Kindly Subverting POODLE

Wed 15 October 2014 by feld

Let's pretend for a moment you live in a world where you need to protect your customers from POODLE without completely breaking access for IE6 users. Scary errors or a complete failure to connect to the server are not options. Well then, this blog post is for you!

This solution …

read more

pfSense On Citrix XenServer

Mon 07 July 2014 by feld

pfSense 2.2 snapshots are now based on FreeBSD 10 which means that support for Xen is built into the GENERIC kernel. This means virtualizing pfSense is very easy. If you install pfSense on Citrix XenServer it will not let you live migrate the VM to another host unless the …

read more

Archiveopteryx: The IMAP Server You Always Wanted

Sun 06 July 2014 by feld

Archiveopteryx (aox) is a highly scalable PostgreSQL-backed IMAP/POP server. As described on its website:

Archiveopteryx is an Internet mail server, optimised to support long-term archival storage. It seeks to make it practical not only to manage large archives, but to use the information therein on a daily basis instead …

read more

SSH Two Factor Authentication on FreeBSD

Wed 02 July 2014 by feld

Setting up two factor auth for SSH on FreeBSD is actually quite simple. This can be achieved with minimal effort via the security/pam_google_authenticator port.

# pkg install pam_google_authenticator

Edit /etc/pam.d/sshd and add the following line at the top of the list:

auth            required        /usr/local/lib/pam_google_authenticator …
read more

FreeBSD Poudriere Cheat Sheet

Sat 21 June 2014 by feld

On FreeBSD poudriere is now the best way to maintain your software from the ports tree. It provides a cleanroom build environment and your packages will always be built properly. Manual installation and portmaster are certainly still viable, but they should be handled with care by advanced users. For those …

read more

New Blog: Pelican

Tue 03 June 2014 by feld

I've never been into blogging. I did a few articles for a friend on Timedoctor.org but never made time to write about stuff I'm working on. I most recently had my blog on Tumblr but I only wrote two articles and then gave up because remembering to log into …

read more

Denon E400 firmware update loop

Mon 17 March 2014 by feld

My Denon E400 is a nice AVR, but for some reason fails to do firmware updates if plugged in to my Ubiquiti Toughswitch. If I attempt an update it fails to connect to the server for some strange reason and gets stuck in an update loop with an error on …

read more

Dell Optiplex 390 keyboard bug

Tue 27 August 2013 by feld

I have a Dell Optiplex 390 at work and I've had a strange keyboard issue I couldn't explain: my USB keyboard simply refused to work until my OS was up and running. Whether it be Windows, Linux, or FreeBSD -- no keyboard functionality until the kernel had initialized the USB devices …

read more

FreeBSD and 65TB of ZFS

Fri 08 December 2000 by incin

SERVER

Supermicro SuperStorage Server 6049P-E1CR36L - 36x SATA/SAS - LSI 3008 
12G SAS - Dual 10-Gigabit Ethernet - 1200W Redundant Processor 
2 x Intel Xeon Silver 4110 Processor 8-core 2.10GHz 11.00MB Cache (85W) 
Memory 12 x 16GB PC4-21300 2666MHz DDR4 ECC Registered DIMM 
Storage Drive 36 x 4.0TB SAS 3 …
read more