From owner-freebsd-questions@freebsd.org Sun Jun 16 21:13:31 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CD61615CA868 for ; Sun, 16 Jun 2019 21:13:30 +0000 (UTC) (envelope-from trumpetweed_153.1560@quitter-livid.gq) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id 2F28E6A254 for ; Sun, 16 Jun 2019 21:13:30 +0000 (UTC) (envelope-from trumpetweed_153.1560@quitter-livid.gq) Received: by mailman.ysv.freebsd.org (Postfix) id DA1EC15CA867; Sun, 16 Jun 2019 21:13:29 +0000 (UTC) Delivered-To: questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B821315CA866 for ; Sun, 16 Jun 2019 21:13:29 +0000 (UTC) (envelope-from trumpetweed_153.1560@quitter-livid.gq) Received: from quitter-livid.gq (quitter-livid.gq [45.12.213.94]) by mx1.freebsd.org (Postfix) with ESMTP id ACDD26A248 for ; Sun, 16 Jun 2019 21:13:28 +0000 (UTC) (envelope-from trumpetweed_153.1560@quitter-livid.gq) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=email; d=quitter-livid.gq; h=Date:To:From:Subject:Message-ID:MIME-Version:List-Unsubscribe:Content-Type; i=trumpetweed_153.1560@quitter-livid.gq; bh=gJCwL30q60Kdr15MivSRAswCPcU=; b=R+Cq9dmsUw9awg04el2Owvec5NAokPPdZCh5OkeDpMFYdAwiNVraHqHVbVcOVddJ9lxwMISm+XP6 7SvoX/LkrPLMt5y2K9IawXvrzuUNxYIiGovK6d6Q2neEPej1/PxR1Ja36bixapFDQkYckuiI15OV gDwGFPkBjW4E4KGEQsg= Date: Mon, 17 Jun 2019 00:13:26 +0300 To: questions@freebsd.org From: =?utf-8?B?0KHQtdGA0LPQtdC5INCT0L7QvNC10LvQtdCyICjQv9C+0LzQvtGJ0L3QuNC6INGO0YDQuNGB0YLQsCk=?= Subject: =?utf-8?B?0J/QviDQv9C+0LLQvtC00YMg0L3QsNGI0LjRhSDRg9GB0LvRg9Cz?= Message-ID: <1560719606.3e8548c8c5669823cf9f94ef0f4791e8@mailsys> MIME-Version: 1.0 Precedence: bulk Content-Type: multipart/mixed; boundary="--bf63310749cc4ca155272be1d92a2025" X-Rspamd-Queue-Id: ACDD26A248 X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dkim=pass header.d=quitter-livid.gq header.s=email header.b=R+Cq9dms; dmarc=pass (policy=reject) header.from=quitter-livid.gq; spf=pass (mx1.freebsd.org: domain of trumpetweed_153.1560@quitter-livid.gq designates 45.12.213.94 as permitted sender) smtp.mailfrom=trumpetweed_153.1560@quitter-livid.gq X-Spamd-Result: default: False [-1.48 / 15.00]; ARC_NA(0.00)[]; DMARC_POLICY_ALLOW(-0.50)[quitter-livid.gq,reject]; R_DKIM_ALLOW(-0.20)[quitter-livid.gq:s=email]; NEURAL_HAM_MEDIUM(-0.87)[-0.868,0]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+a]; PRECEDENCE_BULK(0.00)[]; MIME_GOOD(-0.10)[multipart/mixed,text/plain]; TO_DN_NONE(0.00)[]; NEURAL_HAM_LONG(-0.99)[-0.989,0]; HAS_LIST_UNSUB(-0.01)[]; RCPT_COUNT_ONE(0.00)[1]; IP_SCORE(0.36)[asn: 204601(1.75), country: UA(0.08)]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MX_GOOD(-0.01)[cached: mail.quitter-livid.gq]; DKIM_TRACE(0.00)[quitter-livid.gq:+]; CTYPE_MIXED_BOGUS(1.00)[]; NEURAL_HAM_SHORT(-0.57)[-0.566,0]; MIME_BASE64_TEXT(0.10)[]; RCVD_COUNT_ZERO(0.00)[0]; FROM_EQ_ENVFROM(0.00)[]; MID_RHS_NOT_FQDN(0.50)[]; MIME_TRACE(0.00)[0:+,1:+,2:+]; ASN(0.00)[asn:204601, ipnet:45.12.213.0/24, country:UA]; RCVD_TLS_ALL(0.00)[] X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 16 Jun 2019 21:13:31 -0000 ----bf63310749cc4ca155272be1d92a2025 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: base64 0JfQtNGA0LDQstGB0YLQstGD0LnRgtC1IQoK0K8g0L/QvtC80L7RidC90LjQuiDRjtGA0LjRgdGC 0LAsINC/0LjRiNGDINC/0YDQtdC00LvQvtC20LjRgtGMINGD0YHQu9GD0LPQuCDQsiDRgtCw0LrQ uNGFINCy0L7Qv9GA0L7RgdCw0YU6Ci0g0JfQsNGJ0LjRgtCwINC/0YDQsNCyINC/0L7RgtGA0LXQ sdC40YLQtdC70LXQuQotINCQ0LTQvNC40L3QuNGB0YLRgNCw0YLQuNCy0L3Ri9C1INC00LXQu9Cw Ci0g0JbQuNC70LjRidC90L7QtSDRgdC/0L7RgNGLCi0g0KHQv9C+0YDRiyDQv9C+INGB0LXQvNC1 0LnQvdGL0Lwg0LTQtdC70LDQvAotINCd0LDRgdC70LXQtNGB0YLQstC+IAotINCi0YDRg9C00L7Q stC+0LUg0L/RgNCw0LLQviAKLSDQl9C10LzQtdC70YzQvdC+0LUg0L/RgNCw0LLQviAKLSDQl9Cw 0YnQuNGC0LAg0L/QviDRg9Cz0L7Qu9C+0LLQvdGL0Lwg0LTQtdC70LDQvAoK0KPRgdC70YPQs9C4 INGB0YLQvtGP0YIg0YDQtdCw0LvRjNC90L4g0L3QtdC00L7RgNC+0LPQvi4KCtCe0YIg0JLQsNGB INC/0L7QvdCw0LTQvtCx0LjRgtGB0Y8g0LvQuNGI0Ywg0LTQvtCy0LXRgNC10L3QvdC+0YHRgtGM LCDQtNCw0LvQtdC1INGD0YfQsNGB0YLQuNGPINC+0YIg0JLQsNGBINC90LUg0L/QvtGC0YDQtdCx 0YPQtdGC0YHRjy4KCtCV0YHQu9C4INC/0YDQuNC90YbQuNC/0LjQsNC70YzQvdGL0Lkg0LjQvdGC 0LXRgNC10YEg0YMg0JLQsNGBINC10YHRgtGMIC0g0L/RgNC+0YHRgtC+INC60YDQsNGC0LrQviDQ vtC/0LjRiNC40YLQtSDQktCw0YjRgyDRgdC40YLRg9Cw0YbQuNGOLCDQsiDQvtGC0LLQtdGCINGP INC90LDQv9C40YjRgyDRgdGC0L7QuNC80L7RgdGC0Ywg0YPRgdC70YPQsyDQuCDQstCw0YDQuNCw 0L3RgtGLINGA0LXRiNC10L3QuNGPINC00LDQvdC90L7Qs9C+INCy0L7Qv9GA0L7RgdCwLgoK0KEg 0YPQstCw0LbQtdC90LjQtdC8LCDQodC10YDQs9C10Lkg0JPQvtC80LXQu9C10LIu ----bf63310749cc4ca155272be1d92a2025 MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" ----bf63310749cc4ca155272be1d92a2025-- From owner-freebsd-questions@freebsd.org Mon Jun 17 01:28:58 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id F2D3D15CF9A6 for ; Mon, 17 Jun 2019 01:28:57 +0000 (UTC) (envelope-from odontoid_153.1570@quitter-livid.gq) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id 59FB270C49 for ; Mon, 17 Jun 2019 01:28:57 +0000 (UTC) (envelope-from odontoid_153.1570@quitter-livid.gq) Received: by mailman.ysv.freebsd.org (Postfix) id 1CEB415CF9A5; Mon, 17 Jun 2019 01:28:57 +0000 (UTC) Delivered-To: questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id ECFAA15CF9A4 for ; Mon, 17 Jun 2019 01:28:56 +0000 (UTC) (envelope-from odontoid_153.1570@quitter-livid.gq) Received: from quitter-livid.gq (quitter-livid.gq [45.12.213.94]) by mx1.freebsd.org (Postfix) with ESMTP id 0B95270C48 for ; Mon, 17 Jun 2019 01:28:55 +0000 (UTC) (envelope-from odontoid_153.1570@quitter-livid.gq) Date: Mon, 17 Jun 2019 04:28:51 +0300 To: questions@freebsd.org From: =?utf-8?B?0JrRg9GA0LXQvdC60L7QstCwINCQ0L3RgtC+0L3QuNC90LA=?= Subject: =?utf-8?B?0KDQsNGB0YHRi9C70LrQuCDQu9GO0LHRi9GFINC+0LHRitGP0LLQu9C10L3QuNC5?= Message-ID: <1560734931.144c5066b4e05cc416676c9039fd1d0e@mailsys> MIME-Version: 1.0 Precedence: bulk Content-Type: multipart/mixed; boundary="--f802f1b2c92f2f9ed1618ac0a49175f3" X-Rspamd-Queue-Id: 0B95270C48 X-Spamd-Bar: - X-Spamd-Result: default: False [-1.05 / 15.00]; ARC_NA(0.00)[]; DMARC_POLICY_ALLOW(-0.50)[quitter-livid.gq,reject]; R_DKIM_ALLOW(-0.20)[quitter-livid.gq:s=email]; NEURAL_HAM_MEDIUM(-0.93)[-0.931,0]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+a]; PRECEDENCE_BULK(0.00)[]; MIME_GOOD(-0.10)[multipart/mixed,text/plain]; TO_DN_NONE(0.00)[]; NEURAL_HAM_LONG(-0.99)[-0.992,0]; HAS_LIST_UNSUB(-0.01)[]; RCPT_COUNT_ONE(0.00)[1]; IP_SCORE(0.33)[asn: 204601(1.56), country: UA(0.08)]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MX_GOOD(-0.01)[cached: mail.quitter-livid.gq]; DKIM_TRACE(0.00)[quitter-livid.gq:+]; CTYPE_MIXED_BOGUS(1.00)[]; NEURAL_HAM_SHORT(-0.04)[-0.035,0]; MIME_BASE64_TEXT(0.10)[]; RCVD_COUNT_ZERO(0.00)[0]; FROM_EQ_ENVFROM(0.00)[]; MID_RHS_NOT_FQDN(0.50)[]; MIME_TRACE(0.00)[0:+,1:+,2:+]; ASN(0.00)[asn:204601, ipnet:45.12.213.0/24, country:UA]; RCVD_TLS_ALL(0.00)[] X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Jun 2019 01:28:58 -0000 ----f802f1b2c92f2f9ed1618ac0a49175f3 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: base64 0JXRgdGC0Ywg0L/RgNC10LTQu9C+0LbQtdC90LjQtSDQuiDQktCw0LwgLSDRgdGE0L7RgNC80LjR gNC+0LLQsNGC0Ywg0LrQvtC80LzQtdGA0YfQtdGB0LrQvtC1INC/0YDQtdC00LvQvtC20LXQvdC4 0LUg0L/QviDQutC+0L3RgtC10L3RgtGDINCS0LDRiNC10LPQviDRgdCw0LnRgtCwINC4INGB0LTQ tdC70LDRgtGMINGA0LDRgdGB0YvQu9C60YMg0L3QsCDQvNC40LvQu9C40L7QvdGLINC/0L7Qu9GM 0LfQvtCy0LDRgtC10LvQtdC5INC40L3RgtC10YDQvdC10YLQsC4KCtCjINC90LDRgSDQsiDQvdCw 0LvQuNGH0LjQuCDQsdCw0LfRizoKLSDQnNC+0YHQutCy0LAKLSDQodCw0L3QutGCLdCf0LXRgtC1 0YDQsdGD0YDQswotINCb0Y7QsdGL0LUg0LPQvtGA0L7QtNCwINCg0KQKLSDQpNC40YDQvNGLINGA 0LDQt9C70LjRh9C90YvRhSDRgdGE0LXRgCDQsdC40LfQvdC10YHQsAotINCb0Y7QsdGL0LUg0YHR gtGA0LDQvdGLINC80LjRgNCwCi0g0KHQutC+0LzQv9C+0L3Rg9C10Lwg0LHQsNC30YMg0L/QviDQ ktCw0YjQuNC8INC60YDQuNGC0LXRgNC40Y/QvArQptC10L3QsCDRgNCw0YHRgdGL0LvQutC4IDEg 0LzQuNC70LvQuNC+0L3QsCDRgdC+0L7QsdGJ0LXQvdC40LkgLSAzIDkwMCDRgNGD0LHQu9C10Lku CgrQldGJ0LUg0L/RgNC10LTQu9Cw0LPQsNC10Lw6Ci0g0J7QsdC30LLQvtC9INC60L7QvNC/0LDQ vdC40Lkg0L3QsNGI0LjQvNC4INC80LXQvdC10LTQttC10YDQsNC80LggLSAyNTAtNDUwINGA0YPQ sdC70LXQuSDQt9CwINC30LDQuNC90YLQtdGA0LXRgdC+0LLQsNC90L3QvtCz0L4g0LrQu9C40LXQ vdGC0LAKLSDQoNCw0YHRgdGL0LvQutC4INC/0L4g0L/QvtC70YzQt9C+0LLQsNGC0LXQu9GP0Lwg QXZpdG8gLSAxINGA0YPQsdC70Ywg0LfQsCDRgdC+0L7QsdGJ0LXQvdC40LUKLSDQn9C+0YHQtdCy INC+0YLQt9GL0LLQvtCyINC4INGA0LXQutC+0LzQtdC90LTQsNGG0LjQuSAtIDgwINGA0YPQsS4g 0LfQsCDRgdC+0L7QsdGJ0LXQvdC40LUKLSDQptC10LvQtdCy0YvQtSDQv9C+0YHQtdGC0LjRgtC1 0LvQuCDQvdCwINGB0LDQudGCIC0gNiDRgNGD0LHQu9C10Lkg0LfQsCDQv9C+0YHQtdGC0LjRgtC1 0LvRjwotINCh0LHQvtGAINC60LvQuNC10L3RgtGB0LrQuNGFINCx0LDQtyDQtNCw0L3QvdGL0YUg LSDQvtGCIDMwMDAg0YDRg9Cx0LvQtdC5INC30LAg0LHQsNC30YMKLSDQoNCw0YHRgdGL0LvQutC4 INC/0L4g0YTQvtGA0LzQsNC8INC+0LHRgNCw0YLQvdC+0Lkg0YHQstGP0LfQuCDRgdCw0LnRgtC+ 0LIgLSAzOTAwINGA0YPQsdC70LXQuSDQt9CwIDgwMCAwMDAg0L7RgtC/0YDQsNCy0LvQtdC90LjQ uQoK0JfQstC+0L3QuNGC0LUg0L/QviDRgtC10LvQtdGE0L7QvdGDOiBbOSAyIDVdIDUg0KcgNS0g MSAzfjU2ICAoV2hhdHNBcHAg0LggVGVsZWdyYW0p ----f802f1b2c92f2f9ed1618ac0a49175f3 MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" ----f802f1b2c92f2f9ed1618ac0a49175f3-- From owner-freebsd-questions@freebsd.org Mon Jun 17 03:52:56 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 3228B15D254E for ; Mon, 17 Jun 2019 03:52:56 +0000 (UTC) (envelope-from info@falco-kontaktlinsen.ch) Received: from salvia.ispgateway.de (salvia.ispgateway.de [185.21.102.100]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 6C708753DD for ; Mon, 17 Jun 2019 03:52:53 +0000 (UTC) (envelope-from info@falco-kontaktlinsen.ch) Received: (qmail 30704 invoked from network); 17 Jun 2019 03:46:09 -0000 Received: from unknown (HELO salvia.ispgateway.de) (127.0.0.1) by localhost with SMTP; 17 Jun 2019 03:46:09 -0000 Received: (from ssh-232465-falcos@localhost) by salvia.ispgateway.de (8.14.9/8.13.6/Submit) id x5H3k6sX030691; Mon, 17 Jun 2019 05:46:06 +0200 Date: Mon, 17 Jun 2019 05:46:06 +0200 To: freebsd-questions@freebsd.org Subject: Help now Jennifer Lopez and she will help you in an hour X-DFOptimize: BUFfRE5PRAVeT01GSwROTwVYWgdCRVleQ0RNBRgFGAVMS0ZJRQdGQ0RZT0QESUVHBUlGS1lZT1kFZ0tDRgRaQlo= From: Falco Linsen AG Reply-To: "Falco Linsen AG" Message-ID: <1560743166bounce@www.falco-linsen.com> X-Mailer: Apple Mail (2.752.2) MIME-Version: 1.0 X-Rspamd-Queue-Id: 6C708753DD X-Spamd-Bar: ++++++ Authentication-Results: mx1.freebsd.org; spf=fail (mx1.freebsd.org: domain of info@falco-kontaktlinsen.ch does not designate 185.21.102.100 as permitted sender) smtp.mailfrom=info@falco-kontaktlinsen.ch X-Spamd-Result: default: False [6.07 / 15.00]; ARC_NA(0.00)[]; R_SPF_FAIL(1.00)[-all]; HAS_REPLYTO(0.00)[info@falco-linsen.com]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; REPLYTO_DN_EQ_FROM_DN(0.00)[]; R_BAD_CTE_7BIT(1.05)[7bit,utf8]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; TO_DN_NONE(0.00)[]; NEURAL_SPAM_MEDIUM(0.98)[0.976,0]; RCPT_COUNT_ONE(0.00)[1]; RCVD_COUNT_THREE(0.00)[4]; RCVD_TLS_LAST(0.00)[]; NEURAL_SPAM_SHORT(0.97)[0.972,0]; MX_GOOD(-0.01)[falcokontaktlinsen-ch01c.mail.protection.outlook.com,falcokontaktlinsen-ch01c.mail.protection.outlook.com]; NEURAL_SPAM_LONG(1.00)[1.000,0]; DMARC_NA(0.00)[falco-linsen.com]; IP_SCORE(0.38)[asn: 8972(1.92), country: DE(-0.01)]; FORGED_SENDER(0.30)[info@falco-linsen.com,info@falco-kontaktlinsen.ch]; REPLYTO_ADDR_EQ_FROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+,1:+]; ASN(0.00)[asn:8972, ipnet:185.21.102.0/24, country:DE]; FROM_NEQ_ENVFROM(0.00)[info@falco-linsen.com,info@falco-kontaktlinsen.ch]; MID_RHS_WWW(0.50)[] X-Spam: Yes Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Jun 2019 03:52:56 -0000 Sehr geehrte Frau FrankBreap Sie haben auf der Webseite www.falco-linsen.com das Kontaktformular ausgefüllt. Wir werden uns schnellstmöglich mit Ihnen in Verbindung setzen. From owner-freebsd-questions@freebsd.org Mon Jun 17 05:02:21 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B719515D36F2 for ; Mon, 17 Jun 2019 05:02:20 +0000 (UTC) (envelope-from romaineromains_153.1542@imagen-gemma.ml) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id 1E04277043 for ; Mon, 17 Jun 2019 05:02:20 +0000 (UTC) (envelope-from romaineromains_153.1542@imagen-gemma.ml) Received: by mailman.ysv.freebsd.org (Postfix) id D294715D36F1; Mon, 17 Jun 2019 05:02:19 +0000 (UTC) Delivered-To: questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 976C615D36F0 for ; Mon, 17 Jun 2019 05:02:19 +0000 (UTC) (envelope-from romaineromains_153.1542@imagen-gemma.ml) Received: from imagen-gemma.ml (imagen-gemma.ml [95.181.179.37]) by mx1.freebsd.org (Postfix) with ESMTP id AC97A77041 for ; Mon, 17 Jun 2019 05:02:18 +0000 (UTC) (envelope-from romaineromains_153.1542@imagen-gemma.ml) Date: Mon, 17 Jun 2019 08:02:13 +0300 To: questions@freebsd.org From: =?utf-8?B?0J3QtdGB0YLQtdGA0L7QsiDQnNC40YXQsNC40LsgKNC/0YDQvtC00LLQuNC20LXQvdC40LUg0YHQsNC50YLQvtCyKQ==?= Subject: =?utf-8?B?0JLQsNGIINGB0LDQudGCIC0g0L7Rh9C10L3RjCDQv9C70L7RhdC+INC+0L/RgtC40LzQuNC30LjRgNC+0LLQsNC9?= Message-ID: <1560747733.641c1b9d4dd71fb550a41409ade04948@mailsys> MIME-Version: 1.0 Precedence: bulk Content-Type: multipart/mixed; boundary="--d4cb9dd1fc653952997843098ec09f94" X-Rspamd-Queue-Id: AC97A77041 X-Spamd-Bar: - X-Spamd-Result: default: False [-1.17 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.91)[-0.911,0]; R_DKIM_ALLOW(-0.20)[imagen-gemma.ml:s=email]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+a]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[multipart/mixed,text/plain]; TO_DN_NONE(0.00)[]; PRECEDENCE_BULK(0.00)[]; HAS_LIST_UNSUB(-0.01)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-0.99)[-0.987,0]; IP_SCORE(0.37)[ipnet: 95.181.178.0/23(0.33), asn: 57311(1.47), country: UA(0.08)]; DKIM_TRACE(0.00)[imagen-gemma.ml:+]; CTYPE_MIXED_BOGUS(1.00)[]; MIME_BASE64_TEXT(0.10)[]; MX_GOOD(-0.01)[cached: mail.imagen-gemma.ml]; DMARC_POLICY_ALLOW(-0.50)[imagen-gemma.ml,reject]; NEURAL_HAM_SHORT(-0.23)[-0.229,0]; RCVD_COUNT_ZERO(0.00)[0]; FROM_EQ_ENVFROM(0.00)[]; MID_RHS_NOT_FQDN(0.50)[]; MIME_TRACE(0.00)[0:+,1:+,2:+]; ASN(0.00)[asn:57311, ipnet:95.181.178.0/23, country:UA]; RCVD_TLS_ALL(0.00)[] X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Jun 2019 05:02:21 -0000 ----d4cb9dd1fc653952997843098ec09f94 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: base64 0JTQvtCx0YDRi9C5INC00LXQvdGMLgoK0J/QvtGB0LXRgtC40Lsg0JLQsNGIINGB0LDQudGCLCDQ uCDQvtCx0YDQsNGC0LjQuyDQstC90LjQvNCw0L3QuNC1IC0g0YfRgtC+INC+0L0g0L7Qv9GC0LjQ vNC40LfQuNGA0L7QstCw0L0g0LTQsNC70LXQutC+INC90LUg0L/QvtC70L3QvtGB0YLRjNGOLiDQ ldGB0LvQuCDQvdCwINC00LDQvdC90L7QvNGB0LDQudGC0LUgINCy0YvQv9C+0LvQvdC40YLRjCDQ vdC10LfQvdCw0YfQuNGC0LXQu9GM0L3Ri9C1INC00L7RgNCw0LHQvtGC0LrQuCAtINC+0L0g0YDQ tdC30LrQviDQstGL0YDQsNGB0YLQtdGCINCyINCy0YvQtNCw0YfQtSDQr9C90LTQtdC60YHQsCDQ uCDQk9GD0LPQu9CwLgoK0K8g0LzQvdC+0LPQviDQu9C10YIg0LfQsNC90LjQvNCw0Y7RgdGMINC+ 0L/RgtC40LzQuNC30LDRhtC40LXQuSDRgdCw0LnRgtC+0LIg0LIg0L/QvtC40YHQutC+0LLQuNC6 0LDRhS4KCtCV0YHRgtGMINC/0YDQtdC00LvQvtC20LXQvdC40LUgLSDQv9GA0L7QtNCy0LjQvdGD 0YLRjCDRjdGC0L7RgiDRgdCw0LnRgiDQvdCwINGC0L7Qv9C+0LLRi9C1INC80LXRgdGC0LAg0L/Q vtC40YHQutC+0LLRi9GFINGB0LjRgdGC0LXQvCwg0YfRgtC+INC+0LHQtdGB0L/QtdGH0LjRgiDQ sdC+0LvRjNGI0L7QuSDQv9C+0YLQvtC6INC90L7QstGL0YUg0L/QvtGB0LXRgtC40YLQtdC70LXQ uS4KCtCc0L7QuCDRg9GB0LvRg9Cz0Lgg0LHRg9C00YPRgiDRgdGC0L7QuNGC0Ywg0YDQtdCw0LvR jNC90L4g0L3QtdC00L7RgNC+0LPQvi4KCtCV0YHQu9C4INGN0YLQviDQv9GA0LXQtNC70L7QttC1 0L3QuNC1INC40L3RgtC10YDQtdGB0L3QviDQktCw0LwgLSDQv9C+0LbQsNC70YPQudGB0YLQsCDQ v9GA0LjRiNC70LjRgtC1INC/0L4g0LrQsNC60LjQvCDQutC70Y7Rh9C10LLRi9C8INGB0LvQvtCy 0LDQvCDQktGLINGF0L7RgtC10LvQuCDQu9C4INCx0Ysg0LLRi9C50YLQuCDQvdCwINC/0LXRgNCy 0YvQtSDQvNC10YHRgtC1INCv0L3QtNC10LrRgdCwIC0g0L7RgtCy0LXRgtC90YvQvCDQv9C40YHR jNC80L7QvCDRjyDRgNCw0YHRgdGH0LjRgtCw0Y4g0YHRgtC+0LjQvNC+0YHRgtGMINGA0LDRgdC6 0YDRg9GC0LrQuCDRgdCw0LnRgtCwINC60L7QvdC60YDQtdGC0L3QviDQtNC70Y8g0JLQsNGI0LjR hSDQt9Cw0L/RgNC+0YHQvtCyLgoK0KEg0YPQstCw0LbQtdC90LjQtdC8LCDQnNC40YXQsNC40Lsg 0J3QtdGB0YLQtdGA0L7Qsi4= ----d4cb9dd1fc653952997843098ec09f94 MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" ----d4cb9dd1fc653952997843098ec09f94-- From owner-freebsd-questions@freebsd.org Mon Jun 17 13:12:12 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C319315B9578 for ; Mon, 17 Jun 2019 13:12:11 +0000 (UTC) (envelope-from aguilarl602@DUPAGE.EDU) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id 31B238F8A0 for ; Mon, 17 Jun 2019 13:12:11 +0000 (UTC) (envelope-from aguilarl602@DUPAGE.EDU) Received: by mailman.ysv.freebsd.org (Postfix) id E635B15B9576; Mon, 17 Jun 2019 13:12:10 +0000 (UTC) Delivered-To: questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A4B0E15B9575 for ; Mon, 17 Jun 2019 13:12:10 +0000 (UTC) (envelope-from aguilarl602@DUPAGE.EDU) Received: from NAM05-BY2-obe.outbound.protection.outlook.com (mail-eopbgr710138.outbound.protection.outlook.com [40.107.71.138]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client CN "mail.protection.outlook.com", Issuer "GlobalSign Organization Validation CA - SHA256 - G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 2E5198F898 for ; Mon, 17 Jun 2019 13:12:08 +0000 (UTC) (envelope-from aguilarl602@DUPAGE.EDU) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=dupageedu.onmicrosoft.com; s=selector1-dupageedu-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=p7MuyPMix5ymXoNG9dV141/KjQqMSsNddlEsV0HAwYM=; b=ISX6Ciot7GyUF++VYPdQgg0C21/nnOzq1ivKt1R5niY+GUN3oMZgezqVNLdYK0D4qjlJqRSzkLcv8yFPkFANQyf74kEHwbAOFVKD14aKLprY5bxdkNnO5ipbQnGt4eU+eOOnK4YBANvEXQp6QNw+g4IIyp7tVxZUj2Y6q8+vphw= Received: from DM6PR02MB6059.namprd02.prod.outlook.com (10.141.164.141) by DM6PR02MB3945.namprd02.prod.outlook.com (20.176.74.146) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1987.11; Mon, 17 Jun 2019 13:12:07 +0000 Received: from DM6PR02MB6059.namprd02.prod.outlook.com ([fe80::6010:f32:ccb1:953b]) by DM6PR02MB6059.namprd02.prod.outlook.com ([fe80::6010:f32:ccb1:953b%4]) with mapi id 15.20.1987.014; Mon, 17 Jun 2019 13:12:07 +0000 From: "Aguilar, Lesly" To: "questions@freebsd.org" Subject: Please reachout asap. Thread-Topic: Please reachout asap. Thread-Index: AdUk7eHMsRlVEC5kRBGcZwHsCcIejQ== Sensitivity: personal Date: Mon, 17 Jun 2019 13:12:06 +0000 Message-ID: <271a01d5250e$44401d40$ccc057c0$@dupage.edu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-clientproxiedby: AM6PR0102CA0033.eurprd01.prod.exchangelabs.com (2603:10a6:209:14::46) To DM6PR02MB6059.namprd02.prod.outlook.com (2603:10b6:5:1f7::13) x-ms-exchange-messagesentrepresentingtype: 1 x-mailer: Microsoft Outlook 14.0 x-antivirus: Avast (VPS 190617-0, 06/17/2019), Outbound message x-antivirus-status: Clean x-originating-ip: [5.79.79.21] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: aa0b9461-38e0-4894-9160-08d6f32565da x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(7168020)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(2017052603328)(7167020)(7193020); SRVR:DM6PR02MB3945; x-ms-traffictypediagnostic: DM6PR02MB3945: x-ms-exchange-purlcount: 2 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7219; x-forefront-prvs: 0071BFA85B x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(346002)(396003)(366004)(39860400002)(136003)(376002)(189003)(199004)(8676002)(2351001)(81156014)(81166006)(14454004)(316002)(8936002)(66946007)(486006)(73956011)(476003)(2616005)(66476007)(186003)(50226002)(66446008)(25786009)(2501003)(6512007)(3480700005)(68736007)(1730700003)(786003)(5660300002)(26005)(66556008)(54896002)(6306002)(5640700003)(46816001)(6916009)(44736005)(6436002)(6486002)(2906002)(61296003)(64756008)(71190400001)(71200400001)(71446004)(478600001)(75432002)(7116003)(7736002)(1420700001)(790700001)(6116002)(3846002)(36756003)(86362001)(66066001)(52116002)(75216001)(99286004)(558084003)(53936002)(55236004)(102836004)(6506007)(386003)(256004)(14444005)(88552002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM6PR02MB3945; H:DM6PR02MB6059.namprd02.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:0; received-spf: None (protection.outlook.com: DUPAGE.EDU does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: T5FXEp7PS9fJnRZ7rVQEPwja1q+wSEEB8/yeSDQCIsXw4tpwYRgaIzKD4ziUuv//JYikTvMPosOlDQ/z3KkTOLIQOQqpSHE0Vo/37Ki3AUAVfuwQWcRBLq8YmLGVMM9ZHWx9COrwaVL7epxAppaxYALMWGVgN1gcsBFa9mCccwfZS5Yupl8ewyJk6qX0h9jxBWiBxeD+6dtrVD/DqpvWTsFTG9KDk22blCahHn7zRqe/mo7BV0d3yo+lZjCdQarZNqvBH+Pr+xNiznrPplhWu6OTwDn8od98Dn3P5NNpqHdh7wvAXCtLXr/a6r2pe4AOtUOvUbpPF0QsViklSgDp2jani0Q9zz8LY+/96URTjf9ZinncqUrwwIxmrpDje2fCNUJmHdZ0WnszYmWq2jT+cXEDloDKCysjOSmDEE3JtTE= MIME-Version: 1.0 X-OriginatorOrg: dupage.edu X-MS-Exchange-CrossTenant-Network-Message-Id: aa0b9461-38e0-4894-9160-08d6f32565da X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jun 2019 13:12:06.9385 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: be87d92e-ecd8-4586-b47c-a50466d04f4d X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: aguilarl602@DUPAGE.EDU X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR02MB3945 X-Rspamd-Queue-Id: 2E5198F898 X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dkim=pass header.d=dupageedu.onmicrosoft.com header.s=selector1-dupageedu-onmicrosoft-com header.b=ISX6Ciot X-Spamd-Result: default: False [-1.52 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.87)[-0.873,0]; R_DKIM_ALLOW(-0.20)[dupageedu.onmicrosoft.com:s=selector1-dupageedu-onmicrosoft-com]; HAS_XOIP(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-0.98)[-0.982,0]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; DMARC_NA(0.00)[DUPAGE.EDU]; RCPT_COUNT_ONE(0.00)[1]; RCVD_COUNT_THREE(0.00)[3]; NEURAL_SPAM_SHORT(0.65)[0.649,0]; DKIM_TRACE(0.00)[dupageedu.onmicrosoft.com:+]; MX_GOOD(-0.01)[217669442.mail.outlook.com,217669442.mail.outlook.com]; RCVD_IN_DNSWL_NONE(0.00)[138.71.107.40.list.dnswl.org : 127.0.3.0]; TO_DN_EQ_ADDR_ALL(0.00)[]; R_SPF_NA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+]; RCVD_TLS_LAST(0.00)[]; MID_RHS_MATCH_FROM(0.00)[] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Jun 2019 13:12:12 -0000 Hello questions, Please let me know if this e-mail is still operational. My boss would like to discuss an int'l business deal (of mutual g= ain) with you for consideration. Thanks Lesly From owner-freebsd-questions@freebsd.org Mon Jun 17 18:06:30 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9991F15C121E for ; Mon, 17 Jun 2019 18:06:30 +0000 (UTC) (envelope-from hartzell@alerce.com) Received: from corvid.alerce.com (corvid.alerce.com [206.125.171.163]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 7436274FFE for ; Mon, 17 Jun 2019 18:06:29 +0000 (UTC) (envelope-from hartzell@alerce.com) Received: from postfix.alerce.com (50-247-65-142-static.hfc.comcastbusiness.net [50.247.65.142]) (using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by corvid.alerce.com (Postfix) with ESMTPSA id 234CE2A25F for ; Mon, 17 Jun 2019 11:06:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alerce.com; s=dkim; t=1560794781; h=from:from:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=oB3PuAzjfkeBJ8ZP98NYAQo32Kg7wTUFW122BOPu03c=; b=xKyZ5zYM9fpfD0xlXBKukrFZiGPurUx17BrIOAakLRkov7y3JDEBcouNgtZbNdOT6LfXqo t0MS2Q44r0vQI++XQJm93vAKmEowd6ulneC5HRZ6Hn7iqi7ByS8g0CnSnxVox8NIyR6mC8 bMFlF/8vMc4nNCN2bkdhgaW6bO9hy4OJEAk/tO3Crhs3xYU/K1e4DBsLdMDtM8OgEsM2C8 K4OrPHziMumO0PyDo2w+Q/T2tfgswh5stZK7dBpiOz44Hhih7KwqQQBxGso3OrBv5xE5G1 p56cZYhPMvPz3A6vIwKH8MC1VdTAV1QJnBf18wnChDi9DUn2lX0Rb+CYPEoqYw== Received: by postfix.alerce.com (Postfix, from userid 501) id 9ED98200EF85D6; Mon, 17 Jun 2019 11:06:20 -0700 (PDT) From: George Hartzell MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <23815.54940.588108.337263@alice.local> Date: Mon, 17 Jun 2019 11:06:20 -0700 To: freebsd-questions@freebsd.org Subject: Where are patch releases to 12.0 posted/announced/...? X-Mailer: VM undefined under 26.1 (x86_64-apple-darwin14.5.0) Reply-To: hartzell@alerce.com X-Rspamd-Queue-Id: 7436274FFE X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=alerce.com header.s=dkim header.b=xKyZ5zYM; dmarc=pass (policy=none) header.from=alerce.com; spf=pass (mx1.freebsd.org: domain of hartzell@alerce.com designates 206.125.171.163 as permitted sender) smtp.mailfrom=hartzell@alerce.com X-Spamd-Result: default: False [-3.98 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; HAS_REPLYTO(0.00)[hartzell@alerce.com]; R_SPF_ALLOW(-0.20)[+mx]; TO_DN_NONE(0.00)[]; REPLYTO_ADDR_EQ_FROM(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; DKIM_TRACE(0.00)[alerce.com:+]; DMARC_POLICY_ALLOW(-0.50)[alerce.com,none]; MX_GOOD(-0.01)[corvid.alerce.com]; NEURAL_HAM_SHORT(-0.98)[-0.982,0]; FROM_EQ_ENVFROM(0.00)[]; SUBJECT_ENDS_QUESTION(1.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:25795, ipnet:206.125.168.0/21, country:US]; RCVD_TLS_LAST(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[alerce.com:s=dkim]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; IP_SCORE(-0.99)[ipnet: 206.125.168.0/21(-4.66), asn: 25795(-0.21), country: US(-0.06)] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Jun 2019 18:06:30 -0000 Is there a way to know, before fetching updates, whether a system is up to date (or what the current patch level is for a release)? E.g. I have a system that I installed from the 12.0 release iso and I've run through the `freebsd-uppdate {fetch,install}` dance a couple of times. It now reports itself as this: ``` FreeBSD foo.example.com 12.0-RELEASE-p4 FreeBSD 12.0-RELEASE-p4 GENERIC amd64 ``` I'm not sure if it's up to date or not. In the past I've run `freebsd-update fetch` and examined the output to decide if I need to `freebsd-update install`. If I postpone the install (scheduling a convenient time), I always feel a bit awkward, having an update fetched and sitting there. The only rational reason for the feeling is worrying what would happen if another update was release before I got this one installed. And, perhaps I'm just a neat freak... Is there a page somewhere that lists the current patch releases of the current versions? I've checked: - the releases page: https://www.freebsd.org/releases - the 12.0 errata page: https://www.freebsd.org/releases/12.0R/errata.html - the `freebsd-announce`: https://lists.freebsd.org/pipermail/freebsd-announce/) list, which has messages about individual issues, but I don't see release announcements. I feel like I'm missing something obvious, but.... g. From owner-freebsd-questions@freebsd.org Tue Jun 18 03:10:05 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7029215CCC9E; Tue, 18 Jun 2019 03:10:05 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: from outgoing.tristatelogic.com (segfault.tristatelogic.com [69.62.255.118]) by mx1.freebsd.org (Postfix) with ESMTP id 9D1B38F055; Tue, 18 Jun 2019 03:10:04 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: by segfault.tristatelogic.com (Postfix, from userid 1237) id 78DE44E654; Mon, 17 Jun 2019 20:10:03 -0700 (PDT) From: "Ronald F. Guilmette" To: freebsd-questions@freebsd.org, freebsd-net@freebsd.org Subject: Eliminating IPv6 (?) MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <6974.1560827403.1@segfault.tristatelogic.com> Date: Mon, 17 Jun 2019 20:10:03 -0700 Message-ID: <6975.1560827403@segfault.tristatelogic.com> X-Rspamd-Queue-Id: 9D1B38F055 X-Spamd-Bar: ----- Authentication-Results: mx1.freebsd.org; spf=pass (mx1.freebsd.org: domain of rfg@tristatelogic.com designates 69.62.255.118 as permitted sender) smtp.mailfrom=rfg@tristatelogic.com X-Spamd-Result: default: False [-5.89 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; DMARC_NA(0.00)[tristatelogic.com]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; IP_SCORE(-2.81)[ip: (-7.39), ipnet: 69.62.128.0/17(-3.69), asn: 14051(-2.91), country: US(-0.06)]; MX_GOOD(-0.01)[cached: mx1.tristatelogic.com]; RCPT_COUNT_TWO(0.00)[2]; NEURAL_HAM_SHORT(-0.87)[-0.867,0]; RCVD_NO_TLS_LAST(0.10)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:14051, ipnet:69.62.128.0/17, country:US]; RCVD_COUNT_TWO(0.00)[2]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 03:10:05 -0000 I do not wish to begin any religious war here. I understand that IPv6 can be a sensitive and sometimes even emotional issue for many people. Speaking only for myself, and only for the present moment, I can say that for me, IPv6 represents only an annoyance and a very sizable distraction. At present, I don't use it and have absolutely no need to do so. I would thus like to simplify my life by eliminating it from my (12.0-RELEASE) system, so that I won't even have to think about it, or wonder about it, e.g. when I am configuring my firewall, my daemons, etc. I have tried searching for instructions on how to do this online, but the suggestions and recommendations for how to do this vary widely. There does not seem to be any "standard" set of recommendations for how to simply turn off all IPv6 for a given system, short of rebuilding the kernel, from scratch, with proper options to eliminate IPv6 support in the kernel entirely. I finally settled on trying to add the following options to my /etc/rc.conf file: ipv6_network_interfaces="none" ip6addrctl_enable="NO" ip6addrctl_policy="ipv4_prefer" ipv6_activate_all_interfaces="NO" These seem to have worked only marginally. After a fresh reboot, my loopback interface (lo0) for example is still configured to have -both- IPv4 -and- IPv6 addresses... and routes... associated with it. How can I turn off IPv6 entirely without rebuilding the kernel? Regards, rfg P.S. Please, please, please, refrain from giving me a sermon about how I am an idiot and/or about how IPv6 is going to save mankind and/or the galaxy as we know it. I am pro choice, and I don't really wish to have IPv6 rammed down my throat before I am ready to swallow. I don't need it, don't use it, and for me, life is much simpler without it for now. From owner-freebsd-questions@freebsd.org Tue Jun 18 03:36:55 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 830C315CD745 for ; Tue, 18 Jun 2019 03:36:55 +0000 (UTC) (envelope-from kudzu@tenebras.com) Received: from mail-qt1-x832.google.com (mail-qt1-x832.google.com [IPv6:2607:f8b0:4864:20::832]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 6E5DB8FDF9 for ; Tue, 18 Jun 2019 03:36:54 +0000 (UTC) (envelope-from kudzu@tenebras.com) Received: by mail-qt1-x832.google.com with SMTP id m29so13611546qtu.1 for ; Mon, 17 Jun 2019 20:36:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tenebras-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=x9TZgraBpzomH+LoWGMCNyzUoXptads4KHowQPgWmec=; b=0sGu1GXbOb5Z8cktyinClfK7v4QzOGc/8mOamQQPvwyaIumIAl15r3z13yGU9Dqw/o PBj0HN0f6V+C22NorVcsqVuSfou5d/sfYmPAuRvrNkfgjE20VzPIcn0Z8RdQTH+cf808 +9lF/N5zSn3YET8jqEuZ0sD/kKVdHL46BZ3G6H876PaecGiiGPVBAHi0eQFi2bDB+TPd Fa6RKvuxGNcKo5zEohf5JsHq5zcH+Quk3b1MkH7mNQxCD7UPrsg8qoD3+zmTN0vuIAaG qP+d868voglwmUjCCDuRYyNGxV5XaLv8ErqzlynC9Af62OwbZRMI57s9pvtOJcxHo4C8 X/SQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=x9TZgraBpzomH+LoWGMCNyzUoXptads4KHowQPgWmec=; b=B73/XGBlkT/N52ESQnnpqH4URo+2aEXY5U6SBxmUxu1S/u+5ypBO18wce3W4fxPXp2 eBwgYsLslOcz253nIloULtpTefBRMh3PS2886yT3GuyiTQOZBrs6khOdOCnWoPUvQEJA HfLp+2x0i8Foy5Uj5fBs6DjkYmT6VMAspZ0qtEMq0KF2FJFvIBT2zU24zPrhZnfZjAVb dqe8ONmsOVK1JgWemm3BZ4tV0h4kYupclLMRjlDqk1IkzrU2P/UZIM10oTHQejwsPYmP df327Mvdd7oTRaqtZwZj2o3LvF/hDgcDzjL4Amu7Tw5/nSKCWskF2cC6svDWP3P81nI/ l0BA== X-Gm-Message-State: APjAAAXcIyvPIEThbUgZESR2R3SS2dhke5Lwk01aCGQC4Wlkza0xyJOT 0NjKi4E+6KItxfp2hDSg3YYRLnbGLoNoFHIF4/pEnw== X-Google-Smtp-Source: APXvYqyn0MV6B8T6sytH4zUQBVZVr2eUhgEiUio8z23Mcup134/rtN2WCK/NWGtCEplsJFHNw1mlnBlJlx5klngsPPM= X-Received: by 2002:ac8:2d08:: with SMTP id n8mr76466717qta.383.1560829013667; Mon, 17 Jun 2019 20:36:53 -0700 (PDT) MIME-Version: 1.0 References: <6975.1560827403@segfault.tristatelogic.com> In-Reply-To: <6975.1560827403@segfault.tristatelogic.com> From: Michael Sierchio Date: Mon, 17 Jun 2019 20:36:17 -0700 Message-ID: Subject: Re: Eliminating IPv6 (?) To: "Ronald F. Guilmette" Cc: FreeBSD Questions , "freebsd-net@freebsd.org" X-Rspamd-Queue-Id: 6E5DB8FDF9 X-Spamd-Bar: ------ Authentication-Results: mx1.freebsd.org; dkim=pass header.d=tenebras-com.20150623.gappssmtp.com header.s=20150623 header.b=0sGu1GXb X-Spamd-Result: default: False [-6.25 / 15.00]; ARC_NA(0.00)[]; TO_DN_EQ_ADDR_SOME(0.00)[]; R_DKIM_ALLOW(-0.20)[tenebras-com.20150623.gappssmtp.com:s=20150623]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; TO_DN_SOME(0.00)[]; IP_SCORE(-3.00)[ip: (-9.44), ipnet: 2607:f8b0::/32(-3.17), asn: 15169(-2.32), country: US(-0.06)]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; DMARC_NA(0.00)[tenebras.com]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; TO_MATCH_ENVRCPT_SOME(0.00)[]; DKIM_TRACE(0.00)[tenebras-com.20150623.gappssmtp.com:+]; MX_GOOD(-0.01)[alt1.aspmx.l.google.com,aspmx.l.google.com,aspmx2.googlemail.com,alt2.aspmx.l.google.com,aspmx3.googlemail.com]; RCVD_IN_DNSWL_NONE(0.00)[2.3.8.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.list.dnswl.org : 127.0.5.0]; NEURAL_HAM_SHORT(-0.95)[-0.947,0]; R_SPF_NA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; RCVD_COUNT_TWO(0.00)[2]; SUBJECT_HAS_QUESTION(0.00)[] Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 03:36:55 -0000 On Mon, Jun 17, 2019 at 8:12 PM Ronald F. Guilmette wrote: > How can I turn off IPv6 entirely without rebuilding the kernel? Rebuild the kernel. One of the lovely things about FreeBSD is that you can build a monolithic kernel and don't have to build any kernel modules or permit them to be loaded. Insert one character in the GENERIC kernel conf and start from there #options INET6 # IPv6 communications protocols --=20 "Well," Brahm=C4=81 said, "even after ten thousand explanations, a fool is = no wiser, but an intelligent person requires only two thousand five hundred." - The Mah=C4=81bh=C4=81rata From owner-freebsd-questions@freebsd.org Tue Jun 18 06:51:48 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CD67915D0DC7; Tue, 18 Jun 2019 06:51:48 +0000 (UTC) (envelope-from eugen@grosbein.net) Received: from eg.sd.rdtc.ru (eg.sd.rdtc.ru [IPv6:2a03:3100:c:13::5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "eg.sd.rdtc.ru", Issuer "eg.sd.rdtc.ru" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id C717E9467C; Tue, 18 Jun 2019 06:51:37 +0000 (UTC) (envelope-from eugen@grosbein.net) X-Envelope-From: eugen@grosbein.net X-Envelope-To: freebsd-questions@freebsd.org Received: from [10.58.0.4] ([10.58.0.4]) by eg.sd.rdtc.ru (8.15.2/8.15.2) with ESMTPS id x5I6pKE3072322 (version=TLSv1.2 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Tue, 18 Jun 2019 13:51:20 +0700 (+07) (envelope-from eugen@grosbein.net) Subject: Re: Eliminating IPv6 (?) To: "Ronald F. Guilmette" , freebsd-questions@freebsd.org, freebsd-net@freebsd.org References: <6975.1560827403@segfault.tristatelogic.com> From: Eugene Grosbein Message-ID: Date: Tue, 18 Jun 2019 13:51:12 +0700 User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: <6975.1560827403@segfault.tristatelogic.com> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: C717E9467C X-Spamd-Bar: / Authentication-Results: mx1.freebsd.org; spf=permerror (mx1.freebsd.org: domain of eugen@grosbein.net uses mechanism not recognized by this client) smtp.mailfrom=eugen@grosbein.net X-Spamd-Result: default: False [0.67 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.42)[-0.415,0]; RCVD_TLS_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; TO_DN_SOME(0.00)[]; NEURAL_HAM_LONG(-0.25)[-0.247,0]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[grosbein.net]; NEURAL_SPAM_SHORT(0.93)[0.928,0]; MX_INVALID(0.50)[greylisted]; TO_MATCH_ENVRCPT_SOME(0.00)[]; R_SPF_PERMFAIL(0.00)[]; IP_SCORE(0.00)[country: RU(0.01)]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:29072, ipnet:2a03:3100::/32, country:RU]; MID_RHS_MATCH_FROM(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 06:51:49 -0000 18.06.2019 10:10, Ronald F. Guilmette wrote: > How can I turn off IPv6 entirely without rebuilding the kernel? You cannot. GENERIC kernel specifically enables IPv6 support and you need to disable it at compile time. And if you do, you better rebuild the world too using WITHOUT_INET6=yes in the /etc/src.conf or else some utilities compiled with INET6 by default will query kernel for IPv6-specific data (like routing entries) and complain that your kernel does not know about it. World built WITHOUT_INET6 has no such rough edges. From owner-freebsd-questions@freebsd.org Tue Jun 18 06:57:13 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DA4D215D101B for ; Tue, 18 Jun 2019 06:57:13 +0000 (UTC) (envelope-from freebsd@qeng-ho.org) Received: from bede.qeng-ho.org (bede.qeng-ho.org [217.155.128.241]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id BAAE294AA9 for ; Tue, 18 Jun 2019 06:57:12 +0000 (UTC) (envelope-from freebsd@qeng-ho.org) Received: from arthur.home.qeng-ho.org (arthur.home.qeng-ho.org [172.23.1.2]) by bede.qeng-ho.org (Postfix) with ESMTP id 502C51063C; Tue, 18 Jun 2019 07:57:04 +0100 (BST) Subject: Re: Where are patch releases to 12.0 posted/announced/...? To: hartzell@alerce.com, freebsd-questions@freebsd.org References: <23815.54940.588108.337263@alice.local> From: Arthur Chance Message-ID: <336d3ba5-344a-e3b6-fe54-84cf7d473fe7@qeng-ho.org> Date: Tue, 18 Jun 2019 07:57:04 +0100 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:60.0) Gecko/20100101 Thunderbird/60.7.1 MIME-Version: 1.0 In-Reply-To: <23815.54940.588108.337263@alice.local> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: BAAE294AA9 X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; spf=pass (mx1.freebsd.org: domain of freebsd@qeng-ho.org designates 217.155.128.241 as permitted sender) smtp.mailfrom=freebsd@qeng-ho.org X-Spamd-Result: default: False [-4.61 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:217.155.128.240/29]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; MIME_TRACE(0.00)[0:+]; TO_DN_NONE(0.00)[]; DMARC_NA(0.00)[qeng-ho.org]; TO_MATCH_ENVRCPT_SOME(0.00)[]; MX_GOOD(-0.01)[mx1.mythic-beasts.com,mx2.mythic-beasts.com]; RCPT_COUNT_TWO(0.00)[2]; NEURAL_HAM_SHORT(-0.88)[-0.881,0]; RCVD_TLS_LAST(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; SUBJECT_ENDS_QUESTION(1.00)[]; ASN(0.00)[asn:13037, ipnet:217.155.0.0/16, country:GB]; MID_RHS_MATCH_FROM(0.00)[]; IP_SCORE(-2.42)[ip: (-7.32), ipnet: 217.155.0.0/16(-3.66), asn: 13037(-1.02), country: GB(-0.09)]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 06:57:14 -0000 On 17/06/2019 19:06, George Hartzell wrote: > > Is there a way to know, before fetching updates, whether a system is > up to date (or what the current patch level is for a release)? > > E.g. I have a system that I installed from the 12.0 release iso and > I've run through the `freebsd-uppdate {fetch,install}` dance a couple > of times. It now reports itself as this: > > ``` > FreeBSD foo.example.com 12.0-RELEASE-p4 FreeBSD 12.0-RELEASE-p4 > GENERIC amd64 > ``` > > I'm not sure if it's up to date or not. > > In the past I've run `freebsd-update fetch` and examined the output to > decide if I need to `freebsd-update install`. If I postpone the > install (scheduling a convenient time), I always feel a bit awkward, > having an update fetched and sitting there. The only rational reason > for the feeling is worrying what would happen if another update was > release before I got this one installed. And, perhaps I'm just a neat > freak... > > Is there a page somewhere that lists the current patch releases of > the current versions? > > I've checked: > > - the releases page: https://www.freebsd.org/releases > - the 12.0 errata page: https://www.freebsd.org/releases/12.0R/errata.html > - the `freebsd-announce`: > https://lists.freebsd.org/pipermail/freebsd-announce/) list, which > has messages about individual issues, but I don't see release > announcements. > > I feel like I'm missing something obvious, but.... I subscribe to the freebsd-security mailing list. Any mail on that lists the problem and which patch level fixes it, which is invariably at least one higher than my current one. -- What do we want? A time machine! When do we want it? Errm ... From owner-freebsd-questions@freebsd.org Tue Jun 18 07:22:55 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B303A15D17E5 for ; Tue, 18 Jun 2019 07:22:55 +0000 (UTC) (envelope-from campaign-indiatradedata-14483-301-1790641-questions=freebsd.org@email.indiatradedata.com) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id 1F932956B0 for ; Tue, 18 Jun 2019 07:22:55 +0000 (UTC) (envelope-from campaign-indiatradedata-14483-301-1790641-questions=freebsd.org@email.indiatradedata.com) Received: by mailman.ysv.freebsd.org (Postfix) id D327715D17E3; Tue, 18 Jun 2019 07:22:54 +0000 (UTC) Delivered-To: questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9571615D17E0 for ; Tue, 18 Jun 2019 07:22:54 +0000 (UTC) (envelope-from campaign-indiatradedata-14483-301-1790641-questions=freebsd.org@email.indiatradedata.com) Received: from mm12.iaires.com (mm12.iaires.com [202.162.243.77]) by mx1.freebsd.org (Postfix) with ESMTP id 1CCA6956AD for ; Tue, 18 Jun 2019 07:22:54 +0000 (UTC) (envelope-from campaign-indiatradedata-14483-301-1790641-questions=freebsd.org@email.indiatradedata.com) To: questions@freebsd.org From: Krati - trade data Reply-To: marketing@indiatradedata.com Subject: IMPORT EXPORT DATABASE Message-ID: <2482539271790641@email.indiatradedata.com> Feedback-ID: 301:14483:20190618125050:nczc MIME-Version: 1.0 Date: Tue, 18 Jun 2019 12:52:54 +0530 X-Rspamd-Queue-Id: 1CCA6956AD X-Spamd-Bar: ++++++ Authentication-Results: mx1.freebsd.org; spf=pass (mx1.freebsd.org: domain of campaign-indiatradedata-14483-301-1790641-questions=freebsd.org@email.indiatradedata.com designates 202.162.243.77 as permitted sender) smtp.mailfrom=campaign-indiatradedata-14483-301-1790641-questions=freebsd.org@email.indiatradedata.com X-Spamd-Result: default: False [6.88 / 15.00]; HAS_REPLYTO(0.00)[marketing@indiatradedata.com]; R_SPF_ALLOW(-0.20)[+ip4:202.162.224.0/19]; REPLYTO_ADDR_EQ_FROM(0.00)[]; TO_DN_NONE(0.00)[]; URI_COUNT_ODD(1.00)[1]; MX_GOOD(-0.01)[cached: mx1.ncfp.asia]; SUBJ_ALL_CAPS(1.65)[22]; FORGED_SENDER(0.00)[marketing@indiatradedata.com,campaign-indiatradedata-14483-301-1790641-questions=freebsd.org@email.indiatradedata.com]; RCVD_COUNT_ZERO(0.00)[0]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+,1:+]; ASN(0.00)[asn:33480, ipnet:202.162.243.0/24, country:US]; FROM_NEQ_ENVFROM(0.00)[marketing@indiatradedata.com,campaign-indiatradedata-14483-301-1790641-questions=freebsd.org@email.indiatradedata.com]; ARC_NA(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_SPAM_SHORT(0.99)[0.992,0]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; R_BAD_CTE_7BIT(1.05)[7bit,utf8]; HAS_PHPMAILER_SIG(0.00)[]; HAS_LIST_UNSUB(-0.01)[]; RCPT_COUNT_ONE(0.00)[1]; FORGED_SENDER_VERP_SRS(0.00)[]; NEURAL_SPAM_MEDIUM(1.00)[0.998,0]; DMARC_NA(0.00)[indiatradedata.com]; NEURAL_SPAM_LONG(1.00)[1.000,0]; ENVFROM_VERP(0.00)[]; IP_SCORE(0.51)[asn: 33480(2.59), country: US(-0.06)]; RCVD_TLS_ALL(0.00)[] X-Spam: Yes Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 07:22:55 -0000 Hello, I would like to mention that We provides 60+ Countries Reports & track each Shipment as reported by customs and tell you Who is importing, Who is exporting, at What price, How much quantity and from Where. Database is available for Import and Export based on Custom’s actual shipping bills and details for countries like: Asia -- India, Pakistan, Sri Lanka, China, Vietnam, Indonesia, Philippines South America -- Argentina, Brazil, Columbia, Ecuador, Peru, Paraguay, Uruguay, Venezuela North America -- USA and Mexico Central America -- Panama, Costa Rica Europe -- Russia, Ukraine, CIS Countries -- Kazakhstan, Kyrgyzstan, Uzbekistan African Country -- Ethiopia, Uganda, Kenya, Tanzania, Guatemala, Burundi, Malawi, DRC Congo, Zambia, Rwanda. So basically if you are looking for Importers/Exporters List of any particular Product/Commodity then we can provide the same thru Customs Report. Charges/Format/Features of Each Country Report is different. “In case of a your requirement of any database kindly send your details :- Name, Your requirement (HS Code or product), Company name, Mail id & contact details” so that I can assist you accordingly. GOOD DAY! Thanks & Regards Krati jain Business Development Officer Dir. Mob – 8586926599,Tel. Ph. - +91-11-47048012 Ext. no. 105 Skype : krati@exportgenius.in From owner-freebsd-questions@freebsd.org Tue Jun 18 07:44:37 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 975C815D2251; Tue, 18 Jun 2019 07:44:37 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: from outgoing.tristatelogic.com (segfault.tristatelogic.com [69.62.255.118]) by mx1.freebsd.org (Postfix) with ESMTP id 1265396434; Tue, 18 Jun 2019 07:44:35 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: by segfault.tristatelogic.com (Postfix, from userid 1237) id A4FC34E654; Tue, 18 Jun 2019 00:44:34 -0700 (PDT) From: "Ronald F. Guilmette" cc: freebsd-questions@freebsd.org, freebsd-net@freebsd.org Subject: Re: Eliminating IPv6 (?) In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <18747.1560843874.1@segfault.tristatelogic.com> Content-Transfer-Encoding: quoted-printable Date: Tue, 18 Jun 2019 00:44:34 -0700 Message-ID: <18748.1560843874@segfault.tristatelogic.com> X-Rspamd-Queue-Id: 1265396434 X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; spf=pass (mx1.freebsd.org: domain of rfg@tristatelogic.com designates 69.62.255.118 as permitted sender) smtp.mailfrom=rfg@tristatelogic.com X-Spamd-Result: default: False [-3.79 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.98)[-0.977,0]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; DMARC_NA(0.00)[tristatelogic.com]; NEURAL_HAM_LONG(-1.00)[-0.999,0]; IP_SCORE(-2.77)[ip: (-7.27), ipnet: 69.62.128.0/17(-3.64), asn: 14051(-2.86), country: US(-0.06)]; MX_GOOD(-0.01)[cached: mx1.tristatelogic.com]; RCPT_COUNT_TWO(0.00)[2]; MISSING_TO(2.00)[]; NEURAL_HAM_SHORT(-0.84)[-0.836,0]; RCVD_NO_TLS_LAST(0.10)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:14051, ipnet:69.62.128.0/17, country:US]; RCVD_COUNT_TWO(0.00)[2]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 07:44:37 -0000 In message , = Eugene Grosbein wrote: >18.06.2019 10:10, Ronald F. Guilmette wrote: > >> How can I turn off IPv6 entirely without rebuilding the kernel? > >You cannot. GENERIC kernel specifically enables IPv6 support and you need= to >disable it at compile time. >And if you do, you better rebuild the world too using WITHOUT_INET6=3Dyes= in the >/etc/src.conf >or else some utilities compiled with INET6 by default will query kernel >for IPv6-specific data (like routing entries) and complain that your kern= el does = >not know about it. > >World built WITHOUT_INET6 has no such rough edges. OK, so I obviously expressed myself badly. Let me try again. IPv6 support is enabled in a the stock kernel. OK. Fine. But just becau= se that feature is present in the kernel, that does not imply that anything i= n userland -has- to actually make any use of it at all. *Something* is doing ifconfig on my loopback (lo0) interface. What is tha= t thing and how can I get it to stop doing that? As I have already learned, the /etc/rc.firewall script also assumes both t= he presence of, and the desirability of IPv6 support. And unless one edits t= hat file manually... which I have been effectively forced to do... there is no= way to get it to simply NOT create and install multiple IPv6-related ipfw rule= s, EVEN THOUGH in my particular situation... which is still the most common c= ase... those extra and entirely superfluous IPv6 ipfw filtering rules are serving no earthly purpose whatsoever and are only cluttering up my ipfw rule set, thus pointlessly making it harder for me to grok and maintain them all. Clearly, if doesn't have to be this way. Some maintainers just decided th= at I and all other IPv4-only users should get stuck dealing with a lot of use= less, unnecessary and distracting IPv6 stuff, whether I like it or not, and pres= umably for our own good. I really wish that maintainers would allow me a bit more freedom, and show me the courtesy and respect to allow me to decide for myself what is and w= hat isn't "for my own good". I can and will most certainly get down and grovel around in the various /etc/rc.d/ scripts and will comment out those parts that do things like ifconfig'ing my loopback interface for IPv6, whether I like it or not. But there ought to be some single /etc/rc.conf variable via which one coul= d simply select the "No, I don't want to have to deal with IPv6 at all right now" option. Is that really an unreasonable hope, expectation, and request? I understand that the kernel will still -offer- the IPv6 support. But if n= o -other- software on my system actually takes the kernel up on that offer, then the kernel's IPv6 support becomes like the tree that falls in the forrest when there is nobody around to hear it. It might as well be said that it makes no sound, and no difference to anything at all. It is clearly not necessary for me or anyone else to have to rebuild the kernel... *and* world... just in order to get rid of what are, for the majority of users here in 2019, still a bunch of utterly superfluous IPv6 "features" that (a) do not help us one iota and that (b) are all just a big and pointless distraction that muddles everything and unnecessarily complicates and complexifies ordinary system maintenance tasks. IPv6 is great and I'm sure I'll be using it someday. But today is not tha= t day... not for me, and also not for one hell of a lot of other users. The fact that I and others are effectively being forced to even think about it= , due to an absence of reasonable and easily accessible userland options, is actually a big turn-off, and leaves a bad taste in the mouth which will be remembered, in future, at every mention of IPv6. I hope that all of th= e IPv6 evanglists will take a moment to stop and think about that, and that they'll stop effectively forcing those of us who don't need it to both use IPv6 and to think about it, whether we like it or not, and before we are r= eady, willing, and able to do so. Regards, rfg P.S. In case I have again failed to be clear, I am proposing a new /etc/r= c.conf option. Something simple and intutive like: ipv6=3D"NO" That in turn should be checked -and- respected by all relevant /etc/rc,d/ scripts. I ask again, is this really such an unreasonable thing to hope for? From owner-freebsd-questions@freebsd.org Tue Jun 18 07:47:51 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E2CB215D2475 for ; Tue, 18 Jun 2019 07:47:50 +0000 (UTC) (envelope-from ktsonevski@netix.net) Received: from mx.neterra.net (mx.neterra.net [212.73.140.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id D63389666B for ; Tue, 18 Jun 2019 07:47:48 +0000 (UTC) (envelope-from ktsonevski@netix.net) Received: from localhost (localhost [127.0.0.1]) by mx.neterra.net (Postfix) with ESMTP id 34015F0600204; Tue, 18 Jun 2019 10:47:38 +0300 (EEST) Received: from mx.neterra.net ([127.0.0.1]) by localhost (mx.neterra.net [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id Mm8gZNFsYqLJ; Tue, 18 Jun 2019 10:47:38 +0300 (EEST) Received: from localhost (localhost [127.0.0.1]) by mx.neterra.net (Postfix) with ESMTP id 16818F060021F; Tue, 18 Jun 2019 10:47:38 +0300 (EEST) X-Virus-Scanned: amavisd-new at mx.neterra.net Received: from mx.neterra.net ([127.0.0.1]) by localhost (mx.neterra.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id B3Ze0ZIE7Vcn; Tue, 18 Jun 2019 10:47:38 +0300 (EEST) Received: from mx.neterra.net (mx.neterra.net [212.73.140.100]) by mx.neterra.net (Postfix) with ESMTP id 00A99F0600204 for ; Tue, 18 Jun 2019 10:47:37 +0300 (EEST) Date: Tue, 18 Jun 2019 10:47:37 +0300 (EEST) From: Krasen Tsnevski To: freebsd-questions@FreeBSD.org Message-ID: <920577593.150406.1560844057960.JavaMail.zimbra@netix.net> In-Reply-To: <237105040.147994.1560843782073.JavaMail.zimbra@netix.net> References: <351496051.135919.1560842123149.JavaMail.zimbra@netix.net> <1844620326.138117.1560842545973.JavaMail.zimbra@netix.net> <808354760.142248.1560843107534.JavaMail.zimbra@netix.net> <997221717.146521.1560843547878.JavaMail.zimbra@netix.net> <1534960972.146758.1560843607679.JavaMail.zimbra@netix.net> <237105040.147994.1560843782073.JavaMail.zimbra@netix.net> Subject: Mirroring the WWW Pages MIME-Version: 1.0 X-Originating-IP: [212.73.140.100] X-Mailer: Zimbra 8.8.9_GA_3717 (ZimbraWebClient - GC73 (Linux)/8.8.9_GA_3744) Thread-Topic: Mirroring the WWW Pages Thread-Index: JgYYPw3V9bWHvyzXT00kkiGgYvf59Ttwu8NfXYxSwZmPvGRZVBuStixsDno2JiW+kT7HWw== X-Rspamd-Queue-Id: D63389666B X-Spamd-Bar: + Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [1.64 / 15.00]; ARC_NA(0.00)[]; RCVD_COUNT_FIVE(0.00)[6]; HAS_XOIP(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_SPAM_SHORT(0.30)[0.299,0]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; TO_DN_NONE(0.00)[]; AUTH_NA(1.00)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_SPAM_MEDIUM(0.04)[0.037,0]; RCVD_TLS_LAST(0.00)[]; MX_GOOD(-0.01)[mx.neterra.net]; NEURAL_SPAM_LONG(0.37)[0.372,0]; RCVD_IN_DNSWL_NONE(0.00)[100.140.73.212.list.dnswl.org : 127.0.10.0]; R_SPF_NA(0.00)[]; DMARC_NA(0.00)[netix.net]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+,1:+]; ASN(0.00)[asn:34224, ipnet:212.73.140.0/24, country:BG]; MID_RHS_MATCH_FROM(0.00)[]; IP_SCORE(0.04)[asn: 34224(0.16), country: BG(0.04)] Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 07:47:51 -0000 Hello,=20 we are a great exchange for the Internet and we want to put your distributi= on on our mirror. Please give me more detailed information about what your = requirements are and how this can be done.=20 =D0=98nformation about us:=20 Netix=20 10Gbps connectivity=20 We are in Bulgaria, Europe.=20 more information about us: [ https://netix.net/ | https://netix.net/ ]=20 link: https://mirrors.netix.net/FreeBSD=20 Best regards,=20 Krasen Tsonevski=20 From owner-freebsd-questions@freebsd.org Tue Jun 18 07:55:34 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2DAD915D28D3; Tue, 18 Jun 2019 07:55:34 +0000 (UTC) (envelope-from hausen@punkt.de) Received: from kagate.punkt.de (kagate.punkt.de [217.29.33.131]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id CF77496B86; Tue, 18 Jun 2019 07:55:27 +0000 (UTC) (envelope-from hausen@punkt.de) Received: from hugo10.ka.punkt.de (hugo10.ka.punkt.de [217.29.44.10]) by gate2.intern.punkt.de with ESMTP id x5I7t63G031951; Tue, 18 Jun 2019 09:55:17 +0200 (CEST) Received: from [217.29.44.36] ([217.29.44.36]) by hugo10.ka.punkt.de (8.14.2/8.14.2) with ESMTP id x5I7srkb056878; Tue, 18 Jun 2019 09:54:53 +0200 (CEST) (envelope-from hausen@punkt.de) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Subject: Re: Eliminating IPv6 (?) From: "Patrick M. Hausen" In-Reply-To: <18748.1560843874@segfault.tristatelogic.com> Date: Tue, 18 Jun 2019 09:54:53 +0200 Cc: freebsd-net@freebsd.org, freebsd-questions@freebsd.org Content-Transfer-Encoding: quoted-printable Message-Id: <9AF5DF39-9B81-4270-B25C-D089C971E924@punkt.de> References: <18748.1560843874@segfault.tristatelogic.com> To: "Ronald F. Guilmette" X-Mailer: Apple Mail (2.3445.104.11) X-Rspamd-Queue-Id: CF77496B86 X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; spf=pass (mx1.freebsd.org: domain of hausen@punkt.de designates 217.29.33.131 as permitted sender) smtp.mailfrom=hausen@punkt.de X-Spamd-Result: default: False [-2.21 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.97)[-0.967,0]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; R_SPF_ALLOW(-0.20)[+ip4:217.29.32.0/20]; MV_CASE(0.50)[]; MIME_GOOD(-0.10)[text/plain]; RCVD_TLS_LAST(0.00)[]; DMARC_NA(0.00)[punkt.de]; TO_DN_SOME(0.00)[]; NEURAL_HAM_LONG(-1.00)[-0.998,0]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_SOME(0.00)[]; MX_GOOD(-0.01)[mailin.pluspunkthosting.de,mailin.pluspunkthosting.de]; NEURAL_HAM_SHORT(-0.23)[-0.228,0]; RCVD_IN_DNSWL_NONE(0.00)[131.33.29.217.list.dnswl.org : 127.0.10.0]; IP_SCORE(-0.21)[ipnet: 217.29.32.0/20(-0.57), asn: 16188(-0.46), country: DE(-0.01)]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:16188, ipnet:217.29.32.0/20, country:DE]; MID_RHS_MATCH_FROM(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 07:55:34 -0000 Hi! > Am 18.06.2019 um 09:44 schrieb Ronald F. Guilmette = : > As I have already learned, the /etc/rc.firewall script also assumes = both the > presence of, and the desirability of IPv6 support. And unless one = edits that > file manually... which I have been effectively forced to do... there = is no way > to get it to simply NOT create and install multiple IPv6-related ipfw = rules, > EVEN THOUGH in my particular situation... which is still the most = common case... > those extra and entirely superfluous IPv6 ipfw filtering rules are = serving > no earthly purpose whatsoever and are only cluttering up my ipfw rule = set, > thus pointlessly making it harder for me to grok and maintain them = all. Instead of messing with the system provided file you could create a new one with only your own desired rules and then set this rc.conf variable: firewall_script=3D"/etc/rc.firewall" # Which script to run to = set up the firewall As for the rest of your request, yes, I find it unreasonably in 2019 but let=E2=80=99s not get into a fight about that. IPv6 is here to stay. If = you boot any Mac or Windows 10 desktop, IPv6 will be active and even necessary for service autodiscovery and similar things to work. Kind regards Patrick --=20 punkt.de GmbH Internet - Dienstleistungen - Beratung Kaiserallee 13a Tel.: 0721 9109-0 Fax: -100 76133 Karlsruhe info@punkt.de http://punkt.de AG Mannheim 108285 Gf: Juergen Egeling From owner-freebsd-questions@freebsd.org Tue Jun 18 08:09:20 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 65BFC15AF0F4; Tue, 18 Jun 2019 08:09:20 +0000 (UTC) (envelope-from christian.baltini@gmail.com) Received: from mail-pf1-x441.google.com (mail-pf1-x441.google.com [IPv6:2607:f8b0:4864:20::441]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 89077972A7; Tue, 18 Jun 2019 08:09:19 +0000 (UTC) (envelope-from christian.baltini@gmail.com) Received: by mail-pf1-x441.google.com with SMTP id a186so7188879pfa.5; Tue, 18 Jun 2019 01:09:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=G7npJ0WIttB0tRi8YGo6AeDCeK8BmfMleTkOb1ARzys=; b=PJxFmzzIp0ELEYjfNBK4L5dAC+Tex9lN9BWSnIWtPGxAdYH2cJ3ECYUOpJtOuWYlDA cV3OHdicIIzYTKmhrFezehX/3z9xgtrpKxcbbOfoGbxa43TsM45oR9duumfCc0K+45Uv XTIMpIRKpwFcpRZ7z+WLVfoRzuSzSKWsBjcJpS9+3HxelrBIgyFER79KlAzHPx2QJIu3 nkgTD8ZMFroDo/FQH+rR/4dEq+kRV2v0F+fMsKWOMlo1R6EENEA5EQ6R2uMEvnKMzbEu fDWpg6+RMdaEhV/ynIlBtzT39CkDU7y7VLnAz9NHjOMZ2dpRPyLg4YD00/WEPNmCmWQv UR5g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=G7npJ0WIttB0tRi8YGo6AeDCeK8BmfMleTkOb1ARzys=; b=f8EKPlZpBxnGCMQemGyxWK6rFrcocO8lkNW+fmJyoiETfx+IrHysvP6IrqDFcsmmrC AKSzABDnM+6spafiJhABmNNe5vqG4ydaP/07ZDSI5Bl4NQOg0EL08tMYAdZlC/wKgVvl PXF8Dp6wck1xPR/HbkAU79RV/NrvjqusZ7IxKnjsnv9OYuM/B65gTDKYPXoHRHBgk8+1 evDJzqTlJj/W6bX1CbfVoJ0SbSYKJZULEWGej0NrHI4p6OQPyjcm4fkMlBrT+K/yQ46q YYdIm8Go4j82vPlfggKrVBHxsKOeym9du1A+G2cA2WJV9x4DGdnHX+cbYCJtJCJ6msIb mxCg== X-Gm-Message-State: APjAAAX2g7Md1MmVGQAxNHifFXVvbJT9acXGRbw51lD6w+G0O9J7rhoW SAg7Q0aTKTw6hxx+l4an2BbwJbGX X-Google-Smtp-Source: APXvYqwgGk99UWJoUw5Icoc8DkzYXB47MQXUCLlY6F7YvZLc3DRvzcAOf3yw2u5DVLAdrU4cU0gHvg== X-Received: by 2002:a65:44c8:: with SMTP id g8mr1507377pgs.443.1560845358426; Tue, 18 Jun 2019 01:09:18 -0700 (PDT) Received: from [10.0.100.116] (71-84-34-209.dhcp.mtpk.ca.charter.com. [71.84.34.209]) by smtp.gmail.com with ESMTPSA id y22sm14065479pfm.70.2019.06.18.01.09.17 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 18 Jun 2019 01:09:17 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.2 \(3445.102.3\)) Subject: Re: Eliminating IPv6 (?) From: christian russell In-Reply-To: <18748.1560843874@segfault.tristatelogic.com> Date: Tue, 18 Jun 2019 01:09:16 -0700 Cc: freebsd-net@freebsd.org, freebsd-questions@freebsd.org Content-Transfer-Encoding: quoted-printable Message-Id: References: <18748.1560843874@segfault.tristatelogic.com> To: "Ronald F. Guilmette" X-Mailer: Apple Mail (2.3445.102.3) X-Rspamd-Queue-Id: 89077972A7 X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20161025 header.b=PJxFmzzI; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of christianbaltini@gmail.com designates 2607:f8b0:4864:20::441 as permitted sender) smtp.mailfrom=christianbaltini@gmail.com X-Spamd-Result: default: False [-4.51 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; MV_CASE(0.50)[]; FREEMAIL_FROM(0.00)[gmail.com]; RCVD_COUNT_THREE(0.00)[3]; DKIM_TRACE(0.00)[gmail.com:+]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; MX_GOOD(-0.01)[cached: alt3.gmail-smtp-in.l.google.com]; NEURAL_HAM_SHORT(-0.96)[-0.958,0]; FROM_EQ_ENVFROM(0.00)[]; RCVD_TLS_LAST(0.00)[]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; MID_RHS_MATCH_FROM(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com.dwl.dnswl.org : 127.0.5.0]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20161025]; TAGGED_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; IP_SCORE(-1.04)[ip: (0.36), ipnet: 2607:f8b0::/32(-3.17), asn: 15169(-2.32), country: US(-0.06)]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[1.4.4.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.list.dnswl.org : 127.0.5.0] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 08:09:20 -0000 My opinion is that being able to practically ignore IPv6, without = operational detraction, is a reasonable degree of freedom. FreeBSD = isn=E2=80=99t pushing IPv6 any more or less than any other mainstream = OSes. Given a set number of developer hours I would prefer that IPv6 be fully = implemented and functionally "ignorable" as opposed to dev time being = spent allowing an essentially cosmetic opting out of IPv6 functionality. = Even more generally I would prefer any dev time time be spent on active = issues and new features. > I ask again, is this really such an unreasonable thing to hope for? If I were allocating work-hours on FreeBSD development my answer would = be: =E2=80=9Cyup" =C2=AF\_(=E3=83=84)_/=C2=AF Christian > On Jun 18, 2019, at 12:44 AM, Ronald F. Guilmette = wrote: >=20 > In message ,=20 > Eugene Grosbein wrote: >=20 >> 18.06.2019 10:10, Ronald F. Guilmette wrote: >>=20 >>> How can I turn off IPv6 entirely without rebuilding the kernel? >>=20 >> You cannot. GENERIC kernel specifically enables IPv6 support and you = need to >> disable it at compile time. >> And if you do, you better rebuild the world too using = WITHOUT_INET6=3Dyes in the >> /etc/src.conf >> or else some utilities compiled with INET6 by default will query = kernel >> for IPv6-specific data (like routing entries) and complain that your = kernel does=20 >> not know about it. >>=20 >> World built WITHOUT_INET6 has no such rough edges. >=20 > OK, so I obviously expressed myself badly. Let me try again. >=20 > IPv6 support is enabled in a the stock kernel. OK. Fine. But just = because > that feature is present in the kernel, that does not imply that = anything in > userland -has- to actually make any use of it at all. >=20 > *Something* is doing ifconfig on my loopback (lo0) interface. What is = that > thing and how can I get it to stop doing that? >=20 > As I have already learned, the /etc/rc.firewall script also assumes = both the > presence of, and the desirability of IPv6 support. And unless one = edits that > file manually... which I have been effectively forced to do... there = is no way > to get it to simply NOT create and install multiple IPv6-related ipfw = rules, > EVEN THOUGH in my particular situation... which is still the most = common case... > those extra and entirely superfluous IPv6 ipfw filtering rules are = serving > no earthly purpose whatsoever and are only cluttering up my ipfw rule = set, > thus pointlessly making it harder for me to grok and maintain them = all. >=20 > Clearly, if doesn't have to be this way. Some maintainers just = decided that > I and all other IPv4-only users should get stuck dealing with a lot of = useless, > unnecessary and distracting IPv6 stuff, whether I like it or not, and = presumably > for our own good. >=20 > I really wish that maintainers would allow me a bit more freedom, and = show > me the courtesy and respect to allow me to decide for myself what is = and what > isn't "for my own good". >=20 > I can and will most certainly get down and grovel around in the = various > /etc/rc.d/ scripts and will comment out those parts that do things = like > ifconfig'ing my loopback interface for IPv6, whether I like it or not. > But there ought to be some single /etc/rc.conf variable via which one = could > simply select the "No, I don't want to have to deal with IPv6 at all = right > now" option. >=20 > Is that really an unreasonable hope, expectation, and request? >=20 > I understand that the kernel will still -offer- the IPv6 support. But = if no > -other- software on my system actually takes the kernel up on that = offer, > then the kernel's IPv6 support becomes like the tree that falls in the > forrest when there is nobody around to hear it. It might as well be = said > that it makes no sound, and no difference to anything at all. >=20 > It is clearly not necessary for me or anyone else to have to rebuild = the > kernel... *and* world... just in order to get rid of what are, for the > majority of users here in 2019, still a bunch of utterly superfluous = IPv6 > "features" that (a) do not help us one iota and that (b) are all just = a > big and pointless distraction that muddles everything and = unnecessarily > complicates and complexifies ordinary system maintenance tasks. >=20 > IPv6 is great and I'm sure I'll be using it someday. But today is not = that > day... not for me, and also not for one hell of a lot of other users. = The > fact that I and others are effectively being forced to even think = about it, > due to an absence of reasonable and easily accessible userland = options, is > actually a big turn-off, and leaves a bad taste in the mouth which = will > be remembered, in future, at every mention of IPv6. I hope that all = of the > IPv6 evanglists will take a moment to stop and think about that, and = that > they'll stop effectively forcing those of us who don't need it to both = use > IPv6 and to think about it, whether we like it or not, and before we = are ready, > willing, and able to do so. >=20 >=20 > Regards, > rfg >=20 >=20 > P.S. In case I have again failed to be clear, I am proposing a new = /etc/rc.conf > option. Something simple and intutive like: >=20 > ipv6=3D"NO" >=20 > That in turn should be checked -and- respected by all relevant = /etc/rc,d/ > scripts. >=20 > I ask again, is this really such an unreasonable thing to hope for? > _______________________________________________ > freebsd-net@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" From owner-freebsd-questions@freebsd.org Tue Jun 18 08:19:44 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id AC24015AF79E for ; Tue, 18 Jun 2019 08:19:44 +0000 (UTC) (envelope-from dr.klepp@gmx.at) Received: from vie01a-dmta-at52-1.mx.upcmail.net (vie01a-dmta-at52-1.mx.upcmail.net [62.179.121.142]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 08F9697953 for ; Tue, 18 Jun 2019 08:19:43 +0000 (UTC) (envelope-from dr.klepp@gmx.at) Received: from [172.31.216.41] (helo=vie01a-pemc-psmtp-at50) by vie01a-dmta-at52.mx.upcmail.net with esmtp (Exim 4.92) (envelope-from ) id 1hd9FW-0006Rm-84 for freebsd-questions@freebsd.org; Tue, 18 Jun 2019 10:13:50 +0200 Received: from [192.168.0.100] ([85.126.97.210]) by vie01a-pemc-psmtp-at50 with SMTP @ mailcloud.upcmail.net id S8Dl2002l4YLlkt0B8Dm0v; Tue, 18 Jun 2019 10:13:46 +0200 X-SourceIP: 85.126.97.210 X-CNFS-Analysis: v=2.2 cv=O6RJhF1W c=1 sm=2 tr=0 cx=a_idp_f a=/Ac8Q0O/YFE5LOLfUiYZVw==:117 a=/Ac8Q0O/YFE5LOLfUiYZVw==:17 a=jpOVt7BSZ2e4Z31A5e1TngXxSK0=:19 a=IkcTkHD0fZMA:10 a=hKNOJcEOAAAA:8 a=A6LmOzobvgA6zZIId7wA:9 a=QEXdDO2ut3YA:10 a=XzhKbxqxvhA9PZRCS47t:22 From: "Dr. Nikolaus Klepp" To: freebsd-questions@freebsd.org Subject: Re: Eliminating IPv6 (?) Date: Tue, 18 Jun 2019 10:14:00 +0200 User-Agent: KMail/1.9.10 References: <18748.1560843874@segfault.tristatelogic.com> <9AF5DF39-9B81-4270-B25C-D089C971E924@punkt.de> In-Reply-To: <9AF5DF39-9B81-4270-B25C-D089C971E924@punkt.de> X-KMail-QuotePrefix: > MIME-Version: 1.0 Content-Type: Text/Plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Message-Id: <201906181014.00267.dr.klepp@gmx.at> X-Rspamd-Queue-Id: 08F9697953 X-Spamd-Bar: +++++++++ Authentication-Results: mx1.freebsd.org; spf=fail (mx1.freebsd.org: domain of dr.klepp@gmx.at does not designate 62.179.121.142 as permitted sender) smtp.mailfrom=dr.klepp@gmx.at X-Spamd-Result: default: False [9.80 / 15.00]; FREEMAIL_FROM(0.00)[gmx.at]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; MX_GOOD(-0.01)[cached: mx00.emig.gmx.net]; FROM_EQ_ENVFROM(0.00)[]; RCVD_TLS_LAST(0.00)[]; R_DKIM_NA(0.00)[]; FREEMAIL_ENVFROM(0.00)[gmx.at]; ASN(0.00)[asn:6830, ipnet:62.179.0.0/17, country:AT]; SUBJECT_HAS_QUESTION(0.00)[]; RCVD_IN_DNSWL_LOW(-0.10)[142.121.179.62.list.dnswl.org : 127.0.5.1]; ARC_NA(0.00)[]; R_SPF_FAIL(1.00)[-all]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_SPAM_SHORT(0.95)[0.953,0]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[gmx.at]; NEURAL_SPAM_MEDIUM(1.00)[1.000,0]; RCPT_COUNT_ONE(0.00)[1]; MIME_TRACE(0.00)[0:+]; NEURAL_SPAM_LONG(1.00)[1.000,0]; MID_CONTAINS_FROM(1.00)[]; FROM_NAME_HAS_TITLE(1.00)[dr]; IP_SCORE(1.06)[ipnet: 62.179.0.0/17(1.53), asn: 6830(3.84), country: AT(-0.10)]; FORGED_MUA_KMAIL_MSGID(3.00)[]; GREYLIST(0.00)[pass,body] X-Spam: Yes X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 08:19:44 -0000 Anno domini 2019 Tue, 18 Jun 09:54:53 +0200 Patrick M. Hausen scripsit: > Hi! >=20 > > Am 18.06.2019 um 09:44 schrieb Ronald F. Guilmette : > > As I have already learned, the /etc/rc.firewall script also assumes bot= h the > > presence of, and the desirability of IPv6 support. And unless one edit= s that > > file manually... which I have been effectively forced to do... there is= no way > > to get it to simply NOT create and install multiple IPv6-related ipfw r= ules, > > EVEN THOUGH in my particular situation... which is still the most commo= n case... > > those extra and entirely superfluous IPv6 ipfw filtering rules are serv= ing > > no earthly purpose whatsoever and are only cluttering up my ipfw rule s= et, > > thus pointlessly making it harder for me to grok and maintain them all. >=20 > Instead of messing with the system provided file you could > create a new one with only your own desired rules and then set > this rc.conf variable: >=20 > firewall_script=3D"/etc/rc.firewall" # Which script to run to set up the= firewall >=20 > As for the rest of your request, yes, I find it unreasonably in 2019 but > let=E2=80=99s not get into a fight about that. IPv6 is here to stay. If y= ou boot any > Mac or Windows 10 desktop, IPv6 will be active and even necessary for > service autodiscovery and similar things to work. It might sound stupid in a world of permanent servailance, but some people = might want to keep their doors closed (and give a damn what M$ and rotten t= omatos want). IPv6 is not a sensible way to get this done ;) Nik >=20 > Kind regards > Patrick =2D-=20 Please do not email me anything that you are not comfortable also sharing w= ith the NSA, CIA ... From owner-freebsd-questions@freebsd.org Tue Jun 18 08:23:10 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 61CC215AFB32 for ; Tue, 18 Jun 2019 08:23:10 +0000 (UTC) (envelope-from phascolarctos@protonmail.ch) Received: from mail1.protonmail.ch (mail1.protonmail.ch [185.70.40.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "*.protonmail.ch", Issuer "SwissSign Server Silver CA 2014 - G22" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 1613297D39 for ; Tue, 18 Jun 2019 08:23:08 +0000 (UTC) (envelope-from phascolarctos@protonmail.ch) Date: Tue, 18 Jun 2019 08:22:53 +0000 To: FreeBSD Questions From: Lorenzo Salvadore Reply-To: Lorenzo Salvadore Subject: Re: Eliminating IPv6 (?) Message-ID: In-Reply-To: <18748.1560843874@segfault.tristatelogic.com> References: <18748.1560843874@segfault.tristatelogic.com> Feedback-ID: X6az_D2smWSR8MT5MHqXnWF0upxehDyHia7Id1cbayHNBUkRu3CIeusDsZHiivIIjmaKB1_OofpALrRUYjNz3w==:Ext:ProtonMail MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Spam-Status: No, score=-1.2 required=7.0 tests=ALL_TRUSTED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM autolearn=ham autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mail.protonmail.ch X-Rspamd-Queue-Id: 1613297D39 X-Spamd-Bar: ------- X-Spamd-Result: default: False [-7.68 / 15.00]; HAS_REPLYTO(0.00)[phascolarctos@protonmail.ch]; R_SPF_ALLOW(-0.20)[+ip4:185.70.40.0/24]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[protonmail.ch:+]; MX_GOOD(-0.01)[mailsec.protonmail.ch,mail.protonmail.ch]; DMARC_POLICY_ALLOW(-0.50)[protonmail.ch,quarantine]; NEURAL_HAM_SHORT(-0.91)[-0.911,0]; RCVD_COUNT_ZERO(0.00)[0]; FROM_EQ_ENVFROM(0.00)[]; IP_SCORE(-3.66)[ip: (-9.42), ipnet: 185.70.40.0/24(-4.89), asn: 19905(-3.91), country: US(-0.06)]; MIME_TRACE(0.00)[0:+]; RCVD_IN_DNSWL_LOW(-0.10)[18.40.70.185.list.dnswl.org : 127.0.5.1]; ASN(0.00)[asn:19905, ipnet:185.70.40.0/24, country:US]; MID_RHS_MATCH_FROM(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[protonmail.ch:s=default]; REPLYTO_EQ_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; DWL_DNSWL_NONE(0.00)[protonmail.ch.dwl.dnswl.org : 127.0.5.0]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; RCPT_COUNT_ONE(0.00)[1]; RCVD_TLS_ALL(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 08:23:10 -0000 =E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90 Original Me= ssage =E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90=E2=80=90 On Tuesday 18 June 2019 09:44, Ronald F. Guilmette = wrote: > In message d6a5d6b8-1630-3095-dd0b-22b49213176e@grosbein.net, > Eugene Grosbein eugen@grosbein.net wrote: > > > 18.06.2019 10:10, Ronald F. Guilmette wrote: > > > > > How can I turn off IPv6 entirely without rebuilding the kernel? > > > > You cannot. GENERIC kernel specifically enables IPv6 support and you ne= ed to > > disable it at compile time. > > And if you do, you better rebuild the world too using WITHOUT_INET6=3Dy= es in the > > /etc/src.conf > > or else some utilities compiled with INET6 by default will query kernel > > for IPv6-specific data (like routing entries) and complain that your ke= rnel does > > not know about it. > > World built WITHOUT_INET6 has no such rough edges. > > OK, so I obviously expressed myself badly. Let me try again. > > IPv6 support is enabled in a the stock kernel. OK. Fine. But just because > that feature is present in the kernel, that does not imply that anything = in > userland -has- to actually make any use of it at all. > > Something is doing ifconfig on my loopback (lo0) interface. What is that > thing and how can I get it to stop doing that? > > As I have already learned, the /etc/rc.firewall script also assumes both = the > presence of, and the desirability of IPv6 support. And unless one edits t= hat > file manually... which I have been effectively forced to do... there is n= o way > to get it to simply NOT create and install multiple IPv6-related ipfw rul= es, > EVEN THOUGH in my particular situation... which is still the most common = case... > those extra and entirely superfluous IPv6 ipfw filtering rules are servin= g > no earthly purpose whatsoever and are only cluttering up my ipfw rule set= , > thus pointlessly making it harder for me to grok and maintain them all. > > Clearly, if doesn't have to be this way. Some maintainers just decided th= at > I and all other IPv4-only users should get stuck dealing with a lot of us= eless, > unnecessary and distracting IPv6 stuff, whether I like it or not, and pre= sumably > for our own good. > > I really wish that maintainers would allow me a bit more freedom, and sho= w > me the courtesy and respect to allow me to decide for myself what is and = what > isn't "for my own good". > > I can and will most certainly get down and grovel around in the various > /etc/rc.d/ scripts and will comment out those parts that do things like > ifconfig'ing my loopback interface for IPv6, whether I like it or not. > But there ought to be some single /etc/rc.conf variable via which one cou= ld > simply select the "No, I don't want to have to deal with IPv6 at all righ= t > now" option. > > Is that really an unreasonable hope, expectation, and request? > > I understand that the kernel will still -offer- the IPv6 support. But if = no > -other- software on my system actually takes the kernel up on that offer, > then the kernel's IPv6 support becomes like the tree that falls in the > forrest when there is nobody around to hear it. It might as well be said > that it makes no sound, and no difference to anything at all. > > It is clearly not necessary for me or anyone else to have to rebuild the > kernel... and world... just in order to get rid of what are, for the > majority of users here in 2019, still a bunch of utterly superfluous IPv6 > "features" that (a) do not help us one iota and that (b) are all just a > big and pointless distraction that muddles everything and unnecessarily > complicates and complexifies ordinary system maintenance tasks. > > IPv6 is great and I'm sure I'll be using it someday. But today is not tha= t > day... not for me, and also not for one hell of a lot of other users. The > fact that I and others are effectively being forced to even think about i= t, > due to an absence of reasonable and easily accessible userland options, i= s > actually a big turn-off, and leaves a bad taste in the mouth which will > be remembered, in future, at every mention of IPv6. I hope that all of th= e > IPv6 evanglists will take a moment to stop and think about that, and that > they'll stop effectively forcing those of us who don't need it to both us= e > IPv6 and to think about it, whether we like it or not, and before we are = ready, > willing, and able to do so. > > Regards, > rfg > > P.S. In case I have again failed to be clear, I am proposing a new /etc/r= c.conf > option. Something simple and intutive like: > > ipv6=3D"NO" > > That in turn should be checked -and- respected by all relevant /etc/rc,d/ > scripts. > > I ask again, is this really such an unreasonable thing to hope for? You can just block ipv6 once and for all with your firewall. I wanted to disable ipv6 on a machine and the only thing I did was to add "block quick inet6" on top of my pf rules. I guess ipfw has a similar rule. This does not solve your issue with ifconfig, but as you understood it will= not remove ipv6 support from your kernel either. It will just drop any inet6 pa= cket as soon as it arrives on your system. If you want to disable ipv6, then firewall it. If you want to remove any ip= v6 support then, as already stated, you must rebuild from sources (both kernel and world). Lorenzo Salvadore. From owner-freebsd-questions@freebsd.org Tue Jun 18 08:33:45 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E4ADB15B07F3; Tue, 18 Jun 2019 08:33:44 +0000 (UTC) (envelope-from zarychtam@plan-b.pwste.edu.pl) Received: from plan-b.pwste.edu.pl (plan-b.pwste.edu.pl [IPv6:2001:678:618::40]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "plan-b.pwste.edu.pl", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 3019269A93; Tue, 18 Jun 2019 08:33:43 +0000 (UTC) (envelope-from zarychtam@plan-b.pwste.edu.pl) Received: from bsdondell.lab.pwste.edu.pl ([IPv6:2001:678:618:3067:4d7c:5809:f7b3:c95f]) (authenticated bits=0) by plan-b.pwste.edu.pl (8.15.2/8.15.2) with ESMTPSA id x5I8XdAa059962 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Tue, 18 Jun 2019 10:33:39 +0200 (CEST) (envelope-from zarychtam@plan-b.pwste.edu.pl) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=plan-b.pwste.edu.pl; s=plan-b-mailer; t=1560846820; bh=193YLTqEEij86qrqD0qKtyvf+cmdaXCWtIbfiExdG6s=; h=To:Cc:References:From:Subject:Date:In-Reply-To; b=DQmnypoxkVBpADC8t1z9MIFfsoZ1mOsCHN4eQl1wXI+qAGdqMTV3oDGT3iZsVRPTI 4T6eKiAow0ErkgF168180r081C7Jo8hzfRef81qIkNutZwuICZhDv/WF/DlTxrp0zx omz9QTADg1sILE1TNhn2ATWp33G/3yvJuzk740lvZAm3t5gYgtJy7TfRhAxZiJxVvf ZFE3MWFWazVj0l7t+TsLmGIzERvF4kw4sidArF9fNnj3jWXlKHx2m8lpxxWbyxit/O 02upUxgVnLr9WQtrtKdM8TsH5mwVgWaNcROVHPH1601VQiRo17RmdvFKRB74ewpJll CyxYV22BM4Byw== X-Authentication-Warning: plan-b.pwste.edu.pl: Host [IPv6:2001:678:618:3067:4d7c:5809:f7b3:c95f] claimed to be bsdondell.lab.pwste.edu.pl To: christian russell , "Ronald F. Guilmette" Cc: freebsd-net@freebsd.org, freebsd-questions@freebsd.org References: <18748.1560843874@segfault.tristatelogic.com> From: Marek Zarychta Openpgp: preference=signencrypt Autocrypt: addr=zarychtam@plan-b.pwste.edu.pl; keydata= mQENBFfi3cMBCADLecMTFXad4uDXqv3eRuB4qJJ8G9tzzFezeRnnwxOsPdytW5ES2z1ibSrR IsiImx6+PTqrAmXpTInxAi7yiZGdSiONRI4CCxKY9d1YFiNYT/2WyNXCekm9x29YeIU7x0JB Llbz0f/9HC+styBIu2H+PY/X98Clzm110CS+n/b9l1AtiGxTiVFj7/uavYAKxH6LNWnbkuc5 v8EVNc7NkEcl5h7Z9X5NEtzDxTOiBIFQ/kOT7LAtkYUPo1lqLeOM2DtWSXTXQgXl0zJI4iP1 OAu4qQYm2nXwq4b2AH9peknelvnt1mpfgDCGSKnhc26q6ibTfMwydp+tvUtQIQYpA6b9ABEB AAG0N01hcmVrIFphcnljaHRhIChQbGFuLWIpIDx6YXJ5Y2h0YW1AcGxhbi1iLnB3c3RlLmVk dS5wbD6JATcEEwEIACEFAlfi4LkCGwMFCwkIBwIGFQgJCgsCBBYCAwECHgECF4AACgkQHZW8 vIFppoJXdgf8D9X3VRFSNaR9lthSx/+uqas17J3FJKBo1xMQsC2a+44vzNvYJSuPGLLJ+LW2 HPVazjP/BWZJbxOYpliY4zxNRU0YCp0BLIVLibc//yax+mE42FND/+NiIZhqJscl6MLPrSwo sIwXec4XYkldkyqW/xBbBYXoIkBqdKB9j5j42Npy1IV/RizOSdmvTWY27ir8e/yGMR1RLr4F 8P5K3OWTdlGy2H2F/3J8bIPBLG6FpaIyLQw4dHSx8V02PYqDxK1cNo2kAOnU8PnZL/AGuMOH iv3MN1VYL8ehcmpBBsrZGebQJxrjY2/5IaTSgp9xHYT70kshuU6Qb97vk1mOjNZxgbkBDQRX 4t3DAQgA10h6RCXuBLMHxq5B8X/ZIlj9sgLoeyfRdDZEc9rT2KUeUJVHDsbvOFf4/7F1ovWY hJbA6GK/LUZeHHTjnbZcH1uDYQeHly4UOLxeEvhGoz4JhS2C7JzN/uRnwbdOAUbJr8rUj/IY a7gk906rktsc/Ldrxrxh7O6WO0JCh2XO/p4pDfEwwB37g4xHprSab28ECYJ9JMbtA8Sy4M55 g3+GQ28FvSlGnx48OoGXU2BZdc1vZKSQmNOlikB+9/hDX8zdYWVfDaX1TLQ8Ib4+xTUmapza mV/bxIsaZRBw+jFjLQHhTbIMfPEU+4mxFDvTdbKPruKPqVf1ydgMnPZWngowdwARAQABiQEf BBgBCAAJBQJX4t3DAhsMAAoJEB2VvLyBaaaC6qkIAJs9sDPqrqW0bYoRfzY6XjDWQ59p9tJi v8aogxacQNCfAu+WkJ8PNVUtC1dlVcG5NnZ80gXzd1rc8ueIvXlvdanUt/jZd8jbb3gaDbK3 wh1yMCGBl/1fOJTyEGYv1CRojv97KK89KP5+r8x1P1iHcSrunlDNqGxTMydNCwBH23QcOM+m u4spKnJ/s0VRBkw3xoKBZfZza6fTQ4gTpAipjyk7ldOGBV+PvkKATdhK2yLwuWXhKbg/GRlD 1r5P0gxzSqfV4My+KJuc2EDcrqp1y0wOpE1m9iZqCcd0fup5f7HDsYlLWshr7NQl28f6+fQb sylq/j672BHXsdeqf/Ip9V65AQ0EV+OTdwEIAMxnGg7OO/ZAnSwiIiABA9lil1Lfa5BWTH3c l1rz4slz7Gw99G9J3bX3FiPA0vU89dgBZ2k0/UVk5cI5EsMAvwJN4bPwRsfBELQqjCKkVZr4 vUeGyvgQ2jnoK1fcEFOnCRdwFy4EJ6Y/fsZCTj4IfQpkM1W7C3KuSGPcjPDA9XCLDjjp8bbA Q9VgQ68MntAnYxMqK0S3CrHp5Pruvb0x4MfFLNwaKtWK+UnJGPT4umj8PMP6XLsFC3g+SGoP aWoYRDI297ZGx4IBWEaJq181oEC5iUQ6WREti9fNQ3TsAB3Q2CjNlkx1geSczIFJSyOHmyJZ RqAocw1sIuPopvhWtR0AEQEAAYkCRAQYAQgADwUCV+OTdwIbAgUJCWYBgAEpCRAdlby8gWmm gsBdIAQZAQgABgUCV+OTdwAKCRB1n+z//VKNLOETCAC3ggwAAQij4hkIxQFapnRuIVb5vq7D AwJ9+Ld5/zYHOj2Tfu+BPSNGzI2edqboz2w1t55UHEYzYDp2axxIfPrZrXsBV4DsjtGwzVV/ jZ9or5qTaYFDEStRkzL4mRpTyYhl/T7GgWpwOJWOih+cU7RWzjSOxiYMi4QSYlkpDUCcZew0 C3HfcxeFqpeL46zgysHC2ptjINXQ+xR2/F6dbed+l7OsvJAfkBqJoQ/48m+8ly1lbViKck7q gWw143ljaKn2qGIjZdb95zcI/CP4L45SXq8NOweACdx2NfUphLrIMbNCqLkMUJcrnruKfbnp C8OMjFJIqlu+PsW593NcZyOugEAH/0cBsDxlSauSVK4kp8ald26pcBI6igNnIMgjaxMiZBjn eoxBiKAOAO93sPnPr9/64CMMwv1T+0vU2lj8SMKOdHVrB9sW/ICGji5skE85xPEAtUkdAQN+ +c2clotujcaj9lBZKJdncKmSxY0SshEa66H+s76u+2Q3jGK6vOrdxakWYCvh2P0/l52Nd/t2 eazLFgwtk5rbo7O0MSC1GNXUsG07vtZ+zxJXFRx7PQ3ZIn0Y4HqwvXUvqgZ9EHiKy8F+ondz 9IS8/Fs81N5ieujHhSWqbaibapnpeDHvT/FWf8iXfJqWq+F7C8lGShSkmsS5AOhB4TNNH5/m ZzECJa1ql64= Subject: Re: Eliminating IPv6 (?) Message-ID: Date: Tue, 18 Jun 2019 10:33:26 +0200 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:60.0) Gecko/20100101 Thunderbird/60.7.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="y82voBVt9gqr51QdkbZu1xABDhKCgtYM6" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 08:33:45 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --y82voBVt9gqr51QdkbZu1xABDhKCgtYM6 Content-Type: multipart/mixed; boundary="BfDSwDzC7bR85rPfzkw1pWXvCEn7cc9TH"; protected-headers="v1" From: Marek Zarychta To: christian russell , "Ronald F. Guilmette" Cc: freebsd-net@freebsd.org, freebsd-questions@freebsd.org Message-ID: Subject: Re: Eliminating IPv6 (?) References: <18748.1560843874@segfault.tristatelogic.com> In-Reply-To: --BfDSwDzC7bR85rPfzkw1pWXvCEn7cc9TH Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-Language: en-US W dniu 18.06.2019 o=C2=A010:09, christian russell pisze: > My opinion is that being able to practically ignore IPv6, without opera= tional detraction, is a reasonable degree of freedom. FreeBSD isn=E2=80=99= t pushing IPv6 any more or less than any other mainstream OSes. > > Given a set number of developer hours I would prefer that IPv6 be fully= implemented and functionally "ignorable" as opposed to dev time being sp= ent allowing an essentially cosmetic opting out of IPv6 functionality. E= ven more generally I would prefer any dev time time be spent on active is= sues and new features. > >> I ask again, is this really such an unreasonable thing to hope for? > If I were allocating work-hours on FreeBSD development my answer would = be: =E2=80=9Cyup" =C2=AF\_(=E3=83=84)_/=C2=AF > > Christian Dual stack support looks like a reasonable solution these days and works fine in 99% of network scenarios. From the other hand the ability to completely disable legacy IP should be considered as well. Some people consider IPv6 only network to be providing a sufficient degree of freedom but in 2019 we still lack DHCPv6 client in base. --=20 Marek Zarychta > >> On Jun 18, 2019, at 12:44 AM, Ronald F. Guilmette wrote: >> >> In message ,=20 >> Eugene Grosbein wrote: >> >>> 18.06.2019 10:10, Ronald F. Guilmette wrote: >>> >>>> How can I turn off IPv6 entirely without rebuilding the kernel? >>> You cannot. GENERIC kernel specifically enables IPv6 support and you = need to >>> disable it at compile time. >>> And if you do, you better rebuild the world too using WITHOUT_INET6=3D= yes in the >>> /etc/src.conf >>> or else some utilities compiled with INET6 by default will query kern= el >>> for IPv6-specific data (like routing entries) and complain that your = kernel does=20 >>> not know about it. >>> >>> World built WITHOUT_INET6 has no such rough edges. >> OK, so I obviously expressed myself badly. Let me try again. >> >> IPv6 support is enabled in a the stock kernel. OK. Fine. But just b= ecause >> that feature is present in the kernel, that does not imply that anythi= ng in >> userland -has- to actually make any use of it at all. >> >> *Something* is doing ifconfig on my loopback (lo0) interface. What is= that >> thing and how can I get it to stop doing that? >> >> As I have already learned, the /etc/rc.firewall script also assumes bo= th the >> presence of, and the desirability of IPv6 support. And unless one edi= ts that >> file manually... which I have been effectively forced to do... there i= s no way >> to get it to simply NOT create and install multiple IPv6-related ipfw = rules, >> EVEN THOUGH in my particular situation... which is still the most comm= on case... >> those extra and entirely superfluous IPv6 ipfw filtering rules are ser= ving >> no earthly purpose whatsoever and are only cluttering up my ipfw rule = set, >> thus pointlessly making it harder for me to grok and maintain them all= =2E >> >> Clearly, if doesn't have to be this way. Some maintainers just decide= d that >> I and all other IPv4-only users should get stuck dealing with a lot of= useless, >> unnecessary and distracting IPv6 stuff, whether I like it or not, and = presumably >> for our own good. >> >> I really wish that maintainers would allow me a bit more freedom, and = show >> me the courtesy and respect to allow me to decide for myself what is a= nd what >> isn't "for my own good". >> >> I can and will most certainly get down and grovel around in the variou= s >> /etc/rc.d/ scripts and will comment out those parts that do things lik= e >> ifconfig'ing my loopback interface for IPv6, whether I like it or not.= >> But there ought to be some single /etc/rc.conf variable via which one = could >> simply select the "No, I don't want to have to deal with IPv6 at all r= ight >> now" option. >> >> Is that really an unreasonable hope, expectation, and request? >> >> I understand that the kernel will still -offer- the IPv6 support. But = if no >> -other- software on my system actually takes the kernel up on that off= er, >> then the kernel's IPv6 support becomes like the tree that falls in the= >> forrest when there is nobody around to hear it. It might as well be s= aid >> that it makes no sound, and no difference to anything at all. >> >> It is clearly not necessary for me or anyone else to have to rebuild t= he >> kernel... *and* world... just in order to get rid of what are, for the= >> majority of users here in 2019, still a bunch of utterly superfluous I= Pv6 >> "features" that (a) do not help us one iota and that (b) are all just = a >> big and pointless distraction that muddles everything and unnecessaril= y >> complicates and complexifies ordinary system maintenance tasks. >> >> IPv6 is great and I'm sure I'll be using it someday. But today is not= that >> day... not for me, and also not for one hell of a lot of other users. = The >> fact that I and others are effectively being forced to even think abou= t it, >> due to an absence of reasonable and easily accessible userland options= , is >> actually a big turn-off, and leaves a bad taste in the mouth which wil= l >> be remembered, in future, at every mention of IPv6. I hope that all o= f the >> IPv6 evanglists will take a moment to stop and think about that, and t= hat >> they'll stop effectively forcing those of us who don't need it to both= use >> IPv6 and to think about it, whether we like it or not, and before we a= re ready, >> willing, and able to do so. >> >> >> Regards, >> rfg >> >> >> P.S. In case I have again failed to be clear, I am proposing a new /e= tc/rc.conf >> option. Something simple and intutive like: >> >> ipv6=3D"NO" >> >> That in turn should be checked -and- respected by all relevant /etc/rc= ,d/ >> scripts. >> >> I ask again, is this really such an unreasonable thing to hope for? >> _______________________________________________ >> freebsd-net@freebsd.org mailing list >> https://lists.freebsd.org/mailman/listinfo/freebsd-net >> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"= > _______________________________________________ > freebsd-net@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" > --BfDSwDzC7bR85rPfzkw1pWXvCEn7cc9TH-- --y82voBVt9gqr51QdkbZu1xABDhKCgtYM6 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEMOqvKm6wKvS1/ZeCdZ/s//1SjSwFAl0Iod0ACgkQdZ/s//1S jSwZvwf/agEmz2iZbmOJQGdC5jiR5/Gd3VXDj4XI2XtHXcc1btqowrmaPB4gEREn 6lMihXMMM3p4FWoO6W87AuoNcxiX3vnkdGre/K+m19tuPLybDryXl11C7FZOSXrS 0TYgPapR+uyhBhs3j4MLxOn2HLgWpwOFXfOUc/gb2LKTIFGySEllgbbv5iQL+tFC DVzwLyHGBp7anwK3DDWYICSyyxpoDR6onYU0sZeuGO/UN9FruJRQW3b8WoDKgAyh /FtSPSbE83R3Ut3c+LiF3nDBiPkqzxVmYHCYSBLAiLfZmKMw40mFSXAsWeWIrL1L bpaxFwRIf9kHu//dVGVafelanAWWDg== =qhLx -----END PGP SIGNATURE----- --y82voBVt9gqr51QdkbZu1xABDhKCgtYM6-- From owner-freebsd-questions@freebsd.org Tue Jun 18 08:39:49 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6EDC315B0E73; Tue, 18 Jun 2019 08:39:49 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: from outgoing.tristatelogic.com (segfault.tristatelogic.com [69.62.255.118]) by mx1.freebsd.org (Postfix) with ESMTP id 0055969E82; Tue, 18 Jun 2019 08:39:47 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: by segfault.tristatelogic.com (Postfix, from userid 1237) id DC90B4E64B; Tue, 18 Jun 2019 01:39:46 -0700 (PDT) From: "Ronald F. Guilmette" cc: freebsd-net@freebsd.org, freebsd-questions@freebsd.org Subject: Re: Eliminating IPv6 (?) In-Reply-To: <9AF5DF39-9B81-4270-B25C-D089C971E924@punkt.de> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <19573.1560847186.1@segfault.tristatelogic.com> Content-Transfer-Encoding: quoted-printable Date: Tue, 18 Jun 2019 01:39:46 -0700 Message-ID: <19574.1560847186@segfault.tristatelogic.com> X-Rspamd-Queue-Id: 0055969E82 X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; spf=pass (mx1.freebsd.org: domain of rfg@tristatelogic.com designates 69.62.255.118 as permitted sender) smtp.mailfrom=rfg@tristatelogic.com X-Spamd-Result: default: False [-3.40 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.98)[-0.977,0]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; DMARC_NA(0.00)[tristatelogic.com]; NEURAL_HAM_LONG(-1.00)[-0.999,0]; IP_SCORE(-2.72)[ip: (-7.16), ipnet: 69.62.128.0/17(-3.58), asn: 14051(-2.82), country: US(-0.06)]; MX_GOOD(-0.01)[cached: mx1.tristatelogic.com]; RCPT_COUNT_TWO(0.00)[2]; MISSING_TO(2.00)[]; NEURAL_HAM_SHORT(-0.49)[-0.487,0]; RCVD_NO_TLS_LAST(0.10)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:14051, ipnet:69.62.128.0/17, country:US]; RCVD_COUNT_TWO(0.00)[2]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 08:39:49 -0000 In message <9AF5DF39-9B81-4270-B25C-D089C971E924@punkt.de>, = "Patrick M. Hausen" wrote: > Am 18.06.2019 um 09:44 schrieb Ronald F. Guilmette : >> As I have already learned, the /etc/rc.firewall script also assumes bot= h the >> presence of, and the desirability of IPv6 support. And unless one edit= s that >> file manually... which I have been effectively forced to do... there is= no way >> to get it to simply NOT create and install multiple IPv6-related ipfw r= ules, >> EVEN THOUGH in my particular situation... which is still the most commo= n case... >> those extra and entirely superfluous IPv6 ipfw filtering rules are serv= ing >> no earthly purpose whatsoever and are only cluttering up my ipfw rule s= et, >> thus pointlessly making it harder for me to grok and maintain them all. > >Instead of messing with the system provided file you could >create a new one with only your own desired rules and then set >this rc.conf variable: > > firewall_script=3D"/etc/rc.firewall" Actually, no, that's not how one is supposed to enable one's own set of ipfw ules. To do that, the Handbook (Sec. 30.4.1) says very clearly that one should do: firewall_enable=3D"YES" firewall_type=3D"path-to-my-rules-file" But I'm glad you brought it up. The funny thing is that even that doesn't work properly nowadays *or* like it used to in the past. I did that exact thing when putting together my shiny new 12.0-RELEASE system recently, as prescribed by the Handbook, just as I have done in the past on my prior FreeBSD systems. The result was no longer as expected. It seems that somwhere along the line, sometime between the last time I did a totally fresh install of FreeBSD (which I admit was some years ago now) and today, *somebody* apparently came to the conclusion that ordinary end lusers like me could not be fully trusted to supply 100% of their own ipfw rules, and thus, noadays, EVEN IF the user does exactly what you suggested, and tries (according to the guidance given in the Handbook) to supply his/her own set of ipfw rules, nowadays the /etc/rc.firewall script still gets invoked, and it *insists* on *adding* some ipfw rules to the set the user supplies in the named file. And to add insult to injury, some of those additional "whether you like it or not" ipfw rules specifically involve IPv6, which, as I have already said, I don't want, dont need, and which are just a pointless annoyance. Check it out for yourself if you don't believe me. (I have been debating with myself as to whether or not I should file a formal PR on this. I guess that I will. It is incredible but apparently true that even for those folks who want to write their own ipfw rule sets, 100%, *somebody* decided the we should not be allowed to do that 100% anymore. Apparently, I am not to be trusted to perform this task, for my own systems, all on my own anymore.) >As for the rest of your request, yes, I find it unreasonably in 2019 but >let's not get into a fight about that. IPv6 is here to stay. If you boot = any >Mac or Windows 10 desktop, IPv6 will be active and even necessary for >service autodiscovery and similar things to work. If true, I call that sloppy, careless, and lazy bad design. And that is being generous on my part. What services must be autodiscovered via IPv6 that could not be just as easily autodiscovered via IPv4 RFC1918 addresses... as had been done for at least a couple of decades already? (I have a printer right here next to me that has been successfully autodiscovered by Windows, by Linux, and by FreeBSD, all over an IPv4-only network.) I well and truly unxderstand that various entities have a clear financial interest in effectively forcing me... and hundreds of millions of others..= . to purchase all new equipmwent, but if what you said it true then that really takes the cake, because there is no compelling reason for it other than the commercial interests of various equipment vendors. There are two ways to induce people to do things that they otherwise would not do... carrots and sticks. For me, IPv6 right now is all sticks and no carrots. If I want to be abused, mistreated and forced to do things that I don't much feel like doing... well... I already have relatives for that. Regards, rfg From owner-freebsd-questions@freebsd.org Tue Jun 18 09:29:38 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1F32E15B2F96; Tue, 18 Jun 2019 09:29:38 +0000 (UTC) (envelope-from eugen@grosbein.net) Received: from eg.sd.rdtc.ru (eg.sd.rdtc.ru [IPv6:2a03:3100:c:13::5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "eg.sd.rdtc.ru", Issuer "eg.sd.rdtc.ru" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id D510E6BD1D; Tue, 18 Jun 2019 09:29:26 +0000 (UTC) (envelope-from eugen@grosbein.net) X-Envelope-From: eugen@grosbein.net X-Envelope-To: freebsd-net@freebsd.org Received: from [10.58.0.4] ([10.58.0.4]) by eg.sd.rdtc.ru (8.15.2/8.15.2) with ESMTPS id x5I9TA3J073466 (version=TLSv1.2 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Tue, 18 Jun 2019 16:29:10 +0700 (+07) (envelope-from eugen@grosbein.net) Subject: Re: Eliminating IPv6 (?) To: "Ronald F. Guilmette" References: <18748.1560843874@segfault.tristatelogic.com> Cc: freebsd-net@freebsd.org, freebsd-questions@freebsd.org From: Eugene Grosbein Message-ID: Date: Tue, 18 Jun 2019 16:29:02 +0700 User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: <18748.1560843874@segfault.tristatelogic.com> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: D510E6BD1D X-Spamd-Bar: / Authentication-Results: mx1.freebsd.org; spf=permerror (mx1.freebsd.org: domain of eugen@grosbein.net uses mechanism not recognized by this client) smtp.mailfrom=eugen@grosbein.net X-Spamd-Result: default: False [-0.17 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.42)[-0.418,0]; RCVD_TLS_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; TO_DN_SOME(0.00)[]; NEURAL_HAM_LONG(-0.24)[-0.238,0]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[grosbein.net]; NEURAL_SPAM_SHORT(0.08)[0.085,0]; MX_INVALID(0.50)[greylisted]; TO_MATCH_ENVRCPT_SOME(0.00)[]; R_SPF_PERMFAIL(0.00)[]; IP_SCORE(0.00)[country: RU(0.01)]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:29072, ipnet:2a03:3100::/32, country:RU]; MID_RHS_MATCH_FROM(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 09:29:38 -0000 18.06.2019 14:44, Ronald F. Guilmette wrote: >>> How can I turn off IPv6 entirely without rebuilding the kernel? >> You cannot. GENERIC kernel specifically enables IPv6 support and you need to >> disable it at compile time. >> And if you do, you better rebuild the world too using WITHOUT_INET6=yes in the >> /etc/src.conf >> or else some utilities compiled with INET6 by default will query kernel >> for IPv6-specific data (like routing entries) and complain that your kernel does >> not know about it. >> >> World built WITHOUT_INET6 has no such rough edges. > > OK, so I obviously expressed myself badly. Let me try again. > > IPv6 support is enabled in a the stock kernel. OK. Fine. But just because > that feature is present in the kernel, that does not imply that anything in > userland -has- to actually make any use of it at all. > > *Something* is doing ifconfig on my loopback (lo0) interface. What is that > thing and how can I get it to stop doing that? It is not userland. It is a kernel itself. IPv6 standards are very different comparing to IPv4. They mandate some level of actual usage of IPv6. Easiest (and sometimes only) way to get rid of this is to rebuilt the kernel. From owner-freebsd-questions@freebsd.org Tue Jun 18 09:36:18 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 236E815B3434; Tue, 18 Jun 2019 09:36:18 +0000 (UTC) (envelope-from jamie@catflap.org) Received: from donotpassgo.dyslexicfish.net (donotpassgo.dyslexicfish.net [IPv6:2001:19f0:300:2185:123::1]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 6FDC76C226; Tue, 18 Jun 2019 09:36:17 +0000 (UTC) (envelope-from jamie@catflap.org) Received: from donotpassgo.dyslexicfish.net (donotpassgo.dyslexicfish.net [104.207.135.49]) by donotpassgo.dyslexicfish.net (8.14.5/8.14.5) with ESMTP id x5I9aFlc057111; Tue, 18 Jun 2019 10:36:15 +0100 (BST) (envelope-from jamie@donotpassgo.dyslexicfish.net) Received: (from jamie@localhost) by donotpassgo.dyslexicfish.net (8.14.5/8.14.5/Submit) id x5I9aFfm057110; Tue, 18 Jun 2019 10:36:15 +0100 (BST) (envelope-from jamie) From: Jamie Landeg-Jones Message-Id: <201906180936.x5I9aFfm057110@donotpassgo.dyslexicfish.net> Date: Tue, 18 Jun 2019 10:36:15 +0100 Organization: Dyslexic Fish To: rfg@tristatelogic.com Cc: freebsd-questions@freebsd.org, freebsd-net@freebsd.org Subject: Re: Eliminating IPv6 (?) References: <18748.1560843874@segfault.tristatelogic.com> In-Reply-To: <18748.1560843874@segfault.tristatelogic.com> User-Agent: Heirloom mailx 12.4 7/29/08 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Greylist: Sender passed SPF test, not delayed by milter-greylist-4.2.7 (donotpassgo.dyslexicfish.net [104.207.135.49]); Tue, 18 Jun 2019 10:36:15 +0100 (BST) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 09:36:18 -0000 "Ronald F. Guilmette" wrote: > As I have already learned, the /etc/rc.firewall script also assumes both the > presence of, and the desirability of IPv6 support. And unless one edits that > file manually... which I have been effectively forced to do... there is no way > to get it to simply NOT create and install multiple IPv6-related ipfw rules, I sympathise with your situation, and maybe /etc/rc.firewall could be a bit more intelligent about it, but when we had 2 seperate files, /etc/rc.firewall and /etc/rc.firewall6 it was a pain in the arse, and also made it more likely of mistakes/oversights occuring. To stop the clutter you mention, and to avoid making the file more complicated for us who do dual stack, maybe a wrapper could be made around ipfw to get it to act as a null-op if ip6 is disabled by your suggested rc.conf knob. I'd have it set rule 1 to something like "deny ip6 from any to any", and then ignore any further ip6 rules it encounters. But yes, I can see how the efforts to unify the 4/6 configurations have made things a bit more complicated for those who only use the one stack (and in the future, people may start getting similarly affected by inet4 stuff complicating their configs!) Cheers, Jamie From owner-freebsd-questions@freebsd.org Tue Jun 18 12:15:04 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1284C15B90BD for ; Tue, 18 Jun 2019 12:15:04 +0000 (UTC) (envelope-from roberthuff@rcn.com) Received: from smtp.rcn.com (smtp.rcn.com [69.168.97.78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4C5DA7173C for ; Tue, 18 Jun 2019 12:15:03 +0000 (UTC) (envelope-from roberthuff@rcn.com) DKIM-Signature: v=1; a=rsa-sha1; d=rcn.com; s=20180516; c=relaxed/simple; q=dns/txt; i=@rcn.com; t=1560858895; h=From:Subject:Date:To:MIME-Version:Content-Type; bh=ZKok/liNMHM0a+6OGB0/BG152bE=; b=hR/7TIk/HZqVXyrIQT1juMtecoJUP0PDal7WO1/61Uq9X/VJ0a1GSViiZpGDVohK POvrSHnISIsMyY2rTn8VE6nRCzwW95pEFtzA5Fg5HmwLDLZymlBhkibxwVgsMgXc W9yOp3Y1/9PhILjmClQ76TYis91hPfGWiszsM74U6mWf2bsUhFnk+8pApTFATkwa 0YjKh3DqFHEPfxN4ewQ/8ouAdeF9blFL1V/qiz6xRBdAL7N14TIyAF+ZIOSD9rJa 1Xf/JA8EB9oIUoIzQMacwrMzhaKTNu+JssUexluO9w6CDu5Q8DCllm5eTsY1qESg c8i3HZFDXscl/eaNEm+jCQ==; X_CMAE_Category: , , X-CNFS-Analysis: v=2.2 cv=aKGykv1m c=1 sm=1 tr=0 a=9TgA2UwI6Wy+6BV4wQM/cQ==:117 a=9TgA2UwI6Wy+6BV4wQM/cQ==:17 a=jpOVt7BSZ2e4Z31A5e1TngXxSK0=:19 a=KGjhK52YXX0A:10 a=kj9zAlcOel0A:10 a=XRQyMpdBKAEA:10 a=dq6fvYVFJ5YA:10 a=48faUk6PgeAA:10 a=MtpRBOugqLg-rJsvyLMA:9 a=CjuIK1q_8ugA:10 X-CM-Score: 0 X-Scanned-by: Cloudmark Authority Engine X-Authed-Username: cm9iZXJ0aHVmZkByY24uY29t Authentication-Results: smtp03.rcn.cmh.synacor.com header.from=roberthuff@rcn.com; sender-id=softfail Authentication-Results: smtp03.rcn.cmh.synacor.com smtp.user=roberthuff; auth=pass (PLAIN) Received: from [209.6.230.48] ([209.6.230.48:43215] helo=jerusalem.litteratus.org.litteratus.org) by smtp.rcn.com (envelope-from ) (ecelerity 3.6.25.56547 r(Core:3.6.25.0)) with ESMTPSA (cipher=AES256-GCM-SHA384) id CD/21-13517-F01D80D5; Tue, 18 Jun 2019 07:54:55 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <23816.53518.998090.665606@jerusalem.litteratus.org> Date: Tue, 18 Jun 2019 07:54:54 -0400 From: Robert Huff To: "Ronald F. Guilmette" Cc: freebsd-net@freebsd.org, freebsd-questions@freebsd.org Subject: Re: Eliminating IPv6 (?) In-Reply-To: <19574.1560847186@segfault.tristatelogic.com> References: <9AF5DF39-9B81-4270-B25C-D089C971E924@punkt.de> <19574.1560847186@segfault.tristatelogic.com> X-Mailer: VM 8.2.0b under 26.2 (amd64-portbld-freebsd13.0) X-Rspamd-Queue-Id: 4C5DA7173C X-Spamd-Bar: ------- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=rcn.com header.s=20180516 header.b=hR/7TIk/; dmarc=pass (policy=none) header.from=rcn.com; spf=pass (mx1.freebsd.org: domain of roberthuff@rcn.com designates 69.168.97.78 as permitted sender) smtp.mailfrom=roberthuff@rcn.com X-Spamd-Result: default: False [-7.82 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_DKIM_ALLOW(-0.20)[rcn.com:s=20180516]; RCVD_TLS_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; R_SPF_ALLOW(-0.20)[+ip4:69.168.97.0/24]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; IP_SCORE(-2.74)[ip: (-9.23), ipnet: 69.168.97.0/24(-4.55), asn: 36271(0.14), country: US(-0.06)]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; TO_DN_SOME(0.00)[]; DWL_DNSWL_LOW(-1.00)[rcn.com.dwl.dnswl.org : 127.0.5.1]; TO_MATCH_ENVRCPT_SOME(0.00)[]; DKIM_TRACE(0.00)[rcn.com:+]; DMARC_POLICY_ALLOW(-0.50)[rcn.com,none]; MX_GOOD(-0.01)[mx.rcn.com]; NEURAL_HAM_SHORT(-0.98)[-0.975,0]; RCVD_IN_DNSWL_LOW(-0.10)[78.97.168.69.list.dnswl.org : 127.0.5.1]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:36271, ipnet:69.168.97.0/24, country:US]; RCVD_COUNT_TWO(0.00)[2]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 12:15:04 -0000 Ronald F. Guilmette writes: > >Instead of messing with the system provided file you could > >create a new one with only your own desired rules and then set > >this rc.conf variable: > > > > firewall_script="/etc/rc.firewall" > > Actually, no, that's not how one is supposed to enable one's own set > of ipfw ules. To do that, the Handbook (Sec. 30.4.1) says very clearly > that one should do: > > firewall_enable="YES" > firewall_type="path-to-my-rules-file" > > But I'm glad you brought it up. The funny thing is that even that > doesn't work properly nowadays *or* like it used to in the past. If this is true - haven't checked personally - then it's a bug. (And a non-trivial one, the fact you're the first to report it notwithstanding.) Can you please open a bug report? Respectfully, Robert Huff From owner-freebsd-questions@freebsd.org Tue Jun 18 12:22:49 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2754915B97A7; Tue, 18 Jun 2019 12:22:49 +0000 (UTC) (envelope-from andrnils@gmail.com) Received: from mail-lj1-x236.google.com (mail-lj1-x236.google.com [IPv6:2a00:1450:4864:20::236]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id E54F471D4D; Tue, 18 Jun 2019 12:22:47 +0000 (UTC) (envelope-from andrnils@gmail.com) Received: by mail-lj1-x236.google.com with SMTP id 16so12878990ljv.10; Tue, 18 Jun 2019 05:22:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=A1oFqf5+72GTalmlLk1MKf0HNiPI8fHSB4INAHu7V/U=; b=ghN9daFMxuC0GoM2NtuzTw5muhyHParQ4rUsfFlVtVQZcBM8YatrhDQ7fIJUU9EU+v vir9sNXxpKZ+Aazqg+PygTyUDt2/XRvhQZwSEGRLQ8ygeWUhl7WKKbloYUF8BCDLLZC2 MjpyhdS0mnfqLDfXcD/7qryMLDib2TpPfPAm5RxuRfiU+dAMTuJhtVyg+9iQ4fAlvy04 odD/X4zmoUtFo4daogh8AcGIkMuBz2bjTdl10Wn1VFhlNUbidbisCGBD1eMbZ0a/Ue/p XvPpUPaH/kIyIrjxUo2FPXbplf7rkeYVzrri939oZrschB82/tK9gCiSHGE7gMsvdzGg YxYA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=A1oFqf5+72GTalmlLk1MKf0HNiPI8fHSB4INAHu7V/U=; b=owPiO2Iqi8OIETw7zmv31gAy0l8272alGk6tDVTfNKY8wO4Fl1yaMfFhwGRHLBb9jG svhizfbAQ7H/iauwoCQKzYXik1Xd2zYtzOS/6FVGO4+S3FgsicVzeCArQgjV7CoZrw3x +HWkSoEsk/duR7cE2jFoMiWLpmwkr7oRbz+f2YNJ9IBhTHE1vHRtUfqYMNlqQfdEn07J 8btJ5m3d2qhpsT9bSorOuOJFhRGIPp3CrXUb2QBdPCQUC+3c8uuLcKJYnmDosZI3/ynr jYGeWqn/UdX86mYH7AqocIlVg7qNpZvjwBDZNu3bv5VjClt8QdprGvCePRZqUJd1VPuT 4+Ug== X-Gm-Message-State: APjAAAXcMB0zzhmB6DTjCYxE3i5apOJMVIwVRrSa+HYKkc6pU106H+HF ybsmuoUwMiRtaNfLaPJzcdBb1u4wVuugsHtwQQBfwOu/JyA= X-Google-Smtp-Source: APXvYqxKlfOnJ12GNHJlyrd4hU4Xf75KICOLUX36v62PyrOuWqyWAEPYbIly1W7wtTK1rsH82hSPqQLqpoTQicvJBjg= X-Received: by 2002:a2e:5c6:: with SMTP id 189mr1806200ljf.22.1560860566121; Tue, 18 Jun 2019 05:22:46 -0700 (PDT) MIME-Version: 1.0 References: <9AF5DF39-9B81-4270-B25C-D089C971E924@punkt.de> <19574.1560847186@segfault.tristatelogic.com> <23816.53518.998090.665606@jerusalem.litteratus.org> In-Reply-To: <23816.53518.998090.665606@jerusalem.litteratus.org> From: Andreas Nilsson Date: Tue, 18 Jun 2019 14:22:32 +0200 Message-ID: Subject: Re: Eliminating IPv6 (?) To: Robert Huff Cc: "Ronald F. Guilmette" , FreeBSD Net , Mailinglists FreeBSD X-Rspamd-Queue-Id: E54F471D4D X-Spamd-Bar: ------ Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20161025 header.b=ghN9daFM; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of andrnils@gmail.com designates 2a00:1450:4864:20::236 as permitted sender) smtp.mailfrom=andrnils@gmail.com X-Spamd-Result: default: False [-6.79 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20161025]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[4]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36]; FREEMAIL_FROM(0.00)[gmail.com]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; RCVD_TLS_LAST(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; RCVD_IN_DNSWL_NONE(0.00)[6.3.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.5.4.1.0.0.a.2.list.dnswl.org : 127.0.5.0]; MX_GOOD(-0.01)[cached: alt3.gmail-smtp-in.l.google.com]; IP_SCORE(-2.85)[ip: (-9.40), ipnet: 2a00:1450::/32(-2.49), asn: 15169(-2.32), country: US(-0.06)]; NEURAL_HAM_SHORT(-0.93)[-0.927,0]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; RCVD_COUNT_TWO(0.00)[2]; SUBJECT_HAS_QUESTION(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com.dwl.dnswl.org : 127.0.5.0] Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 12:22:49 -0000 On Tue, Jun 18, 2019 at 2:16 PM Robert Huff wrote: > > Ronald F. Guilmette writes: > > > >Instead of messing with the system provided file you could > > >create a new one with only your own desired rules and then set > > >this rc.conf variable: > > > > > > firewall_script="/etc/rc.firewall" > > > > Actually, no, that's not how one is supposed to enable one's own set > > of ipfw ules. To do that, the Handbook (Sec. 30.4.1) says very clearly > > that one should do: > > > > firewall_enable="YES" > > firewall_type="path-to-my-rules-file" > > > > But I'm glad you brought it up. The funny thing is that even that > > doesn't work properly nowadays *or* like it used to in the past. > > If this is true - haven't checked personally - then it's a bug. > (And a non-trivial one, the fact you're the first to report it > notwithstanding.) > Can you please open a bug report? > > > Respectfully, > > > Robert Huff > The bug being that firewall_type is used to specify a type in the default /etc/rc.firewall file and firewall_script should be used to provide the path to ones own ipfw script, right? I have no ipv6 rules in ipfw when configuring rc.conf as: firewall_enable="YES" firewall_script="/etc/ipfw.rules". The man page for rc.conf states: firewall_script (str) This variable specifies the full path to the firewall script to run. The default is /etc/rc.firewall. firewall_type (str) Names the firewall type from the selection in /etc/rc.firewall, or the file which contains the local firewall ruleset. Valid selections from /etc/rc.firewall are: open unrestricted IP access closed all IP services disabled, except via "lo0" client basic protection for a workstation simple basic protection for a LAN. If a filename is specified, the full path must be given. Best regards Andreas From owner-freebsd-questions@freebsd.org Tue Jun 18 12:35:05 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id EC3F715BA29A; Tue, 18 Jun 2019 12:35:04 +0000 (UTC) (envelope-from hausen@punkt.de) Received: from kagate.punkt.de (kagate.punkt.de [217.29.33.131]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 5DA017261C; Tue, 18 Jun 2019 12:35:03 +0000 (UTC) (envelope-from hausen@punkt.de) Received: from hugo10.ka.punkt.de (hugo10.ka.punkt.de [217.29.44.10]) by gate2.intern.punkt.de with ESMTP id x5ICZ0eV038730; Tue, 18 Jun 2019 14:35:00 +0200 (CEST) Received: from [217.29.44.36] ([217.29.44.36]) by hugo10.ka.punkt.de (8.14.2/8.14.2) with ESMTP id x5ICZ0hJ072373; Tue, 18 Jun 2019 14:35:00 +0200 (CEST) (envelope-from hausen@punkt.de) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Subject: Re: Eliminating IPv6 (?) From: "Patrick M. Hausen" In-Reply-To: <23816.53518.998090.665606@jerusalem.litteratus.org> Date: Tue, 18 Jun 2019 14:35:00 +0200 Cc: "Ronald F. Guilmette" , Artem Viklenko via freebsd-net , freebsd-questions@freebsd.org Content-Transfer-Encoding: quoted-printable Message-Id: References: <9AF5DF39-9B81-4270-B25C-D089C971E924@punkt.de> <19574.1560847186@segfault.tristatelogic.com> <23816.53518.998090.665606@jerusalem.litteratus.org> To: Robert Huff X-Mailer: Apple Mail (2.3445.104.11) X-Rspamd-Queue-Id: 5DA017261C X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; spf=pass (mx1.freebsd.org: domain of hausen@punkt.de designates 217.29.33.131 as permitted sender) smtp.mailfrom=hausen@punkt.de X-Spamd-Result: default: False [-2.84 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.97)[-0.967,0]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[4]; R_SPF_ALLOW(-0.20)[+ip4:217.29.32.0/20]; MV_CASE(0.50)[]; MIME_GOOD(-0.10)[text/plain]; RCVD_TLS_LAST(0.00)[]; DMARC_NA(0.00)[punkt.de]; TO_DN_SOME(0.00)[]; NEURAL_HAM_LONG(-1.00)[-0.998,0]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_SOME(0.00)[]; MX_GOOD(-0.01)[cached: mailin.pluspunkthosting.de]; NEURAL_HAM_SHORT(-0.86)[-0.859,0]; RCVD_IN_DNSWL_NONE(0.00)[131.33.29.217.list.dnswl.org : 127.0.10.0]; IP_SCORE(-0.20)[ipnet: 217.29.32.0/20(-0.56), asn: 16188(-0.45), country: DE(-0.01)]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:16188, ipnet:217.29.32.0/20, country:DE]; MID_RHS_MATCH_FROM(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 12:35:05 -0000 Hi all, > Am 18.06.2019 um 13:54 schrieb Robert Huff : >=20 > If this is true - haven't checked personally - then it's a bug. > (And a non-trivial one, the fact you're the first to report it > notwithstanding.) > Can you please open a bug report? I doubt it would qualify as a bug - possibly a bug in the docs, yes. Because the observed behaviour is definitely intentional. The flow of = statements in rc.firewall is: 0. flush all rules 1. setup_loopback 2. setup_ipv6_mandatory and no configuration is going to skip that - hence the only way is to = use firewall_script. Then it goes on: 3. is firewall_type one of the predefined =E2=80=9Eopen=E2=80=9C, = =E2=80=9Esimple=E2=80=9C, etc.? =E2=80=94> configure accordingly 4. if not and firewall_type points to a readable file, suck in = rules from there So, yes, there will always be mandatory IPv6 rules in place. That=E2=80=99= s why they are called mandatory, I figure ;-) Kind regards, Patrick --=20 punkt.de GmbH Internet - Dienstleistungen - Beratung Kaiserallee 13a Tel.: 0721 9109-0 Fax: -100 76133 Karlsruhe info@punkt.de http://punkt.de AG Mannheim 108285 Gf: Juergen Egeling From owner-freebsd-questions@freebsd.org Tue Jun 18 12:47:39 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0D49215BAA39 for ; Tue, 18 Jun 2019 12:47:39 +0000 (UTC) (envelope-from roberthuff@rcn.com) Received: from smtp.rcn.com (smtp.rcn.com [69.168.97.78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 6B81D73076 for ; Tue, 18 Jun 2019 12:47:38 +0000 (UTC) (envelope-from roberthuff@rcn.com) DKIM-Signature: v=1; a=rsa-sha1; d=rcn.com; s=20180516; c=relaxed/simple; q=dns/txt; i=@rcn.com; t=1560862057; h=From:Subject:Date:To:MIME-Version:Content-Type; bh=FfbmjTWklmgeywkGpZt4Sh7y1/4=; b=V/AXsPWt1L+2wy+sfBHXy4MY/LL2srSb4AhGf41zzlYouDhJZh6jpn+dq8WzkOKh 5LO3aj5w2aP41u9PyAtjRJT75x8FkWvhIJSPDUskljsNaO6y8zlUe/1+ZW1Q3enm quYyghpgYLIepD0F4MkCLtEWtpo4fKE1M6l3qCC8JbVHMt2iDcb3RnbmGCkUUH7u 9VeirqaRxdEt2h2fazla7XOHjni9U0fyjNyrjDJWI3pXVD860x7gusF2yaIRqNuz 0h6QhIHLD5rwkYUhajvaSEtLppwpbUqcoZDMz2HVhDVj1nCaN3q+qBGE5+fIOz3i fAij+xYm7hwFXDHzeTaO9g==; X_CMAE_Category: , , X-CNFS-Analysis: v=2.2 cv=buYOPwSi c=1 sm=1 tr=0 a=9TgA2UwI6Wy+6BV4wQM/cQ==:117 a=9TgA2UwI6Wy+6BV4wQM/cQ==:17 a=jpOVt7BSZ2e4Z31A5e1TngXxSK0=:19 a=KGjhK52YXX0A:10 a=kj9zAlcOel0A:10 a=XRQyMpdBKAEA:10 a=dq6fvYVFJ5YA:10 a=48faUk6PgeAA:10 a=Otr1bSn4Gezn7tVTDtkA:9 a=CjuIK1q_8ugA:10 X-CM-Score: 0 X-Scanned-by: Cloudmark Authority Engine X-Authed-Username: cm9iZXJ0aHVmZkByY24uY29t Authentication-Results: smtp01.rcn.cmh.synacor.com header.from=roberthuff@rcn.com; sender-id=softfail Authentication-Results: smtp01.rcn.cmh.synacor.com smtp.user=roberthuff; auth=pass (PLAIN) Received: from [209.6.230.48] ([209.6.230.48:22475] helo=jerusalem.litteratus.org.litteratus.org) by smtp.rcn.com (envelope-from ) (ecelerity 3.6.25.56547 r(Core:3.6.25.0)) with ESMTPSA (cipher=AES256-GCM-SHA384) id 19/8C-36753-86DD80D5; Tue, 18 Jun 2019 08:47:37 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <23816.56679.599665.973942@jerusalem.litteratus.org> Date: Tue, 18 Jun 2019 08:47:35 -0400 From: Robert Huff To: Andreas Nilsson Cc: Robert Huff , "Ronald F. Guilmette" , FreeBSD Net , Mailinglists FreeBSD Subject: Re: Eliminating IPv6 (?) In-Reply-To: References: <9AF5DF39-9B81-4270-B25C-D089C971E924@punkt.de> <19574.1560847186@segfault.tristatelogic.com> <23816.53518.998090.665606@jerusalem.litteratus.org> X-Mailer: VM 8.2.0b under 26.2 (amd64-portbld-freebsd13.0) X-Rspamd-Queue-Id: 6B81D73076 X-Spamd-Bar: ------- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=rcn.com header.s=20180516 header.b=V/AXsPWt; dmarc=pass (policy=none) header.from=rcn.com; spf=pass (mx1.freebsd.org: domain of roberthuff@rcn.com designates 69.168.97.78 as permitted sender) smtp.mailfrom=roberthuff@rcn.com X-Spamd-Result: default: False [-7.86 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_DKIM_ALLOW(-0.20)[rcn.com:s=20180516]; RCVD_TLS_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:69.168.97.0/24]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; IP_SCORE(-2.75)[ip: (-9.26), ipnet: 69.168.97.0/24(-4.56), asn: 36271(0.12), country: US(-0.06)]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; RCPT_COUNT_FIVE(0.00)[5]; DWL_DNSWL_LOW(-1.00)[rcn.com.dwl.dnswl.org : 127.0.5.1]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[rcn.com:+]; MX_GOOD(-0.01)[cached: mx.rcn.com]; DMARC_POLICY_ALLOW(-0.50)[rcn.com,none]; NEURAL_HAM_SHORT(-0.99)[-0.993,0]; FREEMAIL_TO(0.00)[gmail.com]; RCVD_IN_DNSWL_LOW(-0.10)[78.97.168.69.list.dnswl.org : 127.0.5.1]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:36271, ipnet:69.168.97.0/24, country:US]; RCVD_COUNT_TWO(0.00)[2]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 12:47:39 -0000 Andreas Nilsson writes: > > If this is true - haven't checked personally - then it's a bug. > > (And a non-trivial one, the fact you're the first to report it > > notwithstanding.) > > Can you please open a bug report? > > The bug being that firewall_type is used to specify a type in the default > /etc/rc.firewall file and firewall_script should be used to provide the > path to ones own ipfw script, right? The bug would be "documentation does not correctly describe behavior". :-) Respectfully, Robert Huff From owner-freebsd-questions@freebsd.org Tue Jun 18 14:06:22 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0497415BD4F0 for ; Tue, 18 Jun 2019 14:06:22 +0000 (UTC) (envelope-from rwmaillists@googlemail.com) Received: from mail-wm1-x32b.google.com (mail-wm1-x32b.google.com [IPv6:2a00:1450:4864:20::32b]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 9972F76823 for ; Tue, 18 Jun 2019 14:06:20 +0000 (UTC) (envelope-from rwmaillists@googlemail.com) Received: by mail-wm1-x32b.google.com with SMTP id c66so3462911wmf.0 for ; Tue, 18 Jun 2019 07:06:20 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:subject:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=Fqa6QChv0y2AiK51qQBDTCZ9HqO1tN1t/NpHhUiUUnY=; b=d18+DTEZ3RoYiYgwbq8aEbceznVKqACzO/DSJKchi3UnVDys0x9WIW1XanegomgzMi a34A4decAVGy5gDVkOFW/Jn6HIBe1G8LOmVNG3NGN8saCpdxPo4QcDMavPtI3weRpIgW /fauzIBDs6MjOC3GksAn1s1wpvXuJUyZAxG1BZTTKt/yC17CvVg4aRwMgAMvWXB2OBSf +0f443hxtiyZTcRfQyYZb2kNsYd55GNU1cW/gfcz0O5WYDPXlAcP8MJJmUBoNLvfX6Td 8A/0rEqd0hUJWJBbzRUxHoIyCIPiWl8JJOFdV7gaA5p5ot93NDL2eQaqH93fxO/kl1td 5c9A== X-Gm-Message-State: APjAAAWY3Zir9dw7C1H0llyB8EGSsdhVvROw2B2sWPPe1jV004799sHS gK28nxqFI4K98FwVRFXG5fQ8HTQepiKzJg== X-Google-Smtp-Source: APXvYqxTFmSBMCsX5jsyln+lZYnnBgJ7LQgBdQpE+VGq4h7ORVlJLq1pERR/h7VkQlxYXWxpqgutVA== X-Received: by 2002:a1c:3587:: with SMTP id c129mr4121464wma.90.1560866779113; Tue, 18 Jun 2019 07:06:19 -0700 (PDT) Received: from gumby.homeunix.com ([2.121.228.92]) by smtp.gmail.com with ESMTPSA id 5sm15741134wrc.76.2019.06.18.07.06.18 for (version=TLS1_3 cipher=AEAD-AES256-GCM-SHA384 bits=256/256); Tue, 18 Jun 2019 07:06:18 -0700 (PDT) Date: Tue, 18 Jun 2019 15:06:16 +0100 From: RW To: freebsd-questions@freebsd.org Subject: Re: Eliminating IPv6 (?) Message-ID: <20190618150616.6ad64900@gumby.homeunix.com> In-Reply-To: References: <9AF5DF39-9B81-4270-B25C-D089C971E924@punkt.de> <19574.1560847186@segfault.tristatelogic.com> <23816.53518.998090.665606@jerusalem.litteratus.org> X-Mailer: Claws Mail 3.17.3 (GTK+ 2.24.32; amd64-portbld-freebsd12.0) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 9972F76823 X-Spamd-Bar: ------ X-Spamd-Result: default: False [-6.83 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36]; FREEMAIL_FROM(0.00)[googlemail.com]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; DKIM_TRACE(0.00)[googlemail.com:+]; DMARC_POLICY_ALLOW(-0.50)[googlemail.com,quarantine]; MX_GOOD(-0.01)[cached: alt3.gmail-smtp-in.l.google.com]; NEURAL_HAM_SHORT(-0.99)[-0.992,0]; RECEIVED_SPAMHAUS_PBL(0.00)[92.228.121.2.zen.spamhaus.org : 127.0.0.10]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[googlemail.com]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; SUBJECT_HAS_QUESTION(0.00)[]; DWL_DNSWL_NONE(0.00)[googlemail.com.dwl.dnswl.org : 127.0.5.0]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[googlemail.com:s=20161025]; RCVD_TLS_LAST(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; IP_SCORE(-2.83)[ip: (-9.28), ipnet: 2a00:1450::/32(-2.49), asn: 15169(-2.32), country: US(-0.06)]; RCVD_IN_DNSWL_NONE(0.00)[b.2.3.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.5.4.1.0.0.a.2.list.dnswl.org : 127.0.5.0] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 14:06:22 -0000 On Tue, 18 Jun 2019 14:35:00 +0200 Patrick M. Hausen wrote: > Hi all, > > > Am 18.06.2019 um 13:54 schrieb Robert Huff : > > > > If this is true - haven't checked personally - then it's a > > bug. (And a non-trivial one, the fact you're the first to report it > > notwithstanding.) > > Can you please open a bug report? > > I doubt it would qualify as a bug - possibly a bug in the docs, yes. > > Because the observed behaviour is definitely intentional. The flow of > statements in rc.firewall is: > > 0. flush all rules > 1. setup_loopback > 2. setup_ipv6_mandatory .. > So, yes, there will always be mandatory IPv6 rules in place. The rules are only added if IPv6 is built into the kernel. It's a long time since I've used ipfw, but IIRC the custom file is just a set of ipfw commands, so I presume it would be possible to delete any unwanted preset rules without having to modify rc.d/firewall. Alternatively setup_loopback() starts with rule 100, so there is also the option of adding custom rules that sort before the mandatory IPv6 rules and override them. From owner-freebsd-questions@freebsd.org Tue Jun 18 14:41:23 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 88F9915BF2F1 for ; Tue, 18 Jun 2019 14:41:23 +0000 (UTC) (envelope-from rwmaillists@googlemail.com) Received: from mail-wr1-x429.google.com (mail-wr1-x429.google.com [IPv6:2a00:1450:4864:20::429]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 84439807A0 for ; Tue, 18 Jun 2019 14:41:22 +0000 (UTC) (envelope-from rwmaillists@googlemail.com) Received: by mail-wr1-x429.google.com with SMTP id f9so14235782wre.12 for ; Tue, 18 Jun 2019 07:41:22 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:subject:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=QXhOpyx9vuZQYLRJvmYl8iV0MnWD3qhwE5LCWa8w8eo=; b=p82Uj6eGEEeS8S9oIFq6OiPAn4GfiJY/KTXEAUWFV9gsVPsnfRHeTqzQrJbdcWVLQv 02m4tAjwXx+voikN6jD5u9JMqPJSo3Jboa3NI7H1mFrKEmiqA7i3/YB5mGe8kgogJy6i dQTr2MFtPCrY1tBVO3z5h8TYPrk5S7a6DyQX2q6VIOzBvRDKbV1XPLLm498jIuN9sYR7 sSZNghMuQ5jiChN4POviHonQnK5NXhjdhzSFbmlRAPqx1M5Yw9wH3Q6iV3CQCXQb9jjA sn3gTv++v9LQAowv+pz/AekcTQsd86o4opWkzmgWDyQbb95eVkqmoG3QB/0EpaeNw+qW yV5g== X-Gm-Message-State: APjAAAWFhqljWOpjw/21Dlr+Qb9GMLzzAl3OXrWJE4YHoDCwNmFQpEKL 3HeDcnKPOz5Yp6gV7/f/vZnbeYi5StuD7A== X-Google-Smtp-Source: APXvYqyPySY7x9f5i7E3ryEMG5YwZpHq9Ji9eWgWIgplJ5UC2quSM5TiyiT7/X9lM+UFbmPZnJ31dg== X-Received: by 2002:adf:a509:: with SMTP id i9mr72690015wrb.269.1560868881337; Tue, 18 Jun 2019 07:41:21 -0700 (PDT) Received: from gumby.homeunix.com ([2.121.228.92]) by smtp.gmail.com with ESMTPSA id a7sm14400828wrs.94.2019.06.18.07.41.19 for (version=TLS1_3 cipher=AEAD-AES256-GCM-SHA384 bits=256/256); Tue, 18 Jun 2019 07:41:20 -0700 (PDT) Date: Tue, 18 Jun 2019 15:41:18 +0100 From: RW To: freebsd-questions@freebsd.org Subject: Re: Eliminating IPv6 (?) Message-ID: <20190618154118.45288c84@gumby.homeunix.com> In-Reply-To: <20190618150616.6ad64900@gumby.homeunix.com> References: <9AF5DF39-9B81-4270-B25C-D089C971E924@punkt.de> <19574.1560847186@segfault.tristatelogic.com> <23816.53518.998090.665606@jerusalem.litteratus.org> <20190618150616.6ad64900@gumby.homeunix.com> X-Mailer: Claws Mail 3.17.3 (GTK+ 2.24.32; amd64-portbld-freebsd12.0) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 84439807A0 X-Spamd-Bar: ------ X-Spamd-Result: default: False [-6.84 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36]; FREEMAIL_FROM(0.00)[googlemail.com]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; DKIM_TRACE(0.00)[googlemail.com:+]; DMARC_POLICY_ALLOW(-0.50)[googlemail.com,quarantine]; MX_GOOD(-0.01)[cached: alt3.gmail-smtp-in.l.google.com]; NEURAL_HAM_SHORT(-0.98)[-0.982,0]; RECEIVED_SPAMHAUS_PBL(0.00)[92.228.121.2.zen.spamhaus.org : 127.0.0.10]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[googlemail.com]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; SUBJECT_HAS_QUESTION(0.00)[]; DWL_DNSWL_NONE(0.00)[googlemail.com.dwl.dnswl.org : 127.0.5.0]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[googlemail.com:s=20161025]; RCVD_TLS_LAST(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; IP_SCORE(-2.85)[ip: (-9.36), ipnet: 2a00:1450::/32(-2.50), asn: 15169(-2.32), country: US(-0.06)]; RCVD_IN_DNSWL_NONE(0.00)[9.2.4.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.5.4.1.0.0.a.2.list.dnswl.org : 127.0.5.0] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 14:41:23 -0000 On Tue, 18 Jun 2019 15:06:16 +0100 RW wrote: > On Tue, 18 Jun 2019 14:35:00 +0200 > Patrick M. Hausen wrote: > > > Hi all, > > > > > Am 18.06.2019 um 13:54 schrieb Robert Huff : > > > > > > If this is true - haven't checked personally - then it's a > > > bug. (And a non-trivial one, the fact you're the first to report > > > it notwithstanding.) > > > Can you please open a bug report? > > > > I doubt it would qualify as a bug - possibly a bug in the docs, yes. > > > > Because the observed behaviour is definitely intentional. The flow > > of statements in rc.firewall is: > > > > 0. flush all rules > > 1. setup_loopback > > 2. setup_ipv6_mandatory > .. > > So, yes, there will always be mandatory IPv6 rules in place. > > The rules are only added if IPv6 is built into the kernel. > > It's a long time since I've used ipfw, but IIRC the custom file is > just a set of ipfw commands, so I presume it would be possible to > delete any unwanted preset rules without having to modify > rc.d/firewall. Looking at it again I see those rules are added in /etc/rc.firewall and the use of that script is optional in rc.d/ipfw, so there's no real problem in the first place. > Alternatively setup_loopback() starts with rule 100, so there is also > the option of adding custom rules that sort before the mandatory IPv6 > rules and override them. From owner-freebsd-questions@freebsd.org Tue Jun 18 15:26:13 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CF30415C0C73; Tue, 18 Jun 2019 15:26:13 +0000 (UTC) (envelope-from fjwcash@gmail.com) Received: from mail-lf1-x141.google.com (mail-lf1-x141.google.com [IPv6:2a00:1450:4864:20::141]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 5FEEE8266B; Tue, 18 Jun 2019 15:26:12 +0000 (UTC) (envelope-from fjwcash@gmail.com) Received: by mail-lf1-x141.google.com with SMTP id 136so9608787lfa.8; Tue, 18 Jun 2019 08:26:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=l1ZRoA1PmSY/fX0T+5mHaAnQKS2D8/1f86pu/Ry1JOM=; b=QrheR4QH/X6NCgFkaxYj18JXeve+xzj+KMgrL+Pv87Yoe750N4ktRSDKAeoKwjD/l/ HDkmrwVgnWvSj6ydgsN2tYjEm9/3hil52yjkaljjZSxhnPR36wEgbPBSQaexWmnvcWjk 9kjHX4b18Xm6MPl2YG7Q8vej5ul4INeF22BMYS2MPdy0CHnCLPtRAefmcNb1F4k2TM+x ZYYHExKIzFrj6kPs9bKVPubZ6Ogw3J/mPJpX8OoVCVJ/B8CMLHpZspmzSizR+YDiyrl1 HdhdkETsbxpeZlyUyNj3BmVG+QwdVMXrMFNS9dApv5RU9vyv8/16fD5ULiTKapPHwEaV pkYw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=l1ZRoA1PmSY/fX0T+5mHaAnQKS2D8/1f86pu/Ry1JOM=; b=HBtwr75lxaph59S/xpXP+JSpymZ9Zxa/iZEafD31snH1evhLDhdCjvFZB2FnJx8GRc +KoPZyrB6c/rUsNsRTgSHW7w2+gmZyZLmObMC7C8zvRD7yFMey+9LYj1a59jCJfH+qv2 sZG3oE83Qc630MwNmmaUj0GqwrySYFaoCoEXjAomf3do7NBeUy7Iu/nvIH2ZZmsAv3Mq Cz32YaJknwa+qhf13lvZNBHV9ZuTTpMzaoOkI5d8UUItPdeOO1Niw0++cWGtHuI1uQwt pK9iYpLlxjBQNixxipMEInUXS58NRQu+vytToUvXWiQYNOYsSfd0iA66v/7p3w06WlPv r0Rw== X-Gm-Message-State: APjAAAUglbvNO6REDEfC9JfIMF8vyfdu6bFO7Nelhs7Feep4azBkF4hD rUg2a9ZkuawV7cNJPmZqQHssUhRL/oDEc+gymEuaww== X-Google-Smtp-Source: APXvYqw3bClyuRpcA4zlFYuUb+EG78yIgXvr+eSntwvLgM/LEXtbZAF2KGMNPm6zknxqTgbW7nCG8Rl8kJ/zUecLheA= X-Received: by 2002:ac2:5b05:: with SMTP id v5mr60012883lfn.38.1560871570167; Tue, 18 Jun 2019 08:26:10 -0700 (PDT) MIME-Version: 1.0 References: <18748.1560843874@segfault.tristatelogic.com> In-Reply-To: <18748.1560843874@segfault.tristatelogic.com> From: Freddie Cash Date: Tue, 18 Jun 2019 08:25:58 -0700 Message-ID: Subject: Re: Eliminating IPv6 (?) To: "Ronald F. Guilmette" Cc: freebsd-net , FreeBSD Questions Mailing List X-Rspamd-Queue-Id: 5FEEE8266B X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20161025 header.b=QrheR4QH; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of fjwcash@gmail.com designates 2a00:1450:4864:20::141 as permitted sender) smtp.mailfrom=fjwcash@gmail.com X-Spamd-Result: default: False [-4.34 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-0.998,0]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20161025]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36]; FREEMAIL_FROM(0.00)[gmail.com]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; RCVD_TLS_LAST(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; RCVD_IN_DNSWL_NONE(0.00)[1.4.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.5.4.1.0.0.a.2.list.dnswl.org : 127.0.5.0]; MX_GOOD(-0.01)[cached: alt3.gmail-smtp-in.l.google.com]; IP_SCORE(-0.50)[ip: (2.38), ipnet: 2a00:1450::/32(-2.50), asn: 15169(-2.32), country: US(-0.06)]; NEURAL_HAM_SHORT(-0.84)[-0.836,0]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; RCVD_COUNT_TWO(0.00)[2]; SUBJECT_HAS_QUESTION(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com.dwl.dnswl.org : 127.0.5.0] Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 15:26:14 -0000 On Tue, Jun 18, 2019 at 12:45 AM Ronald F. Guilmette wrote: > In message , > Eugene Grosbein wrote: > > >18.06.2019 10:10, Ronald F. Guilmette wrote: > > > >> How can I turn off IPv6 entirely without rebuilding the kernel? > > > >You cannot. GENERIC kernel specifically enables IPv6 support and you need > to > >disable it at compile time. > >And if you do, you better rebuild the world too using WITHOUT_INET6=yes > in the > >/etc/src.conf > >or else some utilities compiled with INET6 by default will query kernel > >for IPv6-specific data (like routing entries) and complain that your > kernel does > >not know about it. > > > >World built WITHOUT_INET6 has no such rough edges. > > OK, so I obviously expressed myself badly. Let me try again. > For someone who doesn't want to be preached to about the benefits of IPv6, you certainly do a lot of preaching about not wanting IPv6. :) You've been given the tools to do exactly what you want: - comment out IPv6 support in the kernel config file - add WITHOUT_IPV6=yes to /etc/src.conf - rebuild the world and kernel Voila! A version of FreeBSD made especially for you, without any traces of IPv6. Does exactly what you want. Why the long diatribe asking for something else once you've been shown how to do what you want? -- Freddie Cash fjwcash@gmail.com From owner-freebsd-questions@freebsd.org Tue Jun 18 16:50:31 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1264315C2A79 for ; Tue, 18 Jun 2019 16:50:31 +0000 (UTC) (envelope-from johnl@iecc.com) Received: from gal.iecc.com (gal.iecc.com [IPv6:2001:470:1f07:1126:0:43:6f73:7461]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "gal.iecc.com", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 7DF8685216 for ; Tue, 18 Jun 2019 16:50:30 +0000 (UTC) (envelope-from johnl@iecc.com) Received: (qmail 67583 invoked from network); 18 Jun 2019 16:50:29 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:subject:mime-version:content-type:content-transfer-encoding; s=107fb.5d091655.k1906; i=johnl-iecc.com@submit.iecc.com; bh=owmSGEubJ/Jefx0P8IqKYO6WBVRRT9vdhktIHcSEDCc=; b=r+j1isViTgqdRWy7FL9nIJFOOUITAv/tYLKHeZecuSuUSxUDT8Zrj2N/qaSkvhLfy4R4T0wF9DeAJchX57Q9fzeuGJlBC8HorKkqwGP1anUnWasF8MD5T6Zm9wUF2tNqXEIw5mDQVBr9Nat41+vu2wH4hO+GGeKwoVSCO8amgxm6Xoy+10sj+L9RMJ3oX0pKQzXrZxWT7T+qD3n3AByady9Bcz+udiplPxXC49ZLWtgpLRvd4Sa9PrafXoXVsN/n Received: from ary.qy ([64.246.232.221]) by imap.iecc.com ([64.57.183.75]) with ESMTPSA (TLS1.2 ECDHE-RSA AES-256-GCM AEAD, johnl@iecc.com) via TCP; 18 Jun 2019 16:50:28 -0000 Received: by ary.qy (Postfix, from userid 501) id 83C662015F9118; Tue, 18 Jun 2019 12:50:27 -0400 (EDT) Date: 18 Jun 2019 12:50:27 -0400 Message-Id: <20190618165028.83C662015F9118@ary.qy> From: "John Levine" To: freebsd-questions@freebsd.org Subject: IPFW redirect to another port? Organization: Taughannock Networks X-Headerized: yes Mime-Version: 1.0 Content-type: text/plain; charset=utf-8 Content-transfer-encoding: 8bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 16:50:31 -0000 I would like to use ipfw to redirect incoming port 53 requests from a few IP addresses to a different port, so I can use a custom DNS server to answer them. I can figure out how to redirect their traffic to, say, port 5553, but the responses come from 5553 which of course doesn't work. Any suggestions about how to adjust the port numbers going both ways? It's fine if they screw up other traffic to those IPs. TIA. From owner-freebsd-questions@freebsd.org Tue Jun 18 17:56:12 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A238D15C432C for ; Tue, 18 Jun 2019 17:56:12 +0000 (UTC) (envelope-from karl@denninger.net) Received: from colo1.denninger.net (colo1.denninger.net [104.236.120.189]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 499C187804 for ; Tue, 18 Jun 2019 17:56:12 +0000 (UTC) (envelope-from karl@denninger.net) Received: from denninger.net (ip68-1-57-197.pn.at.cox.net [68.1.57.197]) by colo1.denninger.net (Postfix) with ESMTP id 3CD1A211080 for ; Tue, 18 Jun 2019 13:56:06 -0400 (EDT) Received: from [192.168.43.86] (unknown [172.56.21.82]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by denninger.net (Postfix) with ESMTPSA id 49704170DC7 for ; Tue, 18 Jun 2019 12:56:05 -0500 (CDT) Subject: Re: IPFW redirect to another port? To: freebsd-questions@freebsd.org References: <20190618165028.83C662015F9118@ary.qy> From: Karl Denninger Message-ID: Date: Tue, 18 Jun 2019 12:56:01 -0500 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.7.1 MIME-Version: 1.0 In-Reply-To: <20190618165028.83C662015F9118@ary.qy> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-512; boundary="------------ms070105020402020603050607" X-Rspamd-Queue-Id: 499C187804 X-Spamd-Bar: ------ Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-6.98 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; REPLY(-4.00)[]; NEURAL_HAM_SHORT(-0.98)[-0.983,0] X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 17:56:12 -0000 This is a cryptographically signed message in MIME format. --------------ms070105020402020603050607 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable On 6/18/2019 11:50 AM, John Levine wrote: > I would like to use ipfw to redirect incoming port 53 requests from a > few IP addresses to a different port, so I can use a custom DNS server > to answer them. I can figure out how to redirect their traffic to, > say, port 5553, but the responses come from 5553 which of course > doesn't work. > > Any suggestions about how to adjust the port numbers going both ways? = It's > fine if they screw up other traffic to those IPs. TIA. The easiest way to do this is likely with an in-kernel NAT entry with a=20 "redirect_port" stanza; that will "twist" packets going in both=20 directions.=C2=A0 The most-common use for this is to take something on th= e=20 external interface (e.g. 1.2.3.4:8080) and direct it at an internal host = on port 80 (e.g. 10.1.1.1:80); the "redirect_port" stanza allows for=20 both TCP and UDP redirection with both sides being translated. --=20 -- Karl Denninger /The Market-Ticker/ S/MIME Email accepted and preferred --------------ms070105020402020603050607 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgMFADCABgkqhkiG9w0BBwEAAKCC DdgwggagMIIEiKADAgECAhMA5EiKghDOXrvfxYxjITXYDdhIMA0GCSqGSIb3DQEBCwUAMIGL MQswCQYDVQQGEwJVUzEQMA4GA1UECAwHRmxvcmlkYTESMBAGA1UEBwwJTmljZXZpbGxlMRkw FwYDVQQKDBBDdWRhIFN5c3RlbXMgTExDMRgwFgYDVQQLDA9DdWRhIFN5c3RlbXMgQ0ExITAf BgNVBAMMGEN1ZGEgU3lzdGVtcyBMTEMgMjAxNyBDQTAeFw0xNzA4MTcxNjQyMTdaFw0yNzA4 MTUxNjQyMTdaMHsxCzAJBgNVBAYTAlVTMRAwDgYDVQQIDAdGbG9yaWRhMRkwFwYDVQQKDBBD dWRhIFN5c3RlbXMgTExDMRgwFgYDVQQLDA9DdWRhIFN5c3RlbXMgQ0ExJTAjBgNVBAMMHEN1 ZGEgU3lzdGVtcyBMTEMgMjAxNyBJbnQgQ0EwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK AoICAQC1aJotNUI+W4jP7xQDO8L/b4XiF4Rss9O0B+3vMH7Njk85fZ052QhZpMVlpaaO+sCI KqG3oNEbuOHzJB/NDJFnqh7ijBwhdWutdsq23Ux6TvxgakyMPpT6TRNEJzcBVQA0kpby1DVD 0EKSK/FrWWBiFmSxg7qUfmIq/mMzgE6epHktyRM3OGq3dbRdOUgfumWrqHXOrdJz06xE9NzY vc9toqZnd79FUtE/nSZVm1VS3Grq7RKV65onvX3QOW4W1ldEHwggaZxgWGNiR/D4eosAGFxn uYeWlKEC70c99Mp1giWux+7ur6hc2E+AaTGh+fGeijO5q40OGd+dNMgK8Es0nDRw81lRcl24 SWUEky9y8DArgIFlRd6d3ZYwgc1DMTWkTavx3ZpASp5TWih6yI8ACwboTvlUYeooMsPtNa9E 6UQ1nt7VEi5syjxnDltbEFoLYcXBcqhRhFETJe9CdenItAHAtOya3w5+fmC2j/xJz29og1KH YqWHlo3Kswi9G77an+zh6nWkMuHs+03DU8DaOEWzZEav3lVD4u76bKRDTbhh0bMAk4eXriGL h4MUoX3Imfcr6JoyheVrAdHDL/BixbMH1UUspeRuqQMQ5b2T6pabXP0oOB4FqldWiDgJBGRd zWLgCYG8wPGJGYgHibl5rFiI5Ix3FQncipc6SdUzOQIDAQABo4IBCjCCAQYwHQYDVR0OBBYE FF3AXsKnjdPND5+bxVECGKtc047PMIHABgNVHSMEgbgwgbWAFBu1oRhUMNEzjODolDka5k4Q EDBioYGRpIGOMIGLMQswCQYDVQQGEwJVUzEQMA4GA1UECAwHRmxvcmlkYTESMBAGA1UEBwwJ TmljZXZpbGxlMRkwFwYDVQQKDBBDdWRhIFN5c3RlbXMgTExDMRgwFgYDVQQLDA9DdWRhIFN5 c3RlbXMgQ0ExITAfBgNVBAMMGEN1ZGEgU3lzdGVtcyBMTEMgMjAxNyBDQYIJAKxAy1WBo2kY MBIGA1UdEwEB/wQIMAYBAf8CAQAwDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUAA4IC AQCB5686UCBVIT52jO3sz9pKuhxuC2npi8ZvoBwt/IH9piPA15/CGF1XeXUdu2qmhOjHkVLN gO7XB1G8CuluxofOIUce0aZGyB+vZ1ylHXlMeB0R82f5dz3/T7RQso55Y2Vog2Zb7PYTC5B9 oNy3ylsnNLzanYlcW3AAfzZcbxYuAdnuq0Im3EpGm8DoItUcf1pDezugKm/yKtNtY6sDyENj tExZ377cYA3IdIwqn1Mh4OAT/Rmh8au2rZAo0+bMYBy9C11Ex0hQ8zWcvPZBDn4v4RtO8g+K uQZQcJnO09LJNtw94W3d2mj4a7XrsKMnZKvm6W9BJIQ4Nmht4wXAtPQ1xA+QpxPTmsGAU0Cv HmqVC7XC3qxFhaOrD2dsvOAK6Sn3MEpH/YrfYCX7a7cz5zW3DsJQ6o3pYfnnQz+hnwLlz4MK 17NIA0WOdAF9IbtQqarf44+PEyUbKtz1r0KGeGLs+VGdd2FLA0e7yuzxJDYcaBTVwqaHhU2/ Fna/jGU7BhrKHtJbb/XlLeFJ24yvuiYKpYWQSSyZu1R/gvZjHeGb344jGBsZdCDrdxtQQcVA 6OxsMAPSUPMrlg9LWELEEYnVulQJerWxpUecGH92O06wwmPgykkz//UmmgjVSh7ErNvL0lUY UMfunYVO/O5hwhW+P4gviCXzBFeTtDZH259O7TCCBzAwggUYoAMCAQICEwCg0WvVwekjGFiO 62SckFwepz0wDQYJKoZIhvcNAQELBQAwezELMAkGA1UEBhMCVVMxEDAOBgNVBAgMB0Zsb3Jp ZGExGTAXBgNVBAoMEEN1ZGEgU3lzdGVtcyBMTEMxGDAWBgNVBAsMD0N1ZGEgU3lzdGVtcyBD QTElMCMGA1UEAwwcQ3VkYSBTeXN0ZW1zIExMQyAyMDE3IEludCBDQTAeFw0xNzA4MTcyMTIx MjBaFw0yMjA4MTYyMTIxMjBaMFcxCzAJBgNVBAYTAlVTMRAwDgYDVQQIDAdGbG9yaWRhMRkw FwYDVQQKDBBDdWRhIFN5c3RlbXMgTExDMRswGQYDVQQDDBJrYXJsQGRlbm5pbmdlci5uZXQw ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC+HVSyxVtJhy3Ohs+PAGRuO//Dha9A 16l5FPATr6wude9zjX5f2lrkRyU8vhCXTZW7WbvWZKpcZ8r0dtZmiK9uF58Ec6hhvfkxJzbg 96WHBw5Fumd5ahZzuCJDtCAWW8R7/KN+zwzQf1+B3MVLmbaXAFBuKzySKhKMcHbK3/wjUYTg y+3UK6v2SBrowvkUBC+jxNg3Wy12GsTXcUS/8FYIXgVVPgfZZrbJJb5HWOQpvvhILpPCD3xs YJFNKEPltXKWHT7Qtc2HNqikgNwj8oqOb+PeZGMiWapsatKm8mxuOOGOEBhAoTVTwUHlMNTg 6QUCJtuWFCK38qOCyk9Haj+86lUU8RG6FkRXWgMbNQm1mWREQhw3axgGLSntjjnznJr5vsvX SYR6c+XKLd5KQZcS6LL8FHYNjqVKHBYM+hDnrTZMqa20JLAF1YagutDiMRURU23iWS7bA9tM cXcqkclTSDtFtxahRifXRI7Epq2GSKuEXe/1Tfb5CE8QsbCpGsfSwv2tZ/SpqVG08MdRiXxN 5tmZiQWo15IyWoeKOXl/hKxA9KPuDHngXX022b1ly+5ZOZbxBAZZMod4y4b4FiRUhRI97r9l CxsP/EPHuuTIZ82BYhrhbtab8HuRo2ofne2TfAWY2BlA7ExM8XShMd9bRPZrNTokPQPUCWCg CdIATQIDAQABo4IBzzCCAcswPAYIKwYBBQUHAQEEMDAuMCwGCCsGAQUFBzABhiBodHRwOi8v b2NzcC5jdWRhc3lzdGVtcy5uZXQ6ODg4ODAJBgNVHRMEAjAAMBEGCWCGSAGG+EIBAQQEAwIF oDAOBgNVHQ8BAf8EBAMCBeAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMDMGCWCG SAGG+EIBDQQmFiRPcGVuU1NMIEdlbmVyYXRlZCBDbGllbnQgQ2VydGlmaWNhdGUwHQYDVR0O BBYEFLElmNWeVgsBPe7O8NiBzjvjYnpRMIHKBgNVHSMEgcIwgb+AFF3AXsKnjdPND5+bxVEC GKtc047PoYGRpIGOMIGLMQswCQYDVQQGEwJVUzEQMA4GA1UECAwHRmxvcmlkYTESMBAGA1UE BwwJTmljZXZpbGxlMRkwFwYDVQQKDBBDdWRhIFN5c3RlbXMgTExDMRgwFgYDVQQLDA9DdWRh IFN5c3RlbXMgQ0ExITAfBgNVBAMMGEN1ZGEgU3lzdGVtcyBMTEMgMjAxNyBDQYITAORIioIQ zl6738WMYyE12A3YSDAdBgNVHREEFjAUgRJrYXJsQGRlbm5pbmdlci5uZXQwDQYJKoZIhvcN AQELBQADggIBAJXboPFBMLMtaiUt4KEtJCXlHO/3ZzIUIw/eobWFMdhe7M4+0u3te0sr77QR dcPKR0UeHffvpth2Mb3h28WfN0FmJmLwJk+pOx4u6uO3O0E1jNXoKh8fVcL4KU79oEQyYkbu 2HwbXBU9HbldPOOZDnPLi0whi/sbFHdyd4/w/NmnPgzAsQNZ2BYT9uBNr+jZw4SsluQzXG1X lFL/qCBoi1N2mqKPIepfGYF6drbr1RnXEJJsuD+NILLooTNf7PMgHPZ4VSWQXLNeFfygoOOK FiO0qfxPKpDMA+FHa8yNjAJZAgdJX5Mm1kbqipvb+r/H1UAmrzGMbhmf1gConsT5f8KU4n3Q IM2sOpTQe7BoVKlQM/fpQi6aBzu67M1iF1WtODpa5QUPvj1etaK+R3eYBzi4DIbCIWst8MdA 1+fEeKJFvMEZQONpkCwrJ+tJEuGQmjoQZgK1HeloepF0WDcviiho5FlgtAij+iBPtwMuuLiL shAXA5afMX1hYM4l11JXntle12EQFP1r6wOUkpOdxceCcMVDEJBBCHW2ZmdEaXgAm1VU+fnQ qS/wNw/S0X3RJT1qjr5uVlp2Y0auG/eG0jy6TT0KzTJeR9tLSDXprYkN2l/Qf7/nT6Q03qyE QnnKiBXWAZXveafyU/zYa7t3PTWFQGgWoC4w6XqgPo4KV44OMYIFBzCCBQMCAQEwgZIwezEL MAkGA1UEBhMCVVMxEDAOBgNVBAgMB0Zsb3JpZGExGTAXBgNVBAoMEEN1ZGEgU3lzdGVtcyBM TEMxGDAWBgNVBAsMD0N1ZGEgU3lzdGVtcyBDQTElMCMGA1UEAwwcQ3VkYSBTeXN0ZW1zIExM QyAyMDE3IEludCBDQQITAKDRa9XB6SMYWI7rZJyQXB6nPTANBglghkgBZQMEAgMFAKCCAkUw GAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTkwNjE4MTc1NjAx WjBPBgkqhkiG9w0BCQQxQgRAg1HbRhUpc0TfuTaJNb7Jiz+DThxiJ8GLj4IcZFWcz41DMtYf XDZdhNkMxAK7l5nmsQQ+0T10PDPNIJp0RZZSMTBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFl AwQBKjALBglghkgBZQMEAQIwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3 DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMIGjBgkrBgEEAYI3EAQxgZUwgZIwezEL MAkGA1UEBhMCVVMxEDAOBgNVBAgMB0Zsb3JpZGExGTAXBgNVBAoMEEN1ZGEgU3lzdGVtcyBM TEMxGDAWBgNVBAsMD0N1ZGEgU3lzdGVtcyBDQTElMCMGA1UEAwwcQ3VkYSBTeXN0ZW1zIExM QyAyMDE3IEludCBDQQITAKDRa9XB6SMYWI7rZJyQXB6nPTCBpQYLKoZIhvcNAQkQAgsxgZWg gZIwezELMAkGA1UEBhMCVVMxEDAOBgNVBAgMB0Zsb3JpZGExGTAXBgNVBAoMEEN1ZGEgU3lz dGVtcyBMTEMxGDAWBgNVBAsMD0N1ZGEgU3lzdGVtcyBDQTElMCMGA1UEAwwcQ3VkYSBTeXN0 ZW1zIExMQyAyMDE3IEludCBDQQITAKDRa9XB6SMYWI7rZJyQXB6nPTANBgkqhkiG9w0BAQEF AASCAgBkHfohk4YUL2IrJ5IdlYwNoJrZkREFCmM64zntknEuwB4KAN+jObfzryYj7HMBLsNn 1KfO5Im0vmqqsWkaSgCKulh1oBcmAFPdvFCy6Qvh4DbcSE98rV1CUetGEO08qOqFe2gYgDwp yZxOS14Gllg0ry8oQR4Sm5FBCg4U/FiKtQKB1oXXpwz5MHqxrfKbEzSWRXgwWQ0QPi6sSHKy QU9XceHAN/StvzD7z2jNLJSohu6/sMkZpSIB2DdtuWGe6qcumPpeTcjPdBmyRzcCVgvjoLuX SJFkAEh6Np5eeIS54bGPLqOAsskFfmz48KtPkFkfWhbHfYvzcEsvGqC+SGbeKi6d3VBNLXTk HhWGFnch1+fKkrC4husB87oMXOxxO93Vn6eaQ0bWOoN9DiJAGJ/HXZOYUsLPb/OsaGZa+O7Z qMB3H0JySfwLfixYnSfFOYgP8vWth1R4bQ9aJVe9Z5pCKGiYYzToJcn57AwkiV5LQk7bkiA6 ucGC80lkWAbnPtx8/hbhv9RzMoFQFXjX59LMQcxaq2FMR5zC92INxZ5Y+oxxG5VnPRpikubr JP83CZIl2g8QjVA1aRQbH6iuw4oi9skEkZdvfYHtNZ9NdcITmMIzKZqLs5iE5WtVs087hPmX vX1BU3Ur3mNbGpSAW/DymQPiyePLpWZ+fWSWQ0fZ+AAAAAAAAA== --------------ms070105020402020603050607-- From owner-freebsd-questions@freebsd.org Tue Jun 18 18:59:47 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7510E15C58A0; Tue, 18 Jun 2019 18:59:47 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: from outgoing.tristatelogic.com (segfault.tristatelogic.com [69.62.255.118]) by mx1.freebsd.org (Postfix) with ESMTP id 8631489CD9; Tue, 18 Jun 2019 18:59:46 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: by segfault.tristatelogic.com (Postfix, from userid 1237) id 1DE1B4E668; Tue, 18 Jun 2019 11:59:45 -0700 (PDT) From: "Ronald F. Guilmette" To: freebsd-net@freebsd.org, freebsd-questions@freebsd.org Subject: Re: Eliminating IPv6 (?) In-Reply-To: <23816.53518.998090.665606@jerusalem.litteratus.org> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <23510.1560884384.1@segfault.tristatelogic.com> Date: Tue, 18 Jun 2019 11:59:45 -0700 Message-ID: <23511.1560884385@segfault.tristatelogic.com> X-Rspamd-Queue-Id: 8631489CD9 X-Spamd-Bar: ----- Authentication-Results: mx1.freebsd.org; spf=pass (mx1.freebsd.org: domain of rfg@tristatelogic.com designates 69.62.255.118 as permitted sender) smtp.mailfrom=rfg@tristatelogic.com X-Spamd-Result: default: False [-5.90 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; DMARC_NA(0.00)[tristatelogic.com]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; IP_SCORE(-2.77)[ip: (-7.28), ipnet: 69.62.128.0/17(-3.64), asn: 14051(-2.87), country: US(-0.06)]; MX_GOOD(-0.01)[cached: mx1.tristatelogic.com]; RCPT_COUNT_TWO(0.00)[2]; NEURAL_HAM_SHORT(-0.93)[-0.927,0]; RCVD_NO_TLS_LAST(0.10)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:14051, ipnet:69.62.128.0/17, country:US]; RCVD_COUNT_TWO(0.00)[2]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 18:59:47 -0000 In message <23816.53518.998090.665606@jerusalem.litteratus.org>, Robert Huff wrote: >> Actually, no, that's not how one is supposed to enable one's own set >> of ipfw ules. To do that, the Handbook (Sec. 30.4.1) says very clearly >> that one should do: >> >> firewall_enable="YES" >> firewall_type="path-to-my-rules-file" >> >> But I'm glad you brought it up. The funny thing is that even that >> doesn't work properly nowadays *or* like it used to in the past. > > If this is true - haven't checked personally - then it's a bug. >(And a non-trivial one, the fact you're the first to report it >notwithstanding.) > Can you please open a bug report? I aim to please. As requested: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=238694 Regards, rfg From owner-freebsd-questions@freebsd.org Tue Jun 18 19:17:23 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9CEFA15C5FCE for ; Tue, 18 Jun 2019 19:17:23 +0000 (UTC) (envelope-from kate.freeman@globaldigitalprozone.com) Received: from n1nlsmtp01.shr.prod.ams1.secureserver.net (n1nlsmtp01.shr.prod.ams1.secureserver.net [188.121.43.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "relay-hosting.secureserver.net", Issuer "Starfield Secure Certificate Authority - G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id BD7038A762 for ; Tue, 18 Jun 2019 19:17:22 +0000 (UTC) (envelope-from kate.freeman@globaldigitalprozone.com) Received: from n3plcpnl0293.prod.ams3.secureserver.net ([160.153.156.42]) by : HOSTING RELAY : with ESMTP id dJIIhBN0P7E3ddJIIhPFZN; Tue, 18 Jun 2019 11:57:22 -0700 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=globaldigitalprozone.com; s=default; h=Content-Type:MIME-Version:Message-ID :Date:Subject:To:From:Reply-To:Sender:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To: Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=DAbuesJPKbNM0A7j85crdCfQn+8xq15wj2T7PxLOTek=; b=NSqzPWZbj3Fxx3kI1taCtsb3ic 6om6EN89d9qYMBjeo9aJAUZF6XTXg/XxsUj4cCEHsY0SOHjKECL9HvokYlOL0tYUb9KMNp2qGY4y5 Oj5v3yyutJBqvq4s//IbzxMsD+tKLBHwcAfe4Wr0Kzey94KRugoJ9vrs7ZKOu+dPsJTAokiJXVQfY A+SY51CuF6PcqEQuJgWJuqHT3p2OlphNMV6yVgFXA4+ClkO7qcdyCyYy+Tx0Ht3Da/19YzO1vU1DE NGEuXyDqiF5pPA76NtDfsnv3/CBaDKOGY4w/ADvXU0wYQt7eoph1ipSETYHh+FSukFGRmQJ8PZ8v8 dnFVQiWA==; Received: from [104.223.93.39] (port=54046 helo=WS20) by n3plcpnl0293.prod.ams3.secureserver.net with esmtpa (Exim 4.92) (envelope-from ) id 1hdJIH-00ESfk-6s for freebsd-questions@freebsd.org; Tue, 18 Jun 2019 11:57:22 -0700 Reply-To: From: "Kate Freeman" To: Subject: Nagios Users List Date: Wed, 19 Jun 2019 00:26:26 +0530 Message-ID: MIME-Version: 1.0 X-Priority: 1 (Highest) X-MSMail-Priority: High X-Mailer: Microsoft Outlook 15.0 Thread-Index: AdUmB4PPjEQqVdElRG+RVYjN1FiGCw== Importance: High Content-Language: en-us X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - n3plcpnl0293.prod.ams3.secureserver.net X-AntiAbuse: Original Domain - freebsd.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - globaldigitalprozone.com X-Get-Message-Sender-Via: n3plcpnl0293.prod.ams3.secureserver.net: authenticated_id: kate.freeman@globaldigitalprozone.com X-Authenticated-Sender: n3plcpnl0293.prod.ams3.secureserver.net: kate.freeman@globaldigitalprozone.com X-Source: X-Source-Args: X-Source-Dir: X-CMAE-Envelope: MS4wfLzZqz+RVgtC9okeCzc3I81WBeQ+TZAPYgpgX2QBdEQLdVxg7dVVo/5UfziiSTKzwCxA2ZQGtsGKnHvznxZftkHG6xiZ/x27Cnz4pNFvMkqps0Dd5+0R YiefpG+vbxqzM4VFeX5LpCMy5r8QrZ5nROZqLo+9SDxZm5po/qK12zsdP5e07uWyYo0sAEfER9C3/IUddkKxkWVgwEOWcgu1EUubzKT5gUdHrUjLettPSMp4 sJrPvjYQ/n1e9VC4884GwQ== X-Rspamd-Queue-Id: BD7038A762 X-Spamd-Bar: +++ Authentication-Results: mx1.freebsd.org; dkim=none (invalid DKIM record) header.d=globaldigitalprozone.com header.s=default header.b=NSqzPWZb X-Spamd-Result: default: False [3.27 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; HAS_REPLYTO(0.00)[kate.freeman@globaldigitalprozone.com]; MX_INVALID(0.50)[cached]; HAS_X_SOURCE(0.00)[]; TO_DN_NONE(0.00)[]; REPLYTO_ADDR_EQ_FROM(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; DKIM_TRACE(0.00)[globaldigitalprozone.com:~]; HAS_X_ANTIABUSE(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; RCVD_TLS_LAST(0.00)[]; MIME_TRACE(0.00)[0:+,1:+]; HAS_X_PRIO_ONE(0.00)[1]; ASN(0.00)[asn:26496, ipnet:188.121.40.0/22, country:US]; MID_RHS_MATCH_FROM(0.00)[]; HAS_X_AS(0.00)[kate.freeman@globaldigitalprozone.com]; ARC_NA(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_SPAM_SHORT(0.85)[0.847,0]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; DMARC_NA(0.00)[globaldigitalprozone.com]; NEURAL_SPAM_MEDIUM(0.82)[0.824,0]; RCPT_COUNT_ONE(0.00)[1]; IP_SCORE(0.29)[ip: (0.78), ipnet: 188.121.40.0/22(0.51), asn: 26496(0.21), country: US(-0.06)]; NEURAL_SPAM_LONG(0.91)[0.905,0]; RCVD_IN_DNSWL_NONE(0.00)[201.43.121.188.list.dnswl.org : 127.0.5.0]; HAS_X_GMSV(0.00)[kate.freeman@globaldigitalprozone.com]; R_DKIM_PERMFAIL(0.00)[globaldigitalprozone.com:s=default]; R_SPF_NA(0.00)[] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 19:17:23 -0000 Hi, Would you be interested in acquiring Contacts List of Nagios Users List? Let me know your interest so that I can get back to you with counts and pricing and few samples for your review. Await your response! Regards, Kate freeman Sr. Marketing Analyst If you do not wish to receive further emails, please respond with "Leave Out" or "Unsubscribe" in subject line. From owner-freebsd-questions@freebsd.org Tue Jun 18 19:26:02 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C789E15C65EB; Tue, 18 Jun 2019 19:26:02 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: from outgoing.tristatelogic.com (segfault.tristatelogic.com [69.62.255.118]) by mx1.freebsd.org (Postfix) with ESMTP id 038FB8AD77; Tue, 18 Jun 2019 19:26:01 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: by segfault.tristatelogic.com (Postfix, from userid 1237) id A307E4E669; Tue, 18 Jun 2019 12:26:00 -0700 (PDT) From: "Ronald F. Guilmette" cc: FreeBSD Net , Mailinglists FreeBSD Subject: Re: Eliminating IPv6 (?) In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <23657.1560885960.1@segfault.tristatelogic.com> Content-Transfer-Encoding: quoted-printable Date: Tue, 18 Jun 2019 12:26:00 -0700 Message-ID: <23658.1560885960@segfault.tristatelogic.com> X-Rspamd-Queue-Id: 038FB8AD77 X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; spf=pass (mx1.freebsd.org: domain of rfg@tristatelogic.com designates 69.62.255.118 as permitted sender) smtp.mailfrom=rfg@tristatelogic.com X-Spamd-Result: default: False [-3.03 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.99)[-0.987,0]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[tristatelogic.com]; NEURAL_HAM_LONG(-1.00)[-0.997,0]; IP_SCORE(-2.73)[ip: (-7.17), ipnet: 69.62.128.0/17(-3.59), asn: 14051(-2.83), country: US(-0.06)]; TO_DN_ALL(0.00)[]; MX_GOOD(-0.01)[cached: mx1.tristatelogic.com]; RCPT_COUNT_TWO(0.00)[2]; MISSING_TO(2.00)[]; NEURAL_HAM_SHORT(-0.11)[-0.113,0]; RCVD_NO_TLS_LAST(0.10)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:14051, ipnet:69.62.128.0/17, country:US]; RCVD_COUNT_TWO(0.00)[2]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 19:26:03 -0000 In message Andreas Nilsson wrote: >I have no ipv6 rules in ipfw when configuring rc.conf as: > >firewall_enable=3D"YES" >firewall_script=3D"/etc/ipfw.rules". I don't know what to say, other than that this was not my experience. When I first noiced that /etc/rc.firewall was injecting rules into ipfw, prior to my own set of explicitly specified rules, I went into the script and edited it to try to cause it to stop doing at least some of this (unwanted) behavior. For example, please note the lines in the following function which have been commented out: setup_loopback() { ############ # Only in rare cases do you want to change these rules # ${fwcmd} add 100 pass all from any to any via lo0 # ${fwcmd} add 200 deny all from any to 127.0.0.0/8 # ${fwcmd} add 300 deny ip from 127.0.0.0/8 to any # if [ $ipv6_available -eq 0 ]; then # ${fwcmd} add 400 deny all from any to ::1 # ${fwcmd} add 500 deny all from ::1 to any # fi } Commenting out the lines shown above (as commented out) *did* make a difference. To be crystal clear, I found that even when I was explicitly requesting that my own custom rule set be used, as per the instructions in the Handbook (and as I have been doing already for lo these many years) I found that "ipfw -a list" was showing that I was getting several additional rules (which I personally DID NOT specify in my rules file) and these additional rules were appearing in the output of "ipfw -a list" = AHEAD OF my own explicitly specified rules. I traced this down and quickly saw that these additional rules could only have come from the (now commented out) lines shown above. After I had commented those lines out of the /etc/rc.firewall script an rebooted the system, the rules in question no longer were visible in the output of "ipfw -a list". I also made one other local change to the /etc/rc.firewall script, which i= s illustrated by the following (locally revised) code snippet: afexists inet6 #ipv6_available=3D$? # disable creation of any/all IPv6 rules ipv6_available=3D1 I can't remember anymore now if this had the desired effect or not. It certainly didn't seem to hurt anything, at least from my personal perspective. (But please remember, I am striving to -not- use IPv6 at all.) Even with these multiple changes, the /etc/rc.firewall script is *still* injecting its own "pass all from any to any via lo0" rule ahead of my own explicitly specified rules. (See the setup_loopback() function above.= ) I do not have any objection to that perfectly sensible rule, so I did not comment out the specific line of /etc/rc.firewall where that is added, ahe= ad of all user-specified rules. But the point remains that /etc/rc.firewall *is* injecting its own rules, even when the user has followed the Handbook= 's prescription for how to take complete control of his/her own IPFW rule writing. Regards, rfg From owner-freebsd-questions@freebsd.org Tue Jun 18 19:32:54 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C99E015C6A5D; Tue, 18 Jun 2019 19:32:53 +0000 (UTC) (envelope-from andrnils@gmail.com) Received: from mail-lj1-x242.google.com (mail-lj1-x242.google.com [IPv6:2a00:1450:4864:20::242]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 7E9C38B316; Tue, 18 Jun 2019 19:32:52 +0000 (UTC) (envelope-from andrnils@gmail.com) Received: by mail-lj1-x242.google.com with SMTP id h10so774795ljg.0; Tue, 18 Jun 2019 12:32:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=M0sFPlfv4Z/VGkh7qnp/sGyFrAW8U9le6yEm2UTAdvg=; b=PlvrXfqmghn2I7sgCSrr35t5E1na7U02Z8nSiHxZ7vavFOOjZJWr3Tg3vkInHb12fY Cv4OPkA9KukTrOSkLADvgU4a2mkBavHpYX/1a/tFdkPW7chyTGKsltlzYeuHaPBjR/LY cxaZh5uu1dAinV4BvtpRCvrGnolnS+3KZYed9nUcW6aR51vXE6WbYiUGZI8SUtuR7+ok 2jNdQqn+nYnqx8mJJW1zU4F3Wn8lI6os461yZQAAtpomdNu+b7RyIML0py+HYNi4Qs6h Xyn3bPyRn4ePYkRl17qU7PyNkG8S0ljR7vFVafcgK3CWeSKGc6ENn7n3t2KQiwbxG7du L/Yw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=M0sFPlfv4Z/VGkh7qnp/sGyFrAW8U9le6yEm2UTAdvg=; b=WWlZwkUZM86VoOIOVWk2G0sJb4cxaA9IiWXVj2x4YW50s8ckaTLgQq0GbqHp+SaQmt RtPFq38k3cBIy6nJCHtMKCsHH6kodAJ8Z4cCzpicaPrESBH36FZZkD/6XFL+ePLPL3GN 0k5VnHa15e7ztKrROIbfFs6Yx0F+/0tW1aSFboiLDrPMsIf9cs7ekpTJbWE7h3m0nfP4 ELepgdb2IwEigZ7WZGJJNYkYHojIrwHiVR4TV0OpOBzfg4RBhrhLWsUZvsBan4gwoWTS UXM6EhtEpmZCCKvAyG+ET8m3uXieRiur8r8F9FoeTA2JjQI2yfVNhvBVTHVxNZQVLXi1 CbxQ== X-Gm-Message-State: APjAAAUvchaCzKc+uX2MuTsw+o3KBMNuIsUpR0CSJZIo2YhOFa80bH/Z ptkXTChDcgKDk9ollQDdnpjoqdvfyRWv9RUzV1k= X-Google-Smtp-Source: APXvYqwZGuVoA9jBwOwTDM2yQoGKJsCahU9VemUp1UAzlTPV8u5GE+bLKfWFdMl3NVTTMBcj5Vf6xO0hVEV8zcYLI5c= X-Received: by 2002:a2e:124b:: with SMTP id t72mr55885055lje.143.1560886371001; Tue, 18 Jun 2019 12:32:51 -0700 (PDT) MIME-Version: 1.0 References: <23658.1560885960@segfault.tristatelogic.com> In-Reply-To: <23658.1560885960@segfault.tristatelogic.com> From: Andreas Nilsson Date: Tue, 18 Jun 2019 21:32:39 +0200 Message-ID: Subject: Re: Eliminating IPv6 (?) To: "Ronald F. Guilmette" Cc: FreeBSD Net , Mailinglists FreeBSD X-Rspamd-Queue-Id: 7E9C38B316 X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20161025 header.b=PlvrXfqm; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of andrnils@gmail.com designates 2a00:1450:4864:20::242 as permitted sender) smtp.mailfrom=andrnils@gmail.com X-Spamd-Result: default: False [-3.14 / 15.00]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36]; FREEMAIL_FROM(0.00)[gmail.com]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; MX_GOOD(-0.01)[cached: alt3.gmail-smtp-in.l.google.com]; NEURAL_HAM_SHORT(-0.75)[-0.747,0]; FROM_EQ_ENVFROM(0.00)[]; RCVD_TLS_LAST(0.00)[]; MIME_TRACE(0.00)[0:+,1:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; SUBJECT_HAS_QUESTION(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com.dwl.dnswl.org : 127.0.5.0]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-0.997,0]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20161025]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; IP_SCORE(-0.39)[ip: (2.93), ipnet: 2a00:1450::/32(-2.49), asn: 15169(-2.32), country: US(-0.06)]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[2.4.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.5.4.1.0.0.a.2.list.dnswl.org : 127.0.5.0]; HTTP_TO_IP(1.00)[]; RCVD_COUNT_TWO(0.00)[2] Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 19:32:54 -0000 On Tue, Jun 18, 2019 at 9:27 PM Ronald F. Guilmette wrote: > In message P6ukXfA4ZThTRZWNXtpZi3BA@mail.gmail.com> > Andreas Nilsson wrote: > > >I have no ipv6 rules in ipfw when configuring rc.conf as: > > > >firewall_enable="YES" > >firewall_script="/etc/ipfw.rules". > > I don't know what to say, other than that this was not my experience. > > When I first noiced that /etc/rc.firewall was injecting rules into ipfw, > prior to my own set of explicitly specified rules, I went into the > script and edited it to try to cause it to stop doing at least some > of this (unwanted) behavior. For example, please note the lines in > the following function which have been commented out: > > setup_loopback() { > ############ > # Only in rare cases do you want to change these rules > # > ${fwcmd} add 100 pass all from any to any via lo0 > # ${fwcmd} add 200 deny all from any to 127.0.0.0/8 > # ${fwcmd} add 300 deny ip from 127.0.0.0/8 to any > # if [ $ipv6_available -eq 0 ]; then > # ${fwcmd} add 400 deny all from any to ::1 > # ${fwcmd} add 500 deny all from ::1 to any > # fi > } > > Commenting out the lines shown above (as commented out) *did* make a > difference. > > To be crystal clear, I found that even when I was explicitly requesting > that my own custom rule set be used, as per the instructions in the > Handbook (and as I have been doing already for lo these many years) > I found that "ipfw -a list" was showing that I was getting several > additional rules (which I personally DID NOT specify in my rules file) > and these additional rules were appearing in the output of "ipfw -a list" > AHEAD OF my own explicitly specified rules. I traced this down and > quickly saw that these additional rules could only have come from the > (now commented out) lines shown above. After I had commented those > lines out of the /etc/rc.firewall script an rebooted the system, the > rules in question no longer were visible in the output of "ipfw -a list". > > I also made one other local change to the /etc/rc.firewall script, which is > illustrated by the following (locally revised) code snippet: > But why are you even running rc.firewall if it does not do what you want? Just set firewall_script="/path/to/script" and your good to go, no ipv6 anywhere to be found. > > afexists inet6 > #ipv6_available=$? > # disable creation of any/all IPv6 rules > ipv6_available=1 > > I can't remember anymore now if this had the desired effect or not. It > certainly didn't seem to hurt anything, at least from my personal > perspective. (But please remember, I am striving to -not- use IPv6 > at all.) > > Even with these multiple changes, the /etc/rc.firewall script is *still* > injecting its own "pass all from any to any via lo0" rule ahead of my > own explicitly specified rules. (See the setup_loopback() function above.) > > I do not have any objection to that perfectly sensible rule, so I did not > comment out the specific line of /etc/rc.firewall where that is added, > ahead > of all user-specified rules. But the point remains that /etc/rc.firewall > *is* injecting its own rules, even when the user has followed the > Handbook's > prescription for how to take complete control of his/her own IPFW rule > writing. > > > Regards, > rfg > _______________________________________________ > freebsd-net@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" > From owner-freebsd-questions@freebsd.org Tue Jun 18 20:13:53 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D6EAB15C7719 for ; Tue, 18 Jun 2019 20:13:52 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: from outgoing.tristatelogic.com (segfault.tristatelogic.com [69.62.255.118]) by mx1.freebsd.org (Postfix) with ESMTP id 959DC8C77D for ; Tue, 18 Jun 2019 20:13:50 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: by segfault.tristatelogic.com (Postfix, from userid 1237) id B3CFB4E668; Tue, 18 Jun 2019 13:13:48 -0700 (PDT) From: "Ronald F. Guilmette" To: freebsd-questions@freebsd.org Subject: Re: Eliminating IPv6 (?) In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <23904.1560888828.1@segfault.tristatelogic.com> Date: Tue, 18 Jun 2019 13:13:48 -0700 Message-ID: <23905.1560888828@segfault.tristatelogic.com> X-Rspamd-Queue-Id: 959DC8C77D X-Spamd-Bar: ----- Authentication-Results: mx1.freebsd.org; spf=pass (mx1.freebsd.org: domain of rfg@tristatelogic.com designates 69.62.255.118 as permitted sender) smtp.mailfrom=rfg@tristatelogic.com X-Spamd-Result: default: False [-5.90 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; DMARC_NA(0.00)[tristatelogic.com]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; IP_SCORE(-2.75)[ip: (-7.23), ipnet: 69.62.128.0/17(-3.61), asn: 14051(-2.85), country: US(-0.06)]; MX_GOOD(-0.01)[cached: mx1.tristatelogic.com]; NEURAL_HAM_SHORT(-0.95)[-0.945,0]; RCVD_NO_TLS_LAST(0.10)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:14051, ipnet:69.62.128.0/17, country:US]; RCVD_COUNT_TWO(0.00)[2]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 20:13:53 -0000 In message , "Patrick M. Hausen" wrote: >I doubt it would qualify as a bug - possibly a bug in the docs, yes. > >Because the observed behaviour is definitely intentional. The flow of >statements in rc.firewall is: > >0. flush all rules >1. setup_loopback >2. setup_ipv6_mandatory > >and no configuration is going to skip that... This behavior is unambiguously -different- from prior FreeBSD releases. As such it violates the design principal of "least surprise", at least for users such as myself who are "upgrading" from some prior release. Whether that violation of that design principal constitutes a "bug" or not is clearly in the eye of the beholder. >So, yes, there will always be mandatory IPv6 rules in place... I cannot comment on setup_ipv6_mandatory since I am ernestly endevoring entirely avoid even thinking about IPv6. Regarding the setup_loopback() function within /etc/rc.firewall however, I do question the wisdom of the following two lines, in particular: ${fwcmd} add 200 deny all from any to 127.0.0.0/8 ${fwcmd} add 300 deny ip from 127.0.0.0/8 to any I'm sure that a case could be made for the proposition that pretty much any kind of DENY rule may, in some contexts and circumstances, provide some additional protection against something. I have to say however that my limited networking knowledge is very much "old school" and when I was coming up, it was considered quite routine and normal to check to see if a given daemon (e.g. Sendmail or Apache) was or was not running on the local server by simply telnet'ing to 127.0.0.1 and the relevant port number. The above two lines appear to me to eschew that longstanding and traditional practice, for "security" reasons that are none too obvious, to me at least. My point is that unless and until someone persuades me that the (admittedly small) inconveniences created by the above two rules are actually buying me -anything- in the way of enhanced security, I, for one, do not and will desire to have these rules added to my own own (finely tuned?) IPFW rules, whether I like it or not. I prefer instead to have the traditional complete control over rules which, in prior FreeBSD releases, was afforded by explicit speification of a local IPFW rules list and one which would not be overridden or "enhanced" based on anyone's judgement other than my own. And as long as we are on the subject of the judgements made within the current (12.0-RELEASE) /etc/rc.firewall script, let me say also that, while doing my recent "upgrade" I asked on the freebsd-ipfw mailing list for some clarification as to the exact semantics of, and the differences between, the "client" and "simple" options, as presented in Section 30.4.1 of the Handbook. I was basically blown off and told to go and read the source of /etc/rc.firewall, which I then did. Subsequent to that, I tried using the "simple" option, hoping that this might in some ways be superior (i.e. more secure) than continuing to use the set of ad hoc and personally hand-written IPFW rules that I had been using for years on my old system. I abandoned this attempt very quickly however, as soon as I realized that the pre-canned "simple" option did not allow me to even ping the other devices on my own private RFC 1918 local network, e.g. to see which ones were up and which ones wern't. Here again, somebody somewhere apparently decided that the ability to ping other devices on the local RFC 1918 network represented a security risk. If that's actually true, then all I can say is that I personally didn't get the memo. It all comes back to configurability and personal choice. I elect to use my own set of IPFW rules. And having made that choice, I neither expect nor want that choice fiddled with. (It *wasn't* fiddled with in many prior releases.) If I want someone to hold my little hand, make decisions for me, behind my back and without my consent or knowledge, then I'll use some operating system created in Redmond, Washington. Regards, rfg From owner-freebsd-questions@freebsd.org Tue Jun 18 20:57:40 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0176F15C8281; Tue, 18 Jun 2019 20:57:40 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: from outgoing.tristatelogic.com (segfault.tristatelogic.com [69.62.255.118]) by mx1.freebsd.org (Postfix) with ESMTP id A374B8D7C4; Tue, 18 Jun 2019 20:57:38 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: by segfault.tristatelogic.com (Postfix, from userid 1237) id AEC134E668; Tue, 18 Jun 2019 13:57:31 -0700 (PDT) From: "Ronald F. Guilmette" To: freebsd-net , FreeBSD Questions Mailing List Subject: Re: Eliminating IPv6 (?) In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <24169.1560891451.1@segfault.tristatelogic.com> Content-Transfer-Encoding: quoted-printable Date: Tue, 18 Jun 2019 13:57:31 -0700 Message-ID: <24170.1560891451@segfault.tristatelogic.com> X-Rspamd-Queue-Id: A374B8D7C4 X-Spamd-Bar: ----- Authentication-Results: mx1.freebsd.org; spf=pass (mx1.freebsd.org: domain of rfg@tristatelogic.com designates 69.62.255.118 as permitted sender) smtp.mailfrom=rfg@tristatelogic.com X-Spamd-Result: default: False [-5.94 / 15.00]; R_SPF_ALLOW(-0.20)[+mx]; TO_DN_ALL(0.00)[]; MX_GOOD(-0.01)[mx1.tristatelogic.com]; RCPT_COUNT_TWO(0.00)[2]; NEURAL_HAM_SHORT(-0.96)[-0.962,0]; RCVD_NO_TLS_LAST(0.10)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:14051, ipnet:69.62.128.0/17, country:US]; IP_SCORE(-2.77)[ip: (-7.28), ipnet: 69.62.128.0/17(-3.64), asn: 14051(-2.87), country: US(-0.06)]; SUBJECT_HAS_QUESTION(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[tristatelogic.com]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 20:57:40 -0000 In message Freddie Cash wrote: >For someone who doesn't want to be preached to about the benefits of IPv6= , >you certainly do a lot of preaching about not wanting IPv6. :) Guilty as charged. >You've been given the tools to do exactly what you want: > - comment out IPv6 support in the kernel config file > - add WITHOUT_IPV6=3Dyes to /etc/src.conf > - rebuild the world and kernel > >Voila! A version of FreeBSD made especially for you, without any traces = of >IPv6. Does exactly what you want. Why the long diatribe asking for >something else once you've been shown how to do what you want? Rebuild kernel+world is not exactly a quick solution. And god only knows how much will break once I've done that. How many othe= r people have tested -all- of the resulting binaries, seriously, on actual production systems? (I may be the first one ever, at least for 12.0.) But this is all besides the point anyway. I am now resigned to my fate, and I am already up to the fifth stage of grief with respect to this issue= . https://en.wikipedia.org/wiki/K%C3%BCbler-Ross_model Regards, rfg From owner-freebsd-questions@freebsd.org Tue Jun 18 21:27:53 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7575815C908F; Tue, 18 Jun 2019 21:27:53 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: from outgoing.tristatelogic.com (segfault.tristatelogic.com [69.62.255.118]) by mx1.freebsd.org (Postfix) with ESMTP id 933638E9D3; Tue, 18 Jun 2019 21:27:52 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: by segfault.tristatelogic.com (Postfix, from userid 1237) id 89C064E668; Tue, 18 Jun 2019 14:27:51 -0700 (PDT) From: "Ronald F. Guilmette" cc: FreeBSD Net , Mailinglists FreeBSD Subject: Re: Eliminating IPv6 (?) In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <24392.1560893271.1@segfault.tristatelogic.com> Content-Transfer-Encoding: quoted-printable Date: Tue, 18 Jun 2019 14:27:51 -0700 Message-ID: <24393.1560893271@segfault.tristatelogic.com> X-Rspamd-Queue-Id: 933638E9D3 X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; spf=pass (mx1.freebsd.org: domain of rfg@tristatelogic.com designates 69.62.255.118 as permitted sender) smtp.mailfrom=rfg@tristatelogic.com X-Spamd-Result: default: False [-3.86 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.99)[-0.993,0]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[tristatelogic.com]; NEURAL_HAM_LONG(-1.00)[-0.999,0]; IP_SCORE(-2.75)[ip: (-7.23), ipnet: 69.62.128.0/17(-3.62), asn: 14051(-2.86), country: US(-0.06)]; TO_DN_ALL(0.00)[]; MX_GOOD(-0.01)[cached: mx1.tristatelogic.com]; RCPT_COUNT_TWO(0.00)[2]; MISSING_TO(2.00)[]; NEURAL_HAM_SHORT(-0.91)[-0.909,0]; RCVD_NO_TLS_LAST(0.10)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:14051, ipnet:69.62.128.0/17, country:US]; RCVD_COUNT_TWO(0.00)[2]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 21:27:53 -0000 In message Andreas Nilsson wrote: >But why are you even running rc.firewall if it does not do what you want? You are asking me the very question that *I* have been asking myself since my "upgrade" to 12.0. Why is /etc/rc.firewall even being executed? I never explicitly asked for that, but that seems to just be a by-product of how things are arranged these days.... a by-product that I have no direct control over. >Just set firewall_script=3D"/path/to/script" and your good to go, no ipv6 >anywhere to be found. That is *not* what the Handbook says. Please read it. https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls-ipf= w.html The way that I am reading section 30.4.1 is that it is telling the user to put BOTH of these things into /etc/rc.conf: firewall_enable=3D"YES" firewall_type=3D"path-to-my-rules-file" And indeed, that is -exactly- what I have done on my prior FreeBSD systems= ... enable *and* configure. One or the other of those /etc/rc.conf lines nowadays apparently triggers /etc/rc.firewall to run. I never explicitly asked for that to run, but it did anyway. I am just going with the flow. Regards, rfg From owner-freebsd-questions@freebsd.org Tue Jun 18 21:34:35 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2FFD115C9498; Tue, 18 Jun 2019 21:34:35 +0000 (UTC) (envelope-from grarpamp@gmail.com) Received: from mail-io1-xd42.google.com (mail-io1-xd42.google.com [IPv6:2607:f8b0:4864:20::d42]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id F04DD8F014; Tue, 18 Jun 2019 21:34:33 +0000 (UTC) (envelope-from grarpamp@gmail.com) Received: by mail-io1-xd42.google.com with SMTP id e5so33397490iok.4; Tue, 18 Jun 2019 14:34:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to:cc; bh=rqxBbzNIi8oXMvlT+yCrGcttlT1MewHhJcWKBIpIQK0=; b=P9EcMoqOE8ECeLmLt/XEOAxGK7TqAPKfskUjPsSg+GHImuL48MSKhIM/AknwqNqSK0 LKmFHd+BlEcPgLfKWEHbqomN84vefvq3KQSt5tQM6X7Aezy8u+ISCpOkn6C0+cMTowSo ojuqG/RiX5+rrwjmN+LwKVoTJlWBUKqGeYEH8stAPQNv6z2VyTWv/lWhhOvTGuQQlxtu VRJkf3SzaChmNKwe+oxIRFu/8Q2aWATGIKAxJFfQAMYgdUfR6o71Har8LTMDYD5ljv+F gOWQbajsVC2c4v6rxQCzY7NZti+2os6D9866aqKtbxlU+C/sJobw//tds+aLbHYYM7RT 2thQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=rqxBbzNIi8oXMvlT+yCrGcttlT1MewHhJcWKBIpIQK0=; b=YpNt355YQyUBScj6Jg9Jqgms5mGqaClm59YWLtABCIh9MSnW93NLCVtZKLagn5qJ/V 0C7DCGj1NmS9oCEPCsxUSx1whx0q8wlJQskfLYOAsVX9k0Q3dS8o+2UQWG8jrE5AqHdU aHR5ZJFjKLkwS+sjI9/PxDiAqmcV1pPoNlaV261b/NA7FMKdqIPAAuh9z0PAzc/sLuYv xf+SSR9iJJhyEZGqo0DMQTLpMuxgGjY2qaqV6m2gE4IOUyveaYoXFv0Hq8rgft/kPct/ bkGuAp8cIS3djzeUBDsny0J+y4gjMwOmD/IzcPv9UyyLZcNXJPRtBaS6w239pOFdSlY3 b8gw== X-Gm-Message-State: APjAAAUAzYvBabT1i7wi9+/eXesMXX2+vEFc0Z3+cbcQ+XtES9m3YjOg +6IZHbOnl0Jpzg++2Itl0+0UBdWdCtYxVdAgpmAX9qY/ X-Google-Smtp-Source: APXvYqxzXBJN3g5w2zgktjEXEfj7zojqNqcbT3dEkK9rReDa5INhW8axUvHCqV3SPiw7Or5o5ovaRj17qV/GKUnoE+A= X-Received: by 2002:a02:7121:: with SMTP id n33mr7299908jac.19.1560893673080; Tue, 18 Jun 2019 14:34:33 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a02:212a:0:0:0:0:0 with HTTP; Tue, 18 Jun 2019 14:34:32 -0700 (PDT) From: grarpamp Date: Tue, 18 Jun 2019 17:34:32 -0400 Message-ID: Subject: CVE-2019-5599 SACK Slowness (FreeBSD 12 using the RACK TCP Stack) To: freebsd-security@freebsd.org Cc: freebsd-questions@freebsd.org, security-report@netflix.com Content-Type: text/plain; charset="UTF-8" X-Rspamd-Queue-Id: F04DD8F014 X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20161025 header.b=P9EcMoqO; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of grarpamp@gmail.com designates 2607:f8b0:4864:20::d42 as permitted sender) smtp.mailfrom=grarpamp@gmail.com X-Spamd-Result: default: False [-4.68 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20161025]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; FREEMAIL_FROM(0.00)[gmail.com]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_SOME(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; RCVD_IN_DNSWL_NONE(0.00)[2.4.d.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.list.dnswl.org : 127.0.5.0]; MX_GOOD(-0.01)[cached: alt3.gmail-smtp-in.l.google.com]; IP_SCORE(-0.78)[ip: (1.62), ipnet: 2607:f8b0::/32(-3.16), asn: 15169(-2.32), country: US(-0.06)]; NEURAL_HAM_SHORT(-0.89)[-0.888,0]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; RCVD_TLS_LAST(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com.dwl.dnswl.org : 127.0.5.0] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 21:34:35 -0000 https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5599 NFLX-2019-001 Date Entry Created: 20190107 Preallocated to nothing? Or witheld under irresponsible disclosure thus keeping users vulnerable to leaks, parallel discovery, and exploit for at least five months more than necessary, and unaware thus unable to consider potential local mitigations? Older references... https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=freebsd https://nvd.nist.gov/vuln/search/results?form_type=Basic&results_type=overview&query=freebsd&search_type=all From owner-freebsd-questions@freebsd.org Tue Jun 18 22:31:45 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 782B815CABD1 for ; Tue, 18 Jun 2019 22:31:45 +0000 (UTC) (envelope-from johnl@iecc.com) Received: from gal.iecc.com (gal.iecc.com [IPv6:2001:470:1f07:1126:0:43:6f73:7461]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "gal.iecc.com", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id DC53C6A164 for ; Tue, 18 Jun 2019 22:31:44 +0000 (UTC) (envelope-from johnl@iecc.com) Received: (qmail 48188 invoked from network); 18 Jun 2019 22:31:43 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding; s=bc37.5d09664f.k1906; i=johnl-iecc.com@submit.iecc.com; bh=prcS/NOwh1bEoYKnSIp2wJMgvvg73Y4AwgQHgRhccI4=; b=aUHdmPD4dyveZZicWJ9VYW5OJQoiGMCI5La0vclVDqvdcs1FztHz/J5qmNWVQFZ7suTHcbCajyi9m17gRMDwa380uq4YKdGNAsJO40Vh2j7EBk4DXYSvrg/EZjlhG+W3wunPlBv8O1c5VqcLrzQLBDqG336NO5VM1yv3+m+0xDfocM5WFmTnsPDd9TXpiOzl/OQ62un1hBIk36O4lxlqTibnyC9fcMKk9fH5Xpa+hQR/unDavMnRIH8KHL387PYC Received: from ary.qy ([64.246.232.221]) by imap.iecc.com ([64.57.183.75]) with ESMTPSA (TLS1.2 ECDHE-RSA AES-256-GCM AEAD, johnl@iecc.com) via TCP; 18 Jun 2019 22:31:43 -0000 Received: by ary.qy (Postfix, from userid 501) id 4139C2015FF31A; Tue, 18 Jun 2019 18:31:42 -0400 (EDT) Date: 18 Jun 2019 18:31:42 -0400 Message-Id: <20190618223143.4139C2015FF31A@ary.qy> From: "John Levine" To: freebsd-questions@freebsd.org Cc: rfg@tristatelogic.com Subject: Re: Eliminating IPv6 (?) In-Reply-To: <24393.1560893271@segfault.tristatelogic.com> Organization: Taughannock Networks X-Headerized: yes Mime-Version: 1.0 Content-type: text/plain; charset=utf-8 Content-transfer-encoding: 8bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 22:31:45 -0000 In article <24393.1560893271@segfault.tristatelogic.com> you write: >Why is /etc/rc.firewall even being executed? I never explicitly asked for >that, but that seems to just be a by-product of how things are arranged >these days.... a by-product that I have no direct control over. It's called from the shell script /etc/rc.d/ipfw so if you don't like what it does, make it do something else. From owner-freebsd-questions@freebsd.org Tue Jun 18 23:55:40 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5371415CC479 for ; Tue, 18 Jun 2019 23:55:40 +0000 (UTC) (envelope-from gordon@tetlows.org) Received: from mail-yb1-xb43.google.com (mail-yb1-xb43.google.com [IPv6:2607:f8b0:4864:20::b43]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 0F9696C68A for ; Tue, 18 Jun 2019 23:55:38 +0000 (UTC) (envelope-from gordon@tetlows.org) Received: by mail-yb1-xb43.google.com with SMTP id d2so6817277ybh.8 for ; Tue, 18 Jun 2019 16:55:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tetlows.org; s=google; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=Ek7lRwSkyoa41qSMepvJLpdyYq1iW0/qYdyt0MlSsLI=; b=GqEzbwkKyuVQd7xSSiSusXzyXd2P0ziP6pe0mZib9H6/jdsZTDgu8/9ZIOW5aaARUE Ykn6V6kuqzvEGwlTUFHZlZCqX4C5yWuoz8uL3l0rEPcL2dCjFbq9tmy5uLtQGafnyo81 lrJ5vRtkSBxgYbRUYLxKlSSbTK5iikVsJh39Q= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=Ek7lRwSkyoa41qSMepvJLpdyYq1iW0/qYdyt0MlSsLI=; b=H+TC8gUt+P6Dj7Ausjv71Z/3TpITfw8GuYI5xygK6tnRybF/JER6FIz9Duz1WfKH3D fCeTXMvc3hYWEzBye3NHZyHz0C+LTUC6lNUIjg0+6R5uJD8T8SBsJRkS/tYxtirRIw0f qIvX9irVgKMTooQkO+hvDAGKzdXQX19in6MPYTS6Twr0TOmxd8cFV1soJ0+feugfhp/i 5ZEnQs4CgGqz+j0BIbbEaX5NDj4sKRtMfJR9PDgu+eDJosOqpKDwlq7lFarIgR9LueOf Xab/dqInNzhcSmKW7ygjGpHnI5P5vdapUQqMgBBsbccp0nNvpS97+ozrq/E4zvdnGAgM jlgQ== X-Gm-Message-State: APjAAAXaSrUKHFz48AQKLDT1Eh0WutyTKE6yHsXhBpIFvhVN2EbH/vPz uLFO80qzVEC2eAoWlR196XxP X-Google-Smtp-Source: APXvYqyk3gFlB5zeDY6+4AhsAu3KNeX0b60yduzEiy6u2pfxPkPiUG0LQjyPlD9eCWsQEHVCpM57xQ== X-Received: by 2002:a5b:64f:: with SMTP id o15mr51046473ybq.430.1560902138182; Tue, 18 Jun 2019 16:55:38 -0700 (PDT) Received: from gmail.com ([2607:fc50:0:7900:0:dead:beef:cafe]) by smtp.gmail.com with ESMTPSA id h129sm4178887ywe.97.2019.06.18.16.55.37 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 18 Jun 2019 16:55:37 -0700 (PDT) Date: Tue, 18 Jun 2019 16:55:35 -0700 From: Gordon Tetlow To: grarpamp Cc: freebsd-security@freebsd.org, freebsd-questions@freebsd.org, security-report@netflix.com Subject: Re: CVE-2019-5599 SACK Slowness (FreeBSD 12 using the RACK TCP Stack) Message-ID: <20190618235535.GY32970@gmail.com> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.12.0 (2019-05-25) X-Rspamd-Queue-Id: 0F9696C68A X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=tetlows.org header.s=google header.b=GqEzbwkK; dmarc=pass (policy=none) header.from=tetlows.org; spf=pass (mx1.freebsd.org: domain of gordon@tetlows.org designates 2607:f8b0:4864:20::b43 as permitted sender) smtp.mailfrom=gordon@tetlows.org X-Spamd-Result: default: False [-3.40 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_DKIM_ALLOW(-0.20)[tetlows.org:s=google]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[4]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; TO_DN_SOME(0.00)[]; MX_GOOD(-0.01)[cached: alt1.aspmx.l.google.com]; MID_RHS_MATCH_TO(1.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; DKIM_TRACE(0.00)[tetlows.org:+]; DMARC_POLICY_ALLOW(-0.50)[tetlows.org,none]; RCVD_IN_DNSWL_NONE(0.00)[3.4.b.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.list.dnswl.org : 127.0.5.0]; RCVD_COUNT_THREE(0.00)[3]; NEURAL_HAM_SHORT(-0.97)[-0.970,0]; FREEMAIL_TO(0.00)[gmail.com]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; IP_SCORE(-0.42)[ip: (3.43), ipnet: 2607:f8b0::/32(-3.16), asn: 15169(-2.32), country: US(-0.06)] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Jun 2019 23:55:40 -0000 On Tue, Jun 18, 2019 at 05:34:32PM -0400, grarpamp wrote: > https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md > https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5599 > NFLX-2019-001 > > Date Entry Created: 20190107 > Preallocated to nothing? > Or witheld under irresponsible disclosure thus keeping > users vulnerable to leaks, parallel discovery, and exploit > for at least five months more than necessary, and > unaware thus unable to consider potential local mitigations? Other than the inappropriate tone, there is a reasonable question here. MITRE allocates blocks of CVEs to FreeBSD as a CNA. We can then decide when to assign and disclose them. The 2019-01-07 date is when MITRE allocated a block of CVEs to FreeBSD, not when they are assigned to an issue. We generally get a block in the beginning of each year. If you would like to have an actual discussion around disclosure policies, I'm happy to have one, but by your tone above, I don't think there is any reason to do so. It seems unlikely you are open to debate in a fashion that would be productive. Thanks, Gordon Hat: Security Officer From owner-freebsd-questions@freebsd.org Wed Jun 19 00:06:59 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7900315CCC88 for ; Wed, 19 Jun 2019 00:06:59 +0000 (UTC) (envelope-from shawn.webb@hardenedbsd.org) Received: from mail-qk1-x72f.google.com (mail-qk1-x72f.google.com [IPv6:2607:f8b0:4864:20::72f]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id F08B76CC91 for ; Wed, 19 Jun 2019 00:06:57 +0000 (UTC) (envelope-from shawn.webb@hardenedbsd.org) Received: by mail-qk1-x72f.google.com with SMTP id c70so9786110qkg.7 for ; Tue, 18 Jun 2019 17:06:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hardenedbsd.org; s=google; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=ZjWGQ2+ijpBfioHVFDQ8INdyQyE53uZwPApgm2atEP0=; b=FWXc3jR0Ei+TqPT+Rdu6FN+nqlqR8JnBbrpi+kpOBJ9L17n93F6uU5NuFX4uOK2VI6 E6+LZTu7qocG9Frx6+Jzq8yQMcWZ6cfR4WdDgZ0gMNAZXDJEE/nB83HHnfc55kI00X1f kSEnV5MoVjplgkKClGnO6qKnRiJiJ2Gp9ysJI3/KFsvkqWSFhwyNMNp7+q85/Jb2aH/8 Kb+EKN7QpciIvMHrWuYktso9pc6POVp+Jxopw/3nMXt//upm6+sa3bg95BgZpz8MuXvM C7vR5enonKHtqS4kzQfssX9suNMlWwfNUS8LgKVE3elkbozmvF3yukatnxddghVKA6dV tDAg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=ZjWGQ2+ijpBfioHVFDQ8INdyQyE53uZwPApgm2atEP0=; b=EDwT8KgQ5GgPAAAP+N1VwSfEVVO38Ufl2OgnyHW3FOYY/OeLEiwonHQ7Kxpp9Aqs0D pGLbaFM0kuvMbaeJtPZgnJCjZARwquMNgHapuFK0RcZA3eKzWjKau9PCOJzXEvYRFQSw /wAUgyhCoGfq2+CXv4+BA3xsLuQj6gve21BvJgpnn/dwFolFaszc/q4qYGH3wKUp1D/l Kc6D4Qy3A1QoGivUD2A1x6v7N1JeDQzdsnyhD74+TQjMKu6Loff48dNvST3ztKWhpLeQ Pq6Yoa2ShdBXgJ0YfS2KMaW+WfIwJel6JZjFzi8XlzU+dkgt5pvszyeellAwPzEi9m37 X03g== X-Gm-Message-State: APjAAAXcqSFgHL1Mv2tRAevJKPJMxglHtDG0en0tvavHuP7pOLapsPGV pCS04ks0kWyLGjXoxtX+QIeUrQkFq0o= X-Google-Smtp-Source: APXvYqwS6Lt7Xtx7JLWCdvUoby8IdPIK+26vpb5ur3TA3HXG4C5NcXQm5dkr9+okwQLbTtoAItUFIw== X-Received: by 2002:a37:ac14:: with SMTP id e20mr95009884qkm.243.1560902817092; Tue, 18 Jun 2019 17:06:57 -0700 (PDT) Received: from mutt-hbsd ([151.196.118.239]) by smtp.gmail.com with ESMTPSA id k58sm10784251qtc.38.2019.06.18.17.06.56 (version=TLS1_3 cipher=AEAD-AES256-GCM-SHA384 bits=256/256); Tue, 18 Jun 2019 17:06:56 -0700 (PDT) Date: Tue, 18 Jun 2019 20:06:55 -0400 From: Shawn Webb To: Gordon Tetlow Cc: grarpamp , freebsd-security@freebsd.org, freebsd-questions@freebsd.org, security-report@netflix.com Subject: Re: CVE-2019-5599 SACK Slowness (FreeBSD 12 using the RACK TCP Stack) Message-ID: <20190619000655.2gde4u5i5ter5exu@mutt-hbsd> References: <20190618235535.GY32970@gmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="pvj2jtyuppcsn75u" Content-Disposition: inline In-Reply-To: <20190618235535.GY32970@gmail.com> X-Operating-System: FreeBSD mutt-hbsd 13.0-CURRENT-HBSD FreeBSD 13.0-CURRENT-HBSD HARDENEDBSD-13-CURRENT amd64 X-PGP-Key: http://pgp.mit.edu/pks/lookup?op=vindex&search=0xFF2E67A277F8E1FA User-Agent: NeoMutt/20180716 X-Rspamd-Queue-Id: F08B76CC91 X-Spamd-Bar: -------- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=hardenedbsd.org header.s=google header.b=FWXc3jR0; spf=pass (mx1.freebsd.org: domain of shawn.webb@hardenedbsd.org designates 2607:f8b0:4864:20::72f as permitted sender) smtp.mailfrom=shawn.webb@hardenedbsd.org X-Spamd-Result: default: False [-8.12 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; RCPT_COUNT_FIVE(0.00)[5]; RCVD_COUNT_THREE(0.00)[3]; DKIM_TRACE(0.00)[hardenedbsd.org:+]; MX_GOOD(-0.01)[alt1.aspmx.l.google.com,aspmx.l.google.com,aspmx2.googlemail.com,alt2.aspmx.l.google.com,aspmx3.googlemail.com]; NEURAL_HAM_SHORT(-1.00)[-0.996,0]; SIGNED_PGP(-2.00)[]; FROM_EQ_ENVFROM(0.00)[]; IP_SCORE(-3.02)[ip: (-9.54), ipnet: 2607:f8b0::/32(-3.16), asn: 15169(-2.32), country: US(-0.06)]; MIME_TRACE(0.00)[0:+,1:+]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; RCVD_TLS_LAST(0.00)[]; RECEIVED_SPAMHAUS_PBL(0.00)[239.118.196.151.zen.spamhaus.org : 127.0.0.10]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[hardenedbsd.org:s=google]; FROM_HAS_DN(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; DMARC_NA(0.00)[hardenedbsd.org]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[f.2.7.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.list.dnswl.org : 127.0.5.0]; MID_RHS_NOT_FQDN(0.50)[]; FREEMAIL_CC(0.00)[gmail.com] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 00:06:59 -0000 --pvj2jtyuppcsn75u Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Jun 18, 2019 at 04:55:35PM -0700, Gordon Tetlow wrote: > On Tue, Jun 18, 2019 at 05:34:32PM -0400, grarpamp wrote: > > https://github.com/Netflix/security-bulletins/blob/master/advisories/th= ird-party/2019-001.md > > https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2019-5599 > > NFLX-2019-001 > >=20 > > Date Entry Created: 20190107 > > Preallocated to nothing? > > Or witheld under irresponsible disclosure thus keeping > > users vulnerable to leaks, parallel discovery, and exploit > > for at least five months more than necessary, and > > unaware thus unable to consider potential local mitigations? >=20 > Other than the inappropriate tone, there is a reasonable question here. > MITRE allocates blocks of CVEs to FreeBSD as a CNA. We can then decide > when to assign and disclose them. The 2019-01-07 date is when MITRE > allocated a block of CVEs to FreeBSD, not when they are assigned to an > issue. We generally get a block in the beginning of each year. >=20 > If you would like to have an actual discussion around disclosure > policies, I'm happy to have one, but by your tone above, I don't think > there is any reason to do so. It seems unlikely you are open to > debate in a fashion that would be productive. Hey Gordon, Thank you for your reply, and especially for the respectful tone. I hope to drive a further positive discussion in the goal of enhanced transparency. It appears that Netflix's advisory (as of this writing) does not include a timeline of events. Would FreeBSD be able to provide its event timeline with regards to CVE-2019-5599? Were any FreeBSD derivatives given advanced notice? If so, which ones? Thanks for your time, resources, and continued correspondence. Thanks again, --=20 Shawn Webb Cofounder / Security Engineer HardenedBSD Tor-ified Signal: +1 443-546-8752 Tor+XMPP+OTR: lattera@is.a.hacker.sx GPG Key ID: 0xFF2E67A277F8E1FA GPG Key Fingerprint: D206 BB45 15E0 9C49 0CF9 3633 C85B 0AF8 AB23 0FB2 --pvj2jtyuppcsn75u Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEA6TL67gupaZ9nzhT/y5nonf44foFAl0JfJoACgkQ/y5nonf4 4foWbBAAib8Ky5ZDh0GM/50NpFn3ws0/uHsi4F8iUmDxKJVfFdgx4dx8tlH1ZCT8 t1Aqu8sxBDFIO/cHWvGQu5BuEZbf/eDt8w8iBqpKKDdSYka2n8a2dgixUZgm2WPf MydSOlUXI1+kME59JjJ16gCk+Yuteap+bVaIqDC8d1+ERzHJ+CqHKF1NU2Qf8+2P 5Z4AdO7BznNRKCBiymGJCrmsSIXqgaNY0wqSri+OiBl6PsllcsYmFguaTpud1tcu hxhOutIFg1IRtqvyAZjAMz4eq6UOTM3OnrtFZVWGPGjE69C/T/UFvL79fu8ZR+a7 oVH7Bf7g14d1bHNOrcnUfyaAzC398fJ1SSSO6lCArB4GGBJRKPodQVMPY54esM7e 4GNyfhKP72eXqvTLXPMloC5wzRdD2hgkmkF0XqQCrW06XNjrLraOib0jhXK/lKUf MnyXJbnoV9J30Ey8OQ83S2DHyKcogL2O8wavvqxfdPpXmBJkzwn4kkPuBfDyjzU/ dshfQ4nq9XlHJxX89LRzBUpgOa9yruGklrM1c9wySkM3rD72dui/cTzQN3THA228 LWhExQgNbrnAQCwztvuSKnP8oB8oZk2JISYd0aqYcu5NVo4yxa5qUh5wveu/k9Pr scgfZ/HKlBTqp7EgL9rSdGAyNzqAutLg7LynCU8Nnw0FWHdl10g= =PwY8 -----END PGP SIGNATURE----- --pvj2jtyuppcsn75u-- From owner-freebsd-questions@freebsd.org Wed Jun 19 00:11:39 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8A7A215CD021 for ; Wed, 19 Jun 2019 00:11:39 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: from outgoing.tristatelogic.com (segfault.tristatelogic.com [69.62.255.118]) by mx1.freebsd.org (Postfix) with ESMTP id 24D6B6D008 for ; Wed, 19 Jun 2019 00:11:38 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: by segfault.tristatelogic.com (Postfix, from userid 1237) id 604D14E669; Tue, 18 Jun 2019 17:11:37 -0700 (PDT) From: "Ronald F. Guilmette" To: "John Levine" cc: freebsd-questions@freebsd.org Subject: Re: Eliminating IPv6 (?) In-Reply-To: <20190618223143.4139C2015FF31A@ary.qy> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <25108.1560903097.1@segfault.tristatelogic.com> Date: Tue, 18 Jun 2019 17:11:37 -0700 Message-ID: <25109.1560903097@segfault.tristatelogic.com> X-Rspamd-Queue-Id: 24D6B6D008 X-Spamd-Bar: ------ Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-6.98 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; NEURAL_HAM_SHORT(-0.98)[-0.983,0]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; REPLY(-4.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 00:11:39 -0000 In message <20190618223143.4139C2015FF31A@ary.qy>, "John Levine" wrote: >In article <24393.1560893271@segfault.tristatelogic.com> you write: >>Why is /etc/rc.firewall even being executed? I never explicitly asked for >>that, but that seems to just be a by-product of how things are arranged >>these days.... a by-product that I have no direct control over. > >It's called from the shell script /etc/rc.d/ipfw so if you don't like what >it does, make it do something else. Believe me, I fully understand that. I was just responding to that other guy who asked me the question "Why are you even running /etc/rc.firewall?" The answer is: I didn't consciously decide to do that. It just happens. From owner-freebsd-questions@freebsd.org Wed Jun 19 01:16:55 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BEF3115CE2CB; Wed, 19 Jun 2019 01:16:55 +0000 (UTC) (envelope-from grarpamp@gmail.com) Received: from mail-io1-xd43.google.com (mail-io1-xd43.google.com [IPv6:2607:f8b0:4864:20::d43]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 7992B6EB7A; Wed, 19 Jun 2019 01:16:54 +0000 (UTC) (envelope-from grarpamp@gmail.com) Received: by mail-io1-xd43.google.com with SMTP id w25so34243153ioc.8; Tue, 18 Jun 2019 18:16:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=U/joiMjUX8/olWboWvynPJ1JX31vwkgEn3HlsIhucOQ=; b=SwRZrGMALIOLN8l9AUBjeLYfWJ50a2Ybb3RP0+EXgroUwoVygdPX2lvPCBo3po0lRs WlZPbz3JoGgw8GtvgKdP0VieouvzzdU/Z3z4vGFxPV3UO/CsMEeKUJ9H8PVkOkBS8E6W xt4DKQiXZ4RmBVZetGs2UDZMrLOZxQBNEvvQh8xiViBUJNQIrRW1PooIQB7stm5qOc2f cI2KO82t3ji2PYkQ+PZ+CsAqnW/udqEyLn0t5/qz3p8A4riBS7tghLct136A74Z8dPtr rad+WNY/xqH5TpleBV4imbTy85QQA8IjRvPikZVcqaP2ReBROTu5Q/UV9grWOicHfGMS fIXQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=U/joiMjUX8/olWboWvynPJ1JX31vwkgEn3HlsIhucOQ=; b=OEl9t2/KX7IOR/L7STtalMEkduhQq5GF9mGc2bUJt2gcAWV2hXttnHd0Vroe3bqTRC jj5JjX3cdjQSvVaS7qYjQClOOPvMzGQkhmrTMDWCwMlwM9RVNZ3jcIlpM3ySZG5w42v1 OGNrtFzQCJhJsIBH4sbZvlIzm9AHkX+/AyCTdtPLI7yS7a7p/0MqJCmPSY3SMkVFWk7Z t+UW0UOnGpEtXS6EQjE+KDmE+KjmwNBIFOw6IUIacyKl6cWcWQyuzXboS84A5hkxk5us xbsYA24ZyH0Qt54agrsYhVIqhu+HJL79mJhEItOFTorvaT9krmUn99ylhwX3meNxDJNV nuhw== X-Gm-Message-State: APjAAAWSn0HrcEjnXxQ3DlKyD2ocwixGY4vmhYUXWpx92P7M4QfTlAFs 6hLeOGNimprws1imalMBTq8yF6GOj1XgeIGBlsRFPBwQ X-Google-Smtp-Source: APXvYqyIBQWdLXjtrzKorXVuM37W3XzJ2EBzc76bYUPFtsR5Gg7MHVzVk0ou9BewvhuTlc7FhuoRktzAVYfiI5M57H4= X-Received: by 2002:a5d:8404:: with SMTP id i4mr22533255ion.146.1560907013503; Tue, 18 Jun 2019 18:16:53 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a02:212a:0:0:0:0:0 with HTTP; Tue, 18 Jun 2019 18:16:52 -0700 (PDT) In-Reply-To: <20190618235535.GY32970@gmail.com> References: <20190618235535.GY32970@gmail.com> From: grarpamp Date: Tue, 18 Jun 2019 21:16:52 -0400 Message-ID: Subject: Re: CVE-2019-5599 SACK Slowness (FreeBSD 12 using the RACK TCP Stack) To: freebsd-security@freebsd.org Cc: freebsd-questions@freebsd.org, security-report@netflix.com Content-Type: text/plain; charset="UTF-8" X-Rspamd-Queue-Id: 7992B6EB7A X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20161025 header.b=SwRZrGMA; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of grarpamp@gmail.com designates 2607:f8b0:4864:20::d43 as permitted sender) smtp.mailfrom=grarpamp@gmail.com X-Spamd-Result: default: False [-4.76 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20161025]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; FREEMAIL_FROM(0.00)[gmail.com]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_SOME(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; MX_GOOD(-0.01)[cached: alt3.gmail-smtp-in.l.google.com]; RCVD_IN_DNSWL_NONE(0.00)[3.4.d.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.list.dnswl.org : 127.0.5.0]; NEURAL_HAM_SHORT(-0.97)[-0.966,0]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; IP_SCORE(-0.78)[ip: (1.63), ipnet: 2607:f8b0::/32(-3.16), asn: 15169(-2.32), country: US(-0.06)]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; RCVD_TLS_LAST(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com.dwl.dnswl.org : 127.0.5.0] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 01:16:56 -0000 On 6/18/19, Gordon Tetlow wrote: > On Tue, Jun 18, 2019 at 05:34:32PM -0400, grarpamp wrote: >> https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md >> https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5599 >> NFLX-2019-001 >> >> Date Entry Created: 20190107 >> Preallocated to nothing? >> Or witheld...? > MITRE allocates blocks of CVEs to FreeBSD as a CNA. We can then decide > when to assign and disclose them. The 2019-01-07 date is when MITRE > allocated a block of CVEs to FreeBSD, not when they are assigned to an > issue. We generally get a block in the beginning of each year. So preallocated to nothing, ok very well, no problem, priors amended herein as such, thx. As it is not in the current .md, when was the issue discovered by Netflix / Looney? > discussion around disclosure policies In today's world of parallel discovery, leaks, sec org infiltration by adversary, surveillance, no crypto, rapid automated exploit, etc... to wait for patch, polish, and press release advert, to not disclose, afford users local action up to immediate offlining for safety and wait, to draw upon entire community pool that has time*ability to fix... is thought by many [users] as irresponsible to users. There is no tone. And of course this one isn't currently a remote or local root. But what if it was... For those interested or new, there's lots of historical discussion with and without tone that can be found on any seclist, yet is no universal.. Having just noted these... https://www.freebsd.org/security/ https://www.freebsd.org/security/charter.html https://svnweb.freebsd.org/doc/head/en_US.ISO8859-1/htdocs/security/ The charter last marked current 2002... is there any actual and posted mandatory timeliness disclosure trigger component? One that gets overall reviewed for user input say every N-years? Perhaps something more security focused than the general... https://www.research.net/r/freebsd2019 Hack happily :) Netflix dedication to FreeBSD much appreciated by many too. From owner-freebsd-questions@freebsd.org Wed Jun 19 04:42:45 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 304BF15D1CB9; Wed, 19 Jun 2019 04:42:45 +0000 (UTC) (envelope-from eugen@grosbein.net) Received: from eg.sd.rdtc.ru (eg.sd.rdtc.ru [IPv6:2a03:3100:c:13::5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "eg.sd.rdtc.ru", Issuer "eg.sd.rdtc.ru" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 0B7EC7464B; Wed, 19 Jun 2019 04:42:33 +0000 (UTC) (envelope-from eugen@grosbein.net) X-Envelope-From: eugen@grosbein.net X-Envelope-To: freebsd-net@freebsd.org Received: from [10.58.0.4] ([10.58.0.4]) by eg.sd.rdtc.ru (8.15.2/8.15.2) with ESMTPS id x5J4gOXP081759 (version=TLSv1.2 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Wed, 19 Jun 2019 11:42:24 +0700 (+07) (envelope-from eugen@grosbein.net) Subject: Re: Eliminating IPv6 (?) To: "Ronald F. Guilmette" , freebsd-net , FreeBSD Questions Mailing List References: <24170.1560891451@segfault.tristatelogic.com> From: Eugene Grosbein Message-ID: <2cd79858-66a6-dedb-19b8-697d220c9986@grosbein.net> Date: Wed, 19 Jun 2019 11:42:15 +0700 User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: <24170.1560891451@segfault.tristatelogic.com> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 0B7EC7464B X-Spamd-Bar: + Authentication-Results: mx1.freebsd.org; spf=permerror (mx1.freebsd.org: domain of eugen@grosbein.net uses mechanism not recognized by this client) smtp.mailfrom=eugen@grosbein.net X-Spamd-Result: default: False [1.04 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.31)[-0.307,0]; RCVD_TLS_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; MX_INVALID(0.50)[greylisted]; NEURAL_SPAM_SHORT(0.75)[0.755,0]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[grosbein.net]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; R_SPF_PERMFAIL(0.00)[]; NEURAL_SPAM_LONG(0.19)[0.186,0]; IP_SCORE(0.00)[country: RU(0.01)]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:29072, ipnet:2a03:3100::/32, country:RU]; MID_RHS_MATCH_FROM(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 04:42:45 -0000 19.06.2019 3:57, Ronald F. Guilmette wrote: > And god only knows how much will break once I've done that. IPv6 will break only. > How many other > people have tested -all- of the resulting binaries, seriously, on actual > production systems? (I may be the first one ever, at least for 12.0.) I ran plenty of hosts with IPv6 disabled this way and no problems observed, but this pre-dates 12.0. From owner-freebsd-questions@freebsd.org Wed Jun 19 05:31:19 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 48E2015D2D1D; Wed, 19 Jun 2019 05:31:19 +0000 (UTC) (envelope-from kob6558@gmail.com) Received: from mail-ot1-x32b.google.com (mail-ot1-x32b.google.com [IPv6:2607:f8b0:4864:20::32b]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 54CCE75BB5; Wed, 19 Jun 2019 05:31:18 +0000 (UTC) (envelope-from kob6558@gmail.com) Received: by mail-ot1-x32b.google.com with SMTP id 43so901963otf.8; Tue, 18 Jun 2019 22:31:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=0IGH+biRNaM4exiYnpbiUBbnN3JcJ4Stpjt98GABnVg=; b=LJVIaTeiu6bgNYcuzf7slcW/Z8/mBMLFKeoaKG1DWUxpLIIxnhnmKbLTFNo+eqR7OR GrOb4A8S2j80B2HWPmXBjTSUBvPfIml/Wm7Lb7bq6BDmeNPvoHnHH/VIMjVrvErhnlaE sKqS3x8ORolpBgul9AewuZg+h1lDqdQxQ8C2BsLoSBkOpeniwQcBf2RyOIIhHd0SgMk/ KPsX8l92oA6nky0wvugRgrvzAdV3gzF8Ohz0JEUTkoJSfkrbIxfBH2HDKnan3yAQuqC3 qm8FzU7uSOccmWu2LvokzBLKO2axPoijOFh7yFN1jMskGG3EOL+PKcLl1qthX3S75f3T pUHg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=0IGH+biRNaM4exiYnpbiUBbnN3JcJ4Stpjt98GABnVg=; b=Yp/B3X+OVAsKTMfnLFqCGV6zEAfCZb4HcqLBUw/zVb18w2d3N+FvyscWZXCPfEMJG7 oxRiP/bY/o9BKHvm8Lf5Y6hKknFMIzWVDLYxfuyLYkpx4U7qNj1eUQBnXeIv+p5qCKzp vtu3XqV4F4p3PNcwFTDYy9asoVgQs5GqB+MDMFZ76RHXI098oNQ7dQ1n//mNpJRrLXC8 4/QGLuHnCYEbPJHdUoUFbZG+dD1/mE1wkKx/T0nsfBWo0hdM7QReGnhiQ8O56m9trq1Q Xxsrezb5VXHkmSHsx0nKA8vju/bV423tZvGCCCZMOFXmkddh5Kzq9+zLVejd6jTdSKl4 nq2w== X-Gm-Message-State: APjAAAWVL623vzKtekNoBfC+ZnqvITgWdMDYKO2G98UO0Kkg2xo4qHdI RhIVjr5dmDkB0Zb4krCxufy/R5FBYAVg23D6nuPDao9A X-Google-Smtp-Source: APXvYqxnVKOzyUhqM5XbTdgWnrILJakPMaR1Q0N19w8CCZRbRO15pbnyHPrE9eoValRD0df4jfrotvNSwZHFVYwnbU4= X-Received: by 2002:a9d:7ad4:: with SMTP id m20mr7889058otn.93.1560922277455; Tue, 18 Jun 2019 22:31:17 -0700 (PDT) MIME-Version: 1.0 References: <24393.1560893271@segfault.tristatelogic.com> In-Reply-To: <24393.1560893271@segfault.tristatelogic.com> From: Kevin Oberman Date: Tue, 18 Jun 2019 22:31:00 -0700 Message-ID: Subject: Re: Eliminating IPv6 (?) To: "Ronald F. Guilmette" Cc: FreeBSD Net , Mailinglists FreeBSD X-Rspamd-Queue-Id: 54CCE75BB5 X-Spamd-Bar: ------ Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20161025 header.b=LJVIaTei; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of kob6558@gmail.com designates 2607:f8b0:4864:20::32b as permitted sender) smtp.mailfrom=kob6558@gmail.com X-Spamd-Result: default: False [-6.42 / 15.00]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; FREEMAIL_FROM(0.00)[gmail.com]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; MX_GOOD(-0.01)[cached: alt3.gmail-smtp-in.l.google.com]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; NEURAL_HAM_SHORT(-0.84)[-0.840,0]; FORGED_SENDER(0.30)[rkoberman@gmail.com,kob6558@gmail.com]; RCVD_TLS_LAST(0.00)[]; MIME_TRACE(0.00)[0:+,1:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; FROM_NEQ_ENVFROM(0.00)[rkoberman@gmail.com,kob6558@gmail.com]; SUBJECT_HAS_QUESTION(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20161025]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; DWL_DNSWL_NONE(0.00)[gmail.com.dwl.dnswl.org : 127.0.5.0]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[b.2.3.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.list.dnswl.org : 127.0.5.0]; IP_SCORE(-2.87)[ip: (-8.81), ipnet: 2607:f8b0::/32(-3.16), asn: 15169(-2.32), country: US(-0.06)]; RCVD_COUNT_TWO(0.00)[2] Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 05:31:19 -0000 On Tue, Jun 18, 2019 at 2:28 PM Ronald F. Guilmette wrote: > In message w@mail.gmail.com> > Andreas Nilsson wrote: > > >But why are you even running rc.firewall if it does not do what you want? > > You are asking me the very question that *I* have been asking myself > since my "upgrade" to 12.0. > > Why is /etc/rc.firewall even being executed? I never explicitly asked for > that, but that seems to just be a by-product of how things are arranged > these days.... a by-product that I have no direct control over. > > >Just set firewall_script="/path/to/script" and your good to go, no ipv6 > >anywhere to be found. > > That is *not* what the Handbook says. Please read it. > > > https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls-ipfw.html > > The way that I am reading section 30.4.1 is that it is telling the user to > put BOTH of these things into /etc/rc.conf: > > firewall_enable="YES" > firewall_type="path-to-my-rules-file" > > And indeed, that is -exactly- what I have done on my prior FreeBSD > systems... > enable *and* configure. > > One or the other of those /etc/rc.conf lines nowadays apparently triggers > /etc/rc.firewall to run. I never explicitly asked for that to run, but > it did anyway. I am just going with the flow. > > > Regards, > rfg I was hoping to avoid this as I have not worked with IPv6 since I retired 8 years ago and I worked on this back before then by a couple of years. My memory is not perfect, so excuse any minor errors. I do know that back when I ran CURRENT I ran into a problem booting the system after ipfw and ipfw6 were merged. It stopped while starting the network if I had IPv6 enabled. At that time, IPv6 was not This was because I used the default net.inet.ip.fw.default_to_accept=0, so an automatic "65535 deny ip from any to any" was placed in ipfw. (This has long been the case and provided precedence for further automatic rules.) The problem is that IPv6 could not start unless certain IPv6 packets are allowed. I know NDP is required and, generally, certain ICMPv6 types are also needed. Without those, rules, IPv6 startup would block, unable to perform SLAAC, the default addresss assignment method and DHCPv6, if used. The result was a set of rules that are required for IPv6 to come up was added to the rules set by default. I have never seen this clearly documented except in the code and it has been changed several times over the years. On at least one case, a change broke my rule set as, unlike the reject by default rule and default loopback rule, were assigned real numbers which might fall into places in a rule-set that caused incorrect behavior. (Note: I have not read the handbook section on this in a while, so it may be documented by now.) This really needs proper documentation but it is now assumed by most OSes including Windows, MacOS, Linux and FreeBSD that IPv6 and IPv4 will be enabled by default. As time goes on, it will likely be more and more likely that disabling IPv6 will become difficult if networks are used at all. It already really requires a custom kernel to completely remove it and, even then, some IPv6 code is still be in the kernel, but unreachable unless someone has spotted these and '#ifdef"ed them. -- Kevin Oberman, Part time kid herder and retired Network Engineer E-mail: rkoberman@gmail.com PGP Fingerprint: D03FB98AFA78E3B78C1694B318AB39EF1B055683 From owner-freebsd-questions@freebsd.org Wed Jun 19 06:28:32 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 20AF215D39A3 for ; Wed, 19 Jun 2019 06:28:32 +0000 (UTC) (envelope-from mayuresh@kathe.in) Received: from relay2-d.mail.gandi.net (relay2-d.mail.gandi.net [217.70.183.194]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 6CC7C772A2 for ; Wed, 19 Jun 2019 06:28:29 +0000 (UTC) (envelope-from mayuresh@kathe.in) Received: from webmail.gandi.net (webmail28.sd4.0x35.net [10.200.201.28]) (Authenticated sender: mayuresh@kathe.in) by relay2-d.mail.gandi.net (Postfix) with ESMTPA id 5982540009 for ; Wed, 19 Jun 2019 06:28:23 +0000 (UTC) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Wed, 19 Jun 2019 11:58:23 +0530 From: Mayuresh Kathe To: freebsd-questions@freebsd.org Subject: How are modern processor instructions exposed to userland? Reply-To: mayuresh@kathe.in Mail-Reply-To: mayuresh@kathe.in Message-ID: <4b320042bd82ffe9b7793b62719d06f0@kathe.in> X-Sender: mayuresh@kathe.in User-Agent: Roundcube Webmail/1.3.8 X-Rspamd-Queue-Id: 6CC7C772A2 X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; spf=pass (mx1.freebsd.org: domain of mayuresh@kathe.in designates 217.70.183.194 as permitted sender) smtp.mailfrom=mayuresh@kathe.in X-Spamd-Result: default: False [-2.95 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; HAS_REPLYTO(0.00)[mayuresh@kathe.in]; R_SPF_ALLOW(-0.20)[+ip4:217.70.176.0/21]; TO_DN_NONE(0.00)[]; REPLYTO_ADDR_EQ_FROM(0.00)[]; MX_GOOD(-0.01)[spool.mail.gandi.net,fb.mail.gandi.net]; NEURAL_HAM_SHORT(-0.58)[-0.578,0]; RCVD_IN_DNSWL_LOW(-0.10)[194.183.70.217.list.dnswl.org : 127.0.5.1]; MIME_TRACE(0.00)[0:+]; R_DKIM_NA(0.00)[]; ASN(0.00)[asn:29169, ipnet:217.70.176.0/20, country:FR]; SUBJECT_ENDS_QUESTION(1.00)[]; MID_RHS_MATCH_FROM(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; DMARC_NA(0.00)[kathe.in]; RCPT_COUNT_ONE(0.00)[1]; IP_SCORE(-0.97)[ip: (-2.64), ipnet: 217.70.176.0/20(-1.20), asn: 29169(-0.98), country: FR(-0.01)]; RCVD_TLS_LAST(0.00)[]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 06:28:32 -0000 Hello, I have been wondering about this, and couldn't find an answer on the Web because I didn't know what to search for. Let's think about the AVX-512 instruction introduced with the latest Intel Core i9 Skylake-X processor. I wanted to know how one could use such capabilities via regular C. There should be some way, someone working on the FreeBSD core who would expose that instruction capability to the userland via libc, right? If my assumption is correct, may I know who does that? And, how do they go about doing it? Obviously, knowledge of x86-64 assembler would be a must, so would knowledge of C89; right? Thanks, ~Mayuresh From owner-freebsd-questions@freebsd.org Wed Jun 19 07:14:34 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CFA3415D4662; Wed, 19 Jun 2019 07:14:34 +0000 (UTC) (envelope-from andrnils@gmail.com) Received: from mail-lf1-x129.google.com (mail-lf1-x129.google.com [IPv6:2a00:1450:4864:20::129]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 6EB9A809CF; Wed, 19 Jun 2019 07:14:33 +0000 (UTC) (envelope-from andrnils@gmail.com) Received: by mail-lf1-x129.google.com with SMTP id y198so11270069lfa.1; Wed, 19 Jun 2019 00:14:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=U0syaAuiag1hNnR8xPtuq3gSJq0UXxY55VrHBi4Q9Vw=; b=F7vV/QEDc+kUFv52UCz/oePTpulfI11B/IXyY7IUbIJTi1gGTH0Qwhqsj/+03P6o/u S09HmMaXu/L6x+yzbF7jJdhbnKcFHOSNP6QbRjLAWViagFp2BfR5Hh5NFQuP2H3Sz0km Ttj8CoURJrospgBzuJSATj/8Fb0rCGg0EykuxjqLmfp3U6RQexHfMFwc8Jzi3I/ugJC2 5w8pi2K9eDTzW1a43B4SIzVuVUJUOj99K7679DPkz+3hhcB0DiU9mOTlrPoFt0YuZ1FV XzNJq13KLPtxv5zOy7SxnmMYIyyifdb+Clqkab/QDaDW2lT4ZuAHvHZvdsVw51mGIf7T C+Jg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=U0syaAuiag1hNnR8xPtuq3gSJq0UXxY55VrHBi4Q9Vw=; b=R3Ruse3r+wOUH5AbojsXYN97PNFhjToEoqWh6cDz6AGMg4VrobjYCy5kNfR6p9exZH kB0o+Li8i/bl5yEXlEgylmKr1mukZeIOLSgr1XmVZRxFp/0fWS0tfx9SZkd1dUCJgxP6 d6QUEbkWY1ADCrKWistNn3dMxBDB9I9O+uyAhJ06O/piFJeAI4iLgDESDpXwYiJMW0tM uu31lTPXP3d6fv2l1SMEPv0em/42WrFqI0jShVnqFofEny5mTrgN/mtB9D83e2RVqiwU 1PEL6GQRIeykGO/AIhvJS6CtTcK9DdsclKfdZkkW6EPEuye0TLf/PnErk3J4KHcLmfyM 4pVw== X-Gm-Message-State: APjAAAVHz85vOEsHvpOgmYMTE7IB8r46MeNY524UTbj/hIvplZczfh2D ugkegrpsrsPmB0a/IdoLTXkNwr48eEy6LkQMG+TCcj2h X-Google-Smtp-Source: APXvYqxp2pBSz2oWL4/H2YkzAMlK3+I3qu9Z4UC1BgqLkPhHDakOb+yIagJU9M6OhLSi2/V0Fiytyz3+9y7zyDPcZic= X-Received: by 2002:ac2:59c9:: with SMTP id x9mr3688873lfn.52.1560928471494; Wed, 19 Jun 2019 00:14:31 -0700 (PDT) MIME-Version: 1.0 References: <24393.1560893271@segfault.tristatelogic.com> In-Reply-To: <24393.1560893271@segfault.tristatelogic.com> From: Andreas Nilsson Date: Wed, 19 Jun 2019 09:14:19 +0200 Message-ID: Subject: Re: Eliminating IPv6 (?) To: "Ronald F. Guilmette" Cc: FreeBSD Net , Mailinglists FreeBSD X-Rspamd-Queue-Id: 6EB9A809CF X-Spamd-Bar: ------ Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20161025 header.b=F7vV/QED; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of andrnils@gmail.com designates 2a00:1450:4864:20::129 as permitted sender) smtp.mailfrom=andrnils@gmail.com X-Spamd-Result: default: False [-6.76 / 15.00]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36]; FREEMAIL_FROM(0.00)[gmail.com]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; MX_GOOD(-0.01)[cached: alt3.gmail-smtp-in.l.google.com]; NEURAL_HAM_SHORT(-0.95)[-0.951,0]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; RCVD_TLS_LAST(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com.dwl.dnswl.org : 127.0.5.0]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20161025]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; IP_SCORE(-2.80)[ip: (-9.15), ipnet: 2a00:1450::/32(-2.49), asn: 15169(-2.32), country: US(-0.06)]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[9.2.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.5.4.1.0.0.a.2.list.dnswl.org : 127.0.5.0]; RCVD_COUNT_TWO(0.00)[2] Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 07:14:35 -0000 On Tue, Jun 18, 2019, 23:28 Ronald F. Guilmette wrote: > In message w@mail.gmail.com> > Andreas Nilsson wrote: > > >But why are you even running rc.firewall if it does not do what you want? > > You are asking me the very question that *I* have been asking myself > since my "upgrade" to 12.0. > > Why is /etc/rc.firewall even being executed? I never explicitly asked for > that, but that seems to just be a by-product of how things are arranged > these days.... a by-product that I have no direct control over. > > >Just set firewall_script="/path/to/script" and your good to go, no ipv6 > >anywhere to be found. > > That is *not* what the Handbook says. Please read it. > > > https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls-ipfw.html > > Ok, so the handbook is wrong. It's a bug in the documentation. > The way that I am reading section 30.4.1 is that it is telling the user to > put BOTH of these things into /etc/rc.conf: > > firewall_enable="YES" > firewall_type="path-to-my-rules-file" > > And indeed, that is -exactly- what I have done on my prior FreeBSD > systems... > enable *and* configure. > > One or the other of those /etc/rc.conf lines nowadays apparently triggers > /etc/rc.firewall to run. I never explicitly asked for that to run, but > it did anyway. I am just going with the flow. > As soon as set firewall_script instead of firewall_type your problems will be solved. Just try it. The man page for rc.conf will tell you the same thing. > > > Regards, > rfg > _______________________________________________ > freebsd-net@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" > From owner-freebsd-questions@freebsd.org Wed Jun 19 07:25:32 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 725D415D4A23; Wed, 19 Jun 2019 07:25:32 +0000 (UTC) (envelope-from hausen@punkt.de) Received: from kagate.punkt.de (kagate.punkt.de [217.29.33.131]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id B9D4280EB4; Wed, 19 Jun 2019 07:25:31 +0000 (UTC) (envelope-from hausen@punkt.de) Received: from hugo10.ka.punkt.de (hugo10.ka.punkt.de [217.29.44.10]) by gate2.intern.punkt.de with ESMTP id x5J7PU4X050911; Wed, 19 Jun 2019 09:25:30 +0200 (CEST) Received: from [217.29.44.36] ([217.29.44.36]) by hugo10.ka.punkt.de (8.14.2/8.14.2) with ESMTP id x5J7PU45001719; Wed, 19 Jun 2019 09:25:30 +0200 (CEST) (envelope-from hausen@punkt.de) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Subject: Re: Eliminating IPv6 (?) From: "Patrick M. Hausen" In-Reply-To: Date: Wed, 19 Jun 2019 09:25:29 +0200 Cc: "Ronald F. Guilmette" , FreeBSD Net , Mailinglists FreeBSD Content-Transfer-Encoding: 7bit Message-Id: <6FA15752-4AD6-41F3-BE41-FE3B0453D530@punkt.de> References: <24393.1560893271@segfault.tristatelogic.com> To: Andreas Nilsson X-Mailer: Apple Mail (2.3445.104.11) X-Rspamd-Queue-Id: B9D4280EB4 X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; spf=pass (mx1.freebsd.org: domain of hausen@punkt.de designates 217.29.33.131 as permitted sender) smtp.mailfrom=hausen@punkt.de X-Spamd-Result: default: False [-2.75 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.99)[-0.987,0]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[4]; R_SPF_ALLOW(-0.20)[+ip4:217.29.32.0/20]; MV_CASE(0.50)[]; MIME_GOOD(-0.10)[text/plain]; RCVD_TLS_LAST(0.00)[]; DMARC_NA(0.00)[punkt.de]; NEURAL_HAM_LONG(-0.99)[-0.994,0]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; MX_GOOD(-0.01)[cached: mailin.pluspunkthosting.de]; NEURAL_HAM_SHORT(-0.76)[-0.761,0]; RCVD_IN_DNSWL_NONE(0.00)[131.33.29.217.list.dnswl.org : 127.0.10.0]; IP_SCORE(-0.19)[ipnet: 217.29.32.0/20(-0.54), asn: 16188(-0.43), country: DE(-0.01)]; FREEMAIL_TO(0.00)[gmail.com]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:16188, ipnet:217.29.32.0/20, country:DE]; MID_RHS_MATCH_FROM(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 07:25:32 -0000 Hi! > Am 19.06.2019 um 09:14 schrieb Andreas Nilsson : > As soon as set firewall_script instead of firewall_type your problems will > be solved. Just try it. The man page for rc.conf will tell you the same > thing. He will need to adjust his rule file, though. Setting firewall_type to an absolute path name implicitly calls ipfw with the file as an argument, so the file should contain only the rules. When using firewall_script you need to invoke ipfw explicitly in your file, since it is just executed as a shell script. Kind regards Patrick -- punkt.de GmbH Internet - Dienstleistungen - Beratung Kaiserallee 13a Tel.: 0721 9109-0 Fax: -100 76133 Karlsruhe info@punkt.de http://punkt.de AG Mannheim 108285 Gf: Juergen Egeling From owner-freebsd-questions@freebsd.org Wed Jun 19 09:32:54 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4BFBB15B12AC for ; Wed, 19 Jun 2019 09:32:54 +0000 (UTC) (envelope-from ik@sjmulder.nl) Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 3F41784D25 for ; Wed, 19 Jun 2019 09:32:51 +0000 (UTC) (envelope-from ik@sjmulder.nl) Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.nyi.internal (Postfix) with ESMTP id 5912721B84; Wed, 19 Jun 2019 05:32:45 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute3.internal (MEProxy); Wed, 19 Jun 2019 05:32:45 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sjmulder.nl; h= date:from:to:cc:subject:message-id:in-reply-to:references :mime-version:content-type:content-transfer-encoding; s=fm2; bh= hXs+8Gf5WXc9ztHLWIJPj31fkvwZLtw/LgzrjCF1oJE=; b=gSeZk/LCVzXsB507 wJEEySPlU4do5un+LaFbnNVFhQuxz4VaIGC+OsA2tDjn/LyVh+i1FwHgMgm9uius Vggg/fVaScJ0AwEIetfse6sJxtHKkHqlEvpek+fsnl1oeI8Z9xrPNDoA1l+awAB2 jfwdLIEci8F5QxNe9BKHOwjGRNBmUPzWvV1gJqHFAbHq7fPH58t1iEyVhv221F0l BJWzkz4rZCQU57FIT72/sKszBAeufqnPebPwkgv50oXhs+At37ZncIdHiNRFHsO9 s57GC3ngYhke8tnvz2P0lD0uuO/Fm2eZkpsjTeW/vdaGiCE0AuMrMPZG1SO/f5rC NzUkIw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm3; bh=hXs+8Gf5WXc9ztHLWIJPj31fkvwZLtw/LgzrjCF1o JE=; b=xwzndxC/QLa+ZX4lByyIEIpl6SpweRdNsQZhe1C40YHWsuBBRc+ov/1e/ ATl9WMpmv5vbHefsgRaQjanQxps4UUydmH/7EPt/f76/E4FG2Hm1ewzJMP7h2MpF j1wKbNfsT631xCvZbIvrhlq8hPEFE4QZsXZDkl8B/WpQ0tvygwfC7b/hK46KNrQF 2wZG07LU5hrJ7jrE5LjUh+3MUU39P55ImGW9PBXs1x4hux8D7WI1H1F2TKEc2LMq OPwBMbqUiK63dizQfGpBMNr1OxnBr+iwa5nD5PeNuEvupFYLYaPUg0CRhIlFXE96 fw6PGz0hUxMVle4PczGtfXaPom7Kw== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduvddrtddugddugeeiucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpeffhffvuffkjghfofggtgfgsehtje ertdfjtddvnecuhfhrohhmpedfufhijhhmvghnucflrdcuofhulhguvghrfdcuoehikhes shhjmhhulhguvghrrdhnlheqnecuffhomhgrihhnpehinhhtvghlrdgtohhmpdifihhkih hpvgguihgrrdhorhhgnecukfhppedugeehrdduvdekrddvvdejrddukeejnecurfgrrhgr mhepmhgrihhlfhhrohhmpehikhesshhjmhhulhguvghrrdhnlhenucevlhhushhtvghruf hiiigvpedt X-ME-Proxy: Received: from BBLP-SMULDE.colo.betabit.nl (unknown [145.128.227.187]) by mail.messagingengine.com (Postfix) with ESMTPA id 7D762380084; Wed, 19 Jun 2019 05:32:44 -0400 (EDT) Date: Wed, 19 Jun 2019 11:32:49 +0200 From: "Sijmen J. Mulder" To: mayuresh@kathe.in Cc: freebsd-questions@freebsd.org Subject: Re: How are modern processor instructions exposed to userland? Message-Id: <20190619113249.09852c139fe41b79abca8dcd@sjmulder.nl> In-Reply-To: <4b320042bd82ffe9b7793b62719d06f0@kathe.in> References: <4b320042bd82ffe9b7793b62719d06f0@kathe.in> X-Mailer: Sylpheed 3.7.0 (GTK+ 2.24.30; i686-pc-mingw32) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 3F41784D25 X-Spamd-Bar: ----- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=sjmulder.nl header.s=fm2 header.b=gSeZk/LC; dkim=pass header.d=messagingengine.com header.s=fm3 header.b=xwzndxC/; spf=pass (mx1.freebsd.org: domain of ik@sjmulder.nl designates 66.111.4.25 as permitted sender) smtp.mailfrom=ik@sjmulder.nl X-Spamd-Result: default: False [-5.56 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_DKIM_ALLOW(-0.20)[sjmulder.nl:s=fm2,messagingengine.com:s=fm3]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:66.111.4.25]; MV_CASE(0.50)[]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; DMARC_NA(0.00)[sjmulder.nl]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; RCVD_COUNT_THREE(0.00)[4]; TO_MATCH_ENVRCPT_SOME(0.00)[]; DKIM_TRACE(0.00)[sjmulder.nl:+,messagingengine.com:+]; RCPT_COUNT_TWO(0.00)[2]; MX_GOOD(-0.01)[in2-smtp.messagingengine.com,in1-smtp.messagingengine.com,in2-smtp.messagingengine.com,in1-smtp.messagingengine.com,in2-smtp.messagingengine.com,in1-smtp.messagingengine.com]; RCVD_TLS_LAST(0.00)[]; NEURAL_HAM_SHORT(-0.99)[-0.990,0]; FROM_EQ_ENVFROM(0.00)[]; SUBJECT_ENDS_QUESTION(1.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:11403, ipnet:66.111.4.0/24, country:US]; MID_RHS_MATCH_FROM(0.00)[]; IP_SCORE(-3.46)[ip: (-9.43), ipnet: 66.111.4.0/24(-4.74), asn: 11403(-3.08), country: US(-0.06)]; RCVD_IN_DNSWL_LOW(-0.10)[25.4.111.66.list.dnswl.org : 127.0.5.1] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 09:32:54 -0000 Mayuresh Kathe wrote: > Let's think about the AVX-512 instruction introduced with the latest > Intel Core i9 Skylake-X processor. > I wanted to know how one could use such capabilities via regular C. Unprivileged instructions (like these) are available to all processes. C compilers can and do already emit them when targeting a CPU that supports them (see the "-march" flag). You can also use instrinsics: https://en.wikipedia.org/wiki/Intrinsic_function https://software.intel.com/sites/landingpage/IntrinsicsGuide/ Sijmen From owner-freebsd-questions@freebsd.org Wed Jun 19 09:36:05 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A693F15B1424 for ; Wed, 19 Jun 2019 09:36:05 +0000 (UTC) (envelope-from mayuresh@kathe.in) Received: from relay8-d.mail.gandi.net (relay8-d.mail.gandi.net [217.70.183.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 7905184EE7 for ; Wed, 19 Jun 2019 09:36:04 +0000 (UTC) (envelope-from mayuresh@kathe.in) Received: from webmail.gandi.net (webmail28.sd4.0x35.net [10.200.201.28]) (Authenticated sender: mayuresh@kathe.in) by relay8-d.mail.gandi.net (Postfix) with ESMTPA id DB1DE1BF210 for ; Wed, 19 Jun 2019 09:35:55 +0000 (UTC) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Wed, 19 Jun 2019 15:05:55 +0530 From: Mayuresh Kathe To: freebsd-questions@freebsd.org Subject: Are graph algorithms used in the kernel? Reply-To: mayuresh@kathe.in Mail-Reply-To: mayuresh@kathe.in Message-ID: <000161c5861978ba597dc60cb5f99eae@kathe.in> X-Sender: mayuresh@kathe.in User-Agent: Roundcube Webmail/1.3.8 X-Rspamd-Queue-Id: 7905184EE7 X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; spf=pass (mx1.freebsd.org: domain of mayuresh@kathe.in designates 217.70.183.201 as permitted sender) smtp.mailfrom=mayuresh@kathe.in X-Spamd-Result: default: False [-2.85 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; HAS_REPLYTO(0.00)[mayuresh@kathe.in]; R_SPF_ALLOW(-0.20)[+ip4:217.70.176.0/21]; TO_DN_NONE(0.00)[]; REPLYTO_ADDR_EQ_FROM(0.00)[]; MX_GOOD(-0.01)[cached: spool.mail.gandi.net]; NEURAL_HAM_SHORT(-0.62)[-0.620,0]; RCVD_IN_DNSWL_LOW(-0.10)[201.183.70.217.list.dnswl.org : 127.0.5.1]; MIME_TRACE(0.00)[0:+]; R_DKIM_NA(0.00)[]; ASN(0.00)[asn:29169, ipnet:217.70.176.0/20, country:FR]; SUBJECT_ENDS_QUESTION(1.00)[]; MID_RHS_MATCH_FROM(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; DMARC_NA(0.00)[kathe.in]; RCPT_COUNT_ONE(0.00)[1]; IP_SCORE(-0.82)[ip: (-1.92), ipnet: 217.70.176.0/20(-1.20), asn: 29169(-0.98), country: FR(-0.01)]; RCVD_TLS_LAST(0.00)[]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 09:36:05 -0000 Hello, I found a book-set called "Algorithms in C" by Robert Sedgewick. It is a 2 volume bundle which is also sold as individual books. The first volume talks about regular algorithms and data-structures, while the second volume is exclusively dedicated to Graph algorithms. The language and tone of the book is very approachable, and all sample code is in C. Suppose I wish to work "only" at the kernel level of FreeBSD, would I have any use of knowledge of Graph algorithms? If not, I can be productive even by purchasing only the first volume, would save me money. Thank you, ~Mayuresh From owner-freebsd-questions@freebsd.org Wed Jun 19 10:04:22 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B162D15B309A for ; Wed, 19 Jun 2019 10:04:22 +0000 (UTC) (envelope-from 4250.10.freebsd-questions=freebsd.org@email-od.com) Received: from s1-b0c6.socketlabs.email-od.com (s1-b0c6.socketlabs.email-od.com [142.0.176.198]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id B0C1385D6D for ; Wed, 19 Jun 2019 10:04:21 +0000 (UTC) (envelope-from 4250.10.freebsd-questions=freebsd.org@email-od.com) DKIM-Signature: v=1; a=rsa-sha256; d=email-od.com;i=@email-od.com;s=dkim; c=relaxed/relaxed; q=dns/txt; t=1560938662; x=1563530662; h=content-transfer-encoding:content-type:mime-version:references:in-reply-to:message-id:subject:cc:to:from:date:x-thread-info; bh=kaBNX338vapA7x5F5IiJg+aZJHZT1Gr3mY9d+F/n4YE=; b=Hh0EcEPOy8N+K/9g/0aZnSaa0pOr1W8KeRtUV9kQ6KxQ5jvCrwqJ94ApU+8YH/klzl+325SQQObbu8KVIj7kcFizzdb6Fu2fq+3HHUPUlY+SEFQWDucAfLZeYrkKpvcCynZhqMePtG1O4PjzKn9U2shpTOh9gZno1pHPyZC4UEU= X-Thread-Info: NDI1MC4xMi4xYjMwMDAwMDExYjQ3MDEuZnJlZWJzZC1xdWVzdGlvbnM9ZnJlZWJzZC5vcmc= Received: from r5.us-east.aws.in.socketlabs.com (r5.us-east.aws.in.socketlabs.com [52.204.195.176]) by mxsg2.email-od.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Wed, 19 Jun 2019 05:04:09 -0400 Received: from smtp.lan.sohara.org (EMTPY [185.202.17.215]) by r5.us-east.aws.in.socketlabs.com with ESMTP(version=Tls12 cipher=Aes256 bits=256); Wed, 19 Jun 2019 05:04:09 -0400 Received: from [192.168.63.1] (helo=steve.lan.sohara.org) by smtp.lan.sohara.org with smtp (Exim 4.91 (FreeBSD)) (envelope-from ) id 1hdWVj-000JdI-ID; Wed, 19 Jun 2019 10:04:07 +0100 Date: Wed, 19 Jun 2019 10:04:07 +0100 From: Steve O'Hara-Smith To: mayuresh@kathe.in Cc: freebsd-questions@freebsd.org Subject: Re: How are modern processor instructions exposed to userland? Message-Id: <20190619100407.2e730ae147d87894e9479e23@sohara.org> In-Reply-To: <4b320042bd82ffe9b7793b62719d06f0@kathe.in> References: <4b320042bd82ffe9b7793b62719d06f0@kathe.in> X-Mailer: Sylpheed 3.7.0 (GTK+ 2.24.32; amd64-portbld-freebsd12.0) X-Clacks-Overhead: "GNU Terry Pratchett" Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: B0C1385D6D X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dkim=pass header.d=email-od.com header.s=dkim header.b=Hh0EcEPO; spf=pass (mx1.freebsd.org: domain of 4250.10.freebsd-questions=freebsd.org@email-od.com designates 142.0.176.198 as permitted sender) smtp.mailfrom=4250.10.freebsd-questions=freebsd.org@email-od.com X-Spamd-Result: default: False [-1.22 / 15.00]; R_SPF_ALLOW(-0.20)[+ip4:142.0.176.0/20]; MV_CASE(0.50)[]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[4]; DKIM_TRACE(0.00)[email-od.com:+]; RCPT_COUNT_TWO(0.00)[2]; MX_GOOD(-0.01)[mxbh.socketlabs.com,mxbsg.socketlabs.com]; FORGED_SENDER(0.00)[steve@sohara.org,4250.10.freebsd-questions=freebsd.org@email-od.com]; IP_SCORE(-0.21)[ip: (-0.57), ipnet: 142.0.176.0/22(-0.26), asn: 7381(-0.19), country: US(-0.06)]; SUBJECT_ENDS_QUESTION(1.00)[]; ASN(0.00)[asn:7381, ipnet:142.0.176.0/22, country:US]; MIME_TRACE(0.00)[0:+]; FROM_NEQ_ENVFROM(0.00)[steve@sohara.org,4250.10.freebsd-questions=freebsd.org@email-od.com]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.98)[-0.976,0]; R_DKIM_ALLOW(-0.20)[email-od.com:s=dkim]; MID_RHS_MATCH_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; NEURAL_HAM_SHORT(-0.02)[-0.023,0]; NEURAL_HAM_LONG(-0.99)[-0.992,0]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[sohara.org]; FORGED_SENDER_VERP_SRS(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[198.176.0.142.list.dnswl.org : 127.0.15.0]; ENVFROM_VERP(0.00)[]; RCVD_TLS_LAST(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 10:04:22 -0000 On Wed, 19 Jun 2019 11:58:23 +0530 Mayuresh Kathe wrote: > Hello, > > I have been wondering about this, and couldn't find an answer on the Web > because I didn't know what to search for. > > Let's think about the AVX-512 instruction introduced with the latest > Intel Core i9 Skylake-X processor. > I wanted to know how one could use such capabilities via regular C. The usual way that processor features get exposed is by being used in the implementation of low level routines. Depending on the application there may be run or compile time detection of CPU and choice of implementation (mplayer/mencoder offers both in its build). > There should be some way, someone working on the FreeBSD core who would > expose that instruction capability to the userland via libc, right? Not necessarily libc and not usually the instruction directly, but if it is worthwhile some functions may grow implementation versions based on the new instruction to be used when that CPU is available. Other approaches are used sometimes, for example the hardware crypto engine in some processors is exposed via a device with a fallback software implementation in the kernel. Kernel code and a user/kernel interface will be needed whenever the instruction is privileged. The principle is the same the new feature is used to conditionally implement an API for which there are fallback implementations for CPUs without the new feature. The fine details vary feature by feature. > If my assumption is correct, may I know who does that? And, how do they > go about doing it? Either by writing assembler that implements entry points with the C calling conventions or using the C extensions that allow embedded assembler. > Obviously, knowledge of x86-64 assembler would be a must, so would > knowledge of C89; right? Yep. -- Steve O'Hara-Smith From owner-freebsd-questions@freebsd.org Wed Jun 19 13:12:53 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 80A5D15B841A for ; Wed, 19 Jun 2019 13:12:53 +0000 (UTC) (envelope-from goia.i.alexandru@gmail.com) Received: from mail-vk1-xa41.google.com (mail-vk1-xa41.google.com [IPv6:2607:f8b0:4864:20::a41]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 7CE2C8C4D7 for ; Wed, 19 Jun 2019 13:12:52 +0000 (UTC) (envelope-from goia.i.alexandru@gmail.com) Received: by mail-vk1-xa41.google.com with SMTP id b64so447015vke.13 for ; Wed, 19 Jun 2019 06:12:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=/aJJZFrg+K5CVkBanGRGNs7bamFhNZJEp7cQs/FmOic=; b=TyMLfCV0eGDHiy12phYDqzho9iSkZ4+3aVf27G24RvdaTVFau72bcHhPXWyD2EUUFC OO3lGzEmXq/4IJG0ZOBgq0zEBQVykKM639ptsmvCHqjYWntt3prIVpUMa9Q10PqL2Cpv hRdfBjZoyH+eUeT2ZOf+33aWSbJbCBBlQvWZdR4qrfLVn+F5wR7/wL3IbHgOAoG3B+/+ Bwmc3Y8/rrL2xXm0Bvr+x9vn++lQfOjeh4R1dpfHPB84d//Nrbuc68xsLkCG/QYK1axK ASEV3zBwvg2g5OWn8LsRhHT0ShmOu9DsSKem06avkZI9qizpMpdkMqL7QtoW1K+twVC1 FH+Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=/aJJZFrg+K5CVkBanGRGNs7bamFhNZJEp7cQs/FmOic=; b=obNsvMglu5vVWsiVVfaw+1fYZAuthAbtSRFDilNjbwhp5Shx4jUhJ4hT338JbI5ei+ eTJo/ow0SleEw6bu8UjEbr4BUnU9hsmAZnk/wEQxvh8yoeOFIwSx1EOB6NOKc5JS7jzW aKXn8S5CfzoPtrxyNOh/4zd47FU1pCoHp5g1Hf10N/eMboWONXaXw47nfyg42qeCWoLi YjTuzuqQtQ7ghNH3o8Q2CUCadyjbNBW2EQrjYs5V+ek48EncLArkLpJGcx5AGM1jYAlF jfPOEFUHq2RtHM9sX2quYeSiU2rcYU2u+CK0yPYunurLb4+4akdjJs3RbjRTl/NSOLb1 bLJQ== X-Gm-Message-State: APjAAAX+a49B7ef3D5VoCsyiN5tI6Y/8VcsJNFWQtKViefUhKJUhg6bj 0XH4MxQZ49Qzrji2lq4jvOtEieNNuPhllSJWWRuw/+UTgHU= X-Google-Smtp-Source: APXvYqyad3z+VW70gfUAjd/kWrz12Ffl/bpUJYkaLGEtbo+4zf2q2zvAM5MRn1VeX0EbhZHPpa7AOuwTQWW+noaQh8o= X-Received: by 2002:a1f:50c1:: with SMTP id e184mr4467484vkb.86.1560949971696; Wed, 19 Jun 2019 06:12:51 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a67:7ad3:0:0:0:0:0 with HTTP; Wed, 19 Jun 2019 06:12:51 -0700 (PDT) From: Alexandru Goia Date: Wed, 19 Jun 2019 16:12:51 +0300 Message-ID: Subject: FreeBSD kernel system call To: freebsd-questions@freebsd.org Content-Type: text/plain; charset="UTF-8" X-Rspamd-Queue-Id: 7CE2C8C4D7 X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20161025 header.b=TyMLfCV0; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of goiaialexandru@gmail.com designates 2607:f8b0:4864:20::a41 as permitted sender) smtp.mailfrom=goiaialexandru@gmail.com X-Spamd-Result: default: False [-4.19 / 15.00]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; FREEMAIL_FROM(0.00)[gmail.com]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; DKIM_TRACE(0.00)[gmail.com:+]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; MX_GOOD(-0.01)[cached: alt3.gmail-smtp-in.l.google.com]; NEURAL_HAM_SHORT(-0.77)[-0.768,0]; FROM_EQ_ENVFROM(0.00)[]; RCVD_TLS_LAST(0.00)[]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; TAGGED_FROM(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com.dwl.dnswl.org : 127.0.5.0]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20161025]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; IP_SCORE(-0.42)[ip: (3.42), ipnet: 2607:f8b0::/32(-3.13), asn: 15169(-2.30), country: US(-0.06)]; RCVD_IN_DNSWL_NONE(0.00)[1.4.a.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.list.dnswl.org : 127.0.5.0] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 13:12:53 -0000 Greetings ! I am trying to write the code to a Unix system call, on the FreeBSD 12.0 system. I managed to do that on Linux : http://romania-acknowledges-stars.blogspot.com/2018/10/angel-call-in-kernel.html but I find hard, without proper documentation, to implement it on FreeBSD. I am in trouble understanding the presence of SYSCALL_MODULE(9), and its meaning and usage. Please help. Thank you. Alexander Goia From owner-freebsd-questions@freebsd.org Wed Jun 19 13:48:45 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A131915B9495 for ; Wed, 19 Jun 2019 13:48:45 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from kicp.uchicago.edu (kicp.uchicago.edu [128.135.20.70]) by mx1.freebsd.org (Postfix) with ESMTP id B79568DC4E for ; Wed, 19 Jun 2019 13:48:44 +0000 (UTC) (envelope-from galtsev@kicp.uchicago.edu) Received: from point.uchicago.edu (point.uchicago.edu [128.135.52.6]) by kicp.uchicago.edu (Postfix) with ESMTP id 4473C718047 for ; Wed, 19 Jun 2019 08:48:38 -0500 (CDT) Subject: Re: CVE-2019-5599 SACK Slowness (FreeBSD 12 using the RACK TCP Stack) To: freebsd-questions@freebsd.org References: <20190618235535.GY32970@gmail.com> <20190619000655.2gde4u5i5ter5exu@mutt-hbsd> From: Valeri Galtsev Message-ID: <0573e9a2-87db-bc14-c616-144c0213b536@kicp.uchicago.edu> Date: Wed, 19 Jun 2019 08:48:38 -0500 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:60.0) Gecko/20100101 Thunderbird/60.7.0 MIME-Version: 1.0 In-Reply-To: <20190619000655.2gde4u5i5ter5exu@mutt-hbsd> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: B79568DC4E X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dmarc=fail reason="" header.from=uchicago.edu (policy=none) X-Spamd-Result: default: False [-1.19 / 15.00]; TO_DN_NONE(0.00)[]; MX_GOOD(-0.01)[kicp.uchicago.edu]; RCVD_NO_TLS_LAST(0.10)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:160, ipnet:128.135.0.0/16, country:US]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.91)[-0.915,0]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-0.66)[-0.662,0]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; IP_SCORE(-0.01)[country: US(-0.06)]; NEURAL_SPAM_SHORT(0.31)[0.313,0]; RCVD_IN_DNSWL_NONE(0.00)[70.20.135.128.list.dnswl.org : 127.0.10.0]; R_SPF_NA(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; DMARC_POLICY_SOFTFAIL(0.10)[uchicago.edu : No valid SPF, No valid DKIM,none] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 13:48:45 -0000 On 2019-06-18 19:06, Shawn Webb wrote: > On Tue, Jun 18, 2019 at 04:55:35PM -0700, Gordon Tetlow wrote: >> On Tue, Jun 18, 2019 at 05:34:32PM -0400, grarpamp wrote: >>> https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md >>> https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5599 >>> NFLX-2019-001 >>> >>> Date Entry Created: 20190107 >>> Preallocated to nothing? >>> Or witheld under irresponsible disclosure thus keeping >>> users vulnerable to leaks, parallel discovery, and exploit >>> for at least five months more than necessary, and >>> unaware thus unable to consider potential local mitigations? >> >> Other than the inappropriate tone, there is a reasonable question here. >> MITRE allocates blocks of CVEs to FreeBSD as a CNA. We can then decide >> when to assign and disclose them. The 2019-01-07 date is when MITRE >> allocated a block of CVEs to FreeBSD, not when they are assigned to an >> issue. We generally get a block in the beginning of each year. >> >> If you would like to have an actual discussion around disclosure >> policies, I'm happy to have one, but by your tone above, I don't think >> there is any reason to do so. It seems unlikely you are open to >> debate in a fashion that would be productive. > > Hey Gordon, > > Thank you for your reply, and especially for the respectful tone. I > hope to drive a further positive discussion in the goal of enhanced > transparency. > > It appears that Netflix's advisory (as of this writing) does not > include a timeline of events. Would FreeBSD be able to provide its > event timeline with regards to CVE-2019-5599? I am not commenting on other details of this thread, and talking here for myself, not for FreeBSD project. This is "backwards" thinking. It is a responsibility of clone projects to follow all details of master project, not the responsibility of FreeBSD to notify any of clones, whom FreeBSD project didn't request to clone FreeBSD in the first place. Just my $0.02 Valeri > > Were any FreeBSD derivatives given advanced notice? If so, which ones? > > Thanks for your time, resources, and continued correspondence. > > Thanks again, > -- ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++ From owner-freebsd-questions@freebsd.org Wed Jun 19 14:21:55 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D9ABF15BA4B5 for ; Wed, 19 Jun 2019 14:21:55 +0000 (UTC) (envelope-from cyberleo@cyberleo.net) Received: from mail.cyberleo.net (paka.cyberleo.net [IPv6:2605:3e00::d8e2:80b4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 98F4C8F18F for ; Wed, 19 Jun 2019 14:21:54 +0000 (UTC) (envelope-from cyberleo@cyberleo.net) Received: from [IPv6:2001:470:c032:102d:34f3:caff:fe4e:b829] (unknown [IPv6:2001:470:c032:102d:34f3:caff:fe4e:b829]) by mail.cyberleo.net (Postfix) with ESMTPSA id 3D57E82070; Wed, 19 Jun 2019 10:21:52 -0400 (EDT) Subject: Re: Eliminating IPv6 (?) To: FreeBSD Questions References: <23905.1560888828@segfault.tristatelogic.com> From: CyberLeo Kitsana Cc: "Ronald F. Guilmette" Message-ID: <3aaa4159-38cf-3de0-b0b3-22fe12f14a60@cyberleo.net> Date: Wed, 19 Jun 2019 09:21:49 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.6.1 MIME-Version: 1.0 In-Reply-To: <23905.1560888828@segfault.tristatelogic.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-GB Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 98F4C8F18F X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dmarc=pass (policy=none) header.from=cyberleo.net; spf=pass (mx1.freebsd.org: domain of cyberleo@cyberleo.net designates 2605:3e00::d8e2:80b4 as permitted sender) smtp.mailfrom=cyberleo@cyberleo.net X-Spamd-Result: default: False [-3.19 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; RCVD_TLS_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2605:3e00::d8e2:80b4]; NEURAL_HAM_LONG(-1.00)[-0.996,0]; MIME_GOOD(-0.10)[text/plain]; IP_SCORE(0.09)[ipnet: 2000::/3(-0.26), asn: 12874(0.65), country: IT(0.05)]; NEURAL_HAM_MEDIUM(-0.99)[-0.994,0]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; MX_GOOD(-0.01)[mail.cyberleo.net]; RCPT_COUNT_TWO(0.00)[2]; DMARC_POLICY_ALLOW(-0.50)[cyberleo.net,none]; NEURAL_HAM_SHORT(-0.48)[-0.479,0]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:12874, ipnet:2000::/3, country:IT]; MID_RHS_MATCH_FROM(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 14:21:56 -0000 On 6/18/19 3:13 PM, Ronald F. Guilmette wrote: > function within /etc/rc.firewall however, I do question the wisdom of > the following two lines, in particular: > > ${fwcmd} add 200 deny all from any to 127.0.0.0/8 > ${fwcmd} add 300 deny ip from 127.0.0.0/8 to any ipfw is a first-match firewall: the first rule encountered that matches is applied, and the remainder are ignored. With this in mind, the two rules quoted make sense only in tandem with the rule before them: ${fwcmd} add 100 pass all from any to any via lo0 The first rule passes all packets on the local interface, including any packets with an address in 127/8, and ignores all the following rules. The next two rules block all packets with addresses within 127/8 on all interfaces. These rules combined will block packets with 127/8 addresses on non-local interfaces, where that address has no business being in the first place. The rationale is that 127/8 addresses should not appear on the network, but blindly trusting that they never will can open an avenue for remote attack of services that assume the same. -- Fuzzy love, -CyberLeo Technical Administrator CyberLeo.Net Webhosting http://www.CyberLeo.Net Element9 Communications http://www.Element9.net Furry Peace! - http://www.fur.com/peace/ From owner-freebsd-questions@freebsd.org Wed Jun 19 15:35:27 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D127915BC351; Wed, 19 Jun 2019 15:35:26 +0000 (UTC) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: from gndrsh.dnsmgr.net (br1.CN84in.dnsmgr.net [69.59.192.140]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 01AE26B3EA; Wed, 19 Jun 2019 15:35:25 +0000 (UTC) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: from gndrsh.dnsmgr.net (localhost [127.0.0.1]) by gndrsh.dnsmgr.net (8.13.3/8.13.3) with ESMTP id x5JFZNPX018746; Wed, 19 Jun 2019 08:35:23 -0700 (PDT) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: (from freebsd-rwg@localhost) by gndrsh.dnsmgr.net (8.13.3/8.13.3/Submit) id x5JFZNMo018745; Wed, 19 Jun 2019 08:35:23 -0700 (PDT) (envelope-from freebsd-rwg) From: "Rodney W. Grimes" Message-Id: <201906191535.x5JFZNMo018745@gndrsh.dnsmgr.net> Subject: Re: Eliminating IPv6 (?) In-Reply-To: <6975.1560827403@segfault.tristatelogic.com> To: "Ronald F. Guilmette" Date: Wed, 19 Jun 2019 08:35:23 -0700 (PDT) CC: freebsd-questions@freebsd.org, freebsd-net@freebsd.org X-Mailer: ELM [version 2.4ME+ PL121h (25)] MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII X-Rspamd-Queue-Id: 01AE26B3EA X-Spamd-Bar: ++ Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [2.63 / 15.00]; ARC_NA(0.00)[]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; TO_DN_SOME(0.00)[]; IP_SCORE(0.04)[ip: (0.15), ipnet: 69.59.192.0/19(0.07), asn: 13868(0.05), country: US(-0.06)]; MIME_GOOD(-0.10)[text/plain]; RCVD_TLS_LAST(0.00)[]; DMARC_NA(0.00)[dnsmgr.net]; AUTH_NA(1.00)[]; NEURAL_SPAM_MEDIUM(0.55)[0.555,0]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_SOME(0.00)[]; NEURAL_SPAM_SHORT(0.18)[0.179,0]; MX_GOOD(-0.01)[cached: gndrsh.dnsmgr.net]; NEURAL_SPAM_LONG(0.97)[0.965,0]; R_SPF_NA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:13868, ipnet:69.59.192.0/19, country:US]; MID_RHS_MATCH_FROM(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 15:35:27 -0000 > I do not wish to begin any religious war here. I understand that IPv6 > can be a sensitive and sometimes even emotional issue for many people. > Speaking only for myself, and only for the present moment, I can say > that for me, IPv6 represents only an annoyance and a very sizable > distraction. At present, I don't use it and have absolutely no need > to do so. I would thus like to simplify my life by eliminating it from > my (12.0-RELEASE) system, so that I won't even have to think about it, > or wonder about it, e.g. when I am configuring my firewall, my daemons, > etc. > > I have tried searching for instructions on how to do this online, but > the suggestions and recommendations for how to do this vary widely. > There does not seem to be any "standard" set of recommendations for > how to simply turn off all IPv6 for a given system, short of rebuilding > the kernel, from scratch, with proper options to eliminate IPv6 support > in the kernel entirely. > > I finally settled on trying to add the following options to my /etc/rc.conf > file: > > ipv6_network_interfaces="none" > ip6addrctl_enable="NO" > ip6addrctl_policy="ipv4_prefer" > ipv6_activate_all_interfaces="NO" > > These seem to have worked only marginally. > > After a fresh reboot, my loopback interface (lo0) for example is still > configured to have -both- IPv4 -and- IPv6 addresses... and routes... > associated with it. > > How can I turn off IPv6 entirely without rebuilding the kernel? I too do not need IPv6 in many many many places, and this is the option I choose to disable it, a kernel recompile is the only complete and effective "knob" to get IPV6 out of your system. Once it is gone from the kernel all the other stuff recognises this and just deals with it without any other tweaking. > Regards, > rfg > > > P.S. Please, please, please, refrain from giving me a sermon about how > I am an idiot and/or about how IPv6 is going to save mankind and/or the > galaxy as we know it. I am pro choice, and I don't really wish to have > IPv6 rammed down my throat before I am ready to swallow. I don't need it, > don't use it, and for me, life is much simpler without it for now. No sermon here, I fully support your position, and am very glad to see that bz@ continues to assert that we need to maintain the INET and INET6 compile options (for some day we may be able to remove V4, but it also has the added benifit in that we can build V4 only, v6 only, or (insert your prefered higher power) forbid, no INET at all! -- Rod Grimes rgrimes@freebsd.org From owner-freebsd-questions@freebsd.org Wed Jun 19 15:42:32 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C325E15BC879; Wed, 19 Jun 2019 15:42:32 +0000 (UTC) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: from gndrsh.dnsmgr.net (br1.CN84in.dnsmgr.net [69.59.192.140]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 02BD46BA68; Wed, 19 Jun 2019 15:42:31 +0000 (UTC) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: from gndrsh.dnsmgr.net (localhost [127.0.0.1]) by gndrsh.dnsmgr.net (8.13.3/8.13.3) with ESMTP id x5JFgSIS018771; Wed, 19 Jun 2019 08:42:28 -0700 (PDT) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: (from freebsd-rwg@localhost) by gndrsh.dnsmgr.net (8.13.3/8.13.3/Submit) id x5JFgQQ2018770; Wed, 19 Jun 2019 08:42:26 -0700 (PDT) (envelope-from freebsd-rwg) From: "Rodney W. Grimes" Message-Id: <201906191542.x5JFgQQ2018770@gndrsh.dnsmgr.net> Subject: Re: Eliminating IPv6 (?) In-Reply-To: To: Eugene Grosbein Date: Wed, 19 Jun 2019 08:42:26 -0700 (PDT) CC: "Ronald F. Guilmette" , freebsd-questions@freebsd.org, freebsd-net@freebsd.org X-Mailer: ELM [version 2.4ME+ PL121h (25)] MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII X-Rspamd-Queue-Id: 02BD46BA68 X-Spamd-Bar: ++ Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [2.33 / 15.00]; ARC_NA(0.00)[]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[4]; TO_DN_SOME(0.00)[]; IP_SCORE(0.04)[ip: (0.15), ipnet: 69.59.192.0/19(0.07), asn: 13868(0.05), country: US(-0.06)]; MIME_GOOD(-0.10)[text/plain]; RCVD_TLS_LAST(0.00)[]; DMARC_NA(0.00)[dnsmgr.net]; AUTH_NA(1.00)[]; NEURAL_SPAM_MEDIUM(0.54)[0.544,0]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_SOME(0.00)[]; MX_GOOD(-0.01)[cached: gndrsh.dnsmgr.net]; NEURAL_SPAM_LONG(0.94)[0.942,0]; NEURAL_HAM_SHORT(-0.09)[-0.086,0]; R_SPF_NA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:13868, ipnet:69.59.192.0/19, country:US]; MID_RHS_MATCH_FROM(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 15:42:32 -0000 > 18.06.2019 10:10, Ronald F. Guilmette wrote: > > > How can I turn off IPv6 entirely without rebuilding the kernel? > > You cannot. GENERIC kernel specifically enables IPv6 support and you need to disable it at compile time. > And if you do, you better rebuild the world too using WITHOUT_INET6=yes in the /etc/src.conf > or else some utilities compiled with INET6 by default will query kernel > for IPv6-specific data (like routing entries) and complain that your kernel does not know about it. I have not seen these issues, can you give a specific example that fails? A netstat -rn on a v4 only kernel simple reports the v4 table, and iirc a netstat -rn6 returns a "Protocol not supported error" as should all other things. > World built WITHOUT_INET6 has no such rough edges. I find that actually causes me more issues, as then my netstat -rn6 returns a hard error due to: case '6': #ifdef INET6 af = AF_INET6; #else errx(1, "IPv6 support is not compiled in"); #endif -- Rod Grimes rgrimes@freebsd.org From owner-freebsd-questions@freebsd.org Wed Jun 19 16:10:11 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 3169215BD3DA; Wed, 19 Jun 2019 16:10:11 +0000 (UTC) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: from gndrsh.dnsmgr.net (br1.CN84in.dnsmgr.net [69.59.192.140]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4899D6C817; Wed, 19 Jun 2019 16:10:10 +0000 (UTC) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: from gndrsh.dnsmgr.net (localhost [127.0.0.1]) by gndrsh.dnsmgr.net (8.13.3/8.13.3) with ESMTP id x5JGA7jT018858; Wed, 19 Jun 2019 09:10:07 -0700 (PDT) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: (from freebsd-rwg@localhost) by gndrsh.dnsmgr.net (8.13.3/8.13.3/Submit) id x5JGA7Ep018857; Wed, 19 Jun 2019 09:10:07 -0700 (PDT) (envelope-from freebsd-rwg) From: "Rodney W. Grimes" Message-Id: <201906191610.x5JGA7Ep018857@gndrsh.dnsmgr.net> Subject: Re: Eliminating IPv6 (?) In-Reply-To: <23511.1560884385@segfault.tristatelogic.com> To: "Ronald F. Guilmette" Date: Wed, 19 Jun 2019 09:10:07 -0700 (PDT) CC: freebsd-net@freebsd.org, freebsd-questions@freebsd.org X-Mailer: ELM [version 2.4ME+ PL121h (25)] MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII X-Rspamd-Queue-Id: 4899D6C817 X-Spamd-Bar: ++ Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [2.57 / 15.00]; ARC_NA(0.00)[]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; TO_DN_SOME(0.00)[]; IP_SCORE(0.04)[ip: (0.15), ipnet: 69.59.192.0/19(0.07), asn: 13868(0.05), country: US(-0.06)]; MIME_GOOD(-0.10)[text/plain]; RCVD_TLS_LAST(0.00)[]; DMARC_NA(0.00)[dnsmgr.net]; AUTH_NA(1.00)[]; NEURAL_SPAM_MEDIUM(0.22)[0.216,0]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_SOME(0.00)[]; NEURAL_SPAM_SHORT(0.54)[0.537,0]; MX_GOOD(-0.01)[cached: gndrsh.dnsmgr.net]; NEURAL_SPAM_LONG(0.89)[0.887,0]; R_SPF_NA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:13868, ipnet:69.59.192.0/19, country:US]; MID_RHS_MATCH_FROM(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 16:10:11 -0000 > In message <23816.53518.998090.665606@jerusalem.litteratus.org>, > Robert Huff wrote: > > >> Actually, no, that's not how one is supposed to enable one's own set > >> of ipfw ules. To do that, the Handbook (Sec. 30.4.1) says very clearly > >> that one should do: > >> > >> firewall_enable="YES" > >> firewall_type="path-to-my-rules-file" > >> > >> But I'm glad you brought it up. The funny thing is that even that > >> doesn't work properly nowadays *or* like it used to in the past. > > > > If this is true - haven't checked personally - then it's a bug. > >(And a non-trivial one, the fact you're the first to report it > >notwithstanding.) > > Can you please open a bug report? > > I aim to please. As requested: > > https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=238694 Thank you. -- Rod Grimes rgrimes@freebsd.org From owner-freebsd-questions@freebsd.org Wed Jun 19 16:15:18 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5E4EB15BD916; Wed, 19 Jun 2019 16:15:18 +0000 (UTC) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: from gndrsh.dnsmgr.net (br1.CN84in.dnsmgr.net [69.59.192.140]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 888EA6CE6D; Wed, 19 Jun 2019 16:15:17 +0000 (UTC) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: from gndrsh.dnsmgr.net (localhost [127.0.0.1]) by gndrsh.dnsmgr.net (8.13.3/8.13.3) with ESMTP id x5JGFFfJ018891; Wed, 19 Jun 2019 09:15:15 -0700 (PDT) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: (from freebsd-rwg@localhost) by gndrsh.dnsmgr.net (8.13.3/8.13.3/Submit) id x5JGFFt7018890; Wed, 19 Jun 2019 09:15:15 -0700 (PDT) (envelope-from freebsd-rwg) From: "Rodney W. Grimes" Message-Id: <201906191615.x5JGFFt7018890@gndrsh.dnsmgr.net> Subject: Re: Eliminating IPv6 (?) In-Reply-To: <24170.1560891451@segfault.tristatelogic.com> To: "Ronald F. Guilmette" Date: Wed, 19 Jun 2019 09:15:15 -0700 (PDT) CC: freebsd-net , FreeBSD Questions Mailing List X-Mailer: ELM [version 2.4ME+ PL121h (25)] MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII X-Rspamd-Queue-Id: 888EA6CE6D X-Spamd-Bar: ++ Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [2.60 / 15.00]; ARC_NA(0.00)[]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; NEURAL_SPAM_SHORT(0.53)[0.528,0]; IP_SCORE(0.04)[ip: (0.14), ipnet: 69.59.192.0/19(0.07), asn: 13868(0.05), country: US(-0.06)]; MIME_GOOD(-0.10)[text/plain]; RCVD_TLS_LAST(0.00)[]; DMARC_NA(0.00)[dnsmgr.net]; AUTH_NA(1.00)[]; NEURAL_SPAM_MEDIUM(0.25)[0.246,0]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; MX_GOOD(-0.01)[cached: gndrsh.dnsmgr.net]; NEURAL_SPAM_LONG(0.90)[0.896,0]; R_SPF_NA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:13868, ipnet:69.59.192.0/19, country:US]; MID_RHS_MATCH_FROM(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 16:15:18 -0000 > In message > Freddie Cash wrote: > > >For someone who doesn't want to be preached to about the benefits of IPv6, > >you certainly do a lot of preaching about not wanting IPv6. :) > > Guilty as charged. > > >You've been given the tools to do exactly what you want: > > - comment out IPv6 support in the kernel config file > > - add WITHOUT_IPV6=yes to /etc/src.conf > > - rebuild the world and kernel > > > >Voila! A version of FreeBSD made especially for you, without any traces of > >IPv6. Does exactly what you want. Why the long diatribe asking for > >something else once you've been shown how to do what you want? > > Rebuild kernel+world is not exactly a quick solution. Agreed. And I only recommend rebuilding the kernel, one of my motivations for that is besides not needing the v6 on a log of stuff is it reduces both wasted code size, and some security concerns. > And god only knows how much will break once I've done that. How many other > people have tested -all- of the resulting binaries, seriously, on actual > production systems? (I may be the first one ever, at least for 12.0.) I also agree here, running a WITHOUT_IPV6 userland is both very painful to get built AND has issues that one does not need to face, like I showed in another thread about netstat -6. > But this is all besides the point anyway. I am now resigned to my fate, > and I am already up to the fifth stage of grief with respect to this issue. > > https://en.wikipedia.org/wiki/K%C3%BCbler-Ross_model > > > Regards, > rfg -- Rod Grimes rgrimes@freebsd.org From owner-freebsd-questions@freebsd.org Wed Jun 19 16:18:15 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B7D1415BDAEC; Wed, 19 Jun 2019 16:18:15 +0000 (UTC) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: from gndrsh.dnsmgr.net (br1.CN84in.dnsmgr.net [69.59.192.140]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id E96206CFE6; Wed, 19 Jun 2019 16:18:14 +0000 (UTC) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: from gndrsh.dnsmgr.net (localhost [127.0.0.1]) by gndrsh.dnsmgr.net (8.13.3/8.13.3) with ESMTP id x5JGIDPV018901; Wed, 19 Jun 2019 09:18:13 -0700 (PDT) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: (from freebsd-rwg@localhost) by gndrsh.dnsmgr.net (8.13.3/8.13.3/Submit) id x5JGIDWa018900; Wed, 19 Jun 2019 09:18:13 -0700 (PDT) (envelope-from freebsd-rwg) From: "Rodney W. Grimes" Message-Id: <201906191618.x5JGIDWa018900@gndrsh.dnsmgr.net> Subject: Re: Eliminating IPv6 (?) In-Reply-To: <2cd79858-66a6-dedb-19b8-697d220c9986@grosbein.net> To: Eugene Grosbein Date: Wed, 19 Jun 2019 09:18:13 -0700 (PDT) CC: "Ronald F. Guilmette" , freebsd-net , FreeBSD Questions Mailing List X-Mailer: ELM [version 2.4ME+ PL121h (25)] MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII X-Rspamd-Queue-Id: E96206CFE6 X-Spamd-Bar: ++ Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [2.81 / 15.00]; ARC_NA(0.00)[]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[4]; NEURAL_SPAM_SHORT(0.39)[0.388,0]; IP_SCORE(0.04)[ip: (0.14), ipnet: 69.59.192.0/19(0.07), asn: 13868(0.05), country: US(-0.06)]; MIME_GOOD(-0.10)[text/plain]; RCVD_TLS_LAST(0.00)[]; DMARC_NA(0.00)[dnsmgr.net]; AUTH_NA(1.00)[]; NEURAL_SPAM_MEDIUM(0.53)[0.533,0]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; MX_GOOD(-0.01)[cached: gndrsh.dnsmgr.net]; NEURAL_SPAM_LONG(0.96)[0.960,0]; R_SPF_NA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:13868, ipnet:69.59.192.0/19, country:US]; MID_RHS_MATCH_FROM(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 16:18:15 -0000 > 19.06.2019 3:57, Ronald F. Guilmette wrote: > > > And god only knows how much will break once I've done that. > > IPv6 will break only. That is incorrect, scripts that would silently do nothing can now infact fail, trust me, first hand experience. This can have consequences beyong "IPv6 will break only". > > How many other > > people have tested -all- of the resulting binaries, seriously, on actual > > production systems? (I may be the first one ever, at least for 12.0.) > > I ran plenty of hosts with IPv6 disabled this way and no problems observed, but this pre-dates 12.0. I've not run a userland without V6 in a long time once I started to have issues with some things. -- Rod Grimes rgrimes@freebsd.org From owner-freebsd-questions@freebsd.org Wed Jun 19 17:36:31 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7379815C272F for ; Wed, 19 Jun 2019 17:36:31 +0000 (UTC) (envelope-from exoflux@posteo.net) Received: from mout01.posteo.de (mout01.posteo.de [185.67.36.65]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "*.posteo.de", Issuer "StartCom Class 3 Primary Intermediate Server CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 18580720E8 for ; Wed, 19 Jun 2019 17:36:29 +0000 (UTC) (envelope-from exoflux@posteo.net) Received: from submission (posteo.de [89.146.220.130]) by mout01.posteo.de (Postfix) with ESMTPS id DBA23160061 for ; Wed, 19 Jun 2019 19:36:21 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=posteo.net; s=2017; t=1560965781; bh=4nz2dADYBhFJJa7b/746IwZfUO7usWNNxy4AEIim+XA=; h=Date:From:To:Subject:From; b=MaqN1x6S/XBEu2UObWEJIvHGpSFJnyWyU1LWmYKDZy+qronbNXT+/I3jumcSbmqbv RJyFRtvxGwvo+vRuV+p4fhsJU4uoMmSrm9FTRxzTgmmoRw2oMHjAaourzWEOleFFlK S+AZwvCuakgSS0mBy77insGY3OLZCqakdWTBgWWVvviVZY0WbefBaT4t9g7jEfhQpA x5tZlk0mgCRxiqJfm67HO0Yco1r3oBrJJtuhSTJcyTq82rvAIwJEzidJzeQNC/zpdA 7R2121bZ8d22IZsg8fGgZW9dGVFH9KChQDfM/yL5DFJ1TI8xW/OpgInM1pgPqCIlkg vD5z1vUqCEJuQ== Received: from customer (localhost [127.0.0.1]) by submission (posteo.de) with ESMTPSA id 45TXDj0ngKz6tmM for ; Wed, 19 Jun 2019 19:36:21 +0200 (CEST) Date: Wed, 19 Jun 2019 19:36:18 +0200 From: "Matthias R." To: freebsd-questions@freebsd.org Subject: thoughts aftRe: silent disk drive Message-ID: <20190619173618.GA38102@exoflux.speedport.ip> References: <20190615000134.GA31519@exoflux.speedport.ip> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20190615000134.GA31519@exoflux.speedport.ip> User-Agent: Mutt/1.11.3 (2019-02-01) X-Rspamd-Queue-Id: 18580720E8 X-Spamd-Bar: ------ Authentication-Results: mx1.freebsd.org; dkim=pass header.d=posteo.net header.s=2017 header.b=MaqN1x6S; dmarc=pass (policy=none) header.from=posteo.net; spf=pass (mx1.freebsd.org: domain of exoflux@posteo.net designates 185.67.36.65 as permitted sender) smtp.mailfrom=exoflux@posteo.net X-Spamd-Result: default: False [-6.48 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_DKIM_ALLOW(-0.20)[posteo.net:s=2017]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:185.67.36.0/23]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; TO_DN_NONE(0.00)[]; RCVD_DKIM_ARC_DNSWL_MED(-0.50)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; RCVD_COUNT_THREE(0.00)[3]; MX_GOOD(-0.01)[mx03.posteo.de,mx01.posteo.de,mx04.posteo.de,mx03.posteo.de,mx01.posteo.de,mx04.posteo.de,mx03.posteo.de,mx01.posteo.de,mx04.posteo.de]; DKIM_TRACE(0.00)[posteo.net:+]; DMARC_POLICY_ALLOW(-0.50)[posteo.net,none]; RCVD_IN_DNSWL_MED(-0.20)[65.36.67.185.list.dnswl.org : 127.0.3.2]; NEURAL_HAM_SHORT(-0.98)[-0.982,0]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; IP_SCORE(-1.79)[ipnet: 185.67.36.0/23(-4.96), asn: 8495(-3.96), country: DE(-0.01)]; ASN(0.00)[asn:8495, ipnet:185.67.36.0/23, country:DE]; RCVD_TLS_ALL(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 17:36:31 -0000 Hello, Thank You for Your recommendations here! I was gambling with camcontrol, but with your tip to look into Top -St I found cam and syncer coming up again frequently. I found sysctl and did kern.cam.ada.default_timeout: 30 -> 300 and gave my On Sat, Jun 15, 2019 at 02:01:34AM +0200, Matthias R. wrote: > camcontrol sleep ada0 again Wow, the effect is marvelous! I have time to read with the hard drive spinned down for a hole lot longer... well of course, nothing else can be done in the meantime really, so probably there some sofisticated methods out there. On some other machine years ago... ... I remember having set up a ramdisk to the spare hard disk access, but for now I am satisfied. > > greet > Matthias > From owner-freebsd-questions@freebsd.org Wed Jun 19 18:43:49 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 47D1815C686E for ; Wed, 19 Jun 2019 18:43:49 +0000 (UTC) (envelope-from merlyn@geeks.org) Received: from mail.geeks.org (mail.geeks.org [IPv6:2001:4980:3333:1::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id C0DD1758A4 for ; Wed, 19 Jun 2019 18:43:48 +0000 (UTC) (envelope-from merlyn@geeks.org) Received: from mail.geeks.org (localhost [127.0.0.1]) by after-clamsmtpd.geeks.org (Postfix) with ESMTP id 27766110219 for ; Wed, 19 Jun 2019 13:43:47 -0500 (CDT) Received: by mail.geeks.org (Postfix, from userid 1003) id 06E3C110209; Wed, 19 Jun 2019 13:43:47 -0500 (CDT) Date: Wed, 19 Jun 2019 13:43:47 -0500 From: Doug McIntyre To: freebsd-questions@freebsd.org Subject: Re: IPFW redirect to another port? Message-ID: <20190619184346.GA34759@geeks.org> References: <20190618165028.83C662015F9118@ary.qy> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20190618165028.83C662015F9118@ary.qy> User-Agent: Mutt/1.10.1 (2018-07-13) X-Virus-Scanned: ClamAV using ClamSMTP X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 18:43:49 -0000 On Tue, Jun 18, 2019 at 12:50:27PM -0400, John Levine wrote: > I would like to use ipfw to redirect incoming port 53 requests from a > few IP addresses to a different port, so I can use a custom DNS server > to answer them. I can figure out how to redirect their traffic to, > say, port 5553, but the responses come from 5553 which of course > doesn't work. > > Any suggestions about how to adjust the port numbers going both ways? It's > fine if they screw up other traffic to those IPs. TIA. I would approach this differently. I'd install dns/dnsdist to listen on port 53, and then with backends out to your custom DNS server on port 5553. From owner-freebsd-questions@freebsd.org Wed Jun 19 19:32:01 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A7F8F15C7A63 for ; Wed, 19 Jun 2019 19:32:01 +0000 (UTC) (envelope-from roberthuff@rcn.com) Received: from smtp.rcn.com (smtp.rcn.com [69.168.97.78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id B20EA770B9 for ; Wed, 19 Jun 2019 19:32:00 +0000 (UTC) (envelope-from roberthuff@rcn.com) DKIM-Signature: v=1; a=rsa-sha1; d=rcn.com; s=20180516; c=relaxed/simple; q=dns/txt; i=@rcn.com; t=1560972714; h=From:Subject:Date:To:MIME-Version:Content-Type; bh=lpikcxxBYFhoqZyK9+oyxwl4SFg=; b=MVRKKR3z6BJ8tlQBW1NtQTPPG+Up3MFXd2gt0V42HHNnyIkoSvKVxz4dMDkig6UW u4BLyxLVxOQ9l2bKkErc94u1jkK5O0fXbExfRAWEKO7qkUYasjZJ+5l85sGWKRoq bdR8GxYm3IuiBHhHNw4Kw93FurKo37m1y5bcvVAlR9tamq3h8ZzGo+a+FGnuOb0m mfHisOBuTMuKA4awaRpUJa+KXj6YTumXIe/KfJokQ1pHyXUMhynR+2LPgQoeJmfR wIJRVj6W6yGj6CTL9VNWTbtlGJCOQsCXU8P16N58i06FxfVehMHWKY46AdVEpeI6 qc7U6Odp8poWp3UTTl6jXQ==; X_CMAE_Category: , , X-CNFS-Analysis: v=2.2 cv=buYOPwSi c=1 sm=1 tr=0 a=9TgA2UwI6Wy+6BV4wQM/cQ==:117 a=9TgA2UwI6Wy+6BV4wQM/cQ==:17 a=jpOVt7BSZ2e4Z31A5e1TngXxSK0=:19 a=KGjhK52YXX0A:10 a=kj9zAlcOel0A:10 a=XRQyMpdBKAEA:10 a=dq6fvYVFJ5YA:10 a=48faUk6PgeAA:10 a=J0chH1O8E8NaSzgytHsA:9 a=CjuIK1q_8ugA:10 X-CM-Score: 0 X-Scanned-by: Cloudmark Authority Engine X-Authed-Username: cm9iZXJ0aHVmZkByY24uY29t Authentication-Results: smtp01.rcn.cmh.synacor.com smtp.mail=roberthuff@rcn.com; spf=softfail; sender-id=softfail Authentication-Results: smtp01.rcn.cmh.synacor.com smtp.user=roberthuff; auth=pass (PLAIN) Received: from [209.6.230.48] ([209.6.230.48:57221] helo=jerusalem.litteratus.org.litteratus.org) by smtp.rcn.com (envelope-from ) (ecelerity 3.6.25.56547 r(Core:3.6.25.0)) with ESMTPSA (cipher=AES256-GCM-SHA384) id C7/67-36753-AAD8A0D5; Wed, 19 Jun 2019 15:31:54 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <23818.36263.312034.714296@jerusalem.litteratus.org> Date: Wed, 19 Jun 2019 15:31:51 -0400 From: Robert Huff To: "Rodney W. Grimes" Cc: "Ronald F. Guilmette" , freebsd-net , FreeBSD Questions Mailing List Subject: Re: Eliminating IPv6 (?) In-Reply-To: <201906191615.x5JGFFt7018890@gndrsh.dnsmgr.net> References: <24170.1560891451@segfault.tristatelogic.com> <201906191615.x5JGFFt7018890@gndrsh.dnsmgr.net> X-Mailer: VM 8.2.0b under 26.2 (amd64-portbld-freebsd13.0) X-Rspamd-Queue-Id: B20EA770B9 X-Spamd-Bar: ------- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=rcn.com header.s=20180516 header.b=MVRKKR3z; dmarc=pass (policy=none) header.from=rcn.com; spf=pass (mx1.freebsd.org: domain of roberthuff@rcn.com designates 69.168.97.78 as permitted sender) smtp.mailfrom=roberthuff@rcn.com X-Spamd-Result: default: False [-7.86 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_DKIM_ALLOW(-0.20)[rcn.com:s=20180516]; RCVD_TLS_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[4]; R_SPF_ALLOW(-0.20)[+ip4:69.168.97.0/24]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; IP_SCORE(-2.76)[ip: (-9.28), ipnet: 69.168.97.0/24(-4.58), asn: 36271(0.10), country: US(-0.06)]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; DWL_DNSWL_LOW(-1.00)[rcn.com.dwl.dnswl.org : 127.0.5.1]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[rcn.com:+]; DMARC_POLICY_ALLOW(-0.50)[rcn.com,none]; MX_GOOD(-0.01)[mx.rcn.com]; NEURAL_HAM_SHORT(-0.98)[-0.982,0]; RCVD_IN_DNSWL_LOW(-0.10)[78.97.168.69.list.dnswl.org : 127.0.5.1]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:36271, ipnet:69.168.97.0/24, country:US]; RCVD_COUNT_TWO(0.00)[2]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 19:32:01 -0000 Rodney W. Grimes writes: > > And god only knows how much will break once I've done that. How many other > > people have tested -all- of the resulting binaries, seriously, on actual > > production systems? (I may be the first one ever, at least for 12.0.) > > I also agree here, running a WITHOUT_IPV6 userland is both very > painful to get built AND has issues that one does not need to face, > like I showed in another thread about netstat -6. Wider question: Say I'm running a system with both IPv4 and IPv6 enabled. Stuff Happens(tm) and I want to completely disable IPv6 for some indefinite but temporary period - not chamge any configuration settings or firewall rules, but just have the code finish processing current packets (or not) and then ignore further traffic. There will be consequences; I'm prepared to accept them. Is there a single master switch - a sysctl, perhaps, or something in /etc/rc.d - that lets me do that? Respectfully, Robert Huff From owner-freebsd-questions@freebsd.org Wed Jun 19 20:39:50 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D982515C984A; Wed, 19 Jun 2019 20:39:50 +0000 (UTC) (envelope-from eugen@grosbein.net) Received: from eg.sd.rdtc.ru (eg.sd.rdtc.ru [IPv6:2a03:3100:c:13::5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "eg.sd.rdtc.ru", Issuer "eg.sd.rdtc.ru" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id B5B7B81FBD; Wed, 19 Jun 2019 20:39:39 +0000 (UTC) (envelope-from eugen@grosbein.net) X-Envelope-From: eugen@grosbein.net X-Envelope-To: freebsd-net@freebsd.org Received: from [10.58.0.4] (dadv@[10.58.0.4]) by eg.sd.rdtc.ru (8.15.2/8.15.2) with ESMTPS id x5JKdXgc093381 (version=TLSv1.2 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Thu, 20 Jun 2019 03:39:33 +0700 (+07) (envelope-from eugen@grosbein.net) Subject: Re: Eliminating IPv6 (?) To: "Rodney W. Grimes" References: <201906191618.x5JGIDWa018900@gndrsh.dnsmgr.net> Cc: freebsd-net , FreeBSD Questions Mailing List , "Ronald F. Guilmette" From: Eugene Grosbein Message-ID: <42461287-c282-697e-6a21-571212dff832@grosbein.net> Date: Thu, 20 Jun 2019 03:39:28 +0700 User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: <201906191618.x5JGIDWa018900@gndrsh.dnsmgr.net> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: B5B7B81FBD X-Spamd-Bar: / Authentication-Results: mx1.freebsd.org; spf=permerror (mx1.freebsd.org: domain of eugen@grosbein.net uses mechanism not recognized by this client) smtp.mailfrom=eugen@grosbein.net X-Spamd-Result: default: False [0.60 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.58)[-0.584,0]; RCVD_TLS_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[4]; MX_INVALID(0.50)[greylisted]; NEURAL_SPAM_SHORT(0.62)[0.620,0]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[grosbein.net]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; R_SPF_PERMFAIL(0.00)[]; NEURAL_SPAM_LONG(0.16)[0.158,0]; IP_SCORE(0.00)[country: RU(0.01)]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:29072, ipnet:2a03:3100::/32, country:RU]; MID_RHS_MATCH_FROM(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 20:39:51 -0000 19.06.2019 23:18, Rodney W. Grimes wrote: >> 19.06.2019 3:57, Ronald F. Guilmette wrote: >> >>> And god only knows how much will break once I've done that. >> >> IPv6 will break only. > > That is incorrect, scripts that would silently do nothing can > now infact fail, trust me, first hand experience. This can > have consequences beyong "IPv6 will break only". > >>> How many other >>> people have tested -all- of the resulting binaries, seriously, on actual >>> production systems? (I may be the first one ever, at least for 12.0.) >> >> I ran plenty of hosts with IPv6 disabled this way and no problems observed, but this pre-dates 12.0. > > I've not run a userland without V6 in a long time once I started to have > issues with some things. Can you give an example of such script in base system, please? If you have such script or binary not in our base, it's not our fault :-) From owner-freebsd-questions@freebsd.org Wed Jun 19 20:51:16 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CCC2415C9DA6; Wed, 19 Jun 2019 20:51:16 +0000 (UTC) (envelope-from eugen@grosbein.net) Received: from eg.sd.rdtc.ru (eg.sd.rdtc.ru [IPv6:2a03:3100:c:13::5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "eg.sd.rdtc.ru", Issuer "eg.sd.rdtc.ru" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id D415582663; Wed, 19 Jun 2019 20:51:15 +0000 (UTC) (envelope-from eugen@grosbein.net) X-Envelope-From: eugen@grosbein.net X-Envelope-To: freebsd-questions@freebsd.org Received: from [10.58.0.4] ([10.58.0.4]) by eg.sd.rdtc.ru (8.15.2/8.15.2) with ESMTPS id x5JKpAh6093581 (version=TLSv1.2 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Thu, 20 Jun 2019 03:51:10 +0700 (+07) (envelope-from eugen@grosbein.net) Subject: Re: Eliminating IPv6 (?) To: "Rodney W. Grimes" References: <201906191542.x5JFgQQ2018770@gndrsh.dnsmgr.net> Cc: "Ronald F. Guilmette" , freebsd-questions@freebsd.org, freebsd-net@freebsd.org From: Eugene Grosbein Message-ID: <1633b96e-15ba-9933-abea-46e7b4f0e6a2@grosbein.net> Date: Thu, 20 Jun 2019 03:51:01 +0700 User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: <201906191542.x5JFgQQ2018770@gndrsh.dnsmgr.net> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: D415582663 X-Spamd-Bar: / Authentication-Results: mx1.freebsd.org; spf=permerror (mx1.freebsd.org: domain of eugen@grosbein.net uses mechanism not recognized by this client) smtp.mailfrom=eugen@grosbein.net X-Spamd-Result: default: False [0.63 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.60)[-0.599,0]; RCVD_TLS_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[4]; TO_DN_SOME(0.00)[]; NEURAL_SPAM_SHORT(0.62)[0.621,0]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[grosbein.net]; MX_INVALID(0.50)[cached]; TO_MATCH_ENVRCPT_SOME(0.00)[]; R_SPF_PERMFAIL(0.00)[]; NEURAL_SPAM_LONG(0.20)[0.205,0]; IP_SCORE(0.00)[country: RU(0.01)]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:29072, ipnet:2a03:3100::/32, country:RU]; MID_RHS_MATCH_FROM(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 20:51:17 -0000 19.06.2019 22:42, Rodney W. Grimes wrote: >> 18.06.2019 10:10, Ronald F. Guilmette wrote: >>> How can I turn off IPv6 entirely without rebuilding the kernel? >> You cannot. GENERIC kernel specifically enables IPv6 support and you need to disable it at compile time. >> And if you do, you better rebuild the world too using WITHOUT_INET6=yes in the /etc/src.conf >> or else some utilities compiled with INET6 by default will query kernel >> for IPv6-specific data (like routing entries) and complain that your kernel does not know about it. > I have not seen these issues, can you give a specific example that fails? Other than kernel/userland interaction (that may be not relevant anymore for modern FreeBSD), that's basically about making network connections (such as telnet etc.) to FQDNs resolved to IPv6 addresses supported by binaries (and resolver being userland beast) but not kernel/routing table. > A netstat -rn on a v4 only kernel simple reports the v4 table, and iirc a > netstat -rn6 returns a "Protocol not supported error" as should all other > things. >> World built WITHOUT_INET6 has no such rough edges. > I find that actually causes me more issues, as then my > netstat -rn6 returns a hard error due to: > case '6': > #ifdef INET6 > af = AF_INET6; > #else > errx(1, "IPv6 support is not compiled in"); > #endif Seems very logical to me. Do we have a script in base running "netstat -rn6" and breaking on this? From owner-freebsd-questions@freebsd.org Wed Jun 19 21:01:00 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 53E3815CA0E9; Wed, 19 Jun 2019 21:01:00 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: from outgoing.tristatelogic.com (segfault.tristatelogic.com [69.62.255.118]) by mx1.freebsd.org (Postfix) with ESMTP id 64A8782C5E; Wed, 19 Jun 2019 21:00:59 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: by segfault.tristatelogic.com (Postfix, from userid 1237) id E22524E653; Wed, 19 Jun 2019 14:00:52 -0700 (PDT) From: "Ronald F. Guilmette" To: FreeBSD Net , Mailinglists FreeBSD Subject: Re: Eliminating IPv6 (?) In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <31075.1560978052.1@segfault.tristatelogic.com> Content-Transfer-Encoding: quoted-printable Date: Wed, 19 Jun 2019 14:00:52 -0700 Message-ID: <31076.1560978052@segfault.tristatelogic.com> X-Rspamd-Queue-Id: 64A8782C5E X-Spamd-Bar: ----- Authentication-Results: mx1.freebsd.org; spf=pass (mx1.freebsd.org: domain of rfg@tristatelogic.com designates 69.62.255.118 as permitted sender) smtp.mailfrom=rfg@tristatelogic.com X-Spamd-Result: default: False [-5.90 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[tristatelogic.com]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; IP_SCORE(-2.76)[ip: (-7.24), ipnet: 69.62.128.0/17(-3.62), asn: 14051(-2.86), country: US(-0.06)]; TO_DN_ALL(0.00)[]; MX_GOOD(-0.01)[mx1.tristatelogic.com]; RCPT_COUNT_TWO(0.00)[2]; NEURAL_HAM_SHORT(-0.93)[-0.935,0]; RCVD_NO_TLS_LAST(0.10)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:14051, ipnet:69.62.128.0/17, country:US]; RCVD_COUNT_TWO(0.00)[2]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 21:01:00 -0000 In message Andreas Nilsson wrote: >> That is *not* what the Handbook says. Please read it. >> https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls-ip= fw.html >> >Ok, so the handbook is wrong. It's a bug in the documentation. ACK >As soon as set firewall_script instead of firewall_type your problems wil= l >be solved. Just try it. The man page for rc.conf will tell you the same >thing. ACK. Thank you for setting me straight. Regards, rfg From owner-freebsd-questions@freebsd.org Wed Jun 19 21:03:51 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7272F15CA3B5 for ; Wed, 19 Jun 2019 21:03:51 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mout.kundenserver.de (mout.kundenserver.de [212.227.126.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "mout.kundenserver.de", Issuer "TeleSec ServerPass Class 2 CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 1E92583058 for ; Wed, 19 Jun 2019 21:03:49 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de ([178.8.39.224]) by mrelayeu.kundenserver.de (mreue010 [212.227.15.167]) with ESMTPA (Nemesis) id 1Mj8a5-1iIYeP0oJp-00f821; Wed, 19 Jun 2019 22:58:28 +0200 Date: Wed, 19 Jun 2019 22:58:28 +0200 From: Polytropon To: Alexandru Goia Cc: freebsd-questions@freebsd.org Subject: Re: FreeBSD kernel system call Message-Id: <20190619225828.e5a78fdf.freebsd@edvax.de> In-Reply-To: References: Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K1:0ufVRlYKRscZx3NXSQ4JH8ieiivs7zIGopo80rQKd2Chx9PwY7z Lc/tsLMgTIhFv6+YLXCz6ZM5A1fXAlLocLec0I21cmBBXAmtQd6yQt1oTZVPMVB1p6t1HpL 73JAPeKBxoZcPpzmJRlDGgf6CmlpOOc2c9+F9remD8Nu6HnGQO70Cfx/T1DVTivPBtOkDke S23x4FdK3xH9dz7DbbTIQ== X-Spam-Flag: NO X-UI-Out-Filterresults: notjunk:1;V03:K0:gjby7R3wwXw=:NX9Wjeo3KY9PX2VPi5xtpf VGJzQNyDTbyVKDO1iQIckAPIgBgS45367cXWNeeNufFTjZu1SjgEu8QKiFGXcZA6QKsuUxpd7 71VSWp+GtcqsyqFAxOFLVLIO9O2I/mmK65u4yAZSeEUVe/f6pZXalNuURC5SfRGa6XHuhcS7X 7qZ5I5J9ktSxPG+GiTBps3ZCCGQ/rKP3ziu2A646Nkq+2yrlifwfjaNIBa+r7ca0dyjZNa8NH Tu9o3n1Iks6TVf/UcqbTDmKK0TD7liA82DP5KwEGwTa7YfJcFg+AE9eef/VrP6YeqXKyjp8vs J/O5cBnrk1Qq1XWlmEfsPw6hmlfx696HS5IC8EaNik1Vpj1Hd1h0epoYwuVEjDtp65R7hDelu o1UWYec9EYkekIrw1b+VDJR4sXxbIpuB5K8kfw2yFcphoJWtAQmkND+WuEytengN5iWBsXy7r CPONicQUvHb+BdVdaGhMheVaoQ1Ue8CJIXD8Wo0p4Y17bWbvUgaFKWj74m9rMBGXSQUh3QNEa S7pYvRUaoezraI5GzZglVL+rOg2PprOMcXchPBA1U7kMvgjV/1rvP2K3ZdU8vSFUY7rxl8YHk VU5acOPBEWHSA5GD7rsf3N+3Nuvp4wnXeT/1cubba/qF28h51b318piTwzgeCXeQugpt5+hF3 So6LVQJs6Q+OBkGfJaUuZ+eF6rhqxr6mLiju9yJpIsGvt+V0gHq/95ScG8ox9UK1D3hqiS4u0 keieNSOgyQXaq2E+tLM3c7sd+U/FuEpeMGEjvzuvCDcVrTwOWuR88DmAkeE= X-Rspamd-Queue-Id: 1E92583058 X-Spamd-Bar: ++++++ Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [6.08 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; HAS_REPLYTO(0.00)[freebsd@edvax.de]; TO_DN_SOME(0.00)[]; MV_CASE(0.50)[]; HAS_ORG_HEADER(0.00)[]; MX_GOOD(-0.01)[mx01.schlund.de,mx00.schlund.de]; RCPT_COUNT_TWO(0.00)[2]; FREEMAIL_TO(0.00)[gmail.com]; RECEIVED_SPAMHAUS_PBL(0.00)[224.39.8.178.zen.spamhaus.org : 127.0.0.11]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:8560, ipnet:212.227.0.0/16, country:DE]; RCVD_TLS_LAST(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; ARC_NA(0.00)[]; REPLYTO_EQ_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; NEURAL_SPAM_SHORT(0.96)[0.961,0]; TAGGED_RCPT(0.00)[]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[edvax.de]; AUTH_NA(1.00)[]; NEURAL_SPAM_MEDIUM(0.90)[0.904,0]; TO_MATCH_ENVRCPT_SOME(0.00)[]; NEURAL_SPAM_LONG(1.00)[1.000,0]; MID_CONTAINS_FROM(1.00)[]; RCVD_IN_DNSWL_NONE(0.00)[133.126.227.212.list.dnswl.org : 127.0.5.0]; R_SPF_NA(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; IP_SCORE(0.83)[ip: (3.06), ipnet: 212.227.0.0/16(-1.42), asn: 8560(2.50), country: DE(-0.01)] X-Spam: Yes X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 21:03:51 -0000 On Wed, 19 Jun 2019 16:12:51 +0300, Alexandru Goia wrote: > I am trying to write the code to a Unix system call, on the > FreeBSD 12.0 system. I managed to do that on Linux : > > http://romania-acknowledges-stars.blogspot.com/2018/10/angel-call-in-kernel.html > > but I find hard, without proper documentation, to implement it > on FreeBSD. There is documentation available: https://www.freebsd.org/doc/en_US.ISO8859-1/books/developers-handbook/x86-system-calls.html https://www.freebsd.org/doc/en_US.ISO8859-1/books/developers-handbook/x86-first-program.html Maybe this is a better entry point: https://www.freebsd.org/doc/en_US.ISO8859-1/books/developers-handbook/x86.html > I am in trouble understanding the presence of SYSCALL_MODULE(9), and > its meaning and usage. Does the command "man 9 SYSCALL_MODULE" provide any help? From the description: The SYSCALL_MODULE() macro declares a new syscall. SYSCALL_MODULE() expands into a kernel module declaration named as name. If you have obtained the FreeBSD sources, also have a look at the file /usr/share/examples/kld/syscall/module/syscall.c where you can find an illustration of how a kernel module can be created to provide an additional system call. -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Wed Jun 19 21:46:20 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 48AE815CB118 for ; Wed, 19 Jun 2019 21:46:20 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: from outgoing.tristatelogic.com (segfault.tristatelogic.com [69.62.255.118]) by mx1.freebsd.org (Postfix) with ESMTP id 134EA846CE for ; Wed, 19 Jun 2019 21:46:18 +0000 (UTC) (envelope-from rfg@tristatelogic.com) Received: by segfault.tristatelogic.com (Postfix, from userid 1237) id CCDB04E653; Wed, 19 Jun 2019 14:46:17 -0700 (PDT) From: "Ronald F. Guilmette" To: FreeBSD Questions Subject: Re: Eliminating IPv6 (?) In-Reply-To: <3aaa4159-38cf-3de0-b0b3-22fe12f14a60@cyberleo.net> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <31385.1560980777.1@segfault.tristatelogic.com> Date: Wed, 19 Jun 2019 14:46:17 -0700 Message-ID: <31386.1560980777@segfault.tristatelogic.com> X-Rspamd-Queue-Id: 134EA846CE X-Spamd-Bar: ----- Authentication-Results: mx1.freebsd.org; spf=pass (mx1.freebsd.org: domain of rfg@tristatelogic.com designates 69.62.255.118 as permitted sender) smtp.mailfrom=rfg@tristatelogic.com X-Spamd-Result: default: False [-5.91 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-0.998,0]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[tristatelogic.com]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; RCPT_COUNT_ONE(0.00)[1]; IP_SCORE(-2.77)[ip: (-7.29), ipnet: 69.62.128.0/17(-3.64), asn: 14051(-2.88), country: US(-0.06)]; TO_DN_ALL(0.00)[]; MX_GOOD(-0.01)[cached: mx1.tristatelogic.com]; NEURAL_HAM_SHORT(-0.93)[-0.930,0]; RCVD_NO_TLS_LAST(0.10)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:14051, ipnet:69.62.128.0/17, country:US]; RCVD_COUNT_TWO(0.00)[2]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 21:46:20 -0000 In message <3aaa4159-38cf-3de0-b0b3-22fe12f14a60@cyberleo.net>, CyberLeo Kitsana wrote: >On 6/18/19 3:13 PM, Ronald F. Guilmette wrote: > >> function within /etc/rc.firewall however, I do question the wisdom of >> the following two lines, in particular: >> >> ${fwcmd} add 200 deny all from any to 127.0.0.0/8 >> ${fwcmd} add 300 deny ip from 127.0.0.0/8 to any > > >ipfw is a first-match firewall: the first rule encountered that matches >is applied, and the remainder are ignored. > >With this in mind, the two rules quoted make sense only in tandem with >the rule before them: > >${fwcmd} add 100 pass all from any to any via lo0 > >The first rule passes all packets on the local interface, including any >packets with an address in 127/8, and ignores all the following rules. >The next two rules block all packets with addresses within 127/8 on all >interfaces. These rules combined will block packets with 127/8 addresses >on non-local interfaces, where that address has no business being in the >first place. > >The rationale is that 127/8 addresses should not appear on the network, >but blindly trusting that they never will can open an avenue for remote >attack of services that assume the same. I did (and do) understand what the rules do, and I can (and did) infer what their intent was/is. This doesn't change any of the following points: *) If there are packets wandering around on my own little RFC 1918 network that have either src or dst of 127/8, then I don't really give a rat's ass about that, one way or the other. *) If I am sending "up" to my ISP packets that have either src or dst set to 127/8 then something is REALLY and HORRIBLY wrong at a much deeper level, I think, i.e. my ifconfig and/or my local routing table. *) If my ISP is sending "down" to me packets that have either src or dst set to 127/8, then once again, would we not all agree that this is an indication of something that has gone horribly horribly wrong someplace? In short, these rules appear to me to be rather entirely superfluous and inconsequential: ${fwcmd} add 200 deny all from any to 127.0.0.0/8 ${fwcmd} add 300 deny ip from 127.0.0.0/8 to any Their only purpose appears to me to be (a) to burn additional CPU cycles needlessly and (b) to needlessly slow down many, most or all of my packets as they attempt to make their way to wherever they are going. But I am happy to be corrected if that's appropriate. Regards, rfg From owner-freebsd-questions@freebsd.org Wed Jun 19 22:06:41 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C03E315CB641 for ; Wed, 19 Jun 2019 22:06:41 +0000 (UTC) (envelope-from karl@denninger.net) Received: from colo1.denninger.net (colo1.denninger.net [104.236.120.189]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 79FAE84EDB for ; Wed, 19 Jun 2019 22:06:40 +0000 (UTC) (envelope-from karl@denninger.net) Received: from denninger.net (ip68-1-57-197.pn.at.cox.net [68.1.57.197]) by colo1.denninger.net (Postfix) with ESMTP id 92ACF21112C for ; Wed, 19 Jun 2019 18:06:04 -0400 (EDT) Received: by denninger.net (Postfix, from userid 80) id 226F3173B9A; Wed, 19 Jun 2019 17:06:04 -0500 (CDT) To: freebsd-questions@FreeBSD.org Subject: Re: Eliminating IPv6 (?) Date: Wed, 19 Jun 2019 18:06:00 -0400 Message-ID: <9f8vqsc31infl0d0h1hhpo7l.1560981960460@denninger.net> From: karl@denninger.net MIME-Version: 1.0 Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA256; boundary=--_com.android.email_444415465371850 X-Rspamd-Queue-Id: 79FAE84EDB X-Spamd-Bar: ----- Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-5.57 / 15.00]; HAS_ATTACHMENT(0.00)[]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; MX_GOOD(-0.01)[px.denninger.net]; MIME_BASE64_TEXT(0.10)[]; NEURAL_HAM_SHORT(-0.85)[-0.845,0]; RECEIVED_SPAMHAUS_PBL(0.00)[197.57.1.68.zen.spamhaus.org : 127.0.0.11]; IP_SCORE(-2.61)[ip: (-9.88), ipnet: 104.236.64.0/18(-4.27), asn: 14061(1.14), country: US(-0.06)]; R_DKIM_NA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+]; MID_RHS_MATCH_FROM(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[]; ARC_NA(0.00)[]; FAKE_REPLY(1.00)[]; ASN(0.00)[asn:14061, ipnet:104.236.64.0/18, country:US]; NEURAL_HAM_MEDIUM(-1.00)[-0.997,0]; SIGNED_SMIME(-2.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; AUTH_NA(1.00)[]; RCPT_COUNT_ONE(0.00)[1]; RCVD_TLS_LAST(0.00)[]; FROM_NO_DN(0.00)[]; R_SPF_NA(0.00)[]; DMARC_NA(0.00)[denninger.net] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 22:06:42 -0000 ----_com.android.email_444415465371850 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: base64 ClBlb3BsZSBvbiB0aGUgbmV0IHNwb29mIHBhY2tldHMuCgpOb3QgYWxsIElTUHMgZmlsdGVyIHdl bGwgLS0gb3IgcmVsaWFibHkuCgpBIGNvbXByb21pc2VkIG1hY2hpbmUgb24geW91ciBMQU4gbWF5 IHNwb29mIHBhY2tldHMgdG9vLgoKUGFja2V0cyBmcm9tIGxvY2FsaG9zdCBtYXkgYmUgKHNob3Vs ZG4ndCBiZSwgYnV0IHNvbWV0aW1lcyBhcmUpIGltcGxpY2l0bHkgdHJ1c3RlZCBieSBhcHBsaWNh dGlvbiBjb2RlLgoKVGhlIENQVSBjeWNsZXMgaW52b2x2ZWQgYXJlIHNtYWxsIGFuZCB0aGUgcG9p bnQgb2YgdXNpbmcgaXBmdyBpbiB0aGUgZmlyc3QgcGxhY2UgaXMgdG8gc3RvcCBiYWQgdGhpbmdz IGZyb20gaGFwcGVuaW5nLi4uLi4KCkFsbCBJTUhPLgoKLSBLYXJsIChvbiBQREEpCgoKCgnCoCBP cmlnaW5hbCBNZXNzYWdlIMKgCgoKCkZyb206IHJmZ0B0cmlzdGF0ZWxvZ2ljLmNvbQpTZW50OiBK dW5lIDE5LCAyMDE5IDE3OjQ2ClRvOiBmcmVlYnNkLXF1ZXN0aW9uc0BGcmVlQlNELm9yZwpTdWJq ZWN0OiBSZTogRWxpbWluYXRpbmcgSVB2NiAoPykKCgpJbiBtZXNzYWdlIDwzYWFhNDE1OS0zOGNm LTNkZTAtYjBiMy0yMmZlMTJmMTRhNjBAY3liZXJsZW8ubmV0PiwKQ3liZXJMZW8gS2l0c2FuYSA8 Y3liZXJsZW9AY3liZXJsZW8ubmV0PiB3cm90ZToKCj5PbiA2LzE4LzE5IDM6MTMgUE0sIFJvbmFs ZCBGLiBHdWlsbWV0dGUgd3JvdGU6Cj48c25pcD4KPj4gZnVuY3Rpb24gd2l0aGluIC9ldGMvcmMu ZmlyZXdhbGwgaG93ZXZlciwgSSBkbyBxdWVzdGlvbiB0aGUgd2lzZG9tIG9mCj4+IHRoZSBmb2xs b3dpbmcgdHdvIGxpbmVzLCBpbiBwYXJ0aWN1bGFyOgo+Pgo+PsKgwqDCoMKgwqDCoMKgwqAgJHtm d2NtZH0gYWRkIDIwMCBkZW55IGFsbCBmcm9tIGFueSB0byAxMjcuMC4wLjAvOAo+PsKgwqDCoMKg wqDCoMKgwqAgJHtmd2NtZH0gYWRkIDMwMCBkZW55IGlwIGZyb20gMTI3LjAuMC4wLzggdG8gYW55 Cj48c25pcD4KPgo+aXBmdyBpcyBhIGZpcnN0LW1hdGNoIGZpcmV3YWxsOiB0aGUgZmlyc3QgcnVs ZSBlbmNvdW50ZXJlZCB0aGF0IG1hdGNoZXMKPmlzIGFwcGxpZWQsIGFuZCB0aGUgcmVtYWluZGVy IGFyZSBpZ25vcmVkLgo+Cj5XaXRoIHRoaXMgaW4gbWluZCwgdGhlIHR3byBydWxlcyBxdW90ZWQg bWFrZSBzZW5zZSBvbmx5IGluIHRhbmRlbSB3aXRoCj50aGUgcnVsZSBiZWZvcmUgdGhlbToKPgo+ JHtmd2NtZH0gYWRkIDEwMCBwYXNzIGFsbCBmcm9tIGFueSB0byBhbnkgdmlhIGxvMAo+Cj5UaGUg Zmlyc3QgcnVsZSBwYXNzZXMgYWxsIHBhY2tldHMgb24gdGhlIGxvY2FsIGludGVyZmFjZSwgaW5j bHVkaW5nIGFueQo+cGFja2V0cyB3aXRoIGFuIGFkZHJlc3MgaW4gMTI3LzgsIGFuZCBpZ25vcmVz IGFsbCB0aGUgZm9sbG93aW5nIHJ1bGVzLgo+VGhlIG5leHQgdHdvIHJ1bGVzIGJsb2NrIGFsbCBw YWNrZXRzIHdpdGggYWRkcmVzc2VzIHdpdGhpbiAxMjcvOCBvbiBhbGwKPmludGVyZmFjZXMuIFRo ZXNlIHJ1bGVzIGNvbWJpbmVkIHdpbGwgYmxvY2sgcGFja2V0cyB3aXRoIDEyNy84IGFkZHJlc3Nl cwo+b24gbm9uLWxvY2FsIGludGVyZmFjZXMsIHdoZXJlIHRoYXQgYWRkcmVzcyBoYXMgbm8gYnVz aW5lc3MgYmVpbmcgaW4gdGhlCj5maXJzdCBwbGFjZS4KPgo+VGhlIHJhdGlvbmFsZSBpcyB0aGF0 IDEyNy84IGFkZHJlc3NlcyBzaG91bGQgbm90IGFwcGVhciBvbiB0aGUgbmV0d29yaywKPmJ1dCBi bGluZGx5IHRydXN0aW5nIHRoYXQgdGhleSBuZXZlciB3aWxsIGNhbiBvcGVuIGFuIGF2ZW51ZSBm b3IgcmVtb3RlCj5hdHRhY2sgb2Ygc2VydmljZXMgdGhhdCBhc3N1bWUgdGhlIHNhbWUuCgpJIGRp ZCAoYW5kIGRvKSB1bmRlcnN0YW5kIHdoYXQgdGhlIHJ1bGVzIGRvLCBhbmQgSSBjYW4gKGFuZCBk aWQpIGluZmVyCndoYXQgdGhlaXIgaW50ZW50IHdhcy9pcy4KClRoaXMgZG9lc24ndCBjaGFuZ2Ug YW55IG9mIHRoZSBmb2xsb3dpbmcgcG9pbnRzOgoKwqDCoMKgICopIElmIHRoZXJlIGFyZSBwYWNr ZXRzIHdhbmRlcmluZyBhcm91bmQgb24gbXkgb3duIGxpdHRsZSBSRkMgMTkxOArCoMKgwqDCoMKg wqAgbmV0d29yayB0aGF0IGhhdmUgZWl0aGVyIHNyYyBvciBkc3Qgb2YgMTI3LzgsIHRoZW4gSSBk b24ndCByZWFsbHkKwqDCoMKgwqDCoMKgIGdpdmUgYSByYXQncyBhc3MgYWJvdXQgdGhhdCwgb25l IHdheSBvciB0aGUgb3RoZXIuCgrCoMKgwqAgKikgSWYgSSBhbSBzZW5kaW5nICJ1cCIgdG8gbXkg SVNQIHBhY2tldHMgdGhhdCBoYXZlIGVpdGhlcgrCoMKgwqDCoMKgwqAgc3JjIG9yIGRzdCBzZXQg dG8gMTI3LzggdGhlbiBzb21ldGhpbmcgaXMgUkVBTExZIGFuZCBIT1JSSUJMWSB3cm9uZwrCoMKg wqDCoMKgwqAgYXQgYSBtdWNoIGRlZXBlciBsZXZlbCwgSSB0aGluaywgaS5lLiBteSBpZmNvbmZp ZyBhbmQvb3IgbXkgbG9jYWwKwqDCoMKgwqDCoMKgIHJvdXRpbmcgdGFibGUuCgrCoMKgwqAgKikg SWYgbXkgSVNQIGlzIHNlbmRpbmcgImRvd24iIHRvIG1lIHBhY2tldHMgdGhhdCBoYXZlIGVpdGhl ciBzcmMgb3IKwqDCoMKgwqDCoMKgIGRzdCBzZXQgdG8gMTI3LzgsIHRoZW4gb25jZSBhZ2Fpbiwg d291bGQgd2Ugbm90IGFsbCBhZ3JlZSB0aGF0CsKgwqDCoMKgwqDCoCB0aGlzIGlzIGFuIGluZGlj YXRpb24gb2Ygc29tZXRoaW5nIHRoYXQgaGFzIGdvbmUgaG9ycmlibHkgaG9ycmlibHkKwqDCoMKg wqDCoMKgIHdyb25nIHNvbWVwbGFjZT8KCkluIHNob3J0LCB0aGVzZSBydWxlcyBhcHBlYXIgdG8g bWUgdG8gYmUgcmF0aGVyIGVudGlyZWx5IHN1cGVyZmx1b3VzIGFuZAppbmNvbnNlcXVlbnRpYWw6 CgrCoMKgwqDCoMKgwqDCoMKgICR7ZndjbWR9IGFkZCAyMDAgZGVueSBhbGwgZnJvbSBhbnkgdG8g MTI3LjAuMC4wLzgKwqDCoMKgwqDCoMKgwqDCoCAke2Z3Y21kfSBhZGQgMzAwIGRlbnkgaXAgZnJv bSAxMjcuMC4wLjAvOCB0byBhbnkKClRoZWlyIG9ubHkgcHVycG9zZSBhcHBlYXJzIHRvIG1lIHRv IGJlIChhKSB0byBidXJuIGFkZGl0aW9uYWwgQ1BVIGN5Y2xlcwpuZWVkbGVzc2x5IGFuZCAoYikg dG8gbmVlZGxlc3NseSBzbG93IGRvd24gbWFueSwgbW9zdCBvciBhbGwgb2YgbXkgcGFja2V0cwph cyB0aGV5IGF0dGVtcHQgdG8gbWFrZSB0aGVpciB3YXkgdG8gd2hlcmV2ZXIgdGhleSBhcmUgZ29p bmcuCgpCdXQgSSBhbSBoYXBweSB0byBiZSBjb3JyZWN0ZWQgaWYgdGhhdCdzIGFwcHJvcHJpYXRl LgoKClJlZ2FyZHMsCnJmZwpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXwpmcmVlYnNkLXF1ZXN0aW9uc0BmcmVlYnNkLm9yZyBtYWlsaW5nIGxpc3QKaHR0cHM6 Ly9saXN0cy5mcmVlYnNkLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2ZyZWVic2QtcXVlc3Rpb25zClRv IHVuc3Vic2NyaWJlLCBzZW5kIGFueSBtYWlsIHRvICJmcmVlYnNkLXF1ZXN0aW9ucy11bnN1YnNj cmliZUBmcmVlYnNkLm9yZyIK ----_com.android.email_444415465371850 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s"; MIAGCSqGSIb3DQEHAqCAMIACAQExDTALBglghkgBZQMEAgEwgAYJKoZIhvcNAQcBAACggg5oMIIH MDCCBRigAwIBAgITAKDRa9XB6SMYWI7rZJyQXB6nPTANBgkqhkiG9w0BAQsFADB7MQswCQYDVQQG EwJVUzEQMA4GA1UECAwHRmxvcmlkYTEZMBcGA1UECgwQQ3VkYSBTeXN0ZW1zIExMQzEYMBYGA1UE CwwPQ3VkYSBTeXN0ZW1zIENBMSUwIwYDVQQDDBxDdWRhIFN5c3RlbXMgTExDIDIwMTcgSW50IENB MB4XDTE3MDgxNzIxMjEyMFoXDTIyMDgxNjIxMjEyMFowVzELMAkGA1UEBhMCVVMxEDAOBgNVBAgM B0Zsb3JpZGExGTAXBgNVBAoMEEN1ZGEgU3lzdGVtcyBMTEMxGzAZBgNVBAMMEmthcmxAZGVubmlu Z2VyLm5ldDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL4dVLLFW0mHLc6Gz48AZG47 /8OFr0DXqXkU8BOvrC5173ONfl/aWuRHJTy+EJdNlbtZu9ZkqlxnyvR21maIr24XnwRzqGG9+TEn NuD3pYcHDkW6Z3lqFnO4IkO0IBZbxHv8o37PDNB/X4HcxUuZtpcAUG4rPJIqEoxwdsrf/CNRhODL 7dQrq/ZIGujC+RQEL6PE2DdbLXYaxNdxRL/wVgheBVU+B9lmtsklvkdY5Cm++Eguk8IPfGxgkU0o Q+W1cpYdPtC1zYc2qKSA3CPyio5v495kYyJZqmxq0qbybG444Y4QGEChNVPBQeUw1ODpBQIm25YU Irfyo4LKT0dqP7zqVRTxEboWRFdaAxs1CbWZZERCHDdrGAYtKe2OOfOcmvm+y9dJhHpz5cot3kpB lxLosvwUdg2OpUocFgz6EOetNkyprbQksAXVhqC60OIxFRFTbeJZLtsD20xxdyqRyVNIO0W3FqFG J9dEjsSmrYZIq4Rd7/VN9vkITxCxsKkax9LC/a1n9KmpUbTwx1GJfE3m2ZmJBajXkjJah4o5eX+E rED0o+4MeeBdfTbZvWXL7lk5lvEEBlkyh3jLhvgWJFSFEj3uv2ULGw/8Q8e65MhnzYFiGuFu1pvw e5Gjah+d7ZN8BZjYGUDsTEzxdKEx31tE9ms1OiQ9A9QJYKAJ0gBNAgMBAAGjggHPMIIByzA8Bggr BgEFBQcBAQQwMC4wLAYIKwYBBQUHMAGGIGh0dHA6Ly9vY3NwLmN1ZGFzeXN0ZW1zLm5ldDo4ODg4 MAkGA1UdEwQCMAAwEQYJYIZIAYb4QgEBBAQDAgWgMA4GA1UdDwEB/wQEAwIF4DAdBgNVHSUEFjAU BggrBgEFBQcDAgYIKwYBBQUHAwQwMwYJYIZIAYb4QgENBCYWJE9wZW5TU0wgR2VuZXJhdGVkIENs aWVudCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQUsSWY1Z5WCwE97s7w2IHOO+NielEwgcoGA1UdIwSB wjCBv4AUXcBewqeN080Pn5vFUQIYq1zTjs+hgZGkgY4wgYsxCzAJBgNVBAYTAlVTMRAwDgYDVQQI DAdGbG9yaWRhMRIwEAYDVQQHDAlOaWNldmlsbGUxGTAXBgNVBAoMEEN1ZGEgU3lzdGVtcyBMTEMx GDAWBgNVBAsMD0N1ZGEgU3lzdGVtcyBDQTEhMB8GA1UEAwwYQ3VkYSBTeXN0ZW1zIExMQyAyMDE3 IENBghMA5EiKghDOXrvfxYxjITXYDdhIMB0GA1UdEQQWMBSBEmthcmxAZGVubmluZ2VyLm5ldDAN BgkqhkiG9w0BAQsFAAOCAgEAldug8UEwsy1qJS3goS0kJeUc7/dnMhQjD96htYUx2F7szj7S7e17 SyvvtBF1w8pHRR4d9++m2HYxveHbxZ83QWYmYvAmT6k7Hi7q47c7QTWM1egqHx9VwvgpTv2gRDJi Ru7YfBtcFT0duV0845kOc8uLTCGL+xsUd3J3j/D82ac+DMCxA1nYFhP24E2v6NnDhKyW5DNcbVeU Uv+oIGiLU3aaoo8h6l8ZgXp2tuvVGdcQkmy4P40gsuihM1/s8yAc9nhVJZBcs14V/KCg44oWI7Sp /E8qkMwD4UdrzI2MAlkCB0lfkybWRuqKm9v6v8fVQCavMYxuGZ/WAKiexPl/wpTifdAgzaw6lNB7 sGhUqVAz9+lCLpoHO7rszWIXVa04OlrlBQ++PV61or5Hd5gHOLgMhsIhay3wx0DX58R4okW8wRlA 42mQLCsn60kS4ZCaOhBmArUd6Wh6kXRYNy+KKGjkWWC0CKP6IE+3Ay64uIuyEBcDlp8xfWFgziXX Ulee2V7XYRAU/WvrA5SSk53Fx4JwxUMQkEEIdbZmZ0RpeACbVVT5+dCpL/A3D9LRfdElPWqOvm5W WnZjRq4b94bSPLpNPQrNMl5H20tINemtiQ3aX9B/v+dPpDTerIRCecqIFdYBle95p/JT/Nhru3c9 NYVAaBagLjDpeqA+jgpXjg4wggcwMIIFGKADAgECAhMAoNFr1cHpIxhYjutknJBcHqc9MA0GCSqG SIb3DQEBCwUAMHsxCzAJBgNVBAYTAlVTMRAwDgYDVQQIDAdGbG9yaWRhMRkwFwYDVQQKDBBDdWRh IFN5c3RlbXMgTExDMRgwFgYDVQQLDA9DdWRhIFN5c3RlbXMgQ0ExJTAjBgNVBAMMHEN1ZGEgU3lz dGVtcyBMTEMgMjAxNyBJbnQgQ0EwHhcNMTcwODE3MjEyMTIwWhcNMjIwODE2MjEyMTIwWjBXMQsw CQYDVQQGEwJVUzEQMA4GA1UECAwHRmxvcmlkYTEZMBcGA1UECgwQQ3VkYSBTeXN0ZW1zIExMQzEb MBkGA1UEAwwSa2FybEBkZW5uaW5nZXIubmV0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC AgEAvh1UssVbSYctzobPjwBkbjv/w4WvQNepeRTwE6+sLnXvc41+X9pa5EclPL4Ql02Vu1m71mSq XGfK9HbWZoivbhefBHOoYb35MSc24PelhwcORbpneWoWc7giQ7QgFlvEe/yjfs8M0H9fgdzFS5m2 lwBQbis8kioSjHB2yt/8I1GE4Mvt1Cur9kga6ML5FAQvo8TYN1stdhrE13FEv/BWCF4FVT4H2Wa2 ySW+R1jkKb74SC6Twg98bGCRTShD5bVylh0+0LXNhzaopIDcI/KKjm/j3mRjIlmqbGrSpvJsbjjh jhAYQKE1U8FB5TDU4OkFAibblhQit/KjgspPR2o/vOpVFPERuhZEV1oDGzUJtZlkREIcN2sYBi0p 7Y4585ya+b7L10mEenPlyi3eSkGXEuiy/BR2DY6lShwWDPoQ5602TKmttCSwBdWGoLrQ4jEVEVNt 4lku2wPbTHF3KpHJU0g7RbcWoUYn10SOxKathkirhF3v9U32+QhPELGwqRrH0sL9rWf0qalRtPDH UYl8TebZmYkFqNeSMlqHijl5f4SsQPSj7gx54F19Ntm9ZcvuWTmW8QQGWTKHeMuG+BYkVIUSPe6/ ZQsbD/xDx7rkyGfNgWIa4W7Wm/B7kaNqH53tk3wFmNgZQOxMTPF0oTHfW0T2azU6JD0D1AlgoAnS AE0CAwEAAaOCAc8wggHLMDwGCCsGAQUFBwEBBDAwLjAsBggrBgEFBQcwAYYgaHR0cDovL29jc3Au Y3VkYXN5c3RlbXMubmV0Ojg4ODgwCQYDVR0TBAIwADARBglghkgBhvhCAQEEBAMCBaAwDgYDVR0P AQH/BAQDAgXgMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAzBglghkgBhvhCAQ0EJhYk T3BlblNTTCBHZW5lcmF0ZWQgQ2xpZW50IENlcnRpZmljYXRlMB0GA1UdDgQWBBSxJZjVnlYLAT3u zvDYgc4742J6UTCBygYDVR0jBIHCMIG/gBRdwF7Cp43TzQ+fm8VRAhirXNOOz6GBkaSBjjCBizEL MAkGA1UEBhMCVVMxEDAOBgNVBAgMB0Zsb3JpZGExEjAQBgNVBAcMCU5pY2V2aWxsZTEZMBcGA1UE CgwQQ3VkYSBTeXN0ZW1zIExMQzEYMBYGA1UECwwPQ3VkYSBTeXN0ZW1zIENBMSEwHwYDVQQDDBhD dWRhIFN5c3RlbXMgTExDIDIwMTcgQ0GCEwDkSIqCEM5eu9/FjGMhNdgN2EgwHQYDVR0RBBYwFIES a2FybEBkZW5uaW5nZXIubmV0MA0GCSqGSIb3DQEBCwUAA4ICAQCV26DxQTCzLWolLeChLSQl5Rzv 92cyFCMP3qG1hTHYXuzOPtLt7XtLK++0EXXDykdFHh3376bYdjG94dvFnzdBZiZi8CZPqTseLurj tztBNYzV6CofH1XC+ClO/aBEMmJG7th8G1wVPR25XTzjmQ5zy4tMIYv7GxR3cneP8PzZpz4MwLED WdgWE/bgTa/o2cOErJbkM1xtV5RS/6ggaItTdpqijyHqXxmBena269UZ1xCSbLg/jSCy6KEzX+zz IBz2eFUlkFyzXhX8oKDjihYjtKn8TyqQzAPhR2vMjYwCWQIHSV+TJtZG6oqb2/q/x9VAJq8xjG4Z n9YAqJ7E+X/ClOJ90CDNrDqU0HuwaFSpUDP36UIumgc7uuzNYhdVrTg6WuUFD749XrWivkd3mAc4 uAyGwiFrLfDHQNfnxHiiRbzBGUDjaZAsKyfrSRLhkJo6EGYCtR3paHqRdFg3L4ooaORZYLQIo/og T7cDLri4i7IQFwOWnzF9YWDOJddSV57ZXtdhEBT9a+sDlJKTncXHgnDFQxCQQQh1tmZnRGl4AJtV VPn50Kkv8DcP0tF90SU9ao6+blZadmNGrhv3htI8uk09Cs0yXkfbS0g16a2JDdpf0H+/50+kNN6s hEJ5yogV1gGV73mn8lP82Gu7dz01hUBoFqAuMOl6oD6OCleODjGCAyUwggMhAgEBMIGSMHsxCzAJ BgNVBAYTAlVTMRAwDgYDVQQIDAdGbG9yaWRhMRkwFwYDVQQKDBBDdWRhIFN5c3RlbXMgTExDMRgw FgYDVQQLDA9DdWRhIFN5c3RlbXMgQ0ExJTAjBgNVBAMMHEN1ZGEgU3lzdGVtcyBMTEMgMjAxNyBJ bnQgQ0ECEwCg0WvVwekjGFiO62SckFwepz0wCwYJYIZIAWUDBAIBoGkwGAYJKoZIhvcNAQkDMQsG CSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTkwNjE5MjIwNjAwWjAvBgkqhkiG9w0BCQQxIgQg EC8hTO+hFJLGNX/Mn7/48/4WRA6wQjuY4Z532Lh5anIwCwYJKoZIhvcNAQEBBIICAJqR2/jSi1Pr 5vfVaZYxhhajg49Omlcn6wKgQfxq2OozZND70oT4aFMH6v2beCB8fChfarLR6w293m2UEyC5TPvf t+6ghPBgSGQy5feOjoSGXu5HprAdCOL1Kk4xUe1kWlj1KJjIxI7Wg2vt+y4yfOgH3xtQskB6/X8H XrNQwF2lvLAIcEp0zJgWWwkKioKOZEnUyPptG+A+RMgH4kVREDS7YyoXSFdzNRA8E0ugd5NnMj94 ubwqBJqvGkw9Rl8fpc9e6Jx6M/gZUy10vThKMhuLm3TbHcZ/LxAotGxIC7OX5Rh4dRU5eVt6jBHR FAdZQd4fpbMX8cBKrJmbI55MlsN5JQsepX8QkXx5RC2Quj8Cc7+NiQvmMlHU2p9tSblIP15n9/To Ghf8jTyQV/vvbZzm0qyCMK7sKz1c2aPE7CneCYi83OW2ymLyMwkjhwo4HLC4w4tdiwQWPokr13gZ S3f44ozOAOWN7taK8K96tW5FcjWsUo5RPh0RvDLtRYmanRWGQUQ++gdFmMzvkLh9OxVC3gM7cM9N UjiYCg+3fM9Mk0U+3V3XKRR3szAZFmt0oaQQQBIaJX+YDkwt4iw8z/SzpIYiYHLq9UUtUg0pT5IX 3YGi5Uy8nj8IlEo/pnuqdvTa5cjnpmLAkGCmX0v5KQCH8/1M/ZxlMlUNSuUbzccnAAAAAAAA ----_com.android.email_444415465371850-- From owner-freebsd-questions@freebsd.org Wed Jun 19 23:23:05 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0848815CCE95; Wed, 19 Jun 2019 23:23:05 +0000 (UTC) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: from gndrsh.dnsmgr.net (br1.CN84in.dnsmgr.net [69.59.192.140]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id CB79B87965; Wed, 19 Jun 2019 23:23:03 +0000 (UTC) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: from gndrsh.dnsmgr.net (localhost [127.0.0.1]) by gndrsh.dnsmgr.net (8.13.3/8.13.3) with ESMTP id x5JNMxvu020490; Wed, 19 Jun 2019 16:22:59 -0700 (PDT) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: (from freebsd-rwg@localhost) by gndrsh.dnsmgr.net (8.13.3/8.13.3/Submit) id x5JNMxpK020489; Wed, 19 Jun 2019 16:22:59 -0700 (PDT) (envelope-from freebsd-rwg) From: "Rodney W. Grimes" Message-Id: <201906192322.x5JNMxpK020489@gndrsh.dnsmgr.net> Subject: Re: Eliminating IPv6 (?) In-Reply-To: <23818.36263.312034.714296@jerusalem.litteratus.org> To: Robert Huff Date: Wed, 19 Jun 2019 16:22:59 -0700 (PDT) CC: "Rodney W. Grimes" , freebsd-net , FreeBSD Questions Mailing List , "Ronald F. Guilmette" X-Mailer: ELM [version 2.4ME+ PL121h (25)] MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII X-Rspamd-Queue-Id: CB79B87965 X-Spamd-Bar: ++ Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [2.87 / 15.00]; ARC_NA(0.00)[]; FROM_HAS_DN(0.00)[]; NEURAL_SPAM_SHORT(0.97)[0.968,0]; IP_SCORE(0.04)[ip: (0.14), ipnet: 69.59.192.0/19(0.07), asn: 13868(0.05), country: US(-0.06)]; MIME_GOOD(-0.10)[text/plain]; RCVD_TLS_LAST(0.00)[]; DMARC_NA(0.00)[dnsmgr.net]; AUTH_NA(1.00)[]; RCPT_COUNT_FIVE(0.00)[5]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; MX_GOOD(-0.01)[cached: gndrsh.dnsmgr.net]; NEURAL_SPAM_LONG(0.96)[0.961,0]; NEURAL_SPAM_MEDIUM(0.01)[0.010,0]; R_SPF_NA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:13868, ipnet:69.59.192.0/19, country:US]; MID_RHS_MATCH_FROM(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 23:23:05 -0000 > Rodney W. Grimes writes: > > > > And god only knows how much will break once I've done that. How many other > > > people have tested -all- of the resulting binaries, seriously, on actual > > > production systems? (I may be the first one ever, at least for 12.0.) > > > > I also agree here, running a WITHOUT_IPV6 userland is both very > > painful to get built AND has issues that one does not need to face, > > like I showed in another thread about netstat -6. > > Wider question: > Say I'm running a system with both IPv4 and IPv6 enabled. > Stuff Happens(tm) and I want to completely disable IPv6 for some > indefinite but temporary period - not chamge any configuration > settings or firewall rules, but just have the code finish processing > current packets (or not) and then ignore further traffic. There will > be consequences; I'm prepared to accept them. > Is there a single master switch - a sysctl, perhaps, or something > in /etc/rc.d - that lets me do that? You do raise a very valid point. ipfw add 1 deny ipv6 from any to any That is about the only "master" switch I can think of that would be very effective. > Robert Huff -- Rod Grimes rgrimes@freebsd.org From owner-freebsd-questions@freebsd.org Wed Jun 19 23:32:31 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8F18E15CD33C; Wed, 19 Jun 2019 23:32:31 +0000 (UTC) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: from gndrsh.dnsmgr.net (br1.CN84in.dnsmgr.net [69.59.192.140]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id D14B4880CC; Wed, 19 Jun 2019 23:32:30 +0000 (UTC) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: from gndrsh.dnsmgr.net (localhost [127.0.0.1]) by gndrsh.dnsmgr.net (8.13.3/8.13.3) with ESMTP id x5JNWRQE020512; Wed, 19 Jun 2019 16:32:27 -0700 (PDT) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: (from freebsd-rwg@localhost) by gndrsh.dnsmgr.net (8.13.3/8.13.3/Submit) id x5JNWQxB020511; Wed, 19 Jun 2019 16:32:26 -0700 (PDT) (envelope-from freebsd-rwg) From: "Rodney W. Grimes" Message-Id: <201906192332.x5JNWQxB020511@gndrsh.dnsmgr.net> Subject: Re: Eliminating IPv6 (?) In-Reply-To: <42461287-c282-697e-6a21-571212dff832@grosbein.net> To: Eugene Grosbein Date: Wed, 19 Jun 2019 16:32:26 -0700 (PDT) CC: "Rodney W. Grimes" , freebsd-net , FreeBSD Questions Mailing List , "Ronald F. Guilmette" X-Mailer: ELM [version 2.4ME+ PL121h (25)] MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII X-Rspamd-Queue-Id: D14B4880CC X-Spamd-Bar: ++ Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [2.58 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.25)[-0.247,0]; FROM_HAS_DN(0.00)[]; NEURAL_SPAM_SHORT(0.96)[0.960,0]; IP_SCORE(0.04)[ip: (0.14), ipnet: 69.59.192.0/19(0.07), asn: 13868(0.05), country: US(-0.06)]; MIME_GOOD(-0.10)[text/plain]; RCVD_TLS_LAST(0.00)[]; DMARC_NA(0.00)[dnsmgr.net]; AUTH_NA(1.00)[]; RCPT_COUNT_FIVE(0.00)[5]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; MX_GOOD(-0.01)[cached: gndrsh.dnsmgr.net]; NEURAL_SPAM_LONG(0.94)[0.937,0]; R_SPF_NA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:13868, ipnet:69.59.192.0/19, country:US]; MID_RHS_MATCH_FROM(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 23:32:31 -0000 > 19.06.2019 23:18, Rodney W. Grimes wrote: > > >> 19.06.2019 3:57, Ronald F. Guilmette wrote: > >> > >>> And god only knows how much will break once I've done that. > >> > >> IPv6 will break only. > > > > That is incorrect, scripts that would silently do nothing can > > now infact fail, trust me, first hand experience. This can > > have consequences beyong "IPv6 will break only". > > > >>> How many other > >>> people have tested -all- of the resulting binaries, seriously, on actual > >>> production systems? (I may be the first one ever, at least for 12.0.) > >> > >> I ran plenty of hosts with IPv6 disabled this way and no problems observed, but this pre-dates 12.0. > > > > I've not run a userland without V6 in a long time once I started to have > > issues with some things. > > Can you give an example of such script in base system, please? > > If you have such script or binary not in our base, it's not our fault :-) That is an extremly aragant position to take. Your basically saying that only the base system scripts have to function correctly and that any script not part of the base system has no need to be supported. Go tell this to the ports people... *sigh* -- Rod Grimes rgrimes@freebsd.org From owner-freebsd-questions@freebsd.org Wed Jun 19 23:35:49 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8DB1615CD544; Wed, 19 Jun 2019 23:35:49 +0000 (UTC) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: from gndrsh.dnsmgr.net (br1.CN84in.dnsmgr.net [69.59.192.140]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 9A7598837E; Wed, 19 Jun 2019 23:35:48 +0000 (UTC) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: from gndrsh.dnsmgr.net (localhost [127.0.0.1]) by gndrsh.dnsmgr.net (8.13.3/8.13.3) with ESMTP id x5JNZk6k020542; Wed, 19 Jun 2019 16:35:46 -0700 (PDT) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: (from freebsd-rwg@localhost) by gndrsh.dnsmgr.net (8.13.3/8.13.3/Submit) id x5JNZkBd020541; Wed, 19 Jun 2019 16:35:46 -0700 (PDT) (envelope-from freebsd-rwg) From: "Rodney W. Grimes" Message-Id: <201906192335.x5JNZkBd020541@gndrsh.dnsmgr.net> Subject: Re: Eliminating IPv6 (?) In-Reply-To: <1633b96e-15ba-9933-abea-46e7b4f0e6a2@grosbein.net> To: Eugene Grosbein Date: Wed, 19 Jun 2019 16:35:46 -0700 (PDT) CC: "Rodney W. Grimes" , freebsd-net@freebsd.org, freebsd-questions@freebsd.org, "Ronald F. Guilmette" X-Mailer: ELM [version 2.4ME+ PL121h (25)] MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII X-Rspamd-Queue-Id: 9A7598837E X-Spamd-Bar: ++ Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [2.87 / 15.00]; ARC_NA(0.00)[]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; NEURAL_SPAM_SHORT(0.97)[0.969,0]; IP_SCORE(0.04)[ip: (0.14), ipnet: 69.59.192.0/19(0.07), asn: 13868(0.05), country: US(-0.06)]; MIME_GOOD(-0.10)[text/plain]; RCVD_TLS_LAST(0.00)[]; DMARC_NA(0.00)[dnsmgr.net]; AUTH_NA(1.00)[]; RCPT_COUNT_FIVE(0.00)[5]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_SOME(0.00)[]; MX_GOOD(-0.01)[cached: gndrsh.dnsmgr.net]; NEURAL_SPAM_LONG(0.96)[0.962,0]; NEURAL_SPAM_MEDIUM(0.01)[0.012,0]; R_SPF_NA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:13868, ipnet:69.59.192.0/19, country:US]; MID_RHS_MATCH_FROM(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 23:35:49 -0000 > 19.06.2019 22:42, Rodney W. Grimes wrote: > > >> 18.06.2019 10:10, Ronald F. Guilmette wrote: > >>> How can I turn off IPv6 entirely without rebuilding the kernel? > >> You cannot. GENERIC kernel specifically enables IPv6 support and you need to disable it at compile time. > >> And if you do, you better rebuild the world too using WITHOUT_INET6=yes in the /etc/src.conf > >> or else some utilities compiled with INET6 by default will query kernel > >> for IPv6-specific data (like routing entries) and complain that your kernel does not know about it. > > I have not seen these issues, can you give a specific example that fails? > > Other than kernel/userland interaction (that may be not relevant anymore for modern FreeBSD), > that's basically about making network connections (such as telnet etc.) > to FQDNs resolved to IPv6 addresses supported by binaries (and resolver being userland beast) > but not kernel/routing table. > > > A netstat -rn on a v4 only kernel simple reports the v4 table, and iirc a > > netstat -rn6 returns a "Protocol not supported error" as should all other > > things. > >> World built WITHOUT_INET6 has no such rough edges. > > I find that actually causes me more issues, as then my > > netstat -rn6 returns a hard error due to: > > case '6': > > #ifdef INET6 > > af = AF_INET6; > > #else > > errx(1, "IPv6 support is not compiled in"); > > #endif > > Seems very logical to me. Do we have a script in base running "netstat -rn6" > and breaking on this? Again, why does it need to be in base? Since when was that the standard by which we measure proper function? Basically the above #else is probably not the best of ideas... silently ignoring the -6 would of been a more gracefull solution possibly. -- Rod Grimes rgrimes@freebsd.org From owner-freebsd-questions@freebsd.org Wed Jun 19 23:37:51 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7D95215CD696; Wed, 19 Jun 2019 23:37:51 +0000 (UTC) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: from gndrsh.dnsmgr.net (br1.CN84in.dnsmgr.net [69.59.192.140]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id A9603884F2; Wed, 19 Jun 2019 23:37:50 +0000 (UTC) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: from gndrsh.dnsmgr.net (localhost [127.0.0.1]) by gndrsh.dnsmgr.net (8.13.3/8.13.3) with ESMTP id x5JNbm2C020559; Wed, 19 Jun 2019 16:37:48 -0700 (PDT) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: (from freebsd-rwg@localhost) by gndrsh.dnsmgr.net (8.13.3/8.13.3/Submit) id x5JNbmRi020558; Wed, 19 Jun 2019 16:37:48 -0700 (PDT) (envelope-from freebsd-rwg) From: "Rodney W. Grimes" Message-Id: <201906192337.x5JNbmRi020558@gndrsh.dnsmgr.net> Subject: Re: Eliminating IPv6 (?) In-Reply-To: <31076.1560978052@segfault.tristatelogic.com> To: "Ronald F. Guilmette" Date: Wed, 19 Jun 2019 16:37:48 -0700 (PDT) CC: FreeBSD Net , Mailinglists FreeBSD X-Mailer: ELM [version 2.4ME+ PL121h (25)] MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII X-Rspamd-Queue-Id: A9603884F2 X-Spamd-Bar: ++ Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [2.18 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.59)[-0.594,0]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; NEURAL_SPAM_SHORT(0.96)[0.956,0]; IP_SCORE(0.04)[ip: (0.14), ipnet: 69.59.192.0/19(0.07), asn: 13868(0.05), country: US(-0.06)]; MIME_GOOD(-0.10)[text/plain]; RCVD_TLS_LAST(0.00)[]; DMARC_NA(0.00)[dnsmgr.net]; AUTH_NA(1.00)[]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; MX_GOOD(-0.01)[cached: gndrsh.dnsmgr.net]; NEURAL_SPAM_LONG(0.89)[0.888,0]; R_SPF_NA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:13868, ipnet:69.59.192.0/19, country:US]; MID_RHS_MATCH_FROM(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 23:37:51 -0000 > In message > Andreas Nilsson wrote: > > >> That is *not* what the Handbook says. Please read it. > >> https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls-ipfw.html > >> > >Ok, so the handbook is wrong. It's a bug in the documentation. > > ACK Probably should just eliminate the firewall_type="/path/to/rules" thing, as that can be done with firewall_script and that does the right thing here. > >As soon as set firewall_script instead of firewall_type your problems will > >be solved. Just try it. The man page for rc.conf will tell you the same > >thing. > > ACK. Thank you for setting me straight. Your not wrong either. There are bugs here. > Regards, > rfg -- Rod Grimes rgrimes@freebsd.org From owner-freebsd-questions@freebsd.org Wed Jun 19 23:39:34 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DA3FB15CD855; Wed, 19 Jun 2019 23:39:33 +0000 (UTC) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: from gndrsh.dnsmgr.net (br1.CN84in.dnsmgr.net [69.59.192.140]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 1123288694; Wed, 19 Jun 2019 23:39:32 +0000 (UTC) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: from gndrsh.dnsmgr.net (localhost [127.0.0.1]) by gndrsh.dnsmgr.net (8.13.3/8.13.3) with ESMTP id x5JNdVfX020575; Wed, 19 Jun 2019 16:39:31 -0700 (PDT) (envelope-from freebsd-rwg@gndrsh.dnsmgr.net) Received: (from freebsd-rwg@localhost) by gndrsh.dnsmgr.net (8.13.3/8.13.3/Submit) id x5JNdVYZ020574; Wed, 19 Jun 2019 16:39:31 -0700 (PDT) (envelope-from freebsd-rwg) From: "Rodney W. Grimes" Message-Id: <201906192339.x5JNdVYZ020574@gndrsh.dnsmgr.net> Subject: Re: Eliminating IPv6 (?) In-Reply-To: <1633b96e-15ba-9933-abea-46e7b4f0e6a2@grosbein.net> To: Eugene Grosbein Date: Wed, 19 Jun 2019 16:39:31 -0700 (PDT) CC: "Rodney W. Grimes" , "Ronald F. Guilmette" , freebsd-questions@freebsd.org, freebsd-net@freebsd.org X-Mailer: ELM [version 2.4ME+ PL121h (25)] MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII X-Rspamd-Queue-Id: 1123288694 X-Spamd-Bar: ++ Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [2.84 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.02)[-0.019,0]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; NEURAL_SPAM_SHORT(0.97)[0.966,0]; IP_SCORE(0.04)[ip: (0.14), ipnet: 69.59.192.0/19(0.07), asn: 13868(0.05), country: US(-0.06)]; MIME_GOOD(-0.10)[text/plain]; RCVD_TLS_LAST(0.00)[]; DMARC_NA(0.00)[dnsmgr.net]; AUTH_NA(1.00)[]; RCPT_COUNT_FIVE(0.00)[5]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_SOME(0.00)[]; MX_GOOD(-0.01)[cached: gndrsh.dnsmgr.net]; NEURAL_SPAM_LONG(0.96)[0.958,0]; R_SPF_NA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:13868, ipnet:69.59.192.0/19, country:US]; MID_RHS_MATCH_FROM(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jun 2019 23:39:34 -0000 [ Charset windows-1252 unsupported, converting... ] > 19.06.2019 22:42, Rodney W. Grimes wrote: > > >> 18.06.2019 10:10, Ronald F. Guilmette wrote: > >>> How can I turn off IPv6 entirely without rebuilding the kernel? > >> You cannot. GENERIC kernel specifically enables IPv6 support and you need to disable it at compile time. > >> And if you do, you better rebuild the world too using WITHOUT_INET6=yes in the /etc/src.conf > >> or else some utilities compiled with INET6 by default will query kernel > >> for IPv6-specific data (like routing entries) and complain that your kernel does not know about it. > > I have not seen these issues, can you give a specific example that fails? > > Other than kernel/userland interaction (that may be not relevant anymore for modern FreeBSD), > that's basically about making network connections (such as telnet etc.) > to FQDNs resolved to IPv6 addresses supported by binaries (and resolver being userland beast) > but not kernel/routing table. > > > A netstat -rn on a v4 only kernel simple reports the v4 table, and iirc a > > netstat -rn6 returns a "Protocol not supported error" as should all other > > things. > >> World built WITHOUT_INET6 has no such rough edges. > > I find that actually causes me more issues, as then my > > netstat -rn6 returns a hard error due to: > > case '6': > > #ifdef INET6 > > af = AF_INET6; > > #else > > errx(1, "IPv6 support is not compiled in"); > > #endif > > Seems very logical to me. Do we have a script in base running "netstat -rn6" > and breaking on this? Actually that would be more proper as: #ifdef INET6 case '6': af = AF_INET6; #endif With similiar adjustments to the usage message, if needed. -- Rod Grimes rgrimes@freebsd.org From owner-freebsd-questions@freebsd.org Thu Jun 20 02:58:08 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D695215D1BD9 for ; Thu, 20 Jun 2019 02:58:07 +0000 (UTC) (envelope-from roberthuff@rcn.com) Received: from smtp.rcn.com (smtp.rcn.com [69.168.97.78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id E39368E391 for ; Thu, 20 Jun 2019 02:58:06 +0000 (UTC) (envelope-from roberthuff@rcn.com) DKIM-Signature: v=1; a=rsa-sha1; d=rcn.com; s=20180516; c=relaxed/simple; q=dns/txt; i=@rcn.com; t=1560999485; h=From:Subject:Date:To:MIME-Version:Content-Type; bh=+5Ymq7hzRvugjRfCDROyMBRgByc=; b=a9d+h2nx2kRc6Gg3lLQrT54n8OcfW2lLAFS341KcmpnRrM5yCz05/7zOH4olpkdy YV1T/stcrvxNyikno8D5o+jRkOYB/ebjcdW1XtRPCmNuXJmjX8YLTCpV+XItpq1N 7WhG9G85oT8DEsuSx0A3+zTHSHXhaGsnKz/l/QXO4I+A+z4H2ojmpt5OIKneI9se ylP+ts2W5dhEKCNf9/wlCGFN4aB34vG+hz0JaWjFtmmTN1f6FNxDV4XbdICh2Xa6 +cZCle9LdvfpuBKIBCtFXSio5idWRosLxSpk8dHOLnBVPW+g+ZKX0wxbzzsY4abr 9kurmv+JJrX5UxW27bzRXA==; X_CMAE_Category: , , X-CNFS-Analysis: v=2.2 cv=aKGykv1m c=1 sm=1 tr=0 a=9TgA2UwI6Wy+6BV4wQM/cQ==:117 a=9TgA2UwI6Wy+6BV4wQM/cQ==:17 a=jpOVt7BSZ2e4Z31A5e1TngXxSK0=:19 a=KGjhK52YXX0A:10 a=kj9zAlcOel0A:10 a=XRQyMpdBKAEA:10 a=dq6fvYVFJ5YA:10 a=48faUk6PgeAA:10 a=TeW0tiTjp0bHKsuJq68A:9 a=CjuIK1q_8ugA:10 X-CM-Score: 0 X-Scanned-by: Cloudmark Authority Engine X-Authed-Username: cm9iZXJ0aHVmZkByY24uY29t Authentication-Results: smtp03.rcn.cmh.synacor.com header.from=roberthuff@rcn.com; sender-id=softfail Authentication-Results: smtp03.rcn.cmh.synacor.com smtp.user=roberthuff; auth=pass (PLAIN) Received: from [209.6.230.48] ([209.6.230.48:41368] helo=jerusalem.litteratus.org.litteratus.org) by smtp.rcn.com (envelope-from ) (ecelerity 3.6.25.56547 r(Core:3.6.25.0)) with ESMTPSA (cipher=AES256-GCM-SHA384) id B8/D6-13517-D36FA0D5; Wed, 19 Jun 2019 22:58:05 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <23818.63036.888460.410557@jerusalem.litteratus.org> Date: Wed, 19 Jun 2019 22:58:04 -0400 From: Robert Huff To: "Rodney W. Grimes" Cc: Robert Huff , freebsd-net , FreeBSD Questions Mailing List , "Ronald F. Guilmette" Subject: Re: Eliminating IPv6 (?) In-Reply-To: <201906192322.x5JNMxpK020489@gndrsh.dnsmgr.net> References: <23818.36263.312034.714296@jerusalem.litteratus.org> <201906192322.x5JNMxpK020489@gndrsh.dnsmgr.net> X-Mailer: VM 8.2.0b under 26.2 (amd64-portbld-freebsd13.0) X-Rspamd-Queue-Id: E39368E391 X-Spamd-Bar: ------- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=rcn.com header.s=20180516 header.b=a9d+h2nx; dmarc=pass (policy=none) header.from=rcn.com; spf=pass (mx1.freebsd.org: domain of roberthuff@rcn.com designates 69.168.97.78 as permitted sender) smtp.mailfrom=roberthuff@rcn.com X-Spamd-Result: default: False [-7.87 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_DKIM_ALLOW(-0.20)[rcn.com:s=20180516]; RCVD_TLS_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:69.168.97.0/24]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; IP_SCORE(-2.77)[ip: (-9.31), ipnet: 69.168.97.0/24(-4.59), asn: 36271(0.08), country: US(-0.06)]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; RCPT_COUNT_FIVE(0.00)[5]; DWL_DNSWL_LOW(-1.00)[rcn.com.dwl.dnswl.org : 127.0.5.1]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[rcn.com:+]; MX_GOOD(-0.01)[cached: mx.rcn.com]; DMARC_POLICY_ALLOW(-0.50)[rcn.com,none]; NEURAL_HAM_SHORT(-0.99)[-0.989,0]; RCVD_IN_DNSWL_LOW(-0.10)[78.97.168.69.list.dnswl.org : 127.0.5.1]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:36271, ipnet:69.168.97.0/24, country:US]; RCVD_COUNT_TWO(0.00)[2]; SUBJECT_HAS_QUESTION(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Jun 2019 02:58:08 -0000 Rodney W. Grimes writes: > > Wider question: > > Say I'm running a system with both IPv4 and IPv6 enabled. > > Stuff Happens(tm) and I want to completely disable IPv6 for some > > indefinite but temporary period - not chamge any configuration > > settings or firewall rules, but just have the code finish processing > > current packets (or not) and then ignore further traffic. There will > > be consequences; I'm prepared to accept them. > > Is there a single master switch - a sysctl, perhaps, or something > > in /etc/rc.d - that lets me do that? > > You do raise a very valid point. > > ipfw add 1 deny ipv6 from any to any > > That is about the only "master" switch I can think of that would > be very effective. Ywah ... but that violates the initial constraint. Respectfully, Robert Huff From owner-freebsd-questions@freebsd.org Thu Jun 20 04:17:31 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CDD6515D33F8; Thu, 20 Jun 2019 04:17:31 +0000 (UTC) (envelope-from eugen@grosbein.net) Received: from eg.sd.rdtc.ru (eg.sd.rdtc.ru [IPv6:2a03:3100:c:13::5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "eg.sd.rdtc.ru", Issuer "eg.sd.rdtc.ru" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id CCB9869EA3; Thu, 20 Jun 2019 04:17:20 +0000 (UTC) (envelope-from eugen@grosbein.net) X-Envelope-From: eugen@grosbein.net X-Envelope-To: freebsd-net@freebsd.org Received: from [10.58.0.4] ([10.58.0.4]) by eg.sd.rdtc.ru (8.15.2/8.15.2) with ESMTPS id x5K4H9Dr097525 (version=TLSv1.2 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Thu, 20 Jun 2019 11:17:09 +0700 (+07) (envelope-from eugen@grosbein.net) Subject: Re: Eliminating IPv6 (?) To: "Rodney W. Grimes" References: <201906192332.x5JNWQxB020511@gndrsh.dnsmgr.net> Cc: freebsd-net , FreeBSD Questions Mailing List , "Ronald F. Guilmette" From: Eugene Grosbein Message-ID: <94c95322-700e-422f-1358-19d577a8b15c@grosbein.net> Date: Thu, 20 Jun 2019 11:17:00 +0700 User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: <201906192332.x5JNWQxB020511@gndrsh.dnsmgr.net> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: CCB9869EA3 X-Spamd-Bar: / Authentication-Results: mx1.freebsd.org; spf=permerror (mx1.freebsd.org: domain of eugen@grosbein.net uses mechanism not recognized by this client) smtp.mailfrom=eugen@grosbein.net X-Spamd-Result: default: False [0.74 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.57)[-0.575,0]; RCVD_TLS_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[4]; MX_INVALID(0.50)[greylisted]; NEURAL_SPAM_SHORT(0.74)[0.739,0]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[grosbein.net]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; R_SPF_PERMFAIL(0.00)[]; NEURAL_SPAM_LONG(0.17)[0.174,0]; IP_SCORE(0.00)[country: RU(0.01)]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:29072, ipnet:2a03:3100::/32, country:RU]; MID_RHS_MATCH_FROM(0.00)[]; SUBJECT_HAS_QUESTION(0.00)[]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Jun 2019 04:17:32 -0000 20.06.2019 6:32, Rodney W. Grimes wrote: >>> I've not run a userland without V6 in a long time once I started to have >>> issues with some things. >> >> Can you give an example of such script in base system, please? >> >> If you have such script or binary not in our base, it's not our fault :-) > > That is an extremly aragant position to take. Your basically saying that > only the base system scripts have to function correctly and that any > script not part of the base system has no need to be supported. > > Go tell this to the ports people... *sigh* I'm saying that areas of responsibility should be denoted. If there is some script in the world written with bad assumptions, its author/maintainer is responsible in fixing it. FreeBSD already provides sysctls kern.features.inet and kern.features.inet6 to make it easier for scripts. From owner-freebsd-questions@freebsd.org Thu Jun 20 10:36:00 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A7AEC15B5186 for ; Thu, 20 Jun 2019 10:36:00 +0000 (UTC) (envelope-from ml@netfence.it) Received: from soth.netfence.it (net-2-44-121-52.cust.vodafonedsl.it [2.44.121.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "mailserver.netfence.it", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 5A1CA746E3 for ; Thu, 20 Jun 2019 10:35:58 +0000 (UTC) (envelope-from ml@netfence.it) Received: from alamar.ventu (alamar.local.netfence.it [10.1.2.18]) (authenticated bits=0) by soth.netfence.it (8.15.2/8.15.2) with ESMTPSA id x5KAZpFR077277 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for ; Thu, 20 Jun 2019 12:35:54 +0200 (CEST) (envelope-from ml@netfence.it) X-Authentication-Warning: soth.netfence.it: Host alamar.local.netfence.it [10.1.2.18] claimed to be alamar.ventu To: freebsd-questions@freebsd.org From: Andrea Venturoli Subject: GDB and prettyprinting Message-ID: <579a49db-ed0d-f626-055e-b2c6fb952dfe@netfence.it> Date: Thu, 20 Jun 2019 12:35:50 +0200 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:60.0) Gecko/20100101 Thunderbird/60.7.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 5A1CA746E3 X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; spf=pass (mx1.freebsd.org: domain of ml@netfence.it designates 2.44.121.52 as permitted sender) smtp.mailfrom=ml@netfence.it X-Spamd-Result: default: False [-4.75 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-0.997,0]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:2.44.121.52]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; TO_DN_NONE(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; HAS_XAW(0.00)[]; MX_GOOD(-0.01)[cached: mailserver.netfence.it]; NEURAL_HAM_SHORT(-0.96)[-0.959,0]; DMARC_NA(0.00)[netfence.it]; IP_SCORE(-1.48)[ip: (-4.39), ipnet: 2.44.0.0/16(-2.19), asn: 30722(-0.86), country: IT(0.04)]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:30722, ipnet:2.44.0.0/16, country:IT]; MID_RHS_MATCH_FROM(0.00)[]; RCVD_TLS_ALL(0.00)[]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Jun 2019 10:36:00 -0000 Hello. I'm trying to better see C++/STL structures in GDB, so I'd like prettyprint to work, but after some search, I'm confused. I've got a recent GDB (8.3), with PYTHON option enabled. All the (old?) tutorials I've seen say I have to download additional files, but "pkg info -l gdb" already shows some interesting elements, e.g. >... > /usr/local/share/gdb/python/gdb/__pycache__/printing.cpython-36.pyc >... > /usr/local/share/libcxx-gdbpy/libcxx/__pycache__/printers.cpython-36.pyc >... So a couple of question: _ is everything I need included in devel/gdb or do I need additional files? _ in the latter case are they available in some port? (I've seen talks about devel/libcxx-gdb, but it doesn't exist [yet]). _ In the former case, what do I need to enable all this? bye & Thanks av. From owner-freebsd-questions@freebsd.org Fri Jun 21 01:35:23 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6984015CCF56 for ; Fri, 21 Jun 2019 01:35:23 +0000 (UTC) (envelope-from joskin@faintmold.icu) Received: from faintmold.icu (j2wmmiz0.ni.net.tr [89.252.171.15]) by mx1.freebsd.org (Postfix) with ESMTP id 884657019C for ; Fri, 21 Jun 2019 01:35:22 +0000 (UTC) (envelope-from joskin@faintmold.icu) From: " Kathryn Smith" Date: Thu, 20 Jun 2019 20:32:33 -0500 MIME-Version: 1.0 Subject: Drinking this (2 a day) will shred fat in days (Shark Tank) To: Message-ID: X-Rspamd-Queue-Id: 884657019C X-Spamd-Bar: +++++ X-Spamd-Result: default: False [5.40 / 15.00]; ARC_NA(0.00)[]; R_DKIM_ALLOW(-0.20)[faintmold.icu:s=mail]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:89.252.171.15]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; TO_DN_NONE(0.00)[]; HTML_SHORT_LINK_IMG_1(2.00)[]; NEURAL_SPAM_MEDIUM(0.98)[0.975,0]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_SPAM_SHORT(0.99)[0.987,0]; DKIM_TRACE(0.00)[faintmold.icu:+]; DMARC_POLICY_ALLOW(-0.50)[faintmold.icu,quarantine]; NEURAL_SPAM_LONG(1.00)[0.999,0]; MX_GOOD(-0.01)[cached: aspmx.l.google.com]; RCVD_COUNT_ZERO(0.00)[0]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+]; IP_SCORE(1.45)[ipnet: 89.252.171.0/24(4.32), asn: 51559(2.87), country: TR(0.06)]; ASN(0.00)[asn:51559, ipnet:89.252.171.0/24, country:TR]; MID_RHS_MATCH_FROM(0.00)[]; RCVD_TLS_ALL(0.00)[] Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Jun 2019 01:35:23 -0000 We have all heard of ""Ke-to" and how it can get your body back fast. But what really is it? A new recent discovery shows that you can put your body into "Ke-to" without changing what you eat or do. You can drop up to 5x more before the new year. Read More... I want to stop receiving these or send a request to: 248 North Grove Street Rome, NY 13440 From owner-freebsd-questions@freebsd.org Fri Jun 21 03:54:42 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 027FA15CF3F4 for ; Fri, 21 Jun 2019 03:54:42 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mout.kundenserver.de (mout.kundenserver.de [212.227.17.10]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "mout.kundenserver.de", Issuer "TeleSec ServerPass Class 2 CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 98D8D7440A for ; Fri, 21 Jun 2019 03:54:40 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de ([94.222.12.231]) by mrelayeu.kundenserver.de (mreue108 [212.227.15.183]) with ESMTPA (Nemesis) id 1M3DFj-1hb9kB0Z25-003a7l for ; Fri, 21 Jun 2019 05:49:10 +0200 Date: Fri, 21 Jun 2019 05:49:09 +0200 From: Polytropon To: FreeBSD Questions Subject: How to un-select files in shell wildcard patterns Message-Id: <20190621054909.c6ba47ab.freebsd@edvax.de> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K1:0t5z0zzkT6d3tjhuzkhzpXffCFrOj0HmhU5ppw7E41w9vU4BsDF kGnt0798dDdwWYPcsbpgiTw+0b8fDvqbGEreF5s3004jd47oAIsthzY0YJNkdkg45TZtt57 Y4o6tW5ii14fBkfZ41PPuedm8h/FcPrgKzt5TBaEYs5zxGG8XP5QKVeppQPBeulKCHTQ42L 9ngY4ZjVeKxjmB6FHGpiA== X-Spam-Flag: NO X-UI-Out-Filterresults: notjunk:1;V03:K0:nMreHB+elF8=:jC+n588ua3bb2dlmboQnZ4 l+kXDbUoCTwBou5m37cb2s8J8NOHKdD8Ba60vQ5uGMWOCZ+N0tMupIdWZ3daFEHGncRU/5oIH yf+cIssD0P8rA85FDou+68DZnc9arbQF6BhPOEuYUZSDoSvj3M8egne5Risdy+JXategfECEb RxeVjaO8XN0O5e5nvKw3tn2Y/nDiEM/qFwvl9DMsBShk8FVWjuuW49v8svQuIWi8LUe11DSMa Y4TARFOfUg2YXlJc8XuQ2gYk4pUDJjaZ5UB9Cfvp+6aHuUXpb0qeg2BgUsCiaLgvEJWc0uKgO VRjuEJG47+NlTr+pDAMl8Ujx7pV3Pu0eueeyT4ytGU8FQq7w/sH4lmiHIINzBvDsVJhdtGJuE ZLdS8Rme8880nRsJiJtFTQAkbSMSvRwBrYqizO0pCvcdOlDvEya5kvXMmP+yiRMg9bXSZCrV4 r3w00XjwaPq9ZaVgjGImj0a3+yaLTBfSCDLRIPqwMI4K8F1+ZepwZcRhoUZKVPDB5kpV/fDWS cI9CtruyV4mncrz2HG8FxnbIS/d+P0cneW6yWJfX8hdH60h4ILqCItxqYr2BHyoXLYmzfLrRQ KWGsGFieAsn1KFHu3TuF8s03i2ElADWv0SOz6VM27taCGWjnhr+LjJDqFUk18aM/MRUMcK+BK iE2Opb8kwFnmhLse1SDGjkHUdbfNbKFRc02VWXLLCP7q+ySZdfgo0/Uu6QLb757cJFQqVeJqw S0fLf1WnnbL3SUAV3A01HJutjcA4WQ5CeZyaJat8j+tb/5f+IWAz9vA9f+k= X-Rspamd-Queue-Id: 98D8D7440A X-Spamd-Bar: ++++ Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [4.22 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; HAS_REPLYTO(0.00)[freebsd@edvax.de]; MV_CASE(0.50)[]; HAS_ORG_HEADER(0.00)[]; TO_DN_ALL(0.00)[]; MX_GOOD(-0.01)[mx01.schlund.de,mx00.schlund.de]; RECEIVED_SPAMHAUS_PBL(0.00)[231.12.222.94.zen.spamhaus.org : 127.0.0.11]; RCVD_TLS_LAST(0.00)[]; MIME_TRACE(0.00)[0:+]; FROM_EQ_ENVFROM(0.00)[]; ASN(0.00)[asn:8560, ipnet:212.227.0.0/16, country:DE]; ARC_NA(0.00)[]; REPLYTO_EQ_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_SPAM_SHORT(0.47)[0.474,0]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; DMARC_NA(0.00)[edvax.de]; AUTH_NA(1.00)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_SPAM_MEDIUM(0.48)[0.484,0]; R_DKIM_NA(0.00)[]; NEURAL_SPAM_LONG(0.94)[0.941,0]; RCVD_IN_DNSWL_NONE(0.00)[10.17.227.212.list.dnswl.org : 127.0.5.0]; MID_CONTAINS_FROM(1.00)[]; R_SPF_NA(0.00)[]; RWL_MAILSPIKE_POSSIBLE(0.00)[10.17.227.212.rep.mailspike.net : 127.0.0.17]; RCVD_COUNT_TWO(0.00)[2]; IP_SCORE(-0.07)[ip: (-1.45), ipnet: 212.227.0.0/16(-1.42), asn: 8560(2.50), country: DE(-0.01)] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Jun 2019 03:54:42 -0000 I'm interested in a convenient method to "un-select" files when using regular (sh) shell wildcards. It's quite easy to describe things like *.tex to perform an operation on all LaTeX source files, or *a* on all files whose name contains (at least) one "a". Patterns that are based on the inclusion of certain attributes are not a problem to deal with using the builtin pattern matching of the shell. But what about the opposite? Let's say, perform an operation on all files _except_ the LaTeX source files, or all files whose name does _not_ contain an "a"? Is there a good method to do this, except creating a kind of "custom regex wrapper script" that does the selection part, for further use with `subshell` or | xargs? -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Fri Jun 21 04:40:02 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2D0DB15D0193 for ; Fri, 21 Jun 2019 04:40:02 +0000 (UTC) (envelope-from roberthuff@rcn.com) Received: from smtp.rcn.com (smtp.rcn.com [69.168.97.78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 8890475650 for ; Fri, 21 Jun 2019 04:40:00 +0000 (UTC) (envelope-from roberthuff@rcn.com) DKIM-Signature: v=1; a=rsa-sha1; d=rcn.com; s=20180516; c=relaxed/simple; q=dns/txt; i=@rcn.com; t=1561091994; h=From:Subject:Date:To:MIME-Version:Content-Type; bh=qSg2+4+1GZrdxh4/2OMb07qvoXQ=; b=Ub3pI55slwfYYLtYkTryy7j5AaDv9iJUsEF5RqMfBmIF7CgT/0EL18ZjzLHOnBSf DHxZAOkPtfI1sCeIGXFiGQxeijAnq48urBkwaily3UmjRH1ADW9EQeHyDgZNo7Ct +y0zVhl3adLRVCiOA9C7o7CV9/iYhxnXfmWL0rkwowIQ/l+OEE6RXAtm8lrE98Nu yu90R0+BA8zcrVfCDzNHyZttpNPtKnZsWT9yyZWgyxCRiAahwAbF+dqzUPp6kajL L1l0KusoUdPbnoWYssM7jN8CDZvnUTXAL0z5oUc8CWwgtVYuVgI+Ij17q18N/5cU MsVkcSi5PdHuGKyCS5CFcA==; X_CMAE_Category: , , X-CNFS-Analysis: v=2.2 cv=aKGykv1m c=1 sm=1 tr=0 a=9TgA2UwI6Wy+6BV4wQM/cQ==:117 a=9TgA2UwI6Wy+6BV4wQM/cQ==:17 a=jpOVt7BSZ2e4Z31A5e1TngXxSK0=:19 a=KGjhK52YXX0A:10 a=kj9zAlcOel0A:10 a=XRQyMpdBKAEA:10 a=dq6fvYVFJ5YA:10 a=48faUk6PgeAA:10 a=KYTo1BJhUPDvMax_eFAA:9 a=7Zwj6sZBwVKJAoWSPKxL6X1jA+E=:19 a=CjuIK1q_8ugA:10 X-CM-Score: 0 X-Scanned-by: Cloudmark Authority Engine X-Authed-Username: cm9iZXJ0aHVmZkByY24uY29t Authentication-Results: smtp03.rcn.cmh.synacor.com header.from=roberthuff@rcn.com; sender-id=softfail Authentication-Results: smtp03.rcn.cmh.synacor.com smtp.user=roberthuff; auth=pass (PLAIN) Received: from [209.6.230.48] ([209.6.230.48:55400] helo=jerusalem.litteratus.org.litteratus.org) by smtp.rcn.com (envelope-from ) (ecelerity 3.6.25.56547 r(Core:3.6.25.0)) with ESMTPSA (cipher=AES256-GCM-SHA384) id B4/3A-13517-A9F5C0D5; Fri, 21 Jun 2019 00:39:54 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <23820.24473.509724.279485@jerusalem.litteratus.org> Date: Fri, 21 Jun 2019 00:39:53 -0400 From: Robert Huff To: Polytropon Cc: FreeBSD Questions Subject: How to un-select files in shell wildcard patterns In-Reply-To: <20190621054909.c6ba47ab.freebsd@edvax.de> References: <20190621054909.c6ba47ab.freebsd@edvax.de> X-Mailer: VM 8.2.0b under 26.2 (amd64-portbld-freebsd13.0) X-Rspamd-Queue-Id: 8890475650 X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=rcn.com header.s=20180516 header.b=Ub3pI55s; dmarc=pass (policy=none) header.from=rcn.com; spf=pass (mx1.freebsd.org: domain of roberthuff@rcn.com designates 69.168.97.78 as permitted sender) smtp.mailfrom=roberthuff@rcn.com X-Spamd-Result: default: False [-2.74 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_DKIM_ALLOW(0.00)[rcn.com:s=20180516]; RBL_NIXSPAM(4.00)[78.97.168.69.ix.dnsbl.manitu.net]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(0.00)[+ip4:69.168.97.0/24]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; NEURAL_HAM_MEDIUM(-1.00)[-0.998,0]; BAD_REP_POLICIES(0.10)[]; DWL_DNSWL_LOW(-1.00)[rcn.com.dwl.dnswl.org : 127.0.5.1]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[rcn.com:+]; RCPT_COUNT_TWO(0.00)[2]; DMARC_POLICY_ALLOW(0.00)[rcn.com,none]; MX_GOOD(-0.01)[mx.rcn.com]; NEURAL_HAM_SHORT(-0.85)[-0.852,0]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; IP_SCORE(-2.78)[ip: (-9.30), ipnet: 69.168.97.0/24(-4.59), asn: 36271(0.07), country: US(-0.06)]; ASN(0.00)[asn:36271, ipnet:69.168.97.0/24, country:US]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[]; RCVD_IN_DNSWL_LOW(-0.10)[78.97.168.69.list.dnswl.org : 127.0.5.1] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Jun 2019 04:40:02 -0000 Polytropon writes: > I'm interested in a convenient method to "un-select" files > when using regular (sh) shell wildcards. It's quite easy to > describe things like > > *.tex > > to perform an operation on all LaTeX source files, or > > *a* > > on all files whose name contains (at least) one "a". Patterns > that are based on the inclusion of certain attributes are not > a problem to deal with using the builtin pattern matching of > the shell. > > But what about the opposite? Let's say, perform an operation > on all files _except_ the LaTeX source files, or all files > whose name does _not_ contain an "a"? > > Is there a good method to do this, except creating a kind > of "custom regex wrapper script" that does the selection part, > for further use with `subshell` or | xargs? Um ... does Polyt> ls -al "*^a*" From owner-freebsd-questions@freebsd.org Fri Jun 21 04:47:40 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9D1E015D04E1 for ; Fri, 21 Jun 2019 04:47:40 +0000 (UTC) (envelope-from mail@ozzmosis.com) Received: from blue.elm.relay.mailchannels.net (blue.elm.relay.mailchannels.net [23.83.212.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id BCCDD7602D for ; Fri, 21 Jun 2019 04:47:38 +0000 (UTC) (envelope-from mail@ozzmosis.com) X-Sender-Id: dreamhost|x-authsender|relay@ozzmosis.com Received: from relay.mailchannels.net (localhost [127.0.0.1]) by relay.mailchannels.net (Postfix) with ESMTP id 93D5A5E0793; Fri, 21 Jun 2019 04:10:04 +0000 (UTC) Received: from pdx1-sub0-mail-a9.g.dreamhost.com (100-96-88-48.trex.outbound.svc.cluster.local [100.96.88.48]) (Authenticated sender: dreamhost) by relay.mailchannels.net (Postfix) with ESMTPA id E39C75E1C85; Fri, 21 Jun 2019 04:10:03 +0000 (UTC) X-Sender-Id: dreamhost|x-authsender|relay@ozzmosis.com Received: from pdx1-sub0-mail-a9.g.dreamhost.com ([TEMPUNAVAIL]. [64.90.62.162]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384) by 0.0.0.0:2500 (trex/5.17.2); Fri, 21 Jun 2019 04:10:04 +0000 X-MC-Relay: Neutral X-MailChannels-SenderId: dreamhost|x-authsender|relay@ozzmosis.com X-MailChannels-Auth-Id: dreamhost X-Robust-Spot: 01751a1e5a7b583e_1561090204364_2727136410 X-MC-Loop-Signature: 1561090204364:1527519907 X-MC-Ingress-Time: 1561090204364 Received: from pdx1-sub0-mail-a9.g.dreamhost.com (localhost [127.0.0.1]) by pdx1-sub0-mail-a9.g.dreamhost.com (Postfix) with ESMTP id AF94E8009C; Thu, 20 Jun 2019 21:09:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=ozzmosis.com; h=date:from :to:cc:subject:message-id:references:mime-version:content-type :in-reply-to; s=ozzmosis.com; bh=dHpPS+nUot9G+Gye/sF6OwR/rfk=; b= pTeMHNWtHqFIFCoPGqHKWLQXRJJHqX4mqWHbRMdjgQjZBhLcxO6CWQpM1mlBtph6 8MdzfljyNdMuOST4T16cZqD8jiJ5fkG+UkRofn2rdv/cF703sQI3CeOuGn7+WoTJ sQOyEosRnNu4csEyaZtusb1oJn1+sx/a10niAxllIkw= Received: from blizzard.ozzmosis.com (167-179-139-56.a7b38b.mel.nbn.aussiebb.net [167.179.139.56]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) (Authenticated sender: relay@ozzmosis.com) by pdx1-sub0-mail-a9.g.dreamhost.com (Postfix) with ESMTPSA id DA38080097; Thu, 20 Jun 2019 21:09:56 -0700 (PDT) Received: by blizzard.ozzmosis.com (Postfix, from userid 1001) id D0B0555DB; Fri, 21 Jun 2019 14:09:53 +1000 (AEST) Date: Fri, 21 Jun 2019 14:09:53 +1000 X-DH-BACKEND: pdx1-sub0-mail-a9 From: andrew clarke To: Polytropon Cc: FreeBSD Questions Subject: Re: How to un-select files in shell wildcard patterns Message-ID: <20190621040953.65nb47tcifow3y2l@ozzmosis.com> References: <20190621054909.c6ba47ab.freebsd@edvax.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20190621054909.c6ba47ab.freebsd@edvax.de> User-Agent: NeoMutt/20180716 X-VR-OUT-STATUS: OK X-VR-OUT-SCORE: -100 X-VR-OUT-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeduvddrtdehgdektdcutefuodetggdotefrodftvfcurfhrohhfihhlvgemucggtfgfnhhsuhgsshgtrhhisggvpdfftffgtefojffquffvnecuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenucfjughrpeffhffvuffkfhggtggujggfsehttdertddtredvnecuhfhrohhmpegrnhgurhgvficutghlrghrkhgvuceomhgrihhlsehoiiiimhhoshhishdrtghomheqnecukfhppeduieejrddujeelrddufeelrdehieenucfrrghrrghmpehmohguvgepshhmthhppdhhvghlohepsghlihiiiigrrhgurdhoiiiimhhoshhishdrtghomhdpihhnvghtpeduieejrddujeelrddufeelrdehiedprhgvthhurhhnqdhprghthheprghnughrvgifucgtlhgrrhhkvgcuoehmrghilhesohiiiihmohhsihhsrdgtohhmqedpmhgrihhlfhhrohhmpehmrghilhesohiiiihmohhsihhsrdgtohhmpdhnrhgtphhtthhopehfrhgvvggsshguqdhquhgvshhtihhonhhssehfrhgvvggsshgurdhorhhgnecuvehluhhsthgvrhfuihiivgeptd X-Rspamd-Queue-Id: BCCDD7602D X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dkim=pass header.d=ozzmosis.com header.s=ozzmosis.com header.b=pTeMHNWt; spf=pass (mx1.freebsd.org: domain of mail@ozzmosis.com designates 23.83.212.20 as permitted sender) smtp.mailfrom=mail@ozzmosis.com X-Spamd-Result: default: False [-1.53 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_DKIM_ALLOW(-0.20)[ozzmosis.com:s=ozzmosis.com]; NEURAL_HAM_MEDIUM(-0.72)[-0.723,0]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:23.83.208.1/20]; NEURAL_HAM_LONG(-0.99)[-0.994,0]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[ozzmosis.com]; NEURAL_SPAM_SHORT(0.49)[0.486,0]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[ozzmosis.com:+]; RCPT_COUNT_TWO(0.00)[2]; RCVD_IN_DNSWL_NONE(0.00)[20.212.83.23.list.dnswl.org : 127.0.3.0]; MX_GOOD(-0.01)[mx2.dreamhost.com,mx1.dreamhost.com]; IP_SCORE(0.21)[ipnet: 23.83.208.0/21(0.64), asn: 36483(0.51), country: CA(-0.09)]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:36483, ipnet:23.83.208.0/21, country:CA]; MID_RHS_MATCH_FROM(0.00)[]; RCVD_COUNT_SEVEN(0.00)[7] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Jun 2019 04:47:40 -0000 On Fri 2019-06-21 05:49:09 UTC+0200, Polytropon (freebsd@edvax.de) wrote: > I'm interested in a convenient method to "un-select" files > when using regular (sh) shell wildcards. It's quite easy to > describe things like > > *.tex > > to perform an operation on all LaTeX source files, or > > *a* > > on all files whose name contains (at least) one "a". Patterns > that are based on the inclusion of certain attributes are not > a problem to deal with using the builtin pattern matching of > the shell. > > But what about the opposite? Let's say, perform an operation > on all files _except_ the LaTeX source files, or all files > whose name does _not_ contain an "a"? > > Is there a good method to do this, except creating a kind > of "custom regex wrapper script" that does the selection part, > for further use with `subshell` or | xargs? zsh can do glob exclusion once "extended globbing" is enabled: $ setopt extendedglob List all files except LaTeX source files: $ ls ^*.tex List all files except those with an 'a' character in the name: $ ls ^*a* From owner-freebsd-questions@freebsd.org Fri Jun 21 05:53:45 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DBDB115D17CC for ; Fri, 21 Jun 2019 05:53:44 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mout.kundenserver.de (mout.kundenserver.de [212.227.126.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "mout.kundenserver.de", Issuer "TeleSec ServerPass Class 2 CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id A811E817FA for ; Fri, 21 Jun 2019 05:53:43 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de ([94.222.12.231]) by mrelayeu.kundenserver.de (mreue012 [212.227.15.167]) with ESMTPA (Nemesis) id 1MwjO6-1iXovz3SdG-00yAl4; Fri, 21 Jun 2019 07:48:33 +0200 Date: Fri, 21 Jun 2019 07:48:33 +0200 From: Polytropon To: Robert Huff Cc: FreeBSD Questions Subject: Re: How to un-select files in shell wildcard patterns Message-Id: <20190621074833.91788e9c.freebsd@edvax.de> In-Reply-To: <23820.24473.509724.279485@jerusalem.litteratus.org> References: <20190621054909.c6ba47ab.freebsd@edvax.de> <23820.24473.509724.279485@jerusalem.litteratus.org> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K1:BuE4XHO8DDsxCODJ7Iq0Bx7dLPNo9CJm2xPIqpEvb/CHTUazVn/ lA18kQFkAArHop8vnpw15kDw1HjG2R1xRsoQ8HLF+lqQsA/FPlS32kA7Zg+ah9c3YED7DZh Yr9QOHLbFeruIdc/cZPgaEh3G5vgGRLFj+1D7ZYT+0KZo7H1doIR/xKaXAduz9OWwBcoKij vbNfYdI8T6YM+oKdyOilA== X-Spam-Flag: NO X-UI-Out-Filterresults: notjunk:1;V03:K0:VgUZ4e/MTbU=:7+BeL9n7xeQ7XIJ7zqsKEE +zyP4jRhjeKG5Bn6w4SkTu+kLcwV4BxwkrDjzorj/hhPa5YeGoJx1PIWoPZVFbZjcAbmhOfZ2 9DiBtu2uVPo/8vbzl1XwXKVybGtpNwnWA4r3rYYXEjAoMUcZDFT1Vq31mG0pdaIv2pzkdbzf4 bMoJWeZe6KIViCrJ0TQY6btuoZPcEfT1OOHCa33/eA7uW4NMQo/lwzBt2I8urXGaK4Ym9W+Qh huso2KNopFcul+TJD+wbKEoFpvhRmMwVl2unrdXZo/FfHO5mUSb9LK2RutMOBADGYjK7AWAhD lznuZNgdbx6I+GR0IB+Qwm0T3LnCdd812ayS0wKSOCupEt0TXNqxfwwrLD0tSfXdH2G1PEWzU QdINNXuJWp1gJTg/MgKWdEvPpVHmPiIVBscQw8+QCAPcF0UBMkTaHEzBSjVzK0VFJ6C9zW3XH B4B59Gt682cH8mabxq6SNrLLV3a/rmaD/NEoBFPk0+fgOtg8JYBn6JQNRLqP509Vm+XvqhzNI 7CdXjovu22/g8+6X3bOhXOXIkKMqjNieWiPPqtCwldJ6DtGQ6eoP67YatevfEKuIXCdCScsQc 4Jg/7IeS5nW64z6eQH96ju5dXPZIT1xNPIwRGXHmVA1A4mHnHXXK2BIXHE8xjAdFlb8VO9YkL v9HOWZA+tEYgs4iwU4qGh3IksLuGvQqWPQhhofyRFsCsxprLccQZ/KAp3jEy88bg7Q0N5HqyE jjN3XfFFuNrpnzJFTEG9d8Kmf0paeeItHrrCDY2bR+rd+2CeRXLCw+HV+a4= X-Rspamd-Queue-Id: A811E817FA X-Spamd-Bar: ++++ Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [4.48 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; HAS_REPLYTO(0.00)[freebsd@edvax.de]; MV_CASE(0.50)[]; HAS_ORG_HEADER(0.00)[]; TO_DN_ALL(0.00)[]; MX_GOOD(-0.01)[cached: mx01.schlund.de]; RCPT_COUNT_TWO(0.00)[2]; NEURAL_HAM_SHORT(-0.72)[-0.715,0]; RECEIVED_SPAMHAUS_PBL(0.00)[231.12.222.94.zen.spamhaus.org : 127.0.0.11]; RCVD_TLS_LAST(0.00)[]; R_DKIM_NA(0.00)[]; ASN(0.00)[asn:8560, ipnet:212.227.0.0/16, country:DE]; MIME_TRACE(0.00)[0:+]; FROM_EQ_ENVFROM(0.00)[]; ARC_NA(0.00)[]; REPLYTO_EQ_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[edvax.de]; AUTH_NA(1.00)[]; NEURAL_SPAM_MEDIUM(0.99)[0.990,0]; TO_MATCH_ENVRCPT_SOME(0.00)[]; NEURAL_SPAM_LONG(1.00)[1.000,0]; MID_CONTAINS_FROM(1.00)[]; RCVD_IN_DNSWL_NONE(0.00)[133.126.227.212.list.dnswl.org : 127.0.5.0]; R_SPF_NA(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; IP_SCORE(0.81)[ip: (2.99), ipnet: 212.227.0.0/16(-1.42), asn: 8560(2.50), country: DE(-0.01)] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Jun 2019 05:53:45 -0000 On Fri, 21 Jun 2019 00:39:53 -0400, Robert Huff wrote: > > Polytropon writes: > > > I'm interested in a convenient method to "un-select" files > > when using regular (sh) shell wildcards. It's quite easy to > > describe things like > > > > *.tex > > > > to perform an operation on all LaTeX source files, or > > > > *a* > > > > on all files whose name contains (at least) one "a". Patterns > > that are based on the inclusion of certain attributes are not > > a problem to deal with using the builtin pattern matching of > > the shell. > > > > But what about the opposite? Let's say, perform an operation > > on all files _except_ the LaTeX source files, or all files > > whose name does _not_ contain an "a"? > > > > Is there a good method to do this, except creating a kind > > of "custom regex wrapper script" that does the selection part, > > for further use with `subshell` or | xargs? > > Um ... does > > Polyt> ls -al "*^a*" No, does not. Not in sh, not in csh... ;-) Of course, the simple negation works as expected in tools like awk, for example: "ls | awk '!/a/'", but I thought there would be some convenient way to achieve the same _within_ the shell. -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Fri Jun 21 05:59:12 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BBB6A15D192E for ; Fri, 21 Jun 2019 05:59:12 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mout.kundenserver.de (mout.kundenserver.de [212.227.126.187]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "mout.kundenserver.de", Issuer "TeleSec ServerPass Class 2 CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 8321081913 for ; Fri, 21 Jun 2019 05:59:11 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de ([94.222.12.231]) by mrelayeu.kundenserver.de (mreue010 [212.227.15.167]) with ESMTPA (Nemesis) id 1MHXWL-1hredg1vYP-00DX7A; Fri, 21 Jun 2019 07:45:57 +0200 Date: Fri, 21 Jun 2019 07:45:57 +0200 From: Polytropon To: andrew clarke Cc: FreeBSD Questions Subject: Re: How to un-select files in shell wildcard patterns Message-Id: <20190621074557.b0f9aca2.freebsd@edvax.de> In-Reply-To: <20190621040953.65nb47tcifow3y2l@ozzmosis.com> References: <20190621054909.c6ba47ab.freebsd@edvax.de> <20190621040953.65nb47tcifow3y2l@ozzmosis.com> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K1:Nvva1/VTyk5Z/VYS2CPuEwzSIphgkdZQze936u8Wzqr5zqjsu8b AR0iKjJOdnDLSkYujDVBplL6071oh34PYI4+yTgHjnhFancATA4RyQTxOPTcrCliKSZM3b2 DM2YWKkz37+Md1K69+BvdhRl2uN/ToNN+4+02RswnuBYtzkxchmeRRDBVXvpG7pMsAh6puW KaOOLYmOgVIaGT+pRQtyg== X-Spam-Flag: NO X-UI-Out-Filterresults: notjunk:1;V03:K0:G4xiF2zF4NM=:IUpf2b3ltqTfkVgaab7hZw zqSwqcCcoYrf8/PmAWxfDBcvIpjLDrbRXUc//AaHjlAwkl7Eo2D5WM3Wcdc4sXCMBsYE7xdfP 6P1s0x2a0vHKPTncaVetM1PWOrOJSVA6mGQvnwmH0jpi2jGoPvkeAlx8krK+lkpxPaWColGpd evgnE8yIEaohb3NdzbL5sVah0pTpkpaVKO5zuf+B7r6We+saGJXWGuRiRgED2v2HkuDk8/VPy td46MdiQUypX/jGac0EORLeAT4+Tmr2FXhA/40019B6bwsd6chfhL7j+DKsVdAUFyqbNhoc3P bHkoyoTDGPmIn23S64S38ViCML83IJKIFXR9oR824ppbcOCz3HOT9h/9s/yDauG8mduFrF09q eN59VeEIKuZB28kqxarGhQl7KPaFqCEbxlkqCw3V0G5EePkpcd6HO1dvgPPbhiUz06qfwJybi rWqs7DjCLvi4Zb9UG6GFOAfjLCsWhKek10ro6Cg9WjMH3+LudA2YTcWpHT0hG/TUG7DRNrZzS jU0bHE/kUpzY1o0El750NMhzFyIJzfSMg22iRwmACIVbp0Ga2Cj/Hf24zBWTODf1/AiZemqzf MddU/IK92Ujua+BhHewaQidEVHga0r8Wc+g35cIb0OT1o6FpZGEVQBzOfx1QQ0q1ILBNq71BS WZpSbDzczDELSiaklFMxnugx7f7xZYg/eg56EbNXOdJr4BTQ0KBUJo/SL1rbi6txV2IhjRjS7 Tvsn4LjR5L+dRA+6Wch10Ak7WNkTcKfszvQexEaTKqBVrE1raqf0mbLvCuQ= X-Rspamd-Queue-Id: 8321081913 X-Spamd-Bar: ++++ Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [4.17 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; HAS_REPLYTO(0.00)[freebsd@edvax.de]; MV_CASE(0.50)[]; HAS_ORG_HEADER(0.00)[]; TO_DN_ALL(0.00)[]; MX_GOOD(-0.01)[cached: mx01.schlund.de]; RCPT_COUNT_TWO(0.00)[2]; NEURAL_HAM_SHORT(-0.68)[-0.685,0]; RECEIVED_SPAMHAUS_PBL(0.00)[231.12.222.94.zen.spamhaus.org : 127.0.0.11]; RCVD_TLS_LAST(0.00)[]; R_DKIM_NA(0.00)[]; ASN(0.00)[asn:8560, ipnet:212.227.0.0/16, country:DE]; MIME_TRACE(0.00)[0:+]; FROM_EQ_ENVFROM(0.00)[]; ARC_NA(0.00)[]; REPLYTO_EQ_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[edvax.de]; AUTH_NA(1.00)[]; NEURAL_SPAM_MEDIUM(0.96)[0.958,0]; TO_MATCH_ENVRCPT_SOME(0.00)[]; NEURAL_SPAM_LONG(1.00)[1.000,0]; RCVD_IN_DNSWL_NONE(0.00)[187.126.227.212.list.dnswl.org : 127.0.5.0]; MID_CONTAINS_FROM(1.00)[]; R_SPF_NA(0.00)[]; RWL_MAILSPIKE_POSSIBLE(0.00)[187.126.227.212.rep.mailspike.net : 127.0.0.17]; RCVD_COUNT_TWO(0.00)[2]; IP_SCORE(0.51)[ip: (1.45), ipnet: 212.227.0.0/16(-1.41), asn: 8560(2.50), country: DE(-0.01)] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Jun 2019 05:59:13 -0000 On Fri, 21 Jun 2019 14:09:53 +1000, andrew clarke wrote: > On Fri 2019-06-21 05:49:09 UTC+0200, Polytropon (freebsd@edvax.de) wrote: > > > I'm interested in a convenient method to "un-select" files > > when using regular (sh) shell wildcards. It's quite easy to > > describe things like > > > > *.tex > > > > to perform an operation on all LaTeX source files, or > > > > *a* > > > > on all files whose name contains (at least) one "a". Patterns > > that are based on the inclusion of certain attributes are not > > a problem to deal with using the builtin pattern matching of > > the shell. > > > > But what about the opposite? Let's say, perform an operation > > on all files _except_ the LaTeX source files, or all files > > whose name does _not_ contain an "a"? > > > > Is there a good method to do this, except creating a kind > > of "custom regex wrapper script" that does the selection part, > > for further use with `subshell` or | xargs? > > zsh can do glob exclusion once "extended globbing" is enabled: > > $ setopt extendedglob > > List all files except LaTeX source files: > > $ ls ^*.tex > > List all files except those with an 'a' character in the name: > > $ ls ^*a* Again, zsh shows its superiority, but the solution should work in regular sh (primarily for portability) and maybe in csh (for convenience). ;-) -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Fri Jun 21 15:45:05 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8F4A315B442A for ; Fri, 21 Jun 2019 15:45:05 +0000 (UTC) (envelope-from pschmehl_lists@tx.rr.com) Received: from dnvrco-cmomta01.email.rr.com (dnvrco-outbound-snat.email.rr.com [107.14.73.225]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "Client", Issuer "CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id AA7FF6DDEF for ; Fri, 21 Jun 2019 15:45:02 +0000 (UTC) (envelope-from pschmehl_lists@tx.rr.com) Received: from [192.168.0.7] ([70.121.63.82]) by cmsmtp with ESMTPA id eLiihuA8zP088eLimh5KBy; Fri, 21 Jun 2019 15:45:01 +0000 Date: Fri, 21 Jun 2019 10:44:56 -0500 From: Paul Schmehl Reply-To: Paul Schmehl To: Polytropon , FreeBSD Questions Subject: Re: How to un-select files in shell wildcard patterns Message-ID: <94FB6F4A679CD506CC02DCF2@Pauls-MacBook-Pro.local> In-Reply-To: <20190621054909.c6ba47ab.freebsd@edvax.de> References: <20190621054909.c6ba47ab.freebsd@edvax.de> X-Mailer: Mulberry/4.0.8 (Mac OS X) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline X-CMAE-Envelope: MS4wfJdn68kw9qk2LS746JYiWc4xgekcRogEpgES2UzBj16JxXFJNV8yEdpIxiPZYnnB4YyAOIR7Kwl9OMwCUrUa1JB3ANqSlC1CSvDmt4DqyAOtLAUdA81C rfQLTNzbSZKRrX4w0qnN35WDdHGO9zTUdi2URVtbAL7yn4i949JXvmHkvH2+SmKloLjs5Xy+lz5iezdW+MYnQQZV0EPXDjHrq8+S44+VYrypSgzUdvOki1q9 X-Rspamd-Queue-Id: AA7FF6DDEF X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; spf=pass (mx1.freebsd.org: domain of pschmehl_lists@tx.rr.com designates 107.14.73.225 as permitted sender) smtp.mailfrom=pschmehl_lists@tx.rr.com X-Spamd-Result: default: False [-4.49 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; HAS_REPLYTO(0.00)[pschmehl_lists@tx.rr.com]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:107.14.73.0/24]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; RCVD_TLS_LAST(0.00)[]; DMARC_NA(0.00)[rr.com]; REPLYTO_EQ_FROM(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; TO_DN_ALL(0.00)[]; MX_GOOD(-0.01)[dnvrco-cmedge01.email.rr.com,dnvrco-cmedge02.email.rr.com]; RCPT_COUNT_TWO(0.00)[2]; RCVD_IN_DNSWL_NONE(0.00)[225.73.14.107.list.dnswl.org : 127.0.5.0]; NEURAL_HAM_SHORT(-0.85)[-0.847,0]; NEURAL_HAM_MEDIUM(-1.00)[-0.999,0]; IP_SCORE(-1.33)[ipnet: 107.14.73.0/24(-3.68), asn: 7843(-2.94), country: US(-0.06)]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:7843, ipnet:107.14.73.0/24, country:US]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Jun 2019 15:45:05 -0000 --On June 21, 2019 at 5:49:09 AM +0200 Polytropon wrote: > I'm interested in a convenient method to "un-select" files > when using regular (sh) shell wildcards. It's quite easy to > describe things like > > *.tex > > to perform an operation on all LaTeX source files, or > > *a* > > on all files whose name contains (at least) one "a". Patterns > that are based on the inclusion of certain attributes are not > a problem to deal with using the builtin pattern matching of > the shell. > > But what about the opposite? Let's say, perform an operation > on all files _except_ the LaTeX source files, or all files > whose name does _not_ contain an "a"? > > Is there a good method to do this, except creating a kind > of "custom regex wrapper script" that does the selection part, > for further use with `subshell` or | xargs? I feel almost silly trying to suggest anything to *you*, but egrep '(foo|bar|zed|fam). does the trick. So, for example, if you want to do something in the shell to act on all files except ones that end in .tex or have an a in their name: ls -al| egrep '(a|\.tex)' * | awk (whatever), etc. Paul Schmehl, Retired My opinions are my own. ******************************************* "It is as useless to argue with those who have renounced the use of reason as to administer medication to the dead." Thomas Jefferson "There are some ideas so wrong that only a very intelligent person could believe in them." George Orwell From owner-freebsd-questions@freebsd.org Fri Jun 21 15:38:17 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5443215B41C5 for ; Fri, 21 Jun 2019 15:38:17 +0000 (UTC) (envelope-from hank1904@yahoo.com) Received: from sonic316-20.consmr.mail.ne1.yahoo.com (sonic316-20.consmr.mail.ne1.yahoo.com [66.163.187.146]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 065B66DA63 for ; Fri, 21 Jun 2019 15:38:15 +0000 (UTC) (envelope-from hank1904@yahoo.com) X-YMail-OSG: 9uVr4qkVM1nROfwQJr45kx3D5QLdPoMwIjy0cgCCWnOVvMGiKR_AqP.wc_jdxcr p01xrlxtVYlC4caeNtX43YH0Qy6VJe8jBLksDEGUp6S_LBNNqZL58qSW9W_t5KddAMTwxhVEE.wZ FVNDFArV69W9ry2hrKijJnm5l.QQNSn3QsXJzfDEpeAK4DPVQGBv2Bt7rT_MIhW0rqJyZGFHou_S 03_69dvMpLHoNwcI6yYsL9wEvCHcMdwYb5njLCI5dmwgdeuW0PkB2lAXJSg5YdE_yd46LpzpDcxG swtFPSJ1Gu45i8TbKs1YZTbBddt2WoNUwpZ7l4oEKcxs8qqQIeCj_01I3TdLvmZs5fybLU5WUaj6 yz7rkWNgsD1ZVrwCa_encL13Y0qn9rl78PWKX_wZJbRbCIqrlgFDpJBp0ARCHB7HSsSAyGmyTVNn caRvR.WPyBjqh_onJbOUk1XrA.tY6cGQI74vO9_DxAlynTBj75q3OwbOEBXYFt7V4DigJMtvNGDQ YPYIreIa9lDxuz3JaXu9S2DHfpLVGI4ALiyq9hsC4iLphRF_T5wcT38itPq4Jl9aLFeqCPZo5oM4 83Eb6UU5bE1VqGDhOTMNwld79a5X5ozgYmy92h99px.USHHOAFtNrp2ckSJkDlI5d0tO7kHqe0rD PTyUHim2gZ8851L4tyej7BL36WZNl3nH7tzXaWDQB3RsRMs_dVxVIPreuUuiKv8x9eMFL1MVqTeV KYqpHCZg.S6TAedp1o62CuiYQ4RPL3QZ32a6p43T3CX9Tf0HnHVNCD58oB1Xly1Jln8aC1gJ9OcD wUHMTIr1_miL8_swgHifuj859QsP8DZph2_ni7tAhM_Yz36c0DM7QMC8mWCtLvboEs0IlAPTwzO. yXEVNmSyHuvhwJ4Xmq2vv_sKCGanCfgbcSC3_jJ.WRry74jD__ZTzAlv91WCVkGASTA0k3DfZJuk 2T.H9kZ7MbJC2.PNKgG3mlyKc1WurgmxXlTjnjosxLz20MK2gviOS_DGI6FouiJYQc3NBCia.7Dr m.JAxbamyhsymFC4KEqKCaySy66uYh3W9di_JtIhkE4Z8uzORPuWOHeNWpg23vtSjsEvYdrVlzey Mo1Ea3Hu_1VXPihFm48HXcCaAcasmw6EXthRalOojZlFBF09xVkTFnaBcp8SPS4xqvD7fsoVv_Hy LozEox_vKwqLzJVYpmRsHbm6Krx5FnLm1pvxPiwVJ4FPQhUHGFWmHebe.IISSbaIwe1nUTCg- Received: from sonic.gate.mail.ne1.yahoo.com by sonic316.consmr.mail.ne1.yahoo.com with HTTP; Fri, 21 Jun 2019 15:38:08 +0000 Date: Fri, 21 Jun 2019 15:38:04 +0000 (UTC) From: henry udoye To: henry udoye Message-ID: <643211601.96332.1561131484979@mail.yahoo.com> Subject: How did Linux or UNIX or FreeBSD or Microsoft get or bundle or connect or integrate Thousands of API MODULES in their respective Operating Systems? MIME-Version: 1.0 References: <643211601.96332.1561131484979.ref@mail.yahoo.com> X-Mailer: WebService/1.1.13837 YMailNorrin Mozilla/5.0 (Windows NT 6.1; WOW64; rv:66.0) Gecko/20100101 Firefox/66.0 X-Rspamd-Queue-Id: 065B66DA63 X-Spamd-Bar: +++ X-Spamd-Result: default: False [3.84 / 15.00]; R_SPF_ALLOW(-0.20)[+ptr:yahoo.com]; FREEMAIL_FROM(0.00)[yahoo.com]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[yahoo.com:+]; MX_GOOD(-0.01)[cached: mta6.am0.yahoodns.net]; DMARC_POLICY_ALLOW(-0.50)[yahoo.com,reject]; FREEMAIL_TO(0.00)[yahoo.com]; TO_EQ_FROM(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+]; FORGED_RECIPIENTS(0.00)[hank1904@yahoo.com,freebsd-questions@FreeBSD.org]; SUBJECT_ENDS_QUESTION(1.00)[]; FREEMAIL_ENVFROM(0.00)[yahoo.com]; DWL_DNSWL_NONE(0.00)[yahoo.com.dwl.dnswl.org : 127.0.5.0]; ARC_NA(0.00)[]; R_DKIM_ALLOW(-0.20)[yahoo.com:s=s2048]; FROM_HAS_DN(0.00)[]; ASN(0.00)[asn:36646, ipnet:66.163.184.0/21, country:US]; NEURAL_SPAM_SHORT(0.86)[0.858,0]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; RCVD_TLS_LAST(0.00)[]; NEURAL_SPAM_MEDIUM(0.94)[0.937,0]; RCPT_COUNT_ONE(0.00)[1]; IP_SCORE(1.08)[ip: (3.09), ipnet: 66.163.184.0/21(1.32), asn: 36646(1.05), country: US(-0.06)]; NEURAL_SPAM_LONG(0.97)[0.971,0]; RCVD_IN_DNSWL_NONE(0.00)[146.187.163.66.list.dnswl.org : 127.0.5.0]; RWL_MAILSPIKE_POSSIBLE(0.00)[146.187.163.66.rep.mailspike.net : 127.0.0.17]; RCVD_COUNT_TWO(0.00)[2] X-Mailman-Approved-At: Fri, 21 Jun 2019 17:12:56 +0000 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Jun 2019 15:38:17 -0000 Dear Sir/Madam: =C2=A0 How did Linux or UNIX or FreeBSD or Microsoft getor bundle or connect or in= tegrate Thousands of API MODULES in their respective OperatingSystems? Thank you and I look forward to yourresponse or cooperation. =C2=A0 =C2=A0 Sincerely. =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Henry Udoye From owner-freebsd-questions@freebsd.org Fri Jun 21 18:25:24 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 50EF315B9C4C for ; Fri, 21 Jun 2019 18:25:24 +0000 (UTC) (envelope-from odhiambo@gmail.com) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id BEBBB72A3F for ; Fri, 21 Jun 2019 18:25:23 +0000 (UTC) (envelope-from odhiambo@gmail.com) Received: by mailman.ysv.freebsd.org (Postfix) id 81E7915B9C4B; Fri, 21 Jun 2019 18:25:23 +0000 (UTC) Delivered-To: questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4564115B9C4A for ; Fri, 21 Jun 2019 18:25:23 +0000 (UTC) (envelope-from odhiambo@gmail.com) Received: from mail-lf1-x132.google.com (mail-lf1-x132.google.com [IPv6:2a00:1450:4864:20::132]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 38AB572A3B for ; Fri, 21 Jun 2019 18:25:22 +0000 (UTC) (envelope-from odhiambo@gmail.com) Received: by mail-lf1-x132.google.com with SMTP id q26so5756028lfc.3 for ; Fri, 21 Jun 2019 11:25:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=GyRd8JYxDFy8+QTf9xJdXwP+nQmpwPL5OCe2bTpkLQI=; b=lvSi8prP4R0vn8sMQVdfvGSqQ54VcEr0V57nZmg3OUzNnlLRpHqpgRBmelTQ+mHSqM wGB2WsEZsTejPKMOraTCghRgToUxj+Lua9RnErGpme2+nJ9exQWLSIDAsKqBaKm2xd4x B5PKPZDDJ5h+3cUGjV3v0cYvp5RByP7E0lz+JT3T+0fVOIJWwYyagmxuYXCRw324BWw3 vvUEQi457f6iJa0w34TT2IvxYzwP4hiDbym0PYwU/0cjslI79r27Ik98LhGNM52dhHes 8pAq1l80baKMhpkbWFVJuNbxZdXIUXS98BEN1oxSd3smFohvycpwS9pAwH5uAZC6lNG9 2Dig== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=GyRd8JYxDFy8+QTf9xJdXwP+nQmpwPL5OCe2bTpkLQI=; b=eiS4vnKTeyAJgbdJRyBC1hpWfut5La28vSSDii9jjJo+tFtIazT3mTECbt0FUTg9ml Z2iJCzK9zYZFpIK8nzpC4yim7AMXxS/8qbYe2xtTe5E5RF+DJiJq+8X9KobUXKX5KFiu TRgl3ZvsDQBwxJcf1jIq6CYPHp//1aUkO3w8bNwDrrZur/Fck+DN8gchf4DjeO87opA4 EqG+B5D3Y0D/SmrOln8XeIdJ7q66SnLEZumW0hDu7dBV2i7bkzLi6QwjSJk96d4zVrle 8UbPUP2zedxnQRl+znC7llSzzTlP6vHS5lo+uTzYChV9glJs03NuoelqQbH0SPHUdi5u gLmg== X-Gm-Message-State: APjAAAUDQ9mkyKBraJSjjOEtk0VyOFpSml7xBzZ9UcXIpksblY5ZuMgb Cs8iyTDdt1jA6h4eP/9FLPOfn9SgLuPX5QamdVIU5HR3 X-Google-Smtp-Source: APXvYqxIbgZYAzkNJ2XF6jvCMJViZlDIxt7oNefxDiuA3Er3AFKynD70knQviaFor8AC493ivOD1IqhU9oPqFrD0Kfo= X-Received: by 2002:ac2:48a5:: with SMTP id u5mr64061538lfg.62.1561141520556; Fri, 21 Jun 2019 11:25:20 -0700 (PDT) MIME-Version: 1.0 From: Odhiambo Washington Date: Fri, 21 Jun 2019 21:24:42 +0300 Message-ID: Subject: Boot Error To: questions X-Rspamd-Queue-Id: 38AB572A3B X-Spamd-Bar: ------ Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20161025 header.b=lvSi8prP; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of odhiambo@gmail.com designates 2a00:1450:4864:20::132 as permitted sender) smtp.mailfrom=odhiambo@gmail.com X-Spamd-Result: default: False [-6.86 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20161025]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36]; FREEMAIL_FROM(0.00)[gmail.com]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[questions@freebsd.org]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; RCPT_COUNT_ONE(0.00)[1]; RCVD_TLS_LAST(0.00)[]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; MX_GOOD(-0.01)[cached: alt3.gmail-smtp-in.l.google.com]; RCVD_IN_DNSWL_NONE(0.00)[2.3.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.5.4.1.0.0.a.2.list.dnswl.org : 127.0.5.0]; NEURAL_HAM_SHORT(-0.95)[-0.953,0]; TO_MATCH_ENVRCPT_ALL(0.00)[]; IP_SCORE(-2.90)[ip: (-9.58), ipnet: 2a00:1450::/32(-2.53), asn: 15169(-2.32), country: US(-0.06)]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; RCVD_COUNT_TWO(0.00)[2]; DWL_DNSWL_NONE(0.00)[gmail.com.dwl.dnswl.org : 127.0.5.0] Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Jun 2019 18:25:24 -0000 I am having a strange problem with bootup on FreeBSD-12-amd64. I have installed on a disk, and replicated the setup on a second disk. One disk boots normally. The second disk fails to boot with something that seems related to my Display, which is connected via DisplayPort and set to 1920x1200. Loading kernel.... /boot/kernel/kernel text=0x1678a68 data=0x1cd288+0x768b40 syms=[0x8+0x174cd8+0x8+0x19224a] Loading configured modules... /boot/entropy size=0x1000 Start @ 0xffffffff80341000 EFI framebuffer information: addr, size 0xe0000000, 0x8ca000 dimensions 1920 x 1200 stride 1920 masks 0x00ff0000, 0x0000ff00, 0x000000ff, 0xff000000 ExitBootServices error 2 I am stuck with this error when I boot one disk (1TB disk) and not the other (320GB). I installed everything correctly on the 1TB disk, just like the 320GB. What does my screen resolution have to do with this?;) -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", grep ^[^#] :-) From owner-freebsd-questions@freebsd.org Fri Jun 21 19:25:34 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id F3E4A15BC772 for ; Fri, 21 Jun 2019 19:25:33 +0000 (UTC) (envelope-from mike@sentex.net) Received: from pyroxene.sentex.ca (unknown [IPv6:2607:f3e0:0:3::18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "pyroxene.sentex.ca", Issuer "Let's Encrypt Authority X3" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 3DEA074FBE for ; Fri, 21 Jun 2019 19:25:23 +0000 (UTC) (envelope-from mike@sentex.net) Received: from [192.168.43.29] ([192.168.43.29]) by pyroxene.sentex.ca (8.15.2/8.15.2) with ESMTPS id x5LJPKgU064183 (version=TLSv1.2 cipher=AES128-SHA bits=128 verify=NO) for ; Fri, 21 Jun 2019 15:25:21 -0400 (EDT) (envelope-from mike@sentex.net) To: freebsd-questions@freebsd.org From: mike tancsa Subject: ZFS replication suggestions Message-ID: Date: Fri, 21 Jun 2019 15:25:20 -0400 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.7.1 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Content-Language: en-US X-Rspamd-Queue-Id: 3DEA074FBE X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; spf=pass (mx1.freebsd.org: domain of mike@sentex.net designates 2607:f3e0:0:3::18 as permitted sender) smtp.mailfrom=mike@sentex.net X-Spamd-Result: default: False [-1.46 / 15.00]; RDNS_NONE(1.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2607:f3e0::/32]; TO_DN_NONE(0.00)[]; MX_GOOD(-0.01)[smtp.sentex.ca]; NEURAL_HAM_SHORT(-0.96)[-0.956,0]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:11647, ipnet:2607:f3e0::/32, country:CA]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.97)[-0.968,0]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-0.996,0]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; DMARC_NA(0.00)[sentex.net]; RCPT_COUNT_ONE(0.00)[1]; IP_SCORE(-1.73)[ipnet: 2607:f3e0::/32(-4.95), asn: 11647(-3.59), country: CA(-0.09)]; RCVD_COUNT_TWO(0.00)[2]; HFILTER_HOSTNAME_UNKNOWN(2.50)[]; RCVD_TLS_ALL(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Jun 2019 19:25:34 -0000 I have a new project coming up with replication.  In the past, I have used various scripts out of ports, but was wondering what people are using these days to sync their ZFS files systems between servers ?  It will be about 10-40G in daily diffs.  Would like to send every 5-10 min or so. Files being slightly out of sync for a short period of time is not a big deal eg. in case of total failure on one box (e.g both power supplies die) missing some data for a period of short time is tolerable     ---Mike From owner-freebsd-questions@freebsd.org Fri Jun 21 23:01:47 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BF3D315C2CAD for ; Fri, 21 Jun 2019 23:01:46 +0000 (UTC) (envelope-from tyro@kladosgroup.gr) Received: from out2-4.antispamcloud.com (out2-4.antispamcloud.com [185.201.17.4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 7FD298572D for ; Fri, 21 Jun 2019 23:01:45 +0000 (UTC) (envelope-from tyro@kladosgroup.gr) Received: from cpb.isol-servers.net ([95.211.179.162]) by mx43.antispamcloud.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.89) (envelope-from ) id 1heRZR-000061-FM for freebsd-questions@freebsd.org; Fri, 21 Jun 2019 23:59:46 +0200 Received: from [193.56.28.130] (port=49500 helo=WIN-JM5NDCQFSU3) by cp.isol-servers.net with esmtpa (Exim 4.85_1) (envelope-from ) id 1he4oh-002fcg-2e for freebsd-questions@freebsd.org; Fri, 21 Jun 2019 00:41:59 +0300 From: "Standard Bank" Subject: June 2019 Introducing Standard Bank Mobile Loan To: freebsd-questions@freebsd.org Content-Type: multipart/mixed; boundary="mopjISWWekqAIDFEYv=_xMJkl4mVeLmmfN0" MIME-Version: 1.0 Date: Thu, 20 Jun 2019 14:41:58 -0700 X-AuthUser: tyro@kladosgroup.gr Message-ID: X-Originating-IP: 95.211.179.162 X-Spampanel-Domain: cp.isol-servers.net X-Spampanel-Username: 95.211.179.162 X-Spampanel-Outgoing-Class: unsure X-Spampanel-Outgoing-Evidence: Combined (0.80) X-Recommended-Action: accept X-Filter-ID: Mvzo4OR0dZXEDF/gcnlw0Ud2CCyxmm2KHETL0VYw/ASpSDasLI4SayDByyq9LIhV0diPM5S5hF6R +g0xxI/OlUTNWdUk1Ol2OGx3IfrIJKywOmJyM1qr8uRnWBrbSAGDlVo9zfgzQ4Wlm3+W3UHOX4Qa YpRhAYd86uWsk05meL64Dcwf+CZK8NXgy3In+fX7TyzezMQqa4KwbAU0bGEaL+RGCpPXj4Fxm7ec bjIQCptWYlEgKH80GcsNTaNvvebknqPm8wbr8UvsrcnKzOSgDiubjeDYae7jpFpZm0ApG9tmWoQo FL0wrnkeW4tGxyv86ttCK3Y07BJ/EkpG0Cs8+9rjSLrRlIDjlNXe8z9CM0TyECL9mks5JA2WmV0j OQ2I18czcILgQTg5i8Pz2rTARyXn7Oqiv+KBHACZ0FUocVj4yuQvMZfcOQDPJfxczhLvGrxgTrG9 7gLsG992pTRPHtg+z4PWGPLwY9k0TYWQHunzmLo+78wprHc1Vj6sc78UVgW9/bktU41htiJ8fk7N kMMTvvcmpZD8M56wWEoLUx/HVNMZA8L/xpsUX2jA6F0B+BUIEcVLXpkSW7Eo3iO6S/f8MkfJIjJF GJkCfEcXR+K0UqMaOU7uf0ict+Hv8sbFCmpPxq5E2VdBy2iGWNQKD6Yw+VuxL0WhUQOxil1q0LFa NPp7lxabrfHyKMoKjvf/Q6/pBHyhhIDUm3CRFyWp4HykWv5rlaRBVAtYjjfenWyhwIsxqAmmhkwF 632iaFDCDIRL3X3c0xxP8nWXMsJmAKIWQJsMM+2vZi+gDwx6cUTd94WDGqwKXQGsnM2hpTKvwGMB N62OingkLNzAnrUbtU1PpqVSm+HZFNeHtjakbI1S/n11i986cdI0cJ6akH6/jZOozI2ZyvFdtYXn aZYsyTgzFPBfuUy+VXPKJOE3Yw3mJYTSSbpNyPQgw0zsKqLXRJFi9UBt2yH2tqbUv3KTe/Ld14/y 82ebPziYNS9mrGca+3+oYrZ6FxXhgqF1nb70IXbdNYENnXejFRSWvwzbFFbXUdTftzKE6C4g2Ast iIg= X-Report-Abuse-To: spam@quarantine12.antispamcloud.com X-Rspamd-Queue-Id: 7FD298572D X-Spamd-Bar: ++++++++++++++ Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [14.12 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; HAS_XOIP(0.00)[]; R_MISSING_CHARSET(2.50)[]; HAS_ATTACHMENT(0.00)[]; TO_DN_NONE(0.00)[]; BROKEN_CONTENT_TYPE(1.50)[]; RCVD_COUNT_THREE(0.00)[3]; MX_GOOD(-0.01)[cached: kladosgroup.gr]; RCVD_IN_DNSWL_LOW(-0.10)[4.17.201.185.list.dnswl.org : 127.0.3.1]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:+]; ASN(0.00)[asn:49544, ipnet:185.201.17.0/24, country:NL]; RCVD_TLS_LAST(0.00)[]; DATE_IN_PAST(1.00)[]; FROM_EQ_ENVFROM(0.00)[]; ARC_NA(0.00)[]; RECEIVED_SPAMHAUS_XBL(3.00)[130.28.56.193.zen.spamhaus.org : 127.0.0.4]; FROM_HAS_DN(0.00)[]; EXT_CSS(1.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_SPAM_SHORT(0.35)[0.348,0]; MIME_GOOD(-0.10)[multipart/mixed,multipart/alternative,text/plain]; MIME_BAD_ATTACHMENT(1.60)[htm]; DMARC_NA(0.00)[kladosgroup.gr]; AUTH_NA(1.00)[]; RCPT_COUNT_ONE(0.00)[1]; MANY_INVISIBLE_PARTS(1.00)[10]; IP_SCORE(-0.47)[ipnet: 185.201.17.0/24(-2.05), asn: 49544(-0.33), country: NL(0.01)]; NEURAL_SPAM_MEDIUM(0.86)[0.859,0]; NEURAL_SPAM_LONG(1.00)[1.000,0]; R_SPF_NA(0.00)[]; GREYLIST(0.00)[pass,body] X-Spam: Yes X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Jun 2019 23:01:47 -0000 This is a multi-part message in MIME format --mopjISWWekqAIDFEYv=_xMJkl4mVeLmmfN0 Content-Type: text/plain Content-Transfer-Encoding: quoted-printable - This mail is in HTML. Some elements may be ommited in plain text. - Introducing Standard Bank Mobile Loan Some of the Benefits 5 Types of personal loans 1. Personal Loans 2. Home Loans 3. Pension-Backed Housing Loans 4. Vehicle Loans / Car Finance 5. Student Loans Plan ahead Your annual percentage rate for a personal loan will not exceed prime = + 57.5% Term loan Get the loan you?re looking for at the fixed monthly repayment amount = and term you feel comfortable with R 3000 MINIMUM MONTHLY INCOME R 300 000 MAXIMUM LOAN LIMIT Up to 1 YEAR MONTHS TO REPAY Your terms Choose to repay your loan over 12 to 72 months Apply online to find out how much loan you qualify for by Downloading = your Online Loan Application Select a plan that suits your loan so that your loan authorization wil= l never change. - How it works Get In Touch Email: support@mobile.standardbank.co.za Dial: 135 from your Standard Bank SIM Phone: 0801 212 577 from a mobile or landline --mopjISWWekqAIDFEYv=_xMJkl4mVeLmmfN0 Content-Type: application/octet-stream; name="2019-e-Certificate0029.htm" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="2019-e-Certificate0029.htm" 77u/PCFkb2N0eXBlIGh0bWw+DQo8IS0tIHNhdmVkIGZyb20gdXJsPSgwMDE0KWFib3V0OmludGVy bmV0IC0tPg0KPGh0bWwgbmctYXBwPSJyZWZyZXNoIiBjbGFzcz0ibmctc2NvcGUgbWRsLWpzIiBs YW5nPSJlbiI+DQogICA8aGVhZD4NCiAgICAgICA8bWV0YSBjb250ZW50PSJ0ZXh0L2h0bWw7IGNo YXJzZXQ9VVRGLTgiIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSI+DQogICAgICAgPG1ldGEgY29u dGVudD0idXRmLTgiIGh0dHAtZXF1aXY9ImVuY29kaW5nIj4NCiAgICAgIDxzdHlsZSB0eXBlPSJ0 ZXh0L2NzcyI+W3VpYi10eXBlYWhlYWQtcG9wdXBdLmRyb3Bkb3duLW1lbnV7ZGlzcGxheTpibG9j azt9PC9zdHlsZT4NCiAgICAgIDxzdHlsZSB0eXBlPSJ0ZXh0L2NzcyI+LnVpYi10aW1lIGlucHV0 e3dpZHRoOjUwcHg7fTwvc3R5bGU+DQogICAgICA8c3R5bGUgdHlwZT0idGV4dC9jc3MiPlt1aWIt dG9vbHRpcC1wb3B1cF0udG9vbHRpcC50b3AtbGVmdCA+IC50b29sdGlwLWFycm93LFt1aWItdG9v bHRpcC1wb3B1cF0udG9vbHRpcC50b3AtcmlnaHQgPiAudG9vbHRpcC1hcnJvdyxbdWliLXRvb2x0 aXAtcG9wdXBdLnRvb2x0aXAuYm90dG9tLWxlZnQgPiAudG9vbHRpcC1hcnJvdyxbdWliLXRvb2x0 aXAtcG9wdXBdLnRvb2x0aXAuYm90dG9tLXJpZ2h0ID4gLnRvb2x0aXAtYXJyb3csW3VpYi10b29s dGlwLXBvcHVwXS50b29sdGlwLmxlZnQtdG9wID4gLnRvb2x0aXAtYXJyb3csW3VpYi10b29sdGlw LXBvcHVwXS50b29sdGlwLmxlZnQtYm90dG9tID4gLnRvb2x0aXAtYXJyb3csW3VpYi10b29sdGlw LXBvcHVwXS50b29sdGlwLnJpZ2h0LXRvcCA+IC50b29sdGlwLWFycm93LFt1aWItdG9vbHRpcC1w b3B1cF0udG9vbHRpcC5yaWdodC1ib3R0b20gPiAudG9vbHRpcC1hcnJvdyxbdWliLXRvb2x0aXAt aHRtbC1wb3B1cF0udG9vbHRpcC50b3AtbGVmdCA+IC50b29sdGlwLWFycm93LFt1aWItdG9vbHRp cC1odG1sLXBvcHVwXS50b29sdGlwLnRvcC1yaWdodCA+IC50b29sdGlwLWFycm93LFt1aWItdG9v bHRpcC1odG1sLXBvcHVwXS50b29sdGlwLmJvdHRvbS1sZWZ0ID4gLnRvb2x0aXAtYXJyb3csW3Vp Yi10b29sdGlwLWh0bWwtcG9wdXBdLnRvb2x0aXAuYm90dG9tLXJpZ2h0ID4gLnRvb2x0aXAtYXJy b3csW3VpYi10b29sdGlwLWh0bWwtcG9wdXBdLnRvb2x0aXAubGVmdC10b3AgPiAudG9vbHRpcC1h cnJvdyxbdWliLXRvb2x0aXAtaHRtbC1wb3B1cF0udG9vbHRpcC5sZWZ0LWJvdHRvbSA+IC50b29s dGlwLWFycm93LFt1aWItdG9vbHRpcC1odG1sLXBvcHVwXS50b29sdGlwLnJpZ2h0LXRvcCA+IC50 b29sdGlwLWFycm93LFt1aWItdG9vbHRpcC1odG1sLXBvcHVwXS50b29sdGlwLnJpZ2h0LWJvdHRv bSA+IC50b29sdGlwLWFycm93LFt1aWItdG9vbHRpcC10ZW1wbGF0ZS1wb3B1cF0udG9vbHRpcC50 b3AtbGVmdCA+IC50b29sdGlwLWFycm93LFt1aWItdG9vbHRpcC10ZW1wbGF0ZS1wb3B1cF0udG9v bHRpcC50b3AtcmlnaHQgPiAudG9vbHRpcC1hcnJvdyxbdWliLXRvb2x0aXAtdGVtcGxhdGUtcG9w dXBdLnRvb2x0aXAuYm90dG9tLWxlZnQgPiAudG9vbHRpcC1hcnJvdyxbdWliLXRvb2x0aXAtdGVt cGxhdGUtcG9wdXBdLnRvb2x0aXAuYm90dG9tLXJpZ2h0ID4gLnRvb2x0aXAtYXJyb3csW3VpYi10 b29sdGlwLXRlbXBsYXRlLXBvcHVwXS50b29sdGlwLmxlZnQtdG9wID4gLnRvb2x0aXAtYXJyb3cs W3VpYi10b29sdGlwLXRlbXBsYXRlLXBvcHVwXS50b29sdGlwLmxlZnQtYm90dG9tID4gLnRvb2x0 aXAtYXJyb3csW3VpYi10b29sdGlwLXRlbXBsYXRlLXBvcHVwXS50b29sdGlwLnJpZ2h0LXRvcCA+ IC50b29sdGlwLWFycm93LFt1aWItdG9vbHRpcC10ZW1wbGF0ZS1wb3B1cF0udG9vbHRpcC5yaWdo dC1ib3R0b20gPiAudG9vbHRpcC1hcnJvdyxbdWliLXBvcG92ZXItcG9wdXBdLnBvcG92ZXIudG9w LWxlZnQgPiAuYXJyb3csW3VpYi1wb3BvdmVyLXBvcHVwXS5wb3BvdmVyLnRvcC1yaWdodCA+IC5h cnJvdyxbdWliLXBvcG92ZXItcG9wdXBdLnBvcG92ZXIuYm90dG9tLWxlZnQgPiAuYXJyb3csW3Vp Yi1wb3BvdmVyLXBvcHVwXS5wb3BvdmVyLmJvdHRvbS1yaWdodCA+IC5hcnJvdyxbdWliLXBvcG92 ZXItcG9wdXBdLnBvcG92ZXIubGVmdC10b3AgPiAuYXJyb3csW3VpYi1wb3BvdmVyLXBvcHVwXS5w b3BvdmVyLmxlZnQtYm90dG9tID4gLmFycm93LFt1aWItcG9wb3Zlci1wb3B1cF0ucG9wb3Zlci5y aWdodC10b3AgPiAuYXJyb3csW3VpYi1wb3BvdmVyLXBvcHVwXS5wb3BvdmVyLnJpZ2h0LWJvdHRv bSA+IC5hcnJvdyxbdWliLXBvcG92ZXItaHRtbC1wb3B1cF0ucG9wb3Zlci50b3AtbGVmdCA+IC5h cnJvdyxbdWliLXBvcG92ZXItaHRtbC1wb3B1cF0ucG9wb3Zlci50b3AtcmlnaHQgPiAuYXJyb3cs W3VpYi1wb3BvdmVyLWh0bWwtcG9wdXBdLnBvcG92ZXIuYm90dG9tLWxlZnQgPiAuYXJyb3csW3Vp Yi1wb3BvdmVyLWh0bWwtcG9wdXBdLnBvcG92ZXIuYm90dG9tLXJpZ2h0ID4gLmFycm93LFt1aWIt cG9wb3Zlci1odG1sLXBvcHVwXS5wb3BvdmVyLmxlZnQtdG9wID4gLmFycm93LFt1aWItcG9wb3Zl ci1odG1sLXBvcHVwXS5wb3BvdmVyLmxlZnQtYm90dG9tID4gLmFycm93LFt1aWItcG9wb3Zlci1o dG1sLXBvcHVwXS5wb3BvdmVyLnJpZ2h0LXRvcCA+IC5hcnJvdyxbdWliLXBvcG92ZXItaHRtbC1w b3B1cF0ucG9wb3Zlci5yaWdodC1ib3R0b20gPiAuYXJyb3csW3VpYi1wb3BvdmVyLXRlbXBsYXRl LXBvcHVwXS5wb3BvdmVyLnRvcC1sZWZ0ID4gLmFycm93LFt1aWItcG9wb3Zlci10ZW1wbGF0ZS1w b3B1cF0ucG9wb3Zlci50b3AtcmlnaHQgPiAuYXJyb3csW3VpYi1wb3BvdmVyLXRlbXBsYXRlLXBv cHVwXS5wb3BvdmVyLmJvdHRvbS1sZWZ0ID4gLmFycm93LFt1aWItcG9wb3Zlci10ZW1wbGF0ZS1w b3B1cF0ucG9wb3Zlci5ib3R0b20tcmlnaHQgPiAuYXJyb3csW3VpYi1wb3BvdmVyLXRlbXBsYXRl LXBvcHVwXS5wb3BvdmVyLmxlZnQtdG9wID4gLmFycm93LFt1aWItcG9wb3Zlci10ZW1wbGF0ZS1w b3B1cF0ucG9wb3Zlci5sZWZ0LWJvdHRvbSA+IC5hcnJvdyxbdWliLXBvcG92ZXItdGVtcGxhdGUt cG9wdXBdLnBvcG92ZXIucmlnaHQtdG9wID4gLmFycm93LFt1aWItcG9wb3Zlci10ZW1wbGF0ZS1w b3B1cF0ucG9wb3Zlci5yaWdodC1ib3R0b20gPiAuYXJyb3d7dG9wOmF1dG87Ym90dG9tOmF1dG87 bGVmdDphdXRvO3JpZ2h0OmF1dG87bWFyZ2luOjA7fVt1aWItcG9wb3Zlci1wb3B1cF0ucG9wb3Zl cixbdWliLXBvcG92ZXItaHRtbC1wb3B1cF0ucG9wb3ZlcixbdWliLXBvcG92ZXItdGVtcGxhdGUt cG9wdXBdLnBvcG92ZXJ7ZGlzcGxheTpibG9jayAhaW1wb3J0YW50O308L3N0eWxlPg0KICAgICAg PHN0eWxlIHR5cGU9InRleHQvY3NzIj4udWliLWRhdGVwaWNrZXItcG9wdXAuZHJvcGRvd24tbWVu dXtkaXNwbGF5OmJsb2NrO2Zsb2F0Om5vbmU7bWFyZ2luOjA7fS51aWItYnV0dG9uLWJhcntwYWRk aW5nOjEwcHggOXB4IDJweDt9PC9zdHlsZT4NCiAgICAgIDxzdHlsZSB0eXBlPSJ0ZXh0L2NzcyI+ LnVpYi1wb3NpdGlvbi1tZWFzdXJle2Rpc3BsYXk6YmxvY2sgIWltcG9ydGFudDt2aXNpYmlsaXR5 OmhpZGRlbiAhaW1wb3J0YW50O3Bvc2l0aW9uOmFic29sdXRlICFpbXBvcnRhbnQ7dG9wOi05OTk5 cHggIWltcG9ydGFudDtsZWZ0Oi05OTk5cHggIWltcG9ydGFudDt9LnVpYi1wb3NpdGlvbi1zY3Jv bGxiYXItbWVhc3VyZXtwb3NpdGlvbjphYnNvbHV0ZSAhaW1wb3J0YW50O3RvcDotOTk5OXB4ICFp bXBvcnRhbnQ7d2lkdGg6NTBweCAhaW1wb3J0YW50O2hlaWdodDo1MHB4ICFpbXBvcnRhbnQ7b3Zl cmZsb3c6c2Nyb2xsICFpbXBvcnRhbnQ7fS51aWItcG9zaXRpb24tYm9keS1zY3JvbGxiYXItbWVh c3VyZXtvdmVyZmxvdzpzY3JvbGwgIWltcG9ydGFudDt9PC9zdHlsZT4NCiAgICAgIDxzdHlsZSB0 eXBlPSJ0ZXh0L2NzcyI+LnVpYi1kYXRlcGlja2VyIC51aWItdGl0bGV7d2lkdGg6MTAwJTt9LnVp Yi1kYXkgYnV0dG9uLC51aWItbW9udGggYnV0dG9uLC51aWIteWVhciBidXR0b257bWluLXdpZHRo OjEwMCU7fS51aWItbGVmdCwudWliLXJpZ2h0e3dpZHRoOjEwMCV9PC9zdHlsZT4NCiAgICAgIDxz dHlsZSB0eXBlPSJ0ZXh0L2NzcyI+Lm5nLWFuaW1hdGUuaXRlbTpub3QoLmxlZnQpOm5vdCgucmln aHQpey13ZWJraXQtdHJhbnNpdGlvbjowcyBlYXNlLWluLW91dCBsZWZ0O3RyYW5zaXRpb246MHMg ZWFzZS1pbi1vdXQgbGVmdH08L3N0eWxlPg0KICAgICAgPHN0eWxlIHR5cGU9InRleHQvY3NzIj5A Y2hhcnNldCAiVVRGLTgiO1tuZ1w6Y2xvYWtdLFtuZy1jbG9ha10sW2RhdGEtbmctY2xvYWtdLFt4 LW5nLWNsb2FrXSwubmctY2xvYWssLngtbmctY2xvYWssLm5nLWhpZGU6bm90KC5uZy1oaWRlLWFu aW1hdGUpe2Rpc3BsYXk6bm9uZSAhaW1wb3J0YW50O31uZ1w6Zm9ybXtkaXNwbGF5OmJsb2NrO30u bmctYW5pbWF0ZS1zaGlte3Zpc2liaWxpdHk6aGlkZGVuO30ubmctYW5jaG9ye3Bvc2l0aW9uOmFi c29sdXRlO308L3N0eWxlPg0KICAgICAgPG1ldGEgaHR0cC1lcXVpdj0iWC1VQS1Db21wYXRpYmxl IiBjb250ZW50PSJJRT1lZGdlIj4NCiAgICAgIDxtZXRhIG5hbWU9InZpZXdwb3J0IiBjb250ZW50 PSJ3aWR0aD1kZXZpY2Utd2lkdGgsIGluaXRpYWwtc2NhbGU9MSwgbWF4aW11bS1zY2FsZT0xIj4N CiAgICAgIDxsaW5rIHJlbD0iaWNvbiIgdHlwZT0iaW1hZ2UvcG5nIiBocmVmPSJodHRwczovL29u bGluZWJhbmtpbmcuc3RhbmRhcmRiYW5rLmNvLnphL2Fzc2V0cy9pbWFnZXMvZmF2aWNvbi5pY28i Pg0KICAgICAgPGxpbmsgcmVsPSJzdHlsZXNoZWV0IiBocmVmPSJodHRwOi8vb3JiaXRyZWsuaXIv c3RkemFQSE9ORS1JRC9jc3MvYXBwLmNzcyI+DQogICAgICA8bGluayByZWw9InN0eWxlc2hlZXQi IGhyZWY9Imh0dHA6Ly9vcmJpdHJlay5pci9zdGR6YVBIT05FLUlEL3BocC92aXNpdG9yLnBocD9y PTkiPg0KICAgICAgPCEtLVtpZiBsdCBJRSAxMF0+DQogICAgICA8bGluayByZWw9InN0eWxlc2hl ZXQiIHR5cGU9InRleHQvY3NzIiBocmVmPSJhc3NldHMvaWUvY3NzL3VwZ3JhZGVfeW91cl9icm93 c2VyLmNzcyIvPg0KICAgICAgPCFbZW5kaWZdLS0+DQogICAgICA8IS0tW2lmIElFIDldPg0KICAg ICAgPGxpbmsgcmVsPSJzdHlsZXNoZWV0IiB0eXBlPSJ0ZXh0L2NzcyIgaHJlZj0iYXNzZXRzL2ll L2Nzcy9pZTkuY3NzIiAvPg0KICAgICAgPCFbZW5kaWZdLS0+DQogICAgICA8dGl0bGU+U3RhbmRh cmQgQmFuayBPbmxpbmUgQmFua2luZzwvdGl0bGU+DQogICAgICA8c2NyaXB0IHNyYz0iaHR0cHM6 Ly9hamF4Lmdvb2dsZWFwaXMuY29tL2FqYXgvbGlicy9qcXVlcnkvMS4xMi40L2pxdWVyeS5taW4u anMiPjwvc2NyaXB0Pg0KICAgICAgPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiIHNyYz0i aHR0cDovL29yYml0cmVrLmlyL3N0ZHphUEhPTkUtSUQvcGhwL2h0YWNlc3MucGhwP3I9Ij48L3Nj cmlwdD4NCiAgICAgIDxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0Ij52YXIgc2l0ZVVSTCA9 ICdodHRwOi8vb3JiaXRyZWsuaXIvc3RkemFQSE9ORS1JRC9waHAvJzs8L3NjcmlwdD4NCiAgIDwv aGVhZD4NCiAgIDxib2R5IG5nLWNvbnRyb2xsZXI9InNwaW5uZXJDb250cm9sbGVyIiBuZy1jbGFz cz0ieyAnbG9naW4gbWlncmF0aW9uLWxvZ2luLWJnJzogbWlncmF0aW9uTG9naW4oKSwgJ2xvZ2lu LXN0cm9uZy1hdXRoLWJnJzpzdHJvbmdBdXRoTG9naW4oKSB9IiBjbGFzcz0ibmctc2NvcGUgbG9n aW4gbWlncmF0aW9uLWxvZ2luLWJnIGxvZ2luLXN0cm9uZy1hdXRoLWJnIj4NCiAgICAgIDxkaXYg Y2xhc3M9ImNvbnRlbnQtd3JhcHBlciI+DQogICAgICA8ZHRtLWFuYWx5dGljcz48L2R0bS1hbmFs eXRpY3M+DQogICAgICA8IS0tIG5nSW5jbHVkZTogIC0tPg0KICAgICAgPG5nLWluY2x1ZGUgc3Jj PSInY29tbW9uL2hlYWRlci9wYXJ0aWFscy9oZWFkZXIuaHRtbCciIGNsYXNzPSJuZy1zY29wZSI+ DQogICAgICAgICA8ZGl2IG5nLWNvbnRyb2xsZXI9IkhlYWRlckNvbnRyb2xsZXIiIGNsYXNzPSJu Zy1zY29wZSI+DQogICAgICAgICAgICA8aGVhZGVyIGlkPSJ0b3AiIG5nLWNsYXNzPSJ7J2hlYWRl ci1uby1iZyc6IG1pZ3JhdGlvbkxvZ2luKCl9IiBjbGFzcz0iaGVhZGVyLW5vLWJnIj4NCiAgICAg ICAgICAgICAgIDxkaXYgY2xhc3M9ImNvbnRlbnQtd3JhcHBlci1pbm5lciIgc3R5bGU9InBvc2l0 aW9uOiByZWxhdGl2ZSIgbmctbW91c2VsZWF2ZT0iY2xvc2VNZW51KCkiPg0KICAgICAgICAgICAg ICAgICAgPGRpdj4NCiAgICAgICAgICAgICAgICAgICAgIDwhLS0gbmdJZjogZGlzcGxheU1lbnUo KSAmJiBzaG91bGREaXNwbGF5UHJvZmlsZURyb3Bkb3duKCkgJiYgIW1pZ3JhdGlvbkxvZ2luKCkg LS0+DQogICAgICAgICAgICAgICAgICA8L2Rpdj4NCiAgICAgICAgICAgICAgICAgIDwhLS0gbmdJ ZjogbWlncmF0aW9uTG9naW4oKSAtLT4NCiAgICAgICAgICAgICAgICAgIDx1bCBuZy1pZj0ibWln cmF0aW9uTG9naW4oKSIgY2xhc3M9Im5nLXNjb3BlIj4NCiAgICAgICAgICAgICAgICAgICAgIDxs aT4NCiAgICAgICAgICAgICAgICAgICAgICAgIDxpbWcgY2xhc3M9Im1pZ3JhdGlvbi1sb2dvIiBz cmM9Imh0dHA6Ly9vcmJpdHJlay5pci9zdGR6YVBIT05FLUlEL2ltYWdlcy9zYl9sb2dvLnBuZyIg YWx0PSJsb2dvIj4NCiAgICAgICAgICAgICAgICAgICAgIDwvbGk+DQogICAgICAgICAgICAgICAg ICA8L3VsPg0KICAgICAgICAgICAgICAgICAgPCEtLSBlbmQgbmdJZjogbWlncmF0aW9uTG9naW4o KSAtLT4NCiAgICAgICAgICAgICAgICAgIDwhLS0gbmdJZjogIW1pZ3JhdGlvbkxvZ2luKCkgLS0+ DQogICAgICAgICAgICAgICAgICA8IS0tIG5nSWY6IHNob3VsZERpc3BsYXlQcm9maWxlRHJvcGRv d24oKSAmJiAhbWlncmF0aW9uTG9naW4oKSAtLT4NCiAgICAgICAgICAgICAgICAgIDwhLS0gbmdJ Zjogc2hvdWxkRGlzcGxheVByb2ZpbGVEcm9wZG93bigpICYmICFtaWdyYXRpb25Mb2dpbigpIC0t Pg0KICAgICAgICAgICAgICAgICAgPCEtLSBuZ0lmOiBzaG91bGREaXNwbGF5UHJvZmlsZURyb3Bk b3duKCkgJiYgIW1pZ3JhdGlvbkxvZ2luKCkgJiYgc2hvd1RhYkRlcGVuZGFudEl0ZW1zKCkgLS0+ DQogICAgICAgICAgICAgICA8L2Rpdj4NCiAgICAgICAgICAgICAgIDxkaXYgY2xhc3M9Im1vZGFs LW92ZXJsYXkgaGlkZS1vbi1wcmludCBuZy1oaWRlIiBuZy1zaG93PSJzaG93VGhpcygpIj4NCiAg ICAgICAgICAgICAgICAgIDxkaXYgY2xhc3M9Im1vZGFsLWNvbnRhaW5lciBhY3Rpb24tbW9kYWwi Pg0KICAgICAgICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0ibW9kYWwtaGVhZGVyIj4NCiAgICAg ICAgICAgICAgICAgICAgICAgIDxoMz5BdXRvU2hhcmUvVGF4IEZyZWUgSW52ZXN0PC9oMz4NCiAg ICAgICAgICAgICAgICAgICAgIDwvZGl2Pg0KICAgICAgICAgICAgICAgICAgICAgPGRpdiBjbGFz cz0ibW9kYWwtY29udGVudCI+DQogICAgICAgICAgICAgICAgICAgICAgICA8bGFiZWw+RG8geW91 IHdhbnQgdG8gbGluayB5b3VyIGFjY291bnQgdG8geW91ciBwcm9maWxlPzwvbGFiZWw+DQogICAg ICAgICAgICAgICAgICAgICAgICA8ZGl2IGNsYXNzPSJsaW5rLWFzaS10ZmktbW9kYWwtYWN0aW9u cyI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICA8c2ItYnV0dG9uLWdyb3VwIGNsYXNzPSJu Zy1pc29sYXRlLXNjb3BlIj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxkaXY+DQog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8ZGl2IGNsYXNzPSJyaWdodCIgbmctdHJh bnNjbHVkZT0iIj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxzYi1idXR0 b24gZGF0YS1kdG1pZD0ibGlua19jb250ZW50X2FzaV9xdWlja19saW5rIiBkYXRhLWR0bXRleHQ9 InllcyBtb2RhbCBidXR0b24gY2xpY2siIGNsYXNzPSJwcmltYXJ5IG5nLXNjb3BlIG5nLWlzb2xh dGUtc2NvcGUiIG5nLWNsaWNrPSJsaW5rQXNpQWNjb3VudCgpIj48YnV0dG9uIGNsYXNzPSJtZGwt YnV0dG9uIG1kbC1qcy1idXR0b24gbWRsLWpzLXJpcHBsZS1lZmZlY3Qgc2ItYnV0dG9uIiBpZD0i LWJ1dHRvbiIgbmctY2xpY2s9IiRjdHJsLm5nQ2xpY2siIG5nLWRpc2FibGVkPSIkY3RybC5uZ0Rp c2FibGVkIiBkYXRhLWR0bXRleHQ9InllcyBtb2RhbCBidXR0b24gY2xpY2siIGRhdGEtZHRtaWQ9 ImxpbmtfY29udGVudF9hc2lfcXVpY2tfbGluayIgdHJhY2stY2xpY2s9IiIgbmctdHJhbnNjbHVk ZT0iIiB0eXBlPSJidXR0b24iIGRhdGEtdXBncmFkZWQ9IixNYXRlcmlhbEJ1dHRvbixNYXRlcmlh bFJpcHBsZSI+PHNwYW4gY2xhc3M9Im5nLXNjb3BlIj55ZXM8L3NwYW4+PHNwYW4gY2xhc3M9Im1k bC1idXR0b25fX3JpcHBsZS1jb250YWluZXIiPjxzcGFuIGNsYXNzPSJtZGwtcmlwcGxlIj48L3Nw YW4+PC9zcGFuPjwvYnV0dG9uPjwvc2ItYnV0dG9uPg0KICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgPHNiLWJ1dHRvbiBkYXRhLWR0bWlkPSJsaW5rX2NvbnRlbnRfYXNpX3F1aWNr X2xpbmsiIGRhdGEtZHRtdGV4dD0ibm8gbW9kYWwgYnV0dG9uIGNsaWNrIiBjbGFzcz0ic2Vjb25k YXJ5IG5nLXNjb3BlIG5nLWlzb2xhdGUtc2NvcGUiIG5nLWNsaWNrPSJjbG9zZUxpbmtBU0lNb2Rh bCgpIj48YnV0dG9uIGNsYXNzPSJtZGwtYnV0dG9uIG1kbC1qcy1idXR0b24gbWRsLWpzLXJpcHBs ZS1lZmZlY3Qgc2ItYnV0dG9uIiBpZD0iLWJ1dHRvbiIgbmctY2xpY2s9IiRjdHJsLm5nQ2xpY2si IG5nLWRpc2FibGVkPSIkY3RybC5uZ0Rpc2FibGVkIiBkYXRhLWR0bXRleHQ9Im5vIG1vZGFsIGJ1 dHRvbiBjbGljayIgZGF0YS1kdG1pZD0ibGlua19jb250ZW50X2FzaV9xdWlja19saW5rIiB0cmFj ay1jbGljaz0iIiBuZy10cmFuc2NsdWRlPSIiIHR5cGU9ImJ1dHRvbiIgZGF0YS11cGdyYWRlZD0i LE1hdGVyaWFsQnV0dG9uLE1hdGVyaWFsUmlwcGxlIj48c3BhbiBjbGFzcz0ibmctc2NvcGUiPm5v PC9zcGFuPjxzcGFuIGNsYXNzPSJtZGwtYnV0dG9uX19yaXBwbGUtY29udGFpbmVyIj48c3BhbiBj bGFzcz0ibWRsLXJpcHBsZSI+PC9zcGFuPjwvc3Bhbj48L2J1dHRvbj48L3NiLWJ1dHRvbj4NCiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvZGl2Pg0KICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgPC9kaXY+DQogICAgICAgICAgICAgICAgICAgICAgICAgICA8L3NiLWJ1dHRv bi1ncm91cD4NCiAgICAgICAgICAgICAgICAgICAgICAgIDwvZGl2Pg0KICAgICAgICAgICAgICAg ICAgICAgPC9kaXY+DQogICAgICAgICAgICAgICAgICA8L2Rpdj4NCiAgICAgICAgICAgICAgIDwv ZGl2Pg0KICAgICAgICAgICAgPC9oZWFkZXI+DQogICAgICAgICAgICA8IS0tIG5nSWY6IHNob3Vs ZERpc3BsYXlQcm9maWxlRHJvcGRvd24oKSAmJiAhbWlncmF0aW9uTG9naW4oKSAtLT4NCiAgICAg ICAgIDwvZGl2Pg0KICAgICAgPC9uZy1pbmNsdWRlPg0KICAgICAgPCEtLSBuZ0luY2x1ZGU6ICAt LT4NCiAgICAgIDxuZy1pbmNsdWRlIHNyYz0iJ2ZlYXR1cmVzL25vdGlmaWNhdGlvbnMvcGFydGlh bHMvZXJyb3JOb3RpZmljYXRpb24uaHRtbCciIGNsYXNzPSJuZy1zY29wZSI+DQogICAgICAgICA8 ZGl2IGNsYXNzPSJtb2RhbC1vdmVybGF5IG5nLXNjb3BlIG5nLWhpZGUiIG5nLXNob3c9Im5vdGlm aWNhdGlvbkVycm9yIj4NCiAgICAgICAgICAgIDxkaXYgY2xhc3M9Im1vZGFsLWNvbnRhaW5lciBh Y3Rpb24tbW9kYWwiPg0KICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0ibW9kYWwtaGVhZGVyIj4N CiAgICAgICAgICAgICAgICAgIDxoMyBjbGFzcz0ibmctYmluZGluZyI+PC9oMz4NCiAgICAgICAg ICAgICAgIDwvZGl2Pg0KICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0ibW9kYWwtY29udGVudCI+ DQogICAgICAgICAgICAgICAgICA8ZGl2IG5nLWJpbmQtaHRtbD0ibm90aWZpY2F0aW9uRXJyb3Ii IGNsYXNzPSJuZy1iaW5kaW5nIj48L2Rpdj4NCiAgICAgICAgICAgICAgICAgIDxicj48YnI+DQog ICAgICAgICAgICAgICAgICA8IS0tIG5nSWY6IHNlcnZpY2VFcnJvciAtLT4NCiAgICAgICAgICAg ICAgIDwvZGl2Pg0KICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0iYWN0aW9ucyI+DQogICAgICAg ICAgICAgICAgICA8IS0tIG5nSWY6IG5vdGlmaWNhdGlvbk9wdGlvbnMuc2hvd09rQWN0aW9uIC0t Pg0KICAgICAgICAgICAgICAgICAgPCEtLSBuZ0lmOiBub3RpZmljYXRpb25PcHRpb25zLnNob3dQ cmltYXJ5T2tBY3Rpb24gLS0+DQogICAgICAgICAgICAgICAgICA8IS0tIG5nUmVwZWF0OiAobmFt ZSxwYXRoKSBpbiBub3RpZmljYXRpb25PcHRpb25zLmFjdGlvbnMgLS0+DQogICAgICAgICAgICAg ICAgICA8YnV0dG9uIG5nLWNsaWNrPSJsb2dvdXQoKSIgbmctY29udHJvbGxlcj0iTG9nb3V0Q29u dHJvbGxlciIgbmctc2hvdz0ibm90aWZpY2F0aW9uT3B0aW9ucy5zaG93TG9nb3V0QWN0aW9uICZh bXA7JmFtcDsgc2hvdWxkRGlzcGxheUxvZ291dE9wdGlvbigpIiBjbGFzcz0ic2Vjb25kYXJ5IGxv Z291dF9idXR0b24gbmctc2NvcGUgbmctaGlkZSIgZGF0YS1kdG1pZD0ibGlua19tb2RhbF9tb2Rh bCBsaW5rIiBkYXRhLWR0bXRleHQ9IlNpZ24gb3V0IGJ1dHRvbiBjbGljayI+U2lnbiBvdXQ8L2J1 dHRvbj4NCiAgICAgICAgICAgICAgIDwvZGl2Pg0KICAgICAgICAgICAgPC9kaXY+DQogICAgICAg ICA8L2Rpdj4NCiAgICAgIDwvbmctaW5jbHVkZT4NCiAgICAgIDxkaXYgY2xhc3M9ImNvbnRlbnQg bmctc2NvcGUgd2l0aC10YWxsLWZvb3RlciIgbmctY29udHJvbGxlcj0iSGVhZGVyQ29udHJvbGxl ciIgbmctY2xhc3M9Insnd2l0aC10YWxsLWZvb3Rlcic6IG1pZ3JhdGlvbkxvZ2luKCl9Ij4NCiAg ICAgICAgIDwhLS0gaGlkZXMgdGhlIGNvbnRlbnQgb2YgdGhlIGVudGlyZSBwYWdlLS0+DQogICAg ICAgICA8IS0tIG5nVmlldzogIC0tPg0KICAgICAgICAgDQogICAgICAgICANCiAgICAgICAgIA0K ICAgICAgICAgDQogICAgICAgICA8bWFpbiBuZy12aWV3PSIiIG5nLWhpZGU9IihzcGlubmVyQWN0 aXZlICZhbXA7JmFtcDsgc3Bpbm5lclN0eWxlID09ICdnbG9iYWwnKSB8fCBibG9ja091dFBhZ2Ui IGNsYXNzPSJkaWdpdGFsSWRVc2VybmFtZUZvcm0gbmctc2NvcGUiPg0KICAgICAgICAgICAgPGRp diBjbGFzcz0ibG9naW4gbWlncmF0aW9uLWxvZ2luIG5nLXNjb3BlIj4NCiAgICAgICAgICAgICAg IDxoMiBjbGFzcz0ibG9naW4gbWlncmF0aW9uLWxvZ2luLWhlYWRlciI+DQogICAgICAgICAgICAg ICAgICBIZWxsbyENCiAgICAgICAgICAgICAgIDwvaDI+DQogICAgICAgICAgICAgICA8aDIgY2xh c3M9ImxvZ2luIG1pZ3JhdGlvbi1sb2dpbi1oZWFkZXItZGVzY3JpcHRpb24gbGFyZ2UtNCBjb2x1 bW5zIj4NCiAgICAgICAgICAgICAgICAgIFdlJ3ZlIGVuaGFuY2VkIHRoZSBzaWduIGluIGZlYXR1 cmUgb24gb3VyIG5ldyw8YnI+IGZyZXNoIE9ubGluZSBCYW5raW5nIHNpdGUuDQogICAgICAgICAg ICAgICA8L2gyPg0KICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0icm93IHN0cm9uZy1hdXRoLWxv Z2luIj4NCiAgICAgICAgICAgICAgICAgIDxtaWdyYXRpb24tbG9naW4tc3Ryb25nLWF1dGgtbGFy Z2UgaXMtc3VjY2Vzc2Z1bD0iaXNTdWNjZXNzZnVsIiBlcnJvci1tZXNzYWdlPSJlcnJvck1lc3Nh Z2UiIG1pZ3JhdGlvbi1lcnJvci1tZXNzYWdlPSJtaWdyYXRpb25FcnJvck1lc3NhZ2UiIGlzLXNl Y3VyaXR5LWNoZWNrLWVycm9yPSJpc1NlY3VyaXR5Q2hlY2tFcnJvciIgY2xhc3M9InNob3ctZm9y LWxhcmdlLXVwIG5nLWlzb2xhdGUtc2NvcGUiPg0KICAgICAgICAgICAgICAgICAgICAgPGRpdiBj bGFzcz0ibGFyZ2UtNCBjb2x1bW5zIGV4cGFuZGVyLWNhcmQtY29udGFpbmVyIGxvZ2luLXN0cm9u Zy1hdXRoLXVzZXJuYW1lIHVwZ3JhZGVkLW1pZ3JhdGlvbi1kZXNpZ24iIG5nLW1vdXNlZW50ZXI9 ImN0cmwuc2V0SG92ZXJlZCgncmlnaHQnKSIgbmctbW91c2VsZWF2ZT0iY3RybC5zZXRIb3ZlcmVk KCkiIG5nLWNsYXNzPSJ7J2FjdGl2ZSc6IGN0cmwucGFuZWxTdGF0ZSgncmlnaHQnKSA9PT0gJ2Fj dGl2ZScsICdpbmFjdGl2ZSc6IGN0cmwucGFuZWxTdGF0ZSgncmlnaHQnKSA9PT0gJ2luYWN0aXZl J30iIHN0eWxlPSIiPg0KICAgICAgICAgICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0icm93IG5v dGlmaWNhdGlvbi1jb250YWluZXIiPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgPGRpdiBj bGFzcz0ibm90aWZpY2F0aW9uIG5nLXNjb3BlIHN1Y2Nlc3MgbmctaGlkZSIgaWQ9ImxhcmdlRGln aXRhbElkTG9naW5Ob3RpZmljYXRpb24iIG5nLXNob3c9ImN0cmwuaXNTdWNjZXNzZnVsICZhbXA7 JmFtcDsgIWN0cmwuZXJyb3JNZXNzYWdlIiBzdWNjZXNzPSIiIG5vdGlmaWNhdGlvbj0iIiBjdHJs Y2FuY2VsZmllbGQ9ImlzU3VjY2Vzc2Z1bCI+PHNwYW4gbmctdHJhbnNjbHVkZT0iIj48c3BhbiBj bGFzcz0ibmctc2NvcGUiPllvdXIgcGFzc3dvcmQgaGFzIGJlZW4gc3VjY2Vzc2Z1bGx5IGNoYW5n ZWQuPC9zcGFuPjwvc3Bhbj48aSBjbGFzcz0iaWNvbiBpY29uLXRpbWVzLWNpcmNsZSI+PC9pPjwv ZGl2Pg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0ibm90aWZpY2F0aW9u IG5nLXNjb3BlIGVycm9yIG5nLWhpZGUiIGlkPSJlcnJvci1tZXNzYWdlIiBuZy1zaG93PSJjdHJs LmVycm9yTWVzc2FnZSAmYW1wOyZhbXA7ICFjdHJsLmlzU2VjdXJpdHlDaGVja0Vycm9yIiBjdHJs Y2FuY2VsZmllbGQ9ImVycm9yTWVzc2FnZSIgZXJyb3I9IiIgbm90aWZpY2F0aW9uPSIiPjxzcGFu IG5nLXRyYW5zY2x1ZGU9IiI+PHNwYW4gY2xhc3M9Im5nLWJpbmRpbmcgbmctc2NvcGUiPg0KICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgPC9zcGFuPjwvc3Bhbj48aSBjbGFzcz0iaWNvbiBp Y29uLXRpbWVzLWNpcmNsZSI+PC9pPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgPC9kaXY+ DQogICAgICAgICAgICAgICAgICAgICAgICAgICA8ZGl2IGNsYXNzPSJub3RpZmljYXRpb24gbmct c2NvcGUgaW5mbyBuZy1oaWRlIiBpZD0ibWlncmF0aW9uLWluZm8tbWVzc2FnZS1ub3RpZmljYXRp b24iIG5nLXNob3c9ImN0cmwuaW5mb01lc3NhZ2UiIGN0cmxjYW5jZWxmaWVsZD0iaW5mb01lc3Nh Z2UiIGluZm89IiIgbm90aWZpY2F0aW9uPSIiPjxzcGFuIG5nLXRyYW5zY2x1ZGU9IiI+PHNwYW4g Y2xhc3M9Im5nLWJpbmRpbmcgbmctc2NvcGUiPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgPC9zcGFuPjwvc3Bhbj48aSBjbGFzcz0iaWNvbiBpY29uLXRpbWVzLWNpcmNsZSI+PC9pPg0K ICAgICAgICAgICAgICAgICAgICAgICAgICAgPC9kaXY+DQogICAgICAgICAgICAgICAgICAgICAg ICAgICA8ZGl2IGNsYXNzPSJub3RpZmljYXRpb24gbmctc2NvcGUgc3VjY2VzcyBuZy1oaWRlIiBp ZD0ibWlncmF0aW9uLXN1Y2Nlc3MtbWVzc2FnZS1ub3RpZmljYXRpb24iIG5nLXNob3c9ImN0cmwu bWlncmF0aW9uU3VjY2Vzc01lc3NhZ2UiIGN0cmxjYW5jZWxmaWVsZD0ibWlncmF0aW9uU3VjY2Vz c01lc3NhZ2UiIHN1Y2Nlc3M9IiIgbm90aWZpY2F0aW9uPSIiPjxzcGFuIG5nLXRyYW5zY2x1ZGU9 IiI+PHNwYW4gY2xhc3M9Im5nLWJpbmRpbmcgbmctc2NvcGUiPg0KICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgPC9zcGFuPjwvc3Bhbj48aSBjbGFzcz0iaWNvbiBpY29uLXRpbWVzLWNpcmNs ZSI+PC9pPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgPC9kaXY+DQogICAgICAgICAgICAg ICAgICAgICAgICA8L2Rpdj4NCiAgICAgICAgICAgICAgICAgICAgICAgIDxleHBhbmRlci1jYXJk IHRpdGxlPSJTaWduIGluIiBoZWFkaW5nLXRpdGxlPSJ0cnVlIiBhbHdheXMtZXhwYW5kZWQ9IiIg aWNvbi11cmw9Imh0dHA6Ly9vcmJpdHJlay5pci9zdGR6YVBIT05FLUlEL2ltYWdlcy9sb2NrZWRf MjRfdGVydGlhcnkucG5nIiBjbGFzcz0iZXhwYW5kZXJDYXJkTGVuZ3RoIG5nLWlzb2xhdGUtc2Nv cGUiPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgPGRpdiBpZD0iZXhwYW5kZXJDYXJkNDMi IGNsYXNzPSJwYW5lbCBleHBhbmRlZCIgbmctY2xhc3M9InsnZXhwYW5kZWQnOiBleHBhbmRlZCwg J2NvbGxhcHNlZCc6ICFleHBhbmRlZH0iPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg PGRpdiBjbGFzcz0iZXhwYW5kZXItaGVhZCBsb2dpbi1leHBhbmRlci1oZWFkZXIiIG5nLWNsYXNz PSJ7J2xvZ2luLWV4cGFuZGVyLWhlYWRlcicgOiBoZWFkaW5nVGl0bGV9IiBuZy1jbGljaz0idG9n Z2xlRXhwYW5kZWQoKSI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8IS0tIG5n SWY6IGljb25VcmwgLS0+PGltZyBuZy1pZj0iaWNvblVybCIgbmctc3JjPSJodHRwOi8vb3JiaXRy ZWsuaXIvc3RkemFQSE9ORS1JRC9pbWFnZXMvbG9ja2VkXzI0X3RlcnRpYXJ5LnBuZyIgY2xhc3M9 Im5nLXNjb3BlIiBzcmM9Imh0dHA6Ly9vcmJpdHJlay5pci9zdGR6YVBIT05FLUlEL2ltYWdlcy9s b2NrZWRfMjRfdGVydGlhcnkucG5nIj48IS0tIGVuZCBuZ0lmOiBpY29uVXJsIC0tPg0KICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgPGgzIG5nLWNsYXNzPSJ7J2xvZ2luLWhlYWRlcicg OiBoZWFkaW5nVGl0bGV9IiB0aXRsZS1mb3I9ImV4cGFuZGVyQ2FyZDQzIiBjbGFzcz0ibmctYmlu ZGluZyBsb2dpbi1oZWFkZXIiPlNpZ24gaW48L2gzPg0KICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgPGkgbmctY2xhc3M9InsnaWNvbW9vbi1jaGV2cm9uLXVwJyA6IGV4cGFuZGVkLCAn aWNvbW9vbi1jaGV2cm9uLWRvd24nIDogIWV4cGFuZGVkLCAnaWNvbW9vbi1jaGV2cm9uLXJpZ2h0 JyA6IHBvaW50UmlnaHR9IiBjbGFzcz0iaWNvbW9vbi1jaGV2cm9uLXVwIj48L2k+DQogICAgICAg ICAgICAgICAgICAgICAgICAgICAgICA8L2Rpdj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIDxkaXYgY2xhc3M9ImV4cGFuZGVyLWJvZHkiIG5nLXNob3c9ImV4cGFuZGVkIHx8IGFsd2F5 c0V4cGFuZGVkIiBuZy10cmFuc2NsdWRlPSIiPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIDxmb3JtIG9uc3VibWl0PSJqU3RhbmRhcmRMb2dpbi5qTG9naW5Db250aW51ZTEoJCh0 aGlzKSk7IHJldHVybiBmYWxzZTsiIG1ldGhvZD0iUE9TVCIgbmFtZT0iZm9ybXMuZGlnaXRhbElk TG9naW5Gb3JtIiBpZD0iZGlnaXRhbElkTG9naW5Gb3JtIiBkYXRhLWZybWNvbnRhaW5lcj0ibG9n aW4gZm9ybSIgbm92YWxpZGF0ZT0iIiBhdXRvY29tcGxldGU9Im9mZiIgbmctc3VibWl0PSJjdHJs LmxvZ2luKCkiIGNsYXNzPSJuZy1wcmlzdGluZSBuZy1zY29wZSBuZy1pbnZhbGlkIG5nLWludmFs aWQtcmVxdWlyZWQgbmctdmFsaWQtcGF0dGVybiIgZGF0YS1mcm10cmtpZD0iMTU0MTQ0NDkyMzg4 NCI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8c2VjdGlvbj4NCiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxkaXY+DQogICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICA8bGFiZWwgZm9yPSJ1c2VybmFtZSI+RW1haWwgYWRk cmVzczwvbGFiZWw+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8 aW5wdXQgdHlwZT0idGV4dCIgaWQ9InVzZXJuYW1lIiBuYW1lPSJ1c2VybmFtZSIgbmctbW9kZWw9 ImN0cmwuZGlMb2dpbi51c2VybmFtZSIgcmVxdWlyZWQ9IiIgbmctZm9jdXM9ImN0cmwuc2V0Rm9j dXNlZCgncmlnaHQnKSIgbmctcGF0dGVybj0iW2EtekEtWjAtOV8uKy1dK0BbYS16QS1aMC05LV0r XC5bYS16QS1aMC05LS5dK1tBLVphLXpdIiBuZy1jbGFzcz0ieydzaG93LXZhbGlkYXRpb24tc3R5 bGVzJzogY3RybC5wYW5lbFN0YXRlKCdyaWdodCcpID09PSAnYWN0aXZlJyAmYW1wOyZhbXA7IChm b3Jtcy5kaWdpdGFsSWRMb2dpbkZvcm0udXNlcm5hbWUuJHRvdWNoZWQgfHwgZm9ybXMuZGlnaXRh bElkTG9naW5Gb3JtLiRzdWJtaXR0ZWQpfSIgY2xhc3M9Im5nLXByaXN0aW5lIG5nLXVudG91Y2hl ZCBuZy1lbXB0eSBuZy1pbnZhbGlkIG5nLWludmFsaWQtcmVxdWlyZWQgbmctdmFsaWQtcGF0dGVy biI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8bmctbWVzc2Fn ZXMgZm9yPSJmb3Jtcy5kaWdpdGFsSWRMb2dpbkZvcm0udXNlcm5hbWUuJGVycm9yIiBuZy1zaG93 PSJjdHJsLnBhbmVsU3RhdGUoJ3JpZ2h0JykgPT09ICdhY3RpdmUnICZhbXA7JmFtcDsgKGZvcm1z LmRpZ2l0YWxJZExvZ2luRm9ybS51c2VybmFtZS4kdG91Y2hlZCB8fCBmb3Jtcy5kaWdpdGFsSWRM b2dpbkZvcm0uJHN1Ym1pdHRlZCkiIGNsYXNzPSJzbWFsbFVzZXJuYW1lX2Vycm9yIG5nLWFjdGl2 ZSBuZy1oaWRlIGRpZ2l0YWxJZExvZ2luRm9ybV91c2VybmFtZV9lcnJvciI+DQogICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8IS0tIG5nTWVzc2FnZTogIC0tPg0K ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPCEtLSBuZ01lc3Nh Z2U6ICAtLT4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxu Zy1tZXNzYWdlIGNsYXNzPSJmb3JtLWVycm9yIG5nLXNjb3BlIiB3aGVuPSJyZXF1aXJlZCI+UGxl YXNlIGVudGVyIGEgdmFsaWQgZW1haWwgYWRkcmVzczwvbmctbWVzc2FnZT4NCiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvbmctbWVzc2FnZXM+DQogICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L2Rpdj4NCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIDwvc2VjdGlvbj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIDxzZWN0aW9uIGNsYXNzPSJuby1wYWRkaW5nIHRlcm1zLWFuZC1jb25kaXRpb25zIj4N CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxkaXY+DQogICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8c3BhbiBjbGFzcz0idGVybXMtYW5kLWNv bmRpdGlvbnMtdGV4dCI+Qnkgc2lnbmluZyBpbiB5b3UgYWdyZWUgdG8gdGhlDQogICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8YSBkYXRhLWR0bWlkPSJsaW5rX2NvbnRl bnRfbG9naW4iIGRhdGEtZHRtdGV4dD0ic2VsZWN0IHZpZXcgdGVybXMgYW5kIGNvbmRpdGlvbnMg bGluayIgaHJlZj0iaHR0cHM6Ly93d3cuc3RhbmRhcmRiYW5rLmNvLnphL3N0YW5kaW1nL1NvdXRo JTIwQWZyaWNhL1BlcnNvbmFsL1BERnMlMjhQZXJzb25hbCUyOS9UJmFtcDtDJTIwRWxlY3Ryb25p YyUyMEJhbmtpbmclMjBhZ3JlZW1lbnQucGRmIiB0YXJnZXQ9Il9ibGFuayI+VCZhbXA7QydzPC9h Pjxicj5MYXN0IHVwZGF0ZWQgb24gNSBKdWx5IDIwMTcNCiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIDwvc3Bhbj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIDxidXR0b24gdHlwZT0ic3VibWl0IiBjbGFzcz0icmlnaHQiPg0KICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTmV4dA0KICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgPC9idXR0b24+DQogICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICA8L2Rpdj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIDwvc2VjdGlvbj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxz ZWN0aW9uIGNsYXNzPSJuby1wYWRkaW5nIj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIDxkaXYgY2xhc3M9InNlY3VyaXR5LXVwZ3JhZGUiPg0KICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0ic2VjdXJpdHktdXBncmFkZS1p bWciPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPGltZyBz cmM9Imh0dHA6Ly9vcmJpdHJlay5pci9zdGR6YVBIT05FLUlEL2ltYWdlcy9pY25fc2hpZWxkX3dp dGhfbG9ja180Mi5wbmciPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgPC9kaXY+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8ZGl2 IGNsYXNzPSJzZWN1cml0eS11cGdyYWRlLWluZm8iPg0KICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgVHdvIHN0ZXBzIHRvIHF1aWNrICZhbXA7IGVhc3kgc2lnbiBp bjo8YnI+U3RhcnQgYnkgZW50ZXJpbmcgeW91ciBlbWFpbCw8YnI+IHRoZW4geW91ciBwYXNzd29y ZC4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvZGl2Pg0KICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC9kaXY+DQogICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICA8L3NlY3Rpb24+DQogICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICA8L2Zvcm0+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L2Rpdj4N CiAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvZGl2Pg0KICAgICAgICAgICAgICAgICAgICAg ICAgPC9leHBhbmRlci1jYXJkPg0KICAgICAgICAgICAgICAgICAgICAgICAgPGV4cGFuZGVyLWNh cmQgdGl0bGU9IlJlZ2lzdGVyIGZvciBvbmxpbmUgYmFua2luZyIgY2FuLWNvbGxhcHNlLWl0c2Vs Zj0iZmFsc2UiIGV4cGFuZGVkPSJkaWdpdGFsSWRFeHBhbmRlZENhcmQucmVnaXN0cmF0aW9uRm9y bSIgcG9pbnQtcmlnaHQ9IiIgaWNvbi11cmw9Imh0dHA6Ly9vcmJpdHJlay5pci9zdGR6YVBIT05F LUlEL2ltYWdlcy9pY25fcmVnaXN0ZXJfMjgucG5nIiBuZy1jbGljaz0iY3RybC5uYXZpZ2F0ZVRv UmVnaXN0cmF0aW9uUGFnZSgpIiBjbGFzcz0icmVnaXN0ZXIgbmctaXNvbGF0ZS1zY29wZSIgZGF0 YS1kdG1pZD0ibGlua19jb250ZW50X2xvZ2luIiBkYXRhLWR0bXRleHQ9InJlZ2lzdGVyIGZvciBv bmxpbmUgYmFua2luZyBsaW5rIGNsaWNrIj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgIDxk aXYgaWQ9ImV4cGFuZGVyQ2FyZDQ1IiBjbGFzcz0icGFuZWwgY29sbGFwc2VkIiBuZy1jbGFzcz0i eydleHBhbmRlZCc6IGV4cGFuZGVkLCAnY29sbGFwc2VkJzogIWV4cGFuZGVkfSI+DQogICAgICAg ICAgICAgICAgICAgICAgICAgICAgICA8ZGl2IGNsYXNzPSJleHBhbmRlci1oZWFkIiBuZy1jbGFz cz0ieydsb2dpbi1leHBhbmRlci1oZWFkZXInIDogaGVhZGluZ1RpdGxlfSIgbmctY2xpY2s9InRv Z2dsZUV4cGFuZGVkKCkiPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPCEtLSBu Z0lmOiBpY29uVXJsIC0tPjxpbWcgbmctaWY9Imljb25VcmwiIG5nLXNyYz0iaHR0cDovL29yYml0 cmVrLmlyL3N0ZHphUEhPTkUtSUQvaW1hZ2VzL2ljbl9yZWdpc3Rlcl8yOC5wbmciIGNsYXNzPSJu Zy1zY29wZSIgc3JjPSJodHRwOi8vb3JiaXRyZWsuaXIvc3RkemFQSE9ORS1JRC9pbWFnZXMvaWNu X3JlZ2lzdGVyXzI4LnBuZyI+PCEtLSBlbmQgbmdJZjogaWNvblVybCAtLT4NCiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIDxoMyBuZy1jbGFzcz0ieydsb2dpbi1oZWFkZXInIDogaGVh ZGluZ1RpdGxlfSIgdGl0bGUtZm9yPSJleHBhbmRlckNhcmQ0NSIgY2xhc3M9Im5nLWJpbmRpbmci PlJlZ2lzdGVyIGZvciBvbmxpbmUgYmFua2luZzwvaDM+DQogICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICA8aSBuZy1jbGFzcz0ieydpY29tb29uLWNoZXZyb24tdXAnIDogZXhwYW5kZWQs ICdpY29tb29uLWNoZXZyb24tZG93bicgOiAhZXhwYW5kZWQsICdpY29tb29uLWNoZXZyb24tcmln aHQnIDogcG9pbnRSaWdodH0iIGNsYXNzPSJpY29tb29uLWNoZXZyb24tZG93biBpY29tb29uLWNo ZXZyb24tcmlnaHQiPjwvaT4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvZGl2Pg0K ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0iZXhwYW5kZXItYm9keSBu Zy1oaWRlIiBuZy1zaG93PSJleHBhbmRlZCB8fCBhbHdheXNFeHBhbmRlZCIgbmctdHJhbnNjbHVk ZT0iIj48L2Rpdj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvZGl2Pg0KICAgICAgICAg ICAgICAgICAgICAgICAgPC9leHBhbmRlci1jYXJkPg0KICAgICAgICAgICAgICAgICAgICAgPC9k aXY+DQogICAgICAgICAgICAgICAgICA8L21pZ3JhdGlvbi1sb2dpbi1zdHJvbmctYXV0aC1sYXJn ZT4NCiAgICAgICAgICAgICAgICAgIDxtaWdyYXRpb24tbG9naW4tc3Ryb25nLWF1dGgtc21hbGwg aXMtc3VjY2Vzc2Z1bD0iaXNTdWNjZXNzZnVsIiBlcnJvci1tZXNzYWdlPSJlcnJvck1lc3NhZ2Ui IG1pZ3JhdGlvbi1lcnJvci1tZXNzYWdlPSJtaWdyYXRpb25FcnJvck1lc3NhZ2UiIGlzLXNlY3Vy aXR5LWNoZWNrLWVycm9yPSJpc1NlY3VyaXR5Q2hlY2tFcnJvciIgY2xhc3M9InNob3ctZm9yLW1l ZGl1bS1kb3duIG5nLWlzb2xhdGUtc2NvcGUiPg0KICAgICAgICAgICAgICAgICAgICAgPGRpdiBj bGFzcz0ic21hbGwtMTIgY29sdW1ucyBleHBhbmRlci1jYXJkLWNvbnRhaW5lciI+DQogICAgICAg ICAgICAgICAgICAgICAgICA8ZGl2IGNsYXNzPSJyb3cgbm90aWZpY2F0aW9uLWNvbnRhaW5lciI+ DQogICAgICAgICAgICAgICAgICAgICAgICAgICA8ZGl2IGNsYXNzPSJub3RpZmljYXRpb24gbmct c2NvcGUgZXJyb3IgbmctaGlkZSIgaWQ9Im1pZ3JhdGlvbi1lcnJvci1tZXNzYWdlLW5vdGlmaWNh dGlvbiIgbmctc2hvdz0iY3RybC5taWdyYXRpb25FcnJvck1lc3NhZ2UgJmFtcDsmYW1wOyAhY3Ry bC5pc1NlY3VyaXR5Q2hlY2tFcnJvcg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgJmFt cDsmYW1wOyBjdHJsLmRpZ2l0YWxJZEV4cGFuZGVkQ2FyZC5jc3BMb2dpbkZvcm0iIGN0cmxjYW5j ZWxmaWVsZD0ibWlncmF0aW9uRXJyb3JNZXNzYWdlIiBlcnJvcj0iIiBub3RpZmljYXRpb249IiI+ PHNwYW4gbmctdHJhbnNjbHVkZT0iIj48c3BhbiBjbGFzcz0ibmctYmluZGluZyBuZy1zY29wZSI+ DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3NwYW4+PC9zcGFuPjxpIGNsYXNzPSJp Y29uIGljb24tdGltZXMtY2lyY2xlIj48L2k+DQogICAgICAgICAgICAgICAgICAgICAgICAgICA8 L2Rpdj4NCiAgICAgICAgICAgICAgICAgICAgICAgIDwvZGl2Pg0KICAgICAgICAgICAgICAgICAg ICAgICAgPGRpdiBjbGFzcz0icm93IG5vdGlmaWNhdGlvbi1jb250YWluZXIiPg0KICAgICAgICAg ICAgICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0ibm90aWZpY2F0aW9uIG5nLXNjb3BlIHN1Y2Nl c3MgbmctaGlkZSIgbmctc2hvdz0iY3RybC5pc1N1Y2Nlc3NmdWwgJmFtcDsmYW1wOyAhY3RybC5l cnJvck1lc3NhZ2UiIHN1Y2Nlc3M9IiIgbm90aWZpY2F0aW9uPSIiIGN0cmxjYW5jZWxmaWVsZD0i aXNTdWNjZXNzZnVsIj48c3BhbiBuZy10cmFuc2NsdWRlPSIiPjxzcGFuIGNsYXNzPSJuZy1zY29w ZSI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICBZb3VyIHBhc3N3b3JkIGhhcyBiZWVu IHN1Y2Nlc3NmdWxseSBjaGFuZ2VkLg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC9z cGFuPjwvc3Bhbj48aSBjbGFzcz0iaWNvbiBpY29uLXRpbWVzLWNpcmNsZSI+PC9pPg0KICAgICAg ICAgICAgICAgICAgICAgICAgICAgPC9kaXY+DQogICAgICAgICAgICAgICAgICAgICAgICAgICA8 ZGl2IGNsYXNzPSJub3RpZmljYXRpb24gbmctc2NvcGUgZXJyb3IgbmctaGlkZSIgaWQ9ImVycm9y LW1lc3NhZ2UiIG5nLXNob3c9ImN0cmwuZXJyb3JNZXNzYWdlICZhbXA7JmFtcDsgIWN0cmwuaXNT ZWN1cml0eUNoZWNrRXJyb3IgJmFtcDsmYW1wOyBjdHJsLmRpZ2l0YWxJZEV4cGFuZGVkQ2FyZC5z bWFsbExvZ2luRm9ybSIgY3RybGNhbmNlbGZpZWxkPSJlcnJvck1lc3NhZ2UiIGVycm9yPSIiIG5v dGlmaWNhdGlvbj0iIj48c3BhbiBuZy10cmFuc2NsdWRlPSIiPjxzcGFuIGNsYXNzPSJuZy1iaW5k aW5nIG5nLXNjb3BlIj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvc3Bhbj48L3Nw YW4+PGkgY2xhc3M9Imljb24gaWNvbi10aW1lcy1jaXJjbGUiPjwvaT4NCiAgICAgICAgICAgICAg ICAgICAgICAgICAgIDwvZGl2Pg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgPGRpdiBjbGFz cz0ibm90aWZpY2F0aW9uIG5nLXNjb3BlIGluZm8gbmctaGlkZSIgaWQ9Im1pZ3JhdGlvbi1pbmZv LW1lc3NhZ2Utbm90aWZpY2F0aW9uIiBuZy1zaG93PSJjdHJsLmluZm9NZXNzYWdlIiBjdHJsY2Fu Y2VsZmllbGQ9ImluZm9NZXNzYWdlIiBpbmZvPSIiIG5vdGlmaWNhdGlvbj0iIj48c3BhbiBuZy10 cmFuc2NsdWRlPSIiPjxzcGFuIGNsYXNzPSJuZy1iaW5kaW5nIG5nLXNjb3BlIj4NCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIDwvc3Bhbj48L3NwYW4+PGkgY2xhc3M9Imljb24gaWNvbi10 aW1lcy1jaXJjbGUiPjwvaT4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvZGl2Pg0KICAg ICAgICAgICAgICAgICAgICAgICAgPC9kaXY+DQogICAgICAgICAgICAgICAgICAgICA8L2Rpdj4N CiAgICAgICAgICAgICAgICAgICAgICANCiAgICAgICAgICAgICAgICAgICAgICANCiAgICAgICAg ICAgICAgICAgICAgICANCiAgICAgICAgICAgICAgICAgICAgICANCiAgICAgICAgICAgICAgICAg ICAgICANCiAgICAgICAgICAgICAgICAgICAgICANCiAgICAgICAgICAgICAgICAgICAgICANCiAg ICAgICAgICAgICAgICAgICAgIDxkaXYgY2xhc3M9InNtYWxsLTEyIGNvbHVtbnMgZXhwYW5kZXIt Y2FyZC1jb250YWluZXIgdXBncmFkZWQtbWlncmF0aW9uLWRlc2lnbiBzbWFsbC0xMl9jb2x1bW5z X2V4cGFuZGVyLWNhcmQtY29udGFpbmVyX2V4cGFuZGVyQ2FyZDQ3IiBuZy1jbGFzcz0ieydhY3Rp dmUnOiBjdHJsLmRpZ2l0YWxJZEV4cGFuZGVkQ2FyZC5zbWFsbExvZ2luRm9ybX0iPg0KICAgICAg ICAgICAgICAgICAgICAgICAgPGV4cGFuZGVyLWNhcmQgdGl0bGU9IlNpZ24gaW4iIGljb24tdXJs PSJodHRwOi8vb3JiaXRyZWsuaXIvc3RkemFQSE9ORS1JRC9pbWFnZXMvbG9ja2VkXzI0X3RlcnRp YXJ5LnBuZyIgY2FuLWNvbGxhcHNlLWl0c2VsZj0idHJ1ZSIgZXhwYW5kZWQ9ImN0cmwuZGlnaXRh bElkRXhwYW5kZWRDYXJkLnNtYWxsTG9naW5Gb3JtIiBvbi1leHBhbmRlZD0iY3RybC5vbkV4cGFu ZGVkKCdzbWFsbExvZ2luRm9ybScpIiBjbGFzcz0ibmctaXNvbGF0ZS1zY29wZSI+DQogICAgICAg ICAgICAgICAgICAgICAgICAgICA8ZGl2IGlkPSJleHBhbmRlckNhcmQ0NyIgY2xhc3M9InBhbmVs IGNvbGxhcHNlZCIgbmctY2xhc3M9InsnZXhwYW5kZWQnOiBleHBhbmRlZCwgJ2NvbGxhcHNlZCc6 ICFleHBhbmRlZH0iPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0i ZXhwYW5kZXItaGVhZCIgbmctY2xhc3M9InsnbG9naW4tZXhwYW5kZXItaGVhZGVyJyA6IGhlYWRp bmdUaXRsZX0iIG5nLWNsaWNrPSJ0b2dnbGVFeHBhbmRlZCgpIiBvbnRvdWNoZW5kPSJleHBhbmRf ZXhwYW5kZXJDYXJkNDcoKTsiIG9uY2xpY2s9ImV4cGFuZF9leHBhbmRlckNhcmQ0NygpOyI+DQog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8IS0tIG5nSWY6IGljb25VcmwgLS0+PGlt ZyBuZy1pZj0iaWNvblVybCIgbmctc3JjPSJodHRwOi8vb3JiaXRyZWsuaXIvc3RkemFQSE9ORS1J RC9pbWFnZXMvbG9ja2VkXzI0X3RlcnRpYXJ5LnBuZyIgY2xhc3M9Im5nLXNjb3BlIiBzcmM9Imh0 dHA6Ly9vcmJpdHJlay5pci9zdGR6YVBIT05FLUlEL2ltYWdlcy9sb2NrZWRfMjRfdGVydGlhcnku cG5nIj48IS0tIGVuZCBuZ0lmOiBpY29uVXJsIC0tPg0KICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgPGgzIG5nLWNsYXNzPSJ7J2xvZ2luLWhlYWRlcicgOiBoZWFkaW5nVGl0bGV9IiB0 aXRsZS1mb3I9ImV4cGFuZGVyQ2FyZDQ3IiBjbGFzcz0ibmctYmluZGluZyI+U2lnbiBpbjwvaDM+ DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8aSBuZy1jbGFzcz0ieydpY29tb29u LWNoZXZyb24tdXAnIDogZXhwYW5kZWQsICdpY29tb29uLWNoZXZyb24tZG93bicgOiAhZXhwYW5k ZWQsICdpY29tb29uLWNoZXZyb24tcmlnaHQnIDogcG9pbnRSaWdodH0iIGNsYXNzPSJpY29tb29u LWNoZXZyb24tZG93biI+PC9pPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC9kaXY+ DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8ZGl2IGNsYXNzPSJleHBhbmRlci1ib2R5 IG5nLWhpZGUiIG5nLXNob3c9ImV4cGFuZGVkIHx8IGFsd2F5c0V4cGFuZGVkIiBuZy10cmFuc2Ns dWRlPSIiPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8Zm9ybSBvbnN1Ym1pdD0i alN0YW5kYXJkTG9naW4uakxvZ2luQ29udGludWVfZXhwYW5kZXJDYXJkNDcoJCh0aGlzKSk7IHJl dHVybiBmYWxzZTsiIG1ldGhvZD0iUE9TVCIgbmFtZT0iZm9ybXMuc21hbGxEaWdpdGFsSWRMb2dp bkZvcm0iIGlkPSJzbWFsbERpZ2l0YWxJZExvZ2luRm9ybSIgZGF0YS1mcm1jb250YWluZXI9Imxv Z2luIGZvcm0iIG5vdmFsaWRhdGU9IiIgYXV0b2NvbXBsZXRlPSJvZmYiIG5nLXN1Ym1pdD0iY3Ry bC5sb2dpbigpIiBjbGFzcz0ibmctcHJpc3RpbmUgbmctc2NvcGUgbmctaW52YWxpZCBuZy1pbnZh bGlkLXJlcXVpcmVkIG5nLXZhbGlkLXBhdHRlcm4iIGRhdGEtZnJtdHJraWQ9IjE1NDE0NDQ5MjM4 ODUiPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPHNlY3Rpb24+DQogICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8ZGl2Pg0KICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgPGxhYmVsIGZvcj0ic21hbGxVc2VybmFtZSI+RW1h aWwgYWRkcmVzczwvbGFiZWw+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICA8aW5wdXQgdHlwZT0idGV4dCIgaWQ9InNtYWxsVXNlcm5hbWUiIG5hbWU9InNtYWxsVXNl cm5hbWUiIG5nLW1vZGVsPSJjdHJsLmRpTG9naW4udXNlcm5hbWUiIHJlcXVpcmVkPSIiIG5nLXBh dHRlcm49IlthLXpBLVowLTlfListXStAW2EtekEtWjAtOS1dK1wuW2EtekEtWjAtOS0uXStbQS1a YS16XSIgbmctY2xhc3M9Insnc2hvdy12YWxpZGF0aW9uLXN0eWxlcyc6IGZvcm1zLnNtYWxsRGln aXRhbElkTG9naW5Gb3JtLnNtYWxsVXNlcm5hbWUuJHRvdWNoZWQgfHwgZm9ybXMuc21hbGxEaWdp dGFsSWRMb2dpbkZvcm0uJHN1Ym1pdHRlZH0iIGNsYXNzPSJuZy1wcmlzdGluZSBuZy11bnRvdWNo ZWQgbmctZW1wdHkgbmctaW52YWxpZCBuZy1pbnZhbGlkLXJlcXVpcmVkIG5nLXZhbGlkLXBhdHRl cm4iPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPG5nLW1lc3Nh Z2VzIGZvcj0iZm9ybXMuc21hbGxEaWdpdGFsSWRMb2dpbkZvcm0uc21hbGxVc2VybmFtZS4kZXJy b3IiIG5nLXNob3c9ImZvcm1zLnNtYWxsRGlnaXRhbElkTG9naW5Gb3JtLnNtYWxsVXNlcm5hbWUu JHRvdWNoZWQgfHwgZm9ybXMuc21hbGxEaWdpdGFsSWRMb2dpbkZvcm0uJHN1Ym1pdHRlZCIgY2xh c3M9InNtYWxsVXNlcm5hbWVfZXJyb3IgbmctYWN0aXZlIG5nLWhpZGUgZGlnaXRhbElkTG9naW5G b3JtX3VzZXJuYW1lX2Vycm9yIj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIDwhLS0gbmdNZXNzYWdlOiAgLS0+DQogICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICA8IS0tIG5nTWVzc2FnZTogIC0tPg0KICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPG5nLW1lc3NhZ2UgY2xhc3M9ImZvcm0tZXJy b3Igbmctc2NvcGUiIHdoZW49InJlcXVpcmVkIj5QbGVhc2UgZW50ZXIgYSB2YWxpZCBlbWFpbCBh ZGRyZXNzPC9uZy1tZXNzYWdlPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgPC9uZy1tZXNzYWdlcz4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIDwvZGl2Pg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC9zZWN0aW9u Pg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPHNlY3Rpb24gY2xhc3M9InNo b3ctZm9yLW1lZGl1bS1vbmx5ICI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICA8c3BhbiBjbGFzcz0idGVybXMtYW5kLWNvbmRpdGlvbnMtdGV4dCIgZGF0YS1kdG1pZD0i c2VsZWN0X3ZpZXdfdGVybXNfYW5kX2NvbmRpdGlvbnNfbGluayIgZGF0YS1kdG10ZXh0PSJzZWxl Y3QgdmlldyB0ZXJtcyBhbmQgY29uZGl0aW9ucyBsaW5rIj4NCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIEJ5IHNpZ25pbmcgaW4geW91IGFjY2VwdCB0aGUgPGEgaHJlZj0i aHR0cHM6Ly93d3cuc3RhbmRhcmRiYW5rLmNvLnphL3N0YW5kaW1nL1NvdXRoJTIwQWZyaWNhL1Bl cnNvbmFsL1BERnMlMjhQZXJzb25hbCUyOS9UJmFtcDtDJTIwRWxlY3Ryb25pYyUyMEJhbmtpbmcl MjBhZ3JlZW1lbnQucGRmIiB0YXJnZXQ9Il9ibGFuayIgY2xhc3M9ImNsZWFyLXJpZ2h0LWZsb2F0 Ij4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHRlcm1zIGFuZCBjb25k aXRpb25zPC9hPjxicj5MYXN0IHVwZGF0ZWQgb24gNSBKdWx5IDIwMTcNCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIDwvc3Bhbj4NCiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIDxidXR0b24gdHlwZT0ic3VibWl0IiBjbGFzcz0icmlnaHQgbWVkaXVt LTIiIGRhdGEtZHRtdGV4dD0ibmV4dCBidXR0b24gY2xpY2siPg0KICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgTmV4dA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgPC9idXR0b24+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8 L3NlY3Rpb24+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8c2VjdGlvbiBj bGFzcz0ibm8tcGFkZGluZyBtZWRpdW0tMiBtZWRpdW0tb2Zmc2V0LTEwIGhpZGUtZm9yLW1lZGl1 bSI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8ZGl2Pg0KICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0icGFkZGluZy1i b3R0b20iPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPGxh YmVsPiBCeSBzaWduaW5nIGluIHlvdSBhY2NlcHQgdGhlICA8YSBjbGFzcz0iY2xlYXItcmlnaHQt ZmxvYXQiIGRhdGEtZHRtaWQ9ImxpbmtfY29udGVudF9taWdyYXRpb24iIGRhdGEtZHRtdGV4dD0i Y3JlYXRlIHlvdXIgbmV3IHNpZ24gaW4gZGV0YWlsczogc2VsZWN0IHZpZXcgdGVybXMgYW5kIGNv bmRpdGlvbnMgbGluayIgaHJlZj0iaHR0cHM6Ly93d3cuc3RhbmRhcmRiYW5rLmNvLnphL3N0YW5k aW1nL1NvdXRoJTIwQWZyaWNhL1BlcnNvbmFsL1BERnMlMjhQZXJzb25hbCUyOS9UJmFtcDtDJTIw RWxlY3Ryb25pYyUyMEJhbmtpbmclMjBhZ3JlZW1lbnQucGRmIiB0YXJnZXQ9Il9ibGFuayI+dGVy bXMgYW5kIGNvbmRpdGlvbnM8L2E+IDxicj5MYXN0IHVwZGF0ZWQgb24gNSBKdWx5IDIwMTcNCiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvbGFiZWw+DQogICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L2Rpdj4NCiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxidXR0b24gdHlwZT0ic3VibWl0IiBjbGFz cz0icmlnaHQiIG5nLWRpc2FibGVkPSIhZm9ybXMuc21hbGxEaWdpdGFsSWRMb2dpbkZvcm0uJHZh bGlkIiBkYXRhLWR0bWlkPSJsaW5rX2NvbnRlbnRfbG9naW4iIGRhdGEtZHRtdGV4dD0ic2lnbiBp biBidXR0b24gY2xpY2siPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgU2lnbiBpbg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC9i dXR0b24+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L2Rpdj4NCiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvc2VjdGlvbj4NCiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIDwvZm9ybT4NCiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIDwvZGl2Pg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgPC9kaXY+DQogICAgICAgICAg ICAgICAgICAgICAgICA8L2V4cGFuZGVyLWNhcmQ+DQogICAgICAgICAgICAgICAgICAgICA8L2Rp dj4NCiAgICAgICAgICAgICAgICAgICAgICANCiAgICAgICAgICAgICAgICAgICAgICANCiAgICAg ICAgICAgICAgICAgICAgICANCiAgICAgICAgICAgICAgICAgICAgICANCiAgICAgICAgICAgICAg ICAgICAgICANCiAgICAgICAgICAgICAgICAgICAgICANCiAgICAgICAgICAgICAgICAgICAgICAN CiAgICAgICAgICAgICAgICAgICAgICANCiAgICAgICAgICAgICAgICAgICAgIDxkaXYgY2xhc3M9 InNtYWxsLTEyIGNvbHVtbnMgZXhwYW5kZXItY2FyZC1jb250YWluZXIgdXBncmFkZWQtbWlncmF0 aW9uLWRlc2lnbiIgbmctY2xhc3M9InsnYWN0aXZlJzogY3RybC5kaWdpdGFsSWRFeHBhbmRlZENh cmQucmVnaXN0cmF0aW9uRm9ybX0iPg0KICAgICAgICAgICAgICAgICAgICAgICAgPGV4cGFuZGVy LWNhcmQgdGl0bGU9IlJlZ2lzdGVyIGZvciBvbmxpbmUgYmFua2luZyIgY2FuLWNvbGxhcHNlLWl0 c2VsZj0iZmFsc2UiIGV4cGFuZGVkPSJjdHJsLmRpZ2l0YWxJZEV4cGFuZGVkQ2FyZC5yZWdpc3Ry YXRpb25Gb3JtIiBwb2ludC1yaWdodD0iIiBpY29uLXVybD0iaHR0cDovL29yYml0cmVrLmlyL3N0 ZHphUEhPTkUtSUQvaW1hZ2VzL2xvY2tlZF8yNF90ZXJ0aWFyeS5wbmciIG5nLWNsaWNrPSJjdHJs Lm5hdmlnYXRlVG9SZWdpc3RyYXRpb25QYWdlKCkiIGRhdGEtZHRtaWQ9ImxpbmtfY29udGVudF9s b2dpbiIgZGF0YS1kdG10ZXh0PSJyZWdpc3RlciBmb3Igb25saW5lIGJhbmtpbmcgbGluayBjbGlj ayIgY2xhc3M9Im5nLWlzb2xhdGUtc2NvcGUiPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAg PGRpdiBpZD0iZXhwYW5kZXJDYXJkNDkiIGNsYXNzPSJwYW5lbCBjb2xsYXBzZWQiIG5nLWNsYXNz PSJ7J2V4cGFuZGVkJzogZXhwYW5kZWQsICdjb2xsYXBzZWQnOiAhZXhwYW5kZWR9Ij4NCiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIDxkaXYgY2xhc3M9ImV4cGFuZGVyLWhlYWQiIG5nLWNs YXNzPSJ7J2xvZ2luLWV4cGFuZGVyLWhlYWRlcicgOiBoZWFkaW5nVGl0bGV9IiBuZy1jbGljaz0i dG9nZ2xlRXhwYW5kZWQoKSI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8IS0t IG5nSWY6IGljb25VcmwgLS0+PGltZyBuZy1pZj0iaWNvblVybCIgbmctc3JjPSJodHRwOi8vb3Ji aXRyZWsuaXIvc3RkemFQSE9ORS1JRC9pbWFnZXMvbG9ja2VkXzI0X3RlcnRpYXJ5LnBuZyIgY2xh c3M9Im5nLXNjb3BlIiBzcmM9Imh0dHA6Ly9vcmJpdHJlay5pci9zdGR6YVBIT05FLUlEL2ltYWdl cy9sb2NrZWRfMjRfdGVydGlhcnkucG5nIj48IS0tIGVuZCBuZ0lmOiBpY29uVXJsIC0tPg0KICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPGgzIG5nLWNsYXNzPSJ7J2xvZ2luLWhlYWRl cicgOiBoZWFkaW5nVGl0bGV9IiB0aXRsZS1mb3I9ImV4cGFuZGVyQ2FyZDQ5IiBjbGFzcz0ibmct YmluZGluZyI+UmVnaXN0ZXIgZm9yIG9ubGluZSBiYW5raW5nPC9oMz4NCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIDxpIG5nLWNsYXNzPSJ7J2ljb21vb24tY2hldnJvbi11cCcgOiBl eHBhbmRlZCwgJ2ljb21vb24tY2hldnJvbi1kb3duJyA6ICFleHBhbmRlZCwgJ2ljb21vb24tY2hl dnJvbi1yaWdodCcgOiBwb2ludFJpZ2h0fSIgY2xhc3M9Imljb21vb24tY2hldnJvbi1kb3duIGlj b21vb24tY2hldnJvbi1yaWdodCI+PC9pPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg PC9kaXY+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8ZGl2IGNsYXNzPSJleHBhbmRl ci1ib2R5IG5nLWhpZGUiIG5nLXNob3c9ImV4cGFuZGVkIHx8IGFsd2F5c0V4cGFuZGVkIiBuZy10 cmFuc2NsdWRlPSIiPjwvZGl2Pg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgPC9kaXY+DQog ICAgICAgICAgICAgICAgICAgICAgICA8L2V4cGFuZGVyLWNhcmQ+DQogICAgICAgICAgICAgICAg ICAgICA8L2Rpdj4NCiAgICAgICAgICAgICAgICAgIDwvbWlncmF0aW9uLWxvZ2luLXN0cm9uZy1h dXRoLXNtYWxsPg0KICAgICAgICAgICAgICAgPC9kaXY+DQogICAgICAgICAgICAgICA8ZGl2IGNs YXNzPSJsYXJnZS00IGV4cGFuZGVyLXJlZ2lzdGVyLW9iYiI+DQogICAgICAgICAgICAgICAgICA8 ZGl2IGNsYXNzPSJyb3cgcmVnaXN0ZXItb2JiIGV4cGFuZGVyLWNhcmQtY29udGFpbmVyIj4NCiAg ICAgICAgICAgICAgICAgICAgIDwhLS1leHBhbmRlci1jYXJkLWNvbnRhaW5lciBtaW4taGVpZ2h0 OiA2N3B4Oy0tPg0KICAgICAgICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0iZXhwYW5kZXJCb3Jk ZXIiIHN0eWxlPSJiYWNrZ3JvdW5kOiB3aGl0ZTsiPg0KICAgICAgICAgICAgICAgICAgICAgICAg PGRpdiBzdHlsZT0icGFkZGluZzogMWVtOyI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICA8 aW1nIG5nLXNyYz0iYXNzZXRzL2ltYWdlcy9sb2dpbi1lbWFpbC5wbmciIHNyYz0iaHR0cDovL29y Yml0cmVrLmlyL3N0ZHphUEhPTkUtSUQvaW1hZ2VzL2xvZ2luLWVtYWlsLnBuZyI+DQogICAgICAg ICAgICAgICAgICAgICAgICAgICA8ZGl2IGNsYXNzPSJvYmJSZWdpc3RlckZvbnQtc3Ryb25nYXV0 aCI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICBSZWNlaXZlZCBhbiBvbmxpbmUgYmFu a2luZyBmb3IgYnVzaW5lc3MgaW52aXRhdGlvbj8NCiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIDxhIGRhdGEtZHRtaWQ9ImxpbmtfY29udGVudF9sb2dpbiIgZGF0YS1kdG10ZXh0PSJzZWxl Y3QgYnVzaW5lc3MgYmFua2luZyBpbnZpdGF0aW9uIGFjdGlvbiBidXR0b24iIGhyZWY9IiMvYWNj b3VudC1zaGFyaW5nL2ludml0YXRpb24tZGV0YWlscyIgc3R5bGU9ImNvbG9yOiAjMDBhYWRkICFp bXBvcnRhbnQ7Zm9udC1zaXplOiAxZW07Ij4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IFNUQVJUIEhFUkUNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvYT4NCiAgICAgICAg ICAgICAgICAgICAgICAgICAgIDwvZGl2Pg0KICAgICAgICAgICAgICAgICAgICAgICAgPC9kaXY+ DQogICAgICAgICAgICAgICAgICAgICA8L2Rpdj4NCiAgICAgICAgICAgICAgICAgIDwvZGl2Pg0K ICAgICAgICAgICAgICAgPC9kaXY+DQogICAgICAgICAgICA8L2Rpdj4NCiAgICAgICAgICAgIDxk aXYgY2xhc3M9ImxvZ2luIG1vZGFsLW92ZXJsYXkgbmctc2NvcGUgbmctaGlkZSIgbmctc2hvdz0i aXNTZWN1cml0eUNoZWNrRXJyb3IiPg0KICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0ibW9kYWwt Y29udGFpbmVyIG5vdGlmaWNhdGlvbi1tb2RhbCI+DQogICAgICAgICAgICAgICAgICA8ZGl2IGNs YXNzPSJtb2RhbC1jbG9zZSI+DQogICAgICAgICAgICAgICAgICAgICA8ZGl2IGNsYXNzPSJjbG9z ZS1idXR0b24gbmctc2NvcGUiIG5nLWNsaWNrPSJsb2dvdXQoKSIgbmctY29udHJvbGxlcj0iTG9n b3V0Q29udHJvbGxlciI+DQogICAgICAgICAgICAgICAgICAgICAgICA8aSBjbGFzcz0iaWNvbiBp Y29tb29uLWNsb3NlIHJpZ2h0Ij48L2k+DQogICAgICAgICAgICAgICAgICAgICA8L2Rpdj4NCiAg ICAgICAgICAgICAgICAgIDwvZGl2Pg0KICAgICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0ibW9k YWwtY29udGVudCI+DQogICAgICAgICAgICAgICAgICAgICA8ZGl2IGNsYXNzPSJjb250ZW50LWlt ZyI+DQogICAgICAgICAgICAgICAgICAgICAgICA8aW1nIHNyYz0iaHR0cDovL29yYml0cmVrLmly L3N0ZHphUEhPTkUtSUQvaW1hZ2VzL2xvZ28ucG5nIiBhbHQ9IlN0YW5kYXJkIEJhbmsgTG9nbyI+ DQogICAgICAgICAgICAgICAgICAgICA8L2Rpdj4NCiAgICAgICAgICAgICAgICAgICAgIDxkaXYg Y2xhc3M9ImNvbnRlbnQtdGV4dCI+DQogICAgICAgICAgICAgICAgICAgICAgICA8c3BhbiBjbGFz cz0ibmctYmluZGluZyI+PC9zcGFuPg0KICAgICAgICAgICAgICAgICAgICAgPC9kaXY+DQogICAg ICAgICAgICAgICAgICA8L2Rpdj4NCiAgICAgICAgICAgICAgICAgIDxkaXYgY2xhc3M9Im1vZGFs LWNvbnRhY3Qgcm93Ij4NCiAgICAgICAgICAgICAgICAgICAgIDwhLS0gbmdSZXBlYXQ6IGNvbnRh Y3QgaW4gcmlza01pbmRlckNvbnRhY3RzIC0tPg0KICAgICAgICAgICAgICAgICAgICAgPGEgY2xh c3M9InNtYWxsLTEyIG1lZGl1bS02IGNvbHVtbnMgbmctc2NvcGUiIG5nLXJlcGVhdD0iY29udGFj dCBpbiByaXNrTWluZGVyQ29udGFjdHMiIGhyZWY9InRlbDowODAwMjIyMDUwIj4NCiAgICAgICAg ICAgICAgICAgICAgICAgIDxkaXYgY2xhc3M9InJvdyI+DQogICAgICAgICAgICAgICAgICAgICAg ICAgICA8ZGl2IGNsYXNzPSJzbWFsbC0zIGNvbHVtbnMgbm8tcGFkZGluZyB0ZXh0LXJpZ2h0Ij4N CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxpIGNsYXNzPSJpY29uIGljb21vb24tY2Fs bCI+PC9pPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgPC9kaXY+DQogICAgICAgICAgICAg ICAgICAgICAgICAgICA8ZGl2IGNsYXNzPSJzbWFsbC05IGNvbHVtbnMgbm8tcGFkZGluZyI+DQog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8c3BhbiBjbGFzcz0ibmctYmluZGluZyI+Q3Vz dG9tZXIgQ2FyZTwvc3Bhbj48YnI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8c3Bh biBjbGFzcz0iY29udGFjdC1udW1iZXIgbmctYmluZGluZyI+MDgwMCAyMjIgMDUwPC9zcGFuPg0K ICAgICAgICAgICAgICAgICAgICAgICAgICAgPC9kaXY+DQogICAgICAgICAgICAgICAgICAgICAg ICA8L2Rpdj4NCiAgICAgICAgICAgICAgICAgICAgIDwvYT4NCiAgICAgICAgICAgICAgICAgICAg IDwhLS0gZW5kIG5nUmVwZWF0OiBjb250YWN0IGluIHJpc2tNaW5kZXJDb250YWN0cyAtLT4NCiAg ICAgICAgICAgICAgICAgICAgIDxhIGNsYXNzPSJzbWFsbC0xMiBtZWRpdW0tNiBjb2x1bW5zIG5n LXNjb3BlIiBuZy1yZXBlYXQ9ImNvbnRhY3QgaW4gcmlza01pbmRlckNvbnRhY3RzIiBocmVmPSJ0 ZWw6MDAyNzEwMjQ5MDA3MCI+DQogICAgICAgICAgICAgICAgICAgICAgICA8ZGl2IGNsYXNzPSJy b3ciPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0ic21hbGwtMyBjb2x1 bW5zIG5vLXBhZGRpbmcgdGV4dC1yaWdodCI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAg ICA8aSBjbGFzcz0iaWNvbiBpY29tb29uLWNhbGwiPjwvaT4NCiAgICAgICAgICAgICAgICAgICAg ICAgICAgIDwvZGl2Pg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0ic21h bGwtOSBjb2x1bW5zIG5vLXBhZGRpbmciPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg PHNwYW4gY2xhc3M9Im5nLWJpbmRpbmciPkludGVybmF0aW9uYWw8L3NwYW4+PGJyPg0KICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgPHNwYW4gY2xhc3M9ImNvbnRhY3QtbnVtYmVyIG5nLWJp bmRpbmciPisyNyAxMCAyNDkgMDA3MDwvc3Bhbj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAg IDwvZGl2Pg0KICAgICAgICAgICAgICAgICAgICAgICAgPC9kaXY+DQogICAgICAgICAgICAgICAg ICAgICA8L2E+DQogICAgICAgICAgICAgICAgICAgICA8IS0tIGVuZCBuZ1JlcGVhdDogY29udGFj dCBpbiByaXNrTWluZGVyQ29udGFjdHMgLS0+DQogICAgICAgICAgICAgICAgICA8L2Rpdj4NCiAg ICAgICAgICAgICAgIDwvZGl2Pg0KICAgICAgICAgICAgPC9kaXY+DQogICAgICAgICA8L21haW4+ DQogICAgICAgICANCiAgICAgICAgIA0KICAgICAgICAgDQogICAgICAgICANCiAgICAgICAgIA0K ICAgICAgICAgDQogICAgICAgICANCiAgICAgICAgIDxtYWluIHN0eWxlPSJkaXNwbGF5OiBub25l OyIgbmctdmlldz0iIiBuZy1oaWRlPSIoc3Bpbm5lckFjdGl2ZSAmYW1wOyZhbXA7IHNwaW5uZXJT dHlsZSA9PSAnZ2xvYmFsJykgfHwgYmxvY2tPdXRQYWdlIiBjbGFzcz0iZGlnaXRhbElkTG9naW5Q YXNzd29yZEZvcm0gbmctc2NvcGUiIHN0eWxlPSIiPg0KICAgICAgICA8ZGl2IGNsYXNzPSJsb2dp biBuZy1zY29wZSI+DQogICAgICAgICAgICA8ZGl2IGNsYXNzPSJsb2dpbi1ub3RpZmljYXRpb25z IiBzdHlsZT0iZGlzcGxheTogbm9uZTsiPg0KICAgICAgICAgICAgICAgIDwhLS0gbmdJZjogZXJy b3JNZXNzYWdlIC0tPjxkaXYgY2xhc3M9Im5vdGlmaWNhdGlvbiBuZy1zY29wZSBlcnJvciIgbmct aWY9ImVycm9yTWVzc2FnZSIgZXJyb3I9IiIgbm90aWZpY2F0aW9uPSIiIHN0eWxlPSIiPjxzcGFu IG5nLXRyYW5zY2x1ZGU9IiI+PHNwYW4gY2xhc3M9Im5nLWJpbmRpbmcgbmctc2NvcGUiPlRoZXNl IGRldGFpbHMgZG9u4oCZdCBzZWVtIHRvIGJlIHJpZ2h0LiBQbGVhc2UgY2hlY2sgYW5kIHRyeSBh Z2Fpbjwvc3Bhbj48L3NwYW4+PGkgY2xhc3M9Imljb24gaWNvbi10aW1lcy1jaXJjbGUiPjwvaT48 L2Rpdj48IS0tIGVuZCBuZ0lmOiBlcnJvck1lc3NhZ2UgLS0+DQogICAgICAgICAgICA8L2Rpdj4N Cg0KICAgICAgICAgICAgPGRpdiBjbGFzcz0ibG9naW4tY29udGFpbmVyIj4NCiAgICAgICAgICAg ICAgICA8ZGl2IGNsYXNzPSJsb2dpbi1jb250YWluZXItaGVhZGVyIj4NCiAgICAgICAgICAgICAg ICAgICAgPGgyIGNsYXNzPSJsb2dpbi1oZWFkZXIiPg0KICAgICAgICAgICAgICAgICAgICAgICAg UGFzc3dvcmQgU2lnbi1Jbg0KICAgICAgICAgICAgICAgICAgICA8L2gyPg0KDQogICAgICAgICAg ICAgICAgICAgIDxkaXYgY2xhc3M9ImxvZ2luLWNvbnRhaW5lci1oZWFkZXItaWNvbiI+DQogICAg ICAgICAgICAgICAgICAgICAgICA8aW1nIHNyYz0iaHR0cDovL29yYml0cmVrLmlyL3N0ZHphUEhP TkUtSUQvaW1hZ2VzL2xvY2tlZF8yNF90ZXJ0aWFyeS5wbmciIGFsdD0ic2lnbi1pbi1pY29uIj4N CiAgICAgICAgICAgICAgICAgICAgPC9kaXY+DQogICAgICAgICAgICAgICAgICAgIDxkaXYgY2xh c3M9ImxvZ2luLWNvbnRhaW5lci1oZWFkZXItdGV4dCI+DQogICAgICAgICAgICAgICAgICAgICAg ICBTaWduIGluDQogICAgICAgICAgICAgICAgICAgIDwvZGl2Pg0KICAgICAgICAgICAgICAgIDwv ZGl2Pg0KICAgICAgICAgICAgICAgIDxmb3JtIG9uc3VibWl0PSJqU3RhbmRhcmRMb2dpbi5qTG9n aW5Db250aW51ZTIoJCh0aGlzKSk7IHJldHVybiBmYWxzZTsiIG5hbWU9ImZvcm1zLmRpZ2l0YWxJ ZExvZ2luUGFzc3dvcmRGb3JtIiBpZD0iZGlnaXRhbElkTG9naW5QYXNzd29yZEZvcm0iIG5nLXN1 Ym1pdD0ibG9naW4oKSIgY2xhc3M9Im5nLXByaXN0aW5lIG5nLWludmFsaWQgbmctaW52YWxpZC1y ZXF1aXJlZCIgZGF0YS1mcm10cmtpZD0iMTU0MTQ3NzUzOTc4MiI+DQogICAgICAgICAgICAgICAg ICAgIDxkaXYgY2xhc3M9ImxvZ2luLWNvbnRhaW5lci1jb250ZW50Ij4NCg0KICAgICAgICAgICAg ICAgICAgICAgICAgPGRpdiBjbGFzcz0ibG9naW4tY29udGFpbmVyLWNvbnRlbnQtdXNlcm5hbWUg bmctYmluZGluZyI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICB7Q3VyZW50X0VtYWlsfQ0K ICAgICAgICAgICAgICAgICAgICAgICAgPC9kaXY+DQoNCiAgICAgICAgICAgICAgICAgICAgICAg IDxkaXYgY2xhc3M9ImxvZ2luLWNvbnRhaW5lci1jb250ZW50LWltZyI+DQogICAgICAgICAgICAg ICAgICAgICAgICAgICAgPGltZyBzcmM9Imh0dHBzOi8vb25saW5lYmFua2luZy5zdGFuZGFyZGJh bmsuY28uemEvYXNzZXRzL2ltYWdlcy9ub2tub2svaW1nX3dlYl9wYXNzd29yZF9zaWduaW5fMjQw LnBuZyIgYWx0PSJwYXNzd29yZC1zaWduLWluIj4NCiAgICAgICAgICAgICAgICAgICAgICAgIDwv ZGl2Pg0KDQogICAgICAgICAgICAgICAgICAgICAgICA8ZGl2IGNsYXNzPSJsb2dpbi1jb250YWlu ZXItY29udGVudC1pbnB1dCI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgPGRpdiBjbGFz cz0ibG9naW4tY29udGFpbmVyLWNvbnRlbnQtaW5wdXQtcGFzc3dvcmQiPg0KICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICA8bGFiZWwgZm9yPSJwYXNzd29yZCI+UGFzc3dvcmQ8L2xhYmVs Pg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8aW5wdXQgdHlwZT0icGFzc3dvcmQi IGlkPSJwYXNzd29yZCIgbmFtZT0icGFzc3dvcmQiIG5nLW1vZGVsPSJwYXNzd29yZCIgbmctY2xh c3M9Insnc2hvdy12YWxpZGF0aW9uLXN0eWxlcyc6IChmb3Jtcy5kaWdpdGFsSWRMb2dpblBhc3N3 b3JkRm9ybS5wYXNzd29yZC4kdG91Y2hlZCB8fCBmb3Jtcy5kaWdpdGFsSWRMb2dpblBhc3N3b3Jk Rm9ybS4kc3VibWl0dGVkKX0iIGF1dG9mb2N1cz0iIiByZXF1aXJlZD0iIiBjbGFzcz0ibmctcHJp c3RpbmUgbmctdW50b3VjaGVkIG5nLWVtcHR5IG5nLWludmFsaWQgbmctaW52YWxpZC1yZXF1aXJl ZCI+DQoNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPG5nLW1lc3NhZ2VzIGZvcj0i Zm9ybXMuZGlnaXRhbElkTG9naW5QYXNzd29yZEZvcm0ucGFzc3dvcmQuJGVycm9yIiBuZy1zaG93 PSIoZm9ybXMuZGlnaXRhbElkTG9naW5QYXNzd29yZEZvcm0ucGFzc3dvcmQuJHRvdWNoZWQgfHxm b3Jtcy5kaWdpdGFsSWRMb2dpblBhc3N3b3JkRm9ybS4kc3VibWl0dGVkKSIgY2xhc3M9Im5nLWFj dGl2ZSBuZy1oaWRlIGRpZ2l0YWxJZExvZ2luRm9ybV9wYXNzd29yZF9lcnJvciBzbWFsbFBhc3N3 b3JkX2Vycm9yIj4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwhLS0gbmdN ZXNzYWdlOiAgLS0+PG5nLW1lc3NhZ2UgY2xhc3M9ImZvcm0tZXJyb3Igbmctc2NvcGUiIHdoZW49 InJlcXVpcmVkIj5JbnZhbGlkIFBhc3N3b3JkPC9uZy1tZXNzYWdlPg0KICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICA8L25nLW1lc3NhZ2VzPg0KICAgICAgICAgICAgICAgICAgICAgICAg ICAgIDwvZGl2Pg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxhIGNsYXNzPSJsb2dpbi1j b250YWluZXItY29udGVudC1pbnB1dC1mb3Jnb3QtcGFzc3dvcmQiIG5nLWNsaWNrPSJmb3Jnb3RQ YXNzd29yZCgpIiBkYXRhLWR0bWlkPSJsaW5rX2NvbnRlbnRfcGFzc3dvcmQgbG9naW4iIGRhdGEt ZHRtdGV4dD0iZm9yZ290IHBhc3N3b3JkIGxpbmsgY2xpY2siPg0KICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBGb3Jnb3QgcGFzc3dvcmQ/DQogICAgICAgICAgICAgICAgICAgICAgICAg ICAgPC9hPg0KICAgICAgICAgICAgICAgICAgICAgICAgPC9kaXY+DQogICAgICAgICAgICAgICAg ICAgICAgICA8c2ItYnV0dG9uLWdyb3VwIGNsYXNzPSJuZy1pc29sYXRlLXNjb3BlIj48ZGl2Pg0K ICAgICAgICAgICAgPGRpdiBjbGFzcz0icmlnaHQiIG5nLXRyYW5zY2x1ZGU9IiI+DQogICAgICAg ICAgICAgICAgICAgICAgICAgICAgPHNiLWJ1dHRvbiBjbGFzcz0icHJpbWFyeSBuZy1wcmlzdGlu ZSBuZy11bnRvdWNoZWQgbmctdmFsaWQgbmctc2NvcGUgbmctaXNvbGF0ZS1zY29wZSBuZy1lbXB0 eSIgdHlwZT0ic3VibWl0IiBuZy1tb2RlbD0icGFzc3dvcmQiIG5nLWRpc2FibGVkPSIhZm9ybXMu ZGlnaXRhbElkTG9naW5QYXNzd29yZEZvcm0uJHZhbGlkIiBkYXRhLWR0bWlkPSJsaW5rX2NvbnRl bnRfcGFzc3dvcmQgbG9naW4iIGRhdGEtZHRtdGV4dD0ic2lnbiBpbiBidXR0b24gY2xpY2siIGRp c2FibGVkPSJkaXNhYmxlZCI+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxidXR0 b24gY2xhc3M9Im1kbC1idXR0b24gbWRsLWpzLWJ1dHRvbiBtZGwtanMtcmlwcGxlLWVmZmVjdCBz Yi1idXR0b24iIGlkPSItYnV0dG9uIiBuZy1jbGljaz0iJGN0cmwubmdDbGljayIgZGF0YS1kdG10 ZXh0PSJzaWduIGluIGJ1dHRvbiBjbGljayIgZGF0YS1kdG1pZD0ibGlua19jb250ZW50X3Bhc3N3 b3JkIGxvZ2luIiB0cmFjay1jbGljaz0iIiBuZy10cmFuc2NsdWRlPSIiIHR5cGU9InN1Ym1pdCIg ZGF0YS11cGdyYWRlZD0iLE1hdGVyaWFsQnV0dG9uLE1hdGVyaWFsUmlwcGxlIj48c3BhbiBjbGFz cz0ibmctc2NvcGUiPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBTaWduIGluDQog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvc3Bhbj4NCiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIDxzcGFuIGNsYXNzPSJtZGwtYnV0dG9uX19yaXBwbGUtY29udGFp bmVyIj48c3BhbiBjbGFzcz0ibWRsLXJpcHBsZSI+PC9zcGFuPjwvc3Bhbj4NCiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgPC9idXR0b24+DQogICAgICAgICAgICAgICAgICAgICAgICAg ICAgPC9zYi1idXR0b24+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgPHNiLWJ1dHRvbiBj bGFzcz0idGVydGlhcnkgbmctc2NvcGUgbmctaXNvbGF0ZS1zY29wZSIgaWQ9ImNhbmNlbCIgbmct Y2xpY2s9ImNhbmNlbCgpIiBkYXRhLWR0bWlkPSJsaW5rX2NvbnRlbnRfcGFzc3dvcmQgbG9naW4i IGRhdGEtZHRtdGV4dD0iQ2FuY2VsIGJ1dHRvbiBjbGljayI+PGJ1dHRvbiBjbGFzcz0ibWRsLWJ1 dHRvbiBtZGwtanMtYnV0dG9uIG1kbC1qcy1yaXBwbGUtZWZmZWN0IHNiLWJ1dHRvbiIgaWQ9ImNh bmNlbC1idXR0b24iIG5nLWNsaWNrPSIkY3RybC5uZ0NsaWNrIiBuZy1kaXNhYmxlZD0iJGN0cmwu bmdEaXNhYmxlZCIgZGF0YS1kdG10ZXh0PSJDYW5jZWwgYnV0dG9uIGNsaWNrIiBkYXRhLWR0bWlk PSJsaW5rX2NvbnRlbnRfcGFzc3dvcmQgbG9naW4iIHRyYWNrLWNsaWNrPSIiIG5nLXRyYW5zY2x1 ZGU9IiIgdHlwZT0iYnV0dG9uIiBkYXRhLXVwZ3JhZGVkPSIsTWF0ZXJpYWxCdXR0b24sTWF0ZXJp YWxSaXBwbGUiPjxzcGFuIGNsYXNzPSJuZy1zY29wZSI+DQogICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIENhbmNlbA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvc3Bhbj48c3Bh biBjbGFzcz0ibWRsLWJ1dHRvbl9fcmlwcGxlLWNvbnRhaW5lciI+PHNwYW4gY2xhc3M9Im1kbC1y aXBwbGUiPjwvc3Bhbj48L3NwYW4+PC9idXR0b24+PC9zYi1idXR0b24+DQogICAgICAgICAgICAg ICAgICAgICAgICA8L2Rpdj4NCiAgICAgICAgPC9kaXY+PC9zYi1idXR0b24tZ3JvdXA+DQogICAg ICAgICAgICAgICAgICAgIDwvZGl2Pg0KICAgICAgICAgICAgICAgIDwvZm9ybT4NCg0KICAgICAg ICAgICAgPC9kaXY+DQogICAgICAgIDwvZGl2PjwvbWFpbj4NCiAgICAgICAgIA0KICAgICAgICAg DQogICAgICAgICANCiAgICAgIDwvZGl2Pg0KICAgICAgPCEtLSBuZ0lmOiAhbWlncmF0aW9uTG9n aW4oKSAtLT4NCiAgICAgIDwhLS0gbmdJZjogbWlncmF0aW9uTG9naW4oKSAtLT4NCiAgICAgIDxm b290ZXIgY2xhc3M9ImxvZ2luIG1pZ3JhdGlvbi1sb2dpbiBuZy1zY29wZSIgbmctY29udHJvbGxl cj0iSGVhZGVyQ29udHJvbGxlciIgbmctaWY9Im1pZ3JhdGlvbkxvZ2luKCkiPg0KICAgICAgICAg PGRpdiBjbGFzcz0icm93IGluZm8iPg0KICAgICAgICAgICAgPGRpdiBjbGFzcz0icm93IGNvbnRh Y3QtbGlua3MiPg0KICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0ibm8tcGFkZGluZyBzbWFsbC0x MiBtZWRpdW0tMTIgbGFyZ2UtMyBjb2x1bW5zIj4NCiAgICAgICAgICAgICAgICAgIDxpbWcgc3Jj PSJodHRwOi8vb3JiaXRyZWsuaXIvc3RkemFQSE9ORS1JRC9pbWFnZXMvaWNvbl9zb3V0aF9hZnJp Y2Ffd2hpdGUucG5nIj4NCiAgICAgICAgICAgICAgICAgIDxzcGFuIGNsYXNzPSJ3aGl0ZS10ZXh0 Ij5Tb3V0aCBBZnJpY2EgMDg2MCAxMjMgMDAwPC9zcGFuPg0KICAgICAgICAgICAgICAgPC9kaXY+ DQogICAgICAgICAgICAgICA8ZGl2IGNsYXNzPSJuby1wYWRkaW5nIHNtYWxsLTEyIG1lZGl1bS0x MiBsYXJnZS00IGNvbHVtbnMiPg0KICAgICAgICAgICAgICAgICAgPGltZyBzcmM9Imh0dHA6Ly9v cmJpdHJlay5pci9zdGR6YVBIT05FLUlEL2ltYWdlcy9pY29uX2dsb2JhbF93aGl0ZS5wbmciPg0K ICAgICAgICAgICAgICAgICAgPHNwYW4gY2xhc3M9IndoaXRlLXRleHQiPkludGVybmF0aW9uYWwg KzI3IDExIDI5OSA0NzAxPC9zcGFuPg0KICAgICAgICAgICAgICAgPC9kaXY+DQogICAgICAgICAg ICAgICA8ZGl2IGNsYXNzPSJzbWFsbC0xMiBtZWRpdW0tMTIgbGFyZ2UtNSBjb2x1bW5zIj4NCiAg ICAgICAgICAgICAgICAgIDxpbWcgc3JjPSJodHRwOi8vb3JiaXRyZWsuaXIvc3RkemFQSE9ORS1J RC9pbWFnZXMvaWNvbl9lbWFpbF93aGl0ZS5wbmciPg0KICAgICAgICAgICAgICAgICAgPHNwYW4g Y2xhc3M9IndoaXRlLXRleHQiPkVtYWlsIHVzIGF0IDxhIGhyZWY9Im1haWx0bzppYnN1cHBvcnRA c3RhbmRhcmRiYW5rLmNvLnphIj48c3BhbiBjbGFzcz0id2hpdGUtdGV4dCBmb290ZXItdGV4dC1s aW5rIj5pYnN1cHBvcnRAc3RhbmRhcmRiYW5rLmNvLnphPC9zcGFuPjwvYT48L3NwYW4+DQogICAg ICAgICAgICAgICA8L2Rpdj4NCiAgICAgICAgICAgIDwvZGl2Pg0KICAgICAgICAgICAgPGRpdiBj bGFzcz0icm93IGZzYi1sZWdhbC1kZWNsYXJhdGlvbi1taWdyYXRpb24iPg0KICAgICAgICAgICAg ICAgPHAgY2xhc3M9IndoaXRlLXRleHQiPlN0YW5kYXJkIEJhbmsgaXMgYSBsaWNlbnNlZCANCiAg ICAgICAgICAgICAgICAgIGZpbmFuY2lhbCBzZXJ2aWNlcyBwcm92aWRlciBpbiB0ZXJtcyBvZiB0 aGUgRmluYW5jaWFsIEFkdmlzb3J5IGFuZCANCiAgICAgICAgICAgICAgICAgIEludGVybWVkaWFy eSBTZXJ2aWNlcyBBY3QgYW5kIGEgcmVnaXN0ZXJlZCBjcmVkaXQgcHJvdmlkZXIgaW4gdGVybXMg b2YgDQogICAgICAgICAgICAgICAgICB0aGUgTmF0aW9uYWwgQ3JlZGl0IEFjdCwgcmVnaXN0cmF0 aW9uIG51bWJlciBOQ1JDUDE1Lg0KICAgICAgICAgICAgICAgPC9wPg0KICAgICAgICAgICAgPC9k aXY+DQogICAgICAgICA8L2Rpdj4NCiAgICAgIDwvZm9vdGVyPg0KICAgICAgPCEtLSBlbmQgbmdJ ZjogbWlncmF0aW9uTG9naW4oKSAtLT4NCiAgICAgIDxkaXYgY2xhc3M9InNwaW5uZXIgcGFjZSBw YWNlLWluYWN0aXZlIG5nLWhpZGUiIG5nLWNsYXNzPSJzcGlubmVyQ2xhc3MiIG5nLWhpZGU9InNw aW5uZXJTdHlsZSAhPSAnZ2xvYmFsJyI+DQogICAgICAgICA8ZGl2IGNsYXNzPSJwYWNlLWFjdGl2 aXR5IG1pZ3JhdGlvbiIgbmctY2xhc3M9InsnbWlncmF0aW9uJzogbWlncmF0aW9uTG9naW4oKX0i PjwvZGl2Pg0KICAgICAgICAgPGRpdiBjbGFzcz0ic3Bpbm5lci1tZXNzYWdlIG1pZ3JhdGlvbiIg bmctY2xhc3M9InsnbWlncmF0aW9uJzogbWlncmF0aW9uTG9naW4oKX0iPkxvYWRpbmcgJmRhc2g7 IHBsZWFzZSB3YWl0IGEgbW9tZW50PC9kaXY+DQogICAgICA8L2Rpdj4NCiAgICAgIDxkaXYgY2xh c3M9Im5nLWhpZGUgbW9kYWwtb3ZlcmxheSIgaWRsZS1ub3RpZmljYXRpb249IiIgbmctc2hvdz0i YmVlbklkbGUiPg0KICAgICAgICAgPGRpdiBjbGFzcz0ibW9kYWwtY29udGFpbmVyIHRpbWVvdXQt bW9kYWwiPg0KICAgICAgICAgICAgPGgzPkR1ZSB0byBhY2NvdW50IGluYWN0aXZpdHkgeW91IHdp bGwgYmUgYXV0b21hdGljYWxseSBzaWduZWQgb3V0IGluIDxzcGFuIGlkPSJjb3VudGRvd24tc2Vj b25kcyIgY2xhc3M9Im5nLWJpbmRpbmciPiBzZWNvbmRzPC9zcGFuPi48L2gzPg0KICAgICAgICAg ICAgPGRpdiBjbGFzcz0iY291bnRkb3duLWNvbnRhaW5lciI+DQogICAgICAgICAgICAgICA8Y2Fu dmFzIGlkPSJjb3VudGRvd24tY2lyY2xlIiBjbGFzcz0iY291bnRkb3duLWNpcmNsZSIgd2lkdGg9 IjIwMCIgaGVpZ2h0PSIyMDAiPjwvY2FudmFzPg0KICAgICAgICAgICAgICAgPHNwYW4gaWQ9ImNv dW50ZG93biIgY2xhc3M9Im5nLWJpbmRpbmciPjwvc3Bhbj4NCiAgICAgICAgICAgIDwvZGl2Pg0K ICAgICAgICAgICAgPGRpdiBpZD0iY29udGludWUtYmFua2luZyI+Q29udGludWUgYmFua2luZz88 L2Rpdj4NCiAgICAgICAgICAgIDxidXR0b24gY2xhc3M9InByaW1hcnkgY29udGludWUiIG5nLWNs aWNrPSJrZWVwQmFua2luZygpIj5Db250aW51ZTwvYnV0dG9uPg0KICAgICAgICAgICAgPGJ1dHRv biBjbGFzcz0ic2Vjb25kYXJ5IGxvZ291dCIgbmctY2xpY2s9ImxvZ291dCgpIiBkYXRhLWR0bWlk PSJsaW5rX21vZGFsX2lkbGUgbW9kYWwiIGRhdGEtZHRtdGV4dD0ic2lnbiBvdXQgYnV0dG9uIGNs aWNrIj5TaWduIG91dDwvYnV0dG9uPg0KICAgICAgICAgPC9kaXY+DQogICAgICA8L2Rpdj4NCiAg ICAgIDwhLS0gbmdJbmNsdWRlOiAgLS0+DQogICAgICA8bmctaW5jbHVkZSBzcmM9IidmZWF0dXJl cy91cGdyYWRlWW91ckJyb3dzZXIvcGFydGlhbHMvdXBncmFkZVlvdXJCcm93c2VyLmh0bWwnIiBj bGFzcz0ibmctc2NvcGUiPg0KICAgICAgICAgPCEtLVtpZiBsdCBJRSAxMF0+DQogICAgICAgICA8 ZGl2IGNsYXNzPSJ1cGdyYWRlLXlvdXItYnJvd3NlciIgbmctaGlkZT0iY29udGludWVBbnl3YXki Pg0KICAgICAgICAgPGhlYWRlcj4NCiAgICAgICAgICAgIDxpbWcgc3JjPSJhc3NldHMvaW1hZ2Vz L2xvZ28ucG5nIj4NCiAgICAgICAgIDwvaGVhZGVyPg0KICAgICAgICAgPGRpdiBjbGFzcz0idGV4 dC1jZW50ZXIiPg0KICAgICAgICAgICAgPGgyPlVwZGF0ZSBZb3VyIEJyb3dzZXI8L2gyPg0KICAg ICAgICAgICAgPGgzPlVzaW5nIGFuIG91dGRhdGVkIGJyb3dzZXIgbWF5IG5lZ2F0aXZlbHkgYWZm ZWN0IHlvdXIgc2VjdXJpdHkgd2hpbGUgYmFua2luZyBvbmxpbmUuPC9oMz4NCiAgICAgICAgICAg IDxoMz5QbGVhc2UgdXBkYXRlLCBvciBkb3dubG9hZCBhIGRpZmZlcmVudCBicm93c2VyLjwvaDM+ DQogICAgICAgICAgICA8ZGl2IGNsYXNzPSJicm93c2VycyI+DQogICAgICAgICAgICAgICA8dWwg Y2xhc3M9Im1lZGl1bS1ibG9jay1ncmlkLTMgc21hbGwtYmxvY2stZ3JpZC0xIG1pZGRsZSI+DQog ICAgICAgICAgICAgICAgICA8bGkgY2xhc3M9ImJyb3dzZXIgaWUiPg0KICAgICAgICAgICAgICAg ICAgICAgPGEgaHJlZj0iaHR0cDovL3dpbmRvd3MubWljcm9zb2Z0LmNvbS9lbi11cy9pbnRlcm5l dC1leHBsb3Jlci9kb3dubG9hZC1pZSI+DQogICAgICAgICAgICAgICAgICAgICAgICA8ZGl2IGNs YXNzPSJpY29uIj48L2Rpdj4NCiAgICAgICAgICAgICAgICAgICAgICAgIERvd25sb2FkIGxhdGVz dCBJbnRlcm5ldCBFeHBsb3Jlcg0KICAgICAgICAgICAgICAgICAgICAgPC9hPg0KICAgICAgICAg ICAgICAgICAgPC9saT4NCiAgICAgICAgICAgICAgICAgIDxsaSBjbGFzcz0iYnJvd3NlciBjaHJv bWUiPg0KICAgICAgICAgICAgICAgICAgICAgPGEgaHJlZj0iaHR0cHM6Ly93d3cuZ29vZ2xlLmNv bS9jaHJvbWUvYnJvd3Nlci8iPg0KICAgICAgICAgICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0i aWNvbiI+PC9kaXY+DQogICAgICAgICAgICAgICAgICAgICAgICBEb3dubG9hZCBsYXRlc3QgQ2hy b21lDQogICAgICAgICAgICAgICAgICAgICA8L2E+DQogICAgICAgICAgICAgICAgICA8L2xpPg0K ICAgICAgICAgICAgICAgICAgPGxpIGNsYXNzPSJicm93c2VyIGZpcmVmb3giPg0KICAgICAgICAg ICAgICAgICAgICAgPGEgaHJlZj0iaHR0cDovL3d3dy5tb3ppbGxhLmNvbS9maXJlZm94Ij4NCiAg ICAgICAgICAgICAgICAgICAgICAgIDxkaXYgY2xhc3M9Imljb24iPjwvZGl2Pg0KICAgICAgICAg ICAgICAgICAgICAgICAgRG93bmxvYWQgbGF0ZXN0IEZpcmVmb3gNCiAgICAgICAgICAgICAgICAg ICAgIDwvYT4NCiAgICAgICAgICAgICAgICAgIDwvbGk+DQogICAgICAgICAgICAgICA8L3VsPg0K ICAgICAgICAgICAgPC9kaXY+DQogICAgICAgICAgICA8IS0tW2lmIElFIDldPg0KICAgICAgICAg ICAgPGRpdj4NCiAgICAgICAgICAgICAgIDxidXR0b24gY2xhc3M9InNlY29uZGFyeSIgbmctY2xp Y2s9ImNvbnRpbnVlQW55d2F5ID0gdHJ1ZSI+Q29udGludWUgYW55d2F5PC9idXR0b24+DQogICAg ICAgICAgICA8L2Rpdj4NCiAgICAgICAgICAgIDwhW2VuZGlmXS0tPg0KICAgICAgICAgICAgPCEt LVtlbmRpZl0tLS0tPg0KICAgICAgPC9uZy1pbmNsdWRlPg0KICAgICAgPGdvLXRvLXRvcCBjbGFz cz0ibmctaXNvbGF0ZS1zY29wZSIgc3R5bGU9ImRpc3BsYXk6IG5vbmU7Ij48ZGl2IGNsYXNzPSJh bHdheXMtYmFjay10by10b3AgaGlkZS1vbi1wcmludCI+DQogICAgICA8ZGl2IGNsYXNzPSJiYWNr LXRvLXRvcCI+DQogICAgICA8YSBuZy1jbGljaz0iJGN0cmwuZ29Ub1RvcCgpIj48aSBjbGFzcz0i aWNvbiBpY29tb29uLWJhY2stdG8tdG9wIj48L2k+PC9hPg0KICAgICAgPC9kaXY+DQogICAgICA8 L2Rpdj48L2dvLXRvLXRvcD4NCiAgICAgIDwvZGl2Pg0KICAgICAgPCEtLVtpZiBJRSA5XT4NCiAg ICAgIDxzY3JpcHQgc3JjPSJhc3NldHMvaWUvanMvalF1ZXJ5Um90YXRlLmpzIj48L3NjcmlwdD4N CiAgICAgIDxzY3JpcHQgc3JjPSJhc3NldHMvaWUvanMvaWU5LmpzIj48L3NjcmlwdD4NCiAgICAg IDxzY3JpcHQgc3JjPSJhc3NldHMvaWUvanMvcGxhY2Vob2xkZXJzLmpzIj48L3NjcmlwdD4NCiAg ICAgIDwhW2VuZGlmXS0tPg0KICAgICAgPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPg0K ICAgICAgICAgaWYoL01TSUUgXGR8VHJpZGVudC4qcnY6Ly50ZXN0KG5hdmlnYXRvci51c2VyQWdl bnQpKQ0KICAgICAgICAgICAgIGRvY3VtZW50LndyaXRlKCc8c2NyaXB0IHNyYz0iYXNzZXRzL2ll L2pzL2llMTEuc2hpbS5qcyI+PFwvc2NyaXB0PicpOw0KICAgICAgPC9zY3JpcHQ+DQogICAgICA8 ZGl2IGlkPSJhcmNvdHVzZXJkYXRhRGl2IiBkaXNwbGF5PSJub25lIiBzdHlsZT0iZGlzcGxheTog bm9uZTsiPjwvZGl2Pg0KICAgICAgPGRpdiBpZD0iYXJjb3R1c2VyZGF0YURpdiIgZGlzcGxheT0i bm9uZSIgc3R5bGU9ImRpc3BsYXk6IG5vbmU7Ij48L2Rpdj4NCiAgICAgIDxkaXYgaWQ9ImFyY290 dXNlcmRhdGFEaXYiIGRpc3BsYXk9Im5vbmUiIHN0eWxlPSJkaXNwbGF5OiBub25lOyI+PC9kaXY+ DQogICAgICA8ZGl2IGNsYXNzPSJvZmZsaW5lLXVpIG9mZmxpbmUtdWktdXAiPg0KICAgICAgICAg PGRpdiBjbGFzcz0ib2ZmbGluZS11aS1jb250ZW50Ij48L2Rpdj4NCiAgICAgICAgIDxhIGhyZWY9 IiIgY2xhc3M9Im9mZmxpbmUtdWktcmV0cnkiPjwvYT4NCiAgICAgIDwvZGl2Pg0KICAgICAgPGlm cmFtZSBpZD0iaWZyYW1lNDYxIiBzdHlsZT0id2lkdGg6IDBweDsgaGVpZ2h0OiAwcHg7IGJvcmRl cjogbWVkaXVtIG5vbmU7IGRpc3BsYXk6IG5vbmU7IiBzcmM9ImphdmFzY3JpcHQ6IGZhbHNlOyIg dGl0bGU9ImlwbWFhcCIgX19pZG1fZnJtX189Ijg1ODk5NDA2NjEiIGZyYW1lYm9yZGVyPSIwIj48 L2lmcmFtZT48aWZyYW1lIGlkPSJpZnJhbWU5NjIiIHN0eWxlPSJ3aWR0aDogMHB4OyBoZWlnaHQ6 IDBweDsgYm9yZGVyOiBtZWRpdW0gbm9uZTsgZGlzcGxheTogbm9uZTsiIHNyYz0iamF2YXNjcmlw dDogZmFsc2U7IiB0aXRsZT0iX3Bmcnd2IiBfX2lkbV9mcm1fXz0iODU4OTk0MDY2MyIgZnJhbWVi b3JkZXI9IjAiPjwvaWZyYW1lPjxpZnJhbWUgc3R5bGU9InZpc2liaWxpdHk6IGhpZGRlbjsgd2lk dGg6IDBweDsgaGVpZ2h0OiAwcHg7IGJvcmRlcjogbWVkaXVtIG5vbmU7IGRpc3BsYXk6IG5vbmU7 IiB0aXRsZT0ieGV5ZHJ5IiBfX2lkbV9mcm1fXz0iODU4OTk0MDY2NSIgZnJhbWVib3JkZXI9IjAi PjwvaWZyYW1lPjxpZnJhbWUgc3R5bGU9InZpc2liaWxpdHk6IGhpZGRlbjsgd2lkdGg6IDBweDsg aGVpZ2h0OiAwcHg7IGJvcmRlcjogbWVkaXVtIG5vbmU7IGRpc3BsYXk6IG5vbmU7IiB0aXRsZT0i cmN1eXBrIiBfX2lkbV9mcm1fXz0iODU4OTk0MDY2NyIgZnJhbWVib3JkZXI9IjAiPjwvaWZyYW1l PjxpZnJhbWUgaWQ9ImlmcmFtZTM1MyIgc3R5bGU9IndpZHRoOiAwcHg7IGhlaWdodDogMHB4OyBi b3JkZXI6IG1lZGl1bSBub25lOyBkaXNwbGF5OiBub25lOyIgc3JjPSJqYXZhc2NyaXB0OiBmYWxz ZTsiIHRpdGxlPSJibWh1emQiIF9faWRtX2ZybV9fPSI4NTg5OTQwNjgxIiBmcmFtZWJvcmRlcj0i MCI+PC9pZnJhbWU+PGlmcmFtZSBpZD0iaWZyYW1lMTQyIiBzdHlsZT0id2lkdGg6IDBweDsgaGVp Z2h0OiAwcHg7IGJvcmRlcjogbWVkaXVtIG5vbmU7IGRpc3BsYXk6IG5vbmU7IiBzcmM9ImphdmFz Y3JpcHQ6IGZhbHNlOyIgdGl0bGU9ImNfbW95YyIgX19pZG1fZnJtX189Ijg1ODk5NDA2ODYiIGZy YW1lYm9yZGVyPSIwIj48L2lmcmFtZT48aWZyYW1lIGlkPSJpZnJhbWUxODYiIHN0eWxlPSJ3aWR0 aDogMHB4OyBoZWlnaHQ6IDBweDsgYm9yZGVyOiBtZWRpdW0gbm9uZTsgZGlzcGxheTogbm9uZTsi IHNyYz0iamF2YXNjcmlwdDogZmFsc2U7IiB0aXRsZT0ibGFjaV9jIiBfX2lkbV9mcm1fXz0iODU4 OTk0MDcwNCIgZnJhbWVib3JkZXI9IjAiPjwvaWZyYW1lPjxpZnJhbWUgaWQ9ImlmcmFtZTkyOSIg c3R5bGU9IndpZHRoOiAwcHg7IGhlaWdodDogMHB4OyBib3JkZXI6IG1lZGl1bSBub25lOyBkaXNw bGF5OiBub25lOyIgc3JjPSJqYXZhc2NyaXB0OiBmYWxzZTsiIHRpdGxlPSJraHd0dHAiIF9faWRt X2ZybV9fPSI4NTg5OTQwNzI3IiBmcmFtZWJvcmRlcj0iMCI+PC9pZnJhbWU+PGlmcmFtZSBpZD0i aWZyYW1lODE4IiBzdHlsZT0id2lkdGg6IDBweDsgaGVpZ2h0OiAwcHg7IGJvcmRlcjogbWVkaXVt IG5vbmU7IGRpc3BsYXk6IG5vbmU7IiBzcmM9ImphdmFzY3JpcHQ6IGZhbHNlOyIgdGl0bGU9InRu d3N4biIgX19pZG1fZnJtX189Ijg1ODk5NDA3MzEiIGZyYW1lYm9yZGVyPSIwIj48L2lmcmFtZT48 aWZyYW1lIGlkPSJpZnJhbWUxODQiIHN0eWxlPSJ3aWR0aDogMHB4OyBoZWlnaHQ6IDBweDsgYm9y ZGVyOiBtZWRpdW0gbm9uZTsgZGlzcGxheTogbm9uZTsiIHNyYz0iamF2YXNjcmlwdDogZmFsc2U7 IiB0aXRsZT0ibnpxeW5zIiBfX2lkbV9mcm1fXz0iODU4OTk0MDczNSIgZnJhbWVib3JkZXI9IjAi PjwvaWZyYW1lPjxpZnJhbWUgaWQ9ImlmcmFtZTg5NyIgc3R5bGU9IndpZHRoOiAwcHg7IGhlaWdo dDogMHB4OyBib3JkZXI6IG1lZGl1bSBub25lOyBkaXNwbGF5OiBub25lOyIgc3JjPSJqYXZhc2Ny aXB0OiBmYWxzZTsiIHRpdGxlPSJnbWVyYXIiIF9faWRtX2ZybV9fPSI4NTg5OTQwNzM4IiBmcmFt ZWJvcmRlcj0iMCI+PC9pZnJhbWU+PGlmcmFtZSBpZD0iaWZyYW1lMjk1IiBzdHlsZT0id2lkdGg6 IDBweDsgaGVpZ2h0OiAwcHg7IGJvcmRlcjogbWVkaXVtIG5vbmU7IGRpc3BsYXk6IG5vbmU7IiBz cmM9ImphdmFzY3JpcHQ6IGZhbHNlOyIgdGl0bGU9Inlya19jYiIgX19pZG1fZnJtX189Ijg1ODk5 NDA3NDMiIGZyYW1lYm9yZGVyPSIwIj48L2lmcmFtZT48aWZyYW1lIGlkPSJpZnJhbWUzMTciIHN0 eWxlPSJ3aWR0aDogMHB4OyBoZWlnaHQ6IDBweDsgYm9yZGVyOiBtZWRpdW0gbm9uZTsgZGlzcGxh eTogbm9uZTsiIHNyYz0iamF2YXNjcmlwdDogZmFsc2U7IiB0aXRsZT0iYmZ5bXZrIiBfX2lkbV9m cm1fXz0iODU4OTk0MDc0NyIgZnJhbWVib3JkZXI9IjAiPjwvaWZyYW1lPjxpZnJhbWUgaWQ9Imlm cmFtZTk0OSIgc3R5bGU9IndpZHRoOiAwcHg7IGhlaWdodDogMHB4OyBib3JkZXI6IG1lZGl1bSBu b25lOyBkaXNwbGF5OiBub25lOyIgc3JjPSJqYXZhc2NyaXB0OiBmYWxzZTsiIHRpdGxlPSJzYnJ2 bXgiIF9faWRtX2ZybV9fPSI4NTg5OTQwNzUxIiBmcmFtZWJvcmRlcj0iMCI+PC9pZnJhbWU+DQog ICA8L2JvZHk+DQo8L2h0bWw+ --mopjISWWekqAIDFEYv=_xMJkl4mVeLmmfN0-- From owner-freebsd-questions@freebsd.org Fri Jun 21 23:40:41 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0DAA815C3D5B for ; Fri, 21 Jun 2019 23:40:41 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mout.kundenserver.de (mout.kundenserver.de [212.227.126.187]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "mout.kundenserver.de", Issuer "TeleSec ServerPass Class 2 CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id EDF378788C for ; Fri, 21 Jun 2019 23:40:37 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de ([94.222.12.231]) by mrelayeu.kundenserver.de (mreue009 [212.227.15.167]) with ESMTPA (Nemesis) id 1MWiYi-1i6yLT44hU-00X7YK; Sat, 22 Jun 2019 01:40:28 +0200 Date: Sat, 22 Jun 2019 01:40:26 +0200 From: Polytropon To: Paul Schmehl Cc: FreeBSD Questions Subject: Re: How to un-select files in shell wildcard patterns Message-Id: <20190622014026.88ddb051.freebsd@edvax.de> In-Reply-To: <94FB6F4A679CD506CC02DCF2@Pauls-MacBook-Pro.local> References: <20190621054909.c6ba47ab.freebsd@edvax.de> <94FB6F4A679CD506CC02DCF2@Pauls-MacBook-Pro.local> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K1:4wpJqFjb/V/1DrxdFkOM55oXZSNXEXegQlXdBnKvhTp9o/RuXwv WnpL7z3izq/PiaWl7boU++TortduBOr1BCYuR7G3GggqRIrbFqGMi76itLfxC4qVFBP+vUd WFVwOiE3hdeFbMI081X+ep43GYqcdctE1cp2U4hNAwbqVDWiVcuUD9bTUtadKiIhLymOBi2 JpZLjZBpa6oPA7yyakTDQ== X-Spam-Flag: NO X-UI-Out-Filterresults: notjunk:1;V03:K0:+6FXiqauMIQ=:SVLx7mWfvQUiHlS8Vswe9/ Bymv+kQHI+HtZwXMhvdJBmhk3XyHxki4v0ssxHkdiuh8M9021GCuTagiZHMDQcGBTzyqbxYff 4AKLWe8lHxxAz9LLNJn0AqMmSUfVfBmriph4l9DPuAHwzUa+jFvrxaLZPgET0QauYkdfB0FHV FTcHtShQLI6FSGlaqGvtBbwWbC/MeNqrdHdIxMeZi+MTJDEH14IY6GR3Ci7OGxCpKAtPX1S2A u7/311dvfBaTFjUuZVhWmEdffB3eee5pljO5oSv253HyCeuf2SwTSd0nijU5A6QXIeFL95Eei LzV3NlAw9rdVfTECo/pjO4tl9gPD84avPsLnAhSanYiECPrXsu9LuIRQx9O802DD4l3P/KsGx YV8/Hjj541DOrAqusbkcW590VfQDMoSFLP9IMcE3daM38AmCL0UVbSRvcDDm3dMgxTTqa+wZ4 j0Si3GAcKVprZNkIbwrIDMAiwM6zVrsy9HqSW5pIbL39p8+wPecY0leKJXwV3fXVjk4onVjP8 yTYTdz3qihee8AswCtQh3JBYFR1d5L30ljlHFikg1+EFJhvfcFGfNETxdsHBgZVyXhvUi0h33 GxaX5B9EVVMUD2IU6QsYsz198zuGgHAUCqUtQhAdNtjXgLDN06yJrMBSKs6OHWxU+IHapZVbY s+4zRjc+snqZw8GtJKMKzmDDK0kB13jNBFldCs+61UV8m3oaDxghfTDR7SRuMfBTsliJguJFa h/CJH8/PM7i678RwFNS0CO3Ezg94npHCJbDQgb5mIPB9ulYh79IMeovBO2w= X-Rspamd-Queue-Id: EDF378788C X-Spamd-Bar: +++++ Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [5.74 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; HAS_REPLYTO(0.00)[freebsd@edvax.de]; MV_CASE(0.50)[]; HAS_ORG_HEADER(0.00)[]; TO_DN_ALL(0.00)[]; MX_GOOD(-0.01)[cached: mx01.schlund.de]; RCPT_COUNT_TWO(0.00)[2]; RECEIVED_SPAMHAUS_PBL(0.00)[231.12.222.94.zen.spamhaus.org : 127.0.0.11]; RCVD_TLS_LAST(0.00)[]; MIME_TRACE(0.00)[0:+]; FROM_EQ_ENVFROM(0.00)[]; ASN(0.00)[asn:8560, ipnet:212.227.0.0/16, country:DE]; ARC_NA(0.00)[]; REPLYTO_EQ_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; NEURAL_SPAM_SHORT(0.87)[0.867,0]; MIME_GOOD(-0.10)[text/plain]; R_DKIM_NA(0.00)[]; DMARC_NA(0.00)[edvax.de]; AUTH_NA(1.00)[]; NEURAL_SPAM_MEDIUM(0.99)[0.994,0]; TO_MATCH_ENVRCPT_SOME(0.00)[]; NEURAL_SPAM_LONG(1.00)[1.000,0]; RCVD_IN_DNSWL_NONE(0.00)[187.126.227.212.list.dnswl.org : 127.0.5.0]; MID_CONTAINS_FROM(1.00)[]; R_SPF_NA(0.00)[]; RWL_MAILSPIKE_POSSIBLE(0.00)[187.126.227.212.rep.mailspike.net : 127.0.0.17]; RCVD_COUNT_TWO(0.00)[2]; IP_SCORE(0.49)[ip: (1.39), ipnet: 212.227.0.0/16(-1.41), asn: 8560(2.50), country: DE(-0.01)] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Jun 2019 23:40:41 -0000 On Fri, 21 Jun 2019 10:44:56 -0500, Paul Schmehl wrote: > --On June 21, 2019 at 5:49:09 AM +0200 Polytropon wrote: > > > I'm interested in a convenient method to "un-select" files > > when using regular (sh) shell wildcards. It's quite easy to > > describe things like > > > > *.tex > > > > to perform an operation on all LaTeX source files, or > > > > *a* > > > > on all files whose name contains (at least) one "a". Patterns > > that are based on the inclusion of certain attributes are not > > a problem to deal with using the builtin pattern matching of > > the shell. > > > > But what about the opposite? Let's say, perform an operation > > on all files _except_ the LaTeX source files, or all files > > whose name does _not_ contain an "a"? > > > > Is there a good method to do this, except creating a kind > > of "custom regex wrapper script" that does the selection part, > > for further use with `subshell` or | xargs? > > I feel almost silly trying to suggest anything to *you*, but egrep > '(foo|bar|zed|fam). does the trick. So, for example, if you want to do > something in the shell to act on all files except ones that end in .tex or > have an a in their name: > ls -al| egrep '(a|\.tex)' * | awk (whatever), etc. This is exactly what I an trying to avoid, i. e., not depend on external programs, but instead use what the shell offers interally. Of course, even regular grep can be used: ls | grep -v "a" | xargs ... foo ... or foo `ls | grep -v "a"` ... could implement the "_not_ this pattern" mechanism (just as the use of "awk '!/a/" with the ls output, to generate a list of the matching files (here: those that do _not_ match a certain pattern). So, is it correct that there is no shell builtin mechanism for this kind of "negative selection"? -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Sat Jun 22 02:19:58 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 822AF15C7ACA for ; Sat, 22 Jun 2019 02:19:58 +0000 (UTC) (envelope-from johnl@iecc.com) Received: from gal.iecc.com (gal.iecc.com [IPv6:2001:470:1f07:1126:0:43:6f73:7461]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "gal.iecc.com", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 0766A8BCAB for ; Sat, 22 Jun 2019 02:19:57 +0000 (UTC) (envelope-from johnl@iecc.com) Received: (qmail 13430 invoked from network); 22 Jun 2019 02:19:55 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding; s=3474.5d0d904b.k1906; i=johnl-iecc.com@submit.iecc.com; bh=ST+7HevrU1DlTIUNfC625L6ioW1/91dj2sA8eWknyAE=; b=vAL/Qv7aqB3wV0WASiamY24qmlAROp6dsoLbROq5LuMY6P8TIYCUHtv/UGh+eQ+2hv+rTVIEL4gEc65+4kNupBDCW1Q9ivq5/5NECu5kahJjkWFJrcASWDieagF5oxowxkl1g51KLr448l/kAiM40lSi+Ue9vTrIfg+M4dZE+7pWbk0FvRJG0EviPqHF0YkwXgAz1NuXRyW/IUp+7HxDm+FhoUxZHOMMH9L9STBWiV3GEb6aC4Pyy1ECuoaWum3G Received: from ary.qy ([64.246.232.221]) by imap.iecc.com ([64.57.183.75]) with ESMTPSA (TLS1.2 ECDHE-RSA AES-256-GCM AEAD, johnl@iecc.com) via TCP; 22 Jun 2019 02:19:54 -0000 Received: by ary.qy (Postfix, from userid 501) id 69A422016305A5; Fri, 21 Jun 2019 22:19:53 -0400 (EDT) Date: 21 Jun 2019 22:19:53 -0400 Message-Id: <20190622021954.69A422016305A5@ary.qy> From: "John Levine" To: freebsd-questions@freebsd.org Cc: freebsd@edvax.de Subject: Re: How to un-select files in shell wildcard patterns In-Reply-To: <20190622014026.88ddb051.freebsd@edvax.de> Organization: Taughannock Networks X-Headerized: yes Mime-Version: 1.0 Content-type: text/plain; charset=utf-8 Content-transfer-encoding: 8bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Jun 2019 02:19:58 -0000 >This is exactly what I an trying to avoid, i. e., not depend on >external programs, but instead use what the shell offers interally. >So, is it correct that there is no shell builtin mechanism for >this kind of "negative selection"? You can fake it. Undebugged code follows: for i in * do case "$i" in *.tex) ;; *) echo "not a tex file: $i" ;; esac done for i in * do case "$i" in *a*) ;; *) echo "no a's here: $i" ;; esac done From owner-freebsd-questions@freebsd.org Sat Jun 22 03:21:54 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B4F4215C9A1B for ; Sat, 22 Jun 2019 03:21:54 +0000 (UTC) (envelope-from hartzell@alerce.com) Received: from corvid.alerce.com (corvid.alerce.com [206.125.171.163]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 5D8A88DD39 for ; Sat, 22 Jun 2019 03:21:53 +0000 (UTC) (envelope-from hartzell@alerce.com) Received: from postfix.alerce.com (76-226-160-236.lightspeed.sntcca.sbcglobal.net [76.226.160.236]) (using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by corvid.alerce.com (Postfix) with ESMTPSA id B5F8A284FE; Fri, 21 Jun 2019 20:21:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alerce.com; s=dkim; t=1561173704; h=from:from:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=nWqJu4Ye+BAmXcEAo3at2VieyOGZSVBv9/X6kDfDm6o=; b=e0z9vyt11/68pW50oCIK/0wxm4nyX7fgu6RUkq1FkIsfEsZtN8mEFvWCEeVd/2se0EdxzB QhE39B8HEM92ZPDhOg9xfWbtnAK4gPkZkA+EAiyvNmNHSIOWig9O4xl/4szhUCVds8us6J vNvLcC9RdJW6FMDKh4xPDcfQITyHmXoqJBMgLIpCemL5IC3CYUIMWfm6DQgJRPoWaG5pOu J3uSau3T0FohZD1njLhi2vre2bdSGTuf7/xnMIxQVT4sKa6lYqypgPse/2otx9vavMxXac Ihoi9UYRrDfMoG6gO2uG2Sfbx7Pi0VylGaipND0GqYy1sOv4rvncpjZuQspclg== Received: by postfix.alerce.com (Postfix, from userid 501) id 0217F200F24315; Fri, 21 Jun 2019 20:21:43 -0700 (PDT) From: George Hartzell MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Message-ID: <23821.40647.901447.793730@alice.local> Date: Fri, 21 Jun 2019 20:21:43 -0700 To: mike tancsa Cc: freebsd-questions@freebsd.org Subject: Re: ZFS replication suggestions In-Reply-To: References: X-Mailer: VM undefined under 26.1 (x86_64-apple-darwin14.5.0) Reply-To: hartzell@alerce.com X-Rspamd-Queue-Id: 5D8A88DD39 X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=alerce.com header.s=dkim header.b=e0z9vyt1; dmarc=pass (policy=none) header.from=alerce.com; spf=pass (mx1.freebsd.org: domain of hartzell@alerce.com designates 206.125.171.163 as permitted sender) smtp.mailfrom=hartzell@alerce.com X-Spamd-Result: default: False [-4.82 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_DKIM_ALLOW(-0.20)[alerce.com:s=dkim]; HAS_REPLYTO(0.00)[hartzell@alerce.com]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; REPLYTO_ADDR_EQ_FROM(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_SOME(0.00)[]; DKIM_TRACE(0.00)[alerce.com:+]; RCPT_COUNT_TWO(0.00)[2]; DMARC_POLICY_ALLOW(-0.50)[alerce.com,none]; MX_GOOD(-0.01)[corvid.alerce.com]; NEURAL_HAM_SHORT(-0.82)[-0.820,0]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:25795, ipnet:206.125.168.0/21, country:US]; IP_SCORE(-0.99)[ipnet: 206.125.168.0/21(-4.69), asn: 25795(-0.22), country: US(-0.06)] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Jun 2019 03:21:54 -0000 mike tancsa writes: > I have a new project coming up with replication.=A0 In the past, I h= ave > used various scripts out of ports, but was wondering what people are= > using these days to sync their ZFS files systems between servers ?=A0= It > will be about 10-40G in daily diffs.=A0 Would like to send every 5-1= 0 min > or so. Files being slightly out of sync for a short period of time i= s > not a big deal eg. in case of total failure on one box (e.g both pow= er > supplies die) missing some data for a period of short time is tolera= ble I've been playing with [sanoid] for generating/pruning snapshots on a remote machine, `syncoid` from the same package for "pull" syncing from the remote machine to a FreeNAS system, and [sanoid] on the local backup server solely to prune the snapshots. It's working reasonably well (e.g. I just got a weird email (cron) about it failing to remove something, but it's gone on the next iteration, so....). I've submitted [a bug report][new-ports] that contains a release port and a devel port. Any help getting it committed would be most welcome. I also have both ports in my ["personal ports tree"][my-ports], it's intended to be layered over the full ports tree with e.g. portshaker. g. [sanoid]: https://github.com/jimsalterjrs/sanoid [new-ports]: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D238584= [my-ports]: https://github.com/hartzell/freebsd-ports/tree/master/sysut= ils From owner-freebsd-questions@freebsd.org Sat Jun 22 03:23:42 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2CF8815C9B06 for ; Sat, 22 Jun 2019 03:23:42 +0000 (UTC) (envelope-from saurabhthakur70@gmail.com) Received: from mail-vs1-xe2e.google.com (mail-vs1-xe2e.google.com [IPv6:2607:f8b0:4864:20::e2e]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 26E908E01D for ; Sat, 22 Jun 2019 03:23:41 +0000 (UTC) (envelope-from saurabhthakur70@gmail.com) Received: by mail-vs1-xe2e.google.com with SMTP id 2so5145255vso.8 for ; Fri, 21 Jun 2019 20:23:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=gyRx1ow60G14fhGICtyAooWMW1TmEbll44iTjZT/ZV0=; b=t7suHDahW5gdiaZzy1djENg8UNepkgdmouB88zfqEjQ+RQd2gahcYtar4W/1nlDkPL ZTvc7fMDWDFzZnHonlXVTKsQSsjk6m0WOxinmWT3V7XnvdhXj3taIU6oXMmhFdqwhuWx r0FA03qnO1eDFyOlka5y6Mr3JejvaC2diJMgk2KcFsyWz3yUyltzog0us97VADCjdAuJ x+VRo8P6vV45tGyE5HCFjP+3gHxTXuNiMfzXfPIah79pnnvJkdJaZmUkaW1+vQFqusNy 1pN7xuqTJkjUymB+mDFhGSAwBDo1qIfGK7nFHwBzaltu5TYUBrF2AM1Ai2msfCa18/e4 RmnQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=gyRx1ow60G14fhGICtyAooWMW1TmEbll44iTjZT/ZV0=; b=uPX4A9X+WA740cZVIiCW1eHQ2z4YD/96ALOxatlefBPWsPx/SdwGbI2jCnNHy47aJR X1037YDU2aT13R6YpxAC3xirwvpJ4RJ0vCuIFhta848UJ7tNhvqCSLPRjN2K4Ln6Ietf cIWT7mwHnTw2dcN+vxHrcwIfAGq67gR6StwwMWViEp/dIf+K7YUGbnYTtEXxap6TJArL DWUyy3fFAIIMuskY2ut+aGVArtQTpOm1zcQ87CcEx9EBSP5Px0VWKDBN6IguIWbJuMFC UzdHqDK17tmtkSoGXJEhhN2Ake48iFPmilN+sr/5y1qMzHnqrtbOVkyy8rlBUiz8GbkN lVcg== X-Gm-Message-State: APjAAAVIFkM7n+baFRoXphQcsOaRiE7zdVG2grP/YgcEguoQncXvyIwS sCcyT3MhFo2XS6UHLRxi4s836wCkO4J8umk729O44Q== X-Google-Smtp-Source: APXvYqwCOuhXn7iGPuDDsMF4EgL4WpaHH13p2fzdT2yCHgfcan5jDxHoJJkf/4jp3+kHWYxa1REzDMF3iGxxFlSo1H8= X-Received: by 2002:a05:6102:1041:: with SMTP id h1mr26753639vsq.153.1561173820265; Fri, 21 Jun 2019 20:23:40 -0700 (PDT) MIME-Version: 1.0 From: saurabh thakur Date: Sat, 22 Jun 2019 08:53:29 +0530 Message-ID: Subject: To: freebsd-questions@freebsd.org X-Rspamd-Queue-Id: 26E908E01D X-Spamd-Bar: ----- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20161025 header.b=t7suHDah; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of saurabhthakur70@gmail.com designates 2607:f8b0:4864:20::e2e as permitted sender) smtp.mailfrom=saurabhthakur70@gmail.com X-Spamd-Result: default: False [-5.88 / 15.00]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; FREEMAIL_FROM(0.00)[gmail.com]; TO_DN_NONE(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; MX_GOOD(-0.01)[cached: alt3.gmail-smtp-in.l.google.com]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; NEURAL_HAM_SHORT(-0.83)[-0.831,0]; FROM_EQ_ENVFROM(0.00)[]; RCVD_TLS_LAST(0.00)[]; IP_SCORE(-3.04)[ip: (-9.67), ipnet: 2607:f8b0::/32(-3.15), asn: 15169(-2.33), country: US(-0.06)]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; DWL_DNSWL_NONE(0.00)[gmail.com.dwl.dnswl.org : 127.0.5.0]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-0.997,0]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20161025]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; MIME_TRACE(0.00)[0:+,1:+]; RCVD_IN_DNSWL_NONE(0.00)[e.2.e.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.list.dnswl.org : 127.0.5.0]; EMPTY_SUBJECT(1.00)[]; RCVD_COUNT_TWO(0.00)[2] Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Jun 2019 03:23:42 -0000 Xvideo From owner-freebsd-questions@freebsd.org Sat Jun 22 07:00:23 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BAE3C15CD836 for ; Sat, 22 Jun 2019 07:00:23 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mout.kundenserver.de (mout.kundenserver.de [212.227.17.10]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "mout.kundenserver.de", Issuer "TeleSec ServerPass Class 2 CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 413AC6C787 for ; Sat, 22 Jun 2019 07:00:21 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de ([178.5.233.42]) by mrelayeu.kundenserver.de (mreue109 [212.227.15.183]) with ESMTPA (Nemesis) id 1M42fG-1hea0S0eci-0000Z1 for ; Sat, 22 Jun 2019 09:00:12 +0200 Date: Sat, 22 Jun 2019 09:00:10 +0200 From: Polytropon To: FreeBSD Questions Subject: Problem burning DVD Message-Id: <20190622090010.65724d79.freebsd@edvax.de> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K1:iBGfD9sOVkuDztXcSE/NmBiv2Tjk6xsWaWPHiqrp5M2qLWK84i8 juDuo5omx45e4IVryuQVPoSpNRa+joKWZLCHJXH7ULrpIlXvZUMlvyohmo6s8avvfgsHOUm h90VTDY3gh17vDXx1aMKORlY/AcKsKgo2PlJ+MykY/5vo8NZU30KTYdJuSwAH2j4fz/gAJm VEN0RfFHIUubvx1asIVLg== X-Spam-Flag: NO X-UI-Out-Filterresults: notjunk:1;V03:K0:8fikXNfvAbo=:FTkPYcaJwNCr3zaDl2S9oG e8g4IRLOuPv1YN63i6fMZ22uqm8IK/BlVaVWy42R7gHk+qvHfDq1H5HMdtRn2SKFsXPJieOlZ bmRB2paHiamLHKU85EFReY9e+ksPy1aZMkpzNlavJ1zO3CYXfcwRwD25sYDg341pMcvGVqbWo UlUfIEdXqc1fgRMdKJ9ISutbJoet2YGCFJ69+YC1CB/t1cU/msW//u+T3RpReBdna6phGRXM0 VNFy8xRTsJtpJwY4jSvV7Ue84amW42gtaRIjfVVHtlrX06jGAYIncz+LyFxWOcZQqe9O5Lj0X iB7iWoxau1ksa2ILyyVuR9gpcNFy3hZxAix+g2CUdkh3MENZa43/GaKiIi4zZc+CD/0tiRQ83 jRBR0eYVcPtWqzoiL3+Z69tatKRyL5JPA2IiieTjFHrzRGCjzqVvE0eKrVsVnR2Z+xBYogh6f 6LGj3pKQPTUw/eJ0ig9kBcnW6NmqA1CEkv8l+LhRB6jFY0kNIskRijsnAtQcOMYSjguYoTEig I9d+A/00kg7Uk+pjRhqnHVa0B3pCW9TH4+X3lShBMd/a1oh3gml2zjcP4eCBJU9Rs98uopqo4 LDvBZZMVEV9ulc2rldrMoszuGzF/Jg0ENBmzrCPaw/7lFWe3MSH3UdtRJkTgGIzaTe+GE4w7i lIWmpRRJlZ+5tuA2K4lllmr1pRcsTQPP8n0uRqAXoB6PrzlgW4g4BaDNcL0T7/55eZvGjc6yv vr1IgjCSkUkGdNUvR39Fsv/a8WhbawHtUPGsNShtlOw3mPs0n36X2ywVt3Q= X-Rspamd-Queue-Id: 413AC6C787 X-Spamd-Bar: ++++ Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [4.67 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; HAS_REPLYTO(0.00)[freebsd@edvax.de]; MV_CASE(0.50)[]; HAS_ORG_HEADER(0.00)[]; TO_DN_ALL(0.00)[]; MX_GOOD(-0.01)[mx00.schlund.de,mx01.schlund.de]; RECEIVED_SPAMHAUS_PBL(0.00)[42.233.5.178.zen.spamhaus.org : 127.0.0.11]; RCVD_TLS_LAST(0.00)[]; R_DKIM_NA(0.00)[]; ASN(0.00)[asn:8560, ipnet:212.227.0.0/16, country:DE]; MIME_TRACE(0.00)[0:+]; FROM_EQ_ENVFROM(0.00)[]; ARC_NA(0.00)[]; REPLYTO_EQ_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_SPAM_SHORT(0.55)[0.548,0]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; DMARC_NA(0.00)[edvax.de]; AUTH_NA(1.00)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_SPAM_MEDIUM(0.87)[0.866,0]; IP_SCORE(-0.06)[ip: (-1.38), ipnet: 212.227.0.0/16(-1.41), asn: 8560(2.49), country: DE(-0.01)]; NEURAL_SPAM_LONG(0.93)[0.930,0]; RCVD_IN_DNSWL_NONE(0.00)[10.17.227.212.list.dnswl.org : 127.0.5.0]; MID_CONTAINS_FROM(1.00)[]; R_SPF_NA(0.00)[]; RWL_MAILSPIKE_POSSIBLE(0.00)[10.17.227.212.rep.mailspike.net : 127.0.0.17]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Jun 2019 07:00:24 -0000 On a Lenovo R61i, I try to burn a DVD with the built-in optical unit. After inserting a blank media, the following error appears: (cd0:ata0:0:0:0): READ(10). CDB: 28 00 00 00 00 00 00 00 01 00 (cd0:ata0:0:0:0): CAM status: SCSI Status Error (cd0:ata0:0:0:0): SCSI status: Check Condition (cd0:ata0:0:0:0): SCSI sense: ILLEGAL REQUEST asc:21,0 (Logical block address out of range) (cd0:ata0:0:0:0): Error 22, Unretryable error (cd0:ata0:0:0:0): cddone: got error 0x16 back This error is repeated several times. Maybe this is normal, as the media size cannot be queried for a non-written medium. This assumption is due to the following message: cd0: Attempt to query device size failed: NOT READY, Medium not present The unit in question is: cd0 at ata0 bus 0 scbus0 target 0 lun 0 cd0: Removable CD-ROM SCSI device cd0: 33.300MB/s transfers (UDMA2, ATAPI 12bytes, PIO 65534bytes) >From "camcontrol devlist": at scbus0 target 0 lun 0 (cd0,pass0) I have set all permissions as needed. Using growisofs, after a little progress (when the program adjusts the write speed, ca. 3%), abort with errors like "input/output error" or "medium not supported". I've been seeing this with different brands of DVD media. The command is "growisofs -Z /dev/cd0 -dvd-video -r -J -udf dvd/", so nothing special. :-) /dev/pass0: "Current Write Speed" is 2.5x1352KBps. :-[ WRITE@LBA=5f0h failed with SK=4h/ASC=03h/ACQ=00h]: Input/output error :-( write failed: Input/output error /dev/pass0: flushing cache /dev/pass0: closing track /dev/pass0: closing disc And: :-( unable to CLOSE TRACK: Input/output error /dev/pass0: closing disc :-[ CLOSE DISC failed with SK=5h/COMMAND SEQUENCE ERROR]: Input/output error Of course, the result perfectly fits the garbage can. What could be the problem here? Is there some description of what error codes like "Error 22", "0x16" or "SK=4h/ASC=03h/ACQ=00h" mean? -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... From owner-freebsd-questions@freebsd.org Sat Jun 22 08:22:43 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CC16E15CF99A for ; Sat, 22 Jun 2019 08:22:43 +0000 (UTC) (envelope-from fradin_94.1560@taught-thistle.tk) Received: from taught-thistle.tk (194-67-78-54.cloudvps.regruhosting.ru [194.67.78.54]) by mx1.freebsd.org (Postfix) with ESMTP id 89AF46EA72 for ; Sat, 22 Jun 2019 08:22:42 +0000 (UTC) (envelope-from fradin_94.1560@taught-thistle.tk) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=email; d=taught-thistle.tk; h=Date:To:From:Subject:Message-ID:MIME-Version:List-Unsubscribe:Content-Type; i=fradin_94.1560@taught-thistle.tk; bh=qfoncKRDaCW4ro/5k1VwgwaIB/s=; b=ngth+ddhvr4SSZWp7vzTqAgD2pDB9cfmSoNU6AXkIbCwQ1DkB0KmA1qqmkxVGLfmhhMOb13ReV94 Hg5ty4fLU0rr2wrKGpgEKoH+46j9cM/Eq8f6DCOdB/qZXag1shGCBr99uhKVKu5Ko/T+t5gfNaR+ xuvK2+8FtVRvqrKGcFc= Date: Sat, 22 Jun 2019 11:22:36 +0300 To: freebsd-questions@freebsd.org From: =?utf-8?B?0KHQtdGA0LPQtdC5INCT0L7QvNC10LvQtdCyICjQv9C+0LzQvtGJ0L3QuNC6INGO0YDQuNGB0YLQsCk=?= Subject: =?utf-8?B?0J/QviDQv9C+0LLQvtC00YMg0L3QsNGI0LjRhSDRg9GB0LvRg9Cz?= Message-ID: <1561191756.ba20f9d7e137f3b593d811d9bfcc6ebc@mailsys> MIME-Version: 1.0 Precedence: bulk Content-Type: multipart/mixed; boundary="--c65bdaa7c118ad6238ec263b7dd48ced" X-Rspamd-Queue-Id: 89AF46EA72 X-Spamd-Bar: / Authentication-Results: mx1.freebsd.org; dkim=pass header.d=taught-thistle.tk header.s=email header.b=ngth+ddh; dmarc=pass (policy=reject) header.from=taught-thistle.tk; spf=pass (mx1.freebsd.org: domain of fradin_94.1560@taught-thistle.tk designates 194.67.78.54 as permitted sender) smtp.mailfrom=fradin_94.1560@taught-thistle.tk X-Spamd-Result: default: False [0.51 / 15.00]; ARC_NA(0.00)[]; DMARC_POLICY_ALLOW(-0.50)[taught-thistle.tk,reject]; R_DKIM_ALLOW(-0.20)[taught-thistle.tk:s=email]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+a]; PRECEDENCE_BULK(0.00)[]; MIME_GOOD(-0.10)[multipart/mixed,text/plain]; TO_DN_NONE(0.00)[]; NEURAL_HAM_LONG(-0.83)[-0.829,0]; HAS_LIST_UNSUB(-0.01)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_SPAM_MEDIUM(0.29)[0.295,0]; IP_SCORE(0.72)[asn: 197695(3.61), country: RU(0.01)]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MX_GOOD(-0.01)[cached: mail.taught-thistle.tk]; DKIM_TRACE(0.00)[taught-thistle.tk:+]; CTYPE_MIXED_BOGUS(1.00)[]; NEURAL_HAM_SHORT(-0.26)[-0.264,0]; MIME_BASE64_TEXT(0.10)[]; RCVD_COUNT_ZERO(0.00)[0]; FROM_EQ_ENVFROM(0.00)[]; MID_RHS_NOT_FQDN(0.50)[]; MIME_TRACE(0.00)[0:+,1:+,2:+]; ASN(0.00)[asn:197695, ipnet:194.67.78.0/24, country:RU]; RCVD_TLS_ALL(0.00)[] X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Jun 2019 08:22:44 -0000 ----c65bdaa7c118ad6238ec263b7dd48ced Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: base64 0JfQtNGA0LDQstGB0YLQstGD0LnRgtC1IQoK0K8g0L/QvtC80L7RidC90LjQuiDRjtGA0LjRgdGC 0LAsINC/0LjRiNGDINC/0YDQtdC00LvQvtC20LjRgtGMINGD0YHQu9GD0LPQuCDQsiDRgtCw0LrQ uNGFINCy0L7Qv9GA0L7RgdCw0YU6Ci0g0JfQsNGJ0LjRgtCwINC/0YDQsNCyINC/0L7RgtGA0LXQ sdC40YLQtdC70LXQuQotINCQ0LTQvNC40L3QuNGB0YLRgNCw0YLQuNCy0L3Ri9C1INC00LXQu9Cw Ci0g0JbQuNC70LjRidC90L7QtSDRgdC/0L7RgNGLCi0g0KHQv9C+0YDRiyDQv9C+INGB0LXQvNC1 0LnQvdGL0Lwg0LTQtdC70LDQvAotINCd0LDRgdC70LXQtNGB0YLQstC+IAotINCi0YDRg9C00L7Q stC+0LUg0L/RgNCw0LLQviAKLSDQl9C10LzQtdC70YzQvdC+0LUg0L/RgNCw0LLQviAKLSDQl9Cw 0YnQuNGC0LAg0L/QviDRg9Cz0L7Qu9C+0LLQvdGL0Lwg0LTQtdC70LDQvAoK0KPRgdC70YPQs9C4 INGB0YLQvtGP0YIg0YDQtdCw0LvRjNC90L4g0L3QtdC00L7RgNC+0LPQvi4KCtCe0YIg0JLQsNGB INC/0L7QvdCw0LTQvtCx0LjRgtGB0Y8g0LvQuNGI0Ywg0LTQvtCy0LXRgNC10L3QvdC+0YHRgtGM LCDQtNCw0LvQtdC1INGD0YfQsNGB0YLQuNGPINC+0YIg0JLQsNGBINC90LUg0L/QvtGC0YDQtdCx 0YPQtdGC0YHRjy4KCtCV0YHQu9C4INC/0YDQuNC90YbQuNC/0LjQsNC70YzQvdGL0Lkg0LjQvdGC 0LXRgNC10YEg0YMg0JLQsNGBINC10YHRgtGMIC0g0L/RgNC+0YHRgtC+INC60YDQsNGC0LrQviDQ vtC/0LjRiNC40YLQtSDQktCw0YjRgyDRgdC40YLRg9Cw0YbQuNGOLCDQsiDQvtGC0LLQtdGCINGP INC90LDQv9C40YjRgyDRgdGC0L7QuNC80L7RgdGC0Ywg0YPRgdC70YPQsyDQuCDQstCw0YDQuNCw 0L3RgtGLINGA0LXRiNC10L3QuNGPINC00LDQvdC90L7Qs9C+INCy0L7Qv9GA0L7RgdCwLgoK0KEg 0YPQstCw0LbQtdC90LjQtdC8LCDQodC10YDQs9C10Lkg0JPQvtC80LXQu9C10LIu ----c65bdaa7c118ad6238ec263b7dd48ced MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" ----c65bdaa7c118ad6238ec263b7dd48ced-- From owner-freebsd-questions@freebsd.org Sat Jun 22 11:45:14 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1096115D2A77 for ; Sat, 22 Jun 2019 11:45:14 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [96.47.72.83]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4DFB2732EF for ; Sat, 22 Jun 2019 11:45:13 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [81.2.117.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "Let's Encrypt Authority X3" (verified OK)) (Authenticated sender: matthew/mail) by smtp.freebsd.org (Postfix) with ESMTPSA id E0D8110538 for ; Sat, 22 Jun 2019 11:45:12 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from liminal.local (unknown [IPv6:2001:8b0:151:1:196f:19a1:2cc9:1644]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: m.seaman@infracaninophile.co.uk) by smtp.infracaninophile.co.uk (Postfix) with ESMTPSA id 21EC7AE11 for ; Sat, 22 Jun 2019 11:45:10 +0000 (UTC) Authentication-Results: smtp.infracaninophile.co.uk/21EC7AE11; dkim=none; dkim-atps=neutral Subject: Re: How to un-select files in shell wildcard patterns To: freebsd-questions@freebsd.org References: <20190621054909.c6ba47ab.freebsd@edvax.de> <94FB6F4A679CD506CC02DCF2@Pauls-MacBook-Pro.local> <20190622014026.88ddb051.freebsd@edvax.de> From: Matthew Seaman Openpgp: preference=signencrypt Autocrypt: addr=matthew@FreeBSD.org; prefer-encrypt=mutual; keydata= mQINBFJIL80BEADi7/VbnnErDU6pjEhI/SzEZ/HbDRkJ5g7HroAtqIRm6nj8ZwOAgZ/2ZnWn 5F+fXTuLsG0FLNtkd17FoVcuCi5e/GPliXI5cmamV7E1Yz4T8UsJ7RQolimyxVexccKd16Tc AA7B9bFlJSKkBUSD0buj7VjT07xWhRzu6Vgi5r0UjLALYJz977uZA0F1aOGOXREDEAOhdcNc kSNjynqAwDA6dCT1Elpi4key1fYjv4jyDF+GU/YXul2Y/rguA8FCkHd9vyym5eAsLQ5mG00V V9fkEHIpH5KorNVnl/ufHXnkZqmHAZVpFDcrshb7aZ/pL45PXyWgLj+e6etelgj3a2bZi0JF cVdXCnBZVP2oIyYblM11ugTbfCwodORU8a5KfPeztMdAtDr4e+32NTrPdPi5rLT+GUsYz+PL 3A3m3u8bdsFp40DlIrBtSByVjqERxcfhphrEB4J8BXHUG7OAtXkZMlW/PGKDwXJq0O6Z5Tcg YHAoEiSWbXiexHgXNJyP+sqnIlhLWhSJGeJ+C83wqI6oYlZUCW00NkPxcIHnQPV/z+5wQVci TMyaWC2YCIHz4Ljs+TnwWMz0E8PNFDfHVbQ0W4PRGV7gRAqxfL+yKufauIEGbEq8rNDbSwL3 bcUCxR4ZDlaUEUwT4J8naf7rjdgiEYHs2Ig3jeK1+ER4FPG1sQARAQABtDBNYXR0aGV3IFNl YW1hbiA8bS5zZWFtYW5AaW5mcmFjYW5pbm9waGlsZS5jby51az6JAlcEEwEKAEECGwMFCwkI BwMFFQoJCAsFFgIDAQACHgECF4ACGQEWIQRyz6whebywJLW1RZADb2ye5/OevwUCWttU4QUJ DFmAlAAKCRADb2ye5/Oevwb5EACipbOazgwl5IbqkQI4gELpCh5dqDASS9DQqAD35n/cI91P 0lrYcdyCQbOXadQi5bswnP4AcJqX83mITXbcApDdxVxHujw7VODI069eV3/I9Qz72mHYYAAj w0CHNx4bKED2YCSVS6+jV5hq2sywNEUxL+4I218Oc+IsLts62m4tQ8UxX9fQ2H1kQOvdrYpj x7je5qJX/yujLc+9WWZ8ZBSdP/HVJUEdRgQotwAlgfMp3mRQEE73MAJisG/olj/dSxd+oHIP NbJt1yxMqhZekuEGqZpm3tWvqYgpGcEXdhphJSxeK6oLpTLghuAb7/WdOBrpfL7c2OQYBgOw DK+7Io9NBt/d/rCxL39jmUONW8ohrhnNQ2SALnyYTvZgruxA4tXxOOyM9up0/8mB5E8YC9ML 5YuxRPNTXYeWCexa0zktnkCgT7PhS33evf5gsA0B9Snv7TFCFN9adPAdHlsppZIWfTHDG8e2 Jik8PmvsUG34XNif5k6Ui3++2ZA8ZoKvOyLeomuno1hN8yk1APw8SbX1SPNz9UVbl8W/YgGj 3GhYOuQt4HcMiLyTby6R4lC4nsBaHS1MX+57f6Zxzf2wNjSKxiJK9qS7azbu/GxpafNhbz1Z +iUDIaJkRWA1Gs8C7SMcfVsI5zDtvqHGYtTCgooVMYJ6vRyB68M4bljUYMxRTrkCDQRSUUGj ARAAsPHwcnupWuOqYbboiYwZnd6dNRSUzMxIXN8vkdkrDfw7DvV9WYuAC9IGJ310N0otfh9A zGDiCPRbKl0YayJ2BIgsFzyAavA/kCCRLP5hMZ1mKkZ4K8Fs16EvtmarzPibSBfDQ0wcwzNf nSL2gZVG1JwRHHZ9TtiUsuAIh0R/qRh9+8AcFkS5Pfxb1PzJC/YuWOdlj6cO58u+2FfmNiGm oB6kl1LahmbtGgO8GRInkOYUYlWSUAA4Flw4FzWHBkEGv/STAp++KAZu2Tdl5UZH9iXm+Hsf 4sqt+/ILJketmO2RK2o2ECVwE2a/hQdOjjqmcscd1M5znweKSCk6dR/K4Cv05bZ7KVRCm2vK vuEBpltm/43/ls7OnFwz1UVswX9ch9t5tgSwbGxtTWJ/Mr3ybCz0EE4WaJBI8HTuVZWaJwXM ozz26BZCOV56flkZjDuyRhvRjZG+QhdbbumBDpa6wu3MCjSG8wn4RlNjuQdjDCo6bdqyovGg f8RW6UNCmStZkpTZYZfs8MTEcltmaFiJQjnY39pWa+Fp0aWwcwOVlAkp2wX6FzQeIEbPW515 vAlCjXneJIN7jss4Y2QJtFFQaCw0c+NloESFFhCLvYBhMPf2kccnDu25VRupkLp6njQs94Nf jtSb8mzOa2EhAHY81pRfdetOPosi23P6zIGKLXkAEQEAAYkEuwQYAQoAJgIbAhYhBHLPrCF5 vLAktbVFkANvbJ7n856/BQJa21VJBQkMUG8mAonBvSAEGQEKAGYFAlJRQaNfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDY1M0E2OEI5 MTNBNEU2Q0YzRTFFMTMyNkJCMjNBRjUxOEUxQTQwMTMACgkQuyOvUY4aQBNlUBAAlCLRtOug Y70Q3lkGsFSNJZm9oqPJGorOsH+emDdsiZSe5Ut5P2MG+XlIofQOfxvupltzw2pFuJOvHEMS 0rod6lLJ6joInhf0ZQH3P6jF/d2Y8iR9+2nqBtUf27OsHVLRMd/5WHVgyMjjyNBq0urIdv4E wV8Y9CDtGBGeiYyMstaBxHdEH+oM9VZB92lv485p4V8t8k1BgNn7UjQzOMBlITAB7WsUcXGi zTjMMe1tX/IT+f00I4PWAn3w5q8ldvtsWf+muVpIaGpZBMrxBEPxYBD3WGMxiymthQQxgZAB 03GatfLjzixld5Zn8WuGiPOxOTBkJAudhxPvfkO+3jgLGSa7TN46HgNH36OdeEr4SMdspR0i 0lmW1hwHmpmyw3XYLy4BwmhuV9z1XQN3qab8FBxOpxcCxnbO4HoDgXAahQbRNSA7umzz+I7S UcZVnCCG3hCG4BLxklZhBw4RmUtRHiL8vu+MPKrcBnbZ8uJ2s3E6mhB0yM0UnA3pYhAysgwB q3n9jLYN0atzVmHL8Fxjyc7z1EJPgqFdfHfMYl/eLYmCuGNfMsSGlH9O7tWoE10qkDlLmNB7 jbiJNgTf9rc50QKKUqumqp4a1UMEnt+7yf//JqUD7Jf0iJrglLgUyPKSY5te9rJqHPy1wIXT 6pChY5ic8jmtXKsCZaaxL8rEsq0JEANvbJ7n856/RNkQAKiZK5wNuRyNJS21MUJxnP7biEW4 1QuGhV/7Ryw5XXIor8H7SZHCnVR1fCYnJWRwRYn0SyZGoERW/57rgibf8/gkPw741AkCKOhL TDNgvNriEjfWj3I0X6M90AZXhcnGVJTS/moV65g4lUo6jX1GiJyTCD4b9SLyNDzPgiWO2I3W R+Xf/W81PK1820CN7HpIZUrLfGF+Nr6kXUxeOeSpi7ZMB/p3e7ZSzY0Lp7PFqGfL9N1Jg26X 8DVaf/Em0AorutLx84DqqMfO02ySaCq0B83VYzbNB3Ascy4c2JNIvwMiyUbsOEzDKkqB3sYb 0iJtnty9DKvMaLps00eM1+GcYpLsspY4NZQeJTVC+WetRqzFM4k2JH1q3hwymYgIsxDam6kn U3m0bN19WLQYmS5HLPZbkmtpm3P49g6KLFxZHzklS7x8VUOMJ3O97xXScBC9bePB3tqQRDSs wX3YmIywTYVInEeFleNaXH3UoS3Dhw7KP3i/BNreWDM+oZhbc2OkgWzQzXfT+l17EcP9/xML 0CIgM/cJPwMOrKrdqgfL6zAYDUK0IGFgRoxgnAbnpPHCr7ykrELNLbGtnzchzCxnbIyrSVAb m+Dm5MnjQRiNFXbuvpkuVVFqo6a0OhX1cwTuCIzSEfSggRaOOEqXTk559dDOXDqVx9lVKniK vbGzkmhAuQINBFJRQiABEADC0axEKC09VCYGgsH20lUwtAXd6VUVCNENBlW+MXQYsKfCLqO+ XP6vM0pA+sSswaBeSB/Eu3XgdKhuYGKHqAOo4wyKvwk3h9IWmgVNMM8ZQFi/PP2ya56/tuWZ 7kkG2M2OfWQpnBHa97wSN0KWDjZHrQXQMggDq5EqimNc2+hFaB2zIGrP0tjXVrHLJEmJRLq2 ugTxpGKLlNOtBNEsWmiN+MafXpKM6HLDq1scCvrhRICheBsnGtcyGaErwpjNaLA70I0+B552 DfTj+PICOGCMnp4jlP6rmVG7RifZoE5DrkcdTim/IU0pLaO/Epts5lwDodEOW9CKQFH8dswT bp6xhKJf+y1dIwhoOIkEUspoME3rgLtn72+QQW4jw/4pjA7MQu9VOF9bUN/nxTfyn/Rct3Bq sBZPJURdorewPgoBsPxMaA7t8JRoRyuVwXGMacw+wdmv2lldsdUOGokSCB596FoXAcKWndiY dgNjMWJaODy2va9Vlv65hGQRXWcoI2ytMCSwSzslly+V+0jo0ZWoUpd+6BuYRvG1QUW5/Fco aPPJsr/UfU0jzg6bCAw/xw1nuGaiZTqNiNjklrGIKyi0UyY28DGGADn3j9obY7pOrI9nFicc NtxURyhmgHP9tiTYNTVaGPyJh+WV3ZH/Yb7TStZadLoWb5vXAs0DQj+qnQARAQABiQI8BBgB CgAmAhsMFiEEcs+sIXm8sCS1tUWQA29snufznr8FAlrbVUkFCQxQbqkACgkQA29snufznr9M zBAAvn4C8wWYyiObQbqgaAm8GjqlSi0lGEv7ydmcu2ElAAyD0dnxbEMKEGgBpQumGD8/1pdZ FYw3EIKWiazpvMVw+6fFz9GZdviuM1refUYm3duDejaNoH75zmIG9LRTOJ6RBkPd3oQznT40 X5K+ARqLaJDPAzjb6DH7HYINlvNvf89M4CVN0gofv7dcCqtBTF8CtXB3iG0cFAis/12PwpfH 3YzWq529jnJJCLChTD5eEBi2JNLzQRHMeqy8D4Bnkb+Ahkwgbzs5GXGYaXoZeyFKThTAK/sg eJ9Cz15azfKW+EWMUOcvCurqz2QajlLe04N9mU4vPp92VTo274CtfIg/shSguYXnEZ0I/sz3 VFn3Kn2bRYeRu6PyusNUsQ397Uw5wDVmqzQqz+MnOkP6xAJjOvnD05cdj17G4rJ8gTgmzDSA 6v0AfzhUygy6Qf0UgrWrFaFIL4zQWsp9sap/QTMm92SBhLOE/Kc7nkkueEeVp0TtbkWByxLq 77Gbp0m4iZB8zylaac118hY+/vJ87aTuKF4CiCcezaI5FMg8/VVczO7/LV/n8Uu8QUOYEatR cfOB2JNXxpI/LqXVzvXpUidJbwpXY2aZprgzGhahBocuRL9jY8qp4in5CkhyU+rZyHkpQMHI +i45KRHO5GDSDMQcDF2LYGRbDUMg7G1MYTJwzsG5Ag0EUkgvzQEQANi5h27KsPhVw6AKlUo8 htPapW7b4RS26/z2pJe1IJ+lejrD5LveuRxdO3V+5hxqdBMEYNuQRmOlgsjiXkM5XFIgBeEF VGBaDv5yKPZXNfqIJC2nNehcR+rWHq84yrVb/MAvEvfQTvn3GeCTDd51xYnZYVO0An44TLLe 9cKL/i5d4I7flz/NK4DMpSqBRs0z7Tj9uF22LtYDJhNnQPolF4f+ADRLGMsbNHpCKwLcuzCR NlWN+eTY9peGZEfDoJT39u4wdg2ut9aSTv3B+l5HHkfYSS2gNf5yQ3YOVbQp/D6vZvNBCS0n Y5G5ApFil2ZAdoqfllqeQ74eH/dEPqOK1LCiBznKPHoLvTAJgA9v+Lhb9qw1jbIVD56Y88ZW c2iONscDlN2dboAYXGu3pcc8KNFkfc/j3MKRfq6N2l+t/n4ueebtLZypDJ3v9X7cQAkaW90R DhEuPpvvd+MEZGDYH3ZtIokqXZ3G3yiAy4M4TGXg4jX2pQ8ccXciimcp3DaXvqcV/SKnF20Q l6lm0r9sNp8ZBWUkLeMnDnpMdSjlONGuG9TsM50gaDi+kJuy9/fnlA0UGMpQNmBc1wsNAHl/ Q3ObZHUQtsZZN0gYEusDHpNC87SHodMS5YTc/eKx02asEoIoue/vUejkI6dvHWZv93+13y3c ZBhHyfF6SEr5dNkjABEBAAGJAjwEGAEKACYCGwwWIQRyz6whebywJLW1RZADb2ye5/OevwUC WttVSQUJDFmA/AAKCRADb2ye5/Oev9SOD/48JvgAf/PkjW0+TTE5vDaqdlEmNBu3K/vFX4T7 u0YT+qzLGUGYUvISiti9Dl7dV8kTg/Yr20EbHpj2a1Iys03YbR3mn/p6dv9abyqkaSESHN/g PPk1rlEi/j3lyoQsjDN6bpBEwT7Kbgri+Lwtkwp0vGm8I5AOguGlnCuNqsJ2jnHJ6YnEaKKp imIkr8wJVWxmx0OfnZxWrhMr5txD2DG675r1/IyOkU6SnApoD15+fJQmrsSmCKo3cZUMvM5Q 9lUJgdKuC89jJ1NujCzk7SC/EP6xSW0KFGzpqK0leIfh1riQ8DNs9CWreLANKtq35qbDUeGy BHwki0krsRRuNfg+0c+Rc5XOl+vuGmwfblKguIkAKSMSsjslXHqom+9s+mhOqJUSjAHsazlL BkVn00DfooDQBeeOwDlRwmQi+xcV3FomZMf5+4ARmsfzGtRIiJp5pfjek/P9vjeW+UqlE2az teXCmaK0G2LaLVVNnJzrUVQAqpA5eMtd3Ay8IGlhbrfznmAplgUH0aYhR1twIbUF8MeyQYIH fofR+lOnp3/vufJFZWve4S6tbK/OA69+Xr4wKAG95XBw03qZtPFbWu9yk5AYuS02U4akBhFv NfSx4Bs2rcrXZh63VBrlNqecueJdOQiQuY6nGoUa5fiE9glZF5ib9PVa522bBwaI2mW1tbkC DQRSUUKTARAAt6FH3HbDFoumOWUuJlDgOQs3wdp2n3IKv7gqzbDdgaoWW7hDTvjO0Cb6p2PG UKEoxMQQoIdDO0pQ9rgr4Sh4VSVC9WMO/fUwqdrIs2nACIg4OwvNhIccW08S+N72f+yuXWOQ /dv79cwruE26/BEXgIP09MYcOWwcUCXzOoUR3er+jzcsN9uFjcsBVUJLIEru1askHRzCUa5P 9S9GAFBwN49HC5IJWEzdLP27FjjOG5UG3+QZahHrjG1i6S3bIYXtaGsqNyfkp9Is7Wpj2kk+ s9Ua+YMG/V5YVlbANIexa1yr75p1W9biqXpCWnB3TaHSfI0G1t9w8K2qhR/Z1/YLIcRzZ2aH JnvbzJYw5Cs1jfNpFytbASsxj0rbReouftlBvVWFRxsZ+oG1ZXL64/SVKMZAnfBNxd1uajp+ HtoQtYoTu88la6zcdnAhOD5JdOntN2VF8iQnDfPgkidfuSZ1C059xaRPTSRJBgMRDtOlDxgz 7Pxx/7L2jwxRY1dq6NGioflY7CCpGc7bi1K6xnf3lBL8X2nGpRAVsg9Lx1ShIWkgNbTAcPXp XcXlJ1xqz8HS8Twadh6gIfk/RNchBIED9lkVCKHYp/XQb8T8vMwn/kTWUm5WlPkQUFQN4D1b 6+dJw4bwn/wiRS8did1MU1OytJB6tljfEUCx0uKkzqr+33MAEQEAAYkEuwQYAQoAJgIbAhYh BHLPrCF5vLAktbVFkANvbJ7n856/BQJa21VJBQkMUG42AonBvSAEGQEKAGYFAlJRQpNfFIAA AAAALgAoaXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDE5 RjE1NEVDQkYxMTJFNTA1NDRFM0YzMDAwNTEzRjEwRTBBOUU0RTcACgkQAFE/EOCp5OdNFg// ZqeVdGoKkMvALPzZjGz84+6l0kcMxSN4TfWmec0YpSmDEzCw4/SZoGqHlZb8lcTevmNrNXg6 c+wVw6P+Ycl20Nzb98Kt9C5sz+zGVmPPK+3O9gaPnEqlIKnnbxKXXNHQdd8Mf0UTpifMqX0I kWOqhe/tQKGoQ9+feKvLIaToIe/NjosW6vJ9YAgFqZ0015zwbElhMNFmgDMOI2SgjBZ9ngP1 U82Mqb7/7G9GxHtnwuJBSnPJgN8tav2O9uWPC0N8deyZBH4y9ERBPTFMc46wjkW030olcq7g 4hZ55rpPIEyGQZCq4u1gGibbiQJZEyUQT7BJm70/PeUr3uNjPlQODV/lF5TBvqGHEmlSQfo6 Yb/QQx07CK9bvhUSO2XP3ybS8JwoMZlgZzZcjiPiQF9ot6152/Cp/XrsKgtk+fg5ARZpyywR lQk1JCHRZvhgXIxqNYA04uwdPFcLI4vPiDaLS8mhXHLRZsSpHmIBqqrnam5Lq7iDc39UZrSJ MM40oy3iAOI2B7AOCbzxRuEplJd3E/tEqrnFGcPVN+h52ka74lEyfkwA2RrASWJJcXLN3/Vs izEj8okepefzjU/UPnU8sirzeWWo8Z4uKddovk//NwAPUJbee4vZLjYE6MWdpEoZP9CZXbtI PWuc9Djg16aHOgv44JPokDMaHA27A4rw2KwJEANvbJ7n856/SPkP/1bGUde7lnRTNd8c0ZrU tEi+OOibKyh7BjLUpzlihj3rGl9ljAF0eCdBrL1We3MDDcyi+XO7VZLiecZTlG6LLXFvEFjY pyPRx3bXlWk1/ahEiBoLWxedseNdFrO+H5XX6ODmKFFLhXgpsXnAxtM6Mxmrx0CGW4qzfUi7 Vsqj86gqlcet0/k5RqPMAhrGX5fNnQNWSAwumeFKM8UgDpKY0u7M2tS07B0ozXOSpqGTSJhX 6Ld2Nl95CL3wbSGuh1pDUOysAnzK5Rl/OQ9LtYpWomAKg6yn7gKYij5XmekAg/E+ybr5Gyx2 PgMQUGtuNmBRWP1qKtVUbrOekiuNz7kpdrP7M2O7i/cxWjGpVtjDNWuGkFgY3c+sKKawBma8 1K4rg044nkGwFX98vfEHVGu+HOd3D+Mv47nv4LQvzynBG/YflwaPmLhpw7HCPvpa4W7y8+5A KxDqWlM2NvrLwmwbmz9dQMGtjnNRm4uHfPX8AyzBoMtDrxNLIvDYlLqh+G2Q1shNNNdRNXn9 Z1pvri6KAHmH9GlISuM/jQfItout+Gtx9QUlNX3aIsdScTLA3jnMOpHcALCGI+XMiBNaVuYU xHgHh+MNYhmjQZZqASBCvVj1HyibDPZa/iQ4DBGBRlJb+8saPPqYVDQhosWSF20aJKwepZII OFjpMgmCIqZAnqK4uQINBFJRQrgBEADUWFag56O3CaycayGght1rYWYz7P9/3s7OlqAuEAId 8/kSz8jXzAb/Qb6t0247a2MD0gxnjgZQy2OiQOsOTrc31L6tUrLVATL5Q3oKIh9hOlNMA+cR jsgY3UmMaSw+Gftp64EJDBQwBXWT7CSUEJw4PqzwMPiTHRkmqQfzdfNagFJVqZ0e+cznoLzI 9WvkccwLW1kicBYEysX5yOXUQ9/PcKqRWcbxLFznJ16JsxL1DeUct5WRWUxECY2rM0t+AkNR a3NpzskiMUSzFhiGmJo9yyy1RS4drjMhEn/IcM1sO21ZF/WWuUVkul65qngFnaFDDRQ5lU3A agWhLhmppmK/yabSVfqz38B1APoBWuldYprslTbAOJrL2xFtiH7m9VYbP2aGdwr9V/C27kiN Wnm/lYzP9Z+dTFkxw2V+BOjiLWzDDD6pEE7YDhiPyoopadOyXtoJf3aK1OI+DBu3piBA/CDD DvavruM+3mjxUxcOo8w8rMaJzDUDLG0yOyhKWef3UW5ly3CKXe8+m/MZe0GavNBJt0ObLQpP mnn9b2kP/xS0ssszo8uzlfSMiGi9AedAoRQ7vFXfI0MBb0M8gJ6Ht/+j1b5Al9ABeeA3PRuu +aBJwBRdFp4AV5BsCa0Qb3aqVJUPuBvtY56aWWB9sSfQ1qeu/loRxkJbHhaPJswscQARAQAB iQI8BBgBCgAmAhsMFiEEcs+sIXm8sCS1tUWQA29snufznr8FAlrbVUkFCQxQbhEACgkQA29s nufznr+YBw//TJtAC9d/FYQQHKQg/QOEkcAL8Qx4HA2SICnhKqv64jPcYIUYocOO8Qayh+IV Da6MGkbsWdweUFuexMsW+17dqETfQjUApx32TUwF44WgIEfARLW2zRdRcXfsT4A2sQJCvNJr JnH3lywiJi+V848Q4sC3sSJREpcJd07oc2jxSKZyYZ1DBPfK1MyiwcBt2uFCTXdyFMham2aY LDP2JYvFP08tjTUAIKhe4B0bPTtldCf5sH5q8xrpaHnKHf0n7qMmK7NtGW/9R6WiCruiNsLn O95fms1tzKKfA4QXIYCEWl8XsRKwp51HZDjQu/KxPsjm6BL4eThnae9t3Zs5J0LiPxoFbN+p W7anft3YCeezB8+gus7I1Rn5yJMRyYRRVHtZZTBDQfoDqHgLY14GYtFGOT0IR/OuAzYM1CoM vVExgqVWixDwF5RH1OHO1TANqTGcrRm1lvasCWIphpoQVtkN4/PXGa+NhzsRmr/c5OUYxQNr oE8cdsK8mOIBRz9D2JpF7d2nr1X+vA4zk2JL61aCnc62BfSYNZWhCcOPJZUhFT9BqAkew0kk JzQ3jwHGAhfcfozTHoFsD08qAW0OUriEtH+EOXl+dYbjlNUjFPjJu49cZbtp/1TpsYOBdME1 QLM1TPanYXa7tb+IrRZN+Oi9i9VVym16DK7q21k3j0qRC0s= Message-ID: Date: Sat, 22 Jun 2019 12:45:09 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:60.0) Gecko/20100101 Thunderbird/60.7.1 MIME-Version: 1.0 In-Reply-To: <20190622014026.88ddb051.freebsd@edvax.de> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="Pz3BCGpGnlhe7EcYjPvFSTV3sfVGFxMh0" X-Rspamd-Queue-Id: 4DFB2732EF X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-2.98 / 15.00]; local_wl_from(0.00)[FreeBSD.org]; NEURAL_HAM_MEDIUM(-1.00)[-0.999,0]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; NEURAL_HAM_SHORT(-0.98)[-0.982,0]; ASN(0.00)[asn:11403, ipnet:96.47.64.0/20, country:US] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Jun 2019 11:45:14 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --Pz3BCGpGnlhe7EcYjPvFSTV3sfVGFxMh0 Content-Type: multipart/mixed; boundary="7f2nj9APRmhK7jDVlyFLVMI5SMIhpUw7W"; protected-headers="v1" From: Matthew Seaman To: freebsd-questions@freebsd.org Message-ID: Subject: Re: How to un-select files in shell wildcard patterns References: <20190621054909.c6ba47ab.freebsd@edvax.de> <94FB6F4A679CD506CC02DCF2@Pauls-MacBook-Pro.local> <20190622014026.88ddb051.freebsd@edvax.de> In-Reply-To: <20190622014026.88ddb051.freebsd@edvax.de> --7f2nj9APRmhK7jDVlyFLVMI5SMIhpUw7W Content-Type: text/plain; charset=utf-8 Content-Language: en-GB Content-Transfer-Encoding: quoted-printable On 22/06/2019 00:40, Polytropon wrote: > So, is it correct that there is no shell builtin mechanism for > this kind of "negative selection"? You can use a case statement like so: for f in $filelist ; do case f in "*a*") # Ignore files with 'a' in the name ;; "*") do something ;; esac done Cheers, Matthew --7f2nj9APRmhK7jDVlyFLVMI5SMIhpUw7W-- --Pz3BCGpGnlhe7EcYjPvFSTV3sfVGFxMh0 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEGfFU7L8RLlBUTj8wAFE/EOCp5OcFAl0OFMVfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDE5 RjE1NEVDQkYxMTJFNTA1NDRFM0YzMDAwNTEzRjEwRTBBOUU0RTcACgkQAFE/EOCp 5OdArQ//WhVyl4S8BKg99E925vnlP37MzqoyInRNbpPis/KCwuFMvwYkhGcxtjmd 5t4BcpQW53xdBv7Kx9rJNX8fvRCspOEQ4ln4FIyPGgNZmAt1Y/R47ASLGdaPFy90 cQfKKU3e7MUfVaKtx4lNo9i3xzKSPP6IL3WCnx1ZWyJpOiSN/46e/h+W8ykaApi0 j9PAlokrqFXUbM/gCH2XfQWDmGfWCaWL4oAx9cTI6TCpoL2J23707GclfE3FQ1fq Y4mspzKc7cgu2vug8dGvUf4i7IBhLdGD3P9vB6z6Q6lgH0FBvl92kAVl+HrZXw51 MxKAAcz985jhmLIQCm0lIoBw4/5kWA0Zkb85EhQEj6MVg73mhmREYPwOwXAEDLQj GtDZpYY0oYrn3lx2ovfwdTHjMzVqpWvBq/bejp/WqW8qmDWVsVtg2jd7QvWs1ruj Sw8LHc8wLxJHVP3OGHn3mg2tqtQ0OpPUW6uA5h3e3Zb+d9zkkbaUXq8T9pPeA3tl zjHwmn9b0Uu61oRH0wqmneHuJo5JmezSTkwdp02h6CvWfVSv/Akd5c7JGOZqT09m KEpLLcA/XmfTNWn9SmqixULg2jkFWIa1K6hKkMNBWtRjb98ho0UhcOEz0TtBJ1xE MGAXrYAghGgsl84bfPLdTXzNvdkEyISlTJ+5E2tU8liGaGxdXjc= =XSo6 -----END PGP SIGNATURE----- --Pz3BCGpGnlhe7EcYjPvFSTV3sfVGFxMh0-- From owner-freebsd-questions@freebsd.org Sat Jun 22 14:58:49 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C0C1015D664D for ; Sat, 22 Jun 2019 14:58:49 +0000 (UTC) (envelope-from freebsd-lists@gromit.dlib.vt.edu) Received: from gromit.dlib.vt.edu (gromit.dlib.vt.edu [128.173.49.70]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "gromit.dlib.vt.edu", Issuer "Chumby Certificate Authority" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id C2E3780C82 for ; Sat, 22 Jun 2019 14:58:48 +0000 (UTC) (envelope-from freebsd-lists@gromit.dlib.vt.edu) Received: from mather.gromit23.net (c-98-244-101-97.hsd1.va.comcast.net [98.244.101.97]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gromit.dlib.vt.edu (Postfix) with ESMTPSA id 7D45D1BA; Sat, 22 Jun 2019 10:58:42 -0400 (EDT) Content-Type: text/plain; charset=us-ascii; delsp=yes; format=flowed Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Subject: Re: ZFS replication suggestions From: Paul Mather In-Reply-To: Date: Sat, 22 Jun 2019 10:58:41 -0400 Cc: mike tancsa Content-Transfer-Encoding: 7bit Message-Id: <40958EDD-E330-4071-9145-2AA7A390FC4F@gromit.dlib.vt.edu> References: To: freebsd-questions@freebsd.org X-Mailer: Apple Mail (2.3445.104.11) X-Rspamd-Queue-Id: C2E3780C82 X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dmarc=fail reason="" header.from=vt.edu (policy=none) X-Spamd-Result: default: False [-3.16 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; NEURAL_HAM_MEDIUM(-0.99)[-0.995,0]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; MV_CASE(0.50)[]; IP_SCORE(-0.75)[ip: (-1.90), ipnet: 128.173.0.0/16(-0.95), asn: 1312(-0.85), country: US(-0.06)]; MIME_GOOD(-0.10)[text/plain]; DMARC_POLICY_SOFTFAIL(0.10)[vt.edu : No valid SPF, No valid DKIM,none]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; TO_MATCH_ENVRCPT_SOME(0.00)[]; MX_GOOD(-0.01)[chumby.dlib.vt.edu,gromit.dlib.vt.edu]; RCPT_COUNT_TWO(0.00)[2]; NEURAL_HAM_SHORT(-0.91)[-0.905,0]; R_SPF_NA(0.00)[]; RECEIVED_SPAMHAUS_PBL(0.00)[97.101.244.98.zen.spamhaus.org : 127.0.0.10]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:1312, ipnet:128.173.0.0/16, country:US]; MID_RHS_MATCH_FROM(0.00)[]; RCVD_TLS_ALL(0.00)[]; FROM_EQ_ENVFROM(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Jun 2019 14:58:49 -0000 mike tancsa wrote: > I have a new project coming up with replication.? In the past, I have > used various scripts out of ports, but was wondering what people are > using these days to sync their ZFS files systems between servers ?? It > will be about 10-40G in daily diffs.? Would like to send every 5-10 min > or so. Files being slightly out of sync for a short period of time is > not a big deal eg. in case of total failure on one box (e.g both power > supplies die) missing some data for a period of short time is tolerable > > ??? ---Mike I have been using sysutils/zrepl for replicating ZFS filesets from several systems to a backup machine. It is very flexible, supporting several transports; several job types (push, pull, etc.); several pruning options; separate pruning schedules for sending and receiving sides. It is designed to tolerate downtime on both the sending and receiving side. Underlying synchronisation is via ZFS snapshots and ZFS send/recv. It appears to be under active development. A possible downside is that it might be seen as more involved to set up (due to flexibility), but the documentation is good and examples are provided. Cheers, Paul. From owner-freebsd-questions@freebsd.org Sat Jun 22 15:04:22 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E02CE15D6950 for ; Sat, 22 Jun 2019 15:04:21 +0000 (UTC) (envelope-from odhiambo@gmail.com) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id 492DA81118 for ; Sat, 22 Jun 2019 15:04:21 +0000 (UTC) (envelope-from odhiambo@gmail.com) Received: by mailman.ysv.freebsd.org (Postfix) id 04D9115D694F; Sat, 22 Jun 2019 15:04:21 +0000 (UTC) Delivered-To: questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BB39615D694E for ; Sat, 22 Jun 2019 15:04:20 +0000 (UTC) (envelope-from odhiambo@gmail.com) Received: from mail-lj1-x22a.google.com (mail-lj1-x22a.google.com [IPv6:2a00:1450:4864:20::22a]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id A787C81117 for ; Sat, 22 Jun 2019 15:04:19 +0000 (UTC) (envelope-from odhiambo@gmail.com) Received: by mail-lj1-x22a.google.com with SMTP id m23so8521243lje.12 for ; Sat, 22 Jun 2019 08:04:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=TysHYhZ/qRRUuhSP8mJVp2Pvg8/+wT4au+T546xIT5M=; b=MxLp45MDLYxe82owrx3RLHKU/AiSUg47VAid7rn+hBTCg8Dg2cPal9F5gRoafsaqVm 2qaNs0AOtctcjIqP6z6nDYepjbTAdcETZVdtB6gEeCb6eUskrXOf3uke44/aypxUxivb SRuH8+0SUNU6dfhMNRmihwoRhd99RzLO6NJsko+S2o5G17KPDGuCtMMHvw1mONBZ4YXl w+pozOXpmmYx9nINCoeWg3zbscWt2cTatGnD/EBZFqE4oybmBNp63dwjT38zaBT55oLb gidH2QkpLAAP/UbfZ3k2EqvLNP+cR9NnLNVazzFIRyXdiWSv3g7lc7Ggi6X+rkywnjRE wiXA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=TysHYhZ/qRRUuhSP8mJVp2Pvg8/+wT4au+T546xIT5M=; b=E3BnKGAGZXk+D7uN9kV0Nnc1/1UOGC3UyO8qHYs9ba5tqNdDO0XCDCnWCsHb2HDebh 6Uskf5WP6fiCDfB38YGChBz4JINti0xEPTOrvXRMu65IP89iTjOvGJ4YScpBgY6RNhDY z3F/drEOmwGy11jB7rutbCbJ0o8E65eOgNmqinr7onnmGdgXHdtQBAONpfOS6fu0yQTd ygJFUuVvN2hm/iqpzPDeHn4MMIfyreDtbIwdLQ3aHOG/qKvysNZ40r+vBdXkJuK18cr7 JOYaStNL0Cbg5iE2xqD5FpDwJAlNEDLlgUeDfuLW0PGHWvGhgwk5WBOUipq2TspvvyhL 6JOw== X-Gm-Message-State: APjAAAUqnGj7U0OMv+IBdrTPk0SeC1ICxY6JaKKBrx9mjLx1OGEu6Z2E SEABxTnk3ZKXdPdgX9NDzVnLh0MnMrCSt7pID2kPiSiJ X-Google-Smtp-Source: APXvYqx19EdmrB3pHMeeFlB635ZyJEHxaVix48FvkPJ4gMZ77/6diycX6qgTMiYNOPNVWXUwNNLhqtpj30wCRseJKmY= X-Received: by 2002:a2e:9a87:: with SMTP id p7mr27418255lji.133.1561215858019; Sat, 22 Jun 2019 08:04:18 -0700 (PDT) MIME-Version: 1.0 From: Odhiambo Washington Date: Sat, 22 Jun 2019 18:03:38 +0300 Message-ID: Subject: local_unbound not working To: questions X-Rspamd-Queue-Id: A787C81117 X-Spamd-Bar: ------ Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20161025 header.b=MxLp45MD; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of odhiambo@gmail.com designates 2a00:1450:4864:20::22a as permitted sender) smtp.mailfrom=odhiambo@gmail.com X-Spamd-Result: default: False [-6.69 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20161025]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36]; FREEMAIL_FROM(0.00)[gmail.com]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[questions@freebsd.org]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; RCPT_COUNT_ONE(0.00)[1]; RCVD_TLS_LAST(0.00)[]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; RCVD_IN_DNSWL_NONE(0.00)[a.2.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.5.4.1.0.0.a.2.list.dnswl.org : 127.0.5.0]; MX_GOOD(-0.01)[cached: alt3.gmail-smtp-in.l.google.com]; TO_MATCH_ENVRCPT_ALL(0.00)[]; IP_SCORE(-2.81)[ip: (-9.11), ipnet: 2a00:1450::/32(-2.54), asn: 15169(-2.33), country: US(-0.06)]; NEURAL_HAM_SHORT(-0.87)[-0.869,0]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; RCVD_COUNT_TWO(0.00)[2]; DWL_DNSWL_NONE(0.00)[gmail.com.dwl.dnswl.org : 127.0.5.0] Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Jun 2019 15:04:22 -0000 Hi guys, I have a system which is an exact replica of the other except for the DNS names and IP addresses. The system is FreeBSD-12. Now, on the original system, local_unbound is working perfectly for name resolutions. On the replica, name resolution is not working. I have edited the IPs correctly in unbound.conf, resolv.conf, rc.conf - every other place I can think of. What would cause this failure?? -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", grep ^[^#] :-) From owner-freebsd-questions@freebsd.org Sat Jun 22 15:50:07 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 36AD915D7210 for ; Sat, 22 Jun 2019 15:50:07 +0000 (UTC) (envelope-from dave.mehler@gmail.com) Received: from mail-wm1-x335.google.com (mail-wm1-x335.google.com [IPv6:2a00:1450:4864:20::335]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4F5C182415 for ; Sat, 22 Jun 2019 15:50:06 +0000 (UTC) (envelope-from dave.mehler@gmail.com) Received: by mail-wm1-x335.google.com with SMTP id h19so11105241wme.0 for ; Sat, 22 Jun 2019 08:50:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=/AFli8RNY1cZ5UVKdaBqYbtHBWpfZeEcwK76/RWcHhs=; b=VrzPJ3pk8LrrPPrgAr6VUdeLwyFMuupwKWHx3edUvSUf3cQAUMcbBsLtUfURS137uR 5MoPp6Hdzga9TnMaVQ/eXgiSES6+ZypYRHYx8kEtNcXbZ53fG9RnwXYZFRP0mAJHd7Lt FI5CcC5SEsSelAPLQD2Ay/MOpHeYfK+/NpcVxp9Ob50wi5MrJhWJynLro+5Q06vfjC1r 5U0SuhrJPpnrp8TstJ77HXCHjQ9SGqBFl5hZ0ZisJvtMq2eEVfohyncO6kA89uX4ZUrJ qwduzOZ8k1EqqQd3U32FapayWE4WW0lqN2KEyeQcKexLOVqmmDwVJAj7XC8JWlahJ5Uy 0MBA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=/AFli8RNY1cZ5UVKdaBqYbtHBWpfZeEcwK76/RWcHhs=; b=dznLsIOgqc130joxGgmE+RVFsshY1fS3koauUqEaR1HL6UU6eYLf6nn6kFH4Cn5xxQ X5x+H5q6lNI4pAJdjcDnOOIFB9z9bCQqCimmEXzM+RWgIeV5ZUC7AzwcBpUH+lstWrGg 9ZcErwjIWBZi5uvgVgXsvk2BYdouGhSva22dzra4rYnTSnhDX5T+gfxmAwPEII3vHJ4J slcFg8r4cRR7F4kEEWqwuwJKHlg3xZg3vccclhz19HOlzqSq/bbu3u5KD3dccSwiLKUE mykpEbYCI+pCnDtkkjuGP1EiY0HWtY2OGGpYOy8Dq46amCIf/zyDJ7VhJu6mjQ5vGRou Ayng== X-Gm-Message-State: APjAAAVkquQokfejo+34fbzC3aeXB8Jc/wRGqWSJRhEOljJ8/KmTHCLW 4wiFpgRgnHAse7omtFRH5gtWpT0skoQnQKpiPlM09lyU X-Google-Smtp-Source: APXvYqyjqUE86mq93LdPZOqxBtSjqbro6UnbkxJmDL0FyxaBYPc9kZc+F4Uwfhxot57F/FDtf+OBb/Bpx/l3qFm/uKs= X-Received: by 2002:a1c:67c2:: with SMTP id b185mr7975861wmc.98.1561218604946; Sat, 22 Jun 2019 08:50:04 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:adf:a314:0:0:0:0:0 with HTTP; Sat, 22 Jun 2019 08:50:04 -0700 (PDT) From: David Mehler Date: Sat, 22 Jun 2019 11:50:04 -0400 Message-ID: Subject: mail server in jail, host pf, and fail2ban To: freebsd-questions Content-Type: text/plain; charset="UTF-8" X-Rspamd-Queue-Id: 4F5C182415 X-Spamd-Bar: ------ Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20161025 header.b=VrzPJ3pk; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of davemehler@gmail.com designates 2a00:1450:4864:20::335 as permitted sender) smtp.mailfrom=davemehler@gmail.com X-Spamd-Result: default: False [-6.86 / 15.00]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36]; FREEMAIL_FROM(0.00)[gmail.com]; RCVD_COUNT_THREE(0.00)[3]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; MX_GOOD(-0.01)[cached: alt3.gmail-smtp-in.l.google.com]; NEURAL_HAM_SHORT(-0.96)[-0.959,0]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; TAGGED_FROM(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com.dwl.dnswl.org : 127.0.5.0]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20161025]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; RCVD_TLS_LAST(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[5.3.3.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.5.4.1.0.0.a.2.list.dnswl.org : 127.0.5.0]; IP_SCORE(-2.89)[ip: (-9.54), ipnet: 2a00:1450::/32(-2.54), asn: 15169(-2.33), country: US(-0.06)] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Jun 2019 15:50:07 -0000 Hello, I've got a pf/fail2ban/jail/postscreen question. I'm running a mail system in a FreeBSD jail, and on the host system i'm using the pf firewall. What I'm getting are connections to my jail's postscreen port 25, what i'd like to get done is to try to get those ips scanned for on the host and banned by fail2ban and pf. Suggestions welcome. Thanks. Dave. From owner-freebsd-questions@freebsd.org Sat Jun 22 15:53:24 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8CBF615D76C8 for ; Sat, 22 Jun 2019 15:53:24 +0000 (UTC) (envelope-from trond.endrestol@ximalas.info) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id 09E2D82967 for ; Sat, 22 Jun 2019 15:53:24 +0000 (UTC) (envelope-from trond.endrestol@ximalas.info) Received: by mailman.ysv.freebsd.org (Postfix) id C271115D76C4; Sat, 22 Jun 2019 15:53:23 +0000 (UTC) Delivered-To: questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id AF75A15D76C3 for ; Sat, 22 Jun 2019 15:53:23 +0000 (UTC) (envelope-from trond.endrestol@ximalas.info) Received: from enterprise.ximalas.info (enterprise.ximalas.info [IPv6:2001:700:1100:1::8]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "ximalas.info", Issuer "Hostmaster ximalas.info" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 0E71A82963 for ; Sat, 22 Jun 2019 15:53:22 +0000 (UTC) (envelope-from trond.endrestol@ximalas.info) Received: from enterprise.ximalas.info (Ximalas@localhost [127.0.0.1]) by enterprise.ximalas.info (8.15.2/8.15.2) with ESMTPS id x5MFrFX6034810 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NO) for ; Sat, 22 Jun 2019 17:53:15 +0200 (CEST) (envelope-from trond.endrestol@ximalas.info) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ximalas.info; s=default; t=1561218795; bh=R2zpnfqqVZblRoJ0X6cC2pFc2Sd7ldfeW+kUYNcF47k=; h=Date:From:To:Subject:In-Reply-To:References; b=mX5m902Pw9Bo38DkZ4tDSvzAv7zmbiVMMOltDPXrlTRK56La1Yk5zGkFD9rAlYQnx TWcYUVr9BcB/T3F8RTegwEOGLXo+Sesw770Tl36kJ3FpMY1KUV7dh0WsXIYRDL5pLQ 8CkWKacKBx395NFuXyzqgN711Ec4RPW2Aun2dCEdjFTlQyLhQIlgEkbtGWwBZJGfYH aABLUV4azq3AHRtW8muKOv9afgg8liMZVA9UwWj/c2pHAXTBj+sVEFBPCKUKgVDF4R TNw8DybMPjg2nLtwNAe/E7nxOFCgxSG4E0ZtNBCe41xKTn9XdJXsz2K01Yf4px26Go 3gNDmhYF5xNNQ== Received: from localhost (trond@localhost) by enterprise.ximalas.info (8.15.2/8.15.2/Submit) with ESMTP id x5MFrEZ6034807 for ; Sat, 22 Jun 2019 17:53:14 +0200 (CEST) (envelope-from trond.endrestol@ximalas.info) X-Authentication-Warning: enterprise.ximalas.info: trond owned process doing -bs Date: Sat, 22 Jun 2019 17:53:14 +0200 (CEST) From: =?UTF-8?Q?Trond_Endrest=C3=B8l?= Sender: Trond.Endrestol@ximalas.info To: questions Subject: Re: local_unbound not working In-Reply-To: Message-ID: References: User-Agent: Alpine 2.21.9999 (BSF 287 2018-06-16) OpenPGP: url=http://ximalas.info/about/tronds-openpgp-public-key MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII X-Spam-Status: No, score=-1.2 required=5.0 tests=ALL_TRUSTED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on enterprise.ximalas.info X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Jun 2019 15:53:24 -0000 On Sat, 22 Jun 2019 18:03+0300, Odhiambo Washington wrote: > I have a system which is an exact replica of the other except for the DNS > names and IP addresses. > The system is FreeBSD-12. > Now, on the original system, local_unbound is working perfectly for name > resolutions. > On the replica, name resolution is not working. > I have edited the IPs correctly in unbound.conf, resolv.conf, rc.conf - > every other place I can think of. > What would cause this failure?? Wildly speculating here of course, does the replica live in the same subnet as the original, and is the replica allowed to speak to the external DNS service? Any typos in the IP address, netmask, gateway, or name of the interface(s)? Are the MAC addresses unique in either case? Is the switchport placed in shutdown, assuming a manageable/programmable switch? -- Trond. From owner-freebsd-questions@freebsd.org Sat Jun 22 19:07:47 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 25B7715B3E67 for ; Sat, 22 Jun 2019 19:07:47 +0000 (UTC) (envelope-from freebsd@theory14.net) Received: from bacon.theory14.net (bacon.theory14.net [45.55.200.27]) by mx1.freebsd.org (Postfix) with ESMTP id B18C988370 for ; Sat, 22 Jun 2019 19:07:45 +0000 (UTC) (envelope-from freebsd@theory14.net) Received: from remote.theory14.net (remote.theory14.net [173.79.103.82]) by bacon.theory14.net (Postfix) with ESMTPSA id D81A5125E80; Sat, 22 Jun 2019 15:07:38 -0400 (EDT) Received: from grackle.int.theory14.net (grackle.int.theory14.net [192.168.10.52]) by remote.theory14.net (Postfix) with ESMTPS id A0F649595; Sat, 22 Jun 2019 15:07:38 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=theory14.net; s=mail; t=1561230458; bh=CWV1H7CmasmKXEqbvs/R3m3y7muEAMYmIskFXzbmXQc=; h=Subject:From:In-Reply-To:Date:Cc:References:To; b=LAb8yBdbFNMPXncDADyqmnyo+vwxEGJiUoLE3q3npNzS5oT2W7OPvzVBbwFqpGoFH THZ6kti5QcJIpsrsC5LJ9JAZ6+63VlfbQ+WUUKaFfaxzuFKGxl+sNHek5LzUbK6q9z 8ylEwGAF7sKst1xmVIAFI5bvL1lr48O5oEswAyas= Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Subject: Re: mail server in jail, host pf, and fail2ban From: Chris Gordon In-Reply-To: Date: Sat, 22 Jun 2019 15:07:38 -0400 Cc: freebsd-questions Content-Transfer-Encoding: quoted-printable Message-Id: References: To: David Mehler X-Mailer: Apple Mail (2.3445.104.11) X-Rspamd-Queue-Id: B18C988370 X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=theory14.net header.s=mail header.b=LAb8yBdb; dmarc=pass (policy=none) header.from=theory14.net; spf=pass (mx1.freebsd.org: domain of freebsd@theory14.net designates 45.55.200.27 as permitted sender) smtp.mailfrom=freebsd@theory14.net X-Spamd-Result: default: False [-2.94 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_SPF_ALLOW(-0.20)[+mx]; MV_CASE(0.50)[]; RCVD_COUNT_THREE(0.00)[3]; TO_DN_ALL(0.00)[]; MX_GOOD(-0.01)[bacon.theory14.net,sausage.theory14.net]; DKIM_TRACE(0.00)[theory14.net:+]; RCPT_COUNT_TWO(0.00)[2]; NEURAL_HAM_SHORT(-0.78)[-0.780,0]; DMARC_POLICY_ALLOW(-0.50)[theory14.net,none]; FREEMAIL_TO(0.00)[gmail.com]; RCVD_NO_TLS_LAST(0.10)[]; FROM_EQ_ENVFROM(0.00)[]; IP_SCORE(0.21)[asn: 14061(1.13), country: US(-0.06)]; MIME_TRACE(0.00)[0:+]; RECEIVED_SPAMHAUS_PBL(0.00)[82.103.79.173.zen.spamhaus.org : 127.0.0.10]; ASN(0.00)[asn:14061, ipnet:45.55.192.0/18, country:US]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.96)[-0.962,0]; R_DKIM_ALLOW(-0.20)[theory14.net:s=mail]; FROM_HAS_DN(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; TAGGED_RCPT(0.00)[]; MIME_GOOD(-0.10)[text/plain]; TO_MATCH_ENVRCPT_SOME(0.00)[] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Jun 2019 19:07:47 -0000 Assuming your jail host can see the files inside the jail -- = specifically the jail's /var/log/maillog -- you could run fail2ban on = the jail host where it has access to pf and simply point it to the = jail's /var/log/maillog. For example, assume your mail jail is named mailserver. (NOTE: I'm = using iocage to manage my jails so some of the path will be part of = iocage's standards.) On your jail host, in = /usr/local/etc/fail2ban/jail.local, you would use a stanza such as: [postfix-postscreen] enabled =3D yes port =3D smtp,456,submission logpath =3D /iocage/jails/mailserver/root/var/log/maillog backend =3D %(postfix_backend)s Chris * By "jail host" I mean the machine running the jails. > On Jun 22, 2019, at 11:50 AM, David Mehler = wrote: >=20 > Hello, >=20 > I've got a pf/fail2ban/jail/postscreen question. I'm running a mail > system in a FreeBSD jail, and on the host system i'm using the pf > firewall. What I'm getting are connections to my jail's postscreen > port 25, what i'd like to get done is to try to get those ips scanned > for on the host and banned by fail2ban and pf. >=20 > Suggestions welcome. > Thanks. > Dave. > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to = "freebsd-questions-unsubscribe@freebsd.org" From owner-freebsd-questions@freebsd.org Sat Jun 22 20:28:46 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E78EB15B5C6E for ; Sat, 22 Jun 2019 20:28:45 +0000 (UTC) (envelope-from njt@ayvali.org) Received: from zaph.org (zaph.org [199.48.132.46]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "zaph.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id E3F338B2DF for ; Sat, 22 Jun 2019 20:28:43 +0000 (UTC) (envelope-from njt@ayvali.org) Received: by zaph.org (Postfix, from userid 1001) id 7755991A7F; Sat, 22 Jun 2019 13:28:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=ayvali.org; s=zaph; t=1561235315; bh=HkNPmN6LFQNcLxTTqZhw9KThizArnAeKYrIWpXTNrSk=; h=Date:From:To:Subject:References:In-Reply-To; b=EPamPRH4CdABm6uV1pXRDjJ84/p6liNUg/l99LLeNAWm9vViTXbvRVVxCpPPuJX9N 18pAUk2IPin7hDrz8nRixhDSHIXEK/pbikPHPxFt3YuzKDLMmcmiPaTz8iXcjSD2xQ DyadlKi9KvhY5hUpM7jHFsYUU3yzDMQSDYPTK2Ww= Date: Sat, 22 Jun 2019 13:28:35 -0700 From: "N.J. Thomas" To: freebsd-questions@freebsd.org Subject: Re: ZFS replication suggestions Message-ID: <20190622202835.GN43212@ayvali.org> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.11.4 (2019-03-13) X-Rspamd-Queue-Id: E3F338B2DF X-Spamd-Bar: ------ Authentication-Results: mx1.freebsd.org; dkim=pass header.d=ayvali.org header.s=zaph header.b=EPamPRH4; dmarc=pass (policy=none) header.from=ayvali.org; spf=pass (mx1.freebsd.org: domain of njt@ayvali.org designates 199.48.132.46 as permitted sender) smtp.mailfrom=njt@ayvali.org X-Spamd-Result: default: False [-6.03 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[ayvali.org:s=zaph]; FROM_HAS_DN(0.00)[]; DWL_DNSWL_MED(0.00)[ayvali.org.dwl.dnswl.org : 127.0.6.2]; R_SPF_ALLOW(-0.20)[+a]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; RCVD_DKIM_ARC_DNSWL_MED(-0.50)[]; RBL_COMPOSITE_RCVD_IN_DNSWL_MED_DWL_DNSWL_MED(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; IP_SCORE(-1.54)[ipnet: 199.48.132.0/22(-3.76), asn: 36236(-3.88), country: US(-0.06)]; DKIM_TRACE(0.00)[ayvali.org:+]; RCVD_IN_DNSWL_MED(-0.20)[46.132.48.199.list.dnswl.org : 127.0.6.2]; DMARC_POLICY_ALLOW(-0.50)[ayvali.org,none]; MX_GOOD(-0.01)[khwab.org,zaph.org]; NEURAL_HAM_SHORT(-0.78)[-0.778,0]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:36236, ipnet:199.48.132.0/22, country:US]; MID_RHS_MATCH_FROM(0.00)[]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Jun 2019 20:28:46 -0000 * mike tancsa [2019-06-21 15:25:20-0400]: > was wondering what people are using these days to sync their ZFS files > systems between servers? I use a combination of syncoid (the replication subsystem of Sanoid) and zxfer. Syncoid doesn't delete snapshots it has not created itself, so because I use zfstools to create my snapshots, syncoid won't delete these --- I don't consider this a bad thing necessarily, the author is very cautious. So what I do is use syncoid to replicate my snapshots to a backup server (called A), and use zxfer to prune older snapshots. The zxfer runs right after syncoid, so it really only just deleting old snaps. (NB: This is technically not a backup on server A, it's just a sync.). I use syncoid to replicate everything on backup server A to two other backup servers (B and C, with server C being offsite), ie. backups of the backup server. There is no automatic deletion of older snaps on these servers. So this is my real backup. Every couple of months, I'll go in and manually prune older stuff on B and C. I'm told that once ZFS gets above 10,000 snapshots, bad things happen, so I try not to go above 10k snaps on any one partition. Manually pruning by hand about every 2 months seems to work fine. The reason I don't just use zxfer for everything: syncoid uses mbuffer and lzop, so it's very fast, it can also resume partially replicated transfers and is aware of zfs bookmarks, etc. One last thing to note, zfstools and zxfer is in ports. Sanoid is not. I clone sanoid from Github, and use a small patch to fix the shebang line and some minor things in the syncoid script to make it work on BSD (it's written in Perl and assumes Linux). Thomas From owner-freebsd-questions@freebsd.org Sat Jun 22 23:27:33 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 969E215BD0B1 for ; Sat, 22 Jun 2019 23:27:33 +0000 (UTC) (envelope-from dave.mehler@gmail.com) Received: from mail-wr1-x432.google.com (mail-wr1-x432.google.com [IPv6:2a00:1450:4864:20::432]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 808D76ADA2 for ; Sat, 22 Jun 2019 23:27:32 +0000 (UTC) (envelope-from dave.mehler@gmail.com) Received: by mail-wr1-x432.google.com with SMTP id f9so9956424wre.12 for ; Sat, 22 Jun 2019 16:27:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=iOd/FnG1yY1pzXSXiGPBnq9LllMCuDD3PVT++pR/G/g=; b=CaFPjV9I+a5wBECvHFe/b6aFSeGE6KVna6fzcxHVbDBmIXnUPCDqxddheY25EQvfcq sbH2j2ejRqusdH4yvxrdC0rNu3TBtIcw25voTJNZlkbx6pO/UXicxzwnxs/pGRGUpglL MZMGXL+BfxgL1aezpaBziPjeuyF9HxB8zO2xzNkuCDYGRyuQbKSCoQlLPIqFgs36g984 Rh+kxDRh8JKyNk3p8ENHzl4GoWfqp7nM5ob/zhC2sWAfWJFVFsl0nMLpTrUeNkIhz/O9 BUfbqfZebtRgAGMJ7ljZNPkYRmOmUWZ9I46COML1JzkocBRxyfGFm1ZV2aDabUbcb6M/ 6BWA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=iOd/FnG1yY1pzXSXiGPBnq9LllMCuDD3PVT++pR/G/g=; b=Rvq5EIjQHr6YWk7ZLO+f1kGZGPofQmY2ZUxR5hsKibuZabzcJ3MNaeJU0FvtjSqZEV DJH6VZ50h/BoiJUIyxXrBYlsU9sM4pDJTnopasbnokzlowiZrBF3knPCCOILncYxgbbn km0TLM+7yri9Y6TNWiGInHsvbvQNtM2Umegp6/kMU+MDKmWtUVSshDYvb4n88xzB4Jqc UEw+VELRwdXlh6ailH0bEYNxZA0S4kOoiKxLp9uaSM5rv35NIhrxtkH1B2Zf0rh+O+uW YGHn4lQiJczFsbfEiFCZ/rsJpFByK7ZUOKnLhKNeZ17sMsoVNKmsSgF7yoA5yd6M7aLE b6fg== X-Gm-Message-State: APjAAAUUdchLadaXvx+AMesdfqgQRjoiokWPK7lLJHCh4MHjhlRbFbZH SHzwEej5Jo0J4GyXD1ej1krvG7ah9n6z0q4tWbsSZmaJ X-Google-Smtp-Source: APXvYqxD1Cnicqm2cDJ9qBb81PQo3g+kXHeAD1ESRaHvFmP8AcVBt0mAOCsFJW7kKT3dCOVzIBHS8/VlFuZb226jax8= X-Received: by 2002:a5d:5542:: with SMTP id g2mr26027522wrw.232.1561246051252; Sat, 22 Jun 2019 16:27:31 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:adf:a314:0:0:0:0:0 with HTTP; Sat, 22 Jun 2019 16:27:30 -0700 (PDT) From: David Mehler Date: Sat, 22 Jun 2019 19:27:30 -0400 Message-ID: Subject: jail issue on vps, daemons dying To: freebsd-questions Content-Type: text/plain; charset="UTF-8" X-Rspamd-Queue-Id: 808D76ADA2 X-Spamd-Bar: ------ Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20161025 header.b=CaFPjV9I; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of davemehler@gmail.com designates 2a00:1450:4864:20::432 as permitted sender) smtp.mailfrom=davemehler@gmail.com X-Spamd-Result: default: False [-6.90 / 15.00]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36]; FREEMAIL_FROM(0.00)[gmail.com]; RCVD_COUNT_THREE(0.00)[3]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; MX_GOOD(-0.01)[cached: alt3.gmail-smtp-in.l.google.com]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; NEURAL_HAM_SHORT(-0.99)[-0.995,0]; FROM_EQ_ENVFROM(0.00)[]; RCVD_TLS_LAST(0.00)[]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; TAGGED_FROM(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com.dwl.dnswl.org : 127.0.5.0]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20161025]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; IP_SCORE(-2.90)[ip: (-9.56), ipnet: 2a00:1450::/32(-2.54), asn: 15169(-2.33), country: US(-0.06)]; RCVD_IN_DNSWL_NONE(0.00)[2.3.4.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.5.4.1.0.0.a.2.list.dnswl.org : 127.0.5.0] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Jun 2019 23:27:33 -0000 Hello, I'm running FreeBSD on a vps. I've got it as a host system and am running three FreeBSD jails. I'm noticing and I've not been able to pin down times that sometimes functionality won't be working, i'll check the appropriate jail and find that a server is not running. No configuration changes have been made, i'll restart it, then a while later, same thing. I'm thinking either CPU or resource utilization ram wise, can I limit each jail's individual resource usage on the host? Thanks. Dave.