Re: OpenVPN listening on dual-stack socket

2025-04-04 Thread Stuart Henderson
On 2025-04-04, Stuart Henderson wrote: > > - Java is a total pain - it relies on inet6 sockets working with v4+v6 > to be able to use dual-stack at all - otherwise you have to set a flag > when you run a program to tell the jdk whether it should be v4-only or > v6-only. (and that is for client-si

Re: OpenVPN listening on dual-stack socket

2025-04-04 Thread Stuart Henderson
On 2025-04-04, David Gwynne wrote: > On Fri, Apr 04, 2025 at 07:26:34AM +1000, Stuart Longland VK4MSL wrote: >> >> I've kludged around this in L2 configurations by running two OpenVPN daemons >> on different `tap` interfaces and bridging them (along with the Ethernet >> they connect to), but I ca

Re: OpenVPN listening on dual-stack socket

2025-04-04 Thread Stefan Sperling
On Fri, Apr 04, 2025 at 02:47:42PM +1000, Stuart Longland VK4MSL wrote: > On 4/4/25 14:18, David Gwynne wrote: > > so linux has a feature where it will map ipv4 connections into the ipv4 > > mapped address space in ipv6 and let you handle them all with a single > > ipv6 listener. have a look for th

Re: Ethernet interface set to the wrong group

2025-04-04 Thread otto.cooper
On Wednesday, April 2nd, 2025 at 5:50 PM, Claudio Jeker wrote: > As long as the default route points to ix0 the egress will be in ix0. This is what I want to understand. Physically, the default route is the gateway. I am in the firewall, trying to configure a specific interface, to point at

Re: Ethernet interface set to the wrong group

2025-04-04 Thread Zé Loff
On Wed, Apr 02, 2025 at 10:44:03AM +, otto.cooper wrote: > Reading hostname.if(5) and ifconfig(8) again, I understand that commands in > hostname.if are executed by ifconfig. Of interest here is the ifconfig > command "group"; hostname.if(8) does not say a word about this command, but > it s

openbsd qemu host on debian trixie

2025-04-04 Thread Marc Chantreux
hello people, I'm trying to setup an openBSD VM on my laptop so I can ensure my code is portable and use the pledges. So far, why I have is a script whom rises no error but doesn't boot and put the ventilator fans on fire. https://git.unistra.fr/mc/dot/-/blob/main/van/obsd I started to read the

Re: Left with an unusable motherboard after running fw_update and then installing intel-drm

2025-04-04 Thread obsdml
> after which was the last time that machine ever POSTed. At the > time I wrote it off as corrupting EFI somehow but I'm not so sure anymore. UEFI is stored on disk, it can be wiped. Thats not your POST issue though. maybe time for a post code reader? alternatively, wipe the cmos and try aga

Re: Ethernet interface set to the wrong group

2025-04-04 Thread Olaf Schreck
> [Apologies to the non-USA readers for the pedantic text.] Not at all. Nice contrast to much of the bla-bla recently. Did you set /etc/mygate correctly? AFAIK egress is determined by the default route. > This is the result, in the order given by ifconfig: [...] > OpenBSD puts ix0 ahead of em0

OpenBSD openssl s_client

2025-04-04 Thread Diana Eichert
I was doing some testing from inside a rdomain environment with multiple ip addresses. I have an ipsec tunnel terminated inside the domain. Using "route -Txx exec" I can use nc to connect to a remote system via the ipsec tunnel, because I can bind to an address within the tunnel definition. I can

pf.conf OpenBSD 7.5 Server VPN.

2025-04-04 Thread latinfo
Hello misc I have a problem with ikev2 pf rules, could someone help please?: Server pf recommend at openbsd web: pass in log on $ext_if proto udp from 198.51.100.1 to 192.0.2.1 port {isakmp, ipsec-nat-t} tag IKED pass in log on $ext_if proto esp from 198.51.100.1 to 192.0.2.1 tag IKED Clients: pa

Re: Ethernet interface set to the wrong group

2025-04-04 Thread Zé Loff
On Tue, Apr 01, 2025 at 07:09:14AM +, otto.cooper wrote: > > The gateway is on 192.168.1.1, the lan is on 192.168.0/24. It is just the > > way it is. > > As I said, the above line contains a typing error: > 192.168.0/24 is the typing error, > 192.168.1.0/24 is the correct data. Then all I

Re: Ethernet interface set to the wrong group

2025-04-04 Thread otto.cooper
On Monday, March 31st, 2025 at 5:21 PM, Zé Loff wrote: > Any particular reason for having two different interfaces on the same > subnet, with the same priority? Can you communicate with machines > connected to the LAN switch with this setup? The gateway is on 192.168.1.1, the lan is on 192.168

sensorsd and UPS monitoring - no event triggered when ACPresent transitions from On to Off

2025-04-04 Thread Steve Williams
Hi, I was originally investigating apcupsd to monitor my UPS. However, it's not working "out of the box", requiring a custom kernel / or disabling my usb keyboard (which I use). So I thought I would investigate sensorsd framework to see what it could do. It's working totally fine with the h

Re: Syntax error for pf.conf loading during restart.

2025-04-04 Thread latinfo
> Hello, > > Openbsd 7.6 upon restart, pf rules fail to load with error (no IP address > found for em0 /etc/pf.conf:26: could not parse host specification). > However, performing "pfctl -nf /etc/pf.conf && pfctl -vf /etc/pf.conf" > manually after logging in gets the rules loaded successfully. Also

Re: openbsd qemu host on debian trixie

2025-04-04 Thread Dave Voutila
Marc Chantreux writes: > hello people, > > I'm trying to setup an openBSD VM on my laptop so I can > ensure my code is portable and use the pledges. > > So far, why I have is a script whom rises no error but > doesn't boot and put the ventilator fans on fire. It's probably busy polling at the bo

Re: Request for a gentle message...

2025-04-04 Thread Emiel Kollof
Dan schreef op 2025-03-25 09:56: Hello, Today I got "equipped" with the following request. As we have to live with the kernel relink till some minutes after the boot process completed, and well after the login eventually.. Is it possible to have a gentle message almost to root console user to l

ftp2.eu.openbsd.org still broken

2025-04-04 Thread Jan Stary
There is something amiss with this mirror; e.g. https://ftp2.eu.openbsd.org/pub/OpenBSD//snapshots/macppc/ contains _some_ sets from 2025-02-07, a SHA256 from 2025-03-03, and has no base tarball (but SHA256 does list it). Jan

Re: /etc/myname vs /etc/hostname -- Who Is Right

2025-04-04 Thread Jay F. Shachter
Centuries ago, Nostradamus predicted that Lloyd would write on Fri Mar 28 17:18:00 2025: > > It appears the use of /etc/hostname in the Linux world dates back to > Debian 0.93 R5 or R6 which were released in 1995. > > This was predated by the use of /etc/HOSTNAME in Debian 0.91 > released in

Re: TLS Error for https://www.openbsdfoundation.org

2025-04-04 Thread Dan
Actually the problem seems solved. Dan -- Blog: http://bsd.gaoxio.com - Repo: https://code.5mode.com Please reply to the mailing-list, leveraging technical stuff. Apr 1, 2025 23:39:11 Kirill A. Korinsky : > On Tue, 01 Apr 2025 17:17:06 +0200, > Dan wrote: >> >> It could be that badwolf b

Re: openbsd qemu host on debian trixie

2025-04-04 Thread Philipp Buehler
Am 04.04.2025 17:25 schrieb Marc Chantreux: https://git.unistra.fr/mc/dot/-/blob/main/van/obsd reinventing wheels? try libvirt https://r0tty.org/blog/headless-kvm-openbsd-install/ (could still check back with a then-running qemu process which flags have been activated) HTH, -- pb

Re: Ethernet interface set to the wrong group

2025-04-04 Thread otto.cooper
> If you are trying to setup a firewall, Peter Hansteen's "Book of PF" will > surely help. It is not an absolute requirement, and you can wing it > just by reading the man pages and asking around for help, but it will > surely save you some time. The book is on my desk.