date:20071125


The other thing you can do is simply switch back to natd.

You didn't say why you decided to switch in the first place.

A lot of times people switch because they are having problems
with natd.  Are you?  If not, you should be aware that natd
does support more kinds of protocol translations.

Ted

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Roger Olofsson
 Sent: Saturday, November 24, 2007 2:09 PM
 To: Jerahmy Pocott
 Cc: FreeBSD Questions
 Subject: Re: Difficulties establishing VPN tunnel with IPNAT


 Hello again Jerahmy,

 I would suggest that you verify what port(s) and protocol(s) 'Sonic Wall
 Global VPN Client' needs to work.

 I would also suggest that you look in the logfile from ipf to see what
 it's blocking and when.

 My guess is that the VPN client is using a protocol like IPSEC (IP
 protocol 50) and possibly port 500 (IKE) for which you will have to
 activate the ipnat proxy.

 map WAN internal_ip/24 - 0.0.0.0/32 proxy port 500 ipsec/udp

 You might also try to disable the blocking of fragged packets. For some
 VPN clients this can cause problems.

 Good luck!

 /Roger



 Jerahmy Pocott skrev:
  Sorry let me clarify..
 
  There are two issues, one is connecting to any external VPN, with no
  filter I
  can establish a connection to PPTP VPN, but the 'Sonic Wall Global VPN
  Client'
  still fails to connect even with no filter rules.
 
  The redirect for the CVS server has an ipf rule to allow
 traffic on that
  port, but
  users are getting connection refused messages.
 
  I will include my ipf rules, I clearly need some sort of rule to allow
  inbound for
  the VPN to work, though I think the ipnat is breaking the Sonic Wall
  client. Which
  is strange because everything worked fine with ipfw/natd.
 
  Here are my ipf rules:
 
  # Allow all in/out on internel interface
  pass in  quick on fxp0 all
  pass out quick on fxp0 all
 
  # Allow all in/out on loopback interface
  pass in  quick on lo0 all
  pass out quick on lo0 all
 
  # Allow all out-going on public interface and keep state
  pass out quick on fxp1 proto tcp  from any to any flags S keep state
  pass out quick on fxp1 proto udp  from any to any keep state
  pass out quick on fxp1 proto icmp from any to any keep state
 
  # Block all inbound traffic from non-routable or reserved address spaces
  block in quick on fxp1 from 192.168.0.0/16 to any#RFC 1918
 private IP
  block in quick on fxp1 from 172.16.0.0/12 to any #RFC 1918
 private IP
  block in quick on fxp1 from 10.0.0.0/8 to any#RFC 1918
 private IP
  block in quick on fxp1 from 127.0.0.0/8 to any   #loopback
  block in quick on fxp1 from 0.0.0.0/8 to any #loopback
  block in quick on fxp1 from 169.254.0.0/16 to any#DHCP auto-config
  block in quick on fxp1 from 192.0.2.0/24 to any  #reserved for docs
  block in quick on fxp1 from 204.152.64.0/23 to any   #Sun cluster
  interconnect
  block in quick on fxp1 from 224.0.0.0/3 to any   #Class D 
 E multicast
  # Block frags
  block in quick on fxp1 all with frags
  # Block short tcp packets
  block in quick on fxp1 proto tcp all with short
  # block source routed packets
  block in quick on fxp1 all with opt lsrr
  block in quick on fxp1 all with opt ssrr
  # Block anything with special options
  block in quick on fxp1 all with ipopts
  # Block public pings
  block in quick on fxp1 proto icmp all icmp-type 8
  # Block ident
  block in quick on fxp1 proto tcp from any to any port = 113
  # Block all Netbios service. 137=name, 138=datagram, 139=session
  # Block MS/Windows hosts2 name server requests 81
  block in quick on fxp1 proto tcp/udp from any to any port = 137
  block in quick on fxp1 proto tcp/udp from any to any port = 138
  block in quick on fxp1 proto tcp/udp from any to any port = 139
  block in quick on fxp1 proto tcp/udp from any to any port = 81
 
  # Allow CVS access
  pass in quick on fxp1 proto tcp/udp from any to any port = 2401
 
  # Logged Blocking Rules #
 
  # Block nmap OS fingerprint attempts
  block in log first quick on fxp1 proto tcp from any to any flags FUP
 
  # Block all other in coming traffic
  block in log first quick on fxp1 all
 
  Thanks for the help!
  J.
 
  On 25/11/2007, at 12:50 AM, Roger Olofsson wrote:
 
  Hello Jerahmy,
 
  Assuming you want to connect from the outside to your VPN.
 
  Have you made sure that port 2401 is open for inbound traffic in your
  ipf.rules?
 
  You might also want to do 'ipnat -C -f path to ipnat.rules'. Man
  ipnat ;^)
 
  Greeting from Sweden
  /Roger
 
 
 
  Jerahmy Pocott skrev:
  Hello,
  I recently decided to give ipf and ipnat a try, previously I had
  always been using
  ipfw and natd. Since switching over I can no longer establish a VPN
  tunnel from
  any system behind the gateway.
  I did 'ipf -F a' to flush all rules but I was still unable to connect
  so I think it's a problem
  with ipnat? Also my redirect from ipnat doesn't seem to work either.
  These are

getting a background image to display with xcompmgr

2007-11-25 Thread Aryeh M. Friedman

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

xcompmgr seems to place itself on top of anything else on the root
window thus covering up any xv/feh/xsetroot images... how do I get a
background image to display on top of xcompmgr

- --
Aryeh M. Friedman
Developer, not business, friendly
http://www.flosoft-systems.com
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.4 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHSTobJ9+1V27SttsRAjtCAJ0RCggqzJHOi9sZx8c2wroZHHhttACdHcF6
FDpuB7OYsimgRuxqbTAngdc=
=UftY
-END PGP SIGNATURE-

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

RE: Open Source softwares in FreeBSD for web hosting platform

 -Original Message-
 From: Tek Bahadur Limbu [mailto:[EMAIL PROTECTED]
 Sent: Sunday, November 25, 2007 12:52 AM
 To: Ted Mittelstaedt
 Cc: Andrey Slusar; freebsd-questions@freebsd.org
 Subject: Re: Open Source softwares in FreeBSD for web hosting platform

 Hi Andrey and Ted,

 Ted Mittelstaedt wrote:

  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] Behalf Of Andrey Slusar
  Sent: Saturday, November 24, 2007 6:46 AM
  To: Tek Bahadur Limbu
  Cc: freebsd-questions@freebsd.org
  Subject: Re: Open Source softwares in FreeBSD for web hosting platform

  Fri, 23 Nov 2007 15:49:19 +0545, Tek Bahadur Limbu wrote:

  I know that this question has been asked on this list in the past. So
  I am sorry for repeating it.
  However, I would like to know the current answers and views on this
  question.
  Basically, I want to know which software you might be using as a Site
  configuration and management application for web hosting services.
  It will be used primarily to control about 500-1000 virtual domains.
  I know that there are Cpanel and Plesk which are very good commercial
  softwares catering the needs for a good web based management tool.
  So far, I have only tried out RAQdevil http://www.raqdevil.com/
For commercial hostings needs commercial panels.

  Not really true.  It depends on what your charging.  If your charging
  the equivalent of $4.99 a month USD for a light duty site then your
  customers
  are cheapskates who are going to be satisfied with whatever you give
  then, commercial or not.

  The commercial control panels are appropriate for hosts that are
  charging some real money for the service.

 I guess you are correct. The price will be equivalent to less than $9.99 
 a month. I think VHCS or ISPConfig will serve me good.

  From their sites, both are only available for Linux based systems. 
 Anyway, I will setup VHCS in a Debian box.

We actually use webmin ourselves.  Although, we do not give the
users any access to control panels whatsoever.  The major thing
they use them for is setting up mysql databases, and we make
them ask us to do that for them.  Since most users don't need to
do this, it really isn't much of a support burden.  The biggest
support burden with users is getting them to figure out how to
use their FTP or whatever file transfer software, or publish-shit
button on frontpage (thank the maker that MS finally officially
struck that product, so we can get away with punting on support
of ancient free copies of this.  People who can't figure out frontpage
don't have any business making websites)

Ted
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Having problems burning a DVD

2007-11-25 Thread Harry Matthiesen Jensen

On Sat, Nov 24, 2007 at 12:45:33PM -0700, Predrag Punosevac wrote:
   
 I think you are probably missing
 
 permxpt00666
 permpass0   0666

Which file are these to be set in?

 # Misc other devices
 
 permcdrom   0666
 permdvd 0666
 permrdvd0666
 permcd0 0666
 permacd0   0666
 permxpt00666
 permpass0   0666

..and where to set these?

Are all to be set in devfs.conf?

Thanks in advance

-- 
Mvh/Brgds Harry
FreeBSD 8.0-CURRENT #16: Nov 17 08:54:39 CET 2007 i386
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Help with a new port?

2007-11-25 Thread Roland Smith

On Sat, Nov 24, 2007 at 05:01:36PM -0800, Zachary Kline wrote:

 I must confess I haven't.  I'll look into it and see what comes up. 
 Currently trying to figure out how to get ports upgraded in a sane fashion 
 as well, as I've noticed some of the packages are quite behind in comparison 
 to the ports they're based on.

First of all, if you look into the ports directories on the FreeBSD FTP
servers, you'll see different versions of the packages, e.g.
packages-5-stable, packages-6-stable, packages-6.2-release,
packages-7-current, etc. Depending on which version you installed,
'pkg_add -r' picks the packages from one of those directories. So if you
installed 6.2-RELEASE, you'll probably get packages from
packages-6.2-release. That packages tree is based on the ports tree at
the moment that 6.2 was released.

So the best way to keep your ports current is to build them
yourself. First, update your ports tree with portsnap (from the base
system). Then install one of the ports management tools like portmaster
or portupgrade, and use that to upgrade the ports. Do read
/usr/ports/UPDATING so that you are aware of any issues.

If you have questions, don't hesitate to ask on the list, but have a
look through the list archives as well, if you can access them. 

If you have trouble navigating the FreeBSD website, you should contact
the website maintainers mailing list: [EMAIL PROTECTED]

Good luck!

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgp2azUCvG5I2.pgp
Description: PGP signature

Re: Having problems burning a DVD

2007-11-25 Thread Roland Smith

On Sun, Nov 25, 2007 at 09:42:59AM +0100, Harry Matthiesen Jensen wrote:
 On Sat, Nov 24, 2007 at 12:45:33PM -0700, Predrag Punosevac wrote:

  I think you are probably missing
  
  permxpt00666
  permpass0   0666
 
 Which file are these to be set in?
 
  # Misc other devices
  
  permcdrom   0666
  permdvd 0666
  permrdvd0666
  permcd0 0666
  permacd0   0666
  permxpt00666
  permpass0   0666
 
 ..and where to set these?
 
 Are all to be set in devfs.conf?

Looking at the format, I'd say yes.

On my own system, I put the pass devices in devfs.rules, because they
can be generated at runtime;

add path 'pass*' mode 0666 group wheel

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpHaDQ1miQPW.pgp
Description: PGP signature

Re: Dreaded '__mb_sb_limit' Error And What To Do About It

2007-11-25 Thread Kris Kennaway


Tim Daneliuk wrote:

On one of my FBSD 6-STABLE machines, I have the system cvsup the latest
sources nightly and rebuild (but not install) the system and all
relevant kernels.   Every week or so, I go to single user and
install what was last built (assuming the build worked OK).

My last such venture was on 11-20-2007 without problems.

Tonight, I tried to do this again, and immediately got hit with
the libexec '_mb_sb_limit' symbol missing problem.  I fell back
to the 11-20-2007 system image, and all is once again well.

So, here's my question.  Is this a temporary problem that will be
resolved at some point before 6.3 is released, or do I have have to
rebuild the entire system applications set to get new binaries that
don't depend on this symbol?  Also, if it is going to be fixed, how
will I know it has been before trying another update like this again?


See discussion on freebsd-stable

Kris



TIA,

P.S. Rebuilding the apps on this system would be a REAL pain.  Here's
hoping the fine FBSD developers can find it within themselves to
make this symbol once again appear so old binaries will run unchanged.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Having problems burning a DVD

2007-11-25 Thread Predrag Punosevac


Harry Matthiesen Jensen wrote:

On Sat, Nov 24, 2007 at 12:45:33PM -0700, Predrag Punosevac wrote:
  
  
  

I think you are probably missing

permxpt00666
permpass0   0666



Which file are these to be set in?

  

# Misc other devices

permcdrom   0666
permdvd 0666
permrdvd0666
permcd0 0666
permacd0   0666
permxpt00666
permpass0   0666



..and where to set these?

Are all to be set in devfs.conf?

Thanks in advance

  




Yes, they should be set in /etc/devfs.conf if you want to use something 
like K3b but I was rushing to post and I think you got much better 
advices from other people.


Read very carefully

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/creating-dvds.html

and follow every step. You should try to burn your first DVD from the 
command line as a supper user!
Just to make your life easier if you have newer DVD-RW it is probably 
ATAPI.

Best
Predrag


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Difficulties establishing VPN tunnel with IPNAT

Well the main reason is that it was part of IPF, and IPF seemed to be  
better

than IPFW? So when trying out IPF I also used IPNAT.. I had no problems
with natd but it seemed I should use the IPNAT if I was using IPF?

On 25/11/2007, at 8:00 PM, Ted Mittelstaedt wrote:



The other thing you can do is simply switch back to natd.

You didn't say why you decided to switch in the first place.

A lot of times people switch because they are having problems
with natd.  Are you?  If not, you should be aware that natd
does support more kinds of protocol translations.

Ted


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Roger  
Olofsson

Sent: Saturday, November 24, 2007 2:09 PM
To: Jerahmy Pocott
Cc: FreeBSD Questions
Subject: Re: Difficulties establishing VPN tunnel with IPNAT


Hello again Jerahmy,

I would suggest that you verify what port(s) and protocol(s)  
'Sonic Wall

Global VPN Client' needs to work.

I would also suggest that you look in the logfile from ipf to see  
what

it's blocking and when.

My guess is that the VPN client is using a protocol like IPSEC (IP
protocol 50) and possibly port 500 (IKE) for which you will have to
activate the ipnat proxy.

map WAN internal_ip/24 - 0.0.0.0/32 proxy port 500 ipsec/udp

You might also try to disable the blocking of fragged packets. For  
some

VPN clients this can cause problems.

Good luck!

/Roger



Jerahmy Pocott skrev:

Sorry let me clarify..

There are two issues, one is connecting to any external VPN, with no
filter I
can establish a connection to PPTP VPN, but the 'Sonic Wall  
Global VPN

Client'
still fails to connect even with no filter rules.

The redirect for the CVS server has an ipf rule to allow

traffic on that

port, but
users are getting connection refused messages.

I will include my ipf rules, I clearly need some sort of rule to  
allow

inbound for
the VPN to work, though I think the ipnat is breaking the Sonic Wall
client. Which
is strange because everything worked fine with ipfw/natd.

Here are my ipf rules:

# Allow all in/out on internel interface
pass in  quick on fxp0 all
pass out quick on fxp0 all

# Allow all in/out on loopback interface
pass in  quick on lo0 all
pass out quick on lo0 all

# Allow all out-going on public interface and keep state
pass out quick on fxp1 proto tcp  from any to any flags S keep state
pass out quick on fxp1 proto udp  from any to any keep state
pass out quick on fxp1 proto icmp from any to any keep state

# Block all inbound traffic from non-routable or reserved address  
spaces

block in quick on fxp1 from 192.168.0.0/16 to any#RFC 1918

private IP

block in quick on fxp1 from 172.16.0.0/12 to any #RFC 1918

private IP

block in quick on fxp1 from 10.0.0.0/8 to any#RFC 1918

private IP

block in quick on fxp1 from 127.0.0.0/8 to any   #loopback
block in quick on fxp1 from 0.0.0.0/8 to any #loopback
block in quick on fxp1 from 169.254.0.0/16 to any#DHCP auto- 
config
block in quick on fxp1 from 192.0.2.0/24 to any  #reserved  
for docs

block in quick on fxp1 from 204.152.64.0/23 to any   #Sun cluster
interconnect
block in quick on fxp1 from 224.0.0.0/3 to any   #Class D 

E multicast

# Block frags
block in quick on fxp1 all with frags
# Block short tcp packets
block in quick on fxp1 proto tcp all with short
# block source routed packets
block in quick on fxp1 all with opt lsrr
block in quick on fxp1 all with opt ssrr
# Block anything with special options
block in quick on fxp1 all with ipopts
# Block public pings
block in quick on fxp1 proto icmp all icmp-type 8
# Block ident
block in quick on fxp1 proto tcp from any to any port = 113
# Block all Netbios service. 137=name, 138=datagram, 139=session
# Block MS/Windows hosts2 name server requests 81
block in quick on fxp1 proto tcp/udp from any to any port = 137
block in quick on fxp1 proto tcp/udp from any to any port = 138
block in quick on fxp1 proto tcp/udp from any to any port = 139
block in quick on fxp1 proto tcp/udp from any to any port = 81

# Allow CVS access
pass in quick on fxp1 proto tcp/udp from any to any port = 2401

# Logged Blocking Rules #

# Block nmap OS fingerprint attempts
block in log first quick on fxp1 proto tcp from any to any flags FUP

# Block all other in coming traffic
block in log first quick on fxp1 all

Thanks for the help!
J.

On 25/11/2007, at 12:50 AM, Roger Olofsson wrote:


Hello Jerahmy,

Assuming you want to connect from the outside to your VPN.

Have you made sure that port 2401 is open for inbound traffic in  
your

ipf.rules?

You might also want to do 'ipnat -C -f path to ipnat.rules'. Man
ipnat ;^)

Greeting from Sweden
/Roger



Jerahmy Pocott skrev:

Hello,
I recently decided to give ipf and ipnat a try, previously I had
always been using
ipfw and natd. Since switching over I can no longer establish a  
VPN

tunnel from
any system behind the gateway.
I did 'ipf -F a' to flush all rules but I was still unable to  
connect

Re: Difficulties establishing VPN tunnel with IPNAT

The Sonic Wall client doesn't trigger ANY firewall rules, which is  
why I thought
there must be something going wrong with the NAT. It actually  
establishes the
tunnel okay but never gets an IP address, from my understanding this  
client

uses some sort of dhcp over ipsec to provision the client address..

What I am getting using the standard PPTP method are a bunch of hits:

fxp1 @0:25 b x.x.x.x - 10.0.0.3 PR gre len 20 (93) IN NAT

(rule @0:25 is the final 'block all' rule)

What is protocol 'gre'? Why is a NAT'd packet getting blocked?!

Thanks!
J.

On 25/11/2007, at 9:09 AM, Roger Olofsson wrote:


Hello again Jerahmy,

I would suggest that you verify what port(s) and protocol(s) 'Sonic  
Wall Global VPN Client' needs to work.


I would also suggest that you look in the logfile from ipf to see  
what it's blocking and when.


My guess is that the VPN client is using a protocol like IPSEC (IP  
protocol 50) and possibly port 500 (IKE) for which you will have to  
activate the ipnat proxy.


map WAN internal_ip/24 - 0.0.0.0/32 proxy port 500 ipsec/udp

You might also try to disable the blocking of fragged packets. For  
some VPN clients this can cause problems.


Good luck!

/Roger



Jerahmy Pocott skrev:

Sorry let me clarify..
There are two issues, one is connecting to any external VPN, with  
no filter I
can establish a connection to PPTP VPN, but the 'Sonic Wall Global  
VPN Client'

still fails to connect even with no filter rules.
The redirect for the CVS server has an ipf rule to allow traffic  
on that port, but

users are getting connection refused messages.
I will include my ipf rules, I clearly need some sort of rule to  
allow inbound for
the VPN to work, though I think the ipnat is breaking the Sonic  
Wall client. Which

is strange because everything worked fine with ipfw/natd.
Here are my ipf rules:
# Allow all in/out on internel interface
pass in  quick on fxp0 all
pass out quick on fxp0 all
# Allow all in/out on loopback interface
pass in  quick on lo0 all
pass out quick on lo0 all
# Allow all out-going on public interface and keep state
pass out quick on fxp1 proto tcp  from any to any flags S keep state
pass out quick on fxp1 proto udp  from any to any keep state
pass out quick on fxp1 proto icmp from any to any keep state
# Block all inbound traffic from non-routable or reserved address  
spaces
block in quick on fxp1 from 192.168.0.0/16 to any#RFC 1918  
private IP
block in quick on fxp1 from 172.16.0.0/12 to any #RFC 1918  
private IP
block in quick on fxp1 from 10.0.0.0/8 to any#RFC 1918  
private IP

block in quick on fxp1 from 127.0.0.0/8 to any   #loopback
block in quick on fxp1 from 0.0.0.0/8 to any #loopback
block in quick on fxp1 from 169.254.0.0/16 to any#DHCP auto- 
config
block in quick on fxp1 from 192.0.2.0/24 to any  #reserved for  
docs
block in quick on fxp1 from 204.152.64.0/23 to any   #Sun cluster  
interconnect
block in quick on fxp1 from 224.0.0.0/3 to any   #Class D  E  
multicast

# Block frags
block in quick on fxp1 all with frags
# Block short tcp packets
block in quick on fxp1 proto tcp all with short
# block source routed packets
block in quick on fxp1 all with opt lsrr
block in quick on fxp1 all with opt ssrr
# Block anything with special options
block in quick on fxp1 all with ipopts
# Block public pings
block in quick on fxp1 proto icmp all icmp-type 8
# Block ident
block in quick on fxp1 proto tcp from any to any port = 113
# Block all Netbios service. 137=name, 138=datagram, 139=session
# Block MS/Windows hosts2 name server requests 81
block in quick on fxp1 proto tcp/udp from any to any port = 137
block in quick on fxp1 proto tcp/udp from any to any port = 138
block in quick on fxp1 proto tcp/udp from any to any port = 139
block in quick on fxp1 proto tcp/udp from any to any port = 81
# Allow CVS access
pass in quick on fxp1 proto tcp/udp from any to any port = 2401
# Logged Blocking Rules #
# Block nmap OS fingerprint attempts
block in log first quick on fxp1 proto tcp from any to any flags FUP
# Block all other in coming traffic
block in log first quick on fxp1 all
Thanks for the help!
J.
On 25/11/2007, at 12:50 AM, Roger Olofsson wrote:

Hello Jerahmy,

Assuming you want to connect from the outside to your VPN.

Have you made sure that port 2401 is open for inbound traffic in  
your ipf.rules?


You might also want to do 'ipnat -C -f path to ipnat.rules'.  
Man ipnat ;^)


Greeting from Sweden
/Roger



Jerahmy Pocott skrev:

Hello,
I recently decided to give ipf and ipnat a try, previously I had  
always been using
ipfw and natd. Since switching over I can no longer establish a  
VPN tunnel from

any system behind the gateway.
I did 'ipf -F a' to flush all rules but I was still unable to  
connect so I think it's a problem
with ipnat? Also my redirect from ipnat doesn't seem to work  
either.

These are the only ipnat rules I have:
(fxp1 is the external interface)
# ipnat built in ftp proxy rules
map

RE: Difficulties establishing VPN tunnel with IPNAT


That's an absolutely terrible reason.

On FreeBSD and the other open source operating systems there
are always multiple ways to solve a problem.  While in a few
situations it can definitively be stated that one program is
better (for example, sendmail is obviously superior to qmail)
in most situations the different programs are merely different.
The better one is the one that works for YOUR problem the
best.  Not the one that works for someone else's problem.

ipf is no better than ipfw for most purposes, it's just different.
In this case, you had a working solution and now you don't.  So,
clearly, in your case, it's WORSE.

Ted

 -Original Message-
 From: Jerahmy Pocott [mailto:[EMAIL PROTECTED]
 Sent: Sunday, November 25, 2007 2:12 AM
 To: Ted Mittelstaedt
 Cc: Roger Olofsson; FreeBSD Questions
 Subject: Re: Difficulties establishing VPN tunnel with IPNAT
 
 
 Well the main reason is that it was part of IPF, and IPF seemed to be  
 better
 than IPFW? So when trying out IPF I also used IPNAT.. I had no problems
 with natd but it seemed I should use the IPNAT if I was using IPF?
 
 On 25/11/2007, at 8:00 PM, Ted Mittelstaedt wrote:
 
 
  The other thing you can do is simply switch back to natd.
 
  You didn't say why you decided to switch in the first place.
 
  A lot of times people switch because they are having problems
  with natd.  Are you?  If not, you should be aware that natd
  does support more kinds of protocol translations.
 
  Ted
 
  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] Behalf Of Roger  
  Olofsson
  Sent: Saturday, November 24, 2007 2:09 PM
  To: Jerahmy Pocott
  Cc: FreeBSD Questions
  Subject: Re: Difficulties establishing VPN tunnel with IPNAT
 
 
  Hello again Jerahmy,
 
  I would suggest that you verify what port(s) and protocol(s)  
  'Sonic Wall
  Global VPN Client' needs to work.
 
  I would also suggest that you look in the logfile from ipf to see  
  what
  it's blocking and when.
 
  My guess is that the VPN client is using a protocol like IPSEC (IP
  protocol 50) and possibly port 500 (IKE) for which you will have to
  activate the ipnat proxy.
 
  map WAN internal_ip/24 - 0.0.0.0/32 proxy port 500 ipsec/udp
 
  You might also try to disable the blocking of fragged packets. For  
  some
  VPN clients this can cause problems.
 
  Good luck!
 
  /Roger
 
 
 
  Jerahmy Pocott skrev:
  Sorry let me clarify..
 
  There are two issues, one is connecting to any external VPN, with no
  filter I
  can establish a connection to PPTP VPN, but the 'Sonic Wall  
  Global VPN
  Client'
  still fails to connect even with no filter rules.
 
  The redirect for the CVS server has an ipf rule to allow
  traffic on that
  port, but
  users are getting connection refused messages.
 
  I will include my ipf rules, I clearly need some sort of rule to  
  allow
  inbound for
  the VPN to work, though I think the ipnat is breaking the Sonic Wall
  client. Which
  is strange because everything worked fine with ipfw/natd.
 
  Here are my ipf rules:
 
  # Allow all in/out on internel interface
  pass in  quick on fxp0 all
  pass out quick on fxp0 all
 
  # Allow all in/out on loopback interface
  pass in  quick on lo0 all
  pass out quick on lo0 all
 
  # Allow all out-going on public interface and keep state
  pass out quick on fxp1 proto tcp  from any to any flags S keep state
  pass out quick on fxp1 proto udp  from any to any keep state
  pass out quick on fxp1 proto icmp from any to any keep state
 
  # Block all inbound traffic from non-routable or reserved address  
  spaces
  block in quick on fxp1 from 192.168.0.0/16 to any#RFC 1918
  private IP
  block in quick on fxp1 from 172.16.0.0/12 to any #RFC 1918
  private IP
  block in quick on fxp1 from 10.0.0.0/8 to any#RFC 1918
  private IP
  block in quick on fxp1 from 127.0.0.0/8 to any   #loopback
  block in quick on fxp1 from 0.0.0.0/8 to any #loopback
  block in quick on fxp1 from 169.254.0.0/16 to any#DHCP auto- 
  config
  block in quick on fxp1 from 192.0.2.0/24 to any  #reserved  
  for docs
  block in quick on fxp1 from 204.152.64.0/23 to any   #Sun cluster
  interconnect
  block in quick on fxp1 from 224.0.0.0/3 to any   #Class D 
  E multicast
  # Block frags
  block in quick on fxp1 all with frags
  # Block short tcp packets
  block in quick on fxp1 proto tcp all with short
  # block source routed packets
  block in quick on fxp1 all with opt lsrr
  block in quick on fxp1 all with opt ssrr
  # Block anything with special options
  block in quick on fxp1 all with ipopts
  # Block public pings
  block in quick on fxp1 proto icmp all icmp-type 8
  # Block ident
  block in quick on fxp1 proto tcp from any to any port = 113
  # Block all Netbios service. 137=name, 138=datagram, 139=session
  # Block MS/Windows hosts2 name server requests 81
  block in quick on fxp1 proto tcp/udp from any to any port = 137
  block in quick on fxp1 proto tcp/udp from any

Re: Open Source softwares in FreeBSD for web hosting platform

2007-11-25 Thread Ovi


Tek Bahadur Limbu wrote:


Hi All,

I know that this question has been asked on this list in the past. So 
I am sorry for repeating it.


However, I would like to know the current answers and views on this 
question.


Basically, I want to know which software you might be using as a Site 
configuration and management application for web hosting services.


It will be used primarily to control about 500-1000 virtual domains.

I know that there are Cpanel and Plesk which are very good commercial 
softwares catering the needs for a good web based management tool.


So far, I have only tried out RAQdevil http://www.raqdevil.com/

It seems good but is quite limited in it's features.

So I would like to know more open source softwares used for this type 
of services.



Thanking you...


We are using syscp and it works well. (you will need to modify it to 
suit your needs, the source code is clean and easy to modify).
Any open source software you try, it is not 100% complete (as far as I 
know, from my experience with open source web panels), so you will have 
to modify the code. The bad thing with syscp is that dns server is not 
configurable from web interface (there is a patch, but it allows you to 
modify DNS only from admin account, which is not good, I think you will 
need regular users to be able to configure their own dns servers), so 
this is one thing you must add. I asume you need 3 types of accounts, 
admin account, reseller account and user account.

http://www.syscp.org/

best regards,
ovi

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Difficulties establishing VPN tunnel with IPNAT


Perhaps, but I'v heard a lot of good things about IPF and IPNAT,
especially since the nat is all in kernel where as natd is userland, so
there is a slight performance boost possibly there as well..

It is not difficult to switch back to my old set up, but I thought I  
would

give it a chance, since I'v not used IPF before I figured it was likely
something I'v done wrong rather than something wrong with the program!

I like the rule format in ipf and how simple it is to change ipnat rules
on the fly without dumping current mappings. And it SHOULD work
just as well as natd?


On 25/11/2007, at 10:42 PM, Ted Mittelstaedt wrote:



That's an absolutely terrible reason.

On FreeBSD and the other open source operating systems there
are always multiple ways to solve a problem.  While in a few
situations it can definitively be stated that one program is
better (for example, sendmail is obviously superior to qmail)
in most situations the different programs are merely different.
The better one is the one that works for YOUR problem the
best.  Not the one that works for someone else's problem.

ipf is no better than ipfw for most purposes, it's just different.
In this case, you had a working solution and now you don't.  So,
clearly, in your case, it's WORSE.

Ted


-Original Message-
From: Jerahmy Pocott [mailto:[EMAIL PROTECTED]
Sent: Sunday, November 25, 2007 2:12 AM
To: Ted Mittelstaedt
Cc: Roger Olofsson; FreeBSD Questions
Subject: Re: Difficulties establishing VPN tunnel with IPNAT


Well the main reason is that it was part of IPF, and IPF seemed to be
better
than IPFW? So when trying out IPF I also used IPNAT.. I had no  
problems

with natd but it seemed I should use the IPNAT if I was using IPF?

On 25/11/2007, at 8:00 PM, Ted Mittelstaedt wrote:



The other thing you can do is simply switch back to natd.

You didn't say why you decided to switch in the first place.

A lot of times people switch because they are having problems
with natd.  Are you?  If not, you should be aware that natd
does support more kinds of protocol translations.

Ted


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Roger
Olofsson
Sent: Saturday, November 24, 2007 2:09 PM
To: Jerahmy Pocott
Cc: FreeBSD Questions
Subject: Re: Difficulties establishing VPN tunnel with IPNAT


Hello again Jerahmy,

I would suggest that you verify what port(s) and protocol(s)
'Sonic Wall
Global VPN Client' needs to work.

I would also suggest that you look in the logfile from ipf to see
what
it's blocking and when.

My guess is that the VPN client is using a protocol like IPSEC (IP
protocol 50) and possibly port 500 (IKE) for which you will have to
activate the ipnat proxy.

map WAN internal_ip/24 - 0.0.0.0/32 proxy port 500 ipsec/udp

You might also try to disable the blocking of fragged packets. For
some
VPN clients this can cause problems.

Good luck!

/Roger



Jerahmy Pocott skrev:

Sorry let me clarify..

There are two issues, one is connecting to any external VPN,  
with no

filter I
can establish a connection to PPTP VPN, but the 'Sonic Wall
Global VPN
Client'
still fails to connect even with no filter rules.

The redirect for the CVS server has an ipf rule to allow

traffic on that

port, but
users are getting connection refused messages.

I will include my ipf rules, I clearly need some sort of rule to
allow
inbound for
the VPN to work, though I think the ipnat is breaking the Sonic  
Wall

client. Which
is strange because everything worked fine with ipfw/natd.

Here are my ipf rules:

# Allow all in/out on internel interface
pass in  quick on fxp0 all
pass out quick on fxp0 all

# Allow all in/out on loopback interface
pass in  quick on lo0 all
pass out quick on lo0 all

# Allow all out-going on public interface and keep state
pass out quick on fxp1 proto tcp  from any to any flags S keep  
state

pass out quick on fxp1 proto udp  from any to any keep state
pass out quick on fxp1 proto icmp from any to any keep state

# Block all inbound traffic from non-routable or reserved address
spaces
block in quick on fxp1 from 192.168.0.0/16 to any#RFC 1918

private IP

block in quick on fxp1 from 172.16.0.0/12 to any #RFC 1918

private IP

block in quick on fxp1 from 10.0.0.0/8 to any#RFC 1918

private IP

block in quick on fxp1 from 127.0.0.0/8 to any   #loopback
block in quick on fxp1 from 0.0.0.0/8 to any #loopback
block in quick on fxp1 from 169.254.0.0/16 to any#DHCP auto-
config
block in quick on fxp1 from 192.0.2.0/24 to any  #reserved
for docs
block in quick on fxp1 from 204.152.64.0/23 to any   #Sun cluster
interconnect
block in quick on fxp1 from 224.0.0.0/3 to any   #Class D 

E multicast

# Block frags
block in quick on fxp1 all with frags
# Block short tcp packets
block in quick on fxp1 proto tcp all with short
# block source routed packets
block in quick on fxp1 all with opt lsrr
block in quick on fxp1 all with opt ssrr
# Block anything with special

Re: snd_ich skipping playback

2007-11-25 Thread Frank Staals


Roland Smith wrote:

On Tue, Nov 20, 2007 at 06:50:05PM +0100, Frank Staals wrote:
  
I updated to RELENG_7 yesterday, but I'm noticing that the snd_ich driver 
quite often skips playback for a short period of time at some points. 
Especially when doing mysql queries. Anyone else having problems with 
snd_ich ?


[EMAIL PROTECTED] uname -a
FreeBSD FStaals.net 7.0-BETA3 FreeBSD 7.0-BETA3 #2: Mon Nov 19 19:50:46 CET 
2007 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/PFSERVERKERNEL  amd64


[EMAIL PROTECTED] pciconf -lv
[EMAIL PROTECTED]:0:4:0:class=0x040100 card=0x71851462 chip=0x005910de 
rev=0xa2 hdr=0x00

   vendor = 'Nvidia Corp'
   device = 'Realtek ALC850 Realtek AC'97 Audio'
   class  = multimedia
   subclass   = audio

[EMAIL PROTECTED] dmesg | grep pcm
pcm0: nVidia nForce4 port 0xea00-0xeaff,0xee00-0xeeff mem 
0xfe02d000-0xfe02dfff irq 23 at device 4.0 on pci0

pcm0: [ITHREAD]
pcm0: Avance Logic ALC850 AC97 Codec



I've had trouble with skipping sound some time ago on machines with
another chipset;
$ cat /dev/sndstat 
FreeBSD Audio Driver (newpcm: 64bit 2007061600/amd64)

Installed devices:
pcm0: VIA VT8237 at io 0xd800 irq 22  [MPSAFE] (5p:4v/1r:1v channels 
duplex default)


I put the following in /boot/device.hints

# Larger DMA buffer for the soundcard, for better sound quality.
hint.pcm.0.buffersize=16384

This fixed the problem for me.

Roland
  
Ah thanks for the hint, but I'm guessing that won't work  since 
aparently the buffersice is allready 16K :


[EMAIL PROTECTED] sysctl -a | grep pcm
dev.pcm.0.%desc: nVidia nForce4

dev.pcm.0.%driver: pcm
dev.pcm.0.%location: slot=4 function=0 handle=\_SB_.PCI0.MACI
dev.pcm.0.%pnpinfo: vendor=0x10de device=0x0059 subvendor=0x1462 
subdevice=0x7185 class=0x040100

dev.pcm.0.%parent: pci0
dev.pcm.0.eapd: 1
dev.pcm.0.play.vchans: 1
dev.pcm.0.play.vchanrate: 48000
dev.pcm.0.play.vchanformat: s16le
dev.pcm.0.rec.vchans: 1
dev.pcm.0.rec.vchanrate: 48000
dev.pcm.0.rec.vchanformat: s16le
dev.pcm.0.buffersize: 16384
dev.pcm.0.ac97rate: 48000

Anyone else a hint ?

--
-Frank Staals


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: scoll lock - can't unlock in text login after xorg session

2007-11-25 Thread Tino Engel


Howard Goldstein schrieb:

Just noticed this, after scroll locking for page up/page down in a text
login: I cannot unlock anymore.  Does anyone else see this?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

  

I experienced a similar problem when not having set a login password.
Setting it helped.

Greez, Tino
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Difficulties establishing VPN tunnel with IPNAT

2007-11-25 Thread Roger Olofsson


Jerahmy Pocott skrev:
The Sonic Wall client doesn't trigger ANY firewall rules, which is why I 
thought
there must be something going wrong with the NAT. It actually 
establishes the

tunnel okay but never gets an IP address, from my understanding this client
uses some sort of dhcp over ipsec to provision the client address..

What I am getting using the standard PPTP method are a bunch of hits:

fxp1 @0:25 b x.x.x.x - 10.0.0.3 PR gre len 20 (93) IN NAT

(rule @0:25 is the final 'block all' rule)

What is protocol 'gre'? Why is a NAT'd packet getting blocked?!

Thanks!
J.

On 25/11/2007, at 9:09 AM, Roger Olofsson wrote:


Hello again Jerahmy,

I would suggest that you verify what port(s) and protocol(s) 'Sonic 
Wall Global VPN Client' needs to work.


I would also suggest that you look in the logfile from ipf to see what 
it's blocking and when.


My guess is that the VPN client is using a protocol like IPSEC (IP 
protocol 50) and possibly port 500 (IKE) for which you will have to 
activate the ipnat proxy.


map WAN internal_ip/24 - 0.0.0.0/32 proxy port 500 ipsec/udp

You might also try to disable the blocking of fragged packets. For 
some VPN clients this can cause problems.


Good luck!

/Roger



Jerahmy Pocott skrev:

Sorry let me clarify..
There are two issues, one is connecting to any external VPN, with no 
filter I
can establish a connection to PPTP VPN, but the 'Sonic Wall Global 
VPN Client'

still fails to connect even with no filter rules.
The redirect for the CVS server has an ipf rule to allow traffic on 
that port, but

users are getting connection refused messages.
I will include my ipf rules, I clearly need some sort of rule to 
allow inbound for
the VPN to work, though I think the ipnat is breaking the Sonic Wall 
client. Which

is strange because everything worked fine with ipfw/natd.
Here are my ipf rules:
# Allow all in/out on internel interface
pass in  quick on fxp0 all
pass out quick on fxp0 all
# Allow all in/out on loopback interface
pass in  quick on lo0 all
pass out quick on lo0 all
# Allow all out-going on public interface and keep state
pass out quick on fxp1 proto tcp  from any to any flags S keep state
pass out quick on fxp1 proto udp  from any to any keep state
pass out quick on fxp1 proto icmp from any to any keep state
# Block all inbound traffic from non-routable or reserved address spaces
block in quick on fxp1 from 192.168.0.0/16 to any#RFC 1918 
private IP
block in quick on fxp1 from 172.16.0.0/12 to any #RFC 1918 
private IP
block in quick on fxp1 from 10.0.0.0/8 to any#RFC 1918 
private IP

block in quick on fxp1 from 127.0.0.0/8 to any   #loopback
block in quick on fxp1 from 0.0.0.0/8 to any #loopback
block in quick on fxp1 from 169.254.0.0/16 to any#DHCP auto-config
block in quick on fxp1 from 192.0.2.0/24 to any  #reserved for docs
block in quick on fxp1 from 204.152.64.0/23 to any   #Sun cluster 
interconnect
block in quick on fxp1 from 224.0.0.0/3 to any   #Class D  E 
multicast

# Block frags
block in quick on fxp1 all with frags
# Block short tcp packets
block in quick on fxp1 proto tcp all with short
# block source routed packets
block in quick on fxp1 all with opt lsrr
block in quick on fxp1 all with opt ssrr
# Block anything with special options
block in quick on fxp1 all with ipopts
# Block public pings
block in quick on fxp1 proto icmp all icmp-type 8
# Block ident
block in quick on fxp1 proto tcp from any to any port = 113
# Block all Netbios service. 137=name, 138=datagram, 139=session
# Block MS/Windows hosts2 name server requests 81
block in quick on fxp1 proto tcp/udp from any to any port = 137
block in quick on fxp1 proto tcp/udp from any to any port = 138
block in quick on fxp1 proto tcp/udp from any to any port = 139
block in quick on fxp1 proto tcp/udp from any to any port = 81
# Allow CVS access
pass in quick on fxp1 proto tcp/udp from any to any port = 2401
# Logged Blocking Rules #
# Block nmap OS fingerprint attempts
block in log first quick on fxp1 proto tcp from any to any flags FUP
# Block all other in coming traffic
block in log first quick on fxp1 all
Thanks for the help!
J.
On 25/11/2007, at 12:50 AM, Roger Olofsson wrote:

Hello Jerahmy,

Assuming you want to connect from the outside to your VPN.

Have you made sure that port 2401 is open for inbound traffic in 
your ipf.rules?


You might also want to do 'ipnat -C -f path to ipnat.rules'. Man 
ipnat ;^)


Greeting from Sweden
/Roger



Jerahmy Pocott skrev:

Hello,
I recently decided to give ipf and ipnat a try, previously I had 
always been using
ipfw and natd. Since switching over I can no longer establish a VPN 
tunnel from

any system behind the gateway.
I did 'ipf -F a' to flush all rules but I was still unable to 
connect so I think it's a problem

with ipnat? Also my redirect from ipnat doesn't seem to work either.
These are the only ipnat rules I have:
(fxp1 is the external interface)
# ipnat built in ftp proxy rules
map fxp1

Re: Partition to be shared over OSes

2007-11-25 Thread Jerry McAllister

On Sun, Nov 25, 2007 at 12:11:25AM -0200, Caio Figueiredo Abecia wrote:

 Hi
 I have some operation systems installed on a hd in some partitions.
 I'd like to know if could I have a partition FAT32 in my hd and let my 
 linux/bsd/windows read/write any file there.

Yes.   Anyway, FreeBSD and MS-Win can read/write Fat32.  I presume Lunix can
too.  In FreeBSD, you just need to mount as an MSDOS type file system.

By the way, in FreeBSD, the term is slice for what MS calls 
a Primary Partion.

jerry

 
 To that purpose (share a partition to windows/linux/bsd) what's the best 
 solution?
 
 My partition to be NTFS and install on each SO (-win) ntfs-3g ?
 
 Thank you in advance
 
 Caio F. 
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Difficulties establishing VPN tunnel with IPNAT



On 26/11/2007, at 1:00 AM, Roger Olofsson wrote:


Hello Jerahmy, (sorry for top-posting, btw).

Gre is protocol 47. In your firewall rules you only allow/block  
protocols tcp/udp/icmp. If you want to use PPTP you will need to  
allow both the port and the protocol for it.


I put:

pass out quick on fxp1 proto gre from any to any keep state

This allowed the PPTP connection to establish, how ever trying to use  
apps

over that connection resulted in:

fxp1 (block all rule) b x.x.x.x - 10.0.0.3 PR gre len 20 (53) (frag  
57516:[EMAIL PROTECTED]) IN bad NAT


By placing to rule:

pass in quick on fxp1 proto gre from any to any

and allowing frags everything started working properly, but allowing  
all gre traffic in doesn't seem
like a good idea.. Is there any way to make this work without putting  
static ip address rules or allowing

all traffic?


In your original question you mentioned having problems with CVS.  
From the looks of it, you redirect CVS to 10.0.0.2, meaning that  
all users on that machine can use CVS.


The redirect rule is supposed to redirect connections to CVS on the  
external interface to

10.0.0.2 on the internal lan, where the CVS server is actually running.

Cheers,
J.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

RE: Squid with a Net nanny type setup....

2007-11-25 Thread Tony

Thanks for the advice, I've noticed dansguardian and looked into it a
little bit, I've also blocked some words which works but doesn't work
because it kills some legitimate pages.

I've also tossed around the idea with my Fiancé about locking them down
to certain websites, but that is problematic with doing some school work
(kids are 9 and 11) I think what bothers me most is them stumbling
across something.

Say they are curious what the word milf means and they search for it...
that would be an eye opener!

So right now I have a list of words that are blocked from URLS and a
large number of sites blacklisted gathered from other peoples lists
scavenged from google.

Thanks for the replies,

Tony


PS squid is a very cool thing, and I can use MRTG to gather data and
display it, but it does seem to have some performance hit with surfing,
I moved it from my dually Pentium Pro 200 to my Dual p3 1Ghz and that
made a difference, now I just need some speedy Sata disks and a good
Sata controller.

-Original Message-
From: Ted Mittelstaedt [mailto:[EMAIL PROTECTED] 
Sent: Sunday, November 25, 2007 12:40 AM
To: Murray Taylor; Tony; freebsd-questions@freebsd.org
Subject: RE: Squid with a Net nanny type setup


Or much better yet, do it the way I do it.  Load Squid, setup the kids
system to use it, then setup squid to only allow the kids to go to a
list of sites.  As my kids learn about interesting sites they want to
go to, -I- visit those sites, and if I decide they are OK, I put them
in the approved list.

Stuff like dansguardian is, in my opinion, for lazy parents who want
to hand off their parental responsibilities to other people.

The other thing is that by the time the kid is 14-15 they should be
mature enough to make their own choices and deal with what they find.
At that time, if your still having to run filtering software, you better
turn off Internet access completely and schedule your kid in with some
sessions with a psychologist, as seriously, he's got a problem.

Ted

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Murray Taylor
 Sent: Thursday, November 22, 2007 4:59 PM
 To: Tony; freebsd-questions@freebsd.org
 Subject: RE: Squid with a Net nanny type setup


 look at dansguardian  its in the ports and is excellent for
 kid-management

 mjt

  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] On Behalf Of Tony
  Sent: Friday, 23 November 2007 4:34 AM
  To: freebsd-questions@freebsd.org
  Subject: Squid with a Net nanny type setup
 
  Is there a big list if inappropriate websites somewhere that
  I can build
  into squid to keep my kids out of Adult websites?
 
  If not squid is there a better Proxy to use on my FreeBSD firewall
for
  that purpose?
 
 
  Thanks,
 
  Tony
 
  ___
  freebsd-questions@freebsd.org mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to
  [EMAIL PROTECTED]
 
 ---
 The information transmitted in this e-mail is for the exclusive
 use of the intended addressee and may contain confidential
 and/or privileged material. Any review, re-transmission,
 dissemination or other use of it, or the taking of any action
 in reliance upon this information by persons and/or entities
 other than the intended recipient is prohibited. If you
 received this in error, please inform the sender and/or
 addressee immediately and delete the material.

 E-mails may not be secure, may contain computer viruses and
 may be corrupted in transmission. Please carefully check this
 e-mail (and any attachment) accordingly. No warranties are
 given and no liability is accepted for any loss or damage
 caused by such matters.
 ---

 ### This e-mail message has been scanned for Viruses by Bytecraft ###
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Compliments to the team

2007-11-25 Thread Peter Boosten

Hi all,

Just upgraded my 7 years old Toshiba Satellite Pro laptop from 6.2 to
7beta3 and it went like charm.

Great job and keep up the good work!

Peter

-- 
http://www.boosten.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

stability of FreeBSD 7 Beta 3?

2007-11-25 Thread Dave


Hello,
   How stable is FreeBSD 7 Beta 3? Is it near production are their any 
outstanding issues?

Thanks.
Dave.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Difficulties establishing VPN tunnel with IPNAT

2007-11-25 Thread Roger Olofsson




Jerahmy Pocott skrev:


On 26/11/2007, at 1:00 AM, Roger Olofsson wrote:


Hello Jerahmy, (sorry for top-posting, btw).

Gre is protocol 47. In your firewall rules you only allow/block 
protocols tcp/udp/icmp. If you want to use PPTP you will need to allow 
both the port and the protocol for it.


I put:

pass out quick on fxp1 proto gre from any to any keep state

This allowed the PPTP connection to establish, how ever trying to use apps
over that connection resulted in:

fxp1 (block all rule) b x.x.x.x - 10.0.0.3 PR gre len 20 (53) (frag 
57516:[EMAIL PROTECTED]) IN bad NAT


By placing to rule:

pass in quick on fxp1 proto gre from any to any

and allowing frags everything started working properly, but allowing all 
gre traffic in doesn't seem
like a good idea.. Is there any way to make this work without putting 
static ip address rules or allowing

all traffic?


In your original question you mentioned having problems with CVS. From 
the looks of it, you redirect CVS to 10.0.0.2, meaning that all users 
on that machine can use CVS.


The redirect rule is supposed to redirect connections to CVS on the 
external interface to

10.0.0.2 on the internal lan, where the CVS server is actually running.

Cheers,
J.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]




Hello Jerahmy,

Some progress it seems? Why not set it to allow gre from VPN server 
only? Ie pass in quick on fxp1 proto gre from vpn server ip to any?


The way you ask your question, 'make it work without static ip or 
allowing all traffic', isn't that contradictory?


As for the frag part, I'd say that if gre needs frag, then you will have 
to enable it.


About the CVS, I seem to have misunderstood your question. I assumed 
10.0.0.2 wanted to recieve CVS inbound and not serve it outbound, or am 
I mistaking again?


/Roger

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: scoll lock - can't unlock in text login after xorg session

2007-11-25 Thread Howard Goldstein

Tino Engel wrote:
 Howard Goldstein schrieb:
 Just noticed this, after scroll locking for page up/page down in a text
 login: I cannot unlock anymore.  Does anyone else see this?
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]

   
 I experienced a similar problem when not having set a login password.
 Setting it helped.
 

It happens in single user mode too.  It's new behavior in 7.0 Beta 3 as
compared to 6.2.  Might be useful to know if you can reproduce it, just
go to a local tty perhaps after a restart and see if your scroll lock
toggles.  Mine stays on and nothing but console messages makes it
through (if on the primary tty) but fortunately it honors commands typed
in the blind


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Difficulties establishing VPN tunnel with IPNAT



On 26/11/2007, at 4:47 AM, Roger Olofsson wrote:

Hello Jerahmy,

Some progress it seems? Why not set it to allow gre from VPN server  
only? Ie pass in quick on fxp1 proto gre from vpn server ip to any?


The way you ask your question, 'make it work without static ip or  
allowing all traffic', isn't that contradictory?


As for the frag part, I'd say that if gre needs frag, then you will  
have to enable it.


About the CVS, I seem to have misunderstood your question. I  
assumed 10.0.0.2 wanted to recieve CVS inbound and not serve it  
outbound, or am I mistaking again?


/Roger


Yes, that is what I meant by 'static ip' I could allow all gre from  
the specific ip address
but I would prefer that gre traffic be allowed from a host only when  
an existing connection

has been opened to it..

10.0.0.2 is a CVS server.

It seems to me that natd works better with ipsec
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Partition to be shared over OSes

2007-11-25 Thread Caio Figueiredo Abecia


Hey,

Thanks guys for the quickly replys !

I was thinking that creating a FAT partition would be less painfull than 
creating a NTFS partition and trying to get NTFS-3G working on Linux/BSD.


But I found some size limitation on FAT32 partition, then I tryed to use 
NTFS-3G and it worked nice.


I'm using now :

#: ntfs-3g /dev/ads0 mnt/win

And it works like a charm with read/write permission.

It's for personal use and not on a production server so it won't be too 
risky.


Thanks again for the support guys !

[]'s



- Original Message - 
From: Jerry McAllister [EMAIL PROTECTED]

To: Caio Figueiredo Abecia [EMAIL PROTECTED]
Cc: freebsd-questions@freebsd.org
Sent: Sunday, November 25, 2007 12:00 PM
Subject: Re: Partition to be shared over OSes



On Sun, Nov 25, 2007 at 12:11:25AM -0200, Caio Figueiredo Abecia wrote:


Hi
I have some operation systems installed on a hd in some partitions.
I'd like to know if could I have a partition FAT32 in my hd and let my
linux/bsd/windows read/write any file there.


Yes.   Anyway, FreeBSD and MS-Win can read/write Fat32.  I presume Lunix 
can

too.  In FreeBSD, you just need to mount as an MSDOS type file system.

By the way, in FreeBSD, the term is slice for what MS calls
a Primary Partion.

jerry



To that purpose (share a partition to windows/linux/bsd) what's the best
solution?

My partition to be NTFS and install on each SO (-win) ntfs-3g ?

Thank you in advance

Caio F.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED] 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: stability of FreeBSD 7 Beta 3?

2007-11-25 Thread Ivan Voras

Dave wrote:
 Hello,
How stable is FreeBSD 7 Beta 3? Is it near production are their any
 outstanding issues?

Probably no major bugs will be fixed between now and 7.0 so you might as
well start using it now.

It's stable enough like all .0 releases, meaning you should throughly
test it for your own workload before using it in production.



signature.asc
Description: OpenPGP digital signature

named problems

2007-11-25 Thread jekillen


Hello;
I am having some named problems:
The daemon will not start and run on system startup.
There is plenty of info on problems when named
is running, but not when it will not start.
I did get it to start after boot with
#named (su to root without - option)
It started and ran as demonstrated
with ps -aux. But the listing was
just user (me as mortal user) and
named as process (not as a path
to an executable, as is normal
for other processes).
The console messages at start up
gives me configuration file not found
errors. The files are there.
/etc/namedb/named.conf, rndc.key
/etc/namedb is a link to /var/named/etc/namedb where the config
files are. It is set up to be a slave server
for four domains.
How can I go about debugging this
situation?
My suspicions are ownership and permissions
are wrong, but how, and how to fix; ??
Thanks in advance
Jeff k

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Difficulties establishing VPN tunnel with IPNAT

2007-11-25 Thread Roger Olofsson




Jerahmy Pocott skrev:


On 26/11/2007, at 4:47 AM, Roger Olofsson wrote:

Hello Jerahmy,

Some progress it seems? Why not set it to allow gre from VPN server 
only? Ie pass in quick on fxp1 proto gre from vpn server ip to any?


The way you ask your question, 'make it work without static ip or 
allowing all traffic', isn't that contradictory?


As for the frag part, I'd say that if gre needs frag, then you will 
have to enable it.


About the CVS, I seem to have misunderstood your question. I assumed 
10.0.0.2 wanted to recieve CVS inbound and not serve it outbound, or 
am I mistaking again?


/Roger


Yes, that is what I meant by 'static ip' I could allow all gre from the 
specific ip address
but I would prefer that gre traffic be allowed from a host only when an 
existing connection

has been opened to it..

10.0.0.2 is a CVS server.

It seems to me that natd works better with ipsec
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]





Hello again Jerahmy,

It would seem that there is a PPTP proxy in ipf that you might want to 
try as well. The syntax would be:


map fxp1 10.0.0.0/0 - 0/32 proxy port 1723 pptp/tcp

Good luck!

/Roger

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: short Q

2007-11-25 Thread Paul Schmehl

--On November 23, 2007 9:04:01 PM -0800 jekillen [EMAIL PROTECTED] 
wrote:



Hello:
Is this the way to start mysqld in rc.conf?
mysqld_enable=YES

Most ports that have daemons will have startup scripts in 
/usr/local/etc/rc.d/.  Most of those scripts will include comments about 
what switches are required in /etc/rc.conf to start the daemon.  Look 
there first for instructions.


If you look at the mysqld startup script in /usr/local/etc/rc.d, you will 
notice that it says use msyqld_enable=YES in /etc/rc.conf.


Paul Schmehl ([EMAIL PROTECTED])
Senior Information Security Analyst
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: short Q

2007-11-25 Thread Shantanoo Mahajan



On 26-Nov-07, at 1:23 AM, Paul Schmehl wrote:

--On November 23, 2007 9:04:01 PM -0800 jekillen  
[EMAIL PROTECTED] wrote:



Hello:
Is this the way to start mysqld in rc.conf?
mysqld_enable=YES

Most ports that have daemons will have startup scripts in /usr/ 
local/etc/rc.d/.  Most of those scripts will include comments about  
what switches are required in /etc/rc.conf to start the daemon.   
Look there first for instructions.


If you look at the mysqld startup script in /usr/local/etc/rc.d,  
you will notice that it says use msyqld_enable=YES in /etc/rc.conf.


I do not have freebsd machine around to verify, but iirc, its  
'mysql_enable'

and not 'mysqld_enable'.

regards,
shantanoo
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: dealing with a failing drive

2007-11-25 Thread Bob Richards

On Sun, 25 Nov 2007 08:45:46 +
Matthew Seaman [EMAIL PROTECTED] wrote:

... it's a rebadged Adaptec RAID controller using
 the aac

Wonderful; I can now look into and play with the RAID system without
taking the OS off-line and going to the bios.

Thanks!
Bob

-- 
  _
 /o\
// \\ The ASCII
\\ // Ribbon Campaign
 \V/  Against HTML
 /A\  eMail!
// \\
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

who wrote this


All I have to say is WTF is wrong with whomever wrote this page.
http://www.freebsd.org/internal/fortunes.html
==

Examples of entries that should not usually be declared 'offensive':
* Hitler quotes.

==
Ok I understand that some moron wrote it, but why has nobody removed this 
garbage?


Best Regards,

Artur
eBoundHost.com
http://www.eboundhost.com 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: short Q

2007-11-25 Thread Gelsema, P (Patrick)

On Sun, November 25, 2007 21:18, Shantanoo Mahajan wrote:

 On 26-Nov-07, at 1:23 AM, Paul Schmehl wrote:

 --On November 23, 2007 9:04:01 PM -0800 jekillen
 [EMAIL PROTECTED] wrote:

 Hello:
 Is this the way to start mysqld in rc.conf?
 mysqld_enable=YES

head /usr/local/etc/rc.d/mysql-server
#
# Add the following line to /etc/rc.conf to enable mysql:
# mysql_enable (bool):  Set to NO by default.
#   Set it to YES to enable MySQL.
# mysql_limits (bool):  Set to NO by default.
#   Set it to yes to run `limits -e -U mysql`
#   just before mysql starts.
# mysql_dbdir (str):Default to /var/db/mysql
#   Base database directory.
# mysql_args (str): Custom additional arguments to be passed
#   to mysqld_safe (default empty).


Cheers

Patrick


 Most ports that have daemons will have startup scripts in /usr/
 local/etc/rc.d/.  Most of those scripts will include comments about
 what switches are required in /etc/rc.conf to start the daemon.
 Look there first for instructions.

 If you look at the mysqld startup script in /usr/local/etc/rc.d,
 you will notice that it says use msyqld_enable=YES in /etc/rc.conf.

 I do not have freebsd machine around to verify, but iirc, its
 'mysql_enable'
 and not 'mysqld_enable'.

 regards,
 shantanoo
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

RE: who wrote this

2007-11-25 Thread Tony

I see that as an example of something that might be offensive on the
surface but we might not want to outlaw just as a matter of course.


For instance if someone submitted this for the fortune rotation:

Germany will either be a world power or will not be at all. 
Adolf Hitler

Or

He alone, who owns the youth, gains the future. 
Adolf Hitler

Or

How fortunate for leaders that men do not think. 
Adolf Hitler

I might consider the man to be a maniac but he did utter some truths,
Should we automatically disqualify them?

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of eBoundHost:
Artur
Sent: Sunday, November 25, 2007 4:24 PM
To: freebsd-questions@freebsd.org
Subject: who wrote this 

All I have to say is WTF is wrong with whomever wrote this page.
http://www.freebsd.org/internal/fortunes.html
==
 Examples of entries that should not usually be declared 'offensive':
 * Hitler quotes.
==
Ok I understand that some moron wrote it, but why has nobody removed
this 
garbage?

Best Regards,

Artur
eBoundHost.com
http://www.eboundhost.com 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: named problems

2007-11-25 Thread bsd


Bind works perfectly out of the box on most FBSD recent versions.

You should not move things out of the path they have been setup to.
Specially on FBSD /etc is reserved for system files.

By default bind is installed in /var/named and should be kept there.

If I was you I would :
1. install the latest bind version from the port //
2. make sure you don't touch things unless absolutely necessary.
3. copy paste of modify the /var/named/etc/namedb/named.conf so that  
It corresponds to your needs.

4. make sure the /etc/rc.conf has the correct named values.
5. start it with the /usr/local/etc/rc.d/ script for named //

Been runing this one with 1000 zones as both masters and slave never  
had any problem.


If you have more issue could give you a help on debuging bind.

My advice : STICK TO THE FBSD RULES AND PATH unless you perfectly know  
what you are doing.




Le 25 nov. 07 à 20:19, jekillen a écrit :


Hello;
I am having some named problems:
The daemon will not start and run on system startup.
There is plenty of info on problems when named
is running, but not when it will not start.
I did get it to start after boot with
#named (su to root without - option)
It started and ran as demonstrated
with ps -aux. But the listing was
just user (me as mortal user) and
named as process (not as a path
to an executable, as is normal
for other processes).
The console messages at start up
gives me configuration file not found
errors. The files are there.
/etc/namedb/named.conf, rndc.key
/etc/namedb is a link to /var/named/etc/namedb where the config
files are. It is set up to be a slave server
for four domains.
How can I go about debugging this
situation?
My suspicions are ownership and permissions
are wrong, but how, and how to fix; ??
Thanks in advance
Jeff k



Gregober --- PGP ID -- 0x1BA3C2FD
bsd @at@ todoo.biz


P Please consider your environmental responsibility before printing  
this e-mail



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: who wrote this

2007-11-25 Thread Aryeh M. Friedman

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

 I might consider the man to be a maniac but he did utter some truths,
 Should we automatically disqualify them?

Even the devil is right sometimes does that mean we should follow him?

Let's see:

1 authbaun = 6 million jews
1 trip to the moon = 50 million russians
1 vw bug = 20 million brits and americans
1 war = priceless
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.4 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHSfUlJ9+1V27SttsRAkMJAJ9XsKT7BcgiLjXgdjg24So6P0S5qACgoHWG
zq116oPgBb72nbumjnCpJiY=
=dGDp
-END PGP SIGNATURE-

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Boot failure - Recent Kernel(s)

2007-11-25 Thread Mark Jacobs

I am running FreeBSD 6.3-PRERELEASE with my last successful kernel build
of 11/1/07. I successfully have built two kernels, one a couple of weeks
ago and one just today but when I attempt to boot them the kernel isn't
able to identify my boot partition. I query the devices that the kernel
sees are an ad14 device(Which doesn't exist) and acd0.

My boot device is ad10s1 which the November 1st kernel finds without a
problem.

Filesystem  1K-blocks  Used Avail Capacity 
Mounted on
/dev/ad10s1a   507630 9389837312220%/

I am running a generic SMP kernel.

Any ideas on what the problem is?

Mark Jacobs
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: dealing with a failing drive

2007-11-25 Thread David Newman

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 11/24/07 12:39 PM, Ted Mittelstaedt wrote:
 The output of idacontrol show will show if one of the
 hard disks in the SmartArray has failed.  Your choice with
 a hardware array is to either run it with redundancy or not.
 (ie: raid5 or mirroring or striping)  You have to choose 
 which is more important for you.
 
 IMHO it is very foolish to stripe an array that you have
 critical data on and assume that you can predict a failure
 of a disk using smart or other monitoring, and replace it
 in advance of a failure.  If your concern is redundancy, then
 add more disks to the array and create a raid 5 or a mirror.
 Then ignore all the predictive junk and let the array card
 concern itself with detecting if a drive has failed.  Run
 idacontrol periodically out of a script that checks for a
 failure of a disk and e-mails you if there is one.

Thanks, this is good advice, but it doesn't answer the specific
questions I had:

1. How to diagnose the health of a *physical* disk that's part of a RAID
array (RAID1, in this case) in an old Compaq Proliant server?

2. Is it normal for idacontrol to generate soft write errors?

Backstory here is that Proliant server #1 generated beaucoup hard and
soft read and write errors and eventually locked up. I thought it was
one of the disks but replacing one at a time didn't help. So I took both
disks and put them in identical Proliant server #2. Ergo, I would
conclude server #1's RAID controller flaked out.

idacontrol is useful for telling the health of the logical disk. What it
doesn't tell me (or maybe I just don't see it) is whether the physical
disks are ok, and those soft write errors concern me. I had a failure
situation, and need to figure out whether just the controller was bad or
whether I need to replace at least one disk too.

Thanks again!

dn

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.3 (Darwin)

iD8DBQFHSf39yPxGVjntI4IRAp1yAJ4vMV9FkeaBsHRr/Z5WpCL27wJ3tACfS+pT
3UVlscnQUZhe8ulHksKDWsY=
=Om7/
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: who wrote this

2007-11-25 Thread Giorgos Keramidas

On 2007-11-25 15:23, eBoundHost: Artur [EMAIL PROTECTED] wrote:
 All I have to say is WTF is wrong with whomever wrote this page.
 http://www.freebsd.org/internal/fortunes.html
 ==
 Examples of entries that should not usually be declared 'offensive':
 * Hitler quotes.
 ==
 Ok I understand that some moron wrote it, but why has nobody removed
 this garbage?

There have been long and vicious discussions about this particular
issue, on several mailing lists.  Please refer to the archives, because
repeating the whole shebang is not really a productive use of everyone's
time.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: who wrote this


T,

I don't know any soft way to say this.  The man, Hitler, was the most evil 
person that our generation has ever witnessed.  The things he did and what 
was done on his behalf are unspeakable and give him a special place in 
whatever hell you believe in.   As a society, we should distance ourselves 
and shun any imagery that puts any kind of human side to this monster. 
Saying that he loved dogs and was an art afficionado is completely 
irrelevant if you know anything about his actions.


There are far more worthy quotes that can be put into FreeBSD and I don't 
think its debateable.


What really gets me is the fact that this is one of the examples put on the 
FreeBSD page.  I'm all for freedom and libertarian ideals, but for petes' 
sake, have some compassion and understand where your liberty crosses over 
into the pain of someone else's family.  Why didn't they put on that page 
along with quotes about hitler, jokes about cancer and funny rape 
stories.


I don't want to outlaw anything, but have some good taste.  Learn to 
moderate yourselves, this is what freedom is all based on, being good to 
others.


I would appreciate if someone would help me find the person who can help to 
modify the text on this page.

http://www.freebsd.org/internal/fortunes.html
I think it can be worded differently and get the point accross without 
giving any extra attention to this monster.


Best Regards,

Artur
eBoundHost.com
http://www.eboundhost.com
- Original Message - 
Sent: Sunday, November 25, 2007 4:11 PM

Subject: RE: who wrote this



I see that as an example of something that might be offensive on the
surface but we might not want to outlaw just as a matter of course.


For instance if someone submitted this for the fortune rotation:
x
Or
x
Or
x

I might consider the man to be a maniac but he did utter some truths,
Should we automatically disqualify them?



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: who wrote this

yea that's a great answer.  thanks for your insight.  this is not some 
technical question that can be researched, this in fact tarnishes the image 
of the freebsd community, so it's not such an easy go rtfm type of deal.


problem is that i just came accross it myself and obviously nothing has been 
done about it in the past.  so i would like to ask of people, is there no 
better way to get the point accross?  do you have to have this wording?  is 
it set in stone and can't be changed?  I insist strongly that we should 
rework this example, and if anyone insists strongly on not doing it, I would 
like to understand what motive can be possibly behind this other than 
something very deeply evil.


Best Regards,

Artur
eBoundHost.com
http://www.eboundhost.com
- Original Message - 
From: Giorgos Keramidas [EMAIL PROTECTED]

To: eBoundHost: Artur [EMAIL PROTECTED]
Cc: freebsd-questions@freebsd.org
Sent: Sunday, November 25, 2007 5:46 PM
Subject: Re: who wrote this



On 2007-11-25 15:23, eBoundHost: Artur [EMAIL PROTECTED] wrote:

All I have to say is WTF is wrong with whomever wrote this page.
http://www.freebsd.org/internal/fortunes.html
==

Examples of entries that should not usually be declared 'offensive':
* Hitler quotes.

==
Ok I understand that some moron wrote it, but why has nobody removed
this garbage?


There have been long and vicious discussions about this particular
issue, on several mailing lists.  Please refer to the archives, because
repeating the whole shebang is not really a productive use of everyone's
time.




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

K3b

2007-11-25 Thread ajtiM

Hi!

I am new with FreeBSD. I installed one day ago 7.0 beta3 and I try to learn 
and setup the system.
When I start K3b (KDE) I got a message:

No CD/DVD writer found.
K3b did not find an optical writing device in your system. Thus, you will not 
be able to burn CDs or DVDs. However, you can still use other K3b features 
like audio track extraction or audio transcoding or ISO9660 image creation.

I tired as user and as root but resul is the same.

BTW: under Linux I didn't have a problem

Thanks in advance.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: dealing with a failing drive

2007-11-25 Thread Bob Richards

On Sun, 25 Nov 2007 08:45:46 +
Matthew Seaman [EMAIL PROTECTED] wrote:

 sysutils/aaccli  aaccli-1.0  Adaptec SCSI RAID administration


As I said in my previous post, this is EXACTLY what was wanted.

Installation of aaccli  was a snap. My only problem was the total lack
of documentation; no man page, no info file Capturing the help
screens within the CLI was useful, but pretty incomplete.

I found an Adaptec doc, describing their cli-sata-scsi-iug program;
http://download.adaptec.com/pdfs/installation_guides/cli-sata-scsi-iug.pdf 

This seems to be exactly what aaccli is. 

Since I usually do this sort of work outside of X, at the console, I
converted the adaptec  pdf file into a text file using pdftotext. The
ridiculous copyright restrictions on this file prevents me from
producing a man page, or an info file for redistribution as part of the
port!

So; If anyone wants either the pdf file, or the converted text file, I
would be glad to email same. Just send an email to
[EMAIL PROTECTED] and ask for
either my  /usr/local/share/cli/cli-sata-scsi-iug.pdf or for my 
/usr/local/share/cli/cli-sata-scsi-iug.txt.

Bob

-- 
  _
 /o\
// \\ The ASCII
\\ // Ribbon Campaign
 \V/  Against HTML
 /A\  eMail!
// \\
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: who wrote this

2007-11-25 Thread Paul Schmehl

--On November 25, 2007 5:59:53 PM -0600 eBoundHost: Artur 
[EMAIL PROTECTED] wrote:



yea that's a great answer.  thanks for your insight.  this is not some
technical question that can be researched, this in fact tarnishes the
image of the freebsd community, so it's not such an easy go rtfm type
of deal.

problem is that i just came accross it myself and obviously nothing has
been done about it in the past.  so i would like to ask of people, is
there no better way to get the point accross?  do you have to have this
wording?  is it set in stone and can't be changed?  I insist strongly
that we should rework this example, and if anyone insists strongly on
not doing it, I would like to understand what motive can be possibly
behind this other than something very deeply evil.

I'll take up the challenge.  Hitler was evil.  Quoting Hitler is not. 
When we seek to suppress information, no matter how troubling, we obscure 
the very lessons of history we need most to learn.  If, because Hitler was 
evil, we do not allow discussion of him, how will future generations learn 
of his evil?  As we argue this very point, there are people in the world 
insisting that the holocaust never happened, that Hitler did not commit 
the evil deeds that history has recorded he *did* commit.  If we refuse to 
speak of him, those who insist he wasn't evil will win the argument by 
default.


Surely that is not what you desire?

Paul Schmehl ([EMAIL PROTECTED])
Senior Information Security Analyst
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Confusion about Ports and options framework

2007-11-25 Thread Zachary Kline

Hi,
I've read through the sections of the handbook quite carefully, and 
haven't quite found what I'm looking for.
To be specific, I've no plans to install X11 or anything like it on this 
machine yet.  I may do so in the future merely to see how accessible Gnome 
and such are, but not now.
I note that /usr/ports/editors/emacs has several environment variables 
which can be set, such as WITHOUT_X11.  I can set these just fine, and don't 
get any X-related dependencies.
However, if I were to use something like Portmanager, Portupgrade, etc, 
is there any way I can keep it from downloading these as well?  On the 
subject of port managers, is manual port installation the prefered method of 
doing this anyway?
Thanks in advance,
Zack.



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

On 2007-11-25 17:59, eBoundHost: Artur [EMAIL PROTECTED] wrote:
yea that's a great answer. thanks for your insight. this is not some
technical question that can be researched, this in fact tarnishes the
image of the freebsd community, so it's not such an easy go rtfm
type of deal.

The commit logs of the entire FreeBSD source tree are openly visible to
everyone. A couple of minutes with Google Groups would be enough to
locate this thread:

http://groups.google.com/group/fa.freebsd.cvs-all/browse_thread/thread/ee66a0ebc1457b1f/7ea396d642a58806

This is the sort of research that I wanted to point you at.

problem is that i just came accross it myself and obviously nothing
has been done about it in the past.

The fact that you didn't notice the old commit logs, does not mean that
``nothing has been done about this issue in the past''. Please stop
spreading FUD about FreeBSD, because implying that we don't care as a
team about these things suggests to readers of freebsd-questions things
which are untrue.

There are intriguing but nevertheless interesting observations in the
thread mentioned above. Please take the time to let some of them sink
in before you spread more FUD.

so i would like to ask of people, is there no better way to get the
point accross? do you have to have this wording? is it set in stone
and can't be changed? I insist strongly that we should rework this
example, and if anyone insists strongly on not doing it, I would like
to understand what motive can be possibly behind this other than
something very deeply evil.

If you are not bothered by the fact that the fortune cookie database
contains Hitler quotes, but you merely want to ammend the text of the
web site, then you are more than welcome to post patches to the
freebsd-www list. That's where most of the work on the website is
discussed, and reviewed.

- Giorgos

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: who wrote this

2007-11-25 Thread Jeff Mohler

I'll take up the challenge.  Hitler was evil.  Quoting Hitler is not.

 When we seek to suppress information, no matter how troubling, we obscure
 the very lessons of history we need most to learn.  If, because Hitler was
 evil, we do not allow discussion of him, how will future generations learn
 of his evil?  As we argue this very point, there are people in the world
 insisting that the holocaust never happened, that Hitler did not commit
 the evil deeds that history has recorded he *did* commit.  If we refuse to
 speak of him, those who insist he wasn't evil will win the argument by
 default.

---
I believe that myself..evil people can still be brilliant, and can in
retrospect, teach us a lot about ourselves as a human race.

Were all animals, capable of horrible or fantastic things.  What we do with
that knowledge and power is the real problem.


What genre of quoteable will we be debating next?  MANY people worldwide
hate/despise many things.  If we begin here, where does it end?

Will we be discussing a kernel level hitler filter next?


C'mon, I believe that most reasonable people can separate the actions of
someone from their words from a historically relevant point of view.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: who wrote this

2007-11-25 Thread Erik Osterholm

On Sun, Nov 25, 2007 at 05:53:54PM -0600, eBoundHost: Artur wrote:
 I would appreciate if someone would help me find the person who can
 help to
 modify the text on this page.
 http://www.freebsd.org/internal/fortunes.html
 I think it can be worded differently and get the point accross
 without
 giving any extra attention to this monster.

 Best Regards,

 Artur

Do I understand correctly that you are not concerned so much with the
inclusion of quotes by Adolf Hitler, but you don't like the way the
web page is presented?

If that's the case, my argument for maintaining the current state of
the webpage is that it's going to become a repeated issue.  Without
the notice that Hitler quotes are not automatically considered
offensive, a lot of people will probably see a non-offensive Hitler
quote and argue that it should be moved to the offensive file simply
due to the attribution.

Put another way, the quote What luck for the rulers that men do not
think. is not considered offensive.  Merely adding the attribution,
then, should not cause it to be moved to the offensive file.  That
said, people have argued in the past that it should be, simply because
Hitler is in the text.  Putting the notice on the webpage at
http://www.freebsd.org/internal/fortunes.html is a public expression
that the speaker of the quote is not to be the basis for categorizing
the quote as offensive.

Erik

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Linux problem? - realplay and acroread die

2007-11-25 Thread David Banning


All of a sudden I have both linux-realplayer -and- acroread7 die.

realplayer ends with a Segmentation fault: 11 (core dumped) and 
acroread just dies without a message.

I have done redone my ports using portsnap, and used portupgrade 
to reinstall both programs. I have also reinstalled linux_base using
portupgrade -f -R linux_base*

I expect that the problem is linux related as both programs appear to be
linux programs.

No solution as yet and I am at my wits end! - Wondering if anyone has
a suggestion -

I am using freebsd 6.2 Release
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: who wrote this

2007-11-25 Thread Erich Dollansky


Hi,

eBoundHost: Artur wrote:

T,

I don't know any soft way to say this.  The man, Hitler, was the most 
evil person that our generation has ever witnessed.  The things he did 


this is why he has to be quoted so people see from where certain ideas 
originate.


I live in a country where many things are - knowingly or unknowingly - 
copied from this guy.


What really gets me is the fact that this is one of the examples put on 
the FreeBSD page.  I'm all for freedom and libertarian ideals, but for 


You can promote freedom only if you are able to describe the opposite.

I don't want to outlaw anything, but have some good taste.  Learn to 
moderate yourselves, this is what freedom is all based on, being good 
to others.


You must make people aware. If people are not aware - this was the most 
common excuse of Germans after the war - they will never ever support 
any actions against something.


I would appreciate if someone would help me find the person who can help 
to modify the text on this page.


I hope, you will not find this person.

Just for your information. Parts of my family were active against Hitler 
until the collapse of the Third Reich.


I think, that you are not able to understand the possible unawareness if 
you have not experienced it just after 1945. A very high percentage of 
Germans simply could not imagine or did not believe what was going on 
around them.


Surpressing even quotes like them here, is the first step to make people 
feel as they live in a perfect world.


Erich
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: routing problem

2007-11-25 Thread Ian Smith

On Sat, 24 Nov 2007, Alaor Barroso de Carvalho Neto wrote:
  2007/11/24, Ian Smith [EMAIL PROTECTED]:
  
   No I didn't mean that; use your own favourite packet filter, any of them
   can handle what you've described.  Bill suggested pf - lots of people
   seem to like it a lot - and I use ipfw because I (mostly) know how to.
  
  
  I always had linux servers, so I'm very familiar with iptables, I don't have
  a favorite BSD firewall yet, so that's why I'm asking. I choose ipfilter
  because I liked the tutorial in the FreeBSD handbook, but I don't know any
  features of the others, I even don't know ipfilter yet.

Yes, I suspect the handbook firewall sections were put together by an
ipfilter fan, even the ipfw section contains some oddities indicating
that, and the pf section so far lacks the basic and with-NAT firewall
setups that might encourage more people unfamiliar with pf to try it.

  Ok.  Pasted output of 'ifconfig' and 'netstat -finet -nr' may help ..
   it's easier to parse familiar machine output than textual descriptions.
  
  
  My BSD box don't have graphic interface and I must admit I'm suffering to
  use it, so that's why I'm transcripting the configs, but I'm gonna change
  that.

You can mark and copy with the mouse in text terminals on non-X boxes,
at a pinch.  I then use (say) ee to save the paste, though of course
it's a lot less tedious working from an xterm with multiple clipboard
buffers .. I've pasted up to 2000 lines from a Konsole at times :)

  Dunno.  I'd just run tcpdump in a different terminal for each interface
   and watch the traffic; what gets forwarded, or not, what gets translated
   by NAT, or not.  As you said, pings are a useful start, as can be adding
   temporary firewall rules to log everything in and out per interface ..
  
   I know next to nothing about routed(8) and RIP, nor why you might prefer
   it to static and cloned routing, but taking it out of the mix might help
   with debugging until your basic routing and filtering works right?
  
  
  I think it's hard to be NAT even because I've disabled ipfilter and the
  problem still. I thought I would just set gateway_enable=YES and things
  would start working, at least that was how I've seem in the docs, but like
  it didn't, I tried to set static routes. I don't know anything about routed
  too, I just know that it's supposed to build the routes on demand, or

I think routed might only work in a network that's using RIP throughout,
but that's only from what I've read in Hunt's TCP/IP Network Admin book,
and I've seen next to no discussion of using RIP in recent times.  I'm
pretty sure you don't want to run routed(8) and that it would only add
to confusion for anyone trying to help you spot your problem here.

  something like that. I'll copy the result of netstat on monday but the
  routes seems to be OK, they're there like they're supposed to be, at least I
  think they are right. Probably the problem is very stupid, but I feel like

Possibly just a little confusion re how freebsd routing tables are
presented compared to Linux, especially re default routes, perhaps? 

  I've checked everything and I can't find the error, and like I'm not very
  familiar with BSD I'm losing my hope. Next week I'll try some things and if
  it don't work I think it's time to go back to linux. That's bad because I
  liked a lot the freebsd way of do the things.

I suggest ending this thread here, and that you come back with a fresh
start on a fresh subject stating again what you want to do, your network
setup and layout, ifconfig and your full IPv4 routing tables, and clear
description of which packets via which interface/s are failing to get to
where you want them to go (and back!).  Your original message was fairly
clear about that, though it's got lost in the mists of time by now ..

Don't give up.  Perhaps spend a little time browsing the freebsd-net
list to see if that's worth joining for you, if you can't get sufficent
answers here, but with enough basic info I'm sure someone here can help. 

Cheers, Ian

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: who wrote this

2007-11-25 Thread Frank Shute

On Sun, Nov 25, 2007 at 05:53:54PM -0600, eBoundHost: Artur wrote:

 T,
 
 I don't know any soft way to say this.  The man, Hitler, was the most evil 
 person that our generation has ever witnessed. 

He wasn't witnessed by our generation  IMHO Stalin was worse.

 The things he did and what was done on his behalf are unspeakable
 and give him a special place in whatever hell you believe in.

I don't believe in hell - any sort of hell.

 As a society, we should distance ourselves and shun any imagery that
 puts any kind of human side to this monster.  

Why should we stop putting any human side to him? He was clearly a
human being.

 Saying that he loved dogs and was an art afficionado is completely 
 irrelevant if you know anything about his actions.

Because it shows him to be a human being?

 
 There are far more worthy quotes that can be put into FreeBSD and I don't 
 think its debateable.

You don't think it's debatable, but I do.

 
 What really gets me is the fact that this is one of the examples put on the 
 FreeBSD page.  I'm all for freedom and libertarian ideals, but for petes' 
 sake, have some compassion and understand where your liberty crosses over 
 into the pain of someone else's family.  Why didn't they put on that page 
 along with quotes about hitler, jokes about cancer and funny rape 
 stories.

Good idea! Anybody got any good cancer or rape gags we can put in
fortune?

 
 I don't want to outlaw anything, but have some good taste.  

You *do* want to outlaw things on the grounds of taste.

 Learn to 
 moderate yourselves, this is what freedom is all based on, being good to 
 others.

Nonsense. Freedom is about the right to voice disagreement with
others amongst other things.

 
 I would appreciate if someone would help me find the person who can help to 
 modify the text on this page.
 http://www.freebsd.org/internal/fortunes.html
 I think it can be worded differently and get the point accross without 
 giving any extra attention to this monster.

It's a good example and shouldn't be changed IMO.

PS. What should be abolished on the grounds of decency is top posting
 rehashing topics that have been gone on about ad nauseum,  on the
wrong mailing list.

-- 

 Frank 


 Contact info: http://www.esperance-linux.co.uk/misc/contact.html 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: who wrote this


If you are not bothered by the fact that the fortune cookie database
contains Hitler quotes, but you merely want to ammend the text of the
web site, then you are more than welcome to post patches to the
freebsd-www list.  That's where most of the work on the website is
discussed, and reviewed.

- Giorgos


I'm not going to reply to your personal attack but will only say that you 
are definitely much smarter, more web savy and better looking than me.


As far as the rest of your comment, yes, I am only interested in removing 
the reference to hitler from the front page of that topic that's all.  And 
unfortunately I do not know how to post patches to the freebsd-www list so 
if you would be so kind as to send me an email with a pointer, I would 
sincerely appreciate it.


Best Regards,

Artur
eBoundHost.com
http://www.eboundhost.com 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: top posting (off-topic)

On Fri, Nov 23, 2007 at 02:52:06PM +0100, Matthias Apitz wrote:
 
 It should be easy in mailing-lists to block mails of top-posters.

It would also probably be prone to false positive errors.

-- 
CCD CopyWrite Chad Perrin [ http://ccd.apotheon.org ]
McCloctnick the Lucid: The first rule of magic is simple. Don't waste your
time waving your hands and hopping when a rock or a club will do.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: who wrote this


Erik,

This is a very wise thing that you just said, and I agree with you almost 
completely.  The difference is that your very own words are a brilliant way 
to say it, and would be wonderful to replace the Hitler quotes that is 
there now.  So, if someone would replace it with your quote, I would be 
completely satisfied:



the speaker of the quote is not to be the
basis for categorizing the quote as offensive.


In fact, I do not think that the quotes should be removed from the database 
itself, my only objection is that by having hitler quotes on the front 
page, we are virtually monopolizing the page to this topic.


Best Regards,

Artur
eBoundHost.com
http://www.eboundhost.com
- Original Message - 
From: Erik Osterholm [EMAIL PROTECTED]

To: eBoundHost: Artur [EMAIL PROTECTED]
Cc: freebsd-questions@freebsd.org
Sent: Sunday, November 25, 2007 6:58 PM
Subject: Re: who wrote this



On Sun, Nov 25, 2007 at 05:53:54PM -0600, eBoundHost: Artur wrote:

I would appreciate if someone would help me find the person who can
help to
modify the text on this page.
http://www.freebsd.org/internal/fortunes.html
I think it can be worded differently and get the point accross
without
giving any extra attention to this monster.

Best Regards,

Artur


Do I understand correctly that you are not concerned so much with the
inclusion of quotes by Adolf Hitler, but you don't like the way the
web page is presented?

If that's the case, my argument for maintaining the current state of
the webpage is that it's going to become a repeated issue.  Without
the notice that Hitler quotes are not automatically considered
offensive, a lot of people will probably see a non-offensive Hitler
quote and argue that it should be moved to the offensive file simply
due to the attribution.

Put another way, the quote What luck for the rulers that men do not
think. is not considered offensive.  Merely adding the attribution,
then, should not cause it to be moved to the offensive file.  That
said, people have argued in the past that it should be, simply because
Hitler is in the text.  Putting the notice on the webpage at
http://www.freebsd.org/internal/fortunes.html is a public expression
that the speaker of the quote is not to be the basis for categorizing
the quote as offensive.

Erik




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

[OT] who wrote this

2007-11-25 Thread Brett Davidson


Erich Dollansky wrote:

Hi,

eBoundHost: Artur wrote:

T,

I don't know any soft way to say this.  The man, Hitler, was the most 
evil person that our generation has ever witnessed.  The things he did 


this is why he has to be quoted so people see from where certain ideas 
originate.


I live in a country where many things are - knowingly or unknowingly - 
copied from this guy.


What really gets me is the fact that this is one of the examples put 
on the FreeBSD page.  I'm all for freedom and libertarian ideals, but 
for 


You can promote freedom only if you are able to describe the opposite.

Well said.


I don't want to outlaw anything, but have some good taste.  Learn to 
moderate yourselves, this is what freedom is all based on, being 
good to others.


You must make people aware. If people are not aware - this was the 
most common excuse of Germans after the war - they will never ever 
support any actions against something.


I would appreciate if someone would help me find the person who can 
help to modify the text on this page.


I hope, you will not find this person.

Just for your information. Parts of my family were active against 
Hitler until the collapse of the Third Reich.


I think, that you are not able to understand the possible unawareness 
if you have not experienced it just after 1945. A very high percentage 
of Germans simply could not imagine or did not believe what was going 
on around them.


Surpressing even quotes like them here, is the first step to make 
people feel as they live in a perfect world.


Erich
To give another reason against supression of quotes is that you tend to 
emulate the actions of the people's ideas that you wished suppressed.
The opinion of this person/group is not worthy of being spread is but 
the thin edge of a fascist wedge.
It effectively states that you know better than the rest of us and that 
you are entitled to prevent others from learning/doing something in 
their best interests.
I wish more people would think about that before attempting to meddle in 
what others are allowed to do.


Brett.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: who wrote this

2007-11-25 Thread Giorgos Keramidas

On 2007-11-25 19:43, eBoundHost: Artur [EMAIL PROTECTED] wrote:
 If you are not bothered by the fact that the fortune cookie database
 contains Hitler quotes, but you merely want to ammend the text of the
 web site, then you are more than welcome to post patches to the
 freebsd-www list.  That's where most of the work on the website is
 discussed, and reviewed

 I'm not going to reply to your personal attack but will only say that you
 are definitely much smarter, more web savy and better looking than me.

It's not an ``attack'', but merely a request to avoid what may be
considered as a ``fault'' of the FreeBSD Project.

 As far as the rest of your comment, yes, I am only interested in
 removing the reference to hitler from the front page of that topic
 that's all.  And unfortunately I do not know how to post patches to
 the freebsd-www list so if you would be so kind as to send me an email
 with a pointer, I would sincerely appreciate it.

You don't have to spend a lot of time working with HTML, SGML or the CVS
tree.  A mere proposal for a text that improves what you consider buggy
in the web page, should be fine.  We can do the rest.

- Giorgos

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: top posting (off-topic)

On Fri, Nov 23, 2007 at 10:48:38AM -0800, David Benfell wrote:
 On Fri, 23 Nov 2007 11:31:51 -0500, Bart Silverstrim wrote:
  
  We have adults who can't be bothered to tell the difference 
  between lose and loose in writing. Wonderful things encouraged by people 
  justifying their lazy writing styles.
  
 This might be slightly unfair.
 
 A large proportion of the population has *never* been able to spell correctly
 or to use proper grammar.  A difference between now, and a few years ago, is
 that we are more often encountering their expressions in a written form, as
 they, too, gain access to the Internet.

I think it's kind of a chicken-and-egg problem: we don't really know for
sure whether TOFU[1] posting spurred much of the rise of illiteracy or
the increase of relative illiteracy on the Internet led to an increase in
TOFU posting.  Which came first?

Ultimately, I think greater frequency of TOFU posting and a reduced
average ability to order one's thoughts to compose meaningful discourse
each contribute to the other.

 
 And an insistence on grammatical and spelling correctness is its own form of
 elitism.

Is it?  In my case, it tends to be a couple of things, neither of which
is particularly elitist as far as I can tell:

  1. an attempt to help others learn how to think more clearly and
  express themselves more precisely

  2. an easy way to filter those who do not think very clearly so I can
  spend more of my time on those who do, since better grammar and
  spelling (along with certain other communication skills) tends to be
  indicative of clearer thought

I won't ignore someone who displays appalling lack of writing capabilities
just because of poor spelling or grammar.  I sometimes need to cut down
on how much stuff gets read in a given day, so I have time to do
something with the information I get from my reading, and when the need
is great enough it's usually the people who don't communicate worth a
damn that get cut first.

-- 
CCD CopyWrite Chad Perrin [ http://ccd.apotheon.org ]
Kent Beck: I always knew that one day Smalltalk would replace Java.  I
just didn't know it would be called Ruby.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: who wrote this




I'm not going to reply to your personal attack but will only say that you
are definitely much smarter, more web savy and better looking than me.


It's not an ``attack'', but merely a request to avoid what may be
considered as a ``fault'' of the FreeBSD Project.


As far as the rest of your comment, yes, I am only interested in
removing the reference to hitler from the front page of that topic
that's all.  And unfortunately I do not know how to post patches to
the freebsd-www list so if you would be so kind as to send me an email
with a pointer, I would sincerely appreciate it.


You don't have to spend a lot of time working with HTML, SGML or the CVS
tree.  A mere proposal for a text that improves what you consider buggy
in the web page, should be fine.  We can do the rest.

- Giorgos


Ok, thank you, I will submit the proposed changes.  I appreciate your reply. 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

USB headset?

2007-11-25 Thread Robert Huff


Is anyone out there using one?
If so, what brand/model and with what software?  Was ther
anything special needed to get things working?
Respectfully,


Robert Huff
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: top posting (off-topic)

On Fri, Nov 23, 2007 at 10:22:50AM +1300, Brent Jones wrote:

I find that top-posting really makes it difficult to follow the flow of a
discussion.  I especially find it difficult when someone engages in TOFU
[1] posting, because when I try to check context there's a gawdawful
lengthy blob of stuff, of which usually only a tiny bit is context.
Please trim and post in context.


 
 I for one prefer top posting, as usually I have read a particular thread
 enough times that I like to cut to the chase and read the new input
 without having to scroll down, sometimes navigating an endless nesting
 of   For me, reading through top posted replies saves time and
 effort.  If I happened to miss something in the conversation I can
 scroll down to find it.

I'm sure someone does, but I don't.


 
 Anyone else feel the same?

[1]: TOFU = Text Over, Fullquote Under; a term for the most common form
of top posting

-- 
CCD CopyWrite Chad Perrin [ http://ccd.apotheon.org ]
Baltasar Gracian: A wise man gets more from his enemies than a fool from
his friends.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: top posting (off-topic)

On Sun, Nov 25, 2007 at 06:56:15PM -0700, Chad Perrin wrote:
 
 I think it's kind of a chicken-and-egg problem: we don't really know for
 sure whether TOFU[1] posting spurred much of the rise of illiteracy or
 the increase of relative illiteracy on the Internet led to an increase in
 TOFU posting.  Which came first?

I forgot to include the footnote about TOFU in the preceding message.  It
would have looked something like this:

[1]: TOFU = Text Over, Fullquote Under; the most common format of top
posted replies

-- 
CCD CopyWrite Chad Perrin [ http://ccd.apotheon.org ]
MacUser, Nov. 1990: There comes a time in the history of any project when
it becomes necessary to shoot the engineers and begin production.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Double fault

2007-11-25 Thread Simon Chang

Hi Bernt,

A few observations:

1)  This double fault apparently occurs fairly early in your boot
process.  Do you initialize anything late, like an external drive or
some other hardware?

2)  By your saying that you usually get either trap 9 or 12, I
assume it happens frequently enough for you to notice a pattern.  Do
you have the kernel dump file and the backtrace?  It would be a really
good starting point to troubleshoot.

SC

On Nov 25, 2007 11:53 AM, Bernt Hansson [EMAIL PROTECTED] wrote:
 Any help with this?


 Fatal double fault:
 eip = 0xc08a6589
 esp = 0x14
 ebp = 0xd020cb1c
 panic: double fault
 Uptime: 1m45s

 I usally get fatal trap 9 or 12


 FreeBSD 6.2-STABLE #0: Fri May 11 17:02:55 CEST 2007
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: who wrote this


PS. What should be abolished on the grounds of decency is top posting
 rehashing topics that have been gone on about ad nauseum,  on the
wrong mailing list.


My apologies for top posting, will never happen again.  I've never posted to 
a list before.



Learn to
moderate yourselves, this is what freedom is all based on, being good 
to

others.


Nonsense. Freedom is about the right to voice disagreement with
others amongst other things.


Do you even notice the irony in what you said?

Best Regards,

Artur
eBoundHost.com
http://www.eboundhost.com

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: named problems

2007-11-25 Thread jekillen



On Nov 25, 2007, at 1:58 PM, bsd wrote:


Bind works perfectly out of the box on most FBSD recent versions.

You should not move things out of the path they have been setup to.
Specially on FBSD /etc is reserved for system files.

By default bind is installed in /var/named and should be kept there.

If I was you I would :
1. install the latest bind version from the port //
2. make sure you don't touch things unless absolutely necessary.
3. copy paste of modify the /var/named/etc/namedb/named.conf so that 
It corresponds to your needs.

4. make sure the /etc/rc.conf has the correct named values.
5. start it with the /usr/local/etc/rc.d/ script for named //

Been runing this one with 1000 zones as both masters and slave never 
had any problem.


If you have more issue could give you a help on debuging bind.

My advice : STICK TO THE FBSD RULES AND PATH unless you perfectly know 
what you are doing.


Thank you for your response. I did not actually change anything with 
respect to locations and such,
but some of the permissions in /var/named/etc/namedb I had changed and 
could not find document-
ation to tell me specifically what they are supposed to be. And I was 
not able to deduce it. As it
turned out, I had a line at the end of named.conf that tried to include 
rndc.key file. I removed that
and named started and runs. Now my problem is getting more info on 
rndc. I am somewhat confused

about it. But I will get on top of that too, i expect.
ecrit...that's French for writes or has written... it's been over 40 
years since I took French in high school.

Thanks again much appreciated;
bonjour
Jeff K

Le 25 nov. 07 à 20:19, jekillen a écrit :


Hello;
I am having some named problems:
The daemon will not start and run on system startup.
There is plenty of info on problems when named
is running, but not when it will not start.
I did get it to start after boot with
#named (su to root without - option)
It started and ran as demonstrated
with ps -aux. But the listing was
just user (me as mortal user) and
named as process (not as a path
to an executable, as is normal
for other processes).
The console messages at start up
gives me configuration file not found
errors. The files are there.
/etc/namedb/named.conf, rndc.key
/etc/namedb is a link to /var/named/etc/namedb where the config
files are. It is set up to be a slave server
for four domains.
How can I go about debugging this
situation?
My suspicions are ownership and permissions
are wrong, but how, and how to fix; ??
Thanks in advance
Jeff k



Gregober --- PGP ID -- 0x1BA3C2FD
bsd @at@ todoo.biz


P Please consider your environmental responsibility before printing 
this e-mail



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: top posting (off-topic)

2007-11-25 Thread Giorgos Keramidas

On 2007-11-25 19:01, Chad Perrin [EMAIL PROTECTED] wrote:
 On Sun, Nov 25, 2007 at 06:56:15PM -0700, Chad Perrin wrote:
 
  I think it's kind of a chicken-and-egg problem: we don't really know for
  sure whether TOFU[1] posting spurred much of the rise of illiteracy or
  the increase of relative illiteracy on the Internet led to an increase in
  TOFU posting.  Which came first?

 I forgot to include the footnote about TOFU in the preceding message.  It
 would have looked something like this:

 [1]: TOFU = Text Over, Fullquote Under; the most common format of top
 posted replies

The footnote was easy to understand after a quick Wikipedia search:
http://en.wikipedia.org/wiki/Top-posting#Top-posting

Quoting the text (so list members don't have to actually repeat the
search):

Some maintain that top-posting is _never_ appropriate, and refer to
it jokingly as the TOFU method (from the German text oben,
fullquote unten, sometimes translated text over, fullquote
under) [...]

Nice one.  I had not heard of TOFU posting before :)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: short Q

2007-11-25 Thread jekillen



On Nov 25, 2007, at 1:34 PM, Gelsema, P ((Patrick)) wrote:


On Sun, November 25, 2007 21:18, Shantanoo Mahajan wrote:


On 26-Nov-07, at 1:23 AM, Paul Schmehl wrote:


--On November 23, 2007 9:04:01 PM -0800 jekillen
[EMAIL PROTECTED] wrote:


Hello:
Is this the way to start mysqld in rc.conf?
mysqld_enable=YES


head /usr/local/etc/rc.d/mysql-server
#
# Add the following line to /etc/rc.conf to enable mysql:
# mysql_enable (bool):  Set to NO by default.
#   Set it to YES to enable MySQL.
# mysql_limits (bool):  Set to NO by default.
#   Set it to yes to run `limits -e -U mysql`
#   just before mysql starts.
# mysql_dbdir (str):Default to /var/db/mysql
#   Base database directory.
# mysql_args (str): Custom additional arguments to be passed
#   to mysqld_safe (default empty).


Cheers

Patrick




Most ports that have daemons will have startup scripts in /usr/
local/etc/rc.d/.  Most of those scripts will include comments about
what switches are required in /etc/rc.conf to start the daemon.
Look there first for instructions.

If you look at the mysqld startup script in /usr/local/etc/rc.d,
you will notice that it says use msyqld_enable=YES in /etc/rc.conf.


I do not have freebsd machine around to verify, but iirc, its
'mysql_enable'
and not 'mysqld_enable'.

regards,
shantanoo


Thank you all for responses.
I did get this straightened out:
It is mysql_enable=YES
and putting a script named mysql
in the /etc/rc.d directory with the
lines;
#! /bin/sh
/usr/local/bin/mysqld_safe --user=mysql 
did the trick. This is what the mysql docs
prescribe for starting the server. Perhaps
that is not the best way to go about it at
system start, but it works.
Thanks again;
Jeff K

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: top posting (off-topic)

2007-11-25 Thread Erich Dollansky


Hi,

Brent Jones wrote:

Sorry if this is a bit off topic for this list, but it seem to be a
comment that comes up very regularly; please don't top post...


at least, you make me understand what this means.

Yes, it is stupid to avoid top posting as they save a lot of time as 
long as it is still clear how it is connected to the original message.


I for one prefer top posting, as usually I have read a particular thread
enough times that I like to cut to the chase and read the new input
without having to scroll down, sometimes navigating an endless nesting


Most of the time, it is a waste to keep the parts of the original 
message which is not referred to in the answer.



Anyone else feel the same?


Oh yes!

Erich
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: K3b

2007-11-25 Thread Shantanoo Mahajan


On 26-Nov-07, at 5:07 AM, ajtiM wrote:


Hi!

I am new with FreeBSD. I installed one day ago 7.0 beta3 and I try  
to learn

and setup the system.
When I start K3b (KDE) I got a message:

No CD/DVD writer found.
K3b did not find an optical writing device in your system. Thus,  
you will not
be able to burn CDs or DVDs. However, you can still use other K3b  
features
like audio track extraction or audio transcoding or ISO9660 image  
creation.


I tired as user and as root but resul is the same.

BTW: under Linux I didn't have a problem


Check section '18.6.9 Using the ATAPI/CAM Driver'  on
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/creating- 
cds.html



regards,
shantanoo
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: K3b

2007-11-25 Thread David M. Patronis

Hi!

I am new with FreeBSD. I installed one day ago 7.0 beta3 and I try to
learn 
and setup the system.
When I start K3b (KDE) I got a message:

No CD/DVD writer found.
K3b did not find an optical writing device in your system. Thus, you
will not 
be able to burn CDs or DVDs. However, you can still use other K3b
features 
like audio track extraction or audio transcoding or ISO9660 image
creation.

I tired as user and as root but resul is the same.

BTW: under Linux I didn't have a problem

Thanks in advance.

Response:

Assuming some things still work as they did with the 6.X releases
(probably a dangerous assumption) you need to enable the ATAPI driver. 

See here:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/creating-cds.html#ATAPICAM

David

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: [OT] who wrote this

2007-11-25 Thread neal

On Monday 26 November 2007, Brett Davidson wrote:
 To give another reason against supression of quotes is
 that you tend to emulate the actions of the people's
 ideas that you wished suppressed. The opinion of this
 person/group is not worthy of being spread is but the
 thin edge of a fascist wedge.
 It effectively states that you know better than the rest
 of us and that you are entitled to prevent others from
 learning/doing something in their best interests.
 I wish more people would think about that before
 attempting to meddle in what others are allowed to do.

Good points.

It reminds me of a very old mystic quote

when a Sage points to the moon, the idiot sees only a 
finger

Lets also remember that history is written by the victors, 
which means they LIE!

neal.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: K3b

2007-11-25 Thread Predrag Punosevac


ajtiM wrote:

Hi!

I am new with FreeBSD. I installed one day ago 7.0 beta3 and I try to learn 
and setup the system.

When I start K3b (KDE) I got a message:

No CD/DVD writer found.
K3b did not find an optical writing device in your system. Thus, you will not 
be able to burn CDs or DVDs. However, you can still use other K3b features 
like audio track extraction or audio transcoding or ISO9660 image creation.


I tired as user and as root but resul is the same.

BTW: under Linux I didn't have a problem

Thanks in advance.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
  

You have not done your homework.

Probably the following would be enough

[pedja@ /usr/home/Pedja]$ more /boot/loader.conf
atapicam_load=YES
hw.ata.ata_dma=1
hw.ata.atapi_dma=1


You also need to add the following into your /etc/devfs.conf file

# Allow members of the group operator to mount CD-ROMs.

perm  /dev/acd0   0666
perm  /dev/cd00666

# Commonly used by many ports  
link  cd0 cdrom

link  cd0  dvd
link  cd0  rdvd

link  acd0 cdrom
link  acd0 dvd
link  acd0 rdvd


# Misc other devices

permcdrom   0666
permdvd 0666
permrdvd0666
permxpt00666
permpass0   0666

I am not sure if you need HAL as mine is ON  on this computer  on  
which  K3b  works  flawlessly. You will have to read handbook and

the following is useful  http://www.freebsd.org/gnome/.


BTW: I really gets annoyed when people say by the way it works in Linux, 
Windows, Solaris or whatever.

What is that suppose to mean?



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: [OT] who wrote this


Lets also remember that history is written by the victors, 
which means they LIE!
neal.


Wow neal, that's very nice of you.  are you saying that hitler didn't do any of 
these things?  I'm not even going to respond to you here, just going to re-post 
your words to show that there are still people like you out there...

And as far as your sage to the moon quote, don't think too much of your own 
sagedom, there is always someone younger and smarter.  You would be better off 
being a little less sagy and a bit nicer.

Now to the rest of you who are for some reason turning this into a Censorship 
issue.  It's not.  I'm asking to replace the text on the HTML front page with a 
completely unnecessary reference to hitler.  We're not talking about pruning 
the quotes database for controversial speakers.  having hitlers name there does 
nothing positive for the project and polarizes the viewing audience because it 
offends the vast majority of people, 99% of whom are not going to spend an 
evening writing to a mailing list to have the issue fixed. They won't think 
about the deep philosophical reasons why this should be there in principle.  
They are going to read the page and think to themselves that the freebsd 
community are a bunch of jerks. 

There are far better ways to express the thought than by simply saying hitler 
quotes.  For instance it can be replaced with controversial persons or 
something similar.  He was not the only such person in history, so we should 
not be focusing only on him.

Best Regards,

Artur
eBoundHost.com
http://www.eboundhost.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: K3b

2007-11-25 Thread David J Brooks

On Sunday 25 November 2007 05:37:46 pm ajtiM wrote:
 Hi!

 I am new with FreeBSD. I installed one day ago 7.0 beta3 and I try to learn
 and setup the system.
 When I start K3b (KDE) I got a message:

 No CD/DVD writer found.
 K3b did not find an optical writing device in your system. Thus, you will
 not be able to burn CDs or DVDs. However, you can still use other K3b
 features like audio track extraction or audio transcoding or ISO9660 image
 creation.

cd /usr/ports/sysutils/k3b  make showinfo

David
-- 
This message is larva-tested, pupa-approved.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: [OT] who wrote this

2007-11-25 Thread cpghost

On Sun, 25 Nov 2007 22:03:30 -0600
eBoundHost: Artur [EMAIL PROTECTED] wrote:

 speakers.  having hitlers name there does nothing positive for the
 project and polarizes the viewing audience because it offends the
 vast majority of people, 99% of whom are not going to spend an
 evening writing to a mailing list to have the issue fixed.

Without statistics, you can't actually tell for sure:
 1. if this is really a prominent page which is getting a lot of hits.
 2. if visitors noticed this at all or do/did care.
 3. how many visitors were offended, and if it could
even be a vast majority (when is a majority vast?).

Just because you care about it (thank you for the heads up),
doesn't mean 99% of other visitors did/do: we just can't
know because there are no or not enough data to tell.

Having said that, the improvement you're suggesting:

 There are far better ways to express the thought than by simply saying
 hitler quotes.  For instance it can be replaced with controversial
 persons or something similar. 

looks quite reasonable to me.

So please send-pr a patch to reword this page and have that
discussed on the appropriate mailing list. questions@ is
probably not the appropriate forum for that.

Thank you,
-cpghost.

-- 
Cordula's Web. http://www.cordula.ws/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Personalised patches in ports

2007-11-25 Thread Olivier Nicole

Hi,

  How can I incorporate my patch into the portupgrade system, so that an
  upgrade of Xpdf will apply my patch? If I download the bzip file,
  apply the patch, re-bzip the sources, and then try to force an
  upgrade, the checksum fails (as expected).
  
  How does one do thes properly?
 
 It's actually much easier than in Linux, since the ports system already
 has to do this. Each port has a files directory into which you can put
 patches, which will get applied automatically each time you build. See
 the porter's handbook for details:

But wouldn't that personnal patch file be erased by next cvsup of the
ports?

Best regards,

Olivier
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Confusion about Ports and options framework

2007-11-25 Thread RW

On Sun, 25 Nov 2007 16:24:32 -0800
Zachary Kline [EMAIL PROTECTED] wrote:

 Hi,
 I've read through the sections of the handbook quite carefully,
 and haven't quite found what I'm looking for.
 To be specific, I've no plans to install X11 or anything like it
 on this machine yet.  I may do so in the future merely to see how
 accessible Gnome and such are, but not now.
 I note that /usr/ports/editors/emacs has several environment
 variables which can be set, such as WITHOUT_X11.  

Just set it globally in /etc/make.conf.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

RE: dealing with a failing drive

Are we looking at the same output?

Here's the output of idacontrol show off one of my DL360 servers:

mail# idacontrol show
cmd_show_all()
[Compaq Integrated Array controller]
  Controller uptime: 301 hours 54 minutes 22 seconds
   Firmware Version: 1.50 (running) 1.50 (ROM)
Revision -
   Hardware: 2
  Marketing: A
 SCSI bus count: 2
 Max drives per bus: 16
Maximum request: 65535 blocks

Logical drive 0: 17359MB (35553120 sectors), blocksize=512
 Status: Logical drive ok
   Mode: Mirroring (RAID1)
   Drive ID: 
Drive Label:
bus 1 target 0 lun 0:
enclosure 0, bay 0, connector 2J
COMPAQ  BB01813467   3BM0G60671011MHF 3B07 direct-access
17361MB (35556888 512 byte sectors, 1088 reserved)
Sync, Ultra2, Wide - Configured in a logical volume.
bus 1 target 1 lun 0:
enclosure 0, bay 1, connector 2J
COMPAQ  BF01864663   3EV0J0V372363NRD 3B0B direct-access
17361MB (35556888 512 byte sectors, 1088 reserved)
Sync, Ultra2, Wide - Configured in a logical volume.
bus 1 target 7 lun 0:
enclosure 0, bay 7, connector 2J
COMPAQ  PROLIANT 4L2I JB21 non-disk
Async
mail#

There are two physical disks in the server.  bus 1 target 0 and
bus 1 target 1.  Those ARE the physical disks.  If one of them
has failed instead of:

 Sync, Ultra2, Wide - Configured in a logical volume.

you will see something like:

 Sync, Ultra2, Wide - Unconfigured

or nothing at all.

It is normal for idacontrol to generate soft write errors.  The
developer knows about this.  There's really no easy way to make
it not happen.  It doesen't hurt anything, however.

If the RAID card itself is flakey you can't really tell it from
software.  Even the Windows RAID utilities that HP/Compaq supplies
won't tell you this.

The by the book way of troubleshooting these servers is if you get
a disk failure, you immediately swap the disk.  Then if the failure
happens again and your pretty sure it's not the disk, you down the
server, and boot it into Compaq Diagnostics and let it run for a day or so.

It is not uncommon to end up with several additional hard drives
that you don't need in the process of identifying a bad RAID card
in a server.  We have all done it, it is part of the territory.  If
you cannot afford it, stay away from these servers.  Remember these
servers are designed for a medium to large corporation that has
a lot of resources.

To give you a typical scenario, a couple weeks ago one of our mailservers
running on a Proliant 1600R started freezing up.  I had the admin
pull the entire disk array and put the disks into our backup server,
that went online in place of the original server, and the original
server was pulled and put on a test bench.  About a week later the
admin finally discovered the processor board had worked it's way
almost out of the socket, after much hair-pulling, running of
diagnostics, and so on.


Ted

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of David Newman
 Sent: Sunday, November 25, 2007 2:58 PM
 To: Ted Mittelstaedt
 Cc: freebsd-questions@freebsd.org
 Subject: Re: dealing with a failing drive


 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 On 11/24/07 12:39 PM, Ted Mittelstaedt wrote:
  The output of idacontrol show will show if one of the
  hard disks in the SmartArray has failed.  Your choice with
  a hardware array is to either run it with redundancy or not.
  (ie: raid5 or mirroring or striping)  You have to choose
  which is more important for you.
 
  IMHO it is very foolish to stripe an array that you have
  critical data on and assume that you can predict a failure
  of a disk using smart or other monitoring, and replace it
  in advance of a failure.  If your concern is redundancy, then
  add more disks to the array and create a raid 5 or a mirror.
  Then ignore all the predictive junk and let the array card
  concern itself with detecting if a drive has failed.  Run
  idacontrol periodically out of a script that checks for a
  failure of a disk and e-mails you if there is one.

 Thanks, this is good advice, but it doesn't answer the specific
 questions I had:

 1. How to diagnose the health of a *physical* disk that's part of a RAID
 array (RAID1, in this case) in an old Compaq Proliant server?

 2. Is it normal for idacontrol to generate soft write errors?

 Backstory here is that Proliant server #1 generated beaucoup hard and
 soft read and write errors and eventually locked up. I thought it was
 one of the disks but replacing one at a time didn't help. So I took both
 disks and put them in identical Proliant server #2. Ergo, I would
 conclude server #1's RAID controller flaked out.

 idacontrol is useful for telling the health of the logical disk. What it
 doesn't tell me (or maybe I just don't see it) is whether the physical
 disks are ok, and

Re: [OT] who wrote this

2007-11-25 Thread Dave Curry

On Sun, Nov 25, 2007 at 10:03:30PM -0600, eBoundHost: Artur wrote:
 
 Wow neal, that's very nice of you.  are you saying that hitler didn't do any 
 of these things?  I'm not even going to respond to you here, just going to 
 re-post your words to show that there are still people like you out there...
 
 And as far as your sage to the moon quote, don't think too much of your own 
 sagedom, there is always someone younger and smarter.  You would be better 
 off being a little less sagy and a bit nicer.
 
 Now to the rest of you who are for some reason turning this into a Censorship 
 issue.  It's not.  I'm asking to replace the text on the HTML front page with 
 a completely unnecessary reference to hitler.  We're not talking about 
 pruning the quotes database for controversial speakers.  having hitlers name 
 there does nothing positive for the project and polarizes the viewing 
 audience because it offends the vast majority of people, 99% of whom are not 
 going to spend an evening writing to a mailing list to have the issue fixed. 
 They won't think about the deep philosophical reasons why this should be 
 there in principle.  They are going to read the page and think to themselves 
 that the freebsd community are a bunch of jerks. 
 
 There are far better ways to express the thought than by simply saying 
 hitler quotes.  For instance it can be replaced with controversial 
 persons or something similar.  He was not the only such person in history, 
 so we should not be focusing only on him.

Since this point has been raised already I won't stick with it too long.  It 
has been pointed out multiple times that this is not the proper forum to debate 
this point for one.  For two if you have submitted your request for the 
revision to the 
proper people then _the community_ can take your suggestions under advisement 
and decide if it really is improper to be using Hitler quotes as opposed to 
some other phrasing.  As it is, I think you've extensively made the point for 
why 
it was a good choice.  The reaction to Hitler should not be such that simply 
being associated with the name justifies people taking offense.  On the flip 
side of this, saying that it being a Hitler quote doesn't automatically make it 
offensive
doesn't lessen the terrible impact that he actually had, and as such doesn't 
warrant censorship (Despite your protestations to the contrary, censorship is 
the very act of removing items deemed offensive to a body).  Unless you can 
come up with
a legitimate reason that Hitler should be removed, you're not going to bring 
much sympathy to your cause. 

--- 
David Michael Curry (Dave)
[EMAIL PROTECTED]

() ASCII Ribbon Campaign | Against HTML e-mail
/\  www.asciiribbon.org  | Against proprietary extensions

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: dealing with a failing drive

2007-11-25 Thread David Newman

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 11/25/07 9:08 PM, Ted Mittelstaedt wrote:

 There are two physical disks in the server.  bus 1 target 0 and
 bus 1 target 1.  Those ARE the physical disks.  If one of them
 has failed instead of:
 
  Sync, Ultra2, Wide - Configured in a logical volume.
 
 you will see something like:
 
  Sync, Ultra2, Wide - Unconfigured
 
 or nothing at all.

Cool, thanks. Your output and mine are virtually identical.

Now I get what you mean by running idacontrol periodically and grokking
the output to verify both disks are still in the array.

 
 It is normal for idacontrol to generate soft write errors.  The
 developer knows about this.  There's really no easy way to make
 it not happen.  It doesen't hurt anything, however.

OK, good to know.

thanks much!

dn

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.3 (Darwin)

iD8DBQFHSlXUyPxGVjntI4IRAlbxAJ0aZDSOeyrTIoEVtKOZd5UMbDMx9QCdHP8I
TAh9zWa+2cUlE5Qh2qfks2Y=
=iEK3
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Personalised patches in ports

2007-11-25 Thread RW

On Mon, 26 Nov 2007 11:52:31 +0700 (ICT)
Olivier Nicole [EMAIL PROTECTED] wrote:

 Hi,
 
   How can I incorporate my patch into the portupgrade system, so
   that an upgrade of Xpdf will apply my patch? If I download the
   bzip file, apply the patch, re-bzip the sources, and then try to
   force an upgrade, the checksum fails (as expected).
   
   How does one do thes properly?
  
  It's actually much easier than in Linux, since the ports system
  already has to do this. Each port has a files directory into which
  you can put patches, which will get applied automatically each time
  you build. See the porter's handbook for details:
 
 But wouldn't that personnal patch file be erased by next cvsup of the
 ports?

c[v]sup only deletes files that have been deleted under cvs - other
files are left alone. The only risk is in choosing a patch filename
that previously been used by the port maintainer, but that's easy to
avoid.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

RE: Squid with a Net nanny type setup....