FreeBSD recommends not using base unbound for an authoritative server

Bigby James bigby.james at
Thu Mar 19 21:20:51 UTC 2015

On 03/19, Chris Stankevitz wrote:
> Poly,
> Thank you for your thorough response.
> On Wed, Mar 18, 2015 at 5:02 PM, Polytropon <freebsd at> wrote:
> >> - infrequent updates
> >
> > What does "infrequent" mean?
> What I was referring to here was:
> I subscribe to freebsd-announce, which as I'm sure you know, sends out
> an email whenever the OS changes.  It explains why it changed, who is
> affected, etc.  These emails (and their associated software releases)
> are "infrequent" in that I get them less than once per month.  I
> imagine they are infrequent because of the quality of the software in
> the base OS and not because the OS team is slow an lazy. (although you
> point out that RELEASE updates are delayed and could leave my system
> vulnerable... this is scary...)

FreeBSD-RELEASE---the version of the OS that gets installed when you download an
installation image from gets updated any time a serious
security hole or system-breaking bug is discovered, or when a new RELEASE is
made. That's it. "Minor" bugs get fixed up in the development tree, but aren't
actually incorporated into the system until a) the next -RELEASE is made, or b)
you rebuild the system from source (if following -CURRENT). Exactly what
constitutes a "minor" bug can be subjective, however.

The ports tree on the other hand is updated constantly, and packages are built
from a snapshot of the ports tree every week. If you're using a program built
from ports or installed via pkg(8), you're guaranteed to get updates as they
come (and from my brief expierience with FreeBSD port maintainers tend to update
their ports rather quickly when a new version is released).

What this means, in short, is that you will only see an update to a program in
the RELEASE base system when that program is dangerously broken, while a program
built from a port or installed via pkg(8) may get updated almost immediately.  ;)

"A common mistake that people make when trying to design something completely
foolproof is to underestimate the ingenuity of complete fools." - Douglas Adams

More information about the freebsd-questions mailing list