The OpenBSD project produces a free, multi-platform 4.4BSD-based UNIX-like operating system with a focus on security. Our efforts emphasize portability, standardization, correctness, proactive security and integrated cryptography.

learn more… | top users | synonyms

2
votes
2answers
213 views

How to configure something like “Reflexive ACL” on OpenBSD?

My U-Verse modem has something called "Reflexive ACL" described as Reflexive ACL: When IPv6 is enabled, you can enable Reflexive Access Control Lists to deny inbound IPv6 traffic unless this ...
0
votes
1answer
314 views

openbsd carp with multiple external vip's

Is there any way to setup multiple carp vip's without creating a separate hostname.if file for each address? Our colo has provided us with a /25 external network. Three addresses from this range are ...
0
votes
1answer
3k views

OpenBSD 5.0 pf with NAT & Port Forwarding

Port forwarding does not seem to work properly, incoming connections apparently are blocked. Is there something wrong with my pf.conf? # Performance limits set limit states 200000 set limit ...
2
votes
0answers
178 views

Is there an equivalent of LinuxIMQs in BSD?

Is there an equivalent of LinuxIMQs in BSD ? From linuximq.net: The imq device has two common usage cases: Ingress shaping: With linux only egress shaping is possible (except for the ingress ...
4
votes
1answer
597 views

Request multiple IP-addresses via DHCP on a single physical interface (OpenBSD)

On OpenBSD, is it possible to request multiple IP-addresses via DHCP on a single physical interface? It looks like DHCP leased addresses can't be assigned as aliases. I though of creating a virtual ...
2
votes
2answers
528 views

Default values of pf.conf set parameters

I want to learn default values of these parameters, I read the manual of pf.conf but couldn't find, could you help? set limit states set limit src-nodes set timeout tcp.first set timeout ...
2
votes
6answers
2k views

OpenBSD configuration: Client unable to mount via NFS using Berkeley Automounter (amd)

What I am trying to do is to have my openBSD client (OpenBSD 4.9) auto mount a Linux NFS file system (Scientific Linux 6.1). So far, I am not sure if it is configured correctly. To get things out of ...
5
votes
2answers
339 views

Which BSD best suited to run as VMware guest?

I want to deploy a VM to serve DNS and files (via NFS) to other *nix systems in my infrastructure. Due to reasons beyond my control, I need a very light OS, so I naturally choose the *BSD family. ...
0
votes
1answer
173 views

Insecure NFS ports on OpenBSD server

I have a OpenBSD 4.9 server running. Now I am trying to set up NFS shares on that server. I can set it up using secure ports. However it isn't possible to mount the shares from OS X without using the ...
2
votes
3answers
553 views

How to switch IP (including subnet) on OpenBSD without outage

I have an OpenBSD firewall where I have to change the IP on the admin interface (including changing subnet/gateway) and I'm looking for how to do this remotely without losing my SSH (so I can fix ...
5
votes
2answers
250 views

Portable firewall rules for Linux and Free/Net/Open/DragonFlyBSD

I need apply the same rules (lists of IPs with allow and drop rules) in firewalls of Linux and *BSD. Do you know some application (CLI) for to convert a list of rules in the specific format of each ...
2
votes
4answers
269 views

HTTPS only on OpenBSD 4.9? [duplicate]

I've tried this example from OpenBSD http://www.openbsd.org/faq/faq10.html#HTTPS it works fine, but with Mozilla Firefox 6.0 it's possible to use both http and https, while I want to force users to ...
2
votes
2answers
226 views

Sharing distfiles between FreeBSD, OpenBSD, and Gentoo

Currently I have a few FreeBSD servers with one of them acting as build box sharing its /usr/ports and /usr/ports/distfiles (as separate file systems) through NFS. Recently I've added OpenBSD and ...
0
votes
3answers
157 views

Force OpenBSD to use internally one IP, but send and receive from network from other IP?

Is it possible to set up OpenBSD such, that it will have IP1 internally (in hosts, in hostname.en0, sockets binds to IP1), but convert it to IP2 when packet goes to ethernet. Also, packets for the IP2 ...
1
vote
1answer
198 views

Why does the “boot>” prompt in OpenBSD disappear at startup?

I came home today to find my network unresponsive, and I have managed to narrow the culprit down to my OpenBSD 4.3 firewall. I attempted to power cycle it, but now at boot time it hangs, and all I ...
4
votes
1answer
1k views

OpenBSD pf port forwarding multiple rules

I have a few dozen servers behind OpenBSD firewall with port forwarding. Most rules are very similar and differ only in IPs or sometimes in ports forwarded, so I want to compact them to remove ...
0
votes
1answer
680 views

M0n0wall won't pass traffic on different LAN subnets unless “Bypass firewall rules” is checked

I have a working configuration, but a question is bugging me. The question centers around having multiple subnets on a single interface. LAN: 10.10.10.1/24 OpenVPN Server LAN IP: 10.10.10.250 ...
8
votes
3answers
1k views

OpenBSD/FreeBSD Firewall w/ GUI that is compatible with Intel 82574L Gigabit LAN NICs

I recently purchased a server to run m0n0wall or pfSense but I've learned since then that both of these firewall products are based on versions of FreeBSD which weren't yet compatible with the NICs in ...
1
vote
6answers
1k views

How can I install OpenBSD to a SSD without a Optical Drive?

I'm searching for an OpenBSD bootable image that I can install on SSD to run pf on. I've found these images for m0n0wall and pfSense but not for OpenBSD alone. Can somebody link me to an image with ...
4
votes
1answer
281 views

BSD 50% interrupt utilization in irq0/clock

On OpenBSD on an Atom 450, with HPET configured in the BIOS and not, also with Hyperthreading/ACPI on-off, nothing seems to make a difference. Here's my vmstat -iz # vmstat 2 procs memory ...
1
vote
1answer
160 views

Where OpenBSD stores information about pseudo interfaces

everybody. On my OpenBSD machine i have several pseudo interfaces for vlan that looks like vlan3: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500 lladdr 00:04:e2:c5:02:2b ...
0
votes
1answer
99 views

Restricting program access in OpenBSD

I'm hosting a svn+ssh repo on a OpenBSD box and wondered if it is possible to deny access to any other programs despite svnserve? The reason is that I want to restrict access to parts of the repo with ...
0
votes
1answer
1k views

OpenVPN on OpenBSD 4.8: How do I set up a VPN for road warriors in bridged mode

I'd like to set up an OpenVPN server on my OpenBSD router. I'd like to run it in bridged mode, so the IPs given to the road warriors are from the local network subnet. I'd like to use the DNS server ...
1
vote
2answers
1k views

PF OpenBSD states

We have an OpenBSD server used as firewall using the famous pf. The firewall is connected to the Internet form one side and to a local network form the other. we are experiencing a connection outage ...
0
votes
5answers
520 views

OpenBSD Routing Problem

I am running OpenBSD on a network appliance hardware. It has 5 NICs. I want to give different IP's in same subnet to 3 nics. Eg: em0: 192.168.1.5 em1: 192.168.1.90 em2: 192.168.1.56 I make the ...
2
votes
3answers
1k views

How to make OpenVPN use VIA Padlock on OpenBSD?

I've bought a VIA based router for the only purpose to run OpenVPN on it. Unfortunately it seems that Padlock is not used. Here is the important part from dmesg: OpenBSD 4.8 (GENERIC) #136: Mon Aug ...
3
votes
1answer
892 views

Provide IPv6 to network from OpenBSD firewall

I have an OpenBSD PF firewall that I have added a IPv6 tunnel to (using HE.net tunnelbroker). I can ping/traceroute IPv6 addresses from the firewall. Now I want to provide IPv6 services to the ...
1
vote
2answers
872 views

DHCP Server Check

I have been setting up a DHCP server in OpenBsd and I think I now have it configured correctly. However I have a couple of questions. How can I check that it is working properly before I give it ...
0
votes
1answer
507 views

SuperMicro IPMI through OpenBSD PF Firewall

I'm trying to access a SuperMicro IPMI card that is behind an OpenBSD bridged firewall. A couple pieces of information: The OpenBSD firewall itself has a SuperMicro IPMI that I can access across ...
1
vote
1answer
504 views

OpenBSD in a virtual box as a firewall

Is there any merit in installing a virtual machine with OpenBSD and pf (or any other simple and secure OS + iptable) on a mac laptop and routing all the traffic through that machine? I read a similar ...
3
votes
3answers
1k views

OpenBSD has open ports in default installation

I have been considering replacing Ubuntu with OpenBSD to improve the security on my local server. I need to have ssh access to it, and I also need it to serve static web content - so the only ports I ...
1
vote
1answer
339 views

PHP script unable to email on OpenBSD Apache

I have a webserver running OpenBSD 4.7 and PHP 5.2.12 out of the ports tree. There is a small contact page that is supposed to send an email to a specific address. When I fill in the form using a web ...
10
votes
6answers
2k views

OpenBSD, FreeBSD: your update philosophy?

I've used FreeBSD for about 5 years - server/Desktop - and I've tended to take my apt-get/yum upgrade everything habits along with me ( I admin Debian/RHEL/Cent boxes as well -- I know, I know ...
1
vote
2answers
4k views

Getting IPTables to properly forward NTP traffic

I have the following setup: NTP 10.21.3.169 | | 10.21.3.160 (eth1) Linux 10.0.0.67 (eth0) | | 10.0.0.65 (pcn1) OpenBSD The idea is to allow the NTPD client (not ...
0
votes
1answer
1k views

Using NTPD on OpenBSD to get time from Linux using portforwarding

This is a rehash of another question, now that I understand things a bit better. I have the following network set up: NTP 10.21.3.169 | \______________ | \ ...
1
vote
1answer
167 views

Setting up NTP on 2 Linux boxes and one OpenBSD box

I have been tasked with getting an NTP client working on two Linux machines and an OpenBSD machine. The machines are arranged like this: NTPServer / \ / \ L1 L2 ...
3
votes
3answers
2k views

How do I count the number of processors on an OpenBSD system?

How can I determine the number of CPUs on an OpenBSD system, using either system tools or C code? The technique I know of to count CPUs on other BSD platforms -- checking /var/run/dmesg.boot for ...
1
vote
1answer
369 views

SFTP Timeout on download

my server keeps timing out when i attempt to download a handfull of files at once. i'm running ubuntu 10.4 LTS sshd_config contains the following tweaks: Subsystem sftp internal-sftp Match group ...
1
vote
1answer
241 views

Continuous Data Protection on Openbsd

I was wondering if there is anything similar to Continuous Data Protection that is available for openbsd?
1
vote
5answers
636 views

OpenBSD firewall - netbook hardware option - pros and cons

I'm considering putting OpenBSD on a netbook for use as a firewall. I am entertaining the idea of using a netbook because it has a built-in screen and keyboard, built-in battery backup, and a ...
2
votes
3answers
355 views

How Much Ram for these 2 Dedicated OpenBSD servers?

First server would be Server A. wordpress, joomla, roundcube and opencart (mysql databases are on Server B) over a 3 year period max would be 2000 unique visits a day. Would be about 500 downloads ...
0
votes
2answers
349 views

Where is Mysql-server port in openbsd?

What's wrong with mysql-server port?? I can't find it anywhere /usr/ports/database/mysql is mysql-client only =( Please, don't say something like "you shouldn't use ports", only in that case if ports ...
1
vote
1answer
746 views

mDNS on bridged OpenVPN network

I have openvpn running on a openbsd server that is behind a firewall, so it is a local member of the LAN. The openvpn is a bridge configuration. firewall internal 10.0.10.1 openvpn server ...
1
vote
1answer
319 views

Where does openBSD store the IP address?

I have an openBSD firewall, and I would really like to know in which file the IP adress of the firewall is stored. And also where can I see if it set up to be with static IP or dhcp? Edit by pauska: ...
0
votes
4answers
151 views

What IP address does my openBSD firewall have?

I have bought one of those Soekris boxes and installed openBSD (flashrd) on it, but now I can't remember if I gave it a 10.0.0.0/255.0.0.0 or a 192.168.0.0/255.255.0.0 IP address. Is there a way to ...
0
votes
2answers
878 views

Add route on OpenBSD for DSL modem on external network

I'd like to be able to access my DSL modem, which is acting as a bridge, from within my local network. I've got a setup like this: {Local network 192.168.1/24} | rl0:192.168.1.250 ...
1
vote
1answer
3k views

Help me upgrade my pf.conf for OpenBSD 4.7

I'm planning on upgrading my OpenBSD to 4.7 (from 4.6) and as you may or may not know, they changed the syntax for pf.conf. This is the relevant portion from the upgrade guide: pf(4) NAT syntax ...
0
votes
2answers
947 views

OpenBSD multi-link pppoe

I'm trying to configure OpenBSD to connect to my ISP (teksavvy) using PPP with multi-link enabled, so as to avoid the throttling of the DSLAM last-mile provider (Bell), ala. Tomato/MLPPP. ...
0
votes
1answer
662 views

OpenBSD logins via SSH seem to be ignoring my configured radius server

I've installed and configured a radius server upon my localhost - it is delegating auth to a remote LDAP server. Initially things look good: I can test via the console: # export user=skemp # export ...
0
votes
2answers
1k views

Burn bootable OpenBSD ISO imagine with Mac OS X (10.6)

I'm trying to make a bootable OpenBSD CD image on Mac OS X Snow Leopard (10.6). Unfortunately, the expected route to success, download + burn with Mac OS X, does not result what seems to be a bootable ...