compiling

[drew hill]

I'm am trying to compile an SMP kernel on mt machine. When i am in the konsole 
BSD tells me the Dir /usr/src/sys/i386/conf does not exist. In KDE I got to the 
Dir made the kernel put it in the /root/kernel Dir and now that's O.K., BUT 
trying to compile and install is a new nightmare. Is it possible to compile and 
install in KDE? If so, how?
   THANK YOU


-
Relax. Yahoo! Mail virus scanning helps detect nasty viruses!
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: remote x-window

[Greg 'groggy' Lehey]

On Friday,  3 February 2006 at  8:58:08 +, Michael Fleming wrote:
> On Thu, Feb 02, 2006 at 09:48:56PM -0900, Beech Rintoul wrote:
>> I have sort of a newbie question. How do I connect to a remote
>> machine with x-windows and get a desktop? Could someone point me in
>> the right direction as I've never had a need to to do it before. I
>> do have ssh to the machine.
>
> You'll have to export $DISPLAY=x.x.x.x:0.0 so that the display on the
> remote machine is displayed on the local.

Specifically, the DISPLAY environment variable states the name of the
remote host, the server number and the screen number.  Normally you
only have one server, which is then 0.  It's quite common to have more
than one screen: I'm writing this on echunga.lemis.com:0.0, but there
are two further screens called echunga.lemis.com:0.1 and
echunga.lemis.com:0.2.  See http://www.lemis.com/grog/hardware.html
for an example.

> You'll also have to forward X11 packets, check your ssh_conf so that
> "forward X11 yes".

This is for tunnelling over ssh.  I wouldn't recommend that in a local
context.

> I use cygwin on my work laptop ( XP ) and a openvpn connection to my
> BSD machine then fire up the display on the XP machine.

It's possible that you'd need it here, but between BSD machines it's
just overhead.

One thing that you don't mention is whether the server will listen on
TCP.  This used to be the default, but it isn't any more.  If you're
using startx, you'll have to remove the 'nolisten-tcp' option.  See
http://www.lemis.com/grog/desktop.html.

If you're using KDE or GNOME, you'll probably have to do something
similar.  I don't know the details, though.

Greg
--
See complete headers for address and phone numbers.


pgpYKbWB8fWbS.pgp
Description: PGP signature

Re: Firefox 1.5

[freebsd-questions]

> 
> So the lunacy is even more widespread!? Sheesh, I *really* hope the port 
> will support turning it off.
> 

Speaking of lunacy: Before I upgrade to 1.5, can someone tell me if the
'feature' of renaming downloaded files by incrementing version number has
been restored to a more sensible "Do you want to overwrite this file"
question or even a clear filename.bla[2] signature? I've managed to
download the same file three times, with newly created 'versions' without
realising! It's particularly annoying when the file itself has a version
number, so I end up with:

file-5.3
file-6.3
file-7.3

and so on...

joel

-- Joel Hatton --
Security Analyst| Hotline: +61 7 3365 4417
AusCERT - Australia's national CERT | Fax: +61 7 3365 7031
The University of Queensland| WWW: www.auscert.org.au
Qld 4072 Australia  | Email:   [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Can gaim-openq connect to Tencent QQ now?

[Ma Jie]

I cannot use gaim-openq for serval days. Anybody know how to connect to QQ
under FreeBSD now?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

kernel conf for vmware 5.5

[Ben Siemon]

Is there anyone that can share with me thier custom kernel conf for vmware
5.5?
--
cheers

Ben Siemon

254 723 6937

cs.baylor.edu/~siemon
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: problem

[Conrad Sabatier]

On 05-Feb-2006 Jose Jesus Ortega wrote:
> I installed Xorg and configurate it and everything and
> installed WindowMaker of
> "/usr/ports/x11-wm/windowmaker" but when I type in
> echo "exec windowmaker" > ~/.xinitrc and use "startx"
> it can't find windowmaker how do I make windowmaker
> start? thanks.

"pkg_info -L windowmaker\*" will show you that the windowmaker executable
is not named "windowmaker", but rather "wmaker".

-- 
Conrad J. Sabatier <[EMAIL PROTECTED]> -- "In Unix veritas"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: how do I create partitions?

[Jerry McAllister]

> 
> What tool allows me to boot on some media (cd, fd) and create partitions
> of various types (for FreeBSD, Windows 98/2000 at least) and sizes 
> (in sectors)?

Probably you should read up on how disks are set up and how booting
works.   That overall picture will help you the most to understand
things.

One thing to understand is that there is a standard about the very 
lowest level of disk management and initial bootup that is pretty
much common across all systems.   This is of necessity rather than
because the best possible was has been found.

The necessity is that something must happen _first_ to get a system
up and going.   After that minimal point every system can take its
own course.  

So, boot starts in BIOS which is a program written on some nonvolatile 
memory storage on the system.   That program normally can be set to 
control which devices it will try to boot from and in which order it
will check them (after doing some other setup and system checkout stuff).
A typical boot list and order might be: Floppy, CD, first hard disk.

The BIOS looks at the very first sector (512 Bytes) on each listed boot 
device for a specific code in the exactly correct position in that sector
that tells it this is a boot sector.   The first one it finds it loads
in to the system and transfers control to it.  That little bit of code
is called an MBR.   It contains a little bit of a program and some tables
that tell it how the disk is divided and and how to find the next part
of the boot process.  

That first MBR sector must follow some very specific rules so the BIOS
can find it.   But, there it all begins to differ a little.
The most compatible MBRs all fit in to that one sector, but some systems
take advantage of the fact that, nowdays most disk management tools
just waste the rest of the whole first track anyway, so they use all
of those sectors to make up a prettier/fancier MBR.  But those MBRs all
still do the same ultimate thing.

The MBR consults its tables and decides which disk divisions to look in
for the next boot level.  Most of them other than those by MS tend to
give you a choice as to which one of the possibilties available to
use for the next boot level.   

That Third level (BIo=1, MBR=2,...) part of the boot process has some
standard parts that any MBR can read and get in to.  You pick the one 
you want and it reads in that (slice in FreeBSD lingo) boot code and 
passes control to it.

Then things get really individual and each system comes up in its own way.

In general the fdisk(8) program (named the same in MS, but it is a different
program there) does the most basic division of the disk (into slices) and
writes out whatever MBR you want put there - none, or the FreeBSD standard.

The disklabel(8) (pre 5.xxx of bsdlabel(8) 5.xxx and later) divides the
slices into partitions, writes the secondary label (the one in each slice)
and that "third" boot level sector in the slice.

The standard (but not default) FreeBSD MBR is able to boot all systems
that use this standard process including those from MS and LINUX as well
as FreeBSD, but it might not be able to display a nice looking name for
all of them because it still fits in that single sector rather than
borrowing the "wasted" sectors.  This is done to make sure it is as
completely compatible with everything as possible.

Now that you have this tome, you should go on and read for yourself
and fill in the details and the parts I glossed over.  

jerry

> 
> 
>   
> 
>   
>   
> __ 
> Find your next car at http://autos.yahoo.ca
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> 
> 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: device psm0

[Kevin Kinsey]

WSteffen wrote:


I am trying to setup my first FreeBSD system on a Pentium 3
system with a PS/2 mouse. The problem is I show no psm0 device
in the /dev directory. When I use sysinstall to configure the
mouse, the test portion fails. I do have a sysmouse in the /dev
directory, but it appears useless.
How do I create psm0? How should it have been created in the
first place?

Any help would be appreciated!

Warren Steffen
[EMAIL PROTECTED]



What, if any, information on your pointing device is
present in /var/run/dmesg.boot?

Kevin Kinsey

--
You're never too old to become younger.
-- Mae West


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Getting a new server

[Chad Leigh -- Shire.Net LLC]

On Feb 5, 2006, at 3:10 PM, Ted Mittelstaedt wrote:

You had said your using spamassasin, that and other content filters  
like
dspam must have completely received the message before they can  
scan it.


They do not have had to finish the smtp process however.

Chad



Ted


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Chad
Leigh -- Shire.Net LLC
Sent: Saturday, February 04, 2006 7:50 AM
To: Ted Mittelstaedt
Cc: freebsd-questions@freebsd.org; Lisa Casey
Subject: Re: Getting a new server



On Feb 4, 2006, at 1:54 AM, Ted Mittelstaedt wrote:

The beauty of the greylist milter over the way your doing it, is  
that

with
your method, the spammer is able to completely send the message to
you.
Yes I realize the message gets killed in between your outside
server and
your user's mailbox.  But, the spammer doesen't know that and they
think
they have successfully sent a message.  Thus it encourages them to
keep sending.


Uhh, no.  They may be sending the message but they get the reject in
the DATA phase before the smtp connection is done.  The spammer does
NOT think he has successfully sent the message unless it is one that
does not care anyway to finish the smtp connection.

Chad

---
Chad Leigh -- Shire.Net LLC
Your Web App and Email hosting provider
chad at shire.net



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"[EMAIL PROTECTED]"

--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.375 / Virus Database: 267.15.2/251 - Release Date:  
2/4/2006






---
Chad Leigh -- Shire.Net LLC
Your Web App and Email hosting provider
chad at shire.net



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

device psm0

[WSteffen]

I am trying to setup my first FreeBSD system on a Pentium 3
system with a PS/2 mouse. The problem is I show no psm0 device
in the /dev directory. When I use sysinstall to configure the
mouse, the test portion fails. I do have a sysmouse in the /dev
directory, but it appears useless.
How do I create psm0? How should it have been created in the
first place?

Any help would be appreciated!

Warren Steffen
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Gnome port

[Christopher Sean Hilton]

On Sun, Feb 05, 2006 at 02:54:07PM -0600, Conrad Sabatier wrote:
> 
> On 05-Feb-2006 Christopher Sean Hilton wrote:
> > Is there a reason that the gnome 2 ports don't use the conflicts
> > mechanism to avoid completely hosing an existing gnome 2 install? On
> > [snip]
> > 

Let me be more clear because I'm not trying to blame anyone here for a
mistake that I made. I am trying find out if there is a way to make it
harder for someone else to make the same mistake and perhaps get
FreeBSD adhere a little better to my vision of POLA. I have to admit
that I was pretty amazed that not only did the gimp port not use the
existing gnome2-2.10 ports on my system but that it also tried and
_succeeded_ to install the gnome2-2.12 ports over the top of them.

To stay on topic: When I look at the Makefile for the gaim port,
/usr/ports/net-im/gaim, I see that it has a line:

 CONFLICTS?= ja-gaim-[0-9]*

When I look at the port for the japanese language gaim port,
/usr/ports/japanese/gaim, I see that it has the line:

 CONFLICTS=  gaim-[0-9]*

On my system which has the english language gaim port installed if I:

 # cd /usr/ports/japanese/gaim
 # make

The ja-gaim port builds but installation fails:

 # make install
 ===>  Installing for ja-gaim-1.5.0

 ===>  ja-gaim-1.5.0 conflicts with installed package(s):
   gaim-1.3.0_1

   They install files into the same place.
   Please remove them first with pkg_delete(1).
 *** Error code 1

 Stop in /usr/ports/japanese/gaim.
 *** Error code 1

 Stop in /usr/ports/japanese/gaim.
 #

I honestly don't understand why this mechanism cannot be applied to
keep newer versions of a port for overwritting older ones.

To be perfectly clear:

 Was this a situation that could be avoided?
 
 If it could have been avoided is the CONFLICTS mechanism in ports
 the right way to do it?

 If that is the case was there a good reason that this mechanism
 was not enabled?

 And, if CONFLICTS is the right way to fix it, is the reason that
 the problem hasn't been addressed that the port maintainers just
 don't have enough time?  Because if it is I'm probably willing to
 throw sometime at it so that someone else doesn't have to see the
 same problem?

--Chris

-- 
Chris Hilton   chris-at-vindaloo-dot-com

"All I was doing was trying to get home from work!"
 -- Rosa Parks


pgphlAI1e6eeb.pgp
Description: PGP signature

Re: IP Banning (Using IPFW)

[David Scheidt]

On Sun, Feb 05, 2006 at 05:38:11PM -0500, fbsd_user wrote:
> 
> You missed to whole meaning.
> Attackers only scan for the published service port numbers,
> that is what is meant by "portscan the box".
> Those high order port numbers are dynamically
> used during normal session conversation.
> So any response from those port numbers if an
> attacker scanned that high would be meaningless.
> Please check your facts before commenting.

Nonsense.  There may be some people that only scan well-known ports,
but it's much more common to scan every port on a machine.  If you're
running a server on a non-standard port, an attacker will find it.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: IP Banning (Using IPFW)

[Daniel A.]

I know for a fact, that if a hacker wants to root a box, the first and
least thing he does is to
nmap -p1-65535 -Avv host
And yeah, it does detect services on unusual ports. And regardless of
what you say, assigning nondefault ports is security through
obscurity.

On 2/5/06, fbsd_user <[EMAIL PROTECTED]> wrote:
> You missed to whole meaning.
> Attackers only scan for the published service port numbers,
> that is what is meant by "portscan the box".
> Those high order port numbers are dynamically
> used during normal session conversation.
> So any response from those port numbers if an
> attacker scanned that high would be meaningless.
> Please check your facts before commenting.
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Daniel A.
> Sent: Sunday, February 05, 2006 4:58 PM
> To: [EMAIL PROTECTED]
> Cc: [EMAIL PROTECTED]; Michael A. Alestock
> Subject: Re: IP Banning (Using IPFW)
>
>
> On 2/5/06, fbsd_user <[EMAIL PROTECTED]> wrote:
> > I find this kind of approach is treating the symptom and not the
> > cause.
> > The basic problem is the services have well published port numbers
> > and attackers beat on those known port numbers. A much simpler
> > approach is to change the standard port numbers to some high order
> > port number. See /etc/services  SSH logon command allows for a
> port
> > number and the same for telnet. Your remote users will be the only
> > people knowing your selected port numbers for those services. This
> > way a attackers port scan will show the well published port
> numbers
> > as not open so they will pass on attacking those ports on your ip
> > address. This way your bandwidth usage will be reduced as
> attackers
> > find your ip address as having nothing of interest.
> >
> > This same kind of thing can also be done for port 80 by using the
> > web forwarding function of Zoneedit pointing to different port for
> > your web server. Only people coming to your site through dns will
> be
> > forwarded to the correct port.
> >
> > The clear key here is attackers roll through a large range of ip
> > address port scanning for open ports. By using nonstandard port
> > numbers for your services you stop the attacker even finding you
> in
> > the first place.
> >
> > good luck what ever you choose to do.
> You just argued against yourself. If an attacker is genuinely
> interested in rooting someones box, that attacker will most likely
> portscan the box - And thereby discovering that you have assigned
> alternative port numbers to your services.
> Security through obscurity is a bad place to start.
> >
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] Behalf Of Michael
> A.
> > Alestock
> > Sent: Sunday, February 05, 2006 10:42 AM
> > To: [EMAIL PROTECTED]
> > Subject: IP Banning (Using IPFW)
> > Importance: High
> >
> >
> > Hello,
> >
> > I was wondering if there's some sort of port available that can
> > actively
> > ban IPs that try and bruteforce a service such as SSH or Telnet,
> by
> > scanning the /var/log/auth.log log for Regex such as "Illegal
> User"
> > or
> > "LOGIN FAILURES", and then using IPFW to essentially deny (ban)
> that
> > IP
> > for a certain period of time or possibly forever.
> >
> > I've seen a very useful one that works for linux (fail2ban), and
> was
> > wondering if one exists for FreeBSD's IPFW?
> >
> > I've looked around in /usr/ports/security and /usr/ports/net but
> > can't
> > seem to find anything that closely resembles that.
> >
> > Your help would be greatly appreciated Thanks in advance!
> >
> > >> Michael A., USA... Loyal FreeBSD user since 2000.
> > ___
> > freebsd-questions@freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> > To unsubscribe, send any mail to
> > "[EMAIL PROTECTED]"
> >
> > ___
> > freebsd-questions@freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> > To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
> >
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
>
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Why does portsdb -Uu run so long?

[Xn Nooby]

> portmanager -u -f -l -y
>
> will rebuild all of the installed ports in a logical manner as well as
> creating a log file for the user to examine if necessary.


I will try that, thx!

I will also look in to:
  portmanager
  portsclean
  portsnap
  portversion
 (any others?)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Why does portsdb -Uu run so long?

[Xn Nooby]

On 2/5/06, Robert Huff <[EMAIL PROTECTED]> wrote:
>
>
> Xn Nooby writes:
>
> >  Everyone that knows what they are doing never seem to have a problem.
>
> Respectfully, rubbish.
> I use portupgrade; where it seems applicable I am careful to
> mention one ought to read the manual completely, and to state my
> experiences where it has clearly and without provocation Done the
> Wrong Thing.  Similar behavior can be observed in other posters,
> with a statistical bias toward the more technically experienced.
> (Your mileage may vary.)


Okay.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: MySQL version for 6.0

[Greg 'groggy' Lehey]

On Sunday,  5 February 2006 at 22:00:13 +0100, Bjrn Knig wrote:
> je killen schrieb:
>> Greetings:
>> I'm looking to find out if there is a current version of MySQL specific
>> for v6 FreeBSD on AMD64. I don't see one
>> on the MySQL site and I don't know if I can successfully build it from
>> source on this machine.
>> thanks;
>> Jeff K
>
> You can use FreeBSD's software management to install mysql. After you
> have installed FreeBSD you can install MySQL easily:
>
>   pkg_add -r mysql41-server
>
> Alternativeyl you can choose mysql323-server, mysql40-server or
> mysql50-server.

The current version is, of course, mysql50-server.  Version 3.23 is
obsolete and is no longer being maintained.

I'd be interested to know why you recommend version 4.1 over 5.0.

Greg
--
When replying to this message, please copy the original recipients.
If you don't, I may ignore the reply or reply to the original recipients.
For more information, see http://www.lemis.com/questions.html
See complete headers for address and phone numbers.


pgpzOGc8ZppvF.pgp
Description: PGP signature

RE: IP Banning (Using IPFW)

[fbsd_user]

You missed to whole meaning.
Attackers only scan for the published service port numbers,
that is what is meant by "portscan the box".
Those high order port numbers are dynamically
used during normal session conversation.
So any response from those port numbers if an
attacker scanned that high would be meaningless.
Please check your facts before commenting.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Daniel A.
Sent: Sunday, February 05, 2006 4:58 PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]; Michael A. Alestock
Subject: Re: IP Banning (Using IPFW)


On 2/5/06, fbsd_user <[EMAIL PROTECTED]> wrote:
> I find this kind of approach is treating the symptom and not the
> cause.
> The basic problem is the services have well published port numbers
> and attackers beat on those known port numbers. A much simpler
> approach is to change the standard port numbers to some high order
> port number. See /etc/services  SSH logon command allows for a
port
> number and the same for telnet. Your remote users will be the only
> people knowing your selected port numbers for those services. This
> way a attackers port scan will show the well published port
numbers
> as not open so they will pass on attacking those ports on your ip
> address. This way your bandwidth usage will be reduced as
attackers
> find your ip address as having nothing of interest.
>
> This same kind of thing can also be done for port 80 by using the
> web forwarding function of Zoneedit pointing to different port for
> your web server. Only people coming to your site through dns will
be
> forwarded to the correct port.
>
> The clear key here is attackers roll through a large range of ip
> address port scanning for open ports. By using nonstandard port
> numbers for your services you stop the attacker even finding you
in
> the first place.
>
> good luck what ever you choose to do.
You just argued against yourself. If an attacker is genuinely
interested in rooting someones box, that attacker will most likely
portscan the box - And thereby discovering that you have assigned
alternative port numbers to your services.
Security through obscurity is a bad place to start.
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Michael
A.
> Alestock
> Sent: Sunday, February 05, 2006 10:42 AM
> To: [EMAIL PROTECTED]
> Subject: IP Banning (Using IPFW)
> Importance: High
>
>
> Hello,
>
> I was wondering if there's some sort of port available that can
> actively
> ban IPs that try and bruteforce a service such as SSH or Telnet,
by
> scanning the /var/log/auth.log log for Regex such as "Illegal
User"
> or
> "LOGIN FAILURES", and then using IPFW to essentially deny (ban)
that
> IP
> for a certain period of time or possibly forever.
>
> I've seen a very useful one that works for linux (fail2ban), and
was
> wondering if one exists for FreeBSD's IPFW?
>
> I've looked around in /usr/ports/security and /usr/ports/net but
> can't
> seem to find anything that closely resembles that.
>
> Your help would be greatly appreciated Thanks in advance!
>
> >> Michael A., USA... Loyal FreeBSD user since 2000.
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
>
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
"[EMAIL PROTECTED]"
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"[EMAIL PROTECTED]"

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: problem

[albi]

On Sun, 5 Feb 2006 14:26:48 -0800 (PST)
Jose Jesus Ortega <[EMAIL PROTECTED]> wrote:

> I installed Xorg and configurate it and everything and
> installed WindowMaker of
> "/usr/ports/x11-wm/windowmaker" but when I type in
> echo "exec windowmaker" > ~/.xinitrc and use "startx"
> it can't find windowmaker how do I make windowmaker
> start? thanks.

type : rehash
or log out and log in again and try again

-- 
grtjs, albi
gpg-key: lynx -dump http://scii.nl/~albi/gpg.asc | gpg --import
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: k3b hardware detection

[Andrea Venturoli]

Fabian Keil wrote:


Just a guess, but maybe the drive reports false capabilities
which are then checked by k3b.

You could try cdrecord's prcap option to see if the drive
advertises it self as a writer.

Fabian


Guess it does:



Drive capabilities, per MMC page 2A:

  Does read CD-R media
  Does write CD-R media
  Does read CD-RW media
  Does write CD-RW media
  Does not read DVD-ROM media
  Does not read DVD-R media
  Does not write DVD-R media
  Does not read DVD-RAM media
  Does not write DVD-RAM media
  Does support test writing



 bye & Thanks
av.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

problem

[Jose Jesus Ortega]

I installed Xorg and configurate it and everything and
installed WindowMaker of
"/usr/ports/x11-wm/windowmaker" but when I type in
echo "exec windowmaker" > ~/.xinitrc and use "startx"
it can't find windowmaker how do I make windowmaker
start? thanks.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: Getting a new server

[Ted Mittelstaedt]

You had said your using spamassasin, that and other content filters like
dspam must have completely received the message before they can scan it.

Ted

>-Original Message-
>From: [EMAIL PROTECTED]
>[mailto:[EMAIL PROTECTED] Behalf Of Chad
>Leigh -- Shire.Net LLC
>Sent: Saturday, February 04, 2006 7:50 AM
>To: Ted Mittelstaedt
>Cc: freebsd-questions@freebsd.org; Lisa Casey
>Subject: Re: Getting a new server
>
>
>
>On Feb 4, 2006, at 1:54 AM, Ted Mittelstaedt wrote:
>
>> The beauty of the greylist milter over the way your doing it, is that
>> with
>> your method, the spammer is able to completely send the message to
>> you.
>> Yes I realize the message gets killed in between your outside
>> server and
>> your user's mailbox.  But, the spammer doesen't know that and they
>> think
>> they have successfully sent a message.  Thus it encourages them to
>> keep sending.
>
>Uhh, no.  They may be sending the message but they get the reject in
>the DATA phase before the smtp connection is done.  The spammer does
>NOT think he has successfully sent the message unless it is one that
>does not care anyway to finish the smtp connection.
>
>Chad
>
>---
>Chad Leigh -- Shire.Net LLC
>Your Web App and Email hosting provider
>chad at shire.net
>
>
>
>___
>freebsd-questions@freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>To unsubscribe, send any mail to
>"[EMAIL PROTECTED]"
>
>--
>No virus found in this incoming message.
>Checked by AVG Free Edition.
>Version: 7.1.375 / Virus Database: 267.15.2/251 - Release Date: 2/4/2006
>

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: how do I create partitions?

[Peter]

--- fbsd_user <[EMAIL PROTECTED]> wrote:

> This is a windows question.

I'm using FreeBSD as the central image server.

> The windows install cd has as its first option to run fdisk to
> partition your hard drive.

The new partition must have the same number of sectors as my image.  I
don't think the Windows tools you mention give you this control.


> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Bj�rn K�nig
> Sent: Sunday, February 05, 2006 3:53 PM
> To: Peter
> Cc: freebsd-questions
> Subject: Re: how do I create partitions?
> 
> 
> Peter schrieb:
> 
> > Given that, on a windows client, I have backed up the partition
> the OS and
> > its applications reside on.
> > Given that the client's disk becomes unusable.
> > Given that I can recreate the correct partition size and type with
> this
> > CD.
> >
> > What is the best way to set up the MBR of the windows client so it
> will
> > boot?  An aborted Windows install?
> 
> I'm not sure what you are trying to do. sysinstall's fdisk programm
> which is on the CD writes suitable boot code to the MBR if you want
> it.
> 
> Bj�rn
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
> 
> 







__ 
Find your next car at http://autos.yahoo.ca
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Proper mail headers

[Ceri Davies]

On Mon, Feb 06, 2006 at 06:57:30AM +0900, Eric Kjeldergaard wrote:

> I reply to emails using the "reply to all" feature of my mail client.  It 
> replies (not unreasonably, I think) to the list (as specified by List-ID), 
> the To, From, and CC.  It seems to eliminate any duplicates as well as my own 
> address.  This had a bad effect recently where I duplicated a message to the 
> -questions mailing list because it was To: questions@ with a List-ID of 
> freebsd-questions@ .  My question is, other than paying careful manual 
> attention to where my replies are going, is there something that should be 
> changed on my client or on the server to make it more obvious that those 2 
> email addresses are (for my purposes at least?) the same?

You should probably just try to remember to check, and let those with
nothing better to do beat themselves all up if you forget.
I don't think it's life-or-death.

Ceri
-- 
That must be wonderful!  I don't understand it at all.
  -- Moliere


pgpAnVFeuVYVS.pgp
Description: PGP signature

Re: Proper mail headers

[Eric Kjeldergaard]

Monday 06 February 2006 05:34、Ceri Davies さんは書きました:
> On 30 Jan 2006, at 18:36, Gerard Seibert wrote:
> > Duane Whitty wrote:
> >> Hi everyone,
> >>
> >> I wanted to check to see if I am using the proper etiquette
> >> when filling in my headers, especially when responding to
> >> someone's post.  Should I just let let my reply go to the
> >> person named in Reply-To or should I reply to the list and CC
> >> the poster, or is it the other way around?
> >
> > It is usually considered incorrect to directly mail or CC a
> > response to a poster unless they specifically requested it.
>
> The etiquette on all the FreeBSD lists has long been to reply to the
> list *and* the poster.

Along these same lines, I had something funny (bad) happen recently.

I reply to emails using the "reply to all" feature of my mail client.  It 
replies (not unreasonably, I think) to the list (as specified by List-ID), 
the To, From, and CC.  It seems to eliminate any duplicates as well as my own 
address.  This had a bad effect recently where I duplicated a message to the 
-questions mailing list because it was To: questions@ with a List-ID of 
freebsd-questions@ .  My question is, other than paying careful manual 
attention to where my replies are going, is there something that should be 
changed on my client or on the server to make it more obvious that those 2 
email addresses are (for my purposes at least?) the same?

Looking forward to replies,

Eric

-- 
The signature is a location used to give a personalised feel to each E-mail 
without having to personalise each E-mail.


pgp7mnjDAFGl6.pgp
Description: PGP signature

Re: IP Banning (Using IPFW)

[Daniel A.]

On 2/5/06, fbsd_user <[EMAIL PROTECTED]> wrote:
> I find this kind of approach is treating the symptom and not the
> cause.
> The basic problem is the services have well published port numbers
> and attackers beat on those known port numbers. A much simpler
> approach is to change the standard port numbers to some high order
> port number. See /etc/services  SSH logon command allows for a port
> number and the same for telnet. Your remote users will be the only
> people knowing your selected port numbers for those services. This
> way a attackers port scan will show the well published port numbers
> as not open so they will pass on attacking those ports on your ip
> address. This way your bandwidth usage will be reduced as attackers
> find your ip address as having nothing of interest.
>
> This same kind of thing can also be done for port 80 by using the
> web forwarding function of Zoneedit pointing to different port for
> your web server. Only people coming to your site through dns will be
> forwarded to the correct port.
>
> The clear key here is attackers roll through a large range of ip
> address port scanning for open ports. By using nonstandard port
> numbers for your services you stop the attacker even finding you in
> the first place.
>
> good luck what ever you choose to do.
You just argued against yourself. If an attacker is genuinely
interested in rooting someones box, that attacker will most likely
portscan the box - And thereby discovering that you have assigned
alternative port numbers to your services.
Security through obscurity is a bad place to start.
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Michael A.
> Alestock
> Sent: Sunday, February 05, 2006 10:42 AM
> To: [EMAIL PROTECTED]
> Subject: IP Banning (Using IPFW)
> Importance: High
>
>
> Hello,
>
> I was wondering if there's some sort of port available that can
> actively
> ban IPs that try and bruteforce a service such as SSH or Telnet, by
> scanning the /var/log/auth.log log for Regex such as "Illegal User"
> or
> "LOGIN FAILURES", and then using IPFW to essentially deny (ban) that
> IP
> for a certain period of time or possibly forever.
>
> I've seen a very useful one that works for linux (fail2ban), and was
> wondering if one exists for FreeBSD's IPFW?
>
> I've looked around in /usr/ports/security and /usr/ports/net but
> can't
> seem to find anything that closely resembles that.
>
> Your help would be greatly appreciated Thanks in advance!
>
> >> Michael A., USA... Loyal FreeBSD user since 2000.
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
>
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Filemanager with SMB support?

[Norberto Meijome]

Garrett Cooper wrote:
> Norberto Meijome wrote:
>> Hi all,
>> I need a filemanager which supports SMB browsing.
>>
>> I use fluxbox and VERY much rather not have to keep all those KDE
>> dependencies for Konqueror.
>>
>> I've tried xfce4's xffm, but it relies on nmblookup for discovery,
>> which is really unreliable , and doesn't seem to allow me to simply
>> tell it which server (via FQDN) I'd like to connect to.
>>
>> Any suggestions?
>>
>> thanks!!
>> Beto
> I believe Nautilus is another option if you want to look at SMB shares.
> -Garrett

Hi Garret,
but that would shift the lot of dependencies into gnome-land :) (still,
since I seem to be using more GTK-based software than QT, it may be a
better option).

thanks for the pointer.
Beto
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: MySQL version for 6.0

[fbsd_user]

Look in the FreeBSD ports system for mysql-server.  its there

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of je killen
Sent: Sunday, February 05, 2006 3:45 PM
To: freebsd-questions@freebsd.org
Subject: MySQL version for 6.0


Greetings:
I'm looking to find out if there is a current version of MySQL
specific
for v6 FreeBSD on AMD64. I don't see one
on the MySQL site and I don't know if I can successfully build it
from
source on this machine.
thanks;
Jeff K

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"[EMAIL PROTECTED]"

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: how do I create partitions?

[fbsd_user]

This is a windows question.
You say nothing about putting FreeBSD on the pc.
Windows has it's own fdisk program.
Create a bootable windows floppy and copy fdisk and format programs
to the floppy.
Boot from the floppy and run  fdisk /mbr to rewrite the mbr record.
or just use the fdisk pgm to allocate your partitions and then
format
then, doing this will recreate the mbr record also.
One very inportant note. Doing this will shit can you windows system
on the hard drive and you will have to do a reinstall or a stand
alone dos restore of your ghost backup if you have that software
product.

The windows install cd has as its first option to run fdisk to
partition your hard drive.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Björn König
Sent: Sunday, February 05, 2006 3:53 PM
To: Peter
Cc: freebsd-questions
Subject: Re: how do I create partitions?


Peter schrieb:

> Given that, on a windows client, I have backed up the partition
the OS and
> its applications reside on.
> Given that the client's disk becomes unusable.
> Given that I can recreate the correct partition size and type with
this
> CD.
>
> What is the best way to set up the MBR of the windows client so it
will
> boot?  An aborted Windows install?

I'm not sure what you are trying to do. sysinstall's fdisk programm
which is on the CD writes suitable boot code to the MBR if you want
it.

Björn
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"[EMAIL PROTECTED]"

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: SLAPD starting very slow

[Per olof Ljungmark]

Jan HREHO wrote:

Hi everybody.
My configuration.
FreeBSD 6.0 + I update ports. All programs I installed over ports

I installed LDAP server and client (2.2.30), nss_ldap-1.244, 
pam_ldap-1.8.0.


its rc that wants slapd - through PAM and NSS. I think there's something 
fishy about the way all this is implemented but unfortunately I don't 
know what and why. However, I moved /usr/local/etc/tc.d/slapd.sh to 
/etc/rc.d/slapd and that fixed it.


You might want to look into
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/configtuning-rcd.html
to get an idea.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: MySQL version for 6.0

[Björn König]

je killen schrieb:

Greetings:
I'm looking to find out if there is a current version of MySQL specific 
for v6 FreeBSD on AMD64. I don't see one
on the MySQL site and I don't know if I can successfully build it from 
source on this machine.

thanks;
Jeff K


You can use FreeBSD's software management to install mysql. After you 
have installed FreeBSD you can install MySQL easily:


  pkg_add -r mysql41-server

Alternativeyl you can choose mysql323-server, mysql40-server or 
mysql50-server.


Add these lines to /etc/rc.conf:

  mysql_enable="YES"
  mysql_dbdir="/path/to/database/dir"   # this is optionally

Then run

  /usr/local/etc/rc.d/mysql-server.sh start

That's all. Now you have set up a MySQL server.

Björn
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: IP Banning (Using IPFW)

[fbsd_user]

I find this kind of approach is treating the symptom and not the
cause.
The basic problem is the services have well published port numbers
and attackers beat on those known port numbers. A much simpler
approach is to change the standard port numbers to some high order
port number. See /etc/services  SSH logon command allows for a port
number and the same for telnet. Your remote users will be the only
people knowing your selected port numbers for those services. This
way a attackers port scan will show the well published port numbers
as not open so they will pass on attacking those ports on your ip
address. This way your bandwidth usage will be reduced as attackers
find your ip address as having nothing of interest.

This same kind of thing can also be done for port 80 by using the
web forwarding function of Zoneedit pointing to different port for
your web server. Only people coming to your site through dns will be
forwarded to the correct port.

The clear key here is attackers roll through a large range of ip
address port scanning for open ports. By using nonstandard port
numbers for your services you stop the attacker even finding you in
the first place.

good luck what ever you choose to do.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Michael A.
Alestock
Sent: Sunday, February 05, 2006 10:42 AM
To: [EMAIL PROTECTED]
Subject: IP Banning (Using IPFW)
Importance: High


Hello,

I was wondering if there's some sort of port available that can
actively
ban IPs that try and bruteforce a service such as SSH or Telnet, by
scanning the /var/log/auth.log log for Regex such as "Illegal User"
or
"LOGIN FAILURES", and then using IPFW to essentially deny (ban) that
IP
for a certain period of time or possibly forever.

I've seen a very useful one that works for linux (fail2ban), and was
wondering if one exists for FreeBSD's IPFW?

I've looked around in /usr/ports/security and /usr/ports/net but
can't
seem to find anything that closely resembles that.

Your help would be greatly appreciated Thanks in advance!

>> Michael A., USA... Loyal FreeBSD user since 2000.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"[EMAIL PROTECTED]"

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Powerfail/reboot, now inbound ppp not working

[stan]

I've got a ppp over ssh tunnel from work, that's initiated from the remote end
by a cron task.

Friday night we lost power at our house. Most of the machines are on UPS's, so 
I'm
failry certain I got them shutdown normally (it was the middle of the night
so I might have messed up).

In any case, the tunnel is not working now. I see that the remote end is 
atempting 
to connect. Here's a snippet from the ppp.log file:


Feb  5 15:39:03 black ppp[424]: Phase: Using interface: tun0
Feb  5 15:39:03 black ppp[424]: Phase: deflink: Created in closed state
Feb  5 15:39:03 black ppp[424]: tun0: Command: default: ident user-ppp VERSION 
(built COMPILATIONDATE)
Feb  5 15:39:03 black ppp[424]: tun0: Command: default: set server +3000 

Feb  5 15:39:03 black ppp[424]: tun0: Phase: Listening at port 3000.
Feb  5 15:39:03 black ppp[424]: tun0: Command: default: set device /dev/cuaa1
Feb  5 15:39:03 black ppp[424]: tun0: Command: default: set redial 1
Feb  5 15:39:03 black ppp[424]: tun0: Command: default: set speed 115200
Feb  5 15:39:03 black ppp[424]: tun0: Command: default: set dial ABORT BUSY 
ABORT NO\sCARRIER TIMEOUT 5"" AT OK-AT-OK AT+FCLASS=0 OK ATE1Q0L2M1 
OK \dATDT\T TIMEOUT 40 CONNECT
Feb  5 15:39:03 black ppp[424]: tun0: Command: default: set timeout 180
Feb  5 15:39:03 black ppp[424]: tun0: Command: default: enable dns
Feb  5 15:39:03 black ppp[424]: tun0: Command: wvpn: set timeout 0
Feb  5 15:39:03 black ppp[424]: tun0: Command: wvpn: set ifaddr 192.168.3.1 
192.168.4.1
Feb  5 15:39:03 black ppp[424]: tun0: Command: wvpn: add XXX.85.0.0 255.255.0.0 
HISADDR
Feb  5 15:39:03 black ppp[424]: tun0: Phase: PPP Started (direct mode).
Feb  5 15:39:03 black ppp[424]: tun0: Phase: bundle: Establish
Feb  5 15:39:03 black ppp[424]: tun0: Phase: deflink: closed -> opening
Feb  5 15:39:03 black ppp[424]: tun0: Phase: deflink: Connected!
Feb  5 15:39:03 black ppp[424]: tun0: Phase: deflink: opening -> carrier
Feb  5 15:39:03 black ppp[424]: tun0: Phase: deflink: carrier -> lcp
Feb  5 15:39:03 black ppp[424]: tun0: LCP: FSM: Using "deflink" as a transport
Feb  5 15:39:03 black ppp[424]: tun0: LCP: deflink: State change Initial --> 
Closed
Feb  5 15:39:03 black ppp[424]: tun0: LCP: deflink: State change Closed --> 
Stopped
Feb  5 15:39:03 black ppp[424]: tun0: LCP: deflink: RecvConfigReq(207) state = 
Stopped
Feb  5 15:39:03 black ppp[424]: tun0: LCP:  ACFCOMP[2]
Feb  5 15:39:03 black ppp[424]: tun0: LCP:  PROTOCOMP[2]
Feb  5 15:39:03 black ppp[424]: tun0: LCP:  ACCMAP[6] 0x
Feb  5 15:39:03 black ppp[424]: tun0: LCP:  MRU[4] 1500
Feb  5 15:39:03 black ppp[424]: tun0: LCP:  MAGICNUM[6] 0xd3f1ae61
Feb  5 15:39:03 black ppp[424]: tun0: LCP: deflink: SendConfigReq(1) state = 
Stopped
Feb  5 15:39:03 black ppp[424]: tun0: LCP:  ACFCOMP[2]
Feb  5 15:39:03 black ppp[424]: tun0: LCP:  PROTOCOMP[2]
Feb  5 15:39:03 black ppp[424]: tun0: LCP:  ACCMAP[6] 0x
Feb  5 15:39:03 black ppp[424]: tun0: LCP:  MRU[4] 1500
Feb  5 15:39:03 black ppp[424]: tun0: LCP:  MAGICNUM[6] 0x0f111e73
Feb  5 15:39:03 black ppp[424]: tun0: LCP: deflink: SendConfigAck(207) state = 
Stopped
Feb  5 15:39:03 black ppp[424]: tun0: LCP:  ACFCOMP[2]
Feb  5 15:39:03 black ppp[424]: tun0: LCP:  PROTOCOMP[2]
Feb  5 15:39:03 black ppp[424]: tun0: LCP:  ACCMAP[6] 0x
Feb  5 15:39:03 black ppp[424]: tun0: LCP:  MRU[4] 1500
Feb  5 15:39:03 black ppp[424]: tun0: LCP:  MAGICNUM[6] 0xd3f1ae61
Feb  5 15:39:03 black ppp[424]: tun0: LCP: deflink: LayerStart
Feb  5 15:39:03 black ppp[424]: tun0: LCP: deflink: State change Stopped --> 
Ack-Sent
Feb  5 15:39:04 black ppp[424]: tun0: LCP: deflink: RecvConfigAck(1) state = 
Ack-Sent
Feb  5 15:39:04 black ppp[424]: tun0: LCP:  ACFCOMP[2]
Feb  5 15:39:04 black ppp[424]: tun0: LCP:  PROTOCOMP[2]
Feb  5 15:39:04 black ppp[424]: tun0: LCP:  ACCMAP[6] 0x
Feb  5 15:39:04 black ppp[424]: tun0: LCP:  MRU[4] 1500
Feb  5 15:39:04 black ppp[424]: tun0: LCP:  MAGICNUM[6] 0x0f111e73
Feb  5 15:39:04 black ppp[424]: tun0: LCP: deflink: State change Ack-Sent --> 
Opened
Feb  5 15:39:04 black ppp[424]: tun0: LCP: deflink: LayerUp
Feb  5 15:39:04 black ppp[424]: tun0: LCP: deflink: SendIdent(0) state = Opened
Feb  5 15:39:04 black ppp[424]: tun0: LCP:  MAGICNUM 0f111e73
Feb  5 15:39:04 black ppp[424]: tun0: LCP:  TEXT user-ppp 3.2 (built Nov  6 
2005)
Feb  5 15:39:04 black ppp[424]: tun0: CCP: FSM: Using "deflink" as a transport
Feb  5 15:39:04 black ppp[424]: tun0: CCP: deflink: State change Initial --> 
Closed
Feb  5 15:39:04 black ppp[424]: tun0: CCP: deflink: LayerStart.
Feb  5 15:39:04 black ppp[424]: tun0: CCP: MPPE: Not usable without CHAP81
Feb  5 15:39:04 black ppp[424]: tun0: CCP: deflink: SendConfigReq(1) state = 
Closed
Feb  5 15:39:04 black ppp[424]: tun0: CCP:  DEFLATE[4] win 15
Feb  5 15:39:04 black ppp[424]: tun0: CCP:  PRED1[2] 
Feb  5 15:39:04 black ppp[424]: tun0: CCP: deflink: State change Closed --> 
Req-Sent
Feb  5 15:39:04 black ppp[424]: tun0: Phase: deflink: lcp -> open
Feb 

RE: Gnome port

[Conrad Sabatier]

On 05-Feb-2006 Christopher Sean Hilton wrote:
> Is there a reason that the gnome 2 ports don't use the conflicts
> mechanism to avoid completely hosing an existing gnome 2 install? On
> Friday I came across a gimp script-fu which would slice an image into
> pieces and output html that rendered the complete image as a
> table. But it was written in python and my gimp doesn't understand
> python-fu. Well I figured that it would be a simple matter to:
> 
>  # cd /usr/ports/graphics/gimp; make config
> 
> and tell the the port that I wanted to use python plugins. And then a
> simple:
> 
>  # make
> 
> would either build the package or _harmlessly_ barf trying. Well, it
> did barf but only after it had installed gnome2-vfs-2.12.x.x or
> sumsuch and about 5 or six other gnome2-2.12 ports on top of my
> working gnome2-2.10.x.x installation. Obviously this rendered the
> installed gnome2-2.10 ports on my box inoperable in very difficult to
> debug ways.
> 
> Would a CONFLICTS entry in the apropriate make files have stopped the
> gnome overbuilds and left my system in a working state?

I believe you might have avoided this sort of problem if you had used
portinstall (portupgrade) to add the new package.  In that case,
portupgrade would have detected that newer versions of some of your
existing GNOME ports were available, and rather than simply installing the
new versions on top of the old, it would have upgraded the already installed
ports to the newer versions.

> Also please don't get me wrong. I planned to update my laptop from
> 5.4-STABLE to 6.0-STABLE later this week.

That's really beside the point in this case.  The same thing could have
happened regardless of which FreeBSD version you were running at the time.

> But this problem means that
> I'm without my laptop for a client visit and mailserver build which is
> not making me very happy.

Sorry to hear that.  But we've all made our share of these types of
mistakes on the path to greater knowledge, wisdom and understanding.  :-)
 
> Thanks
> -- Chris
> 
> P.S. I glad to post a bug report an fling this email in the direction
> of the port maintainers. Heck I think I could even script the process
> of updating the Makefiles given enough time.

I'm not sure if the behavior you witnessed could rightly be called a "bug",
but it certainly could be considered an issue worth addressing.  Obviously,
running "make install" instead of using portupgrade can be a risky
proposition in some cases, and at the very least, the handbook should make
this clear.

-- 
Conrad J. Sabatier <[EMAIL PROTECTED]> -- "In Unix veritas"

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: how do I create partitions?

[Björn König]

Peter schrieb:


Given that, on a windows client, I have backed up the partition the OS and
its applications reside on. 
Given that the client's disk becomes unusable.

Given that I can recreate the correct partition size and type with this
CD.

What is the best way to set up the MBR of the windows client so it will
boot?  An aborted Windows install?


I'm not sure what you are trying to do. sysinstall's fdisk programm 
which is on the CD writes suitable boot code to the MBR if you want it.


Björn
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

MySQL version for 6.0

[je killen]

Greetings:
I'm looking to find out if there is a current version of MySQL specific 
for v6 FreeBSD on AMD64. I don't see one
on the MySQL site and I don't know if I can successfully build it from 
source on this machine.

thanks;
Jeff K

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Proper mail headers

[Ceri Davies]

On 30 Jan 2006, at 18:36, Gerard Seibert wrote:


Duane Whitty wrote:


Hi everyone,

I wanted to check to see if I am using the proper etiquette
when filling in my headers, especially when responding to
someone's post.  Should I just let let my reply go to the
person named in Reply-To or should I reply to the list and CC
the poster, or is it the other way around?


It is usually considered incorrect to directly mail or CC a
response to a poster unless they specifically requested it.


The etiquette on all the FreeBSD lists has long been to reply to the  
list *and* the poster.


Ceri
--
That must be wonderful!  I don't understand it at all.
  -- Moliere





PGP.sig
Description: This is a digitally signed message part

Re: ng_one2many v.s. AFT (NIC Fault Tolerance/Fail Over/Redundancy Revisited)

[Brad Bendy]

On Saturday 15 October 2005 16:25, Brian A. Seklecki wrote:

Has anyone had any success with FBSD 6.0? I totally forgot about this email...

Thanks!
Brad

> Re:
> http://lists.freebsd.org/pipermail/freebsd-questions/2005-October/100623.ht
>ml
>
> First: This is all very preliminary from some testing over the weekend.
>
> Dell's reponse was that Intel's AFT/ALB was entirely software based.
>
> That left me with few options:
> 1) Try userland layer 3 failover (ugly)
> 2) Use ng_one2many
>
> However, ng_one2many only permits for two algorithms:
> NG_ONE2MANY_XMIT_ROUNDROBIN and NG_ONE2MANY_XMIT_ALL.
>
> However, none of these meet the need:
> - Round-Robin results in 50% packet loss if a hook/interface is lost (not
> acceptable in any mission critical environment).
> - Xmit-All causes twice as much load on to be placed on the switch /fabric
> and switch CPU.
>
> What ng_one2many needs is a "Active-Standy" XMIT algorithm (STP BOFH's
> will think BLOCKING/FORWARDING).  It could even be used on top of other
> NetGraph nodes like ng_fec or possibly (hopefully) ng_802.3ad >:}
>
> Essentially, a single layer 3 IP address needs to be visible in a "switch
> fault tolerant" or "adapter fault tolerant" configuration.  A
> userland-level daemon could be scripted, and it has been done before:
>
> http://lists.freebsd.org/pipermail/freebsd-isp/2003-November/001314.html
>
> So when a fail-over occurs, the layer IP 3 address moves from one layer 2
> MAC address to another layer 2 MAC address on the same machine (and same
> subnet, same ethernet segment, just a different interface).  TCP sockets
> should not be affected due to layer abstraction.
>
> This got me thinking about HSRP/VRRP.  That protocol is designed strictly
> to move a layer 3 address between two different hosts.   Excellent
> applications are Router/Firewall and VPN concentrator, as OpenBSD's
> carp(4) has implemented with the help of pfsync.  I was experimenting with
> the OpenBSD variant and I realized that client hosts weren't seeing the
> usual warnings about MAC address changes.
>
> As of 3.7, OpenBSD's CARP shares a virtual MAC address between the hosts,
> Cisco's HSRP does not.
>
> Then I was thinking about the OpenBSD/NetBSD bridge(4) interface.  If the
> host acting as the bridge wishes too, it can participate in the bridged
> networks by assigning a layer 3 address.  The address isn't ifconfig(8)'d
> do the "bridge0" interface.  Instead, it's assigned to the first interface
> included in the "bridge[0-9]", say fxp0.
>
> Further more, regardless of what network segment/port a host participating
> in a bridge(4)'d network resides, the ARP'd IP address of the
> OpenBSD/NetBSD host is persistently the MAC first physical interface
> ifconfig(8)'d with the IP.
>
> Plus OpenBSD/NetBSD bridge(4) supports 802.1d spanning tree >:}
>
> This is important.  Spanning Tree as an alogirth could provide Intel AFT
> "Fault Tolerance" intelligence if the persistent layer2 address of a host
> was unchanged with the NIC interface change.  The function of STP is to
> provide a loop free path to every layer2 MAC in a segment.  But a STP
> enabled bridge(4) with an IP address assigned has a persistent MAC address
> associated with a layer 3 address!
>
> Therefore, the solution has been there all along.  The attached diagram
> explains in greater detail.
>
> http://digitalfreaks.org/~lavalamp/OpenBSD_Bridge_AFT.png
>
> In this diagram, switch 0 is configured manually as the spanning tree root
> and switch 1 is the backup spanning tree root.  By default, rl0 will be in
> BLOCKING and rl1 will being FORWARDING.  However, as tcpdump(8)
> illustrates, regardless of which interface is the root port, ARP replys
> will always return the MAC if the bridge(4) member interface ifconfig(8)'d
> with the IP.
>
> rl0: flags=8943 mtu 1500
>   address: 00:50:fc:9d:24:d6
>   media: Ethernet autoselect (100baseTX full-duplex)
>   status: active
>   inet 192.168.100.1 netmask 0xff00 broadcast 192.168.100.255
>
> rl1: flags=8943 mtu 1500
>   address: 00:50:fc:9d:08:cd
>   media: Ethernet autoselect (100baseTX full-duplex)
>   status: active
>
> ---
>
> bridge0: flags=41
>   Configuration:
>   priority 32768 hellotime 2 fwddelay 15 maxage 20
>   Interfaces:
>   rl1 flags=b
>   port 2 ifpriority 128 ifcost 55 forwarding
>   rl0 flags=b
>   port 1 ifpriority 128 ifcost 55 blocking
>   Addresses (max cache: 100, timeout: 240):
>   00:01:63:bb:f7:c9 rl1 1 flags=0<>
>   00:0f:1f:c1:f2:b7 rl1 1 flags=0<>
> -
> # tcpdump -i rl1 -n arp
> 12:38:17.806885 arp who-has 192.168.100.1 tell 192.168.100.254
> 12:38:17.806951 arp reply 192.168.100.1 is-at 0:50:fc:9d:24:d6
> 12:38:17.806966 arp reply 192.168.100.1 is-at 0:50:fc:9d:24:d6
>
> bs0#sh spanning-tree vlan 11 interface fa0/9
>
> Spanning tree 11 is executing the IEEE compatible Spanning Tree protocol
>B

Re: IP Banning (Using IPFW)

[Philip Hallstrom]

I was wondering if there's some sort of port available that can actively ban 
IPs that try and bruteforce a service such as SSH or Telnet, by scanning the 
/var/log/auth.log log for Regex such as "Illegal User" or "LOGIN FAILURES", 
and then using IPFW to essentially deny (ban) that IP for a certain period of 
time or possibly forever.


I've seen a very useful one that works for linux (fail2ban), and was 
wondering if one exists for FreeBSD's IPFW?


There are some in the ports, but you can write your own pretty easy too. 
The one thing I didn't like about the ones in the ports is the app was 
responsible for removing the rules after a set amount of time.  Which 
could be a problem if that app crashed for some reason.  You could lock 
yourself out permanently...


Here's a quick perl script I wrote that does what you want...

http://pastebin.com/540575

Combine that with these two crontab entries:

0-59/4 * * * * /sbin/ipfw delete 501 >/dev/null 2>&1
2-59/4 * * * * /sbin/ipfw delete 500 >/dev/null 2>&1

-philip
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Gnome port

[Christopher Sean Hilton]

Is there a reason that the gnome 2 ports don't use the conflicts
mechanism to avoid completely hosing an existing gnome 2 install? On
Friday I came across a gimp script-fu which would slice an image into
pieces and output html that rendered the complete image as a
table. But it was written in python and my gimp doesn't understand
python-fu. Well I figured that it would be a simple matter to:

 # cd /usr/ports/graphics/gimp; make config

and tell the the port that I wanted to use python plugins. And then a
simple:

 # make

would either build the package or _harmlessly_ barf trying. Well, it
did barf but only after it had installed gnome2-vfs-2.12.x.x or
sumsuch and about 5 or six other gnome2-2.12 ports on top of my
working gnome2-2.10.x.x installation. Obviously this rendered the
installed gnome2-2.10 ports on my box inoperable in very difficult to
debug ways.

Would a CONFLICTS entry in the apropriate make files have stopped the
gnome overbuilds and left my system in a working state?

Also please don't get me wrong. I planned to update my laptop from
5.4-STABLE to 6.0-STABLE later this week. But this problem means that
I'm without my laptop for a client visit and mailserver build which is
not making me very happy.

Thanks
-- Chris

P.S. I glad to post a bug report an fling this email in the direction
of the port maintainers. Heck I think I could even script the process
of updating the Makefiles given enough time.


-- 
Chris Hilton   chris-at-vindaloo-dot-com

"All I was doing was trying to get home from work!"
 -- Rosa Parks


pgpvedlZLEuP7.pgp
Description: PGP signature

Re: how do I create partitions?

[Peter]

--- Bj�rn K�nig <[EMAIL PROTECTED]> wrote:

> Peter schrieb:
> > What tool allows me to boot on some media (cd, fd) and create
> partitions
> > of various types (for FreeBSD, Windows 98/2000 at least) and sizes (in
> sectors)?
> 
> You can use the "bootonly" CD to do this task.
> 
>
ftp://ftp.freebsd.org/pub/FreeBSD/releases/i386/ISO-IMAGES/6.0/6.0-RELEASE-i386-bootonly.iso

Thanks, I'm going to try this.  One last part of the puzzle remains:

Given that, on a windows client, I have backed up the partition the OS and
its applications reside on. 
Given that the client's disk becomes unusable.
Given that I can recreate the correct partition size and type with this
CD.

What is the best way to set up the MBR of the windows client so it will
boot?  An aborted Windows install?






__ 
Find your next car at http://autos.yahoo.ca
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Apparant java catch-22

[Jonathan Chen]

On Sun, Feb 05, 2006 at 01:46:20PM -0600, Gene wrote:

[...]
> ERROR: Your BOOTDIR environment variable does not point
>to a valid Java 2 SDK for bootstrapping this build.
>A Java 2 SDK 1.4.2 build must be bootstrapped using
>J2SDK 1.4.1 fcs (or later).
>Apparently, your bootstrap JDK is version
>Please update your ALT_BOOTDIR setting and start your build again.

For your first java/jdk14 build you first need to have a linux-jdk14
installed, and active (ie linuxalator on, linprocfs mounted) to act as a
bootstrap compiler. Once the native jdk14 has been built and
installed, you can remove linux-jdk14 and its dependancies. Any
further jdk14 builds will use the native jdk14 as its bootstrap
compiler.

Cheers.
-- 
Jonathan Chen <[EMAIL PROTECTED]>
---
"I love deadlines. I like the whooshing sound they make as they fly by"
- Douglas Adams
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

[Fwd: Re: How to Reinstate gamin-0.1.5_2 Dependency]

[Bob Perry]

 Original Message 
Subject: Re: How to Reinstate gamin-0.1.5_2 Dependency
Date: Sun, 05 Feb 2006 14:03:34 -0500
From: Bob Perry <[EMAIL PROTECTED]>
To: Joe Marcus Clarke <[EMAIL PROTECTED]>
CC: [EMAIL PROTECTED]
References: <[EMAIL PROTECTED]>	 
<[EMAIL PROTECTED]>	 
<[EMAIL PROTECTED]>	 
<[EMAIL PROTECTED]> 
<[EMAIL PROTECTED]> <[EMAIL PROTECTED]>


Joe Marcus Clarke wrote:

On Wed, 2006-02-01 at 22:07 -0500, Bob Perry wrote:

Joe Marcus Clarke wrote:

On Wed, 2006-02-01 at 00:44 -0500, Bob Perry wrote:

On Tue January 31 2006 11:58 pm, you wrote:

On Tue, 2006-01-31 at 23:10 -0500, Bob Perry wrote:

I'm running FreeBSD 5.4 and recently cvsup'd my system  and followed that
with portupgrade.  I subsequently ran pkgdb -Fu and was asked if
gamin-0.1.5_2 was a stale dependency for gnomevfs2-2.12.2_1 and
inadvertently responded yes.  I attempted to reinstall gamin-0.1.5_2 and
received a message stating that it was in conflict with fam-2.6.9_6 which
I found was required by
firefox-1.5_5,1.  The message also indicated that I should delete
fam-2.6.9_6 and then I could complete installation of gamin-0.1.5_2  so I
did.  I ran pkgdb -Fu again and replaced fam-2.6.9_6 with gamin-0.1.5_2
as a dependency of firefox.  I expected to see a similar prompt
requesting me to make gamin-0.1.5_2 a dependency of gnomevfs2-2.12.2_1
but did not.

Both, gamin-0.1.5_2 and fam-2.6.9_6 seem to fulfill the same function of
monitoring file alterations (?). I don't fully understand the purpose but
my question is how do I return gamin-0.1.5_2 as a dependent of
gnomevfs2-2.12.2_1 and was I correct in making it a dependent of firefox?

You can only have one installed.  The following command will replace fam
with gamin:

portupgrade -o devel/gamin -f fam
I already removed fam when I installed gamin so this command doesn't recognize 
fam.  However, it seems as though I need to do more than simply change 
dependency via pkgdb -Fu.  For instance, gamin is now a dependency of firefox 
because I change  it with the pkgdb -Fu command.  If I understand your 
command, I really need to run portupgrade on firefox to make the change 
whole.  Correct?

No, just run pkgdb -Ff, and select gamin if it asks about fam.

Joe


Thanks Joe,
I ran pkgdb -Ff and there was no output or prompts.  However, when I ran 
  the pkg_info -rR gnomevfs2-2.12.2_1 command, gamin did not appear.  As 
far as I knew it was still a dependency of gnomevfs2.  Did I miss a step?


You must still have fam installed.  gnomevfs2 will register a dependency
to either fam or gamin.


My system must be out of sync.  I could not find fam.  I cvsup'd my
system again and found a new a warning/recommendation in
/usr/ports/UPDATING stating that users of textproc/expat2 should force
upgrade of any ports depending on it (e.g., portupgrade -rf
textproc/expat2).

I ran pkg_info -r bugbuddy-2.12.1 (one of the ports in need of
upgrading) prior to the forced upgrade, and found fam-2.6.9_6 on the
list of dependencies.  I ran the same command after the forced upgrade
and fam was replaced by gamin-0.1.5._2.

I can only assume that once the forced upgrade is complete that gamin
will have replaced fam in every case since both cannot exist at the same
time.

I also assume that this is not a major issue but just wanted to bring,
what I hope is, closure to my original question.

Thnx,
Bob Perry

I apologize, but it seems like I attached this note to an earlier 
response which failed to include the command:

portupgrade -o devel/gamin -f fam

This command very conveniently replaced fam with gamin and greatly 
facilitated the forced upgrades.





___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Apparant java catch-22

[Gene]

I've been trying to get java installed for some months now and I can't
get past the point shown below. It seems that the port is looking for an
already installed version of java. I've looked at various how-tos, and
the java pages at freebsd.org, but no help. Is there some way around
this catch-22?

Thanks



# make===>  Building for jdk-1.4.2p7
# Start of jdk build
bsd i586 1.4.2-p7 build started: 06-02-05 13:33

. %><  snip


WARNING: Your build environment has the variable DEV_ONLY
 defined. This will result in a development-only
 build of the J2SE workspace, lacking the documentation
 build and installation bundles.

ERROR: Your JAVAWS_BOOTDIR environment variable does not point
   to a valid Java 2 SDK for bootstrapping this build.
   A Java 2 SDK 1.4 build must be bootstrapped using
   J2SDK 1.4.0 fcs (or later).
   Apparently, your bootstrap JDK is version
   Please update your ALT_JAVAWS_BOOTDIR setting and start your
build again.

ERROR: Your BOOTDIR environment variable does not point
   to a valid Java 2 SDK for bootstrapping this build.
   A Java 2 SDK 1.4.2 build must be bootstrapped using
   J2SDK 1.4.1 fcs (or later).
   Apparently, your bootstrap JDK is version
   Please update your ALT_BOOTDIR setting and start your build again.

Exiting because of the above error(s).

gmake: *** [post-sanity] Error 1
*** Error code 2

Stop in /usr/ports/java/jdk14.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Any good OpenGL games?

[Evgeny Solovyov]

All these games run good under FreeBSD. I use it with linux_base-rh-9 
and nvidia-driver. Only problem i had was a conflict of libGL.so 
librarys of  nvidia-driver and linux-dri packages. But simple


# mv /usr/compat/linux/usr/X11R6/lib/libGL.so.1 
/usr/compat/linux/usr/X11R6/lib/libGL.so.1-off
# mv /usr/compat/linux/usr/X11R6/lib/libGL.so.1.2 
/usr/compat/linux/usr/X11R6/lib/libGL.so.1.2-off


and all is Okay :)



Xn Nooby wrote:

On 2/5/06, Evgeny Solovyov <[EMAIL PROTECTED]> wrote:

I play quake3, quake4, doomIII

linux-quake3-demo
linux-quake4
linux-doom3-demo




 I tried quakeforge, but when I get a missing WAD error when I try
"nq-glx".  Are these games you mentioned complete? It will be great if so!
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: Compaq Integrated SmartArray Quantum DLT4000

[TRODAT]

My 2 cents,

For me it was the same, until I picked up an Adaptec and used it for the 
DLT drives. I was rather bummed myself but it did seem to work well.


Rob.

On Thu, 2 Feb 2006, Erin Fortenberry wrote:


I had not been following this thread until now but...

Several years ago I built two AntiSPAM/Virus gatways on DL380 G3's. Both had
DLT's attached.

At first these were attached via the 5i controller. Later after much hair
pulling, I ended up adding in an Adaptec card for them.

I don't know whya, but the DLT would just not work on the 5i's.

Good luck,

-Erin


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of RA Cohen
Sent: Thursday, February 02, 2006 9:21 AM
To: freebsd-questions@freebsd.org
Cc: [EMAIL PROTECTED]
Subject: Re: Compaq Integrated SmartArray Quantum DLT4000

I was physically at the machine yesterday with the SmartStart CD
in hand, but as I was about to boot off that CD thought it would
be only useful for setting up drive arrays...not the tape drive.
So I didn't pursue it. I'll have to check it out later today...

I'll let you and the maillist know,
Roy

--- "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote:


On 2/1/06, RA Cohen <[EMAIL PROTECTED]> wrote:

Hi All,

I'm running several Compaq Proliant DL360 servers, all with

FBSD

6.0-RELEASE.

One of these has an internal Quantum DLT 4000 (that's how

the

BIOS identifies it) tape drive. I need to use it, but can

find

no evidence of this hardware in the dmesg output.

. . .

The system sees the integrated controller and uses ida0 to

id

it, but does not see the tape drive.



If it's anything like my old proliant, the tape drive
is on ncr0 or ncr1 (or sym[01] any of which are the
on-board scsi controllers), which do not appear to probe
on your system.  If your tape drive is cabled to
ida0 or ida1, you'll probably need to resort to the
array controller firmware or CD, depending, and
set it up from there.


--
--




__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"[EMAIL PROTECTED]"



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: how do I create partitions?

[lars]

Peter <[EMAIL PROTECTED]> wrote:
> What tool allows me to boot on some media (cd, fd) and create partitions
> of various types (for FreeBSD, Windows 98/2000 at least) and sizes (in 
> sectors)?
Partition Magic maybe?

Check google (keywords = partition tool), maybe that'll also help you
ask your question in a more specific way.
> 
> 
>   
> 
>   
>   
> __ 
> Find your next car at http://autos.yahoo.ca
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: how do I create partitions?

[Björn König]

Peter schrieb:

What tool allows me to boot on some media (cd, fd) and create partitions
of various types (for FreeBSD, Windows 98/2000 at least) and sizes (in sectors)?


You can use the "bootonly" CD to do this task.

ftp://ftp.freebsd.org/pub/FreeBSD/releases/i386/ISO-IMAGES/6.0/6.0-RELEASE-i386-bootonly.iso

Björn
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: SnortCenter2 on FBSD?

[Paul Schmehl]

--On February 5, 2006 8:50:24 AM -0800 Drew Tomlinson 
<[EMAIL PROTECTED]> wrote:


Thank you for your response.  I'm running 6.0 but perl is perl so it
shouldn't matter.  I'll give it a try and post my results for the
archives.
Are you going to pursue using it any further even though it allows the
admin access through a web interface?  If you do, I'd be interested in
your results.


No.  I won't be using snortcenter.

I'm working on porting sguil over to FreeBSD, and I do all the rules and 
other maintenance on the commandline, either manually or through scripting.


Paul Schmehl ([EMAIL PROTECTED])
Adjunct Information Security Officer
University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Why does portsdb -Uu run so long?

[Robert Huff]

Xn Nooby writes:

>  Everyone that knows what they are doing never seem to have a problem.

Respectfully, rubbish.
I use portupgrade; where it seems applicable I am careful to
mention one ought to read the manual completely, and to state my
experiences where it has clearly and without provocation Done the
Wrong Thing.  Similar behavior can be observed in other posters,
with a statistical bias toward the more technically experienced.
(Your mileage may vary.)


Robert Huff

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

how do I create partitions?

[Peter]

What tool allows me to boot on some media (cd, fd) and create partitions
of various types (for FreeBSD, Windows 98/2000 at least) and sizes (in sectors)?






__ 
Find your next car at http://autos.yahoo.ca
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Why does portsdb -Uu run so long?

[Gerard Seibert]

Xn Nooby wrote:

> > I want to ask you: how long does it take you to cvsup your ports, run
> > 'portsdb
> > -Uu', and finish with 'portversion -l "<" '? To run 'portsnap fetch
> > update',
> > then 'portversion -v | grep needs', it took less then 55 seconds and I was
> > off upgrading ports. The procedure I used had no errors.
> 
> 
> I think it takes about 40 minutes to run portsdb -Uu on my normal P4
> desktop, and several hours inside a virtual machine.  My old P3 laptop took
> 2 hours.  Portsnap took about 1 minute, it was very fast.
> 
> "The procedure I used had no errors."
> 
> Everyone that knows what they are doing never seem to have a problem.
> Generally people say, "I just did a 'portsnap -AbCdDeF' and it worked
> great!", but then it turns out that command was one of many that preceeded
> and followed it, which they neglected to mention.
> 
> 
> Both ways of upgrading work. Neither way will tell you about the conflict
> > between pilot-link and libmal. You're going to have to find out about
> > during
> > an upgrade or, or wait and read about it on the list. So you can't be
> > talking
> > about that as a problem with portsnap. Just what was the problem you had
> > with
> > portsnap?
> 
> 
> I believe I had a "stale dependency with imagemagic" that I chose to "force"
> to continue.  That was on a brand new install, and it happend twice (I tried
> reinstalling).  Maybe I can try to recreate it in a VMWare virtual machine
> so I can reproduce it.
> 
> I think I also got the ruby error, if that was the one that happend about 1
> year ago.  I remember doing an upgrade which broke the system, so I
> reinstalled it a few days later.
> 
>  Also, is it not possible to make a system that does not have conflicts?
> Maybe OS's are simply too complex.  It would seem like there should be a way
> to kick off a global update and rebuild that started with the core pieces
> first, and then moved up the dependency tree level-by-level.  Something that
> was 100% guaranteed to work, and took 1 command.

You could try portmanager 'sysutils/portmanager'. The command:

portmanager -u -f -l -y

will rebuild all of the installed ports in a logical manner as well as
creating a log file for the user to examine if necessary. I would
recommend cleaning out /usr/ports/distfiles and then running:

portsclean -C -D -DD -L -P -PP

prior to running that command. This will ensure that all the crud from
previous installations will be removed ensuring a clean start.

Just my 2¢.

-- 
Gerard Seibert
[EMAIL PROTECTED]


 Man invented language to satisfy his deep need to complain.

  Lily Tomlin
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

IP Banning (Using IPFW)

[Michael A. Alestock]

Hello,

I was wondering if there's some sort of port available that can actively 
ban IPs that try and bruteforce a service such as SSH or Telnet, by 
scanning the /var/log/auth.log log for Regex such as "Illegal User" or 
"LOGIN FAILURES", and then using IPFW to essentially deny (ban) that IP 
for a certain period of time or possibly forever.


I've seen a very useful one that works for linux (fail2ban), and was 
wondering if one exists for FreeBSD's IPFW?


I've looked around in /usr/ports/security and /usr/ports/net but can't 
seem to find anything that closely resembles that.


Your help would be greatly appreciated Thanks in advance!


Michael A., USA... Loyal FreeBSD user since 2000.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Filemanager with SMB support?

[Garrett Cooper]

Norberto Meijome wrote:

Hi all,
I need a filemanager which supports SMB browsing.

I use fluxbox and VERY much rather not have to keep all those KDE 
dependencies for Konqueror.


I've tried xfce4's xffm, but it relies on nmblookup for discovery, 
which is really unreliable , and doesn't seem to allow me to simply 
tell it which server (via FQDN) I'd like to connect to.


Any suggestions?

thanks!!
Beto

I believe Nautilus is another option if you want to look at SMB shares.
-Garrett
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: question

[Chuck Swiger]

Hello--

Eduard Suica wrote:
> Concept it's free, under a freeware licence. We are still to decide if it
> will be "Open source" or "partially open source" ... (with some "obfuscated"
> code to protect the kernel). How ever, we'll assume responsabilty over it.

You're welcome to submit and maintain the port for your software; see here:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/porters-handbook/quick-porting.html

...and the rest of the Porter's Handbook for how to do this and get your
software included with FreeBSD's ports system.

Thanks for your interest,
-- 
-Chuck

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: SnortCenter2 on FBSD?

[Drew Tomlinson]

On 2/4/2006 10:53 AM Paul Schmehl wrote:

--On February 4, 2006 10:19:09 AM -0800 Drew Tomlinson 
<[EMAIL PROTECTED]> wrote:



Is anyone using SnortCenter2
(http://sourceforge.net/projects/snortcenter2/) on FreeBSD?  I see
there's a Linux agent but not a FBSD.  Maybe it works with FBSD Linux
emulation?  Not finding any docs on this via Google.  Just looking for a
little encouragement and direction before heading down this path.  Any
suggestions appreciated.

I just downloaded, unpacked and ran the installs on both parts (sensor 
and console).


They installed just fine.  The sensor is written in perl and "knows 
about" FreeBSD (but only up to version 5.0, which is a little 
behind).  During setup you'll be prompted for the OS you're using and 
its version.  It runs fine on my 5.4 box.


The console is written in php and requires nothing more than creating 
a directory, editing your httpd.conf file and running the setup 
program through your web browser (if you don't already have your db 
setup.)


It doesn't look like there's much to it, but I've never used it, so I 
can't really say how well it works or whether it's worthwhile.  It 
*does* use its own copy of webmin, and runs its own webserver on an 
unprivileged port.  I personally don't care for *any* tool that allows 
admins to access a box through a web interface to do administrative 
work, but that's personal preference.  Your situation may be 
completely different from mine, and your risk factors may be 
completely different from mine.



Thank you for your response.  I'm running 6.0 but perl is perl so it 
shouldn't matter.  I'll give it a try and post my results for the 
archives. 

Are you going to pursue using it any further even though it allows the 
admin access through a web interface?  If you do, I'd be interested in 
your results.


Thanks,

Drew


--
Visit The Alchemist's Warehouse
Magic Tricks, DVDs, Videos, Books, & More!

http://www.alchemistswarehouse.com

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Trouble with resources under network load

[Chuck Swiger]

Andrew Pantyukhin wrote:
> I've got P4 box with 256Mb RAM. I want it to be able to
> forward 5Mbit/s between 500 PPTP clients (no crypto/
> compression) and our ISP. I understand we should
> probably get Cisco for this, or at least a higher-spec
> box, but I just want this setup to be kinda proof of concept.
> Complicated things can be done using cheap hardware
> and a good OS. Can't they?

Sure.  :-)

> 
> 
> I'm constantly stumbling upon some out-of-resources
> problems. Just to name a couple:
> 
> named[400]: client 10.32.23.92#1714:
> error sending response: not enough free resources
> 
> snmpd[806]: sysctl get: Cannot allocate memory
> 
> 
> 
> I have these in loader.conf and sysctl.conf:
> 
> kern.maxfiles=65536
> kern.maxfilesperproc=65536
> net.graph.maxdgram=65536
> net.graph.recvspace=65536
> kern.maxusers=512
> kern.ipc.maxpipekva=268435456
> net.graph.maxalloc=65536
[ ... ]
> What's wrong?

For one thing, if you've got a machine with 256MB of RAM, you cannot possibly be
able to dedicate 256MB just to kern.ipc.maxpipekva.  Likewise, a machine with
256MB of users would auto-tune kern.maxusers to ~100 or so, and kern.maxfiles
ought to be under 1, if not half that.

You should revert to the defaults and make gradual tuning changes, if needed,
from there.

-- 
-Chuck
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Why does portsdb -Uu run so long?

[Xn Nooby]

> I want to ask you: how long does it take you to cvsup your ports, run
> 'portsdb
> -Uu', and finish with 'portversion -l "<" '? To run 'portsnap fetch
> update',
> then 'portversion -v | grep needs', it took less then 55 seconds and I was
> off upgrading ports. The procedure I used had no errors.


I think it takes about 40 minutes to run portsdb -Uu on my normal P4
desktop, and several hours inside a virtual machine.  My old P3 laptop took
2 hours.  Portsnap took about 1 minute, it was very fast.

"The procedure I used had no errors."

Everyone that knows what they are doing never seem to have a problem.
Generally people say, "I just did a 'portsnap -AbCdDeF' and it worked
great!", but then it turns out that command was one of many that preceeded
and followed it, which they neglected to mention.


Both ways of upgrading work. Neither way will tell you about the conflict
> between pilot-link and libmal. You're going to have to find out about
> during
> an upgrade or, or wait and read about it on the list. So you can't be
> talking
> about that as a problem with portsnap. Just what was the problem you had
> with
> portsnap?


I believe I had a "stale dependency with imagemagic" that I chose to "force"
to continue.  That was on a brand new install, and it happend twice (I tried
reinstalling).  Maybe I can try to recreate it in a VMWare virtual machine
so I can reproduce it.

I think I also got the ruby error, if that was the one that happend about 1
year ago.  I remember doing an upgrade which broke the system, so I
reinstalled it a few days later.

 Also, is it not possible to make a system that does not have conflicts?
Maybe OS's are simply too complex.  It would seem like there should be a way
to kick off a global update and rebuild that started with the core pieces
first, and then moved up the dependency tree level-by-level.  Something that
was 100% guaranteed to work, and took 1 command.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Any good OpenGL games?

[Xn Nooby]

On 2/5/06, Evgeny Solovyov <[EMAIL PROTECTED]> wrote:
>
> I play quake3, quake4, doomIII
>
> linux-quake3-demo
> linux-quake4
> linux-doom3-demo



 I tried quakeforge, but when I get a missing WAD error when I try
"nq-glx".  Are these games you mentioned complete? It will be great if so!
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: question

[Kövesdán Gábor]

Eduard Suica wrote:


   Hello, my name is Eduard Suica, and I'm representing RadGs Software. We developed a new Programming Language called Concept 
(visit our website www.radgs.com <= made in Concept) . Concept is a language (Object Oriented) wich wants to develop server-side 
applications, but NOT only Web applications (like php). It makes it possible to develop fully "desktop-style" 
applications, that run on server-side, with an interface "piped" to the Client (on a network, Internet, etc). Our server 
is FreeBSD 6 and we had very good results. It was compiled on FreeBSD, and works just fine. We are interested on including Concept 
platform on FreeBSD distribution. Concept it's free, under a freeware licence. We are still to decide if it will be "Open 
source" or "partially open source" ... (with some "obfuscated" code to protect the kernel). How ever, we'll 
assume responsabilty over it.

An applications is for Concept what a database is for a database server. Something like 
an "Application server".

My regards,
Eduard Suica

 


Hello,

Why don't you make a FreeBSD port and send it via send-pr?
Here's a useful documentation:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/porters-handbook/index.html

Regards,

Gabor Kovesdan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

question

[Eduard Suica]

Hello, my name is Eduard Suica, and I'm representing RadGs Software. We 
developed a new Programming Language called Concept (visit our website 
www.radgs.com <= made in Concept) . Concept is a language (Object Oriented) 
wich wants to develop server-side applications, but NOT only Web applications 
(like php). It makes it possible to develop fully "desktop-style" applications, 
that run on server-side, with an interface "piped" to the Client (on a network, 
Internet, etc). Our server is FreeBSD 6 and we had very good results. It was 
compiled on FreeBSD, and works just fine. We are interested on including 
Concept platform on FreeBSD distribution. Concept it's free, under a freeware 
licence. We are still to decide if it will be "Open source" or "partially open 
source" ... (with some "obfuscated" code to protect the kernel). How ever, 
we'll assume responsabilty over it.

An applications is for Concept what a database is for a database server. 
Something like an "Application server".

My regards,
Eduard Suica



RadGs Software CEO
T: ++40722-542969
E: [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Filemanager with SMB support?

[Norberto Meijome]

Hi all,
I need a filemanager which supports SMB browsing.

I use fluxbox and VERY much rather not have to keep all those KDE 
dependencies for Konqueror.


I've tried xfce4's xffm, but it relies on nmblookup for discovery, which 
is really unreliable , and doesn't seem to allow me to simply tell it 
which server (via FQDN) I'd like to connect to.


Any suggestions?

thanks!!
Beto
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: ftpd: Passive mode isn't working

[a non y mouse]

Kristian Vaaf wrote:

> ftp is working.
> Active mode works, passive mode doesn't.

i just scanned over your ruleset...so forgive me if i am way off base

with that said, are you using the freebsd ftpd? did you change the
portrange.hifirst and .hilast sysctl values? because it would appear to
me that unless you have done so, you are not allowing all ports which
will be used by ftpd in passive mode:

tinker% sysctl -a | grep portrange.hi
net.inet.ip.portrange.hifirst: 49152
net.inet.ip.portrange.hilast: 65535


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: FreeBSD and quantum computing

[Björn König]

Kristian Vaaf schrieb:


Hello.

I do not know much about quantum computing.

http://en.wikipedia.org/wiki/Quantum_computing

But does anybody know what plans FreeBSD has for it?
Does it intend to put any research into it?

Thanks,
Vaaf


Don't we need quantum computers at first? Are you looking for 
pre-(r)evolutionary development? I suppose you won't have success with 
general purpose operating systems like FreeBSD.


Björn
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

SLAPD starting very slow

[Jan HREHO]

Hi everybody.
My configuration.
FreeBSD 6.0 + I update ports. All programs I installed over ports

I installed LDAP server and client (2.2.30), nss_ldap-1.244, pam_ldap-1.8.0.

* /usr/local/etc/openldap/slapd.conf
*** other lines in this files is defaults ***
include/usr/local/etc/openldap/schema/core.schema
include/usr/local/etc/openldap/schema/corba.schema
include/usr/local/etc/openldap/schema/cosine.schema
include/usr/local/etc/openldap/schema/dyngroup.schema
include/usr/local/etc/openldap/schema/inetorgperson.schema
include/usr/local/etc/openldap/schema/java.schema
include/usr/local/etc/openldap/schema/misc.schema
include/usr/local/etc/openldap/schema/nis.schema
include/usr/local/etc/openldap/schema/samba.schema
databaseldbm
suffix"dc=skuska,dc=sk"
rootdn"cn=Manager,dc=skuska,dc=sk"
rootpw{SSHA}LGpsWFBT/qSdvf7D4hhLny7siy2hDXl4
***

While  /etc/nsswitch.conf files like next:
** /etc/nsswitch.conf **
group: compat
group_compat: nis
hosts: files dns
networks: files
passwd: compat
passwd_compat: nis
shells: files

slapd deamon start is fast.

While  /etc/nsswitch.conf files like next:
** /etc/nsswitch.conf **
group: files [NOTFOUND=continue] ldap
group_compat:
hosts: files dns
networks: files
passwd: files [NOTFOUND=continue] ldap
passwd_compat:
shells: files


and /usr/local/etc/nss_ldap files like next:
* /usr/local/etc/nss_ldap.conf
*** other lines in this files is defaults ***
host localhost
base dc=skuska,dc=sk
*

slapd deamon start very slow (2-3 minutes) and print to screen next 
error log:

slapd[414]: nss_ldap: could not search LDAP server - Server is unavailable.

My question is.
Why slapd deamon try to connect to LDAP server, when it start?
I read several howto, but without success. What I do wrong?

Thank You.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

FreeBSD and quantum computing

[Kristian Vaaf]

Hello.

I do not know much about quantum computing.

http://en.wikipedia.org/wiki/Quantum_computing

But does anybody know what plans FreeBSD has for it?
Does it intend to put any research into it?

Thanks,
Vaaf

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: ftpd: Passive mode isn't working

[Kristian Vaaf]

At 22:20 04.02.2006, fbsd_user wrote:

Saying ftp is not working, is not enough of a description.
Give details of how you are testing ftp to say its not working.

In /etc/inetd.conf the tcp6 is for a experimental protocol, if
you are not using it on purpose then those statements should be
commented out so they are not active.

You should also comment out the ftp-proxy until you have ftp
working.

Turn off your firewall during ftp testing.


ftp is working.
Active mode works, passive mode doesn't.

This has nothing to do with IPv6.
If it had I would have said so.

Without ftp-proxy, ftp won't work at all. 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Invisible port 80

[Robin Becker]

Robin Becker wrote:

Robert Huff wrote:

Robin Becker writes:

 >> I am in the process of setting up a pair of freebsd 6.0 servers 
with  >> different hosting services. On one of the servers I cannot 
seem to  >> access the apache server which I have started. I can 
access port 80 on  >> the machine itself using the machine IP 
address, but from my office  >> port 80 seems invisible. The other 
machine works exactly as expected.


Firewall??

I'm really stupid; they did configure the firewall on. So I guess I'll 
have to manage the ruleset myself. I suppose it makes sense for the 
default image to be secure by default  :)

--
Robin Becker

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Invisible port 80

[Robin Becker]

Robert Huff wrote:

Robin Becker writes:

 >> I am in the process of setting up a pair of freebsd 6.0 servers with 
 >> different hosting services. On one of the servers I cannot seem to 
 >> access the apache server which I have started. I can access port 80 on 
 >> the machine itself using the machine IP address, but from my office 
 >> port 80 seems invisible. The other machine works exactly as expected.


Firewall??


.
yes, but on the server or the facility? I'm sure I haven't configured 
any rules, but where would I find them if they were configured in the 
image that was used to set up the machine.

--
Robin Becker

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Any good OpenGL games?

[Evgeny Solovyov]

I play quake3, quake4, doomIII

linux-quake3-demo
linux-quake4
linux-doom3-demo


Xn Nooby wrote:

I have a P4 2Ghz with an nVidia card, so I installed the nVidia driver.  I'm
currently installing 'linux-enemyterritory' which I think will work.  I
didn't know if there were any other good ones.  Is flightgear or gl117 any
good?

I also have wine on my system, is it difficult to get windows opengl games
to run?  I've heard of cedega on linux, but would rather roll my own free
solution if possible (or copy someone elses method).

Playing "Call of Duty" would be ideal, or maybe Return to Castle
Wolfenstein.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Alternative to Running Portupgrade -rf In Upgrade of expat2

[a non y mouse]

Bob Perry wrote:
> I have 48 dependencies on one box and 151 on another and only use a
> dialup service.  Disconnections are common and can be a real problem in
> this situation.

sounds like it's time to start downloading them all and go to bed ;)

i feel you...when I got my first UNIX workstation i built X11 from
source. it took almost 3 full days :( am so glad i don't have to live
with dialup anymore.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

The FreeBSD Diary: 2006-01-15 - 2006-02-04

[Dan Langille]

The FreeBSD Diary contains a large number of practical 
examples and how-to guides.  This message is posted weekly
to freebsd-questions@freebsd.org with the aim of letting people
know what's available on the website.  Before you post a question
here it might be a good idea to first search the mailing list 
archives  
and/or The FreeBSD Diary . 

These are the articles posted during this period:

16-Jan : The Technical BSD Conference
 The CFP ends soon - get your paper in now! 
 http://freebsddiary.org/bsdcan-2006-cfp.php?2


-- 
Dan Langille
BSDCan - http://www.BSDCan.org/ - BSD Conference

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: 6.0, allow remote logging? (correction)

[Bill Schoolcraft]

At Sat, 4 Feb 2006 it looks like Bill Schoolcraft composed:

> At Sat, 4 Feb 2006 it looks like Matthew Seaman composed:
> 
> > Bill Schoolcraft wrote:
> > > But when I go to check an see if the external port 514/udp is open I
> > > get nothing showing:
> > > 
> > > #
> > > 
> > > [EMAIL PROTECTED] ~]-> nmap localhost
> > > 
> > > (The 1660 ports scanned but not shown below are in state: closed)
> > > PORT   STATE SERVICE
> > > 22/tcp open  ssh
> > > 25/tcp open  smtp
> > > 80/tcp open  http
> > > 
> > > #
> > 
> > Umm... by default nmap only scans /TCP/ ports.  syslog is a /UDP/ service.
> > 
> > Try sockstat(1) to see what network ports processes are listening on, and
> > use nmap like so to scan for UDP listeners:
> > 
> > # nmap -sU -p U:1-8080 hostname
> > 
> > Note that UDP scans intrinsically tend to take a lot longer than TCP scans 
> > --
> > the nmap(1) man page explains why -- so don't try scanning too many ports at
> > once, or you'll be waiting years for a result.
> > 
> 
> Thanks Matthew for the above example.  I tried it and nothing came
> up as open.  And my 'ps -auxw' output shows syslogd running with the
> "-s " too.  I wonder how to trigger that port to receive
> packets.  Apparently syslogd believes all is well. :(
> 

Sorry, the correction is that the ps output shows "-a "

-- 
Bill Schoolcraft   |  Life's journey is not to arrive at the
PO Box 210076  |  grave safely in a well preserved body,
San Francisco,CA 94121 |  but rather to skid in sideways, totally
http://wiliweld.com|  spent, yelling "holy shit, what a ride!"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"