Mastodawn

Juraj Lutter (otis)

Feb 23

@jpmens @fanf Thumbs up!

Juraj Lutter (otis)

Feb 23

@jpmens @feld Thanks for this article! Very inspiring.

Show thread

Juraj Lutter (otis)

Dec 5

@macer Oh yes, an old BE was created, but I was too lazy to boot into it 😵

Juraj Lutter (otis)

Dec 5

Yo kidz! Remember to update/upgrade your #FreeBSD to latest 14.3 prior updating to 15.0. Otherwise you'll need to use /rescue dir to fetch base.txz of 15.0 and unpack libsys.so.7 to /lib manually.

You're welcome.

Show thread

Juraj Lutter (otis)

Sep 17, 2025

@david_chisnall @dexter Wow, someone has the same observations that also I have. Another thing was the libnv shenenigans between userland and _KERNEL versions.

@dch Funny mustache!

@meka those rules needs to be loaded after mac_do module. this rule works for me, for example, security.mac.do.rules=gid=0:any

% curl -v https://forum.palemoon.org
* Host forum.palemoon.org:443 was resolved.
* IPv6: 2a01:4a0:67:1a::56e4
* IPv4: 31.7.187.157
*   Trying [2a01:4a0:67:1a::56e4]:443...
* ALPN: curl offers h2,http/1.1
...
* ALPN: server accepted h2
* Server certificate:
*  subject: CN=*.palemoon.org
*  start date: Jan  9 00:00:00 2025 GMT
*  expire date: Feb  9 23:59:59 2026 GMT
*  subjectAltName: host "forum.palemoon.org" matched cert's "*.palemoon.org"
*  issuer: C=GB; ST=Greater Manchester; L=Salford; O=Sectigo Limited; CN=Sectigo ECC Domain Validation Secure Server CA
*  SSL certificate verify ok.
*   Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256
*   Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA384
*   Certificate level 2: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384
* Connected to forum.palemoon.org (2a01:4a0:67:1a::56e4) port 443
* using HTTP/2
* [HTTP/2] [1] OPENED stream for https://forum.palemoon.org/
...
> GET / HTTP/2
> Host: forum.palemoon.org
> User-Agent: curl/8.15.0
> Accept: */*
>
...
* Request completely sent off
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
< HTTP/2 403
< server: nginx
< date: Sun, 31 Aug 2025 13:06:30 GMT
< content-type: text/html
< content-length: 146
< vary: Accept-Encoding
<
<html>
<head><title>403 Forbidden</title></head>
<body>
<center><h1>403 Forbidden</h1></center>
<hr><center>nginx</center>
</body>
</html>
* Connection #0 to host forum.palemoon.org left intact

Still, this is a problem at your end.

Pale Moon forum - Forum index

I've found the problem: @palemoon has improper webserver configuration for IPv6 virtual host. Over ipv4, the forum works.

Show thread

Juraj Lutter (otis)

Aug 28, 2025

@ptribble @palemoon "403 Forbidden" here 😕 From various networks.