Keep log_in_vain Value
Right now on a FreeBSD 4.7 box, net.inet.tcp.log_in_vain and net.inet.udp.log_in_vain are both turned on. I know they can be disabled using sysctl, but this only fixes the problem until the machine is rebooted, at which point they both come back on. Due to our network configuration, it's constantly displaying blocked port 53 from one of the other servers, and I want UDP log_in_vain disabled permanently. Where can I do this in the configuration? Thanks. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Keep log_in_vain Value
"Matt \"Cyber Dog\" LaPlante" <[EMAIL PROTECTED]> wrote: > Right now on a FreeBSD 4.7 box, net.inet.tcp.log_in_vain and > net.inet.udp.log_in_vain are both turned on. I know they can be disabled > using sysctl, but this only fixes the problem until the machine is rebooted, > at which point they both come back on. Due to our network configuration, > it's constantly displaying blocked port 53 from one of the other servers, > and I want UDP log_in_vain disabled permanently. Where can I do this in the > configuration? Thanks. /etc/sysctl.conf -- Bill Moran Potential Technologies http://www.potentialtech.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: Keep log_in_vain Value
> -Original Message- > From: Bill Moran [mailto:[EMAIL PROTECTED] > Sent: Tuesday, June 15, 2004 1:04 PM > To: Matt "Cyber Dog" LaPlante > Cc: [EMAIL PROTECTED] > Subject: Re: Keep log_in_vain Value > > "Matt \"Cyber Dog\" LaPlante" <[EMAIL PROTECTED]> wrote: > > > Right now on a FreeBSD 4.7 box, net.inet.tcp.log_in_vain and > > net.inet.udp.log_in_vain are both turned on. I know they can be > disabled > > using sysctl, but this only fixes the problem until the machine is > rebooted, > > at which point they both come back on. Due to our network > configuration, > > it's constantly displaying blocked port 53 from one of the other > servers, > > and I want UDP log_in_vain disabled permanently. Where can I do this in > the > > configuration? Thanks. > > /etc/sysctl.conf > > -- > Bill Moran > Potential Technologies > http://www.potentialtech.com I already tried: == # $FreeBSD: src/etc/sysctl.conf,v 1.1.2.2 2001/12/19 17:52:17 ru Exp $ # # This file is read when going to multi-user and its contents piped thru # ``sysctl'' to adjust kernel values. ``man 5 sysctl.conf'' for details. # net.inet.udp.log_in_vain=0 == But that had no effect upon reboot: # sysctl -ae net.inet | grep vain net.inet.tcp.log_in_vain=1 net.inet.udp.log_in_vain=1 - Matt ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Keep log_in_vain Value
Matt "Cyber Dog" LaPlante wrote: Right now on a FreeBSD 4.7 box, net.inet.tcp.log_in_vain and net.inet.udp.log_in_vain are both turned on. I know they can be disabled using sysctl, but this only fixes the problem until the machine is rebooted, at which point they both come back on. These default to off, so I would suggest you check /etc/sysctl.conf and see whether they are being turned on there, and then change that. :-) Otherwise, something like "grep log_in_vain /etc/*" might give a hint... -- -Chuck ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: Keep log_in_vain Value
> -Original Message- > From: Chuck Swiger [mailto:[EMAIL PROTECTED] > Sent: Tuesday, June 15, 2004 1:22 PM > To: Matt "Cyber Dog" LaPlante > Cc: [EMAIL PROTECTED] > Subject: Re: Keep log_in_vain Value > > Matt "Cyber Dog" LaPlante wrote: > > Right now on a FreeBSD 4.7 box, net.inet.tcp.log_in_vain and > > net.inet.udp.log_in_vain are both turned on. I know they can be > disabled > > using sysctl, but this only fixes the problem until the machine is > rebooted, > > at which point they both come back on. > > These default to off, so I would suggest you check /etc/sysctl.conf and > see > whether they are being turned on there, and then change that. :-) > > Otherwise, something like "grep log_in_vain /etc/*" might give a hint... > > -- > -Chuck Ah, grep saves the day again. It was being turned on in rc.network. Thanks. - Matt ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Keep log_in_vain Value
Matt "Cyber Dog" LaPlante wrote: Ah, grep saves the day again. It was being turned on in rc.network. Thanks. You sure it wasn't being turned on in rc.conf instead? Anything else would mean that someone was messing with rc.network or /etc/default/rc.conf, which really should be left alone. -- Thanks, -David Fuchs BCIS ([EMAIL PROTECTED]) WWW:http://www.davidfuchs.ca/ MSN:[EMAIL PROTECTED] PGP:http://www.davidfuchs.ca/aboutme/433EEC91.pgp ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: Keep log_in_vain Value
> -Original Message- > From: David Fuchs [mailto:[EMAIL PROTECTED] > Sent: Tuesday, June 15, 2004 2:07 PM > To: Matt "Cyber Dog" LaPlante > Cc: [EMAIL PROTECTED] > Subject: Re: Keep log_in_vain Value > > Matt "Cyber Dog" LaPlante wrote: > > > Ah, grep saves the day again. It was being turned on in rc.network. > > Thanks. > > > > You sure it wasn't being turned on in rc.conf instead? Anything else > would mean that someone was messing with rc.network or > /etc/default/rc.conf, which really should be left alone. > > -- > Thanks, > -David Fuchs BCIS ([EMAIL PROTECTED]) > > WWW:http://www.davidfuchs.ca/ > MSN:[EMAIL PROTECTED] > PGP:http://www.davidfuchs.ca/aboutme/433EEC91.pgp I'm positive...there is no log_in_vain entry in rc.conf. It only appears in rc.network, where both tcp and udp were set to 1. - Matt ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Keep log_in_vain Value
"Matt \"Cyber Dog\" LaPlante" <[EMAIL PROTECTED]> wrote: > > -Original Message- > > From: David Fuchs [mailto:[EMAIL PROTECTED] > > > > Matt "Cyber Dog" LaPlante wrote: > > > > > Ah, grep saves the day again. It was being turned on in rc.network. > > > Thanks. > > > > > > > You sure it wasn't being turned on in rc.conf instead? Anything else > > would mean that someone was messing with rc.network or > > /etc/default/rc.conf, which really should be left alone. > > I'm positive...there is no log_in_vain entry in rc.conf. It only appears in > rc.network, where both tcp and udp were set to 1. That's really strange ... is you rc.network customized? It really shouldn't be. The stock one only sets log_in_vain if /etc/rc.conf tells it to. -- Bill Moran Potential Technologies http://www.potentialtech.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: Keep log_in_vain Value
hello
On Tuesday 15 June 2004 21:10, Matt "Cyber Dog" LaPlante wrote:
> > -Original Message-
> > From: David Fuchs [mailto:[EMAIL PROTECTED]
> > Sent: Tuesday, June 15, 2004 2:07 PM
> > To: Matt "Cyber Dog" LaPlante
> > Cc: [EMAIL PROTECTED]
> > Subject: Re: Keep log_in_vain Value
> >
> > Matt "Cyber Dog" LaPlante wrote:
> > > Ah, grep saves the day again. It was being turned on in rc.network.
> > > Thanks.
> >
> > You sure it wasn't being turned on in rc.conf instead? Anything else
> > would mean that someone was messing with rc.network or
> > /etc/default/rc.conf, which really should be left alone.
> >
> > --
> > Thanks,
> > -David Fuchs BCIS ([EMAIL PROTECTED])
> >
> > WWW:http://www.davidfuchs.ca/
> > MSN:[EMAIL PROTECTED]
> > PGP:http://www.davidfuchs.ca/aboutme/433EEC91.pgp
>
> I'm positive...there is no log_in_vain entry in rc.conf. It only appears
> in rc.network, where both tcp and udp were set to 1.
>
> -
> Matt
>
>
> ___
> [EMAIL PROTECTED] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
I am using 4.8
i think it was a problem with rc.network.
even it says
log_in_vain="0" # >=1 to log connects to ports w/o listeners.
in /etc/defaults/rc.conf.
rc.network is
network_pass4() {
echo -n 'Additional TCP options:'
case ${log_in_vain} in
[Nn][Oo] | '')
;;
*)
echo -n ' log_in_vain=YES'
sysctl -w net.inet.tcp.log_in_vain=1 >/dev/null
sysctl -w net.inet.udp.log_in_vain=1 >/dev/null
;;
esac
echo '.'
network_pass4_done=YES
}
this is fixed in stable as far as i see.
network_pass4() {
echo -n 'Additional TCP options:'
case ${log_in_vain} in
[Nn][Oo] | '')
log_in_vain=0
;;
[Yy][Ee][Ss])
log_in_vain=1
;;
[0-9]*)
;;
*)
echo " invalid log_in_vain setting: ${log_in_vain}"
log_in_vain=0
;;
esac
if [ "${log_in_vain}" -ne 0 ]; then
echo -n " log_in_vain=${log_in_vain}"
sysctl net.inet.tcp.log_in_vain="${log_in_vain}" >/dev/null
sysctl net.inet.udp.log_in_vain="${log_in_vain}" >/dev/null
fi
echo '.'
network_pass4_done=YES
}
in code 1 log_in_vain=* results it to be log_in_vain=1
if it is not NO
in code 2 log_in_vain="0" works as predicted ...
solution :
1 - put "log_in_vain="NO" into /etc/rc.conf
2 - modify your rc.network ---
i did the second for my box and gone to single user
and back to multiuser and there was no problem ..
Ps : code 2 is from src/etc/rc.network and 1 is 4.8's version
--
IO
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
RE: Keep log_in_vain Value
> -Original Message- > From: Bill Moran [mailto:[EMAIL PROTECTED] > Sent: Tuesday, June 15, 2004 2:59 PM > To: Matt "Cyber Dog" LaPlante > Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subject: Re: Keep log_in_vain Value > > "Matt \"Cyber Dog\" LaPlante" <[EMAIL PROTECTED]> wrote: > > > -Original Message- > > > From: David Fuchs [mailto:[EMAIL PROTECTED] > > > > > > Matt "Cyber Dog" LaPlante wrote: > > > > > > > Ah, grep saves the day again. It was being turned on in rc.network. > > > > Thanks. > > > > > > > > > > You sure it wasn't being turned on in rc.conf instead? Anything else > > > would mean that someone was messing with rc.network or > > > /etc/default/rc.conf, which really should be left alone. > > > > I'm positive...there is no log_in_vain entry in rc.conf. It only > appears in > > rc.network, where both tcp and udp were set to 1. > > That's really strange ... is you rc.network customized? It really > shouldn't > be. > > The stock one only sets log_in_vain if /etc/rc.conf tells it to. > > -- > Bill Moran > Potential Technologies > http://www.potentialtech.com Couldn't tell you, I didn't build this system. It got dumped on me when I took over a sysadmin job. I guess it's just another checkmark on my list of really strange things that have been done to this network. :) - Matt ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Keep log_in_vain Value
"Matt \"Cyber Dog\" LaPlante" <[EMAIL PROTECTED]> wrote: > > -Original Message- > > From: Bill Moran [mailto:[EMAIL PROTECTED] > > Sent: Tuesday, June 15, 2004 2:59 PM > > To: Matt "Cyber Dog" LaPlante > > Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] > > Subject: Re: Keep log_in_vain Value > > > > "Matt \"Cyber Dog\" LaPlante" <[EMAIL PROTECTED]> wrote: > > > > -Original Message- > > > > From: David Fuchs [mailto:[EMAIL PROTECTED] > > > > > > > > Matt "Cyber Dog" LaPlante wrote: > > > > > > > > > Ah, grep saves the day again. It was being turned on in rc.network. > > > > > Thanks. > > > > > > > > > > > > > You sure it wasn't being turned on in rc.conf instead? Anything else > > > > would mean that someone was messing with rc.network or > > > > /etc/default/rc.conf, which really should be left alone. > > > > > > I'm positive...there is no log_in_vain entry in rc.conf. It only > > appears in > > > rc.network, where both tcp and udp were set to 1. > > > > That's really strange ... is you rc.network customized? It really > > shouldn't > > be. > > > > The stock one only sets log_in_vain if /etc/rc.conf tells it to. > > > > -- > > Bill Moran > > Potential Technologies > > http://www.potentialtech.com > > Couldn't tell you, I didn't build this system. It got dumped on me when I > took over a sysadmin job. I guess it's just another checkmark on my list of > really strange things that have been done to this network. :) Be warned ... it's likely that either /etc/rc.network, or /etc/defaults/rc.conf have been modified. Neither of these files should be cusomized, and both will be (and should be) replaced the next time you update this machine. Make sure you backup /etc and all subdirectories before you do the next upgrade, in case the machine's behaviour changes enough that you have to search through the old versions to see see what was going on! -- Bill Moran Potential Technologies http://www.potentialtech.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
