Re: vpn performance - C2750 vs C2758

2015-01-27 Thread Stuart Henderson
On 2015-01-26, Christian Weisgerber wrote: > On 2015-01-26, Sonic wrote: > >> Wondering if the addition of the Intel's Quick Assist feature present >> on Intel's C2758 processor provides any advantage for a VPN connection >> between two OpenBSD systems. > > I don't think we support Quick Assist,

tcp wrappers question

2015-01-27 Thread Alexei Malinin
Hello. I noticed that OpenBSD-5.6 does not include tcp wrappers (tcpd etc). What is recommended to use instead of tcp wrappers? PS. I used tcp wrappers to restrict access to sshd, sendmail, popa3d, tftpd, ... -- Alexei Malinin

Re: tcp wrappers question

2015-01-27 Thread Maurice McCarthy
On 2015-01-27 14:19, Alexei Malinin wrote: Hello. I noticed that OpenBSD-5.6 does not include tcp wrappers (tcpd etc). What is recommended to use instead of tcp wrappers? PS. I used tcp wrappers to restrict access to sshd, sendmail, popa3d, tftpd, ... -- Alexei Malinin OpenBSD uses the Pac

Re: tcp wrappers question

2015-01-27 Thread Peter N. M. Hansteen
On Tue, Jan 27, 2015 at 05:19:20PM +0300, Alexei Malinin wrote: > I noticed that OpenBSD-5.6 does not include tcp wrappers (tcpd etc). > > What is recommended to use instead of tcp wrappers? > > PS. I used tcp wrappers to restrict access to sshd, sendmail, popa3d, > tftpd, ... The idea (which I

Re: Mapping pf syslog rule numbers to lines in pf.conf

2015-01-27 Thread Hasse Hansson
On Mon, Jan 26, 2015 at 03:42:22PM -0500, Alan McKay wrote: > Hey folks, > > This one seems to be difficult to google - not coming up with much. > > I have some firewall blocks I want to investigate and of course they > are reported as matching a specific rule number - but I am not sure > how to

Re: vpn performance - C2750 vs C2758

2015-01-27 Thread Adam Thompson
On 2015-01-27 02:58 AM, Stuart Henderson wrote: On 2015-01-26, Christian Weisgerber wrote: I don't think we support Quick Assist, whatever that is. correct. [...] It doesn't look like something we can use easily. FWIW, I just read that Netgate (i.e. pfSense) committed QuickAssist crypto accel

carp failover problem

2015-01-27 Thread Leclerc, Sebastien
Hi, I have two firewalls in a carp failover setup, but the failover does not work as expected... The problem happens when I reboot the backup firewall (while in backup state). Just after the reboot, I have these entries in dmesg : carp0: state transition: BACKUP -> MASTER carp1: state transition

Improved www/links+ with libtls

2015-01-27 Thread trondd
I use www/links+ often as a nice lightweight browser. However, I realized it didn't do any SSL certificate validation. I found a patch that added basic validation (while silently allowing self signed certs) but still didn't do hostname verification. I went in search of some examples of hostname

Re: carp failover problem

2015-01-27 Thread Christopher Barry
On Tue, 27 Jan 2015 12:01:37 -0500 "Leclerc, Sebastien" wrote: >Hi, > >I have two firewalls in a carp failover setup, but the failover does >not work as expected... The problem happens when I reboot the backup >firewall (while in backup state). Just after the reboot, I have these >entries in dmes

Re: vpn performance - C2750 vs C2758

2015-01-27 Thread Stuart Henderson
On 2015-01-27, Adam Thompson wrote: > On 2015-01-27 02:58 AM, Stuart Henderson wrote: >> On 2015-01-26, Christian Weisgerber wrote: >> I don't think we support Quick Assist, whatever that is. >> correct. >> [...] >> It doesn't look like something we can use easily. > > FWIW, I just read that Netg

shutdown -hp now doesn't power down

2015-01-27 Thread Dorian Büttner
Good evening, my notebook doesn't powerdown anymore when the power supply is connected, it just reboots (looks like it can't power off). However it works when run on battery only. If memory serves well, there was some hibernation code work in december, but at roughly the same time the manufact

Re: vpn performance - C2750 vs C2758

2015-01-27 Thread Axton
On Tue, Jan 27, 2015 at 2:24 PM, Stuart Henderson wrote: > On 2015-01-27, Adam Thompson wrote: > > On 2015-01-27 02:58 AM, Stuart Henderson wrote: > >> On 2015-01-26, Christian Weisgerber wrote: > >> I don't think we support Quick Assist, whatever that is. > >> correct. > >> [...] > >> It doesn

What's wrong with script(1)?

2015-01-27 Thread opendaddy
Hi, I find myself using script(1) (together with https://github.com/defunkt/gist) all the time. I was wondering though: 1. Why does it use CRLF line endings? 2. What's with all the startup noise? Script started on Tue Jan 27 23:47:12 2015 # root@mybox:~# 

Re: What's wrong with script(1)?

2015-01-27 Thread Andy Bradford
Thus said openda...@hushmail.com on Tue, 27 Jan 2015 23:03:35 +: > 1. Why does it use CRLF line endings? > > 2. What's with all the startup noise? man script: ``script makes a typescript of everything printed on your terminal.'' more can handle the output. less -r can also handle it. And

Intel J2900 Can't Install OpenBSD AMD64 5.5 or 5.6

2015-01-27 Thread cship
Hello everyone, I have an Acer Aspire AXC-603-UR10 Desktop that has an Intel Pentium J2900 2.41 GHz Processor. Link to the processor in this computer: http://ark.intel.com/products/78868/Intel-Pentium-Processor-J2900-2M-Cache-up-to-2_67-GHz I received the same MPS issue the person who started the

Mystery Free Linux

2015-01-27 Thread Duncan Patton a Campbell
http://phys.org/news/2015-01-high-end-upstream-linux-laptop-ship.html "the first high-end laptop in the world that ships without mystery software in the kernel, operating system, or any software applications." Can this be? No binary blobs? Dhu (inquiring minds, bla bla bla) -- Ne oblivi

Re: shutdown -hp now doesn't power down

2015-01-27 Thread Mike Larkin
On Tue, Jan 27, 2015 at 11:37:29PM +0100, Dorian B?ttner wrote: > Good evening, > > my notebook doesn't powerdown anymore when the power supply is "anymore" ... when did it last work? -ml > connected, it just reboots (looks like it can't power off). However it > works when run on battery only

Re: Mystery Free Linux

2015-01-27 Thread Theo de Raadt
>http://phys.org/news/2015-01-high-end-upstream-linux-laptop-ship.html > >"the first high-end laptop in the world that ships without mystery software in >the kernel, operating system, or any software applications." > >Can this be? No binary blobs? It is complete and total BS. If you dig do