app02 Fri, 19 Jun 2026 10:31:48 +0000 Fireside (https://fireside.fm) BSD Now - Episodes Tagged with “No Starch Press” https://www.bsdnow.tv/tags/no%20starch%20press Wed, 30 Apr 2014 08:00:00 -0400 Created by three guys who love BSD, we cover the latest news and have an extensive series of tutorials, as well as interviews with various people from all areas of the BSD community. It also serves as a platform for support and questions. We love and advocate FreeBSD, OpenBSD, NetBSD, DragonFlyBSD and TrueOS. Our show aims to be helpful and informative for new users that want to learn about them, but still be entertaining for the people who are already pros. The show airs on Wednesdays at 2:00PM (US Eastern time) and the edited version is usually up the following day. en-us episodic A weekly podcast and the place to B...SD JT Pennington Created by three guys who love BSD, we cover the latest news and have an extensive series of tutorials, as well as interviews with various people from all areas of the BSD community. It also serves as a platform for support and questions. We love and advocate FreeBSD, OpenBSD, NetBSD, DragonFlyBSD and TrueOS. Our show aims to be helpful and informative for new users that want to learn about them, but still be entertaining for the people who are already pros. The show airs on Wednesdays at 2:00PM (US Eastern time) and the edited version is usually up the following day. no berkeley,freebsd,openbsd,netbsd,dragonflybsd,trueos,trident,hardenedbsd,tutorial,howto,guide,bsd,interview JT Pennington feedback@bsdnow.tv 35: Puffy Firewall https://www.bsdnow.tv/35 203904d9-509c-4727-918f-d5e6a6276cf8 Wed, 30 Apr 2014 08:00:00 -0400 JT Pennington full JT Pennington We're back again! On this week's packed show, we've got one of the biggest tutorials we've done in a while. It's an in-depth look at PF, OpenBSD's firewall, with some practical examples and different use cases. We'll also be talking to Peter Hansteen about the new edition of "The Book of PF." Of course, we've got news and answers to your emails too, on BSD Now - the place to B.. SD. 1:19:23 no <p>We're back again! On this week's packed show, we've got one of the biggest tutorials we've done in a while. It's an in-depth look at PF, OpenBSD's firewall, with some practical examples and different use cases. We'll also be talking to Peter Hansteen about the new edition of "The Book of PF." Of course, we've got news and answers to your emails too, on BSD Now - the place to B.. SD.</p> <h2>This episode was brought to you by</h2> <p><a href="http://www.ixsystems.com/bsdnow" title="iXsystems" rel="nofollow noopener"><img src="/images/iXlogo2.png" alt="iXsystems - Enterprise Servers and Storage For Open Source"></a></p> <hr> <h2>Headlines</h2> <h3><a href="http://undeadly.org/cgi?action=article&amp;sid=20140419151959" rel="nofollow noopener">ALTQ removed from PF</a></h3> <ul> <li>Kicking off our big PF episode...</li> <li>The classic packet queueing system, ALTQ, was recently removed from OpenBSD -current</li> <li>There will be a transitional phase between 5.5 and 5.6 where you can still use it by replacing the "queue" keyword with "oldqueue" in your pf.conf</li> <li>As of 5.6, due about six months from now, you'll have to change your ruleset to the new syntax if you're using it for bandwidth shaping</li> <li>After more than ten years, bandwidth queueing has matured quite a bit and we can finally put ALTQ to rest, in favor of the new queueing subsystem</li> <li>This doesn't affect FreeBSD, PCBSD, NetBSD or DragonflyBSD since all of their PFs are older and maintained separately. ***</li> </ul> <h3><a href="https://www.freebsd.org/news/status/report-2014-01-2014-03.html" rel="nofollow noopener">FreeBSD Quarterly Status Report</a></h3> <ul> <li>The quarterly status report from FreeBSD is out, detailing some of the project's ongoing tasks</li> <li>Some highlights include the first "stable" branch of ports, ARM improvements (including SMP), bhyve improvements, more work on the test suite, desktop improvements including the new vt console driver and UEFI booting support finally being added</li> <li>We've got some specific updates from the cluster admin team, core team, documentation team, portmgr team, email team and release engineering team</li> <li>LOTS of details and LOTS of topics to cover, give it a read ***</li> </ul> <h3><a href="http://undeadly.org/cgi?action=article&amp;sid=20140417184158" rel="nofollow noopener">OpenBSD's OpenSSL rewrite continues with m2k14</a></h3> <ul> <li>A mini OpenBSD <a href="http://www.openbsd.org/hackathons.html" rel="nofollow noopener">hackathon</a> begins in Morocco, Africa</li> <li>You can follow the changes in <a href="http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libssl/src/ssl/" rel="nofollow noopener">the -current CVS log</a>, but <a href="http://undeadly.org/cgi?action=article&amp;sid=20140418063443" rel="nofollow noopener">a lot of work</a> is mainly going towards the OpenSSL cleaning</li> <li>We've got two <a href="http://undeadly.org/cgi?action=article&amp;sid=20140429121423" rel="nofollow noopener">trip</a> <a href="http://undeadly.org/cgi?action=article&amp;sid=20140425115340" rel="nofollow noopener">reports</a> so far, hopefully we'll have some more to show you in a future episode</li> <li>You can see some of the <a href="http://opensslrampage.org/" rel="nofollow noopener">more interesting quotes</a> from the tear-down or <a href="http://freshbsd.org/commit/openbsd/e5136d69ece4682e6167c8f4a8122270236898bf" rel="nofollow noopener">see everything</a></li> <li><a href="http://undeadly.org/cgi?action=article&amp;sid=20140423045847" rel="nofollow noopener">Apparently</a> they are going to call the fork "<a href="https://news.ycombinator.com/item?id=7623789" rel="nofollow noopener">LibreSSL</a>" ....</li> <li><a href="http://freshbsd.org/commit/openbsd/e5136d69ece4682e6167c8f4a8122270236898bf" rel="nofollow noopener">What were the OpenSSL developers thinking</a>? The RSA private key was used to seed the entropy!</li> <li>We also got <a href="http://www.zdnet.com/openbsd-forks-prunes-fixes-openssl-7000028613/" rel="nofollow noopener">some mainstream news coverage</a> and <a href="http://www.tedunangst.com/flak/post/origins-of-libressl" rel="nofollow noopener">another post from Ted</a> about the history of the fork</li> <li>Definitely consider <a href="http://www.openbsdfoundation.org/donations.html" rel="nofollow noopener">donating to the OpenBSD foundation</a>, this fork will benefit all the other BSDs too ***</li> </ul> <h3><a href="https://blog.netbsd.org/tnf/entry/netbsd_6_1_4_and" rel="nofollow noopener">NetBSD 6.1.4 and 6.0.5 released</a></h3> <ul> <li>New updates for the 6.1 and 6.0 branches of NetBSD, focusing on bugfixes</li> <li>The main update is - of course - the heartbleed vulnerability</li> <li>Also includes fixes for other security issues and even a kernel panic... on Atari</li> <li>Patch your Ataris right now, this is serious business ***</li> </ul> <h2>Interview - Peter Hansteen - <a href="mailto:peter@bsdly.net" rel="nofollow noopener">peter@bsdly.net</a> / <a href="https://twitter.com/pitrh" rel="nofollow noopener">@pitrh</a></h2> <p>The Book of PF: 3rd edition</p> <hr> <h2>Tutorial</h2> <h3><a href="http://www.bsdnow.tv/tutorials/pf" rel="nofollow noopener">BSD Firewalls: PF</a></h3> <hr> <h2>News Roundup</h2> <h3><a href="https://svnweb.freebsd.org/ports?view=revision&amp;revision=351411" rel="nofollow noopener">New Xorg now the default in FreeBSD</a></h3> <ul> <li>For quite a while now, FreeBSD has had two versions of X11 in ports</li> <li>The older, stable version was the default, but you could install a newer one by having "WITH_NEW_XORG" in /etc/make.conf</li> <li>They've finally made the switch for 10-STABLE and 9-STABLE</li> <li>Check <a href="https://wiki.freebsd.org/Graphics" rel="nofollow noopener">this wiki page</a> for more info ***</li> </ul> <h3><a href="https://www.google-melange.com/gsoc/org2/google/gsoc2014/openbsdfoundation" rel="nofollow noopener">GSoC-accepted BSD projects</a></h3> <ul> <li>The Google Summer of Code team has got the list of accepted project proposals uploaded so we can see what's planned</li> <li>OpenBSD's list includes DHCP configuration parsing improvements, systemd replacements, porting capsicum, GPT and UEFI support, and modernizing the DHCP daemon</li> <li>The <a href="https://www.google-melange.com/gsoc/org2/google/gsoc2014/freebsd" rel="nofollow noopener">FreeBSD list</a> was also posted</li> <li>Theirs includes porting FreeBSD to the Android emulator, CTF in the kernel debugger, improved unicode support, converting firewall rules to a C module, pkgng improvements, MicroBlaze support, PXE fixes, bhyve caching, bootsplash and lots more</li> <li>Good luck to all the students participating, hopefully they become full time BSD users ***</li> </ul> <h3><a href="http://www.hybridcluster.com/blog/complexity-freebsd-vfs-using-zfs-example-part-2/" rel="nofollow noopener">Complexity of FreeBSD VFS using ZFS as an example</a></h3> <ul> <li>HybridCluster posted the second part of their VFS and ZFS series</li> <li>This new post has lots of technical details once again, definitely worth reading if you're a ZFS guy</li> <li>Of course, also watch <a href="http://www.bsdnow.tv/episodes/2014_02_12-the_cluster_the_cloud" rel="nofollow noopener">episode 24</a> for our interview with HybridCluster - they do really interesting stuff ***</li> </ul> <h3><a href="http://blog.pcbsd.org/2014/04/weekly-feature-digest-26-the-lumina-project-and-preload/" rel="nofollow noopener">PCBSD weekly digest</a></h3> <ul> <li>Preload has been ported over, it's a daemon that prefetches applications</li> <li>PCBSD is developing their own desktop environment, Lumina (<a href="http://blog.pcbsd.org/2014/04/quick-lumina-desktop-faq/" rel="nofollow noopener">there's also an FAQ</a>)</li> <li>It's still in active development, but you can try it out by installing from ports</li> <li>We'll be showing a live demo of it in a few weeks (when development settles down a bit)</li> <li>Some kid in Australia <a href="https://www.youtube.com/watch?v=ETxhbf3-z18" rel="nofollow noopener">subjects his poor mother to being on camera</a> while she tries out PCBSD and gives her impressions of it *** </li> </ul> freebsd, openbsd, netbsd, dragonflybsd, pcbsd, tutorial, howto, guide, bsd, interview, pf, firewall, pfsense, ipfw, ipfilter, router, packet filter, book of pf, third edition, 3rd, bsdcan, presentation, security, peter hansteen, peter n.m. hansteen, pitrh, iptables, npf, nostarch, no starch press, m2k14, hackathon, libressl, openssl, fork We're back again! On this week's packed show, we've got one of the biggest tutorials we've done in a while. It's an in-depth look at PF, OpenBSD's firewall, with some practical examples and different use cases. We'll also be talking to Peter Hansteen about the new edition of "The Book of PF." Of course, we've got news and answers to your emails too, on BSD Now - the place to B.. SD.

This episode was brought to you by

iXsystems - Enterprise Servers and Storage For Open Source

Headlines

ALTQ removed from PF

  • Kicking off our big PF episode...
  • The classic packet queueing system, ALTQ, was recently removed from OpenBSD -current
  • There will be a transitional phase between 5.5 and 5.6 where you can still use it by replacing the "queue" keyword with "oldqueue" in your pf.conf
  • As of 5.6, due about six months from now, you'll have to change your ruleset to the new syntax if you're using it for bandwidth shaping
  • After more than ten years, bandwidth queueing has matured quite a bit and we can finally put ALTQ to rest, in favor of the new queueing subsystem
  • This doesn't affect FreeBSD, PCBSD, NetBSD or DragonflyBSD since all of their PFs are older and maintained separately. ***

FreeBSD Quarterly Status Report

  • The quarterly status report from FreeBSD is out, detailing some of the project's ongoing tasks
  • Some highlights include the first "stable" branch of ports, ARM improvements (including SMP), bhyve improvements, more work on the test suite, desktop improvements including the new vt console driver and UEFI booting support finally being added
  • We've got some specific updates from the cluster admin team, core team, documentation team, portmgr team, email team and release engineering team
  • LOTS of details and LOTS of topics to cover, give it a read ***

OpenBSD's OpenSSL rewrite continues with m2k14

NetBSD 6.1.4 and 6.0.5 released

  • New updates for the 6.1 and 6.0 branches of NetBSD, focusing on bugfixes
  • The main update is - of course - the heartbleed vulnerability
  • Also includes fixes for other security issues and even a kernel panic... on Atari
  • Patch your Ataris right now, this is serious business ***

Interview - Peter Hansteen - peter@bsdly.net / @pitrh

The Book of PF: 3rd edition

Tutorial

BSD Firewalls: PF

News Roundup

New Xorg now the default in FreeBSD

  • For quite a while now, FreeBSD has had two versions of X11 in ports
  • The older, stable version was the default, but you could install a newer one by having "WITH_NEW_XORG" in /etc/make.conf
  • They've finally made the switch for 10-STABLE and 9-STABLE
  • Check this wiki page for more info ***

GSoC-accepted BSD projects

  • The Google Summer of Code team has got the list of accepted project proposals uploaded so we can see what's planned
  • OpenBSD's list includes DHCP configuration parsing improvements, systemd replacements, porting capsicum, GPT and UEFI support, and modernizing the DHCP daemon
  • The FreeBSD list was also posted
  • Theirs includes porting FreeBSD to the Android emulator, CTF in the kernel debugger, improved unicode support, converting firewall rules to a C module, pkgng improvements, MicroBlaze support, PXE fixes, bhyve caching, bootsplash and lots more
  • Good luck to all the students participating, hopefully they become full time BSD users ***

Complexity of FreeBSD VFS using ZFS as an example

  • HybridCluster posted the second part of their VFS and ZFS series
  • This new post has lots of technical details once again, definitely worth reading if you're a ZFS guy
  • Of course, also watch episode 24 for our interview with HybridCluster - they do really interesting stuff ***

PCBSD weekly digest

  • Preload has been ported over, it's a daemon that prefetches applications
  • PCBSD is developing their own desktop environment, Lumina (there's also an FAQ)
  • It's still in active development, but you can try it out by installing from ports
  • We'll be showing a live demo of it in a few weeks (when development settles down a bit)
  • Some kid in Australia subjects his poor mother to being on camera while she tries out PCBSD and gives her impressions of it ***
]]> We're back again! On this week's packed show, we've got one of the biggest tutorials we've done in a while. It's an in-depth look at PF, OpenBSD's firewall, with some practical examples and different use cases. We'll also be talking to Peter Hansteen about the new edition of "The Book of PF." Of course, we've got news and answers to your emails too, on BSD Now - the place to B.. SD.

This episode was brought to you by

iXsystems - Enterprise Servers and Storage For Open Source

Headlines

ALTQ removed from PF

  • Kicking off our big PF episode...
  • The classic packet queueing system, ALTQ, was recently removed from OpenBSD -current
  • There will be a transitional phase between 5.5 and 5.6 where you can still use it by replacing the "queue" keyword with "oldqueue" in your pf.conf
  • As of 5.6, due about six months from now, you'll have to change your ruleset to the new syntax if you're using it for bandwidth shaping
  • After more than ten years, bandwidth queueing has matured quite a bit and we can finally put ALTQ to rest, in favor of the new queueing subsystem
  • This doesn't affect FreeBSD, PCBSD, NetBSD or DragonflyBSD since all of their PFs are older and maintained separately. ***

FreeBSD Quarterly Status Report

  • The quarterly status report from FreeBSD is out, detailing some of the project's ongoing tasks
  • Some highlights include the first "stable" branch of ports, ARM improvements (including SMP), bhyve improvements, more work on the test suite, desktop improvements including the new vt console driver and UEFI booting support finally being added
  • We've got some specific updates from the cluster admin team, core team, documentation team, portmgr team, email team and release engineering team
  • LOTS of details and LOTS of topics to cover, give it a read ***

OpenBSD's OpenSSL rewrite continues with m2k14

NetBSD 6.1.4 and 6.0.5 released

  • New updates for the 6.1 and 6.0 branches of NetBSD, focusing on bugfixes
  • The main update is - of course - the heartbleed vulnerability
  • Also includes fixes for other security issues and even a kernel panic... on Atari
  • Patch your Ataris right now, this is serious business ***

Interview - Peter Hansteen - peter@bsdly.net / @pitrh

The Book of PF: 3rd edition

Tutorial

BSD Firewalls: PF

News Roundup

New Xorg now the default in FreeBSD

  • For quite a while now, FreeBSD has had two versions of X11 in ports
  • The older, stable version was the default, but you could install a newer one by having "WITH_NEW_XORG" in /etc/make.conf
  • They've finally made the switch for 10-STABLE and 9-STABLE
  • Check this wiki page for more info ***

GSoC-accepted BSD projects

  • The Google Summer of Code team has got the list of accepted project proposals uploaded so we can see what's planned
  • OpenBSD's list includes DHCP configuration parsing improvements, systemd replacements, porting capsicum, GPT and UEFI support, and modernizing the DHCP daemon
  • The FreeBSD list was also posted
  • Theirs includes porting FreeBSD to the Android emulator, CTF in the kernel debugger, improved unicode support, converting firewall rules to a C module, pkgng improvements, MicroBlaze support, PXE fixes, bhyve caching, bootsplash and lots more
  • Good luck to all the students participating, hopefully they become full time BSD users ***

Complexity of FreeBSD VFS using ZFS as an example

  • HybridCluster posted the second part of their VFS and ZFS series
  • This new post has lots of technical details once again, definitely worth reading if you're a ZFS guy
  • Of course, also watch episode 24 for our interview with HybridCluster - they do really interesting stuff ***

PCBSD weekly digest

  • Preload has been ported over, it's a daemon that prefetches applications
  • PCBSD is developing their own desktop environment, Lumina (there's also an FAQ)
  • It's still in active development, but you can try it out by installing from ports
  • We'll be showing a live demo of it in a few weeks (when development settles down a bit)
  • Some kid in Australia subjects his poor mother to being on camera while she tries out PCBSD and gives her impressions of it ***
]]>