date:20091016

Re: Best procedure for full backup of live system

2009-10-16 Thread Nerius Landys

Thanks again guys.  My final series of steps to take full backups:

bsdlabel ad4s1| ssh -p 2 nlan...@localhost dd
of=/home/nlandys/backup/bsdlabel_ad4s1
dmesg -a  | ssh -p 2 nlan...@localhost dd
of=/home/nlandys/backup/dmesg
dd if=/dev/ad4 bs=512 count=1 | ssh -p 2 nlan...@localhost dd
of=/home/nlandys/backup/MBR
cat /etc/fstab| ssh -p 2 nlan...@localhost dd
of=/home/nlandys/backup/fstab
dump -0Lan -f - / | gzip  | ssh -p 2 nlan...@localhost dd
of=/home/nlandys/backup/dump0-root.gz
dump -0Lan -f - /tmp | gzip   | ssh -p 2 nlan...@localhost dd
of=/home/nlandys/backup/dump0-tmp.gz
dump -0Lan -f - /var | gzip   | ssh -p 2 nlan...@localhost dd
of=/home/nlandys/backup/dump0-var.gz
dump -0Lan -f - /usr | gzip   | ssh -p 2 nlan...@localhost dd
of=/home/nlandys/backup/dump0-usr.gz

... where port 2 on localhost is a pipe to my remote desktop with
the 500 GB harddrive.  If I missed anything important please let me
know.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: Security blocking question

2009-10-16 Thread Matthew Seaman


Aflatoon Aflatooni wrote:
Is there a way that I could configure the server so that if there are for 
example X attempts from an IP address then for the next Y hours all the SSH 
requests would be ignored from that IP address? There are only a handful of 
people who have access to that server.


Yes.

In pf.conf:

table persist

[...]

block drop in log quick on $ext_if from 


[...]

pass in on $ext_if proto tcp  \
from any to $ext_if port ssh \
flags S/SA keep state\
(max-src-conn-rate 3/30, overload flush global)

plus you'll need to add a cron job to clear old entries out of the 
ssh-bruteforce

table after a suitable amount of time has passed.  Use expiretable to do
that.  Note: in practice I've found that it's a *really good idea* to implement 
a SSH whitelist of addresses that will never be bruteforce blocked like this -- 
it's very easy to lock yourself out even if everything you're doing is entirely 
legitimate.  Coding that is left as an exercise for the reader.




What is the best way of testing the PF rule? Is there a quick way to mimic a brute force? 
Is there a way that I could review the content of the table through pfctl -s all


To test, you need access to a machine not in your whitelist from where you
can try ssh'ing into the protected machine several times in rapid sequence.
3 times in 30s sounds quite fast, but it is actually not to hard to achieve
accidentally, especially if you use tools like rsync over SSH transport.  You
should have a login concurrently from some other IP or on the console, otherwise
you will lock yourself out.

To see what IPs have been added to the ssh-bruteforce table and when and what
traffic has been blocked:

  # pfctl -vv -t ssh-bruteforce -T show

To manually delete an IP from the ssh-bruteforce table:

  # pfctl -t ssh-bruteforce -T delete 12.34.56.78

As noted elsewhere in this thread, instead of using expiretable, you can run 
this
out of cron to expire addresses over a day old from the ssh-bruteforce 
blocklist:

  # pfctl -t ssh-bruteforce -T expire 86400

The pfctl(8) man page is pretty illuminating.

Cheers,

Matthew

PS.  Got to love the way that HTML-ising e-mail has deleted the table name
from the examples above.  I hope you could actually read it unmunged. Plain
text rools!

--
Dr Matthew J Seaman MA, D.Phil.   7 Priory Courtyard
 Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
 Kent, CT11 9PW



signature.asc
Description: OpenPGP digital signature

Re: Best procedure for full backup of live system

2009-10-16 Thread Matthew Seaman


Warren Block wrote:


Lastly, it says save all boot messages.  Do they mean the output of
dmesg?  Why is this useful?


It would show what hardware was in the old machine and what services are 
running on startup.  Backup in general is making copies of information 
you won't need as long as you have a backup of it.


The system already creates a copy of the first part of the system boot 
output for you: /var/run/dmesg.boot  -- this shows you what hardware the

kernel discovered as it probed all of the buses and so forth.  It doesn't
contain the rest of the output from all of the /etc/rc.d/* and
/usr/local/etc/rc.d/* startup scripts.

The simple way to capture all that is to enable console.log in /etc/syslog.conf
-- you want to uncomment this line:

console.info/var/log/console.log

and make sure that /var/log/console.log exists, then restart syslog.  This
will log all console output, including the boot-up output.

Cheers,

Matthew

--
Dr Matthew J Seaman MA, D.Phil.   7 Priory Courtyard
 Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
 Kent, CT11 9PW



signature.asc
Description: OpenPGP digital signature

Re: phpMyAdmin install stopped in dependency 'libXau-1.0.4'

2009-10-16 Thread Matthew Seaman


Kikachi Kozumi wrote:

Hi,

I tried installing phpMyAdmin in an ezjail created jail already
installed with apache22, mysql and php5 running FreeBSD 7.1-RELEASE
i386 with no X11 (headless).
The port install failed when dependency 'libXau-1.0.4' configure
couldn't find gnome-config:

...
checking for XAU... gnome-config: not found
configure: error: Package requirements (xproto) were not met.
...

I'm not sure if this issue is specific to my system or is it a ports
issue but I found that libXau-1.0.4 was in the ports tree since
January 2009 so it's less likely to be an issue with the port itself.

Right now I'm not sure if the required gnome-config is lost from my
system or was never there in the 1st place. What can I do to continue
with phpMyAdmin installation?

I'm also curious why the phpMyAdmin port requires libX11 libraries to
build while the phpMyAdmin website states that php, mysql and apache
are the requirements for running phpMyAdmin?


phpMyAdmin only depends on X through one of the optional extensions:
php5-gd.  If you disable the GD and PDF options in the configuration
dialogue you'll not need to install any X related dependencies.  Or
you can rebuild graphics/gd using 'WITHOUT_X11=yes' if you want to be
able to generate PDF of database schemas etc through phpMyAdmin.

Hmmm... as far as I can tell, gnome-config is not a run-time dependency
of phpMyAdmin even when compiled with all options enabled and with X11
support in the gd libraries.  Either gnome-config is a build dependency
from somewhere way down the dependency tree (ie. only needed to build 
something, not needed to run it) or you've got a misplaced 'USE_GNOME'

somewhere.  In general, USE_FOO is for port maintainers only and shouldn't
appear in /etc/make.conf or any other Makefile that gets generally included
everywhere.  Use WITH/WITHOUT_FOO in /etc/make.conf to indicate global
preferences.  (Gentoo we ain't)

Cheers,

Matthew

--
Dr Matthew J Seaman MA, D.Phil.   7 Priory Courtyard
 Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
 Kent, CT11 9PW



signature.asc
Description: OpenPGP digital signature

RE: Unknown devices

2009-10-16 Thread Arkady Tokaev

Fogot to ask. When I login as a root I see invitation sign %, not #. What 
it means?

Arkady Tokaev

From: tok...@hotmail.com
To: free...@edvax.de
CC: freebsd-questions@freebsd.org
Subject: RE: Unknown devices
Date: Thu, 15 Oct 2009 16:15:58 +0400

Grate thanks!I had installed from 3 CD FreeBSD 7.2 with default (I hope) 
options.I don't understand - why it occurs, but now I understand - where to 
look.I think - I will reinstall the system, but if You have idea about this 
trouble - say me.Unfortunately I can not ask your last question because I very 
novice in FreeBSD. I just followed the instruction for FreeBSD router.  

Once more thanks,
Arkady Tokaev

 Date: Thu, 15 Oct 2009 00:38:03 +0200
 From: free...@edvax.de
 To: tok...@hotmail.com
 CC: freebsd-questions@freebsd.org
 Subject: Re: Unknown devices

 On Wed, 14 Oct 2009 23:04:51 +0400, Arkady Tokaev tok...@hotmail.com wrote:

  While I was trying to update ports I have received message
  about absence disk space.It's impossible, I thought.But df
  command said:

  $ df -h
  Filesystem SizeUsed   Avail Capacity  Mounted on
  /dev/ad0s1a 23G3.5G 18G16%/
  devfs  1.0K1.0K  0B   100%/dev
  /dev/md0   9.4M2.8M6.5M30%/etc
  /dev/md131M 16M 13M55%/usr/local/etc
  /dev/md219M 18K 19M 0%/root
  /dev/md331M6.1M 24M20%/var
  $
  What is the md devices?How I can remove them?

 See man md: The md devices refer to memory disks, RAM that
 emulates a hard disk.

 Sadly, I don't recognize a reason why your /etc, /usr/local/etc,
 /root and /var subtrees are mounted onto memory disks... seems
 that you're not running a default install, do you?

 Regarding your initial problem - updating ports - this involves
 writing operations in the ports directory (usually /usr/ports
 which may be a subtree of /dev/ad0s1a on / in your setting) as
 well as in /var, especially /var/db/pkg, the installed packages
 database, and /var/ports. When /var is a memory disk with 30 MB,
 it may be too small for such a process. Furthermore, if I see this
 correctly, you're loosing the content of the package database
 on reboot; is this intended?

 -- 
 Polytropon
 Magdeburg, Germany
 Happy FreeBSD user since 4.0
 Andra moi ennepe, Mousa, ...

_
Не хотите, чтобы кто-то знал, что вы делали в Интернете вчера? Вам нужен 
Internet Explorer 8.
http://www.microsoft.ru/ie8___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: torrentflux

2009-10-16 Thread krad

2009/10/15 Dánielisz László laszlo_daniel...@yahoo.com

 I found out that there is an httpd.conf problem, I fixed that but now I'm
 thinking how to put php module in apache without reinstalling apache.




 
 From: Polytropon free...@edvax.de
 To: Dánielisz László laszlo_daniel...@yahoo.com
 Cc: freebsd-questions@freebsd.org
 Sent: Thu, October 15, 2009 8:22:04 PM
 Subject: Re: torrentflux

 On Thu, 15 Oct 2009 10:19:55 -0700 (PDT), Dánielisz László 
 laszlo_daniel...@yahoo.com wrote:
  Hello,
 
  Ok, I know it sounds numb, but how can I actually start
  torrentflux on my freebsd machine?

 I haven't used this torrent client so far (ctorrent is my
 choice at the moment), but according to

  # pkg_info |grep torrent
  torrentflux-2.0.b1  A PHP based BitTorrent client that runs on a web
 server

 it seems that you have to run a web server (I think locally),
 e. g. Apache, and then connect to this server in order to
 perform the actions with your client, such as entering

http://127.0.0.1

 in your web browser - this assumes that the web server is
 running and the PHP script is properly installed. It's possible
 that you need to connect to a specific port (e. g. :631 after
 the local IP).



  but I can not find how to start it and torrentflux forum
  is down, do you have any idea?

 Doesn't torrentflux come with some documentation? Have a look
 for it in /usr/local/share/doc where it should be.

 The packagin list in the port's directory mentions install.txt,
 maybe this file contains the information needed?

 Finally, does torrentflux.com (the homepage of the project) have
 some information?



 --
 Polytropon
 Magdeburg, Germany
 Happy FreeBSD user since 4.0
 Andra moi ennepe, Mousa, ...
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 freebsd-questions-unsubscr...@freebsd.org




 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 freebsd-questions-unsubscr...@freebsd.org


cd /usr/port/www/mod_php5 ; make install
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: CMS

2009-10-16 Thread Reko Turja

I manage a couple of FreeBSD servers for a friend.  He's gotten all 
excited about content management and thinks that's the way to go. 
The system he's familiar with is Windows only.  I've done a little 
research, but I'm wondering if anyone reading the list has 
experience with a CMS on FreeBSD - one that's in ports preferably.


Due using Postgres, I've had experience on both Drupal and 
Serendipity, both installed mostly from ports and seem to be updated 
pretty regularly - although Serendipity can self repair - i.e. load 
updates for plugins and itself automatically. Both have functioned 
well enough, although with Drupal if you need more exotic array of 
plugins, they have to be installed manually as ports seem to miss 
several.


In addition, some of the Drupal plugins need a bit of tweaking 
(getting rid of mysqlisms) if used under Postgres, although the main 
application works good enough.


-Reko 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

RE: CMS

2009-10-16 Thread dhaneshk k


Hi 

If I were you I  use Plone CMS on FreeBSD. Its one among 
the  good  CMSs available and  doesn't require to  configure a 
DataBase  separately. Zope server has its DB  named as ZODB, you can
use with any  database  with APIs  and Security shows pretty good
record.
-
dhanesh

 From: reko.tu...@liukuma.net
 To: pschmehl_li...@tx.rr.com; freebsd-questions@freebsd.org
 Date: Fri, 16 Oct 2009 12:13:12 +0300
 CC: 
 Subject: Re: CMS
 
  I manage a couple of FreeBSD servers for a friend.  He's gotten all 
  excited about content management and thinks that's the way to go. 
  The system he's familiar with is Windows only.  I've done a little 
  research, but I'm wondering if anyone reading the list has 
  experience with a CMS on FreeBSD - one that's in ports preferably.
 
 Due using Postgres, I've had experience on both Drupal and 
 Serendipity, both installed mostly from ports and seem to be updated 
 pretty regularly - although Serendipity can self repair - i.e. load 
 updates for plugins and itself automatically. Both have functioned 
 well enough, although with Drupal if you need more exotic array of 
 plugins, they have to be installed manually as ports seem to miss 
 several.
 
 In addition, some of the Drupal plugins need a bit of tweaking 
 (getting rid of mysqlisms) if used under Postgres, although the main 
 application works good enough.
 
 -Reko 
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
  
_
Great events make grand headlines – read them all on MSN India
http://in.msn.com___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

All in one printer?

2009-10-16 Thread Patrick Lamaiziere

Hello,

I'm looking for an all in one printer (scanner + printer). Do you
know some models well supported by our favorit OS (8.0) (and a cheep
one of course)?

Thanks, regards.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: All in one printer?

2009-10-16 Thread Sam Fourman Jr.

On Fri, Oct 16, 2009 at 6:45 AM, Patrick Lamaiziere
patf...@davenulle.org wrote:
 Hello,

 I'm looking for an all in one printer (scanner + printer). Do you
 know some models well supported by our favorit OS (8.0) (and a cheep
 one of course)?

Brother has a few MFC7820N works for me (not network scanning)

Sam Fourman Jr.
Fourman Networks
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: All in one printer?

2009-10-16 Thread Vincent Hoffman

Patrick Lamaiziere wrote:
 Hello,

 I'm looking for an all in one printer (scanner + printer). Do you
 know some models well supported by our favorit OS (8.0) (and a cheep
 one of course)?
   

I've had 2 HP cheap printer/scanners that have both worked well using
the hplip port with cups and sane. Off hand I cant remember model
numbers but
http://hplipopensource.com/hplip-web/supported_devices/index.html should
list most if not all the ones it supports.


Vince
 Thanks, regards.
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
   

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: All in one printer?

2009-10-16 Thread Samuel Martín Moro

HP printers are quite good indeed, and they've got cheap stuff.
They provide softs  drivers for linux/unix users.
Setup is easy.
What else?


Samuel Martín Moro
CamTrace
{EPITECH.} tek4



On Fri, Oct 16, 2009 at 1:55 PM, Vincent Hoffman vi...@unsane.co.uk wrote:

 Patrick Lamaiziere wrote:
  Hello,
 
  I'm looking for an all in one printer (scanner + printer). Do you
  know some models well supported by our favorit OS (8.0) (and a cheep
  one of course)?
 

 I've had 2 HP cheap printer/scanners that have both worked well using
 the hplip port with cups and sane. Off hand I cant remember model
 numbers but
 http://hplipopensource.com/hplip-web/supported_devices/index.html should
 list most if not all the ones it supports.


 Vince
  Thanks, regards.
  ___
  freebsd-questions@freebsd.org mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to 
 freebsd-questions-unsubscr...@freebsd.org
 

 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 freebsd-questions-unsubscr...@freebsd.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

export PATH in script called via Cron.

2009-10-16 Thread Paul Halliday

I have a script that I call via Cron.

It wont work unless I include a path:

#!/usr/local/bin/bash
PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin
export $PATH

which is fine and works. Out of curiosity though, why is it that if I
call it from the cl like ./test.sh I get this error:

./test.sh: line 3: export:
`/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin': not a
valid identifier

The script still works but it does drop that error.

What does it mean?

Thanks.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: CMS

2009-10-16 Thread Mikel King



On Oct 15, 2009, at 10:38 PM, Paul Schmehl wrote:

I manage a couple of FreeBSD servers for a friend.  He's gotten all  
excited about content management and thinks that's the way to go.   
The system he's familiar with is Windows only.  I've done a little  
research, but I'm wondering if anyone reading the list has  
experience with a CMS on FreeBSD - one that's in ports preferably.


Pros?  Cons?  Any known security issues?

Paul Schmehl, If it isn't already
obvious, my opinions are my own
and not those of my employer.
**
WARNING: Check the headers before replying


Paul,

	I've used both Wordpress and Drupal. Both are good and both are bad.  
Because both are PHP based, they are not dependent on the port  
maintainer, if you are comfortable with keeping things up to date  
yourself. Both have made huge strides in the last few months to  
improve their systems to require less work on the command line in  
regards to updating.


	I recommend that you test drive both systems and determine what you  
are comfortable with. Most canned themes are available in both systems.



Regards,
Mikel King
CEO, Olivent Technologies
Senior Editor, BSD News Network
Columnist, BSD Magazine
6 Alpine Court,
Medford, NY 11763
o: 631.627.3055
skype:mikel.king
http://olivent.com
http://bsdnews.net
http://mikelking.com
http://twitter.com/mikelking

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: export PATH in script called via Cron.

2009-10-16 Thread krad

2009/10/16 Paul Halliday paul.halli...@gmail.com

 I have a script that I call via Cron.

 It wont work unless I include a path:

 #!/usr/local/bin/bash
 PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin
 export $PATH

 which is fine and works. Out of curiosity though, why is it that if I
 call it from the cl like ./test.sh I get this error:

 ./test.sh: line 3: export:
 `/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin': not a
 valid identifier

 The script still works but it does drop that error.

 What does it mean?

 Thanks.
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 freebsd-questions-unsubscr...@freebsd.org


drop the $ in front of path in the export line
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

print the PKGNAME of a port

2009-10-16 Thread Matthias Apitz


Hello,

For the ports in /usr/ports is there a way to print the resulting
PKGNAME of a given port, like:

# cd /usr/ports/x11/kde3
# make name
kde-3.5.10_2
#

for this test above I just added the following lines at the end of the
Makefile after the include line:

.include bsd.port.mk
name:
@echo ${PKGNAME}

I have had a look into bsd.port.mk but could not see anythink like the
silly output (without making the port). Thanks

matthias
-- 
Matthias Apitz
t +49-89-61308 351 - f +49-89-61308 399 - m +49-170-4527211
e g...@unixarea.de - w http://www.unixarea.de/
Vote NO to EU The Lisbon Treaty: http://www.no-means-no.eu
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: Best procedure for full backup of live system

2009-10-16 Thread Warren Block


On Fri, 16 Oct 2009, Nerius Landys wrote:


Thanks again guys.  My final series of steps to take full backups:

bsdlabel ad4s1| ssh -p 2 nlan...@localhost dd
of=/home/nlandys/backup/bsdlabel_ad4s1
dmesg -a  | ssh -p 2 nlan...@localhost dd
of=/home/nlandys/backup/dmesg
dd if=/dev/ad4 bs=512 count=1 | ssh -p 2 nlan...@localhost dd
of=/home/nlandys/backup/MBR
cat /etc/fstab| ssh -p 2 nlan...@localhost dd
of=/home/nlandys/backup/fstab
dump -0Lan -f - / | gzip  | ssh -p 2 nlan...@localhost dd
of=/home/nlandys/backup/dump0-root.gz
dump -0Lan -f - /tmp | gzip   | ssh -p 2 nlan...@localhost dd
of=/home/nlandys/backup/dump0-tmp.gz
dump -0Lan -f - /var | gzip   | ssh -p 2 nlan...@localhost dd
of=/home/nlandys/backup/dump0-var.gz
dump -0Lan -f - /usr | gzip   | ssh -p 2 nlan...@localhost dd
of=/home/nlandys/backup/dump0-usr.gz

... where port 2 on localhost is a pipe to my remote desktop with
the 500 GB harddrive.  If I missed anything important please let me
know.


The dump man page recommends always using -C with snapshot dumps.

The Handbook has an example of dump over ssh that shows a couple of 
speed optimizations:


http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/backup-basics.html#AEN25817

gzip -2 and bluefish instead of 3des should be faster than the default.

-Warren Block * Rapid City, South Dakota USA___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: print the PKGNAME of a port

2009-10-16 Thread Joerg Pulz


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


On Fri, 16 Oct 2009, Matthias Apitz wrote:



Hello,

For the ports in /usr/ports is there a way to print the resulting
PKGNAME of a given port, like:

# cd /usr/ports/x11/kde3
# make name
kde-3.5.10_2
#


Try the following:

# cd /usr/ports/x11/kde3
# make -V PKGNAME
kde-3.5.10_2
#

also read the manpage of make(1) for detailed information of the -V 
option.


Kind regards
Joerg

- -- 
The beginning is the most important part of the work.

-Plato
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.12 (FreeBSD)

iD8DBQFK2IR8SPOsGF+KA+MRAtgRAJ9roqjLIe0tRKOwf13CEd0xUtihBACgtqIr
tvWxZBTXUE7mE73k/fCv/rU=
=hARq
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: Best procedure for full backup of live system

2009-10-16 Thread Jerry McAllister

On Fri, Oct 16, 2009 at 12:12:56AM -0700, Nerius Landys wrote:

You can do all this though it might be more than needed.   Only
the level 0 dumps are needed.


 Thanks again guys.  My final series of steps to take full backups:
 
 bsdlabel ad4s1| ssh -p 2 nlan...@localhost dd
 of=/home/nlandys/backup/bsdlabel_ad4s1
 dmesg -a  | ssh -p 2 nlan...@localhost dd
 of=/home/nlandys/backup/dmesg
 dd if=/dev/ad4 bs=512 count=1 | ssh -p 2 nlan...@localhost dd
 of=/home/nlandys/backup/MBR
 cat /etc/fstab| ssh -p 2 nlan...@localhost dd
 of=/home/nlandys/backup/fstab
 dump -0Lan -f - / | gzip  | ssh -p 2 nlan...@localhost dd
 of=/home/nlandys/backup/dump0-root.gz
 dump -0Lan -f - /tmp | gzip   | ssh -p 2 nlan...@localhost dd
 of=/home/nlandys/backup/dump0-tmp.gz
 dump -0Lan -f - /var | gzip   | ssh -p 2 nlan...@localhost dd
 of=/home/nlandys/backup/dump0-var.gz
 dump -0Lan -f - /usr | gzip   | ssh -p 2 nlan...@localhost dd
 of=/home/nlandys/backup/dump0-usr.gz
 
 ... where port 2 on localhost is a pipe to my remote desktop with
 the 500 GB harddrive.  If I missed anything important please let me
 know.

Are you clear about what you have to run on the other machine
to receive the data and put it where you want?

jerry

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

A new FreeBSD Project

2009-10-16 Thread Ashley Diamond



Hello the FreeBSD team,


I am attempting to start a new project/private business of which I am  
wiling to give a share in return for skills (mainly as I currently  
have nothing else to offer).


At the core of the project will be a new FreeBSD distribution,  
therefore I need FreeBSD developers,kernel hackers, or anyone who can  
rip apart the OS and put it back together with part missing, and who  
are based in the UK.
I believe this will be an exciting project, that at-least for the  
foreseeable future would be part time; in return for a proportion of  
the business.


I would be extremely grateful if you could forward this to anyone who  
you think would benefit from this email, or anyone's contact details  
who you think could help my cause.



Thank you,

Ashley Diamond
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: Best procedure for full backup of live system

2009-10-16 Thread Polytropon

On Thu, 15 Oct 2009 21:47:57 -0600 (MDT), Warren Block wbl...@wonkity.com 
wrote:
 Just a general note: backup to a hard drive isn't bad, but it's not the 
 same as removable media.  One failure can kill all of your backups...

That's why it's often a good choice two have at least two
hard disks (maybe external ones) for backup, so if one
fails (which seems to be a problem of modern disks
rather than older ones), there's still an intact backup
on the other one (or on one of the others).



 Backup in general is making copies of information 
 you won't need as long as you have a backup of it.a

A wise summary. :-)



 dump(8) doesn't do all sectors, just ones used by the filesystem.
 
 Also, dump doesn't cross filesystems.  In a typical FreeBSD install, /, 
 /var, and /usr are separate filesystems.  A dump of / won't get them all 
 at once.

The dump utility is good when you want to work partition-wise.
If you have a setting where everything goes into a big /, dumping
it will get all data - from that partition. Slices and MBR are
out of dump's scope.



  My server should boot fine with the FreeBSD CDROM (fixit), because it
  uses a subset of the GENERIC kernel device drivers.
 
 If you can, try that before an actual emergency.

Furthermore, it's good to check backups regularly. A defective
backup is NO backup. If data doesn't restore as intended (e. g.
to a testing system), then...?

A situation that many of you surely have come across, as I have:
Operator: The hard disk crashed, we need to restore from backups.
Customer: Of course I have backups! Here!
Customer hands over three tapes.
Operator starts restore with tape #1.
Operator: First tape is through. Good. Next one.
Computer displays rroor reading /dev/nsa0: Tape is defect, cannot read.
Operator: Do you have other set of tapes? This #2 is defective.
Customer: Yes! Tape #3!
Operator: I need a working tape #2.
Customer: BUT I *HAVE* BACKUPS!!!

Testing the backups may take some time, I agree, but it's mostly
worth it - it's worth as much as your data is to you.





-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: Unknown devices

2009-10-16 Thread Polytropon

On Fri, 16 Oct 2009 12:14:29 +0400, Arkady Tokaev tok...@hotmail.com wrote:
 
 Fogot to ask. When I login as a root I see invitation
 sign %, not #. What it means?

The prompt character shows if you are logged in as root or not.
Most shells use $ or % for non-root, and # for root.

Which shell are you using?

% echo $SHELL

If you're using the C shell, make sure there's no overriding
setting in your /root/.cshrc that as something like

set prompt = %

in it - this would override the default # sign. The most
convenient form is to use those two lines in /etc/csh.cshrc
in order to make them available globally:

set promptchars = %#
set prompt = %...@%m:%~%# 

The first line contains the prompting character for non-root
users first, for root next.

The second line forms a comfortable C shell prompt, containing
the user and the hostname, the current working directory and
the prompt character (automatically depending on root or non-root).
It looks like this:

u...@host:/the/current/path% _

or

r...@mysystem:~# _

The user's home directory is shown as ~ so that the directory
element won't be too long.

Keep in mind that if /root/.cshrc exists and contains different
settings, it will override the global defaults.


-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: All in one printer?

2009-10-16 Thread Chris Rees

2009/10/16 Samuel Martín Moro faus...@gmail.com:
 HP printers are quite good indeed, and they've got cheap stuff.
 They provide softs  drivers for linux/unix users.
 Setup is easy.
 What else?


 Samuel Martín Moro
 CamTrace
 {EPITECH.} tek4


Please don't top post, it makes the conversation difficult to follow.


What about Epson printers? They're usually fine with Gutenprint 
CUPS, and my CX3650's scanner works fine. This is a change in 7.2 (I
think) when suddenly they both started being detected, rather than
only one (scanner or printer) being allowed to work at a time.

Chris
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: CMS

2009-10-16 Thread Modulok

On 10/15/09, Paul Schmehl pschmehl_li...@tx.rr.com wrote:
 I manage a couple of FreeBSD servers for a friend.  He's gotten all
 excited about content management and thinks that's the way to go.  The
 system he's familiar with is Windows only.  I've done a little research,
 but I'm wondering if anyone reading the list has experience with a CMS on
 FreeBSD - one that's in ports preferably.

 Pros?  Cons?  Any known security issues?

If it's your server and you're the guy, (or your friends) needing
content management abilities... a simple SSH connection cannot be
beat. But maybe that's not what you had in mind :p
-Modulok-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

讓大腦快速動起來的方法只要 1600元邀請您到 Plurk.com 註冊帳號

2009-10-16 Thread Plurk

我玩 Plurk 好一陣子了，希望你也來試試！

按這裡接受我的邀請：
http://www.plurk.com/pbms1/invite/2

到這裡看看我的個人頁面：
http://www.plurk.com/pbms1

Plurk.com - 您的“線上”人生

_
Opt Out of Plurk emails:
This email was sent in connection with you Plurk.com membership.
To stop receiving emails from Plurk, click this link:
http://www.plurk.com/unsubscribe?bemail=cXVlc3Rpb25zQEZyZWVCU0Qub3Jnkey=726e3e49a5870b1221e960197b8d8eb0

You can contact us at
http://www.plurk.com/contact

Plurk.com, 2425 Matheson Blvd  8th Floor, Suite 813  Mississauga, Ontario  L4W 
5K4  Canada
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: usb key problem

2009-10-16 Thread James Phillips

 Message: 11
 Date: Fri, 16 Oct 2009 01:32:46 +0200
 From: Polytropon free...@edvax.de
 Subject: Re: usb key problem
 To: PJ af.gour...@videotron.ca
 Cc: freebsd-questions@freebsd.org
 Message-ID: 20091016013246.c0e022e5.free...@edvax.de
 Content-Type: text/plain; charset=US-ASCII

 On Thu, 15 Oct 2009 19:18:45 -0400, PJ af.gour...@videotron.ca
 wrote:
  Now that I  have had a few moments to think about
 it, maybe I have to
  give good old cruze and enema and format it under XP
 ... maybe all it
  needs is a clean system on it. ;-)

 I'm not sure if USB sticks tend to degrade
 filesystem-wise,
 but when you put such a stick into random Windows PCs,
 it's
 quite possible that data gets messed up. The most ideal
 solution of course is to simply newfs the stick and give
 it
 a UFS file system, but sadly, Windows PC are resistent
 to
 standards, so they won't read it, but will force you to
 use
 old-fashioned MS-DOS-like file systems. :-)

To be fair, Windows XP supports the NTFS filesystem that is very feature-rich. 
Although, I recall making a XP machine unbootable trying to format removable 
media with NTFS because only the installer woulds use that filesystem. The 
format utility let me choose between Fat16 and FAt32 or something :P

A better tool, under both Windows (via Cygwin) and BSD, would be ntfsprogs.

http://www.linux-ntfs.org/doku.php?id=ntfsmount

Regards,

James Phillips

 -- 
 Polytropon
 Magdeburg, Germany
 Happy FreeBSD user since 4.0
 Andra moi ennepe, Mousa, ...

  __
Yahoo! Canada Toolbar: Search from anywhere on the web, and bookmark your 
favourite sites. Download it now
http://ca.toolbar.yahoo.com.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

GEOM label clarification

2009-10-16 Thread PJ

If I understand correctly from the manual, giving the labels their slice
name (/dev/label/rootfs rather than /dev/ad4s1a) will assure that
regardless of the disk, the boot will be from the disk being booted and
not from another disk as happened to me recently - the fstab on disk ad4
was referncing ad12 so the boot was from ad12 rather than ad4.
The handbook says:
By permanently labeling the partitions on the boot disk, the system
should be able to continue to boot normally, even if the disk is moved
to another controller or transferred to a different system. For this
example, it is assumed that a single ATA disk is used, which is
currently recognized by the system as ad0.
If the disk is moved to another system, it may no longer be ad0... So
will it still boot correctly?

Or should the ufsid labels be used?

Will both of these contortions work?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: GEOM label clarification

2009-10-16 Thread Manolis Kiagias

PJ wrote:
 If I understand correctly from the manual, giving the labels their slice
 name (/dev/label/rootfs rather than /dev/ad4s1a) will assure that
 regardless of the disk, the boot will be from the disk being booted and
 not from another disk as happened to me recently - the fstab on disk ad4
 was referncing ad12 so the boot was from ad12 rather than ad4.
 The handbook says:
 By permanently labeling the partitions on the boot disk, the system
 should be able to continue to boot normally, even if the disk is moved
 to another controller or transferred to a different system. For this
 example, it is assumed that a single ATA disk is used, which is
 currently recognized by the system as ad0.
 If the disk is moved to another system, it may no longer be ad0... So
 will it still boot correctly?

   

In short, yes. I do this routinely all the time.
Assuming of course that the device is connected to a controller that
FreeBSD recognizes.
This should be a non-issue for standard ATA/SATA disks.

 Or should the ufsid labels be used?

   

The ufsid is also an option if you do not wish to create the labels
yourself.
The advantage of user-created labels is that they are not 'cryptic' like
the ufsid ones
and you may actually remember them :)

 Will both of these contortions work?
   

Yes, both will do.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: All in one printer?

2009-10-16 Thread Patrick Lamaiziere

Le Fri, 16 Oct 2009 13:45:39 +0200,
Patrick Lamaiziere patf...@davenulle.org a écrit :

 I'm looking for an all in one printer (scanner + printer).

Thanks guys, so I bought today a HP PhotoSmart C4680 all in one.

It mostly works fine (printing and scanning) out of the box. I ran into
issues with the hplip tools (hp-setup, ...) because they use the user
locale when connecting to cups (here ISO-8859-15). Cups rejects this. I
have to set my locale to LC_ALL=C.

It looks ok with this work-around. I'm able to use the hp-systray tool.

Also I'm not able to start hpssd (hplip3) and it says nothing (no
errors...)?





___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: CMS

2009-10-16 Thread Paul Schmehl


--On Friday, October 16, 2009 11:27:12 -0500 Modulok modu...@gmail.com wrote:



On 10/15/09, Paul Schmehl pschmehl_li...@tx.rr.com wrote:

I manage a couple of FreeBSD servers for a friend.  He's gotten all
excited about content management and thinks that's the way to go.  The
system he's familiar with is Windows only.  I've done a little research,
but I'm wondering if anyone reading the list has experience with a CMS on
FreeBSD - one that's in ports preferably.

Pros?  Cons?  Any known security issues?


If it's your server and you're the guy, (or your friends) needing
content management abilities... a simple SSH connection cannot be
beat. But maybe that's not what you had in mind :p


YeahI'm not the content guy.  I'm the server admin.  I'm also not the ower. 
The owner likes CMS products since he's now using one, and wants to install the 
one he uses on his server.  But the one he uses is only for Windows.  Thus the 
question.


--
Paul Schmehl, Senior Infosec Analyst
As if it wasn't already obvious, my opinions
are my own and not those of my employer.
***
It is as useless to argue with those who have
renounced the use of reason as to administer
medication to the dead. Thomas Jefferson

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: usb key problem

2009-10-16 Thread Polytropon

On Fri, 16 Oct 2009 11:05:01 -0700 (PDT), James Phillips 
anti_spam...@yahoo.ca wrote:
 To be fair, Windows XP supports the NTFS filesystem that is
 very feature-rich.

And prone to file system corruption, as well as not very
performant speed-wise (which doesn't count in regards of
backups). :-)



 Although, I recall making a XP machine unbootable trying
 to format removable media with NTFS because only the
 installer woulds use that filesystem. The format utility
 let me choose between Fat16 and FAt32 or something :P

What a bug... erm, feature! :-)


 A better tool, under both Windows (via Cygwin) and BSD, would be ntfsprogs.
 
 http://www.linux-ntfs.org/doku.php?id=ntfsmount

Yes, FreeBSD let's you even mount NTFS volumes via smbfs,
so you don't have to care for the file system used. This
is because Windows does not support standard NFS out of
the box. This way would be interesting if your machine that
holds the backup files is a Windows PC.

As far as I know, there's a fuse module (ntfs3g?) in the
ports. But I have to admit that I've never tried it.



-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: Security blocking question

2009-10-16 Thread Aflatoon Aflatooni

 Aflatoon Aflatooni wrote:
  Is there a way that I could configure the server so that if there are for 
  example X attempts from an IP address then for the next Y hours all the 
  SSH 
 requests would be ignored from that IP address? There are only a handful of 
 people who have access to that server.
  
  Yes.
  
  In pf.conf:
  
  table persist
  
  [...]
  
  block drop in log quick on $ext_if from 
  [...]
  
  pass in on $ext_if proto tcp      \
     from any to $ext_if port ssh \
     flags S/SA keep state        \
     (max-src-conn-rate 3/30, overload flush global)
  
  plus you'll need to add a cron job to clear old entries out of the 
 ssh-bruteforce
  table after a suitable amount of time has passed.  Use expiretable to do
  that.  Note: in practice I've found that it's a *really good idea* to 
 implement a SSH whitelist of addresses that will never be bruteforce blocked 
 like this -- it's very easy to lock yourself out even if everything you're 
 doing 
 is entirely legitimate.  Coding that is left as an exercise for the reader.
  
  
  What is the best way of testing the PF rule? Is there a quick way to mimic 
  a 
 brute force? Is there a way that I could review the content of the table 
 through 
 pfctl -s all
 
 To test, you need access to a machine not in your whitelist from where you
 can try ssh'ing into the protected machine several times in rapid sequence.
 3 times in 30s sounds quite fast, but it is actually not to hard to achieve
 accidentally, especially if you use tools like rsync over SSH transport.  You
 should have a login concurrently from some other IP or on the console, 
 otherwise
 you will lock yourself out.
 
 To see what IPs have been added to the ssh-bruteforce table and when and what
 traffic has been blocked:
 
   # pfctl -vv -t ssh-bruteforce -T show
 
 To manually delete an IP from the ssh-bruteforce table:
 
   # pfctl -t ssh-bruteforce -T delete 12.34.56.78
 
 As noted elsewhere in this thread, instead of using expiretable, you can run 
 this
 out of cron to expire addresses over a day old from the ssh-bruteforce 
 blocklist:
 
   # pfctl -t ssh-bruteforce -T expire 86400
 
 The pfctl(8) man page is pretty illuminating.
 
     Cheers,
 
     Matthew
 

Thanks,
I have the following in my pf.conf:

ext_if=bge0
# Public Services --  smtp, http, pop3s
tcpPubServices = { 25, 80, 995 }
set timeout { interval 10, frag 30 }
set timeout { tcp.first 120, tcp.opening 30, tcp.established 86400 }
set timeout { tcp.closing 900, tcp.finwait 45, tcp.closed 90 }
set limit { states 1, frags 5000 }
#set loginterface none
set optimization normal
set block-policy drop
#set require-order yes
#set fingerprints /etc/pf.os
set skip on lo0
# Normalization: reassemble fragments and resolve or reduce traffic ambiguities.
scrub in all

pass out all
block in log all
table sshBruteForce { }
block in quick from sshBruteForce to any
pass in on $ext_if inet proto tcp from any to any port $tcpPubServices flags 
S/SA synproxy state
pass in on $ext_if inet proto tcp from any to any port ssh modulate state 
(source-track rule max-src-nodes 8 max-src-conn 8 max-src-conn-rate 3/60 
overload sshBruteForce flush global)


And I have tried to make a lot of ssh connections to the box and killing them 
with ctrl-c or bad-password but nothing gets added to the table. There isn't 
anything in the log either. How would I go about figuring out what is wrong?

Thanks



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: GEOM label clarification

2009-10-16 Thread PJ

Manolis Kiagias wrote:
 PJ wrote:
   
 If I understand correctly from the manual, giving the labels their slice
 name (/dev/label/rootfs rather than /dev/ad4s1a) will assure that
 regardless of the disk, the boot will be from the disk being booted and
 not from another disk as happened to me recently - the fstab on disk ad4
 was referncing ad12 so the boot was from ad12 rather than ad4.
 The handbook says:
 By permanently labeling the partitions on the boot disk, the system
 should be able to continue to boot normally, even if the disk is moved
 to another controller or transferred to a different system. For this
 example, it is assumed that a single ATA disk is used, which is
 currently recognized by the system as ad0.
 If the disk is moved to another system, it may no longer be ad0... So
 will it still boot correctly?

   
 

 In short, yes. I do this routinely all the time.
 Assuming of course that the device is connected to a controller that
 FreeBSD recognizes.
 This should be a non-issue for standard ATA/SATA disks.

   
 Or should the ufsid labels be used?

   
 

 The ufsid is also an option if you do not wish to create the labels
 yourself.
 The advantage of user-created labels is that they are not 'cryptic' like
 the ufsid ones
 and you may actually remember them :)

   
 Will both of these contortions work?
   
 

 Yes, both will do.

   
Thanks for the reassurance. Now to start labelling. Uh.. I guess that
means that if I label 1 disk and then clone it to several others, they
wil  all work from any system... Well, I guess I'll try it. Thanks again.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: CMS

2009-10-16 Thread DAve


Paul Schmehl wrote:
--On Friday, October 16, 2009 11:27:12 -0500 Modulok modu...@gmail.com 
wrote:




On 10/15/09, Paul Schmehl pschmehl_li...@tx.rr.com wrote:

I manage a couple of FreeBSD servers for a friend.  He's gotten all
excited about content management and thinks that's the way to go.  The
system he's familiar with is Windows only.  I've done a little research,
but I'm wondering if anyone reading the list has experience with a 
CMS on

FreeBSD - one that's in ports preferably.

Pros?  Cons?  Any known security issues?


If it's your server and you're the guy, (or your friends) needing
content management abilities... a simple SSH connection cannot be
beat. But maybe that's not what you had in mind :p


YeahI'm not the content guy.  I'm the server admin.  I'm also not 
the ower. The owner likes CMS products since he's now using one, and 
wants to install the one he uses on his server.  But the one he uses is 
only for Windows.  Thus the question.




It is my opinion that they (CMSs) are nearly to the point it will take a 
quadcore CPU and 4GB or memory to serve a single html page containing 
the words Hello World. Code light, they are not.


My experience with CMS such as Joomla, SurgarCRM, etc is that they are 
to crackers as a lone lightbulb in the forest is to bugs.


- Keep them up to date.

- Subscribe to, and be attentive to, their security mailings.

- If you do not use a feature/module, remove it.

- Do not under any circumstances install PhpMyAdmin. My logs show if a 
IP gets a hit on a CMS page, they immediately search for PhpMyAdmin 
next. If you must install it, install it on another machine or under a 
different domain. Then turn access on and off at the SQL server when needed.


We have a few CMSs that I could not talk Sales out of, two have had 
problems. One was moved to it's on VPS because of issues.


Best of luck.

DAve

--
Posterity, you will know how much it cost the present generation to
preserve your freedom.  I hope you will make good use of it.  If you
do not, I shall repent in heaven that ever I took half the pains to
preserve it. John Quincy Adams

http://appleseedinfo.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: GEOM label clarification

2009-10-16 Thread Manolis Kiagias

PJ wrote:
 Manolis Kiagias wrote:
   
 PJ wrote:
   
 
 If I understand correctly from the manual, giving the labels their slice
 name (/dev/label/rootfs rather than /dev/ad4s1a) will assure that
 regardless of the disk, the boot will be from the disk being booted and
 not from another disk as happened to me recently - the fstab on disk ad4
 was referncing ad12 so the boot was from ad12 rather than ad4.
 The handbook says:
 By permanently labeling the partitions on the boot disk, the system
 should be able to continue to boot normally, even if the disk is moved
 to another controller or transferred to a different system. For this
 example, it is assumed that a single ATA disk is used, which is
 currently recognized by the system as ad0.
 If the disk is moved to another system, it may no longer be ad0... So
 will it still boot correctly?

   
 
   
 In short, yes. I do this routinely all the time.
 Assuming of course that the device is connected to a controller that
 FreeBSD recognizes.
 This should be a non-issue for standard ATA/SATA disks.

   
 
 Or should the ufsid labels be used?

   
 
   
 The ufsid is also an option if you do not wish to create the labels
 yourself.
 The advantage of user-created labels is that they are not 'cryptic' like
 the ufsid ones
 and you may actually remember them :)

   
 
 Will both of these contortions work?
   
 
   
 Yes, both will do.

   
 
 Thanks for the reassurance. Now to start labelling. Uh.. I guess that
 means that if I label 1 disk and then clone it to several others, they
 wil  all work from any system... Well, I guess I'll try it. Thanks again.


   
How are going to clone it? Will the clone also  copy the labels?
For example, if doing a dump / restore (which I often do) I recreate the
partitions manually, newfs them, label them and then restore the
contents. In many cases I use a live (Fixit) system for this.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: GEOM label clarification

2009-10-16 Thread PJ

Manolis Kiagias wrote:
 PJ wrote:
   
 Manolis Kiagias wrote:
   
 
 PJ wrote:
   
 
   
 If I understand correctly from the manual, giving the labels their slice
 name (/dev/label/rootfs rather than /dev/ad4s1a) will assure that
 regardless of the disk, the boot will be from the disk being booted and
 not from another disk as happened to me recently - the fstab on disk ad4
 was referncing ad12 so the boot was from ad12 rather than ad4.
 The handbook says:
 By permanently labeling the partitions on the boot disk, the system
 should be able to continue to boot normally, even if the disk is moved
 to another controller or transferred to a different system. For this
 example, it is assumed that a single ATA disk is used, which is
 currently recognized by the system as ad0.
 If the disk is moved to another system, it may no longer be ad0... So
 will it still boot correctly?

   
 
   
 
 In short, yes. I do this routinely all the time.
 Assuming of course that the device is connected to a controller that
 FreeBSD recognizes.
 This should be a non-issue for standard ATA/SATA disks.

   
 
   
 Or should the ufsid labels be used?

   
 
   
 
 The ufsid is also an option if you do not wish to create the labels
 yourself.
 The advantage of user-created labels is that they are not 'cryptic' like
 the ufsid ones
 and you may actually remember them :)

   
 
   
 Will both of these contortions work?
   
 
   
 
 Yes, both will do.

   
 
   
 Thanks for the reassurance. Now to start labelling. Uh.. I guess that
 means that if I label 1 disk and then clone it to several others, they
 wil  all work from any system... Well, I guess I'll try it. Thanks again.


   
 
 How are going to clone it? Will the clone also  copy the labels?
 For example, if doing a dump / restore (which I often do) I recreate the
 partitions manually, newfs them, label them and then restore the
 contents. In many cases I use a live (Fixit) system for this.
   
I'm looking into that just now.
I am playing with two disks... one is 80gb sata on USB... and the second
is 250Gb sata on USB.
I had tried to set them up with livefs but the 80Gb is all wrong... I
usually set up 2Gb on /, 3Gb on swap, 2gb on /tmp, 2gb on /var and 50gb
on /usr . But I just newfsd the partitions on the 80gb and found that
the da0s1d was 50gb which doesn't make sense as I had set it for 2gb and
d should have been /tmp, e = /var, f= usr and g=/home. That explains why
I ran out of space when trying to restore to the disk.
So now I'm going to try to redo the disk manually with fdisk, bsdlabel
and newfs. We'll see...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: Security blocking question

2009-10-16 Thread Matthew Seaman


Aflatoon Aflatooni wrote:


I have the following in my pf.conf:

ext_if=bge0
# Public Services --  smtp, http, pop3s
tcpPubServices = { 25, 80, 995 }
set timeout { interval 10, frag 30 }
set timeout { tcp.first 120, tcp.opening 30, tcp.established 86400 }
set timeout { tcp.closing 900, tcp.finwait 45, tcp.closed 90 }
set limit { states 1, frags 5000 }
#set loginterface none
set optimization normal
set block-policy drop
#set require-order yes
#set fingerprints /etc/pf.os
set skip on lo0
# Normalization: reassemble fragments and resolve or reduce traffic ambiguities.
scrub in all

pass out all
block in log all
table sshBruteForce { }


^^^ this needs to be 'table sshBruteForce persist' or the OS will delete it
   if it's empty.


block in quick from sshBruteForce to any
pass in on $ext_if inet proto tcp from any to any port $tcpPubServices flags 
S/SA synproxy state
pass in on $ext_if inet proto tcp from any to any port ssh modulate state 
(source-track rule max-src-nodes 8 max-src-conn 8 max-src-conn-rate 3/60 overload 
sshBruteForce flush global)


And I have tried to make a lot of ssh connections to the box and killing them 
with ctrl-c or bad-password but nothing gets added to the table. There isn't 
anything in the log either. How would I go about figuring out what is wrong?


Usually if you leave your machine connected to the internet, some awfully
helpful people in China or some other far off place will test it for you
within a day or so...

Cheers,

Matthew

--
Dr Matthew J Seaman MA, D.Phil.   7 Priory Courtyard
 Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
 Kent, CT11 9PW



signature.asc
Description: OpenPGP digital signature

Re: All in one printer?

2009-10-16 Thread Patrick Lamaiziere

Le Fri, 16 Oct 2009 20:52:47 +0200,
Patrick Lamaiziere patf...@davenulle.org a écrit :

 Thanks guys, so I bought today a HP PhotoSmart C4680 all in one.
 
 It mostly works fine (printing and scanning) out of the box.

Hmmm, in fact no. There are some problems on printing (missing part).


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

small question about tape-based dumps

2009-10-16 Thread Stevan Tiefert

Hello list,

one example: If I have three partitions and I want to backup every day
these partitions, will I need 21 tapes?

I ask because it seems it is not possible to place more than one dump on
one tape, isn't it?

With regards
Stevan Tiefert



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: GEOM label clarification

2009-10-16 Thread PJ

NOW THIS SUCKS.

SUM

# glabel label rootfs/dev/ad12s1a
glabel: Can't store metadata on /dev/ad12s1a: Operation not permitted

This is direct from the manual what the $#*(@)! is going on?
No identical post on web, but similar say to ignore: it's harmless?

I so, why is it there?

There seem to be quite a lot of these kinds of stumbling blocks that are
just plalin annoying...

Is this an annoyance or what for the above situation?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: small question about tape-based dumps

2009-10-16 Thread Jerry McAllister

On Fri, Oct 16, 2009 at 11:13:21PM +0200, Stevan Tiefert wrote:

 Hello list,
 
 one example: If I have three partitions and I want to backup every day
 these partitions, will I need 21 tapes?
 
 I ask because it seems it is not possible to place more than one dump on
 one tape, isn't it?

You can easily put more than one dump on a tape if there is
room enough for them.   Check out the  mt(1)  command.

Something like   mt fsf 1will skip over the first dump file
so you can write the second.mt fsf 2   will skip over two files, etc.
That is dump files, not files within the dump.   Each dump of a
filesystem is one file.  

If you need to restore, it is just the same.   The first dump is
the first file.  The second dump is reached by skipping 1 file
with the mt command, etc.

I actually rewind and skip between each dump of multiples made
to the same tape.   I also use the no-rewind device for the tape.

So first dump is:dump 0af /dev/nsa0 /

For second dump: mt -f /dev/nsa0 rewind
 mt -f /dev/nsa0 fsf 1
 dump 0af /dev/nsa0 /usr

thirdmt -f /dev/nsa0 rewind
 mt -f /dev/nsa0 fsf 2
 dump 0af /dev/nsa0 /var

etc.

when all donemt -f /dev/nsa0 rewind
 mt -f /dev/nsa0 offline

I have this all in a script that also writes an index file
as the first file on the tape. 

Of course if you are doing a change dump the dump command is
going to look more like:

 dump 1af /dev/nsa0
etc.

jerry
  
 
 With regards
 Stevan Tiefert
 
 
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: GEOM label clarification

2009-10-16 Thread Manolis Kiagias

PJ wrote:
 NOW THIS SUCKS.

 SUM

 # glabel label rootfs/dev/ad12s1a
 glabel: Can't store metadata on /dev/ad12s1a: Operation not permitted

 This is direct from the manual what the $#*(@)! is going on?
 No identical post on web, but similar say to ignore: it's harmless?

 I so, why is it there?

 There seem to be quite a lot of these kinds of stumbling blocks that are
 just plalin annoying...

 Is this an annoyance or what for the above situation?

   

Is this your normal '/' filesystem, and is it mounted?
If it is reboot your system and select 'single user mode' from the
loader.menu
Then use glabel in the single user mode prompt.
This will not work if you just 'shutdown now', you have to reboot into
single user mode.

If it is not your real '/' at the moment, and it is not mounted, you
should be able to do it.
Booting from the fixit LiveCD will also work in any case.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: small question about tape-based dumps

2009-10-16 Thread Stevan Tiefert

Am Freitag, den 16.10.2009, 17:37 -0400 schrieb Jerry McAllister:
 On Fri, Oct 16, 2009 at 11:13:21PM +0200, Stevan Tiefert wrote:
 
  Hello list,
  
  one example: If I have three partitions and I want to backup every day
  these partitions, will I need 21 tapes?
  
  I ask because it seems it is not possible to place more than one dump on
  one tape, isn't it?
 
 You can easily put more than one dump on a tape if there is
 room enough for them.   Check out the  mt(1)  command.
 
 Something like   mt fsf 1will skip over the first dump file
 so you can write the second.mt fsf 2   will skip over two files, etc.
 That is dump files, not files within the dump.   Each dump of a
 filesystem is one file.  
 
 If you need to restore, it is just the same.   The first dump is
 the first file.  The second dump is reached by skipping 1 file
 with the mt command, etc.
 
 I actually rewind and skip between each dump of multiples made
 to the same tape.   I also use the no-rewind device for the tape.
 
 So first dump is:dump 0af /dev/nsa0 /
 
 For second dump: mt -f /dev/nsa0 rewind
  mt -f /dev/nsa0 fsf 1
  dump 0af /dev/nsa0 /usr
 
 thirdmt -f /dev/nsa0 rewind
  mt -f /dev/nsa0 fsf 2
  dump 0af /dev/nsa0 /var
 
 etc.
 
 when all donemt -f /dev/nsa0 rewind
  mt -f /dev/nsa0 offline
 
 I have this all in a script that also writes an index file
 as the first file on the tape. 
 
 Of course if you are doing a change dump the dump command is
 going to look more like:
 
  dump 1af /dev/nsa0
 etc.
 
 jerry
   
  
  With regards
  Stevan Tiefert
  
  
  
  ___
  freebsd-questions@freebsd.org mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
 

Hello Jerry,

The world can be so easy!!! Thanks for this hint :-)

With regards
Stevan Tiefert



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: GEOM label clarification

2009-10-16 Thread PJ

Manolis Kiagias wrote:
 PJ wrote:
   
 NOW THIS SUCKS.

 SUM

 # glabel label rootfs/dev/ad12s1a
 glabel: Can't store metadata on /dev/ad12s1a: Operation not permitted

 This is direct from the manual what the $#*(@)! is going on?
 No identical post on web, but similar say to ignore: it's harmless?

 I so, why is it there?

 There seem to be quite a lot of these kinds of stumbling blocks that are
 just plalin annoying...

 Is this an annoyance or what for the above situation?

   
 

 Is this your normal '/' filesystem, and is it mounted?
 If it is reboot your system and select 'single user mode' from the
 loader.menu
 Then use glabel in the single user mode prompt.
 This will not work if you just 'shutdown now', you have to reboot into
 single user mode.

 If it is not your real '/' at the moment, and it is not mounted, you
 should be able to do it.
 Booting from the fixit LiveCD will also work in any case.

   
I appreciate your holding my hand as I will otherwise fall on my ass
or off my donkey... whatever... I need a big stiff drink...it's been a
heady week...
I already tried, screwed up the fstab, fixed it and booted up just fine.
Don't want to screw it up again. See my bithing in another post...
you'll understand how reading the manuals and man pages can be
depressing. Shit, shit, shit.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: usb key problem

2009-10-16 Thread PJ

Polytropon wrote:
 On Thu, 15 Oct 2009 20:06:08 -0400, PJ af.gour...@videotron.ca wrote:
   
 Anyway, I found the solution on the web... couldn't belive it was that
 simple: just ignore the crap spewed out on the screen and just mount iit
 as you would any other disk.
 # mount  -t msdosfs /dev/da0s1 /mnt
 and that's it
 

 Additionally, when you use mount_msdosfs, you can specify
 masks (-m and -M) in order not to have +x attributes on all
 the files; the MS-DOS file system on the stick could give
 you unwanted results, for example if you have a .jpg file
 on the stick and want to open it (with the default app for
 .jpg file type), the system will try to execute it.



   
 Now to see how I can use it to restore stuff. :-D
 

 If you want to use the stick for FreeBSD operations, why not
 give it a real file system (i. e. UFS) instead of some old
 FAT? You can simply

   # newfs /dev/da0

 and then access it in the standard way:

   # mount /dev/da0 /mnt

 See that file owner:group, permissions and flags are now
 supported, and files that are not supposed to be executables
 don't have +x attribute (as in opposite to FAT / msdosfs).

 You could even add an entry in /etc/fstab like this:

   /dev/da0s1 /media/stick msdosfs rw,noauto,noatime 0 0

 or, for proper UFS:

   /dev/da0 /media/stick ufs rw,noauto,noatime 0 0

 Keep in mind that when using device names, it's a matter of
 in which sequence device are detected that result in the
 corresponding device name (da0, da1 etc.); using labels is
 the more elegant way here.
   
How do you mean, using labels; could you illustrate or clarify? for the above, 
I mean.

I'm trying to set up labels for my normal systems with glabel and struggling...


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

I hate to bitch but bitch I must

2009-10-16 Thread PJ

Why is it that the manual pages, as thorough as they may be, are very,
very confusing.
Perhaps I am being too wary, but I find that too many
instructions/examples are stumbling blocks to appreciation of the whole
system:
for instance, let's look at the instructions for changing disk labels
with glabel or is it tunefs ?
man glabel(8):

for UFS the file system label is set with
tunefs(8)
http://www.freebsd.org/cgi/man.cgi?query=tunefssektion=8apropos=0manpath=FreeBSD+7.2-RELEASE.
what happened to glabel?
man tunefs(8)
The *tunefs* utility cannot be
run on an active file system. To change an active file system, it must
be downgraded to read-only or unmounted.

So, you have to run tunefs from an active file system to modify another
disk?
but from man tunefs:
BUGS
This utility should work on active file systems.
What in hades does this mean--just above it says cannot be run on active
file systems. ???
To change the root file
system, the system must be rebooted after the file system is tuned.

You can tune a file system, but you cannot tune a fish.
How cute... And fish eat bugs.

Seriously, now to the manual:
To create a permanent label for a UFS2 file system without destroying
any data, issue the following command:
# tunefs -L /home/ /dev/da3

Oh? home is what? What does this have to do with the partitions?
Here's from man glabel(8):

EXAMPLES
The following example shows how to set up a label for disk ``da2'', cre-
ate a file system on it, and mount it:
glabel label -v usr /dev/da2
newfs /dev/label/usr
mount /dev/label/usr /usr
[...]
umount /usr
glabel stop usr
glabel unload

The next example shows how to set up a label for a UFS file system:
tunefs -L data /dev/da4s1a
mount /dev/ufs/data /mnt/data

Am I to understand that glabel is only for a new system? What's with the
newfs... I'm trying to set labels on an system that is already set up.
And, the glabel examle above is not for UFS file systems? Oh, that's for
tunefs?
So why are we even dealing with this glabel?

from manual:
# tunefs -L /home/ //dev/da3/
A label should now exist in /dev/ufs which may be added to /etc/fstab:
/dev/ufs/home /home ufs rw 2 2

Why? Is this necessary? and somewhere I saw tunefs -L volume
/dev/da0s1a or something like that. Does that mean that each partition
should be tunefsd? Maybe the guys who programmed this stuff understand;
I sure don't. I just want to be able to set the labels according to what
they say can be done... so shy not have a clear and concise explanation?

Do people who write this stuff ever read it? Tell me that its clear and
simple and to the point... so far, I have been running back and forth
between half a dozen web pages trying to understand what is going on...
and doing things through a dense fog does not produce creative results!
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

80 matches

Mail list logo