meena ^

"the forbin project"

up there with darkstar,soylent green, thx1138,planet of the apes,silent running, etc...

del taco vs taco bell?

vim vs emacs

rennj: Sadly, The Forbin Project isn't available on DVD in widescreen that I can see, just this pan and scan nonsense.

Ah, I'm wrong.

why does local-unbound-conf show logfile: "/etc/unbound/unbound.log" and not use /var/?

polyex: looks like it's just an example with chroot

what's worse, the man page has a lot of unexpanded variables (e.g. @UNBOUND_CHROOT_DIR@, @UNBOUND_USERNAME@)

@.@

yuripv termbin.com/aiez any obvious probs or ways i can make it better?

I'm running into a weird issue with "edns" queries if anyone is familiar with it.

If I try to do a query with "drill kroger.com TXT @localhost" I get a SERVFAIL. Yet it works with "drill rs.dns-oarc.net TXT @localhost".

I am running BIND 9.16.26 on 12.2-RELEASE-p14

Logs simply show "(kroger.com): query failed (timed out) for kroger.com/IN/TXT at query.c:7369"

tuaris: is that particular request supposed to work anyway?

or is your machine the authoritative server for that domain

oh

that is a whole load of TXTs

tuaris: you should probably write that off because it is not your local issue

something is funky with that domain and TXT queries fail for me via my own recursive resolver and via my ISP's

What is with "already locked" or "already unlocked" message -- termbin.com/ax1x -- when the command shows that a package was not already (un)locked? Does "pkg" not even remember the recent action? Or is something else going on?

Remilia: the weird part is that Google, OpenDNS, and Cloudflare are able to resolve it

tuaris: that might be cached

tuaris: try `drill kroger.com TXT @sage.kroger.com.` or thyme.kroger.com

or just host -t txt kroger.com sage.kroger.com

above are the authoritative nameservers for the domain, from whois and host -t ns

hmm, interesting. that returns a truncated response

had to use `-b4096`

I get connection timed out haha

yeah the `host` command times out. drill is just truncated

truncated is expected, you cannot fit that in UDP

oh

tuaris: it makes sense, they are either blocking TCP 53 or simply do not listen on that port

host will try TCP if it gets a truncated response

Oh... hmmm. So perhaps my local resolver is trying to fall back to TCP as well. I wonder if I need to configure my local resolver to support larger buffer for UDP responses

aye, their nameservers do not respond on 53

tcp

tuaris: if you mean your local unbound in recursive mode, I do not think there is an option to force it to use edns0

This page is making more sense to me now: kb.isc.org/docs/aa-01219

Title: Refinements to EDNS fallback behavior can cause different outcomes

I'm using BIND

I don't have unbound enabled

I see

nsd + unbound here

for unbound I would probably just use a workaround of forwarding everything about the domain in question to a public resolver

ah, some progress. I added "server 0.0.0.0/0 { edns-udp-size 4096; };" to my named.conf and at least now I am gettig a truncated response

and now if I do "drill -b4096 kroger.com TXT @localhost" I get the full response

compat11x does not exist on freebsd13?

maerwald, it does. It's uppercase in kernel config files, though. COMPAT_FREEBSD11.

tuaris: making that global might bite you

Hi all. I have no experience in BSDs but wanna try out. Would you recommend it to a Debian user as a daily driver?

it depends where you're driving

just basic internet usage and I do some python scripting for data analysis at work in a windows machine(manuf. business), at home I have my debian machine doing the work. thats it.

sokrat: of course

Never run Debian strictly speaking, but I switched my daily driver from Ubuntu to a FreeBSD derivative in April 2019, then to straight FreeBSD in October 2019. Never regreted it.

V_PauAmma_V why not Debian?

I wanted something that worked tolerably for me with a GUI. Ubuntu is the first I tried, and I never looked beyond it. Can't remember whether in... I think 2011 or 2012, I knew much about Linux distros, but I don't think I could have evaluated or compared them and selected one more closely fitting.

love how FreeBSD, NetBSD and OpenBSD's ifconfig output is really similar, but also subtly different.