Re: SPF Examples

2016-05-31 Thread Craig Skinner
On 2016-06-01 Wed 09:34 AM |, Indunil Jayasooriya wrote: > > > what does the below record mean? > > > > > > example.com.INTXT"v=spf1 mx a -all" > http://www.OpenSPF.Org/SPF_Record_Syntax#a All the A records for domain are tested. If the client IP is found among them, this mechanism ma

Re: SPF Examples

2016-05-31 Thread Indunil Jayasooriya
> > what does the below record mean? > > > > example.com.INTXT"v=spf1 mx a -all" when the above SPF record exists. Let's look at with below Records example.com. IN MX 10 mailgw1.example.com. example.com. IN MX 20 mailgw2.example.com. example.com. IN MX 30 mailgw3.example.com. exa

Re: awesome W^X

2016-05-31 Thread Theo de Raadt
> Totally awesome! > > awesome(38099): mmap W^X violation > > It happens once on startup. No, that is incorrect. It probably happens throughout the program's runtime. mmap/mprotect failures are rate limited and only printed once per process. > Grepping for the obvious stuff doesn't show me th

awesome W^X

2016-05-31 Thread Chris Cappuccio
Totally awesome! awesome(38099): mmap W^X violation It happens once on startup. Grepping for the obvious stuff doesn't show me the issue, perhaps it's a library. There is no obvious ill effect from the mmap failure. As an aside, iridium runs into mmap W^X all the time, but seems to work fine? I

Sparc64 and XVR-100 boot error running -current

2016-05-31 Thread Bryan Everly
Hi misc@ I'm trying to get an XVR-100 working in my SunBlade 2500 workstation and I'm hitting a roadblock I can't overcome. Essentially what happens is, the system boots. Then when, on my AMD64 machines the display changes resolution for the rest of the boot process, I get some sort of crash.

Re: ntpd tries to connect via ipv6

2016-05-31 Thread Lyndon Nerenberg
> On May 31, 2016, at 3:58 PM, Ted Unangst wrote: > > If we're talking about timeframes long enough for network connectivity to come > and go, that's long enough for IP addresses to come and go as well. This is an interesting problem, in general. In my MTA development days, we would cache the ta

Re: hidden services stopped working

2016-05-31 Thread ares
I'm not sure it's the same problem. Though it sounds interesting, what's in your torrc? Try the enabling: CloseHSClientCircuitsImmediatelyOnTimeout 1 CloseHSServiceRendCircuitsImmediatelyOnTimeout 1 UserspaceIOCPBuffers 1 AvoidDiskWrites 1 I'm not sure what happened to my setup quite yet I've bee

Re: ntpd tries to connect via ipv6

2016-05-31 Thread Ted Unangst
Carlin Bingham wrote: > On Tue, May 31, 2016 at 01:45:23PM -0400, Ted Unangst wrote: > > Jeremie Courreges-Anglas wrote: > > > ntpd(8) doesn't use getaddrinfo+AI_ADDRCONFIG, which is supposed to skip > > > DNS requests for IPv6 if the machine doesn't have IPv6 addresses > > > configured. > > > > r

Re: ntpd tries to connect via ipv6

2016-05-31 Thread Carlin Bingham
On Tue, May 31, 2016 at 01:45:23PM -0400, Ted Unangst wrote: > Jeremie Courreges-Anglas wrote: > > ntpd(8) doesn't use getaddrinfo+AI_ADDRCONFIG, which is supposed to skip > > DNS requests for IPv6 if the machine doesn't have IPv6 addresses > > configured. > > reyk added a comment to that effect,

Re: NVM Express (NVMe) support status

2016-05-31 Thread Evgeniy Sudyr
Working for me my NVMe disk is Intel 750 http://www.intel.com/content/www/us/en/solid-state-drives/solid-state-drives-750-series.html http://www.intel.com/content/dam/www/public/us/en/documents/product-specifications/ssd-750-spec.pdf dmesg | grep -i nvme nvme0 at pci1 dev 0 function 0 "Intel SSD

Re: ntpd tries to connect via ipv6

2016-05-31 Thread Sonic
On Tue, May 31, 2016 at 1:04 PM, Stefan Wollny wrote: > I asked this just last week. Indeed! Sorry I missed it. Thanks all!

Re: ntpd tries to connect via ipv6

2016-05-31 Thread Evgeniy Sudyr
Sonic, I can confirm same issue on -current when ntpd tries to use record to resolve constraints IP address. Can you check and confirm if you don't have IPv6 address :) I guess you should have at least link-local and loopback IPv6 addresses :) ifconfig | grep inet6 inet6 ::1 prefi

Re: ntpd tries to connect via ipv6

2016-05-31 Thread Ted Unangst
Jeremie Courreges-Anglas wrote: > ntpd(8) doesn't use getaddrinfo+AI_ADDRCONFIG, which is supposed to skip > DNS requests for IPv6 if the machine doesn't have IPv6 addresses > configured. reyk added a comment to that effect, but I don't know why. /* ntpd MUST NOT use AI_ADDRCONFIG here */

Troubling to use an IPv6-address in source table (table(5))

2016-05-31 Thread Juuso Lapinlampi
Hi misc@. I have a source table for IP-addresses I'd like to use bind to for outgoing mail with OpenSMTPD. For some reason, I can't add IPv6-addresses to it. To give you an idea, without configuration outgoing mail goes out from partyvan.eu (partyvan.eu [188.126.81.149]). This is unintended and s

Re: ntpd tries to connect via ipv6

2016-05-31 Thread Stefan Wollny
Am 05/31/16 um 18:36 schrieb Sonic: > Getting many such log entries: > === > May 31 08:53:34 stargate ntpd[5702]: tls connect failed: > 2607:f8b0:4009:808::2004 (www.google.com): connect: No route to host > May 31 09:08:35 stargate ntpd[15803]: tls connect failed: > 2607:f8b0:40

Re: hidden services stopped working

2016-05-31 Thread Juuso Lapinlampi
This may be related: em(4) interface hangs randomly, receive buffer full (Intel i210) https://marc.info/?l=openbsd-misc&m=145696725605233&w=2 I've been having those Tor hangs for months. The same issue, clock skips ahead some minutes and breaks Tor connections but not clearnet. They happen quite

Re: the balance between OpenBSD and life

2016-05-31 Thread Ingo Schwarze
Hi Mihai, Mihai Popescu wrote on Tue, May 31, 2016 at 06:57:31PM +0300: > $ life > ksh: life: not found Our ports team is doing a great job. To get a life with OpenBSD, simply type $ doas pkg_add life && life Then click around a bit, hit the space bar, and relax. Yours, Ingo

Re: the balance between OpenBSD and life

2016-05-31 Thread Mihai Popescu
> Our ports team is doing a great job. > > To get a life with OpenBSD, simply type > > $ doas pkg_add life && life You've got me! So there is life, but you have to invoke the superuser! Nice :-)

Re: ntpd tries to connect via ipv6

2016-05-31 Thread Mihai Popescu
http://marc.info/?l=openbsd-misc&m=146401377026646&w=2

ntpd tries to connect via ipv6

2016-05-31 Thread Sonic
Getting many such log entries: === May 31 08:53:34 stargate ntpd[5702]: tls connect failed: 2607:f8b0:4009:808::2004 (www.google.com): connect: No route to host May 31 09:08:35 stargate ntpd[15803]: tls connect failed: 2607:f8b0:4009:808::2004 (www.google.com): connect: No route

Re: ntpd tries to connect via ipv6

2016-05-31 Thread Jeremie Courreges-Anglas
Sonic writes: > Getting many such log entries: > === > May 31 08:53:34 stargate ntpd[5702]: tls connect failed: > 2607:f8b0:4009:808::2004 (www.google.com): connect: No route to host > May 31 09:08:35 stargate ntpd[15803]: tls connect failed: > 2607:f8b0:4009:808::2004 (www.go

Re: the balance between OpenBSD and life

2016-05-31 Thread Chris Bennett
On Sat, May 28, 2016 at 08:24:00PM +0800, Teng Zhang wrote: > I can't adjust the time for OpenBSD and my life appropriately. Could you > please share your experience with me about how you adjust your time between > OpenBSD and your life. > thanks for any reply. > For my business, I wrote an arti

Re: the balance between OpenBSD and life

2016-05-31 Thread Mihai Popescu
$ life ksh: life: not found $ time life ksh: life: not found 0m00.00s real 0m00.00s user 0m00.00s system

Re: encrypted disk image

2016-05-31 Thread Joel Sing
On Friday 20 May 2016 18:38:08 Ted Unangst wrote: > Peter Wens wrote: > > On a encrypted (sd1) OpenBSD 5.9 install (amd64, (qemu, virtio)): > > > > I created a diskimage (dd if=/dev/urandom of=disk.img bs=1m count=100 > > vnconfig vnd0 disk.img > > fdisk -iy vnd0 > > disklabel -E vnd0 ( a a RAID)

Re: the balance between OpenBSD and life

2016-05-31 Thread Jack J. Woehr
Luca Ferrari wrote: On Tue, May 31, 2016 at 1:02 PM, Teng Zhang wrote: >I'm an OpenBSD user and not an linux user. I study in university. I usually >have too much homework need to do and sometimes have no time to play >OpenBSD(the situation is similar to @Luca Ferrari). I just want to know how

Re: the balance between OpenBSD and life

2016-05-31 Thread Luca Ferrari
On Tue, May 31, 2016 at 1:02 PM, Teng Zhang wrote: > I'm an OpenBSD user and not an linux user. I study in university. I usually > have too much homework need to do and sometimes have no time to play > OpenBSD(the situation is similar to @Luca Ferrari). I just want to know how > do you do when you

Re: "untrust" intermediate certificates

2016-05-31 Thread Stuart Henderson
On 2016-05-31, Etienne wrote: > Hello list, > > I came across that blog post > https://blog.filippo.io/untrusting-an-intermediate-ca-on-os-x/ and I > have been trying to find an equivalent way of doing so in > OpenBSD/LibreSSL, to no avail. Am I missing something? You can't do this with the si

"untrust" intermediate certificates

2016-05-31 Thread Etienne
Hello list, I came across that blog post https://blog.filippo.io/untrusting-an-intermediate-ca-on-os-x/ and I have been trying to find an equivalent way of doing so in OpenBSD/LibreSSL, to no avail. Am I missing something? Oh, and yes, I know, this should not be needed if we could really tru

Re: Why overwrite first megabyte of encrypted disk?

2016-05-31 Thread Nick Holland
On 05/25/16 13:34, Robert Campbell wrote: > https://www.openbsd.org/faq/faq14.html#softraid > > In the FAQ > Disk Setup > Full Disk Encryption section there are these > lines after the encrypted drive has been set up: > >> As in the previous example, we'll overwrite the first megabyte of our >

Re: the balance between OpenBSD and life

2016-05-31 Thread GSO
On Mon, 2016-05-30 at 13:58 +0200, Marko Cupać wrote: > On Sat, 28 May 2016 20:24:00 +0800 > Teng Zhang wrote: > > > I can't adjust the time for OpenBSD and my life appropriately. Could > > you please share your experience with me about how you adjust your > > time between OpenBSD and your life.

Re: wx violations (a question)

2016-05-31 Thread Stuart Henderson
On 2016-05-31, Gregory Edigarov wrote: > Hi, > > I have a question about the implementation of W^X protection. > We now have a per filesystem knob wxallowed. but wouldn't it be better > to implement with per-exec granularity? > > i.e. chflags wxallowed We have this now, with ld -z wxneeded

Re: form printer

2016-05-31 Thread Edgar Pettijohn
Sent from my (company furnished) iPhone > On May 31, 2016, at 3:56 AM, Kapfhammer, Stefan wrote: > > Sorry forgot to mention: > www.oki.com > > Models: OKI ML-380/ML-381/ML-390/ML-391 > Thanks. I was looking at this model using my online thinking box. Glad a human being could confirm for me witho

Re: form printer

2016-05-31 Thread lists
Tue, 31 May 2016 08:49:53 + "Kapfhammer, Stefan" > I would recommend OKI dot matrix printers. > They have 9- and 24-dot printers. They are > well supported with lpd. OKI has also every > part on stock in case of repair. > The rippon cartridges are cheap and last > for up to 2 million chars. >

wx violations (a question)

2016-05-31 Thread Gregory Edigarov
Hi, I have a question about the implementation of W^X protection. We now have a per filesystem knob wxallowed. but wouldn't it be better to implement with per-exec granularity? i.e. chflags wxallowed -- With best regards, Gregory Edigarov

Re: form printer

2016-05-31 Thread Kapfhammer, Stefan
‎Hello Edgar, I would recommend OKI dot matrix printers. They have 9- and 24-dot printers. They are well supported with lpd. OKI has also every part on stock in case of repair. The rippon cartridges are cheap and last for up to 2 million chars. Regards, -stefan Gesendet von meinem BlackBerry 10-

Re: the balance between OpenBSD and life

2016-05-31 Thread Luca Ferrari
On Sat, May 28, 2016 at 2:24 PM, Teng Zhang wrote: > I can't adjust the time for OpenBSD and my life appropriately. Could you > please share your experience with me about how you adjust your time between > OpenBSD and your life. > thanks for any reply. % emacs -nw -Q -f doctor How can we help

Re: form printer

2016-05-31 Thread Kapfhammer, Stefan
Sorry forgot to mention: www.oki.com Models: OKI ML-380/ML-381/ML-390/ML-391 -stefan Gesendet von meinem BlackBerry 10-Smartphone.   Originalnachricht   Von: Kapfhammer, Stefan Gesendet: Dienstag, 31. Mai 2016 10:49 An: li...@wrant.com; misc@openbsd.org Cc: ed...@pettijohn-web.com Betreff: AW: f

Re: form printer

2016-05-31 Thread Edgar Pettijohn
If you can't answer the question. Please remain silent, Sent from my iPhone > On May 31, 2016, at 3:04 AM, li...@wrant.com wrote: > > Mon, 30 May 2016 18:23:03 -0500 Edgar Pettijohn >> I am looking for a form printer. (The kind that take the paper with >> the holes on the side.) > > Tractor-

Re: form printer

2016-05-31 Thread lists
Mon, 30 May 2016 18:23:03 -0500 Edgar Pettijohn > I am looking for a form printer. (The kind that take the paper with > the holes on the side.) Tractor-feed continuous form paper [https://en.wikipedia.org/wiki/Continuous_stationery] > New ones are a little on the pricey side, so if anyone can

Re: pf prio queue not setting vlan prio value?

2016-05-31 Thread Sebastian Reitenbach
On Monday, May 30, 2016 16:45 CEST, Alexey Suslikov wrote: > Sebastian Reitenbach l00-bugdead-prods.de> writes: > > > With tcpdump, I see 'pri 0' on all the packets captured: > > > > tcpdump -n -i trunk0 -vvv vlan 8 and net 10.1.0.0/24 > > 11:18:13.132570 802.1Q vid 8 pri 0 10.1.0.2 > 10.1.0.1:

Re: the balance between OpenBSD and life

2016-05-31 Thread Matt M
On Sat, May 28, 2016 at 7:31 AM Teng Zhang wrote: > I can't adjust the time for OpenBSD and my life appropriately. Could you > please share your experience with me about how you adjust your time between > OpenBSD and your life. > thanks for any reply. > > If OpenBSD is consuming so much of your