Re: Hardware for Access Point on OpenBSD

2020-01-03 Thread Marios Makassikis
On Thu, 2 Jan 2020 at 14:04, Stuart Henderson wrote: > > On 2020-01-01, List wrote: > > Hi *, > > I am currently building a home router based upon OpenBSD. > > I therefore need some kind of WIFI Hardware. This piece of hardware > > needs to be connected over usb. > > Do you have any suggestions o

Re: KNFectomy

2015-11-18 Thread Marios Makassikis
On 18 November 2015 at 22:45, Adam Wolk wrote: > On Wed, 18 Nov 2015 11:38:55 -0700 (MST) > Theo de Raadt wrote: > >> >Adam Wolk wrote: >> >> During the LibreSSL early days there were frequent KNFectomy >> >> procedures executed by jsing@. Is the KNFectomy utensil script >> >> available publicly?

Re: Making IPv6 NAT prefer privacy address

2015-09-23 Thread Marios Makassikis
On 23 September 2015 at 15:34, Giancarlo Razzolini wrote: > Em 23-09-2015 04:40, Stuart Henderson escreveu: >> Saves messing about with DHCPv6-PD > > I see. So you translate from what exactly? Wouldn't it be better to use > af-to instead of nat? Hello, Rather than announcing the prefix obtained

Re: Lenovo T450s status

2015-06-16 Thread Marios Makassikis
On 16 June 2015 at 14:53, Alex wrote: > On 05/28/2015 01:48 AM, Shaun Reiger wrote: >> Hello Misc I'm looking at purchasing a Lenovo T450s as my main laptop, but >> I wanted to find out if anyone has hit any major roadblocks using obsd 5.7 >> with this model. I know this is a fairly new machine an

Re: BGP - IP Blackhole

2014-04-18 Thread Marios Makassikis
On 18 April 2014 16:29, Tristan PILAT wrote: > 2014-04-18 10:23 GMT+02:00 Tristan PILAT : > > > 2014-04-17 19:27 GMT+02:00 Tristan Pilat : > > > >> > >> > >> On 17 avril 2014 19:02:14 CEST, Claudio Jeker > > >> wrote: > >> >You can't use rtlabels for matching the source, at least I think it > >>

Re: where are translated web-pages?

2014-04-17 Thread Marios Makassikis
On 18 April 2014 00:18, Alex Naumov wrote: > Thank you for link, but... why? I mean, we are not going to continue work > on translation anymore? Reason? > > This was also discussed : http://marc.info/?l=openbsd-misc&m=139653486420745&w=2 The translation was open sourced also, so nothing stops y

Re: ipv6 static routing

2013-12-08 Thread Marios Makassikis
On 8 December 2013 17:54, dikshie wrote: > On Mon, Dec 9, 2013 at 1:38 AM, Marios Makassikis > wrote: >> Is PF enabled ? If so, perhaps your current rules are IPv4 only. >> Can you ping6 from this host ? > > pf is disable. > > > # ndp -a > Neighbor

Re: ipv6 static routing

2013-12-08 Thread Marios Makassikis
Is PF enabled ? If so, perhaps your current rules are IPv4 only. Can you ping6 from this host ? On 8 December 2013 17:00, dikshie wrote: > On Sun, Dec 8, 2013 at 10:14 PM, Marios Makassikis > wrote: >> Your /etc/mygate file can look like this : >> >> # cat /etc/mygate

Re: ipv6 static routing

2013-12-08 Thread Marios Makassikis
Your /etc/mygate file can look like this : # cat /etc/mygate 202.249.25.1 FE80::21B:2AFF:FEE2:A4C0%vio1 Make sure you have net.inet6.ip6.forwarding=1 in /etc/sysctl.conf On 8 December 2013 09:59, dikshie wrote: > Hi, > I have an openbsd box with two interface. > > # cat /etc/hostname.vio0 > ine

Re: Are there any default password managers in OpenBSD?

2013-12-06 Thread Marios Makassikis
On 6 December 2013 12:29, Andres Perera wrote: > On Fri, Dec 6, 2013 at 5:22 AM, Alexander Hall wrote: >> On 12/06/13 07:50, Andres Perera wrote: >>> >>> On Fri, Dec 6, 2013 at 1:58 AM, Jan Stary wrote: On Dec 05 19:09:05, andre...@zoho.com wrote: > > but then if the shell impl

Re: VPN suggestions

2013-11-12 Thread Marios Makassikis
On 12 November 2013 20:42, Kapetanakis Giannis wrote: > On 12/11/13 19:29, Daniel Polak wrote: >> >> Original message from Kapetanakis Giannis at 8-11-2013 13:38 >>> >>> I would like to discuss some suggestions about VPN to multiple road >>> warriors. >>> >>> So far we're using OpenVPN, but I

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Marios Makassikis
On 19 October 2013 00:27, Stefan Wollny wrote: > > Hi there, > > having a personal dislike of Facebook (and the MeeToo-systems alike) > for their impertinent sniffing for private data I tried on my laptop to > block facebook.com via hosts-file. Interestingly this failed: Calling > "http://www.face

Re: PHP 5.3.1 on OpenBSD 4.2

2013-10-02 Thread Marios Makassikis
What is recommended is to upgrade to -stable. Then you can install php-5.3.27 / php-5.4.20 from ports or packages On 2 October 2013 13:52, Markus Rosjat wrote: > Hey there, > > I have a server that runs a OpenBSD 4.2 with a php of 5.2.3 and now I just > need some information if it's possible to

Re: OpenBSD5.3/PF Settings help request

2013-09-25 Thread Marios Makassikis
On 25 September 2013 16:40, Adelin Balou < adelin.ba...@etu.univ-valenciennes.fr> wrote: > Dear Sir/Madame, > > > I am a student in pending Master's degree in Network and Security at > University of Valenciennes (France), I am currently encountering problems > while setting up a Firewall with Pack

Re: nut-2.7.1

2013-07-29 Thread Marios Makassikis
On 29 July 2013 10:19, lilit-aibolit wrote: > Does someone have compiled i386 package for current nut? > https://github.com/networkupstools/nut > Or walkthrough how to build it on 5.3. > The reason for install development version it's added > Riello UPS support. > This is my step: > # git clone ht

Re: DF flag with af-to rule

2013-07-06 Thread Marios Makassikis
On 6 July 2013 21:26, Pawel Jurusz wrote: > Hello Marios > Hello Pawel, > DF bit shouldn't be cleared, because it's necessary for PMTUD (Path MTU > Discovery). There is also nothing amazing, that packets has DF flag set > (it depends on operating system) > I'm aware of the utility of the DF bit.

DF flag with af-to rule

2013-07-06 Thread Marios Makassikis
Hello misc@, I currently have a VM running as a NAT64 gateway. It is running OpenBSD 5.3 with the vio stability patch. I have the following pf.conf: pass in inet6 proto { tcp, udp, icmp6 } from to af-to inet from $ipv4_addr While this works fine in one environnment, the same VM moved on a dif

Re: A tricky pf + ecmp routing + squid question [Disregard - SOLVED]

2013-06-02 Thread Marios Makassikis
On 2 June 2013 21:33, Rob Sheldon wrote: > On 2013-06-02 2:35, Loïc BLOT wrote: > >> Hello rob, >> i'm using squid since 3.1 on OpenBSD 5.2 with compiled sources (squid >> 3.2.5-9 and 3.3.4 at this time). I don't use an IP but the http_port >> 3129 as my configuration suggests: >> >> http_port 31

Re: [obsd] Re: Assigning an IP address to a bridge

2013-02-13 Thread Marios Makassikis
On 13 February 2013 20:28, Stuart Henderson wrote: > On 2013/02/12 16:54, Jeremie Le Hen wrote: > > Thanks again for your review. > > > > http://people.chchile.org/~jlh/tmp/faq6.html > > http://people.chchile.org/~jlh/tmp/faq6.diff > > This looks fine to me, thank you. Unless there are any object

Re: serial over USB

2013-01-02 Thread Marios Makassikis
On 2 January 2013 23:14, Jan Stary wrote: > On Jan 02 23:02:02, com...@daknet.org wrote: > > >Is anybody using an USB-to-serial connection to an ALIX? > > > > Yes i am. We have many Alix 2D13 boards that we use as routers > > running OpenBSD 5.2 on many sites. I use a USB-to-serial cable to > > c

Re: PF: block upd packets that allready have a state

2012-06-25 Thread Marios Makassikis
On 25 June 2012 19:06, Matthias Cramer wrote: > Hi Marios > > On 25/06/12 18:50, Marios Makassikis wrote: >>>> I would consider having PF rate-limit connections to your SIP PBX, and >>>> add any host >>>> that goes over the limit to your badguys tabl

Re: PF: block upd packets that allready have a state

2012-06-25 Thread Marios Makassikis
On 25 June 2012 16:12, Matthias Cramer wrote: > Hi Marios > Hi Matthias, > On 25/06/12 15:58, Marios Makassikis wrote: >> On 25 June 2012 15:36, Matthias Cramer wrote: >> >>>  - to block a packet even with a established state ? >>> >> >> Ho

Re: using relayd in transparent mode

2012-03-27 Thread Marios Makassikis
Hi, You need to tell PF to intercept packets and redirect them to the relayd process. pass in on em2 inet proto tcp to any port www divert-to 192.168.20.1 port 8000 pass out log(all) on em1 divert-reply You can find some more detailed information regarding relayd transparent proxying in this thr

Re: Problem filtering CARP in PF

2012-03-02 Thread Marios Makassikis
> I just thought of something that bit me recently as well. > > With a real IPv6 address CARP will send out advertisements via IPv4 > _and_ IPv6. It's the same CARP message so if either one reaches the > backup it's ok. > > Your block rule had "inet" so you were probably blocking IPv4 only. But >

Re: Problem filtering CARP in PF

2012-03-01 Thread Marios Makassikis
Hello, > No, that's not from your manual commands. It says there are send errors > when sending out the carp packets. My bad. > > Just paste the output instead of interpreting... > Here you go: carp: 45808 packets received (IPv4) 74835 packets received (IPv6) 0

Re: Problem filtering CARP in PF

2012-03-01 Thread Marios Makassikis
Hi, > Are you sure that fw1 is sending and not receiving those? The only way > to be really sure is to use "tcpdump -D out". The sender IP was the one I assigned to fw1, but I retested it anyway with -D out and I can confirm that there is a difference between the demote count displayed by ifconf

Re: Problem filtering CARP in PF

2012-03-01 Thread Marios Makassikis
Hello, No, I'm using hardware machines. I tested what Imre suggested, i.e.: flushing PF states with 'pfctl -F states'. With a freshly booted machine, CARP packets are allowed to pass. I then disabled pf, flushed the states and reloaded pf with the 'block log' rule. At this point, CARP is effective

Problem filtering CARP in PF

2012-02-29 Thread Marios Makassikis
Hi all, I am in the process of setting up a lab to test a IPv6 setup, and I'm having some issues with filtering CARP traffic. The configuration looks like this: +| WAN/Internet |+ || em0||em0 +-+ +