Re: profiling library smaller than non-profiling, while it contains more symbols. Why?

2012-07-13 Thread Wojciech Puchar

-rw-r--r--  1 root  wheel  6582354 Jul 12 22:56 libslatec.a
-rw-r--r--  1 root  wheel  6555122 Jul 12 23:02 libslatec_p.a
#



profile library or -fpic library?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: IPv6 && getaddrinfo(3C)

2012-07-13 Thread Matthias Apitz
El día Thursday, July 12, 2012 a las 09:01:50PM -0500, Robert Bonomi escribió:

> > >  req.ai_flags = AI_ADDRCONFIG|AI_NUMERICHOST; 
> > >  req.ai_family = AF_INET6;/* Same as AF_INET6. */ 
> 
> Isn't the setting of 'req.ai_family', above, going to guarantee that
> something that "looks like"  an IPv4 address will not be considered valid?
> 
> After all, what *POSSIBLE* _IPv6_info_ is there about an IPv4 address?
> 
> Per the manpage example, try PF_UNSPEC.

With PF_UNSPEC it works fine now, thanks for the hint; I'm attaching the
code for the client and as well one for a server creating LISTEN on IPv6
and IPv4 at the same time and handling the connections on both ports;

HIH

matthias


/* IPv6 client code using getaddrinfo */

#include 
#include 
#include 
#include 
#include 
#include 
#include 


main(int argc, char **argv)
{

struct addrinfo req, *ans;
int code, s, n;
char buf[1024];

memset(&req, 0, sizeof(req));
req.ai_flags = 0;   /* may be restricted to 
AI_ADDRCONFIG|AI_NUMERICHOST|... */
/* req.ai_family = AF_INET6;/* validates only AF_INET6 */
/* req.ai_family = AF_INET; /* validates only AF_INET, i.e. IPv4 */
req.ai_family = PF_UNSPEC;  /* validates IPv4 and IPv6. */
req.ai_socktype = SOCK_STREAM;

/* Use protocol TCP */

req.ai_protocol = IPPROTO_TCP;  /* 0: any, IPPROTO_UDP: UDP */

printf("host: %s\n", argv[1]);
if ((code = getaddrinfo(argv[1], "ssh", &req, &ans)) != 0) {
fprintf(stderr, "ssh: getaddrinfo failed code %d: %s\n", code, 
gai_strerror(code));
exit(1);
}
 
/* 'ans' must contain at least one addrinfo, use the first */ 

s = socket(ans->ai_family, ans->ai_socktype, ans->ai_protocol);
if (s < 0) {
perror("ssh: socket");
exit(3);
}

/* Connect does the bind for us */

if (connect(s, ans->ai_addr, ans->ai_addrlen) < 0) {
perror("ssh: connect");
exit(5);
}

/* just for test: read in SSH' good morning message */

n = read(s, buf, 1024);
printf ("read: %s", buf);

/*
 Free answers after use
 */ 
freeaddrinfo(ans);

exit(0);
}





/* IPv6 server code using getaddrinfo */

#include 
#include 
#include 
#include 
#include 
#include 
#include 
#include 
#include 
#include 

#include 


void doit()
{
printf("child forked end ended\n");
}

main(int argc, char **argv)
{
struct sockaddr_in6 from;
struct addrinfo req, *ans, *ans2;
intcode, sockFd1, sockFd2, len;

/* Set ai_flags to AI_PASSIVE to indicate that return addres s is 
suitable for bind() */

memset(&req, 0, sizeof(req));
req.ai_flags = AI_PASSIVE;
req.ai_family = PF_UNSPEC;  /* IPv6+IPv4: PF_UNSPEC, IPv4: 
PF_INET */
req.ai_socktype = SOCK_STREAM;
req.ai_protocol = IPPROTO_TCP;

#define SLNP "3025"

if ((code = getaddrinfo(NULL, SLNP, &req, &ans)) != 0) {
fprintf(stderr, "SLNP (%s): getaddrinfo failed code %d: %s\n", 
SLNP, code, gai_strerror(code));
exit(1);
}

/* 'ans' must contain at least one addrinfo and we use the first. */
/* it seems(!) that 1st one is the IPv6 when we use PF_UNSPEC */

if( (sockFd1 = socket(ans->ai_family, ans->ai_socktype, 
ans->ai_protocol)) < 0) {
perror("socket");
exit(-1);
}

if (bind(sockFd1, ans->ai_addr, ans->ai_addrlen) < 0) {
perror("bind");
close(sockFd1);
exit(-1);
}

/* create the 1st LISTEN */

printf("1st (IPv6) LISTEN...\n");
listen(sockFd1, 5);

/* if there is a 2nd addrinfo provided by getaddrinfo(3C) and we will 
create 2nd socket... */

ans2 = NULL;
if( ans->ai_next != NULL )
ans2 = ans->ai_next;

sockFd2 = -1;   /* set to -1 to be used as this in poll, see below 
*/
if( ans2 != NULL ) {
if( (sockFd2 = socket(ans2->ai_family, ans2->ai_socktype, 
ans2->ai_protocol)) < 0) {
perror("socket");
exit(-1);
}
if (bind(sockFd2, ans2->ai_addr, ans2->ai_addrlen) < 0) {
perror("bind");
close(sockFd2);
exit(-1);
}
printf("2nd (IPv4) LISTEN...\n");
listen(sockFd2, 5);
}


for (;;) {
int newsockFd, len = sizeof(from), readyFd, polled;
struct pollfd fds[2];

/* we poll both fds for events and accept the one which is 
ready */

fds[0].fd = sockFd1;
fds[0].events = POLLIN | POLLPRI;
fds[0].revent

Re: Is there a way to run FreeBSD ports through port 80?

2012-07-13 Thread Wojciech Puchar
We handle a lot of highly sensitive information and that's the need for the 
severe lock-down. Even the web-proxy is restricted to the sites accessible 
meaning that we need to request access if we need to go somewhere not 
governed by that proxy.

this make sense.

just blocking everything except 80 is pure nonsense.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Is there a way to run FreeBSD ports through port 80?

2012-07-13 Thread Jerry
On Fri, 13 Jul 2012 11:58:24 +0200 (CEST)
Wojciech Puchar articulated:

> > We handle a lot of highly sensitive information and that's the need
> > for the severe lock-down. Even the web-proxy is restricted to the
> > sites accessible meaning that we need to request access if we need
> > to go somewhere not governed by that proxy.
> this make sense.
> 
> just blocking everything except 80 is pure nonsense.

Not if that is specifically what the OP is attempting to accomplish.
Whether or not you feel it is nonsense is about as relative to the
problem as tits on a bull.

-- 
Jerry ♔

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the Reply-To header.
__
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: profiling library smaller than non-profiling, while it contains more symbols. Why?

2012-07-13 Thread Anton Shterenlikht
On Thu, Jul 12, 2012 at 09:12:32PM -0500, Robert Bonomi wrote:
> > From owner-freebsd-questi...@freebsd.org  Thu Jul 12 17:34:12 2012
> > Date: Thu, 12 Jul 2012 23:31:31 +0100
> > From: Anton Shterenlikht 
> > To: freebsd-questions@freebsd.org
> > Subject: profiling library smaller than non-profiling,
> > while it contains more symbols. Why?
> >
> > While updating my port (math/slatec) to use
> > the new OPTIONS framework, I did some
> > experiments with the profiling library.
> >
> > I don't know much about this, so what surprised me
> > is that the profiling library is smaller:
> >
> > # ls -al lib*a
> > -rw-r--r--  1 root  wheel  6582354 Jul 12 22:56 libslatec.a
> > -rw-r--r--  1 root  wheel  6555122 Jul 12 23:02 libslatec_p.a
> > #
> 
> It it possible that libslatac.a has debggingn symbols, and the profiling
> library does not?
> 
> Or that the profiling library was compiled with a lower degree of
> optimization ?  (many of the 'higher'-level optimizations cause
> _larger_, albeit faster, code to be generated)
> 
> Any other differences in compilation flags?

No, the compilation is very straightforward for this library:

===>  Building for slatec-4.1
Warning: Object directory not changed from original 
/usr/ports/math/slatec/work/src
gfortran46   -O -Wl,-rpath=/usr/local/lib/gcc46 -c aa.f
 *skip ~1400 other files*
gfortran46   -O -Wl,-rpath=/usr/local/lib/gcc46 -c zwrsk.f
building static slatec library
/usr/local/bin/ranlib libslatec.a

gfortran46 -pg -O -Wl,-rpath=/usr/local/lib/gcc46 -o aa.po -c aa.f
 *skip ~1400 other files*
gfortran46 -pg -O -Wl,-rpath=/usr/local/lib/gcc46 -o zwrsk.po -c zwrsk.f
building profiled slatec library
/usr/local/bin/ranlib libslatec_p.a

gfortran46 -fpic -DPIC -O -Wl,-rpath=/usr/local/lib/gcc46 -o aa.So -c 
aa.f
 *skip ~1400 other files*
gfortran46 -fpic -DPIC -O -Wl,-rpath=/usr/local/lib/gcc46 -o zwrsk.So -c zwrsk.f
building shared library libslatec.so.1
# 

That's all there is.

As I mentioned in the original email,
the only difference, according to nm(1),
between the non-profiling and the profiling
library, is that the profiling library contains
symbol .mcount (or _mcount, depending on the arch)
for each object file. All other symbols are identical.

-- 
Anton Shterenlikht
Room 2.6, Queen's Building
Mech Eng Dept
Bristol University
University Walk, Bristol BS8 1TR, UK
Tel: +44 (0)117 331 5944
Fax: +44 (0)117 929 4423
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: profiling library smaller than non-profiling, while it contains more symbols. Why?

2012-07-13 Thread Anton Shterenlikht
On Fri, Jul 13, 2012 at 11:15:45AM +0200, Wojciech Puchar wrote:
> >-rw-r--r--  1 root  wheel  6582354 Jul 12 22:56 libslatec.a
> >-rw-r--r--  1 root  wheel  6555122 Jul 12 23:02 libslatec_p.a
> >#
> >
> 
> profile library or -fpic library?

I think profile:

===>  Building for slatec-4.1
Warning: Object directory not changed from original 
/usr/ports/math/slatec/work/src
gfortran46   -O -Wl,-rpath=/usr/local/lib/gcc46 -c aa.f
 *skip ~1400 other files*
gfortran46   -O -Wl,-rpath=/usr/local/lib/gcc46 -c zwrsk.f
building static slatec library
/usr/local/bin/ranlib libslatec.a

gfortran46 -pg -O -Wl,-rpath=/usr/local/lib/gcc46 -o aa.po -c aa.f
 *skip ~1400 other files*
gfortran46 -pg -O -Wl,-rpath=/usr/local/lib/gcc46 -o zwrsk.po -c zwrsk.f
building profiled slatec library
/usr/local/bin/ranlib libslatec_p.a

gfortran46 -fpic -DPIC -O -Wl,-rpath=/usr/local/lib/gcc46 -o aa.So -c 
aa.f
 *skip ~1400 other files*
gfortran46 -fpic -DPIC -O -Wl,-rpath=/usr/local/lib/gcc46 -o zwrsk.So -c zwrsk.f
building shared library libslatec.so.1


-- 
Anton Shterenlikht
Room 2.6, Queen's Building
Mech Eng Dept
Bristol University
University Walk, Bristol BS8 1TR, UK
Tel: +44 (0)117 331 5944
Fax: +44 (0)117 929 4423
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


anyone here use poudriere ?

2012-07-13 Thread Vincent Hoffman
I've been playing with poudriere and pkg as per
http://fossil.etoilebsd.net/poudriere/doc/trunk/doc/pkgng_repos.wiki
in the hope that it will be an easier way to maintain a custom internal
package repository for work not I'va managed to get a few FreeBSD boxes
into service there.

I'm liking it lots more than the traditional package build but I am
having some problems working out how to set custom build options for
ports. Does anyone else use poudriere for this and if so how do they
handle this.


Thanks,
Vince
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


9.0 w/ACPI enabled, excluding NICs

2012-07-13 Thread Ronny Mandal
Hi,

I am running a small personal file server. To ensure constant network
access, had to disable the ACPI, hence no power saving at all. The CPU
gets very warm as everything (presumably) is running at full throttle.
Is there any way to disable the ACPI partially, i.e. allow spin-down
for disks etc, but keep the NICs running?

Hope that this question was understandable. Thanks.


Regards,

Ronny Mandal
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


syntax check of mail addr (RFC 3696)

2012-07-13 Thread Matthias Apitz

Hello,

Do we have anything in the portswhich could do a strong syntax check of
mail addrs as described in RFC 3696 (...)? Thanks

matthias
-- 
Matthias Apitz
e  - w http://www.unixarea.de/
UNIX since V7 on PDP-11, UNIX on mainframe since ESER 1055 (IBM /370)
UNIX on x86 since SVR4.2 UnixWare 2.1.2, FreeBSD since 2.2.5
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: 9.0 w/ACPI enabled, excluding NICs

2012-07-13 Thread Wojciech Puchar

I am running a small personal file server. To ensure constant network
access, had to disable the ACPI, hence no power saving at all. The CPU


why you "had to" disable ACPI. i never ever seen network problems with 
ACPI. basically it works, or it doesn't at all.



gets very warm as everything (presumably) is running at full throttle.
Is there any way to disable the ACPI partially, i.e. allow spin-down
for disks etc, but keep the NICs running?


This is IMHO not about FreeBSD support of ACPI but possible BIOS settings 
that turn on some kind of hibernation.


Hope that this question was understandable. Thanks.


Regards,

Ronny Mandal
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: video buffer location

2012-07-13 Thread Harald Weis
On Fri, Jul 06, 2012 at 05:55:37PM +0200, Harald Weis wrote:
 > On Wed, Jul 04, 2012 at 11:27:44PM +0100, RW wrote:
 >  > On Wed, 4 Jul 2012 22:34:21 +0200
 >  
 >  > Actually Opera already has a setting: "Enable plug-ins only on
 >  > demand" (under preferences->advanced->content). It disables all
 >  > plugins by default and you can click on an individual placeholder to
 >  > enable a plug-in for a specific object, so you can watch a flash
 >  > movie or turn on a flash navigation menu without having to turn-on any
 >  > flash adverts on the same page.  
 >  
 > Trying it out on www.spiegel.de.
 > 
 > But I cannot find the "individual placeholder". Where is it ?
 >  
 > -- 
 > Harald Weis
 > ___
 > freebsd-questions@freebsd.org mailing list
 > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 > To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Alright, I just found it. On my system the placeholders are here:
Tools -> Advanced -> Plug-ins

Thanks again,
Harald
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


mod_rewrite problem with tilde

2012-07-13 Thread David Banning
I am migrating to a new server location which right now
has no domain name, so the ip address is being used.
The ISP gives an address for the apache directory like so;

http://184.154.230.2/~smartst2/

A simple redirect works, such as this one which directs to another
site;

Options +FollowSymLinks
rewriteEngine on
rewriteRule ^test\.html$ http://www.somesite.com/index.php [R=301,L]

but a redirect within the site does not work.  I wonder if it has to 
do with the tilde ~ character that the ISP has configured.

I presently have the following .htaccess;

RewriteEngine on
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_FILENAME} !-l
RewriteRule   ^[^/]*\.php$  /
RewriteRule   ^[^/]*\.html$  index.php

Which does not work. If anyone is aware of problems using 
mod_rewrite with the ~ character or could contribute any pointers
as to how I could gain more information on - for instance -where-
mod_rewrite is -attempting- to redirect (considering my above 
.htaccess. 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: anyone here use poudriere ?

2012-07-13 Thread Patrick Lamaiziere
Le Fri, 13 Jul 2012 12:32:48 +0100,
Vincent Hoffman  a écrit :

> I've been playing with poudriere and pkg as per
> http://fossil.etoilebsd.net/poudriere/doc/trunk/doc/pkgng_repos.wiki
> in the hope that it will be an easier way to maintain a custom
> internal package repository for work not I'va managed to get a few
> FreeBSD boxes into service there.
> 
> I'm liking it lots more than the traditional package build but I am
> having some problems working out how to set custom build options for
> ports. Does anyone else use poudriere for this and if so how do they
> handle this.

You can copy options into your jail (see man poudriere).

But I agree there is a lack of an interactive mode into poudriere. When
I install a new port, I don't know which options are available and I
would like to choose them once time.

Regards.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: 9.0 w/ACPI enabled, excluding NICs

2012-07-13 Thread Ronny Mandal

On 13.07.2012 15:52, Wojciech Puchar wrote:

I am running a small personal file server. To ensure constant network
access, had to disable the ACPI, hence no power saving at all. The CPU


why you "had to" disable ACPI. i never ever seen network problems with 
ACPI. basically it works, or it doesn't at all.


When the server is idle with ACPI enabled, it did not respond to ping 
after a short period. With ACPI disabled, this was alleviated. So, 
basically, it will stop working after a while. My guess is that ACPI 
will shut down the power for the NIC. But that is only a guess. 
Furthermore, when ACPI is disabled, no network problem arises. This 
suggests, at least to me, that ACPI is somehow involved.



gets very warm as everything (presumably) is running at full throttle.
Is there any way to disable the ACPI partially, i.e. allow spin-down
for disks etc, but keep the NICs running?


This is IMHO not about FreeBSD support of ACPI but possible BIOS 
settings that turn on some kind of hibernation.
Each and every power saving function in the BIOS is disabled. 
Nevertheless, I believe that a selective ACPI configuration should 
resolve this issue,





Hope that this question was understandable. Thanks.


Regards,

Ronny Mandal
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
"freebsd-questions-unsubscr...@freebsd.org"





___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Jabber mode

2012-07-13 Thread Chuck Bacon
FreeBSD 9.0-RELEASE #0: Tue Jan  3 07:46:30 UTC 2012
MoBo M7A475-TC-(?)

5% jabber.
Successful boot until RE0 (ethernet) hits switch, then jabber.
UnPlugging,Replugging, then boot continues.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: anyone here use poudriere ?

2012-07-13 Thread Vincent Hoffman
On 13/07/2012 16:04, Patrick Lamaiziere wrote:
> Le Fri, 13 Jul 2012 12:32:48 +0100,
> Vincent Hoffman  a écrit :
>
>> I've been playing with poudriere and pkg as per
>> http://fossil.etoilebsd.net/poudriere/doc/trunk/doc/pkgng_repos.wiki
>> in the hope that it will be an easier way to maintain a custom
>> internal package repository for work not I'va managed to get a few
>> FreeBSD boxes into service there.
>>
>> I'm liking it lots more than the traditional package build but I am
>> having some problems working out how to set custom build options for
>> ports. Does anyone else use poudriere for this and if so how do they
>> handle this.
> You can copy options into your jail (see man poudriere).
>
> But I agree there is a lack of an interactive mode into poudriere. When
> I install a new port, I don't know which options are available and I
> would like to choose them once time.
/FACEPALM
I could swear I read the man page properly, obviously not.
Thank you

Vince
> Regards.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: 9.0 w/ACPI enabled, excluding NICs

2012-07-13 Thread Waitman Gobble
On Jul 13, 2012 8:34 AM, "Ronny Mandal"  wrote:
>
> On 13.07.2012 15:52, Wojciech Puchar wrote:
>>>
>>> I am running a small personal file server. To ensure constant network
>>> access, had to disable the ACPI, hence no power saving at all. The CPU
>>
>>
>> why you "had to" disable ACPI. i never ever seen network problems with
ACPI. basically it works, or it doesn't at all.
>>
> When the server is idle with ACPI enabled, it did not respond to ping
after a short period. With ACPI disabled, this was alleviated. So,
basically, it will stop working after a while. My guess is that ACPI will
shut down the power for the NIC. But that is only a guess. Furthermore,
when ACPI is disabled, no network problem arises. This suggests, at least
to me, that ACPI is somehow involved.
>
>
>>> gets very warm as everything (presumably) is running at full throttle.
>>> Is there any way to disable the ACPI partially, i.e. allow spin-down
>>> for disks etc, but keep the NICs running?
>>
>>
>> This is IMHO not about FreeBSD support of ACPI but possible BIOS
settings that turn on some kind of hibernation.
>
> Each and every power saving function in the BIOS is disabled.
Nevertheless, I believe that a selective ACPI configuration should resolve
this issue,
>
>
>
>>>
>>> Hope that this question was understandable. Thanks.
>>>
>>>
>>> Regards,
>>>
>>> Ronny Mandal
>>> ___
>>> freebsd-questions@freebsd.org mailing list
>>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>>> To unsubscribe, send any mail to "
freebsd-questions-unsubscr...@freebsd.org"
>>>
>
>
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "
freebsd-questions-unsubscr...@freebsd.org"

A «band-aid» type fix could be to ping gw (once) using cron 0-59/5 or
something

Waitman Gobble
San Jose California
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Is there a way to run FreeBSD ports through port 80?

2012-07-13 Thread jb
Kaya Saman  gmail.com> writes:

> 
> Hi,
> 
> I am trying to introduce FreeBSD into my office and it's been looked
> at with quite a bit of enthusiasm however, what makes it look bad is
> our companies 'security' policy to block FTP.
> 
> At present they are running a whole bunch of CentOS based boxes and
> VM's which of course can be run through port 80 when using YUM.
> 
> How does one get round this issue as my superiors are telling me that
> opening up FTP is a security risk and therefor don't want to proceed?
> 
> I would like to use ports specifically and not the pkg_add tool to get
> software.
> 
> Can anyone sugget anything?
> 
> Regards,
> 
> Kaya

Hi,

> ...
> We simply have it [ed: FTP] banned on a Juniper firewall. So http is being
> proxied by a web appliance but that's it... nothing else.
> ...
> Yep. It's up to your proxy server whether it's going to handle FTP or only
> HTTP (and/or HTTPS).
> ...
> We have an 'appliance' based proxy and as company policy FTP should be
> restricted, ie. not active on this as it's a security risk.

Regardless of whether your corporate proxy can not handle FTP by its limited
capability or by company's policy, there is a solution called "proxy 
chaining".

http://www.freeproxy.ru/en/free_proxy/faq/index.htm

How to bypass corporate proxy?

What is HTTP proxy server?
  ... HTTP Proxy Chaining

What is proxy chaining (proxy to proxy)?

FTP through a proxy server: problems and solutions

jb




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Is there a way to run FreeBSD ports through port 80?

2012-07-13 Thread Wojciech Puchar

http://www.freeproxy.ru/en/free_proxy/faq/index.htm

How to bypass corporate proxy?


go away from corporation. A side effect is saving your mental health on 
the long run.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: mod_rewrite problem with tilde

2012-07-13 Thread Fabian Keil
David Banning  wrote:

> I am migrating to a new server location which right now
> has no domain name, so the ip address is being used.
> The ISP gives an address for the apache directory like so;
> 
> http://184.154.230.2/~smartst2/
> 
> A simple redirect works, such as this one which directs to another
> site;
> 
> Options +FollowSymLinks
> rewriteEngine on
> rewriteRule ^test\.html$ http://www.somesite.com/index.php [R=301,L]
>
> but a redirect within the site does not work.  I wonder if it has to 
> do with the tilde ~ character that the ISP has configured.
> 
> I presently have the following .htaccess;
> 
> RewriteEngine on
> RewriteCond %{REQUEST_FILENAME} !-f
> RewriteCond %{REQUEST_FILENAME} !-d
> RewriteCond %{REQUEST_FILENAME} !-l
> RewriteRule   ^[^/]*\.php$  /
> RewriteRule   ^[^/]*\.html$  index.php
> 
> Which does not work. If anyone is aware of problems using 
> mod_rewrite with the ~ character or could contribute any pointers
> as to how I could gain more information on - for instance -where-
> mod_rewrite is -attempting- to redirect (considering my above 
> .htaccess. 

If you access your server with "curl -v" it will show you
were the response redirects to (if you get a redirect at
all). Checking the Apache logs would be another option,
but it may require fiddling with the log levels first.

Without knowing the URL you use for testing it's hard to
tell where the problem is, but my guess is that you are
matching against a text that contains one or more slashes
which your patterns don't allow.

Fabian


signature.asc
Description: PGP signature


Re: Is there a way to run FreeBSD ports through port 80?

2012-07-13 Thread jb
Wojciech Puchar  wojtek.tensor.gdynia.pl> writes:

> 
> > http://www.freeproxy.ru/en/free_proxy/faq/index.htm
> >
> > How to bypass corporate proxy?
> 
> go away from corporation. A side effect is saving your mental health on 
> the long run.

Well, judging by
> "I am trying to introduce FreeBSD into my office ..."
and this work environment description
> "We handle a lot of highly sensitive information and that's the need for
> the severe lock-down. Even the web-proxy is restricted to the sites
> accessible meaning that we need to request access if we need to go
> somewhere not governed by that proxy."
there is no chance for fooling around or trying to bypass policy, in 
particular if you are not in charge.
She has to play by the rules, if she is the person holding the hat in her
hands. Period.
jb


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Broken link on your website

2012-07-13 Thread Emma Haze
Hi!

I just wanted to follow up with you regarding the email I had sent you
about the broken link I found on your website. Please let me know if you
had the chance to look at both the broken link and my suggested
replacement. It would be great if my resource was used.

Please let me know what you think!

Best Regards,

Emma






On Tue, Jun 26, 2012 at 4:21 AM, Emma Haze  wrote:

> Hi!
>
> Wanted to touch base real quick and see if you have had already looked
> into my suggested resource and decide if it's a good replacement for the
> broken link on your page?
>
> Let me know what you think!
>
> Emma
>
>
>
> On Sun, May 6, 2012 at 1:37 AM, Emma Haze  wrote:
>
>> Hi There,
>>
>> Sorry, I'm not sure whether I've already contacted you about this, so I
>> apologize if I'm notifying you a second time. But I had noticed that you
>> have a broken link on your page at cybershade.us/freebsd/www/securitylinking 
>> to
>> http://www.shmoo.com/securecode/, so I wanted to inform you in case you
>> are not aware of this. And if you are still updating your website, I've
>> included a similar resource on Secure Programming that you can replace the
>> broken link with if you are interested. Thanks for maintaining a great site!
>>
>> Link: http://www.onlineitdegree.net/resources/secure-programming/
>>
>> Best Regards,
>> Emma
>>
>>
>>
>>
>>
>>
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Broken link on your website

2012-07-13 Thread Robert Bonomi
> From owner-freebsd-questi...@freebsd.org  Fri Jul 13 16:00:15 2012
> From: Emma Haze 
> Date: Sat, 14 Jul 2012 04:57:52 +0800
> To: freebsd-questions@freebsd.org
> Subject: Re: Broken link on your website
>
> Hi!
>
> I just wanted to follow up with you regarding the email I had sent you 
> about the broken link I found on your website. Please let me know if you 
> had the chance to look at both the broken link and my suggested 
> replacement. It would be great if my resource was used.

People looked.  A *permanent* decisionwas made _NOT_ to use anything from
your phoney diploma-mill website.

> Please let me know what you think!

We think you are an imbecilic spammer who couldn't catch a clue even
if you doused yourself in clue musk, and did the clue-mating dance
in the middle of a field full of randy clues, at the height of the 
clue-rutting season.

How could _anyone_ possibly come to that conclusion, you ask?

Hint #1: *NOBODY* at the address you have repeatedly spammed has anything
 to do with the site you found.

Hint #2: What you found was a _copy_ -- a sadly out-of-date (four years
 or so) one -- of the official website.

Hint #3: The _official_ website removed that broken link *YEARS* ago.

Hint #4: Under no circumstances would the official site consider using
 anything fom someone who is incapable of figuring out the 
 _correct_ contact address for the webmaster, and bombards a 
 user-support mailing-list instead.

Hint #5: There is no way that the *unmaintained* 'copy' site would ever
 use your 'resource'.  If they were ever to update things, they
 would simply pull a newer copy of the official website.  Which
 eliminates the out-of-date link.


Now, *PLEASE* stop bombarding the innocent users of the support mailing-list
with your ignorant, ill-informed, impossible-of-fullfilment nonsense.

Continued spamming off the mailing-list might well result in numerous people
deciding to forward all their junk email to you, as 'thanks' for wasting their
time.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"