Cannot install on HP Pavilion

2013-02-25 Thread Russell Murphy
I'm trying to install FreeBSD 9.1 Release on an HP Pavilion Slimline (model 
s5-1414); I get through the installation fine, but when I re-boot, the machine 
gives an:

 ERROR: No boot disk has been detected or the disk has failed.

I looked around for suggestions via mailing list archives, google, and such but 
no luck (or perhaps the wrong search terms).

Details:

I've been using FreeBSD for more years than I care to admit (i.e. more than 
10); I'm generally pretty familiar with the process and the installer, but am 
by no means an expert
The target machine is a model s5-1414, product # H3Y75AA#ABA
I went through the whole process: re0 configured using DHCP
* guided partition; using the whole disk
  ada0
 ada0p1 64kbfreebsd-boot
 ada0p2 927GB   freebsd-ufs /
 ada0p3 4GB freebsd-swapnone
  commit = yes
 * fetched distribution files (e.g. base, kernel, doc, games, ports, 
src)
 * root password; setup user OK
on boot, the error (above) is generated
the BIOS is an HP/American Megatrends ver. 2.15.227
relevant (?) settings include:
 * Storage:
  SATA Emulation: AHCI
  Boot Order:
 (I've tried just about everything), but
 the relevant part seems to be that the Legacy devices never 
"work"
  * Security:
  Legacy: enable
  Secure boot: disable
  Fast boot: disable

Please let me know if there's anything else you would care to know or see. Any 
ideas or suggestions?  

(Forgive the email formatting, it's a combination of xemacs and my Mac laptop…).

Thanks-

Russ M.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


SU

2010-01-25 Thread Shone Russell
I am not able to execute any commands when I utilize the su function, I
am entering our correct password. It was working on Friday, but now it's
not. Also can you tell me how to install the module for Bacula, or
Amanda I keep getting an error message that module.info is missing. My
phone number is 973-244-0555 ext 39

 

Thanks

FreeBSD WEB01 7.1-RELEASE FreeBSD 7.1-RELEASE #0: Thu Jan  1 14:37:25
UTC 2009 r...@logan.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC
i386

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: ion windows manager on FreeBSD

2009-10-02 Thread Russell Jackson
Albert Shih wrote:
> Hi all
> 
> I'm trying to compile 
> 
>   http://modeemi.fi/~tuomov/ion/download.html
> 
> on my FreeBSD 8.0-RC1 and didn't success
> 
> I would like to known if anyone can help me make ion work ? Maybe someone
> have the patch file for the system.mk ? 
> 
> Long time ago ion ports was kick off from the ports system because the will
> of the developper (please don't troll). I just saw the license just change
> maybe now it's possible to put again ion in the ports system ? 
> 
> I would like to help for the ports but as you can see I unable to build for
> myself.
> 

I think most of us ion refugees have moved on to xmonad. While it isn't quite 
the same as
ion, the xmonad developers don't have any philosophical issues supporting xft 
and
xinerama. The only gripe I have is the blasted Haskel config file. Arr!


-- 
Russell A. Jackson 
Network Analyst
California State University, Bakersfield




signature.asc
Description: OpenPGP digital signature


Re: Creating a 10km wireless bridge...pointers?

2009-03-21 Thread Craig Russell

Depending upon what your budget is, Tranzeo has some excellent wireless 
products that are ideal for point-point links.  Encryption is built-in and they 
can be configured for point-point or point-multipoint (just in case the project 
expands).  One problem that you may run into, if both sides of the link are 
close to the ground, is the "fresnel zone".  If one side is higher than the 
other, this shouldn't be a problem.  Two self contained POE radios with 
built-in antanna should run you about $500 and they can be mounted on standard 
satellite dish arms.

I've also used mikrotik products and have generally been very happy with them.  
There is a ton of functionality and I actually use two of them for my core 
routers at my current job.  I think for this project they are overkill and 
there is quite a bit of a learning curve to get them up and running.  If you 
don't plan on deploying anything else, I think that you will find that the 
tranzeo's are a simpler solution.  


Craig 



- Original Message 
From: Modulok 
To: freebsd-questions@freebsd.org
Sent: Saturday, March 21, 2009 8:43:01 AM
Subject: Creating a 10km wireless bridge...pointers?

List,

I have been tasked with getting a DSL connection across about 10km of
no-man's-land to a rural location without internet access. Ideally,
all traffic inbetween the two directional antennas would be encrypted.
(Nice, but not entirely required.) 3Mb/s would be great! Something
like:

LAN<->BSDrouter<->modem<->Antenna<~~air~~>Antenna<->modem<->DSL

I'm looking for general pointers of both hardware and software to
achieve this. I'd like to employ FreeBSD as much as is feasible. This
is my first WAN network project, so even newbie pointers and general
references would be much appreciated. (Hardware suggestions, books to
read, etc.) Reliability is of mild concern, simply because I don't
want to drive 10km at 3:00am when something breaks.

Tips? References? Advice?
-Modulok-
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


mount DVD - invalid argument

2008-12-20 Thread Max Russell
I have two DVD drives on my machine.

m...@~: grep acd /var/run/dmesg.boot
acd0: DVDR  at ata1-master UDMA66
acd1: DMA limited to UDMA33, device found non-ATA66 cable
acd1: DVDROM  at ata1-slave UDMA33

the optical section of my fstab is like this:

/dev/acd0 /cdrom cd9660 ro,noauto 0 0
/dev/acd1 /cdrom cd9660 ro,noauto 0 0

however, when I try and mount a DVD, I get the following:

m...@~: sudo mount_cd9660 -s 0 /dev/acd0 /cdrom
mount_cd9660: /dev/acd0: Invalid argument

I have been able to mount CDs.

If I'm missing something really obvious, any help would be appreciated.

ta

Max
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


compile agp kernel support

2008-07-10 Thread Max Russell
I need to compile nvidia agp support in to my kernel. I can work through the
handbook and have previously compiled a kernel, but if anyone has previously
add the agp support, could they give me sime pointers?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


linux mode firefox, kde wait cursor

2008-05-22 Thread Max Russell
Has anyone else noticed an issue whereby launching linux binary Firefox
causes the bouncing wait cursor (the Firefox icon) to hang on KDE?

That is to say, while waiting for Firefox to launch you get the wait
bouncing cursor, and then after firefox has loaded, it continues to be the
bouncing cursor.

How can I get rid of this tiny annoyance, apart from not looking at it?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Which version

2008-05-21 Thread Russell Schoen

Hi,
Do you have a version that will run with an AMD Sempron 3100+, 1.8Ghz,  
32 bit, X86 family processor?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Automounting USB pen drives

2008-05-12 Thread Max Russell
I understand that when I plug in a USB drive to my 7.0 system, that it
turns up as /dev/da0 or /dav/da1 etc.

I'd like to work towards a nice automount script that shows the drive
on my desktop, KDE.

Could anyone point me at where I need to edit/make changes - is this
just in /etc/fstab?

I'd like to get it so it is seamless, just plug the USB device in and it mounts.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


xorg and radeon, widescreen

2008-04-08 Thread Max Russell
I'm having issues with my X1350, video7 flatscreen and xorg.conf - the
relevant sections of my xorg follow:

Section "ServerLayout"
Identifier "X.org Configured"
Screen  0  "Screen0" 0 0
InputDevice"Mouse0" "CorePointer"
InputDevice"Keyboard0" "CoreKeyboard"
EndSection

Section "Files"
RgbPath  "/usr/local/share/X11/rgb"
ModulePath   "/usr/local/lib/xorg/modules"
FontPath "/usr/local/lib/X11/fonts/misc/"
FontPath "/usr/local/lib/X11/fonts/TTF/"
FontPath "/usr/local/lib/X11/fonts/OTF"
FontPath "/usr/local/lib/X11/fonts/Type1/"
FontPath "/usr/local/lib/X11/fonts/100dpi/"
FontPath "/usr/local/lib/X11/fonts/75dpi/"
FontPath "/usr/local/lib/X11/fonts/URW/"
EndSection

Section "Module"
Load  "GLcore"
Load  "dbe"
Load  "dri"
Load  "extmod"
Load  "glx"
Load  "record"
Load  "xtrap"
Load  "freetype"
Load  "type1"
EndSection

Section "Monitor"
Identifier   "Monitor0"
VendorName   "VideoSeven"
ModelName"R19W01"
Modeline "1440x900_60.00"  106.47  1440 1520 1672 1904  900 901 904 932
-HSync +Vsync
EndSection

Section "Device"
### Available Driver options are:-
### Values: : integer, : float, : "True"/"False",
### : "String", : " Hz/kHz/MHz"
### [arg]: arg optional
#Option "ShadowFB"   # []
#Option "DefaultRefresh" # []
#Option "ModeSetClearScreen" # []
Identifier  "Card0"
Driver  "vesa"
VendorName  "ATI Technologies Inc"
BoardName   "RV515 [Radeon X1300]"
BusID   "PCI:2:0:0"
EndSection

Section "Screen"
Identifier "Screen0"
Device "Card0"
Monitor"Monitor0"
DefaultDepth 24
SubSection "Display"
Viewport   0 0
Depth 1
EndSubSection
SubSection "Display"
Viewport   0 0
Depth 4
EndSubSection
SubSection "Display"
Viewport   0 0
Depth 8
EndSubSection
SubSection "Display"
Viewport   0 0
Depth 15
EndSubSection
SubSection "Display"
Viewport   0 0
Depth 16
EndSubSection
SubSection "Display"
Viewport   0 0
Depth 24
Modes "1440x900_60"
EndSubSection
EndSection

this fails to start x with the /var/log entry reading -
(WW) RADEON: No matching Device section for instance (BusID PCI:2:0:1) found
(EE) No devices detected.

Fatal server error:
no screens found

It has been suggested to me that I comment out the BusID entry, however I am
unsure as to why this should work?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Authenticating proxy server with fine tuned controls

2008-02-11 Thread Craig Russell
Hi-
I am looking for an authenticating transparent proxy server with tiered access. 
 ie, A user who logs into the proxy can access sites based upon group 
membership; group1 has unfettered access to the internet, group2 gets filtered 
access.  Ideally, I'd like to be able to setup groups for various sites and 
add/subtract users to allow access to various internal sites.

As a diagram, I'd like to do this:

Group1:Unfettered access to internet
Group2:Filtered access to internet
Group3:Access to internal website x
Group4:Access to internal website y

If user1 is in Group1 and Group3 they can access the internet and internal 
website x
If user2 is in Group2 they can only access filtered websites.
If user3 is in Group2 and Group4 they get filtered internet access and access 
to internal website y


Is their an open-source or commercial product that provides for this type of 
granular control of access?

I've setup squid with authentication before, although it was several years ago, 
but I didn't need to have that granular of a control set.


Thanks,

Craig



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: mail server setup questions

2007-09-04 Thread Russell E. Meek

Quoting Jim Stapleton <[EMAIL PROTECTED]>:


I need a mail server to take incoming mail, and provide a pop3 (or
better yet, SSLed POP3) connection. I've tried akpop3d and qmail, but
have had less than brilliant success getting them functional. Could
you all suggest to me what you use and a good web site for configuring
it as it would be done in FreeBSD?

Please cc me, as I have the list subscribed in digest mode.

Thanks,
-Jim Stapleton
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"



http://www.tnpi.biz/internet/mail/toaster/

Perfection - and qmail based also.

Have fun.

- Russell


This message was sent securely via meektech.com


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Waiting for BIND security announcement

2007-07-31 Thread A.G. Russell IV
if you will look at /usr/src/contrib/bind9/version

your contents will look something like this:

# This file must follow /bin/sh rules.  It is imported directly via
# configure.
#
MAJORVER=9
MINORVER=3
PATCHVER=3
RELEASETYPE=
RELEASEVER=

Meaning mine, which was updated a few minutes ago, is still at bind 9.3.3 

A.G.

On Thu, Jul 26, 2007 at 10:48:10AM +0200, Zbigniew Szalbot wrote:
> 
> Hello,
> 
> On Thu, 26 Jul 2007 11:36:27 +0300, "Abdullah Ibn Hamad Al-Marri"
> <[EMAIL PROTECTED]> wrote:
> > On 7/25/07, Doug Barton <[EMAIL PROTECTED]> wrote:
> > 
> >> RELENG_6 was updated shortly after the release of 9.3.4. I'll be
> >> updating RELENG_[56] with the new 9.3.4-P1 version after I'm done
> >> regression testing it, which should be some time tonight. Same for
> >> updating HEAD with 9.4.1-P1.
> >>
> >> The ports for bind9 and bind94 are already updated, so those with
> >> urgent needs can use that route to upgrade immediately.
> >>
> >>
> >> hope this helps,
> >>
> >> Doug
> >>
> >> --
> >>
> >> This .signature sanitized for your protection
> >>
> > 
> > Thank you Doug for the hard work, I have updated my 3 boxes which runs
> > BIND 9 }:)
> 
> I am running FreeBSD 6.2-RELEASE-p6 and BIND 9.3.3 (not from ports but
> installed with the system. At least when I do pgk_info -Ix bind I am told
> there is no such package installed). Where can I find information on BIND
> upgrade? I tried freebsd-update but it did not think I needed any updates
> :)
> 
> Thank you in advance!
> 
> -- 
> Zbigniew Szalbot
> 
> _______
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"

-- 
___
A.G. Russell IV  KC5KFDThe Knife Company   e-mail:  [EMAIL PROTECTED]
Phone 479-631-0055 FAX 479-631-8734
Old Klingon Saying --  'oH  majQa' yIn je bang, Qo' bang
---
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Wierd Network problem

2007-05-14 Thread Craig Russell
Yes,
I could use something other than cpanel, and
directadmin was actually one of my choices but
unfortunately, that decision was not mine.  I'm only
responsible for getting the software that was chosen
to work.

My issue with the patch was that it was written for
if_bge.c dated in March 2006 and I actually compiled a
new kernel using the release from December 2006. 
Everything that I read about the bug said that it was
fixed in the 6.2-release tree so I thought that would
be ok. 

Tcpdumps did show massive amounts of bad chksum's from
packets off of the network so it looks as though that
was my issue.  Not sure why it didn't work after the
recompile.  I ended up having to install a new card
and a linksys gigabit card is working nicely now.

Thanks for all of the suggestions.

Craig Russell

--- Martin Hepworth <[EMAIL PROTECTED]> wrote:

> Craig
> 
> applying the patch should be easy enough. You could
> always use something
> better than cpanel, I've always perferred
> directadmin myself.
> 
> --
> martin
> 
> On 5/13/07, Craig Russell <[EMAIL PROTECTED]>
> wrote:
> >
> > Yes, I have tried different cables, even different
> > physical ports (although same type of port). 
> There
> > was a bug filed against 6.1 for the bge interfaces
> > that maybe related, although the bug indicated
> > absolutely no network conductivity.  There was a
> patch
> > released and I'm trying to recompile with that
> patch.
> > I must admit I'm having a hard time figuring out
> how
> > to apply the patch but once I get past that hurdle
> > I'll see what happens.
> >
> > If I can't ge the bge interface working my next
> best
> > solution will be to just install another card in
> one
> > of the pci slots and use that instead.  Ideally, I
> > would upgrade to 6.2 but cpanel won't support 6.2
> so
> > I'm stuck on 6.1 for the time being.
> >
> > Thanks for the reply,
> >
> > Craig Russell
> >
> > --- Martin Hepworth <[EMAIL PROTECTED]> wrote:
> >
> > > Criag
> > >
> > > have you tried cables? Could be a duff network
> cable
> > > or even speed mismatch
> > > between you and the router/switch.
> > >
> > > -
> > > martin
> > >
> > > On 5/12/07, Craig Russell
> <[EMAIL PROTECTED]>
> > > wrote:
> > > >
> > > > I have a dell poweredge 6650 installed with
> > > freebsd
> > > > 6.1 and on the local router, everything works
> > > great
> > > > (ie, a computer on a different subnet off the
> same
> > > > router can access it fine) but coming from
> outside
> > > of
> > > > the network access is incredibly slow.  My
> first
> > > > thought was that it must be a routing issue,
> but I
> > > > have two other freebsd 6.1 servers on that
> same
> > > subnet
> > > > and I can access them fine from outside.  I
> dug a
> > > > little further and compared the servers that
> are
> > > > working with those that are not and these are
> the
> > > > differences that I have found.
> > > >
> > > > On the servers that are working (dell
> poweredge
> > > > 2450's) the interface is an fxp0 and here is
> the
> > > > output of ifconfig:
> > > > fxp0:
> > > >
> flags=8843
> > > mtu
> > > > 1500
> > > > options=8
> > > > inet6 fe80::2b0:d0ff:fee1:f66a%fxp0 prefixlen
> 64
> > > > scopeid 0x1
> > > > inet 64.25.218.2 netmask 0xff80 broadcast
> > > > 64.25.218.127
> > > > ether 00:b0:d0:e1:f6:6a
> > > > media: Ethernet autoselect (100baseTX
> > > )
> > > > status: active
> > > >
> > > > on the server that is not working:
> > > >
> > > > bge0:
> > > >
> flags=8843
> > > mtu
> > > > 1500
> > > >
> options=1b
> > > > inet6 fe80::211:43ff:fedc:9aa2%bge0 prefixlen
> 64
> > > > scopeid 0x1
> > > > inet 64.25.218.10 netmask 0xff80 broadcast
> > > > 64.25.218.127
> > > > ether 00:11:43:dc:9a:a2
> > > > media: Ethernet autoselect (100baseTX
> > > )
> > > > status: active
> > > >
> > > > The first thing that i noticed is that on the
> > > option
> > > > line there is quite a bit of difference
> between
> > > the
> > > > tw

Re: Wierd Network problem

2007-05-13 Thread Craig Russell
Yes, I have tried different cables, even different
physical ports (although same type of port).  There
was a bug filed against 6.1 for the bge interfaces
that maybe related, although the bug indicated
absolutely no network conductivity.  There was a patch
released and I'm trying to recompile with that patch. 
I must admit I'm having a hard time figuring out how
to apply the patch but once I get past that hurdle
I'll see what happens.

If I can't ge the bge interface working my next best
solution will be to just install another card in one
of the pci slots and use that instead.  Ideally, I
would upgrade to 6.2 but cpanel won't support 6.2 so
I'm stuck on 6.1 for the time being.

Thanks for the reply,

Craig Russell

--- Martin Hepworth <[EMAIL PROTECTED]> wrote:

> Criag
> 
> have you tried cables? Could be a duff network cable
> or even speed mismatch
> between you and the router/switch.
> 
> -
> martin
> 
> On 5/12/07, Craig Russell <[EMAIL PROTECTED]>
> wrote:
> >
> > I have a dell poweredge 6650 installed with
> freebsd
> > 6.1 and on the local router, everything works
> great
> > (ie, a computer on a different subnet off the same
> > router can access it fine) but coming from outside
> of
> > the network access is incredibly slow.  My first
> > thought was that it must be a routing issue, but I
> > have two other freebsd 6.1 servers on that same
> subnet
> > and I can access them fine from outside.  I dug a
> > little further and compared the servers that are
> > working with those that are not and these are the
> > differences that I have found.
> >
> > On the servers that are working (dell poweredge
> > 2450's) the interface is an fxp0 and here is the
> > output of ifconfig:
> > fxp0:
> > flags=8843
> mtu
> > 1500
> > options=8
> > inet6 fe80::2b0:d0ff:fee1:f66a%fxp0 prefixlen 64
> > scopeid 0x1
> > inet 64.25.218.2 netmask 0xff80 broadcast
> > 64.25.218.127
> > ether 00:b0:d0:e1:f6:6a
> > media: Ethernet autoselect (100baseTX
> )
> > status: active
> >
> > on the server that is not working:
> >
> > bge0:
> > flags=8843
> mtu
> > 1500
> > options=1b
> > inet6 fe80::211:43ff:fedc:9aa2%bge0 prefixlen 64
> > scopeid 0x1
> > inet 64.25.218.10 netmask 0xff80 broadcast
> > 64.25.218.127
> > ether 00:11:43:dc:9a:a2
> > media: Ethernet autoselect (100baseTX
> )
> > status: active
> >
> > The first thing that i noticed is that on the
> option
> > line there is quite a bit of difference between
> the
> > two.  So using the command line ifconfig tool I
> > removed RXCSUM, TXCSUM from the bge0 interface.
> > Voila!  Speed increased and the server was
> actually
> > accessible from off net.  Unfortunately, as soon
> as I
> > tried to access any other port, the interface
> crashes.
> > Eventually the watchdog picks up on that and
> restarts
> > the interface.  But the problem is completely
> > repeatable.
> >
> > The server that I am having problems with is
> running
> > cpanel 10.9; the two that are working are running
> the
> > dns-only version of cpanel.  I am not picking up
> any
> > errors in the logs.  This could be related to
> cpanel,
> > or not, I'm not really sure, although it shouldn't
> be.
> >
> > The other unique thing about the setup, that very
> well
> > may be affecting is that the router in question
> has
> > two subnets configured on the internal port. 
> There is
> > a nat'd subnet for our local users and there is
> the
> > public subnet that these servers sit on.  The
> final
> > resting place for all three is in a datacenter
> that
> > isn't built yet, so rather than reconfigure
> everything
> > once that was done I simply routed the final
> subnet to
> > our office and set it up their.  The router is a
> > mikrotik RB112 board which only has one ethernet
> port
> > so I couldn't dedicate a port for the new subnet. 
> As
> > I said, my first thought was that the problem was
> in
> > the router, but the other two servers are running
> > fine.
> >
> > Any suggestions?
> >
> > Thank you,
> > Craig Russell
> > ___
> > freebsd-questions@freebsd.org mailing list
> >
>
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> > To unsubscribe, send any mail to "
> > [EMAIL PROTECTED]"
> >
> ___
> freebsd-questions@freebsd.org mailing list
>
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
> 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Wierd Network problem

2007-05-12 Thread Craig Russell
I have a dell poweredge 6650 installed with freebsd
6.1 and on the local router, everything works great
(ie, a computer on a different subnet off the same
router can access it fine) but coming from outside of
the network access is incredibly slow.  My first
thought was that it must be a routing issue, but I
have two other freebsd 6.1 servers on that same subnet
and I can access them fine from outside.  I dug a
little further and compared the servers that are
working with those that are not and these are the
differences that I have found.

On the servers that are working (dell poweredge
2450's) the interface is an fxp0 and here is the
output of ifconfig:
fxp0:
flags=8843 mtu
1500
options=8
inet6 fe80::2b0:d0ff:fee1:f66a%fxp0 prefixlen 64
scopeid 0x1
inet 64.25.218.2 netmask 0xff80 broadcast
64.25.218.127
ether 00:b0:d0:e1:f6:6a
media: Ethernet autoselect (100baseTX )
status: active

on the server that is not working:

bge0:
flags=8843 mtu
1500
options=1b
inet6 fe80::211:43ff:fedc:9aa2%bge0 prefixlen 64
scopeid 0x1
inet 64.25.218.10 netmask 0xff80 broadcast
64.25.218.127
ether 00:11:43:dc:9a:a2
media: Ethernet autoselect (100baseTX )
status: active

The first thing that i noticed is that on the option
line there is quite a bit of difference between the
two.  So using the command line ifconfig tool I
removed RXCSUM, TXCSUM from the bge0 interface. 
Voila!  Speed increased and the server was actually
accessible from off net.  Unfortunately, as soon as I
tried to access any other port, the interface crashes.
 Eventually the watchdog picks up on that and restarts
the interface.  But the problem is completely
repeatable.

The server that I am having problems with is running
cpanel 10.9; the two that are working are running the
dns-only version of cpanel.  I am not picking up any
errors in the logs.  This could be related to cpanel,
or not, I'm not really sure, although it shouldn't be.

The other unique thing about the setup, that very well
may be affecting is that the router in question has
two subnets configured on the internal port.  There is
a nat'd subnet for our local users and there is the
public subnet that these servers sit on.  The final
resting place for all three is in a datacenter that
isn't built yet, so rather than reconfigure everything
once that was done I simply routed the final subnet to
our office and set it up their.  The router is a
mikrotik RB112 board which only has one ethernet port
so I couldn't dedicate a port for the new subnet.  As
I said, my first thought was that the problem was in
the router, but the other two servers are running
fine.

Any suggestions?

Thank you, 
Craig Russell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Missing perl module is messing everything up

2007-05-10 Thread Craig Russell
Try running "perl -MCPAN -e shell" as root.

That should take you to a cpan> prompt from there type
"install XML::Parser"

If that completes succesfully hit exit and try to
install what you were looking for.

Hope this helps

Craig Russell
--- David LeCount <[EMAIL PROTECTED]> wrote:

> Ahoy. Every time I try to upgrade a program that
> depends on Perl, I get this error:
> 
> checking for XML::Parser... configure: error:
> XML::Parser perl module is required for intltool
> 
> I've tried a portupgrade -fRra to no avail. I'm not
> sure if I'm missing a package (pkgdb -F doesn't show
> anything) or something is configured incorrectly.
> I've
> done a search and came up with nothing. I could use
> a
> little help.
> 
> __
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam
> protection around 
> http://mail.yahoo.com 
> ___
> freebsd-questions@freebsd.org mailing list
>
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
> 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: How to make Apache (2.2.4) less greedy, or Sendmail less polite?

2007-05-03 Thread Wood, Russell

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:owner-freebsd-
> [EMAIL PROTECTED] On Behalf Of Olaf Greve
> Sent: Friday, 4 May 2007 6:16 AM
> To: freebsd-questions@freebsd.org; [EMAIL PROTECTED]
> Subject: How to make Apache (2.2.4) less greedy, or Sendmail less
polite?
> 
> Hi,
> 
> Recently I upgraded my Apache 1.3.33 webserver to Apache 2.2.4, and
> ever since, I noticed that it is acting in such a way that it often
> is VERY greedy with my server's resources.
> Quite often, when running "top", a list that is as the one that
> appears at the bottom of this e-mail is shown: indeed pretty much
> solely httpd instances, that for extended periods of time almost
> continously pull the CPU to close to 100%, and that also consume a
> lot of the memory resources... Strangely enough, at other times the
> CPU load is just slightly above 0%, say 0.4% or so...
> 
> Apart from the fact that it "doesn't feel right" to see the CPU for
> substantial amounts of time, almost constantly close to 100%, there
> is a further issue, being that sendmail rejects connections when the
> server load is (too) high. This is very annoying, as e-mail is also a
> crucial part of the server's functionality, and I don't want sendmail
> to reject connections, each and every time that Apache goes berserk.

Is there any reason you are using Apache over another HTTP Daemon?

Personally, I think Apache has gone down hill with regard to gluttony so
I stopped using it a while ago. My preference is now Lighttpd.

NB: Sorry about previous post. Outlook went crazy.

- Russell


DISCLAIMER:
Disclaimer.  This e-mail is private and confidential. If you are not the 
intended recipient, please advise us by return e-mail immediately, and delete 
the e-mail and any attachments without using or disclosing the contents in any 
way. The views expressed in this e-mail are those of the author, and do not 
represent those of this company unless this is clearly indicated. You should 
scan this e-mail and any attachments for viruses. This company accepts no 
liability for any direct or indirect damage or loss resulting from the use of 
any attachments to this e-mail.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: How to make Apache (2.2.4) less greedy, or Sendmail less polite?

2007-05-03 Thread Wood, Russell

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:owner-freebsd-
> [EMAIL PROTECTED] On Behalf Of Olaf Greve
> Sent: Friday, 4 May 2007 6:16 AM
> To: freebsd-questions@freebsd.org; [EMAIL PROTECTED]
> Subject: How to make Apache (2.2.4) less greedy, or Sendmail less
polite?
> 
> Hi,
> 
> Recently I upgraded my Apache 1.3.33 webserver to Apache 2.2.4, and
> ever since, I noticed that it is acting in such a way that it often
> is VERY greedy with my server's resources.
> Quite often, when running "top", a list that is as the one that
> appears at the bottom of this e-mail is shown: indeed pretty much
> solely httpd instances, that for extended periods of time almost
> continously pull the CPU to close to 100%, and that also consume a
> lot of the memory resources... Strangely enough, at other times the
> CPU load is just slightly above 0%, say 0.4% or so...
> 
> Apart from the fact that it "doesn't feel right" to see the CPU for
> substantial amounts of time, almost constantly close to 100%, there
> is a further issue, being that sendmail rejects connections when the
> server load is (too) high. This is very annoying, as e-mail is also a
> crucial part of the server's functionality, and I don't want sendmail
> to reject connections, each and every time that Apache goes berserk.



DISCLAIMER:
Disclaimer.  This e-mail is private and confidential. If you are not the 
intended recipient, please advise us by return e-mail immediately, and delete 
the e-mail and any attachments without using or disclosing the contents in any 
way. The views expressed in this e-mail are those of the author, and do not 
represent those of this company unless this is clearly indicated. You should 
scan this e-mail and any attachments for viruses. This company accepts no 
liability for any direct or indirect damage or loss resulting from the use of 
any attachments to this e-mail.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD 6.2 Boot Issue

2007-04-26 Thread Craig Russell
Sorry if this is obvious but I just did this myself
with similar problems.  Is your /boot a seperate
partition?  If so, bsd will not boot.  It will happily
install but will come back with a no kernel found
error or similar.  I believe this is because only the
/ partition is mounted at that point. 

Hope this helps.

Craig Russell

--- [EMAIL PROTECTED] wrote:

> I have installed FreeBSD 6.2 on an HP Proliant G5
> server with an E200i
> Smart Controller installed.  The installation was
> flawless.
> 
> When I reboot the server after the installation, the
> boot loader screen is
> displayed.  I press F1 and the system beeps and
> comes back to the boot
> loader prompt.
> 
> What should I be looking at?  I am at a loss since I
> usually end up with
> leftover hardware and this time I acutally got to
> purchase new hardware
> just for this project.
> 
> Any suggestions would be greatly appreciated.
> 
> Thanks for your help.
> 
> Jay
> 
> ___
> freebsd-questions@freebsd.org mailing list
>
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
> 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Backup media choices for FreeBSD servers

2007-04-23 Thread Wood, Russell

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:owner-freebsd-
> [EMAIL PROTECTED] On Behalf Of Daniel Marsh
> Sent: Tuesday, 24 April 2007 8:21 AM
> To: L Goodwin
> Cc: freebsd-questions@freebsd.org
> Subject: Re: Backup media choices for FreeBSD servers
> 
> On 4/24/07, L Goodwin <[EMAIL PROTECTED]> wrote:
> >
> > I need to implement an automated backup facility on the FreeBSD file
> > server I'm setting up for a client. It will have a software RAID 1
> > Mirror/Duplex that is made available to Windows XP SP2 and Windows
Vista
> > Home Premium users as a Samba share.  I also plan to create system
> recovery
> > disks (disk images) for the server and each Windows client.

I dump (man dump) my array to a spare 250GB disk within my server.

- Russell


DISCLAIMER:
Disclaimer.  This e-mail is private and confidential. If you are not the 
intended recipient, please advise us by return e-mail immediately, and delete 
the e-mail and any attachments without using or disclosing the contents in any 
way. The views expressed in this e-mail are those of the author, and do not 
represent those of this company unless this is clearly indicated. You should 
scan this e-mail and any attachments for viruses. This company accepts no 
liability for any direct or indirect damage or loss resulting from the use of 
any attachments to this e-mail.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: route

2007-04-12 Thread Wood, Russell


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:owner-freebsd-
> [EMAIL PROTECTED] On Behalf Of Miguel Alcántara
> Sent: Friday, 13 April 2007 5:55 AM
> To: faqfreebsd
> Subject: route
> 
> hello all the people, i want to configure a freebsd 6.2 as a router, in
> rc.conf added this line
> 
> router_enable="YES"
> 
> it's ip is 192.168.1.33
> 
> then i have two PCs, one with freebsd(10.0.0.15) and another with debian(
> 192.168.1.34), but i can't realize if I must configure something in the
> others two  machines
>  the pourpose of this is to get communicated the freebsd(10.0.0.15) with
> debian(192.168.1.34).
> 
> thanks in advance for your help.
> 
> 
> --
> $ miguel_alcántara $

http://www.freebsddiary.org/gateway.php


DISCLAIMER:
Disclaimer.  This e-mail is private and confidential. If you are not the 
intended recipient, please advise us by return e-mail immediately, and delete 
the e-mail and any attachments without using or disclosing the contents in any 
way. The views expressed in this e-mail are those of the author, and do not 
represent those of this company unless this is clearly indicated. You should 
scan this e-mail and any attachments for viruses. This company accepts no 
liability for any direct or indirect damage or loss resulting from the use of 
any attachments to this e-mail.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Cant boot fresh install of freebsd 6.2 or dell poweredge 6650

2007-04-12 Thread Craig Russell
Very newbie mistake, which I finally figured out. 
That will teach me to read the vendors instructions
more carefully than the OS documentation.  Basically
the problem was that I followed the instructions of
the software that I will be installing on this server
for the partitioning scheme.  They recommended a
seperate partition for "boot" and this evidently does
not work for freebsd, which makes sense since it
probably isn't mounted at boot time.  As I was looking
through the bsd install guides, I noticed this was
never done so I gave that a try and voila!, everything
works as expected.

Thanks

Craig Russell

--- Derek Ragona <[EMAIL PROTECTED]>
wrote:

> At 09:21 AM 4/12/2007, Craig Russell wrote:
> >I am a newbie using freebsd and have run into a
> >problem on a new install on a dell poweredge 6650. 
> I
> >am installing to a hardeware raid 1 on an LSI Logic
> >raid controller.  The installation appears to go
> well
> >but after a reboot the freebsd boot manager comes
> up
> >with F1 to boot Freebsd (or default) and then it
> >complains of no boot loader followed by a "no
> >/boot/kernel/kernel" error.
> >
> >The default boot parameter is
> >0:ad(0,d)/boot/kernel/kernel
> >
> >I've tried different slices with the same results. 
> I
> >have tried using the MBR instead of the freebsd
> boot
> >manager.  I have tried different bios settings on
> the
> >raid card (LSI logic in the poweredge 6650).  I'm
> not
> >really sure what to try next.  I've even tried to
> >install it on a different machine on a single sata
> >drive with the same result.  I am obviously doing
> >something wrong but I can't for the life of me
> figure
> >out what it is.
> >
> >Thank you for any help or direction you can
> provide.
> 
> If you have tried on two systems, one with a
> standard IDE/SATA drive and 
> that failed to boot as well, I would suspect the
> install media is bad.  I 
> would download a new ISO and burn a new cd.  You
> might try an ISO from a 
> different mirror.  It is possible your CD is foobar.
>  Be sure you get the 
> correct disk 1 ISO from whatever mirror you use.
> 
>  -Derek
> 
> -- 
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> MailScanner thanks transtec Computers for their
> support.
> 
> 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Cant boot fresh install of freebsd 6.2 or dell poweredge 6650

2007-04-12 Thread Craig Russell
I am a newbie using freebsd and have run into a
problem on a new install on a dell poweredge 6650.  I
am installing to a hardeware raid 1 on an LSI Logic
raid controller.  The installation appears to go well
but after a reboot the freebsd boot manager comes up
with F1 to boot Freebsd (or default) and then it
complains of no boot loader followed by a "no
/boot/kernel/kernel" error.

The default boot parameter is
0:ad(0,d)/boot/kernel/kernel

I've tried different slices with the same results.  I
have tried using the MBR instead of the freebsd boot
manager.  I have tried different bios settings on the
raid card (LSI logic in the poweredge 6650).  I'm not
really sure what to try next.  I've even tried to
install it on a different machine on a single sata
drive with the same result.  I am obviously doing
something wrong but I can't for the life of me figure
out what it is.

Thank you for any help or direction you can provide.

Craig Russell
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: ad0: TIMEOUT - Is my disk dying?

2007-03-29 Thread Wood, Russell
> -Original Message-
> From: Guido Demmenie [mailto:[EMAIL PROTECTED]
> Sent: Friday, 30 March 2007 3:15 PM
> To: Wood, Russell
> Cc: FreeBSD Users Questions
> Subject: Re: ad0: TIMEOUT - Is my disk dying?
> 
> 
> On Mar 30, 2007, at 9:09 AM, Wood, Russell wrote:
> 
> >> -Original Message-
> >> From: [EMAIL PROTECTED] [mailto:owner-freebsd-
> >> [EMAIL PROTECTED] On Behalf Of Guido Demmenie
> >> Sent: Friday, 30 March 2007 3:00 PM
> >> To: Christian Walther
> >> Cc: FreeBSD Users Questions
> >> Subject: Re: ad0: TIMEOUT - Is my disk dying?
> >>
> >>
> >> On Mar 29, 2007, at 11:20 PM, Christian Walther wrote:
> >>
> >>> Hi,
> >>>
> >>> I'm seeing a lot of the following messages lately:
> >>>
> >>> Mar 29 21:02:01 pixie kernel: ad0: TIMEOUT - READ_DMA retrying (1
> >>> retry left) LBA=13554983
> >>> Mar 29 21:02:34 pixie kernel: ad0: TIMEOUT - READ_DMA retrying (1
> >>> retry left) LBA=35376691
> >>>
> >>
> >> You also might want to give smartmontools a try. This can be found
> >> in the portscollection (sysutils/smartmontools). This will query
> >> the SMART tool built in most IDE drives. You can let the harddrive
> >> do a selfcheck. And gather some statistics from your drive.
> >>
> >> --
> >> Guido
> >
> > When you have a suspected faulty hard drive, the last thing you
> > want to
> > do is use it.
> 
> > - Russell
> 
> Can you tell me why?
> 
> --
> Guido

Sure. If you install software when your hard drive has bad sectors then
the software your installing may be written around those areas, possibly
won't run properly (if at all) and cause the system to become unstable
which would then result in further data loss. Also, bad sectors are like
a disease and continue to `spread' the more it's used.

- Russell


DISCLAIMER:
Disclaimer.  This e-mail is private and confidential. If you are not the 
intended recipient, please advise us by return e-mail immediately, and delete 
the e-mail and any attachments without using or disclosing the contents in any 
way. The views expressed in this e-mail are those of the author, and do not 
represent those of this company unless this is clearly indicated. You should 
scan this e-mail and any attachments for viruses. This company accepts no 
liability for any direct or indirect damage or loss resulting from the use of 
any attachments to this e-mail.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: ad0: TIMEOUT - Is my disk dying?

2007-03-29 Thread Wood, Russell
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:owner-freebsd-
> [EMAIL PROTECTED] On Behalf Of Guido Demmenie
> Sent: Friday, 30 March 2007 3:00 PM
> To: Christian Walther
> Cc: FreeBSD Users Questions
> Subject: Re: ad0: TIMEOUT - Is my disk dying?
> 
> 
> On Mar 29, 2007, at 11:20 PM, Christian Walther wrote:
> 
> > Hi,
> >
> > I'm seeing a lot of the following messages lately:
> >
> > Mar 29 21:02:01 pixie kernel: ad0: TIMEOUT - READ_DMA retrying (1
> > retry left) LBA=13554983
> > Mar 29 21:02:34 pixie kernel: ad0: TIMEOUT - READ_DMA retrying (1
> > retry left) LBA=35376691
> >
> 
> You also might want to give smartmontools a try. This can be found
> in the portscollection (sysutils/smartmontools). This will query
> the SMART tool built in most IDE drives. You can let the harddrive
> do a selfcheck. And gather some statistics from your drive.
> 
> --
> Guido

When you have a suspected faulty hard drive, the last thing you want to
do is use it. If you want additional confirmation (which I doubt you
need as what you have printed is ample) then try Seatools from Seagate.
It's free and runs of a CDROM.

- Russell


DISCLAIMER:
Disclaimer.  This e-mail is private and confidential. If you are not the 
intended recipient, please advise us by return e-mail immediately, and delete 
the e-mail and any attachments without using or disclosing the contents in any 
way. The views expressed in this e-mail are those of the author, and do not 
represent those of this company unless this is clearly indicated. You should 
scan this e-mail and any attachments for viruses. This company accepts no 
liability for any direct or indirect damage or loss resulting from the use of 
any attachments to this e-mail.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: ad0: TIMEOUT - Is my disk dying?

2007-03-29 Thread Wood, Russell


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:owner-freebsd-
> [EMAIL PROTECTED] On Behalf Of Christian Walther
> Sent: Friday, 30 March 2007 5:21 AM
> To: FreeBSD Users Questions
> Subject: ad0: TIMEOUT - Is my disk dying?
> 
> Hi,
> 
> I'm seeing a lot of the following messages lately:
> 
> Mar 29 21:02:01 pixie kernel: ad0: TIMEOUT - READ_DMA retrying (1
> retry left) LBA=13554983
> ...
> Mar 29 21:52:59 pixie kernel: ad0: TIMEOUT - READ_DMA retrying (1
> retry left) LBA=4663
> 
> 
> Christian

You have bad sectors on your hard drive. Buy a new one now if your data
is of any importance.

- Russell


DISCLAIMER:
Disclaimer.  This e-mail is private and confidential. If you are not the 
intended recipient, please advise us by return e-mail immediately, and delete 
the e-mail and any attachments without using or disclosing the contents in any 
way. The views expressed in this e-mail are those of the author, and do not 
represent those of this company unless this is clearly indicated. You should 
scan this e-mail and any attachments for viruses. This company accepts no 
liability for any direct or indirect damage or loss resulting from the use of 
any attachments to this e-mail.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Installing xPDF on a shared server

2007-03-20 Thread Brent Russell

I need to install xPDF on a shared server at ipower.  I am completely new to
this, and do not understand the command lines.  In elementary terms, can you
help me with step-by-step instructions?  I've contacted ipower and Derek at
xPDF, and they were unable to help with installing xPDF on the shared
server.  I understand that its frustrating explaining this to someone as who
knows nothing about freebsd, ports, etc.  The instructions listed below have
only confused me more.  I dont know where to issue commands, etc.

6.4.3 Xpdf

If you want a small FreeBSD PDF viewer, *Xpdf* is a light-weight and
efficient viewer. It requires very few resources and is very stable. It uses
the standard X fonts and does not require *Motif(r)* or any other X toolkit.

To install the *Xpdf* package, issue this command:

# pkg_add -r xpdf

If the package is not available or you prefer to use the Ports Collection,
do:

# cd /usr/ports/graphics/xpdf
# make install clean

Once the installation is complete, you can launch *Xpdf* and use the right
mouse button to activate the menu.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: RAID failure with READ_DMA status=51 - how to avoid again?

2007-02-28 Thread Wood, Russell

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:owner-freebsd-
> [EMAIL PROTECTED] On Behalf Of Oliver Iberien
> Sent: Thursday, 1 March 2007 10:02 AM
> To: freebsd-questions@freebsd.org
> Subject: RAID failure with READ_DMA status=51 - how to avoid again?
> 
> I would like to RAID my system but am wondering if I am asking for
> trouble,
> given that I got some kind of read failure error followed by file
system
> corruption the first time I did it. Would it be reasonable for me to
try
> RAIDing again, and if so, under what conditions? Details are as
follows:
> 
> I moved my home FreeBSD 6.0 system, which had previously been on a
single
> IDE
> drive, onto two SATA drives (set to 3.0 G) in a RAID-1 array, with
> hardware
> raid (Nvidia) on the motherboard (ASUS A8N-E). I used dump as
instructed
> in
> the FreeBSD FAQ. This went okay.
> 
> I then installed a third, large (400GB) SATA drive and backed up the
> system on
> the RAID (minus /proc, /tmp, and so on) to it using rdiff-backup. This
> seemed
> to go OK.
> 
> Then, when I shut down immediately afterwards, I saw this:
> Feb 27 08:43:19 bsd kernel: ad8: FAILURE - READ_DMA
> status=51
> error=40 LBA=146193935
> Feb 27 08:43:19 bsd kernel: ar0: WARNING - mirror protection lost.
RAID1
> array
> in DEGRADED mode
> Feb 27 08:43:19 bsd kernel: ar0: writing of nVidia MediaShield
metadata is
> NOT
> supported yet
> 
> I rebooted, the message from the bios that the RAID was healthy came
up,
> but
> FreeBSD said the file system was not healthy, and I had to run fsck
about
> five times for it to come up clean. The system booted to desktop,
crashed
> after about ten seconds, rebooted, and turned up with a dirty
filesytem
> again.
> 
> I have since dismantled RAID, removed one of the SATA drives, fsck'ed
> repeatedly, and then reinstalled KDE, figuring that that as it only
> crashed
> when it had finished loading the desktop, that something might be
amiss
> there. The system is running again.
> 
> All the drives are brand new, as is the cabling. The drives show up in
> messages as "SATA150" (is 3.0G not supported in FreeBSD?), although
the
> board
> supports 3.0G transfer rates. There is an errata sheet in the
motherboard
> manual with a matrix indicating on which drive, given multiple SATA
> drives,
> the OS should be installed. It's silent on why this is advised and on
the
> subject of the proper order if RAID is involved. Extended offline
SMART
> test
> on the current drive with smartctl completed without error and
overall-
> health
> self-assessment test result: PASSED. Thanks in advance for any advice.
> 
> Oliver

I would suggest downloading FreeSBIE, booting from it and running a dd
on your drives to see if it picks up any bad sectors:

dd if=/dev/adN of=/dev/null bs=1m conv=noerror

Regards,
Russell Wood


DISCLAIMER:
Disclaimer.  This e-mail is private and confidential. If you are not the 
intended recipient, please advise us by return e-mail immediately, and delete 
the e-mail and any attachments without using or disclosing the contents in any 
way. The views expressed in this e-mail are those of the author, and do not 
represent those of this company unless this is clearly indicated. You should 
scan this e-mail and any attachments for viruses. This company accepts no 
liability for any direct or indirect damage or loss resulting from the use of 
any attachments to this e-mail.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Memory test

2007-02-05 Thread Wood, Russell
> -Original Message-
> Subject: Memory test
> 
> I need to checkout memory on a remote machine. I see there is memtest
and
> memtest86 out there. Which one is appropriate for my situation?: CPU
is a
> dual cpu, dual core SMP Intel Xeon. Can I run either program while the
> machine is performing other tasks?**
> 
> 
> --
> Yudhvir Singh Sidhu

No, Memtest must be ran from the CD (e.g. boot of the CD) so that is not
a good solution for a remote test. I don't know of any that can be run
remotely.

Regards,
Russell Wood


DISCLAIMER:
Disclaimer.  This e-mail is private and confidential. If you are not the 
intended recipient, please advise us by return e-mail immediately, and delete 
the e-mail and any attachments without using or disclosing the contents in any 
way. The views expressed in this e-mail are those of the author, and do not 
represent those of this company unless this is clearly indicated. You should 
scan this e-mail and any attachments for viruses. This company accepts no 
liability for any direct or indirect damage or loss resulting from the use of 
any attachments to this e-mail.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Which version of Opera to use?

2007-01-28 Thread Wood, Russell
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:owner-freebsd-
> [EMAIL PROTECTED] On Behalf Of Greg 'groggy' Lehey
> Sent: Monday, 29 January 2007 10:22 AM
> To: Gerard Seibert
> Cc: freebsd-questions@freebsd.org
> Subject: Re: Which version of Opera to use?
> 
> On Saturday, 27 January 2007 at  9:13:19 -0500, Gerard Seibert wrote:
> > I have been thinking of trying Opera in KDE to see if it works
better
> > than Firefox. I have been having nothing but problems with Firefox
and
> > Flash.
> >
> > Would I be better off trying Opera or Linux-Opera? Both are offered
in
> > the ports.
> 
> I'd recommend native Opera.  I've heard recently from people at Opera
> who are very keen to ensure that it works well on FreeBSD, so it makes
> sense to help them.
> 
> Greg
> --
> When replying to this message, please copy the original recipients.
> If you don't, I may ignore the reply or reply to the original
recipients.
> For more information, see http://www.lemis.com/questions.html
> See complete headers for address and phone numbers.

I've always used the native version of Opera on FreeBSD and it's always
worked well.

Regards,
Russell Wood


DISCLAIMER:
Disclaimer.  This e-mail is private and confidential. If you are not the 
intended recipient, please advise us by return e-mail immediately, and delete 
the e-mail and any attachments without using or disclosing the contents in any 
way. The views expressed in this e-mail are those of the author, and do not 
represent those of this company unless this is clearly indicated. You should 
scan this e-mail and any attachments for viruses. This company accepts no 
liability for any direct or indirect damage or loss resulting from the use of 
any attachments to this e-mail.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Very Poor Raid Card Performance

2007-01-16 Thread Wood, Russell
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:owner-freebsd-
> [EMAIL PROTECTED] On Behalf Of Ivan Voras
> Sent: Wednesday, 17 January 2007 7:04 AM
> To: freebsd-questions@freebsd.org
> Subject: Re: Very Poor Raid Card Performance
> 
> Steven Lowry wrote:
> 
> > The main problem is my HD performance, it is approx 6x slower than
in
> > windows XP, hopefully there is a solution. I have an LSI Megaraid 8x
> with
> > four drives in a raid 5 configuration, in windows I was getting upto
> 60MB/s
> > transfer rates but in FBSD I am getting upto 9MB/s. I followed the

I have an LSI MegaRaid with three drives at RAID 5: works a
god-damn-treat. I don't know what my throughput is on RAID 5 but RAID 0
was fast (70MB/s+).

Were you doing these tests a few hours after initializing the array, by
any chance? If so, then the poor performance could be because the array
was `in build' while you were using it, and therefore you'd get very
poor performance.

Regards,
Russell Wood


DISCLAIMER:
Disclaimer.  This e-mail is private and confidential. If you are not the 
intended recipient, please advise us by return e-mail immediately, and delete 
the e-mail and any attachments without using or disclosing the contents in any 
way. The views expressed in this e-mail are those of the author, and do not 
represent those of this company unless this is clearly indicated. You should 
scan this e-mail and any attachments for viruses. This company accepts no 
liability for any direct or indirect damage or loss resulting from the use of 
any attachments to this e-mail.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: apache2.2 php5.1 mysql5

2007-01-07 Thread Russell E. Meek

Quoting Jonathan Horne <[EMAIL PROTECTED]>:


On Sunday 07 January 2007 19:24, tethys ocean wrote:

Hi

I have FreeBSD 6.1 installed Apache 2.2 Mysql5  and also PHP5.1 but PHP5
doesnt work  Are there anybody works together it?


I did it such kinds of setting.

apache22_enable="YES"
mysql_enable="YES"

AddType application/x-httpd-php .php
AddType application/x-httpd-php-source .phps


did you add to DirectoryIndex

index.php ?

hth,
jonathan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"



If you built php5 from ports did you remember to select the Apache  
option to include the apache module?


/usr/ports/lang/php5
make config
Apache - Build Apache module





___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: gmirror on root filesystem

2007-01-04 Thread Russell E. Meek

Quoting Josh Paetzel <[EMAIL PROTECTED]>:


I'm trying to use gmirror on my root filesystem.  I've set sysctl
kern.geom.debugflags to 16 and yet can't label the root partition.

# gmirror label -v root /dev/ad4s1a
Can't store metadata on /dev/ad4s1a: Operation not permitted.

I was able to do this for /var and /usr while they were mounted.
Unless someone has any ideas the only solution I see is to put this
disk in a different box to create the mirror.

--
Thanks,

Josh Paetzel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"



Josh,

If using Kernel Secure Levels input the following into rc.conf and reboot.

kern_securelevel_enable="NO"

Thanks,

Russell



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Help

2006-12-28 Thread Wood, Russell
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:owner-freebsd-
> [EMAIL PROTECTED] On Behalf Of rythms1
> Sent: Friday, 29 December 2006 7:12 AM
> To: [EMAIL PROTECTED]
> Subject: Help
> 
> I have try to make a desktop computer just to use BSD as a stand alone
> desktop ...I had a friend to help and even with his help we
> haven't manage to load up KDE or Gnome.it was partly
> load up at the begining but it was very slow even with GNome and could
> not find the host .like I call the computer OGUN , it
> had trouble finding the host,so I load hte system
again
> it is in a old AMD 700 with over 600 SDRAM memory and a old 16 megs
> NVIDIA video card.but it should work
> ...My friend Colin went into TTY to get X11 to
work
> but no luck it work but it took to long to load up as well as getting
> anything to run.at the end manage to get KDE to run
but
> again to slow and many of the programs didn't work at all still would
> not see the name of the computer OGUN ..so I went
to
> FREE BSD page had a look and saw what to do after I load the system
> again ..load everything I could, all the X11 just  to make
> sure...but since I only know very little comand line not
> like Colin knows lots and works with Debian Linux and makes its own OS
> out of Debian.he was a bit confuse.so how can I use the
keyboard
> to turn on
> 
> ttyv8   "/usr/X11R6/bin/xdm -nodaemon"  xterm   off secure...
> everytime I try to type it in the keyboard it does something else so
is
> any way one has to work with the keyboard to type on for the X11R6
> to work.
> I just wanna use BSD so I can get use to it, and then use it on my
other
> boxes ,I got with Debian linux Colin say that BSD is more secure
> than Debian linux so I like to try it . Can you please give some hints
in
> how to make it work as a desktop at home and surf the net and burn
cd's
> that all I want to do and word as well
> but for now I only want the desktop running.
> 
> 
> Julio  :-(

This is the sort of post I'd expect from a Bigpond luser.

Read: http://www.freebsd.org/

Regards,
Russell Wood


DISCLAIMER:
Disclaimer.  This e-mail is private and confidential. If you are not the 
intended recipient, please advise us by return e-mail immediately, and delete 
the e-mail and any attachments without using or disclosing the contents in any 
way. The views expressed in this e-mail are those of the author, and do not 
represent those of this company unless this is clearly indicated. You should 
scan this e-mail and any attachments for viruses. This company accepts no 
liability for any direct or indirect damage or loss resulting from the use of 
any attachments to this e-mail.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: acrobatviewer

2006-12-19 Thread Wood, Russell
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:owner-freebsd-
> [EMAIL PROTECTED] On Behalf Of Stevan Tiefert
> Sent: Wednesday, 20 December 2006 3:43 AM
> To: freebsd-questions@freebsd.org
> Cc: Nathan Vidican
> Subject: Re: acrobatviewer
> 
> Am Dienstag, 19. Dezember 2006 19:33 schrieb Nathan Vidican:
> > Stevan Tiefert wrote:
> > > Am Montag, 18. Dezember 2006 23:54 schrieb Wood, Russell:
> > >>> -Original Message-
> > >>> From: [EMAIL PROTECTED] [mailto:owner-freebsd-
> > >>> [EMAIL PROTECTED] On Behalf Of Stevan Tiefert
> > >>> Sent: Tuesday, 19 December 2006 2:44 AM
> > >>> To: freebsd-questions@freebsd.org
> > >>> Subject: acrobatviewer
> > >>>
> > >>> Hello,
> > >>>
> > >>> I have installed acrobatviewer-1.1 and diablo-jre-1.5.0.07.01_1.
> > >>> Each time I want to use acrobatviewer, this message appears:
> > >>>
> > >>> $ AcrobatViewer
> > >>> expr: illegal option -- r
> > >>> usage: expr [-e] expression
> > >>> $ AcrobatViewer redbook.pdf
> > >>> expr: illegal option -- r
> > >>> usage: expr [-e] expression
> > >>> $
> > >>>
> > >>> An idea what is happening here?
> > >>>
> > >>> With regards
> > >>> Stevan Tiefert
> > >>
> > >> Have you tried xpdf?
> > >>
> > >> Regards,
> > >> Russell Wood
> > >>
> > >>
> > >> DISCLAIMER:
> > >> Disclaimer.  This e-mail is private and confidential. If you are
not
> the
> > >> intended recipient, please advise us by return e-mail
immediately,
> and
> > >> delete the e-mail and any attachments without using or disclosing
the
> > >> contents in any way. The views expressed in this e-mail are those
of
> the
> > >> author, and do not represent those of this company unless this is
> > >> clearly indicated. You should scan this e-mail and any
attachments
> for
> > >> viruses. This company accepts no liability for any direct or
indirect
> > >> damage or loss resulting from the use of any attachments to this
e-
> mail.
> > >> ___
> > >> freebsd-questions@freebsd.org mailing list
> > >> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> > >> To unsubscribe, send any mail to
> > >> "[EMAIL PROTECTED]"
> > >
> > > Hello,
> > >
> > > no I haven't tried xpdf...
> > >
> > > Regards
> > > ___
> > > freebsd-questions@freebsd.org mailing list
> > > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> > > To unsubscribe, send any mail to
> > > "[EMAIL PROTECTED]"
> >
> > KPDF (KDE's PDF Viewer) works great ;) - using amd64/6.2-RC1 and KDE
> > from ports
> >
> > --
> > Nathan Vidican
> > [EMAIL PROTECTED]
> >
> >
> > ___
> > freebsd-questions@freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> > To unsubscribe, send any mail to
> > "[EMAIL PROTECTED]"
> Hello,
> 
> this thread is confusing me... An example: If I ever would have a
problem
> with
> the FreeBSD-Kernel you would suggest me to use a linux-kernel?
> 
> I have a problem with acrobatviewer... I wanted maybe a hint or
solution
> with
> my problem and not alternatives.
> 
> Regards.

Well, I have never used acrobatviewer so I'm not familiar with it's
failures. However, since I have only ever used xpdf - never had any
problems with it - I thought that maybe you'd never heard of it and
might want to give it a try.

Good luck.

Regards,
Russell Wood


DISCLAIMER:
Disclaimer.  This e-mail is private and confidential. If you are not the 
intended recipient, please advise us by return e-mail immediately, and delete 
the e-mail and any attachments without using or disclosing the contents in any 
way. The views expressed in this e-mail are those of the author, and do not 
represent those of this company unless this is clearly indicated. You should 
scan this e-mail and any attachments for viruses. This company accepts no 
liability for any direct or indirect damage or loss resulting from the use of 
any attachments to this e-mail.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: acrobatviewer

2006-12-18 Thread Wood, Russell
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:owner-freebsd-
> [EMAIL PROTECTED] On Behalf Of Stevan Tiefert
> Sent: Tuesday, 19 December 2006 2:44 AM
> To: freebsd-questions@freebsd.org
> Subject: acrobatviewer
> 
> Hello,
> 
> I have installed acrobatviewer-1.1 and diablo-jre-1.5.0.07.01_1.
> Each time I want to use acrobatviewer, this message appears:
> 
> $ AcrobatViewer
> expr: illegal option -- r
> usage: expr [-e] expression
> $ AcrobatViewer redbook.pdf
> expr: illegal option -- r
> usage: expr [-e] expression
> $
> 
> An idea what is happening here?
> 
> With regards
> Stevan Tiefert

Have you tried xpdf?

Regards,
Russell Wood


DISCLAIMER:
Disclaimer.  This e-mail is private and confidential. If you are not the 
intended recipient, please advise us by return e-mail immediately, and delete 
the e-mail and any attachments without using or disclosing the contents in any 
way. The views expressed in this e-mail are those of the author, and do not 
represent those of this company unless this is clearly indicated. You should 
scan this e-mail and any attachments for viruses. This company accepts no 
liability for any direct or indirect damage or loss resulting from the use of 
any attachments to this e-mail.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: onboard sound card on Intel D915GAG

2006-12-11 Thread Wood, Russell
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:owner-freebsd-
> [EMAIL PROTECTED] On Behalf Of Amed Miranda
> Sent: Tuesday, 12 December 2006 9:18 AM
> To: freebsd-questions@freebsd.org
> Subject: onboard sound crard on intel D915GAG
> 
> envienme los driver de la Intel d915GAG

I have no idea what you asked, but I'm assuming you'd like to get sound
working for that chipset. Try (from memory):

kldload sound

That'll load all sound drives and whichever attaches is the drive you
want.

Regards,
Russell Wood


DISCLAIMER:
Disclaimer.  This e-mail is private and confidential. If you are not the 
intended recipient, please advise us by return e-mail immediately, and delete 
the e-mail and any attachments without using or disclosing the contents in any 
way. The views expressed in this e-mail are those of the author, and do not 
represent those of this company unless this is clearly indicated. You should 
scan this e-mail and any attachments for viruses. This company accepts no 
liability for any direct or indirect damage or loss resulting from the use of 
any attachments to this e-mail.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: mount USB-Device

2006-12-11 Thread Wood, Russell
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:owner-freebsd-
> [EMAIL PROTECTED] On Behalf Of Karl Sinn
> Sent: Tuesday, 12 December 2006 8:29 AM
> To: freebsd-questions@freebsd.org
> Subject: mount USB-Device
> 
> Hi,
> 
> I would like to use one of my USB-MP3-Players.
> 
> I plug it in and I can see with dmesg that the device is recognised by
the
> kernel.
> 
> "mount /dev/da0 /mnt " gives an error message: incorrect superblock.
> "mount -t fat /dev/da0 /mnt" gives an error message that mount_fat is
not
> found
> 
> in "/usr/sbin" I find only mout_* for nwfs, portalfs and smbfs.
> 
> 1) Where are the other filesystem mounts?
> 2) do I have to give another device name like da0s1?
> 3) Is there something like automount?
> 
> Thanks
> Karl

Try:

mount -t msdos /dev/da0 /mnt

Regards,
Russell Wood


DISCLAIMER:
Disclaimer.  This e-mail is private and confidential. If you are not the 
intended recipient, please advise us by return e-mail immediately, and delete 
the e-mail and any attachments without using or disclosing the contents in any 
way. The views expressed in this e-mail are those of the author, and do not 
represent those of this company unless this is clearly indicated. You should 
scan this e-mail and any attachments for viruses. This company accepts no 
liability for any direct or indirect damage or loss resulting from the use of 
any attachments to this e-mail.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: how do I see security logs without turning on sendmail?

2006-12-05 Thread Wood, Russell
Business and Technology Solutions
The Royal Automobile Club of W.A.
832 Wellington Street
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:owner-freebsd-
> [EMAIL PROTECTED] On Behalf Of Wasp King
> Sent: Wednesday, 6 December 2006 12:49 PM
> To: freebsd-questions@freebsd.org
> Subject: how do I see security logs without turning on sendmail?
> 
> is there a way that one can specify a log place to see
> daily logs like you receive from [EMAIL PROTECTED], when
> sendmail is turned on?
> 
> there must be a way to enable only local mail
> delivery...but I am not sure how..
> 
> would like to shut down sendmail but want to see
> security logs.
> 
> thanks.
> 
> Zach
> using FreeBSD 4.2 and sendmail 8.x (maybe).

In you /etc/rc.conf.local file add:

sendmail_enable="no"

This will only allow Sendmail accept and deliver local mail.

Regards,
Russell Wood


DISCLAIMER:
Disclaimer.  This e-mail is private and confidential. If you are not the 
intended recipient, please advise us by return e-mail immediately, and delete 
the e-mail and any attachments without using or disclosing the contents in any 
way. The views expressed in this e-mail are those of the author, and do not 
represent those of this company unless this is clearly indicated. You should 
scan this e-mail and any attachments for viruses. This company accepts no 
liability for any direct or indirect damage or loss resulting from the use of 
any attachments to this e-mail.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Makefile question... please help...

2006-12-05 Thread Wood, Russell

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:owner-freebsd-
> [EMAIL PROTECTED] On Behalf Of VeeJay
> Sent: Wednesday, 6 December 2006 8:39 AM
> To: [EMAIL PROTECTED]; FreeBSD-Questions
> Subject: Makefile question... please help...
> 
> 


Yes, you can. But when you update your Ports directory, your edited
Makefile will be overwritten.

Regards,
Russell Wood


DISCLAIMER:
Disclaimer.  This e-mail is private and confidential. If you are not the 
intended recipient, please advise us by return e-mail immediately, and delete 
the e-mail and any attachments without using or disclosing the contents in any 
way. The views expressed in this e-mail are those of the author, and do not 
represent those of this company unless this is clearly indicated. You should 
scan this e-mail and any attachments for viruses. This company accepts no 
liability for any direct or indirect damage or loss resulting from the use of 
any attachments to this e-mail.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Password Security

2006-11-21 Thread Russell E. Meek

Quoting VeeJay <[EMAIL PROTECTED]>:


Hi

I need to secure my data and server. Any advice will be highly appreciated.

I am going to place my FreeBSD server at a shared place?

I am just afraid that any unauthorized person might boot machine in single
user mode and steal the data?
How can I make my Server secure that if if boots in single user mode, it
still demands the password and without password one cannot do anything?
or make it possible that booting in Single user mode, doesn't provide any
shell?

Thanks in advance

--

BR / vj
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


BR,

Edit /etc/ttys and look for the following line:

# If console is marked "insecure", then init will ask for the root password
# when going to single-user mode.
console noneunknown off secure

Change "secure" to "insecure" (no quotes) this will require the root  
password to be entered when booting into Single User Mode.



Thanks,

Russ



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Password Security

2006-11-21 Thread Russell E. Meek

Quoting VeeJay <[EMAIL PROTECTED]>:


Hi

I need to secure my data and server. Any advice will be highly appreciated.

I am going to place my FreeBSD server at a shared place?

I am just afraid that any unauthorized person might boot machine in single
user mode and steal the data?
How can I make my Server secure that if if boots in single user mode, it
still demands the password and without password one cannot do anything?
or make it possible that booting in Single user mode, doesn't provide any
shell?

Thanks in advance

--

BR / vj
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


BR,

Edit /etc/ttys and look for this:

# If console is marked "insecure", then init will ask for the root  
password when going to single-user mode.

console noneunknown off secure

Change




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Xircom XE2000 card problem

2006-11-21 Thread Wood, Russell

>Also do you know where the "attach returned 6" message is generated?  I'm 
>>curious to know what condition causes it, but I can't find it in the >source. 
> I assume it's in the device attach function but I'm not finding >it.  Maybe 
>I'm blind.

Google can answer your question, I'm sure.

Regards,
Russell Wood


DISCLAIMER:
Disclaimer.  This e-mail is private and confidential. If you are not the 
intended recipient, please advise us by return e-mail immediately, and delete 
the e-mail and any attachments without using or disclosing the contents in any 
way. The views expressed in this e-mail are those of the author, and do not 
represent those of this company unless this is clearly indicated. You should 
scan this e-mail and any attachments for viruses. This company accepts no 
liability for any direct or indirect damage or loss resulting from the use of 
any attachments to this e-mail.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Xircom XE2000 card problem

2006-11-19 Thread Wood, Russell

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:owner-freebsd-
> [EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
> Sent: Monday, 20 November 2006 12:08 AM
> To: freebsd-questions@freebsd.org
> Subject: Xircom XE2000 card problem
> 
> 
>Asked this question a couple of days ago in freebsd-mobile, but
>haven't heard anything.  I'm reposting here to, hopefully, a wider
>audience...
> 
>I have an Inspiron 7000 laptop I've set up as a FreeBSD server
running
>Version 6.1.  I have a Xircom XE2000 ethernet card I'd like to use.
>It appears to be recognized by FreeBSD, but doesn't startup
>correctly.  In searching I've seen references to it working with
>FreeBSD, but indicate it should use the xe driver.
> 
>Here's what the dmesg says:
>ed1:  at port 0x100-0x10f iomem
>0x8800-0x88000fff irq 1
>1 function 0 config 1 on pccard0
>device_attach: ed1 attach returned 6
> 
>Looking at the hardware list it should be supported by the dc or xe
>drivers, but not the ed driver.  Am I missing something easy, or is
>this card not reallyl supported at all?
> 
>Thanks,
>Joe.

If you have a closer look, it is using the ed (4):

ed1:  at port 0x100-0x10f iomem

Make sure you have the following devices compiled in your kernel:

    device miibus
device ed

... also, you might need:

device pccard
device cardbus

Regards,
Russell Wood


DISCLAIMER:
Disclaimer.  This e-mail is private and confidential. If you are not the 
intended recipient, please advise us by return e-mail immediately, and delete 
the e-mail and any attachments without using or disclosing the contents in any 
way. The views expressed in this e-mail are those of the author, and do not 
represent those of this company unless this is clearly indicated. You should 
scan this e-mail and any attachments for viruses. This company accepts no 
liability for any direct or indirect damage or loss resulting from the use of 
any attachments to this e-mail.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Install

2006-11-19 Thread Wood, Russell
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:owner-freebsd-
> [EMAIL PROTECTED] On Behalf Of Ramesh Subrahmaniam
> Sent: Monday, 20 November 2006 1:33 AM
> To: freebsd-questions@freebsd.org
> Subject: Install
> 
> 
> Hi
> 
> Where should I  be  asking questions regarding install ?  If this is
the
> correct forum I have a Sis648-FX motherboard.
> I have two hard drives; one Hitachi and one Western Digital. I also
have a
> BTC DVD-ROM.
> 
> In addtition to this I have two Sil 3112 SATA Controllers on which I
have
> four disks. Overall I have 6 disks. I would like to run Free BSD on it
> make it a NAS box.
> 
> The 6.1 Production release bootonly.iso and the 6.2 RC1 bootonly.iso
have
> problems getting to install. When I try to install I cannot stop the
> screen from scrolling very very fast. It just seems like some
unhandled
> interrupt in a continuous loop. This happens as soon as I see the Boot
> from CD image. I cannot see anything meaningful.
> 
> Other than removing the Silicon image controllers what should I do.
> Appreciate any ideas.
> 
> Thanks
> Ramesh

I would recommend disabling as much as possible in the BIOS just so you
can get the installation done. Then one by one re-enabling everything to
look for the issue.

Regards,
Russell Wood


DISCLAIMER:
Disclaimer.  This e-mail is private and confidential. If you are not the 
intended recipient, please advise us by return e-mail immediately, and delete 
the e-mail and any attachments without using or disclosing the contents in any 
way. The views expressed in this e-mail are those of the author, and do not 
represent those of this company unless this is clearly indicated. You should 
scan this e-mail and any attachments for viruses. This company accepts no 
liability for any direct or indirect damage or loss resulting from the use of 
any attachments to this e-mail.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: chpass -p dilema

2006-11-19 Thread Wood, Russell
> 

Are you able to login to Single User Mode? On a vanilla installation it
doesn't ask for the root password, so you should be able to mount the
system and run chpass again.

Regards,
Russell Wood


DISCLAIMER:
Disclaimer.  This e-mail is private and confidential. If you are not the 
intended recipient, please advise us by return e-mail immediately, and delete 
the e-mail and any attachments without using or disclosing the contents in any 
way. The views expressed in this e-mail are those of the author, and do not 
represent those of this company unless this is clearly indicated. You should 
scan this e-mail and any attachments for viruses. This company accepts no 
liability for any direct or indirect damage or loss resulting from the use of 
any attachments to this e-mail.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Fresh System: Kernel should be Rebuilded FIRST or cvsup should be Run FIRST?

2006-11-18 Thread Russell E. Meek

Quoting VeeJay <[EMAIL PROTECTED]>:


Hello

On a freshly installed FreeBSD System, what step should be taken first?

Kernel should be Rebuilded FIRST or cvsup should be Run FIRST?

--
Thanks!

BR / vj
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


cvsup should be run first.



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: FreeBSD Host

2006-11-16 Thread Wood, Russell
> - --On Sunday, November 12, 2006 10:37:03 -0900 Beech Rintoul
> <[EMAIL PROTECTED]> wrote:
> 
> > I have a new client which I'm not going to host on my server (my
> bandwidth is
> > getting a bit tight). Does anyone know of a good FreeBSD host with
> reasonable
> > prices?
> 
> Our clients seem to think we are priced reasonably ... we offer
vServers
> though, not shared hosting ... yet ...
> 
> - 

Try http://johncompanies.com/



Regards,
Russell Wood
Business and Technology Solutions
The Royal Automobile Club of W.A.
832 Wellington Street
West Perth WA 6005
AUSTRALIA
p +61 8 9436 4326 (option 2)
f +61 8 9436 5027
e [EMAIL PROTECTED]
w www.rac.com.au


DISCLAIMER:
Disclaimer.  This e-mail is private and confidential. If you are not the 
intended recipient, please advise us by return e-mail immediately, and delete 
the e-mail and any attachments without using or disclosing the contents in any 
way. The views expressed in this e-mail are those of the author, and do not 
represent those of this company unless this is clearly indicated. You should 
scan this e-mail and any attachments for viruses. This company accepts no 
liability for any direct or indirect damage or loss resulting from the use of 
any attachments to this e-mail.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Shutting down as user

2006-11-15 Thread Wood, Russell
I didn't the proposed solution so if it's the same, I apologize. You
could always add the user to the Operators group, which would then grant
them permissions to shutdown/reboot.

Regards,
Russell

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Parv
Sent: Thursday, 16 November 2006 1:02 PM
To: Rem P Roberti
Cc: FreeBSD
Subject: Re: Shutting down as user

in message <[EMAIL PROTECTED]>,
wrote Rem P Roberti thusly...
>
> I just installed 6.1 on an old laptop, and I am unable to shutdown
> as user.  I get a "permission denied" error message.

Other than already proposed solution, given that you are the only
person sitting near the machine & working power management, a press
of the power button should cleanly shut down the computer.

At least that is what happens on/with FreeBSD 6.x, with ACPI
enabled, on my IBM Thinkpad T42 when I am feeling lazy enough to
avoid typing "shutdown -p now".


  - Parv

-- 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"[EMAIL PROTECTED]"


DISCLAIMER:
Disclaimer.  This e-mail is private and confidential. If you are not the 
intended recipient, please advise us by return e-mail immediately, and delete 
the e-mail and any attachments without using or disclosing the contents in any 
way. The views expressed in this e-mail are those of the author, and do not 
represent those of this company unless this is clearly indicated. You should 
scan this e-mail and any attachments for viruses. This company accepts no 
liability for any direct or indirect damage or loss resulting from the use of 
any attachments to this e-mail.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Can't log in a root from anywhere but the console screen.

2006-09-28 Thread A.G. Russell IV
On Thu, Sep 28, 2006 at 07:22:23AM -0500, Dustin Coates wrote:
> -Original Message-
> 
> From: Erik Norgaard [mailto:[EMAIL PROTECTED] 
> Sent: 28 September 2006 09:42
> To: Jim Borland
> Cc: freebsd-questions@FreeBSD.org
> Subject: Re: Can't log in a root from anywhere but the console screen.
> 
> Jim Borland wrote:
> > I want to use a PC to telnet to the freeBSD server and login as root 
> > but it won't let me! Can you help? I can login as a normal user just 
> > not as root, I can't key in su to get in as superuser either.
> 
> 1) Don't use telnet, use ssh, for security.
> 2) Are you in the wheel group?
> 
> Erik suggested I use ssh, I've never used ssh before and when I do it
> says "the connection has been refused". 
> The "root" user is in the wheel group, I have a user called "jim" which
> is in a group called "group" he is able to login using telnet.
> 
> 
> 
> The best thing to do is to add the user "jim" to the wheel group, then you
> should be able to login as him over ssh, then su to superuser, and do
> virtually everything root can do. It is considered a security risk to allow
> root access to ssh. But it's your server. So if you want root to be able to
> login despite my warning.  Edit "/etc/ssh/sshd_config" and find
> "#PermitRootLogin no", remove the hash, and change the "no" to "yes"

First, sshd is not running, that is why "the connection has been refused"
messages is being seen.  put "sshd_enable=yes in /etc/rc.conf.

Look at /etc/defaults/rc.conf, it is your friend, and any daemon that you 
want to run, must have xyz_enable=yes in the /etc/rc.conf, if it conforms
to the current FreeBSD mores.

Also, as suggested above, add jim to the wheel group, this will allow you
to su to root.

Take a look at the 
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/
google and the above document, will answer a lot of your questions.

I Can't say in strong enough terms, how "Bad" and idea it is to have root
allowed for ssh, or even worse, to use telnet, especially over the Internet.

Good luck, FreeBSD is how we've run our servers for years, and have been solid
work horses.

A.G.
-- 
___
A.G. Russell IV  KC5KFDThe Knife Company   e-mail:  [EMAIL PROTECTED]
Phone 479-631-0055 FAX 479-631-8734
Old Klingon Saying --  'oH  majQa' yIn je bang, Qo' bang
---
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: /tmp permissions

2006-08-07 Thread Russell Meek

Quoting dick hoogendijk <[EMAIL PROTECTED]>:


Today I read that /tmp always is "noexec".
That should probably be on linux, because on my fbsd-6.1 box it's "rw"
and that's it.

Question: should I change /tmp to "rw,noexec" to be safer?

--
dick -- http://nagual.nl/ -- PGP/GnuPG key: F86289CE
++ Running FreeBSD 6.1 +++ The Power to Serve
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"



Dick,

Yes, noexec is a good this security wise.  You could also add nosuid  
depending upon what you may need /tmp for.


Most "kiddie scripts" will attempt to run items out of /tmp, by adding  
noexec you prevent items from executing out of the applied directory.


Thanks,

- Russell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Make installworld in single-user mode all the time?

2006-03-23 Thread Russell E. Meek

Philippe Lang wrote:

Hi,

I'd like to patch a production server, with about 10 jails, running FreeBSD
6.0 Release, in order to get FreeBSD 6.0-p6.

Since this server is being hosted on a remote location, rebooting in
single-user mode before doing the installworld requires me to move to the
hosting center.

Documentation mentions that a reboot in single-user mode is necessary. But
on the opposite, /usr/src/UPDATING says:


Also, when doing a major release upgrade, it is required that
you boot into single user mode to do the installworld.


Since this is no "major release upgrade", does that mean I can do the
installworld in multi-user mode?

I have tested that on a smaller test server yesterday evening, I have even
done the installworld in running jails, and it worked just fine. Was I lucky
maybe?

Does anyone have a definitive guide to update FreeBSD correctly?

Here is what I did:

--

1) Cleaning
cd /usr/obj 
chflags -R noschg * 
rm -rf 


2) Buildworld & Kernel
cd /usr/src 
make buildworld (/usr/src/UPDATING mentions we should avoid the -j option)

make kernel KERNCONF=


4) When doing a major release upgrade:

reboot in single-user mode
fsck -p 
mount -u / 
mount -a -t ufs 
swapon -a 
adjkerntz -i 


6) Installworld
cd /usr/src 
mergemaster -p 
make installworld 
mergemaster 
 
7) Update jail1

mergemaster -p -D /usr/jails/my_jail1
make installworld DESTDIR=/usr/jails/my_jail1
mergemaster -D /usr/jails/my_jail1
 
8) Update jail2

mergemaster -p -D /usr/jails/my_jail2
make installworld DESTDIR=/usr/jails/my_jail2
mergemaster -D /usr/jails/my_jail2


9) Reboot

--

Regards,

--
Philippe Lang, Ing. Dipl. EPFL
Attik System
rte de la Fonderie 2
1700 Fribourg
Switzerland
http://www.attiksystem.ch

Tel:  +41 (26) 422 13 75 
Fax:  +41 (26) 422 13 76

Email:[EMAIL PROTECTED]
Here is the way I have always perform installworlds.  Although this 
method may be disregarded and unwarranted, it has yet to fail me.


All functions are performed in multi-user mode.



If using kern_securelevel_enable="YES" in rc.conf

ee /etc/rc.conf (change kern_securelevel_enable="YES" to 
kern_securelevel_enable="NO")




ee /etc/fstab (remove nosuid,noexec from /tmp if applied)

I have noticed installworld issues if noexec / nosuid are applied to 
mounted /tmp.


-

su -

cd /usr/obj
rm -rf *

cd /usr/src

cvsup -g -L2 -h freebsd11.cvsup.org /root/

Place kernel file in /usr/src/sys//conf

make buildworld && make buildkernel KERNCONF= && make 
installkernel KERNCONF= && mergemaster -p


reboot

cd /usr/src/

make installworld && mergemaster

ee /etc/rc.conf (change kern_securelevel_enable="NO" to 
kern_securelevel_enable="YES")


ee /etc/fstab (add your nodev,noexec,nosuid tags to /tmp)

reboot

cd /usr/obj/
rm -rf *

cd /usr/src/

make cleandir; make cleandir

---

I picked this method (most of it) up off of taosecurity.  I have used it 
countless times with no issues whatsoever on remote servers.


Thanks,

Russell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: mysql for freebsd 6.0

2006-03-22 Thread Russell E. Meek

kalin mintchev wrote:

  hi all...

  i can't see the mysql 5 version for freebsd 6.0 on the mysql developer
site?
  am i blind or it's on purpose?!?!

  curious...  and actually need it...

  thanks...

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Kalin,

Why just not install from ports?

/usr/ports/databases/mysql50-server


Russell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: TinyDNS question

2006-03-22 Thread Russell E. Meek

Steve Camp wrote:

Hi Russell,

My netiquette may be rusty?  Is this an example of TOP posting?


Probably really does not matter to me, I would rather see you helped 
then worry about structure.




Qmail -- in your opinion, is this the best MTA out there?  I know
sendmail is HUGE, but it is the "standard" (so-to-speak).  Besides
Qmail, what other MTA's compete with Sendmail?

o Postfix
o Exim



Qmail is my preferred yes, it is far superior then sendmail. Many 
support Postfix (FreeBSD MX servers run Postfix) which is also a very 
good- strong MTA.  With the addition of Vpopmail Qmail becomes a very 
efficient and strong "POP" or Mail Toaster.  You can do the same with 
MySQL and Postfix, but once you get used to the "structure" of Qmail it 
flows just fine.


I have never used Exim, however it is the default MTA for the Debian 
GNU/Linux distro so I am sure it holds some regard.




Does Qmail in any way hinder, or make more difficult, configuration,
performance, and maintenance of

o Mail list software (e.g. majordomo, mailman etc)
o milters (Is Spamassassin a 'milter', or something different)


No, Ezmlm is the default Mailing List Manager created by Bernstein, I 
would not recommend Major Domo as it has Major Problemos security wise. 
 SpamAssassin runs just fine with a Qmail queue addon Simscan.  There 
are no 'milters' so to speak.




Any URLs / references you might have for configuration of Qmail, and
mail list software would be greatly appreciated if you are willing to
forward them to me.


http://www.inter7.com/ - These are the guys that make all of the great 
qmail 'addons' such as QmailAdmin - Simscan, etc.


http://www.tnpi.biz/internet/mail/toaster/ - Create a 'World Class' mail 
server


http://qmail.jms1.net - A linux great, very well versed in Qmail and 
DJBDNS, even contributes code to supporting projects such as life with 
Qmail - life with DJBDNS.  I used to work with him personally so I know 
he is legit.  Just make sure you view his site with Firefox or any 
'non-IE' browser as he has a rewrite rule forwarding Internet Explorer 
users to a extremely orthodox, but very correct webpage www.jms1.net/ie



Regards,

--
Steve Camp
[EMAIL PROTECTED]


thanks,

Russ
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: TinyDNS question

2006-03-22 Thread Russell E. Meek

Steve Camp wrote:

Hi Russell,

I am not very familiar with TinyDNS, other than it originated from
D.J. Bernstein, and, as such, I tend to think of it as

o small
o fast
o secure

Does that pretty well sum up TinyDNS?  Are there any downsides to
TinyDNS?  Are there any things that "normal" DNS (i.e. BIND) can do,
that TinyDNS cannot?

Regards,

--
Steve Camp
[EMAIL PROTECTED]


On Thu, Mar 23, 2006 at 12:06:17AM -, [EMAIL PROTECTED] wrote:
  

Steve,

If you are using TinyDNS (DJBDNS) then VegaDNS www.vegadns.org will allow
you to accomplish exactly what you are looking for.

Check it out, seems to work extremely well.

Thanks,

Russell

On 3/22/2006, "Steve Camp" <[EMAIL PROTECTED]> wrote:



Someone is potentially interested in leasing a domain name from me.
One of the technical points is DNS control.  What DNS tools exist that
would allow me to maintain the DNS servers, but let this party login
and administer DNS entries.  I'm thinking along the lines of some sort
of web-based tool.  A user would login / authenticate themselves, but
the tool would limit the domains they could manage in some fashion.

Regards,

--
Steve Camp
[EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
  

Steve,

Yes the DJBDNS suite (TinyDNS, DNSCache) is much more secure and faster 
than BIND.


Many people have issues with Bernsteins licenses, etc.  For me it does 
not matter.


TinyDNS is a different setup for creating A records and such, but once 
learned is much better than BIND.


DJBDNS is just like QMail - a collection of small apps to perform the 
larger job at hand.


Here are a couple of excellent sites to get you started.

http://www.lifewithdjbdns.com/
http://matt.simerson.net/computing/dns/djbdns-freebsd.shtml (Excellent 
Qmail information also)

http://ezine.daemonnews.org/200210/ezdjbdns.html (DJBDNS Setup for FreeBSD)

Just remember that once properly configured many of the main "security" 
exploits you find BIND suffers from (Cache Poisoning, etc.) are 
extremely difficult to perform if not impossible to perform.


Thanks,

Russell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: What process is LOISTENingon a given port

2006-03-09 Thread Russell E. Meek

Olivier Nicole wrote:


Hi,

In 5.4, who to know what process is LISTENing on a given TCP or UDP
port?

Bestregards,

Olivier
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
 


sockstat -4l
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: pf and scrubbing bubbles

2006-01-29 Thread Russell E. Meek

J.D. Bronson wrote:


At 02:31 PM 1/29/2006, Russell E. Meek wrote:


Chuck Swiger wrote:


J.D. Bronson wrote:


I am using this in my pf.conf (on 6.0) and was wondering if these 
settings

are appropriate.

While 'scrub' by itself is always recommended, I added a few more 
things

that seem to ought to be there?

I use this for all the NICs...WAN and LAN...
with the exception to remove filtering on loopback:

===
scrub all random-id reassemble tcp fragment reassemble
no scrub on lo0 all
===

anyone see any issues with this - especially since its on the WAN
and LAN NICs?



You're shifting a fair amount of workload onto the firewall by 
requiring it to
re-write all of the packets to change the IPID field; it would be 
highly

desirable to have NICs which can do hardware checksums.

There's a potential for DoS'ing the firewall if it does fragment 
reassembly,
modulo how well PF handles such fragmentation attacks.  If you 
permit Path MTU
discovery to function, blocking fragments entirely may be a more 
reasonable

approach than trying to reassemble them on the firewall.

(If you need to support older machines which don't do PMTUd, that 
may not be an

option for you, though...)



Chuck,

Here is really all that you need for your scrub rules.

==
scrub in on $ext_if no-df
scrub out on $ext_if random-id
==

Remember:

fragment-reassemble is default and does not need to be added.

You really do not need to scrub packets on your internal LAN 
interfaces as it will slow you down.


Here is a site for you which should offer a few tips and tricks.

https://www.solarflux.org/pf/pf-tips.php

Thanks,

Russell




I was actually the one that asked about this...not Chuck. But thanks 
for the insight...it was good reading.


-JD
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
"[EMAIL PROTECTED]"


JD

Sorry about that, wrong name.

Russ
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: pf and scrubbing bubbles

2006-01-29 Thread Russell E. Meek

Chuck Swiger wrote:


J.D. Bronson wrote:
 


I am using this in my pf.conf (on 6.0) and was wondering if these settings
are appropriate.

While 'scrub' by itself is always recommended, I added a few more things
that seem to ought to be there?

I use this for all the NICs...WAN and LAN...
with the exception to remove filtering on loopback:

===
scrub all random-id reassemble tcp fragment reassemble
no scrub on lo0 all
===

anyone see any issues with this - especially since its on the WAN
and LAN NICs?
   



You're shifting a fair amount of workload onto the firewall by requiring it to
re-write all of the packets to change the IPID field; it would be highly
desirable to have NICs which can do hardware checksums.

There's a potential for DoS'ing the firewall if it does fragment reassembly,
modulo how well PF handles such fragmentation attacks.  If you permit Path MTU
discovery to function, blocking fragments entirely may be a more reasonable
approach than trying to reassemble them on the firewall.

(If you need to support older machines which don't do PMTUd, that may not be an
option for you, though...)

 


Chuck,

Here is really all that you need for your scrub rules.

==
scrub in on $ext_if no-df
scrub out on $ext_if random-id
==

Remember:

fragment-reassemble is default and does not need to be added.

You really do not need to scrub packets on your internal LAN interfaces 
as it will slow you down.


Here is a site for you which should offer a few tips and tricks.

https://www.solarflux.org/pf/pf-tips.php

Thanks,

Russell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: How long to compile...

2006-01-03 Thread Russell J. Wood
On Tue, Jan 03, 2006 at 11:04:41AM -0500, Robert Huff wrote:
> 
> Crispy Beef writes:
> 
> >  Was wondering on average how long building userland and the
> >  kernel for 6.0-RELEASE should take on a 466MHz Celeron machine
> >  with 128Mb RAM?
> 
>   Many hours.  :-(
>   For comparison: it takes ~1h45 on a P4/2.25ghz with 512mb.  I
> seem to remember the 500mhz Celeron being an overnight or all-day
> job.
> 
> 
>   Robert Huff

I'm currently doing this on an AMD K6 ~500Mhz. Buildworld took about 12
hours -- installing now -- and kernel is roughly a few hours.

- Russell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Disk error messages (ad0: HARD READ ERROR blk# xxxxxx)

2006-01-02 Thread Russell J. Wood
On Mon, Jan 02, 2006 at 11:15:08PM +, [EMAIL PROTECTED] wrote:
> Hi there,
> 
> On my screen, there were messages like the followings comeing up. I have to 
> reboot mutiple times to get it boot up normally. Does this mean I have to 
> replace the disk which is a relatively new disk (1-2 years)? Any simple way 
> to 
> fix it and to avoid the time consuming task?
> 
> 
> ad0: 39205MB  [79656/16/63] at ata0-master WDMA2
> ad0: HARD READ ERROR blk# 131199
> ad0: HARD READ ERROR blk# 131199 status=59 error=40
> ad0: DMA problem fallback to PIO mode
> ad0: HARD READ ERROR blk# 11272319 status=59 error=40
> ad0: HARD READ ERROR blk# 11272319 status=59 error=40
> ad0: HARD READ ERROR blk# 11272319 status=59 error=40
> ad0: HARD READ ERROR blk# 131199 status=59 error=40
> ad0: HARD READ ERROR blk# 3473535 status=59 error=40
> ad0: HARD READ ERROR blk# 9240703 status=59 error=40
> ad0: HARD READ ERROR blk# 17367167 status=59 error=40
> ad0: HARD READ ERROR blk# 17760383 status=59 error=40

I suspect that you have bad sectors on your hard disk drive (and many of
them). A good tool to use is Segate's Seatools
(http://www.seagate.com/support/seatools/index.html). Just burn the
Seatools Desktop edition to CDROM and boot from it.

- Russell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: USB mice

2005-12-24 Thread Russell J. Wood
On Sun, Dec 25, 2005 at 04:01:00AM +0200, Giorgos Keramidas wrote:
> On 2005-12-25 09:13, "Russell J. Wood" <[EMAIL PROTECTED]> wrote:
> >On Sat, Dec 24, 2005 at 09:29:53AM -0600, Teilhard Knight wrote:
> >>Russell J. Wood" <[EMAIL PROTECTED]> wrote:
> >>>On Sat, Dec 24, 2005 at 03:36:28AM -0600, Teilhard Knight wrote:
> >>>> It seems to me that the way FreeBSD is catching up with new
> >>>> hardware leaves you unsatisfied. One has to choose, upon boot, the
> >>>> option to use an USB keyboard by hand, and I have found no way to
> >>>> make a USB mouse to work.  The OS broadly supports serial mice and
> >>>> hardly PS/2 mice, both almost out of the market nowadays. Are USB
> >>>> mice supported by FreeBSD?
> >>>
> >>> I have a USB keyboard and I don't have to choose the ``USB
> >>> Keyboard'' option at start up. Also, I have a USB Mouse hooked up
> >>> via a hub in my keyboard. Works fine.
> >>
> >> Are they, your keyboard and your mouse, wireless?
> >
> > No, they are not. However, before this setup I was using a complete
> > wireless setup. Logictec keyboard/mouse combination, from memory.
> 
> USB mice are supported, but I'm not sure about install time.  I very
> rarely install from a CD-ROM these days and even when I do, I don't use
> the mouse at all.

Who needs a mouse at install time? The keyboard is suffice.

- Russell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: USB mice

2005-12-24 Thread Russell J. Wood
On Sat, Dec 24, 2005 at 09:29:53AM -0600, Teilhard Knight wrote:
> 
> - Original Message - 
> From: "Russell J. Wood" <[EMAIL PROTECTED]>
> To: 
> Sent: Saturday, December 24, 2005 8:43 AM
> Subject: Re: USB mice
> 
> 
> >On Sat, Dec 24, 2005 at 03:36:28AM -0600, Teilhard Knight wrote:
> >>It seems to me that the way FreeBSD is catching up with new hardware 
> >>leaves
> >>you unsatisfied. One has to choose, upon boot, the option to use an USB
> >>keyboard by hand, and I have found no way to make a USB mouse to work. 
> >>The
> >>OS broadly supports serial mice and hardly PS/2 mice, both almost out of
> >>the market nowadays. Are USB mice supported by FreeBSD?
> >
> >I have a USB keyboard and I don't have to choose the ``USB Keyboard''
> >option at start up. Also, I have a USB Mouse hooked up via a hub in my
> >keyboard. Works fine.
> 
> Are they, your keyboard and your mouse, wireless?
> 
> Teilhard. 

No, they are not. However, before this setup I was using a complete
wireless setup. Logictec keyboard/mouse combination, from memory.

- Russell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Two simple questions

2005-12-24 Thread Russell J. Wood
On Sat, Dec 24, 2005 at 08:51:13AM -0600, Teilhard Knight wrote:
> What is the command to see the hidden files and folders? And how to unhide 
> them?

If you're referring to dot files, then the following will show them:

ls -a

If that is too tedious, then an alias in your shell's RC file can sort
that out (e.g. for /bin/sh: alias ls='ls -a').

- Russell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: umass detected, but da is never created

2005-12-24 Thread Russell J. Wood
On Sat, Dec 24, 2005 at 11:48:10AM +0100, Philip Lykke Carlsen wrote:
> I have this external harddisk kit, and when I plug it in, the system 
> correctly 
> recognizes it as a umass.. but afterwards, the da device is never created..
> 
> this is what I get from the console:
> 
> umass0: vendor 0x05e3 USB TO IDE, rev 2.00/0.33, addr 2
> umass0: BBB reset failed, TIMEOUT
> umass0: BBB bulk-in clear stall failed, TIMEOUT
>
> Also, the very same thing but the timeouts are happening if I connect an 
> Apple 
> iPod.. 
> 
> And for the record, I had this problem with both the generic and my custom 
> kernel.. both with umass,da,ses,pass compiled in..
> 
> Any ideas as for how to solve this?
> Any guidelines and I'd gladly edit the files in question and submit a patch, 
> when I get it working.. 
> 
> PS, Any other usb-drive I've tried has worked without problems..

At first I guessed it would have been a faulty device, however after a
quick Google it appears `common'.

http://www.bsdforums.org/forums/archive/index.php/t-664.html

Maybe it's an unsupported device.

- Russell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: USB mice

2005-12-24 Thread Russell J. Wood
On Sat, Dec 24, 2005 at 03:36:28AM -0600, Teilhard Knight wrote:
> It seems to me that the way FreeBSD is catching up with new hardware leaves 
> you unsatisfied. One has to choose, upon boot, the option to use an USB 
> keyboard by hand, and I have found no way to make a USB mouse to work. The 
> OS broadly supports serial mice and hardly PS/2 mice, both almost out of 
> the market nowadays. Are USB mice supported by FreeBSD?

I have a USB keyboard and I don't have to choose the ``USB Keyboard''
option at start up. Also, I have a USB Mouse hooked up via a hub in my
keyboard. Works fine.

Maybe you should consult the Handbook, or maybe even Google for your
answers.

- Russell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


sysctl kern.cp_time: calculating output

2005-12-22 Thread Russell J. Wood
Hi all,

I have a question regarding the output from sysctl kern.cp_time.

I know that the output is in the form of:

  user nice sys interrupt idle

and that the numbers are incremental, but what I don't know is what
these numbers and increments mean.

If someone could explain this, it is greatly appreciated.

Regards,

Russell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Completely disable sendmail

2005-12-14 Thread Russell E. Meek

Pietro Cerutti wrote:


Hi list,
before someone begins to flame me, I'll tell you that I'm running
6.0-STABLE and that my rc.conf contains:

sendmail_enable="NO"
sendmail_submit_enable="NO"
sendmail_outbound_enable="NO"
sendmail_msp_queue_enable="NO"

In my crontab there is a job which runs every hour, and prints one
line as output.
This output should be mailed to me, but since I disabled sendmail, I
guess it should get lost (which is what I'd want).
Anyway, lost or not, I don't want to have it mailed to me, nor I want
sendmail to bug my ttyv0 with such messages:

sendmail[] My unqualified host name [] unknown.
Sleeping for retry
sendmail[] unable to qualify my own domain name ()
-- using short name

My box is not a part of a domain, so the errors are justified, but
this shows that sendmail is not completely disabled on my system...

Now, I could solve this by redirecting the output of my job to
/dev/null, but I don't see it as a smart solution.

Any ideas?

Thanx!

--
Pietro Cerutti
<[EMAIL PROTECTED]>

Beansidhe - SwiSS Death / Thrash Metal


Windows: "Where do you want to go today?"
Linux: "Where do you want to go tomorrow?"
FreeBSD: "Are you guys coming or what?"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
 


Pietro,

*sendmail_enable="NONE"* in your rc.conf will shutdown Sendmail 
completely and globally.


Thanks,

Russell E, Meek
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: broken openssl on freebsd60

2005-11-29 Thread Russell E. Meek

Benjamin Thelen wrote:


Russell E. Meek schrieb:


Benjamin Thelen wrote:


Russell E. Meek schrieb:


Jeff D. Hamann wrote:

OpenSSL is in the base system and the library version should be 
4, not

3.  Is there some reason you're installing it from the ports?







I have no idea. I didn't know it was part of the base system, but 
when I went to install apache2, postgresql, etc, those ports 
wanted to install the openssl port or at least they used to.





- Original Message - From: "Lowell Gilbert" 
<[EMAIL PROTECTED]>

To: "Jeff D. Hamann" <[EMAIL PROTECTED]>
Cc: 
Sent: Saturday, November 26, 2005 7:29 AM
Subject: Re: broken openssl on freebsd60



"Jeff D. Hamann" <[EMAIL PROTECTED]> writes:

I should preface this with "I'm not sure if this is correct but 
I've
got a server running that doesn't make exstensive use of openssl 
and

everything seems to run alright for the apps I've been running"...

so,

I've been trying to install a new server using the openssl port and
keep finding problems with the openssl libs...

$ pwd
/usr/local/lib
$ ls -la libssl*
-rw-r--r--  1 root  wheel  516602 Nov 26 12:23 libssl.a
lrwxr-xr-x  1 root  wheel  11 Nov 26 12:23 libssl.so -> 
libssl.so.4

-r--r--r--  1 root  wheel  318507 Nov 26 12:23 libssl.so.4
lrwxr-xr-x  1 root  wheel  12 Sep 16 09:59 libssl3.so -> 
libssl3.so.1

-r-xr-xr-x  1 root  wheel  155344 Sep 16 10:00 libssl3.so.1
$

should those be:

lrwxr-xr-x  1 root  wheel  12 Sep 16 09:59 libssl3.so -> 
libssl.so.3

-r-xr-xr-x  1 root  wheel  155344 Sep 16 10:00 libssl.so.3

or some such thing, because when I attempt to start something like
postgresql81, I get:

$ psql
/libexec/ld-elf.so.1: Shared object "libssl.so.3" not found, 
required

by "psql"
$

I need to get the following apps running on the new FREEBSD 6.0 
machine:


1) openssl

then,

2) apache2
3) subversion
4) uw-imap
5) postgresql81 or postgresql80+postgis
6) php

etc, etc, etc and I'm concerned that none of those will work 
with the

current status of openssl on freebsd 6.0. I'm running

$ uname -a
FreeBSD bobby.xxx.xxx 6.0-RELEASE FreeBSD 6.0-RELEASE #1: Fri 
Nov 18

10:47:37 PST 2005
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC amd64







OpenSSL is in the base system and the library version should be 
4, not

3.  Is there some reason you're installing it from the ports?



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
"[EMAIL PROTECTED]"






Another user had a similar issue like this with OpenSSL, here is 
what I advised him to do which in the end worked perfectly.


Edit your make.conf file *"/etc/make.conf" *and please in the 
following:


*WITH_OPENSSL_BASE=yes

*This will cause all future installed ports to build against the 
base version of OpenSSL rather than trying to install the port 
version as a dependency.


You can then uninstall the port version of openssl 
*"/usr/ports/security/openssl make deinstall clean"*


Once the uninstall is complete, reinstall all OpenSSL required 
ports either by using portupgrade or by manually deinstalling and 
then reinstalling the port as they will now build against the base 
version of OpenSSL.





Hi,

I already read your posting a few days ago. What I don't understand 
is, that openssl is per default within the base system, isn't it? 
So, I would suppose that any port, which requires openssl, would 
take it from the base rather than from ports? At least, I never 
installed a port, installing openssl from ports as a dependency 
(e.g. php5-openssl).


I don't really get it. Could you explain why this switch in 
make.conf is needed then?


This would also mean, that I would have to upgrade the base system 
openssl to openssl-beta in order to be able to install OOo-2 as 
having openssl within the base system _and_ openssl-beta as a port 
obviously leads to little confusion.



Thanks,
Ben




Thanks,

Russell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
"[EMAIL PROTECTED]"





___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
"[EMAIL PROTECTED]"




Ben,

Sorry about the confusion, make.conf is the global register that all 
ports look to for build information.


By default ports requiring dependancies will build these dependancies 
according to their individual make file (normally ports.)


(man make.conf) will show you more in depth about what the make.conf 
is file and many of the global registers that can be used

Re: broken openssl on freebsd60

2005-11-28 Thread Russell E. Meek

Benjamin Thelen wrote:


Russell E. Meek schrieb:


Jeff D. Hamann wrote:


OpenSSL is in the base system and the library version should be 4, not
3.  Is there some reason you're installing it from the ports?





I have no idea. I didn't know it was part of the base system, but 
when I went to install apache2, postgresql, etc, those ports wanted 
to install the openssl port or at least they used to.





- Original Message - From: "Lowell Gilbert" 
<[EMAIL PROTECTED]>

To: "Jeff D. Hamann" <[EMAIL PROTECTED]>
Cc: 
Sent: Saturday, November 26, 2005 7:29 AM
Subject: Re: broken openssl on freebsd60



"Jeff D. Hamann" <[EMAIL PROTECTED]> writes:


I should preface this with "I'm not sure if this is correct but I've
got a server running that doesn't make exstensive use of openssl and
everything seems to run alright for the apps I've been running"...

so,

I've been trying to install a new server using the openssl port and
keep finding problems with the openssl libs...

$ pwd
/usr/local/lib
$ ls -la libssl*
-rw-r--r--  1 root  wheel  516602 Nov 26 12:23 libssl.a
lrwxr-xr-x  1 root  wheel  11 Nov 26 12:23 libssl.so -> 
libssl.so.4

-r--r--r--  1 root  wheel  318507 Nov 26 12:23 libssl.so.4
lrwxr-xr-x  1 root  wheel  12 Sep 16 09:59 libssl3.so -> 
libssl3.so.1

-r-xr-xr-x  1 root  wheel  155344 Sep 16 10:00 libssl3.so.1
$

should those be:

lrwxr-xr-x  1 root  wheel  12 Sep 16 09:59 libssl3.so -> 
libssl.so.3

-r-xr-xr-x  1 root  wheel  155344 Sep 16 10:00 libssl.so.3

or some such thing, because when I attempt to start something like
postgresql81, I get:

$ psql
/libexec/ld-elf.so.1: Shared object "libssl.so.3" not found, required
by "psql"
$

I need to get the following apps running on the new FREEBSD 6.0 
machine:


1) openssl

then,

2) apache2
3) subversion
4) uw-imap
5) postgresql81 or postgresql80+postgis
6) php

etc, etc, etc and I'm concerned that none of those will work with the
current status of openssl on freebsd 6.0. I'm running

$ uname -a
FreeBSD bobby.xxx.xxx 6.0-RELEASE FreeBSD 6.0-RELEASE #1: Fri Nov 18
10:47:37 PST 2005
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC amd64





OpenSSL is in the base system and the library version should be 4, not
3.  Is there some reason you're installing it from the ports?



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
"[EMAIL PROTECTED]"




Another user had a similar issue like this with OpenSSL, here is what 
I advised him to do which in the end worked perfectly.


Edit your make.conf file *"/etc/make.conf" *and please in the following:

*WITH_OPENSSL_BASE=yes

*This will cause all future installed ports to build against the base 
version of OpenSSL rather than trying to install the port version as 
a dependency.


You can then uninstall the port version of openssl 
*"/usr/ports/security/openssl make deinstall clean"*


Once the uninstall is complete, reinstall all OpenSSL required ports 
either by using portupgrade or by manually deinstalling and then 
reinstalling the port as they will now build against the base version 
of OpenSSL.





Hi,

I already read your posting a few days ago. What I don't understand 
is, that openssl is per default within the base system, isn't it? So, 
I would suppose that any port, which requires openssl, would take it 
from the base rather than from ports? At least, I never installed a 
port, installing openssl from ports as a dependency (e.g. php5-openssl).


I don't really get it. Could you explain why this switch in make.conf 
is needed then?


This would also mean, that I would have to upgrade the base system 
openssl to openssl-beta in order to be able to install OOo-2 as having 
openssl within the base system _and_ openssl-beta as a port obviously 
leads to little confusion.



Thanks,
Ben




Thanks,

Russell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
"[EMAIL PROTECTED]"



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
"[EMAIL PROTECTED]"


Ben,

Sorry about the confusion, make.conf is the global register that all 
ports look to for build information.


By default ports requiring dependancies will build these dependancies 
according to their individual make file (normally ports.)


(man make.conf) will show you more in depth about what the make.conf is 
file and many of the global registers that can be used.


php5-openssl is just 

Re: broken openssl on freebsd60

2005-11-26 Thread Russell E. Meek

Jeff D. Hamann wrote:


OpenSSL is in the base system and the library version should be 4, not
3.  Is there some reason you're installing it from the ports?



I have no idea. I didn't know it was part of the base system, but when 
I went to install apache2, postgresql, etc, those ports wanted to 
install the openssl port or at least they used to.





- Original Message - From: "Lowell Gilbert" 
<[EMAIL PROTECTED]>

To: "Jeff D. Hamann" <[EMAIL PROTECTED]>
Cc: 
Sent: Saturday, November 26, 2005 7:29 AM
Subject: Re: broken openssl on freebsd60



"Jeff D. Hamann" <[EMAIL PROTECTED]> writes:


I should preface this with "I'm not sure if this is correct but I've
got a server running that doesn't make exstensive use of openssl and
everything seems to run alright for the apps I've been running"...

so,

I've been trying to install a new server using the openssl port and
keep finding problems with the openssl libs...

$ pwd
/usr/local/lib
$ ls -la libssl*
-rw-r--r--  1 root  wheel  516602 Nov 26 12:23 libssl.a
lrwxr-xr-x  1 root  wheel  11 Nov 26 12:23 libssl.so -> libssl.so.4
-r--r--r--  1 root  wheel  318507 Nov 26 12:23 libssl.so.4
lrwxr-xr-x  1 root  wheel  12 Sep 16 09:59 libssl3.so -> 
libssl3.so.1

-r-xr-xr-x  1 root  wheel  155344 Sep 16 10:00 libssl3.so.1
$

should those be:

lrwxr-xr-x  1 root  wheel  12 Sep 16 09:59 libssl3.so -> 
libssl.so.3

-r-xr-xr-x  1 root  wheel  155344 Sep 16 10:00 libssl.so.3

or some such thing, because when I attempt to start something like
postgresql81, I get:

$ psql
/libexec/ld-elf.so.1: Shared object "libssl.so.3" not found, required
by "psql"
$

I need to get the following apps running on the new FREEBSD 6.0 
machine:


1) openssl

then,

2) apache2
3) subversion
4) uw-imap
5) postgresql81 or postgresql80+postgis
6) php

etc, etc, etc and I'm concerned that none of those will work with the
current status of openssl on freebsd 6.0. I'm running

$ uname -a
FreeBSD bobby.xxx.xxx 6.0-RELEASE FreeBSD 6.0-RELEASE #1: Fri Nov 18
10:47:37 PST 2005
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC amd64



OpenSSL is in the base system and the library version should be 4, not
3.  Is there some reason you're installing it from the ports?



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
"[EMAIL PROTECTED]"


Another user had a similar issue like this with OpenSSL, here is what I 
advised him to do which in the end worked perfectly.


Edit your make.conf file *"/etc/make.conf" *and please in the following:

*WITH_OPENSSL_BASE=yes

*This will cause all future installed ports to build against the base 
version of OpenSSL rather than trying to install the port version as a 
dependency.


You can then uninstall the port version of openssl 
*"/usr/ports/security/openssl make deinstall clean"*


Once the uninstall is complete, reinstall all OpenSSL required ports 
either by using portupgrade or by manually deinstalling and then 
reinstalling the port as they will now build against the base version of 
OpenSSL.


Thanks,

Russell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: SCHED_ULE Scheduler FreeBSD 6 - Release

2005-11-23 Thread Russell E. Meek

Kris Kennaway wrote:


On Wed, Nov 23, 2005 at 05:11:02PM -0500, Russell Meek wrote:
 

Is anyone here currently using the *SCHED_ULE* scheduler in a server 
enviroment, production or non?


Pros?  Cons?
   



This question has been asked quite often, so you would have done well
to research the answer before asking :) 


It's slower on the workloads I've tested and is not stable on machines
with many CPUs (e.g. 12).

Kris
 


Kris,

This question has been asked quite often, so you would have done well
to research the answer before asking  :) 


Shitty remark, not wise to jump to conclusions.


Common Sense would dictate that it would be highly retarded for me to 
ask a question that I have not at least ever so slightly attempted to 
look into.


so you would have done well to research the answer before asking


I see you agree


google.com/bsd is a trusted friend, however not much out there on 
performance states between 4BSD and SCHED_ULE on FreeBSD 6 Release.


It's slower on the workloads I've tested and is not stable on machines
with many CPUs (e.g. 12).


That is all I needed. Thanks again for the response.

Russell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


SCHED_ULE Scheduler FreeBSD 6 - Release

2005-11-23 Thread Russell Meek
Is anyone here currently using the *SCHED_ULE* scheduler in a server 
enviroment, production or non?


Pros?  Cons?

Thanks,

Russell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD 6.0 GENERIC Kernel perfomance

2005-11-23 Thread Russell Meek

Dmytro Surovtsev wrote:


Kris,

thanks for reply. I did not provide any special tests for performance, 
I catch it just working on my workstation - P-4, 3 GHz, 512 MB.
Long time ago (several monthes) I've used Gentoo Linux, but siwtched 
to FreeBSD because of better performance especially when I work in X.
About the port set: what do you mean under "> upgrading your ports 
properly"? I've downloaded the ports.tar.gz (about 30M) and untarred 
it to /usr/ports. what else?


Dmytro

Kris Kennaway wrote:


On Tue, Nov 22, 2005 at 05:32:12PM +, Dmytro Surovtsev wrote:


Hello,

Maybe it's my own opinion but I've discovered that 6.0 kernel is 
much slower than 5.4, I mean GENERIC in both cases.




It's only your own opinion until you share with us the measurements
that led you to conclude this.  FreeBSD 6.0 is much faster than
FreeBSD 5.4 in my measurements, especially in the area of filesystem
performance.


And, as well, 6.0 works right with the set of ports come with it in 
distribution inly. Nearly any new port can not assemble with 
differnent errors, mostly like: "The version of library XXX is 
installed, it's conflict with XXX-1, please do pkg_delete, and 
pkg_add then". But after than nearly nothing works.




This is not a FreeBSD 6.0 problem, it indicates that you aren't
upgrading your ports properly.

Look into the portupgrade tool, and if you have specific problems with
using it, then post specific questions.

Kris


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
"[EMAIL PROTECTED]"


Dmytro,

Sorry the debug -g option did not help.

I have only noticed increased speed with 6 vs 5.4, but then again I am 
not using X, I use FreeBSD only for servers.


I noticed a slight lag at first and was not using the SCHED_ULE 
scheduler, but the 4BSD.


Removing debug -g and recompiling my kernel pretty much solved that.

Thanks,

Russell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: args to `make` within the ports tree

2005-11-23 Thread Russell Meek

Roland Smith wrote:


On Wed, Nov 23, 2005 at 10:50:19AM -0500, Mike Hernandez wrote:
 


On  Wed, Nov 23, 2005 at 06:35:13PM +0300, Odhiambo Washington wrote:
   


There appears to be so many arguments to `make` when compiling
applications fro the ports tree.
What beats me is where they are documented ;)
 


/etc/make.conf?
   



Try /usr/ports/KNOBS for the most common ones, and the Makefile of each
port for specific ones.

Roland
 




Many ports fail if you try to use extravagant make flags like what you 
would use with Gentoo.


The ones that I use for the most optimal performance are:

*CPUTYPE?=* (Enter your CPUTYPE here, ex. prescott, p4, etc.)
*CFLAGS= -O -PIPE*
*COPTFLAGS= -O -PIPE*

Place a space between the *=* and your options.

These are systemwide commands that all ports will use during the build 
process.


*CPUTYPE?=*

An command for applications to be built with code optimizations for your 
CPU type, refer to the FreeBSD handbook for the different types available. 
The most common entries are *p4* if you have a Generic Pentium 4 
(Northwood, etc) or *prescott* if you are using a P4 Prescott model 
processor.


There are many for AMD also, these are listed in the handbook.

*CFLAGS= -O -PIPE*

Command optimizations for the GNU C compiler, -O and -PIPE I believe are 
standard for FreeBSD 6 Release, however I still include them in my 
Make.conf.  -O2 / -O3 are additional options you can use instead of -O, 
however it is not recommended.  I have used -O2 without any issues when 
building from ports, however I have noticed no difference between -O and 
-O2.


*-O* sets the optimization level, in this case 1.

*- PIPE* causes code to be passed between processes using pipes during 
compilation rather than using temporary files, which has obvious I/O 
advantages.


*COPTFLAGS= -O -PIPE*

Optimizational flags used when compiling your kernel, again I stick to 
what works -O and -PIPE.  I have noticed no breakage when using -O2, but 
then again I have noticed no performance increase on my servers either.


If you are just looking for some quick tweaks, these should set you on 
the right track.


Thanks,

Russell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Can't compile kernel

2005-11-23 Thread Russell Meek

Lowell Gilbert wrote:


Don't top-post, please.

Jose Borquez <[EMAIL PROTECTED]> writes:
 

 Peter <[EMAIL PROTECTED]> wrote:  
--- Jose Borquez  wrote:


   


I made a standard install of FreeBSD 5.4  with Kern-Developer  Full
binaries and doc, kernel source  only.  I attempted to compile a custom
kernel running:
 make buildkernel KERNCONF=CUSTOM  Then I get the following error:
make: don't know how to make buildkernel. Stop
 I run it from the /usr/src/ directory.  The /usr/src/ directory is 
empty.  Does that mean the source files were not installed?

 Could someone please give me any clues as to what I am missing or have
done incorrectly?
 


The /usr/src/sys directory should contain the kernel source code.  Your
claim that the /usr/src directory is empty is strange since you also say
you are compiling a custom kernel.  Where is the custom kernel config file
if not under /usr/src/sys//conf?
   




 

The custom kernel config file is in  /usr/src/sys/i386/conf  I did more reading from the FreeBSD  website handbook and it said if you installed only the kernel source  code that you need to compile the traditional way using: 
 
 /usr/src/sys/i386/conf/config CUSTOM  then change to the build directory
 
 /usr/src/sys/i386/compile/CUSTOM
 
 then run make depend.
 
 All of this worked just fine, but now when I run make install I get the following error message: 
 You must build a kernel first.

 *** Error code 1
 
 Stop in /usr/src/sys/i386/compile/CUSTOM.

 # /usr/src/sys/i386/compile/CUSTOM
 
 What is the problem here?
   



In that directory, I believe you need to run "make" before "make
install".
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
 


Jose,

Delete: 


*/usr/src/sys/i386/compile/CUSTOM*

Run:

*config /usr/src/sys/i386/config CUSTOM*

Drop into Single User Mode if possible:

*init 1*

Once in Single User Mode Run:

*mount -a
mount -u
mount -a*

Then *CD* into */usr/src/sys/i386/compile/CUSTOM *and* *Run:

*make depend && make && make install*

When Complete, restart into your new kernel.

Once rebooted, you can then delete the *kernel.old* directory under */boot* to 
free up some space on the */* directory.

Thanks,

Russell



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: FreeBSD 6.0 GENERIC Kernel perfomance

2005-11-22 Thread Russell Meek

Kris Kennaway wrote:


On Tue, Nov 22, 2005 at 05:32:12PM +, Dmytro Surovtsev wrote:
 


Hello,

Maybe it's my own opinion but I've discovered that 6.0 kernel is much 
slower than 5.4, I mean GENERIC in both cases.
   



It's only your own opinion until you share with us the measurements
that led you to conclude this.  FreeBSD 6.0 is much faster than
FreeBSD 5.4 in my measurements, especially in the area of filesystem
performance.

 

And, as well, 6.0 works 
right with the set of ports come with it in distribution inly. Nearly 
any new port can not assemble with differnent errors, mostly like: "The 
version of library XXX is installed, it's conflict with XXX-1, please do 
pkg_delete, and pkg_add then". But after than nearly nothing works.
   



This is not a FreeBSD 6.0 problem, it indicates that you aren't
upgrading your ports properly.

Look into the portupgrade tool, and if you have specific problems with
using it, then post specific questions.

Kris
 


Dmytro,

The stock Generic Kernel for 6.0-Release has debugging features which 
according to the kernel developement team where left in during release.


Try to recompile the Generic Kernel with the option debug -g commented 
out and see if that helps with the speed issues you have encountered.


Thanks,

Russell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Should I have 2 copies of OpenSSL?

2005-11-20 Thread Russell Meek

Justin Meyer wrote:


Hi Russell!

On Fri, 18 Nov 2005, Russell E. Meek wrote:

 


Justin Meyer wrote:

   


What gives? Is the way things should be? Or did I foul something up
somewhere along the way through my upgrades? If I did mess something up,
what should I do to fix it?

 



 


Justin,

How about trying this, you have the most recent version of openssl 
installed in base due to the upgrade to 6.0 - release.


If you have the OpenSSL port installed why don't you uninstall the port 
and place the following in your /etc/make.conf file


WITH_OPENSSL_BASE=yes

This will force all ports you install going foward to use the base 
install of OpenSSL and not to install OpenSSL as a dependency from ports.


You could then make deinstall,  make install clean && make distclean any 
port that requires OpenSSL, Ruby for instance.


This should make it build with the base install, eliminating the version 
conflict.
   



That seems to have done the trick, Russell; the script works again!
Thank you very much for the suggestions :)

 


No problem, anytime
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Should I have 2 copies of OpenSSL?

2005-11-17 Thread Russell E. Meek

Justin Meyer wrote:


Hi Folks,

I've got a 6.0-STABLE box here that I've upgraded from sources serveral
times, from all the way back from 5.0 (and maybe from 4.x; I honestly
can't remember at this point...) I'm fairly sure I followed directions
properly along the way, because I always got everything working again
after each upgrade.

Except this time, a Ruby script using Ruby's 'http-access2' module
started throwing odd OpenSSL exceptions. After poking a bit, I found the
following:

 


ttyp3 [EMAIL PROTECTED]:~/code/ruby $ /usr/bin/openssl version
   


OpenSSL 0.9.7e-p1 25 Oct 2004
 


ttyp3 [EMAIL PROTECTED]:~/code/ruby $ /usr/local/bin/openssl version
   


OpenSSL 0.9.8a 11 Oct 2005

I guess the one in /usr/bin came with the system, and the one in
/usr/local/bin came from ports:

 


ttyp3 [EMAIL PROTECTED]:~/code/ruby $ pkg_info|grep openssl
   


openssl-0.9.8a  SSL and crypto library

What gives? Is the way things should be? Or did I foul something up
somewhere along the way through my upgrades? If I did mess something up,
what should I do to fix it?

Thank you!

 


Justin,

How about trying this, you have the most recent version of openssl 
installed in base due to the upgrade to 6.0 - release.


If you have the OpenSSL port installed why don't you uninstall the port 
and place the following in your /etc/make.conf file


WITH_OPENSSL_BASE=yes

This will force all ports you install going foward to use the base 
install of OpenSSL and not to install OpenSSL as a dependency from ports.


You could then make deinstall,  make install clean && make distclean any 
port that requires OpenSSL, Ruby for instance.


This should make it build with the base install, eliminating the version 
conflict.


Also if you by chance have pkgtools installed, a quick portsclean -CDDLP 
would not hurt once you finished re-installing all OpenSSL dependant ports.


-CDDLP will clean out all work directories and distfiles from the entire 
ports collection if they exist or were left over.


Thanks,

--
Russell E. Meek
www.russellmeek.net

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Unknown Program

2005-11-15 Thread Russell Meek

Gerard Seibert wrote:

I am running FreeBSD 5.4 presently. In my /usr/local/etc/rc.d 
directory, I have come across this file: '001slpd.sh'. I cannot seem 
to find out what it does or how it got there. It does not appear to be 
running; however, employing the 'status' switch produces nothing.


I have tried using help, info and man without success. Perhaps someone 
can enlighten me as to this programs purpose.



slpd.sh should be related to OpenSLP, Service Location Protocol.

Have you opened the slpd.sh file to see if there are any indicators to 
what it is calling.


Russell
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Please confirm your message

2005-11-07 Thread Neil Russell

Hi,


The message you sent recently is being held because your address
<[EMAIL PROTECTED]> has not been verified.

To confirm that your message was not junk-mail, please reply to this
Email or send an empty message to this address:

   [EMAIL PROTECTED]

You should only have to confirm your address once.


Neil.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


periodic scripts execution order

2005-11-02 Thread Russell Cloran
Hi,

I have a question regarding the execution order of periodic scripts. In
the default configuration, scripts in /etc/periodic/*/ are executed
before /usr/local/etc/periodic/*/, regardless of numbering.

Surely the sensible thing to do would be to execute scripts in an order
based on their numbering of the script, regardless of location? A patch
to /usr/sbin/periodic to make this happen would be fairly trivial ...
so, I'm wondering if there is a reason that the two are run separately? 

The way it currently runs there is no (elegant) way (that I can find) to
write a local script which updates data before the system scripts are
run. This would be nice to have. Should this be filed as a bug?

Thanks in advance,

Russell
-- 
echo http://russell.rucus.net/spam/| sed 's,t/.*,t,;P;s,.*//,,;s,\.,@,;'



smime.p7s
Description: S/MIME cryptographic signature


Re: IPSec and Racoon between 5.4 and 4.11

2005-05-18 Thread Daren Russell
Daren Russell wrote:
> Hi,
> 
> We have a VPN between two FBSD machines using IPSEC and Racoon.  I
> managed to put this together a couple of years back with (getting) old
> hardware, although I am certainly no expert.  One of the machines is
> about to be replaced as it is occasionally conking out, and I though I
> would try the 5.4 release on the new hardware (both existing machines
> are running 4.9)
> 
> I have setup internally the layout and effectively replicated the
> configs of both machines (except for the one being 5.4, and a second
> running 4.11 instead of 4.9), but I cannot get them talking.  The
> configs for Racoon/IPSec/psk have been transferred over with zero
> changes.  The 5.4 machine is using standard IPSEC (not FAST_IPSEC), and
> a standard tunnel works fine.  It's as soon as IPSec/Racoon is brought
> in that it falls over.
> 
> Has anybody got 5.4 <-> 4.11 talking in this config, or does anybody
> know of any pitfalls because of kernel changes?
> 
> The only other thing is the 5.4 machine is running amd64.
> 

Just as a follow up for the archives:

I re-installed using the i386 arch (the machine was amd64) and with the
exact same config files, the VPN came straight up.

I guess there is an issue with running racoon on amd64 at the moment.
Maybe this will help anybody else considering this setup.

Regards
Daren

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: IPSec and Racoon between 5.4 and 4.11

2005-05-17 Thread Daren Russell
Mike Tancsa wrote:
> On Tue, 17 May 2005 09:33:40 +0100, in sentex.lists.freebsd.questions
> you wrote:
> 
>>A basic tunnel (without any encryption) works fine.  As soon as
>>ipsec_enable is set in rc.conf, it fails.
>>
>>setkey -D shows No SAD entries.
> 
> 
>>If I start a ping from 192.168.1.254 -> 192.168.0.254, the receiving
>>machine get's an 'Invalid length of payload' error, whilst the sending
>>machine is getting an 'phase 2 negotiation failed due to time up waiting
>>for phase1.  ESP 62.x.x.125->82.x.x.141'  (The ip's shown are what they
>>should be.)  I can probably transfer entire parts of the log files if
>>required, but at the moment, both machines are isolated.
>>
>>A further point I've discovered having left them running for a while, is
>>the racoon on the AMD64 keeps crashing and dumping core (although I
>>don't know what to do with that!).  Maybe there is an issue with racoon
>>on 64bit?  Maybe I should try re-installing with a standard i386 arch.
>>(Last ditch!)
> 
> 
> Yes, I would try and see if moving to i386 fixes the problem.
> Assuming you do have all the configs correct, there is no reason why
> it should not work.
> 
>>Both racoon's are 'racoon-2005-0510a' BTW.
> 
> 
> I have only just started using this version last weekend so I am not
> sure how good it is, but I suspect its the AMD64 thats at issue if all
> your configs are indeed correct.

With heavy heart...

I triple, quadruple checked and then to be even more sure, I copied all
the files from the live servers into the test servers again, with the
same effect.

Time to start from scratch I guess.

Thanks again
Daren

> 
>   ---Mike
> 
> Mike Tancsa, Sentex communications http://www.sentex.net
> Providing Internet Access since 1994
> [EMAIL PROTECTED], (http://www.tancsa.com)
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: IPSec and Racoon between 5.4 and 4.11

2005-05-17 Thread Daren Russell
Mike Tancsa wrote:
> On Mon, 16 May 2005 12:51:50 +0100, in sentex.lists.freebsd.questions
> you wrote:
> 
> 
>>Hi,
>>
>>Has anybody got 5.4 <-> 4.11 talking in this config, or does anybody
>>know of any pitfalls because of kernel changes?
> 
> 
> There should not be any issues as I have 90+ RELENG4 boxes deployed
> talking to a 5.4 server and a dozen RELENG_5 boxes talking to 2
> RELENG_4 servers generally with out issue. The one thing we run into
> from time to time is the issue of net.key.prefered_oldsa=1 on
> FAST_IPSEC on RELENG_4.  But other than that, it works.  What issues
> are you running into ?  Did you enable debug logging in racoon ? What
> state do the tunnels get to ? i.e what does setkey -D show ?
> 
I didn't think there should be.

A basic tunnel (without any encryption) works fine.  As soon as
ipsec_enable is set in rc.conf, it fails.

setkey -D shows No SAD entries.

When racoon is restarted, the debug log shows (I believe, I honestly
don't understand half of what it logs!) that the /etc/ipsec.conf entries
are read:

(I'm on a different PC, so this is copied from the screen)
racoon: DEBUG: policy.c:184:cmpspidxstrict(): sub:0x7fffe940:
192.168.0.0/24[0] 192.168.1.0/24[0] proto=any dir=out
racoon: DEBUG: policy.c:184:cmpspidxstrict(): db :0x568810:
192.168.1.0/24[0] 192.168.0.0/24[0] proto=any dir=in

with similiar on the second server (althought the IP's are the opposite
way round)

If I start a ping from 192.168.1.254 -> 192.168.0.254, the receiving
machine get's an 'Invalid length of payload' error, whilst the sending
machine is getting an 'phase 2 negotiation failed due to time up waiting
for phase1.  ESP 62.x.x.125->82.x.x.141'  (The ip's shown are what they
should be.)  I can probably transfer entire parts of the log files if
required, but at the moment, both machines are isolated.

A further point I've discovered having left them running for a while, is
the racoon on the AMD64 keeps crashing and dumping core (although I
don't know what to do with that!).  Maybe there is an issue with racoon
on 64bit?  Maybe I should try re-installing with a standard i386 arch.
(Last ditch!)

Both racoon's are 'racoon-2005-0510a' BTW.

Thanks
Daren


>   ---Mike
> 
> Mike Tancsa, Sentex communications http://www.sentex.net
> Providing Internet Access since 1994
> [EMAIL PROTECTED], (http://www.tancsa.com)
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


IPSec and Racoon between 5.4 and 4.11

2005-05-16 Thread Daren Russell
Hi,

We have a VPN between two FBSD machines using IPSEC and Racoon.  I
managed to put this together a couple of years back with (getting) old
hardware, although I am certainly no expert.  One of the machines is
about to be replaced as it is occasionally conking out, and I though I
would try the 5.4 release on the new hardware (both existing machines
are running 4.9)

I have setup internally the layout and effectively replicated the
configs of both machines (except for the one being 5.4, and a second
running 4.11 instead of 4.9), but I cannot get them talking.  The
configs for Racoon/IPSec/psk have been transferred over with zero
changes.  The 5.4 machine is using standard IPSEC (not FAST_IPSEC), and
a standard tunnel works fine.  It's as soon as IPSec/Racoon is brought
in that it falls over.

Has anybody got 5.4 <-> 4.11 talking in this config, or does anybody
know of any pitfalls because of kernel changes?

The only other thing is the 5.4 machine is running amd64.

Thanks for any help / pointers.
Daren

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: IP address conflicts

2004-09-27 Thread russell
On 28/09/2004, at 1:25 PM, Ted Mittelstaedt wrote:
or use a tool like arpwatch that is specifically designed to let you
know when MAC/IP relationships change on your network.
You don't even need to do that - any router on the network is going to 
log
the MAC address because they will see the arp change, as will the other
servers.
yeah, of course they'll see the change. but what will they do about it? 
update their internal ARP table and that's about it, unless they're 
smart enough (and correctly configured) to do more. arpwatch is simple 
to install and will notify you straight away when things happen that 
might need your attention.

you log the MAC addresses of all the fixed workstations in the school,
then when one of them starts doing the wrong thing you know *exactly*
where to go to nab the culprit.
How, exactly?  Do you think that he has a list of all MAC addresses on 
the
network and who is using them?
the educational institutions I've worked in tend to be pretty anal 
about having a database of what computers they own and where they're 
located - something to do with stopping people from walking off with 
their assets. if your vendor is good they'll provide the machine MAC 
address along with the serial number and amount of installed RAM. if 
not then there's some walking to do. spend half a day and document the 
fixed machines on the network.

Getting the MAC address is not the problem.  Finding it on what is
essentially
a completely flat network is.  You need managed switches for this so 
you can
see what port the offending MAC address is on.
now you're assuming that there's documentation as to what ports come 
out at what wall points, and that there's not still a lab full of 
dead-ass old machines sitting on 10Base2.

If it's not one of the fixed
workstations then you've got a bit more work to find the kiddie, but
it's nothing insurmountable.
Unless of course the kiddies are using made up MAC addresses like
BADBEEF, DEADBEEF, CO1DCOED, and such.
I'm assuming here, having worked in uni computer labs and seen this 
sort of crud being done, that what's happening is someone is changing 
the network settings on a PC... I don't recall seeing a text field next 
to the "enter your IP address" box that says "enter your MAC 
address"...

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


disabling USB in install kernel

2004-09-19 Thread russell
Hi all,
I'm trying to get FreeBSD installed on a Sony VAIO U50, but the install 
kernel never gets past probing the USB devices and I can't for the life 
of me work out how to disable USB. In OpenBSD I "boot -c" to bring up 
the user kernel config and then "disable uhci*" and all is good, but 
the FreeBSD equivalent eludes me. The ports are all USB2, and the 
responses I've seen to other people with similar symptoms is to tell 
the BIOS to not emulate a PS-2 keyboard and mouse - unfortunately my 
BIOS doesn't have any options along those lines.

I'm PXE-booting the 5.3B4 installer, at the beastie screen I drop to 
the loader prompt, and then

set hint.uhci.0.disabled=1
set hint.uhci.1.disabled=1
set boot_userconfig=1
boot
but I never see the userconfig screen and the kernel boots the same as 
if none of those options were set. Here is the tail end of the messages 
the kernel shows - after the second uhub1 message it just stops (I've 
left it for 10 minutes or so and there's no progress). Any suggestions 
would be much appreciated.

uhci0:  port 0x1820-0x183f 
irq 9 at device 29.0 on pci0
uhci0: [GIANT-LOCKED]
usb0:  on uhci0
usb0: USB revision 1.0
uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1:  port 0x1840-0x185f 
irq 9 at device 29.1 on pci0
uhci1: [GIANT-LOCKED]
usb1:  on uhci1
usb1: USB revision 1.0
uhub1: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered

cheers
Russell
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Vim on SMB share

2004-09-13 Thread Daren Russell
Giorgos Keramidas wrote:
On 2004-09-10 09:22, Daren Russell <[EMAIL PROTECTED]> wrote:
Thanks for the ideas.  The server side is Win2k (so not much I can do
there!), the BSD is using version 3 of the Samba client, so I'll try
downgrading it to version 2 and see how I go.
I guess it must also be to do with the way Vim edits files, as the basic
FBSD editor (ee) seems to manage.

Vim tries to create a file called .FILENAME.swp when you edit FILENAME.
The leading dot is probably what breaks the way vim works on Samba
shares.  You can always try to make vim write its swap files in another
location, i.e. in `/var/tmp' with this in your .vimrc:
set dir=/var/tmp
or you can disable swapfiles altogether with
set noswapfile
You can even play nice tricks like selectively disabling the swapfile
only for files that "live" in the well-known path of your Samba shares
with something similar to this in your .vimrc:
if !exists("samba_swapfile_hack")
  let samba_swapfile_hack = 1
  autocmd BufNewFile,BufRead /share/win2k/* set noswapfile
endif
Unless, of course, my guess is wrong and all this is nonsense :-)
Giorgos
I tried it on another FBsd box we have running 4.10 (the first box was 
running 5.something) and it worked fine.

Comparing them it appears to have been something to do with group 
permissions, although the user had full rwx access, they weren't in the 
group that the share was mounted with.  The 4.10 box had the directory 
the share was mounted on set to the users user/group by default.

I'm guessing SMBFS is a bit paranoid about user/group security (probably 
a good thing though!)

Daren
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Vim on SMB share

2004-09-10 Thread Daren Russell
Charles Ulrich wrote:
Daren Russell said:
Hi,
I know this is slightly OT, but it is still using FBSD!
I have a SMB share mounted, and can generally write to it.  I can copy
files to it, delete them, use 'ee' to edit and save them.
However, when using Vim, I can load and edit without warning, but if I
try to save it I get "E212: Can't open file for writing"
I can however create a new file on the share using Vim without problems,
try to edit it and get the same problem.
Whilst using Gentoo Linux, I did not have an issue with this (but that
box has destroyed itself, hence the move to a FBSD box)
Is this a known thing with Vim/SMB/FBSD?  Any ideas on something stupid
I have overlooked?
Thanks
Daren

Hi,
I recall running into this and other problems when I was using Samba 3.x on a
4.10 FreeBSD server and smbfs on a 5.2.1 FreeBSD client. In frustration, I
updated the server to 5.2.1 and downgraded Samba to 2.x and haven't had
problems since. I'd have a hard time believing that going to 5.2.1 on the
server side fixed the problem. Rather, I suspect that FreeBSD's smbfs has had
little attention lately and doesn't like the changes that have been made to
Samba since 2.x.
Alternatively, some of the recent patches to 5.2.1 may have had some positive
effect on the client's smbfs. Wish I could be more specific on all of this.
Charles Ulrich
Thanks for the ideas.  The server side is Win2k (so not much I can do 
there!), the BSD is using version 3 of the Samba client, so I'll try 
downgrading it to version 2 and see how I go.

I guess it must also be to do with the way Vim edits files, as the basic 
FBSD editor (ee) seems to manage.

Regards
Daren
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Vim on SMB share

2004-09-09 Thread Daren Russell
Hi,
I know this is slightly OT, but it is still using FBSD!
I have a SMB share mounted, and can generally write to it.  I can copy 
files to it, delete them, use 'ee' to edit and save them.

However, when using Vim, I can load and edit without warning, but if I 
try to save it I get "E212: Can't open file for writing"

I can however create a new file on the share using Vim without problems, 
try to edit it and get the same problem.

Whilst using Gentoo Linux, I did not have an issue with this (but that 
box has destroyed itself, hence the move to a FBSD box)

Is this a known thing with Vim/SMB/FBSD?  Any ideas on something stupid 
I have overlooked?

Thanks
Daren
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Open Office?

2004-08-11 Thread Russell J. Wood
On Wed, Aug 11, 2004 at 10:11:41AM +0200, h.kriege wrote:
>Hi there,
>Will Open Offoice run on Free BSD?
>regards,
>[EMAIL PROTECTED]

Yes, it's in the ports collection (/usr/ports/editors).

- Russell


pgpUg00pRRJlt.pgp
Description: PGP signature


Re: OT: BSDForums registration ..

2004-08-07 Thread Russell J. Wood
Yes, sorry. It's http://forums.bsdnexus.com/ (not .org).

- Russell

On Sat, Aug 07, 2004 at 01:06:55PM +0200, Gustaaf Wijnands wrote:
>Russell J. Wood wrote:
>
>http://forums.bsdnexus.org/ didn't work. I assume you meant
>http://forums.bsdnexus.com/ ?
>
>-- 
>
>Gustaaf
>
>___
>[EMAIL PROTECTED] mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>To unsubscribe, send any mail to "[EMAIL PROTECTED]"


pgpQuhORtYuxP.pgp
Description: PGP signature


Re: OT: BSDForums registration ..

2004-08-07 Thread Russell J. Wood
Hello Joshua,

Try http://forums.bsdnexus.org/. It's a forum for all BSD flavours.

- Russell

On Fri, Aug 06, 2004 at 10:39:33PM -0700, Joshua Banks wrote:
>Has anyone tried to join/register at:
>http://www.freebsdforums.org/
>
>I've joined and registered and I'm able to login, but after 24hrs I'm
>still unable to create new threads or reply to existing ones. I've
>emailed   [EMAIL PROTECTED] without any response. I thought
>maybe I was over looking something but I don't think that I am. 
>
>When I try and click on the Registration link in my email I get:
>"Your account has been activated but you are currently in the
>moderation queue to be added to the forum."
>
>Is there a more preferable FreeBSD forum other than the one above?
>
>Thanks,
>Joshua Banks
>
>
>   
>   
>__
>Do you Yahoo!?
>New and Improved Yahoo! Mail - 100MB free storage!
>http://promotions.yahoo.com/new_mail 
>___
>[EMAIL PROTECTED] mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>To unsubscribe, send any mail to "[EMAIL PROTECTED]"


pgpi2xGSvYeip.pgp
Description: PGP signature


Re: Can i make a CD of the Ports Collection

2004-08-03 Thread Russell J. Wood
Yes, this could be done. First, create an ISO image of the directory with
`mkisofs' (included in /usr/ports/sysutils/cdrtools):

mkisofs -A ports -allow-lowercase -allow-multidot -f -no-cache-inodes -D -l -J
-o ports.iso -p peter -R -V ports /usr/ports

Note: this will produce a non-standards compliant ISO image, but it will be able
to be read on both MS Windows and FreeBSD.

Then, burn the image to CD using `burncd' (included in
/usr/ports/sysutils/cdrtools):

burncd -f /dev/acd0 -v -s  data ports.iso fixate

When it's time to install, remove everything in `/usr/ports' (rm -r
/usr/ports/*) and copy the burned data across. And, to finish it of, CVSup the
ports afterwards.

- Russell

On Wed, Aug 04, 2004 at 11:16:44AM +0800, Peter Ryan wrote:
>I am very new, and have been reinstalling
>FreeBSD many times to clean up whatever
>mess i make and start again.
>
>I recently used cvsup to update my 
>ports collection for the 4.10_RELEASE.
>
>Now, when I reinstall, it takes much longer
>because i bring in the updated ports collection
>rather than the ports collection on the
>install CD (which i burnt from an ISO file)
>
>Is there some way to burn a cd (for me that
>means under winXP) containing the latest 
>ports collection so that I dont have to
>download it each time.
>
>Or is there a better way of installing
>with the latest ports collection.
>
>Are the ISO images updated with a new
>ports collection very frequently ?
>
>Thanks for any pointers
>Peter
>___
>[EMAIL PROTECTED] mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>To unsubscribe, send any mail to "[EMAIL PROTECTED]"


pgpETFI5lHDar.pgp
Description: PGP signature


Amaya 8.4

2004-04-18 Thread Russell J. Wood
To whom it may concern;

Is current Amaya release going to be ported soon?

- Russell
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: Installation & fdisk partitioning (slices)

2004-03-30 Thread Russell E. Mayfield
I know that writing is my worst form of communication ever!
If something is not clear please ask.
I will not bother you again.
Thanks
Russ

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Russell E.
Mayfield
Sent: Monday, March 29, 2004 6:12 AM
To: freebsd-questions
Subject: Installation & fdisk partitioning (slices)


 I picked up a copy of the "FreeBSD Handbook 2nd Ed" the other day, it came
with a installation disk for version 5.1 Current and that is what I am
trying to install. This is my first attempt to do anything with FreeBSD.
 First let me describe my system, I have a pentium 200 MMX cpu with 128MB
Ram and two 20GB hard drives (ad0 & ad2).
 I am installing FreeBSD to ad2s2. I made room for fbsd with Partition Magic
so when installing fbsd all I had to do was make it bootable and format it.
The first time I installed fbsd everything went well but I remember
wondering about the C flag that came up with the A flag when I made the
slice bootable. Later I decided on a better way to arrange my partitions, so
I had to reinstall fbsd. I tried  for 4 days to get that C flag back in
there (which the online help says is the default) and couldn't. When ever I
went ahead wihtout the C flag it made the disk unusable to anything except
fbsd, also in the disklabel program the d partition was skiped the first
time, which the handbook cautions about using, but without the C flag I had
to make a fake partition then delete it to get ride of it.
 Finaly I decided to live dangerously an I changed the geometry of the drive
to match the bios figures. It seems to work, but I haven't gotten into it
very deep.

Can somebody shed some light on this, and should I make out a bug report?
Thanks Russ

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.614 / Virus Database: 393 - Release Date: 3/5/04

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.614 / Virus Database: 393 - Release Date: 3/5/04

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.614 / Virus Database: 393 - Release Date: 3/5/04

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Installation & fdisk partitioning (slices)

2004-03-28 Thread Russell E. Mayfield
 I picked up a copy of the "FreeBSD Handbook 2nd Ed" the other day, it came
with a installation disk for version 5.1 Current and that is what I am
trying to install. This is my first attempt to do anything with FreeBSD.
 First let me describe my system, I have a pentium 200 MMX cpu with 128MB
Ram and two 20GB hard drives (ad0 & ad2).
 I am installing FreeBSD to ad2s2. I made room for fbsd with Partition Magic
so when installing fbsd all I had to do was make it bootable and format it.
The first time I installed fbsd everything went well but I remember
wondering about the C flag that came up with the A flag when I made the
slice bootable. Later I decided on a better way to arrange my partitions, so
I had to reinstall fbsd. I tried  for 4 days to get that C flag back in
there (which the online help says is the default) and couldn't. When ever I
went ahead wihtout the C flag it made the disk unusable to anything except
fbsd, also in the disklabel program the d partition was skiped the first
time, which the handbook cautions about using, but without the C flag I had
to make a fake partition then delete it to get ride of it.
 Finaly I decided to live dangerously an I changed the geometry of the drive
to match the bios figures. It seems to work, but I haven't gotten into it
very deep.

Can somebody shed some light on this, and should I make out a bug report?
Thanks Russ

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.614 / Virus Database: 393 - Release Date: 3/5/04

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


using log_in_vain shows error message "Connection attempt to 127.0.0.1:113 from 127.0.0.1:4102"

2004-02-12 Thread Julie Russell
I'm trying to track down the cause of this error message, that starts to
show up when I enable log_in_vain in rc.conf - I'm running FreeBSD 4.9
Stable.  Any direction greatly appreciated.

Feb 12 15:00:00 server1 /kernel: Connection attempt to TCP 127.0.0.1:113
from 127.0.0.1:4102

TIA,
Julie


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re[2]: resources using mhash

2004-01-10 Thread Russell Dickson
Oh thank you Dan.  That's what I needed to know.  My guess part of the
little information is because of few problems with mhash.

I'm new with FreeBSD with a box here, but my public server is run by an old
BSD hacker who is very busy and extremely cautious.  But he has not used
mhash. He makes me research everything new before addling it. Mhash is
required for the new Authorize.net validation scripts using Perl or PHP.

You made my day,
Russell Dickson


On 1/10/2004 at 9:59 PM Dan Nelson wrote:

>I'm wondering about mhash and how others find it for efficiency on a
>> web server, specifically for RAM and how much it adds to the web
>> daemon.  Also, if anyone has found a problem when recompiling it in
>> with PHP?  I can't find any such stats and little else on mhash.
>
>>From what I can tell by the port description, it's just a library, and
>it seems to duplicate functionality already in openssl's libcrypto
>library.  I wouldn't expect it to add more than a couple KB to any
>program linked with it.



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


  1   2   >