Questions tagged [openbsd]
OpenBSD is a free, multi-platform 4.4BSD-based UNIX-like operating system with a focus on security, portability, standardization, code correctness, proactive security and integrated cryptography.
225
questions
1
vote
1
answer
2k
views
How Can I Create a Private OpenBSD Mirror?
How can I create a private OpenBSD mirror. I'd like my mirror to have all the packages of the latest release for my preferred architectures (amd64 and i386) and everything else contained in a typical ...
1
vote
2
answers
7k
views
Having trouble increasing WordPress memory limit on nginx server
I am trying to increase the memory limit on my nginx php-fpm server for wordpress. Specifically the Wordpress plugin WooCommerce needs more available memory.
I've set the following in wp-config.php......
1
vote
3
answers
819
views
Is there any advantage setting OpenBSD as Domain Controller instead a Windows 2008?
I have an OpenBSD 4.6 installation with LDAP ports configured correctly. I can create users and other objects. But, I'm a Windows user and I know how easy is create and configure a domain controller.
...
1
vote
1
answer
674
views
Setting up LDAPD service on OpenBSD
I have an OpenBSD 7.1 server with the LDAPD service running. At the moment it is working as expected, however I am new to managing an LDAP organization, and am unsure about some of the configuration ...
1
vote
1
answer
170
views
Does OpenBSD have anything equivalent to Debian's /etc/network/if-up.d/ scripts?
I want to run a script after an OpenBSD interface has been configured (dynamic IP address assigned, routes configured, etc.) I can't find anything in the hostname.if man page about this; does such a ...
1
vote
2
answers
2k
views
IPSec VPN set up (Windows)
I am working on a project which needs to call a web service that can only be accessed whilst being connected via a VPN. The legacy platform that we're migrating from ran on OpenBSD and used the built-...
1
vote
2
answers
2k
views
OpenBSD Nginx/PHP/MariaDB/PHP-FPM Stack
I have a minimal OpenBSD 5.7 amd64 install in VMware where I have installed matching versions of PHP and PHP-FPM, plus nginx, and mariadb using pkg_add. I configure all the services, and get nginx to ...
1
vote
4
answers
437
views
HTTPS only on OpenBSD 4.9? [duplicate]
I've tried this example from OpenBSD http://www.openbsd.org/faq/faq10.html#HTTPS
it works fine, but with Mozilla Firefox 6.0 it's possible to use both http and https, while I want to force users to ...
1
vote
1
answer
942
views
Why does the "boot>" prompt in OpenBSD disappear at startup?
I came home today to find my network unresponsive, and I have managed to narrow the culprit down to my OpenBSD 4.3 firewall. I attempted to power cycle it, but now at boot time it hangs, and all I ...
1
vote
1
answer
683
views
Continuous Data Protection on Openbsd
I was wondering if there is anything similar to Continuous Data Protection that is available for openbsd?
1
vote
2
answers
583
views
How can I resume installation of a package from ports?
I have a virtual machine in VMWare Workstation 7.0 with OpenBSD 4.4 and I was installing some ports. Most of them were installed correctly but not two. I had to cancel them because the system didn't ...
1
vote
1
answer
216
views
OpenBSD 7.2: Mailbox file in users' home directory - use Postfix or stick to default sendmail?
I need to setup a mail server with a bit unusual requirements:
OpenBSD is a must. Probably latest version, 7.2.
All mails have to be stored in aa Mailbox file located in user's home directory.
Well, ...
1
vote
1
answer
1k
views
Unable to create inetOrgPerson in LDAP structure
I have an LDAP server running on OpenBSD 7.1 using the native ldapd implementation. I've created a basic DIT, and when attempting to add a user, I get:
# ldapadd -vv -H ldaps://hypnos.spookyinternet....
1
vote
1
answer
643
views
Openiked - Unable to ping the remote gateway
I set up a tunnel ipsec with strongswan and openiked with x509 PKI. The tunnel establish correctly but I have some problems.
The gateway with iked can not ping the local IP of router vyatta but ...
1
vote
1
answer
1k
views
Different permissions for different groups on one folder in OpenBSD?
Is it possible to have filesystem permission ACL's (or similar) in OpenBSD? I'm trying to make a folder where one group has read-write access while a different group has read-only access. I don't want ...
1
vote
1
answer
382
views
Where OpenBSD stores information about pseudo interfaces
On my OpenBSD machine i have several pseudo interfaces for vlan that looks like
vlan3: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:04:e2:c5:02:2b
vlan: ...
1
vote
1
answer
520
views
OpenLDAP on OpenBSD 4.6 -- no bdb?
I'm trying to find any possible way to run my backend database for OpenLDAP on OpenBSD 4.6 as bdb. There is indication that ldbm isn't transactional and has data integrity issues. The OpenBSD ...
1
vote
1
answer
346
views
Port forward DNS using pf
On OpenBSD, I can successfully & transparently forward ports 80 and 443 to services running on custom, unprivileged ports using the following /etc/pf.conf:
tcp_pass = "{ 22 80 123 443 }"
...
1
vote
1
answer
283
views
VirtualBox guest OS doesn't expand after resizing VDI file [closed]
My host OS is OS X El Capitan. My guest OS, OpenBSD 6.1, ran out of disk space, so I ran VBoxManage modifymedium disk OpenBSD\ 6.1.vdi --resize 15000 to resize my VDI from 4GB to 15GB. However my ...
1
vote
1
answer
819
views
How to configure Heimdal Kerberos to use OpenLDAP?
From http://www.h5l.org/manual/HEAD/info/heimdal/Using-LDAP-to-store-the-database.html#Using-LDAP-to-store-the-database
A current release of Heimdal, configured with --with-openldap=/usr/local
The ...
1
vote
1
answer
1k
views
PF based gateway firewall for Openbsd 6.0
Currenly I am looking to create an OpenBSD 6.0 pf based gateway. Based on what I read in the pf manual pages and OpenBSD pf FAQ, and some examples on the internet, I was able to configure a firewall. ...
1
vote
1
answer
522
views
OpenVPN Client Config Dir - where common name includes non-utf8 characters?
How do one go about handling individual client configurations in OpenVPN where the common name of the certificate includes non-UTF8 characters (Such as Swedish names)?
I had a look at the OpenVPN ...
1
vote
1
answer
4k
views
php-fpm does not work me exec or shell_exec
I have OpenBSD 5.6 and php-fpm, nginx.
Is chrooted by default on /var/www
I try:(test.php)
<?php
if(function_exists('exec')) {
echo "exec is enabled";
}else{
// it's not
echo "exec is ...
1
vote
1
answer
1k
views
Outline squid server - redirect traffic with pf
What's my goal: know what employee are looking in Internet (what pages, how long etc; no caching).
What I did: install squid on openBSD
Problem: I see whole traffic (tcpdump), but I can't redirect ...
1
vote
1
answer
7k
views
How to reduce the timeout for TIME_WAIT connections on OpenBSD?
I'm running http_load on OpenBSD 5.2, to test how good my nginx setup is, and I've noticed that cold runs are much faster than warm runs, and with every run the performance goes down very dramatically ...
1
vote
2
answers
5k
views
OpenBSD pf 'match in all scrub (no-df)' causes HTTPS to be unreachable on mobile network
First of all: excuse me for my poor usage of the English language.
For several years I'm experiencing problems with the 'match in all scrub (no-df)' rule in pf. I can't find out what's happening here....
1
vote
1
answer
872
views
SuperMicro IPMI through OpenBSD PF Firewall
I'm trying to access a SuperMicro IPMI card that is behind an OpenBSD bridged firewall.
A couple pieces of information:
The OpenBSD firewall itself has a SuperMicro IPMI that I can access across the ...
1
vote
1
answer
1k
views
OpenBSD in a virtual box as a firewall
Is there any merit in installing a virtual machine with OpenBSD and pf (or any other simple and secure OS + iptable) on a mac laptop and routing all the traffic through that machine? I read a similar ...
1
vote
1
answer
623
views
PHP script unable to email on OpenBSD Apache
I have a webserver running OpenBSD 4.7 and PHP 5.2.12 out of the ports tree. There is a small contact page that is supposed to send an email to a specific address. When I fill in the form using a web ...
1
vote
1
answer
275
views
Setting up NTP on 2 Linux boxes and one OpenBSD box
I have been tasked with getting an NTP client working on two Linux machines and an OpenBSD machine.
The machines are arranged like this:
NTPServer
/ \
/ \
L1 L2
...
1
vote
1
answer
2k
views
OpenBSD Wireless Bridge, outbound traffic gets no response
So fun times this weekend trying to build a simple OpenBSD bridge for my XBox360. I want my ural network card to be bridged with my re network card to forward some traffic. Bleh.
I essentially cloned ...
1
vote
3
answers
344
views
Two identically configured sendmails, one of them is not delivering mail
I have two identically configured OpenBSD machines that use sendmail for mail delivery. I basically made no changes to the sendmail install other than setting up an alias root: [email protected] on ...
1
vote
0
answers
544
views
How to create a non-admin user in OpenBSD to be able to login as a root like in Linux-based systems?
Usually, in Linux-based systems I create new user without admin rights (sudo group).
I'm able to login as that user via SSH and then, when I need admin rights, I can just,
$ su root
...entering pwd...
...
1
vote
0
answers
133
views
permission denied when writing to mounted directory exported by NFS server running on OpenBSD OS
I have a default installation of openbsd, with portmap, mountd, nfsd services started by via rcctl. I have following entry in /etc/exports
/nfs/testdir -alldirs -maproot=root -network=192.168.0 -mask=...
1
vote
1
answer
508
views
Simple OpenBSD NAT router not working
I'm toying around with using OpenBSD as a NAT router behind Starlink but efforts with the NAT are failing even in the simplest cases. I've probably simply been staring at it too long and need an ...
1
vote
0
answers
66
views
Mysterious/Unknown IPs keep getting whitelisted by spamd
I have an OpenBSD 7.1 mail server running OpenSMTPD with spamd.
I notice mysterious IP addresses in /var/log/maillog, such as:
smtp connected address=162.142.125.222 host=scanner-25.ch1.censys-scanner....
1
vote
1
answer
237
views
How to create service/port specific subdomains in OpenBSD vm
I am creating a website in an OpenBSD vm, and I plan to have different services on it that will be pointed to by their respective subdomains (irc.example.com -> example.com:6697, img.example.com -&...
1
vote
1
answer
580
views
403 Page recieved when accessing OpenBSD httpd page
I am writing a static webpage on an OpenBSD vm (here called example.com), and when I access the server with it's domain name over http I get httpd's 403 page, when I use telnet example.com 80 I get
...
1
vote
2
answers
241
views
How do i get PostgreSQL on Open BSD 7.0 to run
Trying to start postgresql on openbsd 7.0 but can't seem to get it to work. so far I tried this tutorial
and looking around a bit on google. I'm new to OpenBSD.
# rcctl -df start postgresql
doing ...
1
vote
0
answers
148
views
How to disable all default cryptographic algorithms but the explicitly defined ones in OpenIKED?
I am having issues with setting up highly secure but still high performance IKEv2 tunnels between multiple data centers on OpenBSD nodes, by using very strict security features and allowing the use of ...
1
vote
0
answers
594
views
Rewriting user folder url in OpenBSD httpd
I'm using OpenBSD and its httpd. We have a community with users and currently the url to their folder is:
example.com/users/username
However, what we want is to get
example.com/~username
This is my ...
1
vote
0
answers
446
views
I fail to configure Pf of OpenBSD gateway
I have an OpenBSD server that I want to use as a gateway.
OBSD server has the following interfaces -
em5 (130...** ext.IP with internet connectivity)
em0 (internal IP - 172.16.0.0/17)
My default ...
1
vote
3
answers
1k
views
Google VPN not supporting claimed ciphers
Trying to make an IPSec IKEv2 connection with Google Cloud VPN services.
According to them, they support AES-CBC ciphers for Encyprtion at phase 1, but at the moment of negotiation with the on-...
1
vote
1
answer
445
views
How to migrate Linux iptables scripts to OpenBSD/macOS pf
I am building a VPN server on macOS based on this instruction:
https://www.digitalocean.com/community/tutorials/how-to-set-up-an-ikev2-vpn-server-with-strongswan-on-ubuntu-18-04-2,
and stuck at ...
1
vote
0
answers
461
views
How to install OpenBSD 6.2 guest in XenServer 7?
I'm trying to create new VM from vanilla OpenBSD 6.2 install CD on XenServer 7. I can't even boot install CD. Basically, i get this:
Boot device: CD-Rom199MB medium detected
- success.
CR-ROM: ...
1
vote
0
answers
46
views
OpenBSD IRQ already in use error
My singleboard compter (SBC) have 4-UART ports. They all use one IRQ with different addresses. SBC BIOS can not divide them all on different IRQ (only 2 IRQ for them). Then i setup only one port using ...
1
vote
3
answers
1k
views
syslogd no such file or directory - OpenBSD 3.9
OK - long story short:
I have OpenBSD box that was setup as a network appliance (long time ago) I have returned to life. Several errors I am working on and could use any help I can get.
Errors on ...
1
vote
0
answers
180
views
ripd ospfd and bgpd all with syntax error on line 1
I'm using an OpenBSD 5.9 VM and installed quagga recently.
I'm unable to run any dynamic routing protocol (ripd -d, ospfd -d or bgpd -d) and I get always the same error message,
example for RIP
#...
1
vote
0
answers
201
views
OpenBSD. etherip tunnel do not makes connection
I try to create a tunnel through etherip. And I did read man pages etherip in OpenBSD. But this example aren't working in my servers.
cat /etc/sysctl.conf
net.inet.etherip.allow=1
net.inet.ip....
1
vote
0
answers
1k
views
Openbsd 5.7: IPv6 advertisement not working
--context--
I have a Sokeris with 8 interfaces: em0 is connected to a bridge router (ISP) and em2 is connected to my DMZ network (web servers).
I got from my ISP a /56 prefix and 2 DNS IPs but no ...