@stefano #ArchLinux works well but setup is really not simple. #NFTables or #IPTables are more complicated for me than #PF. Even #IPFW is easier to understand than NFTables or IPTables.
I already managed a small server powered by #FreeBSD: I love to manually install and setup my apps to understand who they work. I learn a lot this way.
#archlinux #nftables #iptables #pf #ipfw #freebsd
#FreeBSD30 timeline - a few things that happened during these 30 #FreeBSD years:
#UNIX #BSD #MULTICS #1BSD #2BSD #42BSD #43BSD #386BSD #ipfw #FreeBSDCon #BSDCON #ports #jails #FreeBSDFoundation #kqueue #EuroBSDCon #CoreTeam #AsiaBSDCon #BSDCAN #pf #OpenBSD #ZFS #DTrace #VNET #Capsicum #Cheri #Poudriere #clang #llvm #subversion #OpenZFS #git
#freebsd30 #freebsd #unix #bsd #multics #1bsd #2bsd #42bsd #43bsd #386bsd #ipfw #freebsdcon #bsdcon #ports #jails #freebsdfoundation #kqueue #eurobsdcon #coreteam #asiabsdcon #bsdcan #pf #openbsd #zfs #dtrace #vnet #capsicum #cheri #poudriere #clang #llvm #subversion #openzfs #git #freebsdday
After seeing more about that Apple scanning thing, and ye olde #LittleSnitch I couldn't help but wonder:
Hasn't someone somewhere come up with an alternative to Little Snitch in the libre/free open source software world? After all, #macOS uses #pf (from #OpenBSD) these days (though previously it was using #ipfw from #FreeBSD).
The answer is yes: #LuLu: https://objective-see.org/products/lulu.html
The associated #GitHub repo: https://github.com/objective-see/LuLu
It has a #Homebrew formula, no #MacPort, I may have to fix that.
#littlesnitch #macos #pf #openbsd #ipfw #freebsd #lulu #github #homebrew #macport
While where on the topic of #Firewalls:
If there’s anyone out there who needs a primer to #FreeBSD’s #IPFW, a wrote a little tutorial a while back.
“Protecting a single host with IPFW”
https://hsm.tunnel53.net/article/ipfw-single-host/
Enjoy 🤓
#firewalls #freebsd #ipfw #HyperSuperMeta
After a good night, I read again my #ipfw rules an see some syntax errors.
I used:
ipfw -q allow ipv6-icmp from any to { me or me6 } in via $eif
Instead of:
ipfw -q allow ipv6-icmp from any to me6 in via $eif
Everything works fine during the last two hours.
Thanks for your feedback.
:blobthinkingeyes: I got an issue on my VPS. It randomly loose IPv6 connectivity after some time and until I reboot it...
Previously I lost the connectivity after ~45 and ~20 minutes of uptime.
I use #freebsd with #ipfw on top of Proxmox.
I'm curious about what can go wrong here. Let's find out :flan_hacker: