3: MX with TTX

We follow up last week's poudriere tutorial with a segment about using pkgng, we talk with the developers of OpenSMTPD about running a mail server OpenBSD-style, answer YOUR questions and, of course, discuss all the latest news. All that and more on BSD Now! The place to B... SD.

Headlines

pfSense 2.1-RELEASE is out

Now based on FreeBSD 8.3
Lots of IPv6 features added
Security updates, bug fixes, driver updates
PBI package support
Way too many updates to list, see the full list ***

New kernel based iSCSI stack comes to FreeBSD

Brief explanation of iSCSI
This work replaces the older userland iscsi target daemon and improves the in-kernel iscsi initiator
Target layer consists of:
ctld(8), a userspace daemon responsible for handling configuration, listening for incoming connections, etc, then handing off connections to the kernel after the iSCSI Login phase
iSCSI frontend to CAM Target Layer, which handles Full Feature phase.
The work is being sponsored by FreeBSD Foundation
Commit here ***

MTier creates openup utility for OpenBSD

MTier provides a number of things for the OpenBSD community
For example, regularly updated (for security) stable packages from their custom repo
openup is a utility to easily check for security updates in both base and packages
It uses the regular pkg tools, nothing custom-made
Can be run from cron, but only emails the admin instead of automatically updating ***

OpenSSH in FreeBSD -CURRENT supports DNSSEC

OpenSSH in base is now compiled with DNSSEC support
In this case the default setting for ‘VerifyHostKeyDNS' is yes
OpenSSH will silently trust DNSSEC-signed SSHFP records
It is the secteam's opinion that this is better than teaching users to blindly hit “yes” each time they encounter a new key ***

Interview - Gilles Chehade & Eric Faurot - gilles@poolp.org / @poolpOrg & eric@openbsd.org / @opensmtpd

OpenSMTPD

Tutorial

Binary packages with pkgng

News Roundup

New progress with Newcons

Newcons is a replacement console driver for FreeBSD
Supports unicode, better graphics modes and bigger fonts
Progress is being made, but it's not finished yet ***

relayd gets PFS support

relayd is a load balancer for OpenBSD which does protocol layers 3, 4, and 7
Currently being ported to FreeBSD. There is a WIP port
Works by negotiating ECDHE (Elliptic curve Diffie-Hellman) between the remote site and relayd to enable TLS/SSL Perfect Forward Secrecy, even when the client does not support it ***

Podcast Episode Details