FreeBSD 10.0
Posted Jan 20, 2014 21:19 UTC (Mon)
by smoogen (subscriber, #97)
[Link] (11 responses)
Posted Jan 20, 2014 21:58 UTC (Mon)
by Lukehasnoname (guest, #65152)
[Link]
Posted Jan 20, 2014 22:40 UTC (Mon)
by chojrak11 (guest, #52056)
[Link] (7 responses)
It's a pity that BIND hasn't been slaughtered a long time ago. World's changing. BIND isn't. DNS amplification attach wouldn't be so massive had they chosen (or changed at some point) better default values for recursion and access (hasn't anything to do with FreeBSD). I hope Sendmail is next on the death list. NetBSD have done that already. And I applaud killing gcc.
Posted Jan 20, 2014 23:44 UTC (Mon)
by mathstuf (subscriber, #69389)
[Link] (4 responses)
In general or just as FreeBSD's default compiler? Any specific reasons? I'd rather reasons be against 4.7 at least and not GPLv3 related; the latter caused the first and is well-known already ;) .
Posted Jan 21, 2014 9:27 UTC (Tue)
by ovitters (guest, #27950)
[Link] (3 responses)
Posted Jan 21, 2014 15:17 UTC (Tue)
by mathstuf (subscriber, #69389)
[Link]
Posted Jan 22, 2014 16:46 UTC (Wed)
by Pawlerson (guest, #74136)
[Link] (1 responses)
Posted Jan 22, 2014 17:42 UTC (Wed)
by mathstuf (subscriber, #69389)
[Link]
They were using GCC 4.2 by default because it was the last GPLv2 release. To install musicpd (which is now using C++11) I had to also build the gcc47 port.
Posted Jan 22, 2014 0:11 UTC (Wed)
by wahern (subscriber, #37304)
[Link]
Arguably it can, and it has.
Posted Jan 22, 2014 9:47 UTC (Wed)
by hawk (subscriber, #3195)
[Link]
The actual defaults are (and have been for many years) to allow recursion from localnets; localhost; and normal queries from anywhere.
The vast majority of the DNS amplification nonsense seems to be based on open recursion and while localnets may be to permissive in some scenarios it's nowhere near the wide-open recursion that seems to be the typical target for abuse (and I suppose should be comparatively straightforward to track down if the amplifier and victim are in the same network).
However, I think one factor is that there is no default configuration *file* (which is not that weird as it works with the defaults) but even a lot of maintainers of packages and whatnot seem to be confused and create a file where they stick a *lot* of unnecessary stuff that best-case is redundant and worst-case really messes with things.
Posted Jan 20, 2014 23:42 UTC (Mon)
by mathstuf (subscriber, #69389)
[Link] (1 responses)
It's possible. There is OpenSMTPD now[1].
Posted Jan 21, 2014 0:30 UTC (Tue)
by fperrin (subscriber, #61941)
[Link]
Posted Jan 21, 2014 12:29 UTC (Tue)
by djzort (guest, #57189)
[Link]
Posted Jan 22, 2014 1:20 UTC (Wed)
by aboutthebsds (guest, #95107)
[Link] (2 responses)
FreeBSD 10.0
FreeBSD 10.0
FreeBSD 10.0
FreeBSD 10.0
FreeBSD 10.0
FreeBSD 10.0
FreeBSD 10.0
FreeBSD 10.0
FreeBSD 10.0
FreeBSD 10.0
FreeBSD 10.0
FreeBSD 10.0
FreeBSD 10.0
FreeBSD 10.0