Re: route -n show blackhole routes

2024-06-25 Thread Tom Smyth
removal code in place... so more memory used but then interactive commands cannot tax the box too much when asking what are all the blackhole routes, reject routes host routes / arp entries ? Thanks Tom Smyth On Tue, 25 Jun 2024 at 10:00, Claudio Jeker wrote: > > On Tue, Jun 25, 2024 at

Re: Filesystem corruption on OpenBSD routers after power outage?

2024-07-10 Thread Tom Smyth
? Any thoughts / feedback welcome Thanks Tom Smyth On Sun, 15 Mar 2020 at 15:26, Maurice McCarthy wrote: > > There is a discussion about sofdeps here > http://openbsd-archive.7691.n7.nabble.com/What-are-the-disadvantages-of-soft-updates-td264283.html > -- Kindest regards, Tom Smyth.

Re: Filesystem corruption on OpenBSD routers after power outage?

2024-07-10 Thread Tom Smyth
etc . > > > ### > > This seems to solve problems with upgrades and package updates, basically if the partition was not synced with a copy on shutdown you would lose the updated files ... > > What problem? > > Jan > -- Kindest regards, Tom Smyth.

Re: Filesystem corruption on OpenBSD routers after power outage?

2024-07-10 Thread Tom Smyth
Hi Kirill, Ill give sync a go ... and see how it impacts performance... thanks for the suggestion, On Wed, 10 Jul 2024 at 16:30, Kirill A. Korinsky wrote: > > On Wed, 10 Jul 2024 14:44:28 +0100, > Tom Smyth wrote: > > > > #cat /etc/fstab > > > > ff0023511d131f

Re: Filesystem corruption on OpenBSD routers after power outage?

2024-07-10 Thread Tom Smyth
mfs (asynchronous, local, noexec, nosuid, size=32768 512-blocks) Thanks again On Wed, 10 Jul 2024 at 17:07, Tom Smyth wrote: > > Hi Kirill, > Ill give sync a go ... and see how it impacts performance... > thanks for the suggestion, > > On Wed, 10 Jul 2024 at 16:30, Kirill

Re: Filesystem corruption on OpenBSD routers after power outage?

2024-07-10 Thread Tom Smyth
sue (in my deployment scenario) Thanks Tom Smyth On Wed, 10 Jul 2024 at 18:39, Kirill A. Korinsky wrote: > > On Wed, 10 Jul 2024 17:40:17 +0100, > Tom Smyth wrote: > > > > swap /tmp mfs rw,nosuid,noexec,nodev,-s=262144 0 0 > > swap /var/log mfs rw,nosuid,noexec,nodev,-s=

Re: Filesystem corruption on OpenBSD routers after power outage?

2024-07-10 Thread Tom Smyth
Hi Stuart I heard that no swap stops dumps in the event of a panic On Wed, 10 Jul 2024 at 21:46, Stuart Henderson wrote: > > On 2024-07-10, Tom Smyth wrote: > > I don't include a swap partition on the routers in the field as I > > don't want them swapping to disk,

Re: Packet filter can't NAT devices 2 hops away?

2024-07-10 Thread Tom Smyth
669180 - 3 em1 > 104.167.241.2108a:2c:1c:4a:15:f4 UHLc 0 1412439 - 3 em1 > 104.167.241.21100:25:90:5a:2d:92 UHLl 0 766416 - 1 em1 > 104.167.241.255104.167.241.211UHb0 449707 - 1 em1 > 127/8 127.0.0.1 UGRS 00 32768 8 lo0 > 127.0.0.1 127.0.0.1 UHhl 2 1707666 32768 1 lo0 > > -- > jrmu > IRCNow (https://ircnow.org) > -- Kindest regards, Tom Smyth.

Re: Filesystem corruption on OpenBSD routers after power outage?

2024-07-22 Thread Tom Smyth
Hi Jan sorry for the late reply, Thanks for your comments and questions , Replies are in line On Wed, 17 Jul 2024 at 13:12, Jan Stary wrote: > > On Jul 10 17:05:55, tom.sm...@wirelessconnect.eu wrote: > > Hi Jan > > thanks for your Reply and feedback, > > please find my replies in line , > > >

folks is there any VPN pseudo device that allows for spliting a fullsized frame or packet across 2x VPN encapsulated packets

2024-07-23 Thread Tom Smyth
erformance is not brilliant , so I'm hopping there is a kernel driver device that would allow I was wondering if anyone else ran into this issue and resolved it with an existing device driver in OpenBSD... Thanks -- Kindest regards, Tom Smyth.

Re: folks is there any VPN pseudo device that allows for spliting a fullsized frame or packet across 2x VPN encapsulated packets

2024-07-23 Thread Tom Smyth
Jeker wrote: > > On Tue, Jul 23, 2024 at 08:51:19AM +0100, Tom Smyth wrote: > > Folks, > > > > As an ISP we often have to manage wans for customers where we don't > > have access to customers firewalls, and the customers expect full > > sized frames / packets

pf.conf syntax highlighting in your favourite editor

2024-07-23 Thread Tom Smyth
... Thanks again Tom Smyth.

codechecker6.24 not recognizing platform on OpenBSD Current

2024-08-24 Thread Tom Smyth
irq 12 pckbd0 at pckbc0 (kbd slot) wskbd0 at pckbd0 mux 1 pms0 at pckbc0 (aux slot) wsmouse0 at pms0 mux 0 pcppi0 at isa0 port 0x61 spkr0 at pcppi0 vmm0 at mainbus0: VMX/EPT (using slow L1TF mitigation) uhidev0 at uhub1 port 1 configuration 1 interface 0 "QEMU QEMU USB Tablet" rev 2.00/0.00 addr 2 uhidev0: iclass 3/0 ums0 at uhidev0: 3 buttons, Z dir wsmouse1 at ums0 mux 0 vscsi0 at root scsibus3 at vscsi0: 256 targets softraid0 at root scsibus4 at softraid0: 256 targets root on sd0a (f6d6d0484f41c115.a) swap on sd0b dump on sd0b -- Kindest regards, Tom Smyth. -- Kindest regards, Tom Smyth.

Feedback request from NSH users

2024-09-04 Thread Tom Smyth
submitted comprehensive bug reports and or fixes and Pull requests ... it is really appreciated... If you have encountered a problem in nsh recently we would like to tackle it in the upcoming release Thanks again Tom Smyth.

Re: Pf congestion troubleshooting

2024-09-13 Thread Tom Smyth
32 0 2529286504 > 98156 0 > vlan0 150004:3f:72:b8:bf:0a 2324523408 0 994911784 > 3752 0 > vlan0 1500 10.90/1610.90.0.102324523408 0 994911784 > 3752 0 > vlan1 150040:a6:b7:3d:ac:60 1725034503 0 1757650331 > 92484 0 > vlan1 1500 10.1/16 10.1.0.2501725034503 0 1757650331 > 92484 0 > vlan10 1500bc:97:e1:d8:55:b0 841039615 0 1905162366 > 31036 0 > > > Thanks for your help. > Marc > > > -- Kindest regards, Tom Smyth.

Folks anyone have success using sec(4) interfaces on Site to Site VPNs between OpenBSD and Fortinet ?

2024-11-18 Thread Tom Smyth
an ip address on and route over , any pointers would be really appreciated thanks Tom Smyth -- Kindest regards, Tom Smyth.

Re: Folks anyone have success using sec(4) interfaces on Site to Site VPNs between OpenBSD and Fortinet ?

2024-11-19 Thread Tom Smyth
priority 0 llprio 3 groups: sec inet 172.16.1.2 --> 172.16.1.1 netmask 0x It works ok .. . feels a little magic :) thanks for wrtiting the sec(4) driver and the integration with iked... ipsec Much obliged... Tom Smyth On Tue, 19 Nov 2024 at 12:04, David Gwynne wrote:

Re: Folks anyone have success using sec(4) interfaces on Site to Site VPNs between OpenBSD and Fortinet ?

2024-11-21 Thread Tom Smyth
gt; > On 20 Nov 2024, at 11:15, Tom Smyth wrote: > > > > Hi Folks, > > Thanks for the suggestions... also I have run policy based ipsec > > between fortniet and openbsd and it seemed to work well... > > we just want to run dynamic routing so it is easier have tu

<    1   2   3   4   5