Re: sys/dev/pci/drm/amd takes up 499MB out of 1.7GB in src...

On Mon, 21 Jul 2025 at 18:54, H. Hartzer wrote: > Hi misc@, > > On 7.7, extracted src.tar.gz and sys.tar.gz is about 1.7GB. > > The sys folder is 634MB. > sys/dev is 590MB. > sys/dev/pci is 543MB. > sys/dev/pci/drm is 525MB. > sys/dev/pci/drm/amd is 499MB. > > And sys/dev/pci/drm/amd/include is 45

Re: sys/dev/pci/drm/amd takes up 499MB out of 1.7GB in src...

On 2025-07-21, H. Hartzer wrote: > Hi misc@, > > On 7.7, extracted src.tar.gz and sys.tar.gz is about 1.7GB. > > The sys folder is 634MB. > sys/dev is 590MB. > sys/dev/pci is 543MB. > sys/dev/pci/drm is 525MB. > sys/dev/pci/drm/amd is 499MB. > > And sys/dev/pci/drm/amd/include is 458MB. > > Is it

Re: sys/dev/pci/drm/amd takes up 499MB out of 1.7GB in src...

El 21/7/25 a las 18:05, H. Hartzer escribió: Hi misc@, On 7.7, extracted src.tar.gz and sys.tar.gz is about 1.7GB. The sys folder is 634MB. sys/dev is 590MB. sys/dev/pci is 543MB. sys/dev/pci/drm is 525MB. sys/dev/pci/drm/amd is 499MB. And sys/dev/pci/drm/amd/include is 458MB. Is it necessary

sys/dev/pci/drm/amd takes up 499MB out of 1.7GB in src...

Hi misc@, On 7.7, extracted src.tar.gz and sys.tar.gz is about 1.7GB. The sys folder is 634MB. sys/dev is 590MB. sys/dev/pci is 543MB. sys/dev/pci/drm is 525MB. sys/dev/pci/drm/amd is 499MB. And sys/dev/pci/drm/amd/include is 458MB. Is it necessary? Can it be trimmed down some? Seems a bit exce

Re: install.sub: "setup" vs to "set up"

t; > --- install.sub.origMon Jun 16 06:11:51 2025 > > > > +++ install.sub Mon Jun 16 06:13:36 2025 > > > > @@ -2277,7 +2277,7 @@ > > > > > > > > # Gather information for setting up the user later in do_install(). > > > > user_s

Re: install.sub: "setup" vs to "set up"

6 2025 > > > @@ -2277,7 +2277,7 @@ > > > > > > # Gather information for setting up the user later in do_install(). > > > user_setup() { > > > - local _q="Setup a user? (enter a lower-case loginname, or 'no')" > > > + loca

Re: install.sub: "setup" vs to "set up"

ybe someone can take a look and decide whether the > > following patch is ok/worth applying? > > > > --- install.sub.origMon Jun 16 06:11:51 2025 > > +++ install.sub Mon Jun 16 06:13:36 2025 > > @@ -2277,7 +2277,7 @@ > > > > # Gather i

Re: install.sub: "setup" vs to "set up"

“Register and Configure a User” Sent from [Proton Mail](https://proton.me/mail/home) for iOS On Wed, Jun 18, 2025 at 01:20, Emiel Kollof <[em...@kollof.nl](mailto:On Wed, Jun 18, 2025 at 01:20, Emiel Kollof < wrote: > Jo MacMahon schreef op 2025-06-16 13:07: >> What about

Re: install.sub: "setup" vs to "set up"

Jo MacMahon schreef op 2025-06-16 13:07: What about "set a user up"? ;) The BOFH in me kinda likes "upset a user". Cheers, Emiel

Re: install.sub: "setup" vs to "set up"

On 2025-06-16, Jo MacMahon wrote: > What about "set a user up"? something like "add a user account" would sound better to me, but there's still the autoinstall problem. -- Please keep replies on the mailing list.

Re: install.sub: "setup" vs to "set up"

h is ok/worth applying? > > --- install.sub.orig Mon Jun 16 06:11:51 2025 > +++ install.sub Mon Jun 16 06:13:36 2025 > @@ -2277,7 +2277,7 @@ > > # Gather information for setting up the user later in do_install(). > user_setup() { > - local _q="Setup a user? (enter a lower-c

Re: install.sub: "setup" vs to "set up"

What about "set a user up"? ;) On Mon, 16 Jun 2025, at 07:46, Claus Assmann wrote: > While trying to find a way to get fw_update to work during autoinstall > without an internet connection, I noticed the use of the word > "setup" - maybe someone can take a look and d

Re: install.sub: "setup" vs to "set up"

6 06:13:36 2025 > @@ -2277,7 +2277,7 @@ > > # Gather information for setting up the user later in do_install(). > user_setup() { > - local _q="Setup a user? (enter a lower-case loginname, or 'no')" > + local _q="Set up a user? (enter a lower-case loginname, or &

install.sub: "setup" vs to "set up"

11:51 2025 +++ install.sub Mon Jun 16 06:13:36 2025 @@ -2277,7 +2277,7 @@ # Gather information for setting up the user later in do_install(). user_setup() { - local _q="Setup a user? (enter a lower-case loginname, or 'no')" + local _q="Set up a user? (enter a lower-case l

Re: uslcom(4) not attaching to ucom(4) / showing up on /dev/cuaU*

Am Donnerstag 5 Juni 2025 um 7:59:44 +1000, schrieb David Gwynne 1,9K: > you might just need to ./MAKEDEV ttyU4 in /dev. there's only 4 (0 to > 3) dev entries for ucom devices by default, which look to be all taken > by the quectel. That did the trick - thank you :-) I was wrongly using MAKEDEV, n

Re: uslcom(4) not attaching to ucom(4) / showing up on /dev/cuaU*

ot stuff" rev 1.10/1.00 addr 2 > ucom4 at uslcom0 portno 0: usb3.0.5.0 > > - - - - - - - - - - %< - - - - - - - - - - > > A Quectel EC25 is showing up properly at ucom{0,1,2,3} and can be > accessed via /dev/cuaU{0,1,2,3}: > > - - - - - - - - - - %< - - - - - - - - - - > > umsm0 at uhub1 port 1 conf

Re: uslcom(4) not attaching to ucom(4) / showing up on /dev/cuaU*

On Tue, May 06, 2025 at 09:37:43PM +0200, Manuel Kuklinski wrote: > Hi! > > I have a CC2652RB Zigbee stick, which I cannot access via /dev/cuaU*, > despite attaching at ucom(4), at least according to dmesg. It is > initially recognized as uslcom(4): > > - - - - - - - - - - %< - - - - - - - - - -

uslcom(4) not attaching to ucom(4) / showing up on /dev/cuaU*

slae.sh cc2652rb stick - slaesh's iot stuff" rev 1.10/1.00 addr 2 ucom4 at uslcom0 portno 0: usb3.0.5.0 - - - - - - - - - - %< - - - - - - - - - - A Quectel EC25 is showing up properly at ucom{0,1,2,3} and can be accessed via /dev/cuaU{0,1,2,3}: - - - - - - - - - - %< - - - - - -

Re: [RFC] Feature proposal to speed up the kernel when the display is off.

Den sön 9 feb. 2025 kl 20:40 skrev Vitalii : > When the display is turned off, the rendering of graphics is > skipped, speeding up the pc. When the currently running command > returns any exit code or when the display is turned on, the > rendering of graphics occurs, setting the spe

[RFC] Feature proposal to speed up the kernel when the display is off.

When the display is turned off, the rendering of graphics is skipped, speeding up the pc. When the currently running command returns any exit code or when the display is turned on, the rendering of graphics occurs, setting the speed of the pc back to normal.

Re: Files on external drive randomly deleted ? Yet still show up on df command

On Mon, Nov 04, 2024 at 11:04:58AM +0100, Sylvain Saboua wrote: > About one week before when I woke up I saw that most of the files from my > /mnt hard drive had disappeared. Public and personal archives, media > collection... Nothing shows up anymore. 'du -sh' command di

Re: Files on external drive randomly deleted ? Yet still show up on df

Centuries ago, Nostradamus predicted that Sylvain Saboua would write on Mon Nov 4 04:04:58 2024: > > About one week before when I woke up I saw that most of the files > from my /mnt hard drive had disappeared. Public and personal > archives, media collection... Nothing shows up

Files on external drive randomly deleted ? Yet still show up on df command

About one week before when I woke up I saw that most of the files from my /mnt hard drive had disappeared. Public and personal archives, media collection... Nothing shows up anymore. 'du -sh' command displays free space, however the space is still used up as per 'df -h' comm

Re: 7.5: Caja start up problem after 012_xserver

After played a little with other ports, launched a couple of "pkg_delete -a" and reapplied the patch 75_012.. Caja returned to run proprely, with all the icons and dark mode ok. Thxs! -Dan Dan wrote: > > Hello, > > After the latest patch, 012_xserver, installed via syspatch, Caja is > not

7.5: Caja start up problem after 012_xserver

Hello, After the latest patch, 012_xserver, installed via syspatch, Caja is not so friendly: (caja:87440): dbind-WARNING **: 17:04:10.688: Couldn't connect to accessibility bus: Empty address '' Could not register the application: Timeout was reached and it doesn't start under Xfce. -Dan

Re: How to turn off console log window on start-up?

On 2024-10-14 08:20:48, Stuart Henderson wrote: > On 2024-10-12, Sadeep Madurange wrote: > > On 2024-10-12 12:51:25, Sadeep Madurange wrote: > >> Since I upgraded to 7.6, a console log window opens when I login. Is > >> there a way to turn that off? > > > > Never mind, found it. Needed to comment

Re: How to turn off console log window on start-up?

On 2024-10-12, Sadeep Madurange wrote: > On 2024-10-12 12:51:25, Sadeep Madurange wrote: >> Since I upgraded to 7.6, a console log window opens when I login. Is >> there a way to turn that off? > > Never mind, found it. Needed to comment out the following line from > /etc/X11/xenodm/Xsetup_0: > >

Re: How to turn off console log window on start-up?

On 2024-10-12 12:51:25, Sadeep Madurange wrote: > Since I upgraded to 7.6, a console log window opens when I login. Is > there a way to turn that off? Never mind, found it. Needed to comment out the following line from /etc/X11/xenodm/Xsetup_0: ${exec_prefix}/bin/xconsole -geometry 480x130-0-0 -d

How to turn off console log window on start-up?

Hello, Since I upgraded to 7.6, a console log window opens when I login. Is there a way to turn that off? -- Sadeep Madurange PGP: 103BF9E3E750BF7E

A Write-up on Fighting SPAM with the help of OpenBSD

Greetings, I composed a (somewhat opinionated) write-up on my blog about fighting SPAM with the help of OpenBSD and rspamd. The reason I'm writing about it on this list is that I want to give a shoutout Joel Carnat for his excellent write-up on the subject (linked in my post). I would lo

Re: VLAN-tagging - follow-up

ur vlan101 on em0) you are telling the kernel "pick up all > packets that arrive on this interface and that have this specific tag, > and bring them to me", for incoming traffic, and "take any packet I am > sending out of this interface and attach this VLAN tag to it".

Re: VLAN-tagging - follow-up

ce. > I have: > > $ cat /etc/hostname.em0 > up > > $ cat /etc/hostname.vlan101 > vnetid 101 parent em0 > inet autoconf > up > > In /etc/pf.conf I have replaced em0 with vlan101 for ext_if. > > I get "No route to host" if I try to ping something, etc.

Re: VLAN-tagging - follow-up

On Fri, Jun 07, 2024 at 03:04:54AM +, Martin wrote: > Are you supposed to "bridge" the vlan with the physical interface? No > I have: > > $ cat /etc/hostname.em0 > up > > $ cat /etc/hostname.vlan101 > vnetid 101 parent em0 > inet autoconf > up O

Re: VLAN-tagging - follow-up

, and then isolate the problem to pf. On Fri, Jun 7, 2024 at 5:06 AM Martin wrote: > Are you supposed to "bridge" the vlan with the physical interface? > > I have: > > $ cat /etc/hostname.em0 > up > > $ cat /etc/hostname.vlan101 > vnetid 101 parent em0 > inet

Re: VLAN-tagging - follow-up

On Fri, Jun 07, 2024 at 03:04:54AM +, Martin wrote: Are you supposed to "bridge" the vlan with the physical interface? I have: $ cat /etc/hostname.em0 up $ cat /etc/hostname.vlan101 vnetid 101 parent em0 inet autoconf You can leave off the 'up' here. I like to put ever

VLAN-tagging - follow-up

Are you supposed to "bridge" the vlan with the physical interface? I have: $ cat /etc/hostname.em0 up $ cat /etc/hostname.vlan101 vnetid 101 parent em0 inet autoconf up In /etc/pf.conf I have replaced em0 with vlan101 for ext_if. I get "No route to host" if I try to ping

Re: [7.5/amd64] ipsec + npppd + sasyncd + carp - doesn't pick up the VPN session at switchover

On 2024-05-30, Radek wrote: > Thank you all for your replies. > > Actually, I did not know that providing seamless switching VPN solutions is > so problematic. If it can't be done in a simple way, then it doesn't have to > be seamless at any cost. Users will manually reconnect to this VPN when

Re: [7.5/amd64] ipsec + npppd + sasyncd + carp - doesn't pick up the VPN session at switchover

Thank you all for your replies. Actually, I did not know that providing seamless switching VPN solutions is so problematic. If it can't be done in a simple way, then it doesn't have to be seamless at any cost. Users will manually reconnect to this VPN when CARP does switchover and there will b

Re: [7.5/amd64] ipsec + npppd + sasyncd + carp - doesn't pick up the VPN session at switchover

On 2024-05-29, Vitaliy Makkoveev wrote: > He wants replication. This means both wireguard "servers" know the client > state. No client reconnection at failure, no delay, seamless migration > from failed node to the backup. Something like sasyncd(8), but for > npppd(8) or wg(4). wireguard doesn't

Re: [7.5/amd64] ipsec + npppd + sasyncd + carp - doesn't pick up the VPN session at switchover

> On 29 May 2024, at 18:50, Hrvoje Popovski wrote: > > On 29.5.2024. 12:48, Radek wrote: >> Thank you, that explains everything. >> Does wireguard support replication? Will it work properly in my CARP setup? >> > > > why not use iked as vpn solution ? i'm not sure but i think that iked is

Re: [7.5/amd64] ipsec + npppd + sasyncd + carp - doesn't pick up the VPN session at switchover

> On 29 May 2024, at 18:50, Hrvoje Popovski wrote: > > On 29.5.2024. 12:48, Radek wrote: >> Thank you, that explains everything. >> Does wireguard support replication? Will it work properly in my CARP setup? >> > > Hi, > > I have wg listen on carp interface for redundancy and it's working > w

Re: [7.5/amd64] ipsec + npppd + sasyncd + carp - doesn't pick up the VPN session at switchover

> On May 29, 2024, at 3:48 AM, Radek wrote: > > Thank you, that explains everything. > Does wireguard support replication? Will it work properly in my CARP setup? wireguard doesn’t have “state” per se. it remembers the last address a key was associated with. In the event of a failover, if

Re: [7.5/amd64] ipsec + npppd + sasyncd + carp - doesn't pick up the VPN session at switchover

On 29.5.2024. 12:48, Radek wrote: > Thank you, that explains everything. > Does wireguard support replication? Will it work properly in my CARP setup? > Hi, I have wg listen on carp interface for redundancy and it's working without admins or clients needs to do anything when primary carp firewa

Re: [7.5/amd64] ipsec + npppd + sasyncd + carp - doesn't pick up the VPN session at switchover

On 2024/05/29 18:08, Vitaliy Makkoveev wrote: > On Wed, May 29, 2024 at 01:23:47PM -, Stuart Henderson wrote: > > On 2024-05-29, Vitaliy Makkoveev wrote: > > > On Wed, May 29, 2024 at 12:48:41PM +0200, Radek wrote: > > >> Thank you, that explains everything. > > >> Does wireguard support repl

Re: [7.5/amd64] ipsec + npppd + sasyncd + carp - doesn't pick up the VPN session at switchover

On Wed, May 29, 2024 at 01:23:47PM -, Stuart Henderson wrote: > On 2024-05-29, Vitaliy Makkoveev wrote: > > On Wed, May 29, 2024 at 12:48:41PM +0200, Radek wrote: > >> Thank you, that explains everything. > >> Does wireguard support replication? Will it work properly in my CARP setup? > >> >

Re: [7.5/amd64] ipsec + npppd + sasyncd + carp - doesn't pick up the VPN session at switchover

On 2024-05-29, Vitaliy Makkoveev wrote: > On Wed, May 29, 2024 at 12:48:41PM +0200, Radek wrote: >> Thank you, that explains everything. >> Does wireguard support replication? Will it work properly in my CARP setup? >> > > No for both questions. However, wireguard allows to create complicated >

Re: [7.5/amd64] ipsec + npppd + sasyncd + carp - doesn't pick up the VPN session at switchover

t; > Hello, > > > I have two redundant firewalls with CARP: [krz75-MAS]<->[krz75-SLA]. I'm > > > trying to set up redundant IPSEC VPN on it. > > > > > > - CARP + pfsync is working as expected - ca 1-2 pings lost at switchover. > > > - sasync

Re: [7.5/amd64] ipsec + npppd + sasyncd + carp - doesn't pick up the VPN session at switchover

t; Hello, > > I have two redundant firewalls with CARP: [krz75-MAS]<->[krz75-SLA]. I'm > > trying to set up redundant IPSEC VPN on it. > > > > - CARP + pfsync is working as expected - ca 1-2 pings lost at switchover. > > - sasyncd seems to work as expected

Re: [7.5/amd64] ipsec + npppd + sasyncd + carp - doesn't pick up the VPN session at switchover

npppd does not support replication > On 27 May 2024, at 19:58, Radek wrote: > > Hello, > I have two redundant firewalls with CARP: [krz75-MAS]<->[krz75-SLA]. I'm > trying to set up redundant IPSEC VPN on it. > > - CARP + pfsync is working as expected -

[7.5/amd64] ipsec + npppd + sasyncd + carp - doesn't pick up the VPN session at switchover

Hello, I have two redundant firewalls with CARP: [krz75-MAS]<->[krz75-SLA]. I'm trying to set up redundant IPSEC VPN on it. - CARP + pfsync is working as expected - ca 1-2 pings lost at switchover. - sasyncd seems to work as expected - flows and SADs are replicated between nodes -

Re: cwm randomly pops up "search for windows" box

> At random intervals the cursor jumps to the top left corner of the screen and > the "search for windows" box pops up > This behavior started about a month ago and has persisted.  Maybe it is just matter of user adoption, and you need one more year. Go for it.. However

cwm randomly pops up “search for windows” box

The subect line says it all. At random intervals the cursor jumps to the top left corner of the screen and the “search for windows” box pops up as if I had entered M-Slash. This behavior started about a month ago and has persisted. I can’t even begin to know where to look so any suggestions

Re: How to set up dev environment for ESP32 MCUs?

Hi David, On 2024-02-14 21:43:02, David Demelier wrote: > On Sun, 2024-02-11 at 13:32 +0800, Sadeep Madurange wrote: > > Has anyone set up the ESP-IDF for programming ESP32 MCUs? > > > > Should I install dependencies like libmpc using pkg_add, and then > > install th

Re: How to set up dev environment for ESP32 MCUs?

On Sun, 2024-02-11 at 13:32 +0800, Sadeep Madurange wrote: > Hello, > > Has anyone set up the ESP-IDF for programming ESP32 MCUs? > > Should I install dependencies like libmpc using pkg_add, and then > install the ESP-IDF from their GitHub or put things together using > xte

How to set up dev environment for ESP32 MCUs?

Hello, Has anyone set up the ESP-IDF for programming ESP32 MCUs? Should I install dependencies like libmpc using pkg_add, and then install the ESP-IDF from their GitHub or put things together using xtensa-esp32-elf/* ports and use CMake without the ESP-IDF? Appreciate some pointers in the right

Re: cleaning up /usr/local/lib after (many) upgrades?

On 2024/01/27 20:43:17 +0100, Jan Stary wrote: > On Jan 27 17:46:07, a...@lists.gxis.de wrote: > > I'm looking at one of my OpenBSD systems here that has been upgraded > > over a long time, and has /usr/local running out of space. > > > > It seems there's a lot of old versions of shared librari

Re: cleaning up /usr/local/lib after (many) upgrades?

t; of files that I think were from base (/usr/X11R6 mostly), it didn't > > > turn up anything from /usr/local on this system. > > pkg_delete will never remove anything from base. > > Show the actual ouput. > > Yes, I mixed that up. What I was thinking of when wr

Re: cleaning up /usr/local/lib after (many) upgrades?

...on 2024-01-27 17:46:07, Alexander Bochmann wrote: > Is this expected, or a result of some error I made during upgrades? As it turns out, the error I made was not actually running pkg_delete -a at any point, and misinterpreting the output of pkg_delete -an (which is why I didn't run the forme

Re: cleaning up /usr/local/lib after (many) upgrades?

...on 2024-01-27 19:58:45, Alexander Bochmann wrote: > I tried pkg_delete -a earlier today, but while it gave me a bunch > of files that I think were from base (/usr/X11R6 mostly), it didn't > turn up anything from /usr/local on this system. It's been pointed out that

Re: cleaning up /usr/local/lib after (many) upgrades?

de of packages. None of the outdated shared libs turn up. > > Usually I'm just running pkg_add -u to pull fresh versions of packages. > > And is there some "standard" way to get rid of the old versions? > pkg_add generally replaces the old version with the new vers

Re: cleaning up /usr/local/lib after (many) upgrades?

On Jan 27 17:46:07, a...@lists.gxis.de wrote: > I'm looking at one of my OpenBSD systems here that has been upgraded > over a long time, and has /usr/local running out of space. > > It seems there's a lot of old versions of shared libraries in > /usr/local/lib, like for example: > > > # ls -a

Re: cleaning up /usr/local/lib after (many) upgrades?

...on 2024-01-27 20:01:55, Omar Polo wrote: > I think you're mixing up pkg_delete and sysclean. sysclean will give > you a list of extra files that are not needed, while pkg_delete handles > packages. Nope, I looked at both, and neither handles old shared libraries from upgrad

Re: cleaning up /usr/local/lib after (many) upgrades?

...on 2024-01-27 18:50:01, Nowarez Market wrote: > _Did_ you check sysclean for your own purpose ? sysclean (also mentioned in a direct mail by someone else) doesn't seem to help in this case. While it gives me input for yet another cleanup task, none of the files mentioned in sysclean output

Re: cleaning up /usr/local/lib after (many) upgrades?

think were from base (/usr/X11R6 mostly), it didn't > turn up anything from /usr/local on this system. I think you're mixing up pkg_delete and sysclean. sysclean will give you a list of extra files that are not needed, while pkg_delete handles packages. also, pkg_* never touches stuff o

Re: cleaning up /usr/local/lib after (many) upgrades?

...on 2024-01-27 19:35:18, Omar Polo wrote: > does pkg_delete -a help? It should remove all the packages not needed, I tried pkg_delete -a earlier today, but while it gave me a bunch of files that I think were from base (/usr/X11R6 mostly), it didn't turn up anything from /usr/local

Re: cleaning up /usr/local/lib after (many) upgrades?

On 2024/01/27 17:46:07 +0100, Alexander Bochmann wrote: > Hi - > > I'm looking at one of my OpenBSD systems here that has been upgraded > over a long time, and has /usr/local running out of space. > > It seems there's a lot of old versions of shared libraries in > /usr/local/lib, like for exa

cleaning up /usr/local/lib after (many) upgrades?

Hello, _Did_ you check sysclean for your own purpose ? Jan 27, 2024 18:27:11 Alexander Bochmann : > I'm looking at one of my OpenBSD systems here that has been upgraded > over a long time, and has /usr/local running out of space. > > It seems there's a lot of old versions of shared libraries in

cleaning up /usr/local/lib after (many) upgrades?

Hi - I'm looking at one of my OpenBSD systems here that has been upgraded over a long time, and has /usr/local running out of space. It seems there's a lot of old versions of shared libraries in /usr/local/lib, like for example: > # ls -al /usr/local/lib/libvpx.so.* > -rw-r--r-- 1 root bi

Re: cdn.openbsd.org: packages-stable not up to date

On Fri, Jan 19, 2024 at 08:29:30PM +0200, Mark said: So, any clue? Seems fine now, at least for whichever node the CDN returned for me. bakeneko@20:02:19 ~ >curl -s https://cdn.openbsd.org/pub/OpenBSD/7.4/packages-stable/ | grep amd64 amd64/ 17-Jan

Re: cdn.openbsd.org: packages-stable not up to date

So, any clue? 15 Ocak 2024 Pazartesi tarihinde K R yazdı: > Hi, > > It seems packages-stable from cdn.openbsd.org haven't been > updated since Dec, 25th: > > $ curl -s https://cdn.openbsd.org/pub/OpenBSD/7.4/packages-stable/ | grep > amd64 > amd64/ 25-Dec-2023 06:06 > > ftp.openbsd.org seems fin

cdn.openbsd.org: packages-stable not up to date

Hi, It seems packages-stable from cdn.openbsd.org haven't been updated since Dec, 25th: $ curl -s https://cdn.openbsd.org/pub/OpenBSD/7.4/packages-stable/ | grep amd64 amd64/ 25-Dec-2023 06:06 ftp.openbsd.org seems fine, though: $ curl -s https://ftp.openbsd.org/pub/OpenBSD/7.4/packages-stable/

unwind not picking up autoconf resolver from wg0

ess 10.0.0.xx When checking autoconf status, I see that unwind is not picking up resolver from wg0: # unwindctl status autoconf autoconfiguration forwarders:

Re: IPsec "road warrior" VPN not getting set up properly.

I am a bit late to the party, but some more comments below. On Sun, Jul 09, 2023 at 11:27:20PM -0400, Anthony Coulter wrote: > Summary of this email: > > 1. I respond to a couple of specific points made by other folks in this >thread to clarify what I'm trying to accomplish

Re: IPsec "road warrior" VPN not getting set up properly.

Stuart Henderson wrote: > Currently iked (and isakmpd) use flows, not routes. These use messages > on the PF_KEY socket not the route socket. (If I watch route -nv monitor > while iked starts and brings up tunnels, I don't see any messages). > > IIUC the parts you found which

Re: IPsec "road warrior" VPN not getting set up properly.

I'm sure this is obvious to people, but just in case it is not: I pay $25/month for my VPS, and I think I could bring that down to $10 or $15 if I wanted. My VPS routes me a /48 IPv6 network... I clearly meant "My VPS _provider_ routes me...".

Re: IPsec "road warrior" VPN not getting set up properly.

Before I essentially echo back what Stuart said, let me clarify something. I don't really recommend NAT over NDP proxying more than the other way around. I was merely stating that a hack is a hack is a hack. If you are forced to use a hack, then insisting on one over the other is bizarre unless on

Re: IPsec "road warrior" VPN not getting set up properly.

On 2023-07-10, Anthony Coulter wrote: > 2. I abandon my quest to get NDP proxying added to iked and instead ask >if we can add a "rtlabel" keyword to iked.conf to make it easier for >me to write a separate process that monitors the routing table to >detect when

Re: IPsec "road warrior" VPN not getting set up properly.

Summary of this email: 1. I respond to a couple of specific points made by other folks in this thread to clarify what I'm trying to accomplish (set up a couple of ad hoc link-local routes without having to ask my ISP for a larger subnet) and to acknowledge that I said something s

Re: IPsec "road warrior" VPN not getting set up properly.

Thus said Anthony Coulter on Thu, 06 Jul 2023 21:52:54 -0400: > I would also suggest comparing the "hackiness" of NDP proxying to the > hackiness of NAT, which is how we solve this same problem in IPv4. I realize I'm coming in late to this discussion, and may not actually have anything of val

Re: IPsec "road warrior" VPN not getting set up properly.

when I typed it. The point is that configuring all those subnets and static routes is an awful lot of extra work when all I want to do is set up a VPN proxy. > why when people are looking for dhcpv6 software do they always find that > unmaintained-for-years run-the-whole-lot-as-root wide-dhc

Re: IPsec "road warrior" VPN not getting set up properly.

where a network can roughly be seen as a complete graph and a node belonging to multiple complete graphs represents a destination in a routing table. It is not challenging at all to use route(8) to subnet from a routed /48 or /56. How many subnets you want is up to you. If you want to only carve

Re: IPsec "road warrior" VPN not getting set up properly.

veering slightly from the topic (typical setup for a server host would not be to use DHCPv6 but just statically route another block - usually a /56 or /48), but... On 2023-07-07, Anthony Coulter wrote: > The trouble with subnets is that they have to be configured. I would > have to install a DHCP

Re: IPsec "road warrior" VPN not getting set up properly.

f low-volume, hobbyist thing that I *could* accomplish with a layer 2 VPN that tunnels entire Ethernet frames to the remote server---but that would also be a huge pain to configure because now I have to set up and configure a bunch of extra tunnel interfaces. The "road warrior" VPN (I hate t

Re: IPsec "road warrior" VPN not getting set up properly.

routable? The Internet at large already knows how to look at the top 64 bits of an address to figure out what gateway router to deliver the packet to, and if the packet somehow reaches the IKEv2 responder, iked has already set up the routes necessary to push the packet down the tunnel to its final des

Re: IPsec "road warrior" VPN not getting set up properly.

ve a similar setup myself except I use WireGuard, but I'm confident IKEv2/IPSec would be easy to set up as well.

Re: IPsec "road warrior" VPN not getting set up properly.

On 2023-07-05, Anthony Coulter wrote: > OK, I've sorted out my network issues server but it turns out that I > was misinterpreting the tcpdump output on my VPS. When an external > computer tries to ping my client's virtual IP address, the VPS's > gateway router is *not* forwarding the pings to my

Re: IPsec "road warrior" VPN not getting set up properly.

nstead of modestly portly IPv6 packets. Worse, if I want non-OpenBSD clients to connect to the server, I have to figure out how to set up the client side of a layer 2 tunnel on whatever OS they're using. So much work just to get a globally-routable IP address! Here is my vision of a perfect w

Re: IPsec "road warrior" VPN not getting set up properly.

On July 5, 2023 4:35:30 AM GMT+03:00, Anthony Coulter wrote: >Short version: > >I'm trying to set up a "road warrior"-style VPN like the one described >at https://www.openbsd.org/faq/faq17.html but I'm trying to use IPv6 so >I can have globally-routable a

IPsec "road warrior" VPN not getting set up properly.

Short version: I'm trying to set up a "road warrior"-style VPN like the one described at https://www.openbsd.org/faq/faq17.html but I'm trying to use IPv6 so I can have globally-routable addresses (so I'm not using NAT). So far I've gotten the initiator and the

Re: Setting up a Transparent Tor Proxy on OpenBSD 7.3 with pf(4)

On Thu, Jun 15, 2023 at 07:17:45AM -, distantp...@danwin1210.de wrote: > > Thats it, "rcctl start tor" works flawlessly, "sh /etc/netstart" too, and > "pfctl -f /etc/pf.conf" does not spit out any warnings or errors either, Yes, at first blush by visual inspection the file you present is a sy

Re: Setting up a Transparent Tor Proxy on OpenBSD 7.3 with pf(4)

> > > "pfctl -f /etc/pf.conf" does not spit out any warnings or errors either, > so I first assumed it would work just as flawlessly then, but apparently > it doesnt, because I cant ping any domain or wget any webpage, when I > If you add "log" rules to your pf.conf and the watch the pflog device

Setting up a Transparent Tor Proxy on OpenBSD 7.3 with pf(4)

Hey there, as I am completely new here, I might do something against the netiquette here in the mailing lists, so correct me if I am wrong and I will try to adjust. I am trying to set up a transparent Tor proxy on OpenBSD with pf(4), but I couldnt find any helpful resources in the FAQ or the

Re: Problem to set a printer with cups and foo2zjs documentation not up to date for foo2zjs

that firefox and friends are hard coded to use a cups defined printer. At least I haven't figured out how to fool their print dialog box. Follow the man pages for setting up lpd. You need to create an /etc/printcap entry similar to to: lp|hp_prt:\ :lp=9100@hp_prt:\ :sh:\

Re: Problem to set a printer with cups and foo2zjs documentation not up to date for foo2zjs

On 2023-05-10, Jon Fineman wrote: > HP's web site says it is fully supported. > ... on Linux, with an additional proprietary binary plug-in download.

Re: Problem to set a printer with cups and foo2zjs documentation not up to date for foo2zjs

from) and gs (which is in ghostscript). Printing just PS is pretty straight forward. However you should be aware that firefox and friends are hard coded to use a cups defined printer. At least I haven't figured out how to fool their print dialog box. Follow the man pages for setting up lpd. You

Re: Problem to set a printer with cups and foo2zjs documentation not up to date for foo2zjs

get which tools bundle this is from) and gs (which is in ghostscript). Printing just PS is pretty straight forward. However you should be aware that firefox and friends are hard coded to use a cups defined printer. At least I haven't figured out how to fool their print dialog box. Follow the man

Re: Problem to set a printer with cups and foo2zjs documentation not up to date for foo2zjs

ghostscript). Printing just PS is pretty straight forward. However you should be aware that firefox and friends are hard coded to use a cups defined printer. At least I haven't figured out how to fool their print dialog box. Follow the man pages for setting up lpd. You need to create an

Problem to set a printer with cups and foo2zjs documentation not up to date for foo2zjs

Hello I have a hp P1005 ( I know hp) and I try to install it on opennbsd. So I installed cups and foo2zjs but foo2zjs download an img file and I don't know what to do with it. There is no mention of img file in the INSTALL file. What do I need to do to make the printer work with the openbsd

Re: A messed-up fresh install due to a careless user

Hello Brian, I forgot to say that my site set did include the already prepared pf.conf, but not rc.conf.local, where pf was set to be disabled. As the result, pf started with rules for nat/firewall, not the default ones. And that created the “problem”. Martin

Re: A messed-up fresh install due to a careless user

On Sat, Apr 29, 2023, at 3:48 AM, Odd Martin Baanrud wrote: > Yes, off course one should have a firewall. > That was why I installed OpenBSD on the actual machine in the first place. > I prepared it when it was on the LAN only, and then moved it into production. > And now it works perfectely. > But

  1   2   3   4   5   6   7   8   9   10   >