I have to agree with Theo and I was honestly shocked at your initial email. You don't bite the hand that is trying to help nor do you bite the hand that is giving you something for free.
Sent: Wednesday, May 25, 2011 3:22 PM Subject: Re: ospfd/ospf6d causing denial of service(?) Theo, come on man... I really don't understand the hostility here. My goal here is not to get people worked up. I understand you get harassed a lot and people constantly beg for this and that, but I just wanted clarification as I have seen no strict guidelines on what actually becomes "Errata". The description in the FAQ is rather vague and that is what prompted me to ask. I apologize if I came off rude, but that was not the intent. Honestly, the thought that this can easily affect other people with lots of network statements in OSPF is pretty scary, and the thought of running -current is equally scary. Most admins prefer not to live out on the edge and I understand the project's strict guidelines should ensure safe and reliable code commits, but nobody is perfect and this is one of those situations where I would like to be as safe as possible. Deciding to run non -release software with what would be described in most projects as being "unofficial" fixes is a giant leap of faith for most people. What can I say -- old habits die hard. On the other hand, I had this discussion with co-workers today: What makes you trust hotfixes from vendors any more than code from members of the example: OpenBSD project? It doesn't make sense; you don't get responses from their developers directly most of the time, you have no idea what their skills are, and you certainly don't get to see the code! Suddenly you trust a vendor with your life because you were forced to drop a hefty bag of money in front of them? It seems very backwards, and I'd like to get that perception changed: quality open source software is available and it is a wise financial investment. I have great respect for you, Theo, the OpenBSD project, and all of the contributers. The responses to this situation from Claude have instilled great confidence in the use of this software. I just want to point out that the FAQ does indeed say that "Most users should be running either -stable or -release", and if there is absolutely no way that the OpenOSPFD fixes can make it into an official errata (even with a paid bounty?) I'll just have to grit my teeth, build some -current boxes, test the living hell out of them, and hope for the best. :-) Cheers, Mark
