bah - keep forgetting to add you guys to my autojoin list :D
win2
heh
how come OpenBSD systat misbehaves in my arp vps?
anyone have trouble with freebsd-update? I've been getting this contastantly the last few weeks: http://dpaste.com/758314/
misbehaves how?  I'm not familiar with running it on openbsd,  but I've seen other issues.. that may not be specific to openbosd
it never populates the fields with stats
pjs: IIRC,   they added IPv6 AAAA records a few weeks ago.  is your IPv6 either disabled, or configured correctly?
jpalmer, I never configured it..
i tried running it with a interval of 1 sec and the clock display ticks but no data.  then this: > The alternate system clock has died!
pjs:  I'd specifically disable IPv6 then, and see if it works.
mikeputnam: ahh,  not familiar with that particular issue.  probably not going to be much help :/
top works normally
not a big deal really, more curiosity
jpalmer, silly question.. I see the rc.conf entries to disable ipv6, but is it possible without requiring a reboot?
pjs: remove the default route for v6, and it won't be used (and if you never set it up, then most likely there is not v6 default anyway)
up_the_irons netstat -rn does show some v6 routes..
pjs: can you ping update5.freebsd.org? over ipv4?
I have a feeling it's timing out before your networking stack is trying to fall back to ipv4
Yup
what happens if you ping6 the same host?
PING6(56=40+8+8 bytes) 2607:f2f8:a548::2 --> 2001:4978:1:420::cc09:3750
ping6: sendmsg: Operation not permitted
pjs: the v6 default will be ::0
pjs: is your firewall blocking some v6?
pjs: I'd run a tcpdump, and see if it's bein attempted over v4 or v6
that message looks like the traffic is being administratively blocked.
up_the_irons default                           2607:f2f8:a548::1             UGS         em0 (my default)
ahh, could be.. I didn't specifically permit v6
pjs: looks right
man my v6 fu is non-existant
up_the_irons / jpalmer - my default out going rule is "pass out on $ext_if proto { tcp, udp, icmp } from any to any modulate state" (pf) do I need to specify v6 in there?
my pf fu is non-existent ;)
pjs: I'm not sure how to completely disable v6 on fbsd..  I haven't done much in fbsd-land with it.  I'm more of a centos guy the last 2-3 years due to work.
heh ok cool.. I'll read the man page
you're probably blocking icmp6, which is required for things like neighbor discovery to work
I think twobithacker is probably right, i just had a support ticket about this a week ago, and the customer's pf was blocking the ND packets
twobithacker ahh, ok.. I am allowing icmp "pass in inet proto icmp all icmp-type echoreq keep state" but not mentioning icmp6
yeah, IPv6 requires more than that to function, you need to allow at least neighbrsol and neighbradv, and maybe routersol/routeradv, and toobig is highly recommended (since v6 can't be fragmented on the path)
I find it easier to just allow all icmp6
I'd add a temp rule to allow all ipv6 in/out, and see if that addresses your update issue.  let smake sure we're on the right path, before builind g a fulle pf rule set.
wow,  I kin tipe.
ok, yea.. let me test that
lol
currently in a meeting.  ignore my poor typing and sporadic repsonses.  :P
http://pastebin.ca/2160604 <- my fairly minimal pf.conf, if anyone's interested
twobithacker thanks.. helps me with the icmp6 change
jpalmer: depends on how thoroughly you want to remove it :P
jdoe:  I more meant 'disbable' so that the OS doesn't try to prefer it over v4.   Ideally,  you'd have dual stack working correctly.  but barring that,  prever v4 over a broken v6 config
ah
jpalmer, well I can now ping6 update5.freebsd.org but freebsd-update fetch still fails (same as before, only  much quicker now heh)
Anyone in here know anything about verifying SSL certs?
maybe, what are you trying to do?
pjs: were you able to get a tcpdump?   is it trying v4 or v6?
pjs:   find the ipv4 address for one of the update servers,  stick it in /etc/hosts, and see if it works?
jpalmer, good idea.. I'll toy with it some more tomorrow. I got a handful of tickets to take care of.. thanks for all the help though!
jpalmer, twobithacker, up_the_irons - really appreciate it! :)