OpenBSD is a Unix computer operating system descended from Berkeley Software Distribution (BSD) which emphasizes portability, standardization, correctness, proactive security and integrated cryptography.

learn more… | top users | synonyms

1
vote
1answer
63 views

How to detect/mitigate UDP port scan using OpenBSD and pf

One of our OpenBSD firewalls experienced a flood of UDP traffic from a compromised host within our internal network. The traffic was exchanged between the compromised internal host and a single ...
0
votes
1answer
74 views

How to detect suspicious activity on a web and mailserver?

There is a OpenBSD (64bit; 5.5) server having nginx (HTTP/HTTPS) and SMTP (OpenSMTP). Question: What are the best practices to detect suspicious activity? Are there any scripts that shows ...
1
vote
2answers
141 views

What's there to harden for a home Unix-box behind Comcast cable modem?

I'm learning that much of the security advice I come across under the "hardening" heading simply does not apply to a single-user home desktop box sitting in a private wireless IPv4 LAN behind a ...
11
votes
2answers
1k views

Do any OpenBSD protections mitigate the damage from Heartbleed?

OpenBSD provides a list of substantial protections against exploits inherent to the OS. Most of these features are not found in other operating systems, or at least are not turned on by default. The ...
3
votes
0answers
112 views

BSD encryption advantages [closed]

If someone who knows about the BSD project has a moment to answer this, I'm wondering a few things about the encryption used. It's more than what I'm finding in the docs and on Wiki/Google (even the ...
2
votes
2answers
865 views

For a simple purpose, a simple httpd server is more secure?

Using OpenBSD for example, we have a task to serve static html files, no php/cgi/etc. Q: What would be more secure? Using a default apache/nginx -OR- using (KISS principle) a chrooted www server ...
5
votes
4answers
731 views

In this case, does Virtualization gives more security?

A: running an OpenBSD machine with a httpd and a smtp server? vs. B: running an OpenBSD machine as virtualization host with QEMU having two guest OpenBSD system: one for smtp and one for httpd. ...
5
votes
1answer
123 views

OpenBSD, fbtab and X Window [closed]

The afterboot(8) man page of OpenBSD advises "You might wish to tighten up security more by editing /etc/fbtab as when installing X. " I would like to know what entries in /etc/fbtab would make sense ...
0
votes
2answers
398 views

Why is systrace insecure?

Why is the: http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=4 Systrace marked as insecure? Can someone explain the "why"?
1
vote
4answers
292 views

Learn about network and security for securing a server

I'm setting up an OpenBSD server that I want to connect to the Internet (it's going to be used to host a site - so, with Apache, SQLite and the like). I want it to be as secure as possible. Social ...
2
votes
3answers
935 views

Is running an OpenBSD in QEMU on an OpenBSD machine safe?

Is running an OpenBSD** using QEMU on an OpenBSD safer then running just natively an OpenBSD? ** = only used for apache + scp + ssh I'm thinking about running the OS/webserver in QEMU because then I ...
10
votes
3answers
10k views

How to best set up public WiFi without giving access to the rest of my network?

For reference, this is just for my home network. Anyway, I have quite a few of my neighbors ask me to share my internet with them. I'd really like to eliminate this "here's the password" portion ...
5
votes
3answers
724 views

Increase security without using “dynamic” kernel modules?

I recently read that NOT using loadable kernel modules could increase security. In my interpretation this consist about recomplying the kernel with only built-in kernel modules. (how to disable ...
5
votes
6answers
1k views

Where to download OpenBSD release ISO's over HTTPS?

OpenBSD claims to be highly secure. So why doesn't it allow downloading the release iso's over HTTPS? Or I'm missing something? Can someone please explain this to me?
2
votes
2answers
227 views

OBSD X11 as non-root?

If running X11 as root is not a very good idea, then can anyone mention a method/solution, how to still use a GUI, and not having X11 as root?
3
votes
1answer
322 views

OpenBSD-based LiveCD/LiveDVD - is it secure? is it offical?

Does the OpenBSD LiveCD/LiveDVD get deeply audited like the original OpenBSD? Is it an official "port"? Experiences with it?
4
votes
2answers
578 views

OpenBSD 32 or 64bit installer?

is the 64 bit or the 32 bit installer better? (not counting that if i have x>4 GByte RAM) - so i mean like is there any ASLR in OpenBSD? ...
9
votes
4answers
5k views

OpenBSD vs. NetBSD security

If i search for the two words: OpenBSD and NetBSD on: http://www.exploit-db.com/ then i get 17 hits regarding security bugs on OpenBSD, and 8 hits regarding security bugs on NetBSD. So what are ...
13
votes
5answers
569 views

What is the potential impact of the alleged OpenBSD IPSEC attack?

Recently there is a bit of concern over encryption back doors in IPsec and while the status of this has not been confirmed, I don't know what impact something like this might have. For instance, does ...