freebsd-update fetch trying to update custom kernel

2012-08-20 Thread Denis
Hi,

I have FreeBSD 9.0 (p4) with custom kernel.

 uname -i says it:
HOMEWIFI90

However, when I run freebsd-update fetch command it would like to
update my kernel as well:

freebsd-update fetch
Looking up update.FreeBSD.org mirrors... 3 mirrors found.
Fetching metadata signature for 9.0-RELEASE from update5.FreeBSD.org... done.
Fetching metadata index... done.
Inspecting system... done.
Preparing to download files... done.

The following files are affected by updates, but no changes have
been downloaded because the files have been modified locally:
/var/db/mergemaster.mtree

The following files will be updated as part of updating to 9.0-RELEASE-p4:
/boot/kernel/kernel
/boot/kernel/kernel.symbols

What is wrong with it? If I'm not mistaken, this problem first
appeared in 9.0-RELEASE-p2, before this everything worked fine.
How can I fix this error?

Best regards,
Pi
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: freebsd-update fetch trying to update custom kernel

2012-08-20 Thread Denis
Hi Alexandre,

 Have you rebuilt your custom kernel after ?
 This is described in the Handbook in the section 25.2.2
 http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/updating-upgrading-freebsdupdate.html

Yes, I rebuilt my custom kernel after. But this doesn't help - every
time I run freebsd-update fetch it suugest me to update kernel and
kernel.symbols.

Best regards,
Denis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: freebsd-update fetch trying to update custom kernel

2012-08-20 Thread Denis
 Then why not follow my suggestion of _letting_ freebsd-update
 update the kernel, but _use_ a different one instead which it
 won't touch? In /boot/loader.conf:

 kernel=mykernel
 bootfile=/boot/mykernel/kernel

 Now freebsd-update can happily alter the default kernel without
 affecting yours. Note that this implies that _you_ have to take
 care of kernel changes and recompiling if needed.

 I know, it's just a workaround and doesn't address the problem
 directly, but it should get you away from any related trouble.

Yes, I saw your advice, and will follow it.
The main idea - may be I missed something and there will be an easy
fix to my problem. I want to make sure that the problem exists, and
I'm not the only person faced with this error. And also I have a small
hope that problem will be fixed by freebsd team :-).

Best regards,
Denis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: freebsd-update fetch trying to update custom kernel

2012-08-20 Thread Denis
 If you're building your own customised kernel, why don't you just build the 
 entire system from source? I've not used freebsd-update yet and probably 
 won't. Is it just a matter of time, i.e. waiting for the compilation to 
 finish?

Actually I built this system from source. And now use freebsd-update
just to install security patches (it seems to be easy and faster then
to rebuild world).

Best regards,
Denis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Question about FreeBSD for IA-64 software

2012-06-09 Thread Denis Guzanov
Dear FreeBSD Team,

Firstly I would like to say you Big thanks for your really good job and the
best system for us, small IT staff.

Second, I would like to ask you about some problem with FreeBSD source.

I've downloaded .iso Image from this link:
ftp://ftp.freebsd.org/pub/FreeBSD/releases/ia64/ia64/ISO-IMAGES/9.0/following
.iso file: FreeBSD-9.0-RELEASE-ia64-release.iso

And when I tried to install it I have nothing I did it many times, but
have no result. When I've downloaded 8.3 version Installation was completed
successfully.

Dear FreeBSD Team, could you, please, check your .iso file for IA-64
systems or maybe consult me what I need to do?


Thanks and Best regards,
Denis.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


ZFS question

2012-02-18 Thread Denis Fortin

Good morning,

On a small system using FreeBSD 9.0-RELEASE, ZFS is reporting an issue 
on a pool, that I am not certain is really an issue, but I don't know 
how to investgate...


Here is the situation: I have created a ZFS pool on an external 1TB 
Maxstor USB drive.


The ZFS pool sees little or no activity, I haven't started using it for 
real yet.


The drive spins down frequently because of lack of activity, and takes 
quite a few seconds to spin up.


Now, I frequently get errors in the 'zpool status' thus (like, a couple 
of times per day):


 [denis@datasink] ~ zpool status -v
   pool: maxstor
  state: ONLINE
 status: One or more devices has experienced an unrecoverable error.  An
 attempt was made to correct the error.  Applications are 
unaffected.
 action: Determine if the device needs to be replaced, and clear the 
errors

 using 'zpool clear' or replace the device with 'zpool replace'.
see: http://www.sun.com/msg/ZFS-8000-9P
  scan: scrub repaired 0 in 0h0m with 0 errors on Sat Feb 18 08:49:41 2012
 config:

 NAME  STATE READ 
WRITE CKSUM
 maxstor   ONLINE   
0 0 0
   gptid/64a30ca9-56ad-11e1-80c4-24ce7c30  ONLINE   
1 0 0


 errors: No known data errors
 [denis@datasink] ~ zpool iostat -v maxstor
capacity operations
bandwidth
 poolalloc   free   read  write   
read  write
 --  -  -  -  -  
-  -
 maxstor 1.10M   928G  0  0
455  1.11K
   gptid/64a30ca9-56ad-11e1-80c4-24ce7c30  1.10M   928G  
0  0455  1.11K
 --  -  -  -  -  
-  -


I know that this sounds bad for the drive, but I cannot find anywhere in 
my logs (/var/log/messages, dmesg, etc) a reference to this supposed 
'unrecoverable error' that the drive has had, and the resilvering 
*always* works.


I am wondering whether it might not simply be a timeout issue, that is: 
the drive is taking too long to spin up, which causes a timeout and a 
read error to be reported, which then disappears completely once the 
drive has spun up.


Does anybody have a suggestion about how I could go about investigating 
this issue?  Shouldn't there be a log of the 'unrecoverable error' 
somewhere?


Thank you all,

Denis

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


dcvs passwd

2011-05-01 Thread Denis Rybakov
-- 
How I may stay commiter? Where I may get passwd on ssh,dcvs,pcvs,svn?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


disk problem: suggestion on how to handle...

2011-04-25 Thread Denis Fortin
Good morning,

I have a small server with an SSD drive in it that is having some problems.

Notably, dmesg has been repeatedly reporting the following error message:

g_vfs_done():ad0s1a[READ(offset=-574217714356717568, 
length=16384)]error = 5

I realize that the best course of action is to replace the disk and restore 
from a backup, but this isn't really an option immediately.

So, is there a way to mark the inode bad and then launch an fsck ?  How can I 
turn offset=-574217714356717568 into a usable piece of information?

Any suggestion welcome.

Denis, fortin@acm.org___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


download if_ppp.ko

2011-03-31 Thread Denis Rybakov
Where download if_ppp.ko?
Denis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


UFS Snapshots and iowait

2010-11-10 Thread Chris St Denis
I have started using mount -u -o snapshot as part of my backup process 
in order to have a week worth of local differential backups to allow 
quick and easy recovery of lost/overwritten/etc files.


The snapshot of the partition (~250G and 2.3 million inodes used. ~10GB 
of data change per day) takes around 10 minutes to complete. During the 
first 5 minutes everything seems to be find, but during the second 5 
minutes the Apache processes that are logging to this drive start 
building up in L (logging) state until they hit MaxClients.


Is this just due to the very high io bandwidth usage associated with 
making a snapshot, or does the creation of this snapshot completely 
block IO writes for around 5 minutes?


Any suggested workarounds? I already bumped up the number of Apache 
slots to 166% but it looks like I would have to increase the number much 
more to use that as a primary solution.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Cannot build perl on FreeBSD 8.0

2010-02-07 Thread Denis
I updated from 7.2 to 8.0 from source.
No I updated ports tree and try to update perl (from ports), but get
the next error (version does not matter, 5.8, 5.10 give the same
error):

 CCCMD =  cc -DPERL_CORE -c
-DAPPLLIB_EXP=/usr/local/lib/perl5/5.8.9/BSDPAN -DHAS_FPSETMASK
-DHAS_FLOATINGPOINT_H -fno-strict-aliasing -pipe -I/usr/local/include
-O2 -pipe -fno-strict-aliasing -Wall -W -Wextra
-Wdeclaration-after-statement -Wendif-labels -Wc++-compat
rm -f opmini.c
op.c opmini.c
op.c:No such file or directory
*** Error code 1

Stop in /usr/ports/lang/perl5.8/work/perl-5.8.9.
*** Error code 1

Stop in /usr/ports/lang/perl5.8.
*** Error code 1

Stop in /usr/ports/lang/perl5.8.

---
Since there is no such error (tried to search on goolge but without
luck) it seems that I did wrong something/ But cannot find out what -
everything seems to work fine.
May be someone faced with similar problem, what can I do to compile perl?

Best regards,
Denis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Cannot build perl on FreeBSD 8.0

2010-02-07 Thread Denis
On Sun, Feb 7, 2010 at 8:03 PM, Warren Block wbl...@wonkity.com wrote:
 Did you rebuild all your ports after the upgrade from 7.2 to 8.0?
 Do you have any extra settings in /etc/make.conf?

Not yet. I'm trying to do this - a lot of ports depend on perl, and I
get stuck with it.
No, there are no any extra settings in /etc/make.conf.

Denis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Cannot build perl on FreeBSD 8.0

2010-02-07 Thread Denis
On Sun, Feb 7, 2010 at 10:36 PM, Warren Block wbl...@wonkity.com wrote:
  You may be running into the situation where something Perl needs can't
  run because of mixed libraries.

  For the 7-8 major version upgrade, it's usually easier and faster to
  save your pkg_info output, backup /usr/local/etc, and pkg_delete
  everything.  Then update the ports tree and start installing ports from
  scratch.

  There may be a way to automate that, like feeding the saved pkg_info
  output to portupgrade.  I haven't done it often enough to investigate.

        pkg_sort, which is part of portupgrade, is a useful tool.

 That's pretty cool:

 pkg_info | cut -f 1 -d' ' | pkg_sort

 You could just start installing ports at the bottom and work upwards.

 The only thing that makes me wonder is that list shows wine above
 xorg-server on my system.

Thank you for your help and useful tips!

The problem was easy - long time ago I made a link in /bin/basename to
/usr/compat/linux/bin/basename .
There for during perl config wrong basename was chosen and lead to the error.

Best regards,
Denis
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


very low upload speed to any FTP daemons

2010-01-20 Thread Denis Chumachenko
I've tried pure-ftpd and vsftpd and got very low upload speed (~200kb/s) 
per a connection. but when I download on the server using wget speed is 
2Mb/s


on the ftpclient from which I do upload if to increase the param I/O 
buffer size till 1Mb upload speed increases to ~2Mb/s


when I use these ftp demons on the Linux server there is no such kind of 
problem and I do not need to correct I/O buffer size it seems it is 
identified automatically on Linux.


how should I set up FreeBSD to increase default I/O buffer or identify 
it automatically for ftp incoming connections.


please advise if you are able.


thanks a lot!
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


ipfw: install_state: entry already present, done

2009-09-24 Thread Chris St Denis
I'm trying to setup a stateful firewall for my server such that any 
traffic can go out, and it's reply come back. However I'm getting the 
error message ipfw: install_state: entry already present, done 
repeated many times in my logs (tho the rules seemed to work fine 
otherwise).


I stripped down the rules to the minimum I could and discovered the line 
causing it is allow udp from me to any keep-state. The similar line 
for TCP also causes it too if the setup keyword is left off. But UDP 
does not work if I put the setup keyword on it's line (because there is 
no setup for UDP I assume)


Full firewall rules:

   dns2# ipfw list
   00100 allow ip from any to any via lo0
   00200 deny ip from any to 127.0.0.0/8
   00300 deny ip from 127.0.0.0/8 to any
   00400 allow udp from me to any keep-state
   65535 deny ip from any to any

I found some search results for this error message, but none seem to 
have a solution to the problem.


System info:
dns2# uname -a
FreeBSD dns2 7.2-RELEASE-p2 FreeBSD 7.2-RELEASE-p2 #0: Wed Jun 24 
00:14:35 UTC 2009 
r...@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC  amd64


Hardware: virtual server under vmWare ESXi (not that that should matter)

network card: em0


--
Chris St Denis
Programmer
SmarttNet (www.smartt.com)
Ph: 604-473-9700 Ext. 200
---
Smart Internet Solutions For Businesses 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: named: error sending response: not enough free resources

2009-06-05 Thread Chris St Denis

Steve Bertrand wrote:

Chris St Denis wrote:
  

Steve Bertrand wrote:



  

What type of device is em1 attached to? Is it a switch or a hub? Is it
possible to upgrade this? You should upgrade it to 100 (or 1000)
anyways. Does this device show any collisions?
  
  

This is a dedicated server in a datacenter. I don't know the exact
switch specs but it's likely a
layer 2/3 managed switch. Probably a 1U catalyst.



Do you force 10Mb on your NIC, or do you auto-negotiate that?

Perhaps before you pay a higher fee, your colo centre could allow you to
connect to a 100Mb port (with perhaps some traffic policing) so you, as
a client, could quickly verify if you want to scale up to their next
tier without having to spend these up-front costs on troubleshooting
this back-asswards.

  

I can upgrade the connection to 100mbps for a small monthly fee. I've
left it at 10 because I haven't
had a need, but with traffic recently growing, this is probably the problem.



Tell the colo that. Tell them you need to test their next tier of service!

  

# mail -s tcpdump output st...@ipv6canada.com  /var/log/dns.pcap
  
  

I don't think this is necessary. If cutting down the http traffic or
raising the port speed doesn't
fix it, I'll look into further debugging with this.



...one more time, don't attempt to throttle your own traffic to
troubleshoot what looks like a throughput bottleneck.

Start with the collocation provider. They should, for free, allow you to
have a testing period with their next service tier. Hopefully, they can
do it without having to swap your Ethernet cable into another device.

If it works during the test, then a small 'migration' and monthly
upgrade fee would be acceptable (if they choose).

Steve
  


The problem was resolved by switching to 100Mbps.

It's interesting that bind is all that complains about the bandwidth 
exhaustion, but I guess it's about my only use of UDP and TCP is better 
able to handle this kind of issue so doesn't complain.


--
Chris St Denis
Programmer
SmarttNet (www.smartt.com)
Ph: 604-473-9700 Ext. 200
---
Smart Internet Solutions For Businesses 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


named: error sending response: not enough free resources

2009-06-02 Thread Chris St Denis
I occasionally get named errors like these in my messages log. I've done 
a lot of searching and have found others with similar problems, but no 
solutions.


   named[69750]: client *ip removed*: error sending response: not
   enough free resources
   named[69750]: client *ip removed*: error sending response: not
   enough free resources
   named[69750]: client *ip removed*: error sending response: not
   enough free resources
   named[69750]: client *ip removed*: error sending response: not
   enough free resources
   named[69750]: client *ip removed*: error sending response: not
   enough free resources

System isn't particularly heavily loaded. Load averages around 0.5, cpu 
averages about 90% idle, not swapping much.


Other messages on this subject suggest a shortage of mbuffs of an issue 
with the nic driver (the item I read was complaining about fxp, but I 
have em) so here is the related info.


   eureka# uname -a
   FreeBSD eureka 6.3-RELEASE-p1 FreeBSD 6.3-RELEASE-p1 #1: Mon Feb 25
   08:17:08 PST 2008 cstde...@eureka:/usr/obj/usr/src/sys/EUREKA  i386

   eureka# named -v
   BIND 9.3.4-P1

   eureka# ifconfig em1
   em1: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
   options=1bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING
   *IPs removed*
   ether 00:30:48:94:0a:31
   media: Ethernet 10baseT/UTP full-duplex
   status: active


   eureka# netstat -m
   1240/2165/3405 mbufs in use (current/cache/total)
   1216/1290/2506/25600 mbuf clusters in use (current/cache/total/max)
   1216/150 mbuf+clusters out of packet secondary zone in use
   (current/cache)
   0/0/0/0 4k (page size) jumbo clusters in use (current/cache/total/max)
   0/0/0/0 9k jumbo clusters in use (current/cache/total/max)
   0/0/0/0 16k jumbo clusters in use (current/cache/total/max)
   2742K/3121K/5863K bytes allocated to network (current/cache/total)
   0/0/0 requests for mbufs denied (mbufs/clusters/mbuf+clusters)
   0/0/0 requests for jumbo clusters denied (4k/9k/16k)
   8/430/6656 sfbufs in use (current/peak/max)
   0 requests for sfbufs denied
   0 requests for sfbufs delayed
   999635 requests for I/O initiated by sendfile
   276104 calls to protocol drain routines


How do I fix this?


--
Chris St Denis
Programmer
SmarttNet (www.smartt.com)
Ph: 604-473-9700 Ext. 200
---
Smart Internet Solutions For Businesses 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: named: error sending response: not enough free resources

2009-06-02 Thread Chris St Denis

Wojciech Puchar wrote:
lot of searching and have found others with similar problems, but no 
solutions.


  named[69750]: client *ip removed*: error sending response: not
  enough free resources
  named[69750]: client *ip removed*: error sending response: not
  enough free resources
  named[69750]: client *ip removed*: error sending response: not
  enough free resources
  named[69750]: client *ip removed*: error sending response: not
  enough free resources
  named[69750]: client *ip removed*: error sending response: not
  enough free resources


quite misleading message, but the problem is that named want to send 
UDP packet and get's error from kernel.



possible reasons
- your firewall rules are the cause - check it.


   Nope

   eureka# ipfw list
   00100 allow ip from any to any via lo0
   00200 deny ip from any to 127.0.0.0/8
   00300 deny ip from 127.0.0.0/8 to any
   65534 allow ip from any to any
   65535 deny ip from any to any


- your network card produce problems (REALLY i have that case)


   I have had this kind of error on multiple servers over the years, so
   i don't think it's a hardware problem.


- the network/LAN named tries to sent UDP packet is somehow flooded.


   Dns is probably fairly busy. It's the primary authorative dns for
   some busy domains. Is there a setting I can do to increase the
   limits of UDP packets to keep it from causing problems?

   The server is approaching it's 10 mbps interface speed during peak
   hours, I may need to upgrade it to 100mbps.



i experienced all 3 cases. last is of course easiest to detect.



Other messages on this subject suggest a shortage of mbuffs of an 
issue with


no you are fine with mbufs, memory etc..
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
freebsd-questions-unsubscr...@freebsd.org



--
Chris St Denis
Programmer
SmarttNet (www.smartt.com)
Ph: 604-473-9700 Ext. 200
---
Smart Internet Solutions For Businesses 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: named: error sending response: not enough free resources

2009-06-02 Thread Chris St Denis

Steve Bertrand wrote:

Chris St Denis wrote:
  

Wojciech Puchar wrote:


possible reasons
- your firewall rules are the cause - check it.
  

   Nope

   eureka# ipfw list



- your network card produce problems (REALLY i have that case)
  

   I have had this kind of error on multiple servers over the years, so
   i don't think it's a hardware problem.



- the network/LAN named tries to sent UDP packet is somehow flooded.
  

   Dns is probably fairly busy. It's the primary authorative dns for
   some busy domains. Is there a setting I can do to increase the
   limits of UDP packets to keep it from causing problems?

   The server is approaching it's 10 mbps interface speed during peak
   hours, I may need to upgrade it to 100mbps.



The 10Mb ceiling (provided by your ifconfig output) could be a damper on
this.

What type of device is em1 attached to? Is it a switch or a hub? Is it
possible to upgrade this? You should upgrade it to 100 (or 1000)
anyways. Does this device show any collisions?
  
This is a dedicated server in a datacenter. I don't know the exact 
switch specs but it's likely a

layer 2/3 managed switch. Probably a 1U catalyst.

I can upgrade the connection to 100mbps for a small monthly fee. I've 
left it at 10 because I haven't

had a need, but with traffic recently growing, this is probably the problem.


Can you do the following for a few minutes (until at least the problem
is triggered):

# tcpdump -n -i em1 proto 17 port 53 -s -w /var/log/dns.pcap

...and then:

# mail -s tcpdump output st...@ipv6canada.com  /var/log/dns.pcap
  
I don't think this is necessary. If cutting down the http traffic or 
raising the port speed doesn't

fix it, I'll look into further debugging with this.

Is this server a caching recursive server for internal clients, or an
authoritative server?
  
An authoritative for some moderately busy domains. Also recursive for 
some jails on this and another server (main recursive is on a private 
(10.0.0.0/24 on em0) network, and this server predates multi-ip jails)


A tcpdump -n -i em1 -s 0 port 53  packets.txt for 1 minute shows

eureka# wc -l packets.txt
359 packets.txt

So about 350 dns packets a minute, at least in this particular minute. 
Less than I expected, I guess most is going to the other dns server at 
the moment.

What else runs on this box?
  

Web hosting. Thats where the full 10mbps comes from.


If you generate further network traffic over the interface, do the log
entries pile up faster?

What does:

# netstat -s -p udp
  

eureka# netstat -s -p udp
udp:
   194973570 datagrams received
   0 with incomplete header
   13 with bad data length field
   884 with bad checksum
   68521 with no checksum
   669174 dropped due to no socket
   17 broadcast/multicast datagrams dropped due to no socket
   733 dropped due to full socket buffers
   0 not for hashed pcb
   194302749 delivered
   195188906 datagrams output

Fyi, if these are since last reboot, this server has been up 381 days.

say?

I'd focus squarely on the 10Mbps cap first. That should be easy to test
and eliminate. Then, once that is rectified, we can find out whether
it's an inherent problem with the system.
  

Yes, I'll deal with this, then reply again if the problem is not resolved.

Thanks for the suggestions.

Steve
  


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Bug in tcp wrappers?

2009-03-12 Thread Chris St Denis
I think I've found a bug in libwrap/tcpwrappers. Before filing an actual 
bug report I want to get some feedback here first.


A hosts.allow file with ~1000 ips on a single line(Haven't experimented 
with other quantities yet), causes network daemons that use libwrap stop 
accepting incoming network connections and use 100% cpu on an incoming 
connection.  This problem appeared because sshguard placed a large 
number of IPs in my hosts.allow file triggering this bug.


I've left the affected daemons for a long period of time (once about 8 
hours) and they don't seem to come back, so I think this is more than 
just it taking a while to loop through a 1000 item array of IPs



The production system that was affected is FreeBSD 7.0-32bit
Test system is FreeBSD 7.1-32bit

Example hosts.allow file (IPs are randomly generated for purposes of 
example)


   sshd : 112.110.123.63 113.11.2.126 113.11.8.6 113.19.19.22
   113.197.48.68 snipped 990+ IPs 116.48.108.244 116.48.11.19 : deny
   ALL : ALL : allow

top output of affected system. sshd wcpu slowly crawls up to 100% over 
about 30 seconds or so.


   crash# top
   last pid:   692;  load averages:  0.08,  0.04, 
   0.04up

   0+00:12:13  15:42:30
   24 processes:  2 running, 22 sleeping
   CPU: 49.7% user,  0.0% nice,  0.2% system,  0.2% interrupt, 49.9% idle
   Mem: 9304K Active, 6004K Inact, 21M Wired, 32K Cache, 10M Buf, 947M Free
   Swap: 1995M Total, 1995M Free

 PID USERNAME  THR PRI NICE   SIZERES STATE  C   TIME   WCPU
   COMMAND
 691 root1 1030  5760K  3660K CPU1   1   0:04 33.98% sshd
 672 root1   40  8436K  3888K sbwait 1   0:00  0.00% sshd
 677 cstdenis1  200  4460K  2288K pause  0   0:00  0.00% csh
 682 root1  200  5484K  2632K pause  0   0:00  0.00% csh
 675 cstdenis1  440  8436K  3896K select 0   0:00  0.00% sshd
   snip

A backtrace shows

   crash# gdb /usr/sbin/sshd 691
   GNU gdb 6.1.1 [FreeBSD]
   Copyright 2004 Free Software Foundation, Inc.
   GDB is free software, covered by the GNU General Public License, and
   you are
   welcome to change it and/or distribute copies of it under certain
   conditions.
   Type show copying to see the conditions.
   There is absolutely no warranty for GDB.  Type show warranty for
   details.
   This GDB was configured as i386-marcel-freebsd...
   Attaching to program: /usr/sbin/sshd, process 691
   Reading symbols from /usr/lib/libssh.so.4...done.
   Loaded symbols for /usr/lib/libssh.so.4
   Reading symbols from /lib/libutil.so.7...done.
   Loaded symbols for /lib/libutil.so.7
   Reading symbols from /lib/libz.so.4...done.
   Loaded symbols for /lib/libz.so.4
   Reading symbols from /usr/lib/libwrap.so.5...done.
   Loaded symbols for /usr/lib/libwrap.so.5
   snip other symbols for breviry
   Reading symbols from /libexec/ld-elf.so.1...done.
   Loaded symbols for /libexec/ld-elf.so.1
   0x28373225 in fgets (buf=0xbfbfe67b , n=1, fp=0x283b8040) at
   /usr/src/lib/libc/stdio/fgets.c:56
   56  {
   (gdb) bt
   #0  0x28373225 in fgets (buf=0xbfbfe67b , n=1, fp=0x283b8040) at
   /usr/src/lib/libc/stdio/fgets.c:56
   #1  0x281124ee in xgets (ptr=0xbfbfe67b , len=1, fp=0x283b8040) at
   /usr/src/lib/libwrap/../../contrib/tcp_wrappers/misc.c:38
   #2  0x28111410 in table_match (table=0x28112c5c /etc/hosts.allow,
   request=0xbfbfeb14)
   at
   /usr/src/lib/libwrap/../../contrib/tcp_wrappers/hosts_access.c:162
   #3  0x28111540 in hosts_access (request=0xbfbfeb14) at
   /usr/src/lib/libwrap/../../contrib/tcp_wrappers/hosts_access.c:132
   #4  0x08052b39 in main (ac=2, av=0xbfbfeecc) at
   /usr/src/secure/usr.sbin/sshd/../../../crypto/openssh/sshd.c:1843
   (gdb) bt
   #0  0x28373225 in fgets (buf=0xbfbfe67b , n=1, fp=0x283b8040) at
   /usr/src/lib/libc/stdio/fgets.c:56
   #1  0x281124ee in xgets (ptr=0xbfbfe67b , len=1, fp=0x283b8040) at
   /usr/src/lib/libwrap/../../contrib/tcp_wrappers/misc.c:38
   #2  0x28111410 in table_match (table=0x28112c5c /etc/hosts.allow,
   request=0xbfbfeb14)
   at
   /usr/src/lib/libwrap/../../contrib/tcp_wrappers/hosts_access.c:162
   #3  0x28111540 in hosts_access (request=0xbfbfeb14) at
   /usr/src/lib/libwrap/../../contrib/tcp_wrappers/hosts_access.c:132
   #4  0x08052b39 in main (ac=2, av=0xbfbfeecc) at
   /usr/src/secure/usr.sbin/sshd/../../../crypto/openssh/sshd.c:1843
   (gdb) q
   The program is running.  Quit anyway (and detach it)? (y or n) y
   Detaching from program: /usr/sbin/sshd, process 691


A few questions
1. Is this a known issue of any sort? I've done some searching on it, 
but haven't found anything of interest.
2. Should this be reported to FreeBSD bug tracker, or to libwrap (or 
both)? Basically, is FreeBSD's libwrap (more or less) in sync with the 
main one, or is it completely separate?



--
Chris St Denis
Programmer
SmarttNet (www.smartt.com)
Ph: 604-473-9700 Ext. 200

Re: Issues with PF and 7.1

2009-02-28 Thread Zinevich Denis

Hello.
Sorry, but i have no exact answer to your question.
I have problems with pf on 7.1 too.
But i`ve noticed difference between 7.1-p2 and 7.1-p3
My problem appears only in p3 not in p2
may your problem is fixed in p3 ?
Michael K. Smith - Adhost пишет:

** Apologies to folks already subscribed to p...@freebsd.org.  This was posted 
there as well but I'm not getting any responses at all so I thought it best to 
post it here as well. **


We are having memory issues with PF and 7.1p2 that we didn't experience with 
6.3.   Here's what happens.

# pfctl -f /usr/local/etc/pf.conf
/usr/local/etc/pf.conf:135: cannot define table smtpd_reject_policyd: Cannot 
allocate memory
/usr/local/etc/pf.conf:139: cannot define table smtpd_reject_spam: Cannot 
allocate memory
pfctl: Syntax error in config file: pf rules not loaded
# pfctl -t smtpd_reject_policyd -T flush
94390 addresses deleted.
# pfctl -t smtpd_reject_spam -T flush
62464 addresses deleted.
# pfctl -f /usr/local/etc/pf.conf

So, after I flush the tables it loads.  Sometimes, however, we get a global out of memory 
error  DIOCADDRULE: Cannot allocate memory 

Here are my entries from pf.conf for various limits.  Everything else is 
defaults.

set limit tables 500
set limit table-entries 25
set limit { states 100, src-nodes 30, frags 10 }
set optimization normal
set skip on lo0
set state-policy if-bound
set timeout interval 300
set timeout src.track 1200

Finally, the box is using EM interfaces with VLAN's and has 4 Gig of physical 
RAM.  There are two PF boxes in Active/Failover and the errors show up on both, 
although they seem to show up more often on the Backup device, which seems odd.

Any help would be greatly appreciated.  


Regards,

Mike

--
Michael K. Smith - CISSP, GISP
Chief Technical Officer - Adhost Internet LLC
mksm...@adhost.com
w: +1 (206) 404-9500 f: +1 (206) 404-9050
PGP: B49A DDF5 8611 27F3  08B9 84BB E61E 38C0 (Key ID: 0x9A96777D)





___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: make doesn't know how to make KERNCONF

2008-11-14 Thread Chris St Denis

Gerardo Paredes wrote:

Hello, i have a problem compiling a custom kernel on a AMD 850 MHZ Processor, 
however on the last stage  it fails with the following message:


make doesn't know how to make KERNCONF


the command i run is:

cd /usr/src
make buildkernel KERNCONF=MIO

where MIO is my kernel configuration file, living at /usr/src/sys/i386/conf

why it is failing with that error??


Regards,
Gerardo Paredes



  
___

freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
  


What shell are you using? That syntax should be fine for csh, but if you 
are using something like bash you may need to change the syntax.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Problem With FreeBSD 7.0 installation on soekris

2008-11-11 Thread Denis Beltramo
Hello,

I have a problem with installation of FreeBSD 7.0 on soekris.
I use pxeboot.
The installation go up but when arrive loader logo, the loader don't
go, i don't see the logo and isntallation stop.the prompt is
blocked.
Do you have suggestion?

thanks.

-- 
Denis Beltramo
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: iSCSI support

2008-10-30 Thread Chris St Denis
Jeff Chen - PTT 陳龍焜 wrote:
 Hi,
 My company is a storage RAID system company. There is one customer ask iSCSI 
 solution with my production of my company with FreeBSD 6.1. But I found some 
 information in the Internet, the iSCSI full support on FreeBSD is 7.0. Is it 
 mean FreeBSD 6.1 can’t support iSCSI?

 BR,
 Jeff
   
 

 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
There are some patches around to run it on 6.2 (maybe all of 6.x) but
the performance isn't very good.


I used this on 6.2 and it did work:
ftp://ftp.cs.huji.ac.il/users/danny/freebsd/iscsi-2.0.92.tar.gz

This looks like a more recent version (tho no guarantee it will work on
6.x): ftp://ftp.cs.huji.ac.il/users/danny/freebsd/iscsi-2.1.tar.gz
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Filesystem, RAID questions

2008-10-29 Thread Chris St Denis
At 1TB the drive will take very long to fsck if the server ever crashes 
or looses power.


If this is a problem you should look into using gjournal(8)

Not sure off hand why it would be so slow, but keep in mind raid5 isn't 
particularly fast for writes



Rich Fairbanks wrote:

Hi,

I'm new to FreeBSD (and UNIX in general), and I have read through the
handbook and various websites to gain some insight on this question, but
haven't found a concrete solution yet, and I'm hoping you guys can help.

I'm wanting to build a FreeBSD 7.0 based file server for a small/medium
company that I work for and I've got the box up and running, samba is
working fine, the only problem that I can see is that the array that I
installed (3ware 9650SE) with 3 WD 1TB SATA drives in RAID 5 seems to be
performing very slowly. This isn't just an issue of slow access over the
network for the Windows users, but when I transfer a few GB from directory
to directory on the array, or from the system disk to the array or vice
versa.

Now, this is how I set up the array. I installed the card, popped in the
drives. The card bios found the drives and allowed me to setup in RAID 5.
Then, FreeBSD booted and found the disk as da0. I want the entire array to
be one big chunk of space. In other words, I don't need a bunch of slices or
partitions (or DO I? I'm still very new to the whole slice vs. partition
concept)

I typed newfs /dev/da0 . A ton of numbers went across the screen, then I
mounted /dev/da0 at /usr/home/storage. It works, but perhaps I missed a step
that would have made things easier/perform better, etc.

Besides creating the file system a different way, what would be an optimum
stripe size for the array? I will using this for storing, basically, a TON
of word documents and email messages, and a few large .pst files. So, the
average file size will be in the 25-100K range, but a few 1-2GB files.

Thanks for ANY and all help. If this question has been asked and answered a
million times, please forgive me and just point me to the place where I can
read up on this issue.

Thanks,

RF
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
  


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: A gmirror question.

2008-10-28 Thread Chris St Denis

Stefan Moro wrote:

Hi!

I've got a question regarding the way that gmirror identifies what
components (if that is the right term) are included in a mirror.

I recently created a mirror over two disks, ad2 and ad4. After some
bios changes (activating PATA) these devices were changed to ad6 and
ad10 respectively.
The magic thing (which probably isn't so magic =) ) here is that
after reboot, gmirror still managed to identify the mirror, now using
ad6 and ad10.

If I have understood things correctly, gmirror stores all relevant
information about the mirror in the last sector on the provider.

So I guess one possible solution is that gmirror ,during startup,
scans all disks/slices for this magic sector and then starts the
mirror.
But if this is the case, how does gmirror know that it should use (in
my example above) ad10 and not ad4 as the additional disk in the
mirror.
Or does gmirror use something else than the /dev entries to address disks??

I'm just curious how gmirror does this.


BR Stefan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
  


I don't know the technical details of the internal working of gmirror, 
but it likely uses the volume serial number or other such identifier.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Fix corrupted terminal output

2008-09-24 Thread Chris St Denis

Andreas Davour wrote:

On Tue, 23 Sep 2008, Chris St Denis wrote:

Occasionally, I accidentially cat a binary file or a directory casing 
the terminal output to be corrupted with text looking like (don't 
know if this will make it through the mail cleanly)


  E ??? ?? ?.
  2#


To fix this normally I just close the window and open a new ssh 
connection, but I am wondering if there is a more clean way to do 
this. I've tried reset(1), but it doesn't seem to help any.


What termnial emulator are you using? KDE Konsole have an Edit-Reset 
 Clear Terminal menu alternative that usually manages to clear such 
problems up for me.


/Andreas



I use putty ssh client (on windows). I had thought it was a console 
change rather than terminal editor specific.


I'll try the things people have suggested here next time it happens.


Thanks for the suggestions.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Fix corrupted terminal output

2008-09-23 Thread Chris St Denis
Occasionally, I accidentially cat a binary file or a directory casing 
the terminal output to be corrupted with text looking like (don't know 
if this will make it through the mail cleanly)


   E ??? ?? ?.
   2#


To fix this normally I just close the window and open a new ssh 
connection, but I am wondering if there is a more clean way to do this. 
I've tried reset(1), but it doesn't seem to help any.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: x3550 ServeRAID-8k and FBSD 7, group limit

2008-09-16 Thread Chris St Denis
It does exiteventually. It just takes a ridiculously long time. That 
is Fixed in 7-STABLE so should be fine in 7.1 as well.



Gian Paolo Buono wrote:

Hi,
I have a problem when run
/usr/local/sbin/arcconf GETCONFIG 1 LD

Controllers found: 1
--
Logical device information
--
Logical device number 0
   Logical device name  : Drive 1
   RAID level   : 1
   Status of logical device : Optimal
   Size : 69890 MB
   Write-cache mode : Not supported
   Partitioned  : Yes
   Protected by Hot-Spare   : No
   Bootable : Yes
   Failed stripes   : No
   
   Logical device segment information
   
   Segment 0: Present (0,0)
   Segment 1: Present (0,1)



Command completed successfully.

^C

the output of command is correct but don't exit and I must press control^C.
I want exit without press control^C, have you suggestions to resolve this
problem ?

Bye Gian Paolo




On Mon, Sep 15, 2008 at 10:08 PM, Chris St Denis [EMAIL PROTECTED] wrote:

  

Ivan Voras wrote:



Yury Michurin wrote:


  

We are currently considering to purchase IBM x3550 with ServeRAID-8k, in
order to run FreeBSD 7 with RAID5,
but it is very unclear from what I've saw on the Internet, whether the
driver support on FreeBSD is stable enough for production use,




I've never had problems with it, and I didn't heard of any serious
problems others had.


  

aac driver doesn't seem to notice if a drive fails. You'll want to keep an
eye on with it arcconf run via crontab or something as a workaround. I use

  /usr/local/sbin/arcconf GETCONFIG 1 LD | egrep '(name|Status)'

Seems to work fine with FreeBSD other than that. Only other issue I've had
with it, is it takes about 4 minutes to load it's bios in post.


  

and I've left with many questions unanswered, with which I hope you'll be
kind to help me =)


1. Is FreeBSD supports the device right after install or I need to
recompile
the kernel?




It's available by default. This is the aac driver:
http://www.freebsd.org/cgi/man.cgi?aac



  

2. Is tools for manage the RAID available? If no, how you rebuild the
array
on drive failure (and how to detect it)?




You can use the aaccli management tool :
http://www.freshports.org/sysutils/aaccli/


  

aacli doesn't work with ServeRAID-8k. But sysutils/arcconf does. I think
it's read only tho.


  

I've just remember i had another unanswered question, not related to
x3550:
3. When I've used FreeBSD 6.2, it had a limitation, that a user can be
member only of N groups (don't remember exactly, i think N = 15),
however i couldn't find any official documentation of that issue, nor if
it
still exists in FBSD 7, so is it? =)




It still exists and AFAIK it won't be changed soon because of the need
to support NFS. You could try raising the issue again on the [EMAIL PROTECTED]




  

--
Chris St Denis
Programmer
SmarttNet (www.smartt.com)
Ph: 604-473-9700 Ext. 200
---
Smart Internet Solutions For Businesses
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
  

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD 7 server in hang

2008-09-16 Thread Chris St Denis

Lowell Gilbert wrote:

Gian Paolo Buono [EMAIL PROTECTED] writes:

  

Hi, I have on a server ibm 3650  FreeBSD 7.0-STABLE and the proccess
that running are nagios-3.0.2, apache-2.2.8 and heartbeat-1.2.5_3;
random after some day machine becomes semi-dead, the ping respond but
any stack (ssh,http) don't work and heartbeat don't switch the
resources I can't loggon  and I must reboot. In the syslog there
isn't  any message for trobleshotting the problem. Any idea ? Sorry
for my english
Best Regards



Try keeping an eye on top(1); it may even give a hint after it stops
updating.  If that doesn't help, you may need to break to the kernel
debugger (details in developers' handbook).

  
I also was having some lockup problems on a 3650. Don't know if it's 
related but I will document my experiences in case it's of any help.


Initially it was fine (Running 7.0-Release, but after some hardware 
problems the system was continuing to lockup even after the whole server 
was replaced. I ended up doing a clean install of 7-stable (as of August 
20th) and haven't had any problems since. Not sure if it was some odd 
corruption of kernel or other system files (server went through many 
hard reboots during the hardware problems) or a bug in 7.0-release that 
was fixed in 7-stable.


In my specific symptoms if I had something like top running on the 
console, it would continue to run. Top didn't show much of interest 
other than some 100% apache processes (which I suspect was a symptom of 
the problem, not the cause). When the system was hung top would continue 
running and updating, but it would not accept keyboard input. I could 
switch to other virtual consoles with alt+f#, but they also would not 
take text input for a login.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Multiple installation of one ports

2008-09-16 Thread Chris St Denis

Matthew Seaman wrote:

FreeBSD wrote:

Hi everyone,

I've been asked by a customer to install Drupal on one server to 
manage a new site. No problem yet. But, he also asked if it would be 
possible to install it for other sites.


I know that there is a warning if you want to install a port that is 
already installed, but is there a way to bypass this? I know I could 
install it from the tarball from the website, but I want to be able 
to use portupgrade and portaudit to deal with it.


Any suggestions?


This is an interesting problem.  The FreeBSD ports system does not at
present allow multiple installations of the same port, even into
different ${PREFIX}es.  This make sense for most of the software dealt
with by the ports system, but in the specific case of web based
applications having the same application installed into multiple 
locations

in the same web tree is a perfectly reasonable thing to want to do.

Here are some ideas as to ways you might consider for working round the
problem and still being able to use the ports system in the usual way.
None of these are tested by me in any way, and some of them may not
actually work.

 i) If you have spare IPs available, simply set up jails to run 
second   and subsequent instances of drupal and apache.  This is 
pretty much overkill but it's a tried and tested strategy and 
should be reliable.

The downside is you need to install at least enough of a system in
each jail to support running apache, etc. plus you have to maintain
each of the different jail environments separately.

ii) If you haven't any spare IPs, you can install multiple copies of
the same port on the same machine by changing *both* $PKG_DBDIR
and $PREFIX in the environment to distinct values for each copy.  
Unfortunately changing $PREFIX doesn't give you complete freedom

to choose where a web app will be installed -- typically a web app
will be located at ${PREFIX}/www/app-name.  However by judicious
use of the Alias directive in httpd.conf you can make all those
different directories appear in the same web tree.  Like option
(i) you've still got multiple copies of ports to maintain, although
in this case, it's only the drupal port and anything that depends
on drupal that you need multiple copies of, rather than the entire
installation tree of ports.

iii) A kind of wacky idea this, and it will only work for web apps whose
configuration files are contained within the web root.  That's 
true  of most PHP based web apps -- other languages may differ.

Install the port once only, in the normal fashion.  Then create
loopback mounts of the application directory multiple time, each to
a union fs (see mount_unionfs(8)) where you superpose a separate
layer to contain just the configuration files for that instance.
It's conceptually complicated, but all the work should be at the
setup stage and after that, there's only one instance of your web
app to keep properly maintained.

iv) I've no idea if this is at all possible with Drupal, but really 
the absolute easiest solution is to choose a CMS that lets you 
manage several different web sites (virtual hosts, web trees, what 
you will) within the same instance. 
Cheers,


Matthew




What I do with webapps from ports is install them once, then copy them 
to each of the customers that wants them.


It's not a perfect solution, but for a webapp what I care about for the 
ports is dependency tracking, and portaudit.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Wireshark

2008-09-12 Thread Chris St Denis

Grant Peel wrote:

Hi CHris,


Just attempting to install the port. Something I noticed when the 
install crapped out was that it wanted me to use the Force Package 
Register for the OpenSSL_Overwrite_Base port.


That port was already installed, what would be the correct method to 
deal with this?


-Grant

- Original Message - From: Christopher Cowart 
[EMAIL PROTECTED]

To: Grant Peel [EMAIL PROTECTED]
Cc: freebsd-questions@freebsd.org
Sent: Thursday, September 11, 2008 6:18 PM
Subject: Re: Wireshark


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]
I've found this sometimes happens if the port is checking for a specific 
version of a dependancy and the version you have is older. Therefore the 
dependency check fails and it tries to install, but the package manager 
won't let it because of the existing version.


You can deinstall OpenSSL_Overwrite_Base first and it will probebly work 
fine.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Wireshark

2008-09-12 Thread Chris St Denis
I have never tried this with OpenSSL so I can't be certain (I just use 
base openssl) but as long as the libraries are already open, deleting 
them should be ok since the open file handle will remain valid.


Starting a new SSH connection may not work between the deinstall and 
install step, and apache may get upset if it happens to fork a new 
process in that time, but overall it should be ok,


You'll want to restart sshd and apache after the install is done so they 
puck up the new version.



If you are worried about getting disconnected between the 2 steps run 
them as a single command make deinstall; make install inside screen 
(ports/sysutils/screen) or something so it will run to completion even 
if you get disconnected.




Grant Peel wrote:

OK,

So I am using https, and, while doing all this, will be connected via 
PuTTy through ssh. Will I be disconnected ?


Deingstalling the port won't kill my connection or cause general 
weirdness to people using https?


-Grant

- Original Message - From: Chris St Denis [EMAIL PROTECTED]
To: Grant Peel [EMAIL PROTECTED]
Cc: freebsd-questions@freebsd.org; Christopher Cowart 
[EMAIL PROTECTED]

Sent: Friday, September 12, 2008 2:46 PM
Subject: Re: Wireshark



Grant Peel wrote:

Hi CHris,


Just attempting to install the port. Something I noticed when the 
install crapped out was that it wanted me to use the Force Package 
Register for the OpenSSL_Overwrite_Base port.


That port was already installed, what would be the correct method to 
deal with this?


-Grant

- Original Message - From: Christopher Cowart 
[EMAIL PROTECTED]

To: Grant Peel [EMAIL PROTECTED]
Cc: freebsd-questions@freebsd.org
Sent: Thursday, September 11, 2008 6:18 PM
Subject: Re: Wireshark


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]
I've found this sometimes happens if the port is checking for a 
specific version of a dependancy and the version you have is older. 
Therefore the dependency check fails and it tries to install, but the 
package manager won't let it because of the existing version.


You can deinstall OpenSSL_Overwrite_Base first and it will probebly 
work fine.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]








--
Chris St Denis
Programmer
SmarttNet (www.smartt.com)
Ph: 604-473-9700 Ext. 200
---
Smart Internet Solutions For Businesses 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Script To Execute command via mail

2008-09-02 Thread Chris St Denis

Marcel Grandemange wrote:

Yes the Server I want to do this on Is a FreeBSD 7.0 box, however cannot use
procmail as all mboxes are virtual.
Ie not real accounts all exist only on mysql, and since I changed from a
normall stock setup to using mysql procmail no longer will work.
All boxes are in form of [EMAIL PROTECTED]


I really miss procmail!

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Greg Larkin
Sent: Friday, August 29, 2008 3:03 PM
To: Marcel Grandemange
Cc: freebsd-questions@freebsd.org
Subject: Re: Script To Execute command via mail

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Marcel Grandemange wrote:
  

I have an interesting situation.

I have a windows based sms server, this machine works in the following


way.
  

It watches a shared directory for txt files that must be formatted in
certain way and periodically sends them off to mobile.

What I want to do is create a SMTP to SMS gateway.

Easy in theory!

Rite a script to map shared drive, ensure it's connected and write the txt
files in dir.

However the second part I have no idea, somehow I need to watch the mbox
file of say a e-mail account called test

And IF a mail arrives parse it look for a security key if exists convert


to
  

txt file and copy to shared dir.




Hi Marcel,

Do you have a FreeBSD machine in the mix somewhere?  If so, this sounds
 like a job for procmail: http://en.wikipedia.org/wiki/Procmail

Using procmail, you can create a script to process incoming emails and
process/reformat them as you see fit.

Best regards,
Greg
- --
Greg Larkin

http://www.FreeBSD.org/   - The Power To Serve
http://www.sourcehosting.net/ - Ready. Set. Code.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIt/OH0sRouByUApARAntMAJ43+cuEDrdEIZle4TTxa3orO+u05QCdHsOq
c1yjtkE0i7CN4dM04WgcfrM=
=0pjX
-END PGP SIGNATURE-

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

__ NOD32 3396 (20080828) Information __

This message was checked by NOD32 antivirus system.
http://www.eset.com


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
  
Courier maildrop should do what you need. it's in ports/mail/maildrop. 
It can have a mysql backend if you compile it WITH_AUTHLIB=yes


--
Chris St Denis
Programmer
SmarttNet (www.smartt.com)
Ph: 604-473-9700 Ext. 200
---
Smart Internet Solutions For Businesses 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


SAN, distributed filesystem

2008-08-31 Thread Zinevich Denis

Hi all.
Environment:
SAN attached via fiber to 4 servers with freebsd 6.3
The question is:
What filesystem i should use to have rw access to SAN from any of 4 
servers ?


---
WBR
Link
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: messagebus user

2008-08-27 Thread Chris St Denis

Dan Nelson wrote:

In the last episode (Aug 27), jef moskot said:
  

We just upgraded to a new server (FreeBSD 7.0) and in our passwd file
is the user messagebus (there's also a group).

What's this for and can the UID be changed?  It's got the same number
as one of our oldest users and we're trying to determine which UID
would be easier to switch.

While this obviously has something to do with D-BUS (whatever that
is), it's nothing we installed on purpose.  If it's not a part of
the default system, it probably got bundled in as a dependency during
an large port make.



You should be able to change its uid by deinstalling dbus, then editing
/usr/ports/devel/dbus/pkg-install, changing the uid in that script
to an unused ID, and reinstalling.

All the userids created by ports should be listed in /usr/ports/UIDs
and GIDs, so you can check to see if any other ports might conflict
with existing users.  Unfortunately, the ports themselves don't use
those files during the install, so you can't just edit that and be
done.  You have to fix each port individually.

  
Keep in mind you will probably have the same problem when you upgrade 
the port. Portsnap/csup will overwrite your change so every time you 
upgrade you'll have to change it again.


May be easier to just change the user's UID once. Should be doable 
pretty easily in one shot with a command like

find /usr/home -user 556 -exec chown thenewuserid {} \;

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Turn off serial console on boot

2008-08-26 Thread Chris St Denis

[EMAIL PROTECTED] wrote:
I have some servers with IPMI that allow me to have a serial console. 
I have setup a serial console config on my servers and it seems to 
work reasonably well in remote emergencies, but causes serious 
problems if I ever have to use the real console.


It means that I can't use single user mode from the real console and 
I can't see most boot errors.


Is there a way I can turn off the console redirection from the 
physical console interactively on startup?


http://www.freebsd.org/doc/en/books/handbook/serialconsole-setup.html

We put -P in /boot.config so that if a keyboard is detected then the 
screen is the console. No keyboard means serial console.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]

This server does not have a ps2 port (USB only). Is there any other way?

It's quite a pain to have to boot off an install disk and rename the 
boot.config file if I need to get into single user mode. Especially 
since this server takes about 5 minutes to POST.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Issues while trying to access an Ext3 partition successfully mounted on FreeBSD 7

2008-08-26 Thread Chris St Denis

Ashish Shukla आशीष शुक्ल wrote:

Hi,

I'm running FreeBSD 7.0-RELEASE-p3 (amd64). I've two ext3 partitions
on my disk which I want to be able to access (read-only) from my
FreeBSD installation. But I can only access one of them (with no
issues), though I'm able to mount both of them fine in my FreeBSD and
GNU/Linux. Those filesystems are fsck-ed regularly after every n
mounts. I'm experiencing this since I installed GNU/Linux on that
partition.

88
% fgrep gentoo-root /etc/fstab
/dev/ad6s2  /mnt/gentoo-rootext2fs  ro,noauto   0   0
% sudo mount /mnt/gentoo-root
% mount |fgrep gentoo
/dev/ad6s2 on /mnt/gentoo-root (ext2fs, local, read-only)
% ls -l /mnt/gentoo-root
ls: /mnt/gentoo-root: Bad file descriptor
% sudo umount /mnt/gentoo-root
% ls -ld /mnt/gentoo-root
drwxr-xr-x  2 root  wheel  512 Jun  8 23:24 /mnt/gentoo-root
88

There are no errors (or messages) reported in dmesg. Any ideas how to
troubleshoot this ? I don't want to degrade my filesystem from ext3 to
ext2.

Thanks
Ashish Shukla
  
I had a problem like this trying to mount ext2. The problem was it 
needed to be fscked (unclean shutdown). You'll need to install 
ports/sysutils/e2fsprogs to fsck it under FreeBSD.



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Turn off serial console on boot

2008-08-25 Thread Chris St Denis
I have some servers with IPMI that allow me to have a serial console. I 
have setup a serial console config on my servers and it seems to work 
reasonably well in remote emergencies, but causes serious problems if I 
ever have to use the real console.


It means that I can't use single user mode from the real console and I 
can't see most boot errors.


Is there a way I can turn off the console redirection from the physical 
console interactively on startup?


Running FreeBSD 7.

Console config:
---
barium# cat /boot.config
-DS19200

barium# cat /boot/loader.conf
comconsole_speed=19200
boot_multicons=YES
boot_serial=YES
console=comconsole,vidconsole
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Recommended newfs settings for 600GB mail (maildir) store?

2008-08-19 Thread Chris St Denis
I recently created a new mail server with a 600GB raid5 partition to 
store maildirs. When I created it, I used a newfs -i 4096 but when I had 
recent hardware problems the background FSCK took a very long time, and 
I'm concerned that the -i 4096 may have made that a lot worse.


So I ask. What newfs settings do you recommend for a 600GB partition 
dedicated to maildirs?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: High Availability FreeBSD www cluster

2008-08-06 Thread Chris St Denis

Paul Procacci wrote:

Michael Christie wrote:

Hi all ,

I want to cluster some freeBSD servers, The purpose of this is to 
learn.  I would like to  run some basic services like www and mail on 
a test network. I would like to set up the servers so if one server 
falls over the other will take over the services automatically, load 
balanceing would be good as well. I have googled, I could be looking 
in the wrong place , there seems not to be much in regard to seting 
up freebsd in a cluster, lots on linux. I have looked at the High 
Availability Linux project , I see on the front page that it will run 
on freebsd.


So I am a bit lost and i am wanting to learn how to cluster freebsd 
web and mail servers, I have looked at  Beowulf clusters, which seem 
to give computers more grunt, Can some on on the list please advise 
me on what clustering softwhere i need to get started and if the High 
Availability Linux project softwhere will do the job.



web links any thing to help me get started would be good. No I do not 
want to change over to linux.



Thanks
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]


I've used freevrrpd (/usr/ports/net/freevrrpd) for some clients with 
success.
Additionally doing some googling revealed SG Cluster 
(http://www.freebsd.org.hk/html/sgcluster/) though I'm not sure how 
active this is and/or really if it's what your looking for.


~Paul
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]

Also see man carp

--
Chris St Denis
Programmer
SmarttNet (www.smartt.com)
Ph: 604-473-9700 Ext. 200
---
Smart Internet Solutions For Businesses 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD for webserver?

2008-07-22 Thread Chris St Denis

VeeJay wrote:

Hi there

I am going to make 2 Webserver at my work going to handle 50 mil hits per
month... They are using Linux already. But being a FreeBSD fan, I have
proposed FreeBSD to my Boss convincing him that FreeBSD is more Fast and
Secure solution for his needs... And now I want to show the results...
*Hardware:*
Dell PowerEdge 2950 III having 2 x CPU 3,0 GHz Intel Xeon L5450 Quad-Core
2x6MB cache WITH 16 GB RAM.

*Tools:*
1. FreeBSD 7 Production Release
2. Apache 2.2.9
3. MySQL 5.1.26
4. PHP 5.2.6

My question is, *To get the speed, performance and security*:

Should I use Ports or Packages to install all these tools One by One?

*OR*
Should I use TAR files and compile them manually. For example giving command
line arguments and commands like

./configure --prefix=/www --enable-module=so
make
make install
cd ../php-xxx
./configure --with-mysql --with-apxs=/www/bin/apxs
make
make install

etc

I have googled but still haven't reached to solution...personally I would
prefer comiling them with command line arguments
but then I seek some help from you guys i.e.

How should I write this ./configure..stuff in FreeBSD and what would be
the best options combination, I must choose to get the speed, performane and
security in Apache, MySQL and PHP?

Any suggestion is very welcomed!

  
Best to just use the ports. They take care of all of the dependencies 
for you and have extra patches to make them work optimally for FreeBSD.


Why ./configure by hand when the port's makefile will do it for you?

--
Chris St Denis
Programmer
SmarttNet (www.smartt.com)
Ph: 604-473-9700 Ext. 200
---
Smart Internet Solutions For Businesses 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD source code

2008-07-20 Thread Chris St Denis

Madana wrote:

Dear sir/madam..
I am a student studying computers and would like to build unix operating 
systems later on so i was browsing through your website for the source code but 
could not find it so it would be very very nice if you could give me the url of 
the page where i can get the source code..
Yours,
KMB

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

  


Source code is available on the CD's which you can download the ISO 
images of on the mirror network. 
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mirrors-ftp.html


It's also available via CVS from one of the CVS mirrors: 
http://www.freebsd.org/doc/en/books/handbook/cvsup.html#CVSUP-MIRRORS

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Enabling root login without an administrator account

2008-07-10 Thread Chris St Denis

Veronica Labarca wrote:
Hi, 
I have inherited a FreeBSD server and need to change the apache

configuration, but cannot log in to the server. I have the root password
(and know how to change it if needed in any case). The problem is that root
login is disabled. There are various administrative accounts on the server,
but I don't have the password to any of those. Can someone advise me as to
either, how to get the root login enabled or how to change the password on a
different account? 
Thanks for any help you can provide.

Viqui
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
  
I'm assuming you mean root login via SSH is disabled (as is the 
default). IIRC, root can always login from the console.


Login as root from the console (or boot into single user mode) and edit 
/etc/ssh/sshd_config


Uncomment PermitRootLogin line and change no to yes.

An alternate (and better) solution is to create yourself a user account 
in the wheel group and use that to login then SU up to root.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Enabling root login without an administrator account

2008-07-10 Thread Chris St Denis
Well, my second suggestion about creating an account and SUing to root 
should still be correct. Assuming of course that you can get in in 
single user mode.


Take a look at /etc/ttys there may be something in there restricting it, 
thats all I can think of.



Veronica Labarca wrote:

Hi Chris,
Thanks for your quick response. No. I mean root login at the console is
dissallowed. Why??? Beats me! I got it that way. 
Viqui 


-Original Message-
From: Chris St Denis [mailto:[EMAIL PROTECTED] 
Sent: Thursday, July 10, 2008 2:24 PM

To: Veronica Labarca
Cc: freebsd-questions@freebsd.org
Subject: Re: Enabling root login without an administrator account

 Veronica Labarca wrote:
  

Hi,
I have inherited a FreeBSD server and need to change the apache 
configuration, but cannot log in to the server. I have the root 
password (and know how to change it if needed in any case). The 
problem is that root login is disabled. There are various 
administrative accounts on the server, but I don't have the password 
to any of those. Can someone advise me as to either, how to get the 
root login enabled or how to change the password on a different account?

Thanks for any help you can provide.
Viqui
___
freebsd-questions@freebsd.org mailing list 
http://lists.freebsd.org/mailman/listinfo/freebsd-questions

To unsubscribe, send any mail to


[EMAIL PROTECTED]
  
  


I'm assuming you mean root login via SSH is disabled (as is the default).
IIRC, root can always login from the console.

Login as root from the console (or boot into single user mode) and edit
/etc/ssh/sshd_config

Uncomment PermitRootLogin line and change no to yes.

An alternate (and better) solution is to create yourself a user account in
the wheel group and use that to login then SU up to root.

  



--
Chris St Denis
Programmer
SmarttNet (www.smartt.com)
Ph: 604-473-9700 Ext. 200
---
Smart Internet Solutions For Businesses 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Jails and IP Aliasing

2008-07-08 Thread Chris St Denis

Daniel Gerzo wrote:

Hello,

  

   * Something like a loopback address inside the jail.  It may be
 127.0.0.2 instead of 127.0.0.1 but most software can be persuaded
 to use it for loopback style things.

   * The ability to map several IPs onto the jailed system by use of
 NAT and redirect within firewall rules

   * The ability to have a jail with /no/ external IP for when the
 paranoia becomes unbearable[*].



Most of this is actually implemented by [EMAIL PROTECTED] You can find some 
patches
at http://sources.zabbadoz.net/freebsd/jail.html 
  
These patches (in various forms) have been around since version 4.x. Why 
has none of this functionality ever been committed to head?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD and Bacula

2008-07-03 Thread Chris St Denis

Ivaylo Bonev wrote:
I want to use FreeBSD 7.0 for Backup server. After little searching, 
my decision was to use Bacula (because of Windows client). After 
installation of latest version (Bacula 2.4.0) and active googling, 
reading very carefuly Onlamp article of Bacula server on FreeBSD 
(http://www.onlamp.com/pub/a/onlamp/2004/01/09/bacula.html) and 
configuring File, Storage and Director files, I was astonished by the 
fact that Bacula cannot start from provided scripts in 
/usr/local/etc/rc.d/ directory. No messages in log, no error messages 
in console, ps aux| grep 'bacula' say nothing, nothing! I put

bacula_dir_enable=YES
bacula_fd_enable=YES
bacula_sd_enable=YES
and after restart on console shows this error:
03-Jul 17:09 bacula-dir: ERROR TERMINATION at parse_conf.c:483
Config error: Could not find config Resource bacula-fd referenced on 
line 30 :

 Client = bacula-fd


: line 30, col 20 of file /usr/local/etc/bacula-dir.conf
  Client = bacula-fd

All Bacula .conf files are attached. Is there a bug, or misconfigured 
.conf files?




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
I don't know Bacula, but taking a quick look at the config file, it 
looks like you need a client block named bacula-fd (you have one 
called laptop-fd)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: how to reject all mac addresses except some mac addresses using ipfw?

2008-06-24 Thread Chris St Denis

Yavuz Maslak wrote:

I use ipfw on freebsd7.

I have two questions

1- I want to fix an ip address for each mac address. But some pc and servers 
have more than an ip address. How can I map multiple ip addresses for a mac 
address?
2- I want to allow these fixed mac addresses using ipfw. After that I want to 
deny all mac address via the server's local ethernet card.  How can I do these 
cases?

Thanks

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

  
I haven't used ipfw for mac level filtering before, but it looks like 
the syntax is.


ipfw add allow MAC mac address any
ipfw add allow MAC mac address any
ipfw add allow MAC mac address any
ipfw add deny MAC any any

You'll probably have to include the server's own MAC in that list.


--
Chris St Denis
Programmer
SmarttNet (www.smartt.com)
Ph: 604-473-9700 Ext. 200
---
Smart Internet Solutions For Businesses 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


ipnat gre and pptp

2008-06-21 Thread Zinevich Denis

Hi.
Does anybody know how to make ipnat map/or proxying pptp traffic ?
Problem is:
mpd server with pptp - somwhere in internet.
Gateway with ipnat.
Clients behind gateway can not access pptp server at same time.
I found something like:
map bce1 0/0 - 0/0 proxy port 1723 pptp/tcp
but it doesn`t work :-(
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD as VOIP PBX

2008-06-20 Thread Chris St Denis

As well as the ever popular Asterisk, there is also

/usr/ports/net/sipxpbx

If all you want is SIP this will do nicely.


Thomas Mullins wrote:

Is anyone using FreeBSD for their VOIP PBX needs?  If so, what software
are you using?  And any recommendations for software to look at would be
greatly appreciated.

 


Shane

 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

  



--
Chris St Denis
Programmer
SmarttNet (www.smartt.com)
Ph: 604-473-9700 Ext. 200
---
Smart Internet Solutions For Businesses 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


mpd limited connections

2008-06-06 Thread Zinevich Denis

Hi all.
I have very strange problem as for me.
FreeBSD 6.3. mpd5. it is configured to server standard pptp requests.
Everybody listed in mpd.secret can connect with no problems. But...
But only till ng13 is created. After connecting 14 users nobody can 
connect anymore... If somebody dissconects new user can login.

But never more than 14 users
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: 6.3 to 7.0 STABLE upgrade buildworld failures

2008-06-05 Thread Chris St Denis
.c:1082: warning: 
incompatible implicit declaration of built-in function 'abort'
/usr/src/gnu/lib/libgcc/../../../contrib/gcc/unwind-dw2.c: In function 
'uw_frame_state_for':
/usr/src/gnu/lib/libgcc/../../../contrib/gcc/unwind-dw2.c:1099: warning: 
incompatible implicit declaration of built-in function 'memset'
/usr/src/gnu/lib/libgcc/../../../contrib/gcc/unwind-dw2.c: In function 
'__frame_state_for':
/usr/src/gnu/lib/libgcc/../../../contrib/gcc/unwind-dw2.c:1184: warning: 
incompatible implicit declaration of built-in function 'memset'
/usr/src/gnu/lib/libgcc/../../../contrib/gcc/unwind-dw2.c: In function 
'_Unwind_SetSpColumn':
/usr/src/gnu/lib/libgcc/../../../contrib/gcc/unwind-dw2.c:1234: warning: 
incompatible implicit declaration of built-in function 'abort'
/usr/src/gnu/lib/libgcc/../../../contrib/gcc/unwind-dw2.c: In function 
'uw_update_context_1':
/usr/src/gnu/lib/libgcc/../../../contrib/gcc/unwind-dw2.c:1290: warning: 
incompatible implicit declaration of built-in function 'abort'
/usr/src/gnu/lib/libgcc/../../../contrib/gcc/unwind-dw2.c: In function 
'uw_init_context_1':
/usr/src/gnu/lib/libgcc/../../../contrib/gcc/unwind-dw2.c:1408: warning: 
incompatible implicit declaration of built-in function 'memset'
/usr/src/gnu/lib/libgcc/../../../contrib/gcc/unwind-dw2.c:1413: warning: 
incompatible implicit declaration of built-in function 'abort'
/usr/src/gnu/lib/libgcc/../../../contrib/gcc/unwind-dw2.c:1417: error: 
'PTHREAD_ONCE_INIT' undeclared (first use in this function)
/usr/src/gnu/lib/libgcc/../../../contrib/gcc/unwind-dw2.c: In function 
'uw_install_context_1':
/usr/src/gnu/lib/libgcc/../../../contrib/gcc/unwind-dw2.c:1472: warning: 
incompatible implicit declaration of built-in function 'abort'
/usr/src/gnu/lib/libgcc/../../../contrib/gcc/unwind-dw2.c:1480: warning: 
incompatible implicit declaration of built-in function 'memcpy'
/usr/src/gnu/lib/libgcc/../../../contrib/gcc/unwind-dw2.c:1486: warning: 
incompatible implicit declaration of built-in function 'memcpy'
/usr/src/gnu/lib/libgcc/../../../contrib/gcc/unwind-dw2.c:1490: warning: 
incompatible implicit declaration of built-in function 'memcpy'
In file included from 
/usr/src/gnu/lib/libgcc/../../../contrib/gcc/unwind-dw2.c:1518:
/usr/src/gnu/lib/libgcc/../../../contrib/gcc/unwind.inc: In function 
'_Unwind_RaiseException_Phase2':
/usr/src/gnu/lib/libgcc/../../../contrib/gcc/unwind.inc:75: warning: 
incompatible implicit declaration of built-in function 'abort'
/usr/src/gnu/lib/libgcc/../../../contrib/gcc/unwind.inc: In function 
'_Unwind_Resume':
/usr/src/gnu/lib/libgcc/../../../contrib/gcc/unwind.inc:238: warning: 
incompatible implicit declaration of built-in function 'abort'
/usr/src/gnu/lib/libgcc/../../../contrib/gcc/unwind.inc: In function 
'_Unwind_Resume_or_Rethrow':
/usr/src/gnu/lib/libgcc/../../../contrib/gcc/unwind.inc:263: warning: 
incompatible implicit declaration of built-in function 'abort'
*** Error code 1

Stop in /usr/src/gnu/lib/libgcc.
*** Error code 1

Stop in /usr/src.
*** Error code 1

Stop in /usr/src.
*** Error code 1

Stop in /usr/src.
*** Error code 1

Stop in /usr/src.



Casey



- Chris St Denis [EMAIL PROTECTED] wrote:

  

Casey Scott wrote:


Can we no longer use make buildworld to upgrade from source
  

builds? Everytime I've tried, I get build errors. I've gotten the
impression from a few things I've read that freebsd-update is suppose
to be used. I don't want a binary install/upgrade though. I've just
sync from CVS with this in the config:


*default host=cvsup15.FreeBSD.org
*default base=/var/db
*default prefix=/usr
*default release=cvs tag=RELENG_7
*default delete use-rel-suffix
*default compress
src-all


Pretty much the same config I've always used, except the RELENG_7.

I continually get errors when make buildworld. I went back to the
  
6.3 source, and successfully make buildworld. 


My current attempt at buildword with the 7.0 died like this:

  

*


=== usr.bin/awk (obj,build-tools)
yacc -d -o awkgram.c
  

/usr/src/usr.bin/awk/../../contrib/one-true-awk/awkgram.y


yacc: 43 shift/reduce conflicts
yacc: 85 reduce/reduce conflicts
ln -sf awkgram.h ytab.h
cc -O -pipe -DHAS_ISBLANK -I.
  
-I/usr/src/usr.bin/awk/../../contrib/one-true-awk -DFOPEN_MAX=64 
-I/usr/obj/usr/src/tmp/legacy/usr/include 
-L/usr/obj/usr/src/tmp/legacy/usr/lib

/usr/src/usr.bin/awk/../../contrib/one-true-awk/maketab.c  -o maketab


=== lib/libmagic (obj,build-tools)
cc -DHAVE_CONFIG_H -DCOMPILE_ONLY  -I/usr/src/lib/libmagic
  

-I/usr/src/lib/libmagic/../../contrib/file -o mkmagic
/usr/src/lib/libmagic/../../contrib/file/apprentice.c
/usr/src/lib/libmagic/../../contrib/file/funcs.c
/usr/src/lib/libmagic/../../contrib/file/magic.c
/usr/src/lib/libmagic/../../contrib/file/print.c


=== usr.sbin

Re: 7.0-R freezes with: swap_pager: indefinite wait buffer: bufobj

2008-06-04 Thread Chris St Denis
I've been getting this in the logs recently on a 6.2 system. No 
stability issues, but it is concerning.


swap_pager: indefinite wait buffer: bufobj: 0, blkno: 93, size: 4096
swap_pager: indefinite wait buffer: bufobj: 0, blkno: 183, size: 4096

The server has always been under heavy load, but the load isn't any 
higher lately. And I'm only using like 1324K of swap so it's not like 
I'm heavily swapping.


It's running off an adaptec based raid and arcconf says it's fine.



Wojciech Puchar wrote:

Hi,

the SMART-status looks ok!

SMART overall-health self-assessment test result: PASSED

Maybe other applications causes high I/O load?


no reason to fail.


Howto determine this? Other suggestions?


Cheers,
Oskar


Kris Kennaway schrieb am 02.06.2008 20:58:

Oskar Eyb wrote:

Hello,

on a  7.0-RELEASE maschine I have now again a big problem with 
freezing.



swap_pager: indefinite wait buffer: bufobj: 0, blkno: 388449, size: 
4096
swap_pager: indefinite wait buffer: bufobj: 0, blkno: 388452, size: 
20480
swap_pager: indefinite wait buffer: bufobj: 0, blkno: 387805, size: 
16384



# swapctl -l
Device:   1024-blocks Used:
/dev/mirror/gm0s1b   1048576485332
/dev/md01048576485316


What to do against this, is there a patch available?


Your disk is taking an enormously long time to reply to swap I/O, 
which is what is eventually timing out with those errors.  Check 
that it is not failing.


Kris
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]



--
Chris St Denis
Programmer
SmarttNet (www.smartt.com)
Ph: 604-473-9700 Ext. 200
---
Smart Internet Solutions For Businesses 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: AAC driver. No kernel error messages for failed raid5?

2008-05-16 Thread Chris St Denis

Robert Jesacher wrote:


On 06.05.2008, at 22:02, Ed Maste wrote:


On Tue, May 06, 2008 at 12:44:02PM -0700, Chris St Denis wrote:


I pulled out one of the raid5 drives to test the functionality and
noticed that FreeBSD didn't seem to notice the disk failure at all. I
was expecting kernel messages about it, but got nothing.


This is missing functionality in the aac(4) driver.  For now about
the best you can do is regularly poll the status using Adaptec's CLI
tool arcconf.

-ED


The tool you need to look into is: sysutils/aaccli . I think arctool 
is only for arcmsr-devices.
unfortunately aaccli doesn't provide the possibility to use it with 
parameters, so you probably

need to use it with an expect-script.

On the adaptec 2410SA I activated the alarm feature in the 
controller bios, which helps me,
because its a home server but this will not help you if your server is 
sitting somewhere else.


Because of this limitation (and a few other things with the 
controller) I'm certainly looking for
an other solution. In my case a ZFS-based software RAID will suffice, 
but this might not be

desirable for you.

Take care  good luck,
Robert
arcconf from ports works fine. It hangs on exit but does die off 
eventually and doesn't do any harm sitting in background for a while 
when run from cron, and from the commandline I can just ^c it.


Here is what I used in cron for anyone who is interested: 
/usr/local/sbin/arcconf GETCONFIG 1 LD | egrep '(name|Status)'
It gives results like this which work well. Could probably be 
incorporated into the daily run output, but I don't know exactly how off 
hand.


  Logical device name  : Boot mirror
  Status of logical device : Optimal
  Logical device name  : Data raid5
  Status of logical device : Optimal


According to arcconf my card doesn't have an audible alarm :(
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: AAC driver. No kernel error messages for failed raid5?

2008-05-16 Thread Chris St Denis

Doesn't seem to work with my IBM ServeRAID 8k

CLI  open /readonly aac0
Executing: open /readonly=TRUE aac0
Command Error: The current AFAAPI.DLL is too old to work with the 
current controller software.


Seems a little odd it's referencing a dll (which doesn't exist on the 
system)


Dan Nelson wrote:

In the last episode (May 16), Robert Jesacher said:
  

On 06.05.2008, at 22:02, Ed Maste wrote:


On Tue, May 06, 2008 at 12:44:02PM -0700, Chris St Denis wrote:
  

I pulled out one of the raid5 drives to test the functionality and
noticed that FreeBSD didn't seem to notice the disk failure at all.
I was expecting kernel messages about it, but got nothing.


This is missing functionality in the aac(4) driver.  For now about
the best you can do is regularly poll the status using Adaptec's CLI
tool arcconf.

-ED
  

The tool you need to look into is: sysutils/aaccli . I think arctool
is only for arcmsr-devices. unfortunately aaccli doesn't provide the
possibility to use it with parameters, so you probably need to use it
with an expect-script.



aaccli is most definitely scriptable:

$ aaccli open /readonly aac0 : enclosure show status : disk show smart : container 
list /full

  



--
Chris St Denis
Programmer
SmarttNet (www.smartt.com)
Ph: 604-473-9700 Ext. 200
---
Smart Internet Solutions For Businesses 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


AAC driver. No kernel error messages for failed raid5?

2008-05-06 Thread Chris St Denis
I recently setup a new FreeBSD 7.0 AMD64 server with an IBM ServeRAID-8k 
configured with a raid5 for data and raid1 for OS.


I pulled out one of the raid5 drives to test the functionality and 
noticed that FreeBSD didn't seem to notice the disk failure at all. I 
was expecting kernel messages about it, but got nothing.



This is a bit concerning because I don't look at the server physically 
every day and want to know ASAP if a drive fails.


I tried setting options AAC_DEBUG=1 but that produces a lot of messages 
even during normal use so I'd rather not leave that on.



Is this a bug in the driver, or simply missing functionality?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: changed sendmail behavior on FreeBSD 7?

2008-04-01 Thread Chris St Denis

Dan Busarow wrote:


On Mar 31, 2008, at 5:11 PM, fred wrote:

Hi, I am having the exact same problem with a server running 
FreeBSD-7.0.


The hostname is : server1.mydomain.com
MX for mydomain.com is not server1.

sendmail -v [EMAIL PROTECTED]  test.msg will result in user unknown

but

sendmail -v [EMAIL PROTECTED]  test.msg will work.

If anyone knows how to get around this?


In your .mc file

define(`confDONT_PROBE_INTERFACES', `true')

Dan




-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Chris St Denis
Sent: 31 mars 2008 16:29
To: freebsd-questions@freebsd.org
Subject: changed sendmail behavior on FreeBSD 7?

I've setup a new web server hostname doremi.ctgameinfo.com. When I try
to send mail to [EMAIL PROTECTED] it tries to deliver it locally
instead of to the mx server mx1.ctgameinfo.com.

In previous versions this seems to work correctly. Why would it be
trying to deliver locally this time? I'm running default sendmail config
that comes with the standard install.


Another server I have seems to have this problem even worse. It's a web
server, and for any of the hundreds of domains hosted on it (www A
records pointed at it, but MX records pointed elseware) it also tries to
deliver locally. I was able to get this mostly working by using a
smarthost to the actual mail server, but I don't understand why it would
be ignoring the mx records.

I've never had problems like these with previous versions. What has 
changed?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]


Thanks, this seems to have fixed the problem.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


changed sendmail behavior on FreeBSD 7?

2008-03-31 Thread Chris St Denis
I've setup a new web server hostname doremi.ctgameinfo.com. When I try 
to send mail to [EMAIL PROTECTED] it tries to deliver it locally 
instead of to the mx server mx1.ctgameinfo.com.


In previous versions this seems to work correctly. Why would it be 
trying to deliver locally this time? I'm running default sendmail config 
that comes with the standard install.



Another server I have seems to have this problem even worse. It's a web 
server, and for any of the hundreds of domains hosted on it (www A 
records pointed at it, but MX records pointed elseware) it also tries to 
deliver locally. I was able to get this mostly working by using a 
smarthost to the actual mail server, but I don't understand why it would 
be ignoring the mx records.


I've never had problems like these with previous versions. What has changed?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: changed sendmail behavior on FreeBSD 7?

2008-03-31 Thread Chris St Denis



Giorgos Keramidas wrote:

On Mon, 31 Mar 2008 13:29:28 -0700, Chris St Denis [EMAIL PROTECTED] wrote:
  

I've setup a new web server hostname doremi.ctgameinfo.com. When I try
to send mail to [EMAIL PROTECTED] it tries to deliver it locally
instead of to the mx server mx1.ctgameinfo.com.

In previous versions this seems to work correctly. Why would it be
trying to deliver locally this time? I'm running default sendmail
config that comes with the standard install.



Show us your `/etc/mail/hostname.mc' file, and if you have a file with a
list of `local' hostnames in `/etc/mail/local-host-names' show us that
file too.
  


It's just the default mc file.

Scenario 1 described above
-
No local-host-names file. I tried creating one with just the hostname in 
it, but it didn't help.


doremi# cat /etc/mail/doremi.ctgameinfo.com.mc | grep -v ^# | grep -v ^dnl
divert(-1)


divert(0)
VERSIONID(`$FreeBSD: src/etc/sendmail/freebsd.mc,v 1.34.2.1 2007/11/22 
16:19:40 gshapiro Exp $')

OSTYPE(freebsd6)
DOMAIN(generic)

FEATURE(access_db, `hash -o -TTMPF /etc/mail/access')
FEATURE(blacklist_recipients)
FEATURE(local_lmtp)
FEATURE(mailertable, `hash -o /etc/mail/mailertable')
FEATURE(virtusertable, `hash -o /etc/mail/virtusertable')

define(`confCW_FILE', `-o /etc/mail/local-host-names')

DAEMON_OPTIONS(`Name=IPv4, Family=inet')
DAEMON_OPTIONS(`Name=IPv6, Family=inet6, Modifiers=O')

define(`confBIND_OPTS', `WorkAroundBroken')
define(`confNO_RCPT_ACTION', `add-to-undisclosed')
define(`confPRIVACY_FLAGS', `authwarnings,noexpn,novrfy')
MAILER(local)
MAILER(smtp)


Scenario 2 described above. stickyhost  MAIL_HUB were added to work 
around.

-
no local-host-names initially. One was created trying to debug this tho 
it doesn't seem to help any.

carbon# cat /etc/mail/local-host-names
localhost
carbon.smartt.com


carbon# cat /etc/mail/carbon.smartt.com.mc | grep -v ^# | grep -v ^dnl
divert(-1)


divert(0)
VERSIONID(`$FreeBSD: src/etc/sendmail/freebsd.mc,v 1.34.2.1 2007/11/22 
16:19:40 gshapiro Exp $')

OSTYPE(freebsd6)
DOMAIN(generic)

FEATURE(access_db, `hash -o -TTMPF /etc/mail/access')
FEATURE(blacklist_recipients)
FEATURE(local_lmtp)
FEATURE(mailertable, `hash -o /etc/mail/mailertable')
FEATURE(virtusertable, `hash -o /etc/mail/virtusertable')

FEATURE(stickyhost)
define(`MAIL_HUB', `smtp-be1')





define(`confCW_FILE', `-o /etc/mail/local-host-names')

DAEMON_OPTIONS(`Name=IPv4, Family=inet')
DAEMON_OPTIONS(`Name=IPv6, Family=inet6, Modifiers=O')

define(`confBIND_OPTS', `WorkAroundBroken')
define(`confNO_RCPT_ACTION', `add-to-undisclosed')
define(`confPRIVACY_FLAGS', `authwarnings,noexpn,novrfy')
MAILER(local)
MAILER(smtp)



Btw, should OSTYPE haven't been bumped to freebsd7?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Help : about FreeBSD 6.2 kernel error!

2008-03-24 Thread Zinevich Denis
1. try to compile kernel without SMP.
2. Examine hardware.

刘德安 пишет:
 FreeBSD GFAOS 6.2-RELEASE FreeBSD 6.2-RELEASE #0: Mon Jan  7 15:29:50 UTC 
 2008 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/SMP  i386
 
 when rebooting system
 Error messages:
 
 kernel: Fatal trap 12: page fault while in kernel mode 
 kernel: cpuid = 0; apic id = 00 
 kernel: fault virtual address = 0x9da324e4 
 kernel: fault code = supervisor write, page not present 
 kernel: instruction pointer = 0x20:0xc059c7be 
 kernel: stack pointer = 0x28:0xe3ea9c50 
 kernel: frame pointer = 0x28:0xe3ea9c88 
 kernel: code segment = base 0x0, limit 0xf, type 0x1b 
 kernel: = DPL 0, pres 1, def32 1, gran 1 
 kernel: processor eflags = interrupt enabled, resume, IOPL = 0 
 kernel: current process = 13 (swi4: clock) 
 kernel: trap number = 12 
 kernel: panic: page fault 
 kernel: cpuid = 0 
 kernel: Uptime: 6m53s 
 kernel: Cannot dump. No dump device defined. 
 kernel: Automatic reboot in 15 seconds - press a key on the console to abort
 
 
 who cat help me?
 thanks!!!
   
 --
 Oddvar
 2008-03-24
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Best practice: sendmail and SMTP auth

2008-03-12 Thread Zinevich Denis
I dont remember if it can be done by sendmail, but with exim it can be 
done easy.

Doug Poland пишет:

Hello,

Not sure if this is the most appropriate place for this question, but
since all my servers are FreeBSD 6.x/7.x, I'll give it a go...

I am considering setting up SMTP auth on a number of sendmail
instances that I control.  After much googling and reading, it is not
clear to me that a server with SMTP auth configured/enabled can relay
mail in both auth and non-auth modes.

If one sendmail configuration cannot accommodate both SMTP auth and
access.db, does one setup a dedicated SMTP auth host with a SMART_HOST
option and feed incoming email to an non-auth instance of sendmail?

Sorry if my terminology is ambiguous, I'm not a sendmail professional
by day.


--
Regards,
Doug

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ports problems

2008-02-24 Thread Zinevich Denis

Download sources for software you need, and compile it manualy.
but firstly i`d try to delete ports directory, and fetch ports again.
Daniel Molina Wegener пишет:

Hi,

I've updated and upgraded the ports tree to the . branch
but serveral of ports doesn't compile or are completly absent
on the repositories.

What can I do?, I need the system working.





Best regards,


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: pxeboot, TFTP only, NFS MOUNT RPC error: 60, timeout

2008-02-07 Thread Zinevich Denis

I confirm it.
Seems to be loader bug.
I`ve tried to compile it without nfs support at all... but it didn`t help.
I`ve been searching for solution for about a week and found nothing.

Hey,

I've been building FreeBSD jumpstart infrastructure and it mostly 
works.  I'm using tftp  to boot off the network in to scripted 
sysinstall.  I compiled the boot loader with tftp support but every 
time I boot it will first try nfs, then timeout after around two 
minutes (it cannot find nfs) and finally boot from tftp.  Is there any 
way that I can make it boot from tftp straight away rather than wait 
for nfs to timeout?


This is how I build the boot loader:

cd /usr/src/sys/boot
sudo make clean
sudo make LOADER_TFTP_SUPPORT=YES
sudo cp i386/pxeldr/pxeboot /jumpstart/tftpd/boot/pxeboot.0
sudo cp i386/boot0/boot0 /jumpstart/tftpd/boot/
sudo cp i386/boot2/boot1 /jumpstart/tftpd/boot/
sudo cp i386/boot2/boot2 /jumpstart/tftpd/boot/
sudo cp i386/mbr/mbr /jumpstart/tftpd/boot/

This is my loader.conf:

# loader.conf
init_path=/stand/sysinstall
rootfs_load=YES
rootfs_name=/boot/mfsroot
rootfs_type=mfs_root
vfs.root.mountfrom=ufs:/dev/md0c
autoboot_delay=0

And loader.rc:

#loader.rc
echo hopping the kernel...
include /boot/loader.4th
start


Many thanks,


Jedrek
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: pxeboot, TFTP only, NFS MOUNT RPC error: 60, timeout

2008-02-07 Thread Zinevich Denis

I tried with LOADER_TFTP_SUPPORT and LOADER_NFS_SUPPORT both enabled.
Also I tried with nfs disabled and tftp enabled. All was made under 6.2 
stable, i386 arch.

Only once i`ve got it working without timeout, but I could not repeat this.
I`ll be back to this question in about one or two month with 6.2 and 
amd64 arch, so may be I`ll discover something new.

Zinevich Denis wrote:
It does not work. I`ve tried. But as I found in forums and mailing 
lists it randomly helps sometimes.


Please don't top-post. I have a comment in 
src/sys/boot/i386/loader/conf.c v1.26 (RELENG_7) saying:


#if defined(LOADER_NFS_SUPPORT)  defined(LOADER_TFTP_SUPPORT)
#error Cannot have both tftp and nfs support yet.
#endif

So at least the intent is that NFS and TFTP are mutually exclusive. 
Since the OP has both working at the same time, there's something 
wrong. Which version are you using, and which architecture?


I'm not really able to help you debug further, so I suggest filing a 
PR if one doesn't exist already.


Erik
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: pxeboot, TFTP only, NFS MOUNT RPC error: 60, timeout

2008-02-07 Thread Zinevich Denis
It does not work. I`ve tried. But as I found in forums and mailing lists 
it randomly helps sometimes.
 
This should Just Work, and I've had it work about half a year ago on 
6.2. Which version are you compiling on?


The tutorial I have handy[1] says to compile with:

   make -DLOADER_TFTP_SUPPORT=YES

I'm not sure if it makes a difference. Anyhow, the boot loader source 
looks like it can't cope with both TFTP and NFS at the same time, so 
there might be a bug in there after all.


Erik

[1] http://www.locolomo.org/pub/pxeboot/index.html
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Dell 1950

2008-02-02 Thread Zinevich Denis
I had a problem with 1950. It emerged that this servers have problems 
with reboot.

After executing reboot commant server hangs just after printing uptime.
http://lists.freebsd.org/pipermail/freebsd-stable/2006-October/029108.html
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Syslog warnings: 15 x No buffer space available

2008-01-27 Thread Zinevich Denis

Probably you shoul look to:
netstat -m

4/1421/1425 mbufs in use (current/cache/total)
0/614/614/25600 mbuf clusters in use (current/cache/total/max)

netstat -Lan

give you a link to good article. It`s in russian, but you can see it for 
commands

and sysctl variables which may help you.
http://www.opennet.ru/base/net/tune_freebsd.txt.html

Anyone who could point me to how to remedy this?

Thanks,

--per
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Missing kernel configuration files

2008-01-27 Thread Zinevich Denis

I had such mistake several days ago. In my case the reson was that I
forgot that I`m usin amd64 arch, and I placed config to
/usr/src/sys/i386/conf, but the right place was /usr/src/sys/amd64/conf

PS: Ну если не говоришь ты хорошо по английски, то хоть не позорь родной
союз :-). Тему письма надо указывать.
JSCB Alokabank пишет:

Please help me
I'am beginer in FreeBSD
I try to rebuild kernel files for optimizations system.
Whate i gona do?
sorry but i dont speake englash language wery well.
look to include files this is my build kernel.
I'am talk on russian.

make buildkernel KERNCONF=KERNEL
ERROR: Missing kernel configuration file(s) (KERNEL)
*** Error code 1

Stop in /usr/src
*** Error code 1

Stop in /usr/src
#

Лидер бывает только один - UzNet
www.uznet.net


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Missing kernel configuration files

2008-01-27 Thread Zinevich Denis
I had such mistake several days ago. In my case the reson was that I 
forgot that I`m usin amd64 arch, and I placed config to 
/usr/src/sys/i386/conf, but the right place was /usr/src/sys/amd64/conf


PS: Ну если не говоришь ты хорошо по английски, то хоть не позорь родной 
союз :-). Тему письма надо указывать.

JSCB Alokabank пишет:

Please help me
I'am beginer in FreeBSD
I try to rebuild kernel files for optimizations system.
Whate i gona do?
sorry but i dont speake englash language wery well.
look to include files this is my build kernel.
I'am talk on russian.

make buildkernel KERNCONF=KERNEL
ERROR: Missing kernel configuration file(s) (KERNEL)
*** Error code 1

Stop in /usr/src
*** Error code 1

Stop in /usr/src
#

Лидер бывает только один - UzNet
www.uznet.net


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


paravirtualized version of freebsd-kernel for amd64

2008-01-11 Thread Denis Maligin
Hello people,

I'd like to ask, whether there is, or will be a paravirtualized
version of freebsd for amd64?

Kind regards,
Denis Maligin
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Freebsd Soekris

2008-01-10 Thread Denis Beltramo
Good morning,

I have a question.
I am installing freebsd on soekris net4801.
I have set console speed on soekris at 9600 an I have wrote
console=comconsole on /boot/loader.conf (this path in into my tftp server)
When i write: boot f0 start but it stop on: Starting the BTX loader

suggestion?

Thanks!

-- 
Denis Beltramo
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


kernel: Fatal trap 12: page fault while in kernel mode

2008-01-04 Thread Zinevich Denis

Hi all.
Some problem with free.
I`ve got such mess in log:

Jan  4 22:47:09 fs kernel: Fatal trap 12: page fault while in kernel mode
Jan  4 22:47:09 fs kernel: fault virtual address= 0x3e
Jan  4 22:47:09 fs kernel: fault code = supervisor read, page not present
Jan  4 22:47:09 fs kernel: instruction pointer  = 0x20:0xc060cc24
Jan  4 22:47:09 fs kernel: stack pointer= 0x28:0xe529ac30
Jan  4 22:47:09 fs kernel: frame pointer= 0x28:0xe529ac34
Jan  4 22:47:09 fs kernel: code segment   = base 0x0, limit 0xf, 
type 0x1b

Jan  4 22:47:09 fs kernel: = DPL 0, pres 1, def32 1, gran 1
Jan  4 22:47:09 fs kernel: processor eflags = interrupt enabled, 
resume,IOPL = 0

Jan  4 22:47:09 fs kernel: current process  = 9 (thread taskq)
Jan  4 22:47:09 fs kernel: trap number  = 12
Jan  4 22:47:09 fs kernel: panic: page fault
Jan  4 22:47:09 fs kernel: Uptime: 4d0h37m10s
Jan  4 22:47:09 fs kernel: Physical memory: 2013 MB
Jan  4 22:47:09 fs kernel: Dumping 243 MB: 228 212 196 180 164 148 132 
116 100 84 68 52 36 20 4

Jan  4 22:47:09 fs kernel: Dump complete
Jan  4 22:47:09 fs kernel: Automatic reboot in 15 seconds - press a key 
on the console to abort

Jan  4 22:47:09 fs kernel: Rebooting...

Problem repeats for 6.2-RELEASE.

kgdb kernel.debug /var/crash/vmcore.0  - returns this:

Fatal trap 12: page fault while in kernel mode
fault virtual address   = 0x3e
fault code  = supervisor read, page not present
instruction pointer = 0x20:0xc060cc24
stack pointer   = 0x28:0xe529ac30
frame pointer   = 0x28:0xe529ac34
code segment= base 0x0, limit 0xf, type 0x1b
   = DPL 0, pres 1, def32 1, gran 1
processor eflags= interrupt enabled, resume, IOPL = 0
current process = 9 (thread taskq)
trap number = 12
panic: page fault
Uptime: 4d0h37m10s
Physical memory: 2013 MB
Dumping 243 MB: 228 212 196 180 164 148 132 116 100 84 68 52 36 20 4

#0  doadump () at pcpu.h:195
195 __asm __volatile(movl %%fs:0,%0 : =r (td));

I think it`s hardware problem. This machine has been working for about 9 
months with no problems but I dont know how to correctly find the 
problem.


uname -a:
FreeBSD fs.ngc.net.ua 8.0-CURRENT FreeBSD 8.0-CURRENT #3: Mon Dec 31 
05:07:25 EET 2007 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/FS  i386

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Problem with logs

2007-09-12 Thread Denis
I had such problem with FreeBSD 4.7, and finally discovered that this
records were for the last year.
My auth.log was pretty small and contain records for more than one
year. And daily security included records for the last year. May this
could be applied to you?

Best regards, Denis.

On 9/12/07, Aldisa Admin [EMAIL PROTECTED] wrote:
 Hello All,

 I am having trouble understanding what is going on and how to solve the 
 problem:

 For the last few days, I am getting the following messages (some names 
 removed for privacy) in the daily security run output:

 [hostname].ca login failures:
 Sep 11 10:36:52 server su: BAD SU abid to root on /dev/ttyp0

 [hostname].ca login failures:
 Sep  8 16:56:15 server su: BAD SU abid to root on /dev/ttyp0


 I got worried because both these instances are times when I am positive that 
 I am not accessing the system.  I am the only user of the system.  I use ssh 
 to access the system.  Root access is disabled in sshd.  I log in using my 
 username (abid) and SU to root when necessary.

 So I went to check the auth.log, and here is the concerned section:

 Aug 31 17:01:36 server sshd[67613]: Accepted keyboard-interactive/pam for 
 abid from 192.168.2.149 port 1203 ssh2
 Aug 31 17:01:40 server su: abid to root on /dev/ttyp0
 Aug 31 18:42:56 server sshd[69386]: Accepted keyboard-interactive/pam for 
 abid from 192.168.2.149 port 1688 ssh2
 Aug 31 18:43:01 server su: abid to root on /dev/ttyp0
 Aug 31 22:58:28 server sshd[71423]: Accepted keyboard-interactive/pam for 
 abid from 192.168.2.149 port 2032 ssh2
 Aug 31 22:58:32 server su: abid to root on /dev/ttyp0
 Sep  9 13:40:55 server sshd[72180]: Accepted keyboard-interactive/pam for 
 abid from 192.168.2.149 port 4146 ssh2
 Sep  9 13:41:00 server su: abid to root on /dev/ttyp0
 Sep  9 14:14:09 server sshd[72484]: Accepted keyboard-interactive/pam for 
 abid from 192.168.2.149 port 1116 ssh2
 Sep 10 09:04:41 server sshd[81232]: Accepted keyboard-interactive/pam for 
 abid from 192.168.1.30 port 2599 ssh2
 Sep 10 09:04:47 server su: abid to root on /dev/ttyp0
 Sep 11 11:37:10 server sshd[94789]: Accepted keyboard-interactive/pam for 
 abid from 192.168.1.30 port 1361 ssh2
 Sep 11 11:37:15 server su: abid to root on /dev/ttyp0
 Sep 12 08:41:46 server sshd[6247]: Accepted keyboard-interactive/pam for abid 
 from 192.168.1.30 port 2521 ssh2
 Sep 12 08:41:53 server su: abid to root on /dev/ttyp0


 As you can see, there is no matching incidence in the auth.log.  How can the 
 security run show a BAD SU when there is no matching entry in the auth.log 
 for somebody authenticating successfully under my username.

 Some other facts:

 The machine is behind a NAT router and only apache and email ports (25, 80, 
 110, 143, 443, 587) are open.  SSH access is restricted to intranet IP 
 ranges.  The only other opening is a VPN connection between the routers at my 
 office (where the server is) and my home.  The subnet in the office is 
 192.168.1 and at home is 192.168.2

 I changed the password on my account after the Sep 8 occurrence.

 It seems to me that somebody is hacking in, but I can't figure out how and 
 from where.

 ANY AND ALL HELP WILL BE APPRECIATED.

 Abid
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


re: parental control with squid and dansguardian

2007-07-06 Thread Denis R.
Now, if someone just changes the port in their browser to 3128 (squid
proxy port), then all content filtering will be bypassed.

I have the same setup at home for my kids.

Check the /etc/ipnat.conf file to redirect all web traffic to your
FreeBSD_gateway_IP_address:8080 (assuming your FreeBSD box acts as a
firewall/squid/gateway).

Regards,
Den

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Assignment of device names to external USB drives

2007-05-19 Thread Denis Fortin

Greetings,

I am trying to set up a backup server, using a combination of internal 
and external (USB) disk drives.


How can I manage the mapping of USB disk drives to device names?  i.e. 
USB drives get assigned device names like da0, da1, da2... when they are 
detected.  But if one of the drives fails or is not powered up, all 
other ones will get bumped down one in the list next time I reboot.


The problem is that if I automatically mount /dev/da0a 
/archive/volume1, mount /dev/da1a /archive/volume2, etc. I run the 
risk of having the wrong disk being mounted on a mount point !?!


Is there an obvious solution that I'm missing, or a canonical workaround 
to this problem?


Thanks

Denis F.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


6.1RC2 regression and a BIG question.

2006-05-15 Thread Denis R Michailov
Hello. This is first time I write to you, so I beg you pardon if
something goes wrong.
We bought HP Proliant DL 320 G4. I tried to install FreeBSD and all
the attempts failed. 5.4 cannot see my SATA Raid controller and says
that I have no hard disks. 6.1RC2 told me the same. But 6.0i386 
6.0amd64 was installed successfully but server hang up on loggin in
(when i see a login message I cannot type anything my keyboard doesn`t
respond at all (except Num, Scroll and Caps Lock)) but I see that if I
push the power button I get a lot of messages shutting down the system
(as if I typed CTRL+ALT+DEL) acpi is surelly on. Safe Mode and so on
didn help except single user mode. But I don`t know what to do in
single mode to bring the whole system up.
If you can suggest anything I will humbly thank you.

Brief: 6.0 recognizes Intel 82808FR SATA controller with 2 Maxtor SATA
drives, 6.1RC2 didn do that.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


re: Substitute command on vi

2006-05-05 Thread Denis R.
Try
#dos2unix file_name


Hi list,

I need to substitute a lot of characters ^M (ctrl+M)
at the end of each line in my file.

The command :%s/^M//g insn't have success.

How can i do it ?

Thanks,

Aguiar

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Bind as a chaching nameserver

2006-04-26 Thread Denis R.
http://cr.yp.to/djbdns/guarantee.html

Richard, besides simple you want a _secure_ caching name server. Yes, you
can type named_enable in rc.conf and be done with it, just don't forget
to periodically check the security updates web page for BIND exploits.

Regards!

Richard Collyer wrote:
 Hello,

 I've recently been getting a lot of trouble with SpamAssassin performing
 a lot of rDNS lookups which is causing network issues (timeouts etc to
 DNS servers).

 I am trying to install BIND (or djbdns) as a simple caching nameserver.
 Just to take some of the load off the networks DNS servers (my ISPs).

 However I am having trouble finding a good tutorial to follow.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


re: caching nameserver

2006-04-25 Thread Denis R.
Check the DJBDNS author's site: http://cr.yp.to/djbdns.html

The instructions are simple. If there is a lot of name resolutions
happening on the web server itself, install dnscache on the localhost.

My advice to you is to avoid BIND. It is too complicated for your needs.

Regards!



At 05:50 PM 4/25/2006, Richard Collyer wrote:
Hello,

I've recently been getting a lot of trouble with SpamAssassin performing a
lot of rDNS lookups which is causing network issues (timeouts etc to DNS
servers).

I am trying to install BIND (or djbdns) as a simple caching nameserver.
Just to take some of the load off the networks DNS servers (my ISPs).

However I am having trouble finding a good tutorial to follow.

I've looked at
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-dns.html
but its mainly going on about being a nameserver which is not what I am
after, wanting to keep it more simple than that.

[EMAIL PROTECTED]:/usr/local/etc] $ named -v
BIND 9.3.1

Can anyone suggest me a good tutorial to follow, I've googled but mostly
they are for debain/redhat and some of the commands and files are different.

Cheers
Richard


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: make installkernel doesn't work?

2006-03-14 Thread Chris St Denis
I don't have physical access to the server at the moment to try the  
loader prompt but...


I tried
mv /boot/kernel /root/
mv /boot/kernel.old /root/
make installkernel

the folder and its files reappear in /boot but a reboot still shows  
the custom config.


I also tried shutting down the server and powering it back up incase  
it wasn't actually rebooting --- same result.



the output of make installkernel shows it is installing generic to / 
boot/kernel
cd /usr/obj/usr/src/sys/GENERIC;  MAKEOBJDIRPREFIX=/usr/obj   
MACHINE_ARCH=amd64  MACHINE=amd64

snip
install -p -m 555 -o root -g wheel kernel /boot/kernel

Full output of make (about 2.6MB)
http://www.fanart-central.net/files/make_kernel.txt


On 13-Mar-06, at 1:47 AM, Glenn Dawson wrote:


At 12:41 AM 3/13/2006, Cstdenis wrote:

Nope
%grep ident /usr/src/sys/amd64/conf/GENERIC
ident   GENERIC

and its more than that. After reinstalling the kernel I still have  
SMP

support.


What's in /boot/loader.conf ?

Also, verify that the kernel you built is actually in /boot/kernel/ 
kernel.


Assuming it's there, what happens if you stop the boot at the  
loader prompt and manually load the kernel you want?


-Glenn



- Original Message -
From: [EMAIL PROTECTED]
Cc: freebsd-questions@freebsd.org
Sent: Sunday, March 12, 2006 11:53 PM
Subject: Re: make installkernel doesn't work?


 Maybe you set your ident to something else:

 $ grep ident /usr/src/sys/i386/conf/GENERIC

 or whatever your arch is.
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
[EMAIL PROTECTED]



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions- 
[EMAIL PROTECTED]




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: openldap23 sasl server

2006-01-06 Thread Denis Lemire
The port you are looking for is net/openldap23-server.

If you do a make config on this port and enable SASL support the
resulting package will be openldap23-sasl-server.

Regards,

Denis Lemire

On 1/6/06, Randy Schultz [EMAIL PROTECTED] wrote:
 Hi there,

 I had a 5.4 system running the openldap23 sasl server that I did a bin upgrade
 to 6.0-stable.  Once that was done I cvsup'd everything to bring it up to
 date.  When I did a portupgrade -a I noticed, due to portupgrade dying, that
 openldap23-sasl-server does not exist in the ports tree.  Yet using 
 sysinstall,
 which is what I did initially to install, it's there for installing.  Can
 somebody point me to the answer as to why it's available using sysinstall
 but not when using the ports tree?  The 2.3 sasl client is there but not
 the 2.3 sasl server.

 --
   Randy([EMAIL PROTECTED])  715-726-2832 email bodhisattva *

   There is no fire like passion, there is no shark like hatred,  there is no
 snare like folly, there is no torrent like greed.

 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


re: SQUID + antivirus content filter

2005-11-18 Thread Denis R.
My prerequisities are:
SQUID, CLAMAV

What software would you recommend for such things ? ( I unsuccesfully
tried Viralator in combination with SquidGuard. )

Vladimir,
I'll make an assumption that you speak Russian, so here is a nice write-up:
http://www.opennet.ru/docs/RUS/squid_filter/squidguard.html

Do a search there on a few more articles. It is a great site. I use the
same setup without the online virus scanner on a small network which scans
the http traffic and protects little kids from porn, gambling etc sites.
Clamd runs just on a file system since the server runs samba services.
Dansguarding databases get updated on a weekly basis. In addition the
server acts as a firewall of course.

Regards!
Denis

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Creating IPSec VPN between FreeBSD and Linksys WRV54G

2005-09-28 Thread Denis Lemire
I have setup many IPSec FreeBSD VPN's using racoon and gif interfaces.

On the FreeBSD side I've got:
gif0: flags=8051UP,POINTOPOINT,RUNNING,MULTICAST mtu 1280
tunnel inet [LOCAL_WAN_IP] -- [REMOTE_WAN_IP]
inet 172.31.1.1 -- 192.168.1.1 netmask 0x

I have the usual setkey policies in /etc/ipsec.conf (loaded with setkey -f).

The router and the BSD box are establishing IKE no problem according
to racoon logs, however I can't actually get any traffic across.
Clearly there is something about the Linksys implementation that I'm
not familiar with. Anybody have any luck with this particular setup?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: RELENG_6 upgrade from RELENG_5

2005-09-17 Thread Chris St Denis
Would be real nice to be able to remove mass groups of options with one
nooptions

nooptions scsi or nooptionsgroup scsi

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kirk Strauser
Sent: Friday, August 26, 2005 11:44 AM
To: freebsd-questions@freebsd.org
Subject: Re: RELENG_6 upgrade from RELENG_5

On Tuesday 23 August 2005 12:40, artifex maximus wrote:

 I think much better to leave GENERIC as is and making new config file
 like this:

 include GENERIC

 ident NEWKERNEL

 nomakeoption DEBUG
 nooptions KDB

Slick!  So, how does one nocpu I486_CPU?
-- 
Kirk Strauser

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: What does an * in master.passwd (not passwd) mean?

2005-09-17 Thread Chris St Denis
It means an account that can not be logged in to.

The in the hash algorithm used in master.password nothing encrypts to * so
no possible password will ever match the encrypted value * thus locking out
the account from login. 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Paul Hoffman
Sent: Friday, September 16, 2005 3:22 PM
To: freebsd-questions@FreeBSD.ORG
Subject: What does an * in master.passwd (not passwd) mean?

In 5.4 (and probably lots of other versions), the master.passwd file 
is pre-seeded with lots of accounts such as daemon, operator, and so 
on. The master.passwd file looks like:

daemon:*:1:1::0:0:Owner of many system processes:/root:/usr/sbin/nologin
operator:*:2:5::0:0:System :/:/usr/sbin/nologin
. . .

The man page for master.passwd and passwd say what an * in the 
second field means in passwd, but not in master.passwd. Any clues 
would be appreciated (and I will put in a documentation pr when I 
have an answer).

--Paul Hoffman
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Web forum tools -recomendations please

2005-09-12 Thread Chris St Denis
Pre 2.0 has some major security problems that have no patches available.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matt Virus
Sent: Monday, August 29, 2005 10:26 AM
To: Vizion; freebsd
Subject: Re: Web forum tools -recomendations please

Vizion wrote:
 Hi
 
 I need to install a community forum system running in a apache/freebsd 
 environment. Any software suggestions  ideas and or experiences to share?
 
 All contributions appreciated
 
 david 


Invisionboard.  It's wonderful.  Version 2.0 and prior are/were free if 
you can find a link to aquire it.  New versions are commercial.

http://www.invisionboard.com/


-- 
Matt Virus (veer-iss)
http://www.mattvirus.net
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


nanobsd-based installation on Soekris net4801 (disk geometry problem)

2005-09-11 Thread Denis Fortin

A quick question:

This weekend, I have decided to reinstall my Soekris net4801 since the 80GB 
disk in it, after running continuously for almost 3 years now, has reported 
a few read errors last week.  So I promptly decided to replace the disk.


I didn't have another FreeBSD machine to build a new nanobsd configuration, 
so I used the nanobsd package at 
http://people.freebsd.org/~phk/nanobsd/soekris_4x26 to put on a 64MB flash 
card that I had handy, and I added sysinstall to it.


This boots fine, and allows me to run the installation properly.

However, the resulting system will not boot from the disk, since I cannot 
figure the right geometry for the Fujitsu MVH2060AT 60GB drive.  The 
documentation says the drive reports 16383/16/63, the Soekris boot screen 
reports Xlt 1024-255-63, fdisk recommends 7296/255/63 because it claims 
not to like the 116280-16-63 that it finds on the disk...  Sigh.  Bottom 
line is that the installation appears to work, but I am unable to then boot 
from the harddisk (the boot loader complains it cannot find /boot/loader).


Any suggestions?

Thanks

Denis F. 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: /usr/ports/www/phpbb --? Makefile query

2005-09-09 Thread Chris St Denis
I've used phpBB with php5 just fine. 

If you want alternative forums software, take a look at http://fudforum.org

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Vizion
Sent: Thursday, September 08, 2005 8:51 PM
To: freebsd-questions@freebsd.org
Cc: Brooks Davis; Johann Visagie
Subject: Re: /usr/ports/www/phpbb --? Makefile query

On Thursday 08 September 2005 19:48,  the author Brooks Davis contributed to

the dialogue on-
 Re: /usr/ports/www/phpbb --? Makefile query: 

On Thu, Sep 08, 2005 at 05:34:32PM -0700, Vizion wrote:
 On Thursday 08 September 2005 17:23, you wrote:
 On Thu, Sep 08, 2005 at 05:05:41PM -0700, Vizion wrote:
  The makefile has the following lines:
 
  PHPBBDIR= ${WWWDOCROOT}/${PHPBBURL}
  PKGOPTS=  ${FILESDIR}/pkg-opts
  EXCEPTFILES=  ${PREFIX}/${PHPBBDIR}/install/install.php \
${PREFIX}/${PHPBBDIR}/install/upgrade.php \
${PREFIX}/${PHPBBDIR}/install/update_to_latest.php
 
  In my case DocumentRoot is:
  WWWDOCROOT?=  /usr2/virtualwebs
 
used to doing it might be willing to make such a change and commit

That would be breaking the Makefile, not fixing it.  Realistly, if you
want to use a non-standard file system layout, you shouldn't use the
port.  
Humph -- well I thought most large scale virtual webs are set up outside  
main /usr/local - admittedly many use simlinks but I thought not when the 
sever operates as a farm...which is why apache allows for data paths 
separtely /usr/loca

Just do a make depends in the phpbb port directory to get the 
pieces you need, and then install phpbb by hand.  Most php apps are
pretty trivial to install if you know how to configure a web server and
database.

I have now found an even more serious problem phpbb is NOT compatible with 
php5 -- which opens a whole can of worms...

I am trying for an alternative

Thank yo so much for your time -- it is much appreciated

David


P.S. Please stop randomly cross posting your messages.  It just wastes
people's time.
Sorry about that

-- 
40 yrs navigating and computing in blue waters.
English Owner  Captain of British Registered 60' bluewater Ketch S/V
Taurus.
 Currently in San Diego, CA. Sailing bound for Europe via Panama Canal after

completing engineroom refit.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: 5.4-rel Bootloader Wedgie on Supermicro 5013C-MT

2005-09-09 Thread Chris St Denis
I think I've had this problem with a similar supermicro system. 
The solution for me was to turn off the onboard ide raid controller. 

I see SCSI in those server specs. If you are using all SCSI try disabeling
all the ata and sata in the bios. Also, try turning off raid features of the
SCSI if you can (If you need to, you can always fall back to gmirror or
something). 


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Joe Hamelin
Sent: Monday, August 29, 2005 11:21 AM
To: freebsd-questions@freebsd.org
Subject: Re: 5.4-rel Bootloader Wedgie on Supermicro 5013C-MT

Update: Whoever fixes this KEEPS the test server.  Here's a $1000+
server with 1GB RAM for fixing what could be a simple bug.  Any
takers?

http://supermicro.com/products/system/1U/5013/SYS-5013C-M8.cfm


On 8/10/05, Joe Hamelin [EMAIL PROTECTED] wrote:
 http://www.freebsd.org/cgi/query-pr.cgi?pr=84717
 
 
 On 8/9/05, Joe Hamelin [EMAIL PROTECTED] wrote:
  NM: I RTFWP and submitted a bug.  I'll let you guys know how it turns
out.
 
 
  On 8/9/05, Joe Hamelin [EMAIL PROTECTED] wrote:

 What happens when you boot from floppies?

The box doesn't come with a floppy drive.  The space where the
floppy
would be has two usb ports and a serial port.  The box does support
bios serial booting.  I did do a standard install on another box and
then moved the drive to the supermicro box... it hung at the daemond
screen.
   
   So, does anyone have any ideas?  Does someone need a Supermicro
   5013C-MT to play with?  Who should I submit a bug report to?
  
 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: A few quick questions, one on daily reports and one on Raid 5...

2005-09-09 Thread Chris St Denis
There should be no problem creating a filesystem on a raid 5 (hardware or
software) and mounting that as /var or /var/log or whatever.

As for the daily reports, take a look at /etc/mail/aliases I think you can
alias root to multiple email addresses (unsure, never tried)

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of mojo fms
Sent: Monday, September 05, 2005 11:34 AM
To: freebsd-questions@freebsd.org
Subject: A few quick questions, one on daily reports and one on Raid 5...

I know its doable, how would i go about adding another email that the daily 
reports get sent too? I would still like them to be stored on the system its

self but also send to another email account.

Raid 5 question, i know in MS Enviroments log files can not be stored on a 
striped raid array, is it the same for FBSD? And if so what about Mail 
(/var/mail/*) being stored in there? Any issues with that?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: awstats for a single directory

2005-09-09 Thread Chris St Denis
This isn't the awstats mailing list but.

There is probably a better way, but you could just filter your log through a
grep just_this_directory before (0r while) feeding them into awstats

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Redmond Militante
Sent: Thursday, September 08, 2005 10:23 AM
To: freebsd-questions@freebsd.org
Subject: awstats for a single directory

hello

i was previously using webalizer to analyze my apache log files.  i was able
to generate webalizer reports for a single directory using webalizer's
IgnoreURL directive.

is it possible to get awstats to do the same thing - generate a report for
an individual directory i.e., http://www.myserver.com/just_this_directory/ ?
i wasn't able to find any documentation related to this.

any advice appreciated.

redmond

-- 
Redmond Militante
Software Engineer / Medill School of Journalism
FreeBSD 5.4-STABLE #0: Wed Sep 7 15:00:27 CDT 2005 i386
12:15PM  up  1:54, 1 user, load averages: 0.24, 0.27, 0.22

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Can't access db with pgaccess

2005-09-09 Thread Chris St Denis
If pgaccess is a client on another computer you'll need to edit pg_hba.conf

This is better asked on a pgsql mailing list. 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of stan
Sent: Friday, September 09, 2005 12:09 PM
To: Free BSD Questions list
Subject: Can't access db with pgaccess

I'm install postgress V7 on a 5..4-STABLE machine. I;ve installed it from
ports, and I've added myself as a user, and created a database. I can
access this database using psql dbname and all works fine.

I can't seem to get pgaccess to connect at all. I;ve checked and sockstat
reports:

pgsqlpostgres   485   3  stream /tmp/.s.PGSQL.5432

What am I doing wrong?

-- 
U.S. Encouraged by Vietnam Vote - Officials Cite 83% Turnout Despite
Vietcong Terror 
- New York Times 9/3/1967
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: and the winner is...

2005-09-08 Thread Chris St Denis
a. I am hoping to see this fixed in 6.x
b. This I agree with. As a desktop client FreeBSD still needs work. 
c. sysutils/portaudit

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Scott W
Sent: Sunday, September 04, 2005 11:49 AM
To: [EMAIL PROTECTED]
Cc: freebsd-questions@freebsd.org
Subject: Re: and the winner is...

Mario Carugno wrote:
 I there, i was trying freebsd for a while, and comparing it against 
 debian/linux.
 The winner was Debian by far... Freebsd could be stable, but it is not 
 faster... and Debian is far much more 'usable'.
  Freebsd package installation is very laborious compared with Debian's apt

 system. I have to search in each CD, know dependences,...
  X configuration is hard too when the autodetected configuration doesn't 
 works...
  I think fbsd is good, but needs some user facilities.
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
[EMAIL PROTECTED]
 

Lame.  Care to actually _back up_ your statement with something substantial?

cvsup and ports is the best package management system I've seen yet in 
it generally 'just works right.'  That statement is made with 12 years 
of Linux experience, as well as Solaris and other *nixes.

For a server system, FreeBSD is really hard to beat.  The closest might 
be Gentoo, but their portage (based on BSD ports) system isn't as 
consistently stable as BSD ports (meaning things break more often).

As it's not a _great_ idea IMO to even have build tools (gcc and 
toolchain) on a production server, it's not a bad idea to have a 
seperate build host somewhere, but that applies equally to any system, 
and you also have the option to go with binary packages.

Let me know how the following goes for you with Deb or other Linux 
distro besides gentoo- install PHP or apache with _only_ the options 
that you want/need.  Oh rightyou can't, without compiling from 
source, at which point you've lost your 'package management.'  Oops?

Read the Handbook, try to get enough of a clue to understand it, use it 
for a month, and then come back with a statement you can back up. 
Otherwisepiss off.

The only 'real' gripes I've got with FreeBSD are:
a.  thread performance - from what I've seen, still lags behind Linux 
(mysql benchmarks show this to be true at leat for 5-STABLE).

b.  desktop BSD 'out of box experience'- mixed, as BSD is primarily a 
server OS, but with 'roll your own' capabilities...oh, and there are now 
two 'desktop BSD' type projects.  So not really a gripe, but can see 
someone complaining about it a bit, if they don't find the Dekstop BSD 
project.

c.  security patch notification system (may exist now?).  Yes, you can 
get emails from the security ML, but now quite the same as for example, 
'smpatch analyze' on Solaris 9/10.  This could be argued that's 
_exactly_ what rel-STABLE is, however, so again, not a real issue, 
although a user friendly (for people using as a desktop OS) tool would 
be of benefit.

Geeze, compared to my gripes against Linux and *nix distros. these are 
really pretty damned trivial.  If thread performance comes up to par 
with Linux, FreeBSD has a very good chance of becoming my choice for 
'personal *nix' (ie, my primary workstation, laptops, etc) over Gentoo.

Scott
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: php --with apache error log

2005-09-08 Thread Chris St Denis
Looks like you are mixing debug and non-debug builds of php.

Do a port update to make sure your makefile is clean.
Deinstall php and all of the modules. 
Reinstall php
Reinstall the modules.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Vizion
Sent: Wednesday, September 07, 2005 10:32 AM
To: Kevin Kinsey
Cc: [EMAIL PROTECTED]; freebsd-questions@freebsd.org
Subject: Re: php --with apache error log

On Wednesday 07 September 2005 08:54,  the author Kevin Kinsey contributed
to 
the dialogue on-
 Re: php --with apache error log: 

Vizion wrote:
I tried changing to :
extension_dir = //usr/local/lib/php/20041030
but that made no difference --still got the same error:
Unknown(0) : Warning - PHP Startup: Unable to load dynamic library
'/usr/local/lib/php/20041030-debug/pcre.so' - Cannot open
quot;/usr/local/lib/php/20041030-debug/pcre.soquot;
Unknown(0) : Warning - PHP Startup: Unable to load dynamic library
'/usr/local/lib/php/20041030-debug/xml.so' - Cannot open
quot;/usr/local/lib/php/20041030-debug/xml.soquot;

Puzzled

david

I suspect that a call to phpinfo() would reveal that you
built a debug build?  Never having done this myself, I
can't say exactly what you'd want to do to fix it; however,
an obvious kluge would be to create the directory
it seems to want to have, and copy the object files to it.

Kevin Kinsey
I am sure you are right -- maybe there is something odd in the Makefile.. I 
wonder if the debug build version of xml.so and pcre.so are identical?

Umph..

I will change the directories,as you suggest.. and see what happens - in the

meantime I will make a bug report

david
-- 
40 yrs navigating and computing in blue waters.
English Owner  Captain of British Registered 60' bluewater Ketch S/V
Taurus.
 Currently in San Diego, CA. Sailing bound for Europe via Panama Canal after

completing engineroom refit.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Odd SU output?

2005-09-08 Thread Chris St Denis
Which config file is this in? I didn't see any otp stuff in /etc/pam.d/

-Original Message-
From: Igor Robul [mailto:[EMAIL PROTECTED] 
Sent: Thursday, September 08, 2005 12:53 AM
To: Chris St Denis; freebsd-questions@freebsd.org
Subject: Re: Odd SU output?

Chris St Denis wrote:

While being away from work for a week, some odd output appeared on my su
comment.

 

%su
otp-md5 497 pe2119 ext
Password:
  

You have enable One Time Passwords (OTP) in your PAM configuration, so 
now you can use
regular root password or you can calculate answer (password) from this text.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: FreeBSD v6

2005-09-07 Thread Chris St Denis
http://www.osnews.com/story.php?news_id=10951
http://www.freebsd.org/releases/6.0R/todo.html


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Gerard Seibert
Sent: Tuesday, September 06, 2005 5:11 AM
To: freebsd-questions@freebsd.org
Subject: FreeBSD v6

I am attempting to find some information regarding the upcoming release
of version 6 of FreeBSD. I want to find out what the differences between
this version and version 5.x are. In addition, I wanted to see what, if
any new features are being included in this new release.

I have not been able to find a definitive listing in regards to this
release. Perhaps someone here can point me in the right direction.


-- 
Gerard E. Seibert
[EMAIL PROTECTED]


If you wish to learn the highest truths, begin with the alphabet.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Odd SU output?

2005-09-07 Thread Chris St Denis
While being away from work for a week, some odd output appeared on my su
comment.

 

%su
otp-md5 497 pe2119 ext
Password:

 

Has my server been rooted or something? Or did I (or somebody else) just
change some configuration variable?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: anonymous ssh forwarding

2005-08-25 Thread Chris St Denis
Something like this may be what you want.

http://www.postgresql.org/docs/current/interactive/ssh-tunnels.html

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Toomas Laasik
Sent: Wednesday, August 24, 2005 3:21 PM
To: Jonathan Glaschke; [EMAIL PROTECTED]
Subject: Re: anonymous ssh forwarding

 Hello,
 On Thu, Aug 25, 2005 at 12:35:24AM +0300, Toomas Laasik wrote:
  Hello,
  I have the following situation. Our company has a ssh server where users
can connect from only specified static ip addresses. Like I have at home an
ip address 1.2.3.4 and ssh server accepts connections only from it.
  Now I wan't to get access to that ssh server from places where I don't
have static ip.
  I already have at home a freebsd server running with simple
configutation. Is it possible to make some kind of tunnel or something so I
could connect to my home freebsd machine that connects to ssh server so that
ssh server 'thinks' that I'm connecting from home?
 
  Thank you in advance.
 
  Sorry for bad English
 
  Toomas
 
 Why don't you ssh into your home pc with static ip from your pc with
dynamic ip
 and then ssh from your home machine into your server?

Using just ssh is no a problem. The machine with dynamic IP has WinXP and
Putty on it. Setting remote command in Putty to ssh [EMAIL PROTECTED]
eliminates even the need to type it in in putty ssh console...
Anyway the problem comes when I want to use FileZilla to make SFTP
connection over SSH2 connection through home computer. I've tried Putty's
tunneling, but the other end of that tunnel is still my home computer even
tho my home computer is connected to www server with ssh.
So my approach is to find out how can I set something up on my home freebsd
machine so that connecting to some port on it, it connects to www server ssh
port.

Toomas

 
 Jonathan
 
  -
  ITV - Sinu lemmiksaated internetis!
  http://www.itv.ee
 =20
  ___
  freebsd-questions@freebsd.org mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to
[EMAIL PROTECTED]
 rg
 
 --=20
  | /   ASCII Ribbon   | Jonathan Glaschke - Lorenz-G=F6rtz-Stra=DFe 71,
  |  / Campaign Against | 41238 M=F6nchengladbach, Tel: 02166-265876
  |  XHTML In Mail   | Mobil: 0162-3390789, ICQ: 231021883
  | /  And News | http://jonathan-glaschke.de/
 

-
ITV - Sinu lemmiksaated internetis!
http://www.itv.ee

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Illegal access attempt - FreeBSD 5.4 Release - please advise

2005-08-24 Thread Chris St Denis
How can I easily auto deny after x failed attempts? Is this an sshd setting?
I could find it.

Is there something in ports that will firewall off somebody who is brute
forcing?

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Pat Maddox
Sent: Tuesday, August 23, 2005 9:27 PM
To: FreeBSD Questions
Subject: Re: Illegal access attempt - FreeBSD 5.4 Release - please advise

It's not that big of a deal...they didn't get in or anything.  If
you've got a server that's always connected to the internet, you'll
see people trying to break in all the time.  The more popular your
server, the more frequent the attempts.  This is just someone trying
to log in via SSH - so as long as you have good passwords on all your
accounts, and disable remote root login, you're fine.

You may consider denying access after X failed login attempts.


On 8/23/05, ro ro [EMAIL PROTECTED] wrote:
 Hi All,
 
 I was browsing through my log files and noticed that
 someone (or many people) is trying to gain illegal
 access to my server (see snippet from log files
 below).
 
 The below log file clearly indicates someone trying to
 hackaway at my personal server.
 
 I performed the following steps:
 
 nmap -v  210.0.142.153
 
 and noticed that this person/institution had port 80
 and 21 open.
 
 I visited their website and it appears to be someone
 from hongkong.
 http://www.chkpcc.edu.hk/
 
 HERE IS THEIR CONTACT INFORMATION AS IT APPEARS ON
 THEIR WEBSITE
 -
 Confucian Ho Kwok Pui Chun College 孔 教
 學 院 何 郭 佩 珍
 中 學
 Address 地址: Fu Shin Est., Taipo,
 N.T., HKSAR
 香港新界大埔富善村
 Tel 電話: 852-2666-5926
 Fax 傳真: 852-2660-7988
 E-mail 電郵: [EMAIL PROTECTED]
 -
 
 
 When I saw the logs for the first time. I took the
 following steps:
 1) AllowUsers in sshd contained only users that I
 wanted to have access to my ssh
 2) Created a decent rulest within ipfw that permitted
 incoming access to only two ports ssh and http
 
 I took the issue of creating a good firewall quite
 lightly and now I regret that decision.. now I have
 learnt... Can someone provide me with guidance on this
 issue and advise me on next steps to take action
 against such losers.
 
 Thanks
 RV
 
 Aug 23 08:19:03 free sshd[22519]: Illegal user lp from
 210.0.142.153
 Aug 23 08:19:06 free sshd[22521]: Illegal user admin
 from 210.0.142.153
 Aug 23 08:19:08 free sshd[22523]: Illegal user admin
 from 210.0.142.153
 Aug 23 08:19:10 free sshd[22525]: Illegal user admin
 from 210.0.142.153
 Aug 23 08:19:12 free sshd[22527]: Illegal user admin
 from 210.0.142.153
 Aug 23 08:19:15 free sshd[22529]: Illegal user admin
 from 210.0.142.153
 Aug 23 08:19:17 free sshd[22531]: Illegal user admin
 from 210.0.142.153
 Aug 23 08:19:19 free sshd[22533]: Illegal user admin
 from 210.0.142.153
 Aug 23 08:19:22 free sshd[22535]: User root not
 allowed because not listed in AllowUsers
 Aug 23 08:19:24 free sshd[22537]: User root not
 allowed because not listed in AllowUsers
 Aug 23 08:19:27 free sshd[22539]: User root not
 allowed because not listed in AllowUsers
 Aug 23 08:19:29 free sshd[22541]: User root not
 allowed because not listed in AllowUsers
 Aug 23 08:19:33 free sshd[22543]: User root not
 allowed because not listed in AllowUsers
 Aug 23 08:19:35 free sshd[22545]: User root not
 allowed because not listed in AllowUsers
 Aug 23 08:19:37 free sshd[22547]: Illegal user apache
 from 210.0.142.153
 Aug 23 08:19:40 free sshd[22549]: Illegal user dan
 from 210.0.142.153
 Aug 23 08:19:42 free sshd[22551]: Illegal user electra
 from 210.0.142.153
 Aug 23 08:19:44 free sshd[22553]: Illegal user student
 from 210.0.142.153
 Aug 23 08:19:47 free sshd[22555]: Illegal user school
 from 210.0.142.153
 Aug 23 08:19:49 free sshd[22557]: User mysql not
 allowed because not listed in AllowUsers
 
 
 Aug 11 20:16:10 free sshd[21585]: Illegal user test
 from 210.245.197.16
 Aug 11 20:16:12 free sshd[21587]: Illegal user guest
 from 210.245.197.16
 Aug 11 20:16:14 free sshd[21589]: Illegal user admin
 from 210.245.197.16
 Aug 11 20:16:16 free sshd[21591]: Illegal user admin
 from 210.245.197.16
 Aug 11 20:16:23 free sshd[21593]: Illegal user user
 from 210.245.197.16
 Aug 11 20:16:32 free sshd[21601]: Illegal user test
 from 210.245.197.16
 
 Aug 14 03:39:21 free sshd[32377]: Illegal user 1 from
 61.145.222.10
 Aug 14 03:39:26 free sshd[32379]: Illegal user a from
 61.145.222.10
 Aug 14 03:39:31 free sshd[32381]: Illegal user a from
 61.145.222.10
 Aug 14 03:39:38 free sshd[32383]: Illegal user abuse
 from 61.145.222.10
 Aug 14 10:47:49 free sshd[33623]: Illegal user admin
 from 64.222.146.197
 Aug 14 10:47:51 free sshd[33625]: Illegal user
 administrator from 64.222.146.197
 Aug 14 10:47:52 free sshd[33627]: Illegal user jack
 from 64.222.146.197
 Aug 14 10:47:53 free sshd[33629]: Illegal user marvin
 from 64.222.146.197
 Aug 14 10:47:58 free sshd[33631]: 

Corrupt entries in /var/log/messages?

2005-08-24 Thread Chris St Denis
Occasionally I get entries like this in my log. It looks like more than one
process is logging at the same time. Shouldn't syslogd be
thread/SMP/concurrency safe from this kind of thing?

Aug 24 05:29:44 sakura kernel: 66ppiidd  119942486 9( (hthttptdpd)),,
uiudi d 808:0 :e xeixtietde do no ns isginganla l 


In an unrelated note, I'm getting a few  *** POKED TIMER *** messages in
the syslog from named, anyone know what this is? I found a few questions
about in the archive, but no answers (telling somebody to search the archive
isn't any good when that's the only answer found)

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


  1   2   3   >