Archive | openbsd

20 January 2012 ~ Comments Off

OpenBSD PPPoE and RFC 4638

I upgraded my Internet connection from ADSL 2+ to FTTC a while ago. I’m with Eclipse as an ISP, but it’s basically the same product as BT Infinity, right down to the Openreach-branded modem, (a Huawei Echolife HG612 to be exact). With this modem, you need to use a router or some software that can [...]

Continue Reading

16 December 2011 ~ Comments Off

PPPoE fixes for natpmpd

I recently started using the pppoe(4) driver on OpenBSD, and with it found a few small bugs in how natpmpd handles these sorts of dynamic interfaces. One simple bug being it refused to start up if the interface didn’t already exist and also it considered 0.0.0.0 as a valid IP address and would broadcast that [...]

Continue Reading

24 October 2010 ~ Comments Off

Alignment fixes for natpmpd

A one line fix and natpmpd should now work on OpenBSD platforms that have stricter code alignment requirements than i386 or amd64 such as armish and sparc64. Fairly amazed that was the only breakage.

Next release should hopefully have privilege sepa…

Continue Reading

03 October 2010 ~ Comments Off

OpenBSD IPsec and RFC 3884

As part of another OpenBSD & IPsec problem I’m investigating, I was pointed at RFC 3884 which puts forward a solution for solving problems with dynamic routing protocols and the use of IPsec in tunnel mode. The RFC covers a few scenarios and solutions, but the main solution put forward is to replace IPsec tunnel [...]

Continue Reading

27 August 2010 ~ Comments Off

Back to My Mac and an OpenBSD firewall

As I recently wrote, I’ve been playing with the Back to My Mac feature of MobileMe on my Macs. Put simply it’s a VPN for your Macs, you can access one remotely from another as if they were on the same LAN either at home or work. Assuming you’ve entered all of your MobileMe account [...]

Continue Reading

12 August 2010 ~ Comments Off

Mcollective & OpenBSD

I run a bunch of box under OpenBSD at $WORK and I wanted to be able to run mcollective on these too. Unfortunately, there were no package available for this OS. So I took time and with some help from landry@ I was able to build a port. It has been integrated into the github [...]

Continue Reading