Re: Squid3 in intercept mode

2013-06-19 Thread Peter J. Philipp
On 06/19/13 15:08, Lars Noodén wrote: I'm running into some difficulty with "access denied" in squid3 when I switch it to act as an intercepting proxy. It works as normal when I use it as a regular proxy but when turning on intercepting (formerly transparent proxying) the web browser shows this

floods in Calgary, is the project affected?

2013-06-22 Thread Peter J. Philipp
It's all over the news (BBC, ARD) that there is floods in Calgary. And I'm wondering if the OpenBSD servers are affected since they are in a basement afaik. Is the physical location secure from these floods? Regards, -peter

Re: pms0: not in sync yet, discard input (state 3)

2013-09-15 Thread Peter J. Philipp
On Sun, Sep 15, 2013 at 02:05:00AM +0200, frantisek holop wrote: > > > after upgrading to the september 10 snapshot, > > > i am not able to use the touchpad. > > > > What were you running before upgrading to that snapshot? > > aug 18 snapshot > > > > pms0: not in sync yet, discard input (state 1

iked with rdomain getting an error

2013-10-25 Thread Peter J. Philipp
I've been trying to set up a second gif tunnel that's encrypted with ipsec (iked for key management), but I'm stuck on an error with iked. Here is what I see and have: # route -T 1 exec iked -f /etc/iked.conf2 # Oct 25 17:59:44 uranus iked[32297]: pfkey_reply: message: Network is unreachable Oct 2

Re: iked with rdomain getting an error

2013-10-25 Thread Peter J. Philipp
On 10/25/13 20:40, Reyk Floeter wrote: > On 25.10.2013, at 12:08, Peter J. Philipp wrote: > >> I've been trying to set up a second gif tunnel that's encrypted with >> ipsec (iked for key management), but I'm stuck on an error with iked. >> Here is what

nvidia driver what do you recommend

2013-10-28 Thread Peter J. Philipp
I remember someone else writing to this list before saying the nvidia driver is really slow. I just upgraded my main workstation from 5.3 to 5.4 and it indeed is. So I'm wondering what driver I should use because the choppyness of moving windows is laughable, a sad kind of laugh. Do you recommen

Re: nvidia driver what do you recommend

2013-10-29 Thread Peter J. Philipp
On 10/28/13 11:44, Brett Mahar wrote: > On Mon, 28 Oct 2013 11:20:32 +0100 > "Peter J. Philipp" wrote: > > | I remember someone else writing to this list before saying the nvidia > | driver is really slow. I just upgraded my main workstation from 5.3 to > | 5.4 and i

does this patch make sense?

2013-11-07 Thread Peter J. Philipp
Just for extra paranoia's sake? Against 5.4 sources. -peter diff -u -p -u -r1.82 traceroute.c --- traceroute.c10 Feb 2012 23:05:54 - 1.82 +++ traceroute.c7 Nov 2013 14:36:44 - @@ -310,6 +310,7 @@ main(int argc, char *argv[]) const char *errstr; long l

Re: does this patch make sense?

2013-11-07 Thread Peter J. Philipp
On 11/07/13 15:41, Peter J. Philipp wrote: > Just for extra paranoia's sake? Against 5.4 sources. > > -peter > > diff -u -p -u -r1.82 traceroute.c > --- traceroute.c10 Feb 2012 23:05:54 - 1.82 > +++ traceroute.c7 Nov 2013 14:36:44 - >

Re: does this patch make sense?

2013-11-07 Thread Peter J. Philipp
On 11/07/13 17:32, Ted Unangst wrote: > On Thu, Nov 07, 2013 at 17:19, Peter J. Philipp wrote: > >>> + gid = getgid(); >>> + >>> + if (setgroups(1, &gid) == -1) >>> + err(1, "setgroups"); >>> + >>

Re: does this patch make sense?

2013-11-07 Thread Peter J. Philipp
On 11/07/13 17:48, Otto Moerbeek wrote: > On Thu, Nov 07, 2013 at 11:32:48AM -0500, Ted Unangst wrote: > >> On Thu, Nov 07, 2013 at 17:19, Peter J. Philipp wrote: >> >>>> + gid = getgid(); >>>> + >>>> + if (setgroups(

Re: does this patch make sense?

2013-11-07 Thread Peter J. Philipp
On 11/07/13 20:33, Peter J. Philipp wrote: > On 11/07/13 17:48, Otto Moerbeek wrote: >> On Thu, Nov 07, 2013 at 11:32:48AM -0500, Ted Unangst wrote: >> >>> On Thu, Nov 07, 2013 at 17:19, Peter J. Philipp wrote: >>> >>>>> + gid = getgid(); &g

Re: QEMU CPU cores not showing up

2013-11-13 Thread Peter J. Philipp
On 11/13/13 22:13, Mike Larkin wrote: > On Wed, Nov 13, 2013 at 09:44:11PM +0100, Otto Moerbeek wrote: >> On Wed, Nov 13, 2013 at 08:26:57PM +, Bruno Delbono wrote: >> >>> Hi Otto, >>> >>> http://pastebin.com/zfkEUxX8 >>> >>> This is generic.mp with flags of apm and acpi disable >>> > > Why w

Re: Music Stutters If Firefox Is Launched

2009-03-18 Thread Peter J. Philipp
On Wed, Mar 18, 2009 at 09:41:24AM -0400, Jeff Flowers wrote: > In OpenBSD 4.4, I have noticed that if I launch Firefox when I am > already playing an audio CD (cdio) or listening to music (mpg123), the > audio will stutter. Usually it will recover and continue normal > playback but sometimes it ca

Re: Music Stutters If Firefox Is Launched

2009-03-18 Thread Peter J. Philipp
On Wed, Mar 18, 2009 at 04:50:27PM +0100, Peter J. Philipp wrote: > I get stuttering when I open a large mailbox with mutt and at the same time > listening to an mp3 stream via mplayer. I don't get the stuttering however > when listening to music in another vmware guest and ch

Re: Music Stutters If Firefox Is Launched

2009-03-19 Thread Peter J. Philipp
On Wed, Mar 18, 2009 at 11:05:15PM +, Jacob Meuser wrote: > can you try the following: > > $ mpg123 file.mp3 & > $ while :; do audioctl play.{seek,errors}; sleep 1; done > log & > $ firefox; kill %2; fg %2; kill %1; fg %1 > > > and then post the contents of `log'? I modified your script a l

Re: European orders

2009-03-31 Thread Peter J. Philipp
Since Theo mentioned that some people were misled with donations and CD orders let me count up who I think gets money with OpenBSD CD's. Feel free to correct me. 1. Theo gets an undisclosed amount out of the sale, this pays for the server farm's electricity, leased lines and his income. 2. Ty

Re: Core Dev?

2018-12-03 Thread Peter J. Philipp
On Tue, Dec 04, 2018 at 06:47:55AM +, Ahmad Bilal wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Well I wrote to Theo earlier, but still haven't received a reply from him on > this (Its been 4 days). > > Does anyone has any suggestions for me? I want OpenBSD due to reliabilit

TLS with popa3d

2018-12-15 Thread Peter J. Philipp
Hi, A while back I mentioned I'd like to write a pop3 server, and someone hinted to me to use the popa3d that is in the attic. I've hacked up popa3d to use tls_server() but I'm at a dillema. Popa3d as you know forks and privseps into a popa3d user to handle AUTHORIZATION tasks while keeping the

TLS'ed popa3d (+pledge, +unveil)

2018-12-18 Thread Peter J. Philipp
Hi, I have checked out popa3d from the OpenBSD tree from 20131214 (that's the day before it was tedu'd) and wrote a tls multiplexer to it. I also added an imsg framework to further protect shadowed passwords when getpwnam_shadow() is used. The popa3d is unveiled from the start, and much later pl

Re: setup authoritative DNS for myself with nsd + unbound

2019-01-18 Thread Peter J. Philipp
On Fri, Jan 18, 2019 at 10:38:12AM -0800, Chris Bennett wrote: > I have had problems with setting up DNS for myself and I need it to be > authoritative. This means you need at least two servers for this, that will be running nsd (as supplied in base) or another authoritative dns server. Pick one

does this affect acme-client?

2019-01-21 Thread Peter J. Philipp
Does this affect the acme-client? https://community.letsencrypt.org/t/february-13-2019-end-of-life-for-all-tls-sni-01-validation-support/74209 Regards, -peter

weird permission on mandoc.db, fixed, but why?

2019-01-30 Thread Peter J. Philipp
Hi, I did something I should not have done.  I wrote a manpage and placed it in /usr/share/man/man7/ instead of /usr/local/... However when I did this the permissions on mandoc went screwy I don't know why. beta# ls -lh /usr/local/man/mandoc.db -rw---  1 root  wheel   862K Jan 28 20:56 /u

Re: weird permission on mandoc.db, fixed, but why?

2019-01-30 Thread Peter J. Philipp
Sorry I'm answering my own mail.  At that time the mandoc.db was updated, I installed some packages, nginx, php72, could having a wrong umask in my shell have caused this? Regards, -peter On 1/30/19 7:49 PM, Peter J. Philipp wrote: Hi, I did something I should not have done.  I wr

Re: amd64 cc error unknown argument '-msave-args'

2019-02-04 Thread Peter J. Philipp
On Tue, Feb 05, 2019 at 07:23:59AM +0200, Jyri Hovila [Turvamies.fi] wrote: > > > And since you are doing this with -current *ALL OVER THE PLACE* > > there are instructions that if you have trouble you should upgrade > > to a snapshot. > > Theo, with all due respect, there are many situations whe

How to shrink the SIZE memory?

2019-02-09 Thread Peter J. Philipp
Hi misc@, I have a program, a DNS server. It has a database to hold internal data. Right now it's very inneficient in the way it uses memory. Let me explain. If you know what an RRSET is it's all the RR records under one name. Like in the OpenBSD.ORG name there is a SOA, NS, A RR's and so on.

Re: How to shrink the SIZE memory?

2019-02-09 Thread Peter J. Philipp
On Sat, Feb 09, 2019 at 12:01:39PM +0100, Otto Moerbeek wrote: > Why is this a wall? Do your mmaps start failing? With what error code? Well 13G isn't the wall, but I had tried the entire /usr/share/dict/words as A records which would have given more than 200K RRSET's which would have blown up thi

Re: How to shrink the SIZE memory?

2019-02-09 Thread Peter J. Philipp
On Sat, Feb 09, 2019 at 03:15:30PM +0100, Otto Moerbeek wrote: > On Sat, Feb 09, 2019 at 12:39:37PM +0100, Peter J. Philipp wrote: > > > On Sat, Feb 09, 2019 at 12:01:39PM +0100, Otto Moerbeek wrote: > > > Why is this a wall? Do your mmaps start failing? With what error co

Re: How to shrink the SIZE memory?

2019-02-15 Thread Peter J. Philipp
On Sat, Feb 09, 2019 at 03:15:30PM +0100, Otto Moerbeek wrote: > On Sat, Feb 09, 2019 at 12:39:37PM +0100, Peter J. Philipp wrote: > > > On Sat, Feb 09, 2019 at 12:01:39PM +0100, Otto Moerbeek wrote: > > > Why is this a wall? Do your mmaps start failing? With what error co

either the cable or ix1 is duplicating frames

2019-02-23 Thread Peter J. Philipp
Hi, Can anyone confirm this for me? My ix1 is duplicating frames (10 gig copper). I switched the ports on the switch as well, it carried over. I did a ping from a mac mini from behind this router and it did not carry over a duplicate, so I'm wondering whether it's just a bpf bug? beta# tcpdump

Re: either the cable or ix1 is duplicating frames

2019-02-23 Thread Peter J. Philipp
16 seq:0) [icmp cksum ok] (ttl 63, id 5106, len 84) 11:47:52.620597 192.168.177.1 > 192.168.35.6: icmp: echo reply (id:f616 seq:0) [icmp cksum ok] (ttl 255, id 17578, len 84) There was nothing on the bridge but ix1 itself. Sorry, -peter On Sat, Feb 23, 2019 at 11:18:47AM +0100, Peter J. P

my constraints paradox

2019-02-25 Thread Peter J. Philipp
Hi, I'm currently working with TSIG (RFC 2845) on my project. The idea came to me to use it as a constraint to openntpd. This would solve a paradox on my NUC which does DNS in my apartment. The NUC's BIND uses TSIG to question a forwarder for DNS answers. TSIG relies on time to be correct with

Re: my constraints paradox

2019-02-25 Thread Peter J. Philipp
On Mon, Feb 25, 2019 at 05:04:01PM +0100, Otto Moerbeek wrote: > I've done some work in a related area, bootstrapping ntpd while using > a DNSSEC enabled resolver. If the time is off, that does not work atm. > That work was never finished because of reasons. *nod* yeah time is a decisive factor.

Re: my constraints paradox

2019-03-01 Thread Peter J. Philipp
guess, if  the need-case comes up again (that's with code that checks a time response, which isn't really needed just to get a timestamp :-)). Thanks! -peter On 2/25/19 5:04 PM, Otto Moerbeek wrote: On Mon, Feb 25, 2019 at 09:38:13AM +0100, Peter J. Philipp wrote: Hi, I'm cu

Meinberg Funkuhren DCF77 clocks

2019-03-08 Thread Peter J. Philipp
Hi, I'm wondering if this particular USB clock is supported in OpenBSD. https://www.meinbergglobal.com/english/products/usb-dcf77-clock.htm it's predecessor is the USB5131 model, which is supported under the umbg(4) driver. But this one is newer it seems, anyone got this working or am I going b

Re: Meinberg Funkuhren DCF77 clocks

2019-03-08 Thread Peter J. Philipp
On Fri, Mar 08, 2019 at 04:09:34PM -, Christian Weisgerber wrote: > On 2019-03-08, "Peter J. Philipp" wrote: > > > I'm wondering if this particular USB clock is supported in OpenBSD. > > https://www.meinbergglobal.com/english/products/usb-dcf77-clock.htm &g

Re: Meinberg Funkuhren DCF77 clocks

2019-03-13 Thread Peter J. Philipp
On Wed, Mar 13, 2019 at 04:19:48PM +0100, Christian Weisgerber wrote: > Peter J. Philipp: > > > Thanks for your reply. I mailed meinberg whether they give out datasheets > > to > > their products so that I can modify the driver. If I don't manage to make > >

XSS vuln in cvsweb

2019-03-14 Thread Peter J. Philipp
Hi all, I have been notified by a wonderful security researcher that my site was vulnerable to XSS attacks. The first one was on software I wrote, and the second one was on software I got from OpenBSD ports. Not sure if I should be writing this to the ports mailing list though. I have written M

Re: hacked for the second time

2019-04-04 Thread Peter J. Philipp
On Thu, Apr 04, 2019 at 11:42:15AM +, Cord wrote: >=20 >=20 >=20 > Sent with ProtonMail Secure Email. >=20 > ? Original Message ? > On Thursday, April 4, 2019 12:27 PM, Normen Wohner wro= te: >=20 > > Seeing that OpenBSD comes secure out of the Box the m

question about unwind

2019-04-07 Thread Peter J. Philipp
Hi, A few days ago I had some trouble resolving my website schweinfurtdating.de from home. Chrome running on OpenBSD-current from March 18th would report NXDOMAIN. I had to reload a few times to get the webpage, it was a weird experience. Since I run a very unique dns setup with TSIG'ed BIND na

Re: question about unwind

2019-04-07 Thread Peter J. Philipp
, but sorry for the noise. Regards, -peter On Sun, Apr 07, 2019 at 04:06:20PM +0200, Peter J. Philipp wrote: > Hi, > > A few days ago I had some trouble resolving my website schweinfurtdating.de > from home. Chrome running on OpenBSD-current from March 18th would report > NXDOMAIN.

apologies to some here

2019-05-01 Thread Peter J. Philipp
Hi, I was moving my mail system to another host and accidentally activated a crontab that fetchmails my inbox via POP3 to the new host. Because the mail user was not created at that point it caused bounces to go out. I think the OpenBSD ML system took care of it, but some personal emails to mem

Re: 6.5 PowerPC Packages

2019-05-09 Thread Peter J. Philipp
On Thu, May 09, 2019 at 06:12:54PM -0400, Christopher Turkel wrote: > Be careful, you could a rip a whole in the time space continuum. Speaking of ripping anything with the time space continuum. I know the CD's are an artifact of the past, but since we have time machines, can someone find out why

Re: When will be created a great desktop experience for OpenBSD?

2019-05-14 Thread Peter J. Philipp
On Tue, May 14, 2019 at 12:20:52PM +0100, Patrick Harper wrote: > On Tue, 14 May 2019, at 09:09, ULF wrote: > > If from one side is true that many modern interfaces (mostly M$, though) > > are made for people who know nothing about computing, from one another is > > clear that some good ones (in te

LACP inquiry

2019-06-18 Thread Peter J. Philipp
Hi, I had for the longest time a trunk0 on my router with failover mode. I redid the config on last friday to have trunk LACP on the Netgear switch instead. Here is my config: {internet}---[octeon router]---[netgear switch]===[Lanner 6 port firewall] I have drawn the === in there to indicate

Re: LACP inquiry

2019-06-18 Thread Peter J. Philipp
On Tue, Jun 18, 2019 at 12:31:30PM -0700, Lyndon Nerenberg wrote: > > The panic indicated that there was no memory left and > > was in UFS region. Since this is the only change I did in the last few > > month > > s > > I'm guessing there is a memory leak in the LACP routines, somewhere. > > Seem

Re: PPPoE (5.9 still): https gets stuck

2016-09-13 Thread Peter J. Philipp
Hello Harri, This interests me because I'm switching to Deutsche Telekom in february 2017. I did research back in march or april of 2016 on how to connect to Telekom with an allnet vdsl modem and I came across hints that Telekom uses vlan tagging. I made notes but I don't know how updated they

berkeleydb in ports

2016-11-04 Thread Peter J. Philipp
Hi, I'm writing because I'm wondering if people out there have had problems with the 4.6 version of Berkeley DB in ports, and I'm wondering if I'm the only one. The reason is this. I'm the author of a DNS server that uses Berkeley DB as a backend and I've stumbled on some database weirdness a fe

Re: dig/nslookup limitations - can only do NSLOOKUPs using port 53

2017-01-16 Thread Peter J. Philipp
For what it's worth, I'd like to give my 2 cents. I develop on a DNS server so I often use the -p option to test new functionality on a different port than 53. It doesn't bother me that the base openbsd dig has a pledge restriction for only port 53. Just as long as I have the ports bind package

inquiry on PIM option

2017-02-14 Thread Peter J. Philipp
Hi, I got telekom's VDSL yesterday and I have an IPTV settopbox. Yesterday I was trying to get it to work with igmpproxy but it didn't work. the IPTV box spoke igmp v3 which was ignored by igmpproxy and I suspect that's what the problem was. I tried working with mrouted then and it didn't work

Intuos Draw (uwacom) question

2017-04-11 Thread Peter J. Philipp
I'm interested in buying an Wacom Intuos Draw which is supported in 6.1. However when I go to reichelt.de the model that's available says CTL-490DW I don't know if DW is supported, can someone let me know? https://www.reichelt.de/Grafiktabletts-stifte/WACOM-CTL-490DW/3/index.html?ACTION=3&LA=5&AR

Need some pointers regarding ELF

2017-04-25 Thread Peter J. Philipp
Hi, In the past I've been examining signed binaries in the OpenBSD system. I wrote some kernel code for this, but I'm stuck before it got good. In particular the problem I have is adding an ELF header to a compiled binary. So I want to ask the pros first: what areas must I modify to get a comp

iked without psk

2014-11-06 Thread Peter J. Philipp
Hi, Since my upgrade on saturday to 5.6 my iked stopped working with psk. I've disabled it by now but the config was something of the order of: ikev2 active esp from 192.168.179.1 to 192.168.179.10 psk "icutwithanulu!" ikev2 active esp from 192.168.179.10 to 192.168.179.1 psk "icutwithanulu!" An

Re: Panic on intensive browsing of WWW.

2014-11-06 Thread Peter J. Philipp
On 11/06/14 16:48, Otto Moerbeek wrote: > > If userland activity causes kernel panics there's more trouble than > just userland ocnfiguration issues. > > -Otto > I had a panic the other day with a 5.6-stable box, unfortunately my computer didn't save the panic, trace and ps in its dmesg bu

Re: iked without psk

2014-11-10 Thread Peter J. Philipp
On Mon, Nov 10, 2014 at 02:06:33PM +0100, Mike Belopuhov wrote: > hi, > > psk is now fixed in current. > > there are two other ways to authenticate hosts: rsa pubkeys (a recent > addition - works the same way as in isakmpd) and x.509 certificates. > both these options do not require any special

Re: OpenBSD 5.6/current on Soekris 6501-70

2014-12-08 Thread Peter J. Philipp
On Mon, Dec 08, 2014 at 12:53:32AM +0100, Martin Hanson wrote: > Hi, > > Anyone running OpenBSD 5.6 or current on Soekris 6501-70 who > wouldn't mind sharing some through-put data for gigabit > performance. > > Regards, > > MH Hi, I can't tell you how much the Soekris 6501-70 does with plaint

questions to the security of softraid_crypto

2015-03-01 Thread Peter J. Philipp
Hi, I am not the best C reader and programmer out there so I try to make myself tools that may seem useless in order to better understand. I see this in /sys/dev/softraid_crypto.c int sr_crypto_encrypt(u_char *p, u_char *c, u_char *key, size_t size, int alg) { rijndael_ctx

Re: questions to the security of softraid_crypto

2015-03-01 Thread Peter J. Philipp
On 03/01/15 23:17, Ted Unangst wrote: > Peter J. Philipp wrote: >> Hi, >> >> I am not the best C reader and programmer out there so I try to make >> myself tools that may seem useless in order to better understand. I see >> this in /sys/dev/softraid_crypto.c >&

atheros on acer aspire one netbook

2012-11-15 Thread Peter J. Philipp
Hi All, I have an Acer Aspire One 722 netbook. It looks like this with the GENERIC.MP kernel: OpenBSD 5.2 (GENERIC.MP) #368: Wed Aug 1 10:04:49 MDT 2012 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP RTC BIOS diagnostic error 80 real mem = 4003721216 (3818MB) ava

Re: Hardware hunting

2012-11-16 Thread Peter J. Philipp
Am 16.11.2012 um 20:11 schrieb Russell Garrison : > I can also vouch for the Lanner, but make sure you get the fanless > model. I bought the ones with fans to go into a noisy server room, but > they spent a week or two in testing on my desk. People walking by kept > thinking that a faucet was runn

Re: preparing for installation with dual boot considerations

2013-04-05 Thread Peter J. Philipp
On 04/05/13 18:04, Andrew Gould wrote: I am a new to OpenBSD. (I have installed OpenBSD 5.2 once on an old computer with xdm and xfce enabled.) I would like to install OpenBSD on a laptop that already has an active partition setup by Windows 7 and a partition containing Windows 7. I have succe

What's the NIC speed of a G4 Cube?

2013-05-03 Thread Peter J. Philipp
I recently reworked my network and made my G4 Cube an IPSEC tunneling host. Here is what I have done. [jupiter] <> [uranus] <--- wireless network starts here ---> [wireless router] <> [mars] Jupiter is a core i7 computer running OpenBSD/amd64 Uranus is a Lanner atom based router runn

Re: What's the NIC speed of a G4 Cube?

2013-05-03 Thread Peter J. Philipp
On 05/03/13 14:03, Peter J. Philipp wrote: I recently reworked my network and made my G4 Cube an IPSEC tunneling host. Here is what I have done. [jupiter] <> [uranus] <--- wireless network starts here ---> [wireless router] <> [mars] [snip] Here is the CPU s

Re: a few questions to httpd

2015-04-01 Thread Peter J. Philipp
On Wed, Apr 01, 2015 at 05:21:47PM +0200, Markus Rosjat wrote: > I'm a german , extremly lazy and a dummy by default (ask arround you'll > see ) > but like my previous mail said I just found a pdf that provides most of > the answers I have ;) I'm a german too, but ask around we've been upgraded,

Re: Random PID implementation and security

2015-05-26 Thread Peter J. Philipp
Don't use PID for seeding ever, in fact don't use seeding. If you want a random integer use arc4random(), if you want a random buffer use arc4random_buf(). There is more even to arc4random(3) which is up to you to read in the manpage system. Sincerely, -peter

route-to looking for better ways

2015-06-05 Thread Peter J. Philipp
Hi, I have set up 2 tunnels to my VPS's from a OpenBSD pppoe gateway. Today I wanted to switch a source route from one tunnel to the other tunnel (at hetzner) and was dumbfounded after applying new rulesets [1], and killing the individual states of traffic on tun0. It didn't work so I'm left won

dnssec-signzone and NSEC3

2015-06-26 Thread Peter J. Philipp
Hi, I'm a developer of an authoritative nameserver (delphinusdnsd) and I've always developed this on OpenBSD. Lately I've been putting DNSSEC functionality into this daemon and almost completed RFC 4034 which includes NSEC,DS,RRSIG and DNSKEY RR's. I'd like to go further and put in RFC 5155 (NSE

Re: dnssec-signzone and NSEC3

2015-06-26 Thread Peter J. Philipp
On 06/26/15 10:10, David Dahlberg wrote: > Am Freitag, den 26.06.2015, 09:53 +0200 schrieb Peter J. Philipp: > >> I can't find the -3 - option to generate NSEC3 RR's with >> dnssec-signzone. Am I reading the manual page wrong or is this a >> missing feature?

which netbook not to buy?

2015-07-12 Thread Peter J. Philipp
Hi, I'm considering buying a new netbook (currently I have an October 2012 Acer Aspire One). If at all I'd like to stay with Acer but not necessarily. I'm worried about UEFI secure boot on these netbooks. Is there any Acer models that I definitely should not buy? Regards, -peter

Acer Aspire V3-112 was Re: which netbook not to buy?

2015-07-15 Thread Peter J. Philipp
On Sun, Jul 12, 2015 at 02:39:50PM +, Peter J. Philipp wrote: > Hi, > > I'm considering buying a new netbook (currently I have an October 2012 Acer > Aspire One). If at all I'd like to stay with Acer but not necessarily. I'm > worried about UEFI secure boot on

Re: Acer Aspire V3-112 was Re: which netbook not to buy?

2015-07-15 Thread Peter J. Philipp
On 07/15/15 18:28, li...@wrant.com wrote: >>> I'm considering buying a new netbook... > > So you asked what not to buy. You got some good and solid advice from > knowledgeable people here regarding what works great including > OpenBSD coverage. I'm really happy with my old netbook though. Guess

Re: OpenBSD machine was hacked

2015-07-29 Thread Peter J. Philipp
On 07/29/15 03:33, Wong Peter wrote: > Q:why do you believe that your machine was hacked? > A: My pf rules was flushed.This can prove using pfctl -sr. The whoe > firewall was not usable anymore. NO NAT nor packet filtering. Hi Peter, Can you let us know the version and architecture of OpenBSD you

LIST_PREV?

2015-09-13 Thread Peter J. Philipp
Hi, I'm programming with queue(3) and noticed there is no LIST_PREV. LIST is a doubly linked list, no? FreeBSD's LIST_PREV (from an older 11-current) looks like this: #define LIST_PREV(elm, head, type, field) \ ((elm)->field.le_prev == &LIST_FIRST((head)) ? NULL :

Re: LIST_PREV?

2015-09-13 Thread Peter J. Philipp
Actually never mind, I think I'm gonna switch to TAILQ instead. Cheers, -peter On 09/13/15 09:56, Peter J. Philipp wrote: > Hi, > > I'm programming with queue(3) and noticed there is no LIST_PREV. LIST > is a doubly linked list, no? > FreeBSD's LIST_PREV (from a

pledge, shared memory, berkeley db

2016-04-23 Thread Peter J. Philipp
Hi, A long time I tried pledging a daemon of mine but it was killed because of SYSV shared memory in Berkeley DB. Is there ongoing efforts in pledge or is it seen as a done effort? If I could make a feature request it's support for programs with berkeley db (4+) backend. I'm donating a bit of m

Re: Comprehensive user's/programmer's manual for OpenBSD: Do they exist?

2016-05-08 Thread Peter J. Philipp
On Sat, May 07, 2016 at 11:12:56AM +, David Lou wrote: > I wasn't able to find such a thing but perhaps I just missed it. I > am wondering if anyone in the community knows whether such manuals > exist for OpenBSD. Manpages are nice but they're not what I'm looking > for. Trying to learn OpenBSD

SYN_RCVD

2016-06-03 Thread Peter J. Philipp
Hi, In Mac OS X when I spoof a packet to it it prints somethign like this in the netstat -na: - Active Internet connections (including servers) Proto Recv-Q Send-Q Local Address Foreign Address (state) tcp4 0 0 192.168.180.64.22 20.20.20.20.29991 SYN_

Re: SYN_RCVD

2016-06-07 Thread Peter J. Philipp
On 06/06/16 21:57, Claudio Jeker wrote: > OpenBSD uses the syncache for TCP sockets in the 3 way handshake to save a > lot of work to create a full socket in case of synfloods, etc. > These unhatched sockets do not show up in the netstat output. Maybe they > should be added but this is the first re

Re: SYN_RCVD

2016-06-07 Thread Peter J. Philipp
On 06/07/16 15:33, Claudio Jeker wrote: > On Tue, Jun 07, 2016 at 09:35:39AM +0200, Peter J. Philipp wrote: >> On 06/06/16 21:57, Claudio Jeker wrote: >>> OpenBSD uses the syncache for TCP sockets in the 3 way handshake to save a >>> lot of work to create a full socke

Re: simple DNS lookup utility

2016-07-26 Thread Peter J. Philipp
On Tue, Jul 26, 2016 at 01:00:43AM -0300, Rodrigo Mosconi wrote: > Hi, > > For a course work, I wrote a simple DNS lookup utility using only the > native libc. It`s not yet a complete replacement for dig/host/nslookup, > but I can work to improve it later. > I would like to receive any comments a

Re: fork w/o execv

2016-07-31 Thread Peter J. Philipp
On Sun, Jul 31, 2016 at 09:05:52AM +, Luke Small wrote: > I'm trying to do some operations in which I fork and the child closes and > simplifies socketpair listings and sends the simpler list of malloced file > descriptors to a function and sends ioctl data after it opens a socket. The > parent

Re: mss and obsd

2016-08-02 Thread Peter J. Philipp
Hi, The maximum payload in ping.c (all source has been run through cat -n) is: 92 #define MAXPAYLOAD (IP_MAXPACKET - MAXIPLEN - 8) /* max ICMP payload size */ which consists of: 90 #define MAXIPLEN60 This is the maximum IP len since the value is leftshifted by 2 and cons

Re: Security updates and packages

2016-08-19 Thread Peter J. Philipp
> You even come to the conclusion that such work isn't going to happen > for free, but leave the result dangling. Especially since OpenBSD > isn't a PRODUCT. If product-servicing is a requirement, first of all > choose something which is a PRODUCT, then choose a PRODUCT VENDOR who > actually does

Re: Security updates and packages

2016-08-19 Thread Peter J. Philipp
On 08/19/16 17:43, Theo de Raadt wrote: >>> You even come to the conclusion that such work isn't going to happen >>> for free, but leave the result dangling. Especially since OpenBSD >>> isn't a PRODUCT. If product-servicing is a requirement, first of all >>> choose something which is a PRODUCT,

Banana Pi R1 - any hints?

2016-09-02 Thread Peter J. Philipp
Hi, Recently I got a Banana Pi R1 (the one with 5 RJ 45 slots). Physically it looks like it has 1 RJ45 slot in one circuit and the 4 others in another. As a test I ran raspbian OS on it and it worked. For OpenBSD I got it to get to to boot prompt and it loads the kernel but from then on it swit

Re: Problem with PPPoE

2014-07-22 Thread Peter J. Philipp
On 07/23/14 08:06, Thorsten Bonck wrote: > On Tue, Jul 22, 2014 at 05:28:46PM -0300, Felipe Mesquita de Oliveira wrote: >> >> # ifconfig pppoe0 >> pppoe0: flags=28855 >> mtu 1492 >> priority: 0 >> dev: bge0 state: PADI sent >> sid: 0x0 PADI retries: 7 PADR retries: 0 >>

Re: The rant about browsers

2014-08-23 Thread Peter J. Philipp
On 08/23/14 19:59, Amit Kulkarni wrote: > That is your problem...memory You will definitely see better performance > with more memory. I use Pentium G2020 with 8GB of memory and the > performance is good for browsing/occasional video with daily restart. Tweak > the follwoing variables in /etc/logi

Re: OpenBSD 5.6 theme song?

2014-09-16 Thread Peter J. Philipp
On 09/16/14 05:17, Philip Guenther wrote: > On Mon, Sep 15, 2014 at 6:43 PM, Chuck Burns wrote: > ... >> And now a bunch of people in the channel want this spoof to get finished >> and become the new theme song for the upcoming 5.6 release. > > Heh. I've been heavily involved in the theme and de

Re: OpenBSD 5.6 pre-orders in Germany possible

2014-09-27 Thread Peter J. Philipp
On 09/27/14 20:15, Stefan Berger wrote: > On Sat, Sep 27, 2014 at 07:30:45AM +0100, OpenBSD Europe wrote: >>> Hi folks, >>> >>> I just noticed that in Germany "Lehmanns" (see OpenBSD's order-site) >>> already accepts pre-orders for OpenBSD 5.6-release. >>> >>> Guess what I just did :-) >>> >>> My l

pf matching the ttl of a packet

2014-10-15 Thread Peter J. Philipp
My DNS server is being used in a reflection attack. I can tell its a reflection attack by the incoming ttl of the DNS packet and the ping ttl as returned with ping. They differ, meaning it's spoofed from another site. While the system it's on is FreeBSD and it's pf is outdated, I didn't see an o

looking for coding hints with ptrace(2)

2014-10-17 Thread Peter J. Philipp
I'm trying to read the stack of another process that has the same user credentials. Here is my program, I am stuck with this, it doesn't work for me. Printing 0's is rewrapped to '.' and you should use this program with hexdump like so: ./memtest [pid] | hexdump -C | less Sometimes I get a bit o

Re: looking for coding hints with ptrace(2)

2014-10-17 Thread Peter J. Philipp
On 10/17/14 22:38, Theo de Raadt wrote: >> I'm trying to read the stack of another process that has the same user >> credentials. Here is my program, I am stuck with this, it doesn't work >> for me. Printing 0's is rewrapped to '.' and you should use this program >> with hexdump like so: ./memte

is this normal or problematic?

2014-10-23 Thread Peter J. Philipp
I have a tcpdump set in the background on OpenBSD 5.5-current from: mercury$ sysctl kern.version kern.version=OpenBSD 5.5-current (MERCURY.MP) #2: Sat Jun 21 08:24:41 CEST 2014 r...@mercury.centroid.eu:/usr/src/sys/arch/amd64/compile/MERCURY.MP late June (waiting for 5.6). Now my problem is

Re: is this normal or problematic?

2014-10-23 Thread Peter J. Philipp
On 10/23/14 18:55, Peter J. Philipp wrote: > I have a tcpdump set in the background on OpenBSD 5.5-current from: > > mercury$ sysctl kern.version > kern.version=OpenBSD 5.5-current (MERCURY.MP) #2: Sat Jun 21 08:24:41 > CEST 2014 > r...@mercury.centroid.eu:/usr/src/sys/

Re: is this normal or problematic?

2014-10-23 Thread Peter J. Philipp
On 10/23/14 21:10, Mike Larkin wrote: > On Thu, Oct 23, 2014 at 06:55:11PM +0200, Peter J. Philipp wrote: >> I have a tcpdump set in the background on OpenBSD 5.5-current from: >> >> mercury$ sysctl kern.version >> kern.version=OpenBSD 5.5-current (MERCURY.MP) #2: Sa

weird problem in Germany / TCP related

2014-10-29 Thread Peter J. Philipp
I'm looking for people who may have the same problem as I. Let me describe it. When I'm at my parents house using the OpenBSD laptop, my TCP connections from there experience degragations, lost and dropped packets somewhere in the Internet, this causes retransmissions in TCP which I have tracked.

Re: weird problem in Germany / TCP related

2014-10-29 Thread Peter J. Philipp
On 10/29/14 13:15, Henrik Friedrichsen wrote: > Hey, > > On Wed, Oct 29, 2014 at 09:42:21AM +0100, Peter J. Philipp wrote: >> So I'm looking for more people who use DTAG who have experienced >> degragations (mostly noticed in running screen or tmux and having >> sw

Re: 5.6 arrived

2014-10-29 Thread Peter J. Philipp
On 10/29/14 18:04, ian kremlin wrote: > 5.6 arrived today in syracuse, new york. right on time, just as usual. :) It arrived yesterday in Schweinfurt, Germany. This time the seal was not broken :-). -peter

Re: Logging Password change attempts

2014-10-30 Thread Peter J. Philipp
On 10/30/14 13:56, Vijay Sankar wrote: > Quoting Alexander Hall : > >> On October 30, 2014 1:26:25 PM CET, Vijay Sankar >> wrote: >>> I have been using a simple script >>> >>> # mypasswd.sh >>> /usr/bin/passwd -l >>> if [[ $? != 0 ]]; then >>> /usr/bin/logger "Unsuccessful attempt to chan

Re: Logging Password change attempts

2014-10-30 Thread Peter J. Philipp
On 10/30/14 17:19, Peter J. Philipp wrote: I think I found something and Vijay found it but is being modest. Let me show you: > your script didn't work for me with /bin/sh so I modified it, and > changed the logger's to echos so that I don't pollute my logs. I have &g

<    1   2   3   4   5   >