Re: Unexpected pf behavior for DHCP traffic?

2021-07-29 Thread beebeetles
Thanks Theo for the answer! I'm still having difficulty wrapping my head around it. I have two packets: DHCPREQUEST and DHCPACK {timestamp} {my_ip}.68 > {ip1}.67: xid:0xfe51c9a3 [|bootp] {timestamp} {ip2}.67 > {my_ip}.68: xid:0xfe51c9a3 Y:{my_ip} G:{ip1}[|bootp] I get that tcpdump taps to bpf s

Re: Unexpected pf behavior for DHCP traffic?

2021-07-29 Thread Theo de Raadt
dhcpleased (and a few other daemons) use bpf, thus see raw packets from the wire before pf can block them. Most daemons of this type also use bpf to send packets, and pf doesn't see these either. This behaviour is intentional, and useful. beebeet...@posteo.de wrote: > Hi all, > > I'm running O

Re: WireGuard host crashes roughly every week

2021-07-29 Thread Sven F.
looks like OOM problem, Send dmesg, keep a window withlog open, monitor your memory usage with something also send some conf On Thu, Jul 29, 2021 at 9:11 PM Matt P. wrote: > > Hi all. > > I have an OpenBSD box that breaks after a week or so of running. All network > traffic stops reaching the b

Unexpected pf behavior for DHCP traffic?

2021-07-29 Thread beebeetles
Hi all, I'm running OpenBSD 6.9 as a home router, and observed some behavior of pf that I can't really make sense of. The router runs dhcpleased to obtain its IP address from the ISP, and I have the following pf rules (only the relevant ones are shown): block drop all pass out on $ext_if inet

WireGuard host crashes roughly every week

2021-07-29 Thread Matt P.
Hi all. I have an OpenBSD box that breaks after a week or so of running. All network traffic stops reaching the box. If I look at the screen or serial output, I can get the "login:" prompt, and when I enter my name I get prompted for a password, but once I enter a password it hangs. Key presses

Re: Where to sleep to wait for lease

2021-07-29 Thread Paul de Weerd
Hi Leon, On Wed, Jul 28, 2021 at 08:18:41PM +0200, Leon Fischer wrote: | > no IP address found for vlan34:0 | > /etc/pf.conf:56: could not parse host specification | > pfctl: Syntax error in config file: pf rules not loaded | | Sleeping isn't needed if the address in pf.conf(5) is parenthesized: