The OpenBSD project produces a free, multi-platform 4.4BSD-based UNIX-like operating system with a focus on security. Our efforts emphasize portability, standardization, correctness, proactive security and integrated cryptography.

learn more… | top users | synonyms

2
votes
1answer
475 views

Inaccurate bandwidth limiting in altq queues

I'm setting up an environment where I have one Linux server, one OpenBSD router and one Linux client and I want to be able to limit how much bandwidth the client should be able to use. I've been ...
2
votes
1answer
3k views

Why am I getting errors in my HAProxy content switching config?

I'm migrating some infrastructure from multiple servers hosting specific sites to a load-balancing architecture using HAProxy 1.3.15.7 on OpenBSD 4.6 macppc. Naturally, I'm starting with configuring ...
2
votes
2answers
2k views

Setting up a VDSL router on OpenBSD & NIC with TCO support

this is my first question and I hope I do everything correct. Thanks for setting up serverfault - such a site was missing in the internet for a long time now. In the next few weeks I will get my VDSL ...
2
votes
1answer
540 views

DNSSEC and IPSec DNS Server and DNS Client Configuration

I'm about to deploy DNSSEC for some of my domains and as I was getting ready I did some reading on the subject. I came across some Microsoft Technet articles talking about Name Resolution Policy Table ...
2
votes
1answer
479 views

Outline squid server - redirect traffic with pf

What's my goal: know what employee are looking in Internet (what pages, how long etc; no caching). What I did: install squid on openBSD Problem: I see whole traffic (tcpdump), but I can't redirect ...
2
votes
1answer
1k views

OpenBSD pf - implementing the equivalent of an iptables DNAT

Short version Server A (OpenBSD 4.7) connects to server B (Windows). IP of server B changes. Server A should be able to connect to server B to both the old and new IP. We cannot configure multiple ...
2
votes
2answers
381 views

How to configure something like “Reflexive ACL” on OpenBSD?

My U-Verse modem has something called "Reflexive ACL" described as Reflexive ACL: When IPv6 is enabled, you can enable Reflexive Access Control Lists to deny inbound IPv6 traffic unless this ...
2
votes
3answers
2k views

How to make OpenVPN use VIA Padlock on OpenBSD?

I've bought a VIA based router for the only purpose to run OpenVPN on it. Unfortunately it seems that Padlock is not used. Here is the important part from dmesg: OpenBSD 4.8 (GENERIC) #136: Mon Aug ...
2
votes
1answer
710 views

VPN with NAT-T between OpenBSD and Microsoft ISA

A customer of ours is setting up an ISA-Cluster in private network address range and we have to build a VPN connection with them. There is no way avoiding NAT-T and this is where we get to a problem: ...
2
votes
0answers
242 views

tuning tips for CPU load for OpenBSD guest on qemu-kvm Server

I have a CentOS KVM Server running 1 OpenBSD, 1 CentOS and 2 FreeBSD guests. Only the openBSD guest has a higher CPU load on the KVM Server. 8-10% on Server whilst Guest is at idle. The only service ...
2
votes
1answer
93 views

OpenBSD routing: Cannot reach gateway from IF configured to static block

When trying to set up an OpenBSD router I've run into an apparent routing problem. I have a 1U machine with 6 gigabit NICs (em0-em5). My ISP provided me with the following: xx.xx.97.246/28 static ...
2
votes
1answer
319 views

Setting up IPSEC on LAN between two hosts (OpenBSD)

Trying to use IPSEC between two hosts on a LAN. No VPN involved Using OpenBSD 5.8 (in VirtualBox). I'd prefer to use OpenBSD's built-in support for IPSEC and not a third-party. Two hosts: 10.0.2.10 ...
2
votes
1answer
526 views

Openbsd init script for ssh VPN tunnel

I have a server hosting SSH tunnels and Openbsd 4.5 clients connecting to it. Things work just fine but I am in the need of automating the connection from the client to the server. So that if the ...
2
votes
1answer
248 views

Is there an equivalent of LinuxIMQs in BSD?

Is there an equivalent of LinuxIMQs in BSD ? From linuximq.net: The imq device has two common usage cases: Ingress shaping: With linux only egress shaping is possible (except for the ingress ...
2
votes
6answers
2k views

OpenBSD configuration: Client unable to mount via NFS using Berkeley Automounter (amd)

What I am trying to do is to have my openBSD client (OpenBSD 4.9) auto mount a Linux NFS file system (Scientific Linux 6.1). So far, I am not sure if it is configured correctly. To get things out of ...
1
vote
4answers
314 views

OpenBSD installation on 2 slices

What if I really need OpenBSD to be installed on 2 slices (on virtual machine and not for production purposes): / swap instead of 6: / swap /tmp /var /usr /home I suppose that I must create ...
1
vote
5answers
823 views

OpenBSD firewall - netbook hardware option - pros and cons

I'm considering putting OpenBSD on a netbook for use as a firewall. I am entertaining the idea of using a netbook because it has a built-in screen and keyboard, built-in battery backup, and a ...
1
vote
6answers
2k views

How can I install OpenBSD to a SSD without a Optical Drive?

I'm searching for an OpenBSD bootable image that I can install on SSD to run pf on. I've found these images for m0n0wall and pfSense but not for OpenBSD alone. Can somebody link me to an image with ...
1
vote
2answers
3k views

PF OpenBSD states

We have an OpenBSD server used as firewall using the famous pf. The firewall is connected to the Internet form one side and to a local network form the other. we are experiencing a connection outage ...
1
vote
1answer
420 views

Where does openBSD store the IP address?

I have an openBSD firewall, and I would really like to know in which file the IP adress of the firewall is stored. And also where can I see if it set up to be with static IP or dhcp? Edit by pauska: ...
1
vote
2answers
810 views

How to block MAC address in pf firewall

I want to block particular MAC address on PF firewall. I know PF firewall works on the Layer 3 i.e it operates on the IP addresses rather than MAC address.But is there any way to block the MAC address ...
1
vote
2answers
3k views

Having trouble increasing WordPress memory limit on nginx server

I am trying to increase the memory limit on my nginx php-fpm server for wordpress. Specifically the Wordpress plugin WooCommerce needs more available memory. I've set the following in wp-config.php......
1
vote
1answer
301 views

Why does the “boot>” prompt in OpenBSD disappear at startup?

I came home today to find my network unresponsive, and I have managed to narrow the culprit down to my OpenBSD 4.3 firewall. I attempted to power cycle it, but now at boot time it hangs, and all I ...
1
vote
1answer
321 views

Continuous Data Protection on Openbsd

I was wondering if there is anything similar to Continuous Data Protection that is available for openbsd?
1
vote
3answers
390 views

Is there any advantage setting OpenBSD as Domain Controller instead a Windows 2008?

I have an OpenBSD 4.6 installation with LDAP ports configured correctly. I can create users and other objects. But, I'm a Windows user and I know how easy is create and configure a domain controller. ...
1
vote
2answers
263 views

How can I resume installation of a package from ports?

I have a virtual machine in VMWare Workstation 7.0 with OpenBSD 4.4 and I was installing some ports. Most of them were installed correctly but not two. I had to cancel them because the system didn't ...
1
vote
1answer
73 views

https not working on OpenBSD 5.8 & 5.9 guests running in VMWare Fusion 8 Pro

The set up is as per title: freshly installed OpenBSD (I've tested both 5.8 and 5.9) are having networking issues when run inside VMWare Fusion 8 Pro (OS X host). Downloading http files of any size ...
1
vote
1answer
91 views

What's the proper way to get smtpd (OpenSMTPD) to pick up changes to smtpd.conf?

I'm new to OpenBSD and in the process of learning OpenSMTPD. I would have expected some sort of "restart" option from the smtpctl command, but it only has a stop with no start which might force a ...
1
vote
2answers
673 views

IPSec VPN set up (Windows)

I am working on a project which needs to call a web service that can only be accessed whilst being connected via a VPN. The legacy platform that we're migrating from ran on OpenBSD and used the built-...
1
vote
2answers
818 views

OpenBSD Nginx/PHP/MariaDB/PHP-FPM Stack

I have a minimal OpenBSD 5.7 amd64 install in VMware where I have installed matching versions of PHP and PHP-FPM, plus nginx, and mariadb using pkg_add. I configure all the services, and get nginx to ...
1
vote
2answers
662 views

OpenBSD: Gateway outside subnet (works in Linux)

We need to set up an OpenBSD host to use a default gateway that's outside of it's subnet. This is all I need to do on Linux (not the actual IPs) to achieve it: ifconfig eth0 33.33.33.33/31 up route ...
1
vote
1answer
462 views

OpenLDAP on OpenBSD 4.6 — no bdb?

I'm trying to find any possible way to run my backend database for OpenLDAP on OpenBSD 4.6 as bdb. There is indication that ldbm isn't transactional and has data integrity issues. The OpenBSD ...
1
vote
1answer
25 views

OpenVPN Client Config Dir - where common name includes non-utf8 characters?

How do one go about handling individual client configurations in OpenVPN where the common name of the certificate includes non-UTF8 characters (Such as Swedish names)? I had a look at the OpenVPN ...
1
vote
1answer
246 views

Different permissions for different groups on one folder in OpenBSD?

Is it possible to have filesystem permission ACL's (or similar) in OpenBSD? I'm trying to make a folder where one group has read-write access while a different group has read-only access. I don't want ...
1
vote
1answer
1k views

How to reduce the timeout for TIME_WAIT connections on OpenBSD?

I'm running http_load on OpenBSD 5.2, to test how good my nginx setup is, and I've noticed that cold runs are much faster than warm runs, and with every run the performance goes down very dramatically ...
1
vote
2answers
3k views

OpenBSD pf 'match in all scrub (no-df)' causes HTTPS to be unreachable on mobile network

First of all: excuse me for my poor usage of the English language. For several years I'm experiencing problems with the 'match in all scrub (no-df)' rule in pf. I can't find out what's happening here....
1
vote
1answer
210 views

Where OpenBSD stores information about pseudo interfaces

everybody. On my OpenBSD machine i have several pseudo interfaces for vlan that looks like vlan3: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500 lladdr 00:04:e2:c5:02:2b ...
1
vote
1answer
610 views

OpenBSD in a virtual box as a firewall

Is there any merit in installing a virtual machine with OpenBSD and pf (or any other simple and secure OS + iptable) on a mac laptop and routing all the traffic through that machine? I read a similar ...
1
vote
1answer
455 views

PHP script unable to email on OpenBSD Apache

I have a webserver running OpenBSD 4.7 and PHP 5.2.12 out of the ports tree. There is a small contact page that is supposed to send an email to a specific address. When I fill in the form using a web ...
1
vote
1answer
187 views

Setting up NTP on 2 Linux boxes and one OpenBSD box

I have been tasked with getting an NTP client working on two Linux machines and an OpenBSD machine. The machines are arranged like this: NTPServer / \ / \ L1 L2 ...
1
vote
1answer
513 views

SFTP Timeout on download

my server keeps timing out when i attempt to download a handfull of files at once. i'm running ubuntu 10.4 LTS sshd_config contains the following tweaks: Subsystem sftp internal-sftp Match group ...
1
vote
1answer
968 views

OpenBSD Wireless Bridge, outbound traffic gets no response

So fun times this weekend trying to build a simple OpenBSD bridge for my XBox360. I want my ural network card to be bridged with my re network card to forward some traffic. Bleh. I essentially cloned ...
1
vote
3answers
273 views

Two identically configured sendmails, one of them is not delivering mail

I have two identically configured OpenBSD machines that use sendmail for mail delivery. I basically made no changes to the sendmail install other than setting up an alias root: systems@example.com on ...
1
vote
0answers
23 views

Bidirectional drag'n drop is not working with VirtualBox and OpenBSD 5.9 [closed]

I have host os Ubunut and gues os OpenBSD 5.9. Nothing bidirectional is working. can I do anything to resolve the problem?
1
vote
2answers
104 views

IPv6 IPsec between two native IPv6 networks

Assume I have two networks, A and B, on sites either side of the globe. Both have native IPv6 and are using (hypothetically) just IPv6. IPv4 no longer exists. They can both access the internet ...
1
vote
0answers
403 views

Openbsd 5.7: IPv6 advertisement not working

--context-- I have a Sokeris with 8 interfaces: em0 is connected to a bridge router (ISP) and em2 is connected to my DMZ network (web servers). I got from my ISP a /56 prefix and 2 DNS IPs but no ...
1
vote
1answer
957 views

openbsd pf squid transparent proxy using a bridge

I want to use OpenBSD 5.7 as a filtering bridge in front of my router, and as part of that run a transparent proxy (squid 3.5.1) to manage web access. I have set up the openbsd machine as a bridge, ...
1
vote
1answer
121 views

Authenticating OpenBSD 5.6 to Windows server 2008R2 active directory?

How do I make openBSD to authenticate to Windows server 2008R2? I currently have installed Identity Management for Unix (IDMU). Also I have installed login_ldap in openbsd. but I dont know what to ...
1
vote
1answer
483 views

Active CARP network loop

I have to setup, no matter what, a cluster of 3 active OpenBSD 5.5 with CARP on 3 separate ESXi 5.5 hosts. I think I'm close to the end but I have this message in /var/log/messages : carp0: replay ...
1
vote
1answer
157 views

Server name no longer available OpenBSD

I've been scratching my head with this for a while and don't seem to be getting any closer to a solution at the system level. I have asked the same question at SuperUser but so far the answers didn't ...