Re: portupgrade wrecked gnome!!! ~>8-(

2005-03-03 Thread epilogue
On Thu, 03 Mar 2005 20:58:50 -0800
"Karl Agee" <[EMAIL PROTECTED]> wrote:

> Here is my tale of woe.
> 
> Freebsd 4.11-stable.  I upgraded my ports using portupgrade -arR after
> cvsuping and make fetchindex and portsdb -u.  Things worked, so I went
> out and did portupgrade.
> 
> But my gnome-2.8.2 install is hosed.  It starts but gives me no
> taskbars or button bars.  Just little iconlets--one on the top, the
> "quicklaunch toolbar" for a few apps I had in it, and a little
> something at the bottom which I cannot figure out what it is supposed
> to be.
> 
> I tried doing a  make deinstall of gnome and cleared everything out of
> ports/distfiles.  But it didnt require anything new I imagine all it
> needed is still laying around here, broken.
> 
> SO, my friends, I would like to get my gnome install back
> 
> --karl


http://www.freebsd.org/gnome/docs/faq28.html

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: portupgrade wrecked gnome!!! ~>8-(

2005-03-03 Thread Michael C. Shultz
On Thursday 03 March 2005 08:58 pm, Karl Agee wrote:
> Here is my tale of woe.
>
> Freebsd 4.11-stable.  I upgraded my ports using portupgrade -arR
> after cvsuping and make fetchindex and portsdb -u.  Things worked, so
> I went out and did portupgrade.
>
> But my gnome-2.8.2 install is hosed.  It starts but gives me no
> taskbars or button bars.  Just little iconlets--one on the top, the
> "quicklaunch toolbar" for a few apps I had in it, and a little
> something at the bottom which I cannot figure out what it is supposed
> to be.
>
> I tried doing a  make deinstall of gnome and cleared everything out
> of ports/distfiles.  But it didnt require anything new I imagine all
> it needed is still laying around here, broken.
>
> SO, my friends, I would like to get my gnome install back
>
> --karl
>

Next time try upgrading with sysutils/portmanager, it may even fix the 
mess you have now.

-Mike
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: /boot like linux!

2005-03-03 Thread Anthony Atkielski
Jesse Guardiani writes:

> Then why doesn't sysinstall enable soft updates on the root FS by default?

Because the root is not often written, and any data loss on the root is
likely to have more negative effects than on other directories (often it
would be something like a kernel rebuild). So sysinstall turns it off by
default for the root. But you can turn it on if you want to.

> I don't. It hasn't worked well in the past.

Soft updates has been improved in recent releases.  It is now designed
to physically write data back to the disk in a way that keeps the
directory coherent (if not necessarily up to date) at all times.

-- 
Anthony


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Broken port: gettext

2005-03-03 Thread Kent Stewart
On Thursday 03 March 2005 08:00 pm, Andrew Lewis wrote:
> Help! :( Spent all day @ a client trying to recover some data, then
> stayed up all night recovering it & now doing a fresh setup on
> FreeBSD 5.3-RELEASE, cvsupped with latest ports, and gettext port is
> broken (need for Samba3, PHP). Supposed to go back in about an hour
> to install new box. :(
>
> Anyone picked this up yet? Can help me out?

I tried it on 5.4-pre and didn't have any problem. I would portupgrade 
-Rf and see it that helps.

===>   Compressing manual pages for gettext-0.14.1
===>   Running ldconfig
/sbin/ldconfig -m /usr/local/lib
===>   Registering installation for gettext-0.14.1
===>  Building package for gettext-0.14.1
Creating package /usr/ports/packages/All/gettext-0.14.1.tbz
Registering depends: libiconv-1.9.2_1.
Creating bzip'd tar ball in '/usr/ports/packages/All/gettext-0.14.1.tbz'
===>  Cleaning for libiconv-1.9.2_1
===>  Cleaning for libtool-1.5.10
===>  Cleaning for gettext-0.14.1
--->  Cleaning out obsolete shared libraries
[Updating the pkgdb  in /var/db/pkg ... - 298 
packages found (-0 +1) . done]
opal# uname -a
FreeBSD opal 5.4-PRERELEASE FreeBSD 5.4-PRERELEASE #122: Wed Mar  2 
22:40:55 PST 2005   
>
> /bin/sh /usr/local/bin/libtool15 --mode=link cc  -O -pipe  
> -L/usr/local/lib -o libgettextsrc.la -rpath /usr/local/lib -release
> 0.14.1  ../lib/libgettextlib.la ../intl/libintl.la -L/usr/local/lib
> -liconv -R/usr/local/lib -L/usr/local/lib -liconv -R/usr/local/lib
> -no-undefined message.lo read-po-abstract.lo po-lex.lo 
> po-gram-gen.lo po-hash-gen.lo po-charset.lo read-properties.lo 
> read-stringtable.lo open-po.lo dir-list.lo str-list.lo read-po.lo 
> write-properties.lo write-stringtable.lo write-po.lo  msgl-ascii.lo
> msgl-iconv.lo msgl-equal.lo msgl-cat.lo  msgl-english.lo file-list.lo
> msgl-charset.lo po-time.lo  plural.lo plural-table.lo format.lo
> format-c.lo format-sh.lo format-python.lo  format-lisp.lo
> format-elisp.lo format-librep.lo format-java.lo  format-csharp.lo
> format-awk.lo format-pascal.lo format-ycp.lo  format-tcl.lo
> format-perl.lo format-perl-brace.lo  format-php.lo
> format-gcc-internal.lo format-qt.lo libtool15: link: `po-lex.lo' is
> not a valid libtool object
> *** Error code 1
>
> Stop in
> /usr/ports/devel/gettext/work/gettext-0.14.1/gettext-tools/src. ***
> Error code 1
>
> Best,
> -AL.
>
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"

-- 
Kent Stewart
Richland, WA

http://users.owt.com/kstewart/index.html
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: /boot like linux!

2005-03-03 Thread Garance A Drosehn
At 6:24 AM +0100 3/4/05, Anthony Atkielski wrote:
Jesse Guardiani writes:
 > Doesn't the boot partition have to NOT have soft updates
 > though?
That's your choice.  By default, it won't, since data loss
is more likely with soft updates (anything that doesn't
immediately write everything physically to disk creates a
risk of data loss).  But you can force it if you wish.
Softupdates is generally turned off for '/', because '/' is
expected to be a relatively small partition.  Earlier versions
of softupdates would behave badly if a partition was low on
free disk space, and if you removed a lot of files immediately
followed by creating about the same amount of files.  This is
exactly what happens when you do a 'make installkernel', and
that used to run into problems if '/' was tight on space.
That is not as much of a problem now, but it is still reasonable
to have softupdates be off *if* '/' is a small partition which
doesn't get updated very much.
I have run with softupdates on for '/' on all my systems, for
a few years now.  It has not caused me any problems that I
know of, but then the way I define my partitions is probably a
lot different than what most people do.
If we thought that softupdates made it *significantly* more
likely that users would *lose* data, then we would not turn it
on for any partitions!
 > I want / + /boot. It's that simple.
Then create them that way.
It happens that this will run into some problems, as has been
described in other messages in this thread.
For what it's worth, I (personally) like the idea of having a
separate /boot partition, but I have many other projects that
are more important to me (personally), so I haven't spent any
time looking into this project yet.
--
Garance Alistair Drosehn =  [EMAIL PROTECTED]
Senior Systems Programmer   or   [EMAIL PROTECTED]
Rensselaer Polytechnic Institute; Troy, NY;  USA
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: /boot like linux!

2005-03-03 Thread Jesse Guardiani
Bob Johnson wrote:

> Jesse Guardiani wrote:
> 
>>On Thursday 03 March 2005 5:41 pm, [someone] wrote:
>>  
>>
>>>
>>>I'm not sure I understand the problem. If you don't want to create more
>>>partitions, then don't. You can make an 80gb (or 300gb, or whatever)
>>>drive into two partitions - a swap partition (2gig) and a / partition
>>>(78 gig) and install FreeBSD just fine.
>>>
>>>
>>
>>Doesn't the boot partition have to NOT have soft updates though?
>>  
>>
> No, I don't think so.

Then why doesn't sysinstall enable soft updates on the root FS by default?


>>I created the setup you described about a year ago with 5.2.1, and
>>I had serious problems if the system ever hard rebooted after a
>>power failure. Single user manual fsck's and all that.
>>
>>
>>  
>>
> That configuration should not make serious fs corruption more likely, it
> just
> makes it more likely to happen on the / partition (!).

:)


> In general, the 
> FreeBSD
> filesystem is highly tolerant of things like power failures, and should
> be even
> better when softupdates is turned on.  But it can fail, and 5.2.1 was NOT
> considered a production release, so that could have also played a role in
> your problems.  I don't remember if softupdates had problems on 5.2.1 or
> not.

Look, I'm not new to FreeBSD. I know all of this. I just want to know if
it's possible to tell my boot loader which device my root partition is on.


>>>It's *best* to make more
>>>partitions (esp for /var) so that if something goes out of control
>>>logging, or you just neglect your logs, it doesn't go and fill up your
>>>only (ie / ) partition. Like most *nix OS's, it can be as simple or as
>>>complicated as you want it to be.
>>>
>>>
>>
>>I want / + /boot. It's that simple.
>>
>>  
>>
> 
> What are you really trying to accomplish?

Reliability and efficient use of disk space.


> You want to run softupdates 
> on / ?

No, I want to consolidate all of my mount points while simultaneously
running softupdates on everything BUT the boot partition.


> I believe it is perfectly acceptable to use softupdates on the root
> partition these
> days.

I don't. It hasn't worked well in the past.


> The Handbook recommends turning on softupdates for all filesystems. 
> See
> http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/configtuning-disk.html
> 
> I'm pretty sure my test system at home has only / and swap (because it
> has a small hard drive), and uses softupdates on /.  I'll check when I get
> home.

Yes, please let me know how well it responds to a hard power cycle. A normal
FreeBSD system without softupdates on the root or boot partition should come
right back up without a manual fsck. In my experience, if softupdates are
used on the root partition and the root partition doubles as the boot partition
then you'll have much more difficulty recovering from a power failure.

-- 
Jesse Guardiani, Systems Administrator
WingNET Internet Services,
P.O. Box 2605 // Cleveland, TN 37320-2605
423-559-LINK (v)  423-559-5145 (f)
http://www.wingnet.net


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Audio latency

2005-03-03 Thread Ted Mittelstaedt


> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of J.E. Dooper
> Sent: Thursday, March 03, 2005 10:20 AM
> To: freebsd-questions@freebsd.org
> Subject: Audio latency
> 
> 
> Hi, 
> 
> My sound works and when I use mplayer or xmms I don't experience 
> any (noticable!) audio latency. 
> In applications like doomlegacy and quakeforge I do.
> 
> I think this might be the problem:
> http://lists.freebsd.org/mailman/htdig/freebsd-questions/2004-A
> ugust/055314.html
> Though I don't understand much about the solution...
> 

Quite probably.  You should inform the developers of those
applications of the above.

> 
> My questions are:

> what can I do to fix this?

Inform the developers of the above so they can fix their apps.

Ted
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: 6 hours of trying to configure my printer - solved

2005-03-03 Thread Ted Mittelstaedt
Hi bsdnobody,

  Looks great to me!  apsfilter is a really nice filter program,
allowing duplexing, multiple pages per page, etc.

  Of course, you actually don't need to run it.  The real grunt work
in your scenario is being done by ghostscript, which is converting
the incoming postscript that apsfilter is massaging, into the
language that HP Deskjets understand.  Using Ghostscript in this
way works great if Ghostscript happens to support your printer
model (which it does)  Ghostscript tends to support a lot of HP
deskjet models.  The apsfilter port installed ghostscript for you.

  For people that don't have a model of printer supported by Ghostscript,
you can configure Ghostscript to pump out "ijs" format, then pump
this into the program ijsgimpprint which puts it into gimp-print.
Gimpprint http://gimp-print.sourceforge.net/ has support for a whole
lot more printers.

Ted

> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of bsdnooby
> Sent: Thursday, March 03, 2005 9:01 PM
> To: freebsd-questions@freebsd.org
> Cc: FreeBSD Newbies
> Subject: Re: 6 hours of trying to configure my printer - solved
>
>
>
> I got my printing working by installing "apsfilter" and by following
> some of the instructions in the (printed) "The FreeBSD
> Handbook 2ed".  I
> am using FreeBSD 5.3, an HP940c Deskjet, parallel port connection, and
> the "lpr" method of printing (rather than the "CUPS" method).
>
> Initially I followed the instructions in the book, and was able to get
> some garbled output to come out of my printer.  Then I installed
> apsfilter, which enabled some perfect printouts from Firefox.  The
> apsfilter install created a new print queue that I had to
> tweak to make
> them compatible with the methodology I learned from the book.  I never
> got the "text" and "postscript" filters documented in the book
> to work,
> but apsfilter works fine - so I'm using that.  The sequence I followed
> is probably not ideal, but this is roughly what I did:
>
> 1. Make sure FreeBSD can see my printer:
>
> dmesg | grep lp
>
>   lpt0:  on ppbus0
>   lpt0: Interrupt-driven port
>   lpt0: switched to polled standard mode
>
> 2. Enable printer in with:
>
>   lptcontrol -p -d /dev/lpt0
>
> 3. Make sure printer is able to print:
>
>   lptest > /dev/lpt0
>
> 4. Add enable command to /etc/rc.local
>
>   (
> I had to create /etc/rc.local, so I guessed I need to make it
> executable with:
>
> chmod 550 /etc/rc.local
>   )
>
> 5. Create printer spool directory
>
>   mkdir /var/spool/lpd
>
> 6. Build apsfilter:
>
>   cd /usr/ports/print/apsfilter
>   make install clean
>   rehash
>
> 7. Configure apsfilter:
>
>   cd /usr/local/apsfilter
>   ./SETUP
>
> 8. Make spool directory accessible by daemon group:
>
>   chown daemon:daemon /var/spool/lpd/hp940
>   chmod 770 /var/spool/lpd/hp940
>
> 9. Add "ps" and "lp" aliases to the apsfilter-created entry in
> /etc/printcap:
>
>   # APS1_BEGIN:printer1
>   # - don't delete start label for apsfilter printer1
>   # - no other printer defines between BEGIN and END LABEL
>
> ps|lp|hp940|ijs/DESKJET_940;r=300x300;q=medium;c=full;p=letter;m=auto:\
>   :lp=/dev/lpt0:\
>   :if=/usr/local/etc/apsfilter/basedir/bin/apsfilter:\
>   :sd=/var/spool/lpd/hp940:\
>   :lf=/var/spool/lpd/hp940/log:\
>   :af=/var/spool/lpd/hp940/acct:\
>   :mx#0:\
>   :sh:
>   # APS1_END - don't delete this
>
> 10. Enable lpd daemon in /etc/rc.conf by adding:
>
>   lpd_enable="YES"
>
> 11. Reboot
>
> 12. Manage print jobs
>
>   list print job = "lpq -P hp940"
>   remove print job = "lprm #" (#=jobnumber)
>   cancel all jobs = "lprm -"
>
>
> I have tested Firefox and Abiword, the two programs I will be printing
> from - and they both seem to work when I print to the "default
> postscript" printer.  Any suggestions or fixes to these
> instructions are
> encouraged.  I am really new to Unix and FreeBSD, so please
> forgive any
> bad advice contained above.
>
> Some useful links:
>
> http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/print
ing-intro-setup.html
http://www.defcon1.org/html/Networking_Articles/natdhowto-whisky/aps-filt
er/aps-filter.html
http://www.defcon1.org/html/Networking_Articles/apsfilter/apsfilter.html
http://www.freebsddiary.org/apsfilter.php


thx!
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-newbies
To unsubscribe, send any mail to
"[EMAIL PROTECTED]"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"[EMAIL PROTECTED]"

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: /boot like linux!

2005-03-03 Thread Anthony Atkielski
Jesse Guardiani writes:

> Doesn't the boot partition have to NOT have soft updates though?

That's your choice.  By default, it won't, since data loss is more
likely with soft updates (anything that doesn't immediately write
everything physically to disk creates a risk of data loss).  But you can
force it if you wish.

> I created the setup you described about a year ago with 5.2.1, and
> I had serious problems if the system ever hard rebooted after a
> power failure. Single user manual fsck's and all that.

That's what a UPS is for.  You can never guarantee data integrity with
any type of write caching.  FreeBSD attempts to ensure that the file
system directory structure (inodes) is coherent at all times, if not
perfectly up to date, but there is still a chance of data loss in files
if the system is not shut down cleanly.

> I want / + /boot. It's that simple.

Then create them that way.

-- 
Anthony


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Received mail timestamp is off by 7 hours

2005-03-03 Thread Ted Mittelstaedt


> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Loren M. Lang
> Sent: Thursday, March 03, 2005 12:58 PM
> To: Luke
> Cc: freebsd-questions@freebsd.org
> Subject: Re: Received mail timestamp is off by 7 hours
>
>
> On Wed, Mar 02, 2005 at 01:00:15PM -0800, Luke wrote:
> >
> > >>There's no excuse for a mailserver to not be synced to a
> NTP source.
> > >
> > >I'd extend that to apply to any server.  Practically all
> the things a
> > >server does are dependent in some way on the correct time.
> >
> > I have three excuses:
> > 1) NTP is difficult to configure.  I've done it, but it
> wasn't trivial.
>
> ntpdate once at boot.
>

To configure NTP add the following into /etc/rc.conf


xntpd_enable="YES"
ntpdate_enable="YES"
ntpdate_flags="XX.XX.XX.XX"

NOTE: the ntpdate stuff is MANDATORY what that does is on boot, BEFORE
ntpd is started, ntpdate forces the system clock to the exact time.  Then
ntpd starts up and merely MAINTAINS the correct time, it doesen't
have to start stepping it forward or backward.

create the file /etc/ntp.conf containing the single line:

server XX.XX.XX.XX prefer

XX.XX.XX.XX = IP address of time server.

> > 2) Finding an NTP server willing to accept traffic from the
> public isn't
> > easy either.

Every ISP worth it's salt runs NTP on ALL of their routers.  It is
a requirement for tracking breakin attempts, unexpected router reboots,
etc.  Many of them configure their routers to allow syncing from
customers.  Point your NTP client to your ISP's default gateway and
most likely it will work.  If not, e-mail the support desk of the
ISP.  They will supply you with an IP number of a time server they run,
or the time server their upstream feed provides to them.

Most major backbones run NTP servers for the use of their customers.
If your ISP is too retarded to help you, e-mail their upstream feed.
I can tell you if I ever got a mail from a customer of one of our
customers, complaining that our customer wasn't providing time services,
I would tell that ISP that they had 1 minute to turn on NTP on their
router or they were going to be disconnected from the Internet.

>
> > 3) If your clock tends to run noticably fast or slow, constant NTP
> > corrections tend to do more harm than good, at least in my
> experience.  It
> > got to where I couldn't even run a buildworld because NTP
> kept tinkering
> > with the clock in the middle of the process.
>

>From the manpage of ntpd:

"...However, and to protect against
 broken hardware, such as when the CMOS battery fails or the clock
counter
 becomes defective, once the clock has been set, an error greater
than
 1000s will cause ntpd to exit anyway.

 Under ordinary conditions, ntpd adjusts the clock in small steps so
that
 the timescale is effectively continuous and without
discontinuities

... As the result of this behavior, once the clock has been set, it very
 rarely strays more than 128 ms, even under extreme cases of network
path
 congestion and jitter.  Sometimes, in particular when ntpd is first
 started, the error might exceed 128 ms.  This may on occasion cause
the
 clock to be set backwards if the local clock time is more than 128 s
in
 the future relative to the server.  In some applications, this
behavior
 may be unacceptable.  If the -x option is included on the command
line,
 the clock will never be stepped and only slew corrections will be
used..."

So, even if you don't use ntpdate correctly, it still covers you ass.

Ted

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: /boot like linux!

2005-03-03 Thread Anthony Atkielski
Jesse Guardiani writes:

> I'm a FreeBSD 5.3 user as well as a Gentoo Linux user.
> In Gentoo linux, you only have to create 3 partitions:
>
> /boot
> swap
> /
>
> In FreeBSD, you seem to have to create many more:
>
> /
> swap
> /usr
> /var
> /tmp

You don't _have_ to create these partitions.  They are just the
suggested configuration (and the default if you have the system create
partitions for you).  All you really need is a swap partition and a root
partition (/).

-- 
Anthony


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Received mail timestamp is off by 7 hours

2005-03-03 Thread Ted Mittelstaedt

All Windows 2000, and above operating systems support NTP

Logged in as administrator, at the command line
"net time /setsntp:XX.XX.XX.XX"

XX.XX.XX.XX = the IP address of a NTP server

Then go in to Start Settings Control Panel Administrative Tools,
Services, Windows Time and set startup to automatic.

Microsoft also released and NTP service for NT4 in the MS resource kit.

Even Windows supports NTP.  As I said, no excuse.

Ted

> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Anthony
> Atkielski
> Sent: Wednesday, March 02, 2005 10:32 AM
> To: freebsd-questions@freebsd.org
> Subject: Re: Received mail timestamp is off by 7 hours
>
>
> Ted Mittelstaedt writes:
>
> > There's no excuse for a mailserver to not be synced to a NTP source.
>
> I'd extend that to apply to any server.  Practically all the things a
> server does are dependent in some way on the correct time.
>
> This is also increasingly true of desktops.  Gone are the days when you
> could just set the clock forward or back temporarily for some specific
> purpose.  Today if you do that on a lot of desktops, you'll mess things
> up terribly (imagine having every birthday for the next five years
> trigger simultaneously when you open Outlook, or having half your file
> system marked for immediate deletion--not a pretty picture).
>
> --
> Anthony
>
>
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
>

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: 6 hours of trying to configure my printer - solved

2005-03-03 Thread bsdnooby
I got my printing working by installing "apsfilter" and by following 
some of the instructions in the (printed) "The FreeBSD Handbook 2ed".  I 
am using FreeBSD 5.3, an HP940c Deskjet, parallel port connection, and 
the "lpr" method of printing (rather than the "CUPS" method).

Initially I followed the instructions in the book, and was able to get 
some garbled output to come out of my printer.  Then I installed 
apsfilter, which enabled some perfect printouts from Firefox.  The 
apsfilter install created a new print queue that I had to tweak to make 
them compatible with the methodology I learned from the book.  I never 
got the "text" and "postscript" filters documented in the book to work, 
but apsfilter works fine - so I'm using that.  The sequence I followed 
is probably not ideal, but this is roughly what I did:

1. Make sure FreeBSD can see my printer:
dmesg | grep lp
 lpt0:  on ppbus0
 lpt0: Interrupt-driven port
 lpt0: switched to polled standard mode
2. Enable printer in with:
 lptcontrol -p -d /dev/lpt0
3. Make sure printer is able to print:
 lptest > /dev/lpt0
4. Add enable command to /etc/rc.local
 (
   I had to create /etc/rc.local, so I guessed I need to make it 
executable with:

   chmod 550 /etc/rc.local
 )
5. Create printer spool directory
 mkdir /var/spool/lpd
6. Build apsfilter:
 cd /usr/ports/print/apsfilter
 make install clean
 rehash
7. Configure apsfilter:
 cd /usr/local/apsfilter
 ./SETUP
8. Make spool directory accessible by daemon group:
 chown daemon:daemon /var/spool/lpd/hp940
 chmod 770 /var/spool/lpd/hp940
9. Add "ps" and "lp" aliases to the apsfilter-created entry in 
/etc/printcap:

 # APS1_BEGIN:printer1
 # - don't delete start label for apsfilter printer1
 # - no other printer defines between BEGIN and END LABEL
 ps|lp|hp940|ijs/DESKJET_940;r=300x300;q=medium;c=full;p=letter;m=auto:\
 :lp=/dev/lpt0:\
 :if=/usr/local/etc/apsfilter/basedir/bin/apsfilter:\
 :sd=/var/spool/lpd/hp940:\
 :lf=/var/spool/lpd/hp940/log:\
 :af=/var/spool/lpd/hp940/acct:\
 :mx#0:\
 :sh:
 # APS1_END - don't delete this
10. Enable lpd daemon in /etc/rc.conf by adding:
 lpd_enable="YES"
11. Reboot
12. Manage print jobs
 list print job = "lpq -P hp940"
 remove print job = "lprm #" (#=jobnumber)
 cancel all jobs = "lprm -"
I have tested Firefox and Abiword, the two programs I will be printing 
from - and they both seem to work when I print to the "default 
postscript" printer.  Any suggestions or fixes to these instructions are 
encouraged.  I am really new to Unix and FreeBSD, so please forgive any 
bad advice contained above.

Some useful links:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/printing-intro-setup.html
http://www.defcon1.org/html/Networking_Articles/natdhowto-whisky/aps-filter/aps-filter.html
http://www.defcon1.org/html/Networking_Articles/apsfilter/apsfilter.html
http://www.freebsddiary.org/apsfilter.php
thx!
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


portupgrade wrecked gnome!!! ~>8-(

2005-03-03 Thread Karl Agee
Here is my tale of woe.
Freebsd 4.11-stable.  I upgraded my ports using portupgrade -arR after 
cvsuping and make fetchindex and portsdb -u.  Things worked, so I went out 
and did portupgrade.

But my gnome-2.8.2 install is hosed.  It starts but gives me no taskbars or 
button bars.  Just little iconlets--one on the top, the "quicklaunch 
toolbar" for a few apps I had in it, and a little something at the bottom 
which I cannot figure out what it is supposed to be.

I tried doing a  make deinstall of gnome and cleared everything out of 
ports/distfiles.  But it didnt require anything new I imagine all it needed 
is still laying around here, broken.

SO, my friends, I would like to get my gnome install back
--karl
_
Don’t just search. Find. Check out the new MSN Search! 
http://search.msn.click-url.com/go/onm00200636ave/direct/01/

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Widescreen(16:10) woes. PLEASE HELP

2005-03-03 Thread Remington
Attaching /var/log/Xorg.log would be nice 

On Thu, 2005-03-03 at 20:25 -0800, Remington wrote:
> FreeBSD  5.4-PRERELEASE FreeBSD 5.4-PRERELEASE #1: Thu Mar  3 18:39:00
> PST 2005 root@:/usr/obj/usr/src/sys/VAIO  i386
> 
> Hello:
> I recently baught Sony VAIO FS570 notebook, its a 15.4" screen. I cannot
> for the life of me Xorg to go above 1024x768. It is running the vesa
> driver, native card is an Intel 915GM, the i810 does not properly
> recognize the device. I have googled this and have come with with no
> successful answer. Any assistance in getting the resolution to go higher
> would be GREATLY appreciated, 1024x768 is annoying. Windows runs it at
> 1280x800.
> 
> I have attached verbose dmesg, /var/log/Xorg.log and xorg.conf. I have
> done almost every possible xorg.conf that documents a working 16:10
> resolution
> 
> Thanks in advance!!
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


cpu overhead

2005-03-03 Thread Bhaban Singh
Could anybody tell me is there any cpu monitoring tools for FreeBSD.
pleas send me any idea.

thanks
bhaban
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


CVS Repository

2005-03-03 Thread cizuriet
Hi Guys,

 I have tried setting up my own CVS tree with the /src tree in my local 
machine, but after setting the CVSROOT to any of the suggestions on the web 
site, when I try to log on with the anoncvs passwd, I get the following 
response.  Any help?

Thanks!

Clem--

> setenv CVSROOT :pserver:[EMAIL PROTECTED]:/home/ncvs
> cvs login

Logging in to :pserver:[EMAIL PROTECTED]:2401/home/ncvs
CVS password:

cvs [login aborted]: connect to anoncvs1.FreeBSD.org(64.78.150.163):2401 
failed: Connection refused

<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
Clem Izurieta

PhD Student
Department of Computer Science
Colorado State University
[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Widescreen(16:10) woes. PLEASE HELP

2005-03-03 Thread Remington
FreeBSD  5.4-PRERELEASE FreeBSD 5.4-PRERELEASE #1: Thu Mar  3 18:39:00
PST 2005 root@:/usr/obj/usr/src/sys/VAIO  i386

Hello:
I recently baught Sony VAIO FS570 notebook, its a 15.4" screen. I cannot
for the life of me Xorg to go above 1024x768. It is running the vesa
driver, native card is an Intel 915GM, the i810 does not properly
recognize the device. I have googled this and have come with with no
successful answer. Any assistance in getting the resolution to go higher
would be GREATLY appreciated, 1024x768 is annoying. Windows runs it at
1280x800.

I have attached verbose dmesg, /var/log/Xorg.log and xorg.conf. I have
done almost every possible xorg.conf that documents a working 16:10
resolution

Thanks in advance!!
section "ServerLayout"
Identifier "X.org Configured"
Screen  0  "Screen0" 0 0
InputDevice"Mouse0" "CorePointer"
InputDevice"Keyboard0" "CoreKeyboard"
EndSection

Section "Files"
RgbPath  "/usr/X11R6/lib/X11/rgb"
ModulePath   "/usr/X11R6/lib/modules"
FontPath "/usr/X11R6/lib/X11/fonts/misc/"
FontPath "/usr/X11R6/lib/X11/fonts/TTF/"
FontPath "/usr/X11R6/lib/X11/fonts/Speedo/"
FontPath "/usr/X11R6/lib/X11/fonts/Type1/"
FontPath "/usr/X11R6/lib/X11/fonts/CID/"
FontPath "/usr/X11R6/lib/X11/fonts/75dpi/"
FontPath "/usr/X11R6/lib/X11/fonts/100dpi/"
EndSection

Section "Module"
Load  "extmod"
Load  "glx"
Load  "dri"
Load  "dbe"
Load  "record"
Load  "xtrap"
#   Load  "speedo"
Load  "type1"
Load  "freetype"
EndSection

Section "InputDevice"
Identifier  "Keyboard0"
Driver  "keyboard"
EndSection

Section "InputDevice"
Identifier  "Mouse0"
Driver  "mouse"
Option  "Protocol" "auto"
Option  "Device" "/dev/sysmouse"
EndSection

Section "Modes"
Identifier "16:10"
Modeline "1280x800" 68.56  1280 1336 1472 1664 800 801 804 824  
Modeline "1280x800" 71.0   1280 1328 1360 1440 800 802 808 823 
Modeline "1280x800" 80.58  1280 1344 1480 1680 800 801 804 827
Modeline "1280x800" 83.46  1280 1344 1480 1680 800 801 804 828
Modeline "1280x800" 107.21 1280 1360 1496 1712 800 801 804 835
Modeline "1280x800" 123.38 1280 1368 1504 1728 800 801 804 840
Modeline "1280x800" 147.89 1280 1376 1512 1744 800 801 804 848
EndSection

Section "Monitor"
Identifier   "Monitor0"
VendorName   "Monitor Vendor"
ModelName"Monitor Model"
HorizSync31.5 - 100.0
VertRefresh  59.0-75.0 
UseModes "16:10"
Option   "IgnoreEDID" "1"
Option   "CalcAlgorithm" "CheckDesktopGeometry" 
#Option   "FlatPanelProperties" "Scaling=aspect-scaled" 
EndSection

Section "Device"
Identifier  "Card0"
Driver  "vesa"
VendorName  "Intel Corp."
BoardName   "Unknown Board"
BusID   "PCI:0:2:0"
Option  "DRI" "No"
EndSection

Section "Screen"
Identifier "Screen0"
Device "Card0"
Monitor"Monitor0"
DefaultDepth24
SubSection "Display"
Viewport   0 0
Depth 16
EndSubSection
SubSection "Display"
Viewport   0 0
Depth 24
Modes   "1280x800" "1024x600" 
EndSubSection
EndSection

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: /boot like linux!

2005-03-03 Thread Bob Johnson
On Thursday 03 March 2005 07:45 pm, Bob Johnson wrote:
> Jesse Guardiani wrote:
> >On Thursday 03 March 2005 5:41 pm, [someone] wrote:
> >>I'm not sure I understand the problem. If you don't want to create more
> >>partitions, then don't. You can make an 80gb (or 300gb, or whatever)
> >>drive into two partitions - a swap partition (2gig) and a / partition
> >>(78 gig) and install FreeBSD just fine.
> >
> >Doesn't the boot partition have to NOT have soft updates though?
>
> No, I don't think so.
>
> >I created the setup you described about a year ago with 5.2.1, and
> >I had serious problems if the system ever hard rebooted after a
> >power failure. Single user manual fsck's and all that.
>
> That configuration should not make serious fs corruption more likely, it
> just
> makes it more likely to happen on the / partition (!).  In general, the
> FreeBSD
> filesystem is highly tolerant of things like power failures, and should
> be even
> better when softupdates is turned on.  But it can fail, and 5.2.1 was NOT
> considered a production release, so that could have also played a role in
> your problems.  I don't remember if softupdates had problems on 5.2.1 or
> not.
>
> >>It's *best* to make more
> >>partitions (esp for /var) so that if something goes out of control
> >>logging, or you just neglect your logs, it doesn't go and fill up your
> >>only (ie / ) partition. Like most *nix OS's, it can be as simple or as
> >>complicated as you want it to be.
> >
> >I want / + /boot. It's that simple.
>
> What are you really trying to accomplish?  You want to run softupdates
> on / ?
>
> I believe it is perfectly acceptable to use softupdates on the root
> partition these
> days.  The Handbook recommends turning on softupdates for all filesystems.
> See
> http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/configtuning-disk
>.html
>
> I'm pretty sure my test system at home has only / and swap (because it
> has a small hard drive), and uses softupdates on /.  I'll check when I get
> home.
>

Nope, for some reason I didn't set that up last time I installed something 
(5.3) on it, but I can almost guarantee that I have done so in the past. Now 
I've turned on softupdates on the root partition and so far (about an hour) 
it's been happy.  For what that's worth.

Maybe I'll turn off the power while the system is active just to see what 
happens (actually, I'm still fascinated by the background fsck that 5.3 
runs).

- Bob



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Broken port: gettext

2005-03-03 Thread Andrew Lewis
Help! :( Spent all day @ a client trying to recover some data, then stayed up 
all night recovering it & now doing a fresh setup on FreeBSD 5.3-RELEASE, 
cvsupped with latest ports, and gettext port is broken (need for Samba3, PHP). 
Supposed to go back in about an hour to install new box. :(

Anyone picked this up yet? Can help me out?

/bin/sh /usr/local/bin/libtool15 --mode=link cc  -O -pipe   -L/usr/local/lib -o 
libgettextsrc.la -rpath /usr/local/lib -release 0.14.1  ../lib/libgettextlib.la 
../intl/libintl.la -L/usr/local/lib -liconv -R/usr/local/lib -L/usr/local/lib 
-liconv -R/usr/local/lib -no-undefined message.lo read-po-abstract.lo po-lex.lo 
 po-gram-gen.lo po-hash-gen.lo po-charset.lo read-properties.lo  
read-stringtable.lo open-po.lo dir-list.lo str-list.lo read-po.lo  
write-properties.lo write-stringtable.lo write-po.lo  msgl-ascii.lo 
msgl-iconv.lo msgl-equal.lo msgl-cat.lo  msgl-english.lo file-list.lo 
msgl-charset.lo po-time.lo  plural.lo plural-table.lo format.lo format-c.lo 
format-sh.lo format-python.lo  format-lisp.lo format-elisp.lo format-librep.lo 
format-java.lo  format-csharp.lo format-awk.lo format-pascal.lo format-ycp.lo  
format-tcl.lo format-perl.lo format-perl-brace.lo  format-php.lo 
format-gcc-internal.lo format-qt.lo  
libtool15: link: `po-lex.lo' is not a valid libtool object
*** Error code 1

Stop in /usr/ports/devel/gettext/work/gettext-0.14.1/gettext-tools/src.
*** Error code 1

Best,
-AL.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Found This In /usr - @LongLink

2005-03-03 Thread Eric F Crist
On Mar 3, 2005, at 8:08 PM, James A. Coulter wrote:
I found this in /usr on two FBSD 4.11 boxen:

--   1 root  wheel   105 Dec 31  1969 @LongLink
One box is my firewall/router/gateway attached to a cable modem and 
the other is behind the firewall.

The 1969 timestamp and lack of file attributes is making the small 
hair on the back of my neck standup.

Is this normal?  If so, what the heck is it?
Or have I been rooted?
Thanks!
Jim
--
James A. Coulter
[EMAIL PROTECTED]
http://jacoulter.net
James,
I'm not trying to be rude, but a 30 second search through Google 
results for @LongLink turned up the following entry (on the first 
results page):

Quote from 
http://www-unix.globus.org/mail_archive/discuss/2002/10/msg00352.html:

>I learned that @LongLink is a GNU tar's way to handle long path
>names. Apparently GNU tar now has to be used to untar some packages.
>I'd like to suggest that the configuration script check and make sure
>it gets the GNU tar, the same way it makes sure it gets Perl 5-005 or
>higher.
>
>Now that I've installed the GNU tar on my system, what files do I
>need to modify to invoke it, not the vendor tar, in order to continue
>building for the information services. I'd rather not to start over
>if I could help it.
>
>--
>Wendy Lin
>-
>IT Research Computing Services
>[EMAIL PROTECTED]
>http://www-rcd.cc.purdue.edu/~af5/
___
Eric F Crist  "I am so smart, S.M.R.T!"
Secure Computing Networks  -Homer J Simpson
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Found This In /usr - @LongLink

2005-03-03 Thread James A. Coulter
I found this in /usr on two FBSD 4.11 boxen:

--   1 root  wheel   105 Dec 31  1969 @LongLink
One box is my firewall/router/gateway attached to a cable modem and the 
other is behind the firewall.

The 1969 timestamp and lack of file attributes is making the small hair 
on the back of my neck standup.

Is this normal?  If so, what the heck is it?
Or have I been rooted?
Thanks!
Jim
--
James A. Coulter
[EMAIL PROTECTED]
http://jacoulter.net
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: RELENG_5_3 to RELENG_5 make installworld fails

2005-03-03 Thread Kent Stewart
On Thursday 03 March 2005 03:26 pm, Aaron Nichols wrote:
> On Thu, 3 Mar 2005 14:39:16 -0800, Kent Stewart <[EMAIL PROTECTED]> 
wrote:
> > You missed a step. Your system clock is off and that makes the
> > installworld try to use touch. Set your system clock and you may
> > have to remake your world but it should install.
> >
> > Kent
>
> Infact it was off - can you give me some detail as to why that
> matters? Not that I doubt that having my system clock set to a date 8
> months prior to the date of files in cvs might cause a problem - but
> I'm curious about the details. If you can even point me at a URL and
> I'll read for myself - I'm just curious.

Make is used to build files that are out of date. When the buildworld 
created the file, it was older than the files you downloaded using 
cvsup. So, it was created out of date and installworld thought it 
needed to rebuild it. Touch isn't needed in the installworld and it 
fails.

Kent

>
> If that was the problem (buildworld happenning as I type) then thank
> you and my apologies for the oversight. New system, didn't bother to
> make sure the BIOS date was right and ntp wasn't yet setup.
>
> Thanks,
> Aaron
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"

-- 
Kent Stewart
Richland, WA

http://users.owt.com/kstewart/index.html
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Vinum raid5 problems......

2005-03-03 Thread Greg 'groggy' Lehey
On Thursday,  3 March 2005 at 15:35:31 -0600, matt virus wrote:
> Hi all:
>
> I have a FBSD 5.2.1 box running vinum.  7 *160gb drives in a raid5 array.
>
> I can post specific errors and logs and such later, i'm away from the
> box right now --- anybody have any thoughts ?

How about http://www.vinumvm.org/vinum/how-to-debug.html?

Greg
--
When replying to this message, please copy the original recipients.
If you don't, I may ignore the reply or reply to the original recipients.
For more information, see http://www.lemis.com/questions.html
See complete headers for address and phone numbers.


pgpFkoYE2PgXm.pgp
Description: PGP signature


Re: Sharing directories with jails

2005-03-03 Thread Emanuel Strobl
Am Freitag, 4. März 2005 01:50 schrieb Daniel Eriksson:
> Emanuel Strobl wrote:
> > You can also use nullfs (man (8) mount_nullfs). It's slow and
> > not certified to be bugfree but I never had any problems and
> > especially for centralized ports very useful.
>
> What has given you the idea that nullfs is slow? I'm using it extensively
> and have not noticed any significant slowdown. Under what usecase(s) is it
> slow? (My usage is mainly for medium to large files, with <200 files per
> directory.)

Some perfomance benchmarks at 5.3 release cycle showed that the way nullfs 
works is suboptimal, also file backed memory devices are very slow, but I'm 
no developer so I can't explain you exactly why. Perhaps someone had a look 
at this in the meantime, I didn't do any tests since then but I also saw no 
commit log which indicates that people were working on that.

-Harry

>
> /Daniel Eriksson
>
>
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"


pgpj512rNf5jv.pgp
Description: PGP signature


Re: Sharing directories with jails

2005-03-03 Thread Chris Hodgins
Daniel Eriksson wrote:
Emanuel Strobl wrote:

You can also use nullfs (man (8) mount_nullfs). It's slow and 
not certified to be bugfree but I never had any problems and
especially for centralized ports very useful.

What has given you the idea that nullfs is slow? I'm using it extensively
and have not noticed any significant slowdown. Under what usecase(s) is it
slow? (My usage is mainly for medium to large files, with <200 files per
directory.)
/Daniel Eriksson
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Thanks for your help.  I have used nullfs to get this working and it 
works fine.

Thanks
Chris
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Sharing directories with jails

2005-03-03 Thread Daniel Eriksson
Emanuel Strobl wrote:

> You can also use nullfs (man (8) mount_nullfs). It's slow and 
> not certified to be bugfree but I never had any problems and
> especially for centralized ports very useful.

What has given you the idea that nullfs is slow? I'm using it extensively
and have not noticed any significant slowdown. Under what usecase(s) is it
slow? (My usage is mainly for medium to large files, with <200 files per
directory.)

/Daniel Eriksson


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: /boot like linux!

2005-03-03 Thread Ian Moore
On Fri, 4 Mar 2005 10:09, Jesse Guardiani wrote:
> On Thursday 03 March 2005 5:41 pm, you wrote:
> > Jesse Guardiani wrote:
> > >Hello,
> > >
> > >I'm a FreeBSD 5.3 user as well as a Gentoo Linux user.
> > >In Gentoo linux, you only have to create 3 partitions:
> > >
> > >/boot
> > >swap
> > >/
> > >
> > >In FreeBSD, you seem to have to create many more:
> > >
> > >/
> > >swap
> > >/usr
> > >/var
> > >/tmp
> > >
> > >In particular, it seems that /boot MUST be on the same
> > >partition as /. This stinks, as now you have to create
> > >separate partitions for /usr and /var, which wastes space.
> > >
> > >I tried to make /boot it's own partition, and I succeeded,
> > >to a certain extent. I actually made /boot/boot, because
> > >the FreeBSD 5.3 boot manager wants to look under the /boot
> > >directory for "loader". If /boot is it's own partition, then
> > >you need a /boot/boot/loader.
> > >
> > >Anyway, that worked. The kernel boots now, but it prompts
> > >me at the beginning of the rc process for the root device.
> > >I give it:
> > >
> > >ufs:ad1s1d
> > >
> > >Which is my / partition, and it boots successfully.
> > >Is it possible to automate this process so that the loader
> > >knows to use ad1s1d as my root device?
> > >
> > >Thanks!
> >
> > I'm not sure I understand the problem. If you don't want to create more
> > partitions, then don't. You can make an 80gb (or 300gb, or whatever)
> > drive into two partitions - a swap partition (2gig) and a / partition
> > (78 gig) and install FreeBSD just fine.
>
> Doesn't the boot partition have to NOT have soft updates though?
> I created the setup you described about a year ago with 5.2.1, and
> I had serious problems if the system ever hard rebooted after a
> power failure. Single user manual fsck's and all that.
If that is true, then why not create /, /usr & /swap & symlink /var to 
somewhere on /usr (or vice versa).
>
> > It's *best* to make more
> > partitions (esp for /var) so that if something goes out of control
> > logging, or you just neglect your logs, it doesn't go and fill up your
> > only (ie / ) partition. Like most *nix OS's, it can be as simple or as
> > complicated as you want it to be.
>
> I want / + /boot. It's that simple.

-- 
Ian

GPG Key: http://home.swiftdsl.com.au/~imoore/no-spam.asc


pgpdt1kRDM6ML.pgp
Description: PGP signature


Re: /boot like linux!

2005-03-03 Thread Bob Johnson
Jesse Guardiani wrote:
On Thursday 03 March 2005 5:41 pm, [someone] wrote:
 

I'm not sure I understand the problem. If you don't want to create more 
partitions, then don't. You can make an 80gb (or 300gb, or whatever) 
drive into two partitions - a swap partition (2gig) and a / partition 
(78 gig) and install FreeBSD just fine.
   

Doesn't the boot partition have to NOT have soft updates though?
 

No, I don't think so.
I created the setup you described about a year ago with 5.2.1, and
I had serious problems if the system ever hard rebooted after a
power failure. Single user manual fsck's and all that.
 

That configuration should not make serious fs corruption more likely, it 
just
makes it more likely to happen on the / partition (!).  In general, the 
FreeBSD
filesystem is highly tolerant of things like power failures, and should 
be even
better when softupdates is turned on.  But it can fail, and 5.2.1 was NOT
considered a production release, so that could have also played a role in
your problems.  I don't remember if softupdates had problems on 5.2.1 or
not.

It's *best* to make more  
partitions (esp for /var) so that if something goes out of control 
logging, or you just neglect your logs, it doesn't go and fill up your 
only (ie / ) partition. Like most *nix OS's, it can be as simple or as 
complicated as you want it to be.
   

I want / + /boot. It's that simple.
 

What are you really trying to accomplish?  You want to run softupdates 
on / ?

I believe it is perfectly acceptable to use softupdates on the root 
partition these
days.  The Handbook recommends turning on softupdates for all filesystems. 
See
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/configtuning-disk.html

I'm pretty sure my test system at home has only / and swap (because it
has a small hard drive), and uses softupdates on /.  I'll check when I get
home.
If you have some other reason for separating /boot from /, explain your 
actual
goal, and perhaps we can help.

- Bob
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Documentation Error?

2005-03-03 Thread Loren M. Lang
On Tue, Mar 01, 2005 at 11:19:07AM -0500, Jerry McAllister wrote:
> > 
> > [EMAIL PROTECTED] wrote:
> > > http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/confi
> > > gtuning-v irtual-hosts.html
> > > 
> > > states that adding a virtual address is done in rc.conf like this:
> > > 
> > > ifconfig_fxp0="inet 10.1.1.1 netmask 255.255.255.0"
> > > ifconfig_fxp0_alias0="inet 10.1.1.2 netmask 255.255.255.255"
> > > 
> > > Shouldn't it be this instead?
> > > 
> > > ifconfig_fxp0="inet 10.1.1.1 netmask 255.255.255.0"
> > > ifconfig_fxp0_alias0="alias 10.1.1.2 netmask 255.255.255.255"
> > 
> > No.  The actual command to make one is:
> > 
> > ifconfig fxp0 inet 10.1.1.2 netmask 255.255.255.255 alias
> > 
> > So you do need to pass the "inet" to ifconfig.  The _alias0 makes
> > the script pass the trailing "alias"
> 
> H,   So what is happening when no 'inet' is in the string?
> It seems to work fine.Is something still not right and just
> waiting to explode?We have lots of servers configured that way.

Looking at ifconfig(8), I believe it's purely optional, ifconfig can
reconize what address type your giving it.  It's more useful when using
ifconfig to display information.  I've done it both ways and if your
servers work now, I doubt they'll blow up later.  It is probably
something that was required in the past.

> 
> jerry
> 
> > 
> > Ted
> > 
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpYQNExwthl0.pgp
Description: PGP signature


_init and dynamically loaded libraries

2005-03-03 Thread Jonathon McKitrick

I'm having some trouble getting _init() to run when I use dlopen() to load a
library.  I get this:

one.o: In function `_init':
/usr/home/jcm/exp/modules/libone/one.c:7: multiple definition of `_init'
/usr/lib/crti.o(.init+0x0): first defined here

With other signatures, _init() never gets called.  What is the correct
procedure to use here?

jm
-- 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


FreeBSD 4.11-RELEASE & SACK

2005-03-03 Thread Kan Cai
Greetings,
I've installed the standard FreeBSD 4.11-RELEASE and have realized that 
the sysctl option for enabling SACK in TCP is not available 
(net.inet.tcp.do_sack).  Additionally, the tcp_sack.c file is not in the 
/usr/src/sys/netinet so I'm guessing this indicates that I need a patch. 
Hoping to be able to use SACK in FreeBSD 4.11-RELEASE, I wanted to ask :

1) Is my guess correct (Do I need a patch)?  Or is my kernel configuration 
file missing an option?
2) Assuming I need a patch, what patch is generally recommended for using 
SACK under TCP in FreeBSD 4.11-RELEASE?

Any help would be most appreciated.  Thanks,
ken
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Sharing directories with jails

2005-03-03 Thread Emanuel Strobl
Am Donnerstag, 3. März 2005 17:04 schrieb Ean Kingston:
> > How dangerous is it to share the ports directory with jails on the
> > system?  I am using the jails to give other access to a freebsd system.
> >   You can assume they are untrusted (hence the jail ;)).
> >
> > Is it enough just to:
> > ln -s /usr/ports /usr/jail/ajail/usr/ports
>
> That won't work. The jail does a chroot (along with other things) when it
> starts up so the link inside the jail will wind up pointing to itself.
>
> The only way I've been able to figure out how to do something like that is
> by running an NFS server outside the jail and then run an NFS client

You can also use nullfs (man (8) mount_nullfs). It's slow and not certified to 
be bugfree but I never had any problems and especially for centralized ports 
very useful.

-Harry


pgp5UusRj7wtv.pgp
Description: PGP signature


Re: /boot like linux!

2005-03-03 Thread Jesse Guardiani
Kevin Kinsey wrote:

> Jesse Guardiani wrote:
> 
> 
> 
>>Anyway, that worked. The kernel boots now, but it prompts
>>me at the beginning of the rc process for the root device.
>>I give it:
>>
>>ufs:ad1s1d
>>
>>Which is my / partition, and it boots successfully.
>>Is it possible to automate this process so that the loader
>>knows to use ad1s1d as my root device?
>>
>>Thanks!
>>  
>>
> 
> Please note that I'm a "fellow newb", and don't take this
> as if it were from an authoritative source (other than whoever
> I'm quoting...)
> 
> from boot(8):
> 
>   "Make note of the fact that /boot.config is read only from the `a'
>   parti-
>  tion.  As a result, slices which are missing an `a' parition
> require user
>  intervention during the boot process."

I am under the impression that boot.config is optional. It doesn't
exist on either of my 5.3 systems.


-- 
Jesse Guardiani, Systems Administrator
WingNET Internet Services,
P.O. Box 2605 // Cleveland, TN 37320-2605
423-559-LINK (v)  423-559-5145 (f)
http://www.wingnet.net


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: sudo & su

2005-03-03 Thread Paul Schmehl
--On Thursday, March 03, 2005 10:47:09 PM + Pietro Cerutti 
<[EMAIL PROTECTED]> wrote:
There isn't any NOPASSWD, but if I give the password the first time,
sudo doesn't ask for it anymore in the next 5 min or so...
Answered by another poster - look at the timeout section of the man page.
I think I really misunderstood the purpose of sudo. I thought that it
was used to automatically login as root, give a command, and log back
out to user who invoked the command.
So what's the purpose of asking for the password of the actually logged
in user?
With sudo you get *logging* of every command the person using sudo runs. 
You don't get that if they use su (except for root's .history file.)

The purpose of sudo is to allow "normal" users to issue *certain* commands 
with root privileges *and* to track what they do for accountability 
purposes.  (Who deleted /usr? (*&)(&@#(&@!!!)

The timeout is to facilitate the use of the command without having to 
constantly type your password.  Imagine having to type your password every 
time you issue a command.  It would get irritating real quick.

Paul Schmehl ([EMAIL PROTECTED])
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


ppp + syslog

2005-03-03 Thread J.D. Bronson
how do I get ppp to log to syslog when as the machine boots
up...ppp starts and connects before syslogd starts!?
I have my ppp and pf config working fine...but I would like to see what 
happens as it boots to /var/log/ppp.log

if I kill ppp and start it manually it does log fine.
Thanks!

--
J.D. Bronson
Aurora Health Care // Information Services // Milwaukee, WI USA
Office: 414.978.8282 // Email: [EMAIL PROTECTED] // Pager: 414.314.8282
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: /boot like linux!

2005-03-03 Thread Jesse Guardiani
On Thursday 03 March 2005 5:41 pm, you wrote:
> Jesse Guardiani wrote:
> 
> >Hello,
> >
> >I'm a FreeBSD 5.3 user as well as a Gentoo Linux user.
> >In Gentoo linux, you only have to create 3 partitions:
> >
> >/boot
> >swap
> >/
> >
> >In FreeBSD, you seem to have to create many more:
> >
> >/
> >swap
> >/usr
> >/var
> >/tmp
> >
> >In particular, it seems that /boot MUST be on the same
> >partition as /. This stinks, as now you have to create
> >separate partitions for /usr and /var, which wastes space.
> >
> >I tried to make /boot it's own partition, and I succeeded,
> >to a certain extent. I actually made /boot/boot, because
> >the FreeBSD 5.3 boot manager wants to look under the /boot
> >directory for "loader". If /boot is it's own partition, then
> >you need a /boot/boot/loader.
> >
> >Anyway, that worked. The kernel boots now, but it prompts
> >me at the beginning of the rc process for the root device.
> >I give it:
> >
> >ufs:ad1s1d
> >
> >Which is my / partition, and it boots successfully.
> >Is it possible to automate this process so that the loader
> >knows to use ad1s1d as my root device?
> >
> >Thanks!
> >
> >  
> >
> I'm not sure I understand the problem. If you don't want to create more 
> partitions, then don't. You can make an 80gb (or 300gb, or whatever) 
> drive into two partitions - a swap partition (2gig) and a / partition 
> (78 gig) and install FreeBSD just fine.

Doesn't the boot partition have to NOT have soft updates though?
I created the setup you described about a year ago with 5.2.1, and
I had serious problems if the system ever hard rebooted after a
power failure. Single user manual fsck's and all that.


> It's *best* to make more  
> partitions (esp for /var) so that if something goes out of control 
> logging, or you just neglect your logs, it doesn't go and fill up your 
> only (ie / ) partition. Like most *nix OS's, it can be as simple or as 
> complicated as you want it to be.

I want / + /boot. It's that simple.

-- 
Jesse Guardiani, Systems Administrator
WingNET Internet Services,
P.O. Box 2605 // Cleveland, TN 37320-2605
423-559-LINK (v)  423-559-5145 (f)
http://www.wingnet.net

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: /boot like linux!

2005-03-03 Thread Kevin Kinsey
Jesse Guardiani wrote:

Anyway, that worked. The kernel boots now, but it prompts
me at the beginning of the rc process for the root device.
I give it:
ufs:ad1s1d
Which is my / partition, and it boots successfully.
Is it possible to automate this process so that the loader
knows to use ad1s1d as my root device?
Thanks!
 

Please note that I'm a "fellow newb", and don't take this
as if it were from an authoritative source (other than whoever
I'm quoting...)
from boot(8):
 "Make note of the fact that /boot.config is read only from the `a' parti-
tion.  As a result, slices which are missing an `a' parition 
require user
intervention during the boot process."

Kevin Kinsey
P.S.  It might be better to go back and set things up
correctly.  As someone just said, you can do it with
just / and swap, if you don't feel the need to have
seperate partitions for /var, /usr, /tmp, whatever.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: RELENG_5_3 to RELENG_5 make installworld fails

2005-03-03 Thread Aaron Nichols
On Thu, 3 Mar 2005 14:39:16 -0800, Kent Stewart <[EMAIL PROTECTED]> wrote:

> You missed a step. Your system clock is off and that makes the
> installworld try to use touch. Set your system clock and you may have
> to remake your world but it should install.
> 
> Kent

Infact it was off - can you give me some detail as to why that
matters? Not that I doubt that having my system clock set to a date 8
months prior to the date of files in cvs might cause a problem - but
I'm curious about the details. If you can even point me at a URL and
I'll read for myself - I'm just curious.

If that was the problem (buildworld happenning as I type) then thank
you and my apologies for the oversight. New system, didn't bother to
make sure the BIOS date was right and ntp wasn't yet setup.

Thanks,
Aaron
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: /boot like linux!

2005-03-03 Thread Laurence Sanford
Jesse Guardiani wrote:
Hello,
I'm a FreeBSD 5.3 user as well as a Gentoo Linux user.
In Gentoo linux, you only have to create 3 partitions:
/boot
swap
/
In FreeBSD, you seem to have to create many more:
/
swap
/usr
/var
/tmp
In particular, it seems that /boot MUST be on the same
partition as /. This stinks, as now you have to create
separate partitions for /usr and /var, which wastes space.
I tried to make /boot it's own partition, and I succeeded,
to a certain extent. I actually made /boot/boot, because
the FreeBSD 5.3 boot manager wants to look under the /boot
directory for "loader". If /boot is it's own partition, then
you need a /boot/boot/loader.
Anyway, that worked. The kernel boots now, but it prompts
me at the beginning of the rc process for the root device.
I give it:
ufs:ad1s1d
Which is my / partition, and it boots successfully.
Is it possible to automate this process so that the loader
knows to use ad1s1d as my root device?
Thanks!
 

I'm not sure I understand the problem. If you don't want to create more 
partitions, then don't. You can make an 80gb (or 300gb, or whatever) 
drive into two partitions - a swap partition (2gig) and a / partition 
(78 gig) and install FreeBSD just fine. It's *best* to make more 
partitions (esp for /var) so that if something goes out of control 
logging, or you just neglect your logs, it doesn't go and fill up your 
only (ie / ) partition. Like most *nix OS's, it can be as simple or as 
complicated as you want it to be.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Sharing directories with jails

2005-03-03 Thread Anish Mistry
On Thursday 03 March 2005 05:23 pm, Ean Kingston wrote:
> > On Thursday 03 March 2005 12:42 pm, Chris Hodgins wrote:
>
> [cut original question and answer]
>
> >> Ok perhaps I should clarify what my intentions are a little
> >> more. I am planning on providing a FreeBSD jail for any member
> >> of a geek society I am a member of.  When I say they are
> >> untrusted, I mean that I won't be giving them full root access
> >> to my server but I trust them enough not to do anything
> >> malicious inside a jail.  It is just like a fun place they can
> >> play and not have to worry to much about breaking things.
> >>
> >> How easy is it exactly to break out of a jail if you have access
> >> to development tools?
> >
> > http://www.securiteam.com/unixfocus/5WP031535U.html
>
> How current is this? The article appears to be dated 2001. Are
> there still buffer-overflow issues with /proc?
>

5.3 and later no longer need proc and it's not mounted by default.

> > If you use securelevels you can a sigificantly improve security.

-- 
Anish Mistry


pgpQ4cZxqoqqA.pgp
Description: PGP signature


/boot like linux!

2005-03-03 Thread Jesse Guardiani
Hello,

I'm a FreeBSD 5.3 user as well as a Gentoo Linux user.
In Gentoo linux, you only have to create 3 partitions:

/boot
swap
/

In FreeBSD, you seem to have to create many more:

/
swap
/usr
/var
/tmp

In particular, it seems that /boot MUST be on the same
partition as /. This stinks, as now you have to create
separate partitions for /usr and /var, which wastes space.

I tried to make /boot it's own partition, and I succeeded,
to a certain extent. I actually made /boot/boot, because
the FreeBSD 5.3 boot manager wants to look under the /boot
directory for "loader". If /boot is it's own partition, then
you need a /boot/boot/loader.

Anyway, that worked. The kernel boots now, but it prompts
me at the beginning of the rc process for the root device.
I give it:

ufs:ad1s1d

Which is my / partition, and it boots successfully.
Is it possible to automate this process so that the loader
knows to use ad1s1d as my root device?

Thanks!

-- 
Jesse Guardiani, Systems Administrator
WingNET Internet Services,
P.O. Box 2605 // Cleveland, TN 37320-2605
423-559-LINK (v)  423-559-5145 (f)
http://www.wingnet.net


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: sudo & su

2005-03-03 Thread [EMAIL PROTECTED]
On Thu, 3 Mar 2005 22:47:09 +
Pietro Cerutti <[EMAIL PROTECTED]> wrote:

> There isn't any NOPASSWD, but if I give the password the first time,
> sudo doesn't ask for it anymore in the next 5 min or so...
> 

see : man sudoers

the timestamp_timeout section

> I think I really misunderstood the purpose of sudo. I thought that it
> was used to automatically login as root, give a command, and log back
> out to user who invoked the command.

more or less, yes

> So what's the purpose of asking for the password of the actually
> logged in user?

with sudo you can allow normal users to do certain things without the
need for sharing the root-password

here are some examples :
http://www.courtesan.com/sudo/man/sudoers.html#examples

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: sudo & su

2005-03-03 Thread Pietro Cerutti
On Thu, 03 Mar 2005 15:56:26 -0600, Paul Schmehl <[EMAIL PROTECTED]> wrote:

> Sure.  Use visudo to edit /etc/sudoers and set:
> rootALL = (ALL) ALL
> wheel   ALL = (ALL) ALL
> 
> If NOPASSWD is in there, take it out.

There isn't any NOPASSWD, but if I give the password the first time,
sudo doesn't ask for it anymore in the next 5 min or so...

> Sudo doesn't ask for *root*'s password.  It asks for *your* password.  If
> you knew root's password, you wouldn't need to use sudo.  You could use su.

I think I really misunderstood the purpose of sudo. I thought that it
was used to automatically login as root, give a command, and log back
out to user who invoked the command.
So what's the purpose of asking for the password of the actually logged in user?

Thank you


-- 
Pietro "Piter" Cerutti
<[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>

Beansidhe - SwiSS Death / Thrash Metal


Windows: "Where do you want to go today?"
Linux: "Where do you want to go tomorrow?"
FreeBSD: "Are you guys coming or what?"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: RELENG_5_3 to RELENG_5 make installworld fails

2005-03-03 Thread Kent Stewart
On Thursday 03 March 2005 02:21 pm, Aaron Nichols wrote:
> Hello World,
> Just got 5.3-RELEASE installed yesterday on this system and was
> cvsup'ing to 5-STABLE today. Used the following process, based on
> /usr/src/UPDATING (as well as the countless times I've done this
> before), and got the error below during 'installworld'. I did this
> same update (from 5.3-RELEASE to 5.4-PRERELEASE) a week ago and it
> worked fine, however I also noticed that mergemaster -p wanted a few
> user accounts setup prior to installworld, related to pf/pfauth -
> that no longer seems to be a requirement so I'm concerned I missed a
> step or made some other bonehead move that I'm not aware of.

You missed a step. Your system clock is off and that makes the 
installworld try to use touch. Set your system clock and you may have 
to remake your world but it should install.

Kent

>
> cvsup'ed w/ the following basic values in supfile (no, this is not
> the entirety of the file)
> *default host=cvsup17.FreeBSD.org
> *default base=/var/db
> *default prefix=/usr
> *default release=cvs tag=RELENG_5
> *default delete use-rel-suffix
>
> # cd /usr/src
> # make buildworld
> # make buildkernel KERNCONF=GENERIC
> # mergemaster -p
> # make installkernel KERNCONF=GENERIC
> # make installworld
>
> At this point - it gets started and then dies here:
> 
> --
>
> >>> Installing everything
>
> --
> cd /usr/src; make -f Makefile.inc1 install
> ===> share/info
> ===> include
> creating osreldate.h from newvers.sh
> touch: not found
> *** Error code 127
>
> Stop in /usr/src/include.
> *** Error code 1
>
> Stop in /usr/src.
> *** Error code 1
>
> Stop in /usr/src.
> *** Error code 1
>
> Stop in /usr/src.
> *** Error code 1
>
> Stop in /usr/src.
> 
>
> I've check through the archives - not exhaustively - and found a few
> references to the "touch: not found" error - but nothing which led me
> toward getting this fixed.
>
> Ideas? Perhaps a better place to ask? At this point - I've got the
> kernel installed and can't get world installed - I could cvsup back
> to -RELEASE and get back to a safe state, but I'd rather get this
> little wrinkle worked out.
>
> Thanks,
> Aaron
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"

-- 
Kent Stewart
Richland, WA

http://users.owt.com/kstewart/index.html
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: dumb network question

2005-03-03 Thread J.D. Bronson
At 02:10 PM 3/3/2005, Thomas Foster wrote:
hostname="my.hostname.whatever"
ifconfig_NIC1="inet a.b.c.d netmask 255.255.255.0"
ifconfig_NIC2="DHCP"
gateway_enable="YES"
replace NIC1 and NIC2 with the interface names.. and of course.. a.b.c.d 
with the internal IP address..

be sure theres no gateway defined for the internal interface.. and if you 
need help setting up a firewall/router, be sure and check out :

http://www.section6.net/help.php
Hope this helps
T
Yea...this is great. One last question guys...
for the nic that I have using for PPP...do I need anything special?
(like in OpenBSD I have to toss 'up' in hostname.fxp0 for example)
or does it -just- work.
thanks!

--
J.D. Bronson
Aurora Health Care // Information Services // Milwaukee, WI USA
Office: 414.978.8282 // Email: [EMAIL PROTECTED] // Pager: 414.314.8282
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Sharing directories with jails

2005-03-03 Thread Ean Kingston

> On Thursday 03 March 2005 12:42 pm, Chris Hodgins wrote:
[cut original question and answer]

>> Ok perhaps I should clarify what my intentions are a little more.
>> I am planning on providing a FreeBSD jail for any member of a geek
>> society I am a member of.  When I say they are untrusted, I mean
>> that I won't be giving them full root access to my server but I
>> trust them enough not to do anything malicious inside a jail.  It
>> is just like a fun place they can play and not have to worry to
>> much about breaking things.
>>
>> How easy is it exactly to break out of a jail if you have access to
>> development tools?
>>
>
> http://www.securiteam.com/unixfocus/5WP031535U.html

How current is this? The article appears to be dated 2001. Are there still
buffer-overflow issues with /proc?

>
> If you use securelevels you can a sigificantly improve security.
>

-- 
Ean Kingston
E-Mail: ean_AT_hedron_DOT_org
 PGP KeyID: 1024D/CBC5D6BB
   URL: http://www.hedron.org/


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RELENG_5_3 to RELENG_5 make installworld fails

2005-03-03 Thread Aaron Nichols
Hello World,
Just got 5.3-RELEASE installed yesterday on this system and was
cvsup'ing to 5-STABLE today. Used the following process, based on
/usr/src/UPDATING (as well as the countless times I've done this
before), and got the error below during 'installworld'. I did this
same update (from 5.3-RELEASE to 5.4-PRERELEASE) a week ago and it
worked fine, however I also noticed that mergemaster -p wanted a few
user accounts setup prior to installworld, related to pf/pfauth - that
no longer seems to be a requirement so I'm concerned I missed a step
or made some other bonehead move that I'm not aware of.

cvsup'ed w/ the following basic values in supfile (no, this is not the
entirety of the file)
*default host=cvsup17.FreeBSD.org
*default base=/var/db
*default prefix=/usr
*default release=cvs tag=RELENG_5
*default delete use-rel-suffix

# cd /usr/src
# make buildworld
# make buildkernel KERNCONF=GENERIC
# mergemaster -p
# make installkernel KERNCONF=GENERIC
# make installworld

At this point - it gets started and then dies here:

--
>>> Installing everything
--
cd /usr/src; make -f Makefile.inc1 install
===> share/info
===> include
creating osreldate.h from newvers.sh
touch: not found
*** Error code 127

Stop in /usr/src/include.
*** Error code 1

Stop in /usr/src.
*** Error code 1

Stop in /usr/src.
*** Error code 1

Stop in /usr/src.
*** Error code 1

Stop in /usr/src.


I've check through the archives - not exhaustively - and found a few
references to the "touch: not found" error - but nothing which led me
toward getting this fixed.

Ideas? Perhaps a better place to ask? At this point - I've got the
kernel installed and can't get world installed - I could cvsup back to
-RELEASE and get back to a safe state, but I'd rather get this little
wrinkle worked out.

Thanks,
Aaron
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: expat portupgrade dies

2005-03-03 Thread Paul Schmehl
--On Thursday, March 03, 2005 03:59:00 PM -0600 Randy Schultz 
<[EMAIL PROTECTED]> wrote:

On a 5.3 system when I try to portupgrade some ports the portupgrade
dies on expat:
I've tried doing a pkg_delete on the old expat, same effect.  Is there
a standard way to continue from this fail other than patching by hand?
Try running make distclean in the expat2 ports directory.  Then run make 
install and see if it installs independently of portupgrade.

Paul Schmehl ([EMAIL PROTECTED])
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: expat portupgrade dies

2005-03-03 Thread Michael C. Shultz
On Thursday 03 March 2005 01:59 pm, Randy Schultz wrote:
> On a 5.3 system when I try to portupgrade some ports the portupgrade
> dies on expat:
>   --->  Upgrading 'expat-1.95.6_1' to 'expat-1.95.8'
> (textproc/expat2) --->  Building '/usr/ports/textproc/expat2'
>   ===>  Cleaning for libtool-1.3.5_2
>   ===>  Cleaning for expat-1.95.8
>   ===>  Vulnerability check disabled, database not found
>   ===>  Extracting for expat-1.95.8
>
>   >> Checksum OK for expat-1.95.8.tar.gz.
>
>   ===>  Patching for expat-1.95.8
>   ===>  Applying FreeBSD patches for expat-1.95.8
>   1 out of 2 hunks failed--saving rejects to lib/expat.h.rej
>
>   >> Patch patch-expat.h failed to apply cleanly.
>   >> Patch(es) patch-configure applied cleanly.
>
>   *** Error code 1
>
>   Stop in /usr/ports/textproc/expat2.
>
>
> I've tried doing a pkg_delete on the old expat, same effect.  Is
> there a standard way to continue from this fail other than patching
> by hand?

Make sure you first run "make clean" to get rid of old patched files,
then run "make patch". If the patches still fail to apply then notify
the portmaintainer, if the patches apply then just continue with a
normal "make install clean".

-Mike
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


expat portupgrade dies

2005-03-03 Thread Randy Schultz
On a 5.3 system when I try to portupgrade some ports the portupgrade
dies on expat:
 --->  Upgrading 'expat-1.95.6_1' to 'expat-1.95.8' (textproc/expat2)
 --->  Building '/usr/ports/textproc/expat2'
 ===>  Cleaning for libtool-1.3.5_2
 ===>  Cleaning for expat-1.95.8
 ===>  Vulnerability check disabled, database not found
 ===>  Extracting for expat-1.95.8
 >> Checksum OK for expat-1.95.8.tar.gz.
 ===>  Patching for expat-1.95.8
 ===>  Applying FreeBSD patches for expat-1.95.8
 1 out of 2 hunks failed--saving rejects to lib/expat.h.rej
 >> Patch patch-expat.h failed to apply cleanly.
 >> Patch(es) patch-configure applied cleanly.
 *** Error code 1
 Stop in /usr/ports/textproc/expat2.
I've tried doing a pkg_delete on the old expat, same effect.  Is there
a standard way to continue from this fail other than patching by hand?
--
 Randy([EMAIL PROTECTED])  715-726-2832  <*>
 The Penguin Cometh
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: sudo & su

2005-03-03 Thread Paul Schmehl
--On Thursday, March 03, 2005 09:39:01 PM + Pietro Cerutti 
<[EMAIL PROTECTED]> wrote:

Hi folks,
I have to questions:
1) I can I tell sudo to ask for a password everytime it's invoked?
Sure.  Use visudo to edit /etc/sudoers and set:
rootALL = (ALL) ALL
wheel   ALL = (ALL) ALL
If NOPASSWD is in there, take it out.
man (5) sudoers
2) how can it be that, after updating root and toor passwords, sudo
asks for the old root password?
Sudo doesn't ask for *root*'s password.  It asks for *your* password.  If 
you knew root's password, you wouldn't need to use sudo.  You could use su.

Paul Schmehl ([EMAIL PROTECTED])
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Are quotas possbile on md filesystems?

2005-03-03 Thread Michael R. Wayne

Is it possible to use quotas on file-backed md filesystems
on 5.3?  I was guessing that a line in fstab like:

md  /home  mfs rw,-F/vnodes/home,nosuid,nodev,noexec,userquota  2 0

would work but it's not.  Can I get a working example?

/\/\ \/\/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Using META and DEL keys in console

2005-03-03 Thread Lars Eighner
On Thu, 3 Mar 2005, Alejandro Pulver wrote:
Where is the (complete) list of scancodes and which keys produce them?
If there is not, as I think, how can I know what scancode is produced by
each key in my keyboard (a program, maybe)?
As a practical matter, for the console keyboard I generally work
backwards from a known keymap (one of the distribution keymaps),
and cut and try.  man 5 kbdmap lists all the values you can
assign to key combinations (note the "5" - otherwise you are
likely to get man 1 kbdmap by default).  Notice that you can
use kbdmap or kbdcontrol to load a keymap to experiment with and
you do not have to reboot to see what happens.  I find this
works very well with American PC keyboards where there are only
a handful of keys that are in doubt, even with fairly esoteric
models, like butterflies with two keypads.
The distribution maps, after all, were not put together by crazy
people, so the unshifted values of most of the keys are pretty
logical.
Oh, hell, this is so easy, here is the run down from the us.unix
keymap:
# scan 
# code  base   Deduced key associatied with scan code
   (i.e. not tested, YMMV)
# --
  000   nop
  001   '`'`
  002   '1'keyboard (top row) 1
  003   '2'keyboard (top row) 2
  004   '3'keyboard (top row) 3
  005   '4'keyboard (top row) 4
  006   '5'keyboard (top row) 5
  007   '6'keyboard (top row) 6
  008   '7'keyboard (top row) 7
  009   '8'keyboard (top row) 6
  010   '9'keyboard (top row) 9
  011   '0'keyboard (top row) 0
  012   '-'keyboard (top row) -
  013   '='keyboard (top row) =
  014   deltop row backspace key
  015   ht tab
  016   'q'q - I trust you can figure out the letter keys
  017   'w'
  018   'e'
  019   'r'
  020   't'
  021   'y'
  022   'u'
  023   'i'
  024   'o'
  025   'p'
  026   '['
  027   ']'
  028   cr keyboard Enter
  029   clock  Caps Lock
  030   'a'
  031   's'
  032   'd'
  033   'f'
  034   'g'
  035   'h'
  036   'j'
  037   'k'
  038   'l'
  039   ';'
  040   '''
  041   escUpper left escape key
  042   lshift left shift
  043   '\'backslash/bar key (wherever it is)
  044   'z'
  045   'x'
  046   'c'
  047   'v'
  048   'b'
  049   'n'
  050   'm'
  051   ','
  052   '.'keyboard . (next to comma)
  053   '/'keyboard / (unshifted ?)
  054   rshift right shift
  055   '*'keypad *
  056   lalt   left alt
  057   ' 'space bar
  058   lctrl  left ctrl
  059   fkey01 F1
  060   fkey02 F2
  061   fkey03 F3
  062   fkey04 F4
  063   fkey05 F5
  064   fkey06 F6
  065   fkey07 F7
  066   fkey08 F8
  067   fkey09 F9
  068   fkey10 F10
  069   nlock  Num Lock
  070   slock  Scroll Lock
  071   fkey49 '7' keypad 7
  072   fkey50 '8' keypad 8
  073   fkey51 '9' keypad 9
  074   fkey52 '-' keypad -
  075   fkey53 '4' keypad 4
  076   fkey54 '5' keypad 5
  077   fkey55 '6' keypad 6
  078   fkey56 '+' keypad +
  079   fkey57 '1' keypad 1
  080   fkey58 '2' keypad 2
  081   fkey59 '3' keypad 3
  082   fkey60 '0' keypad 0
  083   bs '.' keypad .
  084   nop
  085   nop
  086   nop
  087   fkey11 F11
  088   fkey12 F12
  089   cr keypad enter
  090   rctrl  right control
  091   '/'keypad /
  092   nscr   pscr  Prt Screen (?)
  093   ralt   right alt
  094   fkey49 non-keypad Home
  095   fkey50 non-keypad up arrow
  096   fkey51 non-keypad Page Up
  097   fkey53 non-keypad left arrow
  098   fkey55 non-keypad right arrow
  099   fkey57 non-keypad End
  100   fkey58 non-keypad down arrow
  101   fkey59 non-keypad Page Down
  102   fkey60 non-keypad Insert
  103   bs non-keypad Delete
  104   slock  saver  Pause (?)
  105   fkey62 one of the windoz keys (104 keyboards)
  106   fkey63 the other windoz key (104 keyboards)
  107   fkey64 menu key (104 keyboards)
  108   nop

I might have the Pause and PrtScrn keys mixed up as I haven't
actually tested this.  Note: some "scan codes" are not
associated with any keys on a PC keyboard and you do not have on
a 101 keyboard the Windoz & menu keys. Also, many "Internet"
buttons which are now common on the cheapest replacement keyboards
don't do anything at all.
What is called the "scancode" in FreeBSD console keymaps is
not, evidently, the same thing as the very deep BIOS scan codes
which you can (must) work with in some other operating systems.
I think this is a good thing for PC users, but it may be
otherwise for those with very obscure hardware.
For the X keyboard there is the xkeycaps program (which is in
the ports if not the base X package you are using), which can
show the layout and keynumbers/keynames for most brands of PC
keyboards and some usually sufficient generics.  Notice, however
that the X keynumbers are *not* always the same as what are
called the scancodes in the console keymaps (although there are
often sufficient similarities to mislead you into thinking they
will be the same).
Mapping the X keyboard and mappi

Re: driver recompiler or translator for evdo and hsdpa

2005-03-03 Thread Lowell Gilbert
"bob wireless internet evdo & wifi hotspot guy" <[EMAIL PROTECTED]> writes:

> Lemme start by admitting i am NOT a programmer... and the APPLE OS is the
> most i know about unix.. that said (go easy on me  :o)
> 
> is it possible to make a translation program that takes drivers and just
> ports them over to other OS's?  i have many EVDO and HSDPA products comming
> out and want a quick way to make them freebsd or linux compatible...

Not in general, but see 
http://www.freebsd.org/cgi/man.cgi?query=ndis&sektion=4&manpath=FreeBSD+5.3-RELEASE+and+Ports
and
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-wireless.html#AEN37825

You also may find a volunteer willing to write a driver in return for
a donation of the card in question.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


sudo & su

2005-03-03 Thread Pietro Cerutti
Hi folks,
I have to questions:
1) I can I tell sudo to ask for a password everytime it's invoked?
2) how can it be that, after updating root and toor passwords, sudo
asks for the old root password?

Thank you!


-- 
Pietro "Piter" Cerutti
<[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>

Beansidhe - SwiSS Death / Thrash Metal


Windows: "Where do you want to go today?"
Linux: "Where do you want to go tomorrow?"
FreeBSD: "Are you guys coming or what?"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Vinum raid5 problems......

2005-03-03 Thread matt virus
Hi all:
I have a FBSD 5.2.1 box running vinum.  7 *160gb drives in a raid5 array.
The array has been problematic recently, but never anything too serious.
 Always recoverable by a rebuild or something of that nature.
Two days ago, the box froze up.  I brought it back online to see that
one subdisk was down.  I started it and it regenerated overnight without
error.
Today, i go to check the box over, a listing of vinum subdisks & plexes
looks exactly as it should.
when I try to mount the raid5 partition, i get a message about being
unmounted improperly and an fsck starts.  It says it recalculated the
superblock, completes, and mounts the raid5 partition.
df -h shows the partition size correct, but the used and freespace are
completely wrong.
If I try to do  fsck_ufs /dev/vinum/raid5, i get an errorcannot
allocate xx bytes for inphead.
If I try to read from the partition, i cause a kernel panic.
I can post specific errors and logs and such later, i'm away from the
box right now --- anybody have any thoughts ?
--
Matt Virus ("veer-iss")
http://www.mattvirus.net
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Sources vs. ports

2005-03-03 Thread Jeff With
>On Thu, 3 Mar 2005 15:47:02 -0500, Madhusudan Singh
<[EMAIL PROTECTED]> > > > wrote:
> Hi
> 
>  Since some of the ports I need are broken, I am thinking of installing those
> parts from source. However, is there a way to let the local ports hierarchy
> "know" that a certain package has been installed, albeit by other means ?

The handbook answer.. broken ports: fix-it, gripe or find our package
from a local mirror...
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ports-broken.html

.. or 

build your own package w/ pkg_create
http://www.freebsd.org/cgi/man.cgi?query=pkg_create&sektion=1&apropos=0&manpath=FreeBSD+5.3-RELEASE+and+Ports

what ports you are trying to build?

- jw
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: ipfw or pf

2005-03-03 Thread Loren M. Lang
On Wed, Mar 02, 2005 at 12:57:06PM +0100, Albert Shih wrote:
>  Le 02/03/2005 ? 09:03:23+0100, Stevan Tiefert a ?crit
> > 
> > 
> > On Tue, 1 Mar 2005, Albert Shih wrote:
> > 
> > >
> > 
> > The both packef filters are maintained! pf is "ported" from OpenBSD and
> > ipfw is from FreeBSD.
> 
> GreatI can continu to use ipfw;-))
> 
> > 
> > Whenever two programs two syntaxes...
> 
> Well it's not de syntaxes, I always use packet filter system (sometime on
> hardware like Foundry/Cisco) where the rule is : First match first use. And
> the pf use entire rules is very strange for me (I known I can use ?quick?
> butwell it's not the philosophy I think).

I like first match better too, but I think pf is sufficiently better
that I just use it with quick over ipfw.

> 
> Lots of thanks for your answer.
> 
> Regards.
> 
> 
> --
> Albert SHIH
> Universite de Paris 7 (Denis DIDEROT)
> U.F.R. de Mathematiques.
> 7 i?me ?tage, plateau D, bureau 10
> Heure local/Local time:
> Wed Mar 2 12:54:22 CET 2005
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpiBXaBTrSo9.pgp
Description: PGP signature


Re: tab completion

2005-03-03 Thread Loren M. Lang
On Wed, Mar 02, 2005 at 06:50:55AM +0200, abu khaled wrote:
> I'm not sure if this helps but you can at least try.
> 
> login as non-root (user)
> run this command: chsh -s /bin/tcsh
> you well be prompted for you non-root password
> logout and login again as non-root and see if it works
> 
> you can su to root and use use the same command to change the root
> shell.(sh is recommended for root)

For root, they recommend only /sbin/sh as something may break, but there
is an account called toor.  It is basically another name for root and
you can change toor's shell to anything.  Also, some ppl recommend using
su -m I believe when suing to root and you keep the same shell I think.
And then their's sudo in which you will almost never even need to send
time as root.

> 
> I hope it works!!!
> 
> On Tue, 01 Mar 2005 20:24:13 -0800, Ben Munat <[EMAIL PROTECTED]> wrote:
> > I used vipw to set my regular user's shell to tcsh. /etc/passwd shows it 
> > correct now but I
> > still appear to be getting sh as my shell. If I run tcsh, I then get the 
> > tab completion.
> > But how do I get the terminal to put me in tcsh automatically?
> > 
> > Ben
> > 
> > 
> > Jonathan Chen wrote:
> > > On Tue, Mar 01, 2005 at 09:28:02AM -0800, Ben Munat wrote:
> > >
> > >>None of those commands worked... However, I've also found that echo $SHELL
> > >>in my regular user's terminal says /bin/sh, while as root it says 
> > >>/bin/csh.
> > >
> > >
> > > If you're using /bin/sh, then of course none of the given commands
> > > will work as they are for tcsh.
> > >
> > >
> > >>Both root and the non-root user's shells are listed in /etc/passwd as
> > >>/bin/tcsh, so where else would the shell get set? Can I just set all
> > >>terminals and all users (i.e. me) to have the same shell with the same
> > >>capabilities?
> > >
> > >
> > > I suspect that /etc/passwd has gotten out of sync with master.passwd.
> > > Don't edit /etc/passwd. Use vipw(1) and make your changes within
> > > there.
> > ___
> > freebsd-questions@freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> > To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> >
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpbuwSaBkGE2.pgp
Description: PGP signature


IP aliases and forcing outbound IP

2005-03-03 Thread patrick
I have a FreeBSD 4.11 box whose ethernet card has several IP address. 

inet 10.0.1.254 netmask 0xff00 broadcast 10.0.1.255
inet 10.0.1.111 netmask 0x broadcast 10.0.1.111

Is there a way I can cause outbound connections to certain hosts to be
from 10.0.1.111 instead of the default 10.0.1.254? I used to be able
to do this fairly easy in Linux because each alias is actually a
separate ethernet device (eg. eth0:0, eth0:1, etc.), but I haven't
figured out how to do this in FreeBSD.

Patrick
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


smbclient + tar

2005-03-03 Thread Sherman, Michael (GE Energy)
Hi all.

I use smbclient in conjunction with tar

/usr/local/bin/smbclient -d0 //$winpc/$share \
$password -Tc $backupdir/$backupfile $windir &&

 to back up work from my Windows PC. I noticed that tar skipped files. If
anyone used it, how reliable is it? Also if there are any suggestions to
backup stuff from Windows to FreeBSD, they are welcome.

Thanks in advance
Michael
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Received mail timestamp is off by 7 hours

2005-03-03 Thread Loren M. Lang
On Wed, Mar 02, 2005 at 01:00:15PM -0800, Luke wrote:
> 
> >>There's no excuse for a mailserver to not be synced to a NTP source.
> >
> >I'd extend that to apply to any server.  Practically all the things a
> >server does are dependent in some way on the correct time.
> 
> I have three excuses:
> 1) NTP is difficult to configure.  I've done it, but it wasn't trivial.

ntpdate once at boot.

> 2) Finding an NTP server willing to accept traffic from the public isn't 
> easy either.  For me it involved a scavenger hunt through out-of-date 
> websites and a lot of failed attempts.

http://www.nist.gov/

> 3) If your clock tends to run noticably fast or slow, constant NTP 
> corrections tend to do more harm than good, at least in my experience.  It 
> got to where I couldn't even run a buildworld because NTP kept tinkering 
> with the clock in the middle of the process.

Same as 1)

> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgp3yOu0GrZHj.pgp
Description: PGP signature


Re: Received mail timestamp is off by 7 hours

2005-03-03 Thread Loren M. Lang
On Wed, Mar 02, 2005 at 03:11:19AM -0800, Ted Mittelstaedt wrote:
> 
> 
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] Behalf Of Loren M. Lang
> > Sent: Wednesday, March 02, 2005 2:29 AM
> > To: Ian Smith
> > Cc: Loren M. Lang; Pat Maddox; freebsd-questions@freebsd.org
> > Subject: Re: Received mail timestamp is off by 7 hours
> >
> 
> > little bit less reliable using local to UTC unless you are not affected
> > by any daylight savings changes like Arizona in the US or, I'm
> > sure, many
> > other places around the world.
> >
> 
> There's no excuse for a mailserver to not be synced to a NTP source.

I agree, I run ntp on every single computer I own, but I was talking in
general.  But for a server, I'd expect them to use UTC anyways.  The
only advantage I see to local time is support for other oses or reading
the time in the bios, neither of which will probably be a big deal on a
server.  And for desktop users, they may not bother running ntp or even
be on a network.

> 
> Ted

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Installation instructions for Firefox somewhere?

2005-03-03 Thread Loren M. Lang
On Wed, Mar 02, 2005 at 03:27:09AM -0800, Ted Mittelstaedt wrote:
> 
> 

> > > Also one other thing that is important - if you don't get an answer
> > > within a week or so, ask again, politely.
> >
> > How do I ask after the second post with no reply?  On bended knee?
> 
> Just keep asking periodically.  Or, you could e-mail the developer of
> the SCSI device driver directly, it's not hard to read the source and
> see who it is, and their e-mail addresses are on the FreeBSD website.

Actually, I've found lately that a good irc chatroom can help with some
problems that ppl may just ignore on a mailing list.  I've been hanging
out in #freebsd and #netbsd on irc.freenode.net.

> 
> Ted
> 
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Sources vs. ports

2005-03-03 Thread Madhusudan Singh
Hi

 Since some of the ports I need are broken, I am thinking of installing those 
parts from source. However, is there a way to let the local ports hierarchy 
"know" that a certain package has been installed, albeit by other means ?

Thanks.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Frontpage Extension Question

2005-03-03 Thread Anthony Atkielski
Darryl Hoar writes:

> Greetings,
> I have apache-fp installed on my machine.  Sometime ago, I setup a website
> with frontpage extensions.  Well my domain name changed and I added another
> website.
>
> on my existing website with FP extensions, what do I need to do since my
> domainname changed ?  Also, how to I add fp extensions to the new website ?

I believe you can make all necessary changes via the Web interface if
you've already installed FP extensions previously.  See

http://www.microsoft.com/resources/documentation/sts/2001/all/proddocs/en-us/admindoc/owsd02.mspx

Don't forget that FrontPage extensions can dramatically diminish the
security of your server and can considerably complicate its operation.
I always recommend against FrontPage on production servers open to the
Net.

-- 
Anthony


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Does 802.11b use a lot of resources?

2005-03-03 Thread Loren M. Lang
On Wed, Mar 02, 2005 at 08:32:55AM -0800, Christopher Kelley wrote:
> Loren M. Lang wrote:
> 
> >On Wed, Mar 02, 2005 at 01:26:45AM -0500, Bob Johnson wrote:
> > 
> >
> >>On Friday 25 February 2005 12:06 am, Christopher Kelley wrote:
> >>   
> >>
> >>>Have I tried too hard to squeeze usability out of an old computer?
> >>>
> >>>I have a Pentium-166 that has been a faithful router & firewall (FreeBSD
> >>>5.3 and pf) for a couple years now.  It has no trouble with the 3 to 4
> >>>Mbps I get from my broadband connection, at least not with ethernet.
> >>>
> >>>I wanted wireless, so I could use my laptop around the house.  I
> >>>dutifully read the section in the manual about setting up FreeBSD as an
> >>>access point. I'm using a Netgear MA311 802.11b card (Prism 2.5
> >>>chipset).  And it does work, except it's very slow.  Now I know that I
> >>>can only expect about 50% of the rated speed with wireless, but I
> >>>figured even if I got only 4Mbps, I'd be fine.  But I get less than
> >>>1Mbps.  I've updated the firmware, added a signal booster and hi-gain
> >>>antenna, and I have "excellent" signal strength throughout my house.
> >>>
> >>>So my question is, is there more overhead with wireless than with
> >>>ethernet?  TOP doesn't seem to show that I'm taxing it too hard, idle
> >>>never goes below about 70% with polling enabled (Hz=1000), and never
> >>>below about 80% with polling disabled.  Am I expecting too much out of
> >>>an old Pentium-166?
> >>>
> >>> 
> >>>
> >>My experience is that:
> >>
> >>1) 50% throughput is probably the best you should expect.  I generally 
> >>plan on 3-4 Mbps for an 11 Mbps 802.11b card.
> >>
> >>2) Using 128-bit encryption (WEP) will significantly slow down some 
> >>(many?) cards. The WEP processing is done on the card (I think), and they 
> >>simply don't have hefty processors. If you use 128-bit WEP, try 64-bit 
> >>WEP and see if that speeds things up.  64 bit WEP is adequate to keep out 
> >>casual snoopers, and 128 bit is not adequate to keep out a serious 
> >>attacker, so the difference in security may not be as important as some 
> >>believe.  64-bit WEP is also known as 40-bit, and similarly for 128-bit 
> >>WEP.
> >>   
> >>
> >
> >Actually, what I recommend for home you, if you have the time, is IPSEC.
> >Much more secure than WEP and it's all done on the main cpu so it should
> >slow the wifi down as much.  There's a good article on freebsddiary.org
> >I believe.
> >
> > 
> >
> I found the article on freebsddiary, and I admit I only skimmed it, but 
> I have a mix of FreeBSD and Windows (XP) on my wireless network, and for 
> now I'd like to keep it as simple as possible.

I just wanted to mention that I have IPSEC running with several Win2k
computers and it works great.  The configuration is relatively simple,
the main problem was a couple of tweaks I needed to give to racoon, but
the windows side was even easier.  It's still more complicated than WEP,
but it's more secure and may provide faster data transfer.

> 
> Christopher
> 
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: ipfw lost its mind?

2005-03-03 Thread Subhro


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:owner-freebsd-
> [EMAIL PROTECTED] On Behalf Of Paul Schmehl
> Sent: Friday, March 04, 2005 1:51
> To: 'FreeBSD questions'
> Subject: RE: ipfw lost its mind?
> 
> --On Friday, March 04, 2005 01:21:11 AM +0530 Subhro
> <[EMAIL PROTECTED]>
> wrote:
> 
> > Do you block UDP?
> 
> First question would be - which direction?

Incoming.

> 
> I allow udp *to* port 53.  I allow *ip* outgoing, so any response to a dns
> request would be answered.

Not relevant, as far as my knowledge goes.

> Even though it doesn't make sense to me.  If my *first* rule is "allow ip
> from x.x.x.x/32 to {server}" and I also have a rule that says "allow ip
> from {server} to any", then I can't imagine why a restriction on udp would
> interfere with that since "ip" includes both tcp and udp.

That's a point. If this is the case, i.e. you are using "ip" then tcp/udp
makes no difference. Did you lately do any builds or partial builds of the
source tree?


Indian Institute of Information Technology
Subhro Sankha Kar
Block AQ-13/1, Sector V
Salt Lake City
PIN 700091
India


smime.p7s
Description: S/MIME cryptographic signature


RE: ipfw lost its mind?

2005-03-03 Thread Paul Schmehl
--On Friday, March 04, 2005 01:21:11 AM +0530 Subhro <[EMAIL PROTECTED]> 
wrote:

Do you block UDP?
First question would be - which direction?
I allow udp *to* port 53.  I allow *ip* outgoing, so any response to a dns 
request would be answered.

I am asking this because, I *used* do a block on all UDP except the DNS
port and had exactly the same problem.
Very odd.  I'll give that a try.
Even though it doesn't make sense to me.  If my *first* rule is "allow ip 
from x.x.x.x/32 to {server}" and I also have a rule that says "allow ip 
from {server} to any", then I can't imagine why a restriction on udp would 
interfere with that since "ip" includes both tcp and udp.

Besides the firewall has been working flawlessly for three years *with* 
that restriction.  Makes me think that *something* in the firewall code 
changed recently and got installed when I ran freebsd-update.

Paul Schmehl ([EMAIL PROTECTED])
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: dumb network question

2005-03-03 Thread Thomas Foster
hostname="my.hostname.whatever"
ifconfig_NIC1="inet a.b.c.d netmask 255.255.255.0"
ifconfig_NIC2="DHCP"
gateway_enable="YES"
replace NIC1 and NIC2 with the interface names.. and of course.. a.b.c.d 
with the internal IP address..

be sure theres no gateway defined for the internal interface.. and if you 
need help setting up a firewall/router, be sure and check out :

http://www.section6.net/help.php
Hope this helps
T
- Original Message - 
From: "J.D. Bronson" <[EMAIL PROTECTED]>
To: 
Sent: Thursday, March 03, 2005 12:05 PM
Subject: dumb network question


Ok. I admit it. I cant figure what I am missing.
I have 2 NICs in this machine.
NIC 1 is a LAN NIC and static IP. - that I can figure out.
NIC 2 needs to be DHCP (from cable modem).
and I want the default router to be the DHCP cable
modem gateway IP (passed from dhclient).
What do I need to setup in /etc/rc.conf
to make this happen?
Thanks and sorry for the dumb question.

--
J.D. Bronson
Aurora Health Care // Information Services // Milwaukee, WI USA
Office: 414.978.8282 // Email: [EMAIL PROTECTED] // Pager: 414.314.8282
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
"[EMAIL PROTECTED]"


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: dumb network question

2005-03-03 Thread Chad Morland
ifconfig_nic2="DHCP"

man rc.conf

-CM


On Thu, 03 Mar 2005 14:05:07 -0600, J.D. Bronson <[EMAIL PROTECTED]> wrote:
> Ok. I admit it. I cant figure what I am missing.
> 
> I have 2 NICs in this machine.
> 
> NIC 1 is a LAN NIC and static IP. - that I can figure out.
> 
> NIC 2 needs to be DHCP (from cable modem).
> and I want the default router to be the DHCP cable
> modem gateway IP (passed from dhclient).
> 
> What do I need to setup in /etc/rc.conf
> to make this happen?
> 
> Thanks and sorry for the dumb question.
> 
> --
> J.D. Bronson
> Aurora Health Care // Information Services // Milwaukee, WI USA
> Office: 414.978.8282 // Email: [EMAIL PROTECTED] // Pager: 414.314.8282
> 
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


dumb network question

2005-03-03 Thread J.D. Bronson
Ok. I admit it. I cant figure what I am missing.
I have 2 NICs in this machine.
NIC 1 is a LAN NIC and static IP. - that I can figure out.
NIC 2 needs to be DHCP (from cable modem).
and I want the default router to be the DHCP cable
modem gateway IP (passed from dhclient).
What do I need to setup in /etc/rc.conf
to make this happen?
Thanks and sorry for the dumb question.

--
J.D. Bronson
Aurora Health Care // Information Services // Milwaukee, WI USA
Office: 414.978.8282 // Email: [EMAIL PROTECTED] // Pager: 414.314.8282
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: ipfw lost its mind?

2005-03-03 Thread Subhro
Do you block UDP?
I am asking this because, I *used* do a block on all UDP except the DNS port
and had exactly the same problem.

Regards
S.

Indian Institute of Information Technology
Subhro Sankha Kar
Block AQ-13/1, Sector V
Salt Lake City
PIN 700091
India
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:owner-freebsd-
> [EMAIL PROTECTED] On Behalf Of Paul Schmehl
> Sent: Friday, March 04, 2005 1:09
> To: FreeBSD questions
> Subject: Re: ipfw lost its mind?
> 
> --On Thursday, March 03, 2005 01:48:16 PM -0500 Chuck Swiger
> <[EMAIL PROTECTED]> wrote:
> >
> > TCP connections are bidirectional, therefore you need to add rules which
> > allow traffic from all back to your workstation, or else use keep-state
> > and check-state to use dynamic rules
> 
> The firewall script already had a rule for that:
> allow ip from {server} to any
> 
> The problem wasn't that the firewall was *stopping* legitimate packets.
> It
> was just *slowing them down* like crazy.  Very weird.
> 
> Paul Schmehl ([EMAIL PROTECTED])
> Adjunct Information Security Officer
> The University of Texas at Dallas
> AVIEN Founding Member
> http://www.utdallas.edu
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-
> [EMAIL PROTECTED]"


smime.p7s
Description: S/MIME cryptographic signature


Re: ndis problem

2005-03-03 Thread Pablo Allietti
On Thu, Mar 03, 2005 at 05:04:00PM +, Adam McMaster wrote:
> 


yep adam the problem is that . my ndis cont support USB.
now i do a cvsup and download new ndis but now if_ndis no compile. can
you help me_


this is the error

sony# make
Warning: Object directory not changed from original
/usr/src/sys/modules/if_ndis
cc -O -pipe  -D_KERNEL -DKLD_MODULE -nostdinc -I-   -I. -I@
-I@/contrib/altq -I@/../include -finline-limit=8000 -fno-common
-mno-align-long-strings -mpreferred-stack-boundary=2 -ffreestanding
-Wall -Wredundant-decls -Wnested-externs -Wstrict-prototypes
-Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual
-fformat-extensions -std=c99 -c
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:429: warning:
type defaults to `int' in declaration of `ndis_create_sysctls'
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:429: warning:
parameter names (without types) in function declaration
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:429: warning:
redundant redeclaration of 'ndis_create_sysctls'
@/compat/ndis/ndis_var.h:1537: warning: previous declaration of
'ndis_create_sysctls' was here
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:429: warning:
data definition has no type or storage class
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:433: error:
syntax error before "if"
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:96: warning:
'ndis_txeof' used but never defined
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:98: warning:
'ndis_rxeof' used but never defined
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:100: warning:
'ndis_linksts' used but never defined
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:101: warning:
'ndis_linksts_done' used but never defined
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:110: warning:
'ndis_intr' declared `static' but never defined
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:111: warning:
'ndis_intrtask' declared `static' but never defined
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:112: warning:
'ndis_tick' declared `static' but never defined
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:113: warning:
'ndis_ticktask' declared `static' but never defined
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:114: warning:
'ndis_start' declared `static' but never defined
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:115: warning:
'ndis_starttask' declared `static' but never defined
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:116: warning:
'ndis_ioctl' declared `static' but never defined
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:117: warning:
'ndis_wi_ioctl_get' declared `static' but never defined
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:118: warning:
'ndis_wi_ioctl_set' declared `static' but never defined
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:119: warning:
'ndis_80211_ioctl_get' declared `static' but never defined
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:120: warning:
'ndis_80211_ioctl_set' declared `static' but never defined
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:121: warning:
'ndis_init' declared `static' but never defined
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:122: warning:
'ndis_stop' declared `static' but never defined
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:123: warning:
'ndis_watchdog' declared `static' but never defined
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:124: warning:
'ndis_ifmedia_upd' declared `static' but never defined
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:125: warning:
'ndis_ifmedia_sts' declared `static' but never defined
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:126: warning:
'ndis_get_assoc' declared `static' but never defined
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:270: warning:
'ndis_set_offload' defined but not used
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:129: warning:
'ndis_getstate_80211' declared `static' but never defined
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:130: warning:
'ndis_setstate_80211' declared `static' but never defined
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:131: warning:
'ndis_media_status' declared `static' but never defined
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:196: warning:
'ndis_setmulti' defined but not used
/usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:135: warning:
'ndis_map_sclist' declared `static' but never defined



> On 3 Mar 2005, at 17:19, Pablo Allietti wrote:
> 
> >hi all me again.
> >
> >i have a problem with ndis in freebsd 5.3
> >
> >i do
> >
> >
> >sony# cd /usr/src/sys/modules/if_ndis/
> >sony# make clean
> >rm -f /usr/src/sys/modules/if_ndis/export_syms if_ndis.ko if_ndis.kld
> >if_ndis.o if_ndis_pci.o if_ndis_pccard.o @ mac

Re: ipfw lost its mind?

2005-03-03 Thread Paul Schmehl
--On Thursday, March 03, 2005 01:48:16 PM -0500 Chuck Swiger 
<[EMAIL PROTECTED]> wrote:
TCP connections are bidirectional, therefore you need to add rules which
allow traffic from all back to your workstation, or else use keep-state
and check-state to use dynamic rules
The firewall script already had a rule for that:
allow ip from {server} to any
The problem wasn't that the firewall was *stopping* legitimate packets.  It 
was just *slowing them down* like crazy.  Very weird.

Paul Schmehl ([EMAIL PROTECTED])
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: ipfw lost its mind?

2005-03-03 Thread Chuck Swiger
Paul Schmehl wrote:
[ ... ]
So, I removed rule 1 and created a new one like this:
ipfw add 00050 allow ip from {my workstation at work) to any.
I then ssh'd to my workstation and attempted to ssh back to the server.  
No go.  Yet ipfw show shows an increased packet count on the counter for 
that rule.  So, it's seeing the packets, but they're being delayed somehow.

Why the allow ip from any to any works, but allow ip from my workstation 
to any doesn't is a complete mystery to me.
TCP connections are bidirectional, therefore you need to add rules which allow 
traffic from all back to your workstation, or else use keep-state and 
check-state to use dynamic rules

--
-Chuck
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: [repost] ip.forwarding with pf

2005-03-03 Thread Giorgos Keramidas
On 2005-03-03 12:28, "J.D. Bronson" <[EMAIL PROTECTED]> wrote:
>At 12:13 PM 03/03/2005, Chris Hodgins wrote:
>>Hmm I found this:
>>http://mailman.twdx.net/pipermail/occaid/2003-October/000250.html
>>
>>Google for "freebsd net.inet.ip.fastforwarding".
>
> Hey guys...all of this seems really coolbut is it appropriate for one
> to use 'fast forwarding' when using pf/nat ?
>
> It -seems- to me that if one wants to use pf and/or nat that 'fast
> forwarding is not applicable nor desired.
>
> OTOH, if it IS desirable, I certainly want to use it.

Yes and no.

When fast forwarding is enabled, the network packets are processed
synchronously, as they arrive, at the link layer (i.e. Ethernet driver).
This lets the ethernet driver process the packets as close as possible
to the original interrupt that pulls them off the driver's input queue,
which is arguably faster than waiting for an asynchronous netisr
(network interrupt service) routine to grab them later.

This is faster for some operations, but it also breaks others.

For instance, I think IPSEC doesn't work with fast forwarding.

IP option processing is not done in the fast forwarding code.

Multicast or broadcast don't work either.

So, there are tradeoffs for the increased speed in packet processing.
But they are not related to PF or NAT.  At least, not directly.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


ipfw lost its mind?

2005-03-03 Thread Paul Schmehl
I maintain a small hobby website running on FreeBSD 4.9 SECURITY.  I'm 
paranoid about security and religious about updates (kernel and ports). 
Recently, the server began to exhibit odd behavior that looked for all the 
world like name resolution issues.

I had recently updated bind to 9.0.3_1, so I assumed that was the likely 
culprit and I began to troubleshoot.  Bind was acting flaky, so I 
deinstalled it and install 8.4 instead.  It still complained about the 
socket file (which is what 9.0.3_1 did) so I decided to dump bind and 
installed djbdns instead.  (Best thing I ever did.  Response is much 
better.)

However, the sluggishness problem continued.  Last night I drove back over 
to the server and, after checking some things, I discovered some very 
strange behavior from ipfw.

Even though my script has been working fine for over three years, I found 
that when I added a rule to allow all (ipfw add 1 allow ip from any to 
any) the server immediately began to process traffic normally.

Keep in mind, before I made this change, you could still access the 
website.  It was just slower than molasses.  Ssh and mail sessions timed 
out and were unusable.

So, I removed rule 1 and created a new one like this:
ipfw add 00050 allow ip from {my workstation at work) to any.
I then ssh'd to my workstation and attempted to ssh back to the server.  No 
go.  Yet ipfw show shows an increased packet count on the counter for that 
rule.  So, it's seeing the packets, but they're being delayed somehow.

Why the allow ip from any to any works, but allow ip from my workstation to 
any doesn't is a complete mystery to me.

To make a long story short, I disabled the firewall and everything is 
running normally.

My question is, has anyone else seen recent strange behavior from ipfw?  Or 
has anyone seen this *kind* of behavior from ipfw and knows what the cause 
is?

Paul Schmehl ([EMAIL PROTECTED])
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Frontpage Extension Question

2005-03-03 Thread Darryl Hoar
Greetings,
I have apache-fp installed on my machine.  Sometime ago, I setup a website
with frontpage extensions.  Well my domain name changed and I added another
website.

on my existing website with FP extensions, what do I need to do since my
domainname changed ?  Also, how to I add fp extensions to the new website ?

thanks,
Darryl

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: [repost] ip.forwarding with pf

2005-03-03 Thread Giorgos Keramidas
On 2005-03-03 18:13, Chris Hodgins <[EMAIL PROTECTED]> wrote:
> Giorgos Keramidas wrote:
>>On 2005-03-03 10:15, Tomas Quintero <[EMAIL PROTECTED]> wrote:
>>>On Thu, 03 Mar 2005 06:30:52 -0600, J.D. Bronson <[EMAIL PROTECTED]> wrote:
 No one replied to this and I thought it was easy for someone on
 this list to help me?

 I am going to run pf and setup FBSD as a router (3 NICs).  And I
 see there are some options:

 net.inet.ip.fastforwarding
 or
 net.inet.ip.forwarding

 Can someone tell me which is appropriate when FreeBSD 5.4-PRE is
 used as a router running pf with built in NAT ?
>>
>> As far as the original question, regarding PF and forwarding, the
>> answer is AFAIK, that it should work.  I haven't used PF's network
>> address translation until now, but I don't see why it wouldn't work.
>>
>> Packet forwarding is, unless I'm mistaken, a prerequisite for any
>> gateway.  The fact that the gateway also translates addresses is not
>> obligatory but just a characteristics of the local network topology
>> (i.e. availability of public addresses).
>
> Hmm I found this:
> http://mailman.twdx.net/pipermail/occaid/2003-October/000250.html
>
> Google for "freebsd net.inet.ip.fastforwarding".

Teh source is always a better source of documentation :)

If you look at /usr/src/sys/netinet/ip_fastfwd.c, the comments near the
top say the following:

 *
 * Firewalling is fully supported including divert, ipfw fwd and ipfilter
 * ipnat and address rewrite.
 *

Reading the body of the ip_fastforward() function is also very helpful.
It contains both hooks for ALTQ and PFIL processing of the incoming
packets, so the answer to the original question is that "yes, address
rewriting and bandwidth shaping work with fast forwarding too".

- Giorgos

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: [repost] ip.forwarding with pf

2005-03-03 Thread J.D. Bronson
At 12:13 PM 03/03/2005, Chris Hodgins wrote:
Hmm I found this:
http://mailman.twdx.net/pipermail/occaid/2003-October/000250.html
Google for "freebsd net.inet.ip.fastforwarding".
Chris
Hey guys...all of this seems really coolbut is it appropriate for one 
to use 'fast forwarding' when using pf/nat ?

It -seems- to me that if one wants to use pf and/or nat that 'fast 
forwarding is not applicable nor desired.

OTOH, if it IS desirable, I certainly want to use it.
thanks-

--
J.D. Bronson
Aurora Health Care // Information Services // Milwaukee, WI USA
Office: 414.978.8282 // Email: [EMAIL PROTECTED] // Pager: 414.314.8282
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Question about cvsup

2005-03-03 Thread Madhusudan Singh
Thanks for a very helpful response.

I have another query. As a matter of practice, is it a good idea to upgrade 
ports immediately after a kernel compile ?

I do not expect that the ports depend directly on the kernel (for most changes 
in kernel), though I could well be wrong (for instance cdrecord on linux had 
major problems after the 2.6.9 kernel came out).

On Thursday 03 March 2005 04:24, Ewald Jenisch wrote:
> On Tue, Mar 01, 2005 at 10:15:05PM -0500, Madhusudan Singh wrote:
> > Hi
> >
> >  I am new to FreeBSD and trying to use CVSup after someone suggested it
> > to me on comp.unix.misc.bsd.freebsd.
> >
> >  My supfile :
> >
> > *default tag=.
> > *default host=cvsup.FreeBSD.org
> > *default prefix=/usr
> > *default base=/var/db
> > *default release=cvs delete use-rel-suffix compress
> >
> > ports-all release=cvs
>
> Hi,
>
> I usually do it this way:
>
> 1) copy /usr/share/examples/cvsup/ports-supfile to /root
>
> 2) Edit /root/ports-supfile so that it points to your preferred
> CVSup-site; the only thing you need to change is the "*default host"
> entry.
>
> 3) run cvsup: cvsup -g -L 2 /root/ports-supfile
>
> 4) pkgdb -F
>
> 5) portsdb -Uu
>
> At this point you've synced your ports tree and all databases.
>
> Now you can go and install your ports.
>
> Dru Lavigne has written an excellent article on this you can find at
>
> http://www.onlamp.com/pub/a/bsd/2003/08/28/FreeBSD_Basics.html
>
> It basically covers everything I described above including keeping
> your ports-tree up2date including all up/down dependencies.
>
> HTH,
> -ewald
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Using META and DEL keys in console

2005-03-03 Thread Alejandro Pulver
On Tue, 1 Mar 2005 23:11:18 -0600 (CST)
Lars Eighner <[EMAIL PROTECTED]> wrote:

> On Tue, 1 Mar 2005, Alejandro Pulver wrote:
> 
> > Hello,
> >
> > I have a PS/2 PC-101 keyboard.
> >
> > I would like to use my META (ALT in my keyboard) key instead of ESC
> > in console mode. META works fine in an xterm. I also would like to
> > use DEL and others.
> 
> The console keymaps are in /usr/share/syscons/keymaps.  You can edit
> whichever keymap you are using with a flat ascii editor.
> 
> To get a key to send the familiar ^?, enter del in the keymap.
> Not all applications, however, will do the expected thing with
> this, and you will have to consult the documentation for the
> individual applications to see whether they can be configured to
> do what you expect from a delete key.  For backspace, bs, for
> meta, meta, esc for escape.  Note that you can set the left and
> right Alt keys to different things, and that keypad Del/. key
> can be different from the Delete key.
> 
> You almost certainly do not want to mess with terminfo.
> 
> If you use the the bash shell, you can see
> what a key is currently sending by entering C-v
> at the command prompt.
> 
> > I read something in the manual pages of terminfo(5), gettytab(5),
> > etc.
> >
> > I tried the following options:
> >
> > :km:smm:dc:
> >
> > But I am having these thoubles:
> >
> > 1) My ALT key did not work and the DEL key acts as BACKSPACE (C-h),
> >   but I would like to use it as C-d.
> 
> C-d is eot in the console keymap if you would rather have that
> than the ^? which is del.
> 
> 
> > 2) Some strange thing happens with Emacs in console mode: when I
> > press
> >   DEL, it is interpreted (literally) as C-h, and C-h is used as
> >   BACKSPACE. And C-d acts as DEL.
> 
> Switching to the emacs keymap might help you.
> 
> 
> > 3) Also DEL does not do anything in xterm.
> 
> Make changes to xterm mappings in your .Xdefaults file, such as:
> 
> !! xterm keymappings
> *XTerm*VT100.translations:  #override \n\
>  KP_Delete: string(0x7f) \n\
> 
> Naturally, you can make these strings whatever you want.
> 
> > Is there a more descriptive documentation of the terminal
> > capabilities listed in terminfo(5)?
> 
> Yes, you can google for many books worth of material, but it is
> not particularly germane to what you want to do if you are running
> a PC with a PC keyboard, and not trying to connect some ancient
> dumb terminal.
> 
> > Is there a standard configuration for PS/2 PC-101 keyboards?
> 
> Unfortunately there are a lot of them.
> 
> 
> > Does xterm use a different configuration from console terminals?
> 
> Yes.
> 
> X applications are meant to run on X, and X is meant to run on a
> variety of machines.  Any relationship between xterm and the
> machine's native terminal is purely coincidental.  (In
> particular, xterm is meant to be out of the box compatible with
> the very old VT100 standard - which never was native to any PC
> operating system.) You can get xterm and the console keyboard to
> behave mostly the same way - and get that way to be what you
> want - by editing .Xdefaults and the syscons keymap you are
> using (probably both).  But that doesn't mean that every
> application will behave as you think it should.
> 
> -- 
> Lars Eighner
> [EMAIL PROTECTED]
> http://www.io.com/~eighner/index.html
> 8800 N IH35 APT 1191 AUSTIN TX 78753-5266
> 
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"

Thank you for your reply.

Where is the (complete) list of scancodes and which keys produce them?

If there is not, as I think, how can I know what scancode is produced by
each key in my keyboard (a program, maybe)?

Thanks and Best Regards,
Ale
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: apachectl startssl at boot time ?

2005-03-03 Thread Jonathan Chen
On Thu, Mar 03, 2005 at 05:58:42PM +, David Larkin wrote:
> Hi,
> 
> I can start apache with SSL ok from the command line
> 
> > apachectl startssl
> 
> I've now put the following into /etc/rc.conf hoping that it will start at 
> boot time.
> 
> apache_enable="YES"
> apache_flags="startssl"
> 
> This starts Apache on boot time but not with SSL
> 
> Any ideas where I'm going wrong ?

Have a look in /usr/local/etc/rc.d/apache.sh for hints on the possible
stuff you can put into /etc/rc.conf. To start SSL, you need to put the
following line into rc.conf:

apache2ssl_enable="YES"

Cheers.
-- 
Jonathan Chen <[EMAIL PROTECTED]>
--
The Internet: an empirical test of the idea that a million monkeys
banging on a million keyboards can produce Shakespeare
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Audio latency

2005-03-03 Thread J.E. Dooper
Hi, 

My sound works and when I use mplayer or xmms I don't experience 
any (noticable!) audio latency. 
In applications like doomlegacy and quakeforge I do.

I think this might be the problem:
http://lists.freebsd.org/mailman/htdig/freebsd-questions/2004-August/055314.html
Though I don't understand much about the solution...

Some useful info:  

I'm using FreeBSD5.3-STABLE. Card: nForce2 onboard sound. And I compiled
my kernel with "device sound". And I load the snd_ich.ko module.

The output of `dmesg | grep pcm` :
pcm0:  port 0xd400-0xd47f,0xd000-0xd0ff mem 
0xe708-0xe7080fff irq 21 at device 6.0 on pci0
pcm0: [GIANT-LOCKED]
pcm0: 

The output of `cat /dev/sndstat` :
FreeBSD Audio Driver (newpcm)
Installed devices:
pcm0:  at io 0xd000, 0xd400 irq 21 bufsz 16384 kld snd_ich 
(1p/1r/0v channels duplex default)

The output of `sysctl -a | grep pcm` :
hw.snd.pcm0.buffersize: 16384
hw.snd.pcm0.vchans: 0
hw.snd.pcm0.ac97rate: 48000
dev.pcm.0.%desc: nVidia nForce2
dev.pcm.0.%driver: pcm
dev.pcm.0.%location: slot=6 function=0 handle=\_SB_.PCI0.MACI
dev.pcm.0.%pnpinfo: vendor=0x10de device=0x006a subvendor=0x1695 
subdevice=0x100 
  0 class=0x040100
dev.pcm.0.%parent: pci0

The output of `sysctl -a | grep snd`:
hw.snd.targetirqrate: 128
hw.snd.report_soft_formats: 1
hw.snd.verbose: 1
hw.snd.unit: 0
hw.snd.maxautovchans: 0
hw.snd.pcm0.buffersize: 16384
hw.snd.pcm0.vchans: 0
hw.snd.pcm0.ac97rate: 48000

My questions are:
What could be causing this latency, and what can I do to fix this?

Regards,
Jorma
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Sharing directories with jails

2005-03-03 Thread Anish Mistry
On Thursday 03 March 2005 12:42 pm, Chris Hodgins wrote:
> Ean Kingston wrote:
> >>How dangerous is it to share the ports directory with jails on
> >> the system?  I am using the jails to give other access to a
> >> freebsd system. You can assume they are untrusted (hence the
> >> jail ;)).
> >>
> >>Is it enough just to:
> >>ln -s /usr/ports /usr/jail/ajail/usr/ports
> >
> > That won't work. The jail does a chroot (along with other things)
> > when it starts up so the link inside the jail will wind up
> > pointing to itself.
>
> Doh! :)
>
> > The only way I've been able to figure out how to do something
> > like that is by running an NFS server outside the jail and then
> > run an NFS client inside the jail to get access to the disk space
> > outside the jail via NFS. I actually have a separate jail for the
> > NFS server and export everything read-only.
>
> Interesting idea.
>
> > Now, I'm sure you've thought of this but I'm going to say it for
> > anyone reading the archives. You do know that giving the jailed
> > processes access to anything outside the jail will reduce the
> > security advantages of having a jail in the first place?
>
> Well I wasn't sure about this...hence the question.
>
> > Besides, why would you provide a jailed process with access to
> > development tools? You are just making it much easier for anyone
> > with access to the jail to build/install software to help them
> > break out of the jail.
> >
> >>Thanks
> >>Chris
>
> Ok perhaps I should clarify what my intentions are a little more. 
> I am planning on providing a FreeBSD jail for any member of a geek
> society I am a member of.  When I say they are untrusted, I mean
> that I won't be giving them full root access to my server but I
> trust them enough not to do anything malicious inside a jail.  It
> is just like a fun place they can play and not have to worry to
> much about breaking things.
>
> How easy is it exactly to break out of a jail if you have access to
> development tools?
>

http://www.securiteam.com/unixfocus/5WP031535U.html

If you use securelevels you can a sigificantly improve security.

-- 
Anish Mistry


pgpUtMcUCdSKW.pgp
Description: PGP signature


Re: [repost] ip.forwarding with pf

2005-03-03 Thread Chris Hodgins
Giorgos Keramidas wrote:
On 2005-03-03 10:15, Tomas Quintero <[EMAIL PROTECTED]> wrote:
On Thu, 03 Mar 2005 06:30:52 -0600, J.D. Bronson <[EMAIL PROTECTED]> wrote:
No one replied to this and I thought it was easy for someone on this
list to help me?
I am going to run pf and setup FBSD as a router (3 NICs).
And I see there are some options:
net.inet.ip.fastforwarding
or
net.inet.ip.forwarding
Can someone tell me which is appropriate when FreeBSD 5.4-PRE is
used as a router running pf with built in NAT ?
Are you entirely sure you want to do it using PF? Has PF even been
fully implemented into the 5.x series?

Yes.  The 5.3-RELEASE version was the first official release of FreeBSD
that included PF as part of the base system.
As far as the original question, regarding PF and forwarding, the answer
is AFAIK, that it should work.  I haven't used PF's network address
translation until now, but I don't see why it wouldn't work.
Packet forwarding is, unless I'm mistaken, a prerequisite for any
gateway.  The fact that the gateway also translates addresses is not
obligatory but just a characteristics of the local network topology
(i.e. availability of public addresses).
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Hmm I found this:
http://mailman.twdx.net/pipermail/occaid/2003-October/000250.html
Google for "freebsd net.inet.ip.fastforwarding".
Chris
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: kmail & similar

2005-03-03 Thread Pietro Cerutti
> Where can I find kppp?
kdenetwork

> Ciao
> Vittorio

Ciao!
-- 
Pietro "Piter" Cerutti
<[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>

Beansidhe - SwiSS Death / Thrash Metal


Windows: "Where do you want to go today?"
Linux: "Where do you want to go tomorrow?"
FreeBSD: "Are you guys coming or what?"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Sharing directories with jails

2005-03-03 Thread Chris Hodgins
Ean Kingston wrote:
How dangerous is it to share the ports directory with jails on the
system?  I am using the jails to give other access to a freebsd system.
 You can assume they are untrusted (hence the jail ;)).
Is it enough just to:
ln -s /usr/ports /usr/jail/ajail/usr/ports

That won't work. The jail does a chroot (along with other things) when it
starts up so the link inside the jail will wind up pointing to itself.
Doh! :)
The only way I've been able to figure out how to do something like that is
by running an NFS server outside the jail and then run an NFS client
inside the jail to get access to the disk space outside the jail via NFS.
I actually have a separate jail for the NFS server and export everything
read-only.
Interesting idea.
Now, I'm sure you've thought of this but I'm going to say it for anyone
reading the archives. You do know that giving the jailed processes access
to anything outside the jail will reduce the security advantages of having
a jail in the first place?
Well I wasn't sure about this...hence the question.
Besides, why would you provide a jailed process with access to development
tools? You are just making it much easier for anyone with access to the
jail to build/install software to help them break out of the jail.

Thanks
Chris

Ok perhaps I should clarify what my intentions are a little more.  I am 
planning on providing a FreeBSD jail for any member of a geek society I 
am a member of.  When I say they are untrusted, I mean that I won't be 
giving them full root access to my server but I trust them enough not to 
do anything malicious inside a jail.  It is just like a fun place they 
can play and not have to worry to much about breaking things.

How easy is it exactly to break out of a jail if you have access to 
development tools?

Chris
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: [repost] ip.forwarding with pf

2005-03-03 Thread Giorgos Keramidas
On 2005-03-03 10:15, Tomas Quintero <[EMAIL PROTECTED]> wrote:
>On Thu, 03 Mar 2005 06:30:52 -0600, J.D. Bronson <[EMAIL PROTECTED]> wrote:
>> No one replied to this and I thought it was easy for someone on this
>> list to help me?
>>
>> I am going to run pf and setup FBSD as a router (3 NICs).
>> And I see there are some options:
>>
>> net.inet.ip.fastforwarding
>> or
>> net.inet.ip.forwarding
>>
>> Can someone tell me which is appropriate when FreeBSD 5.4-PRE is
>> used as a router running pf with built in NAT ?
>
> Are you entirely sure you want to do it using PF? Has PF even been
> fully implemented into the 5.x series?

Yes.  The 5.3-RELEASE version was the first official release of FreeBSD
that included PF as part of the base system.

As far as the original question, regarding PF and forwarding, the answer
is AFAIK, that it should work.  I haven't used PF's network address
translation until now, but I don't see why it wouldn't work.

Packet forwarding is, unless I'm mistaken, a prerequisite for any
gateway.  The fact that the gateway also translates addresses is not
obligatory but just a characteristics of the local network topology
(i.e. availability of public addresses).

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: kmail & similar

2005-03-03 Thread Vittorio
Alle 13:11, giovedì 3 marzo 2005, Pietro Cerutti ha scritto:
> On Thu, 3 Mar 2005 13:31:49 +, Vittorio <[EMAIL PROTECTED]> 
wrote:
> > I've just compiled kde-lite in FreeBSD 5.3 but cannot find kmail, ksirc,
> > knode & the likes. What ports packages are they in?
>
> Ciao Vittorio,
>
> kmail and knode are in kdepim
> ksirc is in kdenetwork
>
> which other apps do you need?

Where can I find kppp?
Ciao
Vittorio
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD NFS client and Netware 6.5 NFS server]

2005-03-03 Thread Dan Nelson
In the last episode (Mar 03), Shawn C Lander said:
> An NFS trace on the novell server shows the web server executing
> GETATTR and READ commands when a file is served after it has been
> updated.

If it's doing a GETATTR and a READ, then it should be pulling the right
file data, I think.  Can you get the contents of the READ reply, and
see whether the Netware box is sending old or new file contents?

> If you 'touch' one of the files, the client executes GETATTR and
> SETATTR...  and then the first time it is served it executes LOOKUP,
> READ, and GETATTR commands (after the first time it is served by the
> web server the client just executes GETATTR and READ).

I wonder if it's the lookup result (i.e. name->filehandle mapping)
that's being incorrectly cached, instead of the attributes (i.e.
filehandle timestamp etc).  If the webpage upload creates a new file
instead of updating the existing one, the FreeBSD client may be caching
the filehandle from the previous lookup call and fetching the old file
(which Netware still has a copy of because of the NWFS/NSS salvage
system).  If this were the case, though, I would expect to see your
Solaris box do LOOKUPs occasionally to verify that its cached
filehandle is still good.

> We were told to mount the exported volume with the NOAC option to
> tell the client not to cache file attributes.  However, we do not see
> this option implemented on FreeBSD (we even tried it thinking it may
> be undocumented or still hanging around and ended up getting an error
> message).  After seeing this, we tried setting ACREGMIN, ACREGMAX,
> ACDIRMIN, and ACDIRMAX to 0 thinking that timeouts of 0 would
> essentionally turn the cache off... but it didn't solve the problem. 
> Is there some other setting that just turns the cache off completely?

That should have done it, I think.  Looking around
/sys/nfsclient/nfs_subs.c I see there is an NFS_ACDEBUG kernel option
you could enable which creates a vfs.nfs.acdebug flag.  If you set it
to 3, the kernel should print out some timing info every time it
fetches an attribute from its cache.  I don't know the relationship
between vfs.nfs.access_cache_timeout and the ag{reg,dir}{min,max}
mount_nfs flags.

> > Original Message 
> >Subject: Re: FreeBSD NFS client and  Netware 6.5 NFS server
> >Date: Wed, 2 Mar 2005 17:55:24 -0600
> >From: Dan Nelson <[EMAIL PROTECTED]>
> >To: Bob Johnson <[EMAIL PROTECTED]>
> >CC: freebsd-questions@freebsd.org
> >References: <[EMAIL PROTECTED]>
> >
> >In the last episode (Mar 02), Bob Johnson said:
> >>Message below is about a FreeBSD server I maintain.  The FreeBSD
> >>server is our web server.  We use NFS to talk to a Netware file
> >>server where most of our users' web pages are stored.  FreeBSD is
> >>5.3, and was working ok with Netware 5.1 (and still is with other
> >>Netware servers).  One of the servers was recently upgraded to
> >>Netware 6.5 and NFS is no longer playing nice between the two.
> >>
> >>When something on the Netware side updates a file by copying it into
> >>place (e.g. using FTP [don't complain] to upload a file), the FreeBSD
> >>client doesn't find out that the file contents have changed until it
> >>does something to the file (e.g. touch or chmod).  Thus, when one of
> >>our users updates their web page with something like Dreamweaver, the
> >>web server doesn't find out about it (perhaps it eventually finds
> >>out, but it takes more than the several minutes we waited).
> >
> >It sounds sort of like the vfs.nfs.access_cache_timeout sysctl isn't
> >being honored on the FreeBSD side.  The kernel defaults to 60 seconds,
> >but if you have nfs_client_enable="YES" in rc.conf, /etc/rc.d/nfsclient
> >sets it to 2.  If you dump the NFS traffic as your web server fetches
> >one of these recently-updated files, do you see it doing an
> >ACCESS/GETATTR on the target files at all?

-- 
Dan Nelson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: ndis problem

2005-03-03 Thread Adam McMaster
On 3 Mar 2005, at 17:19, Pablo Allietti wrote:
hi all me again.
i have a problem with ndis in freebsd 5.3
i do
sony# cd /usr/src/sys/modules/if_ndis/
sony# make clean
rm -f /usr/src/sys/modules/if_ndis/export_syms if_ndis.ko if_ndis.kld
if_ndis.o if_ndis_pci.o if_ndis_pccard.o @ machine symb.tmp tmp.o
opt_bdg.h bus_if.h device_if.h card_if.h pci_if.h pccarddevs.h
sony# ndiscvt -i /usr/win/CVS/rt2500usb.inf -s
/usr/win/CVS/rt2500usb.sys -o ndis_driver_data.h

sony# make
make install
sony# make load
/sbin/kldload -v /usr/src/sys/modules/if_ndis/if_ndis.ko
kldload: can't load /usr/src/sys/modules/if_ndis/if_ndis.ko: No such
file or directory
*** Error code 1
Stop in /usr/src/sys/modules/if_ndis.
the file if_ndis.ko exist but i dont know why the message say not 
found.
maybe a problem with windows drivers? any boby can help me.

this drivers work under fedora with ndiswrapper. but in freebsd mmm i
dont know what happend.
thanks a lot..

--
Pablo Allietti
LACNIC
--
Have you tried just running "kldload if_ndis" manually?  Also, did you 
make sure to build and load /usr/src/sys/modules/ndis first?

--
- Adam McMaster <[EMAIL PROTECTED]>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: apachectl startssl at boot time ?

2005-03-03 Thread David Larkin
On Thu, 3 Mar 2005 11:48:24 -0500 (EST)
"Ean Kingston" <[EMAIL PROTECTED]> wrote:

> 
> > Hi,
> >
> > I can start apache with SSL ok from the command line
> >
> >> apachectl startssl
> >
> > I've now put the following into /etc/rc.conf hoping that it will start at
> > boot time.
> >
> > apache_enable="YES"
> > apache_flags="startssl"
> 
> Try
> 
> apache_flags="-DSSL"


Works a treat   thanks ;-)

> 
> instead.
> 
> > This starts Apache on boot time but not with SSL
> >
> > It seems like startssl is being passed as an argument to httpd rather than
> > apachectl.
> 
> You are right, the startup scripts call httpd directly. If you look at the
> apachectl script you will see that the 'startssl' command does the
> following:
> 
> startssl|sslstart|start-SSL)
> if [ $RUNNING -eq 1 ]; then
> echo "$0 $ARG: httpd (pid $PID) already running"
> continue
> fi
> if $HTTPD -DSSL; then
> echo "$0 $ARG: httpd started"
> 
> So, if you do what I said above, your web server will start up with ssl
> support.
> 
> -- 
> Ean Kingston
> E-Mail: ean_AT_hedron_DOT_org
>  PGP KeyID: 1024D/CBC5D6BB
>URL: http://www.hedron.org/
> 
> 
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: apachectl startssl at boot time ?

2005-03-03 Thread Ean Kingston

> Hi,
>
> I can start apache with SSL ok from the command line
>
>> apachectl startssl
>
> I've now put the following into /etc/rc.conf hoping that it will start at
> boot time.
>
> apache_enable="YES"
> apache_flags="startssl"

Try

apache_flags="-DSSL"

instead.

> This starts Apache on boot time but not with SSL
>
> It seems like startssl is being passed as an argument to httpd rather than
> apachectl.

You are right, the startup scripts call httpd directly. If you look at the
apachectl script you will see that the 'startssl' command does the
following:

startssl|sslstart|start-SSL)
if [ $RUNNING -eq 1 ]; then
echo "$0 $ARG: httpd (pid $PID) already running"
continue
fi
if $HTTPD -DSSL; then
echo "$0 $ARG: httpd started"

So, if you do what I said above, your web server will start up with ssl
support.

-- 
Ean Kingston
E-Mail: ean_AT_hedron_DOT_org
 PGP KeyID: 1024D/CBC5D6BB
   URL: http://www.hedron.org/


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


apachectl startssl at boot time ?

2005-03-03 Thread David Larkin
Hi,

I can start apache with SSL ok from the command line

> apachectl startssl

I've now put the following into /etc/rc.conf hoping that it will start at boot 
time.

apache_enable="YES"
apache_flags="startssl"

This starts Apache on boot time but not with SSL

Any ideas where I'm going wrong ?

It seems like startssl is being passed as an argument to httpd rather than 
apachectl.

David
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Kernel problems on 5.3.

2005-03-03 Thread David Robillard
Hi Jacob,

You should try to CVSup your FreeBSD machines to get the latest code.
Read section A.5 of the FreeBSD Handbook. Here's the link:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/cvsup.html

I can't say this will fix your current problem, but for sure it can only
be good, at least from a security stand point.

You can proceed to do so via ssh.

What you want to do is this:

a) Create the file /root/cvs-supfile which contains the following:

sudo vi /root/cvs-supfile


# cvs-supfile
#
# $Id: cvs-supfile,v 1.7 2005/03/03 15:53:56 drobilla Exp drobilla $
#
# Check /usr/share/examples/cvsup/cvs-supfile for
# more information.
#
# David Robillard, December 9th, 2004

# Host from which files are fetched.
#
# *default host=cvsup.ca.freebsd.org
*default host=cvsup4.freebsd.org
# *default host=cvsup.ch.freebsd.org

# Directory where CVSup stores info about it's work.
# Will never grow beyond ~1MB and creates ${base}/sup.
# NOTE: The `refuse' file is thus: /var/db/cvsup/sup/refuse
#
*default base=/var/db/cvsup

# Directory where to place the downloaded files.
#
*default prefix=/usr

# Which version of FreeBSD do we want?
# Check http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/cvs-tags.html
# 
# BROKEN?! *default tag=RELENG_5
*default tag=RELENG_5_3

# Defaults. Don't need to change this.
# 
*default release=cvs delete use-rel-suffix compress

# What do we want to download?
#
src-all

# EOF



c) Create the cvsup directory.

sudo mkdir -p /var/db/cvsup/sup


d) Now copy the refuse file to your cvsup directory.

sudo cp /usr/share/examples/cvsup/refuse /var/db/cvsup/sup


e) Setup your environment. You should set this up in your
   favorite shell's rc file. This here is for sh(1) and bash(1).

[EMAIL PROTECTED]:/home/ncvs
export CVSROOT


f) Proceed with cvsup. Note, the first time you run things,
   you will be prompted to accept the RSA signature of the
   server you connect to.

sudo cvsup -g -L 2 /root/cvs-supfile


g) When the download finishes, rebuild the world and the kernel.
   Note, you have a custom built kernel, so you must change KERNCONF=GENERIC
   to KERNCONF=YOUR_KERNEL_CONFIG_FILE_NAME

cd /usr/src
sudo make -j2 buildworld
sudo make -j2 buildkernel KERNCONF=GENERIC
sudo make installkernel KERNCONF=GENERIC
sudo mergemaster -p
sudo make installworld
sudo mergemaster


h) Finally, reboot the machine.

Once your machines come back online, run `uname -r` and you will notice
that the current release level of the operating system has changed. For
example, my servers have changed from "5.3-RELEASE" to "5.3-RELEASE-p5".

Cheers,

David

-- 
David Robillard
UNIX systems administrator
[EMAIL PROTECTED]

Notarius (TSIN) Inc.
465, rue St-Jean, suite 200
Montreal, Quebec, H2Y 2R6

Tel. : +1 514 966 0122
Fax. : +1 514 281 1226

http://www.notarius.com

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


ndis problem

2005-03-03 Thread Pablo Allietti
hi all me again.

i have a problem with ndis in freebsd 5.3

i do 


sony# cd /usr/src/sys/modules/if_ndis/
sony# make clean
rm -f /usr/src/sys/modules/if_ndis/export_syms if_ndis.ko if_ndis.kld
if_ndis.o if_ndis_pci.o if_ndis_pccard.o @ machine symb.tmp tmp.o
opt_bdg.h bus_if.h device_if.h card_if.h pci_if.h pccarddevs.h


sony# ndiscvt -i /usr/win/CVS/rt2500usb.inf -s
/usr/win/CVS/rt2500usb.sys -o ndis_driver_data.h



sony# make


make install

sony# make load
/sbin/kldload -v /usr/src/sys/modules/if_ndis/if_ndis.ko
kldload: can't load /usr/src/sys/modules/if_ndis/if_ndis.ko: No such
file or directory
*** Error code 1

Stop in /usr/src/sys/modules/if_ndis.


the file if_ndis.ko exist but i dont know why the message say not found.
maybe a problem with windows drivers? any boby can help me.

this drivers work under fedora with ndiswrapper. but in freebsd mmm i
dont know what happend.

thanks a lot..



-- 


Pablo Allietti
LACNIC
--

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD NFS client and Netware 6.5 NFS server]

2005-03-03 Thread Shawn C Lander
To answer your question:
An NFS trace on the novell server shows the web server executing GETATTR 
and READ commands when a file is served after it has been updated.

If you 'touch' one of the files, the client executes GETATTR and SETATTR... 
and then the first time it is served it executes LOOKUP, READ, and GETATTR 
commands (after the first time it is served by the web server the client 
just executes GETATTR and READ).


We were told to mount the exported volume with the NOAC option to tell the 
client not to cache file attributes.  However, we do not see this option 
implemented on FreeBSD (we even tried it thinking it may be undocumented or 
still hanging around and ended up getting an error message).  After seeing 
this, we tried setting ACREGMIN, ACREGMAX, ACDIRMIN, and ACDIRMAX to 0 
thinking that timeouts of 0 would essentionally turn the cache off... but 
it didn't solve the problem.  Is there some other setting that just turns 
the cache off completely?

-shawn
--On Wednesday, March 02, 2005 9:03 PM -0500 Bob Johnson 
<[EMAIL PROTECTED]> wrote:

Here's a reply to my query.  sysctl's are kernel values that you can tune
with the sysctl command.
sysctl vfs.nfs.access_cache_timeout
would show you the value of that sysctl, while
sysctl vfs.nfs.access_cache_timeout=2
would change the value to 2 (assuming it is writable, which this one is).
To see all sysctl's with nfs in the name, do
sysctl -a | grep nfs
so the question he asks is whether a server trace shows any activity when
the webserver is fetching a recently changed file, or is it working
entirely from its own cache?
Any reply to this should go to the sender and to [EMAIL PROTECTED] to
get the reply back on the list.
- Bob
 Original Message 
Subject: Re: FreeBSD NFS client and  Netware 6.5 NFS server
Date: Wed, 2 Mar 2005 17:55:24 -0600
From: Dan Nelson <[EMAIL PROTECTED]>
To: Bob Johnson <[EMAIL PROTECTED]>
CC: freebsd-questions@freebsd.org
References: <[EMAIL PROTECTED]>
In the last episode (Mar 02), Bob Johnson said:
Message below is about a FreeBSD server I maintain.  The FreeBSD
server is our web server.  We use NFS to talk to a Netware file
server where most of our users' web pages are stored.  FreeBSD is
5.3, and was working ok with Netware 5.1 (and still is with other
Netware servers).  One of the servers was recently upgraded to
Netware 6.5 and NFS is no longer playing nice between the two.
When something on the Netware side updates a file by copying it into
place (e.g. using FTP [don't complain] to upload a file), the FreeBSD
client doesn't find out that the file contents have changed until it
does something to the file (e.g. touch or chmod).  Thus, when one of
our users updates their web page with something like Dreamweaver, the
web server doesn't find out about it (perhaps it eventually finds
out, but it takes more than the several minutes we waited).
It sounds sort of like the vfs.nfs.access_cache_timeout sysctl isn't
being honored on the FreeBSD side.  The kernel defaults to 60 seconds,
but if you have nfs_client_enable="YES" in rc.conf, /etc/rc.d/nfsclient
sets it to 2.  If you dump the NFS traffic as your web server fetches
one of these recently-updated files, do you see it doing an
ACCESS/GETATTR on the target files at all?

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Shawn C. Lander  340A Weil Hall, POBox 116550
Coordinator Computer ApplicationsGainesville, FL 32611-6550
Management Information Systems (MIS) PH: (352) 392-9217
College of Engineering   FAX: (352) 392-7063
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


  1   2   >