3 ms·

A. Huge thanks for all involved in FreeBSD. It's amazing how polished, supported and performant it is for the relative size of the team involved. B. Please co

A. Huge thanks for all involved in FreeBSD. It's amazing how polished, supported and performant it is for the relative size of the team involved. B. Please consider donating. https://freebsdfoundation.org/donate/ https://freebsdfoundation.org/donate/ C. I have much love for FreeBSD and as such, these are things I hope get address in the next major version (15.0) - turning all internet facing services (except ssh) off, by default. OpenBSD does this. - move all non-core things out of the base, like sendmail (now DMA, what a nice import from DFly btw) - the base should only have one way to do things (don’t have 3 different firewalls in base like today) - better defaults, https://vez.mrsk.me/freebsd-defaults.html https://vez.mrsk.me/freebsd-defaults.html - something like io-uring, (async-sendfile is similar but that’s only for sendfile) Thank you again for an amazing OS. EDIT: I updated the first bullet of C for more clarity.

deleted 3y ago
[deleted]
toast0 3y ago
> - turning all services (except ssh) off, by default. OpenBSD does this. I think people would be rightfully upset if syslogd, cron, and getty weren't started by default. moused and a mailer daemon I get not wanting to start. What else starts by default that you don't want? > - the base should only have one way to do things (don’t have 3 different firewalls in base like today) I dunno about ipf; but ipfw and pf don't have complete overlap --- I need to use both to run my network how I want to (pfsync has no equivalent in ipfw, ipfw pipe/queue/sched doesn't have an equivalent in pf)
- alberth 3y ago
  Regarding the first bullet, thanks. I just updated my post for more clarity. I meant internet facing services (e.g. not referring to cron, etc).
  - toast0 3y ago
    Well still, what's running out of the box other than a mail daemon (which I agree with you about), and maybe sshd? (I think it asks you during setup for that one, but I'm not sure anymore)

deleted 3y ago

[deleted]

toast0 3y ago

> - turning all services (except ssh) off, by default. OpenBSD does this. I think people would be rightfully upset if syslogd, cron, and getty weren't started by default. moused and a mailer daemon I get not wanting to start. What else starts by default that you don't want? > - the base should only have one way to do things (don’t have 3 different firewalls in base like today) I dunno about ipf; but ipfw and pf don't have complete overlap --- I need to use both to run my network how I want to (pfsync has no equivalent in ipfw, ipfw pipe/queue/sched doesn't have an equivalent in pf)

alberth 3y ago
Regarding the first bullet, thanks. I just updated my post for more clarity. I meant internet facing services (e.g. not referring to cron, etc).
- toast0 3y ago
  Well still, what's running out of the box other than a mail daemon (which I agree with you about), and maybe sshd? (I think it asks you during setup for that one, but I'm not sure anymore)