Re: updating system help ??!!??

2003-10-16 Thread Michael Sierchio
Brent Bailey wrote: ### Backup /etc: # cp -Rp /etc /etc.old This may not do what you think it does, and it may not do what you want. Links copied as files, etc. Use tar or cpio. ___ [EMAIL PROTECTED] mailing list

Re: opie bug or ..?

2003-11-03 Thread Michael Sierchio
Forgive the top-post -- I have independently verified this, suggest you open a PR. This is definitely a bug in opiepasswd. It is also present in RELENG_4_8. Regards, Michael Sergey Sysoev wrote: Hi. I have a question related to freebsd opie implementation. I am running 4.9-RELEASE and I've

Re: Why is there no JFS?

2003-02-12 Thread Michael Sierchio
Darren Pilgrim wrote: Soft updates are disable on / by default because of the chicken and egg problem of runing tunefs on /. If that's the problem, then why doesn't sysinstall enable it by default when partitioning for a new install? You can certainly change the options in sysinstall to

IPFW Firewall NAT inbound port-redirect

2011-07-11 Thread Michael Sierchio
Sorry for the naive question, but most of my old rulesets still use natd, and I've only used built-in nat for outbound traffic. I'd like to redirect certain ports on certain addresses to the same ports on internal (RFC1918) addresses. The examples in the man page aren't helpful, and the handbook

Re: ssh -X (X11 forwarding) not working from 6.1 to 8.1

2011-07-11 Thread Michael Sierchio
xauth not in your path? On Tue, Jul 12, 2011 at 4:46 AM, per...@pluto.rain.com wrote: Mark Felder f...@feld.me wrote: This sounds silly, but what happens if you try ssh -Y Exactly the same thing as with -X, in either direction. It still fails with the 6.1 system as the ssh client, and

Re: IPFW Firewall NAT inbound port-redirect

2011-07-12 Thread Michael Sierchio
: From: Dan Nelson dnel...@allantgroup.com To: Michael Sierchio ku...@tenebras.com Cc: freebsd-questions@freebsd.org Sent: Mon, July 11, 2011 1:07:31 PM Subject: Re: IPFW Firewall NAT inbound port-redirect In the last episode (Jul 11), Michael Sierchio said: Sorry

Re: IPFW Firewall NAT inbound port-redirect

2011-07-12 Thread Michael Sierchio
We're not talking about natd. The question was about the use of ipfirewall nat. On Tue, Jul 12, 2011 at 9:03 AM, Dan Nelson dnel...@allantgroup.com wrote: In the last episode (Jul 12), Michael Sierchio said: Is there a way of specifying a particular public address if there is more than one

Re: IPFW Firewall NAT inbound port-redirect

2011-07-13 Thread Michael Sierchio
12, 2011 at 11:05 PM, Bill Tillman btillma...@yahoo.com wrote: From: Michael Sierchio ku...@tenebras.com To: Dan Nelson dnel...@allantgroup.com Cc: Bill Tillman btillma...@yahoo.com; freebsd-questions@freebsd.org Sent: Tue, July 12, 2011 6:35:19 PM Subject

Re: IPFW Firewall NAT inbound port-redirect

2011-07-13 Thread Michael Sierchio
...@hotmail.com wrote: Michael Sierchio wrote: I'm familiar with natd since its appearance.  I was unclear on the ipfirewall nat syntax, since there is no syntax definition in the man page.  It's true the man page is already too large, but some examples (somewhere) would be nice. Marshaling packets

Re: Lennart Poettering: BSD Isn't Relevant Anymore

2011-07-19 Thread Michael Sierchio
IMHO what has helped Linux is the existence of commercial distributions with support - Red Hat, SUSE, etc. The only attempts to do this for BSD have been undercapitalized and/or half-hearted. But I find the general premise of the discussion to be - how to say this politely? - stupid. Things

Re: How to sync a file on FreeBSD? [SOLVED]

2011-07-22 Thread Michael Sierchio
This is extremely important, esp. with Softupdates, since fsync() does not guarantee a flush of all buffers to the medium. In order to implement a stable queue, it would be best to use a different filesystem. On Fri, Jul 22, 2011 at 6:16 AM, Unga unga...@yahoo.com wrote: --- On Fri, 7/22/11,

Re: How to sync a file on FreeBSD? [SOLVED]

2011-07-22 Thread Michael Sierchio
On Fri, Jul 22, 2011 at 7:42 AM, Polytropon free...@edvax.de wrote: But wouldn't sync() (see man 2 sync) make sure that all buffers, even in regards to soft updates, get immediately flushed / written? Apparently not. I think most of Matt Dillon's notes are still relevant.

Re: FreeBSD supported versions (UNCLASSIFIED)

2011-08-10 Thread Michael Sierchio
man freebsd-update On Wed, Aug 10, 2011 at 6:21 PM, Daniel Staal dst...@usa.net wrote: --As of August 10, 2011 1:26:10 PM -1000, Wright, Jonathon Mr CTR US USA USARPAC is alleged to have said: How do I know as an admin of my FreeBSD server that the version I am running is supported via

Re: Group permissions are broken?

2011-08-15 Thread Michael Sierchio
On Mon, Aug 15, 2011 at 1:06 PM, Yuri y...@rawbw.com wrote: User john is a member of both webcamd and vboxusers: # grep john /etc/group webcamd:*:145:john vboxusers:*:920:john When the file /tmp/my-test is owned by webcamd, user john can touch it ok: $ ls -l /tmp/my-test ; touch  

Re: A quality operating system

2011-08-20 Thread Michael Sierchio
), Michael Sierchio ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: A quality operating system

2011-08-20 Thread Michael Sierchio
On Sat, Aug 20, 2011 at 10:12 AM, Dave Pooser dave-free...@pooserville.com wrote: 3) Updates are a mess. It's cool that I *can* compile a new kernel, but that I *have* to is ridiculous. Updating a server should not be more difficult than yum update -- full stop. Are you lazy, or stupid? man

Re: random generated password

2011-08-30 Thread Michael Sierchio
Presumably you're doing this to prevent direct login? chpass allows root to set the encrypted password directly chpass -p '$1$123456789$your-random-chars-here' On Tue, Aug 30, 2011 at 11:16 AM, Michael mlmichae...@gmail.com wrote: Hello, When adding a new user it is possible to assign a

Re: random generated password

2011-08-30 Thread Michael Sierchio
dd if=/dev/random count=1 | tr -c [:alnum:] '0-9A-Za-z0-9A-Za-z0-9A-Za-a-z0-9A-Za-z' will give you the right kind of characters to use, for example. On Tue, Aug 30, 2011 at 11:32 AM, Michael Sierchio ku...@tenebras.com wrote: Presumably you're doing this to prevent direct login? chpass allows

Re: random generated password

2011-08-30 Thread Michael Sierchio
fzDMVOy76nPEWA9DfeT5yUrSO9fSyREAes7XxSbYvcyuzahBdqBaySc4EIgRQDBFqRxJ6hzbY7dg98HtcQzoWSrCgf2SA6VJwLivtld3eCddIz5HZIjcHUqISzFXMLnOPszV627zGhOm5Ei7diTQbf8GZQ3ZD8r7yY2ao9Mbm9w16nCt5issPD2toxoKSdqaNWYHbTCqEhXineHmQPwX9z1qDFZkM7B20FecLS5ECKe8yH7iSlIiFDCbAbFNVJ1PP # I'll leave it to you to pick out 9 chars for the seed and 31 chars for the rest, as in $1$zNvPGEVzC$Z0QQRMUjtzcJJXRlKNPfVFCTEol0pdP On Tue, Aug 30, 2011 at 11:34 AM, Michael Sierchio ku...@tenebras.com wrote: dd if=/dev/random count=1 | tr -c [:alnum:] '0-9A-Za

Re: random generated password

2011-08-30 Thread Michael Sierchio
That occurred to me, but it's a smaller alphabet. Probably doesn't matter if the purpose is to make login unusable. On Tue, Aug 30, 2011 at 11:40 AM, Randal L. Schwartz mer...@stonehenge.com wrote: Michael == Michael Sierchio ku...@tenebras.com writes: Michael dd if=/dev/random count=1 | tr

Re: Resetting bootloader on a CF

2011-09-01 Thread Michael Sierchio
It occurs to me that there may be a couple of other wrinkles. There are kernel boot parameters that tell which kind of console to use, and there are switches you can twiddle in /boot/loader.conf, notably #console=vidconsole # A comma separated list of console(s) console

Re: Cutting sendmail out of the loop

2011-09-04 Thread Michael Sierchio
I might suggest installing qmail, and running qmail-send only. This involves moving /usr/sbin/sendmail out of the way, and ln -s /var/qmail/bin/sendmail /usr/sbin/sendmail which satisfies every invocation of sendmail I've seen. YMMV. - M On Sun, Sep 4, 2011 at 2:44 PM, Brett Glass

Re: Cutting sendmail out of the loop

2011-09-04 Thread Michael Sierchio
Doesn't work in practice, since there are programs that don't honor this and invoke sendmail directly. On Sun, Sep 4, 2011 at 3:55 PM, RW rwmailli...@googlemail.com wrote: On Sun, 4 Sep 2011 15:08:11 -0700 Michael Sierchio wrote: I might suggest installing qmail, and running qmail-send only

Re: traffic shaping freebsd

2011-09-11 Thread Michael Sierchio
On Sun, Sep 11, 2011 at 3:38 PM, alexus ale...@gmail.com wrote: thanks, but did u actually tried it? If what you're asking is, does traffic shaping work? the answer is yes. There are some provisos - you must create an outbound pipe and an inbound pipe that accurately reflect the observed

Re: traffic shaping freebsd

2011-09-11 Thread Michael Sierchio
source ip/port as 0/0 and dest 0/? i dont understand that at all On Sun, Sep 11, 2011 at 7:06 PM, Michael Sierchio ku...@tenebras.com wrote: On Sun, Sep 11, 2011 at 3:38 PM, alexus ale...@gmail.com wrote: thanks, but did u actually tried it? If what you're asking is, does traffic shaping

Re: traffic shaping freebsd

2011-09-11 Thread Michael Sierchio
amending my remark... UID matching is problematic. Why are you trying to classify packets based on that? On Sunday, September 11, 2011, Michael Sierchio ku...@tenebras.com wrote: You don't seem to have any rules that match packets. This won't work. On Sunday, September 11, 2011, alexus ale

Re: System randomly not logging complete bi-directional traffic.

2011-10-09 Thread Michael Sierchio
Sorry to have missed your prior post - please include the entire ruleset. Thanks. On Sun, Oct 9, 2011 at 10:28 AM, freebsd_u...@guice.ath.cx wrote: freebsd-questions@freebsd.org # # # FreeBSD_7-4 RELEASE # Our hardware is pristine # # What is described herein are regular, yet random

Re: Breakin attempt

2011-10-22 Thread Michael Sierchio
On Sat, Oct 22, 2011 at 7:12 AM, Polytropon free...@edvax.de wrote: Is there _any_ reason why moving from port 22 to something different is _not_ a solution? Reason why I'm asking: Moving SSH away from its default port seems to be a relatively good solution as break-in attempts concentrate

Re: Configuring IPFW

2011-10-22 Thread Michael Sierchio
On Sat, Oct 22, 2011 at 9:54 AM, RW rwmailli...@googlemail.com wrote: Normally if the rules are stateless you would allow established tcp packets, but would deny them with stateful rules. In the latter case, established traffic would be passed by the check-state You need to pay attention to

Re: Configuring IPFW

2011-10-22 Thread Michael Sierchio
On Sat, Oct 22, 2011 at 10:08 AM, Conrad J. Sabatier conr...@cox.net wrote: Similarly, for udp rules, be sure to include the keep-state (but not setup) keyword. RIght - if you're just protecting a single host, for example, your ruleset might be something like ipfw add 1000 allow ip from any

Re: GEOM after system update

2011-10-24 Thread Michael Sierchio
You could edit the label and make it cover the unit, then run growfs (assuming you have backups), but for the most part this can safely be ignored. 2011/10/24 Sergei Vyshenski sv...@pn.sinp.msu.ru: Hi, Is it safe to ignore a sting in gmesg: GEOM: ad10s1: geometry does not match label

IPsec woes in 8.2

2011-10-30 Thread Michael Sierchio
I've been trying to upgrade a client firewall to 8.2, but have an odd problem. The current config, based on 7.4, has the firewall as an IPsec endpoint for other offices, but also is doing 1:1 NAT and passing L2TP traffic to a VPN endpoint inside the firewall. The upgrade to 8.2 breaks the L2TP

Re: DNS config help

2011-11-02 Thread Michael Sierchio
It depends... some VPNs push routes, including default routes, and nameservers and search paths, but it's up to the client on how to handle it. Some of these will set /etc/resolv.conf, etc. What *kind* of VPN are you talking about? OpenVPN? PPTP? L2TP? I generally prefer dnscache to BIND,

Re: How to remove ACPI from boot ?

2011-11-02 Thread Michael Sierchio
in /boot/loader.conf (see /boot/defaults/loader.conf) acpi_load=NO On Wed, Nov 2, 2011 at 3:11 PM, Al Plant n...@hdk5.net wrote: Aloha, I have a box that wont shut down with ACPI setting activated. Anyone point me to a how to on keeping ACPI from being set to on at boot. Thanks . ##

Re: nfs client speed lower than expected.

2011-11-02 Thread Michael Sierchio
Mount via tcp. On Wed, Nov 2, 2011 at 4:51 PM, Vincent Hoffman vi...@unsane.co.uk wrote: Hi all,        What kind of speed should I be expecting over an NFS mount from a linux box using a gig interface (igb)? I'm seeing linux clients getting approx 2 or 3 times the throughput rsyncing files

Re: freebsd-update (custom kernel)

2011-11-03 Thread Michael Sierchio
It will work fine - it won't attempt to update the kernel. On Thu, Nov 3, 2011 at 8:49 AM, masayoshi rocksta...@y7mail.com wrote: I would like to know about freebsd-update command. It is rumoured that freebsd-update command does not work well with custom kernel. First question is the

Re: freebsd-update (custom kernel)

2011-11-03 Thread Michael Sierchio
On Thu, Nov 3, 2011 at 9:13 AM, Jason Helfman jhelf...@e-e.com wrote: I does work fine with a custom kernel, as long as you are running and maintaining the actual update server that distributes. I don't think that's relevant. It works fine with the public servers.

Re: freebsd-update (custom kernel)

2011-11-03 Thread Michael Sierchio
This is simply not the case. freebsd-update works on the basis of cryptographic hashes on the binaries. It is, after all, a binary update program. If it detects a custom kernel, it will not update the kernel, but updates userland programs. It doesn't *care* what your kernel config name is, it

Re: recursive copy with spaces in descendants

2011-11-05 Thread Michael Sierchio
I just use tar for this. ( cd /path/to/src ; tar cf - . ) | ( cd /path/to/obj ; tar xf - ) - M On Sat, Nov 5, 2011 at 12:47 PM, Chris cpubur...@gmail.com wrote: I'm having difficulty copying a directory tree from my FreeBSD server to USB storage. The problem is that the tree contains file and

Re: ntpdate on boot problem

2011-11-05 Thread Michael Sierchio
Are you running a firewall? Do you have a ppp connection? This happens when there is a dependency that is not expressed in the /etc/rc.d scripts. - M On Sat, Nov 5, 2011 at 2:52 PM, Robert Simmons rsimmo...@gmail.com wrote: Is there a way to make sure that the interface is UP and working

Re: recursive copy with spaces in descendants

2011-11-05 Thread Michael Sierchio
Oh, and what kind of filesystem is on the USB device? - M On Sat, Nov 5, 2011 at 2:48 PM, Lowell Gilbert freebsd-questions-lo...@be-well.ilk.org wrote: Chris cpubur...@gmail.com writes: The tar one-liner is similar what I used to use on Gentoo and Arch linux, so I thought it strange that it

Re: recursive copy with spaces in descendants

2011-11-05 Thread Michael Sierchio
On Sat, Nov 5, 2011 at 3:15 PM, Chris cpubur...@gmail.com wrote: I apologize for the lack of detail. The command I'm using is: ( cd /usr/local/etc/transmission/home/Downloads/ ; tar cf - . ) | ( cd /mnt/usb ; tar xf - ) Show, don't tell. What does tar report when you run it?

Re: ntpdate on boot problem

2011-11-05 Thread Michael Sierchio
The keywords in /etc/rc.d/ntpdate have # PROVIDE: ntpdate # REQUIRE: NETWORKING syslogd named # KEYWORD: nojail which means that networking must be up first. The question in your case is why name resolution is failing. See what happens if you pick some public stratum 1 or stratum 2 servers for

Re: recursive copy with spaces in descendants

2011-11-06 Thread Michael Sierchio
On Sun, Nov 6, 2011 at 6:35 AM, Polytropon free...@edvax.de wrote: However, if you _can_, solve the _cause_ of your problem, i. e. educate those who create that kind of trouble-carrying file and directory names _not_ to use spaces! Amen, Brother. Just because you *can*, doesn't mean you

Re: OH NO! Says root partition / is full but it's not! I don't get it

2011-11-07 Thread Michael Sierchio
You're mistaken. ;-) 495736 / 507630, with some margin for free space, means you're full. Boot in single user mode. for each mount point ( /tmp /usr /var ) chflags -R noschg /mount point rm -rf /mount point/* You probably have a lot of hidden files covered by the mounted filesystems. - M On

Re: OH NO! Says root partition / is full but it's not! I don't get it

2011-11-07 Thread Michael Sierchio
On Mon, Nov 7, 2011 at 10:21 AM, Adam Vande More amvandem...@gmail.com wrote: This is terrible advice.  There are proper methods for finding what's using the space and to recover it.  You should use them. If there are files hidden by a covering mount, you won't find them when those filesystems

Re: OH NO! Says root partition / is full but it's not! I don't get it

2011-11-07 Thread Michael Sierchio
On Mon, Nov 7, 2011 at 10:33 AM, Adam Vande More amvandem...@gmail.com wrote: Indiscriminately instructing a user to delete files isn't good advice no matter how much butter you put on it. It was with no small amount of discrimination and discernment that I offered that advice. Any files that

Re: Shouldn't GNU tar be ignoring /proc with --one-file-system?

2011-11-18 Thread Michael Sierchio
On Fri, Nov 18, 2011 at 8:59 AM, Daniel Staal dst...@usa.net wrote: /proc is a file on /.  /proc/* are files on /proc.  The former is still on the root filesystem (if only as a directory stub to be used as a mountpoint), so reading it isn't leaving that filesystem.  Reading anything *in* it

Re: Shouldn't GNU tar be ignoring /proc with --one-file-system?

2011-11-18 Thread Michael Sierchio
On Fri, Nov 18, 2011 at 9:27 AM, Matthew Seaman m.sea...@infracaninophile.co.uk wrote: I find it quite astonishing that /proc would deliberately behave differently to *every other* filesystem available.  The mountpoint should belong to the filesystem mounted on it. I have an idea what you

Re: Diagnosing packet loss

2011-11-22 Thread Michael Sierchio
On Tue, Nov 22, 2011 at 1:58 PM, Kees Jan Koster kjkos...@gmail.com wrote: Thank you for your reply. Your comment about dupe IP triggered something that I failed to mention: the interface is aliased. It has two IP addresses. IP address a and it has an alias IP address b. I just tested

Re: Diagnosing packet loss

2011-11-22 Thread Michael Sierchio
Matthew suggests turning off hardware checksums - it won't hurt to give that a try: ifconfig bge0 media 100baseTX mediaopt -txcsum On Tue, Nov 22, 2011 at 2:26 PM, Adam Vande More amvandem...@gmail.com wrote: On Tue, Nov 22, 2011 at 4:11 PM, Kees Jan Koster kjkos...@gmail.com wrote:

Re: Virtualization manager suggestions

2011-11-30 Thread Michael Sierchio
My #1 choice is - your web browser and Amazon Web Services (EC2), where you may have Linux, FreeBSD, or Windoze instances. On Wed, Nov 30, 2011 at 6:57 AM, Ryan Coleman edi...@d3photography.com wrote: Guys, My day job is looking for a good VM lead and I thought of you. Well, ok, I thought

Re: ipfw And ping

2011-12-01 Thread Michael Sierchio
You can rate-limit pings and other icmp with sysctl nodes (sysctl net.inet.icmp ) You can make the rule a little more restrictive: add allow icmp from any to any icmptypes 0,3,8,11 if you want to disallow echo requests, omit 8 - the others are essential for most things to work properly or to

Re: restore(8) to UFS on USB key: terrible slow

2011-12-09 Thread Michael Sierchio
Cheap USB drives, and even many CF drives, aren't much good as random read-write devices. On my Soekris boxen I run FreeBSD, and mount the root filesystem rw,noatime. And I don't write to it. ;-) /var is a memory filesystem, there /var/db/... contain symbolic links to /usr/local/db/.. because

Re: FLAME - security advisories on the 23rd ? uncool idea is uncool

2011-12-24 Thread Michael Sierchio
Careful reading, as opposed to blindly applying updates, is often rewarded. If you aren't running telnetd, it follows that you are not vulnerable to the most serious exploit addressed by the patch (remote root). I have had no trouble since applying the patch to 7.4 and 8.2 systems. YMMV. Given

Re: pf not seeing inbound packets on netgraph interface

2012-01-04 Thread Michael Sierchio
man 4 enc On Tue, Jan 3, 2012 at 8:30 PM, Edward Carrel aza...@carrel.org wrote: On Jan 3, 2012, at 12:12 AM, Damien Fleuriot wrote: Thinking -pf@ or -net@ would be a better place to discuss this, more chances of getting an answer. I was wondering about that. I'll send my question to -net@

Re: Horrible installer

2012-01-20 Thread Michael Sierchio
I've been using FreeBSD since 2.2.1, and IMHO, the 9.0 installer SUX! It blow chunks. It's a POS. It's crap. It is a joke. I hope I made myself clear. ;-) - M ___ freebsd-questions@freebsd.org mailing list

Re: Horrible installer

2012-01-20 Thread Michael Sierchio
On Fri, Jan 20, 2012 at 9:15 PM, Lyubomir Grigorov lyubo...@grigorovl.eu wrote: Just to give thoughts as a younger user... Also, there was plently of time during RC to discuss this, I don't see why you all cry right now. To me, it seems you are afraid of change and getting out of your comfort

Re: * Re: Horrible installer

2012-01-21 Thread Michael Sierchio
On Fri, Jan 20, 2012 at 11:13 PM, Chad Perrin per...@apotheon.com wrote: ... On the other hand, bsdinstall does get the job done, at least for my purposes.  It just does so in a way that feels a bit more straightjacketed, and it rubs me personally a bit the wrong way.  ... From my

Re: RIP routing protocol implementation is FreeBSD?

2012-01-30 Thread Michael Sierchio
On Mon, Jan 30, 2012 at 10:33 AM, Kaya Saman kayasa...@gmail.com wrote: Hi there, does anyone know if there's an implementation of the RIP version 2 routing protocol in FreeBSD??? man routed The routed utility is a daemon invoked at boot time to manage the network routing tables.

Re: /usr/home vs /home (was: Re: One or Four?)

2012-02-18 Thread Michael Sierchio
man hier ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: /usr/home vs /home (was: Re: One or Four?)

2012-02-18 Thread Michael Sierchio
On Sat, Feb 18, 2012 at 3:10 PM, Daniel Staal dst...@usa.net wrote: --As of February 18, 2012 2:46:32 PM -0800, Michael Sierchio is alleged to have said: man hier True, but /usr/... was a typical place to find users' home directories, since /usr is mounted when the system goes

Re: odd SDcard behaviour in freebsd-9.0-R

2012-02-27 Thread Michael Sierchio
Forgive the naive question, but on one of my Nikons, it is possible to present the device itself, or the SD card as a USD drive. Which are you doing? No doubt there is no driver for the D50 in the kernel, but the generic umass driver should handle the device. On Mon, Feb 27, 2012 at 9:47 AM,

Re: Cloning a FreeBSD system

2012-02-27 Thread Michael Sierchio
On Mon, Feb 27, 2012 at 10:21 AM, Damien Fleuriot m...@my.gd wrote: ssh-keygen(1) is the typical method. Or just delete the existing keys and sshd will recreate them at first boot ;) No, sshd will not create the keys. They are created by /etc/rc.d/sshd, which invokes ssh-keygen if it

Re: semi OT: correct CIDR block?

2012-03-05 Thread Michael Sierchio
ipsc, from packages or ports, is very useful. ipsc -gch 10.0.0.32/27 Network class:A Network mask: 255.0.0.0 Network mask (hex): FF00 Network address: 10.0.0.32 Subnet bits: 19 Max subnets: 524288 Full subnet mask:

Re: Editor With NO Shell Access?

2012-03-12 Thread Michael Sierchio
There are two edits to make to ex_shell.c in /usr/src/contrib/nvi/ex that will prevent a shell from being executed. 99,100c return (1); . 48,51c return (1); . On Mon, Mar 12, 2012 at 4:59 PM, David Brodbeck g...@gull.us wrote: On Mon, Mar 12, 2012 at 7:19 PM, Tim Daneliuk

Re: shutdown -p doesn't power-off USB

2012-03-31 Thread Michael Sierchio
That would be something in the BIOS settings, probably... On Sat, Mar 31, 2012 at 8:38 AM, Jens Schweikhardt schwe...@schweikhardt.net wrote: hello world\n I'm running 9-STABLE/amd64 and for a few months now, whenever I shut down with shutdown -p now, the USB devices still have power. This

Re: newfs create to little inodes

2012-04-16 Thread Michael Sierchio
On Mon, Apr 16, 2012 at 10:46 AM, Wojciech Puchar woj...@wojtek.tensor.gdynia.pl wrote: Does newfs always must create sufficient count of inodes? or I must supply some addition options when creating FS? yes man newfs (-i option) There are many use cases for a filesystem - if you have

Re: Adding a Static Route to rc.conf?

2012-05-03 Thread Michael Sierchio
On Thu, May 3, 2012 at 11:17 AM, Noel noeld...@gmail.com wrote: Indeed, I should have mentioned that if you have freebsd-8x or earlier, this feature isn't built-in but can be easily added:

Re: User can't login but /etc/(master.)passwd OK

2012-05-09 Thread Michael Sierchio
On Wed, May 9, 2012 at 8:03 AM, Robert Bonomi bon...@mail.r-bonomi.com wrote: Details are *IMPORTANT* grin What's the user's shell in the password file, and does that shell: exist? executable? In the /etc/shells file? ___

Re: file permission template

2012-05-12 Thread Michael Sierchio
man sh (or man csh) - look for 'umask' On Sat, May 12, 2012 at 7:37 AM, fake fake four.troublesome.he...@gmail.com wrote: I need a sort of file permission template. Under some particular directory (like ~/secret), I need all those files (including newly creating one) mode 700. Is there any

Re: ipfw subnetting

2012-05-21 Thread Michael Sierchio
On Mon, May 21, 2012 at 8:30 AM, Paul Macdonald p...@ifdnrg.com wrote: A very open firewall test script is as follows: 00010 allow ip from any to any via lo0 00081 deny log ip from 180.0.0.0/8 to any 00100 check-state You don't need the following 00101 allow tcp from any to any established

Re: ipfw subnetting

2012-05-21 Thread Michael Sierchio
On Mon, May 21, 2012 at 10:19 AM, Paul Macdonald p...@ifdnrg.com wrote: this is now resolved, i hadn't realised (embarrassingly) that ipfw list will show rules if if the fw is disabled. You should consider using tables, which allow you to add ad hoc nets, etc. and you can swap rulesets

Re: Anyone using freebsd ZFS for large storage servers?

2012-06-01 Thread Michael Sierchio
On Fri, Jun 1, 2012 at 7:35 AM, Polytropon free...@edvax.de wrote: I do _not_ want to try to claim a ZFS inferiority due to missing backups, but there may be occassions where (except performance), low-level file system aspects of UFS might be superior to using ZFS. If you have an operational

Re: Anyone using freebsd ZFS for large storage servers?

2012-06-01 Thread Michael Sierchio
On Fri, Jun 1, 2012 at 8:16 AM, Wojciech Puchar woj...@wojtek.tensor.gdynia.pl wrote: Better=random read performance of single drive. What an entirely useless performance measure! Maybe you should restrict yourself to using SSDs, which have rather unbeatable random read performance - the

Re: Anyone using freebsd ZFS for large storage servers?

2012-06-01 Thread Michael Sierchio
On Fri, Jun 1, 2012 at 8:08 AM, Wojciech Puchar woj...@wojtek.tensor.gdynia.pl wrote: ZFS is somehow in that part similar to Amiga Fast File System. when you overwrite a directory block (by hardware fault for example), everything below that directory will disappear. You may not be even aware

Re: Anyone using freebsd ZFS for large storage servers?

2012-06-02 Thread Michael Sierchio
On Sat, Jun 2, 2012 at 7:44 PM, Daniel Staal dst...@usa.net wrote: I will agree that ZFS could use a good worst-case scenario 'fsck' like tool. Worst-case scenario? That's when fsck doesn't work. Quickly followed by a sinking feeling. ZFS can be a complicated beast: It's not the best choice

Re: Clock lagging behind on FreeBSD 9.0-RELEASE under KVM

2012-06-05 Thread Michael Sierchio
Try machdep.independent_wallclock=1 On Tue, Jun 5, 2012 at 8:08 AM, Martin Dimitrov martin.dimit...@mafiainc.org wrote: Hi, I am new to FreeBSD, decided to migrate a web server to FreeBSD. I recently both a VPS that claim to use KVM as a virtualization service, I don't know the details of

Re: Proper Port Forwarding

2012-06-06 Thread Michael Sierchio
On Wed, Jun 6, 2012 at 11:31 AM, Simon si...@optinet.com wrote: This easily causes DoS for when too many FIN_WAIT_2 are created and IPFW stops forwarding using the rule above because of too many dynamic rules Change the defaults for the fw.dyn sysctl MIB nodes to something like

Re: Proper Port Forwarding

2012-06-07 Thread Michael Sierchio
On Thu, Jun 7, 2012 at 10:15 AM, Michael Powell nightre...@hotmail.com wrote: There is also this you can place in /etc/sysctl.conf: net.inet.tcp.fast_finwait2_recycle=1 Good catch. The defaults are perhaps not ideal in all cases: net.inet.tcp.finwait2_timeout: 6 - ms, ten minutes

Re: Proper Port Forwarding

2012-06-07 Thread Michael Sierchio
On Thu, Jun 7, 2012 at 10:27 AM, Michael Sierchio ku...@tenebras.com wrote: net.inet.tcp.finwait2_timeout: 6  - ms, ten minutes I can't do arithmetic, but you get the idea. A full minute. ___ freebsd-questions@freebsd.org mailing list http

Re: find date of last boot

2012-06-07 Thread Michael Sierchio
On Thu, Jun 7, 2012 at 7:34 PM, Polytropon free...@edvax.de wrote: Maybe introducing something along the /etc/rc execution? An /etc/rc.local entry like        /bin/date +%Y-%m-%d %H:%M:%S /var/log/thisboot.log and then just look at the file. Requires at least one reboot to take effect.

Re: ran out of inodes on /var, recommended value?

2012-06-09 Thread Michael Sierchio
On Sat, Jun 9, 2012 at 6:22 AM, Gary Aitken free...@dreamchaser.org wrote: I reconfigured my ssd filesystem with the /var partition of size 512M.   Unfortunately, something in portsnap or the ports tree in general uses a boatload of small files, and i ran out of inodes.  Can anyone recommend

Re: Is this something we (as consumers of FreeBSD) need to be aware of?

2012-06-10 Thread Michael Sierchio
On Sun, Jun 10, 2012 at 9:31 AM, Bruce Cran br...@cran.org.uk wrote: Does Intel control AMD too? Last I checked there are plenty of AMD machines in major stores and they come with Windows too. So... attempting to bring reason into the argument? That won't do, I'm afraid. ;-)

Re: Newbie question: Why aren't my cron jobs running?

2012-06-11 Thread Michael Sierchio
On Mon, Jun 11, 2012 at 7:04 PM, Walter Hurry walterhu...@gmail.com wrote: As the subject says, this is probably a newbie question (I am new to FreeBSD but quite experienced at Linux). FreeBSD9 on x86_64. Cron is running: $ ps -ax|grep cron  1513  ??  Is     0:00.01 /usr/sbin/cron -s  

Re: Newbie question: Why aren't my cron jobs running?

2012-06-11 Thread Michael Sierchio
On Mon, Jun 11, 2012 at 7:25 PM, Walter Hurry walterhu...@gmail.com wrote: cat /etc/shells ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to

Re: note

2012-06-11 Thread Michael Sierchio
On Mon, Jun 11, 2012 at 8:36 PM, Arlen McIntyre fallofz...@gmail.com wrote:   I cannot afford to buy FreeBSD. Dada is not dead! ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe,

Re: Does FreeBSD start slices at head boundaries?

2012-07-06 Thread Michael Sierchio
On Fri, Jul 6, 2012 at 11:58 AM, Eitan Adler li...@eitanadler.com wrote: Slices isn't the old way. There is no perf advantage for dedicated disks. Maybe you get a few kb of extra space. Don't do it. http://www.unixguide.net/freebsd/faq/09.03.shtml That is EXTREMELY old advice. The general

Re: geli - selecting cipher

2012-07-25 Thread Michael Sierchio
On Wed, Jul 25, 2012 at 11:57 AM, Wojciech Puchar woj...@wojtek.tensor.gdynia.pl wrote: i need high speed disk encryption (many disks running in parallel, lots of I'm not cryptography expert, is CBC somehow less secure, and if so is it really a problem? XTS-AES is a standard devised

Re: geli - selecting cipher

2012-07-26 Thread Michael Sierchio
On Thu, Jul 26, 2012 at 8:47 AM, Ivan Voras ivo...@freebsd.org wrote: You didn't get an answer because in security, the answer depends on exact circumstances of use. The short answer is that if you don't have a specific adversary you need to protect your data from, I'd say that GELI's CBC is

Re: Mounting raw disk backup file.

2012-08-06 Thread Michael Sierchio
On Sun, Aug 5, 2012 at 11:12 PM, Matthew Navarre navarre.matt...@gmail.comwrote: I had a drive fail recently, it was working fine until I rebooted. After that the partition map was corrupt and I can't mount either partition on the disk. So I made a copy of the whole disk using dd to an old

Re: Why can't I set my cpu type in kernel config ?

2012-08-06 Thread Michael Sierchio
make LINT vi LINT On Mon, Aug 6, 2012 at 4:53 PM, Jason Usher jushe...@yahoo.com wrote: I am installing 8.3-RELEASE on an old 900mhz pentium laptop ... it's an i686 CPU. By default, GENERIC has HAMMER as the cpu, and that isn't working. So I tried both: cpu I586_CPU and: cpu

Re: How to keep freebsd-update from trashing custom kernel?

2012-08-13 Thread Michael Sierchio
On Mon, Aug 13, 2012 at 9:35 AM, Brett Glass br...@lariat.net wrote: Actually, freebsd-update is claimed to respect custom kernels. ... And it does, in my experience. If the hash of the kernel doesn't match that of the distribution (or recent update), freebsd-update leaves it alone.

Re: How to keep freebsd-update from trashing custom kernel?

2012-08-13 Thread Michael Sierchio
On Mon, Aug 13, 2012 at 1:07 PM, Brett Glass br...@lariat.net wrote: At 11:33 AM 8/13/2012, Michael Sierchio wrote: And it does, in my experience. If the hash of the kernel doesn't match that of the distribution (or recent update), freebsd-update leaves it alone. That is what I thought

Re: /tmp filesystem full

2012-08-22 Thread Michael Sierchio
This will happen automatically if you go to multiuser without a writeable /tmp. See /etc/rc.d/tmp I have a problem with the semantics of the rc scripts for this and var, though - if you are going to use a memory-backed filesystem, you should reserve all the space at the outset. Bad things can

Re: /tmp filesystem full

2012-08-22 Thread Michael Sierchio
On Wed, Aug 22, 2012 at 3:29 PM, RW rwmailli...@googlemail.com wrote: Sorry I misread the previous post which *was* referring to an md device, but the rest is right. Not really. ;-) The one compelling reason to use an md filesystem for /tmp or /var is when you have no swap, and/or your root

Re: /tmp filesystem full

2012-08-22 Thread Michael Sierchio
On Wed, Aug 22, 2012 at 5:43 PM, Polytropon free...@edvax.de wrote: For the mentioned appliances, that would not be a problem. However there's a distinction between /tmp and /var/tmp that can be summarized like this: The content of /tmp may disappear after a reboot (see clear_tmp_enable=YES

Re: /tmp filesystem full

2012-08-22 Thread Michael Sierchio
On Wed, Aug 22, 2012 at 7:17 PM, RW rwmailli...@googlemail.com wrote: tmpfs and swap md devices don't actually need swap. I don't seen any advantage in your way of creating an md device for /tmp. Then you don't understand. ;-) The advantage of my approach is avoiding a kernel panic when

Re: Force disk with old GPT label to be recognized as MBR one

2012-08-30 Thread Michael Sierchio
On Thu, Aug 30, 2012 at 1:54 AM, Виталий Туровец core...@corebug.net wrote: So my question is: how do i force the system to ignore old corrupt GPT header on this hdd, or how do i remove the header, or is there any workaround possible? dd if=/dev/zero of=/dev/ada1 bs=64k

Re: Force disk with old GPT label to be recognized as MBR one

2012-08-30 Thread Michael Sierchio
On Thu, Aug 30, 2012 at 4:18 AM, Виталий Туровец core...@corebug.net wrote: Well, i thought that my need to get files from hdd is easy enough to understand from my original message:) Извините, пожалуйста! ___ freebsd-questions@freebsd.org mailing

  1   2   >