Re: FreeBSD based router ...

2008-05-28 Thread Wojciech Puchar



small but expensive. used 486-pentium hardware is for free.


486 hardware with three NICs, a CF drive, and run off of a few watts of DC 
power tend not to free.


that's the adventage. but edimax 6104K router with 5 ethernets running 
netbsd is both cheaper smaller and faster with it's 175Mhz 2 instr/cycle 
MIPS CPU. 16MB RAM+2MB flash isn't much but enough to fit.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: FreeBSD based router ...

2008-05-28 Thread Ted Mittelstaedt


> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Jon Radel
> Sent: Wednesday, May 28, 2008 5:24 PM
> To: freebsd-questions@freebsd.org
> Subject: Re: FreeBSD based router ...
> 
> 
> Tom Van Looy wrote:
> > 
> > Wojciech Puchar wrote:
> >>> been happy with using soekris net48XX boxes using m0n0wall
> >> small but expensive. used 486-pentium hardware is for free.
> > 
> > No it's not, they consume electricity. Soekris boxes are designed for 
> > low-power. I had a 4501 and now have a 5501.
> 
> And, other than in hobbyist's private networks and things built with 
> volunteer labor, there are generally labor costs.  Rummaging in the junk 
> pile can get pretty expensive if you have to pay somebody to do it
> 

That really depends on both the organization and the worker and
what their job is and a lot of other things.

For example, I manage people at an ISP.  Their jobs are to run the
network and answer customer support calls.  If they are doing their
jobs then the ISP runs well and we don't get many support calls.  Thus
some of their time they will be sitting idle.  I don't adjust their
job descriptions to permanently increase the amount of work they
do because I don't want them tied up doing more work when a customer
does call for support, and also because it is punishing them for
doing a good job in the first place.  Yet I don't want them sitting
around playing computer games while they are waiting for a
support call, either. In this case, if they are working on building
some junk computer into a router then it is not critical work that
they cannot set down immediately at any time if a customer calls.  Yet
it also keeps them busy and out of trouble, and contributes something
to the business.  And it teaches them something so their brains don't
rot.  My labor costs are going to be the same whether they are
resurrecting some old PC or whether they are sitting twiddling their
thumbs, so now please explain to me how it is that I am incurring
expense paying someone to rummage in a junk pile?

And there are also the cases of the government organizations who
have money budgeted to upgrades but not capital expenses, and
every expense over $500 must be justified to the nth degree.  In
those organizations you can spend $2K USD without seeking second
level approval if you write a series of PO's for under $500 each,
getting a hard disk on one, a power supply on another, a motherboard
on a third, etc.  But if you try to simply buy a PC all put together
for less money you will get it slapped down.  Dilbert even had a
series of cartoons about this, one of the few series I've read that
I didn't think was funny, as it simply described reality for
a lot of people.

So, yeah, there are a lot of organizations that do not function
nice and neat like it says they should in the MBA courses.

Ted
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


usb kbd and ums problem

2008-05-28 Thread Lei Chen
I have a problem with my newly installed Freebsd6.3. I use USB keyboard and 
mouse, when start it all goes well, but after system boot process initalize 
usb2 controllers, both my keyboard and mouse disappear. I have to physically 
unplug them and plug them in again to use them.

I have ums_load="YES" and ukbd_load="YES" in /boot/loader.conf, but not seems 
to solve the issue.

PS. when I plug both keyboard and mouse into an external usb hub, it works 
seamlessly.

Any ideas?

-- Lei
http://icnpro.com/datacentre/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: amd64 ?!

2008-05-28 Thread Kris Kennaway

Outback Dingo wrote:

I think maybe what he was expecting was a FreeBSD IA64 install on the box,
but they installed AMD64 instead


*Correctly* installed.

Kris

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: amd64 ?!

2008-05-28 Thread Outback Dingo
I think maybe what he was expecting was a FreeBSD IA64 install on the box,
but they installed AMD64 instead

On Thu, May 29, 2008 at 4:48 AM, Wojciech Puchar <
[EMAIL PROTECTED]> wrote:

>
>> so i'm a bit confused about the the 64 bit and why the machine is
>> identifying itself as amd64 and not i686?
>>
>
> because this intel CPU is 64-bit AMD compatible (x86-64 standard).
> the rules changed and now intel make AMD-compatible CPUs
>
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "
> [EMAIL PROTECTED]"
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD based router ...

2008-05-28 Thread Jon Radel

Tom Van Looy wrote:


Wojciech Puchar wrote:

been happy with using soekris net48XX boxes using m0n0wall

small but expensive. used 486-pentium hardware is for free.


No it's not, they consume electricity. Soekris boxes are designed for 
low-power. I had a 4501 and now have a 5501.


And, other than in hobbyist's private networks and things built with 
volunteer labor, there are generally labor costs.  Rummaging in the junk 
pile can get pretty expensive if you have to pay somebody to do it


--Jon Radel


smime.p7s
Description: S/MIME Cryptographic Signature


Re: Unix command-line tools to edit SharePoint site?

2008-05-28 Thread Kurt Buff
On Wed, May 28, 2008 at 4:01 PM, Chris Whitehouse <[EMAIL PROTECTED]> wrote:
> Kurt Buff wrote:
>>
>> On Sat, May 24, 2008 at 3:35 PM, Chris Whitehouse <[EMAIL PROTECTED]>
>> wrote:
>>>
>>> Kelly Jones wrote:

 I begrudgingly use a Windows SharePoint server at a customer's request.

 I'd like to automate (command-line) updating and creating documents,
 lists, etc.

 Is there a Unix tool that does this?

 I know SharePoint has an "API", which basically spoofs the GET/POST
 calls that your browser would make(?).

 Has anyone written a Unix command-line tool (or Perl module, etc) that
 abstracts this?
>>>
>>> Is this what you want?
>>>
>>> http://unxutils.sourceforge.net/
>>>
>>> Chris
>>
>> If you want to use some/many/most of the core utils on Windows, you'll
>> be much better off with http://gnuwin32.sourceforge.net
>>
>> unxutils seems pretty moribund, and I have not been successful
>> downloading the updates from that site for a while.
>>
>> Kurt
>
> I'll have a look at these, thanks for the suggestion. I have to say though
> the unxutils commands that I have used work perfectly well despite their
> age, don't require cygwin and don't do silly registry things on windows. I
> need this as I'm using them on a work computer which I am not allowed to
> install software on :P
>
> Chris

The unxutils work well, but the gnuwin32 stuff is a bit more current,
and more complete. They don't require any registry fiddling nor extra
DLLs, either, just like the unxutils stuff. I stick them in a
directory, and set my path up with that. Works well for me, anyway.


HTH,

Kurt
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Unix command-line tools to edit SharePoint site?

2008-05-28 Thread Chris Whitehouse

Kurt Buff wrote:

On Sat, May 24, 2008 at 3:35 PM, Chris Whitehouse <[EMAIL PROTECTED]> wrote:

Kelly Jones wrote:

I begrudgingly use a Windows SharePoint server at a customer's request.

I'd like to automate (command-line) updating and creating documents,
lists, etc.

Is there a Unix tool that does this?

I know SharePoint has an "API", which basically spoofs the GET/POST
calls that your browser would make(?).

Has anyone written a Unix command-line tool (or Perl module, etc) that
abstracts this?

Is this what you want?

http://unxutils.sourceforge.net/

Chris


If you want to use some/many/most of the core utils on Windows, you'll
be much better off with http://gnuwin32.sourceforge.net

unxutils seems pretty moribund, and I have not been successful
downloading the updates from that site for a while.

Kurt


I'll have a look at these, thanks for the suggestion. I have to say 
though the unxutils commands that I have used work perfectly well 
despite their age, don't require cygwin and don't do silly registry 
things on windows. I need this as I'm using them on a work computer 
which I am not allowed to install software on :P


Chris







No virus found in this incoming message.
Checked by AVG. 
Version: 8.0.100 / Virus Database: 269.24.1/1469 - Release Date: 5/27/2008 1:25 PM


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Kernel Panic: isp - page fault while in kernel mode

2008-05-28 Thread Kris Kennaway

Greg Himes wrote:


Hello All,

Last week, one half of my dual port Qlogic fibre channel interface
started causing a page fault panic while probing the second port at boot 
time.

I was able to get the system back up by disabling the BIOS on the
second port.  The system still sees the 2nd port, but politely
displays a few errors, then continues on.

This all started after I powered the system down for maintenance.
System is running FreeBSD 6.3-RELEASE i386

What is the proper way to help debug this problem?


See the developers handbook.

Kris

P.S. And don't do this, you're crippling your network:


WARNING: MPSAFE network stack disabled, expect reduced performance.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


help with options BRIDGE in freebsd 7.0

2008-05-28 Thread cp
I'd really appreciate if someone can shed some light on this for me. I'm
attempting to build a layer2 sniffer using dummynet and ipfw but I'm
having some problems building the new kernel with "options BRIDGE". It
errors out with the message below. Any suggestions? 

-cp

lois# /usr/sbin/config LOIS 
LOIS: unknown option "BRIDGE"
freebsd version  = 7.0

lois# more LOIS | grep IP
options IPSEC
options IPSEC_FILTERTUNNEL
options IPSEC_DEBUG
options IPFIREWALL
options IPFIREWALL_VERBOSE
options IPFIREWALL_VERBOSE_LIMIT=100
options IPFIREWALL_DEFAULT_TO_ACCEPT
options IPFIREWALL_FORWARD
options IPDIVERT
options IPFILTER
options IPFILTER_LOG
lois# more LOIS | grep BR
options NETGRAPH_BRIDGE
options BRIDGE

lois# more LOIS | grep DUM
options DUMMYNET
lois#

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Kernel Panic: isp - page fault while in kernel mode

2008-05-28 Thread Greg Himes


Hello All,

Last week, one half of my dual port Qlogic fibre channel interface
started causing a page fault panic while probing the second port at  
boot time.

I was able to get the system back up by disabling the BIOS on the
second port.  The system still sees the 2nd port, but politely
displays a few errors, then continues on.

This all started after I powered the system down for maintenance.
System is running FreeBSD 6.3-RELEASE i386

What is the proper way to help debug this problem?

Listed below is the boot info:

/boot/kernel/acpi.ko text=0x44e84 data=0x24e0+0x1b8c syms=[0x4+0x7dc0 
+0x4+0xab62]

786428K of memory above 4GB ignored
Copyright (c) 1992-2008 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights  
reserved.

FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 6.3-STABLE #11: Fri Apr 11 13:25:41 PDT 2008
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/LAACO
WARNING: debug.mpsafenet forced to 0 as ipsec requires Giant
WARNING: MPSAFE network stack disabled, expect reduced performance.
module_register: module pci/bce already exists!
Module pci/bce failed to register: 17
module_register: module bce/miibus already exists!
Module bce/miibus failed to register: 17
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Xeon(R) CPU5160  @ 3.00GHz (3000.13-MHz 686- 
class CPU)

  Origin = "GenuineIntel"  Id = 0x6f6  Stepping = 6
   
Features=0xbfebfbff,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
   
Features2=0x4e3bd,DCA>

  AMD Features=0x2000
  AMD Features2=0x1
  Cores per package: 2
real memory  = 3487916032 (3326 MB)
avail memory = 3408932864 (3251 MB)
ACPI APIC Table: 
FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
 cpu0 (BSP): APIC ID:  0
 cpu1 (AP): APIC ID:  1
 cpu2 (AP): APIC ID:  6
 cpu3 (AP): APIC ID:  7
ioapic0  irqs 0-23 on motherboard
kbd1 at kbdmux0
ath_hal: 0.9.20.3 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413,  
RF5413)

hptrr: HPT RocketRAID controller driver v1.1 (Apr 11 2008 13:25:27)
acpi0:  on motherboard
acpi0: Power Button (fixed)
Timecounter "ACPI-safe" frequency 3579545 Hz quality 850
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x908-0x90b on acpi0
acpi_hpet0:  iomem 0xfed0-0xfed003ff  
on acpi0

Timecounter "HPET" frequency 14318180 Hz quality 900
cpu0:  on acpi0
cpu1:  on acpi0
cpu2:  on acpi0
cpu3:  on acpi0
pcib0:  on acpi0
pci0:  on pcib0
pcib1:  at device 2.0 on pci0
pci4:  on pcib1
pcib2:  at device 0.0 on pci4
pci5:  on pcib2
pcib3:  at device 0.0 on pci5
pci6:  on pcib3
pcib4:  at device 0.0 on pci6
pci7:  on pcib4
bce0:  mem  
0xfa00-0xfbff irq 16 at device 0.0 on pci7

miibus0:  on bce0
brgphy0:  on miibus0
brgphy0:  1000baseSX-FDX, auto
bce0: Ethernet address: 00:17:a4:77:00:0a
bce0: [GIANT-LOCKED]
bce0: ASIC (0x57081021); Rev (B2); Bus (PCI-X, 64-bit, 133MHz); F/W  
(0x01090605); Flags( MSI )

pcib5:  at device 1.0 on pci5
pci8:  on pcib5
pcib6:  at device 0.3 on pci4
pci9:  on pcib6
pcib7:  at device 3.0 on pci0
pci10:  on pcib7
pcib8:  at device 0.0 on pci10
pci11:  on pcib8
pcib9:  at device 4.0 on pci11
pci12:  on pcib9
ciss0:  port 0x4000-0x40ff mem  
0xfdb8-0xfdbf,0xfdb7-0xfdb77fff irq 18 at device 8.0 on  
pci11

ciss0: [GIANT-LOCKED]
pcib10:  at device 4.0 on pci0
pci13:  on pcib10
ciss1:  port 0x5000-0x50ff mem  
0xfdd0-0xfddf,0xfdcf-0xfdcf0fff irq 19 at device 0.0 on  
pci13

ciss1: [GIANT-LOCKED]
pcib11:  at device 5.0 on pci0
pci16:  on pcib11
pcib12:  at device 0.0 on pci16
pci17:  on pcib12
bge0:  mem  
0xfdef-0xfdef,0xfdee-0xfdee irq 18 at device 4.0 on  
pci17

bge0: Ethernet address: 00:17:a4:77:00:24
bge0: [GIANT-LOCKED]
bge1:  mem  
0xfded-0xfded,0xfdec-0xfdec irq 19 at device 4.1 on  
pci17

bge1: Ethernet address: 00:17:a4:77:00:26
bge1: [GIANT-LOCKED]
pcib13:  at device 6.0 on pci0
pci19:  on pcib13
isp0:  port 0x6000-0x60ff mem  
0xfdff-0xfdff3fff irq 19 at device 0.0 on pci19

isp0: [GIANT-LOCKED]
isp0: Board Type 2422, Chip Revision 0x2, resident F/W Revision 4.0.70
isp1:  port 0x6400-0x64ff mem  
0xfdfe-0xfdfe3fff irq 16 at device 0.1 on pci19

isp1: [GIANT-LOCKED]


Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0x2c
fault code  = supervisor read, page not present
instruction pointer = 0x20:0xc045f1ea
stack pointer   = 0x28:0xc1020660
frame pointer   = 0x28:0xc1020660
code segment= base 0x0, limit 0xf, type 0x1b
= DPL 0, pres 1, def32 1, gran 1
processor eflags= interrupt enabled, resume, IOPL = 0
current process = 0 (swapper)
trap number = 12
panic: page fault
cpuid = 0
Uptime: 1s
Automatic reboot in 15 seconds - press a key on the console to abort

___
freebsd-questions@freebsd.org mai

Re: FreeBSD based router ...

2008-05-28 Thread Jeffrey Goldberg


On May 28, 2008, at 3:08 PM, Wojciech Puchar wrote:

For small and medium sized enterprises that really just need  
firewall, NAT, static routing and are fine with 100Mb ether on the  
router, I've been happy with using soekris net48XX boxes using  
m0n0wall




small but expensive. used 486-pentium hardware is for free.


486 hardware with three NICs, a CF drive, and run off of a few watts  
of DC power tend not to free.


But of course a free 486 box may very well fit your needs.

Cheers,

-j

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: External USB disk won't mount

2008-05-28 Thread Chuck Robey
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Mark Ovens wrote:
> Chuck Robey wrote:
>> I saw a mail yesterday about something nearly like this, from nej,
>> except with
>> him, the umass device wasn't reporting anything at all, no device when he
>> plugged it in.  I sent him a little piece of usb driver code that
>> resets his usb
>> buss, just to experiment and see if that got his devices correctly
>> detected, but
>> he didn't yet reply, I don't know if it worked for him.  I don't have
>> something
>> like that to experiment with.
>>
>> With yours, you obviously have a da2 ... that only means you have a
>> direct-access disk devide #2 being detected.  The next step is to
>> figure oout
>> what kind of formatting you have.  Hopefully, it's been fdisk'ed to
>> where it has
>> partitions, so do this (as root): "/sbin/fdisk /dev/da2", and in
>> fdisk, give the
>> 'p' command, this will print out the formatting for any partitions. 
>> Likely it's
>> either one of the various Microsoft things, or a Linux one, or even a
>> FreeBSD
>> one.  Depending on what you see, you either directly give a mount
>> command next,
>> to the right partition, or maybe you use bsdlable to find out what the
>> disk-labelling is (if it's a FreeBSD disk).
>>
> 
> Hi Chuck,
> 
> The next line in my post after where you snipped was:
> 
> (The disk is from another FreeBSD system so is UFS2 and da2s1f is /usr
> on the other system)

Yeah, I don't even have a good excuse, that was extremely ill done of me.  I
guess I was trying to do something quickly while I was really thinking of other
USB things, and walked into that.  It's NOT the kind of usb that I've been
working on either, I've been heavily into HID stuff, and that's totally
different than a disk thing.  If it's a device driver level problem, and  it
sure seems that way to me, I can't honestly offer you much, even if I had it
here, I would approach it slowly.  I think I will drop out of this one, Mark,
and contemplate my navel a bit.

I'm a bit embarrassed about that, could you tell?

> 
> It contains a running FBSD 7.0 system - it's out of a spare box I was
> using for testing and it mounts/reads/writes fine using the other USB
> enclosure I borrowed. There's just something screwy about the enclosure
> I've bought (typical eh?)
> 
> Regards,
> 
> Mark
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"

-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.4 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIPddYz62J6PPcoOkRArErAJ9an6NsIja5B9gTlZQvOIL5xslmWwCgl7Rb
Mq9WW70l28IpnkYnsNI+EAU=
=MY/q
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Does FreeBSD supports TCP Offload Engine (TOE) from Broadcom in Dell PE2950?

2008-05-28 Thread Dan Nelson
In the last episode (May 28), Rob said:
> VeeJay wrote:
> > Does FreeBSD supports TCP Offload Engine (TOE) from Broadcom in
> > Dell PE2950?
> 
> from man bge:
> 
>  X v1.0 compliant.  It supports IP, TCP and UDP checksum offload
>  for both receive and transmit, multiple RX and TX DMA rings for
>  QoS applications, rules-based receive filtering, and VLAN tag
>  stripping/insertion as well

( i.e. the bge driver does not support TCP data offload )

The embedded NIC in the 2950 is a BCM5708, however, which is handled by
the bce driver, and the if_bce.c source has references to TSO, so it
might be supported.  Best way to find out is to run "ifconfig -m" and
see whether TSO4 is listed in the capabilities line for your nic.  Then
again, a PE2950 should be able to saturate a gigabit NIC quite easily
even without any offloading.

-- 
Dan Nelson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: amd64 ?!

2008-05-28 Thread Wojciech Puchar


so i'm a bit confused about the the 64 bit and why the machine is identifying 
itself as amd64 and not i686?


because this intel CPU is 64-bit AMD compatible (x86-64 standard).
the rules changed and now intel make AMD-compatible CPUs
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: amd64 ?!

2008-05-28 Thread Erik Trulsson
On Wed, May 28, 2008 at 04:56:26PM -0400, kalin m wrote:
> hi all...
> 
> i have dilemma.
> 
> i asked a hosting faclity to set up freebsd 7 on  new server.  and i 
> mentioned that it should be 64 bit.
> now they when i get into the machine i get:
> srv391# uname -a
> FreeBSD srv391.carpathiahost.com 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sun 
> Feb 24 10:35:36 UTC 2008 
> [EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC  amd64
> 
> i did ask for an intel machine and the dmseg actually states:
> 
> CPU: Intel(R) Xeon(R) CPU   E5405  @ 2.00GHz (1997.01-MHz 
> K8-class CPU)
>   Origin = "GenuineIntel"  Id = 0x10676  Stepping = 6
>   
> Features=0xbfebfbff
>   
> Features2=0xce33d>
>   AMD Features=0x20100800
>   AMD Features2=0x1
> 
> 
> so i'm a bit confused about the the 64 bit and why the machine is 
> identifying itself as amd64 and not i686?

Looks fine to me.  It is obviously the amd64 version of FreeBSD (which is
64-bit), which works just fine on that Intel CPU since all Intel's recent
CPUs implement the AMD64 (aka x86-64) architecture.  Intel calls it EM64T
(unless they have changed it again) instead of AMD64, but it is the same thing.






-- 

Erik Trulsson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: amd64 ?!

2008-05-28 Thread Roland Smith
On Wed, May 28, 2008 at 04:56:26PM -0400, kalin m wrote:
> hi all...
> 
> i have dilemma.
> 
> i asked a hosting faclity to set up freebsd 7 on  new server.  and i 
> mentioned that it should be 64 bit.
> now they when i get into the machine i get:
> srv391# uname -a
> FreeBSD srv391.carpathiahost.com 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sun 
> Feb 24 10:35:36 UTC 2008 
> [EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC  amd64
> 
> i did ask for an intel machine and the dmseg actually states:
> 
> CPU: Intel(R) Xeon(R) CPU   E5405  @ 2.00GHz (1997.01-MHz K8-class 
> CPU)
>  Origin = "GenuineIntel"  Id = 0x10676  Stepping = 6

>  AMD Features=0x20100800
>  AMD Features2=0x1
> 
> so i'm a bit confused about the the 64 bit and why the machine is 
> identifying itself as amd64 and not i686?

Well, "amd64" is the name FreeBSD uses for the 64-bit architecture built
by AMD as en extension of the 32-bit x86 architecture. Intel later made
it's chips compatible because it's own 64-bit architecture IA64 was more
or less a dud. 

This architecture is also known as x86_64.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpVYYF9Bt7j7.pgp
Description: PGP signature


Re: amd64 ?!

2008-05-28 Thread Kris Kennaway

kalin m wrote:

hi all...

i have dilemma.

i asked a hosting faclity to set up freebsd 7 on  new server.  and i 
mentioned that it should be 64 bit.

now they when i get into the machine i get:
srv391# uname -a
FreeBSD srv391.carpathiahost.com 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sun 
Feb 24 10:35:36 UTC 2008 
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC  amd64


i did ask for an intel machine and the dmseg actually states:

CPU: Intel(R) Xeon(R) CPU   E5405  @ 2.00GHz (1997.01-MHz 
K8-class CPU)

 Origin = "GenuineIntel"  Id = 0x10676  Stepping = 6
 
Features=0xbfebfbff 

 
Features2=0xce33d> 


 AMD Features=0x20100800
 AMD Features2=0x1


so i'm a bit confused about the the 64 bit and why the machine is 
identifying itself as amd64 and not i686?


amd64 is the architecture name (since it was invented by AMD; just like 
i686 is named after Intel even if you are running CPU implementations by 
amd, cyrix, etc).


Kris

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


amd64 ?!

2008-05-28 Thread kalin m

hi all...

i have dilemma.

i asked a hosting faclity to set up freebsd 7 on  new server.  and i 
mentioned that it should be 64 bit.

now they when i get into the machine i get:
srv391# uname -a
FreeBSD srv391.carpathiahost.com 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sun 
Feb 24 10:35:36 UTC 2008 
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC  amd64


i did ask for an intel machine and the dmseg actually states:

CPU: Intel(R) Xeon(R) CPU   E5405  @ 2.00GHz (1997.01-MHz 
K8-class CPU)

 Origin = "GenuineIntel"  Id = 0x10676  Stepping = 6
 
Features=0xbfebfbff
 
Features2=0xce33d>

 AMD Features=0x20100800
 AMD Features2=0x1


so i'm a bit confused about the the 64 bit and why the machine is 
identifying itself as amd64 and not i686?






___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD based router ...

2008-05-28 Thread Tom Van Looy

Wojciech Puchar wrote:

been happy with using soekris net48XX boxes using m0n0wall

small but expensive. used 486-pentium hardware is for free.


No it's not, they consume electricity. Soekris boxes are designed for 
low-power. I had a 4501 and now have a 5501.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD based router ...

2008-05-28 Thread Tom Van Looy

Jeffrey Goldberg wrote:

On May 28, 2008, at 11:06 AM, Rob wrote:


These guys have a 2 or 4 port nic for < $100:
http://www.soekris.com/lan16x1.htm


For small and medium sized enterprises that really just need firewall, 
NAT, static routing and are fine with 100Mb ether on the router, I've 
been happy with using soekris net48XX boxes using m0n0wall


NETASQ firewalls also uses FreeBSD on their devices.
But, the the question was "routers". I don't know if NETASQ has routers.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: External USB disk won't mount

2008-05-28 Thread Mark Ovens

Roland Smith wrote:

Yes;

$ locate atausb
/usr/src/sys/modules/ata/atausb
/usr/src/sys/modules/ata/atausb/Makefile

(This is on 7-STABLE)



Ah, so it's not built by default!

Presumably, it would not work with other usb mass storage devices like 
memory sticks or phones?


It should work with all usb mass storage devices, I think. It just seems
to be tied into the ata subsystem instead of into the scsi subsystem via
atapicam.



Great, I'll try it out and let you know how it goes.

Thanks.

Mark
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: External USB disk won't mount

2008-05-28 Thread Roland Smith
On Wed, May 28, 2008 at 08:37:55PM +0100, Mark Ovens wrote:
> Roland Smith wrote:
>> 
>> You could try using the atausb driver instead of umass. Unfortunately it
>> doesn't have a manpage yet, but you have to unload umass if you want to
>> use atausb.
>> 
> 
> Thanks Roland, but I can't find atausb in either 6.3 or 7.0 - is it a kld 
> module?

Yes;

$ locate atausb
/usr/src/sys/modules/ata/atausb
/usr/src/sys/modules/ata/atausb/Makefile

(This is on 7-STABLE)

> Presumably, it would not work with other usb mass storage devices like 
> memory sticks or phones?

It should work with all usb mass storage devices, I think. It just seems
to be tied into the ata subsystem instead of into the scsi subsystem via
atapicam.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpeTlVDInCnO.pgp
Description: PGP signature


Re: FreeBSD based router ...

2008-05-28 Thread Wojciech Puchar


For small and medium sized enterprises that really just need firewall, NAT, 
static routing and are fine with 100Mb ether on the router, I've been happy 
with using soekris net48XX boxes using m0n0wall


http://m0n0.ch/wall/

or pfsense

http://www.pfsense.com/

both FreeBSD based.

small but expensive. used 486-pentium hardware is for free.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Does FreeBSD supports TCP Offload Engine (TOE) from Broadcom in Dell PE2950?

2008-05-28 Thread Rob

VeeJay wrote:

Does FreeBSD supports TCP Offload Engine (TOE) from Broadcom in Dell PE2950?


from man bge:

X v1.0 compliant.  It supports IP, TCP and UDP checksum offload for both
receive and transmit, multiple RX and TX DMA rings for QoS applications,
rules-based receive filtering, and VLAN tag stripping/insertion as well

 -R
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


perl 5.10 port

2008-05-28 Thread Nickolay D. Hodyunya
Hello.
I'm interesting when perl 5.10 will be available in freebsd ports?
Always Want to ask same question about qt4.4.
-- 
Regards, Nickolay D. Hodyunya.
mailto: [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: External USB disk won't mount

2008-05-28 Thread Mark Ovens

Roland Smith wrote:


You could try using the atausb driver instead of umass. Unfortunately it
doesn't have a manpage yet, but you have to unload umass if you want to
use atausb.



Thanks Roland, but I can't find atausb in either 6.3 or 7.0 - is it a 
kld module?


Presumably, it would not work with other usb mass storage devices like 
memory sticks or phones?


Regards,

Mark
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: External USB disk won't mount

2008-05-28 Thread Roland Smith
On Wed, May 28, 2008 at 07:27:06PM +0100, Mark Ovens wrote:
> Bought an external USB HD enclosure but it doesn't work under FreeBSD.
> 
> Under FreeBSD-6.3-STABLE:
> 
> umass0: Super Top USB 2.0  IDE DEVICE, rev 2.00/2.01, addr 2
> da2 at umass-sim0 bus 0 target 0 lun 0
> da2:  Fixed Direct Access SCSI-0 device
> da2: 40.000MB/s transfers
> da2: 38172MB (78177792 512 byte sectors: 255H 63S/T 4866C)
> 
> # mount /dev/da2s1f /mnt
> # ls /mnt
> #
> 
> (The disk is from another FreeBSD system so is UFS2 and da2s1f is /usr on 
> the other system)
> 
> So although it mounts, nothing is visible.

You could try using the atausb driver instead of umass. Unfortunately it
doesn't have a manpage yet, but you have to unload umass if you want to
use atausb.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpLn4a6XYYeb.pgp
Description: PGP signature


Does FreeBSD supports TCP Offload Engine (TOE) from Broadcom in Dell PE2950?

2008-05-28 Thread VeeJay
Hi guys

Any clue?
Does FreeBSD supports TCP Offload Engine (TOE) from Broadcom in Dell PE2950?

-- 
Thanks!

BR / vj
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: External USB disk won't mount

2008-05-28 Thread Tuc at T-B-O-H.NET
> 
> Chuck Robey wrote:
> > I saw a mail yesterday about something nearly like this, from nej, except 
> > with
> > him, the umass device wasn't reporting anything at all, no device when he
> > plugged it in.  I sent him a little piece of usb driver code that resets 
> > his usb
> > buss, just to experiment and see if that got his devices correctly 
> > detected, but
> > he didn't yet reply, I don't know if it worked for him.  I don't have 
> > something
> > like that to experiment with.
> > 
> > With yours, you obviously have a da2 ... that only means you have a
> > direct-access disk devide #2 being detected.  The next step is to figure 
> > oout
> > what kind of formatting you have.  Hopefully, it's been fdisk'ed to where 
> > it has
> > partitions, so do this (as root): "/sbin/fdisk /dev/da2", and in fdisk, 
> > give the
> > 'p' command, this will print out the formatting for any partitions.  Likely 
> > it's
> > either one of the various Microsoft things, or a Linux one, or even a 
> > FreeBSD
> > one.  Depending on what you see, you either directly give a mount command 
> > next,
> > to the right partition, or maybe you use bsdlable to find out what the
> > disk-labelling is (if it's a FreeBSD disk).
> > 
> 
> Hi Chuck,
> 
> The next line in my post after where you snipped was:
> 
> (The disk is from another FreeBSD system so is UFS2 and da2s1f is /usr
> on the other system)
> 
> It contains a running FBSD 7.0 system - it's out of a spare box I was 
> using for testing and it mounts/reads/writes fine using the other USB 
> enclosure I borrowed. There's just something screwy about the enclosure 
> I've bought (typical eh?)
> 
Sounds like issues I had with a USB stick that I had from a 5.4
system and tried to put onto a 7.0 system. (Posted in freebsd-current early
April.)I had data integrity issues, couldn't re-format it on the new system, 
would mount but as soon as I used it the kernel would panic, etc.

Bring it back to the 5.4 system, things were peachy.

Tuc
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: External USB disk won't mount

2008-05-28 Thread Mark Ovens

Mark Ovens wrote:

Chuck Robey wrote:

I saw a mail yesterday about something nearly like this, from nej, except with
him, the umass device wasn't reporting anything at all, no device when he
plugged it in.  I sent him a little piece of usb driver code that resets his usb
buss, just to experiment and see if that got his devices correctly detected, but
he didn't yet reply, I don't know if it worked for him.  I don't have something
like that to experiment with.

With yours, you obviously have a da2 ... that only means you have a
direct-access disk devide #2 being detected.  The next step is to figure oout
what kind of formatting you have.  Hopefully, it's been fdisk'ed to where it has
partitions, so do this (as root): "/sbin/fdisk /dev/da2", and in fdisk, give the
'p' command, this will print out the formatting for any partitions.  Likely it's
either one of the various Microsoft things, or a Linux one, or even a FreeBSD
one.  Depending on what you see, you either directly give a mount command next,
to the right partition, or maybe you use bsdlable to find out what the
disk-labelling is (if it's a FreeBSD disk).



Hi Chuck,

The next line in my post after where you snipped was:

(The disk is from another FreeBSD system so is UFS2 and da2s1f is /usr
on the other system)

It contains a running FBSD 7.0 system - it's out of a spare box I was 
using for testing and it mounts/reads/writes fine using the other USB 
enclosure I borrowed. There's just something screwy about the enclosure 
I've bought (typical eh?)




Forgot to add the output of fdisk.

/home/mark{104}# /sbin/fdisk /dev/da2
*** Working on device /dev/da2 ***
parameters extracted from in-core disklabel are:
cylinders=4866 heads=255 sectors/track=63 (16065 blks/cyl)

Figures below won't work with BIOS for partitions not in cyl 1
parameters to be used for BIOS calculations are:
cylinders=4866 heads=255 sectors/track=63 (16065 blks/cyl)

Media sector size is 512
Warning: BIOS sector numbering starts with sector 1
Information from DOS bootblock is:
The data for partition 1 is:
sysid 165 (0xa5),(FreeBSD/NetBSD/386BSD)
start 63, size 78172227 (38170 Meg), flag 80 (active)
beg: cyl 0/ head 1/ sector 1;
end: cyl 1023/ head 254/ sector 63
The data for partition 2 is:

The data for partition 3 is:

The data for partition 4 is:

/home/mark{105}#

Regards,

Mark
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD based router ...

2008-05-28 Thread Jeffrey Goldberg

On May 28, 2008, at 11:06 AM, Rob wrote:


These guys have a 2 or 4 port nic for < $100:
http://www.soekris.com/lan16x1.htm


For small and medium sized enterprises that really just need firewall,  
NAT, static routing and are fine with 100Mb ether on the router, I've  
been happy with using soekris net48XX boxes using m0n0wall


  http://m0n0.ch/wall/

or pfsense

 http://www.pfsense.com/

both FreeBSD based.

-j

--
Jeffrey Goldberghttp://www.goldmark.org/jeff/

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: External USB disk won't mount

2008-05-28 Thread Mark Ovens

Chuck Robey wrote:

I saw a mail yesterday about something nearly like this, from nej, except with
him, the umass device wasn't reporting anything at all, no device when he
plugged it in.  I sent him a little piece of usb driver code that resets his usb
buss, just to experiment and see if that got his devices correctly detected, but
he didn't yet reply, I don't know if it worked for him.  I don't have something
like that to experiment with.

With yours, you obviously have a da2 ... that only means you have a
direct-access disk devide #2 being detected.  The next step is to figure oout
what kind of formatting you have.  Hopefully, it's been fdisk'ed to where it has
partitions, so do this (as root): "/sbin/fdisk /dev/da2", and in fdisk, give the
'p' command, this will print out the formatting for any partitions.  Likely it's
either one of the various Microsoft things, or a Linux one, or even a FreeBSD
one.  Depending on what you see, you either directly give a mount command next,
to the right partition, or maybe you use bsdlable to find out what the
disk-labelling is (if it's a FreeBSD disk).



Hi Chuck,

The next line in my post after where you snipped was:

(The disk is from another FreeBSD system so is UFS2 and da2s1f is /usr
on the other system)

It contains a running FBSD 7.0 system - it's out of a spare box I was 
using for testing and it mounts/reads/writes fine using the other USB 
enclosure I borrowed. There's just something screwy about the enclosure 
I've bought (typical eh?)


Regards,

Mark
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: External USB disk won't mount

2008-05-28 Thread Chuck Robey
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Mark Ovens wrote:
> Bought an external USB HD enclosure but it doesn't work under FreeBSD.
> 
> Under FreeBSD-6.3-STABLE:
> 
> umass0: Super Top USB 2.0  IDE DEVICE, rev 2.00/2.01, addr 2
> da2 at umass-sim0 bus 0 target 0 lun 0
> da2:  Fixed Direct Access SCSI-0 device
> da2: 40.000MB/s transfers
> da2: 38172MB (78177792 512 byte sectors: 255H 63S/T 4866C)
> 
> # mount /dev/da2s1f /mnt
> # ls /mnt

I saw a mail yesterday about something nearly like this, from nej, except with
him, the umass device wasn't reporting anything at all, no device when he
plugged it in.  I sent him a little piece of usb driver code that resets his usb
buss, just to experiment and see if that got his devices correctly detected, but
he didn't yet reply, I don't know if it worked for him.  I don't have something
like that to experiment with.

With yours, you obviously have a da2 ... that only means you have a
direct-access disk devide #2 being detected.  The next step is to figure oout
what kind of formatting you have.  Hopefully, it's been fdisk'ed to where it has
partitions, so do this (as root): "/sbin/fdisk /dev/da2", and in fdisk, give the
'p' command, this will print out the formatting for any partitions.  Likely it's
either one of the various Microsoft things, or a Linux one, or even a FreeBSD
one.  Depending on what you see, you either directly give a mount command next,
to the right partition, or maybe you use bsdlable to find out what the
disk-labelling is (if it's a FreeBSD disk).

Probably the right thing to do is to reply here with the results of the fdisk,
then whoever jumps on it first can give you the right thing to do next.  I'm not
going to try to tell you all the possible ways to go at this point, not without
that.


> #
> 
> (The disk is from another FreeBSD system so is UFS2 and da2s1f is /usr
> on the other system)
> 
> So although it mounts, nothing is visible.
> 
> After a few minutes this happens:
> 
> umass0: at uhub3 port 1 (addr 2) disconnected
> (da2:umass-sim0:0:0:0): lost device
> (da2:dead_sim0:0:0:0): Synchronize cache failed, status == 0x8, scsi
> status == 0x0
> (da2:dead_sim0:0:0:0): removing device entry
> umass0: detached
> 
> Tried it under 7.0-RELEASE and it's even worse - it crashes the kernel with
> 
> Fatal Trap 12: page fault in kernel mode. (forget the exact wording of
> the message, but it's definitely Fatal Trap 12).
> 
> So is this just a case of the device not complying with USB standards -
> the manufacturer just tests it under Windows and that's good enough - or
> is there a way to solve this?
> 
> I can confirm that the disk is good as I borrowed another enclosure to
> try and that works as expected.
> 
> Regards,
> 
> Mark
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"

-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.4 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIPaaDz62J6PPcoOkRAhNRAJ0TM+Izyjj1n+tMD8YAKc0XALk6TwCdHo/R
uZES2fTDXjaG3v+GXSZpglg=
=lHgf
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


External USB disk won't mount

2008-05-28 Thread Mark Ovens

Bought an external USB HD enclosure but it doesn't work under FreeBSD.

Under FreeBSD-6.3-STABLE:

umass0: Super Top USB 2.0  IDE DEVICE, rev 2.00/2.01, addr 2
da2 at umass-sim0 bus 0 target 0 lun 0
da2:  Fixed Direct Access SCSI-0 device
da2: 40.000MB/s transfers
da2: 38172MB (78177792 512 byte sectors: 255H 63S/T 4866C)

# mount /dev/da2s1f /mnt
# ls /mnt
#

(The disk is from another FreeBSD system so is UFS2 and da2s1f is /usr 
on the other system)


So although it mounts, nothing is visible.

After a few minutes this happens:

umass0: at uhub3 port 1 (addr 2) disconnected
(da2:umass-sim0:0:0:0): lost device
(da2:dead_sim0:0:0:0): Synchronize cache failed, status == 0x8, scsi 
status == 0x0

(da2:dead_sim0:0:0:0): removing device entry
umass0: detached

Tried it under 7.0-RELEASE and it's even worse - it crashes the kernel with

Fatal Trap 12: page fault in kernel mode. (forget the exact wording of 
the message, but it's definitely Fatal Trap 12).


So is this just a case of the device not complying with USB standards - 
the manufacturer just tests it under Windows and that's good enough - or 
is there a way to solve this?


I can confirm that the disk is good as I borrowed another enclosure to 
try and that works as expected.


Regards,

Mark
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: FreeBSD based router ...

2008-05-28 Thread Wojciech Puchar




They are very expensive.

A Juniper is not based on FreeBSD.  It uses FreeBSD as the
control interface.  The actual routing happens in specialized
ASICS that Juniper custom-builds.


good for multiple gigabits traffic or more. for lower speed - not worth 
of.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD based router ...

2008-05-28 Thread Wojciech Puchar


These guys have a 2 or 4 port nic for < $100:
http://www.soekris.com/lan16x1.htm

Try Ebay for the Adaptec ANA-6944-TX.  It's a 4 port based on the old DEC 
chipset (de driver)  Usual can be had for <= $10.


but prepare for problems connecting this with other devices. usually works 
well with switches, but not with everything. speed negotiation is broken.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: FreeBSD based router ...

2008-05-28 Thread Wojciech Puchar


And all this just to *pass packets*; if you're making real *routing*
decisions based upon that (i.e. you're making a router rather than a
switch), which requires that packets take a trip to the CPU, you'll


packet headers

find yourself coming to the realization that Cisco and Juniper might


for 10Gbe ports - yes. for lower speed no.



YMMV, HTH, HAND.


I don't need that many Ethernet ports, but I do need most of those PCI
slots. I was unable to locate a box with more than four slots and a
warranty that was acceptable to our Production group. I'm still not sure
about the warranty or that we can buy it in a case with power supply.
But at least I have a vector to resume my search.

Thanks,

Bob McConnell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: FreeBSD based router ...

2008-05-28 Thread Wojciech Puchar


 Finding a box with that enough PCI slots might be problematic.


Six slots X quad-port network cards = 24 interfaces.
If you need more than that, it's probably worth investing in
specialized hard-/software.



Robert Huff


Where did you find a box with six slots?


in older ones - quite common. in new machines it's a problem, not old
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: FreeBSD based router ...

2008-05-28 Thread Wojciech Puchar

(pentium may be needed for full 100Mb/s capability)


Finding a box with that enough PCI slots might be problematic.
not true. 5 PCI slots isn't uncommon+ISA slots. ISA slot is OK for video 
card (easy to find in scraps ;).

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: FreeBSD based router ...

2008-05-28 Thread Ted Mittelstaedt


> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Jerry B.
> Altzman
> Sent: Wednesday, May 28, 2008 7:31 AM
> To: Erik Trulsson
> Cc: Bob McConnell; freebsd-questions@freebsd.org
> Subject: Re: FreeBSD based router ...
> 
> 
> On Wed, May 28, 2008 at 10:08 AM, Erik Trulsson 
> <[EMAIL PROTECTED]> wrote:
> > (Putting a total of 6 quad-port NICs on a single PCI-bus would 
> totally swamp
> > that bus though, so if one were to actually use so many NICs I 
> would rather
> > recommend e.g. the Asus P5BP-E/4L motherboard. It has 3 PCI slots and 3
> > PCI-E slots in addition to the four gigabit LAN ports included on the
> > motherboard - so you can get a total of 28 ports if you fully 
> populate all
> > slots with quad-port NICs (not counting any USB-connected 
> ethernet ports one
> > might add.) It also has built-in graphics so one does not need to waste
> > one slot on a graphics card.)
> 
> And all this just to *pass packets*; if you're making real *routing*
> decisions based upon that (i.e. you're making a router rather than a
> switch), which requires that packets take a trip to the CPU, you'll
> find yourself coming to the realization that Cisco and Juniper might
> actually be on to something, there, and that ASICs might actually be
> worth what you paid for them.
> 


If it's purely ethernet-to-ethernet routing, and a lot of
ethernet ports, then he should
check into the layer-3 switches on the market and see if they
will work for him.  Much cheaper than a "real router"

Ted

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: FreeBSD based router ...

2008-05-28 Thread Ted Mittelstaedt


> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Giorgos
> Keramidas
> Sent: Tuesday, May 27, 2008 7:38 PM
> To: Matthew Donovan
> Cc: Marc G. Fournier; freebsd-questions@freebsd.org
> Subject: Re: FreeBSD based router ...
> 
> 
> On Tue, 27 May 2008 22:28:35 -0400, Matthew Donovan 
> <[EMAIL PROTECTED]> wrote:
> > On Tue, May 27, 2008 at 10:56:55PM -0300, Marc G. Fournier wrote:
> >> Does anyone know of anyone make an enterprise level router 
> based off of FreeBSD?
> >
> > Juniptor makes routers based on freebsd. Sorry for the spelling really
> > it's incorrect for the company name but you can just look up theri
> > site if you want to pay for it really good from what I have heard.
> 
> The correct spelling of the name is 'Juniper'.
> 
> You are right of course.  Juniper develops high-end routers.
> They're very very good at it too :)
> 

They are very expensive.

A Juniper is not based on FreeBSD.  It uses FreeBSD as the
control interface.  The actual routing happens in specialized
ASICS that Juniper custom-builds.

Ted
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD based router ...

2008-05-28 Thread Rob

Bob McConnell wrote:

I don't need that many Ethernet ports, but I do need most of those PCI
slots. I was unable to locate a box with more than four slots and a
warranty that was acceptable to our Production group. I'm still not sure
about the warranty or that we can buy it in a case with power supply.


These guys have a 2 or 4 port nic for < $100:
http://www.soekris.com/lan16x1.htm

Try Ebay for the Adaptec ANA-6944-TX.  It's a 4 port based on the old DEC chipset 
(de driver)  Usual can be had for <= $10.

This is a good article on some free-ware packages you might like to start from:
http://www.fsckin.com/2007/11/14/7-different-linuxbsd-firewalls-reviewed/

 -R


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Survive from DDoS

2008-05-28 Thread Patrick C
I think the size and the fact that his ISP could not filter this
indicates that the problem cannot be solved locally. You can do all
the blocking on your end you want, but they can (and did) still
saturate links ahead of you.

Your ISP (or even their uplink, I'm guessing your ISP was also pretty
affected by this attack if they couldn't filter it) needs to step up
to bat in times like this.

-Patrick

2008/5/28 Ivailo Tanusheff <[EMAIL PROTECTED]>:
>
> Hi,
>
> What I wanted to say was to use pf, not ipf. You may use something like
> this:
>
> table  persist
> block log quick from 
>
> # sshspammer
> # more than 6 ssh attempts in 15 seconds will be blocked ;)
> pass in quick on $ext_if proto tcp to ($ext_if) port ssh keep state
> (max-src-conn 10, max-src-conn-rate 6/15, overload  flush
> global)
>
> which I use for ssh flood protection or brute force attacks. You have to
> change the syntax to use it for DNS.
> Hope this will help you.
>
> Regards,
>
> Ivailo Tanusheff
>
>
>
>
> Kalpin Erlangga Silaen <[EMAIL PROTECTED]>
> Sent by: [EMAIL PROTECTED]
> 28.05.2008 11:34
>
> To
> Ivailo Tanusheff <[EMAIL PROTECTED]>
> cc
> "freebsd-questions@freebsd.org" ,
> [EMAIL PROTECTED]
> Subject
> Re: Survive from DDoS
>
>
>
>
>
>
> Dear Ivailo,
>
> thank you for your response. I am using ipfw to limit all packets for
> all open port in my server. But the packet size was 600 Mbps which could
> not filtered by our ISP.
>
> Ivailo Tanusheff wrote:
> > Hi,
> >
> > you may use ipf to drop packets from the attacking host I suppose. Or
> even
> > limit the packets to the specified port.
> >
> > Regards,
> >
> > Ivailo Tanusheff
> >
> >
> >
> >
> > Kalpin Erlangga Silaen <[EMAIL PROTECTED]>
> > Sent by: [EMAIL PROTECTED]
> > 28.05.2008 05:01
> >
> > To
> > "freebsd-questions@freebsd.org" 
> > cc
> >
> > Subject
> > Survive from DDoS
> >
> >
> >
> >
> >
> >
> > Dear all,
> >
> > yesterday, our shell server was attack and server immeditiately reboot.
> > I checked logs, it likes UDP flood with destination port 53. Is there
> > any way how to survive from this kind attack? Also, is there any
> > url/resources to improve our shell server?
> >
> > Thank you
> >
> >
> > Kalpin Erlangga Silaen
> >
> >
> > ___
> > freebsd-questions@freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> > To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
> >
>
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
>
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


SOS Kosovo

2008-05-28 Thread Fatan Kerqagu

Dear ladies and gentlemen please allow me to introduce myself. My name is 
Fatan Kercagu and I am at first year of my studies at the Economic Faculty 
here at Prishtina University. I am unable to continue my studies because of 
financial reasons therefore I would ask you hereby for your possible 
financial assistance as I am unable to continue studies on my own. Your 
assistance can be as little as possible but to me it will be big because it 
would enable me to create a healthy family future, your assistance would 
open doors to me and make me become an economist so that I could also help 
somebody else tomorrow just as you helped me. I thank you for your time and 
your help.
 
Fatan Kercagu
Rahovec, Kosovo
Email:[EMAIL PROTECTED]
Tel : +37744 119934



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD based router ...

2008-05-28 Thread Jerry B. Altzman
On Wed, May 28, 2008 at 10:48 AM, Erik Trulsson <[EMAIL PROTECTED]> wrote:
> On Wed, May 28, 2008 at 10:31:24AM -0400, Jerry B. Altzman wrote:
>> And all this just to *pass packets*; if you're making real *routing*
>> decisions based upon that (i.e. you're making a router rather than a
>> switch), which requires that packets take a trip to the CPU, you'll
>> find yourself coming to the realization that Cisco and Juniper might
>> actually be on to something, there, and that ASICs might actually be
>> worth what you paid for them.
> Yep, and if you do buy a whole bunch of quad-port NICs for your PC, then
> the whole system will probably end up costing quite a bit.  It might even
> turn out to be cheaper to get a "real" router instead.

I don't know about that: Intel quad gigE cards are $250/pop on eBay;
Sun qfe cards are a tenth of that price.
Have you priced Vendor C or Vendor J routers recently? If you're
building a *switch*, you are still price competitive with the bigger
vendors.

Oh yeah, this is all ONLY for passing ethernet; if you've got other
layer-1 technologies to integrate, you're in for a surprise, too.

> Erik Trulsson

//jbaltz
-- 
jerry b. altzman [EMAIL PROTECTED] www.jbaltz.com
foo mane padme hum
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD based router ...

2008-05-28 Thread Jerry B. Altzman
On Wed, May 28, 2008 at 10:08 AM, Erik Trulsson <[EMAIL PROTECTED]> wrote:
> (Putting a total of 6 quad-port NICs on a single PCI-bus would totally swamp
> that bus though, so if one were to actually use so many NICs I would rather
> recommend e.g. the Asus P5BP-E/4L motherboard. It has 3 PCI slots and 3
> PCI-E slots in addition to the four gigabit LAN ports included on the
> motherboard - so you can get a total of 28 ports if you fully populate all
> slots with quad-port NICs (not counting any USB-connected ethernet ports one
> might add.) It also has built-in graphics so one does not need to waste
> one slot on a graphics card.)

And all this just to *pass packets*; if you're making real *routing*
decisions based upon that (i.e. you're making a router rather than a
switch), which requires that packets take a trip to the CPU, you'll
find yourself coming to the realization that Cisco and Juniper might
actually be on to something, there, and that ASICs might actually be
worth what you paid for them.

YMMV, HTH, HAND.

> Erik Trulsson

//jbaltz
-- 
jerry b. altzman [EMAIL PROTECTED] www.jbaltz.com
foo mane padme hum
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD based router ...

2008-05-28 Thread Erik Trulsson
On Wed, May 28, 2008 at 10:31:24AM -0400, Jerry B. Altzman wrote:
> On Wed, May 28, 2008 at 10:08 AM, Erik Trulsson <[EMAIL PROTECTED]> wrote:
> > (Putting a total of 6 quad-port NICs on a single PCI-bus would totally swamp
> > that bus though, so if one were to actually use so many NICs I would rather
> > recommend e.g. the Asus P5BP-E/4L motherboard. It has 3 PCI slots and 3
> > PCI-E slots in addition to the four gigabit LAN ports included on the
> > motherboard - so you can get a total of 28 ports if you fully populate all
> > slots with quad-port NICs (not counting any USB-connected ethernet ports one
> > might add.) It also has built-in graphics so one does not need to waste
> > one slot on a graphics card.)
> 
> And all this just to *pass packets*; if you're making real *routing*
> decisions based upon that (i.e. you're making a router rather than a
> switch), which requires that packets take a trip to the CPU, you'll
> find yourself coming to the realization that Cisco and Juniper might
> actually be on to something, there, and that ASICs might actually be
> worth what you paid for them.
> 
> YMMV, HTH, HAND.

Yep, and if you do buy a whole bunch of quad-port NICs for your PC, then
the whole system will probably end up costing quite a bit.  It might even
turn out to be cheaper to get a "real" router instead.






-- 

Erik Trulsson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: FreeBSD based router ...

2008-05-28 Thread Bob McConnell
From: Jerry B. Altzman
> On Wed, May 28, 2008 at 10:08 AM, Erik Trulsson
<[EMAIL PROTECTED]> wrote:
>> (Putting a total of 6 quad-port NICs on a single PCI-bus would
totally swamp
>> that bus though, so if one were to actually use so many NICs I would
rather
>> recommend e.g. the Asus P5BP-E/4L motherboard. It has 3 PCI slots and
3
>> PCI-E slots in addition to the four gigabit LAN ports included on the
>> motherboard - so you can get a total of 28 ports if you fully
populate all
>> slots with quad-port NICs (not counting any USB-connected ethernet
ports one
>> might add.) It also has built-in graphics so one does not need to
waste
>> one slot on a graphics card.)
> 
> And all this just to *pass packets*; if you're making real *routing*
> decisions based upon that (i.e. you're making a router rather than a
> switch), which requires that packets take a trip to the CPU, you'll
> find yourself coming to the realization that Cisco and Juniper might
> actually be on to something, there, and that ASICs might actually be
> worth what you paid for them.
> 
> YMMV, HTH, HAND.

I don't need that many Ethernet ports, but I do need most of those PCI
slots. I was unable to locate a box with more than four slots and a
warranty that was acceptable to our Production group. I'm still not sure
about the warranty or that we can buy it in a case with power supply.
But at least I have a vector to resume my search.

Thanks,

Bob McConnell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Survive from DDoS

2008-05-28 Thread Ivailo Tanusheff
Hi,

What I wanted to say was to use pf, not ipf. You may use something like 
this:

table  persist
block log quick from 

# sshspammer
# more than 6 ssh attempts in 15 seconds will be blocked ;)
pass in quick on $ext_if proto tcp to ($ext_if) port ssh keep state 
(max-src-conn 10, max-src-conn-rate 6/15, overload  flush 
global)

which I use for ssh flood protection or brute force attacks. You have to 
change the syntax to use it for DNS.
Hope this will help you.

Regards,

Ivailo Tanusheff




Kalpin Erlangga Silaen <[EMAIL PROTECTED]> 
Sent by: [EMAIL PROTECTED]
28.05.2008 11:34

To
Ivailo Tanusheff <[EMAIL PROTECTED]>
cc
"freebsd-questions@freebsd.org" , 
[EMAIL PROTECTED]
Subject
Re: Survive from DDoS






Dear Ivailo,

thank you for your response. I am using ipfw to limit all packets for 
all open port in my server. But the packet size was 600 Mbps which could 
not filtered by our ISP.

Ivailo Tanusheff wrote:
> Hi,
>
> you may use ipf to drop packets from the attacking host I suppose. Or 
even 
> limit the packets to the specified port.
>
> Regards,
>
> Ivailo Tanusheff
>
>
>
>
> Kalpin Erlangga Silaen <[EMAIL PROTECTED]> 
> Sent by: [EMAIL PROTECTED]
> 28.05.2008 05:01
>
> To
> "freebsd-questions@freebsd.org" 
> cc
>
> Subject
> Survive from DDoS
>
>
>
>
>
>
> Dear all,
>
> yesterday, our shell server was attack and server immeditiately reboot.
> I checked logs, it likes UDP flood with destination port 53. Is there
> any way how to survive from this kind attack? Also, is there any
> url/resources to improve our shell server?
>
> Thank you
>
>
> Kalpin Erlangga Silaen
>
>
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to 
"[EMAIL PROTECTED]"
> 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
"[EMAIL PROTECTED]"

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Need help with multicast routing over VPN

2008-05-28 Thread Michael Doyle
My organisation has successfully used FreeBSD to set up a VPN between  
three sites.


Now, in order to facilitate a phone system using VOIP between two of  
those sites, I have

attempted to enable multi-cast routing between those sites.

I looked at the mrouted manual, and attempted to configure it properly  
insofar as I understood it.
I also re-compiled the kernels of the firewalls to enable multicast  
routing.


I have not succeeded in getting the phone systems to see eachothers'  
multicast packets, and after
several attempts, all I have done is to crash the firewalls, and annoy  
my staff members.


If someone has done this sort of thing before, I would be prepared to  
send my config files to them
for review (/etc/rc.conf, /etc/ipsec.conf, /etc/mrouted.conf, /usr/ 
local/etc/racoon/racoon.conf and /etc/rc.firewall

are the files I think are of interest).

Both systems are running FreeBSD 6.3-stable as of friday of last week.

Mike
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD based router ...

2008-05-28 Thread Erik Trulsson
On Wed, May 28, 2008 at 09:51:35AM -0400, Bob McConnell wrote:
> From: Robert Huff
> > Bob McConnell writes:
> > 
> >>  >>> define what "enterprise level router" is
> >>  >>
> >>  >> Something that doesn't say 'Vista capable' on the box?
> >>  > 
> >>  > so get 486, 16MB RAM, needed amount of network cards, install
> FreeBSD
> >>  and 
> >>  > configure :)
> >>  > 
> >>  > (pentium may be needed for full 100Mb/s capability)
> >>  
> >>  Finding a box with that enough PCI slots might be problematic.
> > 
> > Six slots X quad-port network cards = 24 interfaces.
> > If you need more than that, it's probably worth investing in
> > specialized hard-/software.
> 
> > Robert Huff
> 
> Where did you find a box with six slots?

Motherboards (in standard ATX format) with six PCI slots are not
all that difficult to find.  If you include PCI-E and PCI-X in 'PCI'
it is even easier, but there certainly exist ones with six normal
32-bit/33MHz PCI slots as well.  Today it is not very common, but if
you look at older socketA boards it was actually fairly common.
(The Asus A7V8X-X is one example of such a board, but there were several
others.)


(Putting a total of 6 quad-port NICs on a single PCI-bus would totally swamp
that bus though, so if one were to actually use so many NICs I would rather
recommend e.g. the Asus P5BP-E/4L motherboard. It has 3 PCI slots and 3
PCI-E slots in addition to the four gigabit LAN ports included on the
motherboard - so you can get a total of 28 ports if you fully populate all
slots with quad-port NICs (not counting any USB-connected ethernet ports one
might add.) It also has built-in graphics so one does not need to waste
one slot on a graphics card.)




-- 

Erik Trulsson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Survive from DDoS

2008-05-28 Thread Jos Chrispijn
Kalpin Erlangga Silaen wrote:
> yesterday, our shell server was attack and server immeditiately reboot.
> I checked logs, it likes UDP flood with destination port 53. Is there
> any way how to survive from this kind attack?

(i)
Do a "grep 53 /etc/services" and search for ports 53 on both tcp and udp.
Use tcpdump to examine the traffic to see if you can find out what is
making the requests.

(ii)
You could set up a caching-only name server. By default, the queries
would be performed through a random port, and any previous queries would
reference the cache, rather than rely on the remote DNS.

(iii)
I found this on the net:

You could tie your address resolution to a group.

Say, for instance, you create a group called "resolve", and add yourself
to it and root (for ports):

# pw groupadd resolve -M root,you

Then, just add something like this to IPFW rule set, replacing the
example DNS addresses with your actual addresses:

DNS1="1.2.3.4"
DNS2="5.6.7.8"

add pass udp from any 53 to { DNS1 or DNS2 } 53 out gid resolve keep-state

That would have the effect of blocking anything outward-bound from port
53, except that of address queries by you and root.

If you're running a caching-only NS, set-up "bind" as a member of the
group, and your firewall line w/o the port 53 specification:

# pw groupadd resolve -M bind

add pass udp from any 53 to { $DNS1 or $DNS2 } 53 out gid resolve keep-state
add pass udp from any to { $DNS1 or $DNS2 } 53 out gid resolve keep-state

That will block everyone but bind from querying the remote DNS server.

-- cut --

I hope this helps...
Jos

-- My other computer is a *BBC Model B+
*
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: FreeBSD based router ...

2008-05-28 Thread Bob McConnell
From: Robert Huff
> Bob McConnell writes:
> 
>>  >>> define what "enterprise level router" is
>>  >>
>>  >> Something that doesn't say 'Vista capable' on the box?
>>  > 
>>  > so get 486, 16MB RAM, needed amount of network cards, install
FreeBSD
>>  and 
>>  > configure :)
>>  > 
>>  > (pentium may be needed for full 100Mb/s capability)
>>  
>>  Finding a box with that enough PCI slots might be problematic.
> 
>   Six slots X quad-port network cards = 24 interfaces.
>   If you need more than that, it's probably worth investing in
> specialized hard-/software.

>   Robert Huff

Where did you find a box with six slots?

Bob McConnell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: FreeBSD based router ...

2008-05-28 Thread Robert Huff

Bob McConnell writes:

>  >>> define what "enterprise level router" is
>  >>
>  >> Something that doesn't say 'Vista capable' on the box?
>  > 
>  > so get 486, 16MB RAM, needed amount of network cards, install FreeBSD
>  and 
>  > configure :)
>  > 
>  > (pentium may be needed for full 100Mb/s capability)
>  
>  Finding a box with that enough PCI slots might be problematic.

Six slots X quad-port network cards = 24 interfaces.
If you need more than that, it's probably worth investing in
specialized hard-/software.


Robert Huff

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: FreeBSD based router ...

2008-05-28 Thread Bob McConnell
Wojciech Puchar
>>> define what "enterprise level router" is
>>
>> Something that doesn't say 'Vista capable' on the box?
> 
> so get 486, 16MB RAM, needed amount of network cards, install FreeBSD
and 
> configure :)
> 
> (pentium may be needed for full 100Mb/s capability)

Finding a box with that enough PCI slots might be problematic.

Bob McConnell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD based router ...

2008-05-28 Thread Wojciech Puchar

FreeBSD?


define what "enterprise level router" is


Something that doesn't say 'Vista capable' on the box?


so get 486, 16MB RAM, needed amount of network cards, install FreeBSD and 
configure :)


(pentium may be needed for full 100Mb/s capability)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD based router ...

2008-05-28 Thread Steve Bertrand

Wojciech Puchar wrote:
Does anyone know of anyone make an enterprise level router based off 
of FreeBSD?


define what "enterprise level router" is


Something that doesn't say 'Vista capable' on the box?

:)

Steve
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: dump and remote file fetching

2008-05-28 Thread Odhiambo Washington
On Wed, May 28, 2008 at 9:53 AM, Zbigniew Szalbot <[EMAIL PROTECTED]>
wrote:

> Hi there,
>
>  Need a word of advice. I use dump to backup my data. All fine. Dump saves
>>> compressed *.bz2 files. Nice. All I need now is a way to copy them from the
>>> server to a remote backup machine. The problem I am facing is that bz2 files
>>> are owned by root:wheel. So if I use scp [EMAIL PROTECTED]:/path/to/*.bz2,
>>> it does not have sufficient permissions to fetch the files. I can use sudo,
>>> but then I need to interactively type the password, which I would like to
>>> avoid.
>>>
>>> Can you suggest simple ways of getting around this? I don't mind using
>>> special tools for the job, especially if they are not too complicated... :)
>>>
>>> Before firing this email off I took a look at rsync and it seems easy
>>> enough to do just what I need but still many thanks for suggestions!
>>>
>>
>> I have been very happy with rsnapshot.  Take that for a spin and see how
>> it works for you
>>
>
> I have taken a look at rsnapshot but it seems I am left to deal with the
> same problem:
>
> From their page:
> In addition to full paths on the local filesystem, you can also backup
> remote systems using rsync over ssh. If you have ssh installed and enabled
> (via the cmd_ssh parameter), you can specify a path like:
>
> backup  [EMAIL PROTECTED]:/etc/ example.com/
>
> This behaves fundamentally the same way, but you must take a few extra
> things into account.
>
> a/ The ssh daemon must be running on example.com
> b/ You must have access to the account you specify the remote machine, in
> this case the root user on example.com.
>
> I do not allow remote root login so what are my options in that case? How
> do you deal with such a scenario? Many thanks!


HI ZS,

I used to do something like this with a very simple shell script, using ftp.
In the script, I was simply checking the filename, extracting the date from
it, comparing the date with today's date, and pushing into a nother server
all files that are dated yesterday. These were log files created using
another script, which would create them like main.MMDD.log.
IIRC, ftp relies on a file ~/.netrc which can have the destination hostname,
username and password. With these, ftp will be automated - no need to enter
any logon credentials. Please read the man page for ftp on how to use the
netrc file or the ~/.netrc
If you need more assistance, find me off list:-)


Nairobi,KE
+254733744121/+254722743223
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

"Oh My God! They killed init! You Bastards!"
--from a /. post
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Survive from DDoS

2008-05-28 Thread Kalpin Erlangga Silaen

Dear Ivailo,

thank you for your response. I am using ipfw to limit all packets for 
all open port in my server. But the packet size was 600 Mbps which could 
not filtered by our ISP.


Ivailo Tanusheff wrote:

Hi,

you may use ipf to drop packets from the attacking host I suppose. Or even 
limit the packets to the specified port.


Regards,

Ivailo Tanusheff




Kalpin Erlangga Silaen <[EMAIL PROTECTED]> 
Sent by: [EMAIL PROTECTED]

28.05.2008 05:01

To
"freebsd-questions@freebsd.org" 
cc

Subject
Survive from DDoS






Dear all,

yesterday, our shell server was attack and server immeditiately reboot.
I checked logs, it likes UDP flood with destination port 53. Is there
any way how to survive from this kind attack? Also, is there any
url/resources to improve our shell server?

Thank you


Kalpin Erlangga Silaen


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
  


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Survive from DDoS

2008-05-28 Thread Ivailo Tanusheff
Hi,

you may use ipf to drop packets from the attacking host I suppose. Or even 
limit the packets to the specified port.

Regards,

Ivailo Tanusheff




Kalpin Erlangga Silaen <[EMAIL PROTECTED]> 
Sent by: [EMAIL PROTECTED]
28.05.2008 05:01

To
"freebsd-questions@freebsd.org" 
cc

Subject
Survive from DDoS






Dear all,

yesterday, our shell server was attack and server immeditiately reboot.
I checked logs, it likes UDP flood with destination port 53. Is there
any way how to survive from this kind attack? Also, is there any
url/resources to improve our shell server?

Thank you


Kalpin Erlangga Silaen


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD based router ...

2008-05-28 Thread Wojciech Puchar

Does anyone know of anyone make an enterprise level router based off of FreeBSD?


define what "enterprise level router" is



- --
Marc G. FournierHub.Org Hosting Solutions S.A. (http://www.hub.org)
Email . [EMAIL PROTECTED]  MSN . [EMAIL PROTECTED]
Yahoo . yscrappy   Skype: hub.orgICQ . 7615664
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.9 (FreeBSD)

iEYEARECAAYFAkg8u+cACgkQ4QvfyHIvDvMF8wCg25K5IaX4/DIHk8KFIAfKXe/b
decAoOqllLM7c6ty7wwXcwuPlEk/xSo6
=O+GR
-END PGP SIGNATURE-

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Low/Jerky performance in FreeBSD 7

2008-05-28 Thread Jeremie Le Hen
On Mon, May 19, 2008 at 08:45:41AM -0700, Yani Brankov wrote:
>  I recently updated to FreeBSD 7 and noticed that my box started to perform 
>  as windows does under heavier loads. The mouse starts to be jerky when 
>  compiling, window updates/redraws are slow and bump the CPU usage up to 
>  100%. I attributed this to the mga driver which comes with the distro in the 
>  beginning. However, I later noticed the same happens even when X has not 
>  been started. For instance, I start a kernel compile and the console mouse 
>  becomes jumpy. All these have never happened before with FreeBSD on this 
>  box. It has enough memory (1.5G) and relatively fast CPU (2.5GHz). I started 
>  to think this may be originating from kernel level (irq handling, long times 
>  in giant locked code during syscalls, etc).
> 
>  I am wondering whether it is only me who has hit this problem or it is more 
>  common. It may be also related to hardware configuration, etc. I'm trying to 
>  figure out.

Try profiling your kernel with PMC:
http://lists.freebsd.org/pipermail/freebsd-current/2006-February/061096.html

Regards,
-- 
Jeremie Le Hen
< jeremie at le-hen dot org >< ttz at chchile dot org >
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"