LINUX.ORG.RU

История изменений

Исправление hateyoufeel, (текущая версия) :

Попробуй через веб архив. У меня на днях тоже плохо открывалась.

https://archive.is/4tuw9

Ссылка для остальных.

IPFW is the native firewall. It was written by FreeBSD, for FreeBSD, with their usual coding standards. The end result is about what you might expect. For what it’s worth, one of the FreeBSD project’s own server administrators said he would rather introduce OpenBSD boxes to their cluster than use IPFW.

PF is the OpenBSD firewall ported to FreeBSD. Unfortunately the version of PF they’re using hasn’t been synced with upstream since 2009. After a few years of letting the old PF code rot in their tree, FreeBSD decided to go against their users’ wishes for an update and instead commit a highly invasive patch that essentially locked them out of ever syncing with OpenBSD’s code again. FreeBSD’s PF, which they decided to call a «fork» after so many complaints, is thus missing a substantial amount of fixes and improvements (including security ones from over a decade ago). There was, understandably, a bit of backlash about this choice.

бггг всё так. Я пару лет назад хотел сервер с FreeBSD настроить и на этом этапе понял, что даже iptables в общем-то не так плохи.

These bugs and poor design choices have left FreeBSD users vulnerable to a root-level compromise every time they update their system or ports tree. Think about that.

Despite the issues being brought up on their lists in April 2014, despite public exploits being published in May 2016, and despite multiple big news sites picking up the story, they were all left unfixed until October 2016. The FreeBSD security team left all users vulnerable to these exploits for a very long time.

Не понимаю, зачем им в 2018 понадобился CoC, ведь с вопиющей гомосексуальностью так всё уже было отлично.

Исправление hateyoufeel, :

Попробуй через веб архив. У меня на днях тоже плохо открывалась.

https://archive.is/4tuw9

Ссылка для остальных.

IPFW is the native firewall. It was written by FreeBSD, for FreeBSD, with their usual coding standards. The end result is about what you might expect. For what it’s worth, one of the FreeBSD project’s own server administrators said he would rather introduce OpenBSD boxes to their cluster than use IPFW.

PF is the OpenBSD firewall ported to FreeBSD. Unfortunately the version of PF they’re using hasn’t been synced with upstream since 2009. After a few years of letting the old PF code rot in their tree, FreeBSD decided to go against their users’ wishes for an update and instead commit a highly invasive patch that essentially locked them out of ever syncing with OpenBSD’s code again. FreeBSD’s PF, which they decided to call a «fork» after so many complaints, is thus missing a substantial amount of fixes and improvements (including security ones from over a decade ago). There was, understandably, a bit of backlash about this choice.

бггг всё так. Я пару лет назад хотел сервер с FreeBSD настроить и на этом этапе понял, что даже iptables в общем-то не так плохи.

Исходная версия hateyoufeel, :

Попробуй через веб архив. У меня на днях тоже плохо открывалась.

https://archive.is/4tuw9

Ссылка для остальных.