The OpenBSD project produces a free, multi-platform 4.4BSD-based UNIX-like operating system with a focus on security. Our efforts emphasize portability, standardization, correctness, proactive security and integrated cryptography.

learn more… | top users | synonyms

0
votes
1answer
296 views

OpenBSD chroot for nginx/Apache file permissions

I haven't been able to find a satisfying answer on Goole or the various Stack forums: I noticed that files under /var/www (where nginx and I believe Apache are chrooted by default) have permissions ...
-1
votes
2answers
428 views

OpenBSD ISC-DHCP IPv6 not working?

How to enable dhcp for ipv6 in OpenBSD 5.5. Default dhcpd don't know about IPv6, it says that option -6 is incorrect and do not understand ipv6 config. But it has version 4.X that IPv6 must be enabled ...
3
votes
3answers
2k views

OpenBSD has open ports in default installation

I have been considering replacing Ubuntu with OpenBSD to improve the security on my local server. I need to have ssh access to it, and I also need it to serve static web content - so the only ports I ...
1
vote
6answers
2k views

How can I install OpenBSD to a SSD without a Optical Drive?

I'm searching for an OpenBSD bootable image that I can install on SSD to run pf on. I've found these images for m0n0wall and pfSense but not for OpenBSD alone. Can somebody link me to an image with ...
1
vote
1answer
152 views

Server name no longer available OpenBSD

I've been scratching my head with this for a while and don't seem to be getting any closer to a solution at the system level. I have asked the same question at SuperUser but so far the answers didn't ...
1
vote
1answer
453 views

Active CARP network loop

I have to setup, no matter what, a cluster of 3 active OpenBSD 5.5 with CARP on 3 separate ESXi 5.5 hosts. I think I'm close to the end but I have this message in /var/log/messages : carp0: replay ...
5
votes
3answers
726 views

OpenBSD default gateway outside subnet

My ISP offers IPv6 by default. However, my ISPs IPv6 setup appears to be a bit strange because the default IPv6 gateway is located outside of my servers subnet. Under linux it is possible to setup a ...
-1
votes
1answer
200 views

OpenBSD configs to EdgeRouter

is it possible to transfter OpenBSD router configs, such as firewall settings, DHCP settings to EdgeRouter-Lite?
2
votes
6answers
2k views

OpenBSD configuration: Client unable to mount via NFS using Berkeley Automounter (amd)

What I am trying to do is to have my openBSD client (OpenBSD 4.9) auto mount a Linux NFS file system (Scientific Linux 6.1). So far, I am not sure if it is configured correctly. To get things out of ...
0
votes
1answer
209 views

Is there a way to check softraid validity on OpenBSD?

I have more than two very old HDDs in a softraid(4) RAID1 mirroring discipline on OpenBSD. It looks like some of the underlying physical drives may be seeing some I/O errors; but prior to a complete ...
1
vote
1answer
233 views

Different permissions for different groups on one folder in OpenBSD?

Is it possible to have filesystem permission ACL's (or similar) in OpenBSD? I'm trying to make a folder where one group has read-write access while a different group has read-only access. I don't want ...
0
votes
1answer
296 views

OpenBSD with LDAP authentication returning invalid user

I am trying to set up an OpenBSD box to use a LDAP server for authentication. I am following the directions at http://www.obfuscurity.com/2009/08/OpenBSD-as-an-LDAP-Client and for the most part they ...
2
votes
2answers
2k views

Ubuntu 12.04 LTS KVM host with a OpenBSD 5.4 guest, `virsh shutdown` not working / freezing guest

I have Ubuntu 12.04 LTS KVM host with a OpenBSD 5.4 guest. I am having an issue with virsh shutdown not working / freezing guest. After calling shutdown, guest freezes and is unresponsive. Any ssh ...
0
votes
1answer
405 views

FreeBSD pf Egress Filtering

I am attempting to build a simple pf.conf which includes NAT allowing traffic out of the network from all systems on a select series of ports. In my basic configuration I have an internal server that ...
2
votes
1answer
534 views

DNSSEC and IPSec DNS Server and DNS Client Configuration

I'm about to deploy DNSSEC for some of my domains and as I was getting ready I did some reading on the subject. I came across some Microsoft Technet articles talking about Name Resolution Policy Table ...
7
votes
7answers
8k views

Linux equivalent of pfsync+carp for failover firewall/routing

I'm currently using a linux box to handle my firewall/NAT using iptables. It has two NICs, one link to a LAN switch, one to our egress Internet provider. I'm looking at upgrade this box to two boxes ...
1
vote
1answer
76 views

OpenLDAP Authentication in Mixed Enviroment

I am preparing to setup a small network with single sign on capability provided by and OpenLDAP server that runs on OpenBSD 5.3. Currently, I am able authenticate an Ubuntu 13.04 client against the ...
1
vote
2answers
3k views

Having trouble increasing WordPress memory limit on nginx server

I am trying to increase the memory limit on my nginx php-fpm server for wordpress. Specifically the Wordpress plugin WooCommerce needs more available memory. I've set the following in ...
10
votes
1answer
18k views

Why does tomcat7 log into both catalina.out and catalina.YYYY-MM-DD.log?

On OpenBSD 5.2, the default installation of tomcat-7.0.29 seems to be logging all errors into both catalina.out and catalina.YYYY-MM-DD.log. Cns# ll /var/tomcat/logs/catalina.* -rw-r--r-- 1 _tomcat ...
0
votes
2answers
315 views

how to access physical memory in BSD platform from terminal or using any system call ?

i just not know how to use mem command in BSD to access physical memory or virtual memory to get the ACPI tables and their Address ....... $mem Enter mem command not found .... so what can i do ? ...
4
votes
2answers
809 views

home, end, delete, pageup, pagedown with ksh

I want to use home, end, delete, pageup, pagedown with ksh. My TERM is xterm-color. These keys works fine with tcsh and zsh, but not with ksh (print a tilda ~) I found this: bind '^[[3'=prefix-2 ...
-1
votes
1answer
988 views

Give an external IP to a Virtual Machine

I've a Windows Server 2008 R2 with 8 public IPs assigned (fixed), recently i've installed VirtualBox and create a VirtualMachine with OpenBSD. I would like to give one IP to the VM, but every try ...
3
votes
2answers
384 views

Altq/Pf trouble on OpenBSD

I'm having some trouble with pf/altq on OpenBSD but as I'm new to it I'm not sure if its because I'm misunderstanding how to use anchors, or if something is wrong with my system. I'm trying to add ...
2
votes
4answers
316 views

HTTPS only on OpenBSD 4.9? [duplicate]

I've tried this example from OpenBSD http://www.openbsd.org/faq/faq10.html#HTTPS it works fine, but with Mozilla Firefox 6.0 it's possible to use both http and https, while I want to force users to ...
2
votes
2answers
296 views

OpenBSD - Image on a new, bigger disk - how to use the extra space

Our present OpenBSD server needed more disk space, so we replaced the 13 GB disk (it's pretty old too) with 150GB. An image was made and then restored on the new disk. So far, so good. The new disk ...
1
vote
1answer
964 views

How to reduce the timeout for TIME_WAIT connections on OpenBSD?

I'm running http_load on OpenBSD 5.2, to test how good my nginx setup is, and I've noticed that cold runs are much faster than warm runs, and with every run the performance goes down very dramatically ...
0
votes
2answers
566 views

How to run python script which required root privilage for execution in apache with mod_python at openbsd

I am trying to run python script in Apache 2.x with mod_python. I edited httpd.conf with publisher LoadModule python_module /usr/local/apache2/modules/mod_python.so <Directory ...
2
votes
1answer
455 views

Outline squid server - redirect traffic with pf

What's my goal: know what employee are looking in Internet (what pages, how long etc; no caching). What I did: install squid on openBSD Problem: I see whole traffic (tcpdump), but I can't redirect ...
4
votes
1answer
98 views

pfctl in OpenBSD and FreeBSD

I've noticed that both FreeBSD and NetBSD have extra pfctl options: pfctl [-AdeghmNnOPqRrvz] But OpenBSD doesn't, it's missing around five of the extra options: pfctl [-deghnPqrvz] I would have ...
1
vote
5answers
817 views

OpenBSD firewall - netbook hardware option - pros and cons

I'm considering putting OpenBSD on a netbook for use as a firewall. I am entertaining the idea of using a netbook because it has a built-in screen and keyboard, built-in battery backup, and a ...
2
votes
1answer
610 views

OpenBSD Apache version 1.3.29? [closed]

I recently installed OpenBSD and went to check the version of Apache HTTPD and when I run httpd -v it tells me the version is Apache/1.3.29 (Unix). Surely this can't be right? I am using the latest ...
0
votes
1answer
374 views

OpenBSD ftp-proxy behind NAT itself

Is it possible to change the PASV IP ftp-proxy of OpenBSD sends to clients, without changing the listen address of redirection control (-b <address>)? I have the following setup: FTP client ...
0
votes
1answer
616 views

Could not resolve host — no address associated with name

I'm setting up a web server on an old OpenBSD machine, and am getting an error each time I try to start Apache. The server refused to start after I added my virtual host with HTTPS. Error could not ...
0
votes
2answers
632 views

OpenBSD Apache configuration: NFS mount

I have a NFS mount at /mnt/web/ on OpenBSD 5.2. How can I mount this so it's accessible to the web? Currently I'm soft linking it to /var/www/web ln -s /mnt/web /var/www/web I've added an alias ...
2
votes
1answer
518 views

Openbsd init script for ssh VPN tunnel

I have a server hosting SSH tunnels and Openbsd 4.5 clients connecting to it. Things work just fine but I am in the need of automating the connection from the client to the server. So that if the ...
2
votes
1answer
61 views

openbsd installation with certain configuration prebuilt

I am looking for options to install a system OpenBSD which has certain configs prewritten. What options can I look for? An install image which when installed, installs a system with a configuration ...
0
votes
3answers
196 views

Force OpenBSD to use internally one IP, but send and receive from network from other IP?

Is it possible to set up OpenBSD such, that it will have IP1 internally (in hosts, in hostname.en0, sockets binds to IP1), but convert it to IP2 when packet goes to ethernet. Also, packets for the IP2 ...
4
votes
1answer
787 views

Request multiple IP-addresses via DHCP on a single physical interface (OpenBSD)

On OpenBSD, is it possible to request multiple IP-addresses via DHCP on a single physical interface? It looks like DHCP leased addresses can't be assigned as aliases. I though of creating a virtual ...
-3
votes
1answer
146 views

Sharing wireless Internet to my building ($) [closed]

I have a business proposal to build a wireless Internet service to an entire building where people would be charged very few at the expense of potential low speed. Anyway the drawing would be ...
1
vote
1answer
315 views

Continuous Data Protection on Openbsd

I was wondering if there is anything similar to Continuous Data Protection that is available for openbsd?
7
votes
2answers
2k views

Can I create a pf rule involving MAC address instead of IP?

The title is self explanatory. I want to create rules in pf running on OpenBSD 4.9 for perticular MAC address, something like pass in on eth0 from mac 00:04:34:5f:34:33 to mac 34:32:34:06:5e:22 I ...
2
votes
1answer
1k views

OpenBSD pf - implementing the equivalent of an iptables DNAT

Short version Server A (OpenBSD 4.7) connects to server B (Windows). IP of server B changes. Server A should be able to connect to server B to both the old and new IP. We cannot configure multiple ...
1
vote
1answer
3k views

Help me upgrade my pf.conf for OpenBSD 4.7

I'm planning on upgrading my OpenBSD to 4.7 (from 4.6) and as you may or may not know, they changed the syntax for pf.conf. This is the relevant portion from the upgrade guide: pf(4) NAT syntax ...
1
vote
0answers
158 views

Port forwarding with URL on OpenBSD 4.5

I need to setup forwarding on gateway machine with following request from client: Is it possible to setup pf.conf on OpenBSD 4.5 machine, but instead IP address to have given URL such as ...
-2
votes
2answers
438 views

Bridging: OpenBSD vs Linux [closed]

The bridge interface under Linux is quite dumb. In the end, it's just very inconvenient to use: you have to delete all IP configurations from the attached interfaces and somehow migrate the ...
0
votes
1answer
5k views

OpenBSD 5.0 pf with NAT & Port Forwarding

Port forwarding does not seem to work properly, incoming connections apparently are blocked. Is there something wrong with my pf.conf? # Performance limits set limit states 200000 set limit ...
0
votes
1answer
620 views

OpenBsd 5 port forwarding

I'm trying to configure pf port forwarding on OpenBSD 5.0 The firewall machine has two nics: em0: 192.168.200.3 vic0: 192.65.214.136 I would like to forward all packets comming into ...
1
vote
1answer
474 views

Trouble P2Ving OpenBSD 4.0 to VMWare

I've been tasked with migrating a physical OpenBSD 4.0 boxes to our VMWare ESXi farm. I used VMWare's Converter 4.1 CD to perform a cold migration which completed successfully. Prior to the first boot ...
2
votes
2answers
363 views

How to configure something like “Reflexive ACL” on OpenBSD?

My U-Verse modem has something called "Reflexive ACL" described as Reflexive ACL: When IPv6 is enabled, you can enable Reflexive Access Control Lists to deny inbound IPv6 traffic unless this ...
0
votes
1answer
487 views

openbsd carp with multiple external vip's

Is there any way to setup multiple carp vip's without creating a separate hostname.if file for each address? Our colo has provided us with a /25 external network. Three addresses from this range are ...