Re: NAT64 Confusion with PLAT

2025-07-20 Thread Peter Hessler
"quick", quickly fucked you. try re-writing your rules without it. Also, think about what IP address ranges you are using, and what IP address ranges you are trying to block in your ruleset. Don't try to be clever before you understand what went wrong. On 2025 Jul 20 (Sun) at 11:25:42 -0700 (

Re: Openrsync and macOS -- Anyone gotten it working with -r option to OpenBSD host?

2025-07-15 Thread Peter Nicolai Mathias Hansteen
of these. > > I understand your post to imply that you are using openrsync, not rsync, on > macOS? If so where did you find it? > > Thus this whole discussion seems somewhat weird, unless I have misunderstood > something. here, with macOS 15.5: [Tue Jul 15 22:10:19] pe

Re: The Book of PF, 4th edition is now available for preorder

2025-07-11 Thread Peter Nicolai Mathias Hansteen
A followup with at least partial answers to some questions posted here: https://nxdomain.no/~peter/yes_the_book_of_pf_4th_ed_is_coming.html Enjoy! - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http

The Book of PF, 4th edition is now available for preorder

2025-07-09 Thread Peter N. M. Hansteen
vious edition, with the content updated to reflect the realities of the modern Internet. When the actual physical copies become ready, I will make an effort to make the actual publication date a fun one (suggestions appreciated) All the best, Peter -- Peter N. M. Hansteen, member of the firs

Submissions for EuroBSDcon 2025: CFP runs until 2025-06-21

2025-06-13 Thread Peter N. M. Hansteen
/sponsorship.html See you in Zagreb! All the best, Peter N. M. Hansteen (for the EuroSBDcon 2025 program committee) -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com/ https://www.bsdly.net/ https://www.nuug.no/ "Remember to set the evil bit o

Re: System Requirements

2025-05-10 Thread Peter N. M. Hansteen
ad, play and experiment! Running on faster hardware with more memory and storage will generally give a better experience, but you grab what you have and run with it! All the best, Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com/ https:/

Re: How to stop email to root?

2025-05-07 Thread Peter N. M. Hansteen
back when that was written, but IPv6 support did not make it into the main tree, unfortunately. Thanks for pointing this out! I'll fix right away. All the best, Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com/ https://www.bsdly.ne

Re: How to stop email to root?

2025-05-04 Thread Peter N. M. Hansteen
d getting rid of the worst myself. I'd say get Michael's book, take a peek at OpenBSD's in-base spamd(8) https://man.openbsd.org/spamd and related tools, and perhaps look up my stuff such as "Effective Spam and Malware Countermeasures - Network Noise Reduction Using Fre

Re: I need help with pf and smtpd.conf to deal with an ongoing attack on port 25 that is sending out emails.

2025-04-28 Thread Peter N. M. Hansteen
user Guide https://www.openbsd.org/faq/pf/index.html or for that matter go for the PF tutorial slides https://nxdomain.no/~peter/pf_fullday.pdf (which BTW tend to be updated for each session) with links therein, including a certain book that appears to have aged surprisingly well. All the best, P

Re: pf.conf: definition of macro for multiple interfaces

2025-04-14 Thread Peter N. M. Hansteen
Just a thought: if the reason you are setting up two network interfaces on a system to connect to the same subnet is to use as much as possible of the bandwidth offered by the interfaces, would it not make more sense to configure them as parts of a trunk(4)? -- Peter N. M. Hansteen, member

Re: Can't umount; fuser and fstat don't say why

2025-04-07 Thread Peter N. M. Hansteen
the way. All the best, Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com/ https://www.bsdly.net/ https://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.

Re: cvsweb

2025-04-06 Thread Peter N. M. Hansteen
hink you would need to explain what you think is misssing here. Taking a peek at https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/dev/usb/ugen.c right now I can see clearly CVS Tags: for each commit. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsd

Re: wrong hour in Europe/Warsaw timezone?

2025-04-06 Thread Peter N. M. Hansteen
s been *quite a while* since I attempted running with that kind of setup myself but I distinctly remember Microsoft systems tended to have their very own way to deal with time zone changes, and multibooting systems would run into situations like the one you describe. - Peter -- Peter N. M. Hanst

Re: New hw.perfpolicy=battery

2025-04-05 Thread Peter Toth
f the time (except video calls in G-Meet...). Thanks, PT On Mon, Mar 17, 2025 at 11:31 PM Jeremie Courreges-Anglas wrote: > > On Mon, Mar 17, 2025 at 01:21:43PM -0500, Brian Conway wrote: > > On Mon, Mar 17, 2025, at 1:16 PM, Peter Toth wrote: > > > Hi all, > > > >

Re: TLS Error for https://www.openbsdfoundation.org

2025-04-05 Thread Peter N. M. Hansteen
On Tue, Apr 01, 2025 at 09:17:03AM -0400, Sven F. wrote: > April fools ? entirely possible As could be of course the thing that triggered https://mastodon.social/@pitrh/114262855940544666 (but less likely I think) -- Peter N. M. Hansteen, member of the first RFC 1149 implementation t

Re: Ethernet interface set to the wrong group

2025-04-05 Thread Peter N. M. Hansteen
; > connected to the LAN switch with this setup? > > The gateway is on 192.168.1.1, the lan is on 192.168.0/24. It is just the way > it is. The easy solution then would be to stick 192.168.1.1 in /etc/mygate, then run doas sh /etc/netstart or equivalent -- Peter N. M. Hansteen, member

Re: Ethernet interface set to the wrong group

2025-04-03 Thread Peter N. M. Hansteen
instead to blame the tools at hand is likely a career limiting move. At that point we could be hearing strongly worded demands that all traces of the current message thread be removed. If anyone wants to bet on the probabilities of these things occurring, be my guest. -- Peter N. M. Hansteen

Re: TLS Error for https://www.openbsdfoundation.org

2025-04-01 Thread Peter N. M. Hansteen
se try again, and if it still does not work, please report the actual error. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com/ https://www.bsdly.net/ https://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic&quo

Re: Ethernet interface set to the wrong group

2025-04-01 Thread Peter N. M. Hansteen
On Tue, Apr 01, 2025 at 07:47:09AM +, otto.cooper wrote: > > > Then all I and Peter Hansteen said stand true. Having both interfaces > > on the same subnetwork won't work easily without unnecessarily > > complicated routing "hacks". Simply move one

Re: Ethernet interface set to the wrong group

2025-04-01 Thread Peter N. M. Hansteen
the switch that hosts the 192.168.0/24 network *and* enable inet forwrarding. The rest should be straightforward. Since all addresses you have quoted are RFC1918 non-routeables, it is possible that the gateway takes care of the NATing and you don't need to bother with that part. But I wou

Re: Comment on /etc/myname vs /etc/hostname

2025-03-24 Thread Peter N. M. Hansteen
nlightening, you could do worse than turn to my stuff, such as this piece - https://nxdomain.no/~peter/what_every_it_person_needs_to_know_about_openbsd.html (also published elsewhere, links therein) -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com

Re: ftp2.eu.openbsd.org still broken

2025-03-21 Thread Peter Hessler
Not broken, it matches https://ftp.openbsd.org/pub/OpenBSD//snapshots/macppc/ Presumably this will be repaired when the next snapshot is built. On 2025 Mar 21 (Fri) at 11:28:00 +0100 (+0100), Jan Stary wrote: :There is something amiss with this mirror; e.g. :https://ftp2.eu.openbsd.org/pub/OpenB

Re: Syntax error for pf.conf loading during restart.

2025-03-20 Thread Peter Nicolai Mathias Hansteen
ot giving time for pf rules to > load successfully. yes, the ($interface) syntax is made specifically for these situations (I claim ENOCOFFEE for not noticing, sorry!). Excellent to hear you solved the problem! All the best, Peter -- Peter N. M. Hansteen, member of the first RFC 1149

Re: Syntax error for pf.conf loading during restart.

2025-03-20 Thread Peter N. M. Hansteen
ave an IPv6 addess assigned. Well spotted, Jon! All the best, Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com/ https://www.bsdly.net/ https://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah

Re: Syntax error for pf.conf loading during restart.

2025-03-20 Thread Peter N. M. Hansteen
a problem with slow response from that network's DHCP service, for example? - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com/ https://www.bsdly.net/ https://www.nuug.no/ "Remember to set the evil bit on all malicious network t

Re: acpibat remaining capacity zero

2025-03-18 Thread Peter Toth
his issue. On Wed, Oct 16, 2024 at 7:24 AM Peter Toth wrote: > > Hi all, > > Looking for some clues on acpibat and partial sensor info. Some of the > sensor data is populated while others are missing. > > Current situation: > hw.sensors.acpibat0.volt0=11.10 VDC (vo

Re: New hw.perfpolicy=battery

2025-03-17 Thread Peter Toth
Precisely, thank you. On Mon, Mar 17, 2025 at 8:02 PM Brian Conway wrote: > > On Mon, Mar 17, 2025, at 1:16 PM, Peter Toth wrote: > > Hi all, > > > > There used to be a -C switch for apm/apmd for "cool" mode, where the > > automatic performance

New hw.perfpolicy=battery

2025-03-17 Thread Peter Toth
Hi all, There used to be a -C switch for apm/apmd for "cool" mode, where the automatic performance adjustment mode would throttle down CPU frequency regardless of AC power status. Currently auto mode goes to highest frequency (+turbo) while on AC power, this is good when connected to mains at roo

EuroBSDCon 2025, Zagreb, September 2025 - Call for Talk and Presentation proposals is open

2025-03-02 Thread Peter N. M. Hansteen
The Call for Talk and Presentation proposals for EuroBSDCon 2025 is now open. Enter your submission at https://events.eurobsdcon.org/2025/ Please also visit the main website https://2025.eurobsdcon.org/ for information about the conference. See you in Zagreb! -- Peter N. M. Hansteen, member

Re: 2025-02-28 amd64 snap fails set verify

2025-02-28 Thread Peter N. M. Hansteen
trying again later worked, the machine is up with OpenBSD 7.6-current (GENERIC.MP) #569: Fri Feb 28 00:55:14 MST 2025 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP so I guess all that ends well is well :) All the best, Peter -- Peter N. M. Hansteen, member of the f

2025-02-28 amd64 snap fails set verify

2025-02-28 Thread Peter N. M. Hansteen
Good morning (CET)! Doing my ritual sysupgrade -s on my amd64 laptop, set verification fails this morning: [Fri Feb 28 09:44:08] peter@zaida:~$ doas sysupgrade -s Fetching from https://cdn.openbsd.org/pub/OpenBSD/snapshots/amd64/ SHA256.sig 100

Re: blacklisted for spam

2025-02-20 Thread Peter N. M. Hansteen
messages you get contain any indication of which blocklist is in use? I run a moderately popular blocklist myself, which operates on the principles outlined in https://www.bsdly.net/~peter/traplist_ethics.shtml with a more wordy version up as https://nxdomain.

Re: cloudflare.cdn.openbsd.org can’t provide a secure connection

2025-02-12 Thread Peter N. M. Hansteen
version a little while back (the exact time escapes me but can probably be dug out of the www repo). All the best, Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com/ https://www.bsdly.net/ https://www.nuug.no/ "Remember to set t

Re: 32 bit time stamps

2025-01-19 Thread Peter Philipp
On Sun, Jan 19, 2025 at 09:59:10AM +0100, Janne Johansson wrote: > > I noticed while looking through the headers of zlib that there is > > a time32_t component of it. Would this mean that on January 19th > > 2038 our .gz's will break? > > This sounds super easy to test by just setting the clock f

32 bit time stamps

2025-01-19 Thread Peter Philipp
Hi, I remember much celebration when OpenBSD went 64-bit. I recently had some disecting of filesystems work, happy birthday Kirk! I noticed while looking through the headers of zlib that there is a time32_t component of it. Would this mean that on January 19th 2038 our .gz's will break? What's

BSDCan 2025 Call for papers deadline 2025-02-12, conference 2025-06-11 - 2025-06-14

2025-01-17 Thread Peter N. M. Hansteen
://www.bsdcan.org/2025/papers.html to get oriented. Looking forward to seeing you in Ottawa! All the best, Peter (on the BSDCan program committee, https://www.bsdcan.org/2025/committee.html) -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com/ https

Re: Openbsd+namecheap+dynamic DNS (using DDClient)

2025-01-09 Thread Peter N. M. Hansteen
o post at least the generally applicable parts (and if there are any odditiest it is useful to be aware of) in some form here. All the best, Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com/ https://www.bsdly.net/ https://www.nuug.no/ &qu

Re: Wireguard interface "debug" - where to see?

2025-01-01 Thread Peter Piwowarski
Steve Williams wrote: Hi, The wg(4) man page indicates there is a "debug" option for the interface. I can see that the DEBUG flag is set, but how to I access that debugging information? mini# ifconfig wg1 wg1: flags=80c7 mtu 1420 I have my OpenBSD server set up as a public Wireguard serve

Re: large file system issues and rescue questions

2024-12-11 Thread Peter Hessler
On 2024 Dec 10 (Tue) at 21:10:51 +0200 (+0200), Divan Santana wrote: :mount 3b3840fcdf524721.c /data you've basically guaranteed corruption of your disk. the 'c' partition the entire disk, including all metadata. You'll want to create another partition with size * in a or d to have a good time.

Re: Quick question regarding puffy

2024-12-03 Thread Peter N. M. Hansteen
r to the various local filtering features we have at the client end. I must admit I have a (fortunately short) list of senders whose messages I will not see unless I take specific steps to do so. All the best, Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementati

Re: Quick question regarding puffy

2024-12-03 Thread Peter N. M. Hansteen
o it, my just-abandoned response might have been too forceful for the purpose. It is worth keeping in mind, though, for the archives if nothing else, that some frequent posters here also have a habit of activating auto-ignore mechanisms in order to avoid seeing posts by users with high of

Re: Firefox Gah. Your tab just crashed.

2024-11-28 Thread Peter N. M. Hansteen
ate that-period firefox: https://marc.info/?l=openbsd-ports&m=139448326727922&w=2 Others here will have better ideas, I'm sure -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com/ https://www.bsdly.net/ https://www.nuug.no/ "Reme

ftp.eu.openbsd.org not updating properly?

2024-11-25 Thread Peter N. M. Hansteen
. Something needs a gentle push, perhaps? - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com/ https://www.bsdly.net/ https://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.1

Re: OpenVPN errors after sysupgrade to 7.6

2024-11-19 Thread Peter Wens
Hi Steve, This is fixed in upstream (3.2.2). Check: https://github.com/OpenVPN/easy-rsa/commit/7df616ba1ed4add956d0353b68fce9d865f46c82 Best regards, Peter On 11/19/24 2:16 PM, Steve Fairhead wrote: Probably pilot error, again, but... Since the sysupgrade, I can no longer create or

Re: httpd can't connect

2024-11-18 Thread Peter N. M. Hansteen
fficient privileges to bind to the specified port. If you have a reasonable doas(1) configuration, prepending doas to the rcctl command should rid you of the error and have httpd running. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com/ https://w

Re: trying to upgrade to latest snapshot

2024-11-18 Thread Peter N. M. Hansteen
should I set it manually and boot into it pointing loader manually? It is possible the issue has been fixed already. I ran a sysupgrade -s on an amd64 machine just 20 min ago with no issues. - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.bl

Re: Can't install minidlna-1.3.3 because of libraries

2024-11-15 Thread Peter N. M. Hansteen
supgrade -s before running another doas pkg_add -u. - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com/ https://www.bsdly.net/ https://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.

Re: Static No Internet

2024-11-13 Thread Peter N. M. Hansteen
it turns up in your dmesg, here em1: em1 at pci3 dev 0 function 0 "Intel I210" rev 0x03: msi, address 00:25:90:47:88:8c and the configuration is stored in $ ls -l /etc/hostname.em1 -rw-r- 1 root wheel 207 Jul 17 2023 /etc/hostname.em1 Hope this helps. All the best, Peter

Re: ?? Re: A story about OpenBSD being compromised

2024-11-11 Thread Peter N. M. Hansteen
t goes into OpenBSD. Stories like this one, with only a loose narrative and no data that could have served to verify a sequence of events, are worse than useless. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com/ https://www.bsdly.net/ https://

Re: PF Firewall Rules

2024-11-11 Thread Peter N. M. Hansteen
a lot more pleasantly manageable. In addition to the official resources such as the PF FAQ (https://www.openbsd.org/faq/pf/index.html) I think my own writings such as "A Few of My Favorite Things About The OpenBSD Packet Filter Tools" https://nxdomain.no/~peter/better_off_with_pf.html (or w

Re: no cron email after restarting smtpd

2024-11-07 Thread Peter Wens
On 11/6/24 2:09 PM, Otto Moerbeek wrote: On Wed, Nov 06, 2024 at 09:40:26AM +0100, Peter Wens wrote: Hi, Restarting smtpd (e.g. after renewing acme certs) in a cron job causes cron not to send an email anymore (broken pipe?). I wonder if there is a workaround for this. Best regards, Peter

Re: no cron email after restarting smtpd

2024-11-06 Thread Peter Wens
On 11/6/24 12:55 PM, Jan Stary wrote: On Nov 06 09:40:26, pe...@200mmx.net wrote: Restarting smtpd (e.g. after renewing acme certs) in a cron job So, restarting after a cert change, or restarting in a cron job? Do you renew the certs in a cron job too? Why would you be restarting smtpd in a cr

no cron email after restarting smtpd

2024-11-06 Thread Peter Wens
Hi, Restarting smtpd (e.g. after renewing acme certs) in a cron job causes cron not to send an email anymore (broken pipe?). I wonder if there is a workaround for this. Best regards, Peter

Re: no cron email after restarting smtpd

2024-11-06 Thread Peter Wens
On 11/6/24 3:49 PM, Otto Moerbeek wrote: On Wed, Nov 06, 2024 at 03:36:47PM +0100, Omar Polo wrote: On 06/11/24 12:55, Jan Stary wrote: On Nov 06 09:40:26, pe...@200mmx.net wrote: Restarting smtpd (e.g. after renewing acme certs) in a cron job So, restarting after a cert change, or restarti

Re: Files on external drive randomly deleted ? Yet still show up on df command

2024-11-04 Thread Peter N. M. Hansteen
ailable for reading and writing from elsewhere? Anyway, fuser(1) might be a useful tool to check the real status of the files in question. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com/ https://www.bsdly.net/ https://www.nuug.no/ "R

Firefox errors

2024-11-02 Thread Peter Fraser
When I run FireFox from X under windows I got the following error messages fw$ firefox & [2] 98291 fw$ [Child 76816, MediaDecoderStateMachine #1] WARNING: Decoder=bf1adb17000 Decode error: NS_ERROR_DOM_MEDIA_FATAL_ERR (0x806e0005) - Error no decoder found for audio/mp4a-latm: file /usr/obj/por

Re: Configuring IPv6 addresses using dhcp6leased(8)

2024-11-02 Thread Peter Hessler
On 2024 Nov 02 (Sat) at 16:44:59 +0100 (+0100), Christian Schulte wrote: :On 11/2/24 15:32, Brian Conway wrote: :> On Sat, Nov 2, 2024, at 7:09 AM, Christian Schulte wrote: :>> Hello misc@, :>> :>> x500$ cat /etc/hostname.iwm0 :>> nwid "FLSTR81WHG6DG" wpa wpakey "xyz" :>> inet autoconf :>> inet6 au

Re: HDMI audio?

2024-11-02 Thread Peter Hessler
On 2024 Nov 02 (Sat) at 14:19:29 +0800 (+0800), Sadeep Madurange wrote: :Hello, : :Does OpenBSD support HDMI audio? No. There has been some discussions about adding support, but AFAIK no work has been done. -- The chicken that clucks the loudest is the one most likely to show up at the steam f

System upgrade just resinstalled old system

2024-10-19 Thread Peter Fraser
I ran sysupgrade and was supprised to still be on the same version of OpenBad. The /var/log/messages shows: Oct 19 11:00:01 gateway syslogd[88983]: restart Oct 19 14:15:12 gateway sysupgrade: installed new /bsd.upgrade. Old kernel version: OpenBSD 7.5 (GENERIC.MP) #82: Wed Mar 20 15:48:40 MDT 2024

acpibat remaining capacity zero

2024-10-15 Thread Peter Toth
Hi all, Looking for some clues on acpibat and partial sensor info. Some of the sensor data is populated while others are missing. Current situation: hw.sensors.acpibat0.volt0=11.10 VDC (voltage) hw.sensors.acpibat0.volt1=12.51 VDC (current voltage) hw.sensors.acpibat0.current0=0.00 A (rate) hw.se

Re: Doesn't work prtsc button on Tex Shinobi keyboard

2024-10-08 Thread Peter Piwowarski
On Tuesday, October 8, 2024 10:59:26 AM EDT Kirill A. Korinsky wrote: > misc@ > > I made an assumption that I'm not the only one using Tex Shinobi's keyboard, > and just discovered that the Prtsc button doesn't work. > > Not working means that xev doesn't register an event. When I press it, it >

Re: Firewall for isolated hosts

2024-09-26 Thread Peter N. M. Hansteen
t;if you need to ask the price, you can definitely not afford it" range. All the best, Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com/ https://www.bsdly.net/ https://www.nuug.no/ "Remember to set the evil bit on all m

Re: Firewall for isolated hosts

2024-09-26 Thread Peter N. M. Hansteen
e to start, please also keep the pf.conf man page (https://man.openbsd.org/pf.conf) within reach. Further the most recent PF tutoral might be of some use in this context (https://nxdomain.no/~peter/pf_fullday.pdf) and for that matter The Book of PF (https://nostarch.com/pf3 and via better bookstore

Re: pf.conf(5): How to implement sendmail's connection/rate control features with pf?

2024-09-25 Thread Peter N. M. Hansteen
On Wed, Sep 25, 2024 at 02:26:18PM +0200, Peter N. M. Hansteen wrote: > Another related set of examples and explanations can be found in the blog post I sense a complete URL would have been beneficial here, as in https://nxdomain.no/~pe

Re: pf.conf(5): How to implement sendmail's connection/rate control features with pf?

2024-09-25 Thread Peter N. M. Hansteen
control', `nodelay', `terminate')dnl > > How is this - or something similar - done using pf? > > I read about max-pkt-rate, set delay, queueing, state modulation but still > fail > to get the full picture. You can implement rate limiting using state trac

Re: unbound(8) + host(1) + AAAA-only issue

2024-09-20 Thread Peter Hessler
On 2024 Sep 20 (Fri) at 12:45:08 +0200 (+0200), Mike Fischer wrote: : :> Am 20.09.2024 um 12:13 schrieb Stuart Henderson : :> :>> From what you've shown I can only assume the auth servers are broken :> and probably refusing to respond for A (rather than an empty NOERROR :> response). : :I agree, t

Re: softdep as well as noatime on each partition?

2024-09-17 Thread Peter N. M. Hansteen
nitely skippable. I forget just when it was made into a no-op on OpenBSD, but I think it's been like that for at least a couple of releases. Other followups from people with slightly less rapid-refresh memory than myself may even provide the exact commit. - Peter -- Peter N. M. Hansteen, me

Re: Pf congestion troubleshooting

2024-09-13 Thread Peter N. M. Hansteen
the latest "Network Management with the OpenBSD Packet Filter Toolset" tutorial, to be found at https://nxdomain.no/~peter/pf_fullday.pdf (possibly to be updated for the upcoming Dublin event). I would of course be delighted if you do buy The Book of PF, and the article Tom referred to c

Re: OpsnBSD on ASUS VivoBook

2024-09-11 Thread Peter N. M. Hansteen
ion to create a recovery boot medium, just in case you do not get it to work and need to return the thing. That said, OpenBSD tends to work rather well on newish hardware. There may be some oddities, but help is usually at hand via bugs@ or here. This writeup https://nxdomain.no/

Re: The relationship between pf and yubkey(FIDO2) (About OpenSSH)

2024-09-10 Thread Peter N. M. Hansteen
quot; Are we safe to assume that your sshd listens on port 1522? Once again, it is impossible to offer really useful input unless we have the entire configuration, at least the complete pf.conf along with any hostname.vio0 or at least the ifconfig output for the interface. All the best, Pete

Re: You have installed OpenBSD. Now for the daily tasks (blog post)

2024-09-07 Thread Peter N. M. Hansteen
Hi Reese, On Fri, Sep 06, 2024 at 08:28:40PM -0400, Reese Johnson wrote: > Peter thanks much appreciated. Fan of your blog for many years. I have > learned a lot from it. Thanks! I am happy to hear you found this and other writings of mine useful. As you may have noticed, new blog post

Re: Freeze

2024-09-06 Thread Peter N. M. Hansteen
our browser) is very useful. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com/ https://www.bsdly.net/ https://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnecte

Re: doas

2024-09-05 Thread Peter N. M. Hansteen
On Thu, Sep 05, 2024 at 01:59:49PM -0400, openbsd_fr...@mail2tor.com wrote: > Gentlemen! How do I doas my regular user. Please do not assume all contributors here are male. doas needs a valid doas.conf. See man doas and man doas.conf. -- Peter N. M. Hansteen, member of the first RFC 1

Re: hostname.if

2024-09-05 Thread Peter N. M. Hansteen
g dual stack: inet autoconf inet6 autoconf I would recommend reading the Networking part of the FAQ (https://www.openbsd.org/faq/faq6.html) and to check out at least some of the man pages it references. (and of course I have written the odd piece about this and related things, https://nxdomain.no/

Re: I wrote this about packages and ports in 2023, hopefully still useful to some who come here

2024-09-03 Thread Peter N. M. Hansteen
On Tue, Sep 03, 2024 at 10:38:38AM +0300, Ville Valkonen wrote: > Hello Peter, > > how about replacing sudo usage with doas? If I haven't already, that is an oversight I'll fix shortly. Thanks! - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implem

Re: You have installed OpenBSD. Now for the daily tasks (blog post)

2024-09-02 Thread Peter Nicolai Mathias Hansteen
smerge -s > > There's a mismatch between "run the sysupgrade command" and the command > shown (sysmerge). OOPS! Thanks for pointing that out! Fixed now :) All the best, Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogsp

Re: You have installed OpenBSD. Now for the daily tasks (blog post)

2024-09-02 Thread Peter N. M. Hansteen
On Mon, Sep 02, 2024 at 11:47:57PM +0200, Kirill Miazine wrote: > > Comments and corrections welcome, as always. > > add a link afterboot(8), perhaps? https://man.openbsd.org/afterboot Yes! Added, thanks! - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementatio

You have installed OpenBSD. Now for the daily tasks (blog post)

2024-09-02 Thread Peter N. M. Hansteen
You Have Installed OpenBSD. Now For The Daily Tasks. https://nxdomain.no/~peter/openbsd_installed_now_for_the_daily_tasks.html (prettified, tracked: https://bsdly.blogspot.com/2024/09/you-have-installed-openbsd-now-for.html) - Consider this an update with additional explanation over the >

Re: I wrote this about packages and ports in 2023, hopefully still useful to some who come here

2024-08-31 Thread Peter N. M. Hansteen
sd-misc&m=172503305621176&w=2, I remembered writing that slightly longer piece, which offers some explanation of how things work in addition to copy-pasteable material. There is room for both approaches. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://b

I wrote this about packages and ports in 2023, hopefully still useful to some who come here

2024-08-31 Thread Peter N. M. Hansteen
After answering some too-basic questions about installing packages on OpenBSD earlier earlier here, I remembered that back in 2013 I wrote a piece about ports and packages that looks like it is still mostly usable. Now available untracked as https://nxdomain.no/~peter

Re: E-mail address openly visible in the WWW

2024-08-30 Thread Peter N. M. Hansteen
t up such a thing worth it is entirely up to them. That said, if you have reason to believe that making your email address available in searchable archives on the Internet, using an alternate address for posting to the list might be a workable option. -- Peter N. M. Hansteen, member of the first

Re: OpenBSD Guide Installing XFCE

2024-08-30 Thread Peter Hessler
OpenBSD will not be doing this. You can of course install XFCE by running "pkg_add xfce" as root and following the instructions that are printed on screen. On 2024 Aug 30 (Fri) at 05:56:32 -0400 (-0400), openbsd_fr...@mail2tor.com wrote: :Please ship OpenBSD with XFCE4 pre-built instead of with

Re: OpenBSD Guide Installing XFCE

2024-08-30 Thread Peter N. M. Hansteen
the FAQ about packages is worth reading (https://www.openbsd.org/faq/faq15.html). Actually *all* parts of the faq are worth reading if you are responsible for OpenBSD systems. - P -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com/ ht

Re: Alternative mailing lists

2024-08-29 Thread Peter N. M. Hansteen
SD relevant issue you might raise will choose to filter away messages from "Anon Loli" so they will not waste any time reading those pieces of text. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com/ https://www.bsdly.net/ https://w

Re: Installing from USB

2024-08-29 Thread Peter N. M. Hansteen
ts If I remember correctly, choosing disk and if needed then choosing the device name for the USB device you booted from is the way forward. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com/ https://www.bsdly.net/ https://www.nuug.no/ "Remem

Re: Options to have relayd add IP to pf?

2024-08-23 Thread Peter N. M. Hansteen
overloading could be the thing to try. The other thing that comes to mind is to put together something that parses the logs and adds offenders to a table of addresses that PF will block. Something along the lines of what is described in https

Re: OpenBSD equivalent to FreeBSD hw.uart.console boot setting

2024-08-16 Thread Peter N. M. Hansteen
er of useful writeups such as Paul de Weerd's writeup on installing OpenBSD via a serial console http://www.weirdnet.nl/openbsd/serial/. For the details such as which flag or option corresponds to which in each of the systems, it is likely useful to follow the man page links in the FAQ an

Re: How to trim SSD?

2024-08-14 Thread Oliver Peter
On Wed, Aug 14, 2024 at 07:36:01PM +0200, Oliver Peter wrote: > On Sun, Aug 11, 2024 at 11:50:53PM +0200, Kirill A. Korinsky wrote: > > This is out of the list reply, I hope it's ok. Oops, that mail ended up by accident on this list. Sorry for the noise. -- Oliver Peter o

Re: How to trim SSD?

2024-08-14 Thread Oliver Peter
Hi Kirill! Thanks for your mail. On Sun, Aug 11, 2024 at 11:50:53PM +0200, Kirill A. Korinsky wrote: > This is out of the list reply, I hope it's ok. > > On Sun, 11 Aug 2024 21:44:52 +0200, > Oliver Peter wrote: > > > > [1] Little write-up: https://hackmd.

Re: How to trim SSD?

2024-08-14 Thread Oliver Peter
ufficient free space for > wear leveling. Sounds reasonable to me and I'll give it a try. Thanks. -- Oliver Peter oli...@gfuzz.de 0x456D688F

Re: Missing packets?

2024-08-13 Thread Peter Philipp
On Tue, Aug 13, 2024 at 03:16:20PM +, Peter Fraser wrote: > I have looked at the phone longs all they show is the registration is not > working. > > I should also add, that I have tried restarting asterisk, that did not solve > the problem. > > I have a hard time trac

Re: Missing packets?

2024-08-13 Thread Peter Fraser
sure their phones work. So I have weekends and nights. -Original Message- From: Peter Philipp Sent: Tuesday, August 13, 2024 4:24 AM To: Peter Fraser Cc: misc@openbsd.org Subject: Re: Missing packets? On Mon, Aug 12, 2024 at 09:29:57PM +, Peter Fraser wrote: > I support a char

Re: Missing packets?

2024-08-13 Thread Peter Philipp
On Mon, Aug 12, 2024 at 09:29:57PM +, Peter Fraser wrote: > I support a charity and I look after a OpenBSD firewall. > The firewall supports asterisk, nsd, unbound, dhcpd. > Everything was working properly. > > Then they did some rewiring, and the behaviour of the sys

Missing packets?

2024-08-12 Thread Peter Fraser
I support a charity and I look after a OpenBSD firewall. The firewall supports asterisk, nsd, unbound, dhcpd. Everything was working properly. Then they did some rewiring, and the behaviour of the system is now very strange. When the system starts up, everything behaved properly, their phones r

How to trim SSD?

2024-08-11 Thread Oliver Peter
Lifetime_Remain 0x0030 078 078 001Old_age Offline - 22 Cheers Oliver [1] Little write-up: https://hackmd.gfuzz.de/s/Qsk14kc3i (OpenBSD & Hetzner) -- Oliver Peter oli...@gfuzz.de 0x456D688F

anyone want to network for OpenBSD/riscv32?

2024-08-11 Thread Peter Philipp
Hi, I know I'm a horrible coder, however I realised that working with a lot of people in harmony is easier then working on this alone.. I have a Pine64 Ox64 (64 MB RAM) that has two 32-bit cores and one 64-bit core I want to make use of the wifi card in this SoC, is it only accessible from 32-bit

Re: how do I debug this? any hints?

2024-08-11 Thread Peter Philipp
On Sun, Aug 11, 2024 at 11:10:17AM +0200, Kirill A. Korinsky wrote: > On Sun, 11 Aug 2024 09:57:31 +0200, > Peter Philipp wrote: > > > > openssl s_client returns this: > > > > Verify return code: 20 (unable to get local issuer certificate) > >

how do I debug this? any hints?

2024-08-11 Thread Peter Philipp
Hi, openssl s_client returns this: Verify return code: 20 (unable to get local issuer certificate) based on these two command which the first one fails hard: 34 ftp https://download.delphinusdns.org/pub/delphinusdnsd/snapshot/INSTALL/goldflipper11.png 35 openssl s_client

Re: failing to boot amd64 macbook pro

2024-08-07 Thread Peter Philipp
On Wed, Aug 07, 2024 at 10:21:32AM +1000, Aaron Mason wrote: > I suspect there's an issue with the crystal ball daemon. Until that's > fixed, providing more detail might yield better results. > > -- > Aaron Mason - Programmer, open source addict > I've taken my software vows - for beta or for wor

Re: amd64 Laptop doesn't resume from suspend any longer

2024-08-06 Thread Peter Philipp
On Tue, Aug 06, 2024 at 11:20:02AM +0200, Mark Kettenis wrote: > > From: Matthias Schmidt > > Hi Matthias, > > Can you try to narrow this down a bit further? > > You can either bisect by building kernels from intermediate dates > yourself or use kernels from the snapshot archive at: > > http

  1   2   3   4   5   6   7   8   9   10   >