Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [openbsd]

OpenBSD is a BSD variant with a strong security and code correctness focus.

4
votes
1answer
984 views

HTTP proxy in OpenBSD 5.8 (replacing Apache ProxyPass)

I'm trying to replace Apache with OpenBSDs httpd but can't figure out what to do with my ProxyPass statements. In apaches conf it looks like this ProxyPass /someurl http://192.168.123.123/...
4
votes
1answer
789 views

What makes fsck so slow on big filesystems?

I have over a dozen of filesystems on my OpenBSD server with 12GB DDR3 and several 1.5TB HDDs. All filesystems themselves are generally between 8GB and 64GB in size. I've noticed that even by ...
3
votes
1answer
127 views

Not seeing packets from internal->external firewall in AWS VPC

I am setting up an AWS VPC with an external/internal firewall to protect the hosts in the DMZ (for Internet->DMZ and DMZ->Internet traffic) and hosts on the local network (for DMZ->Local, Local->DMZ, ...
3
votes
1answer
551 views

Where are SSH init scripts located?

I'm following the best security practices of SSH, via this link and the link states: We should remove the unused keys and only generate a large RSA key and an Ed25519 key. Your init scripts may ...
2
votes
1answer
175 views

OpenBSD relay, https proxy for multiple domains

I'm trying to make a proxy for 3 web servers (running on the same machine as the proxy). A have successfully configured relayd to redirect a request to correct port by their host header, but I cannot ...
2
votes
1answer
539 views

Why isn't my nat-to not applied to the pass out rule?

I've a strange problem concerning NAT on an OpenBSD-Box with pf. I've cut down my pf.conf to the following lines: extif = "pcn0" intif = "pcn1" block drop all #Allow all incoming traffic from intif ...
1
vote
1answer
22 views

Run command on SSH server whenever a user connects, even if just for tunneling

I'd like to, as the administrator of an OpenBSD ssh jumphost used by multiple people, run a specific command any time any user connects via SSH, even if just for tunneling. Is this possible? I've ...
1
vote
1answer
40 views

Verification of packages in a local mirror

Packages for several BSD and Linux operating systems / distributions are downloaded over a potentially insecure connecting or are later on replaced with a malicious version on the local disk. The ...
1
vote
1answer
780 views

How to send mail via console on OpenBSD using a Gmail account?

There is a certificate error: # echo "hello" | msmtp -a default DESTINATION@gmail.com msmtp: TLS certificate verification failed: unable to get local issuer certificate msmtp: could not send mail (...
1
vote
1answer
105 views

Why do I see two lines in fstat for the same socket/port?

Seen on OpenBSD 6.1: When i do a fstat | grep internet on my openbsd server (192.168.102.128), I have the following result : jrx sshd 87949 3* internet stream tcp 0x0 192.168.102.128:...
1
vote
1answer
333 views

Host part of DHCPv6-assigned router address

I got my IPv6 prefix via dhcpv6 (/48) on my personal (OpenBSD) router. So the inside interface get partially configured by dhcpv6. I would like to know if it's possible to define the host part of it. ...
1
vote
1answer
97 views

Building dynamically driven web sites with Mason (Perl) with httpd on OpenBSD current

Is it possible to build dynamically driven web sites with Mason (Perl) with httpd on OpenBSD current? See The Mason Book and the introduction to OpenBSD's httpd.
1
vote
1answer
560 views

Barnyard 2 install failing on OpenBSD

I'm new to OpenBSD, but I'm having issues with getting Barnyard to install after running the make command. I've ran ./configure and ./configure --with-mysql and both end up with the same error when ...
1
vote
1answer
378 views

Connect to commercial VPN on OpenBSD 5.9

I recently installed OpenBSD 5.9 and I'm trying to get it functional enough to use as a replacement for Debian. One thing where I hit a brick wall is connecting to my VPN. I use a commercial VPN which ...
1
vote
1answer
493 views

How to use accent keys with US keyboard on OpenBSD 5.7?

I have a machine running OpenBSD 5.7. The keyboard is a standard US 101 keys keyboard. /etc/kbdtype is set to us. I'd like to use dead keys (ie. pressing ' and a should yield an a with an acute accent....
5
votes
0answers
5k views

How to update font path?

I am using OpenBSD 5.5 and have just installed a package named xpdf The installation completed with the following message: You may wish to update your font path for /usr/local/share/ghostscript/...
4
votes
0answers
212 views

Reading GPG passphrase from the physical keyboard in OpenBSD

I'm using Synergy to control an OpenBSD desktop from a Linux computer (think of it like a VNC client/server). That is to say what I type on the keyboard goes through a network connection before it ...
3
votes
0answers
387 views

PING error through enc0: Frag needed and DF set (mtu = 0)

I'm up ipsec vpn client to remote host. Since the remote host accepts only one ip i'm up nat for local net on enc0. Ping from ipsec host is ok: PING 172.20.162.150 (172.20.162.150): 56 data bytes 64 ...
3
votes
0answers
622 views

NFSv3, mapping GID across heterogeneous Unix systems

I'm serving /exports/home (home directories) and /exports/pkgsrc (NetBSD's pkgsrc repository) from an OpenBSD NFSv3 server running OpenBSD 6.0-release to an internal network of OpenBSD and Ubuntu 16....
3
votes
0answers
683 views

Using the new rtwn(4) driver for OpenBSD

EDIT 1: Patch from the mailing list I got in touch with the original poster about the card, and he gave me a patch to try out. I will apply it, recompile the kernel, and report my findings. If it ...
3
votes
0answers
918 views

DNS resolution problem with OpenBSD

During boot up, messages flashed on my computer screen, among which are the following: DHCPACK from 192.168.200.1 bound to 192.168.200.12----> renewal in 432600 seconds The contents of my /etc/...
3
votes
0answers
250 views

How to use a separated user with GUI on OpenBSD?

A webbrowser is a GREAT attack vector since people use it to access the "dangerous" internet. Very bad things can come in through to the desktop. So in general for a desktop, we can do the following:...
2
votes
0answers
231 views

KeePass on OpenBSD and libpng error

I am trying to run KeePass on OpenBSD. I installed Mono from packages and downloaded KeePass-2.30-portable. Unforunately I can't start KeePass because of this errors: SendMessage (27263013, 0x112c, ...
2
votes
0answers
222 views

VPN piggybacked on two mobile phone Wi-Fi hotspots

I cannot get 1Gbps at home, so instead of wasting money on slow landline Internet with extra traffic limits and ridiculous overage fees, only to wait in the console until my stuff downloads/uploads, I'...
2
votes
0answers
202 views

ral0 malfunctioning

OpenBSD 4.9 using a ral card, RT2560 For some strange reason it stopped functioning, ifconfig ral0 shows all the network information and network active, but no real connection. I keep getting DHCP ...
2
votes
0answers
482 views

OpenBSD X, mouse only scrolls down

I just got a new OpenBSD 4.8 instance up and running with Xfce. The only issue I'm having is that the mouse wheel only ever scrolls down. When I physically scroll up, X scrolls down. When I do scroll ...
1
vote
0answers
93 views

OpenBSD threads priorities

Can anybody explain how to work with thread priorities in OpenBSD? Information about this question in MAN pages is poor, it does not give clear understanding. In particular: sched_get_priority_min/...
1
vote
0answers
339 views

Connect external DAC / sound card in OpenBSD

I am trying to connect a Focusrite Scarlett 2i4 USB DAC to my OpenBSD system to use as an external sound card. From what I have figured out so far, it seems that I need to tell some program or other ...
1
vote
0answers
54 views

Why does ^C on netcat client close the server whereas ^C on server doesn't close the client?

I tested on Ubuntu 18.04 LTS the venerable netcat. The netcat comes from OpenBSD: $ dpkg -l|grep netcat ii netcat-openbsd 1.187-1 amd64 ...
1
vote
0answers
168 views

OpenBSD not replying to ARP requests

I am setting up an OpenBSD system as a router, I have one interface as the upstream, then another with a vlan configured: Upstream(em0): inet 10.0.2.20 255.255.255.0 NONE description upstream ...
1
vote
0answers
111 views

How do I connect to the internet with 3g usb modem (mobile broadband connection) in OpenBSD?

In order to install the GUI in OpenBSD! I know how to connect to wifi but now I have only 3g-usb-modem Huawei E171 and I don`t know how to connect to the internet via 3g-usb-modem in OpenBSD ! How can ...
1
vote
0answers
253 views

Programmes crashing in OpenBSD 6.1

I run OpenBSD 6.1 and some programmes like thunar and firefox keep crashing randomly. Not all programms crash, however. I ran memtest, I increased datasize-max and datasize-cur both to 2048M in /etc/...
1
vote
0answers
553 views

Is it possible? Three OpenBSD 6.0-current firewall bridges with only one OpenBSD Server?

Is it possible to configure several firewall bridges with one OpenBSD server which has 6 nic's. In this case 3 OpenBSD firewall bridges from each other completely independent? cat /etc/sysctl.conf ...
1
vote
0answers
690 views

Setting up IPSEC on LAN between two hosts (OpenBSD)

I originally asked this on ServerFault, but got nothing. Hoping there are some OpenBSD experts here Trying to use IPSEC between two hosts on a LAN. No VPN involved Using OpenBSD 5.8 (in VirtualBox). ...
1
vote
0answers
59 views

User creation during authentication

I'm working with OpenBSD 5.6 and the goal is that I need to create user when he or she tries to authenticate with specific password. I've written a script for this purpose and everything goes ok but ...
1
vote
0answers
476 views

Unable to surf internet with VPN on OpenBSD

I am using OpenBSD 5.7-amd64 with the latest patches applied. I downloaded and installed OpenVPN (package version: openvpn-2.3.6.tgz) available for OpenBSD 5.7 using the following command: sudo ...
1
vote
0answers
824 views

Can not divert packet to pf when configure transparent squid 3.4.13 on OpenBSD 5.7

I am trying to build transparent proxy with squid on OpenBSD 5.7 with pf firewall. I compile squid from sources with options: $ squid -v Squid Cache: Version **3.4.13** configure options: --prefix=...
1
vote
0answers
149 views

openbsd: mpls provider doesn't forward packets

Can anybody help me with next question: I am trying to get mpls test network up like in http://lteo.net/blog/2013/09/03/a-small-mpls-test-network-built-with-openbsd/ or http://2011.eurobsdcon.org/...
1
vote
0answers
853 views

How to hint font dejavu sans mono on OpenBSD

The default DejaVu Sans Mono font in OpenBSD xterm looks too fat. Settings in ~/.Xdefaults are: xterm*faceName: DejaVu Sans Mono xterm*faceSize: 12 How to hint this font on OpenBSD (e.g. by changes ...
1
vote
0answers
117 views

How to lock GNOME3 on OpenBSD?

There is a normal user, that I added sudo permission to "zzz" on an OpenBSD 5.6 notebook. The "zzz" works, the notebook suspends.. but the GNOME 3 screensaver doesn't lock before/after suspend. How ...
1
vote
0answers
308 views

On-screen fonts appear tiny on OpenBSD 5.5

I chose the default installation of OpenBSD 5.5. My monitor's brand is Samsung 27-inch 850 series LED. It's in full high-definition, 1920x1080. After I type my login username and password, I am ...
1
vote
0answers
108 views

Two fdisks seeing different MBRs on same external drive (OpenBSD 4.2/5.5)

I'm trying to use an external USB hard drive to copy data between a legacy production OpenBSD 4.2 system (on a slow, fragile network — that's not an option) and a new OpenBSD 5.5 box, and I'm running ...
1
vote
0answers
692 views

How do I stop charging the battery way prior to 100% in OpenBSD?

I'm thinking about using a netbook as an OpenBSD server. I'd like it to have UPS -- so the integrated battery is quite useful. However, I'm very familiar with the batteries going dead very quickly ...
1
vote
0answers
186 views

How to set up FAX modem card on OpenBSD?

I found a modem card in a dumpster yesterday. It's a Conexant RD01-D270 also marketed as "Dell / Conexant N11846 Modem Card". It still works, I've tested this on Linux, but I'd like to use it in my ...
1
vote
0answers
2k views

postfix + Cyrus SASL - cannot connect to saslauthd server: No such file

Everything is up and running and answer on calls but the login for postfix doesn't seem to work (it works for Courier IMAP, just not postfix). Here's the error output: Jun 30 22:22:10 HOST postfix/...
0
votes
0answers
29 views

How does route-to work in the BSD pf firewall?

I've recently learned about the route-to functionality in the pf firewall, and I wonder how it works. Is it similar to the "policy-based routing" system in linux? How does route-to allow the ...
0
votes
0answers
147 views

install vips library in openbsd

On OpenBSD, I need to install sharp, which require the vips library. When I use a prebaked vips tarball, <stephane@bandersnatch.22decembre.eu:/usr/local/src/libvips/vips-8.7.0> ./configure ...
0
votes
0answers
129 views

OpenBSD not accessible through SSH without GPU

I'm new to BSD and installed OpenBSD 6.3 to a test server for education purposes. It's going to be a dedicated firewall eventually. During installation I used a graphics card to connect my monitor. ...
0
votes
0answers
96 views

I have a stable release with OpenBSD 5.8 built. I'd like to upgrade OpenBSD 5.8 now on stable!

The new kernel bsd I just copy with scp on the root server /bsd. scp /usr/rel/bsd base58.tgz man58.tgz vim@10.10.10.10:/ && ssh -l vim 10.10.10.10 && cd / && tar -xzvphf ...
0
votes
0answers
116 views

How to disable HTTP TRACE on OpenBSD 5.3?

An nmap scan gaved this: 443/tcp open ssl/http Apache httpd | http-methods: GET HEAD OPTIONS TRACE | Potentially risky methods: TRACE |_See http://nmap.org/nsedoc/scripts/http-methods.html so ...