Re: Future of pf / firewall in FreeBSD ? - does it have one ?

2014-08-01 Thread krad
I always found natting in ipfw rather awkward and harder than in pf. Looking at the man page it doesnt seem to have changed. I should probably give it another go though as it has been about 10 years now On 31 July 2014 14:41, Gleb Smirnoff wrote: > On Thu, Jul 31, 2014 at 10:02:22PM +1000, Da R

Re: Future of pf / firewall in FreeBSD ? - does it have one ?

2014-08-01 Thread 2802717842
------ From:"krad"; Date:2014??8??1??(??) 3:39 To:"Gleb Smirnoff"; Cc:"freebsd-current";"FreeBSD Questions"; Subject:Re: Future of pf / firewall in FreeBSD ? - does it have one ? I always found natting in ipfw rather awkward and harder than in pf. Looking at the

Re: Future of pf / firewall in FreeBSD ? - does it have one ?

2014-08-01 Thread 2802717842
------ From:"krad"; Date:2014??8??1??(??) 3:39 To:"Gleb Smirnoff"; Cc:"freebsd-current";"FreeBSD Questions"; Subject:Re: Future of pf / firewall in FreeBSD ? - does it have one ? I always found natting in ipfw rather awkward and harder than in pf. Looking at the

Re: Future of pf / firewall in FreeBSD ? - does it have one ?

2014-08-01 Thread Mark Felder
July 31 2014 2:41 AM, "Darren Pilgrim" wrote: >> >> No. I believe pf should be removed from FreeBSD and efforts refocused >> on keeping ipfw up to date and feature complete. It makes more sense to >> look at what pf, ipf, nbtables, etc. are all doing as a source of ideas >> for what we can do with

Re: Future of pf / firewall in FreeBSD ? - does it have one ?

2014-08-01 Thread Ian Smith
In freebsd-questions Digest, Vol 530, Issue 5, Message: 1 On Thu, 31 Jul 2014 22:02:22 +1000 Da Rock wrote: > On 07/29/14 20:35, Gleb Smirnoff wrote: > > On Sun, Jul 20, 2014 at 12:30:59PM -0400, Mike. wrote: > > M> |> imho, the root problem here is that an effort to implement a > > M> single

Re: Future of pf / firewall in FreeBSD ? - does it have one ?

2014-08-01 Thread Paul Kraus
On Aug 1, 2014, at 8:46, Mark Felder wrote: > I personally use pf for many reasons, spamd included. I don't think anyone > out there is interested in forking spamd to play ball with ipfw so we would > also be alienating these users who can't just change packet filters. Is there > even an equiv

local_unbound update corrupts network accessibility!

2014-08-01 Thread O. Hartmann
After the unbound update - or coinciding this update in CURRENT - I have massive and disturbing problems connecting to some sites, email servers and even the SVN server of FreeBSD (ports and src). For some name resoltions I receive Host xxx.xxx.de not found: 2(SERVFAIL), while another domain t

Re: local_unbound update corrupts network accessibility!

2014-08-01 Thread Matthias Andree
Am 01.08.2014 um 18:25 schrieb O. Hartmann: > > After the unbound update - or coinciding this update in CURRENT - I have > massive and > disturbing problems connecting to some sites, email servers and even the SVN > server of > FreeBSD (ports and src). > > For some name resoltions I receive >

Re: Fresh current (r269328) amd64: high load average while idle, slow keyboard reaction

2014-08-01 Thread Steve Wills
Hi, On Thu, Jul 31, 2014 at 06:22:27PM +0200, Anton Berezin wrote: > Jan, > > On Thu, Jul 31, 2014 at 05:56:23PM +0200, Jan Kokemüller wrote: > > On 31.07.2014 16:21, Anton Berezin wrote: > > >At the console, depressing and holding a key does not lead to auto-repeat. > > > > > >At the console, so

Re: Fresh current (r269328) amd64: high load average while idle, slow keyboard reaction

2014-08-01 Thread Adrian Chadd
Hi! On 1 August 2014 11:18, Steve Wills wrote: > Hi, > > On Thu, Jul 31, 2014 at 06:22:27PM +0200, Anton Berezin wrote: >> Jan, >> >> On Thu, Jul 31, 2014 at 05:56:23PM +0200, Jan Kokemüller wrote: >> > On 31.07.2014 16:21, Anton Berezin wrote: >> > >At the console, depressing and holding a key

Re: Future of pf / firewall in FreeBSD ? - does it have one ?

2014-08-01 Thread John-Mark Gurney
Cy Schubert wrote this message on Wed, Jul 23, 2014 at 09:18 -0700: > In message om> > , Adrian Chadd writes: > > On 18 July 2014 07:34, krad wrote: > > > that is true and I have not problem using man pages, however thats not the > > > way most of the world work and search engines arent exactly n

Re: Fresh current (r269328) amd64: high load average while idle, slow keyboard reaction

2014-08-01 Thread Jan Kokemüller
Hi, Maybe this is a problem caused by a misdetected clock source? I've had this problem as well. I've appended the patch I've been using to fix this problem on this Intel Core2Duo T6570 processor. There are some model IDs hardcoded in the TSC detection code that enable TSC even though it's n

Re: Fresh current (r269328) amd64: high load average while idle, slow keyboard reaction

2014-08-01 Thread Adrian Chadd
Can you file a pr with this patch? https://bugs.freebsd.org/submit/ That way we don't lose track of it. Thanks! -a On 1 August 2014 11:48, Jan Kokemüller wrote: > Hi, > > >> Maybe this is a problem caused by a misdetected clock source? I've had >> this problem as well. > > > I've appended th

Re: Fresh current (r269328) amd64: high load average while idle, slow keyboard reaction

2014-08-01 Thread Jan Kokemüller
On 01.08.2014 20:59, Adrian Chadd wrote: Can you file a pr with this patch? Done: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192316 Cheers, Jan ___ freebsd-current@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-curr

domain_add(xxx) after domainfinalize...

2014-08-01 Thread John-Mark Gurney
So, I have a laptop that devd loads the bluetooth module every time.. This means I get the following error on every boot: WARNING: attempt to domain_add(bluetooth) after domainfinalize() WARNING: attempt to domain_add(netgraph) after domainfinalize() Is there any real benefit to this warning? I

comments on vt as console...

2014-08-01 Thread John-Mark Gurney
So, I decided to play around w/ vt after the recent UTF-8 discussion, and noticed some issues w/ it... First, if you load the gallant font, things don't look very good... This is probably because of the fact that I'm using the vga driver: VT: running with driver "vga". and the default resolution

Re: domain_add(xxx) after domainfinalize...

2014-08-01 Thread Svatopluk Kraus
Just what I've got in January 2011: http://lists.freebsd.org/pipermail/freebsd-hackers/2011-January/034037.html Svata On Fri, Aug 1, 2014 at 9:34 PM, John-Mark Gurney wrote: > So, I have a laptop that devd loads the bluetooth module every time.. > > This means I get the following error on eve

Re: domain_add(xxx) after domainfinalize...

2014-08-01 Thread John-Mark Gurney
Svatopluk Kraus wrote this message on Sat, Aug 02, 2014 at 00:05 +0200: > Just what I've got in January 2011: > http://lists.freebsd.org/pipermail/freebsd-hackers/2011-January/034037.html Sadly, after three (or six+) years, it is clear that these bugs will not be fixed, and this warning message is

Re: domain_add(xxx) after domainfinalize...

2014-08-01 Thread Adrian Chadd
I'd just make it a panic. :) -a On 1 August 2014 15:21, John-Mark Gurney wrote: > Svatopluk Kraus wrote this message on Sat, Aug 02, 2014 at 00:05 +0200: >> Just what I've got in January 2011: >> http://lists.freebsd.org/pipermail/freebsd-hackers/2011-January/034037.html > > Sadly, after thr

Re: domain_add(xxx) after domainfinalize...

2014-08-01 Thread Marko Zec
On Fri, 1 Aug 2014 15:42:30 -0700 Adrian Chadd wrote: > I'd just make it a panic. :) Are you prepared to say goodbye to kldloading netgraph at runtime? Marko > > -a > > > On 1 August 2014 15:21, John-Mark Gurney wrote: > > Svatopluk Kraus wrote this message on Sat, Aug 02, 2014 at 00:05

Re: domain_add(xxx) after domainfinalize...

2014-08-01 Thread Adrian Chadd
On 1 August 2014 15:55, Marko Zec wrote: > On Fri, 1 Aug 2014 15:42:30 -0700 > Adrian Chadd wrote: > >> I'd just make it a panic. :) > > Are you prepared to say goodbye to kldloading netgraph at runtime? Well, why is it saying that? is there actually a problem? -a ___

Re: domain_add(xxx) after domainfinalize...

2014-08-01 Thread John-Mark Gurney
Adrian Chadd wrote this message on Fri, Aug 01, 2014 at 16:25 -0700: > On 1 August 2014 15:55, Marko Zec wrote: > > On Fri, 1 Aug 2014 15:42:30 -0700 > > Adrian Chadd wrote: > > > >> I'd just make it a panic. :) > > > > Are you prepared to say goodbye to kldloading netgraph at runtime? > > Well

Re: domain_add(xxx) after domainfinalize...

2014-08-01 Thread Adrian Chadd
On 1 August 2014 16:42, John-Mark Gurney wrote: > Adrian Chadd wrote this message on Fri, Aug 01, 2014 at 16:25 -0700: >> On 1 August 2014 15:55, Marko Zec wrote: >> > On Fri, 1 Aug 2014 15:42:30 -0700 >> > Adrian Chadd wrote: >> > >> >> I'd just make it a panic. :) >> > >> > Are you prepared t

Re: comments on vt as console...

2014-08-01 Thread Ed Maste
On 1 August 2014 17:18, John-Mark Gurney wrote: > So, I decided to play around w/ vt after the recent UTF-8 discussion, > and noticed some issues w/ it... > > First, if you load the gallant font, things don't look very good... This > is probably because of the fact that I'm using the vga driver:

Re: Future of pf / firewall in FreeBSD ? - does it have one ?

2014-08-01 Thread Julian Elischer
On 8/1/14, 3:39 PM, krad wrote: I always found natting in ipfw rather awkward and harder than in pf. Looking at the man page it doesnt seem to have changed. I should probably give it another go though as it has been about 10 years now since ipfw now has a 'nat' keyword you might say that is has c