Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
The results are in! See what nearly 90,000 developers picked as their most loved, dreaded, and desired coding languages and more in the 2019 Developer Survey.

Questions tagged [openbsd]

OpenBSD is a free, multi-platform 4.4BSD-based UNIX-like operating system with a focus on security, portability, standardization, code correctness, proactive security and integrated cryptography.

0
votes
1answer
21 views

While attempting to build telegraf on OpenBSD 6.4, gmake said:

I have followed the instructions from this page but gmake fails. Am I missing a dependency? https://www.tumfatig.net/20180905/running-telegraf-openbsd dep ensure -vendor-only SIGSYS: bad system call ...
2
votes
1answer
79 views

Changing PF rules on the fly to mitigate damage of DDoS (OpenBSD 6.4)

This is a two part question, really. Keep in mind that I am a developer not a system admin, but being the only employee in the company, I wear ALL the hats. I have deployed my server with two ...
1
vote
0answers
129 views

Run DHCP only after wpa_supplicant has connected (wired 802.1x)

I have a network here that uses 802.1x on the wired network to authenticate for greater privilege, BUT without (or "before") auth will place the machine in a default/quarantine network. For good luck, ...
1
vote
1answer
169 views

Google VPN not supporting claimed ciphers

Trying to make an IPSec IKEv2 connection with Google Cloud VPN services. According to them, they support AES-CBC ciphers for Encyprtion at phase 1, but at the moment of negotiation with the on-...
1
vote
1answer
102 views

How to migrate Linux iptables scripts to OpenBSD/macOS pf

I am building a VPN server on macOS based on this instruction: https://www.digitalocean.com/community/tutorials/how-to-set-up-an-ikev2-vpn-server-with-strongswan-on-ubuntu-18-04-2, and stuck at ...
3
votes
1answer
158 views

Why does spampd fail with socket connection failure on openbsd?

I'm having some trouble getting spampd to work in OpenBSD. First off, if I try to specify the daemon flags in my /etc/rc.conf.local like so: spampd_flags="--port=10025 --relayhost=127.0.0.1:10027 --...
4
votes
0answers
82 views

OpenBSD not responding to arp queries

I am setting up an OpenBSD system as a router, I have one interface as the upstream, then another with a vlan configured: Upstream(em0): inet 10.0.2.20 255.255.255.0 NONE description upstream ...
3
votes
1answer
62 views

What are the steps to generalize an OpenBSD 6.1 host?

What are the steps are needed to generalize OpenBSD so that it could be used as a template or virtual appliance without disclosing any information of the environment that baked it, or put the user of ...
2
votes
0answers
264 views

OpenBSD 6.x usb installer can't find pkg sets

For some reason the OpenBSD 6.2 installer needs the base packages to be in "6.2/amd64" but these directories are not found by the installer. I think I might need to mount a disk partition manually but ...
0
votes
2answers
147 views

openbsd pf firewall - how can I tell what is being blocked?

I am in a dire situation. Our exchange server disks have failed. I can still use the application as the os disks are unaffected, and I need to do an emergency migration to office365. We have an ...
1
vote
1answer
97 views

OpenBSD routing issue: some sites work fine, others timeout

The problem I'm experiencing is that accessing some internet site work fine, and others timeout. For example, traceroute to www.apple.com is broken, where openbsd.org is fine. ┌──────────────┐ ┌...
1
vote
1answer
230 views

Openiked - Unable to ping the remote gateway

I set up a tunnel ipsec with strongswan and openiked with x509 PKI. The tunnel establish correctly but I have some problems. The gateway with iked can not ping the local IP of router vyatta but ...
1
vote
0answers
238 views

How to install OpenBSD 6.2 guest in XenServer 7?

I'm trying to create new VM from vanilla OpenBSD 6.2 install CD on XenServer 7. I can't even boot install CD. Basically, i get this: Boot device: CD-Rom199MB medium detected - success. CR-ROM: ...
1
vote
0answers
23 views

OpenBSD IRQ already in use error

My singleboard compter (SBC) have 4-UART ports. They all use one IRQ with different addresses. SBC BIOS can not divide them all on different IRQ (only 2 IRQ for them). Then i setup only one port using ...
2
votes
1answer
429 views

pkg_add can't install anything on openbsd 6.1

When I attempt to pkg_add screen or any other pkg, I see: ftp://ftp3.usa.openbsd.org/pub/OpenBSD/4.8/packages/i386/screen-4.0.3p1.tgz: unsigned package (signify(1) doesn't see old-style signatures) ...
3
votes
0answers
142 views

Multiple relays with OpenSMTPd

We use mailhog in development / testing and hook it up to postfix. It so that if you mail to an email address ending in .external, it will be relayed to a real server. And, if doesn't we relay it to ...
1
vote
1answer
106 views

VirtualBox guest OS doesn't expand after resizing VDI file [closed]

My host OS is OS X El Capitan. My guest OS, OpenBSD 6.1, ran out of disk space, so I ran VBoxManage modifymedium disk OpenBSD\ 6.1.vdi --resize 15000 to resize my VDI from 4GB to 15GB. However my ...
1
vote
1answer
220 views

How to configure Heimdal Kerberos to use OpenLDAP?

From http://www.h5l.org/manual/HEAD/info/heimdal/Using-LDAP-to-store-the-database.html#Using-LDAP-to-store-the-database A current release of Heimdal, configured with --with-openldap=/usr/local The ...
0
votes
1answer
141 views

How to hide/remove original source IP address when using OpenSMTPD?

I'm trying to figure out how to remove/hide the originating source IP address of every mail being sent using OpenSMTPD? To do the equivalent in postfix, it would be: http://integer13.wordpress.com/...
1
vote
1answer
883 views

During OpenBSD installation, what is “DNS domain name” for?

During the installation of OpenBSD 6.1, right after setting up network interfaces, the installer prompts me: DNS domain name? (e.g. 'bar.com') [my.domain] I am not sure what this setting is for, I ...
9
votes
1answer
780 views

OpenBSD route via different gateways which have same IP but on different interfaces

I have multiple VPN connections which use the same gateway IP (I do not have the ability to change this as it is out of my control). These VPNs all provide access to different networks, and the ...
0
votes
2answers
222 views

OpenBSD sshd in rdomain

I am trying to set up a redundant CARP cluster with routing separation with rtables. All works fine, but how do i tell sshd to start only in rdomain 2? I know i can start it manually with # route -...
2
votes
1answer
3k views

OpenBSD: How to use `relayd` and `httpd` for redirecting subdomain requests

Situation I created the following setup on OpenBSD: So I have my OpenBSD server on 192.168.1.250 redirecting all http-requests to the host-vm on 192.168.30.2. The host-vm itself operates nginx for ...
2
votes
0answers
189 views

Can't ping remote host through nat on ipsec enc0 (mtu=0)

I'm up ipsec vpn to remote host. Since the remote host accepts only one ip i'm up nat for local net on enc0. Ping from ipsec host is ok: PING 172.20.162.150 (172.20.162.150): 56 data bytes 64 bytes ...
1
vote
3answers
203 views

syslogd no such file or directory - OpenBSD 3.9

OK - long story short: I have OpenBSD box that was setup as a network appliance (long time ago) I have returned to life. Several errors I am working on and could use any help I can get. Errors on ...
1
vote
0answers
97 views

ripd ospfd and bgpd all with syntax error on line 1

I'm using an OpenBSD 5.9 VM and installed quagga recently. I'm unable to run any dynamic routing protocol (ripd -d, ospfd -d or bgpd -d) and I get always the same error message, example for RIP #...
1
vote
0answers
109 views

OpenBSD. etherip tunnel do not makes connection

I try to create a tunnel through etherip. And I did read man pages etherip in OpenBSD. But this example aren't working in my servers. cat /etc/sysctl.conf net.inet.etherip.allow=1 net.inet.ip....
7
votes
1answer
703 views

Multi-homed OpenBSD system: Policy based routing vs. mpath default routes

TL;DR Will OpenBSD policy based routing help with a multi-homed server/gateway situation? If so, how do I configure it? Long Form I'm managing an OpenBSD with two ISP links and VPN tunnels to ...
1
vote
1answer
1k views

PF based gateway firewall for Openbsd 6.0

Currenly I am looking to create an OpenBSD 6.0 pf based gateway. Based on what I read in the pf manual pages and OpenBSD pf FAQ, and some examples on the internet, I was able to configure a firewall. ...
2
votes
0answers
54 views

OpenBSD login.conf statement for nat-translated radius clients to ID as public address instead of private?

I'm on OBSD6.0 behind a NAT firewall and attempting to authenticate against a RADIUS server on the outside. The RADIUS server gets the internal (private) address of the client system, not what the ...
2
votes
0answers
418 views

Configuring PF to route between routing domains

I've got an OpenBSD 6.0 box running as a router / firewall. It's got three physical network connections and one GRE tunnel: em0: Internet (routing domain 0) em1: Internal LAN private IPs (routing ...
0
votes
1answer
951 views

OpenBSD 6.0 chrooted httpd with php 7.0 mail() works, but no mail goes out?

I started with a fresh install of OpenBSD 6.0 which has a chroot (/var/www) on their httpd server (not Apache). I installed PHP 7.0 and set up the php-fpm using the binary installs. In the web root ...
0
votes
1answer
1k views

DNS inside PHP-FPM chroot jail on OpenBSD 6.0 running nginx 1.10.1, PHP 7.0.8, MariaDB 10.0.25 and MediaWiki 1.27.1

I'm running nginx 1.10.1 on OpenBSD 6.0 with the packages php-7.0.8p0, php-curl-7.0.8p0, php-fastcgi-7.0.8p0, php-gd-7.0.8p0, php-mcrypt-7.0.8p0, php-mysqli-7.0.8p0, mariadb-client-10.0.25v1 and ...
0
votes
1answer
2k views

Debian won't start SSH on startup

I had some trouble with my virtual machine's network interfaces today so had to make some alterations to my interfaces file. Since I have done this, when I boot into my Debian 8.6 VM I receive the ...
0
votes
1answer
607 views

Nginx returning 404 on seemingly valid path

I'm trying to serve static files directly with a location block like this: location /static/ { alias /opt/graphite/webapp/content/; } But when I make a request for anything matching /static/, I ...
2
votes
1answer
82 views

OpenBSD disk devices prefixes

Under OpenBSD, /dev/rsd0a means: raw access to the first, or root, slice (a) of the first (0) SCSI (sd) disk r says that the device is accessed in raw, character mode instead of the standard block ...
1
vote
1answer
218 views

OpenVPN Client Config Dir - where common name includes non-utf8 characters?

How do one go about handling individual client configurations in OpenVPN where the common name of the certificate includes non-UTF8 characters (Such as Swedish names)? I had a look at the OpenVPN ...
-1
votes
1answer
48 views

BSD Connection 'Drops'

I've been setting up a BSD server and every thing went fine. It still works fine except on my own IP address I cannot connect to my webserver at all and with SSH I can login but then as soon as I type ...
2
votes
1answer
191 views

https not working on OpenBSD 5.8 & 5.9 guests running in VMWare Fusion 8 Pro

The set up is as per title: freshly installed OpenBSD (I've tested both 5.8 and 5.9) are having networking issues when run inside VMWare Fusion 8 Pro (OS X host). Downloading http files of any size ...
2
votes
0answers
2k views

tuning tips for CPU load for OpenBSD guest on qemu-kvm Server

I have a CentOS KVM Server running 1 OpenBSD, 1 CentOS and 2 FreeBSD guests. Only the openBSD guest has a higher CPU load on the KVM Server. 8-10% on Server whilst Guest is at idle. The only service ...
1
vote
1answer
863 views

How Can I Create a Private OpenBSD Mirror?

How can I create a private OpenBSD mirror. I'd like my mirror to have all the packages of the latest release for my preferred architectures (amd64 and i386) and everything else contained in a typical ...
3
votes
1answer
770 views

OpenBSD routing: Cannot reach gateway from IF configured to static block

When trying to set up an OpenBSD router I've run into an apparent routing problem. I have a 1U machine with 6 gigabit NICs (em0-em5). My ISP provided me with the following: xx.xx.97.246/28 static ...
0
votes
1answer
91 views

How to start postgresql server with the socket at a different place?

Good morning. The title says it, but let me precise it. I am working with openbsd. The web server is chrooted in /var/www. So the good thing would be that postgresgl place its socket (and the lock, I ...
4
votes
1answer
113 views

Is reverse DNS a good method for promoting grey IPs from trusted domains to white?

I'm trying to set up a mail server using OpenBSD, OpenSMTPD, spamd, and pf. The first problem I've encountered is that many large webmail providers - like Gmail - will retry delivery from a different ...
2
votes
1answer
1k views

What's the proper way to get smtpd (OpenSMTPD) to pick up changes to smtpd.conf?

I'm new to OpenBSD and in the process of learning OpenSMTPD. I would have expected some sort of "restart" option from the smtpctl command, but it only has a stop with no start which might force a ...
6
votes
2answers
1k views

Setting up IPSEC on LAN between two hosts (OpenBSD)

Trying to use IPSEC between two hosts on a LAN. No VPN involved Using OpenBSD 5.8 (in VirtualBox). I'd prefer to use OpenBSD's built-in support for IPSEC and key exchange and not a third-party. Two ...
0
votes
1answer
818 views

Authenticate SMB connections on OpenBSD using Active Directory

I have an OpenBSD box that is being used primarily as an SFTP server. Some users running windows need the ability to map a share from this server using SMB. Rather than setting up individual accounts ...
2
votes
2answers
474 views

IPv6 IPsec between two native IPv6 networks

Assume I have two networks, A and B, on sites either side of the globe. Both have native IPv6 and are using (hypothetically) just IPv6. IPv4 no longer exists. They can both access the internet ...
0
votes
1answer
642 views

Configure Squid Proxy Server to use TCP for DNS lookups? [closed]

Is there a way to configure squid 3.5.1 to use TCP for DNS lookups? I've setup up the proxy server to use TCP for lookups by adding "options tcp" to my /etc/resolv.conf, but squid seems to be doing ...
1
vote
0answers
918 views

Openbsd 5.7: IPv6 advertisement not working

--context-- I have a Sokeris with 8 interfaces: em0 is connected to a bridge router (ISP) and em2 is connected to my DMZ network (web servers). I got from my ISP a /56 prefix and 2 DNS IPs but no ...