Re: Running your own mail server

2018-09-12 Thread Peter J. Philipp
On Wed, Sep 12, 2018 at 11:01:13PM -0600, Austin Hook wrote: > Have run my own mail server for maybe 20 years of OpenBSD, and apart from > getting my ISP to give me a static IP and a correct reverse DNS entry, and > a couple of run ins with a few filters that dumb ISPs run, it's worked > fine al

Odd behavior with cdio

2018-09-12 Thread Austin Hook
I don't write many CD's these days but wanted to put some mp3's on a CDR to play in my truck, since it plays a CD with *.mp3 files just as well as WAV files on an regular audio CD, and, of course has room for a lot more. Going back to the FAQ on multimedia... What I noticed, was that after

Re: Running your own mail server

2018-09-12 Thread Austin Hook
On Sun, 9 Sep 2018, Thomas Bohl wrote: > > But the second (far more important) point I want to make is please *THINK > > TWICE* if "running your own mail server" is something you are planning to > > do on your home internet connection. > > For all intents and purposes, sending emails from a pri

Re: IPv6 router advertisement rdns not working?

2018-09-12 Thread Sebastien Marie
On Wed, Sep 12, 2018 at 10:26:40PM -0500, Mike Coddington wrote: > I've got IPv6 set up and things work great if I also use IPv4. DNS > lookups go over IPv4 according to what I have in /etc/resolv.conf and > records are followed. However, if I decide to go with just IPv6 by > simplifying my /e

IPv6 router advertisement rdns not working?

2018-09-12 Thread Mike Coddington
I've got IPv6 set up and things work great if I also use IPv4. DNS lookups go over IPv4 according to what I have in /etc/resolv.conf and records are followed. However, if I decide to go with just IPv6 by simplifying my /etc/hostname.if file and using "inet6 autoconf" by itself, I cannot do any

Re: ssh -Y behaviour change

2018-09-12 Thread Brett Mahar
On Wed, 12 Sep 2018 14:03:17 +0200 Solene Rapenne wrote: | > | Brett Mahar wrote: | > | > | > I recently updated my amd-64-current machine to the Sept 7th snapshot (previous snapshot was July 17th). | > | > | > | > Prior to update both firefox and iridium browsers were able to be run using

Re: Integration between CARP and BGPD ?

2018-09-12 Thread Tim Jones
On Wednesday, 12 September 2018 20:49, Stuart Henderson wrote: > On 2018-09-11, Tim Jones b631093f-779b-4d67-9ffe-5f6d5b1d3...@protonmail.ch > wrote: > > > I've had a quick look through the man pages and am still a bit unclear, > > perhaps I'm just overthinking this ? > > Let's say I've got

Re: Integration between CARP and BGPD ?

2018-09-12 Thread Stuart Henderson
On 2018-09-11, Tim Jones wrote: > I've had a quick look through the man pages and am still a bit unclear, > perhaps I'm just overthinking this ? > > Let's say I've got two perimeter "firewalls" running OpenBSD, talking BGP to > upstream routers. > > On the "LAN" side I'm thinking about CARP, wh

Re: BGP over IKED, routes not being installed ?

2018-09-12 Thread Stuart Henderson
On 2018-09-12, Tim Jones wrote: > >> sounds like a nexthop validation issue. What does`bgpctl show nexthop` gives >> you? Do you have a route to them? > > It gives this : > > Flags: * = nexthop valid > > Nexthop Route Prio Gateway Iface > 10.250.250.250 > > > But

Re: BGP over IKED, routes not being installed ?

2018-09-12 Thread Tim Jones
> sounds like a nexthop validation issue. What does`bgpctl show nexthop` gives > you? Do you have a route to them? It gives this : Flags: * = nexthop valid Nexthop Route Prio Gateway Iface 10.250.250.250 But surely I have a route if I can ping ? (As part of

Re: BGP over IKED, routes not being installed ?

2018-09-12 Thread Pierre Emeriaud
Le mer. 12 sept. 2018 à 19:09, Tim Jones a écrit : > > 2/ The BGP sessions come up > > 3/ "bgpctl sho ri" shows all routes. But none of them have any flags, not > even the *=valid flag. > > 4/ Setting "nexthop qualify via default" gets the valid & select flags, but > doing a traceroute sees the

BGP over IKED, routes not being installed ?

2018-09-12 Thread Tim Jones
I'm probably missing something silly, here's what I've got so far: 1/ Working VPN, I can ping between the BGP loopbacks on both sides ping -S 192.168.1.1 10.250.250.250 ping -S 10.250.250.250 192.168.1.1 2/ The BGP sessions come up 3/ "bgpctl sho ri" shows all routes.  But none of them have any

Re: PF Outbound traffic Load Balancing over multiple tun/openvpn interfaces/tunnels

2018-09-12 Thread Stuart Henderson
On 2018-09-11, Andrew Lemin wrote: > Hi list, > > I use an OpenVPN based internet access service (like NordVPN, AirVPN etc). > > The issue with these public VPN services, is the VPN servers are always > congested. The most I’ll get is maybe 10Mbits through one server. > > Local connection is a fe

Re: doas.conf(5) question: when password required

2018-09-12 Thread Stuart Henderson
On 2018-09-12, Hajime Edakawa wrote: > Hello to all, > > I am sorry to say that I could not understand this behavior intuitively. > > $ id -Gn > hajime wheel > $ cat /etc/doas.conf > permit nopass hajime as root cmd mg# A > permit keepenv :wheel # B > $ doas mg /etc/doas.conf

ssh -X instead, workarounds (was Re: ssh -Y behaviour change

2018-09-12 Thread Luke A. Call
On 09-12 08:20, Brett Mahar wrote: > I know `ssh -X` is more secure, I use this when I can but use the `ssh -Y` > version when I need ability to copy and paste. While this probably doesn't solve your main problem, it might be useful afterward. For what it's worth, I have used ssh -X extensively

doas.conf(5) question: when password required

2018-09-12 Thread Hajime Edakawa
Hello to all, I am sorry to say that I could not understand this behavior intuitively. $ id -Gn hajime wheel $ cat /etc/doas.conf permit nopass hajime as root cmd mg# A permit keepenv :wheel # B $ doas mg /etc/doas.conf # no password, ok. ... $ But, $ id -Gn h

Re: Downloadable CIDR network calculator

2018-09-12 Thread Edward Lopez-Acosta
Is it possible to get this hosted on GitLab or GiHub for collaboration to improve the script? I have used, and like, sipcalc but options are always good. If you are using Python 3.6 or newer you may consider using f-strings as well for better readability when substituting variables into strings.

Re: ssh -Y behaviour change

2018-09-12 Thread Solene Rapenne
Brett Mahar wrote: > On Wed, 12 Sep 2018 08:13:27 +0200 > Solene Rapenne wrote: > > | Brett Mahar wrote: > > | > I recently updated my amd-64-current machine to the Sept 7th snapshot > (previous snapshot was July 17th). > | > > | > Prior to update both firefox and iridium browsers were able

Re: ssh -Y behaviour change

2018-09-12 Thread Darren Tucker
On 12 September 2018 at 16:13, Solene Rapenne wrote: [...] > I think you are supposed to use ssh -XY when using a remote X11 app. Nope, both -X and -Y enable ForwardX11, but -Y also enables ForwardX11Trusted. Unfortunately I don't see anything in the OpenSSH 7.7->7.8 changelog (https://www.opens

Re: Vultr hosting of OpenBSD

2018-09-12 Thread Sacha El Masry
> Without digging them up I did a quick google on openbsd issues vultr. > It pulled some things I saw before with 6.2 and timing, as well as > issues with the base image, and other ones talking about a setting in > KVM that was causing issues on certain servers. I use Vultr, happily, but I _can_ c

Re: Running your own mail server

2018-09-12 Thread Boudewijn Dijkstra
Op Sat, 08 Sep 2018 17:36:07 +0200 schreef Ken M : On Sat, Sep 08, 2018 at 11:32:00AM -0400, Jay Hart wrote: I've run my own email server for 15 years now I think. I stick with Linux for email server, OpenBSD for routing/firewall. I personally find this is the best of both worlds... Just my

Re: nsd question

2018-09-12 Thread Craig Skinner
Hi Peter, On Tue, 11 Sep 2018 16:12:48 +0200 Peter J. Philipp wrote: > > If I'm correct, in order to pull the zones to disk on a slave nsd > setup, one has to manually or crontab "nsd-control write > example.com". Is this correct? Sort of;- a slave NSD instance would XFER the zones from it's mas

Re: ssh -Y behaviour change

2018-09-12 Thread Brett Mahar
On Wed, 12 Sep 2018 08:13:27 +0200 Solene Rapenne wrote: | Brett Mahar wrote: | > I recently updated my amd-64-current machine to the Sept 7th snapshot (previous snapshot was July 17th). | > | > Prior to update both firefox and iridium browsers were able to be run using 'ssh -Y' as another u

Re: PF Outbound traffic Load Balancing over multiple tun/openvpn interfaces/tunnels

2018-09-12 Thread Andy Lemin
Hi Andreas, Thanks for your reply. Sorry I should have been more clear. I know that rdomains are the correct method with overlapping addressing. The challenge is that I cannot figure out how to get openvpn to initialise it’s resulting tunX interface directly into the correct rdomain? You norma

Re: Downloadable CIDR network calculator

2018-09-12 Thread Marc Peters
On Tue, Sep 11, 2018 at 11:59:04AM -0600, Andrew wrote: > > FWIW: a small network calculator without a python dependency is already > in packages. > > $> pkg_info ipcalc > Information for inst:ipcalc-1.4p0 > > Comment: > small network calculator > > Description: ipcalc is a small tool that oper