no diffie-hellman params file when using dhe in smtpd/relayd?

hi, I noticed that when using diffie-hellman parameters with smtpd and relayd, there is no need to create a separate dhparam file. Given how long it takes to generate such file with openssl dhparam -out dh.pem 4096, I can't imagine the ephemeral keys to be generated on the fly. how does it work?

support new

0 C France P Bretagne T Rennes Z 35000 O Consultant I Solène Rapenne M sol...@lambda-solene.eu U https://www.lambda-solene.eu/ N OpenBSD/FreeBSD/Linux consulting, support, training and system administration. Software packaging.

Re: ffs undelete was: Re: single user question

Le 2019-05-17 22:47, Edgar Pettijohn a écrit : On May 17, 2019 3:14 PM, gwes wrote: On 5/17/19 2:34 PM, Nathan Hartman wrote: > On Fri, May 17, 2019 at 12:28 PM ropers wrote: > > > In the history of the (Berkeley) Fast File System, has there ever been > an attempt to implement DOS-like unde

Re: web hosting

Le 15 mai 2019 21:06, Gustavo Rios a écrit : > > I am in need to host my homepage and programs i have written. > Do have any suggestion on web hosting services that alllow ssh access too? > > Thanks a lot > > -- > Pag Bem Fácil Ltda > www.pagbemfacil.com.br > You can try some community sh

Re: OpenBSD site

Le 2018-10-27 21:06, ivp...@eml.cc a écrit : Knowing OpenBSD philosophy, you should probably NOT expect a CMS :). But you don't need to guess when you can check for yourself - all the sources are available for an anonymous CVS as described in [1]. You can easily have an up-to-date local copy on

Re: Pkg_add

Le 2018-09-16 03:33, Michael Ayres a écrit : Thanks to everyone who has replied in helping me. I have read up on the man pages and I understand what I need; it is: 1) I want to install some packages on OpenBSD 6.0 which I have operational on a Parallels VM on my precious MacBookPro High Sierra.

Re: DNS (UNBOUND) + PF ISSUE

Le 2018-08-29 12:41, NN a écrit : Hi, many thanks for your quick answer, I try to  use your PF rule, and got the same answer from my DNS:     ...     >> WARNING: recursion requested but not available     ... I need the DNS request RULE's for my PF Any ideas? BR deface On 08/29/18 12:34, Arn

Re: how to switch to a snapshot?

Le 2018-07-25 12:57, Rudolf Sykora a écrit : Hello, I'd perhaps like to switch to a recent snapshot. I read https://www.openbsd.org/faq/current.html but do not quite understand it. If I download the snapshot (ie bsd.rd), boot from it, choose Upgrade at the prompt, and upgrade any installed pack

Re: Boot problem after power failure in OpenBSD 6.2 and later versions

Le 2018-04-20 21:41, augusta bonaventura a écrit : Hi, I am installing on the hardware mentioned below in OpenBSD 6.2 and 6.3 versions. When the Login menu comes, I turn off power supply (only 1 time) for a power failure test. When the device reboots, it reboots itself when it comes to the "b

Re: Kakoune editor on openbsd

Le 2018-04-17 02:43, Patrick Marchand a écrit : On 04/16, Stuart Henderson wrote: > On 2018-04-16, Patrick Marchand wrote: > So trying again I looked closer at what the function was doing and how > it was implemented for freebsd and dragonflybsd. The function > tries to find the executable path

Re: minor too small - pkg_add

Le 2018-03-19 16:18, Patrick Marchand a écrit : Hello, I updated to the latest snapshot yesterday and when I run pkg_add -Dsnap -u a bunch of pkg will not upgrade because it cant find ssl.44.9 It does find 44.8 and 45 but not that specific version, last week I had a similar issue with libm. Now

Re: [Patch] remove xdm reference from X(7)

Le 2018-03-15 04:58, Anthony J. Bentley a écrit : Thanks, but X(7) comes from upstream. Typically we don't modify upstream manuals in Xenocara, as doing so would add more work to X updates. Improvements to OpenBSD-maintained docs like cwm(1) and xenodm(1) are welcome though. Manpages often do t

Re: The vim display issue on OpenBSD

Le 2018-03-09 08:19, Nan Xiao a écrit : Hi all, Greetings from me! I meet a weird issue: there is a file which contains only "1": # cat a 1 While use vim to open it, it displays "0". I find the number behind cursor will decrease 1. Does anyone bump into this issue? Thanks very much in advanc

Re: httpd howto redirect port 80 to 443 in vm

Le 2018-03-02 15:33, Matt M a écrit : Why not use a .htaccess redirect? https://www.sslshopper.com/apache-redirect-http-to-https.html .htaccess file is a feature of Apache web server while we are talking about httpd.

Re: DNS-01 challenge in acme-client

Le 2018-03-01 10:45, Consus a écrit : Hi, Let's Encrypt is going to support wildcard certificates soon enough, but only through DNS-01 challenge, but acme-client(1) does not support it. Have you guys considered implemeting DNS challenges? Maybe someone is already working on the implementation

Re: sudoedit for doas?

Le 2018-03-01 11:41, tomr a écrit : On 02/28/18 17:50, Hess THR wrote: Hello, hmm, I went through the relevant man pages: https://man.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/doas.1 https://man.openbsd.org/doas.conf.5 but I cannot find a sudoedit alternative for the "doas". Are there

Re: httpd howto redirect port 80 to 443 in vm

Le 2018-02-27 07:58, Mischa Peters a écrit : On 27 Feb 2018, at 05:04, niya wrote: hi using vmd in openbsd 6.2 and following http://thecyberrecce.net/2017/01/15/secure-webservers-with-openbsd-6-0-setting-up-httpd-mariadb-and-php/ i have setup openbsd running a webserver everything installed a

Re: Wondering if any of my hardware is working on -current

I'll get the dmesg and send it. Please take a look at sendbug(1) to make an useful bug report.

Re: thanks to solene, but moving away from zenlisp

Le 2018-02-06 11:56, mayur...@devio.us a écrit : have been informed by the developer of zenlisp that it's not going to be supported any further. thanks solene for you efforts. i think i'll let of the excuses and start (re)learning c89, and results will follow. :) Hello, no problem. If no one n

Re: wxallowed flag

Le 2018-01-26 12:52, mazocomp a écrit : On Fri, Jan 26, 2018 at 12:28:00PM +0100, Marc Espie wrote: On Fri, Jan 26, 2018 at 12:56:15PM +0200, mazocomp wrote: > Hi! > > Is this a really good idea to keep wxallowed flag on /usr/local by > default? Is this so scary that many poop software will brea

Re: Any typical pf.conf or sysctl settings to tweak/speedup NAT/networking stack throughput? (+ don't use USB dongles?)

Le 2017-12-14 05:30, ti...@openmailbox.org a écrit : Hi! Do you see any typical pf.conf or sysctl settings to tweak/speedup NAT/networking stack throughput? (On USB2 dongles, sigh. Current speed is quite OK actually, a client with good hardware would get up to 70mbps through the NAT. I was sti

Re: Image viewer alternative to eog

Le 2017-11-25 20:51, x9p a écrit : Hi, Is there a good/safe and light image viewer? Was used to eog, but it has too many "vfprintf %s NULL" in messages. gimp is too big and good for play with images, In need of smth fast. cheers. x9p Hello, I would recommend sxiv

Re: Is there an option switch to lower minimum DH strength in SSH client?

Je 2017-11-03 05:06, Jacob Leifman skribis: I was finally able to bring our OpenBSD based Network Management System up to the current OS release (it was a couple of years out of date) but this process broke access to a large number of older HP switches on our network. Thorough analysis of the p

Re: OT: Upload and Download to/from an OpenBSD host

Je 2017-10-30 20:23, Mihai Popescu skribis: Hi, I am trying to setup a solution on an OpenBSD computer, where i want to upload and then download large volume of data. I was using ftpd daemon to do this, but I wonder if there is another way to do this, regarding speed of transfer. Sometimes I wa

Re: Fail2ban alternative for OpenBSD

Je 2017-10-29 02:20, x9p skribis: Hi, Coming from the Linux world, I wonder if there is a better alternative to fail2ban, already being used in OpenBSD servers by the majority. cheers. x9p Hello, jca imported sshlockout from dragonflybsd. It's in security/sshlockout. It's dead simple, here

Re: nobreak powers down openbsd

Je 2017-10-23 15:40, Friedrich Locke skribis: Hi folks! I would like to have my openbsd server to be shutdown when my nobreak power becomes lower than 20% of its capacity; is that possible ? Any one with experience in this regard ? Thanks a lot.

Re: a pf question maybe asked a 1000 times

Je 2017-10-20 12:59, Markus Rosjat skribis: Hi there, I was wondering, after reading mr hansteens excelent book about pf and the man pages, if I got it all wrong :) so here is my example pf.conf ext_if="hvn0" set skip on lo block return# block stateless traffic block inet6 pass in on $e

Re: macppc netboot

Je 2017-10-18 23:11, Christian Weisgerber skribis: On 2017-10-18, Solène Rapenne wrote: Are you able to fetch /bsd.rd if you use tftp in command line ? How is this relevant? Netbooting is inherently machine-dependent. Firmware aside, there are also at least two OpenBSD bootloader flavors

Re: macppc netboot

P is working. I just don't think NFS is working. I'm able to mount the nfs share on another computer, so, i'm kind of out of ideas... On Wed, 2017-10-18 at 14:50 +0200, Solène Rapenne wrote: Are you able to fetch /bsd.rd if you use tftp in command line ?

Re: macppc netboot

Je 2017-10-18 00:47, Daniel Boyd skribis: I'm attempting to install onto a G4 Cube with a busted CD-ROM drive. I've never done network booting before, so I'm sure I'm just missing something. I set up NFS and TFTP on a linux box, copied ofwboot to the TFTP share and bsd.rd plus all the tgz files

Re: sftp chroot

Je 2017-06-14 13:02, Bryan Harris skribis: On Linux I have mounted another fs inside the user's home folder (it is mounted twice). I don't know if OpenBSD has that feature. This is not possible on OpenBSD, mount will tell "device is busy". On linux you should use mount --bind to bind a folde

Re: sftp chroot

Je 2017-06-14 10:33, Markus Rosjat skribis: Hi there, I want to build an sftp environment where the user is chrooted to his home dir. So far so good but then again the user might need access to a webserver resource like /var/www/htdocs/some_dir As far as I understand a symlink doesnt work in th

Re: Rsnapshot configuration - Data integrity

Je 2017-06-14 01:47, G skribis: Well as far as /var goes i decided to take a closer look because i am thinking running aide for system integrity check. So this my rsnapshot.conf Recently I've been investigating software for integrity check, you have choice : - sysutils/bitrot - a daily mt

Re: Can I use OpenBSD as a desktop system?

Je 2017-06-12 07:45, Rupert Gallagher skribis: On Mon, Jun 12, 2017 at 1:16 AM, Davor Balder wrote: xfce is available and you should be able to use mac-like shortcuts there. I think this relates to your chaoice of window manager/desktop environment. We have choices! Using xfce already, but

Re: Can I use OpenBSD as a desktop system?

typing startx isn't even needed if you enable xenodm at install Je 2017-06-10 00:00, Edgar Pettijohn skribis: As long as you can type startx at the command prompt, then yes. ⁣Sent from BlueMail ​ On Jun 9, 2017, 3:07 PM, at 3:07 PM, Johan Mellberg wrote: Yes. 2017-06-09 21:39 GMT+02:00 SOUL

Re: Domain redirections to Openbsd.org?

Je 2017-05-18 15:51, Wylie Bayes skribis: Well the IP resolves to the same IP as openbsd.org. Not sure how he's retaining all the link structure when clicking around, but yeah i didn't think it was normal, and figured it should be reported in some fashion. on openbsd.org links are relative,

Re: openup vs. syspatch vs. pkg_add -u ?

Je 2017-05-14 16:56, Adam Thompson skribis: Now that we’re in the wonderful world of syspatch(8) – which works well for me so far (thanks for the hard work, everyone!), I’m trying to figure out if there’s still any point to using m:tier’s openup tool. From what I can tell, running “syspatch ; pk

Re: list all system users, eg. _x11

Le 2017-05-06 20:27, Luke Small a écrit : Is there a way to determine all users on a system that the users command doesn't seem to show? like _x11 and _ntpd hello system users has an uid < 1000 you can retrieve them like by parsing /etc/passwd like this awk -F ':' '{ if($2 < 1000) { print $

Re: 6.1: /usr/local/bin/node: W^X binary outside wxallowed mountpoint

Le 2017-04-25 16:49, Maxim Bourmistrov a écrit : Hey, Any work around for this one? Mount with wxallowed not working. Br Hello, Could you give details ? When I type node on a fresh installed 6.1 I get the node shell, no error. Regards

Re: Encryption

Le 2017-03-22 17:28, Jan Betlach a écrit : Hi misc, planning to install -current on my Thinkpad T450s (SSD). I need to have several data directories encrypted, however would not mind whole-disk encryption. Which method would be more supported / recommended? Whole-disk encryption or creating a

Re: File Server with OpenBSD?

Le 2017-03-08 16:25, Raimo Niskanen a écrit : On Tue, Mar 07, 2017 at 05:55:08PM +0100, Solène Rapenne wrote: Le 2017-03-07 17:29, Roderick a écrit : For data integrity, you may use sysutils/bitrot to check for data integrity (bit rot). mtree(8) with -K sha1digest might be enough, and is in

Re: File Server with OpenBSD?

Le 2017-03-07 17:29, Roderick a écrit : Before I make a decision, I want to ask you for suggestions. I want to make a small file server, just to separate important files from my working system. Two disks as Raid 1. Files are to be read with NFS. Emphasis: (1) Data Integrity (not security :). (

Re: OpenBSD's HTTPD - I can't figure out how to disable the chroot

Le 2017-02-13 00:03, tec...@protonmail.com a écrit : Hello, I have a special use case for the HTTPD server, I would like to disable the chroot but can't seem to get it working correctly. Within httpd.conf, I have tried to set: chroot "/" ## Instead of default which is: /var/www root "/var/www

Re: Any network simulators to test openbgpd?

Le 2017-02-12 20:25, Karthik Veeragoni a écrit : Hi all, I'm looking for any freely available or commercial network simulators or emulators to test Openbgpd by using any of them. And I would also like to know on what other poplar platforms/operating systems, openbgpd is being used in the curr

Re: SSHowDowN

Le 2016-10-18 10:35, Peter Janos a écrit : shouldn't the default be "no" for the AllowTcpForwarding? Why is an insecure option "yes" by default? https://www.akamai.com/us/en/multimedia/documents/state-of-the-internet/sshowdown-exploitation-of-iot-devices-for-launching-mass-scale-attack-campaigns.

Re: What is the opinion of Theo de Raadt about translation tools?

Le 2016-10-13 20:16, SOUL_OF_ROOT 55 a écrit : PC-BSD still uses Pootle? https://forums.freebsd.org/threads/44595/ Pootle translates well or sometimes translates incorrect? Pootle translates better than Google Translator? I uses Google Translator, but if is true that Pootle translates better

Re: tfdpd doesn't deliver pxeboot file

Le 2016-09-28 12:45, Peer Janssen a écrit : TFTP pxeboot requests: 12:15:45.064076 192.168.0.81.2070 > alix.fritz.box.tftp: 24 RRQ "pxeboot" : 4500 0034 0002 1411 24ea c0a8 0051 E..4..$Q 0010: c0a8 002c 0816 0045 0020 f181 0001 7078 ...,...E. px 0020: 6562 6f6f 740

Re: tfdpd doesn't deliver pxeboot file

Le 2016-09-28 11:05, Peer Janssen a écrit : Am 28.09.2016 um 10:50 schrieb Solène Rapenne: Le 2016-09-28 10:21, Peer Janssen a écrit : The target system for an OpenBSD 6.0 install, an alix.2d13, is directly connected to an alix.3x box serving dhcp and tftp. alix.3x (Server): # tftp localhost

Re: tfdpd doesn't deliver pxeboot file

Le 2016-09-28 10:21, Peer Janssen a écrit : The target system for an OpenBSD 6.0 install, an alix.2d13, is directly connected to an alix.3x box serving dhcp and tftp. alix.3x (Server): # tftp localhost tftp> get pxeboot Received 81965 bytes in 0.1 seconds tftp> Hello, Can you try the LAN ip

Re: Logging/backup .ksh_history

Le 2016-08-08 08:39, johnw a écrit : Hi, I use /bin/ksh as a console/terminal shell program, I want to log/backup all command, run on console/terminal/ksh, Any idea how to do this? Thanks. Hello, you could try this tool https://github.com/a2o/snoopy, it seems to be exactly what you need. I

Re: T450s doesn't resume after suspend

Le 2016-08-05 10:10, Marc Peters a écrit : Hi, i have a T450s which doesn't resume after suspended. When i close the lid, the laptop suspends correctly but doesn't resume at all. Opening the lid or pressing the button doesn't bring it back. I have to reset it. An acpidump is available at htt

Re: resolv.conf with dhcp when upgrading with bsd.rd

Le 2016-08-01 14:57, j...@wxcvbn.org a écrit : Solène RAPENNE writes: Hello, Using -current with unbound as a local dns resolver. dhclient.conf is set to supersede the dhcp nameserver to use my unbound server /etc/dhclient.conf send host-name "solene"; supersede d

Re: resolv.conf with dhcp when upgrading with bsd.rd

Le 2016-08-03 22:11, Ossi Herrala a écrit : On Mon, Aug 01, 2016 at 02:14:27PM +0200, Solène RAPENNE wrote: When upgrading with bsd.rd, dhclient will use this dhclient.conf with unbound stopped, the system won't resolve names and won't download packages through http. How can I us

resolv.conf with dhcp when upgrading with bsd.rd

Hello, Using -current with unbound as a local dns resolver. dhclient.conf is set to supersede the dhcp nameserver to use my unbound server /etc/dhclient.conf send host-name "solene"; supersede domain-name-servers 127.0.0.1; When upgrading with bsd.rd, dhclient will use this dhclie

Re: httpd (+ relayd ?) URL redirection, anyone?

Le 2016-07-26 12:13, Miles Keaton a écrit : Sorry to bother the list with this, but still stumped after two days. Trying to switch from nginx to httpd, but there's just one thing left: Having the webserver pass some URLs to another port: # working nginx config: http { server { listen 8

rcs(1) and -I parameter

Hello, I am not familiar with rcs(1), from the man page I found parameter "-I Interactive mode." and rcs usage displays "usage: rcs [-IiLqTUV] [...]" When I type "rcs -I" I get rcs: unknown option -I Does the parameter -I really exists ?

Re: Installing NextCloud under OpenBSD 5.9

C. L. Martinez writes: > Hi all, > > I am trying to install NextCloud under an OpenBSD 5.9 host using OpenBSD's > httpd. But I am not sure that Nextcloud can work with OpenBSD's httpd. > > First of all, rewrite rules like these: > > Can be backported to OpenBSD's httpd? I am thinking to install

Compilation success only with clang++

Hello, I would like to make a port for the game bastet https://github.com/fph/bastet Actually, I encounter a problem when compiling the sources. On 5.9 amd64 it fails with g++/eg++ and compiles fine with clang++. I don't understand the failures. With g++ it seems assembly related and with

Re: Performance of Firefox and Chromium

Le 2016-04-30 14:23, Alan Corey a écrit : Re: Performance of Firefox and Chromium Several seconds? Oh my. Try 20 minutes or more on some of the most bloated sites, with lots of reloads and watching iftop to see when they're stuck like on my connection. But thanks for the tip on Noscript, I'm

Re: 5.9 discs in the wild. Europe/Germany

Received in France today ! Thanks you for all of this ! :)

Re: jabber client with conference history saving

Le 2016-04-17 21:42, Joseph Oficre a écrit : Hello, @misc. Can someone give me an advice about xmpp client on OpenBSD, Im using Psi for now, but it doesnt save messages history properly (errors only). So i want to try another one. Doesnt matter if console or gui, just with chatroom/private chat

Re: Need help to install OpenBSD 5.9 macppc via pxe

Try tcpdumping the connection and see why it thinks the file doesn't exist. It might be the / try does: boot enet:, ofwboot bsd.rd change the behaviour? hth Fred It boot correctly after changing the following line in dhcpd.conf option root-path "192.168.1.5:/usr/local/www/thttpd"; to op

Re: Need help to install OpenBSD 5.9 macppc via pxe

Le 2016-04-08 00:55, Fred a écrit : On 04/07/16 13:09, Solène Rapenne wrote: Hello, my dhcpd.conf (isc-dhcpd) : allow booting; allow bootp; authoritative; subnet 192.168.1.0 netmask 255.255.255.0 { range 192.168.1.20 192.168.1.50; option broadcast-address 192.168.1.255; } host macmini

Need help to install OpenBSD 5.9 macppc via pxe

Hello, I am trying to install OpenBSD 5.9 on an old mac mini (which actually runs FreeBSD and was using OpenBSD before). So, I choosed the network way for installation and followed the installation instructions. I get an error when loading /bsd.rd (picture at the end) I have my dhcp/tftp/nfs

ports(7) has a 404 link

Hi Dead link in ports(7) Index: ports.7 === RCS file: /cvs/src/share/man/man7/ports.7,v retrieving revision 1.106 diff -u -p -r1.106 ports.7 --- ports.7 24 Nov 2015 21:27:03 - 1.106 +++ ports.7 6 Apr 2016 12:16:25

Re: Mouse click problems with firefox and firefox-esr

Le 2016-03-30 20:23, Nick a écrit : Hello, I have tried both firefox and firefox-esr in both OpenBSD 5.8 and 5.9 and can say that there are issues with the mouse not picking up 10-15% of my clicks, sometimes having to click a good 3 times or more for it to actually work correctly! When I select

Re: SIP Client

Le 2016-03-07 23:28, Mihai Popescu a écrit : pjsua - audio only, works fine baresip - audio and video, works fine Both are in ports, I was using them with iptel.org as free provider. Thanks you, I installed baresip from packages and it was very easy to configure (easier than jitsi/ekiga/linph

SIP Client

Hello, Is there a SIP client working on OpenBSD ? I was using Jitsi or Ekiga but they don't seem working on OpenBSD. Kind regards

Re: puppet and cross-platform password hashes

Le 2016-02-05 08:33, Peter N. M. Hansteen a écrit : I'm assuming I'm not the first to encounter this - The interesting part is when we start introducing OpenBSD machines to the mix, and creating users with the password hashes from Linux or Solaris fails, apparently because the hashes are not bcr

Laptop Dell vostro 1500 hang after suspend/resume

Hello, I am using a Dell Vostro 1500, apmd is started with -A flag and when I type "zzz" to enter in suspend mode everything seems to works as expected. But when I resume it, the screen stays black, the backlight of the screen enables, the power LED show that it's no longer in sleep mode and the

Re: Full disk encryption and keyboard

Le 2015-01-12 10:45, Jan Stary a écrit : Am Sonntag, den 11.01.2015, 20:45 + schrieb etie...@magickarpet.org: > Is there a way to have a different keymap in boot? Not that it's really > necessary to type "boot bsd.rd", but it would be much more efficient > when typing a passphrase to decryp