OpenBSD: For your eyes only

[n0cmonkey]

link

 

[drag]

I am thinking that I am going to switch over to DSL, in order to get static IP's and have no ports blocked...

If I do that, then I am definately going to replace my current Linux router with a OpenBSD one.

Of course it's going to be slightly more then just a router, but probably a network monitoring and intrusion detection doo-dad workstation.

Fun stuff.

 

[n0cmonkey]

Sounds like a fun little project. There's a snort plugin thing to turn it into an IPS.

But I've lost faith in all current IDS solutions. They're all crap. They all suck.

 

[n0cmonkey]

eh, it was a pretty boring review. Maybe it's more interesting to someone that doesn't use OpenBSD though. There are a couple of interesting tips at the end, but nothing earth shattering. And I thought I noticed a couple of mistakes, but he usually beat me to the punch.

Oh, but OpenSSH uses AES as the first cypher these days. I think. 😛

 

[drag]

Ya it should be fun.

Been in the mood for a minimalist setup for a while now. After a while the bloat gets to you and you want to go small. But it's inconvenient.

Last time I tried to get a good OpenBSD setup going I simply ran out of room on my harddrive I was using.

Trying to compile a custom kernel and some other stuff to lock down the box as much as possible. That's the sort of thing that gets tough when your on a 400meg harddrive. Oh well.

I have a nice old Deskpro Compaq lined up now. 50 bucks, 400mhz more or less, 128megs of ram (or so), multiple gigs of harddrive space. Should be a real screamer with OpenBSD.

Got debian stable on it right now. I wanted to use smoothwall or whatnot (don't quite remember) so I could set it up a better router with capabilities to setup a DMZ zone for use as a wireless access point for my laptop.

Of course that fell through when the crappy crap crap compaq crapped out whenever the wireless card was plugged it. Refused to boot... 9 times out of 10. Just lock up, didn't even get past POST most of the time. After rebooting it 10 or 15 times I would get into the bios and the stupid thing wouldn't even detect it (has a weird propriatory setup were I could assign resources to different cards, like a aborted devil child of ISA and PCI). Of course when I took the card out the thing was dead reliable.

Why does old compaq computers have to suck so much? So I got bored of dealing with that, and a good DSL connection is cheap as cable now, but with out the standard cable company "just try to get HBO from somebody else" attitude. So I have to take a look at using OpenBSD to protect my lazy Linux using behind.

 

[n0cmonkey]

Compaqs are just horrible. I try my best not to touch them, but that sounds like it will be more than enough.

I got by with a 1GB drive for a while, but the 2.4 is much much better. And it's recommended you not compile a custom kernel, GENERIC is usually just as good and actually tested. 😉

Phone companies are just as bad as cable companies... There's always satellite but dish network isn't great and hughes (directv) ranks up there in the top 10 most evil companies ever, IMO.

 

[drag]

Ya, stuff directv. Well, I don't even watch TV much anymore. Was think about sticking my video cards in my parents computer and having it e-mail me my favorite shows. 😉

The ISP I am planning to use for the DSL line seems to be top notch. Geeky local company. They have several static IP's that they give you, throw in a extra 5 for 10 more bucks a month. That sort of thing.

The line provider would be Qwest... which isn't so hot. Classic ma' Bell company.


The compaq I won't of gotten if it was a compaq. Upstairs roomate's freind "we are getting rid of our old computers at work. Fifty dollars.." etc etc. OK, so I bit. Now I have ANOTHER compaq keyboard to add to the collection. Apperently they were very popular around here for a long while in the pentium1-early pentium3 days.

It sucks to have a stomach reflex and have to choke back down the bile everytime I see a red logo starting with that big C. 😛 (although I do like my proliant.)

 

[n0cmonkey]

I used to work for DirecTV, I know plenty of their dirty tricks. 😉 I watch a bit of tv in the morning when I get home and a bit before I go to work. Trying to cut down though, I have a couple projects that I should be doing...

I get _old_ Dells the same way, except usually free. 😛

It's also how I got my ultra 10. 😀

And a 9GB SCSI drive/controller. 😛

A friend of mine got a p4 1.4 don't know the brand, a 15" lcd, and some scsi stuff for free from another one of my friends. Stuff just changes hands here all the time, and all of it legit. Well, as far as I know. 😎

 

[drag]

lucky bastard.

My company is stingy as all get out when it comes to PC. I am still on a 120mhz Win95 machine and everybody else is pretty much in the same boat. Except of course the network/administrator guys. They long since ditched their OS/2 warp machines for nice Linux ones.

No sparcs, although they do use one of those blue cubes thingies as a server box. Just bottom of the barrell dells circa 1996.

 

[n0cmonkey]

ew. I've got a 2ghz p4 w/1GB ram at work. Definitely not enough. I can make it swap like a mofo 5 minutes after I get there. :|

I've never gotten any hardware from work. I keep asking if they're going to decommission the ultra 5s, but I get that "you can't have them!" stare.

 

[Nothinman]

I used to work for DirecTV, I know plenty of their dirty tricks

Interesting, DirecTV is one of our clients.

 

[n0cmonkey]

Originally posted by: Nothinman

I used to work for DirecTV, I know plenty of their dirty tricks

Interesting, DirecTV is one of our clients.

ew. They aren't hiring prisoners again, are they?

 

[sciencewhiz]

I have an old 68K mac that I keep thinking I want to get OpenBSD running on.

 

[Nothinman]

ew. They aren't hiring prisoners again, are they?

AFAIK we're not that involved with their procedures =) And even if we as a company were, I wouldn't be directly involved with more than their IT/IS department.

 

[n0cmonkey]

Originally posted by: Nothinman

ew. They aren't hiring prisoners again, are they?

AFAIK we're not that involved with their procedures =) And even if we as a company were, I wouldn't be directly involved with more than their IT/IS department.

It was a joke. 😛 I think the company that handled their tech support was the one that hired the prisoners. 😛

 

[n0cmonkey]

Originally posted by: sciencewhiz
I have an old 68K mac that I keep thinking I want to get OpenBSD running on.

I've read through the instructions for the m68k arch, and it just seems like it is more trouble than it's worth. Although, I guess someone finds a use for it. 😉

 

[Nothinman]

It was a joke. I think the company that handled their tech support was the one that hired the prisoners.

I'm torn as to whether it's better to hire US prisoners or outsource to non-US non-prisoners. =)

 

[n0cmonkey]

Originally posted by: Nothinman

It was a joke. I think the company that handled their tech support was the one that hired the prisoners.

I'm torn as to whether it's better to hire US prisoners or outsource to non-US non-prisoners. =)

I can't attribute this quote, but I'm pretty sure I saw it on the direcpc newsgroup: "Atleast the prisoners spoke English." :Q

Even walking into US based call centers you have to be careful how loud you call out Mohammed or INS.

 

[Nothinman]

Even walking into US based call centers you have to be careful how loud you call out Mohammed or INS.

I know, where I work large portions of our DBA and programming groups are from that part of the world. I don't mind working with most of them, but the thing that really pisses me off is when they hire people that have such thick accents that you can't understand a word they're saying.

 

[n0cmonkey]

Yeah, it's annoying. I should just get right to the source of the problem and use it as an excuse to learn foreign languages. I could be learning vietnamese 3 days a week. 😛