Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [openbsd]

OpenBSD is a free, multi-platform 4.4BSD-based UNIX-like operating system with a focus on security, portability, standardization, code correctness, proactive security and integrated cryptography.

enter image description here

OpenBSD is an open-source operating system derived from 4.4BSD UNIX and is popular for it's focus on security, portability and code correctness. It was forked from in the mid-1990s.

The project strictly incorporates only source code with ISC or BSD compatible licensing (except the ports tree) with the goal of providing software for any use, including commercial. It is funded by the Canadian non-profit, The OpenBSD Foundation, which also supports related projects such as OpenSSH, LibreSSL, OpenSMTPD, and other popular infrastructure software.

Website: http://www.openbsd.org

OpenBSD Foundation: http://www.openbsdfoundation.org

Distrowatch: http://distrowatch.com/table.php?distribution=openbsd

Wikipedia: http://en.wikipedia.org/wiki/OpenBSD

225 questions
4
votes
1 answer

502 Bad Gateway Error Nginx connect() to unix:/tmp/unicorn.sock failed

This is my first question on Server Fault. I could not find a solution to this while searching the web. I am working on an OpenBSD server running Nginx, which I did not setup, that is throwing a 502 Bad Gateway error in the browser. The Nginx error…
jeffagraber
  • 41
  • 1
  • 3
4
votes
1 answer

pfctl in OpenBSD and FreeBSD

I've noticed that both FreeBSD and NetBSD have extra pfctl options: pfctl [-AdeghmNnOPqRrvz] But OpenBSD doesn't, it's missing around five of the extra options: pfctl [-deghnPqrvz] I would have thought that as pf is from OpenBSD that it would have…
Jak
  • 1,008
  • 9
  • 12
4
votes
6 answers

PXE Boot - Linux server & OpenBSD client

I have an old machine here I'm trying to setup as a diskless client running OpenBSD, booting from my fedora 10 machine. I've setup tftp and dhcp and both appear to be correct, yet the client just timesout trying to load the pxeboot. #…
theotherreceive
  • 8,365
  • 1
  • 31
  • 44
4
votes
1 answer

OpenBSD pf port forwarding multiple rules

I have a few dozen servers behind OpenBSD firewall with port forwarding. Most rules are very similar and differ only in IPs or sometimes in ports forwarded, so I want to compact them to remove excessive repetition but I've found that it is…
AlexD
  • 8,747
  • 2
  • 29
  • 38
4
votes
3 answers

NFS mount "hanging" when accessing from a server on a different subnet

Here's a problem which I am at a loss to diagnose: Our user home directories are served via NFS from an Apple XServe running Mac OS X 10.5.7. Normally they are exported to our default office subnet, "lan". Recently I have been building a new subnet,…
Kamil Kisiel
  • 12,184
  • 7
  • 48
  • 69
4
votes
3 answers

OpenBSD has open ports in default installation

I have been considering replacing Ubuntu with OpenBSD to improve the security on my local server. I need to have ssh access to it, and I also need it to serve static web content - so the only ports I need open are 22 and 80. However, when I scan my…
D R
  • 143
  • 1
  • 5
4
votes
2 answers

Getting IPTables to properly forward NTP traffic

I have the following setup: NTP 10.21.3.169 | | 10.21.3.160 (eth1) Linux 10.0.0.67 (eth0) | | 10.0.0.65 (pcn1) OpenBSD The idea is to allow the NTPD client (not OpenNTP) on the OpenBSD box to get the time from the…
Rich
  • 1,343
  • 7
  • 28
  • 39
4
votes
3 answers

redundant openvpn configuration

I have two openbsd nat/firewall boxes with carp for failover / high availability purposes. What would be the best possible practice to ensure that OpenVPN, which I plan on running on these boxes, fails over gracefully as well?
imaginative
  • 1,971
  • 10
  • 32
  • 48
3
votes
1 answer

Why does spampd fail with socket connection failure on openbsd?

I'm having some trouble getting spampd to work in OpenBSD. First off, if I try to specify the daemon flags in my /etc/rc.conf.local like so: spampd_flags="--port=10025 --relayhost=127.0.0.1:10027 --tagall -aw" The service does not start with those…
djsumdog
  • 1,100
  • 2
  • 16
  • 29
3
votes
1 answer

What are the steps to generalize an OpenBSD 6.1 host?

What are the steps are needed to generalize OpenBSD so that it could be used as a template or virtual appliance without disclosing any information of the environment that baked it, or put the user of the template at risk (for example what happened…
bloudraak
  • 462
  • 2
  • 5
  • 14
3
votes
0 answers

Multiple relays with OpenSMTPd

We use mailhog in development / testing and hook it up to postfix. It so that if you mail to an email address ending in .external, it will be relayed to a real server. And, if doesn't we relay it to mailhog. Postfix configuration…
tvlooy
  • 130
  • 1
  • 8
3
votes
1 answer

Why can not add subversion package to my OpenBSD 4.5 machine?

I have an OpenBSD 4.5 on a virtual machine. I configured the net and my machine can connect to the OpenBSD FTP repository in Canada (ftp.openbsd.org) correctly. But when I execute this line: pkg_add -v subversion-1.5.5 Occurs this error: Unknown…
jaloplo
  • 255
  • 1
  • 10
3
votes
1 answer

OpenBSD routing: Cannot reach gateway from IF configured to static block

When trying to set up an OpenBSD router I've run into an apparent routing problem. I have a 1U machine with 6 gigabit NICs (em0-em5). My ISP provided me with the following: xx.xx.97.246/28 static WAN IP. xx.xx.97.241 default gateway…
Kubitz
  • 33
  • 5
3
votes
2 answers

IPv6 IPsec between two native IPv6 networks

Assume I have two networks, A and B, on sites either side of the globe. Both have native IPv6 and are using (hypothetically) just IPv6. IPv4 no longer exists. They can both access the internet natively as IPv6 and use IPv6 hosts. Their IPv6…
Matt Hamilton
  • 161
  • 2
3
votes
1 answer

Forcing a password change on OpenBSD

On OpenBSD 5.6 I need to provision a number of user accounts with default passwords. I would like users, upon their first SSH login, to be forced to change their passwords from the default. On CentOS and Debian I can do this using chage -d 0…
J.C.
  • 131
  • 5
1 2
3
…
14 15