Re: Future of pf / firewall in FreeBSD ? - does it have one ?

2014-08-01 Thread krad
I always found natting in ipfw rather awkward and harder than in pf. Looking at the man page it doesnt seem to have changed. I should probably give it another go though as it has been about 10 years now On 31 July 2014 14:41, Gleb Smirnoff gleb...@freebsd.org wrote: On Thu, Jul 31, 2014 at

Re: Future of pf / firewall in FreeBSD ? - does it have one ?

2014-08-01 Thread 2802717842
------ From:kradkra...@gmail.com; Date:2014??8??1??(??) 3:39 To:Gleb Smirnoffgleb...@freebsd.org; Cc:freebsd-currentfreebsd-current@freebsd.org;FreeBSD Questionsfreebsd-questi...@freebsd.org; Subject:Re: Future of pf / firewall in FreeBSD ? - does it have one ?

Re: Future of pf / firewall in FreeBSD ? - does it have one ?

2014-08-01 Thread 2802717842
------ From:kradkra...@gmail.com; Date:2014??8??1??(??) 3:39 To:Gleb Smirnoffgleb...@freebsd.org; Cc:freebsd-currentfreebsd-current@freebsd.org;FreeBSD Questionsfreebsd-questi...@freebsd.org; Subject:Re: Future of pf / firewall in FreeBSD ? - does it have one ?

Re: Future of pf / firewall in FreeBSD ? - does it have one ?

2014-08-01 Thread Mark Felder
July 31 2014 2:41 AM, Darren Pilgrim wrote: No. I believe pf should be removed from FreeBSD and efforts refocused on keeping ipfw up to date and feature complete. It makes more sense to look at what pf, ipf, nbtables, etc. are all doing as a source of ideas for what we can do with ipfw. A

Re: Future of pf / firewall in FreeBSD ? - does it have one ?

2014-08-01 Thread Ian Smith
In freebsd-questions Digest, Vol 530, Issue 5, Message: 1 On Thu, 31 Jul 2014 22:02:22 +1000 Da Rock freebsd-questi...@herveybayaustralia.com.au wrote: On 07/29/14 20:35, Gleb Smirnoff wrote: On Sun, Jul 20, 2014 at 12:30:59PM -0400, Mike. wrote: M | imho, the root problem here is that an

Re: Future of pf / firewall in FreeBSD ? - does it have one ?

2014-08-01 Thread Paul Kraus
On Aug 1, 2014, at 8:46, Mark Felder f...@freebsd.org wrote: I personally use pf for many reasons, spamd included. I don't think anyone out there is interested in forking spamd to play ball with ipfw so we would also be alienating these users who can't just change packet filters. Is there

local_unbound update corrupts network accessibility!

2014-08-01 Thread O. Hartmann
After the unbound update - or coinciding this update in CURRENT - I have massive and disturbing problems connecting to some sites, email servers and even the SVN server of FreeBSD (ports and src). For some name resoltions I receive Host xxx.xxx.de not found: 2(SERVFAIL), while another domain

Re: local_unbound update corrupts network accessibility!

2014-08-01 Thread Matthias Andree
Am 01.08.2014 um 18:25 schrieb O. Hartmann: After the unbound update - or coinciding this update in CURRENT - I have massive and disturbing problems connecting to some sites, email servers and even the SVN server of FreeBSD (ports and src). For some name resoltions I receive Host

Re: Fresh current (r269328) amd64: high load average while idle, slow keyboard reaction

2014-08-01 Thread Steve Wills
Hi, On Thu, Jul 31, 2014 at 06:22:27PM +0200, Anton Berezin wrote: Jan, On Thu, Jul 31, 2014 at 05:56:23PM +0200, Jan Kokemüller wrote: On 31.07.2014 16:21, Anton Berezin wrote: At the console, depressing and holding a key does not lead to auto-repeat. At the console, sometimes a key

Re: Fresh current (r269328) amd64: high load average while idle, slow keyboard reaction

2014-08-01 Thread Adrian Chadd
Hi! On 1 August 2014 11:18, Steve Wills swi...@freebsd.org wrote: Hi, On Thu, Jul 31, 2014 at 06:22:27PM +0200, Anton Berezin wrote: Jan, On Thu, Jul 31, 2014 at 05:56:23PM +0200, Jan Kokemüller wrote: On 31.07.2014 16:21, Anton Berezin wrote: At the console, depressing and holding a

Re: Future of pf / firewall in FreeBSD ? - does it have one ?

2014-08-01 Thread John-Mark Gurney
Cy Schubert wrote this message on Wed, Jul 23, 2014 at 09:18 -0700: In message CAJ-Vmo=_vLkMZn02EPUmpvqugcT8ga1_Kqs=XU49SGUNGEO0Pw@mail.gmail.c om , Adrian Chadd writes: On 18 July 2014 07:34, krad kra...@gmail.com wrote: that is true and I have not problem using man pages, however thats

Re: Fresh current (r269328) amd64: high load average while idle, slow keyboard reaction

2014-08-01 Thread Jan Kokemüller
Hi, Maybe this is a problem caused by a misdetected clock source? I've had this problem as well. I've appended the patch I've been using to fix this problem on this Intel Core2Duo T6570 processor. There are some model IDs hardcoded in the TSC detection code that enable TSC even though it's

Re: Fresh current (r269328) amd64: high load average while idle, slow keyboard reaction

2014-08-01 Thread Adrian Chadd
Can you file a pr with this patch? https://bugs.freebsd.org/submit/ That way we don't lose track of it. Thanks! -a On 1 August 2014 11:48, Jan Kokemüller jan.kokemuel...@gmail.com wrote: Hi, Maybe this is a problem caused by a misdetected clock source? I've had this problem as well.

Re: Fresh current (r269328) amd64: high load average while idle, slow keyboard reaction

2014-08-01 Thread Jan Kokemüller
On 01.08.2014 20:59, Adrian Chadd wrote: Can you file a pr with this patch? Done: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192316 Cheers, Jan ___ freebsd-current@freebsd.org mailing list

domain_add(xxx) after domainfinalize...

2014-08-01 Thread John-Mark Gurney
So, I have a laptop that devd loads the bluetooth module every time.. This means I get the following error on every boot: WARNING: attempt to domain_add(bluetooth) after domainfinalize() WARNING: attempt to domain_add(netgraph) after domainfinalize() Is there any real benefit to this warning? I

comments on vt as console...

2014-08-01 Thread John-Mark Gurney
So, I decided to play around w/ vt after the recent UTF-8 discussion, and noticed some issues w/ it... First, if you load the gallant font, things don't look very good... This is probably because of the fact that I'm using the vga driver: VT: running with driver vga. and the default resolution

Re: domain_add(xxx) after domainfinalize...

2014-08-01 Thread Svatopluk Kraus
Just what I've got in January 2011: http://lists.freebsd.org/pipermail/freebsd-hackers/2011-January/034037.html Svata On Fri, Aug 1, 2014 at 9:34 PM, John-Mark Gurney j...@funkthat.com wrote: So, I have a laptop that devd loads the bluetooth module every time.. This means I get the

Re: domain_add(xxx) after domainfinalize...

2014-08-01 Thread John-Mark Gurney
Svatopluk Kraus wrote this message on Sat, Aug 02, 2014 at 00:05 +0200: Just what I've got in January 2011: http://lists.freebsd.org/pipermail/freebsd-hackers/2011-January/034037.html Sadly, after three (or six+) years, it is clear that these bugs will not be fixed, and this warning message is

Re: domain_add(xxx) after domainfinalize...

2014-08-01 Thread Adrian Chadd
I'd just make it a panic. :) -a On 1 August 2014 15:21, John-Mark Gurney j...@funkthat.com wrote: Svatopluk Kraus wrote this message on Sat, Aug 02, 2014 at 00:05 +0200: Just what I've got in January 2011: http://lists.freebsd.org/pipermail/freebsd-hackers/2011-January/034037.html

Re: domain_add(xxx) after domainfinalize...

2014-08-01 Thread Marko Zec
On Fri, 1 Aug 2014 15:42:30 -0700 Adrian Chadd adr...@freebsd.org wrote: I'd just make it a panic. :) Are you prepared to say goodbye to kldloading netgraph at runtime? Marko -a On 1 August 2014 15:21, John-Mark Gurney j...@funkthat.com wrote: Svatopluk Kraus wrote this message

Re: domain_add(xxx) after domainfinalize...

2014-08-01 Thread Adrian Chadd
On 1 August 2014 15:55, Marko Zec z...@fer.hr wrote: On Fri, 1 Aug 2014 15:42:30 -0700 Adrian Chadd adr...@freebsd.org wrote: I'd just make it a panic. :) Are you prepared to say goodbye to kldloading netgraph at runtime? Well, why is it saying that? is there actually a problem? -a

Re: domain_add(xxx) after domainfinalize...

2014-08-01 Thread John-Mark Gurney
Adrian Chadd wrote this message on Fri, Aug 01, 2014 at 16:25 -0700: On 1 August 2014 15:55, Marko Zec z...@fer.hr wrote: On Fri, 1 Aug 2014 15:42:30 -0700 Adrian Chadd adr...@freebsd.org wrote: I'd just make it a panic. :) Are you prepared to say goodbye to kldloading netgraph at

Re: domain_add(xxx) after domainfinalize...

2014-08-01 Thread Adrian Chadd
On 1 August 2014 16:42, John-Mark Gurney j...@funkthat.com wrote: Adrian Chadd wrote this message on Fri, Aug 01, 2014 at 16:25 -0700: On 1 August 2014 15:55, Marko Zec z...@fer.hr wrote: On Fri, 1 Aug 2014 15:42:30 -0700 Adrian Chadd adr...@freebsd.org wrote: I'd just make it a panic.

Re: comments on vt as console...

2014-08-01 Thread Ed Maste
On 1 August 2014 17:18, John-Mark Gurney j...@funkthat.com wrote: So, I decided to play around w/ vt after the recent UTF-8 discussion, and noticed some issues w/ it... First, if you load the gallant font, things don't look very good... This is probably because of the fact that I'm using the

Re: Future of pf / firewall in FreeBSD ? - does it have one ?

2014-08-01 Thread Julian Elischer
On 8/1/14, 3:39 PM, krad wrote: I always found natting in ipfw rather awkward and harder than in pf. Looking at the man page it doesnt seem to have changed. I should probably give it another go though as it has been about 10 years now since ipfw now has a 'nat' keyword you might say that is has