Questions tagged [openbsd]

OpenBSD is a free, multi-platform 4.4BSD-based UNIX-like operating system with a focus on security, portability, standardization, code correctness, proactive security and integrated cryptography.

Filter by
Sorted by
Tagged with
1
vote
0answers
23 views

How to disable all default cryptographic algorithms but the explicitly defined ones in OpenIKED?

I am having issues with setting up highly secure but still high performance IKEv2 tunnels between multiple data centers on OpenBSD nodes, by using very strict security features and allowing the use of ...
0
votes
1answer
54 views

IBM i SSHD failing all authentications

I am trying to access the SSHD server on my IBMi. However I keep getting Permission denied (publickey,password,keyboard-interactive).. I am running v7r2 on my IBMi This was working until ran the ...
0
votes
0answers
24 views

Can I customize all my operating systems that I will install on kvm/qemu with Virt-customize?

For my private cloud provider, I want to create a virtual machine from the operating system iso I want using kvm/qemu (since I was looking for an alternative to cloud-init, I chose to customize it ...
0
votes
0answers
112 views

Rewriting user folder url in OpenBSD httpd

I'm using OpenBSD and its httpd. We have a community with users and currently the url to their folder is: example.com/users/username However, what we want is to get example.com/~username This is my ...
1
vote
0answers
90 views

Acquiring a wildcard certificate from Let's Encrypt via `acme-client(1)`

I have a valid certificate from Let's Encrypt that covers both foo.bar and www.foo.bar. I'd like to add a wiki.foo.bar and likely many others in the future, so a wildcard certificate sounds ...
0
votes
1answer
195 views

OpenBSD relayd forward to web server based on HTTP request path

I have two web servers running on my machine. One is listening on port 8080 and the other on 8081. $ curl http://localhost:8080 I am the API $ curl http://localhost:8081 <html> <head>&...
0
votes
0answers
34 views

phpldapadmin doesn't connect, ldapsearch works fine

I’ve set up on OpenBSD, using the latest ports package. The same server runs the correspondig ldapd daemon. Connection works fine wenn using ldapsearch or similar. However there seems to be a very ...
0
votes
0answers
203 views

I fail to configure Pf of OpenBSD gateway

I have an OpenBSD server that I want to use as a gateway. OBSD server has the following interfaces - em5 (130...** ext.IP with internet connectivity) em0 (internal IP - 172.16.0.0/17) My default ...
0
votes
1answer
80 views

Does OpenBSD have anything equivalent to Debian's /etc/network/if-up.d/ scripts?

I want to run a script after an OpenBSD interface has been configured (dynamic IP address assigned, routes configured, etc.) I can't find anything in the hostname.if man page about this; does such a ...
2
votes
1answer
143 views

Almost empty pf.conf still logs packets

I have an issue that my pf logs many packets that it's not supposed to log. I reproduced it with almost empty pf.conf: set skip on lo and it still logs some packets. I think that all those packets ...
0
votes
1answer
249 views

enabling telegraf system input plugin on OpenBSD 6.5

https://github.com/influxdata/telegraf/tree/master/plugins/inputs/system Could use some examples. I have tried adding values listed in the above page to [[inputs.system]] For example: [[inputs....
0
votes
1answer
132 views

OpenBSD 6.5 /etc/mail/aliases correct format?

What is the correct entry format for an alias? Right now I have root: xxxx@somewebsite.com Running newaliases -f /etc/mail/aliases yields a syntax error. Are there examples in the manual page ...
0
votes
2answers
65 views

While attempting to build telegraf on OpenBSD 6.4, gmake said:

I have followed the instructions from this page but gmake fails. Am I missing a dependency? https://www.tumfatig.net/20180905/running-telegraf-openbsd dep ensure -vendor-only SIGSYS: bad system call ...
2
votes
1answer
588 views

Changing PF rules on the fly to mitigate damage of DDoS (OpenBSD 6.4)

This is a two part question, really. Keep in mind that I am a developer not a system admin, but being the only employee in the company, I wear ALL the hats. I have deployed my server with two ...
2
votes
0answers
447 views

Run DHCP only after wpa_supplicant has connected (wired 802.1x)

I have a network here that uses 802.1x on the wired network to authenticate for greater privilege, BUT without (or "before") auth will place the machine in a default/quarantine network. For good luck, ...
1
vote
3answers
650 views

Google VPN not supporting claimed ciphers

Trying to make an IPSec IKEv2 connection with Google Cloud VPN services. According to them, they support AES-CBC ciphers for Encyprtion at phase 1, but at the moment of negotiation with the on-...
1
vote
1answer
267 views

How to migrate Linux iptables scripts to OpenBSD/macOS pf

I am building a VPN server on macOS based on this instruction: https://www.digitalocean.com/community/tutorials/how-to-set-up-an-ikev2-vpn-server-with-strongswan-on-ubuntu-18-04-2, and stuck at ...
2
votes
1answer
289 views

Why does spampd fail with socket connection failure on openbsd?

I'm having some trouble getting spampd to work in OpenBSD. First off, if I try to specify the daemon flags in my /etc/rc.conf.local like so: spampd_flags="--port=10025 --relayhost=127.0.0.1:10027 --...
5
votes
1answer
141 views

OpenBSD not responding to arp queries

I am setting up an OpenBSD system as a router, I have one interface as the upstream, then another with a vlan configured: Upstream(em0): inet 10.0.2.20 255.255.255.0 NONE description upstream ...
3
votes
1answer
82 views

What are the steps to generalize an OpenBSD 6.1 host?

What are the steps are needed to generalize OpenBSD so that it could be used as a template or virtual appliance without disclosing any information of the environment that baked it, or put the user of ...
2
votes
0answers
405 views

OpenBSD 6.x usb installer can't find pkg sets

For some reason the OpenBSD 6.2 installer needs the base packages to be in "6.2/amd64" but these directories are not found by the installer. I think I might need to mount a disk partition manually but ...
0
votes
2answers
227 views

openbsd pf firewall - how can I tell what is being blocked?

I am in a dire situation. Our exchange server disks have failed. I can still use the application as the os disks are unaffected, and I need to do an emergency migration to office365. We have an ...
2
votes
2answers
194 views

OpenBSD routing issue: some sites work fine, others timeout

The problem I'm experiencing is that accessing some internet site work fine, and others timeout. For example, traceroute to www.apple.com is broken, where openbsd.org is fine. ┌──────────────┐ ┌...
1
vote
1answer
449 views

Openiked - Unable to ping the remote gateway

I set up a tunnel ipsec with strongswan and openiked with x509 PKI. The tunnel establish correctly but I have some problems. The gateway with iked can not ping the local IP of router vyatta but ...
1
vote
0answers
363 views

How to install OpenBSD 6.2 guest in XenServer 7?

I'm trying to create new VM from vanilla OpenBSD 6.2 install CD on XenServer 7. I can't even boot install CD. Basically, i get this: Boot device: CD-Rom199MB medium detected - success. CR-ROM: ...
1
vote
0answers
31 views

OpenBSD IRQ already in use error

My singleboard compter (SBC) have 4-UART ports. They all use one IRQ with different addresses. SBC BIOS can not divide them all on different IRQ (only 2 IRQ for them). Then i setup only one port using ...
2
votes
1answer
721 views

pkg_add can't install anything on openbsd 6.1

When I attempt to pkg_add screen or any other pkg, I see: ftp://ftp3.usa.openbsd.org/pub/OpenBSD/4.8/packages/i386/screen-4.0.3p1.tgz: unsigned package (signify(1) doesn't see old-style signatures) ...
3
votes
0answers
280 views

Multiple relays with OpenSMTPd

We use mailhog in development / testing and hook it up to postfix. It so that if you mail to an email address ending in .external, it will be relayed to a real server. And, if doesn't we relay it to ...
1
vote
1answer
168 views

VirtualBox guest OS doesn't expand after resizing VDI file [closed]

My host OS is OS X El Capitan. My guest OS, OpenBSD 6.1, ran out of disk space, so I ran VBoxManage modifymedium disk OpenBSD\ 6.1.vdi --resize 15000 to resize my VDI from 4GB to 15GB. However my ...
1
vote
1answer
436 views

How to configure Heimdal Kerberos to use OpenLDAP?

From http://www.h5l.org/manual/HEAD/info/heimdal/Using-LDAP-to-store-the-database.html#Using-LDAP-to-store-the-database A current release of Heimdal, configured with --with-openldap=/usr/local The ...
0
votes
1answer
375 views

How to hide/remove original source IP address when using OpenSMTPD?

I'm trying to figure out how to remove/hide the originating source IP address of every mail being sent using OpenSMTPD? To do the equivalent in postfix, it would be: http://integer13.wordpress.com/...
1
vote
1answer
2k views

During OpenBSD installation, what is “DNS domain name” for?

During the installation of OpenBSD 6.1, right after setting up network interfaces, the installer prompts me: DNS domain name? (e.g. 'bar.com') [my.domain] I am not sure what this setting is for, I ...
9
votes
1answer
2k views

OpenBSD route via different gateways which have same IP but on different interfaces

I have multiple VPN connections which use the same gateway IP (I do not have the ability to change this as it is out of my control). These VPNs all provide access to different networks, and the ...
0
votes
2answers
680 views

OpenBSD sshd in rdomain

I am trying to set up a redundant CARP cluster with routing separation with rtables. All works fine, but how do i tell sshd to start only in rdomain 2? I know i can start it manually with # route -...
4
votes
1answer
5k views

OpenBSD: How to use `relayd` and `httpd` for redirecting subdomain requests

Situation I created the following setup on OpenBSD: So I have my OpenBSD server on 192.168.1.250 redirecting all http-requests to the host-vm on 192.168.30.2. The host-vm itself operates nginx for ...
2
votes
0answers
297 views

Can't ping remote host through nat on ipsec enc0 (mtu=0)

I'm up ipsec vpn to remote host. Since the remote host accepts only one ip i'm up nat for local net on enc0. Ping from ipsec host is ok: PING 172.20.162.150 (172.20.162.150): 56 data bytes 64 bytes ...
1
vote
3answers
455 views

syslogd no such file or directory - OpenBSD 3.9

OK - long story short: I have OpenBSD box that was setup as a network appliance (long time ago) I have returned to life. Several errors I am working on and could use any help I can get. Errors on ...
1
vote
0answers
135 views

ripd ospfd and bgpd all with syntax error on line 1

I'm using an OpenBSD 5.9 VM and installed quagga recently. I'm unable to run any dynamic routing protocol (ripd -d, ospfd -d or bgpd -d) and I get always the same error message, example for RIP #...
1
vote
0answers
149 views

OpenBSD. etherip tunnel do not makes connection

I try to create a tunnel through etherip. And I did read man pages etherip in OpenBSD. But this example aren't working in my servers. cat /etc/sysctl.conf net.inet.etherip.allow=1 net.inet.ip....
6
votes
1answer
1k views

Multi-homed OpenBSD system: Policy based routing vs. mpath default routes

TL;DR Will OpenBSD policy based routing help with a multi-homed server/gateway situation? If so, how do I configure it? Long Form I'm managing an OpenBSD with two ISP links and VPN tunnels to ...
1
vote
1answer
1k views

PF based gateway firewall for Openbsd 6.0

Currenly I am looking to create an OpenBSD 6.0 pf based gateway. Based on what I read in the pf manual pages and OpenBSD pf FAQ, and some examples on the internet, I was able to configure a firewall. ...
2
votes
0answers
56 views

OpenBSD login.conf statement for nat-translated radius clients to ID as public address instead of private?

I'm on OBSD6.0 behind a NAT firewall and attempting to authenticate against a RADIUS server on the outside. The RADIUS server gets the internal (private) address of the client system, not what the ...
2
votes
0answers
546 views

Configuring PF to route between routing domains

I've got an OpenBSD 6.0 box running as a router / firewall. It's got three physical network connections and one GRE tunnel: em0: Internet (routing domain 0) em1: Internal LAN private IPs (routing ...
0
votes
1answer
1k views

OpenBSD 6.0 chrooted httpd with php 7.0 mail() works, but no mail goes out?

I started with a fresh install of OpenBSD 6.0 which has a chroot (/var/www) on their httpd server (not Apache). I installed PHP 7.0 and set up the php-fpm using the binary installs. In the web root ...
0
votes
1answer
1k views

DNS inside PHP-FPM chroot jail on OpenBSD 6.0 running nginx 1.10.1, PHP 7.0.8, MariaDB 10.0.25 and MediaWiki 1.27.1

I'm running nginx 1.10.1 on OpenBSD 6.0 with the packages php-7.0.8p0, php-curl-7.0.8p0, php-fastcgi-7.0.8p0, php-gd-7.0.8p0, php-mcrypt-7.0.8p0, php-mysqli-7.0.8p0, mariadb-client-10.0.25v1 and ...
0
votes
1answer
945 views

Nginx returning 404 on seemingly valid path

I'm trying to serve static files directly with a location block like this: location /static/ { alias /opt/graphite/webapp/content/; } But when I make a request for anything matching /static/, I ...
2
votes
1answer
116 views

OpenBSD disk devices prefixes

Under OpenBSD, /dev/rsd0a means: raw access to the first, or root, slice (a) of the first (0) SCSI (sd) disk r says that the device is accessed in raw, character mode instead of the standard block ...
1
vote
1answer
280 views

OpenVPN Client Config Dir - where common name includes non-utf8 characters?

How do one go about handling individual client configurations in OpenVPN where the common name of the certificate includes non-UTF8 characters (Such as Swedish names)? I had a look at the OpenVPN ...
-1
votes
1answer
52 views

BSD Connection 'Drops'

I've been setting up a BSD server and every thing went fine. It still works fine except on my own IP address I cannot connect to my webserver at all and with SSH I can login but then as soon as I type ...
2
votes
1answer
200 views

https not working on OpenBSD 5.8 & 5.9 guests running in VMWare Fusion 8 Pro

The set up is as per title: freshly installed OpenBSD (I've tested both 5.8 and 5.9) are having networking issues when run inside VMWare Fusion 8 Pro (OS X host). Downloading http files of any size ...

1
2 3 4 5