Re: 'post quantum' encryption algorithm(s) in latest libressl and upcoming 6.7 to chose

2020-05-08 Thread info
According to Damien Miller: >this is pretty much possible now, by enabling the experimental support for the XMSS PQ signature algorithm in the SSH

Re: 'post quantum' encryption algorithm(s) in latest libressl and upcoming 6.7 to chose

2020-05-08 Thread info
https://www.technologyreview.com/2018/02/21/145300/serious-quantum-computers-are-finally-here-what-are-we-going-to-do-with-them/ https://www.microsoft.com/en-us/research/project/post-quantum-ssh/ https://openquantumsafe.org/ Why not to add post quantum algos to the SSH mainline to make them easi

Re: IPv4 traffic over IPv6 tunnel approach

2020-05-08 Thread Martin
I have IPv6 point to point connection. Going to transmit IPv4 inside IPv6 tunnel. client has IPv6 ::::2 gateway has IPv6 ::::1 Martin ‐‐‐ Original Message ‐‐‐ On Friday, May 8, 2020 8:55 PM, Brian Brombacher wrote: > From your description, you want to pass IPv4

mysteriously disappearing pf state entries

2020-05-08 Thread Paul B. Henson
I'm running OpenBSD 6.6 operating as an inter-VLAN and border router using pf. Recently I wanted to use a nondefault state timeout for some UDP traffic traversing from my voip subnet to a provider off site. Within pf, there are three rules involved. The first is for traffic coming from the voi

Re: IPv4 traffic over IPv6 tunnel approach

2020-05-08 Thread Tom Smyth
Martin If I understand your question correctly ... PC1 --IPV6 Gateway1 so you have a public ipv6 address on PC1 and Gateway 1 hostname.gif should specify the real ipv6 address of PC1 and the real IPv6 address of gateway1 in it to establish the tunnel #setup

Re: macppc wsconsctl screen brightness

2020-05-08 Thread rgc
On Wed, May 06, 2020 at 06:51:21PM +0900, rgc wrote: > macppc.html shows i can do this via "wsconsctl -w XXX". > ** note that wsconsctl doesn't have a "-w" option so macppc.html might need > to be updated ** sent a patch to remove the "-w" in the HTML file wsconsctl code show the "w" option is for

Re: OpenBSD VPS hoster with unlimited/limited nonfiltered traffic

2020-05-08 Thread Martin
Good choice. Do they provide IP addresses from data-center's pool where VPSes located or from ISP range? Martin ‐‐‐ Original Message ‐‐‐ On Friday, May 8, 2020 5:51 PM, Rich Kulawiec wrote: > (This is a cut-and-paste of something I sent in response to a similar > question about FreeBSD

'post quantum' encryption algorithm(s) in latest libressl and upcoming 6.7 to chose

2020-05-08 Thread Martin
Which 'quantum' resistant algorithms can be used right now to prevent data decryption in future by 'quantum' computers (when they can do this) of currently collected data flows? Martin

Re: IPv4 traffic over IPv6 tunnel approach

2020-05-08 Thread Martin
Last thing I have to understand about gif(4) and IPv6 tunneling. Should I set gif(4) 'inet6 alias' = the same IPv6 of the local end of IPv6 tunnel interface or just set 'inet6 alias' for gif(4) in tunnel's IPv6 subnet? Martin ‐‐‐ Original Message ‐‐‐ On Friday, May 8, 2020 4:41 PM, Tom

Re: OpenBSD insecurity rumors from isopenbsdsecu.re

2020-05-08 Thread Kristjan Komlosi
I got mixed feelings... This list seems very cherry-picked from people with a predetermined disliking of OpenBSD. If you check out the mitigations tab, you won't be able to find anything new or undocumented there. It looks like we as a community triggered a guy who retaliated by key-smashing toget

IKEv2 VPN -- creating specific routes after sending 0.0.0.0/0 to a default gateway

2020-05-08 Thread marfabastewart
I have a roadwarrior client with traffic to 0.0.0.0/0 going through a remote gateway. I would like to also send _some_ traffic to a more specific, different host. However, traffic to that more spefic host always tries to use the remote gateway's SPI. In other words, once I say "0.0.0.0/0," I can't

PC Engines APU2 Leds control

2020-05-08 Thread Sacha
Dear all, I'm enjoying OpenBSD on PC Engines hardwares called APU2: https://www.pcengines.ch/apu2.htm There is 3 led, which could be very usefull to deliver informations to the endusers, but I never could control them with OpenBSD /o\ Is any way to make it work ? On PCEngines forum I got the fo

Re: IPv4 traffic over IPv6 tunnel approach

2020-05-08 Thread Brian Brombacher
>From your description, you want to pass IPv4 inside a tunnel that has an outer >protocol of IPv6. Your resulting hostname.gif0 looks like the exact opposite >of your description (IPv6 inside the tunnel with IPv4 outer). Clarify what you need please. Provide your existing hostname.if files for

Re: IPv4 traffic over IPv6 tunnel approach

2020-05-08 Thread Martin
Thanks for confirmation. Hope I understand gif(4) functionality right from its configuration. Can I set /etc/hostname.gif0 from client's side only like below: /etc/hostname.gif0 tunnel 10.20.30.40 195.203.212.221 inet6 alias 2001:05a8::0001::::8542 128 dest 2001:05a8::0001:00

Re: OpenBSD VPS hoster with unlimited/limited nonfiltered traffic

2020-05-08 Thread Rich Kulawiec
(This is a cut-and-paste of something I sent in response to a similar question about FreeBSD last month.) I've been a customer of Panix (panix.com) for years and they're terrific. Inexpensive, flexible, responsive support, VERY high clue level, and proactive about patches/fixes. (There have been

IPv4 traffic over IPv6 tunnel approach

2020-05-08 Thread Martin
I have IPv6 unidirectional tunnel between two machines. One of them is gateway, another one is a client. The goal is to route IPv4 packets over IPv6 tunnel from client to gateway and NAT IPv4 packet to egress on gateway machine. May I use gif(4) for it or what is the best approach to traverse IP

Re: IPv4 traffic over IPv6 tunnel approach

2020-05-08 Thread Tom Smyth
Hi Martin, If I understand your question correctly you need 2 endpoints to the tunnel... for gif(4) or any gre((4) based tunnel you need the interface setup on both the client and the server (gateway) if you have a gateway serving multiple clients... then you need one interface per client that y

gnutls cannot connect to openbsd.org -- TLS 1.3 issue?

2020-05-08 Thread openbsdlists
Hi, starting a couple of days ago, applications linked against gnutls can no longer connect to https://www.openbsd.org. Short output: $ gnutls-cli openbsd.org Processed 133 CA certificate(s). Resolving 'openbsd.org:443'... Connecting to '129.128.5.194:443'... *** Fatal error:

Re: OpenBSD insecurity rumors from isopenbsdsecu.re

2020-05-08 Thread Aisha Tammy
On 5/7/20 7:02 PM, Aaron Mason wrote: > On Fri, May 8, 2020 at 2:30 AM jeanfrancois wrote: >> >> As long as there's no material published it's worth just any other word. >> > > To quote Douglas Adams on whether you can trust people on the > internet, "of course not, it's just people talking". >

Re: IPv4 traffic over IPv6 tunnel approach

2020-05-08 Thread Kristjan Komlosi
gif(4) should work fine, as it's designed to do what you described. The best approach depends on the level of security you want to achieve. IPIP tunnels aren't encrypted... regards, kristjan On 5/8/20 3:32 PM, Martin wrote: > I have IPv6 unidirectional tunnel between two machines. One of them is