Re: Puccini 2x in calendar

2013-12-30 Thread frantisek holop
hmm, on Sun, Dec 29, 2013 at 06:44:59PM +0001, Jason McIntyre said that > On Sun, Dec 29, 2013 at 10:52:11AM +0100, frantisek holop wrote: > > i think he should be removed from birthday: > > > > calendar.birthday:12/22 Giacomo Puccini born, 1858 > > calendar.music:12/22Giacomo Puccini is born

Re: Puccini 2x in calendar

2013-12-30 Thread Jason McIntyre
On Mon, Dec 30, 2013 at 04:06:03PM +0100, frantisek holop wrote: > hmm, on Sun, Dec 29, 2013 at 06:44:59PM +0001, Jason McIntyre said that > > On Sun, Dec 29, 2013 at 10:52:11AM +0100, frantisek holop wrote: > > > i think he should be removed from birthday: > > > > > > calendar.birthday:12/22 Giac

unbound dnssec revisited

2013-12-30 Thread Chris Smith
I've been working on using dnssec with the unbound package and viewing some of the threads here on the list regarding this. Enabling autotrust and the validator module in unbound.conf and running unbound-anchor before starting unbound will enable dnssec but eventually will log errors of: could no

Re: unbound dnssec revisited

2013-12-30 Thread Chris Smith
On Mon, Dec 30, 2013 at 12:10 PM, Chris Smith wrote: > And to strongly reiterate that it would be supper to have this product > in base Er.. that it would be SUPER to have this product in base

Re: unbound dnssec revisited

2013-12-30 Thread Ted Unangst
On Mon, Dec 30, 2013 at 12:10, Chris Smith wrote: > I've been working on using dnssec with the unbound package and viewing > some of the threads here on the list regarding this. > > Enabling autotrust and the validator module in unbound.conf and > running unbound-anchor before starting unbound wil

openbsd snmpd and disk/sensors monitoring

2013-12-30 Thread Julien T
Hello, I'm trying to see if I can switch my new openbsd 5.4 box from net-snmp to snmpd and for now, I miss only 2 things, disk informations and sensors that are not in snmpd.conf man. For disk monitoring, I didn't find information anywhere. Checking the output of snmpwalk, I found the HOST-RESOUR

Re: VPN Between OpenBSD and iOS

2013-12-30 Thread Jeff Goettsch
What does your npppd.conf look like? -- Jeff Goettsch Agricultural and Resource Economics http://agecon.ucdavis.edu/ 530-752-2219 On 12/29/13 5:58 PM, Matt Carlson wrote: Hello, I'm trying to get my iPhone with iOS 7.0.4 to connect to my OpenBSD VPN server. If I understand the problem correc

Re: unbound dnssec revisited

2013-12-30 Thread Remi Locherer
On Mon, Dec 30, 2013 at 03:22:34PM -0500, Ted Unangst wrote: > On Mon, Dec 30, 2013 at 12:10, Chris Smith wrote: > > I've been working on using dnssec with the unbound package and viewing > > some of the threads here on the list regarding this. > > > > Enabling autotrust and the validator module i

Re: unbound dnssec revisited

2013-12-30 Thread Chris Smith
On Mon, Dec 30, 2013 at 3:22 PM, Ted Unangst wrote: > More simply, can that file be moved to another location? Then we can > enable write permissions to /var/unbound/etc/autotrust/files/... or > something, without giving away the keys to the whole kingdom. Actually that was close to my first solu

Re: unbound dnssec revisited

2013-12-30 Thread Chris Smith
On Mon, Dec 30, 2013 at 6:10 PM, Remi Locherer wrote: > Having the root.key in a separate directory works. Yes, it works. But "/var/unbound/etc" was the choice during configure which means a little more work: The autotrust path line in unbound.conf needs to be edited with the new root.key path. T

Re: VPN Between OpenBSD and iOS

2013-12-30 Thread YASUOKA Masahiko
Hi, On Sun, 29 Dec 2013 20:58:03 -0500 Matt Carlson wrote: > # grep -v ^# /etc/ipsec.conf > > > ike passive esp transport \ >proto udp \ >from any to any port 1701 \ >main auth "hmac-sha1" enc "aes" group modp1024 \ >quick auth "hmac-sha1" enc "aes-256" \ >psk "1" AFAIK, fi

smtpd dies with fatal: smtp: ssltree out of sync

2013-12-30 Thread Mikolaj Kucharski
Hi, I've just upgraded my OpenBSD-based mail server to: OpenBSD 5.4-current (GENERIC.MP) #187: Sat Dec 28 17:15:20 MST 2013 dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP and I cannot figure out where is the problem in my smtpd config: # /etc/mail/smtpd.conf ext_if =

Re: VPN Between OpenBSD and iOS

2013-12-30 Thread Matt Carlson
Yasuoka, I tried that just now and it doesn't seem to make a difference. Thanks, Matt On Mon, Dec 30, 2013 at 7:34 PM, YASUOKA Masahiko wrote: > Hi, > > On Sun, 29 Dec 2013 20:58:03 -0500 > Matt Carlson wrote: > > # grep -v ^# /etc/ipsec.conf > > > > > > ike passive esp transport \ > >pr

Re: VPN Between OpenBSD and iOS

2013-12-30 Thread Matt Carlson
Jeff, Here you go: $ grep -v ^# /etc/npppd/npppd.conf authentication LOCAL type local { users-file "/etc/npppd/npppd-users" } tunnel L2TP_ipv4 protocol l2tp { listen on 0.0.0.0 } ipcp IPCP { pool-address 10.0.0.2-10.0.0.254 dns-servers 8.8.8.8 } interfa

Re: VPN Between OpenBSD and iOS

2013-12-30 Thread Mike Pistone
Strangely enough I am having the exact same problem. OPENBSD 5.4, etc. Phase I works once I tweaked my isakmp settings to match IOS7's capabilities (no modp2048 mainly), but I get the same messages Matt does on phase II. I have a npppd PPTP tunnel to the same server that works fine. It is j

dnscrypt-proxy

2013-12-30 Thread nixlists
Hello, OpenBSD has this package. Is it trustworthy? Anyone uses here? I believe this works with OpenDNS, and a few other providers of "secure" recursive caches that support dnscurve through this package. DNS is probably never going to be secure against attacks in our lifetimes (but, hey, maybe no