Re: problem with make
Hi list i just installed freeBSD 5.4 and i have tried to make buildworld but if fails. Anybody who has faced this before? these are the errors it generates After setting up my firewall cd /usr/src make buildworld error make: don't know how to make buildworld. Stop -- Ronnie Tash Everything can be achieved as long you can do what it takes to achieve it! A wise man will seek an opportunity in every problem; A foolish man will see a problem in every opportunity. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: portupgrade eats my swap space
On Wed, Jan 18, 2006 at 02:50:10PM +0700, Roger Merritt wrote: OK, my problem doesn't seem to be exactly the same. My machine hangs, and when I check it the console screen is filled with the message, swap-pager: indefinite wait buffer: bufobj: 0, blkno: 26650, size: 4096 and at that point the only thing I can do is a hard reboot -- it's not reacting to input at all. You probably have a failing HD. Back up and replace before the damage becomes worse and you lose data. My /etc/make.conf in its entirety is # added by use.perl 2006-01-18 08:04:37 PERL_VER=5.8.7 PERL_VERSION=5.8.7 I was surprised to find there is no /etc/defaults/make.conf any more -- that may have something to do with it. I haven't been paying very close attention until now. Nope, it's in /usr/share/examples/etc/make.conf now. The file is entirely commented out so it was a NOP to have it in /etc/defaults. Kris pgpU5uVEvSu7w.pgp Description: PGP signature
Re: problem with make
On Wed, Jan 18, 2006 at 11:00:13AM +0300, Ronnie Napster Tash wrote: Hi list i just installed freeBSD 5.4 and i have tried to make buildworld but if fails. Anybody who has faced this before? these are the errors it generates After setting up my firewall cd /usr/src make buildworld error make: don't know how to make buildworld. Stop You don't have the source code installed. Please see the handbook. Kris pgpEy7doGfXWl.pgp Description: PGP signature
Cron script redirection (probably stderr problem ?)
Hello, I am using a little cron script to update my server that calls portsnap. Once this is done there is another piece of script that tells me which port(s) is to be updated with a simple call to a script that mainly execute portversion -l and mail me the output of the command. There is one little problem with that script : Cron mails me (root) each time this output (probably because it comes from standerr ?) : [Updating the portsdb format:bdb1_btree in /usr/ports ... - 14011 port entries found . 1000.2000.3000.4000.5000.6000. 7000.8000.9000.1.11000.120 00.13000.14000 . done] The cron script is executed as follow : 0 3 * * * /usr/local/sbin/portsnap cron /usr/local/sbin/portsnap - I update /root/src/upgrade.sh /var/log/upgrade.log I've tried to add a 21 at the end of the script : 0 3 * * * /usr/local/sbin/portsnap cron /usr/local/sbin/portsnap - I update /root/src/upgrade.sh /var/log/upgrade.log 21 But this does not seem to change my problem. Any help ? «?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§ Gregober --- PGP ID -- 0x1BA3C2FD bsd @at@ todoo.biz «?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Foreign language posts (was: Pooomooocyyyy ;()
On Wednesday 18 January 2006 05:53 am, Chad Leigh -- Shire.Net LLC wrote: (snip) I think you need to look up the word xenophobe http://dictionary.reference.com/search?q=xenophobe There is nothing in having an english-language-only list that fits the definition. Them dam furriners oughta get zivilized learn Anglish! -LenZ- (snip) ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Have I been hacked or is nmap wrong?
On Tuesday 17 January 2006 19:27, Micheal Patterson pondered: The 1663 ports scanned but not shown below are in state: filtered) PORT STATE SERVICE 80/tcp open http 554/tcp open rtsp 1755/tcp open wms 5190/tcp open aol Kilian, what does a sockstat show you on those systems and are there any nats on either of these systems that would have a redirect_address to something behind them? sockstat -4l only shows up the processes serving the LAN (dnsmasq, samba) as well as sshd: USERCOMMAND PID FD PROTOLOCAL ADDRESS FOREIGN ADDRESS rootsmbd484 18 tcp4 192.168.133.1:445 *:* rootsmbd484 19 tcp4 192.168.133.1:139 *:* rootnmbd480 6 udp4 *:137 *:* rootnmbd480 7 udp4 *:138 *:* rootnmbd480 8 udp4 192.168.133.1:137 *:* rootnmbd480 9 udp4 192.168.133.1:138 *:* nobody dnsmasq 458 1 udp4 *:56212 *:* nobody dnsmasq 458 3 udp4 *:53 *:* nobody dnsmasq 458 4 tcp4 *:53 *:* nobody dnsmasq 458 5 udp4 *:67 *:* rootsshd432 3 tcp4 *:22 *:* rootsyslogd 311 4 udp4 *:514 *:* So nothing suspect at all here. Yes, the systems are natted(with above system LAN on 192.168.133.0/24), using ppp -nat. I have no specific redirects set up, and only a allow tcp/udp from LAN to WAN/any setup keep-state dynamic rule, but that should be unrelated. If my server is not compromised, how the heck could an http/rtsp/wms/aol redirect sneak in there without me explicitly enabling it? -- Kilian Hagemann Climate Systems Analysis Group University of Cape Town Republic of South Africa Tel(w): ++27 21 650 2748 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: I killed my Flash player 7 in Konqueror
On Tuesday 17 January 2006 13:42, Ashley Moran wrote: [EMAIL PROTECTED] cat /etc/libmap.conf # Flash7 with Mozilla/Firebird/Galeon/Epiphany/Konqueror [/usr/X11R6/lib/linux-flashplugin7/libflashplayer.so] libpthread.so.0 pluginwrapper/flash7.so libdl.so.2 pluginwrapper/flash7.so libz.so.1 libz.so.3 libstdc++-libc6.2-2.so.3 libstdc++.so.5 libm.so.6 libm.so.4 libc.so.6 pluginwrapper/flash7.so Fixed it, turns out references to pluginwrapper/flash7.so should actually be to pluginwrapper/flash6.so. Obviously :-S ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
String variable expansion routine wanted
Hi folks, Is there a C-function that does string variable expansion like this: some text $(VARIABLE) text -- some text VALUE text I suppose this functionality is useful for many programs, so I'm looking for a simpe library to link with. Please CC me on reply. Thanks a lot! -- Alexander Pohoyda [EMAIL PROTECTED] PGP Key fingerprint: 7F C9 CC 5A 75 CD 89 72 15 54 5F 62 20 23 C6 44 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
How to install x-windows in freeBSD
Hi guys ,This is Anirban here.I have just installed freeBSD 6.0 and i have installed it properly.But i am not able to see any graphics on it.So my question is that how i can install x-window system in freeBSD environment. Hope i will receive my reply soon. with regards Anirban. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: How to install x-windows in freeBSD
Hi Anirban, a very good place to start is the handbook, chapter 5. Most important is to know the monitor specifications, video adapter chipset, the video adapter memory and to create a initial xorg.conf with Xorg -configure If you've done this already and still hung, you need to supply detailed information to the list. Best, Ben Anirban Adhikary schrieb: Hi guys ,This is Anirban here.I have just installed freeBSD 6.0 and i have installed it properly.But i am not able to see any graphics on it.So my question is that how i can install x-window system in freeBSD environment. Hope i will receive my reply soon. with regards Anirban. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: How to install x-windows in freeBSD
Hi Anirban, This is not your first post here but I can't understand how you can ask for such information. However, I am not the police and I found something, very miraculous for you. But please when you need informations, have a look to the handbook and on Google. We won't work for you. http://www.freebsd.org/doc/en/books/handbook/x11.html Of course if this chapter and Google let some issues unsolved, feel free to ask questions here (that is why it is called freebsd-questions, isn't it?) -- Regards, Ivan. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: String variable expansion routine wanted
Hi, Well If I understood well you need printf() Definitely check the manual page: #man 3 printf You can use printf() like this: vartype Variable = declaration; /* string or int or double etc */ /* will print your text and the variable in the middle */ printf(some text... %type_of_variable ... more text, variable); You can use multiple variables like that if you want of any type: int = 1; string = Hello; . printf((text)number: %i(int), text: %s, text: %..., text: %... , text: ..., int, string, ..., ..., ...); Spiros P. -Original Message- From: [EMAIL PROTECTED] [mailto:owner-freebsd- [EMAIL PROTECTED] On Behalf Of Alexander Pohoyda Sent: Wednesday, January 18, 2006 9:46 AM To: freebsd-questions@freebsd.org Subject: String variable expansion routine wanted Hi folks, Is there a C-function that does string variable expansion like this: some text $(VARIABLE) text -- some text VALUE text I suppose this functionality is useful for many programs, so I'm looking for a simpe library to link with. Please CC me on reply. Thanks a lot! -- Alexander Pohoyda [EMAIL PROTECTED] PGP Key fingerprint: 7F C9 CC 5A 75 CD 89 72 15 54 5F 62 20 23 C6 44 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions- [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: How to install x-windows in freeBSD
hi Anirban, first update your ports tree using cvsup. [cvsup -g -L 2 /etc/ports-supfile this will do it. but ports-supfile might be somewhere else if u didnt edit then move it under /etc. for this check documentation.] then cd to /usr/ports/x11/xorg # make install clean. soon u done with this step, move to the last one. select kde or gnome to install. [up to you which to prefer.] kde or gnome alsa avaliable in ports. cd to the directory u prefer. then make install clean again. edit your xorgconf [accourding to your pc configuration] and xinitrc [exec startkde]. reboot, login, startx ;) hope this will help. regards, bye ;) ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: trouble installing new printer
Hi Ivan, OK I hope this isn't going to sound to nasty but I'm going to say it anyway. Did it ever occur to you that it might have been a better idea to post to the mailing list and ask what a good printer to buy would be BEFORE buying this printer? There are websites specifically http://www.linuxprinting.org that are set up for this - your Canon isn't even listed on that one. Why - because nobody buys Canon printers that use them under FreeBSD or Linux - and the reason is pretty clearly stated on this page here: http://www.linuxprinting.org/suggested.html ...There are few good free software drivers for Canon and Lexmark inkjets. Do not buy one and expect success... In short, you gave your money to a company that hasn't lifted a finger to support any Open Source operating systems - and you didn't give your money to a printer manufacturer who has spent money supporting Open Source operating systems. Now, please explain how doing this is going to encourage more support of Open Source operating systems by printer manufacturers? Also one other thing - according to this website: http://www.canon.co.uk/for_home/product_finder/printers/bubble_jet/archiv e.asp your printer is no longer in production. If you just bought this printer you got it from a closeout bargain basement dealer for a cheap closeout price. It is not like you have a lot of money invested in this printer, then. My advice to you is you need to treat this as a fairly cheap but important lesson on purchasing computer peripherals. I would also point out that just about all inkjet printers are designed as devices that force the user to spend a lot of money on inkjet cartridges. Your cost per page from this printer will be -far higher- than that of a decent laser printer, and if you do any amount of black and white printing your going to save money if you get a black and white printer and save the bubble jet for printing color, only. Even a dot-matrix would be far cheaper. Beyond this the only other thing I can offer you is that if you are using the parallel port to the printer you might try the USB port instead. I can't guarantee it will work at all, but USB is faster than parallel. a LOT faster. Ted -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of [EMAIL PROTECTED] Sent: Monday, January 16, 2006 8:16 AM To: freebsd-questions@freebsd.org Subject: trouble installing new printer Hi all, my previous (and still unanswered) message was: --- Hi, I just bought a Canon i865 yesterday. This is my first printer install on FreeBSD. I, of course, followed the steps described in the handbook. But when running the really simple 'lptest /dev/lpt0' command, nothing happened, excepted the flashing light on the printer. The flashing time is depending of the job size, i.e. the light is flashing longer with lptest /dev/lpt0 than with lptest 20 5 /dev/lpt0. I decided to go a bit firther and configured /etc/printcap, and activated the lf capability. And running lptest 20 5 | lpr -Pmy-printer gave again the same result. I tried many research on the net but could not find anything useful. I am now installing apsfilter but ask you for some help during the compilation process. Thank you. --- So now I installed apsfilter and had to choose a driver. I tested Canon BJC-800 and two or three from the BJC-8200 (said mostly compatible). Ok, I got a printed output, but my printers needs approx. 5 minutes for a simple plain text page. That is quite painfuly slow, isn't it ? I even tried the turboprint driver, but got nothing whith it. So at that point: - I can print - I can go to sleep for a whole week before getting one chapter from the handbook printed. Do you have anything to suggest to me ? -- Regards, Ivan ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.375 / Virus Database: 267.14.19/231 - Release Date: 1/16/2006 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: trouble installing new printer
Hi Ted, don't worry about what your mail sounds, it is ok :) You're right on every points. I do not need to print so much. In fact, I am translating the printing chapter of the handbook to french and I just wanted to test the parallel interface. I bought this printer for 70$ (approx.). In fact, it is just the cost for knowledge :) Yes I should have choose a compatible printer, but it was the cheapest one and I am sure I will have good results. Some website pointed me to the BJC-8200 driver and I got some results with the BJC-800 one. I am not a politic man but I think one company you may consider working for open source is HP, especially when they give the FBSD foundation important gifts. I worked for them and I had to change my job because of their restructuration plan (I was like a collateral damage, not a directly fired guy). Everybody will have his point of view. I promised myself never buy Canon printers again after my i320. But for sure, when time will come for me to have an everyday-printing printer, I will choose it carefuly, and spend as much money as necessary. P.S: a simple PS just about USB printers: the chapter I am translating (http://www.freebsd.org/doc/en/books/handbook/printing.html) said USB is superior to RS-232 Serial and to Parallel for printing, but it is not as well supported under UNIX® systems. I will test USB connection of course and maybe submit an update for this chapter. -- Regards, Ivan. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
urgent, agir vite
on dirait qu'il y a un bug là :
http://www.fr.freebsd.org/cgi/search.cgi?max=25source=ords=TurboGXsubmit=Rechercher
ça affiche tout le code perl !
de rien.
Rol, fan de fribéhesdé
#!/usr/bin/perl -T
#
# mail-archive.pl -- a CGI interface to a wais indexed maling list archive.
#
# Origin:
# Tony Sanders [EMAIL PROTECTED], Nov 1993
#
# Hacked beyond recognition by:
# John Fieber [EMAIL PROTECTED], Nov 1994
#
# Format the mail messages a little nicer.
# Add code to check database status before searching.
# John Fieber [EMAIL PROTECTED], Aug 1996
#
# Disclaimer:
# This is pretty ugly in places.
#
# $FreeBSD: www/en/cgi/search.cgi,v 1.26 2005/10/24 20:59:01 wosch Exp $
$server_root = '/usr/local/www';
$waisq = /usr/local/www/bin/waisq;
$sourcepath = $server_root/db/index;
$hints = /search/searchhints.html;
$searchpage = '/search/search.html';
$myurl = $ENV{'SCRIPT_NAME'};
require open2.pl;
require ./cgi-lib.pl;
require ./cgi-style.pl;
@months = ('Jan', 'Feb', 'Mar', 'Apr', 'May', 'Jun', 'Jul', 'Aug',
'Sep', 'Oct', 'Nov', 'Dec');
sub escape($) { $_ = $_[0]; s//amp;/g; s//lt;/g; s//gt;/g; $_; }
sub do_wais {
ReadParse;
@FORM_words = split(/ /, escape($in{words}));
@FORM_source = split(/\0/, escape($in{source}));
$FORM_max = $in{max};
$FORM_docnum = $in{docnum};
$FORM_index = $in{index};
if ($FORM_index =~ /^re[sc]ent$/) {
$sourcepath = $server_root/db/index-recent;
}
if ($#FORM_words 0) {
print html_header(Mail Archive Search) .
pNo search term given.;
print p\nPlease return to the .
search page and fill out the 'Search for' field!\n;
print html_footer;
exit 0;
}
@AVAIL_source = checksource(@FORM_source);
if ($#FORM_source != $#AVAIL_source) {
$j = 0;
$k = 0;
foreach $i (0 .. $#FORM_source) {
if ($FORM_source[$i] ne $AVAIL_source[$j]) {
$badsource[$k] = $FORM_source[$i];
$k++;
} else {
$j++;
}
}
$badsource = join(/em, em, @badsource);
$badsource =~ s/,([^,]*)$/ and $1/;
if ($#FORM_source - $#AVAIL_source 1) {
$availmsg = p[The em$badsource/em archives are
currently unavailable.]/p;
} else {
$availmsg = p[The em$badsource/em archive is currently
unavailable.]/p;
}
}
if ($#AVAIL_source 0) {
$i = join(/em, em, @FORM_source);
$i =~ s/,([^,]*)$/ and $1/;
print html_header(Mail Archive Search) .
pNone of the archives you requested (em$i/em) are .
available at this time./p\n;
print pPlease try again later, or return to the .
search page and select a different archive./p\n;
print html_footer;
exit 0;
}
# Now we formulate the question to ask the server
foreach $i (@AVAIL_source) {
$w_sources .= (:source-id\n:filename \$i.src\\n) ;
}
$w_question = \n (:question
:version 2
:seed-words \@FORM_words\
:relevant-documents
( )
:sourcepath \$sourcepath/:\
:sources
( $w_sources )
:maximum-results $FORM_max
:result-documents
( )
)\n;
#
# First case, no document number so this is a regular search
#
print html_header(Search Results);
print $availmsg;
if ($#AVAIL_source 0) {
$src = join(/em, em, @AVAIL_source);
$src =~ s/,([^,]*)$/ and $1/;
print pThe archives em$src/em contain ;
}
else {
print The archive em@AVAIL_source/em contains ;
}
print the following items relevant to [EMAIL PROTECTED]':\n;
print ol\n;
open2(WAISOUT, WAISIN, $waisq, -g);
print WAISIN $w_question;
local(@mylist) = ();
local($hits, $score, $headline, $lines, $bytes, $docid, $date, $file);
while (WAISOUT) {
/:original-local-id.*#\(\s+([^\)]*)/
($docid = pack(C*, split(/\s+/, $1)),
$docid =~ s/\s+/+/g);
/:score\s+(\d+)/ ($score = $1);
/:filename (.*)/ ($file = $1);
/:number-of-lines\s+(\d+)/ ($lines = $1);
/:number-of-bytes\s+(\d+)/ ($bytes = $1);
/:headline (.*)/ ($headline = $1,
$headline =~ s/[Rr]e://); # XXX
/:date (\d+)/ $docid !~ /\.src$/ ($date = $1, $hits++,
push(@mylist, join(\t, $date, $headline, $docid,
$bytes, $lines, $file, $score,
$hits)));
}
if ($in{'sort'} eq date) {
foreach (reverse sort {$a = $b} @mylist) {
($date, $headline, $docid, $bytes, $lines,
$file, $score, $hits) = split(\t);
docdone;
}
} elsif ($in{'sort'} eq subject) {
local(@a, @c, $b, $d);
foreach (@mylist) {
@a = split(\t);
$b = $a[0];
# swap date and subject
no one here use restore/dump?
nobody here do backups of their systems? strange?! ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: trouble installing new printer
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of [EMAIL PROTECTED] Sent: Wednesday, January 18, 2006 2:21 AM To: [EMAIL PROTECTED] Cc: freebsd-questions@freebsd.org Subject: RE: trouble installing new printer Hi Ted, don't worry about what your mail sounds, it is ok :) You're right on every points. I do not need to print so much. In fact, I am translating the printing chapter of the handbook to french and I just wanted to test the parallel interface. I bought this printer for 70$ (approx.). In fact, it is just the cost for knowledge :) Yes I should have choose a compatible printer, but it was the cheapest one and I am sure I will have good results. Some website pointed me to the BJC-8200 driver and I got some results with the BJC-800 one. I am not a politic man but I think one company you may consider working for open source is HP, especially when they give the FBSD foundation important gifts. I worked for them and I had to change my job because of their restructuration plan (I was like a collateral damage, not a directly fired guy). Everybody will have his point of view. I promised myself never buy Canon printers again after my i320. But for sure, when time will come for me to have an everyday-printing printer, I will choose it carefuly, and spend as much money as necessary. P.S: a simple PS just about USB printers: the chapter I am translating (http://www.freebsd.org/doc/en/books/handbook/printing.html) said USB is superior to RS-232 Serial and to Parallel for printing, but it is not as well supported under UNIX® systems. I will test USB connection of course and maybe submit an update for this chapter. Also you can try changing the mode of the parallel port, from ecp to centronics, etc. That can sometimes help. Ted ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: Foreign language posts (was: Pooomooocyyyy ;()
Maybe it's just me but the idea of a bunch of English speakers sitting around and debating whether or not to permit foreign languages on the mailing list is a bit like a bunch of men sitting around and debating whether or not to legalize abortion. It's an issue that so obviously does not affect the discussors that it's incredible any of them would believe it possibly affects them in any way whatsoever. Ted -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Leonard Zettel Sent: Wednesday, January 18, 2006 1:18 AM To: freebsd-questions@freebsd.org Cc: Chad Leigh -- Shire.Net LLC Subject: Re: Foreign language posts (was: Pooomoooc ;() On Wednesday 18 January 2006 05:53 am, Chad Leigh -- Shire.Net LLC wrote: (snip) I think you need to look up the word xenophobe http://dictionary.reference.com/search?q=xenophobe There is nothing in having an english-language-only list that fits the definition. Them dam furriners oughta get zivilized learn Anglish! -LenZ- (snip) ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.375 / Virus Database: 267.14.19/231 - Release Date: 1/16/2006 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: freebsd-questions Digest, Vol 121, Issue 28
On 2006-01-18 13:06, Rithy- System Engineer [EMAIL PROTECTED] wrote: I got FreeBSD 5.3 release installed on my Server but its hard disk and mainboard are too old and i want to upgrade to FreeBSD 6.0 with new hard disk on the same PC how can i do this? is it necessary to install any third-party hardware or software? Rithy Ray System Engineer KhmerServer.NET Hosting E-mail: [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] URL: www.rithy4u.net www.khmerserver.net www.khmercentral.com H/P: +855-12-403-001 [digest trimmed] Please, just DON'T quote the text of an unrelated digest message, including several irrelevant email messages, only to add a single paragraph on top of it all. There are probably many ways to do this. I can think of at least two right now: a) First move the installed system to the new disk, i.e. by using the process described here: http://keramida.serverhive.com/weblog/archives/2004-10-26/daemonizing-a-new-disk Then, when the system is up and running with its new disk, use the process described in the Handbook, to upgrade from 5.X to 6.X from source: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/cutting-edge.html b) Remove the old disk. Install a clean 6.0 system. Re-add the old disk as a secondary disk, and restore whatever you want to keep from that one. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
vinum RAID 1, FreeBSD 4-STABLE two different size drives
Hello :-) I've come across a deal where by I can either buy two identical 20GB drives, or a 20GB drive and a 40GB drive for the same price as the two 20GB's. I was intending to use the drives for a RAID 1 array and have read that ideally the drives should be identical, but it is do-able with different size drives. Obviously as both options are the same price I would like to get more for my money and get the 40GB and 20GB drive, rather than two 20GB's. This should also give me the option of buying only a single 40GB drive later on for cheap if I need to bump the space up a bit, rather than buying two drives. Simple questions really I suppose. Is having two different size drives going to work? Is it going to make configuration trickier in any way? Are there any disadvantages (other than I will be losing out on 20GB on the 40GB drive, and that it's only going to be as fast as the slowest drive I imagine)? I've never ever touched vinum before! Thanks in advance for any advice / comments, Mark ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Have I been hacked or is nmap wrong?
On Wed, Jan 18, 2006 at 11:29:38AM +0200, Kilian Hagemann wrote: On Tuesday 17 January 2006 19:27, Micheal Patterson pondered: The 1663 ports scanned but not shown below are in state: filtered) PORT STATE SERVICE 80/tcp open http 554/tcp open rtsp 1755/tcp open wms 5190/tcp open aol Kilian, what does a sockstat show you on those systems and are there any nats on either of these systems that would have a redirect_address to something behind them? sockstat -4l only shows up the processes serving the LAN (dnsmasq, samba) as well as sshd: USER COMMAND PID FD PROTOLOCAL ADDRESS FOREIGN ADDRESS root smbd484 18 tcp4 192.168.133.1:445 *:* root smbd484 19 tcp4 192.168.133.1:139 *:* root nmbd480 6 udp4 *:137 *:* root nmbd480 7 udp4 *:138 *:* root nmbd480 8 udp4 192.168.133.1:137 *:* root nmbd480 9 udp4 192.168.133.1:138 *:* nobodydnsmasq 458 1 udp4 *:56212 *:* nobodydnsmasq 458 3 udp4 *:53 *:* nobodydnsmasq 458 4 tcp4 *:53 *:* nobodydnsmasq 458 5 udp4 *:67 *:* root sshd432 3 tcp4 *:22 *:* root syslogd 311 4 udp4 *:514 *:* So nothing suspect at all here. Yes, the systems are natted(with above system LAN on 192.168.133.0/24), using ppp -nat. I have no specific redirects set up, and only a allow tcp/udp from LAN to WAN/any setup keep-state dynamic rule, but that should be unrelated. If my server is not compromised, how the heck could an http/rtsp/wms/aol redirect sneak in there without me explicitly enabling it? Is there any chance you have a router that's forwarding the ports in question to another computer? -- Ken Stevenson Allen-Myland Inc. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: USB removable drive as dump device?
Mike Loiterman wrote: Using 6.0-RELEASE I'm trying to use a USB removable drive as a dump device. [...] The issue is when I try to dump to the device: # dump 0uafL /dev/da0 / I think this is telling dump to treat /dev/da0 as a normal file, which it isn't. it makes sense to say /dev/[your_tape_device] , as you don't dump to a file in the tape, but rather to the tape itself (AFAIK) The same thing happens with: # dump 0uafL /backup / try something like dump 0uafL /backup/`date +%Y%m%H`-0.dump / Beto ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: no one here use restore/dump?
Wojciech Puchar wrote: nobody here do backups of their systems? strange?! what do you base this (false comment) on? Beto ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: no one here use restore/dump?
On Wed, Jan 18, 2006 at 12:20:51PM +0100, Wojciech Puchar wrote: nobody here do backups of their systems? strange?! ___ Huh? I do. I'm sure a lot of people do. -- Ken Stevenson Allen-Myland Inc. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD vs Linux
Windows almost runs everything Quite the opposite, try running some application from a few years back on windows 200 or XP, big chance it won't work. Unix has not matured yet to compete with Microsoft. Yeah, let's just forget that UNIX had stuff like network support before windows even existed... Windows has a few edged on Unix, DirectX for example, but on many points UNIX is really in the lead, the fact that you can't get a driver for some specific card doesn't have anything do to with maturing, but with commerce, Microsoft pays hardware manufacturers to make drivers for their OS, FreeBSD is non-profit and can't afford such things... Windows has crap driver management, where you can simply use the ICH driver for just about all Intel integrated sound chips, while you have to get(download) a different driver for all the different chips on windows... Who has matured? Unix community simply did not get their act together and try to build an OS for the masses. The main argument for Unix is it is Free, but compatibility and upgrade paths are different issues. Upgrading is a pain on windows, upgrading from 98 to 2000 more or less needs a format and clean install, while on FreeBSD you have much more flexibility, so you can upgrade much easy er. Let's not talk about the windows update site, and 15 reboots required.. Unix is for the masses, the only problem it has is a proper user friendly GUI. With Windows on the other hand, you *HAVE* to do things as the Microsoft programmers envisioned and liked things, and lacks a lot of flexibility that FreeBSD does have, which makes FreeBSD for the masses, it doesn't matter if your an average end-luser, or a nerd, or whatever, everyone can do what they want the way they want to do it, you really don't have that kind of flexibility with windows. Everyone should use whatever they prefer to use, but there a couple of very good arguments in favor of FreeBSD, and while there are also arguments in favor of windows they are fewer... Say whatever you want, but the Unix permission system is better than Window's, it much more simple and elegant, which means less headache's, less mistakes and more security. The same goes for window's configuration, the registry, it's not a bad idea, but horribly failed, now you have a huge file with a lot of data, half of it redundant, and the worst is that it's undocumented. FreeBSD simply has a set of configuration files, mostly in /etc and /usr/local/etc most of them have a man page, and an example file in /usr/share/examples/etc This again is simpler, which, again, means less headaches, less mistakes and better security, performance etc. There are tons of examples like this, the fact that windows XP is 1.3 GB in size (Minimal!) is enough to know that windows is loaded with complicated shit, while the much simpler and elegant approach in FreeBSD works better. It's same as physics or biology really, I came across this quote recently: If you encounter a formula more that a quarter of a page long, then forget it, nature doesn't make things that complicated. Nature has been In development for billions of years, and learned that simplicity is the key, why do anything different with computers? Windows does... ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: PAE causing system crashes
You weren't by chance also using NFS? I was, all my other 5.x systems did not use NFS and are stable. I saw this same behavior and wound up going back to 4.11 to keep the system stable. Ted On Tuesday 17 January 2006 03:17 pm, Michael Barnett wrote: To ammend this slightly.. When running the PAE kernel, they will stay online indefinitely under little to no load. It is only when i want them to actually work will they freak out and reboot. -m On Jan 17, 2006, at 1:47 PM, Michael Barnett wrote: I have 3 dell machines with 2x xeon procs, 8G of ram, and a half terabyte raid 5. I attempted to run the AMD64 distribution on these boxes which was fine for everything except mysql, (which is all these boxes are going to do) so I reinstalled 5.4 i386. uname -a looks like (hostname obscured): FreeBSD myhost.mydomain.com 5.4-RELEASE-p9 FreeBSD 5.4-RELEASE-p9 #2: Mon Jan 16 23:27:12 PST 2006 [EMAIL PROTECTED]:/usr/ obj/usr/src/sys/SMP-PAE i386 My problem is, if i don't enable PAE in the kernel, i can only address half the ram in the boxes, but... the machines are stable. If i do enable PAE, i can address all the memory, but they randomly reboot without dumping any errors or logging. To enable PAE, i am building and booting off the following kernel config: snip include PAE ident SMP-PAE options SMP options KVA_PAGES=512 /snip I added the KVA_PAGES options hoping to stabilize the machine (doesn't seem to have made any difference.) The only other tuning i am doing at the moment is in loader.conf: snip kern.maxdsiz=2147483648# Set the max data size /snip When i boot without PAE I use the generic SMP kernel, and the machine is stable. I know that there are a number of other kernel tunables i could be tweaking, but I am not really sure where to start as the machine dies silently. I was hoping that someone who has run a stable PAE kernel with 8G of ram + could point me in the right direction. Thanks, -Michael ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions- [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] -- | Ted WisniewskiE-Mail: [EMAIL PROTECTED]| | Manager, Systems GroupWEB:http://oz.plymouth.edu/~ted/ | | Information Technology Services| | Plymouth State University Phone: (603) 535-2661 | | Plymouth NH, 03264Fax:(603) 535-2263 | ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Problem w/ vacation prg using NFS under 6.0p2
I am using 6.0-RELEASE-p2 (SMP PAE kernel) and have noticed that the vacation program does not work properly when the .vacation.db is on an NFS partition. The following shows up in the mailllog: Jan 18 07:56:59 mail sendmail[70185]: k0ICuv3r070159: to=| /usr/bin/vacation testuser, [EMAIL PROTECTED] (1388/100), delay=00:00:02, xdelay=00:00:00, mailer=prog, pri=60954, dsn=5.6.0, stat=Data format error The same setup has been working on a 4.11 system forever. I have tried compiling vacation from the sendmail source (even tried the version from the 4.11 system). I tried it under 5.4 (non PAE kernel), same behavior. This is definitely a problem that appears to be in 5.4 and 6.0. Any Ideas? -- | Ted WisniewskiE-Mail: [EMAIL PROTECTED]| | Manager, Systems GroupWEB:http://oz.plymouth.edu/~ted/ | | Information Technology Services| | Plymouth State University Phone: (603) 535-2661 | | Plymouth NH, 03264Fax:(603) 535-2263 | ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
I have been hacked (WAS: Have I been hacked or is nmap wrong?)
On Wednesday 18 January 2006 14:34, Ken Stevenson pondered: Is there any chance you have a router that's forwarding the ports in question to another computer? Not that I know of. The setup is quite simple: wireless ethernet(PPPoE) ethernet ISP---Modem--FreeBSD gateway---LAN FreeBSD is my router with ppp -ddial -nat and a custom ipfw script that blocks all incoming connections while allowing legitimate traffic out (with keep-state rules). Check this out: ftp my_server gives 220 Frox transparent ftp proxy. Login with [EMAIL PROTECTED]:port]] Name (...) I have never even heard of frox before, but after some googling it turns out that it's a GPL'ed transparent ftp proxy... Also, I said smtp ports were open on the machines in question, I just verified that I can send emails via BOTH these systems even though no sendmail/exim/whatever was ever installed by me and sendmail_enable=None on both. My servers have been compromised, fantastic. And that with an initial firewall'ed setup that left NO open ports (I verified that a while ago with nmap). So much for my impression that FreeBSD was secure. How could this have happened? ipfw buffer overflow? Some other unknown vulnerability? I really wanna find out how they got in (syslog offers no clues btw, I've been rootkitted after all :-( Any suggestions other than format/reinstall/tripwire? -- Kilian Hagemann Climate Systems Analysis Group University of Cape Town Republic of South Africa Tel(w): ++27 21 650 2748 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD vs Linux
[Let me first point out I've seen about 4 different 'unix/windows is teh gayz0r' threads on completely unrelated mailing lists in the last 24 hours. If I sound bored rigid with the whole subject that might be why.] Can we please stop comparing *NIX to windows. They're nothing like each other. Like all software, they bothsuck in their own unique ways, it's just that BSD sucks in areas I mainly don't care about, and windows sucks at most of the things I do care about. On 18/01/06, Martin Tournoy [EMAIL PROTECTED] wrote: Windows almost runs everything Quite the opposite, try running some application from a few years back on windows 200 or XP, big chance it won't work. So what? That's exactly the same for FreeBSD, even it's core apps. And vendors rush to support MS' new OSes. Microsoft pays hardware manufacturers to make drivers for their OS, I seriously doubt it. They don't need to with their market share. Upgrading is a pain on windows, upgrading from 98 to 2000 more or less needs a format and clean install, while on FreeBSD you have much more flexibility, so you can upgrade much easy er. Have you ever brought 4.x up to 6.x? It doesn't sound like it. There are tools to solve this for windows, and there has been for a long time. Try updating 200 FreeBSD boxes, then try the same with a decent imaging system for windows. Unix is for the masses, the only problem it has is a proper user friendly GUI. Then it isn't for the masses. Deal with it. With Windows on the other hand, you *HAVE* to do things as the Microsoft programmers envisioned and liked things, and lacks a lot of flexibility that FreeBSD does have Can you justify that at all? If what you're saying boils down to 'you have the source' then I don't think that applies to 99% of users. Say whatever you want, but the Unix permission system is better than Window's, it much more simple It's also very outdated and has been reinvented several times. RBAC, SeLinux and MAC would indicate it's not flexible enough for most people. The same goes for window's configuration, the registry, it's not a bad idea, but horribly failed, now you have a huge file with a lot of data, half of it redundant, and the worst is that it's undocumented. FreeBSD simply has a set of configuration files, mostly in /etc and /usr/local/etc most of them have a man page, and an example file in /usr/share/examples/etc That's not in itself a good thing. As I understand it, the registry is a central place for storing configuration details. /etc has nothing like that. Think of something simple like a webserver docroot. Apache obviously needs to know about that, so might your ftp server, your backup/mirror scripts and so on. If you ever change that directories location, you'll have to update everything that references that path. That's a pain in the arse, and it's only one of dozens of annoyances with /etc. The arguments you're making above equally apply to 4.x /etc, and I don't think you'd argue that rcNG is a vast improvement. Have a look at things like Solaris SMF and you realise that rcNG isn't as good as it could be either. -- Rasputin :: Jack of All Trades - Master of Nuns http://number9.hellooperator.net/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: I have been hacked (WAS: Have I been hacked or is nmap wrong?)
On Wed, Jan 18, 2006 at 03:56:32PM +0200, Kilian Hagemann wrote:
I have never even heard of frox before, but after some googling
it turns out that it's a GPL'ed transparent ftp proxy...
Where's it pointing?
Also, I said smtp ports were open on the machines in question, I
just verified that I can send emails via BOTH these systems even
though no sendmail/exim/whatever was ever installed by me and
sendmail_enable=None on both.
What do you see when you connect to the SMTP ports? Are they really
mail servers, or just rogue services running on 25?
My servers have been compromised, fantastic. And that with an
initial firewall'ed setup that left NO open ports (I verified that
a while ago with nmap). So much for my impression that FreeBSD was
secure.
My condolences; what you describe, though, doesn't really suggest
that /FreeBSD/ is insecure. In the vast majority of these situations
(and yes, I have found myself in your shoes before), the operator
(you or I) is to blame.
How could this have happened? ipfw buffer overflow? Some other
unknown vulnerability?
Ockham's razor: the simplest is also the most likely solution.
You're running Samba; is there any chance that that service or your
configuration of it could have opened a hole? How many people have
user accounts on that box? Do you allow
ChallengeResponseAuthentication on SSH? Key only?
I really wanna find out how they got in (syslog offers no clues
btw, I've been rootkitted after all :-(
You'll need to do a more sophisticated forensic analysis, then, to
figure out what happened. Some basic questions: were you running a
file integrity monitor? What did it say? Do you have logs that were
remotely backed up (and, therefore, likely still accurate)? What do
they say? Do you have any network monitoring that might have
recorded an intrusion? What services /should/ be running on the box
(I don't think this was ever actually listed -- it would be useful
to know)? Do you have dumps of the traffic leaving or entering the
box?
Again, this is a tough and very unfortunate position to be in -- I
sympathize. It may very well not be worth the time it takes to fully
investigate the source of the compromise. Real forensic analysis is
outside most of our job descriptions; I know that my skillset
doesn't cover it well enough. An inept investigation can be much
worse than no investigation at all: consider (if you can afford it)
bringing in someone who can do a quick, good job of it.
Any suggestions other than format/reinstall/tripwire?
I can't think of any better ideas. Certainly, I'd add updating the
system to your list. Even if the Security Alerts don't seem to
effect your set up, I find it's good practice to apply them in a
reasonable amount of time. At the very least, it keeps me in touch
with my boxes and lets me develop a routine in case an alert does
effect me.
Good luck!
--
o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
How to tell if IPF is running?
Howdy List... I am trying to figure out if ipf is running for certain. FreeBSD 6.0-RELEASE . I added the following to /etc/rc.conf : ipfilter_enable=YES ipmon_enable=YES ipmon_flags=-Dsvn ipnat_enable=YES ipfs_enable=YES I added a rule file /etc/ipf.conf , and flushed/reloaded ipf with the command # ipf -Fa -f /etc/ipf.conf I have rebooted since the additions to /etc/rc.conf ps aux | grep ipf Shows nothing. I do see ipmon in there however. ipfstat command, shows me stats, so I suppose it is running, but I assumed (incorrectly?) that I would see ipf with ps aux . Thanks y'all, Gable ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: I have been hacked (WAS: Have I been hacked or is nmap wrong?)
Also, I said smtp ports were open on the machines in question, I just verified that I can send emails via BOTH these systems even though no sendmail/exim/whatever was ever installed by me and sendmail_enable=None on both. For what it's worth, to disable senmail on 5.0 and later, you need: sendmail_enable=NO sendmail_submit_enable=NO sendmail_outbound_enable=NO sendmail_msp_queue_enable=NO All those lines need to go in your /etc/rc.conf file, just the top line on it's own will only stop mail coming into your system and I think it has to be NO not None, but I'm not 100% on that. The above is from the Handbook: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mail-changingmta.html -- Paul ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: I have been hacked (WAS: Have I been hacked or is nmap wrong?)
sendmail_enable=NONE would do the same as all that other crap mentioned i find it a waste of time trying to figure out how a hacker got in just format the machine reinstall freebsd and secure the box up a bit and try updating it when vulnerabilitie are out. And this shouldnt happen again Also, I said smtp ports were open on the machines in question, I just verified that I can send emails via BOTH these systems even though no sendmail/exim/whatever was ever installed by me and sendmail_enable=None on both. For what it's worth, to disable senmail on 5.0 and later, you need: sendmail_enable=NO sendmail_submit_enable=NO sendmail_outbound_enable=NO sendmail_msp_queue_enable=NO All those lines need to go in your /etc/rc.conf file, just the top line on it's own will only stop mail coming into your system and I think it has to be NO not None, but I'm not 100% on that. The above is from the Handbook: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mail-changingmta.html -- Paul ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: How to tell if IPF is running?
ipf runs as a kernel module or compiled into the kernel you will never see it running as a normal program you will know it is running by testing your firewall to make sure it does what it was meant to do Howdy List... I am trying to figure out if ipf is running for certain. FreeBSD 6.0-RELEASE . I added the following to /etc/rc.conf : ipfilter_enable=YES ipmon_enable=YES ipmon_flags=-Dsvn ipnat_enable=YES ipfs_enable=YES I added a rule file /etc/ipf.conf , and flushed/reloaded ipf with the command # ipf -Fa -f /etc/ipf.conf I have rebooted since the additions to /etc/rc.conf ps aux | grep ipf Shows nothing. I do see ipmon in there however. ipfstat command, shows me stats, so I suppose it is running, but I assumed (incorrectly?) that I would see ipf with ps aux . Thanks y'all, Gable ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ataraid doesn't support dumps
Steven Friedrich [EMAIL PROTECTED] writes: I've recently upgraded from 5.4 to 6-Stable. I'm using the ar ataraid device on my Promise controller on the ASUS moboard. Are there any plans to add dump support to the ar driver? I'm not aware of any such limitation; you should probably talk to the author of the driver. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Foreign language posts (was: Pooomooocyyyy ;()
On Wednesday 18 January 2006 11:28 am, Ted Mittelstaedt wrote: Maybe it's just me but the idea of a bunch of English speakers sitting around and debating whether or not to permit foreign languages on the mailing list is a bit like a bunch of men sitting around and debating whether or not to legalize abortion. It's an issue that so obviously does not affect the discussors that it's incredible any of them would believe it possibly affects them in any way whatsoever. Ted Wekk op n smehl da Kaffe, dood! Effn ah kaint reed et, how dew ah no et aint L kadeh plennen to rep muh guhrl? bee jes lahk duh bestads ta yoose Politch! -LenZ- -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Leonard Zettel Sent: Wednesday, January 18, 2006 1:18 AM To: freebsd-questions@freebsd.org Cc: Chad Leigh -- Shire.Net LLC Subject: Re: Foreign language posts (was: Pooomoooc ;() On Wednesday 18 January 2006 05:53 am, Chad Leigh -- Shire.Net LLC wrote: (snip) I think you need to look up the word xenophobe http://dictionary.reference.com/search?q=xenophobe There is nothing in having an english-language-only list that fits the definition. Them dam furriners oughta get zivilized learn Anglish! -LenZ- (snip) ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.375 / Virus Database: 267.14.19/231 - Release Date: 1/16/2006 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Foreign language posts (was: Pooomooocyyyy ;()
Wekk op n smehl da Kaffe, dood! Effn ah kaint reed et, how dew ah no et aint L kadeh plennen to rep muh guhrl? bee jes lahk duh bestads ta yoose Politch! -LenZ- C'est du Klingon ?? -- ivan ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: How to tell if IPF is running?
Gable Barber wrote: Howdy List... I am trying to figure out if ipf is running for certain. FreeBSD 6.0-RELEASE . I added the following to /etc/rc.conf : ipfilter_enable=YES ipmon_enable=YES ipmon_flags=-Dsvn ipnat_enable=YES ipfs_enable=YES I added a rule file /etc/ipf.conf , and flushed/reloaded ipf with the command # ipf -Fa -f /etc/ipf.conf I have rebooted since the additions to /etc/rc.conf ps aux | grep ipf Shows nothing. I do see ipmon in there however. ipfstat command, shows me stats, so I suppose it is running, but I assumed (incorrectly?) that I would see ipf with ps aux . Yes, incorrectly, if you have any rules with the log key word, then you can se if you get any entries in your log files. I would have default rules first in my rule set: block log in all block log out all And then pass what I positively know is good. Cheers, Erik ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: How to tell if IPF is running?
--- Gable Barber [EMAIL PROTECTED] wrote: Howdy List... I am trying to figure out if ipf is running for certain. FreeBSD 6.0-RELEASE . I added the following to /etc/rc.conf : ipfilter_enable=YES ipmon_enable=YES ipmon_flags=-Dsvn ipnat_enable=YES ipfs_enable=YES I added a rule file /etc/ipf.conf , and flushed/reloaded ipf with the command # ipf -Fa -f /etc/ipf.conf I have rebooted since the additions to /etc/rc.conf ps aux | grep ipf Shows nothing. I do see ipmon in there however. ipfstat command, shows me stats, so I suppose it is running, but I assumed (incorrectly?) that I would see ipf with ps aux . Switch over to pf. __ Find your next car at http://autos.yahoo.ca ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: I have been hacked (WAS: Have I been hacked or is nmap wrong?)
On Wednesday 18 January 2006 16:25, Will Maier pondered: On Wed, Jan 18, 2006 at 03:56:32PM +0200, Kilian Hagemann wrote: I have never even heard of frox before, but after some googling it turns out that it's a GPL'ed transparent ftp proxy... Where's it pointing? No idea, I only went as far as trying to login anonymously using a console based ftp client. How could I find out? Also, I said smtp ports were open on the machines in question, I just verified that I can send emails via BOTH these systems even though no sendmail/exim/whatever was ever installed by me and sendmail_enable=None on both. What do you see when you connect to the SMTP ports? Are they really mail servers, or just rogue services running on 25? They are really mail servers, at least smtp for outgoing mails (don't know about incoming though). I used kmail to configure them as standard outgoing smtp mail servers and successfully sent myself two emails, one via each server. Surely a default, out of the box, unconfigured and sendmail_enable=None sendmail process wouldn't allow for something like that, never mind the fact that the firewall is supposed to block ANY access from the outside (output of ipfw show is attached) My servers have been compromised, fantastic. And that with an initial firewall'ed setup that left NO open ports (I verified that a while ago with nmap). So much for my impression that FreeBSD was secure. My condolences; what you describe, though, doesn't really suggest that /FreeBSD/ is insecure. In the vast majority of these situations (and yes, I have found myself in your shoes before), the operator (you or I) is to blame. Alright, I guest that's a fair assumption. But that's what this thread is about: What (if anything) did I do wrong? How could this have happened? ipfw buffer overflow? Some other unknown vulnerability? Ockham's razor: the simplest is also the most likely solution. You're running Samba; is there any chance that that service or your configuration of it could have opened a hole? How many people have user accounts on that box? Do you allow ChallengeResponseAuthentication on SSH? Key only? Well, I didn't worry about samba because it's firewalled to the outside(unless some Windows virus on one of the LAN machines exploited a samba hole, is that likely?). There is only one single normal user account with an uncommon name and an impossible password(16 characters randomly generated from ASCII charset). ChallengeResponseAuthentication is commented out in sshd which I guess means it uses the standard PAM authentication. It also allows password/interactive authentication in addition to public key, I always use the former. I do admit that I have set PermitRootLogin yes but my root password is 9 characters with numbers and non-alphanumeric characters, so hard to brute-force. In any case, it's important to note that the only access from the outside via ssh/rsync is firewalled in such a way that it only allows access from a single IP address which my institution assigns me statically via DHCP (see attachment). They would have had to a) find out what this one and only trusted IP address is b) spoof it successfully c) attack ssh brute force? I really wanna find out how they got in (syslog offers no clues btw, I've been rootkitted after all :-( You'll need to do a more sophisticated forensic analysis, then, to figure out what happened. Some basic questions: were you running a file integrity monitor? What did it say? Do you have logs that were remotely backed up (and, therefore, likely still accurate)? What do they say? Do you have any network monitoring that might have recorded an intrusion? What services /should/ be running on the box (I don't think this was ever actually listed -- it would be useful to know)? Do you have dumps of the traffic leaving or entering the box? Well, I thought my setup was secure enough for a very basic router/gateway/firewall for a couple of Windows machines using a sucky internet connection which is not worth stealing. So I didn't go through the effort of using a file integrity monitor, remote logging, traffic dumps or network monitors (jeez, sysadmins lives are really difficult these days :-( ) The services that should be running on the box are: LAN only: samba, dnsmasq LAN and WAN: ssh/rsync I wanted to use rsync with ssh authentication/remote shell to sync my /etc and /usr/etc to my workstation and then comparing the update with a static copy to find out if anything had changed. But before I could do that, the one server mysteriously had its ssh/rsync disabled and I didn't take a healthy copy of /etc of the other one to begin with :-( Again, this is a tough and very unfortunate position to be in -- I sympathize. It may very well not be worth the time it takes to fully investigate the source of the compromise. Real forensic analysis is outside most of our job descriptions; I know that my
Re: How to tell if IPF is running?
Yes, incorrectly, if you have any rules with the log key word, then you can se if you get any entries in your log files. I would have default rules first in my rule set: block log in all block log out all And then pass what I positively know is good. Cheers, Erik It seems mostly my misunderstanding of ipf being a kernel module and not showing up with ps aux.There are log entries, ipfstat shows contuning stats, and ipmon shows what is being filtered/passed, etc. Thanks everyone for your quick, concise responses. Gable ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: How to tell if IPF is running?
On 1/18/06, Peter [EMAIL PROTECTED] wrote: Switch over to pf. Why do you suggest PF over IPF? Hope I am not starting a war here.. but I am genuinely interested in the opinions. Gable ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: I have been hacked (WAS: Have I been hacked or is nmap wrong?)
On Wednesday 18 January 2006 17:13, [EMAIL PROTECTED] pondered: sendmail_enable=NONE would do the same as all that other crap mentioned i find it a waste of time trying to figure out how a hacker got in just format the machine reinstall freebsd and secure the box up a bit and try updating it when vulnerabilitie are out. And this shouldnt happen again Yeah, I'll have to look into that NONE vs all NO individually because it gave me hassles from the beginning (STILL sendmail stuff in /var/log/messages after disabling with NONE), but the important thing here is outside sendmail access was firewalled (see my other post and its attachment for ipfw rules). Anyway, I guess you're right, reinstalling and beefing up security will be easier. I just thought that if they didn't get in through brute-forcing my sshd (the only vulnerability I can think of so far), and the attack came from the internet (not some worm/virus on one of the Windows machines), it's some unpublished vulnerability in some part of FreeBSD that I'm sure others would like to know about. But hey, from what you guys are telling me that seems unlikely... -- Kilian Hagemann ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: How to tell if IPF is running?
--- Gable Barber [EMAIL PROTECTED] wrote: On 1/18/06, Peter [EMAIL PROTECTED] wrote: Switch over to pf. Why do you suggest PF over IPF? All I can say is that I remember using ipf when I was on OpenBSD 2.9. At 3.0 it went to pf and ever since then I've been extremely pleased with its syntax, versatility, and power. It is the jewel in the OBSD crown and now FBSD has been blessed with a port of it. Naturally, it is always about 1 full release behind. __ Find your next car at http://autos.yahoo.ca ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD vs Linux
[EMAIL PROTECTED] wrote: What is the essential difference between FreeBSD and Linux (Fedora for instance)? Where can I find any list of differences? What/Where are the advantages of FreeBSD vs Linux? Greetings Greg ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] Give a look at gentoo it's inspired by FreeBSD, and is linux as well the portage system works great... and as a personal opinion: Use gentoo for Home / Desktop / Office use use FreeBSD For web/ftp/file/ etc.. Servers. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Foreign language posts (was: Pooomooocyyyy ;()
Hello, [EMAIL PROTECTED] wrote: Wekk op n smehl da Kaffe, dood! Effn ah kaint reed et, how dew ah no et aint L kadeh plennen to rep muh guhrl? bee jes lahk duh bestads ta yoose Politch! -LenZ- C'est du Klingon ?? [EMAIL PROTECTED] :) Martin ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Share desktop with XOrg
Hello, Is it possible to share a desktop under the XOrg server? Is there a port for this? I'm aware of the -display option of X based programs. What I need is not a remote desktop connection. I would like to share my desktop to another user so he can see what I see. Thanks, Les ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
loosing hair inside canon printer...
Hi, Thanks all first, for the help you gave me yesterday. I begin hating Canon. Still nothing printed. I am going to gathered all information about what I did and hope you could give me something :) For the moment, I only want to be able to print the more disgusting raw text, even only hello world!, without the ! if it is too much complicated. But I want it with a line like echo hello world /dev/lpt0 Why do this so simple line not work? I don't know anything about ECP, EPP and Centronics, but I tested all the configuration from BIOS. I have Standard, ECP, EPP and EPP+ECP choices. For each one I have to choose IRQ, DMA and sometimes another one. For now it is set to Standard, IRQ 7 DMA 3 (BIOS default). This said, I have this in dmesg: ppc0: ECP parallel printer port port 0x378-0x37f,0x778-0x77b irq 7 drq 3 flags 0x28 on acpi0 ppc0: Generic chipset (ECP-only) in ECP mode ppc0: FIFO with 16/16/16 bytes threshold ppbus0: Parallel port bus on ppc0 ppc0: Standard parallel printer port port 0x378-0x37f irq 7 flags 0x28 on acpi0 ppc0: Generic chipset (ECP-only) in ECP mode ppbus0: Parallel port bus on ppc0 ppbus0: Parallel port bus on ppc0 ppbus0: IEEE1284 device found /NIBBLE/ECP Probing for PnP devices on ppbus0: ppbus0: Canon i865/1.13 PRINTER BJL,BJRaster3,BSCCe plip0: PLIP network interface on ppbus0 lpt0: Printer on ppbus0 ppi0: Parallel I/O on ppbus0 ppbus0: Parallel port bus on ppc0 ppbus0: IEEE1284 device found /NIBBLE/ECP Probing for PnP devices on ppbus0: ppbus0: Canon i865/1.13 PRINTER BJL,BJRaster3,BSCCe plip0: PLIP network interface on ppbus0 lpt0: Printer on ppbus0 ppi0: Parallel I/O on ppbus0 simple question: how freebsd know about the name of my printer? note the flags 0x28 I had to /boot/device.hints after reading a tutorial. I am going to remove it as it makes nothing better. And maybe it is the reason of my last issue. # chkprintcap chkprintcap: WARNING: found 1 entries when skimming /etc/printcap chkprintcap: WARNING: but only found 0 queues to process! Note that this is already too far since I want an output with redirection ( /dev/lpt0). Of course, I am still searching over the web for some still unknown website with useful information. -- Thank you, Ivan. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Share desktop with XOrg
On Wednesday 18 January 2006 18:08, User Gandalf pondered: Is it possible to share a desktop under the XOrg server? Is there a port for this? I'm aware of the -display option of X based programs. What I need is not a remote desktop connection. I would like to share my desktop to another user so he can see what I see. Yes, the stock Xorg server doesn't though. You could use VNC, but in my experience that just opens up another X display where you login separately using kdm/gdm/xdm or whatever. I suggest you use KDE's desktop sharing (krfb, in the menu under System, part of the kdenetwork package, tested on 3.4.1). Does what you want. -- Kilian Hagemann ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: create/symlink failed, no inodes free
The same error appeared frequently when I tried to install FreeBSD on an 8.5GB partition. Apparently it was because the root partition was running out of space. So instead of using the auto-option to divide up and create the different (logical?) partitions I created one root partition that is 8000MB and a swap partition that is ~500MB. -- View this message in context: http://www.nabble.com/create-symlink-failed%2C-no-inodes-free-t598801.html#a2450263 Sent from the freebsd-questions forum at Nabble.com. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: How to tell if IPF is running?
Gable Barber wrote: On 1/18/06, Peter [EMAIL PROTECTED] wrote: Switch over to pf. Why do you suggest PF over IPF? Hope I am not starting a war here.. but I am genuinely interested in the opinions. I used IPF on FBSD until there was some bug in IPF for 5.x some version that forced me to switch after an upgrade. The bug has been fixed since but I have found no reason to go back. There are two things I miss from IPF: a) proper accounting: You can't count traffic correctly with stateful filtering on pf, pf will count when a rule is matched but once a state is established packets for that state are not matched and hence not counted. b) an active and inactive ruleset: To load a new ruleset you'll have to flush everything. You can check syntax of rules before loading and pf loads all or nothing, so if there is a syntax error in your ruleset it won't be loaded. BUT: You may make syntactically correct changes that yet contain errors: Just say you wrote: block in all from 10.0.0.0/2 but meant block in all from 10.0.0.0/24 In IPF I always used: # ipf -s sleep 60 ipf -s to give me 60 seconds to verify that I didn't lock myself out. Now, that is compensated by in PF you can flush and reload the rules only, keeping existing states, so the connection you use for maintenance is not torn down. The pros for PF are some features to prevent DDoS against servers behind your firewall, and advanced queuing features and CARP. The use of macros and tables makes it easier to maintain rules, but the lack of groups means you have to be more careful structuring your ruleset: Rules are read top down _always_ in IPF I really liked groups, even though I always kept rules together. It just made it more explicit that rules went the same place. PF uses some clever skip ahead to gain the speed that proper use of groups give in IPF, and tests have shown that pf is faster than IPF in particular when rulesets grow large. but you need to be careful writing rules: IPF sample: block in quick from 10.0.0.0/24 to any head 10 pass in quick from 10.0.0.0/24 to 192.168.0.0/24 group 10 PF sample: block in from 10.0.0.0/24 to any pass in quick from 10.0.0.0/24 to 192.168.0.0/24 block in quick from 10.0.0.0/24 to any The thing is that in the first line of the IPF sample, a default action is made for that group. packets matching the head rule but no rules in the group will take that action. In PF you'll have to include that extra rule in the end to get the same behavior. So, in short, ipf is really simple and comparatively easy to work with, the lack of macros means you generally have to write more but this also makes it more explicit what happens as packets traverse the ruleset. pf has some really nice features in particular in more complex setups. The use of macros means that you can create compact rulesets that can easily be adopted to other systems or setups. Use what you feel most comfortable with. Cheers, Erik ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD vs Linux
On 2006-01-18 16:55, Matias [EMAIL PROTECTED] wrote: [EMAIL PROTECTED] wrote: What is the essential difference between FreeBSD and Linux (Fedora for instance)? Where can I find any list of differences? What/Where are the advantages of FreeBSD vs Linux? Give a look at gentoo it's inspired by FreeBSD, and is linux as well the portage system works great... and as a personal opinion: Use gentoo for Home / Desktop / Office use use FreeBSD For web/ftp/file/ etc.. Servers. Nah. Why use something that is BSD-like when you can get the Real Thing(TM) for free? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD vs Linux
On Jan 18, 2006, at 10:55 AM, Matias wrote: [EMAIL PROTECTED] wrote: What is the essential difference between FreeBSD and Linux (Fedora for instance)? Where can I find any list of differences? What/Where are the advantages of FreeBSD vs Linux? Greetings Greg ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] Give a look at gentoo it's inspired by FreeBSD, and is linux as well the portage system works great... and as a personal opinion: Use gentoo for Home / Desktop / Office use use FreeBSD For web/ftp/file/ etc.. Servers. What the heck? No one has mentioned how Plan 9 TROUNCES FreeBSD AND Linux! In EVERYTHING! I've installed it on my notebook, my home server, three workstations, my Palm Pilot, telephone, coffeemaker, and my GE Refrigerator's ice maker. We had a power hiccup three days ago and my house became sentient! ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: How to tell if IPF is running?
On 1/18/06, Erik Norgaard [EMAIL PROTECTED] wrote: Gable Barber wrote: On 1/18/06, Peter [EMAIL PROTECTED] wrote: Switch over to pf. Why do you suggest PF over IPF? Hope I am not starting a war here.. but I am genuinely interested in the opinions. I used IPF on FBSD until there was some bug in IPF for 5.x some version that forced me to switch after an upgrade. The bug has been fixed since but I have found no reason to go back. There are two things I miss from IPF: a) proper accounting: You can't count traffic correctly with stateful filtering on pf, pf will count when a rule is matched but once a state is established packets for that state are not matched and hence not counted. b) an active and inactive ruleset: To load a new ruleset you'll have to flush everything. You can check syntax of rules before loading and pf loads all or nothing, so if there is a syntax error in your ruleset it won't be loaded. BUT: You may make syntactically correct changes that yet contain errors: Just say you wrote: block in all from 10.0.0.0/2 but meant block in all from 10.0.0.0/24 In IPF I always used: # ipf -s sleep 60 ipf -s to give me 60 seconds to verify that I didn't lock myself out. Now, that is compensated by in PF you can flush and reload the rules only, keeping existing states, so the connection you use for maintenance is not torn down. The pros for PF are some features to prevent DDoS against servers behind your firewall, and advanced queuing features and CARP. The use of macros and tables makes it easier to maintain rules, but the lack of groups means you have to be more careful structuring your ruleset: Rules are read top down _always_ in IPF I really liked groups, even though I always kept rules together. It just made it more explicit that rules went the same place. PF uses some clever skip ahead to gain the speed that proper use of groups give in IPF, and tests have shown that pf is faster than IPF in particular when rulesets grow large. but you need to be careful writing rules: IPF sample: block in quick from 10.0.0.0/24 to any head 10 pass in quick from 10.0.0.0/24 to 192.168.0.0/24 group 10 PF sample: block in from 10.0.0.0/24 to any pass in quick from 10.0.0.0/24 to 192.168.0.0/24 block in quick from 10.0.0.0/24 to any The thing is that in the first line of the IPF sample, a default action is made for that group. packets matching the head rule but no rules in the group will take that action. In PF you'll have to include that extra rule in the end to get the same behavior. So, in short, ipf is really simple and comparatively easy to work with, the lack of macros means you generally have to write more but this also makes it more explicit what happens as packets traverse the ruleset. pf has some really nice features in particular in more complex setups. The use of macros means that you can create compact rulesets that can easily be adopted to other systems or setups. Use what you feel most comfortable with. Cheers, Erik Awesome information, and links. Thank you Everyone. Gable ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD vs Linux
Microsoft pays hardware manufacturers to make drivers for their OS, I seriously doubt it. They don't need to with their market share. Ok, what do you guys live in a shoe or something? For pete's sake, how can so many people be so patently clueless and still be able to find food and shelter? Do you really have no idea how things work? Are you really so brainwashed by the geeky liberals that you have lost your ability to think? MS doesn't have to pay vendors, you toad. Vendors write drivers for windows because the market is substantial and because if they don't write drivers no-one who runs windows will buy their cards. Like DUH!. In fact, you have to PAY MS to get the devkit to build drivers for windows. Vendors don't write drivers for freebsd because: 1) the market is too small 2) Some don't want to release source, as they'll lose more to taiwanese cloners than they will make selling to 'nix users. 3) X sucks, so why risk having people badmouth your cards? If vendors are going to support a *nix, they'll support linux. The market is much larger. dt __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD vs Linux
On 18/01/06, Danial Thom [EMAIL PROTECTED] wrote: Microsoft pays hardware manufacturers to make drivers for their OS, I seriously doubt it. They don't need to with their market share. Ok, what do you guys live in a shoe or something? MS doesn't have to pay vendors, you toad. Did you read what I just typed Daniel? Because you're coming across as a bit of an ignorant twat. -- Rasputin :: Jack of All Trades - Master of Nuns http://number9.hellooperator.net/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: kernel memory tunables
Michael Barnett wrote: I am trying to figure out which system tunables determine memory resource usage by the amount of available physical memory in the box so i can hard code sane values on a system with a lot of memory. If the machine is properly configured, getrlimit(RLIMIT_DATA, ...) is a reasonable starting place. The amount of memory available to an individual process may well be less than the total amount of RAM installed, especially on 32-bit machines using PAE to have more than 4GB of RAM. Otherwise, consider using the sysctl interface to look at hw.usermem... -- -Chuck ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Share desktop with XOrg
Kilian Hagemann wrote: On Wednesday 18 January 2006 18:08, User Gandalf pondered: Is it possible to share a desktop under the XOrg server? Is there a port for this? I'm aware of the -display option of X based programs. What I need is not a remote desktop connection. I would like to share my desktop to another user so he can see what I see. Yes, the stock Xorg server doesn't though. You could use VNC, but in my experience that just opens up another X display where you login separately using kdm/gdm/xdm or whatever. I suggest you use KDE's desktop sharing (krfb, in the menu under System, part of the kdenetwork package, tested on 3.4.1). Does what you want. I hoped there is a more native solution. I prefer gtk over kde but what can I do? Thanks, Les ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD vs Linux
On 1/17/06, Philip Hallstrom [EMAIL PROTECTED] wrote: The computer is currently without keyboard, mouse or monitor. I am adding applications to the computer via ssh while I work. As soon as I get openbox and tightvnc installed, I'll switch to tightvnc so I can disconnect without disrupting jobs. (Hmm, I wonder if I'll have to add a mouse or keyboard at that point.) /usr/ports/sysutils/screen Screen is a full-screen window manager that multiplexes a physical terminal between several processes (typically interactive shells). Each virtual terminal provides the functions of a DEC VT100 terminal and, in addition, several control functions from the ANSI X3.64 (ISO 6429) and ISO 2022 standards (e.g. insert/delete line and support for multiple character sets). There is a scrollback history buffer for each virtual terminal and a copy-and-paste mechanism that allows moving text regions between windows. nohup foobar ~/foobar.log tail -f ~/foobar.log ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
freebsd 6.0 rc.conf
Hi all I have 2 questons about rc.conf 1/ I want to stop sendmail running in the box. in the man page in rc.sendmail. it said to put the following in rc.conf. to completely prevent any snedmail(8) daemons from starting. but my sendmail is still running in the box! sendmail_enable=NO sendmail_submit_enable=NO sendmail_outbound_enable=NO sendmail_msp_queue_enable=NO 2/ When I put quagga_flags=start in rc.conf, the box is in boot process and seems to not in logon prompt. but I remove quagga_flags=start in rc.conf, the box is in the logon prompt Why? Thank you for your help defaultrouter=NO quagga_enable=YES quagga_daemons=zebra bgpd quagga_flags=start router_enable=NO __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: FreeBSD vs Linux
-Original Message- From: [EMAIL PROTECTED] [mailto:owner-freebsd- [EMAIL PROTECTED] On Behalf Of Matias Sent: Wednesday, January 18, 2006 3:55 PM To: freebsd-questions@freebsd.org Subject: Re: FreeBSD vs Linux [EMAIL PROTECTED] wrote: What is the essential difference between FreeBSD and Linux (Fedora for instance)? Where can I find any list of differences? What/Where are the advantages of FreeBSD vs Linux? You seem to have never used FreeBSD before. The answer to this question is huge. Your best friend is the internet (i.e. google.com) as people already mentioned. For example imagine that people may understand technical differences!!! Of course even if at the beginning looks like a good post to snob, between thousands of people this subject might have very good results. First: Whether Linux or FreeBSD is better, is totally subjective. I can install FreeBSD and start editing and building a custom kernel in 30 mins. When I sit on a Slackware (pcs in uni), I can use it of course, but I found difficult to build a custom kernel in it and to be honest before I search too much I went back to my FreeBSD. Some commands are slightly different! NO! I refuseAs long as it is available to me, I am sorry I want my FreeBSD mate! In the other hand I find knoppix the ultimate tool. The most impressing *nix like I have ever seen! I cannot go on holidays without my knoppix cd lately! That's because --I-- like it! Second: FreeBSD is everywhere...In computing... Remember this while reading, studying, googling for computers in the future! Now that I said googling what about http://www.google.com/bsd After typing your question to google as other people recommended, I recommend you type it to the above link too :) Third: UNIX was before Linux. --- I would like to ask two different questions on top of yours to complicate or maybe make things more interesting. Why there are many(!) Linux distos out there: http://www.linux.org/dist/list.html but only one freebsd? What is stopping people from making their own UNIX distributions, similar to FreeBSD? What are the differences between FreeBSD and SCO UNIXR? Greetings Greg ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] Give a look at gentoo it's inspired by FreeBSD, and is linux as well the portage system works great... and as a personal opinion: Use gentoo for Home / Desktop / Office use use FreeBSD For web/ftp/file/ etc.. Servers. Just want to say that I believe freebsd can be used for a very large list of things. Every time I perform something new using freebsd I realize that are other, the Operating Systems that cannot do some things...or they are just doing them really simply! ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions- [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD vs Linux
Dick Davies = Sorry for sending you this mail twice, accidently pressed enter...(shoudn't eat and write e-mails at the same time...) So what? That's exactly the same for FreeBSD, even it's core apps. And vendors rush to support MS' new OSes. There's a very big dump of unmaintained software, whenever I want to play an old classic game like cc, x-com or even system shock 2(which is from '99) I have serious problems, and have to resort to emulation software (which is quite different from compat4x for example, which is compatibility and not emulation) I've never had a problem with old software on FreeBSD, there are probably many but much less. Have you ever brought 4.x up to 6.x? It doesn't sound like it. Nope, but I've been reading this mailing list long enough to know it's a real pain, but I'm quite sure it is possible. Note that I used much easy er and not easy There are tools to solve this for windows, and there has been for a long time. Yet another third-party hack? Try updating 200 FreeBSD boxes, then try the same with a decent imaging system for windows. Shell script...? Unix is for the masses, the only problem it has is a proper user friendly GUI. Then it isn't for the masses. Deal with it. This really wasn't my point, what I tried to say was that UNIX isn't the big user-unfriendly beast some people like you to believe, and that it can serve as user-friendly desktop just as well as Windows can (MacOS is a good example of this) It's also very outdated and has been reinvented several times. RBAC, SeLinux and MAC would indicate it's not flexible enough for most people. Not flexible enough for some people that is, not most, every system has it's ups and downs, and the standard permissions work for just about all desktop PCs and most hobby-servers That's not in itself a good thing. As I understand it, the registry is a central place for storing configuration details. More or less, however, it sucks, open regedit and browse through it and you'll know what I mean, names are cryptic and non-descriptive, the hierarchy doesn't make sense, and worst, it's undocumented.. Which means that hacking the registry is something similair to hacking sendmail.cf Editing ten diffrent files to change one thing is easyer, quicker and leads to less heacache then changing something in the registry... Have a look at things like Solaris SMF and you realise that rcNG isn't as good as it could be either. Never used Solaris so I can't say anything about their SMF, a (very) quick glance reminded me of linux... Anyway, rc isn't perfect, but it works for me, it atleast makes sense... ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Multiple install
Do you know of a drive clone that will work well with distributing freebsd installations to multiple servers via network. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: no one here use restore/dump?
___ Huh? I do. I'm sure a lot of people do. strange that nobody answerem by questions. it's quite impossible that only i have such problems. i really must be sure my dumps are restorable! :) ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: no one here use restore/dump?
Wojciech Puchar wrote: nobody here do backups of their systems? strange?! I backup and restore using those self-named tools on a variety of DLT and 4mm DAT tape drives. 4mm DDS DAT kinda sucks, and they are super-sensitive to being cleaned a lot. Did you have a more specific question...? -- -Chuck ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD vs Linux
On 18/01/06, Martin Tournoy [EMAIL PROTECTED] wrote: So what? That's exactly the same for FreeBSD, even it's core apps. And vendors rush to support MS' new OSes. There's a very big dump of unmaintained software, whenever I want to play an old classic game like cc, x-com or even system shock 2(which is from '99) I have serious problems, and have to resort to emulation software (which is quite different from compat4x for example, which is compatibility and not emulation) I'm not disputing that, I'm just saying rebuilding world so top still works with a new kernel might not be that much of a leap forward. [Incidentally, breaking backwards compatibilty was a conscious decision by MS, according to: http://www.joelonsoftware.com/articles/APIWar.html (briefly, they'd always tried hard to support older apps, which is where a lot of windows 'bloat' comes from. They dropped that fairly recently, and people (developers) are very unhappy about it) Have you ever brought 4.x up to 6.x? It doesn't sound like it. Note that I used much easy er and not easy :) All I'm saying is these are universal problems. Try updating 200 FreeBSD boxes, then try the same with a decent imaging system for windows. Shell script...? as in: 'a simple matter of programming'? :) My point is you need to write it, whereas you can get a supported solution for MS off the shelf. That sort of thing matters to an IT manager/director, and they decide the budgets. Unix is for the masses, the only problem it has is a proper user friendly GUI. Then it isn't for the masses. Deal with it. This really wasn't my point, what I tried to say was that UNIX isn't the big user-unfriendly beast some people like you to believe, and that it can serve as user-friendly desktop just as well as Windows can (MacOS is a good example of this) True, but OSX doesn't expose the CLI to the same extent BSD does. I wonder how many OSX users have subsequently started using BSD. RBAC, SeLinux and MAC would indicate it's not flexible enough for most people. Not flexible enough for some people that is, not most, every system has it's ups and downs, and the standard permissions work for just about all desktop PCs and most hobby-servers But there is a need for that sort of granularity in many cases. (I for one dislike running webservers as root just so they can open port 80, for instance). It could be (and is) done better elsewhere, but 'good enough' stops it becoming widespread. Never used Solaris so I can't say anything about their SMF, a (very) quick glance reminded me of linux... check docs.sun.com when you have a spare few hours, you'll be surprised. Anyway, rc isn't perfect, but it works for me, it atleast makes sense... Yeah, I much prefer it to the sysvinit nonsense shudder. -- Rasputin :: Jack of All Trades - Master of Nuns http://number9.hellooperator.net/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
again canon printer trouble
Ok, two short questions. -Is someone able to translate this for me (seems to be Czech)? http://www.abclinuxu.cz/hardware/show/65412;jsessionid=10vmgmw8u8l16 -May my problem be due to acpi in any way? I don't know acpi either. But may try something like debug.acpi.disabled=isa in /boot/device.hints. Good or bad idea ? -- Regards, Ivan. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: KDE3 install problem n solution (BUG ????)
At 03:56 AM 1/18/2006, Mike Hernandez wrote: On Wed, Jan 18, 2006 at 04:04:10AM +0600, Aftab Jahan Subedar wrote: Installing compiling KDE3 in 4.7 had problem in line 275 of /usr/ports/x11/kdebase3/work/kdebase-3.4.3/kcontrol/usbview/usbdevices.cpp Not ready for 3.5 yet are you? Mike Ready but ports are not updated yet. !!! Soon for sure. Thanks Mike -Jahan ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: PAE causing system crashes
On Wed, Jan 18, 2006 at 08:03:44AM -0500, Ted Wisniewski wrote: You weren't by chance also using NFS? I was, all my other 5.x systems did not use NFS and are stable. I saw this same behavior and wound up going back to 4.11 to keep the system stable. Hmm, I didn't notice the 5.4 somehow. Try using 6.0 instead - many important bugs fixed, not to mention the performance improvements. Kris P.S. Don't top-post pgp6WlYde1wid.pgp Description: PGP signature
Re: PAE causing system crashes
Nopers. No nfs... nothing at all fancy with the drives except the raid. -m On Jan 18, 2006, at 7:03 AM, Ted Wisniewski wrote: You weren't by chance also using NFS? I was, all my other 5.x systems did not use NFS and are stable. I saw this same behavior and wound up going back to 4.11 to keep the system stable. Ted On Tuesday 17 January 2006 03:17 pm, Michael Barnett wrote: To ammend this slightly.. When running the PAE kernel, they will stay online indefinitely under little to no load. It is only when i want them to actually work will they freak out and reboot. -m On Jan 17, 2006, at 1:47 PM, Michael Barnett wrote: I have 3 dell machines with 2x xeon procs, 8G of ram, and a half terabyte raid 5. I attempted to run the AMD64 distribution on these boxes which was fine for everything except mysql, (which is all these boxes are going to do) so I reinstalled 5.4 i386. uname -a looks like (hostname obscured): FreeBSD myhost.mydomain.com 5.4-RELEASE-p9 FreeBSD 5.4-RELEASE-p9 #2: Mon Jan 16 23:27:12 PST 2006 [EMAIL PROTECTED]:/usr/ obj/usr/src/sys/SMP-PAE i386 My problem is, if i don't enable PAE in the kernel, i can only address half the ram in the boxes, but... the machines are stable. If i do enable PAE, i can address all the memory, but they randomly reboot without dumping any errors or logging. To enable PAE, i am building and booting off the following kernel config: snip include PAE ident SMP-PAE options SMP options KVA_PAGES=512 /snip I added the KVA_PAGES options hoping to stabilize the machine (doesn't seem to have made any difference.) The only other tuning i am doing at the moment is in loader.conf: snip kern.maxdsiz=2147483648# Set the max data size /snip When i boot without PAE I use the generic SMP kernel, and the machine is stable. I know that there are a number of other kernel tunables i could be tweaking, but I am not really sure where to start as the machine dies silently. I was hoping that someone who has run a stable PAE kernel with 8G of ram + could point me in the right direction. Thanks, -Michael ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions- [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] -- | Ted WisniewskiE-Mail: [EMAIL PROTECTED]| | Manager, Systems GroupWEB:http://oz.plymouth.edu/ ~ted/ | | Information Technology Services| | Plymouth State University Phone: (603) 535-2661 | | Plymouth NH, 03264Fax:(603) 535-2263 | ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
accounting - question on core usage
Hello, In the sa(8) manpage, I can find that it prints out somewhat mysterious values: k CPU-time averaged core usage, in 1k units k*sec CPU storage integral, in 1k-core seconds How are these values calculated and what do they really tell me? I know they're somehow related to the memory usage. -- Jan Srzednicki [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: create/symlink failed, no inodes free
On 1/18/06, progerstis (sent by Nabble.com) [EMAIL PROTECTED] wrote: The same error appeared frequently when I tried to install FreeBSD on an 8.5GB partition. Apparently it was because the root partition was running out of space. So instead of using the auto-option to divide up and create the different (logical?) partitions I created one root partition that is 8000MB and a swap partition that is ~500MB. I've discovered that in having a small root partition (300M) on can be well served by setting newfs -i to some uncommonly low value, such as 2048 or 1024. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: freebsd 6.0 rc.conf
ann kok, Here http://freebsd.qmailrocks.org/remove.htm are some instructions on uninstalling Sendmail. -David On 1/18/06, ann kok [EMAIL PROTECTED] wrote: Hi all I have 2 questons about rc.conf 1/ I want to stop sendmail running in the box. in the man page in rc.sendmail. it said to put the following in rc.conf. to completely prevent any snedmail(8) daemons from starting. but my sendmail is still running in the box! sendmail_enable=NO sendmail_submit_enable=NO sendmail_outbound_enable=NO sendmail_msp_queue_enable=NO 2/ When I put quagga_flags=start in rc.conf, the box is in boot process and seems to not in logon prompt. but I remove quagga_flags=start in rc.conf, the box is in the logon prompt Why? Thank you for your help defaultrouter=NO quagga_enable=YES quagga_daemons=zebra bgpd quagga_flags=start router_enable=NO __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: no one here use restore/dump?
___ Huh? I do. I'm sure a lot of people do. strange that nobody answerem by questions. it's quite impossible that only i have such problems. What question? No real question was asked. What do you want to know? Lots of people use dump/restore, some occasionaly, some regularly. jerry i really must be sure my dumps are restorable! :) ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Why I haven't device /dev/cd0
Hello ! I want to use DVD+RW. I looked in handbook and I saw there: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/creating-dvds.html 16.7.5 Using a DVD+RW Unlike CD-RW, a virgin DVD+RW needs to be formatted before first use. The growisofs(1) program will take care of it automatically whenever appropriate, which is the recommended way. However you can use the dvd+rw-format command to format the DVD+RW: # dvd+rw-format /dev/cd0 It is a mistake? In my folder /dev/ I have only the following devices for DVD: /dev/acd0 and this (I do not remember exactly it name) /dev/acd0t01 Where is /dev/cd0? I want to format my DVD, but when I use: # dvd+rw-format /dev/acd0 then I obtain error about something inappropriate ioctl. Please for help. I'm beginner in FreeBSD. I try format DVD+RW and then want to use for packet writing. Is it possible? Best regards, cblasius ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: I have been hacked (WAS: Have I been hacked or is nmap wrong?)
On Wed, Jan 18, 2006 at 05:38:50PM +0200, Kilian Hagemann wrote: On Wednesday 18 January 2006 16:25, Will Maier pondered: On Wed, Jan 18, 2006 at 03:56:32PM +0200, Kilian Hagemann wrote: I have never even heard of frox before, but after some googling it turns out that it's a GPL'ed transparent ftp proxy... Where's it pointing? No idea, I only went as far as trying to login anonymously using a console based ftp client. How could I find out? Connect to it and watch the packets in tcpdump(8) or similar. this may not give you the full answer, but it'll help. What banners do the FTP servers have? Is there a domain listed? Who owns that domain? What do you see when you connect to the SMTP ports? Are they really mail servers, or just rogue services running on 25? They are really mail servers, at least smtp for outgoing mails (don't know about incoming though). I used kmail to configure them as standard outgoing smtp mail servers and successfully sent myself two emails, one via each server. Surely a default, out of the box, unconfigured and sendmail_enable=None sendmail process wouldn't allow for something like that, never mind the fact that the firewall is supposed to block ANY access from the outside (output of ipfw show is attached) So these are running, functioning sendmail servers that /you/ didn't configure (on purpose)? What do you see when you 'talk' to them via nc(1)? If you're firewall was dropping incoming packets destined to those ports, you wouldn't have been able to send a mail through them (or connect on 25 with nc(1))... Well, I didn't worry about samba because it's firewalled to the outside(unless some Windows virus on one of the LAN machines exploited a samba hole, is that likely?). I don't know Samba that well, but it's possible it could be exploited (check the web for recent advisories pertaining to it). How much do you trust the users on the 'green' side? Could one of their boxes have been compromised and then used as a platform to attack your border servers? This sort of (nightmare) scenario is why people have been whining about 'defense in depth' for the last few years; it turns out that your crunchy, impermeable outside actually can be as squishy as your inside. There is only one single normal user account with an uncommon name and an impossible password(16 characters randomly generated from ASCII charset). ChallengeResponseAuthentication is commented out in sshd which I guess means it uses the standard PAM authentication. It also allows password/interactive authentication in addition to public key, I always use the former. I do admit that I have set PermitRootLogin yes but my root password is 9 characters with numbers and non-alphanumeric characters, so hard to brute-force. Having a kickass, long username with an 'impossible' 16 char password and an open root account with a password 9 chars long is like putting a heavy steel door on a cardboard box. Allowing PermitRootLogin is a mistake in almost every scenario; disable it in the next generation of your servers (if possible). It's a 'weakest link' sort of situation, I guess. In any case, it's important to note that the only access from the outside via ssh/rsync is firewalled in such a way that it only allows access from a single IP address which my institution assigns me statically via DHCP (see attachment). That's good. They would have had to a) find out what this one and only trusted IP address is b) spoof it successfully c) attack ssh brute force? Assuming the firewall works, they would certainly have to complete steps a, b and c; unless, that is, they compromised /your/ box, too. Unlikely, though, I suspect. Well, I thought my setup was secure enough for a very basic router/gateway/firewall for a couple of Windows machines using a sucky internet connection which is not worth stealing. Unfortunately, the asset you should be protecting might not be your bandwidth or data or whatever it is you've been assuming. When you set up a firewall, you're protecting something -- in your case, what is it? Have you defined that for yourself? It's hard to do a good job defending something you haven't or can't define. While it probably sounds pedantic or silly, take a moment to ask yourself what it is you want to protect. If there are several things, rank them by priority. _Then_ go about designing a defense. Securing your stuff may not be a terribly high priority at all; if so, accept the fact that something bad will happen once in a while. Your security plan might just be deal with it when the shit hits the fan. No problem. That can make sense. Having clarified that for yourself, though, makes things easier. So I didn't go through the effort of using a file integrity monitor, remote logging, traffic dumps or network monitors (jeez, sysadmins lives are really difficult these days :-( ) Like I said above, those sorts of defenses might be overkill for you. That's fine --
Re: Why I haven't device /dev/cd0
cblasius [EMAIL PROTECTED] wrote: I want to use DVD+RW. I looked in handbook and I saw there: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/creating-dvds.html 16.7.5 Using a DVD+RW Unlike CD-RW, a virgin DVD+RW needs to be formatted before first use. The growisofs(1) program will take care of it automatically whenever appropriate, which is the recommended way. However you can use the dvd+rw-format command to format the DVD+RW: # dvd+rw-format /dev/cd0 It is a mistake? In my folder /dev/ I have only the following devices for DVD: /dev/acd0 and this (I do not remember exactly it name) /dev/acd0t01 Where is /dev/cd0? You probably didn't read chapter 16.7.2 Configuration on the same page. If you're using 6.0 you can kldload atapicam.ko and the missing device should appear. Fabian -- http://www.fabiankeil.de/ signature.asc Description: PGP signature
Re: FreeBSD vs Linux
--- Dick Davies [EMAIL PROTECTED] wrote: On 18/01/06, Danial Thom [EMAIL PROTECTED] wrote: Microsoft pays hardware manufacturers to make drivers for their OS, I seriously doubt it. They don't need to with their market share. Ok, what do you guys live in a shoe or something? MS doesn't have to pay vendors, you toad. Did you read what I just typed Daniel? Because you're coming across as a bit of an ignorant twat. Sorry, but I find it impossible that people don't know that vendors pay microsoft to write drivers. And you clearly weren't certain of your answer. DT __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Why I haven't device /dev/cd0
On Wed, 2006-01-18 at 21:53 +0100, cblasius wrote: Hello ! I want to use DVD+RW. I looked in handbook and I saw there: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/creating-dvds.html 16.7.5 Using a DVD+RW Unlike CD-RW, a virgin DVD+RW needs to be formatted before first use. The growisofs(1) program will take care of it automatically whenever appropriate, which is the recommended way. However you can use the dvd+rw-format command to format the DVD+RW: # dvd+rw-format /dev/cd0 It is a mistake? In my folder /dev/ I have only the following devices for DVD: /dev/acd0 and this (I do not remember exactly it name) /dev/acd0t01 Where is /dev/cd0? I want to format my DVD, but when I use: # dvd+rw-format /dev/acd0 then I obtain error about something inappropriate ioctl. Please for help. I'm beginner in FreeBSD. I try format DVD+RW and then want to use for packet writing. Is it possible? Best regards, cblasius ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] You need to add one line (device atapicam) to the kernel config file and recompile the kernel to enable access to CD and DVD devices through /dev/cd0 See section 16.6.9 in the Handbook, and also section 8 for recompiling a kernel. Installing K3B will provide a NERO-like GUI interface for burning CDs, should you prefer to do it that way. Nowhere near as hard as it sounds! ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD vs Linux
On Tue, 2006-01-17 at 18:15 +0100, [EMAIL PROTECTED] wrote: What is the essential difference between FreeBSD and Linux (Fedora for instance)? I have been following this thread (and similar ones over the past few weeks) and would like to offer my perspective on the FreeBSD versus Linux discussion. FWIW, this isn't a troll, so my apologies if it upsets some of the more precious people on this list (and having read the list for the past couple of months you are definitely out there). To explain some background, I used/administered/programmed under Unix throughout the 1980s and 1990s (SysVR3, BSD4.2, Ultrix...), and I have been using Linux (RedHat/Fedora) for the past couple of years. I have recently been using/evaluating FreeBSD. I have no particular axe to grind in favour of either system. It's reasonable to assume that the sorts of people asking a question like what's the difference... or which is better... aren't designing brand-new top-end data centres. They are a lot more likely to be contemplating a move from MS Windows or perhaps have dabbled with Linux and are curious. I would also suggest that a better question than what's better is what is more appropriate. So, that preamble out of the way, my $0.02 is this. The distinction Linux is a kernel; FreeBSD is an O/S is - frankly - the sort of jesuitical sophistry that gets UseNet a bad name. The important things are: EASE OF USE AND INSTALLATION Linux is a much, much easier system to install and configure. No contest. Stick the disks in, it'll pretty much recognise any sound-card and video interface and will work out of the box without pissing about configuring X-windows or recompiling the kernel. I'm sure if you persevere for long enough with FreeBSD it's possible to get a quite usable desktop, with most of the applications that come bundled with a release of Linux. The FreeBSD installation process is like some sort of time-warp back to the 1980s. The argument that most FreeBSD installations are server, so don't require mice etc. is a circular/self-fulfilling one. People - frankly - aren't going to be bothered messing around getting FreeBSD working. Get used to it. COMMUNITY The Linux community is much larger than the FreeBSD one. I have noted certain comments in this mailing list about wanting to stay select, like some sort of digital Albania. To be honest, it's highly likely that your wish will come true. Fortunately there is this mailing list. And a couple of books, although when I went to my local bookstores (large ones, with big sections on computing) each had an entire shelf of Linux books, but none on FreeBSD. Thank goodness for Amazon, so I could get Lehey - which is excellent. The relative size of the communities means two things: there's much more support for Linux and also more applications are ready for Linux. Just like if I compare Linux with Windows. This list relies on a small number of dedicated experts who are generous enough with their time to answer a lot of questions over and over again. However, the FreeBSD community resembles some sort of religious cult at times. If FreeBSD wants to be anything other than a small footnote in the history of computing then it needs to engage a bit more with the 99.99% of the world who neither know - nor care - what it is; and who regard re-compiling a kernel as less of a God-given right and more of a tedious chore. HARDWARE SUPPORT I'd have to say that the hardware support in FreeBSD is probably better than that in Linux. Certainly it is on the hardware I've tested. But, for most people it's still a pain. SERVER APPLICATIONS All the tests I have done, and all I have read suggests that FreeBSD is superb for server applications. Once I have convinced myself of its support for SMB and a couple of other things, then it is highly likely I will be migrating my own servers over to FreeBSD: that's the best recommendation you can get. DESKTOP APPLICATIONS I love FreeBSD's pkg_add etc. and the ports collection is quite cool. But, pretty much all the stuff I want to port or add is there in most Linux distros. Lots of stuff also just doesn't work out of the box like it should. I have to force pkg_add to do strange stuff or there are other strange dependencies. If you're prepared to work on it, then you can get most applications running on FreeBSD, but it's still easier on Linux. SUMMARY IF you are prepared to work on it, FreeBSD looks like a great server operating system. If you're just an ordinary joe who wants a Unix-style OS then Linux is much easier to install, configure etc., has more desktop type applications which work first time etc. If you are building a data-centre which requires highly available servers then FreeBSD is better than Linux. But if you are in that sort of market you already know that, and are probably intending to wait a couple of months until Solaris goes open-source. ___ freebsd-questions@freebsd.org mailing
Re: Foreign language posts (was: Pooomooocyyyy ;()
On Wednesday 18 January 2006 03:25 pm, [EMAIL PROTECTED] wrote: Wekk op n smehl da Kaffe, dood! Effn ah kaint reed et, how dew ah no et aint L kadeh plennen to rep muh guhrl? bee jes lahk duh bestads ta yoose Politch! -LenZ- C'est du Klingon ?? Not Klingon; Mercan, my native tongue. Maybe the spelling could use a little work though:-) -LenZ- ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
vidcontrol does not give mode more 800x600
FreeBSD version: 6.0-RELEASE #0 video card: Nvidia Geforce4 MX 440 64M Kernel contains: devicevga deviceagp options VESA options SC_PIXEL_MODE when start on vmware `vidcontrol -i mode` list mode before 1920x1440 when start on real hardware `vidcontrol -i mode` list mode only before 800x600 tried to add 'options VGA_WIDTH90' in kernel tried to install driver nvidia in internet on this subject nothing have not found even connected other monitor :) ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD vs Linux
On 18/01/06, Danial Thom [EMAIL PROTECTED] wrote: --- Dick Davies [EMAIL PROTECTED] wrote: On 18/01/06, Danial Thom [EMAIL PROTECTED] wrote: (actually, no he didn't. your mail clients quoting is insane) (some guy:) Microsoft pays hardware manufacturers to make drivers for their OS, (me:) I seriously doubt it. They don't need to with their market share. (danial:) Ok, what do you guys live in a shoe or something? MS doesn't have to pay vendors, you toad. (me:) Did you read what I just typed Daniel? Because you're coming across as a bit of an ignorant twat. (danial:) Sorry, but I find it impossible that people don't know that vendors pay microsoft to write drivers. Maybe he meant 'it pays to write drivers for MS' or something? I didn't feel the need to call him names over it. And you clearly weren't certain of your answer. Yeah, I probably should have said something about his mother to help clarify things. sheesh :) -- Rasputin :: Jack of All Trades - Master of Nuns http://number9.hellooperator.net/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Why I haven't device /dev/cd0
If you look at /etc/fstab it should show you which device is assigned to /cdrom in my case (DVD+RW-DL), it is /dev/acd0 Since you have that device, that is probably yours as well. I wouldn't be surprised if you could simply: mount /cdrom Malachi On 1/18/06, cblasius [EMAIL PROTECTED] wrote: Hello ! I want to use DVD+RW. I looked in handbook and I saw there: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/creating-dvds.html 16.7.5 Using a DVD+RW Unlike CD-RW, a virgin DVD+RW needs to be formatted before first use. The growisofs(1) program will take care of it automatically whenever appropriate, which is the recommended way. However you can use the dvd+rw-format command to format the DVD+RW: # dvd+rw-format /dev/cd0 It is a mistake? In my folder /dev/ I have only the following devices for DVD: /dev/acd0 and this (I do not remember exactly it name) /dev/acd0t01 Where is /dev/cd0? I want to format my DVD, but when I use: # dvd+rw-format /dev/acd0 then I obtain error about something inappropriate ioctl. Please for help. I'm beginner in FreeBSD. I try format DVD+RW and then want to use for packet writing. Is it possible? Best regards, cblasius ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
64 Bit Questions
I have a couple questions about the AMD64 Project. 1. They page mentions that there is multiprocessor support. Does this include the dual core processors? Will the OS dispatch processes and threads to each core? 2. While the OS will use the 64 bit mode, will the applications still run in the compatibly mode? Will the applications still only use 32 bits. 3. Also, will the OS take advantage of being 64 bit and load itself into memory higher than the 32 bit addressable mark so that my 32 bit applications can use the lower part? 4. If I enable 64 bit compilation on GCC prior to installing a port, will the port then be 64 bit enabled? 5. If I stall an IDE and write my own applications on a 64 bit machine, can a 32 bit machine still run them? Thank you in advance for your response and time. Anthony DeMatteo ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: loosing hair inside canon printer...
On Wed, 18 Jan 2006, [EMAIL PROTECTED] wrote: This said, I have this in dmesg: [snip] Probing for PnP devices on ppbus0: ppbus0: Canon i865/1.13 PRINTER BJL,BJRaster3,BSCCe [snip] simple question: how freebsd know about the name of my printer? I imagine FreeBSD queries the parallel port to see what's there (Probing...), and then the printer responds with the information displayed above. # chkprintcap chkprintcap: WARNING: found 1 entries when skimming /etc/printcap chkprintcap: WARNING: but only found 0 queues to process! Could it be there is no spool directory? There should be something like :sd=/var/spool/output/lpd: in /etc/printcap; make sure that directory exists. Also, is lpd running? What output does ps -aux | grep lpd produce? The simplest way to run lpd is to put the following in /etc/rc.conf: lpd_enable=YES# Run the line printer daemon. Hope this helps. -- Chris Hill [EMAIL PROTECTED] ** [ Busy Expunging | ] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: freebsd 6.0 rc.conf
You are looking for this sendmail_enable=NONE -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of David Stanford Sent: Wednesday, January 18, 2006 3:04 PM To: ann kok Cc: freebsd-questions@freebsd.org Subject: Re: freebsd 6.0 rc.conf ann kok, Here http://freebsd.qmailrocks.org/remove.htm are some instructions on uninstalling Sendmail. -David On 1/18/06, ann kok [EMAIL PROTECTED] wrote: Hi all I have 2 questons about rc.conf 1/ I want to stop sendmail running in the box. in the man page in rc.sendmail. it said to put the following in rc.conf. to completely prevent any snedmail(8) daemons from starting. but my sendmail is still running in the box! sendmail_enable=NO sendmail_submit_enable=NO sendmail_outbound_enable=NO sendmail_msp_queue_enable=NO 2/ When I put quagga_flags=start in rc.conf, the box is in boot process and seems to not in logon prompt. but I remove quagga_flags=start in rc.conf, the box is in the logon prompt Why? Thank you for your help defaultrouter=NO quagga_enable=YES quagga_daemons=zebra bgpd quagga_flags=start router_enable=NO __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: loosing hair inside canon printer...
Chris Hill wrote: On Wed, 18 Jan 2006, [EMAIL PROTECTED] wrote: This said, I have this in dmesg: [snip] Probing for PnP devices on ppbus0: ppbus0: Canon i865/1.13 PRINTER BJL,BJRaster3,BSCCe [snip] simple question: how freebsd know about the name of my printer? I imagine FreeBSD queries the parallel port to see what's there (Probing...), and then the printer responds with the information displayed above. # chkprintcap chkprintcap: WARNING: found 1 entries when skimming /etc/printcap chkprintcap: WARNING: but only found 0 queues to process! Could it be there is no spool directory? There should be something like :sd=/var/spool/output/lpd: in /etc/printcap; make sure that directory exists. Also, is lpd running? What output does ps -aux | grep lpd produce? The simplest way to run lpd is to put the following in /etc/rc.conf: lpd_enable=YES# Run the line printer daemon. Hope this helps. -- Chris Hill [EMAIL PROTECTED] ** [ Busy Expunging | ] Hi Chris, Thanks for replying. I got lpd_enable=YES, and lpd is running. I have the directory in /etc/printcap created, and permissions are ok on it. I even tried to change my printer's name (but I let lp as an alias I think it is mandatory for at least the first printer, and I changed the directory in the sd variable in /etc/printcap. no change. by the way, thanks for trying. Any other idea ? -- Regards, Ivan. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
About VFS locking strategy...
Hi all. I'm speluking with source code of FreeBSD now, comparing VFS of FBSD and the linux's. I have a question related with concurrent accesses to the file system. It is seemed that VFS locks and unlocks each VNODEs before calling VNODE OPS provided by underlying FS. For example, it calls vn_lock(vp, ...) before jumps to VOP_READ() in vn_read(). WindowsCE kernel also has a component that is responsible for switching FS requests to appropriate file-system underlying and similar with VFS of many UNIX variants, but it's not perfectly same. In WindowsCE world, file system driver code can be called on re-entry and file system programmer should keep this in mind. The manager does not manage any synchronization problems that can be occurred when multiple threads access to the file system. It has only a few locks for protecting its own data structures. How does it manage synchronization problems in the VFS of FreeBSD? Please give me a detailed description about lock strategy the FreeBSD uses. Thanks in advance. Charlie ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
6.0 for nfsd ?
Hi all I known that's a question come 1000 times when there are a new release... I must re-install my nfs server (actually run under FreeBSD 4.7 perfectly). I want to install FreeBSD 6.0-stable or FreeBSD 6.0-Release because on the www.freebsd.org this tag is «Production...». But is it a good idea ? Maybe FreeBSD 5.4-Release is enough ? What's adavantage can I've to install FreeBSD 6.0 instead 5.x ? (The only thing I want is the best performance AND best stability for...nfs). Lots of thanks. -- Albert SHIH Universite de Paris 7 (Denis DIDEROT) U.F.R. de Mathematiques. Heure local/Local time: Thu Jan 19 00:48:56 CET 2006 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: 64 Bit Questions
Le 18/01/2006 à 17:40:00-0500, Anthony Dematteo a écrit I have a couple questions about the AMD64 Project. 1. They page mentions that there is multiprocessor support. Does this include the dual core processors? Will the OS dispatch processes and threads to each core? I only can answer this question : I've try to install FreeBSD 6.0-Release AMD64 on dual opteron 275 (dual core). Everething work fine and we have 4 proc in the OS. Unfortunaly I do not have the chance to launch 4 big process to see the thread performance. For example I known on dual-core PowerPC Apple Macintosh time(4 x proccess)=time(1x process) [For the same process of course) Regards. -- Albert SHIH Universite de Paris 7 (Denis DIDEROT) U.F.R. de Mathematiques. Heure local/Local time: Thu Jan 19 00:52:28 CET 2006 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: again canon printer trouble
Michal Mertl wrote: [EMAIL PROTECTED] wrote: Ok, two short questions. -Is someone able to translate this for me (seems to be Czech)? http://www.abclinuxu.cz/hardware/show/65412;jsessionid=10vmgmw8u8l16 -May my problem be due to acpi in any way? I don't know acpi either. But may try something like debug.acpi.disabled=isa in /boot/device.hints. Good or bad idea ? Hello. I am Czech. The page talks about using the printer under Linux. Canon provides drivers for it. I don't know if they can be used because I don't know the CUPS much. If the driver/filter program is (can be) invoked manually, you could probably use it with FreeBSD native CUPS. If not you can possibly run Linux CUPS and print to it even from FreeBSD native applications. If the program directly communicates with the printer you may be out of luck because you don't run Linux kernel and the emulation may not be complete in these low-level areas. I didn't see your original post but printing issue can not be caused by ACPI unless the interface for printing doesn't work at all. If for example you use USB connection to the printer and something else USB works, than ACPI can't be at fault. HTH Michal Hi Michal, Definetely this ML should be read at least by czech people. Others are welcome for sure. Thanks a million for your translation and re-explanation. I am going to test in that way tomorrow. Of course, I still do not understand why I cannot print directly with /dev/lpt0. About acpi, I told that because I have ppc0: Standard parallel printer port port 0x378-0x37f irq 7 on acpi0 in dmesg and all the examples I saw had isa instead of acpi. Any idea? Is it normal? Thanks again Michal. -- Regards, Ivan ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: 64 Bit Questions
On 2006-01-18 17:40, Anthony Dematteo [EMAIL PROTECTED] wrote: I have a couple questions about the AMD64 Project. 1. They page mentions that there is multiprocessor support. Does this include the dual core processors? Will the OS dispatch processes and threads to each core? Not sure if I'm the right person to answer this in great technical detail, but I think the answer is 'yes' to both questions. 2. While the OS will use the 64 bit mode, will the applications still run in the compatibly mode? Not necessarily. By default the base system and any applications you compile yourself will be 64-bit too. The installed compiler and toolchain support building 32-bit binaries too, if you manually compile things yourself, but you don't have to if you don't feel like doing it. Will the applications still only use 32 bits. No, 64-bit applications can use the full 64-bit address range. 3. Also, will the OS take advantage of being 64 bit and load itself into memory higher than the 32 bit addressable mark so that my 32 bit applications can use the lower part? I'm not sure if I understand the question correctly, but why does the specific 'place' in the virtual 64-bit address space matter to an application? Some may argue that depending on such low level information is broken behavior and should be fixed in the application. 4. If I enable 64 bit compilation on GCC prior to installing a port, will the port then be 64 bit enabled? Ports do not support cross-compiling, as far as I know. If you build on a 64-bit machine, you get 64-bit binaries. If you build on a 32-bit machine, you get 32-bit binaries. 5. If I stall an IDE and write my own applications on a 64 bit machine, can a 32 bit machine still run them? No. The 64-bit binaries refer to registers, addresses and other parts of the 64-bit architecture that are not available in 32-bit hardware. The other way around works fine though. The 64-bit versions of FreeBSD include 32-bit libraries and runtime support too, so you can run 32-bit binaries seamlessly. In fact, this is exactly what enabled me to run a 32-bit binary of CMUCL, and experiment with LISP now that I've started learning about it: [EMAIL PROTECTED]:/home/keramida$ uname -v FreeBSD 7.0-CURRENT #0: Mon Jan 16 17:28:28 EET 2006 \ [EMAIL PROTECTED]:/home/build/obj/home/build/src/sys/FLAME [EMAIL PROTECTED]:/home/keramida$ which lisp /usr/local/bin/lisp [EMAIL PROTECTED]:/home/keramida$ file `!!` file `which lisp` /usr/local/bin/lisp: ELF 32-bit LSB executable, Intel 80386, \ version 1 (FreeBSD), for FreeBSD 6.0 (600100), \ dynamically linked (uses shared libs), not stripped [EMAIL PROTECTED]:/home/keramida$ lisp ; Loading #P/home/keramida/init.lisp. CMU Common Lisp 19c Release (19C), running on flame.pc With core: /usr/local/lib/cmucl/lib/lisp.core Dumped on: Wed, 2005-11-30 01:04:28+02:00 on boomerang See http://www.cons.org/cmucl/ for support information. Loaded subsystems: Python 1.1, target Intel x86 CLOS based on Gerd's PCL 2004/04/14 03:32:47 * ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: How to tell if IPF is running?
--- Erik Norgaard [EMAIL PROTECTED] wrote: Gable Barber wrote: On 1/18/06, Peter [EMAIL PROTECTED] wrote: Switch over to pf. Why do you suggest PF over IPF? Hope I am not starting a war here.. but I am genuinely interested in the opinions. I used IPF on FBSD until there was some bug in IPF for 5.x some version that forced me to switch after an upgrade. The bug has been fixed since but I have found no reason to go back. There are two things I miss from IPF: a) proper accounting: You can't count traffic correctly with stateful filtering on pf, pf will count when a rule is matched but once a state is established packets for that state are not matched and hence not counted. That's not true. __ Find your next car at http://autos.yahoo.ca ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
mencoder/mplayer slower on freebsd 6.0-amd64
Hi, I don't know if this is related, but I noticed that, when I run mkxvcd under amd64, it takes longer time to finish a movie conversion. I didn't do a side-by-side comparison between amd64 and i386 system, but usually a job will take less than an hour to finish on i386 would take more than that (usually like 2 hours) on the amd64. mkxvcd calls up mplayer/mencoder to do the conversion, while running the command, it prompted: [code] mplayer: could not connect to socket mplayer: Socket operation on non-socket [/code] is this the problem? TFC ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: About VFS locking strategy...
On Thu, Jan 19, 2006 at 08:43:55AM +0900, Shin,Hee-Sub wrote: Hi all. I'm speluking with source code of FreeBSD now, comparing VFS of FBSD and the linux's. I have a question related with concurrent accesses to the file system. It is seemed that VFS locks and unlocks each VNODEs before calling VNODE OPS provided by underlying FS. For example, it calls vn_lock(vp, ...) before jumps to VOP_READ() in vn_read(). WindowsCE kernel also has a component that is responsible for switching FS requests to appropriate file-system underlying and similar with VFS of many UNIX variants, but it's not perfectly same. In WindowsCE world, file system driver code can be called on re-entry and file system programmer should keep this in mind. The manager does not manage any synchronization problems that can be occurred when multiple threads access to the file system. It has only a few locks for protecting its own data structures. How does it manage synchronization problems in the VFS of FreeBSD? Please give me a detailed description about lock strategy the FreeBSD uses. This question might be too general to get any replies, but it would still be better asked on fs@ or [EMAIL PROTECTED] Kris pgpXpnaW4x5Vg.pgp Description: PGP signature
Re: 6.0 for nfsd ?
On Thu, Jan 19, 2006 at 12:52:26AM +0100, Albert Shih wrote: Hi all I known that's a question come 1000 times when there are a new release... I must re-install my nfs server (actually run under FreeBSD 4.7 perfectly). I want to install FreeBSD 6.0-stable or FreeBSD 6.0-Release because on the www.freebsd.org this tag is ?Production...?. But is it a good idea ? Maybe FreeBSD 5.4-Release is enough ? What's adavantage can I've to install FreeBSD 6.0 instead 5.x ? (The only thing I want is the best performance AND best stability for...nfs). 6.0 should perform much better than 5.4 for this task. It is also more stable than 5.4-RELEASE in general. Kris pgpPVj1tWhd4g.pgp Description: PGP signature
nsswitch.conf with ldap
Hi, I'm trying to use ldap database in /etc/nsswitch.conf but FreeBSD hangs on boot if it needs to bind a system user present in files, my nsswitch.conf: group: files ldap group_compat: nis hosts: files dns networks: files passwd: files ldap passwd_compat: nis shells: files Adding ldap after FreeBSD has started, everything works ok. I've done some test with truss on single user mode with and without ldap in nsswitch.conf and binding a system user present in files and it only works if there is no ldap in nsswitch.conf truss with ldap in nsswitch.conf: http://djdomics.free.fr/FreeBSD/nss-w-ldap.txt truss without ldap in nsswitch.conf: http://djdomics.free.fr/FreeBSD/nss-wo-ldap.txt I use: FreeBSD djdomics.sceen.net 6.0-STABLE FreeBSD 6.0-STABLE #5: Thu Jan 12 00:18:18 CET 2006 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/DJDOMICS i386 According to nsswitch.conf(5) The default criteria is to return on ``success'', and continue on any- thing else (i.e, [success=return notfound=continue unavail=continue tryagain=continue]). Why FreeBSD tries to use ldap database if my user system is on files ? Thanks for the help. Regards. -- There's this old saying: Give a man a fish, feed him for a day. Teach a man to fish, feed him for life. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: FreeBSD vs Linux
Giorgos Keramidas wrote: On 2006-01-18 16:55, Matias [EMAIL PROTECTED] wrote: [EMAIL PROTECTED] wrote: What is the essential difference between FreeBSD and Linux (Fedora for instance)? Where can I find any list of differences? What/Where are the advantages of FreeBSD vs Linux? Give a look at gentoo it's inspired by FreeBSD, and is linux as well the portage system works great... and as a personal opinion: Use gentoo for Home / Desktop / Office use use FreeBSD For web/ftp/file/ etc.. Servers. Nah. Why use something that is BSD-like when you can get the Real Thing(TM) for free? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] It's just another option. I like very much both of them. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
