Questions tagged [openbsd]

OpenBSD is a free, multi-platform 4.4BSD-based UNIX-like operating system with a focus on security, portability, standardization, code correctness, proactive security and integrated cryptography.

56 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3 votes
1 answer
103 views

What are the steps to generalize an OpenBSD 6.1 host?

What are the steps are needed to generalize OpenBSD so that it could be used as a template or virtual appliance without disclosing any information of the environment that baked it, or put the user of ...
bloudraak's user avatar
  • 462
3 votes
0 answers
520 views

Multiple relays with OpenSMTPd

We use mailhog in development / testing and hook it up to postfix. It so that if you mail to an email address ending in .external, it will be relayed to a real server. And, if doesn't we relay it to ...
tvlooy's user avatar
  • 130
3 votes
2 answers
1k views

IPv6 IPsec between two native IPv6 networks

Assume I have two networks, A and B, on sites either side of the globe. Both have native IPv6 and are using (hypothetically) just IPv6. IPv4 no longer exists. They can both access the internet ...
Matt Hamilton's user avatar
2 votes
0 answers
365 views

httpd on OpenBSD: How to Redirect URLs Ending In '.php'?

I am running an httpd(8) web server on OpenBSD. php-8.1.9 is used to serve php. In /etc/httpd.conf I have the following (example.com is a placeholder for the actual domain): server "example.com&...
Matthew Carlson's user avatar
2 votes
1 answer
111 views

why does "pkg_info -Q bash" on OpenBSD give me an "empty" result?

i installed a fresh OpenBSD server on a Linux - Proxmox server with kvm. I tried to to install bash but pkg_info returns "empty": root@openbsd:~# echo $PKG_PATH https://cdn.openbsd.org/pub/...
joern42's user avatar
  • 21
2 votes
0 answers
795 views

Run DHCP only after wpa_supplicant has connected (wired 802.1x)

I have a network here that uses 802.1x on the wired network to authenticate for greater privilege, BUT without (or "before") auth will place the machine in a default/quarantine network. For good luck, ...
Jim's user avatar
  • 121
2 votes
0 answers
573 views

OpenBSD 6.x usb installer can't find pkg sets

For some reason the OpenBSD 6.2 installer needs the base packages to be in "6.2/amd64" but these directories are not found by the installer. I think I might need to mount a disk partition manually but ...
mr.zog's user avatar
  • 931
2 votes
0 answers
412 views

Can't ping remote host through nat on ipsec enc0 (mtu=0)

I'm up ipsec vpn to remote host. Since the remote host accepts only one ip i'm up nat for local net on enc0. Ping from ipsec host is ok: PING 172.20.162.150 (172.20.162.150): 56 data bytes 64 bytes ...
Morry's user avatar
  • 21
2 votes
0 answers
77 views

OpenBSD login.conf statement for nat-translated radius clients to ID as public address instead of private?

I'm on OBSD6.0 behind a NAT firewall and attempting to authenticate against a RADIUS server on the outside. The RADIUS server gets the internal (private) address of the client system, not what the ...
danno's user avatar
  • 768
2 votes
0 answers
815 views

Configuring PF to route between routing domains

I've got an OpenBSD 6.0 box running as a router / firewall. It's got three physical network connections and one GRE tunnel: em0: Internet (routing domain 0) em1: Internal LAN private IPs (routing ...
PeterM's user avatar
  • 123
2 votes
1 answer
1k views

Openbsd init script for ssh VPN tunnel

I have a server hosting SSH tunnels and Openbsd 4.5 clients connecting to it. Things work just fine but I am in the need of automating the connection from the client to the server. So that if the ...
manthis's user avatar
  • 53
2 votes
1 answer
381 views

Is there an equivalent of LinuxIMQs in BSD?

Is there an equivalent of LinuxIMQs in BSD ? From linuximq.net: The imq device has two common usage cases: Ingress shaping: With linux only egress shaping is possible (except for the ingress ...
Tin's user avatar
  • 21
1 vote
0 answers
543 views

How to create a non-admin user in OpenBSD to be able to login as a root like in Linux-based systems?

Usually, in Linux-based systems I create new user without admin rights (sudo group). I'm able to login as that user via SSH and then, when I need admin rights, I can just, $ su root ...entering pwd... ...
Emilien Vidal's user avatar
1 vote
0 answers
133 views

permission denied when writing to mounted directory exported by NFS server running on OpenBSD OS

I have a default installation of openbsd, with portmap, mountd, nfsd services started by via rcctl. I have following entry in /etc/exports /nfs/testdir -alldirs -maproot=root -network=192.168.0 -mask=...
Kabira  K's user avatar
  • 133
1 vote
1 answer
507 views

Simple OpenBSD NAT router not working

I'm toying around with using OpenBSD as a NAT router behind Starlink but efforts with the NAT are failing even in the simplest cases. I've probably simply been staring at it too long and need an ...
Brian M. Hunt's user avatar
1 vote
0 answers
66 views

Mysterious/Unknown IPs keep getting whitelisted by spamd

I have an OpenBSD 7.1 mail server running OpenSMTPD with spamd. I notice mysterious IP addresses in /var/log/maillog, such as: smtp connected address=162.142.125.222 host=scanner-25.ch1.censys-scanner....
Joe Blough's user avatar
1 vote
2 answers
241 views

How do i get PostgreSQL on Open BSD 7.0 to run

Trying to start postgresql on openbsd 7.0 but can't seem to get it to work. so far I tried this tutorial and looking around a bit on google. I'm new to OpenBSD. # rcctl -df start postgresql doing ...
bill's user avatar
  • 11
1 vote
0 answers
148 views

How to disable all default cryptographic algorithms but the explicitly defined ones in OpenIKED?

I am having issues with setting up highly secure but still high performance IKEv2 tunnels between multiple data centers on OpenBSD nodes, by using very strict security features and allowing the use of ...
Tony's user avatar
  • 11
1 vote
0 answers
593 views

Rewriting user folder url in OpenBSD httpd

I'm using OpenBSD and its httpd. We have a community with users and currently the url to their folder is: example.com/users/username However, what we want is to get example.com/~username This is my ...
ffuentes's user avatar
  • 111
1 vote
0 answers
446 views

I fail to configure Pf of OpenBSD gateway

I have an OpenBSD server that I want to use as a gateway. OBSD server has the following interfaces - em5 (130...** ext.IP with internet connectivity) em0 (internal IP - 172.16.0.0/17) My default ...
Aravindh Sathish's user avatar
1 vote
3 answers
1k views

Google VPN not supporting claimed ciphers

Trying to make an IPSec IKEv2 connection with Google Cloud VPN services. According to them, they support AES-CBC ciphers for Encyprtion at phase 1, but at the moment of negotiation with the on-...
jacktrades's user avatar
1 vote
0 answers
461 views

How to install OpenBSD 6.2 guest in XenServer 7?

I'm trying to create new VM from vanilla OpenBSD 6.2 install CD on XenServer 7. I can't even boot install CD. Basically, i get this: Boot device: CD-Rom199MB medium detected - success. CR-ROM: ...
woytekm's user avatar
  • 13
1 vote
0 answers
46 views

OpenBSD IRQ already in use error

My singleboard compter (SBC) have 4-UART ports. They all use one IRQ with different addresses. SBC BIOS can not divide them all on different IRQ (only 2 IRQ for them). Then i setup only one port using ...
Xaver's user avatar
  • 249
1 vote
3 answers
1k views

syslogd no such file or directory - OpenBSD 3.9

OK - long story short: I have OpenBSD box that was setup as a network appliance (long time ago) I have returned to life. Several errors I am working on and could use any help I can get. Errors on ...
GoZippy's user avatar
  • 511
1 vote
0 answers
180 views

ripd ospfd and bgpd all with syntax error on line 1

I'm using an OpenBSD 5.9 VM and installed quagga recently. I'm unable to run any dynamic routing protocol (ripd -d, ospfd -d or bgpd -d) and I get always the same error message, example for RIP #...
OpenSourcery's user avatar
1 vote
0 answers
201 views

OpenBSD. etherip tunnel do not makes connection

I try to create a tunnel through etherip. And I did read man pages etherip in OpenBSD. But this example aren't working in my servers. cat /etc/sysctl.conf net.inet.etherip.allow=1 net.inet.ip....
Tophyd Ayur's user avatar
1 vote
0 answers
1k views

Openbsd 5.7: IPv6 advertisement not working

--context-- I have a Sokeris with 8 interfaces: em0 is connected to a bridge router (ISP) and em2 is connected to my DMZ network (web servers). I got from my ISP a /56 prefix and 2 DNS IPs but no ...
KuroNeko's user avatar
1 vote
1 answer
3k views

openbsd pf squid transparent proxy using a bridge

I want to use OpenBSD 5.7 as a filtering bridge in front of my router, and as part of that run a transparent proxy (squid 3.5.1) to manage web access. I have set up the openbsd machine as a bridge, ...
Jim's user avatar
  • 11
1 vote
1 answer
313 views

Server name no longer available OpenBSD

I've been scratching my head with this for a while and don't seem to be getting any closer to a solution at the system level. I have asked the same question at SuperUser but so far the answers didn't ...
TDrabas's user avatar
  • 111
1 vote
0 answers
200 views

Port forwarding with URL on OpenBSD 4.5

I need to setup forwarding on gateway machine with following request from client: Is it possible to setup pf.conf on OpenBSD 4.5 machine, but instead IP address to have given URL such as http://...
Zoran's user avatar
  • 161
1 vote
1 answer
645 views

Trouble P2Ving OpenBSD 4.0 to VMWare

I've been tasked with migrating a physical OpenBSD 4.0 boxes to our VMWare ESXi farm. I used VMWare's Converter 4.1 CD to perform a cold migration which completed successfully. Prior to the first boot ...
user116161's user avatar
1 vote
1 answer
100 views

OpenLDAP Authentication in Mixed Enviroment

I am preparing to setup a small network with single sign on capability provided by and OpenLDAP server that runs on OpenBSD 5.3. Currently, I am able authenticate an Ubuntu 13.04 client against the ...
csnate's user avatar
  • 111
0 votes
0 answers
29 views

opensmtpd: how to say "internal network"?

hardwired constants in my smtpd.conf are causing problems with IPv6 prefix delegation, so I wonder if there is some abbr. for "internal network"? Something like # table localnet { 10.10.10.0/...
Harri's user avatar
  • 11
0 votes
0 answers
50 views

Wireguard peer rejecting traffic

My Wireguard setup randomly stopped working yesterday and I don't know how to trace the source of the problem. I inspected the traffic with Wireshark and it shows that the traffic gets sent from the ...
Andy Vavilov's user avatar
0 votes
1 answer
179 views

how to use terraform with nsd?

is it possible to manage nsd dns with terraform? i keep getting a NOTINT error but per man page there is an option to accept UPDATE opcodes. when i set drop-updates: no nsd starts fine but i get the ...
nsduser22's user avatar
0 votes
0 answers
1k views

Disabling certain OpenSSH keys on OpenBSD: why the corresponding 'sshd_config' entries are ignored and why 'ssh-keygen -A' generates forbidden keys?

I am trying to achieve the followings on my OpenBSD 6.9 servers: Forbidding the use of all keys but the ssh-ed25519 one on both SERVER and CLIENT sides. Limiting ssh-keygen -A to generate keys only ...
Tony's user avatar
  • 11
0 votes
1 answer
3k views

IBM i SSHD failing all authentications

I am trying to access the SSHD server on my IBMi. However I keep getting Permission denied (publickey,password,keyboard-interactive).. I am running v7r2 on my IBMi This was working until ran the ...
GreenhornCJ's user avatar
0 votes
0 answers
121 views

Can I customize all my operating systems that I will install on kvm/qemu with Virt-customize?

For my private cloud provider, I want to create a virtual machine from the operating system iso I want using kvm/qemu (since I was looking for an alternative to cloud-init, I chose to customize it ...
Sheele's user avatar
  • 16
0 votes
1 answer
372 views

enabling telegraf system input plugin on OpenBSD 6.5

https://github.com/influxdata/telegraf/tree/master/plugins/inputs/system Could use some examples. I have tried adding values listed in the above page to [[inputs.system]] For example: [[inputs....
mr.zog's user avatar
  • 931
0 votes
2 answers
819 views

openbsd pf firewall - how can I tell what is being blocked?

I am in a dire situation. Our exchange server disks have failed. I can still use the application as the os disks are unaffected, and I need to do an emergency migration to office365. We have an ...
BeardyDrummer's user avatar
0 votes
1 answer
226 views

How to start postgresql server with the socket at a different place?

Good morning. The title says it, but let me precise it. I am working with openbsd. The web server is chrooted in /var/www. So the good thing would be that postgresgl place its socket (and the lock, I ...
22decembre's user avatar
0 votes
1 answer
88 views

Process separation on an OpenBSD server

I fear this may be a somewhat open-ended question that gets closed: Apologies in advance, but I'll give it a shot! I'm considering operating an OpenBSD VM with a number of services running on the ...
Xophmeister's user avatar
0 votes
1 answer
127 views

High latency when enabling secondary BGP server for same networks?

I have two BGP servers on OpenBSD using bgpd that are located in the same DC; I tried to enable multihoming for the same networks on both of the servers, but upon doing so all hosts in that DC started ...
user avatar
0 votes
1 answer
1k views

Recover data from OpenBSD softraid down to a single disk

I'm currently very desperate: I have a 3TB WD Red disk that I need to extract data from. This was part of a softraid on an OpenBSD 5.6 machine. I was in the process of migrating to a zfs on linux ...
ZXcvbnM's user avatar
  • 111
0 votes
1 answer
878 views

Why is my PHP server redirecting to the wrong address?

I'm setting up a PHP web server on OpenBSD. phpinfo() is up and running. But, every time I try to install Wordpress, it's redirecting the client to the dummy hostname created on OS install (...
Vince Ying's user avatar
0 votes
1 answer
1k views

OpenBSD chroot for nginx/Apache file permissions

I haven't been able to find a satisfying answer on Goole or the various Stack forums: I noticed that files under /var/www (where nginx and I believe Apache are chrooted by default) have permissions ...
Brett's user avatar
  • 1
0 votes
2 answers
454 views

OpenBSD OpenSSL version after update to -stable

Yesterday I installed OpenBSD 5.5 release and after reading about updating and applying patches to the system (http://www.openbsd.org/errata55.html) I decided to update to the -Stable ("patch branch") ...
charlie_root's user avatar
0 votes
1 answer
788 views

Is there a way to check softraid validity on OpenBSD?

I have more than two very old HDDs in a softraid(4) RAID1 mirroring discipline on OpenBSD. It looks like some of the underlying physical drives may be seeing some I/O errors; but prior to a complete ...
cnst's user avatar
  • 14.3k
0 votes
1 answer
518 views

Insecure NFS ports on OpenBSD server

I have a OpenBSD 4.9 server running. Now I am trying to set up NFS shares on that server. I can set it up using secure ports. However it isn't possible to mount the shares from OS X without using the -...
Fredrik Andersson's user avatar
0 votes
1 answer
1k views

M0n0wall won't pass traffic on different LAN subnets unless "Bypass firewall rules" is checked

I have a working configuration, but a question is bugging me. The question centers around having multiple subnets on a single interface. LAN: 10.10.10.1/24 OpenVPN Server LAN IP: 10.10.10.250 ...
Zen Master's user avatar