Re: Linux Compat Query

2007-05-28 Thread Steve Williams
Edd Barrett wrote: Hi Diana, On 28/05/07, Diana Eichert <[EMAIL PROTECTED]> wrote: Hey Ed I never saw where you ran it using ktrace. Can you try that and take a look at the results with kdump? diana # file a.out a.out: ELF 32-bit LSB executable, Intel 80386, version 1, for GNU/Linux 2.6.

Re: Linux Compat Query

2007-05-28 Thread Steve Williams
Edd Barrett wrote: Hi, > Maybe your path is not set correctly (for this specific problem). Today has been one dumb mistake after another. I apologize. I'll do it properly shall I: # sysctl -a | grep linux kern.emul.linux=1 # ls -al a.out -rwxr-xr-x 1 edd edd 1176578 May 28 13:18 a.out #

Re: alternatives to sendmail

2007-06-04 Thread Steve Williams
Mark Zimmerman wrote: On Mon, Jun 04, 2007 at 08:02:08AM -0600, Diana Eichert wrote: Hmmm, actually, I don't believe sendmail has a "steep and tall learning curve". ;-) It's just that you don't grok it yet. You're almost there since you know you want to use a smarthost. For example c

Re: mysql problem

2007-07-13 Thread Steve Williams
Marcos Laufer wrote: Allright the, i start the mysql server with this: if [ -x /usr/local/bin/mysqld_safe ] ; then su -c _mysql root -c '/usr/local/bin/mysqld_safe &' > /dev/null & echo -n ' mysql' fi but the problem still persists , it shows up when executing mysqlcheck -m -A -p Now what?

Re: Setting up ccd RAID 1 Howto OpenBSD 4.1

2007-09-12 Thread Steve Williams
ischief.ca/openbsd/doc/raidadmin/ Good Luck, Thanks, Steve Williams

binat on which interface?? - Equality

2006-06-15 Thread Steve Williams
b_serv_ext="24.5.0.6" int_if=tl0 ext_if=tl1 binat on $ext_if from any to $web_serv_ext -> $web_serv_int Are these exactly the same?? Thanks, Steve Williams

Re: ssh problem

2006-09-06 Thread Steve Williams
;d in, kill off the main daemon, restart with debugging and then try to get whatever working that wasn't. I usually schedule an "at" job to restart in 1 hour in case I get kicked off... Good Luck, Steve Williams

Re: Serial Console and /etc/ttys

2006-09-08 Thread Steve Williams
reas where it can be configured, one is for the terminal, and one is for the auxilary pass through serial port. If you see something like IPTRS on the screen, that's the field you want to change. It's been 5 years since I worked with those terminals, so my memory is a bit foggy. Cheers, Steve Williams

Re: Spamd - whitelisting round robin mail servers?

2008-09-03 Thread Steve Williams
Daniel Ouellet wrote: Jeff Simmons wrote: So I just set up a nice spamd for a client, and then watched Google's Postini try to resend a single email message from just about every IP they own. For google, why not get it from the source itself? Example: # dig txt _spf.google.com | grep spf ;

Re: Panic on a sunfire v120

2006-10-10 Thread Steve Williams
ry, but they will help debugging of alipm(4) still messes up the bus on sparc64. Always enable on sparc64 again. So, it appears that it is a known problem. I did try to disable alipm, but having never used "config" do do runtime kernel changes, I'm not too confident I did it correctly. Anyway, just thought I'd share what I found. Cheers, Steve Williams

Spamd - whitelist of mis-behaving SMTP server POOLS

2006-10-19 Thread Steve Williams
e he maintains for the "zombie" hosts. Bob, if you are listening, what do you do at the U of A to handle these mis-behaving server pools? Anyone else?? Thanks, Steve Williams

Re: THANKS!! Spamd - whitelist of mis-behaving SMTP server POOLS

2006-10-20 Thread Steve Williams
Steve Williams wrote: Hi, I have been running spamdb greylisting only for several years as my only line of defense at home. At work I have managed to sneak in a Sparc64 Sunfire 120 (OpenBSD 3.9) as a caching web proxy & default gateway. Today, we had a fairly agressive attack on

Followup - spamd greylisting results

2006-10-20 Thread Steve Williams
period, my server's whitelist has grown to over 700 email servers. The good thing is that these emails have been blocked without receiving the body, so our bandwidth usage will be reduced. Pretty impressive figures! Cheers, Steve Williams

Proper way to update a pf table?

2006-10-31 Thread Steve Williams
oto tcp from to any port smtp -> $int_mcafe_webshield Is there a "proper" way to update a pf table that resides in a file? Thanks, Steve Williams

Re: Proper way to update a pf table?

2006-10-31 Thread Steve Williams
Joel Goguen wrote: I do something similar to this: pfctl -t local-white -T replace -f /path/to/whitelist Where local-white is my whitelist, and /path/to/whitelist is the file containing whitelisted IP addresses or CIDRs, one per line. On 10/31/06, Steve Williams <[EMAIL PROTECTED]> wrot

"Best" motherboard for OpenBSD - light duty firewall

2006-11-16 Thread Steve Williams
is a solid motherboard where the onboard ethernet will "just work", with a disk controller that will "just work". I don't really need RAID, but if it had it & I could use it, I likely would. Thanks for any input. Cheers, Steve Williams

Re: on the remote root login in OpenSSH

2006-11-23 Thread Steve Williams
Igor Sobrado wrote: In message <[EMAIL PROTECTED]>, Stuart Henderson writes: On 2006/11/23 15:14, Igor Sobrado wrote: 2. There are a lot of brute force attacks from countries like Korea these days. These attacks will be less effective if the intruders get access to an unpri

Planning remote upgrade 3.6-3.7, ssh work after new kernel?

2005-06-09 Thread Steve Williams
Hi, I have been working with OpenBSD since the 2.7 days. Strangely enough, I have never had to try to remotely upgrade a system. I have always had "hands on". Now I am looking at upgrading a server from 3.6 to 3.7 remotely (through ssh). In preparation, I am going over: http://www.openbsd.org/

Re: spamd greylisting and server pools

2005-06-21 Thread Steve Williams
he documentation. greylisting.org:\ :white:\ :method=http:\ :file=cvs.puremagic.com/viewcvs/*checkout*/greylisting/schema/whitelist_ip.txt: Thanks for any light that you can shed on this issue. Cheers, Steve Williams

Re: spamd greylisting and server pools

2005-06-21 Thread Steve Williams
> --On 21 June 2005 14:24 -0600, Steve Williams wrote: > >> What is the best way to add entries from greylisting.org to my >> spamd-white table? > > Personally I've been keeping them separate, e.g. > > table persist > table persist > table persist file &

OT - network design documents

2005-06-25 Thread Steve Williams
figurability of OpenBSD ( and spamd :-) ). Does anyone have pointers, Web or books ( I don't mind spending $$ ) for resources that would help me understand more complex networks. Thanks, Steve Williams

Re: OT - network design documents

2005-06-25 Thread Steve Williams
>> the openbsd system will never be a "layer three switch", but >> it doesn't need to be. it just needs to be a fancier router, >> which is quite a reasonable thing to do. > > Can't you simply stick zebra on the OS to get advanced routing? > > -Bruno > Hi, That's the problem, I don't understand "a

Re: OT - network design documents

2005-06-25 Thread Steve Williams
> On Sat, 25 Jun 2005 09:21:08 -0600 (MDT) Steve Williams > <[EMAIL PROTECTED]> wrote: >> This has worked until recently. One of the Hospital sites has put in a >> CISCO Pix 506E and it's not behaving properly with ICMP redirects. If I >> put a static rou

Re: OT - network design documents

2005-06-25 Thread Steve Williams
> On 6/25/05, Steve Williams <[EMAIL PROTECTED]> wrote: >> We narrowed it down by putting a static route on the Windows PC and it >> worked flawlessly. I DO NOT want to try maintaining static routes on >> 150+ PC's of various flavors... > > How about distrib

Re: OT - network design documents

2005-06-25 Thread Steve Williams
> Steve Williams wrote: > >>>On Sat, 25 Jun 2005 09:21:08 -0600 (MDT) Steve Williams >>><[EMAIL PROTECTED]> wrote: >>> >>> >>>>This has worked until recently. One of the Hospital sites has put in a >>>>CISCO Pix 506E and it&

Blocking many accesses to ssh port from single IP

2005-06-30 Thread Steve Williams
ode... But I'm not the first person to have this problem, so there's likely a solution! Can anyone shed some light? Cheers, Steve Williams

is it possible to NAT & BI-NAT on aliases on a NIC?

2005-07-13 Thread Steve Williams
Hi, I have a weird network configuration. My client has a private WAN connection provided by the local government. There are two different parties that are using the WAN to provide services to the client. One has put their own Cisco PIX to protect their servers. The other connection has n

Re: No DMA? What's going on here?

2005-07-18 Thread Steve Williams
Chris Zakelj wrote: Shawn K. Quinn wrote: On Sun, 2005-07-10 at 00:16 -0400, Nick Holland wrote: BTW: your 10G drive probably has a jumper to bring it below 8G or 2G, which is more than enough for a firewall, and will speed the boot. You will lose the rest of your disk, however. What'

Re: No DMA? What's going on here?

2005-07-18 Thread Steve Williams
Nick Holland wrote: Steve Williams wrote: ... Sorry to follow up on such an old post, but it really caught my attention now that I am facing the same problem. I have inherited a cpu0: Intel Pentium II ("GenuineIntel" 686-class, 512KB L2 cache) 349 MHz with an old wd0: 16-secto

Re: Writes to samba server very, very slow

2005-07-19 Thread Steve Williams
Marius Van Deventer - Umzimkulu wrote: Or you could disable apm0 and see if that helps. -Original Message- From: David Gwynne [mailto:[EMAIL PROTECTED] Sent: 19 July 2005 01:57 PM To: Gary Clemans-Gibbon Cc: misc@openbsd.org Subject: Re: Writes to samba server very, very slow Fr

Bridge Interface stop ICMP redirects?

2005-07-26 Thread Steve Williams
Hi, I had a great design redesign and secure a client's network. Once I got on site, there was a little surprise for me ... I can't re number a router that I had hoped to. Right now, there are multiple gateways on one network (all the gateways are plugged into one switch). They have a defau

Re: Bridge Interface stop ICMP redirects?

2005-07-26 Thread Steve Williams
Hi, That sounds great! Thanks very much for pointing that out, I would never have thought about sysctl to control that... Cheers, Steve Spruell, Darren-Perot wrote: From: Steve Williams [mailto:[EMAIL PROTECTED] The main network is 192.168.11.0/24. The default gateway for the network

3.7 Kernel pppoe not accepting incoming connections, userland works 100%

2005-08-01 Thread Steve Williams
information? I have tried to include everything that could possibly be relevant. Thanks, Steve Williams - The userland: /etc/ppp.conf: dsl: set device "!/usr/sbin/pppoe -i em0 -v -v" set

Re: LSI Logic 53C1030 on DL145-G2 not working

2005-08-09 Thread Steve Williams
Hi, Dell Poweredge 750 worked "out of the box" for me. Fantastic 1U little box... OpenBSD 3.7-stable (GENERIC) #0: Thu Jul 21 07:28:52 EDT 2005 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel(R) Pentium(R) 4 CPU 2.80GHz ("GenuineIntel" 686-class) 2.80 GHz cpu0: FPU,V8

Re: spamd in combination with multiple mail hosts

2005-08-13 Thread Steve Williams
Rogier Krieger wrote: On 8/12/05, Rogier Krieger <[EMAIL PROTECTED]> wrote: After deploying spamd as a shield for a non-OpenBSD mail host, I wonder how to expand this setup to support multiple mailhosts (say three mx'es mxN). Although it may be bad form to reply to oneself, any though

Re: ntpd could not parse "pool.ntp.org"

2005-08-17 Thread Steve Williams
Mike Henker wrote: Before try the solution of Nick I tried what you said: > - There is a typo in one of the nameserver ip's posted here. > 194.22_5_.52.4 does not exist. Yes correct, are 194.224.52.6 and 194.224.52.4 > --8<-- > nameserver 194.224.52.4 > nameserver 192.94.163.152 > --8<-- > Pl

Re: Problems with pf+nat+some websites

2005-08-24 Thread Steve Williams
Nick Holland wrote: Guido Tschakert wrote: Jonathan Schleifer wrote: I don't see where you set the MTU/MSS? Are you sure you have set them somewhere else? eBay is known to have problems with bad/wrong MTU/MSS. Try adding scrub out on $ext_if max-mss 1414 to your pf.conf and adding -mtu

OpenBSD 3.9-stable (not current) install?

2006-04-03 Thread Steve Williams
Hi, I understand the whole issue with snapshots being held up for the release cycle. I have followed the mail list and archives, and still have not figured out the answer... If I want to install OpenBSD 3.9-stable (or the release ..), what is the easiest way to do that? There is no 3.9 di

Re: OpenBSD 3.9-stable (not current) install?

2006-04-04 Thread Steve Williams
Paulo Rodriguez wrote: - Oorspronkelijk bericht - Van: Steve Williams [mailto:[EMAIL PROTECTED] Verzonden: dinsdag, april 4, 2006 05:55 AM Aan: misc@openbsd.org Onderwerp: OpenBSD 3.9-stable (not current) install? ... If I want to install OpenBSD 3.9-stable (or the release

Re: Lifecycle question

2005-09-06 Thread Steve Williams
Stephan A. Rickauer wrote: Tobias Weingartner schrieb: This is a systems management issue. It all depends on how you manage your systems. Compartementalizing change, change management, etc. I Exactly. can recommend talking to Fritz Zaucker (tell him I sent ya). He's at ETHZ as well (i

Re: Spamd/Postfix behaving strangely

2005-09-11 Thread Steve Williams
Jason Dixon wrote: I'm using spamd with greylisting on a new Postfix mail proxy, but it's behaving strangely for accepted connections. If I make a connection to the server from my whitelisted () external test server, I see the following: [EMAIL PROTECTED] root]# telnet mail.domain.com 25

Re: Printing schemas

2010-04-28 Thread Steve Williams
Ed Ahlsen-Girard wrote: On 2010-04-24 20:00:32, bofh wrote: Parallel port printers I want the printouts this minute!!! :). I heart printers with lpd (especially with postscript) Specifically, I heart my Brother printer. I've heard of incompatibilities with some postscript stuff, but lik

Filesystem sizes stored in a file anywhere?

2010-06-24 Thread Steve Williams
ust out of curiosity, is it possible to restore a level 0 filesystem dump to NON-pristine filesystem? eg: could I just create one huge "a" partition and restore my root, var, src, usr, ... level 0 dumps to it (with some magic incantation)? Thanks, Steve Williams

Jan 28 snapshot - em0 disappeared

2010-01-31 Thread Steve Williams
is and how to go about fixing it. I haven't been able to find the magic google incantation to provide guidance :-( Thanks, Steve Williams Snapshot dmesg -- OpenBSD 4.7-beta (GENERIC.MP) #402: Wed Jan 27 19:29:54 MST 2010 t...@i386.openbsd.org:/usr/src/sys/arch/i386/comp

Re: Jan 28 snapshot - em0 disappeared

2010-01-31 Thread Steve Williams
round kernel level C, but cvs is a whole new world to me. What would be the best approach, checking out the entire tree based on a certain date, compiling & checking if it works? Thanks, Steve Williams Steve Williams wrote: Hi, I upgraded my system today. I'm not sure if it was previ

January 28 snapshot, pf.conf(5) BNF missing egress keyword

2010-02-01 Thread Steve Williams
working through the BNF in pf.conf(5), but it is missing the "egress" keyword. I'd try to fix and propose a patch, but not understanding it in the first place poses a bit of problem when attempting to create documentation! Can anyone shed some light on the use of the "egress" keyword? Thanks, Steve Williams

Re: January 28 snapshot, pf.conf(5) BNF missing egress keyword

2010-02-01 Thread Steve Williams
Peter N. M. Hansteen wrote: Steve Williams writes: I'm trying to fully understand the new syntax and was working through the BNF in pf.conf(5), but it is missing the "egress" keyword. egress is the interface group that has your default route. for example on my

Re: [RESOLVED] Jan 28 snapshot - em0 disappeared

2010-02-02 Thread Steve Williams
Steve Williams wrote: Hi, I upgraded my system today. I'm not sure if it was previously a snapshot or actually 4.6. Regardless, I upgraded it to the snapshot from January 28. I booted the snapshot iso and did an upgrade. Ran sysmerge & slowly working my way through all the p

Re: Donations

2010-12-05 Thread Steve Williams
On 12/5/2010 12:10 PM, Randal L. Schwartz wrote: >> "Theo" == Theo de Raadt writes: > Theo> If you don't know why I am sending this mail.. you are reading US > Theo> managed news, and need to much much more informed > > If this is in reference to Wikileaks, it's because Paypal believes t

Re: CODE on OpenBSD

2024-11-01 Thread Steve Williams
On 01/11/2024 3:19 p.m., Chris Eidem wrote: I've looked into it in the past, but it seems to be a Linux only solution. I'm quite happy to be proven wrong though... On November 1, 2024 7:18:40 AM CDT, Mark wrote: Has anyone ever tried to install CODE (Collabora Online Development Ed

Re: clever grep..

2024-10-17 Thread Steve Williams
On 13/10/2024 9:44 p.m., Mike Fischer wrote: grep "return 301 $host$request_uri" *.conf Hi, I think you missed the point. grep "return 301 $host$request_uri" *.conf $host evaluates to the empty string $request_uri evaluates to the empty string resulting in: grep "return 301 " *.conf You wa

Troubleshooting OpenBSD Wireguard server & Windows Wireguard client

2024-12-31 Thread Steve Williams
Hi, I am trying to configure my OpenBSD server as a Wireguard server for my my Windows laptop (and eventually my Android phone) I am using OpenBSD 7.6 (GENERIC.MP) #338: Mon Sep 30 08:55:35 MDT 2024 My Windows PC is using Windows Wireguard client 0.5.3 (downloaded Dec 31, 2024) The Windows

Re: Troubleshooting OpenBSD Wireguard server & Windows Wireguard client

2024-12-31 Thread Steve Williams
On 2024-12-31 17:58, Jeremy Mates wrote: On 2024-12-31 17:37:01 -0800, Steve Williams wrote: wgaip 192.168.124.0/24 inet 192.168.126.1/24 126.1 is not really on the 124.0/24 subnet? Hi, If you were in close proximity to me, I'd buy you a beer for that one! It's so funny how th

Wireguard interface "debug" - where to see?

2025-01-01 Thread Steve Williams
l never comes "up".  The GUI on the TP-Link router doesn't give any ability to troubleshoot so I was trying to poke into the OpenBSD wg interface to get more information. Like yesterday, it's likely a typo/misunderstanding of something. Thanks, Steve Williams

Re: wg(4) inhibits reboot

2025-01-01 Thread Steve Williams
Hi, What is your configuration that you have a wg process running? I'm configuring Wireguard currently and am just using the hostname.wg0, hostname.wg1. Still struggling making OpenBSD a client to a Wireguard server, but I think it's the server that's an issue. Do you have a package installed

Re: wg(4) inhibits reboot

2025-01-02 Thread Steve Williams
ene/2021-10-09-openbsd-wireguard-exit.html> Additionally, I do a ifconfig wg0 down, then do an idconfig wg0 destroy to clean up. But that's not using wireguard-tools. Cheers, Steve W On January 1, 2025 9:22:03 p.m. PST, Lloyd wrote: > >Steve Williams wrote: > >> What is y

Supported USB Wireless (Access Point) for OpenBSD

2025-01-23 Thread Steve Williams
Hi, I am trying to troubleshoot some wifi issues I am having and need to do a process of elimination. I figure I can add a USB wireless to my OpenBSD box What is a well supported USB wireless adapter for OpenBSD that has a reasonable chance of running in as an access point? This is not a h

apcupsd - compiling new kernel and syspatch

2025-03-23 Thread Steve Williams
ODUCT_APC_UPS5G, ANY, { UQ_BAD_HID }}, If I compile my own kernel with the above settings, and it resolves the problem, will that break "syspatch".  Can I keep syspatch compatibility by following any specific steps? Thanks, Steve Williams OpenBSD 7.6 (GENERIC.MP) #1: Mon Feb 10 00:14:

Re: Ethernet interface set to the wrong group

2025-04-05 Thread Steve Williams
Hi, Your use case is an outlier. Having both interfaces on the same network is not a standard configuration. Just quit using the magic word "egress" in your pf.conf and use the specific interface names. I went years (I started using OpenBSD 2.6) before I discovered the "egress" magic word

Re: sensorsd and UPS monitoring - no event triggered when ACPresent transitions from On to Off

2025-03-26 Thread Steve Williams
Hi, Thanks for your feedback. I am not simulating a short outage. I left the UPS unplugged for 20 minutes. It should have easily picked up that transition. I could see that the state had changed in sysctl. Still wondering... Cheers, Steve W. On 3/26/2025 7:58 PM, Jon Higgs wrote: Hi S

Re: Can't umount; fuser and fstat don't say why

2025-04-07 Thread Steve Williams
On 4/7/2025 2:09 PM, TSS wrote: Greetings, I've been using this gimmick for backing up some OpenBSD 7.6 systems: https://github.com/thexhr/openbsd-timemachine For the purposes of this discussion, it: 1. uses hotplugd to run a script when you plug in a USB backup drive 2. this script mounts the

Re: router pf ruleset

2025-04-27 Thread Steve Williams
Hi, I would start by naming your internal interface variables in a meaningful way. It would make things much more readable for yourself and reduce the risk of a mental mistake. Eg: int_lan1 int_lan2 int_dmz And similarly with int_net1. Just a thought... Cheers, Steve W On April 27, 2025 5

Re: apcupsd - compiling new kernel and syspatch

2025-03-23 Thread Steve Williams
Hi, Thanks for the suggestion, but I do have a USB keyboard/mouse on the system. Cheers, Steve W. On 3/23/2025 9:49 AM, Chaz Kettleson wrote: On Sun, Mar 23, 2025 at 08:14:56AM -0700, Steve Williams wrote: Hi, I am trying to get apcupsd working on my OpenBSD 7.6 box. Using the standard

sensorsd and UPS monitoring - no event triggered when ACPresent transitions from On to Off

2025-04-04 Thread Steve Williams
sors.upd0.percent1=100.00% (FullChargeCapacity), OK hw.sensors.upd0.timedelta0=8211.00 secs (RunTimeToEmpty), OK Thanks, Steve Williams

Re: smtpd.conf examples - quoting question/inaccuracy?

2023-04-18 Thread Steve Williams (Contractor)
Hi, Thanks for validating my thoughts.  I appreciate the time you took to reply. Cheers, Steve Williams On 4/18/2023 2:25 AM, Omar Polo wrote: On 2023/04/17 10:32:58 -0600, Steve Williams wrote: Hi, I am working on making some changes to my smtpd.conf file and was looking at the man page

Re: PC Engines APU platform EOL

2023-04-20 Thread Steve Williams (Contractor)
Hi, My apu4 died and I tried a rpi4 but was less than impressed by it.  Fairly low power and I had reliability issues with the USB ports.  I was just using it to run a webcam doing 2 snapshots/minute to be able to create time lapse movies.  It also ran my personal web server and handled incom

<    1   2