ajacoutot f50fdd748e Stop using the daemon class in @newuser.
If we need to make an exception we can do it and properly document the
reason but by default we should just use the default login class.
rc.d uses daemon or the login class provided in login.conf.d so this has
no impact there.

discussed with sthen@, tb@ and robert@

praying that my grep/sed skills did not break anything and still
believing in portbump :-)
2022-11-08 11:14:43 +00:00
..
2022-11-08 11:14:43 +00:00

+-------------------------------------------------------------------------------
| Running ${PKGSTEM} on OpenBSD
+-------------------------------------------------------------------------------

Due to the nature of this program, return packets from the target device
aren't usually sent to an address where PF can match them with a state
table entry for outgoing traffic, so with a typical "deny incoming"
ruleset, return packets from the device won't arrive.

You can add PF rules to permit the packets for MNDP and MAC-Telnet
respectively:

   pass proto udp from 0.0.0.0/32 port {5678 20561}

If using a multihomed system, mactelnet using the default setup with
ethernet broadcasts may not send packets via the correct interface.
Use the -n flag to send unicast packets instead (requires starting
mactelnet as root) to bypass this issue.