The OpenBSD project produces a free, multi-platform 4.4BSD-based UNIX-like operating system with a focus on security. Our efforts emphasize portability, standardization, correctness, proactive security and integrated cryptography.

learn more… | top users | synonyms

0
votes
0answers
13 views

How Can I Create a Private OpenBSD Mirror?

How can I create a private OpenBSD mirror. I'd like my mirror to have all the packages of the latest release for my preferred architectures (amd64 and i386) and everything else contained in a typical ...
1
vote
1answer
50 views

OpenBSD routing: Cannot reach gateway from IF configured to static block

When trying to set up an OpenBSD router I've run into an apparent routing problem. I have a 1U machine with 6 gigabit NICs (em0-em5). My ISP provided me with the following: xx.xx.97.246/28 static ...
0
votes
1answer
15 views

How to start postgresql server with the socket at a different place?

Good morning. The title says it, but let me precise it. I am working with openbsd. The web server is chrooted in /var/www. So the good thing would be that postgresgl place its socket (and the lock, I ...
3
votes
0answers
27 views

Is reverse DNS a good method for promoting grey IPs from trusted domains to white?

I'm trying to set up a mail server using OpenBSD, OpenSMTPD, spamd, and pf. The first problem I've encountered is that many large webmail providers - like Gmail - will retry delivery from a different ...
1
vote
1answer
23 views

What's the proper way to get smtpd (OpenSMTPD) to pick up changes to smtpd.conf?

I'm new to OpenBSD and in the process of learning OpenSMTPD. I would have expected some sort of "restart" option from the smtpctl command, but it only has a stop with no start which might force a ...
2
votes
1answer
162 views

Setting up IPSEC on LAN between two hosts (OpenBSD)

Trying to use IPSEC between two hosts on a LAN. No VPN involved Using OpenBSD 5.8 (in VirtualBox). I'd prefer to use OpenBSD's built-in support for IPSEC and not a third-party. Two hosts: 10.0.2.10 ...
0
votes
0answers
45 views

ssh tunnel to OpenBSD

I've got a remote machine running OpenBSD (version 4.8, though that shouldn't make any difference), acting as a firewall and using the packet filter pf(8) to forward incoming connection attempts to ...
0
votes
1answer
101 views

Authenticate SMB connections on OpenBSD using Active Directory

I have an OpenBSD box that is being used primarily as an SFTP server. Some users running windows need the ability to map a share from this server using SMB. Rather than setting up individual accounts ...
1
vote
2answers
54 views

IPv6 IPsec between two native IPv6 networks

Assume I have two networks, A and B, on sites either side of the globe. Both have native IPv6 and are using (hypothetically) just IPv6. IPv4 no longer exists. They can both access the internet ...
-1
votes
1answer
75 views

Configure Squid Proxy Server to use TCP for DNS lookups? [closed]

Is there a way to configure squid 3.5.1 to use TCP for DNS lookups? I've setup up the proxy server to use TCP for lookups by adding "options tcp" to my /etc/resolv.conf, but squid seems to be doing ...
1
vote
0answers
201 views

Openbsd 5.7: IPv6 advertisement not working

--context-- I have a Sokeris with 8 interfaces: em0 is connected to a bridge router (ISP) and em2 is connected to my DMZ network (web servers). I got from my ISP a /56 prefix and 2 DNS IPs but no ...
0
votes
0answers
49 views

Openbsd set connect on PPTP server behind packet filter

I have firewall on OpenBSD use Packet Filter and behind him MS Windows server with PPTP server. I need allow connect this PPTP server from internet. I set in OpenBSD: net.inet.gre.allow=1 ...
0
votes
0answers
114 views

pf.conf DNS dual redirect to dnscrypt-proxy. Just need confirmation my code is correct

I have 2 isolated LANS on my gateway. They are blocked from communicating to one another in pf by: block in log on $int_if from "192.168.1.0/25" to "192.168.1.128/25" block in log on $int_if from ...
0
votes
1answer
358 views

php-fpm does not work me exec or shell_exec

I have OpenBSD 5.6 and php-fpm, nginx. Is chrooted by default on /var/www I try:(test.php) <?php if(function_exists('exec')) { echo "exec is enabled"; }else{ // it's not echo "exec is ...
1
vote
2answers
525 views

IPSec VPN set up (Windows)

I am working on a project which needs to call a web service that can only be accessed whilst being connected via a VPN. The legacy platform that we're migrating from ran on OpenBSD and used the ...
1
vote
1answer
595 views

openbsd pf squid transparent proxy using a bridge

I want to use OpenBSD 5.7 as a filtering bridge in front of my router, and as part of that run a transparent proxy (squid 3.5.1) to manage web access. I have set up the openbsd machine as a bridge, ...
1
vote
1answer
101 views

Authenticating OpenBSD 5.6 to Windows server 2008R2 active directory?

How do I make openBSD to authenticate to Windows server 2008R2? I currently have installed Identity Management for Unix (IDMU). Also I have installed login_ldap in openbsd. but I dont know what to ...
1
vote
2answers
688 views

OpenBSD Nginx/PHP/MariaDB/PHP-FPM Stack

I have a minimal OpenBSD 5.7 amd64 install in VMware where I have installed matching versions of PHP and PHP-FPM, plus nginx, and mariadb using pkg_add. I configure all the services, and get nginx to ...
0
votes
1answer
462 views

ssh-keygen key verification changed in OpenBSD 5.7, how to verify host_key?

OpenBSDs "ssh-keygen -l" output format has changed in 5.7. How to verify the host key when connecting from older ssh versions? Until OpenBSD 5.6 the host_keys fingerprint output format was like this: ...
0
votes
1answer
28 views

Process separation on an OpenBSD server

I fear this may be a somewhat open-ended question that gets closed: Apologies in advance, but I'll give it a shot! I'm considering operating an OpenBSD VM with a number of services running on the ...
0
votes
0answers
236 views

ModSecurity + Nginx “SecRule” startup error

I've installed Nginx (1.8.0) + ModSecurity (2.9.0) from source on OpenBSD (5.6), without problems. But when I try to configure modsecurity with the default config, upon starting nginx I get: ...
0
votes
1answer
37 views

High latency when enabling secondary BGP server for same networks?

I have two BGP servers on OpenBSD using bgpd that are located in the same DC; I tried to enable multihoming for the same networks on both of the servers, but upon doing so all hosts in that DC started ...
1
vote
2answers
538 views

How to block MAC address in pf firewall

I want to block particular MAC address on PF firewall. I know PF firewall works on the Layer 3 i.e it operates on the IP addresses rather than MAC address.But is there any way to block the MAC address ...
0
votes
1answer
98 views

How to uninstall default nginx on openBSD

I want to install a custom compiled nginx on OpenBSD, but I'm having problems running it because nginx is already installed in the default OpenBSD (5.6) install. In some way it is like I managed to ...
0
votes
1answer
146 views

Recover data from OpenBSD softraid down to a single disk

I'm currently very desperate: I have a 3TB WD Red disk that I need to extract data from. This was part of a softraid on an OpenBSD 5.6 machine. I was in the process of migrating to a zfs on linux ...
1
vote
0answers
125 views

Forcing a password change on OpenBSD

On OpenBSD 5.6 I need to provision a number of user accounts with default passwords. I would like users, upon their first SSH login, to be forced to change their passwords from the default. On CentOS ...
0
votes
0answers
172 views

Dell R220 and OpenBSD/pfsense

Just wondering if anyone has any experience running OpenBSD or pfsense on a Dell R220 (with either a PERC S110 or H310? I know I can do software based RAID in pfsense, however I've seen a few posts ...
2
votes
1answer
161 views

OpenBSD cannot set frag limit more than 6144

I am trying to : set limit frags 10000 and get following info: pfctl: cannot set 'frags' limit When i am trying to set it on 5000 everything works fine.
0
votes
1answer
175 views

Why is my PHP server redirecting to the wrong address?

I'm setting up a PHP web server on OpenBSD. phpinfo() is up and running. But, every time I try to install Wordpress, it's redirecting the client to the dummy hostname created on OS install ...
0
votes
1answer
274 views

OpenBSD chroot for nginx/Apache file permissions

I haven't been able to find a satisfying answer on Goole or the various Stack forums: I noticed that files under /var/www (where nginx and I believe Apache are chrooted by default) have permissions ...
0
votes
1answer
354 views

OpenBSD automatic filesystem check at reboot

I want my openbsd server to boot, no matter what and dont break with waiting for manual FSCKing. It's easy to do in linux, but in obsd it just doesnt want to be "auto". Last time I set the 6th,7th ...
2
votes
3answers
2k views

Linux vs OpenBSD vmware performance

I wonder what experience others have of running openbsd on top of vmware infrastructure. I have a pretty regular Lighttpd+Mysql+PHP5 setup of 2 vmware guests: -Debian7 Wheezy -OpenBSD 5.2 (this ...
-1
votes
2answers
362 views

OpenBSD ISC-DHCP IPv6 not working?

How to enable dhcp for ipv6 in OpenBSD 5.5. Default dhcpd don't know about IPv6, it says that option -6 is incorrect and do not understand ipv6 config. But it has version 4.X that IPv6 must be enabled ...
0
votes
2answers
194 views

OpenBSD OpenSSL version after update to -stable

Yesterday I installed OpenBSD 5.5 release and after reading about updating and applying patches to the system (http://www.openbsd.org/errata55.html) I decided to update to the -Stable ("patch branch") ...
1
vote
1answer
392 views

Active CARP network loop

I have to setup, no matter what, a cluster of 3 active OpenBSD 5.5 with CARP on 3 separate ESXi 5.5 hosts. I think I'm close to the end but I have this message in /var/log/messages : carp0: replay ...
-1
votes
1answer
186 views

OpenBSD configs to EdgeRouter

is it possible to transfter OpenBSD router configs, such as firewall settings, DHCP settings to EdgeRouter-Lite?
0
votes
1answer
187 views

Is there a way to check softraid validity on OpenBSD?

I have more than two very old HDDs in a softraid(4) RAID1 mirroring discipline on OpenBSD. It looks like some of the underlying physical drives may be seeing some I/O errors; but prior to a complete ...
2
votes
1answer
4k views

502 Bad Gateway Error Nginx connect() to unix:/tmp/unicorn.sock failed

This is my first question on Server Fault. I could not find a solution to this while searching the web. I am working on an OpenBSD server running Nginx, which I did not setup, that is throwing a 502 ...
1
vote
1answer
200 views

Different permissions for different groups on one folder in OpenBSD?

Is it possible to have filesystem permission ACL's (or similar) in OpenBSD? I'm trying to make a folder where one group has read-write access while a different group has read-only access. I don't want ...
0
votes
1answer
276 views

OpenBSD with LDAP authentication returning invalid user

I am trying to set up an OpenBSD box to use a LDAP server for authentication. I am following the directions at http://www.obfuscurity.com/2009/08/OpenBSD-as-an-LDAP-Client and for the most part they ...
1
vote
1answer
143 views

Server name no longer available OpenBSD

I've been scratching my head with this for a while and don't seem to be getting any closer to a solution at the system level. I have asked the same question at SuperUser but so far the answers didn't ...
0
votes
1answer
379 views

FreeBSD pf Egress Filtering

I am attempting to build a simple pf.conf which includes NAT allowing traffic out of the network from all systems on a select series of ports. In my basic configuration I have an internal server that ...
2
votes
2answers
2k views

Ubuntu 12.04 LTS KVM host with a OpenBSD 5.4 guest, `virsh shutdown` not working / freezing guest

I have Ubuntu 12.04 LTS KVM host with a OpenBSD 5.4 guest. I am having an issue with virsh shutdown not working / freezing guest. After calling shutdown, guest freezes and is unresponsive. Any ssh ...
2
votes
1answer
506 views

DNSSEC and IPSec DNS Server and DNS Client Configuration

I'm about to deploy DNSSEC for some of my domains and as I was getting ready I did some reading on the subject. I came across some Microsoft Technet articles talking about Name Resolution Policy Table ...
5
votes
3answers
674 views

OpenBSD default gateway outside subnet

My ISP offers IPv6 by default. However, my ISPs IPv6 setup appears to be a bit strange because the default IPv6 gateway is located outside of my servers subnet. Under linux it is possible to setup a ...
1
vote
1answer
532 views

OpenBSD: Gateway outside subnet (works in Linux)

We need to set up an OpenBSD host to use a default gateway that's outside of it's subnet. This is all I need to do on Linux (not the actual IPs) to achieve it: ifconfig eth0 33.33.33.33/31 up route ...
1
vote
2answers
3k views

Having trouble increasing WordPress memory limit on nginx server

I am trying to increase the memory limit on my nginx php-fpm server for wordpress. Specifically the Wordpress plugin WooCommerce needs more available memory. I've set the following in ...
0
votes
2answers
270 views

how to access physical memory in BSD platform from terminal or using any system call ?

i just not know how to use mem command in BSD to access physical memory or virtual memory to get the ACPI tables and their Address ....... $mem Enter mem command not found .... so what can i do ? ...
1
vote
1answer
76 views

OpenLDAP Authentication in Mixed Enviroment

I am preparing to setup a small network with single sign on capability provided by and OpenLDAP server that runs on OpenBSD 5.3. Currently, I am able authenticate an Ubuntu 13.04 client against the ...
-1
votes
1answer
927 views

Give an external IP to a Virtual Machine

I've a Windows Server 2008 R2 with 8 public IPs assigned (fixed), recently i've installed VirtualBox and create a VirtualMachine with OpenBSD. I would like to give one IP to the VM, but every try ...