Black screen after 5.5/macppc install

2014-06-02 Thread Tobias Brodel
Hi, after installing OpenBSD 5.5/macppc on my emac I am unable to get a console to display on my monitor. The installer completes succesfully, I can reboot to the new system but the display conks out after the radeon-related kernel messages. I can log in via ssh and my previous install of 5.4 wo

Re: 5.5 pf priority

2014-06-02 Thread Henning Brauer
* sven falempin [2014-06-02 22:11]: > I just read info about icmp packet and those are > apparently armful but i did not find any > measurement or 'proof' of that. dunno about yours (but have a strong suspicion) - my icmp source quench packets don't have arms. > Maybe i slide a bit of topic, i

OpenSMTPD recipient table with db file

2014-06-02 Thread Martijn Rijkeboer
Hi, When I try to use a db file for my recipient table I get "invalid use of table "recipients" as RECIPIENT parameter". When I use a plain file it works. I've created the db file with "makemap -t set recipients". Is this on purpose or is it a bug? Using a plain file: table recipients file:/etc

Re: 5.5 pf priority

2014-06-02 Thread sven falempin
On Mon, Jun 2, 2014 at 1:04 PM, Henning Brauer wrote: > * Andy [2014-06-02 18:21]: >> So whilst the impact may be minimal, if I have a busy firewall (BIG GIANT >> and all that..) so the CPU is working very hard, I would want prio the >> prioritize my voice/video packets inwards during ingress and

Re: Apache

2014-06-02 Thread consultor
On 06/02/2014 01:10 AM, Stuart Henderson wrote: > On 2014-06-02, consultor wrote: >> Hello list >> >> Could somebody please tell me if i should be worry for: >> >> 185.4.227.194 - - [01/Jun/2014:08:32:14 -0700] "GET >> http://24x7-allrequestsallowed.com/?PHPSESSID=1rxsxtj500143SVM%5CRH%40%40BZPU >

Re: 5.5 pf priority

2014-06-02 Thread Andy Lemin
Hi Henning, Thanks for your reply. We agree it's an edge case but would have an impact, albeit small. So taking your work as truth and good judgement as best as any human can (which I do), should we all just strip all our 'prio's if we use queues? I don't want things in my PF which aren't being

Re: Apache2 config on OpenBSD 5.5

2014-06-02 Thread Giancarlo Razzolini
Em 02-06-2014 05:41, Markus Rosjat escreveu: > Hey there, > > its kinda confusing to see config files all over the place. I can find > files in /etc/apache2 as well as in /var/www/conf. So first thing > first. As I notices apache 1.3 insnt used in OpenBSD 5.5 right? So I > can asume there should b

Re: 5.5 pf priority

2014-06-02 Thread Henning Brauer
* Andy [2014-06-02 18:21]: > So whilst the impact may be minimal, if I have a busy firewall (BIG GIANT > and all that..) so the CPU is working very hard, I would want prio the > prioritize my voice/video packets inwards during ingress and queue on the > other side during egress. that works. no g

Re: 5.5 pf priority

2014-06-02 Thread Andy
+1 (And you can only queue on egress anyway ;) Just to add something to the prio and queing differences questions.. I thought prio being as simple as it is, was works lower down the stack and works on ingress (i.e. it can cherry pick high prio ingress packets to go up the stack first). Queui

Re: Pflow granularity

2014-06-02 Thread Andy
I think you might have to try softflowd instead of the built-in sflowd.. These guys had the same problem and moved to softflowd to allow them to analyse DDOS traffic with netflow.. https://ripe68.ripe.net/presentations/276-DDoS.pdf Cheers, Andy. On Mon 02 Jun 2014 14:38:33 BST, BARDOU Pierr

Re: OpenSMTPD routing incoming mail

2014-06-02 Thread Martijn Rijkeboer
> use recipient instead: > accept from any for domain recipient relay Nice. The following is even simpler: accept from any for any recipient relay Kind regards, Martijn Rijkeboer

Pflow granularity

2014-06-02 Thread BARDOU Pierre
Hello, I sat up NetFlow reporting on a PF firewall, but there seems to be a flaw in the implementation : only global statistics about the flow are given (start time, end time, IP/port source, IP/port dest, bits in both ways, ...). So as an example if somebody establishes an sftp connexion, down

Re: OpenSMTPD routing incoming mail

2014-06-02 Thread Marcus MERIGHI
mart...@bunix.org (Martijn Rijkeboer), 2014.06.02 (Mon) 13:32 (CEST): > > my solution would be: > > accept from any for domain d1.com virtual relay hostname i-mail > > I've tried something similar but I'm getting: > "aliases/virtual may not be used with a relay rule" use recipient instead: ac

Re: OpenSMTPD routing incoming mail

2014-06-02 Thread Mike Jackson
Quoting Gregory Edigarov : my solution would be: accept from any for domain d1.com virtual relay hostname i-mail This is doing the same work for half the benefit, i.e. you build the list anyway but don't integrate it with spamd. -mike

Re: OpenSMTPD routing incoming mail

2014-06-02 Thread Mike Jackson
Quoting Martijn Rijkeboer : Hi, # incoming mail for our domains is relayed to "i-mail" server accept from any for domain relay hostname i-mail But this will also relay non existing mailboxes. Any suggestions for that? Sure, put your list of addresses in spamd.alloweddomains (yes, it's

Re: OpenSMTPD routing incoming mail

2014-06-02 Thread Martijn Rijkeboer
> my solution would be: > accept from any for domain d1.com virtual relay hostname i-mail I've tried something similar but I'm getting: "aliases/virtual may not be used with a relay rule" Kind regards, Martijn Rijkeboer

Re: OpenSMTPD routing incoming mail

2014-06-02 Thread Gregory Edigarov
On 06/02/2014 02:14 PM, Martijn Rijkeboer wrote: Hi, # incoming mail for our domains is relayed to "i-mail" server accept from any for domain relay hostname i-mail But this will also relay non existing mailboxes. Any suggestions for that? Kind regards, Martijn Rijkeboer my solution would

Re: OpenSMTPD routing incoming mail

2014-06-02 Thread Martijn Rijkeboer
Hi, > # incoming mail for our domains is relayed to "i-mail" server > accept from any for domain relay hostname i-mail But this will also relay non existing mailboxes. Any suggestions for that? Kind regards, Martijn Rijkeboer

Re: OpenSMTPD routing incoming mail

2014-06-02 Thread Mike Jackson
Quoting Martijn Rijkeboer : Hi, I'm trying to migrate our Postfix setup to OpenSMTPD. The setup consists of two MX servers that run Spamd and that forward the incoming mail to a internal mail server that contains the mailboxes. In Postfix a transport map is used to accomplish this. Is it possib

OpenSMTPD routing incoming mail

2014-06-02 Thread Martijn Rijkeboer
Hi, I'm trying to migrate our Postfix setup to OpenSMTPD. The setup consists of two MX servers that run Spamd and that forward the incoming mail to a internal mail server that contains the mailboxes. In Postfix a transport map is used to accomplish this. Is it possible to create the same setup wit

Re: pf+voip

2014-06-02 Thread Ted Bullock
On 2014-05-28 6:39 AM, pae3 wrote: Hi! Don't miss RTP protocol : pass proto tcp to port >< 20001 ah, no RTP will be moving over UDP. -- Ted Bullock

Re: Apache2 config on OpenBSD 5.5

2014-06-02 Thread Stefan Sperling
On Mon, Jun 02, 2014 at 10:41:33AM +0200, Markus Rosjat wrote: > Hey there, > > its kinda confusing to see config files all over the place. I can find files > in /etc/apache2 as well as in /var/www/conf. So first thing first. As I > notices apache 1.3 insnt used in OpenBSD 5.5 right? No. http://w

Re: Apache2 config on OpenBSD 5.5

2014-06-02 Thread Marc Peters
On 06/02/14 10:41, Markus Rosjat wrote: > Hey there, > > its kinda confusing to see config files all over the place. I can find > files in /etc/apache2 as well as in /var/www/conf. So first thing first. > As I notices apache 1.3 insnt used in OpenBSD 5.5 right? So I can asume > there should be no

Apache2 config on OpenBSD 5.5

2014-06-02 Thread Markus Rosjat
Hey there, its kinda confusing to see config files all over the place. I can find files in /etc/apache2 as well as in /var/www/conf. So first thing first. As I notices apache 1.3 insnt used in OpenBSD 5.5 right? So I can asume there should be no apache 1.3 running at all. Second I installed t

Re: SSL certs and xombrero again but with a third party twist

2014-06-02 Thread Stuart Henderson
On 2014-05-29, Kevin Chadwick wrote: > Seems your right, I did try to double check and look for cafile in the > openssl man page but the search got fooled by the capitalisation, sorry. It's off this topic, but you might like to set a "LESS" environment variable including the letter 'i' (I have "e

Re: Apache

2014-06-02 Thread Stuart Henderson
On 2014-06-02, consultor wrote: > Hello list > > Could somebody please tell me if i should be worry for: > > 185.4.227.194 - - [01/Jun/2014:08:32:14 -0700] "GET > http://24x7-allrequestsallowed.com/?PHPSESSID=1rxsxtj500143SVM%5CRH%40%40BZPU > HTTP/1.1" 200 1723 > > The answer was 200. Running 5.5

Re: pf icmp redirect question

2014-06-02 Thread Marko Cupać
On Fri, 30 May 2014 19:32:32 +0100 André Lucas wrote: > Or if you're concerned about the the ICMP messages related to PMTUd, > they're automatically forwarded as part of the connection state > tracking IIRC. > > -Andr__ > That was my main concern, thanx for clarifying. -- Marko Cupać

Re: exp2(3) bug?

2014-06-02 Thread Stuart Henderson
[+cc martynas in case you don't read tech@] On 2014-06-02, Daniel Dickman wrote: > I hit this problem while working with the numpy 1.8.1 regress suite > which has some tests that are currently failing. > > Here is a reduced test case of the logaddexp2 python function which > ends up calling exp2.