Questions tagged [openbsd]

OpenBSD is a free, multi-platform 4.4BSD-based UNIX-like operating system with a focus on security, portability, standardization, code correctness, proactive security and integrated cryptography.

enter image description here

OpenBSD is an open-source operating system derived from 4.4BSD UNIX and is popular for it's focus on security, portability and code correctness. It was forked from in the mid-1990s.

The project strictly incorporates only source code with ISC or BSD compatible licensing (except the ports tree) with the goal of providing software for any use, including commercial. It is funded by the Canadian non-profit, The OpenBSD Foundation, which also supports related projects such as OpenSSH, LibreSSL, OpenSMTPD, and other popular infrastructure software.

Website: http://www.openbsd.org

OpenBSD Foundation: http://www.openbsdfoundation.org

Distrowatch: http://distrowatch.com/table.php?distribution=openbsd

Wikipedia: http://en.wikipedia.org/wiki/OpenBSD

217 questions
26
votes
11 answers

Is anyone else using OpenBSD as a router in the enterprise? What hardware are you running it on?

We have an OpenBSD router at each of our locations, currently running on generic "homebrew" PC hardware in a 4U server case. Due to reliability concerns and space considerations we're looking at upgrading them to some proper server-grade hardware…
Kamil Kisiel
  • 11,946
  • 7
  • 46
  • 68
24
votes
2 answers

Authenticating OpenBSD against Active Directory

Edit: Reformatted this as Q&A. If anyone can change this from Community Wiki to a typical question, that's probably more appropriate as well. How can I authenticate OpenBSD against Active Directory?
sh-beta
  • 6,756
  • 7
  • 46
  • 65
22
votes
2 answers

Why does tomcat7 log into both catalina.out and catalina.YYYY-MM-DD.log?

On OpenBSD 5.2, the default installation of tomcat-7.0.29 seems to be logging all errors into both catalina.out and catalina.YYYY-MM-DD.log. Cns# ll /var/tomcat/logs/catalina.* -rw-r--r-- 1 _tomcat _tomcat 3067 Jan 16 20:47…
cnst
  • 12,948
  • 7
  • 51
  • 75
13
votes
6 answers

OpenBSD, FreeBSD: your update philosophy?

I've used FreeBSD for about 5 years - server/Desktop - and I've tended to take my apt-get/yum upgrade everything habits along with me ( I admin Debian/RHEL/Cent boxes as well -- I know, I know ...should be more discerning regardless of platform ).…
Bubnoff
  • 415
  • 6
  • 18
9
votes
1 answer

OpenBSD route via different gateways which have same IP but on different interfaces

I have multiple VPN connections which use the same gateway IP (I do not have the ability to change this as it is out of my control). These VPNs all provide access to different networks, and the networks are at least one or two hops upstream, so a…
bao7uo
  • 1,664
  • 11
  • 24
8
votes
1 answer

Send trunk directly to vm in HyperV 2012

I'm setting up OpenBSD as a VM in HyperV 2012. It would be easier for me to just create one interface on the vm and have OpenBSD take care of setting up the vlans. Is it possible to tell HyperV to send all traffic to a port whether it's tagged or…
Guillaume Filion
  • 967
  • 1
  • 10
  • 13
8
votes
4 answers

OpenBSD/FreeBSD Firewall w/ GUI that is compatible with Intel 82574L Gigabit LAN NICs

I recently purchased a server to run m0n0wall or pfSense but I've learned since then that both of these firewall products are based on versions of FreeBSD which weren't yet compatible with the NICs in my new server. The SuperMicro server that I…
Zen Master
  • 131
  • 1
  • 6
7
votes
1 answer

Multi-homed OpenBSD system: Policy based routing vs. mpath default routes

TL;DR Will OpenBSD policy based routing help with a multi-homed server/gateway situation? If so, how do I configure it? Long Form I'm managing an OpenBSD with two ISP links and VPN tunnels to remote routing nodes. Initially we used multiple default…
Jim Dennis
  • 807
  • 1
  • 10
  • 22
7
votes
7 answers

Linux equivalent of pfsync+carp for failover firewall/routing

I'm currently using a linux box to handle my firewall/NAT using iptables. It has two NICs, one link to a LAN switch, one to our egress Internet provider. I'm looking at upgrade this box to two boxes for purposes of redundancy and adding a second…
imaginative
  • 1,941
  • 9
  • 32
  • 48
7
votes
2 answers

Can I create a pf rule involving MAC address instead of IP?

The title is self explanatory. I want to create rules in pf running on OpenBSD 4.9 for perticular MAC address, something like pass in on eth0 from mac 00:04:34:5f:34:33 to mac 34:32:34:06:5e:22 I have read this, but it doesn't help!!
Vineet Menon
  • 191
  • 1
  • 7
6
votes
1 answer

OpenBSD not responding to arp queries

I am setting up an OpenBSD system as a router, I have one interface as the upstream, then another with a vlan configured: Upstream(em0): inet 10.0.2.20 255.255.255.0 NONE description upstream Downstream(em1): up VLAN10: inet 172.18.10.1…
6
votes
3 answers

Modern open source NIDS/HIDS and consoles?

Years back we set up an IDS solution by placing a tap in front of our exterior firewall, piping all the traffic on our DS1 through an IDS box and then sending the results off to a logging server running ACiD. This was around 2005-ish. I've been…
MattC
  • 367
  • 1
  • 4
  • 11
6
votes
2 answers

Setting up IPSEC on LAN between two hosts (OpenBSD)

Trying to use IPSEC between two hosts on a LAN. No VPN involved Using OpenBSD 5.8 (in VirtualBox). I'd prefer to use OpenBSD's built-in support for IPSEC and key exchange and not a third-party. Two hosts: 10.0.2.10 (host "A") and 10.0.2.11 (host…
Neil McGuigan
  • 204
  • 4
  • 14
6
votes
5 answers

How do I spamtrap with Postfix?

How do I setup spamtraps with Postfix so clients that send to trapped addresses are prevented from sending me more spam?
sh-beta
  • 6,756
  • 7
  • 46
  • 65
6
votes
3 answers

OpenBSD default gateway outside subnet

My ISP offers IPv6 by default. However, my ISPs IPv6 setup appears to be a bit strange because the default IPv6 gateway is located outside of my servers subnet. Under linux it is possible to setup a static route to that gateway using ip -6 route add…
RNieaa
  • 61
  • 2
1
2 3
14 15