<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Felipe Alfaro Solana &#187; OpenBSD</title>
	<atom:link href="http://www.felipe-alfaro.org/blog/category/openbsd/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.felipe-alfaro.org/blog</link>
	<description>A little bit of technology, security and networking with Linux, FreeBSD and Mac OS X, plus some personal opinions.</description>
	<lastBuildDate>Sun, 23 Oct 2011 16:46:32 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3</generator>
		<item>
		<title>OpenBSD, dynamic and static IP address on the same interface</title>
		<link>http://www.felipe-alfaro.org/blog/2009/05/08/openbsd-dynamic-and-static-ip-address-on-the-same-interface/</link>
		<comments>http://www.felipe-alfaro.org/blog/2009/05/08/openbsd-dynamic-and-static-ip-address-on-the-same-interface/#comments</comments>
		<pubDate>Thu, 07 May 2009 22:25:14 +0000</pubDate>
		<dc:creator>Felipe Alfaro Solana</dc:creator>
				<category><![CDATA[DHCP]]></category>
		<category><![CDATA[OpenBSD]]></category>

		<guid isPermaLink="false">http://www.felipe-alfaro.org/blog/?p=301</guid>
		<description><![CDATA[Today I was faced with the following problem: I was trying to configure one of the Ethernet interfaces of an OpenBSD 4.5 box with both a dynamic address leased via DHCP, but also a static IP address. Initially, I tried this: # cat /etc/hostname.vr2 dhcp inet 1.1.1.11 255.255.255.0 NONE up # sh /etc/netstart vr2 The [...]]]></description>
			<content:encoded><![CDATA[<p>Today I was faced with the following problem: I was trying to configure one of the Ethernet interfaces of an OpenBSD 4.5 box with both a dynamic address leased via DHCP, but also a static IP address. Initially, I tried this:</p>
<div>
<pre>
# cat /etc/hostname.vr2
dhcp
inet 1.1.1.11 255.255.255.0 NONE
up
# sh /etc/netstart vr2
</pre>
</div>
<p>The problem with this approach is that <code>dhclient</code> never gets daemonized because <code>netstart</code> gets it annoyed: <code>dhclient</code> notices that something else reconfigured the interface and commits suicide. So, then I thought about reversing the order of the first two lines:</p>
<div>
<pre>
# cat /etc/hostname.vr2
inet 1.1.1.11 255.255.255.0 NONE
dhcp
up
# sh /etc/netstart vr2
</pre>
</div>
<p>Now <code>dhclient</code> daemonizes but also removes all previously configured IP addresses, so the statically configured address configured via the first line is wiped by <code>dhclient</code>. Not very nice.</p>
<p>Turns out the solution lies in <code>/etc/dhclient.conf</code>:</p>
<div>
<pre>
# cat /etc/dhclient.conf
interface "vr2" {
        supersede domain-name "example.com";
        supersede domain-name-servers 1.1.1.1;
}

alias {
        interface "vr2";
        fixed-address 1.1.1.11;
        option subnet-mask 255.255.255.0;
}
</pre>
</div>
<p>The alias stanza allows one to define an additional, aliased IP address for an interface. Which allows the machine to be always reachable on a fixed IP address.</p>
<p>Neat.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.felipe-alfaro.org/blog/2009/05/08/openbsd-dynamic-and-static-ip-address-on-the-same-interface/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>OpenBSD 4.0: initial impressions</title>
		<link>http://www.felipe-alfaro.org/blog/2007/01/03/openbsd-40-initial-impressions/</link>
		<comments>http://www.felipe-alfaro.org/blog/2007/01/03/openbsd-40-initial-impressions/#comments</comments>
		<pubDate>Tue, 02 Jan 2007 22:46:45 +0000</pubDate>
		<dc:creator>Felipe Alfaro Solana</dc:creator>
				<category><![CDATA[OpenBSD]]></category>

		<guid isPermaLink="false">http://felipe-alfaro.org/blog/2007/01/03/openbsd-40-initial-impressions/</guid>
		<description><![CDATA[Today, the mini-barebone computer that I ordered last week has been shipped. Basically, it consists of an ASUS Pundit P3-PH4 case and motherboard with an Intel LGA775 CPU socket, 4 dual-channel 533/600 DDR2 memory slots, 2 SATA connectors, 1 IDE connector, 1 serial port, 1 parallel port, 8-channel sound card, integrated Intel-based VGA, 4 USB [...]]]></description>
			<content:encoded><![CDATA[<p>Today, the mini-barebone computer that I ordered last week has been shipped. Basically, it consists of an ASUS Pundit P3-PH4 case and motherboard with an Intel LGA775 CPU socket, 4 dual-channel 533/600 DDR2 memory slots, 2 SATA connectors, 1 IDE connector, 1 serial port, 1 parallel port, 8-channel sound card, integrated Intel-based VGA, 4 USB 2.0 ports, 1 IEEE-1394 400 (FireWire) port, 1 Intel Pro 1000/MT Gigabit Ethernet controller, 1 CF/SD/MMC built-in reader (USB-based), 1 PCI Express x1 slot, 1 PCI Express x16 slot and 2 PCI slots. I added a Pentium 4 3.0GHz CPU, a 160GiB SATA hard drive and a standard DVD-/+RW drive. I was looking for a small form-factor machine that was able to run silently and cool but powerful enough to run things like IDS, file and print services or the Xen hypervisor. I discarded products like <a href="http://www.soekris.com/">Soekris</a>-based computers because they are expensive and underpowered when compared to a computer like this mini-barebone.</p>
<p>I decided to install <a href="http://www.openbsd.org">OpenBSD</a> 4.0 which has proven to be an extremely reliable, stable, easy to install and use, secure, Free/Libre Open Source Operating System. What is more, OpenBSD built-in firewall (named PF) is one of the most powerful, comprehensive open source firewalls in the market with support for stateful filtering, traffic normalization, traffic classification (ALTQ), load-balancing and resilience (pfsync) with good logging support (pflog) that, when combined with OpenBGPD and OpenSSH, make it a win-win platform to build network and security-oriented servers and appliances. OpenBSD can be downloaded from <a href="http://www.openbsd.org/ftp.html">http://www.openbsd.org/ftp.html</a>.</p>
<p>My initial expectations were low, to be honest. I have been using older versions of OpenBSD on quite old, low-end systems for a long time. The mini-barebone system has a full array of mostly-new hardware, like the built-in CF/SD/MMC reader, the SATA disk controller, and DDR2 memory. However, it turned out that OpenBSD 4.0 has absolutely no problem at all at dealing with all the integrated hardware. The SATA disk was recognized as such (<code>wd0</code>), the CF/SD/MMC built-in reader is recognized as three different devices (<code>sd0</code>, <code>sd1</code> and <code>sd2</code>), and the USB 2.0 EHCI and FireWire built-in controllers are properly configured and recognized. Additionally, since the machine sports an Intel Pro 1000/MT Gigabit Ethernet controller, OpenBSD is able to use TCP/UDP checksum offloading (the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&#038;apropos=0&#038;sektion=0&#038;manpath=OpenBSD+Current&#038;arch=i386&#038;format=html">em</a> driver has been supporting this feature since OpenBSD release 3.8, as far as I know).</p>
<p>Overall, I&#8217;m quite impressed with the hardware support provided by OpenBSD 4.0. This superb piece of free/libre, open source software is a pleasure to use every day, and the ports collection brings a lot of software to the table to make OpenBSD a platform that I can use to <a href="http://www.transcoding.org/">convert my DVDs to DivX</a>, <a href="http://www.samba.org">store and serve files</a>, <a href="http://www.openbsd.org/faq/pf/">protect my network from external threats</a>, act as a Wireless Access Point, run a <a href="http://www.isc.org/sw/bind/">BIND DNS server</a> and <a href="http://www.postfix.org/">Mail server</a> and do it all flawlessly and comfortably. Kudos to the OpenBSD team for this great operating systen and platform!</p>
]]></content:encoded>
			<wfw:commentRss>http://www.felipe-alfaro.org/blog/2007/01/03/openbsd-40-initial-impressions/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>

