Updating Ports Question

2015-01-05 Thread John Merriam
doing something wrong or missing another step I should be doing but I'm not sure what it is. I haven't found any answers through searching. Any suggestions would be appreciated. Thanks! PS - devel/quirks is always there and I am assuming it should be? -- John Merriam

Re: Updating Ports Question

2015-01-05 Thread John Merriam
On 1/5/2015 7:46 PM, Stuart Henderson wrote: On 2015-01-05, trondd wrote: On Mon, Jan 5, 2015 at 4:00 PM, John Merriam wrote: If I then do another /usr/ports/infrastructure/bin/out-of-date I still see this: Collecting installed packages: ok Collecting port versions: ok Collecting port

Does portable NTPD use a drift file?

2015-01-20 Thread John Long
Does portable NTPD use a drift file? I didn't see one in the previous version and a new install of 5.7p1 doesn't seem to have one either. I didn't see any discussion of a drift file in the manpage for ntpd nor for ntpd.conf in the portable version, though it is mentioned in the man pages for the O

Re: Does portable NTPD use a drift file?

2015-01-20 Thread John Long
Hi, On Tue, Jan 20, 2015 at 08:21:32AM -0600, Brent Cook wrote: > On Tue, Jan 20, 2015 at 5:46 AM, John Long wrote: > > Does portable NTPD use a drift file? I didn't see one in the previous > > version and a new install of 5.7p1 doesn't seem to have one either. I didn&#x

Re: Does portable NTPD use a drift file?

2015-01-20 Thread John Long
On Tue, Jan 20, 2015 at 12:26:35PM -0600, Brent Cook wrote: > > > On Jan 20, 2015, at 9:59 AM, John Long wrote: > > > >> LOCALSTATEDIR "/db/ntpd.drift" > > > > Thanks, this helps. It was there, just not where I wanted since I install > > addo

Re: Does portable NTPD use a drift file? [fixed]

2015-01-20 Thread John Long
On Tue, Jan 20, 2015 at 12:26:35PM -0600, Brent Cook wrote: > Note that a new drift file is not written immediately on start, only after > the proper frequency adjustment has been determined. That might take a long > time depending on the stability of your systems's clock (e.g. VMs) and how > q

Anybody replace the disk drive in a Lemote Fuloong?

2015-01-26 Thread John Long
One of my little friends has a dead drive. Unfortunately it is shoehorned in there pretty good. Has anybody on the list replaced the disk drive on one of these and if so would you explain how you did it? Is anybody using a regular USB stick as a primary disk drive for OpenBSD and if so how well do

Re: man -m: Bad argument

2015-02-12 Thread John Merriam
that in the error message there is no space between -m and the path. That seems a bit odd. Your `test -d $HOME/man && alias man="man -m $HOME/man"` works fine for me in ksh when I put it in a .profile on 5.6 -stable. -- John Merriam

Re: man -m: Bad argument

2015-02-12 Thread John Merriam
27; gave me the error above. > > > Also, which version of OpenBSD are you running on this machine? > > 5.6 or -current? > > current/amd64 > > Jan > > Hmmm. There was one small change to man.c on January 16th but it doesn't look like that should be the problem I wouldn't think. Previous change was back in 2013. It is also possible it is something funny with shell expansion or something. Which shell are you using? I just blew away my -current machine the other day. I don't have -current running any more so I can't try to duplicate it for you. If no one else answers the thread on misc I would recommend sumitting a bug with sendbug. -- John Merriam

Re: Anybody replace the disk drive in a Lemote Fuloong?

2015-02-16 Thread John Long
On Mon, Jan 26, 2015 at 02:28:35PM +0100, Otto Moerbeek wrote: > Unscrew the four screws on the side VGA connector side. Slide the > logic board out. Unscrew the three black screws that hold the disk > bracket. The screws are unmarked but they are near R164, C174 and U32. > You can then slide the d

Re: Patching X in BASE without X

2015-03-07 Thread John Merriam
when you installed OpenBSD I would recommend not patching X. -- John Merriam

Why generate SSH keys at startup?

2015-03-11 Thread John Long
Hi, What's the reason for generating all the various SSH key types every startup? Given the source of all the new elliptical crypto I don't want to use it so I changed the cipher list in sshd_config. But /etc/rc appears to generate all missing key types every startup. What problems do I cause by

Console overrun with SPARC64 on Sun V210

2015-03-11 Thread John Long
Hi, I just installed 5.6 on a Sun V210. The console doesn't seem to know how big the terminal emulator screen is. Whether I use cu or minicom too many lines are displayed. For example top loses all the lines until about the 4th task line. All the CPU, mem stuff etc. rolls off. vi is also unusable

Re: Console overrun with SPARC64 on Sun V210

2015-03-11 Thread John Long
On Wed, Mar 11, 2015 at 10:12:46AM -0600, Abel Abraham Camarillo Ojeda wrote: > On Wed, Mar 11, 2015 at 10:05 AM, John Long wrote: > > Hi, > > > > I just installed 5.6 on a Sun V210. The console doesn't seem to know how big > > the terminal emulator screen is. Whet

Re: Console overrun with SPARC64 on Sun V210

2015-03-11 Thread John Long
On Wed, Mar 11, 2015 at 05:45:48PM +, Christian Weisgerber wrote: > On 2015-03-11, John Long wrote: > > > I just installed 5.6 on a Sun V210. The console doesn't seem to know how big > > the terminal emulator screen is. Whether I use cu or minicom too many lines >

Re: Why generate SSH keys at startup?

2015-03-12 Thread John Long
On Wed, Mar 11, 2015 at 11:13:20PM +, Christian Weisgerber wrote: > On 2015-03-10, John Long wrote: > > But /etc/rc appears to generate all missing key types every > > startup. > > Only if you delete them! Yes, that's what I said. > You can simply configure Ho

Re: Why generate SSH keys at startup?

2015-03-12 Thread John Long
On Thu, Mar 12, 2015 at 04:20:47PM +, Christian Weisgerber wrote: > On 2015-03-12, John Long wrote: > > >> You can simply configure HostKey in /etc/ssh/sshd_config. > > > > With that done a client can still do pubkey auth with a DSA key. (How) can I > > stop

Re: Why generate SSH keys at startup?

2015-03-13 Thread John Long
On Thu, Mar 12, 2015 at 07:19:25PM +, Stuart Henderson wrote: > On 2015-03-12, John Long wrote: > > On Thu, Mar 12, 2015 at 04:20:47PM +, Christian Weisgerber wrote: > >> On 2015-03-12, John Long wrote: > >> > >> >> You can simply

Re: Why generate SSH keys at startup?

2015-03-13 Thread John Long
On Thu, Mar 12, 2015 at 08:27:03PM +, Christian Weisgerber wrote: > On 2015-03-12, John Long wrote: > > >> By setting PubkeyAcceptedKeyTypes accordingly in sshd_config. > > > > Thanks, I looked and looked and could not find it in the man page. It > > appear

Re: Why generate SSH keys at startup?

2015-03-13 Thread John Long
On Thu, Mar 12, 2015 at 04:00:30PM -0400, Josh Grosse wrote: > On Thu, Mar 12, 2015 at 07:19:25PM +, Stuart Henderson wrote: > > By looking with "cvs blame sshd_config.5 | grep PubkeyAcceptedKeyTypes" > > and examine the cvs log, you can see that it was added on 2015/01/13. > > Blame? Blame?

Re: Broadcom NIC issues

2015-03-13 Thread John Merriam
east allow you to run CentOS again. I have seen strange things happen in the past when switching between OSes but that was a very long time ago. -- John Merriam

Re: Broadcom NIC issues

2015-03-13 Thread John Merriam
On Fri, 13 Mar 2015, Miguel Barbosa Gon?alves wrote: > 2015-03-13 15:56 GMT+00:00 John Merriam : > On Fri, 13 Mar 2015, Miguel Barbosa Gon?alves wrote: > > Hi! > > > > I recently installed OpenBSD 5.6 on an amd64 platform. > Everything wen

Re: SSH_CLIENT in recent OpenBSD releases

2012-10-11 Thread John Long
Missed the earlier part of this thread but... If you su - to another userid the environment variable appears to get unset. To the OP have you su'd or are do trying this immediately on login. I am running 5.1-stable and current and $SSH_CLIENT is valid on both boxes. On Thu, Oct 11, 2012 at 05:02

Re: nasm problem - SOLVED

2012-10-15 Thread John Long
On Mon, Oct 15, 2012 at 09:48:57AM -0500, Chris Bennett wrote: > On Mon, Oct 15, 2012 at 09:31:34AM -0500, Chris Bennett wrote: > > I have added this: > > > > section .note.openbsd.ident > > align 2 > > dd 8 > > dd 4 > > dd 1 > > db 'OpenBSD',0 > > dd 0 > > align 2 > > > > But get error:

Is this legal CVS?

2012-10-23 Thread John Long
I saw this in Tomaz's kernel panic post: > second one 'cvs -d $CVSROOT up -Pd ports src xenocara' The FAQ (openbsd.org/faq/faq5.html) says you can combine directories for checkout but not for update: "You can combine the checkouts into one line (-stable shown): # export CVSROOT=anon...@anoncvs.

When to update -stable?

2012-11-04 Thread John Long
I'm trying to remember how I should know when to update -stable. Is the errata web page the definitive source or is there some place else I should keep an eye on? Thanks, /jl -- ASCII ribbon campaign ( ) Powered by Lemote Fuloong against HTML e-mail X Loongson MIPS and OpenBSD and propr

Re: When to update -stable?

2012-11-05 Thread John Long
On Mon, Nov 05, 2012 at 07:40:26AM -0600, Carson Chittom wrote: > John Long writes: > > > I'm trying to remember how I should know when to update -stable. Is the > > errata web page the definitive source or is there some place else I should > > keep an eye on? >

Is this CVS message important? Trying to update -stable sources.

2012-11-07 Thread John Long
Hello misc@ Trying to update -stable sources I got the following message: root@host:/usr/src# cvs -q -d$CVSROOT up -Pd cvs server: use `cvs add' to create an entry for gnu/usr.bin/gcc/INSTALL Attempting to comply with cvs's wishes: root@host:/usr/src# cvs add gnu/usr.bin/gcc/INSTALL cvs [add ab

X app 'cant open display', In X as reg. user launching xapp from su xterm.

2012-11-27 Thread John Doe
In X as normal user, trying to launch xapp from an xterm that I have su'ed to root in. I get a 'Cant open display' error.   Please help.

Re: OpenBSD Cloud Offerings

2012-11-28 Thread John Slee
ing about in Linux or even OSX would give me a working console. Gave up and switched to ARP. ARP provide serial console emulation, which is MUCH nicer for out-of-band admin than VGA emulation (they do this too, of course) if your internets have high RTT. Not all providers do this John

Re: Isolating Firefox in a nested X server, and running as a different user

2012-12-02 Thread John Long
On Sat, Dec 01, 2012 at 08:53:53PM -0800, Robert Connolly wrote: > Hello. > > In an effort to isolate Firefox (or any graphical browser) from my > user account, I have added a 'firefox' user and group, added > 'firefox' user to sshd_config to allow x11 forwarding, and ran the > following commands:

bsd.sp and bsd.mp kernels, how to compile?

2012-12-09 Thread John Long
The last time I followed the FAQ compiling kernels was on single processor machines. I just installed OpenBSD on my daily driver dual core Intel box. The kernel, userland, and xenocara compiles ran fine as usual. Then I realized DOH! I was running the sp kernel since I never had a machine where I n

Re: bsd.sp and bsd.mp kernels, how to compile?

2012-12-09 Thread John Long
wrote: > On Sun, Dec 09, 2012 at 10:04:04AM +0000, John Long wrote: > | The last time I followed the FAQ compiling kernels was on single processor > | machines. I just installed OpenBSD on my daily driver dual core Intel > | box. The kernel, userland, and xenocara compiles ran fine as u

Re: bsd.sp and bsd.mp kernels, how to compile?

2012-12-09 Thread John Long
On Sun, Dec 09, 2012 at 12:21:34PM +0100, Paul de Weerd wrote: > On Sun, Dec 09, 2012 at 10:58:09AM +0000, John Long wrote: > | Thanks Paul. In that case I guess it would be simpler to do the sp kernel > | first since the make install causes it to get booted. Then when I do the mp >

Re: bsd.sp and bsd.mp kernels, how to compile?

2012-12-11 Thread John Long
Thanks alot for the info Norman. On Mon, Dec 10, 2012 at 08:26:56PM +0059, Norman Golisz wrote: > On Sun Dec 9 2012 11:59, John Long wrote: > > On Sun, Dec 09, 2012 at 12:21:34PM +0100, Paul de Weerd wrote: > > > Alternatively, you can `make` GENERIC and `make install` GENERIC

Re: Plausible deniable encryption

2012-12-19 Thread John Long
On Wed, Dec 19, 2012 at 07:04:49AM -0500, Nick Holland wrote: > On 12/19/12 00:50, Robert Connolly wrote: > > Assuming you have read what is out there, I have a technigur > > > > and the margin was too small... I think he could plausibly deny that...

Re: greyscanner - sender with no MX or A

2012-12-28 Thread john slee
e he didn't read 'perldoc -f system' (badrcpt will trap hosts if system() fails to spawn the external address checker) and also he should really use a proper SMTP address parser rather than a regexp hack. John

Re: Strange ksh history behaviour

2013-01-07 Thread john slee
r. At least it does on 5.1 with EDITOR=vi and VISUAL=mg (for testing's sake only) Probably best to learn one set of keys and use them in the shell as well. John

Re: Current isolation best practices?

2013-01-08 Thread John Long
> >A chroot or even just a separate user would seem to fix that problem, > >assuming they couldn't easily break out of it (probably not a safe > >assumption), but that still leaves many other issues, for example it > >would still be able to send network traffic originating from my machine, > >which

Re: new computer

2013-01-11 Thread john slee
ded that much either. Same again for my Dell Latitude corporate drone unit. If so many folks here are recommending Thinkpads, it's probably because (a) they are (or at least used to be) very well engineered laptops, and (b) shit works, yo. John

Re: How to configure pppoe client on OpenBSD?

2013-01-13 Thread John Long
On Sun, Jan 13, 2013 at 11:26:32AM -0800, Jay Jennings wrote: > Rudeness is why people find openbsd hard for newbies; and potentially new > funders of the projects and buyers of cds and merchandise.?? > > As a 5 year user ... apropos is a new page for me too. I prefer typing man -k, but whatever

OpenBSD VAX on SIMH, sloooow networking!

2013-02-05 Thread John Long
I installed OpenBSD VAX on SIMH. Host is OpenBSD 5.2 stable amd64. Networking from within SIMH is unbelievably slow. It takes 5 hours to download base52.tgz. I've done ftp and NFS installs from my own local servers, performance to my host box is 7 MB/sec. In SIMH it's about 4kb/sec. Running SIMH

Re: OpenBSD VAX on SIMH, sloooow networking!

2013-02-06 Thread John Long
On Wed, Feb 06, 2013 at 06:03:04PM +, Stuart Henderson wrote: > On 2013-02-05, John Long wrote: > > I installed OpenBSD VAX on SIMH. Host is OpenBSD 5.2 stable amd64. > > > > Networking from within SIMH is unbelievably slow. It takes 5 hours to > > download base52

dhcpd issues with Android phone

2013-03-14 Thread John Tate
I have an android phone that requests a least regularly from my dhcpd server on OpenBSD 5.2 which eventually starts failing with this error in /var/log/daemon Mar 14 21:40:42 menger dhcpd[7088]: DHCPREQUEST for 10.0.0.4 from 0c:14:20:6b:08:e5 via fxp0 Mar 14 21:40:42 menger dhcpd[7088]: DHCPNAK on

Re: dhcpd issues with Android phone

2013-03-14 Thread John Tate
I did exactly what you said, thanks! On Thu, Mar 14, 2013 at 11:16 PM, Kenneth R Westerback < kwesterb...@rogers.com> wrote: > On Thu, Mar 14, 2013 at 09:46:04PM +1100, John Tate wrote: > > I have an android phone that requests a least regularly from my dhcpd > > server

PHP & mini_sendmail problems

2013-03-14 Thread John Tate
I've been trying to get PHP to be able to email from a chrooted apache server. Running without chroot is not an option. I can't find clear documentation on doing this, and the logs don't contain any errors I can find about the problem. I've put mini_sendmail in /var/www/usr/sbin/sendmail and /bin/

Re: PHP & mini_sendmail problems

2013-03-14 Thread John Tate
-O2 -pipe -DHAS_FGETLN -DHAS_STRLCPY -c openbsd_compat.c cc femail.o openbsd_compat.o -o femail cc -static femail.o openbsd_compat.o -o femail-static # make install # femail j...@johntate.org Hello, john. # whereis femail # How do I put femail into my /var/www? On Fri, Mar 15, 2013 at 5:

Re: PHP & mini_sendmail problems

2013-03-14 Thread John Tate
at 06:51:54PM +, Alexey E. Suslikov wrote: > >> John Tate johntate.org> writes: > >> > >> > > >> > I've been trying to get PHP to be able to email from a chrooted apache > >> > server. Running without chroot is not an option. I can

Re: PHP & mini_sendmail problems

2013-03-14 Thread John Tate
>From the end of error_log: femail: no recipients On Fri, Mar 15, 2013 at 6:31 AM, John Tate wrote: > I installed femail-chroot and put /usr/libexec/ld.so in > /var/www/usr/libexec/ld.so and updated /etc/php-5.2.ini but it still > doesn't work. > > > On Fri, Mar 1

Re: PHP & mini_sendmail problems

2013-03-14 Thread John Tate
51:54PM +0000, Alexey E. Suslikov wrote: > > > John Tate johntate.org> writes: > > > > > > > > > > > I've been trying to get PHP to be able to email from a chrooted > apache > > > > server. Running without chroot is not an optio

Squid not working for connections from ssh-tunnel

2013-03-15 Thread John Tate
I have a server I use to serve a squid proxy only accessible via ssh tunnel, which has worked fine for over a year. I upgraded from OpenBSD 5.1 to OpenBSD 5.2 and I've also rebuilt squid in ports. It has stopped working for ssh tunnel connections. It works for the elinks browser, but both should be

Re: Squid not working for connections from ssh-tunnel

2013-03-16 Thread John Tate
at.pl:443 is ALLOWED, because it matched 'Safe_ports' It only started doing this after I upgraded from 5.1 to 5.2 and rebuilt squid in ports. On Sat, Mar 16, 2013 at 9:26 AM, Stuart Henderson wrote: > On 2013-03-15, John Tate wrote: > > I have a server I use to serv

resize disklabel partitions and ffs filesystems

2013-03-17 Thread John Tate
I had a problem building something in ports ports with a default 2.0gb /usr. I tried moving ports to /home/usr/ports to /usr/ports but I get... Fatal: /usr/ports is a symlink. Please set to the real directory Can I resize disklabel partitions and ffs filesystems? If I can't I'm going to have to

Can't get vsftpd to run

2013-04-01 Thread John Tate
I've not used it in a while and I can't get it to run. I can't find any logging options or anything. # vsftpd ... (It just sits there doing nothing) How do I get it to work? I'm using the default config with only my own banner. -- www.johntate.org

Re: Can't get vsftpd to run

2013-04-01 Thread John Tate
I can't find that config option. On Tue, Apr 2, 2013 at 9:52 AM, Stuart Henderson wrote: > On 2013-04-01, John Tate wrote: > > I've not used it in a while and I can't get it to run. I can't find any > > logging options or anything. > > > > # v

Re: Can't get vsftpd to run

2013-04-01 Thread John Tate
I found it but it wasn't in there commented out, I added background=yes, but the server isn't accepting connections for some reason. On Tue, Apr 2, 2013 at 4:13 PM, John Tate wrote: > I can't find that config option. > > > On Tue, Apr 2, 2013 at 9:52 AM, Stuart Hende

Re: Can't get vsftpd to run

2013-04-01 Thread John Tate
network so I assume it's pf. pass in on egress inet proto tcp from any to (egress) \ port > 49151 I've added that line but where do I set the ports on vsftpd? On Tue, Apr 2, 2013 at 4:30 PM, Richard Toohey < richardtoo...@paradise.net.nz> wrote: > On 04/02/13 18:1

Re: Can't get vsftpd to run

2013-04-01 Thread John Tate
Nevermind, found it. On Tue, Apr 2, 2013 at 4:45 PM, John Tate wrote: > Where do I set ports in vsftpd.conf for incoming data, I've just looked > around that link you provided and I can't find the option. > > I can't get through to vsftpd or pure_ftpd, probably becau

Re: Can't get vsftpd to run

2013-04-01 Thread John Tate
on # with the listen_ipv6 directive. listen=YES # # This directive enables listening on IPv6 sockets. To listen on IPv4 and IPv6 # sockets, you must run two copies of vsftpd with two configuration files. # Make sure, that one of the listen options is commented !! #listen_ipv6=YES background=YES

Can't get FTP through pf

2013-04-03 Thread John Tate
I've got a gateway computer I also I want to be an ftp server. I've put everything through pf as per http://openbsd.org/faq/pf/ftp.html Can anyone see something I've missed in this config? I can't access it remotely. # grep -v -e ^# -e ^$ /etc/vsftpd.conf anonymous_enable=NO local_enable=YES dirm

Re: Can't get FTP through pf

2013-04-04 Thread John Tate
Thanks! On Thu, Apr 4, 2013 at 4:29 PM, David Diggles wrote: > Looks like these are your conflicting rules. > > > pass in quick inet proto tcp to port ftp divert-to 127.0.0.1 port 8021 > > pass in on $ext_if proto tcp to port 21 > > The first rule needs to be on $int_if - you didn't specify an

httpd.conf problem with defaults

2013-04-04 Thread John Tate
I think I have a problem with my defaults. I used to just have a default a secusrvr.com. The default would point to /var/www/htdocs which redirects to /var/www/sites/secusrvr.com which is for the virtualhost secusrvr.com. I added johntate.org and www.johntate.org both under /var/www/sites/ www.john

Re: httpd.conf problem with defaults

2013-04-04 Thread John Tate
erride All NameVirtualHost 208.79.92.130:80 NameVirtualHost 127.0.0.1:80 DocumentRoot "/var/www/sites/www.johntate.org" ServerName www.johntate.org allow from all Options +Indexes AllowOverride All NameVirtualHost 208.79.92.130:80 NameVirtualHost 127.0.0.1:80 DocumentRoot "/var/www/s

Re: httpd.conf problem with defaults

2013-04-06 Thread John Tate
Henderson wrote: > On 2013-04-05, John Tate wrote: > > NameVirtualHost 127.0.0.1:443 > > NameVirtualHost 208.79.92.130:443 > > NameVirtualHost 127.0.0.1:80 > > NameVirtualHost 127.0.0.1:80 > > NameVirtualHost 127.0.0.1:80 > > NameVirtualHost 208.

Re: httpd.conf problem with defaults

2013-04-06 Thread John Tate
Thanks, that worked. On Sun, Apr 7, 2013 at 6:45 AM, Zé Loff wrote: > On Sat, Apr 06, 2013 at 08:55:53PM +1100, John Tate wrote: > > Removed all the NameVirtualHost lines and it still isn't working. I can't > > make sense of it everything looks fine, I get so

pf queueing and nat

2013-04-16 Thread John Tate
I am adding queueing to my pf based nat for my home network. Since there isn't a complete example involving nat and queuing I am not entirely sure where to put things. I've read the manual and I think I put things before the rdr-to rules. I also have a transparent ftp and http proxy. I am not entir

Re: pf queueing and nat

2013-04-16 Thread John Tate
onsole has died :-(. On Wed, Apr 17, 2013 at 4:05 AM, Christopher Zimmermann wrote: > On Wed, 17 Apr 2013 03:32:52 +1000 > John Tate wrote: > > > I am adding queueing to my pf based nat for my home network. Since > > there isn't a complete example involving nat and queuing

Re: pf queueing and nat

2013-04-17 Thread John Tate
I can't find any description of the match rules here: http://openbsd.org/faq/pf/filter.html Are they the same syntax as block and pass rules? On Wed, Apr 17, 2013 at 4:56 AM, Peter N. M. Hansteen wrote: > John Tate writes: > > > I think I understand, can someone give me a

Re: pf queueing and nat

2013-04-17 Thread John Tate
Found it in the manpage pretty quick;y, silly me, apparently is the same. On Wed, Apr 17, 2013 at 5:16 PM, John Tate wrote: > I can't find any description of the match rules here: > http://openbsd.org/faq/pf/filter.html > > Are they the same syntax as block and pass rules? >

Re: pf queueing and nat

2013-04-17 Thread John Tate
t proto tcp to (egress) port $fekete_ports rdr-to $fekete pass in inet proto icmp all icmp-type $icmp_types pass in on $int_i On Wed, Apr 17, 2013 at 5:17 PM, John Tate wrote: > Found it in the manpage pretty quick;y, silly me, apparently is the same. > > > On Wed, Apr 17, 2013 at

Re: pf queueing and nat

2013-04-17 Thread John Tate
t 80 rdr-to $comp3 pass in on egress inet proto tcp to (egress) port $murphy_ports rdr-to $murphy pass in on egress inet proto tcp to (egress) port $fekete_ports rdr-to $fekete pass in inet proto icmp all icmp-type $icmp_types pass in on $int_if On Wed, Apr 17, 2013 at 8:32 PM, Stuart Henderson

Re: pf queueing and nat

2013-04-17 Thread John Tate
Oh wait I've forgot to specify the interface. On Thu, Apr 18, 2013 at 5:45 AM, John Tate wrote: > Well I had the bandwidth the wrong way around for my internet connection. > > I've been trying the other changes and now I have problems, I'm pretty > sure I need to

PF blocking something it seems it shouldn't

2013-04-25 Thread John Tate
My pflog interface shows something being blocked that simply shouldn't be blocked as far as I understand my pf rules... 11:35:40.461658 rule 6/(match) block in on fxp0: 10.0.0.4.40926 > 141.101.113.245.443: FP 0:253(253) ack 1 win 2540 (DF) My pf.conf... menger:root # cat /etc/pf.conf # $

Forwarding to a proxy on a different system with pf

2013-05-03 Thread John Tate
I have a squid proxy listening in transparent mode on another faster system, but I can't seem to get packets there with pf. I tried simply modifying the other divert-to rule to use the IP address of that system. It doesn't seem to work, packets don't reach that system. #pass in quick on $int_if in

PHP fastcgi, suexec

2013-05-03 Thread John Tate
I want to use fastcgi and suexec to run php programs as particular users from Apache in a chroot. I've found documentation on running suexec, but I can't find anything OpenBSD specific on getting fastcgi and php into the chroot so I can use them. If you could at least please just point me in the di

virtio doesn't support volumes >2tbytes

2013-05-07 Thread John Morrissey
time sudo newfs /dev/rsd8c newfs: wtfs: write error on block 6442450943: Input/output error 0m0.01s real 0m0.00s user 0m0.01s system vioblk8 at virtio10 scsibus8 at vioblk8: 2 targets sd8 at scsibus8 targ 0 lun 0: SCSI3 0/direct fixed sd8: 3145728MB, 512 bytes/sector, 6442450944 sectors

Re: Executable signing - a proposal

2015-03-31 Thread John Merriam
enough people would be willing to accept the large slow down that would result. So, you probably won't end up with enough interested people needed to gain any momentum. And, as others have mentioned, it will only protect against certain attacks, and determined attackers will be able to get around it. -- John Merriam

Re: differences between pk_add -u and building from source at stable

2015-04-01 Thread John Merriam
x27;t tried OpenBSD on the desktop yet (routers/firewalls and servers so far). Compiling huge stuff that updates often like Firefox could be kind of a pain I would guess. -- John Merriam

Re: differences between pk_add -u and building from source at stable

2015-04-02 Thread John Merriam
On Thu, 2 Apr 2015, Kevin Chadwick wrote: > On Wed, 01 Apr 2015 22:34:06 -0400 > John Merriam wrote: > > > I don't mind using ports instead of packages myself. But, I haven't > > tried OpenBSD on the desktop yet (routers/firewalls and servers so far). > >

Re: What happens to OpenBSD when Secure Boot becomes manditory?

2015-04-02 Thread John Merriam
e 'secure boot' is something that I have complete control over. I would rather use a typewriter... -- John Merriam

Re: Tips & tricks about using mysql under OpenBSD

2015-04-03 Thread John Merriam
ou should have some guess as to how it will work. If not I would say start with the my-huge.cnf MySQL config and go from there. Try to do some testing, particularly try to simulate the load before you go to production. I'm thinking fast CPUs and fast disks will be your best friends on this project. -- John Merriam

Re: differences between pk_add -u and building from source at stable

2015-04-05 Thread John Merriam
On 4/5/2015 3:45 PM, Theo de Raadt wrote: Indeed. Kind of amusing. Entirely possible a mtier person commits to the port John is worried about. Like all of us they are volunteers... So John, who will you trust? And why will you trust them, or not trust them? In fact, taken far enough... why

Re: .kshrc Definitions under X

2015-04-10 Thread John Merriam
ograms, etc.) in which case you wouldn't want login shell type things being set up. -- John Merriam

Apache2 on 5.7 = certificate error

2015-05-18 Thread John Merriam
and dovecot on the same server and it is working fine with those two daemons. Any ideas or suggestions as to what the problem may be or where I should start digging? Thanks! -- John Merriam

Re: Apache2 on 5.7 = certificate error

2015-05-18 Thread John Merriam
On Mon, 18 May 2015, Stefan Sperling wrote: > On Mon, May 18, 2015 at 10:04:03AM -0400, John Merriam wrote: > > I get the following error in the error_log when I try to start Apache2: > > > > [Mon May 18 09:51:43 2015] [error] Failed to configure CA certificate &g

Re: df(1) shows strange Avail and Capacity info

2015-05-19 Thread John Merriam
rtition with: tunefs -N / You can also see a description of this feature in the notes for the -m option in the tunefs(8) man page. -- John Merriam

Re: Phone suggestion.

2015-05-25 Thread John Long
On Sun, May 24, 2015 at 12:51:39PM +0530, Jay Patel wrote: > Blackberry for security? or something else. BlackBerry has notably fewer exploits than other platforms, especially Android-anything. I haven't bought a new one recently but the older ones were actually good phones as in they don't drop c

Re: Openbsd 5.7 and sendmail

2015-05-26 Thread John Merriam
sendmail fixed my problem. > You may need to edit your /etc/mailer.conf file. See the mailer.conf(5) man page and /usr/local/share/doc/pkg-readmes/sendmail-* -- John Merriam

Re: OpenBSD 5.7 & Asterisk & sendmail & voice mail as email

2015-05-28 Thread John Merriam
/doc/pkg-readmes/sendmail-* Particularly the 'Tweaking /etc/mailer.conf' and 'Client mail queue ownership' sections. I would bet that either your /var/spool/clientmqueue isn't owned by _smmsp:_smmsp or your submit.cf is using the old smmsp user/group. -- John Merriam

Re: Whooda thunkit?

2015-06-03 Thread John Long
On Wed, Jun 03, 2015 at 10:31:26AM +1000, Rod Whitworth wrote: > Microsoft To Support SSH In Windows and Contribute To OpenSSH > > Seen on /. this morning (Australia EST) > > I hope the contributations are generous.. I hope the contributions are money rather than code... /jl

Q: Assistance with pf.conf rules

2015-06-18 Thread John Nyhuis
block drop in log quick on $br from to any If anyone could point out why I can ssh into the LAN, but get blocked by sshing to the management interface of the firewall, you have my gratitude. -- Thanks, John Nyhuis IT Manager, Stam Lab 2211 Elliott Avenue 6th Floor, 6S139 Seattle, WA 98121 O: (206)-267-1097 ext 220 F: (206)-441-3033

Fwd: Re: Q: Assistance with pf.conf rules

2015-06-24 Thread John Nyhuis
ve a better way? Thanks, John Nyhuis IT Manager, Stam Lab 2211 Elliott Avenue 6th Floor, 6S139 Seattle, WA 98121 O: (206)-267-1097 ext 220 F: (206)-441-3033 Forwarded Message Subject: Re: Q: Assistance with pf.conf rules Date: Mon, 22 Jun 2015 18:42:25 -0500 From: Edgar Pettijohn

Re: SPARC minimum hardware specification

2015-07-19 Thread John Long
On Fri, Jul 17, 2015 at 11:15:14AM -0500, BSD wrote: > On Thu, 16 Jul 2015 21:09:30 +0300 > Mihai Popescu wrote: > > > Hello, > > > > I never used a SPARC machine but I recall there are some people on the > > list doing this. > > > > What are the minimum requirements for a "decent" SPARC machin

Re: SPARC minimum hardware specification

2015-07-20 Thread John Long
On Mon, Jul 20, 2015 at 09:53:13AM +0100, Graham Stephens wrote: > Another thing to bear in mind is the pitch of the noise; I find that > loudish but low-frequency sound (like from 4-inch+ fans) isn't that > uncomfortable, but the whine from 1U 1 inch fans get unbearable > REALLY quickly. I agree

Re: SPARC minimum hardware specification

2015-07-20 Thread John Long
On Sun, Jul 19, 2015 at 01:51:34PM -0400, Raul Miller wrote: > On Sun, Jul 19, 2015 at 11:03 AM, John Long wrote: > > Sun Fire servers are cheap to buy but not to run. A V210 is a 1U box and > > with dual 1.35 CPUs it is fast enough for desktop use. It's not something

Re: SPARC minimum hardware specification

2015-07-20 Thread John Long
On Sun, Jul 19, 2015 at 05:59:17PM +, Christian Weisgerber wrote: > On 2015-07-19, John Long wrote: > > > OpenBSD mips64el runs oustandingly well on the Lemote boxes. See here: > > http://www.openbsd.org/loongson.html > > Given that only about 2/3 of the ports tree

Re: SPARC minimum hardware specification

2015-07-20 Thread John Long
On Sun, Jul 19, 2015 at 09:09:56PM +0200, ludovic coues wrote: > 2015-07-19 17:03 GMT+02:00 John Long : > > > > OpenBSD mips64el runs oustandingly well on the Lemote boxes. See here: > > http://www.openbsd.org/loongson.html > > > > I don't think anybody will

no more sudo on openbsd 5.8

2015-08-07 Thread John Naggets
I run something as root now? Do I really need to setup a root account from autoinstall? Regards John

Re: no more sudo on openbsd 5.8

2015-08-09 Thread John Naggets
Thanks to all for your feedback. I will definitely go for the option of distributing my own site58.tgz with doas.conf. Sounds great! On Fri, Aug 7, 2015 at 10:23 PM, Stuart Henderson wrote: > On 2015-08-07, John Naggets wrote: >> Hello, >> >> I just installed OpenBSD snap

How full can a ffs filesystem be?

2016-02-23 Thread John Long
Is there any rule of thumb as to how full an ffs filesystem can be without impacting performance or integrity issues? Thanks, /jl -- ASCII ribbon campaign ( ) Powered by Lemote Fuloong against HTML e-mail X Loongson MIPS and OpenBSD and proprietary/ \http://www.mutt.org atta

<    1   2   3   4   5   6   7   8   9   10   >