00:43:53 I remember those days when everyone was using qmail, but due to the license, the place I was at wanted to stick with sendmail. And then came postfix. 00:55:34 if i don't use nat my machine does not resolve url. what could be the issue? 00:55:44 *pf nat 01:01:53 neither root nor any of jails 01:02:25 oh sorry I figured out. thanks 01:34:54 can i see translation detail by pflog on pf nat? i log via tcpdump but it is just the packet reading nothing about translation mechanism 01:36:54 luke_jobless_sb: pflog only logs rules with the 'log' flag 01:38:09 possibly you want 'pfctl -ss' which will show nat rules like this: all tcp 81.187.47.206:52351 (172.20.1.38:46114) -> 139.177.227.229:443 ESTABLISHED:FIN_WAIT_2 01:52:50 ivy: you've got some wizardry 01:54:44 no i don't, this is literally in the manpage 01:54:54 ivy: oh it's states abbreviated I thought it was some kind of out of document commnad 01:54:59 "He's a witch!" :D 01:55:09 jeez you scared me 01:56:06 yes, you can abbreviate things like -s rules and -s states to -ss and -sr 01:57:18 yes i do in my argparse too 05:55:12 Client: HexChat 2.16.2 • OS: FreeBSD 14.1-RELEASE-p6 • Storage: 0 bytes / 0 bytes (0 bytes Free) 06:55:49 if I need to check a large number software projects (BitBucket, GitHub, GitLab) mostly daily, is project version checker (pvc) best or is a URL update checker good? 10:53:34 Does anyone know how to set the ACPI debug level in 14.1 release? I am trying to get rid of a couple of repeating ACPI messages that look like those in this bug: https://forums.freebsd.org/threads/acpi-errors-all-the-time.60912/ 10:53:57 the documented solution in the bug report wasn't that clear to me though 10:57:27 Read this: 10:57:28 https://man.freebsd.org/cgi/man.cgi?acpi(4) 12:26:20 rafe: I am aware of debug.acpi.level but it's not mentioned in the output of sysctl 12:26:52 are there any more helpful pointers? 14:50:08 kpel, seach for debug.acpi.level in acpi(4). 14:50:16 search even 16:16:55 hey there i am trying to use vbox to launch up a windows guest but no matter which guest i try or how i try vbox refuses to start up any type of guest with error message 16:16:55 VirtualBox can't operate in VMX root mode. Please close all other virtualization programs. (VERR_VMX_IN_VMX_ROOT_MODE). 16:16:55 Result Code: 16:16:55 NS_ERROR_FAILURE (0x80004005) 16:16:56 Component: ConsoleWrap 16:16:56 Interface: IConsole {872da645-4a9b-1727-bee2-5585105b9eed} 16:16:57 even though there is no other virtualization program running and i have set up vbox properly 16:16:57 added the user that is trying to launch vbox to the vboxusers group 16:16:58 added vboxdrv_load="YES" line to /boot/loader.conf 16:16:58 made sure that the kmod vmm isn't loaded or in /etc/rc.conf 16:16:59 any help will be really appreciated, thanks 16:17:39 have you tried closing all o ther virtualization programs ? 16:18:35 as i said before there is no other virtualization program running 16:19:14 freebsd 14.1 release btw 16:20:53 polyduekes: pastebin the output of `kldstat` 16:22:55 rtprio: https://pastebin.com/26UwPdaa 16:23:22 26 1 0xffffffff83200000 33e438 vmm.ko 16:23:26 there's your problem 16:24:07 oh, just a minute, lemma check, i was sure i had removed it from kldlist :/ 16:24:43 yes, it isn't in kldlist in /etc/rc.conf, lemme try rebooting 16:26:25 you can try unloading it 16:26:52 modules can dynamically load so perhaps you triggered it by... running bhyve a few days ago 16:27:29 🤷 16:28:10 let's see, i rebooted after vmm wasn't in /etc/rc.conf, why else should it load automatically on startup? 16:28:28 vmm still appears in kldstat 16:30:16 can you unload it? 16:31:45 yes i can, let's see if it reappear after reboot now 16:32:08 it probably will 16:32:16 but unload it and see if it fixes your vbox 16:32:20 then figure out what's loading it 16:33:51 yeah, unloading it indeed does fix vbox but why even is it getting loaded on it's own lol 16:36:55 well, what do you have in rc.conf 16:39:27 Hi! I'm using a freebsd 13.3-rel-p7 jail as a borg backup server. When I run borg extract on a client, the connection dies after a couple of files have been transferred, and the server crashes. 16:39:38 I don't currently have access to the console 16:40:23 After a couple of minutes the server comes back up again. I see nothing of value in /var/log/messages and no dumps in /var/crash 16:40:41 I'm not sure where to start looking, any ideas? 16:41:22 (it is a vnet jail) 16:42:56 rtprio: fixed it, it was due to "vm_dir" line in /etc/rc.conf 16:44:00 yep 16:44:17 sjk: is borg up to date? 17:33:10 If I want to re-compile a dynamic kernel module with custom changes, how do I go about that? 17:33:38 what sort of changes / what module? 17:39:32 <_xor> What's the general rule when creating a new port that has the same name as an existing port? 17:40:05 I am trying to fix a problem with a DisplayLink device in udl. So I added the device ID in /usr/src/sys/dev/usb/usbdevs and in /usr/src/sys/dev/usb/video/udl.c. Does the first one mean I'll have to recompile the kernel entirely? Or can I just recompile the udl module? 17:43:33 you can try with just the module first 17:44:19 Great! How should I do that? (This is my first foray into this -- sorry!) 17:45:14 that said, a new kernel shouldn't take very long 17:45:19 Hi, I got FreeBSD 14.1 running on a Thinkpad X230 - what do I need to do to change the display backlight brightness? Having to use sudo/doas is okay. 17:46:06 fm2279: as if you start building the module, of course the source needs to match the kernel exactly 17:46:47 armin: check the wiki 17:46:53 if you haven't already 17:47:06 fm2279: https://docs.freebsd.org/en/books/handbook/kernelconfig/ 17:49:24 rtprio: Thanks. I guess I am confused -- are there instructions on rebuilding a kernel module in the handbook? I have looked and don't see it, though it's not unlikely I am missing it. 17:49:37 rtprio: just found acpi_ibm, thank you. 17:50:12 rtprio: The module in question is in use presently with my existing kernel, and I am changing only one or two lines in the module source. 17:50:36 armin: 👍 17:51:21 fm2279: https://docs.freebsd.org/en/books/handbook/kernelconfig/#kernelconfig-building 17:51:38 make yoru changes, build the kernel, reboot 17:51:57 rtprio: So the dynamic module isn't built separately? 17:53:39 it could be, but personally i'd start from a fresh fully built kernel 17:53:59 if the /usr/src slightly differs than the kernel you're running you're going to have a bad time 17:54:25 rtprio: OK. Thanks for the tips! I'll likely check back in. 17:55:30 once the first one is build, then you could just build the module, probably 18:19:28 <_xor> Anyone have a suggestion on a USB enclosure, with support for UASP/SAT, for SATA drives? I have a box of drives I need to test and don't want to setup a system to plug them into SATA. Needs to support FreeBSD (smartctl) of course. 18:29:54 _xor: I have yet to encounter a USB enclosure that supports SMART. If you find one, I'd love to know what it is. 19:03:38 Seems there are plenty of USB enclosers that support smart, but they're for NVMe drives, not SATA. 19:11:20 sendmail (for sending ~1 mail a day) stopped working on my 14.2 RPi a few days ago 19:11:43 getting authentification errors and mail bounces 19:12:06 worked for about a year or so previously 19:12:14 any ideas what might have changed? 19:12:35 no problem on my amd64 machine (with an older sendmail config) 19:43:16 CrtxReavr: I found it, I even tried it - just for a laugh - and it doesn't work because the issue is an error message, not an info or debug etc. 19:44:24 so... is there any way to turn off acpi tracing, preferably on-the-fly without rebooting? 19:45:23 from what I've seen so far the only solution seems to be to disable tracing at compile time. Although the generic config file doesn't seem to have it enabled to begin with. 20:08:13 kpel, I think that would be a pre-kernel thing, so. . . no. 20:09:30 i wanna prevent my isp from profiling my traffic and selling my data, so that means i buy a freebsd vps and install a proxy on it? or a wireguard server AND a proxy, or? 20:10:58 How much data are they going to have to sell if you use encrypted protocols? 20:11:15 I mean, they can see what you connect to, but now what you're passing. 20:13:31 not what i asked 20:19:03 after running make a few times in /etc/mail and rebooting sendmail now seems to want to talk with my ISP 20:21:19 l00py: That actually is quite related to what you'd asked. CrtxReavr's question and comment are quite relevant. In fact, if you have a good DNSSEC setup going, your ISP wouldn't really see anything you do at all. It would *ALMOST* be the same as a secure proxy/VPN/WireGuard/Tailscale/etc... setup without having to deal with any of it. 20:22:18 The only mishap would be using non-encrypted protocols. 20:24:48 Anyhow, aside from that and to answer your question directly, sure! A VPS with a VPN/proxy/WireGuard/whatever-you-want-as-long-as-it's-an-encrypted-end-node-connection... will keep your ISP from doing most spying. 20:25:52 They can still likely get tiny bits of info using DPS on crappily-secured requests. I doubt it would be enough info to "sell" or really care about at all, though. 20:27:51 ek so i set up wireguard server on vps, then connect to it, and all my traffic will pass through encrypted tunnel to vps then out to internet and back in, i don't need a traffic proxy as well? just the wg server 20:28:44 l00py: it's possible, but you have to configure everyghing correctly 20:29:25 mzar possible with just wg server you mean? 20:29:38 mzar: Of course! That was kinda my intent of my comments. Maybe I didn't make it all that clear. 20:29:46 is there an easier way to effectively proxy all of my traffic through a vps? 20:29:55 more than just http, full traffic 20:29:57 no leakage 20:30:22 l00py: Yes. Just a WG connect setup as an end-node (from the client-side) and the only thing your ISP will see is encrypted data to WG. 20:30:40 But, what you do from the VPS could be seen from other listeners. 20:30:44 very cool. and wg server runs nice on freebsd? 20:30:50 (ya for sure) 20:30:55 l00py: Yes. Runs absolutely fine. 20:31:39 man that's cool. happen to know how much ram wg server needs? usually only xx mbps of traffic, sometimes bursting to xxx mbps 20:32:03 l00py: Using "0.0.0.0/0" from the client side as "AllowedIPs" will route all traffic from the client through the VPN. 20:33:18 I always setup a root-only DNS server on the VPN (or VPN network somewhere) to add to the requests just to be safe. But, it'll route everything. 20:35:07 l00py: The resource amount is vastly independent on client usage. However, even with many clients connected and moving pretty good amounts of data, I've never seen WG (or OVPN or IPSEC) strangle the system really at all. 20:36:53 it'll just be me but i'll be putting hundreds of connections through it (p2p :D) 20:37:02 If I'm making small changes to a single kernel module, do I have to do a full `make buildkernel` each time? Or is there a way to simply rebuild the module in question? 20:37:10 tyvm 20:40:06 Enter the module folder and type 'make' ? 20:42:38 TurtleCrazy: Then just copy the object file into /boot/kernel? 20:43:55 fm2279: unload the former one, and call kldload with the full pathname of the new object file 20:44:46 TurtleCrazy: Oh, sweet. So just test by loading the module dynamically, then, to lock it in, do the full kernel rebuild? 20:46:51 fm2279: exactly 20:46:59 TurtleCrazy: Makes sense! Thanks! 20:53:32 fm2279: To be fair, you could run an installkernel each time, too. But, it'd be overkill. If everything else is already built, though, you can just run a "make installkernel" at the end to lock it in. No need to rebuild everything. 20:54:22 ek: Thanks! 20:58:53 Is it possible to unload a module built into the kernel? 21:03:26 fm2279: kldunload 21:03:31 but it's not always possible. 21:04:30 rtprio: Thanks. Looks like a no-go in my case. Guess I'll just rebuild the kernel...