rtprio: ok

btw, if i install a fresh freebsd on a running system, the zpools must be re-created on the new OS install right ?

hernan604, It is not necessary to recreate zfs pools for a new install. zfs pools are very portable. Can mount them on different systems. Can even mount them on linux systems!

rwp: ok

thakns

The one thing to know about zfs pools is their feature level. New features are added over time. Once upgraded then the system mounting it must know how to handle the new features. An older system won't be able to mount a newer zfs upgraded to a new feature that it does not know about.

rwp: right, thanks man

hi all :)

hi

hi st_iron

how are you

:)

so you are big fan of freebsd ?

:)

what your question about that freebsd os

i am the coder

thank you r00t-h4x0r i use freebsd, and i don't have questions atm

i see

which version

freebsd is so cool

the kernel is different and fast

so you should use it even in production if the driver or kernel support it

don't believe linux or linux or windows or other OS

that freebsd Our code is x0r t0r Kid

yeah it x0r t0r

drugs are bad mmmkay

mean the stablest among other OS

not much linux even performance compare to freebsd

that's why We make opensense firewall using freebsd kernel

openbsd too

don't believe it is moron Kid

is Us that promote Linux to make it big

doesn't mean other OS From Us is stupid

We don't include latest driver or release to latest one because

We want it to be stable with limited hardware

doesn't mean it is stupid

do you know in year 2000 freebsd not even once reboot for one year

not even get hack

r00t-h4x0r: freebsd-version

15.0-RELEASE-p9

i assume everyone in this channel use this version

more or less

hmm i see

home server "?

uname -a for me

let me see what your hardware

I also have this keyboard iRobbery

:)

Hello, all. I want to install blacklistd to control connections to my server over HTTP and SOCKS. For http, I use thttpd(8). How am I to cause thttpd to notify blacklistd of all connections in the format rquired by the latter?

By default, blacklistd listens to /var/run/blacklistd.sock, but surely thttpd is ignorant of it?

thttpd as far as I know needs special support to be able to contact blocklistd (as it's now called), and I don't know if it has it.

Hello, MelanieUrsidino. IRC is a small place :-) So, you say that blocklistd expects programs to have special support for it?

If thttpd does provide for blocklistd notification, perhaps I should consider fail2ban, which monitors logfiles.

Well, or I could use the `t' in thttpd, of which one meaning is `throttling'.

my understanding is that blocklistd requires clients to pass it the file descriptor that was the blocked connection.

or, not blocked, but studied.

As I understand from a glimps and the man page, blocklistd monitors a socket or a list of sockets, so that other programs are expected to write to those sockets their connection events.

I should not like to scan the logs myself for relevant entries, convert them into the required format, and write to the bloclistd's socket.

no, blocklistd requires the application to pass the client socket, as MelanieUrsidino said. you can't just write data to the socket to make it block something

Then I missed where blocklistd documents this. fail2ban is certainly more loosely coupled.

the third paragraph of blocklistd(8): The way blocklistd does configuration entry matching is by having the client side pass the file descriptor associated with the connection the client wants to blocklist as well as passing socket credentials.

Ah, OK. Is that data based to the socket to which blocklistd is listening?

what do you mean?

ivy, I mean, I don't understand how the client (is an httpd a client?) passes the connection file descriptro to blocklistd.

hey

is there a way to install a port from /usr/ports into a jail :p

yes yes use poudriere is the solution to every problem these days, but I am purely curious

you can make package and move the .pkg to the jail and then pkg-add(8) it

I dont see anything else in the ports man page though