it working.
Thanks again,
Ryan E.
After failing to get the printer working
> with just regular lpr, I tried CUPS to no avail. Along the way,
Did you happen to try CUPS with the brlaser package installed?
I have a Brother HL-L2390DW, and once I found brlaser it just worked.
-Ryan
> however, I discovered a Perl script in
Hello,
After upgrading to 7.0 I noticed DHCP leases from my ISP were
not being renewed.
After researching I ended up modifying my /etc/hostname.em0 file
by replacing 'dhcp' with '!dhclient \$if' and this "appears"
to resolve the issue.
The FAQ and the dhclient/hostname.if manpages infer that thi
Bjorn, have a look at this from the opensmtpd mailling list.
https://www.mail-archive.com/misc@opensmtpd.org/msg05278.html
The message from Eric has how to downgrade the smtpd listener to use all
TLS and compatible ciphers.
Regards.
On 13/05/2021 07:31, Bjorn Ketelaars wrote:
I have a smtp
ername="...@pppoe.example.com" realm=PGS-DYNAMIC
Mar 8 23:00:45 edge9 npppd[9258]: ppp id=27 layer=ipcp IP Address peer=0.0.0.0
our=5.6.7.8.
Mar 8 23:00:45 edge9 npppd[9258]: ppp id=27 layer=ipcp logtype=Opened
ip=5.6.7.8 assignType=dynamic
Mar 8 23:00:45 edge9 npppd[9258]: ppp i
Thank you for the reply! I have been given permission to show a bit
more about our setup. I snipped out some of the original message, and
I'll post the additions at the bottom.
On Sat, Mar 06, 2021 at 07:45:03PM +0900, YASUOKA Masahiko wrote:
> Hi,
>
> On Fri, 5 Mar 2021 19:07:4
etimes/ print on the connections from the 'old' equipment,
but would continue to work anyway:
Mar 5 10:21:44 edge9 npppd[35209]: ppp id=4108 layer=chap proto=unknown "Proxy
Authen Challenge" is too long.
This now also prints on all the 'new equipment' successful connections since
disabling the AVP_MAXLEN_CHECK.
-ryan
s the root disk? ('?' for details)
Does anybody have any suggestions on how to get OpenBSD to recognize the
disk? Below, I have included OpenBSD dmesg output I got over the serial
console, and dmesg output from an identical VM running Linux.
Thanks,
Ryan
[0] In particular, their free ti
On 7/9/20 5:07 pm, Walt wrote:
> I have a new server on order that should arrive in a few days. It's intended
> purpose is to replace my current firewall. It has no CD and so I'll make and
> use a bootable flash drive as described in the Installation Guide section of
> the FAQ.
>
> The server
On 15/7/20 5:57 am, mabi wrote:
> http://firmware.openbsd.org/firmware/6.7/: no such dir
> Couldn't find updates for intel-firmware-20191115v0
>
> It looks like I have a colon ":" at the end of the URL which of course makes
> the URL invalid. Now how could this happen? and in which file do I fix
On 2020-04-24 04:45, zeurk...@volny.cz wrote:
> Your point is well-taken (though this is just the way mespeaks); yet,
> Theo is a native speaker
No-one is a native speaker of this made up crap, mecraps
On 2020-03-18 19:42, Stuart Henderson wrote:
> On 2020-03-17, Flipchan wrote:
>> Yeah the point with a cdn is to lower the latency of it so therefor you what
>> is needed is just not only a fast http server but a traffic redirector
>> depending on the end users origin
>
> Doing this via redire
On 2020-03-16 21:59, Edd Barrett wrote:
> Could be that the jitsi server is overloaded.
I doubt that - unless it's changed since I last looked, the Jitsi server
does very little actual "work" during a call... most of the work is done
in the browser (which is why Jitsi scales to "many calls" very w
I've just updated to the latest snap, and now every SSH connection I
make is asking me to accept updated hostkeys.
$ ssh somehost
Learned new hostkey: RSA SHA256:
Learned new hostkey: ED25519 SHA256:
Accept updated hostkeys? (yes/no):
I see that some changes have been occurring ar
On 2019-10-29 20:19, PJ wrote:
> Am 28.10.19 um 23:52 schrieb Stuart Henderson:
>> On 2019-10-28, Andy Lemin wrote:
>>> Hi guys,
>>>
>>> Does anyone know if it is possible to completely disable ftp in the package
>>> management utilities; pkg_add, syspatch, sysupgrade etc?
>>>
>>> My PKG_PATH ref
On 2019-10-14 19:33, Marcus MERIGHI wrote:
> j...@begriffs.com (Joe Nelson), 2019.10.14 (Mon) 04:32 (CEST):
>> I'd like to write a daemon to change machdep.lidaction and the xrandr output
>> as
>> an external monitor or power is attached/detached from my laptop. Is there a
>> way to detect those e
On 6/22/19 7:23 AM, Frank Beuth wrote:
> I wonder if there is a way to have Ansible build a custom
> autoinstall.conf (using templates) and insert it into bsd.rd immediately
> prior to uploading.
I use elfrdsetroot from upobsd to do something along these lines
$ pkg_info upobsd
Information for i
On Tue, Jun 26, 2018 at 09:38:37AM -0400, Rupert Gallagher wrote:
> Ok new question.
>
> I am about to purchase SYS-E300-9A-8CN8, because I cannot wait any longer.
>
> Does it work with OpenBSD? Let see... nope! The dmesg database shows little
> love for SuperMicro in general, and a single hit f
nding match is:
match tag "SPAM_IN" from any for domain action "lmtp-local"
Hopefully this might help someone in the future.
Regards - Nick
On 28/05/2018 16:48, Nick Ryan wrote:
Hi Mark, viq, did either of you get it to work with the virtual table?
Mine mostly works with:
actio
18 10:48, Nick Ryan wrote:
Hi Mark, viq, did either of you get it to work with the virtual table?
Mine mostly works with:
action "lmtp-local" mda "/usr/libexec/mail.lmtp -d
unix:/var/dovecot/lmtp -f %{sender} %{rcpt}" virtual
but it ignores the virtual table completely.
If
Hi Mark, viq, did either of you get it to work with the virtual table?
Mine mostly works with:
action "lmtp-local" mda "/usr/libexec/mail.lmtp -d
unix:/var/dovecot/lmtp -f %{sender} %{rcpt}" virtual
but it ignores the virtual table completely.
If I miss out the ${rcpt}, I get a no recipient s
On April 26, 2018 2:40 PM, Matthieu Guegan wrote:
> Hi,
>
> Just want to add the X1 Carbon Gen 6th to the list. Same problem when
>
> plug in a thunderbolt device.
>
We should confirm that it's the same bug.
Here's what I did on the T480s:
# pkg_add acpica
$ cp -R /var/db/acpi /tmp
$ iasl -
Hi,
I've got a ThinkPad T480s that comes with an Elantech v4 Clickpad + Trackpoint
(firmware version 0x7f3001).
Out of the box, this firmware version is unsupported and cannot be configured,
but it does attach as a basic PS/2 mouse input. Unfortunately for me, this
means "tap-to-click" is perm
Hi,
I encountered the same issue on a new T480s as reported here:
https://marc.info/?l=openbsd-bugs&m=152022260714390&w=2
I am posting this to misc because the bug appears to be with Lenovo's ACPI
tables, not OpenBSD. I just wanted to provide some updated information for
anyone else who has thi
On Wed, Apr 18, 2018 at 01:08:01PM -0400, Rupert Gallagher wrote:
> This is all I managed to retrieve from the logs (/var/log/daemons,
> /var/log/messages):
>
> Mar 12 09:27:20 server mountd[50607]: Socket disconnected
> Mar 29 18:05:30 server mountd[52162]: Socket disconnected
> Apr 16 12:04:07
On Sun, Mar 25, 2018 at 06:49:52AM +, Z Ero wrote:
> Is 6.3 release almost here? Is that why? If you are using your
> computer for production and are not actively developing / debugging
> OpenBSD why would you run a current snapshot rather than the stable
> release? Just curious.
>
To assist t
llchain.pem"
tls key "/etc/ssl/private/foo.net.key"
block return 301 "https://foo.net$REQUEST_URI";
}
server "foo.net" {
listen on * tls port 443
tls certificate "/etc/ssl/foo.net.fullchain.pem"
tls key "/etc/ssl/private/foo.net.key"
root "/htdocs/foo.net"
}
Cheers,
-Ryan
On Sat, Nov 25, 2017 at 05:51:26PM -0200, x9p wrote:
> Hi,
>
> Is there a good/safe and light image viewer? Was used to eog, but it has
> too many "vfprintf %s NULL" in messages. gimp is too big and good for play
> with images, In need of smth fast.
>
> cheers.
>
> x9p
graphics/viewnior is very
der Cisco gear at $WORKPLACE as I grew tired
of editing the ssh config for the OpenSSH version :-)
Hope this helps,
Cheers!
-ryan
>
> Thank you,
>
> Jacob Leifman
> Educational Technology
>
> Weymouth Public Schools
>
> --
> CONFIDENTIALITY NOTICE: This e-mail mess
On Thu, Nov 02, 2017 at 12:45:54PM -0400, tec...@protonmail.com wrote:
> Thanks for sharing a much better fix for this issue.
>
> I wonder what consequences this option change will have on future web
> services that make use of asm.js
Embedded in-browser cryptocurrency mining won't work ;)
>
>
it through cron periodically.
See their documentation at the bottom of:
https://fusion.easydns.com/Knowledgebase/Article/View/102/7/dynamic-dns
Basics of the script would just be:
ip=`curl -s ipinfo.io/ip`
curl -s "
https://username:dynamicto...@api.cp.easydns.com/dyn/generic.php?hostname=example.com&myip=${ip}
"
Cheers,
-ryan
ments such as gnome
or xfce usually resulted in a pleasant font experience.
Check out the xsettingsd package, I have been using it with
WindowMaker and now at least gtk apps look very nice outside a
large environment.
-ryan
east exists in cvs:
http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/arch/arm/arm/cpu.c?rev=1.36&content-type=text/x-cvsweb-markup
I only hope the rest of the hardware in that little box is friendly :-)
-ryan
On Tue, Mar 28, 2017 at 01:14:59PM +, Majerní?ek ?tefan wrote:
> Hi All.
> I have question.
>
> Is it possible install openbsd to notebook dell latitude E6510?
>
I have one of these, OpenBSD worked with pretty much every device in
the unit. Wifi cards can be different, but the intel hd grap
-FTN4.
I can second that :-). I have a Sunfire v120 w/dual 100mbit nics, but
had to stop using it as large amounts of throughput was causing panics
I couldn't figure out + keep housemates happy.
I ended up with a Dell R210 and couldn't be happier. It has been 100%
stable since installation almost exactly a year ago now.
FWIW -- noise was almost unbearable with the sunfire v120, but the r210
is actually nicely quiet. The fans spin down and I rarely hear it, it
blends in with the 24 port gigabit poe switch I have.
Cheers,
-ryan
throwing the error?
Cheers!
-ryan
>
> Here is a console log :
>
> # reboot
> stopping package daemons: munin_node svscanpanic: kernel diagnostic assertion
> "ifp != NULL" failed: file "../../../../
ection (2-factor, whatever else google offers these days).
Hope this makes sense,
Cheers!
-ryan
>
>Thanks in Advance
>
>L)
ested in the ImageMagick (or GraphicsMagick) packages.
The latter is a fork of the former, but they both supply the same
commands. display, convert, mogrify are some of the commands available,
and can be useful to do things on the fly in a scripted fasion if you'd
like.
Cheers!
-ryan
On Sun, May 08, 2016 at 11:46:11AM +0200, Sjöholm Per-Olov wrote:
> > On 08 May 2016, at 00:39, Sjöholm Per-Olov wrote:
> >
> > Hi
> >
> > I have skipped all major releases of OpenBSD after 5.4 for one firewall due
> to
> > watchdog timeout resets on the em driver. Earlier today I fired up a 5.9
>
sub
ian:
> 0.572u 0.316s 0:03.28 26.8% 0+0k 0+0io 0pf+0w
> OpenBSD:
> 1.920u 0.510s 0:05.97 40.7% 0+0k 182+19io 762pf+0w
>
I can't speak for qiv as I don't have it installed, but feh opened that image
and scrolled around it very quickly.
11:41 ryan@bofh:~$ time feh dsc_2258
On Fri, Dec 04, 2015 at 11:33:20AM -0700, bluesun08 wrote:
> hmm, the "device busy" message is gone.
> But now there is a new message:
>
> # ./testfile > /dev/ulpt0
> ksh: ./testfile: cannot execute - Permission denied
>
> So what permissions fail?
unless 'testfile' is a script set to output so
Completely off-topic but I am concerned for the .fr devs..
http://www.theglobeandmail.com/news/world/paris-police-report-shootout-at-restaurant-explosion-near-stadium/article27256201/
Can I get a ping to this thread from all the .fr folks?
Stay strong France...
-Ryan
rred profile: core (0x1)
Max core profile version: 3.3
Max compat profile version: 3.0
Max GLES1 profile version: 1.1
Max GLES[23] profile version: 3.0
--snip--
Cheers,
-Ryan
On Fri, Sep 04, 2015 at 11:22:48AM -0700, Chris Cappuccio wrote:
> Since the purpose of Secure Boot provide little to no benefit to users
> (in fact quite the opposite), the question becomes why?
>
For paranoid softraid crypto users who are concerned about a modified
boot
eive a reply
from someone referencing that post, but that post is mysteriously
missing.
Cheers,
--ryan
On Thu, Jul 09, 2015 at 04:36:33PM -0700, Seth wrote:
> I'm trying to use the following statement in /etc/dhclient.conf
>
> supersede domain-name-servers [127.0.0.1]:40;
don't wrap the ip address in square [] brackets.
should clear it up
--ryan
>
> But when the mach
On Tue, Mar 03, 2015 at 05:51:27PM +0100, someone wrote:
> Hello,
>
> If I:
>
> pkg_add firefox-esr
>
> then I cannot see any separated user for it:
>
> grep -i firefox /etc/passwd
>
> When will OpenBSD have a separated user for the webbrowser by default?
I think Ted specifically stated that
he forthcoming FreeBSD 11 almost boots with the Minnowboard
> max as is.
It seems OpenBSD 5.7-beta boots fine on the Minnowboard Max with
coreboot. You can read my account of the current status here:
http://www.countersiege.com/2015/02/22/minnowboard_max_openbsd.html
-Ryan
On Mon, Dec 29, 2014 at 12:45:14PM -0500, Christopher Barry wrote:
> On Mon, 29 Dec 2014 09:29:15 -0800
> Ryan Freeman wrote:
>
> >On Mon, Dec 29, 2014 at 11:17:55AM -0500, Christopher Barry wrote:
> >> Greetings All,
> >>
> >> I've used Ope
d.
>
> Thank You.
I would like to point out that I do follow current, both on my own
workstations and my work workstation :)
The FAQ on http://www.openbsd.org/ is always a good read.
Cheers!
--ryan
hings to try, in typical
bad diagnosic fashion :( and when it was fixed wasn't sure what it
was. thank you! for sake of info here is my dmesg:
(mac addys removed)
-ryan
OpenBSD 5.6-current (GENERIC.MP) #583: Thu Nov 20 11:47:06 MST 2014
dera...@amd64.openbsd.org:/usr/src/sys/arch
t; on his blog saved me a lot of time and frustration.
In general just blogging about stuff, especially when not fully understood
can be a bad thing. The blog you mentioned by Mr Ted Unangst is different,
because he is actually a dev :)
Hope this helps clear up confusions, cheers!
-ryan
Is there any reason to not use iked and skip the whole L2TP bit?
I've found the built in Windows ikev2 VPN to work better then the older
L2TP.
On Mon, Nov 03, 2014 at 07:16:34PM +0100, Alexandre Ratchov wrote:
> On Mon, Nov 03, 2014 at 08:58:29AM -0800, Ryan Freeman wrote:
> > On Fri, Oct 31, 2014 at 08:58:15AM +0100, Alexandre Ratchov wrote:
> > > On Fri, Oct 31, 2014 at 11:48:00AM +0530, Jay Patel wrote:
> > &
nux games such as unreal tournament.
so, i guess linux binaries that used sdl had sound.
just for informational purposes, i would presume linux sdl binaries
must have been using the ossaudio type layer as we have (had?) no
alsa stuff. i don't use this anymore as my machines are amd64,
cheers!
-ryan
> -- Alexandre
The iked.conf, output/logs from iked running -v, and a description of
client setup would help.
Don't forget to include your PSK. >:-)
On Thu, Sep 25, 2014 at 1:09 AM, Artem Falcon wrote:
> Markus Wernig :
>
> > ...
> > But the client is unable to connect to the VPN GW, and I just can't find
> >
s recognizing the two cores?
Thank you for helping me understand my observations. I have included
the contents of my email to dm...@openbsd.org below:
-- Forwarded message --
From: Ryan
Date: Sun, Aug 3, 2014 at 12:08 AM
Subject: Supermicro X9SBAA-F
To: dm...@openbsd.org
System
That seems to be normal. Mine is currently 61.5 degrees and it's
currently not under any load.
Mine runs cooler if it's standing on its edge vertically, it just seems
to help the airflow around the case at the expense of looking a bit odd.
Regards - Nick
On 20/06/2014 10:40, Roger Wiklund w
On 7 Jun 2014, at 23:35, Mattieu Baptiste wrote:
> On Sat, Jun 7, 2014 at 8:51 PM, JB M wrote:
>
>> I'm having troubles installing OpenBSD 5.5 (amd64) on a mSATA SSD card (
>> http://pcengines.ch/msata16a.htm) PC Engines APU.1C device (
>> http://pcengines.ch/apu.htm) with the most recent BIOS
N or SIP proxy ip.
in my setup, my normal nat line in pf does not use static-port, hence
the added line before that point to catch the voip devices and make
sure they are natted with static-port.
Cheers,
-ryan
ks ago.
Force people to update software following insecure semantics rather than
make it easy to be lazy is the song and dance here.
Cheers,
-ryan
>
> --
>
> Edward Ahlsen-Girard
> Ft Walton Beach, FL
>
> OpenBSD 5.5-current (GENERIC.MP) #59: Mon Apr 7 22:49:12 MDT 2014
&g
il after login.
This doesn't prevent it from starting up with xdm of course, so if
your problem is that you don't want it showing up on the login screen
I can only think modifying Xsetup_0 and merging changes via sysmerge
is the way to go.
Cheers,
-ryan
>
> Many thanks,
> Laurence
On Wed, Dec 04, 2013 at 12:11:42AM +, Stuart Henderson wrote:
> On 2013-12-03, Ryan Freeman wrote:
> > On Tue, Dec 03, 2013 at 09:10:32PM +0100, Gabor Berczi wrote:
> >> On Dec 3, 2013, at 8:57 PM, josh Grosse wrote:
> >>
> >> >The new scheduler wil
dth 1% priority 0 qlimit 500 hfsc(upperlimit 90% ecn red)
the only thing i noticed is you're defining pri, http, and warez twice and
confusing pf.
-ryan
>
> --
> G
st come out the grates, and call
it a day. In actual fact, they have now severely lodged
dust bunnies into the inside of the grates, requiring a full
teardown to properly clean it.
Finally, on my thinkpads, my last t41p i had to take apart
3-4 times in its final years to reapply grease before the gpu
finally bit the bucket, that being said I have a feeling Brad
has already done all this.
Cheers,
-ryan
>
> Riccardo
3650 had an uptime of over 15 days whilst
using heavy gl stuff. managed to freeze it with a browser, though ;)
laptop has yet to freeze since radeondrm officially in-tree, it was a bit
shakey during the initial radeondrm tests, but those weren't even public
in the first place.
my Thinkpad T60 does not have an option to switch between radeon and
an intel chip.
-ryan
>
> Erling
Will as a task for future
generations ;) less of course, that human brain uploading technology
is done by then, and i better be able read about it in brain(4) ;)
-ryan
oticed in sys/dev/usb/uhidev.c there are notes about a
broken descriptor for a waccom tablet, and in sys/dev/usb/usb.h
a note for i386 using unaligned access for unaligned little-endian
word components in usb records.
I guess my only question would be, am I looking in the right
areas for something such as this?
Cheers,
-ryan
Please pass point to the code which you believe to be the backdoor so that
I may review it myself.
Thanks
On Jul 4, 2013 10:57 PM, "Thomas Jennings"
wrote:
> Dear OpenBSD developers and users:
>
> Regretfully, I have decided to abandon OpenBSD and thought I would
> share my reasoning with this l
tun
tun0
vr0
vr1
vr2
vr3
--Ryan Slack
ok at offlineimap,
http://offlineimap.org/ , which syncs remote IMAP servers to either a
local IMAP server or to Maildir.
Best wishes,
Ryan
--
|_)|_/ Ryan Kavanagh | Debian Developer
| \| \ http://ryanak.ca/ | GPG Key 4A11C97A
n boxes. I
don't see it in the ports tree and I don't know if it will work on
OpenBSD, but it's worth a try.
The homepage[0] is out of date, but you can get the latest version
here[1].
Best wishes,
Ryan
[0] http://www.enricozini.org/sw/nodm/
[1] http://ftp.de.debian.org/debian/pool/
test parallel building of perl (without having to restart the whole
build process from /usr/src), I can try to figure out what the problem
is later on today / when I get back Monday from visiting family. Is it a
matter of
cd /usr/src/gnu/usr.bin && make -jN perl
and seeing if things work ou
On Fri, Mar 29, 2013 at 06:20:33AM -0700, Chris Cappuccio wrote:
> make -j breaks in the perl build at the moment
I was, thanks for pointing that out. Is there anywhere I could have
found out that it was broken?
Best wishes,
Ryan
--
|_)|_/ Ryan Kavanagh | Debian Develo
, any thoughts on how to
resolve it? The files are there, but they seem to be missing from @INC:
$ locate '/usr*Escapes.pm'
/usr/libdata/perl5/Pod/Escapes.pm
/usr/obj/gnu/usr.bin/perl/cpan/Pod-Escapes/lib/Pod/Escapes.pm
/usr/src/gnu/usr.bin/perl/cpan/Pod-Escapes/lib/Pod/Escapes.pm
Be
probably clearer from the examples
I gave and the patch.
Thanks for your time.
Best wishes,
Ryan
[0] https://lists.mindrot.org/pipermail/openssh-unix-dev/2013-March/031166.html
--
|_)|_/ Ryan Kavanagh | Debian Developer
| \| \ http://ryanak.ca/ | GPG Key 4A11C97A
x27;s
key against "somefile".
Best wishes,
Ryan
--
|_)|_/ Ryan Kavanagh | Debian Developer
| \| \ http://ryanak.ca/ | GPG Key 4A11C97A
On Mon, Dec 31, 2012 at 04:53:15PM +1100, Aaron Mason wrote:
> Ok, I just tried freeing NULL, and it did nothing. Granted it was on
> a Linux system but still...
free() handles a NULL pointer by doing nothing, and it will behave this
way on any posix system compliant system. However, on an OpenBS
On Fri, Nov 09, 2012 at 06:27:06PM +0200, Dan Shechter wrote:
> I can do some assumptions regarding the TCP flow and its origins. Its
> coming from the stock exchange over IPSEC gateways over leased lines.
> I think I can trust the origin of the flow. At least I can trust it as
> much as the off t
On Fri, Nov 09, 2012 at 04:14:28PM +0100, Ariel Burbaickij wrote:
> What is the rationale behind this statement:
>
>
> "...
> - CPU: maximum SINGLE CORE "turbo" speed. Disable the other cores,
> they're not helping you at all..."?
OpenBSD doesn't run multiprocessor inside the kernel, so SMP pr
My immediate reaction is "don't do it", but on the other hand I've never
known people for whom 'money is not a problem' to shy away from
something because of boring concerns like security. So...
Software:
Basically, to do this "correctly" you need to parse all the packets
running in both directi
On Tue, Oct 02, 2012 at 09:59:05AM +0200, Christiano F. Haesbaert wrote:
> Why not using tcpbench where you can actually specify the parameters
> and know what is going on :).
>
> Play with buffer sizes and you'll see a big difference, using -u will
> give you the actual PPS.
I agree with this.
600Mbps seems about right, I tested a pair of E5649-based boxes to
550Mbps last year (with aes-128-gcm):
http://marc.info/?l=openbsd-misc&m=134033767126930
You'll probably get slightly more than 600 with with multiple TCP
streams.
Assuming PF was enabled for your test (the default configuration
hors, or the anchors may make it worse
(PF's ruleset optimization mechanisms will not operate across anchors).
Can you explain in more detail what you are doing with these bi-nat
rules?
-Ryan
You're definitely on track, although I was referring to D.J.
Bernstein's recent slides: http://cr.yp.to/talks/2012.06.04/slides.pdf
In these, he does bring up the same problems again that his DNSCURVE
purported to solve, about weak algorithms, signing (or lack of),
forgeries, and UDP amplification
On Thu, Aug 23, 2012 at 12:08 PM, Ted Unangst wrote:
people designing the protocol never got that far.
>
> Anyway the workaround du jour is certificate pinning. Your browser is
> supposed to remember the cert used for the previous connection and
> warn if it changes, which reduces the window of o
On Fri, Jun 29, 2012 at 01:20:49PM +0200, Martin Pelikan wrote:
> 2012/6/29 Matt Hamilton :
> > Does pfsync require firewalls to have the same firewall rules on all
> > hosts in the sync group?
>
> pfsync only synchronizes states. Which rules created them is
> irrelevant.
This absolutely incorrec
$ cat /etc/hostname.trunk0
dhcp trunkport em0 trunkport iwn0 trunkproto failover
Only annoyance is the iwn0 device doesn't attach to the trunk properly
if I boot with the wifi hardware switch turned off.
iwn0: radio is disabled by hardware switch
On Wed, Jun 27, 2012 at 05:04:26PM +0600, �?л�?
100Mb/s with aes-128 / hmac-sha1 on
hw.model=Intel(R) Xeon(TM) CPU 2.80GHz ("GenuineIntel" 686-class)
hw.vendor=Dell Computer Corporation
hw.product=PowerEdge 1850
550Mb/s with aes-128-gcm (requires AES-NI and amd64) on
hw.model=Intel(R) Xeon(R) CPU E5649 @ 2.53GHz
hw.vendor=HP
hw.product=ProLiant
In my limited experience with ipv6, this has been the case. The
provider has you on a /64 of their own (not part of your /48), so your
WAN interface would have one of their IP's on it, and they should tell
you exactly what it should be. Just as it's done in IPv4. Your own
personal /48 is then route
No, there is no single mutex around PF specifically in OpenBSD, the
whole kernel is wrapped in a biglock.
I think if they work out all the nits and dead-ends we may have
something to learn from this effort, but I don't see this code coming
back to OpenBSD.
It's not critical because they can chang
Are you using route-to in your configuration?
This has been partly fixed in -current; if the route-to rule is matching
on an outbound packet the deferred packet will be routed correctly.
It is still broken in the case where route-to is on the inbound path;
this is trickier to fix and I'm still co
Apologies, I wasn't trying to be funny. There's a few bits of
troubleshooting at
http://trac.roundcube.net/wiki/Howto_Config#ConfiguringforVirtualUsers
where it looks like they describe a similar issue to the one you're
having.
Can't help any more than that though.
On 14/12/2011 10:20,
Wesley M
On Thu, Nov 10, 2011 at 09:43:46PM +, Stuart Henderson wrote:
| sys/net80211/ieee80211_node.c r1.63 (in 5.0 but not 4.9) probably helps.
Thanks for the pointer.
--
Ryan Corder || () ASCII ribbon campaign
|| /\ against HTML email
http://pgp.mit.edu:11371/pks
e not heard anything on
this issue:
4.8 - Added suspend/resume support for PCI ral(4) devices.
4.8 - Fixed bug in hostap mode for the Ralink RT2860, RT3090, RT3390, RT3562
chipset driver.
4.9 - Prevent run(4), rum(4), urtw(4) and ral(4) from adding timeouts if the
driver is dying and imp
aes_intel.S aesni.c
Log message:
Assembler implementation of the GCM mode using the Carry-less
Multiplication (CLMUL) instruction found in the new Intel and
future AMD CPUs.
Done about a year ago and was rotting in my trees until Ryan
prodded Theo to read the white paper and figure out the license
i
o is limited to 2TB logical volumes.
I've had great success with the Areca ARC-1210.
http://www.areca.com.tw/products/pcie.htm
--
Ryan Corder || () ASCII ribbon campaign
|| /\ against HTML email
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEE3781
On Fri, Sep 02, 2011 at 05:41:26AM -0700, Stefan N wrote:
> Okay guys. Thanks for the suggestion.
>
> > On 2 September 2011 09:26, Stefan N wrote:
> >
> > anchors + crontab as Peter suggested is an easy alternative.
Depending on what exact effect you want to acheive, you can maybe do it
without
You and anyone else with an x220 want to be running -current, not the
Aug 17 snapshot. Do a CVS checkout and make build, it shouldn't take
long, especially with a nice SSD like that.
(I don't know that it will fix this specific problem - I don't have one
- but it will definately help other things)
1 - 100 of 349 matches
Mail list logo
