Re: pf log drop default rule

2023-10-13 Thread J Doe
On 2023-10-10 18:28, Alexander Bluhm wrote: Hi, If a packet is malformed, it is dropped by pf(4). The rule referenced in pflog(4) is the default rule. As the default rule is a pass rule, tcpdump prints "pass" although the packet is actually dropped. I have reports from genua and OPNsense user

Re: bgpd, fix log_peer_info() and friends

2023-10-13 Thread Theo Buehler
On Fri, Oct 13, 2023 at 07:01:06PM +0200, Claudio Jeker wrote: > Extending the format string with the peer info is a bad idea. > The reason is DNS^WIPv6 and scoped addresses which add a % to the > string returned by log_fmt_peer. > > So instead vasprintf() the emsg and then just use logit(). Ugh.

bgpd, fix log_peer_info() and friends

2023-10-13 Thread Claudio Jeker
Extending the format string with the peer info is a bad idea. The reason is DNS^WIPv6 and scoped addresses which add a % to the string returned by log_fmt_peer. So instead vasprintf() the emsg and then just use logit(). -- :wq Claudio Index: logmsg.c =

Re: bwfm(4): support scan v3

2023-10-13 Thread Mark Kettenis
> Date: Wed, 11 Oct 2023 10:10:58 +0200 > From: Stefan Sperling > > On Tue, Oct 10, 2023 at 11:41:39PM +0200, Mark Kettenis wrote: > > The firmware for the BCM4388 has yet another version of the "escan" > > command. But we can treat it the same as v2 since it just added a new > > parameter in pl

Re: Please test: make ipsec(4) timeouts mpsafe

2023-10-13 Thread Hrvoje Popovski
On 12.10.2023. 20:10, Vitaliy Makkoveev wrote: > Hi, MP safe process timeouts were landed to the tree, so time to test > them with network stack :) Diff below makes tdb and ids garbage > collector timeout handlers running without kernel lock. Not for commit, > just share this for tests if someone i

Re: Remove hardcoded ${HOSTCC} calls in games?

2023-10-13 Thread Theo de Raadt
I think this is correct support for cross-compilation, and what you are trying to do is less important. Frederic Cambus wrote: > Hi tech@, > > When trying the GCC 11 static analyzer on games, I noticed that some of > them (adventure, boggle, fortune, hack, monop, phantasia) have hardcoded > cal

Remove hardcoded ${HOSTCC} calls in games?

2023-10-13 Thread Frederic Cambus
Hi tech@, When trying the GCC 11 static analyzer on games, I noticed that some of them (adventure, boggle, fortune, hack, monop, phantasia) have hardcoded calls to ${HOSTCC}. They would obviously not compile when passed the GCC's "-fanalyzer" flag through CFLAGS as it is not recognized by Clang.

OpenBGPD 8.3 released

2023-10-13 Thread Claudio Jeker
We have released OpenBGPD 8.3, which will be arriving in the OpenBGPD directory of your local OpenBSD mirror soon. This release includes the following changes to the previous release: * bgpd 8.1 and 8.2 could send a bad COMMUNITY attribute when non-transitive ext-communities are present