Podcast Episode Details
Back to Podcast Episodes
35: Puffy Firewall
We're back again! On this week's packed show, we've got one of the biggest tutorials we've done in a while. It's an in-depth look at PF, OpenBSD's firewall, with some practical examples and different use cases. We'll also be talking to Peter Hansteen about the new edition of "The Book of PF." Of course, we've got news and answers to your emails too, on BSD Now - the place to B.. SD.
This episode was brought to you by
Headlines
ALTQ removed from PF
- Kicking off our big PF episode...
- The classic packet queueing system, ALTQ, was recently removed from OpenBSD -current
- There will be a transitional phase between 5.5 and 5.6 where you can still use it by replacing the "queue" keyword with "oldqueue" in your pf.conf
- As of 5.6, due about six months from now, you'll have to change your ruleset to the new syntax if you're using it for bandwidth shaping
- After more than ten years, bandwidth queueing has matured quite a bit and we can finally put ALTQ to rest, in favor of the new queueing subsystem
- This doesn't affect FreeBSD, PCBSD, NetBSD or DragonflyBSD since all of their PFs are older and maintained separately. ***
FreeBSD Quarterly Status Report
- The quarterly status report from FreeBSD is out, detailing some of the project's ongoing tasks
- Some highlights include the first "stable" branch of ports, ARM improvements (including SMP), bhyve improvements, more work on the test suite, desktop improvements including the new vt console driver and UEFI booting support finally being added
- We've got some specific updates from the cluster admin team, core team, documentation team, portmgr team, email team and release engineering team
- LOTS of details and LOTS of topics to cover, give it a read ***
OpenBSD's OpenSSL rewrite continues with m2k14
- A mini OpenBSD hackathon begins in Morocco, Africa
- You can follow the changes in the -current CVS log, but a lot of work is mainly going towards the OpenSSL cleaning
- We've got two trip reports so far, hopefully we'll have some more to show you in a future episode
- You can see some of the more interesting quotes from the tear-down or see everything
- Apparently they are going to call the fork "LibreSSL" ....
- What were the OpenSSL developers thinking? The RSA private key was used to seed the entropy!
- We also got some mainstream news coverage and another
Published on 11 years, 7 months ago