The OpenBSD project produces a free, multi-platform 4.4BSD-based UNIX-like operating system with a focus on security. Our efforts emphasize portability, standardization, correctness, proactive security and integrated cryptography.

learn more… | top users | synonyms

0
votes
1answer
661 views

Give an external IP to a Virtual Machine

I've a Windows Server 2008 R2 with 8 public IPs assigned (fixed), recently i've installed VirtualBox and create a VirtualMachine with OpenBSD. I would like to give one IP to the VM, but every try ...
19
votes
1answer
4k views

Authenticating OpenBSD against Active Directory

Edit: Reformatted this as Q&A. If anyone can change this from Community Wiki to a typical question, that's probably more appropriate as well. How can I authenticate OpenBSD against Active ...
3
votes
2answers
269 views

Altq/Pf trouble on OpenBSD

I'm having some trouble with pf/altq on OpenBSD but as I'm new to it I'm not sure if its because I'm misunderstanding how to use anchors, or if something is wrong with my system. I'm trying to add ...
2
votes
4answers
285 views

HTTPS only on OpenBSD 4.9? [duplicate]

I've tried this example from OpenBSD http://www.openbsd.org/faq/faq10.html#HTTPS it works fine, but with Mozilla Firefox 6.0 it's possible to use both http and https, while I want to force users to ...
0
votes
1answer
146 views

Routing issue from one network another one thru an openvpn server

I have a weird problem. I am not sure what is happening. We have a server running OpenBSD working as router. This server is also openvpn client and firewall (pf). From the local network I can't ping ...
2
votes
2answers
208 views

OpenBSD - Image on a new, bigger disk - how to use the extra space

Our present OpenBSD server needed more disk space, so we replaced the 13 GB disk (it's pretty old too) with 150GB. An image was made and then restored on the new disk. So far, so good. The new disk ...
1
vote
1answer
716 views

How to reduce the timeout for TIME_WAIT connections on OpenBSD?

I'm running http_load on OpenBSD 5.2, to test how good my nginx setup is, and I've noticed that cold runs are much faster than warm runs, and with every run the performance goes down very dramatically ...
0
votes
2answers
403 views

How to run python script which required root privilage for execution in apache with mod_python at openbsd

I am trying to run python script in Apache 2.x with mod_python. I edited httpd.conf with publisher LoadModule python_module /usr/local/apache2/modules/mod_python.so <Directory ...
2
votes
1answer
300 views

Outline squid server - redirect traffic with pf

What's my goal: know what employee are looking in Internet (what pages, how long etc; no caching). What I did: install squid on openBSD Problem: I see whole traffic (tcpdump), but I can't redirect ...
4
votes
1answer
89 views

pfctl in OpenBSD and FreeBSD

I've noticed that both FreeBSD and NetBSD have extra pfctl options: pfctl [-AdeghmNnOPqRrvz] But OpenBSD doesn't, it's missing around five of the extra options: pfctl [-deghnPqrvz] I would have ...
1
vote
5answers
710 views

OpenBSD firewall - netbook hardware option - pros and cons

I'm considering putting OpenBSD on a netbook for use as a firewall. I am entertaining the idea of using a netbook because it has a built-in screen and keyboard, built-in battery backup, and a ...
1
vote
1answer
529 views

OpenBSD Apache version 1.3.29? [closed]

I recently installed OpenBSD and went to check the version of Apache HTTPD and when I run httpd -v it tells me the version is Apache/1.3.29 (Unix). Surely this can't be right? I am using the latest ...
0
votes
1answer
271 views

OpenBSD ftp-proxy behind NAT itself

Is it possible to change the PASV IP ftp-proxy of OpenBSD sends to clients, without changing the listen address of redirection control (-b <address>)? I have the following setup: FTP client ...
0
votes
1answer
409 views

Could not resolve host — no address associated with name

I'm setting up a web server on an old OpenBSD machine, and am getting an error each time I try to start Apache. The server refused to start after I added my virtual host with HTTPS. Error could not ...
0
votes
2answers
480 views

OpenBSD Apache configuration: NFS mount

I have a NFS mount at /mnt/web/ on OpenBSD 5.2. How can I mount this so it's accessible to the web? Currently I'm soft linking it to /var/www/web ln -s /mnt/web /var/www/web I've added an alias ...
2
votes
1answer
431 views

Openbsd init script for ssh VPN tunnel

I have a server hosting SSH tunnels and Openbsd 4.5 clients connecting to it. Things work just fine but I am in the need of automating the connection from the client to the server. So that if the ...
2
votes
1answer
57 views

openbsd installation with certain configuration prebuilt

I am looking for options to install a system OpenBSD which has certain configs prewritten. What options can I look for? An install image which when installed, installs a system with a configuration ...
0
votes
3answers
171 views

Force OpenBSD to use internally one IP, but send and receive from network from other IP?

Is it possible to set up OpenBSD such, that it will have IP1 internally (in hosts, in hostname.en0, sockets binds to IP1), but convert it to IP2 when packet goes to ethernet. Also, packets for the IP2 ...
4
votes
1answer
673 views

Request multiple IP-addresses via DHCP on a single physical interface (OpenBSD)

On OpenBSD, is it possible to request multiple IP-addresses via DHCP on a single physical interface? It looks like DHCP leased addresses can't be assigned as aliases. I though of creating a virtual ...
-3
votes
1answer
144 views

Sharing wireless Internet to my building ($) [closed]

I have a business proposal to build a wireless Internet service to an entire building where people would be charged very few at the expense of potential low speed. Anyway the drawing would be ...
1
vote
1answer
263 views

Continuous Data Protection on Openbsd

I was wondering if there is anything similar to Continuous Data Protection that is available for openbsd?
5
votes
2answers
1k views

Can I create a pf rule involving MAC address instead of IP?

The title is self explanatory. I want to create rules in pf running on OpenBSD 4.9 for perticular MAC address, something like pass in on eth0 from mac 00:04:34:5f:34:33 to mac 34:32:34:06:5e:22 I ...
2
votes
1answer
794 views

OpenBSD pf - implementing the equivalent of an iptables DNAT

Short version Server A (OpenBSD 4.7) connects to server B (Windows). IP of server B changes. Server A should be able to connect to server B to both the old and new IP. We cannot configure multiple ...
1
vote
1answer
3k views

Help me upgrade my pf.conf for OpenBSD 4.7

I'm planning on upgrading my OpenBSD to 4.7 (from 4.6) and as you may or may not know, they changed the syntax for pf.conf. This is the relevant portion from the upgrade guide: pf(4) NAT syntax ...
1
vote
0answers
144 views

Port forwarding with URL on OpenBSD 4.5

I need to setup forwarding on gateway machine with following request from client: Is it possible to setup pf.conf on OpenBSD 4.5 machine, but instead IP address to have given URL such as ...
-2
votes
2answers
360 views

Bridging: OpenBSD vs Linux [closed]

The bridge interface under Linux is quite dumb. In the end, it's just very inconvenient to use: you have to delete all IP configurations from the attached interfaces and somehow migrate the ...
0
votes
1answer
4k views

OpenBSD 5.0 pf with NAT & Port Forwarding

Port forwarding does not seem to work properly, incoming connections apparently are blocked. Is there something wrong with my pf.conf? # Performance limits set limit states 200000 set limit ...
0
votes
1answer
541 views

OpenBsd 5 port forwarding

I'm trying to configure pf port forwarding on OpenBSD 5.0 The firewall machine has two nics: em0: 192.168.200.3 vic0: 192.65.214.136 I would like to forward all packets comming into ...
1
vote
1answer
401 views

Trouble P2Ving OpenBSD 4.0 to VMWare

I've been tasked with migrating a physical OpenBSD 4.0 boxes to our VMWare ESXi farm. I used VMWare's Converter 4.1 CD to perform a cold migration which completed successfully. Prior to the first boot ...
2
votes
2answers
249 views

How to configure something like “Reflexive ACL” on OpenBSD?

My U-Verse modem has something called "Reflexive ACL" described as Reflexive ACL: When IPv6 is enabled, you can enable Reflexive Access Control Lists to deny inbound IPv6 traffic unless this ...
0
votes
1answer
378 views

openbsd carp with multiple external vip's

Is there any way to setup multiple carp vip's without creating a separate hostname.if file for each address? Our colo has provided us with a /25 external network. Three addresses from this range are ...
22
votes
11answers
11k views

Is anyone else using OpenBSD as a router in the enterprise? What hardware are you running it on? [closed]

We have an OpenBSD router at each of our locations, currently running on generic "homebrew" PC hardware in a 4U server case. Due to reliability concerns and space considerations we're looking at ...
3
votes
3answers
1k views

OpenBSD and filesystem snapshots

What is the best solution, if any, for carrying out LVM style filesystem snapshots on OpenBSD?
0
votes
1answer
192 views

Insecure NFS ports on OpenBSD server

I have a OpenBSD 4.9 server running. Now I am trying to set up NFS shares on that server. I can set it up using secure ports. However it isn't possible to mount the shares from OS X without using the ...
2
votes
2answers
717 views

Default values of pf.conf set parameters

I want to learn default values of these parameters, I read the manual of pf.conf but couldn't find, could you help? set limit states set limit src-nodes set timeout tcp.first set timeout ...
5
votes
2answers
373 views

Which BSD best suited to run as VMware guest?

I want to deploy a VM to serve DNS and files (via NFS) to other *nix systems in my infrastructure. Due to reasons beyond my control, I need a very light OS, so I naturally choose the *BSD family. ...
5
votes
2answers
274 views

Portable firewall rules for Linux and Free/Net/Open/DragonFlyBSD

I need apply the same rules (lists of IPs with allow and drop rules) in firewalls of Linux and *BSD. Do you know some application (CLI) for to convert a list of rules in the specific format of each ...
1
vote
2answers
1k views

PF OpenBSD states

We have an OpenBSD server used as firewall using the famous pf. The firewall is connected to the Internet form one side and to a local network form the other. we are experiencing a connection outage ...
2
votes
3answers
619 views

How to switch IP (including subnet) on OpenBSD without outage

I have an OpenBSD firewall where I have to change the IP on the admin interface (including changing subnet/gateway) and I'm looking for how to do this remotely without losing my SSH (so I can fix ...
0
votes
1answer
1k views

OpenVPN on OpenBSD 4.8: How do I set up a VPN for road warriors in bridged mode

I'd like to set up an OpenVPN server on my OpenBSD router. I'd like to run it in bridged mode, so the IPs given to the road warriors are from the local network subnet. I'd like to use the DNS server ...
2
votes
2answers
241 views

Sharing distfiles between FreeBSD, OpenBSD, and Gentoo

Currently I have a few FreeBSD servers with one of them acting as build box sharing its /usr/ports and /usr/ports/distfiles (as separate file systems) through NFS. Recently I've added OpenBSD and ...
4
votes
1answer
1k views

OpenBSD pf port forwarding multiple rules

I have a few dozen servers behind OpenBSD firewall with port forwarding. Most rules are very similar and differ only in IPs or sometimes in ports forwarded, so I want to compact them to remove ...
1
vote
1answer
228 views

Why does the “boot>” prompt in OpenBSD disappear at startup?

I came home today to find my network unresponsive, and I have managed to narrow the culprit down to my OpenBSD 4.3 firewall. I attempted to power cycle it, but now at boot time it hangs, and all I ...
0
votes
1answer
804 views

M0n0wall won't pass traffic on different LAN subnets unless “Bypass firewall rules” is checked

I have a working configuration, but a question is bugging me. The question centers around having multiple subnets on a single interface. LAN: 10.10.10.1/24 OpenVPN Server LAN IP: 10.10.10.250 ...
0
votes
1answer
717 views

OpenBSD logins via SSH seem to be ignoring my configured radius server

I've installed and configured a radius server upon my localhost - it is delegating auth to a remote LDAP server. Initially things look good: I can test via the console: # export user=skemp # export ...
4
votes
1answer
336 views

BSD 50% interrupt utilization in irq0/clock

On OpenBSD on an Atom 450, with HPET configured in the BIOS and not, also with Hyperthreading/ACPI on-off, nothing seems to make a difference. Here's my vmstat -iz # vmstat 2 procs memory ...
2
votes
3answers
1k views

How to make OpenVPN use VIA Padlock on OpenBSD?

I've bought a VIA based router for the only purpose to run OpenVPN on it. Unfortunately it seems that Padlock is not used. Here is the important part from dmesg: OpenBSD 4.8 (GENERIC) #136: Mon Aug ...
1
vote
1answer
179 views

Where OpenBSD stores information about pseudo interfaces

everybody. On my OpenBSD machine i have several pseudo interfaces for vlan that looks like vlan3: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500 lladdr 00:04:e2:c5:02:2b ...
0
votes
1answer
101 views

Restricting program access in OpenBSD

I'm hosting a svn+ssh repo on a OpenBSD box and wondered if it is possible to deny access to any other programs despite svnserve? The reason is that I want to restrict access to parts of the repo with ...
0
votes
5answers
577 views

OpenBSD Routing Problem

I am running OpenBSD on a network appliance hardware. It has 5 NICs. I want to give different IP's in same subnet to 3 nics. Eg: em0: 192.168.1.5 em1: 192.168.1.90 em2: 192.168.1.56 I make the ...