HPR3799: My home router history




Hacker Public Radio show

Summary: Router History Early Dialup Connection sharing DSL/Cable Linux PC with 2 NIC Set up IP masquerading Windows connection sharing This may have been against TOS $50 EBay PC Mandrake MNF Found a PC on the Street IPCop Infrequently updated No updates required or abandoned? OpenBSD Reputation for Security Something New Good instructions for setting up home office. Manual but straightforward WRT-54gl with tomato Linksys router sold specifically to run Linux Purchased to be AP Junk PC hardware failures - PSU or IDE disks Frequently used as backup. PCEngines Alix Basically a PC in a router form factor Serial port - NO VGA No USB boot - Had to set up PXE boot tftp server. Install OpenBSD No Video out - Serial port only Expensive for specs - 500MHz AMD CPU and 256M Ram Alix Limitations Worked great for a few years Compact Flash limited replacements. 100M Ethernet Found Spare on EBay as Backup, just in case. PCEngines APU2 Serial only OpenBSD 5.6 via USB drive 3 NIC - Lan, Trusted, Untrusted Unifi AP for WiFi First playbook Missing some easy management Local DNS DHCP Reservations http://hackerpublicradio.org/eps.php?id=3187 CSV file with IP,MAC, Hostname DHCP reservation and local DNS Restricting Internet Open DNS and port redirects Unbound included on OpenBSD base Caching DNS resolver Forward to Open DNS - Set to do some content filtering PF rule to redirect all incoming port 53 to unbound PF scripts PF table with IP addresses of devices Table always blocked cron jobs to add/remove IP addresses to table APU2 limitations Installer Recommends Auto partitioning Doesn't know how you plan to use OpenBSD Doesn't know the future plans for project. 16G msata drive Small /usr Re-linking growth Moving src partitions PCEngines APU2 Search /etc for changes Ansible Playbook for everything not covered by DNS/DHCP playbook email forwarding sysctls syslog to server Practice on OpenBSD VM 198.168 172.20 as variable Normally with VM, I use the VirtIO NIC I used vitalized Intel NIC so same device names: em0, em1, ... Just Do It Update APU firmware - TODO retails /usr/local/share/doc/pkg-readmes/flashrom Warned family internet would be offline a few hours Replaced M2 Sata card with 120 It worked the first time Links https://www.ipcop.org/index_php.html https://www.pcengines.ch/alix2d3.htm https://pcengines.ch/apu2.htm https://pcengines.ch/howto.htm#OS_installation https://www.openbsd.org/faq/pf/example1.html