Re: What's good safe PPC/MIPS/SPARC networking hardware with open firmware that works well with OpenBSD? Many ethernet plugs and 1U rack mount = bonus.

2016-02-28 Thread Christian Weisgerber
On 2016-02-28, Tinker wrote: >> Open firmware? What do you mean by that precisely? > > Or just as little firmware as possible, just to minimize that as attack > vector. Remember that your brain architecture and firmware isn't open either. Who knows what's hiding there. Just looking at a random

Re: how to send email via Mail

2016-02-28 Thread Jaap Bosman
Thank you all so much for your answers. In man mail(1) it is not clear to me that mail(1) is not for use outside a local network. In http://openbsd.das.ufsc.br/nl/mail.html It says: " Many subscribers and developers read their mail on text-based mailers (mail(1), emacs, Mutt) " I do understand

Why this pf rule is not enough?

2016-02-28 Thread Lampshade
I have rdomain 1 and default rdomain pair1 is in rdomain 1 pair2 is in default rdomain Inside rdomain1 there is not loopback interface network is 172.10.0.2/24 In /etc/resolv.conf I have nameserver 127.0.0.1 so all DNS (UDP 53) packets should go to 127.0.0.1 Default route in rdomain1 is pair2 inte

Re: how to send email via Mail

2016-02-28 Thread Dmitrij D. Czarkoff
Jaap Bosman said: > In man mail(1) it is not clear to me that mail(1) is not for use outside > a local network. Strictly speaking mail(1) is not for use over network at all: it reads local mailbox and sends mail via MTA. It does not do networking on its own. > Why do I want to use mail(1) as an

Adding chunk to softraid volume with bioctl - required chunk size

2016-02-28 Thread Theodore Wynnychenko
Hello I have a question about RAID 1 volumes set up with bioctl. When I originally set up the softraid, I created a RAID partition that (essentially) took up the entire drive. However, the disklabel INSIDE the softraid does NOT use the all the space available (e.g. The chunks making up the RAID

isakmpd peculiarities, ipsec.conf manpage inaccuracy

2016-02-28 Thread Andrew Lester
Hi all, I'm running OpenBSD 5.8-stable. The ipsec.conf manpage indicates that if no srcid is present in an automatic keying IKE statement, then the value in the identification should be the host IP address, and be an IP address type. I've found this to be incorrect; if no srcid is specified, my sy

Re: sndiod fallback trouble

2016-02-28 Thread Alexandre Ratchov
On Sat, Feb 27, 2016 at 01:41:15PM -0500, Michael Reed wrote: > On 02/27/16 04:15, Alexandre Ratchov wrote: > >A nicer approach would be to handle this in sndiod by allowing > >sub-devices (aka -s options) to change their device (aka -f > >option). The advantage of doing it in sndiod is that later

Re: sndiod fallback trouble

2016-02-28 Thread Alexandre Ratchov
On Sat, Feb 27, 2016 at 10:32:30AM +0100, Matej Nanut wrote: > On 27 February 2016 at 10:15, Alexandre Ratchov wrote: > > One option would to patch libsndio to try more devices (how many?). > > I've also noticed this issue and have hacked libsndio to try snd/0 and > snd/1 first, which is basicall

Re: FAQ - Add a link

2016-02-28 Thread Nick Holland
On 02/17/16 09:17, Wesley MOUEDINE ASSABY wrote: > Hi, > > Can you add a link to "http://www.openbsd.org"; on the OpenBSD logo > (smalltitle.gif) located at http://cvsweb.openbsd.org/cgi-bin/cvsweb/ ? > It will be better for browsing, to come back. Good idea. Done. Nick.

updating src with cvs

2016-02-28 Thread Edgar Pettijohn
I've noticed a lot of my source files seem to get globbed up. Below is an example: /* from my system */ int maxchildren = MAXCHILDREN;/* Max no of concurrent PIDs */ intnflag = 0;/* Say without doing */ int64_tmin_freespace = 0;/* Min filesys free

Re: OpenSSL/IPsec certificate creation error or error in man pages

2016-02-28 Thread Stuart Henderson
On 2016-02-27, igor.kos wrote: > I have created certificates in accordance to isakmpd man page: > > # env CERTIP=10.0.0.1 openssl x509 -req \ > -days 365 -in 10.0.0.1.csr \ > -CA /etc/ssl/ca.crt -CAkey /etc/ssl/private/ca.key \ > -CAcreateserial -extfile /etc/ssl/x509v3.cnf \ > -extensions x5