Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Putting Freebsd on little Wi-Fi router devices

adrianchadd.blogspot.com

Post reply on HN
Print view View original

31–37 of 37 posts

Re: Putting Freebsd on little Wi-Fi router devices

#31

Post by emaste »

rsync wrote: post #11

My primary use-case in small border firewalls like this is running sshuttle on them as a lightweight VPN. The problem is, FreeBSD cannot properly run sshuttle - it can do it for regular traffic, and it works well, but it cannot do DNS lookups for the entire network over the tunnel. This shortcoming is documented by the sshuttle README @ github.[1] I am very interested in having this fixed / worked around and am willi…

Avery hasn't put much effort into sshuttle for some time - you probably want Brian May's fork, which is now https://github.com/sshuttle/sshuttle

In any case, since 2011 sshuttle has supported DNS interception via a divert socket, so although it might not work today I suspect it should be somewhat straightforward to fix. I haven't looked into this yet as my only use case for sshuttle involves running it on the end host itself (typically my laptop).

Re: Putting Freebsd on little Wi-Fi router devices

#32

Post by rsync »

emaste wrote: post #31
rsync wrote: post #11

My primary use-case in small border firewalls like this is running sshuttle on them as a lightweight VPN. The problem is, FreeBSD cannot properly run sshuttle - it can do it for regular traffic, and it works well, but it cannot do DNS lookups for the entire network over the tunnel. This shortcoming is documented by the sshuttle README @ github.[1] I am very interested in having this fixed / worked around and am willi…

Avery hasn't put much effort into sshuttle for some time - you probably want Brian May's fork, which is now https://github.com/sshuttle/sshuttle In any case, since 2011 sshuttle has supported DNS interception via a divert socket, so although it might not work today I suspect it should be somewhat straightforward to fix. I haven't looked into this yet as my only use case for sshuttle involves running it on the end hos…

Yes, you're right - I lazily linked to the original project.

However the new project has the same issues with DNS over VPN on FreeBSD. I have personally corresponded with the current maintainer, etc., and since they build and test only on Linux, it's not something that ever got fixed.

If you read the original HOWTO/README from the original project, it details the issues and I can confirm that no amount of settings changes or workarounds will allow you to get DNS over the tunnel on FreeBSD.

Re: Putting Freebsd on little Wi-Fi router devices

#33

Post by Touche »

erikarn wrote: post #30
Touche wrote: post #26

Earlier quoted context omitted.

Can't help myself, why is there an official efnet and freenode channel? What's the deal there?

FreeBSD's older than freenode. Inertia is.. inertia. A lot of FreeBSD developers only hang out on efnet, so that's where a lot of stuff happens.

ah, good, was worried there was a split of the community or something.

Re: Putting Freebsd on little Wi-Fi router devices

#34

Post by gonzo »

erikarn wrote: post #28
zokier wrote: post #22

> Others have added ipfw support to do NAT and firewalling - I'm going to add configuration rules for NAT, IPFW and routing soon so it's all integrated. I thought that most of the BSD world had transitioned to PF at this point. I checked FreeBSD handbook and indeed all three firewalls are supported: IPF, IPFW, PF. Are the older ones still really relevant?

pfsense is using PF, and I'm not going to try and take any steam away from them. ipfw is small, lightweight and fine for what I'm experimenting with. If people want to include pf and send me a pull request with that as an option then by all means, please do!

pfSense sucks. PF sucks too.

Re: Putting Freebsd on little Wi-Fi router devices

#35

Post by erikarn »

gonzo wrote: post #34
erikarn wrote: post #28

Earlier quoted context omitted.

pfsense is using PF, and I'm not going to try and take any steam away from them. ipfw is small, lightweight and fine for what I'm experimenting with. If people want to include pf and send me a pull request with that as an option then by all means, please do!

pfSense sucks. PF sucks too.

glare

Re: Putting Freebsd on little Wi-Fi router devices

#36

Post by pyvpx »

erikarn wrote: post #18
pyvpx wrote: post #17

Earlier quoted context omitted.

I believe it's impossible to squeeze relatively recent (9 or 10) FreeBSD versions down to that size. The linked git repo makes mention of needing at least 8MB for some builds. And you don't get IPv6 at that size.

Yup. OpenWRT uses (patched!) Linux, but with a much smaller set of libraries/utilities to fit in small storage footprints. I'm using ye normal FreeBSD libc, libcrypto, etc - things are pretty big. It could be fun to take something like the BSD kernel and an alternative BSD licenced userland to make a much smaller footprint device, but I don't have the energy to /also/ do that. If someone would like to do that then pl…

NetBSD has some support of some kind for some of the Atheros chipsets. I understand even less about MIPS in NetBSD than I do in FreeBSD; but I'm very interested and financially motivated.

I'll have to get on freebsd-mips and start getting annoying with my simpleton questions :)

Re: Putting Freebsd on little Wi-Fi router devices

#37

Post by emaste »

rsync wrote: post #32
emaste wrote: post #31

Earlier quoted context omitted.

Avery hasn't put much effort into sshuttle for some time - you probably want Brian May's fork, which is now https://github.com/sshuttle/sshuttle In any case, since 2011 sshuttle has supported DNS interception via a divert socket, so although it might not work today I suspect it should be somewhat straightforward to fix. I haven't looked into this yet as my only use case for sshuttle involves running it on the end hos…

Yes, you're right - I lazily linked to the original project. However the new project has the same issues with DNS over VPN on FreeBSD. I have personally corresponded with the current maintainer, etc., and since they build and test only on Linux, it's not something that ever got fixed. If you read the original HOWTO/README from the original project, it details the issues and I can confirm that no amount of settings ch…

I see this issue has been discussed on the FreeBSD lists on occasion, but I can't find it on the sshuttle list in the four years of archives I've got. I also don't see a reference to this in the README.md in the original project.

The threads I have managed to find largely amount to "it doesn't work." Are you aware of anywhere the specific details of the issue are posted (debug logs from sshuttle, packet captures, etc.)?

Post reply on HN