<html><head></head><body><div class="ydp5998235cyahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;"><div></div>
<div dir="ltr" data-setdir="false">Just a short reply about pfSense</div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">Years back I used m0n0wall and moved to pfSense as it was a fork of m0n0wll</div><div dir="ltr" data-setdir="false">later over the years i got a bad tast from how they acted and moved to OPNsense and never lopoked back</div><div dir="ltr" data-setdir="false">OPNsense is also a fork of m0n0wall so for everybody who wants to move on have a look</div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">Ta,</div><div dir="ltr" data-setdir="false">Biton</div><div dir="ltr" data-setdir="false"><br></div>
</div><div id="ydp4ee557edyahoo_quoted_7835095571" class="ydp4ee557edyahoo_quoted">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
On Sunday, 28 March 2021, 05:55:27 BST, Michael Stauber <mstauber@blueonyx.it> wrote:
</div>
<div><br></div>
<div><br></div>
<div><div dir="ltr">Hi all,<br></div><div dir="ltr"><br></div><div dir="ltr">This is not BlueOnyx related at all, but if you want a giggle at the<br></div><div dir="ltr">expense of others, say no more:<br></div><div dir="ltr"><br></div><div dir="ltr"><a href="https://arstechnica.com/gadgets/2021/03/buffer-overruns-license-violations-and-bad-code-freebsd-13s-close-call/" rel="nofollow" target="_blank">https://arstechnica.com/gadgets/2021/03/buffer-overruns-license-violations-and-bad-code-freebsd-13s-close-call/</a><br></div><div dir="ltr"><br></div><div dir="ltr">TL;DR: Netgate paid a convicted felon to port WireGuard into the FreeBSD<br></div><div dir="ltr">kernel to make it easier for them to use pfSense on FreeBSD for their<br></div><div dir="ltr">stuff. That guy eventually delivered and the code submission was merged<br></div><div dir="ltr">into the code tree for the upcoming release of FreeBSD 13.<br></div><div dir="ltr"><br></div><div dir="ltr">Until the FreeBSD core maintainers found out what an unmitigated and<br></div><div dir="ltr">exploitable disaster that code was. "Bad" just doesn't cut it. It was a<br></div><div dir="ltr">hell of a lot worse.<br></div><div dir="ltr"><br></div><div dir="ltr">So in a two week bender they rewrote it from scratch on their own. Which<br></div><div dir="ltr">gave Netgate the fits and put them into a rage-fit of accusations and<br></div><div dir="ltr">easily refutable denials. The reason for that unwise move was: They<br></div><div dir="ltr">already had merged the shitty pre-beta FreeBSD-code into pfSense 2.5.0<br></div><div dir="ltr">(released a month before FreeBSD 13 was to come out) and FreeBSD's fixes<br></div><div dir="ltr">now clearly showed what an exploitable buggy mess pfSense 2.5.0 actually<br></div><div dir="ltr">had become.<br></div><div dir="ltr"><br></div><div dir="ltr">End result: FreeBSD and Netgate no longer seem to be "friends" and<br></div><div dir="ltr">WireGuard has been stripped from the upcoming FreeBSD 13 release entirely.<br></div><div dir="ltr"><br></div><div dir="ltr">That went well. /facepalm<br></div><div dir="ltr"><br></div><div dir="ltr">I actually liked pfSense a little. Now I'm wondering what other<br></div><div dir="ltr">"surprises" they have under the hood. :-/<br></div><div dir="ltr"><br></div><div dir="ltr">-- <br></div><div dir="ltr">With best regards<br></div><div dir="ltr"><br></div><div dir="ltr">Michael Stauber<br></div><div dir="ltr">_______________________________________________<br></div><div dir="ltr">Blueonyx mailing list<br></div><div dir="ltr"><a href="mailto:Blueonyx@mail.blueonyx.it" rel="nofollow" target="_blank">Blueonyx@mail.blueonyx.it</a><br></div><div dir="ltr"><a href="http://mail.blueonyx.it/mailman/listinfo/blueonyx" rel="nofollow" target="_blank">http://mail.blueonyx.it/mailman/listinfo/blueonyx</a><br></div></div>
</div>
</div></body></html>