The OpenBSD project produces a free, multi-platform 4.4BSD-based UNIX-like operating system with a focus on security. Our efforts emphasize portability, standardization, correctness, proactive security and integrated cryptography.

learn more… | top users | synonyms

-1
votes
0answers
12 views

openSMTPD or postfix with dovecot on openBSD [on hold]

I tryed to search for Comparsions between openSMTPD and postfix. But sadly i not found any. I just would like to know, what works best with dovecot on openBSD if i even want to add virus and spam ...
1
vote
0answers
7 views

Bidirectional drag'n drop is not working with VirtualBox and OpenBSD 5.9 [on hold]

I have host os Ubunut and gues os OpenBSD 5.9. Nothing bidirectional is working. can I do anything to resolve the problem?
0
votes
0answers
26 views

OpenBSD 5.9 is losing its internet connection

I run OpenBSB 5.9 in virtualbox but it lost its internet connect (dhcp) and now it can't get the internet connection back. What can I do more than just trying to restart? Update Now it is online ...
1
vote
1answer
13 views

OpenVPN Client Config Dir - where common name includes non-utf8 characters?

How do one go about handling individual client configurations in OpenVPN where the common name of the certificate includes non-UTF8 characters (Such as Swedish names)? I had a look at the OpenVPN ...
-1
votes
1answer
22 views

BSD Connection 'Drops'

I've been setting up a BSD server and every thing went fine. It still works fine except on my own IP address I cannot connect to my webserver at all and with SSH I can login but then as soon as I type ...
2
votes
0answers
114 views

tuning tips for CPU load for OpenBSD guest on qemu-kvm Server

I have a CentOS KVM Server running 1 OpenBSD, 1 CentOS and 2 FreeBSD guests. Only the openBSD guest has a higher CPU load on the KVM Server. 8-10% on Server whilst Guest is at idle. The only service ...
1
vote
1answer
40 views

https not working on OpenBSD 5.8 & 5.9 guests running in VMWare Fusion 8 Pro

The set up is as per title: freshly installed OpenBSD (I've tested both 5.8 and 5.9) are having networking issues when run inside VMWare Fusion 8 Pro (OS X host). Downloading http files of any size ...
-1
votes
0answers
22 views

OpenBSD httpd.conf conditionals [migrated]

Note: this question is about the built-in OpenBSD http server named httpd and its configuration. It does not apply to any other web servers. Is it possible to make runtime conditional configurations ...
1
vote
2answers
577 views

OpenBSD: Gateway outside subnet (works in Linux)

We need to set up an OpenBSD host to use a default gateway that's outside of it's subnet. This is all I need to do on Linux (not the actual IPs) to achieve it: ifconfig eth0 33.33.33.33/31 up route ...
0
votes
0answers
43 views

vmm tap tun configration on openbsd

I can't seem to get the logic of tap/vio which is probably just the same as tun/tap. If I tcpdump tap I can see arp requests from the virtual machine. The packets however do not come back the virtual ...
1
vote
4answers
311 views

OpenBSD installation on 2 slices

What if I really need OpenBSD to be installed on 2 slices (on virtual machine and not for production purposes): / swap instead of 6: / swap /tmp /var /usr /home I suppose that I must create ...
1
vote
1answer
112 views

Authenticating OpenBSD 5.6 to Windows server 2008R2 active directory?

How do I make openBSD to authenticate to Windows server 2008R2? I currently have installed Identity Management for Unix (IDMU). Also I have installed login_ldap in openbsd. but I dont know what to ...
7
votes
1answer
4k views

Send trunk directly to vm in HyperV 2012

I'm setting up OpenBSD as a VM in HyperV 2012. It would be easier for me to just create one interface on the vm and have OpenBSD take care of setting up the vlans. Is it possible to tell HyperV to ...
20
votes
2answers
5k views

Authenticating OpenBSD against Active Directory

Edit: Reformatted this as Q&A. If anyone can change this from Community Wiki to a typical question, that's probably more appropriate as well. How can I authenticate OpenBSD against Active ...
2
votes
1answer
76 views

OpenBSD routing: Cannot reach gateway from IF configured to static block

When trying to set up an OpenBSD router I've run into an apparent routing problem. I have a 1U machine with 6 gigabit NICs (em0-em5). My ISP provided me with the following: xx.xx.97.246/28 static ...
0
votes
0answers
46 views

How Can I Create a Private OpenBSD Mirror?

How can I create a private OpenBSD mirror. I'd like my mirror to have all the packages of the latest release for my preferred architectures (amd64 and i386) and everything else contained in a typical ...
3
votes
1answer
5k views

502 Bad Gateway Error Nginx connect() to unix:/tmp/unicorn.sock failed

This is my first question on Server Fault. I could not find a solution to this while searching the web. I am working on an OpenBSD server running Nginx, which I did not setup, that is throwing a 502 ...
1
vote
2answers
2k views

OpenBSD pf 'match in all scrub (no-df)' causes HTTPS to be unreachable on mobile network

First of all: excuse me for my poor usage of the English language. For several years I'm experiencing problems with the 'match in all scrub (no-df)' rule in pf. I can't find out what's happening ...
0
votes
1answer
16 views

How to start postgresql server with the socket at a different place?

Good morning. The title says it, but let me precise it. I am working with openbsd. The web server is chrooted in /var/www. So the good thing would be that postgresgl place its socket (and the lock, I ...
4
votes
4answers
3k views

How do I spamtrap with Postfix?

How do I setup spamtraps with Postfix so clients that send to trapped addresses are prevented from sending me more spam?
3
votes
0answers
38 views

Is reverse DNS a good method for promoting grey IPs from trusted domains to white?

I'm trying to set up a mail server using OpenBSD, OpenSMTPD, spamd, and pf. The first problem I've encountered is that many large webmail providers - like Gmail - will retry delivery from a different ...
1
vote
1answer
45 views

What's the proper way to get smtpd (OpenSMTPD) to pick up changes to smtpd.conf?

I'm new to OpenBSD and in the process of learning OpenSMTPD. I would have expected some sort of "restart" option from the smtpctl command, but it only has a stop with no start which might force a ...
2
votes
1answer
263 views

Setting up IPSEC on LAN between two hosts (OpenBSD)

Trying to use IPSEC between two hosts on a LAN. No VPN involved Using OpenBSD 5.8 (in VirtualBox). I'd prefer to use OpenBSD's built-in support for IPSEC and not a third-party. Two hosts: 10.0.2.10 ...
0
votes
1answer
153 views

Authenticate SMB connections on OpenBSD using Active Directory

I have an OpenBSD box that is being used primarily as an SFTP server. Some users running windows need the ability to map a share from this server using SMB. Rather than setting up individual accounts ...
0
votes
0answers
53 views

ssh tunnel to OpenBSD

I've got a remote machine running OpenBSD (version 4.8, though that shouldn't make any difference), acting as a firewall and using the packet filter pf(8) to forward incoming connection attempts to ...
23
votes
11answers
13k views

Is anyone else using OpenBSD as a router in the enterprise? What hardware are you running it on? [closed]

We have an OpenBSD router at each of our locations, currently running on generic "homebrew" PC hardware in a 4U server case. Due to reliability concerns and space considerations we're looking at ...
1
vote
0answers
308 views

Openbsd 5.7: IPv6 advertisement not working

--context-- I have a Sokeris with 8 interfaces: em0 is connected to a bridge router (ISP) and em2 is connected to my DMZ network (web servers). I got from my ISP a /56 prefix and 2 DNS IPs but no ...
1
vote
2answers
82 views

IPv6 IPsec between two native IPv6 networks

Assume I have two networks, A and B, on sites either side of the globe. Both have native IPv6 and are using (hypothetically) just IPv6. IPv4 no longer exists. They can both access the internet ...
-1
votes
1answer
86 views

Configure Squid Proxy Server to use TCP for DNS lookups? [closed]

Is there a way to configure squid 3.5.1 to use TCP for DNS lookups? I've setup up the proxy server to use TCP for lookups by adding "options tcp" to my /etc/resolv.conf, but squid seems to be doing ...
0
votes
0answers
66 views

Openbsd set connect on PPTP server behind packet filter

I have firewall on OpenBSD use Packet Filter and behind him MS Windows server with PPTP server. I need allow connect this PPTP server from internet. I set in OpenBSD: net.inet.gre.allow=1 ...
3
votes
2answers
6k views

Getting IPTables to properly forward NTP traffic

I have the following setup: NTP 10.21.3.169 | | 10.21.3.160 (eth1) Linux 10.0.0.67 (eth0) | | 10.0.0.65 (pcn1) OpenBSD The idea is to allow the NTPD client (not ...
0
votes
0answers
134 views

pf.conf DNS dual redirect to dnscrypt-proxy. Just need confirmation my code is correct

I have 2 isolated LANS on my gateway. They are blocked from communicating to one another in pf by: block in log on $int_if from "192.168.1.0/25" to "192.168.1.128/25" block in log on $int_if from ...
0
votes
1answer
498 views

php-fpm does not work me exec or shell_exec

I have OpenBSD 5.6 and php-fpm, nginx. Is chrooted by default on /var/www I try:(test.php) <?php if(function_exists('exec')) { echo "exec is enabled"; }else{ // it's not echo "exec is ...
1
vote
2answers
615 views

IPSec VPN set up (Windows)

I am working on a project which needs to call a web service that can only be accessed whilst being connected via a VPN. The legacy platform that we're migrating from ran on OpenBSD and used the ...
1
vote
2answers
764 views

OpenBSD Nginx/PHP/MariaDB/PHP-FPM Stack

I have a minimal OpenBSD 5.7 amd64 install in VMware where I have installed matching versions of PHP and PHP-FPM, plus nginx, and mariadb using pkg_add. I configure all the services, and get nginx to ...
0
votes
1answer
559 views

ssh-keygen key verification changed in OpenBSD 5.7, how to verify host_key?

OpenBSDs "ssh-keygen -l" output format has changed in 5.7. How to verify the host key when connecting from older ssh versions? Until OpenBSD 5.6 the host_keys fingerprint output format was like this: ...
1
vote
1answer
779 views

openbsd pf squid transparent proxy using a bridge

I want to use OpenBSD 5.7 as a filtering bridge in front of my router, and as part of that run a transparent proxy (squid 3.5.1) to manage web access. I have set up the openbsd machine as a bridge, ...
2
votes
3answers
2k views

Linux vs OpenBSD vmware performance

I wonder what experience others have of running openbsd on top of vmware infrastructure. I have a pretty regular Lighttpd+Mysql+PHP5 setup of 2 vmware guests: -Debian7 Wheezy -OpenBSD 5.2 (this ...
0
votes
1answer
406 views

OpenBSD automatic filesystem check at reboot

I want my openbsd server to boot, no matter what and dont break with waiting for manual FSCKing. It's easy to do in linux, but in obsd it just doesnt want to be "auto". Last time I set the 6th,7th ...
8
votes
4answers
2k views

OpenBSD/FreeBSD Firewall w/ GUI that is compatible with Intel 82574L Gigabit LAN NICs

I recently purchased a server to run m0n0wall or pfSense but I've learned since then that both of these firewall products are based on versions of FreeBSD which weren't yet compatible with the NICs in ...
0
votes
1answer
32 views

Process separation on an OpenBSD server

I fear this may be a somewhat open-ended question that gets closed: Apologies in advance, but I'll give it a shot! I'm considering operating an OpenBSD VM with a number of services running on the ...
0
votes
1answer
38 views

High latency when enabling secondary BGP server for same networks?

I have two BGP servers on OpenBSD using bgpd that are located in the same DC; I tried to enable multihoming for the same networks on both of the servers, but upon doing so all hosts in that DC started ...
2
votes
1answer
243 views

Is there an equivalent of LinuxIMQs in BSD?

Is there an equivalent of LinuxIMQs in BSD ? From linuximq.net: The imq device has two common usage cases: Ingress shaping: With linux only egress shaping is possible (except for the ingress ...
1
vote
2answers
679 views

How to block MAC address in pf firewall

I want to block particular MAC address on PF firewall. I know PF firewall works on the Layer 3 i.e it operates on the IP addresses rather than MAC address.But is there any way to block the MAC address ...
3
votes
3answers
898 views

tcp-upstream in unbound doesn't work. Use TCP for query upstream DNS servers really work in the real world?

Today I've been playing with some options in unbound.conf just for fun. I've enabled tcp-upstream but it doesn't work with some domains. OS: OpenBSD current. Unbound: 1.4.19 Examples with ...
1
vote
0answers
140 views

Forcing a password change on OpenBSD

On OpenBSD 5.6 I need to provision a number of user accounts with default passwords. I would like users, upon their first SSH login, to be forced to change their passwords from the default. On CentOS ...
4
votes
2answers
4k views

dhcpd.leases file manually edit

I have OpenBSD 4.8 serving as Gateway & DHCP Server. By mistake, when reinstalling one of the workstations (it is Windows 7) it gets the same name as it was before (i.e workstation-PC). So now I ...
0
votes
1answer
103 views

How to uninstall default nginx on openBSD

I want to install a custom compiled nginx on OpenBSD, but I'm having problems running it because nginx is already installed in the default OpenBSD (5.6) install. In some way it is like I managed to ...
0
votes
1answer
166 views

Recover data from OpenBSD softraid down to a single disk

I'm currently very desperate: I have a 3TB WD Red disk that I need to extract data from. This was part of a softraid on an OpenBSD 5.6 machine. I was in the process of migrating to a zfs on linux ...
2
votes
1answer
195 views

OpenBSD cannot set frag limit more than 6144

I am trying to : set limit frags 10000 and get following info: pfctl: cannot set 'frags' limit When i am trying to set it on 5000 everything works fine.