Re: OpenBSD desktop

2012-12-17 Thread Janne Johansson
2012/12/17 Robert Connolly : > Hello. > > I have heard on IRC that I am running a vulnerable version of Firefox, > despite running 'pkg_add -a -u', on my OpenBSD 5.2 system. The advice I got > was to run snapshots, because OpenBSD does not have the human resources to > maintain packages. I understa

Re: nfs 4

2012-12-23 Thread Janne Johansson
At one time there was: http://mailman.theapt.org/pipermail/openbsd-nfsv4/2007-January/88.html 2012/12/23 Philip Guenther : > On Sat, Dec 22, 2012 at 4:57 PM, Friedrich Locke > wrote: >> Does OBSD support NFS 4 ? If not, is there plans to do so ? > > It does not currently. I don't think anyon

Re: Request improvement for faq 15.2

2012-12-27 Thread Janne Johansson
You seem to have mixed up packages and the install file sets. Den 27 dec 2012 17:43 skrev "Live user" : > On 27/12/2012 17:25, Chris Bennett wrote: > >> You are assuming that someone will never just run base. >> >> Base includes a lot of useful software all by itself. >> Apache, PF, a working file

Re: max file component size

2013-01-01 Thread Janne Johansson
Sounds like you want to read man 2 pathconf 2013/1/1 Friedrich Locke : > Hi list members, > > i wrote a simple function in ANSI C : > > unsigned long > nammax_len(void) > { > struct dirent d; > > return sizeof d.d_name; > } > > On OpenBSD i got, as a return value, 256. > May i as

Re: dhcrelay Can't find free bpf: No such file or directory

2013-01-08 Thread Janne Johansson
cd /dev for i in $(jot 20 10); do ./MAKEDEV bpf${i} ; done to make 20 more bpfs. Each tcpdump and dhcrelay will want one of their own so you may need more dev-entries. 2013/1/8 Ulrich Drolshagen : > Hi, > > I am running an openbsd router attached to several vlans. On one of them > there is runnin

Re: Bad major libc.so.66.0 while trying to install via pkg_add

2013-01-09 Thread Janne Johansson
You have updated your system beyond the time when those packages were built. OR; You have updated your system and forgot to update PKG_PATH or /etc/pkg.conf to reflect it. See http://www.openbsd.org/faq/faq15.html#NoFun 2013/1/9 Michel Blais : > Hi, > > The're 2 package I'm not able to install.

Re: How to configure pppoe client on OpenBSD?

2013-01-13 Thread Janne Johansson
2013/1/14 Franco Fichtner : > You need to understand that people asking question here have no idea > about the marvellous man pages in OpenBSD and they never will (because > then they would not be asking in the first place). If it weren't for > jmc@'s love for tweaking man pages I'd still be in tha

Re: How to configure pppoe client on OpenBSD?

2013-01-14 Thread Janne Johansson
2013/1/14 Martin Schröder : > PS: apropos should be mentioned in afterboot(8). The first command in afterboot mentioned is "help". The first paragraph of help(1) goes: Type man man for instructions on how to use it properly. Pay especially close attention to the -k option. There just is no wa

Re: how to upgrade gcc 4.2.1 to gcc-4.7.1

2013-01-17 Thread Janne Johansson
2013/1/17 WANG Siyuan : > Hi, > > I install gcc 4.7 on openbsd using pkg_add. after installation, I use > 'gcc -v' to check, I found it is also gcc 4.2 ! > how to upgrade gcc 4.2 to gcc 4.7 on openbsd? thank you! The non-system gcc ends up in /usr/local/bin Edit your PATH accordingly. And don't co

Re: How do I compile 32-bit binaries on amd64 OpenBSD?

2013-01-22 Thread Janne Johansson
2013/1/22 Peter Hessler : > On 2013 Jan 22 (Tue) at 17:37:18 +0800 (+0800), Salil Wadnerkar wrote: > :Some programs like smlnj, which is SML by New Jersey, support only 32-bit > :binaries. On Linux distros, I can use gcc multilib support. How do I do > :that in OpenBSD? > > OpenBSD does not support

Re: How do I compile 32-bit binaries on amd64 OpenBSD?

2013-01-22 Thread Janne Johansson
2013/1/22 Janne Johansson : > Then again, if you haven't figured out that during the last two > centuries, chances are that you won't ever. "decades". Though interpreting it as "since the last century" still holds. -- May the most significant bit of your life be positive.

Re: Interface and trunking performance

2013-01-25 Thread Janne Johansson
2013/1/25 Xinform3n : > Reply @Thomas Bodzar >> Why i386 on 12GB of RAM? Did you test amd64 and best option current? > Because it's an old Xeon CPU which doesn't support amd64 instructions > (only ia64). Don't think xeons ever supported ia64. -- May the most significant bit of your life be posit

Re: Interface and trunking performance

2013-01-25 Thread Janne Johansson
2013/1/25 Xinform3n : >> Don't think xeons ever supported ia64. > That's true... > I confused Intel 64 instructions. EMT64 ? > Anyway, OpenBSD amd64 won't work on this type of CPU, right ? OpenBSD-amd64 runs on intels that do have EMT64. Its just intel that wanted a name for the 64bit mode without

Re: Pf with multi gateways

2013-02-13 Thread Janne Johansson
You can have ifstated test gw reachability, I think relayd has similar functionality to manage routes, one could somewhat easily script "if gwA up send packets via ifA, if gwB up ..." mpath would be yet one option. 2013/2/13 What you get is Not what you see : > Hi > I have a pf box with 4 links (a

Re: Millions of files in /var/www & inode / out of space issue.

2013-02-18 Thread Janne Johansson
2013/2/19 Keith : > Q. How do I make the default web folder /var/www/ capable of holding > millions of files (say 50GB worth of small 2kb-12kb files) so that I won't > get inode issues ? Since you probably aren't going to have 50G/2k number of files in a single dir, then you'd be wise to make seve

Re: Millions of files in /var/www & inode / out of space issue.

2013-02-22 Thread Janne Johansson
2013/2/22 Paolo Aglialoro : > The source was available, but it relies on Sun/Oracle patents. >> The CDDL license it was provided under allows use of those patents, >> but only subject to certain conditions, and there are indemnification >> clauses that some projects cannot agree to. > > Does this m

Re: Precisions on ZFS (was: Millions of files in /var/www & inode / out of space issue.)

2013-02-22 Thread Janne Johansson
OpenBSD doesn't believe much in them, and doesn't need lkms for all basic usage. It just didn't get disabled in case someone (like OpenAFS users) wants it. It doesn't work on all platforms, either 2013/2/22 Juan Francisco Cantero Hurtado : > On Fri, Feb 22, 2013 at 04:22:51AM -0500, Jiri B wrote:

Re: Should I be tuning relayd?

2013-02-27 Thread Janne Johansson
I would raise it far more, since you're at 60-something percent when you peak at 22k. 2013/2/26 Peter Farmer : > Thanks Vadim, with "set limit state 3" I now see the states balloon > upto nearly 22000 states at peak, and no more "state up -> down". > > > Peter > > > On 26 February 2013 17:41,

Re: altq: upsteam and downstream

2013-03-01 Thread Janne Johansson
2013/3/1 lilit-aibolit : > Hello misc, I'm a bit confusion with understanding such things. [...] > Or am I totally wrong? Because I read man, faq, ca(REMOVED)el.org, Bad move. -- May the most significant bit of your life be positive.

Re: Serial and parallel port detection

2013-03-04 Thread Janne Johansson
2013/3/4 Jacques Pelletier : > Le 2013-03-04 01:49, Theo de Raadt a écrit : > >>> For use in the GUI of an application, I need to have a list of detected >>> serial and parallel ports. This list is used to fill a combo box where >>> the user select the port to use (example: in Windows, it would be

Re: Upgrading Snapshots and Dual-booting

2013-03-04 Thread Janne Johansson
Everytime a new bootblock gets written one needs to repeat the dd stuff, but a normal upgrade usually doesn't make a new bootblock for you. 2013/3/4 James Griffin : > Hi > > I've got a machine which is dual-booting Windows 7 and OpenBSD current. > I am currently downloading the latest snapshot re

Re: python GraphViz in ports ?

2013-03-05 Thread Janne Johansson
http://openports.se/search.php?so=graphviz yes there is. 2013/3/5 Илья Шипицин : > Hello! > > is there python GraphViz in ports ? > if so, what is name of port (I couldn't find any) > > **: No module named gv > > > Cheers, > Ilya Shipitsin > -- May the most significant bit of your life be pos

Re: python GraphViz in ports ?

2013-03-05 Thread Janne Johansson
I missed the "bindings" part. 2013/3/5 Илья Шипицин : > math/p5-GraphViz is for Perl. > math/graphviz neither contains subpackage nor flavor for Python. > > how can I use information provided by you to install python bindings for > graphviz, can you describe step by st

Re: Using hostnames in pf rules

2013-03-15 Thread Janne Johansson
make a table, and have cron update the contents of this table with the result of the latest resolved ip. 2013/3/15 Gilles LAMIRAL > Hello, > > I need to use an hostname in a pf rule to allow a connection. > The hostname is needed because the resolution is dynamic, > it can change at any minute (

Re: OpenBSD ignoring RFC-compliant IPv6 neighbor solicitation?

2013-05-06 Thread Janne Johansson
I have now run into this problem also. (which sadly affects anoncvs.eu.openbsd.org). The router has another ip on a loopback interface somewhere which it thinks is it's own "main" v6 ip, and then it sends it as the source ip of the solictation. This in turn means that my obsd wont respond to the ND

Re: strange error on openbsd

2013-05-07 Thread Janne Johansson
mtree wants them to be: # grep ^pwd.db /etc/mtree/* /etc/mtree/special:pwd.db type=file mode=0444 uname=root gname=wheel optional 2013/5/7 noah pugsley > On Mon, May 6, 2013 at 6:31 PM, Ted Unangst wrote: > > > On Mon, May 06, 2013 at 22:06, Friedrich Locke wrote: > > > > > e =

Re: OpenBSD ignoring RFC-compliant IPv6 neighbor solicitation?

2013-05-07 Thread Janne Johansson
\n")); - goto bad; - } } - if (IN6_IS_ADDR_MULTICAST(&taddr6)) { nd6log((LOG_INFO, "nd6_ns_input: bad NS target (multicast)\n")); 2013/5/6 Janne Johansson > I have now run into this problem also. (which sadly affects > an

Re: OpenBSD ignoring RFC-compliant IPv6 neighbor solicitation?

2013-05-07 Thread Janne Johansson
Not that I have a better suggestion than yours, but I don't like "whitelisting" at the ip level. If I have multiple trusted routers this ends up as a long shell-script that tries to feed ips until it works. I can see a point (for both v4 and v6) to sometimes lock the arp/ndp for your def-gw so that

Re: X -configure --> Segmentation fault at address 0x28

2013-05-10 Thread Janne Johansson
2013/5/10 Stefan Olsson > When I use startx things works quite well with X-windows, but since I want > Long time since I saw one of these knee-jerk reactions: The X.Org Foundation requests that the following names be used when referring to this software: X X Window System

Re: pms problems in latest snapshot

2013-05-11 Thread Janne Johansson
I see this too, after the PS2 mux commit. For me, a workaround is to zzz the machine and wake it up. Not very neat but works. 2013/5/10 Frank Brodbeck > Hi all, > > as soon as I start X (startx, no display manager involved) my systems > seems to hang right after I am seeing the root screen, i.

Re: all CVSup mirrors down

2013-05-11 Thread Janne Johansson
Most people use cvsync to sync repos nowadays. I suggest you move to that instead. Still, listed cvsup servers should be down of course. 2013/5/11 Kārlis Miķelsons > Hello, > > For last couple of days there have been a problem with OpenBSD CVSup > mirrors, none of mirrors mentioned in cvsup.h

Re: all CVSup mirrors down

2013-05-11 Thread Janne Johansson
Which they arent, since the cvsup page was removed over a year ago. 2013/5/11 Janne Johansson > Most people use cvsync to sync repos nowadays. I suggest you move to that > instead. > Still, listed cvsup servers should be down of course. > > > 2013/5/11 Kārlis Miķ

Re: OpenBSD 5.7 release -- CD2 issues

2015-05-16 Thread Janne Johansson
Well, if anyone got the bad disc, I could buy it from them and they can order a new set. It would be a rare disc to own. 2015-05-15 16:50 GMT+02:00 Theo de Raadt : > Sadly, CD2 of the OpenBSD 5.7 shipped in a broken fashion due to > errors at the manufacturing plant. Two mistakes were made. > >

Re: Router performance amd64 vs i386

2015-05-26 Thread Janne Johansson
..or, if it really is important for you, why not set up a test and benchmark it? I have no idea if or when amd64 would have surpassed i386 in performance, and if it is better how much better. But if this was an important topic worthy of the science, then by all means do test it on your particular

Re: Random PID implementation and security

2015-05-27 Thread Janne Johansson
> A 16 bit PID is suppsed to provide true safety? >>> Please. >>> >> >> > Having PID's that are not easily predicable helps to reduce the attack > surface. > IMO that is a security measure, but YMMV. > > Random PIDs is that plastic part, not the padlock. -- May the most significant bit of

Re: groups new

2015-05-27 Thread Janne Johansson
groups.dat-egypt.diff ..for someones cut-n-paste convenience. 2015-05-26 3:54 GMT+02:00 noob sia009 : > 0 > C Egypt > P Masr EL-Gdida > T Cairo > F irregular > O Egypt OpenBSD Group > I Hossam EL-Mansy > M noobsia...@yahoo.com > U > N OpenBSD

Re: HA / load balancing / fail-over using CARP

2015-06-22 Thread Janne Johansson
Well, if one falls over unexpectedly, you would actually want one box to be able to handle the full load, otherwise when the HA kicks in (due to planned or unplanned downtime), you would get a poor or useless situation depending on how the services handle the downgrade. It smells like people who r

Re:

2015-07-10 Thread Janne Johansson
Make the config not world readable/writeable. Den 10 jul 2015 13:27 skrev "Reza Kakhki" : > Yesterday i tried to enable OSPF routing on OpenBSD 5.7 . so i created > "/etc/ospfd.conf" and added this codes to it ( just for test ) > > routet-id 127.0.0.1 > > area 0.0.0.0 { > interface em0 > } > >

Re: pf vs mp

2015-09-01 Thread Janne Johansson
OpenVPN will eat cpu in userspace mostly so that one will most certainly find use for MP systems. IPSec runs in the kernel and will for a while be "limited" to one core, though for many applications, that one core will still do more crypto than needed, unless you are pushing it hard over the VPN.

Re: hostname | /etc/hosts

2016-02-24 Thread Janne Johansson
2016-02-24 11:48 GMT+01:00 Roderick : > Dear Sirs! > > Should the name in /etc/myname include a domain name? Even when I > do not have a static IP registered in a public DNS? > > In "man 5 myname" I read: > > "The file should contain a single line specifying the fully > qualified domain name (FQDN

Re: Question about logo

2016-03-02 Thread Janne Johansson
http://www.openbsd.org/art1.html says: Most images provided here are copyright by OpenBSD, by Theo de Raadt, or by other members or developers of the OpenBSD group. However, it is our intent that anyone be able to use these images to represent OpenBSD in a positive light -- but do not make profit

Re: remove files progress bar

2016-04-03 Thread Janne Johansson
One could rsync -avP --delete-during /var/empty /dir/to/clean/ also if you like to see a list of files flash by. Or something with find ... -exec rm {} + and later something to clean out links, sockets and/or dirs. 2016-04-03 9:39 GMT+02:00 Raul Miller : > On Sun, Apr 3, 2016 at 2:57 AM, Max Pow

Re: Is it possible and not unadvisable to make /src with the -O3 option?...

2016-06-16 Thread Janne Johansson
Do you have the skills to detect and handle if gcc miscompiles something at -O3? If not, then don't. Noone else will help you getting a zomg-fast -O3 system working after a slight miscompile gets a few bad instructions stuffed into some lib somewhere, so if you break your system, you get to keep a

Re: Silly library path debug question. Also, is /usr/local/lib/ in the default search path for library files?

2016-07-04 Thread Janne Johansson
OpenBSD will not make B load C just by A loading B, so the program A needs to ask for both B and C while being linked in order to work. 2016-07-03 16:49 GMT+02:00 Tinker : > Am debugging something and am not quite clear about details. > > > My executable A loads library B dynamically, and B depe

Re: Security updates and packages

2016-08-19 Thread Janne Johansson
You can pay someone to build them for you, where M:Tier springs to mind. Also, having a build host (or vm) somewhere running -stable and (re)building any updated -stable port for your particular platform isn't all that difficult and hard, especially if its just about a single or a specific small s

Re: sharing network and address between tables and softwares

2014-05-19 Thread Janne Johansson
The simple workaround would be to have a "nicer" smtpd on a different port and have PF send to that one, which would not require auth. It depends on what amount of "realtime" you require for dynamic lists, and how easy you may feed a list from the kernel into that particular daemon. 2014-05-1

Re: standard FAQ procedure ... in chroot

2014-06-07 Thread Janne Johansson
I don't think there is a word for "chroot back". Once you limit yourself into a chroot, you are stuck in it and get special treatment until you exit. Apart from why mknod wants to fail inside chroots, having a simple syscall being able to take you out of it would defeat the whole purpose, no? 20

Re: standard FAQ procedure ... in chroot

2014-06-08 Thread Janne Johansson
t;/"); case when mknod:ing. 2014-06-08 17:44 GMT+02:00 Andres Perera : > On Sun, Jun 8, 2014 at 3:51 AM, Otto Moerbeek wrote: > > On Sun, Jun 08, 2014 at 02:59:08AM -0430, Andres Perera wrote: > > > >> On Sun, Jun 8, 2014 at 2:24 AM, Janne Johansson > wrote:

Re: CARP without IP on the physical interfaces of carp group?

2014-07-01 Thread Janne Johansson
> #1 is > somewhat valid - using carppeer would prevent me from learning that > multicast was broken. I'm not sure how it could ever break on a L2 VLAN, > but still... > I've had bad broadcom (bnx (4)) cards do that to me. Worked better with carppeer but best with intels instead.

Re: Firewall cluster.

2014-07-06 Thread Janne Johansson
The sysctl for carp.preempt controls if they should all fail at the same time. Den 6 jul 2014 10:12 skrev "Adam Thompson" : > On July 6, 2014 2:51:03 AM CDT, Mxher wrote: > >Le 06/07/2014 04:34, Giancarlo Razzolini a écrit : > >> Em 05-07-2014 16:20, Mxher escreveu: > >>> 1) Can I group multiple

Re: Donations to OpenBSD

2014-08-14 Thread Janne Johansson
Talk to www.openbsdeurope.com, which happens to be in the UK. I'm sure they can arrange for donations in a simple-for-you way even if you don't need a product back. 2014-08-14 8:16 GMT+02:00 Bernte : > On 14/08/14 01:10, Theo de Raadt wrote: > >> How does it compare for using the SWIFT method o

Re: ifconfig command for IPv6 tunnel

2014-08-19 Thread Janne Johansson
Also, do note that this just means that this particular box has ipv6 connectivity. If you want to have clients at home behind this one, you should get another v6 network to use behind this gateway. And I agree with Adam, you got most of it correct. I would add the route command to hostname.gif0 wi

Re: rsync -a doesnt keep owner and permissions

2014-08-21 Thread Janne Johansson
"right to run rsync " ..as root? Not that this is 0-days information, but scroll down to the rsync part (you can read the rest later, somewhat linux-centric on the tar part I guess) http://www.defensecode.com/public/DefenseCode_Unix_WildCards_Gone_Wild.txt Anyone that can control the contents of

Re: maybe OT 10 year anniversay of Chuck Yerkes death

2014-08-27 Thread Janne Johansson
+1 2014-08-28 6:08 GMT+02:00 Philip Guenther : > On Wed, Aug 27, 2014 at 4:21 PM, Diana Eichert > wrote: > > > I don't think it's off topic but others might. I'm writing this post to > > remember Chuck Yerkes, a long time contributor to the misc@openbsd list. > > While riding his motorcycle 1

Re: For Google+ users: BSD community

2013-11-18 Thread Janne Johansson
And being one of the .. contributors of the OpenBSD G+ community (ie, reposter from undeadly ;), I thought that the openbsd stuff in the general BSD channel was mostly all the good stuff from the specific OpenBSD channel anyhow, so I'd rather point people to the OpenBSD one. 2013/11/19 Tony Sida

Re: Patch to remove "adult" content from spamd(8) man page

2013-11-21 Thread Janne Johansson
2013/11/21 J. Lewis Muir > On 11/21/13 12:23 PM, Nick Holland wrote: > > Stuff like this is part of the fun for people developing OpenBSD (and > > hopefully, fun for some of the users). Please understand that we > > don't want anyone to take away our fun. > > Hi, Nick. > > I understand the conce

Re: Should Android have used OpenBSD instead of Linux?

2013-12-04 Thread Janne Johansson
2013/12/2 Theo de Raadt > >cross compiling is really missing in openBSD to handle very small Platform > >which does not have the power to compile, and more. > > If you choose to not become educated, fine, that's your choice. There > is a completely fine cross-build environment that works well.

Re: [OpenBGPd <=> Cisco] error in OPEN message, unknown subcode 8

2013-12-04 Thread Janne Johansson
2013/12/3 Laurent CARON > ** Note for future readers, don't copy and paste this config snippet as it > does *NOT* work as you would expect it. ** > $PEERv6="dead:beef::1" > $MEv6="dead:beef::2" > Think of the vegans... -- May the most significant bit of your life be positive.

Re: Questions about common bug in Load Balancing with CARP and control path of CARP interfaces , OpenBSD 5.4

2013-12-04 Thread Janne Johansson
2013/12/5 Antonis Manousis > Hey everybody, > After reading the man page of carp (4) and since I am currently working > with this protocol I have a question concerning the first bug mentioned > in the bug section and a more general one. I quote from the man page.. > > If load balancing is used in

Re: ipsec or iked to deploy under openbsd carp fws

2013-12-05 Thread Janne Johansson
2013/12/5 Anders Berggren > > Interesting. I've got sasyncd to work pretty well by introducing a rather > long sleep before restoring the carp demote, with my main problem being the > fallback/restore to the designated master after a short period of the > backup being active (the failover from ma

Re: restoring keyboard layout after suspend or hibernate

2014-01-23 Thread Janne Johansson
2014/1/23 Lars Nooden > After suspend or hibernate, I lose my designated console keyboard layout > (sv) and it reverts to the default (us?) wsconsctl shows that the > encoding to still be sv, > > keyboard.encoding=sv > > What setting(s) am I missing to preserve the designated layout acro

Re: Joining the state of two carp interfaces

2014-02-20 Thread Janne Johansson
The sysctl for carp preempt sounds like that you are looking for. 2014-02-20 11:24 GMT+01:00 Kim Zeitler : > Hello, > > I have recently stumbled over a problem with a CARP router setup. > The routers have 2 carped interfaces, one for network A and B respectively. > We had the scenario that Rout

Re: mounting CVS tree read-only?

2014-02-21 Thread Janne Johansson
You can mount an mfs or a tmpfs there to solve that Den 21 feb 2014 21:00 skrev "Fred Snurd" : > On Friday, February 21, 2014 11:14 AM, Theo de Raadt < > dera...@cvs.openbsd.org> wrote: > > >> After studying FAQ 5.3, I am contemplating mounting /usr/src and > >> /usr/xenocara read-only through NFS

Re: ksh: expr 2147483648 / 2 = -1073741824 expected behavior or bug?

2014-02-26 Thread Janne Johansson
Not even when started with --posix, or with the env var POSIXLY_CORRECT. perhaps bash needs a --really-really-posix flag... 8-/ 2014-02-25 8:44 GMT+01:00 Dennis Davis : > On Tue, 25 Feb 2014, Ingo Schwarze wrote: > > > From: Ingo Schwarze > > To: Fabian Raetz > > Cc: misc@openbsd.org > > Date

Re: OBSD firewall+carp+vpn

2014-03-10 Thread Janne Johansson
With sasyncd(8) and carp, yes. 2014-03-10 14:09 GMT+01:00 Friedrich Locke : > Hi folks, > > how does carp + vpn integrate in a two server firewall ? > Does carp make vpn redundant too ? > > Thanks in advance. > > -- May the most significant bit of your life be positive.

Re: OpenBSD email provider

2014-03-15 Thread Janne Johansson
2014-03-15 17:54 GMT+01:00 Jean-Francois Simon : > Hello all, > also wondering if OpenBSD itself provides it for interested people. > No.

Re: source address for outgoing traffic with carpdevs?

2014-04-08 Thread Janne Johansson
If you want the slave machine (the one currently not winning the carp elections) to be able to send traffic (logs, mail, respond to monitoring and so on), you want local traffic to be originating from the interface IP and not the carp ip. 2014-04-09 2:54 GMT+02:00 Florenz Kley : > hello misc, >

Re: Virtual firewalls with OpenBSD and PF

2014-04-09 Thread Janne Johansson
2014-04-09 11:31 GMT+02:00 Stuart Henderson : > > > Hmm.. It is often fairly quick to pick up rules which over-block (though > problems with jobs which only occur weekly or monthly can take a while to > track down, and also there are situations where you won't notice a > problem until all firewall

Re: Virtual firewalls with OpenBSD and PF

2014-04-09 Thread Janne Johansson
..and a way to have it revert in 2 minutes unless the operator does , for the times when you cut off the branch you are sitting on. 2014-04-09 23:55 GMT+02:00 Adam Thompson : > I should add that once using source control abs a script to manage edits > to pf.conf, it is easy to use at(1) to simu

Re: long file names with tar

2014-05-07 Thread Janne Johansson
Could be that the standard for tar specifies a max length and that gnu tar either uses some extension for longer names, or it just doesn't care. 2014-05-07 11:05 GMT+02:00 Robert Connolly : > Why does BSD tar complain about long file names, and GNU does not? > > I'm running amd64. > > Thanks >

Re: Question regarding hearbleed patch (002) for OpenBSD 5.5...

2014-05-10 Thread Janne Johansson
2014-05-09 8:44 GMT+02:00 Lucius Rizzo : > Many many years ago (2001) Darrent Moffat wrote about the problems of using > statically linked binaries or libraries. In fact, until later versions of > Solaris, most compiles would often statically link binaries or libraries. > > Its quite interesting f

Re: Kernel dump and secure boot with KARL

2021-10-04 Thread Janne Johansson
Den tis 5 okt. 2021 kl 06:35 skrev Arka Sharma : > Also suppose we have a crash and dump is generated, how does KARL impact > gdb when the core file is opened ? It would not affect this at all. It is exactly as hard or as easy to debug a core file from something compiled with cc -o bsd obj1.o obj

Re: Question about cryptography software compatibility on OpenBSD

2021-10-15 Thread Janne Johansson
Den fre 15 okt. 2021 kl 11:01 skrev soko.tica : > Hello list, > I have a question about cryptography software compatibility on OpenBSD. > I have a wild guess about the answer, but I need it to be more reliable. > The target audience are lawyers, since I want to launch a legal battle in Then you ne

Re: Question about cryptography software compatibility on OpenBSD

2021-10-15 Thread Janne Johansson
> > > 3) Providers of public digital signatures offer software (a > > > one-size-fits-all Java “blob”) that should add cryptography capabilities > > to > > > the operating system. > > > > This is important. Thank you. Let me rephrase my wild guess: > > 3.1) An OS (OpenBSD or other) may have crypto

Re: How does bsd.upgrade work?

2021-10-17 Thread Janne Johansson
> >For an unusual setup you may need to look into how the > >install/upgrade script works, see /usr/src/distrib/miniroot. > > /usr/src/ is empty on my machine. > http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/ helps with that, if you don't want to install sources but still need to see them. -- May

Re: How does bsd.upgrade work?

2021-10-21 Thread Janne Johansson
https://marc.info/?l=openbsd-tech&m=138829898720574&w=2 and https://marc.info/?l=openbsd-tech&m=139013674405106&w=2 might help. Den tors 21 okt. 2021 kl 14:26 skrev Raul Miller : > > A couple minutes of looking things up suggest > https://marc.info/?l=openbsd-tech&m=141807224826859 as a plausible

Re: running a process under nologin user

2021-11-21 Thread Janne Johansson
Den mån 22 nov. 2021 kl 06:27 skrev Sandeep Gupta : > The httpd server runs under user www. In my web deployment setup, the > httpd server communicates over uWSGI/gunicorn server over unix domain > sockets. > I am not able to launch uwsgi (or gunicorn) server under www user. > The command > "doas -

Re: how to recover a corrupted disk

2021-12-01 Thread Janne Johansson
Den ons 1 dec. 2021 kl 09:12 skrev Sandeep Gupta : > I am running OpenBSD 7.0 on RPi4. I accidentally removed the usb > cable connecting the sata ssd to the RPi4. > Well OpenBSD froze and upon reboot I got the very comforting > Synchronous Exception message. > Thankfully, I have another RPi4 ru

Re: how to recover a corrupted disk

2021-12-01 Thread Janne Johansson
Den ons 1 dec. 2021 kl 11:09 skrev Sandeep Gupta : > @Peter, @Janne: Thanks for the infos. Newfs seemed promising but it > seems like the disk is beyond repair :(. > I did newfs -N and got quite a few location of superblocks: > Then I tried > fsck_ffs -b #blockid /dev/rsd1c You should *NOT* newfs

Re: Are there any OpenBSD Kernel/Architecture Books?

2021-12-20 Thread Janne Johansson
Den tis 21 dec. 2021 kl 02:14 skrev Thomas Windisch : > What resources would be a good primer on the OpenBSD kernel and general > architecture and give me a good understanding of the internals? > > FreeBSD has this: > > https://docs-legacy.freebsd.org/doc/13.0-RELEASE/usr/local/share/doc/freebsd/en

Re: What happened to www/art on CVSWeb? Why is it empty?

2022-02-10 Thread Janne Johansson
Aren't they under images/ ? Den tors 10 feb. 2022 17:53Marc Espie skrev: > On Thu, Feb 10, 2022 at 11:25:40AM -0500, Nick Holland wrote: > > On 2/10/22 6:34 AM, Kacper Wilgus wrote: > > > I tried to download some artwork from these pages: > > > > > > https://www.openbsd.org/art1.html > > > https

Re: disk i/o test

2022-03-03 Thread Janne Johansson
Den tors 3 mars 2022 kl 14:02 skrev Mihai Popescu : > I am trying to test some disk i/o speeds and I am stumbled on two questions: > 1. Does it matter if I set in BIOS Legacy or AHCI for the drive, > regarding the read/write performance? Probably yes. AHCI will be better if it works. > 2. Can you

Re: disk i/o test

2022-03-03 Thread Janne Johansson
Den tors 3 mars 2022 kl 18:10 skrev Mihai Popescu : > > > https://openports.pl/path/benchmarks/fio > > To test perf on many small IO (measuring iops basically) run: > > > > fio --name=random-write --rw=write --bs=4k --numjobs=2 --size=1g > > --iodepth=16 --runtime=60 --time_based --end_fsync=1 > >

Re: disk i/o test

2022-03-06 Thread Janne Johansson
Den sön 6 mars 2022 kl 16:41 skrev Mihai Popescu : > > Since this thread is moving slowly in another direction, let me True > reiterate my situation again: I am running a browser (mostly chromium) > and the computer slows down on downloads. Since I've checked the > downloads rates, I observed the

Re: boot and ddb

2022-03-10 Thread Janne Johansson
Den tors 10 mars 2022 kl 09:57 skrev rtw0 dtw0 : > Hi, > (reboot) after install opens dbb > showing UID 0 as loading is halted. > > Where may I find info for debugging with ddb? http://man.openbsd.org/crash and https://www.openbsd.org/ddb.html might be of some help to get started, http://man.open

Re: Cannot pass the OpenBSD bridge.

2022-03-11 Thread Janne Johansson
Den fre 11 mars 2022 kl 10:23 skrev T K : > Hi list > Please forgive me my incompetence, but I have no further idea > how to manage setup I try to arrange. > I have fujitsu futro box with 2 ethetnet cards, OpenBSD 7.0. > I would like to set that box up as a filtering bridge. > I guess it is quite c

Re: who is writing to a deleted file?

2022-03-18 Thread Janne Johansson
Den fre 18 mars 2022 kl 16:29 skrev Harald Dunkel : > something on my gateway (7.0) is hiding disk space, AFAICS: > > # du -hs / > 3.4G/ > # df -h / > Filesystem SizeUsed Avail Capacity Mounted on > /dev/sd0a 31.5G5.6G 24.3G19%

Re: Cross-build ARM64 on AMD64. Any starting pointers?

2022-03-25 Thread Janne Johansson
Den fre 25 mars 2022 kl 09:23 skrev Slava Voronzoff : > Hello, I want to build ARM64 on my OpenBSD/amd64 machine. Any suggestions > on there to start with? I spent some time in qemu-aarch64, but while it is > working it is obviously pretty slow. http://www.openbsd.org/faq/faq5.html search for "cro

Re: openbsd, softraid recovery (I have password)

2022-04-03 Thread Janne Johansson
Den sön 3 apr. 2022 kl 15:58 skrev harold : For anyone else that wants to experiment with dual/triple-booting: > I lost data due to misunderstanding > I tell you more : > a/ I had windows and linux mint 18 (gpt/efi) > b/ I add openbsd to these double systems. Now three. Grub2 manages it. [ skipp

Re: How to track system changes?

2022-04-04 Thread Janne Johansson
Den tis 5 apr. 2022 kl 03:20 skrev Eric Thomas : > Very valuable insights. That’s a great idea. > The rysnc script was ksh/bash or cron? Ideally I’d like to use Python to > tackle something like this but I’m not against learning shell. Sounds a lot like rsnapshot (available in ports), the end res

Re: BOGUS behavior on 6.9 Spark vs. 6.9 amd64

2022-04-05 Thread Janne Johansson
Den tis 5 apr. 2022 kl 13:46 skrev Duncan Patton a Campbell : > I have 6.9 installed on an amd64 and a sparc64. On the amd tar/gzip etc. > work as > always, producing .gz files that can be uncompressed with gunzip. > > But on the sparc64, things go sideways. Instead of calling the gzip it is > i

Re: pf documentation

2022-04-07 Thread Janne Johansson
Den tors 7 apr. 2022 kl 11:12 skrev Steve Litt : > > Hi all, > > I need some easy beginner's pf documentation as well as some > intermediate pf documentation. I plan to make an OpenBSD/pf firewall. I > haven't done this in ten years, and imagine pf and the process of > turning OpenBSD into a firewa

Re: IKEV2 two devices can connect but only one can make traffic

2022-04-12 Thread Janne Johansson
Den tis 12 apr. 2022 kl 15:30 skrev Łukasz Moskała : > I remember talking with network engineer at one company I used to work at. > We used fortigate firewalls, and I asked why are we using SSLVPN instead of > ipsec-based vpn, as both were supported. > He said something along the lines of "ipsec d

Re: OpenBSD and multitasking

2022-04-26 Thread Janne Johansson
Den tis 26 apr. 2022 kl 22:50 skrev Mihai Popescu : > $ time dd if=/dev/zero of=test10g.dat bs=1m count=10240 conv=fsync > 10737418240 bytes transferred in 260.289 secs (41251827 bytes/sec) > $ time dd if=/dev/zero of=test10g.dat bs=1m count=10240 conv=fsync > 10737418240 bytes transferred in 24.00

Re: Historical Reasons For Default NAT Source Port Modification

2022-05-16 Thread Janne Johansson
Den mån 16 maj 2022 kl 10:35 skrev Elias Carter : > OpenBSD/PF defaults to randomizing the source port whereas > Linux/IPTables defaults to trying to keep the source port. > > I have found that preserving the source port if possible works better > out of the box when hosting publicly accessable UDP

Re: best place to put export variables

2022-05-19 Thread Janne Johansson
> > I want to export XDG_CACHE_HOME variable used by Xorg. > > What is the best place (file or ?) to export this variable? > > I remember i used some file to export a long time ago PS1 variable. > > Should I use ~/.login file or is it a better way to export this xorg > > variable? > Everywhere on

Re: Blocking ping scan

2022-06-18 Thread Janne Johansson
Den lör 18 juni 2022 kl 11:17 skrev Cristian Danila : > Good day! Does anyone know if OpenBSD(7.1) has the capability to be hidden > against a pingscan(nmap -sn xxx.xxx.xxx.xxx)? > In PF I have only 2 rules to block everything: > block in quick all > block out quick all > > This is a fresh OpenBSD7

Re: Additional information required for cputime

2022-06-27 Thread Janne Johansson
> Is there any other information or examples about that parameter ? > > SO far if found : `cputime = pp->p_rtime_sec + ((pp->p_rtime_usec + 50) > / 100);` > implying this parameters is in seconds, and the kernel will send a SIGXCPU > if the process is not finished after that time ? This is

Re: What software to debugging and analyzing C?

2024-05-12 Thread Janne Johansson
> I found a YouTube channel LowLevelLearning that covers various > programming languages in a manner that I find particularly helpful and > clear. For example comparing C and assembly on the same code is superb. > > In a short, he recommended valgrind to help finding memory leaks. > Other than spli

Re: smtpd outgoing mail configuration

2024-05-17 Thread Janne Johansson
Den fre 17 maj 2024 kl 08:56 skrev Pascal Deveaux : > > The command > # chown root:_smtpd /etc/mail/secrets > Return : group smtpd doesn't exist The error message doesn't match the command at all, and the _smtpd group has been in the group file for some 15 years. Look for misspellings somewhere. O

<    1   2   3   4   5   6   7   >