On Sat, Apr 13, 2013 at 09:43:14PM -0700, Gleb Kurtsou wrote:
On (22/03/2013 11:51), Shawn Webb wrote:
Hey All,
I'm not sure if this is a result of r248583 or a different commit, but I
hit a kernel panic when closing Chrome. I've linked to the info and
core.txt files below. If you need
On Fri, Apr 12, 2013 at 11:33:30PM -0700, Rui Paulo wrote:
It's not very difficult to switch an ipf.conf/ipnat.conf to a
pf.conf, but I'm not sure automated tools exist. I'm also not
convinced we need to write them and I think the issue can be deal
with by writing a bunch of examples on how
Hi
For quite some time this mirror site has been unreachable. AFAICT,
my ex colleagues who used to maintain it have moved on and it's now
been left unmaintained. I left there in 2004 and Mark Murray who
set it up left shortly thereafter. Perhaps it should be dropped
from the mirror list.
Ian
On Sun, Apr 14, 2013 at 07:55:21PM +0100, Joe Holden wrote:
wishmaster wrote:
--- Original message ---
From: Gary Palmer gpal...@freebsd.org
Date: 14 April 2013, 19:06:59
On Sun, Apr 14, 2013 at 09:48:33AM -0600, Warren Block wrote:
Is it possible to move ipfilter into a port?
Hello, Mark.
You wrote 15 апреля 2013 г., 2:25:07:
Yes! This is the most clever thought in this thread. Why we need 3
firewalls? Two packet filters it's excess too. We have two packet filters:
one with excellent syntax and functionality but with outdated bandwidth
control mechanism (aka
On Mon, Apr 15, 2013 at 1:15 PM, Lev Serebryakov l...@freebsd.org wrote:
Hello, Mark.
You wrote 15 апреля 2013 г., 2:25:07:
Yes! This is the most clever thought in this thread. Why we need 3
firewalls? Two packet filters it's excess too. We have two packet filters:
one with excellent syntax
Hello, Kimmo.
You wrote 15 апреля 2013 г., 14:26:40:
MM ... and as far as I can tell none of them is currently usable
MM on an IPv6-only FreeBSD (like protecting a host with sshguard),
MM none of them supports stateful NAT64, nor IPv6 prefix translation :(
IPv6 prefix translation?! AGAIN!?
On Mon, Apr 15, 2013 at 1:32 PM, Lev Serebryakov l...@freebsd.org wrote:
Hello, Kimmo.
You wrote 15 апреля 2013 г., 14:26:40:
MM ... and as far as I can tell none of them is currently usable
MM on an IPv6-only FreeBSD (like protecting a host with sshguard),
MM none of them supports stateful
On Mon, Apr 15, 2013 at 02:15:36PM +0400, Lev Serebryakov wrote:
Yes! This is the most clever thought in this thread. Why we need 3
firewalls? Two packet filters it's excess too. We have two packet filters:
one with excellent syntax and functionality but with outdated bandwidth
control
On Mon, Apr 15, 2013 at 1:38 PM, Slawa Olhovchenkov s...@zxy.spb.ru wrote:
On Mon, Apr 15, 2013 at 02:15:36PM +0400, Lev Serebryakov wrote:
Yes! This is the most clever thought in this thread. Why we need 3
firewalls? Two packet filters it's excess too. We have two packet filters:
one with
Hello, Kimmo.
You wrote 15 апреля 2013 г., 14:36:27:
And, yes, NAT64 will be useful for sure, but it is another story,
not IPv6-IPv6 translation.
KP You're forgetting set ups where outgoing traffic is controlled by
KP filter rules, outgoing passive mode ftp needs help from the proxy to
KP open
On Mon, Apr 15, 2013 at 1:44 PM, Lev Serebryakov l...@freebsd.org wrote:
Hello, Kimmo.
You wrote 15 апреля 2013 г., 14:36:27:
And, yes, NAT64 will be useful for sure, but it is another story,
not IPv6-IPv6 translation.
KP You're forgetting set ups where outgoing traffic is controlled by
KP
Hello, Kimmo.
You wrote 15 апреля 2013 г., 14:47:24:
KP I'm however talking about an ftp client behind a very restrictive
KP firewall making an IPv6 connection an ftp server that uses passive
KP mode data ports that can't be known in advance.
Same solution -- inspection of connections to 21
On Mon, Apr 15, 2013 at 1:50 PM, Lev Serebryakov l...@freebsd.org wrote:
Hello, Kimmo.
You wrote 15 апреля 2013 г., 14:47:24:
KP I'm however talking about an ftp client behind a very restrictive
KP firewall making an IPv6 connection an ftp server that uses passive
KP mode data ports that
On Mon, Apr 15, 2013 at 02:50:23PM +0400, Lev Serebryakov wrote:
KP I'm however talking about an ftp client behind a very restrictive
KP firewall making an IPv6 connection an ftp server that uses passive
KP mode data ports that can't be known in advance.
Same solution -- inspection of
MM ... and as far as I can tell none of them is currently usable
MM on an IPv6-only FreeBSD (like protecting a host with sshguard),
MM none of them supports stateful NAT64, nor IPv6 prefix translation :(
IPv6 prefix translation?! AGAIN!? FML. I've thought, that IPv6 will
render all that
On 14.04.13 21:55, Joe Holden wrote:
For non-nat ipfw is still superior in every way, numbered rules
(think: scripts), dummynet, much faster than pf, syntax is a lot nicer
and predictable...
And, best of all, it still is buggy. At lest, it's tables handling is
unusable.
I have been very
On Mon, Apr 15, 2013 at 1:54 PM, Kimmo Paasiala kpaas...@gmail.com wrote:
On Mon, Apr 15, 2013 at 1:50 PM, Lev Serebryakov l...@freebsd.org wrote:
Hello, Kimmo.
You wrote 15 апреля 2013 г., 14:47:24:
KP I'm however talking about an ftp client behind a very restrictive
KP firewall making an
On Mon, Apr 15, 2013 at 4:35 AM, Pawel Jakub Dawidek p...@freebsd.orgwrote:
I did receive Shawn's report some time ago, I even installed Chromium to
try to reproduce it, but it didn't crash for me yet.
If there are some easy, but reliable steps to reproduce it, like open
this webpage in tab
On Monday April 15 2013 12:32:37 Lev Serebryakov wrote:
And, yes, NAT64 will be useful for sure, but it is another story,
not IPv6-IPv6 translation.
Fear not, NPT66 prefix translation is stateless,
this is nothing like NAT44 / NAPT.
On Monday April 15 2013 12:51:00 sth...@nethelp.no wrote:
We
I have been very stubborn IPFW user for very long time, but finally gave up
in favor of PF. Nothing like that ever since. I am also not convinced IPFW
is any faster than PF.
Hi Daniel,
I know that measuring PPS for a firewall is not enought for comparing
firewall performance (rfc3511 details
In message alpine.bsf.2.00.1304140946440.10...@wonkity.com, Warren Block
writ
es:
On Sun, 14 Apr 2013, Chris Rees wrote:
On 14 April 2013 01:41, Rui Paulo rpa...@felyko.com wrote:
2013/04/13 16:01?Scott Long scott4l...@yahoo.com ??:
Maybe something else, but whatever it is, it
On Mon, 2013-04-15 at 11:22 +0200, Ian FREISLICH wrote:
Hi
For quite some time this mirror site has been unreachable. AFAICT,
my ex colleagues who used to maintain it have moved on and it's now
been left unmaintained. I left there in 2004 and Mark Murray who
set it up left shortly
Ok, seems someone has taken the job.
In message alpine.bsf.2.00.1304140946440.10...@wonkity.com, Warren Block
writ
es:
On Sun, 14 Apr 2013, Chris Rees wrote:
On 14 April 2013 01:41, Rui Paulo rpa...@felyko.com wrote:
2013/04/13 16:01?Scott Long scott4l...@yahoo.com ??:
Maybe
However it would of been better if said person asked me as I already
offered to take it on but whatever.
In message alpine.bsf.2.00.1304140946440.10...@wonkity.com, Warren Block
writ
es:
On Sun, 14 Apr 2013, Chris Rees wrote:
On 14 April 2013 01:41, Rui Paulo rpa...@felyko.com wrote:
I've been planning on taking on IP Filter for quite some time.
Unfortunately I've left my src commit bit lapse (my ports commit bit is
alive and well though) thus I'm looking for a mentor. In addition I'm
working on an ACER WMI/ACPI kld. One mentor would be preferred but two
would be fine too.
ACER WMI/ACPI? Sure, i'll mentor you if you're going to do _that_.
Adrian
On 15 April 2013 09:55, Cy Schubert cy.schub...@komquats.com wrote:
I've been planning on taking on IP Filter for quite some time.
Unfortunately I've left my src commit bit lapse (my ports commit bit is
alive and well
2013/04/15 9:55、Cy Schubert cy.schub...@komquats.com のメッセージ:
I've been planning on taking on IP Filter for quite some time.
Unfortunately I've left my src commit bit lapse (my ports commit bit is
alive and well though) thus I'm looking for a mentor. In addition I'm
working on an ACER
In message 18df99b0-6e66-4906-a233-7778451b8...@felyko.com, Rui Paulo
writes:
2013/04/15 9:55$B!(BCy Schubert cy.schub...@komquats.com
$B$N%a%C%;!%8(B:
I've been planning on taking on IP Filter for quite some time.
Unfortunately I've left my src commit bit lapse (my ports commit bit
https://github.com/davepacheco/mod_usdt
I've no time to port this but it ought to be straight forward and would be
interesting to those serving up
lots of Apache on FreeBSD.
If someone wants to hack on it and have me review it, I can do that.
Best,
George
signature.asc
Description: Message
Thank you to those that have expressed interest in maintaining IP Filter..
My thoughts are, could we consider putting a option in the kernel config,
and leaving it off by default for GENERIC?
I think this is a acceptable compromise, considering some people wish for
it to be removed.
Sam Fourman
To my knowledge it is already off by default and you need these options to
enable it
options IPFILTER
options IPFILTER_LOG
so to those that wish to have it removed from base, if it has a maintainer
whats the trouble?
On Mon, Apr 15, 2013 at 2:49 PM, Sam Fourman Jr. sfour...@gmail.com wrote:
In message a2450361-d9e9-498f-ad44-846563ef0...@yahoo.com, Scott Long
writes:
On Apr 15, 2013, at 11:48 AM, Cy Schubert cy.schub...@komquats.com wrote:
In message 18df99b0-6e66-4906-a233-7778451b8...@felyko.com, Rui Paulo
writes:
2013/04/15 9:55$B!(BCy Schubert
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 2013-04-15 15:27:55 -0400, Cy Schubert wrote:
In message a2450361-d9e9-498f-ad44-846563ef0...@yahoo.com, Scott
Long writes:
On Apr 15, 2013, at 11:48 AM, Cy Schubert
cy.schub...@komquats.com wrote:
In message
Cy,
good news that you volunteered to work on this!
On Mon, Apr 15, 2013 at 10:48:43AM -0700, Cy Schubert wrote:
C The initial plan was to import IP Filter 5.1.2 into HEAD. darrenr@ hadn't
C done much with IPF while employed with Sun. Since then there has been some
C development that is
It was pretty successful. All my 8.3 packages are still running very
happily, though at some point I imagine I will have to update and
recompile them.
But ...
When I press ENTER in the boot0 screen, I get the hyphen that will start
spinning after a timeout and begin loading boot1 (which, as
In message 20130415195544.gy76...@freebsd.org, Gleb Smirnoff writes:
Cy,
good news that you volunteered to work on this!
On Mon, Apr 15, 2013 at 10:48:43AM -0700, Cy Schubert wrote:
C The initial plan was to import IP Filter 5.1.2 into HEAD. darrenr@ hadn't
C done much with IPF while
The desire to remove it stems from the inability to give it adequate
engineering
service as the network stack evolves. Simply taking it out of a kernel config
file
doesn't address that problem at all. If it's going to stay in FreeBSD at all,
it
needs to be maintained. This could be set
On Apr 15, 2013, at 11:48 AM, Cy Schubert cy.schub...@komquats.com wrote:
In message 18df99b0-6e66-4906-a233-7778451b8...@felyko.com, Rui Paulo
writes:
2013/04/15 9:55$B!(BCy Schubert cy.schub...@komquats.com
$B$N%a%C%;!%8(B:
I've been planning on taking on IP Filter for quite some
It was pointed out to me that Darren Reed has changed licenses from his IP
Filter license that's been in IPF since 2005 or so, when he joined Sun, to
GPLv2 (probably when Darren left when Oracle took over Sun). Given that IPF
already lives in src/contrib and src/sys/contrib due to the 2005
On Apr 15, 2013, at 1:27 PM, Cy Schubert cy.schub...@komquats.com wrote:
In message a2450361-d9e9-498f-ad44-846563ef0...@yahoo.com, Scott Long
writes:
On Apr 15, 2013, at 11:48 AM, Cy Schubert cy.schub...@komquats.com wrote:
In message 18df99b0-6e66-4906-a233-7778451b8...@felyko.com,
In message 516c58ed.40...@freebsd.org, Jung-uk Kim writes:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 2013-04-15 15:27:55 -0400, Cy Schubert wrote:
In message a2450361-d9e9-498f-ad44-846563ef0...@yahoo.com, Scott
Long writes:
On Apr 15, 2013, at 11:48 AM, Cy Schubert
On Mon, Apr 15, 2013 at 04:47:33PM -, c...@sdf.org wrote:
c However it would of been better if said person asked me as I already
c offered to take it on but whatever.
More manpower - the better. Why can't you work together?
--
Totus tuus, Glebius.
On Mon, Apr 15, 2013 at 01:32:48PM -0600, Scott Long wrote:
S Given that IPF already lives in src/contrib and src/sys/contrib, would the
S change in License from Darren Reed's own not so BSD friendly IPF license
to
S GPLv2 be of concern. I recall there was a lot of concern over IPF's
On Mon, 2013-04-15 at 15:58 -0400, George Mitchell wrote:
that does not respond to key presses on the keyboard. It times out
and
continues loading anyway. At this stage, I am always presented with a
manual mountroot: prompt, and I have to type ufs:/dev/ada0s1a to get
any further.
Hrm
O. Hartmann ohart...@zedat.fu-berlin.de writes:
Trying to recompile converters/libiconv on FreeBSD 10.0-CUR/r49438 (with
bran new CLANG 3.3) results with the errors below. This error shows up
on boxes having FBSD 10 and X11. It doesn't show up on those boxes
running without a full X11 (that
On 04/15/13 18:09, Sean Bruno wrote:
On Mon, 2013-04-15 at 15:58 -0400, George Mitchell wrote:
that does not respond to key presses on the keyboard. It times out
and
continues loading anyway. At this stage, I am always presented with a
manual mountroot: prompt, and I have to type
On Tue, Apr 16, 2013 at 1:44 AM, George Mitchell george+free...@m5p.com wrote:
On 04/15/13 18:09, Sean Bruno wrote:
On Mon, 2013-04-15 at 15:58 -0400, George Mitchell wrote:
that does not respond to key presses on the keyboard. It times out
and
continues loading anyway. At this stage, I
In message 20130415212826.ga76...@freebsd.org, Gleb Smirnoff writes:
On Mon, Apr 15, 2013 at 04:47:33PM -, c...@sdf.org wrote:
c However it would of been better if said person asked me as I already
c offered to take it on but whatever.
Sorry, I didn't see your posting. I had a permissions
On 04/15/13 18:52, Kimmo Paasiala wrote:
On Tue, Apr 16, 2013 at 1:44 AM, George Mitchell george+free...@m5p.com wrote:
On 04/15/13 18:09, Sean Bruno wrote:
On Mon, 2013-04-15 at 15:58 -0400, George Mitchell wrote:
that does not respond to key presses on the keyboard. It times out
and
On Mon, Apr 15, 2013 at 03:58:26PM -0400, George Mitchell wrote:
It was pretty successful. All my 8.3 packages are still running very
happily, though at some point I imagine I will have to update and
recompile them.
But ...
When I press ENTER in the boot0 screen, I get the hyphen that
On 4/15/2013 7:50 PM, George Mitchell wrote:
I tried that and there was no change. I still get the mountroot:
prompt and have to type ufs:/dev/ada0s1a. -- George
___
freebsd-current@freebsd.org mailing list
Okay I must be loosing it since the change over to svn, and loosing cvsup
where can i find the last commit to HEAD ?
and is it correct to use
svn co http://svn.freebsd.org/base/head/ for 10.0-CURRENT srcs
making the last commit rev 249529
and as for 9.x i thought releng was what brought
On Mon, Apr 15, 2013 at 09:48:20PM -0400, Outback Dingo wrote:
Okay I must be loosing it since the change over to svn, and loosing cvsup
where can i find the last commit to HEAD ?
A couple of Web-oriented sources of information:
* http://docs.freebsd.org/mail/current/svn-src-head.html, which
On Mon, Apr 15, 2013 at 10:17 PM, David Wolfskill da...@catwhisker.orgwrote:
On Mon, Apr 15, 2013 at 09:48:20PM -0400, Outback Dingo wrote:
Okay I must be loosing it since the change over to svn, and loosing cvsup
where can i find the last commit to HEAD ?
A couple of Web-oriented
On (15/04/2013 10:35), Pawel Jakub Dawidek wrote:
On Sat, Apr 13, 2013 at 09:43:14PM -0700, Gleb Kurtsou wrote:
On (22/03/2013 11:51), Shawn Webb wrote:
Hey All,
I'm not sure if this is a result of r248583 or a different commit, but I
hit a kernel panic when closing Chrome. I've
56 matches
Mail list logo
