Re: sleepycat db VS MySQL or postgres

2013-07-01 Thread Kevin Wilcox
On 1 July 2013 16:28, Jim Pazarena fqu...@paz.bz wrote: I could move to db5 or db6 OR MySQL, or even postgres. snip I have no experience with the c interface for postgres or mysql, but also, do not know how much the c interface has changed for sleepycat 5/6 compared to the c interface for

Re: latest git ports upgrade

2012-11-30 Thread Kevin Wilcox
On Nov 29, 2012 2:27 PM, Artifex Maximus artife...@gmail.com wrote: BTW, why system does not know user git_daemon when git_daemon was in passwd and master.passwd? I am using portmaster to upgrade my installed ports. I have had this exact issue when installing postgresql via portmaster. When

Re: Apache vs. nginx

2012-07-18 Thread Kevin Wilcox
On Jul 18, 2012 5:19 AM, Wojciech Puchar woj...@wojtek.tensor.gdynia.pl wrote: I'm the admin for a small hobby website (Stovebolt.com - about 7 million hits/mo). We're fixin to buy a new server, and since I have to start from scratch (install FreeBSD and all the needed ports), I'm wondering if

Re: mutual forwarders in ISC BIND

2011-12-28 Thread Kevin Wilcox
On Dec 28, 2011 9:26 PM, Victor Sudakov v...@mpeks.tomsk.su wrote: And the reason for the whole thread. One of the customers told me that 8.8.8.8 is faster than our own DNS servers which are located on the same 100 MBit/s LAN with them. I was shocked but it seems true, at least for the

PF and dup-to?

2011-09-16 Thread Kevin Wilcox
Hi folks, I have the following pf.conf on FreeBSD 8.1-RELEASE *and* 8.2-RELEASE === set block-policy return set skip on lo int_if=bge1 ext_if=bge0 dup_if=dc0 # NAT rule nat on $ext_if from $int_if:network to any - ($ext_if) sticky-address # # Windows RDP

Re: shopping for a new server

2011-08-25 Thread Kevin Wilcox
On Thu, Aug 25, 2011 at 12:45, Tim Kellers timot...@wallnet.com wrote: Dell 2500 from 10 years back is soon to be very dead in the machine room at work.  I'm thinking about replacing it with a Rack mount Dell R610  has anyone used that and has compatibility issues or successes?  I'll be using

Re: OpenVPN Setup

2011-05-11 Thread Kevin Wilcox
On Wed, May 11, 2011 at 09:11, Bill Tillman btillma...@yahoo.com wrote: 2. I have my OpenVPN process running on my FreeBSD server and wish to test it with the OpenVPN client for Windows on my laptop from an outside location. But the only outside locations I have access to right now are the

Re: Fw: OpenVPN Setup

2011-05-10 Thread Kevin Wilcox
On Tue, May 10, 2011 at 19:19, Bill Tillman btillma...@yahoo.com wrote: OK I know I saw this somewhere but it eludes me now. I have generated the keys and certificates for the server and client on my FreeBSD server. I then copied them over to my Windows laptop but apparently cannot find where

Re: Fw: OpenVPN Setup

2011-05-10 Thread Kevin Wilcox
On Tue, May 10, 2011 at 19:59, Bill Tillman btillma...@yahoo.com wrote: This is a very frustrating process but I think I'm getting there. The files I created on the FreeBSD server which I copied over are:    client1.crt    client1.csr    client1.key But the windows setup appears that it

Re: Fw: OpenVPN Setup

2011-05-10 Thread Kevin Wilcox
On Tue, May 10, 2011 at 20:09, Kevin Wilcox kevin.wil...@gmail.com wrote: On Tue, May 10, 2011 at 19:59, Bill Tillman btillma...@yahoo.com wrote:    client1.crt    client1.csr    client1.key You only need to copy the .crt and .key files, those are your key and certificate for the client

Re: OpenVPN Setup

2011-05-10 Thread Kevin Wilcox
On Tue, May 10, 2011 at 20:50, Frank Griffith frnkgrf...@yahoo.com wrote: Anyway, I tried to start the OpenVPN server on the FreeBSD server and it will not start. I got this message: # openvpn /usr/local/etc/openvpn/server.conf Tue May 10 20:35:11 2011 OpenVPN 2.2.0 amd64-portbld-freebsd8.2

Re: Can I bridge the same subnet across a VPN?

2011-05-03 Thread Kevin Wilcox
On Tue, May 3, 2011 at 15:19, Geoff Roberts ge...@apro.com.au wrote: Is it possible to join two sites with the same subnet across a VPN? Yes. I have two sites that have the same subnet/mask. I need these two separated networks to behave as one across a VPN. That's understandable. You may

Re: dhcpd in vmware

2011-04-06 Thread Kevin Wilcox
On Wed, Apr 6, 2011 at 04:12, per...@pluto.rain.com wrote: Kevin Wilcox kevin.wil...@gmail.com wrote: If you're just using the 192.168.4.129 - 254 addresses I would change it to subnet 192.168.4.0 netmask 255.255.255.0 Shouldn't that be netmask 255.255.255.128? That's what I thought

Re: dhcpd in vmware

2011-04-05 Thread Kevin Wilcox
On Tue, Apr 5, 2011 at 08:29, xinyou yan yxy@gmail.com wrote: the dhcpd can't start in vmware : Here is my /usr/local/etc/hpcdd.conf Is the file named hpcdd.conf or is that a typo? subnet 192.168.0.0 netmask 255.255.255.0 { range 192.168.4.129 192.168.4.254; option routers

Re: Installing squid, where should the directories be?

2011-03-09 Thread Kevin Wilcox
On Wed, Mar 9, 2011 at 10:27, Leslie Jensen les...@eskk.nu wrote: I'm installing squid on a new 8.2-RELEASE machine. Me too. I have /usr/local/squid as default directory and has made a separate mount point. Same here. As a general rule I like to give squid its own hard drive, or its own

Re: Help: Looking to contact someone running FreeBSD on ESX

2011-02-25 Thread Kevin Wilcox
On Fri, Feb 25, 2011 at 12:52, Mark Felder f...@feld.me wrote: The ones that crash are usually our main webservers (Apache, PHP, no MySQL locally though). We have LOTS of IPs on them and they do a ton of network traffic, but usually don't have a super high load average (maybe .75 - 1.0 on a

Re: qmail or postfix?

2011-02-01 Thread Kevin Wilcox
On Tue, Feb 1, 2011 at 09:32, Alessandro Baggi alessandro.ba...@gmail.com wrote: Hi list. Who is better, qmail or postfix? thanks in advance That's a loaded question. Both have advocates, just like vi or emacs, Linux or Nothing, FreeBSD or OpenBSD, OS X or Windows and X Window System or CLI.

Re: PF firewall rules and documentation

2011-01-31 Thread Kevin Wilcox
On Mon, Jan 31, 2011 at 05:58, Da Rock freebsd-questi...@herveybayaustralia.com.au wrote: Yes. Me unfortunately, but I did manage to pick it up quite quickly though. I had a little thief attack one of my ports and attempt login on the firewall. I had to change it to 'block in $log on $ext_if

Re: Managing ESXi from FreeBSD...

2011-01-24 Thread Kevin Wilcox
On 24 January 2011 13:42, Outback Dingo outbackdi...@gmail.com wrote: loose ESucksXi and install XCP 1.0 and for management xencenter /  openxencenter will run on FreeBSD, I wish I could recommend XCP and/or Xen to the average user but trying to install FreeBSD 8.1-amd64 in Xen, even running

Re: The book of pf...

2011-01-19 Thread Kevin Wilcox
On 19 January 2011 02:28, Christer Solskogen christer.solsko...@gmail.com wrote: On Tue, Jan 18, 2011 at 7:35 PM, Kevin Wilcox kevin.wil...@gmail.com wrote: 1) Definitely get the first version Oh, why? Because Peter made mention on misc@ that the second edition was geared towards OpenBSD

Re: The book of pf...

2011-01-18 Thread Kevin Wilcox
On 17 January 2011 23:37, Modulok modu...@gmail.com wrote: Or perhaps someone could suggest something else? I read the examples and basic handbook for pf, but wanted a bit more. I'm going to be tacking a firewall project coming up and need to be well prepared. Suggested readings appreciated.

Re: FreeBSD Decision

2011-01-14 Thread Kevin Wilcox
On 14 January 2011 14:19, Tim Daneliuk tun...@tundraware.com wrote: On 1/14/2011 12:46 PM, Alessandro Baggi wrote: Hi list, I don't want make a flame post but I would ask an objective opinion, then not a camp opinion, about using FreeBSD or Debian Linux in a production environment snip

Re: Bot?

2011-01-05 Thread Kevin Wilcox
On 5 January 2011 10:47, Jerry Bell je...@nrdx.com wrote: There could be reasons you aren't seeing a spike, such as you're only looking at traffic processed by the MTA, or it simply doesn't show as a material increase on a graph of traffic on the network interface if the server is busy.

Re: Bot?

2011-01-05 Thread Kevin Wilcox
On 5 January 2011 13:25, David Brodbeck g...@gull.us wrote: On Wed, Jan 5, 2011 at 8:15 AM, Kevin Wilcox kevin.wil...@gmail.com wrote: To really see what your machine is doing, consider taking a look at the network flows. pfflowd, netflowd, ipaudit and a host of others can get you flow data

Re: FreeBSD IPSec stack contains backdoors?

2010-12-17 Thread Kevin Wilcox
On 17 December 2010 10:36, Mike L jackoro...@gmail.com wrote: Reads like an unacceptable response to an issue that seems quite critical. Here, let me re-iterate for those that may not have a copy of what you're saying is unacceptable in front of them: o we're aware there's talk about some

pf + NAT + log

2010-10-18 Thread Kevin Wilcox
Hi everyone. This is probably better suited for freebsd-pf@ but I'll give it a go before spamming YAML. I'm testing NAT on FreeBSD 8.1. My setup is very simple: My workstation - { internal network switch } - FreeBSD 8.1routing firewall with squid 3 - { switch going to Internet } My pf

Re: router / firewall with PF and carp.

2010-10-01 Thread Kevin Wilcox
On 1 October 2010 05:29, krad kra...@gmail.com wrote: In my experiance freebsd should work fine. However I would say openbsd is probably better suited to your needs, due to its tighter security model (auditing) Krad, I was under the impression that 'audit' from TrustedBSD is built into

Re: router / firewall with PF and carp.

2010-10-01 Thread Kevin Wilcox
On 1 October 2010 10:16, Daniel Bye freebsd-questi...@slightlystrange.org wrote: On Fri, Oct 01, 2010 at 09:40:56AM -0400, Kevin Wilcox wrote: Krad, I was under the impression that 'audit' from TrustedBSD is built into FreeBSD. Is there a facility in OpenBSD that is better

Re: Intel video Driver

2010-09-22 Thread Kevin Wilcox
On 22 September 2010 13:16, jorge espada espada.jo...@gmail.com wrote: I need my laptop to work..so I removed freebsd 8.1 and installed gentoo so I can't post the output of pciconf -lv, but I want freebsd...so if anyone knows how to sort this problem please share... To resolve a combination

Re: CARP and freebsd

2010-09-03 Thread Kevin Wilcox
On 3 September 2010 10:37, gahn ipfr...@yahoo.com wrote: Is carp a part of freebsd 8.1? or I have to download from somewhere and install it? Everything you could want to know about CARP and FreeBSD: http://www.freebsd.org/doc/handbook/carp.html On my 8.1 box - fbsdsroute0# sysctl

Re: vmware and freebsd 8

2010-07-28 Thread Kevin Wilcox
On 28 July 2010 00:47, kalin m ka...@el.net wrote: messing around with vmware and fbsd 8... has anybody used vmware esxi 4 to put a bunch of fbsd machines on it? i also installed the vmsphere client (they call it) which is pretty nice interface to interact with the virtual machines but

Re: vmware and freebsd 8

2010-07-28 Thread Kevin Wilcox
On 28 July 2010 09:12, Steve Polyack kor...@comcast.net wrote: We've always used the open-vm-tools port (/usr/ports/emulators/open-vm-tools-nox11).  There is both an x11 and nox11 version, both of which work very well.  It also includes a handful of other drivers and modules, including the

Re: Virtualbox Networking Issues

2010-07-15 Thread Kevin Wilcox
On 15 July 2010 17:35, Chris Maness ch...@chrismaness.com wrote: I am not able to ping anything.  I cannot ping the gateway or the host.  I tried bridge, NAT, and host only. Can you provide the output of ifconfig and the contents of rc.conf from the virtual machine? (Purpose - to see if the

Re: FreeBSD router - large scale

2010-06-23 Thread Kevin Wilcox
On 28 May 2010 07:38, Bruce Cran br...@cran.org.uk wrote: This is possibly the wrong place to be saying this, but isn't OpenBSD usually recommended for routers? I believe the version of pf, for example, is normally kept more up-to-date than than in FreeBSD.  The major downside I know of is

Re: FreeBSD router - large scale

2010-06-23 Thread Kevin Wilcox
On 27 May 2010 12:12, Matthew Seaman m.sea...@infracaninophile.co.uk wrote: The hardest job I've had an OpenBSD firewall do is actually as a mid-level firewall between a DMZ full of web servers and a back-end database layer.  The thing to watch out for is running out of states in PF.  It's

Re: Add watermark to PDF

2010-06-01 Thread Kevin Wilcox
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 1 June 2010 10:15, John Almberg jalmb...@identry.com wrote: I would like to add a customized footer (a stamp or watermark) to an existing PDF, like the guys at Pragmatic Programmers do with their PDFs. I used to do something similar using the

FreeBSD router - large scale

2010-05-27 Thread Kevin Wilcox
Hello everyone. We're in the very early stages of considering [Free|Open]BSD on commodity hardware to handle NAT *and* firewall duties for (what I consider to be) a sizable deployment. Overall bandwidth is low, only a gigabit connection, but we handle approximately fifteen thousand devices. DHCP

Re: Virtualbox on Freebsd

2010-03-04 Thread Kevin Wilcox
On 4 March 2010 14:15, Paul Schmehl pschmehl_li...@tx.rr.com wrote: I'm trying to build it from ports right now and running into all sorts of issues with qt4 stuff. This doesn't exactly inspire confidence when it comes time for me to do my next round of updates. I remember running into an

Re: Root exploit for FreeBSD

2009-12-10 Thread Kevin Wilcox
2009/12/10 Anton Shterenlikht me...@bristol.ac.uk: From my information security manager:        FreeBSD isn't much used within the University (I understand) and has a        (comparatively) poor security record. Most recently, for example:        

Re: Root exploit for FreeBSD

2009-12-10 Thread Kevin Wilcox
2009/12/10 Anton Shterenlikht me...@bristol.ac.uk: I was just stressed after being forced by him to explain why I wanted firewall exceptions for two ports to my FreeBSD portscluster nodes. I explained the reasons and that was settled. Anton, I don't know about the UK, Great Britain or

Re: CMS

2009-10-15 Thread Kevin Wilcox
Paul - I used to work with the guys at Appalachian State that did phpWebSite (I was their SA) and it worked great on FreeBSD. I can't say how well it works *now* but it ran fine as of a year ago on Apache2 + PostGreSQL. As far as a CMS or application framework went, it was a cinch. I just never

Re: Show bandwidth usage by IP address (through pf)

2009-10-07 Thread Kevin Wilcox
2009/10/7 Maxim Khitrov mkhit...@gmail.com: I have pf filtering traffic to our network. Is there any easy way to see the current bandwidth usage sorted by ip? Someone is using up almost 100% of total bandwidth and parsing pfctl -ss -v isn't getting me anywhere. It's overkill and does a ton