The OpenBSD project produces a free, multi-platform 4.4BSD-based UNIX-like operating system with a focus on security. Our efforts emphasize portability, standardization, correctness, proactive security and integrated cryptography.
0
votes
1answer
43 views
OpenBSD Apache version 1.3.29? [closed]
I recently installed OpenBSD and went to check the version of Apache HTTPD and when I run httpd -v it tells me the version is Apache/1.3.29 (Unix). Surely this can't be right? I am using the latest ...
0
votes
1answer
36 views
How to run python script which required root privilage for execution in apache with mod_python at openbsd
I am trying to run python script in Apache 2.x with mod_python.
I edited httpd.conf with publisher
LoadModule python_module /usr/local/apache2/modules/mod_python.so
<Directory ...
0
votes
1answer
59 views
Altq/Pf trouble on OpenBSD
I'm having some trouble with pf/altq on OpenBSD but as I'm new to it I'm not sure if its because I'm misunderstanding how to use anchors, or if something is wrong with my system.
I'm trying to add ...
0
votes
1answer
73 views
Could not resolve host — no address associated with name
I'm setting up a web server on an old OpenBSD machine, and am getting an error each time I try to start Apache.
The server refused to start after I added my virtual host with HTTPS.
Error
could not ...
2
votes
2answers
101 views
tcp-upstream in unbound doesn't work. Use TCP for query upstream DNS servers really work in the real world?
Today I've been playing with some options in unbound.conf just for fun. I've enabled tcp-upstream but it doesn't work with some domains.
OS: OpenBSD current. Unbound: 1.4.19
Examples with ...
0
votes
0answers
150 views
How to reduce the timeout for TIME_WAIT connections on OpenBSD?
I'm running http_load on OpenBSD 5.2, to test how good my nginx setup is, and I've noticed that cold runs are much faster than warm runs, and with every run the performance goes down very dramatically ...
0
votes
1answer
451 views
Why does tomcat7 log into both catalina.out and catalina.YYYY-MM-DD.log?
On OpenBSD 5.2, the default installation of tomcat-7.0.29 seems to be logging all errors into both catalina.out and catalina.YYYY-MM-DD.log.
Cns# ll /var/tomcat/logs/catalina.*
-rw-r--r-- 1 _tomcat ...
0
votes
2answers
130 views
OpenBSD Apache configuration: NFS mount
I have a NFS mount at /mnt/web/ on OpenBSD 5.2.
How can I mount this so it's accessible to the web?
Currently I'm soft linking it to /var/www/web
ln -s /mnt/web /var/www/web
I've added an alias ...
1
vote
1answer
65 views
OpenBSD - Image on a new, bigger disk - how to use the extra space
Our present OpenBSD server needed more disk space, so we replaced the 13 GB disk (it's pretty old too) with 150GB. An image was made and then restored on the new disk. So far, so good.
The new disk ...
0
votes
0answers
61 views
Routing issue from one network another one thru an openvpn server
I have a weird problem. I am not sure what is happening. We have a server running OpenBSD working as router. This server is also openvpn client and firewall (pf).
From the local network I can't ping ...
2
votes
1answer
38 views
openbsd installation with certain configuration prebuilt
I am looking for options to install a system OpenBSD which has certain configs prewritten. What options can I look for?
An install image which when installed, installs a system with a configuration
...
0
votes
1answer
105 views
OpenBSD ftp-proxy behind NAT itself
Is it possible to change the PASV IP ftp-proxy of OpenBSD sends to clients, without changing the listen address of redirection control (-b <address>)?
I have the following setup:
FTP client ...
2
votes
1answer
353 views
dhcpd.leases file manually edit
I have OpenBSD 4.8 serving as Gateway & DHCP Server.
By mistake, when reinstalling one of the workstations (it is Windows 7) it gets the same name as it was before (i.e workstation-PC).
So now I ...
0
votes
1answer
57 views
OpenBSD install from CD does not find installation file set
We are installing OpenBSD on one of our machines. After configuring the hostname and directories, there's an error on installing the sets
I'm installing from a CD, but the system does not recognize ...
2
votes
1answer
179 views
Openbsd init script for ssh VPN tunnel
I have a server hosting SSH tunnels and Openbsd 4.5 clients connecting to it.
Things work just fine but I am in the need of automating the connection from the client to the server. So that if the ...
-3
votes
1answer
125 views
Sharing wireless Internet to my building ($) [closed]
I have a business proposal to build a wireless Internet service to an entire building where people would be charged very few at the expense of potential low speed. Anyway the drawing would be ...
1
vote
0answers
59 views
OpenBSD: /var/db/spamd file size [closed]
Another thing I desperately try to find out is why my /var/db/spamd files grows to more than 1 GB within a week.
Just for fun, check your file size of /var/db/spamd on your OpenBSD machine. Maybe ...
2
votes
1answer
537 views
OpenBSD pf 'match in all scrub (no-df)' causes HTTPS to be unreachable on mobile network
First of all: excuse me for my poor usage of the English language.
For several years I'm experiencing problems with the 'match in all scrub (no-df)' rule in pf. I can't find out what's happening ...
4
votes
2answers
581 views
Can I create a pf rule involving MAC address instead of IP?
The title is self explanatory.
I want to create rules in pf running on OpenBSD 4.9 for perticular MAC address, something like
pass in on eth0 from mac 00:04:34:5f:34:33 to mac 34:32:34:06:5e:22
I ...
2
votes
1answer
276 views
OpenBSD pf - implementing the equivalent of an iptables DNAT
Short version
Server A (OpenBSD 4.7) connects to server B (Windows). IP of server B changes. Server A should be able to connect to server B to both the old and new IP. We cannot configure multiple ...
1
vote
0answers
95 views
Port forwarding with URL on OpenBSD 4.5
I need to setup forwarding on gateway machine with following request from client:
Is it possible to setup pf.conf on OpenBSD 4.5 machine, but instead IP address to have given URL such as ...
-2
votes
2answers
207 views
Bridging: OpenBSD vs Linux [closed]
The bridge interface under Linux is quite dumb. In the end, it's just very inconvenient to use: you have to delete all IP configurations from the attached interfaces and somehow migrate the ...
0
votes
1answer
285 views
OpenBsd 5 port forwarding
I'm trying to configure pf port forwarding on OpenBSD 5.0
The firewall machine has two nics:
em0: 192.168.200.3
vic0: 192.65.214.136
I would like to forward all packets comming into ...
1
vote
1answer
191 views
Trouble P2Ving OpenBSD 4.0 to VMWare
I've been tasked with migrating a physical OpenBSD 4.0 boxes to our VMWare ESXi farm. I used VMWare's Converter 4.1 CD to perform a cold migration which completed successfully. Prior to the first boot ...
2
votes
2answers
153 views
How to configure something like “Reflexive ACL” on OpenBSD?
My U-Verse modem has something called "Reflexive ACL" described as
Reflexive ACL: When IPv6 is enabled, you can enable Reflexive Access
Control Lists to deny inbound IPv6 traffic unless this ...
0
votes
1answer
139 views
openbsd carp with multiple external vip's
Is there any way to setup multiple carp vip's without creating a separate hostname.if file for each address?
Our colo has provided us with a /25 external network. Three addresses from this range are ...
0
votes
1answer
164 views
Can you recommend a shell hosting company who supports IRC clients? [closed]
About 5 people in very geographically different locations, working on the same project, fed up to poor uptime in their ircs -- looking for something more robust with long uptime. Are there some Irc ...
0
votes
1answer
2k views
OpenBSD 5.0 pf with NAT & Port Forwarding
Port forwarding does not seem to work properly, incoming connections apparently are blocked.
Is there something wrong with my pf.conf?
# Performance limits
set limit states 200000
set limit ...
2
votes
0answers
130 views
Is there an equivalent of LinuxIMQs in BSD?
Is there an equivalent of LinuxIMQs in BSD ?
From linuximq.net:
The imq device has two common usage cases:
Ingress shaping:
With linux only egress shaping is possible (except for the ingress ...
3
votes
1answer
331 views
Request multiple IP-addresses via DHCP on a single physical interface (OpenBSD)
On OpenBSD, is it possible to request multiple IP-addresses via DHCP on a single physical interface? It looks like DHCP leased addresses can't be assigned as aliases. I though of creating a virtual ...
2
votes
2answers
226 views
Default values of pf.conf set parameters
I want to learn default values of these parameters, I read the manual of pf.conf but couldn't find, could you help?
set limit states
set limit src-nodes
set timeout tcp.first
set timeout ...
2
votes
5answers
820 views
OpenBSD configuration: Client unable to mount via NFS using Berkeley Automounter (amd)
What I am trying to do is to have my openBSD client (OpenBSD 4.9) auto mount a Linux NFS file system (Scientific Linux 6.1). So far, I am not sure if it is configured correctly.
To get things out of ...
5
votes
2answers
267 views
Which BSD best suited to run as VMware guest?
I want to deploy a VM to serve DNS and files (via NFS) to other *nix systems in my infrastructure.
Due to reasons beyond my control, I need a very light OS, so I naturally choose the *BSD family.
...
0
votes
1answer
117 views
Insecure NFS ports on OpenBSD server
I have a OpenBSD 4.9 server running. Now I am trying to set up NFS shares on that server. I can set it up using secure ports. However it isn't possible to mount the shares from OS X without using the ...
2
votes
3answers
315 views
How to switch IP (including subnet) on OpenBSD without outage
I have an OpenBSD firewall where I have to change the IP on the admin interface (including changing subnet/gateway) and I'm looking for how to do this remotely without losing my SSH (so I can fix ...
5
votes
2answers
181 views
Portable firewall rules for Linux and Free/Net/Open/DragonFlyBSD
I need apply the same rules (lists of IPs with allow and drop rules) in firewalls of Linux and *BSD. Do you know some application (CLI) for to convert a list of rules in the specific format of each ...
1
vote
3answers
203 views
HTTPS only on OpenBSD 4.9?
I've tried this example from OpenBSD http://www.openbsd.org/faq/faq10.html#HTTPS
it works fine, but with Mozilla Firefox 6.0 it's possible to use both http and https, while I want to force users to ...
2
votes
2answers
199 views
Sharing distfiles between FreeBSD, OpenBSD, and Gentoo
Currently I have a few FreeBSD servers with one of them acting as build box sharing its /usr/ports and /usr/ports/distfiles (as separate file systems) through NFS. Recently I've added OpenBSD and ...
0
votes
3answers
100 views
Force OpenBSD to use internally one IP, but send and receive from network from other IP?
Is it possible to set up OpenBSD such, that it will have IP1 internally (in hosts, in hostname.en0, sockets binds to IP1), but convert it to IP2 when packet goes to ethernet. Also, packets for the IP2 ...
1
vote
1answer
120 views
Why does the “boot>” prompt in OpenBSD disappear at startup?
I came home today to find my network unresponsive, and I have managed to narrow the culprit down to my OpenBSD 4.3 firewall. I attempted to power cycle it, but now at boot time it hangs, and all I ...
4
votes
1answer
632 views
OpenBSD pf port forwarding multiple rules
I have a few dozen servers behind OpenBSD firewall with port forwarding. Most rules are very similar and differ only in IPs or sometimes in ports forwarded, so I want to compact them to remove ...
0
votes
1answer
428 views
M0n0wall won't pass traffic on different LAN subnets unless “Bypass firewall rules” is checked
I have a working configuration, but a question is bugging me.
The question centers around having multiple subnets on a single
interface.
LAN: 10.10.10.1/24
OpenVPN Server LAN IP: 10.10.10.250
...
6
votes
3answers
758 views
OpenBSD/FreeBSD Firewall w/ GUI that is compatible with Intel 82574L Gigabit LAN NICs
I recently purchased a server to run m0n0wall or pfSense but I've learned since then that both of these firewall products are based on versions of FreeBSD which weren't yet compatible with the NICs in ...
0
votes
4answers
777 views
How can I install OpenBSD to a SSD without a Optical Drive?
I'm searching for an OpenBSD bootable image that I can install on SSD to run pf on. I've found these images for m0n0wall and pfSense but not for OpenBSD alone.
Can somebody link me to an image with ...
4
votes
1answer
201 views
BSD 50% interrupt utilization in irq0/clock
On OpenBSD on an Atom 450, with HPET configured in the BIOS and not, also with Hyperthreading/ACPI on-off, nothing seems to make a difference.
Here's my vmstat -iz
# vmstat 2
procs memory ...
0
votes
1answer
213 views
OpenBSD wireless on Acer Aspire 4730z
So I used the following commands:
ifconfig athn0 nwid "Pretty fly for a wifi" wpakey myreallycoolkey
dhclient athn0
but I always get this:
athn0: no link ............. sleeping
dmesg output
...
1
vote
1answer
123 views
Where OpenBSD stores information about pseudo interfaces
everybody.
On my OpenBSD machine i have several pseudo interfaces for vlan that looks like
vlan3: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:04:e2:c5:02:2b
...
0
votes
1answer
84 views
Restricting program access in OpenBSD
I'm hosting a svn+ssh repo on a OpenBSD box and wondered if it is possible to deny access to any other programs despite svnserve? The reason is that I want to restrict access to parts of the repo with ...
0
votes
1answer
897 views
OpenVPN on OpenBSD 4.8: How do I set up a VPN for road warriors in bridged mode
I'd like to set up an OpenVPN server on my OpenBSD router.
I'd like to run it in bridged mode, so the IPs given to the road warriors are from the local network subnet. I'd like to use the DNS server ...
0
votes
0answers
304 views
OpenBSD and encrypted external HD for NAS - svnd or softraid?
I'm fairly new to OpenBSD but I'm trying to cobble together what you might call a poor man's NAS with an existing computer with OpenBSD and external hd.
For this task, I'll have clients (both ...
