Re: Laptop Recommendations?

Thinkpads are used often by folks wanting to get that penguin OS going also. Brian On 11/10/2016 4:34 PM, STeve Andre' wrote: On 11/10/16 00:47, Nathan Koch wrote: Greetings Fair BSD Wizards, I am new to the lists. I am currently shopping for a new Xmas present for myself and am lo

Re: bootable OpenBSD USB stick from windows?

On 2/11/2013 5:51 PM, Heptas Torres wrote: > Hello > I have an old laptop with no CD-ROM but can boot from USB. Given that > I only have access to a windows machine to burn an iso image, do you > know of an easy way (e.g. some windows programa) to create a bootable > OpenBSD USB stick which I can t

Two minor problems with install under -current

selection of options at the beginning and offers some nice default options 3) appears to run faster Anyway, keep up the great work. Thanks, Brian

building a new openBSD box

ion uses Nvidia chipsets, which is this board: http://www.newegg.com/Product/Product.aspx?Item=N82E16813151062 Any suggestions? I don't want to build a machine that is unlikely to be supported. Thanks, Brian

Re: amd64/grub package?

--- On Sat, 5/30/09, Donald Allen wrote: > You have to install a second-stage bootloader, so why not > use one > bootloader to do the whole job rather than two? That's > what. > So port is over. No one is stopping you.

Re: RAIDFrame woes with -current. Seeking debug advice

drive. -Brian Josh Grosse wrote: [snip] > The symptom: hang after normal kernel message: "Kernelized RAIDframe Activated" [snip] > atapiscsi0 at pciide0 channel 1 drive 0 > scsibus0 at atapiscsi0: 2 targets > cd0 at scsibus0 targ 0 lun 0: SCSI0 5/cdrom removable [snip

Re: Help! I'm having Linux foisted on me! (PF queuing woes)

out your egress when an IPsec SA is removed/expires before the state is removed/expires (think isakmpd and the various reasons an SA can disappear). Of course, if I am wrong and if-bound shouldn't be used in this case, ipsec.conf(5) should be updated appropriately. -Brian [demime 1.01d removed

Re: daap/mdns multicast problems

forwarding (routing) of IPv6 multicast packets Both are disabled by default. If you have already enabled these, then please disregard my message. If not, try: sysctl net.inet.ip.mforwarding=1 net.inet6.ip6.mforwarding=1 -Brian [demime 1.01d removed an attachment of ty

Re: Network Time Synchronization using timed or ntpd or a Combination?

x27;t necessarily understand the risks of running programs as root vice daemons which execute code with proper separation of privileges. -Brian [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

Re: About Xen: maybe a reiterative question but ..

al servers. That is much closer to security than through obscurity. -Brian L. V. Lammert wrote: > At 03:31 PM 10/24/2007 -0600, Theo de Raadt wrote: >> > Certainly there is a small, compount risk increase due to multiple OS >> > images involved, but the OS images must be

Re: About Xen: maybe a reiterative question but ..

L. V. Lammert wrote: > On Wed, 24 Oct 2007, Brian wrote: > >> Hi! >> >> I think you are missing the point about x86 hardware being a mess. Theo >> made an excellent point about the architecture itself having so many >> filthy quirks. If a VM is compromised thr

Re: lookup option in /etc/resolv.conf ignored

Make sure you have restarted Firefox after making changes to /etc/resolv.conf. Specifically, the application-level DNS cache will contain old data if you have not restarted it. This bit me for 3 minutes straight after needing to redirect an address. Karel Kulhavy wrote: > I want to make my OS re

Re: Compliments and Knob Question

. Tech knob discussion, how about a nice boring dictionary answer. 1 a*:* a rounded protuberance *:* lump b*:* a small rounded ornament or handle 2*:* a rounded usually isolated hill or mountain This seems that a knob doesn't have to be useful. Brian

Re: Compliments and Knob Question

ultimate example of software knobbage. Brian

Re: no 4.2-stable package updates??

So why does that "majority" not provide the skills or the money to support that facility? Maybe you should use something else that panders to your appetite. Completely unable to resist a great setup presented above, is the software really free then? Brian

Re: Merging 2 ADSL lines

n the case of mail and web servers? I have seen this with sdsl, here is a link from a UK guy that did it. http://www.automatedhome.co.uk/Internet/ADSL-Bonding-How-To-and-Review.html Brian

k9copy

Anyone in the process of porting over k9copy from the freebsd ports tree? Thanks, Brian Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt

amd64 assembly registers behavior and function calls

C code, it looks like the parameters are written to %rbp, then to the registers per the x86-84 abi, and then the function is called? Is this the preferred way to write function calls? And I would use the same method to save the return value in %rax, right? Than

Suggested PF Setup when using BitTorrent?

Is there any suggested PF setup when using BitTorrent? Right now, the biggest problem I have when using BitTorrent is watchdog timeouts. Thanks, Brian Never miss a thing. Make Yahoo your home page

Re: Suggested PF Setup when using BitTorrent?

my onboard nic card, which doesn't work as well as my sk nic. I'm not sure how to debug the issue. I just started using pf, so my original question still stands. Is there a preferred rule set for pf when using BitT

Re: Suggested PF Setup when using BitTorrent?

--- Stuart Henderson <[EMAIL PROTECTED]> wrote: > On 2008/01/06 17:50, Brian wrote: > > --- Leonardo Rodrigues <[EMAIL PROTECTED]> wrote: > > > > > Maybe those watchdog timeouts have nothing to do with bittorrent, and > > > are probably more related

Re: Suggested PF Setup when using BitTorrent?

--- Max Hayden Chiz <[EMAIL PROTECTED]> wrote: > Perhaps this problem is specific to my configuration (or specific to > DOCSIS cable modems). But if it makes Brian (or someone else's > problem) go away, then it is likely that this problem is not unique. > > --MHC &

Re: Why do clients running BitTorrent make my router's latency go through the roof?

re enabling pf, and I haven't seen them lately, but I haven't been aggressively downloading with bittorrent either. I hope to test this weekend once I figure out what I need to do to provide meaningful results. Thanks, Brian ___

Using Altq?

ueue method to use: cbq, priq, or hfsc? Basically, I want to attempt to avoid getting watchdog timeouts on my bittorrent connections. Thanks, Brian Be a better friend, newshound, and know-it-all

Re: anyone have a port of cacti?

Richard Daemon wrote: anyone have a port of cacti? www.cacti.net Heres a link to the freebsd port if you want to have a hack at it.. http://www.freebsd.org/cgi/cvsweb.cgi/ports/net-mgmt/cacti/ Brian

Re: Using Altq?

--- Chris Kuethe <[EMAIL PROTECTED]> wrote: > > Get a better NIC or a NIC with a better driver? I've used re(4), > nfe(4), sis(4), fxp(4), and em(4) with bittorrent all without watchdog > timeouts. And when I got the re(4), it was less than $20 for something > that could do better than 100Mbps. T

Re: running mail server at home

o start with. ...lori Gewt an ISP that doesnt block it and youre fine, Ive been using speakeasy for years, theyre pricey but they stay out of the way. Brian

Re: running mail server at home

to have worked ok for me. Smarthosting is not for me, I'll deliver direct.. Brian

x.org pci stuff

Is work being done on this for openBSD: http://www.x.org/wiki/PciReworkProposal I ask because I do not see openBSD listed. Thanks, Brian Be a better friend, newshound, and know-it-all with Yahoo

Re: take threads off the table

h is not one of those use cases where > threading is important. Please listen to this guy. He does a lot of great stuff, and you're taking his time away from creating more great stuff. Brian Be a

Re: rtorrent + OpenBSD = freeze

system freezes. Yesterday, I switched over the net/ktorrent since it supports encryption, which I am finding I need for some very low seeded torrents, where all the seeds are running encryption. I have not experienced any system freezes with net/ktorrent, and I would definitely recommend it. Brian No

Re: rtorrent + OpenBSD = freeze

--- Pierre Riteau <[EMAIL PROTECTED]> wrote: > I have seen this freeze with both xl(4) and nfe(4). Maybe it's time folks start posting their dmesg. Brian Looking for last minute shopping

OpenBSD Wireless Router and Nintendo DS

ly appreciate it. I've posted this problem on two different forums and still haven't been able to solve it. Thanks! -Brian Figured I'd attach my dmesg for good measure... OpenBSD 4.0 (GENERIC) #1107: Sat Sep 16 19:15:58 MDT 2006 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/com

Problem with a URL

I am trying to open up this url with firefox on openbsd -current, but there is a problem with accessing the site. Is there a problem with doing the lookups with url's that start with dashes: http://-amaya-.deviantart.com/ Thanks,

xenocara

I am updating my system, and I have just read about xenocara in -current. Do I just build this over my pre-existing X.org? I wasn't quite sure from the README. And is there anything special I need to do with ports and packages? Thanks.

Re: where port installs have theire packages placed

There may be some things I have missed so take it for what it's worth. -Brian [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

sk driver

I thought the issue with the watchdog timing out was fixed. I was seeding a torrent file this morning, so when I came home and turned it off, I received these errors: sk0: watchdog timeout sk0: cannot stop transfer of Tx descriptors I am running a kernel compiled as of last Saturday. Here's my

drm at vga1?

What is this? drm at vga1 unsupported I cannot find a man page for it. Thanks. Here's my complete dmesg: OpenBSD 4.4-current (GENERIC) #1: Sun Aug 10 17:55:52 MST 2008 @:/usr/src/sys/arch/amd64/compile/GENERIC real mem = 1059348480 (1010MB) avail mem = 1028325376 (980MB) mainbus0 at root

Story Behind 4.4 T-Shirt?

I'm just curious what the story is behind the new t-shirt coming out. I thought Sun was becoming more open. Thanks, Brian

eSATA support?

I'm thinking about picking up an eSATA pci card and backing up my data to an external hd over eSATA using rsync. Is this supported? Thanks, Brian

CARP multicast and ADSL bridge

asking before shutting up and hacking together a possibly stupid VLAN tagging solution in ip_carp. Thanks for your patience. -Brian Marshall

Re: CARP multicast and ADSL bridge

Thank you all for the kind advice. Carppeer is exactly what I need. I'll implement it as soon as I have an opportunity to upgrade to 4.4, since it doesn't seem to be in 4.3. I'll post config once I verify that I have it set up properly. -Brian Marshall

Re: Modern operating systems are flawed by design, including OpenBSD.

--- On Thu, 10/23/08, mak maxie <[EMAIL PROTECTED]> wrote: > From: mak maxie <[EMAIL PROTECTED]> > Subject: Modern operating systems are flawed by design, including OpenBSD. > To: misc@openbsd.org > Date: Thursday, October 23, 2008, 3:54 AM > http://www.computerworld.com.au/index.php?id=264209080&

Re: bash for root?

--- On Tue, 12/2/08, Ted Unangst <[EMAIL PROTECTED]> wrote: > > Install bash statically linked. That's all. > > Never make a mistake. That's all. Exactly. I don't get this thread. I mean, I could understand BASH as an option when openBSD was moving off of csh back in the day. But ksh work

Problem Compiling xenocara

I need to maintain the xenocara source both in /usr/src/xenocara and /usr/xenocara? Thanks, Brian Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ

Re: Problem Compiling xenocara

ssed, I think. Thanks. I was skipping the first step. Brian

Re: Vulnerability Note VU#800113 - Multiple DNS implementations vulnerable to cache poisoning

s have lasting value, rather then quick fixes that break a year later. Anybody else remember the nvidia close driver issue that Theo had foreseen years before it happened? Trust these guys. They will deliver. Brian

Re: UPDATE: mozilla-firefox-3.0

I still cannot view a lot of content. And I'm not happy that netflix went with a ms solution for their instant viewing content, which is worse. The whole flash situation just sucks. Brian

Re: BIND and CNAME-ing

But can't you overwrite in cache both the A and NS record to re-direct the whole domain with an answer and authority answer spoofed from the NS server? Isn't this the other poisoning problem that really hasn't been spoken about much? However, then you would need to have a NS to redirect with.

Intel's Open Source Policy Doesn't Make Sense

ain by not being open? I am puzzled. I am not an engineer, so is there something that I am overlooking? Cheers, Brian Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

Intel Firmware and Open Source

extra on an open source friendly company than a non-open source company. Cheers, Brian Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

Thanks (USB umass device)

ver a year ago. Thanks, Brian Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

ifnet (frequency of updates)

vices are blocked (with splnet()) when ifnet is updated or member is deleted from the list. I do not know if it makes sense to block the device while walking the list and copying it in userland. Any suggestions are appreciated. I am new to this, so it's taking a long time. Thanks, Brian Tir

SATA

will just pick up IDE drives. Thanks, Brian __ Discover Yahoo! Find restaurants, movies, travel and more fun for the weekend. Check it out! http://discover.yahoo.com/weekend.html

Re: Theo gave an interview to Forbes Mag. about Linux

pid. The developers here are honest and will tell you when something isn't worth your time. Anyway, cheers for being honest and straight forward. Brian --- "J. Lievisse Adriaanse" <[EMAIL PROTECTED]> wrote: > Theo gave an interview to Forbes Magazine, in which he stated:

Printers?

What do you guys recommend I use for a printer? I currently have an Epson that just doesn't work well with apsfilter. It uses way too much ink and is very slow. I would be looking for laser printer under $300. Any suggestions? Thanks, Brian

Re: Honesty needed...

BSD SMP support is pretty new, see http://www.openbsd.org/faq/faq8.html#SMP. It isn't super mature on FreeBSD either. Brian

[Fwd: Re: spamd and comcast]

In response to the how would it increase cost question, anytime a provider has to deal with more spam it costs more money, additional manpower to process abuse complaints, additional bandwidth, server space etc. Brian

Marc Espie Interview

able to do would be to glob the package I am pulling down. For example, I would love to just write: pkg_add -v ${PKG_PATH}/mozilla-firefox*.tgz Is this possible using the perl modules mentioned above? Thanks, Brian Stay connected, organized, and protected. Take the tour: http://tour.mail

Re: sniffer

-s. [...] Kind regards, Hannah. Yep -s0 is definitely the tool to see data. Brian

(g)as on amd64

-e _start -o test1 test1.o I tried elf2olf -o openbsd test1, but I receive this error: elf2olf: test1: Exec format error. Is there something that I am missing that I need to do on amd64? Thanks, Brian Note: NASM is not an option since it's not available on amd64; there isn't a

Still stuck with this assembly stuff (amd64)

ould be helpful? I have all ready info as, and it's pretty old, but it's still useful. When I type in test1, the program appears to just exit, but nothing is printed to STDOUT. Thanks, Brian Start your day with Yahoo! - make it your home page http://www.yahoo.com/r/hs

Re: Still stuck with this assembly stuff (amd64)

thanks Art for pointing out that the assembly was wrong. That put me on the right track to finding a solution. The recent threads about the notes section just confused me and put me down the wrong track. Thanks, Brian --- STeve Andre' <[EMAIL PROTECTED]> wrote: > > Brian, it

Re: Speed isn't everything, luckily for OpenBSD.

group that will tell you straight out that you are making mistakes. I actually solved my little assembly problem thanks to the approach the developers take here. Brian Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

Re: Text editor

If you install the port vim, it comes with vimtutor. You just type: $ /usr/local/bin/vimtutor And the tutor is pretty good. It helped me out. Brian Start your day with Yahoo! - make it your home page http

Re: 3.8 beta requests

I am not sure if this is related. But when I code assembly to pass a double precision floating point value (%xmm0) to printf, my program will crash without a stack frame. I am fine for passing strings and integers. Here's the simple code: .section .data str: .string "%f\n" test: .floa

Re: openbsd and the money -solutions

--- Deanna Phillips <[EMAIL PROTECTED]> wrote: > That said, I think a wall of shame page on the OpenSSH site > might be a good idea: one listing all those big companies > mentioned that have never donated a dime. Negative PR might > result in more donations than managers receiving the minor > an

Re: openbsd and the money -solutions

f course, the downside is that some of the corporations might withhold documentation needed for driver development unless the license is lifted. Cheers, Brian Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

odd dmesg

I just did a fresh install of 3.9-current. And part of the dmesg is coming across oddly. I am not sure what else to say about it. It's the iic0 and iic1. Check it out: OpenBSD 3.9-current (GENERIC) #670: Sat Apr 1 23:34:55 MST 2006 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC

Re: odd dmesg

i2c, how would I debug it? And I still am not sure how I would add it to the kernel since I have all ways used GENERIC. I guess I can dig through the config man pages. I have never written a driver, so I am clueless. I guess I'll keep digging, but thanks for the help. Cheers, Bria

Re: Moving a file mount point

hints / > advice would be greatly appreciated! > > Thanks > Karl Does this help: http://www.openbsd.org/faq/faq14.html#NewDisk I am not sure what you mean by move. Move where? I assume you meant to a new drive, so the FAQ above should help. Brian Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

Re: When would you NOT use OpenBSD?

. When it comes time for them to help you out, you get screwed. Brian Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

FYI: sch5017

It's looking good. Thanks Roman for letting me help out. Only two problems persist: 1) we get the list twice due to the nviic detecting two iic's 2) register 0x20 is +5 VTR, which differs from the adt chip Here are the results as of pulling down the CVS this weekend: hw.sensors.0=adt0, +2.5Vin

inet6(4)

both. Besides searching securityfocus, is there another site I should be reading for IPv6? Is KAME still relevant to the openBSD implementation? Cheers, Brian Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

Re: OPENBSD_3_9 won't build

--- [EMAIL PROTECTED] wrote: > Hello evrybody. > > I installed box booting from PXE and then with lastest snapshot. > After that I used: > > # export [EMAIL PROTECTED]:/cvs > # cd /usr; cvs checkout -P -rOPENBSD_3_9 src This is stable, not current. Y

priv sep in syslogd

Pv4 only stuff that I need to clean up. And I need to clean up the code I did write. And I need to verify that the current pipe stuff can be removed as well since the code looks to only use the socketpairs. Finally, I need to test it. Thanks, brian Tired of spam? Yahoo! Mail has the best s

Red Black Trees

ee's. I assume that since RB_REMOVE will provide me with a pointer to the removed element, that all I need to do is free it. Also, is the above the most efficient way to find and remove an element from a red black tree? Cheers, Brian Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

kvm symbols

there is man page or header file that lists the kernel symbols and what they represent? sysctl has very good documentation and makes finding sysctl symbols easy. Thanks, Brian

Re: 3.6 caching resolver

Rod.. Whitworth wrote: On Thu, 5 May 2005 10:31:56 -0700 (PDT), Brian W. wrote: Anyone else notice this performing slowly. I did a tcpdump and it appears localhost gets queried 2-3 times before a packet goes out. I see quite a few delays and some failures to resolve that work with one

stat(1) first appeared in openBSD 3.8?

I think the HISTORY section is wrong. But I do not know what it supposed to read. http://www.openbsd.org/cgi-bin/man.cgi?query=stat&apropos=0&sektion=0&manpath=OpenBSD+Current&arch=i386&format=html Cheers, Brian Take Yahoo! Mail with you! Check email on your

[Fwd: Re: IMAP servers]

Is the Thunderbird problem you refer to here something like it taking a couple minutes after opening the client before you can actually see new messages? Brian Received: from shear.ucar.edu (shear.ucar.edu [192.43.244.163]) by entwistle.sonicboom.org (8.13.3/8.13.1) with ESMTP id

Re: Azalia problem: no sound

Azalia codec problem as well with my new ATI card: azalia0 at pci1 dev 0 function 1 "ATI Radeon HD 4000 HD Audio" rev 0x00: apic 8 int 17 (irq 10) azalia0: no supported codecs azalia0: initialization failure, detaching full dmesg below: OpenBSD 4.7-beta (GENERIC.MP) #78: Wed Jan 27 19:29:21 MST

FOSDEM 2019 - Distributions Devroom Call for Participation

ts.fosdem.org (https://lists.fosdem.org/listinfo/distributions-devroom) Cheers! Brian Exelbierd (twitter: @bexelbie) and Brian Stinson (twitter: @bstinsonmhk) for and on behalf of The Distributions Devroom Program Committee

Re: OpenBSD VPS hoster with unlimited/limited nonfiltered traffic

Try setting sysctl kern.timecounter.hardware=tsc on the OpenBSD vmm guest and run ntpd. I have not tried without ntpd but I know without using tsc, time skews too much. > On Apr 19, 2020, at 10:25 AM, Martin wrote: > > Thanks all of you guys for suggestions. > > Just one question to OpenBS

Re: multihomed routing issue

. I run a lot of OpenBSD in Azure. -Brian > On Apr 26, 2020, at 12:03 PM, 4642 <4...@protonmail.com> wrote: > > Hi, I have created a OpenBSD 6.6 VM in the Azures cloud that I plan to use > as a Firewall, I had planned on using carp but I can't get it working in > Azu

Re: IPv4 traffic over IPv6 tunnel approach

>From your description, you want to pass IPv4 inside a tunnel that has an outer >protocol of IPv6. Your resulting hostname.gif0 looks like the exact opposite >of your description (IPv6 inside the tunnel with IPv4 outer). Clarify what you need please. Provide your existing hostname.if files for

Re: OpenBSD insecurity rumors from isopenbsdsecu.re

At risk of responding without having read through the entire website, it seems to mostly be about OpenBSD's exploit mitigations, and nothing else. But OpenBSD does a lot of other things well, like doing lots of code reviews, having a culture of writing code with an eye toward security in the fir

Re: OpenBSD insecurity rumors from isopenbsdsecu.re

If any widely-used open source software had government backdoors in it, nobody in the know would be telling folks about it in random IRC chat rooms. BW On Mon, 11 May 2020 18:13:35 -0700 wrote I was told on the chat that Linux GNU software has hardly visible NSA backdoors

Re: Setting permanent neighbor entry

Do it in hostname.if. You’ll win the race. > On May 26, 2020, at 2:14 PM, Demi M. Obenour wrote: > > On 2020-05-26 09:34, Kanto Andria wrote: >> Hello, >> man ndp is probably another solution >> >>On Tuesday, May 26, 2020, 9:17:25 a.m. EDT, Tommy Nevtelen >> wrote: >> >>> On 26/05/20

Re: About pf max-src-conn-rate

What do you do with table in other rules? If you’re doing nothing, you need to do something like block additional connections, or adjust the pass rule to include from ! Run: pfctl -t smtp -T show Does it show the offending IP? If so, the rule worked as you defined it. > On May 27, 2020,

Re: About pf max-src-conn-rate

Keep in mind operations using pfctl such as reloading rule set or table from file, any IP’s caught in the smtp table by the max-src-conn-rate will be flushed depending on your command line. > On May 27, 2020, at 4:29 PM, Walter Alejandro Iglesias > wrote: > > Hello Brian, >

Re: Restore pf tables metadata after a reboot

No reason to expire ssh brute force. They will never stop. Manual flush if someone accidentally locked themselves out. Just my two cents :) > On Jun 4, 2020, at 12:48 AM, Anatoli wrote: > >  >> >> Even then it seems that some of them turn up again pretty much >> instantly after expiry. > >

Re: Relayd with TLS and non-TLS backends - bug

s varying firewall and NAT designs. Pimp out the configs of your networking groups’ routers to de-encapsulate and decrypt the traffic for even more performance and compatibility. Anything is possible as a front-end relay server with OpenBSD. Why? Well for one, you save on many rounds of TLS negotiation. Upcoming performance enhancements to the networking stack will only help scale this method of relaying to more and more acceptable levels compared to non-encrypted networking. My subjective net gain is simplicity, security, performance, and flexibility. -Brian

Re: Relayd with TLS and non-TLS backends - bug

> On Jul 3, 2020, at 9:46 PM, Daniel Jakots wrote: > > On Fri, 3 Jul 2020 20:25:12 -0400, Brian Brombacher > wrote: > >> My subjective net gain is simplicity, security, performance, and >> flexibility. > > I don't think adding ipsec (or a mesh vpn

Re: relayd multiple listen on same redirect

o since I concentrated on TCP relays, I don’t know how effective these directives would be for redirects. My end config has separate relays per TCP service except passive FTP relaying. Also, make sure your pf.conf has the right anchor. Only mentioning it because your original email skips this detail. I doubt this would be missing if you have a working setup already, so ignore if so. Cheers, Brian

Re: strlcpy version speed tests?

made over time for the various arch’s, if such an approach is desirable by the project. You can pull a well-optimized version based on your code, for your arch, and then slim it down a bunch. Cheers, Brian [Not a project developer. Just an observer.]

Re: Relayd with TLS and non-TLS backends - bug

port 80 check http "/webservice.asmx" code 405 > forward with tls to port 443 check https > "/Client/SupportedBrowsers.html" host "myhost.example.com" code 200 > } > EOF > Hi Toyam, Split http and https into two separate relay stanzas. The “with tls” will be needed on your https relay and not the http backhaul. I believe this gets what you want. I do not think this is a bug, but perhaps a design choice by the developers. Cheers, Brian

Re: Relayd with TLS and non-TLS backends - bug

> On Jul 3, 2020, at 7:17 PM, Henry Bonath wrote: > > Daniel, > > Thanks for taking the time to test this out. > I just reloaded a test machine from scratch with -current and > installed the HAProxy 2.0.15-4f39279 package. > I loaded a very basic config file, and am also seeing the same exact

Re: ls -R bug?

Hmm... /bin/ls, a utility that has existed since 1960’s. This is not a bug. https://en.m.wikipedia.org/wiki/Ls > On Jul 4, 2020, at 3:02 PM, Richard Ipsum wrote: > > Hi, > > Output of ls -R between OpenBSD and GNU coreutils seems to differ, > OpenBSD ls -R will apparently list "hidden" dire

Re: ls -R bug?

> On Jul 4, 2020, at 3:38 PM, Ottavio Caruso > wrote: > > On Sat, 4 Jul 2020 at 19:59, Richard Ipsum wrote: >> >> Hi, >> >> Output of ls -R between OpenBSD and GNU coreutils seems to differ, >> OpenBSD ls -R will apparently list "hidden" directories like .git, >> whereas GNU coreutils wil

  1   2   3   4   5   6   7   8   9   >