tinc on openBSD?

2017-04-26 Thread Harald Dunkel
Hi folks, AFAICS tinc is included in the packages for 6.1, but surely that doesn't mean its safe to use without looking. Are there security concerns against running tinc on an OpenBSD gateway as an alternative to IPsec and openvpn in a +50 road warriors setup? What is your impression of this tool

net.inet.tcp.ecn=1 on a gateway?

2017-06-01 Thread Harald Dunkel
Hi folks, for dummies, what is the purpose of net.inet.tcp.ecn=0? Should I set it to 1 on a gateway? Is there some way to support ecn for ip level? I am running 6.1 stable (amd64) using the unmodified GENERIC.MP. Every helpful comment or recommendation is highly appreciated Harri

Re: inet6 packet filter question: link local address vs antispoof

2017-06-11 Thread Harald Dunkel
PS #1: Outgoing traffic to a link-local address initiated by the gateway is not corrupted. PS #2: It seems that OpenBSD 6.0 doesn't show this problem. Regards Harri

inet6 packet filter question: link local address vs antispoof

2017-06-11 Thread Harald Dunkel
Hi folks, pf.conf on my gateway (6.1) says bash-4.4# pfctl -sr | egrep -i icmp\|block block return log all : : pass quick inet proto icmp all keep state (if-bound) pass quick inet6 proto ipv6-icmp all keep state (if-bound) Problem is, a ping6 to the gateway's link local address is not answered.

openvpn multihome on OpenBSD?

2017-06-17 Thread Harald Dunkel
Hi folks, AFAICS the openvpn 2.4.2 man page recommends a "multihome" feature for dual stack setups, but I can't make it work on OpenBSD (the openvpn server) in this case. The logfile on the client shows Sat Jun 17 15:13:40 2017 OpenVPN 2.4.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOL

Re: openvpn multihome on OpenBSD?

2017-06-18 Thread Harald Dunkel
Hi Stuart, On 06/17/17 17:09, Stuart Henderson wrote: > > It's trying to use a single socket for v4 and v6. That is never going > to work on OpenBSD. > > Try "bind ipv6only" and see if that helps. > Currently I have 2 openvpn servers listening on either IPv4 or IPv6, each with its own address

bug tracking system for OpenBSD

2017-06-19 Thread Harald Dunkel
Hi folks, would it be possible to establish a real bug tracking system for OpenBSD? Something with bug owner, severity, attachments, assignee, and (very important) some reliable response time and a databse to search for known problems? Currently I have the impression that you have to be very luck

Re: inet6 packet filter question: link local address vs antispoof

2017-06-20 Thread Harald Dunkel
Hi Martin, the host I had used for testing is off, so I had to switch. After disabling the packet filter I see: # tcpdump -i re0 -env icmp6 tcpdump: listening on re0, link-type EN10MB 20:58:08.865529 20:cf:30:e8:0d:58 52:54:00:2e:f3:25 86dd 118: fe80::22cf:30ff:fee8:d58 > fe80::5054:ff:fe2e:f325

newsyslog refused to work

2017-07-14 Thread Harald Dunkel
Hi folks, Apparently newsyslog refuses to rotate any file, if there is a single bad line in newsyslog.conf, e.g. newsyslog: /etc/newsyslog.conf:7: unknown user: uucp I would suggest to ignore the bad line, but rotate the other log files as usual. Regards Harri

packet filter: table of tables ?

2018-05-13 Thread Harald Dunkel
Hi folks, how can I combine tables into large tables, instead of using inefficient variables? AFAIU I can modify tables using the pfctl command line, but something like this in pf.conf would be nice table const persist { 172.12.127.0/24 172.12.124.0/24 172.12.120.0/24 2001:db8:2:

netstat: IPv6 addresses are cut off

2018-05-14 Thread Harald Dunkel
Hi folks, netstat cuts off the IPv6 addresses. Sample: # netstat -f inet6 -ln | cat Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address(state) tcp6 0 0 2001:db8:30:7e::.25*.*LISTEN tcp6 0

6.3 just died (not for the first time)

2018-05-15 Thread Harald Dunkel
Hi folks, 6.3 just died. Last words: login: kernel: protection fault trap, code=0 Stopped at export_sa+0x5c: movl0(%rcx),%ecx ddb{0}> show panic the kernel did not panic ddb{0}> trace export_sa(10,800033445e70) at export_sa+0x5c pfkeyv2_expire(813d4c00,813d4c00) at p

Re: 6.3 just died (not for the first time)

2018-05-22 Thread Harald Dunkel
Hi Peter, please check the threads on the b...@openbsd.org mailing list. The patch posted by Martin Pieuchot seemst to help. Its running on my hosts for 5 days without any hiccup. Hope this helps Harri

net.inet.ip6.forwarding=1 ?

2020-05-19 Thread Harald Dunkel
Hi folks, congrats to the new release. Question about https://www.openbsd.org/faq/upgrade67.html: Shouldn't it be net.inet.ip.forwarding=1 net.inet6.ip6.forwarding=1 Thats what I found in my sysctl.conf (before upgrade). Regards Harri

spamd vs IPv6

2020-07-01 Thread Harald Dunkel
Hi folks, spamd(8) still mentions 127.0.0.1, but no indication of IPv6 support. Looking on Google for "openbsd spamd ipv6" gives me some entries of 2015 and 2016, but no up-to-date information. Please excuse if I am too blind to see. I am a big fan of spamd, but I wonder is spamd in a dead-end w

sasyncd questions about shared secret

2020-10-14 Thread Harald Dunkel
Hi folks, question about sasyncd, because the man page doesn't tell: (Please excuse if I am too blind to see.) Do all sasync daemons on all peers have to share the same secret, or is it just the sasync daemons on the same carp interface? Where would I have to look for error messages indicating

Re: Router advertisements for dynamic IPv6 prefix

2020-10-15 Thread Harald Dunkel
On 10/14/20 10:18 AM, Stuart Henderson wrote: On 2020-10-11, Henrik Friedrichsen wrote: Hey, my ISP provides connectivity via PPPoE. An IPv6 prefix is handed out via DHCPv6 PD, which my OpenBSD gateway passes on to clients with the help of router advertisements using rad. This works fine unti

Inphi CS4223 for 4x 10GbE SFP+

2020-10-19 Thread Harald Dunkel
Hi folks, I am about to order 2 network appliances, providing an "Inphi CS4223 for 4x 10GbE SFP+". Does this ring a bell? Is this already supported by 6.8? Other technical specs can be found on https://www.ibase.com.tw/english/ProductDetail/NetworkAppliance/FWA8506 BTW, congratulations to the

Re: Inphi CS4223 for 4x 10GbE SFP+

2020-10-19 Thread Harald Dunkel
On 10/19/20 4:40 PM, Stuart Henderson wrote: I can't say for sure but I think there's a high chance that the 10G will work, and at least some of the 1G will work, but you might run into problems with the 1G "bypass" ports. dmesg would be of interest :) Of course. The host are already on the

Re: Inphi CS4223 for 4x 10GbE SFP+

2020-10-19 Thread Harald Dunkel
On 10/19/20 4:36 PM, Stuart Henderson wrote: On 2020-10-19, Tom Smyth wrote: Hi Harald, check the Atom processor and make sure that it is not one of those ones that fail after a while (some electrical issue) ... It isn't. Anyway, some more precise information about the affected models woul

Re: Inphi CS4223 for 4x 10GbE SFP+

2020-10-20 Thread Harald Dunkel
On 10/19/20 9:46 PM, Stuart Henderson wrote: On 2020-10-19, Harald Dunkel wrote: What would these bypass problems look like? Hopefully the bypass feature can be turned off/ignored. If there are problems then possibly 2 of the ports either won't work or will be connected directly to 2 o

Re: Inphi CS4223 for 4x 10GbE SFP+

2020-10-21 Thread Harald Dunkel
On 10/19/20 4:40 PM, Stuart Henderson wrote: On 2020-10-19, Harald Dunkel wrote: Hi folks, I am about to order 2 network appliances, providing an "Inphi CS4223 for 4x 10GbE SFP+". dmesg would be of interest :) See attachment. Product web site: https://www.ibase.com.

Re: Inphi CS4223 for 4x 10GbE SFP+

2020-10-23 Thread Harald Dunkel
Hi folks, below you can find the summary of "openssl speed" on the network appliance. Speed is not amazing, but AFAIU "openssl speed" is single-threaded. The CPU has 8 cores (no hyperthreading). Assuming IPsec encryption/decryption is running in kernel space, I wonder if the OpenBSD kernel can m

sysupgrade --download ?

2020-10-23 Thread Harald Dunkel
Hi folks, I stumbled over a bad mirror for sysupgrade. Would it be possibe to add an option "-d" to sysupgrade, to just download and verify the required files? A subsequent call without "-d" should verify the signatures in the download directory again and proceed. I would like to make sure down

Re: sysupgrade --download ?

2020-10-23 Thread Harald Dunkel
Hi Theo, sorry, I missed that. I have associated "-n" with dry-run mode. Thanx for the hint Harri

sysupgrade (Was: Re: Kernel crash in OpenBSD 6.5)

2019-08-01 Thread Harald Dunkel
Hi folks, On 7/30/19 3:08 PM, Hrvoje Popovski wrote: try to update both boxes to latest snapshot at least because in snapshot you have excellent tool called sysupgrade ... you will love it :) with this tool you can upgrade os to latest snapshot without any problem over ssh :) This is cool.

Re: sysupgrade (Was: Re: Kernel crash in OpenBSD 6.5)

2019-08-01 Thread Harald Dunkel
On 8/1/19 2:33 PM, Maurice McCarthy wrote: In the past it was not uncommon for non-X programs in base to have dependencies in Xenocara. Are you certain that this is no longer so? Yup

5.8 freezes on Shuttle DS87, anybody else?

2015-10-29 Thread Harald Dunkel
Hi folks, I had several system freezes of our 2 Shuttle DS87 hosts running 5.8. Sometimes the host is up for a week without problems, but I have also seen 3 freezes on one day. The serial console doesn't give a hint about what goes wrong. I have built 5.8 with -g now to create a crash dump for a

Re: 5.8 freezes on Shuttle DS87, anybody else?

2015-11-02 Thread Harald Dunkel
Hi Stuart, On 10/29/15 10:06, Stuart Henderson wrote: > > You'll need ddb.console=1 in sysctl.conf and reboot if you don't have > it already (it needs changing before securelevel is set). Check: diff --git a/sysctl.conf b/sysctl.conf index 0722eac..ff5f0d4 100644 --- a/sysctl.conf +++ b/sysctl

Re: 5.8 freezes on Shuttle DS87, anybody else?

2015-11-02 Thread Harald Dunkel
PS: Would you recommend any special options or flags for GENERIC.DEBUG, besides makeoptionsDEBUG="-g" ? Regards Harri

Re: 5.8 freezes on Shuttle DS87, anybody else?

2015-11-11 Thread Harald Dunkel
Hi folks, below you can find the trace and ps for the frozen system, as well as the output of dmesg. Hope this helps. Please mail if I can help to track down this problem. Many thanx Harri - OpenBSD/amd64 (redgate.red.aixigo.de) (t

Re: 5.8 freezes on Shuttle DS87, anybody else?

2015-11-16 Thread Harald Dunkel
On 11/12/2015 10:22 AM, Stuart Henderson wrote: > On 2015-11-11, Harald Dunkel wrote: >> Hi folks, >> >> below you can find the trace and ps for the frozen system, >> as well as the output of dmesg. >> >> Hope this helps. Please mail if I can help to tra

Re: 5.8 freezes on Shuttle DS87, anybody else?

2015-11-23 Thread Harald Dunkel
On 11/16/2015 04:28 PM, Harald Dunkel wrote: > > See attachment. Hope this helps. > > Regards > Harri > Obviously attachments are not working. Here you go. Hope this helps Harri - login: OpenBSD/amd64 (red

Re: 5.8 freezes on Shuttle DS87, anybody else?

2015-12-01 Thread Harald Dunkel
I migrated this openBSD setup to a 5 years old network appliance. Its running for more than a week without problems. This means I don't have a test setup to chase the problem anymore. Regards Harri

ftp-proxy man page out of date?

2016-01-04 Thread Harald Dunkel
Hi folks, Would it be possible to update ftp-proxy(8) wrt "divert-to"? I had the impression that rdr-to is out of date in this context; see http://www.openbsd.org/faq/upgrade50.html. Thanx very much. Best season's greetings Harri

Re: ftp-proxy man page out of date?

2016-01-18 Thread Harald Dunkel
On 01/05/2016 04:35 PM, Sonic wrote: > > Divert-to is the proper way to send the packets to the proxy, but the > dynamic rules that the proxy creates use rdr-to which is why the man > page may appear a bit confusing at first reading. > I see, my mistake. Thanx very much for your support. Harri

spamd with ipv6 support

2016-02-14 Thread Harald Dunkel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi folks, last information I have about spamd with IPv6 support is WIP. Is there any code I could try? Maybe I can help, at least in running tests? Please mail Harri iQEcBAEBCAAGBQJWwJVyAAoJEAqeKp5m04HLJxMH/jF6nBeBn0gYe5HQj73vDgWL utLHaxkD1ODydZgQ

6.1, opensmtpd: unable to verify the first certificate

2017-11-09 Thread Harald Dunkel
Hi folks, opensmtpd problem on openbsd 6.1: smtpd.conf says xname = "mail.example.de" pki $xname key "/etc/ssl/private/smtpd.key.pem" pki $xname certificate "/etc/ssl/public/mail.example.de.pem" ca $xname certificate "/etc/ssl/public/DigiCertCA.crt" limit mta inet4 listen on lo0 tls pki $xname

Re: What would you like to see in upcoming PF tutorials?

2017-12-18 Thread Harald Dunkel
Hi Peter, On 12/14/17 9:27 PM, Peter N. M. Hansteen wrote: If you have thoughts on what you would like to see in a tutorial session and would like to share them either with me or the list, we would love to hear from you. What are the risks of ICMP and ICMP6? Is it reasonable to filter these

suggestion for the installer

2020-10-29 Thread Harald Dunkel
Hi folks, do you think it would be possible for the installer to show an eye-catching warning, if "ifconfig" reports "no carrier" for the network port to configure? Just a suggestion, of course Harri

Re: suggestion for the installer

2020-10-30 Thread Harald Dunkel
On 10/29/20 3:38 PM, Nick Holland wrote: On 2020-10-29 08:00, Harald Dunkel wrote: Hi folks, do you think it would be possible for the installer to show an eye-catching warning, if "ifconfig" reports "no carrier" for the network port to configure? Just a suggestion, o

6.8: page fault

2020-11-03 Thread Harald Dunkel
Hi folks, after applying the recent 4 syspatches for 6.8 one (of 5) openBSD host ran into the kernel debugger. I missed the error message, but on a reboot there was a page fault. On another reboot there was no problem any more. log is attached. I would be glad to help, but I need some advice how

question about hostname.carp

2020-11-04 Thread Harald Dunkel
Hi folks short question about hostname.carp1: Is it inet 10.0.1.1 0xff00 NONE vhid 41 pass secret carpdev em1 advbase 1 advskew 0 or inet 10.0.1.1 0xff00 vhid 41 pass secret carpdev em1 advbase 1 advskew 0 ? Using ifconfig I get % ifconfig carp1 -inet

iked vs IPsec failover (carp & sasyncd)

2020-11-08 Thread Harald Dunkel
Hi folks, wrt IPsec failover via sasyncd and carp: sasyncd(8) and iked(8) don't seem to tell, but I would guess that all hosts on the carp interface have to share the private key to support renegotiation. How can I tell iked which private key to use, instead of local.key? Is there a similar nami

Re: question about hostname.carp

2020-11-09 Thread Harald Dunkel
On 11/5/20 9:25 AM, Stuart Henderson wrote: but I prefer this multi-line vhid 41 pass secret advbase 1 advskew 0 carpdev em1 inet 10.0.1.1/24 Thats much better. I was using this "one line for all" thing following some ancient examples. Thanx very much Harri

packet filter question

2020-11-13 Thread Harald Dunkel
Hi folks, if it is allowed to ask a question about packet filter here? Please take a look at the attached pf.conf file. Problem is that incoming traffic from a host in (internal:network) to an external host port is passed in rule 86 (thats one of the debproxy lines) pass $log0 quick pro

Re: packet filter question

2020-11-13 Thread Harald Dunkel
On 11/13/20 2:06 PM, Harald Dunkel wrote: Hi folks, if it is allowed to ask a question about packet filter here? Found it, please ignore. Harri

address lists in iked.conf?

2020-11-15 Thread Harald Dunkel
Hi folks, would it be possible to support address lists in iked.conf(5), similar to ipsec.conf(5)? Regards Harri

pflogd: Corrupted log file, move it away

2020-11-27 Thread Harald Dunkel
Hi folks, I got a bazillion of error messages in /var/log/daemon : Nov 27 08:33:25 gate6a pflogd[26893]: Corrupted log file. Nov 27 08:33:25 gate6a pflogd[26893]: Invalid/incompatible log file, move it away Nov 27 08:33:25 gate6a pflogd[26893]: Logging suspended: open error Nov 27 08:33:32 gate

Re: pflogd: Corrupted log file, move it away

2020-11-29 Thread Harald Dunkel
Hi folks, On 11/28/20 5:13 PM, Stuart Henderson wrote: It is easy enough to add the filename, but adding that to the log might suggest to users that things are setup to handle multiple pflogd processes and that is not the case. Various parts of the system would need changing in order to handle

pflogd write /var/run/mypflogdinstance.pid?

2020-12-06 Thread Harald Dunkel
Hi folks, I have to run several pflogd in parallel. To make pkill (i.e. newsyslog) work it seems to be necessary to create hard links pflogd1, pflogd2 etc., pointing to /sbin/pflogd. Soft links don't work, because they don't show up in the process table. This introduces new problems on the next u

Re: pflogd write /var/run/mypflogdinstance.pid?

2020-12-07 Thread Harald Dunkel
On 12/7/20 7:43 AM, Theo de Raadt wrote: We've put some work into making programs not damage their argv. If you provide a strong set of arguments to the programs you start, you may be able to pkill with a more fullsize pattern, increasing the accuracy. AFAICS pflogd rewrites the command line

Re: pflogd write /var/run/mypflogdinstance.pid?

2020-12-13 Thread Harald Dunkel
On 12/7/20 7:19 PM, Theo de Raadt wrote: Yep. It is possible we need a better strategy --- like placing *all* original argv in the [priv] title. If you change the pflogd command line in the process list, what is supposed to happen to the existing code using pkill or pgrep, expecting the *old*

Re: pflogd write /var/run/mypflogdinstance.pid?

2020-12-13 Thread Harald Dunkel
On 12/13/20 7:10 PM, Theo de Raadt wrote: And I'm suggesting the arguments should look like this: pflogd: [priv] -s 160 -i pflog0 -f /var/log/pflog (pflogd) pflogd: [running] -s 160 -i pflog0 -f /var/log/pflog (pflogd) That might allow more accurate pkill targetting. Wouldn't you

Re: pflogd write /var/run/mypflogdinstance.pid?

2020-12-13 Thread Harald Dunkel
On 12/13/20 8:32 PM, Theo de Raadt wrote: If a pflogd dies because of a bug, the pid listed in the file may be reused, and then your kill `cat pidfile` will kill the incorrect process. I understand your concern, but as written before, I am not asking to drop pkill support. How about adding a

ifconfig problem with >10 wireguard peers

2021-04-07 Thread Harald Dunkel
Hi folks, apparently ifconfig (openbsd 6.8) shows only 10 wireguard peers for wg0, even if hostname.wg0 defines 12 peers. This is pretty painful. Do you think it would be possible to increase this limitation to (lets say) 253? Thank you very much in advance Harri

Re: ifconfig problem with >10 wireguard peers

2021-04-08 Thread Harald Dunkel
On 4/7/21 7:44 PM, Stuart Henderson wrote: On 2021-04-07, Harald Dunkel wrote: Do you think it would be possible to increase this limitation to (lets say) 253? I don't see that here: Sorry, my bad. Some lines in my hostname.wg0 were commented out. I didn't notice. We are

Re: 6.9 + 001: uvm_fault

2021-05-16 Thread Harald Dunkel
PPS: I got a similar panic on another host after installing syspatch 001, see attachment. Regards Harri Last login: Sat May 15 21:46:44 on ttyp0 from 2a00:fe0:30:60::7a OpenBSD 6.8 (GENERIC.MP) #5: Mon Feb 22 04:36:10 MST 2021 Welcome to OpenBSD: The proactively secure Unix-like operating system

Re: 6.9 + 001: uvm_fault

2021-05-16 Thread Harald Dunkel
PS: The next power cycle went fine, see attachment. Regards Harri boot> NOTE: random seed is being reused. booting hd0a:/bsd: 14415144+3220488+34+0+1171456 [1008375+128+1145856+866050]=0x1526a80 entry point at 0x81001000 [ using 3021440 bytes of bsd ELF symbol table ] Copyright (c)

Re: 6.9 + 001: uvm_fault

2021-05-16 Thread Harald Dunkel
And another attempt, see attachment. Seems I have to power cycle to make it boot. Regards Harri OpenBSD/amd64 (redgatea.red.aixigo.de) (tty00) login: root Password: Last login: Sun May 16 11:45:27 on ttyp0 from 2a00:fe0:30:60::7a OpenBSD 6.8 (GENERIC.MP) #5: Mon Feb 22 04:36:10 MST 2021 Welco

6.9 + 001: uvm_fault

2021-05-16 Thread Harald Dunkel
Hi folks, after installing syspatch 001 the reboot showed: : scsibus3 at softraid0: 256 targets root on sd0a (614daaae133f0ac5.a) swap on sd0b dump on sd0b uvm_fault(0x82186300, 0xb8, 0, 1) -> e kernel: page fault trap, code=0 Stopped at i915_ggtt_pin+0x29: movq0xb8(%rdi),%r

Re: 6.9 + 001: uvm_fault

2021-05-26 Thread Harald Dunkel
On 5/17/21 12:27 AM, Antonino Sidoti wrote: Hi, I also have this issue on a fresh install of 6.9 amd64. I reported it as a bug last week to “bugs” mail list with all appropriate information. I can confirm that plugging in a monitor will allow my system to boot. I did not have the 001 patch in

6.9 regression: opensmtpd complains "smtp cert-check result=\"no certificate presented\""

2021-06-21 Thread Harald Dunkel
Hi folks, since the upgrade to 6.9 at the weekend opensmtpd complains smtp cert-check result="no certificate presented" for incoming EMails. opensmtpd.conf and the certificate chain hasn't changed. There is only a single MX defined in DNS (for both "example.com" and "example.de"), match

Re: 6.9 regression: opensmtpd complains "smtp cert-check result=\"no certificate presented\""

2021-06-21 Thread Harald Dunkel
On 6/21/21 12:52 PM, n...@xn--bimann-cta.de wrote: since the upgrade to 6.9 at the weekend opensmtpd complains smtp cert-check result="no certificate presented" for incoming EMails. opensmtpd.conf and the certificate chain Hello. This is because clients are not providing a tls client ce

Re: 6.9 regression: opensmtpd complains "smtp cert-check result=\"no certificate presented\""

2021-06-21 Thread Harald Dunkel
PS: The peer is very picky wrt TLS, thats why this is an important problem. The peer log file shows : Diagnostic-Code: X-Postfix; TLS is required, but was not offered by host mail.example.de[10.145.142.10] Return-Path: Received: from mout01.posteo.de (

Re: 6.9 regression: opensmtpd complains "smtp cert-check result=\"no certificate presented\""

2021-06-21 Thread Harald Dunkel
On 6/21/21 5:42 PM, naib+li...@xn--bimann-cta.de wrote: You wrote: since the upgrade to 6.9 at the weekend opensmtpd complains smtp cert-check result="no certificate presented" for incoming EMails. Again, this is just a notification from the server, that no client certificates were sent in case

Re: 7.3 on Zotac O1520 makes it unbootable

2023-07-17 Thread Harald Dunkel
On 2023-06-18 09:03:02, Harald Dunkel wrote: Hi folks, if I install 7.3 on a Zotac O1520 on its internal SATA disk (MBR or UEFI), then the system gets stuck during BIOS self test on the following reboots. Without removing the disk I cannot even enter BIOS or select a boot media. Surely OpenBSD

improve wireguard logging, please?

2023-08-05 Thread Harald Dunkel
Hi folks, would it be possible to improve wireguard logging in OpenBSD? A message like Receiving handshake initiation from peer 17 in /var/log/messages of 2 weeks ago isn't really helpful. Who the heck was peer 17? For forensic measures in case of an incident I need the peers public ke

mg wishlist: vertical split

2023-09-26 Thread Harald Dunkel
Hi folks, would it be possible to introduce a vertical split window (Ctrl-X 3) in mg, similar to horizontal split? I am really missing this feature. Vertical split allows me to work with similar files (shown side-by-side) much more efficiently. Regards Harri

7.4 and hostname.pfsync7

2023-10-14 Thread Harald Dunkel
Hi folks, I learned that pfsync has been rewritten for 7.4 and that up syncdev em7 doesn't work anymore. What about up syncdev em7 (one line), as suggested in the current pfsync(4)? Regards Harri

Re: 7.4 and hostname.pfsync7

2023-10-15 Thread Harald Dunkel
Hi folks, sorry, I had hoped somebody knew the answer and that the man page could be fixed. I have just limited test equipment for verification, so I have setup a vlan interface for pfsync and tried some combinations. Result: Apparently there is no difference between up syncdev

Re: 7.4 and hostname.pfsync7

2023-10-15 Thread Harald Dunkel
On 2023-10-16 07:59:06, Peter Hessler wrote: On 2023 Oct 16 (Mon) at 07:53:37 +0200 (+0200), Harald Dunkel wrote: :/etc/hostname.vlan111: :vnetid 111 :parent re0 You need to add "up" here. The "up" in hostname.vlan111 makes no difference for the configuration of the

smtpd[68513]: warn: lost processor: spamassassin exited abnormally

2023-11-05 Thread Harald Dunkel
Hi folks, since OpenBSD 7.4 the spamassassin filter seems to be broken. On the first EMail opensmtpd dies with a message in maillog saying Nov 5 08:59:23 mhost smtpd[60460]: bcc4f33a095bb28e smtp connected address=xx.xx.xx.xx host=mail.example.com Nov 5 08:59:23 mhost filter-spamassassin[7782

Re: smtpd[68513]: warn: lost processor: spamassassin exited abnormally

2023-11-06 Thread Harald Dunkel
On 2023-11-05 10:21:10, Omar Polo wrote: Can you try the following diff to see if it helps? I will try this evening after work, stay tuned. Its been a while since I used CVS. Regards Harri

Re: smtpd[68513]: warn: lost processor: spamassassin exited abnormally

2023-11-07 Thread Harald Dunkel
Hi Omar, sorry for the delay, but I have good news: The patch seems to work. Of course I will continue to watch it. Thank you very much Harri

Re: smtpd[68513]: warn: lost processor: spamassassin exited abnormally

2023-11-13 Thread Harald Dunkel
Hi Omar, On 2023-11-09 18:22:41, Omar Polo wrote: I've committed the update and backported to -STABLE so the fixed package should appear in the next days. Thanks for the report and sorry for the breakage I highly appreciate your fast response and the fix you have provided. Regards Harri

HUNSN RJ43: USB keyboard lost at boot time

2024-04-20 Thread Harald Dunkel
Hi folks, This morning I've got a HUNSN RJ43 network appliance with N100 and 4 2.5Gbit network interfaces. Problem: The keyboard is lost at boot time. It still worked at the boot> prompt, but in OpenBSD's installer menu or at the login prompt it is ignored. I have to pull it out and plug it into

what became of "apmd -C"?

2024-04-24 Thread Harald Dunkel
Hi folks, https://www.openbsd.org/faq/upgrade57.html doesn't mention it, so I wonder what became of "apmd -C"? The man page for OpenBSD 5.7 silently dropped this option, but even apmd of 7.5 still accepts it. ? Regards Harri

bad first impression of OpenBSD at install time

2024-04-25 Thread Harald Dunkel
Hi folks, I posted this before, without any response from the community: At the boot> prompt of the installer image my USB keyboard still works, but at the install prompt the keyboard is ignored. I cannot press "i" to actually install OpenBSD. Fortunately I am with BSD since Ultrix and SunOS 4.

Re: what became of "apmd -C"?

2024-04-26 Thread Harald Dunkel
On 2024-04-24 09:30:29, Stuart Henderson wrote: To get similar to previous behaviour, you can either install obsdfreqd from packages (userland monitoring, similar to old old apmd -C), or some people run with a kernel patch like this: Index: kern/sched_bsd.c =

Re: bad first impression of OpenBSD at install time

2024-04-26 Thread Harald Dunkel
On 2024-04-25 17:51:59, Claudio Jeker wrote: Without providing at least a dmesg of that system there is no way we can help you. It is not even clear what kind of system or arch it is? See my post from 2024-04-20. Regards Harri

Re: bad first impression [ ...] Fwd: [HUNSN RJ43: USB keyboard lost at boot time]

2024-04-26 Thread Harald Dunkel
On 2024-04-26 10:31:17, Stuart Henderson wrote: So another keyboard works with this machine, and this keyboard works with other machines. Not exactly. In the meantime I tried the keyboard on another host (some ancient O-series Zotac box) with the same result: At the boot prompt the keyboard s

Re: USB keyboard quirks may not be properly catered to in bsd.rd kernels

2024-04-26 Thread Harald Dunkel
The keyboard is a Newmen GM610 Gaming Keyboard I shot on amazon. Regards Harri

Re: fw_update

2024-05-02 Thread Harald Dunkel
On 2024-04-30 13:25:39, Страхиња Радић wrote: Дана 24/04/30 01:12PM, Kirill A. Korinsky написа: You may download it by hand and install as fw_update /path/to/firmware.tgz BTW, this is in fw_update(8). man 8 fw_update /SYNOPSIS Another BTW: # fw_update -i fw_update: unknown

Re: fw_update

2024-05-03 Thread Harald Dunkel
On 2024-05-02 21:25:00, Stuart Henderson wrote: You have an old fw_update(1) manual lying around which should be removed. It moved to fw_update(8). "Moved"? And yet another BTW: https://man.openbsd.org/OpenBSD-7.5/ seems to be forgotten. Regards Harri

sysmerge: what is [leave it for later] good for, actually?

2022-10-22 Thread Harald Dunkel
Hi folks, sysmerge noted that I had modified my /etc/newsyslog.conf. Since I didn't had time for this while other important services were not merged yet I chose the default [leave it for later]. Problem is, when I came back later (after a reboot), sysmerge didn't show me that newsyslog.conf stil

using netstat without terminal

2022-10-22 Thread Harald Dunkel
Hi folks, would it be possible to fix netstat for 7.3 wrt the assumed screen size, even if there is no terminal involved? Something like netstat -f inet6 -ln

Re: sysmerge: what is [leave it for later] good for, actually?

2022-10-24 Thread Harald Dunkel
Hi Amit, On 2022-10-22 18:29:35, Amit Kulkarni wrote: You chose later, so now do a "doas sysmerge", and merge it now? Ah, sorry, my bad. Apparently I wasn't root. Thank you for the hint Harri

Ctrl key doesn't interrupt boot

2022-11-14 Thread Harald Dunkel
Hi folks, according to boot(8) holding the Ctrl key is supposed to interrupt boot before /etc/boot.conf is read. But it doesn't. I see boot's message on VGA that it switches over to serial (as mentioned in boot.conf), and then it doesn't boot for a reason I would like to investigate. The screen s

Re: Ctrl key doesn't interrupt boot

2022-11-14 Thread Harald Dunkel
On 2022-11-14 13:54:18, Nick Holland wrote: Wild guess, but I suspect that your BIOS isn't setting the marker that /boot uses to see the pressing of the CTRL key on your system with a USB keyboard. /boot is pretty much dependent upon your system BIOS doing The Right Thing, as the OS hasn't load

mailx in pipeline mode: add fields to the EMail header?

2023-01-03 Thread Harald Dunkel
Hi folks, is there some way for OpenBSD's mailx (reading an EMail to send from stdin) to add fields to the EMail header, e.g. Auto-Submitted: auto-generated for generated EMails, according to the recommendation in RFC 3834? Or maybe Precedence: bulk Maybe some custom fields li

mg: problem with large directory names and open new file

2023-01-25 Thread Harald Dunkel
Hi folks, If I have opened a file in a subdirectory with a very long path (larger than the terminal width) and if try to open a new file using ^x^f, then mg seems to be confused. The long path is cut off in the Find File dialog. Only the first chars are shown. The filename I enter is not shown w

openbsd on nanopi R5C?

2023-04-03 Thread Harald Dunkel
Hi folks, has anybody succeeded in running OpenBSD on the Nanopi R5C? https://wiki.friendlyelec.com/wiki/index.php/NanoPi_R5C I haven't bought the hardware yet. The R5S is in OpenBSD's supported hardware list on ARM. Regards Harri

7.3: high network latency every couple of seconds. Carp?

2023-04-28 Thread Harald Dunkel
Hi folks, Using 7.3 on a HA gateway ("redgatea" and "redgateb", one external network, 2 internal networks, carp on all interfaces) I see a high network latency for incoming network traffic every couple of seconds. Trying to ping redgatea from redgateb over the pfsync interface, for example: redg

Re: 7.3: high network latency every couple of seconds. Carp?

2023-04-28 Thread Harald Dunkel
Please ignore this duplicate post and reply to the other thread on this mailing list. I had used my private EMail account by accident. Regards Harri

7.3 on Zotac O1520 makes it unbootable

2023-06-18 Thread Harald Dunkel
Hi folks, if I install 7.3 on a Zotac O1520 on its internal SATA disk (MBR or UEFI), then the system gets stuck during BIOS self test on the following reboots. Without removing the disk I cannot even enter BIOS or select a boot media. Surely OpenBSD is not to blame here. But its a pity. I'd love

Re: Generate CA & Certificates key

2009-02-03 Thread Harald Dunkel
If you are looking for some GUI to manage keys and certificates, then you should consider TinyCA . Its in the packages. To setup OpenVPN (including all that certificate stuff) this page might help: http://www.kernel-panic.it/openbsd/vpn/index.html Good luck Harri

Re: Segmentation fault (Core dumped) when "Make Build"

2009-02-11 Thread Harald Dunkel
I cannot speak for OpenBSD here, but for Linux a core dump of gcc was an indication for bad RAM, i.e. a hardware problem. Regards Harri

4.3: smart killed the machine

2009-03-27 Thread Harald Dunkel
Hi folks, I am evaluating smartmontools-5.37p0 on OpenBSD 4.3. During the short Smart selftest for the first disk the machine died. After a reset the machine booted fine (without smartd), but "smartctl -a" shows me for /dev/sd0c: : SMART Self-test log structure revision number 1 Num Test_Desc

Re: 4.3: smart killed the machine

2009-03-29 Thread Harald Dunkel
PS: This is reproducible. There was no message, crash dump, etc. on the console. Regards Harri

  1   2   3   >