FreeBSD

Apparantly there is some sort of DDoS attack against www.FreeBSDChina.org. What was that? Some internal information told me that it was an intended test against www.freebsdchina.org. We have found some defects in the original website design and that should be corrected soon.

I have plugged a workaround to defeat the DDoS attack, now the load average fall from 70 to 0.65.

I’m now 22 years old. It’s Monday, just like 22 years ago when I was born. First of all, I shall thank my mother for giving me life and my parents who grow me up. Thanks to all my friends who gave me pleasure and shared my sorrow. Well, I have to thank those who taught me what real life is, too.

主要是空格的问题。我打算接下来的一段时间琢磨琢磨SoftUpdates，如果这个patch能commit的话，delphijfork的diff一下就能减少46K :-)

Here is the URL’s:

Mini installation disc:
ftp://ftp.freebsdchina.org/pub/china_ports/delphijfork/5.2-delphij-20040624-i386-miniinst.iso

Bootonly and FIXIT:
ftp://ftp.freebsdchina.org/pub/china_ports/delphijfork/5.2-delphij-20040624-i386-bootonly.iso
ftp://ftp.freebsdchina.org/pub/china_ports/delphijfork/5.2-delphij-20040624-i386-disc2.iso

I will release third (more or less unstable) release ISO if nothing will prevent me from doing that :-) The latest delphijfork includes several new features, which is tend to exhibit new technologies and possiblities of FreeBSD:

• An implementation of RFC 3522 ported from DragonFlyBSD
• An implementation of Early Retransmission ported from DragonFlyBSD

Also, FreeBSD-CURRENT has several new features, including:

• In progress import of binutils 2.15
• pf 3.5. Including several new features and works better with spamd.
• better ACPI support

While I believe that proactive security practice is necessary for every consumers, the most conversave ones should argue that even a security update will possibly break compablity.

Now I am in trouble. With rsync 2.5.5 installed on a FreeBSD system, we know that it is possible to overflow its heap, however, shall we patch it, or just let it as-is because it is not exploitable on FreeBSD, unlike Linux’s silly brk(9) implementation?

I have watched spurious SYN messages and apparantly this has affected beastie.frontfree.net’s networking subsystem, namely, its mail system. The attack is from 203.81.27.11.

Whois indicates 203.81.27.11 is:

I have added some SYNFLOOD proof packet filter rules for beastie.frontfree.net. Interestingly, the filter options seems to “forge” beastie.frontfree.net to be an OpenBSD box.

marcel has finally imported gdb into FreeBSD-base. Now we can debug kernels again.

I have posted it as rev. 1.5 of <research.delphij.net/freebsd/rfc3522.diff>. Some minor comestic changes has gone into the patchset, as junsu pointed out. I’ll remove the unrelated ones soon.