Re: network configuration problems
# bash /etc/netstart
From there, you're doing it wrong.
On 6/19/10, Jean-Frangois SIMON jfsimon1...@gmail.com wrote:
Hi All,
I have some problem with network in OpenBSD 4.7.
The netstart script does strange output :
# bash /etc/netstart
/etc/netstart: line 44: set: -A: invalid option
set: usage: set [--abefhkmnptuvxBCHP] [-o option-name] [arg ...]
WARNING: /etc/hostname.re0 is insecure, fixing permissions
DHCPREQUEST on re0 to 255.255.255.255 port 67
DHCPACK from 192.168.30.1 (00:19:4b:07:6c:ad)
bound to 192.168.30.11 -- renewal in 302400 seconds.
/etc/netstart: line 44: set: -A: invalid option
set: usage: set [--abefhkmnptuvxBCHP] [-o option-name] [arg ...]
WARNING: /etc/hostname.re1 is insecure, fixing permissions
/etc/netstart: line 284: syntax error in conditional expression: unexpected
token `('
/etc/netstart: line 284: syntax error near `@(*'
/etc/netstart: line 284: `[[ $gw == @(*:*) ]] continue'
One point being insecure permissions but they look good :# ls -l
/etc/hostname.*
-rw--- 1 root wheel 444 Jun 19 21:15 /etc/hostname.bridge0
-rw--- 1 root wheel5 Jun 13 01:53 /etc/hostname.re0
-rw--- 1 root wheel 66 Jun 13 20:18 /etc/hostname.re1
The other fact being not creating the bridge :
# cat
hostname.bridge0
add re1 -learn re1
rule pass in on re1 src 00:25:32:1b:d5:10 tag macok
rule pass in on re1 src 00:08:64:a8:71:81 tag macok
up
#
ifconfig
lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST mtu 33160
priority: 0
groups: lo
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
inet 127.0.0.1 netmask 0xff00
re0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
lladdr 00:25:32:1b:d5:10
priority: 0
groups: egress
media: Ethernet autoselect (100baseTX full-duplex,rxpause,txpause)
status: active
inet6 fe80::225:22ff:fe1b:d510%re0 prefixlen 64 scopeid 0x1
inet 192.168.30.11 netmask 0xff00 broadcast 192.168.30.255
re1: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
lladdr 00:08:64:a8:71:81
priority: 0
media: Ethernet autoselect (none)
status: no carrier
inet6 fe80::208:54ff:fea8:7181%re1 prefixlen 64 scopeid 0x2
inet 192.168.100.1 netmask 0xff00 broadcast 192.168.100.255
enc0: flags=0 mtu 1536
priority: 0
pflog0: flags=141UP,RUNNING,PROMISC mtu 33160
priority: 0
groups: pflog
May I have you help to sort it out ?
Thank you,
Jean-Frangois
Re: network configuration problems
Jean-Frangois SIMON wrote: Hi All, I have some problem with network in OpenBSD 4.7. The netstart script does strange output : # bash /etc/netstart bash isn't the shell of choice on OpenBSD. I'd try the standard shell first. (see netstart(8) if you need a clue)
Re: network configuration problems
2010/6/19 Jean-Frangois SIMON jfsimon1...@gmail.com: # bash /etc/netstart As others have pointed at, you'll want /bin/sh instead for this case. When in doubt what to use, review the top line in the script you're about to execute and use the shell listed there. WARNING: /etc/hostname.re0 is insecure, fixing permissions It fixes the permissions, so seeing correct permissions afterward means the fix succeeded. See the relevant lines in /etc/netstart if you want to know more how it does that. Regards, Rogier
Re: network configuration problems
/etc/netstart issue ... Thanks for this note, my mistake, of course it runs fine with /bin/sh. Ok now everything goes right, but I don't understand the new philosophy of the network address translation in pf.conf. What is the equivalent for the following : nat on $ext_if from ($int_if:network) - ($ext_if) Could it be : match out on $ext_if from 192.168.0.0/16 to any nat-to ($ext_if) What is the reason for changing this set of rules ? Is there now more flexibility with NAT rules than it used to be ? Thanks.
Re: network configuration problems
On Sun, 20 Jun 2010 14:31:40 +0200 Jean-Frangois SIMON jfsimon1...@gmail.com wrote: /etc/netstart issue ... Thanks for this note, my mistake, of course it runs fine with /bin/sh. Ok now everything goes right, but I don't understand the new philosophy of the network address translation in pf.conf. What is the equivalent for the following : nat on $ext_if from ($int_if:network) - ($ext_if) Could it be : match out on $ext_if from 192.168.0.0/16 to any nat-to ($ext_if) What is the reason for changing this set of rules ? Is there now more flexibility with NAT rules than it used to be ? Thanks. There is no reason to explain this every other day. Check the list archives.
network configuration problems
Hi All,
I have some problem with network in OpenBSD 4.7.
The netstart script does strange output :
# bash /etc/netstart
/etc/netstart: line 44: set: -A: invalid option
set: usage: set [--abefhkmnptuvxBCHP] [-o option-name] [arg ...]
WARNING: /etc/hostname.re0 is insecure, fixing permissions
DHCPREQUEST on re0 to 255.255.255.255 port 67
DHCPACK from 192.168.30.1 (00:19:4b:07:6c:ad)
bound to 192.168.30.11 -- renewal in 302400 seconds.
/etc/netstart: line 44: set: -A: invalid option
set: usage: set [--abefhkmnptuvxBCHP] [-o option-name] [arg ...]
WARNING: /etc/hostname.re1 is insecure, fixing permissions
/etc/netstart: line 284: syntax error in conditional expression: unexpected
token `('
/etc/netstart: line 284: syntax error near `@(*'
/etc/netstart: line 284: `[[ $gw == @(*:*) ]] continue'
One point being insecure permissions but they look good :# ls -l
/etc/hostname.*
-rw--- 1 root wheel 444 Jun 19 21:15 /etc/hostname.bridge0
-rw--- 1 root wheel5 Jun 13 01:53 /etc/hostname.re0
-rw--- 1 root wheel 66 Jun 13 20:18 /etc/hostname.re1
The other fact being not creating the bridge :
# cat
hostname.bridge0
add re1 -learn re1
rule pass in on re1 src 00:25:32:1b:d5:10 tag macok
rule pass in on re1 src 00:08:64:a8:71:81 tag macok
up
#
ifconfig
lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST mtu 33160
priority: 0
groups: lo
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
inet 127.0.0.1 netmask 0xff00
re0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
lladdr 00:25:32:1b:d5:10
priority: 0
groups: egress
media: Ethernet autoselect (100baseTX full-duplex,rxpause,txpause)
status: active
inet6 fe80::225:22ff:fe1b:d510%re0 prefixlen 64 scopeid 0x1
inet 192.168.30.11 netmask 0xff00 broadcast 192.168.30.255
re1: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
lladdr 00:08:64:a8:71:81
priority: 0
media: Ethernet autoselect (none)
status: no carrier
inet6 fe80::208:54ff:fea8:7181%re1 prefixlen 64 scopeid 0x2
inet 192.168.100.1 netmask 0xff00 broadcast 192.168.100.255
enc0: flags=0 mtu 1536
priority: 0
pflog0: flags=141UP,RUNNING,PROMISC mtu 33160
priority: 0
groups: pflog
May I have you help to sort it out ?
Thank you,
Jean-Frangois
