Re: Does OpenBSD have the equivalent of Linux Bind Mounts?

2024-11-30 Thread Kenneth Gober
On Sat, Nov 30, 2024 at 4:26 PM Steve Litt wrote: > Does OpenBSD have the equivalent of Linux Bind Mounts? > You can use NFS to do something like this. For example, if you have in fstab(5): {duid}.a /nfs/archive ffs rw,noatime,nodev,nosuid 1 3 localhost:/nfs/archive/dist/OpenBSD /var/www/ftp/pu

Re: Assing domain name to client vm

2024-11-25 Thread Kenneth Gober
On Mon, Nov 25, 2024 at 6:40 AM prx wrote: > Hi, > I can't figure out how to assign a domain name to a client vm. > What I need to do is to redirect traffic on the appropriate vm according > to the domain name. > The way you do this is to assign a unique external IP address for each domain name.

Re: disklabel won't write configuration.

2024-10-29 Thread Kenneth Gober
On Tue, Oct 29, 2024 at 3:42 PM nisp1953 wrote: > I am usinOpenBSD 7.6 GENERIC.MP#338 amd64 > > I have a 1 TB disk I formatted under Linux. I wanted to change the > disklabel from: > [...] > sd1> m i > offset: [64] > size: [1953525040] > FS type: [unknown] ext2fs > sd1*> p > OpenBSD area: 64-1953

Re: Need some information about fork(2)

2024-09-23 Thread Kenneth Gober
On Mon, Sep 23, 2024 at 9:21 AM Chris Bennett < cpb_m...@bennettconstruction.us> wrote: > So if I run small program A that has some leaks. I don't free a few > things as suggested. Then I run program B that happens to use those > memory addresses that didn't get freed by program A, what happens th

Re: Automatic Disk Partitioning

2024-08-05 Thread Kenneth Gober
On Sun, Aug 4, 2024 at 6:24 PM David Uhden Collado wrote: > I would like to understand the rationale behind this design choice. Is > there a specific reason why the automatic partitioning is limited to > around 350GB for system partitions? Any insights or explanations you can > provide would be g

Re: pf.conf issue.

2024-07-15 Thread Kenneth Gober
On Mon, Jul 15, 2024 at 6:33 AM Irreverent Monk wrote: > pass in on egress inet6 proto icmp6 all \ > > icmp6-type { routeradv neighbrsol neighbradv } > > pass in on egress inet6 proto udp \ > > from fe80::/10 port dhcpv6-server \ > > to fe80::/10 port dhcpv6-client \ > > no state > > > bl

Re: Filesystem corruption on OpenBSD routers after power outage?

2024-07-10 Thread Kenneth Gober
On Wed, Jul 10, 2024 at 9:45 AM Tom Smyth wrote: > are there other directories that contain files that regularly change > that should be mfs mounted ? > Logs for cron go into /var/cron by default. This can be changed by modifying /etc/syslog.conf, but if you do this don't forget to update /etc/n

Re: Offline syspatch

2024-07-03 Thread Kenneth Gober
On Sat, Jun 29, 2024 at 3:29 AM jonathon575 wrote: > For the current release 7.5, specifically for security patches, if we > downloaded the security patches located at any of the mirror links, for > example, > > https://mirror.hs-esslingen.de/pub/OpenBSD/syspatch/7.5/amd64/ > > manually verified

Re: sshd /var/empty

2024-06-18 Thread Kenneth Gober
On Tue, Jun 18, 2024 at 4:14 PM 4 wrote: > i'm sorry, i'm not smart, but i have a several questions. imagine that we > launch a ship far into space. we have only one communication channel with > this ship, and one day, when the ship is already very far away from us, > communication channel stops

Re: obsd wifi

2024-05-04 Thread Kenneth Gober
On Sat, May 4, 2024 at 2:05 PM Gustavo Rios wrote: > I have just installed OpenBSD in my brand new notebook. It is a dell > notebook that came with just a wifi NIC. How do i discover the name o my > wifi nic ? > If your nic is supported, it will appear in the list of configured network interface

Re: No internet after connecting to wifi

2024-03-22 Thread Kenneth Gober
On Wed, Mar 20, 2024 at 2:17 PM Patcher wrote: > Hello, > > I am having problem connecting to internet in my openbsd desktop. During > installation I was unable to connect to my mobile hotspot (don't have > wifi). I didn't pay much attention to it and continued to installation. > After installati

Re: can't find PID

2024-03-05 Thread Kenneth Gober
On Tue, Mar 5, 2024 at 12:24 PM Markus Wernig wrote: > When I reload the pf ruleset with pfctl, the number in the pid field > changes. So my assumption is that it is the pid of the pfctl process > that inserted the rule. Is that correct? > I believe you are correct. while running tcpdump in ano

Re: mirror.bytemark.co.uk appears to have removed all OpenBSD content?

2024-02-27 Thread Kenneth Gober
On Mon, Feb 26, 2024 at 9:01 PM Peter Kay wrote: > Fortunately there's a couple of archives with pretty much every > OpenBSD release ever, so sysupgrade is currently rather busy > Slightly off topic, but does anyone know of any archives that have packages for 3.0, 3.1, 3.2, and/or 3.3? Especial

Re: No dhcp renewal of IP

2024-02-20 Thread Kenneth Gober
On Sun, Feb 18, 2024 at 4:15 AM Marcus MERIGHI wrote: > Hello, > > this is not to answer the original question, but... > > kgo...@gmail.com (Kenneth Gober), 2024.02.17 (Sat) 22:15 (CET): > > On Sat, Feb 17, 2024 at 10:47 AM Luis Mendes > wrote: > > > The int

Re: No dhcp renewal of IP

2024-02-17 Thread Kenneth Gober
On Sat, Feb 17, 2024 at 10:47 AM Luis Mendes wrote: > The interface ure0 is the gateway to the Internet, connected to the ISP. > > Somehow, when this interface loses the IP, the lease is not renewed. > This is the rule I would use in my pf.conf to allow my router to send DHCP requests to my ISP:

Re: Out of memory error when build OpenBSD Base/LLVM

2024-02-17 Thread Kenneth Gober
On Sat, Feb 17, 2024 at 10:07 AM Shivam Gupta wrote: > I recently installed OpenBSD OS on my ASUS laptop quad core pentium with 4 > GB RAM and 1 TB HDD. > > I was following the guide to build the system from source. But in `make > build` step it gets a memory error when building LLVM. > I have b

Re: Partition completely wiped out, why?

2024-01-11 Thread Kenneth Gober
On Wed, Jan 10, 2024 at 7:44 PM Jonas Bechtel wrote: > After mounting with right ufstype, I saw right data. (Probably this is > what I remember. Files in root directory looked well there) > > In installation I went to manual disklabel edit. One of the steps there > was to assign the mount point /

Re: installboot sd0 fails while installing from USB drive

2024-01-02 Thread Kenneth Gober
On Sun, Dec 31, 2023 at 11:07 AM Kenneth Gober wrote: > On Mon, Dec 25, 2023 at 6:08 PM Gábor Papp wrote: > >> I am trying to install OpenBSD 7.4 on my ThinkPad L390. This bug only >> happens on this certain laptop. >> I could install OpenBSD 7.3 just fine on this machin

Re: installboot sd0 fails while installing from USB drive

2023-12-31 Thread Kenneth Gober
On Mon, Dec 25, 2023 at 6:08 PM Gábor Papp wrote: > I am trying to install OpenBSD 7.4 on my ThinkPad L390. This bug only > happens on this certain laptop. > I could install OpenBSD 7.3 just fine on this machine, so I think this > is a bug happens because of this weird combination of 7.4 and mayb

Re: Hardware RAID on Poweredge Servers

2023-03-30 Thread Kenneth Gober
On Thu, Mar 30, 2023 at 12:37 PM Kihaguru Gathura wrote: > Is hardware RAID on Poweredge servers (T340, PERC H330 in particular) > generally stable enough for production or is it safer to stick with OpenBSD > softraid? > I haven't used the H330, but the PERC 5/i and the PERC H700 have worked fin

Re: disabling horizontal scroll in ksh

2023-03-19 Thread Kenneth Gober
On Sun, Mar 19, 2023 at 7:36 AM sewn wrote: > hi, i've recently switched to ksh and i've been very annoyed by the > horizontal scroll feature (happens when a commmand is longer than the > terminal's width) is there anyway to disable this feature? i would > prefer > to see the whole command, like

Re: redirection puzzle

2022-12-05 Thread Kenneth Gober
On Fri, Dec 2, 2022 at 10:17 AM wrote: > I needed to show the stdout of a command as well as pass > it to another command's stdin. This works: > > odin:~$ echo 1 | tee /dev/ttyp8 | sed 's/1/2/' > 1 > 2 > odin:~$ > > where /dev/ttyp8 is the result of the tty command: > Have you considered: $ ec

Re: faq/faq6.html#Wireless : nwid vs join

2022-10-17 Thread Kenneth Gober
On Mon, Oct 17, 2022 at 5:37 AM tux2bsd wrote: > > nwid puffyuberalles wpakey passwordhere > > inet autoconf > > > > Or, for multiple access points: > > > > join home-net wpakey passwordhere > > join work-net wpakey passwordhere > > join cafe-wifi > > inet autoconf > > It isn't clear why one uses

Re: dump(8) is slow

2022-08-09 Thread Kenneth Gober
On Tue, Aug 9, 2022 at 8:25 AM Christian Weisgerber wrote: > Moving 9TB with dump|restore from an old hard disk to a bigger one > reminded me again that dump(8) is, well, slow: > > DUMP: 9104433830 tape blocks > DUMP: Date of this level 0 dump: Sat Aug 6 16:36:52 2022 > ... > DUMP: Date

Re: rpki-client disk utilization / noting mfs in man?

2022-07-31 Thread Kenneth Gober
On Sun, Jul 31, 2022 at 8:35 AM Tobias Fiebig < tob...@reads-this-mailinglist.com> wrote: > > You could periodically rsync it to permanent storage and use mount_mfs' > > -P option to populate at boot. > Really good point; I will give setting that up a try later today and add > that to the > blogpo

Re: Freeze on OpenBSD 7.1

2022-07-18 Thread Kenneth Gober
On Sun, Jul 17, 2022 at 4:51 PM wrote: > Hello, > > I encounter a freeze on my OpenBSD 7.1 router. I have to reboot it. When > that happens, there's nothing special in the /var/log/messages file : > Jul 17 06:00:01 system syslogd[8620]: restart > Jul 17 21:00:25 system syslogd[97469]: start > Jul

Re: mSATA in APU2D0

2022-07-13 Thread Kenneth Gober
On Wed, Jul 6, 2022 at 7:33 AM Jan Stary wrote: > This is current/amd64 on an APU2D0, dmesg below > Everything runs just fine from a SD card. > > My problem is it does not boot with this mSATA disk in. > The leds of the mSATA and the leds of the APU keep blinking, > the console keeps repeating >

Re: Question to usbdevs and dmesg

2021-11-14 Thread Kenneth Gober
On Sun, Nov 14, 2021 at 9:18 AM Sven Wolf wrote: > I've attached an XBOX 360 controller to my system. > The controller gets detected as: > usbdev: > addr 02: 045e:028e \M-)Microsoft Corporation, Controller > > dmesg: > uhidev1 at uhub1 port 1 configuration 1 interface 0 "\M-)Microsoft > C

Re: Applying scan_ffs output to disklabel?

2021-08-29 Thread Kenneth Gober
On Sun, Aug 29, 2021 at 5:35 PM Jason Morris wrote: > I'm in the process of recovering my drive (fat fingered dd and blew away > the partitions). I've obtained the following output from scan_ffs but not > sure how to apply this to recreate the disklabel. Running disklabel -R with > this output do

Re: NAT on same interface as vlan on OpenBSD 6.8

2021-05-10 Thread Kenneth Gober
On Mon, May 10, 2021 at 5:26 AM Dirk Coetzee wrote: > I am hoping to create a pf.conf configuration that has VLAN’s and NAT via > the same (physical) interface. The hardware is only capable of having a > single Ethernet interface. > > vlan100 is an isolated network to setup servers and is connect

Re: [Ver3.6/3.9] Old version need help

2021-03-30 Thread Kenneth Gober
On Tue, Mar 30, 2021 at 4:06 AM cclai wrote: > So I hope that your organization can provide > an installation package "3.6 and 3.9 version" to solve the problem. > CD copies of 3.6 and 3.9 are still available for purchase from Computer Shop of Calgary but there is an issue with their web site so

Re: Samba server : issue with file transfer from Windows network with share special properties

2021-03-24 Thread Kenneth Gober
On Mon, Mar 22, 2021 at 9:11 AM jeanfrancois wrote: > It has sometimes error messages when copy which I tracked to being from > Windows network to the Samba server where source files or folders's > properties are not supported (like archiving option). > > Has someone a fix for this, or can poin

Re: OpenBSD as a NAS

2020-12-03 Thread Kenneth Gober
On Wed, Dec 2, 2020 at 6:19 PM Ashton Fagg wrote: > a) Is softraid reliable enough to support my use-case? Does anyone have > anecdotes to encourage/discourage use of softraid for this application? > I believe softraid is reliable enough, but I don't use it so I can't say so from personal experi

Re: Multiple USB NICs

2020-11-17 Thread Kenneth Gober
On Tue, Nov 17, 2020 at 8:15 AM Mihai Popescu wrote: > Lee Nelson wrote: > > > If I have multiple USB Ethernet adapters of identical make and model, > > how does OpenBSD distinguish them over time. > > Is this happening to APU with same hardware interfaces, too? > No, 'wired in' interfaces are

Re: Large Filesystem

2020-11-15 Thread Kenneth Gober
On Sun, Nov 15, 2020 at 8:59 AM Mischa wrote: > On 15 Nov at 14:52, Otto Moerbeek wrote: > > fsck wil get slower once you start filling it, but since your original > > fs had about 104k files it expect it not getting too bad. If the speed > > for your usecase is good as well I guess you should b

Re: Creating a Partition for RAID Arrays

2020-09-17 Thread Kenneth Gober
On Wed, Sep 16, 2020 at 11:52 PM Justin Noor wrote: > We need to create a partition on an OpenBSD server for the sole purpose of > mounting RAID arrays. > > The mount point would be something like: > > /data > > Then we will create directories in that partition and mount the arrays: > > /data/rai

Re: dump LOB status

2020-09-15 Thread Kenneth Gober
On Tue, Sep 15, 2020 at 12:04 PM Jose Soares wrote: > I am facing this when issuing the dump command of a "large" file system > (2.7TB). > dump command has finished successfully for the other smaller file systems. > > On Tue, Sep 15, 2020 at 4:47 PM Stuart Henderson > wrote: > > On 2020-09-15, J

Re: Crashing 64bit (AMD) 6.7 kernel on APU2

2020-09-01 Thread Kenneth Gober
On Sun, Aug 30, 2020 at 2:55 AM Damian McGuckin wrote: > This is on an APU2 with an AMD64 release. > > Has anybody seen the same problem? > I have an APU2E4 running 6.7/amd64 and haven't had any trouble with it. I also have two running 6.6/amd64, one running 6.4/amd64, and an APU2D4 running 6.4

Re: Can I boot without GPU ("headless")?

2020-08-29 Thread Kenneth Gober
On Fri, Aug 28, 2020 at 3:32 PM Henry W. Peterson < henrywillpeter...@outlook.com> wrote: > Do I need a graphics card installed all the time? > > The motherboard has pins for a COM serial port, during installation I was > asked if I wanted "com0" to become the default console. I said no. > I beli

Re: DHCPD issue

2020-07-20 Thread Kenneth Gober
On Mon, Jul 20, 2020 at 3:06 AM Charlie Burnett wrote: > 1. I cannot connect to the internet properly unless only em0 (which is the > ethernet port I have connected to the external network) has a hostname > file- I have to either add back the hostname files after boot and run > /etc/netsetup or m

Re: .iso installer file sets

2020-07-02 Thread Kenneth Gober
On Thu, Jul 2, 2020 at 4:55 AM Mark Novem Grisola wrote: > files sets not included in "install67.iso" installer? It suppose to be > included as indicated in the documentation "/6.7/amd64/INSTALL.amd64"? > Sets are included in the ISO image, but they are not in the bsd.rd ramdisk kernel itself.

Re: late pppoe address

2020-06-06 Thread Kenneth Gober
On Sat, Jun 6, 2020 at 11:57 AM Jan Stary wrote: > This is current/amd64 on an APU2. > The egress is XDSL pppoe(4) over vlan(4) over em(4), > > ... > > Are people having the same problem? > Are you doing something about the late ifconfig? > I have some routers that connect to DSL using pppoe(4)

Re: pf table for all publicly routable ipv4 addresses

2020-05-05 Thread Kenneth Gober
On Mon, May 4, 2020 at 4:43 PM Marko Cupać wrote: > ...so I can permit hosts on guest vlan access Internet hosts, but not > hosts on other private vlans similar to: > > block log all > pass in on $guest_vlan from $guest_vlan:network to > I suspect the best path forward here is: block log all p

Re: ttyC0 floods with error messages

2019-12-15 Thread Kenneth Gober
On Fri, Dec 13, 2019 at 8:42 AM wrote: > After boot, the following error message floods the virtual console on > ttyC0 repeatedly, rest of virtuals console stay clear somehow. Is there a > way to > treat this permanently, other than Ctrl-l everytime, or disconnecting the > mouse. > There must be

Re: Turn off Swap on boot disk

2019-11-21 Thread Kenneth Gober
On Thu, Nov 21, 2019 at 3:50 AM Sean Kamath wrote: > I have a bunch of Alix 2d13 boxes. With 6.6, I’ve found I need more swap > than the default layout on a 2G compact flash drive has. So, I got some 1G > USB thumb drives, and want to use JUST those for swap. Despite different > attempts (sett

Re: Tape drive

2019-11-18 Thread Kenneth Gober
On Sun, Nov 17, 2019 at 6:00 PM Pietro Paolini < pietro.paol...@cognitivecredit.com> wrote: > On a x86-64 Dell, the tape drive is an HP StorageWorks Ultrium 960. > > # tar cf /dev/rst0 ./test.txt > # mt -f /dev/nrst0 rewind > # tar xf /dev/rst0 .out > tar: Failed read on archive volum

Re: 6.6 VMs need 320Mb of ram in bhyve

2019-10-25 Thread Kenneth Gober
On Fri, Oct 25, 2019 at 7:33 AM Noth wrote: >I just upgraded a couple of VMs to 6.6 (thanks to everyone for > another brilliant release!) that used to manage in 256Mb of RAM. They > crash at the stage the kernel loads with that amount in 6.6, and with > 288Mb the kernel loading process hangs.

Re: How to debug hanging machines / proc: table is full

2019-07-09 Thread Kenneth Gober
On Tue, Jul 2, 2019 at 10:06 AM Raimo Niskanen < raimo+open...@erix.ericsson.se> wrote: > In /var/log/messages I find suspicious entries "/bsd: proc: table is full" > possibly before the machines become inresponsive, but these entries appear > many more times before that point. And after this "ta

Re: Filesystem corruption on OpenBSD routers after power outage?

2019-06-05 Thread Kenneth Gober
On Tue, Jun 4, 2019 at 3:34 PM Mogens Jensen wrote: > Can anyone with experience running OpenBSD routers without UPS, tell if > filesystem corruption is going to be a problem after power outages, or > if there are any officially supported ways to make the system resilient > enough to not break af

Re: 6.4 - Unable to boot after successfully installed

2018-11-07 Thread Kenneth Gober
On Wed, Nov 7, 2018 at 9:29 AM Luthing wrote: > I am partitioning my disk manually like : > ~80% for /root partition > ~20% for swap Try installing again using the default disklabel slice layout. If that works that means your root file system is too big. I rarely make my root partition any larg

Re: Moving filesystems around

2018-07-26 Thread Kenneth Gober
On Wed, Jul 25, 2018 at 3:32 PM Jay Hart wrote: > /var is a 6.3G partition (wd0e) using 50M of space > /usr is a 2.0G partition (wd0f) using 1.6G of space > > What would the recommended procedure to use to swap these two partitions? I wouldn't swap them exactly, rather I would make a /usr/local (

Re: How to have pf filter packets on combination of incoming and outgoing interface (for packets transiting the firewall)?

2018-05-07 Thread Kenneth Gober
On Mon, May 7, 2018 at 12:40 PM, Martin Gignac wrote: > set state-policy if-bound > > block > > pass in on $lab01 tag from_lab01 > pass in on $lab02 tag from_lab02 > > pass in on $lab02 tagged from_lab01 > block out on $lab01 tagged from_lab02 > > Does this look like it makes sense? Is

Re: state-policy floating Expectations

2018-05-01 Thread Kenneth Gober
On Thu, Apr 26, 2018 at 2:40 PM, Daniel Melameth wrote: > The man page defines this as "States can match packets on any > interfaces." I understood this to mean that state created on one > interface would automatically create state, or allow a related match, > on another interface, but this is no

Re: httpd - serving index.html & index.php at the same time

2018-04-12 Thread Kenneth Gober
On Tue, Apr 10, 2018 at 3:24 PM, Mischa wrote: > Is there a way to serve both static and dynamic content, eg. index.html and > index.php within the same server { } definition? > I am looking for something like: > > server "default" { > listen on $ext_addr port 80 > root "/htdocs" > di

Re: SHA256.sig not contained in install62.iso

2018-02-21 Thread Kenneth Gober
On Wed, Feb 21, 2018 at 4:10 AM, Jean-Michel Pouré wrote: > I know this is a little bit farfetched, pardon my ignorence, but > OpenBSD seeems vulnerable on first installation. In case of DNS > poisoning, what can stop a virus from forwarding the installer to a > false SHA256.sig and false reposito

Re: signify-openbsd to crypt'ly verify install62.iso in linux

2018-02-09 Thread Kenneth Gober
On Fri, Feb 9, 2018 at 4:44 PM, Kevin Chadwick wrote: > On Fri, 09 Feb 2018 16:11:01 -0500 >> but I can't for the life of me figure out how to cryptographically >> verify the legitimacy of install62.iso with SHA256.sig. > > I've never done it on linux however try > > signify -C -p /etc/signify/ope

Re: missing /var/db

2018-02-01 Thread Kenneth Gober
On Thu, Feb 1, 2018 at 9:28 AM, Ultramedia Libertad wrote: > the disk with the partition /var to dead then we have replaced it, but > accidentally and stupidly I lost some sections of /var as /var/db so now I > try to verify the install and uninstall packages but I can not go away > /var/db/pkg T

Re: "uhub1: device problem, disabling port 1" on Zenbook

2018-01-28 Thread Kenneth Gober
On Sun, Jan 28, 2018 at 4:23 AM, Maximilian Pichler wrote: > I'm trying to install OpenBSD 6.2 on a Zenbook (UX390UA) but it is > unable to find the installer USB key (after booting from it). The key > is connected via the USB-A/C adapter/hub that comes with the laptop. > The same hardware works f

Re: IPsec help: too much NAT!

2018-01-26 Thread Kenneth Gober
When faced with an ISP modem/router, I generally try to switch it to bridge mode and move the PPPoE / DHCP client formerly handled by the ISP hardware to the OpenBSD system instead. This rather simplifies things if you can make it work because then your OpenBSD system has the Internet-facing addre

Re: Simplifying pf-rules

2018-01-07 Thread Kenneth Gober
On Thu, Jan 4, 2018 at 8:09 AM, Jon S wrote: > This led to my first experieces with pf. After some work I came up with > whats below. It works as I want it to work, but I wonder if there is a way > to create a rule where incomming traffic to the internal NIC (re0) is > passed if it is targeted for

Re: public key-only accounts

2017-11-22 Thread Kenneth Gober
On Tue, Nov 21, 2017 at 1:50 AM, Jan Stary wrote: > Running security(8): > > Checking the /etc/master.passwd file: > Login maxa is off but still has a valid shell and alternate access files in >home directory are still readable. > > > According to master.passwd(5) > > lo

Re: I'm stuck with pf - can someone with some experience check my rules please? Thanks

2017-10-13 Thread Kenneth Gober
On Thu, Oct 12, 2017 at 7:48 AM, tec...@protonmail.com wrote: > I have been reading through the Book of PF (3rd edition) and other resources > on the web (FAQ), so far so good but I'm hitting some roadblocks. This > router I have built is also acting as a client to an external VPN server, it >

Re: permission denied local nfs mount

2017-07-31 Thread Kenneth Gober
On Fri, Jul 28, 2017 at 7:36 PM, Allan Streib wrote: > $ cat /etc/exports > /home/astreib/work/new-site.org -ro -network=127.0.0.1 > > Everyhing works if I remove the "-network=" from /etc/exports, i.e.: > > /home/astreib/work/new-site.org -ro 127.0.0.1 > > I don't really understand why? If you d

Re: Split zone DNS?

2017-07-31 Thread Kenneth Gober
On Fri, Jul 28, 2017 at 9:58 AM, Steve Williams wrote: > I would like to run a local resolver on my internal network that will > resolve all my hosts on my local network to IP addresses on my local > network(s) rather than resolving to their public IP addresses. > > What is the best tool to accomp

Re: Question about pf tables and limitation of addresses 0.0.0.0/0 or 0/0

2017-07-31 Thread Kenneth Gober
On Thu, Jul 27, 2017 at 12:52 PM, Donald Clark Jackson wrote: > table const { !10/8 !172.16/12 !192.168/16 0/0 } > guest_hq_if = "em3" > guest_hq_net = $guest_hq_if:network > pass log (matches) from $guest_hq_net to keep state > > match out log (matches) on $external_if inet from $guest_hq_net n

Re: OpenBSD NFS: Windows 10 writes wrong uid

2017-06-13 Thread Kenneth Gober
On Mon, Jun 12, 2017 at 12:58 PM, Rupert Gallagher wrote: > On problem 2, > > if a user has group write permission on a folder, it has permission to write > its own files and those of same group membership in that folder, provided the > group permission is set on the file by its owner. If a file

Re: Advice on migration to OpenBSD

2017-05-15 Thread Kenneth Gober
On Sat, May 13, 2017 at 9:02 PM, Kim Blackwood wrote: > problem with the abovesetup. However, migrating to OpenBSD on my personal > laptop and desktopI suspect will give me some problems mounting both > Samba shares andexternal drives. We could change the file systems on the > external drives to

Re: Does OpenBSD's pf prevents Hole punching?

2017-04-08 Thread Kenneth Gober
On Sat, Apr 8, 2017 at 4:39 AM, Marina Ala wrote: > I heard that OpenBSD's pf can prevent Hole punching: > Is it true? I just cannot google on it, but if someone would answer this > thread then the world can google for it from that point :D PF doesn't prevent hole punching by itself, but dependi

NFS uid/gid remapping for root

2017-03-31 Thread Kenneth Gober
The man page for exports(5) claims that remote accesses by root will be mapped to uid/gid -2:-2 unless overridden via the -maproot or -mapall options. But if root creates a file the result is clearly different: # touch test # ls -alF total 32 drwxrwxrwx 2 ken 999 512 Ap

Re: OpenBSD's HTTPD - I can't figure out how to disable the chroot

2017-02-13 Thread Kenneth Gober
On Sun, Feb 12, 2017 at 6:03 PM, wrote: > I have a special use case for the HTTPD server, I would like to disable > the chroot but can't seem to get it working correctly. While I can't help you with your httpd chroot issue, I can suggest that if you need to access a part of the filesystem outsid

Re: Non-free firmware without asking the user

2017-01-07 Thread Kenneth Gober
On Sat, Jan 7, 2017 at 11:35 AM, Stefan Sperling wrote: > On Sat, Jan 07, 2017 at 10:16:39AM -0500, Kenneth Gober wrote: >> The difference is, closed source firmware runs on the device itself >> and if it's buggy, generally the most it will do is make the device >> appe

Re: Non-free firmware without asking the user

2017-01-07 Thread Kenneth Gober
On Fri, Jan 6, 2017 at 4:45 PM, Martin Hanson wrote: > Yes, it can be argued that since we cannot get any open hardware at all it doesn't matter whether the firmware is located on a ROM or if it's installed by the kernel, but if we use that logic we might as well just use whatever binary driver bl

Re: Recommendation for firewall appliance running of and OpenBSD

2016-11-28 Thread Kenneth Gober
On Thu, Nov 24, 2016 at 3:15 PM, Tito Mari Francis H. Escaño wrote: > Hi everyone, > Can somebody please recommend me a firewall appliance that can run OpenBSD and > pf, and can be upgradeable to the latest version? It would be a great plus if > the appliance can also be configured as part of CARP

Re: strange behaviour with route-to, default route, and ping -I

2016-11-23 Thread Kenneth Gober
On Mon, Nov 21, 2016 at 12:10 PM, Stefan Sperling wrote: > On Mon, Nov 21, 2016 at 10:43:17AM -0500, Kenneth Gober wrote: >> I get the impression that route-to is applied when a packet enters the >> router, >> e.g. as part of a "pass in" rule, and that it is used t

Re: Making motd great again

2016-11-21 Thread Kenneth Gober
On Sun, Nov 20, 2016 at 1:22 AM, Gareth Nelson wrote: > Filling the terminal isn't really a major issue though is it? > Terminals do scroll after all Framebuffer consoles don't. Although they're a bit larger than 80x24 so it matters less. If a novice user doesn't know about the "help" command,

Re: strange behaviour with route-to, default route, and ping -I

2016-11-21 Thread Kenneth Gober
On Mon, Nov 21, 2016 at 4:21 AM, Comète wrote: > I use route-to in my pf.conf to route packets from my LAN through 4 > non-equal WAN links (multipath routing is disabled). It works nicely, but if I > try to send pings from the firewall itself through a specific WAN interface > with ping -I or trac

Re: strict separation base system and third party software

2016-10-30 Thread Kenneth Gober
On Sat, Oct 29, 2016 at 4:21 PM, Mihai Popescu wrote: > Folks, since we are at it, does anyone knows why 'OpenBSD' is spelled > like that and not 'openbsd' . I was ponder that for a time, because I > know you all hate camelCase notation. In this context, "OpenBSD" is a proper noun, and therefore

Re: pf rule for openvpn

2016-10-24 Thread Kenneth Gober
On Sun, Oct 23, 2016 at 4:46 PM, Thuban wrote: > Here are the relevant parts of my pf.conf : > > ext_if = "re0" > tcp_pass = "{ gopher ipp 8000 }" > udp_pass = "{ 1194 }" > > pass in quick on $ext_if proto tcp to any port $tcp_pass keep state > pass in quick on $ext_if proto ud

Re: Cron logs in /var/cron/log instead of /var/log/cron?

2016-10-03 Thread Kenneth Gober
On Mon, Oct 3, 2016 at 12:27 AM, wrote: > Is there any harm or issue with setting the log location > of cron logs to /var/log/cron instead, or is it best to leave it > in /var/cron/log? I've moved cron logs to /var/log/cron on some of my own systems, and while cron does work just fine, there are

Re: i386 or amd64?

2016-09-21 Thread Kenneth Gober
On Tue, Sep 20, 2016 at 7:38 PM, Jeff Ross wrote: > I've just rented a server with 8GB of ram from m5hosting (based in large > part from the many recommendations I read while searching misc@ on > marc.info). Now the question is: i386 which is what I've always run on my 2 > GB ram server, or amd64

OpenBSD 6.0 CDs arrived today

2016-09-07 Thread Kenneth Gober
Shipments of OpenBSD 6.0 CDs have started arriving, I'm in the USA, New York area. -ken

Re: choosing OpenBSD for fileserver instead of FreeBSD + ZFS

2016-07-20 Thread Kenneth Gober
On Wed, Jul 20, 2016 at 7:52 AM, Miles Keaton wrote: > Got a fileserver with a few terabytes of important personal media, like all > old home movies, baby photos, etc. Files that I want my family to have > access to when I die. > > Really it's more of a file archive. A backup. Just rsync + ssh.

Re: pf/routing config for two external interfaces

2016-07-08 Thread Kenneth Gober
On Thu, Jul 7, 2016 at 7:19 AM, Jeremy wrote: > On 28/06/2016 4:38 a.m., Bobby Johnson wrote: >> I've setup a few OpenBSD machines to do failover with 2 internet >> interfaces. I didn't use multipath, pf will pass traffic without it. I did >> find it necessary to specify a reply-to for each of m

Re: Long life on SSD in a firewall environment

2016-06-22 Thread Kenneth Gober
On Tue, Jun 21, 2016 at 10:47 AM, Gregory Edigarov wrote: > well, but why not just settup syslogd to fan logs out to some other server? the reason I don't do that is because the sites where I have such firewalls deployed don't have any other servers. I don't want to ship logs over VPN links beca

Re: Long life on SSD in a firewall environment

2016-06-21 Thread Kenneth Gober
On Sun, Jun 19, 2016 at 5:56 AM, Sjöholm Per-Olov wrote: > Does anyone know if there exist any list of recommendations about how to make > an SSD disk to live as long as possible when using it for firewall purpose on > OpenBSD? I don't know of a list, aside from what you find in this thread and s

Re: Install on compact flash

2015-10-15 Thread Kenneth Gober
On Thu, Oct 15, 2015 at 12:19 PM, Paolo Aglialoro wrote: > In order to minimise nand wear off, I would like to put on ramdisk (the > machine would have 2GB ram, so I believe enough also for that, but I still > can upgrade it to 4GB if needed) the parts of the file hierarchy with most > intensive s

Re: OpenBSD 5.7 CD 2

2015-06-09 Thread Kenneth Gober
On Mon, Jun 1, 2015 at 10:13 AM, OpenBSD Store Misc wrote: > CD 2 has been dispatched for replacement on all orders. arrived for me today on the east coast of the USA (New York City area). -ken

Re: Inherited directory file permissions on BSD

2015-05-28 Thread Kenneth Gober
On Thu, May 28, 2015 at 8:40 AM, wrote: > i just discovered that on BSD, a file inherits the group permissions from > the directory it is created in (contrary to Linux, which uses the default > group of the user). > > But i failed to find more information on that topic in the man pages > (chmod,

Re: Random PID implementation and security

2015-05-27 Thread Kenneth Gober
On Wed, May 27, 2015 at 5:18 AM, Simon wrote: > So do you confirm that random PID is actually not a security measure? > > It is often presented as is, but it would not be the first time that some > wrong rumors get widespread enough to become accepted as a truth by most > people. language isn't a

Re: OpenBSD 5.7 release -- CD2 issues

2015-05-15 Thread Kenneth Gober
On Fri, May 15, 2015 at 10:50 AM, Theo de Raadt wrote: > > Sadly, CD2 of the OpenBSD 5.7 shipped in a broken fashion due to > errors at the manufacturing plant. Two mistakes were made. > > In the rush after the first error, this error was not caught in time. > Many people have received (or will s

Re: Screwed up copying partition to another disk

2015-04-12 Thread Kenneth Gober
On Fri, Apr 10, 2015 at 1:00 PM, Chris Bennett < chrisbenn...@bennettconstruction.us> wrote: > Works fine, except I overlooked mounting /DST on first try, so > everything ended up in / until full. I also started deleting those files > until I realized I was in /SRC and Ctrl C it. > Now I have a pr

Re: I found a sort bug! - How to sort big files?

2015-03-15 Thread Kenneth Gober
I don't know why sort is giving you such problems. there may be something unusual about your specific input that it wasn't designed to handle (or it might simply be a latent bug that has never been identified and fixed). when I need to sort large files, I split(1) them into smaller pieces, then s

Re: lynx is gone?

2015-03-04 Thread Kenneth Gober
On Wed, Mar 4, 2015 at 1:48 PM, Jeff St. George wrote: > Its not in my pay grade to offer a technical opinion on Lynx removal! > But ,,WHAT r u folks using instead, considering?? > typically when I am setting up a server I have a laptop with me. the laptop will either have my pre-planni

Re: File transfer from NetBSD to OpenBSD

2015-03-01 Thread Kenneth Gober
FAT (and FAT32) would probably involve less experimentation. to bypass the limitations of FAT, I recommend using tar(1) and split(1). tar cfC - /filesystem-to-back-up . | split -b 2000m that will produce a tar file split into 2GB chunks named xaa, xab, xac, etc. to restore: cat x?? | t

Re: Alternative way to get sources, CVS slow

2015-02-21 Thread Kenneth Gober
the OpenBSD CD-ROM set includes the -RELEASE sources. using those as a starting point, updating to -STABLE should be very fast. -ken On Sat, Feb 21, 2015 at 1:06 PM, Henrique Lengler wrote: > Hi, > > I'm trying to keep and maintain a copy of -stable source code in my system. > The problem is t

Re: OpenBSD Tablet-ish

2015-02-20 Thread Kenneth Gober
On Thu, Feb 19, 2015 at 3:43 PM, Robert wrote: > > Anything that can be acquired outside of a museum? ;) > > Has someone tested OpenBSD on one of the current (Atom/Windows-based) > 8-10" tablets? > E.g., Lenovo Yoga 2 or Ideapad > They seem to have a BIOS that can be configured; maybe Secure Boot

Re: Best filesystem & options for large drive

2015-02-10 Thread Kenneth Gober
here's an example for fsck on a largish volume with a lot of files: # df -hi /nfs/archive Filesystem SizeUsed Avail Capacity iused ifree %iused Mounted on /dev/sd0e 3.6T2.3T1.2T67% 3900811 119021683 3% /nfs/archive # umount /nfs/archive # \time -l fsck -f /dev/sd

Re: Too much SUID/SGID files!

2015-01-06 Thread Kenneth Gober
(tech removed from reply, don't cross-post) If you consistently log on to your system as root, then you probably don't need many SUID or SGID executables at all, since everything (interactive) will run with root privileges anyway. But if you usually log on as an unprivileged user (as you should i

Re: Changing naming order of HDD SD drives on boot by kernel

2014-08-17 Thread Kenneth Gober
it occurs to me, after a night's rest, that if you want short easy-to-remember device names that don't change when drives are reordered etc., then it might work to create 'alias' device nodes. put something into rc.local to look up certain duids (e.g. disklabel | head -1 ), look up the major/mino

Re: NFS server export node

2014-04-22 Thread Kenneth Gober
On Mon, Apr 21, 2014 at 3:39 PM, Alessandro DE LAURENZIS < just22@gmail.com> wrote: > Folks, > > still unclear after reading the hier man page where is the most suitable > node for a NFS server export directory. > as far as I know there's no standard for this. I have been using /nfs, in a va

  1   2   >