SysAdmin

A decision was made to enable SPF on beastie. SPF is a technology that mitigates forged spam (while it itself is not totally spam proof, as spammers can set up their own SPF record :-)

「俺觉得只要是上万的牛机器，跑FreeBSD任何一个版本，目前来说都还不现实」「俺是觉得浪费了那个HTT，对不起银子……」

被人骗了说话还能这么理直气壮的人可真是不多见啊，服务器跑Windows XP好了，价格便宜量又足，呵呵……厂商几句话能让这么多人就相信，国内的计算机基础教育真是失败。

This article has suggested a way of hiding version.bind string. From a security perceive, this is an overkill and can usually be harmful:

• While it’s true that you can hide version.bind, the fact that version.bind is can be queried reveals that you are running BIND. It makes little sense to fake a version.
• The need of hiding information, which is unnecessarily hidden like this, means that the system administrator is neglecting security.
• Therefore, FOREACH(version.bind is queriable and is hidden) HACKEM :-)

Security can NOT be built on what others are not aware of.

Colin is very effective man that has made some changes to the kernel, and so@ has approved this, and 5.4-RELEASE gets its first patchlevel.

I’m happy that this did not forced me to go to the hosting provider :-)

I have upgraded tarsier from 5.4-RC1 to 5.4-RELEASE right now. It goes smoothly.

Hey I know it makes the uptime go to 0, but it’s a sign of patching known issues, while they are not so serious :-)

看来配IP的时候真是得小心。原本希望两块网卡互为备份，结果配的一个0xffffff00，一个0xffffffff，00的那个松了，就彻底败了……

Sometimes you may need to build some packages for older/newer versions of FreeBSD. That is simple if you use jail and other mechanisms.

In order to be successful, you need a “Full jail” say ordinary jail, installed with binary that is built from the target version of FreeBSD. For instance, build a 6.0 userland by sync’ing code to -HEAD.

Secondly, you need to replace two files in the jail: uname(1) and sysctl(1). What you have to do is to use sed to replace both FreeBSD version and __FreeBSDVersion (say, kern.osreldate), according to porters’ handbook.

方法A: 使用代理。

在/etc/make.conf中设置：
FETCH_ENV= “HTTP_PROXY=IP[:端口]”
如果需要，在FETCH_ENV值后面加入空格，
HTTP_PROXY_AUTH=basic:*:user:password

I have set up a mirror for the major BSD software, especially DragonFly/Free/Open/NetBSD and KAME at my personal server, tarsier.delphij.net for about two weeks. Today I have annouced that on kernel@dfly and Liam Foy has added it to the official download list.

Some cvsweb and other related site is ongoing. I’m very pleased that I can support BSD related software, no matter joining their development, or providing mirrors for wider spread.

Follow arved’s port change: added the official NOFOLLOW plugin into the plugins directory.

This is useful because Google will never follow the links to raise page ranks, thus eliminates blog spamming’s benefit.