Re: Trouble with remote syslog over TLS

2021-02-16 Thread Seth Hanford
Stuart, Thank you so much for this. I was able to get things working with your configuration guidance. Seth On 2021-02-13 05:18, Stuart Henderson wrote: > On 2021-01-21, Seth Hanford wrote: >> I'm trying unsuccessfully to create a central syslogd logging server >> bet

Trouble with remote syslog over TLS

2021-01-21 Thread Seth Hanford
I'm trying unsuccessfully to create a central syslogd logging server between two OpenBSD 6.8 hosts, but I can't see what I'm missing. My syslog server (logs.lan.ckure.com) has a certificate from my internal CA, and that certificate's Root & Intermediate certs are pushed out internally to the /

FAQ6 patch for Shared Address Space / VMM

2018-04-04 Thread Seth Hanford
The FAQ6 section for VMM Networking incorrectly specified the range for Shared Address Space. RFC6598 section 7 calls out 100.64.0.0/10 As far as I can tell, it’s just the FAQ that misstates this. The vm manpages seem to all call out the correct range --- faq6.html Wed Apr 4 06:19:18 2018 ++

Re: sshd segfaults with incomplete /etc/hosts

2014-05-13 Thread Seth Hanford
On 5/13/14, 2:59 AM, Eric Faurot wrote: > > Yes, but the check must be done for all cases. > The following diff also fixes getnetnamadr. > getaddrinfo is already fine. > > Eric. > Thanks, everyone! I see it's committed. http://marc.info/?l=openbsd-cvs&m=139998227611174&w=2 - Seth

sshd segfaults with incomplete /etc/hosts

2014-05-11 Thread Seth Hanford
While working on consolidating some firewalls, I ended up creating an incomplete /etc/hosts file entry. One line of that file was simply an IP address: 192.168.100.25 Upon ssh from that host (.25) to my sshd server (192.168.100.4), the sshd on .4 segfaulted. Log output of /usr/sbin/sshd included b

Re: mail dovecot: pipe() failed: Too many open files

2007-03-12 Thread Seth Hanford
Stefan Beke wrote: > This kind of message started to fill my log probably month ago: > > Mar 12 07:20:08 mail dovecot: pipe() failed: Too many open files > > I'm using dovecot on small home mail server 10 users. I thought this is > maybe because I'm using maildir, IMAP > and my daemon did have de

Re: Multiple XDM Displays

2007-02-08 Thread Seth Hanford
Seth Hanford wrote: > Hi, > > It looks like this used to be possible with 3.4 > (http://undeadly.org/cgi?action=article&sid=20040315100725&mode=expanded), > but I can't find where these configs live in the CVS tree to check out > the changes. Any pointers to those

Multiple XDM Displays

2007-02-08 Thread Seth Hanford
Hi, Hoping you can provide some additional hints for me. I'm trying to get XDM to loosely emulate Windows XP Fast User Switching, to the extent that my wife and I can each have a graphical desktop session open concurrently, but switch back and forth. Usually, one of us will be using e-mail & a bro

Re: spamd started missing some fakes?

2007-01-18 Thread Seth Hanford
Stuart Henderson wrote: > RFC2821 6.1 - also see 3.7, 4.5.5: > >If there is a delivery failure after acceptance of a message, the >receiver-SMTP MUST formulate and mail a notification message. This >notification MUST be sent using a null ("<>") reverse path in the >envelope. >

spamd started missing some fakes?

2007-01-18 Thread Seth Hanford
I've been VERY pleased with spamd performance on my system. My mail volume is so low (~300 msgs/day) that I may consider removing SpamAssassin, because spamd catches just about everything. I've gone from about 80 spam messages caught by SA to less than 2 caught, per day. Users are also reporting fe

Dovecot 1.0rc2p3 "Too many open files"

2006-11-30 Thread Seth Hanford
Hello all, I've just moved my mail server (OpenBSD RELEASE, GENERIC.MP) from using Courier IMAP & Cyrus SASL to Dovecot, with Postfix using dovecot-auth for SASL. Things have been going OK since around OpenBSD 4.0 release time until yesterday. Postfix, dovecot, amavisd et al are installed from pac

OpenBSD 4.0 - Postfix & Dovecot SASL

2006-09-22 Thread Seth Hanford
I pre-ordered 4.0, and was starting to think about system upgrades. About a month ago I noticed on the Dovecot site that as of Postfix 2.3, Dovecot SASL is a supported SASL auth type for authenticating users during smtpd_sasl restrictions. Has anyone used this under OpenBSD? Anyone with a profess

Re: DVD to distribute OpenBSD Packages (Re: about signing OpenBSD packages)

2006-09-01 Thread Seth Hanford
Paul de Weerd wrote: > On Fri, Sep 01, 2006 at 03:54:46PM +0200, Marius Van Deventer - Umzimkulu > wrote: > | At least it could be a choice. Pay a little more and get a cd set on DVD > | instead of cd. I'm sure it would be no problem to set up a local ftp > | server for those sparc boxes either.

Re: Systrace Logging Redirection

2006-08-08 Thread Seth Hanford
Hannah Schroeter wrote: > Hi! > > On Tue, Aug 08, 2006 at 06:05:22PM +0200, Joachim Schipper wrote: >> [...] > >> What about systrace -e? It logs to stdout. Write a little program in >> your favourite language[1] to send it to syslog with the proper >> facility/priority. > > You mean something l

Systrace Logging Redirection

2006-08-08 Thread Seth Hanford
Hey all, I've been experimenting with systrace and several programs on OpenBSD 3.9-stable. I'm pleased with what the tool lets me do, and with its output, but can't find a way to get it to log to a different file for each systrace'd service. For example, I prepend the following to my otherwise-de

Re: pkg_add -ui - Using Ports except or real Packages?

2006-06-19 Thread Seth Hanford
> It`s not so easy to update all machines using the ports > Easy == like pkg_add -ui :-/ I love the OpenBSD package/ports system. 3 developments that I discovered recently: 1. pkg_add -ui, but it has deficiencies (such as no -stable packages for sparc64) 2. /usr/ports/infrastructure/build/out

Re: Stunnel Connection Failure, undeadly.cgi

2006-06-14 Thread Seth Hanford
Included the maintainer for the heads-up, w/original mail link for log reference... http://marc.theaimsgroup.com/?l=openbsd-misc&m=115014897914046&w=2 Hugo Villeneuve wrote: > Was gonna write about this soon. Run into the same problem while > upgrading a machine from 3.5 to 3.9. > > running an ex

Stunnel Connection Failure, undeadly.cgi

2006-06-12 Thread Seth Hanford
with the same results. Thanks for any tips/assistance, Seth Hanford stunnel.conf # Modified for OpenBSD by Michael Schubert 2003 cert = /etc/ssl/server.crt key = /etc/ssl/private/server.key chroot = /var/www/htdocs/auth setuid = _stunnel setgid = _stunnel pid = /var/www/htdocs/auth/stunnel.pid s