In 2013 I wrote up "Maintaining A Publicly Available Blacklist - Mechanisms And Principles" (also https://bsdly.blogspot.com/2013/04/maintaining-publicly-available.html) . TL;DR: blocklisting is a kind of public shaming, be sure your process is verifiable and transparent.

Minor edits today, links to resources and #eurobsdcon inside. #blocklists #spamtraps #antispam #smtp #spamd #openbsd #freebsd #security #cybercrime

Happy Friday FreeBSD

Your jails are clean.
Your configs are versioned.
Your system is secure.
Feels good, doesn’t it?

Take the win and enjoy the weekend.

[SUM] 0.00-10.06 sec 44.0 GBytes 37.6 Gbits/sec 0 sender
[SUM] 0.00-10.06 sec 44.0 GBytes 37.6 Gbits/sec receiver

FINALLY!!!

Why does ABI stability matter for FreeBSD?

In this clip from ABI Stability in FreeBSD by ShengYi Hung, presented at BSDCan 2025, we explore how ABI stability helps FreeBSD thrive.

Watch the full talk: https://www.youtube.com/watch?v=vzU6vKd1OFM

Been trying to keep my #PCEngines #ALIX boards alive, but it looks like #NanoBSD in #FreeBSD doesn't work (compile error in tz!) ... which is a real shame; I want to use these extremely reliable, low-power SBCs as #ZabbixDietPi, etc.

... which is a real shame; I want to use these extremely reliable, low-power SBCs as #Zabbix Proxies (using memory-backed #SQLite for the DB), but this seems to be a realllllllly big lift :(

@dexter is this something #OccamBSD can help me with? No chance of a 14.3 serial-console image out there?

#HappyFriday

You survived another week of patching, provisioning, and panicking.
Breathe deep, you've earned some quiet logs.

#HappyFriday

Don’t forget to shut down your stress this weekend.

Your server's got a firewall.
You should too.

打造您專屬的 FreeBSD 備份堡壘：系統設定與安全強化
➤ FreeBSD 系統配置與資料加密實戰指南
✤ https://it-notes.dragas.net/2025/07/29/make-your-own-backup-system-part-2-forging-the-freebsd-backup-stronghold/
本文為「打造您專屬的備份系統」系列的第二部分，深入探討如何建置一個以 FreeBSD 為基礎的強固備份伺服器。作者強調 FreeBSD 在備份領域的優勢，包括其分割服務的能力、ZFS 檔案系統的靈活性，以及搭配 jail 或 bhyve 虛擬機進行隔離。文章進一步闡述了網路設定，特別是 IPv4 和 IPv6 的配置，以及資料儲存的安全考量，包括磁碟冗餘（如 RAIDZ）與資料加密（GELI、ZFS 原生加密）。作者透過實際操作指令，展示瞭如何使用 GELI 加密磁碟並在其上建立 ZFS 儲存池，以確保備份資料的機密性與完整性。
+ 這篇文章提供了非常實用的技術細節，尤其是 GE
#FreeBSD #備份 #系統管理 #資料安全 #ZFS #加密

Get ready for the European *BSD event of 2025!

54 days to go!

BSDCan Videos are being published. It can give you a taste of the great content you can witness live in Zagreb.

Grab your tickets at https://tickets.eurobsdcon.org

The schedule is at https://events.eurobsdcon.org/2025/schedule/

For everything else, peek at https://2025.eurobsdcon.org/
More information is added all the time.

EuroBSDCon 2025 in Zagreb, Croatia
September 25-28, 2025

Make Your Own Backup System – Part 2: Forging the FreeBSD Backup Stronghold

https://it-notes.dragas.net/2025/07/29/make-your-own-backup-system-part-2-forging-the-freebsd-backup-stronghold/

Anyone else getting 500s (from anubis it looks like) trying to access the #FreeBSD wiki/bugtracker/etc?

New instance, new #introduction

I migrated from https://cybervillains.com/@_xhr_ Great instance but recently the downtimes have been a bit overwhelming. Hence you haven't heard in a while.

I am in the #Unix world since nearly 30 years, used all kinds of Linux, was a #DragonFly BSD committer in the 2010 (you might have seen dma, which is now part of #FreeBSD https://man.freebsd.org/cgi/man.cgi?query=dma&apropos=0&sektion=0&manpath=FreeBSD+14.3-RELEASE+and+Ports&arch=default&format=html). My daily driver is #OpenBSD.

In my day job I worked in #InfoSec for over a decade, mostly in a technical sense. These days more in the non-technical world, wrangling the ISO 27k1.

I've been on Mastodon since 2016 and migrated instances twice.

First release:

I wrote an Ansible connection-plugin to automate FreeBSD Jails via their host, by utilizing jls and jexec to run automation via a SSH connection to the FreeBSD host.

I released that on GitHub https://github.com/chofstede/ansible_jailexec
And on my Codeberg: https://codeberg.org/Larvitz/ansible_jailexec

Released under a BSD license.

This enables seamless automation of FreeBSD jails without needing a SSH connection to the Jails themselves.

Bhyve friends,

Did a Linux install on it could access to the host usb ports ?

#bhyve
#jail
#usb
#freebsd

@allanjude @jimsalter @joeress are hosting an amazingly awesome Podcast: @25admins; definitely look them up if you wanna keep up with the pros out there

https://2.5admins.com/about/

and ofc support them if you find the podcast awesome! Doffing my hat to you guys

Small #FreeBSD hint
If you want to see the netmask in CIDR notation you can simply use:

$ ifconfig -f cidr

A new BSDCan video has been posted:

A packet's journey through pf By Kristof Provost

https://youtu.be/JtSg6ylDALo

A walkthrough of a packet's journey through (FreeBSD's) pf, concentrating on the big picture and its implications.

We'll cover when packets are inspected, when rules are evaluated and how states are used. Along the way we'll cover what DTrace probes can show us, what some of pfctl's counters mean and just how many times pf can look at a single packet.

This talk is intended for firewall admins looking for a deeper understanding and aspiring pf developers. It is not a "How to use pf" talk.

Yesterday, I moved some systems to a new #FreeBSD host.

Thanks to @BastilleBSD this was a blast. Just creating some jails, set the redirects, copy over configs and databases ... and done.

This is how it is supposed to work.