The OpenBSD project produces a free, multi-platform 4.4BSD-based UNIX-like operating system with a focus on security. Our efforts emphasize portability, standardization, correctness, proactive security and integrated cryptography.

learn more… | top users | synonyms

22
votes
11answers
11k views

Is anyone else using OpenBSD as a router in the enterprise? What hardware are you running it on? [closed]

We have an OpenBSD router at each of our locations, currently running on generic "homebrew" PC hardware in a 4U server case. Due to reliability concerns and space considerations we're looking at ...
19
votes
1answer
4k views

Authenticating OpenBSD against Active Directory

Edit: Reformatted this as Q&A. If anyone can change this from Community Wiki to a typical question, that's probably more appropriate as well. How can I authenticate OpenBSD against Active ...
11
votes
6answers
2k views

OpenBSD, FreeBSD: your update philosophy?

I've used FreeBSD for about 5 years - server/Desktop - and I've tended to take my apt-get/yum upgrade everything habits along with me ( I admin Debian/RHEL/Cent boxes as well -- I know, I know ...
8
votes
3answers
1k views

OpenBSD/FreeBSD Firewall w/ GUI that is compatible with Intel 82574L Gigabit LAN NICs

I recently purchased a server to run m0n0wall or pfSense but I've learned since then that both of these firewall products are based on versions of FreeBSD which weren't yet compatible with the NICs in ...
7
votes
7answers
7k views

Linux equivalent of pfsync+carp for failover firewall/routing

I'm currently using a linux box to handle my firewall/NAT using iptables. It has two NICs, one link to a LAN switch, one to our egress Internet provider. I'm looking at upgrade this box to two boxes ...
7
votes
1answer
8k views

Why does tomcat7 log into both catalina.out and catalina.YYYY-MM-DD.log?

On OpenBSD 5.2, the default installation of tomcat-7.0.29 seems to be logging all errors into both catalina.out and catalina.YYYY-MM-DD.log. Cns# ll /var/tomcat/logs/catalina.* -rw-r--r-- 1 _tomcat ...
6
votes
3answers
2k views

Modern open source NIDS/HIDS and consoles?

Years back we set up an IDS solution by placing a tap in front of our exterior firewall, piping all the traffic on our DS1 through an IDS box and then sending the results off to a logging server ...
5
votes
2answers
355 views

Which BSD best suited to run as VMware guest?

I want to deploy a VM to serve DNS and files (via NFS) to other *nix systems in my infrastructure. Due to reasons beyond my control, I need a very light OS, so I naturally choose the *BSD family. ...
5
votes
2answers
256 views

Portable firewall rules for Linux and Free/Net/Open/DragonFlyBSD

I need apply the same rules (lists of IPs with allow and drop rules) in firewalls of Linux and *BSD. Do you know some application (CLI) for to convert a list of rules in the specific format of each ...
5
votes
1answer
1k views

Send trunk directly to vm in HyperV 2012

I'm setting up OpenBSD as a VM in HyperV 2012. It would be easier for me to just create one interface on the vm and have OpenBSD take care of setting up the vlans. Is it possible to tell HyperV to ...
5
votes
2answers
1k views

Can I create a pf rule involving MAC address instead of IP?

The title is self explanatory. I want to create rules in pf running on OpenBSD 4.9 for perticular MAC address, something like pass in on eth0 from mac 00:04:34:5f:34:33 to mac 34:32:34:06:5e:22 I ...
5
votes
1answer
2k views

How to run VmWare tools in OpenBSD4.5 with VmWare server 2.0.X

For testing purposes i frequently run OpenBSD in VmWare, before version 2.0.x, tweaking the vm type and using Freebsd compatibility mode made the job but this does not work anymore with VmWare server ...
4
votes
6answers
8k views

PXE Boot - Linux server & OpenBSD client

I have an old machine here I'm trying to setup as a diskless client running OpenBSD, booting from my fedora 10 machine. I've setup tftp and dhcp and both appear to be correct, yet the client just ...
4
votes
1answer
82 views

pfctl in OpenBSD and FreeBSD

I've noticed that both FreeBSD and NetBSD have extra pfctl options: pfctl [-AdeghmNnOPqRrvz] But OpenBSD doesn't, it's missing around five of the extra options: pfctl [-deghnPqrvz] I would have ...
4
votes
1answer
619 views

Request multiple IP-addresses via DHCP on a single physical interface (OpenBSD)

On OpenBSD, is it possible to request multiple IP-addresses via DHCP on a single physical interface? It looks like DHCP leased addresses can't be assigned as aliases. I though of creating a virtual ...
4
votes
1answer
1k views

OpenBSD pf port forwarding multiple rules

I have a few dozen servers behind OpenBSD firewall with port forwarding. Most rules are very similar and differ only in IPs or sometimes in ports forwarded, so I want to compact them to remove ...
4
votes
2answers
505 views

home, end, delete, pageup, pagedown with ksh

I want to use home, end, delete, pageup, pagedown with ksh. My TERM is xterm-color. These keys works fine with tcsh and zsh, but not with ksh (print a tilda ~) I found this: bind '^[[3'=prefix-2 ...
4
votes
3answers
306 views

OpenBSD default gateway outside subnet

My ISP offers IPv6 by default. However, my ISPs IPv6 setup appears to be a bit strange because the default IPv6 gateway is located outside of my servers subnet. Under linux it is possible to setup a ...
4
votes
1answer
302 views

BSD 50% interrupt utilization in irq0/clock

On OpenBSD on an Atom 450, with HPET configured in the BIOS and not, also with Hyperthreading/ACPI on-off, nothing seems to make a difference. Here's my vmstat -iz # vmstat 2 procs memory ...
3
votes
2answers
6k views

redundant openvpn configuration

I have two openbsd nat/firewall boxes with carp for failover / high availability purposes. What would be the best possible practice to ensure that OpenVPN, which I plan on running on these boxes, ...
3
votes
3answers
2k views

How do I count the number of processors on an OpenBSD system?

How can I determine the number of CPUs on an OpenBSD system, using either system tools or C code? The technique I know of to count CPUs on other BSD platforms -- checking /var/run/dmesg.boot for ...
3
votes
3answers
1k views

OpenBSD has open ports in default installation

I have been considering replacing Ubuntu with OpenBSD to improve the security on my local server. I need to have ssh access to it, and I also need it to serve static web content - so the only ports I ...
3
votes
3answers
3k views

NFS mount “hanging” when accessing from a server on a different subnet

Here's a problem which I am at a loss to diagnose: Our user home directories are served via NFS from an Apple XServe running Mac OS X 10.5.7. Normally they are exported to our default office subnet, ...
3
votes
3answers
2k views

How do I spamtrap with Postfix?

How do I setup spamtraps with Postfix so clients that send to trapped addresses are prevented from sending me more spam?
3
votes
3answers
460 views

tcp-upstream in unbound doesn't work. Use TCP for query upstream DNS servers really work in the real world?

Today I've been playing with some options in unbound.conf just for fun. I've enabled tcp-upstream but it doesn't work with some domains. OS: OpenBSD current. Unbound: 1.4.19 Examples with ...
3
votes
1answer
925 views

Provide IPv6 to network from OpenBSD firewall

I have an OpenBSD PF firewall that I have added a IPv6 tunnel to (using HE.net tunnelbroker). I can ping/traceroute IPv6 addresses from the firewall. Now I want to provide IPv6 services to the ...
3
votes
2answers
2k views

dhcpd.leases file manually edit

I have OpenBSD 4.8 serving as Gateway & DHCP Server. By mistake, when reinstalling one of the workstations (it is Windows 7) it gets the same name as it was before (i.e workstation-PC). So now I ...
3
votes
3answers
611 views

ichiic0 errors on OpenBSD 4.4

I have four identical nodes built on Supermicro 1025TC-TB hardware running OpenBSD 4.4. Two of the nodes are routers and two are load balancers. Each set is running in active/passive configuration ...
3
votes
1answer
467 views

Why can not add subversion package to my OpenBSD 4.5 machine?

I have an OpenBSD 4.5 on a virtual machine. I configured the net and my machine can connect to the OpenBSD FTP repository in Canada (ftp.openbsd.org) correctly. But when I execute this line: ...
3
votes
3answers
1k views

OpenBSD and filesystem snapshots

What is the best solution, if any, for carrying out LVM style filesystem snapshots on OpenBSD?
2
votes
2answers
567 views

Default values of pf.conf set parameters

I want to learn default values of these parameters, I read the manual of pf.conf but couldn't find, could you help? set limit states set limit src-nodes set timeout tcp.first set timeout ...
2
votes
1answer
53 views

openbsd installation with certain configuration prebuilt

I am looking for options to install a system OpenBSD which has certain configs prewritten. What options can I look for? An install image which when installed, installs a system with a configuration ...
2
votes
3answers
361 views

How Much Ram for these 2 Dedicated OpenBSD servers?

First server would be Server A. wordpress, joomla, roundcube and opencart (mysql databases are on Server B) over a 3 year period max would be 2000 unique visits a day. Would be about 500 downloads ...
2
votes
3answers
342 views

Linux vs OpenBSD vmware performance

I wonder what experience others have of running openbsd on top of vmware infrastructure. I have a pretty regular Lighttpd+Mysql+PHP5 setup of 2 vmware guests: -Debian7 Wheezy -OpenBSD 5.2 (this ...
2
votes
3answers
576 views

How to switch IP (including subnet) on OpenBSD without outage

I have an OpenBSD firewall where I have to change the IP on the admin interface (including changing subnet/gateway) and I'm looking for how to do this remotely without losing my SSH (so I can fix ...
2
votes
4answers
273 views

HTTPS only on OpenBSD 4.9? [duplicate]

I've tried this example from OpenBSD http://www.openbsd.org/faq/faq10.html#HTTPS it works fine, but with Mozilla Firefox 6.0 it's possible to use both http and https, while I want to force users to ...
2
votes
2answers
232 views

Sharing distfiles between FreeBSD, OpenBSD, and Gentoo

Currently I have a few FreeBSD servers with one of them acting as build box sharing its /usr/ports and /usr/ports/distfiles (as separate file systems) through NFS. Recently I've added OpenBSD and ...
2
votes
2answers
589 views

torrent downloads not showing on Squid log

i have just a few months working as sysadmin, hence i still have lots to learn, first thing id like to do is as follows: We have an OpenBSD 4.5 box acting like firewall,dns,cache etc, the box has 2 ...
2
votes
2answers
2k views

Qemu: issues with bridged networking (Linux host, OpenBSD guest)

I have a computer running Linux. It has qemu installed. It has a bridge interface br0 configured with the following settings: IP: 10.1.1.1 Netmask: 255.255.255.0 There is also a tap0 interface that ...
2
votes
2answers
220 views

Altq/Pf trouble on OpenBSD

I'm having some trouble with pf/altq on OpenBSD but as I'm new to it I'm not sure if its because I'm misunderstanding how to use anchors, or if something is wrong with my system. I'm trying to add ...
2
votes
2answers
1k views

Setting up a VDSL router on OpenBSD & NIC with TCO support

this is my first question and I hope I do everything correct. Thanks for setting up serverfault - such a site was missing in the internet for a long time now. In the next few weeks I will get my VDSL ...
2
votes
1answer
204 views

DNSSEC and IPSec DNS Server and DNS Client Configuration

I'm about to deploy DNSSEC for some of my domains and as I was getting ready I did some reading on the subject. I came across some Microsoft Technet articles talking about Name Resolution Policy Table ...
2
votes
1answer
238 views

Outline squid server - redirect traffic with pf

What's my goal: know what employee are looking in Internet (what pages, how long etc; no caching). What I did: install squid on openBSD Problem: I see whole traffic (tcpdump), but I can't redirect ...
2
votes
1answer
686 views

OpenBSD pf - implementing the equivalent of an iptables DNAT

Short version Server A (OpenBSD 4.7) connects to server B (Windows). IP of server B changes. Server A should be able to connect to server B to both the old and new IP. We cannot configure multiple ...
2
votes
2answers
220 views

How to configure something like “Reflexive ACL” on OpenBSD?

My U-Verse modem has something called "Reflexive ACL" described as Reflexive ACL: When IPv6 is enabled, you can enable Reflexive Access Control Lists to deny inbound IPv6 traffic unless this ...
2
votes
3answers
1k views

How to make OpenVPN use VIA Padlock on OpenBSD?

I've bought a VIA based router for the only purpose to run OpenVPN on it. Unfortunately it seems that Padlock is not used. Here is the important part from dmesg: OpenBSD 4.8 (GENERIC) #136: Mon Aug ...
2
votes
1answer
414 views

Inaccurate bandwidth limiting in altq queues

I'm setting up an environment where I have one Linux server, one OpenBSD router and one Linux client and I want to be able to limit how much bandwidth the client should be able to use. I've been ...
2
votes
1answer
643 views

VPN with NAT-T between OpenBSD and Microsoft ISA

A customer of ours is setting up an ISA-Cluster in private network address range and we have to build a VPN connection with them. There is no way avoiding NAT-T and this is where we get to a problem: ...
2
votes
2answers
897 views

Ubuntu 12.04 LTS KVM host with a OpenBSD 5.4 guest, `virsh shutdown` not working / freezing guest

I have Ubuntu 12.04 LTS KVM host with a OpenBSD 5.4 guest. I am having an issue with virsh shutdown not working / freezing guest. After calling shutdown, guest freezes and is unresponsive. Any ssh ...
2
votes
2answers
184 views

OpenBSD - Image on a new, bigger disk - how to use the extra space

Our present OpenBSD server needed more disk space, so we replaced the 13 GB disk (it's pretty old too) with 150GB. An image was made and then restored on the new disk. So far, so good. The new disk ...