Re: What unix program for a check the kernel file?

2011-12-13 Thread Igor V. Ruzanov
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, 14 Dec 2011, Oleg simonoff wrote:

|
|Hi to users of UNIX!
|
|What unix program is available for a check of a configuration file of the
|kernel?
|
|I`ve got some trouble with configuration of my new kernel but i`d like to
|find my mistakes myself
|But if those mistakes will't be eliminated independently, i will write to you
|again.
|
Please read the handbook - great thing to become FreeBSD guru:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/index.html

9-th section: Configuring the FreeBSD Kernel


+---+
! CANMOS ISP Network!
+---+
! Best regards  !
! Igor V. Ruzanov, network operational staff!
! e-Mail: ig...@canmos.ru   !
+---+
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQFO6FdRbt6QiUlK9twRApn6AJwNwevR7J1uASBVf0/5C8EWwNls5QCgr0nU
xn6FF1QHSBWYDwbC1/s+a/g=
=HvC4
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re[2]: How to boot new kernel

2011-12-12 Thread Igor V. Ruzanov
On Mon, 12 Dec 2011, Коньков Евгений wrote:

|
|   HI, krad.
|
|   How I can figure out the correspondence of bios drive number and
|   freebsd numbering?
|
|   >
|
|   Have a look at boot.config file you should be able to do something
|   there
|
|   On Dec 11, 2011 8:57 PM, "Kon'kov Evgenij" <[1]kes-...@yandex.ru>
|   wrote:
|
|   Hi Freebsd-questions.
|
|   In system two disks now:
|
|   # kenv | grep dev
|
|   currdev="disk1s1a:"
|
|   loaddev="disk1s1a:"
|
|   loader_conf_files="/boot/device.hints /boot/loader.conf
|   /boot/loader.conf.local"
|
|   vfs.root.mountfrom="ufs:/dev/ad8s1a"
|
|   kern.devalias.ada0="ad4"
|
|   kern.devalias.ada1="ad8"
|
|   one was with installed FreeBSD (ad4) and second is empty (ad8)
|
|   I install new system to ad8 and add to (ad4) /boot/loader.conf next
|   line:
|
|   vfs.root.mountfrom="ufs:/dev/ad8s1a"
|
|   so next time I booted from second hdd.
|
|   But now I have problem.
|
|   How to boot kernel from second device instead of first one.
|
|   BIOS starts to run loader from first device (ad4) and kernel is booted
|
|   from it but all other is mounted from (ad8)
|
|   # df -h
|
|   Filesystem SizeUsed   Avail Capacity  Mounted on
|
|   /dev/ad8s1a  1G117M809M13%/
|
|   devfs  1.0k1.0k  0B   100%/dev
|
|   /dev/ad8s1e  1G267M660M29%/tmp
|
|   /dev/ad8s1f 39G 23G 13G64%/usr
|
|   /dev/ad8s1d5.8G3.9G1.5G72%/var
|
|   procfs 4.0k4.0k  0B   100%/proc
|
|   devfs  1.0k1.0k  0B   100%/var/named/dev
|
|   so in memory I have old kenel
|
|   uname -a shows that #0: Sat Nov 12 20:17:02 EET 2011
|
|   (I have compiled new kenel on 2011 12 03 )
|
|   but on disk all is new: kernel and world.
|
|   How to force to load kernel from second drive (without access to
|
|   machine directly)?
|
You can specify an alternative slice on the next boot:

boot0cfg -s XXX adYYY

where XXX - slice number, YYY - disk number


+---+
! CANMOS ISP Network!
+-----------+
! Best regards  !
! Igor V. Ruzanov, network operational staff!
! e-Mail: ig...@canmos.ru   !
+---+___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: problem with shell script

2011-01-13 Thread Igor V. Ruzanov
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, 13 Jan 2011, per...@pluto.rain.com wrote:

|David Scheidt  wrote:
|
|> ps ax | grep [s]lapd | wc -l
|>
|> The [] creates a one-character class that doesn't match the regex.
|
|Doesn't [s]lapd need to be quoted?  [] are special to (at least some)
|shells.
Which FreeBSD version do you use? If it above 4.x you could try the 
following:

`pgrep slapd | wc -l'

 or maybe

`pgrep slapd | xargs ps | wc -l'

 or something like this, it depends on your criteria

+---+
! CANMOS ISP Network!
+---+
! Best regards          !
! Igor V. Ruzanov, network operational staff!
! e-Mail: ig...@canmos.ru   !
+---+
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQFNLserbt6QiUlK9twRAvApAKCoIAozDT98VzRkvE3bjPg9Fb2OZwCeLCVj
l86YACf0Sd+Gu2vfujQNE/I=
=pls0
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Completely remove user from system

2010-12-23 Thread Igor V. Ruzanov
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, 23 Dec 2010, itpr0 wrote:

|Hi list,
|
|We are using postfix with system user authentication, I have to completely
|remove an user for the system so he couldn't auth to send e-mails.
|
|Some coworkers told to just remove the lines from /etc/passwd and
|/etc/master.passwd... I did that but the user still can authenticate.
|
|using "pw user show XXX" returns that still have a register from the user
|XXX but trying the "pw user del XXX" it says there is no such user..
|
|I tried rmuser and here is the return:
|
|# rmuser XXX
|Matching password entry:
|
|XXX:*:20887:1014::0:0:X X:/home/XXX:/nonexistent
|
|Is this the entry you wish to remove? y
|Remove user's home directory (/home/)? y
|Removing user (XXX): home passwdpw: user 'XXX' does not exist: No such file
|or directory
|
One of simpliest ways to remove user is the `vipw' command. vipw opens 
master.passwd file in vi editor. After removing nesessary string vipw 
rebuild user's database. After that your can just remove user's home 
directory and even say locate.updatedb if you don't want to see removed 
user via `locate' :)

+---+
! CANMOS ISP Network!
+-------+
! Best regards  !
! Igor V. Ruzanov, network operational staff!
! e-Mail: ig...@canmos.ru   !
+---+
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQFNE0bgbt6QiUlK9twRAjFEAJ9MHSy2UmmoGjSYyvgebD/eZqaqpACfWECI
cCXL5qFCI4CWMb/+kJGK+JU=
=Pp4z
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: linking against shared libraries not in default path

2010-11-29 Thread Igor V. Ruzanov
On Mon, 29 Nov 2010, Anton Shterenlikht wrote:

|I compiled some numerical libraries under my home
|directory, including static and shared libs. The
|shared lib is
|
|% ls ./src/libslatec.so.1
|./src/libslatec.so.1
|%
|
|Now I'd like to test shared libraries, so I do 
|
|% gfortran45 -o test01.x test01.o qc6a.o -L./src/ -lslatec
|% ./test01.x 
|/libexec/ld-elf.so.1: Shared object "libslatec.so.1" not found, required by 
"test01.x"
|%
|
|How can I tell the executable to look for a shared library
|in a specific directory? I tried setting LIBRARY_PATH, but
|it didn't help.
|
Ooops, sorry, you must give full path of shared object, *NOT* a file name:
ldconfig -m ./src in your test example.


+---+
! CANMOS ISP Network!
+---+
! Best regards          !
! Igor V. Ruzanov, network operational staff!
! e-Mail: ig...@canmos.ru   !
+---+
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: linking against shared libraries not in default path

2010-11-29 Thread Igor V. Ruzanov
On Mon, 29 Nov 2010, Anton Shterenlikht wrote:

|I compiled some numerical libraries under my home
|directory, including static and shared libs. The
|shared lib is
|
|% ls ./src/libslatec.so.1
|./src/libslatec.so.1
|%
|
|Now I'd like to test shared libraries, so I do 
|
|% gfortran45 -o test01.x test01.o qc6a.o -L./src/ -lslatec
|% ./test01.x 
|/libexec/ld-elf.so.1: Shared object "libslatec.so.1" not found, required by 
"test01.x"
|%
|
|How can I tell the executable to look for a shared library
|in a specific directory? I tried setting LIBRARY_PATH, but
|it didn't help.
|
|Perhaps I completely misunderstand how shared libraries work..
|
|Please advise
|
ldconfig -m ./src/libslatec.so.1 (in your example)

+---+
! CANMOS ISP Network!
+---+
! Best regards          !
! Igor V. Ruzanov, network operational staff!
! e-Mail: ig...@canmos.ru   !
+---+
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: EVFILT_VNODE doesn't scale to large directory trees?

2010-10-26 Thread Igor V. Ruzanov
On Mon, 25 Oct 2010, Kenton Varda wrote:

|On Mon, Oct 25, 2010 at 1:54 AM, Igor V. Ruzanov  wrote:
|
|> I thought so too but was not sure about his problem. With
|> kqueue()/kevent() we can monitor every open file descriptor. So how many
|> files are laid down in the directory tree, 100, 1000, 15000? In every
|> such way its possible to write or find already written daemon that
|> monitors every file in selected folder doing several jobs in separate
|> threads. There is might be little problem with receiving of *lots* events,
|> so we could create several pipes (for example) for setting up of
|> communication between deamon and system.
|> Note that we must remember to set proper meaning of kern.maxfiles sysctl
|> variable.
|>
|
|I worry that simply increasing the FD limits to meet my needs would have
|some negative effects, otherwise the limits would be much higher in the
|first place.  How much kernel memory does each open FD consume?  Probably
|most of that is wasted space, since I'm opening these FDs for no other
|purpose than to pass them to kqueue -- I never read or write them.  But it
|sounds like you're saying that there is no alternative (other than polling,
|which would obviously be a lot worse), so I guess I'll live with it.
|
|Well, one other idea:  Is there a way to simply monitor *all* I/O by all
|processes owned by the current user?  I could then filter the events down to
|the directory I'm interested in.  Not the ideal solution, but it would scale
|to a source tree of infinite size (since the machine can only be accessing a
|finite number of those files at once).  It seems likely that this has been
|implemented somewhere due to the obvious system monitoring applications, but
|I'm not quite sure where to start looking.
|
As a weak solution - is to install `lsof' on your system and do
grepping of the command output periodically to see what the files 
are opened by process(es) with a certain their owner. But this method not 
very good since we must collect any system event in real time way that is 
implemented in kqueue. Another way is to poll events with FAM mechanism 
that comes from SGI IRIX. Try to research if any solutions to use FAM 
under FreeBSD and what the methods of events monitoring could be used in 
FAM together with your project.


+---+
! CANMOS ISP Network!
+-------+
! Best regards  !
! Igor V. Ruzanov, network operational staff!
! e-Mail: ig...@canmos.ru   !
+---+
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: EVFILT_VNODE doesn't scale to large directory trees?

2010-10-25 Thread Igor V. Ruzanov
On Mon, 25 Oct 2010, Erik Trulsson wrote:

|On Mon, Oct 25, 2010 at 10:48:58AM +0400, Igor V. Ruzanov wrote:
|> On Sun, 24 Oct 2010, Kenton Varda wrote:
|> 
|> |That doesn't answer my question.  I'm not even using make.  I could write a
|> |few thousand words describing exactly what I'm trying to do and why it does,
|> |in fact, make sense, but it's really beside the point.  I just want to know
|> |if there is any scalable way to monitor a very large directory tree for
|> |changes.  Is there?
|> |
|> Dig `kqueue' - its the native FreeBSD's events polling/notification 
|> mechanism.
|
|Since the OP mentioned using EVFILT_VNODE I would assume he is already
|using kqueue but is not satisfied with it.
|
I thought so too but was not sure about his problem. With 
kqueue()/kevent() we can monitor every open file descriptor. So how many 
files are laid down in the directory tree, 100, 1000, 15000? In every 
such way its possible to write or find already written daemon that 
monitors every file in selected folder doing several jobs in separate 
threads. There is might be little problem with receiving of *lots* events, 
so we could create several pipes (for example) for setting up of 
communication between deamon and system.
Note that we must remember to set proper meaning of kern.maxfiles sysctl 
variable.

+---+
! CANMOS ISP Network!
+-------+
! Best regards  !
! Igor V. Ruzanov, network operational staff!
! e-Mail: ig...@canmos.ru   !
+---+
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: EVFILT_VNODE doesn't scale to large directory trees?

2010-10-25 Thread Igor V. Ruzanov
On Sun, 24 Oct 2010, Kenton Varda wrote:

|That doesn't answer my question.  I'm not even using make.  I could write a
|few thousand words describing exactly what I'm trying to do and why it does,
|in fact, make sense, but it's really beside the point.  I just want to know
|if there is any scalable way to monitor a very large directory tree for
|changes.  Is there?
|
Dig `kqueue' - its the native FreeBSD's events polling/notification 
mechanism.



+---+
! CANMOS ISP Network!
+---+
! Best regards          !
! Igor V. Ruzanov, network operational staff!
! e-Mail: ig...@canmos.ru   !
+---+
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: FreeBSD equivalent of Microsoft DFS

2010-08-10 Thread Igor V. Ruzanov
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Mon, 9 Aug 2010, Ed Flecko wrote:

|Is there a FreeBSD equivalent to Microsoft DFS, i.e., software that
|will replicate delta level file changes of network shares among
|multiple servers in real time?
|
|Would that be rsync with just a frequently scheduled cron task?
|
Kqueue - most advanced and cool thing implemented as kernel mechanism of 
events processing. With that you could write your own file auditing 
system.


+---+
! CANMOS ISP Network!
+---+
! Best regards  !
! Igor V. Ruzanov, network operational staff!
! e-Mail: ig...@canmos.ru   !
+---+
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQFMYPg2bt6QiUlK9twRAhfUAJ4j7dmbXPYaGKGy5G351PWKSMS1iACgxJCP
lAoUhxv9xutJLS+extS+wBQ=
=DHlr
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: shell redirection

2010-02-02 Thread Igor V. Ruzanov
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Tue, 2 Feb 2010, Stefan Miklosovic wrote:

|hi
|
|I have a shell script and I would like to do something like this
|
|$ ./script.sh < somefile
|
You could do kind of the following things:

example.sh:
#!/bin/sh

read new < /dev/stdin
echo $new

After your script was created, you could run it with some redirected 
text file:

./example.sh < file.txt

Don't forget about permissions of your script file to enable script 
execution. Also you might use while/for-expressions if content of the text 
file is multiple strings rather than just a big one.

+---+
! CANMOS ISP Network!
+---+
! Best regards      !
! Igor V. Ruzanov, network operational staff!
! e-Mail: ig...@canmos.ru   !
+---+
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQFLaD6Pbt6QiUlK9twRAhbCAJ4iXYyu5SZqc2uGQsg2tkzsIub+iACgv5l0
0RrvgPbvlfKc6HYm06MnWRk=
=4wLL
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Upgrade 7.0 to 7.2 installworld failed

2009-12-24 Thread Igor V. Ruzanov
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, 24 Dec 2009, Colin wrote:

|No, I didn't see that in any of the upgrade guides that I was following. After
|looking it up I can see mention of it in a rebuilding world doc.
|
|This is my make.conf:
|
|SUP=/usr/local/bin/cvsup
|SUPFLAGS=   -g -L 2
|SUPHOST=cvsup.FreeBSD.org
|SUPFILE=/root/standard-supfile
|PORTSSUPFILE=   /root/ports-supfile
|
These things are for cvsup utility setup and they are not invoked to point 
on options responsible for specific system building. Try to add the 
following lines to /etc/make.conf:

CFLAGS= -O -pipe
NO_FORTRAN= true
NO_OBJC=true
NO_X=   true
NO_GAMES=true
NO_PROFILE=  true

and re-make buildworld, then make installworld.


+---+
! CANMOS ISP Network!
+---+
! Best regards  !
! Igor V. Ruzanov, network operational staff!
! e-Mail: ig...@canmos.ru   !
+---+
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQFLNF1Tbt6QiUlK9twRArvpAKC5hoEkBr2CMVOvvr/Bv7mhw2TaUQCgidcf
lnvA0RDPKNmU/rSUkOzAs8c=
=HGMu
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Upgrade 7.0 to 7.2 installworld failed

2009-12-24 Thread Igor V. Ruzanov
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, 24 Dec 2009, Colin wrote:

|Hi folks,
|I have started trying to upgrade my 7.0 to 7.2 and it all seemed to be going
|well until I got to installworld.
|
|First off I did a cvsup for src-all from cvsup.ie.freebsd.org with the tag
|RELENG_7_2
|
|I have then done:
|
|cd /usr/src
|make buildworld
,|make kernel-toolchain
|make -DALWAYS_CHECK_MAKE buildkernel KERNCONF=TED
|make -DALWAYS_CHECK_MAKE installkernel KERNCONF=TED
|shutdown -r now
|mergemaster -p
|make installworld
|
|installworld goes through Making hierarchy fine then gets to Installing
|everything and goes:
|
|
|>>> Installing everything
|--
|cd /usr/src; make -f Makefile.inc1 install
|===> share/info (install)
|===> lib (install)
|===> lib/csu/i386-elf (install)
|cc -O2 -fno-strict-aliasing -pipe  -I/usr/src/lib/csu/i386-elf/../common
|-I/usr/src/lib/csu/i386-elf/../../libc/include -Wsystem-headers -Wall
|-Wno-format-y2k -W -Wno-unused-parameter -Wstrict-prototypes
|-Wmissing-prototypes -Wpointer-arith -Wreturn-type -Wcast-qual -Wwrite-strings
|-Wswitch -Wshadow -Wcast-align -Wunused-parameter -Wchar-subscripts -Winline
|-Wnested-externs -Wredundant-decls -Wno-pointer-sign -c
|/usr/src/lib/csu/i386-elf/crt1.c
|/usr/src/lib/csu/i386-elf/crt1.c:33:20: error: stdlib.h: No such file or
|directory
|In file included from /usr/src/lib/csu/i386-elf/crt1.c:35:
|/usr/src/lib/csu/i386-elf/../../libc/include/libc_private.h:184:24: error:
|sys/_types.h: No such file or directory
|

Did you edit /etc/make.conf before make buildworld? Its usefull to set 
NO_PROFILE to "true" to avoid compilation of profiled userland libraries.


+---+
! CANMOS ISP Network!
+---+
! Best regards          !
! Igor V. Ruzanov, network operational staff!
! e-Mail: ig...@canmos.ru   !
+---+
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQFLM5HVbt6QiUlK9twRAimEAJ4/3Jmg15g/AE2M+8w/NSLKpI7QAwCdFK8B
ERNxC5kdl4oMiPTAxXZWyZ0=
=M2WT
-END PGP SIGNATURE-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Help with ipfw please

2009-12-22 Thread Igor V. Ruzanov
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Tue, 22 Dec 2009, Igor V. Ruzanov wrote:

|-BEGIN PGP SIGNED MESSAGE-
|Hash: SHA1
|
|On Tue, 22 Dec 2009, Коньков Евгений wrote:
|
||Здравствуйте, Tiago.
||
||Вы писали 22 декабря 2009 г., 14:59:50:
||
||T> Im trying to add a basic rule in my ipfw.
||T> My server has 2 network address, one for external access (x.x.x.x) and 
other
||T> for the local network(y.y.y.y).
||T> The mysql is binded to the local network, but I would like to allow my home
||T> computer (z.z.z.z) to connect to the mysql by the external ip.
||T> so basicaly im trying to do is: if request comes from z.z.z.z to
||T> y.y.y.y:3306 redirect to x.x.x.x:3306
||T> I tryed some configuration but I ended locked outside the machine...
||
||You need -redirect_port
||man natd:
|
|Also it could be done at kernel-level with ipnat. Simple rule doing 
|something like DNAT looks like (/etc/ipnat.conf):
|
|rdr  z.z.z.z port 3306 -> x.x.x.x port 3306 tcp

Oh sorry! z.z.z.z necessary to replace with x.x.x.x from your task 
(external IP), and x.x.x.x by y.y.y.y from your task (private IP).

+---+
! CANMOS ISP Network!
+---+
! Best regards          !
! Igor V. Ruzanov, network operational staff!
! e-Mail: ig...@canmos.ru   !
+---+
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQFLMPz8bt6QiUlK9twRApFzAJ9OPj1QP/Asxen3aprWPFtTaxT6AwCfcjZc
C42ztGPXSqJRP3LeZ9zK/Ok=
=ZZvR
-END PGP SIGNATURE-___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Help with ipfw please

2009-12-22 Thread Igor V. Ruzanov
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Tue, 22 Dec 2009, Коньков Евгений wrote:

|Здравствуйте, Tiago.
|
|Вы писали 22 декабря 2009 г., 14:59:50:
|
|T> Im trying to add a basic rule in my ipfw.
|T> My server has 2 network address, one for external access (x.x.x.x) and other
|T> for the local network(y.y.y.y).
|T> The mysql is binded to the local network, but I would like to allow my home
|T> computer (z.z.z.z) to connect to the mysql by the external ip.
|T> so basicaly im trying to do is: if request comes from z.z.z.z to
|T> y.y.y.y:3306 redirect to x.x.x.x:3306
|T> I tryed some configuration but I ended locked outside the machine...
|
|You need -redirect_port
|man natd:

Also it could be done at kernel-level with ipnat. Simple rule doing 
something like DNAT looks like (/etc/ipnat.conf):

rdr  z.z.z.z port 3306 -> x.x.x.x port 3306 tcp

After when /etc/ipnat.conf is prepared, say ipnat -f /etc/ipnat.conf and 
see active sessions with ipnat -l.

Good luck.

+---+
! CANMOS ISP Network!
+---+
! Best regards          !
! Igor V. Ruzanov, network operational staff!
! e-Mail: ig...@canmos.ru   !
+---+
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQFLMPnnbt6QiUlK9twRAi2SAJ9FW9gdsHFBM6ZVrZhuIrPur7jdXACff/7z
qe3vBcSjtevHsD5wKaJRVSg=
=BIyk
-END PGP SIGNATURE-___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: ifdown/ifup under FreeBSD?

2009-12-17 Thread Igor V. Ruzanov
|Under RedHat Linux I can configure an interface, routes and so on in
|/etc/sysconfig/network-scripts/ifcfg-eth1,
|/etc/sysconfig/network-scripts/routes-eth1 then simply run:
|
|$ ifup eth1
|
|and it will set all the routes/netconfig/aliases I just configured.
|
|Is there something similar in FreeBSD?
|
|I tried configuring aliases in /etc/rc.conf and running:
|
|$ /etc/rc.d/netif restart
|
|but that just ended in errors that the route was already configured
|and so on. Sure I could do all the work manually with ifconfig and
|route but that's not my question.
|
Under FreeBSD (as well as under Linux) you could use Zebra (Zebra/Quagga 
projects) to configure any interfaces/routing specific things.

+---+
! CANMOS ISP Network!
+---+
! Best regards  !
! Igor V. Ruzanov, network operational staff!
! e-Mail: ig...@canmos.ru   !
+---+
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: FreeBSD 8.0 retires into itself

2009-12-03 Thread Igor V. Ruzanov
On Thu, 3 Dec 2009, Derek Ragona wrote:

|At 04:28 AM 12/3/2009, Igor V. Ruzanov wrote:
|> Hello!
|> 
|> I have updated FreeBSD 8.0 sources via cvsup and compiled system. uname -a
|> shows:
|> 
|> FreeBSD localhost 8.0-RELEASE FreeBSD 8.0-RELEASE #2: Mon Nov 30 20:15:12 MSD
|> 2009  r...@localhost:/usr/src/sys/i386/compile/HOME-PAE  i386
|> 
|> Machine has 3 physical interfaces:
|> - em0 (PCI/Intel PWLA 8390 MT)
|> - em1 (PCI/Intel PWLA 8390 MT)
|> - fxp0 (PCI/Intel EtherExpress PRO/100)
|> 
|> and 2 VLANs: vlan317 and vlan320.
|> 
|> Also there is one interface built in motherboard:
|> - ale0 (PCI-E/Atheros AR8121)
|> 
|> One physical interface (em0) is in trunk mode (802.1Q) to configure these two
|> VLANs (vlan317 and vlan320) interfaces. Machine acts as BGP router. It has 3
|> uplinks:
|> - vlan317
|> - vlan320
|> - fxp0
|> 
|> and one backbone interface:
|> - em1.
|> 
|> Next, i recompiled all userland and made all necessary configurations after
|> which the machine became as production BGP router installed in server room.
|> So issue looks like the following:
|> 
|> After 20-30 minutes of stable work, the system starts to "retire into
|> itself": any user processes (bgpd, zebra, named) don't respond, For example a
|> can't telnet to bgpd control terminal, telnet just dies showing:
|> Trying 127.0.0.1...
|> Connected to localhost.
|> Escape character is '^]'
|> 
|> I even tried to login into system from local console. But when i pressed
|> Enter after username was typed, the console just hang. Power button also
|> doesn't respond (in usual case pressing on Power button gives the machine is
|> going to power off). One interesting thing: after system was booted, top
|> command shows:
|> 
|> system eats about 28-30% of CPU time
|> interrupts eat about only 6-7% of CPU time
|> all user processes eat less than 0-1% of CPU time
|> 
|> On another working machine (same BGP router, but system is FreeBSD 7.0-STABLE
|> p4) the picture seems to be different:
|> 
|> system etas 9-10% of CPU time
|> interrupts eat 15-16% of CPU time
|> 
|> So my question is the REASONS that cause such system behavior. I read
|> UPDATING, so kernel in FreeBSD 8.0 RELEASE was largely reworked, in
|> particular - SMPng in order to remove all non-MPSAFE driver's locks (netperf
|> project). Are there new specific kernel config options to get better
|> perfomance of network subsystem? Or should i set some sysctl variables?
|> 
|> My hardware:
|> - Motherboard: ASUS P5P43TD (with built in Gigabit LAN Atheros AR8121)
|> - Core 2 Quad CPU
|> - 4G RAM (2x2048)
|> 
|> kernel compiled with PAE support, ULE-scheduler, with PREEMPTION option.
|> If you need whole kernel config, please let me know, i will post it ASAP.
|> 
|> 

|You need to check your network setups:
|ifconfig -a
|
|You can really only have one NIC on a single network.  With multiple NICs if
|they are on the same network, you will have arp issues causing routing issues.
|You can easily check the arp table before and after you see this behavior
|doing:
|arp -a
|after a reboot, then after the system becomes unresponsive after 30-40 minutes.
|
|Multiple NICs are necessary if you are using this system as a firewall or
|packet filter.
|
|To narrow down your problem you may want to disable any NICs that are not
|necessary and see if the problem persists.
|

Thank you for reply, Derek!

I have different non-overlapped subnets on used network interfaces. 
Actually, my machine acts as a border rather than just a router. And it 
needs several network interface cards (NICs) - one of them looks in my 
network (my Autonomous System with my internal routing), and another ones 
look to different ISPs with their own ASs. It gives possibility to make a 
choice of more cheap route to any Internet resource.

By the way, when i tested just installed system under traffic load 
generated with iperf tool, the system worked fine during several days. 
Configuration was the same except only one NIC was under traffic load. And 
similar tests with each NIC installed in my machine yielded the same good 
results.


+---+
! CANMOS ISP Network!
+---+
! Best regards  !
! Igor V. Ruzanov, network operational staff!
! e-Mail: ig...@canmos.ru   !
+---+
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


FreeBSD 8.0 retires into itself

2009-12-03 Thread Igor V. Ruzanov

Hello!

I have updated FreeBSD 8.0 sources via cvsup and compiled system. uname -a 
shows:


FreeBSD localhost 8.0-RELEASE FreeBSD 8.0-RELEASE #2: Mon Nov 30 20:15:12 
MSD 2009  r...@localhost:/usr/src/sys/i386/compile/HOME-PAE  i386


Machine has 3 physical interfaces:
- em0 (PCI/Intel PWLA 8390 MT)
- em1 (PCI/Intel PWLA 8390 MT)
- fxp0 (PCI/Intel EtherExpress PRO/100)

and 2 VLANs: vlan317 and vlan320.

Also there is one interface built in motherboard:
- ale0 (PCI-E/Atheros AR8121)

One physical interface (em0) is in trunk mode (802.1Q) to configure these 
two VLANs (vlan317 and vlan320) interfaces. Machine acts as BGP router. It 
has 3 uplinks:

- vlan317
- vlan320
- fxp0

and one backbone interface:
- em1.

Next, i recompiled all userland and made all necessary configurations 
after which the machine became as production BGP router installed in 
server room. So issue looks like the following:


After 20-30 minutes of stable work, the system starts to "retire into 
itself": any user processes (bgpd, zebra, named) don't respond, For 
example a can't telnet to bgpd control terminal, telnet just dies showing:

Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'

I even tried to login into system from local console. But when i pressed 
Enter after username was typed, the console just hang. Power button also 
doesn't respond (in usual case pressing on Power button gives the machine 
is going to power off). One interesting thing: after system was booted, 
top command shows:


system eats about 28-30% of CPU time
interrupts eat about only 6-7% of CPU time
all user processes eat less than 0-1% of CPU time

On another working machine (same BGP router, but system is FreeBSD 
7.0-STABLE p4) the picture seems to be different:


system etas 9-10% of CPU time
interrupts eat 15-16% of CPU time

So my question is the REASONS that cause such system behavior. I read 
UPDATING, so kernel in FreeBSD 8.0 RELEASE was largely reworked, in 
particular - SMPng in order to remove all non-MPSAFE driver's locks 
(netperf project). Are there new specific kernel config options to get 
better perfomance of network subsystem? Or should i set some sysctl 
variables?


My hardware:
- Motherboard: ASUS P5P43TD (with built in Gigabit LAN Atheros AR8121)
- Core 2 Quad CPU
- 4G RAM (2x2048)

kernel compiled with PAE support, ULE-scheduler, with PREEMPTION option.
If you need whole kernel config, please let me know, i will post it ASAP.


Thanks in advance!

+---+
! CANMOS ISP Network!
+---+
! Best regards      !
! Igor V. Ruzanov, network operational staff!
! e-Mail: ig...@canmos.ru   !
+---+
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


NeedHelp

2007-03-02 Thread Igor V. Ruzanov

Hello!
I compiled mbmon ver. 2.05 (console version) under FreeBSD 6.2 RELEASE. But i 
have the following problem when try to observe values about fan-speeds, t's and 
voltages:


mail:/usr/ports/sysutils/mbmon$ mbmon -d -A 1
ioctl(smb0:open): No such file or directory
SMBus[ALi M1533/1543C] found, but No HWM available on it!!
Summary of Detection:
 * No monitors found.
InitMBInfo: Bad file descriptor

I think there is no kernel driver for ALi M1533/1543C device support, 
because devfs cannot create /dev/smb0. Could you please help me where i 
can get the driver for 6.2 RELEASE?

This chip is integrated into ASUS P5RD1-VM motherboard.

Thank you a lot!
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


NeedHelp

2007-02-16 Thread Igor V. Ruzanov
 support
  options IPFIREWALL_VERBOSE_LIMIT=100#limit verbosity
  options IPFIREWALL_DEFAULT_TO_ACCEPT#allow everything by
  default

  #optionsIPFW2
  options TCP_DROP_SYNFIN



Thank you!!

+---+
! CANMOS ISP Network!
+---+
! Best regards      !
! Igor V. Ruzanov, network operational staff!
! e-Mail: [EMAIL PROTECTED]   !
+---+
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


NeedHelp

2007-02-01 Thread Igor V. Ruzanov

Hello!
I have installed FreeBSD 6.1-RELEASE onto server machine with 
ASUS P5RD1-VM mainboard. There is network interface card integrated 
(nic) into the mainboard and this nic based on ULi-M526X chipset that is 
not determined under FreeBSD. Is there some workaround with ULi-M526X nic 
to make this nic operable? Or maybe i have to upgarde system to FreeBSD 
6.2-RELEASE?


There are several system configurations that could be helpfull for you:
1) Kernel options with respect to FastEthernet support:
===
# PCI Ethernet NICs that use the common MII bus controller code.
# NOTE: Be sure to keep the 'device miibus' line in order to use these NICs!
device  miibus  # MII bus support
device  bce # Broadcom BCM5706/BCM5708 Gigabit Ethernet
device  bfe # Broadcom BCM440x 10/100 Ethernet
device  bge # Broadcom BCM570xx Gigabit Ethernet
device  dc  # DEC/Intel 21143 and various workalikes
device  fxp # Intel EtherExpress PRO/100B (82557, 82558)
device  lge # Level 1 LXT1001 gigabit Ethernet
device  nge # NatSemi DP83820 gigabit Ethernet
device  nve # nVidia nForce MCP on-board Ethernet Networking
device  pcn # AMD Am79C97x PCI 10/100(precedence over 'lnc')
device  re  # RealTek 8139C+/8169/8169S/8110S
device  rl  # RealTek 8129/8139
device  sf  # Adaptec AIC-6915 (``Starfire'')
device  sis # Silicon Integrated Systems SiS 900/SiS 7016
device  sk  # SysKonnect SK-984x & SK-982x gigabit Ethernet
device  ste # Sundance ST201 (D-Link DFE-550TX)
device  ti  # Alteon Networks Tigon I/II gigabit Ethernet
device  tl  # Texas Instruments ThunderLAN
device  tx  # SMC EtherPower II (83c170 ``EPIC'')
device  vge # VIA VT612x gigabit Ethernet
device  vr  # VIA Rhine, Rhine II
device  wb  # Winbond W89C840F
device  xl  # 3Com 3c90x (``Boomerang'', ``Cyclone'')

2) PCI channels configurations:
===
[EMAIL PROTECTED]:0:0: class=0x06 card=0x819a1043 chip=0x5a331002 rev=0x01 
hdr=0x00
vendor   = 'ATI Technologies Inc'
class= bridge
subclass = HOST-PCI
[EMAIL PROTECTED]:1:0: class=0x060400 card=0x00b0 chip=0x5a3f1002 rev=0x00 
hdr=0x01
vendor   = 'ATI Technologies Inc'
class= bridge
subclass = PCI-PCI
[EMAIL PROTECTED]:25:0: class=0x060400 card=0x00c0 chip=0x524910b9 rev=0x00 
hdr=0x01
vendor   = 'Acer Labs Incorporated (ALi)'
device   = 'M5249 HyperTransport to PCI Bridge'
class= bridge
subclass = PCI-PCI
[EMAIL PROTECTED]:27:0: class=0x02 card=0x816a1043 chip=0x526310b9 rev=0x50 
hdr=0x00
vendor   = 'Acer Labs Incorporated (ALi)'
class= network
subclass = ethernet
[EMAIL PROTECTED]:30:0: class=0x060100 card=0x80561043 chip=0x157310b9 rev=0x31 
hdr=0x00
vendor   = 'Acer Labs Incorporated (ALi)'
class= bridge
subclass = PCI-ISA
[EMAIL PROTECTED]:30:1: class=0x068000 card=0x80561043 chip=0x710110b9 rev=0x00 
hdr=0x00
vendor   = 'Acer Labs Incorporated (ALi)'
device   = 'ALI M7101 Power Management Controller'
class= bridge
[EMAIL PROTECTED]:31:0: class=0x01018a card=0x80561043 chip=0x522910b9 
rev=0xc7 hdr=0x00
vendor   = 'Acer Labs Incorporated (ALi)'
device   = 'M1543 Southbridge EIDE Controller'
class= mass storage
subclass = ATA
[EMAIL PROTECTED]:5:0: class=0x03 card=0x819a1043 chip=0x5a611002 rev=0x00 
hdr=0x00
vendor   = 'ATI Technologies Inc'
class= display
subclass = VGA
[EMAIL PROTECTED]:19:0: class=0x02 card=0x952111ab chip=0x432011ab rev=0x12 
hdr=0x00
vendor   = 'Marvell Semiconductor (Was: Galileo Technology Ltd)'
device   = '88E8001/8003/8010 Gigabit Ethernet Controller with Integrated 
PHY (copper)'
class= network
subclass = ethernet
[EMAIL PROTECTED]:20:0: class=0x02 card=0x00098086 chip=0x12298086 rev=0x05 
hdr=0x00
vendor   = 'Intel Corporation'
device   = '82550/1/7/8/9 EtherExpress PRO/100(B) Ethernet Adapter'
class= network
subclass = ethernet


PS I tried to `kldload' to loade a module that i got from my friends so 
ndis0 interface was created. But when i assigned network to ndis0, my 
system was crashed.


Thank you for your help!

+

Need Help

2005-06-08 Thread Igor V. Ruzanov
Hello!
I work under FreeBSD 5.3-RELEASE. Everything goes OK, i can attach any
external devices via PCMCIA- and USB-interfaces. But there is one problem
with plugging of Apple iPod Photo via USB-interface into my notebook (no
FireWare-interface is installed, so i can't connect iPod via FireWare
using sbp-driver): When i'm connecting the device to USB-port during the kernel
is loaded, my system doesn't create /dev/da0 for the attached umass0-storage.
But if i booting the system with iPod is allready connected to USB-port,
my FreeBSD successfully creating /dev/da0 for attached umass0-storage and
recognize that as direct access SCSI-device. Are there any possibilies of
solving of this problem? What kernel source-files can i patch to work my
FreeBSD with iPod properly?

When i try `camcontrol rescan all' in the case of hot plugging, the
process is just going to hang up. And when i'm dettaching iPod-device at
all, my system is crashing because of page fault.

Thank you!

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Need help

2004-03-12 Thread Igor V. Ruzanov
Hello!
I've installed Alsaplayer under FreeBSD-4.7 RELEASE. All features are
supported without any problem exerpt from the following one: CDDA
functionality cannot be supported because of linux_ioctl.c file where the
request LINUX_CDROMREADAUDIO is being commented. Could you please tell me
some ideas to add digital ripping by Linux applications?

error messages generated by Alsaplayer:

CDDA: read raw ioctl failed at lba 0 length 4
CDDA: invalid argument
CDDA: read raw ioctl failed at lba 593821696 length 4
CDDA: invalid argument
ampty string

...and so on, until the interrupt sequince Ctrl+C will be sent.

In /var/log/messages the string is appearing:
/kernel: linux: 'ioctl' fd=6, cmd=0x530e ('S',14) not implemented

Below i provide specification of my system:
AlsaPlayer version: 0.99.75
OS version: FreeBSD-4.7 RELEASE
XFree86 version:4.2.1
Emulated Linux kernel version:  2.4.2
GLibc version:  2.2.4 (i tried to use Debian GLibc-2.3.2
package)
CD-ROM device:  /dev/acd0c

Thank you!

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"