Re: what is my real address?
On Thu, Mar 04, 2004 at 08:33:32AM +0800, Robert Storey wrote: > Matthew Seaman <[EMAIL PROTECTED]> wrote: > > Running an FTP server through a NAT'ing gateway is not going to be a > > pleasant experience, even if you were running the NAT gateway on a > > FreeBSD box where natd's punch_fw functionality would make things a > > great deal easier for you. FTP is an ancient protocol not designed to > > cope with the realities of the modern internet. > > Is it just that I will suffer poor performance, or is there some other > reason? I don't actually need hot performance, as this will be a very > low-traffic anonymous ftp server. It's more for experiment and education > than anything else. I'm trying to get the students to learn something > besides Windows. No, it's more fundamental than that. The problem is the way FTP works. I wrote a piece on this in this very forum a while ago -- see http://freebsd.rambler.ru/bsdmail/freebsd-questions_2002/msg34253.html which was mostly about firewalling, but explains what happens in terms of what tcp connections are made in which directions depending on whether you're using active or passive mode. One problem that will bite you happens with passive mode FTP -- which is the most popular variant, as used by default by all web browsers, for instance. This involves the client opening a the ftp data channel connection to an arbitrary high-numbered port on the server. If the ftp server is behind a NAT gateway that's going to cause problems, as the NAT gateway will just see an incoming request to open a connection on a high-numbered port, so you'll have to tell the gateway to proxy all of those connections back to the FTP server. It's a bit of a pain to set up, and opens up far too much of your port range to potential nastyness but it should work. Where it can get really frustrating is using active mode FTP: here it's the server that opens the data connection from port 20 on the server side out to an arbitrary port on the client side. As you can imagine this give the administrators of the client machine the hebegeebies. Even worse, as you go out through a NAT gateway, it is quite likely that the NAT gateway will rewrite the packets so they appear to come from an arbitrary port number on the gateway. That means you'ld have to accept a connection from an arbitrary high-numbered port to an arbitrary high-numbered port. At which point your only rational response is to run away, screaming. I really must tidy that message up and put it on the web somewhere. Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK pgp0.pgp Description: PGP signature
Amavisd and clamd startup on boot
I have recently installed postfix, amavisd-new, clamd. I have amavisd.sh, clamav-clamd.sh and clamav-freshcalm.sh in my /usr/local/etc/rc.d directory. Neither clamd nor amavisd seem to start on boot. Please let me know what i am doing wrong? Gareth ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: one simple question
> I compile a test C file. I notice there are a few lines at the > beginning of the assembly code. I want to know what it means, but > can't figure out one of them. Can anyone tell me what the > following line does please? > > and$0xfff0,%esp Hmmm, when I compile the simplest possible C file: --- int main (int argc, char *argv[]) { return 0; } I get this: .file "test1.c" .version"01.01" gcc2_compiled.: .text .p2align 2,0x90 .globl main .typemain,@function main: pushl %ebp movl %esp,%ebp xorl %eax,%eax jmp .L2 .p2align 2,0x90 .L2: leave ret .Lfe1: .sizemain,.Lfe1-main .ident "GCC: (GNU) c 2.95.4 20020320 [FreeBSD]" No such thing as: and$0xfff0,%esp Are you using gcc 3.3.x? Anyway, this code looks like it would align the stack the stack pointer... > best regards > Chungwei -- Cordula's Web. http://www.cordula.ws/ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: NFS not responding.
On Wed, Mar 03, 2004 at 06:21:34PM -0500, Lists wrote: > I'm experiencing problems with a 4.9 server attached to a NetApp. Some > background. There are several Solaris 8 machines connected to it, and > (2) FreeBSD 4.9 machines. The Solaris servers and one FreeBSD machine > have no issues connecting to the NetApp. However, the 4.9 server in > question does. It was configured identically to its' sister 4.9 server. > The NetApp in question acts as a mailstore. Have you eliminated the really dumb causes of such problems? Try replacing the ethernet cabling on the problematic machine, and if that doesn't fix things, try moving that machine to a different network port or port on your network switches. Check the output from 'netstat -i' to see if you're getting any bad packets. I've had weird NFS problems like this which I spent ages trying to fix in software, and then found that the problem was actually a marginally broken cable. Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK pgp0.pgp Description: PGP signature
Re: Monitoring bandwidth usage by user
On Wed, Mar 03, 2004 at 04:38:12PM -0800, Roop Nanuwa wrote: > Is there any way to get live (or even just logged) monitoring of > bandwidth > usage by user instead of just an aggregate amount for the entire > machine/interface? Not easily. ipfw(8) has a 'uid' option in it's packet matching rules, which you might be able you use to select the traffic from one user, and then push that (or logging information about that traffic) into some sort of analysis program. But that's going to take a mite of programming to get anything working. Most ISPs who bill on the amount of network traffic will arrange for each of their user accounts to use a separate IP number: jail(8) can be very handy for doing that. Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK pgp0.pgp Description: PGP signature
Re: Keyboard enabling in 5.X
Use a USB keyboard see usbd(8) and ukbd(4) At 11:58 PM 3/3/2004, den wrote: Hi, I have a question about keyboard driver in FreeBSD 5.X. I want to have a possibility to boot my box without keyboard and attach keyboard after system already started. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: XFree86 4.4.0 - when
On Wed, Mar 03, 2004 at 10:34:21PM -0600, Doug Poland wrote: > I'm not sure if this is the appropriate list to ask or not, but, does > anyone have a rough idea when XFree86 4.4.0 will be committed to the > ports tree? I've got an nVidia AGP card that is supported in 4.3.99 > and 4.4.0 Generally it's best to ask the port maintainer, which in this case is [EMAIL PROTECTED] -- or in other words, the [EMAIL PROTECTED] mailing list. There is a test version of some 4.3.99 server code in ports -- see x11-servers/XFree86-4-Server-snap. Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK pgp0.pgp Description: PGP signature
Re: Monitoring bandwidth usage by user
Roop Nanuwa wrote: Hello all, Is there any way to get live (or even just logged) monitoring of bandwidth usage by user instead of just an aggregate amount for the entire machine/interface? Squid can do it. There are quite a few perl scripts that can build a webpage from the log files and show you nice pretty graphs and such. This is assuming that by user you mean machines that are accessing the net through a gateway. -- Benjamin Meade System Administrator LanWest Pty Ltd Ph: +61 (8) 9440 3033 Fax: +61 (8) 9440 3370 ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: inetd[520] ssh/tcp: bind: Address already in use ???
On Thu, Mar 04, 2004 at 03:45:41PM +0800, [EMAIL PROTECTED] wrote: > I rebooted my system and wondered why the commadn line said > > Mar 4 15:13:16 rfa inetd[520]: ssh/tcp: bind: Address already in use > Because you shouldn't be trying to run sshd(8) standalone and out of inetd(8) at the same time. I'd advise you not to run sshd(8) out of inetd(8): sshd(8) has to do quite a lot of heavy crypto stuff when it starts up, and running it out of inetd will force it to do that for every new connection. You're quite likely to end up running out of random numbers from /dev/random and seeing your ssh connections hanging. Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK pgp0.pgp Description: PGP signature
Re: kernel compile Q - How to get the speaker to work?
thanks for the answer, but when I had Windows installed, the speaker did work, I mean I was able to hear music, in addition to the beeps. I've never heard of the case speaker making anything but beeps. Either yours is quite unique or you guys are talking about different speakers. I think you'll need to add support for the sound card that the speaker is connected to. Have a look at the case speaker. I can't see it being connected to a sound card but verify that. If it (or another case speaker) is in fact connected to sound card, add that device to the kernel. Don't know what card you have (and am haven't really followed the thread) but have you tried soundblaster support? device pcm It's pretty common. Worked on almost every FreeBSD desktop machine I've ever had. Hope this helps. Christopher Hollow thx --- Johnson David <[EMAIL PROTECTED]> wrote: > On Tuesday 02 March 2004 04:28 pm, Tadimeti Keshav wrote: I added to my kernel config file: device pca (this was mentioned in the NOTES file) Typically a PC speaker is not an audio device in the normal sense of the term. It's there just to make beeps, and not music. It's not going to do what you probably want it to do. secondly, what is the use of adding: device udbp This is a USB double pipe. But what does it do. I'm sort of partial to the traditional Linux kernel configuration comment of "if you don't know what this is then you don't need it." Since there are no devices listed in the Hardware notes using this driver, and it's commented out be default in the GENERIC kernel, I'm fairly confident that you don't need it. David ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Whereis gifconfig
Hi Looks for me like a stupid question, whereis gifconfig in FreeBSD 5.2 stable. Installed Basic FreeBSD as kernel developer and user. Thanks ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Whereis gifconfig
On Thu, Mar 04, 2004 at 10:02:15AM +0100, Sjaak Nabuurs wrote: > Looks for me like a stupid question, whereis gifconfig in FreeBSD 5.2 > stable. All of the gifconfig(8) functionality has been rolled into ifconfig(8) in 5.x Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK pgp0.pgp Description: PGP signature
Re: 1 processor vs. 2
On Thu, 4 Mar 2004 05:09, Chuck McManis wrote: > At 05:53 AM 3/3/2004, Danny Pansters wrote: > >RAID5 on 3 disks? That's useless. > > Its only mostly useless. You can't mirror (RAID-1) three drives, so if you > want some resiliency you can use RAID-5 and give up one disk to parity and > get two disks worth of data. You can certainly run RAID-1 across 3 disks leading to three copies of data and still a pretty solid system after one goes down. However I'm not sure if it is valid to call it a mirror system ;-) Malcolm > You could even do RAID4 on three disks. 'course 4 disks is generally the > minimum most people talk about, but its not completely useless. > > --Chuck > > ___ > [EMAIL PROTECTED] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "[EMAIL PROTECTED]" ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Whereis ifconfig
> Looks for me like a stupid question, whereis gifconfig in FreeBSD 5.2 > stable. >>All of the gifconfig(8) functionality has been rolled into ifconfig(8) >>in 5.x Okay Is there anywhere an up to date manual for setting up VPN with 5.2 , freeBSD.org manual page aboud VPN is outdate now. I found out as well that pseudo-device's are not there in 5.X it's just a device gif I found many doc's but seems all outdate'd. Thanks ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Monitoring bandwidth usage by user
Benjamin Meade wrote: Roop Nanuwa wrote: Hello all, Is there any way to get live (or even just logged) monitoring of bandwidth usage by user instead of just an aggregate amount for the entire machine/interface? Squid can do it. There are quite a few perl scripts that can build a webpage from the log files and show you nice pretty graphs and such. This is assuming that by user you mean machines that are accessing the net through a gateway. Actually, no. These are all users who are logged into a single box (they have shell accounts). I wanted to monitor each user's bandwidth usage individually to prevent abuse. --roop ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
IPFW and NATD
Hi, I am using NATD and it works pretty fine. I am currently forwarding all incoming packets to an internal host and my question now is: Is there a way (with ipfw) to deny all incoming packets which are coming from that internal host and which are not responses to nat'ed requests from the Internet? So in other words: I would like to deny all data which is coming from the internal host and which is going to my FreeBSD firewall/router. Will the nat'ing still work? Bye and thanks, Werner. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: kernel compile Q - How to get the speaker to work?
On Thu, Mar 04, 2004 at 01:30:27AM -0500, HOLLOW, CHRISTOPHER wrote: > > > > > >thanks for the answer, but when I had Windows > >installed, the speaker did work, I mean I was able to > >hear music, in addition to the beeps. > > > I've never heard of the case speaker making anything but beeps. Either > yours is quite unique or you guys are talking about different speakers. It is your experience that is quite limited. > I think you'll need to add support for the sound card that the > speaker is connected to. Have a look at the case speaker. I can't see > it being connected to a sound card but verify that. If it (or another > case speaker) is in fact connected to sound card, add that device to the > kernel. It is perfectly possible to play music on the case speaker, and this does not require any sound card. The sound tends to sound like crap though. Music (and other sounds) on the built-in speaker was in fact the standard way of getting music in PC-games back in the Bad Old Days (early and mid-eighties) when sound cards were a rarity. Add the line 'pseudo-device speaker' to your kernel config file to get some limited support for playing music (see the man-pages for spkr(4) and spkrtest(8) for more info on this method.) It is also possible to use the case-speaker as a more generic audio-output device. To try this add the line 'device pca0 at isa? port IO_TIMER1' to your kernel config file, and then use /dev/pcaudio as the output device. Be aware that this is poorly documented and supported, and I think it might even have been removed entirely from 5.x -- Erik Trulsson [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: pkgdb problem!
On Wed, Mar 03, 2004 at 10:39:37PM -0500, Tsu-Fan Cheng wrote: > Hi BSDers, I run pkgdb -F and get this: > > ---> Checking the package registry database > [Updating the pkgdb in /var/db/pkg ... - 433 packages > found (-21 +58) (...)Cannot allocate memory: Cannot update the pkgdb!] > > never has happened to me before, what's wrong? Take a look at /usr/ports/UPDATING. Kris pgp0.pgp Description: PGP signature
Re: priority-- curious about cpu resouce share
On Wed, 03 Mar 2004 22:57:05 +0800 Zhang Weiwu <[EMAIL PROTECTED]> probably wrote: > Things can hardly be perfect. Now I begin to use mpg123, I used your > method of "rtprio up and su back", very useful to me. > > But if mpg123 has higher priority than ppp, sometimes mpg123 decides to > move to another song, it reloads buffer, starveing ppp and timeouting > bluetooth device... If mpg123 has equal/lower priority with ppp, they > struggle for CPU, and that *sounds* bad. Now I adjusted buffer, it works > so so. > > I read the handbook it says "no way to limit CPU percentage". It's my > toy, a old P166M box, I let other people in the office ssh to the box > with cmp3 console DJ (backended mpg123) to play music, because it has > good speakers. I use ppp over bluetooth to connect to the box when I'm > enjoying sun shine outdoor. You still didn't post the whole of top(1) output. FWIW splay has a -2 switch that permits it to generate half that quality output using half that processor cycles (not sure about mpg123). Unless the people out there are melomaniacs, that may be sufficient. P.S. It *seems* possible to use a little hack to renice the mp3 player after it has loaded the new song. That is, every time a new song is being played, launch both the player and a separate shell process which sleep(1)s for a second, and then rtprio's the player. For one song, it will *probably* look like this: -begin playsong.sh #!/bin/sh mpg123 $1& MPG123_PID=$! (sleep 1; sudo rtprio 3 -${MPG123_PID})& wait -end playsong.sh assuming you have the appropriate line in your sudoers file (the '-' before the ${MPG123_PID} is not a typo). -- DoubleF "I refuse to have a battle of wits with an unarmed person." pgp0.pgp Description: PGP signature
Re: kernel compile Q - How to get the speaker to work?
On Thu, 04 Mar 2004 01:30:27 -0500 "HOLLOW, CHRISTOPHER" <[EMAIL PROTECTED]> probably wrote: > I've never heard of the case speaker making anything but beeps. Either > yours is quite unique or you guys are talking about different speakers. >From a 4.x LINT file: # # pca: PCM audio through your PC speaker # . . . # Not controlled by `snd' device pca0 at isa? port IO_TIMER1 I've once heard that much `PCM audio' :. At the very least, as experience shows, you can surprise your friends. -- DoubleF There's no point in being grown up if you can't be childish sometimes. -- Dr. Who pgp0.pgp Description: PGP signature
Re: backup
Toomas Aas wrote: Hi! On Tue, 24 Feb 2004 9:32 am, Richard Beyer wrote: We're currently doing a back up of a FreeBSD 4.9 (2) server by plugging a USB external drive in and then doing cp /dev/ad0 /dev/da0 This takes about 30 hours, (USB 1). To which anubis answered: Why not use removeable drive trays with straight pata drives? Few months ago I did some research on this and found that not every removable IDE drive bay supports hot-swapping - the ones that do are somewhat more expensive. I myself ended up using external FireWire drives, which have worked out quite well (and the speed is much better than USB with FreeBSD 4.9): Toomas Aas wrote: To which anubis answered: Why not use removeable drive trays with straight pata drives? Few months ago I did some research on this and found that not every removable IDE drive bay supports hot-swapping - the ones that do are somewhat more expensive. I myself ended up using external FireWire drives, which have worked out quite well (and the speed is much better than USB with FreeBSD 4.9): I am using removeable drives and trays. I am using the plain jane vipower ones as seen here. http://www.vipower.com/product/MobileRack/3fan_mobile_rack/vp_70/vp_7010ls3fu.htm They are connected to a promise 2 channel ide card as seen here http://www.promise.com/product/product_detail_eng.asp?productId=11&familyId=3 The drives are 200GB seagates. Neither of these is rated as hot swappable as far as I know. We are using them as "hot swappable". To us this means that we unmount the drive, atacontrol detatch, power off then yank out without powering down the server. We have been using this as a backup method successfully for over a month now in production and before that for a couple of months in testing. We havent noticed any problems so far. I hesitate in calling it a success at this stage. Ask me in 2 months time when I see how the drives handle being lugged off site daily. When I looked at it I took the hot swapping features to be needed only for windows. If you are worried about burning out something use an ide card like we are so if smoke comes out you can bin it and not the motherboard. The cost wasnt that great. In Aussie dollars the trays were $30, the card about $60. The machine is currently running 5.1. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Promise 20378
Dear Sirs: I currently run my FreeBSD 4.7R, perfectly, on a Promise 20276 (RAID 1). However, this chipset does not appear on; http://www.freebsd.org/relnotes/4-STABLE/hardware/i386/x27.html#AEN33 Now I am looking at the board based on the Promise 20378 (ATA133). That does not appear on the list either; will 4.7R be able to use it, though? Thanks, - Mark ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Networking problem
I have a friend who can not get his FreeBSD 5.2 server to act as a gateway, from the internal network we can ping the external network card, but no further. From the server we can ping the entire world. I had him bring it over and set up my server (FreeBSD 4.8R as the gateway) so I now have: -- >From the laptop I can ping as far as the external nic on his server. >From his server I can ping the world. I have googled, looked at the mailing list, but can not find the problem :o( I have re installed the server, incase he goofed up, same problem, I have swapped the external network card, same problem. Netstat -rn shows the default gateway (as my server) In rc.conf it has gateway_enable="YES" I am out of ideas Regards, Kat. --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.593 / Virus Database: 376 - Release Date: 20/02/2004 ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Amavisd and clamd startup on boot
"Gareth Bailey" <[EMAIL PROTECTED]> writes: > I have recently installed postfix, amavisd-new, clamd. > > I have amavisd.sh, clamav-clamd.sh and clamav-freshcalm.sh in my /usr/local/etc/rc.d > directory. > > Neither clamd nor amavisd seem to start on boot. > > Please let me know what i am doing wrong? > > Gareth Are they executable? They won't be run unless they are (and also end in .sh, which they do). -- Dan Pelleg ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Networking problem
On Thu, 4 Mar 2004, Kathy Quinlan wrote: > I have a friend who can not get his FreeBSD 5.2 server to act as a > gateway, from the internal network we can ping the external network > card, but no further. From the server we can ping the entire world. > > I had him bring it over and set up my server (FreeBSD 4.8R as the > gateway) so I now have: > > -- > > >From the laptop I can ping as far as the external nic on his server. > >From his server I can ping the world. > > I have googled, looked at the mailing list, but can not find the problem > :o( I have re installed the server, incase he goofed up, same problem, I > have swapped the external network card, same problem. > > Netstat -rn shows the default gateway (as my server) > > In rc.conf it has gateway_enable="YES" > > I am out of ideas What IP addresses are used within the internal network? If you use addresses like 10., 172.16.-172.31. or 192.168.1.-191.168.254., you should use natd instead of routed on the server connected to the world outside. Regards Konrad Heuer ([EMAIL PROTECTED]) ___ ___ GWDG / __/__ ___ / _ )/ __/ _ \ Am Fassberg / _// __/ -_) -_) _ |\ \/ // / 37077 Goettingen /_/ /_/ \__/\__//___// Germany ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Amavisd and clamd startup on boot
At least for clamav, you need to have 'clamav_clamd_enable="YES"' in your /etc/rc.conf file. There might be a similar requirement for amavisd. Bryan On 03/04/04 at 07:02, Dan Pelleg wrote: > "Gareth Bailey" <[EMAIL PROTECTED]> writes: > > > I have recently installed postfix, amavisd-new, clamd. > > > > I have amavisd.sh, clamav-clamd.sh and clamav-freshcalm.sh in my > > /usr/local/etc/rc.d directory. > > > > Neither clamd nor amavisd seem to start on boot. > > > > Please let me know what i am doing wrong? > > > > Gareth > > > Are they executable? They won't be run unless they are (and also end in > .sh, which they do). > > -- > > Dan Pelleg > ___ > [EMAIL PROTECTED] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "[EMAIL PROTECTED]" -- Bryan AlbrightLead IP Engineer [EMAIL PROTECTED] Qwest Internet Solutions Question: If you plug a charged UPS into itself, will it keep running forever? ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Amavisd and clamd startup on boot
On Thu, Mar 04, 2004 at 10:16:38AM +0200, Gareth Bailey wrote: > I have recently installed postfix, amavisd-new, clamd. > > I have amavisd.sh, clamav-clamd.sh and clamav-freshcalm.sh in my /usr/local/etc/rc.d > directory. > > Neither clamd nor amavisd seem to start on boot. > > Please let me know what i am doing wrong? Did you read those .sh files? Those startup scripts (well, the first two at least: I can't find the third one -- unless you actually mean clamav-*freshclam*.sh) are all RCng enabled, and you need to put entries into /etc/rc.conf to enable them: amavisd_enable="YES" clamav_clamd_enable="YES" clamav_freshclam_enable="YES" Also, did you edit /usr/local/etc/clamav.conf to set things up for your local system? Did you take out the 'Example' line, which prevents clamd from starting up? Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK pgp0.pgp Description: PGP signature
Re: XFree86 4.4.0 - when
On Thu, Mar 04, 2004 at 08:50:21AM +, Matthew Seaman wrote: > On Wed, Mar 03, 2004 at 10:34:21PM -0600, Doug Poland wrote: > > > I'm not sure if this is the appropriate list to ask or not, but, does > > anyone have a rough idea when XFree86 4.4.0 will be committed to the > > ports tree? I've got an nVidia AGP card that is supported in 4.3.99 > > and 4.4.0 > > Generally it's best to ask the port maintainer, which in this case is > [EMAIL PROTECTED] -- or in other words, the [EMAIL PROTECTED] > mailing list. There is a test version of some 4.3.99 server code in > ports -- see x11-servers/XFree86-4-Server-snap. > Thank you very much. -- Regards, Doug ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Monitoring bandwidth usage by user
On Wed, Mar 03, 2004 at 04:38:12PM -0800, Roop Nanuwa wrote: > Is there any way to get live (or even just logged) monitoring of > bandwidth > usage by user instead of just an aggregate amount for the entire > machine/interface? See the last link in my sig below: -- Jez Hancock - System Administrator / PHP Developer http://munk.nu/ http://jez.hancock-family.com/ - Another FreeBSD Diary http://ipfwstats.sf.net/- ipfw peruser traffic logging ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
How can I rebuild prots databases?
I'n updating a bunch of older (around 4.2) machines. On ne of them I seem to have managed to toatly muck up the ports dayabases :0( I'm getting things like this when I run portupgrade: ! (pgaccess-0.98.6)(missing origin) ! (acroread-3.02) (missing origin) ! (netscape-wrapper-2000.07.07)(missing origin) I think the best plan is to completly rebuild from scratch the databases that contain available ports, and the ports that are installed on this machine. I've tried various combinations of pkgdb -F and pkgd -Uu. to no avail. Can I just remove all of these databases, and rebuiold them from scratch? If so, how do I acomplish this? -- "They that would give up essential liberty for temporary safety deserve neither liberty nor safety." -- Benjamin Franklin ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: one simple question
thank you very much for the reply yes and I am using gcc 3.2.2 if you "gdb" the executable and "disassemble main" you will see the line like that but if you use gcc -S something.s something.c it won't appear in the assembly code and I google around, I think it does the alignment for optimization purpose, in that case the memory access will be faster according to the article. best regards, Chungwei --- Cordula's Web <[EMAIL PROTECTED]> wrote: > > I compile a test C file. I notice there are a few lines at the > > beginning of the assembly code. I want to know what it means, but > > can't figure out one of them. Can anyone tell me what the > > following line does please? > > > > and$0xfff0,%esp > > Hmmm, when I compile the simplest possible C file: > > --- > int > main (int argc, char *argv[]) > { > return 0; > } > > > I get this: > > > .file "test1.c" > .version"01.01" > gcc2_compiled.: > .text > .p2align 2,0x90 > .globl main > .typemain,@function > main: > pushl %ebp > movl %esp,%ebp > xorl %eax,%eax > jmp .L2 > .p2align 2,0x90 > .L2: > leave > ret > .Lfe1: > .sizemain,.Lfe1-main > .ident "GCC: (GNU) c 2.95.4 20020320 [FreeBSD]" > > > > No such thing as: > > and$0xfff0,%esp > > Are you using gcc 3.3.x? > > Anyway, this code looks like it would align the stack > the stack pointer... > > > best regards > > Chungwei > > -- > Cordula's Web. http://www.cordula.ws/ > = bear ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
growfs, bsdlabel or fdisk issue
On my laptop I have dual-boot with Windows XP, but as I allmost never boot it in Windows, and since my /usr-partition is running out of space, I decided to shrink the FAT-partition that I've been sharing between to two oses. So I used FreeBSD's fdisk to remove the existing FAT-partition, and to extend the FreeBSD-slice. I then used bsdlabel to change the disk's label to reflect the new size of the slice. I changed the c-partition to include the entire slice, and the f-partition (which was the last partition of the slice, directly followed by the former FAT-partition) was extended to the end of the slice. So far all seems ok. So I boot in single user and tries to run growfs. But all growfs gives me is: growfs: rdfs: read error -1940904252 Input/output error After lots of trying, I decided to instead of resizing /usr, to just add a new g-partition, and split /usr in /usr and /home, where the latter could live on the new partition. But bsdlabel won't let me reduce the size of the f-partition to add a new g-partition. According to the manual page og bsdlabel: The kernel device drivers will not allow the size of a disk partition to be decreased or the offset of a partition to be changed while it is open. But even if I'm in single user mode, with /usr not mounted, I still can't get this to work. And bsdlabel keeps giving me the following error (which by the way has a misspelled 'suppressed'): bsdlabel: write to disk label supressed - label was as follows: Any help would be appreciated. I'd like to keep my data intact while still getting more diskspace for my FreeBSD installation. Svein Halvor ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Visor, USB, 4.9
Has anyone had any luck getting a Handspring Visor to connect via USB to FreeBSD 4.9 on the ucom interface? I had it working just fine through ugen on FreeBSD 4.8 but after a cvsup and a switch to ucom it fails. I've tried it as a user and as root so I dont think it is a permissions problem. Literally, the only thing that changed in my setup was to change ugen to ucom. I get IO errors of the form: pconn_usb_open: Can't get information about USB device. ioctl(USB_GET_DEVICEINFO): Inappropriate ioctl for device thanks! chadd ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
re: inetd[520]
followup on my question earlier about the warning inetd[520] ssh/tcp : bind; Address already in use I only got this message recently, and im sure i didnt do anything about inetd, also at the start of configuring freebsd, i confirmed sshd should run from inetd(i think) anyway is there a way to confirm how sshd starts up? [the guy who respondd said sshd might be running out of sshd and consuming resources i think, i accidentally erased his email] i man'd inetd and saw that the configuration file was /etc/inetd.conf and i checked that out... i only uncommented sshd and ftpd so i don't think i am running sshd out of inetd can someone explain this baffling error? its coz of this i can't use web services from this box, although this box is still providing apache services yours, rommel ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE:{Classmates#889-142}read it immediately
We're sorry! This email address does not accept direct incoming mail. To contact Classmates Member Care, please complete the online Feedback Form at http://www.classmates.com/help/quality_care.tf Your question will be routed to us promptly, and you will receive a reply from our Member Care team. Classmates Online http://www.classmates.com -Original Message- From: [EMAIL PROTECTED] [EMAIL PROTECTED] Sent: Thursday, Mar 4 2004 5:16AM To: [EMAIL PROTECTED] [EMAIL PROTECTED] Subject:read it immediately i hope it is not true! ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Monitoring bandwidth usage by user
You can also check out ipa. This does exactly what you want using firewall rules. On Thu, 4 Mar 2004, Jez Hancock wrote: > On Wed, Mar 03, 2004 at 04:38:12PM -0800, Roop Nanuwa wrote: > > Is there any way to get live (or even just logged) monitoring of > > bandwidth > > usage by user instead of just an aggregate amount for the entire > > machine/interface? > See the last link in my sig below: > > -- > Jez Hancock > - System Administrator / PHP Developer > > http://munk.nu/ > http://jez.hancock-family.com/ - Another FreeBSD Diary > http://ipfwstats.sf.net/- ipfw peruser traffic logging > ___ > [EMAIL PROTECTED] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "[EMAIL PROTECTED]" > ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Unable to Install FreeBSD 5.2.1
This is a question for anyone running 5.2.1.. I currently have 5.1 running on a "Test server", I decieded to try ver 5.2.1. However after I did the Make Buildworld Make Buildkernel Make installkernel reboot commands, the machine would no longer boot up to a login prompt. It would get as far as Setting Freqency to 28xxhz at 800mhz Time ticks every 10.00 msecond and the machine would just hang. No keyboard controll nothing. So I D/L the 5.2.1 ISO, and booted from Disc1 cd, and the same thing happens at the same point. Mind you this machine has been running 5.1 Just fine. The machine is a AMD Athlon XP 2800+ with a DCI NFII-400LA Motherboard. 512 megs of DDR 2600 ram, 60gig ATA 100 Maxtor drive, and a 24x CD-ROM Drive. Not sure if it matters but the FSB on the board is 333mhz, not sure where the 800mhz is coming from. Any help would be appreciated. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: 1 processor vs. 2
Danny Pansters wrote: [ ... ] Physical disks are your unit of failure or of resilliance if you like. Absolutely--- understanding RAID properly requires understanding the division of data onto the physical disks. This is an important concept. That's why you need 5+ drives for RAID5 to be any real fun. A three-disk RAID-5 array is a devolved case, but it will function usefully. I don't disagree: RAID-5 is best suited for 5 to 7 disks, but is okay with 4. You want your data to be present at least twice on different physical drives. You want the same for your parity info. You're actually describing RAID-1 or RAID-51 here. The mere fact that you stripe everything out with RAID5 doesn't change your physical unit which is one disk. Resilliance means: what happens if a random drive fails. RAID5 on 3 disks defeats the purpose of RAID5 IMHO. RAID-5 means "stripe set with rotating parity", and it is the usage of parity information that provides redundancy (what you call resilliance). A 3-disk RAID-5 array will still function without data loss even if any of the physical disks fails. RAID-5 will not survive a two-disk failure, whereas some RAID-1 or RAID-10 arrays can survive loss of multiple disks. (As might RAID-51...) Theoretically the more drives, the better RAID5 gets, so that might say something about Veritas if they warned against using more than 7 drives. Perhaps grog can be the final referee here, not my turf ;-) The parity calculations for RAID-5 are a lot of work and that work scales linearly with the number of drives in the array. The longer you make the array, the worse the performance becomes for small writes in particular. Very long RAID-arrays also tend to encounter bottlenecks with the system bus or the transport bus rather than being bottlenecked by the drives themselves. I just kinda fell back into the developed thread, hope you don't mind me adding a general remark: One doesn't do RAID to increase performance. Period. Sorry, but wrong. The only purpose of pure RAID-0 is to increase performance by distributing I/O between more than one device. Modes using RAID-1 mirroring will also show a significant improvement to read performance. There are three factors involved in deciding how to utilize RAID: reliability, performance, and cost. One can choose to prioritize one or two of these factors, at the expense of the third; which factors are chosen determine which RAID configuration is appropriate. RAID-5 does not increase performance because the priorities are improving reliability (ie, gaining fault-tolerance) and minimizing cost (ie, getting [n-1] available storage from n drives, rather than [n/2] as per mirroring). -- -Chuck ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
CUPS & Kerberos
Is there any "hack" to get CUPS to authenticate to Kerberos? It seems to support either plain Unix authentication or it's own MD5 passwd file only :-( -- __ Guy Van Sanden http://unixmafia.port5.com Registered Linux user #249404 - September 1997 __ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: My ipfilter rules.
In order to be a good netizen, I applied the bogon list to my outbound traffic, too. I also moved the bad packet checks to the head of the incoming rules, as they make more sense there - no point in letting them use any more cpu than needed, if they are junk. At least 35 people have looked at my rules (http://www.ste-land.com/rules.html). I've updated the page, so be sure to hit refresh/reload, if you go to look at it again. So far, two people have responded. I took the suggestions of one. Anyone else? I'm putting the server on the Internet tonight, and would like the firewall done by then. Two questions: 1) Should I be performing the bad packet checks on the outbound path, too? 2) I looked at using groups to keep outbound packets from traversing rules for inbound packets, and vice versa, but I still don't understand them well enough to set them up. Suggestions? -ste ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: RAID1 vs RAID5 [ was Re: 1 processor vs. 2]
Danny Pansters wrote: So statistically and theoreticaly RAID1 compares to no RAID at all as 2x read speed, 1x write speed (it needs to be written twice but through two heads on two drives seperately and assume they react and move at the same speed). That's about right, but you should be aware of the fact that you are only considering a single transaction. When you think about a stream of I/O requests, either round-robin or geometric division of read access can perform better depending on whether you are moving lots or data (few big requests) or doing many small reads and being bound by seek times. Because the heads may be in different places do to distribution of reads, the heads don't end up writing data out at the exact same time; allowing write to be asyncronous rather than requiring both drives to complete a write operation can speed things up, particularly if geometric distribution of reads is being used. Take a RAID5 with 5 drives that would in terms of data resiliance compare with a RAID1 of 3 drives at best (right?). No. A three-disk RAID-1 arry can retain data even if two drives fail. The RAID-5 array will lose data if two drives fail. In more complicated cases (RAID-10 and RAID-50), RAID-1 has significantly greater reliability than RAID-5. Also, RAID-5 performance degrades horribly if a drive is down, whereas RAID-1 does fine... Change the above numbers for a RAID1 to 3 drives and you have a 3x read and a 1x write speed. With the hypothetical RAID5 as above we have 3x read and 1x write speed for data plus 2x read and 1x write for parity info which will usually be smaller in size. Let's assume they're of comparative sizes, to make things simple, then we have 5/2x reads and 1x writes to compare. For your analysis to be valid, you need to consider the size of I/O requests and the stripe or interleave size of the RAID arrays. For example: A five-disk RAID-5 array has to read 4 sectors and write five sectors if you change one byte. 9 I/O ops compared with either 2 or 3, depending on whether one has a two-disk or three-disk RAID-1 mirror. In other words, RAID-1 small writes are often a factor of four times faster than RAID-5 writes for data much smaller than stripe size. Likewise, your analysis of RAID-5 read performance neglects to consider the fact that data is only available on one drive, whereas will be available on two (or more) drives for RAID-1. For small reads, seek performance is critical and RAID-1 performance is close to n times that of a bare drive, where n is number of drives in array, and can sometimes even be slightly higher than n. RAID-5 performance can at best be (n - 1) and is usually closer half that because the I/O distribution potential of mirroring means you can't choose to utilize a drive that's free. Perhaps a better way of putting it is that RAID-1 can decrease response latency by handling reads in parallel, whereas a RAID-5 array cannot because a particular set of data is only available from one place. -- -Chuck ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
UW-Imap build question
I read that I can get uw-imap to work with Kerberos b compiling nlp with EXTRAAUTHENTICATORS=gss Can I still do this through the port, and how? 3.10 How do I configure Kerberos V5? imap-2002 supports client and server functionality on UNIX and 32-bit Windows. Kerberos V5 is supported by default in Windows 2000 builds: nmake -f makefile.w2k Other builds require that a third-party Kerberos package, e.g. MIT Kerberos, be installed on the system first. To build with Kerberos V5 on UNIX, include EXTRAAUTHENTICATORS=gss in the make command line, e.g. make lnp EXTRAAUTHENTICATORS=gss To build with Kerberos V5 on Windows 9x, Windows Millenium, and NT4, use the "makefile.ntk" file instead of "makefile.nt": nmake -f makefile.ntk -- __ Guy Van Sanden http://unixmafia.port5.com Registered Linux user #249404 - September 1997 __ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Reload of Mysql-server 4.0 on 5.2.1
Hi, Once again, my question, who should I bugger with this question? I'm having quite a strange problem with mysql on 5.2.1 (releng_5_2) mysql-server (40, latest cvs port) keeps on reloading when snort is connecting. When I put on logging, no query reached the engine before the reload. Well, I put on tcpdump, and guess what I find. only 7 packets. Yes, 3 way handshake en 4 way teardown. No data passes, and the server is the one starting the teardown. So I rebuilded mysql with debug, as per the mysql instructions and guess what? problem no longer occurs. According to the mysql handbook "If mysqld stops crashing when you compile it with --with-debug, you have probably found a compiler bug or a timing bug within MySQL" Any guess how to tackle this? Ofcourse running with a debuging mysql is not a good way forward. Sincerly, Arnoud Buurman ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: AMD vs Intel ...
On Mon, 9 Feb 2004, Marc G. Fournier wrote: > Server environment, Dual Processor ... web/mail/ftp generally ... all our > current servers are Intel based, but looking at the costs, the AMD are so > much cheaper, just figured for next one I'd check out what AMD had to > offer as comparable ... > > Just trying to do some comparison shopping ... :) Marc, Although nothing I have ever worked with comes even remotely close to what you are going to torture this new machine with I wanted to throw in my $0.02.. and mostly subjective testing at that I had been using nothing but AMD for a few years. Recently I bought a few machines from a local vendor and they are an Intel shop. These machines have faster CPUs that most of my other AMD machines yet felt less responsive with FreeBSD. I think that the entire subsystem should be taken into consideration: chipset, ECC memory, memory speed, disk subsystem, etc.. Just so you get a feeling for what I am talking about... Most of my AMD machines FreeBSD/Windows were 500Mhz to 1Ghz. The two Intel I bought for 2 clients were 2+Ghz Intel Pentium 4. Although I have not done custom kernels for those machines I find it interesting that they would "Feel" slower than machines that are half as fast. I can only guess that something in the subsystems of these new machines is slower than in the AMD machines. Given your environment I think 2+ CPUs with ECC and a good disk subsystem would be good. Raid 1+0 makes a huge difference in performance (at least in my testing). Perhaps you could do your DB 1+0 and everything else Raid 5 (which is what I think you have). Hope things work out with this new machine.. who knows I may end up having a VM in it someday. :-) ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Monitoring TCP/IP traffic
As of a few days ago my DSL modem activity light rarely ever goes inactive for long. I am looking for any program anyone could recommend to monitor what's going on. Yesterday I added log options to all my IPFW rules to see if I could find anything suspicious. I added log options even to pass rules and the amount of activity in the DSL modem seems much more than what is reported by IPFW rules. The machine in question is a 4.9 Stable (as of Dec 29) and it acts as a gateway to my other machines. Is there is anything like TOP for TCP/IP? I saw ntop in ports, but it seems only analyzes LAN/internal subnet. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: My ipfilter rules.
Shaun, I do have some (minor) additions: - letting in webmin from an external interface on your firewall doesnot seem like a good idea to me. webmin is not that secure... normaly I only allow this to the loopbackinterface and tunnel it in SSH for security - letting out everything is not the smartest thing to do, if one of your services gets compromised you'll never notice outgoing trafic. normaly I only allow out everything I know the server needs, anything else is either blocked or logged. Well it all depends on how secure you want to make things. Basicaly the script looks prety good. Arnoud In order to be a good netizen, I applied the bogon list to my outbound traffic, too. I also moved the bad packet checks to the head of the incoming rules, as they make more sense there - no point in letting them use any more cpu than needed, if they are junk. At least 35 people have looked at my rules (http://www.ste-land.com/rules.html). I've updated the page, so be sure to hit refresh/reload, if you go to look at it again. So far, two people have responded. I took the suggestions of one. Anyone else? I'm putting the server on the Internet tonight, and would like the firewall done by then. Two questions: 1) Should I be performing the bad packet checks on the outbound path, too? 2) I looked at using groups to keep outbound packets from traversing rules for inbound packets, and vice versa, but I still don't understand them well enough to set them up. Suggestions? -ste ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
crontab email
Greetings: Everytime something runs from the the crontab for a given user such as root, I get an email with the results of the execution. I am running a few crontabs that run every 2 minutes and this gets to be a lot of excess email. How can I turn off this feature. Thanks, Brian ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: one simple question
> > > I compile a test C file. I notice there are a few lines at the > > > beginning of the assembly code. I want to know what it means, but > > > can't figure out one of them. Can anyone tell me what the > > > following line does please? > > > > > > and$0xfff0,%esp > > > > gcc2_compiled.: > > .text > > .p2align 2,0x90 > > .globl main > > .typemain,@function > > main: > > pushl %ebp > > movl %esp,%ebp > > xorl %eax,%eax > > jmp .L2 > > .p2align 2,0x90 > > .L2: > > thank you very much for the reply > yes and I am using gcc 3.2.2 > if you "gdb" the executable and "disassemble main" > you will see the line like that > but if you use gcc -S something.s something.c > it won't appear in the assembly code Ah, so it's being introduced by the assembler, not the compiler. That is perhaps the effect of alignement instructions like > > .text > > .p2align 2,0x90 this and similar defaults. > and I google around, I think it does the alignment for optimization > purpose, in that case the memory access will be faster according to the > article. That may very well be the case. Considering that a cache line is also a few words worth, it may be sensible to start with an aligned stack frame too. > best regards, > Chungwei -- Cordula's Web. http://www.cordula.ws/ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Monitoring TCP/IP traffic
On Thu, 4 Mar 2004 11:44:48 + (GMT) Francisco Reyes <[EMAIL PROTECTED]> wrote: > Is there is anything like TOP for TCP/IP? > I saw ntop in ports, but it seems only analyzes LAN/internal subnet. you could try ethereal (/usr/ports/net/ethereal) ? ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Monitoring TCP/IP traffic
Francisco Reyes wrote: As of a few days ago my DSL modem activity light rarely ever goes inactive for long. I am looking for any program anyone could recommend to monitor what's going on. Yesterday I added log options to all my IPFW rules to see if I could find anything suspicious. I added log options even to pass rules and the amount of activity in the DSL modem seems much more than what is reported by IPFW rules. The machine in question is a 4.9 Stable (as of Dec 29) and it acts as a gateway to my other machines. Is there is anything like TOP for TCP/IP? I saw ntop in ports, but it seems only analyzes LAN/internal subnet. __ tcpdump(1) might be what you want. PWR. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Monitoring TCP/IP traffic
On Thu, 4 Mar 2004, Francisco Reyes wrote: > > Is there is anything like TOP for TCP/IP? yes, ntop :) > I saw ntop in ports, but it seems only analyzes LAN/internal subnet. You need to tweak its configuration t make it listen on the tun0 interface. Take a look at ngrep too. and snort fr logging suspicious activity. Fer ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: Monitoring TCP/IP traffic
/usr/ports/net/trafshow -Original Message- From: Francisco Reyes [mailto:[EMAIL PROTECTED] Sent: Thursday, March 04, 2004 5:45 AM To: FreeBSD Questions List Subject: Monitoring TCP/IP traffic As of a few days ago my DSL modem activity light rarely ever goes inactive for long. I am looking for any program anyone could recommend to monitor what's going on. Yesterday I added log options to all my IPFW rules to see if I could find anything suspicious. I added log options even to pass rules and the amount of activity in the DSL modem seems much more than what is reported by IPFW rules. The machine in question is a 4.9 Stable (as of Dec 29) and it acts as a gateway to my other machines. Is there is anything like TOP for TCP/IP? I saw ntop in ports, but it seems only analyzes LAN/internal subnet. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]" CONFIDENTIALITY NOTE: This electronic transmission, including all attachments, is directed in confidence solely to the person(s) to whom it is addressed, or an authorized recipient, and may not otherwise be distributed, copied or disclosed. The contents of the transmission may also be subject to intellectual property rights and all such rights are expressly claimed and are not waived. If you have received this transmission in error, please notify the sender immediately by return electronic transmission and then immediately delete this transmission, including all attachments, without copying, distributing or disclosing same. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: latest security advisory and 5.1R
fbsd_user wrote: Are the security advisory fixes rolled into the .iso ftp download images? You can grab ISO of the latest build from here: http://snapshots.jp.freebsd.org/ At least, you used to be able to. Not sure exactly how up to date they are. -- Jonathan Arnold (mailto:[EMAIL PROTECTED]) Daemon Dancing in the Dark, a FreeBSD weblog: http://freebsd.amazingdev.com/blog/ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Monitoring TCP/IP traffic
HI! tcpdump is a very good program aswell. / Stefan On Thu, 4 Mar 2004, albi wrote: > On Thu, 4 Mar 2004 11:44:48 + (GMT) > Francisco Reyes <[EMAIL PROTECTED]> wrote: > > > Is there is anything like TOP for TCP/IP? > > I saw ntop in ports, but it seems only analyzes LAN/internal subnet. > > you could try ethereal (/usr/ports/net/ethereal) ? > > ___ > [EMAIL PROTECTED] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "[EMAIL PROTECTED]" > -- Stefan Cars Snowfall Communications Tel: +46 (0)18 430 80 50 - Direct: +46 (0)18 430 80 51 Mobile: +46 (0)708 44 36 00 - Fax: +46 (0)708 44 36 04 __ SNOWFALL DISCLAIMER: The information contained in this email and in any attachments is confidential and may be privileged. If you are not the intended recipient, please destroy this message and notify the sender immediately. You should not retain, copy or use this email for any purpose, nor disclose all or any part of its content to any other person. Any views expressed in this message are those of the individual sender, except where the sender specifically states them to be the views of Snowfall Communications. Snowfall Communications monitors the content of emails sent and received via its network for unauthorised use and for other lawful business purposes. The contents of an attachment to this email may contain viruses which could damage your computer system. While Snowfall Communications has taken every reasonable precaution to minimise this risk, we cannot accept liability for any damage which you sustain as a result of software viruses. You should carry out your own virus checks before opening the attachment. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: crontab email
Brian Henning wrote: Greetings: Everytime something runs from the the crontab for a given user such as root, I get an email with the results of the execution. I am running a few crontabs that run every 2 minutes and this gets to be a lot of excess email. How can I turn off this feature. #man 5 crontab In addition to LOGNAME, HOME, and SHELL, cron(8) will look at MAILTO if it has any reason to send mail as a result of running commands in ``this'' crontab. If MAILTO is defined (and non-empty), mail is sent to the user so named. If MAILTO is defined but empty (MAILTO=""), no mail will be sent. Otherwise mail is sent to the owner of the crontab. This option is useful if you decide on /bin/mail instead of /usr/lib/sendmail as your mailer when you install cron -- /bin/mail doesn't do aliasing, and UUCP usually doesn't read its mail. PWR ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: crontab email
[Brian Henning, 2004-03-04] > Everytime something runs from the the crontab for a given user such as root, I > get an email with the results of the execution. I am running a few crontabs that > run every 2 minutes and this gets to be a lot of excess email. How can I turn > off this feature. You only get mail if the script produces any output. Put a >/dev/null at the end of the commandline, and you will only get mail when something is written to stderr, not stdout. Svein Halvor ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Monitoring TCP/IP traffic
> Is there is anything like TOP for TCP/IP? > I saw ntop in ports, but it seems only analyzes LAN/internal subnet. Hm, does 'systat -netstat' maybe already do what you want? ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Unable to Install FreeBSD 5.2.1
On Thu, 4 Mar 2004 07:16:19 -0800 (PST) [EMAIL PROTECTED] wrote: > This is a question for anyone running 5.2.1.. > > I currently have 5.1 running on a "Test server", I decieded to try > ver 5.2.1. However after I did the > > Make Buildworld > Make Buildkernel > Make installkernel > reboot > > commands, the machine would no longer boot up to a login prompt. It > would get as far as > > Setting Freqency to 28xxhz at 800mhz > Time ticks every 10.00 msecond > > and the machine would just hang. No keyboard controll nothing. So > I D/L the 5.2.1 ISO, and booted from Disc1 cd, and the same thing > happens at the same point. Mind you this machine has been running > 5.1 Just fine. > > The machine is a AMD Athlon XP 2800+ with a DCI NFII-400LA > Motherboard. 512 megs of DDR 2600 ram, 60gig ATA 100 Maxtor drive, > and a 24x CD-ROM Drive. Not sure if it matters but the FSB on the > board is 333mhz, not sure where the 800mhz is coming from. Sounds like a bad kernel config except for the part about the 5.2.1 ISO... have you tried it without acpi? May be useful to try the current mailing list too... Try including a copy of the dmesg from 5.1 and your kernel config too... You should be able to boot into 5.1 by going to the loader console or whatever it called unloading everything and loading the previous kernel... note: some things will not work when you do this becuase some changes in some things... you will need to recompile the world for that kernel... ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: crontab email
On Thu, Mar 04, 2004 at 10:56:55AM -0600, Brian Henning wrote: > Everytime something runs from the the crontab for a given user such as root, I > get an email with the results of the execution. I am running a few crontabs that > run every 2 minutes and this gets to be a lot of excess email. How can I turn > off this feature. Either set the MAILTO variable at the top of the crontab file to an empty string, or redirect stdout and stderr from each of the commands to /dev/null -- something like: 5 * * * * yourcommandhere >/dev/null 2>&1 See crontab(5) for details of MAILTO and sh(1) for how to redirect the file descriptors. Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK pgp0.pgp Description: PGP signature
Re: ipfw rules
RYAN vAN GINNEKEN wrote: I know this has probably been posted 1000's of times but i would like to set up a ipfw firewall i run many services on this machine. It acts as a gateway for my network APACHE web server IMAP mail server SMTP mail server BIND name server FTP server also i would like to be able to forward packets to a machine on my network for VNC and also gaming purposes. Just interested in where to find some good rules sets and documentation on the subject Here's a page that contains a long list of links posted by someone on this list: http://freebsd.amazingdev.com/blog/archives/000112.html -- Jonathan Arnold (mailto:[EMAIL PROTECTED]) Daemon Dancing in the Dark, a FreeBSD weblog: http://freebsd.amazingdev.com/blog/ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: php script to count visitors to site
Marty Landman wrote: At 07:57 PM 3/3/2004, fbsd_user wrote: I have an php script to read a file bump the counter and write it back. Need html sample code to jump to the php script and return with the counter value and display it. Just put those lines on your page file where you want the numbers to show up. This assumes that the php script is on the same directory as the page file and called counter.php. Since it's embedded in a static html file (much like a server side include) you can tag around it, e.g. if you wanted it in a bold font. Marty Landman Face 2 Interface Inc. 845-679-9387 ROFLMAO!! KDK ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
SPARC-64 & JDK 1.3 or better
So, I finally decided that since I'm not really a Solaris admin, I'd install FreeBSD SPARC64 on my Sun Enterprise 420R that's been collecting dust lately. It's got a couple CPUs and a lot of ram, so it seems like I should be doing something with it. I write and deploy Java web applications. I've never used FreeBSD and saw that the only disc images for SPARC64 started at 5.2.x ... I realize that the current "production" quality release is 4.9, but it looks like that's a no-go for SPARC. I burned the 5.2.1 CDs for the hell of it and then started looking around what to do for a decent JDK... and that's when the confusion began. I'd prefer to run JDK 1.4 ... Is the best advice to wait around until something becomes more solid, or is there something out there that I should be looking at? Is using the Linux compatibility the way to go and just get the JDK from Sun directly? Doesn't this require I use some patches or something? Just a little overwhelmed and wondering what the best approach would be. Thanks. -- http://smerritt.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Problem compiling kernel 5.2.1
Hi! I'm having problem with compiling my kernel (v5.2.1). I Cvsup:ed it today (so that I could fix the TCP/IP-security problem. Here is the output: --8< ld -Bshareable -d -warn-common -o vesa.ko vesa.kld 1 error *** Error code 2 1 error *** Error code 2 1 error hostname# --8< I've got the same problem with 5.2 as well with 5.2.1. Does anyone else have the same problem as I have? Regards. Cesar da Silva ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
kernel panic messages?
Hello, I want to submit information about a kernel panic which happens at boot time. The machine reboots and I can boot kernel.old: where do I find the logs and traces and things I might need to show to someone who knows what they're doing? Cheers, Ben ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: Problem compiling kernel 5.2.1
did you make depend before? how does your kernel config look like? (I think you where too little in information) Cheers -- Kind regards, Remko Lodder Elvandar.org/DSINet.org www.mostly-harmless.nl Dutch community for helping newcomers on the hackerscene -Oorspronkelijk bericht- Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Cesar da Silva Verzonden: donderdag 4 maart 2004 19:05 Aan: [EMAIL PROTECTED] Onderwerp: Problem compiling kernel 5.2.1 Hi! I'm having problem with compiling my kernel (v5.2.1). I Cvsup:ed it today (so that I could fix the TCP/IP-security problem. Here is the output: --8< ld -Bshareable -d -warn-common -o vesa.ko vesa.kld 1 error *** Error code 2 1 error *** Error code 2 1 error hostname# --8< I've got the same problem with 5.2 as well with 5.2.1. Does anyone else have the same problem as I have? Regards. Cesar da Silva ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]" ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Login Problem
I am running FreeBSD 5.2.1 - RELEASE #0: Mon Feb 23 20:45:55 GMT 2004 It seems that I can no longer log into my system. Upon boot-up, the usually login appears. I enter my normal login and then my password. I am then greeted with this error message: BudMan login: pam_acct_mgmt(1): user account has expired Login Incorrect. Shortly afterwards I receive these error messages: BudMan cron[538] _secure_path: /usr/home/ges/.login_conf is not owned by root The last error message will repeat with the number getting progressively higher. This is a fresh install of FreeBSD. The only thing I added was KDE 3.2 today. Can anyone tell me what has happened and how do I get back into my system? Thanks in advance! Gerard Seibert [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: kernel compile Q - How to get the speaker to work?
On Wednesday 03 March 2004 10:12 pm, Tadimeti Keshav wrote: > Hi > thanks for the answer, but when I had Windows > installed, the speaker did work, I mean I was able to > hear music, in addition to the beeps. I may be confused as to what speaker you are talking about. My assumption was that you were referring to the standard PC speaker (sometimes called the console speaker), and not a speaker attached to an audio card. For most laptops, these two speakers are the same. For most desktop systems, the "internal" speaker is mounted to the case via a lead from the motherboard. If you are indeed referring to the same internal speaker that I am referring to, then you can indeed play music through it. But the audio quality will be extremely poor. But I don't know how to do it with FreeBSD. I suspect you'll have to write your own driver. On the other hand, if you're talking about getting you audio card with attached speaker to work, that is a different story. I can't help you there, but many people can, provided that you first let them know what sound card you have, or if it's integrated onto the motherboard, what motherboard or computer model you have. David ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
4.9 install disks and USB keyboard?
I tried to boot a amchine with a USB keyboard off of the 4.9 install floppies the other day, and it did not recognize the leyboard for the "press enter" after I inserted the 2nd floppy. This is my first machine with a USB keyboard, I;ve used USB mice sucesfully on 4 STABEL before. Am I missing a tep here? -- "They that would give up essential liberty for temporary safety deserve neither liberty nor safety." -- Benjamin Franklin ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: AMD vs Intel ...
On Thu, 4 Mar 2004, Francisco wrote: > Hope things work out with this new machine.. who knows I may end up > having a VM in it someday. :-) actually, you'd be one ofthe first moved over to it :) Marc G. Fournier Hub.Org Networking Services (http://www.hub.org) Email: [EMAIL PROTECTED] Yahoo!: yscrappy ICQ: 7615664 ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: How can I rebuild prots databases?
On Thursday 04 March 2004 05:07 am, stan wrote: > I'n updating a bunch of older (around 4.2) machines. On ne of them I > seem to have managed to toatly muck up the ports dayabases :0( > > I'm getting things like this when I run portupgrade: > > ! (pgaccess-0.98.6)(missing origin) > ! (acroread-3.02) (missing origin) > ! (netscape-wrapper-2000.07.07)(missing origin) > > I think the best plan is to completly rebuild from scratch the > databases that contain available ports, and the ports that are > installed on this machine. I've tried various combinations of pkgdb > -F and pkgd -Uu. to no avail. > > Can I just remove all of these databases, and rebuiold them from > scratch? If so, how do I acomplish this? Try portsdb -fu but I think I would manually instally ruby-1.8, ruby18-bdb1-0.2.2, and portupgrade first. Kent -- Kent Stewart Richland, WA http://users.owt.com/kstewart/index.html ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: AMD vs Intel ...
On Thu, 4 Mar 2004, Marc G. Fournier wrote: > On Thu, 4 Mar 2004, Francisco wrote: > > > Hope things work out with this new machine.. who knows I may end up > > having a VM in it someday. :-) > > actually, you'd be one ofthe first moved over to it :) Something I have always wondered.. When you move to a machine or install a new VM do you keep the /etc/newsyslog.conf file? I have added some lines there. Should I back it up? ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: SPARC-64 & JDK 1.3 or better
On Thu, Mar 04, 2004 at 10:00:15AM -0800, Scott Merritt wrote: > I'd prefer to run JDK 1.4 ... Is the best advice to wait around until > something becomes more solid, or is there something out there that I > should be looking at? Is using the Linux compatibility the way to go > and just get the JDK from Sun directly? Doesn't this require I use some > patches or something? jdk-1.4.2 is available, and it is the best version of Java available, certainly on FreeBSD/i386. However, there's the rub: it only works on i386 architecture - same deal I think for any of the available JDKs, except linux-blackdown-jdk13: % cd /usr/ports/java % grep ONLY_FOR_ARCH *jdk*/Makefile diablo-jdk13/Makefile:ONLY_FOR_ARCHS= i386 jdk11/Makefile:ONLY_FOR_ARCHS= i386 jdk12/Makefile:ONLY_FOR_ARCHS= i386 jdk13/Makefile:ONLY_FOR_ARCHS= i386 jdk14/Makefile:ONLY_FOR_ARCHS= i386 linux-blackdown-jdk12/Makefile:ONLY_FOR_ARCHS= i386 linux-blackdown-jdk13/Makefile:ONLY_FOR_ARCHS= arm i386 ppc sparc linux-blackdown-jdk14/Makefile:ONLY_FOR_ARCHS= i386 linux-ibm-jdk13/Makefile:ONLY_FOR_ARCHS=i386 linux-ibm-jdk14/Makefile:ONLY_FOR_ARCHS=i386 linux-sun-jdk12/Makefile:ONLY_FOR_ARCHS=i386 linux-sun-jdk13/Makefile:ONLY_FOR_ARCHS=i386 linux-sun-jdk14/Makefile:ONLY_FOR_ARCHS=i386 linux-sun-jdk15/Makefile:ONLY_FOR_ARCHS=i386 Quite honestly, and much as it pains me to say it, if you want to use your E420R to do Java stuff, and especially if you need jdk 1.4.2 or above, then you'll be much better off putting Solaris on it. Eventually the Java support will be extended to all platforms, but you could be waiting quite some time for it. Try asking on the freebsd-java@ list about support for other architectures than IA32. Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK pgp0.pgp Description: PGP signature
Re: 4.9 install disks and USB keyboard?
Boot uses the BIOS calls so you need to set "Legacy USB Keyboard" support true in the BIOS. Then it works fine. --Chuck At 10:47 AM 3/4/2004, stan wrote: Am I missing a tep here? ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: kernel panic messages?
On Thu, Mar 04, 2004 at 06:07:04PM +, Ben Paley wrote: > I want to submit information about a kernel panic which happens at boot time. > The machine reboots and I can boot kernel.old: where do I find the logs and > traces and things I might need to show to someone who knows what they're > doing? You need to setup your machine to capture the appropriate data after the panic. There's general information about how to do that in a series of articles here: http://www.oreillynet.com/pub/a/bsd/2002/03/21/Big_Scary_Daemons.html http://www.oreillynet.com/pub/a/bsd/2002/04/04/Big_Scary_Daemons.html However, you're seeing panics in the boot sequence: if that's actually early on during booting, the system won't have initialised the disks systems, so it can't record a crashdump. Your best recourse in this situation is to hook up a null-modem cable to the serial port, set the machine up to use the serial port as the console: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/install-advanced.html Use tip(1) or some other terminal emulator on the other end of the connection, and capture the console output as the machine boots. If you are inordinately keen, you could try and setup a remote kernel debugging session: http://www.freebsd.org/doc/en_US.ISO8859-1/books/developers-handbook/kerneldebug-online-gdb.html but unless you're pretty much up-to-speed with kernel development, you're probably not going to be able to extract much useful information that way. Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK pgp0.pgp Description: PGP signature
Ruby 1.8 - Makefile Error
I have two machines running 4.9. On "blacklamb", I have the ports collection installed and am running Samba 2.2.8a . On blacksheep, I mount blacklamb's /usr/ports at blacksheep's /usr/ports using smbfs. This system has worked fine for over 2 years. However on blacksheep, I tried to upgrade from ruby 1.6 to ruby 1.8 following the instructions in /usr/ports/UPDATING. When running 'make install clean', I get the following error: blacksheep# make install clean ===> Building for ruby-1.8.1_2 make: cannot open makefile. *** Error code 2 Yet if I run the same command on blacklamb, the port builds just fine. Other ports build OK on blacksheep using this method. Any ideas on why ruby 1.8 won't build? Thanks, Drew ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Problems with FFS and directories of over 1000 entries....
I understand that FFS has some performance problems in directory/file structures that have over 1000 entires... though I'm not sure this applies to FFS under FreeBSD-5.x. Can someone comment on this? Forrest ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: AMD vs Intel ...
On Thu, 4 Mar 2004, Francisco Reyes wrote: > On Thu, 4 Mar 2004, Marc G. Fournier wrote: > > > On Thu, 4 Mar 2004, Francisco wrote: > > > > > Hope things work out with this new machine.. who knows I may end up > > > having a VM in it someday. :-) > > > > actually, you'd be one ofthe first moved over to it :) > > > Something I have always wondered.. When you move to a machine or install a > new VM do you keep the /etc/newsyslog.conf file? > I have added some lines there. Should I back it up? Any config files that you happen to modify in the VM itself is backed up/moved to the new server ... simple rsync of your root directory down Marc G. Fournier Hub.Org Networking Services (http://www.hub.org) Email: [EMAIL PROTECTED] Yahoo!: yscrappy ICQ: 7615664 ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: How can I rebuild prots databases?
On Thu, Mar 04, 2004 at 08:07:54AM -0500, stan wrote: > I'n updating a bunch of older (around 4.2) machines. On ne of them I seem > to have managed to toatly muck up the ports dayabases :0( > > I'm getting things like this when I run portupgrade: > > ! (pgaccess-0.98.6)(missing origin) > ! (acroread-3.02) (missing origin) > ! (netscape-wrapper-2000.07.07)(missing origin) Whichever way you go you'll have to either reinstall these ports by hand or tell portupgrade where they live in the ports tree (see e.g. the -o flag to portupgrade). You installed them before the ports collection started recording the location of the port used to install the package, so you can rebuild the databases as much as you like, but it won't fix it :) Kris pgp0.pgp Description: PGP signature
Re: SPARC-64 & JDK 1.3 or better
On Thu, Mar 04, 2004 at 07:20:39PM +, Matthew Seaman wrote: > On Thu, Mar 04, 2004 at 10:00:15AM -0800, Scott Merritt wrote: > > > I'd prefer to run JDK 1.4 ... Is the best advice to wait around until > > something becomes more solid, or is there something out there that I > > should be looking at? Is using the Linux compatibility the way to go > > and just get the JDK from Sun directly? Doesn't this require I use some > > patches or something? > > jdk-1.4.2 is available, and it is the best version of Java available, > certainly on FreeBSD/i386. However, there's the rub: it only works on > i386 architecture - same deal I think for any of the available JDKs, > except linux-blackdown-jdk13: Work is underway to port jdk1.3 to FreeBSD/sparc64 (porting it is apparently much easier than 1.4), but it's not available yet. If you need something immediately then you should either stick with Solaris for now, or use an i386 machine. > linux-blackdown-jdk13/Makefile:ONLY_FOR_ARCHS= arm i386 ppc sparc That one's bizarre, we don't support arm, ppc or "sparc" (only sparc64). Kris pgp0.pgp Description: PGP signature
Re: Problem compiling kernel 5.2.1
On Thu, Mar 04, 2004 at 07:05:14PM +0100, Cesar da Silva wrote: > Hi! > I'm having problem with compiling my kernel (v5.2.1). I Cvsup:ed it today (so > that I could fix the TCP/IP-security problem. Here is the output: > > --8< > ld -Bshareable -d -warn-common -o vesa.ko vesa.kld > 1 error > *** Error code 2 > 1 error > *** Error code 2 > 1 error > hostname# Looks like you're compiling with make -j, because the above doesn't show any actual errors. Rebuild without -j and post the real errors, since -j obscures them. Kris pgp0.pgp Description: PGP signature
Re: Ruby 1.8 - Makefile Error
Drew Tomlinson told a big fish story including the following on 3/4/2004 11:34 AM: I have two machines running 4.9. On "blacklamb", I have the ports collection installed and am running Samba 2.2.8a . On blacksheep, I mount blacklamb's /usr/ports at blacksheep's /usr/ports using smbfs. This system has worked fine for over 2 years. However on blacksheep, I tried to upgrade from ruby 1.6 to ruby 1.8 following the instructions in /usr/ports/UPDATING. When running 'make install clean', I get the following error: blacksheep# make install clean ===> Building for ruby-1.8.1_2 make: cannot open makefile. *** Error code 2 Yet if I run the same command on blacklamb, the port builds just fine. Other ports build OK on blacksheep using this method. Any ideas on why ruby 1.8 won't build? I have to take that back. It seems all ports I attempt to build on blacksheep fail in the same manner. So what is it about mounting via smbfs that might cause this problem? It used to work... :-( Thanks, Drew ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Regarding Sparc64 install
Dear list, I recently got two SUN Fire V100 servers that I thought would make good webservers. I read some hardware compability on FreeBSD website, since I've not set up Sparc before. The FreeBSD website stated that Sun Fire V100 is supported. Guess I got a surprise when I booted the installer and found that neither CDROM or NIC was actually found. Anyone got any suggestions to that? I read some posts suggesting that it was because of several drives or error in nic, but since my Sun Fire V100 got not extra PCI nor got extra drives except CDROM and Harddrive I really didn't think that would be the problem. When just for fun trying OpenBSD both CDrom and Nic booted like a charm. Isn't OpenBSD and FreeBSD Sparc64 project very similar when including hardware or am I totally behind in my beliefs about that? Regards Daniel Ek ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Problems with FFS and directories of over 1000 entries....
On Thu, Mar 04, 2004 at 02:42:54PM -0500, Forrest Aldrich wrote: > I understand that FFS has some performance problems in directory/file > structures that have over 1000 entires... though I'm not sure this > applies to FFS under FreeBSD-5.x. Can someone comment on this? No -- you understand incorrectly. Large directories have not been a problem since UFS_DIRHASH went into the tree, which was, oh, two and a half years ago: http://docs.freebsd.org/cgi/getmsg.cgi?fetch=18975+0+archive/2001/freebsd-fs/20010624.freebsd-fs Not that UFS did badly before that: 1000 entries in one directory probably wouldn't have been problematic. 10,000 could have been a different matter. 100,000 would have been difficult to deal with. UFS_DIRHASH is enabled in the GENERIC kernel, and has been since 2001: http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/i386/conf/GENERIC.diff?r1=1.246.2.36&r2=1.246.2.37&only_with_tag=RELENG_4 Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK pgp0.pgp Description: PGP signature
Re: kernel panic messages?
On Thursday 04 March 2004 7:37 pm, you wrote: > You need to setup your machine to capture the appropriate data after > the panic. There's general information about how to do that in a > series of articles here: > > http://www.oreillynet.com/pub/a/bsd/2002/03/21/Big_Scary_Daemons.html > http://www.oreillynet.com/pub/a/bsd/2002/04/04/Big_Scary_Daemons.html This is great stuff: I'm compiling a debugging kernel as I type > However, you're seeing panics in the boot sequence: if that's actually > early on during booting, the system won't have initialised the disks > systems, so it can't record a crashdump. It's before I can log in, but really at the end of the whole process: the disks have already been checked and so on, so I reckon I stand a good chance of getting a dump. > but unless you're pretty much up-to-speed with kernel development, > you're probably not going to be able to extract much useful > information that way. Not me! But I know someone who knows what all this stuff means (ie the -current@ list) Thanks very much, Ben ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Problems with FFS and directories of over 1000 entries....
In the last episode (Mar 04), Forrest Aldrich said: > I understand that FFS has some performance problems in directory/file > structures that have over 1000 entires... though I'm not sure this > applies to FFS under FreeBSD-5.x. Can someone comment on this? I see no issues on my systems, either 4.x or 5.x, with up to 10k files in a directory. Enabling the UFS_DIRHASH kernel option (available in 4.4 and later) will greatly speed up access to large directories, at the cost of a little memory (adjustable via sysctl). -- Dan Nelson [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Binary file created in / with same name as root password, seemingly sporadically
Apologies if this is a stupid question and I should RTFM, but something on my Freebsd-5.1 box is creating a binary file in / with the same name as my root password and I was curious as to what exactly this might be. (I always SSH into the box on a regular user then su root to do work.) FreeBSD localhost 5.1-RELEASE FreeBSD 5.1-RELEASE #2: Sun Feb 29 21:36:25 CST 2004 [EMAIL PROTECTED]:/usr/src/sys/i386/compile/jon i386 /# cat /etc/rc.conf sshd_enable="YES" ifconfig_sis0="DHCP" inetd_enable="NO" update_motd="NO" enable_quotas="NO" hostname="localhost" /# ps x PID TT STAT TIME COMMAND 0 ?? DLs0:00.01 (swapper) 1 ?? ILs0:00.17 /sbin/init -- 2 ?? DL 0:00.23 (g_event) 3 ?? DL 0:02.11 (g_up) 4 ?? DL 0:11.78 (g_down) 5 ?? IL 0:00.00 (acpi_task0) 6 ?? IL 0:00.00 (acpi_task1) 7 ?? IL 0:00.00 (acpi_task2) 8 ?? DL 0:00.00 (pagedaemon) 9 ?? DL 0:00.00 (vmdaemon) 10 ?? DL 0:00.00 (ktrace) 11 ?? RL21:24.98 (idle) 12 ?? WL 0:02.10 (swi1: net) 13 ?? WL 0:03.77 (swi7: tty:sio clock) 15 ?? DL 0:00.94 (random) 18 ?? WL 0:00.00 (swi6: acpitaskq) 21 ?? WL 2:38.15 (irq14: ata0) 23 ?? WL 0:02.39 (irq11: sis0) 24 ?? WL 0:00.00 (irq6: fdc0) 31 ?? DL 0:20.40 (pagezero) 32 ?? DL 0:01.18 (bufdaemon) 33 ?? DL 0:02.34 (syncer) 34 ?? DL 0:00.02 (vnlru) 35 ?? IL 0:00.00 (nfsiod 0) 36 ?? IL 0:00.00 (nfsiod 1) 37 ?? IL 0:00.00 (nfsiod 2) 38 ?? IL 0:00.00 (nfsiod 3) 114 ?? Is 0:00.00 adjkerntz -i 185 ?? Is 0:00.00 /sbin/dhclient sis0 237 ?? Is 0:00.02 /usr/sbin/syslogd -s 365 ?? Is 0:00.22 /usr/sbin/sshd 385 ?? Ss 0:00.02 /usr/sbin/cron 401 ?? Is 0:00.00 /usr/local/sbin/smbd -D 403 ?? Ss 0:00.14 /usr/local/sbin/nmbd -D 440 ?? Is 0:00.05 sshd: jon [priv] (sshd) 63211 ?? Is 0:00.04 sshd: jon [priv] (sshd) 445 p0 I 0:00.02 su root 446 p0 I 0:00.09 _su (csh) 63808 p1 I+ 0:00.00 (sh) 63809 p1 I+ 0:00.01 (sh) 63216 p2 I 0:00.02 su root 63217 p2 S 0:00.04 _su (csh) 63874 p2 R+ 0:00.00 ps x 436 v1 Is+0:00.01 /usr/libexec/getty Pc ttyv1 437 v2 Is+0:00.01 /usr/libexec/getty Pc ttyv2 438 v3 Is+0:00.01 /usr/libexec/getty Pc ttyv3 439 v4 Is+0:00.01 /usr/libexec/getty Pc ttyv4 435 con Is+0:00.01 /usr/libexec/getty Pc console ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Error Msg
I am using FreeBSD 5.2.1-RELEASE (GENERIC) #0: MON FEB 23 29:45:55 GMT 2004 I just recently posted about a problem I was having logging into my computer. I eventually was able to log in. I deleted the existing user and subsequently recreated the user. I also had to delete the group as well to complete the operation. However, although I can access my system, the following error message appears when I do an su command. This is the error message: Mar 4 15:52:42 BudMan su: _secure_path: /usr/home/ges/.login_conf is not owed by root The following error message likes to pop up at various times also: Mar 4 15:55:01 BudMan cron[541]: _secure_path: /usr/home/ges/.login_conf is not owned by root The time and date obviously change upon each new occurrence of the message, as well as the number following 'cron'. I have read the man on "_secure_path" but I have no idea what I am supposed to do to correct this problem. Even more mysterious is that this problem and several others only surfaced after installing KDE 3.2. I welcome any assistance someone can afford me, Thanks! Gerard Seibert [EMAIL PROTECTED] ICQ: 95653152 ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: How can I rebuild prots databases?
On Thu, Mar 04, 2004 at 11:52:32AM -0800, Kris Kennaway wrote: > On Thu, Mar 04, 2004 at 08:07:54AM -0500, stan wrote: > > I'n updating a bunch of older (around 4.2) machines. On ne of them I seem > > to have managed to toatly muck up the ports dayabases :0( > > > > I'm getting things like this when I run portupgrade: > > > > ! (pgaccess-0.98.6)(missing origin) > > ! (acroread-3.02) (missing origin) > > ! (netscape-wrapper-2000.07.07)(missing origin) > > Whichever way you go you'll have to either reinstall these ports by > hand or tell portupgrade where they live in the ports tree (see > e.g. the -o flag to portupgrade). You installed them before the ports > collection started recording the location of the port used to install > the package, so you can rebuild the databases as much as you like, but > it won't fix it :) AH, that explains what's goin on. Is there a way to do this without spending a whole day or so doing things manually? -- "They that would give up essential liberty for temporary safety deserve neither liberty nor safety." -- Benjamin Franklin ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
cvsup vs upgrade
I have several machines running 4.3 and 4.4. Can I -upgrade- them safely to 4.7 using cvsup? hal ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
no pam_nologin.so found ... ouch :-(
Excuse the lack of detail. No mouse on the console here at the colo... so no cut 'n paste. I'm running 5.2-RELEASE on this server. After cvsup/buildworld/buildkernel/ installkernel/reboot/installworld (but *no* mergemaster) ... remote access has failed. This is on yesterday's source (Mar 3, 1037 CST (US)) post the TCP Advisory, and a GENERIC kernel. The tags were RELENG_5_2 and src-all ... /var/log/messages says: sshd: in openpam_load_module(): no pam_nologin.so found However, "ls -l /usr/lib" shows that "pam_nologin.so" is a symlink to pam_nologin.so.2 I've just finished a mergemaster, and am rebuilding world on another virtual terminal. What FAQ did I miss? I saw nothing in UPDATING (pam.conf is gone some time ago) I'd really like to go home sometime tonight... anyone got a few minutes to shed some light? Kevin Kinsey DaleCo, S.P. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Followup on KDE 3.2 and 4-STABLE
Well I finally have KDE3.2 on my system, however to get it there required an install of 4.9. The backstory: I was running 4.8 + KDE3.1, wanted to upgrade to KDE3.2. No amount of portupgrading/rebuilding/package fetching seemed to get me past KDE 3.1. By the time I was done I had to do a pkg_delete -a and re-install KDE 3.1 just to get to a stable system again. I finally gave up, and did a clean install of 4.9 from CD with no packages installed. Next I install the cvsup package and cvsup'd the ports tree. Doing that and then make/installing portupgrade gets you ruby 1.8 and the latest port upgrade. Then I could go into /usr/ports/x11/kde3 and do a make; make install. 30 hrs later my system has all of KDE 3.2 installed. I expect I'll get my subscription copy of 4.10 in the mail with KDE 3.2 today (it would be poetic justice) On the compilation front. It is impossible to get a clean link with the gcc 2.95 toolchain. You'll get warnings about unsafe function calls. This does not happen with the gcc 3.3 toolchain as far as I can tell. The "GLX" error that is printed when a KDE application is run relates to a lack of OpenGL support on the X Server. It shouldn't complain unless the application requires OpenGL. --Chuck ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Load balancing in Freebsd
Hello all, I am trying to find a solution for FreeBSD like the Windows Load Balancing. I don't want to have a dedicated machine doing load balancing for multiple web servers since it will be a single point of failure. Instead, I would like to have a utility running on all the freebsd machines that check each other in a cluster and take over for the overloaded node based on predefined rules. I am not sure if this even exists since I could not find a solution yet on the web. Any help or ideas would be appreciated. Regards, Anjan ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Load Balancing in FreeBSD
Hello all, I am trying to find a solution for FreeBSD like the Windows Load Balancing. I don't want to have a dedicated machine doing load balancing for multiple web servers since it will be a single point of failure. Instead, I would like to have a utility running on all the freebsd machines that check each other in a cluster and take over for the overloaded node based on predefined rules. I am not sure if this even exists since I could not find a solution yet on the web. Any help or ideas would be appreciated. Regards, Anjan ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: ASUS A7N8X LAN Dual LAN Support
I have an ASUS A7N8X-E, which boasts dual LAN ports. As far as I can deduce, only one of the ethernet ports has a functioning driver (sk), while the other does not. Is there some configuration setting in rc.conf or elsewhere that I've failed to enable, or is this a known issue that has yet to be resolved? Check out /usr/ports/net/nvnet/ I have not tried it, but I think it will allow you to use the other ethernet port. _ The new MSN 8: smart spam protection and 2 months FREE* http://join.msn.com/?page=features/junkmail ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
[no subject]
hi dear mr or mrs i use freebsd 5.0 . whenever i want boot my computer(when kernel want boot) i see this messages: unable to load kernel! | cant load 'kernel' please guide me regads __ Do you Yahoo!? Yahoo! Search - Find what youre looking for faster http://search.yahoo.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE:
Hi mr or mrs, Did you change anything in your startup? from what moment does this problem occur? you might have removed your kernel, or it's on another disk. Can you please provide more details? Thanks -- Kind regards, Remko Lodder Elvandar.org/DSINet.org www.mostly-harmless.nl Dutch community for helping newcomers on the hackerscene mrtg.grunn.org Dutch mirror of MRTG -Oorspronkelijk bericht- Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] siavash mahjoob Verzonden: vrijdag 5 maart 2004 0:15 Aan: [EMAIL PROTECTED] Onderwerp: hi dear mr or mrs i use freebsd 5.0 . whenever i want boot my computer(when kernel want boot) i see this messages: unable to load kernel! | cant load 'kernel' please guide me regads __ Do you Yahoo!? Yahoo! Search - Find what youre looking for faster http://search.yahoo.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]" ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re:
On Thursday 04 March 2004 05:14 pm, siavash mahjoob wrote: > hi dear mr or mrs > i use freebsd 5.0 . whenever i want boot my > computer(when kernel want boot) i see this messages: > unable to load kernel! > > cant load 'kernel' > please guide me > regads No offense - but without proper information, the list can't determine your real issues. Perhaps a flavor of Windows is for you? -- Best regards, Chris ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Error Msg
Gerard Seibert wrote: I am using FreeBSD 5.2.1-RELEASE (GENERIC) #0: MON FEB 23 29:45:55 GMT 2004 I just recently posted about a problem I was having logging into my computer. I eventually was able to log in. I deleted the existing user and subsequently recreated the user. I also had to delete the group as well to complete the operation. However, although I can access my system, the following error message appears when I do an su command. This is the error message: Mar 4 15:52:42 BudMan su: _secure_path: /usr/home/ges/.login_conf is not owed by root The following error message likes to pop up at various times also: Mar 4 15:55:01 BudMan cron[541]: _secure_path: /usr/home/ges/.login_conf is not owned by root The time and date obviously change upon each new occurrence of the message, as well as the number following 'cron'. I have read the man on "_secure_path" but I have no idea what I am supposed to do to correct this problem. Even more mysterious is that this problem and several others only surfaced after installing KDE 3.2. I welcome any assistance someone can afford me, Thanks! Gerard Seibert [EMAIL PROTECTED] ICQ: 95653152 ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]" Recently I had similar problem, not with root though. I reinstalled FreeBSD (without removing /home) and then added users. Obviously uids changed and I was getting those messages: /home/user/.login_conf is not owned by uid 1002 (for example) All I needed to do was 'chmod -R user:user /home/user/*' (recursive) Note: check man chmod, I'm not sure if that's good syntax Check the owner of that file. I'm not sure why do you get 'is not owned by *root*' but maybe it's similar problem. Hope that helps Karol Kwiatkowski ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Jail setup
I need to set up a new mail server at a different building, so I thought I would put sendmail and its services (virus scanning etc.) in a jail to be a bit more secure. I thought that before I do this for real I would try setting up a jail on a test server and see if I can ssh to it and generally get things to work. I can't. Here's what I have set up so far. I found a couple how-tos and I am following them; one is an ONLamp article (http://www.onlamp.com/pub/a/bsd/2003/09/04/jails.html), and the other is the jails section of the AbsoluteBSD book. I am running 5.1. On the server I set up a /usr/jail directory to put the jail into. Then I ran the following from /usr/src/: # make world DESTDIR=/usr/jail # cd etc # make distribution DESTDIR=/usr/jail # cd /usr/jail/dev # sh MAKEDEV jail This is where I had my first problem, MAKEDEV doesn't exist. At first I was a bit concerned about this, then I remembered that in 5.0 and above MAKEDEV isn't necessary, it is handled by the kernel (If that isn't right someone please tell me). I didn't worry about this. Next I ran: # cd ../ # ln -sf /dev/null kernel Then I started my jail: #jail /usr/jail jail.myhost.com 10.0.0.203 /bin/sh Things seem to be fine. I can see the jailed environment and everything looks fine. I log out and then try to set up the last configuations so I can ssh in and run sendmail. In the non-jail /etc/rc.conf I added the following lines: ifconfig_fxp0_alias0="10.0.0.203 netmask 255.255.255.0" sendmail_enable="NONE" inetd_flags="-wW -a 10.0.0.202" I also added ListenAddress 10.0.0.202 to /etc/ssh/sshd_config. In the jail's /etc/rc.conf (i.e. /usr/jail/etc/rc.conf) I added: portmap_enable="NO" ifconfig_fxp0="inet 10.0.0.203 netmask 255.255.255.0" sendmail_enable="YES" sshd_enable="YES" and added ListenAddress 10.0.0.203 to /usr/jail/etc/ssh/sshd_config I then rebooted to shut all services down. When the system was back up and running I ran the commands to mount and start the jail: # mount -t procfs proc /usr/jail/proc # jail /usr/jail jail.myhost.com 10.0.0.203 /bin/sh /etc/rc Things seem to "boot" fine until it gets to sendmail; it seems to hang there (sshd starts fine though). Eventually sendmail times out and I get a prompt. I figure my jail is running (minus sendmail which I don't care about at the moment), and a ps -ax|grep J shows a few jailed processes running including sshd. From another system I try: % ssh 10.0.0.203 and I get nothing. I can ping 10.0.0.203 just fine (as well as 10.0.0.202). A sockstat -4 shows: root sshd 3041 3 tcp4 10.0.0.203:22 *:* root syslogd2908 4 udp4 10.0.0.203:514*:* root sshd 2650 3 tcp4 10.0.0.202:22 *:* so it seems like sshd is listening on 10.0.0.202 and 203. I can ssh to 202 without problem, I just can't get into the jail. Can anybody tell me where I screwed up, or other things to look for. Any help would be appreciated. Thanks, Chris signature.asc Description: This is a digitally signed message part
Re: Monitoring TCP/IP traffic
On 03/04/2004-11:44AM, Francisco Reyes wrote: > > Is there is anything like TOP for TCP/IP? /usr/ports/net/trafshow ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"