IPsec VPN and NAT

At work we run a number of IPsec VPN tunnels to peers all over the world and we have always been concerned about possible RFC1918 address space collisions between our network and one of the other companies - it is surprising how often administrators keep the default 192.168.0.0/24 network! To the best of our knowledge on OpenBSD there was no good technical solution to the problem, and migrating the whole partner network to a unique address space is often politically unacceptable or too expensive.

(more...)

Linux VS Bsd - Which One Is Better

An interesting article about the differences between GNU\Linux and *BSD.

Open source Mono framework brings C# to iPhone and Wii

"Mono, an open source implementation of .NET runtime, is bringing Microsoft's development technologies to some unexpected places, including the iPhone, Android, and the Wii.

According to Novell's lead Mono developer, Miguel de Icaza, several applications in Apple's App Store are powered by Mono. This might come as a bit of a surprise to those familiar with Apple's highly restrictive application inclusion policies, because the company strictly prohibits developers from using interpreted languages and third-party runtime environments—a constraint that largely rules out technologies like .NET and Java."

(more...)

FreeBSD Security Advisory

FreeBSD-SA-09:01.lukemftpd
FreeBSD-SA-09:02.openssl

How to load content via AJAX in jQuery

This tutorial will show you How to load content via AJAX in jQuery.

FreeBSD 7.1-RELEASE Available

The FreeBSD Release Engineering Team is pleased to announce the availability of FreeBSD 7.1-RELEASE. This is the second release from the 7-STABLE branch which improves on the functionality of FreeBSD 7.0 and introduces some new features. Some of the highlights:

• The ULE scheduler is now the default in GENERIC kernels for amd64 and i386 architectures. The ULE scheduler significantly improves performance on multicore systems for many workloads.

• Support for using DTrace inside the kernel has been imported from OpenSolaris. DTrace is a comprehensive dynamic tracing framework.

• A new and much-improved NFS Lock Manager (NLM) client.

• Boot loader changes allow, among other things, booting from USB devices and booting from GPT-labeled devices.

• The cpuset(2) system call and cpuset(1) command have been added, providing an API for thread to CPU binding and CPU resource grouping and assignment.

• KDE updated to 3.5.10, GNOME updated to 2.22.3.

• DVD-sized media for the amd64 and i386 architectures

For a complete list of new features and known problems, please see the online release notes and errata list, available at:

* http://www.FreeBSD.org/releases/7.1R/relnotes.html
* http://www.FreeBSD.org/releases/7.1R/errata.html

(more...)

Volunteers Needed to add Subtitles to Conference Videos

We now have over 23 videos uploaded to the BSD Conferences video channel from MeetBSD, NYCBSDCon, and other BSD conferences.

I'd really like to add subtitles to the YouTube metadata as this has been requested by several users. Once we have subtitles they will be autotmatically machine translated so that users can choose captions in the language they are most comfortable with.

(more...)

Minor heads up: OpenBSM parts updated

Just a minor heads up that I've done an import of OpenBSM 1.1 alpha 4 into head, with the intent of shaking out bugs so that we can ship OpenBSM 1.1 in 7.2-RELEASE in a few months. There are a number of changes in 1.1, including a libauditd so that launchd on Mac OS X can link parts of auditd into it directly, binary format changes (largely enhancements), etc. Please send feedback to trustedbsd-audit@TrustedBSD.org if you run into any issues.

(more...)