The OpenBSD project produces a free, multi-platform 4.4BSD-based UNIX-like operating system with a focus on security. Our efforts emphasize portability, standardization, correctness, proactive security and integrated cryptography.

learn more… | top users | synonyms

0
votes
2answers
93 views

OpenBSD OpenSSL version after update to -stable

Yesterday I installed OpenBSD 5.5 release and after reading about updating and applying patches to the system (http://www.openbsd.org/errata55.html) I decided to update to the -Stable ("patch branch") ...
1
vote
2answers
1k views

OpenBSD pf 'match in all scrub (no-df)' causes HTTPS to be unreachable on mobile network

First of all: excuse me for my poor usage of the English language. For several years I'm experiencing problems with the 'match in all scrub (no-df)' rule in pf. I can't find out what's happening ...
5
votes
1answer
1k views

Send trunk directly to vm in HyperV 2012

I'm setting up OpenBSD as a VM in HyperV 2012. It would be easier for me to just create one interface on the vm and have OpenBSD take care of setting up the vlans. Is it possible to tell HyperV to ...
2
votes
3answers
344 views

Linux vs OpenBSD vmware performance

I wonder what experience others have of running openbsd on top of vmware infrastructure. I have a pretty regular Lighttpd+Mysql+PHP5 setup of 2 vmware guests: -Debian7 Wheezy -OpenBSD 5.2 (this ...
0
votes
1answer
75 views

OpenBSD chroot for nginx/Apache file permissions

I haven't been able to find a satisfying answer on Goole or the various Stack forums: I noticed that files under /var/www (where nginx and I believe Apache are chrooted by default) have permissions ...
-1
votes
2answers
73 views

OpenBSD ISC-DHCP IPv6 not working?

How to enable dhcp for ipv6 in OpenBSD 5.5. Default dhcpd don't know about IPv6, it says that option -6 is incorrect and do not understand ipv6 config. But it has version 4.X that IPv6 must be enabled ...
3
votes
3answers
1k views

OpenBSD has open ports in default installation

I have been considering replacing Ubuntu with OpenBSD to improve the security on my local server. I need to have ssh access to it, and I also need it to serve static web content - so the only ports I ...
0
votes
0answers
65 views

OpenBSD automatic filesystem check at reboot

I want my openbsd server to boot, no matter what and dont break with waiting for manual FSCKing. It's easy to do in linux, but in obsd it just doesnt want to be "auto". Last time I set the 6th,7th ...
1
vote
6answers
1k views

How can I install OpenBSD to a SSD without a Optical Drive?

I'm searching for an OpenBSD bootable image that I can install on SSD to run pf on. I've found these images for m0n0wall and pfSense but not for OpenBSD alone. Can somebody link me to an image with ...
1
vote
1answer
85 views

Server name no longer available OpenBSD

I've been scratching my head with this for a while and don't seem to be getting any closer to a solution at the system level. I have asked the same question at SuperUser but so far the answers didn't ...
0
votes
0answers
24 views

Will pfctl -sr show ordered rules when using -o profile?

When I enable the -o profile option with pf will pfctl -sr show me the new order of the rules?
1
vote
1answer
2k views

502 Bad Gateway Error Nginx connect() to unix:/tmp/unicorn.sock failed

This is my first question on Server Fault. I could not find a solution to this while searching the web. I am working on an OpenBSD server running Nginx, which I did not setup, that is throwing a 502 ...
1
vote
1answer
113 views

Active CARP network loop

I have to setup, no matter what, a cluster of 3 active OpenBSD 5.5 with CARP on 3 separate ESXi 5.5 hosts. I think I'm close to the end but I have this message in /var/log/messages : carp0: replay ...
4
votes
3answers
307 views

OpenBSD default gateway outside subnet

My ISP offers IPv6 by default. However, my ISPs IPv6 setup appears to be a bit strange because the default IPv6 gateway is located outside of my servers subnet. Under linux it is possible to setup a ...
-1
votes
1answer
49 views

OpenBSD configs to EdgeRouter

is it possible to transfter OpenBSD router configs, such as firewall settings, DHCP settings to EdgeRouter-Lite?
2
votes
6answers
2k views

OpenBSD configuration: Client unable to mount via NFS using Berkeley Automounter (amd)

What I am trying to do is to have my openBSD client (OpenBSD 4.9) auto mount a Linux NFS file system (Scientific Linux 6.1). So far, I am not sure if it is configured correctly. To get things out of ...
0
votes
1answer
81 views

Is there a way to check softraid validity on OpenBSD?

I have more than two very old HDDs in a softraid(4) RAID1 mirroring discipline on OpenBSD. It looks like some of the underlying physical drives may be seeing some I/O errors; but prior to a complete ...
1
vote
1answer
115 views

Different permissions for different groups on one folder in OpenBSD?

Is it possible to have filesystem permission ACL's (or similar) in OpenBSD? I'm trying to make a folder where one group has read-write access while a different group has read-only access. I don't want ...
0
votes
1answer
143 views

OpenBSD with LDAP authentication returning invalid user

I am trying to set up an OpenBSD box to use a LDAP server for authentication. I am following the directions at http://www.obfuscurity.com/2009/08/OpenBSD-as-an-LDAP-Client and for the most part they ...
2
votes
2answers
898 views

Ubuntu 12.04 LTS KVM host with a OpenBSD 5.4 guest, `virsh shutdown` not working / freezing guest

I have Ubuntu 12.04 LTS KVM host with a OpenBSD 5.4 guest. I am having an issue with virsh shutdown not working / freezing guest. After calling shutdown, guest freezes and is unresponsive. Any ssh ...
0
votes
0answers
137 views

openbsd pf rdr-to not working

I have multiple IP addresses aliased on my external interface and I am trying to forward from one of those IPs to an internal address for port 80. My (sanitised) config is as follows: set limit ...
0
votes
1answer
218 views

FreeBSD pf Egress Filtering

I am attempting to build a simple pf.conf which includes NAT allowing traffic out of the network from all systems on a select series of ports. In my basic configuration I have an internal server that ...
2
votes
1answer
204 views

DNSSEC and IPSec DNS Server and DNS Client Configuration

I'm about to deploy DNSSEC for some of my domains and as I was getting ready I did some reading on the subject. I came across some Microsoft Technet articles talking about Name Resolution Policy Table ...
1
vote
1answer
281 views

OpenBSD: Gateway outside subnet (works in Linux)

We need to set up an OpenBSD host to use a default gateway that's outside of it's subnet. This is all I need to do on Linux (not the actual IPs) to achieve it: ifconfig eth0 33.33.33.33/31 up route ...
7
votes
7answers
7k views

Linux equivalent of pfsync+carp for failover firewall/routing

I'm currently using a linux box to handle my firewall/NAT using iptables. It has two NICs, one link to a LAN switch, one to our egress Internet provider. I'm looking at upgrade this box to two boxes ...
1
vote
1answer
66 views

OpenLDAP Authentication in Mixed Enviroment

I am preparing to setup a small network with single sign on capability provided by and OpenLDAP server that runs on OpenBSD 5.3. Currently, I am able authenticate an Ubuntu 13.04 client against the ...
1
vote
2answers
1k views

Having trouble increasing WordPress memory limit on nginx server

I am trying to increase the memory limit on my nginx php-fpm server for wordpress. Specifically the Wordpress plugin WooCommerce needs more available memory. I've set the following in ...
7
votes
1answer
8k views

Why does tomcat7 log into both catalina.out and catalina.YYYY-MM-DD.log?

On OpenBSD 5.2, the default installation of tomcat-7.0.29 seems to be logging all errors into both catalina.out and catalina.YYYY-MM-DD.log. Cns# ll /var/tomcat/logs/catalina.* -rw-r--r-- 1 _tomcat ...
0
votes
2answers
129 views

how to access physical memory in BSD platform from terminal or using any system call ?

i just not know how to use mem command in BSD to access physical memory or virtual memory to get the ACPI tables and their Address ....... $mem Enter mem command not found .... so what can i do ? ...
4
votes
2answers
505 views

home, end, delete, pageup, pagedown with ksh

I want to use home, end, delete, pageup, pagedown with ksh. My TERM is xterm-color. These keys works fine with tcsh and zsh, but not with ksh (print a tilda ~) I found this: bind '^[[3'=prefix-2 ...
0
votes
1answer
394 views

Give an external IP to a Virtual Machine

I've a Windows Server 2008 R2 with 8 public IPs assigned (fixed), recently i've installed VirtualBox and create a VirtualMachine with OpenBSD. I would like to give one IP to the VM, but every try ...
19
votes
1answer
4k views

Authenticating OpenBSD against Active Directory

Edit: Reformatted this as Q&A. If anyone can change this from Community Wiki to a typical question, that's probably more appropriate as well. How can I authenticate OpenBSD against Active ...
2
votes
2answers
220 views

Altq/Pf trouble on OpenBSD

I'm having some trouble with pf/altq on OpenBSD but as I'm new to it I'm not sure if its because I'm misunderstanding how to use anchors, or if something is wrong with my system. I'm trying to add ...
2
votes
4answers
273 views

HTTPS only on OpenBSD 4.9? [duplicate]

I've tried this example from OpenBSD http://www.openbsd.org/faq/faq10.html#HTTPS it works fine, but with Mozilla Firefox 6.0 it's possible to use both http and https, while I want to force users to ...
3
votes
2answers
2k views

dhcpd.leases file manually edit

I have OpenBSD 4.8 serving as Gateway & DHCP Server. By mistake, when reinstalling one of the workstations (it is Windows 7) it gets the same name as it was before (i.e workstation-PC). So now I ...
0
votes
1answer
129 views

Routing issue from one network another one thru an openvpn server

I have a weird problem. I am not sure what is happening. We have a server running OpenBSD working as router. This server is also openvpn client and firewall (pf). From the local network I can't ping ...
2
votes
2answers
184 views

OpenBSD - Image on a new, bigger disk - how to use the extra space

Our present OpenBSD server needed more disk space, so we replaced the 13 GB disk (it's pretty old too) with 150GB. An image was made and then restored on the new disk. So far, so good. The new disk ...
1
vote
1answer
568 views

How to reduce the timeout for TIME_WAIT connections on OpenBSD?

I'm running http_load on OpenBSD 5.2, to test how good my nginx setup is, and I've noticed that cold runs are much faster than warm runs, and with every run the performance goes down very dramatically ...
3
votes
3answers
463 views

tcp-upstream in unbound doesn't work. Use TCP for query upstream DNS servers really work in the real world?

Today I've been playing with some options in unbound.conf just for fun. I've enabled tcp-upstream but it doesn't work with some domains. OS: OpenBSD current. Unbound: 1.4.19 Examples with ...
0
votes
2answers
283 views

How to run python script which required root privilage for execution in apache with mod_python at openbsd

I am trying to run python script in Apache 2.x with mod_python. I edited httpd.conf with publisher LoadModule python_module /usr/local/apache2/modules/mod_python.so <Directory ...
2
votes
1answer
238 views

Outline squid server - redirect traffic with pf

What's my goal: know what employee are looking in Internet (what pages, how long etc; no caching). What I did: install squid on openBSD Problem: I see whole traffic (tcpdump), but I can't redirect ...
4
votes
1answer
82 views

pfctl in OpenBSD and FreeBSD

I've noticed that both FreeBSD and NetBSD have extra pfctl options: pfctl [-AdeghmNnOPqRrvz] But OpenBSD doesn't, it's missing around five of the extra options: pfctl [-deghnPqrvz] I would have ...
1
vote
5answers
656 views

OpenBSD firewall - netbook hardware option - pros and cons

I'm considering putting OpenBSD on a netbook for use as a firewall. I am entertaining the idea of using a netbook because it has a built-in screen and keyboard, built-in battery backup, and a ...
0
votes
1answer
468 views

OpenBSD Apache version 1.3.29? [closed]

I recently installed OpenBSD and went to check the version of Apache HTTPD and when I run httpd -v it tells me the version is Apache/1.3.29 (Unix). Surely this can't be right? I am using the latest ...
0
votes
1answer
228 views

OpenBSD ftp-proxy behind NAT itself

Is it possible to change the PASV IP ftp-proxy of OpenBSD sends to clients, without changing the listen address of redirection control (-b <address>)? I have the following setup: FTP client ...
0
votes
1answer
341 views

Could not resolve host — no address associated with name

I'm setting up a web server on an old OpenBSD machine, and am getting an error each time I try to start Apache. The server refused to start after I added my virtual host with HTTPS. Error could not ...
0
votes
2answers
420 views

OpenBSD Apache configuration: NFS mount

I have a NFS mount at /mnt/web/ on OpenBSD 5.2. How can I mount this so it's accessible to the web? Currently I'm soft linking it to /var/www/web ln -s /mnt/web /var/www/web I've added an alias ...
0
votes
1answer
127 views

OpenBSD install from CD does not find installation file set

We are installing OpenBSD on one of our machines. After configuring the hostname and directories, there's an error on installing the sets I'm installing from a CD, but the system does not recognize ...
2
votes
1answer
365 views

Openbsd init script for ssh VPN tunnel

I have a server hosting SSH tunnels and Openbsd 4.5 clients connecting to it. Things work just fine but I am in the need of automating the connection from the client to the server. So that if the ...
2
votes
1answer
53 views

openbsd installation with certain configuration prebuilt

I am looking for options to install a system OpenBSD which has certain configs prewritten. What options can I look for? An install image which when installed, installs a system with a configuration ...