Security

TCP is vulnerable?! Yes if your system relays on persist TCP connections, for example, routers supporting BGP. CERT has released a advisory about this.

Finally the phpBB issue was posted to BugTraq, as a follow-up to the original post by Wang.

I have turned on several anti-spam settings on beastie.frontfree.net to ease my life. They stand for “most evident spam characters” and hence should not go to the content filtering subsystem and should be directly dropped.

Today FreeBSD has upgraded CVS in their source tree, from 1.11.5 to 1.11.15, which addresses numerous security issues.

Today Microsoft has released four critical security updates, their KB numbers are: 835732, 828741, 837009, 837001.

It seems that postfix 2.1-RELEASE will include an amazing feature called “policy server”, which can be used to implement greylisting, a brand new and effective technique to fight against spammers.

TERAMOTO Masahiro kindly gave maintainership of security/clamav to Rob Evers, the maintainer of the clamav-devel port.

Bruce M Simpson has added Daniel Hartmeier to the active committers’ rank. Daniel is from the OpenBSD campaus and is one of the authors of OpenBSD’s stateful firewall, pf(4).

Some search engines has grabbed some of my links out (Primarily, MP3). So I put some limits there. This is because I don’t want FreeBSDChina to be a MP3 downloading site - It’s harmful for the server, and we don’t want it.

The code is the following, it’s simple and effective:

Yesterday I have talked with Max Laier about the pf accessories, say, the spamd. He explained me why it is kept in ports/ and not the base system - this is to keep the base system small, and I completely agree this.