roundcube security bug

2009-03-09 Thread Zbigniew Szalbot
hello, I strongly advise anyone who has the mail/roundcube port or software installed to be careful as it has a security bug (and I do not know where to report it). It allows people to remotely place a trojan on /tmp and use it. They do it like this: 213.96.25.30 - - [05/Mar/2009:19:22:14 +0100]

Re: roundcube security bug

2009-03-09 Thread Brent Clark
Zbigniew Szalbot wrote: hello, I strongly advise anyone who has the mail/roundcube port or software installed to be careful as it has a security bug (and I do not know where to report it). It allows people to remotely place a trojan on /tmp and use it. They do it like this: 213.96.25.30 - -

Re: roundcube security bug

2009-03-09 Thread Zbigniew Szalbot
On Mon, Mar 9, 2009 at 08:43, Brent Clark brentgclarkl...@gmail.com wrote: Hiya Have you notified and / or checked with the upstream authour (maybe the mailinglist too) Not really. It requires subscribing to a mailing list which I don't have time to do at the moment. -- Zbigniew Szalbot

Re: roundcube security bug

2009-03-09 Thread Michael Powell
Zbigniew Szalbot wrote: hello, I strongly advise anyone who has the mail/roundcube port or software installed to be careful as it has a security bug (and I do not know where to report it). It allows people to remotely place a trojan on /tmp and use it. They do it like this: 213.96.25.30

Re: php5 changes in release 8.0

2009-03-09 Thread Fbsd1
Bill Moran wrote: In response to Fbsd1 fb...@a1poweruser.com: Having problems installing php5 in 7.1 so tried 8.0 and see that in release 8.0 php5 in defaulting to apache 22 when apache interface is selected from the make config menu. The config menu should give option to select apache 13 or

Re: roundcube security bug

2009-03-09 Thread Ross Cameron
On Mon, Mar 9, 2009 at 9:47 AM, Zbigniew Szalbot zszal...@gmail.com wrote: On Mon, Mar 9, 2009 at 08:43, Brent Clark brentgclarkl...@gmail.com wrote: Hiya Have you notified and / or checked with the upstream authour (maybe the mailinglist too) Not really. It requires subscribing to a

Re: roundcube security bug

2009-03-09 Thread Zbigniew Szalbot
Hi there, On Mon, Mar 9, 2009 at 10:50, Ross Cameron abal...@gmail.com wrote: Surely an attempted cracking attempt on you're server warrants making time? It does. Without detailed reports of issues like this how is the vendor expected to correct the problem?     Avoiding installing the code

Re: USENET?

2009-03-09 Thread Wojciech Puchar
tin slrn On Sun, 8 Mar 2009, Gary Kline wrote: are there any ports that offer an interface to USENET? I think mozilla did, but that was a long time ago ... . gary -- Gary Kline kl...@thought.org http://www.thought.org Public Service Unix http://jottings.thought.org

Re: USENET?

2009-03-09 Thread Wojciech Puchar
news/pan seems to work OK, if you want a GUI. But be aware that nowadays, you'll probably have to pay a monthly fee for usenet. ISPs don't seem to routinely offer it as part of the deal anymore like they used to. at least in Poland there are free. and for my clients i have nntpcache'd news

FBSD 7.1-STABLE: pkg_delete: segmentation fault

2009-03-09 Thread O. Hartmann
Hello Everybody, Since several days ago I get a segmentation fault on a FreeBSD 7.1-STABLE/AMD64 box when invoking 'pkg_delete' on installed packages to delete them. This box has been most recently 'built-world' and I did a 'make delete-files' and sibblings as a precaution - but I still get

Qt4 applications are missing pixmaps/icons

2009-03-09 Thread O. Hartmann
Dear Sirs, all of my installed Qt4-applications are missing pixmaps/icons for knobs and menus - the mouse-sensistive highlighting and literals are working finde, but no pixmaps/icons. Our environment is mostly KDE/Gnome free, so I suspect missing pixmap-ports or something from the

Re: USENET?

2009-03-09 Thread cpghost
On Mon, Mar 09, 2009 at 11:39:43AM +0100, Wojciech Puchar wrote: news/pan seems to work OK, if you want a GUI. But be aware that nowadays, you'll probably have to pay a monthly fee for usenet. ISPs don't seem to routinely offer it as part of the deal anymore like they used to. at

Re: USENET?

2009-03-09 Thread Daniel Molina Wegener
El Sunday 08 March 2009 23:38:14 Robert Huff escribió: Dan Nelson writes: are there any ports that offer an interface to USENET? I think mozilla did, but that was a long time ago ... . Mozilla simply changed names to Seamonkey and is still alive and kicking. Thunderbird

Re: USENET?

2009-03-09 Thread Wojciech Puchar
at least in Poland there are free. and for my clients i have nntpcache'd news from Gda?sk University. Actually, in most parts of the world, news are still freely available with many ISPs (you may have to ask them explicitly), except for alt.binaries.* which are quite bandwidth intensive. i'm

Re: USENET?

2009-03-09 Thread George Davidovich
On Mon, Mar 09, 2009 at 12:44:38PM +0100, cpghost wrote: On Mon, Mar 09, 2009 at 11:39:43AM +0100, Wojciech Puchar wrote: news/pan seems to work OK, if you want a GUI. But be aware that nowadays, you'll probably have to pay a monthly fee for usenet. ISPs don't seem to routinely offer it

Re: roundcube security bug

2009-03-09 Thread Moti Levy
On 03/09/09 6:05 AM, Zbigniew Szalbot wrote: Hi there, On Mon, Mar 9, 2009 at 10:50, Ross Cameronabal...@gmail.com wrote: Surely an attempted cracking attempt on you're server warrants making time? It does. Without detailed reports of issues like this how is the vendor

Warning: KLD '/boot/kernel/linux.ko' is newer than the linker.hints

2009-03-09 Thread Peter Steele
I have a process that automates the creation of a master FreeBSD image that we clone onto mulitple machines. In the latest version of this image I am seeing the warnings: warning: KLD '/boot/kernel/linprocfs.ko' is newer than the linker.hints file warning: KLD '/boot/kernel/linux.ko' is newer

Busy disk and page fault

2009-03-09 Thread Nicolas Haller
Hi all, I'm asking myself about a problem I have with a Postgresql server on FreeBSD 7.1-RELEASE. The server is overload, the disk is 100% busy with 250 write operations per second and a throuput of 6MB/s. My first idea is because of mass random access/write on the disk. But I also see the

FreeBSD 7.1R on laptop

2009-03-09 Thread Pongthep Kulkrisada
Hi all, I am using FBSD 7.1R on PC. But yesterday (8 Mar 09) my hard disk was physically broken. My machine is very old anyway. So I want to buy a new laptop (notebook). I have some questions. 1. Previously I use ADSL but now I go back to 56k serial modem. The problem is new laptops do not

Re: Busy disk and page fault

2009-03-09 Thread Wojciech Puchar
The server is overload, the disk is 100% busy with 250 write operations per second and a throuput of 6MB/s. My first idea is because of mass random access/write on the disk. But I also see the server can make 20k page fault per second. what page fault? most page faults in FreeBSD doesn't mean

Re: Warning: KLD '/boot/kernel/linux.ko' is newer than the linker.hints

2009-03-09 Thread Paul B. Mahol
On 3/9/09, Peter Steele pste...@maxiscale.com wrote: I have a process that automates the creation of a master FreeBSD image that we clone onto mulitple machines. In the latest version of this image I am seeing the warnings: warning: KLD '/boot/kernel/linprocfs.ko' is newer than the

Re: FreeBSD 7.1R on laptop

2009-03-09 Thread Wojciech Puchar
I am using FBSD 7.1R on PC. But yesterday (8 Mar 09) my hard disk was physically broken. My machine is very old anyway. So I want to buy a new laptop (notebook). I have some questions. simply getting new hard drive could be enough. 1. Previously I use ADSL but now I go back to 56k serial

Which install ?

2009-03-09 Thread Darryl Hoar
Greetings, I just purchased an older rack mounted supermicro server. It is running CentOS, but I want to install Freebsd on it. The server has (2) Xeon processors. Which download should I use ? i386 ??? Thanks, Darryl ___

UID/GID in anon.ftp directory

2009-03-09 Thread Pieter Donche
I set up an anonymous ftp directory on FreeBSD system and copied (via a tarball) the anon.ftp directory (pub) from our old ftp server to the new FreeBSD server. In the new server users get same loginnames, but UIDs are different from UID at old server, so I manually did the necessary chown

Re: Which install ?

2009-03-09 Thread Erik Trulsson
On Mon, Mar 09, 2009 at 11:25:06AM -0500, Darryl Hoar wrote: Greetings, I just purchased an older rack mounted supermicro server. It is running CentOS, but I want to install Freebsd on it. The server has (2) Xeon processors. Which download should I use ? i386 ??? If it is an older server

Re: Busy disk and page fault

2009-03-09 Thread Nicolas Haller
On Mon, Mar 09, 2009 at 05:04:16PM +0100, Wojciech Puchar wrote: The server is overload, the disk is 100% busy with 250 write operations per second and a throuput of 6MB/s. My first idea is because of mass random access/write on the disk. But I also see the server can make 20k page fault per

Re: roundcube security bug

2009-03-09 Thread Zbigniew Szalbot
Hello, On Mon, Mar 9, 2009 at 15:54, Moti Levy levym...@gmail.com wrote: portaudit is always usefull Affected package: roundcube-0.2.a,1 Ah... my bad - I have had roundcube installed from sources, not from port. That's why I didn't know. I use portaudit on daily bases. Many thanks, though!

Re: Warning: KLD '/boot/kernel/linux.ko' is newer than the linker.hints

2009-03-09 Thread Peter Steele
Probably you installed that files _after_ linker.hints is generated, just make sure that they are still compatible with /boot/kernel/kernel Perhaps its a matter of the process we're using. I first install the GENERIC kernel into the image I am creating: export DESTDIR=${IMAGE_DIR} export

New York Fundraising Summit - Panelist Invitation

2009-03-09 Thread Jennifer Winn
Dear Foundation Representative, My name is Jennifer Winn, Event Manager for the Center for Nonprofit Success, and I am writing to invite you to speak on a grantmaking panel at the Fundraising Summit that we will be hosting again this year at New York University on June 3-4, 2009. This year, we

Re: Which install ?

2009-03-09 Thread Michael Powell
Erik Trulsson wrote: On Mon, Mar 09, 2009 at 11:25:06AM -0500, Darryl Hoar wrote: Greetings, I just purchased an older rack mounted supermicro server. It is running CentOS, but I want to install Freebsd on it. The server has (2) Xeon processors. Which download should I use ? i386 ???

RE: FreeBSD 7.1R on laptop

2009-03-09 Thread Greg.Stark
Some laptops do come with COM ports still. Usually they are the business models. For example, the Dell Latitude 820's have them. -Original Message- From: owner-freebsd-questi...@freebsd.org [mailto:owner-freebsd-questi...@freebsd.org] On Behalf Of Pongthep Kulkrisada Sent: Monday,

hardware list in a machine

2009-03-09 Thread gahn
Hi all: How could I find out the list of hardware in my machine? I used dmesg and var/run/dmesg.boot, it didn't seem to help that much as I expected. which file lists all of hardware in the machine? Thanks. ___

Re: hardware list in a machine

2009-03-09 Thread Josh Carroll
On Mon, Mar 9, 2009 at 2:59 PM, gahn ipfr...@yahoo.com wrote: Hi all: How could I find out the list of hardware in my machine? I used dmesg and var/run/dmesg.boot, it didn't seem to help that much as I expected. which file lists all of hardware in the machine? Thanks. Give the

Re: USENET?

2009-03-09 Thread Randy Pratt
On Mon, 9 Mar 2009 07:14:26 -0700 For text, I'd recommend slrn. Gary is already using mutt, so I'd suggest he go that route, or alternatively, try mutt's nntp patch and use mutt instead. Works perfectly well and it's what I use. If reading news is going to be a regular thing, then setting

Re: Which install ?

2009-03-09 Thread Erik Trulsson
On Mon, Mar 09, 2009 at 02:15:25PM -0400, Michael Powell wrote: Erik Trulsson wrote: On Mon, Mar 09, 2009 at 11:25:06AM -0500, Darryl Hoar wrote: Greetings, I just purchased an older rack mounted supermicro server. It is running CentOS, but I want to install Freebsd on it. The server

RE: Which install ?

2009-03-09 Thread Darryl Hoar
To: Michael Powell Cc: freebsd-questions@freebsd.org Subject: Re: Which install ? On Mon, Mar 09, 2009 at 02:15:25PM -0400, Michael Powell wrote: Erik Trulsson wrote: On Mon, Mar 09, 2009 at 11:25:06AM -0500, Darryl Hoar wrote: Greetings, I just purchased an older rack mounted supermicro

Re: Which install ?

2009-03-09 Thread Kevin Kinsey
Darryl Hoar wrote: From this, I believe I should install the i386 version of Freebsd. Do I have to do anything to enable multi-processors in Freebsd ? AFAIK you need apic and smp options in your kernel config; of course, the good news is that 7.0 and up have this enabled by default. Kevin

RE: Which install ?

2009-03-09 Thread Michael Powell
Darryl Hoar wrote: [snip] After looking at the referenced wiki and my system, I believe I have a supermicro SuperServer 6012L-6. It has (2) Xeon 512K L2 Prestonia processors. They are Installed in a P4DLR+ motherboard which has 603 pin sockets. From this, I believe I should install

portupgrade, afterwards

2009-03-09 Thread gahn
Hi all: Where is the result of portupgrade -fa stored at? it showed a bunch files didn't go through or failed. just wondering whether I can take look at the results after I rebooted the server. Thanks ___ freebsd-questions@freebsd.org

Re: portupgrade, afterwards

2009-03-09 Thread Daniel Bye
On Mon, Mar 09, 2009 at 02:03:59PM -0700, gahn wrote: Hi all: Where is the result of portupgrade -fa stored at? it showed a bunch files didn't go through or failed. just wondering whether I can take look at the results after I rebooted the server. If that's exactly how you ran

Help installing Hippo viewer...

2009-03-09 Thread Ben H.
Hello all... Thanks in advance for any assistance you may be able to provide. I am trying to get source code built for an application called HIPPO Viewer The source and instructions for building are written for Linux You can see what I have attempted to do to get this installed at:

portupgrade, afterwards

2009-03-09 Thread Robert Huff
gahn writes: Where is the result of portupgrade -fa stored at? it showed a bunch files didn't go through or failed. just wondering whether I can take look at the results after I rebooted the server. From the man page: -l FILE --results-file FILESpecify a file name

iSCSI initiator lockups

2009-03-09 Thread Jason T. Nelson
I'm running into some odd headaches regarding what looks like iSCSI initiators going to sleep for approximately 30 seconds before returning to life and pumping a ton of information back to the target. While this is happening, system load climbs up alarmingly fast. Looking at tcpdumps in Wireshark,

freebsd 7.1, building kernel

2009-03-09 Thread gahn
Hi, all: I am trying to build customized kernel with device carp and followed kernel building procedure of the handbook. unfortunately it is failed: lab1# make buildkernel KERNCONF=lab1 ERROR: Missing kernel configuration file(s) (lab1). *** Error code 1 Stop in /usr/src. *** Error code 1

Re: freebsd 7.1, building kernel

2009-03-09 Thread Michael Powell
gahn wrote: Hi, all: I am trying to build customized kernel with device carp and followed kernel building procedure of the handbook. unfortunately it is failed: lab1# make buildkernel KERNCONF=lab1 ERROR: Missing kernel configuration file(s) (lab1). *** Error code 1 Stop in

Re: Warning: KLD '/boot/kernel/linux.ko' is newer than the linker.hints

2009-03-09 Thread Paul B. Mahol
On 3/9/09, Peter Steele pste...@maxiscale.com wrote: Probably you installed that files _after_ linker.hints is generated, just make sure that they are still compatible with /boot/kernel/kernel Perhaps its a matter of the process we're using. I first install the GENERIC kernel into the image I

Re: freebsd 7.1, building kernel

2009-03-09 Thread RW
On Mon, 9 Mar 2009 15:13:55 -0700 (PDT) gahn ipfr...@yahoo.com wrote: I am trying to build customized kernel with device carp and followed kernel building procedure of the handbook. unfortunately it is failed: lab1# make buildkernel KERNCONF=lab1 ERROR: Missing kernel configuration file(s)

is there a laptop ?

2009-03-09 Thread Saifi Khan
Hi all: i've looked at tuxmobil, bsdgroup.de etc and i don't want to use ndiswrapper, or broadcom or additional PCMCIA card at all. Is there a laptop model (available in market) that experienced members would like to recommend wherein . the WiFi 802.11 a/g (PCI based) . Ethernet port . and