how can I browse the The freebsd-questions Archives tar files!

2004-09-24 Thread Huajian Luo
Hi,
   Can someone tell me how to use mutt to view freebsd-question archives
I gunzipped the file and It's a txt file, so I think there maybe a better
way to view it by mutt, I can view it's threads, but , can someone point
me howto config my mutt to view this text file,
thanks for any comments!
Huajian
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: how can I browse the The freebsd-questions Archives tar files!

2004-09-24 Thread Kris Kennaway
On Fri, Sep 24, 2004 at 03:05:33PM +0800, Huajian Luo wrote:
> Hi,
>Can someone tell me how to use mutt to view freebsd-question archives
> I gunzipped the file and It's a txt file, so I think there maybe a better
> way to view it by mutt, I can view it's threads, but , can someone point
> me howto config my mutt to view this text file,

mutt -f file ?

Kris


pgphwBItJYepN.pgp
Description: PGP signature


Re: how can I browse the The freebsd-questions Archives tar files!

2004-09-24 Thread Huajian Luo
Kris Kennaway wrote:
On Fri, Sep 24, 2004 at 03:05:33PM +0800, Huajian Luo wrote:
 

Hi,
  Can someone tell me how to use mutt to view freebsd-question archives
I gunzipped the file and It's a txt file, so I think there maybe a better
way to view it by mutt, I can view it's threads, but , can someone point
me howto config my mutt to view this text file,
   

mutt -f file ?
Kris
 

but I can just see the following line on the bottom, how can I view it :)
I'm a mutt and fBSD newbie so bear with me :-)
---Mutt: 2004-September.txt[Msgs:03.3M]---(date/date)-(all)-
thanks
huajian

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: how can I browse the The freebsd-questions Archives tar files!

2004-09-24 Thread W. D.
At 02:26 9/24/2004, Huajian Luo, wrote:
>Kris Kennaway wrote:
>
>>On Fri, Sep 24, 2004 at 03:05:33PM +0800, Huajian Luo wrote:
>>>Hi,
>>>   Can someone tell me how to use mutt to view freebsd-question archives
>>>I gunzipped the file and It's a txt file, so I think there maybe a better
>>>way to view it by mutt, I can view it's threads, but , can someone point
>>>me howto config my mutt to view this text file,
>>
>>mutt -f file ?
>>
>>Kris
>>  
>but I can just see the following line on the bottom, how can I view it :)
>I'm a mutt and fBSD newbie so bear with me :-)

If you happen to want to search for them on the Web:
http://www.Mail-Archive.com/[EMAIL PROTECTED]/


Start Here to Find It Fast!™ -> http://www.US-Webmasters.com/best-start-page/
$8.77 Domain Names -> http://domains.us-webmasters.com/

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: how can I browse the The freebsd-questions Archives tar files!

2004-09-24 Thread Huajian Luo
W. D. wrote:
At 02:26 9/24/2004, Huajian Luo, wrote:
 

Kris Kennaway wrote:
   

On Fri, Sep 24, 2004 at 03:05:33PM +0800, Huajian Luo wrote:
 

Hi,
 Can someone tell me how to use mutt to view freebsd-question archives
I gunzipped the file and It's a txt file, so I think there maybe a better
way to view it by mutt, I can view it's threads, but , can someone point
me howto config my mutt to view this text file,
   

mutt -f file ?
Kris
 

but I can just see the following line on the bottom, how can I view it :)
I'm a mutt and fBSD newbie so bear with me :-)
   

If you happen to want to search for them on the Web:
http://www.Mail-Archive.com/[EMAIL PROTECTED]/
Start Here to Find It Fast!^(TM) -> http://www.US-Webmasters.com/best-start-page/
$8.77 Domain Names -> http://domains.us-webmasters.com/
 

thanks , but I just want to save my $$ :(, I can view the message 
offline by just grabbing the tarball,
any other points!

huajian
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: snort+mysql+acid

2004-09-24 Thread Steve Hodgson
kinux wrote:
> Thanks for your reply.
> After installed php4-session and php4-mysql, it work, The
> error messages disappearred. But i found there is another
> problem. it can not display the alert with details, it always
> prompted with following line..
> Fatal error: Call to undefined function: preg_replace()
> in /usr/local/www/acid/acid_signature.inc on line 194
> 

Install devel/php4-pcre

Alternatively you can install the lang/php4-extensions port, which gives
you a list of all the possible extensions you can install

Steve
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: how can I browse the The freebsd-questions Archives tar files!

2004-09-24 Thread Giorgos Keramidas
On 2004-09-24 15:44, Huajian Luo <[EMAIL PROTECTED]> wrote:
>W. D. wrote:
>>At 02:26 9/24/2004, Huajian Luo, wrote:
>>>Kris Kennaway wrote:
On Fri, Sep 24, 2004 at 03:05:33PM +0800, Huajian Luo wrote:
> Can someone tell me how to use mutt to view freebsd-question
> archives I gunzipped the file and It's a txt file, so I think
> there maybe a better way to view it by mutt, I can view it's
> threads, but , can someone point me howto config my mutt to
> view this text file,

mutt -f file ?
>>>
>>> But I can just see the following line on the bottom, how can I
>>> view it :) I'm a mutt and fBSD newbie so bear with me :-)
>>
>> If you happen to want to search for them on the Web:
>> http://www.Mail-Archive.com/[EMAIL PROTECTED]/
>
> Thanks , but I just want to save my $$ :(, I can view the message
> offline by just grabbing the tarball, any other points!

The files you downloaded are simply Unix mailbox folders.  All the
messages are contained in a plain text file one after the other.

Use any other mailer you like if mutt is confusing.  For instance,
pine can do the same with:

$ pine -i -f /d/mail/freebsd-questions/2004-09.txt

This should list an index of all the mail messages.  The same of
course is what would happen with Kris' suggestion:

$ mutt -f /d/mail/freebsd-questions/2004-09.txt

If you like using some other mailer, try "importing" the messages or
pointing the mailer to the mailbox file.  Most mailers that run on
UNIX can read mailbox folders fine: Netscape Mail, Mozilla Mail,
Thunderbird, Kmail, Evolution, etc.

- Giorgos

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Speaking of Bind: installworld changed directory owner

2004-09-24 Thread Matthew Seaman
On Thu, Sep 23, 2004 at 11:35:08PM -0400, Robert Huff wrote:
> 
> Matthew Seaman writes:
> 
> >  Why do you think /etc/namedb should be owned by the bind user?
> 
>   Because I read - not sure where, might have been the O'Reilly
> book - a) the first step in securing bind is running as !root
> (i.e. user "bind") and b) the bind directory needs to be owned by
> that user.
>   Now maybe I'm mis-remembering, or mis-read in the first place
> ... but I'm not pulling this out of thin air.

Certainly running bind as a non root user is essential, as is clearly
stated in the O'Reilly DNS and Bind book.  However I can't see any
specific instructions on what ownership and permissions that directory
should have, although I don't claim to have managed to make a thorough
search through that book this morning.
 
I'd tend to think about these things in terms of 'least privilege'.
If someone can subvert your bind process by some sort of buffer
overflow exploit (say), then what damage can they do?  You can assume
that they've got a process with all of the credentials of the bind
user.  That means they can write to any files that the bind user can
write to, or read anything which bind has read permission on.  Using
the chroot features of bind and setting file ownerships and
permissions carefully will minimise your exposure.
 
Cheers,
 
Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   26 The Paddocks
  Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
Tel: +44 1628 476614  Bucks., SL7 1TH UK


pgpxelJ0qDk80.pgp
Description: PGP signature


Re: how can I browse the The freebsd-questions Archives tar files!

2004-09-24 Thread Huajian Luo
Giorgos,
Thanks for your response, now I can view the mail by ping and Solaris 
mailx ,but still cann't
by mutt, maybe the reason is that I'm currently view mail on a Solaris 
box and I'll test it on
my Fbsd box this night ,

At last I see the beatuful world!
Thanks a ton,
huajian
The files you downloaded are simply Unix mailbox folders.  All the
messages are contained in a plain text file one after the other.
Use any other mailer you like if mutt is confusing.  For instance,
pine can do the same with:
   $ pine -i -f /d/mail/freebsd-questions/2004-09.txt
This should list an index of all the mail messages.  The same of
course is what would happen with Kris' suggestion:
   $ mutt -f /d/mail/freebsd-questions/2004-09.txt
If you like using some other mailer, try "importing" the messages or
pointing the mailer to the mailbox file.  Most mailers that run on
UNIX can read mailbox folders fine: Netscape Mail, Mozilla Mail,
Thunderbird, Kmail, Evolution, etc.
- Giorgos
 


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Linux program and serial port (5.2.1)

2004-09-24 Thread Peter Risdon
Carlos A. Carnero Delgado wrote:
Hi,
I have a little program , linux native, that I've managed to run
thanks to the Linux compat layer. However, this program opens the
serial port ttyS1, which doesn't exist as such in 5.2.1.
The question is this: how do I make this program to open the serial
port? (FYI, the device it should open is a random number generator.)

This is a complete guess, but I'm curious whether it would work:
You can make links in the /dev directory to existing devices by using 
entries in /etc/devfs.conf, so in this case you could add a line like:

linkcuaa1   ttyS1
This works fine with FreeBSD native applications, so I use links like 
this for my old serial port palm base, and for a cdrom link. Whether it 
would work with Linux compatibility stuff, I don't know. But, as I said, 
I'd be interested to find out.

HTH
Peter.
--
the circle squared
network systems and software
http://www.circlesquared.com
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Ipfw accept rule

2004-09-24 Thread dima
В пт, 24.09.2004, в 10:20, Bikrant Neupane пишет:
> On Thursday 23 September 2004 22:29, Jon Simola wrote:
> > On Thu, 23 Sep 2004, Bikrant Neupane wrote:
> > > Here is my rule set:
> > >
> > > #skip dependind the pkt layer
> > > 01000   32214780 skipto 1 ip from any to any layer2 in via xl0
> > > 01100   20093204 skipto 2 ip from any to any not layer2
> > >
> > > #rule num 1 to 2 allocated for layer2 filtering
> > > #for mac filter: allow only listed mac to send traffic
> > > 139 1780 allow ip from any to any MAC any 00:00:0e:84:00:83
> > > in via xl0
> > > #default deny all mac coming in from xl0
> > > 19997   28413046 deny ip from any to any MAC any any in via xl0
> >
> > If this is layer2 filtering, where are the layer2 tags in the ipfw rule?
> > And if this is the extent of your layer 2, then don't forget an allow/deny
> > default for layer2 packets (allow ip from any to any layer2). Also, you're
> > only checking your layer2 on a specific interface, perhaps you only have
> > one.
> >
> > I've got something like:
> > 00010 skipto 32000 ip from any to any not layer2
> > 00050 deny ip from any to any MAC any 00:30:da:00:00:00/24 layer2 in
> > 00055 count ip from any to any MAC any 00:0b:db:1d:63:56 layer2 in //
> > sniffing for traffic 03100 allow ip from any to any layer2
> > // bandwidth monitoring pipes
> > 32003 pipe 3 ip from any to any src-ip 10.10.66.0/24 in recv em1
> > 32004 pipe 4 ip from any to any dst-ip 10.10.66.0/24 out xmit em1
> > 65534 allow ip from any to any
> > 65535 deny ip from any to any
> >
> Well, I have no problem with the MAC filtering rules.
> Only problem that I am having is that the pkts hit the matching rule twice as 
> a result I get only half of the b/w than that specified in ipfw pipe command.
> 
> 
> 35004   324   485880 pipe 202 ip from any to 202.79.45.254 out via xl0
> 35005   30212080 pipe 203 ip from 202.79.45.254 to any out via em0
> 
> Isn't there a way to construct rules such that matching pkts hit the rule only 
> once?
$ man ipfw
[skip]
pipe pipe_nr
Pass packet to a dummynet(4) ``pipe'' (for bandwidth limitation,
delay, etc.).  See the TRAFFIC SHAPER (DUMMYNET) CONFIGURATION
Section for further information.  The search terminates; however,
on exit from the pipe and if the sysctl(8) variable
net.inet.ip.fw.one_pass is not set, the packet is passed again to
the firewall code starting from the next rule.
[skip]
$

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Ipfw accept rule

2004-09-24 Thread Bikrant Neupane
On Friday 24 September 2004 15:26, dima wrote:
> В пт, 24.09.2004, в 10:20, Bikrant Neupane пишет:
> > On Thursday 23 September 2004 22:29, Jon Simola wrote:
> > > On Thu, 23 Sep 2004, Bikrant Neupane wrote:
> > > > Here is my rule set:
> > > >
> > > > #skip dependind the pkt layer
> > > > 01000   32214780 skipto 1 ip from any to any layer2 in via
> > > > xl0 01100   20093204 skipto 2 ip from any to any not layer2
> > > >
> > > > #rule num 1 to 2 allocated for layer2 filtering
> > > > #for mac filter: allow only listed mac to send traffic
> > > > 139 1780 allow ip from any to any MAC any
> > > > 00:00:0e:84:00:83 in via xl0
> > > > #default deny all mac coming in from xl0
> > > > 19997   28413046 deny ip from any to any MAC any any in via xl0
> > >
> > > If this is layer2 filtering, where are the layer2 tags in the ipfw
> > > rule? And if this is the extent of your layer 2, then don't forget an
> > > allow/deny default for layer2 packets (allow ip from any to any
> > > layer2). Also, you're only checking your layer2 on a specific
> > > interface, perhaps you only have one.
> > >
> > > I've got something like:
> > > 00010 skipto 32000 ip from any to any not layer2
> > > 00050 deny ip from any to any MAC any 00:30:da:00:00:00/24 layer2 in
> > > 00055 count ip from any to any MAC any 00:0b:db:1d:63:56 layer2 in //
> > > sniffing for traffic 03100 allow ip from any to any layer2
> > > // bandwidth monitoring pipes
> > > 32003 pipe 3 ip from any to any src-ip 10.10.66.0/24 in recv em1
> > > 32004 pipe 4 ip from any to any dst-ip 10.10.66.0/24 out xmit em1
> > > 65534 allow ip from any to any
> > > 65535 deny ip from any to any
> >
> > Well, I have no problem with the MAC filtering rules.
> > Only problem that I am having is that the pkts hit the matching rule
> > twice as a result I get only half of the b/w than that specified in ipfw
> > pipe command.
> >
> >
> > 35004   324   485880 pipe 202 ip from any to 202.79.45.254 out via xl0
> > 35005   30212080 pipe 203 ip from 202.79.45.254 to any out via em0
> >
> > Isn't there a way to construct rules such that matching pkts hit the rule
> > only once?
>
> $ man ipfw
> [skip]
> pipe pipe_nr
> Pass packet to a dummynet(4) ``pipe'' (for bandwidth limitation,
> delay, etc.).  See the TRAFFIC SHAPER (DUMMYNET) CONFIGURATION
> Section for further information.  The search terminates; however,
> on exit from the pipe and if the sysctl(8) variable
> net.inet.ip.fw.one_pass is not set, the packet is passed again to
> the firewall code starting from the next rule.
> [skip]
# sysctl -a net.inet.ip.fw.one_pass
net.inet.ip.fw.one_pass: 1
It is by default 1.

I tried with 0 as well

Bikrant

> $
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: PHP Problem

2004-09-24 Thread Benjamin Walkenhorst
On Fri, 24 Sep 2004 03:41:45 +0200
Alex de Kruijff <[EMAIL PROTECTED]> wrote:

> On Thu, Sep 23, 2004 at 09:23:57PM +0200, Benjamin Walkenhorst wrote:
> > If you habe further questions, I'd be glad to help, but I suggest
> > you contact me privately, since your problem is not that strictly
> > FreeBSD-related.
> 
> I disagree with that. It would be better to do this publicaly. Others
> can then learn from this example. This is also suggested in FreeBSD
> documantion.
> 
> As to the matter where it belong. I think it better on ports@ but
> questions@ isn't that far off. I have seen lot of helpful help on this
> list about this. So helpful that is only recently learned about
> ports@

Mmmh, maybe I've just been reading [EMAIL PROTECTED] for too long... =)

> Alex

Kind regards,
Benjamin

-- 
If cars had improved at [the computer industry's] rate, a Rolls Royce
would now cost 10 dollars and get a billion miles per gallon.
(Unfortunately, it would probably also have 200-page manual telling how
to open the door.)
--
Andrew Tanenbaum, "Introduction To Distributed Systems"
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: beta4-beta5 diff

2004-09-24 Thread Nagilum
Sorry dude,
that's (nearly) impossible, although your sources are BETA4, that 
doesn't tell anyone when exactly you checked them out. Changes are 
incorporated (theoretically) every minute so just from knowing BETA4 
it's not possible to create a proper diff.
You may consider using CTM, which offers daily diffs for download (check 
you local freebsd mirror under pub/FreeBSD/CTM/src-5/ ) but you need a 
defined start for that (which means a 88MB download).
Kind regards,
Alex.

[EMAIL PROTECTED] wrote:
Hello all,
I am currently deployed to sea in the Arabian Gulf and have VERY bad net
connection. This is a request I don't fully expect to be answered but if
someone could send me a diff of the source between beta4 and beta5, I would
greatly appreciate it. I have absolutely no way to do a cvsup or any other
method other than downloading the full src which is really not feasible in
my current location. A diff should fall just into the right size..
Thanks
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Filesystem replication?

2004-09-24 Thread Nagilum
Are you sure a NFS shared fs wouldn't do the trick?
Or maybe an hourly unison sync process?
Brian McCann wrote:
Does anyone know of something that will allow me to have 2 file
servers and have their file systems be always in sync automatically? 
Basically, I'm looking for a rsync type program/system that runs in
the background, and when a file is changed on server1, it is
copied/updated/removed/whatever on server2.

Thanks,
--Brian
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Abt BSD installation

2004-09-24 Thread ramuK hsiraH
Hai
   I have installed FreeBSD5.3 on my system

it still prompts with the message

FreeBSD
...
boot:

   --->  if i press enter it prompts with the message


  no kernel

please help me


Yahoo! India Matrimony: Find your life partner online
Go to: http://yahoo.shaadi.com/india-matrimony
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Ultimately Safe User Account

2004-09-24 Thread Bart Silverstrim

I have a production FreeBSD box. My friend is starting to learn Unix
essentials and is asking me for an account. He doesn't require any
special rights, but he certainly wants to be able to use shell and
read
most manual pages. He'll access the server via Internet, SSH.
How can I create an account, so that it is completely safe to let him
in? How can I jail/chroot him and do I need to do it this way? I want
to
limit everything: disk space (~500Mb), RAM (~10%), processes (~30),
cpu
(~5-10%), _internet connectivity_ (bandwidth is expensive and he must
not be able to download much). He is new to Unix but I have to suppose
that somebody very experienced can steal his account info.
I'd be glad if he had only very basic ls, cp, mv, as well as sh and
vi.
I don't want him to have any browser or fetch-like utility.
I know that letting somebody log in is already a security hole, but I
want to minimize the risks.
As others had pointed out, a live boot CD is the best way to learn on 
his own hardware without you getting nasty surprises on your own.

Alternatively, he (or you) could invest in VMWare and let him have free 
reign inside a virtual machine.  Personally those would be the two 
options I'd look at first...preferably VMWare, since a screwup is as 
easy to recover from as copying a backup of the good image to a working 
drive image.

Otherwise you're looking at investing a lot of time and effort in 
getting quotas configured, bandwidth monitoring, jails, etc. etc...the 
virtual machine route is the best way to give a budding "root" a chance 
to learn with less fear of mistakes (or killing your 
server/workstation)...especially if he gets clever with ssh redirection 
of ports :-)

-Bart
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Abt BSD installation

2004-09-24 Thread Konrad Heuer

On Fri, 24 Sep 2004, ramuK hsiraH wrote:

> Hai
>I have installed FreeBSD5.3 on my system
>
> it still prompts with the message
>
> FreeBSD
> ...
> boot:
>
>--->  if i press enter it prompts with the message
>
>
>   no kernel
>
> please help me

I'd try to boot the installation cd, to interrupt the boot countdown and
to switch into the command line mode of the boot loader and to enter the
command "lsdev". Beside those on the cd, you should see the file systems
available on your hard disk then, too. By entering the command "set
currdev=disk1s1a" (e.g., replace "disk1s1a" by the partition name of the
root fs on the hard disk) and entering commands like "ls" and "cd" you can
try to look at the root fs to see whether there's something wrong.

Regards

Konrad Heuer
GWDG, Am Fassberg, 37077 Goettingen, Germany, [EMAIL PROTECTED]

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Ultimately Safe User Account

2004-09-24 Thread Bart Silverstrim
On Sep 23, 2004, at 8:56 PM, Andrew wrote:
Dan Rue wrote:
How's he supposed to learn anything if all you give him is a jail with
ls cp mv sh and vi?  sheesh.  That'll turn him off unix pretty quick.

Thanks for your feedback. I guess I'll just let him in and try not to
worry. Well, the trouble is that I am the one administering the box and
that it was this summer when I started reading heaps of unix/bsd
documentation - for the first time in my life. I'm still paranoid about
my own actions, not to mention smb's else. I'll give him cygwin/livecd
as well, though.
If you're somewhat new (even if you're not...) I'd even more strongly 
suggest investing in VMWare or some other VM software using disk images 
to work from...it's the ultimate free reign learning environment and 
virtual jail.

Even seasoned admins can get lazy or get hit by some new trick in the 
book that they didn't previously know about.  No one I worked with was 
really familiar with SSH beyond the command line access...and they were 
impressed with X forwarding.  Then I learned about port redirection 
using SSH, so any ssh-accessible machine on the Internet could 
potentially be used to see any other machines within the same subnet as 
the ssh server, allowing me access to some machines not visible with 
simple scans of a NATed network.  Took a few times explaining how it 
worked, and it's come in handy for remote administration at times and 
the people I explained the technique to were impressed at the potential 
for this to be helpful as a tool (and as a potential security 
breach...) The point is that there are more things in system 
administration and user's minds than dreamt of in any single admin's 
philosophy, Horatio :-)

-Bart
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: problem installing p5-DBD-mysql50 from ports

2004-09-24 Thread Perica Veljanovski
> On Thursday 23 September 2004 13:09, Perica Veljanovski wrote:
> > Hi all,
> >
> > I have a problem installing the p5-DBD on my bsd box:
> >
> > /usr/ports/databases/p5-DBD-mysql50#make install
> > fails with the following err:
> > ---
> > ===>  Building for p5-DBD-mysql50-2.9003
> > cc -c  -I/usr/local/lib/perl5/site_perl/5.8.4/mach/auto/DBI
> > -I/usr/local/include/mysql -O -pipe  -D_THREAD_SAFE  -O -pipe -O -pipe   
> > -DVERSION=\"2.9003\"  -DXS_VERSION=\"2.9003\" -DPIC -fPIC
> > "-I/usr/local/lib/perl5/5.8.4/mach/CORE"   mysql.c mysql.xs: In function
> > `XS_DBD__mysql__dr__admin_internal':
> > mysql.xs:103: `SHUTDOWN_DEFAULT' undeclared (first use in this function)
> > mysql.xs:103: (Each undeclared identifier is reported only once
> > mysql.xs:103: for each function it appears in.)
> > mysql.xs:103: too many arguments to function `mysql_shutdown'
> > *** Error code 1
> >
> > Stop in /usr/ports/databases/p5-DBD-mysql50/work/DBD-mysql-2.9003.
> > *** Error code 1
> >
> > Stop in /usr/ports/databases/p5-DBD-mysql50.
> > ---
> > I run on a cvsup-ed 4.7 to FreeBSD 4.10-STABLE (port's cvsuped allso)
> > I have:
> > mysql  Ver 14.3 Distrib 5.0.0-alpha, for portbld-freebsd4.10 (i386)
> > perl, v5.8.4 built for i386-freebsd-64int
> > p5-DBI-1.42_1 The perl5 Database Interface.  Required for DBD::*modules
> > All installed from ports.
> > ---
> > Can you help me with this. I can't locate the problem?
> >
> > ps. mysql-server isn't running :P
> >
> > 10x ahead
> 
> I had the same problem last week. I just installed the pieces sepparately.
> installed mysql50-server from the ports & the DBI/DBD stuff from CPAN.
> 
> you could try just install the CPAN modules:
> 
> perl -MCPAN -e 'install Bundle::DBI'
> or
> perl -MCPAN -e 'install Bundle::DBD'
> 
>   Ty Hoeffer
> 
> -- 
> ***
> * Ty Hoeffer -- IS Net Engineer -- UVa. Health System/Computing Services
> * pth3k at Virginia.EDU  --  http://warhammer.mcc.virginia.edu/ty
> * "Democracy is two wolves and a lamb deciding what to have for dinner.
> * Liberty is a well armed lamb contesting the decision."  Ben Franklin
> ***
> ___


I tired the newest modules from CPAN, the same thing.

But after a couple of minutes searching trough the .c I found that
removing the "SHUTDOWN_DEFAULT" from the following line:

   result = mysql_shutdown(sock, SHUTDOWN_DEFAULT);

does the trick.

---
ps.10x Ty

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Filesystem replication?

2004-09-24 Thread Brian McCann
Well...I think I found a solution, and it's even in the ports
collection...CODA.  It appears that this little gem will take a bunch
of servers and replicate data, in real time, between them all.  Thanks
again all!

--Brian


On Fri, 24 Sep 2004 12:36:58 +0200, Nagilum <[EMAIL PROTECTED]> wrote:
> Are you sure a NFS shared fs wouldn't do the trick?
> Or maybe an hourly unison sync process?
> 
> 
> 
> Brian McCann wrote:
> 
> > Does anyone know of something that will allow me to have 2 file
> >servers and have their file systems be always in sync automatically?
> >Basically, I'm looking for a rsync type program/system that runs in
> >the background, and when a file is changed on server1, it is
> >copied/updated/removed/whatever on server2.
> >
> >Thanks,
> >--Brian
> >___
> >[EMAIL PROTECTED] mailing list
> >http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> >To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> >
> >
> 
>
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Help Me!

2004-09-24 Thread Mehdi Sabzeie
Hi.
Please help me about add USB device storage compeletly.
After I study handbook add USB device was failed.
please help me.
Thanks a lot.
 
 
 


-
Best Regards.
Mehdi Sabzeie.

-
Do you Yahoo!?
vote.yahoo.com - Register online to vote today!
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Official wallpapers

2004-09-24 Thread Frank Knobbe
On Wed, 2004-09-22 at 21:51, Glenn Sieb wrote:
> >
> So then when do we get "Bride of Chucky"? :)


http://www.andrew.cmu.edu/user/nprountz/wallp/other/secure_bsd.jpg


Cheers,
Frank



signature.asc
Description: This is a digitally signed message part


Re: Official wallpapers

2004-09-24 Thread Alex de Kruijff
On Wed, Sep 22, 2004 at 10:51:44PM -0400, Glenn Sieb wrote:
> Emanuel Strobl said the following on 9/22/2004 10:28 PM:
> 
> >Am Donnerstag, 23. September 2004 04:20 schrieb Alex de Kruijff:
> > 
> >
> >>On Wed, Sep 22, 2004 at 11:14:09PM +0200, Julien Gabel wrote:
> >>   
> >>
> >>The flame detail around the daemon (can't remember his name...)
> >>is excellent.
> >>   
> >>
> >IIRC, that's "Beastie". ;)
> > 
> >
> Beastie was one name used, but wasn't he called "Chuck" at one point?
>    
> 
> >>>Seems not, according to http://www.mckusick.com/beastie/.
> >>> 
> >>>
> >>I beleave Chucky is his nick name.
> >>   
> >>
> >
> >I only know it (him) as Chuck, perhaps Chucky, I'm not really sure. At 
> >least when I first had contact with FreeBSD (arround '98) his name was 
> >Chuck or Chucky...
> >
> So then when do we get "Bride of Chucky"? :)
> 
> *duck*grin*

Haha beauty and the beastie. ;) Just picturing how it would look

-- 
Alex

Articles based on solutions that I use:
http://www.kruijff.org/alex/FreeBSD/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Debugging a panic (was: )

2004-09-24 Thread Phil Schulz
Dan Mahoney, System Admin wrote:
After recently upgrading to 4.10, on a machine that's known for getting 
100+ days uptime, I got the following error on an unexpected reboot:

[Panic]
What could cause this?
-Dan Mahoney
Hi Dan!
 I'm no expert at all, but I'll give it a try...
 If you cannot reproduce the panic, you might face a hardware problem. 
Memory, harddisk, power supply, etc. are the usual suspects. If you, 
however, can reproduce the panic, please continue to read.

 Please note that the steps outlined below are things I did on a 
5.3-BETA5 system. I might have forgotten some things while I have 
included other, unneeded steps.

 There are a few requirements to really debug a panic:
 * Build a kernel w/ debug symbols. Add "makeoptions DEBUG=-g" to your
   kernel configuration file.
 * Set up the "dumpdev" and "dumpdir" variables in rc.conf - mine are
   set to:
 dumpdev="/dev/ad0s2b"
 dumpdir="/var/crash"
 * If the machine doesn't aim at minimum downtime, you might want to
   build a kernel debugger into your kernel, so the kernel can drop into
   the debugger in case of a panic. At the debugger prompt, you can type
   "backtrace" to get a useful trace on how the kernel ended up in the
   place where it crashed. I've also found that you need to type "call
   doadump" to get a crash dump before you can "reset" the machine. This
   might or might not apply to 4.x, however.
 * If you're aiming at minimum downtime and have set the machine to
   automatically reset itself in case of a panic, you'll have to analyze
   the core dump to get a trace.
 It is my understanding that the instruction pointer listed in the 
panic message points to the place where things blew up. You can use the 
address to point to the line in the source code, provided you have built 
in debug symbols and you have a core dump. However, the address might 
point to different places with different kernel configurations, i.e. the 
adress you gave us only applies to your kernel.
 I also think that debug symbols do not have any negative impact on 
performance, so it's a good idea to keep them around.
 Someone please correct me if I'm wrong.

  The link below [1] and a quick Google search for "Debugging Kernel 
Problems" will point you to documentation I've found very useful.

HTH,
Phil.
[1]http://www.freebsd.org/doc/en_US.ISO8859-1/books/developers-handbook/kerneldebug.html
--
Did you know...
If you play a Windows 2000 CD backwards, you hear satanic messages,
but what's worse is when you play it forward
 ...it installs Windows 2000
  -- Alfred Perlstein on [EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Problem with USB device (was: Help Me!)

2004-09-24 Thread Phil Schulz
[Please chose a better subject next time]
Mehdi Sabzeie wrote:
Hi.
Please help me about add USB device storage compeletly.
After I study handbook add USB device was failed.
please help me.
Thanks a lot.
 
1. What are you trying to do? What sort of device are you talking about? 
I'm afraid I don't understand your question.
2. What does not work? Please include any error messages you are seeing. 
 The places to look at is probably /var/log/messages
3. Tell us which version of FreeBSD you are running.

Without that information it is nearly impossible to tell what went 
wrong. After you provide more information, I'm sure you will get some help.

Kind Regards,
Phil.
--
Did you know...
If you play a Windows 2000 CD backwards, you hear satanic messages,
but what's worse is when you play it forward
 ...it installs Windows 2000
  -- Alfred Perlstein on [EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


dns-more than I ever wanted to know...

2004-09-24 Thread mailing lists at MacTutor
I've come across a ton of DNS tutorials on the web. Everything I've 
found so far is very lengthy. I need to setup a simple small 
office/home office network with DNS so that it resolves my inside 
network among the machines and hides it from the greater internet.

I'm open to suggestions of a quick fix that won't take me a day and 
half reading full time.

Thanks,
Alex
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
 Alexander Sendzimir (owner)802 863 5502
 MacTutor: Apple Mac OS X Consulting   [EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: dns-more than I ever wanted to know...

2004-09-24 Thread David Kelly
On Sep 24, 2004, at 8:14 AM, mailing lists at MacTutor wrote:
I've come across a ton of DNS tutorials on the web. Everything I've 
found so far is very lengthy. I need to setup a simple small 
office/home office network with DNS so that it resolves my inside 
network among the machines and hides it from the greater internet.

I'm open to suggestions of a quick fix that won't take me a day and 
half reading full time.
This is a bit fancier than a minimum setup as it integrates DHCP with 
your DNS keeping both in sync:
http://ezine.daemonnews.org/200408/dnsdhcp.html

--
David Kelly N4HHE, [EMAIL PROTECTED]

Top-posters will not be shown the honor of a reply.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


WBEM / CIM on FreeBSD ?

2004-09-24 Thread Valéry
Hello,
is it an implementation of the WBEM/CIM model available
on FreeBSD or BSD/Like system ?
Any comments of informations arround that are welcome,
Thanks for your help,
Valéry
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: dns-more than I ever wanted to know...

2004-09-24 Thread Steve Bertrand
> I've come across a ton of DNS tutorials on the web. Everything I've
> found so far is very lengthy. I need to setup a simple small
> office/home office network with DNS so that it resolves my inside
> network among the machines and hides it from the greater internet.
>
> I'm open to suggestions of a quick fix that won't take me a day and
> half reading full time.

# cd /etc/namedb
# chmod 744 make-localhost
# ./make-localhost
# ee named.conf

Change or add the following:

forwarders {
142.77.2.36;
142.77.1.1;
142.77.1.5;
};

... and then add a record for a domain.

zone "domain.com" {
type master;
file "domain.com.zone";
allow-transfer { 192.168.0.3; }; // This is your secondary DNS
allow-update { none; };
};

...Now you have to create a zone file:

# ee domain.com.zone

--- start zone file ---

$TTL 360

domain.com.  IN  SOA ns1.domain.com.  
admin.domain.com. (
2004090801 ; Serial
7200  ; Refresh
3600; Retry every hour
1728000 ; Expire every 20 days
172800 ); Minimum 2 days
;

; Set the name servers to whatever was used when registered

IN  NS  ns1.domain.com.
IN  NS  ns2.domain.com.
@   IN  A   x.x.x.x

; Set the Mail Exchange record

@   IN MX   10  mail.domain.com.
@   IN MX   20  mail2.domain.com.

; Host records

; Core

ns1 IN Ax.x.x.x
ns2 IN Ax.x.x.x
www IN Ax.x.x.x

--- end zone file ---

... now:

# chown bind:bind *
# /usr/sbin/named -u bind -g bind

should get you resolving for your domain, as well as for external
domains. To start up the daemon at startup, add the following to
/etc/rc.conf:

# ee /etc/rc.conf

named_enable="YES"
named_program="/usr/sbin/named"
named_flags="-u bind -g bind"


...all off the top of my head, so forgive me if I left something out.
If you don't have a domain internally and you want to resolve only
external names, skip adding the domain entry and the zone file pieces
of this email.

Let me know if I missed something or it doesn't work as expected.

HTH,

Steve






>
> Thanks,
>
> Alex
>
>
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
>   Alexander Sendzimir (owner)802 863 5502
>   MacTutor: Apple Mac OS X Consulting   [EMAIL PROTECTED]
> ___
> [EMAIL PROTECTED] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
>


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Official wallpapers

2004-09-24 Thread Kevin A. Pieckiel
On Thu, Sep 23, 2004 at 07:18:29PM -0500, Frank Knobbe wrote:
> On Wed, 2004-09-22 at 21:51, Glenn Sieb wrote:
> > >
> > So then when do we get "Bride of Chucky"? :)
> 
> http://www.andrew.cmu.edu/user/nprountz/wallp/other/secure_bsd.jpg

Hehe... I was kinda hoping for a joke image of the BSD daemon
getting married to Tux.  That would be kinda funny to show a
scene from the wedding ceremony...  :)

/me ducks and hides
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Very very slow

2004-09-24 Thread Albert Shih
Hi

I've very strange problem:

On a bi-pro Xeon 2.4 Ghz, 2 Go Ram, 36 SCSI-3 disk.

With Linux RH 9 everything work fine. But with FreeBSD 5.2.1 the server is
very very very slow. For example make buildworld use ~10 hours

I've another server with approx same hardware (same motherboard but with
integrated scsi chipset) on FreeBSD 5.2.1 and everthing work fine.

Anyone have a idea ?

Regards.



--
Albert SHIH
Universite de Paris 7 (Denis DIDEROT)
U.F.R. de Mathematiques.
Heure local/Local time:
Fri Sep 24 16:01:54 CEST 2004
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: DEVICE_POLLING in 5.3

2004-09-24 Thread Yaraghchi, Stephan
> -Original Message-
> From: Alex de Kruijff [mailto:[EMAIL PROTECTED]
> Sent: Friday, September 24, 2004 3:20 AM
> To: Yaraghchi, Stephan
> Cc: [EMAIL PROTECTED]
> Subject: Re: DEVICE_POLLING in 5.3
> 
> 
> On Thu, Sep 23, 2004 at 03:27:22PM +0200, Yaraghchi, Stephan wrote:
> > Hi fellows,
> > 
> > I'm trying to tune network performance of a 5.3-BETA5 box
> > by compiling the DEVICE_POLLING and HZ=1000 options into
> > the kernel. Compilation went fine.
> > I found the usual warning in /usr/src/sys/kern/kern_poll.c
> > concerning device polling in SMP kernels and removed it.
> > 
> > To finally enable the feature one have to set the sysctl
> > kern.polling.enable to value '1'.
> > 
> > The only problem is that 5.3-BETA5 doesn't know about it:
> > 
> > sysctl: unknown oid 'kern.polling.enable'
> > 
> > Any advice is highly appreciated.
> 
> Hi,
> 
> Did you do a full make buildworld/kernel installkernel/world? If not
> then this might be why sysctl doesn't know about it. If so then maybe
> someone from current@ might know more about it. (maybe there read this
> list to)
> 
> Does /usr/src/UPDATING say anything about it?
> 
> -- 
> Alex
> 
> Articles based on solutions that I use:
> http://www.kruijff.org/alex/FreeBSD/
> 


Hi Alex,

IMO it's not necessary since the changes only affect the kernel which
I already recompiled.
Nevertheless I also did a 'make buildworld' as you suggested: no luck.

/usr/src/UPDATING says nothing about the issue.


Stephan.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: dns-more than I ever wanted to know...

2004-09-24 Thread mailing lists at MacTutor
Steve,
Thanks a bunch! This is a great help. I'm not clear on the use of 
allow-transfer. Reading the  manpage for named.conf(5), I'm tempted to 
leave it out. But, I'm not fully understanding the use of it. The 
manpage says,

allow-transfer
  Specifies which hosts are allowed to receive zone transfers from the
  server.  allow-transfer may also be specified in the zone statement,
  in which case it overrides the options allow-transfer statement.  If
  not specified, the default is to allow transfers from all hosts.
I'm taking "which hosts are allowed to receive zone transfers from the 
server" to mean hosts on my local network and the server is the DNS 
server I'm setting up now. I don't want my zone information going out 
to the internet (my isp), but I do want to let it in (of course). I 
failed to mention that the machine acting as DNS inside my network 
is/will be configured as a gateway. (QUESTION: I have vr0 and vr1. Does 
it matter which interface I face toward the internet?) Perhaps this 
doesn't matter as long as the DNS server is pointing to/resolving for 
the inside (local) network interface (10.0.0.1). Let me make this more 
clear. I have the following (typical?) small office setup:

 -
ISP<--- monopolists
 +
 |
 |
 |
   (vr1)   <--- DHCP'd from ISP
--
 FreeBSD 4.10 gateway
--
   (vr0)   <--- 10.0.0.1
 |  DNS,ipfw,natd,httpd
 |
 |
   {... local network ...}
So, all this just to clarify allow-transfer. :) My questions go deeper 
than DNS. But, I'm trying to figure out the rest myself.

Thanks,
Alex
On Sep 24, 2004, at 9:57 AM, Steve Bertrand wrote:

... and then add a record for a domain.
zone "domain.com" {
type master;
file "domain.com.zone";
allow-transfer { 192.168.0.3; }; // This is your secondary DNS
allow-update { none; };
};

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
 Alexander Sendzimir (owner)802 863 5502
 MacTutor: Apple Mac OS X Consulting   [EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Linux program and serial port (5.2.1)

2004-09-24 Thread Carlos A. Carnero Delgado
Hello,

On Fri, 24 Sep 2004 10:25:47 +0100, Peter Risdon
<[EMAIL PROTECTED]> wrote:
> Carlos A. Carnero Delgado wrote:
> >
> > I have a little program , linux native, that I've managed to run
> > thanks to the Linux compat layer. However, this program opens
> > the serial port ttyS1, which doesn't exist as such in 5.2.1.
> >
> > The question is this: how do I make this program to open the
> > serial port? (FYI, the device it should open is a random number
> > generator.)
> 
> This is a complete guess, but I'm curious whether it would work:
> 
> You can make links in the /dev directory to existing devices by using
> entries in /etc/devfs.conf, so in this case you could add a line like:
> 
> linkcuaa1   ttyS1
> 
> This works fine with FreeBSD native applications, so I use links like
> this for my old serial port palm base, and for a cdrom link. Whether
> it would work with Linux compatibility stuff, I don't know. But, as I
> said, I'd be interested to find out.
> 

Perfect, that worked out OK. However, I'm getting this every second in
the system log:

  kernel: sio1: 960 more tty-level buffer overflows (total 126252)

Have any idea about this?

Best regards,
Carlos.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: dns-more than I ever wanted to know...

2004-09-24 Thread Simon Barner
mailing lists at MacTutor wrote:
> I've come across a ton of DNS tutorials on the web. Everything I've 
> found so far is very lengthy. I need to setup a simple small 
> office/home office network with DNS so that it resolves my inside 
> network among the machines and hides it from the greater internet.
> 
> I'm open to suggestions of a quick fix that won't take me a day and 
> half reading full time.

Have you already read this one?
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-dns.html

Simon


pgpCx2Owa2FCZ.pgp
Description: PGP signature


Problem with spamass-milter and libmilter sendmail-8.13.1

2004-09-24 Thread Ярошенко С.Ю.
Hi!

I have promblem with spamass-milter and  libmilter
sendmail-8.13.1 .

My test server run under FreeBSD-5.3 Beta5, I install
spamassassin-2.64 and spamass-milter, added in config
file of sendmail line :
\"INPUT_MAIL_FILTER(`spamassassin\',
`S=local:/var/run/spamass-milter.sock, F=,
T=C:15m;S:4m;R:4m;E:10m\')\", then run make sendmail.cf
and restart sendmail.
Run spamass-milter with command:
/usr/local/sbin/spamass-milter -f -p
/var/run/spamass-milter.sock -b [EMAIL PROTECTED]
Spamass-milter sucsefuly created socket
/var/run/spamass-milter.sock.

But when I send testing mail, I got error in maillog:
Sep 24 18:11:12 imhouse sm-mta[70048]: i8OEBCJX070048:
Milter (spamassassin): error connecting to filter:
Connection refused by /var/run/spamass-milter.sock
Sep 24 18:11:12 imhouse sm-mta[70048]: i8OEBCJX070048:
Milter (spamassassin): to error state

Socket /var/run/spamass-milter.sock permanent.
# ls -la spamass-milter.sock
srwxr-xr-x  1 root  wheel  0 Sep 24 18:10
spamass-milter.sock


When I mistake with libmilter of sendmail-8.13.1?
What I should add to spamass-milter or config
sendmail-8.13.1 to got a work antispam system?

Excuse for my bad english!

Serge.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Linux program and serial port (5.2.1)

2004-09-24 Thread Peter Risdon
Carlos A. Carnero Delgado wrote:
Hello,
On Fri, 24 Sep 2004 10:25:47 +0100, Peter Risdon
<[EMAIL PROTECTED]> wrote:
Carlos A. Carnero Delgado wrote:
I have a little program , linux native, that I've managed to run
thanks to the Linux compat layer. However, this program opens
the serial port ttyS1, which doesn't exist as such in 5.2.1.
The question is this: how do I make this program to open the
serial port? (FYI, the device it should open is a random number
generator.)
This is a complete guess, but I'm curious whether it would work:
You can make links in the /dev directory to existing devices by using
entries in /etc/devfs.conf, so in this case you could add a line like:
linkcuaa1   ttyS1
This works fine with FreeBSD native applications, so I use links like
this for my old serial port palm base, and for a cdrom link. Whether
it would work with Linux compatibility stuff, I don't know. But, as I
said, I'd be interested to find out.

Perfect, that worked out OK. However, I'm getting this every second in
the system log:
  kernel: sio1: 960 more tty-level buffer overflows (total 126252)
Have any idea about this?
You might get more informed responses from others. I remember seeing 
these errors frequently on oldish machines using serial port terminal 
adapters and modems, but haven't used one of those for ages and don't 
remember the fix (there was one). Googling for the error gives:

http://docs.freebsd.org/cgi/getmsg.cgi?fetch=1745220+0+archive/1998/freebsd-questions/19981018.freebsd-questions
Which suggests that *data is coming in faster than your
program can interpret it.  There isn't much you can do about this other
than try quitting some programs.*
I can add that this was never fatal, just filled up the first console 
screen and /var/log/messages.

Peter.
--
the circle squared
network systems and software
http://www.circlesquared.com
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: dns-more than I ever wanted to know...

2004-09-24 Thread Steve Bertrand
> Steve,
>
> Thanks a bunch! This is a great help. I'm not clear on the use of
> allow-transfer. Reading the  manpage for named.conf(5), I'm tempted to
> leave it out. But, I'm not fully understanding the use of it. The
> manpage says,
>
> allow-transfer
>Specifies which hosts are allowed to receive zone transfers from
> the
>server.  allow-transfer may also be specified in the zone
> statement,
>in which case it overrides the options allow-transfer statement.
> If
>not specified, the default is to allow transfers from all hosts.
>

You most likely don't need it. If you have 2 DNS servers,
allow-transfer states which other servers are allowed to receive the
DNS changes. This is likely not the case for you, so leave it out.

> I'm taking "which hosts are allowed to receive zone transfers from the
> server" to mean hosts on my local network and the server is the DNS
> server I'm setting up now. I don't want my zone information going out
> to the internet (my isp), but I do want to let it in (of course).

I'll try to clarify. Most of my domains DNS info is hosted on a
``master'' server. This server is responsible for telling the Internet
what IP's are for what servers. If you don't have a domain, then you
will not have this set up. Now, what happens if my master DNS server
goes down for my domain? Well, I have a backup server (secondary) that
contains the same zone files, so it as well knows about my domain. If
I make a change on the master, for instance if I need to change the IP
of my web server, I make the change on the master, and eventually that
change gets replicated to the secondary. Allow-transfer is like an
authorization for which IP addresses the master is allowed to send the
updated DNS info to.

I expect you are wanting to use a ``caching-only'' type server now. If
you have no domain to set up, then what is happening is your DNS
server downloads DNS info from the Internet. Client sends DNS request
to your server...your server looks up the DNS info from the proper
server on the Internet...DNS info is passed back to the client. Now
your DNS server has those records cached, so lookups after that of
those same domains are almost instantaneous.

You can play with BIND and set up your own domains, even if they are
not registered. Using my example of the zones, you can create a phony
one like 'internal.com'. No one on the Internet will know you are
using it.

If you want to do this, just edit named.conf as described, and create
a zone file with some names for you PC's. ie:

workstation IN A 10.0.0.10  ; your computer
gateway IN A 10.0.0.1
filesrv IN A 10.0.0.20

Note that anything after ; is a comment.

Now, once your pc's are pointing DNS at the new box, you will be able
to ping your inside network by name, AND IP.

You got it right. Unless firewalled off, bind will listen by default
on all Interfaces, but point the clients to 10.0.0.1 as the DNS
server.

Hope I was able to clarify not too badly. I'm very busy today, so I'm
rushed to reply so forgive any errors, omissions and/or bad
clarification. If you have more questions, fire away.

Steve


I
> failed to mention that the machine acting as DNS inside my network
> is/will be configured as a gateway. (QUESTION: I have vr0 and vr1.
> Does
> it matter which interface I face toward the internet?) Perhaps this
> doesn't matter as long as the DNS server is pointing to/resolving for
> the inside (local) network interface (10.0.0.1). Let me make this more
> clear. I have the following (typical?) small office setup:
>
>   -
>  ISP<--- monopolists
>   +
>   |
>   |
>   |
> (vr1)   <--- DHCP'd from ISP
>  --
>   FreeBSD 4.10 gateway
>  --
> (vr0)   <--- 10.0.0.1
>   |  DNS,ipfw,natd,httpd
>   |
>   |
> {... local network ...}



>
> So, all this just to clarify allow-transfer. :) My questions go deeper
> than DNS. But, I'm trying to figure out the rest myself.
>
> Thanks,
>
> Alex
>
>
> On Sep 24, 2004, at 9:57 AM, Steve Bertrand wrote:
>
>> 
>> ... and then add a record for a domain.
>>
>> zone "domain.com" {
>> type master;
>> file "domain.com.zone";
>> allow-transfer { 192.168.0.3; }; // This is your secondary
>> DNS
>> allow-update { none; };
>> };
>>
>> 
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
>   Alexander Sendzimir (owner)802 863 5502
>   MacTutor: Apple Mac OS X Consulting   [EMAIL PROTECTED]
>
>


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Problem with spamass-milter and libmilter sendmail-8.13.1

2004-09-24 Thread Matthew Seaman
On Fri, Sep 24, 2004 at 06:52:21PM +0400,  ?.?. wrote:
 
> But when I send testing mail, I got error in maillog:
> Sep 24 18:11:12 imhouse sm-mta[70048]: i8OEBCJX070048:
> Milter (spamassassin): error connecting to filter:
> Connection refused by /var/run/spamass-milter.sock
> Sep 24 18:11:12 imhouse sm-mta[70048]: i8OEBCJX070048:
> Milter (spamassassin): to error state
> 
> Socket /var/run/spamass-milter.sock permanent.
> # ls -la spamass-milter.sock
> srwxr-xr-x  1 root  wheel  0 Sep 24 18:10
> spamass-milter.sock

You need to make sure that spamass-milter and spamd are both running,
or you'll get this error.  Actually, because of the order in which
sendmail and the various milters are started up, you might see this
occasionally during reboots, if mail arrives at just the wrong time.  

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   26 The Paddocks
  Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
Tel: +44 1628 476614  Bucks., SL7 1TH UK


pgpRIWye0HMkv.pgp
Description: PGP signature


Re: Ipfw accept rule

2004-09-24 Thread Jon Simola
On Fri, 24 Sep 2004, Bikrant Neupane wrote:

> > > Well, I have no problem with the MAC filtering rules.
> > > Only problem that I am having is that the pkts hit the matching rule
> > > twice as a result I get only half of the b/w than that specified in ipfw
> > > pipe command.

Yes, the packets will hit the pipe twice. Once at layer2 and once at
layer3. You're not stopping the packets from passing through a pipe simply
by leaving out a "layer2" from the rule.

ether_input -> ipfw -> ip_input -> ipfw -> network stack

> > > Isn't there a way to construct rules such that matching pkts hit the rule
> > > only once?

Write your ruleset appropriately, or stick "not layer2" on your pipe
rules.

---
Jon Simola <[EMAIL PROTECTED]> | "In the near future - corporate networks
Systems Administrator |  reach out to the stars, electrons and light
 ABC  Communications  |  flow throughout the universe." -- GITS

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Problem with spamass-milter and libmilter sendmail-8.13.1

2004-09-24 Thread Ярошенко С.Ю.
>You need to make sure that spamass-milter and spamd
are both running,
>or you\'ll get this error.  Actually, because of the
order in which

Yes, spamass-milter and spamd are both running, but I
got error

>sendmail and the various milters are started up, you
might see this
>occasionally during reboots, if mail arrives at just
the wrong time.  
>
>   Cheers,

May be problem in libmilter of senmail 8.13.1?

I have mail server with senmail 8.12.11 and
spamass-milter and spamassiassin - work without promlem!

Serge.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Device polling performance

2004-09-24 Thread TM4525
I thought I'd reword my question since no one seemed to understand the first 
time.

Is there a way to measure CPU kernel/interrupt usage when device polling is 
enabled on 4.x systems? top and systat both show 100% idle all of the time.

TM
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Logins without full password!

2004-09-24 Thread Kris Kennaway
On Mon, Aug 27, 2001 at 02:15:22AM -0500, default wrote:

> Is this normal?

It's the expected behaviour for legacy DES passwords (only useful if
you need to share the same password file with other UNIX systems,
which isn't likely)

> How does one disable this?

There's a login capability for setting the default password format
(MD5 is the one you want) -- see login.conf(5).

Kris


pgphsn6BSVPvT.pgp
Description: PGP signature


Re: file permission question

2004-09-24 Thread David Kirchner
/etc/passwd (probably really /etc/pwd.db) are used for several user-land
programs including 'ls'. It's highly recommended that /etc/passwd stay
readable to the world.

Btw, the output of 'ps' can be easily reconstructed via access to the
/proc filesystem. You can unmount this partition, but ps will operate
differently.

With /proc unmounted, you can still get a process listing for everyone -
you can disable this by setting the sysctl kern.ps_showallprocs to 0.

On Mon, 1 Oct 2001, default wrote:

> Hi,
>
> I am allowing a couple of ppl to have a shell account on one of my machines,
> and I am making a few changes to disallow them from using certain things...
> like chmoding the 'ps' command to 550 etc...
>
> I wanted to ask, is there any reason why one wouldn't want to chmod to 640
> the passwd file and other similar files? ...
>
> Thanks,
>
> Jordan
>
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-security" in the body of the message
>


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-security" in the body of the message

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: file permission question

2004-09-24 Thread f.johan.beisser
On Mon, 1 Oct 2001, default wrote:

> Hi,
> 
> I am allowing a couple of ppl to have a shell account on one of my machines,
> and I am making a few changes to disallow them from using certain things...
> like chmoding the 'ps' command to 550 etc...
> 
> I wanted to ask, is there any reason why one wouldn't want to chmod to 640
> the passwd file and other similar files? ...

the base system is relativly secure on it's own. changing the permissions
on things like the passwd file breaks some programs that need it to read
user information. since the encrypted passwords are in /etc/master.passwd,
(which is permission 0600) you don't really need to change that.

honestly, changing permissions of 'standard' applications and utilities is
not going to stop a determined user on your server from abusing
resources. since having any users, other than yourself, on a machine is
technically a security risk.

your best bet is to meticuously comb through your installed files, and
only allow trusted users on your machines.


 ---/ f. johan beisser /--+
  http://caustic.org/~jan  [EMAIL PROTECTED]
   "if my thought-dreams could be seen..
   "they'd probably put my head in a gillotine"
 -- Bob Dylan


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-security" in the body of the message

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: too many dynamic rules

2004-09-24 Thread Axel Scheepers
Hello,
The man page of ipfw says:
net.inet.ip.fw.dyn_buckets: 256

net.inet.ip.fw.curr_dyn_buckets: 256
 The configured and current size of the hash table used to hold
 dynamic rules.  This must be a power of 2.  The table can only be
 resized when empty, so in order to resize it on the fly you will
 probably have to flush and reload the ruleset.

These are the standard kernel variabeles for the hash table size, In your config you 
should
increase these values until you don't get the messages anymore.
But, It wont't do any harm to look with tcpdump what is causing the state table to 
overflow,
since these rules should be discarded after a while, and it looks like that doesn't 
happen.
I myself use ipf/ipnat so I'm not so familliar with ipfw ruleset, maybe someone can 
find
something weird in these what is causing that ?

You can set these values using sysctl -w net.inet.ip.fw.dyn_buckets= 
and
sysctl -w net.inet.ip.fw.curr_dyn_buckets=. Keep in mind that this 
can't 
be done when the firewall is running, so you should flush it first, apply the changes 
and load
the rules again.

Hope this helps,
Axel

On Thu, Nov 08, 2001 at 08:12:07PM +, setantae wrote:
> Date: Thu, 8 Nov 2001 20:12:07 +
> From: setantae <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED], [EMAIL PROTECTED]
> Subject: too many dynamic rules
> 
> 
> Can't find anything in the archives at MARC, and not sure which list
> I should be talking to, so please set followups appropriately if it
> bothers you.
> 
> For approximately 18 seconds today my firewall went apesh*t 
>  (these are all relevant entries) :
> 
> Nov  8 14:47:45 rhadamanth /kernel: Too many dynamic rules, sorry
> Nov  8 14:47:45 rhadamanth natd[218]: failed to write packet back (Permission denied)
Stripped down a bit ...
> 
> At the time there was only one user logged onto the box, and no clients
> behind the firewall - unfortunately I have no idea what I was doing at the
> time, although I have been upgrading older ports today (cannot find any
> files that were created at the times above though).
> 
> This box is a dual piii-866 with 512mb of ram, doesn't do much and
> has maxusers set to 128.
> 
> The other interesting thing is that although dynamic rules are still being
> created (since I can access stuff from another box on the LAN),
> ipfw -at l no longer shows them.
> 

The Ruleset:
> 
> ## Deny fragments
> add 00105 deny all from any to any frag
> 
>   00110 Unprotect the LAN interface
> add 00110 allow all from any to any via dc0
> 
>   00200 Stop RFC 1918 traffic
> #add 00201 pass udp from 172.16.0.0/12 to any 68 in via ed0
> #add 00201 pass udp from 172.17.39.254 to any 68 in via ed0
> 
> add 00202 deny log all from any to 10.0.0.0/8
> add 00203 deny log all from 10.0.0.0/8 to any
> 
> add 00204 deny log all from any to 172.16.0.0/12
> add 00205 deny log all from 172.16.0.0/12 to any
> 
> #add 00206 deny log all from 192.168.0.0/16 to any in via ed0
> #add 00207 deny log all from any to 192.168.0.0/16 in via ed0
> 
> add 00206 divert natd all from any to any via ed0
> 
> add 00207 pass all from 192.168.10.0/24 to any via ed0
> add 00208 pass all from any to 192.168.10.0/24 via ed0
> add 00209 deny log all from any to 192.168.0.0/16 via ed0
> add 00210 deny log all from 192.168.0.0/16 to any via ed0
> 
>   00400 Check state and allow tcp connections created by us.
> add 00400 check-state
> add 00401 allow tcp from any to any out keep-state
> #add 00402 deny log tcp from any to any in established
> add 00403 allow udp from any to any 53 keep-state
> add 00404 allow udp from any to any out
> 
> ##NTP
> add 00421 allow udp from 130.88.200.98 123 to any
> add 00422 allow udp from 130.88.203.12 123 to any
> 
> 00500 DHCP stuff
> add 00501 allow udp from 62.252.32.3 to any 68 in via ed0
> 
>   00600 ICMP stuff
> # path-mtu
> add 00600 allow icmp from any to any icmptypes 3
> # source quench
> add 00601 allow icmp from any to any icmptypes 4
> #ping
> add 00602 allow icmp from any to any icmptypes 8 out
> add 00603 allow icmp from any to any icmptypes 0 in
> #traceroute
> add 00604 allow icmp from any to any icmptypes 11 in
> 
>   00700 Services we want to make available.
> add 00701 allow tcp from any to any 22
> add 00702 allow tcp from 194.168.4.200 to any 113
> #add 00703 allow tcp from any to any 21 out
> 
>   65000 And deny everything else.
> add 65007 deny log ip from any to any


-- 
Axel Scheepers
UNIX System Administrator

email: [EMAIL PROTECTED]
   [EMAIL PROTECTED]
http://axel.truedestiny.net/~axel
--
In America, any boy may become president and I suppose that's just one
of the risks he takes.
-- Adlai Stevenson
--


pgpZagadK2RxI.pgp
Description: PGP signature


Re: USB Network access

2004-09-24 Thread David Pick

> I want to introduce a paralell network structure to our LAN, to administer
> our servers (eg Webmin, SNMP, Mrtg).
> To do so I want to use the USB Port because my Servers have only
> one PCI connector (they are so called "pizza box" Server).
> 
> Does anyone know if there is a IP over USB or PPP over USB solution
> for FreeBSD ? Or how I can search for this?

Use USB Ethernet NICs? "aue", "cue", &c. See "/usr/src/sys/i386/conf/LINT".

-- 
David Pick


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-security" in the body of the message

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: setuid on nethack?

2004-09-24 Thread Kris Kennaway
On Thu, Nov 22, 2001 at 10:07:42PM +0100, Anthony Atkielski wrote:
> Alas!  This does not make me feel warm and fuzzy!  It's a good thing I'm not
> installing this at a bank.

If you're going to run software written by Joe Random Coder, there's
always an element of risk.  There's nothing about the FreeBSD ports
collection which increases this risk, and in fact it makes the
situation slightly safer since we check all "spontaneous" changes in
the md5 checksum of a distfile where the distfile changes with no
change in the software version (e.g. once a few years ago someone
broke into the main ftp server for the tcp_wrappers package, and added
backdoor code to it.  The compromised software could not be installed
from the FreeBSD port unless you manually issued an override of the
checksum).

We have also found several isolated instances where software authors
had 'spyware' code which reports details back to the author; these
ports were summarily removed from the ports collection, again making
things safer for the end user.

Thirdly, since you have the source code you are free to examine it for
yourself and evaluate your level of risk according to whichever
criteria you choose.

Kris


pgpJKktpadTWZ.pgp
Description: PGP signature


Re: `pkg_info | grep -i openssh` ; echo "2.9 vs 3.0.2?" [cjc]

2004-09-24 Thread Crist J. Clark
On Wed, Apr 10, 2002 at 02:35:16AM -0400, Peter Leftwich wrote:
> On Mon, 8 Apr 2002, Crist J. Clark wrote:
> [snip]
> > PL> My question was regarding ssh, not sshd.
> > Then I shall reprhase: Are you actually running the ssh(1) in /usr/local/bin/ssh 
> > or the old one in /usr/bin/ssh?
> > Crist J. Clark | [EMAIL PROTECTED],[EMAIL PROTECTED]
> > http://people.freebsd.org/~cjc/| [EMAIL PROTECTED]
> 
> I apologize for being snippy, if I seemed so.  You alone fixed my woes!!! :)
> 
> # ssh -V
> OpenSSH_2.9 FreeBSD localisations 20011202, SSH protocols 1.5/2.0, OpenSSL 0x0090601f
> # which ssh
> /usr/bin/ssh
> # /usr/local/bin/ssh -V
> OpenSSH_3.0.2, SSH protocols 1.5/2.0, OpenSSL 0x0090601f
> # mv /usr/bin/ssh /usr/bin/ssh_2.9_old_dont_use
> # ln -s /usr/local/bin/ssh /usr/bin/ssh
> 
> I guess that last line isn't really necessary if I adjust my $PATH, huh?

Probably, the "cleanest" thing to do is define a shell alias (assuming
you use a shell that supports them),

  $ alias ssh /usr/loca/bin/ssh

Would be the csh(1)-ish way to do it.
-- 
Crist J. Clark | [EMAIL PROTECTED]
   | [EMAIL PROTECTED]
http://people.freebsd.org/~cjc/| [EMAIL PROTECTED]

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-security" in the body of the message

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: `pkg_info | grep -i openssh` ; echo "2.9 vs 3.0.2?" [cjc]

2004-09-24 Thread Peter Leftwich
On Mon, 8 Apr 2002, Crist J. Clark wrote:
[snip]
> PL> My question was regarding ssh, not sshd.
> Then I shall reprhase: Are you actually running the ssh(1) in /usr/local/bin/ssh or 
> the old one in /usr/bin/ssh?
> Crist J. Clark | [EMAIL PROTECTED],[EMAIL PROTECTED]
> http://people.freebsd.org/~cjc/| [EMAIL PROTECTED]

I apologize for being snippy, if I seemed so.  You alone fixed my woes!!! :)

# ssh -V
OpenSSH_2.9 FreeBSD localisations 20011202, SSH protocols 1.5/2.0, OpenSSL 0x0090601f
# which ssh
/usr/bin/ssh
# /usr/local/bin/ssh -V
OpenSSH_3.0.2, SSH protocols 1.5/2.0, OpenSSL 0x0090601f
# mv /usr/bin/ssh /usr/bin/ssh_2.9_old_dont_use
# ln -s /usr/local/bin/ssh /usr/bin/ssh

I guess that last line isn't really necessary if I adjust my $PATH, huh?

--
Peter Leftwich
President & Founder
Video2Video Services
Box 13692, La Jolla, CA, 92039 USA
+1-413-403-9555


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-security" in the body of the message

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: `pkg_info | grep -i openssh` ; echo "2.9 vs 3.0.2?"

2004-09-24 Thread Crist J. Clark
On Sun, Apr 07, 2002 at 12:00:55AM -0800, Peter Leftwich wrote:
> prompt$ pkg_info | grep -i openssh
> openssh-3.0.2   OpenBSD's secure shell client and server (remote login prog
> 
> I just upgraded (or tried to upgrade) openssh on my FreeBSD 4.5-RELEASE
> box using /stand/sysinstall but I get this (ver. 2.9??) when I type:
> 
> prompt$ ssh -V
> OpenSSH_2.9 FreeBSD localisations 20011202, SSH protocols 1.5/2.0, OpenSSL 0x0090601f

Did you actually change the rc.conf(5) file to start the new daemon,
which probably lives in /usr/local/sbin/sshd, rather than the old one
in /usr/sbin/sshd?
-- 
Crist J. Clark | [EMAIL PROTECTED]
   | [EMAIL PROTECTED]
http://people.freebsd.org/~cjc/| [EMAIL PROTECTED]

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-security" in the body of the message

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Locate revealing contents of root:wheel 700 directories

2004-09-24 Thread Kris Kennaway
On Sun, Apr 21, 2002 at 01:27:14PM -0400, Dan Mahoney, System Admin wrote:
> Hi, I noticed that in freeBSD 4.5, locate shows the contents of all
> folders, even in my previously root:wheel 700 directory, /mnt/var/log.

Only if you run the locate.updatedb utility as root (i.e. in a
non-default way).  locate only searches the database, it doesn't have
any extra privileges.

Kris


pgpc0fEgqt1rz.pgp
Description: PGP signature


Re: chroot

2004-09-24 Thread Matthew Seaman
On Thu, Jul 18, 2002 at 10:22:59PM -0400, Michael Sharp wrote:
> I installed ( or so I thought ) a chroot env last night and ran into some
> difficulties.  Could someone very familiar with openssh/chroot glance
> over http://probsd.ws/chroot.txt   and tell me what I did wrong please?
> 
> chroot.txt is an EXTREMELY detailed example of what I did, and script
> output of the ssh connection to the chroot.

Hmmm... you are almost reinventing the concept of jail(8) here, which
might be a better solution for you.  The main difference from what
you're doing is that a jailed sshd process would get it's own separate
IP number.

Some things you might find usefull:

i) Copy /dev/MAKEDEV into your chrooted area and use that to create
the device files you need:

cp -p /dev/MAKEDEV /home/chrootuser/dev
sh /home/chrootuser/dev/MAKEDEV jail

 --- the `jail' target should get you an appropriate set of devices.

ii) Set up an additional logging socket in your chroot area and modify
your syslogd flags to pick up syslog messages from there.  You'll also
need a copy of /etc/localtime in the chroot area so that your syslog
messages get the correct timestamp.:

mkdir -p /home/chrootuser/var/run
cp -p /etc/localtime /home/chrootuser/etc/localtime
cp /etc/rc.conf /etc/rc.conf.bak
echo 'syslogd_flags="-s -l /home/chrootuser/var/run/log"' >> /etc/rc.conf
kill `cat /var/run/syslogd.pid`
/usr/sbin/syslogd -s -l /home/chrootuser/var/run/log

You can then turn up the logging level in
/home/chrootuser/etc/ssh/sshd_config by altering the LogLevel value: a
LogLevel of DEBUG3 will give you a great deal of output showing a blow
by blow account of just about everything the sshd does.

iii) Make sure you can resolve addresses in the DNS from your chroot
environment.  It should be sufficient to copy over /etc/resolv.conf

cp -p /etc/resolv.conf /home/chrootuser/etc/resolv.conf

iv) If you want to be able to run ps(1) from the chroot area, then you
need to mount a procfs(5) file system inside your chroot area.  This
isn't really necessary for sshd to operate correctly though:

cp /etc/fstab /etc/fstab.bak
cat <>/etc/fstab
proc/home/chrootuser/proc   procfs  rw  0   0
EOF
mount /home/chrootuser/proc

cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   26 The Paddocks
  Savill Way
Tel: +44 1628 476614  Marlow
Fax: +44 0870 0522645 Bucks., SL7 1TH UK

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-security" in the body of the message

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: to make or add a package

2004-09-24 Thread Mike Meyer
[Text formatting corrected.]

In <[EMAIL PROTECTED]>, David Bear <[EMAIL PROTECTED]> typed:
> I'm very impressed with the ports collection.

[Pat jkh on the back, though it's a long reach from here.]

> I have found there are two was to install a port, through pkg_add or
> the make.  I was wondering that if a port were a make, if the
> compiler would do any optimizations on the final executable,
> therefore giving me a faster/smaller/whatever application.  Maybe
> there would be no significant difference.  But, if I have the time
> to wait, is it worth it?

You can set CFLAGS in /etc/make.conf, and those optimizations/machine
types will be used at build time. Whether that makes a difference to
you is up to you.

You can also set build options to change the location where the
executables live - though that tends to cause some ports to fail - or
specify what parts of the package you do/don't want built.

Personally, I always build from ports. If nothing else, having the
source handy is worth a little extra time.

  http://www.mired.org/consulting.html
Independent WWW/Perforce/FreeBSD/Unix consultant, email for more information.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: creating user dirs

2004-09-24 Thread Karl Vogel
>> On Tue, 7 Jan 2003 13:44:53 +0200, 
>> Lauri Laupmaa <[EMAIL PROTECTED]> said:

L> Is there a simple solution for creating all user directories under
L> /home?  So, I have clean /home filesystem and hundreds of users in
L> /etc/*passwd. Hopefully there is some simple command or script :)

   Create a subset of the passwd file with the user, group, and home
   directory only:

 # cut -f1,4,6 -d: /etc/passwd | grep /home/ | sed -e 's/:/ /g' > /tmp/pw

   Create the directory tree.  You need the '-p' flag in mkdir if you
   have multiple levels of directories under /home:

 # awk '{print "mkdir -p", $3}' /tmp/pw | sh

   Next, set permissions.  Use 750 instead of 755 if you don't want
   world read access to user's home directories:

 # awk '{print "chmod 755", $3}' /tmp/pw | sh

   If you want to populate the home directories with some default dot files
   (.profile, etc) you can do something like

 # cd /etc/skel
 # awk '{print "find . -print | cpio -pdum", $3}' /tmp/pw 

   Finally, set ownerships.  This assumes you want the user's home
   directory and files owned by the user and the default user's group:

 # awk '{print "chown -R", $1"."$2, $3}' /tmp/pw | sh
 # rm /tmp/pw

-- 
Karl Vogel  I don't speak for the USAF or my company
[EMAIL PROTECTED]  http://www.pobox.com/~vogelke

If all the veins in your body were laid end to end, you'd be dead.
--unknown

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Sshd fix

2004-09-24 Thread FreeBSD user
cd /usr/ports/security/openssh-portable && make -DOPENSSH_OVERWRITE_BASE
install distclean

On Fri, 28 Jun 2002, Scott Gerhardt wrote:

> For the sshd fix, could't I just strip the base openssh from the system and
> install the updated openssh-3.4 from the ports?
>
> If so, what is the best method to disable/eliminate openssh from the base
> system?
>
>
> Have a happy Canada Day weekend :-)
>
> Regards,
>
>
> --
> Scott Gerhardt, P.Geo.
> Gerhardt Information Technologies [G-IT]
>
>
>
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-questions" in the body of the message
>
>
>


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-security" in the body of the message

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Deleted files not releasing their space (was Re: syslog message wrt inodes)

2004-09-24 Thread Duncan Anker
On Wed, 2003-01-29 at 13:17, David Bear wrote:

> The problem is that I am running snort and its creating hundreds of
> entries in /var/log/snort -- one directory for each alert generated by
> an IP address.  then specific info on that alert in a file under each
> directory.  So -- aside from the standard log files, the will be a
> bazillion files and directories that snort will create.. I know one
> solution would be to create a separate file system for snort, then
> mount it at /var/log/snort --- that would likely be the safest.  Then
> if it ever ran out of inodes, /var/log would still function.  
> 
> 
> but then, this is an old box and I don't have another hard drive to
> throw in it...
> 
> I think stopping and restarting snort did the trick though.

You could also, rather than deleting the files, do something like this:

cat /dev/null > /var/log/snort/whatever.log

This will empty the file without the problem of losing the filehandle.
Seems to work in the majority of cases.

> 
> 
> 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: pkg_upgrade ?

2004-09-24 Thread Mike Meyer
In <[EMAIL PROTECTED]>, David Bear <[EMAIL PROTECTED]> typed:
> I do have cvsup installed, and can run cvsup to update my ports
> collection.  My question is if I already have a package installed,
> running cvsup, the make install again for a preexisting port will mess
> up the pkg-data base right?

Wrong. If you are installing a port a second time, "make install" will
refuse to install the port because it's already installed. If you are
installing an updated port, then the pkg-data will be in a different
place because the port has a different name. The latter case may leave
parts of the first port laying around unused, and deinstalling it will
probably break the second port.


>  So, if I only want to upgrade a single
> port, is the recommended way
> 1) pkg_deinstall
> 2) cvsup ports collection
> 3) pkg_install again (or make install)
> This seems rather poor as I don't want to have all the downtime
> between deinstalling and installing again.

Try this:

1) cvsup ports collection
2) make
3) pkg_deinstall
4) make install

> If I cvsup ports and then make install, is there a fix to update the
> pkg data base?

It's not needed.

  http://www.mired.org/consulting.html
Independent WWW/Perforce/FreeBSD/Unix consultant, email for more information.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: pkg_upgrade ?

2004-09-24 Thread Matthew Smith
On Tue, 2003-03-18 at 12:56, Mike Meyer wrote:
> In <[EMAIL PROTECTED]>, David Bear <[EMAIL PROTECTED]> typed:
> > I do have cvsup installed, and can run cvsup to update my ports
> > collection.  My question is if I already have a package installed,
> > running cvsup, the make install again for a preexisting port will mess
> > up the pkg-data base right?
> 
> Wrong. If you are installing a port a second time, "make install" will
> refuse to install the port because it's already installed. If you are
> installing an updated port, then the pkg-data will be in a different
> place because the port has a different name. The latter case may leave
> parts of the first port laying around unused, and deinstalling it will
> probably break the second port.
> 
> 
> >  So, if I only want to upgrade a single
> > port, is the recommended way
> > 1) pkg_deinstall
> > 2) cvsup ports collection
> > 3) pkg_install again (or make install)
> > This seems rather poor as I don't want to have all the downtime
> > between deinstalling and installing again.
> 
> Try this:
> 
> 1) cvsup ports collection
> 2) make
> 3) pkg_deinstall
> 4) make install
> 
> > If I cvsup ports and then make install, is there a fix to update the
> > pkg data base?
> 
> It's not needed.
> 
>   http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: pkg_upgrade ?

2004-09-24 Thread Mike Meyer
In <[EMAIL PROTECTED]>, Matthew Smith <[EMAIL PROTECTED]> typed:
> Of course, this method does not work if there are any packages/ports
> depending on the port you are upggrading.  The pkg_deinstall will fail
> because of the dependencies.  I believe a pkg_deinstall -f will forcibly
> remove the package anyway.  Unfortunately, I still sometimes find the
> dependent ports need to be recompiled for the new version of the port
> you are installing.

Yup. That's what portupgrade is for.

  http://www.mired.org/consulting.html
Independent WWW/Perforce/FreeBSD/Unix consultant, email for more information.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: samba from ports

2004-09-24 Thread Stijn Hoop
On Tue, Apr 15, 2003 at 11:45:25AM -0700, David Bear wrote:
> I cvsup today my ports collection and made samba.
> 
> now the samba deamon says its 2.2.8a  which I thought was vulnerable.
> Is this not fixed in the ports collection?  or, if so, how can I tell
> if I have a fixed samba.  the vunlerability is pretty bad, and since
> it was announce last monday (8 days ago) I assumed the awesome ports
> maintainers for freebsd would have the new on in place...

Samba 2.2.8a is not vulnerable according to the samba webpage. The
FreeBSD security advisory was a bit unclear with regard to the version
numbers due to a comma between the not-vulnerable version numbers.

HTH,

--Stijn

-- 
Beware of he who would deny you access to information. For in his heart
he thinks himself your master.
-- Sid Meier, "Sid Meier's Alpha Centauri"


pgpr8vhE9pM0Y.pgp
Description: PGP signature


Re: batchmode adding user accounts

2004-09-24 Thread Dan Nelson
In the last episode (Apr 23), David Bear said:
> I have migrated a linux box to freebsd.  I would like to add all the
> user accounts from linux to bsd but the format of /etc/passwd vs
> master.password is problematic.
> 
> what I would like to try is pull out the user id from my old passwd
> file and somehow batchmode add them to my new system.  I can use awk
> to get the old ids.  But is there utility that will accept a list of
> user ids to add to master.password?

The passwd(5) manpage has an awk script at the bottom that will convert
regular passwd to master.passwd format.

-- 
Dan Nelson
[EMAIL PROTECTED]

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: afpl vs gnu ghostscript

2004-09-24 Thread parv
in message <[EMAIL PROTECTED]>,
wrote David Bear thusly...
>
> can anyone tell me the difference between afpl ghostscript and gnu
> ghostscript in the ports collection.  afplghostscript is at v8, while
> gnu ghostscript is a lowever number..
> 
> other than the license (gpl vs ?) are there functional differences?

Depending on how you compile any of these ports thru the annoying
interactive dialog, things may or may not work sometimes...

  http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/47768


  - parv

-- 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: scsi tape curiousity

2004-09-24 Thread Dan Nelson
In the last episode (May 27), David Bear said:
> Now the question is, when I upgraded my second server, I had to change
> scsi hardware to an adaptec 29160 as my older buslogix/mylex card was
> not supported under freebsd.  I had to go with a wide scsi controller
> becuase my tape unit is an external device that requires wide scsi.
> After all the hardware was ready, and FBSD was installed, I went to
> restore my home directories that were on tape.  My tape unit behaved
> poorly and soon I started to get many strange errors from the kernel.  
> 
> The last message I caught was
> spec_getpages:(#da/0x2) I/O read failure (error-6) bp 0xc68321bc
> vo 0xcd379ec0
> 
> after that the system becomes unreadable.
> 
> I called the cybernetics people (maker of the tape unit) and their
> recommendation was to put the tape unit on a separate scsi controller
> from the hard drives.  I didn't want to do this since but did anyway.
> It seems to have fixed the problem.  I can now use the tape unit.  The
> question is
> 
> 1) my first FSBD 4.3 system works perfectly find with a single scsi
> card and all devices attached to it (though it is a different) model
> tape unit.  Why would my second system barf when set up that way.

Most likely bad termination.  Make sure all the cables are seated well,
make sure you're got active terminators, and make sure that if all your
devices are LVD, you have LVD terminators.
 

-- 
Dan Nelson
[EMAIL PROTECTED]

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: scsi tape curiousity

2004-09-24 Thread Dan Nelson
In the last episode (May 28), David Bear said:
> On Tue, May 27, 2003 at 11:43:48PM -0500, Dan Nelson wrote:
> > In the last episode (May 27), David Bear said:
> > > I called the cybernetics people (maker of the tape unit) and
> > > their recommendation was to put the tape unit on a separate scsi
> > > controller from the hard drives.  I didn't want to do this since
> > > but did anyway. It seems to have fixed the problem.  I can now
> > > use the tape unit.  The question is
> > 
> > Most likely bad termination.  Make sure all the cables are seated
> > well, make sure you're got active terminators, and make sure that
> > if all your devices are LVD, you have LVD terminators.
> 
> so the guy from cybernetics was feeding me BS?  ie you can safely run
> tapes on hard drives on the same scsi chain?

Of course.  The main issue is that since each device on SCSI can
negotiate its own speed with the controller, an ancient SCSI tape drive
with a 5MB/sec write speed that negotiated a 10MB/sec bus speed with
the controller could tie up the SCSI bus 50% of the time just to
transfer data.  If the server is trying to do other stuff while a
backup is running it can degrade performance noticeably.

If your tape drive really is LVD-capable, it's not an issue.  Even a
15MB/sec drive will only tie up 20% of the SCSI bus bandwidth at full
speed, assuming it negotiated an LVD-80 connection to the server.
 
> I think all drives are lvd AND I know I have an active lvd terminator
> -- it cost me $30!  But, I do have cdrom ron the 50 pin bus.  It is
> terminated using the cdrom internal terminator.  I wonder...

On the 29160 cards, the internal SE plugs are searated from the LVD/SE
plugs by a bridge chip, so your cdrom should not affect your other
devices' ability to negotiate LVD mode on their segment of the cable. 
You may want to explicitly tell your controller to terminate the top 8
bits of the bus only; sometimes the autodetect setting doesn't work.

Running "camcontrol inq da0" (then cd0, then sa0) will tell you what
speed each device negotiated with the controller.

-- 
Dan Nelson
[EMAIL PROTECTED]

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: serial ATA interface

2004-09-24 Thread Ceri Davies
On Tue, May 13, 2003 at 07:02:47PM -0700, David Bear wrote:
> I just learned of the new hardware serial ata standard -- much faster
> throughput, different form factor, etc.  does freebsd support it now
> or does it look enough like standard ata that freebsd doesn't care?

sos already committed support for a promise s-ata controller, making
FreeBSD first to support this as far as I'm aware.
I don't think that made it to -STABLE yet though.

Ceri
-- 
User: DO YOU ACCEPT JESUS CHRIST AS YOUR PERSONAL LORD AND SAVIOR?
Iniaes: Sure, I can accept all forms of payment.
   -- www.chatterboxchallenge.com

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: batchmode adding user accounts

2004-09-24 Thread Jonathan Chen
On Wed, Apr 23, 2003 at 10:28:36PM -0700, David Bear wrote:
> I have migrated a linux box to freebsd.  I would like to add all the
> user accounts from linux to bsd but the format of /etc/passwd vs
> master.password is problematic. 
> 
> what I would like to try is pull out the user id from my old passwd
> file and somehow batchmode add them to my new system.  I can use awk
> to get the old ids.  But is there utility that will accept a list of
> user ids to add to master.password?

pw(8) is your friend.
-- 
Jonathan Chen <[EMAIL PROTECTED]>
--
 Power corrupts, Absolute Power is pretty neat

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: error in gnughostscript make

2004-09-24 Thread Kris Kennaway
On Wed, Apr 23, 2003 at 06:37:08PM -0700, David Bear wrote:

> any advice?

Probably one of the ports upon which ghostscript depends is
out-of-date.  Use a tool like portupgrade to upgrade all dependent
ports in the correct order.

Kris


pgpY4K4MC8rTR.pgp
Description: PGP signature


Re: max group name length

2004-09-24 Thread David Landgren
David Bear wrote:
was just trying to determine the maximum string length of a group
name.
found 
struct group {
 char*gr_name;   /* group name */

but no size.
any pointers (with limits)?
Hmm, I had a browse through the kernel source for a while but didn't 
find anything definite. What I do know is that you should endeavour to 
keep the length no greater than 8. Up to 15 is probably ok as well on 
modern kernels, and group names longer than 15 is getting a bit silly.

Sorry no to have anything more precise.
David
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: restoring accounts

2004-09-24 Thread Ruben de Groot
On Tue, Jun 10, 2003 at 04:40:31PM -0700, David Bear typed:
> I'm wondering, if I have a copy of /etc/master.password, is it better
> to just copy that over the default installed version? or to try write
> some kind of script to read it, and recreate accounts from it using
> pw?  
 
Try:
pwd_mkdb /path/to/your/master.passwd

> -- 
> David Bear
> phone:480-965-8257
> fax:  480-965-9189
> College of Public Programs/ASU
> Wilson Hall 232
> Tempe, AZ 85287-0803
>  "Beware the IP portfolio, everyone will be suspect of trespassing"
> ___
> [EMAIL PROTECTED] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"

-- 
Howe's Law:
Everyone has a scheme that will not work.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: pkg_upgrade ?

2004-09-24 Thread CARTER Anthony
Nope.

pkgdb -F

fixes the package database and removes old entries...

Anthony

On Tue, 2003-03-18 at 17:55, David Bear wrote:
> I've been searching the handbook and can't seem to find what I'm
> looking for regarding upgrading a port.  I know there is
> portupgrade... which I'd like to avoid because I don't want to install
> ruby as well.  
> 
> I do have cvsup installed, and can run cvsup to update my ports
> collection.  My question is if I already have a package installed,
> running cvsup, the make install again for a preexisting port will mess
> up the pkg-data base right?  So, if I only want to upgrade a single
> port, is the recommended way
> 
> 1) pkg_deinstall
> 2) cvsup ports collection
> 3) pkg_install again (or make install)
> 
> This seems rather poor as I don't want to have all the downtime
> between deinstalling and installing again.
> 
> If I cvsup ports and then make install, is there a fix to update the
> pkg data base?

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Sshd fix

2004-09-24 Thread Scott Robbins
On Fri, Jun 28, 2002 at 06:52:40PM -0600, Scott Gerhardt wrote:
> For the sshd fix, could't I just strip the base openssh from the system and
> install the updated openssh-3.4 from the ports?
> 
> If so, what is the best method to disable/eliminate openssh from the base
> system?

This is what I did, and it seems to work. (I'd be grateful if someone
pointed out anything I did wrong.  Part of it was gotten from a post
by someone else, and the rest I figured out, for better or worse, on
my own.

cvsup ports to make sure you have 3.4.
Make install.
Edit /etc/rc.conf
Change enable_sshd="YES" to a "NO"
add the line
sshd_program="/usr/local/sbin/ssshd"
In /usr/local/etc/rc.d you'll find that it's put a script called
sshd.sh.sample.  Rename that to sshd.sh

You've probably seen the various advisories that suggest taking the
ChallengeResponse line and changing it to no  (and uncomment it as
well)

Lastly, until I renamed /usr/sbin/sshd, it kept giving me the old
version number--so, stop sshd, and rename /usr/sbin/sshd to something
else. Then, start the new one 
/usr/local/sbin/sshd

This seems to work.

HTH
Scott Robbins


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-security" in the body of the message

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: chroot

2004-09-24 Thread Tony Landells
How very interesting...

For a start, you can't copy devices with "cp"--you need something
smarter like "tar", "cpio", ...  Pretty much anything that could
be used for backups should understand the niceties of copying a
device.  As an alternative you could use "mknod" to create them.
Here is how to do it with cpio:

cd /dev
find null random urandom -print | cpio -pdmuv /home/chrootuser/dev/

and then compare the results with ls -l to make sure you're happy.

Specifically, using "cp" to copy /dev/null is a method of creating
a new empty file, or completely emptying out an existing file.

Secondly, are you sure you weren't connected?  If you could use
control-d to terminate the connection it looks to me like you were
connected but had no prompt.  Control-d is an "end of file" indicator;
when you give it to a shell that means "there are no more commands".
Since the sole purpose of a shell is to let you execute commands, this
results in it terminating (as it does for any program that primarily
processes input).

However "end of file" is only meaningful if it's read by something.
It doesn't generate any sort of "signal" to catch the attention of
a hung program.

Try connecting again and typing a command that should work, like
"/bin/ls /bin" or even something more basic like "set" (which is
builtin to all the shells).  If you get something, you're connected.

Tony
-- 
Tony Landells   <[EMAIL PROTECTED]>
Senior Network Engineer Ph:  +61 3 9677 9319
Australian Clearing Services Pty LtdFax: +61 3 9677 9355
Level 4, Rialto North Tower
525 Collins Street
Melbourne VIC 3000
Australia



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-security" in the body of the message

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: `pkg_info | grep -i openssh` ; echo "2.9 vs 3.0.2?"

2004-09-24 Thread Scott Robbins
On Sun, 7 Apr 2002 00:00:55 -0800 (PST)
Peter Leftwich <[EMAIL PROTECTED]> wrote:

> prompt$ pkg_info | grep -i openssh
> openssh-3.0.2   OpenBSD's secure shell client and server (remote
> login prog
> 
> I just upgraded (or tried to upgrade) openssh on my FreeBSD
> 4.5-RELEASE box using /stand/sysinstall but I get this (ver. 2.9??)
> when I type:
> 
> prompt$ ssh -V
> OpenSSH_2.9 FreeBSD localisations 20011202, SSH protocols 1.5/2.0,
> OpenSSL 0x0090601f
> 
> pkg_help -r --source majordomo?  ;-)
> 
> 

Probably the simplest way to upgrade to 3.1 (which seems to be advisable
in itself) is 

Get the source tarball from
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.1p1.tar.gz
 Unzip it.
tar -zxvf openssh-3.1p1.tar.gz
CD to the new directory
cd openssh-3.1p1
Configure it with the following parameters
./configure --with-pam --sysconfdir=/etc/ssh --prefix=/usr
make; make install
killall -HUP sshd

I posted about this recently, and someone mentioned that there is a way
to get the same result by using ports and referred me to another web
page.  After looking at that page, it seemed to me that this way is far
less work.(This solution given me by Michael Smith, as I don't want to
steal the credit)

Thanks
Scott Robbins

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-security" in the body of the message

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


chroot

2004-09-24 Thread Michael Sharp
I installed ( or so I thought ) a chroot env last night and ran into some
difficulties.  Could someone very familiar with openssh/chroot glance
over http://probsd.ws/chroot.txt   and tell me what I did wrong please?

chroot.txt is an EXTREMELY detailed example of what I did, and script
output of the ssh connection to the chroot.

Thx, michael
[EMAIL PROTECTED]



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-security" in the body of the message

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: SSH TCP forwarding: works with v1, not with v2 ssh

2004-09-24 Thread Alexander Kabaev
> I feel like a newbie, but I can't tell how to rebuild just the openssh
> contributed src, rather than the entire OS.  Doing a basic make in the
> dir fails
You should run make in /usr/secure/lib/libssh, /usr/secure/usr.bin/ssh
and /usr/secure/usr.sbin/sshd. 

Or just rebuild and install everything under /usr/secure.

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-security" in the body of the message

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Slow page loading in firefox

2004-09-24 Thread Choy Kho Yee
On 2004/09/24, at 13:15, Choy Kho Yee wrote:
Hello, I am using FreeBSD 5.3BETA5. I haven't do anything to the 
kernel or anything system-related. I installed firefox 0.9.3. It takes 
more than 10 seconds to load mozilla's homepage. Of course other 
accessing to other sites gave the same results.

Then, to compare, I installed opera 7.54 and it loads pages in less 
than 2 seconds. However, firefox is my favourite browser. So, is there 
any way that I can know what is wrong? Does firefox keeps some logs 
when it connects? Or has anyone else experience the same problem?

btw, I installed softwares from the ports collection.
I solved the problem myself. I think the culprit is the IPv6 option in 
the kernel. So I disable it and recompiled the kernel now firefox works 
like it is supposed to work.

---
Choy Kho Yee
url: http://dotkoyi.infoseek.ne.jp/
blog: http://dotkoyi.blogspot.com/
"There are only 10 types of people in the world, i.e. those who 
understand binary numbers and those who do not."

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: creating user dirs

2004-09-24 Thread Chris
Karl Vogel wrote:
On Tue, 7 Jan 2003 13:44:53 +0200, 
Lauri Laupmaa <[EMAIL PROTECTED]> said:

L> Is there a simple solution for creating all user directories under
L> /home?  So, I have clean /home filesystem and hundreds of users in
L> /etc/*passwd. Hopefully there is some simple command or script :)
   Create a subset of the passwd file with the user, group, and home
   directory only:
 # cut -f1,4,6 -d: /etc/passwd | grep /home/ | sed -e 's/:/ /g' > /tmp/pw
   Create the directory tree.  You need the '-p' flag in mkdir if you
   have multiple levels of directories under /home:
 # awk '{print "mkdir -p", $3}' /tmp/pw | sh
   Next, set permissions.  Use 750 instead of 755 if you don't want
   world read access to user's home directories:
 # awk '{print "chmod 755", $3}' /tmp/pw | sh
   If you want to populate the home directories with some default dot files
   (.profile, etc) you can do something like
 # cd /etc/skel
 # awk '{print "find . -print | cpio -pdum", $3}' /tmp/pw 

   Finally, set ownerships.  This assumes you want the user's home
   directory and files owned by the user and the default user's group:
 # awk '{print "chown -R", $1"."$2, $3}' /tmp/pw | sh
 # rm /tmp/pw
Someone better fix the system clock
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: [Samba] Re: Samba public directory on FreeBSD

2004-09-24 Thread Gary Dunn
On Thu, 2004-09-23 at 13:41, W. D. wrote:
> 
> Thanks for the info.
> 
> I looked into this a little closer.  In 'FreeBSD Unleashed', on page
> 38 it says: "/home  This is where the users' home directories are
> located.  It is often located under the /usr partition.  If you are
> going to have a lot of users, and you expect them to have a lot of
> files, you might want to put /home on its own partition, or possibly
> even give /home an entire disk."
> 
> In 'The Complete FreeBSD' (4th edition), on page 70: "Use the rest
> of the space on disk for a /home file system, as long as it's 
> possible to back it up on a single tape.  Otherwise, make multiple file
> systems.  /home is the normal directory for user files."
> 
> In the online handbook,
> http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/install-steps.html,
> Table 2-2: "/usr   Rest of disk   All your other files will typically be stored in 
> /usr and its subdirectories."
> 
> Alrighty, then.  I am confused.  On the 3 boxes that I just installed
> FreeBSD 4.9 on, none of them even have a /home or a /usr/home directory.  
> So, there certainly isn't a /home partition.  Is /home created as its
> own slice in 5.x?  

FreeBSD allows you a lot of flexibility, including how you lay out your
disks. The lack of agreement is good.

> These boxes have 80 GB hard drives and have the majority of that
> capacity contained in /usr.

The way I set up a system, / and /usr do not change much. /var and /home
are where the action is. And I link /home to /usr/home, so that
/home/aUserName is the same as /usr/home/aUserName.

> 
> Based on all this advice and research, I think I will create a new
> directory under /usr called /home.  Under this, I'll create 
> /samba/public  (full path: /usr/home/samba/public).
> 
> Any objections, or comments?

Yes, go ahead and set this up. Just keep in mind that at some point in
the future you might want to redesign you layout -- when you set up your
next server :-)

Gary Dunn
Honolulu


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Dangerously dedicated vs. fully dedicated, etc.

2004-09-24 Thread Mike Meyer
In <[EMAIL PROTECTED]>, Ian Dowse <[EMAIL PROTECTED]> typed:
> As to the issue of BIOSes disliking DD modes, there have been a few
> different reasons suggested.

I had a dual xeon BIOS that had "anti-virus" code. If the boot block
didn't have the write MBR on it, it rewrote the first 63 sectors,
clobbering my DD (type B) disklabel. It could be turned off in the
BIOS, but caused me (not the kernel) to panic the first time it
happened.

  http://www.mired.org/consulting.html
Independent Network/Unix/Perforce consultant, email for more information.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Dangerously dedicated vs. fully dedicated, etc.

2004-09-24 Thread Mike Meyer
In <[EMAIL PROTECTED]>, Ian Dowse <[EMAIL PROTECTED]> typed:
> In message <[EMAIL PROTECTED]>, [EMAIL PROTECTED] writes:
> >Mike, I'll pay back your effort in replying to this long thing by
> >working up a patch for the "disklabel" manpage (at least) and, if you
> >want, I'll CC you so you can veto things you don't like.  I do worry
> (B) Dedicated format created by sysinstall
> 
>   
>   
>   sector 0: boot1 and the DOS slice table, where
>   the slice table contains one slice
>   (slice 1) covering the entire disk,
>   including sector 0.
>   sector 1:   disklabel
>   sector 2-15:boot2
>   sectors 16-31:  'a' partition filesystem superblock
> 
>  In this case, there is no boot0, and boot1 serves as the boot
>  loader that is invoked by the BIOS. Here, all of the boot code
>  is contained within the first slice and also within the first
>  partition. Again, the 8k reserved at the start of every ffs
>  filesystem protects the boot code. Sysinstall sets up fstab to
>  refer to the partitions as e.g. /dev/ad0s1a (I think).

This can also be referred to as /dev/ad0a, like your C case. I
personally prefer that because it lets you know that the disk is DD.

  http://www.mired.org/consulting.html
Independent Network/Unix/Perforce consultant, email for more information.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: serial ATA interface

2004-09-24 Thread David Kelly
On May 14, 2003, at 5:00 AM, Ceri Davies wrote:
On Tue, May 13, 2003 at 07:02:47PM -0700, David Bear wrote:
I just learned of the new hardware serial ata standard -- much faster
throughput, different form factor, etc.  does freebsd support it now
or does it look enough like standard ata that freebsd doesn't care?
sos already committed support for a promise s-ata controller, making
FreeBSD first to support this as far as I'm aware.
I don't think that made it to -STABLE yet though.
I haven't tried it on the 4 branch but in 5.2.1 and 5.3-BETA SATA works 
just fine for me:

ad4: 157066MB  [319120/16/63] at ata2-master 
SATA150
ad6: 157066MB  [319120/16/63] at ata3-master 
SATA150

IIRC the SATA spec is downward compatible with PATA so at least in 
theory a SATA drive and interface will work everywhere.

As for speed and performance claims, "Bah humbug." The initial SATA 
interface is 150 MB/sec. I've never seen a single drive sustain over 55 
MB/sec. so as long as your interface is a bit faster than your hardware 
then its not an issue. Where the real gains are to be made is with the 
command set cleanup being undertaken with SATA. Useful multitasking 
features from SCSI are working their way into the 2nd generation of 
SATA drives.

SATA uses a nice small cable and connector. Each drive has its own 
cable without the master/slave silliness so there could/should be a 
performance increase where one uses both drives at the same time.

--
David Kelly N4HHE, [EMAIL PROTECTED]

Whom computers would destroy, they must first drive mad.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: TeXmacs port

2004-09-24 Thread Giorgos Keramidas
: Date: Thu, 06 Feb 2003 23:29:16 -0600
: From: Mike Meyer <[EMAIL PROTECTED]>
: Subject: Re: TeXmacs port
: To: [EMAIL PROTECTED]
: Cc: Giorgos Keramidas <[EMAIL PROTECTED]>, [EMAIL PROTECTED]

Wow, I didn't even remember having posted in this thread anymore!

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


How to get best results from FreeBSD-questions

2004-09-24 Thread Greg Lehey

How to get the best results from FreeBSD questions.
===

Last update $Date: 2004/09/19 02:40:48 $

This is a regular posting to the FreeBSD questions mailing list.  If
you got it in answer to a message you sent, it means that the sender
thinks that at least one of the following things was wrong with your
message:

- You left out a subject line, or the subject line was not appropriate.
- You formatted it in such a way that it was difficult to read.
- You asked more than one unrelated question in one message.
- You sent out a message with an incorrect date, time or time zone.
- You sent out the same message more than once.
- You sent an 'unsubscribe' message to FreeBSD-questions.

If you have done any of these things, there is a good chance that you
will get more than one copy of this message from different people.
Read on, and your next message will be more successful.

This document is also available on the web at
http://www.lemis.com/questions.html.

=

Contents:

I:Introduction
II:   How to unsubscribe from FreeBSD-questions
III:  Should I ask -questions, -newbies or -hackers?
IV:   How to submit a question to FreeBSD-questions
V:How to answer a question to FreeBSD-questions

I: Introduction
===

This is a regular posting aimed to help both those seeking advice from
FreeBSD-questions (the "newcomers"), and also those who answer the
questions (the "hackers").

   Note that the term "hacker" has nothing to do with breaking
   into other people's computers.  The correct term for the latter
   activity is "cracker", but the popular press hasn't found out
   yet.  The FreeBSD hackers disapprove strongly of cracking
   security, and have nothing to do with it.

In the past, there has been some friction which stems from the
different viewpoints of the two groups.  The newcomers accused the
hackers of being arrogant, stuck-up, and unhelpful, while the hackers
accused the newcomers of being stupid, unable to read plain English,
and expecting everything to be handed to them on a silver platter.  Of
course, there's an element of truth in both these claims, but for the
most part these viewpoints come from a sense of frustration.

In this document, I'd like to do something to relieve this frustration
and help everybody get better results from FreeBSD-questions.  In the
following section, I recommend how to submit a question; after that,
we'll look at how to answer one.

II:  How to unsubscribe from FreeBSD-questions
==

When you subscribed to FreeBSD-questions, you got a welcome message
from [EMAIL PROTECTED]  In this message, amongst
other things, it told you how to unsubscribe.  Here's a typical
message:

  Welcome to the [EMAIL PROTECTED] mailing list!

If you ever want to unsubscribe or change your options (eg, switch to
or from digest mode, change your password, etc.), visit your
subscription page at:

  http://lists.freebsd.org/mailman/options/freebsd-questions/[EMAIL PROTECTED]
  
(obviously, substitute your mail address for "[EMAIL PROTECTED]").  You can
also make such adjustments via email by sending a message to:

  [EMAIL PROTECTED]
  
with the word 'help' in the subject or body (don't include the
quotes), and you will get back a message with instructions.

You must know your password to change your options (including
changing the password, itself) or to unsubscribe.
  
Normally, Mailman will remind you of your freebsd.org mailing list
passwords once every month, although you can disable this if you
prefer.  This reminder will also include instructions on how to
unsubscribe or change your account options.  There is also a button on
your options page that will email your current password to you.

  Here's the general information for the list you've
  subscribed to, in case you don't already have it:

  FREEBSD-QUESTIONS   User questions
  This is the mailing list for questions about FreeBSD.  You should not
  send "how to" questions to the technical lists unless you consider the
  question to be pretty technical.

Normally, unsubscribing is even simpler than the message suggests: you
don't need to specify your mail ID unless it is different from the one
which you specified when you subscribed.

If Majordomo replies and tells you (incorrectly) that you're not on
the list, this may mean one of two things:

  1.  You have changed your mail ID since you subscribed.  That's where
  keeping the original message from majordomo comes in handy.  For
  example, the sample message above shows my mail ID as
  [EMAIL PROTECTED]  Since then, I have changed it to
  [EMAIL PROTECTED]  If I were to try to remove [EMAIL PROTECTED] from
  the list, it would fail: I would have to specify the name with
  which I joined.

  2.  You're subscribed to a mailing list which is subscribed to
  Free

"The Complete FreeBSD": errata and addenda

2004-09-24 Thread Greg Lehey
The trouble with books is that you can't update them the way you can a web page
or any other online documentation.  The result is that most leading edge
computer books are out of date almost before they are printed.  Unfortunately,
The Complete FreeBSD, published by O'Reilly, is no exception.  Inevitably, a
number of bugs and changes have surfaced.

"The Complete FreeBSD" has been through a total of five editions, including its
predecessor "Installing and Running FreeBSD".  Two of these have been reprinted
with corrections.  I maintain a series of errata pages.  Start at
http://www.lemis.com/errata-4.html to find out how to get the errata
information.

Have you found a problem with the book, or maybe something confusing?  Please
let me know: I'm constantly updating it.

Greg
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


please educate me on memory usage

2004-09-24 Thread Gregor Mosheh
I was looking at my top output and was surprised to
see that the bulk of my 512 MB of memory was in use,
since the server really has fairly little running.
It's not a problem, but I was wanting some
clarification on where this memory was being used, for
my own education.

The original goal was that I had figured that a lot of
memory would be unused since so little is running, and
perhaps I could allocate some more to Postgres.
Apparently nowt, but I don't quite understand all the
intricacies of what *is* using my memory.

35 processes:  1 running, 34 sleeping
CPU states:  0.0% user,  0.0% nice,  0.0% system, 
0.0% interrupt,  100% idle
Mem: 158M Active, 207M Inact, 80M Wired, 20M Cache,
60M Buf, 33M Free
Swap: 2000M Total, 6848K Used, 1994M Free

So, 158 MB of memory in use. Does that include
anything other than process' memory, e.g. shared
memory, kernel memory, some of the fs buffer? If I add
up the VSZ column from 'ps aux' I get 110 MB.

The server's only processes of interest are MySQL,
Postgres, and Apache httpd. There are cron, sendmail,
etc. but these are all <1M usage according to both top
and ps.

MySQL has VSZ 38 MB and RSS 4 MB.

Postgres (incl stats collectors) has VSZ 25 MB and RSS
<1 MB. There's also the shared memory: ipcs agrees
with my postgresql.conf settings: 2 MB of shared
memory buffers.

Apache 1.3 has 15 processes, each using 3.6 MB VSZ and
1.5 MB RSS. I was of the impression that the bulk of
this memory was shared with the parent process, no?

So where's the rest of the memory going?

The 80M Wired is interesting, since I don't know where
it's going. I presume that PG's 2 MB of shared buffers
are wired (though I saw an email today that implied
otherwise), but how could I track down the rest of it?





__
Do you Yahoo!?
Yahoo! Mail is new and improved - Check it out!
http://promotions.yahoo.com/new_mail
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


info on kernel modules

2004-09-24 Thread Robert Huff

I'm looking for a brief (1-2 page) introduction to kernel
modules - what they are, how they work, trade-off vs complied-in
devices, etc..  (Looked in the Handbook and FAQ, searched the website
and found nothing in the top 100 responses.)

Thanks,


Robert Huff



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Xorg and ATI Rage-Mobility

2004-09-24 Thread Joe Altman
On Thu, Sep 23, 2004 at 02:22:53PM -0400, [EMAIL PROTECTED] wrote:
>
> I have tried the default xorg.conf (from Xorg -configure), one that I edited,
>  All do the same thing - give a black screen,

Me, too.

> Xorg.0.log has no error messages.

Me, too.

> vendor   = 'ATI Technologies'
> device   = '01541014 Rage P/M Mobility AGP 2x'

The P/M Mobility AGP 2x matches what the laptop I have uses: an IBM
A20m.

What I see from ps ux is that both my X session and window manager
start, but (as you point out) the screen goes black.

It's almost as if xset comes on and blanks the screen, immediately
pursuant to the invocation of X, for this particular chip.

> Thanks for any ideas

I've no ideas. I've pondered and used google and the search function
for the lists; no joy. I do note that there is a recommendation to use
the gatos bits (gatos.sourceforge.net) if one wishes to use the
multimedia capabilities of this chip; this occurs during the compile
of Xorg and/or in the Xorg log. It doesn't seem to me that the
multimedia capabilities of the card are relevant to the basic use of X
for a windowing system.

-- 
One million points of light shining on the new world-order model for
fascism and tyranny. Get in line.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: please educate me on memory usage

2004-09-24 Thread epilogue
On Fri, 24 Sep 2004 09:59:52 -0700 (PDT)
Gregor Mosheh <[EMAIL PROTECTED]> wrote:

> I was looking at my top output and was surprised to
> see that the bulk of my 512 MB of memory was in use,
> since the server really has fairly little running.
> It's not a problem, but I was wanting some
> clarification on where this memory was being used, for
> my own education.

http://www.freebsd.org/doc/en_US.ISO8859-1/books/faq/misc.html#TOP-FREEMEM

hth,
epi
 
> The original goal was that I had figured that a lot of
> memory would be unused since so little is running, and
> perhaps I could allocate some more to Postgres.
> Apparently nowt, but I don't quite understand all the
> intricacies of what *is* using my memory.
> 
> 35 processes:  1 running, 34 sleeping
> CPU states:  0.0% user,  0.0% nice,  0.0% system, 
> 0.0% interrupt,  100% idle
> Mem: 158M Active, 207M Inact, 80M Wired, 20M Cache,
> 60M Buf, 33M Free
> Swap: 2000M Total, 6848K Used, 1994M Free
> 
> So, 158 MB of memory in use. Does that include
> anything other than process' memory, e.g. shared
> memory, kernel memory, some of the fs buffer? If I add
> up the VSZ column from 'ps aux' I get 110 MB.
> 
> The server's only processes of interest are MySQL,
> Postgres, and Apache httpd. There are cron, sendmail,
> etc. but these are all <1M usage according to both top
> and ps.
> 
> MySQL has VSZ 38 MB and RSS 4 MB.
> 
> Postgres (incl stats collectors) has VSZ 25 MB and RSS
> <1 MB. There's also the shared memory: ipcs agrees
> with my postgresql.conf settings: 2 MB of shared
> memory buffers.
> 
> Apache 1.3 has 15 processes, each using 3.6 MB VSZ and
> 1.5 MB RSS. I was of the impression that the bulk of
> this memory was shared with the parent process, no?
> 
> So where's the rest of the memory going?
> 
> The 80M Wired is interesting, since I don't know where
> it's going. I presume that PG's 2 MB of shared buffers
> are wired (though I saw an email today that implied
> otherwise), but how could I track down the rest of it?
> 
> 
> 
> 
>   
> __
> Do you Yahoo!?
> Yahoo! Mail is new and improved - Check it out!
> http://promotions.yahoo.com/new_mail
> ___
> [EMAIL PROTECTED] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
> 
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Problem with spamass-milter and libmilter sendmail-8.13.1

2004-09-24 Thread Matthew Seaman
On Fri, Sep 24, 2004 at 07:47:13PM +0400,  ?.?. wrote:
 
> May be problem in libmilter of senmail 8.13.1?
> 
> I have mail server with senmail 8.12.11 and
> spamass-milter and spamassiassin - work without promlem!

Nope -- spamass-milter & spamd works just fine for me with
sendmail-8.13.1 As far as I can tell, you're doing everything right.
The problem is possibly just a silly typo somewhere -- double check
the sendmail.mc file and make sure that it produces a sane
sendmail.cf.

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   26 The Paddocks
  Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
Tel: +44 1628 476614  Bucks., SL7 1TH UK


pgpN3HlVogLUh.pgp
Description: PGP signature


problems getting packets thru on router/wireless access point

2004-09-24 Thread dub20
I have a freebsd router [5.2.1] setup at home running ipf/ipnat.
everything seems to be working fine for getting out to the internet, and
accessing the box from the outside.
I'm trying to also make this system a wireless access point. Following
the steps in the handbook, i installed a wi0 card, and bridged it to the
internal interface on the router.
Everything seems to be setup probably, and my ethernet connections still
work fine. But I cant get to the internet using a wireless nic on my
laptop.
The laptop is able to connect to the network, and I can even ping
-other- systems on the network [connected thru ethernet], but I cant
ping the server or access the internet. The server isnt able to see any
wireless clients.
At first had ipfilter set default to block, i recompiled the kernel on
the server with default to pass, but that didnt seem to change anything
for the wireless.
I've had this setup working before on a 4.x system. 

when i run tcpdump -i wi0 on the server and try to access a website from
a wireless client, i get:
10:22:51.155344 arp who-has 192.168.1.1 tell 192.168.1.11
but pinging one of the other wired clients from a wireless client gets
the expected icmp echo request and reply.
Im scratching my head on this one. Im having a hard time finding
information pertaining to systems that are combining a firewall router
and wireless access point into one system.

network layout

dsl modem
   |
   |
freebsd router and WAP--
   |   |
   |   |
  wired  wireless clients  
  clients   
  

any ideas or suggestions are greatly appreciated. and if you could
please CC me, I'm not on the list. thanks
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Netscape navigator for FreeBSD5.1

2004-09-24 Thread Virupaksh Honnur

> > Hello,
> > 
> > I have a PC installed with FreeBSD5.1 and I would like to install
> > netscape on it but can't find a suitable netscape version that can run
> > on FreeBSD5.1.
> >  
> > 
> > I downloaded communicator-v476-us.x86-unknown-freebsd.tar.gz and
> > installed this version but when I execute this it gives a "exec format
> > error".
> > 
> 
> It's because it requires the aout X libraries.  They are somewhere
> in the ports section.  Make sure to make, make install when you are NOT
> running X on the system!!!  (ie: do not do this in an x window)

Could you please point me to exact library that I  need to install?.

Thanks,
-Viru
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Problem with spamass-milter and libmilter sendmail-8.13.1

2004-09-24 Thread Robert Huff

Matthew Seaman writes:

>  Nope -- spamass-milter & spamd works just fine for me with
>  sendmail-8.13.1

Make that two.



Robert Huff


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


FreeBSD 5.x SMP--> QUAD XEON SCALABILITY QUESTION

2004-09-24 Thread jromero
Posted to freebsd-smp but didn't get too many replies, so I apologize for
cross posting ahead of time.  Need to configure groupware server and
multiprotocol wireless proxy for aproximatly 2500 accounts. Application
is heavily multi threaded and willrequire alot of CPU power. The OS will
be FreeBSD 5.x Thinking of going with ServerWorks* Grand Champion HE quad
xeon server board. Has anyone had any SMP experience with quad xeon
systems on freebsd 5.x???  I'm curious to know if anyone experienced
any major technical stumbling blocks. I guess I also want to know how
well Freebsd 5.x will scale on a 4 proc. Will freeBSD 5.x utilize
a quad xeon board as efficiently as linux2.6 system???

Thanks,

JR

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: please educate me on memory usage

2004-09-24 Thread Norm Vilmer
Gregor Mosheh wrote:
I was looking at my top output and was surprised to
see that the bulk of my 512 MB of memory was in use,
since the server really has fairly little running.
It's not a problem, but I was wanting some
clarification on where this memory was being used, for
my own education.
The original goal was that I had figured that a lot of
memory would be unused since so little is running, and
perhaps I could allocate some more to Postgres.
Apparently nowt, but I don't quite understand all the
intricacies of what *is* using my memory.
35 processes:  1 running, 34 sleeping
CPU states:  0.0% user,  0.0% nice,  0.0% system, 
0.0% interrupt,  100% idle
Mem: 158M Active, 207M Inact, 80M Wired, 20M Cache,
60M Buf, 33M Free
Swap: 2000M Total, 6848K Used, 1994M Free

So, 158 MB of memory in use. Does that include
anything other than process' memory, e.g. shared
memory, kernel memory, some of the fs buffer? If I add
up the VSZ column from 'ps aux' I get 110 MB.
The server's only processes of interest are MySQL,
Postgres, and Apache httpd. There are cron, sendmail,
etc. but these are all <1M usage according to both top
and ps.
MySQL has VSZ 38 MB and RSS 4 MB.
Postgres (incl stats collectors) has VSZ 25 MB and RSS
<1 MB. There's also the shared memory: ipcs agrees
with my postgresql.conf settings: 2 MB of shared
memory buffers.
Apache 1.3 has 15 processes, each using 3.6 MB VSZ and
1.5 MB RSS. I was of the impression that the bulk of
this memory was shared with the parent process, no?
So where's the rest of the memory going?
The 80M Wired is interesting, since I don't know where
it's going. I presume that PG's 2 MB of shared buffers
are wired (though I saw an email today that implied
otherwise), but how could I track down the rest of it?


__
Do you Yahoo!?
Yahoo! Mail is new and improved - Check it out!
http://promotions.yahoo.com/new_mail
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
My guess would be MySQL, however I am no expert. My machine is running
apache, ntp, ipfw, and other typical stuff like syslog, sendmail, etc.
Mem: 11M Active, 122M Inact, 44M Wired, 28K Cache, 57 Buf, 292M Free.
I did optimize my machine using doc's I read on www.FreeBSD.org.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re:

2004-09-24 Thread Ezequiel O. Block
vola wrote:
I have a  question. 
Not long ago i have download the FreeBsd 4.10 operetion system.
By the installation i have problems.
I put the cd into the cd-rom and I restarted the computer. 
The computer boot from the cd and the installation began.
It looks all ok - the computer was  loading. But then had stop all.
The last massage was "reading time out" (or somthing like this)
had the same error and i could avoid it disabling HD UDMA support on 
pc's BIOS.


and the next massage was "resething deveises".
I think it has somethink to do with my hard drive ( Maxtor 40GB ).
Please help me with this.
( sorry for my english )
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Good luck !
--
Ezequiel O. Block
Cooperativa La Lonja.
Soporte Internet.
Buenos Aires, Argentina
F 02322-470406
T 02322-474537
E [EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Official wallpapers

2004-09-24 Thread Chuck Swiger
BartÅomiej Rutkowski wrote:
http://zeik.wns.amu.edu.pl/~r/freebsd53.png
Hey, I think it's pretty cool.
I'm still going to make suggestions, though:
- add just a touch of very deep, glowing red to Beastie; enough that the black 
of the irises of the eyes and the typical grin have enough contrast to be more 
visible

- "The new daemons unleashed" is missing an apostrophe ('): "The new daemon is 
unleashed" becomes "daemon's unleashed".  Frankly, however, I'd suggest 
something like: "The new daemon: UNLEASHED!"

I might put that under the center and maybe a little bigger, rather than 
scrunched to the far right under the "5.3".  After all, there's a lot of space 
available to play with, although only if what is now a very clean and minimal 
design doesn't become cluttered up.  I'd give it a thumbs-up.

--
-Chuck
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Boot manager problem

2004-09-24 Thread Claudiu Bichir
Hello guys!
I have 2 partitions on my hard drive (ad0) one with Windows XP, the other one with 
FreeBSD 5.0. Like usual I had problems with windows and I had to format the first 
partition and reinstall windows. But as you know the instalation deleted the FreeBSD 
boot manager. I rebooted with a FreeBSD cd and typed "fdisk -b /boot/boot0 ad0" which 
indeed brought the boot manager back but even now when I press F2 ( the key assigned 
to FreeBSD) it beeps instead of booting the system.
Is there a problem with the disk geometry ? Because if it is then I'm pretty 
helpless,I am a newbie regarding this OS.
Can I recover my data or do I have to delete the whole FreeBSD partition and reinstall 
the OS ?


-
Do you Yahoo!?
New and Improved Yahoo! Mail - Send 10MB messages!
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Boot manager problems

2004-09-24 Thread Claudiu Bichir
Hello guys!
I have 2 partitions on my hard drive (ad0) one with Windows XP, the other one with 
FreeBSD 5.0. Like usual I had problems with windows and I had to format the first 
partition and reinstall windows. But as you know the instalation deleted the FreeBSD 
boot manager. I rebooted with a FreeBSD cd and typed "fdisk -b /boot/boot0 ad0" which 
indeed brought the boot manager back but even now when I press F2 ( the key assigned 
to FreeBSD) it beeps instead of booting the system.
Is there a problem with the disk geometry ? Because if it is then I'm pretty 
helpless,I am a newbie regarding this OS.
Can I recover my data or do I have to delete the whole FreeBSD partition and reinstall 
the OS ?


-
Do you Yahoo!?
vote.yahoo.com - Register online to vote today!
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


  1   2   >