Re: Obtaining / downloading latest release of freeBSD
On Thu, 17 Jun 2010 18:53:25 -0700 (PDT), cipher crypted xciphercrypt...@yahoo.com wrote: Hi, I am a bit slow when it comes to downloads, and I have been consumed by this slowness in trying to download/obtain your latest release of FreeBSD (8.0, I think). I visited your get FreeBSD page and clicked on your amd64 distribution link, and couldn't figure out what or how to download and install your latest distribution from the resulting page. Can someone please guide a lame-brain like me to this task, please? Or point me in the right direction as to where I can obtain help for this in plain, lamens terms? Go to this page ftp://ftp.freebsd.org/pub/FreeBSD/releases/amd64/ISO-IMAGES/8.0/ and download, according to your needs, one of those files: 8.0-RELEASE-amd64-bootonly.iso 8.0-RELEASE-amd64-disc1.iso 8.0-RELEASE-amd64-dvd1.iso.gz 8.0-RELEASE-amd64-livefs.iso If you want to install FreeBSD, I'd go with -disc1.iso. See http://www.freebsd.org/releases/8.0R/announce.html for an explaination what the files mentioned above are intended for (section Availability). You will also find information on this page about how to download FreeBSD via BitTorrent. For lowering download time, you may want to check a mirror near your location. See list of mirrors here: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mirrors-ftp.html When the download has been completed, burn the ISO file to a CD, and boot your machine with this CD. If you need further help, refer to the excellent handbook and FAQ provided by FreeBSD: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ http://www.freebsd.org/doc/en_US.ISO8859-1/books/faq/ Enjoy! -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: PDF storage software recommendations?
On Thu 17 Jun 2010 at 19:57:03 PDT Polytropon wrote: Maybe my answer will sound low level, but it works - REALLY works - and works with mostly every kind of data. It's good to see someone recommending a true Unix-style solution. :) ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Obtaining / downloading latest release of freeBSD
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 18/06/2010 02:53:25, cipher crypted wrote: I am a bit slow when it comes to downloads, and I have been consumed by this slowness in trying to download/obtain your latest release of FreeBSD (8.0, I think). I visited your get FreeBSD page and clicked on your amd64 distribution link, and couldn't figure out what or how to download and install your latest distribution from the resulting page. Can someone please guide a lame-brain like me to this task, please? Or point me in the right direction as to where I can obtain help for this in plain, lamens terms? Sure. This is the place to get help. Click here: http://ftp.freebsd.org/pub/FreeBSD/ISO-IMAGES-amd64/8.0/8.0-RELEASE-amd64-disc1.iso Now, you're going to need to write that .iso image to a CD. Exactly what software you use to do that depends on what OS you're using at the moment. Assuming you're running Windows of some form, then Nero is a good choice: http://www.nero.com/eng/downloads-nero9-free.php You need to take care to tell Nero it's burning a disk image, rather than just making a copy of the file you downloaded. The CD you end up with should be bootable. Now, just follow the instructions here: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/install.html Note that the Sysinstall part of doing an install is just the beginning. It will give you a working system, but with a command line interface. Installing the windowing system and so forth will take further work. It's all covered pretty well in the Handbook, but feel free to ask here if you have further questions. Cheers, Matthew - -- Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate JID: matt...@infracaninophile.co.uk Kent, CT11 9PW -BEGIN PGP SIGNATURE- Version: GnuPG/MacGPG2 v2.0.14 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkwbE14ACgkQ8Mjk52CukIynkgCgjLvszhms3ROvvSyrHjkyfD/z YHcAmwdHSW/PX7rMpjQQ94Dfe/jepwuK =GFGA -END PGP SIGNATURE- ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
network deamons starting before network!
Hello, Since updating to 8.X I noticed that network services were started before the network was up! I use lagg failover configuration on both my FreeBSD boxes. First, boot fails on mounting my nfs-shares. After entering and exiting the rescue shell, the system boots as normal. uname -a FreeBSD mario 8.1-PRERELEASE FreeBSD 8.1-PRERELEASE #4: Fri Jun 18 07:46:01 CEST 2010 *...@mario:/usr/obj/usr/src/sys/mario amd64 What could I do to fix this? Here's an exerpt from /var/log/messages: Jun 18 09:10:25 ntpd[1376]: ntpd 4.2.4p5-a (1) Jun 18 09:10:25 kernel: fuse4bsd: version 0.3.9-pre1, FUSE ABI 7.8 Jun 18 09:10:27 ntpd_initres[1412]: host name not found: yoshi Jun 18 09:10:27 kernel: nfe0: link state changed to UP Jun 18 09:10:27 kernel: lagg0: link state changed to UP Jun 18 09:10:27 kernel: nfe1: link state changed to UP Jun 18 09:10:27 ntpd_initres[1412]: couldn't resolve `yoshi', giving up on it Jun 18 09:10:28 dhclient: New Hostname (lagg0): mario Jun 18 09:10:28 dhclient: New IP Address (lagg0): 10.58.235.6 Jun 18 09:10:28 dhclient: New Subnet Mask (lagg0): 255.255.255.0 Jun 18 09:10:28 dhclient: New Broadcast Address (lagg0): 10.58.235.255 Jun 18 09:10:28 dhclient: New Routers (lagg0): 10.58.235.1 signature.asc Description: OpenPGP digital signature
Re : Xorg fails to start after upgrading to 8 stable
When you upgrade your system to a major release (7.x 8.x), you MUST re-install all your ports. See the handbook http://www.freebsd.org/doc/en/books/handbook/ports-using.html and the section 4.5.4 Upgrading Ports. --- En date de : Ven 18.6.10, Xihong Yin x...@gmx.com a écrit : De: Xihong Yin x...@gmx.com Objet: Xorg fails to start after upgrading to 8 stable À: freebsd-questions@freebsd.org Date: Vendredi 18 juin 2010, 4h30 I upgraded from 7.2 to 8.0. Xorg can't start. I got the following message when I type 'startx'. I already upgraded Xorg, hal and libusb to the latest. Anybody can help? Script started on Fri Jun 18 00:20:21 2010 c...@router1:~ startx xauth: creating new authority file /home/c512/.serverauth.69871 X.Org X Server 1.7.5 Release Date: 2010-02-16 X Protocol Version 11, Revision 0 Build Operating System: FreeBSD 8.0-RELEASE-p2 i386 Current Operating System: FreeBSD rt.hm.com 8.1-PRERELEASE FreeBSD 8.1-PRERELEASE #0: Sat Jun 5 22:46:16 EDT 2010 c...@rt.hm.com:/usr/obj/usr/src/sys/MY8XKERNEL i386 Build Date: 31 May 2010 11:11:42PM Current version of pixman: 0.16.6 Before reporting problems, check http://wiki.x.org to make sure that you have the latest version. Markers: (--) probed, (**) from config file, (==) default setting, (++) from command line, (!!) notice, (II) informational, (WW) warning, (EE) error, (NI) not implemented, (??) unknown. (==) Log file: /var/log/Xorg.0.log, Time: Fri Jun 18 00:20:24 2010 (==) Using config file: /etc/X11/xorg.conf record: RECORD extension enabled at configure time. record: This extension is known to be broken, disabling extension now.. record: http://bugs.freedesktop.org/show_bug.cgi?id=20500 waiting for X server to shut down ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re : change kde4 (pkg) to kde4 (ports)
Why do you want to do that ? Packages are in this directory by default : /usr/ports/distfiles/ --- En date de : Jeu 17.6.10, Giorgos Tsiapaliokas terie...@gmail.com a écrit : De: Giorgos Tsiapaliokas terie...@gmail.com Objet: change kde4 (pkg) to kde4 (ports) À: freebsd-questions@freebsd.org Date: Jeudi 17 juin 2010, 18h46 hello, i have installed kde4 via the package system. how can i install the kde4 via ports system without deleting the packages and then compiling them? thank you for answering :) ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: PDF storage software recommendations?
On 06/17/10 22:54, Dale Scott wrote: I'm experimenting with OpenDocMan (PHP/MySQL, http://www.opendocman.com/) We evaluated OpenDocMan (not me personally) and ended up choosing KnowledgeTree. YMMV. bye av. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Re : change kde4 (pkg) to kde4 (ports)
On Fri, 18 Jun 2010 08:21:53 + (GMT), Alexandre L. axel...@ymail.com wrote: Why do you want to do that ? Packages are in this directory by default : /usr/ports/distfiles/ --- En date de : Jeu 17.6.10, Giorgos Tsiapaliokas terie...@gmail.com a écrit : De: Giorgos Tsiapaliokas terie...@gmail.com Objet: change kde4 (pkg) to kde4 (ports) À: freebsd-questions@freebsd.org Date: Jeudi 17 juin 2010, 18h46 hello, i have installed kde4 via the package system. how can i install the kde4 via ports system without deleting the packages and then compiling them? thank you for answering :) Not fully correct. The directory /usr/ports/distfiles/ does not contain packages. It contains distribution files, those are usually archives full of source code and other resources that a port needs to be processed. To the OP: If you've already installed KDE4 from packages, the step make in the KDE4 ports directory will first generate KDE, and the step make install will install it. You have to deinstall (make deinstall) your KDE (from packages) first. To the system, it doesn't matter if a program has been installed from ports or packages; packages can be seen as precompiled and compressed ports, while ports per se are the material to create the programs (sources, resources, images, and so on). If you want to create packages from a port (or maybe package) you already have installed, use make package. This will generate a compressed archive in /usr/ports/packages/ subtree. You can install those packages on other systems, for example, without the need for compiling or fetching (a good solution for off-line operations). If this wasn't the answer you were searchig for, try to ask in a more precise way. :-) -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Need help with SATA disk timing out in 8.1 Beta
Have you changed the cable? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Re : change kde4 (pkg) to kde4 (ports)
Thank you for correcting me --- En date de : Ven 18.6.10, Polytropon free...@edvax.de a écrit : De: Polytropon free...@edvax.de Objet: Re: Re : change kde4 (pkg) to kde4 (ports) À: Alexandre L. axel...@ymail.com Cc: Giorgos Tsiapaliokas terie...@gmail.com, freebsd-questions@freebsd.org Date: Vendredi 18 juin 2010, 8h47 On Fri, 18 Jun 2010 08:21:53 + (GMT), Alexandre L. axel...@ymail.com wrote: Why do you want to do that ? Packages are in this directory by default : /usr/ports/distfiles/ --- En date de : Jeu 17.6.10, Giorgos Tsiapaliokas terie...@gmail.com a écrit : De: Giorgos Tsiapaliokas terie...@gmail.com Objet: change kde4 (pkg) to kde4 (ports) À: freebsd-questions@freebsd.org Date: Jeudi 17 juin 2010, 18h46 hello, i have installed kde4 via the package system. how can i install the kde4 via ports system without deleting the packages and then compiling them? thank you for answering :) Not fully correct. The directory /usr/ports/distfiles/ does not contain packages. It contains distribution files, those are usually archives full of source code and other resources that a port needs to be processed. To the OP: If you've already installed KDE4 from packages, the step make in the KDE4 ports directory will first generate KDE, and the step make install will install it. You have to deinstall (make deinstall) your KDE (from packages) first. To the system, it doesn't matter if a program has been installed from ports or packages; packages can be seen as precompiled and compressed ports, while ports per se are the material to create the programs (sources, resources, images, and so on). If you want to create packages from a port (or maybe package) you already have installed, use make package. This will generate a compressed archive in /usr/ports/packages/ subtree. You can install those packages on other systems, for example, without the need for compiling or fetching (a good solution for off-line operations). If this wasn't the answer you were searchig for, try to ask in a more precise way. :-) -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
RE:change kde4 (pkg) to kde4 (ports)
i didn't understand your answers.. can u give me commands?? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: change kde4 (pkg) to kde4 (ports)
On Fri, 18 Jun 2010 12:26:07 +0300, Giorgos Tsiapaliokas terie...@gmail.com wrote: i didn't understand your answers.. can u give me commands?? I would try - but I'm not sure I did understand you correctly. Can you please specify (1) what's your current state and (2) what you do want to achieve (including requirements)? Keep in mind English is not my native language. :-) -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Online gaming and file downloads - latency hell!
On 2010-06-16 02:51, Modulok wrote: Yo, I have a FreeBSD box acting as a router between me and the Internet. Whenever someone on the local network downloads something, the other connections have a really high latency. A second or more. For people who like to download large files and play online games, it's not good. I tried traffic shaping with PF, which works - almost: I tried the home example in the PF book, but it doesn't work out so well. I can throttle users with no trouble, but even so that doesn't seem to help the latency issue unless I choke the 'big file download' users almost completely off. It's like nothing helps. I tried a priority based queue where all traffic on the gaming ports was placed in front of all other traffic, and while I saw a very mild improvement, latency was still really pitiful. Is there anything else I can do? Anyone have a similar setup and wish to share config files? Are there some sysctl's that would help this out or something. I'm almost ready to just buy a 'gaming' *gag* router which implements their own brand of QoS, but don't want to sink to that level if I don't have to. Help! -Modulok- Traffic shaping on your side when downloading unfortunately doesn't help you. The data has already been transferred across your cable or DSL connection by then and reordering any packets on your side will not change the latency. Traffic shaping your download has to be performed at your upstream router which you probably don't control. PF can help you traffic shape your outgoing traffic. I have used it for this for the past 6 years to help me maintain a low and stable ping while I play online, even if I upload simultaneously. I've read about people trying to throttle outgoing ACKs to slow down their download but that still wouldn't rearrange any incoming data packets so I don't see how that would help. I haven't tried it myself though but neither have I read about anyone successfully accomplishing this. Regards Morgan ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Problem filtering port between host and jail.
2010/6/17 David DEMELIER demelier.da...@gmail.com: Hi, Because I don't want to enable jail_sysvipc, I installed PostgreSQL on my host and it works fine. The problem is accessing a database within a jail. The jails are nat'ed and they can connect to the Internet. However trying psql -h 192.168.1.23 -U markand markanddb time out and said : psql: could not connect to server: Operation timed out Is the server running on host 192.168.1.23 and accepting TCP/IP connections on port 5432? my /etc/pf.conf is like : # General macros. ext_if=rl0 int_if=lo1 jails=10.0.0.0/24 host_ip = 192.168.1.23 # Nat for jails. nat on $ext_if from $jails to any - $ext_if # Redirecting and accepting ports to jails. rdr pass inet proto tcp from any to port $ports_users - $jail_users rdr pass inet proto tcp from any to port $ports_www - $jail_www # Filtering ports. block log all # Filtering in. pass in on $ext_if proto tcp from any to port $ports # Filtering out. pass out all So I tried something like : pass out quick from $jails to host but it timeout too. With tcpdump I can see these messages : 00:00:12.202519 rule 0/0(match): block out on lo1: markand.malikania.fr.postgresql 10.0.0.30.33431: tcp 20 [bad hdr length 0 - too short, 20] I don't understand what i'm doing wrong here, if anyone can solve this, it would be great! Kind regards. -- Demelier David Please ignore, I switched the jails to use the physical interface and now it works. -- Demelier David ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Online gaming and file downloads - latency hell!
On Fri, 18 Jun 2010 12:11:48 +0200 Morgan Wesström freebsd-questi...@pp.dyndns.biz wrote: On 2010-06-16 02:51, Modulok wrote: Yo, I have a FreeBSD box acting as a router between me and the Internet. Whenever someone on the local network downloads something, the other connections have a really high latency. A second or more. For people who like to download large files and play online games, it's not good. Traffic shaping on your side when downloading unfortunately doesn't help you. The data has already been transferred across your cable or DSL connection by then and reordering any packets on your side will not change the latency. Traffic shaping your download has to be performed at your upstream router which you probably don't control. If the downloads are ordinary http and ftp, rather than P2P, you can use squid to throttle at the TCP level. It needs to be built with delay pools. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
RE:change kde4 (pkg) to kde4 (ports)
well, i have install kde4 with the package system and i want to reinstall it via the ports system. because my system will have better perfomance and less hardware requierements. the previous time that i had install kde4 via ports it was working fine but this time with packages it freezes and stacks a lot. i know that i can reinstall the packages and install them again as ports but i don't want to do that,i want to convert the package installiation into ports installiation. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Obtaining / downloading latest release of freeBSD
On Friday 18 June 2010 07:34:06 Matthew Seaman wrote: Now, you're going to need to write that .iso image to a CD. Exactly what software you use to do that depends on what OS you're using at the moment. Assuming you're running Windows of some form, then Nero is a good choice: http://www.nero.com/eng/downloads-nero9-free.php If you'd prefer not to have to register, I've been using ImgBurn from http://www.imgburn.com/ and would recommend it - it's really easy to use. Also, on Windows 7 ISO writing is built-in - just right-click and choose the option to write the file to CD/DVD. -- Bruce Cran ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Need help with SATA disk timing out in 8.1 Beta
Yes, twice. On 6/18/2010 4:52 AM, Matthias Gamsjager wrote: Have you changed the cable? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Re : Xorg fails to start after upgrading to 8 stable
Now I upgraded all the ports using both 'portupgrade -af' and 'portmanager -u'. Some ports failed upgrading though. How do I reinstall Xorg? Can I delete it and re-install? Thanks, On Fri, 18 Jun 2010, Alexandre L. wrote: When you upgrade your system to a major release (7.x 8.x), you MUST re-install all your ports. See the handbook http://www.freebsd.org/doc/en/books/handbook/ports-using.html and the section 4.5.4 Upgrading Ports. --- En date de : Ven 18.6.10, Xihong Yin x...@gmx.com a écrit : De: Xihong Yin x...@gmx.com Objet: Xorg fails to start after upgrading to 8 stable À: freebsd-questions@freebsd.org Date: Vendredi 18 juin 2010, 4h30 I upgraded from 7.2 to 8.0. Xorg can't start. I got the following message when I type 'startx'. I already upgraded Xorg, hal and libusb to the latest. Anybody can help? Script started on Fri Jun 18 00:20:21 2010 c...@router1:~ startx xauth: creating new authority file /home/c512/.serverauth.69871 X.Org X Server 1.7.5 Release Date: 2010-02-16 X Protocol Version 11, Revision 0 Build Operating System: FreeBSD 8.0-RELEASE-p2 i386 Current Operating System: FreeBSD rt.hm.com 8.1-PRERELEASE FreeBSD 8.1-PRERELEASE #0: Sat Jun 5 22:46:16 EDT 2010 c...@rt.hm.com:/usr/obj/usr/src/sys/MY8XKERNEL i386 Build Date: 31 May 2010 11:11:42PM Current version of pixman: 0.16.6 Before reporting problems, check http://wiki.x.org to make sure that you have the latest version. Markers: (--) probed, (**) from config file, (==) default setting, (++) from command line, (!!) notice, (II) informational, (WW) warning, (EE) error, (NI) not implemented, (??) unknown. (==) Log file: /var/log/Xorg.0.log, Time: Fri Jun 18 00:20:24 2010 (==) Using config file: /etc/X11/xorg.conf record: RECORD extension enabled at configure time. record: This extension is known to be broken, disabling extension now.. record: http://bugs.freedesktop.org/show_bug.cgi?id=20500 waiting for X server to shut down ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
system is under attack (what can I do more?)
Dear freebsd list, My server, which is a amd64 system running freebsd 8.0 is currently under attack from a botnet or something. Take a look at my /var/log/auth.log file: Jun 18 12:00:00 dual newsyslog[34486]: logfile turned over due to size100K Jun 18 12:00:44 dual sshd[34500]: Address 78.5.23.41 maps to 78-5-23-41-static.albacom.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jun 18 12:00:44 dual sshd[34500]: Invalid user po from 78.5.23.41 Jun 18 12:00:44 dual sshd[34500]: error: PAM: authentication error for illegal user po from 78.5.23.41 Jun 18 12:00:44 dual sshd[34500]: Failed keyboard-interactive/pam for invalid user po from 78.5.23.41 port 1 ssh2 Jun 18 12:02:17 dual sshd[34503]: Invalid user pol from 211.138.112.241 Jun 18 12:02:17 dual sshd[34503]: error: PAM: authentication error for illegal user pol from 211.138.112.241 Jun 18 12:02:17 dual sshd[34503]: Failed keyboard-interactive/pam for invalid user pol from 211.138.112.241 port 59172 ssh2 Jun 18 12:03:36 dual sshd[34506]: Invalid user polo from 210.59.145.5 Jun 18 12:03:36 dual sshd[34506]: error: PAM: authentication error for illegal user polo from 210.59.145.5 Jun 18 12:03:36 dual sshd[34506]: Failed keyboard-interactive/pam for invalid user polo from 210.59.145.5 port 56517 ssh2 Jun 18 12:04:34 dual sshd[34509]: Invalid user poning from 58.68.131.50 Jun 18 12:04:35 dual sshd[34509]: error: PAM: authentication error for illegal user poning from 58.68.131.50 Jun 18 12:04:35 dual sshd[34509]: Failed keyboard-interactive/pam for invalid user poning from 58.68.131.50 port 55580 ssh2 Jun 18 12:06:11 dual sshd[34514]: User pop from 220.191.131.209 not allowed because not listed in AllowUsers Jun 18 12:06:12 dual sshd[34514]: error: PAM: authentication error for illegal user pop from 220.191.131.209 Jun 18 12:06:12 dual sshd[34514]: Failed keyboard-interactive/pam for invalid user pop from 220.191.131.209 port 50786 ssh2 Jun 18 12:08:44 dual sshd[34517]: Invalid user popo from 92.79.130.80 Jun 18 12:08:44 dual sshd[34517]: error: PAM: authentication error for illegal user popo from 92.79.130.80 Jun 18 12:08:44 dual sshd[34517]: Failed keyboard-interactive/pam for invalid user popo from 92.79.130.80 port 34021 ssh2 Jun 18 12:08:51 dual sshd[34520]: User pop from 190.41.164.23 not allowed because not listed in AllowUsers Jun 18 12:08:52 dual sshd[34520]: error: PAM: authentication error for illegal user pop from 190.41.164.23 Jun 18 12:08:52 dual sshd[34520]: Failed keyboard-interactive/pam for invalid user pop from 190.41.164.23 port 26359 ssh2 Jun 18 12:10:30 dual sshd[34525]: Invalid user poppy from 222.68.200.116 Jun 18 12:10:31 dual sshd[34525]: error: PAM: authentication error for illegal user poppy from 222.68.200.116 Jun 18 12:10:31 dual sshd[34525]: Failed keyboard-interactive/pam for invalid user poppy from 222.68.200.116 port 56770 ssh2 Jun 18 12:11:56 dual sshd[34540]: Invalid user porno from 81.74.38.142 Jun 18 12:11:56 dual sshd[34540]: error: PAM: authentication error for illegal user porno from 81.74.38.142 Jun 18 12:11:56 dual sshd[34540]: Failed keyboard-interactive/pam for invalid user porno from 81.74.38.142 port 10478 ssh2 Jun 18 12:13:05 dual sshd[34543]: Invalid user port from 62.218.125.149 Jun 18 12:13:05 dual sshd[34543]: error: PAM: authentication error for illegal user port from 62.218.125.149 Jun 18 12:13:05 dual sshd[34543]: Failed keyboard-interactive/pam for invalid user port from 62.218.125.149 port 54959 ssh2 Jun 18 12:14:13 dual sshd[34546]: Invalid user portal from 195.5.12.170 Jun 18 12:14:13 dual sshd[34546]: error: PAM: authentication error for illegal user portal from 195.5.12.170 Jun 18 12:14:13 dual sshd[34546]: Failed keyboard-interactive/pam for invalid user portal from 195.5.12.170 port 59904 ssh2 Jun 18 12:15:53 dual sshd[34551]: Invalid user portal from 201.24.215.217 Jun 18 12:15:53 dual sshd[34551]: error: PAM: authentication error for illegal user portal from 201.24.215.217 Jun 18 12:15:53 dual sshd[34551]: Failed keyboard-interactive/pam for invalid user portal from 201.24.215.217 port 61107 ssh2 Jun 18 12:18:20 dual sshd[34554]: Invalid user pos from 211.97.71.218 Jun 18 12:18:21 dual sshd[34554]: error: PAM: authentication error for illegal user pos from 211.97.71.218 Jun 18 12:18:21 dual sshd[34554]: Failed keyboard-interactive/pam for invalid user pos from 211.97.71.218 port 53424 ssh2 Jun 18 12:19:28 dual sshd[34557]: Invalid user pos from 200.171.22.80 Jun 18 12:19:28 dual sshd[34557]: error: PAM: authentication error for illegal user pos from 200.171.22.80 Jun 18 12:19:28 dual sshd[34557]: Failed keyboard-interactive/pam for invalid user pos from 200.171.22.80 port 56309 ssh2 Jun 18 12:21:12 dual sshd[34562]: Invalid user postfix from 165.98.133.98 Jun 18 12:21:12 dual sshd[34562]: error: PAM: authentication error for illegal user postfix from up.upoli.edu.ni Jun 18 12:21:12 dual sshd[34562]: Failed keyboard-interactive/pam
Re: system is under attack (what can I do more?)
Hello, 1, maybe the line with the rule is in a bad place in the conf, but even if it's working it's possible that it wont be triggered. As far as I can see there are 30 sec interval pauses between attacks from one host. Your rule is looking for connections in 30 sec ranges. 2,You should use a program that monitors the logs, and then passes the ips after 3 unsuccessful logins to the bruteforce table. See bruteforceblocker, but there are a bunch of other programs for this. Regards, MB. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: system is under attack (what can I do more?)
On Friday 18 June 2010 13:23:27 Dino Vliet wrote: Dear freebsd list, My server, which is a amd64 system running freebsd 8.0 is currently under attack from a botnet or something. Take a look at my /var/log/auth.log file: [...] I looked at this and especially the way they seem to try different usernames (not fully random though) is quite clever. The postgres user they tried, worried me at first but fortunately I realized that postgres wasn't running on that server. I have configured the AllowUser directive in sshd_config and it only contains 2 usernames which can log in from sshd remotely. Another line of defence is my pf firewall config which has the following in it: pass in proto tcp from any to any port ssh keep state (max-src-conn 3, max-src-conn-rate 2/30, overload bruteforce flush global) However, almost none of the ip-addresses above end up in that bruteforce table. Now my questions are: 1) why doesn't ip-address 190.38.59.236 for instance isn't triggered by my pf rule? Is that because this connection stays within the limits? Should I change that, but then again, considering the attack ratewhat values would be suitable? 2) are there other things I could do? These types of ssh probes are common nowadays. Unless you have a misconfigured server you don't need to worry about users like postgres, uucp, games, bin, operator, daemon etc. because they won't have a shell configured and so won't be allowed to login. The attacks have recently started working around rate limits by only trying from a single address every few minutes. Since you're already using the AllowUsers directive I suspect you're not really at much risk, but there are a few things you could do: 1. Don't allow password authentication. It might be a bit of a hassle to set up, but it's so much simpler once it's running to authenticate via ssh keys and it stops the bots in their tracks. 2. Block IP ranges that you won't login from, or, if you know of places you will login from, only allow connections from those IP addresses. 3. Move sshd to a different port. I don't like this workaround since although it stops the attacks it's nonstandard and means you have to remember to specify the port each time you connect. -- Bruce Cran ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: system is under attack (what can I do more?)
On 6/18/2010 8:23 AM, Dino Vliet wrote: 2) are there other things I could do? Brgds Dino Look at ports/security/sshguard and ports/security/bruteblock. I use sshguard with ipfilter, but it works with pf and ipfw as well. It is very simple to set up and gets the job done. Jerry ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: change kde4 (pkg) to kde4 (ports)
On Friday 18 June 2010 22:21:30 Giorgos Tsiapaliokas wrote: well, i have install kde4 with the package system and i want to reinstall it via the ports system. because my system will have better perfomance and less hardware requierements. the previous time that i had install kde4 via ports it was working fine but this time with packages it freezes and stacks a lot. i know that i can reinstall the packages and install them again as ports but i don't want to do that,i want to convert the package installiation into ports installiation. use portupgrade or portmaster and carefull read ports/UPDATING before doing anything to get a correct procedures and order of upgrade -- Dima Red Fox Panov @ Home | C73E 2B72 1FFD 61BD E206 1234 A626 76ED 93E3 B018 Khabarovsk, Russia | 2D30 2CCB 9984 130C 6F87 BAFC FB8B A09D D539 8F29 k...@freebsd Team | FreeBSD committer since 10.08.2009 | FreeBSD since Sept 1995 Twitter: fluffy_khv | Skype: dima.panov | Jabber.[org|ru]/GTalk/QIP: fluffy.khv ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Perl Dumping Core
On Wed, 16 Jun 2010 15:18:19 +0100, Matthew Seaman
m.sea...@infracaninophile.co.uk wrote:
On 16/06/2010 15:11:15, Tim Daneliuk wrote:
I am running 8.1-PRERELEASE and seeing a half dozen of these a day:
(perl5.10.1), uid 0: exited on signal 11
Anyone have theories on this?
You have a perl process or processes owned by root that are dying due to
segmentation violations.
I've seen perl core dumps a few times too. They seem to be triggered by
Gnome bug-buddy, but I haven't had much time to investigate why/when
they are triggered. A typical Perl traceback here looks like this:
: (gdb) bt
: #0 0x28334d77 in kill () at kill.S:3
: #1 0x28239017 in _raise (sig=6) at /usr/src/lib/libthr/thread/thr_sig.c:185
: #2 0x2833386a in abort () at /usr/src/lib/libc/stdlib/abort.c:65
: #3 0x282b7113 in arena_dalloc_bin (arena=0x8049c60, chunk=0x2880,
ptr=0x28900e60, mapelm=0x28800c14) at /usr/src/lib/libc/stdlib/malloc.c:2570
: #4 0x282b8bfa in idalloc (ptr=0x28900e60) at
/usr/src/lib/libc/stdlib/malloc.c:4302
: #5 0x282b9b7a in free (ptr=0x28900e60) at
/usr/src/lib/libc/stdlib/malloc.c:6132
: #6 0x2832e53b in __clean_env (freeVars=true) at
/usr/src/lib/libc/stdlib/getenv.c:236
: #7 0x282631d0 in ?? () from /lib/libc.so.7
: #8 0x28347000 in ?? () from /lib/libc.so.7
: #9 0x2807b738 in ?? () from /libexec/ld-elf.so.1
: #10 0x7fbfece8 in ?? ()
: #11 0x283385bc in _fini () from /lib/libc.so.7
: #12 0x28092300 in ?? ()
: #13 0x2807b738 in ?? () from /libexec/ld-elf.so.1
: #14 0x7fbfece8 in ?? ()
: #15 0x2804ee95 in objlist_call_fini (list=0x28089190, force=40 '(',
lockstate=0x132e46b) at /usr/src/libexec/rtld-elf/rtld.c:1640
: Previous frame inner to this frame (corrupt stack?)
: (gdb)
This isn't very helpful for *all* Perl core dumps, but it may lead
someone towards obtaining a better traceback...
pgpOMXkQ6Ur2c.pgp
Description: PGP signature
Re: change kde4 (pkg) to kde4 (ports)
On Fri, 18 Jun 2010 14:21:30 +0300, Giorgos Tsiapaliokas terie...@gmail.com wrote: i know that i can reinstall the packages and install them again as ports but i don't want to do that,i want to convert the package installiation into ports installiation. Okay, I think I basically understand. :-) First of all, I think you mean to DE-install the installed packages, not RE-install them. In oder to install KDE from ports, you need to removed the currently installed software (no matter if it has initially been installed by packages or ports). The de-installation of installed software can be done with pkg_delete, or with make deinstall from the ports infra- structure. In order to do the last thing, you would do something like this: # cd /usr/ports/x1/kde4 # make # make deinstall # make reinstall This procedure would first compile all the stuff, then remove the existing installation, and finally installing the just compiled new software. See if you need make config-recursive, too; see man 7 ports for details. There's one thing I'm not sure about, maybe someone else could explain this: KDE4 as in /usr/ports/x1/kde4 is a so called meta-port. If someone does make deinstall for a meta-port, will it run make deinstall on all its parts (which are ports)? If you're using a port package management tool, such as portmaster, portupgrade or portmanager, I think the solution is much easier: # portupgrade -Rf kde4 See man portupgrade for details. The portupgrade program acts as a front-end to the ports infrastructure, and so controls the make, make install, make clean and so on steps. -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Xorg fails to start after upgrading to 8 stable
On Fri, 18 Jun 2010 08:20:42 -0400 (Eastern Daylight Time) Xihong Yin x...@gmx.com articulated: Now I upgraded all the ports using both 'portupgrade -af' and 'portmanager -u'. Some ports failed upgrading though. How do I reinstall Xorg? Can I delete it and re-install? Please don't top post. If you don't know what that means, Google for it. What ports did not update (fail)? Did you read the UPDATING file to insure that there are no some intermediate steps that you should have taken first? Also, if using portmanager, you would be better served using: portmanager -u -l -p It would properly update dependencies and create a log that you could view. Of course, always start with a fresh update of your ports tree. I usually start by deleting everything in the /usr/ports/distfiles directory. -- Jerry ✌ freebsd.u...@seibercom.net Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the Reply-To header. __ I don't object to sex before marriage, but two minutes before?!? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
quasselcore rc.d
Does anyone have a rc.d script to start quasselcore? A search of the web didn't produce any hits that I saw. If not, do I understand that using tje daemon command is the way to go? Thanks Kurt Hindenburg kurt.hindenb...@gmail.com ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: system is under attack (what can I do more?)
[...] Look at ports/security/sshguard and ports/security/bruteblock. I use sshguard with ipfilter, but it works with pf and ipfw as well. It is very simple to set up and gets the job done. Jerry ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org Hi just wanted to say thanks for stating this as I'm also looking for a BSD version of fail2ban which I couldn't find in the FreeBSD ports collection.. A real problem with this kind of attack is that even though brute force in nature it can also work like a DoS if the server is having to handle X amount of break-ins per second and also if multiple people are trying to hack the system at the same time, it can steal bandwidth too as let's face it not everyone has high powered enterprise grade MetroEthernet or OC12+ Trunks WAN connectivity. A lot of people are still on ADSL or even Dial-Up. Regards, Kaya ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: change kde4 (pkg) to kde4 (ports)
On Saturday 19 June 2010 01:28:51 Polytropon wrote: On Fri, 18 Jun 2010 14:21:30 +0300, Giorgos Tsiapaliokas terie...@gmail.com wrote: i know that i can reinstall the packages and install them again as ports but i don't want to do that,i want to convert the package installiation into ports installiation. Okay, I think I basically understand. :-) First of all, I think you mean to DE-install the installed packages, not RE-install them. In oder to install KDE from ports, you need to removed the currently installed software (no matter if it has initially been installed by packages or ports). The de-installation of installed software can be done with pkg_delete, or with make deinstall from the ports infra- structure. In order to do the last thing, you would do something like this: # cd /usr/ports/x1/kde4 # make # make deinstall # make reinstall Not right. By this way you deinstall metaport only. This procedure would first compile all the stuff, then remove the existing installation, and finally installing the just compiled new software. See if you need make config-recursive, too; see man 7 ports for details. There's one thing I'm not sure about, maybe someone else could explain this: KDE4 as in /usr/ports/x1/kde4 is a so called meta-port. If someone does make deinstall for a meta-port, will it run make deinstall on all its parts (which are ports)? If you're using a port package management tool, such as portmaster, portupgrade or portmanager, I think the solution is much easier: # portupgrade -Rf kde4 Wrong again. Please carefully read ports/UPDATING for upgrade instructions for all time since your binary package was releases. See man portupgrade for details. The portupgrade program acts as a front-end to the ports infrastructure, and so controls the make, make install, make clean and so on steps. -- Dima Red Fox Panov @ Home | C73E 2B72 1FFD 61BD E206 1234 A626 76ED 93E3 B018 Khabarovsk, Russia | 2D30 2CCB 9984 130C 6F87 BAFC FB8B A09D D539 8F29 k...@freebsd Team | FreeBSD committer since 10.08.2009 | FreeBSD since Sept 1995 Twitter: fluffy_khv | Skype: dima.panov | Jabber.[org|ru]/GTalk/QIP: fluffy.khv signature.asc Description: This is a digitally signed message part.
Re: change kde4 (pkg) to kde4 (ports)
On Sat, 19 Jun 2010 02:34:25 +1100, Dima Panov flu...@freebsd.org wrote:
On Saturday 19 June 2010 01:28:51 Polytropon wrote:
# cd /usr/ports/x1/kde4
# make
# make deinstall
# make reinstall
Not right. By this way you deinstall metaport only.
Ha - I *thought* something like that (as kde4 is a metaport).
An option would be to remove all kde4 related stuff by pkg_delete
and then use the obvious make install for the metaport,
resulting in installing the current versions of the metaport's
component and the dependencies (if also removed).
If you're using a port package management tool, such as
portmaster, portupgrade or portmanager, I think the solution
is much easier:
# portupgrade -Rf kde4
Wrong again. Please carefully read ports/UPDATING for upgrade instructions
for all time since your binary package was releases.
Entry 20090804 comes with an example:
# pkg_delete -f phonon-4\* phonon-gstreamer\* kdebase-\*4\* kdepim-4\*
# portmaster -a (or portupgrade -a)
# cd ${PORTSDIR}/x11/kde4 make config make install clean
I'm not sure if the OP's binary packages were from 8.0-RELEASE
or already newer (e. g. obtained via pkg_add -r from Latest/).
N CnACN6O 3A NH(I)OPMAU,NN. :-)
--
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: system is under attack (what can I do more?)
Hi, On 6/18/10 11:29 AM, Kaya Saman wrote: [...] Look at ports/security/sshguard and ports/security/bruteblock. I use sshguard with ipfilter, but it works with pf and ipfw as well. It is very simple to set up and gets the job done. Hi just wanted to say thanks for stating this as I'm also looking for a BSD version of fail2ban which I couldn't find in the FreeBSD ports collection.. security/py-fail2ban Regards, -- Glen Barber ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: system is under attack (what can I do more?)
On 18/06/2010 18:48, Glen Barber wrote: Hi, On 6/18/10 11:29 AM, Kaya Saman wrote: [...] Look at ports/security/sshguard and ports/security/bruteblock. I use sshguard with ipfilter, but it works with pf and ipfw as well. It is very simple to set up and gets the job done. Hi just wanted to say thanks for stating this as I'm also looking for a BSD version of fail2ban which I couldn't find in the FreeBSD ports collection.. security/py-fail2ban Regards, Ah.. Thanks!! :-) Regards, Kaya ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: system is under attack (what can I do more?)
On Fri, Jun 18, 2010 at 11:48:25AM -0400, Glen Barber wrote: Hi, On 6/18/10 11:29 AM, Kaya Saman wrote: [...] Look at ports/security/sshguard and ports/security/bruteblock. I use sshguard with ipfilter, but it works with pf and ipfw as well. It is very simple to set up and gets the job done. Hi just wanted to say thanks for stating this as I'm also looking for a BSD version of fail2ban which I couldn't find in the FreeBSD ports collection.. security/py-fail2ban Doesn't FreeBSD's version of pf support the overload feature? This is how we typically manage ssh bruteforce attempts in OpenBSD/pf-land. -- Jason Dixon OmniTI Computer Consulting, Inc. jdi...@omniti.com 443.325.1357 x.241 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: system is under attack (what can I do more?)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kaya Saman wrote: On 18/06/2010 18:48, Glen Barber wrote: Hi, On 6/18/10 11:29 AM, Kaya Saman wrote: [...] Look at ports/security/sshguard and ports/security/bruteblock. I use sshguard with ipfilter, but it works with pf and ipfw as well. It is very simple to set up and gets the job done. Hi just wanted to say thanks for stating this as I'm also looking for a BSD version of fail2ban which I couldn't find in the FreeBSD ports collection.. security/py-fail2ban Regards, Ah.. Thanks!! :-) Regards, Kaya The make search target is useful for finding ports when you only have a keyword or name to go on: # cd /usr/ports/ # make search The search target requires a keyword parameter or name parameter, e.g.: make search key=somekeyword ormake search name=somekeyword # make name=fail2ban search Port: py26-fail2ban-0.8.4 Path: /usr/ports/security/py-fail2ban Info: scans log files and bans IP that makes too many password failures. Maint: t...@pc-tony.com B-deps: python26-2.6.5 R-deps: python26-2.6.5 WWW:http://www.fail2ban.org/wiki/index.php/Main_Page Hope that helps, Greg - -- Greg Larkin http://www.FreeBSD.org/ - The Power To Serve http://www.sourcehosting.net/ - Ready. Set. Code. http://twitter.com/sourcehosting/ - Follow me, follow you -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iD8DBQFMG5fT0sRouByUApARArz0AJ9cAxdoR9jAXdmliiEECguLYDrDbgCeJjCP /2niys4x+eXgooHg3uOf1gw= =GycM -END PGP SIGNATURE- ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: system is under attack (what can I do more?)
Am 18.06.10 17:55, schrieb Jason Dixon: Doesn't FreeBSD's version of pf support the overload feature? This is how we typically manage ssh bruteforce attempts in OpenBSD/pf-land. and what you want to do if a user connects authorizied very often in lets say 10 seconds? If you work e.g. with subversion or other tunneled connection 10 connections in 5 seconds is not seldom. On pf-level you are not able to distinquish between successfull or denied connection or? Bye, Matthias -- Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the universe trying to produce bigger and better idiots. So far, the universe is winning. -- Rich Cook ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: system is under attack (what can I do more?)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 18/06/2010 16:55:14, Jason Dixon wrote: Doesn't FreeBSD's version of pf support the overload feature? This is how we typically manage ssh bruteforce attempts in OpenBSD/pf-land. Sure it does. pf in FreeBSD 7.2+ or 8.0+ is basically the same as in OpenBSD 4.3. Overload works pretty well against bruteforcing, but some of the bruteforcers are getting wise to that sort of protection and not hitting an individual machine frequently enough to trigger the lock-out. Of course, this does mean that they are going slowly enough that they aren't eating your bandwidth or flooding your log files quite so much, but it is still annoying. Cheers, Matthew - -- Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate JID: matt...@infracaninophile.co.uk Kent, CT11 9PW -BEGIN PGP SIGNATURE- Version: GnuPG/MacGPG2 v2.0.14 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkwbrFsACgkQ8Mjk52CukIyE7QCeNnNAI7Mr5qMPJJVnlS+qeetA eIAAn1+KUuNHveo6E2Pcenvb8UQrrvVG =WMxd -END PGP SIGNATURE- ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: system is under attack (what can I do more?)
On 06/18/2010 06:59 PM, Greg Larkin wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kaya Saman wrote: On 18/06/2010 18:48, Glen Barber wrote: Hi, On 6/18/10 11:29 AM, Kaya Saman wrote: [...] Look at ports/security/sshguard and ports/security/bruteblock. I use sshguard with ipfilter, but it works with pf and ipfw as well. It is very simple to set up and gets the job done. Hi just wanted to say thanks for stating this as I'm also looking for a BSD version of fail2ban which I couldn't find in the FreeBSD ports collection.. security/py-fail2ban Regards, Ah.. Thanks!! :-) Regards, Kaya The make search target is useful for finding ports when you only have a keyword or name to go on: # cd /usr/ports/ # make search The search target requires a keyword parameter or name parameter, e.g.: make search key=somekeyword ormake search name=somekeyword # make name=fail2ban search Port: py26-fail2ban-0.8.4 Path: /usr/ports/security/py-fail2ban Info: scans log files and bans IP that makes too many password failures. Maint: t...@pc-tony.com B-deps: python26-2.6.5 R-deps: python26-2.6.5 WWW:http://www.fail2ban.org/wiki/index.php/Main_Page Hope that helps, Greg - -- Greg Larkin http://www.FreeBSD.org/ - The Power To Serve http://www.sourcehosting.net/ - Ready. Set. Code. http://twitter.com/sourcehosting/ - Follow me, follow you -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iD8DBQFMG5fT0sRouByUApARArz0AJ9cAxdoR9jAXdmliiEECguLYDrDbgCeJjCP /2niys4x+eXgooHg3uOf1gw= =GycM -END PGP SIGNATURE- Thanks Greg!! That is useful and will probably save me a lot of digging in the future when attempting to get other things migrated over from Linux and/or Solaris etc :-) Regards, Kaya ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Followup On Perl Dumping Core
I have rebuilt world to today's 8.1-PRERELEASE sources I have forced a rebuild of every port on the system with: portupgrade -f * I have rebooted. I am still seeing these log messages: (perl5.10.1), uid 0: exited on signal 11 The long running perl processes on this system are associated with MailScanner. MailScanner does periodically restart itself thereby killing these perl processes, but I wouldn't expect this to throw a signal 11... Ideas anyone? -- Tim Daneliuk tun...@tundraware.com PGP Key: http://www.tundraware.com/PGP/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Followup On Perl Dumping Core
Hi, On 6/18/10 2:24 PM, Tim Daneliuk wrote: I have rebuilt world to today's 8.1-PRERELEASE sources I have forced a rebuild of every port on the system with: portupgrade -f * I have rebooted. I am still seeing these log messages: (perl5.10.1), uid 0: exited on signal 11 The long running perl processes on this system are associated with MailScanner. MailScanner does periodically restart itself thereby killing these perl processes, but I wouldn't expect this to throw a signal 11... Ideas anyone? Have you recently upgraded perl without running perl-after-upgrade afterwards? Regards, -- Glen Barber ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Followup On Perl Dumping Core
On 6/18/2010 1:27 PM, Glen Barber wrote: Hi, On 6/18/10 2:24 PM, Tim Daneliuk wrote: I have rebuilt world to today's 8.1-PRERELEASE sources I have forced a rebuild of every port on the system with: portupgrade -f * I have rebooted. I am still seeing these log messages: (perl5.10.1), uid 0: exited on signal 11 The long running perl processes on this system are associated with MailScanner. MailScanner does periodically restart itself thereby killing these perl processes, but I wouldn't expect this to throw a signal 11... Ideas anyone? Have you recently upgraded perl without running perl-after-upgrade afterwards? I did upgrade perl some time ago. I do not recall if I ran perl-after-upgrade. Wouldn't the 'portupgrade -f *' take care of this, or should I go run the script now, just in case? Thanks, -- Tim Daneliuk tun...@tundraware.com PGP Key: http://www.tundraware.com/PGP/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Followup On Perl Dumping Core
On 6/18/10 2:30 PM, Tim Daneliuk wrote: Have you recently upgraded perl without running perl-after-upgrade afterwards? I did upgrade perl some time ago. I do not recall if I ran perl-after-upgrade. Wouldn't the 'portupgrade -f *' take care of this, or should I go run the script now, just in case? portupgrade does not do this for you. If you don't remember, I'd suggest running it. Regards, -- Glen Barber ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Followup On Perl Dumping Core
On 6/18/2010 1:34 PM, Glen Barber wrote: On 6/18/10 2:30 PM, Tim Daneliuk wrote: Have you recently upgraded perl without running perl-after-upgrade afterwards? I did upgrade perl some time ago. I do not recall if I ran perl-after-upgrade. Wouldn't the 'portupgrade -f *' take care of this, or should I go run the script now, just in case? portupgrade does not do this for you. If you don't remember, I'd suggest running it. Regards, Well, I just did, and it reports no changes were necessary... -- Tim Daneliuk tun...@tundraware.com PGP Key: http://www.tundraware.com/PGP/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Followup On Perl Dumping Core
On 6/18/2010 1:52 PM, Tim Daneliuk wrote: On 6/18/2010 1:34 PM, Glen Barber wrote: On 6/18/10 2:30 PM, Tim Daneliuk wrote: Have you recently upgraded perl without running perl-after-upgrade afterwards? I did upgrade perl some time ago. I do not recall if I ran perl-after-upgrade. Wouldn't the 'portupgrade -f *' take care of this, or should I go run the script now, just in case? portupgrade does not do this for you. If you don't remember, I'd suggest running it. Regards, Well, I just did, and it reports no changes were necessary... I should mention that I don't think it is actually dumping core. It's just reporting the problem in /var/log/messages... -- Tim Daneliuk tun...@tundraware.com PGP Key: http://www.tundraware.com/PGP/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Followup On Perl Dumping Core
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 18/06/2010 19:56:26, Tim Daneliuk wrote: I should mention that I don't think it is actually dumping core. It's just reporting the problem in /var/log/messages... You'll only get a core file if the current working directory of the process is writable by the process. Normally. There are various sysctls you can use to affect core-dumping: kern.corefile: process corefile name format string kern.coredump: Enable/Disable coredumps kern.sugid_coredump: Enable coredumping set user/group ID processes See core(5). It is possible to set kern.corefile to an absolute path -- eg /tmp/%N.core -- to always record corefiles in a writable directory. Also, look at setrlimit values for the maximum size core file permitted. Cheers, Matthew - -- Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate JID: matt...@infracaninophile.co.uk Kent, CT11 9PW -BEGIN PGP SIGNATURE- Version: GnuPG/MacGPG2 v2.0.14 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkwbxFQACgkQ8Mjk52CukIwOFACfWpg3voC/YqPXRWLS6NHyQZxy F0UAn178RJ7+eQvU7kygDSB24fZMsayL =QJmo -END PGP SIGNATURE- ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Followup On Perl Dumping Core
On 6/18/2010 2:09 PM, Matthew Seaman wrote: On 18/06/2010 19:56:26, Tim Daneliuk wrote: I should mention that I don't think it is actually dumping core. It's just reporting the problem in /var/log/messages... You'll only get a core file if the current working directory of the process is writable by the process. Normally. There are various sysctls you can use to affect core-dumping: kern.corefile: process corefile name format string kern.coredump: Enable/Disable coredumps kern.sugid_coredump: Enable coredumping set user/group ID processes See core(5). It is possible to set kern.corefile to an absolute path -- eg /tmp/%N.core -- to always record corefiles in a writable directory. Also, look at setrlimit values for the maximum size core file permitted. Cheers, Matthew Well ... I've figured out what's causing it, but I still don't know why. This is caused when '/usr/local/etc/rc.d/mailscanner restart' is issued from a script I run to reset the mail system. However, it does not happen every time ... go figure. --- Tim Daneliuk tun...@tundraware.com PGP Key: http://www.tundraware.com/PGP/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Followup On Perl Dumping Core
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tim Daneliuk wrote: On 6/18/2010 2:09 PM, Matthew Seaman wrote: On 18/06/2010 19:56:26, Tim Daneliuk wrote: I should mention that I don't think it is actually dumping core. It's just reporting the problem in /var/log/messages... You'll only get a core file if the current working directory of the process is writable by the process. Normally. There are various sysctls you can use to affect core-dumping: kern.corefile: process corefile name format string kern.coredump: Enable/Disable coredumps kern.sugid_coredump: Enable coredumping set user/group ID processes See core(5). It is possible to set kern.corefile to an absolute path -- eg /tmp/%N.core -- to always record corefiles in a writable directory. Also, look at setrlimit values for the maximum size core file permitted. Cheers, Matthew Well ... I've figured out what's causing it, but I still don't know why. This is caused when '/usr/local/etc/rc.d/mailscanner restart' is issued from a script I run to reset the mail system. However, it does not happen every time ... go figure. Hi Tim, I apologize if you mentioned this before, but are you using Spamassassin with mailscanner? This message describes a problem that sounds very similar to yours, and there's a solution included: http://old.nabble.com/Re%3A-amavisd---exited-on-signal-11---FreeBSD-8-with-Perl-5.10-p28627858.html Hope that helps, Greg - -- Greg Larkin http://www.FreeBSD.org/ - The Power To Serve http://www.sourcehosting.net/ - Ready. Set. Code. http://twitter.com/sourcehosting/ - Follow me, follow you -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iD8DBQFMG8on0sRouByUApARAmSwAKCnYeOhGo4OOKFGr2irxGAEJadVewCgh4aC 8XQhVF7fINhH5ADDOjNhTCg= =FriQ -END PGP SIGNATURE- ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Followup On Perl Dumping Core
On 6/18/2010 2:33 PM, Greg Larkin wrote: Tim Daneliuk wrote: On 6/18/2010 2:09 PM, Matthew Seaman wrote: On 18/06/2010 19:56:26, Tim Daneliuk wrote: I should mention that I don't think it is actually dumping core. It's just reporting the problem in /var/log/messages... You'll only get a core file if the current working directory of the process is writable by the process. Normally. There are various sysctls you can use to affect core-dumping: kern.corefile: process corefile name format string kern.coredump: Enable/Disable coredumps kern.sugid_coredump: Enable coredumping set user/group ID processes See core(5). It is possible to set kern.corefile to an absolute path -- eg /tmp/%N.core -- to always record corefiles in a writable directory. Also, look at setrlimit values for the maximum size core file permitted. Cheers, Matthew Well ... I've figured out what's causing it, but I still don't know why. This is caused when '/usr/local/etc/rc.d/mailscanner restart' is issued from a script I run to reset the mail system. However, it does not happen every time ... go figure. Hi Tim, I apologize if you mentioned this before, but are you using Spamassassin with mailscanner? This message describes a problem that sounds very similar to yours, and there's a solution included: http://old.nabble.com/Re%3A-amavisd---exited-on-signal-11---FreeBSD-8-with-Perl-5.10-p28627858.html Hope that helps, Greg Aha! Der plot thickens. I am indeed running SA. I've just clobbered /root/.spamassassin/* This may well be the issue ... Many thanks. Tim Daneliuk tun...@tundraware.com PGP Key: http://www.tundraware.com/PGP/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
utility to all ALL strings?
this goes back a few years, but is there, somewhere in ports, a utility that goes thru the entire system and collects either all file names or all strings---i do not think this operated on binaries [:-)]--- and hashed and compressed everything? i remember thinking about it, but because back then my fastest computer was 500MHz , i thought better =not= to do it. now that i spend so much time hunting for stuuff, i think i could cron this utility. --If it wasn't a figment of my imagination! gary -- Gary Kline kl...@thought.org http://www.thought.org Public Service Unix The 7.83a release of Jottings: http://jottings.thought.org/index.php http://journey.thought.org 99 44/100% Guaranteed Novel ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: utility to all ALL strings?
Hi-- On Jun 18, 2010, at 1:56 PM, Gary Kline wrote: this goes back a few years, but is there, somewhere in ports, a utility that goes thru the entire system and collects either all file names or all strings---i do not think this operated on binaries [:-)]--- and hashed and compressed everything? You're most likely talking about the locate command, which collects all filenames from the system to provide a quicker substitute for find. See: /usr/libexec/locate.updatedb Script to update the locate database /etc/periodic/weekly/310.locate Script that starts the database rebuild Regards, -- -Chuck ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: utility to all ALL strings?
In response to Gary Kline kl...@thought.org: this goes back a few years, but is there, somewhere in ports, a utility that goes thru the entire system and collects either all file names or all strings---i do not think this operated on binaries [:-)]--- and hashed and compressed everything? i remember thinking about it, but because back then my fastest computer was 500MHz , i thought better =not= to do it. now that i spend so much time hunting for stuuff, i think i could cron this utility. --If it wasn't a figment of my imagination! man locate Unless you've tweaked your periodic, this is already running on your system every night. -- Bill Moran http://www.potentialtech.com http://people.collaborativefusion.com/~wmoran/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: utility to all ALL strings?
On 18-6-2010 22:56, Gary Kline wrote: this goes back a few years, but is there, somewhere in ports, a utility that goes thru the entire system and collects either all file names or all strings---i do not think this operated on binaries [:-)]--- and hashed and compressed everything? i remember thinking about it, but because back then my fastest computer was 500MHz , i thought better =not= to do it. now that i spend so much time hunting for stuuff, i think i could cron this utility. --If it wasn't a figment of my imagination! gary My guess would be tripwire (in security), but then again: I haven't got a clue what you're trying to accomplish. Peter -- http://www.boosten.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Hardware monitoring with iDRAC6
On 17 June 2010 17:38, Steve Polyack kor...@comcast.net wrote: On 06/17/10 12:02, Martin Turgeon wrote: Hi again everyone, I just realized after posting my question on optimal RAID config that the best solution for hardware monitoring would be to use the integrated iDRAC6. I have the Express version (no dedicated port). I have never worked with DRAC cards and I would like to know your opinions about the best way to use it for hardware monitoring. I'm not really planning on using the remote control features, but it would be nice too. In addition to using DRAC notifications for hardware events, I would suggest that you still run some local checks on the system itself (Nagios checks via NRPE). There are several checks available that check the status of the PERC controller and drives using mfiutil, amrstat, or MegaCLI. As I understand it, I have to configure an additional IP for iDRAC. In my case, the servers are going to be installed in a colocation datacenter so I guess I have to reserve an additional public IP for each servers so I can access the iDRAC remotely? What are the securiy implications? This depends on what your options are - if you're colocating one server, they may be pretty slim. In any case, I would strongly advise not putting it out there on an unrestricted public address. I'm not sure of the DRAC's history of security issues, but keep in mind that someone using it essentially has physical access to your server. If you have to put it out there on the internet, be sure to create a new user on the iDRAC and disable the existing root account. I'm also configuring a Nagios installation for monitoring. Is there a way to plug iDRAC with Nagios to handle the notifications (snmp maybe)? Or should I configure an email alert in the iDRAC config (I assume there is a way to do that)? You can configure the iDRAC to send SNMP traps, or even e-mails for hardware events. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org If you can afford the rack space its probably best to have a dedicated admin host with one public interface and one private one. Then put all the idracs on private ips and ideally their own vlan. Then use this admin box to relay any information back to you over the public network It could also act as a serial server, and maybe have a isdn/dsl backup line for out of band access. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
NFSv4 status
Hello, I'm a little confused as to where NFSv4 is at... Is the client stable and considered ready for production use? If so, as of what OS version? The man page for nfsv4 listed here: http://www.freebsd.org/cgi/man.cgi?query=nfsv4sektion=4 still lists this as experimental, however the bottom of this page has a signature for FBSD 7.2 Can somebody kindly clarify as to where NFSv4 support is at, whether it is still considered experimental, what the roadmap for it is (if applicable), etc.? Thanks in advance! -- Joe Auty, NetMusician NetMusician helps musicians, bands and artists create beautiful, professional, custom designed, career-essential websites that are easy to maintain and to integrate with popular social networks. www.netmusician.org http://www.netmusician.org j...@netmusician.org mailto:j...@netmusician.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: PDF storage software recommendations?
Date: Thu, 17 Jun 2010 23:31:15 -0700 From: Charlie Kester corky1...@comcast.net Subject: Re: PDF storage software recommendations? To: freebsd-questions@freebsd.org Message-ID: 20100618063115.ga57...@comcast.net Content-Type: text/plain; charset=us-ascii; format=flowed On Thu 17 Jun 2010 at 19:57:03 PDT Polytropon wrote: Maybe my answer will sound low level, but it works - REALLY works - and works with mostly every kind of data. It's good to see someone recommending a true Unix-style solution. :) Here, here. I too love simple text files. With the speed of today's computers it's not impractical to use text files. And something like you suggest with awk I think would workexcept for one major thing. When building a database like this you usually have to build an interface that normal users will work with. And something that I could use versus something the other people in the office could use are often worlds apart. I once wrote a program to do linear optimization for cutting metal parts from stock lengths. For me it was a simple block of code about 30-40 lines as I recall. The other guys in the warehouse saw it and told the boss they wanted it too. He then instructed me to expand it so the common users could work with it. Well 2 months later and about another 400 lines of code to make it user friendly we finally had something. So as I see it the interface for other not so tech-savvy users will be the trouble with this approach. But put me down for a vote on this method using simple text files and awk. We have a Windows based system at my current job which uses FileMaker Pro. It's amazing what we can do with this and it's like having a gigantic electronic filing cabinet. It's pricey and it took the IT guys some time to build it but it does do some fantastic things in keeping tons of files organized, indexed and searchable. But I'd like to try my hand at building something with text files and awk. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
