Re: 6.5 OpenBSD (amd64) ifconfig iwn join / nwid not connecting with Open Wifi Nets with a space in the SSID

2019-04-16 Thread Tom Smyth
the same operating system and same firmware works fine when I connect to a wpa2 enabled ap with an SSID without a space if that is any help Tom Smyth On Wed, 17 Apr 2019 at 01:12, Tom Smyth wrote: > > Hello All, > I tried out 6.5 and tried joining a network with a space in the SS

Re: 6.5 OpenBSD (amd64) ifconfig iwn join / nwid not connecting with Open Wifi Nets with a space in the SSID

2019-04-17 Thread Tom Smyth
Thanks Stefan... i will use that debug tip next time im on that site... i didnt setup the ap (spaces inssid ) so had little opportunity to debug on ap side Thanks again On Wednesday, 17 April 2019, Stefan Sperling wrote: > On Wed, Apr 17, 2019 at 01:12:12AM +0100, Tom Smyth wrote: > &

Re: Stunnel 5.44 client syntax to accept connections on pty?

2019-04-17 Thread Tom Smyth
... and vice versa on the other end ... I hope this helps Tom Smyth On Wed, 17 Apr 2019 at 17:49, Martin Got wrote: > > How to use 'stunnel' in client mode to accept connections on pty from local > programs like 'ppp' instead of 'accept=IP:PORT'? > &g

chromium OpenBSD defaults

2019-04-17 Thread Tom Smyth
enable it ? -- Kindest regards, Tom Smyth

Re: chromium OpenBSD defaults

2019-04-18 Thread Tom Smyth
Theo, Nick, Stuart, thanks for your feedback on my request...I see where you all are comming from... I suppose I cant impose my personal preferences on the entire community :) I appreciate the time you took to consider it All the best, Tom smyth On Thu, 18 Apr 2019 at 17:01, Stuart Henderson

Re: eBGP routes are not reannounced

2019-04-22 Thread Tom Smyth
ne # Do not send any route updates > neighbor $spam_rs1 > neighbor $spam_rs2 > } > > group "internalnet" { > remote-as $myAS > multihop64 > neighbor$site3 > local-address $site2 > setnexthop self > tcp md5sig password password1234 > } > > -- Kindest regards, Tom Smyth.

6.5 Release amd64 upgrade syspatch reports 404 ftp file not found

2019-04-24 Thread Tom Smyth
both cdn.openbsd.org and fastly.cdn it is probably just that there are no patches available but I was wondering is there possibly a file missing that would just say no patches needed Thanks Tom Smyth -- Kindest regards, Tom Smyth.

Re: 6.5 Release amd64 upgrade syspatch reports 404 ftp file not found

2019-04-25 Thread Tom Smyth
Hello just a quick update syspatch when run on an upgraded 6.5 system ... nolonger reports ftp 404 file not found ... and seems to behave in a similar manner as 6.4 and before ... Thanks Tom Smyth On Thu, 25 Apr 2019 at 01:46, Tom Smyth wrote: > > Hello > Minor feedback, that w

Re: Qemu Agent assistance needed

2019-04-28 Thread Tom Smyth
annot find the > > necessary module needed, nor how to load it in a proper manner. > > Any hint is well appreciated. > > Best Regards,Strahil Nikolov > > Kernel modules don't exist under OpenBSD to ensure security, so don't > go there. Communication with host is probably best done through the > serial console. Take a look at the boot.conf(8) manpage. > -- Kindest regards, Tom Smyth.

Re: [6.5] Xfce: problem with shutdown menu

2019-04-28 Thread Tom Smyth
sli9RaIu/2LLwfZOQ6zMK1uleUwEAyeBxvoV2onST > Q0qLG5L7nAGxZJEJl7r1pKkYzAfL7Ak= > =BQ3J > -END PGP SIGNATURE- > -- Kindest regards, Tom Smyth.

Re: When will be created a great desktop experience for OpenBSD?

2019-05-06 Thread Tom Smyth
Can you define "great desktop experience" ? what window managers have you tried on OpenBSD, there are are a few included in base..and you can also load more with pkg_add for ease of use / transitioning from windows ..I find xfce quite nice... All the Best, Tom Smyth On Tue, 7 M

Re: When will be created a great desktop experience for OpenBSD?

2019-05-07 Thread Tom Smyth
mes, i simply do > > $ firefox > > and leave the terminal open in case i want to look at the error messages. > Sometimes, i type > > $ firefox & exit > > which is shorter. > > > or do you normally do something else that I've totally overlooked? > > No. The only program is start by clicking the mouse is xterm(1). > > Yours, > Ingo > -- Kindest regards, Tom Smyth.

Re: 6.5 PowerPC Packages

2019-05-09 Thread Tom Smyth
n we might see those > out in the mirrors. > > I also suppose in the same vein, I could be learning how to pull the > ports tree and build what I need that way :-) > > Thanks! > -- Kindest regards, Tom Smyth.

Donation question re: syspatch machines for Octeon

2019-05-17 Thread Tom Smyth
he cost of the hardware or I can purchase them off amazon and have them > shipped directly to you and/or your preferred devs. > > Thanks for all you guys do, > > > Ryan > -- Kindest regards, Tom Smyth.

Re: OpenBSD on VMware ESXi

2019-05-22 Thread Tom Smyth
nstable, high latency (result of low price :). The best would > be a short installation path to get a listening sshd and end the > installation with shell login. > > Thanks for any hint > Rodrigo > > -- Kindest regards, Tom Smyth.

Re: Installer sucks ! (Re: OpenBSD on VMware ESXi)

2019-05-23 Thread Tom Smyth
one noted this bugs before: are there no new people > installing OpenBSD? Or it is a problem only with VMWare? > > > What ESXi version are you running ? > > No idea. I must ask the hoster. > > > What disk controller are you showing to OpenBSD ? > > sd0 > > Thanks > Rodrigo > > -- Kindest regards, Tom Smyth.

Re: OpenBSD 6.5 dumps to debugger when using ifconfig bridge command

2019-06-04 Thread Tom Smyth
; spkr0 at pcppi0 > lpt0 at isa0 port 0x378/4 irq 7 > wbsio0 at isa0 port 0x2e/2: NCT5104D rev 0x52 > vmm0 at mainbus0: SVM/RVI > umass0 at uhub0 port 3 configuration 1 interface 0 "SanDisk Cruzer Glide" > rev 2.00/1.00 addr 2 > umass0: using SCSI over Bulk-Only > scsibus2 at umass0: 2 targets, initiator 0 > sd0: 29952MB, 512 bytes/sector, 61341696 sectors > uhub2 at uhub1 port 1 configuration 1 interface 0 "Advanced Micro Devices > product 0x7900" rev 2.00/0.18 addr 2 > vscsi0 at root > scsibus3 at vscsi0: 256 targets > softraid0 at root > scsibus4 at softraid0: 256 targets > root on sd0a (d3fbbb47f1a19759.a) swap on sd0b dump on sd0b > > > > > Russell P. Sutherland Email: russell . sutherland @ utoronto > dawt ca > Network Engineer, I+TS Voice: +1.416.978.0470 > 4 Bancroft Ave., Rm. 102 Cell: +1.416.803.0080 > University of TorontoFax: +1.416.978.6620 > Toronto, ON M5S 1C1 > > -- Kindest regards, Tom Smyth.

Re: Filesystem corruption on OpenBSD routers after power outage?

2019-06-04 Thread Tom Smyth
mpact-flash-firewall/ I hope this helps Tom Smyth On Tue, 4 Jun 2019 at 20:31, Mogens Jensen wrote: > I'm going to build a router for use in a remote location, and I have > chosen OpenBSD 6.5 for the task. Unfortunately, it's not possible to > protect the router with an UP

Re: Filesystem corruption on OpenBSD routers after power outage?

2019-06-04 Thread Tom Smyth
there is also an option for setting fsck to approve fixes without a prompt .. but I cant think of it off the top of my head... and this would be useful to set on your routers also On Tue, 4 Jun 2019 at 21:05, Tom Smyth wrote: > Hi Mogens, > > there are a number of threads on th

Re: Filesystem corruption on OpenBSD routers after power outage?

2019-06-06 Thread Tom Smyth
veil does not like ro /etc. > > HTH, > -- > Before enlightenment - chop wood, draw water. > After enlightenment - chop wood, draw water. > > Marko Cupać > https://www.mimar.rs/ > > -- Kindest regards, Tom Smyth.

Re: Ansible install Re: Reboot and re-link

2019-06-22 Thread tom ryan
On 6/22/19 7:23 AM, Frank Beuth wrote: > I wonder if there is a way to have Ansible build a custom > autoinstall.conf (using templates) and insert it into bsd.rd immediately > prior to uploading. I use elfrdsetroot from upobsd to do something along these lines $ pkg_info upobsd Information for i

Re: openrsync crashes when syncing local source and local destination

2019-06-26 Thread Tom Smyth
sync with two directories (the same > directories, mind you) and not -a? Is there an openrsync.core anywhere > whose backtrace you can get? > > Can you run with - and paste your exact invocation? And again with > --rsync-path openrsync as well? > > Also, can you tail /var/log/messages to see if there's anything in there? > -- Kindest regards, Tom Smyth.

intel ixl driver running Proxmox(kvm) Guest SR-IOV unable to map interrupt

2019-07-05 Thread Tom Smyth
v 0x00 pci2 at ppb1 bus 2 Im running OPENBSD 6.5 Current as of 05/07/2019 (5th of July) I have tested the same configuration with Debian linux guest and the Network cards are recognised and connect to the network fine ... Does any one have any suggestions on that unable to map interrupt erro

Re: intel ixl driver running Proxmox(kvm) Guest SR-IOV unable to map interrupt

2019-07-07 Thread Tom Smyth
seems to resolve this issue Thanks again Jonathan for your tip it really helped me Tom Smyth now the Card can be fully passed through to OpenBSD.. (PF (physical function) ) Thanks to all, Im just writing this up on the list incase someone else encounters the issue On Fri, 5 Jul 2019 at 22

virtio Network interface attached to a vm guest causes jitter on an ixl SR-IOV NIC

2019-07-07 Thread Tom Smyth
ets received, 0.0% packet loss round-trip min/avg/max/std-dev = 0.141/4.107/428.184/30.197 ms I hope this info helps other OpenBSD SR-IOV users... -- Kindest regards, Tom Smyth.

Re: shell_exec() exec() and system() not working in php 5.6 openbsd 6.4

2019-07-09 Thread Tom Smyth
Roman has, a nice mail setup on his blog that describes sending mails without exec IIRC https://www.romanzolotarev.com/ another alternative is to use postifx and maildrop folders or postdrop folder ... I hope this helps Tom Smyth On Wed, 10 Jul 2019 at 00:31, Kevin Chadwick wrote: > >

OpenVPN + OpenBSD6.0 (i386 and Mip64) latency and jitter in Openvpn TCP Bridged mode

2016-09-29 Thread Tom Smyth
>/etc/openvpn/openvpn1.conf echo daemon openvpn >>/etc/openvpn/openvpn1.conf echo #tls-auth /etc/openvpn/private/tlsauth.key >>/etc/openvpn/openvpn1.conf echo mlock >>/etc/openvpn/openvpn1.conf I have tried tcp_nodelay, etc but i get a warning about it not being supported by the kernel at run time ... any tips would be appreciated... Tom Smyth

Re: OpenVPN + OpenBSD6.0 (i386 and Mip64) latency and jitter in Openvpn TCP Bridged mode

2016-10-08 Thread Tom Smyth
holding up the kernel) no difference in result when I run openvpn on centos in a similar setup and hardware, but the small packet latency /jitter issue does not happen. I have attached the dmesg also Thanks Tom Smyth On Thu, Sep 29, 2016 at 2:43 PM, Tom Smyth wrote: > Hi Lads, > &

Can OpenBSD do mixed b/g/n mode in hostap?

2017-01-15 Thread Tom Murphy
ice cannot connect. Is it possible to do a mixed mode? Also, is powersave working in hostap mode yet? Thanks, Tom athn0 at pci5 dev 0 function 0 "Atheros AR9281" rev 0x01: apic 2 int 16 athn0: AR9280 rev 2 (2T2R), ROM rev 22, address xx:xx:xx:xx:xx:xx

Re: Can OpenBSD do mixed b/g/n mode in hostap?

2017-01-24 Thread Tom Murphy
On 15/01/17 20:13, Stefan Sperling wrote: > On Sun, Jan 15, 2017 at 01:53:41PM +0000, Tom Murphy wrote: >> Hi, >> >> I was wondering if OpenBSD had a way to do mixed b/g/n mode with hostap? >> Recently 802.11n support was added for athn(4). I have 4 802.11n devices,

Flow Control on em* em0 Intel interfaces on OpenBSD

2017-01-30 Thread Tom Smyth
flowcontrol ) dev.em.X.fc:3 dev.igb.X.fc:3 dev.ix.X.fc:3 any pointers would be appreciated. -- Kindest regards, Tom Smyth

Re: Can OpenBSD do mixed b/g/n mode in hostap?

2017-02-07 Thread Tom Murphy
code? Thanks, Tom On Wed, Jan 25, 2017 at 10:39:08AM +0100, Stefan Sperling wrote: > On Tue, Jan 24, 2017 at 09:00:26PM +0000, Tom Murphy wrote: > > Hi Stefan, > > > > I've done some more testing. I managed to get 802.11n working in > > hostap mode for a wh

Re: Can OpenBSD do mixed b/g/n mode in hostap?

2017-02-12 Thread Tom Murphy
Hi Stefan, Many thanks for that explanation! It makes sense. You're right, some low level code is really difficult to debug! Kind regards, Tom On 07/02/17 20:41, Stefan Sperling wrote: > On Tue, Feb 07, 2017 at 08:16:10PM +0000, Tom Murphy wrote: >> Hi Stefan, >> >>

Re: OpenVPN + OpenBSD6.0 (i386 and Mip64) latency and jitter in Openvpn TCP Bridged mode

2017-02-19 Thread Tom Smyth
openvpn tunnels On 8 Oct 2016 13:13, "Tom Smyth" wrote: > Hello, > > I have tried compiling the openvpn source code on my router > (a pcengines ALU2 ) device... no difference compared with the package > I have tried increasing the process priority using renice but this

802.11n hostap - latency and timeouts

2017-03-19 Thread Tom Murphy
.0.0.1 netmask 0xff00 broadcast 10.0.0.255 Is there anything I can try to get 802.11n stable? Thanks, Tom

Re: PPPoE disconnecting frequently

2017-03-19 Thread Tom Murphy
t;had no IPv6 support" on my side. Hope this helps, Tom

Httpd Concrete5 CMS index.php/install vs indes.php?=install on OpenBSD

2017-04-05 Thread Tom Smyth
for me ... Any comments any security issues associated with *.php* vs *.php location directive would be welcome. Hope this helps Tom Smyth -- Kindest regards, Tom Smyth

Generic SFP+ recognition in Intel based Hotlava Cards Open BSD 5.6 / 5.7 beta

2015-01-20 Thread Tom Smyth
Hi Lads, I was building an intel server with 2x 6 Port SFP+ Hotlava Intel based 10GbE cards, running on 2x Intel E5 v2 6 core Xeon CPUs and with 24 GB Ram It appears that the OpenBSD detects them with the ix(4) driver however when I plug in a generic SFP+ Module ( MikroTIiK SFP+ 10km 1310 nm Si

Poor network performance with iwn(4) Intel Centrino Wireless-N 2230

2015-01-28 Thread Tom Doherty
MP Is there anything I can do to improve the performance of the below setup or would I be better off with a different card? Thank you Tom OpenBSD 5.7-beta (GENERIC.MP) #825: Wed Jan 28 09:42:41 MST 2015 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 4130385920 (3

Re: Generic SFP+ recognition in Intel based Hotlava Cards Open BSD 5.6 / 5.7 beta

2015-02-24 Thread Tom Smyth
mapping etc as im not using these features anyway. I hope this helps... -- Kindest regards, Tom Smyth Mobile: +353 87 6193172 - PLEASE CONSIDER THE ENVIRONMENT BEFORE YOU PRINT THIS E-MAIL This email contains information which may be confidential or privileged. The

Fix for ix(4) SFP+ module detection when booting without the modules plugged in. (current vs 5.6 stable)

2015-02-24 Thread Tom Smyth
sible to include it as patch in stable branch ? failing that would someone give advice about trying to "back port" the fix ( I hate the thought of it ) any help / advice would be appreciated. Thanks -- Kindest regards, Tom Smyth Mobile: +353 87 6193172 -

Re panic due to bridge mem address conflict on IBM x3650M4 s

2015-03-09 Thread Tom Smyth
Date: Wed, 04 Mar 2015 10:09:58 +0530 From: Ninad Shaha To: misc@openbsd.org Subject: panic due to bridge mem address conflict on IBM x3650M4 server Message-ID: <54f68c9e.3070...@iitb.ac.in> Dear All, I want to use openbsd on IBM x3650 M4 server. I am able to install it successfully. But while 1

Intel Centrino Wireless-N 2230

2013-03-25 Thread Tom Doherty
ttp://mail-index.netbsd.org/netbsd-users/2012/10/19/msg011722.html dmesg/pcidump below. acpidump available at http://singlesecond.com/u310-acpidump.tgz Cheers Tom OpenBSD 5.3-current (GENERIC) #76: Fri Mar 22 12:23:44 MDT 2013 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERI

panic during boot of 5.7 in de(4) running in Hyper-V

2015-06-23 Thread Tom Schutter
gure() at cpu_configure+0x1b main() at main+0x3df end trace frame: 0x0, count: -14 ddb> ps PID PPID PGRPUID S FLAGS WAIT COMMAND *0 -1 0 0 7 0x10200 swapper -- Tom Schutter

Re: httpd, SlowCGI, POST_MAX and 413 Payload Too Large

2015-08-28 Thread Tom Murphy
.foo.net". I believe this is down to the behavior in config.c, line 454, in function config_getserver_config: srv_conf->maxrequestbody = parent->maxrequestbody; It is always set to the parent's maxrequestbody. Is this by design? Thanks, Tom

Re: Pidgin/Lync success stories?

2014-10-23 Thread Tom Doherty
Hi Please see the update on ports@ Cheers Tom On Thu, Oct 2, 2014 at 5:22 PM, Stuart Henderson wrote: > On 2014-10-01, Leonardo Santagostini wrote: > > Ok, here i go, i downloaded pidgin from original web and sipe from their > > web too. > > > > This procedure does n

Intel Centrino Wireless-N 135 - iwn(4)

2014-02-25 Thread Tom Murphy
g for refence here. There are a few 'not configured'. Always happy to help with any testing if needed on this hardware. -Tom OpenBSD 5.5 (GENERIC.MP) #297: Mon Feb 24 03:47:14 MST 2014 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 8461398016 (80

Re: DNS resolution after VPN?

2021-07-20 Thread Tom Smyth
e forwarder address you might be able to statically configure > > it, if not then you could modify vpnc-script to have it update the > > address in unwind.conf and reload it. > > Thanks, this works somewhat: > > forwarder { $ip1 $ip2 } > force accept bogus forwarder { $i

Re: ipsec with default route and routing of internal networks

2021-09-13 Thread Tom Smyth
ld someone please point me in the right direction on what to look and > configure? > > Thank you .. > > -- Kindest regards, Tom Smyth.

Re: ipsec with default route and routing of internal networks

2021-09-13 Thread Tom Smyth
13.9.2021. 12:58, Tom Smyth wrote: > > Hi Hrvoje, > > > > is 10.90.0.0/24 <http://10.90.0.0/24> local to your firewall, and if I > > understand your rule, > > ike esp from 10.90.0.0/24 <http://10.90.0.0/24> to anyyou are > saying > > encryp

Radiusd anyone know of a Simple to use web front end for usermanagement ?

2021-09-22 Thread Tom Smyth
thanks -- Kindest regards, Tom Smyth.

Recommendations on Buffer Space for Busy Unbound Resolver Service for a network

2021-12-21 Thread Tom Smyth
Recommendations on Buffer Space for Busy Unbound Resolver Service for a network serving a 3000, customers Thanks -- Kindest regards, Tom Smyth.

Re: Recommendations on Buffer Space for Busy Unbound Resolver Service for a network

2021-12-21 Thread Tom Smyth
Sorry forgot to say running OpenBSD on an amd64, and hosted in a KVM environment, Thanks Tom Smyth On Tue, 21 Dec 2021 at 21:15, Tom Smyth wrote: > Recommendations on Buffer Space for Busy Unbound Resolver Service for a > network serving a 3000, customers > > Thanks >

Re: Recommendations on Buffer Space for Busy Unbound Resolver Service for a network

2021-12-21 Thread Tom Smyth
THanks Dirk Ill give that a go Cheers, Tom Smyth On Wed, 22 Dec 2021 at 00:30, Dirk Coetzee wrote: > Hi Tom, > > I would recommend debugging using "unbound-control stats_noreset" and > referencing the unbound configuration documentation at > https://www.nlnetlabs

Re: Recommendations on Buffer Space for Busy Unbound Resolver Service for a network

2021-12-22 Thread Tom Smyth
again, Really appreciate your Tom Smyth On Wed, 22 Dec 2021 at 11:26, Stuart Henderson wrote: > On 2021-12-22, Dirk Coetzee wrote: > > Hi Tom, > > > > I would recommend debugging using "unbound-control stats_noreset" and > referencing the unbound conf

Re: Help with basic pf rule to open port 25

2022-01-05 Thread Tom Smyth
is awesome ... Tom Smyth On Wed, 5 Jan 2022 at 16:09, Sean McBride wrote: > Hi all, > > (Newbie and first time poster, please be gentle :)) > > I'm trying to set up spamd, and I think I'm having trouble with pf. So > I tried to add a very basic test rule. I adde

Re: Error on xenocara.tar.gz extraction

2022-01-13 Thread Tom Smyth
i think u need to do as root or configure doas to perform privleged operation... On Thu 13 Jan 2022, 17:26 Rob Whitlock, wrote: > Attempting to extract xenocara.tar.gz while avoiding root proviliges as > described here https://www.openbsd.org/faq/faq5.html#wsrc, I ran into an > error, shown b

Re: NSD: Could not tcp connect to X Operation timed out

2022-01-19 Thread Tom Smyth
is pf allowing tcp port53 as well as udp port53 ? On Wed 19 Jan 2022, 11:46 Laura Smith, wrote: > Hi > > OpenBSD NSD slave is driving me nuts with the following message in the > logs "Could not tcp connect to X Operation timed out". > > The answer sounds obvious, but I can: > > - Ping the IP > -

Re: smtpd bounce messages and non-existent users

2022-02-16 Thread Tom Szilagyi
ect invalid recipients up front with a message of your choosing: filter validuser phase rcpt-to match !rcpt-to \ reject "550 5.1.1 Mailbox does not exist" and then include that filter in the chain for the exchanger listener. HTH, Tom > > > Configurations are below; than

Re: shells/nsh network shells, feedback and comments requested,

2022-02-20 Thread Tom Smyth
Hello all, just following up on this as a call out to anyone who use nsh or have used it in the past, if you have any feedback / suggestions I would really appreciate that, Thanks Tom Smyth On Sun, 18 Apr 2021 at 13:31, Tom Smyth wrote: > Hello, > > If anyone has used shells/nsh

Re: Advice for hardening a PHP webserver on OpenBSD

2022-03-09 Thread Tom Smyth
need to disable all the > dangerous functions, you can hardly use PHP. And then.. its on the PHP > level, sooo. But maybe every little bit counts? > > Anyway, what are you guys doing if you're running PHP in production on > OpenBSD? Besides from NOT running PHP in production at all. > > Kindest regards. > > -- > Sent with Tutanota, the secure & ad-free mailbox. > -- Kindest regards, Tom Smyth.

Re: issue with move to php8 as default

2022-03-28 Thread Tom Smyth
> > Am i missing something, or is this a bug? If the latter, is this email > sufficient to get it looked at, or i would need to report it more > formally? > > Thanks, > ITwrx > > -- Kindest regards, Tom Smyth.

Changing rdomain on an interface after the rdomain has already been set openbsd7.0 / 7.1snapshots

2022-04-01 Thread Tom Smyth
: Operation not permitted tobsd# ifconfig -- Kindest regards, Tom Smyth.

Re: Changing rdomain on an interface after the rdomain has already been set openbsd7.0 / 7.1snapshots

2022-04-02 Thread Tom Smyth
Hey David thanks for reply makes more sens to me now ... Thanks again... Tom Smyth On Sat, 2 Apr 2022 at 04:11, David Gwynne wrote: > > loopback interfaces are special and kind of end up representing an rdomain > inside the kernel, which is where this restriction comes from. > &g

Re: TLS library problme: tlsv1 alert protocol

2022-04-06 Thread Tom Smyth
rsion:/usr/src/lib/libssl/tls13_lib.c:150: > lost connection after STARTTLS from mout.web.de > > Can anybody with more knowledge of libressl and it's error messages tell by > this error what is wrong? > > Best regards, > Stephan > -- Kindest regards, Tom Smyth.

Re: pf documentation

2022-04-07 Thread Tom Smyth
Openbsd you are running ... man pfctl or man pf.conf will help you ... if you need a intro to the intro ... https://openbsdjumpstart.org by Wesley is pretty cool and gets you started on OpenBSD and PF Hope this helps, Tom Smyth On Thu, 7 Apr 2022 at 10:28, Brodey Dover wrote: > > To be

Re: pf documentation

2022-04-07 Thread Tom Smyth
Steve, if you like books ... Peter Hansteen has written a book the book of pf which I have read and would recommend https://nostarch.com/pf3 and if you are interested in firewalls ingeneral and comparing features On Thu, 7 Apr 2022 at 10:40, Tom Smyth wrote: > > Hi Steve, > Im goin

Re: time drift in OpenBSD in proxmox (qemu-kvm) guest

2022-04-14 Thread Tom Smyth
6 irq 6 drq 2 > pckbc0 at isa0 port 0x60/5 irq 1 irq 12 > pckbd0 at pckbc0 (kbd slot) > wskbd0 at pckbd0: console keyboard, using wsdisplay0 > pms0 at pckbc0 (aux slot) > wsmouse0 at pms0 mux 0 > pcppi0 at isa0 port 0x61 > spkr0 at pcppi0 > usb0 at uhci0: USB revision 1.0 > uhub0 at usb0 configuration 1 interface 0 "Intel UHCI root hub" rev 1.00/1.00 > addr 1 > uhidev0 at uhub0 port 1 configuration 1 interface 0 "QEMU QEMU USB Tablet" > rev 2.00/0.00 addr 2 > uhidev0: iclass 3/0 > ums0 at uhidev0: 3 buttons, Z dir > wsmouse1 at ums0 mux 0 > vscsi0 at root > scsibus3 at vscsi0: 256 targets > softraid0 at root > scsibus4 at softraid0: 256 targets > root on sd0a (cf14a346fbf0559d.a) swap on sd0b dump on sd0b > fd0 at fdc0 drive 1: density unknown > > > -- Kindest regards, Tom Smyth.

Re: time drift in OpenBSD in proxmox (qemu-kvm) guest

2022-04-14 Thread Tom Smyth
Kernel sorted it On Thu, 14 Apr 2022 at 22:45, Tom Smyth wrote: > > Stuart > > is your host on an Intel System ? > > I had an awful time with Proxmox 5.0 and 5.1 > > with clock drift and console freezes > > can you try to disable the following feature in the Proxm

Re: time drift in OpenBSD in proxmox (qemu-kvm) guest

2022-04-14 Thread Tom Smyth
I have an Intel based Proxmox 7.1 being built pre-Production Ill have a go with it... Tomorrow and let you know On Thu, 14 Apr 2022 at 22:54, Tom Smyth wrote: > > Stuart, > sorry I wasnt entirely clear in my last email > > 1) you can try the /sys/module/kvm_intel/parameters/p

Re: time drift in OpenBSD in proxmox (qemu-kvm) guest

2022-04-14 Thread Tom Smyth
preemption timer on the Proxmox Host Sorry for bombing the list on this one ... On Thu, 14 Apr 2022 at 22:54, Tom Smyth wrote: > > Stuart, > sorry I wasnt entirely clear in my last email > > 1) you can try the /sys/module/kvm_intel/parameters/preemption_timer > > if the s

Re: time drift in OpenBSD in proxmox (qemu-kvm) guest

2022-04-15 Thread Tom Smyth
balanced I hope this helps, ( and thanks for your patience with my previous impulsive (albeit trying to help) replies earlier Tom Smyth On Fri, 15 Apr 2022 at 11:12, Stuart Henderson wrote: > > On 2022-04-14, Stefan Sperling wrote: > > On Thu, Apr 14, 2022 at 09:26:41PM -, Stuart Hen

calling all PFsync users for experience, gotchas, feedback, tips and tricks

2022-05-11 Thread Tom Smyth
regards, Tom Smyth.

Re: calling all PFsync users for experience, gotchas, feedback, tips and tricks

2022-05-14 Thread Tom Smyth
Hello all, Thanks for the feedback it is really helpful to have peoples experiences in the wild to help feed into the training course content. and certainly better than just my humble experience I really appreciate all of your feedback. Thanks again folks, Tom Smyth Tom Smyth On Fri, 13 May

Re: Wireguard IP packets fragmentation issue

2022-05-15 Thread Tom Smyth
x27;s not something > i have knowledge of > > - "more information in pf.conf": yes there is information in pf.conf on > mtu, mss, and nat, including the syntax for using them. again, why > wouldn;t we point people there? > > i'm happy to try and rework the text if you think it can be improved. > > jmc > -- Kindest regards, Tom Smyth.

Re: Wireguard IP packets fragmentation issue

2022-05-15 Thread Tom Smyth
ace) the Router on the VPN wont sent a Fragment needed IP message to the client because the MTU of the Tunnel was not exceeded (but the MTU on the underlay was exceeded) I hope the clarifications helps and that im right or at least that I learn something new :) Thanks Tom Smyth On Sun,

Re: Wireguard IP packets fragmentation issue

2022-05-17 Thread Tom Smyth
unnels or full packets in tunnels (layer3) ) the benefit of being able to send the full packet over the fragmented tunnel does not in any way increase perf... and the TCP MSS clamping gives the best throughput (in my experience) ... Thanks again, Tom Smyth On Sun 15 May 2022, 21:02 Stuart Hende

Re: documentation

2022-05-24 Thread Tom Smyth
es do not perform > in the circus > -- Kindest regards, Tom Smyth.

Hello Folks Im in Brussles for the evening if anyone wants to meet up

2022-06-17 Thread Tom Smyth
Hello Folks Im in Brussles for the evening if anyone wants to meet up -- Kindest regards, Tom Smyth.

Re: httpd not reachable from outside

2022-06-22 Thread Tom Smyth
hi Adriano can you just restart httpd with rcctl restart httpd did your ip addresses on external interface change ? what are the loadef firewall rules Thanks Tom Smyth On Thu 23 Jun 2022, 00:05 Adriano Barbosa, wrote: > Hi. > > My httpd was working perfectly for the last 32

Re: OpenBGPD via (WG?) Tunnel Not Learning Routes

2022-07-12 Thread Tom Smyth
valid.. I hope this helps, Tom Smyth On Wed, 13 Jul 2022 at 02:38, Tobias Fiebig < tob...@reads-this-mailinglist.com> wrote: > Heho, > I am running OpenBGPd (on 7.1+binpatches), and have some tunnel links > between hosts and up/downstreams over wg tunnels. > > I am basically

Re: vxlan operational question

2022-07-16 Thread Tom Smyth
has an idea, please let me know. > > Best regards > Florian > > -- Kindest regards, Tom Smyth.

feedback on nsh running on OpenBSD

2024-05-25 Thread Tom Smyth
Folks if any of you are using nsh on OpenBSD and you have any feedback likes or dislikes would be glad to hear of them, I will try to incorporate any feedback in the course on nsh in BSDCan or in the manual page for nsh Thanks -- Kindest regards, Tom Smyth.

route -n show blackhole routes

2024-06-24 Thread Tom Smyth
Im missing, would I be better off improving route(8) rather than stringing commands together for NSH ? comment and feedback welcome -- Kindest regards, Tom Smyth.

Re: route -n show blackhole routes

2024-06-25 Thread Tom Smyth
Thanks Stuart, Ill take a look at how the prefix searches are done ... and see if I can re-use that for route(8) if people think that it would be useful to have in route(8) Thanks again, Tom Smyth On Tue, 25 Jun 2024 at 09:39, Stuart Henderson wrote: > > On 2024-06-24, Tom Smyth

Re: route -n show blackhole routes

2024-06-25 Thread Tom Smyth
removal code in place... so more memory used but then interactive commands cannot tax the box too much when asking what are all the blackhole routes, reject routes host routes / arp entries ? Thanks Tom Smyth On Tue, 25 Jun 2024 at 10:00, Claudio Jeker wrote: > > On Tue, Jun 25, 2024 at

Re: Filesystem corruption on OpenBSD routers after power outage?

2024-07-10 Thread Tom Smyth
? Any thoughts / feedback welcome Thanks Tom Smyth On Sun, 15 Mar 2020 at 15:26, Maurice McCarthy wrote: > > There is a discussion about sofdeps here > http://openbsd-archive.7691.n7.nabble.com/What-are-the-disadvantages-of-soft-updates-td264283.html > -- Kindest regards, Tom Smyth.

Re: Filesystem corruption on OpenBSD routers after power outage?

2024-07-10 Thread Tom Smyth
etc . > > > ### > > This seems to solve problems with upgrades and package updates, basically if the partition was not synced with a copy on shutdown you would lose the updated files ... > > What problem? > > Jan > -- Kindest regards, Tom Smyth.

Re: Filesystem corruption on OpenBSD routers after power outage?

2024-07-10 Thread Tom Smyth
Hi Kirill, Ill give sync a go ... and see how it impacts performance... thanks for the suggestion, On Wed, 10 Jul 2024 at 16:30, Kirill A. Korinsky wrote: > > On Wed, 10 Jul 2024 14:44:28 +0100, > Tom Smyth wrote: > > > > #cat /etc/fstab > > > > ff0023511d131f

Re: Filesystem corruption on OpenBSD routers after power outage?

2024-07-10 Thread Tom Smyth
mfs (asynchronous, local, noexec, nosuid, size=32768 512-blocks) Thanks again On Wed, 10 Jul 2024 at 17:07, Tom Smyth wrote: > > Hi Kirill, > Ill give sync a go ... and see how it impacts performance... > thanks for the suggestion, > > On Wed, 10 Jul 2024 at 16:30, Kirill

Re: Filesystem corruption on OpenBSD routers after power outage?

2024-07-10 Thread Tom Smyth
sue (in my deployment scenario) Thanks Tom Smyth On Wed, 10 Jul 2024 at 18:39, Kirill A. Korinsky wrote: > > On Wed, 10 Jul 2024 17:40:17 +0100, > Tom Smyth wrote: > > > > swap /tmp mfs rw,nosuid,noexec,nodev,-s=262144 0 0 > > swap /var/log mfs rw,nosuid,noexec,nodev,-s=

Re: Filesystem corruption on OpenBSD routers after power outage?

2024-07-10 Thread Tom Smyth
Hi Stuart I heard that no swap stops dumps in the event of a panic On Wed, 10 Jul 2024 at 21:46, Stuart Henderson wrote: > > On 2024-07-10, Tom Smyth wrote: > > I don't include a swap partition on the routers in the field as I > > don't want them swapping to disk,

Re: Packet filter can't NAT devices 2 hops away?

2024-07-10 Thread Tom Smyth
669180 - 3 em1 > 104.167.241.2108a:2c:1c:4a:15:f4 UHLc 0 1412439 - 3 em1 > 104.167.241.21100:25:90:5a:2d:92 UHLl 0 766416 - 1 em1 > 104.167.241.255104.167.241.211UHb0 449707 - 1 em1 > 127/8 127.0.0.1 UGRS 00 32768 8 lo0 > 127.0.0.1 127.0.0.1 UHhl 2 1707666 32768 1 lo0 > > -- > jrmu > IRCNow (https://ircnow.org) > -- Kindest regards, Tom Smyth.

Re: Filesystem corruption on OpenBSD routers after power outage?

2024-07-22 Thread Tom Smyth
Hi Jan sorry for the late reply, Thanks for your comments and questions , Replies are in line On Wed, 17 Jul 2024 at 13:12, Jan Stary wrote: > > On Jul 10 17:05:55, tom.sm...@wirelessconnect.eu wrote: > > Hi Jan > > thanks for your Reply and feedback, > > please find my replies in line , > > >

folks is there any VPN pseudo device that allows for spliting a fullsized frame or packet across 2x VPN encapsulated packets

2024-07-23 Thread Tom Smyth
erformance is not brilliant , so I'm hopping there is a kernel driver device that would allow I was wondering if anyone else ran into this issue and resolved it with an existing device driver in OpenBSD... Thanks -- Kindest regards, Tom Smyth.

Re: folks is there any VPN pseudo device that allows for spliting a fullsized frame or packet across 2x VPN encapsulated packets

2024-07-23 Thread Tom Smyth
Jeker wrote: > > On Tue, Jul 23, 2024 at 08:51:19AM +0100, Tom Smyth wrote: > > Folks, > > > > As an ISP we often have to manage wans for customers where we don't > > have access to customers firewalls, and the customers expect full > > sized frames / packets

pf.conf syntax highlighting in your favourite editor

2024-07-23 Thread Tom Smyth
... Thanks again Tom Smyth.

codechecker6.24 not recognizing platform on OpenBSD Current

2024-08-24 Thread Tom Smyth
irq 12 pckbd0 at pckbc0 (kbd slot) wskbd0 at pckbd0 mux 1 pms0 at pckbc0 (aux slot) wsmouse0 at pms0 mux 0 pcppi0 at isa0 port 0x61 spkr0 at pcppi0 vmm0 at mainbus0: VMX/EPT (using slow L1TF mitigation) uhidev0 at uhub1 port 1 configuration 1 interface 0 "QEMU QEMU USB Tablet" rev 2.00/0.00 addr 2 uhidev0: iclass 3/0 ums0 at uhidev0: 3 buttons, Z dir wsmouse1 at ums0 mux 0 vscsi0 at root scsibus3 at vscsi0: 256 targets softraid0 at root scsibus4 at softraid0: 256 targets root on sd0a (f6d6d0484f41c115.a) swap on sd0b dump on sd0b -- Kindest regards, Tom Smyth. -- Kindest regards, Tom Smyth.

Feedback request from NSH users

2024-09-04 Thread Tom Smyth
submitted comprehensive bug reports and or fixes and Pull requests ... it is really appreciated... If you have encountered a problem in nsh recently we would like to tackle it in the upcoming release Thanks again Tom Smyth.

Re: Pf congestion troubleshooting

2024-09-13 Thread Tom Smyth
32 0 2529286504 > 98156 0 > vlan0 150004:3f:72:b8:bf:0a 2324523408 0 994911784 > 3752 0 > vlan0 1500 10.90/1610.90.0.102324523408 0 994911784 > 3752 0 > vlan1 150040:a6:b7:3d:ac:60 1725034503 0 1757650331 > 92484 0 > vlan1 1500 10.1/16 10.1.0.2501725034503 0 1757650331 > 92484 0 > vlan10 1500bc:97:e1:d8:55:b0 841039615 0 1905162366 > 31036 0 > > > Thanks for your help. > Marc > > > -- Kindest regards, Tom Smyth.

<    1   2   3   4   5   6   7   8   >