10
votes
Accepted
OpenBSD: Gateway outside subnet (works in Linux)
This is an old thread, but here goes.
As it happens, I run a number of OpenBSD VMs on an ESXi 6.0 running at SoYouStart, a daughter company of OVH. The network setup there is the same as with OVH ...
- 228
9
votes
Accepted
OpenBSD: How to use `relayd` and `httpd` for redirecting subdomain requests
concerning relayd I guess something like would achieve what you want :
This defines the ip where you can find the foo "service" it's a list of host basically (pf style)
table <fooservice> { ...
- 1,274
6
votes
How Can I Create a Private OpenBSD Mirror?
Per OpenBSD's documentation for prospective public mirrors, the recommended approach would be to use rsync -rv --delete-delay --delay-updates --fuzzy $SOURCE_MIRROR $YOUR_MIRROR, where $SOURCE_MIRROR ...
- 161
3
votes
Accepted
pkg_add can't install anything on openbsd 6.1
Probably you have defined PKG_PATH somewhere. Try this as root:
unset PKG_PATH; pkg_add screen
- 321
3
votes
Changing PF rules on the fly to mitigate damage of DDoS (OpenBSD 6.4)
Since no one has answered my question this is the pf configuration I ended up with. Specifically look at the line for setting cookies after the table is filled with 15% open tcp connections. SYN ...
- 171
3
votes
Nginx returning 404 on seemingly valid path
Figured this out. The distribution of nginx in OpenBSD defaults to chrooting into /var/www/, which denies access to the entire filesystem outside of that section. This can be circumvented by starting ...
- 31
3
votes
Accepted
https not working on OpenBSD 5.8 & 5.9 guests running in VMWare Fusion 8 Pro
Changing the virtual network adaptor from e1000 to vmxnet3 resolves the issue. Edit the vmx file for your VM - for me it was /Users/zofrex/Documents/Virtual Machines.localized/Router.vmwarevm/Router....
- 308
3
votes
Accepted
Almost empty pf.conf still logs packets
I have no idea why am I receiving them
It's multicast traffic.
where can I read about those default match rules
Well, the thing in whole is partially documented but it's not that obviously ...
- 9,543
3
votes
Accepted
Does OpenBSD have anything equivalent to Debian's /etc/network/if-up.d/ scripts?
While you can run shell commands from hostname.if, you might find ifstated(8) a better fit.
- 213
3
votes
OpenBSD relayd forward to web server based on HTTP request path
Somebody on IRC explained it for me. Because relayd rules operate on a "last wins" basis, I need my most specific match to appear last. The following works for me.
table <apihosts> { ...
- 224
3
votes
Accepted
Setting up LDAPD service on OpenBSD
Most LDAP servers simply use DNs as account names. The "bind DN" parameter in clients is your username for accessing the LDAP database, and the "root DN" parameter in ldapd.conf ...
- 11.4k
2
votes
Is reverse DNS a good method for promoting grey IPs from trusted domains to white?
It depends™:
Keep in mind that DNS PTR records can be false -- just because you get .google.com as part of the PTR, doesn't mean that it's Google that's controlling the IP address in question. ...
- 14.3k
2
votes
Accepted
Setting up IPSEC on LAN between two hosts (OpenBSD)
Answering my own question like a nerd
Problem 1. OpenIKED (IKEv2) does not support transport mode, so you can only use it for VPNs, and not on a LAN. Use isakmpd (IKEv1)
Problem 2. The documentation ...
- 214
2
votes
tuning tips for CPU load for OpenBSD guest on qemu-kvm Server
I managed to reduce the CPU usage by following the instructions from https://marc.info/?l=openbsd-misc&m=151575775607633&w=2. Below example of my OpenBSD 6.4 virtual machine config file:
<...
- 21
2
votes
OpenBSD: Gateway outside subnet (works in Linux)
I had the same issue as Mike and found it difficult to get OpenBSD to properly route the assigned IP address. Similar to OVH, dedicated servers on myLoc.de provide IP addresses with 255.255.255.255 ...
- 191
2
votes
Openiked - Unable to ping the remote gateway
This question's a few months old, so you've probably long-since figured out your issue. And this likely doesn't answer your question, anyway. But I notice that you've commented out the ikesa option in ...
- 121
2
votes
Accepted
During OpenBSD installation, what is "DNS domain name" for?
It wants to know the domain name of the system, so that it can pair that with the hostname to come up with the system's full-qualified domain name (FQDN). See here.
I'm guessing this is an ...
- 301
2
votes
Acquiring a wildcard certificate from Let's Encrypt via `acme-client(1)`
Let's Encrypt wildcard certificates require DNS-01 challenge type. OpenBSD acme-client only supports http-01 challenge type. If you want a wildcard certificate from Let's Encrypt, one easy way is to ...
- 3,137
2
votes
Accepted
Unable to create inetOrgPerson in LDAP structure
The inetOrgPerson objectClass supplements organizationalPerson, which supplements person, which in turn supplements top. This means, it inherits all the attributes that defined in those objectClasses. ...
- 12.6k
2
votes
Accepted
Is XNU based on FreeBSD or OpenBSD?
From https://github.com/apple-oss-distributions/xnu
What is XNU?
XNU kernel is part of the Darwin operating system for use in macOS and iOS operating systems. XNU is an acronym for X is Not Unix. XNU ...
- 196
2
votes
OpenBSD 7.2: Mailbox file in users' home directory - use Postfix or stick to default sendmail?
Sendmail - mailbox location
Sendmail does not deliver email to local mailboxes itself. Sendmail uses "local mailer" program/mailer. It is typically procmail program on Linux
(or sensible-...
- 6,278
1
vote
OpenBSD route via different gateways which have same IP but on different interfaces
Use the -ifp modifier to route. From the man page:
In a change or add command where the destination and gateway are not
sufficient to specify the route, the -ifp or -ifa modifiers may be
used to ...
- 5,189
1
vote
Accepted
Why does spampd fail with socket connection failure on openbsd?
This ended up being a bug, which I did a full write-up on. The spampd maintainer created an issue and the OpenBSD team pulled the changed downstream. This should be fixed in newer releases of OpenBSD/...
- 1,130
1
vote
OpenBSD not responding to arp queries
Is there any managable switch between OpenBSD and the client? You have to configure VLAN 10 at client side also.
Untagged packet will left client but Openbsd is waiting for packets tagged by VLAN10. ...
- 131
1
vote
OpenBSD routing issue: some sites work fine, others timeout
The netmask on the alias IP 23.30.51.CCC is too large. Should be 255.255.255.255.
- 131
1
vote
VirtualBox guest OS doesn't expand after resizing VDI file
You need to resize the disk partitions and filesystems to make use of the extra space.
You've grown the "physical" disk to 15 GB but the partition table is still only configured as if it was a 4 GB ...
- 4,771
1
vote
Accepted
How to configure Heimdal Kerberos to use OpenLDAP?
Tried again with a fresh install of OpenBSD. Works now
I installed the openldap-client first using pkg_add
in /usr/ports/security/heimdal/Makefile, I changed:
CONFIGURE_ARGS += --bindir=${PREFIX}/...
- 214
1
vote
Accepted
How to hide/remove original source IP address when using OpenSMTPD?
https://www.mail-archive.com/[email protected]/msg01483.html
(In the following, mask-source was changed to mask-src to reflect the current option name)
"To some extent, yes. You can use "...
- 216
1
vote
PF based gateway firewall for Openbsd 6.0
Your first scrub rule is redundant - you repeat the same effect with the next two rules.
Make your specific block rules quick, or else they can be overwritten by later rules. (Default is the last ...
- 11
1
vote
Accepted
DNS inside PHP-FPM chroot jail on OpenBSD 6.0 running nginx 1.10.1, PHP 7.0.8, MariaDB 10.0.25 and MediaWiki 1.27.1
You seem to be missing required files / libraries for name resolution to work.
The minimum you need is /etc/resolv.conf. If adding this file does not help, you need to find out which libraries are ...
- 37.6k
Only top scored, non community-wiki answers of a minimum length are eligible