Re: pf and nat

2014-03-21 Thread Loïc BLOT
Hello, you are right, you need the both rules. -- Best regards, Loïc BLOT, UNIX systems, security and network engineer http://www.unix-experience.fr Le mardi 18 mars 2014 à 15:19 -0300, Friedrich Locke a écrit : > Hi folks, > > i am studying pf and a doubt arose! > > Since my state policy if

Re: PPTP after removing of userland ppp(8)

2014-03-21 Thread Stefan Sperling
On Thu, Mar 20, 2014 at 11:57:57AM -0700, patrick keshishian wrote: > On 3/20/14, Stefan Sperling wrote: > [...] > > And, as goes without saying, if possible, please consider using a different > > protocol. PPTP's weaknesses have been well understood for a long time now. > > Much better alternativ

Re: Where is this device attached?

2014-03-21 Thread John Long
On Fri, Mar 21, 2014 at 02:50:17PM +1100, Jonathan Gray wrote: > On Thu, Mar 20, 2014 at 04:33:01PM +, John Long wrote: > > On Fri, Mar 21, 2014 at 03:08:31AM +1100, Jonathan Gray wrote: > > > > Thanks. How do I build this? > > You need to build and install a new kernel. > After checking out

{r,s}mkx entries in terminfo db missing

2014-03-21 Thread Nils R
Hi misc, i have a problem with my terminal, st [1]. Just for the record, i am using the latest -current snapshot (but the problem existed before). I had an unrelated problem with zsh, where my HOME and DEL key were not working properly (the related thread on the st-mailing list can be found a

Re: {r,s}mkx entries in terminfo db missing

2014-03-21 Thread Tethys
On Fri, Mar 21, 2014 at 11:41 AM, Nils R wrote: >The original st.info contains entries for {r,s}mkx, but when i query the >system terminfo database >with 'infocmp -1 st', no entries for {r,s}mkx are found: > > % egrep '[rs]mkx' st.info > rmkx=\E[?1l\E>, > smkx=\E[?1h\E=, > % info

Re: {r,s}mkx entries in terminfo db missing

2014-03-21 Thread Nils R
Tethys schrieb am 21.03.2014 13:39: > On Fri, Mar 21, 2014 at 11:41 AM, Nils R wrote: > > >The original st.info contains entries for {r,s}mkx, but when i query the > system > >terminfo database > >with 'infocmp -1 st', no entries for {r,s}mkx are found: > > > > % egrep '[rs]mkx' st.info > > rmkx=

Re: Unbound in base, yes, what about ldns?

2014-03-21 Thread Chris Smith
On Wed, Mar 19, 2014 at 7:44 PM, Chris Smith wrote: > See the thread "unbound dnssec revisited" I started on 12/30/2013 for > some hints. Looks like creating a new directory with the proper > permissions is the best way to go. Now fixed in -current with a /var/unbound/db directory. Thanks Stuart!

Re: Unbound in base, yes, what about ldns?

2014-03-21 Thread Stuart Henderson
On 2014/03/21 09:30, Chris Smith wrote: > On Wed, Mar 19, 2014 at 7:44 PM, Chris Smith wrote: > > See the thread "unbound dnssec revisited" I started on 12/30/2013 for > > some hints. Looks like creating a new directory with the proper > > permissions is the best way to go. > > Now fixed in -curr

Re: {r,s}mkx entries in terminfo db missing

2014-03-21 Thread Nils R
After replacing the st-entries in /usr/share/mish/termcap and recreating the db with cap_mkdb, i also had to rename the terminfo.db to make it work. I could not find any program to rebuild the terminfo db, how is it done? Or is terminfo.db not needed at all? Still looking for a simpler soluti

Re: {r,s}mkx entries in terminfo db missing

2014-03-21 Thread Stuart Henderson
On 2014-03-21, Nils R wrote: > i think thats it. When i install st.info to home, the {r,s}mkx entries are > indeed included: > > $ rm -r ~/.terminfo > $ tic ~/st/st.info > $ infocmp -1 -A /home/nils/.terminfo st | egrep '(/home|[sr]mkx)' > # Reconstructed via infocmp from file: /home/nils/

sysmerge error

2014-03-21 Thread Kent Fritz
I get the following after upgrading to the latest snapshot. Am I doing something wrong? Thanks, Kent. # pwd /root # ls -l total 18812 -rw-r--r-- 1 root wheel 22 Jul 30 2013 .Xdefaults drwx-- 3 root wheel 512

Re: sysmerge error

2014-03-21 Thread Antoine Jacoutot
On Fri, Mar 21, 2014 at 11:46:49AM -0400, Kent Fritz wrote: > I get the following after upgrading to the latest snapshot. Am I doing > something wrong? It got fixed earlier today. You can use the full path to the sets for now. > > Thanks, > > Kent. > > # pwd

xnecview broken?

2014-03-21 Thread Alan Corey
This should probably go to ports@ but I don't belong to that. I'm running 5.2 as the latest, but 5.4 looks the same (has the same setjmp patch). There was an old problem with xnecview under OpenBSD that caused it to crash if you tried to use it on more than about 6 frequencies, but this is new si

[patch] usr.bin/mg/theo.c

2014-03-21 Thread Josh Grosse
I thought http://marc.info/?l=openbsd-misc&m=139534238408590&w=2 deserved recognition. Index: theo.c === RCS file: /cvs/src/usr.bin/mg/theo.c,v retrieving revision 1.131 diff -u -r1.131 theo.c --- theo.c 5 Mar 2014 21:45:54 -0

Re: [patch] usr.bin/mg/theo.c

2014-03-21 Thread Bernte
On 21/03/14 22:56, Josh Grosse wrote: > "Complaint forms are handled in another department." > + "You'd be safer using Windows than the code which was just deleted." Isn't there a comma missing ... ? Bernd

Re: OpenBSD email provider

2014-03-21 Thread Stuart Henderson
On 2014-03-19, Giancarlo Razzolini wrote: > Em 19-03-2014 09:41, Stuart Henderson escreveu: >> you have more trust in ISP DNS servers honouring TTLs than I do. if >> you can only get a dynamic IP at home and would like to host mail >> there yourself, in a machine which only you have physical acces

Re: OpenBSD email provider

2014-03-21 Thread Stuart Henderson
On 2014-03-18, Craig R. Skinner wrote: > On 2014-03-17 Mon 20:25 PM |, Jean-Francois Simon wrote: >> >> Just to mention, I'm looking for a more private ESP. As I know that >> OpenBSD conveys an idea of security, I tend to trust a provider >> relying on this OS. >> >> >If you want to read documen

Re: xnecview broken?

2014-03-21 Thread Stuart Henderson
On 2014-03-21, Alan Corey wrote: > This should probably go to ports@ but I don't belong to that. It should indeed, and you can post without subscribing. You should also include dmesg, or at the very least mention the cpu architecture, it is important. > I'm running 5.2 as the latest, but 5.4 loo

Re: Questions about monitoring LAN traffic with openbsd/pf/pflog/pflow

2014-03-21 Thread Giancarlo Razzolini
Em 20-03-2014 19:21, Don Jackson escreveu: > On Mar 20, 2014, at 2:14 PM, Giancarlo Razzolini wrote: > >> Em 20-03-2014 17:12, Don Jackson escreveu: >>> I’m attempting to monitor traffic on my LAN, I have inserted a >>> non-aggregating network tap between my firewall (not openbsd) and my enet >>