Re: Updating the system and ports

2010-03-09 Thread Pongthep Kulkrisada
* RW (rwmailli...@googlemail.com) wrote:
> that should be RELENG_8_0
Sorry for typo, but actually I only appended to the existing supfile.
Thing goes well.

> Stable is a stable development branch, if you want to use 
> freebsd-update you need to use a proper release security branch. 
Does that mean -STABLE can not use freebsd-update?
If so, I am clear now because I encountered the problem
when I used freebsd-update from -STABLE. It failed.

Thanks,
Pongthep
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Updating the system and ports

2010-03-09 Thread Pongthep Kulkrisada
* Chuck Swiger (cswi...@mac.com) wrote:
> If you track RELENG_8, you get -STABLE system from a build cycle.  If you
> track RELENG_8_0, you are tracking the security branch and get your own
> "official" -RELEASE system from the build cycle.
>
> http://www.freebsd.org/security/ says:
> 
> "Supported FreeBSD Releases
> 
> The FreeBSD Security Officer provides security advisories for several
> branches of FreeBSD development. These are the -STABLE Branches and the
> Security Branches. (Advisories are not issued for the -CURRENT Branch.)
> 
>   ? The -STABLE branch tags have names like RELENG_7. The corresponding
> builds have names like FreeBSD 7.0-STABLE.
> 
>   ? Each FreeBSD Release has an associated Security Branch. The Security
> Branch tags have names like RELENG_7_0. The corresponding builds have names
> like FreeBSD 7.0-RELEASE-p1."
You explained very clear, much appreciated.

> However, one does not normally swap back and forth between building from
> source and doing binary upgrades, although it's certainly fine if you
> wanted to get freebsd-upgrade working and use it from here on out.
I only wanted to try again because the previous tries failed.
I actually was not expecting any update to be occured.
From now on I should adhere with binary update, very fast.
It also synchronizes source tree with binary.

But I'm still question that how can we keep long uptime, if we always boot.
Some boxes have been serving for many years without shutdown.

> > 3. freebsd-update did not request for mergemaster(8). [edit]
> > How can we ensure that things in /etc go well?
> 
> Read /usr/src/UPDATING for notes about important changes.
Very technical, few people can understand. It's good anyway. :-)

> Run mergemaster -iU, although you don't need to bother unless you're moving
> to at least a .x upgrade or there was a specific mention in the security
> advisory otherwise.
Okay.

> I update most systems at least as often as FreeBSD security advisories are 
> posted;
Where or which mailing lists?
Is there any ``push model'' like Windows Update?
It will prompt right after boot finish, when new patches exist.

> and ports whenever portaudit warns of an issue.  If a new version of
> something which is a primary function of some box is updated, I might update
> more frequently for such a specific reason.
I have just know that ports-mgmt/portaudit can also report the availability of
new ports. I thought that it only issues warnings when security
vulnerabilities occurs.

> I have test machines that get updated about weekly.  I have firewall boxes 
> with multiyear uptimes where I've only updated OpenSSH+OpenSSL when needed, 
> since port 22 for management is all they do.
So you didn't update the system to keep long uptime.

> I'm going to conclude from this question that you aren't running production 
> systems.  :-)
Yes I'm a novice (hobbyist). :-)

> You only need to rebuild all ports when you are updating the system for a 
> major release, like from 7.x to 8.x.  Otherwise, portmaster, portupgrade, etc 
> will determine which ports have changes and only rebuild those ones.
I shall use portmaster whenever I update *major* or *minor* release.
But excluding patches.

Thanks,
Pongthep
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Fwd: Updating the system and ports

2010-03-09 Thread Pongthep Kulkrisada
Hi Folk,

Further to previous suggestion in this mailing list,
I have just updated from FreeBSD 8.0-STABLE to the latest patch.

I firstly use freebsd-update but it failed ...
# freebsd-update fetch
Lookin up update.FreeBSD.org mirrors... 3 mirrors found
Fetching public key from update4.FreeBSD.org... failed
Fetching public key from update5.FreeBSD.org... failed
Fetching public key from update2.FreeBSD.org... failed
Give up, no remaining mirrors.
(I didn't run script(1), I hard typed from my memory.)

I tried many times, the results were always the same.
I don't know what happen.

So I switch to update from source.
REL_ENG_8_0 is specified in stable-supfile. After csup and buildworld/kernel.
Now I am running 8.0-RELEASE-p2.
But I am expecting 8.0-STABLE-p2. I don't understand.

The handbook did not say anything about the capitalized RELEASE.
At least I did not find it.
I only notice that I always get RELEASE when freshly install from CDs.
But when build from sources sometimes I get RELEASE.
And sometimes I get STABLE.

1. What is the difference between RELEASE and STABLE?

2. After buildworld/kernel finished, I tried freebsd-upgrade again.
Now it works. There are still 20 files to fetch and install.
Only 8 hours between csup all sources and freebsd-upgrade.
Is it normal to have such 20 outstanding files during short period?

3. freebsd-update did not request for mergemaster(8). [edit]
How can we ensure that things in /etc go well?

4. After this step, I would probably run portmaster. sleepy now :-(
I want to know how often you normally update the ``system'' and ``ports''?
If both are normally done EVERYDAY, freebsd-update is relatively fast.
But portmaster is somewhat slow to build all ports from sources.
One may have hundreds ports, if not thousands.
Please give me some hints, what are you normally do?

Thanks,
Pongthep

- End forwarded message -
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Updating the system and ports

2010-03-09 Thread Pongthep Kulkrisada
Hi Folk,

Further to previous suggestion in this mailing list,
I have just updated from FreeBSD 8.0-STABLE to the latest patch.

I firstly use freebsd-update but it failed ...
# freebsd-update fetch
Lookin up update.FreeBSD.org mirrors... 3 mirrors found
Fetching public key from update4.FreeBSD.org... failed
Fetching public key from update5.FreeBSD.org... failed
Fetching public key from update2.FreeBSD.org... failed
Give up, no remaining mirrors.
(I didn't run script(1), I hard typed from my memory.)

I tried many times, the results were always the same.
I don't know what happen.

So I switch to update from source.
REL_ENG_8_0 is specified in stable-supfile. After csup and buildworld/kernel.
Now I am running 8.0-RELEASE-p2.
But I am expecting 8.0-STABLE-p2. I don't understand.

The handbook did not say anything about the capitalized RELEASE.
At least I did not find it.
I only notice that I always get RELEASE when freshly install from CDs.
But when build from sources sometimes I get RELEASE.
And sometimes I get STABLE.

1. What is the difference between RELEASE and STABLE?

2. After buildworld/kernel finished, I tried freebsd-upgrade again.
Now it works. There are still 20 files to fetch and install.
Only 8 hours between csup all sources and freebsd-upgrade.
Is it normal to have such 20 outstanding files during short period?

3. freebsd-upgrade did not request for mergemaster(8).
How can we ensure that things in /etc go well?

4. After this step, I would probably run portmaster. sleepy now :-(
I want to know how often you normally update the ``system'' and ``ports''?
If both are normally done EVERYDAY, freebsd-update is relatively fast.
But portmaster is somewhat slow to build all ports from sources.
One may have hundreds ports, if not thousands.
Please give me some hints, what are you normally do?

Thanks,
Pongthep
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Updating ports was Flash viewer for FBSD

2010-03-06 Thread Pongthep Kulkrisada
Hi Polytropon,

Firstly, thanks for your suggestion.

* Polytropon (free...@edvax.de) wrote:
> You can consider using "pkgadd -r" to install binary packages.
> Those are quite synchon with the ports tree (as they are
> centrally built from the ports tree).
I checked /var/db/pkg; I have 464 ports installed on my system (including X).
I would probably not do so.

> What about using freebsd-update? It delivers patches in binary
> form for the OS, so you don't need to make world and kernel,
> and if you're following the 8.x-RELEASE-p track, you don't 
> have to recompile your whole software ports - as it has been
> mentioned, this is only needed if you update the major version
> number (e. g. 7.2 -> 8.0).
Once I used binary upgrade from 6.2 -> 6.3.
The source tree was still 6.2 while the system was 6.3.
I know there are no problems with the system.
But it is *untidy*, I don't want to.

> > I upgrade ALL FREQUENT used ports and ALL related libraries required by 
> > them.
> 
> Programs like portmaster can be really helpful here.
Yes, it is what I am expecting. Thank you.
I read the handbook. There are 2 choices i.e. portmanager and portmaster.
I am now thinking which one is better.
I must also check time and disk space required to build all these ports.

> Oh yes, the joy if you want to have a german OpenOffice version,
> where you could run "pkg_add -r de-openoffice" in the past... :-)
> I know what you mean, I try to avoid compile orgies whenever
> possible, at least on my home system. On servers which usually
> don't have GUI stuff, but services that need updates often due
> to security considerations, it's not a big deal.)
I have nothing to do with Office suite.
I might probably not do so, thanks.

> The ISO images are tied to a specific OS version, and they can
> be used with it without problems. You can run into trouble when
> upgrading the OS, and then try to install software from a CD
> that expects another OS version.
I have never installed any softwares from CD/DVD.
I install from CD only when I want to wipe out everything.
And install a new fresh system.

> Using "pkg_add -r" offers the same comfortability as installing
> software from local CD or DVD, but it's usually "up to date" and
> "fits better" to the ports tree - which is useful when you
> install software both from source and from binaries.
If I choose between packages and ports, I opt ports.
As previously mentioned ``portmaster'' or ``portmanager'' should be helpful.
Please give some comments, which one is better.
I read from handbook; but I have never used it.
I don't know so much in this area.
It is system specific and not part of the standard (POSIX or SUS).

Note: I'm just a hobbyist not pro. :-)

Thanks,
Pongthep
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Updating ports was Flash viewer for FBSD

2010-03-06 Thread Pongthep Kulkrisada
* Chuck Swiger (cswi...@mac.com) wrote:
> Yes, it's not enough.
> 
> When you upgrade the base OS to a new major version (ie, going from  
> 7.x to 8.x), the system libraries get bumped to a new version, but any  
> libraries coming from ports are still linked against the older version  
> of the frameworks.  If you don't touch anything, backwards  
> compatibility for 7.x will continue to work fine, but as soon as you  
> start installing something new or upgrade any port, you run into the  
> situation where executables are linked against two different versions  
> of libc.so (etc) and they break.
> 
> For all practical purposes, if you upgrade to a new major version,  
> then you must rebuild all installed ports.
Thank you for your suggestions.
I should mention that recently ``cdrecord'' is broken in 8.0.
It ran pretty well in 7.2.
After I updated the ports and rebuilt, it works fine.
But it takes very long time to rebuild all ports.
Main problem is KDE, big big ports.
Okay, I shall do it, when I have time.

> Things going into -CURRENT may not be "well tested", but anything  
> being merged back to -STABLE ought to be.  Humans make mistakes, but I  
> can't recall more than two or maybe three significant issues over a  
> decade tracking -STABLE, and these were fixed in a matter of hours.   
> If you do care about this level of precision, you should be building  
> to a test platform and then running sanity checks for whatever your  
> machines do before upgrading production boxes, anyway.
> 
> Beyond that, however, you ought to consider tracking the security  
> branch, ie, RELENG_8_0, rather than 8-STABLE aka RELENG_8, as the  
> former does include recommended changes like security bugfixes, but  
> avoids merging in anything which has not been "well tested".
I understand what you said.
But I always have no time to do so.
Normally, I concentrate on my work rather than tracking new patches.

* Robert Huff (roberth...@rcn.com) wrote:
> 
> Chuck Swiger writes:
>   And if you have the time and knowledge to not have to do this
> ... you're probably not involved in the discussion to begin with.
>   :-)
I upgrade ALL FREQUENT used ports and ALL related libraries required by them.
Excluding GUI stuffs.
When I want to update *ALL* these kinds of things (2-3 years once),
I wget iso images, in stead of cvsup/csup.
I always do this way since 5.4 without any problems excepted ``cdrecord''
as mentioned earlier.

Thanks,
Pongthep
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Flash viewer for FBSD

2010-03-05 Thread Pongthep Kulkrisada
* C. P. Ghost (cpgh...@cordula.ws) wrote:
> On Fri, Mar 5, 2010 at 6:12 PM, Pongthep Kulkrisada  
> wrote:
> > % uname -a
> > FreeBSD bsdhost.localdomain 8.0-STABLE FreeBSD 8.0-STABLE #0: Tue Dec  1 
> > 19:12:37 ICT 2009     r...@bsdhost.localdomain:/usr/obj/usr/src/sys/GENERIC 
> >  i386
> 
> So your system is approx. 4 months old, despite you cvsup-ping?
I don't know what do you mean.
Normally, FBSD issues new STABLE RELEASE once a year (approx).
Whenever new release or new branch is available,
I shall do either wget iso images, or cvsup/csup and buildworld.
The time between RELEASEs, there are patches.
But FBSD teams stated that those patches are not well tested comparing to 
RELEASE.
So I do not update the system until new STABLE RELEASE is available again.

> That's understandable. I boot FreeBSD/amd64 almost exclusively too. Only
> when I absolutely need Flash (and I very seldom do), I fire up VirtualBox on
> FreeBSD with a little OpenSolaris installation. Since this OpenSolaris
> guest lives in a single VirtualBox disk image, it doesn't clutter up my
> FreeBSD system, contrary to the whole Linux compat shims and RPMs
> needed to run the linux flash plugin.
I did not install VirtualBox like VM Ware. I only use dual boot FBSD and 
Windows.
I think many times to install VM Ware. But I am too lazy to do it. ;-p

1. In my opinion UFS2 is much more superior than NTFS.
   I'm not quite sure if UFS2 can reside in NTFS very well.
   (in case Windows is a host OS, and FBSD is a guest OS.)
2. My friend also suggests me that host OS can share device drivers to guest OS.
   I'm not sure, anybody can confirm this? if so, we can install FBSD on any 
laptops
   and use shared drivers from host OS (Windows or OS-X).

Normally I only use console. My life with FBSD is not so colorful
(excepted syntax highlighting in vim editor).
I also have KDE installed. But I don't use it as much as console.
Whenever I need flash (not often). I use my other computer (I have 2 computers)
or reboot Windows.

Cheers,
Pongthep
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Flash viewer for FBSD

2010-03-05 Thread Pongthep Kulkrisada
* daniele (gl...@live.com) wrote:
> Dont worry I wanted to try to help for what I can. I installed the 
> plugin this morning and I was curious.
Thank you again for your kind.

> It's strange though. The plugin is there. I dont know if there's a kind 
> of log somewhere to see if it "sees" it.
I also don't know. :-(

> The last option I am thinking of in this respect is this :
> From the opera web browser interface find the menu "tools" and select 
> it then -> preferences -> advanced
> 
> Look at the "content" menu. "Enable plugins" item must be activated and 
> then the "plug-in options" must show at least this path 
> "/usr/local/lib/npapi/symlinks/linux-opera " and also inform that it 
> finds the flash plugin.
> 
> let me know ! But for the moment I can not think of anything more :-/

The followings are all enabled.
animated images
sound in Web pages
JavaScript
Java
plug-ins

JavaScript Options... blank path

Java Options... blank path

Plug-in Options...
Detected plug-ins are blank
Plug-in path are as followings.
/usr/local/share/opera/plugins/
/usr/local/lib/npapi/symlinks/opera/
/usr/local/lib/npapi/symlinks/linux-opera/

Thanks,
Pongthep
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Flash viewer for FBSD

2010-03-05 Thread Pongthep Kulkrisada
* Warren Block (wbl...@wonkity.com) wrote:
> When you upgrade from 7.x to 8.x, it's necessary to rebuild *all* ports.

Thanks for your suggestion, but it does not seem likely.

All operating systems can always distinguish the system and packages.
For instance, gcc is tightly coupled with the system, it will be upgraded 
automatically while upgrading the system.
Some people only use console, they should rebuild all ports relating to their 
work.
They do not have to rebuild KDE or GNOME, for example.

I myself, after upgrading the system, I always rebuild MOST of textual ports 
like
vim, fetchmail, apache, etc and all ports required by them.
For GUI application, I keep updating ONLY web browser because the old version 
is usually prone to vulnerability issues.

If it is not enough, please tell me. :-)

Thanks,
Pongthep
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Flash viewer for FBSD

2010-03-05 Thread Pongthep Kulkrisada
* C. P. Ghost (cpgh...@cordula.ws) wrote:
> If you csup, you update only /usr/src (or /usr/ports). Have you actually
> updated the system and the ports as well?
% uname -a
FreeBSD bsdhost.localdomain 8.0-STABLE FreeBSD 8.0-STABLE #0: Tue Dec  1 
19:12:37 ICT 2009 r...@bsdhost.localdomain:/usr/obj/usr/src/sys/GENERIC  
i386

But port tree is very large. I only update the followings.
ports-base
ports-archivers
ports-audio
ports-devel
ports-dns
ports-editors
ports-emulators
ports-ftp
ports-graphics
ports-lang
ports-mail
ports-misc
ports-net
ports-security
ports-sysutils
ports-www
I reinstall only some ports, which I considerd important.

> It should. But what can we do if Adobe doesn't even acknowledge our
> existence and refuses to provide a FreeBSD version of their Flash
> player?
Sad...

> Sure, Linux has a bigger market share, so they get enough love from
> Adobe... though I understand that Flash support for Linux/x86-64 isn't
> all that good either (?).
They will tend to FreeBSD some day, much better.
IMHO, the best OS is FreeBSD. The best OS with GUI is OS-X.
Both are BSDs.

> As said, if all else breaks, try running OpenSolaris (or a Linux distro)
> as a guest OS inside VirtualBox. This way, you have the best of both
> worlds.
I don't want to. Even now I have 2 OSes installed, I still hate it.
In fact, 90% I boot of FreeBSD (at home).

Thanks,
Pongthep
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Flash viewer for FBSD

2010-03-05 Thread Pongthep Kulkrisada
* daniele (gl...@live.com) wrote:
> hmmm... :-/
> 
> is at least now the web browser opera working ?

[edit]Yes, it is working but without flash. [/edit]

Thanks for your prompt response.
Pongthep
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Flash viewer for FBSD

2010-03-05 Thread Pongthep Kulkrisada
* daniele (gl...@live.com) wrote:
> hmmm... :-/
> 
> is at least now the web browser opera working ?

Yes it is working.

Thanks for your prompt response.
Pongthep
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Flash viewer for FBSD

2010-03-05 Thread Pongthep Kulkrisada
* daniele (gl...@live.com) wrote:
> HI !
>
> I tested the process of installing firefox/opera and flash plugin.
> Everything run on my system FreeBSD 8, even though I did not stress
> browser & plugin.
>
> Here's all the step that I took to make the flash plugin work for
> firefox and opera (basically I followed the handbook).
>
> --- Installed /usr/ports/emulators/linux_base-f10
> --- kldload linux
> --- mount linprocfs
> --- installed /usr/ports/www/linux-f10-flashplugin10/
> (--- installed /usr/ports/www/nspluginwrapper)
> (--- ln -s /usr/local/lib/npapi/linux-f10-flashplugin/libflashplayer.so
> /usr/local/lib/browser_plugins/ )
> (--- as normal user I executed nspluginwrapper ... etc)
> --- installed ___NATIVE FREEBSD version___ of Opera [/usr/ports/www/opera]
> --- installed /usr/ports/www/opera-linuxplugins/.
Still does NOT work!

I also tried deinstalling all stuffs, which were installed in the previous 
sessions.
And then I tried installing them again as followings (excerpted from handbook).

emulator/linux_base-f10
www/linux-f10-flashplugin10
www/nspluginwrapper
# ln -s /usr/local/lib/npapi/linux-f10-flashplugin/libflashplayer.so 
/usr/local/lib/browser_plugins/
% nspluginwrapper -v -a -i (normal user)
# mount -t linprocfs linproc /usr/compat/linux/proc
www/opera (native FBSD)
www/opera-linuxplugins

Again, it still does NOT work!
(Note that only missing from the previous session is ``kldload linux'',
which was loaded at boot time.)

Or the problem is that I cvsup(ed) from 7.1 to 7.2 and then csup(ed) to 8.0.
Some libraries are probably not updated???
But ``make install'' success, so libraries should not be problems.
I don't know.

FBSD should make it simpler than this.
Some Linux distros, flash plug-ins are installed in default configuration.
But I shall not go back to Linux, anyway. :-)

Actually, I only want to study Unix console, C language and some 
administrations.
In GUI world, I only want to point and click.

Thanks,
Pongthep
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Flash viewer for FBSD

2010-03-05 Thread Pongthep Kulkrisada
* Polytropon (free...@edvax.de) wrote:
> Do you have compat7x installed?
No I don't.

> If you already updated to OS 8.0,
> you should update your ports tree, too, and
> use the current ports.
I always csup the SELECTED port tree but not all.

> Just installing isn't enough, there's some configuration work
> to be done.
I don't know kinda GUI, so I don't know how to configure it.
Please point me to some tutorial.

> By the way, you may be interested in checking how gnash
> (a GNU based "Flash" implementation) or swfdec may fit
> your needs.
I shall check.

> Sure. Maybe the handbook can help here:
>
>   http://www.freebsd.org/doc/handbook/desktop-browsers.html
>
> See 6.2.3 for detailed information.
Okay, but I don't want to install firefox.
I'm much familiar with opera esp. mouse gesturing.
The handbook says very little about Opera.

* Sabine Baer (bae...@t-online.de) wrote:
> I have installed
> emulators/linux_base-f10,
> www/linux-opera-10.10 and
> linux-f10-flashplugin-10.0r45
> on a 7.2 FreeBSD an can now look at and listen to flash movies on
> youtube and other sites.
This seems very likely.
But I have already done exactly what you described (but on FBSD 8.0).
Still not OK. I can not even start linux-opera. For you diagnostic,
When starting from console, it complains ...
% linux-opera
shm_allow_removed is disable, set OPERA_NUM_XSHM to 0 to disable shared memory.
ERROR: ld.so: object 'libjvm.so' from LD_PRELOAD cannot be preloaded: ignored.
ERROR: ld.so: object 'libawt.so' from LD_PRELOAD cannot be preloaded: ignored.
/usr/local/share/linux-opera/bin/opera: error while loading shared libraries: 
libX11.so.6: cannot open shared object file: No such file or directory
%

* Robert Bonomi (bon...@mail.r-bonomi.com) wrote:
> needless to say, you have to have linux emulation build int (or kdloaded)
> in your kernel.
> 
> *and* the linux emulation package ( name is {mumble}-fc10, for 'Fedora Core 
> 10' )
> installed.
> 
> *then* you can install the other packages.
I have selected linux emulation since I installed it from CD.
And it is still enabled in /etc/rc.conf.

Thanks,
Pongthep
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Flash viewer for FBSD

2010-03-04 Thread Pongthep Kulkrisada
Hi all,

I have been using FBSD since 5.4 until now 8.0.
Mostly, I use it as a server and coding C (as my hobby).
All the time I stay in console without fancy of any GUI.
For GUI applications, I mostly use Windows.

Now I want to use only FBSD for web browsing and don't want to use Windows.
I installed FBSD 7.1 with KDE 3.5 from CD.
Then I csup(ed) and buildworld to FBSD 7.2 and then finally FBSD 8.0
while remaining KDE unchanged.
I use opera-10.10 for web browsing.

The problem is that ``flash viewer'' is not installed.
Shockwave/Adobe/Macromedia flash viewers are not shipped with FBSD CD.
It looks very bad for browsing web without flash viewer.
I tried installing from ports.
- opera-linuxplugins-10.10.
- linux-f10-flashplugin-10.0
- f4l-0.2.1.4 (I guess it stands for ``flash for linux''.)
But they do not fix the problem.
Anyone who can fix this problem please point me out.

Thanks,
Pongthep
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Problem with boot0cfg

2009-03-15 Thread Pongthep Kulkrisada
Hi All,

Last week my harddisk was broken and wiped out the slice of FreeBSD 7.1R.
I decided to bring back my old harddisk with 3 partitions i.e.
Windows ME, Windows 2000 and a free partition.
It has a menu for selecting which Windows to boot and I have tested
booting them.
Then I installed FreeBSD-7.1R (from CD) on the free partition and
selected boot manager while installing.
After completion and reboot the following options presented.

F1DOS
F2DOS
F3FreeBSD

But only F3 (FreeBSD) can boot, both Windows can't boot and just hanged.
The following is diagnostic.

# boot0cfg -v ad0

#   flag start chs   type   end chs   offset size
1   0x00  0:  1: 1   0x0b   1023:  9:63   63  4208967
2   0x00   1023:255:63   0x07   1023: 12:63  4209030 10490445
3   0x80   1023:255:63   0xa5   1023: 15:63 14699475 18983853

version=1.0  drive=0x80  mask=0x7  ticks=182
options=packet,update,nosetdrv
default_selection=F3 (Slice 3)

Any suggestion would be highly appreciated.

Please note that previously I used LILO for boot manager.
Now I want to use only FBSD tool but I know very little about boot0cfg.

Thanks,
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: FreeBSD 7.1R on laptop

2009-03-10 Thread Pongthep Kulkrisada
Hi,

Thanks for your response.

On Tue, Mar 10, 2009 at 1:13 AM,   wrote:
> Some laptops do come with COM ports still.  Usually they are the
> business models.  For example, the Dell Latitude 820's have them.
Actually I don't want to adhere with such thing.
I think laptop with COM port will be extinct very soon due to marketing.
I don't want to find the solution again after says 5 years.
I believe that MANY people here are using FreeBSD on laptops without COM port.
But I don't know how they fix the problem of internal modem built with
the laptop.
The only solution I can think right now is staying in LAN and behind NAT.

Thanks,
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


FreeBSD 7.1R on laptop

2009-03-09 Thread Pongthep Kulkrisada
Hi all,

I am using FBSD 7.1R on PC. But yesterday (8 Mar 09) my hard disk was
physically broken. My machine is very old anyway. So I want to buy a
new laptop (notebook). I have some questions.

1. Previously I use ADSL but now I go back to 56k serial modem. The
problem is new laptops do not provide COM port (/dev/cuad?). I must
use internal modem built with the laptop. I'm not sure whether this
internal modem can be found by FBSD 7.1R or not. If not, how to do?
(Sorry I never used laptop.)

2. Previously, I used LILO boot manager (from Linux) for selecting
FBSD, Linux or WinXP. But nowadays most of the time I use only FBSD
and don't use Linux at all. So I don't want to waste the space
installing linux on my new laptop. But I use XP occassionally. I need
to know whether FBSD boot manager can select and boot XP or not? How
to do it? I didn't find it in the handbook.
Note that I know grub. But I really want to know the way, the system
provide. Because I have a long story of this problem. Once (5 years
ago) I installed FBSD success but without caution. I rebooted then I
could not run the freshly installed system. Because there was no
options for selecting the new system. :-( That time I ended up with
LILO to fix the problem. But this time I just don't want to install
Linux. So I want to use only what, the system provides.

Thanks,
Pongthep
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Problem about ppp -nat

2008-12-01 Thread Pongthep Kulkrisada
>  > # ppp -background isp
>  > Loading /lib/libalias_cuseeme.so
>  > Loading /lib/libalias_ftp.so
>  > Loading /lib/libalias_irc.so
>  > Loading /lib/libalias_nbt.so
>  > Loading /lib/libalias_pptp.so
>  > Loading /lib/libalias_skinny.so
>  > Loading /lib/libalias_smedia.so
> 
> I'm surprised ppp would load these unless -nat was specified somewhere?  
It is just ppp -background isp.

> I spent about 15 years debugging user problems with dialup modems; it 
> can be really difficult without first knowing the modem type and it's 
> internal config - however that doesn't seem to be your problem here.
Modem type... it is just a normal external serial modem.
Internal config... I don't know I lost its manual, sorry.

> That is, on connect it should then procede to authentication.  There's 
> no sign of that.  Whether failing at your end or the other is unclear;
> maybe logging LCP might provide more of a clue, but I'm not sure ..
I also don't know about this.

>  > At boot time ...
>  > Flush all rules.
>  > ipfw: unknown interface name tun0
>  > ipfw: getsockopt(IP_FW_ADD): Invalid argument
> 
> Hmm.  I have rules for natd via ng0, which also doesn't exist at boot, 
> without any such complaints, but that's on a 5.5-STABLE box.
> 
>  > 00100 check-state
>  > ...
>  > 
>  > After presence of tun0 (after dialing) ...
>  > # sh /etc/ipfw.rules
>  > Flush all rules.
>  > ipfw: ipfw_ctl invalid option 56
> 
> What's that about?  You haven't shown the rule that produced that ..
[EMAIL PROTECTED]:~# cat /etc/ipfw.rules
# Define the firewall command (as in /etc/rc.firewall) for easy
# reference. Helps to make it easier to read.
fwcmd="/sbin/ipfw"

# Define our outside interface. With userland-ppp this
# defaults to tun0. Or just define ethernet device.
oif="tun0"

# Force a flushing of the current rules before we reload.
$fwcmd -f flush

# Do NAT before check-state
$fwcmd nat 123 config if $oif log deny_in same_ports unreg_only reset
$fwcmd add nat 123 ip4 from any to any via $oif

# Check the state of all packets.
$fwcmd add check-state

# Allow all internal traffics, it is dangerous but just for testing.
$fwcmd add allow all from any to any via fxp0

# Allow IPv6 tunneling
$fwcmd add allow udp from any 3653 to any 3653 via $oif
$fwcmd add allow tcp from any 3653 to any 3653 via $oif
# The following line is for user-ppp.
$fwcmd add allow ipv6 from any to any via gif0
# The following line is for UDP encapsulation (machine behind NAT).
# $fwcmd add allow ipv6 from any to any via tun1

# Stop spoofing on the outside interface.
$fwcmd add deny ip from any to any in via $oif not verrevpath

# Allow all connections that we initiate, and keep their state.
# but deny established connections that don't have a dynamic rule.
$fwcmd add allow ip from me to any out via $oif keep-state
$fwcmd add deny tcp from any to any established in via $oif

# Allow all local traffic.
$fwcmd add allow all from any to any via lo0
$fwcmd add deny all from any to 127.0.0.0/8
$fwcmd add deny ip from 127.0.0.0/8 to any

# Allow internet users to connect to the port 21, 23 and 80.
# We specifically allow connections to the ftpd, telnetd and a webserver.
$fwcmd add allow tcp from any to me dst-port 21,23,80 in via $oif setup 
keep-state

# Allow ICMP packets: remove type 8 if you don't want your host
# to be pingable.
$fwcmd add allow icmp from any to any via $oif icmptypes 0,3,8,11,12

# Deny and log all the rest.
$fwcmd add deny log ip from any to any

>  > 5. Then insert these commands to /etc/ipfw.rules as the first two rules.
>  >/sbin/ipfw add divert natd all from any to any via tun0
>  >/sbin/ipfw add pass all from any to any
>  >then run the ipfw script to load the new rules.
>  >sh /etc/ipfw.rules
> 
> Which other rules?
Please see above.

>  > But I just can't pass step 3, unless I unload ipdivert.
> 
> And your ppp.conf or ppp command definitely doesn't mention -nat?
Not at all. As said above only ``ppp -background isp''.
/etc/rc.conf and /etc/ppp/ppp.conf do not store anything about -nat.

>  > Please don't suspect my system. It had just been very freshly 
>  > installed from CDs before I tried everything. And without ipdivert 
>  > being loaded into the kernel, I can dial and browse any sites and 
>  > very fast with my /etc/ppp/ppp.conf. Should note a bug?
> 
> Maybe it is.  I'm out of ideas anyway, and noone else has come forward.
I have been using *Unix for 7 years (2 years for linux and 5 years for 
FreeBSD). I haven't found such things. Even with noisy telephone line, I could 
always dial isp. (But link down sometimes, of course it is found everywhere.) I 
think it is a bug.

> Well I'm pretty sure you shouldn't load ipdivert as well as using ipfw 
> nat, but I've been almost 100% wrong so far so perhaps best ignore me :)
I may go on with ppp -nat, but when I have time.
I am always busy...
Lastly, thank you very much for your kind response.

Cheers,
Pongthep
___

Re: Problem about ppp -nat

2008-11-30 Thread Pongthep Kulkrisada
Hi all,

> set log phase chat connect carrier link ipcp ccp ID0 TUN command
I still can't dial using this configuration...

# ppp -background isp
Loading /lib/libalias_cuseeme.so
Loading /lib/libalias_ftp.so
Loading /lib/libalias_irc.so
Loading /lib/libalias_nbt.so
Loading /lib/libalias_pptp.so
Loading /lib/libalias_skinny.so
Loading /lib/libalias_smedia.so
Working in background mode
Using interface: tun0
Warning: carrier: Invalid log value
Warning: link: Invalid log value
Warning: usage: set log [local] 
[+|-]all|async|cbcp|ccp|chat|command|connect|debug|dns|hdlc|id0|ipcp|lcp|lqm|phase|physical|radius|sync|tcp/ip|timer|tun...
Attempting redial
Attempting redial
Attempting redial

I then removed ``carrier'' and ``link''. It always keeps redialing without
hearing dialing tone from the modem. So I removed ``connect'' again. The result 
was still the same.

> Try /dev/cuaa0.  At least in the olden days, cuad0 was configured more
> for dialin rather than dialout.  This may? explain the next two lines:
It keeps redialing without hearing any tone from the modem. So I switched back 
to /dev/cuad0. Then dial; now I hear dialing tone from the modem but warning 
message of ``Child failed (errdead)'' occured then line dropped. And can not 
connect. I tried it many times. Note that /dev/cuad0 appeared in my 
/usr/share/examples/ppp/ppp.conf.sample, not /dev/cuaa0. If I remember 
correctly I changed from cuaa0 to cuad0 when I upgraded from FBSD5.4R to 
FBSD6.2R.
[...]
Working in background mode
Using interface: tun0
Child failed (errdead)

>>  set ctsrts off   # enables software flow control
>>  set accmap 000a  # comments out these 2 lines for hardware flow control
> Not sure why you don't want to use hardware flow control?  Is this with
> a regular external modem?  Anyway, I've always used ctsrts (with cuaa0).
5 year ago, I downloaded this ppp.conf from some web site. But anyway, I did 
follow your suggestion i.e. hardware flow control. It still doesn't work as 
``Child failed''. Actually I don't know so much in this area (flow control). I 
only code C on *Unix. I rarely do this kind of things e.g. system setup or 
configuration. And yes, it is a regular external modem.

>>  add! default HISADDR   # Add a (sticky) default route
>>  [...]
>>  add 0 0 HISADDR
> You probably don't want both those add statements.  Try taking out the
> first one, and replacing the last one with the add! default HISADDR.
I changed it before dialing.

> Unsure if you need an 'enable pap' as well, maybe default.  Can't hurt.
I added it before dialing. But all failed. I think it is probably caused by
ipdivert.

> Anyway, some extra logging should show you when and how it fails, if it
> still does ..
Nov 30 17:00:00 bsdhost newsyslog[960]: logfile turned over due to size>100K
Nov 30 17:00:16 bsdhost ppp[977]: Phase: Using interface: tun0
Nov 30 17:00:16 bsdhost ppp[977]: Phase: deflink: Created in closed state
Nov 30 17:00:16 bsdhost ppp[977]: tun0: Command: default: ident user-ppp 
VERSION (built COMPILATIONDATE)
Nov 30 17:00:16 bsdhost ppp[977]: tun0: Command: default: set device /dev/cuad0
Nov 30 17:00:16 bsdhost ppp[977]: tun0: Command: default: set speed 115200
Nov 30 17:00:16 bsdhost ppp[977]: tun0: Command: default: disable pred1
Nov 30 17:00:16 bsdhost ppp[977]: tun0: Command: default: deny pred1
Nov 30 17:00:16 bsdhost ppp[977]: tun0: Command: default: disable lqr
Nov 30 17:00:16 bsdhost ppp[977]: tun0: Command: default: deny lqr
Nov 30 17:00:16 bsdhost ppp[977]: tun0: Command: default: set dial ABORT BUSY 
ABORT NO\sCARRIER TIMEOUT 5   "" AT OK-AT-OK ATE1Q0 OK \dATDT\T 
TIMEOUT 180 CONNECT
Nov 30 17:00:16 bsdhost ppp[977]: tun0: Command: default: set redial 3 20
Nov 30 17:00:16 bsdhost ppp[977]: tun0: Command: default: enable dns
Nov 30 17:00:16 bsdhost ppp[977]: tun0: ID0: 0x28389e78 = 
fopen("/etc/ppp/ppp.conf", "r")
Nov 30 17:00:16 bsdhost ppp[977]: tun0: Command: ego: set phone 0123456789
Nov 30 17:00:16 bsdhost ppp[977]: tun0: Command: ego: set authname
[EMAIL PROTECTED]
Nov 30 17:00:16 bsdhost ppp[977]: tun0: Command: ego: set authkey **
Nov 30 17:00:16 bsdhost ppp[977]: tun0: Command: ego: set timeout 0
Nov 30 17:00:16 bsdhost ppp[977]: tun0: Command: ego: set openmode active
Nov 30 17:00:16 bsdhost ppp[977]: tun0: Command: ego: accept pap
Nov 30 17:00:16 bsdhost ppp[977]: tun0: Command: ego: enable pap
Nov 30 17:00:16 bsdhost ppp[977]: tun0: Command: ego: set ifaddr 10.0.0.1/0 
10.0.0.2/0 255.255.255.0 0.0.0.0
Nov 30 17:00:16 bsdhost ppp[977]: tun0: Command: ego: add! default HISADDR
Nov 30 17:00:16 bsdhost ppp[977]: tun0: ID0: 10 = socket(17, 3, 0)
Nov 30 17:00:16 bsdhost ppp[977]: tun0: ID0: -1 = write(10, data, 140)
Nov 30 17:00:16 bsdhost ppp[978]: tun0: ID0: 0x28389e78 = 
fopen("/var/run/tun0.pid", "w")
Nov 30 17:00:16 bsdhost ppp[978]: tun0: Phase: PPP Started (background mode).
Nov 30 17:00:16 bsdhost ppp[978]: tun0: Phase: bundle: Establish
Nov 30 17:00:16 bsdhost ppp[978]: tun0: Phase: def

Re: Problem about ppp -nat

2008-11-28 Thread Pongthep Kulkrisada
Hi all,

> I didn't touch /etc/ppp/ppp.conf, which has been working for 5 years
> since FBSD5.0R. Even if I go back to GENERIC kernel. I could not dial out
> to ISP in any ways. I didn't know what I do wrong even if
> I did read many docs.
I tried exactly what being described in the handbook. But all failed, I still 
can't dial ISP. I think that posting /etc/ppp/ppp.conf may be useful for your 
diagnostic. Note that this file has been used for long time and never changed. 
But I've just reminded that ppp is changed from version to version. My ppp.conf 
may not suit the current version. I don't know.

# cat /etc/ppp/ppp.conf

default:
 set log Phase Chat LCP IPCP CCP tun command
 ident user-ppp VERSION (built COMPILATIONDATE)

 set device /dev/cuad0
 set ctsrts off # enables software flow control
 set accmap 000a# comments out these 2 lines for hardware flow control

 set speed 115200
 disable pred1
 deny pred1
 disable lqr
 deny lqr
 set dial "ABORT BUSY ABORT NO\\sCARRIER TIMEOUT 5 \
\"\" AT OK-AT-OK ATE1Q0 OK \\dATDT\\T TIMEOUT 180 CONNECT"
 set redial 3 20
 enable dns # request DNS info (for resolv.conf)

isp:
 set phone 0123456789
 set authname [EMAIL PROTECTED]
 set authkey mypassword
 set timeout 0
 add! default HISADDR   # Add a (sticky) default route
 set openmode active
 accept pap
 set ifaddr 10.0.0.1/0 10.0.0.2/0 255.255.255.0 0.0.0.0
 add 0 0 HISADDR

Thank you.
Pongthep
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Problem about ppp -nat

2008-11-25 Thread Pongthep Kulkrisada
Hi all,

Firstly many thanks to all your help! And sorry for late reply...

>  > With these settings, My FBSD host can NOT even dial out to ISP. :-(
>  > Please anybody tell me, what I do wrong here.
> 
>  > At this time I must go back to the original setting in order to dial ISP.
>  > And lastly I'm sorry for long questions.
I didn't touch /etc/ppp/ppp.conf, which has been working for 5 years since 
FBSD5.0R. Even if I go back to GENERIC kernel. I could not dial out to ISP in 
any ways. I didn't know what I do wrong even if I did read many docs. Yesterday 
I decided to re-install FBSD7.0R from CDs again. That causes late reply, I'm 
sorry. :-(

I now have gateway_enable="YES" and firewall_enable="YES" in my /etc/rc.conf.
I can then dial ISP again. Then the following steps were taken.

1. I can ping any sites and very fast.
2. # kldload ipfw (as I don't want to compile kernel anymore.)
3. # kldload ipdivert
4. I also have ``natd8668/divert'' in my /etc/services.
5. # natd -interface tun0
6. # /sbin/ipfw add 101 divert natd all from any to any via tun0
7. # /sbin/ipfw add 102 pass all from any to any
(Note that my first ipfw rule is 100 check-state. So steps 6 and 7 should be 
considered as the first two filtering rules.)

I do this way because I know from reading document that ppp must be run before 
natd. I always want to dial ppp by myself so I can't put natd in /etc/rc.conf. 
And doing it interactively is very easy to detect when something goes wrong and 
step 1 can proof my good connection.
After step 7 I switched to terminal, which keeping ping. I found that ping 
stalled. I tried re-connect many times, now I know that step 3 causes the 
problem. I have also tried putting ipfw_load="YES" and ipdivert_load="YES" in 
/boot/loader.conf. The problem persists. I'm quite sure that the module 
ipdivert has adverse effect to the connection through modem. Should I say a 
bug?!!! Without ipdivert I can not play NAT (I don't want to learn ``ipfw nat'' 
and ``ppp -nat'' for now). This was also the major problem when I recompiled 
kernel with options IPDIVERT few days ago. That caused me unable to connect 
ISP. One thing I should note here, always run ppp before natd. Last time when I 
was on GENERIC kernel, I couldn't connect ISP because my /etc/rc.conf contained 
natd. So natd ran before ppp, which was run manually. That was wrong.
Anyone has a clue please point me to the right direction.
I would probably go back to external router gateway ``out of the box''.
For now I give up and need to rest.

Thank you.
Pongthep
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Problem about ppp -nat

2008-11-22 Thread Pongthep Kulkrisada
Hi All,

Firstly, I'm sorry for late reply. For simplicity to your responses, I shall
ask question by question...

* Manolis Kiagias ([EMAIL PROTECTED]) wrote:
>
> There are at least two ways that I know of to achieve this. One uses the
> ipfw firewall, the other the pf firewall.
> For the ipfw solution, look at the FreeBSD Handbook:
>
>
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-natd.html
1. I heard that ppp itself has capability of NAT. It can work with the
command ppp -nat and without running natd. Please tell me whether it is
right or wrong. ipfw is the same. If natd is not used, I can't add the rule
...

add divert natd ip from any to any via tun0

to /etc/ipfw.rules. I'm confused.

2. And if natd is still required, what -nat argument (ppp -nat) is for?

> This worked fine for me, although I prefer to use pf. Here is how I
> setup pf (Adjust for your interfaces as necessary)
>
> My Internet interface is rl0, setup in rc.conf as:
>
> ifconfig_rl0="inet 192.168.0.100 netmask 255.255.255.0"
>
> My local interface is rl1, setup in rc.conf as:
>
> ifconfig_rl1="inet 192.168.1.100 netmask 255.255.255.0"
3. I haven't mentioned that I can't use this configuration. I have 2
interfaces i.e. public and private LAN. But I have only one NIC card for
private LAN. I don't have NIC card for public. I'm using 56k modem to
connect the outside world. I think I can't add

ifconfig_tun0="inet 192.168.0.100 netmask 0xff00"

to /etc/rc.conf. If I'm wrong, please tell me.
I did much googling. All sites always refer 2 NIC cards being used like your
example. I do have only one NIC card + 56k serial modem (/dev/cuad0).

> (I also have a defaultrouter setting which probably does not apply to you)
>
> I have nameserver entries in /etc/resolv.conf (or setup your own DNS
> server if you wish)
4. I also have nameserver entries. I tried setting DNS server on my WinXP
host to both gateway (FBSD host) and DNS servers of ISP. Both don't work.

> Use this settings in rc.conf for pf:
>
> pf_enable="YES"
> pflog_logfile="/var/log/pflog"
> pflog_flags=""
> pf_rules="/etc/pf.conf"
> pf_flags=""
> gateway_enable="YES"
5. I think I have equivalent setting of ipfw in /etc/rc.conf but don't work.
gateway_enable="YES"
firewall_enable="YES"
firewall_type="OPEN"
firewall_quite="YES"
firewall_script="/etc/ipfw.rules"
firewall_logging="YES"

> Run:
> # sysctl net.inet.ip.forwarding=1
> # /etc/rc.d/routing restart
>
> Add net.inet.ip.forwarding=1 to /etc/sysctl.conf so it persists reboots
6. I recompiled my kernel.
options IPFIREWALL
options IPFIREWALL_FORWARD
options IPFIREWALL_DEFAULT_TO_ACCEPT
options IPFIREWALL_VERBOSE
options IPFIREWALL_VERBOSE_LIMIT=120
options IPDIVERT
I think it should be equivalent to sysctl setting.

> Add the following rule to /etc/pf.conf
>
> nat pass on rl0 from rl1:network to any -> rl0
>
> AFAIR, if rl0 has a dynamic address, you will have to write it with
> parentheses, like:
>
> nat pass on rl0 from rl1:network to any -> (rl0)
> (Note that in /etc/pf.conf translation rules like the above, are placed
> above filtering rules like pass or block etc)
> You may have to adjust /etc/pf.conf filtering rules, assuming you have
any.
>
> Restart some services
>
> # /etc/rc.d/netif restart
> # /etc/rc.d/routing restart
> # /etc/rc.d/pf restart
>
> or simply reboot, and you should be set.
7. I don't know about PF.

* Fbsd1 ([EMAIL PROTECTED]) wrote:
> You need to run dhcp so you can assign ip address on the LAN so the down
> stream xp box can gain access to the public internet through your
> gateway freebsd box.  There is a detailed step by step instructions in
> the install guide at www.a1poweruser.com
8. I read doc from the mentioned site. The doc does not mention anything
about sharing ppp dial-up to the other host. And I'm sorry dhcp is not the
point of my concern now. I only want to share internet access whether IP is
static or dynamic. BTW the doc is very good anyway. I shall keep it. :-)

* Polytropon ([EMAIL PROTECTED]) wrote:
> First of all, I made my kernel capable; significant parts:
> # Firewall, NAT
> ...blah
9. I compiled the kernel following your advice excepted NETGRAPH. I think
PPPoE is not the point of concern

> Configuration in /etc/rc.conf goes this way:
>ifconfig_xl0="inet 192.168.0.1 netmask 0xff00"
>ifconfig_rl0="inet 192.168.1.1 netmask 0xff00 media 10baseT/UTP"
10. As said earlier, my interface connecting to outside are 56k serial modem
(/dev/cuad0). I think I can't set /dev/cuad0 (or even tun0) in this way.

11. CONCLUSION: I did read much document. More I read, more I get confused.
I tried many possible things but still don't work. My RECENT configurations
are as followings.

/etc/rc.conf
gateway_enable="YES"
firewall_enable="YES"
firewall_type="OPEN"
firewall_quite="YES"
natd_enable="YES"
natd_interface="tun0"
natd_flags="-s -u -m"

kernel options
options IPFIREWALL
options IPFIREWALL_FORWARD
options IPFIREWALL_DEFAULT_TO_ACCEPT
options IPFIREWALL_VERBOSE
opti

Problem about ppp -nat

2008-11-20 Thread Pongthep Kulkrisada
Hi All,

I have just subscribed to freebsd-questions and I have a question about ppp 
-nat.

I have 2 computers. One is running FreeBSD-7.0R, the other is running WinXP. 
The host running FBSD7.0R has been connecting to the outside world using 
user-ppp without any problem for very long. Now I want to share internet access 
to the other host behind NAT through this FBSD host.
My FBSD machine has 2 interfaces i.e.
tun0 (connecting to ISP) with dynamic IP (of course)
fxp0 (for internal LAN) with static IP of 192.168.1.10
My WinXP machine has 1 interface (internal LAN) with static IP of 192.168.1.11

Previously I have a router acting as a gateway for all machines behind NAT. But 
now I want FBSD machine to work as a gateway. I have never done this before. I 
tried some googling with reading ppp(8) and ipfw(8). And I tried masquerading 
but it didn't work. I have plenty configuration files. But the relevant 
configurations are listed here.

/etc/rc.conf
# enable IP forwarding
gateway_enable="YES"
# previously I ran web-server, just disable it or comment it out, not sure why!
#apache_enable="YES"

On the host running WinXP, I set its gateway and DNS server to the IP of ppp 
host i.e. 192.168.1.10.

I then inserted the following line as the first rule in /etc/ipfw.rules.
/sbin/ipfw add allow all from any to any via fxp0
(I know this rule is dangerous, but just for testing.)

I then issue the ppp command.
[EMAIL PROTECTED]:~# ppp -background -nat myisp

FBSD host (running ppp) can access anywhere but WinXP host can't. I learned 
from some site explaining that ppp itself has the capability of IP 
masquerading. And it does not require natd(8). So I don't mention about natd 
here.
Anyone have a clue or who have done the correct configurations, please point me 
out.

Thank you in advance.
Pongthep
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"