@macer Oh yes, an old BE was created, but I was too lazy to boot into it 😵

Yo kidz! Remember to update/upgrade your to latest 14.3 prior updating to 15.0. Otherwise you'll need to use /rescue dir to fetch base.txz of 15.0 and unpack libsys.so.7 to /lib manually.

You're welcome.

@david_chisnall @dexter Wow, someone has the same observations that also I have. Another thing was the libnv shenenigans between userland and _KERNEL versions.

@meka those rules needs to be loaded after mac_do module. this rule works for me, for example, security.mac.do.rules=gid=0:any

@palemoon @ptribble

% curl -v forum.palemoon.org
* Host forum.palemoon.org:443 was resolved.
* IPv6: 2a01:4a0:67:1a::56e4
* IPv4: 31.7.187.157
* Trying [2a01:4a0:67:1a::56e4]:443...
* ALPN: curl offers h2,http/1.1
...
* ALPN: server accepted h2
* Server certificate:
* subject: CN=*.palemoon.org
* start date: Jan 9 00:00:00 2025 GMT
* expire date: Feb 9 23:59:59 2026 GMT
* subjectAltName: host "forum.palemoon.org" matched cert's "*.palemoon.org"
* issuer: C=GB; ST=Greater Manchester; L=Salford; O=Sectigo Limited; CN=Sectigo ECC Domain Validation Secure Server CA
* SSL certificate verify ok.
* Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256
* Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA384
* Certificate level 2: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384
* Connected to forum.palemoon.org (2a01:4a0:67:1a::56e4) port 443
* using HTTP/2
* [HTTP/2] [1] OPENED stream for forum.palemoon.org/
...
> GET / HTTP/2
> Host: forum.palemoon.org
> User-Agent: curl/8.15.0
> Accept: */*
>
...
* Request completely sent off
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
< HTTP/2 403
< server: nginx
< date: Sun, 31 Aug 2025 13:06:30 GMT
< content-type: text/html
< content-length: 146
< vary: Accept-Encoding
<
<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
<hr><center>nginx</center>
</body>
</html>
* Connection #0 to host forum.palemoon.org left intact

Still, this is a problem at your end.

@ptribble @palemoon

I've found the problem: @palemoon has improper webserver configuration for IPv6 virtual host. Over ipv4, the forum works.

@feld

You mean like this?

# cat /etc/rc.conf.d/netif
cloned_interfaces="${cloned_interfaces} lo1"
ifconfig_lo1="inet 100.120.10.1/24"
# /etc/rc.d/netif start lo1
Created clone interfaces: lo1.
Starting Network: lo1.
lo1: flags=1008049<UP,LOOPBACK,RUNNING,MULTICAST,LOWER_UP> metric 0 mtu 16384
options=680003<RXCSUM,TXCSUM,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
inet 100.120.10.1 netmask 0xffffff00
inet6 fe80::1%lo1 prefixlen 64 scopeid 0x3
groups: lo
nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>

@dvl A normal, el-cheapo, FAT32-formatted USB drive it was in my case.

@feld @dvl Fun fact, as a follow-up to this thread: Recently I've stumbled upon a USB flash drive that macos would choke with. But I needed to get data out of it. So I've attached it to the iPhone (my 15 Pro Max) using USB-A to USB-C and was able to read the files in question and then transfer those files to macOS from the phone.

@michal Oh, filecache! Recently I've had to manually disconnect all clients, stop redis, remove redis datafiles and let NC to rebuild its filecache 😕

Release Engineering Team has just shipped FreeBSD 14.3-RELEASE!

Key highlights include:
• 802.11ac support via the iwlwifi driver
• OCI container images now in Docker Hub and GitHub Container Registry
• LLVM 19.1.7, OpenSSH 9.9p2, xz 5.8.1, and expat 2.7.1

Happy upgrading!

@dch I plan to switch to podman and pkgbase eventually, too.

@dch Hell yeah, I couldn't wait. But you're right, I'll refrain from such behavior next time.

Show older
BSD Network

bsd.network is a *BSD-adjacent Mastodon Instance. We have a code of conduct.