375
submitted 2 years ago by otl@hachyderm.io to c/selfhosted@lemmy.world

Another successful OpenBSD setup

I've been buying these little boxes from AliExpress for years to use as firewalls and routers. My oldest one is almost 9 years old now! OpenBSD installs just fine. Just a BIOS tweak to always boot up after power is restored.

@selfhosted #selfhosting #selfhosted #openbsd #runbsd

you are viewing a single comment's thread
view the rest of the comments
[-] MigratingtoLemmy@lemmy.world 1 points 2 years ago

The problem is that their Web interface and firmware in general are not updated (at all). I think it's even possible for script kiddies to hack into such managed switches, which forms the reasoning behind my comment.

Does your switch produce its Web interface over TLS?

[-] Link@rentadrunk.org 3 points 2 years ago* (last edited 2 years ago)

Doesn’t look like it but if I set up VLANs unless an user is on the correct VLAN they can’t access the web interface. And the only way for them to get access is to get physical access and plug a device into the correct port.

[-] MigratingtoLemmy@lemmy.world 1 points 2 years ago

VLAN hopping can be done on outdated firmware if one is somewhat determined, AFAIK

[-] Link@rentadrunk.org 1 points 2 years ago

From the switch? I thought the routing was done at the router level?

[-] MigratingtoLemmy@lemmy.world 1 points 2 years ago

If the switch is managed (I'm assuming it supports L3 functions which means inter-VLAN routing), then it's possible to hop VLANs on the switch.

[-] Link@rentadrunk.org 1 points 2 years ago

My Netgear switch doesn’t support Level 3 routing. It only supports basic VLAN functions.

this post was submitted on 25 Feb 2024
375 points (100.0% liked)

Selfhosted

60542 readers
368 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the link in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post. )

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS