From owner-freebsd-current@FreeBSD.ORG Sat Nov 2 11:37:52 2013 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id E1A82E01; Sat, 2 Nov 2013 11:37:52 +0000 (UTC) (envelope-from pi@opsec.eu) Received: from home.opsec.eu (home.opsec.eu [IPv6:2001:14f8:200::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 6F2502022; Sat, 2 Nov 2013 11:37:52 +0000 (UTC) Received: from pi by home.opsec.eu with local (Exim 4.80.1 (FreeBSD)) (envelope-from ) id 1VcZWY-000A5b-4Z; Sat, 02 Nov 2013 12:37:50 +0100 Date: Sat, 2 Nov 2013 12:37:50 +0100 From: Kurt Jaeger To: Matthew Seaman Subject: Re: Official FreeBSD Binary Packages now available for pkgng Message-ID: <20131102113750.GG2951@home.opsec.eu> References: <5271BC11.1010303@FreeBSD.org> <5272D0DE.4080209@FreeBSD.org> <52745B7F.2080608@vangyzen.net> <5274B947.7030607@FreeBSD.org> <1680682c-dc77-4ee3-8e59-ee7356f307a3@email.android.com> <5274D90D.8040508@FreeBSD.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <5274D90D.8040508@FreeBSD.org> X-Mailman-Approved-At: Sat, 02 Nov 2013 16:00:32 +0000 Cc: freebsd-current@freebsd.org X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Nov 2013 11:37:53 -0000 Hi! > On 02/11/2013 10:15, Matthias Andree wrote: > > I understand from Eric's pist that the issue is that through his > > limiting proxies, the SRV are not available at all so he does not even > > get to the point where he could get the pkgN.nyi.freebsd.org > > name back. > > That doesn't make sense. All the DNS SRV lookups on pkg.freebsd.org are > done internally to pkg(8), ... which only works, if the DNS server queried answers SRV queries with SRV values. Which is not always true, especially in heavily firewalled environments. -- pi@opsec.eu +49 171 3101372 7 years to go !