--- Log opened Sat Jul 18 00:00:00 2026 --- Day changed Sat Jul 18 2026 00:00 -!- monolith [~rm@p5de95dba.dip0.t-ipconnect.de] has quit [Quit: Lost terminal] 00:07 -!- agentcasey [~dracos@99-106-182-62.lightspeed.elpstx.sbcglobal.net] has joined #openbsd 00:13 -!- vdamewood [~vdamewood@fedora/vdamewood] has quit [Quit: My Mac has gone to sleep. ZZZzzz…] 00:15 -!- DarkTaffy [~oldben@user/Old-Ben-Jabroni] has quit [Remote host closed the connection] 00:15 -!- commandk [~commandk@user/commandk] has joined #openbsd 00:15 -!- DarkTaffy [~oldben@user/Old-Ben-Jabroni] has joined #openbsd 00:36 -!- ublx [~ublx@user/ublx] has quit [Quit: ublx] 00:36 -!- memset [~memset@gateway/tor-sasl/memset] has quit [Remote host closed the connection] 00:37 -!- memset [~memset@gateway/tor-sasl/memset] has joined #openbsd 01:00 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has joined #openbsd 01:02 -!- rebo [~rebo@h-98-128-174-229.A785.priv.bahnhof.se] has quit [Ping timeout: 265 seconds] 01:03 -!- SnoopyOnZNCNow [SnoopyOnZN@user/OnASnoopPhone] has quit [Quit: Wait do you see this? Did I really manage to edit the message that appears after "Quit:" and that nobody actually writes about when they see it anyway? Even if it's ultra absurd like 'do crimes, it's the law' or something. etc, philosophical quit mesg] 01:03 -!- _10KBps [download@user/Guest-666:67627] has quit [Quit: Ping timeout: ∞ seconds] 01:05 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has quit [Client Quit] 01:05 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has joined #openbsd 01:05 -!- _10KBps [download@user/Guest-666:67627] has joined #openbsd 01:10 -!- SnoopyOnZNCNow [SnoopyOnZN@user/OnASnoopPhone] has joined #openbsd 01:22 -!- bazflo [~bazflo@user/bazflo] has quit [Remote host closed the connection] 01:22 -!- bazflo [~bazflo@user/bazflo] has joined #openbsd 01:24 < thrig> gemini://thrig.me/blog/2026/07/18/valid-ip-address.gmi 01:30 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has quit [Remote host closed the connection] 01:30 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has joined #openbsd 01:33 -!- lockywolf [~lockywolf@coconut.lockywolf.net] has quit [Read error: Connection reset by peer] 01:33 -!- lockywolf_ [~lockywolf@coconut.lockywolf.net] has joined #openbsd 01:37 -!- fedaykin [~rusty@user/fedaykin] has quit [Quit: leaving] 01:39 -!- mischief [~mischief@136.25.5.185] has quit [Ping timeout: 252 seconds] 01:48 -!- Bradipo [a6r6y9nars@50.77.44.19] has quit [Quit: Lost terminal] 01:58 -!- mischief [~mischief@136.25.5.185] has joined #openbsd 02:09 -!- memset [~memset@gateway/tor-sasl/memset] has quit [Remote host closed the connection] 02:09 -!- housemate [~housemate@2403-4800-940a-3401-2eee-3a55-959e-c5b7.sta.dodo.net.au] has quit [Quit: https://ineedsomeacidtocalmmedown.space/] 02:11 -!- memset [~memset@gateway/tor-sasl/memset] has joined #openbsd 02:13 -!- memset [~memset@gateway/tor-sasl/memset] has quit [Remote host closed the connection] 02:14 -!- gotohello [~gotohello@user/gotohello] has quit [Quit: Client closed] 02:15 -!- mytec333 [~mytec333@user/mytec333] has quit [Quit: WeeChat 4.8.1] 02:15 -!- _zip100 [~zip100@185.209.196.210] has quit [Ping timeout: 249 seconds] 02:16 -!- memset [~memset@gateway/tor-sasl/memset] has joined #openbsd 02:16 -!- gotohello [~gotohello@user/gotohello] has joined #openbsd 02:17 -!- zip100 [~zip100@185.209.196.210] has joined #openbsd 02:20 -!- sjg [~sjg@user/sjg] has quit [Ping timeout: 265 seconds] 02:21 -!- housemate [~housemate@2403-4800-940a-3401-2eee-3a55-959e-c5b7.sta.dodo.net.au] has joined #openbsd 02:22 -!- sjg [~sjg@user/sjg] has joined #openbsd 02:25 -!- hotsoup [~hotsoup@user/hotsoup] has quit [Quit: ZNC 1.9.1+deb2+b3 - https://znc.in] 02:25 -!- gachikuku_ [~gachikuku@kamil.gr] has quit [Read error: Connection reset by peer] 02:25 -!- gachikuku__ [~gachikuku@kamil.gr] has joined #openbsd 02:26 -!- hotsoup [~hotsoup@user/hotsoup] has joined #openbsd 02:26 -!- gachikuku__ is now known as gachikuku_ 02:29 -!- commandk [~commandk@user/commandk] has quit [Ping timeout: 252 seconds] 02:30 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has quit [Quit: WeeChat 4.9.3] 02:30 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has joined #openbsd 02:31 < dg> ninjin: for signal https://github.com/opencrew-tech/openbsd-electron has signal-desktop, although I've not tried it 02:32 < ninjin> dg: Thank you, will have a look. 02:37 -!- lac [~lac@user/prettywellred] has joined #openbsd 02:38 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has quit [Ping timeout: 261 seconds] 02:54 -!- _zip100 [~zip100@193.32.248.169] has joined #openbsd 02:54 -!- zip100 [~zip100@185.209.196.210] has quit [Ping timeout: 256 seconds] 02:58 -!- tvtoon [~The_cUnix@user/tvtoon] has quit [Quit: "Bubble, she got it all!"] 03:07 -!- housemate [~housemate@2403-4800-940a-3401-2eee-3a55-959e-c5b7.sta.dodo.net.au] has quit [Quit: https://ineedsomeacidtocalmmedown.space/] 03:14 -!- tangentnet [~tangent@user/tangentnet] has joined #openbsd 03:15 -!- lac [~lac@user/prettywellred] has quit [Quit: WeeChat 4.9.3] 03:15 -!- housemate [~housemate@2403-4800-940a-3401-2eee-3a55-959e-c5b7.sta.dodo.net.au] has joined #openbsd 03:22 -!- jambove [~jambove@BC06399B.dsl.pool.telekom.hu] has quit [Ping timeout: 264 seconds] 03:24 -!- jambove [~jambove@bc06399b.dsl.pool.telekom.hu] has joined #openbsd 03:26 -!- housemate [~housemate@2403-4800-940a-3401-2eee-3a55-959e-c5b7.sta.dodo.net.au] has quit [Quit: https://ineedsomeacidtocalmmedown.space/] 03:48 -!- Zerock [~0ck@copyfree/pedant/zerock] has quit [Ping timeout: 249 seconds] 03:50 -!- mbuhl [~mbuhl@user/mbuhl] has quit [Remote host closed the connection] 03:51 -!- Foxy_ [~fox@user/Foxy/x-8224177] has quit [Ping timeout: 244 seconds] 03:52 -!- mbuhl [~mbuhl@user/mbuhl] has joined #openbsd 03:53 -!- Foxy_ [~fox@user/Foxy/x-8224177] has joined #openbsd 03:55 -!- housemate [~housemate@2403-4800-940a-3401-2eee-3a55-959e-c5b7.sta.dodo.net.au] has joined #openbsd 03:55 -!- fflam [~mdt@2600:4040:110a:d100::1c19] has quit [Ping timeout: 240 seconds] 03:57 -!- commandk [~commandk@user/commandk] has joined #openbsd 04:01 -!- rebo [~rebo@h-98-128-174-229.A785.priv.bahnhof.se] has joined #openbsd 04:09 -!- commandk [~commandk@user/commandk] has quit [Remote host closed the connection] 04:10 -!- commandk [~commandk@user/commandk] has joined #openbsd 04:25 -!- izder456 [~izder456@user/izder456] has quit [Remote host closed the connection] 04:25 -!- tux100 [~tux100@user/tux100] has joined #openbsd 04:26 -!- thfr [~thfr@104.238.135.228] has quit [Read error: Connection reset by peer] 04:27 -!- byteskeptical [~amnesia@user/byteskeptical] has quit [Remote host closed the connection] 04:27 -!- izder456 [~izder456@user/izder456] has joined #openbsd 04:27 -!- tux100 is now known as tuxy 04:28 -!- tuxy is now known as sambalala 04:31 -!- ivdsangen [~ivo@83-82-34-145.cable.dynamic.v4.ziggo.nl] has joined #openbsd 04:32 < commandk> sooo.. i was preparing for first major release upgrade and noticed i hadnt installed available firmware so thought i should do that. ran `fw_update -av`. started failing in the middle of it because full / (now at 106%) and /tmp (eventually cleare after command finished) 04:32 < commandk> seems like it filled up relatively early and failed most of the attempted writes 04:33 < commandk> any advice on how to safely recover space and make sure system not borked? 04:33 < commandk> my / was autoprovisioned by installation at a modest 164MB 04:34 < commandk> this is for headless system so prob dont need the amdgpu 04:39 -!- byteskeptical [~amnesia@user/byteskeptical] has joined #openbsd 04:40 -!- pepelegal [ovodecodor@user/pepelegal] has quit [Quit: IRC+ TheLounge - https://ircplus.net/] 04:41 -!- gawen [~gawen@user/gawen] has quit [Quit: cya] 04:42 -!- gawen [~gawen@user/gawen] has joined #openbsd 04:50 -!- rv1sr [~rv1sr@user/rv1sr] has joined #openbsd 04:54 -!- mete- [~beelink@186.250.11.107] has quit [Read error: Connection reset by peer] 04:55 -!- sambalala [~tux100@user/tux100] has quit [Remote host closed the connection] 04:55 -!- mete- [~beelink@186.250.11.107] has joined #openbsd 04:55 -!- fedaykin [~rusty@user/fedaykin] has joined #openbsd 04:59 -!- Matt|home [~Orbital@n58-104-134-6.mrk2.qld.optusnet.com.au] has quit [Ping timeout: 249 seconds] 05:24 -!- x7e [~x7e@user/x7e] has quit [Quit: ZNC - https://znc.in] 05:24 -!- x7e [~x7e@user/x7e] has joined #openbsd 05:34 -!- apotheon [~apotheon@copyfree/founder/apotheon] has joined #openbsd 05:47 -!- loganaden [~macbookm4@102.117.116.150] has joined #openbsd 05:48 -!- Xenguy [~Xenguy@devuan/developer/Xenguy] has quit [Ping timeout: 254 seconds] 05:49 -!- pepelegal [thelounge@user/pepelegal] has joined #openbsd 05:53 -!- pepelegal [thelounge@user/pepelegal] has quit [Client Quit] 05:54 -!- pepelegal [thelounge@user/pepelegal] has joined #openbsd 05:56 -!- pepelegal [thelounge@user/pepelegal] has quit [Client Quit] 05:56 -!- pepelegal [thelounge@user/pepelegal] has joined #openbsd 05:57 -!- pepelegal [thelounge@user/pepelegal] has quit [Client Quit] 05:58 -!- pepelegal [thelounge@user/pepelegal] has joined #openbsd 05:58 -!- pepelegal [thelounge@user/pepelegal] has quit [Client Quit] 05:59 -!- pepelegal [thelounge@user/pepelegal] has joined #openbsd 05:59 -!- eht [~eht@user/eht] has joined #openbsd 06:03 -!- pepelegal [thelounge@user/pepelegal] has quit [Client Quit] 06:05 -!- pepelegal [thelounge@user/pepelegal] has joined #openbsd 06:06 -!- pepelegal [thelounge@user/pepelegal] has quit [Client Quit] 06:06 -!- pepelegal [thelounge@user/pepelegal] has joined #openbsd 06:08 -!- loganaden [~macbookm4@102.117.116.150] has quit [Ping timeout: 266 seconds] 06:08 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has joined #openbsd 06:12 -!- _\_ [~o@user/offon] has quit [Read error: Connection reset by peer] 06:12 -!- lll [~o@user/offon] has joined #openbsd 06:13 -!- lll is now known as _\_ 06:13 -!- bket_ [~bket@user/bket] has joined #openbsd 06:14 -!- bket [~bket@user/bket] has quit [Read error: Connection reset by peer] 06:14 -!- pepelegal [thelounge@user/pepelegal] has quit [Quit: IRC+ TheLounge - https://ircplus.net/] 06:14 -!- pepelegal [thelounge@user/pepelegal] has joined #openbsd 06:15 -!- ivdsangen [~ivo@83-82-34-145.cable.dynamic.v4.ziggo.nl] has quit [Quit: leaving] 06:16 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has quit [Ping timeout: 244 seconds] 06:17 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has joined #openbsd 06:21 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has quit [Ping timeout: 254 seconds] 06:22 -!- loganaden [~macbookm4@102.117.116.150] has joined #openbsd 06:22 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has joined #openbsd 06:27 -!- ivdsangen [~ivo@83-82-34-145.cable.dynamic.v4.ziggo.nl] has joined #openbsd 06:27 -!- pepelegal [thelounge@user/pepelegal] has quit [Quit: IRC+ TheLounge - https://ircplus.net/] 06:28 -!- pepelegal [ovodecodor@user/pepelegal] has joined #openbsd 06:28 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has quit [Ping timeout: 268 seconds] 06:37 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has joined #openbsd 06:38 -!- loganaden [~macbookm4@102.117.116.150] has quit [Ping timeout: 268 seconds] 06:40 -!- housemate [~housemate@2403-4800-940a-3401-2eee-3a55-959e-c5b7.sta.dodo.net.au] has quit [Quit: https://ineedsomeacidtocalmmedown.space/] 06:42 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has quit [Ping timeout: 264 seconds] 07:04 -!- jgh [~jgh@hellmouth.gulag.org.uk] has joined #openbsd 07:05 -!- byteskeptical [~amnesia@user/byteskeptical] has quit [Ping timeout: 243 seconds] 07:07 -!- byteskeptical [~amnesia@user/byteskeptical] has joined #openbsd 07:09 -!- rmerritt [~rmerritt@user/rmerritt] has quit [Read error: Connection reset by peer] 07:10 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has joined #openbsd 07:13 -!- housemate [~housemate@2403-4800-940a-3401-2eee-3a55-959e-c5b7.sta.dodo.net.au] has joined #openbsd 07:14 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has quit [Ping timeout: 247 seconds] 07:29 -!- jambove [~jambove@bc06399b.dsl.pool.telekom.hu] has quit [Ping timeout: 240 seconds] 07:32 -!- jambove [~jambove@BC24E855.dsl.pool.telekom.hu] has joined #openbsd 07:36 -!- commandk [~commandk@user/commandk] has quit [Ping timeout: 252 seconds] 07:38 -!- ursa [~ursa@user/ursa] has joined #openbsd 07:38 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has joined #openbsd 08:00 -!- medium_cool [~medium_co@136.36.128.48] has quit [Remote host closed the connection] 08:01 -!- medium_cool [~medium_co@136.36.128.48] has joined #openbsd 08:10 -!- librecat [uid714233@id-714233.helmsley.irccloud.com] has joined #openbsd 08:13 -!- ewig [~ewig@user/ewig] has quit [Remote host closed the connection] 08:31 -!- hotsoup_ [~hotsoup@user/hotsoup] has joined #openbsd 08:34 -!- hotsoup [~hotsoup@user/hotsoup] has quit [Ping timeout: 260 seconds] 08:42 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has quit [Ping timeout: 265 seconds] 08:46 -!- Xenguy [~Xenguy@devuan/developer/Xenguy] has joined #openbsd 08:46 -!- loganaden [~macbookm4@102.117.116.150] has joined #openbsd 08:58 -!- hotsoup_ [~hotsoup@user/hotsoup] has quit [Quit: ZNC 1.9.1+deb2+b3 - https://znc.in] 08:59 -!- hotsoup [~hotsoup@user/hotsoup] has joined #openbsd 09:01 < ursa> For openssh, I would expect UserKnownHostsFile=none to work like UserKnownHostsFile=/dev/null according to https://man.openbsd.org/ssh_config#UserKnownHostsFile but I see different behavior https://bpa.st/T3HA why? 09:01 < ursa> In other words, I can't make UserKnownHostsFile=none work, I have to use UserKnownHostsFile=/dev/null 09:05 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has joined #openbsd 09:09 -!- pfc [~pfc@user/pfc] has quit [Ping timeout: 245 seconds] 09:09 -!- pfc [~pfc@user/pfc] has joined #openbsd 09:10 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has quit [Ping timeout: 265 seconds] 09:16 -!- hotsoup [~hotsoup@user/hotsoup] has quit [Ping timeout: 241 seconds] 09:17 -!- eki [~eki@88-148-144-32.bb.dnainternet.fi] has quit [Quit: leaving] 09:17 -!- hotsoup [~hotsoup@user/hotsoup] has joined #openbsd 09:18 -!- eki [~eki@88-148-144-32.bb.dnainternet.fi] has joined #openbsd 09:18 -!- loganaden [~macbookm4@102.117.116.150] has quit [Ping timeout: 244 seconds] 09:21 < IcePic> ursa: seems like the effect is all but the same, except /dev/null is an empty file you can open, and (try to) read from that does not contain a hostkey entry for localhost (obviously) whereas none means don't-even-try 09:23 < ursa> Which leads to being unable to use `ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=none $server` 09:23 < ursa> But `ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null $server` works. 09:24 < ursa> I'm not sure if I'm trying to use the options wrong. I want to connect to some server without caring at all about the keys (they are ephemeral, and change all the time, and it's on a secure connection already). 09:24 < ursa> UserKnownHostsFile=none is documented, UserKnownHostsFile=/dev/null is kind of an abuse of /dev/null 09:28 < ursa> Is there a way of achieving what I want, while using documented options and documented option values? 09:36 -!- vdamewood [~vdamewood@fedora/vdamewood] has joined #openbsd 09:36 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has joined #openbsd 09:37 -!- kris_ [~kris_@user/kris-:46098] has quit [Ping timeout: 252 seconds] 09:41 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has quit [Ping timeout: 252 seconds] 09:45 -!- hotsoup [~hotsoup@user/hotsoup] has quit [Quit: ZNC 1.9.1+deb2+b3 - https://znc.in] 09:46 -!- hotsoup [~hotsoup@user/hotsoup] has joined #openbsd 09:51 -!- kris_ [~kris_@user/kris-:46098] has joined #openbsd 09:59 -!- rc [~rc@user/rc] has quit [Quit: nyaa~] 10:00 < rIMpossible> Today I tried 'failsafe' xenodm session (I did never in the last 40 years of using X Window). After logging in normal, it starts a default session of CDE instead of the last saved one. 10:01 < rIMpossible> Has anyone else experienced this problem with a session saving desktop environment (LXDE, XFCE, ...) ? 10:01 < rIMpossible> s/problem/behaviour 10:07 -!- moetuning [~Jean-luc@159.196.14.95] has quit [Ping timeout: 265 seconds] 10:08 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has joined #openbsd 10:09 -!- byteskeptical [~amnesia@user/byteskeptical] has quit [Ping timeout: 257 seconds] 10:11 -!- byteskeptical [~amnesia@user/byteskeptical] has joined #openbsd 10:13 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has quit [Ping timeout: 265 seconds] 10:16 -!- ublx [~ublx@user/ublx] has joined #openbsd 10:19 -!- akinji [~akinji@user/akinji] has joined #openbsd 10:20 -!- akinji [~akinji@user/akinji] has quit [Read error: Connection reset by peer] 10:20 -!- akinji [~akinji@user/akinji] has joined #openbsd 10:21 < byteskeptical> ursa: may have to also set GlobalKnownHostsFile=none 10:23 < ursa> Makes no difference in my testing. 10:25 < IcePic> I was also thinking that, the user-file might be or not be an override for the global, but if you say "i dont want to have a userfile" then it might fall back to the global one which has entries (possibly) but which do not match 10:25 < byteskeptical> could also just use UpdateHostKeys=yes 10:26 < byteskeptical> and not worry about it after accepting it once 10:27 < ursa> That would progressively slow down connections as the known hosts file grows unbounded. 10:27 < ursa> This is for connecting to virtual machines, they are ephemeral and numerous. 10:28 -!- loganaden [~macbookm4@102.117.116.150] has joined #openbsd 10:38 < byteskeptical> ? not if you use -o UserKnownHostsFile=/dev/null in conjunction 10:40 -!- xse [~xse@krkrkr.org] has quit [Remote host closed the connection] 10:40 -!- vados [~vados@46-133-58-215.mobile.vf-ua.net] has quit [Read error: Connection reset by peer] 10:40 < ursa> The point is to use UserKnownHostsFile=none not UserKnownHostsFile=/dev/null :) 10:42 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has joined #openbsd 10:42 -!- sonya [~nologin@gateway/tor-sasl/sonya] has joined #openbsd 10:42 -!- xse [~xse@krkrkr.org] has joined #openbsd 10:43 < byteskeptical> no sure what your trying to achieve then 10:43 < ursa> I'm trying to use the documented value for the UserKnownHostsFile option. 10:43 < byteskeptical> to do what? 10:44 < ursa> To not use a known_hosts file. 10:44 < byteskeptical> that's not what the option does though... 10:44 < ursa> It says "A value of none causes ssh(1) to ignore any user-specific known hosts files." 10:45 < byteskeptical> yes it doesn't say it disables any/all host key checking 10:45 < byteskeptical> just ignores the user specific ones 10:46 < ursa> I'm starting to see what you mean. 10:46 < ursa> Does it attempt to update the global hosts file then? 10:46 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has quit [Ping timeout: 245 seconds] 10:47 < ursa> Because even `ssh -F none -o UserKnownHostsFile=none -o GlobalKnownHostsFile=/dev/null localhost` does not work. 10:47 < byteskeptical> I suspect it will check against the global but not sure it will allow a user to update the global one without additional permissions 10:47 < rIMpossible> IgnoreUserKnownHosts in sshd_config(5) is - IMHO - what you want 10:48 < rIMpossible> Default = no, you want to set to yes 10:48 < ursa> That's the sshd option, I'm looking at the ssh options. 10:49 < byteskeptical> either way it won't disable host key checking which is what I think you actually trying to achieve 10:49 < ursa> "command-line: line 0: Bad configuration option: ignoreuserknownhosts" 10:50 < ursa> byteskeptical: yes, I'm trying to disable host key checking, by using documented values to documented options. 10:50 < byteskeptical> I don't know if you can avoid the check altogether pretty sure it baked into the protocol 10:50 -!- ssm_ [~ssm_@mail.howdoesmycode.work] has quit [Ping timeout: 252 seconds] 10:50 < byteskeptical> best you can do is automated the acceptance and point it to a location that won't grow (your other concern) 10:51 -!- loganaden [~macbookm4@102.117.116.150] has quit [Ping timeout: 251 seconds] 10:52 < IcePic> /dev/null will not grow much even if written to 10:52 < byteskeptical> or run a patched version 10:52 -!- vados [~vados@46-133-42-68.mobile.vf-ua.net] has joined #openbsd 10:57 < rIMpossible> I am not a ssh/sshd genius, but for me it sounds, that if this would be possible, this could be possibly a security flaw, if an ordinary user could override this setting 11:00 < IcePic> rIMpossible: don't ever look at how people run ansible, its all of this, all the time 11:03 < sibiria> ansible is great when you stop at letting the node run solely off of sshd instead of a billion python scripts. that's when it gets gruesome quickly 11:03 < sibiria> aka "agent-less" ansible 11:04 < rIMpossible> I know, leaving the comfort zone is a holy effort ;) 11:06 < sibiria> my perspective is that ansible as an agent on every target node is a heavy setup, when so much of the work can be achieved only using ssh and no agent 11:07 < byteskeptical> you can also have the process creating your vm's (ansible) save the host keys to a known location and keep the check or use something like StrictHostKeyChecking=accept-new at least 11:10 < byteskeptical> I think a lot of people try to breeze by configuration of these types of tools with hacky work-arounds in the name of automation telling themselves it doesn't matter 11:13 -!- psydroid2 [~psydroid@user/psydroid] has joined #openbsd 11:15 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has joined #openbsd 11:19 -!- crash_ [~crash_@h-176-10-196-24.A980.priv.bahnhof.se] has joined #openbsd 11:20 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has quit [Ping timeout: 248 seconds] 11:27 -!- blazinghell [~blazinghe@user/blazinghell] has joined #openbsd 11:28 < blazinghell> hi all 11:36 -!- sonne [~vmlinuz@user/sonne] has quit [Ping timeout: 252 seconds] 11:41 -!- Zerock [~0ck@copyfree/pedant/zerock] has joined #openbsd 11:46 -!- blazinghell [~blazinghe@user/blazinghell] has quit [K-Lined] 11:47 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has joined #openbsd 11:47 -!- eht [~eht@user/eht] has quit [Ping timeout: 273 seconds] 11:48 -!- eht [~eht@user/eht] has joined #openbsd 11:52 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has quit [Ping timeout: 244 seconds] 12:00 -!- akinji [~akinji@user/akinji] has quit [Quit: Konversation terminated!] 12:00 -!- akinji [~akinji@user/akinji] has joined #openbsd 12:01 -!- phil2 [~phil@user/phil:65669] has quit [Quit: WeeChat 4.8.1] 12:02 -!- makr [~textual@2a00:f2a:e1df:4320:31d7:e72d:d7bf:a31d] has quit [Ping timeout: 272 seconds] 12:03 -!- makr [~textual@2a00:f2a:e1df:4320:4881:49db:ab25:db5d] has joined #openbsd 12:04 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has joined #openbsd 12:04 -!- akinji [~akinji@user/akinji] has quit [Remote host closed the connection] 12:05 -!- akinji [~akinji@user/akinji] has joined #openbsd 12:09 -!- blazinghell [~blazinghe@user/blazinghell] has joined #openbsd 12:11 < blazinghell> hi all 12:12 -!- blazinghell [~blazinghe@user/blazinghell] has quit [K-Lined] 12:13 -!- fflam [~mdt@2600:4040:110a:d100::1c19] has joined #openbsd 12:15 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has quit [Ping timeout: 253 seconds] 12:19 -!- makr [~textual@2a00:f2a:e1df:4320:4881:49db:ab25:db5d] has quit [Ping timeout: 272 seconds] 12:20 -!- akinji [~akinji@user/akinji] has quit [Quit: Konversation terminated!] 12:20 -!- mexen [uid495612@user/mexen] has joined #openbsd 12:21 -!- Real-Donal-Trump [~machophd@103.216.221.89] has joined #openbsd 12:21 -!- akinji [~akinji@user/akinji] has joined #openbsd 12:22 -!- Real-Donal-Trump [~machophd@103.216.221.89] has quit [K-Lined] 12:23 -!- akinji [~akinji@user/akinji] has quit [Client Quit] 12:24 -!- akinji [~akinji@user/akinji] has joined #openbsd 12:25 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has joined #openbsd 12:25 -!- bradd [~quassel@user/bradd] has quit [Quit: No Ping reply in 180 seconds.] 12:26 -!- bradd [~quassel@user/bradd] has joined #openbsd 12:28 -!- pfc_ [~pfc@user/pfc] has joined #openbsd 12:32 -!- pfc [~pfc@user/pfc] has quit [Ping timeout: 264 seconds] 12:32 -!- pfc_ is now known as pfc 12:33 -!- makr [~textual@2a00:f2a:e1df:4320:4cf9:8005:5ca3:7e3] has joined #openbsd 12:34 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has quit [Ping timeout: 259 seconds] 12:34 -!- Feigr [~REDACTED@81-230-77-216-no600.tbcn.telia.com] has quit [Ping timeout: 268 seconds] 12:35 -!- sonne [~vmlinuz@user/sonne] has joined #openbsd 12:47 -!- makr [~textual@2a00:f2a:e1df:4320:4cf9:8005:5ca3:7e3] has quit [Ping timeout: 244 seconds] 12:59 -!- makr [~textual@2a00:f2a:e1df:4320:51c1:2182:5835:12ae] has joined #openbsd 13:03 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has joined #openbsd 13:07 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has quit [Ping timeout: 252 seconds] 13:11 -!- sonofaglitch [~sebastian@77.95.167.142] has joined #openbsd 13:16 -!- sonne [~vmlinuz@user/sonne] has quit [Ping timeout: 266 seconds] 13:17 -!- psydroid2 [~psydroid@user/psydroid] has quit [Quit: KVIrc 5.2.10 Quasar http://www.kvirc.net/] 13:19 -!- polarian [~polarian@2001:8b0:57a:2385:216:3eff:fefd:34cc] has quit [Excess Flood] 13:19 -!- polarian [~polarian@2001:8b0:57a:2385:216:3eff:fefd:34cc] has joined #openbsd 13:21 -!- zcram [~zcram@user/zcram] has joined #openbsd 13:22 -!- sonne [~vmlinuz@user/sonne] has joined #openbsd 13:24 -!- gman999 [~GMan999@user/gman999] has quit [Quit: WeeChat 4.7.1] 13:25 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has joined #openbsd 13:25 -!- CosmicDJ [~CosmicDJ@p200300e24f21f10102e04cfffe01e7ab.dip0.t-ipconnect.de] has joined #openbsd 13:28 -!- sonne [~vmlinuz@user/sonne] has quit [Ping timeout: 252 seconds] 13:30 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has quit [Ping timeout: 252 seconds] 13:32 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has joined #openbsd 13:37 -!- makr [~textual@2a00:f2a:e1df:4320:51c1:2182:5835:12ae] has quit [Ping timeout: 252 seconds] 13:37 -!- inkubot [~inkubot@e91133.upc-e.chello.nl] has quit [Changing host] 13:37 -!- inkubot [~inkubot@user/inkubot] has joined #openbsd 13:37 -!- sonne [~vmlinuz@user/sonne] has joined #openbsd 13:37 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has quit [Ping timeout: 265 seconds] 13:41 -!- fflam [~mdt@2600:4040:110a:d100::1c19] has quit [Ping timeout: 244 seconds] 13:47 -!- Minall [~user@user/Minall] has joined #openbsd 13:49 -!- loganaden [~macbookm4@102.117.116.150] has joined #openbsd 13:53 -!- loganaden [~macbookm4@102.117.116.150] has quit [Ping timeout: 240 seconds] 13:53 -!- Lucas_ [~Lucas@moon.lgv5.net] has quit [Quit: bye] 13:54 -!- makr [~textual@94.207.172.217] has joined #openbsd 13:57 -!- makr [~textual@94.207.172.217] has quit [Read error: Connection reset by peer] 14:00 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has joined #openbsd 14:00 -!- sonne [~vmlinuz@user/sonne] has quit [Ping timeout: 264 seconds] 14:01 -!- sonne [~vmlinuz@user/sonne] has joined #openbsd 14:01 -!- makr [~textual@94.207.172.217] has joined #openbsd 14:03 -!- Lucas_ [~Lucas@moon.lgv5.net] has joined #openbsd 14:05 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has quit [Ping timeout: 253 seconds] 14:06 -!- mexen [uid495612@user/mexen] has quit [] 14:08 -!- sonne [~vmlinuz@user/sonne] has quit [Ping timeout: 252 seconds] 14:09 -!- sonne [~vmlinuz@user/sonne] has joined #openbsd 14:12 -!- mytec333 [~mytec333@user/mytec333] has joined #openbsd 14:16 < polarian> IcePic: long time no see, will you be in brussels this year? 14:16 < polarian> (for EBC) 14:16 -!- sonne [~vmlinuz@user/sonne] has quit [Ping timeout: 262 seconds] 14:19 -!- td123 [~tom@user/td123] has quit [Quit: Konversation terminated!] 14:21 -!- td123 [~tom@user/td123] has joined #openbsd 14:21 < IcePic> polarian: yes 14:21 < polarian> nice! 14:21 < IcePic> I'd be happy to meet you again 14:21 < IcePic> if you can find a secret enough tunnel under the waters or so. ;) 14:21 < polarian> sure you will see me running around like a headless chicken again this year :p 14:22 < polarian> after going to... too many conferences at this point, I actually have become increasingly complacent on going to talks 14:22 < polarian> I went to a conf last weekend, and I made it to 2 talks 14:22 < polarian> then got caught in a 4 hour discussion on security :p 14:23 < polarian> then was offerred to go for drinks... and then the conf was over :p 14:23 < polarian> I heard many people tell me "conferences are for meeting and working with others", "talks are for the recordings" 14:28 < IcePic> the Halltrack of the EBC is the best 14:31 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has joined #openbsd 14:38 -!- makr [~textual@94.207.172.217] has quit [Read error: Connection reset by peer] 14:38 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has quit [Ping timeout: 245 seconds] 14:41 -!- makr [~textual@2a00:f2a:e1df:4320:556c:58cb:f551:83b3] has joined #openbsd 14:46 -!- ublx [~ublx@user/ublx] has quit [Ping timeout: 245 seconds] 14:46 -!- Feigr [~REDACTED@81-230-77-216-no600.tbcn.telia.com] has joined #openbsd 14:46 -!- sonne [~vmlinuz@user/sonne] has joined #openbsd 14:47 -!- fflam [~mdt@2600:4040:110a:d100::1c19] has joined #openbsd 14:51 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has joined #openbsd 14:51 -!- techn0mad [~larry@d173-180-222-20.bchsia.telus.net] has quit [Client Quit] 15:07 -!- sixfourtwelve [~ethanmorg@82.18.82.103] has joined #openbsd 15:08 -!- akinji [~akinji@user/akinji] has quit [Ping timeout: 257 seconds] 15:10 -!- fflam [~mdt@2600:4040:110a:d100::1c19] has quit [Ping timeout: 256 seconds] 15:12 -!- mete- [~beelink@186.250.11.107] has quit [Quit: ZNC 1.9.1 - https://znc.in] 15:13 -!- mete- [~beelink@186.250.11.107] has joined #openbsd 15:24 -!- loganaden [~macbookm4@197.225.33.148] has joined #openbsd 15:29 -!- loganaden [~macbookm4@197.225.33.148] has quit [Ping timeout: 264 seconds] 15:34 -!- carlomonte [carlomonte@user/carlomonte] has joined #openbsd 15:35 -!- mytec333 [~mytec333@user/mytec333] has quit [Quit: WeeChat 4.8.1] 15:49 -!- fgarcia [~lei@user/fgarcia] has quit [Quit: Remote host closed the connection] 15:49 -!- quark [quark@user/meow/Quark] has quit [Quit: 👋🏻 Later!] 15:50 -!- DarkTaffy [~oldben@user/Old-Ben-Jabroni] has quit [Remote host closed the connection] 15:50 -!- DarkTaffy [~oldben@user/Old-Ben-Jabroni] has joined #openbsd 15:50 -!- fgarcia [~lei@user/fgarcia] has joined #openbsd 15:51 -!- hotsoup_ [~hotsoup@user/hotsoup] has joined #openbsd 15:52 -!- virys [~virys@user/lovisabet] has joined #openbsd 15:54 -!- hotsoup [~hotsoup@user/hotsoup] has quit [Ping timeout: 265 seconds] 16:01 -!- f451 [~f451@user/f451] has quit [Ping timeout: 240 seconds] 16:04 -!- zcram [~zcram@user/zcram] has quit [Quit: Do the right thing!] 16:06 -!- loganaden [~macbookm4@197.225.61.239] has joined #openbsd 16:12 -!- zcram [~zcram@user/zcram] has joined #openbsd 16:20 -!- Skullheadx_ [~Skullhead@user/Skullheadx] has joined #openbsd 16:21 -!- Skullheadx [~Skullhead@user/Skullheadx] has quit [Ping timeout: 258 seconds] 16:22 -!- sandmanXpuff [~sandmanXp@user/sandmanXpuff] has joined #openbsd 16:23 -!- Skullheadx [~Skullhead@user/Skullheadx] has joined #openbsd 16:23 -!- f451 [~f451@user/f451] has joined #openbsd 16:25 -!- Skullheadx_ [~Skullhead@user/Skullheadx] has quit [Ping timeout: 242 seconds] 16:33 -!- Skullheadx_ [~Skullhead@user/Skullheadx] has joined #openbsd 16:34 -!- housemate [~housemate@2403-4800-940a-3401-2eee-3a55-959e-c5b7.sta.dodo.net.au] has quit [Ping timeout: 240 seconds] 16:34 -!- Skullheadx [~Skullhead@user/Skullheadx] has quit [Ping timeout: 250 seconds] 16:34 -!- Skullheadx_ is now known as Skullheadx 16:34 -!- housemate [~housemate@2403-4800-940a-3401-2eee-3a55-959e-c5b7.sta.dodo.net.au] has joined #openbsd 16:37 -!- fflam [~mdt@2600:4040:110a:d100::1c19] has joined #openbsd 16:47 -!- alem [~alem@user/alem] has quit [Ping timeout: 245 seconds] 16:48 -!- vdamewood [~vdamewood@fedora/vdamewood] has quit [Quit: Life beckons] 16:48 -!- alem [~alem@user/alem] has joined #openbsd 16:48 -!- hwpplayer1 [~hwpplayer@user/hwpplayer1] has joined #openbsd 16:50 -!- Inpek [~Inpek@user/Inpek] has joined #openbsd 16:50 < izder456> could people test or OK my desktop-installer and auto-admin ports in the mailing list? i would really like these to be merged to the tree. 17:05 -!- fro [fro@humpty.dance] has quit [Remote host closed the connection] 17:09 -!- fflam [~mdt@2600:4040:110a:d100::1c19] has quit [Ping timeout: 256 seconds] 17:12 -!- rv1sr [~rv1sr@user/rv1sr] has quit [Ping timeout: 272 seconds] 17:19 -!- cgnarne_ [~cgnarne@cgn-89-0-3-110.nc.de] has joined #openbsd 17:21 -!- cgnarne [~cgnarne@user/cgnarne] has quit [Ping timeout: 245 seconds] 17:22 -!- fro [fro@humpty.dance] has joined #openbsd 17:24 -!- dzwdz [dzwdz@user/dzwdz] has quit [Read error: Connection reset by peer] 17:25 -!- dzwdz [dzwdz@user/dzwdz] has joined #openbsd 17:25 -!- mytec333 [~mytec333@user/mytec333] has joined #openbsd 17:25 -!- loganaden [~macbookm4@197.225.61.239] has quit [Ping timeout: 252 seconds] 17:27 -!- ssm_ [~ssm_@mail.howdoesmycode.work] has joined #openbsd 17:28 -!- x7e [~x7e@user/x7e] has quit [Quit: ZNC - https://znc.in] 17:29 -!- x7e [~x7e@user/x7e] has joined #openbsd 17:30 -!- rv1sr [~rv1sr@user/rv1sr] has joined #openbsd 17:31 -!- tangentnet [~tangent@user/tangentnet] has quit [Quit: Konversation terminated!] 17:32 -!- polarian [~polarian@2001:8b0:57a:2385:216:3eff:fefd:34cc] has quit [Excess Flood] 17:33 -!- polarian [~polarian@2001:8b0:57a:2385:216:3eff:fefd:34cc] has joined #openbsd 17:41 -!- sandmanXpuff [~sandmanXp@user/sandmanXpuff] has quit [Quit: Leaving] 17:50 -!- ublx [~ublx@user/ublx] has joined #openbsd 17:55 -!- Inpek [~Inpek@user/Inpek] has quit [Quit: nyaa~] 17:58 -!- psydroid2 [~psydroid@user/psydroid] has joined #openbsd 17:58 -!- carlomonte [carlomonte@user/carlomonte] has quit [Ping timeout: 259 seconds] 17:59 -!- carlomonte [~carlomont@user/carlomonte] has joined #openbsd 18:06 -!- mexen [uid495612@user/mexen] has joined #openbsd 18:10 -!- ivy [~ivy@rose.le-fay.org] has quit [Quit: leaving] 18:11 -!- sonofaglitch [~sebastian@77.95.167.142] has quit [] 18:15 -!- alem3 [~alem@user/alem] has joined #openbsd 18:17 -!- alem [~alem@user/alem] has quit [Ping timeout: 246 seconds] 18:17 -!- alem3 is now known as alem 18:23 -!- zcram [~zcram@user/zcram] has quit [Quit: Do the right thing!] 18:30 -!- akinji [~akinji@user/akinji] has joined #openbsd 18:36 -!- ublx [~ublx@user/ublx] has quit [Ping timeout: 271 seconds] 18:38 < mischief> task failed successfully 18:38 < mischief> tried to run llama.cpp on my r9700 with openbsd, and amdgpu hung :( 18:42 < thrig> https://www.savagechickens.com/2015/04/a-cautionary-tale.html 18:46 -!- bradd [~quassel@user/bradd] has quit [Ping timeout: 248 seconds] 18:58 < lts> I tried a llama (Qwen3.6-35B-A3B-GGUF:Q4_K_M) and it happily told me that my circuit will explode if GND pins are connected to each other. Not fearing for Skynet yet 18:58 < lts> You're better off without 19:06 -!- Zerock [~0ck@copyfree/pedant/zerock] has quit [Ping timeout: 276 seconds] 19:06 -!- jb82 [~jb@109-81-17-143.rct.o2.cz] has joined #openbsd 19:09 -!- Zerock [~0ck@copyfree/pedant/zerock] has joined #openbsd 19:16 < mischief> a3b model is fast, but not exactly smart 19:21 -!- leo_ [~leo@arioch.leonhardt.eu] has quit [Quit: leaving] 19:28 -!- jb82 [~jb@109-81-17-143.rct.o2.cz] has quit [Quit: Lost terminal] 19:28 -!- fflam [~mdt@2600:4040:110a:d100::1c19] has joined #openbsd 19:34 -!- fflam [~mdt@2600:4040:110a:d100::1c19] has quit [Ping timeout: 272 seconds] 19:36 -!- raj [uid72176@user/raj] has joined #openbsd 19:37 < lts> None of them have smartness, but some have more checks than others 19:44 -!- leo_ [~leo@arioch.leonhardt.eu] has joined #openbsd 19:44 -!- zimmer [~zimmer@user/zimmer] has joined #openbsd 19:50 -!- hotsoup_ [~hotsoup@user/hotsoup] has quit [Quit: ZNC 1.9.1+deb2+b3 - https://znc.in] 19:52 -!- commandk [~commandk@user/commandk] has joined #openbsd 19:55 -!- hotsoup [~hotsoup@user/hotsoup] has joined #openbsd 19:56 < commandk> I'm not able to acquire DHCPv6 address as client on updated 7.9 using either of slaacd, dhcpcd, dhcp6relayd . 19:56 < commandk> on updated 7.9 19:59 < commandk> They all log their own variants of `Permission denied` as they try. Same when daemons in foreground as root. Currently I belive this might be privsep issue? I found some similar past reports on each on openbsd mailing list and similar dhcpcd upstream report for freebsd which hinted at need for recompilation but nothing conclusive 20:00 < mischief> commandk: might be pf blocking the packets 20:00 < commandk> at this point im only trying to acquire and use a single address on single interface as client so not acting as a router or anything fancy like that 20:01 -!- ublx [~ublx@user/ublx] has joined #openbsd 20:01 -!- cgnarne_ is now known as cgnarne 20:01 -!- cgnarne [~cgnarne@cgn-89-0-3-110.nc.de] has quit [Changing host] 20:01 -!- cgnarne [~cgnarne@user/cgnarne] has joined #openbsd 20:02 < cgnarne> there's no dhcpv6 in base. only prefix delegation 20:04 < mischief> cgnarne: commandk said they used dhcpcd, which can do IA_NA 20:04 -!- zimmer [~zimmer@user/zimmer] has quit [Ping timeout: 256 seconds] 20:05 -!- virys [~virys@user/lovisabet] has quit [Quit: Lost terminal] 20:06 < cgnarne> ah, right. sorry 20:06 < commandk> mischief: it would be nice if that was the case but at least i believe it to pass thru traffic and nothing shows up under `tcpdump -nvi pflog0`. but nothing shows up there at all so probably not looking for blocked packets the right way. got `set loginterface egress` in pf.conf. for example dhcpcd when running debug in foreground i can see it 20:06 < commandk> logging ``ps_root_recvmsg: Permission denied error right after `multicasting SOLICIT6` 20:09 < lts> Another IPv6 success story :-) 20:10 < mischief> commandk: `log` has to actually appear on the rule which does the pass/block 20:10 < commandk> cgnarne supposedly since 7.9, `inet6 autoconf` should support this via slaacd (or maybe SLAAC doesnt count as dhcpv6?) either way yeah im looking at all reaonable options 20:10 < mischief> you can always pfctl -d 20:10 < mischief> there's pretty much only one reason EPERM appears on socket io, and it's when pf is involved and blocks 20:12 < cgnarne> commandk: slaac is not dhcpv6 20:12 < commandk> it WAS pf since yeah doing that makes it work. thank you mischief. now turned it back on and gotta figure out how to debug and fix these rules 20:13 < cgnarne> Just allow all of icmp6 20:14 < WrezHole> commandk: pass out quick inet6 all keep state 20:14 < WrezHole> pf.conf 20:15 -!- _0xdd [~miker@user/m1k3e221] has quit [Read error: Connection reset by peer] 20:15 < cgnarne> No. that breaks neighbor discovery 20:15 < commandk> hm, i already have `pass out quick keep state`; would that be applying to ipv4 only? 20:16 < cgnarne> you also need to allow incoming icmp6 20:17 < WrezHole> and some icmp6-type 20:17 < cgnarne> No. this will only lead to pain later 20:18 < cgnarne> do not filter icmp6 20:19 < WrezHole> i do but in test skip that part 20:20 -!- rahl [rahl@otaku.sdf.org] has quit [Ping timeout: 252 seconds] 20:20 -!- loganaden [~macbookm4@197.225.61.239] has joined #openbsd 20:20 -!- yoddf2 [xoddf@user/xoddf2] has joined #openbsd 20:20 < mischief> i'm no expert and have ipv6 off right now but my historical rules i believe worked were 20:20 < mischief> pass in log on egress inet6 proto icmp6 all 20:20 < mischief> pass in log on egress inet6 proto udp from fe80::/10 port dhcpv6-server to fe80::/10 port dhcpv6-client no state 20:20 -!- xoddf2 [xoddf@user/xoddf2] has quit [Ping timeout: 254 seconds] 20:20 -!- yoddf2 is now known as xoddf2 20:20 < commandk> i thought i had appropriate rules but obv not. will see if i can pastelink pfconf. for now added log to all block statements 20:21 < mischief> (you should replace egress with your interface name, or macro) 20:21 < WrezHole> udp port 547 to any port 546 20:23 < cgnarne> ipv6 needs working icmp6. why do you insist on breaking it? 20:24 < lts> IPv6 is great 20:25 -!- WrezHole [~wrezhole@user/WrezHole] has quit [Quit: Lost terminal] 20:27 -!- xoddf2 [xoddf@user/xoddf2] has quit [Read error: Connection reset by peer] 20:27 -!- xoddf2 [xoddf@user/xoddf2] has joined #openbsd 20:30 -!- gotohello [~gotohello@user/gotohello] has quit [Quit: Client closed] 20:30 < commandk> pf.conf: https://paste.gentoo.zip/OB82DAqI 20:32 < commandk> aware there are redundant and overlappinf rules in there, ive actually been running those separately but leaving them to show what i tried 20:32 -!- gotohello [~gotohello@user/gotohello] has joined #openbsd 20:33 < mischief> doesn't urpf-failed make antispoof/'martians' table redundant or am i missing something 20:33 -!- memset [~memset@gateway/tor-sasl/memset] has quit [Remote host closed the connection] 20:34 -!- memset [~memset@gateway/tor-sasl/memset] has joined #openbsd 20:34 < IcePic> mischief: martians and rpf is not necessarily the same at all 20:34 < IcePic> urpf is about stuff coming in on the wrong interface, martians is usually rfc1918-networks that you don't expect from the ISP side of a fw or so 20:35 -!- WrezHole [~wrezhole@user/WrezHole] has joined #openbsd 20:36 < mischief> right so you block `from urpf-failed` - in what case does that not make redundant the usual 'martians' table on your wan side? there won't be any route so urpf check will fail, blocking it 20:39 -!- memset [~memset@gateway/tor-sasl/memset] has quit [Remote host closed the connection] 20:40 < commandk> urpf-failed / antispoof: you migh be right; i cargo-cuted those 20:40 -!- memset [~memset@gateway/tor-sasl/memset] has joined #openbsd 20:41 < mischief> was more of a general question, not really about your rules 20:43 -!- grain770 [~grain77@user/grain77] has joined #openbsd 20:44 < commandk> if i understand that part now, i guess it might be redudandant depending on setup? in common case like here with one wan and one lan where all the rfc1918 are on lan and rest is 0.0.0.0/0 it is but we might have more lan interfaces with different subnets and then it makes a difference 20:45 < commandk> and maybe theres a "defense in depth" argument to having both enabled still 20:45 -!- grain77 [~grain77@user/grain77] has quit [Ping timeout: 245 seconds] 20:45 -!- grain770 is now known as grain77 20:45 -!- fflam [~mdt@2600:4040:110a:d100::1c19] has joined #openbsd 20:46 -!- gotohello [~gotohello@user/gotohello] has quit [Quit: Client closed] 20:47 -!- raj [uid72176@user/raj] has quit [] 20:47 -!- tribaal [~tribaal@ubuntu/member/tribaal] has quit [Read error: Connection reset by peer] 20:48 -!- tribaal [~tribaal@ubuntu/member/tribaal] has joined #openbsd 20:48 < mischief> the rule for urpf is really simple, so simple that it can be hard to miss the implications at first glance https://www.rfc-editor.org/info/rfc3704/#section-2.2 20:48 -!- gotohello [~gotohello@user/gotohello] has joined #openbsd 20:49 -!- sambala [~tux100@user/tux100] has joined #openbsd 20:49 < mischief> (i assume pf urpf-failed is strict reverse path forwarding, as per the rfc but i should really go check) 20:52 < mischief> it is in fact the same meaning as the rfc, afaict 20:52 < commandk> aha! now i learned about how to read /var/log/pflog and there is nothing recent from when i was trying now but looks like there is gunsmoke from older attempt previous attempt: 20:52 < commandk> rule def/(ip-option) block out on em0: :: > ff02::1:ffxx:xxx: HBH icmp6: multicast listener report 20:55 -!- loganaden [~macbookm4@197.225.61.239] has quit [Ping timeout: 277 seconds] 20:58 < commandk> my next excercise will be some unholy udp nat46 so i want to understand whats going on here before getting lost in that x) thans for the pointers so far, very helpful! 21:00 -!- shadowtux [~shadowtux@user/meow/shadowtux] has quit [Quit: The Lounge - https://thelounge.chat] 21:01 -!- JurassCZ [~JurassCZ@user/JurassCZ] has quit [Remote host closed the connection] 21:02 -!- JurassCZ [~JurassCZ@user/JurassCZ] has joined #openbsd 21:02 -!- shadowtux [~shadowtux@user/meow/shadowtux] has joined #openbsd 21:17 -!- quark [16abab341f@user/meow/Quark] has joined #openbsd 21:20 -!- ivdsangen [~ivo@83-82-34-145.cable.dynamic.v4.ziggo.nl] has quit [Quit: leaving] 21:23 -!- fflam [~mdt@2600:4040:110a:d100::1c19] has quit [Ping timeout: 245 seconds] 21:26 -!- fflam [~mdt@2600:4040:110a:d100::1c19] has joined #openbsd 21:30 -!- fflam [~mdt@2600:4040:110a:d100::1c19] has quit [Ping timeout: 252 seconds] 21:33 -!- fflam [~mdt@pool-72-82-53-136.rcmdva.fios.verizon.net] has joined #openbsd 21:36 -!- tvtoon [~The_cUnix@user/tvtoon] has joined #openbsd 21:37 -!- sambala is now known as sadtux 21:42 -!- quark [16abab341f@user/meow/Quark] has quit [Remote host closed the connection] 21:42 -!- quark [~quark@user/meow/Quark] has joined #openbsd 21:43 -!- quark [~quark@user/meow/Quark] has quit [Remote host closed the connection] 21:43 -!- quark [quark@user/meow/Quark] has joined #openbsd 21:46 -!- gotohello [~gotohello@user/gotohello] has quit [Quit: Client closed] 21:47 -!- gotohello [~gotohello@user/gotohello] has joined #openbsd 21:48 -!- brian__ [~quassel@38.192.67.70] has quit [Ping timeout: 264 seconds] 21:50 -!- rc [~rc@user/rc] has joined #openbsd 21:59 -!- psydroid2 [~psydroid@user/psydroid] has quit [Quit: KVIrc 5.2.10 Quasar http://www.kvirc.net/] 22:00 -!- bazflo [~bazflo@user/bazflo] has quit [Remote host closed the connection] 22:00 -!- bazflo [~bazflo@user/bazflo] has joined #openbsd 22:01 < sadtux> vjt> troll level is over 9000 sadtu 22:01 < sadtux> bye bye neo nazis 22:01 -!- sadtux [~tux100@user/tux100] has left #openbsd [Leaving] 22:02 -!- bazflo [~bazflo@user/bazflo] has quit [Remote host closed the connection] 22:02 -!- bazflo [~bazflo@user/bazflo] has joined #openbsd 22:04 -!- aaro [aaro@user/aaro] has quit [Remote host closed the connection] 22:06 -!- brian_ [~quassel@38.192.67.70] has joined #openbsd 22:09 -!- gotohello [~gotohello@user/gotohello] has quit [Quit: Client closed] 22:10 -!- memset [~memset@gateway/tor-sasl/memset] has quit [Remote host closed the connection] 22:11 -!- memset [~memset@gateway/tor-sasl/memset] has joined #openbsd 22:12 -!- gotohello [~gotohello@user/gotohello] has joined #openbsd 22:13 -!- Minall [~user@user/Minall] has left #openbsd [ERC 5.6.0.30.1 (IRC client for GNU Emacs 30.2)] 22:14 -!- uncleyea1 [~ian@178.66.159.27] has quit [Ping timeout: 245 seconds] 22:20 -!- fflam [~mdt@pool-72-82-53-136.rcmdva.fios.verizon.net] has quit [Ping timeout: 264 seconds] 22:29 -!- mexen [uid495612@user/mexen] has quit [Quit: Connection closed for inactivity] 22:36 -!- jgh [~jgh@hellmouth.gulag.org.uk] has quit [Remote host closed the connection] 22:42 -!- rv1sr [~rv1sr@user/rv1sr] has quit [] 22:46 -!- sjg [~sjg@user/sjg] has quit [Ping timeout: 270 seconds] 22:47 -!- sjg [~sjg@user/sjg] has joined #openbsd 22:50 -!- aaro [aaro@user/aaro] has joined #openbsd 23:00 -!- hmjsp [~hmjsp@user/hmjsp] has quit [Remote host closed the connection] 23:00 -!- hmjsp [~hmjsp@user/hmjsp] has joined #openbsd 23:21 -!- Matt|home [~Orbital@n58-104-134-6.mrk2.qld.optusnet.com.au] has joined #openbsd 23:32 -!- zimmer [~zimmer@user/zimmer] has joined #openbsd 23:42 -!- fflam [~mdt@2600:4040:1105:d300::1c19] has joined #openbsd 23:45 -!- kn [~kn@2a00:1370:80a6:6254:a94d:a8c3:2918:319c] has joined #openbsd 23:45 -!- hwpplayer1 [~hwpplayer@user/hwpplayer1] has quit [Quit: sleep time] 23:54 -!- monkeybusiness [monkeybusi@user/monkeybusiness] has quit [Ping timeout: 245 seconds] --- Log closed Sun Jul 19 00:00:44 2026