In message <https://marc.info/?l=openbsd-misc&m=166062861021368&w=1> I described how I'm using an OpenBSD firewall (pf) to protect a VOIP phone system. A small correction:
I wrote: > The firewall > also runs unbound to provide caching DNS service to the VOIP box and the > local computers, and to do secure DNS-over-TCP to an upstream DNSSEC > provider. (That way I don't need to trust the ISP box's DNS service.) Oops, /dev/brain parity error there -- that should have been "DNS-over-TLS". Sorry for any confusion, -- -- "Jonathan Thornburg [remove -color to reply]" <[email protected]> on the west coast of Canada, eh? "Why would we install sewers in London? Everyone keeps getting cholera again and again so there's obviously no reason to install sewers. We just need to get used to this as the new normal." -- 2022-07-25 tweet by "Neoliberal John Snow"
