Channel: OpenBSD
Excision Mail.
Fullstack, security focused mailserver based on OpenSMTPD for OpenBSD.
https://excision.bsd.ac/
#opensmtpd #mail
Fullstack, security focused mailserver based on OpenSMTPD for OpenBSD.
https://excision.bsd.ac/
#opensmtpd #mail
Wireguard all the things.
The good thing about wireguard besides its security is that it keeps things very simple plus OpenBSD simplicity makes the whole environment easy to setup even with crossing platform, such us iOS, Android, Windows, Linux and so on. For this setup you need only "libqrencode" and "wireguard-tools" to create qr codes to import the vpn configuration on your devices, so for this we do...
https://x61.sh/log/2022/01/20220104T122904-wireguard.html
#network #vpn #wireguard
The good thing about wireguard besides its security is that it keeps things very simple plus OpenBSD simplicity makes the whole environment easy to setup even with crossing platform, such us iOS, Android, Windows, Linux and so on. For this setup you need only "libqrencode" and "wireguard-tools" to create qr codes to import the vpn configuration on your devices, so for this we do...
https://x61.sh/log/2022/01/20220104T122904-wireguard.html
#network #vpn #wireguard
π7
Feedback from and for subscribers. π€
> I'd like to share that for almost 3 years I've been running Telegram channels with CVS commit messages: https://hottg.com/OpenBSD_CVS (along with
@OpenBSD_src, @OpenBSD_ports, @OpenBSD_xenocara and @OpenBSD_www).
> Commit messages are received directly from source-changes@ and ports-changes@, parsed and immediately sent to the Telegram API.
#feedback #community #cvs
> I'd like to share that for almost 3 years I've been running Telegram channels with CVS commit messages: https://hottg.com/OpenBSD_CVS (along with
@OpenBSD_src, @OpenBSD_ports, @OpenBSD_xenocara and @OpenBSD_www).
> Commit messages are received directly from source-changes@ and ports-changes@, parsed and immediately sent to the Telegram API.
#feedback #community #cvs
π7β€1π1
The complete idiot's guide to OpenBSD on the Pinebook Pro.
Today I will show you how I installed the latest snapshot of OpenBSD on my Pinebook Pro with plenty of detail so that you can do it, too. I will include instructions for setting up full disk encryption, and conclude with a summary of my experience running OpenBSD on this device...
https://tomscii.sig7.se/2022/02/Guide-to-OpenBSD-on-the-PinebookPro
#install #system #hardware
Today I will show you how I installed the latest snapshot of OpenBSD on my Pinebook Pro with plenty of detail so that you can do it, too. I will include instructions for setting up full disk encryption, and conclude with a summary of my experience running OpenBSD on this device...
https://tomscii.sig7.se/2022/02/Guide-to-OpenBSD-on-the-PinebookPro
#install #system #hardware
π7
A reckless guide to OpenBSD.
Welcome to a new weekly series of articles for intermediate to advanced level users of OpenBSD, focusing on aspects of using and customising the system that are not broadly covered or encouraged by the project's own official documentation, (hence the term βreckless guideβ)...
https://www.exoticsilicon.com/jay/reckless_guide_to_openbsd
#system
Welcome to a new weekly series of articles for intermediate to advanced level users of OpenBSD, focusing on aspects of using and customising the system that are not broadly covered or encouraged by the project's own official documentation, (hence the term βreckless guideβ)...
https://www.exoticsilicon.com/jay/reckless_guide_to_openbsd
#system
π16
Debugging an ioctl Problem on OpenBSD.
I was trying to use a V4L2 Ruby module on my OpenBSD laptop but ran into a problem where sending the V4L2 ioctls from this module would fail, while other V4L2 programs on OpenBSD worked fine...
https://jcs.org/2022/02/16/ioctl
#ruby #debug #ioctl
I was trying to use a V4L2 Ruby module on my OpenBSD laptop but ran into a problem where sending the V4L2 ioctls from this module would fail, while other V4L2 programs on OpenBSD worked fine...
https://jcs.org/2022/02/16/ioctl
#ruby #debug #ioctl
π1
-current has moved to 7.1-beta
With the following commit, Theo de Raadt (deraadt@) moved -current to version 7.1-beta:
https://www.undeadly.org/cgi?action=article;sid=20220221061125
#release
With the following commit, Theo de Raadt (deraadt@) moved -current to version 7.1-beta:
https://www.undeadly.org/cgi?action=article;sid=20220221061125
#release
π5
Native IPv6 with OpenBSD and Aussie Broadband
We are coming on two decades since IPv6 became a recognised standard and generally available but it is still not being widely adopted by people and organisations that have easy access to IPv4 address space. Even if you have a native IPv4 address, it will typically be in the form of some CG-NAT or other NAT on your customer premises equipment (CPE)...
https://www.tubsta.com/2022/03/native-ipv6-with-openbsd-and-aussie-broadband/
#network #ipv6
We are coming on two decades since IPv6 became a recognised standard and generally available but it is still not being widely adopted by people and organisations that have easy access to IPv4 address space. Even if you have a native IPv4 address, it will typically be in the form of some CG-NAT or other NAT on your customer premises equipment (CPE)...
https://www.tubsta.com/2022/03/native-ipv6-with-openbsd-and-aussie-broadband/
#network #ipv6
π3
OpenBSD/arm64 on Apple M1 systems.
It has taken a while, but I'm pleased to announce that OpenBSD/arm64 works well enough on Apple M1 systems for some wider testing...
https://www.undeadly.org/cgi?action=article;sid=20220320115932
#hardware #install #system
It has taken a while, but I'm pleased to announce that OpenBSD/arm64 works well enough on Apple M1 systems for some wider testing...
https://www.undeadly.org/cgi?action=article;sid=20220320115932
#hardware #install #system
π17π2
obsdfreqd - userland CPU frequency scheduling for OpenBSD.
https://tildegit.org/solene/obsdfreqd
#cpu #freq
https://tildegit.org/solene/obsdfreqd
#cpu #freq
π₯1
Heap Overflow in OpenBSD's slaacd via Router Advertisement
In this blog post we analyze a heap overflow vulnerability we discovered in the IPv6 stack of OpenBSD, more specifically in its slaacd daemon. This issue, whose root cause can be found in the mishandling of Router Advertisement messages containing a DNSSL option with a malformed domain label, was patched by OpenBSD on March 21, 2022. A proof-of-concept to reproduce the vulnerability is provided.
https://blog.quarkslab.com/heap-overflow-in-openbsds-slaacd-via-router-advertisement.html
#security #network #slaacd
In this blog post we analyze a heap overflow vulnerability we discovered in the IPv6 stack of OpenBSD, more specifically in its slaacd daemon. This issue, whose root cause can be found in the mishandling of Router Advertisement messages containing a DNSSL option with a malformed domain label, was patched by OpenBSD on March 21, 2022. A proof-of-concept to reproduce the vulnerability is provided.
https://blog.quarkslab.com/heap-overflow-in-openbsds-slaacd-via-router-advertisement.html
#security #network #slaacd
π3π1
Doing stupid things (with packets and OpenBSD).
Several articles about OpenBSD on server: https://doing-stupid-things.as59645.net/
#system #network #mail
Several articles about OpenBSD on server: https://doing-stupid-things.as59645.net/
#system #network #mail
π5
FreeBSD vs OpenBSD: Which is Right for You?
FreeBSD vs OpenBSD. Which is more secure? Which is faster? Which is generally superior? Both have their strengths and weaknesses, and both appeal to different audiences depending on needs.
https://www.ateamsystems.com/tech-blog/freebsd-vs-openbsd-which-is-right-for-you/
#system
FreeBSD vs OpenBSD. Which is more secure? Which is faster? Which is generally superior? Both have their strengths and weaknesses, and both appeal to different audiences depending on needs.
https://www.ateamsystems.com/tech-blog/freebsd-vs-openbsd-which-is-right-for-you/
#system
π2π₯1
π5
OpenBSD Gaming Updates Q2 2022.
It's been a little quieter on the subreddit for a while, but that doesn't mean that nothing is happening in OpenBSD gaming! With the final touches being applied before the OpenBSD 7.1 release, this is as good a time as any to give a bit of an overview of recent developments and useful resources...
https://www.reddit.com/r/openbsd_gaming/comments/u5tdzy/openbsd_gaming_updates_q2_2022/
#desktop #games #system
It's been a little quieter on the subreddit for a while, but that doesn't mean that nothing is happening in OpenBSD gaming! With the final touches being applied before the OpenBSD 7.1 release, this is as good a time as any to give a bit of an overview of recent developments and useful resources...
https://www.reddit.com/r/openbsd_gaming/comments/u5tdzy/openbsd_gaming_updates_q2_2022/
#desktop #games #system
How to talk to a local IPMI under OpenBSD.
Much like Linux, modern versions of OpenBSD are theoretically able to talk to a suitable local IPMI using the standard ipmi(4) kernel driver. This is imprecise although widely understood terminology; in more precise terms, OpenBSD can talk to a machine's BMC (Baseboard Management Controller) that implements the IPMI specification using one of a number of standard interfaces, as covered in the "System Interfaces" section of ipmi(4). However, OpenBSD throws us a curve ball in that the ipmi(4) driver is normally present in the default OpenBSD kernel but not enabled...
https://utcc.utoronto.ca/~cks/space/blog/unix/OpenBSDLocalIPMI
#ipmi #hardware
Much like Linux, modern versions of OpenBSD are theoretically able to talk to a suitable local IPMI using the standard ipmi(4) kernel driver. This is imprecise although widely understood terminology; in more precise terms, OpenBSD can talk to a machine's BMC (Baseboard Management Controller) that implements the IPMI specification using one of a number of standard interfaces, as covered in the "System Interfaces" section of ipmi(4). However, OpenBSD throws us a curve ball in that the ipmi(4) driver is normally present in the default OpenBSD kernel but not enabled...
https://utcc.utoronto.ca/~cks/space/blog/unix/OpenBSDLocalIPMI
#ipmi #hardware
HTML Embed Code: