Re: help configuring an ipv6 wg vpn

2025-07-28 Thread B. Atticus Grobe
On Mon, Jul 28, 2025, 02:38 Claudio Jeker wrote: > On Sun, Jul 27, 2025 at 11:51:25PM +0200, Omar Polo wrote: > > Florian Obser wrote: > > > RFC 4291 2.1: > > >All interfaces are required to have at least one Link-Local unicast > > >address > > > > thanks for the pointer! Now my questio

Re: isolate a wireguard vpn in rdomain

2025-02-28 Thread B. Atticus Grobe
My understanding is that the host doesn't have an routable connection from rdomain 0 to rdomain 1. wg1 and lo1 are specific to that rdomain, and sshd is 'attached' to rdomain 0. For the VM to interact directly with the host, you would have to add pair interfaces (see ifconfig man page) to route tr

Re: isolate a wireguard vpn in rdomain

2025-02-27 Thread B. Atticus Grobe
On Thu Feb 27, 2025 at 4:35 PM CST, alpha beta wrote: > Hello, I have a single homed VM and I'm trying to isolate a wireguard > interface inside a dedicated rdomain. All my peers except this host > are behind NAT, and this VM has a static IP. I would like to use it > to connect the several LANs beh

Re: Can't get my user crontab running properly

2024-11-21 Thread B. Atticus Grobe
On Thu Nov 21, 2024 at 1:19 PM CST, Dan wrote: > > Hello, > > I'm trying to test in my dev environment the first implementation > of a web app that should run based on the result of some shell scripts > started by crontab. > > Problem arising immediately is that I'm not able to get crontab running

Re: How safe are Co language module downloads?

2024-10-22 Thread B. Atticus Grobe
On Tue Oct 22, 2024 at 6:46 PM CDT, nisp1953 wrote: > On Tue, Oct 22, 2024 at 5:38 PM Geoff Steckel wrote: >> >> Pretty much any program can access its current working directory. >> > If you try and share your desktop through Jitsi, pledge will shutdown > your web browser. this is... not quite co

Re: accidentally overwritten wrong drive with DD, please help

2024-06-26 Thread B. Atticus Grobe
This hasn't necessarily been explained very simply up to this point, so I'll give it a go. You are not going to be attempting to rebuild the filesystem or in any way make it functional. This is a key point to understand; the filesystem is done. Permanently broken. This is also the reason people k

Re: accidentally overwritten wrong drive with DD, please help

2024-06-24 Thread B. Atticus Grobe
A word of warning: even multiple overwrites are not guaranteed to erase any kind of flash-based storage. This applies even to some spinning rust now that have intermediate flash storage caches on them (although those tend to be enterprise-level devices). SSD/NVME's made by a reputable manufacturer

Re: Failure to start vmd

2023-10-03 Thread B. Atticus Grobe
The E8400 processor doesn't support extended page tables, which vmm requires. AFAIK, all modern hypervisors require this.

Re: I nuked my filesystem

2023-09-26 Thread B. Atticus Grobe
restore from backup. scan_ffs doesn't find ffs2 filesystems.

Re: Route based IPsec

2023-05-31 Thread B. Atticus Grobe
On 5/31/23 05:03, Valdrin MUJA wrote: > Hi Claudio & David, > > Wireguard can work behind NAT. In that case maybe the solution is wireguard + BGP. I've been using OSPF over wireguard for several years now. It works quite well. You just have to add `wgaip 224.0.0.0/8' to allow multicast over

Re: wg(4) on router - how to get working with clients

2022-08-08 Thread B. Atticus Grobe
I've been running wg since it was introduced into the kernel without any issues. local pf.conf: ... pass in on wg0 from (wg0:network) to any match out on wg0 from any to any nat-to (wg0) ... pass out modulate state remote pf.conf: ... pass in on wg0 pass out on wg0 match out on vio0 nat-to (vio0)

Re: Trouble with lpr and Brother wireless printer

2022-08-05 Thread B. Atticus Grobe
I'm sorry the filter didn't work for you. I'm not using OpenBSD as a desktop right now, but I abused my router a bit to test, and can confirm that with an HL-L2370DW, the following printcap entry works, along with the filter. I know you've basically already moved on, but if you feel like giving it

Trouble with lpr and Brother wireless printer

2022-07-31 Thread B. Atticus Grobe
I use an HL-L2370DW which only accepts PCL on BINARY_P1. I think it likely that yours acts the same. You'll have to tell lp to send the output through a filter, using (iirc) the vf= option in printcap. This is what i used for a filter: #!/bin/sh gs -sPAPERSIZE=letter -sDEVICE=pxlmono -sOutputFile=

Fanless amd64 sytem recommendations

2022-07-10 Thread B. Atticus Grobe
I've been running a Hewlett-Packard HP t620 Quad Core TC for a couple of years now in that role, with the AMD GX-415GA SOC in it. It's the bigger brother of that found in the APU systems. The stock configuration usually has 4GB of RAM in them, with a single re(4) 1GBps NIC, and a 16GB mSATA SSD.

Hardware for OpenBSD based access point

2022-03-13 Thread Atticus
AFAIK, OpenBSD doesn't support .11ac or .11ax at all, with only a very limited number of cards supporting Host AP mode. The only .11n ones I found being athn(4), bwfm(4), and ral(4). The (few) others that support Host AP mode only do so in .11g or .11b. In the future, I would take a look through se

SIP ALG and VoIP

2022-01-10 Thread Atticus
It isn't just SIP. You will need to set up NAT traversal and make sure RTP traffic can pass as well. Setting up a STUN server and configuring the clients to use it should aid in the NAT portion. The RTP traffic should be fine as long as pf is being stateful. If the phones register over SIP fine, bu

Add -R alias to -r for scp(1)

2020-01-02 Thread Atticus
Second on adding an alias. I had no idea it was deprecated, and have never used -R at all... It never occurred to me to read the man page for cp. -- Byron Grobe On Thu, Jan 2, 2020, 11:57 AM Ingo Schwarze wrote: > Hi Marc, > > Marc Espie wrote on Thu, Jan 02, 2020 at 11:30:35AM +0100: > > > And