5 ms·

It's odd that they mention working with Christian McDonald and not Jason A. Donenfeld or Matt Dunwoodie. The module they reference appears to be https://www.fre

It's odd that they mention working with Christian McDonald and not Jason A. Donenfeld or Matt Dunwoodie. The module they reference appears to be https://www.freshports.org/net/wireguard-kmod/ https://www.freshports.org/net/wireguard-kmod/ which itself came from the work the latter two did here https://git.zx2c4.com/wireguard-freebsd/log/ https://git.zx2c4.com/wireguard-freebsd/log/ And indeed just three days ago the work was announced on the wireguard list https://lists.zx2c4.com/pipermail/wireguard/2021-May/006711.html https://lists.zx2c4.com/pipermail/wireguard/2021-May/006711....

SigmundA 5y ago
Probably because Scott Long considers Jason Donenfield an "attacker" of PfSense, FreeBSD and Netgate: https://www.netgate.com/blog/painful-lessons-learned-in-security-and-community.html https://www.netgate.com/blog/painful-lessons-learned-in-secu...
- frickinLasers 5y ago
  Ars Technica wrote a report on the debacle[1], and I've since stopped using pfsense. I was already on the fence following their move away from open-source with "pfSense Plus"[2]. [1] https://arstechnica.com/gadgets/2021/03/buffer-overruns-license-violations-and-bad-code-freebsd-13s-close-call/ https://arstechnica.com/gadgets/2021/03/buffer-overruns-lice... [2] https://www.phoronix.com/scan.php?page=news_item&px=Netgate-pfSense-Plus https://www.phoronix.com/scan.php?page=news_item&px=Netgate-...
  - forcemajeure 5y ago
    "you either have a commit bit (enabling you to commit code to FreeBSD's repositories) or you don't. It's hard to find code reviews, and there generally isn't a fixed process ensuring that vitally important code gets reviewed prior to inclusion" Doesn't sound very professional!
  - screamingninja 5y ago
    > I've since stopped using pfsense I find myself in the same boat. What do you use/recommend instead?
    - _joel 5y ago
      Perhaps https://opnsense.org/ https://opnsense.org/ ?
    - seized 5y ago
      OpnSense has long been the better option. It forked from pfsense years ago and has been better for a long time. Netgate engaged in some shameful behavior after the fork, their mistreatment of Jason isn't their first instance.
      - kayson 5y ago
        The only thing holding me back from opnsense is that there's no pfblockerng...
        LeoPanthera 5y ago
        I don't use opnsense but a quick google revealed the following, is this not functionally the same? https://www.cjross.net/dns-security-and-adblock-with-opnsense-part-2/ https://www.cjross.net/dns-security-and-adblock-with-opnsens...
        eddyg 5y ago
        AdGuard Home is in the OPNsense community repo and a very nice alternative: https://www.routerperformance.net/opnsense-repo/ https://www.routerperformance.net/opnsense-repo/
        seized 5y ago
        Unbound has a block list feature and there are several other options. None are quite to the same level as far as I know, but the rest of OpnSense makes up for it.
        0x000000E2 5y ago

SigmundA 5y ago

Probably because Scott Long considers Jason Donenfield an "attacker" of PfSense, FreeBSD and Netgate: https://www.netgate.com/blog/painful-lessons-learned-in-security-and-community.html https://www.netgate.com/blog/painful-lessons-learned-in-secu...

frickinLasers 5y ago
Ars Technica wrote a report on the debacle[1], and I've since stopped using pfsense. I was already on the fence following their move away from open-source with "pfSense Plus"[2]. [1] https://arstechnica.com/gadgets/2021/03/buffer-overruns-license-violations-and-bad-code-freebsd-13s-close-call/ https://arstechnica.com/gadgets/2021/03/buffer-overruns-lice... [2] https://www.phoronix.com/scan.php?page=news_item&px=Netgate-pfSense-Plus https://www.phoronix.com/scan.php?page=news_item&px=Netgate-...
- forcemajeure 5y ago
  "you either have a commit bit (enabling you to commit code to FreeBSD's repositories) or you don't. It's hard to find code reviews, and there generally isn't a fixed process ensuring that vitally important code gets reviewed prior to inclusion" Doesn't sound very professional!
- screamingninja 5y ago
  > I've since stopped using pfsense I find myself in the same boat. What do you use/recommend instead?
  - _joel 5y ago
    Perhaps https://opnsense.org/ https://opnsense.org/ ?
  - seized 5y ago
    OpnSense has long been the better option. It forked from pfsense years ago and has been better for a long time. Netgate engaged in some shameful behavior after the fork, their mistreatment of Jason isn't their first instance.
    - kayson 5y ago
      The only thing holding me back from opnsense is that there's no pfblockerng...
      - LeoPanthera 5y ago
        I don't use opnsense but a quick google revealed the following, is this not functionally the same? https://www.cjross.net/dns-security-and-adblock-with-opnsense-part-2/ https://www.cjross.net/dns-security-and-adblock-with-opnsens...
      - eddyg 5y ago
        AdGuard Home is in the OPNsense community repo and a very nice alternative: https://www.routerperformance.net/opnsense-repo/ https://www.routerperformance.net/opnsense-repo/
      - seized 5y ago
        Unbound has a block list feature and there are several other options. None are quite to the same level as far as I know, but the rest of OpnSense makes up for it.
      - 0x000000E2 5y ago