OpenBSD 6.9 coming soon... https://www.openbsd.org/69.html

And the song is already available: https://www.openbsd.org/lyrics.html#69

#release

OpenBSD 6.9 RELEASED: https://marc.info/?l=openbsd-misc&m=161982689809279&w=2

#release

An OpenBSD-focused Ansible playbook embedded in type-annotated Python.

openbsd-run is an Ansible playbook embedded in type-annotated Python which allows for running the Ansible playbooks directly or via command line. The goal is to trivialize deploying and maintaining OpenBSD-based services.

https://openbsd.run/

#ansible #install

The state of toolchains in OpenBSD

https://www.cambus.net/the-state-of-toolchains-in-openbsd/

#system #compiler

OpenBSD 6.9 Router Benchmarks.

I've been using OpenBSD for my home router/gateway for years, and have run it on a number of different types of hardware. I recently got Verizon's gigabit service which is advertised at up to 940 Mb/s download and 880 Mb/s upload speeds, so I decided to benchmark some of the routers I have laying around. The contestants are:

- Ubiquiti EdgeRouter Lite: dual core 500 Mhz Cavium Octeon, Cavium ethernet using cnmac driver
- PC Engines APU4: quad core 1 GHz AMD GX-412TC Jaguar, Intel i211AT ethernet with em driver
- Ubiquiti EdgeRouter 4: quad core 1 GHz Cavium Octeon, Cavium ethernet with cnmac driver
- Supermicro E300-8D: quad core 2.2 GHz Intel Xeon D-1518 (SMT disabled), Intel I210 ethernet with em driver

https://kernelpanic.life/hardware/openbsd-router-benchmarks.html

#hardware

Opening a Garage Door Using OpenBSD on a Raspberry Pi.

OpenBSD lets one control the GPIO pins on a Raspberry Pi. Controlling a garage door is simple: connect the GPIO output pin to one side of a relay's coil, connect the 5 volt output of the Pi to the other side of the relay's coil, and connect wires from your garage's wall console to the relay's common and "normally closed" ports. Running the program below opens or closes the door. Since the Pi will be connected to the garage wall console, you'll want to enable sshd. I've named my Pi "garage" and my program "og," so I can open the door remotely with ssh garage /home/sven/bin/og

https://undeadly.org/cgi?action=article;sid=20210527120047

#hardware

Full OpenBSD 6.9 Startup described.

#system #boot

Rolling Back OpenBSD PF Changes.

If you have ever done something dumb in a firewall config and locked yourself out of a machine, you will appreciate the ability to automatically roll a configuration back to a previous version after a timeout period. This is something that commercial routers and firewall devices from Cisco, Juniper, and others have implemented, though their solutions cover more than just the firewall itself.

https://kernelpanic.life/software/rolling-back-openbsd-pf-changes.html

#pf #firewall

OpenBSD Mail Server (3 Part Series).

- Rspamd installation and OpenSMTPD configuration on it on OpenBSD
- Rspamd monitoring with OpenBSD relayd
- DKIM Migration: Rpamd instead of DKIMproxy out on OpenBSD / OpenSMTPD

#mail #rspamd

Filtering spam using Rspamd and OpenSMTPD on OpenBSD.

I recently used Spamassassin to get ride of the spam I started to receive but it proved to be quite useless against some kind of spam so I decided to give rspamd a try and write about it. rspamd can filter spam but also sign outgoing messages with DKIM, I will only care about the anti spam aspect.

https://dataswamp.org/~solene/2021-07-13-smtpd-rspamd.html

#mail #rspamd

My Fanless OpenBSD Desktop.

After the disappointment of my X1 Nano and learning that all future Intel “Evo”-branded laptops would lack S3 suspend, I started thinking about returning to my M1 MacBook full-time or building an OpenBSD desktop. I chose the latter, building my first desktop machine in many years...

https://jcs.org/2021/07/19/desktop

#desktop #hardware

clionly.host - A free OpenBSD Shell account

It is a free OpenBSD shell account available to anyone who can generate and use the new FIDO/U2F backed SSH keys: https://clionly.host

https://www.reddit.com/r/openbsd/comments/ouppmd/clionlyhost_a_free_openbsd_shell_account_for/

#link #service

In this guide we're going to take a look at how we can use cheap and "low end" hardware to build an amazing OpenBSD router with firewalling capabilities, segmented local area networks, DNS with domain blocking, DHCP and more.

We will use a setup in which the router segments the local area network (LAN) into three separate networks, one for the grown-ups in the house, one for the children, and one for public facing servers (a DMZ), such as a private web server or mail server. We will also look at how we can use DNS to block out ads, porn, and other websites on the Internet. The OpenBSD router can also be used on small to mid-size offices.

https://openbsdrouterguide.net/

#hardware #system #network

OpenBSD on the Framework Laptop.

Framework is a new company offering a laptop that is designed to be repairable and upgradeable, both in terms of internal components like the screen and motherboard, and in pluggable expansion cards.

https://jcs.org/2021/08/06/framework

#hardware #install #system

pfstat on OpenBSD: analyze stream on IPv4 and IPv6 through PF.

pfstat is a project made by Daniel Hartmeir to generate graphic statistiques about the network stream through the firewall PF.

https://framagit.org/sh-web/hugo/doc.huc.fr.eu.org/raw/master/content/en/monitor/pfstat-openbsd.md

#network #firewall #pf