So far so good on this upgrade. Like all the recent versions I would seriously look at the changes to pf.conf. It seems like taking advantage of some of the new stuff would be in order.
Also, smtpd seems to be coming along nicely.
OpenBSD 5.1 released
11–20 of 42 posts
Re: OpenBSD 5.1 released
#12I wish I could go back to using it but I currently have to do some GWT dev and they only officially support linux. I tried running a vm and dual boot but that was too much hustle... as soon as I'm done with this project I'll go back to this distro. :)
Re: OpenBSD 5.1 released
#13So what really sets the various BSDs apart? Has anyone done a good comparison between them?
FreeBSD is the one you should run. It has the best performance and hardware/software compatibility of the three. It's the easiest to get off the ground with for a beginner as well, so it's also a good starting point.
NetBSD is the one whose source you should study. The emphasis is on correctness and portability. The book Code Reading by Diomidis Spinellis used mainly examples from NetBSD even though he is a FreeBSD developer, because (he implies) the code is easier to read.
OpenBSD forked first and developed a reason to exist second; its storied past is really quite an interesting read, but won't leave you feeling like it is being developed by the greatest minds in security for exactly that purpose. I think its secure reputation is more fiat than fact and I'd like to see recent benchmarks substantiating the notion that it is better to run on routers and whatnot. I have no use for it.
Re: OpenBSD 5.1 released
#14I love OpenBSD and have 5.0 installed on a router. But man they are old-school. Just looking at the upgrade instructions[1] brings me back to the time before package managers and makes my long for a nice "apt-get update && apt-get dist-upgrade". [1] http://www.openbsd.org/faq/upgrade51.html
[deleted]
Re: OpenBSD 5.1 released
#15So what really sets the various BSDs apart? Has anyone done a good comparison between them?
FreeBSD is the one you should run. It has the best performance and hardware/software compatibility of the three. It's the easiest to get off the ground with for a beginner as well, so it's also a good starting point. NetBSD is the one whose source you should study. The emphasis is on correctness and portability. The book Code Reading by Diomidis Spinellis used mainly examples from NetBSD even though he is a FreeBSD d…
One reason to run OpenBSD: pf/altq and OpenBGPD/OpenOSPFD are mostly developed there, and the other BSDs tend to have older versions.
Re: OpenBSD 5.1 released
#16one thing to definitely watch in OpenBSD is their new mail daemon, OpenSMTPD. It has a configuration syntax that is about 100x easier to setup and understand than anything else out there, although they are still working to get it up to par feature wise. The code is also written with a heavy focus on security, correctness, and simplicity.
Its definitely something to watch for all those hackers that want an alternative to gmail that isnt the insanity of a postfix/qmail setup.
listen on em0
map aliases { source db "/etc/mail/aliases.db" }
accept for local deliver to mbox
accept for all relay
Re: OpenBSD 5.1 released
#17one thing to definitely watch in OpenBSD is their new mail daemon, OpenSMTPD. It has a configuration syntax that is about 100x easier to setup and understand than anything else out there, although they are still working to get it up to par feature wise. The code is also written with a heavy focus on security, correctness, and simplicity. Its definitely something to watch for all those hackers that want an alternative…
> accept for all relay
If this defines an open mail relay, please think twice because your machine may be used to send spam and get blacklisted.
Re: OpenBSD 5.1 released
#18one thing to definitely watch in OpenBSD is their new mail daemon, OpenSMTPD. It has a configuration syntax that is about 100x easier to setup and understand than anything else out there, although they are still working to get it up to par feature wise. The code is also written with a heavy focus on security, correctness, and simplicity. Its definitely something to watch for all those hackers that want an alternative…
> accept for all relay If this defines an open mail relay, please think twice because your machine may be used to send spam and get blacklisted.
nope, by default rules have "safe" implicit behavior:
accept for all relay -> accept from local for all relay
to create an open relay one has to explicitly:
accept from all for all relay
Re: OpenBSD 5.1 released
#19one thing to definitely watch in OpenBSD is their new mail daemon, OpenSMTPD. It has a configuration syntax that is about 100x easier to setup and understand than anything else out there, although they are still working to get it up to par feature wise. The code is also written with a heavy focus on security, correctness, and simplicity. Its definitely something to watch for all those hackers that want an alternative…
Let's hope that it does not end like:
http://www.opencvs.org
Re: OpenBSD 5.1 released
#20one thing to definitely watch in OpenBSD is their new mail daemon, OpenSMTPD. It has a configuration syntax that is about 100x easier to setup and understand than anything else out there, although they are still working to get it up to par feature wise. The code is also written with a heavy focus on security, correctness, and simplicity. Its definitely something to watch for all those hackers that want an alternative…
I'll be giving this ago. Last time I set up a mail server I came pretty close to tears.