Problem httpd with https and SNI -current

2020-10-16 Thread ml
Hello at all, my httpd.conf - prefork 10 logdir "/var/log" types { include "/usr/share/misc/mime.types" } server "host1.example.com" { listen on * tls port 443 no log root "/htdocs/host1" tls {

Re: iwm wifi driver errors

2020-03-15 Thread Whistlez ML
On Sun, Mar 15, 2020 at 02:15:36PM +, b...@0x1bi.net wrote: > Have you installed the wireless firmware? > http://firmware.openbsd.org/firmware/ > yeah of course without the firmware the interface doesn't work, and now I'm using the wifi.

iwm wifi driver errors

2020-03-14 Thread whistlez-ml
Hi, I found the following error in the logs about the wifi driver iwm: iwm0: could not remove binding (error 35) iwm0: fatal firmware error iwm0: could not remove binding (error 35) iwm0: could not remove binding (error 35) iwm0: failed to update MAC iwm0: could not add MAC context (error 35) iw

Re: Hardening browser

2020-03-07 Thread whistlez-ml
On Thu, Mar 05, 2020 at 07:32:36AM -0700, Luke A. Call wrote: > On 03-05 04:18, Tomasz Rola wrote: > > On Wed, Mar 04, 2020 at 02:06:40AM +0100, whistlez...@riseup.net wrote: > > > Hi, > > > in the following message: > > > https://marc.info/?l=openbsd-misc&m=158110613210895&w=2 > > > Theo discourag

Re: Hardening browser

2020-03-07 Thread whistlez-ml
On Wed, Mar 04, 2020 at 03:28:35PM +, Kevin Chadwick wrote: > On 2020-03-04 11:38, Ottavio Caruso wrote: > > Probably not what you were looking for but, back in the days when I > > was ultra paranoid about my web browsing, I used to use stripped down > > live usb installations of Linux distros

Re: Hardening browser

2020-03-05 Thread whistlez-ml
On Wed, Mar 04, 2020 at 11:38:40AM +, Ottavio Caruso wrote: > On Wed, 4 Mar 2020 at 01:06, wrote: > > > > Hi, > > in the following message: > > https://marc.info/?l=openbsd-misc&m=158110613210895&w=2 > > Theo discourages to use unveil instead of chroot. > > I asked if he suggests the same for

Hardening browser

2020-03-03 Thread whistlez-ml
Hi, in the following message: https://marc.info/?l=openbsd-misc&m=158110613210895&w=2 Theo discourages to use unveil instead of chroot. I asked if he suggests the same for the browser but he asked that chroot is onlye for *root*. Then what should I do to hardening the most exposed piece of code tha

6.6, X and braswell

2020-03-02 Thread whistlez-ml
Hi, I have the following bug: https://marc.info/?t=15636262941&r=1&w=2 now I'm on 6.5 and it works, but maybe one month ago I tried to install 6.6 and I found the bug. Anyone know if it was been resolved ? Thanks Whistlez

ffs details

2020-02-25 Thread whistlez-ml
Hi, I need some details about ffs, I read the kernel source but my c knowledge is very basic. I understood all about the superblock but my problem is understand how the files are allocated on the disk. Anyone could give me more details about files allocation ? Thank you.

Re: strange dmesg

2020-02-10 Thread whistlez-ml
On Mon, Feb 10, 2020 at 09:45:06AM -, Stuart Henderson wrote: > On 2020-02-10, Janne Johansson wrote: > > Den lör 8 feb. 2020 kl 11:31 skrev : > > > >> Hi, > >> I have some strange output from dmesg, what could be ? > >> At the follwoing link I've posted some screenshots: > >> https://postimg.

strange dmesg

2020-02-08 Thread whistlez-ml
Hi, I have some strange output from dmesg, what could be ? At the follwoing link I've posted some screenshots: https://postimg.cc/gallery/1o4wsaw74/ Thank you

Re: chroot vs unveil

2020-02-07 Thread whistlez-ml
On Thu, Feb 06, 2020 at 10:35:17AM -0700, Theo de Raadt wrote: > Kevin Chadwick wrote: > > > I am considering replacing all chroot use with unveil in my processes even > > where > > no filesystem access is required. > > I am discouraging this. > > unveil is a complicated mechanism, and we may

Re: Support for Intel XL710 NIC

2016-08-17 Thread ML mail
Thanks to all of you for your feedback. On Wednesday, August 17, 2016 7:54 PM, Chris Cappuccio wrote: ML mail [mlnos...@yahoo.com] wrote: > Hi, > > Will OpenBSD 6.0 support the Intel XL710 network interface cards? > I think someone was working on the Intel 40Gbps chips

Support for Intel XL710 NIC

2016-08-17 Thread ML mail
Hi, Will OpenBSD 6.0 support the Intel XL710 network interface cards? Regards ML

Re: athn0: device timeout with AR9271

2016-08-09 Thread ML mail
hn.4 Last line "Bugs": ‎Host AP mode does not work with USB devices. Freundliche Grüße / Regards -stefan kapfhammer Originalnachricht Von: ML mail Gesendet: Montag, 25. Juli 2016 12:00 An: Miscellaneous OBSD Antwort an: ML mail Betreff: athn0: device timeout with AR9271 Hi, I installe

Re: athn0: device timeout with AR9271

2016-08-08 Thread ML mail
, Stefan Sperling wrote: On Tue, Jul 26, 2016 at 07:57:46PM +, ML mail wrote: > Should I upgrade to -CURRENT? Yes!

Re: athn0: device timeout with AR9271

2016-07-26 Thread ML mail
Hi Stefan, It's a Nexcom network application NSA 1150, you will find the exact specs here: http://www.nexcom.com/Products/network-and-communication-solutions/entry-leve l-appliance/entry-level-appliance/network-communication-nsa-1150 Regards, ML On Tuesday, July 26, 2016 10:

Re: athn0: device timeout with AR9271

2016-07-26 Thread ML mail
is there any patches I can try from you? Regards, ML On Tuesday, July 26, 2016 11:38 AM, Adam Wolk wrote: On Mon, Jul 25, 2016 at 01:31:13PM +0200, Stefan Sperling wrote: > On Mon, Jul 25, 2016 at 09:57:38AM +0000, ML mail wrote: > > Hi, > > > > I installed a USB Wi

athn0: device timeout with AR9271

2016-07-25 Thread ML mail
.255.255.0 media autoselect mediaopt hostap mode 11b chan 6 nwid wpakey So I was wondering what is going on here... Is my Wifi USB dongle crap? or am I maybe doing something wrong? Let me know if I should provide any other infos... Regards ML

Re: Disk I/O performance of OpenBSD 5.9 on Xen

2016-07-19 Thread ML mail
Hi, Here you are: $ dd if=/dev/zero of=testfile bs=1M count=1000 1000+0 records in 1000+0 records out 1048576000 bytes transferred in 45.356 secs (23118558 bytes/sec) Running OpenBSD 5.9 as domU on Xen 4.4 on DELL PowerEdge R410 with two SATA disks in hardware RAID1 on the dom0. RegardsML

Re: Random delay on incoming SMTP connection to OpenSMTPD

2016-06-11 Thread ML mail
resources? On Friday, June 10, 2016 11:46 PM, Devin Reade wrote: --On Friday, June 10, 2016 09:04:07 PM + ML mail wrote: > Well right now I have max-children on 50, so you mean lowering this value > to something like 10?  But then if I receive 20 simultaneous incoming SMTP > c

Re: Random delay on incoming SMTP connection to OpenSMTPD

2016-06-10 Thread ML mail
Well right now I have max-children on 50, so you mean lowering this value to something like 10? But then if I receive 20 simultaneous incoming SMTP connection, what will happen to the 10 others?Will they fail/timeout or simply wait? On Friday, June 10, 2016 11:01 PM, Devin Reade wrote:

Random delay on incoming SMTP connection to OpenSMTPD

2016-06-10 Thread ML mail
Hi, Is it somehow possible to add a random delay of between 5-10 seconds upon a new incomming connection to OpenSMTPD on OpenBSD? I am asking this because I sometime have 20 mails all arriving at the same time and then spamassassin is really slow because it spawns 20 processes and uses all my

dhcarp

2016-05-13 Thread ML mail
Hi Did anyone already try this DHCARP article https://sites.google.com/site/bsdstuff/dhcarp in order to run carp with an ISP providing a dynamic IP address through DHCP? Or is there any easier method for dealing with a dynamic IP address on the WAN side of the CARP interfaces? Regards ML

reboot automatically after stack trace / system halted

2016-05-13 Thread ML mail
Hello, My OpenBSD 5.9 just got a stack trace and stuck in the prompt "The operating system has halted". I would like it to reboot automatically in case this happens again, is this possible? I got ddb.panic=0 in my /etc/sysctl.conf file but in that very precise case there was no panic just a stac

Re: OpenSMTPD with filter-spamassassin / max-children

2016-04-20 Thread ML mail
06:23:18PM +0200, Joerg Jung wrote: > > Am 18.04.2016 um 16:56 schrieb ML mail : > > > > I have configured OpenSMTPD on OpenBSD 5.9 with the filter-spamassassin as a > relay for a few of my webapp servers and have the problem when a webapp > suddently sends over 30 mails at

Re: OpenSMTPD with filter-spamassassin / max-children

2016-04-19 Thread ML mail
not need a spam filter for sending mails from various web apps, but I simply can not trust web apps from third-parties, e.g. a WordPress website gets hacked and is abused to send mails in mass... by the way I also use the filter-clamav, you never know. Regards ML On Tuesday, April 19, 2016 6

OpenSMTPD with filter-spamassassin / max-children

2016-04-18 Thread ML mail
but then it just postpones the problem really... so is there maybe another way to deal better with that issue? Regards ML

Re: Ruby 1.9.3 package on OpenBSD 5.9 (snapshots) missing

2016-03-19 Thread ML mail
OPENBSD_5_8 lang/ruby/1.9 Then I just get: On Saturday, March 19, 2016 8:16 PM, Nigel Taylor wrote: On 03/19/16 17:46, ML mail wrote: > Hi Stuart, > > Thanks for explaining. I now did the following > > $ cd /usr > $ cvs -qd anon...@anoncvs.ca.openbsd.org:/cvs get -P p

Re: Ruby 1.9.3 package on OpenBSD 5.9 (snapshots) missing

2016-03-19 Thread ML mail
er as suggested, this worked but unfortunately ruby core dumps when I run the "bundle exec rake snorby:setup RAILS_ENV=production". By the way I am using the ruby pacakge 2.0 here from OpenBSD. Regards ML On Saturday, March 19, 2016 9:10 PM, ML mail wrote: My bad, in my CVS example I had

Re: Ruby 1.9.3 package on OpenBSD 5.9 (snapshots) missing

2016-03-19 Thread ML mail
something? Btw I am running OpenBSD 5.9 (snapshots). Regards ML On Saturday, March 19, 2016 10:05 AM, Stuart Henderson wrote: On 2016-03-18, ML mail wrote: > You mean I should just take the ports.tar.gz file of OpenBSD 5.8 and compile > ruby 1.9 from there? > > > I don't reall

Re: Ruby 1.9.3 package on OpenBSD 5.9 (snapshots) missing

2016-03-19 Thread ML mail
5:20:26 PM ML mail wrote: > Hi, > > I just noticed that there is no Ruby version 1.9.3 package anymore in > OpenBSD 5.9 (snapshots) although there is still version 1.8.7... Any ideas > why? or was it simply forgotten? > > Regards > ML Ruby 1.9 has been end of life for qu

Re: Ruby 1.9.3 package on OpenBSD 5.9 (snapshots) missing

2016-03-19 Thread ML mail
rb' *** Error 2 in . (exts.mk:64 'ext/bigdecimal/all') *** Error 2 in /tmp/ruby-build.20160318182812.50827/ruby-1.9.3-p484 (Makefile:569 'build-ext') Any ideas? On Friday, March 18, 2016 6:37 PM, Michael McConville wrote: ML mail wrote: > I just noticed that the

Re: Ruby 1.9.3 package on OpenBSD 5.9 (snapshots) missing

2016-03-18 Thread ML mail
You mean I should just take the ports.tar.gz file of OpenBSD 5.8 and compile ruby 1.9 from there? I don't really know where is this CVS attic that you mention. On Friday, March 18, 2016 9:55 PM, Jeremy Evans wrote: On Fri, Mar 18, 2016 at 10:49 AM, ML mail wrote: > Thanks for

Ruby 1.9.3 package on OpenBSD 5.9 (snapshots) missing

2016-03-18 Thread ML mail
Hi, I just noticed that there is no Ruby version 1.9.3 package anymore in OpenBSD 5.9 (snapshots) although there is still version 1.8.7... Any ideas why? or was it simply forgotten? Regards ML

Re: How to configure the domain used by default by OpenSMTPD

2016-02-22 Thread ML mail
I have already adapted my accept parameter to include the domain as hostname as you can see below: accept from local for any relay hostname realdomain.tld but unfortunately it still uses the internal domain name in the from. Regards ML On Monday, February 22, 2016 11:10 AM, Jiri B wrote

Re: How to configure the domain used by default by OpenSMTPD

2016-02-22 Thread ML mail
Great, thank you very much that worked perfectly! On Monday, February 22, 2016 11:39 AM, Raf Czlonka wrote: On Mon, Feb 22, 2016 at 10:09:25AM GMT, Jiri B wrote: > On Mon, Feb 22, 2016 at 09:40:00AM +0000, ML mail wrote: > > > Hello, > > > > How do one configure th

How to configure the domain used by default by OpenSMTPD

2016-02-22 Thread ML mail
found So in fact it sends mails with u...@internal.lan and I would like it to send mails with u...@realdomain.tld, how can I achieve that? I did not find the config parameter in smtpd.conf for that purpose. Best regards ML

Configure SLAAC and DHCPv6-PD in /etc/hostname.em0

2015-09-29 Thread ML mail
use a /64. Regards ML

Re: CPU criteria for OpenBSD firewall

2015-02-19 Thread ML mail
Thanks to all of you for this interesting discussion. My OpenBSD firewall will only be doing PF as I totally agree that a firewall should have the least userland application running as possible of course if your budget permits it. So far I have around 340 rules (as the number of lines in the out

CPU criteria for OpenBSD firewall

2015-02-18 Thread ML mail
-3_50-GHz Or asked differently, which are the importants criteria to look at first for a CPU intended to be used in an OpenBSD firewall? Regards ML

Re: Available disks are: none at installation of OpenBSD 5.5

2014-09-22 Thread ML mail
No chances neither with a USB key. Could this be a bug in OpenBSD? If yes where would I report that? On Friday, September 19, 2014 5:07 PM, ML mail wrote: A small update: I now have tried switching to IDE mode instead of AHCI in the BIOS and also have tried two different disk devices (250

Re: Available disks are: none at installation of OpenBSD 5.5

2014-09-19 Thread ML mail
: On 09/18/14 12:27, ML mail wrote: > Hi, > > I'm trying to install OpenBSD 5.5 (amd64) to use as a firewall on a > SATA flash drive of 8 GB. Unfortuantely the drive does not get > detected by OpenBSD at the installation so I am unable to install > OpenBSD. > > The

Re: Available disks are: none at installation of OpenBSD 5.5

2014-09-19 Thread ML mail
dev1 reportid 2 not configured softraid0 at root scsibus1 at softraid0: 256 targets On Friday, September 19, 2014 3:39 AM, Chris Cappuccio wrote: Try OpenBSD 5.6, a workaround was provided in ahci for this issue. Or, recompile your OpenBSD 5.5 kernel with this patch: http://openbsd.cs.toron

Available disks are: none at installation of OpenBSD 5.5

2014-09-18 Thread ML mail
evice on port 1 Any ideas for a workaround or fix? Regards ML

Re: Enable 802.11n for an access point

2014-07-01 Thread ML mail
Aha, that's a good point :-) Well thanks for the hint Peter. On Tuesday, July 1, 2014 5:00 PM, Peter Hessler wrote: you need to write some/a bunch of code to enable 11n support.  OpenBSD does not have it yet. On 2014 Jul 01 (Tue) at 07:57:42 -0700 (-0700), ML mail wrote: :Hi, : :I w

Enable 802.11n for an access point

2014-07-01 Thread ML mail
IEEE802.11 media mode: 11n The best mode which works is "mode 11g" but that only delivers 54Mbit/s in theory. So does anyone know which option I need to do that? Regards ML

Re: PXE auto_install

2014-06-25 Thread ML mail
Thanks for the hack, I guess I will wait for this or a similar solution being implemented into the installer, which hopefully will happen. On Tuesday, June 24, 2014 9:05 PM, Jiri B wrote: On Tue, Jun 24, 2014 at 08:10:59AM -0700, ML mail wrote: > Hi, > > The new OpenBSD auto_ins

PXE auto_install

2014-06-24 Thread ML mail
and one for swap) ? Regards ML

LAN vs VLAN interface performance

2014-06-19 Thread ML mail
10 Gbit/s interfaces for redundancy. So my four VLANs would be inside a trunk interface. Regards ML

Re: pf.conf - block in all - seems to be ignored

2014-04-05 Thread ml
On Sat, Apr 05, 2014 at 04:53:26PM +0200, Mario Kothe wrote: <..> > This rule seems to have no effect. A scan from remote shows port 53 <..> Hi Mario, Can you show the output of "pfctl -s rules"? Regards, Alex

Re: Why does OpenBSD lack a man page for ulimit?

2013-12-01 Thread ml
On Sun, Dec 01, 2013 at 07:50:29PM -0700, Jorge Castillo wrote: > I could expand about what caused my need for more memory, but I don't > think that would be relevant. I am just really curious about this > issue since everything else seems to be so well documented, this > certainly seem like a weir

Re: remove entry from spamdb greylist

2013-08-14 Thread ML mail
REY until it expires, so maybe I wasn't patient enough. Anyhow today as I checked this IP is listed under WHITE so it looks like it finally worked as I wanted. Regards, M.L. From: Peter N. M. Hansteen To: ML mail Cc: misc Sent: Wednesday, August 14,

Re: remove entry from spamdb greylist

2013-08-14 Thread ML mail
ly to allow mail coming in from this mail server. Regards, M.L. From: Boudewijn Dijkstra To: misc Sent: Wednesday, August 14, 2013 12:39 PM Subject: Re: remove entry from spamdb greylist Op Tue, 13 Aug 2013 17:49:51 +0200 schreef ML mail : > I am using

remove entry from spamdb greylist

2013-08-13 Thread ML mail
Hello, I am using spamd in greylisting mode and would like to delete the following entry: GREY|207.126.144.121|eu1sys200aog106.obsmtp.com|||1376398715|1376400232|1376413115|4|0 I tried the following command: spamdb -d 207.126.144.121 Unfortunately it does not remove the entry as it is still

External IP address not to go through IPSec VPN

2013-04-01 Thread ML mail
IP address of the firewalls to go through the internet and not the VPN. Is this kind of configuration possible? If yes how? Regards, ML

Re: bootable OpenBSD USB stick from windows?

2013-02-11 Thread ml
On Mon, Feb 11, 2013 at 10:51:29PM +, Heptas Torres wrote: > Hello > I have an old laptop with no CD-ROM but can boot from USB. Given that > I only have access to a windows machine to burn an iso image, do you > know of an easy way (e.g. some windows programa) to create a bootable > OpenBSD USB

Re: Installing 5.2 with PXE

2012-12-09 Thread ML mail
old 5.1 directory. Really weird but at least now I know. Thanks for the help! From: Nick Holland To: misc@openbsd.org Sent: Sunday, December 9, 2012 7:20 PM Subject: Re: Installing 5.2 with PXE On 12/09/12 11:17, ML mail wrote: > Hi, > > I want t

Installing 5.2 with PXE

2012-12-09 Thread ML mail
am I doing something wrong here? Regards, ML

Re: Time conversion

2012-12-05 Thread ml
On Thu, Dec 06, 2012 at 09:31:43AM +1100, Rod Whitworth wrote: > I think I'm suffering from OldTimers Disease ;-) > > I often have cause to use "date -r " to show me what the date stamp is > in human terms. > It is usually in spamd or on some documents I get that are time stamped > using the secon

Re: USB-to-Serial adapter on OpenBSD 4.9

2012-11-06 Thread ML mail
Many thanks to all of you for your answers! /dev/ttyU* it is... never used serial over USB before but now it makes all sense! From: Otto Moerbeek To: ML mail Cc: "misc@openbsd.org" Sent: Tuesday, November 6, 2012 1:29 PM Subject: Re: USB-to-Serial

USB-to-Serial adapter on OpenBSD 4.9

2012-11-06 Thread ML mail
Hi, On my OpenBSD 4.9 i386 PC there is no serial port so I bought a USB-to-Serial adapter in the hope to be able to use it but I can't figure out which device in /dev to use for that. When I connect the adapter I have the following dmesg entries: uplcom0 at uhub2 port 1 "Prolific Technology In

Re: Smtpd disposable addresses

2012-08-30 Thread ml+HelloKevin
On Thu, Aug 30, 2012 at 10:32:57PM +0100, Kevin Chadwick wrote: > You specify a character usually defaulting to - as a seperator > > and then acceptable addresses > > bob > bob- > pete- > > for a domain like bobszz.net > > so bobszz.net can receive mail to > > b...@bobszz.net > bob-canitrust

Re: thinkpad x220 boot 5.1 freeze

2012-07-27 Thread ml
Hi Pau, Owner of a Thinkpad x220 here. As far as I can remember, my laptop does actually 'freeze' for a few minutes when booting from usb flash drive. This does not happen after installation. Please wait around 5-10 minutes or more, everything should work fine after that. Regards, Alex P.S.

Re: ssh tunneling with -D option

2012-07-18 Thread ml
> @Alex > > So it looks I've been misled by the many people on internet who claim they > can use firefox establishing a ssh -D connection before. Actually I tried > to configure both firefox and netsurf but just had no results. > Firefox: Preferences - Advanced - Network - Settings - SOCKS Host

Re: ssh tunneling with -D option

2012-07-18 Thread ml
Hi Paolo, > http_proxy="http://127.0.0.1:12345/"; lynx google.com AFAIK, you should test SOCKS proxy, not HTTP. Regards, Alex

Compiling Ruby 1.9.2 on OpenBSD 5.1

2012-07-05 Thread ML mail
Hello, I need to use the exact version 1.9.2 of Ruby and therefore trying to compile Ruby on OpenBSD 5.1. My configure command is the following: ./configure --prefix=/usr/local/ruby --with-baseruby=/usr/local/bin/ruby19 Unfortunately the make fails with the following errors: compiling socket gmak

Re: Received 5.1 CD

2012-05-02 Thread ml
Just received OpenBSD 5.1 CDs in Auckland, New Zealand. Many thanks to everyone who put their time and efforts into such a nice operating system! Regards, Alex

Thinkpad X220 4286-CTO display does not wake up after suspend

2012-02-09 Thread ml
Hi all, Display does not wake up after suspend on Thinkpad X220. Other equipment works ok - I can log in using SSH and continue my work. I am trying to fix this issue, but with no result yet. Any feedback is welcome. (Especially on how to log what happens there and how to reinitialize display.)

Re: AR5212 WiFi

2012-01-26 Thread ml
On Thu, 26 Jan 2012 09:05:02 + rivo nurges wrote: > On Thu, Jan 26, 2012 at 02:29:42PM +1300, m...@extensibl.com wrote: > > Hi! > > > The following two lines appear in my dmesg: > > ath0 at pci3 dev 0 function 0 "Atheros AR5212 (IBM MiniPCI)" rev > > 0x01: apic 1 int 17 ath0: AR5424 10.3 ph

AR5212 WiFi

2012-01-25 Thread ml
Hi all, The following two lines appear in my dmesg: ath0 at pci3 dev 0 function 0 "Atheros AR5212 (IBM MiniPCI)" rev 0x01: apic 1 int 17 ath0: AR5424 10.3 phy 6.1 rf5424 10.2, WOR2W, address 00:19:7e:92:0a:45 I am trying to guess which card is installed based on information from dmesg. And it se

Re: wd0 timeout at boot

2011-11-15 Thread ML mail
Hi Nick, Well it might be just a workaround but thanks to this fix my firewall now boots smoothly without any timeout and no more error messages. I guess then that it is really related to the compact flash card itself. Regards, ML - Original Message - From: Nick Holland To: misc

wd0 timeout at boot

2011-11-15 Thread ML mail
is a way to avoid this delay at booting? Would replacing the compact flash card with another moderner one fix it? Or maybe does my BIOS need some tweaking? Regards, ML

Re: pfsync states growing on carp backup firewall

2011-11-09 Thread ML mail
-- resetting em7: watchdog timeout -- resetting Does these have anything to do with this bug or is it maybe another problem? Regards, ML - Original Message - From: Maxim Bourmistrov To: ML mail Cc: "misc@openbsd.org" Sent: Wednesday, November 9, 2011 11:37 AM Subject:

Re: pfsync states growing on carp backup firewall

2011-11-09 Thread ML mail
o keep the states at a reasonable value on the on the backup firewall with: set timeout { adaptive.start 1, adaptive.end 3 } So despite this small issue, is the fail-over with keeping states still functional? Regards, ML - Original Message - From: Maxim Bourmistrov To: M

pfsync states growing on carp backup firewall

2011-11-09 Thread ML mail
# /etc/hostname.pfsync0 (master fw) up syncpeer 10.10.10.2 syndev em7 # /etc/hostname.pfsync0 (backup fw) up syncpeer 10.10.10.1 syndev em7 Could it be that my cross-over cable is somehow faulty? or my config is wrong? Thanks for the feedback. Regards, ML

Re: small subnet with a carp an non-carp device

2011-11-07 Thread ML mail
Afaik, I don't need to have IP forwarding turned on on my laptop or other device connected to that subnet in order to ping the carrier's router which is located on that very same subnet. Regards, ML - Original Message - From: "em...@edylie.net" To: ML mail ; &q

small subnet with a carp an non-carp device

2011-11-07 Thread ML mail
lete) on em0 So it looks like it is unable to get the hardware/MAC address of the carrier's router... but why? I can't explain it myself. Anyone has an idea? Regards, ML

Re: raw sockets

2011-10-30 Thread ml
On Sun, Oct 30, 2011 at 09:32:03PM -0200, VICTOR TARABOLA CORTIANO wrote: > Hello everyone, > > I have to use raw sockets for a college assignment. I basically > have to code a simplified FTP client of sorts to connect 2 > machines. No IP nor TCP involved by definition. The specification > for thi

Re: dedicating a server to spamd

2011-10-25 Thread ML mail
box? - Original Message - From: Benny Lofgren To: ML mail Cc: "misc@openbsd.org" Sent: Tuesday, October 25, 2011 1:37 PM Subject: Re: dedicating a server to spamd On 2011-10-25 11.09, ML mail wrote: > I am currently running spamd on an OpenBSD firewall which does g

Re: dedicating a server to spamd

2011-10-25 Thread ML mail
misc@openbsd.org Cc: Sent: Tuesday, October 25, 2011 12:23 PM Subject: Re: dedicating a server to spamd On 25/10/2011 10:57, ML mail wrote: > That's what I thought, but how will the valid (non-spam) packets get forwarded > from the spamd OpenBSD server to the Linux qmail server (both sitti

Re: dedicating a server to spamd

2011-10-25 Thread ML mail
er 25, 2011 11:29 AM Subject: Re: dedicating a server to spamd On 10/25/2011 11:09 AM, ML mail wrote: > Hello, > > I am currently running spamd on an OpenBSD firewall which does greylisting to protect a qmail linux mail server on a DMZ and was wondering if it would be possible to h

dedicating a server to spamd

2011-10-25 Thread ML mail
one NIC. Any ideas on recommendation on how to achieve this? Regards, ML

Re: How to disable wireless card ath0

2011-10-24 Thread ML mail
o To: Jonathan Gray Cc: ML mail ; "misc@openbsd.org" Sent: Tuesday, October 25, 2011 2:45 AM Subject: Re: How to disable wireless card ath0 please explain why you bought a Mac! El 24-10-2011, a las 19:55, Jonathan Gray escribiC3: > This is stupid and not required, simply don

Re: How to disable wireless card ath0

2011-10-24 Thread ML mail
mhh, I must be blind! Thanks it worked perfectly by using "disable ath". - Original Message - From: Jan Stary To: "misc@openbsd.org" Cc: Sent: Monday, October 24, 2011 10:39 PM Subject: Re: How to disable wireless card ath0 On Oct 24 12:42:10, ML mail wrote

Re: fatal machine check (18) in supervisor mode

2011-10-24 Thread ML mail
developers are no longer familiar with this 3.5-year-old code which has been heavily changed in the interim, I suggest updating and trying to reproduce.. On 2011-10-24, ML mail wrote: > Hi, > > My firewall just crashed this morning and wondered if anyone maybe had an > idea what could be wro

How to disable wireless card ath0

2011-10-24 Thread ML mail
lladdr 00:1c:xx:xx:xx:xx priority: 4 groups: wlan media: IEEE802.11 autoselect (OFDM6) status: no network ieee80211: nwid "" inet6 xxx::xxx:::%ath0 prefixlen 64 scopeid 0x2 Regards, ML

fatal machine check (18) in supervisor mode

2011-10-24 Thread ML mail
gards, ML Oct 24 09:12:09 firewall /bsd: fatal machine check (18) in supervisor mode Oct 24 09:12:09 firewall /bsd: trap type 18 code 0 eip d0317060 cs 50 eflags 10216 cr2 3c0207e4 cpl 40 Oct 24 09:12:09 firewall /bsd: panic: trap type 18, code=0, pc=d0317060 Oct 24 09:12:09 firewall /bsd: Sta

Re: Delete just one alias from an interface

2011-10-21 Thread ML mail
Hehe yes I have guessed so... Thanks again it worked like a charm! - Original Message - From: Alexander Hall To: ML mail Cc: "misc@openbsd.org" Sent: Friday, October 21, 2011 12:18 AM Subject: Re: Delete just one alias from an interface On 10/20/11 21:48, Alexander Hall w

Delete just one alias from an interface

2011-10-20 Thread ML mail
Hi, I have an interface with a few IP aliases and I would like to remove just one single alias IP without affecting any other aliases. Which command would I use for that? ifconfig delete Would this be correct? Regards, ML

Re: ACPIv2

2011-10-19 Thread ML mail
Dear Henning, Thanks for your honest opinion. I will then go for the book of PF 2nd edition and follow their guidelines instead of calomel.org... Regards, ML - Original Message - From: Henning Brauer To: misc@openbsd.org Cc: Sent: Wednesday, October 19, 2011 11:52 AM Subject: Re

ACPIv2

2011-10-19 Thread ML mail
there maybe any disadvantages too? I thought ACPI was just about power management and I can't really imagine how this improves packet filtering performance but I don't know much more about this topic... Regards, ML

kernel hiccups with two OpenVPN tunnels

2011-07-17 Thread travis+ml-openbsd-misc
So a few releases ago, I found that if I had OpenVPN running on an OpenBSD box as a hub, and I did a large transfer from one client to another, the OpenBSD box would occasionally kernel panic - something about mbufs, I can pull the kernel stack traces up if desired. The hosting company said they s

openvpn & openbsd = kernel lockups

2011-02-15 Thread travis+ml-openbsd-misc
Hey there, I have been asked to help a friend whose system is used as a VPN hub. It used to be an older OpenBSD, possibly 4.5 or 4.6, and he got many kernel panics around some buffer routines (possibly mbuf) that led to disk corruption. It's now OpenBSD 4.8 amd64, and if the system has transit t

Re: equivalent of Linux "mount -o bind"

2011-02-02 Thread travis+ml-openbsd-misc
On Fri, Jan 28, 2011 at 03:52:53PM -0800, Travis H. wrote: > So I'm curious if there's something in OpenBSD that's similar to the > "mount -o bind /dir1 /dir2" to make dir1 appear where dir2 is. For those who asked, one sample use is for something like this: Starting with the 2.4-series Linux ker

host(1) oddities

2011-01-31 Thread travis+ml-openbsd-misc
Hey all, I ran "host www.google.com" on a new OpenBSD 4.8 install and got this: 13:50:28.132052 127.0.0.1.41209 > 127.0.0.1.48830: udp 31 13:50:28.132081 127.0.0.1 > 127.0.0.1: icmp: 127.0.0.1 udp port 48830 unreachable 13:50:29.133552 ::1.38033 > ::1.48830: udp 31 13:50:29.133577 ::1 > ::1: icmp

miscellaneous unofficial OpenBSD ports

2010-04-18 Thread travis+ml-openbsd-misc
http://www.subspacefield.org/~travis/OpenBSD/ Need to be updated - last update was for 4.1 -- A Weapon of Mass Construction My emails do not have attachments; it's a digital signature that your mail program doesn't understand. | http://www.subspacefield.org/~travis/ If you are a spammer, please em

test

2010-03-18 Thread ML mail
test

Raid controller compatibility.

2006-09-08 Thread Kaven Gagnon (ml)
Hi, I would like to know if these three SCSI controllers are compatible with OpenBSD? (No mention about these cards on the manifacturer Web site and OpenBSD compatibility list.) Adaptec SCSI RAID 2000S Adaptec SCSI RAID 2010S MegaRAID SCSI 320-0 (520-0 CH) Thanks a lot. Regards, Kaven G.