Re: Trouble with remote syslog over TLS

2021-02-16 Thread Seth Hanford
Stuart, Thank you so much for this. I was able to get things working with your configuration guidance. Seth On 2021-02-13 05:18, Stuart Henderson wrote: > On 2021-01-21, Seth Hanford wrote: >> I'm trying unsuccessfully to create a central syslogd logging server >> bet

Trouble with remote syslog over TLS

2021-01-21 Thread Seth Hanford
I'm trying unsuccessfully to create a central syslogd logging server between two OpenBSD 6.8 hosts, but I can't see what I'm missing. My syslog server (logs.lan.ckure.com) has a certificate from my internal CA, and that certificate's Root & Intermediate certs are pushed out internally to the /

FAQ6 patch for Shared Address Space / VMM

2018-04-04 Thread Seth Hanford
The FAQ6 section for VMM Networking incorrectly specified the range for Shared Address Space. RFC6598 section 7 calls out 100.64.0.0/10 As far as I can tell, it’s just the FAQ that misstates this. The vm manpages seem to all call out the correct range --- faq6.html Wed Apr 4 06:19:18 2018 ++

Re: Private cloud hosting recommendations

2015-10-09 Thread Seth
Fri, 09 Oct 2015 11:08:21 -0700, Mike Bregg wrote: I've been using the VPS provider Vultr.com (https://www.vultr.com/) for a few months now, and have no complaints. They're KVM-based, and have datacenters in the US, Europe, Japan, and Australia. They allow you to install from a custom IS

Re: FreeBSD or OpenBSD for my (server/router) purposes? (Total n00b)

2015-09-27 Thread Seth
On Sun, 27 Sep 2015 03:27:46 -0700, Adam wrote: What I'd like is a secure wireless router and a file server (for my mobile devices in the first place, really). Many suggested the PC Engines APU board here. Check. Can it handle both roles, router and file server, or, is it a good idea to hav

Re: resource impact of bgp-spamd

2015-08-11 Thread Seth
On Mon, 10 Aug 2015 14:15:42 -0700, Devin Reade wrote: (I don't see any dedicated mailing list on the bgp-spamd.net web page, so hopefully this is an appropriate place to ask.) There's a mailing list, but it think it's had about one message posted so far. http://mailman.theapt.org/listinfo

Re: new (nasty) spam pattern

2015-08-05 Thread Seth
On Thu, 30 Jul 2015 15:07:24 -0700, Steve Fairhead wrote: Meanwhile, my database of sinners really should be "out there" to ... But where? I update it several times a day... You could start your own block list I suppose, but methinks you'd be reinventing the wheel to some extent. (PS: we

Re: Autopartitioning with PXE and autoinstall

2015-08-05 Thread Seth
On Wed, 05 Aug 2015 05:14:35 -0700, Heine Lysemose wrote: Are there any order the questions/answers should appear in, in the file install.conf? I don't know if the email system mangled your install.conf contents, but is the autopartition URL on the same line as the question? As far as I

Re: new (nasty) spam pattern

2015-07-30 Thread Seth
On Wed, 29 Jul 2015 15:12:17 -0700, Steve Fairhead wrote> But when it does, I'd like to hurt them. I also run spamd; can't seem to find a way to tarpit based on domain rather than IP... Any cluebats? Steve, I had the some problem, lots of spammers were figuring out how to 'climb over the

Re: new (nasty) spam pattern

2015-07-30 Thread Seth
On Thu, 30 Jul 2015 08:09:38 -0700, Seth wrote: Sorry, forgot the link to greyscanner post [3] http://www.mail-archive.com/misc@openbsd.org/msg116961.html

'PermitRootLogin no' sshd_config default on latest snapshot even though ssh root key specified in install.conf

2015-07-28 Thread Seth
Today I ran an automated installation using the latest amd64 install58.iso media. A root ssh key was specified in install.conf, and the key is being correctly installed in /root/.ssh/authorized_keys. This method was working fine with the 5.7 release, but apparently 5.8 now sets 'PermitRoo

Re: elementary opensmtpd setting on rental server

2015-07-22 Thread Seth
On Wed, 22 Jul 2015 06:22:36 -0700, Denis Fondras wrote: Please don't. This will allow people from the outside to send mail to other people not on your machine using your server as a relay. This is most certainly not what you want. Use something like You should re-read the manual :) If "fr

Re: elementary opensmtpd setting on rental server

2015-07-22 Thread Seth
On Wed, 22 Jul 2015 04:14:59 -0700, tuyosi wrote: listen on lo0 listen on em0 port 587 table aliases db:/etc/mail/aliases.db accept from any for domain "openbsd.link" aliasdeliver to maildir accept from any for domain "openbsd.link" deliver to maildir accept for local alias

Octeon - EdgeRouter Lite panic during rm -rf /usr/ports

2015-07-21 Thread Seth
& ps (both) below. Thanks, Seth # dmesg Copyright (c) 1982, 1986, 1989, 1991, 1993 The Regents of the University of California. All rights reserved. Copyright (c) 1995-2015 OpenBSD. All rights reserved. http://www.OpenBSD.org OpenBSD 5.8-beta (GENERIC) #2: Sat Jul 11 21:34:50 CEST 2015

relayd support for ECDSA certificates

2015-07-20 Thread Seth
Anyone know if relayd supports ECDSA certificates? I'm trying to setup a TLS accelerator using an ECDSA cert and it's crapping with a 'Broken pipe' error right after loading the certificate and private key. OpenBSD hostname.tld 5.7 GENERIC#1 amd64 === relayd.conf === table

Re: SPARC minimum hardware specification

2015-07-18 Thread Seth
On Fri, 17 Jul 2015 09:15:14 -0700, BSD wrote: The replies to the OP seem discouraging. If not Oracle, and not Fujitsu, then what? If not a sparc desktop, then what about a sparc router? A RISC anything?? You might be interested in Bunny's Novena project [1] [2] [1] http://www.mail-archive.co

Re: adsuck: script missing?

2015-07-15 Thread Seth
On Wed, 15 Jul 2015 14:09:48 -0700, Erling Westenvik wrote: I've given up on adsuck. In addition to being unusable in a DHCP environment, it proved useless anyway, making both firefox and chrome sessions crash all the time for no apparent reason. Likewise. Fell back to using the Adguard brows

Re: dhclient.conf does not appear to support resolv.conf formatting for nameservers on non-standard port

2015-07-09 Thread Seth
On Thu, 09 Jul 2015 19:40:05 -0700, Philip Guenther wrote: Uh, so you want to _ignore_ the option from the server? Then add ignore domain-name-servers; to your dhclient.conf and put the desired nameserver line in your resolv.conf.tail file. That was the missing link, problem solved, than

Re: dhclient.conf does not appear to support resolv.conf formatting for nameservers on non-standard port

2015-07-09 Thread Seth
On Thu, 09 Jul 2015 18:18:37 -0700, Edgar Pettijohn wrote: # chflags schg /etc/resolv.conf Just keep in mind you have to go to single user mode to undo the above. That's an interesting workaround I hadn't considered. The problem is that this setting must be deployed via an Ansible playbo

Re: dhclient.conf does not appear to support resolv.conf formatting for nameservers on non-standard port

2015-07-09 Thread Seth
On Thu, 09 Jul 2015 18:01:42 -0700, Ryan Freeman wrote: don't wrap the ip address in square [] brackets. should clear it up The square brackets are necessary when specifying a non-standard DNS port [1] nameserver IPv4 address (in dot notation) or IPv6 address (in hex-and-

dhclient.conf does not appear to support resolv.conf formatting for nameservers on non-standard port

2015-07-09 Thread Seth
I'm trying to use the following statement in /etc/dhclient.conf supersede domain-name-servers [127.0.0.1]:40; But when the machine boots and the network starts it fails to apply the setting. The error message is: /etc/dhclient.conf line 4: expecting decimal octet. supersede domain-name-serve

Problem building OpenSMTPD 5.7.1-rc1 so that /usr/sbin/smtpd links to LibreSSL 2.2.0 /usr/local/lib/libssl.so.32.0 library

2015-06-29 Thread Seth
Build environment: OpenBSD 5.7-release (x64) with all latest patches applied via Mtier openup utility. LibreSSL 2.2.0 OpenSMTPD 5.7.1-rc1 I'm having difficulty getting OpenSMTPD 5.7.1-rc1 to build and link the /usr/sbin/smtpd binary to the proper /usr/local/lib/libssl.so.32.0 library prov

Re: sshd segfaults with incomplete /etc/hosts

2014-05-13 Thread Seth Hanford
On 5/13/14, 2:59 AM, Eric Faurot wrote: > > Yes, but the check must be done for all cases. > The following diff also fixes getnetnamadr. > getaddrinfo is already fine. > > Eric. > Thanks, everyone! I see it's committed. http://marc.info/?l=openbsd-cvs&m=139998227611174&w=2 - Seth

sshd segfaults with incomplete /etc/hosts

2014-05-11 Thread Seth Hanford
While working on consolidating some firewalls, I ended up creating an incomplete /etc/hosts file entry. One line of that file was simply an IP address: 192.168.100.25 Upon ssh from that host (.25) to my sshd server (192.168.100.4), the sshd on .4 segfaulted. Log output of /usr/sbin/sshd included b

Re: Possible bug with relayd, usually experienced during high PPS, double free() problem

2012-01-18 Thread Seth Wright
elayd or after me trying to fix it. I'll try again with a stock relayd later on tonight and report my results. (Zack, your dmesg and relayd.conf didn't come through--send them inline, not as attachments.) I'm late to a meeting, but if a dmesg and/or relayd.conf are requested, I can a

Re: avrdude

2011-09-23 Thread Seth Wright
be "updating documentation" is a good-enough reason to dust off my Arduino board and start playing again... -- Seth

Re: Able to access data on HD on platforms with different endianness?

2008-01-02 Thread Seth Brundle
2008/1/2, Marco Peereboom <[EMAIL PROTECTED]>: > > Don't mix endianess on filesystems. It won't work. Thanks. Surely saved some time for me. On Wed, Jan 02, 2008 at 12:34:52PM +0100, Seth Brundle wrote: > > Hello list & happy new year, > > > > d

Able to access data on HD on platforms with different endianness?

2008-01-02 Thread Seth Brundle
but that's not needed anyways). Now my question: The x86 machine is little endian, the PowerPC is big endian. Is there a chance to have access to my data or will it all be 'upside down' (or, even worse, would I destroy the disklabel)? Thanks, Seth

Re: mail dovecot: pipe() failed: Too many open files

2007-03-12 Thread Seth Hanford
er since. I'm using dovecot-1.0.rc15 - Seth PS - Thanks again, Brad! Works like a champ now.

Re: Multiple XDM Displays

2007-02-08 Thread Seth Hanford
Seth Hanford wrote: > Hi, > > It looks like this used to be possible with 3.4 > (http://undeadly.org/cgi?action=article&sid=20040315100725&mode=expanded), > but I can't find where these configs live in the CVS tree to check out > the changes. Any pointers to those

Multiple XDM Displays

2007-02-08 Thread Seth Hanford
Hi, Hoping you can provide some additional hints for me. I'm trying to get XDM to loosely emulate Windows XP Fast User Switching, to the extent that my wife and I can each have a graphical desktop session open concurrently, but switch back and forth. Usually, one of us will be using e-mail & a bro

Re: spamd started missing some fakes?

2007-01-18 Thread Seth Hanford
smtp-vilter now. I've not come from a Sendmail background, and my Postfix experience started before milter support was included in 2.3, so I had largely ignored milter's as an option. Marc's work looks very intriguing, and PF integration is a great draw. Thanks everyone for the input; I think I'm safe for now, but just wanted to ensure I was staying on top of recent log trends. - Seth

spamd started missing some fakes?

2007-01-18 Thread Seth Hanford
I've been VERY pleased with spamd performance on my system. My mail volume is so low (~300 msgs/day) that I may consider removing SpamAssassin, because spamd catches just about everything. I've gone from about 80 spam messages caught by SA to less than 2 caught, per day. Users are also reporting fe

Dovecot 1.0rc2p3 "Too many open files"

2006-11-30 Thread Seth Hanford
n the OpenBSD ports tree CVS log. I've seen fstat reporting something like 36+ connections for one of my mail accounts when it was just sitting idle. I could increase ulimit like many MySQL users have in the past, but this seems more like a runaway program to me. Thanks, Seth DOVECOT: Nov 30

OpenBSD 4.0 - Postfix & Dovecot SASL

2006-09-22 Thread Seth Hanford
the Cyrus sasl code (setting smtpd_sasl_type to dovecot in main.cf, and not configuring a cyrus sasl2 smtpd.conf)? Thanks for your input; I'd like to plan ahead b/c this would also mean a migration from courier-imap to Dovecot. - Seth

Re: DVD to distribute OpenBSD Packages (Re: about signing OpenBSD packages)

2006-09-01 Thread Seth Hanford
Paul de Weerd wrote: > On Fri, Sep 01, 2006 at 03:54:46PM +0200, Marius Van Deventer - Umzimkulu > wrote: > | At least it could be a choice. Pay a little more and get a cd set on DVD > | instead of cd. I'm sure it would be no problem to set up a local ftp > | server for those sparc boxes either.

Re: Systrace Logging Redirection

2006-08-08 Thread Seth Hanford
ty/priority. > > You mean something like logger(1)? Woo hoo! This is exactly what I needed (and just in time, as I was reading up on Sys::Syslog). I recall seeing this in the past, but hadn't come up with it this time around. Thanks to all, I should be able to make this work,

Systrace Logging Redirection

2006-08-08 Thread Seth Hanford
r/log/systrace/named? If I understand correctly, even though thttpd and named might log under different facilities, there's no option in systrace to specify a facility name. Without this I think my answer is no, but was hoping some ingenious hacker might have a solution. Thanks, Seth

Re: pkg_add -ui - Using Ports except or real Packages?

2006-06-19 Thread Seth Hanford
t how bad things are. Note this isn't a personal attack on you, sebastian, just an observation in general. Package management has come a long way, and I hope more people realize it and be thankful. - Seth > That`s all I wanted to point out. Why not using this neat update-tool > (pkg_add -u

Re: Stunnel Connection Failure, undeadly.cgi

2006-06-14 Thread Seth Hanford
it myself, thanks for sharing your knowledge on the matter. - Seth

Stunnel Connection Failure, undeadly.cgi

2006-06-12 Thread Seth Hanford
with the same results. Thanks for any tips/assistance, Seth Hanford stunnel.conf # Modified for OpenBSD by Michael Schubert 2003 cert = /etc/ssl/server.crt key = /etc/ssl/private/server.key chroot = /var/www/htdocs/auth setuid = _stunnel setgid = _stunnel pid = /var/www/htdocs/auth/stunnel.pid s

ALi M5451 recognized but doesn't play sounds

2005-08-27 Thread Seth Frankel
I'm using OpenBSD 3.7 on a Compaq Presario 900 laptop and the sound device (ALi M5451) is recognized and configured using the autri(4) driver, but I don't get any output from the speakers when I do something like: $ cat /bsd > /dev/audio or when I try to play an audio CD. I checked all of the mi

Re: Graphics Editor

2005-07-16 Thread Seth Jackson
05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > Seth Jackson wrote: > > I was wondering what I should use for graphics editing on OpenBSD. I > > know there is the GIMP, but I didn't know if there were any other good > > graphics editing programs for OpenBSD. Als

Graphics Editor

2005-07-15 Thread Seth Jackson
I was wondering what I should use for graphics editing on OpenBSD. I know there is the GIMP, but I didn't know if there were any other good graphics editing programs for OpenBSD. Also, what was the art on the OpenBSD.org homepage created with? -- Seth Jackson [EMAIL PROTECTED]

Re: D-Link DWL-G630 Support

2005-07-02 Thread Seth Jackson
So basically I should just forget about using this card with OpenBSD? On 7/2/05, Jonathan Gray <[EMAIL PROTECTED]> wrote: > On Sat, Jul 02, 2005 at 09:25:14AM -0400, Seth Jackson wrote: > > I recently bought a D-Link DWL-G630 Rev. A1 at Radio Shack. > > I took the card hom

D-Link DWL-G630 Support

2005-07-02 Thread Seth Jackson
I recently bought a D-Link DWL-G630 Rev. A1 at Radio Shack. I took the card home plugged it in to my laptop and this message was written to the console. Marvell Semiconductor, 88W8310 802.11g Cardbus PC Card, 83, 01 (manufacturer 0x2df, product 0x8310) vendor "Marvell", unknown product 0x1fa6 (cl