Hi Stuart,
On Mon, 2022-11-07 at 23:20 +, Stuart Henderson wrote:
> Hi Jeroen,
>
> On 2022-11-07, Jeroen Koekkoek wrote:
> > Hi All,
> >
> > I'm working on some patches/features for NSD. One of the new
> > features
> > uses some Apache 2.0 license
to be licensed under
Apache 2.0.
If my assumptions are correct, and since NSD is in base, the dependency
on the Apache 2.0 licensed code is therefore better removed or,
alternatively, relicensed under a BSD-compatible license, right?
Thanks in advance.
Cheers,
Jeroen
Hi,
I've yet to stumble upon the first provider which actually uses OpenBSD
as the hypervisor, instead of VMware, Xen, KVM, etc. That, in fact,
would be an awesome development. I have been thinkering with this
thought back and forth, but the IT company I work for isn't big enough
to facilitate
Hi,
Strange. With the default pfstat.conf it works fine, though when I try
it with your config (though edited to my setup), I get exactly the same
error as you did. Also on -current.
Are you able to rebuilt your config, piece by piece and see where it
fails? That might help to narrow it down
Hi,
Did you upgrade your packages after upgrading to -current? Can you
share your /etc/pfstat.conf?
-J.
On Wed, 2018-02-14 at 11:58 +0800, Glenn Faustino wrote:
> Hi,
>
> I noticed that my system stop generating graphs for pfstat after upgrading
> to -current. When I run the command manually
Copperhead's linux-hardened can be a suitable replacement for grsec in
due time. However, AFAIK that is not the intent. Fot those unfamiliar
with Copperhead, they did (and do) an awesome job on hardening Android.
They have forked AOSP, hardened it. The fork is called CopperheadOS.
This is also
Thanks, Kevin. Exactly this. Even though I think OpenBSD is awesome, it
isn't fit for every situation/use case. Thus, I hardly meant that it is
viable for anything and everything.
To give some examples: OpenBSD doesn't support ZFS (nor should it, lots
of kernel changes required for that, some are
There is a bit of information that I am missing. You mentioned that the
throughput on your Amilo, with OpenBSD, is 240KB/s whereas "other OS"
(SiC) is able to get a throughput of 1.4MB/s.
What application are you using to measure the performance? And this is
not meant as an insult, but could it
Hi,
OpenBSD has a clear and proactive stance when it comes to security,
while Arch does not. If you want to stay atop of new developments, feel
free to try -current. If you need a very stable environment, go with
-stable. Don't expect to find that latter one in Arch, as it works with
a rolling
As far as I am concerned, HTTPS by itself doesn't do miracles. It
involved more tech. Unless you can hack the global web infra, it's only
possible to change this on a local network. Wouldn't there be more
interesting targets in such situations?
Don't get me wrong, I am not trying to downplay the
With HTTPS, can you be sure that the server isn't comprimised? With or
without HTTPS, it's always a good idea to check wether the address is
correct (a foundation has to be registered and at other places).
On Wed, 2018-02-07 at 14:40 +0100, Jonathan Thornburg wrote:
> From
29) line 1
chmod +s `which fping`? :)
(that is, if fping is in your path, and if that is the right fping, also
note that there is fping and fping6)
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
.
8
And I know for a fact that IBM ISS has a DPI thing which can do
40Gbps++, that is including upto Level 7 analysis... it just depends on
what kind of hardware one throws at it ;)
Greets,
Jeroen
(long live IPSEC :)
[demime 1.01d removed an attachment of type application/pgp-signature which
, heartbeat is not that far away from that in some cases ;)
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
broker' with an entity that can convert
IPv6-IPv4.
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
Matthew Dempsky wrote:
On Wed, Dec 17, 2008 at 12:43 AM, Jeroen Massar jer...@unfix.org wrote:
I guess there is a practical use here, that is, if your tools all
understand IPv6, because then you only have an IPv6 NAT to IPv4 and
you skip the IPv4 NAT to IPv4 in case you don't have any IPv4
Stephan A. Rickauer wrote:
On Wed, 2008-12-17 at 11:11 +0100, Jeroen Massar wrote:
You are trying to solve the wrong problem with the wrong hammer.
I need to go the bus station. Do you know the way?
If I were you, I wouldn't start from here.
Sorry, but relayd is _exactly_ what can fix
anyway. You could of course
always set up a SOCKS proxy as those things also properly do IPv4-IPv6
IPv6-IPv4 IPv4-IPv4 IPv6-IPv6 etc etc etc.
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
you can do it on
hostnames.
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
Simon Vallet wrote:
On Sat, 06 Dec 2008 21:17:39 +0100
Jeroen Massar [EMAIL PROTECTED] wrote:
Simon Vallet wrote:
[..]
Would I be missing something?
The fact that generally people use NAMES and not IP addresses?
It is not called __Name__VirtualHost for nothing ;)
??
http
to lo at the last hop so that any
unassigned subnets don't cause the packet to be bounced back up to the
default route.
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
is named so just like Debian, because amd64 was first and then
Intel made EMT64. Some distro's renamed their amd64 branch to x86_64 for
this reason because that is a better name for the instruction set.
Note that AMD64/EMT64 is not equal to IA-64 which is Itanium.
Greets,
Jeroen
[demime 1.01d
Sevan / Venture37 wrote:
ipv6.undeadly.org doesn't resolve, is the site not offered via IPv6
anymore??
www.undeadly.org2001:4978:129::1
216.194.67.89
Works like a charm.
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature
about
licensing issues, as it is not their license and thus is not good
enough. Blergh.
Greets,
Jeroen
(who just sticks BSD licenses on 'code I give away' and everything
else is nice and commercial and closed source: pay for it first)
[demime 1.01d removed an attachment of type application/pgp
separate IPv4 + IPv6
sockets and thus listen for both.
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
no access to the source code.
That is only because you are uneducated in the art of assembly and more
importantly there in the art of disassembly. That you are powerless
doesn't mean that other people are not.
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which
, OK?
And by removing the BSD license you are thus removing freedom.
Did you notice that? That is what has been repeated to you already a
number of times.
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
) year author this
is also handy for determining prior art etc.
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
, but it should not be too
long for those items to be resolved.
Enjoy!
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
, which is not the intent of the original copyright holder
and also something you fortunately can't be doing.
If you don't like the licensing, then don't use the code at all, don't
even look at it.
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name
at 10:32:05AM +0100, Jeroen Massar wrote:
Because of the choice between licenses you can either choose to adhere
to the GPL (thus forcing you to open up your changes)
^^^
That is false, only if software is distributed.
There is nothing false
running the risk of getting sued when
somebody peeps up using their code. They use BSD/ISC licenses. Some
other people like to code something and let everybody use it and then
let people pay for what they've done in returns for support costs
these people use GPL viral licenses.
Greets,
Jeroen
[demime
you are going.
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
Lars NoodC)n wrote:
Jeroen Massar wrote:
Stop exactly there.
Upgrade to either Apache 2.x or patch your Apache 1.3 with IPv6 patches.
Is there a conveniently chrooted version (port or package) of
Apache2.x? Or is chrooting the new version entirely up to whoever
installs it? It's
Christian Weisgerber wrote:
Jeroen Massar [EMAIL PROTECTED] wrote:
And as mentioned, you can always apply the 1.3 patches if you don't like
going that route. (I still actually don't understand why those patches
are not integrated yet in the default 1.3 tree, probably has something
to do
who also runs around those areas.
If the person was quite tall and looked like:
http://www.weirdnet.nl/images/paul.jpg then it was him.
It wasn't me as I am not on the continent, back there in October though.
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature
BIOS that it is on.
cpu0 at mainbus0: (uniprocessor)
It only sees one CPU, most likely due to missing ACPI.
[..]
WARNING: NVRAM century is 32 but RTC year is 2007
Clearly something is wrong with the config of the BIOS. try resetting it
or turning some knobs.
Greets,
Jeroen
[demime 1.01d
?
4 NE2000's will do fine in any machine. Kidding ;)
What link speeds do you want to handle with the setup, and more
importantly, what is the expected traffic mix? Are you going to expect
a high pps rate, do you require low latency? Also, what is your budget?
Greets,
Jeroen
[demime 1.01d
this hypothesis. Other than troubleshooting
help, what are other people using for dns caching?
Well, pdns_recursor or bind one of the two actually. If I where you I
would first diagnose your network a bit more and start
replacing/fixing faulty parts.
Greets,
Jeroen
[demime 1.01d removed
.
And then the evil user simply drops a backdoor binary on one of the
machines.
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
, thus for your example:
block out quick on $external from any to 123.123.100.0/24
block out quick on $external from any to 123.123.200.0/24
A /23 would be 100 - 254, see 'sipcalc' or other such tools for
calculations. Also see Wikipedia's CIDR entry for more details.
Greets,
Jeroen
[demime 1.01d
[set the topic to make it nice and clear, this has nothing to do with
bcw(4) for a long time now, actually the whole thread avoided it]
Rui Miguel Silva Seabra wrote:
Seg, 2007-04-09 C s 18:29 +0100, Jeroen Massar escreveu:
GPL is good though if you want to force people to give back the code
Rui Miguel Silva Seabra wrote:
[correct the subject] ;)
Qua, 2007-04-11 C s 14:26 +0100, Jeroen Massar escreveu:
[set the topic to make it nice and clear, this has nothing to do with
bcw(4) for a long time now, actually the whole thread avoided it]
Rui Miguel Silva Seabra wrote:
Seg, 2007
, which also happens to be released under
the GPL.
That is simply dual-licensing, something different altogether ;)
See above for a nasty trick there though.
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
have bash, just add a 'set -x' at the top, saves quite some
hard labor :) Prolly also available for other shells, use the tool you like.
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
-l2tp
which are also in the google results...
Google is your boyfriend ;)
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
amazingly secure as has been very well been demonstrated: kuddo's
to all the developers who made that possible!
Greets,
Jeroen
--
if (it.hascode()) it.hasabug();
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
is TCP or UDP in the end :)
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
Claudio Jeker wrote:
On Sun, Jan 28, 2007 at 03:17:14PM +, Jeroen Massar wrote:
Brian Candler wrote:
On Sun, Jan 28, 2007 at 12:36:38AM -0800, Joe wrote:
whats sad is how many people will never let go of NAT after they migrate
to ipv6.
It's not sad; for many people it would be essential
[changed subject to something more related ;) ]
Brian Candler wrote:
On Sun, Jan 28, 2007 at 03:17:14PM +, Jeroen Massar wrote:
And if you need to change ISP, and
therefore get a new address allocation, many people would rather just put
in
some NAT at the border than take the pain
piece of FUD. I suggest you start updating the document by
rewriting it from scratch. After you read an actual book or have done
something with IPv6.
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
Marc Espie wrote:
On Sun, Jan 28, 2007 at 03:17:14PM +, Jeroen Massar wrote:
Also note that FT serves the whole country of France, you might not like
them, but they also have a right to use the Internet ;) Most ISP's get
only a /32 and there are millions of those. Getting a /19 is really
, and a kernel module, it is possible to run VMWare on OpenBSD.
-8
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
the opening of ports on the NAT
box so that they get forwarded to the internal box that requests it
See amongst others:
http://forums.linksys.com/linksys/board/message?board.id=Wireless_Routersmes
sage.id=18300
As most parts of the world can't even get PS3's: enjoy it ;)
Greets,
Jeroen
[demime 1.01d
the work and then open source it, it is
really about the service isn't it?)
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
... With BSD though one has to hope that the company using your
cool tools returns something back or at least acknowledges what you did.
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
. That will catch their attention and will earn you cash...
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
only mentioned httpd) might be in a chroot or
running as a different user than what you expect it to be.
and of course check firewall rules etc.
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
address and using that for everything.
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
Wim Vandeputte wrote:
Hi,
In the spirit of Xmas or should I say vapor of spirits,
Those spirits are actually quite liquid ;) Enjoy your whiskey guys!
Oh and of course the large number of great talks they are giving, they
managed to get a great lineup again!
Greets,
Jeroen
[demime 1.01d
, most likely
causing the pool on the server side to run empty (at least that happened
to me that last time ;)
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
Damian Wiest wrote:
[..]
I'm hoping I won't get scolded for mentioning this: http://bsd.ee/~olev/
If you spend 770+ hours on that, I don't think anybody will even try to
make an argument with you ;) Looks really cool!
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp
.
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
at Operating System
Concepts from Silberschatz Galvin:
eg: http://codex.cs.yale.edu/avi/os-book/os7/
This covers all kind of OS's, ranging from the BSD's to Mach and even
Windows.
There is another excellent OS book(*), but I am a Dinosaur-Junky thus
only recommend this one ;)
Greets,
Jeroen
that set the Reply-To header to whatever you want, that is
why it exists.
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
URL.
As for getting real/internet-usable address space, see
http://en.wikipedia.org/wiki/Tunnel_Broker
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
/tools/aiccu/brokers/ for a
large list of them which should encompass all. Unfortunately there have
not been any offers from that area yet to get one up and running.
Greets,
Jeroen
[demime 1.01d removed an attachment of type application/pgp-signature which had
a name of signature.asc]
67 matches
Mail list logo
