Questions tagged [openbsd]
OpenBSD is a free, multi-platform 4.4BSD-based UNIX-like operating system with a focus on security, portability, standardization, code correctness, proactive security and integrated cryptography.
224
questions
0
votes
0
answers
21
views
WebDAV server on OpenBSD [closed]
I'm trying to set up a personal server on OpenBSD. One of the things I need the server to be able to do is keep my Zotero files backed up, and Zotero uses WebDAV to do that. So far as I've been able ...
- 101
0
votes
0
answers
125
views
How to create a non-admin user in OpenBSD to be able to login as a root like in Linux-based systems?
Usually, in Linux-based systems I create new user without admin rights (sudo group).
I'm able to login as that user via SSH and then, when I need admin rights, I can just,
$ su root
...entering pwd...
...
1
vote
0
answers
44
views
permission denied when writing to mounted directory exported by NFS server running on OpenBSD OS
I have a default installation of openbsd, with portmap, mountd, nfsd services started by via rcctl. I have following entry in /etc/exports
/nfs/testdir -alldirs -maproot=root -network=192.168.0 -mask=...
- 133
0
votes
1
answer
305
views
How to add a static route to a host via interface using 'route' tool?
I'm new to *bsd systems. Usually in linux-based I add routes like that:
# eth0 ip address
ip a add 10.100.1.2 dev eth0
# gw is accessible via eth0 interface
ip route add 10.100.2.1 dev eth0
# ...
0
votes
0
answers
42
views
migrating openBSD VM from linux host to linux host messes up name resolution
I created an OpenBSD guest VM on fedora. I migrated the qcow2 image from fedora to rockylinux and used it create a new VM.
virt-install \
--import \
--virt-type=kvm \
--name=...
- 133
1
vote
1
answer
102
views
OpenBSD 7.2: Mailbox file in users' home directory - use Postfix or stick to default sendmail?
I need to setup a mail server with a bit unusual requirements:
OpenBSD is a must. Probably latest version, 7.2.
All mails have to be stored in aa Mailbox file located in user's home directory.
Well, ...
- 21
1
vote
1
answer
221
views
Simple OpenBSD NAT router not working
I'm toying around with using OpenBSD as a NAT router behind Starlink but efforts with the NAT are failing even in the simplest cases. I've probably simply been staring at it too long and need an ...
- 181
1
vote
0
answers
46
views
Mysterious/Unknown IPs keep getting whitelisted by spamd
I have an OpenBSD 7.1 mail server running OpenSMTPD with spamd.
I notice mysterious IP addresses in /var/log/maillog, such as:
smtp connected address=162.142.125.222 host=scanner-25.ch1.censys-scanner....
- 11
0
votes
1
answer
127
views
Is XNU based on FreeBSD or OpenBSD?
I'm curious, is the xnu kernel based on FreeBSD, OpenBSD, or some other BSD distribution?
Thank you,
James Pedersen
- 121
2
votes
0
answers
214
views
httpd on OpenBSD: How to Redirect URLs Ending In '.php'?
I am running an httpd(8) web server on OpenBSD. php-8.1.9 is used to serve php. In /etc/httpd.conf I have the following (example.com is a placeholder for the actual domain):
server "example.com&...
1
vote
1
answer
630
views
Unable to create inetOrgPerson in LDAP structure
I have an LDAP server running on OpenBSD 7.1 using the native ldapd implementation. I've created a basic DIT, and when attempting to add a user, I get:
# ldapadd -vv -H ldaps://hypnos.spookyinternet....
- 25
1
vote
1
answer
284
views
Setting up LDAPD service on OpenBSD
I have an OpenBSD 7.1 server with the LDAPD service running. At the moment it is working as expected, however I am new to managing an LDAP organization, and am unsure about some of the configuration ...
- 25
0
votes
0
answers
104
views
PF doesn't pass requests from WAN to LAN
I am new to pf rules and while I am reading anything that I can find on internet from official sources(openbsd handbook) and some tutorials, I am trying to put together some pf rules on a openbsd 7 ...
- 19
1
vote
1
answer
137
views
How to create service/port specific subdomains in OpenBSD vm
I am creating a website in an OpenBSD vm, and I plan to have different services on it that will be pointed to by their respective subdomains (irc.example.com -> example.com:6697, img.example.com -&...
1
vote
1
answer
331
views
403 Page recieved when accessing OpenBSD httpd page
I am writing a static webpage on an OpenBSD vm (here called example.com), and when I access the server with it's domain name over http I get httpd's 403 page, when I use telnet example.com 80 I get
...
2
votes
1
answer
76
views
why does "pkg_info -Q bash" on OpenBSD give me an "empty" result?
i installed a fresh OpenBSD server on a Linux - Proxmox server with kvm.
I tried to to install bash but pkg_info returns "empty":
root@openbsd:~# echo $PKG_PATH
https://cdn.openbsd.org/pub/...
- 21
1
vote
2
answers
186
views
How do i get PostgreSQL on Open BSD 7.0 to run
Trying to start postgresql on openbsd 7.0 but can't seem to get it to work. so far I tried this tutorial
and looking around a bit on google. I'm new to OpenBSD.
# rcctl -df start postgresql
doing ...
- 11
0
votes
1
answer
93
views
how to use terraform with nsd?
is it possible to manage nsd dns with terraform? i keep getting a NOTINT error but per man page there is an option to accept UPDATE opcodes. when i set drop-updates: no nsd starts fine but i get the ...
0
votes
1
answer
229
views
OpenBSD, mtu=0 on enc0 device, ping packets don't pass
On OpenBSD 6.9 I tried to install an IPSec (IPv4, IKEv2, ESP, tunnel) network-to-network gateway to communicate with a Palo Alto gateway (which I do not control).
ikectl show sa leads me to believe ...
- 203
0
votes
0
answers
796
views
Disabling certain OpenSSH keys on OpenBSD: why the corresponding 'sshd_config' entries are ignored and why 'ssh-keygen -A' generates forbidden keys?
I am trying to achieve the followings on my OpenBSD 6.9 servers:
Forbidding the use of all keys but the ssh-ed25519 one on both SERVER and CLIENT sides.
Limiting ssh-keygen -A to generate keys only ...
- 11
0
votes
2
answers
140
views
OpenBSD NIC Cards Not Configured (Kernel Edit)
I have recently installed OpenBSD v6.8 on a SuperMicro server. During the initial installation I couldn't setup the NIC cards because I didn't have any IP Information. I assume this setup skip caused ...
- 1
1
vote
0
answers
120
views
How to disable all default cryptographic algorithms but the explicitly defined ones in OpenIKED?
I am having issues with setting up highly secure but still high performance IKEv2 tunnels between multiple data centers on OpenBSD nodes, by using very strict security features and allowing the use of ...
- 11
0
votes
1
answer
2k
views
IBM i SSHD failing all authentications
I am trying to access the SSHD server on my IBMi. However I keep getting Permission denied (publickey,password,keyboard-interactive)..
I am running v7r2 on my IBMi
This was working until ran the ...
0
votes
0
answers
80
views
Can I customize all my operating systems that I will install on kvm/qemu with Virt-customize?
For my private cloud provider, I want to create a virtual machine from the operating system iso I want using kvm/qemu (since I was looking for an alternative to cloud-init, I chose to customize it ...
- 16
1
vote
0
answers
450
views
Rewriting user folder url in OpenBSD httpd
I'm using OpenBSD and its httpd. We have a community with users and currently the url to their folder is:
example.com/users/username
However, what we want is to get
example.com/~username
This is my ...
- 111
2
votes
1
answer
763
views
Acquiring a wildcard certificate from Let's Encrypt via `acme-client(1)`
I have a valid certificate from Let's Encrypt that covers both foo.bar and www.foo.bar. I'd like to add a wiki.foo.bar and likely many others in the future, so a wildcard certificate sounds ...
- 121
3
votes
1
answer
887
views
OpenBSD relayd forward to web server based on HTTP request path
I have two web servers running on my machine. One is listening on port 8080 and the other on 8081.
$ curl http://localhost:8080
I am the API
$ curl http://localhost:8081
<html> <head>&...
- 224
1
vote
0
answers
382
views
I fail to configure Pf of OpenBSD gateway
I have an OpenBSD server that I want to use as a gateway.
OBSD server has the following interfaces -
em5 (130...** ext.IP with internet connectivity)
em0 (internal IP - 172.16.0.0/17)
My default ...
- 167
1
vote
1
answer
148
views
Does OpenBSD have anything equivalent to Debian's /etc/network/if-up.d/ scripts?
I want to run a script after an OpenBSD interface has been configured (dynamic IP address assigned, routes configured, etc.) I can't find anything in the hostname.if man page about this; does such a ...
- 143
2
votes
1
answer
246
views
Almost empty pf.conf still logs packets
I have an issue that my pf logs many packets that it's not supposed to log. I reproduced it with almost empty pf.conf:
set skip on lo
and it still logs some packets. I think that all those packets ...
- 261
0
votes
1
answer
346
views
enabling telegraf system input plugin on OpenBSD 6.5
https://github.com/influxdata/telegraf/tree/master/plugins/inputs/system
Could use some examples. I have tried adding values listed in the above page to
[[inputs.system]]
For example:
[[inputs....
- 911
0
votes
1
answer
266
views
OpenBSD 6.5 /etc/mail/aliases correct format?
What is the correct entry format for an alias?
Right now I have
root: xxxx@somewebsite.com
Running newaliases -f /etc/mail/aliases yields a syntax error. Are there examples in the manual page ...
user460340
0
votes
2
answers
91
views
While attempting to build telegraf on OpenBSD 6.4, gmake said:
I have followed the instructions from this page but gmake fails.
Am I missing a dependency?
https://www.tumfatig.net/20180905/running-telegraf-openbsd
dep ensure -vendor-only
SIGSYS: bad system call
...
- 911
4
votes
1
answer
1k
views
Changing PF rules on the fly to mitigate damage of DDoS (OpenBSD 6.4)
This is a two part question, really. Keep in mind that I am a developer not a system admin, but being the only employee in the company, I wear ALL the hats.
I have deployed my server with two ...
- 171
2
votes
0
answers
671
views
Run DHCP only after wpa_supplicant has connected (wired 802.1x)
I have a network here that uses 802.1x on the wired network to authenticate for greater privilege, BUT without (or "before") auth will place the machine in a default/quarantine network. For good luck, ...
- 121
1
vote
3
answers
1k
views
Google VPN not supporting claimed ciphers
Trying to make an IPSec IKEv2 connection with Google Cloud VPN services.
According to them, they support AES-CBC ciphers for Encyprtion at phase 1, but at the moment of negotiation with the on-...
google-cloud-platform
1
vote
1
answer
409
views
How to migrate Linux iptables scripts to OpenBSD/macOS pf
I am building a VPN server on macOS based on this instruction:
https://www.digitalocean.com/community/tutorials/how-to-set-up-an-ikev2-vpn-server-with-strongswan-on-ubuntu-18-04-2,
and stuck at ...
- 23
3
votes
1
answer
397
views
Why does spampd fail with socket connection failure on openbsd?
I'm having some trouble getting spampd to work in OpenBSD. First off, if I try to specify the daemon flags in my /etc/rc.conf.local like so:
spampd_flags="--port=10025 --relayhost=127.0.0.1:10027 --...
- 1,090
6
votes
1
answer
273
views
OpenBSD not responding to arp queries
I am setting up an OpenBSD system as a router, I have one interface as the upstream, then another with a vlan configured:
Upstream(em0):
inet 10.0.2.20 255.255.255.0 NONE description upstream
...
3
votes
1
answer
98
views
What are the steps to generalize an OpenBSD 6.1 host?
What are the steps are needed to generalize OpenBSD so that it could be used as a template or virtual appliance without disclosing any information of the environment that baked it, or put the user of ...
- 462
2
votes
0
answers
538
views
OpenBSD 6.x usb installer can't find pkg sets
For some reason the OpenBSD 6.2 installer needs the base packages to be in "6.2/amd64" but these directories are not found by the installer. I think I might need to mount a disk partition manually but ...
- 911
0
votes
2
answers
649
views
openbsd pf firewall - how can I tell what is being blocked?
I am in a dire situation. Our exchange server disks have failed. I can still use the application as the os disks are unaffected, and I need to do an emergency migration to office365.
We have an ...
2
votes
2
answers
387
views
OpenBSD routing issue: some sites work fine, others timeout
The problem I'm experiencing is that accessing some internet site work fine, and others timeout. For example, traceroute to www.apple.com is broken, where openbsd.org is fine.
┌──────────────┐ ┌...
- 131
1
vote
1
answer
605
views
Openiked - Unable to ping the remote gateway
I set up a tunnel ipsec with strongswan and openiked with x509 PKI. The tunnel establish correctly but I have some problems.
The gateway with iked can not ping the local IP of router vyatta but ...
- 66
1
vote
0
answers
439
views
How to install OpenBSD 6.2 guest in XenServer 7?
I'm trying to create new VM from vanilla OpenBSD 6.2 install CD on XenServer 7. I can't even boot install CD. Basically, i get this:
Boot device: CD-Rom199MB medium detected
- success.
CR-ROM: ...
- 13
1
vote
0
answers
40
views
OpenBSD IRQ already in use error
My singleboard compter (SBC) have 4-UART ports. They all use one IRQ with different addresses. SBC BIOS can not divide them all on different IRQ (only 2 IRQ for them). Then i setup only one port using ...
- 249
2
votes
1
answer
1k
views
pkg_add can't install anything on openbsd 6.1
When I attempt to pkg_add screen or any other pkg, I see:
ftp://ftp3.usa.openbsd.org/pub/OpenBSD/4.8/packages/i386/screen-4.0.3p1.tgz: unsigned package (signify(1) doesn't see old-style signatures)
...
- 911
3
votes
0
answers
463
views
Multiple relays with OpenSMTPd
We use mailhog in development / testing and hook it up to postfix. It so that if you mail to an email address ending in .external, it will be relayed to a real server. And, if doesn't we relay it to ...
- 130
1
vote
1
answer
264
views
VirtualBox guest OS doesn't expand after resizing VDI file [closed]
My host OS is OS X El Capitan. My guest OS, OpenBSD 6.1, ran out of disk space, so I ran VBoxManage modifymedium disk OpenBSD\ 6.1.vdi --resize 15000 to resize my VDI from 4GB to 15GB. However my ...
- 123
1
vote
1
answer
696
views
How to configure Heimdal Kerberos to use OpenLDAP?
From http://www.h5l.org/manual/HEAD/info/heimdal/Using-LDAP-to-store-the-database.html#Using-LDAP-to-store-the-database
A current release of Heimdal, configured with --with-openldap=/usr/local
The ...
- 214