Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 02 Nov 2013 09:01:56 -0500
From:      Eric van Gyzen <eric@vangyzen.net>
To:        Matthew Seaman <matthew@FreeBSD.org>, freebsd-current@freebsd.org
Subject:   Re: Official FreeBSD Binary Packages now available for pkgng
Message-ID:  <527505D4.8060008@vangyzen.net>
In-Reply-To: <5274EFD6.6030504@FreeBSD.org>
References:  <5271BC11.1010303@FreeBSD.org> <CACeEFf4Hif3WHufC=i08gbkXb6oC=4sxbyvO4FQnTkRWA7ZwnA@mail.gmail.com> <5272D0DE.4080209@FreeBSD.org> <CACeEFf79RZskefh6RzBhxkHuAWnGjPWRDr_JBTRUWcGH4ZNVTg@mail.gmail.com> <CAOjFWZ7BbdXYi3gQtTvCa3jqTmjOC-tt5bwV1GR8Jf=tOanT%2BQ@mail.gmail.com> <52745B7F.2080608@vangyzen.net> <5274B947.7030607@FreeBSD.org> <1680682c-dc77-4ee3-8e59-ee7356f307a3@email.android.com> <5274D90D.8040508@FreeBSD.org> <20131102113750.GG2951@home.opsec.eu> <5274EFD6.6030504@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On 11/02/2013 07:28 AM, Matthew Seaman wrote:
> On 02/11/2013 11:37, Kurt Jaeger wrote:
>> Hi!
>>
>>> On 02/11/2013 10:15, Matthias Andree wrote:
>>>> I understand from Eric's pist that the issue is that through his
>>>> limiting proxies, the SRV are not available at all so he does not even
>>>> get to the point where he could get the pkgN.nyi.freebsd.org
>>>> <http://pkgN.nyi.freebsd.org>; name back.
>>>
>>> That doesn't make sense.  All the DNS SRV lookups on pkg.freebsd.org are
>>> done internally to pkg(8),
>>
>> ... which only works, if the DNS server queried answers SRV queries
>> with SRV values.
>>
>> Which is not always true, especially in heavily firewalled environments.
>
> I feel no obligation to do anything to encourage people that
> deliberately break the DNS.  They've made their bed, and now they have
> to lie in it.

Eric Camachat didn't break the DNS:  his network administrator did. 
Matthew, you're right:  that doesn't make sense.  But people do it, 
often for security, either real or perceived.  In this kind of 
environment, many other things are typically equally broken.  I imagine 
Eric needs all the encouragement he can get.

Yes, he can reconfigure pkg to use a specific mirror.  I only suggest 
that it could be made to work without that manual step (and the research 
necessary to determine that step).

Lest anyone think I'm complaining:  I am very impressed with pkg, and I 
appreciate all the technical and non-technical effort that Bryan, 
Baptiste, and many others spent on making it real.  Instead of a 
complaint, consider this a feature request.  That is, after all, the 
expected response to a feature announcement.  :)

Eric (van Gyzen)



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?527505D4.8060008>