Re: pf adaptive syncookie

2020-12-18 Thread Stuart Henderson
On 2020-12-18, mabi wrote: > Hi, > > I see quite some syn flood packets on my OpenBSD firewall filling up the > state table for nothing. So I thought let's try the pf's adaptive syncookies. > I am just not quite sure what the percentage used by start and stop relate to. > > In the pf.conf man pa

pf adaptive syncookie

2020-12-18 Thread mabi
Hi, I see quite some syn flood packets on my OpenBSD firewall filling up the state table for nothing. So I thought let's try the pf's adaptive syncookies. I am just not quite sure what the percentage used by start and stop relate to. In the pf.conf man page the following is written: "pf will e

Re: pf adaptive syncookie

2020-12-18 Thread mabi
‐‐‐ Original Message ‐‐‐ On Friday, December 18, 2020 10:48 AM, Stuart Henderson wrote: > It's something like "what % of max allowed states is half-open tcp". > Watch out as there are some bugs in this area, definitely thewith > accounting of half-open connections can be wildly off somet

Re: pf adaptive syncookie

2020-12-18 Thread Stuart Henderson
On 2020-12-18, mabi wrote: > ‐‐‐ Original Message ‐‐‐ > On Friday, December 18, 2020 10:48 AM, Stuart Henderson > wrote: > >> It's something like "what % of max allowed states is half-open tcp". >> Watch out as there are some bugs in this area, definitely thewith >> accounting of half-op

BeagleBone Black: no good seed

2020-12-18 Thread Jan Stary
After an upgrade of BegleBone Black to current/armv7 (previous and current dmesg attached), this is the diff: --- beaglebone-black.20201013 Fri Dec 18 19:12:12 2020 +++ beaglebone-black.20201216 Fri Dec 18 19:12:12 2020 @@ -1,8 +1,8 @@ -OpenBSD 6.8-current (GENERIC) #0: Tue Oct 13 19:14:31 CES

Re: OpenBSD Readonly File System

2020-12-18 Thread Kostya Berger
Hey, I read that message about Freeradius not being able to access /dev/null in a setup where /dev is mounted on an mfs -based filesystem.I'm running similar setup (for years now) - OpenBSD on a USB stick. EVERYTHING is mounted read-only, except /var, /tmp, /dev and /jails, which are mfs - based

Content-Security-Policy makes page render differently

2020-12-18 Thread Paul Pace
When I load a page from OpenBSD served with relayd and httpd with Content-Security-Policy set to default-src self, I can see that a basic HTML page that normally renders with all of the text in the center is now rendered on the left. I have this currently configured with http://mostlybsd.com n

Re: Content-Security-Policy makes page render differently

2020-12-18 Thread Anthony J. Bentley
Paul Pace writes: > When I load a page from OpenBSD served with relayd and httpd with > Content-Security-Policy set to default-src self, I can see that a basic > HTML page that normally renders with all of the text in the center is > now rendered on the left. > > I have this currently configured wi

Re: Content-Security-Policy makes page render differently

2020-12-18 Thread Allan Streib
Paul Pace writes: > When I load a page from OpenBSD served with relayd and httpd with > Content-Security-Policy set to default-src self, I can see that a basic > HTML page that normally renders with all of the text in the center is > now rendered on the left. When you enable content security

Re: Enhancing Privacy in 2020 attached screenshot

2020-12-18 Thread Ashlen
On 20/12/16 22:55, pipus wrote: > haha Stuart. > Always there to make a low IQ entrance :) Ever hear of Dunning-Kruger, pipus? https://lsa.umich.edu/psych/news-events/all-news/faculty-news/the-dunning-kruger-effect-shows-why-some-people-think-they-re-gr.html I hope you can look inward and find pe