The OpenBSD project produces a free, multi-platform 4.4BSD-based UNIX-like operating system with a focus on security. Our efforts emphasize portability, standardization, correctness, proactive security and integrated cryptography.

learn more… | top users | synonyms

0
votes
1answer
114 views

Restricting program access in OpenBSD

I'm hosting a svn+ssh repo on a OpenBSD box and wondered if it is possible to deny access to any other programs despite svnserve? The reason is that I want to restrict access to parts of the repo with ...
0
votes
1answer
2k views

OpenVPN on OpenBSD 4.8: How do I set up a VPN for road warriors in bridged mode

I'd like to set up an OpenVPN server on my OpenBSD router. I'd like to run it in bridged mode, so the IPs given to the road warriors are from the local network subnet. I'd like to use the DNS server ...
1
vote
2answers
3k views

PF OpenBSD states

We have an OpenBSD server used as firewall using the famous pf. The firewall is connected to the Internet form one side and to a local network form the other. we are experiencing a connection outage ...
0
votes
5answers
655 views

OpenBSD Routing Problem

I am running OpenBSD on a network appliance hardware. It has 5 NICs. I want to give different IP's in same subnet to 3 nics. Eg: em0: 192.168.1.5 em1: 192.168.1.90 em2: 192.168.1.56 I make the ...
2
votes
3answers
2k views

How to make OpenVPN use VIA Padlock on OpenBSD?

I've bought a VIA based router for the only purpose to run OpenVPN on it. Unfortunately it seems that Padlock is not used. Here is the important part from dmesg: OpenBSD 4.8 (GENERIC) #136: Mon Aug ...
3
votes
1answer
1k views

Provide IPv6 to network from OpenBSD firewall

I have an OpenBSD PF firewall that I have added a IPv6 tunnel to (using HE.net tunnelbroker). I can ping/traceroute IPv6 addresses from the firewall. Now I want to provide IPv6 services to the ...
2
votes
2answers
1k views

DHCP Server Check

I have been setting up a DHCP server in OpenBsd and I think I now have it configured correctly. However I have a couple of questions. How can I check that it is working properly before I give it ...
0
votes
1answer
609 views

SuperMicro IPMI through OpenBSD PF Firewall

I'm trying to access a SuperMicro IPMI card that is behind an OpenBSD bridged firewall. A couple pieces of information: The OpenBSD firewall itself has a SuperMicro IPMI that I can access across ...
1
vote
1answer
610 views

OpenBSD in a virtual box as a firewall

Is there any merit in installing a virtual machine with OpenBSD and pf (or any other simple and secure OS + iptable) on a mac laptop and routing all the traffic through that machine? I read a similar ...
3
votes
3answers
2k views

OpenBSD has open ports in default installation

I have been considering replacing Ubuntu with OpenBSD to improve the security on my local server. I need to have ssh access to it, and I also need it to serve static web content - so the only ports I ...
1
vote
1answer
455 views

PHP script unable to email on OpenBSD Apache

I have a webserver running OpenBSD 4.7 and PHP 5.2.12 out of the ports tree. There is a small contact page that is supposed to send an email to a specific address. When I fill in the form using a web ...
13
votes
6answers
4k views

OpenBSD, FreeBSD: your update philosophy?

I've used FreeBSD for about 5 years - server/Desktop - and I've tended to take my apt-get/yum upgrade everything habits along with me ( I admin Debian/RHEL/Cent boxes as well -- I know, I know ......
3
votes
2answers
7k views

Getting IPTables to properly forward NTP traffic

I have the following setup: NTP 10.21.3.169 | | 10.21.3.160 (eth1) Linux 10.0.0.67 (eth0) | | 10.0.0.65 (pcn1) OpenBSD The idea is to allow the NTPD client (not ...
0
votes
1answer
2k views

Using NTPD on OpenBSD to get time from Linux using portforwarding

This is a rehash of another question, now that I understand things a bit better. I have the following network set up: NTP 10.21.3.169 | \______________ | \ 10....
1
vote
1answer
187 views

Setting up NTP on 2 Linux boxes and one OpenBSD box

I have been tasked with getting an NTP client working on two Linux machines and an OpenBSD machine. The machines are arranged like this: NTPServer / \ / \ L1 L2 ...
4
votes
3answers
3k views

How do I count the number of processors on an OpenBSD system?

How can I determine the number of CPUs on an OpenBSD system, using either system tools or C code? The technique I know of to count CPUs on other BSD platforms -- checking /var/run/dmesg.boot for ...
1
vote
1answer
513 views

SFTP Timeout on download

my server keeps timing out when i attempt to download a handfull of files at once. i'm running ubuntu 10.4 LTS sshd_config contains the following tweaks: Subsystem sftp internal-sftp Match group ...
1
vote
1answer
321 views

Continuous Data Protection on Openbsd

I was wondering if there is anything similar to Continuous Data Protection that is available for openbsd?
1
vote
5answers
823 views

OpenBSD firewall - netbook hardware option - pros and cons

I'm considering putting OpenBSD on a netbook for use as a firewall. I am entertaining the idea of using a netbook because it has a built-in screen and keyboard, built-in battery backup, and a ...
2
votes
3answers
403 views

How Much Ram for these 2 Dedicated OpenBSD servers?

First server would be Server A. wordpress, joomla, roundcube and opencart (mysql databases are on Server B) over a 3 year period max would be 2000 unique visits a day. Would be about 500 downloads ...
0
votes
2answers
698 views

Where is Mysql-server port in openbsd?

What's wrong with mysql-server port?? I can't find it anywhere /usr/ports/database/mysql is mysql-client only =( Please, don't say something like "you shouldn't use ports", only in that case if ports ...
2
votes
1answer
1k views

mDNS on bridged OpenVPN network

I have openvpn running on a openbsd server that is behind a firewall, so it is a local member of the LAN. The openvpn is a bridge configuration. firewall internal 10.0.10.1 openvpn server 10.0.10....
1
vote
1answer
421 views

Where does openBSD store the IP address?

I have an openBSD firewall, and I would really like to know in which file the IP adress of the firewall is stored. And also where can I see if it set up to be with static IP or dhcp? Edit by pauska: ...
0
votes
4answers
155 views

What IP address does my openBSD firewall have?

I have bought one of those Soekris boxes and installed openBSD (flashrd) on it, but now I can't remember if I gave it a 10.0.0.0/255.0.0.0 or a 192.168.0.0/255.255.0.0 IP address. Is there a way to ...
0
votes
2answers
1k views

Add route on OpenBSD for DSL modem on external network

I'd like to be able to access my DSL modem, which is acting as a bridge, from within my local network. I've got a setup like this: {Local network 192.168.1/24} | rl0:192.168.1.250 [...
1
vote
1answer
3k views

Help me upgrade my pf.conf for OpenBSD 4.7

I'm planning on upgrading my OpenBSD to 4.7 (from 4.6) and as you may or may not know, they changed the syntax for pf.conf. This is the relevant portion from the upgrade guide: pf(4) NAT syntax ...
0
votes
2answers
1k views

OpenBSD multi-link pppoe

I'm trying to configure OpenBSD to connect to my ISP (teksavvy) using PPP with multi-link enabled, so as to avoid the throttling of the DSLAM last-mile provider (Bell), ala. Tomato/MLPPP. ...
0
votes
1answer
804 views

OpenBSD logins via SSH seem to be ignoring my configured radius server

I've installed and configured a radius server upon my localhost - it is delegating auth to a remote LDAP server. Initially things look good: I can test via the console: # export user=skemp # export ...
0
votes
2answers
2k views

Burn bootable OpenBSD ISO imagine with Mac OS X (10.6)

I'm trying to make a bootable OpenBSD CD image on Mac OS X Snow Leopard (10.6). Unfortunately, the expected route to success, download + burn with Mac OS X, does not result what seems to be a bootable ...
0
votes
2answers
826 views

How can I get my OpenVPN server running OpenBSD 4.3 to authenticate against my Windows domain?

I've googled all over the place but none of the pages I have come across include a step-by-step guide showing how to set this up. I'm not a Linux master (although I'm working hard to increase my ...
2
votes
2answers
712 views

torrent downloads not showing on Squid log

i have just a few months working as sysadmin, hence i still have lots to learn, first thing id like to do is as follows: We have an OpenBSD 4.5 box acting like firewall,dns,cache etc, the box has 2 ...
0
votes
1answer
154 views

Altq limits not being applied to UDP transfers

I have a OpenBSD server acting as a router/firewall with yhr packet filter ruleset shown below, a linux server, and a linux client. When transferring files (using netcat) by TCP, the limits are ...
2
votes
1answer
475 views

Inaccurate bandwidth limiting in altq queues

I'm setting up an environment where I have one Linux server, one OpenBSD router and one Linux client and I want to be able to limit how much bandwidth the client should be able to use. I've been ...
0
votes
2answers
282 views

Writing your own Makefile for OpenBSD ports

I have an OpenBSD box running Python 2.6. I want to install py-setuptools, but that package is built against 2.5. I was curious as to what the Makefile for py-setuptools looks like, to see if it ...
1
vote
3answers
390 views

Is there any advantage setting OpenBSD as Domain Controller instead a Windows 2008?

I have an OpenBSD 4.6 installation with LDAP ports configured correctly. I can create users and other objects. But, I'm a Windows user and I know how easy is create and configure a domain controller. ...
3
votes
2answers
9k views

redundant openvpn configuration

I have two openbsd nat/firewall boxes with carp for failover / high availability purposes. What would be the best possible practice to ensure that OpenVPN, which I plan on running on these boxes, ...
1
vote
1answer
462 views

OpenLDAP on OpenBSD 4.6 — no bdb?

I'm trying to find any possible way to run my backend database for OpenLDAP on OpenBSD 4.6 as bdb. There is indication that ldbm isn't transactional and has data integrity issues. The OpenBSD ...
0
votes
1answer
379 views

OpenLDAP running on OpenBSD + CARP setup

I'm setting up OpenLDAP on a router/firewall that's running OpenBSD + CARP + pfsync. Curious enough, I'm wondering what's my best approach to making sure the setup stays redundant between the two ...
2
votes
1answer
3k views

Why am I getting errors in my HAProxy content switching config?

I'm migrating some infrastructure from multiple servers hosting specific sites to a load-balancing architecture using HAProxy 1.3.15.7 on OpenBSD 4.6 macppc. Naturally, I'm starting with configuring ...
0
votes
4answers
733 views

OS router distribution with very low memory footprint?

I'm looking for an os router distribution with a very low memory footprint. I want to start it in a VM to join multiple VM subnets together in a lab environment. Anything that requires that the host ...
1
vote
1answer
968 views

OpenBSD Wireless Bridge, outbound traffic gets no response

So fun times this weekend trying to build a simple OpenBSD bridge for my XBox360. I want my ural network card to be bridged with my re network card to forward some traffic. Bleh. I essentially cloned ...
1
vote
3answers
273 views

Two identically configured sendmails, one of them is not delivering mail

I have two identically configured OpenBSD machines that use sendmail for mail delivery. I basically made no changes to the sendmail install other than setting up an alias root: systems@example.com on ...
1
vote
2answers
263 views

How can I resume installation of a package from ports?

I have a virtual machine in VMWare Workstation 7.0 with OpenBSD 4.4 and I was installing some ports. Most of them were installed correctly but not two. I had to cancel them because the system didn't ...
3
votes
1answer
517 views

Why can not add subversion package to my OpenBSD 4.5 machine?

I have an OpenBSD 4.5 on a virtual machine. I configured the net and my machine can connect to the OpenBSD FTP repository in Canada (ftp.openbsd.org) correctly. But when I execute this line: *...
7
votes
3answers
2k views

Modern open source NIDS/HIDS and consoles? [closed]

Years back we set up an IDS solution by placing a tap in front of our exterior firewall, piping all the traffic on our DS1 through an IDS box and then sending the results off to a logging server ...
4
votes
2answers
831 views

home, end, delete, pageup, pagedown with ksh

I want to use home, end, delete, pageup, pagedown with ksh. My TERM is xterm-color. These keys works fine with tcsh and zsh, but not with ksh (print a tilda ~) I found this: bind '^[[3'=prefix-2 ...
7
votes
7answers
9k views

Linux equivalent of pfsync+carp for failover firewall/routing

I'm currently using a linux box to handle my firewall/NAT using iptables. It has two NICs, one link to a LAN switch, one to our egress Internet provider. I'm looking at upgrade this box to two boxes ...
4
votes
4answers
3k views

How do I spamtrap with Postfix?

How do I setup spamtraps with Postfix so clients that send to trapped addresses are prevented from sending me more spam?
2
votes
2answers
2k views

Qemu: issues with bridged networking (Linux host, OpenBSD guest)

I have a computer running Linux. It has qemu installed. It has a bridge interface br0 configured with the following settings: IP: 10.1.1.1 Netmask: 255.255.255.0 There is also a tap0 interface that ...
2
votes
1answer
710 views

VPN with NAT-T between OpenBSD and Microsoft ISA

A customer of ours is setting up an ISA-Cluster in private network address range and we have to build a VPN connection with them. There is no way avoiding NAT-T and this is where we get to a problem: ...