Re: Route selected IP traffic across wg(4) tunnel

2023-03-10 Thread Chris Jones
On 9 Mar 2023, at 12:01, Zack Newman wrote: Wondering if anyone has a "best practice" for pealing IP traffic off (in this case an AppleTV) and routing all the traffic across a Wireguard tunnel. Not sure what you mean by "pealing [sic] IP traffic off"; but when I need source-based routing, I

Route selected IP traffic across wg(4) tunnel

2023-03-06 Thread Chris Jones
Good afternoon, Wondering if anyone has a "best practice" for pealing IP traffic off (in this case an AppleTV) and routing all the traffic across a Wireguard tunnel. I've looked at the pf(4) routing option **route-to** and tried setting this up to the best of my knowledge (I seem to be

Ubiquiti Networks EdgeRouter 6P

2018-05-25 Thread Chris Jones
Good afternoon, I see that the Ubiquiti EdgeRouter 6P is supported under octeon port. Just wondering if anyone on the list is running OpenBSD 6.3 or current on the EdgeRouter 6P? I'm mainly interested in the performance of this unit as a home firewall but also interested in using it for other

Octeon - Rhino Labs SDNA

2016-03-25 Thread Chris Jones
Good evening, Just wondering if any of the OpenBSD devs on the list could provide any feedback about these network appliances based on the Octeon III 7xxx processors. Are these devices something that may be supported with the current Octeon port?

Re: Promiscuous IPFIX sensor for flow collection/analysis

2014-03-04 Thread Chris Jones
PM Hi, maybe you could try http://www.pmacct.net/ Chris Jones mailto:jo...@chrisdavid.ca March 2, 2014 at 9:58 AM Good morning folks, I'm looking for advice on a freely available IPFIX probe/sensor for flow export of our company's corporate firewall (Juniper SRX) traffic. An unfortunate

Promiscuous IPFIX sensor for flow collection/analysis

2014-03-02 Thread Chris Jones
Good morning folks, I'm looking for advice on a freely available IPFIX probe/sensor for flow export of our company's corporate firewall (Juniper SRX) traffic. An unfortunate limitation of these firewalls is that J-Flow (Juniper's version of Netflow) is unsupported when operating in an HA firewall

Re: Promiscuous IPFIX sensor for flow collection/analysis

2014-03-02 Thread Chris Jones
mailto:mmerc...@gmail.com March 2, 2014 at 10:56 AM Hello Chris, Have you ever looked at Qosient Argus (http://qosient.com/argus/). I believe it has what you are looking for. I have played (extremely basic setup) with it on Linux, have not tried to compile on OpenBSD. Thanks, Mike Chris Jones

Re: Header re-writing and smtpd(8)

2009-10-30 Thread Chris Jones
Thanks for the info Gilles. Sounds like it's on the roadmap so I'll wait and see. Cheers, -Chris Gilles Chehade wrote: On Thu, Oct 29, 2009 at 10:55:58AM -0700, Chris Jones wrote: Good morning, I'm curious if anyone knows if it's possible to do header re-writing with smtpd(8). I have

Header re-writing and smtpd(8)

2009-10-29 Thread Chris Jones
rather use smtpd(8) for it's security and simplicity. Thanks in advance for any advice or information you have. Cheers, -Chris -- Chris Jones GDI Software Services Canada Inc. Suite 1300, 1500 West Georgia St. Vancouver, BC, Canada V6G 2Z6 Mobile: (604) 218-5981 Phone: (778) 373-0600 | Fax

Re: ral(4) driver and RT2860 + RT2850 chips

2009-05-27 Thread Chris Jones
dump on wd0b clock: unknown CMOS layout Chris Jones wrote: Good evening, I just picked up a SparkLan WMIR-200N which I've put in my Soekris net4501. The ral(4) driver says it supports the Ralink RT2860 and RT2850 chips on this card. OpenBSD detects the card however when I configure

Re: soekris 5501, ral(4) and 4.5-current

2009-04-27 Thread Chris Jones
Stuart Henderson wrote: On 2009-04-26, Tom tdmurp...@gmail.com wrote: On 2009-04-26. Stuart Henderson wrote: On 2009-04-25, Tom wrote: I have a ral(4) acting as a hostap. The problems began since ugrading from Feb 28th snapshot to April 10th (and higher). I have a Soekris 5501. I bought 2

Re: ral(4) driver and RT2860 + RT2850 chips

2009-04-09 Thread Chris Jones
Stuart Henderson wrote: On 2009-04-09, Chris Jones cjo...@gdisoftware.com wrote: I just picked up a SparkLan WMIR-200N which I've put in my Soekris net4501. The ral(4) driver says it supports the Ralink RT2860 and RT2850 chips on this card. OpenBSD detects the card however when I configure

Re: VLANs, bridge interface and PF

2009-04-07 Thread Chris Jones
(private) HKS wrote: On Mon, Apr 6, 2009 at 2:27 PM, Chris Jones cjo...@gdisoftware.com wrote: Good morning folks, I am a little bit stumped with my firewall config and need some assistance. I have a Soekris net4501 with two interfaces connected. The sis1 interface is connected to my macbook

VLANs, bridge interface and PF

2009-04-06 Thread Chris Jones
Good morning folks, I am a little bit stumped with my firewall config and need some assistance. I have a Soekris net4501 with two interfaces connected. The sis1 interface is connected to my macbook and the sis2 interface (vlan trunk) is connected to my switch (see diagram below). I have a bridge

Ralink RT2860 based cards

2008-11-19 Thread Chris Jones
Hey all, I am in the market to buy a Ralink RT2860 based wifi card for my Soekris net4501. Before I go out an buy one I am curious if anyone has had good experience with the Asus WL-130N card. I will be running this in Host AP mode using WPA2-PSK. Cheers, -Chris

Re: Route-based VPN - Fortigate to OpenBSD

2008-02-10 Thread Chris Jones
Thanks for the advice I will look into that should the gif option not work. Do you have any advice as to how to run gif over ipsec? -Chris Claer wrote: On Sat, Feb 09 2008 at 00:10, Chris Jones wrote: Hi all, Hi, A while back I attempted to setup a route-based VPN tunnel between

Route-based VPN - Fortigate to OpenBSD

2008-02-09 Thread Chris Jones
= 2.2.2.2 ike dynamic esp from 10.1.1.0/24 to 10.2.0.0/16 peer $remote_gw \ aggressive auth hmac-sha1 enc 3des group modp1536 \ quick auth hmac-sha1 enc 3des group modp1536 \ srcid [EMAIL PROTECTED] \ psk secret Thanks, -Chris -- Chris Jones

Re: GRE over IPsec

2007-04-08 Thread Chris Jones
[EMAIL PROTECTED] wrote: Chris Jones writes: Fortigates and Netscreens both use GRE interaces as tunnel interfaces when creating route-based VPN tunnels. FortiGates do not use GRE interface when creating route-based VPN tunnels. The route-based VPN on a FortiGate creates packets

Re: GRE over IPsec

2007-04-08 Thread Chris Jones
This link would probably help ;) http://www.isi.edu/div7/presentation_files/dynamic_routing.pdf On 4/8/07, Chris Jones [EMAIL PROTECTED] wrote: I may have been mistaken. I just pulled this information from this document which Gregory Lebovitz from Netscreen co-authored back in 2003. On page

GRE over IPsec

2007-03-25 Thread Chris Jones
Hey all, I know that it's possible to run GRE over and IPsec tunnel but I am wondering if anyone here has seen some good documentation (besides the man pages) or a howto on setting this up. I'm trying to config my OpenBSD 4.0firewall to interop with a route-based VPN network with a mix of

Route-based VPN Interop

2007-02-24 Thread Chris Jones
to use this device for routing traffic using static or dynamic routing? If this feature is not yet feasible, would this be considered for a future release? I appreciate any feedback. Thanks, -Chris --- Chris Jones, Sr. Systems

Re: VPN stability issues with a Fortigate peer

2006-12-13 Thread Chris Jones
be handy if you could disable DPD when using dynamic mode, possibly with a set dpd off option? Can any developers on the list comment? Cheers, -Chris -Original Message- From: Stephen J. Bevan [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 12, 2006 7:19 PM To: Chris Jones Cc: misc

VPN stability issues with a Fortigate peer

2006-12-06 Thread Chris Jones
I'm running the release version or OpenBSD 4.0 on my firewall and experiencing some odd IPSEC VPN behavior when connecting to a Fortigate peer. The tunnel will come up just fine but will randomly go down and then come back up and will continue this cycle. I am running isakmpd with the -K option

Re: VPN stability issues with a Fortigate peer

2006-12-06 Thread Chris Jones
it? Incase you are interested the peer is a Fortigate 300A running version 3.00 build 400. Thanks, -Chris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: December 6, 2006 9:54 AM To: Chris Jones Cc: misc@openbsd.org Subject: Re: VPN stability issues