FreeBSD IPSec stack contains backdoors?

2010-12-17 Thread Victor Lyapunov
-- Forwarded message -- From: Victor Lyapunov fullblastst...@gmail.com Date: 2010/12/15 Subject: FreeBSD IPSec stack contains backdoors? To: FreeBSD Mailing List freebsd-questions@freebsd.org Hi folks, Recently OpenBSD developer Gregory Perry disclosed information about possible

FreeBSD IPSec stack contains backdoors?

2010-12-15 Thread Victor Lyapunov
of backdoors have been introduced into the code. As far as I am aware, FreeBSD contains considerable amount of code ported from OpenBSD. The question is: was the FreeBSD's ipsec code ported from OpenBSD's implementation? If so, what might be the impact of this? Thanks, Victor Lyapunov

Any chance ZFS becoming default?

2009-12-19 Thread Victor Lyapunov
Hi everybody, Sorry for asking dumb questions, but is there any chance zfs becoming default FS in FreeBSD? If so, how soon might this happen? Cheers, Victor. ___ freebsd-questions@freebsd.org mailing list

zfs on 8.0-RELEASE

2009-11-28 Thread Victor Lyapunov
Hi everybody, First of all, I would like to congratulate all of you and thank all the developers and contributors, and the core team as the widely expected 8.0-RELEASE has become available recently. I wanted to ask a simple question, is ZFS now ready to be used on production systems? Best regards,

sending mail with attachments always fail (FreeBSD/pf)

2009-11-21 Thread Victor Lyapunov
Hi all, I have production network with FreeBSD box acting as firewall. The problem emerge as soon as users send mail with attachments. (Sending mail without attachments always succeeds). Basically, when a user tries to send a message, only part of it transmitted before connection is interrupted

Re: sending mail with attachments always fail (FreeBSD/pf)

2009-11-21 Thread Victor Lyapunov
This kind of thing is often due to a mtu blackhole - when a larger email causes a full size IP packet to be sent. I don't see why PF should make a difference though, IFAIK it's supposed to let ICMP through when it's learned state on a tcp connection. Thanks for your answer. Don't know whether