00:16:41 its almost as if they forked off the same base code or something 00:16:44 perhaps even decades ago 00:58:22 take it to #conspiracy 01:00:20 Yeah, the forks never happened, man! 01:01:07 FlatearthBSD 01:01:44 lol 01:01:56 That was forked from DragonFly 01:53:48 what th- 02:44:57 btx loder lopcks up when i try to boot an old freebsd install on a new motherboard 02:45:27 ?_? 03:08:09 when local_unbound shits out, domains stop resolving, and i lose connection to irc and other shit, the only log item is "local-unbound[10502:0] info: generate keytag query _ta-4f66. NULL IN" that enough to figure out wtf is going wrong? 03:08:48 it's like 2-3 times a day i gotta service local_unbound restart 03:16:30 polyex: You can use BIND instead, for anything/everything unbound does. 03:17:40 i can also switch to linux.. (not that helpful) 03:19:10 That'd be a bit more work to swap out a resolver. 03:19:46 I stopped using unbound when I found a bug, looked at the code, and what I found turned into a CVE. Moved back to BIND for the purpose, been happy ever since. 03:23:19 k now im listening. i had time issues with ntpd switched to chrony now i'm gucci. local_unbound is the last flakey thing i have in my whole fbsd stack so i'm open to dropping it. but bind is a big pig last i remember so is there a "chrony of dns"? 03:27:09 I've got BIND service up a couple zones, under 10MB resident. Secondary for the same, roughly the same memory used. CPU use negligible. 03:29:15 length of config? 03:30:06 Not a ton added to the base config. More config than unbound? Sure. 03:32:31 Hm, memory usage seems to scale with zone size. Just looked at an internal server with a decent number of entries, and it was using a bunch more RAM. 03:34:35 im trying to remember a 3rd dns server option that ppl told me about... it's what i could use to blacklist domains, like "*.google.com", so dns for anything in that domain never resolved. you know what that is? maybe it's time to try that 1 03:43:09 powerdns? 03:43:58 powerdns and bind are the big ones, and there's other stuff, like dnsmasq, unbound, other stuff. 03:44:57 polyex: https://en.wikipedia.org/wiki/Comparison_of_DNS_server_software 03:44:58 Title: Comparison of DNS server software - Wikipedia 03:46:57 i think it was dnsmasq 03:48:31 is there any command-line search like locate (i.e., with database) that can search certain paths (so like find but faster?) 03:48:45 MelMalik: can i install a new version of btx bootloader on an old freebsd install, say version freebsd 9.0 03:50:11 https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=dnsmasq isnt too bad right? 03:50:12 Title: CVE - Search Results 03:57:19 CCFL_Man, idk 04:00:05 have you had that problem before? 04:07:39 No 04:08:02 polyex: bind can be used for your purpose. i think the standard approach is to use a 'response policy', indicating a zone that contains the domains you want to block. it will use more memory with large zones, but i think usually most of it will end up paged out if necessary- maybe only if usage is low enough 04:09:04 i wanna block any domain from resolving, then just whitelist those that i do want resolved 04:09:37 i'm not sure how to do such a default block, but if it can be specified in a zone file, it can be blocked with response policy 04:11:31 to block, it's something like: zone "badlist" {type master; file "/usr/local/etc/namedb/BLOCKED"; allow-query {none;}; }; response-policy { zone "badlist"; }; -- this is mostly just something i found on the internet. your BLOCKED zone should associate each domain to be blocked with something like 127.0.0.1 04:12:00 i think you can find some more info on the internet, and there is also a bind support channel 04:13:21 then whitelist is just, you specify the zones manually and set forward only etc. 04:30:52 my consolidated local-unbound config is https://termbin.com/0dx7j there anything that would cause unbound to stop resolving domains a couple times a day till i service local_unbound restart? 06:26:51 Anyone keep getting the message "ld-elf.so.1: /lib/libc.so.7: version FBSD_1.7 required by /usr/local/bin/alacritty not found" or something similiar? 06:39:49 happens when you didn't update your system 07:06:54 llua: I did pkg update and then pkg upgrade. 07:07:05 What step am I missing? 07:07:21 updating the base system 07:08:47 llua: Looking through the docs now. 07:09:51 I should be able to just do "freebsd-update fetch" and then "freebsd-update install". 07:10:47 polyex: for home use dnsmasq is decent 07:11:18 I mean, openwrt is on millions of devices and it just works 07:12:10 does unbound fail for you with no external changes like interfaces coming down or up? 07:12:45 * Remilia uses unbound from ports though 07:14:54 ya doesnt seem like anything else fails. gonna test tho next time dns is failing i'll try pinging an IP to see if i still have network 07:17:35 local-unbound is like 6 months behind so maybe i'll switch to pkgs unbound 07:17:40 any risks with that? 07:18:01 I am not sure what you mean when you say risks 07:18:19 k, any downside to using local-unbound instead of from pkgs 07:18:21 ? 07:18:27 I use unbound from ports because I run it as a resolver for my entire LAN which the local-unbound set-up is not designed for 07:18:49 local-unbound is a turn-key solution, essentially 07:19:07 it is supposed to just work out of the box 07:19:19 does my local-unbound config https://termbin.com/0dx7j have any obvious probs? 07:19:29 there is not much there 07:19:32 so probably not 07:21:25 polyex: next time you have issues, try looking at tcpdump 07:21:35 what for? 07:21:40 havent used it a lot 07:21:42 just see what it is doing 07:22:13 just something like `tcpdump -vvvni port 53` 07:22:43 lo0 for seeing what is happening when stuff on your FreeBSD host queries DNS 07:22:52 and your external for when you want to see if it sends out anything 07:23:23 use host or drill to generate requests while tcpdump is running 07:23:45 i. e. `host ibm.com 127.0.0.1` 07:26:03 ok tyvm 07:26:26 polyex: when everything is working you should see something like this: https://paste.ee/p/GkuZO 07:26:27 Title: Paste.ee - View paste GkuZO 07:27:15 1st section is host asking local_unbound, 2nd is local_unbound asking full-blown unbound 07:28:39 full-blown unbound is on another box right? 07:35:38 on my router 07:35:48 you can see IP addresses there 07:35:56 10.10.0.1 is the router 07:36:46 in any case, if during those outages your unbound is sending queries on the external interface but does not get any replies, it is not its fault 07:37:39 you may want to add a host filter for the external interface though, so `port 53 and host ` 07:41:49 got it, ty!! 09:11:02 Where is scopeid documented? it's not documented in ifconfig 09:11:23 I sort of understand that the different numbers should mean link, host, etc… but I don't know which number means what 09:35:57 hrm… so far, it's different on different OSes… 09:45:30 It's either link-local, in which case it's the index of the interface (if_nametoindex(3)), or site-local, in which case it's… the scope-id… 12:46:17 meena, grep -i scope /usr/include/netinet6/in6.h 13:04:28 V_PauAmma_V: I found out that when i fed the address to Python's IPv6Interface it told me me what scope the IP has 13:25:04 * V_PauAmma_V nods at meena. I wouldn't know what to do with Python. 15:20:10 Python is sadness 15:20:19 so you have not lost must 15:20:22 much* 15:45:00 it's not my choice which language the project is written in 15:48:15 what's wrong with Python? 16:01:12 mage: many things, https://cathode.church/@meena/109025856128979615 16:01:15 Title: Mina: "programming vs inuitivity" - Cathode Church 17:28:30 Hi, I just installed FreeBSD 13.1 and my wired network throughput is only about 5Mbps, whereas my windows machines on the same network get 100Mbps (were on a 100/100Mbps plan with Metronet). How can I fix the slow throughput? Is there a reliable guide someone can point me to that deals specifically with slow throughput? 17:59:23 MillerBOSS: Depends on the driver, but try disabling the checksum offloading 18:00:12 Is it bare metal or a virtual machine? 18:33:08 how is your network configured, it should not require any tuning. Unless you are using a bridge or something to VMs, then it gets more complex 22:28:31 python39 updated! It truely is an amazing day. 22:46:19 http://bash.org/?400459 22:46:20 Title: QDB: Quote #400459 22:46:22 * yuripv hides 22:55:30 haha 23:44:41 https://twitter.com/signalapp/status/1573095143384952832 23:44:44 Title: Signal on Twitter: "A request to our community: Signal is blocked in Iran. You can help people in Iran reconnect to Signal by hosting a proxy server. If you’re willing and able, please follow the instructions here: https://t.co/hznCI9EwCa 1/2 #IRanASignalProxy" / Twitter