OpenBSD & KAMP-DSL

CW

Netswimmer
Wie richtet man die Verbindung mit KAMP-DSL ein
------------------------------------------------------------------------

Hinweis: diese HOWTO habe ich aus einem anderen Thread übernommen. Der eigentliche Poster war Josen


KAMP-DSL and OpenBSD (3.4)

0. Preface

If you want to use an OpenBSD-Box as your Router to the Internet and prefer KAMP-DSL
as your ISP, then be warned: There is no Support from KAMP for this task and you
will have to stick with the Vendor supplied Documentation. Nonetheless it's neither
unstable nor insecure to use OpenBSD for this task.

Before you try to get down on configuring collect the following things:


-IMPORTANT: Your Connection-Sheet you got from KAMP with your login, password and so
on. This Sheet is labeled "Auf diesem Blatt haben wir die wichtigsten _DATEN_ zu ihrem
Internetzugang zusammengefasst"

-Access to the manpages of pppoe and ppp if something goes wrong


1. Getting a working ppp.conf
The Configuration is pretty straight-forward, simply modify the following for your
needs:


default:
set log Phase Chat LCP IPCP CCP tun command

pppoe:
set device "!/usr/sbin/pppoe -i <your-dsl-device>"
set mtu max 1460
set mru max 1460
set speed sync
disable acfcomp protocomp
deny acfcomp
set authname "<your-supplied-username>"
set authkey "<your-supplied-password>"
add! default HISADDR

Save the modified file as /etc/ppp.conf. The mark pppoe is just a label, you can change
it's name to "kamp" or everything you desire. Next you have to enter the
Ethernet-Device where the cable to your DSL-Modem is connected to. The authname is called
"Benutzerkennung" and the authkey "Ihr Kennwort" on your Connection-Sheet.

2. Getting Connected
Next to this you should try to connect using the ppp-Command. Simply enter ppp at an
authorized (root-) Prompt and a interactive dialog will come up. There you enter dial
and monitor /var/log/daemon while ppp tries to establish a connection. If it's succcessful
you simply have to enter the Nameserver-Addresses in /etc/resolv.conf and you're set.

Elsewhere check that you have entered everything in your ppp.conf as written here. Every
attribute which belongs to a label (i.e the set device statement for the pppoe-label)
has to have a space in front of it to mark the topology.

Now that you had your first connection: You want it to stay up like a leased-line, don't
you? I can see your eyes burning. Simply run ppp -ddial <label-name> (i.e pppoe) and ppp
will try to reconnect everytime you're disconnnected by the evil telco.

3. Up and Down it goes
Now that you have a permanent line you may want to do things when the connection goes
up or down. If you're one of the cheapos which didn't invest in a static IP-Address you
could want to run a script to update your DynDNS-Domain. Simply create a ppp.linkup
and ppp.linkdown inside /etc/ppp and you can be sure that everything you have inside these
files will be executed once your connection is disrupted or established.
 
Zuletzt bearbeitet:
My OpenBSD Router with 3.4-RELEASE now runs rock stable since three days.

I was able to take it for some burn-in tests, I did the following:

-DDoS through KAMP-Proxy on the HTTP-Server
Download a ISO-File via mod_gzip via 15 Clients

-ICMP-Echo-Request DoS
ping -f -s 8000 eris.int.x2n.de

-Try to exploit the Apache Implementation
...no...I won't tell you my very nasty approach...no...

I didn't succeed with No. 1 and 3 and No. 2 showed little effect. I think that since root-login via ssh is disabled now (hey guys, use sudo) and my pf is adjusted to frag there is little chance that something will compromise my untrusted internal network too easily.




BTW: The first sentence features a grammar error.


WRONG: Der eigentliche Poster _VAR_ Josen
CORRECT: Der eigentliche Poster _WAR_ Josen


It's nice to see my name assigned as a variable but I'm not like one :-)



-Falk (aka. Josen)
 
Zuletzt bearbeitet:
And another one:


This bold paragraph says:
<snip>
-IMPORTANT: Your Connection-Sheet you got from KAMP with your login, password and so
on. This Sheet is labeled "Auf diesem Blatt haben wir die wichtigsten zu ihrem
Internetzugang zusammengefasst"
<snap>


But it should be:


<snip>
-IMPORTANT: Your Connection-Sheet you got from KAMP with your login, password and so
on. This Sheet is labeled "Auf diesem Blatt haben wir die wichtigsten _DATEN_ zu ihrem
Internetzugang zusammengefasst"
<snap>


Will scan through the other HowTos to see how careful the grammatical checks have been done. Seems somewhat necessary.


-Falk
 
Original geschrieben von Josen


BTW: The first sentence features a grammar error.


WRONG: Der eigentliche Poster _VAR_ Josen
CORRECT: Der eigentliche Poster _WAR_ Josen


It's nice to see my name assigned as a variable but I'm not like one :-)



-Falk (aka. Josen) [/B]

Korrigiert.

Danke für die Info :D
 
Original geschrieben von Josen

But it should be:


<snip>
-IMPORTANT: Your Connection-Sheet you got from KAMP with your login, password and so
on. This Sheet is labeled "Auf diesem Blatt haben wir die wichtigsten _DATEN_ zu ihrem
Internetzugang zusammengefasst"
<snap>

Auch korrigiert und ebenfalls danke! :D
 
Route weg

Hallo Profis,

ich habe kürzlich das 1. mal kamp-dsl mit OpenBSD eingerichtet.

Dabei hatte ich das Problem, dass kurz nach dem Verbindungsabbau (in der Regel < 1 min) die route verloren ging und der Router dadurch seine Funktion nicht mehr erfüllte.

Nachdem ich die /etc/ppp/ppp.conf entsprechend den hier gemachten Vorschlägen verändert habe, geht es problemlos.

Hat jemand eine Erklärung, warum das so ist?

Meine alte ppp.conf:

default:
_set log Phase Chat IPCP CCP tun command
_set redial 15 0
_set reconnect 15 10000

pppoe:
_set device "!/usr/sbin/pppoe -i rl1"
_disable acfcomp protocomp
_deny acfcomp
_set mtu max 1460
_set crtscts off
_set speed sync
_enable lqr
_set lqrperiod 5
_set dial
_set login
_set timeout 0
_set authname "*"
_set authkey "*"
_add! default HISADDR
_enable dns
_enable mssfixup
 
Zurück
Oben