Comments for May Contain Traces of Bolts https://blog.des.no Thinking out loud about cars, computers and security Wed, 31 Dec 2025 09:41:32 +0000 hourly 1 https://wordpress.org/?v=7.1.3 Comment on DNS over TLS in FreeBSD 12 by Dag-Erling Smørgrav https://blog.des.no/2018/10/dns-over-tls-in-freebsd-12/#comment-1054137 Wed, 31 Dec 2025 09:41:32 +0000 https://blog.des.no/?p=1249#comment-1054137 In reply to Matlib.

I forgot to reply at the time, but this was fixed in main in March 2023 (prior to 14.0) and in stable/13 in June 2023 (prior to 13.3).

]]> Comment on DNS over TLS in FreeBSD 12 by Matlib https://blog.des.no/2018/10/dns-over-tls-in-freebsd-12/#comment-1025395 Fri, 25 Mar 2022 23:22:25 +0000 https://blog.des.no/?p=1249#comment-1025395 local-unbound-setup changes resolv.conf’s path to /dev/null in /etc/resolvconf.conf. This causes error every time resolvconf -u is launched:

root@freebsd13:~# resolvconf -u
cp: /dev/null.bak: Operation not supported

This can be fixed by simply changing it to a real path, like /tmp/resolv.disabled.

]]> Comment on Local caching resolver in FreeBSD 10 by Dag-Erling Smørgrav https://blog.des.no/2013/09/local-caching-resolver-in-freebsd-10/#comment-1020483 Thu, 18 Mar 2021 13:32:59 +0000 http://blog.des.no/?p=683#comment-1020483 In reply to udanieli.

Assuming you just want to hardcode your forwarders, you should set local_unbound_forwarders in /etc/rc.conf or /etc/rc.conf.d/local_unbound instead.

]]> Comment on Local caching resolver in FreeBSD 10 by udanieli https://blog.des.no/2013/09/local-caching-resolver-in-freebsd-10/#comment-1020480 Thu, 18 Mar 2021 08:30:42 +0000 http://blog.des.no/?p=683#comment-1020480 In reply to Dag-Erling Smørgrav.

Thank you man, I did not understand why forward.conf is overwritten. Creating my custom forward in /var/unbound/conf.d/mycustom.conf fixed that.

]]> Comment on wtf, zsh by Alexander https://blog.des.no/2020/09/wtf-zsh/#comment-1019045 Wed, 28 Oct 2020 13:04:53 +0000 https://blog.des.no/?p=1333#comment-1019045 FTFY ;)

sh zsh: command not found: sh
csh zsh: command not found: csh
bash zsh: command not found: bash
zsh !

]]> Comment on tcpdump cheat sheet by Pieter https://blog.des.no/tcpdump-cheat-sheet/#comment-1018371 Sun, 16 Aug 2020 07:38:56 +0000 http://blog.des.no/?page_id=727#comment-1018371 Perfect stuff !
Works in WireShark as capture filter as wel.
Good way to capture datastreams, without creating large log files.

I was looking for the same, but made mistakes in the definition of the filter.

Thanks !

]]> Comment on tcpdump cheat sheet by Dag-Erling Smørgrav https://blog.des.no/tcpdump-cheat-sheet/#comment-1015343 Mon, 13 May 2019 15:44:03 +0000 http://blog.des.no/?page_id=727#comment-1015343 In reply to Kasper.

They’re not hacks, they’re… literally how IPv6 works. And fragmentation is usually not an issue when I’m using these.

]]> Comment on tcpdump cheat sheet by Kasper https://blog.des.no/tcpdump-cheat-sheet/#comment-1015326 Sat, 11 May 2019 18:15:00 +0000 http://blog.des.no/?page_id=727#comment-1015326 Your ICMPv6 hack works as long as the packets are not fragmented.

]]> Comment on tcpdump cheat sheet by John Leimgruber https://blog.des.no/tcpdump-cheat-sheet/#comment-1014791 Tue, 05 Feb 2019 21:48:37 +0000 http://blog.des.no/?page_id=727#comment-1014791 tcpdump -i eth0 -c10 ‘(icmp6 && (ip6[40] >= 133 && ip6[40] <= 137))’

]]> Comment on tcpdump cheat sheet by Dag-Erling Smørgrav https://blog.des.no/tcpdump-cheat-sheet/#comment-1014409 Mon, 13 Aug 2018 16:10:41 +0000 http://blog.des.no/?page_id=727#comment-1014409 In reply to Sparky.

I don’t know what you mean by “assume interface management”. These are subexpressions for use in tcpdump filters. They are not very useful on their own; you will generally also want to filter on source or destination address (or subnet) or port numbers. Either way, you won’t have much use for them unless you already know how to use tcpdump.

]]> Comment on tcpdump cheat sheet by Sparky https://blog.des.no/tcpdump-cheat-sheet/#comment-1014395 Fri, 10 Aug 2018 00:44:59 +0000 http://blog.des.no/?page_id=727#comment-1014395 Would you please write out the entire command for us? Assume Interface mgmt.

]]> Comment on Local caching resolver in FreeBSD 10 by Dag-Erling Smørgrav https://blog.des.no/2013/09/local-caching-resolver-in-freebsd-10/#comment-1014108 Wed, 23 May 2018 13:56:05 +0000 http://blog.des.no/?p=683#comment-1014108 In reply to Sofyana Bellaa.

Yes. It will use the resolvers that were listed in /etc/resolv.conf when you first ran the setup script, or you can set the local_unbound_resolvers variable (either in /etc/rc.conf or /etc/rc.conf.d/local_unbound) to a space-separated list of IP addresses, or to none for a recursing configuration, and re-run service local_unbound setup.

]]> Comment on Local caching resolver in FreeBSD 10 by Sofyana Bellaa https://blog.des.no/2013/09/local-caching-resolver-in-freebsd-10/#comment-1014096 Sat, 19 May 2018 09:04:00 +0000 http://blog.des.no/?p=683#comment-1014096 will it work if using other than DHCP?

]]> Comment on tcpdump cheat sheet by Sofyana Bellaa https://blog.des.no/tcpdump-cheat-sheet/#comment-1014095 Sat, 19 May 2018 09:02:13 +0000 http://blog.des.no/?page_id=727#comment-1014095 ]]> I do not understand at all😅

]]> Comment on Local caching resolver in FreeBSD 10 by Dag-Erling Smørgrav https://blog.des.no/2013/09/local-caching-resolver-in-freebsd-10/#comment-1012698 Mon, 10 Jul 2017 22:09:41 +0000 http://blog.des.no/?p=683#comment-1012698 In reply to Peter.

We did the same for BIND, with symlinks in /etc. Besides, the local_unbound configuration is not intended to be user-serviceable.

]]> Comment on Local caching resolver in FreeBSD 10 by Peter https://blog.des.no/2013/09/local-caching-resolver-in-freebsd-10/#comment-1012555 Mon, 03 Jul 2017 19:31:14 +0000 http://blog.des.no/?p=683#comment-1012555 I know this post is a bit dated, but maybe you have some idea why unbound are placed in /var? This seems very non FreeBSD to me?

]]> Comment on Refurbishing a coil pack by Little Badger https://blog.des.no/2015/09/refurbishing-a-coil-pack/#comment-1011655 Wed, 01 Feb 2017 21:10:52 +0000 http://blog.des.no/?p=903#comment-1011655 In reply to Dag-Erling Smørgrav.

I replaced the leads with another old set that I had and the hesitation was still there.
So I put my Jackson Racing leads back in.
The old coil pack has corrosion in each port.
It looks like the green corrosion you get on batteries.
I’m going to dremel them on the weekend.

]]> Comment on Refurbishing a coil pack by Dag-Erling Smørgrav https://blog.des.no/2015/09/refurbishing-a-coil-pack/#comment-1011621 Sat, 28 Jan 2017 19:54:03 +0000 http://blog.des.no/?p=903#comment-1011621 In reply to Little Badger.

I hope it helps! Don’t forget to check your HT leads, though.

Was there any corrosion on the old coil pack?

]]> Comment on Refurbishing a coil pack by Little Badger https://blog.des.no/2015/09/refurbishing-a-coil-pack/#comment-1011620 Sat, 28 Jan 2017 19:17:08 +0000 http://blog.des.no/?p=903#comment-1011620 I’ve got a hesitation problem and replaced lots of sensors etc.
I eventually thought my Coil pack was the problem and bought a used one from Ebay.

I received it and noticed, just like yours, my number 1 connector was corroded inside.
I cleaned mine with electrical cleaner and a small file.

Now waiting for tomorrow to see if my coil pack on my car has the same problem and, if it has, could be the answer to all my problems.

]]> Comment on FreeBSD and CVE-2015-7547 by Dag-Erling Smørgrav https://blog.des.no/2016/02/freebsd-and-cve-2015-7547/#comment-1010587 Sat, 27 Feb 2016 09:15:31 +0000 https://blog.des.no/?p=1116#comment-1010587 In reply to Kumar.

BIND 9.8.4.2 was discontinued three years ago.

]]>