Re: Client Authentication

[Len Conrad]

At 11:22 PM 3/23/2013, you wrote:
>I am not sure this is the best place to ask this, but I didn't see any other 
>maillists that seemed more appropriate.
>
>Basically, my outgoing mail server is being systematically attacked to try 
>passwords looking for one that works.

brute force attacks are easily blocked with pf's connection rate-limiting.  
Because our mail users are not world travellers, we use PF to block sending IPs 
by country. 


Any IP that TCP connects x times in y minutes to your mail server gets blocked 
for z hours.

Cracked passwords on our mail users seem to be stolen by infections or phished 
rather than obtained by brute force.

Our sender rate-limiting has three levels

Our outbound server (postfix + postfwd) has per-sender rate limiting, which has 
totally stopped the really high volume password cracks.  

We have 3 levels of rate limiting.

1. 2000 msgs limit for every sender.  We chose 2000 by identifying a handful of 
legit habitual senders of up to 1500 msgs, who are whitelisted from 
rate-limiting for the following levels.

2. 700 msgs limit for senders who habitually send up to 500 msgs, who are 
whitelisted from the following limit.

3  50 msgs limit for all senders who are not whitelisted above.

Rate limiting causes the msgs to be held, not discarded or rejected, with an 
alert msg to the mail admin, who then inspects the held msgs for releasing or 
deleting.

All the cert and PIN stuff appears to be theoretical suggestions not based on 
experience, since while effective, it would be a practical nightmare of 
training and maintenance.

Len



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

py-sqlalchemy install fails

[Len Conrad]

fbsd 9.0

py 2.7.3

cd /usr/ports/databases/py-sqlalchemy

make

ends with:

creating build/bdist.freebsd-9.0-RELEASE-i386/egg/EGG-INFO
copying lib/SQLAlchemy.egg-info/PKG-INFO -> 
build/bdist.freebsd-9.0-RELEASE-i386/egg/EGG-INFO
copying lib/SQLAlchemy.egg-info/SOURCES.txt -> 
build/bdist.freebsd-9.0-RELEASE-i386/egg/EGG-INFO
copying lib/SQLAlchemy.egg-info/dependency_links.txt -> 
build/bdist.freebsd-9.0-RELEASE-i386/egg/EGG-INFO
copying lib/SQLAlchemy.egg-info/not-zip-safe -> 
build/bdist.freebsd-9.0-RELEASE-i386/egg/EGG-INFO
copying lib/SQLAlchemy.egg-info/top_level.txt -> 
build/bdist.freebsd-9.0-RELEASE-i386/egg/EGG-INFO
creating dist
creating 'dist/SQLAlchemy-0.7.8-py2.7.egg' and adding 
'build/bdist.freebsd-9.0-RELEASE-i386/egg' to it
removing 'build/bdist.freebsd-9.0-RELEASE-i386/egg' (and everything under it)
***
WARNING: The C extension could not be compiled, speedups are not enabled.
Plain-Python build succeeded.
***


make install

...

building '_mysql' extension
cc -DNDEBUG -O2 -pipe -fno-strict-aliasing -O2 -pipe -fno-strict-aliasing -fPIC 
-Dversion_info=(1,2,3,'final',0) -D__version__=1.2.3 -I/usr/local/include/mysql 
-I/usr/local/include/python2.7 -c _mysql.c -o 
temp.freebsd-9.0-RELEASE-i386-2.7/_mysql.o -pipe -fno-strict-aliasing -g 
-DMY_PTHREAD_FASTMUTEX=1
In file included from pymemcompat.h:10,
 from _mysql.c:29:
/usr/local/include/python2.7/Python.h:166:17: error: pth.h: No such file or 
directory
In file included from _mysql.c:36:
/usr/local/include/mysql/my_config.h:422:1: warning: "HAVE_WCSCOLL" redefined
In file included from /usr/local/include/python2.7/Python.h:8,
 from pymemcompat.h:10,
 from _mysql.c:29:
/usr/local/include/python2.7/pyconfig.h:890:1: warning: this is the location of 
the previous definition
error: command 'cc' failed with exit status 1
*** Error code 1

Stop in /usr/ports/databases/py-MySQLdb.
*** Error code 1

Stop in /usr/ports/databases/py-MySQLdb.
*** Error code 1

Stop in /usr/ports/databases/py-sqlalchemy.
*** Error code 1

Stop in /usr/ports/databases/py-sqlalchemy.

thanks
Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Problem with r-o access in jail

[Len Conrad]

Want a nullfs filesystem to be read-only for tech people to search-only maillog 
files.

host machine's files:

/var/log/mx1/maillog* files

the maillog files are all 644 and r bit is set all along the path


using ezjail

jail root is /var/jails

jail name is fixit

mkdir -p /var/jails/fixit/mx1

fixit/mx1 dir has 644 and r bit is set all along the path

mount_nullfs -o ro /var/log/mx1 /var/jails/fixit/mx1


"ezjail-admin console fixit"  as fixit jail root user


I add a user fixit:fixit


ssh logon to fixit jail's ip as  user fixit

ll /mx1

gives nothing but:

ls: maillog.45.bz2: Permission denied
ls: maillog.46.bz2: Permission denied
ls: maillog.47.bz2: Permission denied
ls: maillog.48.bz2: Permission denied
ls: maillog.49.bz2: Permission denied
ls: maillog.5.bz2: Permission denied
ls: maillog.50.bz2: Permission denied
ls: maillog.51.bz2: Permission denied



ezjail-admin console fixit 

...shows the  /mx1/maillog* files all to be 644

If move the jail fixit user from group fixit to group wheel, user fixit has 
access to /mx1/maillog* files.

suggestions?

thanks,
Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

can a jail have link to outside of the jail?

[Len Conrad]

I have an ssh user who needs only to search some log files not in his jail. The 
jail required because I don't want the user seeing the rest the machine.  If 
the dirs were linked to his jail, would that work? 

What I'd really like is something like ftpchroot for but ssh.

suggestions?

Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Can't get plone to run

[Len Conrad]

Following the instructions from "Professional Plone 4 Development" book.

(not plone/zope from ports)

freebsd 9.0

got pretty far, then:

plone# bin/instance fg

2012-07-09 16:49:55 INFO ZServer HTTP server started at Mon Jul  9 16:49:55 2012
Hostname: 0.0.0.0
Port: 8080
2012-07-09 16:49:55 INFO Zope Set effective user to "myname"
Traceback (most recent call last):
  File "/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/Zope2/Startup/run.py", 
line 76, in 
run()
  File "/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/Zope2/Startup/run.py", 
line 22, in run
starter.prepare()
  File 
"/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/Zope2/Startup/__init__.py", line 
86, in prepare
self.startZope()
  File 
"/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/Zope2/Startup/__init__.py", line 
259, in startZope
Zope2.startup()
  File "/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/Zope2/__init__.py", line 
46, in startup
from Zope2.App.startup import startup as _startup
  File "/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/Zope2/App/startup.py", 
line 38, in 
import OFS.Application
  File "/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/OFS/Application.py", line 
22, in 
import App.Product
  File "/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/App/Product.py", line 44, 
in 
from OFS.Folder import Folder
  File "/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/OFS/Folder.py", line 24, 
in 
from webdav.Collection import Collection
  File "/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/webdav/Collection.py", 
line 30, in 
from webdav.Resource import Resource
  File "/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/webdav/Resource.py", line 
35, in 
from OFS.event import ObjectClonedEvent
  File "/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/OFS/event.py", line 20, 
in 
import OFS.interfaces
  File "/usr/home/myname/eggs/Zope2-2.13.15-py2.7.egg/OFS/interfaces.py", line 
19, in 
from zope.location.interfaces import IPossibleSite
ImportError: cannot import name IPossibleSite

ideas?

Thanks
Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Cannot --enable-pcretest-libedit because libedit library was not found

[Len Conrad]

8.2-RELEASE FreeBSD 8.2-RELEASE #0

with current portsnap

mtr, postfix-current, pcre all fail to install with error:

** Cannot --enable-pcretest-libedit because libedit library was not found.
===>  Script "configure" failed unexpectedly.
Please report the problem to m...@freebsd.org [maintainer] and attach the
"/usr/ports/devel/pcre/work/pcre-8.30/config.log" including the output of the
failure of your make command. Also, it might be a good idea to provide an
overview of all packages installed on your system (e.g. an `ls /var/db/pkg`).
*** Error code 1

thanks
Len




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

portsnap broken

[Len Conrad]

Never had a problem before

Freebsd 8.2

a couple weeks ago, on virgin 8.2, initial run of 

portsnap fetch extract

... ran great, and a couple of updates since then, also.  

but today:

# portsnap fetch
Looking up portsnap.FreeBSD.org mirrors... 5 mirrors found.
Fetching snapshot tag from portsnap1.FreeBSD.org... done.
Fetching snapshot metadata... done.
Updating from Sun Dec  4 15:26:46 CET 2011 to Mon Dec  5 02:05:11 CET 2011.
Fetching 4 metadata patches... done.
Applying metadata patches... done.
Fetching 0 metadata files... done.
Fetching 27 patches.1020... done.
Applying patches... done.
Fetching 2 new ports or files... done.


# portsnap update
Removing old files and directories... done.
Extracting new files:
/usr/ports/MOVED
/usr/ports/Mk/bsd.sites.mk
/usr/ports/Mk/bsd.wx.mk
/usr/ports/archivers/rpm4/
/usr/ports/astro/google-earth/
/usr/ports/astro/match/
/usr/ports/astro/xearth/
/usr/ports/astro/xtide/
/usr/ports/audio/audacity-devel/
/usr/ports/audio/thunar-media-tags-plugin/
/usr/ports/cad/brlcad/
/usr/ports/chinese/Makefile
/usr/ports/chinese/opencc/
/usr/ports/comms/Makefile
/usr/ports/comms/p5-SMS-Send-NexmoUnicode/
/usr/ports/converters/enca/
/usr/ports/databases/msql3/
/usr/ports/databases/p5-DBD-ODBC/
/usr/ports/databases/p5-DBD-SQLite/
/usr/ports/databases/p5-DBIx-Inspector/
/usr/ports/databases/pecl-rrd/
/usr/ports/databases/phpmyadmin/
/usr/ports/databases/postgresql-jdbc/
/usr/ports/databases/redis/
/usr/ports/deskutils/gtg/
/usr/ports/devel/Makefile
/usr/ports/devel/bglibs/
/usr/ports/devel/binutils/
/usr/ports/devel/fistgen/
/usr/ports/devel/glui/
/usr/ports/devel/imake/
/usr/ports/devel/libdombey/
/usr/ports/devel/mdds/
/usr/ports/devel/mingw32-libffi/
/usr/ports/devel/mingw32-libyaml/
/usr/ports/devel/mingw32-zlib/
/usr/ports/devel/p4v/
/usr/ports/devel/p5-App-cpanminus/
/usr/ports/devel/p5-CHI/
/usr/ports/devel/p5-Config-Model/
/usr/ports/devel/p5-FindBin-libs/
/usr/ports/devel/p5-Sepia/
/usr/ports/devel/p5-Test-SharedFork/
/usr/ports/devel/py-urwid/
/usr/ports/devel/rubygem-chronic/
/usr/ports/devel/rubygem-columnize/
/usr/ports/devel/rubygem-devise/
/usr/ports/devel/rubygem-gemcutter/
/usr/ports/devel/rubygem-hoe/
/usr/ports/devel/rubygem-jammit/
/usr/ports/devel/rubygem-json/
/usr/ports/devel/rubygem-json_pure/
/usr/ports/devel/rubygem-little_plugger/
/usr/ports/devel/rubygem-minitest/
/usr/ports/devel/rubygem-multi_json/
/usr/ports/devel/rubygem-sequel/
/usr/ports/devel/rubygem-sexp_processor/
/usr/ports/devel/rubygem-tins/
/usr/ports/devel/valgrind/
/usr/ports/devel/websvn/
/usr/ports/devel/zziplib/
/usr/ports/dns/dnsjava/
/usr/ports/dns/rubygem-dnsruby/
/usr/ports/editors/paredit-mode.el/
/usr/ports/emulators/qemu-devel/
/usr/ports/emulators/virtualbox-ose-additions/
/usr/ports/emulators/virtualbox-ose-kmod/
/usr/ports/emulators/virtualbox-ose/
/usr/ports/emulators/wine/
/usr/ports/ftp/R-cran-RCurl/
files/260946d9401adc15de38730058d50c9798d7cb6a547da435f7308f9fb0515670.gz not 
found -- snapshot corrupt.

Len




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

ELF interpreter /libexec/ld-elf.so.1 not found

[Len Conrad]

FreeBSD in a jail at Johncompanies.com

uname -a
FreeBSD 7.2-RELEASE-p1-jc2 FreeBSD 7.2-RELEASE-p1-jc2 #0: Thu Jun 18 15:16:49 
PDT 2009 Johncompanies.com:/usr/obj/usr/src/sys/jail8  amd64

portstap fetch update

nmap installed with make && make install

nmap a.b.c.d -p 143 -sU

ELF interpreter /libexec/ld-elf.so.1 not found
Abort

locate ld-elf.so.1

/libexec/ld-elf.so.1
/usr/libexec/ld-elf.so.1
/usr/share/man/man1/ld-elf.so.1.1.gz

Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: tcp/ip failures with fbsd 8.2 386 on ESX 4.1

[Len Conrad]

>Maybe try disabling dns lookups within syslog-ng?
>
>- Original Message -
>From: Len Conrad [mailto:lcon...@go2france.com]
>Sent: Saturday, March 19, 2011 05:40 PM
>To: freebsd-questions@freebsd.org 
>Subject: tcp/ip failures with fbsd 8.2 386 on ESX 4.1
>
>
>FreeBSD 8.2 32-bit
>ESXi 4.1
>em0 driver to the ESXi Intel emulation
>syslog-ng 2.0.10
>
>em0: flags=8943 metric 0 mtu 
>1500
>options=9b
>ether 00:50:56:90:00:01
>inet a.b.c.85 netmask 0xffe0 broadcast a.b.c.95
>media: Ethernet autoselect (1000baseT )
>status: active
>
>We've be running FreeBSD 7.x for a couple of years on ESXi 4.0 and 4.1 with no 
>problems.
>
>We're having tcp/ip failures with 8.2 as syslog-ng server.  trafshow shows 
>aggregate port 514 traffic hitting peaks of about 25K char/sec.
>
>After sometimes many hours of the syslog-ng VM server running well, 
>
>monit from other machines signals port 514 is down, up, down, up.
>
>this is confirmed by other machines with
>
>nmap a.b.c.d -p 514 -sU
>
>... showing closed, open, closed, etc.
>
>syslog-ng logging for all syslog clients stops more or less simultaneously.
>
>trafshow filtered for port 514 shows udp packets arriving, but instead of 
>showing the source and destinations by PTR domain name, it switches to showing 
>their IPs.
>
>to test the external DNS, on the syslog-ng VM, we try
>
>dig @recursive.server -x a.b.c.d
>
>and get no response.  Other machines query the recursive server successfully.
>
>Without rebooting the FreeBSD VM, we do
>
>/etc/rc.d/netif restart
>/etc/rc.d/routing restart
>
>which allows full operation.
>
>dmesg and messages show no errors.
>
>Suggestions?
>
>Len

the failure just happened again.  this time ssh sessions, like the one running 
trafshow, are cut off.  ssh again gets "connection refused"

on another machine running a looping, logging script of

nmap a.b.c.d -p 514 -sU

show port 514 open

It seems like the tcp/ip or em0 driver gets screwed up.

Len




>___
>freebsd-questions@freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
>
>
>
>
>
>
>
>
>"This email is intended to be reviewed by only the intended recipient
> and may contain information that is privileged and/or confidential.
> If you are not the intended recipient, you are hereby notified that
> any review, use, dissemination, disclosure or copying of this email
> and its attachments, if any, is strictly prohibited.  If you have
> received this email in error, please immediately notify the sender by
> return email and delete this email from your system."
>
>
>___
>freebsd-questions@freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

tcp/ip failures with fbsd 8.2 386 on ESX 4.1

[Len Conrad]

FreeBSD 8.2 32-bit
ESXi 4.1
em0 driver to the ESXi Intel emulation
syslog-ng 2.0.10

em0: flags=8943 metric 0 mtu 
1500
options=9b
ether 00:50:56:90:00:01
inet a.b.c.85 netmask 0xffe0 broadcast a.b.c.95
media: Ethernet autoselect (1000baseT )
status: active

We've be running FreeBSD 7.x for a couple of years on ESXi 4.0 and 4.1 with no 
problems.

We're having tcp/ip failures with 8.2 as syslog-ng server.  trafshow shows 
aggregate port 514 traffic hitting peaks of about 25K char/sec.

After sometimes many hours of the syslog-ng VM server running well, 

monit from other machines signals port 514 is down, up, down, up.

this is confirmed by other machines with

nmap a.b.c.d -p 514 -sU

... showing closed, open, closed, etc.

syslog-ng logging for all syslog clients stops more or less simultaneously.

trafshow filtered for port 514 shows udp packets arriving, but instead of 
showing the source and destinations by PTR domain name, it switches to showing 
their IPs.

to test the external DNS, on the syslog-ng VM, we try

dig @recursive.server -x a.b.c.d

and get no response.  Other machines query the recursive server successfully.

Without rebooting the FreeBSD VM, we do

/etc/rc.d/netif restart
/etc/rc.d/routing restart

which allows full operation.

dmesg and messages show no errors.

Suggestions?

Len



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

bind 98 make fails

[Len Conrad]

FreeBSD 8.2 i386  

kern dev distribution

as 42-bit VM on host ESXi 4.1

portsnap fetch extract

cd /usr/ports/dns/bind98

make

Options for bind98 9.8.0   |
| 
++ |
[X] SSL Building without OpenSSL removes DNSSEC | |
[X] LINKS   Create conf file symlinks in /usr/local | |
[X] XML Support for xml statistics output   | |
[X] IDN Add IDN support to dig, host, etc.  | |
[X] REPLACE_BASEReplace base BIND with this version | |
[ ] LARGE_FILE  64-bit file support | |
[X] SIGCHASEdig/host/nslookup will do DNSSEC validation | |
[X] IPV6IPv6 Support (autodetected by default)  | |
[X] THREADS Compile with thread support | |
[ ] DLZ_POSTGRESQL  DLZ Postgres driver | |
[ ] DLZ_MYSQL   DLZ MySQL driver (single-threaded BIND) | |
[ ] DLZ_BDB DLZ BDB driver  | |
[ ] DLZ_LDAPDLZ LDAP driver | |
[ ] DLZ_FILESYSTEM  DLZ filesystem driver   | |
[ ] DLZ_STUBDLZ stub driver 

make: don't know how to make /usr/ports/dns/bind98

/work/.build_done.bind98._usr_local. Stop
*** Error code 2

thanks
Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: syslog-ng logging stopped

[Len Conrad]

>May it be a permission issue (fs or /dev/kmem or the like)?

syslog-ng or syslogd as root doesn't enable log writing.

> Can you
>manually start syslog-ng or syslogd with verbose flags enabled?

I edited rc.d/syslog-ng   script to add -d

of course, nothing is logged, so -d doesn't help.

Len



>Man, you really stumbled upon something weird!
>
>On 3/12/11, Len Conrad  wrote:
>> At 03:52 PM 3/12/2011, you wrote:
>>>That probably means that it's not syslog-ng causing the problems.
>>
>> right
>>
>>>Maybe some firewall rule?
>>
>> I run pf.  pfctl -d didn't allow logging to start.  trafshow and tshark
>> showed
>> all the traffic hitting port 514, not being blocked.
>>
>> Len
>>
>>
>>
>> ___
>> freebsd-questions@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
>>
>
>
>-- 
>Iñigo Ortiz de Urbina Cazenave
>http://www.twitter.com/ioc32



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: syslog-ng logging stopped

[Len Conrad]

At 03:52 PM 3/12/2011, you wrote:
>That probably means that it's not syslog-ng causing the problems.

right

>Maybe some firewall rule?

I run pf.  pfctl -d didn't allow logging to start.  trafshow and tshark showed
all the traffic hitting port 514, not being blocked.

Len



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: syslog-ng logging stopped

[Len Conrad]

>-- Original Message --
>From: Iñigo Ortiz de Urbina 
>Date:  Fri, 11 Mar 2011 23:12:49 +0100
>
>>Whats in dmesg and /var/log/? You shared extensive and excellent
>>troubleshooting info but didnt spot none of these.
>>
>>Keep us updated im sure im not the only one puzzled :)
>>
>>On 3/11/11, Len Conrad  wrote:
>>> uname -a
>>> FreeBSD 7.0-RELEASE
>>>
>>> syslog-ng --version
>>> syslog-ng 2.0.10
>>>
>>> change date on syslog-ng.conf is  "Apr 20  2009"
>>>
>>> syslog-ng been running untouched for that long. Millions of lines/per day
>>> log from 10 source machine.
>>>
>>> about 00:20 today Friday,  all syslogging to syslog-ng stopped.
>>>
>>> sockstat -4 shows udp/tcp 514 listening
>>>
>>> chkrootkit  shows nothing wrong
>>>
>>> stop syslog-ng
>>>
>>> then pkg_delete, and then
>>>
>>> cd /usr/ports/sysutils/syslog-ng2
>>>
>>> make && make install
>>>
>>> start it,
>>>
>>> no change
>>>
>>> I rebooted the syslog server.  no change
>>>
>>> trafshow -i bce0 -n
>>>
>>> then filter 514
>>>
>>> ... shows 100KBs arriving from our syslog clients.
>>>
>>> tshark capture "port 514" on syslog-ng box shows plenty of traffic arriving
>>> with untouched pf rules active,
>>>
>>> pfctl -d   no change so pfctl -e
>>>
>>> df shows plenty of disk space for /var
>>>
>>> suggestions?
>>>
>>> Len
>>>
>>>
>>> ___
>>> freebsd-questions@freebsd.org mailing list
>>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>>> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
>>>
>>
>>
>>-- 
>>Iñigo Ortiz de Urbina Cazenave
>>http://www.twitter.com/ioc32
>
>=
>
>dmesg -a | less showed nothing
>
>/var/log/console.log showed nothing
>
>/var/log/messages showed nothing

btw, I later replaced syslog-ng with syslogd, listening UDP:514.  no lines in 
messages, maillog.

Len






>___
>freebsd-questions@freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: syslog-ng logging stopped

[Len Conrad]

-- Original Message --
From: Iñigo Ortiz de Urbina 
Date:  Fri, 11 Mar 2011 23:12:49 +0100

>Whats in dmesg and /var/log/? You shared extensive and excellent
>troubleshooting info but didnt spot none of these.
>
>Keep us updated im sure im not the only one puzzled :)
>
>On 3/11/11, Len Conrad  wrote:
>> uname -a
>> FreeBSD 7.0-RELEASE
>>
>> syslog-ng --version
>> syslog-ng 2.0.10
>>
>> change date on syslog-ng.conf is  "Apr 20  2009"
>>
>> syslog-ng been running untouched for that long. Millions of lines/per day
>> log from 10 source machine.
>>
>> about 00:20 today Friday,  all syslogging to syslog-ng stopped.
>>
>> sockstat -4 shows udp/tcp 514 listening
>>
>> chkrootkit  shows nothing wrong
>>
>> stop syslog-ng
>>
>> then pkg_delete, and then
>>
>> cd /usr/ports/sysutils/syslog-ng2
>>
>> make && make install
>>
>> start it,
>>
>> no change
>>
>> I rebooted the syslog server.  no change
>>
>> trafshow -i bce0 -n
>>
>> then filter 514
>>
>> ... shows 100KBs arriving from our syslog clients.
>>
>> tshark capture "port 514" on syslog-ng box shows plenty of traffic arriving
>> with untouched pf rules active,
>>
>> pfctl -d   no change so pfctl -e
>>
>> df shows plenty of disk space for /var
>>
>> suggestions?
>>
>> Len
>>
>>
>> ___
>> freebsd-questions@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
>>
>
>
>--
>Iñigo Ortiz de Urbina Cazenave
>http://www.twitter.com/ioc32

=

dmesg -a | less showed nothing

/var/log/console.log showed nothing

/var/log/messages showed nothing



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

syslog-ng logging stopped

[Len Conrad]

uname -a
FreeBSD 7.0-RELEASE

syslog-ng --version
syslog-ng 2.0.10

change date on syslog-ng.conf is  "Apr 20  2009"

syslog-ng been running untouched for that long. Millions of lines/per day log 
from 10 source machine.

about 00:20 today Friday,  all syslogging to syslog-ng stopped.

sockstat -4 shows udp/tcp 514 listening

chkrootkit  shows nothing wrong

stop syslog-ng

then pkg_delete, and then

cd /usr/ports/sysutils/syslog-ng2

make && make install

start it,

no change

I rebooted the syslog server.  no change

trafshow -i bce0 -n

then filter 514

... shows 100KBs arriving from our syslog clients.

tshark capture "port 514" on syslog-ng box shows plenty of traffic arriving 
with untouched pf rules active, 

pfctl -d   no change so pfctl -e

df shows plenty of disk space for /var

suggestions?

Len 


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

can't make port BIND 9.7.3

[Len Conrad]

7.2-RELEASE-p1-jc2

trying to make in /usr/ports/dns/bind97

distinfo shows bind-9.7.3.tar.gz

make options:
 
SSL
IDN
replace_base
sigchase
ipv6
threads
links
xml

exiting the options, an immediate stop:

make: don't know how to make 
/usr/ports/dns/bind97/work/.build_done.bind97._usr_local. Stop
*** Error code 2

Stop in /usr/ports/dns/bind97.

thanks
Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: vm ware

[Len Conrad]

=>Hi,
> I want to inquire if its possible to install freeBSD on vm ware?
> is there any live cd iso available?

I've had no problems installing FreeBSD 6,7,8 as VM into ESXi 4.1 hypervisor.

Latest success was using the VMWare cold converter .iso to virtualize a FreeBSD 
6.2 physical machine and export it to ESXi 4.1 as VM.

The trick that saves lot of pain and time post-virtualization was that we first 
edited /etc/fstab on the physical machine and replace the "sd" devices with 
"da" so FreeBSD kernel finds all the slices, then we shut it down to reboot 
with the cold converter.

Then we look via the VMWare console of the FreeBSD VM /var/run/dmesg.boot file 
to see what interface the hardware probe found and fix up /etc/rc.conf. Then

/etc/rc.d/netif restart
/etc/rc.d/routing restart

We are building a new VM with fbsd 8.1, but until then the 6.2 virtualization 
got us off an over-powered Pentium4 to an 8-core Xeon ESXi.

Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Problems installing django and py-tkinter

[Len Conrad]

webmail ate my subject


-- Original Message --
From: "Len Conrad" 
Reply-To: lcon...@go2france.com
Date:  Mon,  4 Oct 2010 21:47:23 +0200

>installed:
>
>Python 2.7 (r27:82500, Sep 30 2010, 16:50:36)
>
>
>cd /usr/ports/www/py-django11
>
>fails:
>
>
>==
>WARNING: The C extension could not be compiled, speedups are not enabled.
>Plain-Python installation succeeded.
>==
>===>  Installing for py27-MarkupSafe-0.11
>===>   py27-MarkupSafe-0.11 depends on file: /usr/local/bin/easy_install-2.7 - 
>found
>===>   py27-MarkupSafe-0.11 depends on file: /usr/local/bin/python2.7 - found
>===>   Generating temporary packing list
>===>  Checking if textproc/py-MarkupSafe already installed
>running easy_install
>error: Not a URL, existing file, or requirement spec: 
>'/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/dist/MarkupSafe-0.11-py2.7-freebsd-8.1-RELEASE-i386.egg'
>*** Error code 1
>
>Stop in /usr/ports/textproc/py-MarkupSafe.
>*** Error code 1
>
>Stop in /usr/ports/devel/py-Jinja2.
>*** Error code 1
>
>Stop in /usr/ports/devel/py-Jinja2.
>*** Error code 1
>
>Stop in /usr/ports/textproc/py-sphinx.
>*** Error code 1
>
>Stop in /usr/ports/www/py-django11.
>*** Error code 1
>
>Stop in /usr/ports/www/py-django11.
>
>Seems like the path is wrong above compared to the ports tree:
>
>mx1# find /usr/ports/ -iname "*markupsafe*" | less
>/usr/ports/devel/py-Jinja2/work/Jinja2-2.5.2/jinja2/_markupsafe
>/usr/ports/devel/py-Jinja2/work/Jinja2-2.5.2/build/lib/jinja2/_markupsafe
>/usr/ports/textproc/py-MarkupSafe
>/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11
>/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/markupsafe
>/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/MarkupSafe.egg-info
>/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/lib.freebsd-8.1-RELEASE-i386/markupsafe
>/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/temp.freebsd-8.1-RELEASE-i386-2.7/markupsafe
>/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/build/lib/markupsafe
>/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/dist/MarkupSafe-0.11-py2.7.egg
>/usr/ports/textproc/py-MarkupSafe/work/.extract_done.MarkupSafe._usr_local
>/usr/ports/textproc/py-MarkupSafe/work/.patch_done.MarkupSafe._usr_local
>/usr/ports/textproc/py-MarkupSafe/work/.configure_done.MarkupSafe._usr_local
>/usr/ports/textproc/py-MarkupSafe/work/.build_done.MarkupSafe._usr_local
>/usr/ports/distfiles/MarkupSafe-0.11.tar.gz
>
>
>
>===
>
>the tkinter fails, too  (I'm trying to work thru thinkpython.pdf)
>
>
>cd /usr/ports/x11-toolkits/py-tkinter
>
>
>===>   Returning to build of libX11-1.3.3_1,1
>===>   libX11-1.3.3_1,1 depends on file: /usr/local/bin/autoconf-2.67 - found
>===>   libX11-1.3.3_1,1 depends on package: libtool>=2.2 - found
>===>   libX11-1.3.3_1,1 depends on executable: pkg-config - found
>===>  Configuring for libX11-1.3.3_1,1
>configure.ac:5: warning: AC_INIT: not a literal: 
>https://bugs.freedesktop.org/enter_bug.cgi?product=xorg
>configure.ac:5: warning: AC_INIT: not a literal: 
>https://bugs.freedesktop.org/enter_bug.cgi?product=xorg
>configure.ac:5: warning: AC_INIT: not a literal: 
>https://bugs.freedesktop.org/enter_bug.cgi?product=xorg
>configure:14185: error: possibly undefined macro: AS_MESSAGE_LOG_FDdnl
>  If this token and others are legitimate, please use m4_pattern_allow.
>  See the Autoconf documentation.
>*** Error code 1
>
>Stop in /usr/ports/x11/libX11.
>*** Error code 1
>
>Stop in /usr/ports/x11-toolkits/tk85.
>*** Error code 1
>
>Stop in /usr/ports/x11-toolkits/tk85.
>*** Error code 1
>
>Stop in /usr/ports/x11-toolkits/py-tkinter.
>
>
>Thanks
>Len 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

(no subject)

[Len Conrad]

installed:

Python 2.7 (r27:82500, Sep 30 2010, 16:50:36)


cd /usr/ports/www/py-django11

fails:


==
WARNING: The C extension could not be compiled, speedups are not enabled.
Plain-Python installation succeeded.
==
===>  Installing for py27-MarkupSafe-0.11
===>   py27-MarkupSafe-0.11 depends on file: /usr/local/bin/easy_install-2.7 - 
found
===>   py27-MarkupSafe-0.11 depends on file: /usr/local/bin/python2.7 - found
===>   Generating temporary packing list
===>  Checking if textproc/py-MarkupSafe already installed
running easy_install
error: Not a URL, existing file, or requirement spec: 
'/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/dist/MarkupSafe-0.11-py2.7-freebsd-8.1-RELEASE-i386.egg'
*** Error code 1

Stop in /usr/ports/textproc/py-MarkupSafe.
*** Error code 1

Stop in /usr/ports/devel/py-Jinja2.
*** Error code 1

Stop in /usr/ports/devel/py-Jinja2.
*** Error code 1

Stop in /usr/ports/textproc/py-sphinx.
*** Error code 1

Stop in /usr/ports/www/py-django11.
*** Error code 1

Stop in /usr/ports/www/py-django11.

Seems like the path is wrong above compared to the ports tree:

mx1# find /usr/ports/ -iname "*markupsafe*" | less
/usr/ports/devel/py-Jinja2/work/Jinja2-2.5.2/jinja2/_markupsafe
/usr/ports/devel/py-Jinja2/work/Jinja2-2.5.2/build/lib/jinja2/_markupsafe
/usr/ports/textproc/py-MarkupSafe
/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11
/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/markupsafe
/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/MarkupSafe.egg-info
/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/lib.freebsd-8.1-RELEASE-i386/markupsafe
/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/temp.freebsd-8.1-RELEASE-i386-2.7/markupsafe
/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/build/lib/markupsafe
/usr/ports/textproc/py-MarkupSafe/work/MarkupSafe-0.11/dist/MarkupSafe-0.11-py2.7.egg
/usr/ports/textproc/py-MarkupSafe/work/.extract_done.MarkupSafe._usr_local
/usr/ports/textproc/py-MarkupSafe/work/.patch_done.MarkupSafe._usr_local
/usr/ports/textproc/py-MarkupSafe/work/.configure_done.MarkupSafe._usr_local
/usr/ports/textproc/py-MarkupSafe/work/.build_done.MarkupSafe._usr_local
/usr/ports/distfiles/MarkupSafe-0.11.tar.gz



===

the tkinter fails, too  (I'm trying to work thru thinkpython.pdf)


cd /usr/ports/x11-toolkits/py-tkinter


===>   Returning to build of libX11-1.3.3_1,1
===>   libX11-1.3.3_1,1 depends on file: /usr/local/bin/autoconf-2.67 - found
===>   libX11-1.3.3_1,1 depends on package: libtool>=2.2 - found
===>   libX11-1.3.3_1,1 depends on executable: pkg-config - found
===>  Configuring for libX11-1.3.3_1,1
configure.ac:5: warning: AC_INIT: not a literal: 
https://bugs.freedesktop.org/enter_bug.cgi?product=xorg
configure.ac:5: warning: AC_INIT: not a literal: 
https://bugs.freedesktop.org/enter_bug.cgi?product=xorg
configure.ac:5: warning: AC_INIT: not a literal: 
https://bugs.freedesktop.org/enter_bug.cgi?product=xorg
configure:14185: error: possibly undefined macro: AS_MESSAGE_LOG_FDdnl
  If this token and others are legitimate, please use m4_pattern_allow.
  See the Autoconf documentation.
*** Error code 1

Stop in /usr/ports/x11/libX11.
*** Error code 1

Stop in /usr/ports/x11-toolkits/tk85.
*** Error code 1

Stop in /usr/ports/x11-toolkits/tk85.
*** Error code 1

Stop in /usr/ports/x11-toolkits/py-tkinter.


Thanks
Len 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

amr intermittant failures

[Len Conrad]

uname -a
FreeBSD mx6 7.2-RELEASE FreeBSD 7.2-RELEASE #0: Fri May  1 07:18:07 UTC 2009
 r...@driscoll.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  amd64

dmesg.boot:

amr0:  mem 0xf80f-0xf80f,0xfe9e-0xfe9f 
irq 46 at device 14.0 on pci2
amr0: Using 64-bit DMA
amr0: [ITHREAD]
amr0: delete logical drives supported by controller
amr0:  Firmware 522A, BIOS H430, 256MB RAM

errors:

Sep 21 18:01:32 mx6 kernel: amr0: Too many retries on command 
0xfffe80229fc8.  Controller is likely dead
Sep 21 21:51:32 mx6 kernel: amr0: Too many retries on command 
0xfffe80229970.  Controller is likely dead
Sep 22 00:36:31 mx6 kernel: amr0: Too many retries on command 
0xfffe802201e0.  Controller is likely dead
Sep 22 03:01:36 mx6 kernel: amr0: Too many retries on command 
0xfffe80229b40.  Controller is likely dead
Sep 22 03:02:25 mx6 kernel: amr0: Too many retries on command 
0xfffe80228af0.  Controller is likely dead
Sep 22 03:05:54 mx6 kernel: amr0: Too many retries on command 
0xfffe80228838.  Controller is likely dead
Sep 22 09:36:29 mx6 kernel: amr0: Too many retries on command 
0xfffe80226d60.  Controller is likely dead
Sep 22 09:41:29 mx6 kernel: amr0: Too many retries on command 
0xfffe8022a7f0.  Controller is likely dead
Sep 22 10:11:29 mx6 kernel: amr0: Too many retries on command 
0xfffe80229ee0.  Controller is likely dead
Sep 22 10:56:29 mx6 kernel: amr0: Too many retries on command 
0xfffe80229b40.  Controller is likely dead
Sep 22 11:16:29 mx6 kernel: amr0: Too many retries on command 
0xfffe80224668.  Controller is likely dead
Sep 22 11:31:29 mx6 kernel: amr0: Too many retries on command 
0xfffe80224f78.  Controller is likely dead
Sep 22 16:46:28 mx6 kernel: amr0: Too many retries on command 
0xfffe80226c78.  Controller is likely dead
Sep 22 16:51:28 mx6 kernel: amr0: Too many retries on command 
0xfffe80229230.  Controller is likely dead
Sep 22 22:01:27 mx6 kernel: amr0: Too many retries on command 
0xfffe80227758.  Controller is likely dead
Sep 23 03:02:38 mx6 kernel: amr0: Too many retries on command 
0xfffe80225400.  Controller is likely dead
Sep 23 03:03:42 mx6 kernel: amr0: Too many retries on command 
0xfffe802260b0.  Controller is likely dead
Sep 23 03:06:05 mx6 kernel: amr0: Too many retries on command 
0xfffe80225970.  Controller is likely dead
Sep 23 03:11:26 mx6 kernel: amr0: Too many retries on command 
0xfffe802280f8.  Controller is likely dead
Sep 23 03:16:26 mx6 kernel: amr0: Too many retries on command 
0xfffe80226aa8.  Controller is likely dead
Sep 23 04:41:26 mx6 kernel: amr0: Too many retries on command 
0xfffe802294e8.  Controller is likely dead
Sep 23 09:21:25 mx6 kernel: amr0: Too many retries on command 
0xfffe80225318.  Controller is likely dead
Sep 23 09:41:25 mx6 kernel: amr0: Too many retries on command 
0xfffe80228a08.  Controller is likely dea
Sep 23 12:01:25 mx6 kernel: amr0: Too many retries on command 
0xfffe802296b8.  Controller is likely dead
Sep 23 12:06:25 mx6 kernel: amr0: Too many retries on command 
0xfffe802241e0.  Controller is likely dead
Sep 23 12:36:24 mx6 kernel: amr0: Too many retries on command 
0xfffe802281e0.  Contro
Sep 23 14:06:24 mx6 kernel: amr0: Too many retries on command 
0xfffe80228bd8.  Controller is likely dead
Sep 23 14:21:24 mx6 kernel: amr0: Too many retries on command 
0xfffe80225230.  Controller is likely dead

these are apparently non fatal.  VERY busy relay-only postfix MX boxes, two of 
them have the same errors.  Disk is getting hit hard with postfix logging and 
msg queueing.

Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Software to SEND log files only?

[Len Conrad]

-- Original Message --
From: Ed Flecko 
Date:  Tue, 21 Sep 2010 12:56:13 -0700

>According to the FreeBSD website
>(http://www.freebsd.org/doc/handbook/outgoing-only.html), the easiest
>way to send mail only is to install the mail/ssmtp port.
>
>Does anyone have an example of a script or other method (maybe a cron
>script?) that would e-mail my log files to me daily?

log files can be (too) huge as smtp DATA.  

I zip mine and use the mpack port to send the .zip file as MIME attachment.

Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: awk problem

[Len Conrad]

-- Original Message --
From: Mark Tinguely 
Date:  Fri, 13 Aug 2010 11:14:03 -0500

>Len Conrad wrote:
>> I readfile or pipe this text, in any line order:
>>
>> rm90.steampick.info
>> fgce172.lanejive.info
>> smailer1.service.govdelivery.com
>> fl49.orangetalon.info
>> pollux.carespecial.info
>>
>> into a program to remove subdomains down to domain.tld :
>>
>> awk 'FS="." { print $(NF-1)"."$NF }'
>>
>> and get the first line doubled rather than processed like the other lines:
>>
>> rm90.steampick.info.rm90.steampick.info
>> lanejive.info
>> govdelivery.com
>> orangetalon.info
>> carespecial.info
>>
>> thanks
>> Len
>>
>> ___
>> freebsd-questions@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
>>
>>   
>
>How about:
>
> awk -F. '{ print $(NF-1)"."$NF }'

that works, thanks

Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: awk problem

[Len Conrad]

-- Original Message --
From: Anonymous 
Date:  Fri, 13 Aug 2010 20:13:20 +0400

>"Len Conrad"  writes:
>
>> awk 'FS="." { print $(NF-1)"."$NF }'
>>
>> rm90.steampick.info.rm90.steampick.info
>> lanejive.info
>> govdelivery.com
>> orangetalon.info
>> carespecial.info
>
>Hmm, I can't reproduce it on /head. What FreeBSD version you're using?
>Can you try with lang/nawk port? nawk is from the same vendor as
>/usr/src/contrib/one-true-awk.

FreeBSD  7.0-RELEASE FreeBSD 7.0-RELEASE #0

awk --version
awk version 20070501 (FreeBSD)


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

awk problem

[Len Conrad]

I readfile or pipe this text, in any line order:

rm90.steampick.info
fgce172.lanejive.info
smailer1.service.govdelivery.com
fl49.orangetalon.info
pollux.carespecial.info

into a program to remove subdomains down to domain.tld :

awk 'FS="." { print $(NF-1)"."$NF }'

and get the first line doubled rather than processed like the other lines:

rm90.steampick.info.rm90.steampick.info
lanejive.info
govdelivery.com
orangetalon.info
carespecial.info

thanks
Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Subject: pf: pass in quick to port 25 still getting some blocks

[Len Conrad]

setting up pf on fbsd 7.2 for host security on a mail gateway.

the only rule for port 25 is:

pass in quick on em0 inet proto tcp from any to $ext_if port = smtp flags S/SA 
keep state

and then last rule:

block drop in log on em0 inet from any to $ext_if

while 1000s of connections to port 25 are getting through with the pass rule, 
several 100 connections are getting blocked with the default block rule, 
bypassing the pass rule.

I can't see how pf is selecting these connections to be blocked.

thanks
Len 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

make clamav 0.96 on fbsd 7.2 fails

[Len Conrad]

/bin/sh ./libtool --silent --tag=CXX   --mode=compile c++ -DHAVE_CONFIG_H -I.  
-I./../.. -I./.. -I./../../ -I./llvm/include -I./llvm/include 
-D__STDC_LIMIT_MACROS -D__STDC_CONSTANT_MACROS -D_DEBUG -D_GNU_SOURCE 
-I/usr/local/include   -Woverloaded-virtual -pedantic -Wno-long-long -Wall -W 
-Wno-unused-parameter -Wwrite-strings -Wno-missing-field-initializers 
-Wno-variadic-macros -fno-exceptions -O2 -fno-strict-aliasing -pipe -march=i486 
-c -o TargetLowering.lo `test -f 
'llvm/lib/CodeGen/SelectionDAG/TargetLowering.cpp' || echo 
'./'`llvm/lib/CodeGen/SelectionDAG/TargetLowering.cpp
c++: Internal error: Killed: 9 (program cc1plus)
Please submit a full bug report.
See http://gcc.gnu.org/bugs.html> for instructions.
gmake[5]: *** [SelectionDAG.lo] Error 1
gmake[5]: *** Waiting for unfinished jobs
gmake[5]: Leaving directory 
`/usr/ports/security/clamav/work/clamav-0.96/libclamav/c++'
gmake[4]: *** [all] Error 2
gmake[4]: Leaving directory 
`/usr/ports/security/clamav/work/clamav-0.96/libclamav/c++'
gmake[3]: *** [all-recursive] Error 1
gmake[3]: Leaving directory 
`/usr/ports/security/clamav/work/clamav-0.96/libclamav'
gmake[2]: *** [all] Error 2
gmake[2]: Leaving directory 
`/usr/ports/security/clamav/work/clamav-0.96/libclamav'
gmake[1]: *** [all-recursive] Error 1
gmake[1]: Leaving directory `/usr/ports/security/clamav/work/clamav-0.96'
gmake: *** [all] Error 2
*** Error code 1

Stop in /usr/ports/security/clamav.
*** Error code 1

Stop in /usr/ports/security/clamav.

freebsd problem?

clam problem?

gcc problem?

Thanks
Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: sorry, email program ate my subject: Can't compile MySQL 5.0server on 7.2

[Len Conrad]

-- Original Message --
From: Greg Larkin 
Reply-To: glar...@freebsd.org
Date:  Mon, 01 Mar 2010 14:46:54 -0500

>-BEGIN PGP SIGNED MESSAGE-
>Hash: SHA1
>
>Len Conrad wrote:
>> -- Original Message ----------
>> From: "Len Conrad" 
>> Reply-To: lcon...@go2france.com
>> Date:  Mon,  1 Mar 2010 19:04:58 +0100
>> 
>>> FreeBSD 7.2 as ESXi virtual machine
>>>
>>> after portsnap fetch update
>>>
>>> cd /usr/ports/databases/mysql50-server
>>>
>>> make configure
>>>
>>> make
>>>
>>> blah blah
>>>
>>> mv -f .deps/ha_example.Tpo .deps/ha_example.Po
>>> c++ -DEMBEDDED_LIBRARY -DMYSQL_SERVER  
>>> -DDEFAULT_MYSQL_HOME="\"/usr/local\""  -DMYSQL_DATADIR="\"/var/db/mysql\""  
>>> -DSHAREDIR="\"/usr/local/share/mysql\"" -I. -I../include 
>>> -I../bdb/build_unix  -I../innobase/include -I../innobase/include   
>>> -I../include -I../include  -I../sql -I../sql  -I../sql/examples  -I../regex 
>>>   -DDBUG_OFF -O2 -fno-strict-aliasing -pipe -fPIC -O2 
>>> -fno-strict-aliasing -pipe  -fPIC -felide-constructors -fno-rtti 
>>> -fno-exceptions   -fno-implicit-templates -fno-exceptions -fno-rtti 
>>> -DMYSQLD_NET_RETRY_COUNT=100 -MT ha_tina.o -MD -MP -MF 
>>> .deps/ha_tina.Tpo -c -o ha_tina.o ha_tina.cc
>>> mv -f .deps/ha_tina.Tpo .deps/ha_tina.Po
>>> c++ -DEMBEDDED_LIBRARY -DMYSQL_SERVER  
>>> -DDEFAULT_MYSQL_HOME="\"/usr/local\""  -DMYSQL_DATADIR="\"/var/db/mysql\""  
>>> -DSHAREDIR="\"/usr/local/share/mysql\"" -I. -I../include 
>>> -I../bdb/build_unix  -I../innobase/include -I../innobase/include   
>>> -I../include -I../include  -I../sql -I../sql  -I../sql/examples  -I../regex 
>>>   -DDBUG_OFF -O2 -fno-strict-aliasing -pipe -fPIC -O2 
>>> -fno-strict-aliasing -pipe  -fPIC -felide-constructors -fno-rtti 
>>> -fno-exceptions   -fno-implicit-templates -fno-exceptions -fno-rtti 
>>> -DMYSQLD_NET_RETRY_COUNT=100 -MT sql_yacc.o -MD -MP -MF 
>>> .deps/sql_yacc.Tpo -c -o sql_yacc.o sql_yacc.cc
>>> c++: Internal error: Killed: 9 (program cc1plus)
>>> Please submit a full bug report.
>>> See http://gcc.gnu.org/bugs.html> for instructions.
>>> *** Error code 1
>>> 1 error
>>> *** Error code 1
>>> 1 error
>>> *** Error code 1
>>> 1 error
>>> *** Error code 2
>>> 1 error
>>> *** Error code 1
>>>
>>> Stop in /usr/ports/databases/mysql50-server.
>>>
>>>
>>> Thanks
>>> Len
>>>
>
>Hi Len,
>
>How much memory have you allocated to the VM?  This error indicates that
>the compiler didn't have enough memory to compile that source file.
>Also, check the output of this command:
>
>sysctl -a | grep ^kern.maxd
>
>I have a VM with 1.5 GB allocated to it, and I've added the following
>line to /boot/loader.conf.local:
>
>kern.maxdsize=1363148800
>
>That gave me enough breathing room to use gcc (gcj, actually) to compile
>some complex Java source files.
>
>Hope that helps,
>Greg

thanks Greg, I though that might be a problem. from top:


Mem: 77M Active, 94M Inact, 57M Wired, 2956K Cache, 34M Buf, 7492K Free

I gave up on compile and did pkg_add -r.

thanks
Len





>- --
>Greg Larkin
>
>http://www.FreeBSD.org/   - The Power To Serve
>http://www.sourcehosting.net/ - Ready. Set. Code.
>http://twitter.com/sourcehosting/ - Follow me, follow you
>-BEGIN PGP SIGNATURE-
>Version: GnuPG v1.4.7 (MingW32)
>Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
>iD8DBQFLjBmu0sRouByUApARAi0vAJ96IfepBA5qhY0Tpbj7Mqu+ZMCFFACeOhKR
>Ov0ynzi/gBt4HkF8qNoebUo=
>=5q+5
>-END PGP SIGNATURE-
>
>___
>freebsd-questions@freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

sorry, email program ate my subject: Can't compile MySQL 5.0 server on 7.2

[Len Conrad]

-- Original Message --
From: "Len Conrad" 
Reply-To: lcon...@go2france.com
Date:  Mon,  1 Mar 2010 19:04:58 +0100

>FreeBSD 7.2 as ESXi virtual machine
>
>after portsnap fetch update
>
>cd /usr/ports/databases/mysql50-server
>
>make configure
>
>make
>
>blah blah
>
>mv -f .deps/ha_example.Tpo .deps/ha_example.Po
>c++ -DEMBEDDED_LIBRARY -DMYSQL_SERVER  -DDEFAULT_MYSQL_HOME="\"/usr/local\""  
>-DMYSQL_DATADIR="\"/var/db/mysql\""  -DSHAREDIR="\"/usr/local/share/mysql\"" 
>-I. -I../include -I../bdb/build_unix  -I../innobase/include 
>-I../innobase/include   -I../include -I../include  -I../sql -I../sql  
>-I../sql/examples  -I../regex   -DDBUG_OFF -O2 -fno-strict-aliasing -pipe 
>-fPIC -O2 -fno-strict-aliasing -pipe  -fPIC -felide-constructors -fno-rtti 
>-fno-exceptions   -fno-implicit-templates -fno-exceptions -fno-rtti 
>-DMYSQLD_NET_RETRY_COUNT=100 -MT ha_tina.o -MD -MP -MF .deps/ha_tina.Tpo 
>-c -o ha_tina.o ha_tina.cc
>mv -f .deps/ha_tina.Tpo .deps/ha_tina.Po
>c++ -DEMBEDDED_LIBRARY -DMYSQL_SERVER  -DDEFAULT_MYSQL_HOME="\"/usr/local\""  
>-DMYSQL_DATADIR="\"/var/db/mysql\""  -DSHAREDIR="\"/usr/local/share/mysql\"" 
>-I. -I../include -I../bdb/build_unix  -I../innobase/include 
>-I../innobase/include   -I../include -I../include  -I../sql -I../sql  
>-I../sql/examples  -I../regex   -DDBUG_OFF -O2 -fno-strict-aliasing -pipe 
>-fPIC -O2 -fno-strict-aliasing -pipe  -fPIC -felide-constructors -fno-rtti 
>-fno-exceptions   -fno-implicit-templates -fno-exceptions -fno-rtti 
>-DMYSQLD_NET_RETRY_COUNT=100 -MT sql_yacc.o -MD -MP -MF .deps/sql_yacc.Tpo 
>-c -o sql_yacc.o sql_yacc.cc
>c++: Internal error: Killed: 9 (program cc1plus)
>Please submit a full bug report.
>See http://gcc.gnu.org/bugs.html> for instructions.
>*** Error code 1
>1 error
>*** Error code 1
>1 error
>*** Error code 1
>1 error
>*** Error code 2
>1 error
>*** Error code 1
>
>Stop in /usr/ports/databases/mysql50-server.
>
>
>Thanks
>Len
>
>
>___
>freebsd-questions@freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

(no subject)

[Len Conrad]

FreeBSD 7.2 as ESXi virtual machine

after portsnap fetch update

cd /usr/ports/databases/mysql50-server

make configure

make

blah blah

mv -f .deps/ha_example.Tpo .deps/ha_example.Po
c++ -DEMBEDDED_LIBRARY -DMYSQL_SERVER  -DDEFAULT_MYSQL_HOME="\"/usr/local\""  
-DMYSQL_DATADIR="\"/var/db/mysql\""  -DSHAREDIR="\"/usr/local/share/mysql\"" 
-I. -I../include -I../bdb/build_unix  -I../innobase/include 
-I../innobase/include   -I../include -I../include  -I../sql -I../sql  
-I../sql/examples  -I../regex   -DDBUG_OFF -O2 -fno-strict-aliasing -pipe 
-fPIC -O2 -fno-strict-aliasing -pipe  -fPIC -felide-constructors -fno-rtti 
-fno-exceptions   -fno-implicit-templates -fno-exceptions -fno-rtti 
-DMYSQLD_NET_RETRY_COUNT=100 -MT ha_tina.o -MD -MP -MF .deps/ha_tina.Tpo -c 
-o ha_tina.o ha_tina.cc
mv -f .deps/ha_tina.Tpo .deps/ha_tina.Po
c++ -DEMBEDDED_LIBRARY -DMYSQL_SERVER  -DDEFAULT_MYSQL_HOME="\"/usr/local\""  
-DMYSQL_DATADIR="\"/var/db/mysql\""  -DSHAREDIR="\"/usr/local/share/mysql\"" 
-I. -I../include -I../bdb/build_unix  -I../innobase/include 
-I../innobase/include   -I../include -I../include  -I../sql -I../sql  
-I../sql/examples  -I../regex   -DDBUG_OFF -O2 -fno-strict-aliasing -pipe 
-fPIC -O2 -fno-strict-aliasing -pipe  -fPIC -felide-constructors -fno-rtti 
-fno-exceptions   -fno-implicit-templates -fno-exceptions -fno-rtti 
-DMYSQLD_NET_RETRY_COUNT=100 -MT sql_yacc.o -MD -MP -MF .deps/sql_yacc.Tpo 
-c -o sql_yacc.o sql_yacc.cc
c++: Internal error: Killed: 9 (program cc1plus)
Please submit a full bug report.
See http://gcc.gnu.org/bugs.html> for instructions.
*** Error code 1
1 error
*** Error code 1
1 error
*** Error code 1
1 error
*** Error code 2
1 error
*** Error code 1

Stop in /usr/ports/databases/mysql50-server.


Thanks
Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Hardware virtualization

[Len Conrad]

-- Original Message --
From: "Diego F. Arias R." 
Date:  Wed, 30 Dec 2009 16:24:24 -0500

>On Wed, Dec 30, 2009 at 4:06 PM, Mike Jeays  wrote:
>
>> I am about to buy a new desktop, and I want to make sure that hardware
>> virtualization is included. In one or two local computer stores, I get a
>> blank
>> look when I ask about this. Intel seems provide it on only certain chip
>> models
>> and they don't seem be very forthcoming, Perhaps it is better to buy an AMD
>> product?
>>
>> Any hints, please?
>> ___
>> freebsd-questions@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to "
>> freebsd-questions-unsubscr...@freebsd.org"
>>
>
>
>Hello:
>
>I like AMD because ALL their Athlon X2 and Phenom have it. Intel some models
>have it some ones dont. then you have to check first at intel page to be
>shure about.

http://en.wikipedia.org/wiki/Amd64#AMD64

Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: which IP+gateway for Freebsd guest VM in VMware workstation

[Len Conrad]

>>VMWare has lots of info how to set up the (Windows XP) VMWare Workstation 
>>networking side, but not much on setting up networking in the guest OS.
>>
>>I've tried NAT and bridging, no DHCP, and can't ping anything except the 
>>localhost IPs.
>>
>>XP ipconfig shows the fixed IP, plus 2 192.168.c.d IPs from VMnet1 and VMnet8.
>>
>>I'm sure this is really simple, but my experimentation has come up with zilch.
>
>Take a look here:
>http://www.freebsd.org/doc/en/books/handbook/config-network-setup.html

thanks, I've been setting up FreeBSD for 10 years, and have multimple FreeBSD 
VMs running in several ESXi hosts.

>The guest OS will have an em0 interface

it does.

> which is connected to
>a host interface VMnet1, VMnet8 or similar.

XP ipconfig shows:

Ethernet adapter VMware Network Adapter VMnet8:

Connection-specific DNS Suffix  . :
Description . . . . . . . . . . . : VMware Virtual Ethernet Adapter for 
VMnet8
Physical Address. . . . . . . . . : 00-50-56-C0-00-08
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.219.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :

Ethernet adapter VMware Network Adapter VMnet1:

Connection-specific DNS Suffix  . :
Description . . . . . . . . . . . : VMware Virtual Ethernet Adapter for 
VMnet1
Physical Address. . . . . . . . . : 00-50-56-C0-00-01
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.198.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :

The physical Ethernet adapter has a fixed public IP.  I have only one public IP 
from the ISP.  In the VMWare Virtual Network Editor, this i/f is listed as 
VNnet0, Type Bridged, Connected column is "-", and Subnet Address is "-"


> Actually the guest's
>networking configuration is simpler than the host's one.

yeah, right! :)  It's too simple for me. 


> You should
>configure the em interface with an appropriate IP address:
>1) Bridging: WinXP fixed IP and FreeBSD fixed IP
>for example, WinXP 192.168.10.100 and FreeBSD 192.168.10.101

I'd like to stay with bridged.

the XP fixed ip is a.b.c.99, and I set the em0 to a.b.c.98.
/etc/rc.d/netif restart
/etc/rc.d/routing restart

ifconfig shows em0 with .98 and correct broadcast IP, but "status: no carrier"


>2) host to host: WinXP 192.168.c.d and FreeBSD 192.168.c.x
>for example, WinXP 192.168.20.100 and FreeBSD 192.168.20.101
>
>3) NAT: WinXP 192.168.e.d and FreeBSD 192.168.e.x
>for example, WinXP 192.168.30.100 and FreeBSD 192.168.30.101

Just to get something going, I have tried NAT:

from xp ipfconfig above:

xp @ 192.168.219.1

the VMWare Virtual Network Editor shows the NAT network with gateway 
192.168.219.2, so I put that in /etc/rc.conf, and set the FreeBSD rc.conf IP to 
192.168.219.3.

/etc/rc.d/netif restart
/etc/rc.d/routing restart

and always get "status: no carrier"

xp can ping itself at  192.168.219.1, but can't ping .2 or .3

FreeBSD VM can't ping anything but itself.

>Keep in mind that using DHCP is much more easy as you don't have to
>search for the appropriate address yourself, the VMware's DHCP server
>will offer it. Using DHCP from the FreeBSD side is as easy as typing
>"dhclient em0".

I'd like to be able to ssh/ftp into the FreeBSD VM from Internet, so I'd prefer 
to stay away from DHCP for the FreeBSD VM networking.

Len




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

which IP+gateway for Freebsd guest VM in VMware workstation

[Len Conrad]

VMWare has lots of info how to set up the (Windows XP) VMWare Workstation 
networking side, but not much on setting up networking in the guest OS.

I've tried NAT and bridging, no DHCP, and can't ping anything except the 
localhost IPs.   

XP ipconfig shows the fixed IP, plus 2 192.168.c.d IPs from VMnet1 and VMnet8.  

I'm sure this is really simple, but my experimentation has come up with zilch.

Len



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Freebsd 7.2 port of "Postfix 2.7 Snapshot 20091209"

[Len Conrad]

Anybody know where to get this?

The fix reversing the order of black/white queries in postscreen is important 
for us.

thanks
Len




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: can't get a full fbsd 7.2 amd64 install

[Len Conrad]

>I could be mistaken, but that sounds like an awfully big /var and
>/usr. Are you sure this is a vanilla install that no one has touched?

the install is running off the i386/amd64 disc1 .iso.  /usr is with /usr/ports

Len





>-- randi
>
>
>
>On Sat, Dec 12, 2009 at 8:11 PM, Len Conrad  wrote:
>> At 11:50 AM 12/10/2009, you wrote:
>>>fbsd 7.2
>>>amd64
>>>"kernel developer" install
>>>
>>>Here's a successful install du
>>>
>>>du -d1 -h /
>>>2.0K/.snap
>>>2.0K/dev
>>>1.8G/usr
>>>1.6G/var
>>>1.7M/etc
>>>2.0K/cdrom
>>>2.0K/dist
>>>1.1M/bin
>>>206M/boot
>>>6.7M/lib
>>>396K/libexec
>>>2.0K/media
>>>2.0K/mnt
>>>2.0K/proc
>>>4.0M/rescue
>>> 42K/root
>>>4.3M/sbin
>>> 24K/tmp
>>>3.6G/  <<<<<<<<<<<<<
>>>
>>>here's what we're getting on another machine, way too little:
>>>
>>>du -h -d1 /
>>>2.0K/.snap
>>>2.0K/dev
>>>1.1G/usr
>>>238K/var
>>>1.7M/etc
>>>2.0K/cdrom
>>>2.0K/dist
>>>1.1M/bin
>>>411M/boot
>>>6.7M/lib
>>>396K/libexec
>>>2.0K/media
>>>2.0K/mnt
>>>2.0K/proc
>>>4.0M/rescue
>>> 10K/root
>>>4.3M/sbin
>>> 12K/tmp
>>>1.5G/ <<<<<<<<<<<<<
>>>
>>>and /usr is also missing 800 MB just after install.
>>>
>>>using 7.2 amd64 disc01, as forever.
>>>
>>>I ran sysinstall, post install config, and checked stuff, but still didn't 
>>>get, eg, anything in /usr/bin/
>>>
>>>comments?
>>>
>>>Could my client have chosen the wrong .iso?
>>
>> the amd64 .iso is verified as disc01 and we have the same partial install 
>> failure, with no install errors, on two machines, Dell 1850, with amd64 and 
>> i386.
>>
>> any ideas?
>>
>> Len
>>
>> ___
>> freebsd-questions@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
>>
>___
>freebsd-questions@freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

__
IMGate OpenSource Mail Firewall www.IMGate.net

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: can't get a full fbsd 7.2 amd64 install

[Len Conrad]

At 11:50 AM 12/10/2009, you wrote:
>fbsd 7.2
>amd64
>"kernel developer" install
>
>Here's a successful install du
>
>du -d1 -h /
>2.0K/.snap
>2.0K/dev
>1.8G/usr
>1.6G/var
>1.7M/etc
>2.0K/cdrom
>2.0K/dist
>1.1M/bin
>206M/boot
>6.7M/lib
>396K/libexec
>2.0K/media
>2.0K/mnt
>2.0K/proc
>4.0M/rescue
> 42K/root
>4.3M/sbin
> 24K/tmp
>3.6G/  <
>
>here's what we're getting on another machine, way too little:
>
>du -h -d1 /
>2.0K/.snap
>2.0K/dev
>1.1G/usr
>238K/var
>1.7M/etc
>2.0K/cdrom
>2.0K/dist
>1.1M/bin
>411M/boot
>6.7M/lib
>396K/libexec
>2.0K/media
>2.0K/mnt
>2.0K/proc
>4.0M/rescue
> 10K/root
>4.3M/sbin
> 12K/tmp
>1.5G/ <
>
>and /usr is also missing 800 MB just after install.
>
>using 7.2 amd64 disc01, as forever.
>
>I ran sysinstall, post install config, and checked stuff, but still didn't 
>get, eg, anything in /usr/bin/
>
>comments?
>
>Could my client have chosen the wrong .iso?  

the amd64 .iso is verified as disc01 and we have the same partial install 
failure, with no install errors, on two machines, Dell 1850, with amd64 and 
i386.

any ideas?

Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

can't get a full fbsd 7.2 amd64 install

[Len Conrad]

fbsd 7.2
amd64
"kernel developer" install

Here's a successful install du

du -d1 -h /
2.0K/.snap
2.0K/dev
1.8G/usr
1.6G/var
1.7M/etc
2.0K/cdrom
2.0K/dist
1.1M/bin
206M/boot
6.7M/lib
396K/libexec
2.0K/media
2.0K/mnt
2.0K/proc
4.0M/rescue
 42K/root
4.3M/sbin
 24K/tmp
3.6G/  <

here's what we're getting on another machine, way too little:

du -h -d1 /
2.0K/.snap
2.0K/dev
1.1G/usr
238K/var
1.7M/etc
2.0K/cdrom
2.0K/dist
1.1M/bin
411M/boot
6.7M/lib
396K/libexec
2.0K/media
2.0K/mnt
2.0K/proc
4.0M/rescue
 10K/root
4.3M/sbin
 12K/tmp
1.5G/ <

and /usr is also missing 800 MB just after install.

using 7.2 amd64 disc01, as forever.

I ran sysinstall, post install config, and checked stuff, but still didn't get, 
eg, anything in /usr/bin/

comments?

Could my client have chosen the wrong .iso?  

Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

where to find libintl.so.8

[Len Conrad]

FreeBSD  6.2-RELEASE FreeBSD 6.2-RELEASE #0

portsnap'd  today

running ver 1.2.8 of

rdiff-backup

which gets:

ImportError: Shared object "libintl.so.8" not found, required by "librsync.so.1"

thanks
Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

how to show "make configure" menu after initial make

[Len Conrad]

subsequent "make configure" simply uses the original menu choices with no 
re-display of the menu to change the options

Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

RE: DNS Question

[Len Conrad]

>> >All true, and I did not do a very good job of explaining it. My issue 
>> >was that we have requests to use a CNAME for the domain record. Such as 
>> >this.
>> >
>> >example.com CNAME otherdomain.com
>> >www.example.com CNAME otherdomain.com
>> >
>> >I was taught this was not good form
>> 
>> worse, it's illegal.
>
>
>how is this illegal?

CNAME rule: 

a node with a CNAME cannot contain any other records. 

for the node domain.tld:

domain.tld. soa ...
domain.tld. ns ...
domain.tld. cname otherdomain.tld.

this node has a CNAME and "other data", so it's illegal, no matter what you 
want to do, or what makes sense to you, or what is convenient for you.

Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: DNS Question

[Len Conrad]

>
>All true, and I did not do a very good job of explaining it. My issue 
>was that we have requests to use a CNAME for the domain record. Such as 
>this.
>
>example.com  CNAME  otherdomain.com
>www.example.com  CNAME   otherdomain.com
>
>I was taught this was not good form

worse, it's illegal.

, but allowed. I can deal with it. 
>But what of having a SOA record for example.com, no A or CNAME record 
>for the TLD example.com, only hosts such as www, ns1, ftp, etc.
>
>I tried it an it seems to work fine, but doesn't look proper to me. Then 
>again I remember when CNAME were considered evil.

CNAMEs are still evil, unless 
1) no other solution exists and 
2) the user knows how to use CNAMEs (rare).

Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: FW: DNS Question

[Len Conrad]

-- Original Message --
From: krad 
Date:  Fri, 23 Oct 2009 15:56:40 +0100

>2009/10/23 Sean Cavanaugh 
>
>>
>>
>>
>> > Date: Fri, 23 Oct 2009 08:30:08 -0400
>> > From: dave.l...@pixelhammer.com
>> > To: freebsd-questions@freebsd.org
>> > Subject: DNS Question
>> >
>> > Good morning.
>> >
>> > I have been asked by my co-workers and sales why I always create a A
>> > record for new domains we host instead of a CNAME.
>> >
>> > The issue I run into lately with some domains is that a client has a
>> > website with a industry host such as frank.relator.com and he wants to
>> > have DNS point www.frank.com to frank.relator.com with a CNAME. The
>> > client does not want an A record for frank.com.
>> >
>> > Somewhere, in a class far far away, I was taught a DNS zone had to have
>> > a A record to function properly. I can't seem to locate anything in the
>> > RFCs.
>> >
>> > Am I wrong?
>> >
>>
>>
>> I think you are confusing basics of DNS records. you are partially correct
>> in that a DNS zone needs an initial A record to be able to translate a name
>> to an IP, but there is nothing wrong about setting up a CNAME to point to a
>> record in a different zone instead. you just cannot do a zone that has a
>> CNAME only that does not at some point to a valid A record. CNAMEs are
>> forwarders only whereas A records are actual lookups.
>>
>> for proper way to set this up
>>
>> The A record would be assigned for the main name that you want to associate
>> to an IP address.
>> The CNAME record just relates a different name to that original name. this
>> allows you to change the IP address of the server and only have to update
>> the original A record instead of every DNS record for that server.
>>
>> for small number of vhosts, this would not really be an issue, but imagine
>> if you were hosting a couple hundred vhosts from a single IP and then had to
>> change that IP because you switched your ISP. It would take you a LONG time
>> to update them if they were all A records, but only a couple of seconds if
>> you had it properly set up as CNAME's
>>
>> www.bobshosting.comA 192.168.0.1
>> www.vhost1.com  CNAME  www.bobshosting.com.
>> www.vhost2.com  CNAME  www.bobshosting.com.
>> www.vhost3.com  CNAME  www.bobshosting.com.
>> www.vhost4.com  CNAME  www.bobshosting.com.
>>
>>
>>
>> -Sean
>>
>>
>>  ___
>> freebsd-questions@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to "
>> freebsd-questions-unsubscr...@freebsd.org"
>>
>
>I try to use CNAMES as much as possible, for one very good reason. If say I
>have web server with 1000 vhost on it. I have one A record for the server
>and all the cnames point at that A record. Now i need to change the ip of
>the server. I update the A record and add a reverse record and im done. IF I
>had done it your way with all A records I would now have to go and edit
>another 1000 records. Even worse if some of these domains are not under my
>control I have to go and liaise with customers, or other third parties, and
>it becomes a complete mess. The chances of me convincing them all and
>coordinated it correctly are minimal 8(

domains sharing records is better handled by $INCLUDE

$INCLUDE /path/db.ttl, which contains

$TTL 6h


$INCLUDE /path/db.ns, which contains

@ ns ns1.domain.tld.
@ ns ns2.domain.tld.

$INCLUDE /path/db.www, which contains

@   a ip.ad.re.ss
www a ip.ad.re.ss

etc.

Changing an include file changes all the zone files that include it, giving 
enormous leverage, while removing the extra query required to resolve a CNAME 
to canonical.

Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

FWD: is this Intel CPU ok for 7.2 AMD64?

[Len Conrad]

-- Original Message --
From:  "Len Conrad" 
Reply-To:  
Date:  Wed, 14 Oct 2009 22:48:26 +0200

the FreeBSD 6.2 i386 dmesg.boot shows:

CPU: Intel(R) Xeon(TM) CPU 3.60GHz (3591.25-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0xf41  Stepping = 1
  
Features=0xbfebfbff
  Features2=0x659d>
  AMD Features=0x2010
  Logical CPUs per core: 2
real memory  = 3220963328 (3071 MB)
avail memory = 3150913536 (3004 MB)
ACPI APIC Table: 
FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
 cpu0 (BSP): APIC ID:  0
 cpu1 (AP): APIC ID:  1
 cpu2 (AP): APIC ID:  6
 cpu3 (AP): APIC ID:  7
ioapic0: Changing APIC ID to 8
ioapic1: Changing APIC ID to 9
ioapic1: WARNING: intbase 32 != expected base 24
ioapic2: Changing APIC ID to 10
ioapic2: WARNING: intbase 64 != expected base 56
ioapic0  irqs 0-23 on motherboard
ioapic1  irqs 32-55 on motherboard
ioapic2  irqs 64-87 on motherboard

thanks,
Len

==

So, is there a definite, unique answer? 

Does it matter whether I run IA64 or AMD64 in the above Dell 1850?

Len



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

is this Intel CPU ok for 7.2 AMD64?

[Len Conrad]

the FreeBSD 6.2 i386 dmesg.boot shows:

CPU: Intel(R) Xeon(TM) CPU 3.60GHz (3591.25-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0xf41  Stepping = 1
  
Features=0xbfebfbff
  Features2=0x659d>
  AMD Features=0x2010
  Logical CPUs per core: 2
real memory  = 3220963328 (3071 MB)
avail memory = 3150913536 (3004 MB)
ACPI APIC Table: 
FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
 cpu0 (BSP): APIC ID:  0
 cpu1 (AP): APIC ID:  1
 cpu2 (AP): APIC ID:  6
 cpu3 (AP): APIC ID:  7
ioapic0: Changing APIC ID to 8
ioapic1: Changing APIC ID to 9
ioapic1: WARNING: intbase 32 != expected base 24
ioapic2: Changing APIC ID to 10
ioapic2: WARNING: intbase 64 != expected base 56
ioapic0  irqs 0-23 on motherboard
ioapic1  irqs 32-55 on motherboard
ioapic2  irqs 64-87 on motherboard

thanks,
Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

postfix/amavids/sa/etc in FreeBSD jail?

[Len Conrad]

is a FreeBSD jail enough of a virtualized OS to run a full filtering MX config 
setup exactly as on a native FreeBSD?

Len



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

adaptec 5805 and FreeBSD NAS

[Len Conrad]

We are considering building 12 x 2TB NAS system in an Intel storage server box 
with Adaptec 5805 SAS/SATA HBA.

Anybody have FreeBSD experience with 24TB (RAID6) and Adaptec 5805?

thanks
Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

amd64 and sysinstall weirdness

[Len Conrad]

Dell PE 1950

FreeBSD 7.2 amd64


boot from disc01 into sysinstall, do our regular setup, reboot, and df shows 
only / and /devfs.  f

stab has /usr and /var missing.

so we go into sysinstall, slices are correct:

Disk name:  mfid0  FDISK Partition Editor
DISK Geometry:  17688 cyls/255 heads/63 sectors = 284157720 sectors (138748MB)

Offset   Size(ST)End Name  PType   Desc  SubtypeFlags

 0 63 62- 12 unused0  
63   10474317   10474379  mfid0s1  8freebsd  165
  104743804192965   14667344  mfid0s2  8freebsd  165
  14667345   10474380   25141724  mfid0s3  8freebsd  165
  25141725  259015995  284157719  mfid0s4  8freebsd  165
 284157720   6376  284164095- 12 unused0


but labels:

 FreeBSD Disklabel Editor

Disk: mfid0 Partition name: mfid0s1 Free: 0 blocks (0MB)
Disk: mfid0 Partition name: mfid0s2 Free: 0 blocks (0MB)
Disk: mfid0 Partition name: mfid0s3 Free: 10474380 blocks (5114MB)
Disk: mfid0 Partition name: mfid0s4 Free: 259015995 blocks (123GB)

Part  Mount  Size Newfs   Part  Mount  Size Newfs
  -   -     -   -
ufsid/4a72b432c4 5114MB *
mfid0s2b  swap 2047MB SWAP

.. the /usr and /var mount points were "lost".  

fstab:

cat /etc/fstab
# DeviceMountpoint  FStype  Options DumpPass#
/dev/mfid0s2b   noneswapsw  0   0
/dev/ufsid/4a72bbc67db432c4a/   ufs rw  
1   1
/dev/acd0   /cdrom  cd9660  ro,noauto   0   0

we saw the /var and /usr filesystems were really there, so we added to fstab:

/dev/mfid0s3/usrufs rw  2   2
/dev/mfid0s4/varufs rw  2   2

and rebooted, all seems ok.

We went through this drill twice, and got the same results.

/var/run/dmesg:

mfid0:  on mfi0
mfid0: 138752MB (284164096 sectors) RAID volume '' is optimal

SMP: AP CPU #1 Launched!
SMP: AP CPU #2 Launched!
SMP: AP CPU #3 Launched!

GEOM_LABEL: Label for provider mfid0s1 is ufsid/4a72bbc67db432c4.
GEOM_LABEL: Label for provider mfid0s3 is ufsid/4a72bbc60412e6dd.
GEOM_LABEL: Label for provider mfid0s4 is ufsid/4a72bbc6e3898627.

Trying to mount root from ufs:/dev/ufsid/4a72bbc67db432c4a
GEOM_LABEL: Label ufsid/4a72bbc60412e6dd removed.
GEOM_LABEL: Label for provider mfid0s3 is ufsid/4a72bbc60412e6dd.
GEOM_LABEL: Label ufsid/4a72bbc6e3898627 removed.
GEOM_LABEL: Label for provider mfid0s4 is ufsid/4a72bbc6e3898627.
GEOM_LABEL: Label ufsid/4a72bbc60412e6dd removed.
GEOM_LABEL: Label ufsid/4a72bbc6e3898627 removed.

Anybody know why the sysintall labels and fstab aren't showing up the way we 
set them up in sysinstall?

thanks
Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: dump hangs on 7.1

[Len Conrad]

At 04:04 PM 7/12/2009, you wrote:
>On Sunday 12 July 2009 11:03:00 Len Conrad wrote:
>> >On Friday 10 July 2009 08:29:01 Len Conrad wrote:
>> >> FreeBSD 7.1-RELEASE #0: Thu Jan  1 14:37:25 UTC 2009
>> >> r...@logan.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  i386
>> >>
>> >> CPU: Intel(R) Xeon(R) CPU   E5420  @ 2.50GHz (2496.26-MHz
>> >> 686-class CPU) Origin = "GenuineIntel"  Id = 0x1067a  Stepping = 10
>> >>   AMD Features=0x2010
>> >>   AMD Features2=0x1
>> >>   Cores per package: 4
>> >> real memory  = 3484745728 (3323 MB)
>> >> avail memory = 3405537280 (3247 MB)
>> >> ACPI APIC Table: 
>> >> FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
>> >>  cpu0 (BSP): APIC ID:  0
>> >>  cpu1 (AP): APIC ID:  1
>> >>  cpu2 (AP): APIC ID:  2
>> >>  cpu3 (AP): APIC ID:  3
>> >>
>> >>
>> >> /sbin/dump -0uanL -f - / | ssh dump_ima...@xxx.net dd
>> >> of=/var/ftp/dump_images/mx1-root-test
>> >>
>> >> dump has completed only once. Several other dumps have all gotten under
>> >> way, target file is created and increases until the hang.
>> >>
>> >> CTRL-C gets back to shell,eg:
>> >>
>> >>   DUMP: Date of this level 0 dump: Fri Jul 10 10:25:33 2009
>> >>   DUMP: Date of last level 0 dump: the epoch
>> >>   DUMP: Dumping snapshot of /dev/da0s1d (/usr) to standard output
>> >>   DUMP: mapping (Pass I) [regular files]
>> >>   DUMP: mapping (Pass II) [directories]
>> >>   DUMP: estimated 1713942 tape blocks.
>> >>   DUMP: dumping (Pass III) [directories]
>> >>   DUMP: dumping (Pass IV) [regular files]
>> >> ^C  DUMP: Interrupt received.
>> >>   DUMP: Do you want to abort dump?: ("yes" or "no") Killed by signal 2.
>> >>   DUMP: Broken pipe
>> >>   DUMP: The ENTIRE dump is aborted.
>> >>
>> >> Hangs always in Pass IV
>> >
>> >What's the output ps -auwwx|grep dump at the time of the dump.
>>
>> when the dump hangs:
>>
>> ps auxww | grep dump
>>
>> root61360  0.0  0.0  3128  1168  p0  I+1:47PM   0:00.06 /sbin/dump
>> -0uanL -f - / (dump)
>>
>> root61361  0.0  0.1  5560  2768  p0  I+1:47PM   0:03.65 ssh
>> x...@xxx.net dd of=/var/ftp/dump_images/mx1-root-test
>>
>> root61364  0.0  0.0  3128  1528  p0  I+1:47PM   0:00.36 dump:
>> /dev/da0s1a: pass 4: 92.66% done, finished in 0:00 at Sun Jul 12 13:47:52
>> 2009 (dump)
>
>procstat -k 61364 please?

I ran it again, diff pid:

procstat -k 67765
  PIDTID COMM TDNAME   KSTACK   
67765 100159 dump -mi_switch sleepq_switch 
sleepq_catch_signals sleepq_wait_sig _sleep sbwait soreceive_generic soreceive 
soo_read dofileread kern_readv read syscall Xint0x80_syscall 

>Is the percentage always the same for the same disk?

no, it varies widely.  

>If you kill dd on the other side, does dump notice it?

yes, I kill dd on the target, and the dump shows:

  DUMP: dumping (Pass IV) [regular files]
Terminated
  DUMP: Broken pipe
  DUMP: The ENTIRE dump is aborted.

Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: dump hangs on 7.1

[Len Conrad]

>On Friday 10 July 2009 08:29:01 Len Conrad wrote:
>> FreeBSD 7.1-RELEASE #0: Thu Jan  1 14:37:25 UTC 2009
>> r...@logan.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  i386
>>
>> CPU: Intel(R) Xeon(R) CPU   E5420  @ 2.50GHz (2496.26-MHz 686-class
>> CPU) Origin = "GenuineIntel"  Id = 0x1067a  Stepping = 10
>>   AMD Features=0x2010
>>   AMD Features2=0x1
>>   Cores per package: 4
>> real memory  = 3484745728 (3323 MB)
>> avail memory = 3405537280 (3247 MB)
>> ACPI APIC Table: 
>> FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
>>  cpu0 (BSP): APIC ID:  0
>>  cpu1 (AP): APIC ID:  1
>>  cpu2 (AP): APIC ID:  2
>>  cpu3 (AP): APIC ID:  3
>>
>>
>> /sbin/dump -0uanL -f - / | ssh dump_ima...@xxx.net dd
>> of=/var/ftp/dump_images/mx1-root-test
>>
>> dump has completed only once. Several other dumps have all gotten under
>> way, target file is created and increases until the hang.
>>
>> CTRL-C gets back to shell,eg:
>>
>>   DUMP: Date of this level 0 dump: Fri Jul 10 10:25:33 2009
>>   DUMP: Date of last level 0 dump: the epoch
>>   DUMP: Dumping snapshot of /dev/da0s1d (/usr) to standard output
>>   DUMP: mapping (Pass I) [regular files]
>>   DUMP: mapping (Pass II) [directories]
>>   DUMP: estimated 1713942 tape blocks.
>>   DUMP: dumping (Pass III) [directories]
>>   DUMP: dumping (Pass IV) [regular files]
>> ^C  DUMP: Interrupt received.
>>   DUMP: Do you want to abort dump?: ("yes" or "no") Killed by signal 2.
>>   DUMP: Broken pipe
>>   DUMP: The ENTIRE dump is aborted.
>>
>> Hangs always in Pass IV
>
>What's the output ps -auwwx|grep dump at the time of the dump.

when the dump hangs:

ps auxww | grep dump

root61360  0.0  0.0  3128  1168  p0  I+1:47PM   0:00.06 /sbin/dump 
-0uanL -f - / (dump)

root61361  0.0  0.1  5560  2768  p0  I+1:47PM   0:03.65 ssh 
x...@xxx.net dd of=/var/ftp/dump_images/mx1-root-test

root61364  0.0  0.0  3128  1528  p0  I+1:47PM   0:00.36 dump: 
/dev/da0s1a: pass 4: 92.66% done, finished in 0:00 at Sun Jul 12 13:47:52 2009 
(dump)

root61365  0.0  0.0  3128  1184  p0  I+1:47PM   0:00.29 /sbin/dump 
-0uanL -f - / (dump)

root61366  0.0  0.0  3128  1184  p0  I+1:47PM   0:00.29 /sbin/dump 
-0uanL -f - / (dump)

root61367  0.0  0.0  3128  1184  p0  I+1:47PM   0:00.29 /sbin/dump 
-0uanL -f - / (dump)

root61382  0.0  0.0  1660   900  p1  R+1:48PM   0:00.00 grep dump



btw, with dump and dar failing, I tried rdiff-backup which succeeded.

Thanks
Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: dump hangs on 7.1

[Len Conrad]

At 11:29 AM 7/10/2009, you wrote:
>FreeBSD 7.1-RELEASE #0: Thu Jan  1 14:37:25 UTC 2009 
>r...@logan.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  i386
>
>CPU: Intel(R) Xeon(R) CPU   E5420  @ 2.50GHz (2496.26-MHz 686-class 
>CPU) 
>  Origin = "GenuineIntel"  Id = 0x1067a  Stepping = 10
>  AMD Features=0x2010
>  AMD Features2=0x1
>  Cores per package: 4
>real memory  = 3484745728 (3323 MB)
>avail memory = 3405537280 (3247 MB)
>ACPI APIC Table: 
>FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
> cpu0 (BSP): APIC ID:  0
> cpu1 (AP): APIC ID:  1
> cpu2 (AP): APIC ID:  2
> cpu3 (AP): APIC ID:  3
>
>
>/sbin/dump -0uanL -f - / | ssh dump_ima...@xxx.net dd 
>of=/var/ftp/dump_images/mx1-root-test
>
>dump has completed only once. Several other dumps have all gotten under way, 
>target file is created and increases until the hang.  
>
>CTRL-C gets back to shell,eg:
>
>  DUMP: Date of this level 0 dump: Fri Jul 10 10:25:33 2009
>  DUMP: Date of last level 0 dump: the epoch
>  DUMP: Dumping snapshot of /dev/da0s1d (/usr) to standard output
>  DUMP: mapping (Pass I) [regular files]
>  DUMP: mapping (Pass II) [directories]
>  DUMP: estimated 1713942 tape blocks.
>  DUMP: dumping (Pass III) [directories]
>  DUMP: dumping (Pass IV) [regular files]
>^C  DUMP: Interrupt received.
>  DUMP: Do you want to abort dump?: ("yes" or "no") Killed by signal 2.
>  DUMP: Broken pipe
>  DUMP: The ENTIRE dump is aborted.
>
>Hangs always in Pass IV
>
>Plenty of google hits for "dump hang freebsd 7.1" but I can't find one with a 
>solution.
>
>Len



More tests:

dump hangs, no errors, see above

dar hangs, no errors.

If, instead of a FreeBSD 7.0 remote target machine, I point dump and dar at a 
Red Hat Enterprise, then dump and dar don't hang, run to completion.

So it looks like the problem is on FreeBSD 7.0 machine.  

Any suggestions?

thanks
Len





___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

dump hangs on 7.1

[Len Conrad]

FreeBSD 7.1-RELEASE #0: Thu Jan  1 14:37:25 UTC 2009 
r...@logan.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  i386

CPU: Intel(R) Xeon(R) CPU   E5420  @ 2.50GHz (2496.26-MHz 686-class 
CPU) 
  Origin = "GenuineIntel"  Id = 0x1067a  Stepping = 10
  AMD Features=0x2010
  AMD Features2=0x1
  Cores per package: 4
real memory  = 3484745728 (3323 MB)
avail memory = 3405537280 (3247 MB)
ACPI APIC Table: 
FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
 cpu0 (BSP): APIC ID:  0
 cpu1 (AP): APIC ID:  1
 cpu2 (AP): APIC ID:  2
 cpu3 (AP): APIC ID:  3


/sbin/dump -0uanL -f - / | ssh dump_ima...@xxx.net dd 
of=/var/ftp/dump_images/mx1-root-test

dump has completed only once. Several other dumps have all gotten under way, 
target file is created and increases until the hang.  

CTRL-C gets back to shell,eg:

  DUMP: Date of this level 0 dump: Fri Jul 10 10:25:33 2009
  DUMP: Date of last level 0 dump: the epoch
  DUMP: Dumping snapshot of /dev/da0s1d (/usr) to standard output
  DUMP: mapping (Pass I) [regular files]
  DUMP: mapping (Pass II) [directories]
  DUMP: estimated 1713942 tape blocks.
  DUMP: dumping (Pass III) [directories]
  DUMP: dumping (Pass IV) [regular files]
^C  DUMP: Interrupt received.
  DUMP: Do you want to abort dump?: ("yes" or "no") Killed by signal 2.
  DUMP: Broken pipe
  DUMP: The ENTIRE dump is aborted.

Hangs always in Pass IV

Plenty of google hits for "dump hang freebsd 7.1" but I can't find one with a 
solution.

Len



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

FreeBSD/iSCSI intiator into EMC Clarion target

[Len Conrad]

uname -a

FreeBSD xxx 7.1-RELEASE FreeBSD 7.1-RELEASE #0

kldstat

Id Refs AddressSize Name
 15 0xc040 97f830   kernel
 21 0xc0d8 ff18 iscsi_initiator.ko
 31 0xc0d9 6a2c4acpi.ko


iscontrol doesn't have -V version and strings doesn't find anything that looks 
like a version.


iscontrol -d -v -t 192.168.78.5 
port = 3260
tags = 0
 maxluns = 0
 iqn = iqn.2005-01.il.ac.huji.cs:
  maxConnections = 1
maxRecvDataSegmentLength = 65536
maxXmitDataSegmentLength = 65536
  maxBurstLength = 131072
firstBurstLength = 65536
defaultTime2Wait = 0
  defaultTime2Retain = 0
   maxOutstandingR2T = 1
  errorRecoveryLevel = 0
targetPortalGroupTag = 0
headerDigest = None,CRC32C
  dataDigest = None,CRC32C
  initialR2T = 1
   immediateData = 1
  dataPDUInOrder = 1
 dataSequenceInOrder = 1
 sessionType = Normal
   targetAddress = (null)
 targetAlias = (null)
  targetName = (null)
   initiatorName = (null)
  initiatorAlias = (null)
  authMethod = None
  chapSecret = (null)
   chapIName = (null)
 tgtChapName = (null)
   tgtChapSecret = (null)
  tgttgtChallengeLen = 0
I-: cmd=0x3 len=301
SessionType=Discovery
InitiatorName=iqn.2005-01.il.ac.huji.cs::mr1..net
MaxBurstLength=131072
HeaderDigest=None,CRC32C
DataDigest=None,CRC32C
MaxRecvDataSegmentLength=65536
ErrorRecoveryLevel=0
DefaultTime2Wait=0
DefaultTime2Retain=0
DataPDUInOrder=Yes
DataSequenceInOrder=Yes
MaxOutstandingR2T=1
T-: cmd=0x23 len=281
TargetPortalGroupTag=0
TargetAlias=1576.b3
HeaderDigest=None
DataDigest=None
MaxRecvDataSegmentLength=65536
MaxBurstLength=Irrelevant
DefaultTime2Wait=0
DefaultTime2Retain=0
MaxOutstandingR2T=Irrelevant
DataPDUInOrder=Irrelevant
DataSequenceInOrder=Irrelevant
ErrorRecoveryLevel=0
I-: cmd=0x4 len=16
SendTargets=All
recvpdu: Socket is not connected
recvpdu failed
I-: cmd=0x6 len=0
recvpdu: Socket is not connected
recvpdu failed

==

iniatator does work into a FreeBSD/iscsi-target:


# iscontrol -c /etc/iscsi.conf -n target0

iscontrol[817]: running
iscontrol[817]: (pass3:iscsi0:0:0:0):  tagged openings now 0
iscontrol[817]: cam_open_btl: no passthrough device found at 2:0:1
iscontrol[817]: cam_open_btl: no passthrough device found at 2:0:2
iscontrol[817]: cam_open_btl: no passthrough device found at 2:0:3
iscontrol: supervise starting main loop

#ll /dev/is*
crw---  1 root  wheel0,  27 Jul  8 13:29 /dev/iscsi
crw---  1 root  wheel0, 103 Jul  8 13:29 /dev/iscsi0

#ll /dev/da*
crw-r-  1 root  operator0,  90 Jul  8 13:29 /dev/da0
crw-r-  1 root  operator0,  91 Jul  8 13:29 /dev/da0s1
crw-r-  1 root  operator0,  92 Jul  8 08:30 /dev/da0s1a
crw-r-  1 root  operator0,  93 Jul  8 13:30 /dev/da0s1b
crw-r-  1 root  operator0,  94 Jul  8 13:29 /dev/da0s1c
crw-r-  1 root  operator0,  95 Jul  8 08:29 /dev/da0s1d
crw-r-  1 root  operator0,  96 Jul  8 08:29 /dev/da0s1e
crw-r-  1 root  operator0, 105 Jul  8 13:29 /dev/da1
crw-r-  1 root  operator0, 106 Jul  8 13:29 /dev/da1s1
crw-r-  1 root  operator0, 107 Jul  8 13:29 /dev/da1s1c
crw-r-  1 root  operator0, 108 Jul  8 13:29 /dev/da1s1d

#mount /dev/da1s1 /iscsitest/

#df
Filesystem  1K-blocksUsedAvail Capacity  Mounted on
/dev/da0s1a  10154158  141662  9200164 2%/
devfs   1   10   100%/dev
/dev/da0s1d  20308398 1393604 17290124 7%/usr
/dev/da0s1e  40622090  292054 37080270 1%/var
/dev/da1s19907690 2990276  612480033%/iscsitest

=

Red Hat Enterprise iscsi initiator connects to EMC SAN target reliably.
If we can't get the FreeBSD iniatator working, we'll have to convert several 
machines from FreeBSD to Linux.

Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

RE: dell broadcom nic & fbsd 7.1 AMD64

[Len Conrad]

>> ifconfig_bce0="inet 10.2.17.8 netmask 255.255.0.0"
>>
>>>and output from:
>>>
>>>   dhclient bc0
>>
>> I ran that on a local machine and it hung up the interface, requiring a warm 
>> reboot.
>>
>> I'll see what happens with my client's machine.
>>
>
>I assume you substituted the correct interface name? (bce0 in place of bc0)

yes, sorry, bc was my mistake, rc.conf has/always had

ifconfig_bce0="inet 10.2.17.8 netmask 255.255.0.0"

We are thinking about dropping back to 7.1 i386 (and losing the 600 MB RAM) or 
up to 7.2.

We have several Dell 1950/2950 with fbsd 7.0 and 7.1 that have had no problems 
with Broadcom.

Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: dell broadcom nic & fbsd 7.1 AMD64

[Len Conrad]

>> Dell PE1950 III
>>
>> frebsd 7.1 AMD64 (to get support of full 4 GB RAM)
>>
>> After fresh 7.1 install, and boot, ifconfig shows bc0 active and 1000 
>> Mb/sec, but cannot ping anything.
>>
>> replaced cables, tried the other bc nic, nothing.
>>
>> Linux in 3 other same machines works fine.
>>
>
>Could you paste the output of the following:
>
>   cat /etc/rc.conf | grep bc0

sorry, is bce not bc, 

ifconfig_bce0="inet 10.2.17.8 netmask 255.255.0.0"

>and output from:
>
>   dhclient bc0

I ran that on a local machine and it hung up the interface, requiring a warm 
reboot.

I'll see what happens with my client's machine.

Len

>
>
>-- 
>Glen Barber
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

dell broadcom nic & fbsd 7.1 AMD64

[Len Conrad]

Dell PE1950 III 

frebsd 7.1 AMD64 (to get support of full 4 GB RAM)

After fresh 7.1 install, and boot, ifconfig shows bc0 active and 1000 Mb/sec, 
but cannot ping anything. 

replaced cables, tried the other bc nic, nothing.

Linux in 3 other same machines works fine.

suggestions?

Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

FreeBSD 7.1 as client into EMC Clarlion CX4?

[Len Conrad]

EMC says they don't support FreeBSD.

Anybody have recent experience?

Which version of FreBSD? 

Which 4 Gbit fiber-channel cards?

Going into the fiber channel 4 Gb/s optical ports with "FCP SCSI-3" protocol?

Going into the Ethernet 1 Gb/s copper ports? ie, FreeBSD/iSCSI Initiator into 
CX4 iSCSI target?

We will have CX4 also "fronted" with a Cisco 9124.  What about FreeBSD 
connectivity (card/drivers) for talking to 9124? 

thanks,
Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

4 GB RAM hardware but only 3.4 GB real/avail

[Len Conrad]

I'm sure this has been answered but I can't Google it.

Where's the 600 MB gone to?

Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

(no subject)

[Len Conrad]

We need to print a line when the 3rd field (with trailing ";" delimiter) is, 
eg, exactly 5 lower case characters

awk ' $3 ~ /^[a-z]{5,5};$/ {print $0} ' file

... doesn't work.  

Suggestions?

thanks
Len 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

(no subject)

[Len Conrad]

We need to print a line when the 3rd field (with trailing ";" delimiter) is, 
eg, exactly 5 lower case characters

awk ' $3 ~ /^[a-z]{5,5};$/ {print $0} ' file 

... doesn't work.  

Suggestions?

thanks
Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

SQLgrey not happy

[Len Conrad]

Trying to install everything via pkgs, but it messed up.

fbsd 7.1

SQLgrey 1.7.6 installed as pkg_add

p5-DBD-mysql installed as:

pkg_add -r 
ftp://ftp4.freebsd.org/pub/FreeBSD/ports/i386/packages-8-current/All/p5-DBD-mysql-4.010.tbz

starting sqlgrey:

Apr  7 08:25:22 mx1 sqlgrey: Process Backgrounded 
Apr  7 08:25:22 mx1 sqlgrey: 2009/04/07-08:25:22 sqlgrey (type 
Net::Server::Multiplex) starting! pid(73878) 
Apr  7 08:25:22 mx1 sqlgrey: Binding to TCP port 2501 on host localhost  
Apr  7 08:25:22 mx1 sqlgrey: Setting gid to "1001 1001" 

Apr  7 08:25:22 mx1 sqlgrey: Setting uid to "1003" 

Apr  7 08:25:22 mx1 sqlgrey: fatal: Can't locate loadable object for module 
DBD::mysql in @INC (@INC contains: /usr/local/lib/perl5/5.8.8/BSDPAN 
/usr/local/lib/perl5/site_perl/5.8.8/mach /usr/local/lib/perl5/site_perl/5.8.8 
/usr/local/lib/perl5/site_perl /usr/local/lib/perl5/5.8.8/mach 
/usr/local/lib/perl5/5.8.8 .) at (eval 11) line 3 

Apr  7 08:25:22 mx1 sqlgrey: fatal: Can't locate loadable object for module 
DBD::mysql in @INC (@INC contains: /usr/local/lib/perl5/5.8.8/BSDPAN 
/usr/local/lib/perl5/site_perl/5.8.8/mach /usr/local/lib/perl5/site_perl/5.8.8 
/usr/local/lib/perl5/site_perl /usr/local/lib/perl5/5.8.8/mach 
/usr/local/lib/perl5/5.8.8 .) at (eval 11) line 3 Compilation failed in require 
at (eval 11) line 3. 

Apr  7 08:25:22 mx1 sqlgrey: fatal: install_driver(MySQL) failed: Can't locate 
loadable object for module DBD::mysql in @INC (@INC contains: 
/usr/local/lib/perl5/5.8.8/BSDPAN /usr/local/lib/perl5/site_perl/5.8.8/mach 
/usr/local/lib/perl5/site_perl/5.8.8 /usr/local/lib/perl5/site_perl 
/usr/local/lib/perl5/5.8.8/mach /usr/local/lib/perl5/5.8.8 .) at (eval 11) line 
3 Compilation failed in require at (eval 11) line 3. Perhaps a module that 
DBD::MySQL requires hasn't been fully installed  at /usr/local/sbin/sqlgrey 
line 814 

pkg_info shows perl-5.8.8_1. 


What usually works when the pkg installs fail is to install via make install in 
the ports tree.  After deleting the sqlgrey and p5-DBD-mysql-4.010 pkgs, I 
make'd both them in the ports tree, then get this:

Apr  7 08:43:43 mx1 sqlgrey: Process Backgrounded 

Apr  7 08:43:43 mx1 sqlgrey: 2009/04/07-08:43:43 sqlgrey (type 
Net::Server::Multiplex) starting! pid(80696) 

Apr  7 08:43:43 mx1 sqlgrey: Binding to TCP port 2501 on host localhost  

Apr  7 08:43:43 mx1 sqlgrey: Setting gid to "1001 1001" 

Apr  7 08:43:43 mx1 sqlgrey: Setting uid to "1003" 

Apr  7 08:43:43 mx1 sqlgrey: fatal: Can't locate object method "driver" via 
package "DBD::MySQL" at /usr/local/lib/perl5/site_perl/5.8.8/mach/DBI.pm line 
787. 

Apr  7 08:43:43 mx1 sqlgrey: fatal: DBD::MySQL initialisation failed: Can't 
locate object method "driver" via package "DBD::MySQL" at 
/usr/local/lib/perl5/site_perl/5.8.8/mach/DBI.pm line 787.  Perhaps the 
capitalization of DBD 'MySQL' isn't right. at /usr/local/sbin/sqlgrey line 814 

Suggestions?

Thanks
Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Feedback on FreeBSD 7.1/fiber channel into EMC SAN?

[Len Conrad]

I would appreciate any comments from experience with this config.

Which specific fiber channel card have you had success?

Thanks
Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

QLogic 2460 driver ?

[Len Conrad]

Is there one?

thanks
Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

RTL8201 not explicitly in 7.1 / 2nd POSTING

[Len Conrad]

A client wants to buy some TigerDirect/VisionMan 1U's with this mobo:

http://www.biostar-usa.com/mbdetails.asp?model=P4M900%20MICRO%20775

RTL8201 PHY Ethernet

http://www.freebsd.org/releases/7.1R/hardware.html

... shows only RTL81xx

has anybody got RTL8201 working with FreeBSD 7.1?

thanks,
Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

RTL8201 not explicitly in 7.1 supported hardware

[Len Conrad]

A client wants to buy some TigerDirect/VisionMan 1U's with this mobo:

http://www.biostar-usa.com/mbdetails.asp?model=P4M900%20MICRO%20775

RTL8201 PHY Ethernet

http://www.freebsd.org/releases/7.1R/hardware.html

... shows only RTL81xx

has anybody got RTL8201 working with FreeBSD 7.1, 7.0?

thanks,
Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: Dell 2900 invalid partition table

[Len Conrad]

>> freebsd 7.1
>> 
>> Dell 2900, perc 6/i controller with 4 SATA disks in RAID1.
>> 
>> We get all the through the disc1 install, reboot,
>> 
>> arrive up to 
>> 
>> "Press  for remote access setup  within 5 secs "
>> 
>> then die with
>> 
>> "Invalid partition table"
>> 
>> We had RAID5, same problem, switch to RAID1.
>> 
>> suggestions?
>
>Is your BIOS set to boot from the right device - the raid and
>not the one of the disks in it???
>

Boot sequence says "1. drive c:"

controller disk setup shows RAID1 ready.

I've looked everywhere to see if I can point the boot at RAID1.

Thanks,
Len





___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Dell 2900 invalid partition table

[Len Conrad]

freebsd 7.1

Dell 2900, perc 6/i controller with 4 SATA disks in RAID1.

We get all the through the disc1 install, reboot,

arrive up to 

"Press  for remote access setup  within 5 secs "

then die with

"Invalid partition table"

We had RAID5, same problem, switch to RAID1.

suggestions?

Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

How's it going with 7.1?

[Len Conrad]

Any feedback?  Can't find much in fbsd-questions.

I have partner who said 7.0 tcp/ip was much slower for his VPN nets than 6.4. 
Is that fixed in 7.1.

thanks,
Len




__
IMGate OpenSource Mail Firewall www.IMGate.net

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

help with sed and tick marks

[Len Conrad]

A string in a file contains

('n...@domain.net'',

... where and we want to remove the extra tick mark, to have:

('n...@domain.net',

iow, replace 

net'' 

with 

net'

We've tried many combinations with sed, but failed.

Suggestions?

thanks,
Len



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

what else is needed to make ftp passive work

[Len Conrad]

two machines on the same private network.  

ftp  10.0.0.24
Connected to 10.0.0.24.
220 mx1.fairhope.net FTP server (Version 6.00LS) ready.
Name (10.0.0.24:username): 
331 Password required for username.
Password:
230 User username logged in.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> ls
229 Entering Extended Passive Mode (|||64341|)

at this point, there is a long delay, that eventually completes:

200 EPRT command successful.
150 Opening ASCII mode data connection for '/bin/ls'

... and the rest of the ftp session runs fast.

on the ftp server, if we "ipfw disable firewall", the ftp session runs without 
delay.

in hosts file, both machines have both of their records, so we don't think the 
delay is query for PTR of either IP.

our ipfw.rules:

# stateful
$IPF 50 check-state
$IPF 60 allow tcp  from any to any established 
$IPF 70 allow all  from any to any out keep-state
$IPF 80 allow icmp from any to any

# open well-known ports

# FTP
$IPF 120 allow tcp from any to any 20 in
$IPF 121 allow tcp from any to any 20 out
$IPF 122 allow tcp from any to any 21 in
$IPF 123 allow tcp from any to any 21 out

In inetd.conf, we've added "-l -l -d" but don't get any ftpd debug info written 
to /var/log/messages or /var/log/xferlog or dmesg system buffer.

So what else is needed inf our ifpw.rules for the ftpd params to get the switch 
to Extended Passive Mode to run quickly?

thanks,
Len




__
IMGate OpenSource Mail Firewall www.IMGate.net

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

help with AWk

[Len Conrad]

The logic desired if

If IP has no PTR, print "PTR_NUL", else print the PTR.


dig +short -x 1.2.3.4 | awk '{if ( $0 == "" ) {print "PTR_NUL" } else {print $0 
} }'

... works if PTR exist, but if no PTR, PTR_NUL doesn't print.

thanks
Len





__
IMGate OpenSource Mail Firewall www.IMGate.net

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

can't svn spamaassin trunk

[Len Conrad]

FreeBSD 6.2-RELEASE

Registering installation for subversion-1.4.0_1

svn checkout http://svn.apache.org/repos/asf/spamassassin/trunk 
spamassassin-trunk
/libexec/ld-elf.so.1: /usr/lib/libkrb5.so: Undefined symbol 
"initialize_asn1_error_table_r"

did a portsnap, but no change

Seem to be lots of hits on google, nothing really helpful.

how to fix?

thanks,
Len



__
IMGate OpenSource Mail Firewall www.IMGate.net

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: InstallJammer on Fbsd 7.0 ?

[Len Conrad]

>> 
>> Install miniarc.tcl 
>> /usr/local/src/installkitsrc/installkit-1.2.6/FreeBSD-7-x86/lib/miniarc0.1/miniarc.tcl
>> Install pkgIndex.tcl 
>> /usr/local/src/installkitsrc/installkit-1.2.6/FreeBSD-7-x86/lib/miniarc0.1
>> Installing header files in 
>> /usr/local/src/installkitsrc/installkit-1.2.6/FreeBSD-7-x86/include
>> "Makefile.shared", line 2: Need an operator
>> "Makefile.shared", line 3: Need an operator
>> "Makefile.shared", line 4: Need an operator
>> "Makefile.shared", line 59: Need an operator
>> make: fatal errors encountered -- cannot continue
>> "Makefile.shared", line 2: Need an operator
>> "Makefile.shared", line 3: Need an operator
>> "Makefile.shared", line 4: Need an operator
>> "Makefile.shared", line 59: Need an operator
>> make: fatal errors encountered -- cannot continue
>
>Sounds like the Makefiles require gmake, and you ran plain make instead
>of gmake this time.

no, I ran gmake the first time, and tried again with gmake, results as above.

the developer says he's compiled on 4,5,6 and will try to get 7 done next week.

thanks
Len




>-- 
>Dan Nelson
>[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: InstallJammer on Fbsd 7.0 ?

[Len Conrad]

>> Anybody got this running on FreeBSD 7.0?
>>
>> http://www.installjammer.com/
>>
>> installjammer-1.2.9.tar.gz
>>
>> ./installjammer
>>
>> Could not find an installkit for your platform 'FreeBSD-7-x86'.
>> You must modify this script and define a platform at the top.
>>
>> ==
>>
>> changed installjammer:
>>
>> PLATFORM="FreeBSD-x86"
>>
>> ./installjammer
>> /libexec/ld-elf.so.1: Shared object "libc.so.6" not found, required by 
>> "installkit"
>>
>> I grabbed installkit1.1.tar.gz but not clear if/how one can compile jammer 
>> for FreeBSD 7. 
>
>Installing misc/compat6x would be a good start.  It would get you that
>library, at least.
>
>To be honest, I wouldn't trust an install package that I didn't have
>the source for...

the source is here, I'm trying with 1.2.6

http://downloads.installjammer.com/installkit/src/installkit-1.2.6.tar.gz

./configure
gmake

fails with

rm -f libcraplzma0.1.so
ld -Bshareable -x -o libcraplzma0.1.so crapLzma.o CRC.o Alloc.o String.o 
StringConvert.o OutBuffer.o 
FileStreams.o StreamUtils.o LZInWindow.o LZMAEncoder.o RangeCoderBit.o 
C_FileIO.o -lsupc++ -static-libgcc 
-L/usr/local/src/installkitsrc/installkit-1.2.6/FreeBSD-7-x86/lib 
-L/usr/local/src/installkitsrc/installkit-1.2.6/FreeBSD-7-x86/lib -ltclstub8.4
ld: unrecognized -a option `tic-libgcc'
*** Error code 1

Stop in 
/usr/local/src/installkitsrc/installkit-1.2.6/FreeBSD-7-x86/build/craplzma.
rm -f libcraplzma0.1.so
ld -Bshareable -x -o libcraplzma0.1.so crapLzma.o CRC.o Alloc.o String.o 
StringConvert.o OutBuffer.o FileStreams.o StreamUtils.o LZInWindow.o 
LZMAEncoder.o RangeCoderBit.o C_FileIO.o -lsupc++ -static-libgcc 
-L/usr/local/src/installkitsrc/installkit-1.2.6/FreeBSD-7-x86/lib 
-L/usr/local/src/installkitsrc/installkit-1.2.6/FreeBSD-7-x86/lib -ltclstub8.4
ld: unrecognized -a option `tic-libgcc'
*** Error code 1

Stop in 
/usr/local/src/installkitsrc/installkit-1.2.6/FreeBSD-7-x86/build/craplzma.
gmake: *** [craplzma] Error 1

advice was "Makefile, and in the TARGETS list, remove the "craplzma"", 

done but:

Install miniarc.tcl 
/usr/local/src/installkitsrc/installkit-1.2.6/FreeBSD-7-x86/lib/miniarc0.1/miniarc.tcl
Install pkgIndex.tcl 
/usr/local/src/installkitsrc/installkit-1.2.6/FreeBSD-7-x86/lib/miniarc0.1
Installing header files in 
/usr/local/src/installkitsrc/installkit-1.2.6/FreeBSD-7-x86/include
"Makefile.shared", line 2: Need an operator
"Makefile.shared", line 3: Need an operator
"Makefile.shared", line 4: Need an operator
"Makefile.shared", line 59: Need an operator
make: fatal errors encountered -- cannot continue
"Makefile.shared", line 2: Need an operator
"Makefile.shared", line 3: Need an operator
"Makefile.shared", line 4: Need an operator
"Makefile.shared", line 59: Need an operator
make: fatal errors encountered -- cannot continue





__
www.IMGate.net IMGate Mail Firewall

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: InstallJammer on Fbsd 7.0 ?

[Len Conrad]

>> Anybody got this running on FreeBSD 7.0?
>>
>> http://www.installjammer.com/
>>
>> installjammer-1.2.9.tar.gz
>>
>> ./installjammer
>>
>> Could not find an installkit for your platform 'FreeBSD-7-x86'.
>> You must modify this script and define a platform at the top.
>>
>> ==
>>
>> changed installjammer:
>>
>> PLATFORM="FreeBSD-x86"
>>
>> ./installjammer
>> /libexec/ld-elf.so.1: Shared object "libc.so.6" not found, required by 
>> "installkit"
>>
>> I grabbed installkit1.1.tar.gz but not clear if/how one can compile jammer 
>> for FreeBSD 7. 
>
>Installing misc/compat6x would be a good start.  It would get you that
>library, at least.
>
>To be honest, I wouldn't trust an install package that I didn't have
>the source for...

>you'

__
www.IMGate.net IMGate Mail Firewall

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

InstallJammer on Fbsd 7.0 ?

[Len Conrad]

Anybody got this running on FreeBSD 7.0?

http://www.installjammer.com/

installjammer-1.2.9.tar.gz

./installjammer

Could not find an installkit for your platform 'FreeBSD-7-x86'.
You must modify this script and define a platform at the top.

==

changed installjammer:

PLATFORM="FreeBSD-x86"

./installjammer
/libexec/ld-elf.so.1: Shared object "libc.so.6" not found, required by 
"installkit"

I grabbed installkit1.1.tar.gz but not clear if/how one can compile jammer for 
FreeBSD 7. 



Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: ftpd and sshd logging of domain names

[Len Conrad]

> with -ll, ftpd still logs failures as auth.log as
> same in ftpd.log
> [The IPs] they are not logged.

I did the three steps I mentioned and have failures with IPs
logged in /var/log/ftpd.log, for example:

connection from 79.165.190.70 (79.165.190.70)
FTP LOGIN FAILED FROM 79.165.190.70
FTP LOGIN FAILED FROM 79.165.190.70, Administrateur
repeated login failures from 79.165.190.70


... because the IP has no PTR


connection from projectvibe.net (205.234.98.200)
FTP LOGIN FAILED FROM projectvibe.net
FTP LOGIN FAILED FROM projectvibe.net, Administrator


IP has PTR, whose domain name is logged.


But you're right, in the second example, the host name is logged,
not the IP, but the IP is always logged in the "connection from"
lines.


"connection from" not the fault we are trying to block reactively.


Did you have any luck parsing the mailing list's archive?


no, neither in my personal archives, nor through google.

thanks
Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: ftpd and sshd logging of domain names

[Len Conrad]

At least for ftpd I think there is a solution:

1. Edit /etc/inetd.conf

ftp stream  tcp nowait  root/usr/libexec/ftpd 
 ftpd -ll
ftp stream  tcp6nowait  root/usr/libexec/ftpd 
 ftpd -ll


with -ll, ftpd still logs failures as auth.log as

Aug 24 17:05:30 mx1 ftpd[1625]: FTP LOGIN FAILED FROM domain.tld, user





   The flags -ll enable extended logging.

2. Edit /etc/syslog.conf:

!ftpd
*.* /var/log/ftpd.log

3. Create the log file

# touch /var/log/ftpd.log


same in ftpd.log



The IPs are being logged in the log file.


they are not logged.


 I'm sure SSH
allows something similar. If I remember correctly, this
has recently been discussed at this list, maybe the archive
brings up some helping informations for you.


thanks, I'll look.

like everybody else, we are getting hammered by brute force attacks.

thanks
Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

ftpd and sshd logging of domain names

[Len Conrad]

Are there are any flags or tricks to get these two daemons to log IP 
addresses of failed login attempts, rather than PTR hostnames?


man ftpd
man sshd

... show nothing, afaics.

thanks
Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: PERL plumbers?

[Len Conrad]

--On Monday, August 18, 2008 13:23:43 -0500 Len Conrad 
<[EMAIL PROTECTED]> wrote:



fbsd 4.11

perl 5.8.8 installed by pkg_add



sorry, perl 5.8.5


postgrey 1.32

use.perl port

This machine has been running great for a week.  Monday morning, postgrey was
stoppedand wouldn't start.

syslog:

Aug 18 14:20:35 mx1 postgrey[73387]: FATAL: ERROR: can't create DB
environment: No such file or directory (dbdir: /var/db/postgrey uid/gid:
1003,1003)

user:group 1003:1003 is postgrey:postgrey

but:

ll /var/db/postgrey/
total 1078288
-rw---  1 postgrey  postgrey  -   10485684 Aug  8 01:06 log.01
-rw---  1 postgrey  postgrey  - 1082490880 Aug 17 08:36 postgrey.db
-rw---  1 postgrey  postgrey  -  0 Dec  8  2006 postgrey.lock
-rw---  1 postgrey  postgrey  -   10862592 Aug 17 08:36
postgrey_clients.db

It seems that some PERL path has gone wrong

strace postgrey --inet=10023

.. show a lot of file open failures.

open("/usr/local/lib/perl5/site_perl/5.8.5/mach/Sys/Syslog.pm", O_RDONLY) =
-1 ENOENT (No such file or directory)

mx1# find /usr/local -iname "Syslog.pm"
/usr/local/lib/perl5/5.8.2/mach/Sys/Syslog.pm
/usr/local/lib/perl5/site_perl/5.8.2/mach/Unix/Syslog.pm
/usr/local/lib/perl5/5.8.5/mach/Sys/Syslog.pm

mx1# find /usr/local -iname "FileHandle.pm"
/usr/local/lib/perl5/5.8.2/FileHandle.pm
/usr/local/lib/perl5/5.8.5/FileHandle.pm


For an earlier, similar problem on this machine, we were advised to make this
link,

mx1# ll /usr/bin/perl
lrwxr-xr-x  1 root  wheel  - 19 Aug 18 06:14 /usr/bin/perl@ ->
/usr/local/bin/perl


Whoever gave you this advice was wrong.  A symlink should already 
exist for perl:

# ls -lsa /usr/bin/perl
0 lrwxr-xr-x  1 root  wheel  24 Feb 20 12:23 /usr/bin/perl -> 
/usr/local/bin/perl5.8.8


Note that it doesn't point to /usr/local/bin/perl


How do I tell PERL and PERL apps where to find the stuff?


@INC


?

I deleted perl5.8.2 and 5.5 pkgs, the re-installed 5.8.5 pkg



Try running the perl-after-upgrade script:
# which perl-after-upgrade
/usr/local/bin/perl-after-upgrade


not delivered in the perl5.8.5 pkg, but I found a copy.  gives no errors:

Fixed 28 packages (316 files moved, 0 files modified)
Skipped 41 packages

still no success in getting postgrey to start.

in fact, PERL does finally find files, just after looking in about 10 
directories, from strace:


stat("/usr/local/lib/perl5/site_perl/5.8.5/mach/File/Spec.pmc", 
0xbfbff090) = -1 ENOENT (No such file or directory)
open("/usr/local/lib/perl5/site_perl/5.8.5/mach/File/Spec.pm", 
O_RDONLY) = -1 ENOENT (No such file or directory)
stat("/usr/local/lib/perl5/site_perl/5.8.5/File/Spec.pmc", 
0xbfbff090) = -1 ENOENT (No such file or directory)
open("/usr/local/lib/perl5/site_perl/5.8.5/File/Spec.pm", O_RDONLY) = 
-1 ENOENT (No such file or directory)
stat("/usr/local/lib/perl5/site_perl/File/Spec.pmc", 0xbfbff090) = -1 
ENOENT (No such file or directory)
open("/usr/local/lib/perl5/site_perl/File/Spec.pm", O_RDONLY) = -1 
ENOENT (No such file or directory)
stat("/usr/local/lib/perl5/5.8.5/BSDPAN/File/Spec.pmc", 0xbfbff090) = 
-1 ENOENT (No such file or directory)
open("/usr/local/lib/perl5/5.8.5/BSDPAN/File/Spec.pm", O_RDONLY) = -1 
ENOENT (No such file or directory)
stat("/usr/local/lib/perl5/5.8.5/mach/File/Spec.pmc", 0xbfbff090) = 
-1 ENOENT (No such file or directory)
open("/usr/local/lib/perl5/5.8.5/mach/File/Spec.pm", O_RDONLY) = -1 
ENOENT (No such file or directory)
stat("/usr/local/lib/perl5/5.8.5/File/Spec.pmc", 0xbfbff090) = -1 
ENOENT (No such file or directory)

open("/usr/local/lib/perl5/5.8.5/File/Spec.pm", O_RDONLY) = 5

then:


strace -o /var/tmp/strace-pg.txt /usr/local/bin/postgrey --inet=10023 
--dbdir=/var/db/postgrey --
user=postgrey --group=postgrey 
--whitelist-clients=/etc/postfix/mta_clients_pg_except 
--whitelist-recipients=/etc/postfix/to_recipients_pg_except


2008/08/19-04:50:37 postgrey (type Net::Server::Multiplex) starting! pid(29439)
Binding to TCP port 10023 on host localhost
Setting gid to "1003 1003"
Setting uid to "1003"
ERROR: can't create DB environment: No such file or directory (dbdir: 
/var/db/postgrey uid/gid: 1003,1003)


ll /var/db/postgrey/*
-rw---  1 postgrey  postgrey  -   10485684 Aug  8 01:06 
/var/db/postgrey/log.01
-rw---  1 postgrey  postgrey  - 1082490880 Aug 17 08:36 
/var/db/postgrey/postgrey.db
-rw---  1 postgrey  postgrey  -  0 Dec  8  2006 
/var/db/postgrey/postgrey.lock
-rw---  1 postgrey  postgrey  -   10862592 Aug 17 08:36 
/var/db/postgrey/postgrey_clients.db




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

PERL plumbers?

[Len Conrad]

fbsd 4.11

perl 5.8.8 installed by pkg_add

postgrey 1.32

use.perl port

This machine has been running great for a week.  Monday morning, 
postgrey was stoppedand wouldn't start.


syslog:

Aug 18 14:20:35 mx1 postgrey[73387]: FATAL: ERROR: can't create DB 
environment: No such file or directory (dbdir: /var/db/postgrey 
uid/gid: 1003,1003)


user:group 1003:1003 is postgrey:postgrey

but:

ll /var/db/postgrey/
total 1078288
-rw---  1 postgrey  postgrey  -   10485684 Aug  8 01:06 log.01
-rw---  1 postgrey  postgrey  - 1082490880 Aug 17 08:36 postgrey.db
-rw---  1 postgrey  postgrey  -  0 Dec  8  2006 postgrey.lock
-rw---  1 postgrey  postgrey  -   10862592 Aug 17 08:36 postgrey_clients.db

It seems that some PERL path has gone wrong

strace postgrey --inet=10023

.. show a lot of file open failures.

open("/usr/local/lib/perl5/site_perl/5.8.5/mach/Sys/Syslog.pm", 
O_RDONLY) = -1 ENOENT (No such file or directory)


mx1# find /usr/local -iname "Syslog.pm"
/usr/local/lib/perl5/5.8.2/mach/Sys/Syslog.pm
/usr/local/lib/perl5/site_perl/5.8.2/mach/Unix/Syslog.pm
/usr/local/lib/perl5/5.8.5/mach/Sys/Syslog.pm

mx1# find /usr/local -iname "FileHandle.pm"
/usr/local/lib/perl5/5.8.2/FileHandle.pm
/usr/local/lib/perl5/5.8.5/FileHandle.pm


For an earlier, similar problem on this machine, we were advised to 
make this link,


mx1# ll /usr/bin/perl
lrwxr-xr-x  1 root  wheel  - 19 Aug 18 06:14 /usr/bin/perl@ -> 
/usr/local/bin/perl


How do I tell PERL and PERL apps where to find the stuff?

We'll be upping to fbsd7.0 soon, but need this machine on line meanwhile.

thanks
Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: libbz2.so.3 ?

[Len Conrad]

FreeBSD 6.3-R
amavis, spammassassin, clamav installed via ports
clamav is logging :




Jul 23 16:08:32 mx2 amavis[2626]: (02626-01-2) (!!)run_av 
(ClamAV-clamscan) FAILED - unexpected exit 1, 
output="/libexec/ld-elf.so.1: Shared object "libbz2.so.3" not 
found, required by "clamscan""

All the system has similar is:
find / -iname "*libbz2*"
/usr/lib/libbz2.a
/usr/lib/libbz2.so.2
/usr/lib/libbz2.so
/usr/lib/libbz2_p.a
Really nothing on Google about libbz2.so.3


You installed a 7.x/8.x package.


ok, thanks. I see where that did happen, grabbed the wrong one from freshports.

deleted clamav pkg

added the "6" clamav.

Now get a different error:

/usr/local/etc/rc.d/clamav-freshclam start

Starting clamav_freshclam.

/libexec/ld-elf.so.1: Shared object "libc.so.7" not found, required 
by "libgmp.so.7"


Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

libbz2.so.3 ?

[Len Conrad]

FreeBSD 6.3-R

amavis, spammassassin, clamav installed via ports

clamav is logging :

Jul 23 16:08:32 mx2 amavis[2626]: (02626-01-2) (!!)run_av 
(ClamAV-clamscan) FAILED - unexpected exit 1, 
output="/libexec/ld-elf.so.1: Shared object "libbz2.so.3" not found, 
required by "clamscan""


All the system has similar is:

find / -iname "*libbz2*"
/usr/lib/libbz2.a
/usr/lib/libbz2.so.2
/usr/lib/libbz2.so
/usr/lib/libbz2_p.a

Really nothing on Google about libbz2.so.3

Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

wordpress package install failure

[Len Conrad]

When I try to install wordpress:

pkg_add 
ftp://ftp4.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/All/wordpress-2.5.1,1.tbz


Fetching 
ftp://ftp4.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/All/wordpress-2.5.1,1.tbz... 
Done.


Fetching 
ftp://ftp4.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/All/mysql-client-5.0.51a.tbz... 
Done.


pkg_add: package 'mysql-client-5.0.51a' conflicts with mysql-client-5.1.22

pkg_add: please use pkg_delete first to remove conflicting package(s) 
or -f to force installation


pkg_add: pkg_add of dependency 'mysql-client-5.0.51a' failed!

Fetching 
ftp://ftp4.freebsd.org/pub/FreeBSD/ports/i386/packages-6-stable/All/php5-mysql-5.2.6.tbz... 
Done.


pkg_add: could not find package mysql-client-5.0.51a !

pkg_add: pkg_add of dependency 'php5-mysql-5.2.6' failed!

Of course, downgrading mysql-client-5.0.51a won't work because you 
have to downgrade the server, and then who knows where that ball of 
string will lead.


I'd really like the follow the advice of using the packages, but the 
above happens frequently.


Suggestions about how to fix the above?

Thanks,
Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: IPv4 loopback address is missing, why?

[Len Conrad]

/etc/hosts :
::1 localhost.mydomain.tld localhost
127.0.0.1 localhost.mydomain.tld localhost

/etc/defaults/rc.conf :
ifconfig_lo0="inet 127.0.0.1"   # default loopback device configuration.
... but ifconfig always shows no inet:
lo0: flags=8049 mtu 16384
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3
inet6 ::1 prefixlen 128

so we added to /etc/rc.conf :
ifconfig_lo0="inet 127.0.0.1 netmask 255.0.0.0"
... still not inet4 loopback if (so commented it out).
no errors in /var/log/messages,
dmesg -a shows no error,
... other than services failing to grab ports on 127.0.0.1

thanks
Len


Do you have network_interfaces set to something different than 
"auto" in /etc/rc.conf?


I read this thread but missed that some pkg_add added 
network_interfaces in rc.conf, and left out "lo"


thanks, Yuri

Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: IPv4 loopback address is missing, why?

[Len Conrad]

and we can do this, too:

ifconfig lo 127.0.0.1 netmask 255.0.0.0 up

then ifconfig shows:

lo0: flags=8049 mtu 16384
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3
inet6 ::1 prefixlen 128
inet 127.0.0.1 netmask 0xff00

thanks
Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: IPv4 loopback address is missing, why?

[Len Conrad]

/etc/hosts :

::1 localhost.mydomain.tld localhost
127.0.0.1 localhost.mydomain.tld localhost


/etc/defaults/rc.conf :

ifconfig_lo0="inet 127.0.0.1"   # default loopback device configuration.

... but ifconfig always shows no inet:

lo0: flags=8049 mtu 16384
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3
inet6 ::1 prefixlen 128


so we added to /etc/rc.conf :

ifconfig_lo0="inet 127.0.0.1 netmask 255.0.0.0"

... still not inet4 loopback if (so commented it out).

no errors in /var/log/messages,
dmesg -a shows no error,
... other than services failing to grab ports on 127.0.0.1


thanks
Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: upgraded OS, now how to fix all the pkgs?

[Len Conrad]

* Len Conrad <[EMAIL PROTECTED]> [05-18-2008]:

> I've deleted/installed berkeley and portupgrade to get started
>
> portupgrade-2.3.1,2

The latest version is portupgrade-2.4.3_2,2.  Upgrade and try again.


I now have:

ruby-1.8.6.111_2,1  An object-oriented interpreted scripting language
ruby18-bdb-0.6.2Ruby interface to Sleepycat's Berkeley DB 
revision 2 or later


portupgrade-2.4.3_2,2 FreeBSD ports/packages administration and 
management tools


now:

portupgrade -af
Bad : modifier in $ ( ).

portupgrade lftp-3.4.0_3
Bad : modifier in $ ( ).

any portupgrade command give same.

Len




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

upgraded OS, now how to fix all the pkgs?

[Len Conrad]

I used this:

http://www.daemonology.net/blog/2007-11-10-freebsd-minor-version-upgrade.html


mx1# pkg_add -r portupgrade

Fetching 
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.3-release/Latest/portupgrade.tbz... 
Done.


Fetching 
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.3-release/All/db41-4.1.25_4.tbz... 
Done.


Fetching 
ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.3-release/All/ruby18-bdb-0.6.2.tbz... 
Done.



I've deleted/installed berkeley and portupgrade to get started

portupgrade-2.3.1,2
db41-4.1.25_4
ruby18-bdb-0.6.2Ruby interface to Sleepycat's Berkeley DB revision 2 or lat




, but

portupgrade -all
/usr/local/sbin/portupgrade:36:in `require': no such file to load -- 
optparse (LoadError)

from /usr/local/sbin/portupgrade:36

where:

 31
 32 MYREVISION = %w$Rev: 71 $[1]
 33 MYDATE = %w$Date: 2007/07/03 10:58:27 $[1]
 34 MYNAME = File.basename($0)
 35
 36 require "optparse"
 37 require "pkgtools"
 38
 39 REASON_COMMENT = {
 40   :badcpp => "bad C++ code",
 41   :bison => "bison error",
 42   :categories => "invalid category",
 43   :cc => "compiler error",

how to fix?

thanks
Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Tool for validating sender address as spam-fighting technique?

[Len Conrad]

onfirmed that the mail is from you, after all


No. His MX has only verified his email address, which does not say 
he sent the msg.


Then what was the point?


"His MX has only verified his email address"

Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Tool for validating sender address as spam-fighting technique?

[Len Conrad]

onfirmed that the mail is from you, after all


No. His MX has only verified his email address, which does not say he 
sent the msg.


Len



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Tool for validating sender address as spam-fighting technique?

[Len Conrad]

Perhaps we are talking about different things, I am talking about
systems which send me an email back requiring me to do steps a, b or c
in order to complete delivery of the email.


that's challenge/response, which has been widely discredited for years.

SAV is a receiving MX probing the MX of [EMAIL PROTECTED] for 
verification of sender as known recipient.


Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: can't complete BerkeleyDB and Berkele.pm

[Len Conrad]

At 10:53 AM 2/9/2007, you wrote:


Done this many times, but this time something is screwed:

FreeBSD 4.10-RELEASE

db41-4.1.25_2   The Berkeley DB package, revision 4.1

perl -MCPAN -e 'install BerkeleyDB'

fails with :

Manifying blib/man3/BerkeleyDB.3
  /usr/bin/make  -- OK
Running make test

PERL_DL_NONLAZY=1 /usr/local/bin/perl "-MExtUtils::Command::MM" "-e" 
"test_harness(0, 'blib/lib', 'blib/arch')" t/*.t


t/btreeCan't load 
'/root/.cpan/build/BerkeleyDB-0.31/blib/arch/auto/BerkeleyDB/BerkeleyDB.so' 
for module BerkeleyDB: 
/root/.cpan/build/BerkeleyDB-0.31/blib/arch/auto/BerkeleyDB/BerkeleyDB.so: 
Undefined symbol "db_create" at 
/usr/local/lib/perl5/5.8.8/i386-freebsd/DynaLoader.pm line 230.

 at t/btree.t line 6

Compilation failed in require at t/btree.t line 6.

BEGIN failed--compilation aborted at t/btree.t line 6.

Undefined subroutine &BerkeleyDB::Term::close_everything called at 
/root/.cpan/build/BerkeleyDB-0.31/blib/lib/BerkeleyDB.pm line 1675.


END failed--call queue aborted at t/btree.t line 6.

t/btreedubious
Test returned status 2 (wstat 512, 0x200)

t/cds..Can't load 
'/root/.cpan/build/BerkeleyDB-0.31/blib/arch/auto/BerkeleyDB/BerkeleyDB.so' 
for module BerkeleyDB: 
/root/.cpan/build/BerkeleyDB-0.31/blib/arch/auto/BerkeleyDB/BerkeleyDB.so: 
Undefined symbol "db_create" at 
/usr/local/lib/perl5/5.8.8/i386-freebsd/DynaLoader.pm line 230.

 at t/cds.t line 8

... etc, etc.

Suggestions?

==

I loaded the 4.10 release /usr/ports tree and did


cd /usr/ports/databases/p5-BerkeleyDB
make && make install

which hummed along fine until:

creating libdb3_cxx.la
(cd .libs && rm -f libdb3_cxx.la && ln -s ../libdb3_cxx.la libdb3_cxx.la)
/bin/sh ./libtool --mode=compile cc -c -O 
-pipe  -I./../dist/../include -D_THREAD_SAFE 
./../dist/../db_dump185/db_dump185.c

rm -f .libs/db_dump185.lo
cc -c -O -pipe -I./../dist/../include -D_THREAD_SAFE 
./../dist/../db_dump185/db_dump185.c  -fPIC -DPIC -o db_dump185.o

./../dist/../db_dump185/db_dump185.c: In function `main':
./../dist/../db_dump185/db_dump185.c:210: warning: assignment makes 
pointer from integer without a cast
./../dist/../db_dump185/db_dump185.c:212: warning: assignment makes 
pointer from integer without a cast

./../dist/../db_dump185/db_dump185.c:227: structure has no member named `seq'
./../dist/../db_dump185/db_dump185.c:227: `R_NEXT' undeclared (first 
use in this function)
./../dist/../db_dump185/db_dump185.c:227: (Each undeclared identifier 
is reported only once

./../dist/../db_dump185/db_dump185.c:227: for each function it appears in.)
./../dist/../db_dump185/db_dump185.c:232: structure has no member named `seq'
./../dist/../db_dump185/db_dump185.c: In function `db_hash':
./../dist/../db_dump185/db_dump185.c:260: structure has no member 
named `internal'
./../dist/../db_dump185/db_dump185.c:262: structure has no member 
named `internal'

./../dist/../db_dump185/db_dump185.c: In function `db_btree':
./../dist/../db_dump185/db_dump185.c:287: structure has no member 
named `internal'

*** Error code 1

Stop in /usr/ports/databases/db3/work/db-3.3.11/build_unix.
*** Error code 1

Stop in /usr/ports/databases/db3.
*** Error code 1

Stop in /usr/ports/databases/p5-BerkeleyDB.

Suggestions?

thanks
Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

can't complete BerkeleyDB and Berkele.pm

[Len Conrad]

Done this many times, but this time something is screwed:

FreeBSD 4.10-RELEASE

db41-4.1.25_2   The Berkeley DB package, revision 4.1

perl -MCPAN -e 'install BerkeleyDB'

fails with :

Manifying blib/man3/BerkeleyDB.3
  /usr/bin/make  -- OK
Running make test

PERL_DL_NONLAZY=1 /usr/local/bin/perl "-MExtUtils::Command::MM" "-e" 
"test_harness(0, 'blib/lib', 'blib/arch')" t/*.t


t/btreeCan't load 
'/root/.cpan/build/BerkeleyDB-0.31/blib/arch/auto/BerkeleyDB/BerkeleyDB.so' 
for module BerkeleyDB: 
/root/.cpan/build/BerkeleyDB-0.31/blib/arch/auto/BerkeleyDB/BerkeleyDB.so: 
Undefined symbol "db_create" at 
/usr/local/lib/perl5/5.8.8/i386-freebsd/DynaLoader.pm line 230.

 at t/btree.t line 6

Compilation failed in require at t/btree.t line 6.

BEGIN failed--compilation aborted at t/btree.t line 6.

Undefined subroutine &BerkeleyDB::Term::close_everything called at 
/root/.cpan/build/BerkeleyDB-0.31/blib/lib/BerkeleyDB.pm line 1675.


END failed--call queue aborted at t/btree.t line 6.

t/btreedubious
Test returned status 2 (wstat 512, 0x200)

t/cds..Can't load 
'/root/.cpan/build/BerkeleyDB-0.31/blib/arch/auto/BerkeleyDB/BerkeleyDB.so' 
for module BerkeleyDB: 
/root/.cpan/build/BerkeleyDB-0.31/blib/arch/auto/BerkeleyDB/BerkeleyDB.so: 
Undefined symbol "db_create" at 
/usr/local/lib/perl5/5.8.8/i386-freebsd/DynaLoader.pm line 230.

 at t/cds.t line 8

... etc, etc.

Suggestions?

thanks
Len

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

what's up with ftp-archive.freebsd.org ?

[Len Conrad]

Sometimes it works, but very often:

pkg_add -r db41-4.1.25_2

Error: FTP Unable to get 
ftp://ftp-archive.freebsd.org/pub/FreeBSD-Archive/old-releases/i386/4.10-RELEASE/packages/Latest/db41-4.1.25_2.tgz: 
Not logged in


pkg_add: unable to fetch 
'ftp://ftp-archive.freebsd.org/pub/FreeBSD-Archive/old-releases/i386/4.10-RELEASE/packages/Latest/db41-4.1.25_2.tgz' 
by URL


Is not open for business all day?  what are the hours?

thanks
Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: sshd break-in attempt

[Len Conrad]

In our 'periodic daily' report/email, (only the list goes on for 
hundreds of attempts). Anyhow, long story short; is there not an 
easy way to make sshd block or deny hosts temporarily if X number of 
invalid login attempts are made within a minute's time?


to reduce the brute force attacks + voluminous logging, tell sshd to 
listen on port other than 22.


google for "tcp wrappers sshd" for examples of how to use tcp 
wrappers in reactive blocking


Len





___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: Need to restrict DNS requests to just 5 per second

[Len Conrad]

I need to restrict dns (udp) requests to not more than 3 requests per
second from each client's IP.


restricting DNS query rate, if you can find a way, will probably slow 
your clients' operations very noticeably.


What problem are you trying to solve?

Len
  



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: pb installing P5-BerkeleyDB

[Len Conrad]

pkg_info shows:

db41-4.1.25_4   The Berkeley DB package, revision 4.1
p5-BerkeleyDB-0.31  Perl5 interface to the Berkeley DB package

but I still get:

%/usr/local/etc/rc.d/postgrey.sh start

Can't locate BerkeleyDB.pm in @INC (@INC contains: 
/usr/local/lib/perl5/site_perl/5.8.2/mach 
/usr/local/lib/perl5/site_perl/5.8.2 /usr/local/lib/perl5/site_perl 
/usr/local/lib/perl5/5.8.2/BSDPAN /usr/local/lib/perl5/5.8.2/mach 
/usr/local/lib/perl5/5.8.2) at /usr/local/bin/postgrey.pl line 14.

BEGIN failed--compilation aborted at /usr/local/bin/postgrey.pl line 14.

Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: pb installing P5-BerkeleyDB

[Len Conrad]

>  >> Checksum mismatch for bdb/db-4.1.25.tar.gz.
>  >> Checksum OK for bdb/patch.4.1.25.1.
>
> ===>  Refetch for 1 more times files: bdb/db-4.1.25.tar.gz
> ===>  Vulnerability check disabled
>
>  >> db-4.1.25.tar.gz doesn't seem to exist in /usr/ports/distfiles/bdb.
>  >> Attempting to fetch from http://www.sleepycat.com/update/snapshot/.
>
> fetch: http://www.sleepycat.com/update/snapshot/db-4.1.25.tar.gz:
> Moved Permanently
>
>  >> Attempting to fetch from
>
> ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/bdb/.
> fetch:
> ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/bdb/db-4.1.25.tar.gz:
> size mismatch: expected 3080234, actual 2901161

The problem is that Sleepycat repackaged their tarball at some point this
year, changing the filesize and checksum without changing the version number.
I have a feeling I got round this on one box by upgrading the ports tree
(which of course adds its own problems with newer ports, dependencies etc),
and on another box by copying the checksum and file size from
http://www.freshports.org/ into the port's distinfo.

It is an extremely irritating problem: in an ideal world no-one would ever
change the size/checksum of their main distfile without also changing the
filename/version number, even if only slightly.


ok, but on an adjacent 4.11-R machine, this worked, as the msg says:

%cd /usr/ports/distfiles/bdb
%ftp ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/bdb/db-4.1.25.tar.gz

so I think I'm pretty close on this 4.10 machine, just some little 
tweak somewhere, but I  can't find it.


thanks
Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

pb installing P5-BerkeleyDB

[Len Conrad]

freebsd 4.10-R
perl 5.8.2

==

cd /usr/ports/databases/db41

cd /usr/ports/databases/db41
%make && make install
===>  Vulnerability check disabled
===>  Extracting for db41-4.1.25_2
>> Checksum mismatch for bdb/db-4.1.25.tar.gz.
>> Checksum OK for bdb/patch.4.1.25.1.
===>  Refetch for 1 more times files: bdb/db-4.1.25.tar.gz
===>  Vulnerability check disabled
>> db-4.1.25.tar.gz doesn't seem to exist in /usr/ports/distfiles/bdb.
>> Attempting to fetch from http://www.sleepycat.com/update/snapshot/.
fetch: http://www.sleepycat.com/update/snapshot/db-4.1.25.tar.gz: 
Moved Permanently
>> Attempting to fetch from 
ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/bdb/.
fetch: 
ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/bdb/db-4.1.25.tar.gz: 
size mismatch: expected 3080234, actual 2901161

>> Couldn't fetch it - please try to retrieve this
>> port manually into /usr/ports/distfiles/bdb and try again.
*** Error code 1

Stop in /usr/ports/databases/db41.
*** Error code 1

Stop in /usr/ports/databases/db41.

ok, so RTFMsg above and :

%cd /usr/ports/distfiles/bdb
%ftp ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/bdb/db-4.1.25.tar.gz

cd dist
./configure
make && make intall

 all works fine:

%ll /usr/local/BerkeleyDB.4.1/bin/
total 104
-r-xr-xr-x  1 root  100  -  5612 Dec  7 07:57 db_archive*
-r-xr-xr-x  1 root  100  -  7116 Dec  7 07:57 db_checkpoint*
-r-xr-xr-x  1 root  100  -  6720 Dec  7 07:57 db_deadlock*
-r-xr-xr-x  1 root  100  - 10064 Dec  7 07:57 db_dump*
-r-xr-xr-x  1 root  100  - 17264 Dec  7 07:57 db_load*
-r-xr-xr-x  1 root  100  -  7996 Dec  7 07:57 db_printlog*
-r-xr-xr-x  1 root  100  -  6684 Dec  7 07:57 db_recover*
-r-xr-xr-x  1 root  100  - 23488 Dec  7 07:57 db_stat*
-r-xr-xr-x  1 root  100  -  5932 Dec  7 07:57 db_upgrade*
-r-xr-xr-x  1 root  100  -  6828 Dec  7 07:57 db_verify*


%ll /usr/local/BerkeleyDB.4.1/lib
total 1586
-rw-r--r--  1 root  100- 878878 Dec  7 07:57 libdb-4.1.a
-rw-r--r--  1 root  100-724 Dec  7 00:03 libdb-4.1.la
-rwxr-xr-x  1 root  100- 695625 Dec  7 00:03 libdb-4.1.so*
lrwxr-xr-x  1 root  wheel  - 12 Dec  7 07:57 libdb-4.so@ -> libdb-4.1.so
lrwxr-xr-x  1 root  wheel  - 11 Dec  7 07:57 libdb.a@ -> libdb-4.1.a
lrwxr-xr-x  1 root  wheel  - 12 Dec  7 07:57 libdb.so@ -> libdb-4.1.so


Install the Perl5 module for BerkeleyDB:


cd /usr/ports/databases/p5-BerkeleyDB

make WITH_BDB_VER=41

%cd /usr/ports/databases/p5-BerkeleyDB
%make WITH_BDB_VER=41
===>   p5-BerkeleyDB-0.25 depends on shared library: db41.1 - not 
found  <

===>Verifying install for db41.1 in /usr/ports/databases/db41
===>  Vulnerability check disabled
===>  Extracting for db41-4.1.25_2
>> Checksum mismatch for bdb/db-4.1.25.tar.gz.
>> Checksum OK for bdb/patch.4.1.25.1.
===>  Refetch for 1 more times files: bdb/db-4.1.25.tar.gz
===>  Vulnerability check disabled
>> db-4.1.25.tar.gz doesn't seem to exist in /usr/ports/distfiles/bdb.
>> Attempting to fetch from http://www.sleepycat.com/update/snapshot/.
fetch: http://www.sleepycat.com/update/snapshot/db-4.1.25.tar.gz: 
Moved Permanently
>> Attempting to fetch from 
ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/bdb/.
fetch: 
ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/bdb/db-4.1.25.tar.gz: 
size mismatch: expected 3080234, actual 2901161

>> Couldn't fetch it - please try to retrieve this
>> port manually into /usr/ports/distfiles/bdb and try again.
*** Error code 1

but :

%ll /usr/ports/distfiles/bdb
total 2868
drwxr-xr-x  54 100   100-1024 Dec  7 07:57 db-4.1.25/
-rw-r--r--   1 root  wheel  - 2901161 Feb  9  2006 db-4.1.25.tar.gz
-rw-r--r--   1 root  wheel  - 610 Jan 27  2003 patch.4.1.25.1

I also tried putting it here:

%ll /usr/ports/databases/db41
total 2922
-rw-r--r--   1 root  wheel  -1267 Apr 16  2004 Makefile
drwxr-xr-x  54 100   100-1024 Dec 19  2002 db-4.1.25/
-rw-r--r--   1 root  wheel  - 2901161 Feb  9  2006 db-4.1.25.tar.gz
-rw-r--r--   1 root  wheel  - 192 Mar 17  2004 distinfo
drwxr-xr-x   2 root  wheel  - 512 Sep 29  2004 files/
-rw-r--r--   1 root  wheel  - 489 Jul  9  2003 pkg-descr
-rw-r--r--   1 root  wheel  -   49150 Jan  6  2003 pkg-plist

so how do I get :

cd /usr/ports/databases/p5-BerkeleyDB
make WITH_BDB_VER=41
make WITH_BDB_VER=41 install

... to find the BerekelyDB?

thanks
Len


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: buildup of Windows time_wait talking to fbsd 4.10

[Len Conrad]

We have a windows mailserver that relays its outbound to a fbsd 
gateway.  We changed to a different fbsd gateway running 4.10. Windows 
then began having trouble sending to 4.10.  Windows "netstat -an" 
shows  dozens of lines like this:

source IP  desitination IP
==
 TCP10.1.16.3:1403 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1407 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1415 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1419 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1435 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1462 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1470 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1473 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1478 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1493 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1504 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1507 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1508 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1521 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1526 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1546 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1550 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1568 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1571 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1589 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1592 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1616 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1620 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1629 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1644 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1647 192.168.200.59:25  TIME_WAIT
 TCP10.1.16.3:1654 192.168.200.59:25  TIME_WAIT
Eventually, the windows SMTP logs line like "cannot connect to remote IP" 
or "address already in use" because no local tcp/ip sockets are 
available, we think.

The new gateway/fbsd 4.10 "sockstat -4" shows no corresponding tcp 
connections when the Windows server is showing as above.  On the fbsd 
4.10 machines, smtp logs, syslog, and dmesg show no errors.

We switch the windows box to smtp gateway towards the old box/fbsd 4.7, 
all is cool.

Suggestions with how to proceed debugging, please.
I'm trying to get the dmesg.boot for the 4.7 and 4.10 boxes now, sorry.
Len
Just off the top of my head...
You mentioned the freebsd machine is the gateway.  Do you have a firewall 
on the host blocking connections from the windows machine?
the two mail servers that send outbound to the fbsd gateway are on the 
subnet, same rules.   the firewall is "outside" the subnets of the mail 
servers and gateways.

We haven't put a sniffer yet.  there's none on windows boxes, and tcpview 
on the fbsd boxes.

We going to start changing NIC model/brands.
thanks
Len
_
http://IMGate.MEIway.com : free anti-spam gateway, runs on 1000's of sites
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"