Episode Details

We follow up last week's poudriere tutorial with a segment about using pkgng, we talk with the developers of OpenSMTPD about running a mail server OpenBSD-style, answer YOUR questions and, of course, discuss all the latest news. All that and more on BSD Now! The place to B... SD.

Headlines

pfSense 2.1-RELEASE is out

• Now based on FreeBSD 8.3
• Lots of IPv6 features added
• Security updates, bug fixes, driver updates
• PBI package support
• Way too many updates to list, see the full list ***

New kernel based iSCSI stack comes to FreeBSD

• Brief explanation of iSCSI
• This work replaces the older userland iscsi target daemon and improves the in-kernel iscsi initiator
• Target layer consists of:
• ctld(8), a userspace daemon responsible for handling configuration, listening for incoming connections, etc, then handing off connections to the kernel after the iSCSI Login phase
• iSCSI frontend to CAM Target Layer, which handles Full Feature phase.
• The work is being sponsored by FreeBSD Foundation
• Commit here ***

MTier creates openup utility for OpenBSD

• MTier provides a number of things for the OpenBSD community
• For example, regularly updated (for security) stable packages from their custom repo
• openup is a utility to easily check for security updates in both base and packages
• It uses the regular pkg tools, nothing custom-made
• Can be run from cron, but only emails the admin instead of automatically updating ***

OpenSSH in FreeBSD -CURRENT supports DNSSEC

• OpenSSH in base is now compiled with DNSSEC support
• In this case the default setting for ‘VerifyHostKeyDNS' is yes
• OpenSSH will silently trust DNSSEC-signed SSHFP records
• It is the secteam's opinion that this is better than teaching users to blindly hit “yes” each time they encounter a new key ***

Interview - Gilles Chehade & Eric Faurot - gilles@poolp.org / @poolpOrg & eric@openbsd.org / @opensmtpd

OpenSMTPD

Tutorial

Binary packages with pkgng

News Roundup

New progress with Newcons

• Newcons is a replacement console driver for FreeBSD
• Supports unicode, better graphics modes and bigger fonts
• Progress is being made, but it's not finished yet ***

relayd gets PFS support

• relayd is a load balancer for OpenBSD which does protocol layers 3, 4, and 7
• Currently being ported to FreeBSD. There is a WIP port
• Works by negotiating ECDHE (Elliptic curve Diffie-Hellman) between the remote site and relayd to enable TLS/SSL Perfect Forward Secrecy, even when the client does not support it ***