Search
9 results for “BastilleBSD”
-
I am looking for a few more US-based early adopters to provide feedback on a protective DNS service offering aligned with NIST SP 800-81 Rev. 3 (March 2026).
https://csrc.nist.gov/pubs/sp/800/81/r3/final
This service merges Zero Trust and DNS without requiring client-side agents. Supports mobile devices, browsers, server hardware & IoT.
If you're interested in providing feedback on this service as a free beta tester, email me at:
-
Yes, there exist #FreeBSD tools that can set up the socket and the environment variable. I wrote one such tool years ago, and have been running a DNS server that accepts pre-created listening sockets and itself runs wholly unprivileged for almost as long.
Tell any naysayers that it can be done. (-:
http://jdebp.info/Softwares/nosh/guide/commands/udp-socket-listen.xml
http://jdebp.info/Softwares/djbwares/guide/commands/dnscache.xml
-
@BastilleBSD @patpro Thank you for your toot about this 🙏🏻
I posted a comment in the PR I created to update to port https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294574
I didn’t find how to use this new port version in a jail. Luckily I made a backup of /usr/local/etc/rc.d/adguardhome and I easily restored it to be able to launch the service.
I hesitated to create a new PR for this issue. I posted a comment in the initial PR.
If you know how to deal with this new way (aka security/portacl-rc), please let me know.
#FreeBSD #AdGuardHome #Bastille #Jail #BastilleBSD -
Want to contribute to Rocinante?
It's an open-source project, and new contributors are always welcome. Check out the GitHub repository to get started.
-
Our community is our strength!
Want to make a real impact on a fantastic open-source security project?
Bastille is always looking for code, documentation, and fresh ideas.
Patches welcome!
Find us on GitHub: https://github.com/BastilleBSD/bastille
-
dnscache, as you can see from that manual, needs both TCP and UDP listening sockets, so there's a TCP tool. The service ./run script for the DNS server chains through both tools.
There are also the three different kinds of AF_LOCAL listener tools.
http://jdebp.info/Softwares/nosh/guide/commands.html#UCSPIChainLoading
-
Reviewing DNS logs and noticed that `vuxml.freebsd.org` fails DNSSEC validation but `matrix-dev.freebsd.org` passes.
Can anyone else confirm or is my software buggy?
-
Imagine you went to bed last night and somehow woke up in the past.
What year do you *wish* we were waking up to today?
…and what would you do differently this time?
#Rewind #2026