OpenBSD is a BSD variant with a strong security and code correctness focus.

learn more… | top users | synonyms

0
votes
2answers
38 views

Convert fnt to ttf?

Is there a way to convert the .fnt-files from from /usr/share/syscons/fonts to .ttf?
0
votes
1answer
20 views

Compiling mbedtls (the old PolarSSL) on OpenBSD

I'm having problems to compile any version of mbedtles or PolarSSl on OpenBSD After extract them and run make i would get : *** Parse error in /root/mbedtls-2.0.0: Need an operator in 'WINDOWS' ...
0
votes
0answers
11 views

GnuTLS doesn't find Libhogweed

I'm trying to install GnuTLS-3.4.3 on OpenBSD 5.7 and it need Nettle + GMP. So i downloaded GnuTLS, Nettle and GMP latest versions. Compiled and installed GMP all normal, then compiled and installed ...
2
votes
1answer
62 views

Why I can't unpack .tar.bz2 or .tar.xz files?

I'm having a problem unpacking files when I try to build from source on my OpenBSD, first I though it was just corrupted files but after it happened to many different programs and from different ...
2
votes
2answers
32 views

How to duplicate a daemon?

I want to run two instances of dnscrypt client proxies, but I'm having trouble making them automatically start at boot. Here is what I tried: In rc.local, this is the first: ...
3
votes
1answer
59 views

Where are SSH init scripts located?

I'm following the best security practices of SSH, via this link and the link states: We should remove the unused keys and only generate a large RSA key and an Ed25519 key. Your init scripts may ...
0
votes
1answer
18 views

Remove/Uninstall desktop environment from second user account on OpenBSD

During the installation process of OpenBSD 5.7, I created a user account, user1, belonging to wheel group. Subsequently I installed a desktop environment after logging into my user account. This ...
2
votes
0answers
27 views

Reading GPG passphrase from the physical keyboard in OpenBSD

I'm using Synergy to control an OpenBSD desktop from a Linux computer (think of it like a VNC client/server). That is to say what I type on the keyboard goes through a network connection before it ...
4
votes
2answers
1k views

NAT and source IP filtering in PF, using OpenBSD >= 4.7

I just read a book about PF (The Book Of PF, No Starch), but there's one question not answered by it. If I have a gateway machine using two interfaces, $int_if and $ext_if, and I NAT the packages ...
0
votes
0answers
21 views

Unable to surf internet with VPN on OpenBSD

I am using OpenBSD 5.7-amd64 with the latest patches applied. I downloaded and installed OpenVPN (package version: openvpn-2.3.6.tgz) available for OpenBSD 5.7 using the following command: sudo ...
1
vote
1answer
14 views

Need to remove a line in fstab on OpenBSD

I thought it would be easier for me to mount flash drives automatically if I did the following to fstab: /dev/sd1i /mnt/usb (sd1i is found from sysctl hw.disknames) I rebooted the box with the USB ...
1
vote
1answer
49 views

Gnome desktop environment: how to get it working on OpenBSD?

I have OpenBSD 5.7-amd64 installed and patched with all the latest available fixes. I would like to have a minimal Gnome desktop environment and I did the following to my user account (not root ...
0
votes
1answer
32 views

I'm in doubt if I set up my dns chain correctly

I want to use DNSCrypt to encrypt all my DNS packets, so I tried to do this: on /etc/rc.local : /usr/local/sbin/dnscrypt-proxy -a 127.0.0.1:40 -u _dnscrypt-proxy -d -l /dev/null -R ...
2
votes
1answer
581 views

PDF reader for OpenBSD that has default disabled JAVA/JavaScript/etc.?

I'm searching for a PDF reader that doesn't supports Java, JavaScript in PDF files (and other unneeded things what is only used in 1% of the PDF files, but can cause security issues). Or there isn't ...
1
vote
0answers
31 views

Can not divert packet to pf when configure transparent squid 3.4.13 on OpenBSD 5.7

I am trying to build transparent proxy with squid on OpenBSD 5.7 with pf firewall. I compile squid from sources with options: $ squid -v Squid Cache: Version **3.4.13** configure options: ...
0
votes
0answers
84 views

How to disable HTTP TRACE on OpenBSD 5.3?

An nmap scan gaved this: 443/tcp open ssl/http Apache httpd | http-methods: GET HEAD OPTIONS TRACE | Potentially risky methods: TRACE |_See http://nmap.org/nsedoc/scripts/http-methods.html so ...
1
vote
2answers
18 views

Chromium User Agent String on FreeBSD or OpenBSD

I'm in need of a recent Chromium user agent string from a FreeBSD or OpenBSD desktop with the default user agent string. I can only find Chrome useragent strings but no mention of Chromium. Other ...
2
votes
1answer
2k views

Courier IMAP - Account's mailbox directory is not owned by the correct uid or gid

so i poked around and found out that DEFDOMAIN="@domain.se" is messing things up, so i removed that from /etc/courier/imapd and i got to the point where SMTP work and i get this from the IMAP: Jul 2 ...
0
votes
1answer
576 views

cannot start PostgreSQL on OpenBSD 5.4 through rc.d

I've installed the postgresql-server package on OpenBSD 5.4 amd64, and I try starting it through its rc.d script, however, it doesn't look like it's running after that. opti# /etc/rc.d/postgresql ...
0
votes
2answers
540 views

USB not working in OpenBSD 5.6 installer

I'm trying to install OpenBSD 5.6 amd64 on my 2012 Mac mini (quad-core Intel i7), but USB stops working partway through the boot sequence, as evidenced by my lighted keyboard going dark. Without a ...
2
votes
1answer
973 views

Status of 5GHz support for 802.11 WiFi devs in BSD (2014)

To put it simply, 2.4GHz band doesn't work anymore due to the plethora of various Wi-Fi and other devices, whereas 5GHz is still almost entirely empty. Do any of the BSDs -- FreeBSD, OpenBSD, NetBSD, ...
2
votes
1answer
2k views

Routing a LAN through OpenVPN on OpenBSD 5.5

I'm configuring an OpenVPN gateway to allow a LAN access to the internet through the tunnel. The gateway is running OpenBSD 5.5-stable amd64 on the PC Engines APU platform. The LAN contains re1, re2, ...
14
votes
3answers
7k views

How should one set up full-disk encryption on OpenBSD?

Is there a preferred method to set up full-disk encryption under OpenBSD, similar to dm-crypt under Linux? I'm looking for full-disk encryption, as if someone were to steal my notebook they could ...
1
vote
1answer
240 views

Why can't I use sudo on OpenBSD?

I'm running OpenBSD 5.7 on VirtualBox on my Windows 7, to learn more about Unix, but I can't use sudo with my password. I've set up a user called adminvpn but when I try to run any command using sudo ...
1
vote
1answer
52 views

chroot cannot find cgi file

I am unable to serve or execute a cgi file, and the cause seems to be that chroot is unable to find the cgi file when the permission is set to executable. $>ls -l /var/www/my/dir/test.cgi ...
1
vote
0answers
31 views

openbsd: mpls provider doesn't forward packets

Can anybody help me with next question: I am trying to get mpls test network up like in http://lteo.net/blog/2013/09/03/a-small-mpls-test-network-built-with-openbsd/ or ...
1
vote
1answer
50 views

Available console solution for a physical machine running OpenBSD?

If we have a physical server running OpenBSD, what are the available remote console solutions for it? Are there any unique methods because it's an OpenBSD? Console of course means if there is no ...
1
vote
1answer
27 views

How do I run inetd at startup on OpenBSD?

I am trying to backup my Synology NAS to my old NAS. The old NAS has to be an rsync compatible server (according to Synology), and the original OS didn't support it. Fortunately OpenBSD supports my ...
2
votes
2answers
53 views

How to get IPs via DHCP, through a router from another DHCP server?

ISP -> OpenBSD box -> Wireless router We have an OpenBSD machine that connects directly to the internet, has dhcp/dns cache "server" on it, and forwards the connection to clients via ethernet ...
1
vote
2answers
265 views

Creating a bootable OpenBSD Flashdrive

I've attempted to do dd if=install57.iso of=/dev/sdb. sdb is my flash drive. I've also tried with the install57.fs. When I try to boot from USB it says "Missing Operating System" Could anyone help? ...
2
votes
4answers
157 views

Auto login after boot on OpenBSD

I know I can create an "auto login with a user" function on an OpenBSD desktop (using the default FVWM2 as WM) with: pkg_add slim ----- start-stop script # vi /etc/slim #!/bin/sh # # ...
2
votes
1answer
1k views

Key-based authentication from PyCharm / JSCH to OpenBSD fails

I am trying to configure PyCharm (java-based IDE) to connect via sftp to a new OpenBSD 5.6 machine with an almost-default setup. However, it keeps returning an error "Algorithm negotiation fails". I ...
1
vote
3answers
327 views

Why can't I modify OpenBSD securelevel?

I just installed an OpenBSD. I edited "vi /etc/rc.securelevel" and set the securelevel from 1 to 0. Saved the file, then rebooted. But after the reboot the sysctl states the securelevel is still 1. ...
1
vote
2answers
215 views

OpenBSD runs out of memory, while not using swap space

I'm working with a fresh install of OpenBSD (5.6 amd64). I'm attempting to build Boost libraries, and quite a few compilations are failing with cc1plus running out of memory errors. I've read ...
0
votes
0answers
24 views

pkg_add : Error message “ftp() in free(): error: chunk is already free” when installing a new package

I have error message "ftp(xxxxx) in free(): error: chunk is already free" at random times when installing a new package, for example : # pkg_add -i emacs quirks-2.9 signed on 2014-07-31T22:37:55Z ...
2
votes
1answer
159 views

macos - local port redirection using pfctl and syntax errors

I am running MacOS(really BSD), and I want to redirect certain traffic over an ssh tunnel using a a local forward. Seems easy enough, but I am repeatedly blocked by the ambiguous "/etc/pf.conf:29: ...
-1
votes
1answer
159 views

Pfsense source code to build firewall

Pfsense is an open source Firewall based on openBSD kernel. Where can I find the code and how to modify it to build my firewall?
1
vote
1answer
62 views

How do I edit text in Cyrillic / Russian on OpenBSD?

I'm trying to make it possible to easily edit text in Cyrillic / Russian on a remote OpenBSD 5.2 amd64. I'm using emacs-21.4p18-no_x11, which doesn't show any Cyrillic characters whatsoever when I ...
1
vote
2answers
71 views

firefox OpenBSD 5.6 Error no display specified

I bought the 3 CD set for OpenBSD 5.6 and installed OpenBSD 5.6, but it may have used an http site. The installation was successful, signify was happy. Then, I installed the packages on an i386 ...
0
votes
1answer
128 views

Firefox and firefox-esr packages in OpenBSD 5.5

After I issued sudo pkg_add -vi firefox, the ftp server responded: Ambiguous: 0. firefox-esr 1. firefox Enter choice: I didn't know what to choose, so I chose and entered 0. The installation was ...
4
votes
3answers
108 views

OpenBSD's pf: disable network access for a given user, except for ssh.

If we are using the default firewall for OpenBSD, how can we modify it to disable all the network access for a normal user except for one thing: we want to ssh to the user from random hosts! So ...
8
votes
7answers
9k views

How to apply updates on OpenBSD, NetBSD, and FreeBSD?

I'm using OpenBSD for quite a while now. All I do, however is go from one release to the next, always just doing an update. I configured the system so it works as my router and firewall, and it works ...
1
vote
1answer
18 views

How to only allow a group for network access?

Using OpenBSD's pf. Question: How can we modify the firewall of OpenBSD to allow ONLY a given group for network access? If somebody isn't in that group, it shouldn't have layer 3 or layer 2 network ...
0
votes
1answer
101 views

What “bad list v: No such file or directory at -/usr/libdata/per15/OpenBSD/Pkg_Add.pm line 1115” means?

I recently installed OpenBSD on an old laptop from 2005 and I am trying to install nano and then xfce4 and then a few other programs, but every time I try to use pkg_add, I get the message: Fatal ...
2
votes
0answers
92 views

DNS resolution problem with OpenBSD

During boot up, messages flashed on my computer screen, among which are the following: DHCPACK from 192.168.200.1 bound to 192.168.200.12----> renewal in 432600 seconds The contents of my ...
3
votes
1answer
52 views

Reject packets in pf after a connection consumed a certain amount of traffic

In pf you can limit the bandwidth that is consumed (by for example ssh) using queues. I am hosting a UDP Service (Discard Protocol) which can easily eat up all my traffic when a client transfers ...
1
vote
1answer
100 views

Keeping OpenBSD up-to-date with openup

I installed OpenBSD 5.6 -RELEASE on a machine, and then kept it up to date with M:tier's openup. Is my machine now considered up-to-date, the same way as it would be if I where following the -STABLE ...
0
votes
0answers
59 views

Can't access multiple USB channels

In OpenBSD I have a 3G minipcie (USB) modem, that has multiple non multiplexed USB channels. dmesg output: umsm0 at uhub4 port 1 configuration 1 interface 0 "Sierra Wireless, Incorporated AirCard" ...
1
vote
1answer
43 views

What does the “first Ethernet card” mean in the BSD world?

https://www.freebsd.org/doc/handbook/network-routing.html The designation link#1 refers to the first Ethernet card in the machine. Question: what does the "first Ethernet card" mean? How to ...
0
votes
1answer
60 views

tcpreplay output to STDOUT?

$ tcpreplay tcpdump-2015-01-02-18h-13m.pcap ERROR: The intf1 option is required tcpreplay (tcpreplay) - Replay network traffic stored in pcap files USAGE: tcpreplay [ -<flag> ...