
Joco Salvatti wrote: Let's suppose I deleted a directory, but I didn't meant to do that, for example, /usr/bin. Is there any way to recover the contents of this directory? Is there any tool or technique that I could use to recover my lost data? Yeah, it's restore from backup. Other than that,

Re: Where to report package bugs?

2005-08-29 Thread Moritz Grimm
Will H. Backman wrote: Where do we report package bugs? Each package has a maintainer that can be contacted (find out with ``pkg_info package''.) In case the maintainer cannot be reached for some reason, the ports@ mailing list is the next instance to turn to. Some packages tell you to go

extracting new login.conf from /usr/src/etc in -current

2005-08-17 Thread Moritz Grimm
Hello, since the switch to generate login.conf, things became quite a bit less comfortable for those following -current manually... well, at least for me. Since I stick to defaults whenever possible, /etc updates used to be quite hassle-free -- I'd simply copy over the updated file and be

Re: extracting new login.conf from /usr/src/etc in -current

2005-08-17 Thread Moritz Grimm
Todd C. Miller wrote: Is it really so difficult to run mklogin.conf? Actually, it isn't... Sorry, I managed to actively ignore mklogin.conf somehow. Thanks for the pointer. Moritz

Re: Text editor

2005-08-07 Thread Moritz Grimm
Otto Moerbeek wrote: On Sun, 7 Aug 2005, imEnsion wrote: I'm surprised everyone keeps recommending using vi and vim, yet no one has given a pointer on how to learn it. Sure, an OReilly book may come An Introduction to Display Editing with Vi, /usr/share/doc/usd/12.vi/. This document is the

Re: suggested /etc/skel/ modifications

2005-07-28 Thread Moritz Grimm
Mh, I just deleted some text I wrote to 1) and 2), because most if it was already said. It boils down to personal/administrational preference and/or policy, the current defaults are just fine and logical and trivial to change. Dave Feustel wrote: Also modify adduser so that the home

Re: suggested /etc/skel/ modifications

2005-07-28 Thread Moritz Grimm
Jonathan Schleifer wrote: This kind of paranoia adds nothing to security (~/.ssh and others that need it are already set to restrictive permissions), and there is no privacy from root no matter what. The rest is, again, personal preference and/or something about local policies. Ever heart of

Re: suggested /etc/skel/ modifications

2005-07-28 Thread Moritz Grimm
Dave Feustel wrote: And there are also still numerous ways of breaking OpenBSD inspite of sane defaults and exploit mitigation techniques in place. Is there any way I can tell whether my system has been broken as you describe? This really depends ... I can't tell specifics. I mentioned this

Re: suggested /etc/skel/ modifications

2005-07-28 Thread Moritz Grimm
[EMAIL PROTECTED] wrote: Ever heart of a multiuser system where one user shouldn't be able to acces the files of another user? Not all users are thinking about this issue and many forget to change the modes for confidential files. IMO, But keeping confidential files on true multiuser systems

Re: '.' in username

2005-07-20 Thread Moritz Grimm
Thanos Tsouanas wrote: I just found out that chsh complains if a username has a '.' in it: % sudo chsh foo.bar [ ... ] chsh: '.' is dangerous in a login name I'm sure there's a reason (why? regexps involved?) but I think that since chsh complains, adduser should complain too. No? The

Re: Why timezone it is always incorrect??

2005-06-18 Thread Moritz Grimm
C. L. Martinez wrote: Is not possible to adjust clock under OpenBSD correctly??? I do not understand why cmos clock needs to leave at UTC. why? Do i need to recompile kernel with TIMEZONE option to correct this bug?? Is not possible to use sysctl tool to correct this??? Aside from me