Re: Different terminal behaviour when screen(1) is started in the background with -d -m

2024-11-15 Thread Anders Andersson
On Fri, Nov 15, 2024 at 2:09 AM Philip Guenther wrote: > > On Thu, Nov 14, 2024 at 3:56 PM Anders Andersson wrote: > > I'm trying to move my screen+irssi (irc client) setup from a linux > > machine to OpenBSD 7.6 but I found that screen has a slightly > > different

Re: Different terminal behaviour when screen(1) is started in the background with -d -m

2024-11-15 Thread Matthew Ernisse
x I used screen in much the way you described, and I always had the following in my ~/.screenrc: term screen-256color Also be aware that depending on how you are invoking the detached screen process that the environment may be setup by a different script (.profile versus .bashrc) or not at al

Re: Different terminal behaviour when screen(1) is started in the background with -d -m

2024-11-14 Thread Philip Guenther
On Thu, Nov 14, 2024 at 3:56 PM Anders Andersson wrote: > I'm trying to move my screen+irssi (irc client) setup from a linux > machine to OpenBSD 7.6 but I found that screen has a slightly > different behaviour that I can't debug further. I know I should switch > to tmux

Different terminal behaviour when screen(1) is started in the background with -d -m

2024-11-14 Thread Anders Andersson
I'm trying to move my screen+irssi (irc client) setup from a linux machine to OpenBSD 7.6 but I found that screen has a slightly different behaviour that I can't debug further. I know I should switch to tmux one of these days, but old habits die hard. I want to see if I can fix this f

Re: mapping different client and server uid:gid for NFS

2024-11-01 Thread Divan Santana
Stuart Henderson writes: > On 2024-10-31, Divan Santana wrote: >>>> How can one get both entries to work? >>> >>> By having them on different filesystems. You can't have diferent options >>> on different directories exported from the s

Re: mapping different client and server uid:gid for NFS

2024-11-01 Thread Stuart Henderson
On 2024-10-31, Divan Santana wrote: >>> How can one get both entries to work? >> >> By having them on different filesystems. You can't have diferent options >> on different directories exported from the same filesystem. >> >> See "BUGS" in e

Re: mapping different client and server uid:gid for NFS

2024-10-31 Thread Divan Santana
>> How can one get both entries to work? > > By having them on different filesystems. You can't have diferent options > on different directories exported from the same filesystem. > > See "BUGS" in exports(5). Thanks Stuart for pointing that out. I did read

Re: mapping different client and server uid:gid for NFS

2024-10-28 Thread Stuart Henderson
t; as the first > entry seems to take precedence over the latter. > > If I swap the two entries, then I can write to /data/media from client > uid 67:67 as 1000:1000. However then the second entry breaks. > > How can one get both entries to work? By having them on different filesystems. You can't have diferent options on different directories exported from the same filesystem. See "BUGS" in exports(5). -- Please keep replies on the mailing list.

Re: mapping different client and server uid:gid for NFS

2024-10-26 Thread Divan Santana
Divan Santana writes: >>> I would expert my NFS client uid 67 to be mapped to the remote NFS >>> server and presented as 1000 therefore permission should be granted to >>> write? >> >> Did you forget to send SIGHUP to mountd(8) to make it re-read >> exports(5)? > > I did do a reload of mountd. I

Re: mapping different client and server uid:gid for NFS

2024-10-24 Thread Divan Santana
>> I would expert my NFS client uid 67 to be mapped to the remote NFS >> server and presented as 1000 therefore permission should be granted to >> write? > > Did you forget to send SIGHUP to mountd(8) to make it re-read > exports(5)? I did do a reload of mountd. I also rebooted. It seems this is

Re: smtpd under different rtable + /root/.forward

2024-10-24 Thread Thomas
On Thu, 24 Oct 2024, at 00:51, Dan wrote: > Two simple stuff: > > 1. Did you create the mx record among your dns records? No, but I don't think there's any need, it works under rtable 0 and should have access to the same DNS resolution if it remains in rdomain 0? So if I can shorten the steps: 1.

Re: smtpd under different rtable + /root/.forward

2024-10-23 Thread Dan
Two simple stuff: 1. Did you create the mx record among your dns records? 2. DigitalOcean has qualified support engineers to ask for anything technical regarding your vps, including networking. One curiousity: - You got the passtime to install successfully OpenBSD on DigitalOcean? Let us know a

Fwd: smtpd under different rtable + /root/.forward

2024-10-23 Thread Thomas
Hello all, So one thing I'm having issues to wrap my head around are rtables/domains... I have a VPS on Digital Ocean and they have a set up with a public IP address + a "floating" one which is accessed through another IP address on the same interface. Eg. vio0: flags inet $publicIP inet

Re: mapping different client and server uid:gid for NFS

2024-10-23 Thread Christian Weisgerber
Divan Santana: > I would expert my NFS client uid 67 to be mapped to the remote NFS > server and presented as 1000 therefore permission should be granted to > write? Did you forget to send SIGHUP to mountd(8) to make it re-read exports(5)? -- Christian "naddy" Weisgerber

mapping different client and server uid:gid for NFS

2024-10-22 Thread Divan Santana
Greetings :) NFS server (openbsd) with /data/media and files are 1000:1000 uid:gid. NFS client (openbsd) I want to mount the above files to /var/www/nextcloud/data as 67:67 uid:gid. I have attempted this on NFS server: /etc/exports: /data/media -mapall=1000:1000 -alldirs -network=192.168.1.10

Re: rw- directory mode : different ls behavior

2024-09-17 Thread Todd C . Miller
On Tue, 17 Sep 2024 09:43:27 +0200, tomas.ri...@tutanota.com wrote: > Hello, I am studying OpenBSD and I am currently working on file mods and the > chmod(1) command. In that context, I have come across a behavior that I don't > understand. My test directory contains two files: ll.out and power.

Re: rw- directory mode : different ls behavior

2024-09-17 Thread Zé Loff
ple. > > > The file size is information about the files themselves; to read it, you > > > need to be in the directory. But as you can't, it's unreadable. > > > > > > -- > > > Denis > > > > > > > It's a bit more complica

Re: rw- directory mode : different ls behavior

2024-09-17 Thread Otto Moerbeek
't, it's unreadable. > > > > -- > > Denis > > > > It's a bit more complicated than that AFAICT. Although I can reproduce > this inside /tmp, the behaviour is not consistent. If I try to ls the > folder on a different shell -- e.g. a diffe

Re: rw- directory mode : different ls behavior

2024-09-17 Thread Zé Loff
can reproduce this inside /tmp, the behaviour is not consistent. If I try to ls the folder on a different shell -- e.g. a different terminal, or after exiting script(1) -- the files aren't shown. Also, if I rm -rf the folder and recreate it (i.e. reuse the name) the files also aren't shown the second time around. --  

Re: rw- directory mode : different ls behavior

2024-09-17 Thread Denis Bodor
On Tue, Sep 17, 2024 at 09:43:27AM +0200, tomas.ri...@tutanota.com wrote: > I would expect that without the 'x' bit, the directory is not searchable > and I won't be able to list its contents. But in fact I can, unless I > use a long format (-l, -g or -n). > > Can someone please explain the above b

Re: rw- directory mode : different ls behavior

2024-09-17 Thread Zé Loff
On Tue, Sep 17, 2024 at 09:43:27AM +0200, tomas.ri...@tutanota.com wrote: > Hello, I am studying OpenBSD and I am currently working on file mods and the > chmod(1) command. In that context, I have come across a behavior that I don't > understand. My test directory contains two files: ll.out and p

rw- directory mode : different ls behavior

2024-09-17 Thread tomas . rippl
Hello, I am studying OpenBSD and I am currently working on file mods and the chmod(1) command. In that context, I have come across a behavior that I don't understand. My test directory contains two files: ll.out and power.exe. $ chmod 600 my-test-dir $ ls -ld my-test-dir/ drw---  2  user  us

Different ws(4) xinput properties for different wscons(4) mouses

2024-09-06 Thread Lucas de Sena
tton is held (say, moving the camera while the rifle aim/sight is activated). To counteract it, I further emulate the middle mouse button by simultaneously pressing the left and right buttons; but that is a botch. How can I configure each mouse separately? Maybe I should make wscons list each mous

Re: WAS: MariaDB install any different for OpenBSD 7.5 than 6.4? NOW: 0.0.0.0 Exploit Impact OpenBSD?

2024-09-02 Thread David Colburn
Thanks! So much to learn ... so many printed pages with notes. I'll get there. On 9/2/24 06:15, Stuart Henderson wrote: On Sun, Sep 01, 2024 at 05:09:14PM -0400, David Colburn wrote: 3. That's the addresses where the server daemon will listen to for connections from clients. It has to b

Re: WAS: MariaDB install any different for OpenBSD 7.5 than 6.4? NOW: 0.0.0.0 Exploit Impact OpenBSD?

2024-09-02 Thread Stuart Henderson
> On Sun, Sep 01, 2024 at 05:09:14PM -0400, David Colburn wrote: >> > > >> > > 3. That's the addresses where the server daemon will listen to for >> > > connections from clients. It has to be the address of one of the >> > > machine's interfaces. See previous messages on the thread, to d

Re: WAS: MariaDB install any different for OpenBSD 7.5 than 6.4? NOW: 0.0.0.0 Exploit Impact OpenBSD?

2024-09-01 Thread Zé Loff
On Sun, Sep 01, 2024 at 05:09:14PM -0400, David Colburn wrote: > /I don't know if this is the correct way to fork this specific question from > / > > /the prior thread but thought it might be of interest to others./ > > *WAS*: MariaDB install any different for OpenBSD

Re: MariaDB install any different for OpenBSD 7.5 than 6.4?

2024-09-01 Thread Zé Loff
On Fri, Aug 30, 2024 at 08:14:36PM -0400, David Colburn wrote: > > > > > > > chrooted daemons and MariaDB socket > > > > > > === > > > > > > > > > > > > For external program running under a chroot(8) to be > > > > > > able to access the > > > > > > MariaDB server w

Re: MariaDB install any different for OpenBSD 7.5 than 6.4?

2024-08-30 Thread David Colburn
chrooted daemons and MariaDB socket === For external program running under a chroot(8) to be able to access the MariaDB server without using a network connection, the socket must be placed inside the chroot. e.g. httpd(8) or nginx(8): connecting to MariaDB fr

Re: MariaDB install any different for OpenBSD 7.5 than 6.4?

2024-08-29 Thread David Colburn
On 8/26/24 04:41, Zé Loff wrote: On Sun, Aug 25, 2024 at 08:10:52PM -0400, David Colburn wrote: On 8/25/24 17:55, Zé Loff wrote: On Sun, Aug 25, 2024 at 02:49:03PM -0400, David Colburn wrote: After a cursory reading, it looks OK. But don't forget to read the supplied documentation, after in

Re: MariaDB install any different for OpenBSD 7.5 than 6.4?

2024-08-26 Thread Robert Klein
Hi, On Sun, 25 Aug 2024 20:10:52 -0400 David Colburn wrote: > On 8/25/24 17:55, Zé Loff wrote: > > On Sun, Aug 25, 2024 at 02:49:03PM -0400, David Colburn wrote: > >>> After a cursory reading, it looks OK. But don't forget to read the > >>> supplied documentation, after installing the package

Re: MariaDB install any different for OpenBSD 7.5 than 6.4?

2024-08-26 Thread Zé Loff
On Sun, Aug 25, 2024 at 08:10:52PM -0400, David Colburn wrote: > On 8/25/24 17:55, Zé Loff wrote: > > On Sun, Aug 25, 2024 at 02:49:03PM -0400, David Colburn wrote: > > > > After a cursory reading, it looks OK. But don't forget to read the > > > > supplied documentation, after installing the packa

Re: MariaDB install any different for OpenBSD 7.5 than 6.4?

2024-08-25 Thread David Colburn
On 8/25/24 17:55, Zé Loff wrote: On Sun, Aug 25, 2024 at 02:49:03PM -0400, David Colburn wrote: After a cursory reading, it looks OK. But don't forget to read the supplied documentation, after installing the package: less /usr/local/share/doc/pkg-readmes/mariadb-server Also, most of tho

Re: MariaDB install any different for OpenBSD 7.5 than 6.4?

2024-08-25 Thread Zé Loff
On Sun, Aug 25, 2024 at 02:49:03PM -0400, David Colburn wrote: > > After a cursory reading, it looks OK. But don't forget to read the > > supplied documentation, after installing the package: > > > > less /usr/local/share/doc/pkg-readmes/mariadb-server > > > > Also, most of those steps do

Re: MariaDB install any different for OpenBSD 7.5 than 6.4?

2024-08-25 Thread David Colburn
After a cursory reading, it looks OK. But don't forget to read the supplied documentation, after installing the package: less /usr/local/share/doc/pkg-readmes/mariadb-server Also, most of those steps don't have to do with mariadb, but with simple system administration. Installing the pack

Re: MariaDB install any different for OpenBSD 7.5 than 6.4?

2024-08-25 Thread Zé Loff
On Sat, Aug 24, 2024 at 07:21:57PM -0400, David Colburn wrote: > I found these instructions to install MariaDB Servers in OpenBSD. > > (They're for OpenBSD v6.4.) > > Any changes for 7.5, please, or should I just 'send it'? > > (From the 'It's better to ask than to be told 'If only you'd asked.'

MariaDB install any different for OpenBSD 7.5 than 6.4?

2024-08-24 Thread David Colburn
I found these instructions to install MariaDB Servers in OpenBSD. (They're for OpenBSD v6.4.) Any changes for 7.5, please, or should I just 'send it'? (From the 'It's better to ask than to be told 'If only you'd asked.'', file.) Thanks, in advance ... *``` OpenBSD install MariaDB database s

Re: Errata: OpenBSD 7.5: high temperature spotted different times

2024-05-15 Thread Dan
Correction: CPU: Intel(R) Core(TM) i7-4500U CPU @ 1.80GHz, 06-45-01, patch 0026 (year 2014) Dan wrote: > Hello, > > In my OpenBSD 7.5 stable temperature incrises timtotime remaining on > 64-65°C; an old quad cores I5 cpu. > > Thanks, > > -dan

OpenBSD 7.5: high temperature spotted different times

2024-05-15 Thread Dan
Hello, In my OpenBSD 7.5 stable temperature incrises timtotime remaining on 64-65°C; an old quad cores I5 cpu. Thanks, -dan

Re: Migrate to different FS layout of OpenBSD

2024-04-07 Thread Kirill A . Korinsky
On Sun, 07 Apr 2024 12:02:05 +0200, Stuart Henderson wrote: > > softraid doesn't allow creating a 'degraded mirror' i.e. a single drive > that you can later add another drive to make a RAID1. You would need at > least one spare drive to do what you want. > Thanks, that is a kind of inside which

Re: Migrate to different FS layout of OpenBSD

2024-04-07 Thread Stuart Henderson
On 2024-04-06, Kirill A Korinsky wrote: > On Sat, 06 Apr 2024 23:14:39 +0200, > Peter Hessler wrote: >> >> RAID0 is called that because zero is what you'll recover if you lose a >> disk. This is amazingly dangerous, and you're going to have a bad time. >> >> Do a backup, then restore from back

Re: Migrate to different FS layout of OpenBSD

2024-04-06 Thread Kirill A . Korinsky
On Sat, 06 Apr 2024 23:14:39 +0200, Peter Hessler wrote: > > RAID0 is called that because zero is what you'll recover if you lose a > disk. This is amazingly dangerous, and you're going to have a bad time. > > Do a backup, then restore from backup. > I was totally misslead. I mean that I have

Re: Migrate to different FS layout of OpenBSD

2024-04-06 Thread chohag
Kirill A. Korinsky writes: > Folks, > > I'm looking for a way to migrate to different layout some OpenBSD systems. > > So, questions: > 1. Has anyone done something like this before? > 2. Do you have any instruction or that to expect? Yes. What to expect? There is a ver

Re: Migrate to different FS layout of OpenBSD

2024-04-06 Thread Peter Hessler
ng for a way to migrate to different layout some OpenBSD systems. : :All of them has RAID0 and as far as I think I may something like this: : :1. Remove second disk from RAID. :2. Build a new RAID0 on the second disk. :3. Make desires layout on the second RAID. :4. dump | restore :5. Boot from the

Migrate to different FS layout of OpenBSD

2024-04-06 Thread Kirill A . Korinsky
Folks, I'm looking for a way to migrate to different layout some OpenBSD systems. All of them has RAID0 and as far as I think I may something like this: 1. Remove second disk from RAID. 2. Build a new RAID0 on the second disk. 3. Make desires layout on the second RAID. 4. dump | restore 5.

Re: Communication between hosts on different network interfaces

2024-01-30 Thread olp_76
Indeed, that is why I always added 0.0.0.0/0 Sorry for not mentioning it. On Tuesday, January 30, 2024 at 08:56:19 p.m. GMT+9, Stuart Henderson wrote: On 2024-01-07, All wrote: > This is very much doable with DHCP one liner: > add the following to your dhcpd.conf ((!) inside the bloc

Re: Communication between hosts on different network interfaces

2024-01-30 Thread Stuart Henderson
On 2024-01-07, All wrote: > This is very much doable with DHCP one liner: > add the following to your dhcpd.conf ((!) inside the block of your > 192.168.2.0/24 network) > option classless-static-routes 192.168.3.0/24 192.168.2.1; > > This will install static route into all machines in 192.168.2.0

Re: Communication between hosts on different network interfaces

2024-01-30 Thread Ibsen S Ripsbusker
Dear colleagues, A printer doesn't need internet access, and that is why I can block the internet access. The printer on the white network a label printer that just works. The other printer is a laser printer connected by USB to an Ubuntu computer on the white network, because that was easier than

Re: Communication between hosts on different network interfaces

2024-01-07 Thread All
mbers confuses me quickly.) So you have a trusted network, an untrusted network, and of course, the Internet, which we will just call "The Evil". While you can do it with a bridge, I don't want to think that hard.  And it would be a lot of work. [snip bridge stuff] > I als

Re: Communication between hosts on different network interfaces

2024-01-06 Thread Nick Holland
that hard. And it would be a lot of work. [snip bridge stuff] I also tried setting different subnets. yeah. that's the way I'd go. trusted: /etc/hostname.igc1:>inet 192.168.2.1/24 untrusted: /etc/hostname.igc2: inet 192.168.3.1/24 With this everything works as

Re: Communication between hosts on different network interfaces

2024-01-06 Thread Brian Conway
On Sat, Jan 6, 2024, at 2:09 PM, Ibsen S Ripsbusker wrote: > I also tried setting different subnets. > > /etc/hostname.igc1: > inet 192.168.2.1/24 > > /etc/hostname.igc2: > inet 192.168.3.1/24 This is what I have done, with a pf rule to block connections originating

Communication between hosts on different network interfaces

2024-01-06 Thread Ibsen S Ripsbusker
ables.) The bridge worked exactly like I expected except that it seemed tags weren't applied, based on what I saw in pfctl and tcpdump. Since the tags weren't applied, I couldn't restrict the communication as I wanted. I also tried setting different subnets. /etc/hostname.igc1:

Re: PF: Redirect SOCKS connections to another server on a different net

2023-04-24 Thread Charlie
Below comes the solution to this problem. For the explanations on why it works, you may refer to the original answer [1]. # sysctl net.inet.ip.forwarding=1 # cat /etc/pf.conf ... pass in on re0 proto tcp from any to (re0) port 1080 rdr-to 10.64.0.1 tag nat pass out on wg0 proto tcp nat-to (w

Re: dns priority from different network connections - or disabling?

2023-04-12 Thread Theo de Raadt
Stuart Henderson wrote: > There is a complication in Kaya's case because if my handle on the > config is correct, there are likely to be nameservers learned from > both DHCP (in one rdomain) and PPPOE (in another), but they won't > work on the opposite connection. > > In this situation I would d

Re: dns priority from different network connections - or disabling?

2023-04-12 Thread Theo de Raadt
ppy? You can consider it like a "configuration file, for the 0.001% of users who want it to act different".

Re: dns priority from different network connections - or disabling?

2023-04-12 Thread Stuart Henderson
On 2023/04/12 13:20, Theo de Raadt wrote: > Stuart Henderson wrote: > > > On 2023-04-11, Theo de Raadt wrote: > > > Kaya Saman wrote: > > > > > >> This somehow is overriding my resolv.conf file; another words the > > >> information is *not* being used from resolv.conf and is instead being > > >

Re: dns priority from different network connections - or disabling?

2023-04-12 Thread Kaya Saman
On 4/12/23 20:20, Theo de Raadt wrote: Stuart Henderson wrote: On 2023-04-11, Theo de Raadt wrote: Kaya Saman wrote: This somehow is overriding my resolv.conf file; another words the information is *not* being used from resolv.conf and is instead being used from the ipcp negotiation as

Re: dns priority from different network connections - or disabling?

2023-04-12 Thread Theo de Raadt
Stuart Henderson wrote: > On 2023-04-11, Theo de Raadt wrote: > > Kaya Saman wrote: > > > >> This somehow is overriding my resolv.conf file; another words the > >> information is *not* being used from resolv.conf and is instead being > >> used from the ipcp negotiation as part of the pppoe kern

Re: dns priority from different network connections - or disabling?

2023-04-12 Thread Stuart Henderson
On 2023-04-11, Theo de Raadt wrote: > Kaya Saman wrote: > >> This somehow is overriding my resolv.conf file; another words the >> information is *not* being used from resolv.conf and is instead being >> used from the ipcp negotiation as part of the pppoe kernel module. > > then the pppoe code sho

Re: dns priority from different network connections - or disabling?

2023-04-11 Thread Theo de Raadt
Kaya Saman wrote: > This somehow is overriding my resolv.conf file; another words the > information is *not* being used from resolv.conf and is instead being > used from the ipcp negotiation as part of the pppoe kernel module. then the pppoe code should submit a RTM_PROPOSAL route message ...

Re: dns priority from different network connections - or disabling?

2023-04-11 Thread Kaya Saman
n take off the immutable flag too. I take this time to wish you all an Happy Easter and obviously lots of compliments for the 54th release of the ball fish system! Do you mean setting resolv.conf as ReadOnly? immutable is different, see chflags(1) schg. Used to be popular with FreeBSD users to make

Re: dns priority from different network connections - or disabling?

2023-04-11 Thread Stuart Henderson
Please investigate also >> when you can take off the immutable flag too. >> >> I take this time to wish you all an Happy Easter and obviously >> lots of compliments for the 54th release of the ball fish system! >> > > Do you mean setting resolv.conf as ReadOnly? i

Re: dns priority from different network connections - or disabling?

2023-04-10 Thread Kaya Saman
On 4/10/23 16:24, Daniele B. wrote: Apr 10, 2023 12:52:22 Kaya Saman : how do I override OpenBSD's behavior to explicitly not use the dns servers obtained through ipcp but instead use the ones form the resolv.conf file? My solution both for security reasons (I'm using unbound) for for practi

Re: dns priority from different network connections - or disabling?

2023-04-10 Thread Daniele B.
Apr 10, 2023 12:52:22 Kaya Saman : >>> how do I override OpenBSD's >>> behavior to explicitly not use the dns servers obtained through ipcp but >>> instead use the ones form the resolv.conf file? My solution both for security reasons (I'm using unbound) for for practical reasons (as per your conc

PF: Redirect SOCKS connections to another server on a different net

2023-04-10 Thread Charlie
On an OpenBSD 7.2 system, I have access to a SOCKS proxy server through VPN. After the VPN connection is established, any program that supports SOCKS proxy can reach it by setting the relevant local VPN address, 10.64.0.1, and the usual port number 1080. I want to share the access to this proxy se

Re: dns priority from different network connections - or disabling?

2023-04-10 Thread Kaya Saman
On 4/10/23 11:40, Jonathan Gray wrote: On Mon, Apr 10, 2023 at 11:26:22AM +0100, Kaya Saman wrote: Hi, I'll ask the second question first as it might be easier to implement... Currently I have found that the dns servers specified in the resolv.conf file are not being used. Instead my machi

Re: dns priority from different network connections - or disabling?

2023-04-10 Thread Jonathan Gray
On Mon, Apr 10, 2023 at 11:26:22AM +0100, Kaya Saman wrote: > Hi, > > > I'll ask the second question first as it might be easier to implement... > > > Currently I have found that the dns servers specified in the resolv.conf > file are not being used. Instead my machine is prioritizing the ISP o

dns priority from different network connections - or disabling?

2023-04-10 Thread Kaya Saman
Hi, I'll ask the second question first as it might be easier to implement... Currently I have found that the dns servers specified in the resolv.conf file are not being used. Instead my machine is prioritizing the ISP obtained servers from the ipcp protocol through the kernel ppp service. W

Re: bridge rules are evaluated different compared to pf?

2022-07-26 Thread Cristian Danila
Thank you for info, I was confused by the book. Happy to see this is the intended behavior. Kind regards, Claudiu On Tue, Jul 26, 2022, 11:36 Claudio Jeker wrote: > On Tue, Jul 26, 2022 at 11:18:06AM +0300, Cristian Danila wrote: > > Good day! > > I hope someone could clarify if the following be

Re: bridge rules are evaluated different compared to pf?

2022-07-26 Thread Claudio Jeker
On Tue, Jul 26, 2022 at 11:18:06AM +0300, Cristian Danila wrote: > Good day! > I hope someone could clarify if the following behavior is > expected in a bridge configuration > I have following rules added in hostname.bridge0 > > --- > #this will

bridge rules are evaluated different compared to pf?

2022-07-26 Thread Cristian Danila
Good day! I hope someone could clarify if the following behavior is expected in a bridge configuration I have following rules added in hostname.bridge0 --- #this will result out to be blocked rule block in on vic0 rule block out on vic0 rule pass

ikev2 configuration on per-user basis with different policies

2022-04-10 Thread Ettore Tagarelli
Hello, I configured an Openbsd system as a VPN server with IKEV2. It works great but I'd like to use a configuration with different policies on per-user basis. The clients connect from dynamic ip. Does anybody have any hint or alternative? thanks 😊

Re: is IPC on OpenBSD different from other UNIX-like OSes?

2022-02-20 Thread Otto Moerbeek
On Sun, Feb 20, 2022 at 03:44:37PM -0300, Alceu Rodrigues de Freitas Junior wrote: > > Hello there, > > I've being doing Perl development on OpenBSD for a while now, and one thing > that I usually note is that is takes a noticeable difference of time to > execute Perl modules instalation on Lin

Re: PPPoE with VLAN in different rdomain

2022-02-02 Thread Stuart Henderson
PPPoE interface - since the manual > pppoe(4) states "Two pppoe interfaces configured with the same wildcard > destination address cannot share a routing table." I need to replicate > above setup in a second rdomain. You can however use different wildcard addresses for each pppo

Re: Routing between different subnets

2021-11-30 Thread Łukasz Moskała
W dniu 30.11.2021 o 21:22, Radek pisze: Hello, I have a router (6.9/amd64) with NATed subnets (vlan425, vlan426, etc..). This box is also connected to another subnet via vlan43 and the box can ping gw of vlan43 and machines inside this subnet. I need to enable access for clients from vlan426 to

Routing between different subnets

2021-11-30 Thread Radek
Hello, I have a router (6.9/amd64) with NATed subnets (vlan425, vlan426, etc..). This box is also connected to another subnet via vlan43 and the box can ping gw of vlan43 and machines inside this subnet. I need to enable access for clients from vlan426 to machines in vlan43 . I have no idea how

Booting Alpha with a different root device

2021-04-28 Thread Luigi30
Hi everyone, I'm setting up an AlphaServer DS10 with 6.8. This model of AlphaServer has a buggy IDE controller which prevents the use of DMA under most circumstances so I installed a SATA controller. The controller is supported by OpenBSD, but not the SRM console so it's not directly bootable. I

Re: sndio: way to play and record from different devices?

2021-04-19 Thread Alexandre Ratchov
On Mon, Apr 19, 2021 at 09:40:37AM -0500, Ax0n wrote: > I have a nice microphone attached to a USB sound device, but I'd like to > rely on my computer's built-in line out for speakers from the same program > (e.g. Audacity, Firefox). It feels like sndio might have some way to let > programs use snd

Re: sndio: way to play and record from different devices?

2021-04-19 Thread Stuart Henderson
On 2021-04-19, Ax0n wrote: > I have a nice microphone attached to a USB sound device, but I'd like to > rely on my computer's built-in line out for speakers from the same program > (e.g. Audacity, Firefox). It feels like sndio might have some way to let > programs use snd/0.play and snd/1.rec, or

sndio: way to play and record from different devices?

2021-04-19 Thread Ax0n
I have a nice microphone attached to a USB sound device, but I'd like to rely on my computer's built-in line out for speakers from the same program (e.g. Audacity, Firefox). It feels like sndio might have some way to let programs use snd/0.play and snd/1.rec, or a way to make snd/1 the default devi

Re: How do you get different $PS1 for /bin/sh and /bin/ksh?

2020-09-19 Thread Tom H
> esac >>> >>> This solves the problem. Thanks. >> >> You're welcome. >> >> But, out of curiosity, which option did you choose? TIA > > Ah sorry, I used the second option. > > I have this in .profile: > > export ENV="$HOME/.kshrc&q

Re: How do you get different $PS1 for /bin/sh and /bin/ksh?

2020-09-18 Thread Ingo Schwarze
Hi Ottavio, Ottavio Caruso wrote on Fri, Sep 18, 2020 at 09:22:11AM +0100: > On a side note, there's no mention of startup files in sh(1) > and I wonder why. >From sh(1), second paragraph: This manual page describes only the parts relevant to a POSIX compliant sh. If portability is a conce

Re: How do you get different $PS1 for /bin/sh and /bin/ksh?

2020-09-18 Thread Ottavio Caruso
hich option did you choose? TIA Ah sorry, I used the second option. I have this in .profile: export ENV="$HOME/.kshrc" and this in .kshrc: case "$0" in *ksh) PS1='\u@\h:\w\$ ' ;; *sh) PS1='${USER}@${HOST}:${PWD}\$ ' ;; esac On my NetBSD VM, sh and k

Re: How do you get different $PS1 for /bin/sh and /bin/ksh?

2020-09-18 Thread Tom H
On Thu, Sep 17, 2020 at 3:16 PM Ottavio Caruso wrote: > On 17/09/2020 10:40, Tom H wrote: >> >> You've said that you're now sourcing "$HOME/.kshrc" if >>"SKSH_VERSION" exists. >> >> You could add the sourcing of "$HOME/.shrc" if "$SH_VERSION" exists. >> >> Or you could export ENV and use a case-es

Re: How do you get different $PS1 for /bin/sh and /bin/ksh?

2020-09-17 Thread Ottavio Caruso
On 17/09/2020 10:40, Tom H wrote: On Thu, Sep 17, 2020 at 9:33 AM Ottavio Caruso wrote: On 17/09/2020 00:58, Ashlen wrote: On 20/09/15 05:49PM, Ottavio Caruso wrote: Maybe it's just because OpenBSD sh is just ksh in disguise or there might be other reasons that I obviously don't know. Yep,

Re: How do you get different $PS1 for /bin/sh and /bin/ksh?

2020-09-17 Thread Ottavio Caruso
On 17/09/2020 00:58, Ashlen wrote: On 20/09/15 05:49PM, Ottavio Caruso wrote: Maybe it's just because OpenBSD sh is just ksh in disguise or there might be other reasons that I obviously don't know. Yep, you're right. They share the same inode. ls -li /bin/{,k}sh 77862 -r-xr-xr-x 3 root bin

Re: How do you get different $PS1 for /bin/sh and /bin/ksh?

2020-09-17 Thread Tom H
On Thu, Sep 17, 2020 at 9:33 AM Ottavio Caruso wrote: > On 17/09/2020 00:58, Ashlen wrote: >> On 20/09/15 05:49PM, Ottavio Caruso wrote: >>> >>> Maybe it's just because OpenBSD sh is just ksh in disguise or there >>> might be other reasons that I obviously don't know. >> >> Yep, you're right. They

Re: How do you get different $PS1 for /bin/sh and /bin/ksh?

2020-09-16 Thread Ashlen
On 20/09/15 05:49PM, Ottavio Caruso wrote: > Maybe it's just because OpenBSD sh is just ksh in disguise or there > might be other reasons that I obviously don't know. Yep, you're right. They share the same inode. ls -li /bin/{,k}sh 77862 -r-xr-xr-x 3 root bin 613656 Sep 15 12:10 /bin/ksh 7786

Re: How do you get different $PS1 for /bin/sh and /bin/ksh?

2020-09-15 Thread Ottavio Caruso
On 15/09/2020 14:44, Vincenzo Nicosia wrote: On Tue, Sep 15, 2020 at 02:08:16PM +0100, Ottavio Caruso wrote: Hi, I have this in ~/.kshrc : PS1="\u@\h:\w\$ " which works fine in ksh: oc@OpenBSD:~$ However, if I open a sh subshell, I get: \u@OpenBSD:\w$ which is not very nice. The only hack

How do you get different $PS1 for /bin/sh and /bin/ksh?

2020-09-15 Thread Ottavio Caruso
Hi, I have this in ~/.kshrc : PS1="\u@\h:\w\$ " which works fine in ksh: oc@OpenBSD:~$ However, if I open a sh subshell, I get: \u@OpenBSD:\w$ which is not very nice. The only hack I've found is to append this to ~/.profile: if [ -n "$KSH_VERSION" ]; then if [ -f "$HOME/.kshrc" ]; t

Re: How do you get different $PS1 for /bin/sh and /bin/ksh?

2020-09-15 Thread Vincenzo Nicosia
On Tue, Sep 15, 2020 at 02:08:16PM +0100, Ottavio Caruso wrote: > Hi, > > I have this in ~/.kshrc : > > PS1="\u@\h:\w\$ " > > which works fine in ksh: > > oc@OpenBSD:~$ > > However, if I open a sh subshell, I get: > > \u@OpenBSD:\w$ > > which is not very nice. The only hack I've found is to

Re: httpd - bypass tls misconfig different ciphers, ecdhe

2020-08-19 Thread trondd
On Wed, August 19, 2020 3:33 am, Hisacro Root wrote: > On Tue, Aug 18, 2020 at 09:28:18PM -0400, trondd wrote: >> The bug here is in how additional listen lines interact with the >> remaining >> configuration. The first listen line in a server block gets the tls >> block >> and it doesn't get appl

Re: httpd - bypass tls misconfig different ciphers, ecdhe

2020-08-19 Thread hisacro
On Tue, Aug 18, 2020 at 09:28:18PM -0400, trondd wrote: > The bug here is in how additional listen lines interact with the remaining > configuration. The first listen line in a server block gets the tls block > and it doesn't get applied to the second listen line. Except for certs > and keys whic

Re: httpd - bypass tls misconfig different ciphers, ecdhe

2020-08-18 Thread trondd
dditional listen line, allowing httpd to start, my sub domain server is using the tls setup from the main server tls block except for the cert and key to support SNI. Change the additional listen line to tls and you'll see that one will pick up the tls block as it's on a different port.

Re: httpd - bypass tls misconfig different ciphers, ecdhe

2020-08-16 Thread hisacro
ning on > port 8000 without tls first, the listen with tls is skipped along with the > tls block below it. No, listen TLS isn't skipped for sub.domain.tld >> This indeed listen on same address ($ext_ip) and same port (443) >> and works as intended with different cipher and ecdhe.

Re: httpd - bypass tls misconfig different ciphers, ecdhe

2020-08-16 Thread trondd
key "/etc/ssl/private/domain.tld.key > } > } > > This indeed listen on same address ($ext_ip) and same port (443) > and works as intended with different cipher and ecdhe. > Note: only when I add listen on 0.0.0.0 port 8000 > >>Httpd allows you to configure multi

Re: httpd - bypass tls misconfig different ciphers, ecdhe

2020-08-16 Thread hisacro
n 0.0.0.0 port 8000 # confusion? listen on $ext_ip tls port 443 tls { certificate "/etc/ssl/domain.tld.fullchain.pem" key "/etc/ssl/private/domain.tld.key } } This indeed listen on same address ($ext_ip) and same port (443) and works as intended with

Re: httpd - bypass tls misconfig different ciphers, ecdhe

2020-08-16 Thread hisacro
he, uncommenting >> "listen on 0.0.0.0 port 8080" >> bypasses this error >> >> I'm unsure what causes this, can someone shed some light? > >It's what the error says. You're listening twice on the same ip and port >but with different tls bloc

Re: httpd - bypass tls misconfig different ciphers, ecdhe

2020-08-15 Thread trondd
>>> address/port >>> >>> instead of defining same cipher and ecdhe, uncommenting >>> "listen on 0.0.0.0 port 8080" >>> bypasses this error >>> >>> I'm unsure what causes this, can someone shed some light? >> >

httpd - bypass tls misconfig different ciphers, ecdhe

2020-08-15 Thread hisacro
I'm on -current, httpd throws tls misconfig error when different cipher or ecdhe used but it's bypassed by listen statment. server "domain.tld" { listen on * tls port 443 log style combined hsts { subdomains } root "/htdoc

Re: httpd - bypass tls misconfig different ciphers, ecdhe

2020-08-15 Thread trondd
On Sat, August 15, 2020 7:13 pm, hisacro wrote: > I'm on -current, httpd throws tls misconfig error when different > cipher or ecdhe used but it's bypassed by listen statment. > > server "domain.tld" { > listen on * tls port 443 > log style combined &

  1   2   3   4   5   6   >