USB Flash Drive Permissions

2008-04-11 Thread Loren M. Lang
I would like to setup my USB flash drive to have special permissions
when I plug it into my desktop.  Specifically, I would like it to be
owned by my user so I can user mount the msdos fs on it.  I added an
entry to /etc/devfs.conf for the device it was creating, but the
permissions did not get applied when I plugged my drive in.  After some
research, it appears that devfs.conf only gets applied on boot by
/etc/rc.d/devfs so I took a look at devd.  I catted the pipe of devd and
saw my device attach as umass0 with a serial number that would be ideal
to match on (I'd prefer that it only match on my personal flash drive,)
however, I did not see any information on the device file it created,
da0s1, when I need to modify the permissions on.  How can I determine
automatically where umass0 created it's disk device file?
-- 
Loren M. Lang
[EMAIL PROTECTED]
http://www.north-winds.org/


Public Key: ftp://ftp.north-winds.org/pub/lorenl_pubkey.asc
Fingerprint: 10A0 7AE2 DAF5 4780 888A  3FA4 DCEE BB39 7654 DE5B
 


pgpI1U6vWqSM8.pgp
Description: PGP signature


FreeBSD NFS server responds with wrong address

2007-11-19 Thread Loren M. Lang
I was attempting to do an NFS mount from a FreeBSD server to a FreeBSD
client over IPv6 and received the error NFSPROC_NULL: RPC: Timed out.
After doing a packet trace, I noticed that the FreeBSD server was
indeed responding to both a Portmap GATADDR call and a NFS NULL call,
but in both cases it was coming from the IPv6 address closest to the
client making the call and not the address the call was issued to.  Why
is this happening and how do I make the server respond with the correct
address?

The server is FreeBSD 6.2-RELEASE-p7.
-- 
Loren M. Lang
[EMAIL PROTECTED]
http://www.north-winds.org/


Public Key: ftp://ftp.north-winds.org/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpdlEKmaqGLJ.pgp
Description: PGP signature


Re: Moving /var/mail

2006-12-01 Thread Loren M. Lang
On Fri, Dec 01, 2006 at 03:22:48PM -0500, Jerry McAllister wrote:
 On Fri, Dec 01, 2006 at 02:20:42PM -0500, Lisa Casey wrote:
 
  Hi,
  
  I want to move /var/mail to /usr/var/mail, then symlink /var/mail to 
  /usr/var/mail to free up space on my (too small on this machine) /var. Of 
  course, I wish to maintain file permissions, ownerships, etc. I decided to 
  try a dry run using a user home directory first to make sure this would 
  work right. Good thing I did...
  
  I created /usr/kellyw  and attempted to copy the contents of  /home/kellyw/ 
  to it. First of all, I tried tar cvpf /usr/kellyw/kellyw.tar /home/kellyw/
  
  When I unpack the tar file, I wind up with /usr/kellyw/home/kellyw/*  Not 
  what I wanted. I wanted all of the files in /home/kellyw/ to wind up in 
  /usr/kellyw/
  
  So I then tried to just copy the files using cp -p but I can't get the 
  syntax right on that:
  
  # cd /home/kellyw
  # ls -l
  total 16
  -rw-r--r--  1 kellyw  kellyw  767 Aug 18 14:52 .cshrc
  -rw-r--r--  1 kellyw  kellyw  248 Aug 18 14:52 .login
  -rw-r--r--  1 kellyw  kellyw  158 Aug 18 14:52 .login_conf
  -rw---  1 kellyw  kellyw  373 Aug 18 14:52 .mail_aliases
  -rw-r--r--  1 kellyw  kellyw  331 Aug 18 14:52 .mailrc
  -rw-r--r--  1 kellyw  kellyw  797 Aug 18 14:52 .profile
  -rw---  1 kellyw  kellyw  276 Aug 18 14:52 .rhosts
  -rw-r--r--  1 kellyw  kellyw  975 Aug 18 14:52 .shrc
  # cp -p /home/kellyw/* /usr/kellyw/*
  cp: No match.
  # cp -p /home/kellyw/ /usr/kellyw/
  cp: /home/kellyw/ is a directory (not copied).
  # cp -p /home/kellyw/*.* /usr/kellyw/*.*
  cp: No match.
 
 You don't want to use the '*' on the receiving directory.
 If there are no other subdirectories in /home/kellyw then
 just do this:cp -p /home/kellyw/* /usr/kellyw/.

This will miss hidden files which a home directory will surely have.
Just drop the * to copy everything.

 
 If it has subdirectories and you want it to recurse, then
 do this:  cp -R -p /home/kellyw/ /usr/kellyw
 
 Unfortunately, if there are hard links in that directory, it will also 
 make new copies of those files rather than just making new hard links.

The whole point of this is because the original partition was getting
too full so unless all links to the file are copied, it will have to
make new copies of the files.  If there are multiple hard links to the
same file that need to be removed, then tar, pax, or cpio should be
used. /var/mail probably won't have any nor /home/kellyw unless kellyw
specifically set them up with ln.

 
 You might want to consider using tar instead of cp if your file structure
 to be moved are at all complex.
 
cd /home/kellyw
tar cvpf /usr/kellyw/kelly.tar *

 * should be . to copy everything

cd /usr/kellyw
tar xvpf kelly.tar
rm kelly.tar
cd /home/kellyw
pwd(just to be extra careful since rm -rf * is irrevocable)
rm -rf *   

To remove everything you would have to be up one and remove the folder
instead.

 
 jerry
 
  
  Can someone help me out with my syntax? The tar method would probably be 
  better (I guess) though I don't really care  which method I use as long as 
  it works (and preserves permissions, etc.). There are only about 60 
  mailboxes on this system.
  
  Thanks,
  
  Lisa Casey
  
  ___
  freebsd-questions@freebsd.org mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to [EMAIL PROTECTED]
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 

-- 
Loren M. Lang
[EMAIL PROTECTED]
http://www.alzatex.com/


Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpKoiZsGT0Xr.pgp
Description: PGP signature


dc0 card drops connection on FreeBSD 6.1

2006-11-30 Thread Loren M. Lang
I am having issues with an ethernet card running under FreeBSD
6.1-RELEASE.  It is dc0 and pciconf reports it as Conexant Systems.
Network connections hang most of the time and usually timeout.  FTP and
HTTP downloads with move along for a short time and hang every 3% or so
for several minutes before continuing or timing out.  I installed
FreeBSD 6.1 a month ago on a fresh hard drive, but about 5 months ago my
old hard drive crashed which was running FreeBSD 5.4, though I never had
any issues with the network card for 5.4 or, previously, 4.9.  This
system was running for several years with no issues until the Hard drive
crashed 5 months ago.

dc0: Conexant LANfinity MiniPCI 10/100BaseTX port 0x1400-0x14ff mem
0xf400-0xf4003fff irq 9 at device 9.0 on pci0
miibus0: MII bus on dc0
ukphy0: Generic IEEE 802.3u media interface on miibus0
ukphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
dc0: Ethernet address: 00:50:8b:ab:99:d5
pci0: simple comms at device 9.1 (no driver attached)
pci0: multimedia, audio at device 10.0 (no driver attached)

-- 
Loren M. Lang
[EMAIL PROTECTED]
http://www.alzatex.com/


Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpxhKPmXsvuh.pgp
Description: PGP signature


FreeBSD 6.1-RELEASE fails to reboot system

2006-07-11 Thread Loren M. Lang
I just built a new server based on a Celeron 2.53Ghz with EM64T
extensions on an ASUS P5S800 motherboard and 256 DDR ram and install
FreeBSD-6.1 using the amd64 version.  Everything is running fine, but
when I tell the system to reboot, it just hangs with the line
Rebooting...  Both halt and power off commands work as expected.
Disabling ACPI did not change anything.  This system is also running
with a serial console, but the reboot problems happened even at the end
of the installer.  I had to hit reboot after the installer exited, but
the filesystems came back clean everytime so they had been synced properly.
-- 
Loren M. Lang
[EMAIL PROTECTED]
http://www.alzatex.com/


Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2




signature.asc
Description: OpenPGP digital signature


Re: Content filtering

2006-06-20 Thread Loren M. Lang
Shawn Guillemette wrote:
 Hello, 
 
  
 
 I have recently been thinking about adding content filtering to
 my FreeBSD fire wall at home as the kids are starting to use the internet
 more and they are getting older too ;-) 
 
  
 
  
 
 I'm running FreeBSD 4.11 RELEASE using IPFW as my firewall. The system its
 running on is an old alpha machine. I was wondering if anyone knew of a port
 that I could use to filter some web content from my children. I do have the
 X86 option as well Just have to reload the OS and start from scratch on
 another system. 
 
  
 
 Thanks 
 
 Shawn 
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 

I'd look at squid+squidguard.  Both are opensource and available in ports.

-- 
Loren M. Lang
[EMAIL PROTECTED]
http://www.alzatex.com/


Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2




signature.asc
Description: OpenPGP digital signature


Re: USB-Serial ??

2006-06-19 Thread Loren M. Lang
fbsd wrote:
 Sorry dud but what you have is a winmodem.

No, it's a USB modem, winmodems are a type of PCI modem.

 XP has special driver for that external modem to work.
 It is not supported in FreeBSD as far as I have seen.
 There is no such thing as USB-serial modem.

There is, I've used one.  While I can't gaurntee it will work, check out
the umodem driver.  Just load the driver with 'kldload umodem' and see
if it detects anything.  dmesg is a handy command for such things.
There are also some other possibilities, check out
http://www.freebsd.org/releases/6.1R/hardware-i386.html
under USB.  The device probably will be something like /dev/ucom0, but
check the output of dmesg.

 External modem is connected to motherboard by serial cable or USB
 cable.
 Serial external modem works right out of the box and USB external
 modem are all winmodems.

Any serial modem should work fine for FreeBSD using either the hardware
serial ports on your motherboard with the sio driver or possibly some
USB serial adapters that are supported.  USB modems are not winmodems,
but they still sometimes require a special driver that FreeBSD does not
have.

 There is a port ltmdm which works for a limited number of PCI
 winmodems but nothing for USB-winmodems.
 
 You are SOL.
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Warren
 Block
 Sent: Thursday, June 08, 2006 9:29 AM
 To: Steve Bertrand
 Cc: 'John Andrewartha'; 'freebsd-questions@FreeBSD.ORG'
 Subject: RE: USB-Serial ??
 
 
 On Wed, 7 Jun 2006, Steve Bertrand wrote:
 
 The saga of the 3G modem.  Labeled in AU as the Maxon MM 5500c.
 This device is a modem on the usb bus, it looks like and
 understands the at commands. Under XP.
 I am using fbsd 6.1.
 How do I get ppp to talk to it?
 The man pages keep pointing to /dev/cuaU? A device that does
 not exist yet.
 Don't know about the rest, but in FBSD 6+, the serial devices are
 /dev/cuad0 for COM1 and /dev/cuad1 for COM2.

 Try a:

 # cu -l /dev/cuad0 to see if you can connect to the device.
 
 He said it was USB, which should be /dev/ucom0.
 
 -Warren Block * Rapid City, South Dakota USA
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 


-- 
Loren M. Lang
[EMAIL PROTECTED]
http://www.alzatex.com/


Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2




signature.asc
Description: OpenPGP digital signature


Re: Multicast/IGMP Join in FreeBSD 6.1

2006-06-19 Thread Loren M. Lang
Mayo, Richard A RDECOM CERDEC STCD SRI wrote:
 Can anybody tell me how to configure the multicast groups my computer will 
 attempt to join?  I when my computers boot, I can see a IGMP join request for 
 224.0.0.9, but I would like to add more.

When a program opens a socket for listening, it requests which groups it
will listen on using an option in setsockopt(), and bind().  When the
program closes the socket or exits, the group is left.  The IGMP
Join/Leave messages are only needed if you have multicast capable
routers and are running a multicast routing protocol like PIM and want
messages from other subnets.  Any group can be joined that is
broadcasted locally without those messages.  If you put your network
card in promiscuous mode, as is done by most packet sniffers, you should
be receiving all locally transmitted packets, including multicast.

 
 
 Any suggestions?
 
 Rich Mayo
 SRI International
 x76435
 
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 


-- 
Loren M. Lang
[EMAIL PROTECTED]
http://www.alzatex.com/


Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2




signature.asc
Description: OpenPGP digital signature


Creating Vinum Volume during install

2006-05-04 Thread Loren M. Lang
I am trying to create a vinum file system during the install so I can
also use it for the root filesystem as described in the handbook, but it
appears that the geom_vinum modules are not available from the FreeBSD
6.1-RC2 disc 1 LiveCD shell.  Are the modules not available or do I need
to load something for it to work?  If they're not available, what other
choices to I have?  Freesbie?

-- 
Loren M. Lang
[EMAIL PROTECTED]
http://www.alzatex.com/


Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpTz5apekhX5.pgp
Description: PGP signature


Re: FreeBSD router two DSL connections

2005-12-31 Thread Loren M. Lang
On Wed, Dec 21, 2005 at 09:55:37AM -0800, Danial Thom wrote:
 
 
 --- Loren M. Lang [EMAIL PROTECTED] wrote:
 
  On Sun, Dec 11, 2005 at 11:28:17PM -0800, Ted
  Mittelstaedt wrote:
   
   If both DSL lines go to the same ISP it is
  easy, run
   PPP on them and setup multilink PPP.  The ISP
  has to
   do so also.
   
   If they are going to different ISP's then you
  cannot
   do it with any operating system or device
  save BGP - the idea is
   completely -stupid- to put it simply.  If you
  think different,
   then explain why and I'll shoot every
  networking scenario
   you present so full of holes you will think
  it's swiss cheese.
   And if you think your going to run BGP I'll
  shoot that full
   of holes also.
  
  I strongly disagree.  There are many reasons
  for this.  Two of which are
  increased throughoutput and redundancy.  The
  primary problem is that you
  need to make sure outgoing data for a
  connection is using the same line
  as the incoming connection.  If the majority to
  all connections are
  outgoing and both lines use NAT and have unique
  IP addresses, it's
  simpler to setup.  If you have incoming
  connections as well, either only
  one of the two lines will be used or you'll
  need BGP or some kind of
  static route setup by the two ISPs.  For an
  internet cafe, most
  connections will probably be outgoing so it
  won't be a problem.
 
 Thats not right at all, although in *some* cases
 it may be desirable. All upstream ISPs are
 connected to everyone on the internet, so it
 doesn't matter which you send your packets to
 (the entire point of a connectionless network.
 They both can forward your traffic to wherever
 its going. For efficiencies sake, you may argue
 that sending to the ISP that sent you the traffic
 will be a better path, but if one of your pipes
 is saturated and the other running at 20% then
 its likely more efficient to keep your pipes
 filled and send to either isp. You can achieve
 this with per-packet load-balancing with ciscos,
 or bit-balancing with a product like ETs for
 FreeBSD. Unless your 2 isps are connected
 substantially differently (say if one is in
 Europe and one in the US),  you'll do better
 keeping your pipes balanced, as YOU are the
 bottleneck, not the upstream, assuming you have
 quality upstream providers.

You are correct in the case of a normal router, but
this is not a normal router, this is an NAT router
with two different incoming pipes with two unique ip
addresses.  As far as each ISP is concerned, they are
providing bandwidth to a single computer that is not
the same as the other ISP.  There is no information
that connects the two together.  With NAT, the
network behind is hidden and normal routing can't
take place.  Only outgoing connections can take place,
and the from address is modified to be the same as the
IP address on the pipeline it is leaving from.
Internet routers won't know that the other ip address
is the same computer and even if they did know, the
NAT software on the router might discard the packets
because the data is arriving on the wrong interface.
Incoming connections work only if the router is setup
to do port forwarding.  The problem here with sharing
the bandwidth is that each pipeline has it's own
address and there is no way to specifiy an address of a
computer behind the router because each ISP has only
allocated one address to their customer and there are
no entries in the routing tables for computers behind
them.  Bandwidth sharing is possible with an NAT router,
but not connection sharing.


 
 Danial
 
 __
 Do You Yahoo!?
 Tired of spam?  Yahoo! Mail has the best spam protection around 
 http://mail.yahoo.com 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgp0pSj6aYzKE.pgp
Description: PGP signature


Re: FreeBSD router two DSL connections

2005-12-31 Thread Loren M. Lang
On Fri, Dec 23, 2005 at 03:46:50PM -0800, Danial Thom wrote:
 Ted the incompetent, wrong on all counts once
 again:
 
 
 --- Ted Mittelstaedt [EMAIL PROTECTED]
 wrote:
 
  
  
  -Original Message-
  From: Danial Thom
  [mailto:[EMAIL PROTECTED]
  Sent: Wednesday, December 21, 2005 9:56 AM
  To: Loren M. Lang; Ted Mittelstaedt
  Cc: Yance Kowara;
  freebsd-questions@freebsd.org
  Subject: Re: FreeBSD router two DSL
  connections
  
  
  All upstream ISPs are
  connected to everyone on the internet, so it
  doesn't matter which you send your packets to
  (the entire point of a connectionless
  network.
  They both can forward your traffic to wherever
  its going.
  
  They aren't going to forward your traffic
  unless
  it's sourced by an IP number they assign.  To
  do otherwise means they would permit you to
  spoof IP
  numbers.  And while it's possible some very
  small
  ISP's run by idiots that don't know any better
  might
  still permit this, their feeds certainly will
  not.
 
 Yes they will. Routers route based on dest
 address only. Are you somehow suggesting that an
 ISP can't be dual homed and use only one link if
 one goes down, since some of the addresses sent
 up the remaining pipe wouldn't have source
 addresses assigned by that upstream provider? You
 are beyond clueless, Ted. Why do you keep opening
 your mouth?

You understand the issues little yourself.  I'd recommend
getting a good book on NAT and IP routing.  With a normal
router and either static routes or a good routing protocol
setup, this would work fine, but with NAT in the mix, it's
much more difficult.  The problem is that neither ISP knows
about the network behind the NAT router, that's the basic
reason for NAT in the first place.  There are no official
addresses allocated for the computers behind so there can
be no routes to the computer behind.  NAT causes the entire
network behind the router to look like it came from the
router itself.  And since the router has a different address
for each ISP, it looks like two independent computers on the
internet.

 
  
  For efficiencies sake, you may argue
  that sending to the ISP that sent you the
  traffic
  will be a better path, but if one of your
  pipes
  is saturated and the other running at 20% 
  
  letsseenow, these are full duplex 'pipes', can
  we have some direction this saturation is
  taking
  place in?  I mean, since you are at least
  trying to
  make a senseless explanation sound right, you
  might
  as well try a bit harder.
 
 Its not senseless, you just don't understand how
 the internet works, apparently. I do this for a
 living, and you just yap.

You could use a good book too.

 
 If you were able to send back the data on the
 pipe it arrived on then you would have uneven
 use of the pipes. So one could be saturation
 the the other highly unused. Balancing the
 outgoing data would reduce the latency that
 occurs when a pipe is saturated. Its hard to
 explain calculus to some who can't add or
 subtract ted, so you should figure out how
 routing works before you try something this
 complicated.
 
  
  then
  its likely more efficient to keep your pipes
  filled and send to either isp. You can
  achieve
  this with per-packet load-balancing with
  ciscos,
  
  per packet load balancing is for parallel links
  between 2 endpoints.  Not three, as in you,
  your first ISP, and your second ISP.
 
 Wrong again, Ted. Usually thats how it is used to
 gain extra throughput, but thats not the only
 thing that it can be used for. Since the internet
 is connectionless (back to school for you Ted),
 per packet balancing can utilize 2 outgoing pipes
 to different ISPs as well. Obviously since
 failover on dual-homed network works, you can
 send your packets to any ISP you want. Routers
 route based on destination address, as anyone who
 knows how routers work knows. You can even use
 per packet load balancing on 2 lines to the same
 ISP when the other end doesn't support it; using
 2 pipes in one direction and only one in the
 other. You can be innovative when you actually
 understand how things work, Ted.
 
  
  Surprising you would drag up a Ciscoism as
  your such a big fan of BSD-based routers.
  
  or bit-balancing with a product like ETs for
  FreeBSD. Unless your 2 isps are connected
  substantially differently (say if one is in
  Europe and one in the US),  you'll do better
  keeping your pipes balanced, as YOU are the
  bottleneck, not the upstream, assuming you
  have
  quality upstream providers.
  
  
  Sometimes you run into someone who is so
  ignorant
  of the subject of which he is trying to speak,
   - routing in this case - that you can't even
  argue with the person.  Kind of like trying to
  explain the concept of the fossil record to a
  creationist.  This is one of these times.
 
 Yes Ted. People run into you, the ultimate
 ignoramous. I have 3000 ISP customers. This is
 not just theory; its being done. You are wrong
 about every single thing you

Re: 6.0 STABLE install locks up within a few minutes

2005-12-31 Thread Loren M. Lang
On Fri, Dec 09, 2005 at 08:49:14AM -0500, Brown, Steve wrote:
 By the way, the issue was gone when I installed to one of the IDE drives.
 
 FreeBSD 6 must not like my SATA controller.  At least it tries though.  Red
 Hat 9 and Solaris 10 would not recongnize it at all during installation.

What SATA controller is it?  I know in particular the SiL3112 Silcon
Image chipset is buggy hardware.  If it's only an add-in card, you could
try another one.  I have a cheap Highpoint RocketRAID 1520.  It works
fine as a SATA controller, but the raid on it is fake-raid.  There is
little to no hardware support on it and it would be better to use
FreeBSD's built-in software raid if you need it.

By the way, the SiL3112 had problems on both linux and bsd, but it
worked most of the time.  I think the windows drivers they provide have
a work-around in them for the buggy hardware, but would you really want
buggy hardware?

 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Brown, Steve
 Sent: Wednesday, December 07, 2005 3:25 PM
 To: FreeBSD Questions (E-mail)
 Subject: 6.0 STABLE install locks up within a few minutes
 
 
 Hello everyone,
  
 I'm trying to get v6.0-STABLE installed on a PC that is running Windows (XP
 Pro) now.  The hardware is very stable with Windows, it's just bogged down
 with all the updates and third-party apps you need to keep it that way.  I'm
 running FreeBSD in other systems but haven't tried this newer version yet.
 However, the system locks up at a different place everytime I attempt the
 install.  It seems completely random.  Sometimes I get to where it's mostly
 configured and I'm adding ported apps and sometimes it doesn't run long
 enough to get to that point.  Once it locks up, it will not respond to any
 input.  
  
 More often than not, the lock up happens when I'm adding ported apps so I
 tried the obvious - not loading any.  After getting it booted up that way
 (which I'm able to do argueably because of the short amount of uptime) it
 will still lock up after 5-10 miutes of messing around with it.  I have also
 tried skipping over configuring and bringing up the Ethernet interface but
 it will still lock up.  It seems like no matter what it doing, when it locks
 up is determined by the amount of uptime which varies from 5 to 10 minutes
 or so.
  
 I have tried booting the without ACPI option and it won't even boot up
 that way due to some IRQ 19 error.  Normally I see no real problems on the
 screen during bootup.
  
 I'm running the Gigabyte 7N400-L motherboard with NForce2 chipset + Corsair
 XMS DDR + AMD XP+ 3200 cpu + ATi RADEON 9600 Pro 256MB + SATA PCI add-on
 card w/ (2) SATA HDDs + (2) ATA HDDs
  
 Shouldn't this system be fully supported?
  
 I'm going to try this again tonight without the SATA drives to see if that's
 the issue.
 
 Any other ideas would be appreciated.
 
 Steve
 
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpoX04MtDHkZ.pgp
Description: PGP signature


Re: Detect hardware changes

2005-12-21 Thread Loren M. Lang
On Mon, Dec 12, 2005 at 08:27:06AM -0600, Keith Bottner wrote:
  
  -Original Message-
  From: Loren M. Lang [mailto:[EMAIL PROTECTED]
  Sent: Friday, December 09, 2005 9:06 AM
  To: Peter Giessel
  Cc: Keith Bottner; 'FreeBSD Questions'
  Subject: Re: Detect hardware changes
  
  On Thu, Dec 08, 2005 at 12:02:25PM -0900, Peter Giessel wrote:
   On 12/8/2005 11:51, Keith Bottner seems to have typed:
[EMAIL PROTECTED]:9:0:  class=0x02 card=0x00241737 chip=0x10321737 
rev=0x10 hdr=0x00
vendor   = 'Linksys'
device   = 'EG1032 Gigabit Ethernet'
class= network
subclass = ethernet
   
   Looks like this should be supported using the nge driver.
  
  No, actually the sk driver, look at the first line of pciconfig 
  output. ifconfig -a should list a network card called skc0 which you 
  just need to configure.  If all you need is dhcp then just run 
  dhclient skc0.  Add the device to rc.conf for it to work on boot.
  Use man rc.conf for help or copy the line for the xl0 network card you 
  already have.
  
   ___
   freebsd-questions@freebsd.org mailing list 
   http://lists.freebsd.org/mailman/listinfo/freebsd-questions
   To unsubscribe, send any mail to
  [EMAIL PROTECTED]
   
  
  ipconfig -a doesn't show the skc0 device which I believe is my 
  ultimate problem. Can I infer from your earlier message that this 
  means the sk module is not being loaded or is not available? How can I 
  check to see if the loadable module is installed?
  
  Thanks,
  
  Keith
 
  Hello Keith
 
  skc0 is the controller. You should see sk0 in ifconfig -a.
 
  Can you please show us the output of ifconfig -a and rc.conf. 
 
  Thank you
  Robert
 
 Ifconfig does not show skc0 but here is the output for completeness:

Did you try ifconfig -a?  Also, any lines on sk0 or skc0 from the output
of dmesg would be helpful.

 
 xl0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
   options=9RXCSUM,VLAN_MTU
   inet 192.168.1.217 netmask 0xff00 broadcast 192.168.1.255
   inet6 fe80::2b0:d0ff:fe16:3d30%xl0 prefixlen 64 scopeid 0x1 
   ether 00:b0:d0:16:3d:30
   media: Ethernet autoselect (100baseTX full-duplex)
   status: active
 lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST mtu 16384
   inet 127.0.0.1 netmask 0xff00 
   inet6 ::1 prefixlen 128 
   inet6 fe80::1%lo0 prefixlen 64 scopeid 0x2 
 
 And rc.conf is:
 
 defaultrouter=192.168.1.1
 hostname=gsdev.bltmobile.com
 ifconfig_xl0=inet 192.168.1.217  netmask 255.255.255.0
 ifconfig_skc0=inet 10.0.130.204  netmask 255.255.255.0
 linux_enable=YES
 moused_enable=YES
 sshd_enable=YES
 usbd_enable=YES
 postgresql_enable=YES
 
 Anything else that I can send that will help?
 
 Keith
 
 
 
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpzM1f2Mgfx0.pgp
Description: PGP signature


Re: Freebsd Theme Song

2005-12-21 Thread Loren M. Lang
On Sun, Dec 11, 2005 at 07:38:12AM -0800, Danial Thom wrote:
 Because those of us with real jobs are required
 to do so.
 
 Kris doesn't just not see my point. If you can't
 see that then you can't be reasoned with either.
 
 --- Chris [EMAIL PROTECTED] wrote:


Hmm, a TOP poster as well.

 
  Danial Thom wrote:
  
   Kris is just a PR front man for a team of
   developers that is lost. Their theory on
  how to
   build a better mousetrap for MP is completely
   wrong, and now they're going to try something
   else, using the entire FreeBSD community as
   guinea pigs. First 5.4 was the answer. Then
  6.0.
   Now it looks like 6.0 sucks too. Its a damn
   shame.
   
   DT
  
  IF you are such a man that can actually call
  himself an engineer - why
  hide behind Yahoo mail?
  
  Next, IF you are as you claim to be - WHY are
  you not on the team or
  at least contributing code?
  
  To insult one person for not seeing your point
  of view is a show of
  closed mindedness - to insult a whole list of
  users ... Well, I do think
  that speaks volumes about you - as a whole.
  
  If you feel the need to insult Kris - keep it
  off-list. If you feel the
  need to insult the rest of us, you may be
  better off seeking help in the
  real world and moving on.
  
  Why would you continually expose yourself to us
  if we make you that
  unhappy?
  
  Or - is it a craving you need to satisfy by
  either bitching and moaning
  or insulting us to make yourself feel superior?
  
  If that's the case - then professional help is
  for you. Seek it, feel
  better about yourself - and move on.
  
  -- 
  Best regards,
  Chris
  
  A Smith and Wesson beats four aces.
  ___
  freebsd-questions@freebsd.org mailing list
 
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to
  [EMAIL PROTECTED]
  
 
 
 __
 Do You Yahoo!?
 Tired of spam?  Yahoo! Mail has the best spam protection around 
 http://mail.yahoo.com 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgptiUODEq4oF.pgp
Description: PGP signature


Re: Freebsd Theme Song

2005-12-21 Thread Loren M. Lang
On Sun, Dec 11, 2005 at 02:14:34AM +0100, cpghost wrote:
 On Sat, Dec 10, 2005 at 05:09:38PM +, David Gerard wrote:
  Danial Thom wrote:
  
   I vote for
   Look what they've done to my song, Ma - a
   commentary on the destruction of the (formally)
   world's best operating system.
  
  So far I'm finding 6.x a heck of a lot better than 5.x. The mousewheel
  just works, a lot more of the ports just work, sound works ... you still
   have to fiddle with /boot/loader.conf to get the sound to go, which is
  completely braindead, but I'm sure it'll be up to the standard of Linux
  distros 2001.
 
 Ahemm, speaking of sound... how about a, *cough*, working MIDI sequencer?
 Any way to attach a MIDI device to 5.x or 6.x _and_ being able to record
 from it? Anything workable yet? No? Am I missing something crucial here?

How about Timidity?  What would be nice, though, is for timidity to show
up as a hardware device.

 
  I would suggest a song about Pokemon sex toys.
 
 :)
 
  - d.
 
 Thanks,
 -cpghost.
 
 -- 
 Cordula's Web. http://www.cordula.ws/
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgp7GPrpolhOd.pgp
Description: PGP signature


Re: FreeBSD router two DSL connections

2005-12-21 Thread Loren M. Lang
On Sun, Dec 11, 2005 at 11:28:17PM -0800, Ted Mittelstaedt wrote:
 
 If both DSL lines go to the same ISP it is easy, run
 PPP on them and setup multilink PPP.  The ISP has to
 do so also.
 
 If they are going to different ISP's then you cannot
 do it with any operating system or device save BGP - the idea is
 completely -stupid- to put it simply.  If you think different,
 then explain why and I'll shoot every networking scenario
 you present so full of holes you will think it's swiss cheese.
 And if you think your going to run BGP I'll shoot that full
 of holes also.

I strongly disagree.  There are many reasons for this.  Two of which are
increased throughoutput and redundancy.  The primary problem is that you
need to make sure outgoing data for a connection is using the same line
as the incoming connection.  If the majority to all connections are
outgoing and both lines use NAT and have unique IP addresses, it's
simpler to setup.  If you have incoming connections as well, either only
one of the two lines will be used or you'll need BGP or some kind of
static route setup by the two ISPs.  For an internet cafe, most
connections will probably be outgoing so it won't be a problem.


I have done this with a Linux router and using Comcast Cable and
SpiritOne DSL.  We had all incoming connections use DSL and outgoing
connections use either line.  We balanced them by internal IP addresses,
but there might be more sophisticated methods.  I do not know what
support FreeBSD has for this kind of routing though.  At the very
minimum, you could get redundancy for outgoing connections by switching
the route to use the other line when the first one fails.

 
 Note that Steven's scenario below is for 2 circuits that
 both start at a single entity, and both end at a single entity.
 
 Ted
 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Yance Kowara
 Sent: Sunday, December 11, 2005 7:03 PM
 To: freebsd-questions@freebsd.org
 Subject: FreeBSD router two DSL connections
 
 
 Hi all,
 
 I am trying to figure out if *BSD can achieve this:
 
 I have two DSL connections to play with, and I would
 like to configure a *BSD router that can combine the
 two DSLs together.
 
 There is a howto at
 http://stevenfettig.com/mythoughts/archives/000173.php
 
 But it concerns OpenBSD and it was for a T1 connection
 using a dual T1 card. I would like to configure one on
 2 DSLs connected to two individual NICs.
 
 Is this feasible at all, or should I just invest in a
 dual Wan hardware?
 
 Kind regards,
 
 Yance
 
 __
 Do You Yahoo!?
 Tired of spam?  Yahoo! Mail has the best spam protection around 
 http://mail.yahoo.com 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 [EMAIL PROTECTED]
 
 -- 
 No virus found in this incoming message.
 Checked by AVG Free Edition.
 Version: 7.1.371 / Virus Database: 267.13.13/197 - Release 
 Date: 12/9/2005
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpZaVBIsVg6e.pgp
Description: PGP signature


Re: IDE recomendations.

2005-12-21 Thread Loren M. Lang
On Mon, Dec 12, 2005 at 09:24:48AM -0500, Sean wrote:
 I want to try and find some time to start to start beating on some code 
 again, it has been many years since, and wanted to ask for some 
 recommendations on an IDE package.
 
 In the past I just used a text editor, but want something more.
 Right now I been looking over XEmacs, but wanted some other input.
 
 What are others using here and why?

Vim is my IDE.  It support syntax highlighting, word completion, tags
(useful for quickly jumping to a function), software version control,
support for integrating with build system and jumping to the line of
code that generated the error, and integration with various debuggers.

Some of this functionality is improved/added by the vim plugins I use.

 
 
   Thanks
   Sean
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpT8YMcvCKof.pgp
Description: PGP signature


Failed to alloc memory

2005-12-09 Thread Loren M. Lang
I am having trouble to get any network cards to work in my laptop's
PCMCIA card slot.  I get errors about not being able to map or allocate
enough memory.  This has been happening for a RealTek 8139 100Base-T
network card and now an Atheros based WiFi card.  Both cards work, and
the PCMCIA slot worked in this laptop for both Windows ME and Red Hat
Linux.  Is there any way to get FreeBSD to pre-allocate memory for the
PCMCIA card or any other approach that will get my WiFi card to work?
The exact error message I'm getting for the atheros card is:

ath_hal: 0.9.14.9 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413)
ath0: Atheros 5212 mem 0x8800-0x8800 irq 9 at device 0.0 on
cardbus0
ath0: [GIANT-LOCKED]
ath0: unable to alloc memory for 1000 tx descriptors, error 12
ath0: failed to allocate descriptors: 12
device_attach: ath0 attach returned 12

I've have this same problem for 6.0, 5.4, 5.3, 5.2.1, and maybe even
4.9, but I can't remember that far back.  It's been ages.  This isn't
related to the 16 meg limit for DMA is it?  I wouldn't think PCI/Cardbus
devices would have the same problems as ISA device.
-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpNk0ADAOgCl.pgp
Description: PGP signature


Re: Detect hardware changes

2005-12-09 Thread Loren M. Lang
On Thu, Dec 08, 2005 at 12:02:25PM -0900, Peter Giessel wrote:
 On 12/8/2005 11:51, Keith Bottner seems to have typed:
  [EMAIL PROTECTED]:9:0:  class=0x02 card=0x00241737 chip=0x10321737 
  rev=0x10
  hdr=0x00
  vendor   = 'Linksys'
  device   = 'EG1032 Gigabit Ethernet'
  class= network
  subclass = ethernet
 
 Looks like this should be supported using the nge driver.

No, actually the sk driver, look at the first line of pciconfig output.
ifconfig -a should list a network card called skc0 which you just need
to configure.  If all you need is dhcp then just run dhclient skc0.  Add
the device to rc.conf for it to work on boot.  Use man rc.conf for help
or copy the line for the xl0 network card you already have.

 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpCCHLX2QZ8x.pgp
Description: PGP signature


Re: Video Conferencing Server Software ... Recommendations ... ?

2005-12-09 Thread Loren M. Lang
On Wed, Dec 07, 2005 at 08:58:35PM -0400, Marc G. Fournier wrote:
 
 Basically, I'm looking for something to run on a remote server, that other 
 parties to connect to, create conferences, invite other users into, etc 
 ... including full video / audio and, if possible, whiteboard ...
 
 Does anyone have any recommendations that work under FreeBSD?

For IPv4 multicast and partial IPv6 support there are the old mbone
tools like sdr/vic/vat/rat/wbd/wb/nte.  That includes tools for setting
up and advertising conferences, and using audio, video, whiteboard, and
text chat.  Though they might be a little old.  There is also programs
like gnomemeeting, kphone, and other h232 or sip apps for doing
conferencing, but, at least gnomemeeting, isn't as well suited for large
groups.  I haven't used kphone or any other h232 or sip apps.

 
 Thanks ...
 
 
 Marc G. Fournier   Hub.Org Networking Services (http://www.hub.org)
 Email: [EMAIL PROTECTED]   Yahoo!: yscrappy  ICQ: 7615664
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpLLIX2697Ok.pgp
Description: PGP signature


Re: pkgdb format

2005-12-09 Thread Loren M. Lang
On Wed, Dec 07, 2005 at 08:55:10PM +, eoghan wrote:
 Hello
 Ive recently upgraded to 6.0 and I decided to upgrade my ports... So  
 I ran a:
 portupgrade -af
 Its running fine, but each time its upgrade a port I get:
 [Updating the pkgdb format:bdb1_btree in /var/db/pkg ... Failed  
 `Inappropriate file type or format'; rebuild needed] [Rebuilding the  
 pkgdb format:bdb1_btree in /var/db/pkg ... - 439 packages found (-0  
 +439)

Just remove /var/db/pkg/pkgdb.db and it should rebuild the database
using the new format.

 
 Just wondering if its to do with my upgrade to 6.0 (from 5.4)
 Thanks
 Eoghan
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpFBozfFsQlH.pgp
Description: PGP signature


Re: Sligtly OT: setting static routes on clients

2005-12-09 Thread Loren M. Lang
On Fri, Dec 09, 2005 at 04:01:02PM +0100, Andrea Venturoli wrote:
 Hello.
 I've got a network of clients on which I'd like to set static routes; 
 these are mainly (but not only) Windows machines, administered through a 
 couple of FreeBSD servers.
 Is there any way to do this with DHCP?
 Or via Samba (netlogon.cmd)?

Have you considered a dynamic routing protocol like rip or ospf using
the routed or zebra daemons for freebsd?  I know some versions of
windows come with, or have a windows component you can add for the rip
protocol.

 
  bye  Thanks
   av.
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpJXxOjQSwww.pgp
Description: PGP signature


GPIB support

2005-09-09 Thread Loren M. Lang
Recently, I discovered that FreeBSD supports at least one GPIB PCMCIA
card in it's kernel sources.  There also seems to be a userspace library
for accessing it.  I had done some work with GPIB in the past, but I
never realized FreeBSD had any support for it, so we stuck with windows.
How come this isn't listed in the hardware compatibility list for
freebsd?

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpaVvEg4BUSi.pgp
Description: PGP signature


Re: moving everything except a directory

2005-09-09 Thread Loren M. Lang
On Fri, Sep 30, 2005 at 05:40:00PM -0500, Brian John wrote:
 Say I am at ~ and I have 10 directories inside named 1, 2, 3, 4 ,5, 6, 
 7, 8, 9 and 10.  What command can I use to move everything but directory 
 2?  What if I wanted to move everything but directories 2 and 7?
 

find ~ -mindepth 1 -maxdepth 1 ! -name 2 -exec mv {} /path/to/new/place

find ~ -mindepth 1 -maxdepth 1 ! -name 2 ! -name 7 -exec mv {} 
/path/to/new/place

 I'm not sure how to use the mv command to do this in 1 comand.

 
 Thanks
 
 /Brian
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgplFCO3nt9k0.pgp
Description: PGP signature


Re: atacontrol

2005-09-09 Thread Loren M. Lang
On Thu, Sep 08, 2005 at 08:54:10PM +0200, G?ran Nilsson   wrote:
 Hi. I have recently installed Freebsd 5.4 . I have also installed a cheap
 raidcontroller . On the controller i put on a 200+120gb disk.
  
 In the raidcontroller i create a JBOD raid, showing me that i now have 301gb
 of disk. That's a loss of 19gb, i can live with that.
 
 After login I do a atacontrol create JBOD ad5 ad6. It now creates ar0
 device with 223gb of space. That's nearly a 100gb of disk loss!
 If and how can i prevent the huge 100gb of storage loss?

I'd look at geom_ccd over atacontrol for this.

man ccd

  
 /Regards dukka
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpGmJmOGA5ii.pgp
Description: PGP signature


/var superblock mismatches first alternate

2005-07-03 Thread Loren M. Lang
Twice while ripping a particular music cd with grip, my system paniced
when it hit track 9.  On the second reboot, my system failed fsck on the
/var partition complaining the superblock differed from the first
alternate block and dropped me to a shell.  I tried running fsck /var
and got the same message, then I tried fsck -b 32 /var and fsck -b 89808
/var and in both cases it said it was not a superblock.  Any ideas on
how to resolve this?  I am running FreeBSD 5.4-RELEASE-p1 using UFSv2.

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgphGWlWe9YEk.pgp
Description: PGP signature


Jack and Icecast

2005-04-24 Thread Loren M. Lang
I'm curious what clients people use to send data to icecast.  I tried
the native client, ices, but it kept bus erroring.  I've found
oddcastv3-jack and I'm working on porting it to freebsd.

Also, how well does jack work on FreeBSD.  I can't seem to get it to
work.  Any tips on using it?  Every program I've tried, mplayer,
alsaplayer, hydrogen, can't connect to the jack server.

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpNTHkWaUcOU.pgp
Description: PGP signature


Re: Connecting to X Server on a FreeBSD Box

2005-04-20 Thread Loren M. Lang
On Sun, Apr 17, 2005 at 02:40:15PM +0100, Chris Hodgins wrote:
 On 4/17/05, Soheil Hassas Yeganeh [EMAIL PROTECTED] wrote:
  Hi,
  
  I start an X server on my FreeBSD box. I want to run some remote X
  applications from my fedora core 2.
  So, I have ssh to the fedora box and typed gedit.
  But it says :
 (gedit:12438): Gtk-WARNING **: cannot open display:
  
  After I had export  DISPLAY=freebsdboxip:0.0
  it says again:
 (gedit:12438): Gtk-WARNING **: cannot open display:
  
  But I can run freebsd application from my fedora core 2.
  What is the problem?
 
 If you are using ssh anyway, you can tell ssh to do X11 forwarding. 
 Read the man page first as there is some slight security risks
 involved depending on the way your machine is used.  Try this:
 
 ---
 $ ssh -X [EMAIL PROTECTED]

With versions of openssh newer than 3.8, you probably want -Y instead of
-X.

 Password: enter password
 hostname$ xterm
 ---
 
 Chris
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpWXZ9suaRZj.pgp
Description: PGP signature


Re: gnome2 over an ssh2 connection

2005-04-20 Thread Loren M. Lang
On Mon, Apr 18, 2005 at 09:46:10PM -0700, Joshua Lewis wrote:
 I connect to my FreeBSD system from a PowerBook and was wondering (mostly
 for fun) if I can run Gnome2 or KDE or something within a Terminal
 connection on my PowerBook.

Yes, but you need an X server for your power book.  Apple has a copy of
XFree86 available on their website, I'd recomend installing it.

 
 I can manage my FreeBSD system fine from a CLI but thought it would be fun
 to run Gnome or KDE.

Yea, you could run a whole Gnome or KDE desktop over ssh, but it might
be a little slow.  I'd recommend using VNC or running a local KDE or
Gnome desktop on the powerbook and only remote the apps you need to.

 
 Is what I am mentioning even feasible? Right now after following the
 handbook for installing gnome2 (5.7.1.2 Installing GNOME) I startx and get
 an error Fatal server error:
 xf86EnableIO: Failed to open /dev/io for extended I/O.

You can't run startx over ssh.  startx is used to start the X server and
the initial clients, but you need the X server to run on the power book
where the mouse and keyboard is, not the freebsd box.  That's why you
need to install X on the power book.  All the clients like the KDE
desktop and xsolitaire can be run off of the freebsd box, but the X
server is the program that access the display, mouse, and keyboard and
so it has to run on the machine your in front of.

 
 If I am just loony let me know otherwise if what I am trying to do is
 feasible I will ask the gnome mailing list.
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpI04Gy0BIvr.pgp
Description: PGP signature


Re: vmware alternative for freebsd?

2005-04-20 Thread Loren M. Lang
On Tue, Apr 19, 2005 at 02:43:38PM +0100, Grant wrote:
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:owner-freebsd-
  [EMAIL PROTECTED] On Behalf Of Didier Wiroth
  Sent: 19 April 2005 14:35
  To: freebsd-questions@freebsd.org
  Subject: vmware alternative for freebsd?
 
 
  the ports tree. I was wondering if there are any alternatives to vmware,
  commercial or freeware. I'm talking about a host version (I'm not talking
  about guest OSes).
 
 Hey,
 
 There is a few out there for fbsd.. but the only one I have used with
 success is qemu.
 
 http://www.freebsd.org/cgi/url.cgi?ports/emulators/qemu/pkg-descr
 
 Its quite quick, but I feel it isn't as quick as vmware is/was.
 
 But it is something to look at, if its just simple things you need from it
 it will be fine, but anything CPU heavy I find its not great on.
 
 Another one that you might want to look at is bochs
 http://www.freebsd.org/cgi/url.cgi?ports/emulators/bochs/pkg-descr

There is also wine, depending on what exactly you need.  Dosbox is nice
if all you need to do runs in dos.

 
 I cant really say much about this one, I've tried it before but never got
 anywhere, so it might be good for what you need. Or it might be rubbish :)
 
 Anyways gotta do some work :)
 Bye. 
 Grant.
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpOYx67f2UlN.pgp
Description: PGP signature


Re: ELF type 3 not known

2005-04-17 Thread Loren M. Lang
On Wed, Apr 13, 2005 at 01:28:27PM -0400, Steven Friedrich wrote:
 I got this error on one of two 4.11 boxes.

is linux.ko loaded?  That's the module responsible for reconizing elf
type 3 if I'm not mistaken.

 
 The other box seems to have upgraded without incident.
 
 I use gnome_upgrade.sh
 
 
 ---  Installing the new version via the port with make flags: BATCH=yes 
 GNOME_UPGRADE_SH_VER=2.10-3
 DISABLE_VULNERABILITIES=1
 ===  Installing for linux-gtk2-2.2.1_3
 ===   linux-gtk2-2.2.1_3 depends on file: 
 /compat/linux/usr/X11R6/lib/libX11.so.6 - found
 ===   linux-gtk2-2.2.1_3 depends on file: 
 /compat/linux/usr/lib/libglib-2.0.so.0 - found
 ===   linux-gtk2-2.2.1_3 depends on file: 
 /compat/linux/usr/lib/libatk-1.0.so.0 - found
 ===   linux-gtk2-2.2.1_3 depends on file: 
 /compat/linux/usr/lib/libjpeg.so.62 - found
 ===   linux-gtk2-2.2.1_3 depends on file: 
 /compat/linux/usr/lib/libpng12.so.0.1.2.7 - found
 ===   linux-gtk2-2.2.1_3 depends on file: 
 /compat/linux/usr/lib/libtiff.so.3.6.1 - found
 ===   linux-gtk2-2.2.1_3 depends on file: 
 /compat/linux/usr/lib/libpango-1.0.so.0.200.1 - found
 ===   linux-gtk2-2.2.1_3 depends on executable: rpm - found
 ===   Generating temporary packing list
 ===  Checking if x11-toolkits/linux-gtk2 already installed
 gtk2-2.2.1-4.i386.rpm
 ELF binary type 3 not known.
 Abort trap
 *** Error code 134
 
 
 Steven Friedrich
 5112 Mount Holyoke Drive
 Louisville, KY  40216
 502-447-7730
 
 
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpSmgCLwYDB2.pgp
Description: PGP signature


Re: Howto monitor system security

2005-04-14 Thread Loren M. Lang
On Mon, Mar 14, 2005 at 10:30:02AM +0100, h p wrote:
 [...]
   FreeBSD security email is rather anoying, because it keeps sending
   messages even if nothing has changed.  I need an email sent to me only
   if there is something abnormal.
 
  What happens when someone breaks in and disables it from sending email?
 
  Think of it as a kind of heartbeat.
 
 Well, different minds work differently, but for me it adds vastly to
 the noise level.
 If everything is normal, I get a mail. If there is something wrong, I
 get a mail. A different one, for sure, but I have to actually read it
 to know.
 If I only get a mail in a special case, I am much more inclined to
 read it than if I get a mail every day for 300 days and on the 301st
 there is a mail with a warning. I've stopped paying attention long
 before that.
 
 Just my thoughts

But what if that email never comes...

 
 Helge
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpS93totEUcR.pgp
Description: PGP signature


Re: Loading .bash_profile under X-Windows

2005-04-11 Thread Loren M. Lang
On Sat, Apr 09, 2005 at 10:40:01AM +0200, Kiffin Gish wrote:
 How can I get terminal under X-Windows to load my .bash_profile (and any
 other stuff) that is usually loaded when at the initial prompt?
 
 A more general question might be: what files (.profile, .login, whatever)
 and in what order are loaded every I login via a shell and how are these
 settings propagated up through Gnome desktop?
.bash_profile, .profile, .login are read on login shells only.  When a
shell is invoked by the exec() syscall, it's name is prepended with a -
to mean it's a login shell and most shells work differently like reading
.profile.  For example running ps ax|grep bash on my system yields:

...
81288  q1  Is 0:00.02 bash
88710  q3  Is 0:00.03 -bash (bash)
...

The first shell was just started normally and the second was started as
a login shell.  Connecting to a machine through ssh or logging in on a
text console starts a login shell, but running an xterm in X-Windows or
running bash from whatever shell your already in isn't since your
already logged in.  If you start X-Windows with the startx command, your
login is considered when you first logged in on the text console and
that same environment is propagated to the gui environment, gnome in
your case.  When you log in from a graphical log in utility, it's a
little more complicated.  The gui login program, whether it be xdm, gdm,
or kdm starts a shell script which eventually starts your gui
environment.  The problem is that it's not usually the same as your
login shell, but whatever shell was used to write the script.  In some
cases you can write your own shell script called .xsession or .Xclients
in your home directory and it can load in .bash_profile and then start
gnome.

 
 Thanks a lot in advance. 
 
 -- 
 
 Kiffin Rex Gish
 Gouda, The Netherlands
 
  
 
 

 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]


-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpcvFFOATIxw.pgp
Description: PGP signature


Re: egetty

2005-04-11 Thread Loren M. Lang
On Sun, Apr 10, 2005 at 06:50:38AM +0200, Gert Cuykens wrote:
 On Apr 10, 2005 4:47 AM, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote:
  Gert
  I see you are using pwd command to display where in directory tree
  you currently pointing
  There is a way to configure FBSD to display the directory path as a
  prefix in front of the command line so you know where you are at in
  the directory tree at all times, thus eliminating the need to use
  the pwd command.
  Issue following command from command line
  
  set prompt = # %/ # that's #space%/space
  
  /root/.cshrc gets executed when you log on as root.  Find and change
  the set prompt command in .cshrc to the one above and you will never
  have to use the  pwd  command again.
  
 
 No its to long then :)

In bash, there is the ability to have it show just the current
directories name instead of the whole path, I use this for my shell to
cut down on space.  Does (t)csh have this as well?

 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpMUVVmOf8Wx.pgp
Description: PGP signature


Re: X on a server Re: Freebsd vs. linux

2005-04-03 Thread Loren M. Lang
On Sun, Feb 13, 2005 at 09:53:12AM +0100, Anthony Atkielski wrote:
 Chad Leigh -- Shire.Net LLC writes:
 
  You can install the X libraries and client apps on your server -- this
  works fine at secure level 3 and does not require kernel configurations
  changes or special daemons or anything.  What it allows you to do is 
  then link software against the X libraries and then redirect the 
  display to your workstations X server.  This meets your criteria and 
  can be handy for certain things.  Your apps still run in userland only
  and there is no HW touching stuff. You are not running the X Server on
  your FBSD Server machine.
 
 I'll consider it, although it still sounds complicated.
 
 What do I gain from X that I don't already have with remote terminal
 sessions like those created with SecureCRT? I know it looks pretty, but
 what server-related things can I do with X that I cannot do with
 ordinary terminals?  I'm not aware of anything right now; it seems that
 everything can be done from a command line (thank goodness--working with
 Windows is a nightmare precisely _because_ so many things cannot be done
 from a command line).

Ethereal vs. tcpdump.  This is the biggest reason why I have X libraries
on my firewall.  I don't actually run an X server on it or even have a
screen on it, but I forward X11 over ssh to the client I'm working on.

 
 -- 
 Anthony
 
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgprC4BusCk5Q.pgp
Description: PGP signature


Re: Portsnap necessary? CVSup insecure?

2005-03-16 Thread Loren M. Lang
On Wed, Mar 16, 2005 at 06:49:05PM -0500, Danny wrote:
 On Wed, 16 Mar 2005 23:35:56 +, Kris Kennaway [EMAIL PROTECTED] wrote:
  On Wed, Mar 16, 2005 at 06:06:07PM -0500, Danny wrote:
   With regards to: http://www.daemonology.net/portsnap/
  
   Should I be concerned about my servers that use CVSup?  Do the FreeBSD
   guru's refuse to use CVSup, or is this overkill?
  
  Depends on your threat model, i.e. what are you afraid of?
 
 I will respond to your question with a question to hopefully answer
 both of our questions. :)
 
 When is the last time a FreeBSD CVSup server was compromised - if ever?
 
  If it's something that cvsup doesn't protect against, and portsnap does, 
  then
  use the latter.
 
 Assuming Portsnap protects and/or overcomes against all of CVSup's
 limitations:
 
 # CVSup is insecure. The protocol uses no encryption or signing, and
 any attacker who can intercept the connection can insert arbitrary
 data into the tree you are updating.
 # CVSup isn't end-to-end. Related to the previous point, this means
 that anyone who can compromise a CVSup mirror can feed arbitrary data
 to the people who are using that mirror.
 # CVSup isn't designed for frequent small updates. While CVSup is very
 good at distributing CVS trees, and is very efficient for updating a
 tree which has been significantly changed (eg, by a month or more of
 commits), it has transmits a list of all the files in the tree, which
 makes it quite inefficient if only a few files have changed.
 # CVSup uses a custom protocol. This can cause problems for people
 behind firewalls -- outgoing connections on port 5999 need to be
 permitted -- and it needs a heavyweight server (cvsupd).
 
 I don't know, it's just that if the FreeBSD org and handbook recommend
 using CVSup, it's can't be that bad?

I don't much about portsnap, but if your looking for a secure way to do
updates, plain old cvs through an ssh connection is very secure
assuming you verified the fingerprint before hand.  This will protect
against everything mentioned above minus the cvs service itself being
compromised, but then again, no protocol is safe against that.

 
 Thanks Kris,
 
 ...D
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgprgbU3YbsNz.pgp
Description: PGP signature


Re: Why not?

2005-03-15 Thread Loren M. Lang
On Mon, Mar 14, 2005 at 10:55:00AM -0500, Bart Silverstrim wrote:
 
 On Mar 14, 2005, at 7:39 AM, Giorgos Keramidas wrote:
 
 On 2005-03-13 16:53, Bart Silverstrim [EMAIL PROTECTED]  
 wrote:
 
 On the contrary, there are numerous cases when local patches, specific
 to the distribution of Linux that is used, are used:
 
 https://www.redhat.com/archives/linux-lvm/2002-November/msg00050.html
 http://www.redhat.com/archives/fedora-announce-list/2004-February/ 
 msg00018.html
 
 Backported fixes are not evil, but they are bad when they are available
 only if you are running FooLinux version X.
 
 Just for drivers? I wasn't sure what DM was...are any of these patches  
 that were released available as source for other Linux kernels, or are  
 these things being released without ever giving out the source to  
 integrate with the primary Linux kernel tree?

Device mapper which is to linux as geom is to freebsd.  The code was
already part of the official linux 2.6 sources, redhat just wanted to
use a 2.4 kernel, but still have the device mapper system up to date
with 2.6.

 
 But still, there is one source kernel, and unless the vendors did
 something proprietary (which I don't believe they're supposed to be
 allowed to do), you can compile your own kernel with your own set of
 enabled and disabled features from the Linux kernel source tree
 whether you're running Red Hat or Debian; it may break if that
 particular distro is depending on certain features as you have it
 configured and you fubar the new kernel's config, but it is still a
 matter of tweaking that configuration to get it working again.
 
 Hardly.  Configuration changes will never fix a driver that is only
 available as a patch to the kernel source tree, when the patch fails
 to apply, build or install correctly -- a common case with some drivers
 (i.e. Cisco VPN or SysKonnect).
 
 You're right, if you have an application that requires modification to  
 the kernel then config changes won't fix it.  But that isn't the common  
 case, and you should be able to take that application and apply it to  
 the kernel tree source to create the working version, no?  Or are they  
 distro specific?  In the few times I ran into it the melding wasn't  
 distro-specific.

The biggest problem with all the various linux kernel is that, since
linus chose to make linux be intolerant of binary drivers, you need the
exact kernel that a driver was compiled for.  Some vendors like nvidia
provide a wrapper around their binary driver to avoid this, but many
vendors shipping binary-only driver do not as was the case with my wifi
card.  I have to have one specific kernel of one specific linux distro,
neither of which I was using at the time.

 
 Let us put aside for a while the blatant error of considering three
 distinct systems as one, when they are just that: three distinct  
 systems
 that just happen to share a lot of code and like cooperating on work
 that is a benefit for all three.
 
 Then it would best be summed up as a difference in opinion over  
 operations management and organization management.
 
 I can't download the sources for NetBSD's kernel, compile it on my
 FreeBSD box, and have it work no matter how much tweaking I do to the
 configuration...if I'm wrong, please someone correct me.
 
 Actually, you can.  The NetBSD folks state that only a system  
 relatively
 compliant with POSIX is required for cross-building NetBSD on a local,
 non-NetBSD system:
 
 http://cvsweb.netbsd.org/bsdweb.cgi/src/BUILDING?rev=1.53content- 
 type=text/x-cvsweb-markup
 (See the REQUIREMENTS section.)
 
 No, I didn't mean compile it and deploy it.  I mean replace my system's  
 kernel with that kernel and have it work.  The source trees are  
 different, the resulting kernel would expect to work on a NetBSD  
 *system*, not a FreeBSD system with a NetBSD kernel.
 
 Redundancy is good from a survival perspective.  Diversity is also  
 good,
 from an evolutionary perspective.  For every bad thing Linus can say
 about having separate teams working on the systems they enjoy working
 with, we can probably come up with htwo reasons why this is good.
 
 Again, it's a difference in organization and management opinion.
 
 Hardly.  Otherwise, it would be easy to point a browser to a single,
 central place and browse the history of the Linux kernel from 0.9.x to
 1.x and then to 2.x.  The fact that some bits are available in a
 proprietary repository somewhere is not good enough.
 
 I was under the impression that kernel.org was the authoritative source  
 for the Linux kernel.  What people are doing on the side was their own  
 project.  *shrug*  I could be wrong :-)

kernel.org is the official source of straight vanilla linux, but no
distros use vanilla linux, they all have tons of patchs applied to it,
some more than others.  Even source code device drivers sometimes have
trouble compiling with these heavily patch kernels.  Each distro has too
worry about what security patches their 

Re: DPMS not turning off LCD screen

2005-03-14 Thread Loren M. Lang
On Wed, Mar 09, 2005 at 10:25:45PM -0500, Stephen J. Roznowski wrote:
 I have a Sony SDM-HX93 LCD monitor running off an Nvidia GeForce FX
 5500.
 
 I have the DPMS option set in my xorg configuration file, but while
 the screen turns off, the monitor never enters power off mode (it
 remains 'backlit').
 
 Any suggestions where to look for the error?

What does xset say about dpms?

You may have to tell xscreensaver or kdesktop specifically to use dpms
in addition to the xorg.conf file.

 
 Thanks,
 -- 
 Stephen J. Roznowski([EMAIL PROTECTED])
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpypV35bDaH4.pgp
Description: PGP signature


Re: ipfw or pf

2005-03-13 Thread Loren M. Lang
On Fri, Mar 04, 2005 at 01:41:23PM +0100, Albert Shih wrote:
  Le 03/03/2005 ? 13:07:53-0800, Loren M. Lang a ?crit
   Well it's not de syntaxes, I always use packet filter system (sometime on
   hardware like Foundry/Cisco) where the rule is : First match first use. 
   And
   the pf use entire rules is very strange for me (I known I can use ?quick?
   butwell it's not the philosophy I think).
  
  I like first match better too, but I think pf is sufficiently better
  that I just use it with quick over ipfw.
  
 
 Better on what ?

More security features like srubbing packets.  This can look for errors
like bad tcp flag combinations that some port scanners might use.  Also,
it is just more flexible by using tables for matches that can even be
updated dynamically.  ipf and ipfw would require a completely new rule
to change the firewall.  Tables can be used to, say, keep track of a
blacklist of ip address like the ones that keep trying to log into ssh
accounts on my server that don't exists.

pf also has built-in passive os fingerprinting if you think that might
be useful.

Read through the pf faq on openbsd.org.

 
 I really like to known. And my question is not a troll or something like
 that.
 
 Regards
 
 
 --
 Albert SHIH
 Universite de Paris 7 (Denis DIDEROT)
 U.F.R. de Mathematiques.
 Heure local/Local time:
 Fri Mar 4 13:40:29 CET 2005

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpFJzYOvayaR.pgp
Description: PGP signature


Re: What's the easiest way to do a backup and verify?

2005-03-13 Thread Loren M. Lang
On Mon, Mar 07, 2005 at 09:47:31AM -0500, Jerry McAllister wrote:
  
  Is there an easy way to combine a backup and verify when doing backups
  with dump?
  
  On Windows NT it's just a matter of checking a box.  I seem to recall
  the last time I looked into this on UNIX there was no easy way to
  accomplish a verify operation for a backup, but perhaps things have
  changed with FreeBSD 5.3 (?).
  
  I've never had a problem with backup (I backup to DAT tape), but I'd
  feel better if every backup was followed by a verify to make sure the
  tape is readable.
 
 Actually, if used frequently for backups - such as every day, DAT is
 notoriously prone to failure.So, it is a good idea to check dumps
 made to DAT.   Unfortunately, there is not a reasonable way to 
 automatically do it.   There is a verify, but it cannot work on a
 running system, because it compares files (inodes) on the tape back
 to the ones on disk.  Any changes mean an error, even if it was a
 real change in the file between the time it was written and the
 time it was read back.
 
 The only real thing you can do is to read back the tape and look
 for a couple of files with fairly high inode numbers for each file
 system dumped.If you can read them, you can assume the tape
 is readable.

I'm not very familiar with tapes, but I think that the dump is written
straight out to something like /dev/st0 right?  So then wouldn't a
second dump of the same snapshot diffed to the tape device be a good for
a verify?

Position tape at beginning of dump
dump / | diff - /dev/st0

Though I don't have much experience with either dump or tapes to verify.

 
 jerry
 
  
  -- 
  Anthony
  
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgphHnj25wEf4.pgp
Description: PGP signature


Re: How to merge an unused partition.

2005-03-13 Thread Loren M. Lang
On Sat, Mar 12, 2005 at 09:09:47PM -0600, Chris wrote:
 Heya folks - here's my issue; I removed a OS from my drive and that freed
 up 10 gig. I wish to merge the free 10 gig into my FreeBSD file system.
 
 Here's what she looks like via fdisk:
 
 Disk name:  ad1FDISK Partition 
 Editor
 DISK Geometry:  9729 cyls/255 heads/63 sectors = 156296385 sectors (76316MB)
 
 Offset   Size(MB)End Name  PType   Desc  Subtype
 
 0  10236   20964824- 12 unused0
  20964825  66079  156296384ad1s1  8freebsd  165
 156296385  2  156301487- 12 unused0
 
 
 So - what do I need to do to take the 1st line and merge it into the 
 existing system?

The big problem with merging it in is that everything is designed to
grow at the end, not at the beginning.  growfs can be used to extend a
filesystem afterwards, but not before.

One idea that might work is to use some kind of volume management system
like vinum.  If your current system already used that, this would be a
simple matter.  What you could do though it to setup vinum on the unused
partition and start moving data over.  Eventually you could extend vinum
with the second partition once all the data is moved over.  If you
aren't using more than about 9 gigs total on freebsd right now, then you
just have to move data over once.

 
 Sorry for the formatting
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgp7JX8FtIu5h.pgp
Description: PGP signature


Re: chmod equivalent to find commands

2005-03-13 Thread Loren M. Lang
On Sat, Mar 12, 2005 at 06:53:59AM -0500, Fafa Diliha Romanova wrote:
 hello.
 
 i know there's an equivalent to these two find commands that
 can be summed up in one chmod command:
 
 find . -type d -exec chmod 755 {} \;
 find . -type f -exec chmod 644 {} \;

The EXACT equivalent would be:

find . -type d -exec chmod u=rwx,go=rx {} \;
find . -type f -exec chmod u=rw,go=r {} \;

But I take it that that isn't exactly what your looking for.  Your
probably looking for something like chmod -R u=rwX,go=rX .

 
 it fixes my permissions ...
 i haven't tested this yet but i think it's wrong: chmod -R u+rwX,a+rX

This may work it depends on exactly what you need to do and how bad your
permissions are messed up.  Instead of a+rX, it might be better to do
go+rX since you already have u covered, but I don't think it will make a
big difference.  Also, this adds to the existing permissions, it won't
take away any permissions like my example earlier does.  Lastly, the big
difference between this and the find version is that the find version,
both mine and yours, will set the execute bit on all directories and not
on any normal files where the recursive chmod with the X permission with
set the x permission on any file/directory that already has at least one
type of execute permission already set and not on any other files or
directories.  So if your permissions are messed so badly that you have
directories without any execute permission, this won't fix that.  The
find version on the other hand will ignore everything that is not a
normal file or directory (i.e. fifos, sockets, device files), but this
probably won't be a big deal either.  The single recursive chmod I gave
you will most likely be what you need.

 
 what would be the best solution here?
 
 thanks,
 -- fafa
 
 -- 
 ___
 Sign-up for Ads Free at Mail.com
 http://promo.mail.com/adsfreejump.htm
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpeTFjDB1JLg.pgp
Description: PGP signature


Re: chmod equivalent to find commands

2005-03-13 Thread Loren M. Lang
On Sat, Mar 12, 2005 at 09:53:02PM +0200, Giorgos Keramidas wrote:
 On 2005-03-12 10:30, Eric McCoy [EMAIL PROTECTED] wrote:
 Fafa Diliha Romanova wrote:
  hello.
 
  i know there's an equivalent to these two find commands that
  can be summed up in one chmod command:
 
  find . -type d -exec chmod 755 {} \;
  find . -type f -exec chmod 644 {} \;
 
 Uhm, why?  Even if that were possible, isn't clarity more important that
 stuffing as many actions as possible in one line?
 
 What you list above is similar to the way I use for changing the
 permissions of files/dirs and it works all the time.
 
 There's no reason to try to write one, long, complicated command just
 for the sake of making it one command instead of two.  Otherwise, you
 may as well do more complex stuff like:

Summing it up into one command does not neccessarily mean it's longer or
more complicated.  I use the following command all the time to fix
permissions similar to what he seems to be doing.  Though it's not
technically equivalent, it's probably all he needs.

chmod -R u=rwX,go=rX .

My umask of 022 simplifies the command to the following:

chmod -R =rwX .

 
   find . | while read line; do
   mode=''
   [ -d ${line} ]  mode=0755
   [ -f ${line} ]  mode=0644
 
   [ -n ${mode} ]  echo chmod ${mode} \${line}\
   done | sh
 
 But this is getting quickly very difficult to remember easily and repeat
 consistently every time you want to do something similar :)
 
  what would be the best solution here?
 
  I would do it the same way you do, but with xargs instead:
 
  find . -type X -print0 | xargs -0 chmod XXX
 
 This is an excellent way to do this, IMHO.
 
  If you were feeling crazy and use sh:
 
  find . | while read path; do \
if [ -d $path ]; then chmod 755;
else chmod 644; fi; \
  done
 
 I guess you meant to write:
 
 find . | while read path; do \
   if [ -d $path ]; then chmod 755 ${path};
   else chmod 644 ${path}; fi; \
 done
 
 Otherwise, many chmod failures are the only result.
 
 But this has a minor buglet.  It will change everything that is not a
 directory to mode 0644.  This mode is ok for files, but it may not be ok
 (or it may even fail) for other stuff (symbolic links, for instance).
 
 - Giorgos
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgppl3wPpj89X.pgp
Description: PGP signature


Re: chmod equivalent to find commands

2005-03-13 Thread Loren M. Lang
On Sun, Mar 13, 2005 at 02:09:12AM -0800, Loren M. Lang wrote:
 On Sat, Mar 12, 2005 at 06:53:59AM -0500, Fafa Diliha Romanova wrote:
  hello.
  
  i know there's an equivalent to these two find commands that
  can be summed up in one chmod command:
  
  find . -type d -exec chmod 755 {} \;
  find . -type f -exec chmod 644 {} \;
 
 The EXACT equivalent would be:
 
 find . -type d -exec chmod u=rwx,go=rx {} \;
 find . -type f -exec chmod u=rw,go=r {} \;
 
 But I take it that that isn't exactly what your looking for.  Your
 probably looking for something like chmod -R u=rwX,go=rX .

And one last thing, I'm assuming your umask is probably 022.  When chmod
doesn't have the u, g, o, or a qualifies, then it uses the umask to mask
the permission bits as appropriate so the command can be simplified to
the following:

chmod -R =rwX .

 
  
  it fixes my permissions ...
  i haven't tested this yet but i think it's wrong: chmod -R u+rwX,a+rX
 
 This may work it depends on exactly what you need to do and how bad your
 permissions are messed up.  Instead of a+rX, it might be better to do
 go+rX since you already have u covered, but I don't think it will make a
 big difference.  Also, this adds to the existing permissions, it won't
 take away any permissions like my example earlier does.  Lastly, the big
 difference between this and the find version is that the find version,
 both mine and yours, will set the execute bit on all directories and not
 on any normal files where the recursive chmod with the X permission with
 set the x permission on any file/directory that already has at least one
 type of execute permission already set and not on any other files or
 directories.  So if your permissions are messed so badly that you have
 directories without any execute permission, this won't fix that.  The
 find version on the other hand will ignore everything that is not a
 normal file or directory (i.e. fifos, sockets, device files), but this
 probably won't be a big deal either.  The single recursive chmod I gave
 you will most likely be what you need.
 
  
  what would be the best solution here?
  
  thanks,
  -- fafa
  
  -- 
  ___
  Sign-up for Ads Free at Mail.com
  http://promo.mail.com/adsfreejump.htm
  
  ___
  freebsd-questions@freebsd.org mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to [EMAIL PROTECTED]
 
 -- 
 I sense much NT in you.
 NT leads to Bluescreen.
 Bluescreen leads to downtime.
 Downtime leads to suffering.
 NT is the path to the darkside.
 Powerful Unix is.
 
 Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
 Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
  



-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgp8S8gtJsQUs.pgp
Description: PGP signature


Re: Stupid ASCII loader prompt

2005-03-13 Thread Loren M. Lang
On Sun, Mar 13, 2005 at 05:06:40AM -0500, Fafa Diliha Romanova wrote:
 hello
 
 i find that loader prompt very frustrating:
 
 1. it is *VERY* unprofessional

I don't see much difference between seeing a giant daemon, a giant window,
and a giant apple on startup.

 2. having that demon in there, it invites evil into my world

It's not a demon, but a daemon.

 3. it's bad for my image too, when other people see it,
they laugh and go:
 
is THAT your supersystem? blah

All my friends think it's so much cooler than that penguin they used to
see.


All that aside, I think putting beastie_disable=YES in
/boot/loader.conf will do the trick.

 
 somebody please tell me, how do i remove it?
 i don't want anything to do with it.
 
 thanks,
 -- fafa
 
 -- 
 ___
 Sign-up for Ads Free at Mail.com
 http://promo.mail.com/adsfreejump.htm
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgp7dMP90u3ee.pgp
Description: PGP signature


Re: chmod equivalent to find commands

2005-03-13 Thread Loren M. Lang
On Sun, Mar 13, 2005 at 05:33:12AM -0500, Fafa Diliha Romanova wrote:
 
 I think it's really best that I stick to my find commands.
 
 chmod -R u=rwX,go=rX . worked really fast but it also made all
 my files executable.

That should only of happened if they already had at least one execute
bit set.  Now if you mistyped it as a lower-case x, then it's garenteed
to set the execute bit.

 
 Bad idea, asking for such a command.
 
 By the way, umask 022? What is meant by that?

umask is used to mask off certain permission bits from being set when a
file is created.  Most files are created with permissions 666, but a
umask of 022 will mask it to 644.  For directories it would mask 777 to
755.  Other common umask are 002, 027, and 077.

Umask:  022 002 027 077 022 002 027 077
Start:  666 666 666 666 777 777 777 777
Finish: 644 664 640 600 755 775 750 700

The techninal operation is mode  ~umask

Now when you use the string =rwX instead of something like u=rwX, no
qualifier in front of the =, +, or - sign, then it sets all bits minus
what is masked off so a umask of 022 will prevent it from setting the
write bit on group or other permissions.

 
 - Original Message -
 From: Loren M. Lang [EMAIL PROTECTED]
 To: Giorgos Keramidas [EMAIL PROTECTED]
 Subject: Re: chmod equivalent to find commands
 Date: Sun, 13 Mar 2005 02:15:00 -0800
 
  
  On Sat, Mar 12, 2005 at 09:53:02PM +0200, Giorgos Keramidas wrote:
   On 2005-03-12 10:30, Eric McCoy [EMAIL PROTECTED] wrote:
   Fafa Diliha Romanova wrote:
hello.
   
i know there's an equivalent to these two find commands that
can be summed up in one chmod command:
   
find . -type d -exec chmod 755 {} \;
find . -type f -exec chmod 644 {} \;
  
   Uhm, why?  Even if that were possible, isn't clarity more important that
   stuffing as many actions as possible in one line?
  
   What you list above is similar to the way I use for changing the
   permissions of files/dirs and it works all the time.
  
   There's no reason to try to write one, long, complicated command just
   for the sake of making it one command instead of two.  Otherwise, you
   may as well do more complex stuff like:
  
  Summing it up into one command does not neccessarily mean it's longer or
  more complicated.  I use the following command all the time to fix
  permissions similar to what he seems to be doing.  Though it's not
  technically equivalent, it's probably all he needs.
  
  chmod -R u=rwX,go=rX .
  
  My umask of 022 simplifies the command to the following:
  
  chmod -R =rwX .
  
  
 find . | while read line; do
 mode=''
 [ -d ${line} ]  mode=0755
 [ -f ${line} ]  mode=0644
  
 [ -n ${mode} ]  echo chmod ${mode} \${line}\
 done | sh
  
   But this is getting quickly very difficult to remember easily and repeat
   consistently every time you want to do something similar :)
  
what would be the best solution here?
   
I would do it the same way you do, but with xargs instead:
   
find . -type X -print0 | xargs -0 chmod XXX
  
   This is an excellent way to do this, IMHO.
  
If you were feeling crazy and use sh:
   
find . | while read path; do \
  if [ -d $path ]; then chmod 755;
  else chmod 644; fi; \
done
  
   I guess you meant to write:
  
   find . | while read path; do \
 if [ -d $path ]; then chmod 755 ${path};
 else chmod 644 ${path}; fi; \
   done
  
   Otherwise, many chmod failures are the only result.
  
   But this has a minor buglet.  It will change everything that is not a
   directory to mode 0644.  This mode is ok for files, but it may not be ok
   (or it may even fail) for other stuff (symbolic links, for instance).
  
   - Giorgos
  
   ___
   freebsd-questions@freebsd.org mailing list
   http://lists.freebsd.org/mailman/listinfo/freebsd-questions
   To unsubscribe, send any mail to [EMAIL PROTECTED]
  
  --
  I sense much NT in you.
  NT leads to Bluescreen.
  Bluescreen leads to downtime.
  Downtime leads to suffering.
  NT is the path to the darkside.
  Powerful Unix is.
  
  Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
  Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
  
  2.dat 
 
 -- 
 ___
 Sign-up for Ads Free at Mail.com
 http://promo.mail.com/adsfreejump.htm
 

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpL1VDKoE3jR.pgp
Description: PGP signature


Re: Incorrect geometry

2005-03-13 Thread Loren M. Lang
On Fri, Mar 11, 2005 at 10:32:19PM -0600, Mike Loiterman wrote:
  
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 Kevin Kinsey mailto:[EMAIL PROTECTED] wrote:
  Mike Loiterman wrote:
  
  
  -BEGIN PGP SIGNED MESSAGE-
  Hash: SHA1
  
  When I do a new install of FreeBSD 5.3-RELEASE I get an error saying
  the drive geometry is incorrect.  In the next screen, I put in the
  correct geometry, as reported by the BIOS, but after I hit q, I get
  the same error. 
  
  The drive is a brand new 160 SATA Segate.  The geometry FreeBSD
  suggests yield 152 Gigs, slices correctly and functions perfectly.
  I'm plannning on reformating anyway as this is only a test run, but
  do I need to be conserned about the error? 
  
  
  
  Isn't the rest of the error message using a more likely geometry?
  
  IANAE, but I believe FBSD is simply stating that it doesn't find
  the BIOS's numbers to be what it wants, so it's going to use
  its own.  This would explain the effect you see in the second
  sentence above. 
  
  As yield, slice, and function seems OK, I think go for it!
  is perfectly good advice in this instance.  I've seen the error
  several times, too, and so far so good.
  
  I am willing to be corrected by my betters, though, of course.
  
  Kevin Kinsey
 
 It does say, using a more likely geometry.  The numbers are vastly
 different then what the BIOS says, but as I said, the capacity seems
 correct and it functions normally.
 
 I just don't want to have any trouble down the road...

It shouldn't be a problem.  Geometries nowdays aren't as useful as they
used to be and aren't really used much, LBA alleviates most of that.
The geometries that FreeBSD uses aren't the same that the drive
internally uses.  In fact, using geometries has been the cause of an old
8 gig limit on hard drives, a newer 137 gig limit, and an old boot
loader problem booting anything over cylinder 1023.

As for the missing 8 gigs, that's probably because your hard drive
manufacture used SI units (10^3=1000) instead of the standard units
(2^10=1024) just to make the number look bigger.  My 250 gig drive is
only 238 gig in reality.

 
 - --
 Mike Loiterman
 grantADLER
 Tel: 630-302-4944
 Fax: 773-442-0992
 Email: [EMAIL PROTECTED]
 PGP Key: 0xD1B9D18E
 
 -BEGIN PGP SIGNATURE-
 Version: PGP 8.1
 
 iQA/AwUBQjJw02jZbUnRudGOEQIFgACghb4rW7h8yi7Gy51D427MDeIlfMQAn1b5
 v4YVKUhIT9gwS6SZBMDDwYK0
 =KtaI
 -END PGP SIGNATURE-
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpFxXlYrciuB.pgp
Description: PGP signature


Re: To Jail behind NAT or not.

2005-03-13 Thread Loren M. Lang
On Sun, Mar 13, 2005 at 03:15:57AM -0800, BSD Mail wrote:
 Greetings all,
 
 I have the following topology:
 
  Internet - Gateway - DMZ 
|
  LAN
 
 I'm using PF to redirect traffic to the DMZ machine which carries the 
 following:
 
 bind9;postfix;dovecot(imaps,pop3s),openwebmail;apache13;isc dhcp;sfs,ftps
 I have ssl certs for services such as mail/web/ftp.
 
 The gateway machine has 3 NICs and doesn't have any service enabled on
 its external interface nor internal. Remote access is denied to the
 gateway only console access allowed. It only forwards traffic to the
 inside DMZ. Also my LAN is on a different subnet
 from the DMZ.
 
 If all my services are behind that NAT box is it premature or too much
 paranoid to have multiple jails one for postfix another for apache and
 so on..on the DMZ machine that is hosting all these services ? Or can
 I say that I'm protected to a good extent that jail won't give me any
 additional protection because services are behind NAT ?

An NAT router doesn't protect against buffer overflows in apache or
postfix, or any other number of bugs that they may have.  All nat really
does is prevents someone from trying to connect to arbitrary ports of
arbitrary machines behind the router that aren't being forwarded inside,
but it doesn't protect the ports that are forwarded like http to your
dmz machine.

 
 I use SSH keys to access anymachin on my network, and I have OTP
 configured if I needed access from outside my network for college.
 
 Thanks for the insight.
 
 -- 
 Regards,
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpfJgq6FVT3R.pgp
Description: PGP signature


Re: Location of disklabel

2005-03-13 Thread Loren M. Lang
On Thu, Mar 10, 2005 at 04:32:30PM -0500, Carl J wrote:
 Hi all! To all your FS guru's outthere, I desperately need
 to know where the disklabel is stored (since my disk is in trouble!)
 
 Situation:
 
   My /dev/ad0s1 has 2 partitions: a (FS) followed by b (swap).
   By using disklabel -r, I see my a and b indeed
   take up the entire slice.
 
 My desperate question:
 
   Where, then, is the disklabel stored?

The second sector of the slice that the disklabel is partitioning.  For
example, a disklabel on your first slice would be stored in the second
sector of /dev/ad0s1.  The command dd if=/dev/ad0s1 skip=1 | hexdump
will give you a hexdump of the disklabel.  Since the 'a' partition of
the disklabel normally starts at the beginning of the slice that the
disklabel is in, it is identical to reading from the slice directly,
just a little shorter.  Also, the 'c' partition always covers the entire
slice so it is identical assuming the disklabel isn't messed up.

 
   Somewhere in the partition table? The Master Boot Record?
   The reserved cylinder #0?

No, msdos partition table that creates what are called slices in the bsd
world reside in the last few byte of the Master boot record, but this
has nothing to do with the disklabel that is stored in the slice.  And
normally the only thing you will find in cylinder 0 is the master boot
record which is the very first sector of the hard disk.

 
   Or is it stored somewhere inside /dev/ad0s1a ??
   (if that's the case, does that mean the UFS1
   intentionally left some space unused, for this purpose?
   And if so, is it always at a fixed location within a UFS1 slice?)

Actually, since the 'a' partition is the same as the beginning of the
slice it's in, the ufs filesystem always skips the first 16 sectors of
whatever partition it's in.

 
   What if in my slice, I have SWAP first, and then UFS1,
   then does that mean the SWAP Format also reserves
   some unused space for the disklabel to go???
 
 Sorry if the question is stupid. I just somehow couldn't
 logically see where it would be stored, and yet be compatible
 with having other OS on the same drive... etc.
 
 Thanks!
 
 - Carl
 
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpSnGRsgOe1o.pgp
Description: PGP signature


Re: Why not?

2005-03-13 Thread Loren M. Lang
On Sun, Mar 13, 2005 at 01:24:42PM -0500, Bart Silverstrim wrote:
 
 On Mar 12, 2005, at 2:45 PM, Chris wrote:
 
 Aperez wrote:
 Hello everybdody
 
 I read an interview of Linus Torvald made by Linux Magazine. In that 
 interview Linus mentioned the following:
 
 On the other hand, no, Linux does not have that stupid notion of 
 having totally separate kernel development for different issues. If 
 you want a secure BSD, you get OpenBSD; if you want a usable BSD, you 
 get FreeBSD; and if you want BSD on other architectures, you get 
 NetBSD. That___s just idiotic, to have different teams worry about 
 different things.
 
 Here's irony posed as a question:
 
 ... and how many distros of Linux are there?
 
 I think the difference is that Linus is working on the Linux kernel.  
 The distros, numerous as they are, all run the same kernel.  Those 
 separate distros package the other applications and userland apps and 
 default configs.  The kernel itself isn't under separate forks, whereas 
 from what I understand the kernels for FBSD/NetBSD/OBSD are very 
 similar, share a lot of crossed-over code, but are not identical and 
 have separate management teams behind them.

While each distros kernel is probably less different than a NetBSD vs.
FreeBSD kernel, there still each different and a lot more of them.  I
had to download and install a very specific kernel from redhat to use on
my debian system so I could use my wireless card.

Also, some features can very wildly like IPSEC, some distros patch in
FreeSWAN's stack, others the KAME stack.

 
 The Linux distros keep getting their kernel workings from one group 
 (even if they tweak them).  The BSDs do not.
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpxXSubHNRO4.pgp
Description: PGP signature


Re: Stupid ASCII loader prompt

2005-03-13 Thread Loren M. Lang
On Sun, Mar 13, 2005 at 04:47:17PM +0100, Luyt wrote:
 On Sunday 13 March 2005 11:06, Fafa Diliha Romanova wrote:
 
  2. having that demon in there, it invites evil into my world
 
 What is the daemon doing to that funny penguin?
 
   http://gbraad.spotsnel.nl/images/takeittux.png

I don't think that things like this really reflect the good side of the
BSD community.  Though I think there's at least as much, if not more
coming from the Linux community, we don't need to do it.

 
 -- 
 
 The ability of the OSS process to collect and harness 
 the collective IQ of thousands of individuals across 
 the Internet is simply amazing. - Vinod Vallopillil
 http://www.opensource.org/halloween/halloween4.php
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpCAPLg8fTQ7.pgp
Description: PGP signature


Re: Synaptics Touchpad driver

2005-03-13 Thread Loren M. Lang
On Sun, Mar 13, 2005 at 10:48:46AM -0800, Mikko Ty?l?j?rvi wrote:
 
 Hi,
 
 On Sat, 12 Mar 2005, Loren M. Lang wrote:
 
 It seems that FreeBSD 5.3 now has support in the kernel for the
 synaptics touchpad that my laptop has.  Right now it's just running as a
 normal mouse, it looks like the support is disabled by default.  In
 isa/psm.c, I can see the synaptics support in there, but it's disabled
 unless hw.psm.synaptics_support is set to 1.  My question is how do I
 set it to one?  It's setup as a TUNABLE_INT, but there is no sysctl for
 it.  Does it only appear on boot?
 
 It is not a sysctl, it is a kernel tunable.  You control it from the
 boot loader, for example by putting
 
   hw.psm.synaptics_support=1
 
 into /boot/loader.conf.  See loader.conf(5) and /boot/defaults/loader.conf
 for more information.

That's what I was wondering and I tried to set it in the loader, but I
haven't noticed a difference.  No added sysctls to tune the touchpad, no
kernel messages showing anything obvious, the touchpad still acts the
same, etc.  Also, I looked through the kernel sources for other
TUNABLE_INT's:

...
/usr/src/sys/cam/scsi/scsi_all.c:   
TUNABLE_INT_FETCH(kern.cam.scsi_delay, delay);
/usr/src/sys/cam/scsi/scsi_cd.c:TUNABLE_INT(kern.cam.cd.changer.min_busy_seconds,
 changer_min_busy_seconds);
/usr/src/sys/cam/scsi/scsi_cd.c:TUNABLE_INT(kern.cam.cd.changer.max_busy_seconds,
 changer_max_busy_seconds);
/usr/src/sys/cam/scsi/scsi_cd.c:TUNABLE_INT_FETCH(tmpstr, 
softc-minimum_command_size);
/usr/src/sys/cam/scsi/scsi_da.c:TUNABLE_INT(kern.cam.da.retry_count, 
da_retry_count);
/usr/src/sys/cam/scsi/scsi_da.c:TUNABLE_INT(kern.cam.da.default_timeout, 
da_default_timeout);
/usr/src/sys/cam/scsi/scsi_da.c:TUNABLE_INT_FETCH(tmpstr, 
softc-minimum_cmd_size);
...

sysctls -a|grep cam:
kern.cam.scsi_delay: 15000
kern.cam.cd.changer.min_busy_seconds: 5
kern.cam.cd.changer.max_busy_seconds: 15
kern.cam.da.retry_count: 4
kern.cam.da.default_timeout: 60

It looks like all these tunables are also sysctls.

 
  $.02,
  /Mikko

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgp1pYM6vabIY.pgp
Description: PGP signature


Re: kerberos problems

2005-03-13 Thread Loren M. Lang
On Sun, Mar 13, 2005 at 05:30:09PM -, [EMAIL PROTECTED] wrote:
  On Sun, Mar 13, 2005 at 03:38:46PM -, [EMAIL PROTECTED]
  wrote:
 I followed the handbook guide to setting it up, and it all seems to
  be
  working ok. I have now setup telnetd as described to test how it is
  working. If I have done a kinit previously, it will log in no problem,
  but if I do not do a kinit (or do a kdestroy before hand) I get -
 
  kerberos V5: mk_req (No Such File or direcotry).
 
 Any ideas?
 
  That sounds like it's working normally. Without a valid ticket (as shown
  by `klist`), which is cached in a file, services like telent which use
  Kerberos won't authenticate you.
 
  If I'm misunderstanding the problem you're describing, please add some
  more detail as to what you expected to have happen and how reality
  differed :-)
 
 Yeah, it could well be the way it is supposed to work. Basically I want to
 end up with a centralised login system for my network (i.e. no need to
 create usernames on each client). I am planning to use ldap for this, and
 as I understand it ldap can use kerberos for the authentication aspect. So
 I am atm trying to make sure I have a good understanding of the kerberos
 system and have it up and running before I tackle the next part.
 
 what I was assuming would happen when I try to telnet in without a ticket
 (i.e. with running kinit) was that I would get asked for a
 username/password, and then I would get issued a ticket, rather than
 manually having to kinit first.

I believe the difference is that kinit is used to get kerberos
credentials after you have logged on by some other means.  If you use
pam_krb5, then it will be using the kerberos for authentication instead
of the local passwd file and also save the credentials.

The way your currently doing it the local system still will need the
user and passwd to log them in before they can run kinit, with pam_krb5
this can be avoided.

 
 How would this affect using pam to authenticate i.e. if I want to use
 pam_krb to login to the console, I would not be able to run kinit before
 hand?
 
 [Apologies for sending this to you twice tillman , need to be more careful
 with the reply to button :)]
 
 Cheers,
 Martin
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgp8zRJpipQqH.pgp
Description: PGP signature


Re: upgrade a couple of nearly identical machines

2005-03-13 Thread Loren M. Lang
On Sun, Mar 13, 2005 at 07:57:57PM +0100, Dick Hoogendijk wrote:
 I run three machines with FreeBSD-4.11 and lots of the same ports
 installed. Upgrading these three must be more easy then running
 portupgrade on every machine again and again, upgrading the same ports
 multiple times. This is waste of cpu power ;-)
 
 Does anybody has suggestions on how to handle this situation in a more
 practicle way?

You could use portupgrade to upgrade one machine with the -W option so
it won't clean up after itself, then nfs mount the ports directory on
another machine and use portupgrade -wWar to upgrade them if I'm not
mistaken.

If that doesn't work, you could create a binary package of everything
installed and copy them over and install them with pkg_add.

 
 -- 
 dick -- http://nagual.st/ -- PGP/GnuPG key: F86289CE
 ++ Running FreeBSD 4.11 ++ FreeBSD 5.3
 + Nai tiruvantel ar vayuvantel i Valar tielyanna nu vilja
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpzhGy5whZXp.pgp
Description: PGP signature


Re: Why not?

2005-03-13 Thread Loren M. Lang
On Sun, Mar 13, 2005 at 04:53:36PM -0500, Bart Silverstrim wrote:
 
 On Mar 13, 2005, at 4:34 PM, Loren M. Lang wrote:
 
 On Sun, Mar 13, 2005 at 01:24:42PM -0500, Bart Silverstrim wrote:
 
 On Mar 12, 2005, at 2:45 PM, Chris wrote:
 
 Aperez wrote:
 Hello everybdody
 
 I read an interview of Linus Torvald made by Linux Magazine. In that
 interview Linus mentioned the following:
 
 On the other hand, no, Linux does not have that stupid notion of
 having totally separate kernel development for different issues. If
 you want a secure BSD, you get OpenBSD; if you want a usable BSD, 
 you
 get FreeBSD; and if you want BSD on other architectures, you get
 NetBSD. That___s just idiotic, to have different teams worry about
 different things.
 
 Here's irony posed as a question:
 
 ... and how many distros of Linux are there?
 
 I think the difference is that Linus is working on the Linux kernel.
 The distros, numerous as they are, all run the same kernel.  Those
 separate distros package the other applications and userland apps and
 default configs.  The kernel itself isn't under separate forks, 
 whereas
 from what I understand the kernels for FBSD/NetBSD/OBSD are very
 similar, share a lot of crossed-over code, but are not identical and
 have separate management teams behind them.
 
 While each distros kernel is probably less different than a NetBSD vs.
 FreeBSD kernel, there still each different and a lot more of them.  I
 had to download and install a very specific kernel from redhat to use 
 on
 my debian system so I could use my wireless card.
 
 Also, some features can very wildly like IPSEC, some distros patch in
 FreeSWAN's stack, others the KAME stack.
 
 Some vendors may be directly patching certain features, for the most 
 part you shouldn't have to download a specific kernel for a feature to 
 work in Linux unless you wanted it pre-packaged.  You should be able to 
 update it by downloading the latest features, running the config to 
 enable/disable what features you want compiled into the kernel (or as 
 modules), then compile it.

Well, the vendor for my wireless card provided a binary-only driver with
a small open-source wrapper.  The wrapper was just a piece of garbage
though and compiling it for a different kernel didn't work.  The driver
was designed for redhat's 2.4.18-3 kernel.  That kernel had a couple of
issues and redhat issued an update, 2.4.18-10.  The wireless card driver
wouldn't even work on the -10 kernel, it would crash my system
everytime, I had to use the -3 kernel to use it at all.  This is one of
the problems/features of the linux kernel, it doesn't work with binary
device drivers like the *BSD kernel do.

 
 When everything else breaks because the kernel version changed and 
 something specific is linked to something that depends on something 
 from the previous kernel's config, then you get to delve into some real 
 fun.  But still, there is one source kernel, and unless the vendors did 
 something proprietary (which I don't believe they're supposed to be 
 allowed to do), you can compile your own kernel with your own set of 
 enabled and disabled features from the Linux kernel source tree whether 
 you're running Red Hat or Debian; it may break if that particular 
 distro is depending on certain features as you have it configured and 
 you fubar the new kernel's config, but it is still a matter of tweaking 
 that configuration to get it working again.
 
 I can't download the sources for NetBSD's kernel, compile it on my 
 FreeBSD box, and have it work no matter how much tweaking I do to the 
 configuration...if I'm wrong, please someone correct me.
 
 I *think* (and I'm not following the story closely) what Linus was 
 saying is that it's stupid to have so many people working in parallel 
 on such similar cousins...NetBSD, OpenBSD, and FreeBSD.  They share 
 code, they share info, but optimize for certain goals and have a lot of 
 redundancy.  Linux's kernel is Linux's kernel, modified by individuals 
 but still one big bulky source tree to work from.  Is one way less 
 intelligent than others?  I don't know.  I never studied it :-)  All I 
 know  is that in general, for most end users, it doesn't matter...if 
 they stick with a particular distro and their sources and packages, 
 then things tend to work.  Linux has fragmented so much that it's 
 difficult to get a package aimed at distro A and have it work on distro 
 B despite them both being Linux.  For the BSD's, it's pretty much 
 always worked as if it's in the port tree, you have the package in 
 question work.  Otherwise, work from sources.  And instructions to get 
 a package working on *BSD pretty much always work whereas for Linux you 
 may run Debian but find instructions for what you're trying to do 
 written for an audience running Red Hat, so you need to translate 
 things as you go along.

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT

Re: Howto monitor system security

2005-03-13 Thread Loren M. Lang
On Sun, Mar 13, 2005 at 09:58:41PM +, Sergei Gnezdov wrote:
 Sorry, it is a rather generic message, but the problem is a generic as
 well.
 
 I am running my FreeBSD machine on DMZ.  I use ipfw and I expose http
 and smtp ports.  I also expose sshd port, but only to a trusted
 network (work).  I'd like to know what is the best way to monitor my
 machine security.
 
 FreeBSD security email is rather anoying, because it keeps sending
 messages even if nothing has changed.  I need an email sent to me only
 if there is something abnormal.

What happens when someone breaks in and disables it from sending email?

Think of it as a kind of heartbeat.

snip

 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpTe74KjYi1t.pgp
Description: PGP signature


Synaptics Touchpad driver

2005-03-12 Thread Loren M. Lang
It seems that FreeBSD 5.3 now has support in the kernel for the
synaptics touchpad that my laptop has.  Right now it's just running as a
normal mouse, it looks like the support is disabled by default.  In
isa/psm.c, I can see the synaptics support in there, but it's disabled
unless hw.psm.synaptics_support is set to 1.  My question is how do I
set it to one?  It's setup as a TUNABLE_INT, but there is no sysctl for
it.  Does it only appear on boot?

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpsJDzwGU3KT.pgp
Description: PGP signature


Re: /boot like linux!

2005-03-08 Thread Loren M. Lang
On Thu, Mar 03, 2005 at 06:08:24PM -0500, Jesse Guardiani wrote:
 Hello,
 
 I'm a FreeBSD 5.3 user as well as a Gentoo Linux user.
 In Gentoo linux, you only have to create 3 partitions:
 
 /boot
 swap
 /
 
 In FreeBSD, you seem to have to create many more:
 
 /
 swap
 /usr
 /var
 /tmp

This is standard for all unices including linux to create all
these partitions.  On all my servers whether they be Linux,
Solaris, or BSD I create just as many partitions.  You can just
create / and swap on BSD or Linux just as easily, but it's good
practice for servers to break it up.  What happens when some
program like dhcpd goes crazy and fills up the log files with
many megabytes of log entries.  Well, on my system, it just
filled up /var, but users kept chugging along with their work
on /home.  Or what about that rouge user that fills /home with
several gigabytes of junk.  My system daemons are still running
fine working in /var.  The most important think though is to not
fill up / as that should contain only the most important tools
neccessary to boot and fix a system, everything else is better if
kept on a seperate partition, particuarly anything that is
constantly reading and writing like programs use /var, /tmp, and
/home for.  But this is only recomendation, not a requirement for
any unice.

As for /boot, that's only a neccesity for certain older boot
loaders running on older hardware, but with large harddrives,
greater than 512 megs, I believe.  On modern systems it's
unneccessary.  I don't bother creating /boot partitions on any
of my systems anymore, it's not needed regardless of what other
people may tell you.

FreeBSD would have the same problem if it was created on a
partition starting after cylinder 1023 on the same older
hardware, but I've never had to run into that hardware with
FreeBSD so I'm not sure how they combat it.

 
 In particular, it seems that /boot MUST be on the same
 partition as /. This stinks, as now you have to create
 separate partitions for /usr and /var, which wastes space.
 
 I tried to make /boot it's own partition, and I succeeded,
 to a certain extent. I actually made /boot/boot, because
 the FreeBSD 5.3 boot manager wants to look under the /boot
 directory for loader. If /boot is it's own partition, then
 you need a /boot/boot/loader.
 
 Anyway, that worked. The kernel boots now, but it prompts
 me at the beginning of the rc process for the root device.
 I give it:
 
 ufs:ad1s1d
 
 Which is my / partition, and it boots successfully.
 Is it possible to automate this process so that the loader
 knows to use ad1s1d as my root device?
 
 Thanks!
 
 -- 
 Jesse Guardiani, Systems Administrator
 WingNET Internet Services,
 P.O. Box 2605 // Cleveland, TN 37320-2605
 423-559-LINK (v)  423-559-5145 (f)
 http://www.wingnet.net
 
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgp7ApK6vka3K.pgp
Description: PGP signature


Re: /boot like linux!

2005-03-08 Thread Loren M. Lang
On Thu, Mar 03, 2005 at 07:45:19PM -0500, Bob Johnson wrote:
 Jesse Guardiani wrote:
 
 On Thursday 03 March 2005 5:41 pm, [someone] wrote:
  
 
snip
 It's *best* to make more  
 partitions (esp for /var) so that if something goes out of control 
 logging, or you just neglect your logs, it doesn't go and fill up your 
 only (ie / ) partition. Like most *nix OS's, it can be as simple or as 
 complicated as you want it to be.

 
 
 I want / + /boot. It's that simple.

A /boot for FreeBSD should really be unneccessary, that is more of a
necessity in the past and more of a linux thing anyways, but I don't use
one even on my linux systems anymore.

 
  
 
 
 What are you really trying to accomplish?  You want to run softupdates 
 on / ?
 
 I believe it is perfectly acceptable to use softupdates on the root 
 partition these
 days.  The Handbook recommends turning on softupdates for all filesystems. 
 See
 http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/configtuning-disk.html
 
 I'm pretty sure my test system at home has only / and swap (because it
 has a small hard drive), and uses softupdates on /.  I'll check when I get
 home.
 
 If you have some other reason for separating /boot from /, explain your 
 actual
 goal, and perhaps we can help.
 
 - Bob
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgp3lTb4AN70Y.pgp
Description: PGP signature


Re: Does 802.11b use a lot of resources?

2005-03-03 Thread Loren M. Lang
On Wed, Mar 02, 2005 at 08:32:55AM -0800, Christopher Kelley wrote:
 Loren M. Lang wrote:
 
 On Wed, Mar 02, 2005 at 01:26:45AM -0500, Bob Johnson wrote:
  
 
 On Friday 25 February 2005 12:06 am, Christopher Kelley wrote:

 
 Have I tried too hard to squeeze usability out of an old computer?
 
 I have a Pentium-166 that has been a faithful router  firewall (FreeBSD
 5.3 and pf) for a couple years now.  It has no trouble with the 3 to 4
 Mbps I get from my broadband connection, at least not with ethernet.
 
 I wanted wireless, so I could use my laptop around the house.  I
 dutifully read the section in the manual about setting up FreeBSD as an
 access point. I'm using a Netgear MA311 802.11b card (Prism 2.5
 chipset).  And it does work, except it's very slow.  Now I know that I
 can only expect about 50% of the rated speed with wireless, but I
 figured even if I got only 4Mbps, I'd be fine.  But I get less than
 1Mbps.  I've updated the firmware, added a signal booster and hi-gain
 antenna, and I have excellent signal strength throughout my house.
 
 So my question is, is there more overhead with wireless than with
 ethernet?  TOP doesn't seem to show that I'm taxing it too hard, idle
 never goes below about 70% with polling enabled (Hz=1000), and never
 below about 80% with polling disabled.  Am I expecting too much out of
 an old Pentium-166?
 
  
 
 My experience is that:
 
 1) 50% throughput is probably the best you should expect.  I generally 
 plan on 3-4 Mbps for an 11 Mbps 802.11b card.
 
 2) Using 128-bit encryption (WEP) will significantly slow down some 
 (many?) cards. The WEP processing is done on the card (I think), and they 
 simply don't have hefty processors. If you use 128-bit WEP, try 64-bit 
 WEP and see if that speeds things up.  64 bit WEP is adequate to keep out 
 casual snoopers, and 128 bit is not adequate to keep out a serious 
 attacker, so the difference in security may not be as important as some 
 believe.  64-bit WEP is also known as 40-bit, and similarly for 128-bit 
 WEP.

 
 
 Actually, what I recommend for home you, if you have the time, is IPSEC.
 Much more secure than WEP and it's all done on the main cpu so it should
 slow the wifi down as much.  There's a good article on freebsddiary.org
 I believe.
 
  
 
 I found the article on freebsddiary, and I admit I only skimmed it, but 
 I have a mix of FreeBSD and Windows (XP) on my wireless network, and for 
 now I'd like to keep it as simple as possible.

I just wanted to mention that I have IPSEC running with several Win2k
computers and it works great.  The configuration is relatively simple,
the main problem was a couple of tweaks I needed to give to racoon, but
the windows side was even easier.  It's still more complicated than WEP,
but it's more secure and may provide faster data transfer.

 
 Christopher
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Installation instructions for Firefox somewhere?

2005-03-03 Thread Loren M. Lang
On Wed, Mar 02, 2005 at 03:27:09AM -0800, Ted Mittelstaedt wrote:
 
 
snip
   Also one other thing that is important - if you don't get an answer
   within a week or so, ask again, politely.
 
  How do I ask after the second post with no reply?  On bended knee?
 
 Just keep asking periodically.  Or, you could e-mail the developer of
 the SCSI device driver directly, it's not hard to read the source and
 see who it is, and their e-mail addresses are on the FreeBSD website.

Actually, I've found lately that a good irc chatroom can help with some
problems that ppl may just ignore on a mailing list.  I've been hanging
out in #freebsd and #netbsd on irc.freenode.net.

 
 Ted
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Received mail timestamp is off by 7 hours

2005-03-03 Thread Loren M. Lang
On Wed, Mar 02, 2005 at 03:11:19AM -0800, Ted Mittelstaedt wrote:
 
 
  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] Behalf Of Loren M. Lang
  Sent: Wednesday, March 02, 2005 2:29 AM
  To: Ian Smith
  Cc: Loren M. Lang; Pat Maddox; freebsd-questions@freebsd.org
  Subject: Re: Received mail timestamp is off by 7 hours
 
 
  little bit less reliable using local to UTC unless you are not affected
  by any daylight savings changes like Arizona in the US or, I'm
  sure, many
  other places around the world.
 
 
 There's no excuse for a mailserver to not be synced to a NTP source.

I agree, I run ntp on every single computer I own, but I was talking in
general.  But for a server, I'd expect them to use UTC anyways.  The
only advantage I see to local time is support for other oses or reading
the time in the bios, neither of which will probably be a big deal on a
server.  And for desktop users, they may not bother running ntp or even
be on a network.

 
 Ted

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Received mail timestamp is off by 7 hours

2005-03-03 Thread Loren M. Lang
On Wed, Mar 02, 2005 at 01:00:15PM -0800, Luke wrote:
 
 There's no excuse for a mailserver to not be synced to a NTP source.
 
 I'd extend that to apply to any server.  Practically all the things a
 server does are dependent in some way on the correct time.
 
 I have three excuses:
 1) NTP is difficult to configure.  I've done it, but it wasn't trivial.

ntpdate once at boot.

 2) Finding an NTP server willing to accept traffic from the public isn't 
 easy either.  For me it involved a scavenger hunt through out-of-date 
 websites and a lot of failed attempts.

http://www.nist.gov/

 3) If your clock tends to run noticably fast or slow, constant NTP 
 corrections tend to do more harm than good, at least in my experience.  It 
 got to where I couldn't even run a buildworld because NTP kept tinkering 
 with the clock in the middle of the process.

Same as 1)

 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgp3yOu0GrZHj.pgp
Description: PGP signature


Re: tab completion

2005-03-03 Thread Loren M. Lang
On Wed, Mar 02, 2005 at 06:50:55AM +0200, abu khaled wrote:
 I'm not sure if this helps but you can at least try.
 
 login as non-root (user)
 run this command: chsh -s /bin/tcsh
 you well be prompted for you non-root password
 logout and login again as non-root and see if it works
 
 you can su to root and use use the same command to change the root
 shell.(sh is recommended for root)

For root, they recommend only /sbin/sh as something may break, but there
is an account called toor.  It is basically another name for root and
you can change toor's shell to anything.  Also, some ppl recommend using
su -m I believe when suing to root and you keep the same shell I think.
And then their's sudo in which you will almost never even need to send
time as root.

 
 I hope it works!!!
 
 On Tue, 01 Mar 2005 20:24:13 -0800, Ben Munat [EMAIL PROTECTED] wrote:
  I used vipw to set my regular user's shell to tcsh. /etc/passwd shows it 
  correct now but I
  still appear to be getting sh as my shell. If I run tcsh, I then get the 
  tab completion.
  But how do I get the terminal to put me in tcsh automatically?
  
  Ben
  
  
  Jonathan Chen wrote:
   On Tue, Mar 01, 2005 at 09:28:02AM -0800, Ben Munat wrote:
  
  None of those commands worked... However, I've also found that echo $SHELL
  in my regular user's terminal says /bin/sh, while as root it says 
  /bin/csh.
  
  
   If you're using /bin/sh, then of course none of the given commands
   will work as they are for tcsh.
  
  
  Both root and the non-root user's shells are listed in /etc/passwd as
  /bin/tcsh, so where else would the shell get set? Can I just set all
  terminals and all users (i.e. me) to have the same shell with the same
  capabilities?
  
  
   I suspect that /etc/passwd has gotten out of sync with master.passwd.
   Don't edit /etc/passwd. Use vipw(1) and make your changes within
   there.
  ___
  freebsd-questions@freebsd.org mailing list
  http://lists.freebsd.org/mailman/listinfo/freebsd-questions
  To unsubscribe, send any mail to [EMAIL PROTECTED]
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpbuwSaBkGE2.pgp
Description: PGP signature


Re: ipfw or pf

2005-03-03 Thread Loren M. Lang
On Wed, Mar 02, 2005 at 12:57:06PM +0100, Albert Shih wrote:
  Le 02/03/2005 ? 09:03:23+0100, Stevan Tiefert a ?crit
  
  
  On Tue, 1 Mar 2005, Albert Shih wrote:
  
  
  
  The both packef filters are maintained! pf is ported from OpenBSD and
  ipfw is from FreeBSD.
 
 GreatI can continu to use ipfw;-))
 
  
  Whenever two programs two syntaxes...
 
 Well it's not de syntaxes, I always use packet filter system (sometime on
 hardware like Foundry/Cisco) where the rule is : First match first use. And
 the pf use entire rules is very strange for me (I known I can use ?quick?
 butwell it's not the philosophy I think).

I like first match better too, but I think pf is sufficiently better
that I just use it with quick over ipfw.

 
 Lots of thanks for your answer.
 
 Regards.
 
 
 --
 Albert SHIH
 Universite de Paris 7 (Denis DIDEROT)
 U.F.R. de Mathematiques.
 7 i?me ?tage, plateau D, bureau 10
 Heure local/Local time:
 Wed Mar 2 12:54:22 CET 2005
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpiBXaBTrSo9.pgp
Description: PGP signature


Re: Documentation Error?

2005-03-03 Thread Loren M. Lang
On Tue, Mar 01, 2005 at 11:19:07AM -0500, Jerry McAllister wrote:
  
  [EMAIL PROTECTED] wrote:
   http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/confi
   gtuning-v irtual-hosts.html
   
   states that adding a virtual address is done in rc.conf like this:
   
   ifconfig_fxp0=inet 10.1.1.1 netmask 255.255.255.0
   ifconfig_fxp0_alias0=inet 10.1.1.2 netmask 255.255.255.255
   
   Shouldn't it be this instead?
   
   ifconfig_fxp0=inet 10.1.1.1 netmask 255.255.255.0
   ifconfig_fxp0_alias0=alias 10.1.1.2 netmask 255.255.255.255
  
  No.  The actual command to make one is:
  
  ifconfig fxp0 inet 10.1.1.2 netmask 255.255.255.255 alias
  
  So you do need to pass the inet to ifconfig.  The _alias0 makes
  the script pass the trailing alias
 
 H,   So what is happening when no 'inet' is in the string?
 It seems to work fine.Is something still not right and just
 waiting to explode?We have lots of servers configured that way.

Looking at ifconfig(8), I believe it's purely optional, ifconfig can
reconize what address type your giving it.  It's more useful when using
ifconfig to display information.  I've done it both ways and if your
servers work now, I doubt they'll blow up later.  It is probably
something that was required in the past.

 
 jerry
 
  
  Ted
  
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpYQNExwthl0.pgp
Description: PGP signature


Re: Does 802.11b use a lot of resources?

2005-03-02 Thread Loren M. Lang
On Wed, Mar 02, 2005 at 01:26:45AM -0500, Bob Johnson wrote:
 On Friday 25 February 2005 12:06 am, Christopher Kelley wrote:
  Have I tried too hard to squeeze usability out of an old computer?
 
  I have a Pentium-166 that has been a faithful router  firewall (FreeBSD
  5.3 and pf) for a couple years now.  It has no trouble with the 3 to 4
  Mbps I get from my broadband connection, at least not with ethernet.
 
  I wanted wireless, so I could use my laptop around the house.  I
  dutifully read the section in the manual about setting up FreeBSD as an
  access point. I'm using a Netgear MA311 802.11b card (Prism 2.5
  chipset).  And it does work, except it's very slow.  Now I know that I
  can only expect about 50% of the rated speed with wireless, but I
  figured even if I got only 4Mbps, I'd be fine.  But I get less than
  1Mbps.  I've updated the firmware, added a signal booster and hi-gain
  antenna, and I have excellent signal strength throughout my house.
 
  So my question is, is there more overhead with wireless than with
  ethernet?  TOP doesn't seem to show that I'm taxing it too hard, idle
  never goes below about 70% with polling enabled (Hz=1000), and never
  below about 80% with polling disabled.  Am I expecting too much out of
  an old Pentium-166?
 
 
 My experience is that:
 
 1) 50% throughput is probably the best you should expect.  I generally plan 
 on 
 3-4 Mbps for an 11 Mbps 802.11b card.
 
 2) Using 128-bit encryption (WEP) will significantly slow down some (many?) 
 cards. The WEP processing is done on the card (I think), and they simply 
 don't have hefty processors. If you use 128-bit WEP, try 64-bit WEP and see 
 if that speeds things up.  64 bit WEP is adequate to keep out casual 
 snoopers, and 128 bit is not adequate to keep out a serious attacker, so the 
 difference in security may not be as important as some believe.  64-bit WEP 
 is also known as 40-bit, and similarly for 128-bit WEP.

Actually, what I recommend for home you, if you have the time, is IPSEC.
Much more secure than WEP and it's all done on the main cpu so it should
slow the wifi down as much.  There's a good article on freebsddiary.org
I believe.

 
 3) Turning on power management seriously slows things down for me, to well 
 below 1 Mbps. Do a wicontrol and make sure Power Mgmt is 0.
 
 - Bob
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Received mail timestamp is off by 7 hours

2005-03-02 Thread Loren M. Lang
On Tue, Mar 01, 2005 at 02:22:40AM +1100, Ian Smith wrote:
 On Mon, 28 Feb 2005 03:36:41 -0800 Loren M. Lang wrote:
   On Mon, Feb 28, 2005 at 12:58:17AM +1100, Ian Smith wrote:
On Sun, 27 Feb 2005 03:10:12 -0700 Pat Maddox [EMAIL PROTECTED] wrote: 

  Alright, I got it all working now.  Not sure how to change the time
  zone with config files, so I just used sysinstall to change it to MST
  (time zone is arbitrary, but since this is the zone I live in, it's
  convenient for me).  Then I used ntpdate to sync it, and it's working
  well now.
  
  Thanks for pointing that out to me.  I just thought that CET was 
 central time :)

Yes sysinstall's as good a way as any, it'll set your timezone and also
let you choose between running with a UTC or local time CMOS clock.  Or
you can manually tun tzsetup(8) and create (or not) /etc/wall_cmos_clock
.. see adjkerntz(8) 

Take little notice of people opining that you must or even should run
CMOS UTC time; that's entirely up to you.  I've always preferred local
time CMOS clocks personally; sysinstall creates /etc/wall_cmos_clock and
cron runs 'adjkerntz -a' halfhourly at times when daylight savings time
might come or go in your zone, and that's always worked fine here. 
   
   The reason using UTC for the cmos clock is that it never changes like US
   daylight savings does.  Now if your timezone doesn't ever need to be
   pushed forward or backwards then it won't be a problem, but otherwise
   evertime the system boots up, it has to determine if the cmos time is
   correct or needs to be adjusted.  A UTC time will always be correct and
   can be turned exactly into the correct time at the moment.  I think that
   if FreeBSD crashed just after it booted up and adjusted the hour forward,
   then on the next reboot, it would adjust it another hour forward.  In
   general, it is just harder to manage.  Even worse would be my Quad boot
   system with Gentoo Linux, FreeBSD, OpenBSD, NetBSD.  If I used local
   time for my cmos clock then every daylight savings change, each os would
   adjust the clock independently and I'd be 3 hours off.
 
 I don't believe that's correct Loren, at least, not for FreeBSD anyway.

Well, I haven't looked into all the details of how FreeBSD does this,
but I gaurentee that there is a point where FreeBSD can crash and the
clock could be knocked off an hour which wouldn't happen if it's running
UTC.  Though this window could just be a matter of seconds, I'm not
sure.  Also multi-booting multiple OS's with it set to local time will
always be a problem unless you set only one os to update the clock, and
even then, while running the other oses, the update will never happen
until you boot into the os which does it.  But, in general, it is just a
little bit less reliable using local to UTC unless you are not affected
by any daylight savings changes like Arizona in the US or, I'm sure, many
other places around the world.

snip

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: PR 67260

2005-03-02 Thread Loren M. Lang
On Tue, Mar 01, 2005 at 05:50:21PM -0800, Vadym Chepkov wrote:
 All,
 
 The problem i386/67260 still does exist in FreeBSD 5.3. Did anybody find a 
 workaround or possibly
 a fix?

As most people don't seem to have this bug, it would be helpful if you
provided us with some more information like type of system, hardware
used, amount of ram, etc.  Maybe you should even try adding that to the
online bug report.

 
 Thank you.
 Vadym Chepkov
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 


pgpsMd02UhmzQ.pgp
Description: PGP signature


Re: Does 802.11b use a lot of resources?

2005-03-01 Thread Loren M. Lang
On Thu, Feb 24, 2005 at 09:06:51PM -0800, Christopher Kelley wrote:
 Have I tried too hard to squeeze usability out of an old computer?
 
 I have a Pentium-166 that has been a faithful router  firewall (FreeBSD 
 5.3 and pf) for a couple years now.  It has no trouble with the 3 to 4 
 Mbps I get from my broadband connection, at least not with ethernet.
 
 I wanted wireless, so I could use my laptop around the house.  I 
 dutifully read the section in the manual about setting up FreeBSD as an 
 access point. I'm using a Netgear MA311 802.11b card (Prism 2.5 
 chipset).  And it does work, except it's very slow.  Now I know that I 
 can only expect about 50% of the rated speed with wireless, but I 

I thought it was more like only 10% of the rated bandwidth.

 figured even if I got only 4Mbps, I'd be fine.  But I get less than 
 1Mbps.  I've updated the firmware, added a signal booster and hi-gain 
 antenna, and I have excellent signal strength throughout my house.
 
 So my question is, is there more overhead with wireless than with 
 ethernet?  TOP doesn't seem to show that I'm taxing it too hard, idle 
 never goes below about 70% with polling enabled (Hz=1000), and never 
 below about 80% with polling disabled.  Am I expecting too much out of 
 an old Pentium-166?
 
 Thanks for your help.
 
 Christopher
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: /dev/io , /dev/mem : only used by Xorg?

2005-03-01 Thread Loren M. Lang
On Mon, Feb 28, 2005 at 12:13:08PM -0800, Kris Kennaway wrote:
 On Mon, Feb 28, 2005 at 04:58:02AM -0800, Ted Mittelstaedt wrote:
 
  Yes - there's some random testing suites on the Internet, find a
  few and compile them. (ENT for example) Run them repeatedly and see what
  happens.
  
  Part of the problem is that BY DEFAULT the random device DOES NOT
  look at interrupts.  See the man page for rndcontrol.  Presumably
  the system admin of the system knows this and looks at his dmesg
  output to see which irq's are assigned to network cards and hard
  disks (which are fairly good sources of randomness) and sets the
  random device to use these.  In practice this isn't something mentioned
  in the install docs so it is very unlikely many people know.
  
  Another strange thing is that /dev/random should block when it
  runs out of entropy - it doesen't seem to do so, however.  And the
  device doesen't seem to gain entropy that quickly.
 
 No, it should not block because it's not defined to block and that
 would be a bad interface anyway.  It does return as many bytes as it
 can, and if the application wants more entropy than given then it can
 either poll, or fall back to alternative mechanisms as it sees fit
 (blocking would prevent this).

I would expect it to behave like other descriptors where by default it
should block unless the O_NONBLOCK flag it set in which it would return
immediately with an error message EAGAIN.  Then an app designer can
choose which he wants.  But /dev/random should not just always return
some data even if there's not enough entropy in the pool.  That's
/dev/urandom's job.

 
 Anyway, all your concerns are moot for 5.x.
 
 Kris


-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: /dev/io , /dev/mem : only used by Xorg?

2005-03-01 Thread Loren M. Lang
On Mon, Feb 28, 2005 at 04:58:02AM -0800, Ted Mittelstaedt wrote:
 
 
  -Original Message-
  From: Loren M. Lang [mailto:[EMAIL PROTECTED]
  Sent: Monday, February 28, 2005 4:40 AM
  To: Ted Mittelstaedt
  Cc: Kris Kennaway; Rob; FreeBSD questions
  Subject: Re: /dev/io , /dev/mem : only used by Xorg?
 
 
  On Mon, Feb 28, 2005 at 04:11:24AM -0800, Ted Mittelstaedt wrote:
  
  
-Original Message-
From: Kris Kennaway [mailto:[EMAIL PROTECTED]
Sent: Monday, February 28, 2005 2:58 AM
To: Ted Mittelstaedt
Cc: Rob; FreeBSD questions
Subject: Re: /dev/io , /dev/mem : only used by Xorg?
   
   
On Mon, Feb 28, 2005 at 01:32:26AM -0800, Ted Mittelstaedt wrote:
   
 Instead, they are part of the kernel itself.

 All the /dev files are, /dev/random, /dev/ad0 and so on,
  are simple
 files that take up only a few bytes of space.  They are
  convenient
 hook points to use to get to these devices.  That is, when
a program
 accesses /dev/random, it isn't actually opening that
  file.  Instead,
 the kernel intercepts that call and supplies the program opening
 that device with the output of the actual device.

 This is why these device files are created with the
  mknod utility,
 rather than just copying a file to /dev/random - since
  doing that is
 accessing the device, not creating the device file.

 So, deleting these /dev devices saves you practically no space at
 all, and does not in fact delete the devices - it only
  deletes the
 access point to them.  The devices are still there in the kernel.
   
No, in 5.x the device nodes are created automatically by devfs and
only appear in /dev by default if support is enabled in the kernel.
  
   Ah, yes I wasn't paying attention, he did say 5.  I stopped paying
   attention
   after reading that he was wanting to remove /dev/random.
  
As the original poster discussed, /dev/io, /dev/mem and /dev/random
are optional components of the 5.x kernel, although as I
  replied, the
situations in which one would not want to include them are limited.
   
  
   Actually, recompiling openssl to use a prng daemon instead
  of the random
   device
   will probably improve your ssh security - unless they have greatly
   improved the entropy generation in the random device in 5.X
 
  Is the /dev/random on FreeBSD really this bad?
 
 Yes - there's some random testing suites on the Internet, find a
 few and compile them. (ENT for example) Run them repeatedly and see what
 happens.
 
 Part of the problem is that BY DEFAULT the random device DOES NOT
 look at interrupts.  See the man page for rndcontrol.  Presumably
 the system admin of the system knows this and looks at his dmesg
 output to see which irq's are assigned to network cards and hard
 disks (which are fairly good sources of randomness) and sets the
 random device to use these.  In practice this isn't something mentioned
 in the install docs so it is very unlikely many people know.

I don't seem to have rndcontrol on 5.3, is that an old command?

 
 Another strange thing is that /dev/random should block when it
 runs out of entropy - it doesen't seem to do so, however.  And the
 device doesen't seem to gain entropy that quickly.

Then how is /dev/random differ from /dev/urandom?

 
  I thought it should be
  better since it can gather entropy from all over the kernel like
  interrupts.  I'm pretty sure I read that linuxes /dev/random was far
  supieror to prng and I'd expect FreeBSD to be the same unless someone
  was lazy in implementing it or there is some major security hole in it.
 
 
 The FreeBSD random device is a port of the same Linux code.

I'm pretty sure that the linux code is GPLed, and I'd expect that
FreeBSD uses a BSD version.  Are they actually from the same code?

 
 Interestingly enough, Sun's Solaris x86 random driver sucks too in the
 same way, runs out of entropy quickly and doesen't recharge that rapidly.
 
 There's a couple people who have written prngs which they claim are far
 superior to the random devices.  Do a search and you will run across
 them.

Every doc I've heard of using prng on linux always suggests that the
native entropy source is better?  Is this because the linux version has
better hooks in the kernel and always uses interrupts as a source?

 
 An excellent random device would be a portable fm radio tuned to in
 between
 stations and feeding the mic input of a soundcard.  That's what you use
 when
 you don't want NSA's supercomputers breaking your keys. ;-)  But of
 course if
 you pulled entropy out of that too fast, you would run into the speed
 limitations
 of the D/A converter in the soundcard input.
 
 Ted

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA

Re: Can /etc/rc.conf be replaced with a symlink?

2005-03-01 Thread Loren M. Lang
On Mon, Feb 28, 2005 at 07:55:18AM -0500, Clay wrote:
 I realized what the problem mostly likely was after submitting the question. 
 I do believe that the mount point where I am wanting to have rc.conf located 
 is not yet available when the file is read.  Is there a way to have this FS 
 mounted prior to rc.conf being read?  Could I maybe place this mount point 
 above the root in fstab?  I will give it try when I have time later today.

No.  The process FreeBSD uses to boot is as follows:

1. Load kernel from disk or other media
2. Kernel initializes various hardware and subsystems.
3. Kernel mounts root file system.
4. Kernel invoked init
5. Init runs /etc/rc and waits for it to complete
6. /etc/rc reads /etc/rc.conf
7. /etc/rc runs various scripts in /etc/rc.d in a specified order
8. Various scripts run including /etc/rc.d/mountcritlocal
9. Init loads gettys specified in /etc/ttys and goes into it's main loop

The order in fstab doesn't matter, the kernel only knows enough to mount
the root fs, and the scripts in /etc/rc.d mount all the other
filesystems, but by then, rc.conf has already been read or attempted to
be read.  You could hack /etc/rc to mount another fs, but I would
strongly recommend against it.

 
 Thanks,
 -Clay 
 
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: support for multiple gre tunnel pass-through

2005-02-28 Thread Loren M. Lang
On Sat, Feb 26, 2005 at 11:38:15AM -0300, emilio wrote:
 Hi at all the list
 I got the latest (5.3) free-bsd edition and need to know if  there's support 
 for gre protocol into multiple connections
 We got many clients for vpn into the office acessing a remote server and 
 passing through the firewall who has two interfaces(one public and one 
 internal)
  in a round-trip way meaning that the packet has to do natd in the go and in 
 the back way to access the  10.x.x.x internal network
 I'm a little worried because we used debian with the kernel 2.4.26 and 
 iptables 1.2.11 and needed to do  many adjusts and recompiles until it came 
 to work finally.with 
 the patch-o-matic added.
 So the question is if in free-bsd and the related ipfw is the same 
 headache

Are you simply asking if you can have multiple gre tunnel from a freebsd
box?  Then yes, freebsd works great for that.  I've had no trouble.  And
IPSEC on top of that isn't much more difficult.

 Of course i'm a newbie hehehe
 May you have a look at this problem i'd be grateful...
 thanks very very much
 
 Emilio 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How would you install all Gnome ports?

2005-02-28 Thread Loren M. Lang
On Sun, Feb 27, 2005 at 05:32:34PM -0600, Chris wrote:
 Chris Hodgins wrote:
 Chris wrote:
 
 Chris Hodgins wrote:
 
 Chris wrote:
 
 Is there an all inclusive command to install all Gnome ports from 
 within the ports tree?
 
 
 Not everything but enough to get you started:
 
 /usr/ports/x11/gnome2$ cat pkg-descr
 GNU Network Object Model Environment
 
 This metaport installs the entire GNOME 2 desktop, including
 the the most common user applications.  Other popular GNOME
 applications can be installed from the other GNOME 2 metaports:
 
 * x11/gnome2-fifth-toe
 * x11/gnome2-power-tools
 * editors/gnome2-office
 * devel/gnome2-hacker-tools
 
 WWW: http://www.FreeBSD.org/gnome/
 
 
 
 Perfect - this is exactly what I wanted. I'm a KDE munkie myself, but 
 I wanted to dabble w/Gnome.
 
 Thank you Chris H.
 
 
 I would also highly recommend Xfce4.2. :)
 
 Chris
 
 
 
 I would - but I'm not into intense modification to my wm. A few teaks 
 here and there ore fine, but if I need to learn to setup a decent wm, 
 then it sorta defeats the purpose.

I don't think it neccessarily defeats the purpose, the default settings
usually work just fine in my experience.  But I've found that some other
windows manager like fvwm2 offer much more flexibility in setting them
up than anything kde or gnome's metacity offer.  And best of all, once
you have it tweaked perfectly, then all I you have to do is copy a text
file around.  For fvwm2, thats .fvwm2rc.  Every system I use KDE on I
have to spend quite a while customizing it to fit me.  And even then I
always miss certain shortcuts that I use a lot.  Now if I had to start
from scratch writing my .fvwm2rc, then I probably never would have, but
luckily a good default one is provided.

 
 I love BSD under a wm, but I don't have the luxury of spending hours to 
 days makeing a kick-ass looking environment. That's just me tho - I 
 have seen what other can do - I lack the creative-eye to do that fancy 
 stuff.
 
 
 -- 
 Best regards,
 Chris
 
 Go where the money is.
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: 5.3 + nvidia GeForce 6600 GT + amd64

2005-02-28 Thread Loren M. Lang
On Sun, Feb 27, 2005 at 07:58:59PM -0800, Ward Willats wrote:
 Hello Everyone.
 
 I just bought me a spiffy new amd64 box with an nvidia GeForce 6600 
 card. I am running Freebsd 5.3/amd64 and xorg.
 
 Though I love the games, my most important need for this machine is 
 to do software development -- so I don't need the 3D stuff at all 
 right now.
 
 I tried the OSS nvidia driver -- it didn't detect the screen.
 
 The nvidia-driver port does not work on amd64 (I think I remember 
 it complaining...)
 
 The nvidia site has 64 bit binaries for Linux, but if there is a 
 magic way to wrap them for use in FreeBSD I don't know what it is.
 
 Anyway, the Vesa driver would be good enough for my needs, and 
 indeed, it easily drives the card to various resolutions, but all the 
 built-in modes are with a 60hz refresh rate and the flicker drives me 
 nuts.

You could try using xrandr to change the refresh rate.  The other option
might be to modify the monitor section in ur xorg.conf file with
VertRefresh, I believe, to set a refresh range starting just above 60hz.

 
 Guess I can concoct a custom modeline to raise the refresh rate with 
 the vesa driver, but that seems like a pretty primitive way to go 
 here in THE FUTURE. So thought I'd ask if you folks had any 
 suggestions.
 
 Thanks,
 
 -- Ward
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Received mail timestamp is off by 7 hours

2005-02-28 Thread Loren M. Lang
On Mon, Feb 28, 2005 at 12:58:17AM +1100, Ian Smith wrote:
 On Sun, 27 Feb 2005 03:10:12 -0700 Pat Maddox [EMAIL PROTECTED] wrote: 
 
   Alright, I got it all working now.  Not sure how to change the time
   zone with config files, so I just used sysinstall to change it to MST
   (time zone is arbitrary, but since this is the zone I live in, it's
   convenient for me).  Then I used ntpdate to sync it, and it's working
   well now.
   
   Thanks for pointing that out to me.  I just thought that CET was central 
 time :)
 
 Yes sysinstall's as good a way as any, it'll set your timezone and also
 let you choose between running with a UTC or local time CMOS clock.  Or
 you can manually tun tzsetup(8) and create (or not) /etc/wall_cmos_clock
 .. see adjkerntz(8) 
 
 Take little notice of people opining that you must or even should run
 CMOS UTC time; that's entirely up to you.  I've always preferred local
 time CMOS clocks personally; sysinstall creates /etc/wall_cmos_clock and
 cron runs 'adjkerntz -a' halfhourly at times when daylight savings time
 might come or go in your zone, and that's always worked fine here. 

The reason using UTC for the cmos clock is that it never changes like US
daylight savings does.  Now if your timezone doesn't ever need to be
pushed forward or backwards then it won't be a problem, but otherwise
evertime the system boots up, it has to determine if the cmos time is
correct or needs to be adjusted.  A UTC time will always be correct and
can be turned exactly into the correct time at the moment.  I think that
if FreeBSD crashed just after it booted up and adjusted the hour forward,
then on the next reboot, it would adjust it another hour forward.  In
general, it is just harder to manage.  Even worse would be my Quad boot
system with Gentoo Linux, FreeBSD, OpenBSD, NetBSD.  If I used local
time for my cmos clock then every daylight savings change, each os would
adjust the clock independently and I'd be 3 hours off.

 
 The only thing to watch running wall_cmos_clock is that if you boot to
 single user mode, before /etc/rc has run 'adjkerntz -i' the system will
 assume CMOS is UTC, so any files then modified show timestamps in UTC
 (discovered the hard way in Jan 2000 on a box with a broken y2k BIOS :)
 
 Cheers, Ian
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: /dev/io , /dev/mem : only used by Xorg?

2005-02-28 Thread Loren M. Lang
On Mon, Feb 28, 2005 at 04:11:24AM -0800, Ted Mittelstaedt wrote:
 
 
  -Original Message-
  From: Kris Kennaway [mailto:[EMAIL PROTECTED]
  Sent: Monday, February 28, 2005 2:58 AM
  To: Ted Mittelstaedt
  Cc: Rob; FreeBSD questions
  Subject: Re: /dev/io , /dev/mem : only used by Xorg?
 
 
  On Mon, Feb 28, 2005 at 01:32:26AM -0800, Ted Mittelstaedt wrote:
 
   Instead, they are part of the kernel itself.
  
   All the /dev files are, /dev/random, /dev/ad0 and so on, are simple
   files that take up only a few bytes of space.  They are convenient
   hook points to use to get to these devices.  That is, when
  a program
   accesses /dev/random, it isn't actually opening that file.  Instead,
   the kernel intercepts that call and supplies the program opening
   that device with the output of the actual device.
  
   This is why these device files are created with the mknod utility,
   rather than just copying a file to /dev/random - since doing that is
   accessing the device, not creating the device file.
  
   So, deleting these /dev devices saves you practically no space at
   all, and does not in fact delete the devices - it only deletes the
   access point to them.  The devices are still there in the kernel.
 
  No, in 5.x the device nodes are created automatically by devfs and
  only appear in /dev by default if support is enabled in the kernel.
 
 Ah, yes I wasn't paying attention, he did say 5.  I stopped paying
 attention
 after reading that he was wanting to remove /dev/random.
 
  As the original poster discussed, /dev/io, /dev/mem and /dev/random
  are optional components of the 5.x kernel, although as I replied, the
  situations in which one would not want to include them are limited.
 
 
 Actually, recompiling openssl to use a prng daemon instead of the random
 device
 will probably improve your ssh security - unless they have greatly
 improved the entropy generation in the random device in 5.X

Is the /dev/random on FreeBSD really this bad?  I thought it should be
better since it can gather entropy from all over the kernel like
interrupts.  I'm pretty sure I read that linuxes /dev/random was far
supieror to prng and I'd expect FreeBSD to be the same unless someone
was lazy in implementing it or there is some major security hole in it.

 
 Ted
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: I killed my system with grep

2005-02-27 Thread Loren M. Lang
On Fri, Feb 25, 2005 at 11:42:48PM -0500, Parv wrote:
 in message [EMAIL PROTECTED],
 wrote Loren M. Lang thusly...
 
  On Fri, Feb 25, 2005 at 12:14:04PM +0100, Ramiro Aceves wrote:
   
   I am running a FreeBSD 5.3 system with 64MB RAM and 150 MB swap.
   
   Yesterday I entered the command:
   
   # grep -R something /
  
  You probably hit a file under /dev/ and caused grep to hang.  It's
  possible that as root, certain device files might hang the system,
  but nothing comes to mind at the moment unless /dev/io could do
  it.  Also, think about what happens when grep hit's /dev/zero.  It
  will never finish.
 
 Would using -I option (not search text-like files) help to avoid
 above described hang ups in /dev?

No, it still searches all files, it just doesn't print the usual line
that it matched, only whether there was success or not.  You really just
need to make sure grep never goes into /dev.  Since your running 5.x,
/dev is it's own filesystem of a unique type, so the following command
will run grep on only filesystems of type ufs, which won't include
network filesystems, or /dev:

find / -fstype ufs -exec grep -H something {} \;

 
 
   - Parv
 
 -- 

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Installation instructions for Firefox somewhere?

2005-02-27 Thread Loren M. Lang
On Sat, Feb 26, 2005 at 03:48:21PM +0100, Anthony Atkielski wrote:
 Chris writes:
 
  If you don't have the ports tree (/usr/ports) on the box, put it there.
 
 I don't have 300 MB to spare, particularly for something that I will use
 so rarely.

Is there no machine you can nfs mount a ports tree from?  I do it all
the time and set the following environment variables in bash:

export DISTDIR=$HOME/ports/distfiles
export PACKAGES=$HOME/ports/packages
export WRKDIRPREFIX=$HOME/ports/work
export PORTS_DBDIR=$HOME/ports

Then I have a shared and up-to-date ports tree for all my machines.  If
I just want to install packages then I use:

portupgrade -R -PP www/firefox

You should also be able to browse the ftp site by hand or check out
freshports.org and get the package that way too, but it doesn't handle
dependencies as nicely.

Also, if your trying to install the linux version, then make sure
linux-XFree86-libs is installed as well as some version of linux_base.

 
 What's wrong with getting the index from the FTP site when I run
 sysinstall?  Seems to me that it would guarantee that the ports are
 always up to date.
 
 -- 
 Anthony
 
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Why can't I access my floppy disk?

2005-02-25 Thread Loren M. Lang
On Wed, Feb 23, 2005 at 05:11:37PM +0100, Anthony Atkielski wrote:
 Loren M. Lang writes:
 
  Do you mean install a 1440k floppy image onto a disk or just copy a file
  smaller than 1440k onto the msdos fs of an already formatted floppy.
 
 Specifically, I was trying to generate an installation boot floppy for
 FreeBSD, in order to install it on my other machine (which is too old to
 boot from CD).

If you were using one of the pre-fabbed floppy images provided by
freebsd like kern.flp then you would want to write it raw to disk, not
mount it, and this is forbidden at securelevel 3.

 
  The latter should be ok even at securelevel 3, but the former can't
  because that would mean open /dev/fd0 for writing other than a mount.
 
 I got the error just trying to mount the diskette.  I tried all
 different formats of the mount and mount_msdosfs commands and they all
 either generated a syntax error or told me that the operation was not
 permitted.

I don't know why this is, it should still be possible, especially since
you can mount cdroms.  /dev/fd0 is read/write by root right?  And the
disk already had a formatted filesystem on it before you tried mounting
it?

 
 -- 
 Anthony
 
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Directory not empty

2005-02-25 Thread Loren M. Lang
On Fri, Feb 25, 2005 at 11:29:17AM +0800, T.F. Cheng wrote:
 man, you are right, I now recall there was a crash
 during the last portupgrade. And there is 
 /dev/ad0s1f: UNEXPECTED SOFT UPDATE INCONSISTENCY; RUN
 fsck MANUALLY. in my /var/log. 
 Guess the mystery is solved.
 Then why do I have to reboot first then run bgfsck?
 Can I run this myself without rebooting? 

kill -TERM 1 will send your system into single user mode without
rebooting.  Assuming you haven't done system like increase the
securelevel, you should be able to fsck the drive from here.  I believe
just typing exit will go back for multi-user mode.

 
 thanks!
 
 
 
  --- Dan Nelson [EMAIL PROTECTED] ?g?D?G
  In the last episode (Feb 25), T.F. Cheng said:
   yeah, it's weird. I found that I can rename it (to
  tmp) then I tried
   to del it:
rm -fr tmp
   rm: tmp/qt-x11-free-3.3.4/doc: Directory not empty
   rm: tmp/qt-x11-free-3.3.4/src: Directory not empty
  
  Do you use softupdates, and did your system happen
  to crash after a
  portupgrade?  I bet if you cd into
  tmp/qt-x11-free-3.3.4/doc and run ls
  -la, you'll see something like:
  
  $ ls -la
  total 2
  drwx--  4 dan  dan  512 Feb 22 11:00 ./
  drwxr-xr-x  3 dan  dan  512 Feb 22 11:00 ../
  
  The . entry should have 2 links in an empty
  directory (one here, and
  one in the parent directory).  That's caused be a
  failed background
  fsck, which is supposed to reset bad link counts
  after a crash.  If you
  check /var/log/messages, you might see something
  like this:
  
PARTIALLY TRUNCATED INODE I=316179
UNEXPECTED SOFT UPDATE INCONSISTENCY; RUN fsck
  MANUALLY.
  
  Try rebooting and letting the bgfsck run again, or
  boot into
  single-user mode and run fsck -p on the filesystem.
  
  -- 
  Dan Nelson
  [EMAIL PROTECTED]
   
 
 =
 Best Regards,
 
 Tsu-Fan Cheng
 
 _
 Do You Yahoo!?
 ?n?O?K?O?? @yahoo.com ?q?l?l?? @ http://chinese.mail.yahoo.com
 Get your free @yahoo.com address at http://chinese.mail.yahoo.com
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: I killed my system with grep

2005-02-25 Thread Loren M. Lang
On Fri, Feb 25, 2005 at 12:14:04PM +0100, Ramiro Aceves wrote:
 Hello FreeBSD friends:
 
 I am running a FreeBSD 5.3 system with 64MB RAM and 150 MB swap.
 
 Yesterday I entered the command:
 
 # grep -R something /

Running a grep on an entire system as root is a bad idea.  At least
limit to certain filesystems.  You probably hit a file under /dev/ and
caused grep to hang.  It's possible that as root, certain device files
might hang the system, but nothing comes to mind at the moment unless
/dev/io could do it.  Also, think about what happens when grep hit's
/dev/zero.  It will never finish.

 
 and after a while, my system did not respond. I do not remember the exact
 messages as I am on a winbugs at the University. The error was about
 swapping. I could switch among terminals but the system was dead. I needed
 to reboot.
 
 I rebooted and tried again watching top output and I could see as swap
 usage was incresing very quickly until it ran out of swap space and the swap
 pager failed.
 
 Was my sytem dead? or, is it possible to recover from that state without
 rebooting? How is it possible that a simple command like this could
 auto-kill the machine?
 
 What is the recomended fix for this?:
 
 a- Asigning more swap.
 b- Not executing that command anymore.
 
 
 Thank you very much for your advices and help.
 
 Ramiro
 
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: extract iso image

2005-02-23 Thread Loren M. Lang
On Wed, Feb 23, 2005 at 09:14:25AM +0800, T.F. Cheng wrote:
 hi, I am not sure if I am doing the right thing. I
 want to extract an downloaded isoimage by first
 mounting it. I tried: mount -t iso9660 -o loop
 image.iso /mnt but turns out I don't have
 mount_iso9660 under /sbin, only mount_cd9660. Is there
 any other way to do this? I am running
 freebsd5.3/i386. Thanks!

Linux calls it iso9660, FreeBSD calls is cd9660, same thing.
The freebsd command that does the same thing is as follows:

mount -t cd9660 /dev/`mdconfig -a -t image.iso` /mnt

   
 
 =
 Best Regards,
 
 Tsu-Fan Cheng
 
 _
 Do You Yahoo!?
 ?n?O?K?O?? @yahoo.com ?q?l?l?? @ http://chinese.mail.yahoo.com
 Get your free @yahoo.com address at http://chinese.mail.yahoo.com
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: samba as wins-server

2005-02-23 Thread Loren M. Lang
On Tue, Feb 22, 2005 at 09:24:28AM +0100, Florian Hengstberger wrote:
 Hi!
 I'm working in an office with several win hosts of all flavours
 (98,2000,eXPerience). Unfortunatly the resolution of computers takes
 sometimes up to half an hour (approx.) until they are accessible after
 booting up.
 In near future I'll have the chance to switch to FreeBSD with
 my box (at least, I hope so). I'll install samba for win access to my
 machine. Reading some documentation I've found out that samba
 can also act as a wins-server. Will this enhance the latency of netbios
 resolution or will it corrupt it?

Do you mean that the resolution of a name to ip address takes a half an
hour or just that machines don't appear on the network for half an hour.
There are two parts to it.  One machine acts as a browse master and
keeps a list of names of all machines in it's workgroup.  There is an
election process that happens to determine who the master is.  When a
machine boots up it needs to alert the master that it exists, but that
can take a while sometimes with windows.  The second part is name to ip
resolution, this has nothing to do with the browse master.  Two type of
name resolution are broadcast and wins.  Wins is like a dns server where
all boxes register their name and ip address with.  Broadcast is more
like arp resolution only name to ip instead of ip to hw address.  Both
both broadcast and wins usually work immediately.  The only downfall to
broadcast is it only works when every computer is on the same subnet.
Most problems with computers showing up is which the browse
master/clients registering, not name resolution.  And even before the
browse master knows about the client, you can still access it by typing
in the name by hand, just not by going to network neighbor hood and
looking for it.

 
 Is there a way to speed up this process with samba,
 am I writing complete nonsense?
 Tell me if this is true.
 
 Yours, Florian
 
 
 
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Linux Compat - LIBSTDC++.SO.5 - Call Of Duty

2005-02-23 Thread Loren M. Lang
On Sat, Feb 19, 2005 at 09:24:19AM -0700, Nick Pavlica wrote:
 All,
   I'm trying to get the Call of Duty Dedicated server running on
 FreeBSD 5.3.  To do get an error when I run the daemon which is caused
 by issue below.  Are there compatibility libs in the ports collection?
  If not should I use the libs from this link?  If so where to I put
 them?

You need a newer version of linux_base.  I recommend linux_base-rh9.
After upgrading that, you'll probably need to install linux-XFree86-libs
as they are no longer a part of linux_base.

 
 Thanks!
 --Nick
 
 -
 IF YOU HAVE A PROBLEM WITH LIBSTDC++.SO.5 ...
 
   If you are reading this, it's probably because you tried to start your Linux
server and saw this message:
 
 ./coduo_lnxded: error while loading shared libraries: libstdc++.so.5:
  cannot open shared object file: No such file or directory
 
   COD:UO is a C++ program built with gcc 3.2.3, which means it needs a
   system library specific to gcc 3.2. Older Linux systems won't have
   this installed, and we're starting to see newer Linux distributions that
   don't have this either, since they are supplying an incompatible
   gcc 3.4 version. The good news is that you can drop the needed library
   into your system without breaking anything else.
 
   Here is the library you need, if your Linux distribution doesn't supply it:
 http://icculus.org/updates/cod/gcc3-libs.tar.bz2
 
   You want to unpack that somewhere that the dynamic linker will see it
   (if you are sure it won't overwrite any files, you can even use /lib).
 ---
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: USB drive - crypto filesystem options?

2005-02-23 Thread Loren M. Lang
On Sun, Feb 20, 2005 at 08:40:37PM -0500, Louis LeBlanc wrote:
 Hey folks.
 
 I have just become the proud owner of a fancy new 1GB USB 2.0 drive;
 one of those cool new gadgets no bigger than my pinky that holds 1
 Billion bytes of data.  Naturally, I can't wait to play with it :)
 
 Well, I know that USB 2.0 support is kinda sketchy, and I've already
 decided it's not stable on the ICH5 USB controller that comes with the
 Dell Dimension 8300.  Regardless, I have confirmed that I can get the
 little gadget mounted (comes pre-formatted with an MSDos filesystem)
 without the slightest hangup.  Yay me.
 
 So, now what I want to do is see what kind of filesystem options I
 have with this little gem.  Ideally, I would like to get an encrypted
 filesystem that requires a password to mount it.  Of course, I've
 checked the ports, but I don't know much about this area, and I don't
 know if I'm even using the right search keys.  A little googling
 revealed a great article at The FreeBSD Diary
 (http://www.freebsddiary.org/encrypted-fs.php) that discusses cfs.
 Sounds cool, move to the top of the list - ok, it's the only thing on
 the list right now.
 
 That's where you folks come in.  Has anyone had any experience
 actually using a crypto filesystem on a USB drive?  What utilities are
 available for this?  And more importantly, what have your experiences
 been?

I, personally, have found that just using gpg to encrypt important files
on my memory stick as gpg runs on multiple oses: bsd, win, linux, max.
I may also place my encrypted private key on it along with executables
on it for windows since linux/bsd propably already have it installed.
Then I can read the files on any system with just a passphrase.

 
 TIA
 Lou
 -- 
 Louis LeBlanc  FreeBSD-at-keyslapper-DOT-net
 Fully Funded Hobbyist,   KeySlapper Extrordinaire :)
 Please send off-list email to: leblanc at keyslapper d.t net
 Key fingerprint = C5E7 4762 F071 CE3B ED51  4FB8 AF85 A2FE 80C8 D9A2
 
 Ninety-Ninety Rule of Project Schedules:
   The first ninety percent of the task takes ninety percent of
   the time, and the last ten percent takes the other ninety percent.



-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Why can't I access my floppy disk?

2005-02-23 Thread Loren M. Lang
On Tue, Feb 22, 2005 at 08:39:24PM +0100, Anthony Atkielski wrote:
 Chad Leigh -- Shire.Net LLC writes:
 
  Why would you want to mount an MSDOS floppy on a server?
 
 In order to copy a raw file image to the floppy.

Do you mean install a 1440k floppy image onto a disk or just copy a file
smaller than 1440k onto the msdos fs of an already formatted floppy.
The latter should be ok even at securelevel 3, but the former can't
because that would mean open /dev/fd0 for writing other than a mount.

 
  That reduces the security and stability of your server
 
 Not really. See above. The intent is not to leave the floppy permanently
 mounted; I only needed to copy a raw diskette image to the floppy (a
 boot floppy for FreeBSD, as it happens). As it happens, I found a way to
 do it under Windows, so the problem is solved.
 
 -- 
 Anthony
 
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Racoon without compression

2005-02-21 Thread Loren M. Lang
On Tue, Feb 15, 2005 at 06:03:17PM -0500, Christopher Rued wrote:
 Hi all,
 
 I'm trying to set up a VPN connection to a NetScreen VPN using racoon.  
 I configured all of the settings (I think) to match those specified on 
 the NetScreen, except for compression_algorithm.
 
 The only option for compression_algorithm given to me by racoon is 
 deflate.  The NetScreen VPN is configured with Compression: None.
 
 Am I out of luck here?

No, compression is not needed for IPSec.  The only compression
algorithm racoon supports is defate, but that doesn't mean it won't run
without compression.  The settings in /etc/ipsec.conf are what tell
FreeBSD's IPSec to use or not use compression.  ESP is an encryption
layer that you can enable in ipsec.conf and IPComp is a compression
layer, if you only setup ESP then no compression takes place.

 
 Please be sure to inclue me on any replies, as I am not subscibed to the 
 list.
 
 TIA
 
 --Chris
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: c++

2005-02-21 Thread Loren M. Lang
On Sun, Feb 20, 2005 at 04:38:32PM +0100, Gert Cuykens wrote:
 On Sun, 20 Feb 2005 16:15:43 +0100, Daniel S. Haischt
 [EMAIL PROTECTED] wrote:
  Gert Cuykens,
  
  I would suggest to post such questions to gtk-list@gnome.org,
  because IIRC you are trying to code a GTK app ...
  
  Additionally I would suggest to learn C/C++ first to get a better
  understanding of the whole language structure. Or at least please
  join the c# IRC channel at irc.freenode.net to ask such questions,
  it's quite annoying to see them on a list which is dedicated to an
  UNIX OS.
 
 I did that but they give me the get book and ask somebody els answer.

That seems to be a good response based off of what your current level of
programmings skills seem to be.  There are lots of good books on c/c++
that will be much more help to you than this list will be.

 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Unexpected resolver behavior

2005-02-20 Thread Loren M. Lang
On Thu, Feb 17, 2005 at 10:04:22PM -0600, Jamie Ostrowski wrote:
 
 
 
 I'm running 4.10-p5 on my workstation at home, and I can't understand
 why I cannot get www.foo.com to resolve to an IP I am specifying in
 /etc/hosts (I want to over-ride the IP returned by the nameserver I query
 by default).
 
 
 in /etc/hosts:
 
 199.xx.xx.24  www.foo.com.

Remove the . at the end of com.  Finishing domain names with a period
like that is only used in bind's zone files, nowhere else.

 
 
 in /etc/host.conf:
 
 # $FreeBSD: src/etc/host.conf,v 1.6 1999/08/27 23:23:41 peter Exp $
 # First try the /etc/hosts file
 /etc/hosts
 # Now try the nameserver next.
 bind
 # If you have YP/NIS configured, uncom
 
 
 (I have no nsswitch.conf file in /etc)
 
 
 But when I try to resolve www.foo.com from the command line, I am getting
 the IP address from the nameserver from the outside world rather than the
 IP from /etc/hosts. I am not running a local named on this machine,
 either. Any ideas?
 
 
 
 - Jamie
 
 
 
 
 
 
 
 
 
 
 The Moon is Waxing Gibbous (71% of Full)
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Configuring PF

2005-02-20 Thread Loren M. Lang
On Mon, Feb 14, 2005 at 09:32:25PM -0700, Pat Maddox wrote:
 I want to install a firewall on my system.  First of all, is PF the
 one I should be using?  It seems to get the most recommendations.
 
 I don't actually seem to have any problems configuring it - I just
 have some problems testing the configuration.  I can ssh to the box,
 and I can access port 80...but I'd like to be able to just scan it to
 quickly see what's up.  When PF is disabled, I can nmap it in about 9
 seconds.  When I turn it on, it takes over 3 minutes to do.  These
 machines are on the same network, so the connection is obviously fast.

This is a good thing, IMHO.  Think about all those script kiddies
sitting out there looking for a nice, juicy server to compromise.  If it
takes them 3 minutes to port scan your machine, they'll probably cancel
it before it's finished and move on.

I believe what's happening is that all ports that aren't open are
configured to drop packets instead of reject them like is default.
Reject means send back an error message saying port is closed where
dropping just ignores it.  The port scanner sends out a request and
waits for a response, either Hello, or Sorry, I'm closed.  It will
wait quite a while before it decides that nothings there.

 
 Are there any good, pretty simple guides on setting up PF?  I'm having
 a tough time understanding what the rulesets all mean.
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: probably a simple problem with permissions

2005-02-20 Thread Loren M. Lang
On Mon, Feb 14, 2005 at 11:53:57PM -0500, David Wassman wrote:
 I am probably understanding this problem incorrectly meaning there is a 
 simple explanation that is escaping me. My /dev/cd0 is owned by root so  
 I have tried to change both the owner and the group so I can use it as a 
 user.
 
 I have tried:
 chmod 777 /dev/cd0
 chmod -R 777 /dev/cd0
 chgrp 777 /dev/cd0

It should at best be 666, and probably only 644 since cds are read-only.
I don't know if a cd burner needs to be 666 for ordinary users to burn
though.  device files, AFAIK, have no use for execute permissions.  And
I don't think 777 is a valid group name unless you decided to add it for
some reason.  If your cdrom device is cd0 then add perm cd0 0644 to
/etc/devfs.conf

 
 The problem is that when I reboot the system the old permissions return 
 and I have to su and change the permissions back. How do I make these 
 changes permanent? There is probably a security reason for  this but it 
 is very inconvenient on a desktop station. Any help would be 
 appreciated. I am running 5.3.
 
 David
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: SSH-agent setting

2005-02-20 Thread Loren M. Lang
On Tue, Feb 15, 2005 at 06:23:27PM +0100, kilim wrote:
 
  On Tue, Feb 15, 2005 at 11:51:41AM -0500, Clayton Scott Kern wrote:
  
   Why not use keychain and put it in the appropriate rc file (.bashrc,
   cshrc, etc.), then you'll be connected to the agent automatically.
 
 My bad. 
 
 Please disregard my previous email.
 
 I apologise !
 
 Your suggestion is great. 
 
 What I didn't realise is that keychain is a great tool which resides
 in /usr/ports/security/keychain and it does this:
 
 allowing you to easily have one long-running ssh-agent process per
 system, rather than per login session.

Actually, it's simpler than that.  Just add the following lines to your
.profile:

export SSH_AUTH_SOCK=/tmp/user.agent
ssh-add -L /dev/null 21
if [ $? -ge 2 ]; then
ssh-agent -a $SSH_AUTH_SOCK /dev/null 21
fi

Then you'll just need to run ssh-add once after every reboot to re-add
the key, but the ssh-agent will be accessible from every terminal, X11
session, ssh login, etc. with your username.

 
 as its web site states:
 
 http://www.gentoo.org/proj/en/keychain/index.xml
 
 
 Thank you Clayton !
 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: can't reboot after messing up my rc.conf file

2005-02-20 Thread Loren M. Lang
On Thu, Feb 17, 2005 at 12:44:55AM -0800, Sandy Rutherford wrote:
  On Wed, 16 Feb 2005 20:02:02 -0600, 
  Jamie Novak [EMAIL PROTECTED] said:
 
   I may have missed something from the thread before I joined the list,
   but is there any reason you can't just mount the filesystems and use vi
   as you're used to? If you're getting far enough in the boot process to
   get an opportunity to interact with a shell, you should just be able to
   mount -a and vi whatever. (Or, if you want to play it safe (or if the
   system wasn't cleanly shutdown before), fsck and then mount -a)
 
 This should work fine. Although, depending on where he is in the boot
 process, / may be mounted read-only.  Do `mount -uw /' to make it
 read-write.
 
 The lesson here is that when editing any file that is even remotely
 connected to the boot process, _make_a_backup_copy_.  You can then
 simply mv the backup copy back into place should you mess up.

Actually, Absolute BSD has a handy suggestion about using rcs for all
important files in /etc/.  Maybe you should try looking into that.

 
 Sandy
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: What is the status of gvinum in FreeBSD 5.3?

2005-02-19 Thread Loren M. Lang
On Thu, Feb 17, 2005 at 04:57:33PM -0500, Bill Moran wrote:
 
 I was wondering about the status of gvinum in 5.3.
 
 I seem to remember that there were a lot of problems with gvinum in 5.3,
 but searching around, I can't seem to find anything that says for sure
 one way or the other.
 
 I'm just trying to seperate the FUD from the reality.  Is there anywhere
 that has the status?  Anyone using gvinum that can say how reliable it
 is or isn't?
 
 I understand that there are GEOM classes available that have some of
 the functionality of vinum that I could use instead, but there are
 two reasons that these aren't an option for me.
 1) I'm wanting to migrate 4.X machines with existing vinum volumes to
5, and I'd rather not dump/restore.

FreeBSD 5.x also has the original vinum implementation plus gvinum
so it should be possible to use that instead of needing to dump/restore.
Though I think that there are a couple of limitations like no swap on
the original vinum do to the addition of GEOM.

 2) There is at least one feature that vinum has that I don't see in
any GEOM class, that I'm using.  That is the ability to add subdisks
and use growfs to enlarge filesystems without having to dump/restore.

I think that either geom_ccd or geom_concat will allow you to concat
more drives in and then use growfs to expand the fs.

 
 -- 
 Bill Moran
 Potential Technologies
 http://www.potentialtech.com



-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ssh key authentication

2005-02-19 Thread Loren M. Lang
On Sat, Feb 19, 2005 at 11:27:03AM +1000, Timothy Smith wrote:
 i've followed the howto exactly and it still doesn't work. i don't know 
 wtf i'm doing wrong. here is the output i get in verbose mode
 
snip
 Password:
 
 the files i have in the local host
 
 ls -l /home/timothy/.ssh/
 total 6
 -rw---  1 timothy  wheel  672 Feb 19 11:06 id_dsa
 -rw-r--r--  1 timothy  wheel  621 Feb 19 11:06 id_dsa.pub
 -rw-r--r--  1 timothy  wheel  614 Feb 19 11:21 known_hosts
 
 the files i have in the remote host
 ls -l
 total 4
 -rw-r--r--  1 timothy  wheel  241 Feb 18 22:44 authorised_keys
 -rw-r--r--  1 timothy  wheel  621 Feb 19 11:12 authorised_keys2

It looks like you copied id_dsa.pub to authorized_keys2.  On recent
versions of ssh, all public authorized keys are stored in
authorized_keys.  Do:

cat authorized_keys2  authorized_keys  rm authorized_keys2

 
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ping question

2005-02-16 Thread Loren M. Lang
On Tue, Feb 15, 2005 at 08:56:49AM -0800, ann kok wrote:
 Hi Loren
 
 Thank you for your mail again
 
 For the monitor sofeware iptraf , I can't get it in
 the port. Why freebsd doesn't support it!
 I tried to install in freebsd from the tarball and got
 an error messages!

Well, the program seems to be heavily based on the low-level network
interface that linux uses and will require a little bit of effort to
port to freebsd.  I use it on one of my linux routers.  I don't think I
have the time at the moment to port it, but maybe this program might be
interesting enough to someone else on this list for them to take the
time.  I can update you if I am able to get anything working if you
want.

 
 I need sth to prove the traffic to those routers from
 outside. 
 
 Do you have experience the max traffic freebsd can
 support? It seems to support max 230M only!

If you have a computer on both sides of the router then you can run a
timed test to see how fast the traffic is.  My ISP runs redhat and gave
me a shell account to use.  The following can be a useful test:

time ssh remote-system dd if=/dev/zero bs=1M count=10  /dev/null

That will tell you the time to send 10 megs of data from a remote
computer to the one your running it on.  Make sure you read the real
time, not user or system.  This doesn't take into account other traffic
at the same time, but if it's just occasional webpage access, it may not
be a big deal.  Now this may not be too accurate, I don't know how much
bigger the data gets by doing encryption, so a ftp transfer would
probably be better.

 
 Thank you
 
 
 --- Loren M. Lang [EMAIL PROTECTED] wrote:
 
  On Mon, Feb 14, 2005 at 11:21:03AM -0800, ann kok
  wrote:
   Hi all
   
   Thank you very much for your help
   
   The freebsd router is behind the cisco router.
   
   Do you have any experience to determine the
  traffic is
   in freebsd and cisco from outside?
   
   Can traceroute give figure to prove it?
  
  I'm not quite sure if I understand what you're
  asking, but if you want
  to see what traffic is going into/out of/through
  them, tcpdump is a good
  command-line based packet sniffer and ethereal is
  it's gui cousin.  You
  can even use tcpdump to capture data and later view
  it on a different
  computer with ethereal.  iptraf will show you
  general usage of the
  traffic crossing your router.  If your asking to see
  what path the
  traffic is taking from point A to point B, then
  traceroute is your best
  friend.
  
   
   Please help
   
   Thank you again
   
   --- Loren M. Lang [EMAIL PROTECTED] wrote:
   
On Sat, Feb 12, 2005 at 08:50:32AM -0800, ann
  kok
wrote:
 Hi all
 
 I ping from redhat to cisco router and freebsd
router
 but I don't understand ttl (time to live)
 
 Cisco router has ttl=251 and freebsd router
  has 58
 Does it set by the router itself?
 Can I change it in freebsd?

FreeBSD's default ttl, I believe, is 64, Cisco's
  is
probably 255.  As
long as the number of hops neccessary to get to
  a
certain computer is
never more than 64, there's nothing wrong with
  it. 
The highest I've
seen is about 30 and the Internet is going to
  have
to grow a bit, I
think, before it's an issue.

 
 Thank you
 
 64 bytes from 212.223.x.193: icmp_seq=1151
  ttl=251
 time=100 ms
 64 bytes from 212.223.x.193: icmp_seq=1152
  ttl=251
 time=103 ms
 64 bytes from 212.223.x.193: icmp_seq=1153
  ttl=251
 time=104 ms
 64 bytes from 212.223.x.193: icmp_seq=1154
  ttl=251
 time=106 ms
 
 64 bytes from 212.x.254.4: icmp_seq=1182
  ttl=58
 time=105 ms
 64 bytes from 212.x.254.4: icmp_seq=1183
  ttl=58
 time=105 ms
 64 bytes from 212.x.254.4: icmp_seq=1184
  ttl=58
 time=104 ms
 64 bytes from 212.x.254.4: icmp_seq=1185
  ttl=58
 time=108 ms
 

  __
 Do You Yahoo!?
 Tired of spam?  Yahoo! Mail has the best spam
protection around 
 http://mail.yahoo.com 

  ___
 freebsd-questions@freebsd.org mailing list

   
  
 
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
[EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key:
ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3
7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
   
  
 
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
[EMAIL PROTECTED]

   
   
   __
   Do You Yahoo!?
   Tired of spam

Re: Ports

2005-02-16 Thread Loren M. Lang
On Mon, Feb 14, 2005 at 12:54:05PM -0600, Paul Schmehl wrote:
 --On Monday, February 14, 2005 11:53:04 AM -0500 Christopher McGee 
 [EMAIL PROTECTED] wrote:
 
 Could you please give some detail about setting options for individual
 ports in make.conf?  Maybe I missed something in 'man make.conf' or 'man
 ports' but everything seems to refer to global options.  The only example
 I've found is in man portmanager, but I'm still a little unsure about the
 how to do it properly.
 
 Since Mike posted an example, I won't repeat it.  I should point out that 
 you can also use /usr/local/etc/pkgtools.conf.  Here's an example of that:
 
 MAKE_ARGS = {
'security/snort-*' = 'WITH_MYSQL=1 WITH_FLEXRESP=1'
  }

One thing that should be mentioned here is that this only works when one
is using portupgrade for installing and upgrading ports.  People using
portmanager or just the straight makefiles in /usr/ports won't be
benifiting from this.

 
 Paul Schmehl ([EMAIL PROTECTED])
 Adjunct Information Security Officer
 The University of Texas at Dallas
 AVIEN Founding Member
 http://www.utdallas.edu
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Resuming compilation sesssion

2005-02-16 Thread Loren M. Lang
On Sun, Feb 13, 2005 at 12:12:12PM +0100, Erik Norgaard wrote:
 Vittorio wrote:
 With a FBSD 5.3 box I use to compile my favourite programs from scratch 
 with:
 cd /usr/ports/prog_I_want
 make
 make install clean
 
 But sometimes I have to interrupt the compilation because the PC is shared 
 with other people.
 
 How can I resume the compilation session from where I stopped it?
 
 If you crtl-c, then compilation breaks. As long as the 'make clean' 
 has not been done, next time you 'make' it will continue where it stopped.
 
 If it is only a short period, you can crtl-z (suspend), then you can 
 see the job with 'jobs', make it nice 'renice -20 %jobnumber', start 
 it again in background with 'bg %1' or in foreground with 'fg %1'.

This also applies to using portupgrade, but if you stop portupgrade with
ctrl-c then you need to remember to resume portupgrade with the -w
switch.

 
 Cheers, Erik
 
 -- 
 Ph: +34.666334818   web: http://www.locolomo.org
 S/MIME Certificate: http://www.locolomo.org/crt/2004071206.crt
 Subject ID:  A9:76:7A:ED:06:95:2B:8D:48:97:CE:F2:3F:42:C8:F2:22:DE:4C:B9
 Fingerprint: 4A:E8:63:38:46:F6:9A:5D:B4:DC:29:41:3F:62:D3:0A:73:25:67:C2
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


  1   2   3   >