Re: PF and a feauture I requested weeks ago

[van Helsing <vh@helith.net>]

On Sun, 1 Aug 2004 19:06:01 -0700
Ben Goren <ben@trumpetpower.com> wrote:

> On 2004 Aug 1, at 5:48 PM, van Helsing wrote:
> 
> > Is RSYNC part of the OS?
> > I take normaly just the things OpenBSD provide by default because
> > that min. the risk.
> 
> There are many other criteria than security for inclusion in OpenBSD. 
> Licensing is just as important. Rsync is GPL-ware, and it was long ago
> 
> decided that anything not already in OpenBSD that's encumbered by the 
> GPL won't be making its way into OpenBSD. Quite the opposite, in 
> fact--every release sees more and more GPL software replaced with 
> BSD-licensed variants. I'm sure Theo dreams of a day when even GCC can
> 
> be replaced....
> 
> Rsync is great software, and my life would be more difficult without 
> it. I don't expect it to be ever released under a BSD license, though,
> 
> and therefore I never expect it to be part of OpenBSD.
> 
> I also would be a bit surprised--not shocked, certainly, but 
> surprised--to come across an OpenBSD system that didn't have Rsync 
> installed (stripped systems, etc., excepted, of course).
> 
> Cheers,
> 
> b&

Then be suprised: I never used RSYNC (just as client).
I think (just for the pf.conf) RSYNC is a moster (Daemon) and I wont
install a monster during a job a little modfication can do also someday.

At the discussion weeks ago there was also an Admin and his FW was about
50 (or 150?) km away....
Should he buy a 50km RJ45 CAT5 cable? *g* Or just buy a optical NIC...
I've the same problem...

My Mainfirewall is here at home but e.g. my public server (OpenBSD
ofcourse) is in a computercenter of a friend wich is 20km away.
I know RSYNC is nice but e.g. CVS could help me too but I wont open a
new port at the server or at home.
And in the VPN it's also useless because you've to restart the FW and
that kick-off all current connections.

E.g. when I restart the FW at the servers all guys where kicked out.
I think this wouldn't happen if I would be able to use PFSYNC, or?
If pfsync also kick-out each connection then pfsync via e.g. SSH would
just be a nice tool to do the work much easier, or?
And all server in the VPN could use it too...easy!

vh

p.s. isn't there a free C-Compiler?
I think if somebody talk with the TENDRA-Project we can use it.
Because clause Nr. 1+2 (Copyright).
Point 3 seams to be like Apache.
But if OpenBSD wanna change the compiler some hardware platforms wont
exist anymore or they use the GCC.
And maybe the GCC could be set free if OpenBSD-Developer talk with the
GCC-Developer they maybe give OpenBSD 1 free, but then unsupported,
version. We're all just humans so we should talk more to each other. ;)
And they're a lot of free OSs e.g. FreeBSD, NetBSD, Plan9(?) wich maybe
intrested into a cooperation to improve or develop such a compiler?
Maybe the DDJ-Compiler is useable.. I don't know but if you're intrested
to replace the GCC I think it's possible, but not if just OpenBSD works
at such a project. 

[demime 0.98d removed an attachment of type application/pgp-signature]