Installing X11 gives perl version conflict

[Dieter BSD]

FreeBSD 8.2
amd64

Attempting to install X11 server.

Attempt to install package xf86-video-fbdev-0.4.2.tbz
gives conflict between perl-5.10.1_3 and perl-5.12.3
even when installing into clean directory tree.


# mkdir /tmp/test_pkg_install
# export PKG_DBDIR=/tmp/test_pkg_install/var/db/pkg
# pkg_add -P /tmp/test_pkg_install/   xf86-video-fbdev-0.4.2.tbz


Note that some of the standard modules are provided as separate
ports since they require extra dependencies:

bsddb           databases/py-bsddb
gdbm            databases/py-gdbm
sqlite3         databases/py-sqlite3
tkinter         x11-toolkits/py-tkinter

Install them as needed.


Removing stale symlinks from /usr/bin...
    Removing /usr/bin/perl
    Removing /usr/bin/perl5
Done.
Creating various symlinks in /usr/bin...
    Symlinking /tmp/test_pkg_install//bin/perl5.12.3 to /usr/bin/perl
    Symlinking /tmp/test_pkg_install//bin/perl5.12.3 to /usr/bin/perl5
Done.
Cleaning up /etc/make.conf... Done.
Spamming /etc/make.conf... Done.
Cleaning up /etc/manpath.config... Done.
Spamming /etc/manpath.config... Done.
Running fc-cache to build fontconfig cache...
Fontconfig error: Cannot load default config file
/usr/local/lib/X11/fonts: caching, new cache contents: 0 fonts, 1 dirs
/usr/local/lib/X11/fonts/local: caching, new cache contents: 0 fonts, 0 dirs
/var/db/fontconfig: cleaning cache directory
fc-cache: succeeded


*
Although libxcb can yield dramatic improvements in speed,
memory footprint, and responsiveness, and will probably
become the default Xlib for X.org/freedesktop.org, it is
still experimental software.  Some broken callers will abort()
on locking assertion failures.  As a temporary workaround, set
LIBXCB_ALLOW_SLOPPY_LOCK in your environment to skip the abort().
This may result in noisy stacktrace printing.
*

pkg_add: package 'perl-5.10.1_3' conflicts with perl-5.12.3
pkg_add: please use pkg_delete first to remove conflicting package(s) or -f to 
force installation
pkg_add: autoload of dependency 
'/ro/dist/freebsd/freebsd_8.2/amd64/packages/perl-5.10.1_3.tbz' failed!
pkg_add: autoload of dependency 
'/ro/dist/freebsd/freebsd_8.2/amd64/packages/glib-2.26.1_1.tbz' failed!
pkg_add: package 'perl-5.10.1_3' conflicts with perl-5.12.3
pkg_add: please use pkg_delete first to remove conflicting package(s) or -f to 
force installation
pkg_add: autoload of dependency 
'/ro/dist/freebsd/freebsd_8.2/amd64/packages/perl-5.10.1_3.tbz' failed!
pkg_add: package 'perl-5.10.1_3' conflicts with perl-5.12.3
pkg_add: please use pkg_delete first to remove conflicting package(s) or -f to 
force installation
pkg_add: autoload of dependency 
'/ro/dist/freebsd/freebsd_8.2/amd64/packages/perl-5.10.1_3.tbz' failed!
pkg_add: autoload of dependency 
'/ro/dist/freebsd/freebsd_8.2/amd64/packages/glib-2.26.1_1.tbz' failed!
pkg_add: autoload of dependency 
'/ro/dist/freebsd/freebsd_8.2/amd64/packages/gamin-0.1.10_4.tbz' failed!

...


Hiding perl-5.10.1_3 from pkg_add doesn't work:

pkg_add: could not find package perl-5.10.1_3 !

Hiding perl-5.12.3 from pkg_add doesn't work:

pkg_add: could not find package perl-5.12.3 !
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Dual Boot 8.2 and Windows 7

[doug]

I installed 8.2 from the DVD ISO. This install overwrote the MBR even though I 
selected not to write a boot record. Using the repair disk and/or bootrec does 
not work.


The answer is found in 
http://www.sevenforums.com/tutorials/105541-startup-repair-run-3-separate-times.html.


Basically you use diskpart to make sure that only the windows partition is 
marked active and then run the Startup Repair process 3 times. This is the only 
option that worked for me.




_
Douglas Denault
http://www.safeport.com
d...@safeport.com
Voice: 301-217-9220
  Fax: 301-217-9277
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: freebsd list admins?

[Randy Pratt]

On Thu, 23 Jun 2011 22:14:55 -0400
Robert Simmons  wrote:

> On Thursday, June 23, 2011 08:10:29 PM Randy Pratt wrote:
> > I don't think making a list writable only to subscribers solves
> > anything since it seems the spammers are already subscribed.  This only
> > makes it difficult for others like myself who read the lists online and
> > only post occasionally.
> 
> Making it writable to subscribers only in-and-of-itself does not solve the 
> problem, but it is one of two things together that will fix the repeated 
> spammer problem. The second is removing and banning offenders. Without making 
> the list subscriber only there is no way to get rid of spammers. 
> Additionally, 
> for your situation, you can filter everything from the list to /dev/null.

I've been reading these lists for over 13 years, seen this discussion
many times, and the list remained open.  There were reasons for that
which are in the archives if you're interested.

I'm no longer an active committer so whatever @core decides is fine
with me.  I, however, would prefer to see it remain open.  

I'm done with this potentially endless discussion.

Randy
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: freebsd list admins?

[Robert Simmons]

On Thursday, June 23, 2011 08:10:29 PM Randy Pratt wrote:
> I don't think making a list writable only to subscribers solves
> anything since it seems the spammers are already subscribed.  This only
> makes it difficult for others like myself who read the lists online and
> only post occasionally.

Making it writable to subscribers only in-and-of-itself does not solve the 
problem, but it is one of two things together that will fix the repeated 
spammer problem. The second is removing and banning offenders. Without making 
the list subscriber only there is no way to get rid of spammers. Additionally, 
for your situation, you can filter everything from the list to /dev/null.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Problem with web video

[Warren Block]

On Thu, 23 Jun 2011, Carmel wrote:


I have been fighting a losing battle trying to get video to display
with Firefox. I just updated to the latest version 5;however, it still
does not work. This is on a FreeBSD-8.2 system.

As an example, the following URL does not display the video or even the
portion where one would usually click on to start the video.

http://front.moveon.org/bill-maher-if-our-policy-is-yeehaw-jesus-takes-the-wheel-were-dead-already/

This site works fine with IE-9 & Windows 7, so I know it does work. As
far as I can tell, I have all of the required packages installed.


Works here with FreeBSD 8.2, i386, FF5, Flash installed as per the 
Handbook.


http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/desktop-browsers.html#MOZ-FLASH-PLUGIN
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: freebsd list admins?

[C. P. Ghost]

On Tue, Jun 21, 2011 at 1:44 PM, Jerry  wrote:
> It is my personal view that FreeBSD-Questions should be consolidated
> into the chat forum. Chat forums are rarely moderated and tend to be
> open to the general public.

Some of us have workflows that favor e-mail over those newfangled web
forums for reasons well beyond this thread. Please leave questions@
as it is. It is good enough, IMHO, and one of the better communities
out there in terms of technical knowledge and friendliness w.r.t. all
sorts of questions.

Oh, and as to many users not posting in a more focused manner
to -stable@, -current@, -hackers@ etc..., the reason is quite simple:
many issues are common to all branches, and there isn't a -common@
mailing list to address them. So questions@ is a pretty good catch-all
for those general questions, and not just for newbies.

-cpghost.

-- 
Cordula's Web. http://www.cordula.ws/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: freebsd list admins?

[Randy Pratt]

On Wed, 22 Jun 2011 00:03:23 +0200
"Julian H. Stacey"  wrote:

> Hi questions@
> 
> > Robert Simmons articulated:
> > > There
> > > seems to be a few email addresses that are subscribed to these lists
> > > that keep spamming it periodically,



> I think we should: 
>   make questions@ list writable only to subscribers (if not already); &
>   Edit /usr/src/etc/motd  eg:
> OLD   If you still have a question or problem, please take the output of
> OLD   `uname -a', along with any relevant error messages, and email it
> OLD   as a question to the questi...@freebsd.org mailing list. 

I don't think making a list writable only to subscribers solves
anything since it seems the spammers are already subscribed.  This only
makes it difficult for others like myself who read the lists online and
only post occasionally.  

Just my 0.02.

Randy

(Apologies if snipping irrelevant text makes it hard to identify
original posters).

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Problem with web video

[Chuck Swiger]

On Jun 23, 2011, at 4:51 PM, Carmel wrote:
> I have been fighting a losing battle trying to get video to display
> with Firefox. I just updated to the latest version 5;however, it still
> does not work. This is on a FreeBSD-8.2 system.
> 
> As an example, the following URL does not display the video or even the
> portion where one would usually click on to start the video.
> 
> http://front.moveon.org/bill-maher-if-our-policy-is-yeehaw-jesus-takes-the-wheel-were-dead-already/

That's Flash content.  Adobe supports Windows, MacOSX, Linux, and Solaris
(from http://get.adobe.com/flashplayer/otherversions ).

If it is important to you that Flash works well, you should either persuade
Adobe to provide a FreeBSD version, or you should switch to using one of the
platforms on which Flash is supported.

Regards,
-- 
-Chuck

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Problem with web video

[Carmel]

I have been fighting a losing battle trying to get video to display
with Firefox. I just updated to the latest version 5;however, it still
does not work. This is on a FreeBSD-8.2 system.

As an example, the following URL does not display the video or even the
portion where one would usually click on to start the video.

http://front.moveon.org/bill-maher-if-our-policy-is-yeehaw-jesus-takes-the-wheel-were-dead-already/

This site works fine with IE-9 & Windows 7, so I know it does work. As
far as I can tell, I have all of the required packages installed.

-- 
Carmel ✌
carmel...@hotmail.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: can't build graphics/xfig-3.2.5b on 8.2-STABLE nordatabases/p5-DBD-Oracle with lang/perl5.14

[kcrhyst]

Ok
Ce message a été envoyé depuis un terminal BlackBerry de Bouygues Telecom

-Original Message-
From: William Bulley 
Sender: owner-freebsd-questi...@freebsd.org
Date: Thu, 23 Jun 2011 12:39:17 
To: 
Cc: 
Subject: can't build graphics/xfig-3.2.5b on 8.2-STABLE nor
databases/p5-DBD-Oracle with lang/perl5.14

First there is the xfig issue:

No matter what the setting is for I18N (WITH or WITHOUT) there is this:

cc -c -O2 -fno-strict-aliasing -pipe   -I/usr/local/include 
-I/usr/local/include/libpng -I/usr/local/include/X11 -I. -I/usr/local/include   
 -DCSRG_BASED  -DFUNCPROTO=15 -DNARROWPROTO 
 -DUSE_INLINE -DUSE_XPM -DXAW3D -DXAW3D1_5E 
-DUSE_JPEG -DI18N  -DNEWARROWTYPESe_edit.c
e_edit.c: In function 'generic_window':
e_edit.c:3214: warning: cast from pointer to integer of different size
e_edit.c: In function 'str_panel':
e_edit.c:4252: error: 'XtNinternational' undeclared (first use in this function)
e_edit.c:4252: error: (Each undeclared identifier is reported only once
e_edit.c:4252: error: for each function it appears in.)
*** Error code 1

Stop in /usr/ports/graphics/xfig/work/xfig.3.2.5b.
*** Error code 1

Stop in /usr/ports/graphics/xfig.
*** Error code 1

I tracked this down to a problem in the Imakefile around line 153:

   #define I18N

This line was not commented out when building xfig using:

   # make install   (and WITHOUT_I18N=true inside /var/db/ports/xfig/options)

Looking further I found these two lines:

   -XCOMM #define I18N
   +#define I18N

inside the /usr/ports/graphics/xfig/files/patch-Imakefile patch file.  I think
this may be incorrect.  After commenting out the #define in the Imakefile, the
build of xfig was successful.

Secondly, I found that building databases/p5-DBD-Oracle when Perl 5.14 (from
lang/perl5.14) was present failed in the compilation of the Oracle.c file.
It seems that several Perl constants sv_undef, sv_yes, and sv_no (and others)
changed between Perl 5.12.3 and Perl 5.14 to PL_sv_undef, PL_yes, and PL_sv_no,
respectively.  I didn't take the time to debug this further since I had other
Perl 5.14 issues that forced me to completely rebuild my system from scratch
starting with Perl 5.12.3 (lang/perl5.12) this time.  Once I had Perl 5.12.3
built, databases/p5-DBD-Oracle built just fine.

My other problems with Perl 5.14 were observed trying to launch apache2 (2.2.19)
with mod_perl2 (2.0.5).  Those problems also went away once I rebuilt my ports
starting with Perl 5.12.3 version.  This makes me suspect Perl 5.14 changes or
the effect those changes have had on other ports in the ports tree.

Regards,

web...

--
William Bulley Email: w...@umich.edu

72 characters width template ->|


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: NFS zfs serveur (hardware question)

[David Brodbeck]

On Wed, Jun 22, 2011 at 6:26 PM, Damien Fleuriot  wrote:
> As a rule of thumb and for a serious server, I would recommend 1 SSD as 
> dedicated cache and 2 SSD for a mirrored ZIL (you don't want to lose this 
> data).
> However I think ppl posted about running intro trouble when using both ZIL 
> and cache disks, so I suggest you only get the ZIL.

Definitely get the ZIL device.  NFS performance will be almost
intolerable without it.  It used to be you could work around this, at
cost of an increased risk of data loss if the server crashed, by
turning off the ZIL; but as of 9.0 this is no longer allowed, so a ZIL
device is pretty much mandatory.  I'm looking at ways to add one to
one of my machines for this reason.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: freebsd list admins?

[Julian H. Stacey]

> > Should we send in a send-pr to edit src/etc/motd ?
> 
> PR it.  Sounds good.

Thanks. Done. http://www.freebsd.org/cgi/query-pr.cgi?pr=158238
Now it'll need a commiter.

Cheers,
Julian
-- 
Julian Stacey, BSD Unix Linux C Sys Eng Consultants Munich http://berklix.com
 Reply below, not above;  Indent with "> ";  Cumulative like a play script.
 Format: Plain text. Not HTML, multipart/alternative, base64, quoted-printable.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Spamassassin not working after update of Perl

[Damien Fleuriot]

On 23 Jun 2011, at 21:37, Matthew Seaman  
wrote:

> On 23/06/2011 14:55, Damien Fleuriot wrote:
>> I have updated my Perl version yesterday but now my Spamd doesn't work
>>> anymore.
>>> Can someone hint me how to solve this?
> 
> You need to reinstall all perl modules if you upgrade perl from 5.10.x
> or 5.12.x to 5.14.1.  This is explained in UPDATING.
> 
> If you do it right, there should be pretty much nothing left in
> /usr/local/lib/perl5/5.X.Y where 5.X.Y is the version you're upgrading
> from.  Specifically reinstall p5-NetAddr-IP and p5-Net-DNS
> 
>Cheers,
> 
>Matthew
> 
> -- 
> Dr Matthew J Seaman MA, D.Phil.   7 Priory Courtyard
>  Flat 3
> PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
> JID: matt...@infracaninophile.co.uk   Kent, CT11 9PW
> 


You're totally misquoting me as I'm not the OP but I'll live 
;)___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Any working SIP-phone on FreeBSD?

[Bill Tillman]

From: Chad Perrin 
To: FreeBSD 
Sent: Wed, June 22, 2011 11:26:30 PM
Subject: Re: Any working SIP-phone on FreeBSD?




Hey guys.this thread is really starting to stink. Take it outside.

On Wed, Jun 22, 2011 at 10:08:59PM -0500, David Scheidt wrote:
> On Jun 20, 2011, at 10:46 AM, Chad Perrin wrote:
> > 
> > . . . and, somehow, social convention tells me it would be rude to
> > let this person know (for next time) that everything will be much
> > easier for everyone if the data is just left in its original format.
> 
> Oh, I'd have sent an email saying "sorry, your data is not in the
> required format.  See the requirements at (url, or other way where it's
> specified.)." If you didn't specify the format, well, stop bitching,
> because it's your own fault. 

You appear prone to leaping to assumption and being kind of an asshole.

I specified the format.  This is not, however, a strictly business
relationship -- so different social rules apply, much to my dismay.

-- 
Chad Perrin [ original content licensed OWL: http://owl.apotheon.org ]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Spamassassin not working after update of Perl

[Matthew Seaman]

On 23/06/2011 14:55, Damien Fleuriot wrote:
> I have updated my Perl version yesterday but now my Spamd doesn't work
>> anymore.
>> Can someone hint me how to solve this?

You need to reinstall all perl modules if you upgrade perl from 5.10.x
or 5.12.x to 5.14.1.  This is explained in UPDATING.

If you do it right, there should be pretty much nothing left in
/usr/local/lib/perl5/5.X.Y where 5.X.Y is the version you're upgrading
from.  Specifically reinstall p5-NetAddr-IP and p5-Net-DNS

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   7 Priory Courtyard
  Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
JID: matt...@infracaninophile.co.uk   Kent, CT11 9PW



signature.asc
Description: OpenPGP digital signature

Re: dnssec with freebsd's resolver(3)

[Osterweil, Eric]

On 6/23/11 2:23 PM, "Leon Meßner"  wrote:

> This mail got only send to Matthew because of bad time of day ;)
> 
> On Wed, Jun 22, 2011 at 10:58:00PM +0100, Matthew Seaman wrote:
>> On 22/06/2011 20:02, Osterweil, Eric wrote:
>>> 
>>> 
>>> 
>>> On 6/22/11 2:56 PM, "Leon Meßner"  wrote:
>>> 
 On Mon, Jun 20, 2011 at 06:17:23AM +0100, Matthew Seaman wrote:



>>> 
>>> I'm not sure what you mean by "DO processing," but validation requires a
>>> little more than issuing queries w/ the DO bit set (that has been the
>>> default in BIND for a while).  You need to have the root (or some other)
>>> trust-anchor configured, and you need to enable DNSSEC validation in your
>>> named.conf.
>>> 
>>> Only after that will you see the AD bit at the stub.
>> 
>> Actually, typically with a correctly configured validating resolver, as
>> an end user issuing queries from the system's stub resolver, you'll only
>> see responses with data that is either:
>> 
>> -- completely unsigned
>> 
>> -- signed, and that validates correctly
>> 
>> Data that doesn't validate correctly is discarded.  Better make sure
>> your DNSSEC setup is correctly maintained and updated, or your domains
>> may effectively disappear from the net.
>> 
>> "validates correctly" is a function of how your recursive resolver is
>> configured: for instance, you will probably want to trust DLV secured
>> data until authentication paths up to the root become more prevalent in
>> all corners of the DNS.
> 
> 
> The only thing i want to do at the moment is serve my local zone to my
> local clients. If i do
> 
> % dig @dns +dnssec rosa.physik-pool.tu-berlin.de
> 
> i get
> 
> ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 4,
> ADDITIONAL: 3
> 
> and also i can see the D0 bit set when looking at the tcpdump. If i now
> use the stub resolver through telnet/ssh the D0 bit does _not_ get set
> in the query. So there is no way for the recursive NS to supply AD data,
> right ?

That is correct, sorry.  If the stub doesn't request DNSSEC enabled (via the
DO bit), then the resolver will not return the validation bit. :(

I did a little bit of googling, and found these instructions but I have not
tried any of this myself:

https://www.dnssec-tools.org/svn/dnssec-tools/trunk/htdocs/readme/README.ssh
(Look under the "Requirements" section)

There seemed to be a lot of people suggesting that opening bug reports will
prompt more attention to this.

> 
> thanks for helping the blind.

Not at all!  :)

Eric

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: dnssec with freebsd's resolver(3)

[Leon Meßner]

This mail got only send to Matthew because of bad time of day ;)

On Wed, Jun 22, 2011 at 10:58:00PM +0100, Matthew Seaman wrote:
> On 22/06/2011 20:02, Osterweil, Eric wrote:
> > 
> > 
> > 
> > On 6/22/11 2:56 PM, "Leon Meßner"  wrote:
> > 
> >> On Mon, Jun 20, 2011 at 06:17:23AM +0100, Matthew Seaman wrote:
> >>> On 20/06/2011 01:37, Leon Meßner wrote:
>  does the freebsd resolver(3) support sending the DO bit in queries and
>  thus do DNSSEC validation ? I tried using ssh with SSHFP RR's in a
>  signed zone but i still get the "insecure Key" message from ssh on
>  FreeBSD (works on some other OS).
> >>>
> >>> My understanding is that the stub resolver in the base system does not
> >>> handle any DNSSEC functionality.  It's not clear (at least to me) that
> >>> DO bit processing in stub resolvers is very useful -- without support in
> >>> the recursive resolver you use upstream, it won't work, but if your
> >>> recursive resolver does DO processing, then you don't need it in your
> >>> stub resolver.
> >>
> >> Ok, my recursive resolver does DO processing. How do i tell ssh to set
> >> the bit ? Doesn't ssh use my base system stub resolveer to query my in
> >> resolv.conf configured DNS ?
> > 
> > I'm not sure what you mean by "DO processing," but validation requires a
> > little more than issuing queries w/ the DO bit set (that has been the
> > default in BIND for a while).  You need to have the root (or some other)
> > trust-anchor configured, and you need to enable DNSSEC validation in your
> > named.conf.
> > 
> > Only after that will you see the AD bit at the stub.
> 
> Actually, typically with a correctly configured validating resolver, as
> an end user issuing queries from the system's stub resolver, you'll only
> see responses with data that is either:
> 
> -- completely unsigned
> 
> -- signed, and that validates correctly
> 
> Data that doesn't validate correctly is discarded.  Better make sure
> your DNSSEC setup is correctly maintained and updated, or your domains
> may effectively disappear from the net.
> 
> "validates correctly" is a function of how your recursive resolver is
> configured: for instance, you will probably want to trust DLV secured
> data until authentication paths up to the root become more prevalent in
> all corners of the DNS.


The only thing i want to do at the moment is serve my local zone to my
local clients. If i do

% dig @dns +dnssec rosa.physik-pool.tu-berlin.de

i get 

;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 4,
ADDITIONAL: 3

and also i can see the D0 bit set when looking at the tcpdump. If i now
use the stub resolver through telnet/ssh the D0 bit does _not_ get set
in the query. So there is no way for the recursive NS to supply AD data,
right ?

thanks for helping the blind.

Leon
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

RE: LTO3 tape drive not detected

[a . smith]

Seems in theory that LTO 3 should work ok based on this forum post:

http://forums.freebsd.org/showthread.php?t=8042



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: LTO3 tape drive not detected

[Julian H. Stacey]

Adam Vande More wrote:
> On Thu, Jun 23, 2011 at 9:35 AM, Joe in MPLS  wrote:
> 
> > The system sees the SCSI controller as mpt0, and it seems to know there's
> > something at SCSI ID 4, but I get an "AutoSense Failed" for hba/id/lun 0:4:0
> > at boot and subsequent camcontrol rescans.
> >
> > I checked the supported hardware doc for the release but it doesn't get
> > very specific about tape drives. This is my first experience with LTO3 tape.
> > I was hoping that I'd automagically get a /dev/sa0 device like I always did
> > with my old DLT drives but it wasn't to be this time.
> >
> > Is there a way to make this drive work?
> >
> 
> I don't the answer to your question, it's been quite some time since I
> worked with a tape drive.  Off-topic question, what type of capacities to
> tapes support now days?
> 
> I think think you may have more luck posting this question to a different
> list, stable@ is the one that comes to mind for me.

Could also ask on s...@freebsd.org

Cheers,
Julian
-- 
Julian Stacey, BSD Unix Linux C Sys Eng Consultants Munich http://berklix.com
 Reply below, not above;  Indent with "> ";  Cumulative like a play script.
 Format: Plain text. Not HTML, multipart/alternative, base64, quoted-printable.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: LTO3 tape drive not detected

[Polytropon]

On Thu, 23 Jun 2011 09:35:10 -0500, Joe in MPLS wrote:
> 
> I have FreeBSD 8.2-RELEASE running on an HP DL360 G5. I recently added 
> an (HP branded) LSI Logic single channel SCSI 320 card and attached an 
> HP Ultrium 920 LTO3 tape drive.
> 
> The system sees the SCSI controller as mpt0, and it seems to know 
> there's something at SCSI ID 4, but I get an "AutoSense Failed" for 
> hba/id/lun 0:4:0 at boot and subsequent camcontrol rescans.
> 
> I checked the supported hardware doc for the release but it doesn't get 
> very specific about tape drives. This is my first experience with LTO3 
> tape. I was hoping that I'd automagically get a /dev/sa0 device like I 
> always did with my old DLT drives but it wasn't to be this time.
> 
> Is there a way to make this drive work?

For better diagnostics, use the camcontrol utility, options reset,
rescan, devlist and inquiry, after the system successfully booted.
There should be a listing containing the tape drive and therefore
the device node in /dev, or a more descriptive error message if
something is wrong.

% camcontrol devlist
at scbus0 target 6 lun 0 (pass0)
   at scbus2 target 0 lun 0 (cd0,pass1)

This example shows a SCSI scanner at 0:6:0, the controller is
an Adaptec 2940 SCSI adapter (PCI), driver is ahc0, as real
SCSI hardware. If you're using the ATAPICAM facility, don't
get confused with the ATAPI devices being on that list too. :-)




-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: LTO3 tape drive not detected

[Adam Vande More]

On Thu, Jun 23, 2011 at 9:35 AM, Joe in MPLS  wrote:

> The system sees the SCSI controller as mpt0, and it seems to know there's
> something at SCSI ID 4, but I get an "AutoSense Failed" for hba/id/lun 0:4:0
> at boot and subsequent camcontrol rescans.
>
> I checked the supported hardware doc for the release but it doesn't get
> very specific about tape drives. This is my first experience with LTO3 tape.
> I was hoping that I'd automagically get a /dev/sa0 device like I always did
> with my old DLT drives but it wasn't to be this time.
>
> Is there a way to make this drive work?
>

I don't the answer to your question, it's been quite some time since I
worked with a tape drive.  Off-topic question, what type of capacities to
tapes support now days?

I think think you may have more luck posting this question to a different
list, stable@ is the one that comes to mind for me.

-- 
Adam Vande More
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

can't build graphics/xfig-3.2.5b on 8.2-STABLE nor databases/p5-DBD-Oracle with lang/perl5.14

[William Bulley]

First there is the xfig issue:

No matter what the setting is for I18N (WITH or WITHOUT) there is this:

cc -c -O2 -fno-strict-aliasing -pipe   -I/usr/local/include 
-I/usr/local/include/libpng -I/usr/local/include/X11 -I. -I/usr/local/include   
 -DCSRG_BASED  -DFUNCPROTO=15 -DNARROWPROTO 
 -DUSE_INLINE -DUSE_XPM -DXAW3D -DXAW3D1_5E 
-DUSE_JPEG -DI18N  -DNEWARROWTYPESe_edit.c
e_edit.c: In function 'generic_window':
e_edit.c:3214: warning: cast from pointer to integer of different size
e_edit.c: In function 'str_panel':
e_edit.c:4252: error: 'XtNinternational' undeclared (first use in this function)
e_edit.c:4252: error: (Each undeclared identifier is reported only once
e_edit.c:4252: error: for each function it appears in.)
*** Error code 1

Stop in /usr/ports/graphics/xfig/work/xfig.3.2.5b.
*** Error code 1

Stop in /usr/ports/graphics/xfig.
*** Error code 1

I tracked this down to a problem in the Imakefile around line 153:

   #define I18N

This line was not commented out when building xfig using:

   # make install   (and WITHOUT_I18N=true inside /var/db/ports/xfig/options)

Looking further I found these two lines:

   -XCOMM #define I18N
   +#define I18N

inside the /usr/ports/graphics/xfig/files/patch-Imakefile patch file.  I think
this may be incorrect.  After commenting out the #define in the Imakefile, the
build of xfig was successful.

Secondly, I found that building databases/p5-DBD-Oracle when Perl 5.14 (from
lang/perl5.14) was present failed in the compilation of the Oracle.c file.
It seems that several Perl constants sv_undef, sv_yes, and sv_no (and others)
changed between Perl 5.12.3 and Perl 5.14 to PL_sv_undef, PL_yes, and PL_sv_no,
respectively.  I didn't take the time to debug this further since I had other
Perl 5.14 issues that forced me to completely rebuild my system from scratch
starting with Perl 5.12.3 (lang/perl5.12) this time.  Once I had Perl 5.12.3
built, databases/p5-DBD-Oracle built just fine.

My other problems with Perl 5.14 were observed trying to launch apache2 (2.2.19)
with mod_perl2 (2.0.5).  Those problems also went away once I rebuilt my ports
starting with Perl 5.12.3 version.  This makes me suspect Perl 5.14 changes or
the effect those changes have had on other ports in the ports tree.

Regards,

web...

--
William Bulley Email: w...@umich.edu

72 characters width template ->|


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Mozilla retires Firefox 4 from security support

[Jerry]

On Thu, 23 Jun 2011 09:25:16 -0700
Chip Camden articulated:

> Yes, Pentadactyl for one.  Upgrading to its nightly build version
> makes it work, sort of.  Looks like text fields no longer scroll
> properly. This is taking the Google-led trend of "beta is the new
> release" to extremes.

Google and its, "BETA-4-EVER" concept is one I would not like to see
instituted.

-- 
Jerry ✌
jerry+f...@seibercom.net

Disclaimer: off-list followups get on-list replies or ignored.
Do not CC this poster. Please do not ignore the "Reply-To" header.

http://www.catb.org/~esr/faqs/smart-questions.html


signature.asc
Description: PGP signature

Re: Mozilla retires Firefox 4 from security support

[Chip Camden]

Quoth Jerry on Thursday, 23 June 2011:
> On Thu, 23 Jun 2011 08:02:23 -0400
> Robert Huff articulated:
> 

> 
> The best part is that many of my "add-ons" again no longer work. From
> what I can see in the ports system, and I may be wrong, there is not an
> option to use the version 4 either although remnants of version 3x
> seem to still be available. It appears that a user is forced into
> version 5 from version 4. Wow, and people bitch about Microsoft's update
> policies.
> 

Yes, Pentadactyl for one.  Upgrading to its nightly build version makes
it work, sort of.  Looks like text fields no longer scroll properly.
This is taking the Google-led trend of "beta is the new release" to
extremes.

-- 
.O. | Sterling (Chip) Camden  | http://camdensoftware.com
..O | sterl...@camdensoftware.com | http://chipsquips.com
OOO | 2048R/D6DBAF91  | http://chipstips.com


pgp5xOHXU503B.pgp
Description: PGP signature

Re: Mozilla retires Firefox 4 from security support

[Alexandre]

Hi all,

Now the different versions of Firefox are :
- Release (version)
- Aurora (version +1)
- Nightly (version +2)

With this roadmap, you don't care with the version number of the release.
There will be only one, not like before with 3.6.x, 3.5.x ...
I think this is really more easy. You will stay with your release version of
Firefox and that's all. You just have to upgrade when needed.
Mozilla can spend energy to develop it software, not to maintain an older
version whose performance (or other) are deprecated.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Mozilla retires Firefox 4 from security support

[Robert Simmons]

Why not take this discussion to freebsd-chat?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Mozilla retires Firefox 4 from security support

[Jerry]

On Thu, 23 Jun 2011 15:08:39 +0200
Admin Cyanide articulated:

> The major difference is that when updating Microsoft's OS from a
> major version to another you have to pay.
> I'm not flaming, I just want to focus on the fact that this products 
> have not the same constraints.

We were, or at least I was under the impression we were, discussion web
browsers. Microsoft and Mozilla both made significant changes in the
browsers before bumping the major version number. In this particular
instance, it appears that has not happened. What really bothers me is
that they EOL'd the version 4 virtually without warning after only a
few months. I have never seen Microsoft or Google EOL a product that
quickly. It might have been nice to keep the version 4 available for
users who find version 5 unsuitable for whatever reason. Microsoft even
keeps IE-5 (although I don't know why) available for download.

-- 
Jerry ✌
jerry+f...@seibercom.net

Disclaimer: off-list followups get on-list replies or ignored.
Do not CC this poster. Please do not ignore the "Reply-To" header.

http://www.catb.org/~esr/faqs/smart-questions.html
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

LTO3 tape drive not detected

[Joe in MPLS]

I have FreeBSD 8.2-RELEASE running on an HP DL360 G5. I recently added 
an (HP branded) LSI Logic single channel SCSI 320 card and attached an 
HP Ultrium 920 LTO3 tape drive.


The system sees the SCSI controller as mpt0, and it seems to know 
there's something at SCSI ID 4, but I get an "AutoSense Failed" for 
hba/id/lun 0:4:0 at boot and subsequent camcontrol rescans.


I checked the supported hardware doc for the release but it doesn't get 
very specific about tape drives. This is my first experience with LTO3 
tape. I was hoping that I'd automagically get a /dev/sa0 device like I 
always did with my old DLT drives but it wasn't to be this time.


Is there a way to make this drive work?



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: dnssec with freebsd's resolver(3)

[Osterweil, Eric]

On 6/22/11 5:58 PM, "Matthew Seaman" 
wrote:

> On 22/06/2011 20:02, Osterweil, Eric wrote:
>> 
>> 
>> 
>> On 6/22/11 2:56 PM, "Leon Meßner"  wrote:
>> 
>>> On Mon, Jun 20, 2011 at 06:17:23AM +0100, Matthew Seaman wrote:
 On 20/06/2011 01:37, Leon Meßner wrote:
>>> 
>>> Ok, my recursive resolver does DO processing. How do i tell ssh to set
>>> the bit ? Doesn't ssh use my base system stub resolveer to query my in
>>> resolv.conf configured DNS ?
>> 
>> I'm not sure what you mean by "DO processing," but validation requires a
>> little more than issuing queries w/ the DO bit set (that has been the
>> default in BIND for a while).  You need to have the root (or some other)
>> trust-anchor configured, and you need to enable DNSSEC validation in your
>> named.conf.
>> 
>> Only after that will you see the AD bit at the stub.
> 
> Actually, typically with a correctly configured validating resolver, as
> an end user issuing queries from the system's stub resolver, you'll only
> see responses with data that is either:
> 
> -- completely unsigned

And this will _not_ have the AD bit.

> 
> -- signed, and that validates correctly

This will have the AD bit, but only if there is a verifiable chain of trust
leading from a configured trust-anchor.

> 
> Data that doesn't validate correctly is discarded.  Better make sure
> your DNSSEC setup is correctly maintained and updated, or your domains
> may effectively disappear from the net.

This actually depends on exactly what you mean by "doesn't validate," and
how the resolver is configured:  If the chain of trust does not lead to this
zone, then the resolver can be configured to return data without setting the
AD bit (this is the default for most early movers on DNSSEC).  If there IS a
valid chain of trust, and the crypto doesn't verify, then you are right,
data is not returned (unless the CD bit is set).

> 
> "validates correctly" is a function of how your recursive resolver is
> configured: for instance, you will probably want to trust DLV secured
> data until authentication paths up to the root become more prevalent in
> all corners of the DNS.

I strongly disagree!  Now that the root, .com, .net, .edu, .gov, .org, etc.
are signed (over 65 TLDs), the few _debatable_ reasons to use DLV are really
gone.  Today, if there is no chain to a zone, then you (as the resolver
operator) can decide if you want to configure the TA manually, or wait until
the zone operator gets their DS in their parent zone.  In either case, the
typical DNSSEC validating resolver configuration will return data for these
zones, just not setting the AD bit.  Don't forget (also), that using DLV
exposes the privacy of exactly what zones you are querying to the external
party running the DLV.  You will essentially tell that party what zones your
are querying by asking for those zones' DLV records.

Eric

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Mozilla retires Firefox 4 from security support

[Ryan Coleman]

On Jun 23, 2011, at 10:33 AM, Joshua Isom wrote:

> On 6/23/2011 8:08 AM, Admin Cyanide wrote:
>> 
>> The major difference is that when updating Microsoft's OS from a major
>> version to another you have to pay.
>> I'm not flaming, I just want to focus on the fact that this products
>> have not the same constraints.
>> 
>> What is surprising is why it is not a 4.1 release, I'm not following
>> Firefox development but I'm surprised how fast they've gone from a major
>> release to another.
>> What has been changed in FF 5 that needs this release number change ?
>> 
> 
> Blame Chrome.  Just like there was no Netscape 5 because of IE6, the version 
> number is marketing to make it look like Firefox is updating more often and 
> faster than competitors.

IMO Netscrape 6 was no better than IE6 :)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Mozilla retires Firefox 4 from security support

[Joshua Isom]

On 6/23/2011 8:08 AM, Admin Cyanide wrote:


The major difference is that when updating Microsoft's OS from a major
version to another you have to pay.
I'm not flaming, I just want to focus on the fact that this products
have not the same constraints.

What is surprising is why it is not a 4.1 release, I'm not following
Firefox development but I'm surprised how fast they've gone from a major
release to another.
What has been changed in FF 5 that needs this release number change ?



Blame Chrome.  Just like there was no Netscape 5 because of IE6, the 
version number is marketing to make it look like Firefox is updating 
more often and faster than competitors.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: List of Servers for FreeBSD and Ports Updates...

[Julian H. Stacey]

> 1-Port directory update through portsnap
> 2-FreeBSD src update through CTM
> 3-Port updates through distfiles and/or packages
> 
> I think 1- and 2- are quite straightforward. To allow 1- I need to white
> list the whole content of  http://portsnap.freebsd.org/ . To allow 2- I need
> to white list the content of ftp://ftp.freebsd.org/pub/FreeBSD/CTM/ . That
> should be sufficient, right?

Yoy can receive all of src*, ports, cvs by ctm 
You can receive ctm by mail, all from @freebsd.org mail lists

Cheers,
Julian
-- 
Julian Stacey, BSD Unix Linux C Sys Eng Consultants Munich http://berklix.com
 Reply below, not above;  Indent with "> ";  Cumulative like a play script.
 Format: Plain text. Not HTML, multipart/alternative, base64, quoted-printable.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

1-ClickWeather for Firefox fails under Firefox-5

[Carmel]

I just updated to the new Firefox-5 browser. Unfortunately, the
1-ClickWeather for Firefox (Weather Channel) fails. I tried to remove
and re-install the add-on but the results were the same.

This is the error message:

[Exception... "Component returned failure code: 0x80520012
(NS_ERROR_FILE_NOT_FOUND) [nsIFileInputStream.init]"  nsresult:
"0x80520012 (NS_ERROR_FILE_NOT_FOUND)"  location: "JS frame ::
chrome://1clickweather/content/js/utils/filemanager.js ::
 :: line 233"  data: no]

Apparently, this add-on works fine under MAC, Linux and Microsoft so
the only this I can think of is that the problem lies with FreeBSD. I
have FreeBSD-8.2/amd64 installed. Does anyone have any suggestions?

Thanks!

-- 
Carmel ✌
carmel...@hotmail.com

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Spamassassin not working after update of Perl

[Damien Fleuriot]

On 6/23/11 3:51 PM, Jos Chrispijn wrote:
> I have updated my Perl version yesterday but now my Spamd doesn't work
> anymore.
> Can someone hint me how to solve this?
> 
> thanks,
> Jos Chrispijn
> 
> Pls see output:
> 
> Can't locate Net/DNS.pm in @INC (@INC contains:
> /usr/local/lib/perl5/site_perl/5.14.0 /usr/local/lib/perl5/5.14.1/BSDPAN
> /usr/local/lib/perl5/site_perl/5.14.1/mach
> /usr/local/lib/perl5/site_perl/5.14.1 /usr/local/lib/perl5/5.14.1/mach
> /usr/local/lib/perl5/5.14.1) at /usr/local/bin/sa-update line 80.
> BEGIN failed--compilation aborted at /usr/local/bin/sa-update line 80.
> 
> Can't locate Net/DNS.pm in @INC (@INC contains:
> /usr/local/lib/perl5/site_perl/5.14.0 /usr/local/lib/perl5/5.14.1/BSDPAN
> /usr/local/lib/perl5/site_perl/5.14.1/mach
> /usr/local/lib/perl5/site_perl/5.14.1 /usr/local/lib/perl5/5.14.1/mach
> /usr/local/lib/perl5/5.14.1) at /usr/local/bin/sa-update line 80.
> BEGIN failed--compilation aborted at /usr/local/bin/sa-update line 80.
> 
> Can't locate NetAddr/IP.pm in @INC (@INC contains:
> /usr/local/lib/perl5/site_perl/5.14.0 /usr/local/lib/perl5/5.14.1/BSDPAN
> /usr/local/lib/perl5/site_perl/5.14.1/mach
> /usr/local/lib/perl5/site_perl/5.14.1 /usr/local/lib/perl5/5.14.1/mach
> /usr/local/lib/perl5/5.14.1) at
> /usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin/NetSet.pm line 25.
> 
> BEGIN failed--compilation aborted at
> /usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin/NetSet.pm line 25.
> Compilation failed in require at
> /usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin/Conf.pm line 86.
> BEGIN failed--compilation aborted at
> /usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin/Conf.pm line 86.
> Compilation failed in require at
> /usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin.pm line 71.
> BEGIN failed--compilation aborted at
> /usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin.pm line 71.
> Compilation failed in require at /usr/local/bin/spamassassin line 80.
> BEGIN failed--compilation aborted at /usr/local/bin/spamassassin line 80.
> ClamAV update process started at Thu Jun 23 15:43:00 2011
> main.cld is up to date (version: 53, sigs: 846214, f-level: 53, builder:
> sven)
> daily.cld is up to date (version: 13231, sigs: 130699, f-level: 60,
> builder: arnaud)
> bytecode.cld is up to date (version: 143, sigs: 40, f-level: 60,
> builder: edwin)
> spamd not running? (check /var/run/spamd/spamd.pid).
> Starting spamd.
> 
> Can't locate NetAddr/IP.pm in @INC (@INC contains:
> /usr/local/lib/perl5/site_perl/5.14.0 /usr/local/lib/perl5/5.14.1/BSDPAN
> /usr/local/lib/perl5/site_perl/5.14.1/mach
> /usr/local/lib/perl5/site_perl/5.14.1 /usr/local/lib/perl5/5.14.1/mach
> /usr/local/lib/perl5/5.14.1) at
> /usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin/NetSet.pm line 25.
> 
> BEGIN failed--compilation aborted at
> /usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin/NetSet.pm line 25.
> Compilation failed in require at
> /usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin/Conf.pm line 86.
> BEGIN failed--compilation aborted at
> /usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin/Conf.pm line 86.
> Compilation failed in require at
> /usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin.pm line 71.
> BEGIN failed--compilation aborted at
> /usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin.pm line 71.
> Compilation failed in require at /usr/local/bin/spamd line 85.
> BEGIN failed--compilation aborted at /usr/local/bin/spamd line 85.
> 
> Can't locate NetAddr/IP.pm in @INC (@INC contains:
> /usr/local/lib/perl5/site_perl/5.14.0 /usr/local/lib/perl5/5.14.1/BSDPAN
> /usr/local/lib/perl5/site_perl/5.14.1/mach
> /usr/local/lib/perl5/site_perl/5.14.1 /usr/local/lib/perl5/5.14.1/mach
> /usr/local/lib/perl5/5.14.1) at
> /usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin/NetSet.pm line 25.
> 
> BEGIN failed--compilation aborted at
> /usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin/NetSet.pm line 25.
> Compilation failed in require at
> /usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin/Conf.pm line 86.
> BEGIN failed--compilation aborted at
> /usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin/Conf.pm line 86.
> Compilation failed in require at
> /usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin.pm line 71.
> BEGIN failed--compilation aborted at
> /usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin.pm line 71.
> Compilation failed in require at /usr/local/bin/spamassassin line 80.
> BEGIN failed--compilation aborted at /usr/local/bin/spamassassin line 80.
> 
> --- cut ---
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "freebsd-questions-unsubscr...@freebsd.org"





Just to make really sure, did you check for any notes in UPDATING
regarding perl ?

Also, have you run perl-after-update ?
___
freebsd

Re: Mozilla retires Firefox 4 from security support

[Admin Cyanide]

Le 23/06/2011 14:30, Jerry a écrit :

On Thu, 23 Jun 2011 08:02:23 -0400
Robert Huff articulated:


Jerry writes:


  > From URL:
  
.

  Obviously users of version 4 will be more or less forced to
  update to version 5 which is now in the ports system. What amazes
  me is how quick support was pulled from version 4.

My morning-fogged mind says Version 4 was out less than a
year.

Correct! When Microsoft EOL'd a ten year old OS (XP) the wailing's from
certain factions was deafening. Now with Mozilla EOLing a product less
than a year old the sounds of silence seem to be propagating.

The best part is that many of my "add-ons" again no longer work. From
what I can see in the ports system, and I may be wrong, there is not an
option to use the version 4 either although remnants of version 3x
seem to still be available. It appears that a user is forced into
version 5 from version 4. Wow, and people bitch about Microsoft's update
policies.

The major difference is that when updating Microsoft's OS from a major 
version to another you have to pay.
I'm not flaming, I just want to focus on the fact that this products 
have not the same constraints.


What is surprising is why it is not a 4.1 release, I'm not following 
Firefox development but I'm surprised how fast they've gone from a major 
release to another.

What has been changed in FF 5 that needs this release number change ?

--
Bastien Semene
Administrateur Réseau&  Système

Cyanide Studio - FRANCE

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Spamassassin not working after update of Perl

[Jos Chrispijn]

I have updated my Perl version yesterday but now my Spamd doesn't work 
anymore.

Can someone hint me how to solve this?

thanks,
Jos Chrispijn

Pls see output:

Can't locate Net/DNS.pm in @INC (@INC contains: 
/usr/local/lib/perl5/site_perl/5.14.0 /usr/local/lib/perl5/5.14.1/BSDPAN 
/usr/local/lib/perl5/site_perl/5.14.1/mach 
/usr/local/lib/perl5/site_perl/5.14.1 /usr/local/lib/perl5/5.14.1/mach 
/usr/local/lib/perl5/5.14.1) at /usr/local/bin/sa-update line 80.

BEGIN failed--compilation aborted at /usr/local/bin/sa-update line 80.

Can't locate Net/DNS.pm in @INC (@INC contains: 
/usr/local/lib/perl5/site_perl/5.14.0 /usr/local/lib/perl5/5.14.1/BSDPAN 
/usr/local/lib/perl5/site_perl/5.14.1/mach 
/usr/local/lib/perl5/site_perl/5.14.1 /usr/local/lib/perl5/5.14.1/mach 
/usr/local/lib/perl5/5.14.1) at /usr/local/bin/sa-update line 80.

BEGIN failed--compilation aborted at /usr/local/bin/sa-update line 80.

Can't locate NetAddr/IP.pm in @INC (@INC contains: 
/usr/local/lib/perl5/site_perl/5.14.0 /usr/local/lib/perl5/5.14.1/BSDPAN 
/usr/local/lib/perl5/site_perl/5.14.1/mach 
/usr/local/lib/perl5/site_perl/5.14.1 /usr/local/lib/perl5/5.14.1/mach 
/usr/local/lib/perl5/5.14.1) at 
/usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin/NetSet.pm line 25.


BEGIN failed--compilation aborted at 
/usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin/NetSet.pm line 25.
Compilation failed in require at 
/usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin/Conf.pm line 86.
BEGIN failed--compilation aborted at 
/usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin/Conf.pm line 86.
Compilation failed in require at 
/usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin.pm line 71.
BEGIN failed--compilation aborted at 
/usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin.pm line 71.

Compilation failed in require at /usr/local/bin/spamassassin line 80.
BEGIN failed--compilation aborted at /usr/local/bin/spamassassin line 80.
ClamAV update process started at Thu Jun 23 15:43:00 2011
main.cld is up to date (version: 53, sigs: 846214, f-level: 53, builder: 
sven)
daily.cld is up to date (version: 13231, sigs: 130699, f-level: 60, 
builder: arnaud)
bytecode.cld is up to date (version: 143, sigs: 40, f-level: 60, 
builder: edwin)

spamd not running? (check /var/run/spamd/spamd.pid).
Starting spamd.

Can't locate NetAddr/IP.pm in @INC (@INC contains: 
/usr/local/lib/perl5/site_perl/5.14.0 /usr/local/lib/perl5/5.14.1/BSDPAN 
/usr/local/lib/perl5/site_perl/5.14.1/mach 
/usr/local/lib/perl5/site_perl/5.14.1 /usr/local/lib/perl5/5.14.1/mach 
/usr/local/lib/perl5/5.14.1) at 
/usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin/NetSet.pm line 25.


BEGIN failed--compilation aborted at 
/usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin/NetSet.pm line 25.
Compilation failed in require at 
/usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin/Conf.pm line 86.
BEGIN failed--compilation aborted at 
/usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin/Conf.pm line 86.
Compilation failed in require at 
/usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin.pm line 71.
BEGIN failed--compilation aborted at 
/usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin.pm line 71.

Compilation failed in require at /usr/local/bin/spamd line 85.
BEGIN failed--compilation aborted at /usr/local/bin/spamd line 85.

Can't locate NetAddr/IP.pm in @INC (@INC contains: 
/usr/local/lib/perl5/site_perl/5.14.0 /usr/local/lib/perl5/5.14.1/BSDPAN 
/usr/local/lib/perl5/site_perl/5.14.1/mach 
/usr/local/lib/perl5/site_perl/5.14.1 /usr/local/lib/perl5/5.14.1/mach 
/usr/local/lib/perl5/5.14.1) at 
/usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin/NetSet.pm line 25.


BEGIN failed--compilation aborted at 
/usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin/NetSet.pm line 25.
Compilation failed in require at 
/usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin/Conf.pm line 86.
BEGIN failed--compilation aborted at 
/usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin/Conf.pm line 86.
Compilation failed in require at 
/usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin.pm line 71.
BEGIN failed--compilation aborted at 
/usr/local/lib/perl5/site_perl/5.14.0/Mail/SpamAssassin.pm line 71.

Compilation failed in require at /usr/local/bin/spamassassin line 80.
BEGIN failed--compilation aborted at /usr/local/bin/spamassassin line 80.

--- cut ---
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Mozilla retires Firefox 4 from security support

[Matthew Seaman]

On 23/06/2011 13:02, Robert Huff wrote:
>   My morning-fogged mind says Version 4 was out less than a year.

Much less than a year.  V4 came out in April.

I'm wondering what the big deal is that Mozilla felt they needed to bump
the major version number?  There don't seem to have been many user
visible changes between 4 and 5, and (only seen momentarily flashing
past, so may not be correct) the delta between 4 and 5 that my Mac
downloaded was only about 10MB.  That doesn't seem to me to add up to
the sort of large scale reworking that a major version bump should imply.

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   7 Priory Courtyard
  Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
JID: matt...@infracaninophile.co.uk   Kent, CT11 9PW



signature.asc
Description: OpenPGP digital signature

Re: Mozilla retires Firefox 4 from security support

[Robert Huff]

Damien Fleuriot writes:

>  Although, I'll give you, I'm as confused as everyone regarding
>  this 4->5 bump, surely they could have done 4.1 or something...

It is my understanding there are (even more) substantial (than
usual) internal changes, particularly relating to HTML v5.


Robert Huff




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: NFS zfs serveur (hardware question)

[Daniel Staal]

On Wed, June 22, 2011 9:26 pm, Damien Fleuriot wrote:
> You will lose your main ZFS pool if you lose:
> - more than 1 of your full ZFS pools
> or
> - your ZIL (need confirmation on that)

>From my reading, on the ZIL:  Under 8.2, true.  If you have patched your
ZFS install, or are running -CURRENT, you can lose your ZIL, I think. 
(The ability is in zpool version 19.)

The 'I think' is because that version allows *removal* of the ZIL device. 
Which should be the same as a loss of the device, but...

Daniel T. Staal

---
This email copyright the author.  Unless otherwise noted, you
are expressly allowed to retransmit, quote, or otherwise use
the contents for non-commercial purposes.  This copyright will
expire 5 years after the author's death, or in 30 years,
whichever is longer, unless such a period is in excess of
local copyright law.
---

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Mozilla retires Firefox 4 from security support

[Damien Fleuriot]

On 6/23/11 3:10 PM, Robert Huff wrote:
> 
> Jerry writes:
> 
>>  > >  Obviously users of version 4 will be more or less forced to
>>  > >  update to version 5 which is now in the ports system. What amazes
>>  > >  me is how quick support was pulled from version 4.
>>  > 
>>  >   My morning-fogged mind says Version 4 was out less than a
>>  > year.
>>  
>>  Correct! When Microsoft EOL'd a ten year old OS (XP) the
>>  wailing's from certain factions was deafening. Now with Mozilla
>>  EOLing a product less than a year old the sounds of silence seem
>>  to be propagating.
> 
>   Which says something about the relative trust levels about
> Mozilla and Microsoft bringing out a a new .0 of their core product.
> 
> 
>   Robert "still using XP" Huff
> 

Well the main difference is, there was a lot of software that would run
only on win XP for large companies, internal web applications, home made
banking software...

With FF, it's just a version bump, addons will get fixed (or not) and
that is it.

I for one was much more bothered by XP's EOL than I am with FF bumping.

Although, I'll give you, I'm as confused as everyone regarding this 4->5
bump, surely they could have done 4.1 or something...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Mozilla retires Firefox 4 from security support

[Robert Huff]

Jerry writes:

>  > >  Obviously users of version 4 will be more or less forced to
>  > >  update to version 5 which is now in the ports system. What amazes
>  > >  me is how quick support was pulled from version 4.
>  > 
>  >My morning-fogged mind says Version 4 was out less than a
>  > year.
>  
>  Correct! When Microsoft EOL'd a ten year old OS (XP) the
>  wailing's from certain factions was deafening. Now with Mozilla
>  EOLing a product less than a year old the sounds of silence seem
>  to be propagating.

Which says something about the relative trust levels about
Mozilla and Microsoft bringing out a a new .0 of their core product.


Robert "still using XP" Huff

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: ZFS on Root

[Chris Brennan]

* Peter Toth  [2011-06-23 22:54:59 +1200]:

> Did you set the mount point properly for your ZFS root? My previous post
> was intended as an example only, you need to tailor it to your setup.
> Also, you can use mfsbsd for installation very easy and straightforward
> http://mfsbsd.vx.sk/ . 

This looks great, but my foggy brain isn't understanding how to use it? 
Do I just burn the iso to media and boot it? Or is there some track that 
involves a wand (sorry for my sarcasm lol)


-- 
> Chris Brennan
> -- 
> A: Yes.
> >Q: Are you sure?
> >>A: Because it reverses the logical flow of conversation.
> >>>Q: Why is top posting frowned upon?
> http://xkcd.com/84/ | http://xkcd.com/149/ | http://xkcd.com/549/
> GPG: D5B20C0C (6741 8EE4 6C7D 11FB 8DA8  9E4A EECD 9A84 D5B2 0C0C)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Mozilla retires Firefox 4 from security support

[Ryan Coleman]

On Jun 23, 2011, at 8:56 AM, Robert Bonomi wrote:
>> Jerry writes:
 From URL:
>>> >> _4_from_security_support>.
>>> 
>>> Obviously users of version 4 will be more or less forced to update to 
>>> version 5 which is now in the ports system. What amazes me is how 
>>> quick support was pulled from version 4.
>> 
>> My morning-fogged mind says Version 4 was out less than a year.
> 
> Quoting Maxwell Smart:  "Would you believe"
> 
> THREE months ago. 
> 
> "current release" is 4.0.1

I'm just as confused by this... 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Mozilla retires Firefox 4 from security support

[Robert Bonomi]

> From owner-freebsd-questi...@freebsd.org  Thu Jun 23 07:02:56 2011
> From: Robert Huff 
> Date: Thu, 23 Jun 2011 08:02:23 -0400
> To: FreeBSD 
> Subject: Mozilla retires Firefox 4 from security support
>
>
> Jerry writes:
>
> >  >From URL:
> >   >  _4_from_security_support>.
> >
> >  Obviously users of version 4 will be more or less forced to update to 
> >  version 5 which is now in the ports system. What amazes me is how 
> >  quick support was pulled from version 4.
>
>  My morning-fogged mind says Version 4 was out less than a year.

Quoting Maxwell Smart:  "Would you believe"

THREE months ago. 


"current release" is 4.0.1
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Mozilla retires Firefox 4 from security support

[Jerry]

On Thu, 23 Jun 2011 08:02:23 -0400
Robert Huff articulated:

> Jerry writes:
> 
> >  >From URL:
> >  
> > .
> >  
> >  Obviously users of version 4 will be more or less forced to
> >  update to version 5 which is now in the ports system. What amazes
> >  me is how quick support was pulled from version 4.
> 
>   My morning-fogged mind says Version 4 was out less than a
> year.

Correct! When Microsoft EOL'd a ten year old OS (XP) the wailing's from
certain factions was deafening. Now with Mozilla EOLing a product less
than a year old the sounds of silence seem to be propagating.

The best part is that many of my "add-ons" again no longer work. From
what I can see in the ports system, and I may be wrong, there is not an
option to use the version 4 either although remnants of version 3x
seem to still be available. It appears that a user is forced into
version 5 from version 4. Wow, and people bitch about Microsoft's update
policies.

-- 
Jerry ✌
jerry+f...@seibercom.net

Disclaimer: off-list followups get on-list replies or ignored.
Do not CC this poster. Please do not ignore the "Reply-To" header.

http://www.catb.org/~esr/faqs/smart-questions.html
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Mozilla retires Firefox 4 from security support

[Damien Fleuriot]

On 6/23/11 2:02 PM, Robert Huff wrote:
> 
> Jerry writes:
> 
>>  >From URL:
>>  
>> .
>>  
>>  Obviously users of version 4 will be more or less forced to
>>  update to version 5 which is now in the ports system. What amazes
>>  me is how quick support was pulled from version 4.
> 
>   My morning-fogged mind says Version 4 was out less than a year.
> 
> 
>   Robert Huff
> 


Just had a pop up saying "next time you restart firefox you'll be
running v5" , so yes, users are "more or less forced" ;)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: ipfw nat inbound keep-state with net.inet.ip.fw.one_pass=0

[umage]

Some points:
1) I did use the handbook as reference, and my ruleset mimics the layout 
used there.
2) Handbook uses divert natd, which I used until I switched to the 
kernel nat approach.
3) I did not find any concrete examples of ipfw nat rule usage, so I'm 
using them the old natd way.


I did some more experiments, and noticed that for example, an inbound 
connection can still communicate both ways after the initial state table 
rule expires (20 seconds for some reason). If they communicate while the 
state entry is alive, the timeout resets, but it seems like it doesn't 
matter at all. This leads me to believe that 'ipfw nat' keeps an 
internal state table, which cannot be viewed, but is checked when doing 
check-state. Or something... which I have no way of knowing.


Here's a pruned version of the ruleset I used. Rule 600 is the one that 
adds that remote <--> local state table entry that messes everything up. 
If I omit keep-state on it, then traffic from the local side will be the 
one creating the states when replying, with a 5-second timeout.


$fw add 100 allow all from any to any via $lan_if

$fw nat 1 config if $wan_if redirect_port 192.168.0.55:12345 12345
$fw add 200 nat 1 ip4 from any to any in via $wan_if

$fw add 300 check-state

$fw add 400 skipto 800 ip4 from any to any out via $wan_if keep-state
$fw add 500 allow all from any to any out keep-state

$fw add 600 allow all from any to any dst-port 12345 in keep-state
$fw add 700 deny all from any to any in

$fw add 800 nat 1 ip4 from any to any out
$fw add 900 allow all from any to any

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Mozilla retires Firefox 4 from security support

[Robert Huff]

Jerry writes:

>  >From URL:
>  
> .
>  
>  Obviously users of version 4 will be more or less forced to
>  update to version 5 which is now in the ports system. What amazes
>  me is how quick support was pulled from version 4.

My morning-fogged mind says Version 4 was out less than a year.


Robert Huff



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Mozilla retires Firefox 4 from security support

[Jerry]

From URL:
.

Obviously users of version 4 will be more or less forced to update to
version 5 which is now in the ports system. What amazes me is how
quick support was pulled from version 4.

-- 
Jerry ✌
jerry+f...@seibercom.net

Disclaimer: off-list followups get on-list replies or ignored.
Do not CC this poster. Please do not ignore the "Reply-To" header.

http://www.catb.org/~esr/faqs/smart-questions.html
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: ipfw nat inbound keep-state with net.inet.ip.fw.one_pass=0

[Ian Smith]

In freebsd-questions Digest, Vol 368, Issue 6, Message: 21
On Tue, 21 Jun 2011 20:16:32 +0200 umage  wrote:

 > Hi, I'm an ipfw user that finally got the opportunity to set up NAT on
 > an interface with a public IP. I was doing some multi-homing experiments
 > using ipfw fwd combined with outbound ipfw nat - and since I needed to
 > run both, and both immediately ended ipfw ruleset execution, I had to
 > turn off net.inet.ip.fw.one_pass.
 > 
 > This is where I discovered that with that setting turned off, my inbound
 > NAT rule stopped working. Seems that with one-pass execution, the NAT
 > rule also performs keep-state of some sort, the dynamic state table
 > looks ok and everything works fine. But if I turn it off, and do my own
 > "allow all in keep-state" after applying a static NAT rule on an inbound
 > connection, I see that the state table has the remote IP on the left
 > side and mine on the right side. I also see that my NAT setup breaks and
 > my packets are sent to the internet with a 192.168.0.x source address.

It's not possible to tell what's going on from just such a description 
without sharing your ruleset with us.  Offhand it smells like you may 
have your nat rule/s in the wrong place with respect to check-state or 
keep-state rule(s).  If you show us your ruleset (with any sensitive 
addresses anonymised if need be) and network configuration, then your 
problem may become evident.

On the face of it, 'allow all in keep-state' is a very dangerous rule, 
and I'd advise a comparison of your ruleset to the relevant section in 
/etc/rc.firewall.  You should ignore the IPFW section in the Handbook, 
written by someone who prefers ipfilter and containing many errors; 
ipfw(8) is your friend.

 > I'd like to ask if I'm doing anything wrong, or whether this is a bug. I
 > checked the issue tracker, but found no relevant issues there. I also
 > tried asking around, but it seems noone even uses ipfw anymore.

Depends where you ask; the freebsd-ipfw list archives may assist.  Most 
problems turn out to be usage related, not to say there aren't still 
some bugs being addressed, lately several related to ipfw nat.

 > Triggering the issue requires a modified kernel (ipfw forward and ipfw
 > nat are not available by default), requires using ipfw nat (a relatively
 > new thing) instead of the old natd daemon, and requires changing the
 > value of a system setting.

ipfw nat requires no kernel configuration, it'll load as a module.  The 
only part of ipfw requiring kernel configuration nowadays is ipfw fwd, 
which can't be loaded as a module as it impacts many parts of the stack.

Neither do you have to use ipfw nat; natd works as well as ever, but I'd 
be surprised if this isn't an issue more to do with your rule placement.

cheers, Ian
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: ZFS on root and "find" performance

[Peter Vereshagin]

I feel summer creepin' in and I'm tired of this town again, freebsd-questions!
2011/06/23 03:56:07 -0700 Andrew Moran  => To 
freebsd-questions@freebsd.org :
AM> 
AM> Is anyone else running zfs on root and running into very slow finds?   The 
/etc/periodic/daily/450.status-security can take over a noisy HD thrashing hour 
to finish, the culprit being the find that crawls the filesystem.

I was doing, too. I believe zfs requires 4+ GB RAM and 4+ CPUs (or cores) and 
1+ TB of storage space to be useful.

AM> I'm hoping there is some I'm not sure if there if some simple zfs tuning I 
need to do to improve the performance on this.  I'm looking for what others use 
for their ZFS settings.

But SGI's XFS requires nothing like that, although it is not fully supported on 
FreeBSD but on those systems it is being designed fpr it requires no tuning for 
the performance of the any kind of acceptance.

I think UFS is still a rather choice for many old machines for which FreeBSD is 
a competent option for.

73! Peter pgp: A0E26627 (4A42 6841 2871 5EA7 52AB  12F8 0CE1 4AAC A0E2 6627)
--
http://vereshagin.org
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

ZFS on root and "find" performance

[Andrew Moran]

Is anyone else running zfs on root and running into very slow finds?   The 
/etc/periodic/daily/450.status-security can take over a noisy HD thrashing hour 
to finish, the culprit being the find that crawls the filesystem.

I'm hoping there is some I'm not sure if there if some simple zfs tuning I need 
to do to improve the performance on this.  I'm looking for what others use for 
their ZFS settings.

Thanks!

--Andy___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: ZFS on Root

[Peter Toth]

On 06/22/11 12:47, Chris Brennan wrote:
> * Peter Toth  [2011-06-22 12:16:11 +1200]:
>
>> Did you set the "bootfs" property on your root pool? Example: "zpool set
>> bootfs=tank/root tank"
> OK, I booted back to the livefs memostick, imported my zpool (tank) and 
> zpool promptly tells me the following
>
> Fixit# zpool set bootfs=tank/root tank
> cannot set property for 'tank': no such pool or dataset.
> Fixit
>
> But ... there is! It was a great tip and a worthy try. But it didn't 
> work, got any more idea's?
>
Did you set the mount point properly for your ZFS root? My previous post
was intended as an example only, you need to tailor it to your setup.
Also, you can use mfsbsd for installation very easy and straightforward
http://mfsbsd.vx.sk/ . 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: FreeBSD ZFS system

[krad]

On 23 June 2011 02:38, Damien Fleuriot  wrote:

>
>
> On 22 Jun 2011, at 22:22, krad  wrote:
>
> > On 21 June 2011 21:23, Matthew Seaman  >wrote:
> >
> >> On 21/06/2011 20:01, Dick Hoogendijk wrote:
> >>> I'd like to install FreeBSD (pcbsd) on a (zfs) mirror
> >>> In OpenSolaris you can install directly to the zfs mirror, but how's
> >>> this in this situation> After all, an UFS partitin is also created. How
> >>> can I get the equivalent of an OpenSolaris mirrored install for a
> >>> FreeBSD system?
> >>
> >> http://wiki.freebsd.org/RootOnZFS/GPTZFSBoot/Mirror
> >>
> >>   Cheers
> >>
> >>   Matthew
> >>
> >> --
> >> Dr Matthew J Seaman MA, D.Phil.   7 Priory Courtyard
> >> Flat 3
> >> PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
> >> JID: matt...@infracaninophile.co.uk   Kent, CT11 9PW
> >>
> >>
> >
> > its dead easy to do retrospective as well no need to  rebuild or ditch
> the
> > pcbsd install method.
> >
> > X = current boot drive
> > Y = blank drive
> > z = zfs partition/slice eg s1d, p3 etc
> >
> > gpart backup /dev/X | gpart restore /dev/Y
> >
>
> Hey that's pretty cool, does this work to copy from a small disk to a
> bigger one like dump does, or do the partitions have to be the same size ?
>
>
> > gpart bootcode -b /zfsboot/pmbr -p /zfsboot/(gpt)*zfsboot -i 1 /dev/Y
> > zpool attach  /dev/Xz /dev/Yz
> > ___
> > freebsd-questions@freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> > To unsubscribe, send any mail to "
> freebsd-questions-unsubscr...@freebsd.org"
>

it should work, however I have never done it in practice.

a quick test on my openindiana box shows it does

# zfs create -V 1G rpool/test2
# zfs create -V 2G rpool/test3
# zpool create test rpool/test2
# zpool create test /dev/zvol/dsk/rpool/test2
# zpool attach test /dev/zvol/dsk/rpool/test2 /dev/zvol/dsk/rpool/test3
# zpool status test
  pool: test
 state: ONLINE
 scan: resilvered 82K in 0h0m with 0 errors on Thu Jun 23 10:05:43 2011
config:

NAME   STATE READ WRITE CKSUM
test   ONLINE   0 0 0
  mirror-0 ONLINE   0 0 0
/dev/zvol/dsk/rpool/test2  ONLINE   0 0 0
/dev/zvol/dsk/rpool/test3  ONLINE   0 0 0

errors: No known data errors
#
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: FreeBSD ZFS system

[Valentin Bud]

On Tue, Jun 21, 2011 at 10:01 PM, Dick Hoogendijk  wrote:

> OK, it works very well. Installing a ZFS FreeBSD system with an ufs /boot
> is very very easy using the PC-BSD DVD.
> However, I have one question:
>
> I'd like to install FreeBSD (pcbsd) on a (zfs) mirror
> In OpenSolaris you can install directly to the zfs mirror, but how's this
> in this situation> After all, an UFS partitin is also created. How can I get
> the equivalent of an OpenSolaris mirrored install for a FreeBSD system?
>
> Hope I phrased the question clearly enough.
> __**_
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/**mailman/listinfo/freebsd-**questions
> To unsubscribe, send any mail to "freebsd-questions-**
> unsubscr...@freebsd.org "
>

Hello Community,

 Like others said in their answer to your question, you don't have to put
/boot on UFS, just go with root on ZFS.
If you would like speed when installing the system I recommend mfsBSD -
http://mfsbsd.vx.sk/. As pointed out
in the web page there is a script (zfsinstall) that does all the work for
you. It does all the steps described in the
wiki - http://wiki.freebsd.org/RootOnZFS/GPTZFSBoot/Mirror.

 If you want to gain knowledge about the process of installing FreeBSD with
root on ZFS then go with the wiki
article. Using mfsBSD I install a 8.2-STABLE custom system in under 5
seconds. That's pretty neat :).

a great day,
v
-- 
network warrior
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"