The OpenBSD project produces a free, multi-platform 4.4BSD-based UNIX-like operating system with a focus on security. Our efforts emphasize portability, standardization, correctness, proactive security and integrated cryptography.

learn more… | top users | synonyms

0
votes
3answers
196 views

Force OpenBSD to use internally one IP, but send and receive from network from other IP?

Is it possible to set up OpenBSD such, that it will have IP1 internally (in hosts, in hostname.en0, sockets binds to IP1), but convert it to IP2 when packet goes to ethernet. Also, packets for the IP2 ...
2
votes
2answers
298 views

OpenBSD - Image on a new, bigger disk - how to use the extra space

Our present OpenBSD server needed more disk space, so we replaced the 13 GB disk (it's pretty old too) with 150GB. An image was made and then restored on the new disk. So far, so good. The new disk ...
1
vote
2answers
84 views

IPv6 IPsec between two native IPv6 networks

Assume I have two networks, A and B, on sites either side of the globe. Both have native IPv6 and are using (hypothetically) just IPv6. IPv4 no longer exists. They can both access the internet ...
0
votes
2answers
220 views

OpenBSD OpenSSL version after update to -stable

Yesterday I installed OpenBSD 5.5 release and after reading about updating and applying patches to the system (http://www.openbsd.org/errata55.html) I decided to update to the -Stable ("patch branch") ...
2
votes
1answer
277 views

Setting up IPSEC on LAN between two hosts (OpenBSD)

Trying to use IPSEC between two hosts on a LAN. No VPN involved Using OpenBSD 5.8 (in VirtualBox). I'd prefer to use OpenBSD's built-in support for IPSEC and not a third-party. Two hosts: 10.0.2.10 ...
2
votes
1answer
518 views

Openbsd init script for ssh VPN tunnel

I have a server hosting SSH tunnels and Openbsd 4.5 clients connecting to it. Things work just fine but I am in the need of automating the connection from the client to the server. So that if the ...
2
votes
1answer
244 views

Is there an equivalent of LinuxIMQs in BSD?

Is there an equivalent of LinuxIMQs in BSD ? From linuximq.net: The imq device has two common usage cases: Ingress shaping: With linux only egress shaping is possible (except for the ingress ...
1
vote
1answer
830 views

openbsd pf squid transparent proxy using a bridge

I want to use OpenBSD 5.7 as a filtering bridge in front of my router, and as part of that run a transparent proxy (squid 3.5.1) to manage web access. I have set up the openbsd machine as a bridge, ...
1
vote
1answer
115 views

Authenticating OpenBSD 5.6 to Windows server 2008R2 active directory?

How do I make openBSD to authenticate to Windows server 2008R2? I currently have installed Identity Management for Unix (IDMU). Also I have installed login_ldap in openbsd. but I dont know what to ...
1
vote
1answer
453 views

Active CARP network loop

I have to setup, no matter what, a cluster of 3 active OpenBSD 5.5 with CARP on 3 separate ESXi 5.5 hosts. I think I'm close to the end but I have this message in /var/log/messages : carp0: replay ...
1
vote
1answer
152 views

Server name no longer available OpenBSD

I've been scratching my head with this for a while and don't seem to be getting any closer to a solution at the system level. I have asked the same question at SuperUser but so far the answers didn't ...
1
vote
1answer
76 views

OpenLDAP Authentication in Mixed Enviroment

I am preparing to setup a small network with single sign on capability provided by and OpenLDAP server that runs on OpenBSD 5.3. Currently, I am able authenticate an Ubuntu 13.04 client against the ...
1
vote
1answer
474 views

Trouble P2Ving OpenBSD 4.0 to VMWare

I've been tasked with migrating a physical OpenBSD 4.0 boxes to our VMWare ESXi farm. I used VMWare's Converter 4.1 CD to perform a cold migration which completed successfully. Prior to the first boot ...
0
votes
1answer
18 views

How to start postgresql server with the socket at a different place?

Good morning. The title says it, but let me precise it. I am working with openbsd. The web server is chrooted in /var/www. So the good thing would be that postgresgl place its socket (and the lock, I ...
0
votes
1answer
32 views

Process separation on an OpenBSD server

I fear this may be a somewhat open-ended question that gets closed: Apologies in advance, but I'll give it a shot! I'm considering operating an OpenBSD VM with a number of services running on the ...
0
votes
1answer
39 views

High latency when enabling secondary BGP server for same networks?

I have two BGP servers on OpenBSD using bgpd that are located in the same DC; I tried to enable multihoming for the same networks on both of the servers, but upon doing so all hosts in that DC started ...
0
votes
1answer
174 views

Recover data from OpenBSD softraid down to a single disk

I'm currently very desperate: I have a 3TB WD Red disk that I need to extract data from. This was part of a softraid on an OpenBSD 5.6 machine. I was in the process of migrating to a zfs on linux ...
0
votes
1answer
192 views

Why is my PHP server redirecting to the wrong address?

I'm setting up a PHP web server on OpenBSD. phpinfo() is up and running. But, every time I try to install Wordpress, it's redirecting the client to the dummy hostname created on OS install ...
0
votes
1answer
297 views

OpenBSD chroot for nginx/Apache file permissions

I haven't been able to find a satisfying answer on Goole or the various Stack forums: I noticed that files under /var/www (where nginx and I believe Apache are chrooted by default) have permissions ...
0
votes
1answer
422 views

OpenBSD automatic filesystem check at reboot

I want my openbsd server to boot, no matter what and dont break with waiting for manual FSCKing. It's easy to do in linux, but in obsd it just doesnt want to be "auto". Last time I set the 6th,7th ...
0
votes
1answer
210 views

Is there a way to check softraid validity on OpenBSD?

I have more than two very old HDDs in a softraid(4) RAID1 mirroring discipline on OpenBSD. It looks like some of the underlying physical drives may be seeing some I/O errors; but prior to a complete ...
0
votes
1answer
218 views

Insecure NFS ports on OpenBSD server

I have a OpenBSD 4.9 server running. Now I am trying to set up NFS shares on that server. I can set it up using secure ports. However it isn't possible to mount the shares from OS X without using the ...
0
votes
1answer
880 views

M0n0wall won't pass traffic on different LAN subnets unless “Bypass firewall rules” is checked

I have a working configuration, but a question is bugging me. The question centers around having multiple subnets on a single interface. LAN: 10.10.10.1/24 OpenVPN Server LAN IP: 10.10.10.250 ...
0
votes
1answer
112 views

Restricting program access in OpenBSD

I'm hosting a svn+ssh repo on a OpenBSD box and wondered if it is possible to deny access to any other programs despite svnserve? The reason is that I want to restrict access to parts of the repo with ...
0
votes
1answer
786 views

OpenBSD logins via SSH seem to be ignoring my configured radius server

I've installed and configured a radius server upon my localhost - it is delegating auth to a remote LDAP server. Initially things look good: I can test via the console: # export user=skemp # export ...
0
votes
1answer
154 views

Altq limits not being applied to UDP transfers

I have a OpenBSD server acting as a router/firewall with yhr packet filter ruleset shown below, a linux server, and a linux client. When transferring files (using netcat) by TCP, the limits are ...
-1
votes
1answer
24 views

BSD Connection 'Drops'

I've been setting up a BSD server and every thing went fine. It still works fine except on my own IP address I cannot connect to my webserver at all and with SSH I can login but then as soon as I type ...
-1
votes
1answer
201 views

OpenBSD configs to EdgeRouter

is it possible to transfter OpenBSD router configs, such as firewall settings, DHCP settings to EdgeRouter-Lite?
3
votes
0answers
39 views

Is reverse DNS a good method for promoting grey IPs from trusted domains to white?

I'm trying to set up a mail server using OpenBSD, OpenSMTPD, spamd, and pf. The first problem I've encountered is that many large webmail providers - like Gmail - will retry delivery from a different ...
2
votes
0answers
143 views

tuning tips for CPU load for OpenBSD guest on qemu-kvm Server

I have a CentOS KVM Server running 1 OpenBSD, 1 CentOS and 2 FreeBSD guests. Only the openBSD guest has a higher CPU load on the KVM Server. 8-10% on Server whilst Guest is at idle. The only service ...
1
vote
0answers
329 views

Openbsd 5.7: IPv6 advertisement not working

--context-- I have a Sokeris with 8 interfaces: em0 is connected to a bridge router (ISP) and em2 is connected to my DMZ network (web servers). I got from my ISP a /56 prefix and 2 DNS IPs but no ...
1
vote
0answers
158 views

Port forwarding with URL on OpenBSD 4.5

I need to setup forwarding on gateway machine with following request from client: Is it possible to setup pf.conf on OpenBSD 4.5 machine, but instead IP address to have given URL such as ...
0
votes
0answers
49 views

vmm tap tun configration on openbsd

I can't seem to get the logic of tap/vio which is probably just the same as tun/tap. If I tcpdump tap I can see arp requests from the virtual machine. The packets however do not come back the virtual ...
0
votes
0answers
48 views

How Can I Create a Private OpenBSD Mirror?

How can I create a private OpenBSD mirror. I'd like my mirror to have all the packages of the latest release for my preferred architectures (amd64 and i386) and everything else contained in a typical ...
0
votes
0answers
58 views

ssh tunnel to OpenBSD

I've got a remote machine running OpenBSD (version 4.8, though that shouldn't make any difference), acting as a firewall and using the packet filter pf(8) to forward incoming connection attempts to ...
0
votes
0answers
71 views

Openbsd set connect on PPTP server behind packet filter

I have firewall on OpenBSD use Packet Filter and behind him MS Windows server with PPTP server. I need allow connect this PPTP server from internet. I set in OpenBSD: net.inet.gre.allow=1 ...
0
votes
0answers
138 views

pf.conf DNS dual redirect to dnscrypt-proxy. Just need confirmation my code is correct

I have 2 isolated LANS on my gateway. They are blocked from communicating to one another in pf by: block in log on $int_if from "192.168.1.0/25" to "192.168.1.128/25" block in log on $int_if from ...