Re: /etc/mygate equivalent for IPv6?

2017-06-06 Thread Otto Moerbeek
On Tue, Jun 06, 2017 at 03:53:10PM -0400, mabi wrote: > Fantastic, that was an easy one. Somehow I missed that from the OpenBSD FAQ, > must have skimmed it too fast... > > So I guess here that I can have my IPv4 default gw and IPv6 default gw both > on two different lines in the /etc/mygate fil

Re: SNMP OID for free memory

2017-06-06 Thread Stuart Henderson
On 2017-06-06, mabi wrote: > Thanks Stuart for your input. In the pass I used the snmp daemon which comes > with OpenBSD but I vaguely remember that some OID for my cacti graphs was > missing so I switched to Net-SNMP which had this information. Can't remember > though which OID that was and th

Re: nc in inetd - under which account?

2017-06-06 Thread Stuart Henderson
On 2017-06-06, Marko Cupać wrote: > Hi, > > For a few years I have been running nc from inetd together with pf > redirect rules to reach LAN servers via their public IP adresses from > LAN: > > # cat /etc/inetd.conf > 127.0.0.1:20080 stream tcp nowait proxy /usr/bin/nc nc -w 20 PR.IV.AT.E 80 > 127

Re: /etc/mygate equivalent for IPv6?

2017-06-06 Thread R0me0 ***
That's it: magic puffer fish 2017-06-06 16:53 GMT-03:00 mabi : > Fantastic, that was an easy one. Somehow I missed that from the OpenBSD > FAQ, must have skimmed it too fast... > > So I guess here that I can have my IPv4 default gw and IPv6 default gw > both on two different lines in the /etc/my

Re: /etc/mygate equivalent for IPv6?

2017-06-06 Thread mabi
Fantastic, that was an easy one. Somehow I missed that from the OpenBSD FAQ, must have skimmed it too fast... So I guess here that I can have my IPv4 default gw and IPv6 default gw both on two different lines in the /etc/mygate file. Original Message Subject: Re: /etc/mygate e

Re: SNMP OID for free memory

2017-06-06 Thread mabi
Thanks Stuart for your input. In the pass I used the snmp daemon which comes with OpenBSD but I vaguely remember that some OID for my cacti graphs was missing so I switched to Net-SNMP which had this information. Can't remember though which OID that was and that was already a few years ago. As

Re: /etc/mygate equivalent for IPv6?

2017-06-06 Thread R0me0 ***
for example: fe80::1%carp0 :) 2017-06-06 16:48 GMT-03:00 Janne Johansson : > Just add the ipv6 gw ip to /etc/mygate. > > > 2017-06-06 21:45 GMT+02:00 mabi : > > > Hi, > > > > What is the "standard" approach for adding an IPv6 default gateway to an > > OpenBSD 6.1 machine analog to the /etc/myga

Re: /etc/mygate equivalent for IPv6?

2017-06-06 Thread Janne Johansson
Just add the ipv6 gw ip to /etc/mygate. 2017-06-06 21:45 GMT+02:00 mabi : > Hi, > > What is the "standard" approach for adding an IPv6 default gateway to an > OpenBSD 6.1 machine analog to the /etc/mygate file for an IPv4 default > route? > > There are no /etc/mygate6 file and as such for now I

/etc/mygate equivalent for IPv6?

2017-06-06 Thread mabi
Hi, What is the "standard" approach for adding an IPv6 default gateway to an OpenBSD 6.1 machine analog to the /etc/mygate file for an IPv4 default route? There are no /etc/mygate6 file and as such for now I manually run: route -n add -inet6 default Regards, Mabi

Re: nc in inetd - under which account?

2017-06-06 Thread Ax0n
Also, this seems like something that, depending on where the destination servers are, could be handled easily with PF by itself, or with the help of relayd, with a lot less hassle. On Tue, Jun 6, 2017 at 11:23 AM, Maximilian Pichler wrote: > On Tue, Jun 6, 2017 at 11:06 AM, Marko Cupać wrote: >

Re: nc in inetd - under which account?

2017-06-06 Thread Maximilian Pichler
On Tue, Jun 6, 2017 at 11:06 AM, Marko Cupać wrote: > On Tue, 06 Jun 2017 08:18:15 -0600 > "Theo de Raadt" wrote: >> Never reuse a user intended for another purpose. >> >> Take a glance at the ptrace manual page. > I have read ptrace manual. But I guess I need to read much MUCH more if > I want

Re: another iked issue

2017-06-06 Thread Igor V. Gubenko
This indeed does help. Moved the policy to be the first. Thank you, - Igor On 2017-06-06 05:56, Zé Loff wrote: > On Mon, Jun 05, 2017 at 07:50:01PM -0400, Igor V. Gubenko wrote: > >> Hello all, >> >> I am continuing my assault on iked :) >> >> Here is a perfectly working configuratio

Re: nc in inetd - under which account?

2017-06-06 Thread Marko Cupać
On Tue, 06 Jun 2017 08:18:15 -0600 "Theo de Raadt" wrote: > > For a few years I have been running nc from inetd together with pf > > redirect rules to reach LAN servers via their public IP adresses > > from LAN: > > > > # cat /etc/inetd.conf > > 127.0.0.1:20080 stream tcp nowait proxy /usr/bin/n

Re: nc in inetd - under which account?

2017-06-06 Thread Theo de Raadt
> For a few years I have been running nc from inetd together with pf > redirect rules to reach LAN servers via their public IP adresses from > LAN: > > # cat /etc/inetd.conf > 127.0.0.1:20080 stream tcp nowait proxy /usr/bin/nc nc -w 20 PR.IV.AT.E 80 > 127.0.0.1:20443 stream tcp nowait proxy /usr/

nc in inetd - under which account?

2017-06-06 Thread Marko Cupać
Hi, For a few years I have been running nc from inetd together with pf redirect rules to reach LAN servers via their public IP adresses from LAN: # cat /etc/inetd.conf 127.0.0.1:20080 stream tcp nowait proxy /usr/bin/nc nc -w 20 PR.IV.AT.E 80 127.0.0.1:20443 stream tcp nowait proxy /usr/bin/nc nc

Re: another iked issue

2017-06-06 Thread Zé Loff
On Mon, Jun 05, 2017 at 07:50:01PM -0400, Igor V. Gubenko wrote: > Hello all, > > I am continuing my assault on iked :) > > Here is a perfectly working configuration that uses PSK's: > > ### > > local_ip = "A.B.1.153" > local_net = "172.16.0.0/20" > > ikev2 "KBweb" \ > pass