From owner-freebsd-current@FreeBSD.ORG Sat Nov 2 14:01:58 2013 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 7D9C444A; Sat, 2 Nov 2013 14:01:58 +0000 (UTC) (envelope-from eric@vangyzen.net) Received: from smtp.vangyzen.net (hotblack.vangyzen.net [IPv6:2607:fc50:1000:7400:216:3eff:fe72:314f]) by mx1.freebsd.org (Postfix) with ESMTP id 538DD26DE; Sat, 2 Nov 2013 14:01:58 +0000 (UTC) Received: from latitude.home.vangyzen.net (173-20-209-204.client.mchsi.com [173.20.209.204]) by smtp.vangyzen.net (Postfix) with ESMTP id 2B3485641F; Sat, 2 Nov 2013 09:01:57 -0500 (CDT) Message-ID: <527505D4.8060008@vangyzen.net> Date: Sat, 02 Nov 2013 09:01:56 -0500 From: Eric van Gyzen User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130625 Thunderbird/17.0.7 MIME-Version: 1.0 To: Matthew Seaman , freebsd-current@freebsd.org Subject: Re: Official FreeBSD Binary Packages now available for pkgng References: <5271BC11.1010303@FreeBSD.org> <5272D0DE.4080209@FreeBSD.org> <52745B7F.2080608@vangyzen.net> <5274B947.7030607@FreeBSD.org> <1680682c-dc77-4ee3-8e59-ee7356f307a3@email.android.com> <5274D90D.8040508@FreeBSD.org> <20131102113750.GG2951@home.opsec.eu> <5274EFD6.6030504@FreeBSD.org> In-Reply-To: <5274EFD6.6030504@FreeBSD.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Nov 2013 14:01:58 -0000 On 11/02/2013 07:28 AM, Matthew Seaman wrote: > On 02/11/2013 11:37, Kurt Jaeger wrote: >> Hi! >> >>> On 02/11/2013 10:15, Matthias Andree wrote: >>>> I understand from Eric's pist that the issue is that through his >>>> limiting proxies, the SRV are not available at all so he does not even >>>> get to the point where he could get the pkgN.nyi.freebsd.org >>>> name back. >>> >>> That doesn't make sense. All the DNS SRV lookups on pkg.freebsd.org are >>> done internally to pkg(8), >> >> ... which only works, if the DNS server queried answers SRV queries >> with SRV values. >> >> Which is not always true, especially in heavily firewalled environments. > > I feel no obligation to do anything to encourage people that > deliberately break the DNS. They've made their bed, and now they have > to lie in it. Eric Camachat didn't break the DNS: his network administrator did. Matthew, you're right: that doesn't make sense. But people do it, often for security, either real or perceived. In this kind of environment, many other things are typically equally broken. I imagine Eric needs all the encouragement he can get. Yes, he can reconfigure pkg to use a specific mirror. I only suggest that it could be made to work without that manual step (and the research necessary to determine that step). Lest anyone think I'm complaining: I am very impressed with pkg, and I appreciate all the technical and non-technical effort that Bryan, Baptiste, and many others spent on making it real. Instead of a complaint, consider this a feature request. That is, after all, the expected response to a feature announcement. :) Eric (van Gyzen)