boot openbsd from emmc on RockPro64

2024-04-27 Thread Cristian Danila
Dear Misc, I would really appreciate if someone can give me a hint on how can make emmc card bootable on a RockPro64 board. This is what I did: 1) prepared micro sd card: dd if=install75.img of=/dev/sdg bs=1024M dd if=idbloader.img of=/dev/sdg bs=512 seek=64 dd if=u-boot.itb of=/dev/sdg bs=512 see

Re: boot openbsd from emmc on RockPro64

2024-04-30 Thread Cristian Danila
wrote: > > On Sat, 27 Apr 2024 17:11:56 +0200 > "Cristian Danila" wrote: > > > Dear Misc, > > > > I would really appreciate if someone can give > > me a hint on how can make emmc card bootable > > on a RockPro64 board. > > This is what I did

rk3399 rockpro64 fails to power off

2024-04-30 Thread Cristian Danila
Dear Misc, I own a rockpro64 device + openbsd 7.5 and for some reason shutdown -p now does not powering off the device -> shutdown -p now - Shutdown NOW! shutdown: [pid 39459] *** FINAL System shutdown message from root@*** *** System going

Re: boot openbsd from emmc on RockPro64

2024-05-02 Thread Cristian Danila
: > > On Tue, 30 Apr 2024 13:39:55 +0200 > "Cristian Danila" wrote: > > > HI Olivier, > > > > I cannot express how grateful I am that finally is booting emmc. > > However, I still have an issue, power button does not seem to work > > and shu

bridge rules are evaluated different compared to pf?

2022-07-26 Thread Cristian Danila
Good day! I hope someone could clarify if the following behavior is expected in a bridge configuration I have following rules added in hostname.bridge0 --- #this will result out to be blocked rule block in on vic0 rule block out on vic0 rule pass

Re: bridge rules are evaluated different compared to pf?

2022-07-26 Thread Cristian Danila
Thank you for info, I was confused by the book. Happy to see this is the intended behavior. Kind regards, Claudiu On Tue, Jul 26, 2022, 11:36 Claudio Jeker wrote: > On Tue, Jul 26, 2022 at 11:18:06AM +0300, Cristian Danila wrote: > > Good day! > > I hope someone could clarify i

Blocking ARP packet for specific MAC

2022-07-26 Thread Cristian Danila
Good day! I've been having a headache for days(I still fight, no success yet) in trying to find a way to block ARP for specific MAC address(example 00:50:56:c0:00:08). I want to see how I can achieve this on OpenBSD, I would appreciate a technical answer or a hint/site/doc/book where I can research

Re: Blocking ARP packet for specific MAC

2022-07-27 Thread Cristian Danila
interface is that I am not sure yet how much overhead introduces in the process. I will try to look into sourcecode maybe I will find something useful. On Tue, Jul 26, 2022, 15:10 Cristian Danila wrote: > > Good day! > I've been having a headache for days(I still fight, no success ye

IPS suggesion for OpenBSD 7.1

2022-08-22 Thread Cristian Danila
Good day everyone, I would really appreciate some suggestions/advice from more experienced users regarding a possible opensource IPS/IDS solution using OpenBSD 7.1 operating system. In short, I need to be able to have a runing IPS on openbsd to go deep and inspect for example TCP packets port 80 ht

DHCP server ignoring PF rules?

2022-12-17 Thread Cristian Danila
Good day! I finished setup an DHCP server and for some reason it seems DHCP server is ignoring PF filter. In short, in PF I have active only one rule: block drop quick all Double checked PF and it is enabled So using a windows machine to test DHCP server: 1) ifconfig /release 2) ifconfig /renew s

Re: DHCP server ignoring PF rules?

2022-12-17 Thread Cristian Danila
e wire using BPF, which happens as packets come off > the network interface, but before the IP stack where pf runs. > > > On 17 Dec 2022, at 22:40, Cristian Danila wrote: > > > > Good day! > > I finished setup an DHCP server and for some reason it seems DHCP >

Re: DHCP server ignoring PF rules?

2022-12-17 Thread Cristian Danila
lease read man veb > Have a nice weekend. > > -- > Best Regards > Barbaros > > > > On Sat, Dec 17, 2022 at 4:40 PM Cristian Danila wrote: >> >> Thanks for the provided info, now it makes sense about what is happening. >> Any idea about a possible way to co

OpenBSD as a transparent switch filter

2023-01-24 Thread Cristian Danila
Hello I have a more difficult task that I would like to solve with OpenBSD and I would really appreciate any ideas if it is possible to achieve such. I have: - one OpenBSD box with one Ethernet port - one big switch with multiple devices connected All switch ports are isolated by each other with

Re: OpenBSD as a transparent switch filter

2023-01-24 Thread Cristian Danila
; but to my shame I have not tried out veb(4) > > I hope this is of some use... > > > > > > > On Tue, 24 Jan 2023 at 11:29, Cristian Danila wrote: > > > > Hello > > > > I have a more difficult task that I would like to solve with OpenBSD > &

Re: OpenBSD as a transparent switch filter

2023-01-25 Thread Cristian Danila
want to hairpin >> >> anyway. >> >> >> >> That code doesn’t have any manpages unfortunately. commarp wants a config >> >> file saying which interface it should run on and which IPs it should >> >> intercept ARP for. eg: >> >> >&

Re: OpenBSD as a transparent switch filter

2023-01-26 Thread Cristian Danila
gt; > watch your mac address table size and your hardware capacity on your > switch...with this stuff... (know your switch hardware capacity and specs) > > i hope ths helps... > > On Wed, 25 Jan 2023 at 15:14, Cristian Danila wrote: > >> Thank you so much Tom and David for giv

Re: OpenBSD as a transparent switch filter

2023-01-29 Thread Cristian Danila
avoiding > loops... > watch the logs of the switch and cpu.. if the mac flaps are happinging you > will see your switch logs (ususally ) moan about it > > watch your mac address table size and your hardware capacity on your > switch...with this stuff... (know your switch hardware

Unable to permanently mute OpenBSD keyboard

2023-02-05 Thread Cristian Danila
Hello, After many tried and attempts, I was not able to find a way to permanently disable openbsd keyboard "beep". Reading in different books about this: adding keyboard.bell.volume=0 into /etc/wsconsctl.conf adding wsconsctl -f /dev/wskbd1 keyboard.bell.volume=0 into /etc/rc.local Nothing reall

Re: Unable to permanently mute OpenBSD keyboard

2023-02-05 Thread Cristian Danila
wrote: > > On Sun, Feb 05, 2023 at 01:59:34PM +0200, Cristian Danila wrote: > > After many tried and attempts, I was not able to find a way to permanently > > disable openbsd keyboard "beep". Reading in different books about this: > > > > adding keyboar

Recommended place to store static arp entries

2023-02-28 Thread Cristian Danila
Dear Misc, I would really appreciate if more experienced members of you could suggest if there is a dedicated place or recommended place for OpenBSD where static arp entries should be stored. I found many answers over the internet, in some books it is mentioning /etc/netstart. Also on very old thr

Will tags length influence the performance in PF?

2023-04-20 Thread Cristian Danila
Hello Misc, I have a technical question in regards to PF tags. I was always wondering if the length of tags matters or not in terms of performance. For example will PF use the same effort to match a tag TEST_TEST_TEST_TEST_TEST as it would do for a tag A? I am wondering if PF internally would just

Re: Will tags length influence the performance in PF?

2023-04-21 Thread Cristian Danila
Many thanks for the clarification. On Fri, Apr 21, 2023 at 10:19 AM David Gwynne wrote: > > inside the kernel tags are given numeric identifiers, and these numbers are > used everywhere. the length of the tag name doesnt affect performance. > > > On 21 Apr 2023, at 04:10, Cris

Blocking ping scan

2022-06-18 Thread Cristian Danila
Good day! Does anyone know if OpenBSD(7.1) has the capability to be hidden against a pingscan(nmap -sn xxx.xxx.xxx.xxx)? In PF I have only 2 rules to block everything: block in quick all block out quick all This is a fresh OpenBSD7.1 with no other configuration in place. The only thing set is the

Re: Blocking ping scan

2022-06-18 Thread Cristian Danila
t; Den lör 18 juni 2022 kl 11:17 skrev Cristian Danila : > > Good day! Does anyone know if OpenBSD(7.1) has the capability to be hidden > > against a pingscan(nmap -sn xxx.xxx.xxx.xxx)? > > In PF I have only 2 rules to block everything: > > block in quick all > > block o