Another successful OpenBSD setup

I’ve been buying these little boxes from AliExpress for years to use as firewalls and routers. My oldest one is almost 9 years old now! OpenBSD installs just fine. Just a BIOS tweak to always boot up after power is restored.

@selfhosted #selfhosting #selfhosted #openbsd #runbsd

  • @MigratingtoLemmy
    link
    English
    09 months ago

    The problem is that their Web interface and firmware in general are not updated (at all). I think it’s even possible for script kiddies to hack into such managed switches, which forms the reasoning behind my comment.

    Does your switch produce its Web interface over TLS?

    • @[email protected]
      link
      fedilink
      English
      3
      edit-2
      9 months ago

      Doesn’t look like it but if I set up VLANs unless an user is on the correct VLAN they can’t access the web interface. And the only way for them to get access is to get physical access and plug a device into the correct port.

      • @MigratingtoLemmy
        link
        English
        09 months ago

        VLAN hopping can be done on outdated firmware if one is somewhat determined, AFAIK

          • @MigratingtoLemmy
            link
            English
            09 months ago

            If the switch is managed (I’m assuming it supports L3 functions which means inter-VLAN routing), then it’s possible to hop VLANs on the switch.

            • @[email protected]
              link
              fedilink
              English
              19 months ago

              My Netgear switch doesn’t support Level 3 routing. It only supports basic VLAN functions.