ASTRAL PIPER

recipe: hashish, absinthe, Syd Barrett’s music

nat gateway for small office network

Tonight i replace old FreeBSD based NAT gateway to OpenBSD based NAT gateway and firewall. This short note about pf configuration.

I use Celeron 500 with two network cards (vr0 and vr1). Here is configuration steps:

1. buy more beer and pizza!
2. install openbsd
3. set net.inet.ip.forwarding value to “1”. add string net.inet.ip.forwarding=1 to /etc/sysctl.conf file
4. activate pf. add pf=YES line to /etc/rc.conf.local file
5. let’s edit /etc/pf.conf file
   1. macros

      ext_if="vr0"
      int_if="vr1"

   2. options

      set block-policy return
      set loginterface $ext_if
      set skip on lo

   3. scrub

      scrub in

   4. network address translation

      nat on $ext_if from !($ext_if) to any -> ($ext_if)

   5. filter

      block in
      pass out keep state
      antispoof quick for { lo $int_if }
      pass quick on $int_if

6. load config file. pfctl -f /etc/pf.conf
7. check pf configuration. pfctl -f /etc/pf.conf

…and read “The OpenBSD Packet Filter”.

process..

OpenBSD was born today

calendar(1) at saturn:

Oct 18  OpenBSD born, Wednesday 08:37:01 GMT, 1995

after work:

PATCH: msdosfs

keeping the write speed constant. from netbsd

openbsd-msdosfs.diff

Button status control via sensor framework

Added sensor framework support to acpibtn(4) driver.

% dmesg | grep acpibtn
acpibtn0 at acpi0: LID_
acpibtn1 at acpi0: SLPB
% sysctl hw.sensors
hw.sensors.0=acpibtn0, button status, Off
hw.sensors.1=acpibtn1, button status, Off

openbsd-acpibtn+sensors.diff

Helloween in Moscow

Yesterday i was in Tochka club at Hellowen concert (part of the “Keeper Of The Seven Keys: The Legacy. Worldtour 2005/2006”).

I was too many drunk -> no reports.

Helping OpenBSD

Links for peoples, who want help to OpenBSD project:

• Advocating OpenBSD
• Helping on the FAQ
• Contributing to the OpenBSD Translation Effort
• Building an OpenBSD port
• OpenBSD porting checklist
• Commit changes to OpenBSD CVS
• Having write access to the OpenBSD tree
• Adding System Calls (an OpenBSD Example)

laptop, lcd, fonts

after installing openbsd or freebsd on laptop you can see that the fonts sucked in x11. i like fonts in mac os x: anti-aliased but not so much, and big enough to be readable but not huge on a 1024×768 lcd screen. here is some changes, needed for getting nice fonts on laptop:

• install mscorefonts port.
• configure xft by ~/.fonts.conf. enable sub-pixel rendering, enables font hinting, uses arial in place of helvetica and lucida, and forces xft to ignore non-ttf fonts.
• change the x server resolution from the default 75 to 96 dpi. add “-dpi 96” to the server options in /etc/X11/xdm/Xservers file.
• make fonts not so bigger: “gtk-font-name = “Sans 8″” to ~/.gtkrc-2.0 file.

Hacking USB device drivers->part 2

This is the second article from “Hacking USB device drivers” series. In this part will be covered device supporting mechanism by USB device drivers.

• Adding vendor and product IDs for USB drivers (read)
• Adding support for new devices to USB drivers
  • Introduction
  • Modify dev_devs[] structure