Re: Help with IPsec multiple transform policy

2016-04-16 Thread Sly Midnight
I got it to work exactly as you suggested using isakmpd.conf. It took me quite a bit of searching to find the correct sort of syntax for that file to achieve what I wanted but it now allows me to connect. But I've run into another issue that I cannot resolve myself. Once I connect from ANY

Re: Help with IPsec multiple transform policy

2016-04-15 Thread Sly Midnight
be missing? Why would it work, but only briefly? Sly On 04/03/2016 05:38 AM, Stuart Henderson wrote: >> On 2016-04-01, Sly Midnight <slymidni...@yahoo.com> wrote: >>> I am wondering is there a way to allow either via /etc/ipsec.conf or >>> /etc/isakmpd/isakmpd.policy to

Re: Help with IPsec multiple transform policy

2016-04-15 Thread Sly Midnight
be missing? Why would it work, but only briefly? Sly On 04/03/2016 05:38 AM, Stuart Henderson wrote: > On 2016-04-01, Sly Midnight <slymidni...@yahoo.com> wrote: >> I am wondering is there a way to allow either via /etc/ipsec.conf or >> /etc/isakmpd/isakmpd.policy to configur

Help with IPsec multiple transform configuration

2016-04-02 Thread Sly Midnight
Apologies if this was already sent, I am having difficulty with my email lately and this didn't look like it sent earlier. Good morning everyone, I am wondering is there a way to allow either via /etc/ipsec.conf or /etc/isakmpd/isakmpd.policy to configure a road warrior type of IPsec VPN access

Help with IPsec multiple transform configuration

2016-04-01 Thread Sly Midnight
Apologies if this was already sent, I am having difficulty with my email lately and this didn't look like it sent earlier. Good morning everyone, I am wondering is there a way to allow either via /etc/ipsec.conf or /etc/isakmpd/isakmpd.policy to configure a road warrior type of IPsec VPN access to

Help with IPsec multiple transform policy

2016-04-01 Thread Sly Midnight
Good morning everyone, I am wondering is there a way to allow either via /etc/ipsec.conf or /etc/isakmpd/isakmpd.policy to configure a road warrior type of IPsec VPN access to my router that accomodates multiple types of IPsec clients that regrettably have limitations in the auth/enc/DH groups

Re: L2TP/IPSec via npppd won't work with Android 6.0.1

2016-03-30 Thread Sly Midnight
On 03/30/2016 02:18 AM, YASUOKA Masahiko wrote: > On Tue, 29 Mar 2016 11:37:14 +0200 > Mattieu Baptiste <mattie...@gmail.com> wrote: >> On Tue, Mar 29, 2016 at 5:43 AM, Sly Midnight <slymidni...@yahoo.com> wrote: >>> I don't mean to bring up an old thread, but I

L2TP/IPSec via npppd won't work with Android 6.0.1

2016-03-28 Thread Sly Midnight
Hello, I don't mean to bring up an old thread, but I was wondering if anyone else was experiencing issues with OpenBSD 5.8 and Android 6.0.1 (preferably the version on the Nexus line of devices) connecting to ipsec/l2tp. I had this working late last year some time and hadn't used it in a few

Re: L2TP/IPSec via npppd won't work with Android 5.x

2016-03-25 Thread Sly Midnight
Hello, I don't mean to bring up an old thread, but I was wondering if anyone else was experiencing issues with OpenBSD 5.8 and Android 6.0.1 (preferably the version on the Nexus line of devices) connecting to ipsec/l2tp. I had this working late last year some time and hadn't used it in a few

rtadvd not picking up dynamic ranges automatically anymore

2015-11-09 Thread Sly Midnight
Good Morning. I am writing the misc@openbsd.org thread to see if anyone else with IPv6 experience on OpenBSD has noticed this behavior with the rtadvd daemon. I have been using OpenBSD as my firewall now for just under 4 years (prior to that I used FreeBSD). When I first started using it I used

Re: rtadvd not picking up dynamic ranges automatically anymore

2015-11-09 Thread Sly Midnight
Thanks Giancarlo, I appreciate the recommendation to use ifstated. I'd used it in the past years for something at a job I was working at that I cannot remember what it was now, but it worked good. I do however understand the importance of reporting any regression as soon as it is noticed, but I

Re: Making IPv6 NAT prefer privacy address

2015-09-23 Thread Sly Midnight
Giancarlo, Why are you unable to route your DHCPv6-PD? I ask because I have been able to use OpenBSD as a typical IPv4 NAT type of router as well as a pure IPv6 router (does use pf for firewalling the router and the PD subnet, but no NAT on IPv6) all for my home network LAN. I use a fair bit of

Re: 5.6, IPv6: is autoconf set by default?

2015-01-08 Thread Sly Midnight
I will need to test this on a separate install of OpenBSD on my LAN as I was just trying to get my one install that is used as my firewall/gateway and IPv6 router to the public Internet from my private LAN working again after the upgrade. And when I initially used autoconf as an ifconfig option

Re: 5.6, IPv6: is autoconf set by default?

2015-01-08 Thread Sly Midnight
I am replying to this as I too would like some clarification as to the difference between the two options {eui64|autoconf} for enabling the old IPv6 behavior. I typically read the man pages frequently and routinely and while sometimes they are lacking on linux, I have found the man pages for

Re: IPv6 nonfunctional after upgrade from 5.5 to 5.6

2014-11-04 Thread Sly Midnight
/2014 05:33 AM, David Dahlberg wrote: Am Montag, den 03.11.2014, 12:04 -0500 schrieb Sly Midnight: [Problems with inet6 in 5.6] 5.6 disables IPvN by default (i.e. unless you configure it). Please try to add inet6 eui64 to all hostname.if files or ifconfig $if inet6 eui64 to dynamically configured

IPv6 nonfunctional after upgrade from 5.5 to 5.6

2014-11-03 Thread Sly Midnight
Hello everyone. I am new to this list but I am in need of some help. I have been running OpenBSD since 4.6 as my firewall and gateway with much success (transitioned from FreeBSD) and it was working out great as a light weight and secure OS for my Internet router and gateway. One of the uses of

Re: IPv6 nonfunctional after upgrade from 5.5 to 5.6

2014-11-03 Thread Sly Midnight
vr0 Thanks! SlyM On 11/03/2014 02:42 PM, Reyk Floeter wrote: Hi, can you show us the contents of your hostname.* and mygate files? What are the specific configuration steps? Reyk Am 03.11.2014 um 18:04 schrieb Sly Midnight slymidni...@yahoo.com: Hello everyone. I am new to this list