Re: Network Monitor?

2007-08-12 Thread Kelly D. Grills
On Sun, Aug 12, 2007 at 06:54:57PM -0500, Jack Barnett wrote:
> 
> Is there a way to monitor what traffic is coming in/out of my network?
> For example: so me how much bandwidth emails are taking, how much http 
> traffic (both in and outgoing), etc.
> I'd like a report broken down by "traffic type" like in windows.
> 
> FreeBSD-6.2 x86
>

MRTG is in the ports collection, /usr/ports/net-mgmt/mrtg
  
[EMAIL PROTECTED]/usr/ports/net-mgmt/mrtg $ cat pkg-descr
The Multi Router Traffic Grapher (MRTG) is a tool to monitor the
traffic
load on network-links. MRTG generates HTML pages containing PNG
images which
provide a LIVE visual representation of this traffic. Check

WWW: http://oss.oetiker.ch/mrtg/

for an example. MRTG is based on Perl and C and works under UNIX and
Windows
NT.

MRTG is being successfully used on many sites around the net.
Check the MRTG-Site-Map, which is at:
http://ee-staff.ethz.ch/~oetiker/webtools/mrtg/users.html

-- 
Kelly D. Grills
[EMAIL PROTECTED]




pgpxE9EkKJxdG.pgp
Description: PGP signature


Re: sample cds

2007-03-26 Thread Kelly D. Grills
On Tue, Mar 27, 2007 at 12:25:15AM +0200, stefan broos wrote:
> 
> I'm organising a linux/opensource day in my school. Is it possible to 
> get some saple freeBSD cds for those who want to try it?
> 
> Stefan

As others have noted, you can download and burn the ISO's.
Another option is a live CD, such as FreeSBIE.
See http://www.freesbie.org for all the details.

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgp5SxgCeRQqy.pgp
Description: PGP signature


Re: Have screwed up my longin and password

2007-03-14 Thread Kelly D. Grills
On Wed, Mar 14, 2007 at 03:21:04PM -0500, Roger Scow wrote:
> 
> I am totally new to FreeBSD, and have installed it and Gnome2/X11.   
> Somewhere in the process I have either corrupted or lost my password  
> and user name access.  When I try to log into Gnome, either as root  
> or as username, it is a no go.
> 
> I know that I set up myself as a user, and set a root password when I  
> was installing.
> 
> What do I do now?  Can I restart from the install CD and go back into  
> Sysinstall?
> 

You're not the first, see:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/faq/admin.html#FORGOT-ROOT-PW


-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpBmILTvTbu0.pgp
Description: PGP signature


Re: DHCP Server V3.0.5 No BPF under chroot. Works normally otherwise.

2007-03-06 Thread Kelly D. Grills
On Tue, Mar 06, 2007 at 07:03:35PM -0600, Martin McCormick wrote:
> 
>   I found some cook-book instructions for running dhcpd in
> a chroot environment.  The article is 4 years old and appears to
> be set up for FreeBSD5x, but it isn't far off for FreeBSD6.2
> which is what I need dhcpd to run on.
> 

I run isc-dhcp3-server-3.0.5 from ports, started from /etc/rc.conf with the
following options:

dhcpd_enable="YES"  # dhcpd enabled?
dhcpd_flags="-q"# command option(s)
dhcpd_conf="/usr/local/etc/dhcpd.conf"  # configuration file
dhcpd_ifaces="" # ethernet interface(s)
dhcpd_withumask="022"   # file creation mask

dhcpd_chuser_enable="YES"   # runs w/o privileges?
dhcpd_withuser="dhcpd"  # user name to run as
dhcpd_withgroup="dhcpd" # group name to run as
dhcpd_chroot_enable="YES"   # runs chrooted?
dhcpd_devfs_enable="YES"# use devfs if available?
dhcpd_rootdir="/var/db/dhcpd"   # directory to run in
dhcpd_includedir="" # directory with config-

Here's the full pkg-message:

[EMAIL PROTECTED]/usr/ports/net/isc-dhcp3-server $ make display-message

  To setup dhcpd, you may have to copy /usr/local/etc/dhcpd.conf.sample
  to /usr/local/etc/dhcpd.conf for editing.

  This port installs dhcp daemon, but don't invokes dhcpd by default. If
  you want to invoke dhcpd at startup, put these lines into /etc/rc.conf.

dhcpd_enable="YES"  # dhcpd enabled?
dhcpd_flags="-q"# command option(s)
dhcpd_conf="/usr/local/etc/dhcpd.conf"  # configuration file
dhcpd_ifaces="" # ethernet interface(s)
dhcpd_withumask="022"   # file creation mask

  If compiled with paranoia support (the default), the following lines
  are also supported:

dhcpd_chuser_enable="YES"   # runs w/o privileges?
dhcpd_withuser="dhcpd"  # user name to run as
dhcpd_withgroup="dhcpd" # group name to run as
dhcpd_chroot_enable="YES"   # runs chrooted?
dhcpd_devfs_enable="YES"  # use devfs if available?
dhcpd_makedev_enable="YES"# use MAKEDEV instead?
dhcpd_rootdir="/var/db/dhcpd"   # directory to run in
dhcpd_includedir=""   # directory with config-
  files to include
dhcpd_flags="-early_chroot" # needs full root

  WARNING: -early_chroot requires a jail(8) like environment to work.

  WARNING: dhcpd_devfs_enable and dhcpd_makedev_enable are mutually
   exclusive
   dhcpd_makedev_enable make NO sense on FreeBSD 5.x and up!

  If compiled with jail support (the default), the following lines are
  also supported (-early_chroot and dhcpd_chroot_enable=YES are implied):

dhcpd_jail_enable="YES" # runs imprisoned?
dhcpd_hostname="" # jail hostname
dhcpd_ipaddress=""  # jail ip address

  WARNING: dhcpd_rootdir needs to point to a full jail(8) environment.

  WARNING: never edit the chrooted or jailed dhcpd.conf file but
  /usr/local/etc/dhcpd.conf instead which is always copied where
  needed upon startup.

  WARNING: /usr/local/etc/rc.isc-dhcpd.conf is obsolete.  rc.conf like
  variables are still read there but should be moved /etc/rc.conf or
  /etc/rc.conf.d/dhcpd instead.  Also, the dhcpd_options variable must
  be renamed dhcpd_flags if any.


-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpuJ4kh8oKPm.pgp
Description: PGP signature


Re: Fwd: IPF (ftp - pkg_add) help requested

2007-03-04 Thread Kelly D. Grills
On Fri, Mar 02, 2007 at 09:12:31AM -0500, Don Munyak wrote:
> 
> How do I set|view env for root?..., specifically FTP_PASSIVE_MODE=YES

See su(1), specifically the -l option. See the man page for whatever
shell you run as root.

> OT... Kelley, btw...Baxter is cool :) I had a Pekingese once. For
> Halloween, I shaved off all her hair except for a 2" mohawk
> head-2-tail. I'll have to find the picture to send you some day.

Yeah, he's a good pup, my daughter dressed him up for the superbowl.
I bet your peek wasn't real happy with you. 

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpnMiIhhf1x9.pgp
Description: PGP signature


Re: Fwd: IPF (ftp - pkg_add) help requested

2007-03-01 Thread Kelly D. Grills
On Thu, Mar 01, 2007 at 04:10:11PM -0500, Don Munyak wrote:
> 
> My server was opening an additional session using ports > 1024, which
> I was not initially allowing.  ipf was blocking outbound due to this
> rule. This is a known issue with ftp client sessions using active mode
> when behind a firewall.
> 

As I hinted at in my original response, If you'd rather keep your
firewall rules tighter, pkg_add(1) says:

Note: If you wish to use passive mode ftp in such transfers, set
the variable FTP_PASSIVE_MODE to some value in your environment.

Otherwise, the more standard ACTIVE mode may be used.  If pkg_add
consistently fails to fetch a package from a site known to work,
it may be because you have a firewall that demands the usage of
passive mode ftp.

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpzSYEkjLW0T.pgp
Description: PGP signature


Re: pkg_add problems

2007-02-28 Thread Kelly D. Grills
On Wed, Feb 28, 2007 at 12:02:30PM +0100, Wojciech Puchar wrote:
> 
> there is no such package bash. there's only bash-someversionofbashport

Au contraire:

[EMAIL PROTECTED]/ $ pkg_add -r bash
Fetching
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.2-release/Latest/bash.tbz...
Done. pkg_add: package 'bash-3.1.17' or its older version already installed

[EMAIL PROTECTED]/ $ uname -v
FreeBSD 6.2-RELEASE #0: Sun Jan 28 15:04:56 CST 2007
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/SRV2

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpn99V5gUFSo.pgp
Description: PGP signature


Re: pkg_add problems

2007-02-27 Thread Kelly D. Grills
On Tue, Feb 27, 2007 at 02:26:30PM -0500, Don Munyak wrote:
> 
> I am having trouble using pkg_add -r . I keep getting
> the following error.
> ---
> p0069# pkg_add -r bash
> Error: FTP Unable to get
> ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.1-release/Latest/bash.tbz:
> Network is unreachable
> pkg_add: unable to fetch
> 'ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.1-release/Latest/bash.tbz'
> by URL
> p0069#
> -
>
> I don't know if this has anything to do with it, but
> - I have rebuilt the kernel successfully
> -
> p0069# uname -a
> FreeBSD p0069.bm.local 6.1-RELEASE-p12 FreeBSD 6.1-RELEASE-p12 #0: Thu
> Feb  8 13:55:26 EST 2007
> [EMAIL PROTECTED]:/usr/obj/usr/src/sys/WEBSERVER  i386
> 
> - And there is no ports tree installed.. ie /usr/ports does not exist.
> - I can ping ftp.freebsd.org
> - I can also ftp>open ftp.freebsd.org
> 
> Any thoughts on trouble shooting this would be appreciated.
> 

Perhaps verbose output (-v argument) might yield a clue: pkg_add -rv some_pkg

Are you behind a firewall? You might try using passive mode ftp. See
pkg_add(1) 

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpnYSzxg8GLO.pgp
Description: PGP signature


Re: Can't install win32-codecs

2007-02-23 Thread Kelly D. Grills
On Fri, Feb 23, 2007 at 06:32:15PM -0800, Dr. Jennifer Nussbaum wrote:
> 
> Im trying to get a new install going, and it wont let me install
> win32-codecs (and therefor mplayer and xine and everything i
> need to watch multimedia). Its marked as "forbidden: remote
> code execution". The URL it gives just shows why it can be
> dangerous.
> 
> Is there any workaround, or a way to force this? Im willing to
> take the chance and i never view quicktime websites anyway,
> and its hard not to watch movies on this new machine!
> 

make NO_IGNORE=yes

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpGOW0nq4pw1.pgp
Description: PGP signature


Re: User Monitoring

2007-02-06 Thread Kelly D. Grills
On Tue, Feb 06, 2007 at 06:31:40PM -0600, Kelly D. Grills wrote:
> 
> On Tue, Feb 06, 2007 at 02:09:55PM +0800, David Schulz wrote:
> > 
> > Without a doubt i will get the one or the other trying to do  
> > something nasty to the Box, so my question is how to keep track of  
> > what Users are doing? Using process accounting as described http:// 
> > www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/security- 
> > accounting.html in the handbook?
> > 
> > Can you share some easy to implement tricks to keep the worst from  
> > happening to my Machine?
> 
> See the man page for WATCH(8),  watch -- snoop on another tty line
> 

And be sure to let your users know that you are keeping track of them.

Sorry for the multi-reply, fingers got ahead of brain.

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpuoDabjsSAC.pgp
Description: PGP signature


Re: User Monitoring

2007-02-06 Thread Kelly D. Grills
On Tue, Feb 06, 2007 at 02:09:55PM +0800, David Schulz wrote:
> 
> Without a doubt i will get the one or the other trying to do  
> something nasty to the Box, so my question is how to keep track of  
> what Users are doing? Using process accounting as described http:// 
> www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/security- 
> accounting.html in the handbook?
> 
> Can you share some easy to implement tricks to keep the worst from  
> happening to my Machine?

See the man page for WATCH(8),  watch -- snoop on another tty line

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpaXr6MzmShj.pgp
Description: PGP signature


Re: going back in time with the ports tree

2007-01-14 Thread Kelly D. Grills
On Sun, Jan 14, 2007 at 04:48:33PM -0600, Jonathan Horne wrote:

> im trying to figure out how to go back in time on my ports tree.  im sure ive 
> seen instructions on how to do this before, but for the life of me, i cant 
> find the doc now.  i would like to get a copy of ports from right before 
> php-5.2.0 was committed.
> 
> can anyone point me in the right direction?

sysutils/portdowngrade

http://www.freebsd.org/cgi/url.cgi?ports/sysutils/portdowngrade/pkg-descr

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpivcmt5hM7N.pgp
Description: PGP signature


Re: cap_mkdb & login.conf.db

2006-11-13 Thread Kelly D. Grills
On Mon, Nov 13, 2006 at 03:01:17PM -0800, T. Fields wrote:
> 
> So sorry to bother. But I have been looking through the extensive 
> documentation provided with freeBSD and can't find the answer, so I thought 
> I would ask for help.
> 
> I am trying to set the path variable upon boot-up. I have altered the 
> /etc/login.conf  as well as the global /etc/profile but the path is being 
> set via /etc/login.conf.db so my question.
> 
> When the system is installed and the installation scripts are run what is 
> the command line for
> 
> cap_mkdb ?
> 
> I would like to alter /etc/login.conf.db but I don't know which files other 
> than /etc/login.conf to include in the invocation of the command and I 
> don't want to muck the works.

See section 13.7 of the handbook:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/users-limiting.html

Also the man pages for login.conf and cap_mkdb:
LOGIN.CONF(5), CAP_MKDB(1)

The short answer is: cap_mkdb /etc/login.conf

-- 
Kelly D. Grills
[EMAIL PROTECTED]




pgpTalV5jxnPh.pgp
Description: PGP signature


Re: downgrade from php5.2 to php5.1

2006-11-08 Thread Kelly D. Grills
On Wed, Nov 08, 2006 at 03:36:51PM +, Marwan Sultan wrote:
> 
>   Im Sure many around has few problems with php5.2
>   Well simple question!
>   After i updated my ports tree, and installed php5 from ports,
>   now I want to downgrade from php5.2 to php5.1 how to do this
>   with new port installed?
>   any speciall configuration that downgrade a certain port?

Have a look at /usr/ports/sysutils/portdowngrade

-- 
Kelly D. Grills
[EMAIL PROTECTED]




pgpU23ESydm0f.pgp
Description: PGP signature


Re: denying a user access from the internet

2006-11-07 Thread Kelly D. Grills
On Tue, Nov 07, 2006 at 03:54:00PM -0500, Dave wrote:
> 
> Hello,
>I've got a FreeBSD box that i have a user on who needs special console 
> access. I've given him access to what is required, but i do not want him to 
> be able to log in from the internet via ssh, telnet, or even a serial 
> terminal if possible. Basically if this user isn't right in front of the 
> box i don't want him accessing it. Is it possible to lock a user out to 
> this extent, i know with ssh i can do an AllowGroup option and not put him 
> in the group that would work?
> Thanks.
> Dave.

I've never personally used it, but /etc/login.access looks to be
what you're looking for. The man page is login.access(5).

-- 
Kelly D. Grills
[EMAIL PROTECTED]




pgphvOckDInJt.pgp
Description: PGP signature


Re: default umask for Apache

2006-07-09 Thread Kelly D. Grills
On Sun, Jul 09, 2006 at 01:19:47PM -0700, jekillen wrote:
> 
> Hello;
> I've not had to do this on a Unix system before. But now I have Apache 
> running as nobody and
> have php scripts creating and writing to directories. The files it 
> creates have the default mask
> rw-r-r and I want to change it to rw-rw-- so I can remove the files and 
> dirs with group write permissions
> via ftp.

Could you not chmod the files / directories via your php script? See:
http://php.net/manual/en/function.chmod.php

> 
> How do you change the default mask for a user like Apache on a Unix 
> system?
> 

I believe you can set this via envvars

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgppItvhPmZUY.pgp
Description: PGP signature


Re: force lease renewal from dhcpd

2006-05-01 Thread Kelly D. Grills
On Mon, May 01, 2006 at 09:45:57AM -0400, fbsd wrote:
> 
> Is there some way to force all leases under dhcpd to perform lease
> renewal routine?
>

Shorten the lease time? See dhcpd.conf(5), max-lease-time & default-lease-time 
parameters.

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpQfepZ9Dxqm.pgp
Description: PGP signature


Re: Mail service principles: can I have the second mailbox

2006-03-27 Thread Kelly D. Grills
On Mon, Mar 27, 2006 at 09:28:55AM +0300, User Elisej wrote:
 
> Yes, sir, I will provide any information you need.
> 

I could be a maam, you never can tell ;=)

> I want to have two mailboxes with two addresses (for one account) 
> on my computer. These different mailboxes I mean to use for different sources 
> of incoming mail. So I need two real mailboxes, not two aliases 
> for one mailbox. Then I can give my different address to different senders.
> 
> Although, I can make all mail going to one address and then filter incoming
> mail, I think it is a wrong way, because of superfluous action.
> 

Well, there goes my plan. I'd think an alias along with a procmail recipe
to filter into separate mbox's would be a simple and effective solution.
Not sure what you mean by "superfluous action".

> One mailbox I have since account creation. Its address is account name.
> The sendmail sends a mail to this address to /var/mail/account_name.
> How to make the second mailbox?
> 
> I have installed FreeBSD 6.0 and Sendmail 8.13.5.
> 

I run Qmail. Hopefully someone with Sendmail knowledge will chime in
and provide the assistance you need.

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpElFgGNNqe6.pgp
Description: PGP signature


Re: Tightening up ssh

2006-03-26 Thread Kelly D. Grills
On Sun, Mar 26, 2006 at 11:52:11AM -0800, Graham North wrote:
> 
> Does this mean that there is a way to run ssh, but only allow certain users 
> to use it.   My default seems to have been that if someone has a username 
> and password they can access ssh (except root as "PermitRootLogin no" is 
> the default).   The ssh port seems to be the most heavily attacked one on 
> my machine and so I recently took to blocking port 22.   My preference 
> would be to enable it to only one user and give them an obscure username 
> and strong password.  Root is not currently allowed access by default in 
> the setup.
> 
> Is this the approach that you alluded to above?   Can you point me to some 
> information or provide some tips.
> Thanks,  Graham/
> 

See SSHD_CONFIG(5), specifically the AllowUsers keyword.

-- 
Kelly D. Grills
[EMAIL PROTECTED]


pgpMMo0VvT01U.pgp
Description: PGP signature


Re: Mail service principles: can I have the second mailbox

2006-03-26 Thread Kelly D. Grills
On Sun, Mar 26, 2006 at 04:19:21PM +0300, User Elisej wrote:
> 
> Can a user have two mailboxes (and two addresses, of course)?
> 

Yes.

Perhaps you could provide a bit more information?

http://www.freebsd.org/doc/en_US.ISO8859-1/articles/freebsd-questions/x114.html

-- 
Kelly D. Grills
[EMAIL PROTECTED]


pgpIlXprWCpmI.pgp
Description: PGP signature


Re: Apache

2006-03-06 Thread Kelly D. Grills
On Mon, Mar 06, 2006 at 10:09:30PM -0200, Pgold wrote:
> 
> Performing sanity check on apache22 configuration:
> Syntax OK
> Starting apache22.
> 
> Then, apache will run for a moment, as I can see using ps -ax | grep httpd.
> 
> But, in a question of a second or two it isn't running.
> 
> What else can I do?
> 

Checking the error log would be a good place to start.

In order to find your log:
grep ErrorLog /path/to/httpd.conf

You may get better help on the Apache list:
http://httpd.apache.org/userslist.html

-- 
Kelly D. Grills
[EMAIL PROTECTED]





pgpNoxZ2S6VUJ.pgp
Description: PGP signature


Re: How to figure out who shutdown box

2006-03-04 Thread Kelly D. Grills
On Sat, Mar 04, 2006 at 11:42:49AM -0600, Kelly D. Grills wrote:
> 
> Where are you logging security messages? I believe the default is to
> /var/log/security

Sorry, meant to say auth

> 
> Have a look at /etc/syslog.conf and syslog.conf(5)
> 
> You should see messages such as this in your security log:

Again, auth

> Mar  1 15:21:38 srv1 shutdown: reboot by kdgrills:
 
-- 
Kelly D. Grills
[EMAIL PROTECTED]




pgprHNOHkXDZf.pgp
Description: PGP signature


Re: How to figure out who shutdown box

2006-03-04 Thread Kelly D. Grills
On Sat, Mar 04, 2006 at 10:24:17AM -0500, Jon Poland wrote:
> 
> Hi,
>   I operate a colo box running FreeBSD 6.0-SECURITY.  Yesterday the box
> shutdown and powered off.  I didn't execute shutdown or halt, and I'm the
> only user who can.  Here's what the logs tell me:
> 
> /var/log/console.log:
> Mar  3 11:24:29 kmart kernel: Shutting down daemon processes:
> 
> /var/log/messages:
> Mar  3 11:24:38 kmart syslogd: exiting on signal 15
> 
> last: (the important lines)
> reboot   ~ Fri Mar  3 13:10
> shutdown ~ Fri Mar  3 11:24
> 
> I don't see anything in any of the logs like "rebooted by X", etc.
> 
> I'm not exactly sure how this can happen and looking for ideas.
> 

Where are you logging security messages? I believe the default is to
/var/log/security

Have a look at /etc/syslog.conf and syslog.conf(5)

You should see messages such as this in your security log:
Mar  1 15:21:38 srv1 shutdown: reboot by kdgrills:

-- 
Kelly D. Grills
[EMAIL PROTECTED]





pgpTjj9CYyMxk.pgp
Description: PGP signature


cvsup6.us.freebsd.org / /sysutils/fastest_cvsup

2006-01-21 Thread Kelly D. Grills

Greetings,

Recently there was a thread regarding cvsup6.us.freebsd.org
accepting connections, and offering no content, which breaks
fastest_cvsup.

I've done a little hacking on fastest_cvsup version 0.2.9
to enable verification of the desired collections existence.

Please see attached patch

--
Kelly D. Grills
[EMAIL PROTECTED]

*** old/fastest_cvsup   Sat Jan 21 21:12:05 2006
--- new/fastest_cvsup   Sat Jan 21 21:52:31 2006
***
*** 8,13 
--- 8,34 
  
#-#
  #
  # Changes:
+ # 0.2.9.1 - [EMAIL PROTECTED], Jan, 2006:
+ #   added a -v command line argument to enable verification of the
+ #   collections existence on the server. We create a dummy cvsup
+ #   configuration with a refuse file which refuses everything,
+ #   in order to check the server. If the server is accepting
+ #   connections but doesn't carry our collection we'll get an error,
+ #   and can discard the server. This has been the case with
+ #   cvsup6.us.freebsd.org for a while now:
+ #
+ #   Connecting to cvsup6.us.freebsd.org
+ #   Connected to cvsup6.us.freebsd.org
+ #   Server software version: SNAP_16_1h
+ #   Negotiating file attribute support
+ #   Exchanging collection information
+ #   Server message: Collection "ports-all" release "cvs" is not 
available here
+ #   Establishing multiplexed-mode data connection
+ #   Running
+ #   Skipping collection ports-all/cvs
+ #   Shutting down connection to server
+ #   Finished successfully
+ #
  # 0.2.9  - added 'us' country code for USA hosts and 'tld' for top-level
  #  domain machines (can be in any country)
  # 0.2.8  - fixed the progress meter, timestamped %FREEBSD_SERVERS
***
*** 71,76 
--- 92,119 
 # in the online Handbook? (only root can do this)
  
  
#-#
+ # [EMAIL PROTECTED], Variables for verification
+ 
#-#
+ 
+ # User Configurable Variables (you can change these):
+ # Set either ports or src, not both
+ 
+ my $CVSUP_CMD = "/usr/local/bin/cvsup -g -L 2";  # cvsup command line
+ my $CVSUP_BASE = "/tmp/fastest_cvsup";   # directory for our dummy 
cvsup configuration
+ 
+ my $COLLECTION = "ports-all";# check for the ports 
collection
+ my $PREFIX = "/ports";   # ports would go here, cvsup 
won't run without it
+ my $TAG = ".";   # tag for ports-* collection
+ 
+ #my $COLLECTION = "src-all";  # check for the source 
collection
+ #my $PREFIX = "/src"; # source would go here, 
cvsup won't run without it
+ #my $TAG = "RELENG_6_0";  # tag for release branch
+ 
+ 
#-#
+ # End [EMAIL PROTECTED] modifications
+ 
#-#
+ 
+ 
#-#
  # Other variables
  
  # How many FreeBSD CVSup servers has each country got? (well, not strictly
***
*** 179,184 
--- 222,228 
  
  
#-#
  # Usage() sub
+ # [EMAIL PROTECTED], added -v option
  
  sub Usage {
my $error = shift;
***
*** 189,194 
--- 233,239 
  " -q   quiet mode, only outputs fastest server\n",
  " -Q   very quiet mode, no progress meter\n",
  " -r   uses remote server list from FreeBSD 
Handbook\n",
+ " -v   verifies existence of the collection on 
server\n",
  " -c aa,bb,cc  queries servers in countries aa,bb,cc\n",
  "tld   queries servers in the top level domain\n",
  "local queries servers set as local in the script\n",
***
*** 201,209 
  # get user supplied options
  
  # we need the ':' to store the actual values of the -c switch
  
  my %opt = ();
! getopts("hrqQc:", \%opt);
  
  # if no args given, or help page requested
  
--- 246,255 
  # get user supplied options
  
  # we need the ':' to store the actual values of the -c switch
+ # [EMAIL PROTECTED], added -v option
  
  my %opt = ();
! getopts("hrqQvc:", \%opt);
  
  # if no args given, or help page requested
  
*

Re: NFS connection dropping

2005-10-17 Thread Kelly D. Grills
On Mon, Oct 17, 2005 at 01:53:25AM -0700, Alex Teslik wrote:
> 
> All power-saving features are disabled on this box as well - it is a server. I
> then run rsync on the FBSD box to backup a local disk to the mounted nfs disk.
> Everything works great for about 5-10 minutes, and then the rsync freezes and
> issues the message:
> 
> nfs server 192.168.4.200:/Volumes/BackupDrive: not responding

Just a stab in the dark, see section 24.3.5 of the handbook:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-nfs.html

The -r / -w options cured my NFS problems.

-- 
Kelly D. Grills
[EMAIL PROTECTED]


pgpIfiFbnfk2u.pgp
Description: PGP signature


Re: Setting up routes correctly for FBSD box to access WAN

2005-09-18 Thread Kelly D. Grills
On Sun, Sep 18, 2005 at 11:24:36AM -0700, Garrett Cooper wrote:

> So my question is, how do I properly set the value for gateway  
> for the FBSD machine or use the route command to create a static  
> route for all IP values not 192.168.1.0/20?

You need set the default router in /etc/rc.conf :

defaultrouter="NO"  # Set to default gateway (or NO).

See rc.conf(5)

-- 
Kelly D. Grills
[EMAIL PROTECTED]


pgpIadPkkeq3j.pgp
Description: PGP signature


Re: Command to trace a route?

2005-08-30 Thread Kelly D. Grills
On Fri, Aug 26, 2005 at 04:50:43PM -0500, Efren Bravo wrote:
> Hi, 
>  
>  What's the name of the command to trace a route to a host, on windows 
> is tracert. 
>  
>  Thanks 
>  

As others have pointed out it's traceroute.
apropos may help the next time you're looking for a command:

$ apropos route | grep trace
traceroute(8)- print the route packets take to network host
traceroute6(8)   - print the route IPv6 packets will take to a network 
node

The you can:

$ man 8 traceroute

-- 
Kelly D. Grills
[EMAIL PROTECTED]


pgpe3M6e5adta.pgp
Description: PGP signature


Re: Unstable NFS mount from shared Solaris filesystem?

2005-07-13 Thread Kelly D. Grills
On Wed, Jul 13, 2005 at 10:33:15AM -0400, Louis LeBlanc wrote:
> 
> I know this has been asked before, but I can't find the answer through
> searches.  I don't remember if this was a FreeBSD or a Solaris related
> issue, either, so I'm sorry of I'm getting too far OT.
> 
> I'm trying to mount an NFS share from a Solaris 10 (x86) system to a
> FreeBSD (5.3-RELEASE-p4) system.  For some reason, working in the NFS
> filesystem on the FreeBSD system meets with annoyingly frequent
> lockups of the terminal, particularly when editing files or executing
> df or du.
> 
> If there's a configuration somewhere that fixes this, I can't find it.
> 
> My /etc/fstab entry on the FreeBSD box is:
> sol:/export/home  /sol/home  nfs  rw,noauto,bg,soft 0 0
> 
> /etc/dfs/dfstab on the Solaris box contains:
> share  -F nfs  -o rw  -d "home dirs"  /export/home
> 
> and /etc/dfs/sharetab contains:
> /export/home-   nfs rw  home dirs
> 
> I don't think I'm missing anything, but I'm sure NFS isn't supposed to
> be this unstable either.
> 
> Any suggestions would be welcome.

See FAQ 12.12 and section 23.3.5 of the handbook.
The -r=1024 parameter solved my problems.

-- 
Kelly D. Grills
[EMAIL PROTECTED]



pgpNH9IXRR8U5.pgp
Description: PGP signature


Re: Dynamic Hosting Recommendation

2005-05-28 Thread Kelly D. Grills
On Sat, May 28, 2005 at 08:33:29PM -0400, Gerard Seibert wrote:
> 
> My cable company wants $25. a month just for a static IP address. 
> Personally, I think that is ridiculous.
> 
> I have been looking for a solution. One I found was TZO, 
> < http://www.tzo.com >. I was wondering if anyone had any experience with 
> them?
> 
> If someone can recommend another service, I would be glad to look into it.

I've been very satisfied with http://zoneedit.com for several years now.

-- 
Kelly D. Grills
[EMAIL PROTECTED]


pgpKUTUj20hWw.pgp
Description: PGP signature


Re: NFS freeze

2005-05-12 Thread Kelly D. Grills
On Fri, May 13, 2005 at 02:52:52AM +0200, Pietro Cerutti wrote:
> 
> Kelly D. Grills wrote:
> >
> >Have a look at section 23.3.5 of the handbook. -r=1024 cured my
> >problems.
> >
> 
> Thank you, this solves the problem when mounting manually.
> What if I used amd to automatically mount the NFS share?
> I didn't find how to set mount specific options in amd.
> 

Well, I've no experience with amd. I took a quick look at amd.conf(5),
the "selectors_on_default" parameter looks like it may be relevant.

-- 
Kelly D. Grills
[EMAIL PROTECTED]


pgpCijlvHkuza.pgp
Description: PGP signature


Re: NFS freeze

2005-05-12 Thread Kelly D. Grills
On Thu, May 12, 2005 at 09:21:39PM +0200, Pietro Cerutti wrote:

> I have a problem with a NFS exports: the client freezes while transfering 
> "large amount" of data.



Have a look at section 23.3.5 of the handbook. -r=1024 cured my
problems.

-- 
Kelly D. Grills
[EMAIL PROTECTED]


pgpaKQeWryObu.pgp
Description: PGP signature


Re: Syncing 3 Freebsd servers' accounts Question

2005-01-27 Thread Kelly D. Grills
On Thu, Jan 27, 2005 at 02:23:53PM -0500, Jason Lieurance wrote:
> 
> I have 3 freebsd servers(4.7,4.9,5.3) and would like to have 1 set of 
> user/group
> accounts instead of 3. I don't know very much about NIS or LDAP which come up 
> when I
> researched the topic. So what is the easiest, cheapest(free), and best way to
> accomplish this???
> 

NIS works well on my home network. As for easiest / best, you'll
have to evaluate your particular needs. Some links to NIS docs:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-nis.html
yp(8)
ypserv(8)

-- 
Kelly D. Grills
[EMAIL PROTECTED]


pgpT4V44yrjz6.pgp
Description: PGP signature