Captive portal with OpenBSD as a hostap

2015-10-05 Thread C.L. Martinez
Hi all, I have installed an openbsd vm to works as a hostap for tablets and smartphones (android and iOS). All it is working ok: pf, hostapd and dhcpd server. All tablets and smartphones that I have tested works ok, connects and surfs Internet. But now I am thinking to use some type of a

Re: Captive portal with OpenBSD as a hostap

2015-10-05 Thread C.L. Martinez
On 10/05/2015 12:29 PM, Kapetanakis Giannis wrote: On 05/10/15 14:35, David Coppa wrote: On Mon, Oct 5, 2015 at 1:18 PM, C.L. Martinez wrote: Hi all, I have installed an openbsd vm to works as a hostap for tablets and smartphones (android and iOS). All it is working ok: pf, hostapd and

Your opinion about using rdomain or mpath

2015-10-14 Thread C.L. Martinez
Hi all, I am using an OpenBSD vm to act as a firewall for my laptop and as openVPN client to connect to several openvpn/ipsec servers. Sometimes I need to stay connected to two or more openvpn/ipsec gateways. And at the same time, I need to stay connected to other networks in my company (w

Re: Your opinion about using rdomain or mpath

2015-10-14 Thread C.L. Martinez
On 10/14/2015 01:17 PM, Giancarlo Razzolini wrote: Em 14-10-2015 09:28, C.L. Martinez escreveu: I am using an OpenBSD vm to act as a firewall for my laptop and as openVPN client to connect to several openvpn/ipsec servers. Your laptop is also running OpenBSD? Nop. It is a CentOS 7.x

Re: Your opinion about using rdomain or mpath

2015-10-14 Thread C.L. Martinez
On 10/14/2015 02:20 PM, Giancarlo Razzolini wrote: Em 14-10-2015 10:31, C.L. Martinez escreveu: Yes because sometimes I will need two or more tunX interfaces up (created by openvpn or openconnect) or enc interface. I think you are confusing gateways with default gateways. No, but maybe I am

Re: Remove "flags S/SA keep state" for tcp packets

2015-12-16 Thread C.L. Martinez
On 12/15/2015 07:29 PM, Stuart Henderson wrote: On 2015-12-15, C. L. Martinez wrote: On Tue, Dec 15, 2015 at 9:56 AM, David Dahlberg wrote: Am Dienstag, den 15.12.2015, 09:24 + schrieb C. L. Martinez: I am trying to remove "flags S/SA keep state" for tcp packets inside pf.conf and use

Re: Remove "flags S/SA keep state" for tcp packets (SOLVED)

2015-12-16 Thread C.L. Martinez
On 12/16/2015 08:19 AM, C.L. Martinez wrote: On 12/15/2015 07:29 PM, Stuart Henderson wrote: On 2015-12-15, C. L. Martinez wrote: On Tue, Dec 15, 2015 at 9:56 AM, David Dahlberg wrote: Am Dienstag, den 15.12.2015, 09:24 + schrieb C. L. Martinez: I am trying to remove "flags S/SA

Doing NAT after divert-packet rule

2015-12-18 Thread C.L. Martinez
Hi all, This post is related to this one: http://marc.info/?l=openbsd-misc&m=145017155902016&w=2. After doing a lot of tests, I have arrived to a satisfactory situation. At this moment, my divert-packet rules works (for all protocols without modifying state options) to redirect traffic to

Re: Doing NAT after divert-packet rule

2015-12-22 Thread C.L. Martinez
On 12/18/2015 10:17 AM, C.L. Martinez wrote: Hi all, This post is related to this one: http://marc.info/?l=openbsd-misc&m=145017155902016&w=2. After doing a lot of tests, I have arrived to a satisfactory situation. At this moment, my divert-packet rules works (for all protocols

Re: Error loading pf rules: Device busy

2016-01-02 Thread C.L. Martinez
On 01/02/2016 08:33 AM, C. L. Martinez wrote: Hi all, I have a strange problem. Every time that I try to reload my pf rules I seethe following error message: pfctl: DIOCADDRULE: Device busy. I am using OpenBSD 5.8 amd64 fully patched. Any idea?? Sorry for the noise. There was an error

Problems using squid as transparent proxy for SSL/TLS

2016-01-04 Thread C.L. Martinez
Hi all, I have configured squid in an OpenBSD host acting as a transparent proxy. Actually all works OK for all traffic except for SSL/TLS, ex: port 443. My pf rules are: pass in inet proto tcp from $prod_network to ! port $proxy_tcp_svcs divert-to localhost \ port 3129 l

Re: Problems using squid as transparent proxy for SSL/TLS

2016-01-06 Thread C.L. Martinez
On 01/05/2016 04:29 PM, Stuart Henderson wrote: On 2016-01-05, Craig Skinner wrote: Hi Carlo, On 2016-01-04 Mon 16:36 PM |, C.L. Martinez wrote: I have configured squid in an OpenBSD host acting as a transparent proxy. Actually all works OK for all traffic except for SSL/TLS, ex: port 443

Tips & tricks about using mysql under OpenBSD

2015-04-01 Thread C.L. Martinez
Hi all, In the following weeks, I need to install a syslog collector server using mysql as a backend to store all logs (and I would like to use OpenBSD 5.7 to accomplish that). I expect +/- 5k-6k EPS from our servers (unix, linux, windows). As a syslog process I will use syslog-ng or rsysl

Re: Tips & tricks about using mysql under OpenBSD

2015-04-03 Thread C.L. Martinez
On 04/01/2015 12:51 PM, C.L. Martinez wrote: Hi all, In the following weeks, I need to install a syslog collector server using mysql as a backend to store all logs (and I would like to use OpenBSD 5.7 to accomplish that). I expect +/- 5k-6k EPS from our servers (unix, linux, windows). As a

Custom rc.d startup script for sslsplit doesn't stops the process

2015-04-20 Thread C.L. Martinez
Hi all, I have created a custom rc.d script to launch sslsplit at startup and stop it at shutdown. Start option works without problems, but this script doesn't stop process. Here it is: #!/bin/sh -x # daemon="/usr/local/bin/sslsplit" . /etc/rc.d/rc.subr rc_reload=NO rc_cmd $1 Options

Re: Custom rc.d startup script for sslsplit doesn't stops the process

2015-04-20 Thread C.L. Martinez
On 04/20/2015 11:50 AM, Antoine Jacoutot wrote: On Mon, Apr 20, 2015 at 11:44:59AM +, C.L. Martinez wrote: Hi all, I have created a custom rc.d script to launch sslsplit at startup and stop it at shutdown. Start option works without problems, but this script doesn't stop process.

Re: Custom rc.d startup script for sslsplit doesn't stops the process 8SOLVED)

2015-04-20 Thread C.L. Martinez
On 04/20/2015 12:15 PM, C.L. Martinez wrote: On 04/20/2015 11:50 AM, Antoine Jacoutot wrote: On Mon, Apr 20, 2015 at 11:44:59AM +, C.L. Martinez wrote: Hi all, I have created a custom rc.d script to launch sslsplit at startup and stop it at shutdown. Start option works without problems

sslsplit needs to be restarted every 30 min.

2015-05-06 Thread C.L. Martinez
Hi all, I have a strange problem with sslsplit (installed from packages) in a OpenBSD 5.7 amd64 host. Every 30 minutes (more or less. It is not exactly), sslsplit needs to be restarted: May 6 09:50:14 obsd57 monit[23714]: Monit start delay set -- pause for 120s May 6 09:52:14 obsd57 monit[

Re: sslsplit needs to be restarted every 30 min.

2015-05-11 Thread C.L. Martinez
On 05/06/2015 11:15 AM, C.L. Martinez wrote: Hi all, I have a strange problem with sslsplit (installed from packages) in a OpenBSD 5.7 amd64 host. Every 30 minutes (more or less. It is not exactly), sslsplit needs to be restarted: May 6 09:50:14 obsd57 monit[23714]: Monit start delay set

Re: sslsplit needs to be restarted every 30 min.

2015-05-11 Thread C.L. Martinez
On 05/11/2015 09:00 AM, Philip Guenther wrote: On Mon, May 11, 2015 at 1:13 AM, C.L. Martinez wrote: On 05/06/2015 11:15 AM, C.L. Martinez wrote: I have a strange problem with sslsplit (installed from packages) in a OpenBSD 5.7 amd64 host. Every 30 minutes (more or less. It is not exactly

Re: sslsplit needs to be restarted every 30 min.

2015-05-11 Thread C.L. Martinez
On 05/11/2015 10:59 AM, Stuart Henderson wrote: On 2015-05-11, C.L. Martinez wrote: On 05/11/2015 09:00 AM, Philip Guenther wrote: On Mon, May 11, 2015 at 1:13 AM, C.L. Martinez wrote: On 05/06/2015 11:15 AM, C.L. Martinez wrote: I have a strange problem with sslsplit (installed from

Re: sslsplit needs to be restarted every 30 min.

2015-05-11 Thread C.L. Martinez
On 05/11/2015 10:59 AM, Stuart Henderson wrote: On 2015-05-11, C.L. Martinez wrote: On 05/11/2015 09:00 AM, Philip Guenther wrote: On Mon, May 11, 2015 at 1:13 AM, C.L. Martinez wrote: On 05/06/2015 11:15 AM, C.L. Martinez wrote: I have a strange problem with sslsplit (installed from

Re: sslsplit needs to be restarted every 30 min.

2015-05-13 Thread C.L. Martinez
On 05/13/2015 06:57 AM, Stuart Henderson wrote: On 2015-05-13, Stuart Henderson wrote: On 2015-05-11, C.L. Martinez wrote: Yep, it seems the problem is "Too many open files" message: leapis.com/storage.googleapis.com sproto:TLSv1.2:AES128-SHA dproto:TLSv1.2:ECDHE-ECDSA-CHACHA20-PO

OT: Exists some problem with dnscrypt-proxy package?

2015-09-20 Thread C.L. Martinez
Hi all, I have installed an openbsd 5.7 VM today to do some tests with pf rules. One of the components to I need to enable in this gateway is unbound+dnscrypt-proxy. I have configured forwarding in unbound.conf: forward-zone: name: "." forward-addr: 127.0.0.1@4553 And I