find(1) with -delete ignores -maxdepth

2023-08-28 Thread Marcus MERIGHI
Hallo, a recent post on misc@ mentioned the following crontab(5) command to remove core files: @reboot /usr/bin/find ~ -fstype local -name '*.core' -delete ( https://marc.info/?l=openbsd-misc&m=169303728425504 ) I wondered why I did not use the "-delete" primary but the "-print0 | xargs -0" pip

pf nat-to doesn't match a crafted packet

2023-08-28 Thread pjp
>Synopsis: pf nat-to doesn't match a crafted packet >Category: system >Environment: System : OpenBSD 7.3 Details : OpenBSD 7.3 (GENERIC.MP) #2080: Sat Mar 25 14:20:25 MDT 2023 dera...@arm64.openbsd.org:/usr/src/sys/arch/arm64/compile/GEN

Re: pf nat-to doesn't match a crafted packet

2023-08-28 Thread Alexandr Nedvedicky
Hello, On Mon, Aug 28, 2023 at 05:13:29PM +0200, p...@delphinusdns.org wrote: > >Synopsis:pf nat-to doesn't match a crafted packet > >Category:system > >Environment: > System : OpenBSD 7.3 > Details : OpenBSD 7.3 (GENERIC.MP) #2080: Sat Mar 25 14:20:25 MDT > 2023 >

Re: pf nat-to doesn't match a crafted packet

2023-08-28 Thread Peter J. Philipp
On Mon, Aug 28, 2023 at 06:18:41PM +0200, Alexandr Nedvedicky wrote: > Hello, > > On Mon, Aug 28, 2023 at 05:13:29PM +0200, p...@delphinusdns.org wrote: > > >Synopsis: pf nat-to doesn't match a crafted packet > > >Category: system > > >Environment: > > System : OpenBSD 7.3 > > Detai

Re: pf nat-to doesn't match a crafted packet

2023-08-28 Thread Alexandr Nedvedicky
Hello, On Mon, Aug 28, 2023 at 06:30:55PM +0200, Peter J. Philipp wrote: > > Hi Alexandr, > > root@stern# tcpdump -v -n -i pppoe0 -c 1 icmp && pfctl -ss -v | grep icmp > tcpdump: listening on pppoe0, link-type PPP_ETHER > 18:25:34.273661 192.168.177.13 > 49.12.42.182: icmp: host 7.198.187.211

Re: pf nat-to doesn't match a crafted packet

2023-08-28 Thread Stuart Henderson
On 2023/08/28 18:30, Peter J. Philipp wrote: > Here is my icmp rulesets: > > root@stern# grep icmp /etc/pf.conf a partial pf.conf fragment is hardly ever enough to debug a ruleset problem. if a packet doesn't match any rule then it hits the implicit "pass flags any no state" rule 0.

Re: find(1) with -delete ignores -maxdepth

2023-08-28 Thread George Koehler
On Mon, 28 Aug 2023 12:42:39 +0200 Marcus MERIGHI wrote: > My complete crontab(5) entry reads: > > /usr/bin/find ~/ -maxdepth 1 -fstype local -name "*.core" -delete > > Now I get error messages saying "Access Denied" for directories that > find(1) should not access due to "-maxdepth 1". I can

Re: pf nat-to doesn't match a crafted packet

2023-08-28 Thread David Gwynne
How are you injecting the crafted packet into the stack? On Tue, 29 Aug 2023, 01:14 , wrote: > >Synopsis: pf nat-to doesn't match a crafted packet > >Category: system > >Environment: > System : OpenBSD 7.3 > Details : OpenBSD 7.3 (GENERIC.MP) #2080: Sat Mar 25

RLIMIT_CPU doesn't work reliably on mostly idle systems

2023-08-28 Thread Eric Wong
>Synopsis: RLIMIT_CPU doesn't work reliably on mostly idle systems >Category: system >Environment: System : OpenBSD 7.3 Details : OpenBSD 7.3 (GENERIC.MP) #1242: Sat Mar 25 18:04:31 MDT 2023 dera...@octeon.openbsd.org:/usr/src/sys/arch/octeon/comp

Re: RLIMIT_CPU doesn't work reliably on mostly idle systems

2023-08-28 Thread Scott Cheloha
> On Aug 28, 2023, at 20:04, Eric Wong wrote: > >  >> >> Synopsis: RLIMIT_CPU doesn't work reliably on mostly idle systems >> Category: system >> Environment: >System : OpenBSD 7.3 >Details : OpenBSD 7.3 (GENERIC.MP) #1242: Sat Mar 25 18:04:31 MDT 2023 > > dera...@