The OpenBSD project produces a free, multi-platform 4.4BSD-based UNIX-like operating system with a focus on security. Our efforts emphasize portability, standardization, correctness, proactive security and integrated cryptography.

learn more… | top users | synonyms

0
votes
3answers
156 views

Force OpenBSD to use internally one IP, but send and receive from network from other IP?

Is it possible to set up OpenBSD such, that it will have IP1 internally (in hosts, in hostname.en0, sockets binds to IP1), but convert it to IP2 when packet goes to ethernet. Also, packets for the IP2 ...
3
votes
2answers
473 views

home, end, delete, pageup, pagedown with ksh

I want to use home, end, delete, pageup, pagedown with ksh. My TERM is xterm-color. These keys works fine with tcsh and zsh, but not with ksh (print a tilda ~) I found this: bind '^[[3'=prefix-2 ...
2
votes
2answers
159 views

OpenBSD - Image on a new, bigger disk - how to use the extra space

Our present OpenBSD server needed more disk space, so we replaced the 13 GB disk (it's pretty old too) with 150GB. An image was made and then restored on the new disk. So far, so good. The new disk ...
1
vote
2answers
1k views

OpenBSD pf 'match in all scrub (no-df)' causes HTTPS to be unreachable on mobile network

First of all: excuse me for my poor usage of the English language. For several years I'm experiencing problems with the 'match in all scrub (no-df)' rule in pf. I can't find out what's happening ...
2
votes
1answer
336 views

Openbsd init script for ssh VPN tunnel

I have a server hosting SSH tunnels and Openbsd 4.5 clients connecting to it. Things work just fine but I am in the need of automating the connection from the client to the server. So that if the ...
1
vote
1answer
79 views

Active CARP network loop

I have to setup, no matter what, a cluster of 3 active OpenBSD 5.5 with CARP on 3 separate ESXi 5.5 hosts. I think I'm close to the end but I have this message in /var/log/messages : carp0: replay ...
1
vote
1answer
73 views

Server name no longer available OpenBSD

I've been scratching my head with this for a while and don't seem to be getting any closer to a solution at the system level. I have asked the same question at SuperUser but so far the answers didn't ...
1
vote
1answer
245 views

OpenBSD: Gateway outside subnet (works in Linux)

We need to set up an OpenBSD host to use a default gateway that's outside of it's subnet. This is all I need to do on Linux (not the actual IPs) to achieve it: ifconfig eth0 33.33.33.33/31 up route ...
1
vote
1answer
64 views

OpenLDAP Authentication in Mixed Enviroment

I am preparing to setup a small network with single sign on capability provided by and OpenLDAP server that runs on OpenBSD 5.3. Currently, I am able authenticate an Ubuntu 13.04 client against the ...
1
vote
1answer
522 views

How to reduce the timeout for TIME_WAIT connections on OpenBSD?

I'm running http_load on OpenBSD 5.2, to test how good my nginx setup is, and I've noticed that cold runs are much faster than warm runs, and with every run the performance goes down very dramatically ...
1
vote
1answer
346 views

Trouble P2Ving OpenBSD 4.0 to VMWare

I've been tasked with migrating a physical OpenBSD 4.0 boxes to our VMWare ESXi farm. I used VMWare's Converter 4.1 CD to perform a cold migration which completed successfully. Prior to the first boot ...
0
votes
1answer
22 views

OpenBSD chroot for nginx/Apache file permissions

I haven't been able to find a satisfying answer on Goole or the various Stack forums: I noticed that files under /var/www (where nginx and I believe Apache are chrooted by default) have permissions ...
0
votes
1answer
63 views

OpenBSD OpenSSL version after update to -stable

Yesterday I installed OpenBSD 5.5 release and after reading about updating and applying patches to the system (http://www.openbsd.org/errata55.html) I decided to update to the -Stable ("patch branch") ...
0
votes
1answer
54 views

Is there a way to check softraid validity on OpenBSD?

I have more than two very old HDDs in a softraid(4) RAID1 mirroring discipline on OpenBSD. It looks like some of the underlying physical drives may be seeing some I/O errors; but prior to a complete ...
0
votes
1answer
121 views

Routing issue from one network another one thru an openvpn server

I have a weird problem. I am not sure what is happening. We have a server running OpenBSD working as router. This server is also openvpn client and firewall (pf). From the local network I can't ping ...
0
votes
1answer
172 views

Insecure NFS ports on OpenBSD server

I have a OpenBSD 4.9 server running. Now I am trying to set up NFS shares on that server. I can set it up using secure ports. However it isn't possible to mount the shares from OS X without using the ...
0
votes
1answer
679 views

M0n0wall won't pass traffic on different LAN subnets unless “Bypass firewall rules” is checked

I have a working configuration, but a question is bugging me. The question centers around having multiple subnets on a single interface. LAN: 10.10.10.1/24 OpenVPN Server LAN IP: 10.10.10.250 ...
0
votes
1answer
99 views

Restricting program access in OpenBSD

I'm hosting a svn+ssh repo on a OpenBSD box and wondered if it is possible to deny access to any other programs despite svnserve? The reason is that I want to restrict access to parts of the repo with ...
0
votes
1answer
662 views

OpenBSD logins via SSH seem to be ignoring my configured radius server

I've installed and configured a radius server upon my localhost - it is delegating auth to a remote LDAP server. Initially things look good: I can test via the console: # export user=skemp # export ...
0
votes
1answer
143 views

Altq limits not being applied to UDP transfers

I have a OpenBSD server acting as a router/firewall with yhr packet filter ruleset shown below, a linux server, and a linux client. When transferring files (using netcat) by TCP, the limits are ...
-1
votes
1answer
29 views

OpenBSD configs to EdgeRouter

is it possible to transfter OpenBSD router configs, such as firewall settings, DHCP settings to EdgeRouter-Lite?
2
votes
0answers
178 views

Is there an equivalent of LinuxIMQs in BSD?

Is there an equivalent of LinuxIMQs in BSD ? From linuximq.net: The imq device has two common usage cases: Ingress shaping: With linux only egress shaping is possible (except for the ingress ...
1
vote
0answers
129 views

Port forwarding with URL on OpenBSD 4.5

I need to setup forwarding on gateway machine with following request from client: Is it possible to setup pf.conf on OpenBSD 4.5 machine, but instead IP address to have given URL such as ...
0
votes
0answers
31 views

OpenBSD automatic filesystem check at reboot

I want my openbsd server to boot, no matter what and dont break with waiting for manual FSCKing. It's easy to do in linux, but in obsd it just doesnt want to be "auto". Last time I set the 6th,7th ...
0
votes
0answers
17 views

Will pfctl -sr show ordered rules when using -o profile?

When I enable the -o profile option with pf will pfctl -sr show me the new order of the rules?
0
votes
0answers
89 views

openbsd pf rdr-to not working

I have multiple IP addresses aliased on my external interface and I am trying to forward from one of those IPs to an internal address for port 80. My (sanitised) config is as follows: set limit ...