The OpenBSD project produces a free, multi-platform 4.4BSD-based UNIX-like operating system with a focus on security. Our efforts emphasize portability, standardization, correctness, proactive security and integrated cryptography.

learn more… | top users | synonyms

0
votes
0answers
6 views

OpenBSD 5.9 can't preload library

I develop for Linux and OpenBSD and sometimes I get the error can't preload library - do you know what it means? The exact output I got was: : can't preload library When I try to run scripts and/or ...
1
vote
1answer
13 views

OpenVPN Client Config Dir - where common name includes non-utf8 characters?

How do one go about handling individual client configurations in OpenVPN where the common name of the certificate includes non-UTF8 characters (Such as Swedish names)? I had a look at the OpenVPN ...
-1
votes
1answer
20 views

BSD Connection 'Drops'

I've been setting up a BSD server and every thing went fine. It still works fine except on my own IP address I cannot connect to my webserver at all and with SSH I can login but then as soon as I type ...
1
vote
1answer
35 views

https not working on OpenBSD 5.8 & 5.9 guests running in VMWare Fusion 8 Pro

The set up is as per title: freshly installed OpenBSD (I've tested both 5.8 and 5.9) are having networking issues when run inside VMWare Fusion 8 Pro (OS X host). Downloading http files of any size ...
-1
votes
0answers
22 views

OpenBSD httpd.conf conditionals [migrated]

Note: this question is about the built-in OpenBSD http server named httpd and its configuration. It does not apply to any other web servers. Is it possible to make runtime conditional configurations ...
0
votes
0answers
40 views

vmm tap tun configration on openbsd

I can't seem to get the logic of tap/vio which is probably just the same as tun/tap. If I tcpdump tap I can see arp requests from the virtual machine. The packets however do not come back the virtual ...
2
votes
0answers
111 views

tuning tips for CPU load for OpenBSD guest on qemu-kvm Server

I have a CentOS KVM Server running 1 OpenBSD, 1 CentOS and 2 FreeBSD guests. Only the openBSD guest has a higher CPU load on the KVM Server. 8-10% on Server whilst Guest is at idle. The only service ...
0
votes
0answers
46 views

How Can I Create a Private OpenBSD Mirror?

How can I create a private OpenBSD mirror. I'd like my mirror to have all the packages of the latest release for my preferred architectures (amd64 and i386) and everything else contained in a typical ...
2
votes
1answer
75 views

OpenBSD routing: Cannot reach gateway from IF configured to static block

When trying to set up an OpenBSD router I've run into an apparent routing problem. I have a 1U machine with 6 gigabit NICs (em0-em5). My ISP provided me with the following: xx.xx.97.246/28 static ...
0
votes
1answer
16 views

How to start postgresql server with the socket at a different place?

Good morning. The title says it, but let me precise it. I am working with openbsd. The web server is chrooted in /var/www. So the good thing would be that postgresgl place its socket (and the lock, I ...
3
votes
0answers
38 views

Is reverse DNS a good method for promoting grey IPs from trusted domains to white?

I'm trying to set up a mail server using OpenBSD, OpenSMTPD, spamd, and pf. The first problem I've encountered is that many large webmail providers - like Gmail - will retry delivery from a different ...
1
vote
1answer
45 views

What's the proper way to get smtpd (OpenSMTPD) to pick up changes to smtpd.conf?

I'm new to OpenBSD and in the process of learning OpenSMTPD. I would have expected some sort of "restart" option from the smtpctl command, but it only has a stop with no start which might force a ...
2
votes
1answer
258 views

Setting up IPSEC on LAN between two hosts (OpenBSD)

Trying to use IPSEC between two hosts on a LAN. No VPN involved Using OpenBSD 5.8 (in VirtualBox). I'd prefer to use OpenBSD's built-in support for IPSEC and not a third-party. Two hosts: 10.0.2.10 ...
0
votes
0answers
52 views

ssh tunnel to OpenBSD

I've got a remote machine running OpenBSD (version 4.8, though that shouldn't make any difference), acting as a firewall and using the packet filter pf(8) to forward incoming connection attempts to ...
0
votes
1answer
151 views

Authenticate SMB connections on OpenBSD using Active Directory

I have an OpenBSD box that is being used primarily as an SFTP server. Some users running windows need the ability to map a share from this server using SMB. Rather than setting up individual accounts ...
1
vote
2answers
81 views

IPv6 IPsec between two native IPv6 networks

Assume I have two networks, A and B, on sites either side of the globe. Both have native IPv6 and are using (hypothetically) just IPv6. IPv4 no longer exists. They can both access the internet ...
-1
votes
1answer
86 views

Configure Squid Proxy Server to use TCP for DNS lookups? [closed]

Is there a way to configure squid 3.5.1 to use TCP for DNS lookups? I've setup up the proxy server to use TCP for lookups by adding "options tcp" to my /etc/resolv.conf, but squid seems to be doing ...
1
vote
0answers
305 views

Openbsd 5.7: IPv6 advertisement not working

--context-- I have a Sokeris with 8 interfaces: em0 is connected to a bridge router (ISP) and em2 is connected to my DMZ network (web servers). I got from my ISP a /56 prefix and 2 DNS IPs but no ...
0
votes
0answers
66 views

Openbsd set connect on PPTP server behind packet filter

I have firewall on OpenBSD use Packet Filter and behind him MS Windows server with PPTP server. I need allow connect this PPTP server from internet. I set in OpenBSD: net.inet.gre.allow=1 ...
0
votes
0answers
134 views

pf.conf DNS dual redirect to dnscrypt-proxy. Just need confirmation my code is correct

I have 2 isolated LANS on my gateway. They are blocked from communicating to one another in pf by: block in log on $int_if from "192.168.1.0/25" to "192.168.1.128/25" block in log on $int_if from ...
0
votes
1answer
492 views

php-fpm does not work me exec or shell_exec

I have OpenBSD 5.6 and php-fpm, nginx. Is chrooted by default on /var/www I try:(test.php) <?php if(function_exists('exec')) { echo "exec is enabled"; }else{ // it's not echo "exec is ...
1
vote
2answers
613 views

IPSec VPN set up (Windows)

I am working on a project which needs to call a web service that can only be accessed whilst being connected via a VPN. The legacy platform that we're migrating from ran on OpenBSD and used the ...
1
vote
1answer
774 views

openbsd pf squid transparent proxy using a bridge

I want to use OpenBSD 5.7 as a filtering bridge in front of my router, and as part of that run a transparent proxy (squid 3.5.1) to manage web access. I have set up the openbsd machine as a bridge, ...
1
vote
1answer
112 views

Authenticating OpenBSD 5.6 to Windows server 2008R2 active directory?

How do I make openBSD to authenticate to Windows server 2008R2? I currently have installed Identity Management for Unix (IDMU). Also I have installed login_ldap in openbsd. but I dont know what to ...
1
vote
2answers
760 views

OpenBSD Nginx/PHP/MariaDB/PHP-FPM Stack

I have a minimal OpenBSD 5.7 amd64 install in VMware where I have installed matching versions of PHP and PHP-FPM, plus nginx, and mariadb using pkg_add. I configure all the services, and get nginx to ...
0
votes
1answer
554 views

ssh-keygen key verification changed in OpenBSD 5.7, how to verify host_key?

OpenBSDs "ssh-keygen -l" output format has changed in 5.7. How to verify the host key when connecting from older ssh versions? Until OpenBSD 5.6 the host_keys fingerprint output format was like this: ...
0
votes
1answer
32 views

Process separation on an OpenBSD server

I fear this may be a somewhat open-ended question that gets closed: Apologies in advance, but I'll give it a shot! I'm considering operating an OpenBSD VM with a number of services running on the ...
0
votes
1answer
38 views

High latency when enabling secondary BGP server for same networks?

I have two BGP servers on OpenBSD using bgpd that are located in the same DC; I tried to enable multihoming for the same networks on both of the servers, but upon doing so all hosts in that DC started ...
1
vote
2answers
673 views

How to block MAC address in pf firewall

I want to block particular MAC address on PF firewall. I know PF firewall works on the Layer 3 i.e it operates on the IP addresses rather than MAC address.But is there any way to block the MAC address ...
0
votes
1answer
103 views

How to uninstall default nginx on openBSD

I want to install a custom compiled nginx on OpenBSD, but I'm having problems running it because nginx is already installed in the default OpenBSD (5.6) install. In some way it is like I managed to ...
0
votes
1answer
166 views

Recover data from OpenBSD softraid down to a single disk

I'm currently very desperate: I have a 3TB WD Red disk that I need to extract data from. This was part of a softraid on an OpenBSD 5.6 machine. I was in the process of migrating to a zfs on linux ...
1
vote
0answers
140 views

Forcing a password change on OpenBSD

On OpenBSD 5.6 I need to provision a number of user accounts with default passwords. I would like users, upon their first SSH login, to be forced to change their passwords from the default. On CentOS ...
2
votes
1answer
195 views

OpenBSD cannot set frag limit more than 6144

I am trying to : set limit frags 10000 and get following info: pfctl: cannot set 'frags' limit When i am trying to set it on 5000 everything works fine.
0
votes
1answer
183 views

Why is my PHP server redirecting to the wrong address?

I'm setting up a PHP web server on OpenBSD. phpinfo() is up and running. But, every time I try to install Wordpress, it's redirecting the client to the dummy hostname created on OS install ...
0
votes
1answer
295 views

OpenBSD chroot for nginx/Apache file permissions

I haven't been able to find a satisfying answer on Goole or the various Stack forums: I noticed that files under /var/www (where nginx and I believe Apache are chrooted by default) have permissions ...
0
votes
1answer
403 views

OpenBSD automatic filesystem check at reboot

I want my openbsd server to boot, no matter what and dont break with waiting for manual FSCKing. It's easy to do in linux, but in obsd it just doesnt want to be "auto". Last time I set the 6th,7th ...
2
votes
3answers
2k views

Linux vs OpenBSD vmware performance

I wonder what experience others have of running openbsd on top of vmware infrastructure. I have a pretty regular Lighttpd+Mysql+PHP5 setup of 2 vmware guests: -Debian7 Wheezy -OpenBSD 5.2 (this ...
-1
votes
2answers
420 views

OpenBSD ISC-DHCP IPv6 not working?

How to enable dhcp for ipv6 in OpenBSD 5.5. Default dhcpd don't know about IPv6, it says that option -6 is incorrect and do not understand ipv6 config. But it has version 4.X that IPv6 must be enabled ...
0
votes
2answers
214 views

OpenBSD OpenSSL version after update to -stable

Yesterday I installed OpenBSD 5.5 release and after reading about updating and applying patches to the system (http://www.openbsd.org/errata55.html) I decided to update to the -Stable ("patch branch") ...
1
vote
1answer
439 views

Active CARP network loop

I have to setup, no matter what, a cluster of 3 active OpenBSD 5.5 with CARP on 3 separate ESXi 5.5 hosts. I think I'm close to the end but I have this message in /var/log/messages : carp0: replay ...
-1
votes
1answer
197 views

OpenBSD configs to EdgeRouter

is it possible to transfter OpenBSD router configs, such as firewall settings, DHCP settings to EdgeRouter-Lite?
0
votes
1answer
205 views

Is there a way to check softraid validity on OpenBSD?

I have more than two very old HDDs in a softraid(4) RAID1 mirroring discipline on OpenBSD. It looks like some of the underlying physical drives may be seeing some I/O errors; but prior to a complete ...
3
votes
1answer
5k views

502 Bad Gateway Error Nginx connect() to unix:/tmp/unicorn.sock failed

This is my first question on Server Fault. I could not find a solution to this while searching the web. I am working on an OpenBSD server running Nginx, which I did not setup, that is throwing a 502 ...
1
vote
1answer
224 views

Different permissions for different groups on one folder in OpenBSD?

Is it possible to have filesystem permission ACL's (or similar) in OpenBSD? I'm trying to make a folder where one group has read-write access while a different group has read-only access. I don't want ...
0
votes
1answer
292 views

OpenBSD with LDAP authentication returning invalid user

I am trying to set up an OpenBSD box to use a LDAP server for authentication. I am following the directions at http://www.obfuscurity.com/2009/08/OpenBSD-as-an-LDAP-Client and for the most part they ...
1
vote
1answer
152 views

Server name no longer available OpenBSD

I've been scratching my head with this for a while and don't seem to be getting any closer to a solution at the system level. I have asked the same question at SuperUser but so far the answers didn't ...
0
votes
1answer
401 views

FreeBSD pf Egress Filtering

I am attempting to build a simple pf.conf which includes NAT allowing traffic out of the network from all systems on a select series of ports. In my basic configuration I have an internal server that ...
2
votes
2answers
2k views

Ubuntu 12.04 LTS KVM host with a OpenBSD 5.4 guest, `virsh shutdown` not working / freezing guest

I have Ubuntu 12.04 LTS KVM host with a OpenBSD 5.4 guest. I am having an issue with virsh shutdown not working / freezing guest. After calling shutdown, guest freezes and is unresponsive. Any ssh ...
2
votes
1answer
532 views

DNSSEC and IPSec DNS Server and DNS Client Configuration

I'm about to deploy DNSSEC for some of my domains and as I was getting ready I did some reading on the subject. I came across some Microsoft Technet articles talking about Name Resolution Policy Table ...
5
votes
3answers
720 views

OpenBSD default gateway outside subnet

My ISP offers IPv6 by default. However, my ISPs IPv6 setup appears to be a bit strange because the default IPv6 gateway is located outside of my servers subnet. Under linux it is possible to setup a ...