Re: OpenBSD & OpenBGPD router replacement

2018-12-18 Thread Tom Smyth
control flow of traffic between your edge routers and your Stateful Firewalls Hope This Helps Tom Smyth On Wed, 19 Dec 2018 at 01:52, Max Clark wrote: > > Thanks Arnaud - I understand that it's not a stateful protocol/failover. > It's interesting from the standpoint that if I

Re: Pf traffic redirection on internal lan

2018-12-19 Thread Tom Smyth
priority 0 llprio 3 > groups: pflog > $ > > > i tried a syntax suggestion in on the bottom page of: > https://www.openbsd.org/faq/pf/rdr.html > without any luck... > > > i am just getting timeouts here, does anyone know how i could solve this? > > > T

Re: Missing libraries after upgrade to 6.4

2018-12-20 Thread Tom Smyth
now helps find the correct packages from your favourite mirror and simply populate /etc/installurl with the url of your favourite mirror, man installurl for more details I hope this helps Tom Smyth On Thu, 20 Dec 2018 at 22:13, John Ankarström wrote: > > Hello all, > > I have

Re: Httpd unix socket

2018-12-22 Thread Tom Smyth
how to get httpd to use unix sockets? > > The only solution i could image was to monkey hack a fastcgi socket to > reverse proxy to the regular socket, this was without success. > > > Take Care > Sincerely Filip -- Kindest regards, Tom Smyth Mobile: +353 87 6193172 The inf

Re: Best way to change disk layout?

2018-12-24 Thread Tom Smyth
had to move /usr and /usr/X11R6 and it was just not worth > the effort given the drive in question is pretty much just the system > whereas the content for the services it runs is on other drives. > > > > Nick. > > > -- Kindest regards, Tom Smyth Mobile: +353 87 619317

Re: Openbsd 6.1 and Current Console Freezes and lockup Proxmox PVE5.0

2019-01-03 Thread Tom Smyth
/kvm_intel/parameters/preemption_timer so OpenBSD Runs fine on an unmodified Proxmox 5.3 Box ... so the KVM / Linux Bug that caused OpenBSD guests to Freeze seems to be resolved in Proxmox 5.3 ... (so users of 5.0 , 5.1 may want to upgrade to the latest version of Proxmox I hope this helps Tom Smyth

Re: Ignore MTU on OSPFD

2019-01-14 Thread Tom Smyth
that is interconnecting the devices also supports jumbo frames of that size (and has jumbo frames enabled) you can force the MTU to a value using ifconfig or hostname.if configuration files I hope this helps Tom Smyth On Mon, 14 Jan 2019 at 20:29, Henry Bonath wrote: > Is it possible to

Re: BGP Redistribution question

2019-01-14 Thread Tom Smyth
Claudio / Job et all are doing some great work on that at the moment ... ) https://www.ssi.gouv.fr/uploads/2016/03/bgp-configuration-best-practices.pdf ( just be careful with URPF strict mode (if you have multiple paths use loose instead) I hope this Helps Tom Smyth PS ... My recommendations

Re: BGP Redistribution question

2019-01-14 Thread Tom Smyth
gt; I will continue to play around with this, just wondering if anybody has a > "good practice" way of dynamically advertising the network. > > Cheers, > Simon. > -- Kindest regards, Tom Smyth Mobile: +353 87 6193172 The information contained in this E-mail is intended onl

Re: Wireguard Pre and Post Routing for OpenBSD

2019-02-04 Thread Tom Smyth
Hi Larry >From looking at your config it looks like when the wiregusrd interface comes up You want to allow forward traffic And you want masqurade traffic leaving on eth0 1)You dont really need to add and remove those rules as the wireguard tunnel comes up id suggest just adding firewall rules st

Re: emmc support on Ubiquiti Networks UniFi Security Gateway PRO-4

2019-02-12 Thread Tom Smyth
ntroller. > > Tested on EdgeRouter Pro, and Shasta." > > Therefore I should be able to install on the emmc, correct assumption? > > If so, is there a good way to dump existing factory firmware from emmc > before I install OpenBSD? At some point I may have to restore to > factory. &

Re: emmc support on Ubiquiti Networks UniFi Security Gateway PRO-4

2019-02-12 Thread Tom Smyth
the firmware for the USG pro you can do a dry run of the recovery firmware before you load the OpenBSD OS on the USG I hope this helps... Tom On Tue, 12 Feb 2019 at 23:41, Diana Eichert wrote: > > On Tue, Feb 12, 2019 at 4:28 PM Tom Smyth > wrote: > > > > Hi Diana, > >

Best practices for validating downloaded config files in OpenBSD

2019-02-21 Thread Tom Smyth
g if there is something like rcctl.subr that my shell script could call with functions that have been written by smarter people than I, any suggestions would be welcome , -- Kindest regards, Tom Smyth

Re: IBM x3650 M3 fatal page fault in supervisor mode

2019-03-12 Thread Tom Smyth
use memory above 4GB for for PCI-E I/O sorry I cant be more specific... I just cant remember ... it was about 5 years ago... :/ but check out any advanced I/O PCI-E settings on your server board Bios I hope this helps Tom Smyth On Tue, 12 Mar 2019 at 21:34, Marco Nuessgen wrote: > >

Re: 63 bit certificate ID is libressl affected?

2019-03-13 Thread Tom Smyth
Thanks Ingo for your (as always) good attention to detail and detailed feedback I really appreciate it ... Point taken Ingo re the patch... :) and tech@ :) and discussion duly moved to misc@ it was more of a heads up Ill work on my programming skills :) cheers, Tom Smyth On Wed, 13 Mar

Re: serial console images for installing on vmd based guests

2019-03-13 Thread Tom Smyth
o stupid to use Linux. I know grub-based boot loaders give > you that option, but then I went to try Alpine Linux, and from what I'm > finding, I have to setup a config file put it back into the ISO. > -- Kindest regards, Tom Smyth Mobile: +353 87 6193172 The information contained

Re: ARP issues when using ldpd and MPLS pseudowires

2019-03-13 Thread Tom Smyth
like that, If you still need to use vmware on a lesser license perhaps a multiport card + sriov and avoid their poor virtual switches basically you will have a lot of hassle with that, I hope this helps ... 352 days later :/ Tom Smyth PS Einstein once said " you should make things as sim

NTP server on OpenBSD6.4 on KVM Guest clock drift (fixed in OpenBSD6.5 beta)

2019-03-20 Thread Tom Smyth
Hello I Had noticed that NTP updates to network devices were frequently hundreds of ms and even sometimes a few seconds of an adjustment on network devices that were configured to use my 2 OpenBSD NTP servers, logging into NTP servers and checking /var/log/daemon would see the log peppered with

Is it worth considering compling a generic MPPF kernel for user convenience

2019-04-02 Thread Tom Smyth
least 2x performance from my lab testing here I think having a higher install base of consistently complied generic kernels with pf enabled would be beneficial what do the more experienced users of OpenBSD think about this? are there any down sides with this approach ? Thanks, Tom Smyth

Re: Is it worth considering compling a generic MPPF kernel for user convenience

2019-04-02 Thread Tom Smyth
in my blood pressure :) On Tue, 2 Apr 2019 at 12:33, Theo de Raadt wrote: > > No, this is not our style, it very much doesn't fit the development > process to have users running prototype code for 6 months. > > And anyways why do you want this, since pf is going away.

Re: Is it worth considering compling a generic MPPF kernel for user convenience

2019-04-02 Thread Tom Smyth
gt; > __ > kolargol > > Sent with ProtonMail Secure Email. > > ‐‐‐ Original Message ‐‐‐ > On Tuesday, April 2, 2019 1:30 PM, Tom Smyth > wrote: > > > Hello, > > > > I was wondering what devs / more experienced users think about > > having

Re: Viewing SFP diagnostic data in OpenBSD ?

2019-04-02 Thread Tom Smyth
info specific to the cards there I hope this helps Tom Smyth On Tuesday, 2 April 2019, Rachel Roch wrote: > Hi, > > Hopefully I'm just searching the man pages wrong but I can't seem to find > any hints as to how I can view SFP diagnostics in OpenBSD (i.e. light power >

Re: Add current rtable to PS1

2019-04-02 Thread Tom Smyth
7;ps -aux -o rtable' > > and using some grep/cut-fu but I am not happy with the results. > > > > Perhaps there is something simpler that I am missing? > > Yes, `id -R` "Display the routing table of the current process": > > PS1="[\u@$\h:\w](rd

Re: Viewing SFP diagnostic data in OpenBSD ?

2019-04-02 Thread Tom Smyth
+1 for me also :) ix :) On Tue, 2 Apr 2019 at 23:38, Stuart Henderson wrote: > > :-) >

Re: Viewing SFP diagnostic data in OpenBSD ?

2019-04-04 Thread Tom Smyth
Hi David, yeah intel Pro 1000 chipsets with SFP were common enough back in the day... (probably still common) Thanks Tom Smyth On Fri, 5 Apr 2019 at 02:00, David Gwynne wrote: > > you have em(4) with sfp? > > > On 4 Apr 2019, at 18:55, Marco Prause wrote: > > > > I

Re: RS-232 serial to ethernet

2019-04-08 Thread Tom Smyth
---------- > > > > LÉVAI Dániel > > PGP key ID = 0x83B63A8F > > Key fingerprint = DBEC C66B A47A DFA2 792D 650C C69B BE4C 83B6 3A8F > > -- Kindest regards, Tom

Re: Reflected IBGP VPNv4 Routes overstaying their welcome

2019-04-08 Thread Tom Smyth
think the neighbour would withdraw the routes until the hold time has expired ... im subject to correction on this one... but it is the behaviour I have empirically observed on the bgp routers that i manage I hope this helps Tom Smyth On Mon, 8 Apr 2019 at 22:11, Henry Bonath wrote: > >

Re: OpenBGP announce customer routes

2019-04-11 Thread Tom Smyth
rated from a customer AS & > prefixes to an EBGP neighbor in Openbgpd? > > Can I somehow create an outgoing prefix list our something like a > route-map for outgoing filtering? > > Please help > > -- Kindest regards, Tom Smyth The information contained in this E-mail i

6.5 OpenBSD (amd64) ifconfig iwn join / nwid not connecting with Open Wifi Nets with a space in the SSID

2019-04-16 Thread Tom Smyth
1 interface 0 "Intel Rate Matching Hub" rev 2.00/0.00 addr 2 vscsi0 at root scsibus2 at vscsi0: 256 targets softraid0 at root scsibus3 at softraid0: 256 targets sd2 at scsibus3 targ 1 lun 0: SCSI2 0/direct fixed sd2: 238471MB, 512 bytes/sector, 488389489 sectors root on sd2a (5cf8e277253f15df.a) swap on sd2b dump on sd2b -- Kindest regards, Tom Smyth

Re: 6.5 OpenBSD (amd64) ifconfig iwn join / nwid not connecting with Open Wifi Nets with a space in the SSID

2019-04-16 Thread Tom Smyth
the same operating system and same firmware works fine when I connect to a wpa2 enabled ap with an SSID without a space if that is any help Tom Smyth On Wed, 17 Apr 2019 at 01:12, Tom Smyth wrote: > > Hello All, > I tried out 6.5 and tried joining a network with a space in the SS

Re: 6.5 OpenBSD (amd64) ifconfig iwn join / nwid not connecting with Open Wifi Nets with a space in the SSID

2019-04-17 Thread Tom Smyth
Thanks Stefan... i will use that debug tip next time im on that site... i didnt setup the ap (spaces inssid ) so had little opportunity to debug on ap side Thanks again On Wednesday, 17 April 2019, Stefan Sperling wrote: > On Wed, Apr 17, 2019 at 01:12:12AM +0100, Tom Smyth wrote: > &

Re: Stunnel 5.44 client syntax to accept connections on pty?

2019-04-17 Thread Tom Smyth
... and vice versa on the other end ... I hope this helps Tom Smyth On Wed, 17 Apr 2019 at 17:49, Martin Got wrote: > > How to use 'stunnel' in client mode to accept connections on pty from local > programs like 'ppp' instead of 'accept=IP:PORT'? > &g

chromium OpenBSD defaults

2019-04-17 Thread Tom Smyth
enable it ? -- Kindest regards, Tom Smyth

Re: chromium OpenBSD defaults

2019-04-18 Thread Tom Smyth
Theo, Nick, Stuart, thanks for your feedback on my request...I see where you all are comming from... I suppose I cant impose my personal preferences on the entire community :) I appreciate the time you took to consider it All the best, Tom smyth On Thu, 18 Apr 2019 at 17:01, Stuart Henderson

Re: eBGP routes are not reannounced

2019-04-22 Thread Tom Smyth
ne # Do not send any route updates > neighbor $spam_rs1 > neighbor $spam_rs2 > } > > group "internalnet" { > remote-as $myAS > multihop64 > neighbor$site3 > local-address $site2 > setnexthop self > tcp md5sig password password1234 > } > > -- Kindest regards, Tom Smyth.

6.5 Release amd64 upgrade syspatch reports 404 ftp file not found

2019-04-24 Thread Tom Smyth
both cdn.openbsd.org and fastly.cdn it is probably just that there are no patches available but I was wondering is there possibly a file missing that would just say no patches needed Thanks Tom Smyth -- Kindest regards, Tom Smyth.

Re: 6.5 Release amd64 upgrade syspatch reports 404 ftp file not found

2019-04-25 Thread Tom Smyth
Hello just a quick update syspatch when run on an upgraded 6.5 system ... nolonger reports ftp 404 file not found ... and seems to behave in a similar manner as 6.4 and before ... Thanks Tom Smyth On Thu, 25 Apr 2019 at 01:46, Tom Smyth wrote: > > Hello > Minor feedback, that w

Re: Qemu Agent assistance needed

2019-04-28 Thread Tom Smyth
annot find the > > necessary module needed, nor how to load it in a proper manner. > > Any hint is well appreciated. > > Best Regards,Strahil Nikolov > > Kernel modules don't exist under OpenBSD to ensure security, so don't > go there. Communication with host is probably best done through the > serial console. Take a look at the boot.conf(8) manpage. > -- Kindest regards, Tom Smyth.

Re: [6.5] Xfce: problem with shutdown menu

2019-04-28 Thread Tom Smyth
sli9RaIu/2LLwfZOQ6zMK1uleUwEAyeBxvoV2onST > Q0qLG5L7nAGxZJEJl7r1pKkYzAfL7Ak= > =BQ3J > -END PGP SIGNATURE- > -- Kindest regards, Tom Smyth.

Re: When will be created a great desktop experience for OpenBSD?

2019-05-06 Thread Tom Smyth
Can you define "great desktop experience" ? what window managers have you tried on OpenBSD, there are are a few included in base..and you can also load more with pkg_add for ease of use / transitioning from windows ..I find xfce quite nice... All the Best, Tom Smyth On Tue, 7 M

Re: When will be created a great desktop experience for OpenBSD?

2019-05-07 Thread Tom Smyth
mes, i simply do > > $ firefox > > and leave the terminal open in case i want to look at the error messages. > Sometimes, i type > > $ firefox & exit > > which is shorter. > > > or do you normally do something else that I've totally overlooked? > > No. The only program is start by clicking the mouse is xterm(1). > > Yours, > Ingo > -- Kindest regards, Tom Smyth.

Re: 6.5 PowerPC Packages

2019-05-09 Thread Tom Smyth
n we might see those > out in the mirrors. > > I also suppose in the same vein, I could be learning how to pull the > ports tree and build what I need that way :-) > > Thanks! > -- Kindest regards, Tom Smyth.

Donation question re: syspatch machines for Octeon

2019-05-17 Thread Tom Smyth
he cost of the hardware or I can purchase them off amazon and have them > shipped directly to you and/or your preferred devs. > > Thanks for all you guys do, > > > Ryan > -- Kindest regards, Tom Smyth.

Re: OpenBSD on VMware ESXi

2019-05-22 Thread Tom Smyth
nstable, high latency (result of low price :). The best would > be a short installation path to get a listening sshd and end the > installation with shell login. > > Thanks for any hint > Rodrigo > > -- Kindest regards, Tom Smyth.

Re: Installer sucks ! (Re: OpenBSD on VMware ESXi)

2019-05-23 Thread Tom Smyth
one noted this bugs before: are there no new people > installing OpenBSD? Or it is a problem only with VMWare? > > > What ESXi version are you running ? > > No idea. I must ask the hoster. > > > What disk controller are you showing to OpenBSD ? > > sd0 > > Thanks > Rodrigo > > -- Kindest regards, Tom Smyth.

Re: OpenBSD 6.5 dumps to debugger when using ifconfig bridge command

2019-06-04 Thread Tom Smyth
; spkr0 at pcppi0 > lpt0 at isa0 port 0x378/4 irq 7 > wbsio0 at isa0 port 0x2e/2: NCT5104D rev 0x52 > vmm0 at mainbus0: SVM/RVI > umass0 at uhub0 port 3 configuration 1 interface 0 "SanDisk Cruzer Glide" > rev 2.00/1.00 addr 2 > umass0: using SCSI over Bulk-Only > scsibus2 at umass0: 2 targets, initiator 0 > sd0: 29952MB, 512 bytes/sector, 61341696 sectors > uhub2 at uhub1 port 1 configuration 1 interface 0 "Advanced Micro Devices > product 0x7900" rev 2.00/0.18 addr 2 > vscsi0 at root > scsibus3 at vscsi0: 256 targets > softraid0 at root > scsibus4 at softraid0: 256 targets > root on sd0a (d3fbbb47f1a19759.a) swap on sd0b dump on sd0b > > > > > Russell P. Sutherland Email: russell . sutherland @ utoronto > dawt ca > Network Engineer, I+TS Voice: +1.416.978.0470 > 4 Bancroft Ave., Rm. 102 Cell: +1.416.803.0080 > University of TorontoFax: +1.416.978.6620 > Toronto, ON M5S 1C1 > > -- Kindest regards, Tom Smyth.

Re: Filesystem corruption on OpenBSD routers after power outage?

2019-06-04 Thread Tom Smyth
mpact-flash-firewall/ I hope this helps Tom Smyth On Tue, 4 Jun 2019 at 20:31, Mogens Jensen wrote: > I'm going to build a router for use in a remote location, and I have > chosen OpenBSD 6.5 for the task. Unfortunately, it's not possible to > protect the router with an UP

Re: Filesystem corruption on OpenBSD routers after power outage?

2019-06-04 Thread Tom Smyth
there is also an option for setting fsck to approve fixes without a prompt .. but I cant think of it off the top of my head... and this would be useful to set on your routers also On Tue, 4 Jun 2019 at 21:05, Tom Smyth wrote: > Hi Mogens, > > there are a number of threads on th

Re: Filesystem corruption on OpenBSD routers after power outage?

2019-06-06 Thread Tom Smyth
veil does not like ro /etc. > > HTH, > -- > Before enlightenment - chop wood, draw water. > After enlightenment - chop wood, draw water. > > Marko Cupać > https://www.mimar.rs/ > > -- Kindest regards, Tom Smyth.

Re: openrsync crashes when syncing local source and local destination

2019-06-26 Thread Tom Smyth
sync with two directories (the same > directories, mind you) and not -a? Is there an openrsync.core anywhere > whose backtrace you can get? > > Can you run with - and paste your exact invocation? And again with > --rsync-path openrsync as well? > > Also, can you tail /var/log/messages to see if there's anything in there? > -- Kindest regards, Tom Smyth.

intel ixl driver running Proxmox(kvm) Guest SR-IOV unable to map interrupt

2019-07-05 Thread Tom Smyth
v 0x00 pci2 at ppb1 bus 2 Im running OPENBSD 6.5 Current as of 05/07/2019 (5th of July) I have tested the same configuration with Debian linux guest and the Network cards are recognised and connect to the network fine ... Does any one have any suggestions on that unable to map interrupt erro

Re: intel ixl driver running Proxmox(kvm) Guest SR-IOV unable to map interrupt

2019-07-07 Thread Tom Smyth
seems to resolve this issue Thanks again Jonathan for your tip it really helped me Tom Smyth now the Card can be fully passed through to OpenBSD.. (PF (physical function) ) Thanks to all, Im just writing this up on the list incase someone else encounters the issue On Fri, 5 Jul 2019 at 22

virtio Network interface attached to a vm guest causes jitter on an ixl SR-IOV NIC

2019-07-07 Thread Tom Smyth
ets received, 0.0% packet loss round-trip min/avg/max/std-dev = 0.141/4.107/428.184/30.197 ms I hope this info helps other OpenBSD SR-IOV users... -- Kindest regards, Tom Smyth.

Re: shell_exec() exec() and system() not working in php 5.6 openbsd 6.4

2019-07-09 Thread Tom Smyth
Roman has, a nice mail setup on his blog that describes sending mails without exec IIRC https://www.romanzolotarev.com/ another alternative is to use postifx and maildrop folders or postdrop folder ... I hope this helps Tom Smyth On Wed, 10 Jul 2019 at 00:31, Kevin Chadwick wrote: > >

OpenVPN + OpenBSD6.0 (i386 and Mip64) latency and jitter in Openvpn TCP Bridged mode

2016-09-29 Thread Tom Smyth
>/etc/openvpn/openvpn1.conf echo daemon openvpn >>/etc/openvpn/openvpn1.conf echo #tls-auth /etc/openvpn/private/tlsauth.key >>/etc/openvpn/openvpn1.conf echo mlock >>/etc/openvpn/openvpn1.conf I have tried tcp_nodelay, etc but i get a warning about it not being supported by the kernel at run time ... any tips would be appreciated... Tom Smyth

Re: OpenVPN + OpenBSD6.0 (i386 and Mip64) latency and jitter in Openvpn TCP Bridged mode

2016-10-08 Thread Tom Smyth
holding up the kernel) no difference in result when I run openvpn on centos in a similar setup and hardware, but the small packet latency /jitter issue does not happen. I have attached the dmesg also Thanks Tom Smyth On Thu, Sep 29, 2016 at 2:43 PM, Tom Smyth wrote: > Hi Lads, > &

Flow Control on em* em0 Intel interfaces on OpenBSD

2017-01-30 Thread Tom Smyth
flowcontrol ) dev.em.X.fc:3 dev.igb.X.fc:3 dev.ix.X.fc:3 any pointers would be appreciated. -- Kindest regards, Tom Smyth

Re: OpenVPN + OpenBSD6.0 (i386 and Mip64) latency and jitter in Openvpn TCP Bridged mode

2017-02-19 Thread Tom Smyth
openvpn tunnels On 8 Oct 2016 13:13, "Tom Smyth" wrote: > Hello, > > I have tried compiling the openvpn source code on my router > (a pcengines ALU2 ) device... no difference compared with the package > I have tried increasing the process priority using renice but this

Httpd Concrete5 CMS index.php/install vs indes.php?=install on OpenBSD

2017-04-05 Thread Tom Smyth
for me ... Any comments any security issues associated with *.php* vs *.php location directive would be welcome. Hope this helps Tom Smyth -- Kindest regards, Tom Smyth

Generic SFP+ recognition in Intel based Hotlava Cards Open BSD 5.6 / 5.7 beta

2015-01-20 Thread Tom Smyth
Hi Lads, I was building an intel server with 2x 6 Port SFP+ Hotlava Intel based 10GbE cards, running on 2x Intel E5 v2 6 core Xeon CPUs and with 24 GB Ram It appears that the OpenBSD detects them with the ix(4) driver however when I plug in a generic SFP+ Module ( MikroTIiK SFP+ 10km 1310 nm Si

Re: Generic SFP+ recognition in Intel based Hotlava Cards Open BSD 5.6 / 5.7 beta

2015-02-24 Thread Tom Smyth
mapping etc as im not using these features anyway. I hope this helps... -- Kindest regards, Tom Smyth Mobile: +353 87 6193172 - PLEASE CONSIDER THE ENVIRONMENT BEFORE YOU PRINT THIS E-MAIL This email contains information which may be confidential or privileged. The

Fix for ix(4) SFP+ module detection when booting without the modules plugged in. (current vs 5.6 stable)

2015-02-24 Thread Tom Smyth
sible to include it as patch in stable branch ? failing that would someone give advice about trying to "back port" the fix ( I hate the thought of it ) any help / advice would be appreciated. Thanks -- Kindest regards, Tom Smyth Mobile: +353 87 6193172 -

Re panic due to bridge mem address conflict on IBM x3650M4 s

2015-03-09 Thread Tom Smyth
Date: Wed, 04 Mar 2015 10:09:58 +0530 From: Ninad Shaha To: misc@openbsd.org Subject: panic due to bridge mem address conflict on IBM x3650M4 server Message-ID: <54f68c9e.3070...@iitb.ac.in> Dear All, I want to use openbsd on IBM x3650 M4 server. I am able to install it successfully. But while 1

Re: DNS resolution after VPN?

2021-07-20 Thread Tom Smyth
e forwarder address you might be able to statically configure > > it, if not then you could modify vpnc-script to have it update the > > address in unwind.conf and reload it. > > Thanks, this works somewhat: > > forwarder { $ip1 $ip2 } > force accept bogus forwarder { $i

Re: ipsec with default route and routing of internal networks

2021-09-13 Thread Tom Smyth
ld someone please point me in the right direction on what to look and > configure? > > Thank you .. > > -- Kindest regards, Tom Smyth.

Re: ipsec with default route and routing of internal networks

2021-09-13 Thread Tom Smyth
13.9.2021. 12:58, Tom Smyth wrote: > > Hi Hrvoje, > > > > is 10.90.0.0/24 <http://10.90.0.0/24> local to your firewall, and if I > > understand your rule, > > ike esp from 10.90.0.0/24 <http://10.90.0.0/24> to anyyou are > saying > > encryp

Radiusd anyone know of a Simple to use web front end for usermanagement ?

2021-09-22 Thread Tom Smyth
thanks -- Kindest regards, Tom Smyth.

Recommendations on Buffer Space for Busy Unbound Resolver Service for a network

2021-12-21 Thread Tom Smyth
Recommendations on Buffer Space for Busy Unbound Resolver Service for a network serving a 3000, customers Thanks -- Kindest regards, Tom Smyth.

Re: Recommendations on Buffer Space for Busy Unbound Resolver Service for a network

2021-12-21 Thread Tom Smyth
Sorry forgot to say running OpenBSD on an amd64, and hosted in a KVM environment, Thanks Tom Smyth On Tue, 21 Dec 2021 at 21:15, Tom Smyth wrote: > Recommendations on Buffer Space for Busy Unbound Resolver Service for a > network serving a 3000, customers > > Thanks >

Re: Recommendations on Buffer Space for Busy Unbound Resolver Service for a network

2021-12-21 Thread Tom Smyth
THanks Dirk Ill give that a go Cheers, Tom Smyth On Wed, 22 Dec 2021 at 00:30, Dirk Coetzee wrote: > Hi Tom, > > I would recommend debugging using "unbound-control stats_noreset" and > referencing the unbound configuration documentation at > https://www.nlnetlabs

Re: Recommendations on Buffer Space for Busy Unbound Resolver Service for a network

2021-12-22 Thread Tom Smyth
again, Really appreciate your Tom Smyth On Wed, 22 Dec 2021 at 11:26, Stuart Henderson wrote: > On 2021-12-22, Dirk Coetzee wrote: > > Hi Tom, > > > > I would recommend debugging using "unbound-control stats_noreset" and > referencing the unbound conf

Re: Help with basic pf rule to open port 25

2022-01-05 Thread Tom Smyth
is awesome ... Tom Smyth On Wed, 5 Jan 2022 at 16:09, Sean McBride wrote: > Hi all, > > (Newbie and first time poster, please be gentle :)) > > I'm trying to set up spamd, and I think I'm having trouble with pf. So > I tried to add a very basic test rule. I adde

Re: Error on xenocara.tar.gz extraction

2022-01-13 Thread Tom Smyth
i think u need to do as root or configure doas to perform privleged operation... On Thu 13 Jan 2022, 17:26 Rob Whitlock, wrote: > Attempting to extract xenocara.tar.gz while avoiding root proviliges as > described here https://www.openbsd.org/faq/faq5.html#wsrc, I ran into an > error, shown b

Re: NSD: Could not tcp connect to X Operation timed out

2022-01-19 Thread Tom Smyth
is pf allowing tcp port53 as well as udp port53 ? On Wed 19 Jan 2022, 11:46 Laura Smith, wrote: > Hi > > OpenBSD NSD slave is driving me nuts with the following message in the > logs "Could not tcp connect to X Operation timed out". > > The answer sounds obvious, but I can: > > - Ping the IP > -

Re: shells/nsh network shells, feedback and comments requested,

2022-02-20 Thread Tom Smyth
Hello all, just following up on this as a call out to anyone who use nsh or have used it in the past, if you have any feedback / suggestions I would really appreciate that, Thanks Tom Smyth On Sun, 18 Apr 2021 at 13:31, Tom Smyth wrote: > Hello, > > If anyone has used shells/nsh

Re: Advice for hardening a PHP webserver on OpenBSD

2022-03-09 Thread Tom Smyth
need to disable all the > dangerous functions, you can hardly use PHP. And then.. its on the PHP > level, sooo. But maybe every little bit counts? > > Anyway, what are you guys doing if you're running PHP in production on > OpenBSD? Besides from NOT running PHP in production at all. > > Kindest regards. > > -- > Sent with Tutanota, the secure & ad-free mailbox. > -- Kindest regards, Tom Smyth.

Re: issue with move to php8 as default

2022-03-28 Thread Tom Smyth
> > Am i missing something, or is this a bug? If the latter, is this email > sufficient to get it looked at, or i would need to report it more > formally? > > Thanks, > ITwrx > > -- Kindest regards, Tom Smyth.

Changing rdomain on an interface after the rdomain has already been set openbsd7.0 / 7.1snapshots

2022-04-01 Thread Tom Smyth
: Operation not permitted tobsd# ifconfig -- Kindest regards, Tom Smyth.

Re: Changing rdomain on an interface after the rdomain has already been set openbsd7.0 / 7.1snapshots

2022-04-02 Thread Tom Smyth
Hey David thanks for reply makes more sens to me now ... Thanks again... Tom Smyth On Sat, 2 Apr 2022 at 04:11, David Gwynne wrote: > > loopback interfaces are special and kind of end up representing an rdomain > inside the kernel, which is where this restriction comes from. > &g

Re: TLS library problme: tlsv1 alert protocol

2022-04-06 Thread Tom Smyth
rsion:/usr/src/lib/libssl/tls13_lib.c:150: > lost connection after STARTTLS from mout.web.de > > Can anybody with more knowledge of libressl and it's error messages tell by > this error what is wrong? > > Best regards, > Stephan > -- Kindest regards, Tom Smyth.

Re: pf documentation

2022-04-07 Thread Tom Smyth
Openbsd you are running ... man pfctl or man pf.conf will help you ... if you need a intro to the intro ... https://openbsdjumpstart.org by Wesley is pretty cool and gets you started on OpenBSD and PF Hope this helps, Tom Smyth On Thu, 7 Apr 2022 at 10:28, Brodey Dover wrote: > > To be

Re: pf documentation

2022-04-07 Thread Tom Smyth
Steve, if you like books ... Peter Hansteen has written a book the book of pf which I have read and would recommend https://nostarch.com/pf3 and if you are interested in firewalls ingeneral and comparing features On Thu, 7 Apr 2022 at 10:40, Tom Smyth wrote: > > Hi Steve, > Im goin

Re: time drift in OpenBSD in proxmox (qemu-kvm) guest

2022-04-14 Thread Tom Smyth
6 irq 6 drq 2 > pckbc0 at isa0 port 0x60/5 irq 1 irq 12 > pckbd0 at pckbc0 (kbd slot) > wskbd0 at pckbd0: console keyboard, using wsdisplay0 > pms0 at pckbc0 (aux slot) > wsmouse0 at pms0 mux 0 > pcppi0 at isa0 port 0x61 > spkr0 at pcppi0 > usb0 at uhci0: USB revision 1.0 > uhub0 at usb0 configuration 1 interface 0 "Intel UHCI root hub" rev 1.00/1.00 > addr 1 > uhidev0 at uhub0 port 1 configuration 1 interface 0 "QEMU QEMU USB Tablet" > rev 2.00/0.00 addr 2 > uhidev0: iclass 3/0 > ums0 at uhidev0: 3 buttons, Z dir > wsmouse1 at ums0 mux 0 > vscsi0 at root > scsibus3 at vscsi0: 256 targets > softraid0 at root > scsibus4 at softraid0: 256 targets > root on sd0a (cf14a346fbf0559d.a) swap on sd0b dump on sd0b > fd0 at fdc0 drive 1: density unknown > > > -- Kindest regards, Tom Smyth.

Re: time drift in OpenBSD in proxmox (qemu-kvm) guest

2022-04-14 Thread Tom Smyth
Kernel sorted it On Thu, 14 Apr 2022 at 22:45, Tom Smyth wrote: > > Stuart > > is your host on an Intel System ? > > I had an awful time with Proxmox 5.0 and 5.1 > > with clock drift and console freezes > > can you try to disable the following feature in the Proxm

Re: time drift in OpenBSD in proxmox (qemu-kvm) guest

2022-04-14 Thread Tom Smyth
I have an Intel based Proxmox 7.1 being built pre-Production Ill have a go with it... Tomorrow and let you know On Thu, 14 Apr 2022 at 22:54, Tom Smyth wrote: > > Stuart, > sorry I wasnt entirely clear in my last email > > 1) you can try the /sys/module/kvm_intel/parameters/p

Re: time drift in OpenBSD in proxmox (qemu-kvm) guest

2022-04-14 Thread Tom Smyth
preemption timer on the Proxmox Host Sorry for bombing the list on this one ... On Thu, 14 Apr 2022 at 22:54, Tom Smyth wrote: > > Stuart, > sorry I wasnt entirely clear in my last email > > 1) you can try the /sys/module/kvm_intel/parameters/preemption_timer > > if the s

Re: time drift in OpenBSD in proxmox (qemu-kvm) guest

2022-04-15 Thread Tom Smyth
balanced I hope this helps, ( and thanks for your patience with my previous impulsive (albeit trying to help) replies earlier Tom Smyth On Fri, 15 Apr 2022 at 11:12, Stuart Henderson wrote: > > On 2022-04-14, Stefan Sperling wrote: > > On Thu, Apr 14, 2022 at 09:26:41PM -, Stuart Hen

calling all PFsync users for experience, gotchas, feedback, tips and tricks

2022-05-11 Thread Tom Smyth
regards, Tom Smyth.

Re: calling all PFsync users for experience, gotchas, feedback, tips and tricks

2022-05-14 Thread Tom Smyth
Hello all, Thanks for the feedback it is really helpful to have peoples experiences in the wild to help feed into the training course content. and certainly better than just my humble experience I really appreciate all of your feedback. Thanks again folks, Tom Smyth Tom Smyth On Fri, 13 May

Re: Wireguard IP packets fragmentation issue

2022-05-15 Thread Tom Smyth
x27;s not something > i have knowledge of > > - "more information in pf.conf": yes there is information in pf.conf on > mtu, mss, and nat, including the syntax for using them. again, why > wouldn;t we point people there? > > i'm happy to try and rework the text if you think it can be improved. > > jmc > -- Kindest regards, Tom Smyth.

Re: Wireguard IP packets fragmentation issue

2022-05-15 Thread Tom Smyth
ace) the Router on the VPN wont sent a Fragment needed IP message to the client because the MTU of the Tunnel was not exceeded (but the MTU on the underlay was exceeded) I hope the clarifications helps and that im right or at least that I learn something new :) Thanks Tom Smyth On Sun,

Re: Wireguard IP packets fragmentation issue

2022-05-17 Thread Tom Smyth
unnels or full packets in tunnels (layer3) ) the benefit of being able to send the full packet over the fragmented tunnel does not in any way increase perf... and the TCP MSS clamping gives the best throughput (in my experience) ... Thanks again, Tom Smyth On Sun 15 May 2022, 21:02 Stuart Hende

Re: documentation

2022-05-24 Thread Tom Smyth
es do not perform > in the circus > -- Kindest regards, Tom Smyth.

Hello Folks Im in Brussles for the evening if anyone wants to meet up

2022-06-17 Thread Tom Smyth
Hello Folks Im in Brussles for the evening if anyone wants to meet up -- Kindest regards, Tom Smyth.

Re: httpd not reachable from outside

2022-06-22 Thread Tom Smyth
hi Adriano can you just restart httpd with rcctl restart httpd did your ip addresses on external interface change ? what are the loadef firewall rules Thanks Tom Smyth On Thu 23 Jun 2022, 00:05 Adriano Barbosa, wrote: > Hi. > > My httpd was working perfectly for the last 32

Re: OpenBGPD via (WG?) Tunnel Not Learning Routes

2022-07-12 Thread Tom Smyth
valid.. I hope this helps, Tom Smyth On Wed, 13 Jul 2022 at 02:38, Tobias Fiebig < tob...@reads-this-mailinglist.com> wrote: > Heho, > I am running OpenBGPd (on 7.1+binpatches), and have some tunnel links > between hosts and up/downstreams over wg tunnels. > > I am basically

Re: vxlan operational question

2022-07-16 Thread Tom Smyth
has an idea, please let me know. > > Best regards > Florian > > -- Kindest regards, Tom Smyth.

feedback on nsh running on OpenBSD

2024-05-25 Thread Tom Smyth
Folks if any of you are using nsh on OpenBSD and you have any feedback likes or dislikes would be glad to hear of them, I will try to incorporate any feedback in the course on nsh in BSDCan or in the manual page for nsh Thanks -- Kindest regards, Tom Smyth.

route -n show blackhole routes

2024-06-24 Thread Tom Smyth
Im missing, would I be better off improving route(8) rather than stringing commands together for NSH ? comment and feedback welcome -- Kindest regards, Tom Smyth.

Re: route -n show blackhole routes

2024-06-25 Thread Tom Smyth
Thanks Stuart, Ill take a look at how the prefix searches are done ... and see if I can re-use that for route(8) if people think that it would be useful to have in route(8) Thanks again, Tom Smyth On Tue, 25 Jun 2024 at 09:39, Stuart Henderson wrote: > > On 2024-06-24, Tom Smyth

<    1   2   3   4   5   >