error compiling kernel for SMP

[Scott Wallace]

I have a computer running FreeBSD 4.3. This computer has dual 266MHz Intel PII 
processors. I am trying to compile a new kernel for the multiple processors. I copied 
GENERIC to DUALIE and uncommented the two lines for SMP kernel. I have tried the old 
way and the new way according to 
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig-building.html 
where it lists both the old way and new way. I cannot get either way to work. 


When trying the old way, everything goes ok until I cd ../../compile/DUALIE and issue 
the command make depend at which time I get the following error:
===> accf_data
"/usr/src/sys/modules/accf_data/../../conf/kmod.mk", line 63: Could not find 
bsd.init.mk
"/usr/src/sys/modules/accf_data/../../conf/kmod.mk", line 190: Could not find 
bsd.links.mk
make: fatal errors encountered -- cannot continue
*** Error code 1

Stop in /usr/src/sys/modules.
*** Error code 1

Stop in /usr/src/sys/compile/DUALIE.



When trying the new way I issue the command make buildkernel KERNCONF=DUALIE  the make 
process begins and chugs along for a few minutes, then I get the following error:
===> crypto
@ -> /usr/src/sys
machine -> /usr/src/sys/i386/include
make: don't know how to make des_enc.c. Stop
*** Error code 2

Stop in /usr/src/sys/modules.
*** Error code 1

Stop in /usr/obj/usr/src/sys/DUALIE.
*** Error code 1

Stop in /usr/src.
*** Error code 1

Stop in /usr/src.


I am having great trouble finding anything on the Internet about this and pretty much 
at a loss about what is causing this problem and how to resolve it. Any help you can 
offer will be greatly appreciated.
Thank You
Owen Wallace
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: One of your employees are very rude.

[Randi Harper]

I'm sorry but..

hahahahahahahahahahahaha.

It's IRC. You expected something different?

Love,
Randi Harper
[EMAIL PROTECTED]
http://freebsdgirl.com
On Jan 30, 2004, at 11:06 PM, lorink wrote:

To whom it may concern,

I just want to let the bsd team know this has been a great OS and it is
meeting my needs over that of other operating systems including 
windows which
I was a software tester of W2k back in the late 90s. While your 
documentation
is excellent and sometimes such subjects on google searches also 
provide
answers I recently have stumbled across a irc chanell on efnet called
#freebsdhelp. Been a good chanell so far but lately there is one op 
nick name
"hideaway"  who has been a little on the rude side and has kicked some 
people
or my self and not permited them to return to the chanell because of 
his
fits. I have a log of  the events that led up to my being banned from 
the
chanell and let me know if this is a employee that represent 
freebsd.org

Sincerly,

James K

--clip--

 you don't like sad?
 he's too happy
 hideaway,  that was not cool what did he ever do?
 so what?
 he asked too many questions
??? Lori17 [EMAIL PROTECTED] has joined 
#FreeBSDHelp
 lol
 let me remind you this is freebsdhelp
 OH WoW
 THANKS!
??? mode/#FreeBSDHelp [+b [EMAIL PROTECTED] by hideaway
You have been kicked off #FreeBSDHelp by hideaway (go join your 
fucking
  loser friend)
??? [#freebsdhelp] Banned from channel
freebsdhelp: No such nick/channel
??---?--??-??---?--??-?--- --  -
| hideaway ([EMAIL PROTECTED]) (unknown)
? ircname  : Pete Fritchman <[EMAIL PROTECTED]>   <-- Does he work for
Freebsd?
? server   : irc.mindspring.com (EarthLink, Inc.)

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
"[EMAIL PROTECTED]"

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

tcp_mss porting for an end host

[Dinesh Kumar]

I am trying to port FreeBSD TCP to an embedded system
which does have host functionality only. The system
does not perform any routing and it always sends
packets to default router if destination in not
on-link. Can somebody give me hints about porting
function tcp_mss? I think, I can reduce some part of
this function for host devices only.

Regards
Dinesh Kumar

__
Do you Yahoo!?
Yahoo! SiteBuilder - Free web site building tool. Try it!
http://webhosting.yahoo.com/ps/sb/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Booting Problem

[Rishi Chopra]

Thank you!

Ion-Mihai Tetcu wrote:
On Mon, 02 Feb 2004 19:49:50 -0800
Rishi Chopra <[EMAIL PROTECTED]> wrote:

I'm getting the following error message during startup:

/usr: mount pending error: blocks 16 files 1

I'm guessing this orrcured due to a shutdown during background fsck of 
the filesystem.


Not necessarily during a bgfsck, just the filesystem is not clean, so
bgfsck will run. 


Will the error fix itself (e.g. will the boot process continue and 
finally proceed to a prompt) or do I need to intervene?


Usually it will continue, if not, you will be the first or know ;)


If intervention  is required, how would I go about setting things right?


Watch (tail -F) /var/log/messages, after login, if you get something
strange there (like unexpected softupdate inconsistency, run fsck
manually or fsck drops core) or if on the next reboot it happens again
boot is single user and run fsck.


--
Rishi Chopra
http://www.ocf.berkeley.edu/~rchopra
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"



--
Rishi Chopra
http://www.ocf.berkeley.edu/~rchopra
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Booting Problem

[Ion-Mihai Tetcu]

On Mon, 02 Feb 2004 19:49:50 -0800
Rishi Chopra <[EMAIL PROTECTED]> wrote:

> I'm getting the following error message during startup:
> 
> /usr: mount pending error: blocks 16 files 1
> 
> I'm guessing this orrcured due to a shutdown during background fsck of 
> the filesystem.

Not necessarily during a bgfsck, just the filesystem is not clean, so
bgfsck will run. 

> Will the error fix itself (e.g. will the boot process continue and 
> finally proceed to a prompt) or do I need to intervene?

Usually it will continue, if not, you will be the first or know ;)

>  If intervention  is required, how would I go about setting things right?

Watch (tail -F) /var/log/messages, after login, if you get something
strange there (like unexpected softupdate inconsistency, run fsck
manually or fsck drops core) or if on the next reboot it happens again
boot is single user and run fsck.


> 
> -- 
> Rishi Chopra
> http://www.ocf.berkeley.edu/~rchopra
> ___
> [EMAIL PROTECTED] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"


-- 
IOnut
Unregistered ;) FreeBSD user
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Booting Problem

[Rishi Chopra]

I'm getting the following error message during startup:

/usr: mount pending error: blocks 16 files 1

I'm guessing this orrcured due to a shutdown during background fsck of 
the filesystem.

Will the error fix itself (e.g. will the boot process continue and 
finally proceed to a prompt) or do I need to intervene?  If intervention 
is required, how would I go about setting things right?

--
Rishi Chopra
http://www.ocf.berkeley.edu/~rchopra
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Freebsd 4.9, 5.1 & 5.2

[William Segars]

Gentleman and Ladies:

I am having trouble with freebsd 4.9, 5.1, and 5.2. 
Neither of them recognizes my printer or floppy drive.
 I am a BSD novice and use KDE as a graphical
interphase.

1) I have a Canon BJC-210.  I have downloaded and
installed Cups, Aspfilter, asfilter, ghostscript etc
and none of these recognizes my printer.

I get this message on bootup
ppc0: (parallel port) at port 0x378-0x37F irq 7 on ISA
ppbus0: (parallel portbus) on ppc0
1pt0: (printer) on pp bus 0
pp0: (parallel I/O) on ppbus 0

However it doesn't seem to know my printer is there
when I try to print.

2) I get this message at bootup
fd0: (1440-kb 3.5 drive) on fdc drive 0

However, I can't access the floppy drive.  When I
create an Icon and put the path /dev/fd/fd0. I can't
access the floppy.

3) I use efax and have kdefax and tkfax as my
frontend.
My modem is configured in kde as cuaa0.  Efax uses
"modem" as a default.  How can I change it to cuaa0. 
In the execution file at /usr/local/bin/fax - it has a
line that says 
DEV=modem
#DEV=cuaa1
when I change it to #Dev=cuaa0 - it makes no
difference.  
The only way I have found around this is to go to
/dev/cuaa0 (using graphical interphase) - pull it out
to my desktop and using link application.  I change
the name to "modem" and put it back (there is now both
a cuaa0and modem in /dev.  Then I'm able to send
faxes.  However, there is no way to save this
configuration and when I turn off my computer it
resets to the original settings 

I have been a Linux user for many years.  The
port/packages system that BSD uses is far superior to
RPM's or any other linux systems (with the possible
exception of aptget for Debian which I have never
used).  I'd like to keep Freebsd as my operating
system of choice but I need to get these problems
solved.

Thank you in advance for your help.

William Segars



__
Do you Yahoo!?
Yahoo! SiteBuilder - Free web site building tool. Try it!
http://webhosting.yahoo.com/ps/sb/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Problem booting WinXP from second drive

[Jud]

On Sun, 1 Feb 2004 13:36:27 -0800, Relayer <[EMAIL PROTECTED]> wrote:

I have a machine with FreeBSD 4.2 running on one drive.  I wanted to try  
dual booting and mucking about with wine, so I decided to install WinXP  
as well.  To avoid messing up my primary drive, I thought I would be  
able to accomplish the process in the following way:

1.  disconnect primary drive
2.  connect second drive (so it looks like the only one in the PC) and  
install WinXP on it
3.  verify that WinXP boots off this drive
4.  install FreeBSD boot loader on this drive
5.  verify that WinXP boots using FreeBSD boot loader

All works as expected to this point.

Then I hook up the primary drive again and reboot.  I see the following  
at boot time:

F1: FreeBSD
F2: FreeBSD
F5: Drive 1
I hit F5.  Then I see

F1: DOS
F5: Drive 0
When I hit F1, I expect WinXP to boot.  But nothing happens.  The  
machine just sits there.  I have scanned a lot of material in the  
Handbook and on google today and yesterday, but I cannot figure out what  
I did wrong.  Does anybody have any ideas that don't involve using grub  
or gag or something else?
The sleight-of-hand with the drives is unnecessary.  :)  Let Windows stay  
on the first drive where it wants to be.  FreeBSD is happy on the second  
drive.  The FreeBSD boot loader must be installed on *both* drives.

The loader will call your XP drive "???" if it's formatted using NTFS.  It  
will boot XP just fine, it's just that there are several OSs that have  
filesystems resembling NTFS (e.g., OS/2 and QNX), and the FreeBSD  
bootloader doesn't have the extra space used by fancier bootloaders to  
store multiple user-selectable names.

Jud
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: ftp/fetch/cvsup behind a firewall

[Kent Stewart]

On Monday 02 February 2004 11:18 am, Anthony Discolo wrote:
> I don't have a /usr/share/examples/etc/defaults/make.conf, but I have
> a /usr/share/examples/etc/make.conf.  But it doesn't have a FETCH_ENV
> line in it.
>
> I'm sure someone has been successful in running cvsup behind a
> firewall? After all, don't all these tools use ftp indrectly?

I use cvsup behind the ipfw firewall. I thought I had to allow port 
5999, which is the port cvsup used to talk to the server, and will have 
to look at my firewall rules more closely. I use a cvs-mirror to 
maintain my outside information. I have fewer problems accessing the 
mirror from inside my firewall. A 100mpbs network is also much faster 
than my DSL line :).

Do you have control of the firewall?

Kent

>
> Thanks.
>
> Original Message Follows
> From: Khairil Yusof <[EMAIL PROTECTED]>
> To: Anthony Discolo <[EMAIL PROTECTED]>
> CC: [EMAIL PROTECTED]
> Subject: Re: ftp/fetch/cvsup behind a firewall
> Date: Tue, 03 Feb 2004 02:20:33 +0800
>
> On Mon, 2004-02-02 at 09:55 -0800, Anthony Discolo wrote:
>  > Mozilla can access the ftp site with the proxy server configured,
>  > but I haven't been able to get ftp to work with a proxy server.
>
> For fetch via proxy see:
> /usr/share/examples/etc/defaults/make.conf
>
> Copy this file to /etc and edit the FETCH_ENV to point to your proxy
>
> For cvsup, if you only have access via the proxy server, you can ftp
> the entire cvs tree (not efficient). I would ask your admin to either
> setup a local mirror , or add a dynamic rule for outgoing cvsup
> connections.
>
>
> --
> "You keep using that word. I do not think it means what you think it
> means."
>
> FreeBSD 5.2-CURRENT i386
> 2:05am up 46 mins, 4 users, load averages: 1.53, 2.23, 2.15
> << signature.asc >>

-- 
Kent Stewart
Richland, WA

http://users.owt.com/kstewart/index.html

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: True IMAP Trash Folder

[Jonathan T. Sage]

Oscar - well, as far as client, yes, you would need to sync them. But, 
if you filter on the server, it can be accomplished on without any 
client configuration.

Take a look at Mail::Audit.  I use it with imap-uw, and it works quite 
well.  I just filter mail into a couple seperate mboxs in my home dir, 
and off I go.

~j

Oscar Ricardo Silva wrote:
Which leads me to ask/comment/point out, a bit off topic perhaps ... if 
you do take the filter path, and are checking mail on different 
machines, perhaps with different applications and operating systems ... 
how do you sychronize your filters?  I believe there's not a centralized 
universal way of filtering messages.  Do you have create them on each 
app you use?

Oscar


--
"Yesterday upon the stair I saw a man
who wasn't there, he wasn't there
again today, oh how i wish he'd go away"
Rev. Jonathan T. Sage
Lighting / Set Designer
Professional Web Design
[HTTP://theatre.msu.edu]
[EMAIL PROTECTED]
[See Headers for Contact Info]


pgp0.pgp
Description: PGP signature

Re: OT: php question.

[Ion-Mihai Tetcu]

On Mon, 2 Feb 2004 17:28:59 -0800
Gary Kline <[EMAIL PROTECTED]> wrote:

>   Is there a way of having  print the name of 
>   its file (along with the number of hits for tht file) and
>   keep track of all the files in a $WWW_ROOT/filecount page?
> 
>   Right now I have a cgi script tracking over 100 individual
>   file with
> 
>   filename1   hitcount1
>   filename2   hitcount2
>   ...
>   filenameN   hitcountN
> 
>   This question came about when I realized that I've got
>   more than 30K hits on *all* my pages in the past 22 months.
> 
>   Of course, I could hand-code each individual filename  and
>   call the counter code. Isn' there a more automagic way?

$_SERVER["SCRIPT_FILENAME"] 
/usr/local/psa/home/vhosts/some_host.ro/httpdocs/phpinfo.php
$_SERVER["REQUEST_URI"] /phpinfo.php
$_SERVER["SCRIPT_NAME"] /phpinfo.php
$_SERVER["PATH_TRANSLATED"]/usr/local/psa/home/vhosts/some_host.ro/httpdocs/phpinfo.php
 
$_SERVER["PHP_SELF"]/phpinfo.php 

I would suggest only echo-ing a line per file per hit and do a wc -l
when needed; or echo the SCRIPT_FILENAME in a single file and do a grep
$SCRIPT_FILENAME | wc -l when needed. Of course, you can optimise this
(e.g. monthly doing accounting and deleteing the content of the log).
This way is much faster that reading current count for the page,
incrementing and writing it back.

This is far for being the best way, esp. under load, but will do the
trick.



-- 
IOnut
Unregistered ;) FreeBSD user
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: phpBB problems with mysql? [OT?]

[Jon-Eirik Pettersen]

Eric F Crist wrote:

This may be a little off-topic, if so, I apologize.  I'm running phpBB2 on my 
webserver.  I finally got it working, and it's been great since Friday.  This 
afternoon, when I try to load the page, I get the following error:

phpBB : Critical Error 

Error creating new session

DEBUG MODE

SQL Error : 1062 Duplicate entry '-1' for key 2

INSERT INTO phpbb_sessions (session_id, session_user_id, session_start, 
session_time, session_ip, session_page, session_logged_in) VALUES 
('8f431818aa903b05979098a737674ac3', -1, 1075754200, 1075754200, '3fe40ef5', 
0, 0)

Line : 152
File : /www/seccomp/htdocs/phpBB2/includes/sessions.php 

Does anyone have any suggestions?  Thanks!
 

Try to empty the "phpbb_sessions"-table, (DELETE FROM phpbb_sessions). 
Remember to back it up first.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: phpBB problems with mysql? [OT?]

[Kevin D. Kinsey, DaleCo, S.P.]

Eric F Crist wrote:

This may be a little off-topic, if so, I apologize.  I'm running phpBB2 on my 
webserver.  I finally got it working, and it's been great since Friday.  This 
afternoon, when I try to load the page, I get the following error:

 

Which page?

phpBB : Critical Error 

Error creating new session

DEBUG MODE

SQL Error : 1062 Duplicate entry '-1' for key 2

INSERT INTO phpbb_sessions (session_id, session_user_id, session_start, 
session_time, session_ip, session_page, session_logged_in) VALUES 
('8f431818aa903b05979098a737674ac3', -1, 1075754200, 1075754200, '3fe40ef5', 
0, 0)

Line : 152
File : /www/seccomp/htdocs/phpBB2/includes/sessions.php 

Does anyone have any suggestions?  Thanks!
 

This would probably be a great one
for the folks at the phpbuilder.com
forums.  Before you head there, I'd
suggest Googling for the error message,
and also checking phpbb.org to see
if this is a FAQ for PHPBB (IIRC, there
is...)
Obviously, some call is returning a
value of negative one.  This seems a
tad unusual for PHP, which generally
returns 1 on success, zero on failure.
I doubt that PHPBB calls to system()
or shell_exec(), so it's a little beyond
me.  On my PHPBB, line 152 is blank...
but I'm not recalling what version I
have, and I have multiple installations...
Kevin Kinsey

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

OT: php question.

[Gary Kline]

Is there a way of having  print the name of 
its file (along with the number of hits for tht file) and
keep track of all the files in a $WWW_ROOT/filecount page?

Right now I have a cgi script tracking over 100 individual
file with

filename1   hitcount1
filename2   hitcount2
...
filenameN   hitcountN

This question came about when I realized that I've got
more than 30K hits on *all* my pages in the past 22 months.

Of course, I could hand-code each individual filename  and
call the counter code. Isn' there a more automagic way?

thanks for any clues,

gary


-- 
   Gary Kline [EMAIL PROTECTED]   www.thought.org Public service Unix

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Problem with KDE

[Gerard Seibert]

I am not sure if this is the correct place to ask this question, but I figured 
I might as well start somewhere.

I am presently running  BSD version 5.2. I just installed the meta port for 
KDE. The port seemed to install correctly. The problem is that the program 
will not terminate correctly. When I attempt to shutdown KDE, the system 
becomes unstable and I am forced to do a three finger salute to stop it and 
reboot.

The following ios the output of the nohup.out file. Perhaps someone can tell 
me what the problem is. I might add that Gnome runs just fine. 
 
XFree86 Version 4.3.0 
Release Date: 27 February 2003 
X Protocol Version 11, Revision 0, Release 6.6 
Build Operating System: FreeBSD 5.2 i386 [ELF]  
Build Date: 07 December 2003 
Before reporting problems, check http://www.XFree86.Org/ 
to make sure that you have the latest version. 
Module Loader present 
Markers: (--) probed, (**) from config file, (==) default setting, 
 (++) from command line, (!!) notice, (II) informational, 
 (WW) warning, (EE) error, (NI) not implemented, (??) unknown. 
(==) Log file: "/var/log/XFree86.0.log", Time: Mon Feb  2 19:50:57 2004 
(==) Using config file: "/etc/X11/XF86Config" 
startkde: Starting up... 
Xlib:  extension "GLX" missing on display ":0.0". 
Xlib:  extension "GLX" missing on display ":0.0". 
QPixmap: Cannot create a QPixmap when no GUI is being used 
QPixmap: Cannot create a QPixmap when no GUI is being used 
Xlib:  extension "GLX" missing on display ":0.0". 
Xlib:  extension "GLX" missing on display ":0.0". 
QPixmap: Cannot create a QPixmap when no GUI is being used 
QPixmap: Cannot create a QPixmap when no GUI is being used 
kbuildsycoca running... 
Xlib:  extension "GLX" missing on display ":0.0". 
Xlib:  extension "GLX" missing on display ":0.0". 
Xlib:  extension "GLX" missing on display ":0.0". 
Xlib:  extension "GLX" missing on display ":0.0". 
nspluginscan: not found 
Xlib:  extension "GLX" missing on display ":0.0". 
Xlib:  extension "GLX" missing on display ":0.0". 
mcop warning: user defined signal handler found for SIG_PIPE, overriding 
Warning: connect() failed: : No such file or directory 
Xlib:  extension "GLX" missing on display ":0.0". 
Xlib:  extension "GLX" missing on display ":0.0". 
Xlib:  extension "GLX" missing on display ":0.0". 
Xlib:  extension "GLX" missing on display ":0.0". 
QFont::setPointSize: Point size <= 0 (-3) 
Xlib:  extension "GLX" missing on display ":0.0". 
Xlib:  extension "GLX" missing on display ":0.0". 
Xlib:  extension "GLX" missing on display ":0.0". 
Xlib:  extension "GLX" missing on display ":0.0". 
Xlib:  extension "GLX" missing on display ":0.0". 
Xlib:  extension "GLX" missing on display ":0.0". 
Xlib:  extension "GLX" missing on display ":0.0". 
Xlib:  extension "GLX" missing on display ":0.0". 
Xlib:  extension "GLX" missing on display ":0.0". 
Xlib:  extension "GLX" missing on display ":0.0". 
Xlib:  extension "GLX" missing on display ":0.0". 
Xlib:  extension "GLX" missing on display ":0.0". 
startkde: Shutting down... 
Warning: connect() failed: : No such file or directory 
Error: Can't contact kdeinit! 
ICE default IO error handler doing an exit(), pid = 613, errno = 35 
ICE default IO error handler doing an exit(), pid = 615, errno = 35 
ICE default IO error handler doing an exit(), pid = 628, errno = 0 
FATAL: DCOP communication problem! 
warning: leaving MCOP Dispatcher and still sound server terminated 
startkde: Running shutdown scripts... 
9 object references alive. 
  - Arts::SampleStorage 
  - Arts::Synth_MULTI_ADD 
  - Arts::Synth_MULTI_ADD 
  - Arts::Synth_PLAY 
  - Arts::StereoVolumeControl 
  - Arts::StereoEffectStack 
  - Arts::Synth_BUS_DOWNLINK 
  - Arts::SoundServerV2 
  - Arts::MidiManager 
warning: leaving MCOP Dispatcher and still 75 types alive. 
FATAL: DCOP communication problem! 
startkde: Done. 
 
waiting for X server to shut down FATAL: DCOP communication problem! 
FATAL: DCOP communication problem! 
 
 
FATAL: DCOP communication problem! 
FATAL: DCOP communication problem! 
FATAL: DCOP communication problem! 
FATAL: DCOP communication problem! 
FATAL: DCOP communication problem! 
FATAL: DCOP communication problem! 
FATAL: DCOP communication problem! 
FATAL: DCOP communication problem! 
FATAL: DCOP communication problem! 
FATAL: DCOP communication problem! 
FATAL: DCOP communication problem! 
FATAL: DCOP communication problem! 
FATAL: DCOP communication problem! 
FATAL: DCOP communication problem! 
FATAL: DCOP communication problem! 
FATAL: DCOP communication problem! 
FATAL: DCOP communication problem! 
FATAL: DCOP communication problem! 
FATAL: DCOP communication problem! 
FATAL: DCOP communication problem! 
FATAL: DCOP communication problem! 
FATAL: DCOP communication problem! 
FATAL: DCOP communication problem!

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[E

timeouts on network adapter

[Per olof Ljungmark]

Running 4.9-RELEASE-p1 on a older SMP system (Compaq PL1850R) and having 
tried the following adapters: Intel Pro100 (fxp), Pro1000 (em), 3C905B,C 
(xl) and finally the built-in Thunderlan based adapter.

All of them is having problems (timeouts) since a while back and some 
reading points to issues introduced late last year.

Since I'm not sure how to handle this and I would welcome advices how to 
resolve the situation. Can I back only a specific part of the OS or do I 
have to downgrade completely or is there a fix?

Grateful for your replies,
Per olof
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Adding Packages and Ports

[Scott W]

Krikket wrote:

On Sun, 1 Feb 2004, Roop Nanuwa wrote:
 

Krikket wrote:

   

I've done a brand-new install of FreeBSD (4.9), and am a fresh user to
this flavor of *nix.
 

Welcome, we hope you enjoy your stay :).
   

Thank you!

 

The install went more or less without a hitch.  For some reason ldap (part
of the default package selection) didn't want to install.
 

Could you be a bit more specific? What happened during the install? Did
it give you any
error messages?
   

A generic compile error message, nothing specific.  And unfortunately, I
didn't take notes.  (No, I wasn't expecting help with troubleshooting that
point, it was said more in the way of a commentary than anything else.  I
figured that when I got to the point of needing it, I could always install
it at a later time, and if needed ask questions then.)
 

To test things out, I tried installing mozilla.  It failed due to a
dependancy, so I checked out the website to see what was available, found
a version that was there, adn installed it.
 

How are you installing mozilla? There shouldn't be any dependency
problems in either of the two main ways to install packages on FreeBSD.
Whether you install via the ports tree or through the package system all
the dependencies should be handled for you. I think the reason that
you're having dependency issues is because you're attempting to install
binaries that you've downloaded that aren't packaged for FreeBSD
specifically.
   

I attempted to do a "pkg_add -r mozilla".  After checking the on-line
database of software at freebsd.org, I know I tried some versons of the
command lile "... -r linux-mozilla" and sometimes with version numbers.  I
forget the exact one that did work.
 

But when I type "mozilla" to start the program, it's not found.  (Nor was
it added to the KDE Menu.)
I was able to do a "pkg_add -r cvsup" on the first try.  But I ended up
with the same problem -- not being able to find the package once it was
installed.  Needless to say, I can't add any ports as a result.
 

Which shell are you running? You might have to run 'rehash' to refresh
your shell's cache of available programs. Logging in/out would do the
same but running 'rehash' is simpler/quicker.
   

bash.  I'll give that a shot.  I'm not at home at the moment, and for some
reason ssh doesn't want to allow me to login.
For bash, you'll want to do a 'hash -r' instead of rehash

Scott

(I get a login prompt, but it's not accepting the correct password for
either myself or the root accounts.  Even after I called home and had the
roommate reboot the system, just in case something flakey got into
memory.  I'm thinking it may be time to pull out the rubber chicken.)
Krikket

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
 



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: cron and anacron

[Bjorn Eikeland]

Looks like it (from port collection):

Port:   anacron-2.3
Path:   /usr/ports/sysutils/anacron
Info:   Schedules periodic jobs on systems that are not permanently up
Maint:  [EMAIL PROTECTED]
Index:  sysutils
B-deps: expat-1.95.6_1 gettext-0.12.1 gmake-3.80_1 libiconv-1.9.1_3
R-deps:
Hi,

I use linux on my laptop and installed FreeBSD on my PC.
In linux I used anacron to get all the "lost" cron jobs my laptop was 
not "on".
Is there something similar (or is anacron ported to FreeBSD) on FreeBSD?

Thanx for any help.

Oliver


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: FreeBSD and Grub

[Charlie Schluting]

Joe Lewis wrote:
Try :

root (hd0,3)
chainloader +1
This causes the grub program to load the first sector of the BSD 
partition, which is a subMBR and handles loading the OS.

Joe

I'm posting this to the list, because I couldn't find it documented 
anywhere. I was looking around about how to install the fbsd boot 
manager to the boot sector of this partition, but it seems it is done by 
default.

Removing 'kernel /boot/loader' and adding 'chainloader +1' (instead of 
keeping both, like some docs suggest) worked perfectly.

Thanks Joe!


Charlie Schluting wrote:

root(hd0,3,a)
kernel /boot/loader
Upon boot attempt, I see:

Filesystem type unknown, partition type 0xa5
Error 17: Cannot mount selected partition.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

cron and anacron

[Oliver Fuchs]

Hi,

I use linux on my laptop and installed FreeBSD on my PC.
In linux I used anacron to get all the "lost" cron jobs my laptop was not "on".
Is there something similar (or is anacron ported to FreeBSD) on FreeBSD?

Thanx for any help.

Oliver
-- 
... don't touch the bang bang fruit
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

OT: Request to the postmaster.

[Chris]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Is it possibe, that you can weed out these idiots that not only use comany 
email, but have the lameness about them to put on an auto-reply?

- -- 
Best regards,
Chris

-BEGIN PGP SIGNATURE-
Version: PGP 6.5.8

iQA/AwUBQB7Dfg+T/4DAG8NjEQLX7gCfVdmkGNZ//F/Ctu2wLz76Dd85qbIAn1gO
SircQLr2ytuMIvdurphI2EKs
=Nmaa
-END PGP SIGNATURE-

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

freebsd compatibility

[Abdool]

Hi,
I have a P4 2.4 cpu with Asus mainboard, US Robotics modem, NVidia GEforce FX 5200 VGA 
card, SoundMax sound card, HP 840 printer and HP 4200 Scanner. Will FreeBSD work with 
these hardware? I am currently using Windows XP and I'm thinking of putting FreeBSD on 
a separate partition.
Thanks for your help
Abdool
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Adding Packages and Ports

[Dave]

On Mon, 2 Feb 2004 03:34:33 -0500 (EST), you wrote:

>I got my copy of FreeBSD by downloading the isos.  CD 1 & 2 and "mini".
>That's all that was available.

Disc 1 is the install disc.

Disc 2 is the repair/recovery disc

"Mini" is disk 1 stripped down to more or less bare minimum.  It's all you
need to download if you have a decent 'net connection as the remainder of
discs 1 and 2 are pre-compiled binary packages which you get from ports or
pkg_add over the 'net connection as required.

Now I come to think of it, the "Mini" CD has no X windows managers either
(other than TWM), if it even has X on it at all.  Not 100% sure on that.

HTH

dave

-- 
Any speling misteaks are the reult of a bad insallation of mod_spelink.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: portsdb -U fails

[Chris]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Monday 02 February 2004 03:19 pm, Kris Kennaway wrote:
> On Mon, Feb 02, 2004 at 09:45:00PM +0100, r t g tan wrote:
> > > Then why not quit banging you head on a wall and use "make index". Your
> > > failure to adapt is spamming the list. Portsdb -U has not produced
> > > totally clean INDEX runs since I can remember. Make index, on the other
> > > hand, is currently producing clean makes.
> > >
> > > There are times when one doesn't work and the other does. You just have
> > > to not refuse anything but ports/INDEX.
> > >
> > > Kent
> > >
> > > --
> > > Kent Stewart
> > > Richland, WA
> > >
> > > http://users.owt.com/kstewart/index.html
> >
> > make index fails as well with a bunch of make_index: no entrie messages.
> >
> > I guess Ill leave it at this waiting for it to get fixed.
>
> It's not broken.  Please reread earlier advice given to you.
>
> Kris

Or - perhaps wiping /usr/ports and starting from the CD?


- -- 
Best regards,
Chris

-BEGIN PGP SIGNATURE-
Version: PGP 6.5.8

iQA/AwUBQB69ag+T/4DAG8NjEQJnfwCgs/Xq7GsgqzqdDcfEg0sRTuryexMAnjX3
oJaDvmgp3IV5ymwIoS5R3UNW
=fwxv
-END PGP SIGNATURE-

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re[2]: True IMAP Trash Folder

[Oscar Ricardo Silva]

At 09:33 AM 2/2/2004, you wrote:
Hi Matt,

On Mon, 02 Feb 2004 10:27:41 -0500 UTC (2/2/2004, 9:27 AM -0600 UTC my
time), Matt Juszczak wrote:
>>There is no trash folder in the IMAP protocol itself.. Removing mail is a
>>two step process, first of deleting it, and second of purging the deleted
>>mail.
>>
>>
>>
M> I understand now.  Thanks.  So do you know of a mail client that
M> supports "Deleting Items" to a folder called "Trash" on the IMAP
M> server?
No, because it is not part of the IMAP protocol.

M> Right now I have evolution and if I delete mail it puts it into
M> a local trash folder, but I dont see an option to "Copy deleted mail to
M> folder  on mail server" or something like that.
Right, not part of the protocol, so there would be no option for that. You
can either manually drag-N-drop deleted mail, before you purge it, to a new
folder you create on the server, called Trash, or whatever. Or... perhaps
you can set up a filter to move/copy deleted mail to your new Trash folder,
etc... this might work.


Which leads me to ask/comment/point out, a bit off topic perhaps ... if you 
do take the filter path, and are checking mail on different machines, 
perhaps with different applications and operating systems ... how do you 
sychronize your filters?  I believe there's not a centralized universal way 
of filtering messages.  Do you have create them on each app you use?

Oscar

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: uname -a was(Cvsup and RELENG_4 or RLENG_4_9)

[Bob Collins]

On Tue, Feb  3, 2004, Jonathan Chen clacked the keyboard to produce:
> On Mon, Feb 02, 2004 at 11:39:10AM -0500, Bob Collins wrote:
> > This is a follow-up question regarding uname -a. After CVSup, making
> > world, making a new kernel etc, when I run uname -a it reports
> > 4.9-RELEASE #0. Should the #0 portion be a higher number? Also what
> > exactly does that number represent? I assume an RC
> 
> It represents the number of times you've built the kernel using the
> current sources.
> -- 
> Jonathan Chen <[EMAIL PROTECTED]>
> ---
> "I love deadlines. I like the whooshing sound they make as they fly by"
> - Douglas Adams

Me too to your sig.

Thank you for the clarification. This list and FBSD are truly amazing.
Fast answers and lots of help, and I learn something new every day.

Thanks all!

-- 
Bob

"Play is the work of children. It's very serious stuff. And if it's
properly structured in a developmental program, children can blossom."
-Bob Keeshan aka `Captain Kangaroo'
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: portsdb -U fails

[Kent Stewart]

On Monday 02 February 2004 12:45 pm, r t g tan wrote:
> > Then why not quit banging you head on a wall and use "make index".
> > Your failure to adapt is spamming the list. Portsdb -U has not
> > produced totally clean INDEX runs since I can remember. Make index,
> > on the other hand, is currently producing clean makes.
> >
> > There are times when one doesn't work and the other does. You just
> > have to not refuse anything but ports/INDEX.
> >
>
> make index fails as well with a bunch of make_index: no entrie
> messages.
>
> I guess Ill leave it at this waiting for it to get fixed.
>

You must be not cvsuping everything. I just updated my ports and had no 
errors with make index. I log everything and I haven't had an error 
message from make index going back to 30 Jan. I recently deleted 
everything before that date. 

Many of these error will creep in if you don't cvsup ports-all. The 
reason you refuse ports/INDEX is that cvsup will recognize that you 
replaced INDEX and download an old copy. That takes time even over my 
100mps network. Since you are going to replace it by running make index 
or portsdb -U, you might as well save your bandwidth by refusing it.

FWIW, I use both methods. I prefer make index but there are times when 
it simply dies and portsdb -U will produce useful output. It may not be 
complete but I may see 10,000+ ports instead of the 300 that make index 
produced. It pays to be flexible here but there are days when nothing 
works and the only way is to manually update the port.

I track freebsd-ports and frequently see a message from Kris' script 
before my cron job port update complains or dies from the same 
reason(s). Frequently, these messages go away in a matter of hours. 
Sometimes some port committer deserves a pointy hat but that goes with 
the territory. Any day that you don't make a mistake on a computer is a 
day that you didn't try to learn anything new. The port committers just 
get to make their mistake(s) where the whole world can see and all they 
can do is grin about it :).

Kent

-- 
Kent Stewart
Richland, WA

http://users.owt.com/kstewart/index.html

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: kde3 meta port question

[Roop Nanuwa]

Didier Wiroth wrote:

Hi,

I would like to recompile the "entire" kde packages.

I'll do the following from /usr/ports/x11/kde3

@work:/usr/ports/x11/kde3# make
 

...

@work:/usr/ports/x11/kde3#

That's it, it doesn't start to compile, why? Do I have to uninstall all my kde

packages before being able to compile the entire kde packages?

 

The meta-port itself doesn't have anything to compile everything it 
needs to compile are
the run dependencies (not build dependencies). It will all start 
compiling once you type
"make install".

--roop
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Help!!! GPG (GnuPG) & PHP: system Safe Mode workarounds?

[W. D.]

Hi Folks,

I finally got GPG "portupgraded'--not the latest version, but it works.
It it works fine on the command line.  However, I am trying to 
send an encrypted email using PHP.

The problem is that PHP is in "safe mode" on the server, and
won't let me do something like any of these:



Surely, some FreeBSD gurus know how to get around this
restriction  I am not the first person to have
this problem, am I?

Aaarrgh!  Please help!

Start Here to Find It Fast!™ -> http://www.US-Webmasters.com/best-start-page/

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

kde3 meta port question

[Didier Wiroth]

Hi,

I've kde installed from the cd on my box.

I would like to recompile the "entire" kde packages.

I'll do the following from /usr/ports/x11/kde3

@work:/usr/ports/x11/kde3# make
===>  Extracting for kde-3.1.4
===>  Patching for kde-3.1.4
===>   kde-3.1.4 depends on file: /usr/X11R6/bin/moc - found
===>   kde-3.1.4 depends on shared library: konq - found
===>   kde-3.1.4 depends on shared library: kdecore - found
===>  Configuring for kde-3.1.4
@work:/usr/ports/x11/kde3#

That's it, it doesn't start to compile, why? Do I have to uninstall all my kde 
packages before being able to compile the entire kde packages?


I've these kde related entries in make.conf:
WITHOUT_KDEVELOP=yes
WITHOUT_KDEEDU=yes
WITHOUT_KDEGAMES=yes
WITHOUT_KOFFICE=yes
WITHOUT_KDEPIM=yes
WITHOUT_KDESDK=yes
WITHOUT_QUANTA=yes

thx a lot

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: portsdb -U fails

[Kris Kennaway]

On Mon, Feb 02, 2004 at 09:45:00PM +0100, r t g tan wrote:
> > Then why not quit banging you head on a wall and use "make index". Your 
> > failure to adapt is spamming the list. Portsdb -U has not produced 
> > totally clean INDEX runs since I can remember. Make index, on the other 
> > hand, is currently producing clean makes.
> > 
> > There are times when one doesn't work and the other does. You just have 
> > to not refuse anything but ports/INDEX.
> > 
> > Kent
> > 
> > -- 
> > Kent Stewart
> > Richland, WA
> > 
> > http://users.owt.com/kstewart/index.html
> 
> make index fails as well with a bunch of make_index: no entrie messages.
> 
> I guess Ill leave it at this waiting for it to get fixed.

It's not broken.  Please reread earlier advice given to you.

Kris


pgp0.pgp
Description: PGP signature

Re: cups-base and cups-lpr - installing from ports

[Kris Kennaway]

On Mon, Feb 02, 2004 at 05:37:31PM +, Phil Reynolds wrote:
> I have satisfactory use of cups-base and cups-lpr, but I believe it
> should be possible to install them somewhat more correctly, so that the
> following happen:
> 
> 1) The system's standard lpr command is replaced by the cups one,
>without any manual alteration to the PATH being required.

See the CUPS_OVERWRITE_BASE option in cups-lpr.

> 2) portupgrade -a ceases displaying the messages:
> 
>**  'print/cups-lpr' is marked as IGNORE:
>"is forbidden: "Changes ownership of system directories""
>(and the same for cups-base)

The ports were fixed today.

Kris


pgp0.pgp
Description: PGP signature

Re: Removing Ports

[Kris Kennaway]

On Mon, Feb 02, 2004 at 05:12:04AM -0800, Rishi Chopra wrote:
> My understanding is that 'make deinstall' only removes the port from the 
>  "ports database" - is there any way to actually remove all of the 
> files associated with a particular port?

No, 'make deinstall' removes the installed files too.  That's one of
the major reasons why the ports collection is useful.

Kris


pgp0.pgp
Description: PGP signature

Re: conf/62230: log-in-vain issues it's msg every time 'mail'command is used.

[Matthew Seaman]

On Mon, Feb 02, 2004 at 08:32:30PM +0100, Didier Wiroth wrote:
> Hi,
> I thought I would share my experience, with log_in_vain. :-))
> 
> When setting:
> sendmail_flags="NO"
> 
> Sendmail only listens to 127.0.0.1
> 
> I only need sendmail to send daily/weekly/monthly reports. Every time the security 
> report is sent, I have these entries too:
> > Connection attempt to TCP 127.0.0.1:113 from 127.0.0.1:49161 flags:0x02
> > Connection attempt to TCP 127.0.0.1:113 from 127.0.0.1:49163 flags:0x02
> 
> There are not hundreds of entries of course only 6 or something depending of the 
> quantity of sent mails

If you add:

define(`confTO_IDENT', `0')dnl

to your /etc/mail/`hostname`.mc and rebuild and reinstall you sendmail
config in the usual way, it will stop sendmail(8) trying to use the
ident service at all.

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   26 The Paddocks
  Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
Tel: +44 1628 476614  Bucks., SL7 1TH UK


pgp0.pgp
Description: PGP signature

Apache + DNS

[[EMAIL PROTECTED]]

I configured DNS (bind9) and Apache in FreeBSD 4.7 (IP: 192.168.1.1).
My server name on FreeBSD - myserver.mydomain.com
This server configuration:
1. /etc/resolv.conf
  domain mydomain.com
  nameserver 192.168.1.1
 
2. Bind config:
  I have domain:
   mydomain.com
  This domain hosts:
   server(192.168.1.1) - server and DNS-server (FreeBSD)
   site1(192.168.1.1)
   site2(192.168.1.1)
   xpcomp  (192.168.1.10)

3. Apache config (httpd.conf):

  NameVirtualHost myserver.mydomain.com

  
   ServerName site1.mydomain.com
   ServerAlias site1
   DocumentRoot /usr/local/proj/site1/html
   ErrorLog /usr/local/proj/site1/_log/error_log
   CustomLog /usr/local/proj/site1/_log/access_log common
  
FreeBSD is a Virtual Mashine (based on VMWare Workstation 4) under WinXP.
In Windows XP Lan config I wrote:
DNS -> 192.168.1.1.
My Computer settings:
 Name: xpcomp
 Workroup: MyWorkgroup
 DNS suffix: mydomain.com
When I in browser load my local site with url http://site1/ I want, that
browser automatically to the end of base url addes domain name in bind 
config.
Examples:
http://site1/ -> http://site1.mydomain.com
http://site1/test/index.html -> http://site1.mydomain.com/test/index.html

How can I make this think? What config i need to correct: apache, bind or
something another? (I can show my bind config files)
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: portsdb -U fails

[r t g tan]

> Then why not quit banging you head on a wall and use "make index". Your 
> failure to adapt is spamming the list. Portsdb -U has not produced 
> totally clean INDEX runs since I can remember. Make index, on the other 
> hand, is currently producing clean makes.
> 
> There are times when one doesn't work and the other does. You just have 
> to not refuse anything but ports/INDEX.
> 
> Kent
> 
> -- 
> Kent Stewart
> Richland, WA
> 
> http://users.owt.com/kstewart/index.html

make index fails as well with a bunch of make_index: no entrie messages.

I guess Ill leave it at this waiting for it to get fixed.

Tnx all for your reply,

Robert.



pgp0.pgp
Description: PGP signature

Re: Adding Packages and Ports

[Matthew Seaman]

On Mon, Feb 02, 2004 at 03:34:33AM -0500, Krikket wrote:
> I'm going to hold off on replying for a day, while I give this stuff a
> shot, but this part does raise a question for me...
> 
> On Mon, 2 Feb 2004, Matthew Seaman wrote:
> > Those packages are what goes onto the FTP sites, and a
> > sample of the most popular ones go into the install CDs -- there's
> > *far* too much stuff to fit all of it onto a 4 CD distribution set.
> 
> I got my copy of FreeBSD by downloading the isos.  CD 1 & 2 and "mini".
> That's all that was available.
> 
> CD #1 was the only CD that was ever asked for by the system.
> 
> Where do the other CD's come into play?
> 
> What's the difference between the isos and the 4 cd set?  (Aside from the
> number of CDs...)  I haven't seen anything that directly answers this.
> I'm more than willing to support the BSD project, assuming the OS meets my
> needs (and so far it looks like it probably will)  I was just planning on
> starting with the BSD stuffie.  8^)  And the BSD books...

The isos on the FreeBSD site are what's distributed as disks 1 and 2
of the 4 CD set.  You only get the other two CDs (which contain
various selected packages) if you buy a set from FreeBSDMall or Deamon
News' bsdmall.

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   26 The Paddocks
  Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
Tel: +44 1628 476614  Bucks., SL7 1TH UK


pgp0.pgp
Description: PGP signature

VPN over IPsec kernel help

[Aaron Brandt]

All,

I am having a issue getting my kernal to compile after adding the
following -

options   IPSEC
options   IPSEC_ESP
options   IPSEC_DEBUG

I have also tried -

options  FAST_IPSEC

This is on a FreeBSD 5.1 box, I get through the make depend and then when
I try to make it craps out here -

sh ../../../conf/newvers.sh SLIMLINE
cc -c -O -pipe -mcpu=pentiumpro -Wall -Wredundant-decls -Wnested-externs
-Wstrict-prototypes  -Wmissing-prototypes -Wpointer-arith -Winline
-Wcast-qual  -fformat-extensions -std=c99  -nostdinc -I-  -I. -I../../..
-I../../../dev -I../../../contrib/dev/acpica -I../../../contrib/ipfilter
-D_KERNEL -include opt_global.h -fno-common  -mno-align-long-strings
-mpreferred-stack-boundary=2 -ffreestanding -Werror  vers.c
linking kernel
umass.o: In function `umass_cam_attach_sim':
umass.o(.text+0x17c7): undefined reference to `cam_simq_alloc'
umass.o(.text+0x1818): undefined reference to `cam_sim_alloc'
umass.o(.text+0x1827): undefined reference to `cam_simq_free'
umass.o(.text+0x1847): undefined reference to `xpt_bus_register'
umass.o: In function `umass_cam_rescan_callback':
umass.o(.text+0x1883): undefined reference to `xpt_free_path'
umass.o: In function `umass_cam_rescan':
umass.o(.text+0x18f5): undefined reference to `xpt_periph'
umass.o(.text+0x1904): undefined reference to `xpt_create_path'
umass.o(.text+0x1920): undefined reference to `xpt_setup_ccb'
umass.o(.text+0x193d): undefined reference to `xpt_action'
umass.o: In function `umass_cam_detach_sim':
umass.o(.text+0x1a2c): undefined reference to `xpt_bus_deregister'
umass.o(.text+0x1a48): undefined reference to `cam_sim_free'
umass.o: In function `umass_cam_action':
umass.o(.text+0x1ebd): undefined reference to `xpt_done'
umass.o: In function `umass_cam_cb':
umass.o(.text+0x202b): undefined reference to `xpt_done'
umass.o: In function `umass_cam_sense_cb':
umass.o(.text+0x2191): undefined reference to `xpt_done'
umass.o: In function `umass_cam_quirk_cb':
umass.o(.text+0x21bb): undefined reference to `xpt_done'
*** Error code 1

Stop in /usr/src/sys/i386/compile/NEWKERNEL
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

phpBB problems with mysql? [OT?]

[Eric F Crist]

This may be a little off-topic, if so, I apologize.  I'm running phpBB2 on my 
webserver.  I finally got it working, and it's been great since Friday.  This 
afternoon, when I try to load the page, I get the following error:

 phpBB : Critical Error 

 Error creating new session

DEBUG MODE

SQL Error : 1062 Duplicate entry '-1' for key 2

INSERT INTO phpbb_sessions (session_id, session_user_id, session_start, 
session_time, session_ip, session_page, session_logged_in) VALUES 
('8f431818aa903b05979098a737674ac3', -1, 1075754200, 1075754200, '3fe40ef5', 
0, 0)

Line : 152
File : /www/seccomp/htdocs/phpBB2/includes/sessions.php 

Does anyone have any suggestions?  Thanks!
-- 
Eric F Crist
AdTech Integrated Systems, Inc
(612) 998-3588

pgp0.pgp
Description: signature

Re: Recommendation for proxy server that does Nat function

[Peter Ulrich Kruppa]

On Mon, 2 Feb 2004, JJB wrote:

> I just read an post that said some proxy server do Nat function.
> Searched the ports collection and did not see an proxy servers that
> said they did nat function. Does anyone on this list know of an
> proxy or squid server that also does NAT function?
I am no big network expert - beat me if I got anything wrong -
but a proxy or cache proxy doesn't need a built-in nat .
If your proxy dials in directly via ppp, you can use
ppp's -nat option or you set up natd options in rc.conf .

Regards,

Uli.


+---+
|Peter Ulrich Kruppa|
| Wuppertal |
|  Germany  |
+---+
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: Colors in VIM

[Brian McCann]

Well, even though I'm not in X, I tried xterm-color and it seams to
work.  Thanks all!

--Brian

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Khairil Yusof
Sent: Monday, February 02, 2004 1:24 PM
To: Brian McCann
Cc: [EMAIL PROTECTED]
Subject: RE: Colors in VIM


On Mon, 2004-02-02 at 13:07 -0500, Brian McCann wrote:

> That gave me B&W highlighting...getting closer. :)

What's your env variable for TERM? 
Is it xterm-color? (assuming you're in X, not in console)

-- 
"You keep using that word. I do not think it means what you think it
means." 

FreeBSD 5.2-CURRENT i386 
2:20am up 1:01, 4 users, load averages: 2.18, 2.12, 1.96

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: Colors in VIM

[Edmund Craske]

xterm-color

Ed

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of Brian McCann
> Sent: 02 February 2004 19:51
> To: 'Khairil Yusof'
> Cc: [EMAIL PROTECTED]
> Subject: RE: Colors in VIM
> 
> 
> Actually...I was beginning to wonder the same thing when I 
> saw someone else's example.  I'm just using SSH to connect, 
> so I'm obviously not in X, but my TERM variable is "xterm".  
> I had problems with this a while ago too.  What should this 
> be set to in order to get colors in just a shell?
> 
> Thanks,
> --Brian
> 
> -Original Message-
> From: Khairil Yusof [mailto:[EMAIL PROTECTED] 
> Sent: Monday, February 02, 2004 1:24 PM
> To: Brian McCann
> Cc: [EMAIL PROTECTED]
> Subject: RE: Colors in VIM
> 
> 
> On Mon, 2004-02-02 at 13:07 -0500, Brian McCann wrote:
> 
> > That gave me B&W highlighting...getting closer. :)
> 
> What's your env variable for TERM? 
> Is it xterm-color? (assuming you're in X, not in console)
> 
> -- 
> "You keep using that word. I do not think it means what you 
> think it means." 
> 
> FreeBSD 5.2-CURRENT i386 
> 2:20am up 1:01, 4 users, load averages: 2.18, 2.12, 1.96
> 
> ___
> [EMAIL PROTECTED] mailing list 
> http://lists.freebsd.org/mailman/listinfo/free> bsd-questions
> 
> To unsubscribe, send any mail to 
> "[EMAIL PROTECTED]"
> 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: Colors in VIM

[Brian McCann]

Actually...I was beginning to wonder the same thing when I saw someone
else's example.  I'm just using SSH to connect, so I'm obviously not in
X, but my TERM variable is "xterm".  I had problems with this a while
ago too.  What should this be set to in order to get colors in just a
shell?

Thanks,
--Brian

-Original Message-
From: Khairil Yusof [mailto:[EMAIL PROTECTED] 
Sent: Monday, February 02, 2004 1:24 PM
To: Brian McCann
Cc: [EMAIL PROTECTED]
Subject: RE: Colors in VIM


On Mon, 2004-02-02 at 13:07 -0500, Brian McCann wrote:

> That gave me B&W highlighting...getting closer. :)

What's your env variable for TERM? 
Is it xterm-color? (assuming you're in X, not in console)

-- 
"You keep using that word. I do not think it means what you think it
means." 

FreeBSD 5.2-CURRENT i386 
2:20am up 1:01, 4 users, load averages: 2.18, 2.12, 1.96

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

SATA 150

[Stephen Montgomery-Smith]

I have a Serial ATA controller on my motherboard.  I attached a Serial 
ATA 150 drive to it, and in dmesg I get:

ad4: DMA limited to UDMA33, non-ATA66 cable or device

Does this mean that the drive is only operating at 33Mhz, or is this 
just some way for FreeBSD-4.9-Stable to say it doesn't know any better?

(The drive works just fine.)

--

Stephen Montgomery-Smith
[EMAIL PROTECTED]
http://www.math.missouri.edu/~stephen
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: ftp/fetch/cvsup behind a firewall

[Anthony Discolo]

Thanks for the quick response!

I assume that adding these lines to the make.conf is the same as setting 
them as environment variables?  If I do this, I get:

# set HTTP_PROXY="http://:80"  (where foo is my proxy server; the same 
address makes mozilla work)
# fetch http://ftp.freebsd.org/ (where  is a valid file)
fetch: http://ftp.freebsd.org/: Host not found

Original Message Follows
From: Khairil Yusof <[EMAIL PROTECTED]>
To: Anthony Discolo <[EMAIL PROTECTED]>
CC: [EMAIL PROTECTED]
Subject: Re: ftp/fetch/cvsup behind a firewall
Date: Tue, 03 Feb 2004 03:23:32 +0800
On Mon, 2004-02-02 at 11:12 -0800, Anthony Discolo wrote:
> I don't have a /usr/share/examples/etc/defaults/make.conf, but I have a
> /usr/share/examples/etc/make.conf.  But it doesn't have a FETCH_ENV line 
in
> it.

# If you're behind a firewall and need FTP or HTTP proxy services for
# ports collection fetching to work, the following examples give the
# necessary syntax.  See the fetch(3) man page for details.
#
#FETCH_ENV= FTP_PROXY=ftp://10.0.0.1:21
#FETCH_ENV= HTTP_PROXY=http://10.0.0.1:80
> I'm sure someone has been successful in running cvsup behind a firewall?
> After all, don't all these tools use ftp indrectly?
No they don't. :) cvs and cvsup, access a cvs server for latest updates
and other info, not an ftp server.
--
"You keep using that word. I do not think it means what you think it
means."
FreeBSD 5.2-CURRENT i386
3:15am up 1:56, 3 users, load averages: 2.15, 2.10, 1.91
<< signature.asc >>
_
There are now three new levels of MSN Hotmail Extra Storage!  Learn more. 
http://join.msn.com/?pgmarket=en-us&page=hotmail/es2&ST=1

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: conf/62230: log-in-vain issues it's msg every time 'mail'command is used.

[Didier Wiroth]

Hi,
I thought I would share my experience, with log_in_vain. :-))

When setting:
sendmail_flags="NO"

Sendmail only listens to 127.0.0.1

I only need sendmail to send daily/weekly/monthly reports. Every time the security 
report is sent, I have these entries too:
> Connection attempt to TCP 127.0.0.1:113 from 127.0.0.1:49161 flags:0x02
> Connection attempt to TCP 127.0.0.1:113 from 127.0.0.1:49163 flags:0x02

There are not hundreds of entries of course only 6 or something depending of the 
quantity of sent mails

It would be nice to have a/some flag(s) in rc.conf for log_in_vain like:
log_in_vain_flags="-ii0 127.0.0.1 10.0.0.1"
-ii would be "ignore interfaces" for example
This would be very useful on a host with multiple interfaces.
In this case log_in_vain would ignore entries for 127.0.0.1 and 10.0.0.1 (would be an 
internal interface). 


Even if it is not a bug it would a nice little plus. ;-)

Regards,


> It's not that I don't think it's a bug that warrants attention; I 
> don'tthink it's a bug at all.
> Ceri


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: ftp/fetch/cvsup behind a firewall

[Khairil Yusof]

On Mon, 2004-02-02 at 11:12 -0800, Anthony Discolo wrote:
> I don't have a /usr/share/examples/etc/defaults/make.conf, but I have a 
> /usr/share/examples/etc/make.conf.  But it doesn't have a FETCH_ENV line in 
> it.

# If you're behind a firewall and need FTP or HTTP proxy services for
# ports collection fetching to work, the following examples give the
# necessary syntax.  See the fetch(3) man page for details.
#
#FETCH_ENV= FTP_PROXY=ftp://10.0.0.1:21
#FETCH_ENV= HTTP_PROXY=http://10.0.0.1:80

> I'm sure someone has been successful in running cvsup behind a firewall?  
> After all, don't all these tools use ftp indrectly?

No they don't. :) cvs and cvsup, access a cvs server for latest updates
and other info, not an ftp server.

-- 
"You keep using that word. I do not think it means what you think it
means." 

FreeBSD 5.2-CURRENT i386 
3:15am up 1:56, 3 users, load averages: 2.15, 2.10, 1.91


signature.asc
Description: This is a digitally signed message part

Re: ftp/fetch/cvsup behind a firewall

[Anthony Discolo]

I don't have a /usr/share/examples/etc/defaults/make.conf, but I have a 
/usr/share/examples/etc/make.conf.  But it doesn't have a FETCH_ENV line in 
it.

I'm sure someone has been successful in running cvsup behind a firewall?  
After all, don't all these tools use ftp indrectly?

Thanks.

Original Message Follows
From: Khairil Yusof <[EMAIL PROTECTED]>
To: Anthony Discolo <[EMAIL PROTECTED]>
CC: [EMAIL PROTECTED]
Subject: Re: ftp/fetch/cvsup behind a firewall
Date: Tue, 03 Feb 2004 02:20:33 +0800
On Mon, 2004-02-02 at 09:55 -0800, Anthony Discolo wrote:

> Mozilla can access the ftp site with the proxy server configured, but I
> haven't been able to get ftp to work with a proxy server.
For fetch via proxy see:
/usr/share/examples/etc/defaults/make.conf
Copy this file to /etc and edit the FETCH_ENV to point to your proxy

For cvsup, if you only have access via the proxy server, you can ftp the
entire cvs tree (not efficient). I would ask your admin to either setup
a local mirror , or add a dynamic rule for outgoing cvsup connections.
--
"You keep using that word. I do not think it means what you think it
means."
FreeBSD 5.2-CURRENT i386
2:05am up 46 mins, 4 users, load averages: 1.53, 2.23, 2.15
<< signature.asc >>
_
Learn how to choose, serve, and enjoy wine at Wine @ MSN. 
http://wine.msn.com/

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: FreeBSD and Grub

[Charlie Schluting]

Charlie Schluting wrote:
root(hd0,3,a)
kernel /boot/loader
Upon boot attempt, I see:

Filesystem type unknown, partition type 0xa5
Error 17: Cannot mount selected partition.
OOPS! Ignore that question... I see someone was asking the same thing :)

Someone replied:
"And it will load the MBR from the BSD partition, which will load the 
loader, which will load the kernel  (the best way, really). "

I'll try to install the MBR in the FreeBSD partition and use 
'chainloader'. Thanks!

-Charlie

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: uname -a was(Cvsup and RELENG_4 or RLENG_4_9)

[Jonathan Chen]

On Mon, Feb 02, 2004 at 11:39:10AM -0500, Bob Collins wrote:
> This is a follow-up question regarding uname -a. After CVSup, making
> world, making a new kernel etc, when I run uname -a it reports
> 4.9-RELEASE #0. Should the #0 portion be a higher number? Also what
> exactly does that number represent? I assume an RC

It represents the number of times you've built the kernel using the
current sources.
-- 
Jonathan Chen <[EMAIL PROTECTED]>
---
"I love deadlines. I like the whooshing sound they make as they fly by"
- Douglas Adams
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: ftp/fetch/cvsup behind a firewall

[Anthony Discolo]

I don't have a /usr/share/examples/etc/defaults/make.conf, but I have a 
/usr/share/examples/etc/make.conf.  But it doesn't have a FETCH_ENV line in 
it.

I'm sure someone has been successful in running cvsup behind a firewall?  
After all, don't all these tools use ftp indrectly?

Thanks.

Original Message Follows
From: Khairil Yusof <[EMAIL PROTECTED]>
To: Anthony Discolo <[EMAIL PROTECTED]>
CC: [EMAIL PROTECTED]
Subject: Re: ftp/fetch/cvsup behind a firewall
Date: Tue, 03 Feb 2004 02:20:33 +0800
On Mon, 2004-02-02 at 09:55 -0800, Anthony Discolo wrote:

> Mozilla can access the ftp site with the proxy server configured, but I
> haven't been able to get ftp to work with a proxy server.
For fetch via proxy see:
/usr/share/examples/etc/defaults/make.conf
Copy this file to /etc and edit the FETCH_ENV to point to your proxy

For cvsup, if you only have access via the proxy server, you can ftp the
entire cvs tree (not efficient). I would ask your admin to either setup
a local mirror , or add a dynamic rule for outgoing cvsup connections.
--
"You keep using that word. I do not think it means what you think it
means."
FreeBSD 5.2-CURRENT i386
2:05am up 46 mins, 4 users, load averages: 1.53, 2.23, 2.15
<< signature.asc >>
_
Check out the new MSN 9 Dial-up — fast & reliable Internet access with prime 
features! http://join.msn.com/?pgmarket=en-us&page=dialup/home&ST=1

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

FreeBSD and Grub

[Charlie Schluting]

On my laptop, I have one hard drive.
Slice 4 holds my FreeBSD partition.
I used the defaults during the install of 5.2, so /boot lives on slice 
4, part a.

I have Grub configured as such:

root(hd0,3,a)
kernel /boot/loader
Upon boot attempt, I see:

Filesystem type unknown, partition type 0xa5
Error 17: Cannot mount selected partition.
Any ideas?

Thanks :)
Charlie
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Grub problem

[Joe Lewis]

Errors on the root will still occur.  Grub does that.  With BSD, you can 
set the menu option such as :

root (hd0,2)
chainloader +1
And it will load the MBR from the BSD partition, which will load the 
loader, which will load the kernel  (the best way, really).

Joe

Robert Storey wrote:

Use the chainloader command to start FBSD, like this:

  root (hd0,2,a)
  chainloader +1
  boot
best regards,
Robert
On Mon, 02 Feb 2004 01:42:02 -0300
"Roy Fokker" <[EMAIL PROTECTED]> wrote:

  Hi, i have installed in my computer FBSD 5.1, and RH9. The thing
  is, when i try to get GRUB to boot FBSD, i get the following error
  message: root (hd0,2,a) Filesystem type unknown, partition type
  0xa5 Then, in the GRUB-shell, i get this from auto-completion.
  Partition num: 2, [BSD sub-partitions immediately follow] BSD
  Partition num:'a', Filesystem type unknown, partition type 0xa5 BSD
  Partition num:'b', Filesystem type unknown, partition type 0xa5 BSD
  Partition num:'d', Filesystem type unknown, partition type 0xa5 BSD
  Partition num:'e', Filesystem type unknown, partition type 0xa5 BSD
  Partition num:'f', Filesystem type unknown, partition type 0xa5 And
  i'm guessing that it is because of this, it then grub> kernel
  /boot/loader ro root=/dev/hda3 Error 17: Cannot mount selected
  partition This is an extract of my grub.conf. I looked for info
  about this, and found no other reference. title FreeBSD 5.1 Release
  root (hd0,2,a) kernel/boot/loader ro root=/dev/hda3 I will
  appreciate any input. Thanks. Alejandro, from BA, Argentina.
_
  Nuevo MSN Messenger [1]Una forma rápida y divertida de enviar
  mensajes
References

  1. http://g.msn.com/8HMBESAR/2728??PS=
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"[EMAIL PROTECTED]"
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: conf/62230: log-in-vain issues it's msg every time 'mail' command is used.

[Ceri Davies]

On Mon, Feb 02, 2004 at 12:39:08PM -0500, JJB wrote:
> I disagree with you on this.
> 
> Log-in-vain purpose in life is to interrogate attempts from
> the external interface, not the localhost internal functions,
> which this clearly is what is happening.

That's simply not true.

$ grep vain /etc/defaults/rc.conf
log_in_vain="0" # >=1 to log connects to ports w/o listeners.

> If you think this is such an trivial annoyance bug that it's
> does not warrant attention, then just come out and say so,
> and not beat around the bush with work around solutions in an
> poor effort to conceal your reluctance to perform system
> maintenance activities.

It's not that I don't think it's a bug that warrants attention; I don't
think it's a bug at all.

Thanks also for your diatribe.  I don't agree with any of that either.

Ceri
-- 
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: dhclient: send_packet: Permission denied

[Joe Lewis]

Do you have the firewall turned on with a default of deny?  It sounds 
like a firewall problem.

Joe

Edward Carmody wrote:

I'm seeing the following over and over in
/var/log/messages
Feb  1 13:54:17 Oberon dhclient: send_packet:
Permission denied
Any idea what this is?  Thanks!

Ed C.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Vhost... use Apache

[Joe Lewis]

Exactly.  "Learning Faster" is a no go.  It never happens.

The secret is :
  It's in the ports, and apache2 is the best (in my opinion)
In other words, build the port, then read the documentation. (from the 
http://httpd.apache.org/ website).

Joe

Charlie Schluting wrote:
Mr Kitt wrote:

To whom it may concern,
 
pls provide me the cmds as well... u may give me an example so that i 
can learn faster n understand better...

Nobody is going to give you commands for basic things. It would just 
take too long. Read the manual.

It sounds like you're wanting to set up apache. It wasn't clear from 
your request. Ok, read the Apache documentation.

Don't ask the same question more than once.
Please wrap your lines at 72 chars.
-Charlie

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
"[EMAIL PROTECTED]"
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: proxies and firewalls

[Jorn Argelo]

On Monday 02 February 2004 19:04, you wrote:
> Thanks for the detailed explanation.
> The light bulb has turned on in my head.
> I learn something new all the time on this list.
>
> So let me put this in my own words to verify I understand correctly.
> Lets say I have gateway box running 5 PCs on LAN behind it,
> with cable dhcp connection to ISP.
> The gateway box runs IPFILTER firewall and IPNAT to do NAT function.
>
> I can discontinue using IPNAT and install an application level proxy
> server on my gateway box and it will by default intercept all LAN
> and gateway originating packet traffic destine for the public
> internet after it's processed by my firewall and handle the
> bi-directional traffic transparently?

Well, at home I'm using both NAT and a proxy server, but that's because I 
can't play some online games by means of the proxy server, and the MSN 
clients are refusing to work my proxy server as well, but for browsing all 
four the computers are using the proxy server. I'm not running a firewall, 
because the proxy server provides decent security for home use here. All the 
ports are closed except those which are needed. (Webserver, Mail server etc)

If you're at a small company then the current situation you describe seems 
just fine to me. If you're at home then you can use this as well, but if you 
got a gamer at home he isn't going to be happy since you can't really use a 
proxy for online gaming. So it depends a bit

Hope this helped a bit.

Cheers,

Jorn

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: ports question

[Gary Kline]

On Mon, Feb 02, 2004 at 07:21:56AM +, Matthew Seaman wrote:
> On Sun, Feb 01, 2004 at 04:44:19PM -0800, Gary Kline wrote:
> > Well, to answer my own posting, I hacked the
> > /distfile and removed the "(SIZE) =" line.
> > Now openldap21-* is flowing across.  Dunno 
> > why the port assumed the file or parts of it
> > were here.  Next to rm the old version and
> > update... .  --Well, once it builds and installs!
> 
> Odd.  I updated the OpenlDAP 2.1.26 ports on my system last week, and
> it all worked perfectly.  The tarball it pulled down is exactly as
> specified in the distfile:
> 
> % ls -la /usr/ports/distfiles/openldap-2.1.26.tgz 
> -rw-r--r--  1 root  wheel  2042658 Jan 23 06:48 
> /usr/ports/distfiles/openldap-2.1.26.tgz
> % md5 /usr/ports/distfiles/openldap-2.1.26.tgz 
> MD5 (/usr/ports/distfiles/openldap-2.1.26.tgz) = e3388c021b1029c15cfbd462d3bfcc9d
> 
> and the tarball on ftp.openldap.org hasn't changed:
> 
> ftp> dir openldap-2.1.26*
> 229 Entering Extended Passive Mode (|||50188|)
> 150 Opening ASCII mode data connection for '/bin/ls'.
> -rw-rw-r--  1 2000  20   61 Jan 23 06:48 openldap-2.1.26.md5
> -rw-rw-r--  1 2000  20  2042658 Jan 23 06:48 openldap-2.1.26.tgz
> 226 Transfer complete.
> 
> Perhaps the OpenLDAP mirrors you're trying to access aren't being
> properly updated -- I'd suggest ftp'ing down the openldap sources
> manually from ftp.openldap.org and placing them in
> /usr/ports/distfiles before you start building the port.
> 


My work-around did the job, but to be sure after I
pkg_delete'd -2.1.23, I did make deinstall/reinstall.
My cvsup script runs portsdb -Uu nightly ... so unclear 
where the bug is.  

You may be right re the mirror sites; this is what happens
when I try to get the most recent gcc fixes:

===>  Cleaning for gcc-3.3.3_20040126
Making GCC 3.3.3 for FreeBSD 4.7 elftarget
i386-portbld-freebsd4.7
>> gcc-core-3.3-20040126.tar.bz2 doesn't seem to exist in
/usr/ports/distfiles/.
>> Attempting to fetch from
http://mirrors.rcn.net/pub/sourceware/gcc/snapshots/3.3-20040126/.
fetch: invalid size ( 9784532)

It's a headscratch.  

bonne journée!

gary






-- 
   Gary Kline [EMAIL PROTECTED]   www.thought.org Public service Unix

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: Colors in VIM

[Khairil Yusof]

On Mon, 2004-02-02 at 13:07 -0500, Brian McCann wrote:

> That gave me B&W highlighting...getting closer. :)

What's your env variable for TERM? 
Is it xterm-color? (assuming you're in X, not in console)

-- 
"You keep using that word. I do not think it means what you think it
means." 

FreeBSD 5.2-CURRENT i386 
2:20am up 1:01, 4 users, load averages: 2.18, 2.12, 1.96


signature.asc
Description: This is a digitally signed message part

Re: ftp/fetch/cvsup behind a firewall

[Khairil Yusof]

On Mon, 2004-02-02 at 09:55 -0800, Anthony Discolo wrote:

> Mozilla can access the ftp site with the proxy server configured, but I 
> haven't been able to get ftp to work with a proxy server.

For fetch via proxy see:
/usr/share/examples/etc/defaults/make.conf

Copy this file to /etc and edit the FETCH_ENV to point to your proxy

For cvsup, if you only have access via the proxy server, you can ftp the
entire cvs tree (not efficient). I would ask your admin to either setup
a local mirror , or add a dynamic rule for outgoing cvsup connections.


-- 
"You keep using that word. I do not think it means what you think it
means." 

FreeBSD 5.2-CURRENT i386 
2:05am up 46 mins, 4 users, load averages: 1.53, 2.23, 2.15


signature.asc
Description: This is a digitally signed message part

RE: Colors in VIM

[Joe Marcus Clarke]

On Mon, 2004-02-02 at 13:07, Brian McCann wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> That gave me B&W highlighting...getting closer. :)

Have a look at http://www.marcuscom.com/downloads/marcus.vimrc

Be careful with copy and paste, though, as some of those characters are
actually escape sequences.

Joe

> 
> Thanks,
> - --Brian McCann
> 
> - -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Khairil
> Yusof
> Sent: Monday, February 02, 2004 1:05 PM
> To: Brian McCann
> Cc: [EMAIL PROTECTED]
> Subject: Re: Colors in VIM
> 
> 
> On Mon, 2004-02-02 at 12:55 -0500, Brian McCann wrote:
> 
> > set nocp
> > set digraph ek hidden ruler sc vb wmnu
> > set noeb noet nosol
> > set bs=2 fo=cqrt ls=2 shm=at
> 
> Add this:
> 
> syntax enable
> 
> - -- 
> "You keep using that word. I do not think it means what you think it
> means." 
> 
> FreeBSD 5.2-CURRENT i386 
> 2:04am up 45 mins, 5 users, load averages: 2.53, 2.51, 2.23
> 
> -BEGIN PGP SIGNATURE-
> Version: PGPfreeware 6.5.8 for non-commercial use 
> 
> iQA/AwUBQB6R2ERPmxonqOz6EQLj9QCfRVLxzjASO2WukdhHghVDbalTjpUAn1ry
> Q7yGi9nRF7SSetRLt26gFoWq
> =4mLr
> -END PGP SIGNATURE-
> 
> ___
> [EMAIL PROTECTED] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
-- 
PGP Key : http://www.marcuscom.com/pgp.asc




signature.asc
Description: This is a digitally signed message part

RE: Colors in VIM

[Brian McCann]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

That gave me B&W highlighting...getting closer. :)

Thanks,
- --Brian McCann

- -Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Khairil
Yusof
Sent: Monday, February 02, 2004 1:05 PM
To: Brian McCann
Cc: [EMAIL PROTECTED]
Subject: Re: Colors in VIM


On Mon, 2004-02-02 at 12:55 -0500, Brian McCann wrote:

> set nocp
> set digraph ek hidden ruler sc vb wmnu
> set noeb noet nosol
> set bs=2 fo=cqrt ls=2 shm=at

Add this:

syntax enable

- -- 
"You keep using that word. I do not think it means what you think it
means." 

FreeBSD 5.2-CURRENT i386 
2:04am up 45 mins, 5 users, load averages: 2.53, 2.51, 2.23

-BEGIN PGP SIGNATURE-
Version: PGPfreeware 6.5.8 for non-commercial use 

iQA/AwUBQB6R2ERPmxonqOz6EQLj9QCfRVLxzjASO2WukdhHghVDbalTjpUAn1ry
Q7yGi9nRF7SSetRLt26gFoWq
=4mLr
-END PGP SIGNATURE-

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Strange GRE packet flows...

[Sean Hafeez]

I have a 4.9 box (router1) running IPFW:

/sbin/natd -interface rl0 -s
ipfw add 999 divert natd all from any to any via rl0
ipfw add pipe 1 ip from any to any in recv vr0
ipfw add pipe 2 ip from any to any out xmit vr0
ipfw pipe 1 config mask src-ip 0x bw 512kbits/s
ipfw pipe 2 config mask dst-ip 0x bw 512kbits/s
And on this box I have some GRE tunnels:

ifconfig gre8 create
ifconfig gre8 tunnel x.x.x.x y.y.y.y
ifconfig gre8 inet 172.20.1.13 172.20.1.14 netmask 255.255.255.252
ifconfig gre8 up
route add -net 10.0.100.0 -netmask 255.255.255.0 172.20.1.14
The tunnels terminate on a Cisco 1720 or a box running FreeBSD 4.8 or 
4.9. (Same config as above reversed). The Cisco or the BSD box are 
running NAT on their side.

If I ping a box behind the remote side from my desktop which is behind 
the router1 box I drop 3 out of 5 packets. Now for the strange part - If 
I get a ping going to that same node from the router1 box and then ping 
from my desktop I drop no packets. If I kill the ping on the router1 box 
the pings from the desktop start dropping packets. This also works if I 
ping the external interface on the remote router.

BTW, I have just changed the router1 box from Gentoo Linux using the 
IPROTUE package for the tunnels to FreeBSD 4.9. It worked just fine with 
the router1 running Linux. I would hate to have to change back as I hate 
Linux and think IPTABLES was written as a replacement for pulling finger 
nails out with pliers.

Thoughts?

Thanks!
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Colors in VIM

[Khairil Yusof]

On Mon, 2004-02-02 at 12:55 -0500, Brian McCann wrote:

> set nocp
> set digraph ek hidden ruler sc vb wmnu
> set noeb noet nosol
> set bs=2 fo=cqrt ls=2 shm=at

Add this:

syntax enable

-- 
"You keep using that word. I do not think it means what you think it
means." 

FreeBSD 5.2-CURRENT i386 
2:04am up 45 mins, 5 users, load averages: 2.53, 2.51, 2.23


signature.asc
Description: This is a digitally signed message part

RE: proxies and firewalls

[JJB]

Thanks for the detailed explanation.
The light bulb has turned on in my head.
I learn something new all the time on this list.

So let me put this in my own words to verify I understand correctly.
Lets say I have gateway box running 5 PCs on LAN behind it,
with cable dhcp connection to ISP.
The gateway box runs IPFILTER firewall and IPNAT to do NAT function.

I can discontinue using IPNAT and install an application level proxy
server on my gateway box and it will by default intercept all LAN
and gateway originating packet traffic destine for the public
internet after it's processed by my firewall and handle the
bi-directional traffic transparently?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Monday, February 02, 2004 12:02 PM
To: JJB
Cc: Jorn Argelo; [EMAIL PROTECTED]
Subject: Re: proxies and firewalls

> I have Lan with private ip address that send packets to
> public internet. How does an proxy server solve the private ip
> address versus my public ip address problem?

Simply through not routing / NATting at all.

Instead of just forwarding the packets rewriting the IP headers like
a NAT
device does, an application layer proxy does the connections to the
outside
world *INSTEAD* of the client.

To use the popular example of HTTP:
While a NAT device will just forward and rewrite your query to a
server's
port 80/TCP and then forward and rewrite the reply according to its
connection table, an application layer proxy will do the query
*itself*. It
will then process the reply, identify whether it looks like HTML
that
matches its quality/security requirements and then give a friendly
reply to
the client that originally did the query.

Again, the proxy itself plays client on the application layer.

This of course means that all outgoing connections are also done
with the
external IP address of the application level proxy machine.

Clear now?

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: SATA RAID 5 controller for FreeBSD

[Chad Leigh -- Shire.Net LLC]

On Jan 29, 2004, at 5:12 AM, Artem Koutchine wrote:

Hi!

I am looking for supported RAID 5 controller for FreeBSD and
I am very puzzled after reading all the specs and descrioptions.
I haven't found any SATA RAID 5 controller in the FreeBSD
supported Hardware list, but some manufacturer claim they
support FreeBSD.
SO far i have found
1) Promise FastTrak SX4 (around 200$)
2) HighPoint RocketRaid 1640 (aorund 150$ hard to find)
3) EscaladeR 8506 4-port  one (around 500$)
HightPoint and Escalade AFAIK are well supported by FreeBSD.
FreeBSD 4.8 support is promised in Promise :) FastTrak.
I have the Adaptec 2410SA.  It supports 4 drives, has its own CPU and 
64mb cache, and runs with the aac controller under 5.2.  It seems to 
run pretty well.  (Note:  this is a totally different beast than the 
2400A ATA controller)

Chad

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Colors in VIM

[Brian McCann]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I've got a question for you all since I've been banging my head
against a wall with this for some time now.  I'm trying to get vim to
do syntax highlighting for php/html files, along with scripts.  It
seams like it would be fairly straight forward, but I can't figure it
out.  I started by looking at a RedHat server (which does it by
default) and located all of the .vimrc files, and mine were
identical.  I even had one in my home directory as well.  All of the
language files were there, it just did not want to work.  Can someone
offer me some help here?

Here's my .vimrc file from my home dir as it stands now:

set nocp
set digraph ek hidden ruler sc vb wmnu
set noeb noet nosol
set bs=2 fo=cqrt ls=2 shm=at

Thanks in advance,
- --Brian McCann

-BEGIN PGP SIGNATURE-
Version: PGPfreeware 6.5.8 for non-commercial use 

iQA/AwUBQB6PF0RPmxonqOz6EQJcTgCgjYzJ2+q5TlYw+5vwr5v6k5uVSfMAoMwl
eYsqzXqUdiQsl4Ubj7Bg+VES
=a7lz
-END PGP SIGNATURE-

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

ftp/fetch/cvsup behind a firewall

[Anthony Discolo]

I'm trying to get this to work with a non-Linux firewall.

Mozilla can access the ftp site with the proxy server configured, but I 
haven't been able to get ftp to work with a proxy server.

Any help would be greatly appreciated.

Thanks,
Anthony
_
Check out the new MSN 9 Dial-up — fast & reliable Internet access with prime 
features! http://join.msn.com/?pgmarket=en-us&page=dialup/home&ST=1

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: conf/62230: log-in-vain issues it's msg every time 'mail' command is used.

[JJB]

I disagree with you on this.

Log-in-vain purpose in life is to interrogate attempts from
the external interface, not the localhost internal functions,
which this clearly is what is happening.

Sure there are work around solutions for this bug.

If you think this is such an trivial annoyance bug that it's
does not warrant attention, then just come out and say so,
and not beat around the bush with work around solutions in an
poor effort to conceal your reluctance to perform system
maintenance activities.

>From what little documentation is published on Log-in-vain,
it is not functioning correctly, period.

Anybody look at the percentage of bug reports that get closed
right out of hand to the ones that really get serious attention?
Maybe there is some thing wrong with the evaluation criteria you
people use to evaluate bug reports like this one.

This is not an single event but an attitude that is too common
among the people who review newly filed bug reports.
It does nothing to foster confidence in the bug report system,
or for that matter in the quality of the overall FBSD system.

Just my observations of the over all bug reporting system, it stinks
and needs to be readdressed so it's more amiable to really getting
bugs fixed and not passing the buck, offering work around solutions.
Just because there are many work around solutions does not warrant
not
fixing the bug causing the problem in the first place.

No use beating an dead horse who can't hear what being said anyway.



-Original Message-
From: Ceri Davies [mailto:[EMAIL PROTECTED]
Sent: Monday, February 02, 2004 11:22 AM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED];
[EMAIL PROTECTED]
Subject: Re: conf/62230: log-in-vain issues it's msg every time
'mail' command is used.

Synopsis: log-in-vain issues it's msg every time 'mail' command is
used.

State-Changed-From-To: open->closed
State-Changed-By: ceri
State-Changed-When: Mon Feb 2 08:20:36 PST 2004
State-Changed-Why:
This is not a problem with the log in vain code, which is doing
exactly
as it's supposed to do, but rather with the configuration of your
mail
related daemons.

As suggested by Bjoern A. Zeeb, you should sent a post to
[EMAIL PROTECTED] asking for help on configuring your system to
resolve these issues.

http://www.freebsd.org/cgi/query-pr.cgi?pr=62230

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

cups-base and cups-lpr - installing from ports

[Phil Reynolds]

I have satisfactory use of cups-base and cups-lpr, but I believe it
should be possible to install them somewhat more correctly, so that the
following happen:

1) The system's standard lpr command is replaced by the cups one,
   without any manual alteration to the PATH being required.

2) portupgrade -a ceases displaying the messages:

   **  'print/cups-lpr' is marked as IGNORE:
   "is forbidden: "Changes ownership of system directories""
   (and the same for cups-base)

Naturally, it will be necessary to prevent make world installing the
standard lpr but I can already see how to do that.

Any advice would be appreciated.

-- 
Phil Reynolds
 o   mail: [EMAIL PROTECTED]
|L_ \  / Web: http://www.tinsleyviaduct.com/phil/
(_)- \/  Waltham 67, Emley Moor 69, Droitwich 79, Windows 95
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: chrooted ssh/scp

[Mike Jackson]

ext Luke Kearney ([EMAIL PROTECTED]) wrote:
> 
> excuse me if this seems off topic but a quick check over at ssh.com
> revealed no obvious links to a downloadable version that would not
> require a license. Pray tell where I might find the binaries. I would
> like to give sshd2 a run and see if it might fix a problem that has been
> nagging at me for a bit.

Hi,
 You can find the license here (FreeBSD is expressly mentioned):

ftp://ftp.ssh.com/pub/ssh/LICENSE

 And the source code for the non-commercial version (missing PKI) here:

ftp://ftp.ssh.com/pub/ssh/ssh-3.2.9.1.tar.gz

 Or like somebody else mentioned, you can use the port. But there were no
problems compiling on BSD last time I tried a few months ago.

BR,
Mike 
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

fm801 based sound card and FreeBSD5.2

[Ruslan N. Gogunsci]

On Tue, Jan 27, 2004 at 08:44:30PM +0300, grint wrote:
Sorry I forget about subject
> Hello,
> I can't use my sound card based on fm801 (Genius Sound Maker) on
> FreeBSD5.2
> On FreeBSD5.1 I download older fm801.c and build new kernel. And all work
> fine.
> But when I try do it on FreeBSD5.2 I have errors when try compile kernel:
> somthing like structurs changes format. Native fm801.c for FreeBSD5.2
> dosn't
>  work too.
> How can I use my sound card?
> ___
> [EMAIL PROTECTED] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> 
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: proxies and firewalls

[HOLLOW, CHRISTOPHER]

Proxy doesn't necessarily solve the privateIP-to-publicIP problem.  NAT 
does:

http://www.cablemodemhelp.com/proxy_vs_nat.htm

Proxy is application level.  NAT is address translation.

HTH,

Christopher Hollow

JJB wrote:
Thanks for your reply, But I must be thick headed this morning,
because what you say below makes no sense to me.
I checked out the 2 referenced descriptions and they say
nothing about doing nat.
I have Lan with private ip address that send packets to
public internet. How does an proxy server solve the private ip
address versus my public ip address problem?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of
[EMAIL PROTECTED]
Sent: Monday, February 02, 2004 11:28 AM
To: JJB
Cc: Jorn Argelo; [EMAIL PROTECTED]
Subject: Re: proxies and firewalls

Are you saying you know of an proxy server that does the nat
function?


Actually, the point of having  proxies is *not* having
to route. Your proxy machine should not be able to forward packets.
Roughly, there a two different sub-groups: Circuit layer and
application
layer proxies, names should be self explaining.
Example for an app layer gateway:

Port:   fwtk-2.1
Path:   /usr/ports/security/fwtk
Info:   A toolkit used for building firewalls based on proxy
services
Example for a circuit level proxy:

Port:   nylon-1.2
Path:   /usr/ports/net/nylon
Info:   A Unix SOCKS 4 and 5 proxy server
Socks5 is already app layer, too, IIRC.

Cheers, J.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"[EMAIL PROTECTED]"
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: proxies and firewalls

[jan . muenther]

> I have Lan with private ip address that send packets to
> public internet. How does an proxy server solve the private ip
> address versus my public ip address problem?

Simply through not routing / NATting at all. 

Instead of just forwarding the packets rewriting the IP headers like a NAT
device does, an application layer proxy does the connections to the outside
world *INSTEAD* of the client.

To use the popular example of HTTP:
While a NAT device will just forward and rewrite your query to a server's
port 80/TCP and then forward and rewrite the reply according to its
connection table, an application layer proxy will do the query *itself*. It
will then process the reply, identify whether it looks like HTML that
matches its quality/security requirements and then give a friendly reply to
the client that originally did the query. 

Again, the proxy itself plays client on the application layer. 

This of course means that all outgoing connections are also done with the
external IP address of the application level proxy machine. 

Clear now?
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: proxies and firewalls

[JJB]

Thanks for your reply, But I must be thick headed this morning,
because what you say below makes no sense to me.
I checked out the 2 referenced descriptions and they say
nothing about doing nat.

I have Lan with private ip address that send packets to
public internet. How does an proxy server solve the private ip
address versus my public ip address problem?

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of
[EMAIL PROTECTED]
Sent: Monday, February 02, 2004 11:28 AM
To: JJB
Cc: Jorn Argelo; [EMAIL PROTECTED]
Subject: Re: proxies and firewalls

> Are you saying you know of an proxy server that does the nat
> function?

Actually, the point of having  proxies is *not* having
to route. Your proxy machine should not be able to forward packets.

Roughly, there a two different sub-groups: Circuit layer and
application
layer proxies, names should be self explaining.

Example for an app layer gateway:

Port:   fwtk-2.1
Path:   /usr/ports/security/fwtk
Info:   A toolkit used for building firewalls based on proxy
services


Example for a circuit level proxy:

Port:   nylon-1.2
Path:   /usr/ports/net/nylon
Info:   A Unix SOCKS 4 and 5 proxy server


Socks5 is already app layer, too, IIRC.

Cheers, J.


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"[EMAIL PROTECTED]"

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Acu Cobol 6.0 for Linux

[Walter C. Pelissero]

I realised that the ktrace log was rubbish; most of the syscalls names
were not properly mapped.

I tried to track down the exact spot were the Linux executable gets
the SEGV signal, running strace on a Debian system and comparing the
values passed to the system calls.  Here is an extract:

  rt_sigaction(SIGTSTP, {0x8072ce0, [TSTP], SA_RESTART|0x400}, {SIG_IGN}, 8) = 0
  rt_sigaction(SIGHUP, {0x8072ca0, [HUP], SA_RESTART|0x400}, {SIG_DFL}, 8) = 0
  rt_sigaction(SIGTERM, {0x8072bf0, [TERM], SA_RESTART|0x400}, {SIG_DFL}, 8) = 0
  rt_sigaction(SIGFPE, {0x804f910, [FPE], SA_RESTART|0x400}, {SIG_DFL}, 8) = 0
  rt_sigaction(SIGBUS, {0x804f940, [BUS], SA_RESTART|0x400}, {SIG_DFL}, 8) = 0
  rt_sigaction(SIGSEGV, {0x804f910, [SEGV], SA_RESTART|0x400}, {SIG_DFL}, 8) = 0
  rt_sigaction(SIGILL, {0x804f910, [ILL], SA_RESTART|0x400}, {SIG_DFL}, 8) = 0
  rt_sigaction(SIGSYS, {0x804f910, [SYS], SA_RESTART|0x400}, {SIG_DFL}, 8) = 0
  rt_sigaction(SIGPIPE, {SIG_IGN}, {SIG_DFL}, 8) = 0
  rt_sigaction(SIGALRM, NULL, {SIG_DFL}, 8) = 0
  rt_sigaction(SIGALRM, {SIG_DFL}, NULL, 8) = 0
  brk(0x81c2000)  = 0x81c2000
  ^^--- SEGV on FreeBSD!
  brk(0x81c3000)  = 0x81c3000
  brk(0x81c4000)  = 0x81c4000
  brk(0x81c5000)  = 0x81c5000
  brk(0x81c6000)  = 0x81c6000

So it was rt_sigaction() and not pwrite(); brk() and not ktrace().

Does this shed a new light?

-- 
walter pelissero
http://www.pelissero.de
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: named question...

[Ceri Davies]

On Sun, Feb 01, 2004 at 04:41:02PM -0500, Xpression wrote:
> Hi list, I have running named/BIND as DNS server, recently I have
> some problems and I don't know the source of it, I have checked the logs and
> config files but there is nothing unusual, here is my configs files, any
> suggestion ???

State the problems that you are having, and don't obscure your IP
addresses - it gains you nothing in the way of security and makes trying
to help you more difficult.

Ceri

-- 


pgp0.pgp
Description: PGP signature

Re: True IMAP Trash Folder

[Louis LeBlanc]

On 02/02/04 10:27 AM, Matt Juszczak sat at the `puter and typed:
> Gary wrote:
> 
> Gary,
> 
> >Hi Matt,
> >
> >On Mon, 02 Feb 2004 10:20:09 -0500 UTC (2/2/2004, 9:20 AM -0600 UTC my
> >time), Matt Juszczak wrote:
> >
> >M> Does anyone know of a mail client that supports a true IMAP trash
> >M> folder?  Evolution doesn't, and so I use evolution on three different
> >M> machines and if I have deleted messages I have to check all three
> >M> machines sometimes to find it.
> >
> >There is no trash folder in the IMAP protocol itself.. Removing mail is a
> >two step process, first of deleting it, and second of purging the deleted
> >mail.
> >
> >  
> >
> 
> I understand now.  Thanks.  So do you know of a mail client that 
> supports "Deleting Items" to a folder called "Trash" on the IMAP 
> server?  Right now I have evolution and if I delete mail it puts it into 
> a local trash folder, but I dont see an option to "Copy deleted mail to 
> folder  on mail server" or something like that.

I use mutt with an imap server.  I've tied macros to specific keys
that save messages to INBOX.trash, which effectively deletes them from
the current folder.  I go to the .trash folder and use 'D' to clean it
out on a regular basis, sometimes finding one or two that I didn't
want to delete.  It requires folder hooks to change the underlying
behavior for the 'd', '^d' and 'D' keys based on the current folder,
but it works like a charm.

The mutt site documents how to do most of this, but if you like, I can
dig up my macros for you.

HTH
Lou
-- 
Louis LeBlanc   [EMAIL PROTECTED]
Fully Funded Hobbyist, KeySlapper Extrordinaire :)
http://www.keyslapper.org ԿԬ

The universe does not have laws -- it has habits, and habits can be broken.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: chrooted ssh/scp

[Michael Clark]

its in ports...

-Original Message-
From: Luke Kearney [mailto:[EMAIL PROTECTED]
Sent: Monday, February 02, 2004 10:34 AM
To: Michael Clark
Cc: '[EMAIL PROTECTED]'; Evan Sayer
Subject: Re: chrooted ssh/scp



On Mon, 2 Feb 2004 10:02:32 -0600 
Michael Clark <[EMAIL PROTECTED]> granted us these pearls of wisdom:

> sshd2 will do this and if you read the license I believe it is legal to
use
> for most users.
> 
> Else you can use sudo to make a ssh chroot.  
> google groups has some explainations of how to do this.
> 
> 
> Michael Clark
> Nemschoff Chairs Inc
> mclark at nemschoff dot com
> CompTIA A+, MCP
> Voice: (920) 457 7726 x294
> Fax:  (920) 453 6594
> 
> 
> 
> -Original Message-
> From: Lowell Gilbert [mailto:[EMAIL PROTECTED]
> Sent: Monday, February 02, 2004 8:11 AM
> To: Evan Sayer
> Cc: [EMAIL PROTECTED]
> Subject: Re: chrooted ssh/scp
> 
> 
> Evan Sayer <[EMAIL PROTECTED]> writes:
> 
> > Does anyone know how to make it so that users can ssh in and get a
> > normal shell or scp in and get or send files but only within their own
> > home directories via chroot?
> 
> The commercial ssh server has that capability built in, but the free
> ones don't, last I checked.  You should be able to hook up jail(8) or
> chroot(8) to the account itself, though...

excuse me if this seems off topic but a quick check over at ssh.com
revealed no obvious links to a downloadable version that would not
require a license. Pray tell where I might find the binaries. I would
like to give sshd2 a run and see if it might fix a problem that has been
nagging at me for a bit.

TIA

LukeK


CONFIDENTIALITY NOTE: This electronic transmission, including all
attachments, is directed in confidence solely to the person(s) to whom it is
addressed, or an authorized recipient, and may not otherwise be distributed,
copied or disclosed. The contents of the transmission may also be subject to
intellectual property rights and all such rights are expressly claimed and
are not waived. If you have received this transmission in error, please
notify the sender immediately by return electronic transmission and then
immediately delete this transmission, including all attachments, without
copying, distributing or disclosing same. 


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: chrooted ssh/scp

[Luke Kearney]

On Mon, 2 Feb 2004 10:02:32 -0600 
Michael Clark <[EMAIL PROTECTED]> granted us these pearls of wisdom:

> sshd2 will do this and if you read the license I believe it is legal to use
> for most users.
> 
> Else you can use sudo to make a ssh chroot.  
> google groups has some explainations of how to do this.
> 
> 
> Michael Clark
> Nemschoff Chairs Inc
> mclark at nemschoff dot com
> CompTIA A+, MCP
> Voice: (920) 457 7726 x294
> Fax:  (920) 453 6594
> 
> 
> 
> -Original Message-
> From: Lowell Gilbert [mailto:[EMAIL PROTECTED]
> Sent: Monday, February 02, 2004 8:11 AM
> To: Evan Sayer
> Cc: [EMAIL PROTECTED]
> Subject: Re: chrooted ssh/scp
> 
> 
> Evan Sayer <[EMAIL PROTECTED]> writes:
> 
> > Does anyone know how to make it so that users can ssh in and get a
> > normal shell or scp in and get or send files but only within their own
> > home directories via chroot?
> 
> The commercial ssh server has that capability built in, but the free
> ones don't, last I checked.  You should be able to hook up jail(8) or
> chroot(8) to the account itself, though...

excuse me if this seems off topic but a quick check over at ssh.com
revealed no obvious links to a downloadable version that would not
require a license. Pray tell where I might find the binaries. I would
like to give sshd2 a run and see if it might fix a problem that has been
nagging at me for a bit.

TIA

LukeK

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: proxies and firewalls

[jan . muenther]

> Are you saying you know of an proxy server that does the nat
> function?

Actually, the point of having  proxies is *not* having
to route. Your proxy machine should not be able to forward packets. 

Roughly, there a two different sub-groups: Circuit layer and application
layer proxies, names should be self explaining. 

Example for an app layer gateway:

Port:   fwtk-2.1
Path:   /usr/ports/security/fwtk
Info:   A toolkit used for building firewalls based on proxy services


Example for a circuit level proxy:

Port:   nylon-1.2
Path:   /usr/ports/net/nylon
Info:   A Unix SOCKS 4 and 5 proxy server


Socks5 is already app layer, too, IIRC.

Cheers, J.


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

uname -a was(Cvsup and RELENG_4 or RLENG_4_9)

[Bob Collins]

This is a follow-up question regarding uname -a. After CVSup, making
world, making a new kernel etc, when I run uname -a it reports
4.9-RELEASE #0. Should the #0 portion be a higher number? Also what
exactly does that number represent? I assume an RC

Thanks
-- 
Bob

"Play is the work of children. It's very serious stuff. And if it's
properly structured in a developmental program, children can blossom."
-Bob Keeshan aka `Captain Kangaroo'
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: customize set prompt question

[Didier WIROTH]

Many thanks to all of you for your help 

For those who want to know:
Customizing the prompt for root (with a red prompt) is:
set prompt="%{\e[1;[EMAIL PROTECTED]:%~# %{\e[m%}"

As you might notice for csh you have to replace the \[ \] with %{ %}



> > 
> > $ export PS1="\[\e[1;[EMAIL PROTECTED]:%~# \[\e[m\]"

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: proxies and firewalls

[JJB]

Friend Jorn

Are you saying you know of an proxy server that does the nat
function?
Please point me to it.

Thanks

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Jorn Argelo
Sent: Monday, February 02, 2004 5:04 AM
To: Hiren
Cc: [EMAIL PROTECTED]
Subject: Re: proxies and firewalls

When one is connected to a proxy server, the proxy server makes a
connection
to the outside world and transports the data to the computer who is
requesting that information. So the client computer won't make a
true
connection to the outside world, but it only connects to the proxy
server. In
there the administrator can give several rules to the proxy server
what to
allow/dissalow. For example you can disable that clients connect to
the MSN
port. If you use a proxy server your internal IP address will almost
always
be shown on sites that show your IP address rather then your true
external IP
address. Also, a proxy server caches files it collects from the net,
thus
making it accessable faster.

NAT (Network Address Translator) does nothing more then translating
your
internal IP address to an external one. So there is a direct
connection to
the internet like that, and there is no caching done by the NAT
server NAT is
handy for home use, since you don't have to really tight up your
security as
you do with your company.

So if you got a big company then you should definitely use a proxy
server to
let your people connect to the outside world.

Cheers,

Jorn

On Monday 02 February 2004 10:38, Hiren wrote:
> greetings all
>
> i often come across proxies and firewalls under the security
section of
> tutorials and guides, i have read that one can create proxies of
any
> internet service like ftp www etc.
> my question is what exactly is a proxy and how does it play a role
in
> security, why and how does it replace NATing, and how does it play
a
> role in security with regard to NAT. what services can be proxied,
is it
> worth having and general advice.
>
> thanks all
> Hiren.
>
> ___
> [EMAIL PROTECTED] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"[EMAIL PROTECTED]"

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Recommendation for proxy server that does Nat function

[JJB]

I just read an post that said some proxy server do Nat function.
Searched the ports collection and did not see an proxy servers that
said they did nat function. Does anyone on this list know of an
proxy or squid server that also does NAT function?

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: chrooted ssh/scp

[Michael Clark]

sshd2 will do this and if you read the license I believe it is legal to use
for most users.

Else you can use sudo to make a ssh chroot.  
google groups has some explainations of how to do this.


Michael Clark
Nemschoff Chairs Inc
mclark at nemschoff dot com
CompTIA A+, MCP
Voice: (920) 457 7726 x294
Fax:  (920) 453 6594



-Original Message-
From: Lowell Gilbert [mailto:[EMAIL PROTECTED]
Sent: Monday, February 02, 2004 8:11 AM
To: Evan Sayer
Cc: [EMAIL PROTECTED]
Subject: Re: chrooted ssh/scp


Evan Sayer <[EMAIL PROTECTED]> writes:

> Does anyone know how to make it so that users can ssh in and get a
> normal shell or scp in and get or send files but only within their own
> home directories via chroot?

The commercial ssh server has that capability built in, but the free
ones don't, last I checked.  You should be able to hook up jail(8) or
chroot(8) to the account itself, though...

-- 
Lowell Gilbert, embedded/networking software engineer, Boston area: 
resume/CV at http://be-well.ilk.org:8088/~lowell/resume/
username/password "public"
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


CONFIDENTIALITY NOTE: This electronic transmission, including all
attachments, is directed in confidence solely to the person(s) to whom it is
addressed, or an authorized recipient, and may not otherwise be distributed,
copied or disclosed. The contents of the transmission may also be subject to
intellectual property rights and all such rights are expressly claimed and
are not waived. If you have received this transmission in error, please
notify the sender immediately by return electronic transmission and then
immediately delete this transmission, including all attachments, without
copying, distributing or disclosing same. 


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

transparrent cvsup cache

[Bjorn Eikeland]

Hi, I'm just gettting started using FreeBSD and I've got two FreeBSD
"clients" and a "server" on my lan, and I'm thinking instead of
having both clients cvsup to a public site, I'd make the machine I
use for a file server a cvscache.
But I'm wondering whats the best way to do so, I'm thinking as a
bridge, and using firewall rules on the interface with a ip address
redirrecting the packets to localhost and running net/cvsup-mirror
on the server box?
I'd be interested in a similar solution for port distfiles, and I
guess squid will do this for me with a bit of configuring? But if
anyone has a better idea I'd be interested!
Ideas are welcome!
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re[2]: True IMAP Trash Folder

[Gary]

Hi Matt,

On Mon, 02 Feb 2004 10:27:41 -0500 UTC (2/2/2004, 9:27 AM -0600 UTC my
time), Matt Juszczak wrote:

>>There is no trash folder in the IMAP protocol itself.. Removing mail is a
>>two step process, first of deleting it, and second of purging the deleted
>>mail.
>>
>>  
>>

M> I understand now.  Thanks.  So do you know of a mail client that 
M> supports "Deleting Items" to a folder called "Trash" on the IMAP 
M> server?

No, because it is not part of the IMAP protocol.

M> Right now I have evolution and if I delete mail it puts it into 
M> a local trash folder, but I dont see an option to "Copy deleted mail to 
M> folder  on mail server" or something like that.

Right, not part of the protocol, so there would be no option for that. You
can either manually drag-N-drop deleted mail, before you purge it, to a new
folder you create on the server, called Trash, or whatever. Or... perhaps
you can set up a filter to move/copy deleted mail to your new Trash folder,
etc... this might work.


--
Gary

Department of Redundancy Department.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: True IMAP Trash Folder

[Doug Poland]

Matt Juszczak wrote:

Does anyone know of a mail client that supports a true IMAP trash
folder?  
>>>
There is no trash folder in the IMAP protocol itself.. Removing mail is a
two step process, first of deleting it, and second of purging the deleted
mail.
I understand now.  Thanks.  So do you know of a mail client that 
supports "Deleting Items" to a folder called "Trash" on the IMAP 
server?  Right now I have evolution and if I delete mail it puts it into 
a local trash folder, but I dont see an option to "Copy deleted mail to 
folder  on mail server" or something like that.

I believe the Mozilla mail client (perhaps Thunderbird too) does what
you want.
--
Regards,
Doug
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: Which interface do I put natd and ipfw

[JJB]

Hello Friend

You only NAT the public internet facing interface, tun0 is your
case.

You should turn on user ppp -nat function and not use the ipfw
divert rule command because, ipfw stateful rules does not work when
used with ipfw's legacy divert rule which launches the sub-routine
call to NATD.

FBSD also comes with IPFILTER, another firewall software
application. It's stateful rules work correctly with it's external
ipnat function and can be configured to use tun0. I have sample if
you are interested.

Here is an ipfw stateful  Inclusive Rule Set

The following rule set is an complete very secure 'inclusive' type
of firewall rule set that I have used on my system. You can not go
wrong using this rule set for you own. Just comment out any pass
rules for services to don't want.

If you see messages in your log that you want to stop seeing just
add an deny rule in the inbound section.

You will see the pattern in the usage of these rules.
1. All statements that are a request to start an session to the
public internet use keep-state.
2. All the authorized services that originate from the public
internet have the limit option to stop flooding.
3. All rules use in or out to clarify direction.
4. All rules use via interface name to specify the interface the
packet is traveling over.


Add the following statements to /etc/ipfw.rules


  Start of IPFW rules file
###
# Flush out the list before we begin.
ipfw -q -f flush

# Set rules command prefix
cmd="ipfw -q add"

pif="tun0"# interface name
 # facing the public internet


#
# No restrictions on Inside Lan Interface for private network
# Not needed unless you have Lan.
# Change xl0 to your Lan Nic card interface name
#

$cmd 5 allow all from any to any via ed0


#
# No restrictions on Loopback Interface
#

$cmd 00010 allow all from any to any via lo0


#
# Allow the packet through if it has previous been added to the
# the "dynamic" rules table by an allow keep-state statement.
#

$cmd 00015 check-state


#
# Interface facing Public internet  (Outbound Section)
# Interrogate session start requests originating from behind the
# firewall on the private network or from this gateway server
# destine for the public internet.
#


# Allow out access to my ISP's Domain name server.
# xxx.xxx.xxx.xxx must be the IP address of your ISP's DNS
# Dup these lines if your ISP has more than one DNS server
# Get the IP addresses from /etc/resolv.conf file
$cmd 00110 allow tcp  from any to xxx.xxx.xxx.xxx 53 out via $pif
setup keep-state
$cmd 00111 allow udp  from any to xxx.xxx.xxx.xxx 53 out via $pif
keep-state


# Allow out access to my ISP's DHCP server for cable or DSL
configurations.
# This rule is not needed for 'user ppp' type connection to the
public internet.
# so you can delete this whole group.
# Use the following rule and check log for IP address.
# Then put IP address in commented out rule & delete first rule
$cmd 00120 allow log udp from any to any 67 out via $pif keep-state
#$cmd 00120 allow udp from any to xxx.xxx.xxx.xxx 67 out via $pif
keep-state

# Allow out non-secure standard www function
$cmd 00200 allow tcp  from any to any 80  out via $pif setup
keep-state

# Allow out secure www function https over TLS SSL
$cmd 00220 allow tcp  from any to any 443  out via $pif setup
keep-state

# Allow out send & get email function
$cmd 00230 allow tcp  from any to any 25  out via $pif setup
keep-state
$cmd 00231 allow tcp  from any to any 110 out via $pif setup
keep-state

# Allow out FBSD (make install & CVSUP)  functions
# Basically give user root  "GOD"  privileges.
$cmd 00240 allow tcp  from me to any  out via $pif setup keep-state
uid root

# Allow out ping
$cmd 00250 allow icmp from any to any  out via $pif keep-state

# Allow out Time
$cmd 00260 allow tcp  from any to any 37  out via $pif setup
keep-state

# Allow out nntp news (IE: news groups)
$cmd 00270 allow tcp  from any to any 119 out via $pif setup
keep-state

# Allow out secure FTP, Telnet, and SCP
# This function is using SSH  (secure shell)
$cmd 00280 allow tcp  from any to any 22 out via $pif setup
keep-state

# Allow out whois
$cmd 00290 allow tcp  from any to any 43 out via $pif setup
keep-state

# deny and log everything else that's trying to get out.
# This rule enforces the block all by default logic.
$cmd 00299 deny log all from any to any out via $pif


#
# I

Re: 5.2.1 ?

[Mike Jackson]

ext Andrew Boothman ([EMAIL PROTECTED]) wrote:
> > 5.2.1-RC1 still gives piles of arp warnings when you use an ADSL router
> > in half-bridge mode. I wish I knew of a way to disable this. For now, I
> > did some tuning to syslog and fixed it so that junk only goes to ttyv3
> > instead of filling up /var.
> 
> What arp warnings are you getting?
> 
> There are ARP sysctls that you might be able to tweak in order to stop
> getting these.

Hi,
 The adsl router is set to 10.0.0.2, offering via DHCP it's WAN IP
address to the FreeBSD box. PPP half-bridge mode is something strange,
but very useful anyway.

 So, the FreeBSD box gets a live internet IP from the router and since
the router is on a different network, the logfiles fill with arp errors
that 10.0.0.2 can't be arp'ed because it's not on the same network,
blah, blah, blah.

 Read this to understand the setup of my networking:

http://www.adslnation.com/phpapps/phpBB2/viewtopic.php?t=402&sid=7f658e15ff642da866cd437cc7f0b841
 

 You see that I have to force the subnet mask to something other than
the one that the adsl router uses, in order to get routing working at
all. Strangely enough, this problem doesn't exist at all on linux. It's
a FreeBSD peculiarity. Anyway, I wouldn't consider using linux for my
firewall/gateway.

BR,
-- 
Mike Jackson
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

SATA RAID 5 controller for FreeBSD

[Artem Koutchine]

Hi!

I am looking for supported RAID 5 controller for FreeBSD and
I am very puzzled after reading all the specs and descrioptions.

I haven't found any SATA RAID 5 controller in the FreeBSD
supported Hardware list, but some manufacturer claim they
support FreeBSD.

SO far i have found
1) Promise FastTrak SX4 (around 200$)
2) HighPoint RocketRaid 1640 (aorund 150$ hard to find)
3) EscaladeR 8506 4-port  one (around 500$)

HightPoint and Escalade AFAIK are well supported by FreeBSD.
FreeBSD 4.8 support is promised in Promise :) FastTrak.

Here is the dilema:

As i have read SX4 is not a hardware raid, it uses server's CPU to
do XOR calculations. Which is not good, because it means if
CPU is loaded RAID permonace will degrade. But SX4 has HUGE
cache memory (up to 256MB SDRAM) and FRAM for internal
queue storage.

I could not find out if RocketRaid is a true hardware RAID 5 or
partly software. Also, no infromation on the size of a cache on 1640.
Review state that RAID 5 perfomance is not very good. However,
I currently use just one huge SCSI disk with 4MB cache. Will i gain
in speed with RAID 5 or loose? (it is a web server, many small file
reads).

Af for Escalde 6506 i again did not find any info on Cache size. However,
the specs clearly state that it is a hardware raid5. But if does not have
any significats amount of cache and IF rocketraid is too hardware
raid 5 then why the heck escalade is so much more espansive?

Please, help me to decide which to pick and maybe someone has
info on cache size and ability to do hardware XOR for RAID5 for
each controller?

Regards,
Artem Kuchin
General Director of IT Legion Ltd.
Russia, Moscow
www.itlegion.ru
[EMAIL PROTECTED]
+7 095 232-0338



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: True IMAP Trash Folder

[Matt Juszczak]

Gary wrote:

Gary,

Hi Matt,

On Mon, 02 Feb 2004 10:20:09 -0500 UTC (2/2/2004, 9:20 AM -0600 UTC my
time), Matt Juszczak wrote:
M> Does anyone know of a mail client that supports a true IMAP trash
M> folder?  Evolution doesn't, and so I use evolution on three different
M> machines and if I have deleted messages I have to check all three
M> machines sometimes to find it.
There is no trash folder in the IMAP protocol itself.. Removing mail is a
two step process, first of deleting it, and second of purging the deleted
mail.
 

I understand now.  Thanks.  So do you know of a mail client that 
supports "Deleting Items" to a folder called "Trash" on the IMAP 
server?  Right now I have evolution and if I delete mail it puts it into 
a local trash folder, but I dont see an option to "Copy deleted mail to 
folder  on mail server" or something like that.

Thanks!


--
Gary
TEAMWORK...means never having to take all the blame yourself.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
 



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: True IMAP Trash Folder

[Gary]

Hi Matt,

On Mon, 02 Feb 2004 10:20:09 -0500 UTC (2/2/2004, 9:20 AM -0600 UTC my
time), Matt Juszczak wrote:

M> Does anyone know of a mail client that supports a true IMAP trash
M> folder?  Evolution doesn't, and so I use evolution on three different
M> machines and if I have deleted messages I have to check all three
M> machines sometimes to find it.

There is no trash folder in the IMAP protocol itself.. Removing mail is a
two step process, first of deleting it, and second of purging the deleted
mail.

--
Gary

TEAMWORK...means never having to take all the blame yourself.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

True IMAP Trash Folder

[Matt Juszczak]

Does anyone know of a mail client that supports a true IMAP trash
folder?  Evolution doesn't, and so I use evolution on three different
machines and if I have deleted messages I have to check all three
machines sometimes to find it.

Thanks!

-Matt

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: fetch fails, ftp works question

[Ion-Mihai Tetcu]

On Mon, 2 Feb 2004 09:40:12 -0500
"JJB" <[EMAIL PROTECTED]> wrote:

> FBSD Friend

Thanks for your time,

> Since the fetch command does function for you, but some times you
> get this message,
> File unavailable (e.g., file not found, no access)
> 
> The "file not found" part you know is not true, because you have
> used the same command where it does get the same named package.
> SO it must be the "no access" part of the message that has meaning
> for this execution of the command.
> 
> That means that the FTP server you are using is busy right them when
> you are trying to access it. Like in max users exceeded.  Those FTP
> servers are being beat on right now by people trying to get the bug
> infested 5.2 .iso files.

>From that machine's inetd.conf:
ftp stream  tcp nowait  root/usr/libexec/ftpd   ftpd -d -l -l -t 120 
-T 120

and I don't remember setting any other limits, in other places.

> I know the error message is not very clear, but that 's what it
> means in your case. Bottom line is since the fetch command works
> some times, it can not be fetch command syntax, ether the targeted
> server is busy and just try again in 10 seconds, or the you have the
> package name typed wrong and it's really not found as you have it
> spelled.

The second can be, as it is a part of make fetch && make checksum from a
script.

> The package names with the version number appended as an suffix is
[..]
> link file commands.

I'm talking about distfiles, not packages, so that is not the problem.
There can be cases when my host has a newer distinfo the the server, but
I've triple-checked that it is not the case here.

> One other gotya,  for native FBSD without any FTP environment
> overrides, ftp defaults to active mode and fetch ftp defaults to
> passive mode.

>From ftp(1) it defaults to passive. But fetch defaults indeed to active,
so this could be a reason; I still don't understand why it works on some
ports and not on others.


> You will get the "File unavailable (e.g., file not
> found, no access)" message if your firewall is blocking FTP access.
> Check out this web site for real good explanation of the 2 FTP
> access modes  http://www.slacksite.com/other/ftp.html
> 
> I hope this gives you the insight you were desiring.
> 
> Joe


-- 
IOnut
Unregistered ;) FreeBSD user
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: NAT and IPFW rules

[JJB]

Hello Friend

First I agree with you the FBSD handbook documentation on firewall
software sucks big time. It leads the reader into believing that
ipfw is the only solution when it is not. FBSD is delivered with
ipfw and IPFILTER which are both firewall software applications. The
second thing that the sparse ipfw documentation falls to say, is an
firewall that does not use stateful rules is not very secure. The
real show stopper is ipfw with stateful rules using the 'keep state'
option does not work when used with the divert/nated legacy
sub-routine. What this means is ipfw with stateful rules can only be
used if 'user ppp -nat' is how you connect to the public internet.

IPFILTER 's stateful rules work fine, and it has it's own external
ipnat function.  I strongly recommend you drop ipfw and instead use
IPFILTER as it's the superior firewall software solution from the
ease of use of stateful rules.

If you use 'user ppp" to connect to the public internet and want to
continue to use ipfw, I have ipfw stateful rule set I can send you.

If you want to use IPFILTER, I can sent of an rule set for it also
along with links to doc sites.


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Eugene
Panchenko
Sent: Sunday, February 01, 2004 11:15 AM
To: [EMAIL PROTECTED]
Subject: NAT and IPFW rules

Hallo!

Out from reading the manpage for natd, I have a question about how
to restrict IPFW access for NAT for the case when I have one
computer connected directly to another one (having two NICs
installed into it)? That means that I don't have to care about big
private network, but rather want to narrow down the access to single
private IP address.

For NAT to work, two rules need to be added:

ipfw add divert natd all from any to any via xl0

Can this rule be restricted (is it possible to divert not every
packets)? Right now, every packet that enters/leaves the system is
diverted, sometimes natd process eats quite a lot of processor
resources. Can this be avoided? How?

ipfw add pass all from any to any

How can this be restricted? I basically need only outgoing stuff
working, that's all, and silently passing any packets from whatever
location to any destination is insecure to me. Can someone post a
live examples of such setup?

Waiting to hear from some gurus ;)

--
Eugene
-
Размер почтовых ящиков увеличен до 25 мегабайт!
ПОЧТА НГС - http://ngs.ru/








___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"[EMAIL PROTECTED]"

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: customize set prompt question

[Chris Riley]

FWIW this is what I use in my .bashrc. The contol codes are for an ANSI 
terminal, the shell doesn't care what to use. The \[ and \] are bash 
specific, you'll want to remove them for csh.

BLACK="\[\e[0;30m\]"
BLUE="\[\e[0;34m\]"
GREEN="\[\e[0;32m\]"
CYAN="\[\e[0;36m\]"
RED="\[\e[0;31m\]"
PURPLE="\[\e[0;35m\]"
BROWN="\[\e[0;33m\]"
LIGHT_GRAY="\[\e[0;37m\]"
DARK_GRAY="\[\e[1;30m\]"
LIGHT_BLUE="\[\e[1;34m\]"
LIGHT_GREEN="\[\e[1;32m\]"
LIGHT_CYAN="\[\e[1;36m\]"
LIGHT_RED="\[\e[1;31m\]"
LIGHT_PURPLE="\[\e[1;35m\]"
YELLOW="\[\e[1;33m\]"
WHITE="\[\e[1;37m\]"
NO_COLOR="\[\e[0m\]"
who am i | grep '^root' > /dev/null
if [ $? = 0 ] ;then
COLOR=$RED
else
COLOR=$LIGHT_GREEN
fi
export PS1="$COLOR\u$NO_COLOR:$YELLOW\w$NO_COLOR\$ "
Nathan Kinkade wrote:
On Mon, Feb 02, 2004 at 11:48:13AM +0100, Didier WIROTH wrote:

Hi,

I would like to colorize this prompt:
set prompt="@%m:%~# "
How do I have to modify the prompt so that the entire prompt is of "red"
color. 
Only the prompt should be red, not what is typed or the results of any
output.

many thanks


Does csh understand ansi escape sequences?  If so you could try this:

$ set prompt="\[\e[1;[EMAIL PROTECTED]:%~# \[\e[m\]"

I don't know if this will work in csh, but it definitely works in bash.
For bash it would be:
$ export PS1="\[\e[1;[EMAIL PROTECTED]:%~# \[\e[m\]"

Nathan
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Softc structure linkage problem

[Admin]

I am using FreeBSD Version 5.1.

I am having problem to use the softc structure variables to assign the pointer to 
make_dev and bus_alloc_resource functions.

When I declare dev_t sdev as global variable and assign to make_dev as follows:

int unit = device_get_unit(device);

sdev = make_dev(&sy_cdevsw, 0, UID_ROOT, GID_WHEEL, 0600, "sy3c%d", unit);

I am able to create device node, load the kld and unload the kld.

 When I declare dev_t dev as part of sy_softc structure and assign the scp->dev 
pointer to make_dev function as shown above, the code compiles ok.  When I load the 
kld with "kldload -v ./sy3c.ko" command, it flags error. The errors log file err_log 
is attached.

I have also attached the driver code for reference.

Would you please advise a.s.a.p to resolve this problem.

Regards

Gurdial Chandra  


sy3c.c
Description: Binary data


err_log
Description: Binary data
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: failed to change NIS password

[Irvine Short]

OK, got it!

On Mon, 2 Feb 2004, Irvine Short wrote:

> FreeBSD 4.9-RELEASE NIS master, trying to change password for NIS user on
> same machine. One other client - Red Hat 7.3
>
> All works fine, can log in to both machines, can ypcat all the maps, etc.
>
> However when I try and change password on the FreeBSD box I get this:
>
> passwd: failed to change NIS password: RPC: Server can't decode arguments

I had all the user's login shells set to /bin/bash with an appropriate
symlink on the 'BSD box so they could have the same login shell on Linux &
FreeBSD.

I had neglected to update /etc/shells...

TIA (thanks in absence?)

Irvine
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"