SitemapTable of ContentsBackCoverAbsolute OpenBSD - UNIX for the Practical ParanoidChapter 0: IntroductionWhat Is BSD?BSD Goes PublicAT&T UNIXWhat Is OpenBSD?Other BSDsOpenBSD UsersOpenBSD DevelopersOpenBSD''s StrengthsOpenBSD SecurityOpenBSD''s UsesWho Should Read This Book?Contents OverviewChapter 1: Additional HelpOpenBSD Community Support" The Code Is Fine; What''s Wrong with You? "Man Pageswww.OpenBSD.orgOther WebsitesMailing ListsUsing OpenBSD Problem-Solving ResourcesMailing for HelpChapter 2: Installation PreparationsOpenBSD HardwareGetting OpenBSDThe OpenBSD ReleaseChoosing Your Install MethodDistribution SetsPartitioningStandalone OpenBSD PartitioningMultiple OS PartitioningDisk SectorsDecisions Complete!Chapter 3: Dedicated InstallationHardware SetupMaking a Boot FloppyBootingThe Install ProgramDisk SetupCreating OpenBSD PartitionsSubsequent DisksOther Disklabel OperationsFinal Disk ConfigurationNetwork SetupRoot PasswordInstallation MediaDistribution SetsCustom Installation Sets and ScriptsFinal Installation StepsChapter 4: Multiboot InstallationDual-Boot Install OverviewMBR PartitionsDual-Boot Installation RestrictionsHard Disk GeometryUsing fdisk During an InstallOther fdisk OptionsDisklabel on Multiboot SystemsInstalling from a Foreign File System PartitionBoot ManagersChapter 5: Post-Install SetupBasic ConfigurationIntegrated Program ConfigurationCommon /etc/rc.conf AssignmentsInstalling the Source CodeInstalling the Ports CollectionFurther SetupChapter 6: Startup and BootingBoot Configuration/etc/boot.confSerial ConsolesMultiuser StartupEditing /etc/rc ScriptsChapter 7: Managing UsersSingle-User SystemsAdding UsersRemoving User AccountsGroups of UsersUser ClassesThe Root PasswordUsing Groups to Avoid Using RootHiding Root with SudoChapter 8: NetworkingNetwork LayersThe Life and Times of a Network RequestNetworking BasicsBasic TCP/IPConfiguring InterfacesIP RoutingChapter 9: Internet ConnectionsEthernetChapter 10: Additional Security FeaturesWho Is the Enemy?OpenBSD Security AnnouncementsChecksumsFile FlagsSecurelevelsSystraceCreating Systrace PoliciesReal-Time Systrace MonitoringSoftware Security FeaturesChapter 11: Basic Kernel ConfigurationWhat Is the Kernel?Startup MessagesSysctl(8)Kernel Alteration with config(8)Boot-Time Kernel ConfigurationChapter 12: Building Custom KernelsPreparationsConfiguration File FormatConfiguration FilesBusses and AttachmentsStripping Down the Kernelconfig(8)Building a KernelInstalling Your KernelChapter 13: Add-On SoftwareMaking SoftwareThe Ports and Packages SystemThe Ports TreeUsing PackagesUsing PortsPort FlavorsUninstalling and ReinstallingCustomizing Download SourcesRunning Foreign SoftwareChapter 14: /ETC/etc/adduser.conf/etc/afs//etc/amd//etc/authpf//etc/boot.conf/etc/bootptab/etc/ccd.conf/etc/changelist/etc/csh.*/etc/daily/etc/daily.local/etc/dhclient.conf/etc/dhcpd.conf/etc/disklabels//etc/exports/etc/fstab/etc/ftpchroot/etc/ftpusers/etc/groups/etc/hostname/etc/hosts/etc/hosts.equiv/etc/inetd.conf/etc/hosts.lpd/etc/kerberosIV/etc/kerberosV/etc/ksh.kshrc/etc/localtime/etc/locate.rc/etc/login.conf/etc/lynx.cfg/etc/magic/etc/mail//etc/mail.rc/etc/mailer.conf/etc/man.conf/etc/master.passwd/etc/mk.conf/etc/moduli/etc/monthly/etc/monthly.local/etc/motd/etc/mtree/etc/myname/etc/netstart/etc/newsyslog.conf/etc/passwd/etc/pf.conf/etc/phones/etc/portal.conf/etc/ppp//etc/printcap/etc/protocols/etc/pwd.db/etc/rbootd.conf/etc/rc.*/etc/remote/etc/resolv.conf/etc/rpc/etc/security/etc/services/etc/shells/etc/skel//etc/skeykeys/etc/sliphome//etc/spwd.db/etc/ssh//etc/ssl//etc/sudoers/etc/sysctl.conf/etc/syslog.conf/etc/systrace//etc/termcap/etc/ttys/etc/weekly/etc/weekly.local/etc/wsconsctl.confChapter 15: Disk and File System ManagementThe File System Table: /etc/fstabThe Fast File SystemCorrupt FFS PartitionsMount(8) and FFSMounting Foreign File SystemsRemovable MediaAdding New Hard DisksMemory File SystemsMounting Disk ImagesEncrypted PartitionsChapter 16: Upgrading OpenBSDWhy Upgrade?Versions of OpenBSDErrataUpgrading OpenBSDUpgrading Base SoftwareMerging /etcUpdating Ports and PackagesUpgrades from SourceStandard Source Build ProcessChapter 17: Basic Packet FilteringFirewallsEnabling PFWhat Is Packet Filtering?Packet Filter Control Program/etc/pf.confMacrosTablesOptionsPacket NormalizationPacket FilteringRules, Interfaces, and DHCPUsing Stateful InspectionFiltering Spoofed PacketsChapter 18: More Packet FilteringNetwork Address TranslationConnection RedirectionFTP and FirewallsLoad BalancingBandwidth ManagementALTQ Parent Queue SetupDefining Priority QueuesDefining Class-Based QueuesAssigning Traffic to QueuesQueuing by Type of ServiceRule OptimizationChapter 19: Managing PFManaging TablesManaging State TablesAuthenticating PFPF LoggingAppendix A: i386 Kernel Configuration ChoicesCPU ConfigurationMiscellaneous OptionsCommon Device Driversi386 Kernel OptionsPseudo-DevicesAppendix B: PF Example ConfigurationsHome FirewallSmall Office Usage3-Tier ArchitectureAfterwordIndexIndex_NumbersIndex_AIndex_BIndex_CIndex_DIndex_EIndex_FIndex_GIndex_HIndex_IIndex_KIndex_LIndex_MIndex_NIndex_OIndex_PIndex_QIndex_RIndex_SIndex_TIndex_UIndex_VIndex_WIndex_XIndex_YIndex_ZList of Tables