Disabling dedicated GPU on Macbook Pro

2015-12-09 Thread Joris Vanhecke
I have tried to get an OpenBSD desktop running on my MacBookPro10,1 (the
first Retina model).
But I only get VESA working on a terrible res while the machine is
running extremely hot.
This is the case for most (all?) MacBook's with 2 GPUs.

On linux (and osx recovery mode?) one can use this script to disable the
dedicated gpu and only use the integrated, intel gpu:
https://github.com/0xbb/gpu-switch

Could something like this help start the intel driver on OpenBSD?

Thanks!



Re: Disabling dedicated GPU on Macbook Pro

2015-12-10 Thread Joris Vanhecke
I ran the script on arch linux live cd, then rebooted into openbsd.
X (still) doesn't start.

Xorg.log : https://gist.github.com/aa816aa9745fad2ee72d
dmesg: https://gist.github.com/ccd823c4db36cf949816


On Wed, 9 Dec 2015, at 10:45 PM, Joris Vanhecke wrote:
> I have tried to get an OpenBSD desktop running on my MacBookPro10,1 (the
> first Retina model).
> But I only get VESA working on a terrible res while the machine is
> running extremely hot.
> This is the case for most (all?) MacBook's with 2 GPUs.
> 
> On linux (and osx recovery mode?) one can use this script to disable the
> dedicated gpu and only use the integrated, intel gpu:
> https://github.com/0xbb/gpu-switch
> 
> Could something like this help start the intel driver on OpenBSD?
> 
> Thanks!



Running OpenSMTPD at home behind a cloud proxy

2016-11-13 Thread Joris Vanhecke
Hey all,

I'd like to pull my emails out of the cloud and run them on a local
server (pcengines APU2 looks good).
My ISP blocks tcp ports below 1024 and sending email from a residential
(dynamic) IP might mark my email as spam.

Right now I'm thinking of renting a cheap VPS and using it as a proxy
for my home server which would use a dynamic DNS.
I don't really want a copy of the email on the VPS so I was planning to
use relayd or socat to route incoming traffic to my local OpenSMTPD
server.

But I don't really see a way to proxy outgoing connections from smtpd...

Any ideas?

Thanks,
Joris



Re: Running OpenSMTPD at home behind a cloud proxy

2016-11-15 Thread Joris Vanhecke
Using OpenSMTPD on the VPS actually sounds like a good idea.
It could use a pf blacklist + spamd to block a large amount of spam and reduce
strain on my home connection.

I'm still waiting for hardware to arrive and I'll test this out.
relay via sounds like a simple option, but I'll have to investigate what
happens if my home server is unavailable.


@Jiri - I have never heard of "paused remote delivery" ?



> On 14 Nov 2016, at 13:28, ludovic coues  wrote:
>
> Why not use opensmtpd on the VPS to relay your mail ?
>
> A rule like "accept for domain example.com relay via
> secure://you.dynamic.dns" should do what you want if I read the man
> correctly
>
> 2016-11-13 23:25 GMT+01:00 Jiri B :
>> On Sun, Nov 13, 2016 at 10:51:22PM +0100, Joris Vanhecke wrote:
>>> Hey all,
>>>
>>> I'd like to pull my emails out of the cloud and run them on a local
>>> server (pcengines APU2 looks good).
>>> My ISP blocks tcp ports below 1024 and sending email from a residential
>>> (dynamic) IP might mark my email as spam.
>>>
>>> Right now I'm thinking of renting a cheap VPS and using it as a proxy
>>> for my home server which would use a dynamic DNS.
>>> I don't really want a copy of the email on the VPS so I was planning to
>>> use relayd or socat to route incoming traffic to my local OpenSMTPD
>>> server.
>>>
>>> But I don't really see a way to proxy outgoing connections from smtpd...
>>>
>>> Any ideas?
>>
>> What about to have paused remote delivery on cloud proxy (and deliver
>> on request initiated from home server) and paused remote delivery on home
>> mail server as well and unpause the queue when you do tcp port forwardning
>> to cloud host as well.
>>
>> Or just run VPN between cloud host and home host. If either of them won't
>> be available your mail will stay in queue.
>>
>> j.
>>
>
>
>
> --
>
> Cordialement, Coues Ludovic
> +336 148 743 42



Re: Ruby on Rails and httpd

2016-12-10 Thread Joris Vanhecke
On Fri, 9 Dec 2016, at 04:57 PM, Murk Fletcher wrote:
> Hi,
> 
> Has anybody managed to come up with a working configuration of this?
> 
> Thanks,
> Murk
> 

Hey,

I tested/used the uWSGI tool as a proxy between httpd and rails in 5.7
with success.
The uWSGI docs contain a section on both ruby/rails and obsd's httpd.

I haven't used that setup in production but the developers behind uWSGI
officially document this setup AND offer commercial support.

Regards,
Joris



Re: Is using dkim really worth?

2016-12-10 Thread Joris Vanhecke
On Sat, 10 Dec 2016, at 11:51 AM, Walter Alejandro Iglesias wrote:
> I mentioned this in other thread, now I'll ask this question directly.
> 
> I was running my own mail server for a while but not enough to make a
> conclusion.  I'd appreciate the opinion of the experienced.
> 
> I'm noticing messages with no spf or dkim records reach my gmail inbox.
> At the same time, messages with spf and dkim 'pass' state go to gmail
> spam (among them messages sent to me from people in this list).
> 
> So, in general and based on your experience, do you think using dkim
> (that implies daemon, port redirections, etc.) is really worth?
> 

Worth it for doing what?

If your primary goal is to stay out of gmail/hotmail/... spam folders
then I would say yes.
Setting up DMARC isn't that hard but a wrong config might get your
domain flagged for life.



Re: [httpd] Multiple HTPS servers & redirection

2016-12-29 Thread Joris Vanhecke
On Sun, 25 Dec 2016, at 12:24 PM, Olivier wrote:
> Hello all,
>
> I would like to know, what is the best practice to manage multilple https
> servers with httpd. I installed 2 certificates for both hostname below:
>
> _ daenerys.burelli.fr
> _ cloud.burelli.fr
>
> I would like to redirect all request for:
>
> _ http://daenerys.burelli.frto https://cloud.burelli.fr → OK
> _  http://cloud.burelli.fr  to https://cloud.burelli.fr:444 →
> KO - however the certificate is ok when I try to reach directly
> https://cloud.burelli.fr:444
>
> I would like to avoid to obtain the followings message for second https
> server:  SSL_ERROR_BAD_CERT_DOMAIN (The certificate is only valid for the
> following names: daenerys.burelli.fr, www.daenerys.burelli.fr)
>
> Part of my httpd.conf:
>
> server "daenerys.burelli.fr" {
> listen on $ext_addr port 80
> block return 301 "https://$SERVER_NAME$REQUEST_URI";
> }
>
> server "daenerys.burelli.fr" {
> alias "www.burelli.fr"
> listen on $ext_addr tls port 443
> (…)
> }
>
> server "cloud.burelli.fr" {
> listen on $ext_addr port 80
> block return 301 "https://cloud.burelli.fr:444/$REQUEST_URI";
> }
>
> server "cloud.burelli.fr" {
> listen on $ext_addr tls port 444
> (…)
> }
>
> I tried also with: block return 301 https://$SERVER_NAME:444$REQUEST_URI
> or
> block return 301 https://cloud.burelli.fr:444$REQUEST_URI
>
> What is the right way to rewrite the URL?
>
> Thanks in advance for your help and support.
>
> Olivier.
>

Seems like httpd is using the first cert for both domains.
Are you using the "tls certificate *file*" option?



Re: Computer hangup : scsi_xfer pool exhausted!

2016-03-11 Thread Joris Vanhecke
I'm experiencing the same thing.
OpenBSD5.8-STABLE on vmware.

The message is repeatedly spammed to the console.