Building home OpenBSD router - Part 1

July 28, 2008 8:01 am

Planning the Project Specs

Goals:

- Two local subnets, Wired and Wireless

- Support Xbox Live

- Provide external access to my file server

- Limit all communication out of my network strictly to the applications and services I choose to allow (web traffic, mail traffic, ssh, xbox, torrents, etc)

- Improved stability over the over-the-counter home routers

- Shape traffic using ALTQ

Resources:

- For the Operating System, I’m going with OpenBSD 4.3 (STABLE)

- Putting to use my MaxTerm 8300B

  • EVE-M 800 mhz (x86)
  • 256 MB of RAM
  • 15 GB IDE hard drive (spare one sitting around)
  • D-Link USB  Wireless Card (rum0 driver in OpenBSD) for local wireless traffic
  • Spare old 3com 10/100 Mbit NIC for local wired traffic
- For reference, I’m using “The Book of PF”.

This has been a great read and an excellent resource in the planning stages of this project for me.  For anyone who doesn’t already have a copy, I can not recommend this book enough.  Heres a link for picking it up from Amazon. (it’s probably be the cheapest part of this project)

The Plan:

  • Local wired traffic: 192.168.0.X/24
  • Local wireless traffic: 192.168.1.X/24
  • Provide DHCP services on both local interfaces
  • External Interface running DHCP
  • Starting with blocking everything [block all]
  • Designate IPs per server and personal computer on my network
  • Designate torrent ports to each of the personal computers
  • Initially just use WEP for proof of concept, later use WPA or even an authpf with a possible web interface for authenticating
  • Perform MRTG graphing if for nothing more than to see what I spend my bandwidth doing

Continue to Part 2.

2 Responses to “Building home OpenBSD router - Part 1”

http://oneedge.livejournal.com/ wrote a comment on August 4, 2008

I happened across your blog while looking for information on how to do almost precisely what you’re doing in this project. As I’m not very experienced (nay - no experience) with OpenBSD or FreeBSD, I was just trying to gather as much information as possible before I begin.

I look forward to reading more of your experiences with this project.

Regards, Edward

[...] tek-ops » Blog Archive » Building home OpenBSD router - Part 1. [...]

Care to comment?

You must be logged in to post a comment.