Is there a comprehensive list of IP addresses used by stock #FreeBSD updates (freebsd-update(8) and pkg(8) and/or any other default system-maintenance utilities I might be missing)? Looking at my /etc/freebsd-update.conf and /etc/pkg/FreeBSD.conf files, it looks like update.freebsd.org and pkg.freebsd.org The aim is to configure pf(4) to limit jails outbound connections to only those update servers. A first-pass approximation suggests just running host(1) against those two servers and using the resulting IPv4/IPv6 addresses, but I don't know how frequently they'd change (are they fronting any sort of CDN that might choose different IPs?) or if I'm missing any other critical names/IPs.

Hey, #FreeBSD jail/networking folks: I've been trying to figure out whether VNET jail-networking *requires* a bridge0 device with both the LAN-facing adapter and all the common epair ends, or whether, since the epairs are all virtual interfaces, pf(4) can manage to do the routing/NAT without everything sitting on the same bridge0 device. However, when I try this (including net.{inet.ip,inet6,ip6}.forwarding=1) traffic doesn't seem to flow. Is there some obvious thing I've missed or that I should be testing? Or do I just need to throw everything on a bridge0 and deal with it?

Had some time on my hands, so I wrote up a bunch of the lesser-known corners of less(1) that I use with various frequency:

Assorted less(1) tips | Tim's blog

There's a surprising number of features hidden in something that doesn't get used as more than just a $PAGER.

Me: Hey, VPS provider, I see that I can upgrade my instance for ~$10/yr which bumps it up from 30GB to 55GB, but that gets me two more vCPUs and another 1GB of RAM. That's nice, but is there a cheaper way to upgrade just the disk on my VM since that's all I'm looking for? VPS provider: Sure, you can upgrade just your disk for $1,08/GB/yr with a minimum of 10GB. Me: so I can spend $10.80 annually for just a mere +10GB of disk space; or I can upgrade my instance for $10 annually and get an additional 15GB, of disk two more vCPU cores, and another 1GB of RAM? 🤦