Re: Small webserver recommendations

2010-06-09 Thread Nathan Peet Maier
There is a webserver bundled with a framework called web2py.
www.web2py.org.  You can run it as a user from BSD or Linux.
-Nate Maier
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Script to generate names

2006-02-03 Thread Will Maier
On Fri, Feb 03, 2006 at 11:08:04AM +0100, Kristian Vaaf wrote:
 I'm looking for pointers on how to make a simple shell script that will
 generate new names based on words (one word per line) from two different
 files, and output these to a third file.

How bout this? Works on OpenBSD's sh; I assume it works on Free's sh
as well. Might take a while to run, though...

#!/bin/sh

notify () {
if [ ${VERBOSE} ]; then
echo === $*
fi
}

VERBOSE=1
LIST1=/path/to/list1
LIST2=/path/to/list2
LIST3=/path/to/list3
NEWWORDCT=0

if [ ! -f ${LIST3} ]; then
touch ${LIST3}
fi

for WORD1 in $( ${LIST1}); do
for WORD2 in $( ${LIST2}); do
echo ${WORD1}${WORD2}  ${LIST3}
echo ${WORD2}${WORD1}  ${LIST3}
NEWWORDCT=$((NEWWORDCT + 2))
done
done

sort ${LIST3} | uniq  ${LIST3}-sorted

notify Created ${NEWWORDCT} new words in file ${LIST3}; a sorted version
notify can be found at ${LIST3}-sorted.
-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: SSH with Public Key Authentication (Was: Re: Attention: Giorgos Keramidas (Was: CVS Import Permissions))

2006-02-01 Thread Will Maier
On Thu, Feb 02, 2006 at 11:27:54AM +1100, david bryce wrote:
 What about on the freebsd server side? Are there any logfiles I can
 look at on the server? Thanks!

I often find it more useful to temporarily run a second sshd on an
alternate port, with stderr directed to the console and sshd in
no-detach and debug mode. Try the following:

$ sshd -d -d -d -e -D -p 222

Then watch the output as you try to connect on that port

$ sshd myhost -p 222

If you'd like, you can redirect the output to a file, too, but I
find that screen(1)'s scrollback usually is enough for me.

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: screen alternative

2006-01-26 Thread Will Maier
On Thu, Jan 26, 2006 at 09:25:51PM +0100, Grzegorz Danecki wrote:
 I'm running 5.4 Stable and I'm looking for something, that can let
 me detach my session leaving my software running. First thought -
 screen, but hey, there is no screen package in ports collection
 :( Google says something that it was removed due to high cpu
 utilization few releases ago. Is this true?

FreeBSD does not distribute a compiled binary package for screen,
but you are welcome to compile your own. If you have the ports
system installed (as you probably do), just do the following:

cd /usr/ports/misc/screen
sudo make install

That should install screen. If you have questions about the ports
system, read the manpage or the FreeBSD handbook.

 Are there any alternatives? Because as I can remember screen was
 frequently used and highly appreciated application.

screen works fine on FreeBSD -- the package building process just
doesn't make it possible for FreeBSD to provide a pre-compiled
version. As I said, you're welcome to compile your own. It's the
first thing I do when I set up a new system.

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: I have been hacked (WAS: Have I been hacked or is nmap wrong?)

2006-01-18 Thread Will Maier
On Wed, Jan 18, 2006 at 03:56:32PM +0200, Kilian Hagemann wrote:
 I have never even heard of frox before, but after some googling
 it turns out that it's a GPL'ed transparent ftp proxy...

Where's it pointing?

 Also, I said smtp ports were open on the machines in question, I
 just verified that I can send emails via BOTH these systems even
 though no sendmail/exim/whatever was ever installed by me and
 sendmail_enable=None on both.

What do you see when you connect to the SMTP ports? Are they really
mail servers, or just rogue services running on 25?

 My servers have been compromised, fantastic. And that with an
 initial firewall'ed setup that left NO open ports (I verified that
 a while ago with nmap). So much for my impression that FreeBSD was
 secure.

My condolences; what you describe, though, doesn't really suggest
that /FreeBSD/ is insecure. In the vast majority of these situations
(and yes, I have found myself in your shoes before), the operator
(you or I) is to blame.

 How could this have happened? ipfw buffer overflow? Some other
 unknown vulnerability?

Ockham's razor: the simplest is also the most likely solution.
You're running Samba; is there any chance that that service or your
configuration of it could have opened a hole? How many people have
user accounts on that box? Do you allow
ChallengeResponseAuthentication on SSH? Key only?

 I really wanna find out how they got in (syslog offers no clues
 btw, I've been rootkitted after all :-( 

You'll need to do a more sophisticated forensic analysis, then, to
figure out what happened. Some basic questions: were you running a
file integrity monitor? What did it say? Do you have logs that were
remotely backed up (and, therefore, likely still accurate)? What do
they say? Do you have any network monitoring that might have
recorded an intrusion? What services /should/ be running on the box
(I don't think this was ever actually listed -- it would be useful
to know)? Do you have dumps of the traffic leaving or entering the
box?

Again, this is a tough and very unfortunate position to be in -- I
sympathize. It may very well not be worth the time it takes to fully
investigate the source of the compromise. Real forensic analysis is
outside most of our job descriptions; I know that my skillset
doesn't cover it well enough. An inept investigation can be much
worse than no investigation at all: consider (if you can afford it)
bringing in someone who can do a quick, good job of it.

 Any suggestions other than format/reinstall/tripwire?

I can't think of any better ideas. Certainly, I'd add updating the
system to your list. Even if the Security Alerts don't seem to
effect your set up, I find it's good practice to apply them in a
reasonable amount of time. At the very least, it keeps me in touch
with my boxes and lets me develop a routine in case an alert does
effect me.

Good luck!

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: I have been hacked (WAS: Have I been hacked or is nmap wrong?)

2006-01-18 Thread Will Maier
On Wed, Jan 18, 2006 at 05:38:50PM +0200, Kilian Hagemann wrote:
 On Wednesday 18 January 2006 16:25, Will Maier pondered:
  On Wed, Jan 18, 2006 at 03:56:32PM +0200, Kilian Hagemann wrote:
   I have never even heard of frox before, but after some
   googling it turns out that it's a GPL'ed transparent ftp
   proxy...
 
  Where's it pointing?
 
 No idea, I only went as far as trying to login anonymously using a
 console based ftp client. How could I find out?

Connect to it and watch the packets in tcpdump(8) or similar. this
may not give you the full answer, but it'll help. What banners do
the FTP servers have? Is there a domain listed? Who owns that
domain?

  What do you see when you connect to the SMTP ports? Are they
  really mail servers, or just rogue services running on 25?
 
 They are really mail servers, at least smtp for outgoing mails
 (don't know about incoming though). I used kmail to configure them
 as standard outgoing smtp mail servers and successfully sent
 myself two emails, one via each server. Surely a default, out of
 the box, unconfigured and sendmail_enable=None sendmail process
 wouldn't allow for something like that, never mind the fact that
 the firewall is supposed to block ANY access from the outside
 (output of ipfw show is attached)

So these are running, functioning sendmail servers that /you/ didn't
configure (on purpose)? What do you see when you 'talk' to them via
nc(1)? If you're firewall was dropping incoming packets destined to
those ports, you wouldn't have been able to send a mail through
them (or connect on 25 with nc(1))...

 Well, I didn't worry about samba because it's firewalled to the
 outside(unless some Windows virus on one of the LAN machines
 exploited a samba hole, is that likely?). 

I don't know Samba that well, but it's possible it could be
exploited (check the web for recent advisories pertaining to it).
How much do you trust the users on the 'green' side? Could one of
their boxes have been compromised and then used as a platform to
attack your border servers? This sort of (nightmare) scenario is why
people have been whining about 'defense in depth' for the last few
years; it turns out that your crunchy, impermeable outside actually
can be as squishy as your inside.

 There is only one single normal user account with an uncommon name
 and an impossible password(16 characters randomly generated from
 ASCII charset).  ChallengeResponseAuthentication is commented out
 in sshd which I guess means it uses the standard PAM
 authentication. It also allows password/interactive authentication
 in addition to public key, I always use the former. I do admit
 that I have set PermitRootLogin yes but my root password is 9
 characters with numbers and non-alphanumeric characters, so hard
 to brute-force.

Having a kickass, long username with an 'impossible' 16 char
password and an open root account with a password 9 chars long is
like putting a heavy steel door on a cardboard box. Allowing
PermitRootLogin is a mistake in almost every scenario; disable it in
the next generation of your servers (if possible). It's a 'weakest
link' sort of situation, I guess.

 In any case, it's important to note that the only access from the
 outside via ssh/rsync is firewalled in such a way that it only
 allows access from a single IP address which my institution
 assigns me statically via DHCP (see attachment). 

That's good.

 They would have had to a) find out what this one and only trusted
 IP address is b) spoof it successfully c) attack ssh brute force?

Assuming the firewall works, they would certainly have to complete
steps a, b and c; unless, that is, they compromised /your/ box, too.
Unlikely, though, I suspect.

 Well, I thought my setup was secure enough for a very basic
 router/gateway/firewall for a couple of Windows machines using a
 sucky internet connection which is not worth stealing. 

Unfortunately, the asset you should be protecting might not be your
bandwidth or data or whatever it is you've been assuming. When you
set up a firewall, you're protecting something -- in your case, what
is it? Have you defined that for yourself? It's hard to do a good
job defending something you haven't or can't define. While it
probably sounds pedantic or silly, take a moment to ask yourself
what it is you want to protect. If there are several things, rank
them by priority. _Then_ go about designing a defense. Securing your
stuff may not be a terribly high priority at all; if so, accept the
fact that something bad will happen once in a while. Your security
plan might just be deal with it when the shit hits the fan. No
problem. That can make sense. Having clarified that for yourself,
though, makes things easier.

 So I didn't go through the effort of using a file integrity
 monitor, remote logging, traffic dumps or network monitors (jeez,
 sysadmins lives are really difficult these days :-( ) 

Like I said above, those sorts of defenses might be overkill for
you. That's fine

Re: Shellscript syntax question

2006-01-09 Thread Will Maier
On Mon, Jan 09, 2006 at 09:20:42PM +0100, Frank Staals wrote:
 Anyway: thanks for the solusion, but what would be the expressions for 
  less or equal and greater or equal ?

man 1 test

the '[' and ']' that surround the if-statement are shorthand for the
test(1) utility. The man page has a list of the different primaries
available.

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Device needed to manage several FreeBSD servers

2005-12-17 Thread Will Maier
On Sat, Dec 17, 2005 at 03:11:24PM -0800, patrick wrote:
 I have a bunch of FreeBSD servers to manage, and I'm wanting to
 find a device that lets you SSH/telnet in, and access the servers
 connected to it via serial cables. I know such a device exists,
 but it was a long time ago since I last saw one, and I'm not
 really sure what one of these would be called. Has anyone had any
 experience with such a device?

Other responses in the thread are correct -- you're looking for a
console server (or a serial concentrator). There's an article
shipped with FreeBSD that describes just this type of thing; it's
also available online:


http://www.freebsd.org/doc/en_US.ISO8859-1/articles/console-server/index.html

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: swap - 2 HDs

2005-12-16 Thread Will Maier
On Fri, Dec 16, 2005 at 09:33:57AM -0300, Aguiar Magalhaes wrote:
 I have a machine with: dual processor AMD 64 bits, 4
 GB RAM and 2 HDs SCSI 73 GB.
 
 How can I configure the swap area ?

If you haven't completed the install, make the swap during the
install when you configure the disks. If you've already finished the
install, the Handbook has a section[0] describing methods for adding
swap.

 Is It recommended to configure  swap area in both HDs ?? 

I don't see the point -- swap is where pages that don't fit in your
real memory go. It's less optimal than real memory in terms of
latency, but I don't see how two disks would make swap performance
much better.

 How large ??

I'd suggest 1-4G of swap depending on whether you need to read full
dumps of the kernel/memory for debugging. If you don't, you'll
probably be fine with a lesser amount of swap, unless you'll be
running applications which will overload the memory.

[0] 
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/adding-swap-space.html

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to configue ssmtp for authentication?

2005-12-12 Thread Will Maier
On Mon, Dec 12, 2005 at 02:22:45PM -0800, Jin Guojun [VFFS] wrote:
 I could not find information on how to configure SSMTP to pass
 password to the ISP mail server.  Can someone tell me if SSMTP is
 possible to accomplish such task? or I need to use some other mail
 programs.

I'm not sure if ssmtp can do authenticated SMTP relay, but msmtp
can. It's also in the ports tree; I think you'll find its man page
more useful.

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: simple shell script

2005-12-08 Thread Will Maier
On Wed, Dec 07, 2005 at 08:16:31PM -0900, Beecher Rintoul wrote:
 Thanks to you both, I missed the background option. Actually it
 just needs to run in the background to log some hits on a free
 webserver that I use for testing. I forget and they will cancel my
 account if there's no traffic for a month. The timeout also looks
 interesting and I'll look into it.

You might want to consider using fetch, wget or curl for this
application, not lynx. A simple cron job to request and download
your webpage (if your webpage was google.com ; )) could be as simple
as:

10  2   *   *   *   /path/to/ftp -o /dev/null http://www.google.com/index.html 
 /dev/null

Or, using curl:
10  2   *   *   *   /path/to/curl -s http://www.google.com/index.html  
/dev/null


-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: PC-BSD and Request Tracker

2005-12-07 Thread Will Maier
On Wed, Dec 07, 2005 at 12:38:02PM -0600, Rory Schmitz wrote:
 I'm fairy new to Linux and I'm in the process of installing
 Request Tracker (RT) for trouble tickets with staff members.  The
 RT website stated I needed to be running PERL 5.8.3 or higher on
 my BSD box.  With that,a couple questions:

After reading the message subject and this paragraph, I'm not sure
what you're running, exactly. You mention Linux -- FreeBSD is not
Linux. You also mention PC-BSD. FreeBSD is also not PC-BSD (although
PC-BSD is based on FreeBSD). All the different *nixes can be
confusing, but clarifying your setup will make it easier for us to
help.

 1)  Can RT be ran from PC-BSD if you are familiar with RT?  

This seems to be an RT or PC-BSD -specfic question; this list is
not dedicated to either piece of software. You'll have better luck
asking in PC-BSD's support channels or on the RT-users' mailing
list, [EMAIL PROTECTED]

Since RT is mostly Perl-dependent, I imagine you could get it
running (albeit with a little fuss), although PC-BSD isn't
explicitly supported by BestPractical. I'd recommend choosing an OS
officially supported by BP (like FreeBSD, various Linuxes, or
Solaris) -- many of these OSs have packages or ports of RT
available, as well, although compiling it by hand is often a better
choice for production servers.

 2) What PERL version is included in this distro?

I'm sure they have Perl 5.8.3+, although I can't find anything on
their site to corroborate that. Again, you'll have better luck
asking PC-BSD.

 Thanks,

Good luck!

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Can't run scripts no more: permission denied

2005-12-01 Thread Will Maier
On Thu, Dec 01, 2005 at 07:48:50PM +0100, Blue Raccoon wrote:
 On Thu, 1 Dec 2005 20:15:12 +0200
 But the 'sylpheed' script still would not run: command not
 found. There is only one command in the file (which works fine on
 the command line) and a comment: #!/bin/bash I copied the script
 from the web. But apparently the comment is not a comment. When I
 remove it the script works (not from firefox, but that's a
 different problem).

That's not a (regular) comment, it's called 'sh-bang'. It tells the
shell which command should be used to interpret the following code.
For example, perl scripts usually start with

#!/usr/bin/perl -w

Which tells whatever shell you're running (like bash) to start perl
as the interpreter for that script.

In your case, you were trying to tell the shell to use bash as the
interpreter. This is fine, as long as you have bash installed (it's
not part of the FreeBSD base system). Moreover, you need to specify
the correct path to the bash executable in your sh-bang. On FreeBSD,
bash is usually installed via a port or package to /usr/local/bin. A
better way of fixing your script (instead of just removing the
sh-bang altogether) would be to edit it to read as follows:

#!/bin/sh

That'll point to FreeBSD's sh implementation, which is the standard
Unix shell. Some Linuxes will use bash as their sh, but most BSDs
use a more standard sh. Writing shell scripts for sh (and not bash,
ksh or whatever) is a good idea as it will make your scripts easier
to port to other systems. bash is similar to sh, so you might not
need to change anything (unless you're using lots of bashisms or
arrays or whatnot).

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: pf blocking nfs

2005-11-30 Thread Will Maier
On Tue, Nov 29, 2005 at 09:56:59PM -0600, Aaron P. Martinez wrote:
  Aaron P. Martinez wrote:
[...]
 I realize i could just accept all udp packets from the NFS server or even
 just ports 2049, but the underlying question is, why isn't my keep state
 rule handling this.

I don't use pf (or NFS), but UDP is a stateless protocol. I wouldn't
be surprised if pf couldn't keep track of its state...

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Need urgent help regarding security

2005-11-16 Thread Will Maier
On Wed, Nov 16, 2005 at 09:51:08PM -0500, Steve Bertrand wrote:
 Most *((cr/h)ackers* (and I use that term VERY loosely (aka:
 script kiddies)) are interested in rooting a box, and setting up a
 storage/sharing area that is free to them. This may not be the
 case, but it's better to 'observe' your foreign presence first.

I understand the rationale behind this advice, but I disagree. I
made my suggestion plain in another part of this thread, but (in
general) the first priority should be to disrupt the attack. For
some organizations (universities, especially), computing resources
are our number one asset. We have oodles of cycles and network
bandwidth -- a rooted box directly targets our valuables, even if
it's only doing IRC or warez.

Moreover, the longer the hole remains open, the greater the chance
that the attacker will extend the breach. In most every scenario I
can imagine, this is unacceptable. Real forensic investigation can't
really even be performed until the box is offline; looking at /tmp
and other likely trouble spots is excellent advice, but should come
later in the process.

For now, take a snapshot of the network activity (using lsof, ngrep,
tcpdump, etc); I recommended lsof because it will reveal all open
files and network sockets very quickly. Dump the output to a file
and unplug the machine. tcpdump and friends will work well, too, and
give you a more indepth look at the network activity, but will also
require you to keep the box up for longer than I'd be comfortable.

OP has some asset that is being threatened or diminished by this
attack, be it his bandwith, CPU cycles, host/network integrity or
self confidence. He needs to identify that asset and work quickly to
protect it. In most cases, this will mean immediately removing the
box and preparing to rebuild the machine; if he's interested in
investigating, he can do that on an image of the disk (since
investigations are of little use if they ruin the evidence). 

Allowing the attack to proceed may be moderately enlightening, but
(from the OP's message) it seems like the basic problem is known.
Crufty machines attract attacks.

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Need urgent help regarding security

2005-11-16 Thread Will Maier
On Wed, Nov 16, 2005 at 05:16:37PM -0800, Mark Jayson Alvarez wrote:
 Good Day!

At first I thought I was confused, but then I realized that you had
cross-posted your message to freebsd-security@ and
[EMAIL PROTECTED] Please don't do this, as it fragments the
discussion.

Good luck.

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ifconfig mystery card

2005-11-09 Thread Will Maier
On Wed, Nov 09, 2005 at 04:21:50PM -0600, Live-Wire wrote:
 running ifconfig I see (besides my localhost lo0 entry):
 
 x10: flags=8802BROADCAST,SIMPLEX,MULTICAST mtu 1500
options=9RXCSUM,VLAN_MTU
ether 00:01:03:20:d5:fd
media: Ethernet autoselect (none)
status: no carrier

Did you copy and paste this from a terminal? (I don't think you
did...)

 and yet, running ifconfig x10 i get
 
 ifconfig: interface x10 does not exist

I think you've misinterpreted the 'l' in 'xl0' as an '1'.

| ~ % man -k '^xl'  
 
| xl(4)- 3Com Etherlink XL and Fast Etherlink XL 
Ethernet device driver
| ~ % man -k '^x1'  
 
| ^x1: nothing appropriate
| ~ %

That should also give you a hint as to the type of card you have (a
rather common one, at that).

 Hmm ... what am I missing?

; )

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: To little swapspace...

2005-11-01 Thread Will Maier
On Tue, Nov 01, 2005 at 03:46:02PM +0100, Mikael Backman wrote:
 Is there a way to reduce yhe /usr  slice and use that space as
 expanded swap space?  Without reinstalling?

This is a FAQ.

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/adding-swap-space.html

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Which version of FreeBSD a binary was compiled for?

2005-10-27 Thread Will Maier
On Thu, Oct 27, 2005 at 06:51:21AM -0700, Micah wrote:
 I have a 5.4 system, /do/ go into single user when upgrading, and
 file does /not/ report FreeBSD version.  I get the same output you
 do.  It would be nice to know why this works on some systems and
 not on others.

Consider diff'ing the /usr/share/misc/magic file from a system that
works and a system that doesn't work. I'd expect the difference to
be evident there.

It works find on all my machines, though.

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Which version of FreeBSD a binary was compiled for?

2005-10-27 Thread Will Maier
On Thu, Oct 27, 2005 at 11:36:18AM -0700, Micah wrote:
 In other words, it's not file that broken, but /every/ executable
 on the broken machine is broken.  Now why would that be?  A
 compiler flag or something?

Must be -- some flag produces unique bits in the executables. I'm a
little surprised there isn't (AFAICT) anything descriptive in
file(1)'s manpage or /u/s/mi/magic that would explain the
discrepancy. Didn't see anything in quick looks through gcc(1) or
make(1), either.

Weird.

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Maintaining my music collection (off topic)

2005-10-26 Thread Will Maier
On Wed, Oct 26, 2005 at 06:39:48AM -0400, Parv wrote:
 Looks like this script is not going to work in FreeBSD /bin/sh.
 Install one of shells/bash* (guessing) ports and run this script
 under that shell (unless somebody does the conversion for you).

FreeBSD sh (1) supports parameter expansion, including expansions used
in the referenced function.

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Which version of FreeBSD a binary was compiled for?

2005-10-25 Thread Will Maier
On Wed, Oct 26, 2005 at 02:24:54AM +0400, Andrew P. wrote:
 How to tell? Apart from trying to launch it on different versions
 without COMPAT* in the kernel?

file (1)

 One can always carefully examine the output of ldd, readelf and
 other such tools, but that requires much knowledge and a small lab
 with all kinds of BSD's set up. Is there a better way?

| ~ % file /usr/local/bin/screen
| /usr/local/bin/screen: setuid ELF 32-bit LSB executable, Intel
| 80386, version 1 (FreeBSD), for FreeBSD 5.4, dynamically linked
| (uses shared libs), stripped
| ~ % uname -a
| FreeBSD vger.caenn.wisc.edu 5.4-RELEASE-p8 FreeBSD 5.4-RELEASE-p8
| #1: Tue Oct 11 20:19:50 CDT 2005
| [EMAIL PROTECTED]:/usr/obj/usr/src/sys/VGER20050925  i386

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sftp and escape characters

2005-10-20 Thread Will Maier
On Thu, Oct 20, 2005 at 10:01:45AM -0700, ross wrote:
 my prompt copy and pasted.

 sftp put /mnt/pammy/music/Nadasurf-\ Popular.mp3 /files/upload
 Bad escaped character ' '
 sftp put '/mnt/pammy/music/Nadasurf-\ Popular.mp3' /files/upload
 Bad escaped character ' '

If you're putting the filename in quotes, you don't need to escape
the space (hence the 'Bad escape' error).

~ % touch this is a test
~ % sftp $SERVER
Connecting to merk...
sftp put this\ is\ a\ test
File this\\ not found.
sftp put this is a test
Uploading this is a test to /home/$USER/this is a test
this is a test 100%0 0.0KB/s   00:00
sftp

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Bash Pattern Matching Syntax

2005-10-15 Thread Will Maier
On Sat, Oct 15, 2005 at 03:37:11PM -0700, Drew Tomlinson wrote:
 I want to list the files in a directory that end in .jpg
 irregardless of case.  Thus after reading the bash man page, it
 seems I should be able to issue a command something along the
 lines of ls [*.[JjPpGg]]  or ls *.[JjPpGg] but neither of
 these work and return a No such file or directory message.  I've
 also tried various ways of  escaping the '*' and '. but that
 didn't help either.  However ls *[JjPpGg] does work by listing
 the files.  However I want to match the . before jpg as well.
 What is the correct syntax for what I'm trying to do?

The square brackets define a range of characters; [a-z] includes all
lowercase alphabetic characters between 'a' and 'z' and will match
_only one character from that range_ in a given string.

[a-z] matches 'b'
[a-z] matches 'z'
[a-z] doesn't match 'all'
[a-z] doesn't match '1'

Your first attempt, [*.[JjPpGg]], has an extra pair of brackets.
Secondly, it (like your second attempt) defines a range that would
match only one character, JjPpGg:

[JjPpGg] matches 'j'
[JjPpGg] matches 'G'
[JjPpGg] doesn't match 'JPG'
[JjPpGg] doesn't match 'jpg'

You need to break your patterns up; what you're looking for is a
pattern of three characters, with 'J' or 'j' in the first position,
'P' or 'p' in the second, and 'G' or 'g' in the third. That entire
pattern should be prepended by a string of any characters (*) and a
period (.).

Here are some examples to demonstrate what I've written above; they
conclude with a pattern that will match the files you're looking
for.

sh-3.00$ ls
a  all  test.JPG  test.jpg
sh-3.00$ ls [a-z]
a
sh-3.00$ ls [all]
a
sh-3.00$ ls *.[JjPpGg]
ls: *.[JjPpGg]: No such file or directory
sh-3.00$ ls *.[Jj][Pp][Gg]
test.JPG  test.jpg

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: D-Link wireless LAN card not working in 5.3-R

2005-10-14 Thread Will Maier
On Thu, Oct 13, 2005 at 11:50:41PM -0700, N Deepak wrote:
 I am running FreeBSD 5.3 RELEASE on IBM ThinkPad R40e.  I have
 compiled a custom kernel.

 I have a D-Link wireless LAN card:  DWL-G650+

I have the same card working fine on 5.4; do you have ath enabled in
the kernel? There are multiple versions of the card, so I can't
guarantee that your version will work with the ath driver, but
there's a good chance you can get it to work.

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: D-Link wireless LAN card not working in 5.3-R

2005-10-14 Thread Will Maier
On Fri, Oct 14, 2005 at 08:57:58AM -0700, N Deepak wrote:
 Thanks.  A search for 'ath' in the configuration file gave no
 matches.  There is no such .ko in my /boot/kernel either.

Look for ath_hal.ko after you've compiled your kernel.

 Do I have to add a:
 deviceath

 line in my config file and recompile?  (as per ath(4))

Yes.

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Help With 'for' Loop

2005-10-14 Thread Will Maier
On Fri, Oct 14, 2005 at 12:33:07PM -0700, Drew Tomlinson wrote:
[...]
 Yet 'echo $i' only returns /multimedia/Pictures/1998, stopping
 at the first space.  Is it possible to get 'i' to represent the
 whole string that 'find' returns?  If so, how?

Bourne-style for loops use space as the delimiter by default. To
change this behavior, modify the IFS variable (which is mentioned
but not explained in the sh manpage):

$ OLDIFS=$IFS   # probably want to remember this value
$ IFS=:
$ export $IFS
$ for i in $PATH; do
echo $i
done
/home/will/bin
/usr/local/sbin
/usr/local/bin
/usr/sbin
/usr/bin
/sbin
/bin
/usr/X11R6/bin
/opt/
/usr/games/
$ IFS=$OLDIFS   # set it back to normal
$ export $IFS   
$ for i in $PATH; do
echo $i
done

/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/X11R6/bin:/opt/:/usr/games/

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Help Understanding While Loop

2005-10-14 Thread Will Maier
On Fri, Oct 14, 2005 at 02:48:19PM -0700, Drew Tomlinson wrote:
 OK, I've been working on an sh script and I'm almost there.  In
 the script, I created a 'while read' loop that is doing what I
 want.  Now I want to keep track of how many times the loop
 executes.  Thus I included this line between the 'while read' and
 'done' statements:

 count = $(( count + 1 ))
 ^^^ 

You're missing something here ;)

$ count=1
$ echo $count
1
$ count = $(( $count +1 ))  # note: 'count ='
count: not found
$ ^[[A^C
$ count=$(( $count + 1 ))   # note: 'count='
$ echo $count
2

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How can I cut and paste from xterm _into_ another program ? (NOTE - I am not an IDIOT)

2005-10-13 Thread Will Maier
On Thu, Oct 13, 2005 at 03:11:29PM +0100, Spec wrote:
 couldn't see if you got an answer to this but I just found out
 that you can do it (in fedora/xfce anyway).

This is a feature of the graphical environment (X windows), not the
operating system or, AFAIK, the window manager.

 You select text you want to copy in xterm, move focus to where you
 want to paste it and then press mouse button 5 on my logitech
 mouse, so just press all mouse buttons on your mouse, one will
 probably/possibly (at a guess) paste text.

The traditional binding is 'Mouse 3', which often is the scroll
wheel or both left and right buttons pressed simultaneously. This
may differ depending on the mouse.

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Playing Flash and video media in Firefox

2005-10-07 Thread Will Maier
On Fri, Oct 07, 2005 at 12:10:45PM +0300, Adi Pircalabu wrote:
 On Fri, 7 Oct 2005 08:14:38 +0400
 Andrew P. [EMAIL PROTECTED] wrote:

  Still, I haven't figured out how to watch webcasts from some
  stupid sites that try to detect whether you have WMP installed.

 Some sites are extremely broken, indeed. For example, I can't see
 the videos from uefa.com, they simply refuse to deliver me the
 content on either FreeBSD, SuSE and Ubuntu.

A little grepping around in the sites' HTML usually (not always)
allows you to figure out what file is actually being loaded. Once
you know that, it's simple to stream it in eg Mplayer. I needed to
do this to watch film trailers at Apple.com or stream soccer games
from mls.com.

$ curl http://the.site.com | grep '\.\(rm\|wmv\|mov\)'

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: passwd file corrupted

2005-10-06 Thread Will Maier
On Thu, Oct 06, 2005 at 10:31:32AM -0500, Efren Bravo wrote:
 How can I check /etc/passwd file integrity because I think it is
 corrupted. When I try to execute vipw efrenba or root it doesn't works.

Can you explain how vipw 'doesn't work'? What does it say? Is your
$EDITOR variable set correctly?

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Problems with Tor, SSH packages

2005-10-02 Thread Will Maier
On Sun, Oct 02, 2005 at 02:34:43PM -0700, Alistar Erlas wrote:
 I also noticed that there is no screen utility in the
 stable packages either. 

IIRC, there is no screen *package* because it fails to build
correctly in certain conditions (something about a loop). Use the
ports tree instead, as recommended elsewhere in this thread. I can
confirm that the port works just fine.

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FBSD 5.4 - netstat -p tcp

2005-09-30 Thread Will Maier
  On 9/30/05, Brian Henning [EMAIL PROTECTED] wrote:
   Using FBSD 5.4 and trying to see if there are open ports on my
   machine. when i use netstat -p tcp, it yields no results, but i know
   for a fact that i am running an sshd server on the machine because i
   am logged in remotely with putty.

 On 9/30/05, Andrew P. [EMAIL PROTECTED] wrote:
  Try the -a switch:
  # netstat -ap tcp

On Fri, Sep 30, 2005 at 11:35:08AM -0500, Brian Henning wrote:
 i have tried that with no luck :(

(Please don't top post -- I've reordered the quoted sections above)

lsof often works for me where sockstat (sockstat -4) or netstat
haven't:

# lsof -ni

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Want to symbolic link 2-3 hard drives

2005-09-30 Thread Will Maier
On Fri, Sep 30, 2005 at 01:55:20PM -0700, Allen D. Tate wrote:
 I have a machine that I'm getting ready to install FreeBSD 5.4 on and I
 have three 40 GB hard drives and I want the two drives that do not have
 the core system installed on them symbolically linked to the /home
 directory. I am pretty new to FreeBSD (other than installing it a few
 times and breaking it to learn) and I've never done a symbolic link
 before. Can someone either give a quick tutorial or point me to a
 hotwo? Thanks in advance.

man 1 ls

In your case, I'd recommend going through the install as normal,
except designate one of the two drives as your /home. I'm not sure
what you mean by linking *both* of the drives (it doesn't work that
way); just setting one of the other big drives as the /home
mountpoint should do the trick.

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Want to symbolic link 2-3 hard drives

2005-09-30 Thread Will Maier
On Fri, Sep 30, 2005 at 02:19:40PM -0700, Raistlin Majere wrote:
 If you were trying to get the aggregate of the two disks and use them as
 /home you could use a RAID card of some kind to convince the OS to see
 those two disks as one big disk (using RAID1) and then go through the
 standard install, and designate the RAID as the /home partition,...

(Please don't CC me; I read the list : ) )

RAID would be a doable solution, but it's likely overkill for the
user. Another option would be vinum[0] (FreeBSD's logical volume
manager).

[0]A relevant article: http://www.freebsddiary.org/vinum.php

 but that has other disadvantages (cost of the RAID card, setup of
 the RAID, risk that if one disk dies, you lose all of /home., etc)

RAID (Redundant Array of Inexpensive Disks) is designed to prevent
the 'one disk goes, so goes /home' problem. RAID1 ('mirroring')
should do just fine mitigating this issue.

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: NFS export problem

2005-09-29 Thread Will Maier
On Thu, Sep 29, 2005 at 06:10:28PM +0200, albi wrote:
 On Thu, 29 Sep 2005 17:49:01 +0200 Valerio daelli [EMAIL PROTECTED] wrote:
  /raid/lower/data -maproot=root -network 10.210.0.0 http://10.210.0.0 -mask
  255.255.0.0 http://255.255.0.0

 you meant to write
 /raid/lower/data -maproot=root -network 10.210.0.0 -mask 255.255.0.0
 instead i assume !?

That's actually what he did write; Gmail munges outgoing messages,
adding those annoying URL tags.

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: new error message from latest xorg-server?

2005-09-15 Thread Will Maier
On Thu, Sep 15, 2005 at 09:40:22AM -0400, Larry wrote:

 I just updated 6 ports. One was xorg-server-6.8.2_5.  Now I get
 this error message when I try to run wine inside fluxbox.  Nothing
 else has changed.  Can someone tell me why?

[error message follows]

I had a similar problem, although I was trying to run aterm. I
switched to using to xterm for that session; next time I started X,
the problem was gone.

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: 5.4 SSH Timeout help

2005-09-12 Thread Will Maier
On Mon, Sep 12, 2005 at 11:24:19AM -0700, Sean Murphy wrote:
 I SSH into the server with no problem and I'm able to do work
 however when I walk away from my desk SSH closes the session.  It
 seems the timeout is 5 or 10 min how can I change this setting for
 all of our users?

What shell are the users using? If they're using 'tcsh' or certain
other shells, they might be running up against the shell's
autologout option. See the man page for tcsh (1):

|  The first word is the number of minutes of inactivity before
|  automatic logout. The optional second word is the number of minutes
|  of inactivity before automatic locking. When the shell
|  automatically logs out, it prints `auto-logout', sets the variable
|  logout to `automatic' and exits. When the shell automatically
|  locks, the user is required to enter his password to continue
|  working. Five incorrect attempts result in automatic logout. Set to
|  `60' (automatic logout after 60 minutes, and no locking) by default
|  in login and superuser shells, but not if the shell thinks it is
|  running under a window system (i.e., the DISPLAY environment
|  variable is set), the tty is a pseudo-tty (pty) or the shell was
|  not so compiled (see the version shell variable). See also the
|  afsuser and logout shell variables.

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: memory test off of a 'DISK-ON-KEY' device ... ?

2005-09-12 Thread Will Maier
On Tue, Sep 13, 2005 at 01:03:08AM -0300, Marc G. Fournier wrote:

 I'm trying to run some tests on a new server that I'm putting
 together, and would like to run some memory tests ... I found
 memtest86, but it runs on floppies, which doesn't help me, since I
 don't have a floppy drive on this thing :(

The Linuxes tend to run memtest86 from the hard drive; you can do
that on FreeBSD as well. See the following relevant messages:

http://lists.freebsd.org/pipermail/freebsd-hackers/2004-February/005799.html
http://lists.freebsd.org/pipermail/freebsd-hackers/2004-February/005800.html

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Thanks a lot!!!

2005-09-11 Thread Will Maier
On Sat, Sep 10, 2005 at 11:21:17PM -0700, rolan herreria wrote:
 We are just worrying about the BSA RAID
 (http://www.bsa.org/philippines/events/Anti-Piracy-Team.cfm). We
 like to change our OS but not that expensive like Microsoft OS...
 The amount of MS WinXP Pro here is Php9400.00 and we have  10 PC's
 so we nid Php94,000.00...Those games that we want to run are
 Ragnarok, Counterstrike, Warcraft Frozenthrone III. Doom3 and any
 Online Games...

I'm not entirely sure what you're asking, but it sounds like you run
an internet/gaming cafe. The computers currently run Windows, and
you want a free operating system to replace it.

FreeBSD would be a fine choice, especially if most of your customers
want to surf the web or word process. 3D gaming is also possible,
but it takes a little bit of work.

Personally, I run my games on Linux (Ubuntu, in particular); FreeBSD
runs on my servers and work laptop. There are folks who use at least
some of the games you mentioned above on FreeBSD; hopefully they'll
chime in.

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Compatibility

2005-09-10 Thread Will Maier
On Sat, Sep 10, 2005 at 05:38:39PM -0400, [EMAIL PROTECTED] wrote:
 I was wondering if the FreeBSD Unix program that I have on cd's
 would be compatible with a Compaq Presario 5430US.  I came close
 to installing it till at the end when it gave a last warning
 involving a message that asked if I was sure I wanted to install
 and that I could loose data on disk once  installed.  Do you know
 if this program will work on my computer?  Thanks and hope to hear
 from you soon.  I am taking a Unix course at a University and
 could use a program like this (version 4.11)  to help with my
 homework at home 

Installing FreeBSD will overwrite all the data on the partitions you
chose to install it to; if you chose the defaults, IIRC, that will
mean the entire harddisk. If you currently have Windows or Linux on
the computer, you can configure the installation to live next to the
existing OS(es) (it's called multi-booting) or choose to get rid of
them and only have FreeBSD.

FreeBSD is an entire operating system, like Windows or Linux, not
just a single program. It's a collection of programs that will give
you full Unix-like functionality -- it would be great to use to work
on your Unix skills for a University course or a job.

I don't know specifically if FreeBSD will work on your Compaq, but a
google search should help. Anecdotally, I'm running FreeBSD on my
Thinkpad just fine -- I'm sure other people have it running on
various other machines.

Good luck!

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: and the winner is...

2005-09-01 Thread Will Maier
On Thu, Sep 01, 2005 at 06:19:15PM -0300, Mario Carugno wrote:
 I there, i was trying freebsd for a while, and comparing it
 against debian/linux.  The winner was Debian by far... Freebsd
 could be stable, but it is not faster... and Debian is far much
 more 'usable'.  Freebsd package installation is very laborious
 compared with Debian's apt system. I have to search in each CD,
 know dependences,...  X configuration is hard too when the
 autodetected configuration doesn't works...  I think fbsd is good,
 but needs some user facilities.

Uhh, interesting. Doesn't seem appropriate for freebsd-*questions*,
though, as you don't seem to really ask anything at all.

Could we move this thread to one of the lists better suited for it?
* [EMAIL PROTECTED]
* [EMAIL PROTECTED]
* [EMAIL PROTECTED]
* [EMAIL PROTECTED]

Thanks...

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Perl 5.8.7 port requires libm.so.4

2005-08-31 Thread Will Maier
On Wed, Aug 31, 2005 at 04:52:22AM -0400, Kris Kennaway wrote:
 On Tue, Aug 30, 2005 at 01:27:07PM -0500, Will Maier wrote:
  Indulge a newb, then: how did that come about? I'm still figuring
  out port and packages and how they relate to the different releases.
  Do you mean that my portsnap'd ports tree is ~= 6.X and my system is
  ~=5.X? Is that inevitable? Is that a Bad Thing?

 There was a temporary snafu that caused the 5.x packages to be
 replaced by 6.x packages, which is now fixed.  Delete the package and
 retry.

Thanks for the update; I was able to get everything working by
rebuilding the entire ports tree using portupgrade:

# portupgrade -fvarR

I'm not sure if rebuilding itself did the trick or I got
updated/fixed ports, but I'm quite fine now. Thanks for resolving
the issue.

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: portsnap and updates using cron

2005-08-31 Thread Will Maier
On Wed, Aug 31, 2005 at 04:08:46PM +0200, martin hudec wrote:
 First, I tell my custom script (with environment set by PATH=) to
 call portsnap fetch  portsnap update, but he is unable to fetch
 anything at all, therefore I started to use portsnap cron and I
 hoped to be able to fetch it.

So what happens when you run:

# /usr/local/sbin/portsnap fetch
# /usr/local/sbin/portsnap update

on the command line? Your portsnap.conf seems like it might be
missing the GPG keyprint for the update distributor. I wonder what
errors you get. Have you ever run `portsnap extract`?

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: portsnap and updates using cron

2005-08-31 Thread Will Maier
On Wed, Aug 31, 2005 at 06:32:17PM +0200, martin hudec wrote:
 On Wed, Aug 31, 2005 at 11:28:03AM -0500 or thereabouts, Will Maier wrote:
  So what happens when you run:

  # /usr/local/sbin/portsnap fetch
  # /usr/local/sbin/portsnap update

 They are both running pretty well from command line.

No errors? They update your ports tree as expected?

 Here is full content of portsnap.conf located in /usr/local/etc/:

   # Defaults:
   WORKDIR=/usr/local/portsnap
   PORTSDIR=/usr/ports

   KEYPRINT=9b5feee6d69f170e3dd0a2c8e469ddbd64f13f978f2f3aede40c98633216c330
   URL=http://portsnap.daemonology.net

This is fine.

Looking back over the thread, you mention that, in cron, you're
running the following:

portsnap cron
portsnap -I update
 ^^

You also say that you think your process isn't functioning because
the ctimes in /usr/ports are too old. You do realize that '-I'
causes portsnap to update INDEX files, but not the rest of the
ports tree (man 8 portsnap).

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: problem with email...

2005-08-31 Thread Will Maier
On Wed, Aug 31, 2005 at 12:40:18PM -0400, [EMAIL PROTECTED] wrote:

 Over the summer, I recently began getting fake email messages
 from [EMAIL PROTECTED], [EMAIL PROTECTED],
 [EMAIL PROTECTED],[EMAIL PROTECTED], etc. etc. etc.  The subject
 line is always something like YOUR ACCOUNT IS SUSPENDED,
 You have successfully updated your password, etc.   Each of
 these contain an attachment, so I know that a virus is trying to
 get into our server.  I need some suggestions on what to do to
 make this stop.

A virus isn't necessarily 'trying to get into your server'. If you
look at the headers of those emails, it's quite likely that they
originate somewhere else. If they come from someone else's server
but purport to be from your own, it's likely that you are the victim
of a 'spear phishing' attack.

As far as stopping those mails, treat them like any other spam. If
they have viral payloads, you should be using virus detection
somewhere in the chain (preferably near the mail server) to weed
them out anyway.

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: SSH times out - Server unexpectedly closed network connection

2005-08-31 Thread Will Maier
On Wed, Aug 31, 2005 at 03:33:27PM -0400, Robert G. wrote:
 SSH doesn't appear to be working on my remote server. I can
 connect fine, and am prompted with login as:  with Putty, but
 when I enter my username it sits and hangs there for about a
 minute before a message comes up that says Server unexpectedly
 closed network connection. SSH was working fine this morning
 around 11am. I just got back and now it's hanging. The only
 changes to the /etc/ssh/sshd_config that I made were to add my one
 user account. I rebooted and it worked fine this morning, so I
 don't know what the problem is now as I haven't touched it.

 Any ideas?

Could be DNS-related.

# grep -i DNS /etc/ssh/sshd_config
UseDNS no

FreeBSD has UseDNS on by default; I had to turn it off. I was
experiencing a similar hang-for-a-while-then-die thing.

If that doesn't help, look at the output of ssh -vvv $REMOTE_HOST.

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Perl 5.8.7 port requires libm.so.4

2005-08-30 Thread Will Maier
On Tue, Aug 30, 2005 at 09:19:01AM -0400, Lowell Gilbert wrote:
 Will Maier [EMAIL PROTECTED] writes:
  I'm running a ~2 days old FreeBSD 5.3-SECURITY install; I'm still getting my
  ^^^
My apologies -- should read: 5.4-SECURITY.

[snip...]
  I've also been reading /u/p/UPDATING before actually running portupgrade;
  today I noticed that the Perl 5.8.6-5.8.7 upgrade required running a script
  afterwards. I then ran portupgrade, which updated Perl, Ruby and some other
  ports. It failed on firefox and gtk20, however, because it couldn't find
  libm.so.4.

  I then tried to run perl-after-upgrade, but the Perl interpreter won't run
  because it can't find libm.so.4 either. Symlinking /l/libm.so.3 -
  /l/libm.so.4 gets rid of the error, but then the interpreter complains 
  about a
  crypt library...symlinking each of the required libs seems a) unlikely to 
  be a
  good solution in the end and b) hackish, plus I'm not even sure it *really*
  makes the interpreter any happier.

Rebuilding Perl fixed this problem; rebuilding all the ports fixed other
linking-related issues that came up.

  Have I missed some important step? The OS itself is kept up-to-date using
  freebsd-update, although I don't *think* this would affect eg Perl.

 Sure it will, if it updates you to have a different dynamic library name
 than the one your programs are linked against.  

Of course; I'm unused to rebuilding so often ; ). I'll get the hang of it.
Like I said, I'm still getting my feet wet.

 I don't use freebsd-update, but I'd like to point out that libm.so.4 is on
 FreeBSD 6.x, not 5.x.  So you don't seem to be running the base system you
 think you are.

Hmm. I base my statement off the output from `uname -a`:

FreeBSD `hostname` 5.4-SECURITY FreeBSD 5.4-SECURITY #0: Wed Jul 20 08:57:11 \
UTC 2005 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC  i386

Thanks for the help!

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Setting up a home network with FreeBSD (not connected to the Internet yet)

2005-08-30 Thread Will Maier
On Mon, Aug 29, 2005 at 08:45:12PM -0700, Maude User wrote:
 I was able to borrow someone's keyboard and monitor to install FreeBSD onto
 the server - but after HTTP and FTP and NFS are set up I was hoping I could
 return the keyboard and monitor and be able to install and configure any
 additional packages using the laptop as the console. The laptop has an
 internal CD-RW. The server has a USB CD-RW - but no monitor or keyboard.

 Is this just a simple intranet I'm setting up here?  Can anyone point me
 to documentation that would answer the following types of questions:

 - What sort of cables should I get?

To connect the laptop and 1U via ethernet? Crossover cables (as opposed to
patch cables).

 - Since the server won't be connected to the Internet for now, can I pick
 any old IP address, host name and domain name?

Sure. That said, I usually set up test hosts like that using private IPs
(10.X.X.X, 172.16.X.X, 192.168.X.X) out of habit. The laptop needs to be in
the same subnet, though, as the server. So, if the 1U is 10.0.0.1, the laptop
should be something like 10.0.0.2 (depends on the netmask you choose).

 - Once the network is set up, can I use something like SSH or Webmin from
 the laptop to install and configure packages on the server, without
 attaching a keyboard and monitor?

Yes. Just as you would use ssh to administer the 1U when it's at the
datacenter, you can use ssh to play with it at home. Webmin is accessed via
HTTP; once it's installed and configured on the 1U, connect to the 1U's IP
address in your browser.

 - What security should I be setting up NOW, so that the server will be
 secure once it goes co-lo?

The usual: ensure you're running as few services as possible (`sockstat -4` to
see what's listening on the network), prepare an update and backup scheme for
the system and its applications (apply updates now and plan for updates in the
future), lock down user accounts, etc. Subscribe to the FreeBSD security
mailing list[0] and read updates.

[0]http://www.freebsd.org/security/

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Perl 5.8.7 port requires libm.so.4

2005-08-30 Thread Will Maier
On Tue, Aug 30, 2005 at 02:16:18PM -0400, Lowell Gilbert wrote:
 Will Maier [EMAIL PROTECTED] writes:
  Hmm. I base my statement off the output from `uname -a`:

  FreeBSD `hostname` 5.4-SECURITY FreeBSD 5.4-SECURITY #0: Wed Jul
  20 08:57:11 \ UTC 2005
  [EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC  i386

 Sorry; I was confused.  You were trying to run 6.x packages on a
 5.x system, not the other way around.

Indulge a newb, then: how did that come about? I'm still figuring
out port and packages and how they relate to the different releases.
Do you mean that my portsnap'd ports tree is ~= 6.X and my system is
~=5.X? Is that inevitable? Is that a Bad Thing?

Thanks so much for your help!

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | email:[EMAIL PROTECTED] |
| [EMAIL PROTECTED] | [EMAIL PROTECTED] |
*--[ BSD Unix: Live Free or Die ]--*

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Perl 5.8.7 port requires libm.so.4

2005-08-28 Thread Will Maier
*-

I'm running a ~2 days old FreeBSD 5.3-SECURITY install; I'm still getting my
feet wet with FreeBSD. Here's the process I've been using to keep my ports
tree up-to-date:
# portsnap fetch
# portsnap update
# make fetchindex
# portsdb -u
# portupgrade -varRPP

I've also been reading /u/p/UPDATING before actually running portupgrade;
today I noticed that the Perl 5.8.6-5.8.7 upgrade required running a script
afterwards. I then ran portupgrade, which updated Perl, Ruby and some other
ports. It failed on firefox and gtk20, however, because it couldn't find
libm.so.4.

I then tried to run perl-after-upgrade, but the Perl interpreter won't run
because it can't find libm.so.4 either. Symlinking /l/libm.so.3 -
/l/libm.so.4 gets rid of the error, but then the interpreter complains about a
crypt library...symlinking each of the required libs seems a) unlikely to be a
good solution in the end and b) hackish, plus I'm not even sure it *really*
makes the interpreter any happier.

Have I missed some important step? The OS itself is kept up-to-date using
freebsd-update, although I don't *think* this would affect eg Perl.

Thanks much!

-- 

[Will [EMAIL PROTECTED]/[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]