gw-04-dfw wasn't just in a backup state. It was a naked machine on the public internet, its interface wide open.
He never trusted -current again.
He VPN’d in, his coffee cold before he’d even poured it. The first command was ritual.
His stomach turned to ice. Current. Not -release . Not -stable . Someone—a junior with a cowboy hat and a cron job—had pointed their package repository to the bleeding-edge snapshots. And the new PF, the one in 7.5-current , had changed.
Line 87. Julian scrolled through the config. Line 87 was a routine pass in rule for a backend API subnet.