Re: CPAN hanging on ExtUtils::MakeMaker even if installed

2012-02-22 Thread Alejandro Imass
On Tue, Feb 21, 2012 at 7:34 PM, Jaime Kikpole  wrote:
> I'm attempting to upgrade Request Tracker manually.  (I know that
> there is a port, but I'd like to preserve my data, thus I'm doing this
> "the old fashioned way."  :) )
>
> When I run the "make fixdeps" step described in the directions, it
> attempts to load ExtUtil::MakeMaker from CPAN -- even though its
> already installed.  This wouldn't be so bad, but it actually hangs and
> uses 100% of CPU time (according to "top") like its in an infinite
> loop.  This is the output just before it hangs:
>



Your post makes me very happy to know I wasn't crazy:

http://www.perlmonks.org/?node_id=918414

This is a pain in the ass and I don't know if it's a FBSD CPAN problem
or a CPAN dependency problem but it does happen, and it's really
annoying. I don't have a fix but a workaround. It will always hang on
the same test, so just ^C and "look" into the module. remove the test
and go back to the cpan shell. It won't bother you again for the whole
CPAN session.

-- 
Alejandro
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: CPAN hanging on ExtUtils::MakeMaker even if installed

2012-02-22 Thread Alejandro Imass
On Wed, Feb 22, 2012 at 10:54 AM, Alejandro Imass  wrote:
> Your post makes me very happy to know I wasn't crazy:
>
> http://www.perlmonks.org/?node_id=918414
>
> This is a pain in the ass and I don't know if it's a FBSD CPAN problem
> or a CPAN dependency problem but it does happen, and it's really
> annoying. I don't have a fix but a workaround. It will always hang on
> the same test, so just ^C and "look" into the module. remove the test
> and go back to the cpan shell. It won't bother you again for the whole
> CPAN session.
>
> --
> Alejandro

This person says the problem is in BSDPAN::ExtUtils::Packlist  - maybe
someone could help the maintainer solve this problem! It is _really_,
_really_ annoying. I sadly don't have the time right now and only deal
with problem from time to time, but if someone has the time it would
be really great to fix!!!

http://www.perlmonks.org/?node_id=922671


-- 
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: CPAN hanging on ExtUtils::MakeMaker even if installed

2012-02-22 Thread Alejandro Imass
On Wed, Feb 22, 2012 at 11:36 AM, Matthew Seaman
 wrote:
> On 22/02/2012 15:54, Alejandro Imass wrote:
>> On Tue, Feb 21, 2012 at 7:34 PM, Jaime Kikpole  
>> wrote:
[...]

> Actually, the problem as highlighted in that Perlmonks article was with
> BSDPAN::ExtUtils::Packlist.  A fix has been applied to the perl5.10,
> perl5.12 and perl5.14 ports.
>

I'm pretty sure I've seen this in 5.10 but I can't say for sure since
I upgraded all my systems to 5.12. I'm pretty sure I haven't seen it
in 5.12 though. The problem is that I got so used to it that I stopped
paying attention to it and just fixed in on the spot, so I can't
really say for sure the last time I encountered the problem.


-- 
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: CPAN hanging on ExtUtils::MakeMaker even if installed

2012-02-22 Thread Alejandro Imass
On Wed, Feb 22, 2012 at 11:40 AM, Matthew Seaman
 wrote:
> On 22/02/2012 16:35, Alejandro Imass wrote:
>> On Wed, Feb 22, 2012 at 10:54 AM, Alejandro Imass  wrote:
>>> Your post makes me very happy to know I wasn't crazy:
>>>
>>> http://www.perlmonks.org/?node_id=918414
>>>
[...]

>
> It's already been fixed in 3 of the 4 perl ports:
>
> http://www.freebsd.org/cgi/query-pr.cgi?pr=162151
>
> The remaining port (lang/perl5.8) hasn't been modified in 7 months, and
> I believe it may well be deprecated and removed fairly soon.
>
>        Cheers,
>
>        Matthew
>


Thanks for the detailed info Matthew - I guess it's time for me to
stop whining about it ;-)
It's just that I got excited to see someone else complaining about
this problem and after almost being burned at the stake on PM !
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Suggestion

2012-03-10 Thread Alejandro Imass
On Sat, Mar 10, 2012 at 2:36 AM, Erich Dollansky
 wrote:
> Hi,
>
> On Saturday 10 March 2012 14:28:05 Joshua Isom wrote:

[...]

>
> wine was able to fix the problem. Do not forget that most of the problems 
> Windows has are not linked to design.

I am guessing this is a sarcastic comment!!

ALL of Windows' problems are precisely based on poor design... just to
name a few:

- no clean separation of system and apps
- apps re-write system libs at will
- no lib versioning
- there is not out of the box user / admin separation
- no filesystem-based security
- default network protocols are insecure

...and this is only scratching the surface

Windows is a well-marketed (gangster-style) piece of crap. Same with
SAP, Oracle and many other widely-used "enterprise grade" IT. These
folks are marketing machines, not technology companies:

q{
There is no inherent value in a technology per se. The value is
determined instead by the business model used to bring it to market.
The same technology taken to the market through two different business
models will yield different amounts of value. An inferior technology
with a better business model will often trump a better technology
commercialized through an inferior business model.
}
"Open Innovation", (Chesbrough 2003)


-- 
Alejandro Imass


>
> Erich
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Suggestion

2012-03-11 Thread Alejandro Imass
On Sun, Mar 11, 2012 at 7:12 AM, Jerry  wrote:
> On Sun, 11 Mar 2012 11:23:54 +0700
> Erich Dollansky articulated:
>
>> > > FAT rules!
>> >
>> > Uh . . . what?
>>
>> It is on every phone, every camera, every toaster ...
>
> And for a very good reason; it is virtually universally usable by any
> operating system. However, the "exFAT" system is becoming more
> prevalent due to its more versatile design.
>


The only reason it's so popular is not precisely for good design.

It's only because of Microsoft's dominance of the market. They
achieved this dominance not by providing good software, but rather by
user the drug dealer's / gangster model in which they are very lax
about people copying their crappy software, and then pressuring them
into paying out with the BSA. Meanwhile, people became dependent
(addicted) to their file formats such as xls and doc, in a vicious
cycle making Microsoft ever more powerful over people's will.

They didn't kill off the competition by providing better products and
services, they just bullied their way through by threatening
distributors and hardware manufacturers, and later consumers. Today,
Microsoft is still doing this by providing "free software" to third
world schools and governments, much like Nestle does by providing
"free powdered milks and baby formula" in Africa, or like Monsanto
does when providing super seeds to struggling farmers.

As I heard someone say recently "if Al Capone were alive today he'd
run a tech company".

-- 
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Suggestion

2012-03-11 Thread Alejandro Imass
On Sun, Mar 11, 2012 at 10:55 AM, Chris  wrote:
> ... Ah yes, trying to feed the world where hunger is rampant is an evil
> thing when done by  corporate "insert name here".
>

Ah yes, the ignorance

http://en.wikipedia.org/wiki/Nestl%C3%A9_boycott
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Suggestion

2012-03-11 Thread Alejandro Imass
On Sun, Mar 11, 2012 at 11:04 AM, Alejandro Imass  wrote:
> On Sun, Mar 11, 2012 at 10:55 AM, Chris  wrote:
>> ... Ah yes, trying to feed the world where hunger is rampant is an evil
>> thing when done by  corporate "insert name here".
>>
>
> Ah yes, the ignorance
>
> http://en.wikipedia.org/wiki/Nestl%C3%A9_boycott

And you say there is no relationship:

http://www.geek.com/articles/mobile/microsoft-versus-open-source-in-the-third-world-20021115/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Modbus RTU with GSM communication

2012-03-12 Thread Alejandro Imass
On Mon, Mar 12, 2012 at 10:11 AM, Matthias Apitz  wrote:
> El día Saturday, March 10, 2012 a las 02:43:10AM -0300, Exemys escribió:
>
>> This is a message in multipart MIME format.  Your mail client should not be 
>> displaying this. Consider upgrading your mail client to view this message 
>> correctly.
>>

Hi Matthias,

Please re-send your mail in plain text.

-- 
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Terminal (TERM=xterm) on FreeBSD doesn not accept DEL or ALT key on/in a Linux YAST2 session

2012-03-12 Thread Alejandro Imass
On Mon, Mar 12, 2012 at 10:30 AM, O. Hartmann
 wrote:
> On 03/12/12 15:21, kpn...@pobox.com wrote:
>> On Mon, Mar 12, 2012 at 02:51:55PM +0100, O. Hartmann wrote:
>>> Administering Linux Suse boxes makes it opf need to login onto those
>>> boxes and use the well designed kiddy-cloaking scripting environment,
>>> called YAST/YAST2.
[...]

> Of course, it is either setenv TERM xterm in csh or TERM=xterm in
> bourne-alike shells.

Hi Oliver,

DEL and BS (Backspace) are one of those things where terminals have
failed to standardize. Remember there are *many* layers of
translations from the time you hit the key until it echoes on the
terminal. First you have local keymaps which might be sending the
wrong control sequence (e.g. Mac keyboard vs. regular PC). Then you
have the character encoding of the terminal's OS, the you may have
further translation in the protocol agents (ssh, telnet, etc.) then
you have the remote shell's settings and encodings, etc. and many
other things in between

Take a look at this article and you will probably fix the problem, and
it's probably not even on the FBSD side:

www.ibb.net/~anne/keyboard.html


Cheers,

-- 
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Suggestion

2012-03-12 Thread Alejandro Imass
On Mon, Mar 12, 2012 at 2:29 PM, Chad Perrin  wrote:
> On Mon, Mar 12, 2012 at 12:14:39PM -0400, Allen wrote:
>>
>> I'd like BeOS to come back, but I'm quite happy with BSD and Linux.
>
> Give the Haiku project a look.  It's meant to be some kind of inheritor
> of the BeOS legacy.
>

May I suggest MenuetOS if you are really looking for something cool

-- 
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Virtual Hosts & Subdomains

2012-03-16 Thread Alejandro Imass
On Fri, Mar 16, 2012 at 2:19 PM, David Hughes  wrote:
> Hi all,
>
> Forgive me if this is slightly off-topic, but I wonder if I could trouble
> you for some advice about setting up website subdomains with Apache. I
> currently have a website up and running on a jailed VPS; I've been trying to
> set up subdomains so that one might navigate to a certain area of the site
> by using a URL of the form blog.mywebsite.net rather than
> mywebsite.net/blog.
>
> I've tried reading the official Apache documentation and a number of
> tutorials that I've found online, but nothing I've tried has worked so far.
> Do Virtual Hosts behave differently if they're within a jail? Or do I need
> some sort of DNS registration for subdomains? I've been trying to figure it
> out by myself, with little success so far - I'm quite new to this.

Please specify some more info:

Are you in a FreeBSD Jail and you have a public or private IP bound to the Jail?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Subscribe request result (debian-www ML)

2012-03-17 Thread Alejandro Imass
On Sat, Mar 17, 2012 at 6:51 AM,   wrote:
> Hi, I am the fml ML manager for the ML .
>
>

Hmmm, and I thought all Debianites were FBSD-hating zealots. Guess the
Japanese tribe is more lax.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Virtual Hosts & Subdomains

2012-03-17 Thread Alejandro Imass
On Sat, Mar 17, 2012 at 3:00 AM, Robert Bonomi  wrote:
>
> David Hughes  wrote
>> Hi all,
>>
[...]

>
> This takes several things to make it work.
>  1) You must have DNS entries for all the various  {foo}.domian.tld

[...]

Yeah, for one, the OP should provide details of his implementation
since as you very well point out there are many places where this can
go wrong... We use a jail that reverse proxies to all other jails.
This allows a 2 layer set-up that is not only more secure, but more
flexible as well.

We still don't know if the OP's jail is bound to a public IP or not...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Virtual Hosts & Subdomains

2012-03-17 Thread Alejandro Imass
On Sat, Mar 17, 2012 at 12:38 PM, David Hughes
 wrote:
> Hi all,
>
> thanks very much for your advice.
> To answer your questions:
>
> It's a FreeBSD jail that I rent from Exonetric, which I've been using for
> experimental / developmental purposes. I haven't registered a personal
> domain name for it - as it's mainly for me to mess about with than for the
> world to see - but it is bound to a public IP and generic domain name
> (http://jail0152.vps.exonetric.net/). I don't have access to the domain name
> that came with the jail - and I think that is probably where the problem
> lies.
>
> Here's the current text of my httpd.conf:
> http://pastebin.com/NSaj8YfS
>
> Output of ifconfig:
>
> http://pastebin.com/Gke651xt
>
>
> I tried adding additional  entries for subdomains, but it
> didn't work - although I think I understand why that is now.
>
> Me having this jail is mostly an exercise in learning the whys and
> wherefores of remote Unix[-like] server administration - something tells me
> I need to learn more about the workings of DNS, as I'd never heard of CNAMEs
> before.
>

OK. First of all you should do it correctly and go by the file
distribution of the Apache 2 port.

Stick to pre-defined httpd.conf and just uncomment the virtual host
file towards the end of the file. Then in extras/httpd-vhosts.conf is
where you should configure you vhosts.

Once you go for virtual hosts the everything should be vhosts, you
should not mix-match single httpd settings with vhost settings. From
the on you should use the extra/ httpd and ssl vhosts in separate
files like it's pre-defined in the port.

>From your example I am assuming you want name-based vhost.

Leave the first vhost pointing to something default and safe. Apache
will default to the very first vhost defined if it cannot match a
domain name.

Realize that vhost is an http 1.1 feature, meaning that the vhost
mapping is resolved by the domain name in the http request. So even
though several domains may map to the same IP, when the request
reaches Apache it will look in it's vhost table and try to match a
domain name defined in one of the vhosts. If it cannot find one it
will default to the first one. This is very confusing and it's always
safe to leave the first one pointing something default, maybe even a
404 response.

You don't need to use the hoster's provided domain name, in fact you
shouldn't. I suspect you have your own domains so just make them point
to the IP of jail0152.vps.exonetric.net which seems to resolve to
178.250.76.43 So make __your__ domains point to that IP in your DNS (A
records).

I can't seem to find your NameVirtualHost  which is CRUCIAL for
vhosts to work. Another reson to use extra/httpd-vhosts.conf

Each vhost should match the exact definition of the NameVirtualHost
 line so for a line NameVirtualHost *:80 your vhost tags must be


Then just match the domain name with the lines for example:
ServerName www.yourdomain.com
ServerAlias yourdomain.com

you can put as many aliases as you want to match. The above will match
even if the user forgot the www


That's about it. If you use the files provided in FBSD it's easy peasy
but if step out the suggested file distribution then you will surely
get into trouble unless you really know what you're doing. The port
maintainer(s) usually get it right so follow the suggested config
structure ;-)

post back if you get it working or if you need further help!

-- 
Alejandro


>
> Thanks again for all your help, much appreciated.
>
> Best regards,
>
> David
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


UFS Crash and directories now missing

2012-04-27 Thread Alejandro Imass
Hi folks,

We had a server crash and required a hard reboot. The system is on one
disk and another disc mounts /usr/jails and everything runs in jails,
pristine base system, and the base system is working perfectly.

The second volume, the one with the jails mounted but every jail
directory disappeared except one. df still shows the data being used
so I'm guessing it's a logical error in the directory structure or
something. I unmounted the drive and ran fsck and reported no
problems. df shows the data being use so where is the data??

This is FreeBSD 8.2 updated, patched etc. The volume was UFS + Journal

Any help is GREATLY appreciated!

Thanks!

-- 
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-04-27 Thread Alejandro Imass
On Fri, Apr 27, 2012 at 7:52 PM, Alejandro Imass  wrote:
> Hi folks,
>
> We had a server crash and required a hard reboot. The system is on one
> disk and another disc mounts /usr/jails and everything runs in jails,
> pristine base system, and the base system is working perfectly.
>
> The second volume, the one with the jails mounted but every jail
> directory disappeared except one. df still shows the data being used
> so I'm guessing it's a logical error in the directory structure or
> something. I unmounted the drive and ran fsck and reported no
> problems. df shows the data being use so where is the data??
>

OK, so here is an update, maybe someone has some clue here

All the jails wound up in the /usr/local/etc/apache22 of the only
surviving jail which is the http proxy to all the other jails.

Right before the server crashed I noticed MySQL at 100% o several CPUs
and the server was on it's knees, so I'm wondering was this an
attack? is it possible that Apache or MySQL moved the files??

I mean the jails are there, I'm even backing them up right now but
how did these directories move here?

Anybody has ANY logical explanation???

Thanks,

-- 
Alejandro Imass

> This is FreeBSD 8.2 updated, patched etc. The volume was UFS + Journal
>
> Any help is GREATLY appreciated!
>
> Thanks!
>
> --
> Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-04-27 Thread Alejandro Imass
On Fri, Apr 27, 2012 at 11:00 PM, Erich Dollansky
 wrote:
> Hi,
>
> On Saturday 28 April 2012 09:33:47 Alejandro Imass wrote:
>> On Fri, Apr 27, 2012 at 7:52 PM, Alejandro Imass  wrote:
>> >
>> > We had a server crash and required a hard reboot. The system is on one
>> > disk and another disc mounts /usr/jails and everything runs in jails,
>> > pristine base system, and the base system is working perfectly.
>> >
>> > The second volume, the one with the jails mounted but every jail
>> > directory disappeared except one. df still shows the data being used
>> > so I'm guessing it's a logical error in the directory structure or
>> > something. I unmounted the drive and ran fsck and reported no
>> > problems. df shows the data being use so where is the data??
>> >
>
> what is du saying?
>>
>> OK, so here is an update, maybe someone has some clue here
>>
>> All the jails wound up in the /usr/local/etc/apache22 of the only
>> surviving jail which is the http proxy to all the other jails.
>
> You want to say that all the data you were looking for have been moved to 
> this directory?
>>

EXACTLY THAT. In fact the data is intact and I have already backed-up
everything to another disk.

>> Right before the server crashed I noticed MySQL at 100% o several CPUs
>> and the server was on it's knees, so I'm wondering was this an
>> attack? is it possible that Apache or MySQL moved the files??
>>
>> I mean the jails are there, I'm even backing them up right now but
>> how did these directories move here?
>>
>> Anybody has ANY logical explanation???
>
> Journaling is new to me. Could this be the cause?
>

Maybe so, I have no idea.

Maybe it's because EzJail mount volumes with each jail or some other
wild explanation. I honestly have never seen this before. I am just
glad that UFS was nice enough to keep my data somewhere at least, and
after my bad experiences with ZFS I can now say with a lot more
certainty that UFS rocks. I mean something got screwed up but the data
was not lost.

Hope someone can shed some light here..

-- 
Alejandro
> Erich
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-04-27 Thread Alejandro Imass
On Sat, Apr 28, 2012 at 1:43 AM, Wojciech Puchar
 wrote:
>>
>> All the jails wound up in the /usr/local/etc/apache22 of the only
>> surviving jail which is the http proxy to all the other jails.
>>
>> Right before the server crashed I noticed MySQL at 100% o several CPUs
>> and the server was on it's knees, so I'm wondering was this an
>> attack? is it possible that Apache or MySQL moved the files??
>>
>> I mean the jails are there, I'm even backing them up right now but
>> how did these directories move here?
>>
>> Anybody has ANY logical explanation???
>>
> 99% - someone did moved them.
> 1% - hardware problem possibly memory. without this there is no way for
> directory to be "accidentally" moved

I somewhat agree, but it wasn't a person. I am the only administrator,
the only one with root access. The jails were effectively moved to the
/usr/local/etc/apache22 of the single that survived at the top level.
I'm thinking something between mount, EzJail, the journal and the way
MySQL created a great deal of head contention, so something must have
gotten corrupted at the directory level like you state, but the
strange part is no _data_ corruption as such, because I was able to
physically archive the jails, move them to the correct directory and
archived them all with ezjail-admin to a different disk. I was
thinking of formatting the jails drive, but after all this disk
activity and no errors, and everything booted up correctly, I am not
so sure now that it's needed it.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-04-28 Thread Alejandro Imass
On Sat, Apr 28, 2012 at 3:22 AM, Wojciech Puchar
 wrote:
>> I somewhat agree, but it wasn't a person. I am the only administrator,
>> the only one with root access. The jails were effectively moved to the
>> /usr/local/etc/apache22 of the single that survived at the top level.
>> I'm thinking something between mount, EzJail, the journal and the way
>> MySQL created a great deal of head contention, so something must have
>> gotten corrupted at the directory level like you state, but the
>> strange part is no _data_ corruption as such, because I was able to
>> physically archive the jails, move them to the correct directory and
>
>
> no matter what you do FreeBSD DOES NOT ramdomly move directories. if you are
> sure you didn't move it yourself then it must be machine hardware problem
> but still unlikely.

After a little more research, ___it it NOT unlikely at all___ that
under high distress and a hard boot, UFS could have somehow corrupted
the directory structure, whilst maintaining the data intact. From what
I've learned so far, UFS is actually divided into 2 layers: one that
controls the directory structure and metadata and a lower layer
containing the data, so the directories being screwed up and the data
intact it is actually quite possible.

What I'm trying to do is figure out is how it happened, and try
prevent it from happening again, so instead of dismissing it as
impossibility, I think we all should spend a little time figuring out
how these things can happen and determine how it can be prevented or
reduced.

"Should you find your neighbor's beard catch fire, it's wise to soak one's own"

-- 
Alejandro
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-04-28 Thread Alejandro Imass
On Sat, Apr 28, 2012 at 11:39 AM, Robert Bonomi
 wrote:
>
>  Alejandro Imass  wrote:
>> On Sat, Apr 28, 2012 at 3:22 AM, Wojciech Puchar
>>  wrote:
>> >> I somewhat agree, but it wasn't a person. I am the only administrator,
>> >> the only one with root access. The jails were effectively moved to the
>> >> /usr/local/etc/apache22 of the single that survived at the top level.
>> >> I'm thinking something between mount, EzJail, the journal and the way
>> >> MySQL created a great deal of head contention, so something must have
>> >> gotten corrupted at the directory level like you state, but the
>> >> strange part is no _data_ corruption as such, because I was able to
>> >> physically archive the jails, move them to the correct directory and
>> >
>> >
>> > no matter what you do FreeBSD DOES NOT ramdomly move directories. if you 
>> > are
>> > sure you didn't move it yourself then it must be machine hardware problem
>> > but still unlikely.
>>
>> After a little more research, ___it it NOT unlikely at all___ that
>> under high distress and a hard boot, UFS could have somehow corrupted
>> the directory structure, whilst maintaining the data intact.
>
> This is techically accurate, *BUT* the specifics of the quote "corruption"
> unquote in the case under discussion make it *EXTREMELY* unlikely that this
> is what happened.
>
> 99.99+++% of all UFS filesystem "corruption' issues are the result of a
> system crash _between_ the time cached 'meta-data' is updated in memory
> and that data is flushed to disk (a deferred write).
>
> The second most common (and vanishingly rare) failure mode is a powerfail
> _as_ a sector of disk is being written -- resulting in 'garbage data'
> being written to disk.
>
> The next possibility is 'cosmic rays'.  If running on 'cheap' hardware (i.e.,
> without 'ECC' memory), this can cause a *SINGLE-BIT* error in data being
> output.
>
> The fact that the 'corrupted' filesystem passed fsck -without- any reported
> errors shows that everything in the filesystem meta-data was consistent
>
> Given *that*, there are precisely *TWO* ways that the 'results' that have
> been reported could have happened.
>
>  1) "Something" did a mv(2) of the various jail directories 'from' their
>     original location to the 'apache' diretory.  This involves simply
>     *copying* the diretory entry from the jail's 'parent directory' to
>     the apache directory, and then marking the entry in the original
>     parent as 'unused'.  Nothing other than the  directory whre the jail
>     'used to live', and the directory 'where it was found' are touched.
>     This occured _through_ the system 'mv' function, so all the normal
>     'housekeeping' was done properly.
>
>  2) it was -not- done though mv(2) -- but that requires that a whole
>     *series* of "corruptions" of the filesystem, _ALL_ of which had to
>     occur in 'exactly' the right way.  They are:

[...]

> I think it is safe to conclude that the probabilities -greatly- favor
> alternative #1.
>

OK. So after your comments and further research I concur with you on
the mv but if it wasn't a human, then this might be exposing a serious
security flaw in the jail system or the way EzJail implements it. The
whole point of using jails is to protect things like this from
happening. Given that the only jail that survived was the front-end
Apache Web server/reverse proxy, then it is also safe to suspect the
apache (or other) process running on it was able to perform a mv of
the rest of the jails to it's own /usr/local/etc/apache22 directory.

Is there no possibility is that after the system crash, the journal
recocery process and/or fsck could have moved this directories ?

Thanks,

-- 
Alejandro
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-04-28 Thread Alejandro Imass
On Sat, Apr 28, 2012 at 12:36 PM, Alejandro Imass  wrote:
> On Sat, Apr 28, 2012 at 11:39 AM, Robert Bonomi
>  wrote:
>>
>>  Alejandro Imass  wrote:
>>> On Sat, Apr 28, 2012 at 3:22 AM, Wojciech Puchar
>>>  wrote:
>>> >> I somewhat agree, but it wasn't a person. I am the only administrator,
>>> >> the only one with root access. The jails were effectively moved to the
>>> >> /usr/local/etc/apache22 of the single that survived at the top level.
>>> >> I'm thinking something between mount, EzJail, the journal and the way
>>> >> MySQL created a great deal of head contention, so something must have
>>> >> gotten corrupted at the directory level like you state, but the
>>> >> strange part is no _data_ corruption as such, because I was able to
>>> >> physically archive the jails, move them to the correct directory and
>>> >
>>> >
>>> > no matter what you do FreeBSD DOES NOT ramdomly move directories. if you 
>>> > are
>>> > sure you didn't move it yourself then it must be machine hardware problem
>>> > but still unlikely.
>>>
>>> After a little more research, ___it it NOT unlikely at all___ that
>>> under high distress and a hard boot, UFS could have somehow corrupted
>>> the directory structure, whilst maintaining the data intact.
>>
>> This is techically accurate, *BUT* the specifics of the quote "corruption"
>> unquote in the case under discussion make it *EXTREMELY* unlikely that this
>> is what happened.
>>
>> 99.99+++% of all UFS filesystem "corruption' issues are the result of a
>> system crash _between_ the time cached 'meta-data' is updated in memory
>> and that data is flushed to disk (a deferred write).
>>
>> The second most common (and vanishingly rare) failure mode is a powerfail
>> _as_ a sector of disk is being written -- resulting in 'garbage data'
>> being written to disk.
>>
>> The next possibility is 'cosmic rays'.  If running on 'cheap' hardware (i.e.,
>> without 'ECC' memory), this can cause a *SINGLE-BIT* error in data being
>> output.
>>
>> The fact that the 'corrupted' filesystem passed fsck -without- any reported
>> errors shows that everything in the filesystem meta-data was consistent
>>
>> Given *that*, there are precisely *TWO* ways that the 'results' that have
>> been reported could have happened.
>>
>>  1) "Something" did a mv(2) of the various jail directories 'from' their
>>     original location to the 'apache' diretory.  This involves simply
>>     *copying* the diretory entry from the jail's 'parent directory' to
>>     the apache directory, and then marking the entry in the original
>>     parent as 'unused'.  Nothing other than the  directory whre the jail
>>     'used to live', and the directory 'where it was found' are touched.
>>     This occured _through_ the system 'mv' function, so all the normal
>>     'housekeeping' was done properly.
>>
>>  2) it was -not- done though mv(2) -- but that requires that a whole
>>     *series* of "corruptions" of the filesystem, _ALL_ of which had to
>>     occur in 'exactly' the right way.  They are:
>
> [...]
>
>> I think it is safe to conclude that the probabilities -greatly- favor
>> alternative #1.
>>
>
> OK. So after your comments and further research I concur with you on
> the mv but if it wasn't a human, then this might be exposing a serious
> security flaw in the jail system or the way EzJail implements it. The
> whole point of using jails is to protect things like this from
> happening. Given that the only jail that survived was the front-end
> Apache Web server/reverse proxy, then it is also safe to suspect the
> apache (or other) process running on it was able to perform a mv of
> the rest of the jails to it's own /usr/local/etc/apache22 directory.
>
> Is there no possibility is that after the system crash, the journal
> recocery process and/or fsck could have moved this directories ?
>

Also note that even the EzJail basejail was moved also, so it could be
a security hole in the way nullfs is used or in nullfs itself. but the
curious thing is that the basejail is supposed to be mounted read-only
so how did that get moved to the http-proxy jail??

That is why I suspect it could have been something in the boot process
like the journal recovery, fsck or something else with that kind of
privilege and when the EzJail filesystems were unmounted.

-- 
Alejandro
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-04-28 Thread Alejandro Imass
On Sat, Apr 28, 2012 at 1:31 PM, Robert Bonomi  wrote:
>
> Alejandro Imass  wrote:
>> On Sat, Apr 28, 2012 at 11:39 AM, Robert Bonomi
>>  wrote:
>> >  Alejandro Imass  wrote:
>> >> After a little more research, ___it it NOT unlikely at all___ that
>> >> under high distress and a hard boot, UFS could have somehow corrupted
>> >> the directory structure, whilst maintaining the data intact.
>> >
>> > This is techically accurate, *BUT* the specifics of the quote "corruption"
>> > unquote in the case under discussion make it *EXTREMELY* unlikely that this
>> > is what happened.
>> >
>> > 99.99+++% of all UFS filesystem "corruption' issues are the result of a
>> > system crash _between_ the time cached 'meta-data' is updated in memory
>> > and that data is flushed to disk (a deferred write).
>> >
>> > The second most common (and vanishingly rare) failure mode is a powerfail
>> > _as_ a sector of disk is being written -- resulting in 'garbage data'
>> > being written to disk.
>> >
>> > The next possibility is 'cosmic rays'.  If running on 'cheap' hardware
>> > (i.e., without 'ECC' memory), this can cause a *SINGLE-BIT* error in
>> > data being output.
>> >
>> > The fact that the 'corrupted' filesystem passed fsck -without- any reported
>> > errors shows that everything in the filesystem meta-data was consistent
>> >
>> [...]
>>
>> > I think it is safe to conclude that the probabilities -greatly- favor
>> > alternative #1.
>> >
>>
>> OK. So after your comments and further research I concur with you on
>> the mv but if it wasn't a human, then this might be exposing a serious
>> security flaw in the jail system or the way EzJail implements it.
>
> BOGON ALERT!!!
>

I admit my ignorance on how the filesystem works but I don't think
your condescending remarks add a lot of value. The issue here is this
actually happened and there is a flaw somewhere other than "the stupid
administrator did it".
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-04-28 Thread Alejandro Imass
On Sat, Apr 28, 2012 at 2:01 PM, Polytropon  wrote:
> On Sat, 28 Apr 2012 13:52:02 -0400, Alejandro Imass wrote:
>> On Sat, Apr 28, 2012 at 1:31 PM, Robert Bonomi  
>> wrote:
>> >
>> > Alejandro Imass  wrote:
>> >> On Sat, Apr 28, 2012 at 11:39 AM, Robert Bonomi
>> >>  wrote:
>> >> >  Alejandro Imass  wrote:
>> >> >> After a little more research, ___it it NOT unlikely at all___ that
>> >> >> under high distress and a hard boot, UFS could have somehow corrupted
>> >> >> the directory structure, whilst maintaining the data intact.
>> >> >
>> >> > This is techically accurate, *BUT* the specifics of the quote 
>> >> > "corruption"
>> >> > unquote in the case under discussion make it *EXTREMELY* unlikely that 
>> >> > this
>> >> > is what happened.
>> >> >
>> >> > 99.99+++% of all UFS filesystem "corruption' issues are the result of a
>> >> > system crash _between_ the time cached 'meta-data' is updated in memory
>> >> > and that data is flushed to disk (a deferred write).
>> >> >
>> >> > The second most common (and vanishingly rare) failure mode is a 
>> >> > powerfail
>> >> > _as_ a sector of disk is being written -- resulting in 'garbage data'
>> >> > being written to disk.
>> >> >
>> >> > The next possibility is 'cosmic rays'.  If running on 'cheap' hardware
>> >> > (i.e., without 'ECC' memory), this can cause a *SINGLE-BIT* error in
>> >> > data being output.
>> >> >
>> >> > The fact that the 'corrupted' filesystem passed fsck -without- any 
>> >> > reported
>> >> > errors shows that everything in the filesystem meta-data was consistent
>> >> >
>> >> [...]
>> >>
>> >> > I think it is safe to conclude that the probabilities -greatly- favor
>> >> > alternative #1.
>> >> >
>> >>
>> >> OK. So after your comments and further research I concur with you on
>> >> the mv but if it wasn't a human, then this might be exposing a serious
>> >> security flaw in the jail system or the way EzJail implements it.
>> >
>> > BOGON ALERT!!!
>> >
>>
>> I admit my ignorance on how the filesystem works but I don't think
>> your condescending remarks add a lot of value. The issue here is this
>> actually happened and there is a flaw somewhere other than "the stupid
>> administrator did it".
>
> If you search the archives of this list, you'll find my _first_
> post to that list: I've had a similar problem, df shows data
> must be there after crash (panic -> reboot -> fsck trouble), but
> files aren't there (even _not_ in lost+found). It's quite possible
> that in _exceptional_ moments this can happen. The fsck program
> is intended to repair the most typical file system faults, but
> nothing "complicated" will be done without interaction: Altering
> data on disk will _always_ involve the responsible (!) admin to
> check if it is really intended "to do so".
>
> There can be many reasons. I've never found out what was the
[...]

> that might help locate "lost" data (quotes intended as long as
> the data is still on the disk). The more complex your setting
> is (e. g. striped disks, or ZFS), this can be nearly impossible.
> "Plain old UFS" can sometimes be your saviour (but BACKUP should
> be your real friend).
>

Thanks for your reply.

I can't figure out how there was no data loss and yet the directories
moved just like that. We have nightly backups and it's one of the
features we love about EzJail and it's archive feature. The base
system sits on another disk entirely and it's pristine, we don't
install anything except the basic system on the system disk and the
other disk is exclusively divided in jails, so the possibility of an
outside process doing the mv is unlikely.

Everything point to that something or someone executed a mv but how
was this done? or if there is a potential problem and could happen
again. And contrary to other comments here, and my admitted ignorance,
I believe there are actually 3 possibilities:

1) something inside a jail was able to move the other jails into itself
2) something outside the jails moved the jails
3) the directories were moved at reboot by journal recovery, fsck or
something else

That is what worries me, is that it wasn't just some random bit or
cosmic ray, but the potential of happening again. I am not so sure
that it is *impossible* that a jail could affect other jails with
EzJail.

-- 
Alejandro
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-04-28 Thread Alejandro Imass
On Sat, Apr 28, 2012 at 5:03 PM, Erich Dollansky
 wrote:
> Hi,
>
> On Saturday 28 April 2012 20:15:25 Alejandro Imass wrote:
>> On Sat, Apr 28, 2012 at 3:22 AM, Wojciech Puchar
>>  wrote:
>> >> I somewhat agree, but it wasn't a person. I am the only administrator,
>> >> the only one with root access. The jails were effectively moved to the
>> >> /usr/local/etc/apache22 of the single that survived at the top level.
>> >> I'm thinking something between mount, EzJail, the journal and the way
>> >> MySQL created a great deal of head contention, so something must have
>> >> gotten corrupted at the directory level like you state, but the
>> >> strange part is no _data_ corruption as such, because I was able to
>> >> physically archive the jails, move them to the correct directory and
>> >
>> >
>> > no matter what you do FreeBSD DOES NOT ramdomly move directories. if you 
>> > are
>> > sure you didn't move it yourself then it must be machine hardware problem
>> > but still unlikely.
>>
>> After a little more research, ___it it NOT unlikely at all___ that
>> under high distress and a hard boot, UFS could have somehow corrupted
>> the directory structure, whilst maintaining the data intact. From what
>> I've learned so far, UFS is actually divided into 2 layers: one that
>> controls the directory structure and metadata and a lower layer
>> containing the data, so the directories being screwed up and the data
>> intact it is actually quite possible.
>>
>> What I'm trying to do is figure out is how it happened, and try
>> prevent it from happening again, so instead of dismissing it as
>> impossibility, I think we all should spend a little time figuring out
>> how these things can happen and determine how it can be prevented or
>> reduced.
>
> somebody mentioned the links. Did you use links in the jails to access the 
> data? If then the directories of the jails got screwed, the links are gone 
> but the original data is still there. The damaged directory might got fixed 
> during the first reboot after the crash and you never noticed the fix.
>

Hi Erich, thanks for your reply.

I don't know what links you are referring to, but please point me in
that direction. I initially suspected that it could have been the
journal recovery and/or fsck but as you can see, a couple of people
have said this is impossible, but have to admit my ignorance on some
specifics of the UFS filesystem, yet out of logic seems like the most
plausible explanation.

I've been running FBSD since 6.2 and jails since then as well.  Today
I run 6 public servers in 8.2 with between 15 to 20 jails each and we
switched to ezjail last year and use strictly by the book. I do use
flavours though, and I may archive and re-create jails with a specific
archive but always using ezjail-admin. Since all our servers are 8.2
and all updated the same, I may port jails from one server to the
other using the ezjail archive method, but nothing as stupid as
someone was suggesting that I was using cp or soft links.

I've never had any problems except in _this particular server_ where I
have client that has a problem with MySQL and under some conditions it
drains the whole server. I suspected corruption of the fs because of
all the contention generated by MySQL to the point where it simply
hung and had to hard-reboot. I doubt it's hardware because these are
relatively new servers Xeon X3370, 8GB RAM, 2 x 150GB 10,000rpm
Velociraptor disks. We have the pristine OS in one disk and jails in
the other. Nothing runs outside of jails, not even the MTA which runs
postfix inside one of the jails.

This is the first crash when anything like this has happened in over 6
years running FBSD, and I am surprised as anyone here because of the
weirdness of the jail directories moving like that. We had backups of
the previous night, but I didn't even use them. The data was all
there, intact, just moved inside the only surviving jail, which
happens to be the http reverse proxy of all the other jails.

If you have any leads as to how this can happen other than cosmic rays
I would greatly appreciate it.

Thanks!

-- 
Alejandro

> Erich
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-04-28 Thread Alejandro Imass
On Sun, Apr 29, 2012 at 3:26 AM,   wrote:
> Alejandro Imass  wrote:
>

[...]

>
> Any chance that your base system -- rather than one of the jails --
> has somehow been cracked; maybe even that the cracker precipitated
> the crash?  It might be wise to restore the whole system from backup,
> the base from a moderately old one since it doesn't change anyway,
> rather than trying to recover.

There is always that possibility but I strive to keep these servers
updated, I block most ap, nigeria and russia ip blocks using updated
Wizcrafts' lists, run fail2ban and other security measures. We have a
policy of only one password and there are no users or services in the
base system other than mine. As I said in another mail I run 6 servers
and been runing FBSD for almost 7 years and this is the first time
I've seen this happen.

-- 
Alejandro
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-04-28 Thread Alejandro Imass
On Sat, Apr 28, 2012 at 10:20 PM, Erich Dollansky
 wrote:
> Hi,
>
> On Sunday 29 April 2012 08:58:17 Alejandro Imass wrote:
>> On Sat, Apr 28, 2012 at 5:03 PM, Erich Dollansky
>>  wrote:

[...]

>>
>> Hi Erich, thanks for your reply.
>>
>> I don't know what links you are referring to, but please point me in
>
> man link
>
> They are practical in jails when things are read only. Mark everything 
> read-only and nothing should go wrong.
>

I though you were referring to something else entirely. No, I don't
use soft or hard links with jails, unless EzJail uses them but I doubt
it, I think everything like that in EzJail is done by mounting via
nullfs.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-04-29 Thread Alejandro Imass
On Sun, Apr 29, 2012 at 4:37 AM, Polytropon  wrote:
> On Sun, 29 Apr 2012 00:26:50 -0700, per...@pluto.rain.com wrote:
>> Alejandro Imass  wrote:
>>
>> > 3) the directories were moved at reboot by journal recovery,
>> > fsck or something else
>>
>> I think it's *extremely* unlikely that fsck was involved, because
>> it just doesn't do things like that.
>
> The point is: fsck moving directories "looks different". In
> case inodes get "de-connected" (their reference entries on
> level n-1 are gone, their data on level n is still present),
> fsck will access the lost+found/ directory in the corresponding
> partition's root directory (or create it, if not present) and
> write _new_ directory entries with the inode as their name,
> because that's the only naming information possible (as the
> original names on n-1 aren't accessible anymore). So those
> directories will have names like #177628676/ and they _can_
> contain subtrees full of data, _including_ names from levels
> n+1 and onward. Files also are named #4767667892 and their
> names can _maybe_ identified from their content (the "file"
> command is helpful, and if they are textfiles containing
> a CVS or other revision control system data tag, it's possible
> to find out what they've been in their previous life).
>
> However, as it has been explained, fsck will _not_ do so
> unless being _allowed explicitely_ to do that kind of
> MODIFICATION to the file system. Flags like -yf can do
> that, but they are _not_ the default. This is due to the
> fact that _any_ critical modification of file systems
> requires the _responsible administrator_ to give permission.
>

OK, so fsck couldn't have done this. Besides fsck reported the fs as
clean so I have to conclude as others have commented that it must have
been a mv

I've been looking at the logs very carefully and trying to make sense
of this. There is a possibility that it could have been an attack
because we enabled ftp.proxy so that some clients could upload stuff
to their jails using ftp. So I was initially wrong in my assessment
because on this particular server we are running a service outside of
jails and it's this ftp.proxy that was suppose to be a temporary
solution but I guess we never got around to fixing this.

The ftp.proxy is started via inetd like so:
ftpstream tcp  nowait nobody /usr/local/sbin/ftp.proxy ftp.proxy -e

And there was a log of a couple of ftp connections the same day this
happened, the ONLY 3 messages before the reboot at about 6 pm and they
were NOT from any of our customers. Here are the log entries:

Apr 27 05:54:37 nune ftp.proxy[2726]: connected to client:
host-46-50-183-5.bbcustomer.zsttk.net, interface= 207.158.52.74:21
Apr 27 05:54:37 nune ftp.proxy[2726]: info: monitor mode: off, ccp: 
Apr 27 05:54:38 nune ftp.proxy[2726]: -ERR: missing hostname
Apr 27 18:55:42 nune syslogd: kernel boot file is /boot/kernel/kernel

OK. So let's suppose ftp.proxy is the culprit is there any way the
could have done the mv by cracking ftp and ftp.proxy ??

I have of course disabled the ftp and I am now thinking that another
possibility or combination by also using the ftp proxy on the
http-proxy jail, that is, the jail that swallowed the other jails. The
http-proxy jails was also running apache ftp proxy.

So the question now becomes: could a break in ftp.proxy coupled with
Apache ftp proxy have caused the http-proxy jails to have swallowed
all the other jails into it's configuration directory??

-- 
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-04-29 Thread Alejandro Imass
On Sun, Apr 29, 2012 at 1:15 PM, jb  wrote:
> Alejandro Imass  p2ee.org> writes:
>
>> ...
>> And there was a log of a couple of ftp connections the same day this
>> happened, the ONLY 3 messages before the reboot at about 6 pm and they
>> were NOT from any of our customers. Here are the log entries:
>>
>> Apr 27 05:54:37 nune ftp.proxy[2726]: connected to client:
>> host-46-50-183-5.bbcustomer.zsttk.net, interface= 207.158.52.74:21
>> Apr 27 05:54:37 nune ftp.proxy[2726]: info: monitor mode: off, ccp: 
>> Apr 27 05:54:38 nune ftp.proxy[2726]: -ERR: missing hostname
>> Apr 27 18:55:42 nune syslogd: kernel boot file is /boot/kernel/kernel
>> ...
>
> What you should do right now is to get some recent general or security cd/dvd
> with chkrootkit and rkhunter and run them from that external read-only media.
> I would also suggest that you look over config files of all packages involved.
> jb
>

Thanks! Will do, but I don't know of any FreeBSD and/or derived
distros for security. Or can I use any Linux security distro? I
remember reading about some trouble of Linux chkrootkit on FBSD

Thanks,

-- 
Alejandro

>
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-04-29 Thread Alejandro Imass
On Sun, Apr 29, 2012 at 11:49 PM, Erich Dollansky
 wrote:
> Hi,
>
> On Monday 30 April 2012 02:02:41 jb wrote:
>> Alejandro Imass  p2ee.org> writes:
>>
>> > ...
>> > > What you should do right now is to get some recent general or security 
>> > > cd/dvd
>> > > with chkrootkit and rkhunter and run them from that external read-only 
>> > > media.
>> > > I would also suggest that you look over config files of all packages
>> > > involved.
>> > > jb
>> > >
>> >
>> > Thanks! Will do, but I don't know of any FreeBSD and/or derived
>> > distros for security. Or can I use any Linux security distro? I
>> > remember reading about some trouble of Linux chkrootkit on FBSD
>>
>> It looks like you have only one choice with prebuilt rkhunter package only:
>> http://www.freebsd.org/releases/9.0R/announce.html
>>
>> dvd1
>> This contains everything necessary to install the base FreeBSD operating 
>> system,
>> a collection of pre-built packages aimed at getting a graphical workstation 
>> up
>> and running. It also supports booting into a "livefs" based rescue mode. This
>> should be all you need if you can burn and use DVD-sized media.
>>
>> ftp://ftp.freebsd.org/pub/FreeBSD/ports/packages/security/
>> rkhunter-1.3.8_1.tbz          04/18/12        18:56:00
>>
>> With regard to verification of config  files - you said you got backups 
>> (those
>> pre-incident would be best) and you have the incident-time files, so do a 
>> diff
>> on dirs (in particular /etc and /usr/local/etc)
>>
> I would burn the backup of these files to an optical disk, start the system 
> and do a diff as the first step. The system can be started from an USB drive 
> (take the 9.0 installation image) or DVD.
>
> Of course, rkhunter can be started in the second step.

ran both, found nothing

Back to theory on how the http-proxy jail 'swallowed' all the other
jails including the basejail. I noticed that jail had a not so old bug
in 2010 FBSD 8.0 which


The jail(8) utility does not change the current working directory while
imprisoning.  The current working directory can be accessed by its
descendants.


Reference: http://security.freebsd.org/advisories/FreeBSD-SA-10:04.jail.asc

Given that EzJail uses a single basejail and links/mounts stuff in the
child jails it would seem plausible (regression?) that somehow any
jail could access other jails' files, or that _maybe_ in an event of
crash the nullsfs mounts confuse the system somehow when fsck restores
or the journal is recovered.

Whatever the cause, it actually happened and I have already ruled out
just about anything. It doesn't seem to have been an attack, it surely
wasn't me, and EzJail author agrees it was not the EzJail scripts. So
maybe nullfs and journaling, or crash + nullfs + journaling, could
cause something like this to happen? Maybe journal has some confusion
on restoring the nullfs view of the directories or something after bad
crash like this one??
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-04-30 Thread Alejandro Imass
On Mon, Apr 30, 2012 at 7:36 AM, Robert Bonomi  wrote:
>
> Alejandro Imass  wrote:
>> On Sun, Apr 29, 2012 at 11:49 PM, Erich Dollansky wrote:
>> > On Monday 30 April 2012 02:02:41 jb wrote:
>> >> Alejandro Imass  p2ee.org> writes:
>> >> > ...
>>

[...]

> A competennt, "not stupid", sysadmin would know these things.  And not
> 'remove all doubt' (in the words of Abraham Lincoln), by raising such
> nonsense questions.
>
>> Whatever the cause, it actually happened and I have already ruled out
>> just about anything. It doesn't seem to have been an attack, it surely
>> wasn't me, and EzJail author agrees it was not the EzJail scripts. So
>> maybe nullfs and journaling, or crash + nullfs + journaling, could
>> cause something like this to happen?
>
> Postulating the "right" combination of _unrelated_ failures, virtually
> *anything* can happen.   cf. "Nasal Monnkeys".
>

OK, I tried to be patient with you and tried to keep my composure and
nettiquete against your insistence to insult me and by doing so,
damaging the good spirited nature of this mailing list, FreeBSD and
Open Source in general.

And sorry beforehand to my fellow co-listers, and other nice people
here,  that I have to do this publicly but there is a limit and I am
sure many of you have been just waiting for this to happen.

I mean, I have had a couple of altercations here and there with a few
smart asses, but I have *NEVER* seen such an obnoxious little shit in
the more than 14 years I have been participating in ANY mailing list.
This used to be one of the most enjoyable and helpful lists and it is
people like you who draw people away from sharing and trying to help
one another.

What is your problem man? Who do you think you are? Who gives you the
right to go patronizing and insulting people, and by the way using
these ridiculous quotes, like some stupid little jerk, relying on
other people's wisdom quotes instead of your own words. Instead of
being frontal,  you are probably frustrated with your own little techy
life that you have to take out your frustration on other people.

I find you intoxicating to this list and to this community, no matter
how smart you are, if half the stuff you say is even accurate or true.
You don't contribute anything except to the degradation of the FreeBSD
ambiance and to drive people away, and from sharing. You don't have
the right to do that.

I honestly love FreeBSD and this community and I am not going to let
you ruin that for me or anyone else here. Why don't you take the time
to read your posts and see that you propose nothing, so why even
bother to participate? What are you trying to prove?  If you were so
smart as *you believe* you are, you would be helping instead of trying
to prove something by your condescending attitude. The very fact that
you need to use this attitude is proof of your insecurities, and your
need to bully other people, but not me, Sir. I have been in this too
long.

I am surely not going to take this shit from you man so if you don't
have anything positive to say, just shut up and let other people help
each other, without being scared of being insulted or patronized. I am
surely not afraid of you and I am sick and tired of your attitude, so
if no one else here has the balls to tell you off, I will.

This is the kind of shit that drives people away and refrains people
from participating and sharing experiences and knowledge, and I'm not
going to let you do that, to me or any one else here. This is not
*your list* nor do you have any special right here, you are just like
everybody else, just not very helpful or fun. This attitude will get
you nowhere but deeper into your creepy little world.

-- 
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-04-30 Thread Alejandro Imass
On Mon, Apr 30, 2012 at 8:22 AM, Erich Dollansky
 wrote:
> Hi,
>
> On Monday 30 April 2012 18:36:08 Robert Bonomi wrote:
>>
>> Alejandro Imass  wrote:
>> That simply *ISN'T* going to happen -- not without a -lot- more evidence
>> than any individual can provide from a single =unrepeadable= incident.
>>
> ok, I am not the original poster but let me tell me of an experience here I 
> have had. I reported also something extremely strange. Of course, the 
> comments I have gotten have been the same as here. But what happened then?
>
> I do not know why but somebody found a race condition in the affected system. 
> There is no fix available yet.
>
> With other words, no matter how strange things are, I encourage people to 
> report it. Not with the real hope to get a solution at the spot. But with the 
> chance that somebody who knows the code well and has some strange feelings 
> takes a look.
>
> I also encourage my clients to do the same for our products and services.
>

Thanks Erich for pionting this out. This is the FreeBSD USERS LIST,
not the elite exchange. I I was posting this on some expert list like
the kernel list or some other more technical list I could understand
the attitude, but this is the user's list. We are NOT required to know
the details, just share experiences and try to help one another, not
put other people down for trying to solve our issues as users.

What is really frustrating is that it actually happened and I try to
do everything by the book. I don't do any fancy or strange things, so
something caused these directories to be moved through NORMAL use of
the system, regardless if some people believe it or not, I could care
less. It happened, period, and if someone wants to help fine, if not
they should just shut up.

Thanks again for pointing this out. We are the users, we are the
people that keep this project alive and share the good.

-- 
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-04-30 Thread Alejandro Imass
On Mon, Apr 30, 2012 at 1:03 PM, Edward M  wrote:
> On 04/30/2012 08:38 AM, Alejandro Imass wrote:
>>
>>  just not very helpful or fun. This attitude will get
>
>
>    He is helping,you need to  learn how UFS, jails, nullfs, journaling, disk
> I/O  and other stuff work.
>    I have been following this thread and i must admit I also need to learn
> more on those subjects.:-)
>

Oh, please! He's not helping anyone. He's just being an obnoxious
prick that thinks that by pointing out a lot of technical blabber and
some cheap philosophical posé, he's going to gain some sort of place
amongst his peers, and you are just trying to do the same by
sucking-up, siding with him and seconding an simply unacceptable
attitude in a community of real peers.

If you truly know your stuff you don't have to go putting people down
and patronizing them to show off. It is only when you go over the top,
trying to prove something that your are actually just showing your
insecurities and just plain ignorance.

Why don't you google and read my posts over the years when I help
other people in things they don't know, and tell me if it's remotely
close, or if I patronize people. I might go tell someone to RTFM but I
would never go and try to put someone down just to show off that I
know a lot.

Furthermore, this is a user's list, not a deeply technical one. I
don't have to read the fsck source code to use FreeBSD or participate
on this list. If you are indeed an expert you try to help other
people, or at least give the other person the benefit of the doubt.

If you have really followed the thread, all I have done is try to find
some explanation for a strange behavior of the system under normal
use. It hung, and some directories were moved, period. I have posted
some ideas to share with other people expecting some insight and maybe
similar experience from other users, which there probably are many,
but many times afraid to speak up and avoid getting insulted.

I don't take that crap from anyone and much less in a community that I
have come to love and respect.

And it's all about that: RESPECT and you can either learn it the easy
way or the hard way, but I will tech respect one way or another.

-- 
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-04-30 Thread Alejandro Imass
On Mon, Apr 30, 2012 at 1:23 PM, Eitan Adler  wrote:
> On 30 April 2012 07:36, Robert Bonomi  wrote:
>> A competennt, "not stupid", sysadmin would know these things.  And not
>> 'remove all doubt' (in the words of Abraham Lincoln), by raising such
>> nonsense questions.
>
> A competent sysadmin would ask questions when they don't know the
> answer bringing up possibilities they thought about.
> A stupid sysadmin would yell at someone asking a question claiming
> they should have known the answer.
>

Thank you Eitan!

I am admittedly limited in the use of the English language and many
times frustrated not to be able to redact such beautifully and to the
point.

-- 
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-04-30 Thread Alejandro Imass
On Mon, Apr 30, 2012 at 1:57 PM, jb  wrote:
> Alejandro Imass  p2ee.org> writes:
>
>>...
>> If you have really followed the thread, all I have done is try to find
>> some explanation for a strange behavior of the system under normal
>> use. It hung, and some directories were moved, period. I have posted
>> some ideas to share with other people expecting some insight and maybe
>> similar experience from other users, which there probably are many,
>> but many times afraid to speak up and avoid getting insulted.
>> ...
>
>
> I looked at problem reports for nullfs and there are quite few.
> Hierarchical Jails
> NOTES
>
> You said you have your jail env on a separate disk.
>

Yes.

> I looked at problem reports for nullfs and there are quite few.
> http://www.freebsd.org/cgi/query-pr-summary.cgi?category=&severity=&priority=&cl
> ass=&state=&sort=none&text=nullfs&responsible=&multitext=&originator=&release=
>
> As a matter of fact I just mounted a nullfs but was not able to unmount it
> (device busy) - a Google search shows it as a problem reported for many many
> years.
> Nullfs does not seem to be stable.
>

Dirk Engling guessed that somehow nullfs was involved.

> Anyway, I found one PR
> http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/147420
>
> that is about troubles with jails, nullfs, UFS, and NFS.
> Synopsis:       [ufs] [panic] ufs_dirbad, nullfs, jail panic (corrupt inode)
>
> Take a look at this paragraphs:
> "...
> After two more failures, I now found the offending inode ..."
> "...
> As one point, I found the inode in a directory which usually is mounted for
> an (ez-) jail via nullfs."
>
> This proves that problems with jails, nullfs, and fs corruption are possible.
> So, they can not be excluded up front in your case too because nullfs is just
> a simple "path translation".
>

Up until yesterday (and Dirk's answer) I didn't look for specific
references to nullfs, and today I was busy getting vicious myself ;)

Thanks for pointing a plausible cause. What I have done so far is
limit the offending jail to a specific cpuset and I wanted to add
another disk to avoid contention with other jails. MySQL not only
consumes the whole CPUs but also limits the whole drive, while it's
doing some crazy full scan query on a very large database.

I don't have any control of the code or the MySQL myself and the
client said it's known problem with VTiger CRM and the way it
implements some reports that I guess were not designed for the amount
of data they are handling. I have already recommended they move to a
dedicated server altogether because their system simply outgrew what
we sold them.

I really appreciate the time you dedicated to search for a possible
explanation and at the very least it helps in taking some immediate
steps to avoid it from happening again. Hopefully, someone with deep
knowledge will find the root cause and a long-term fix. What is true,
that if it happened to me, it can happen to anyone, so maybe your
findings will help someone pin-point the problem and fix it.

Thanks,

-- 
Alejandro
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: laptop very hot and noisy

2012-05-01 Thread Alejandro Imass
On Tue, May 1, 2012 at 8:06 AM, Anton Shterenlikht  wrote:
> I run 10-current on Compaq 6715s.
> It's very hot and noisy. If I boot
> in verbose mode, I get lots of:
>
> acpi_tz0: _AC2: temperature 92.0 >= setpoint 50.0
> acpi_tz0: _AC1: temperature 92.0 >= setpoint 60.0
> acpi_tz0: _AC3: temperature 92.0 >= setpoint 40.0
> acpi_tz0: _AC2: temperature 92.0 >= setpoint 50.0
> acpi_tz0: _AC1: temperature 92.0 >= setpoint 60.0
>
> at the console.
>
> I guess it's telling me that the CPU is too hot?
>
> Is that normal, e.g. under "make -j4 buildworld"?
>

Probably not. I had a laptop with similar symptom when I was compiling
stuff. I took it apart, cleaned it and thought that maybe these log
messages were normal under stress. The CPU eventually fried and only
then I took a real close look and the heatsink had a very tiny little
hole where the fluid escaped, but it was not at all apparent at first
sight. These liquid (or gel?) filled heatsinks are basically useless
if the liquid escapes or evaporates so it will usually only show when
you are using the CPU a lot.

-- 
Alejandro Imass


> Thanks
>
> --
> Anton Shterenlikht
> Room 2.6, Queen's Building
> Mech Eng Dept
> Bristol University
> University Walk, Bristol BS8 1TR, UK
> Tel: +44 (0)117 331 5944
> Fax: +44 (0)117 929 4423
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: laptop very hot and noisy

2012-05-01 Thread Alejandro Imass
On Tue, May 1, 2012 at 8:41 AM, Anton Shterenlikht  wrote:
> On Tue, May 01, 2012 at 08:25:11AM -0400, Alejandro Imass wrote:
>> On Tue, May 1, 2012 at 8:06 AM, Anton Shterenlikht  
>> wrote:
>> > I run 10-current on Compaq 6715s.
>> > It's very hot and noisy. If I boot
[..]

> I didn't even know they put fluid heatsinks in laptop.
> I thought this was something from IBM cutting edge power6
> chips.
>

Yeah I didn't know either until it fried my CPU. Many laptop heatsinks
use "heat pipes":

http://en.wikipedia.org/wiki/Heat_pipe

The hole will probably be too little to notice but in my case I
noticed some oxidation/stain around the hole which gave it away.

-- 
Alejandro

> So I might need to pull the laptop apart..
> I'm just not sure I could put it back
> together...
>
> Thanks anyway
>
> --
> Anton Shterenlikht
> Room 2.6, Queen's Building
> Mech Eng Dept
> Bristol University
> University Walk, Bristol BS8 1TR, UK
> Tel: +44 (0)117 331 5944
> Fax: +44 (0)117 929 4423
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-05-03 Thread Alejandro Imass
On Mon, Apr 30, 2012 at 6:42 PM, Jerome Herman  wrote:
[...]

> I must admit that Robert Bonomi tone was highly insulting for this list, and
> though I completely condemn the form of his post, I cannot say I disagree
> with the content.
>

I disagree with both the form and the content and I will tell you why
later... I do appreciate however the time you and everyone else
(including Robert Bonomi's), have taken to answer and post such
lengthy insights. I believe everyone's opinion is important and should
be respected.

> There are quite a lot of things that are wrong with Alejandro Imass' post
> and analysis.
> The fist thing is that he did not give is setup in one go. It took quite a
> while to figure what happened, what system he was using and how he was using
> it.
> At first he had to hard reboot an unresponsive system, then at reboot he
> would have lost all of his jail.
> Then it appeared that all the jails where inside another jail and that the
> unresponsiveness came from MySQL.
> Then we learn that all his daemons are inside jails.
> Then we learn that ftp-proxy is not.
> Then we learned that jail are not handled manually but through EZJail.
> Then we are told that the problem with MySQL is known and comes from a
> client using TigerCRM with a too much data.
> There are litterally dozens of little pieces of important knowledge all over
> the thread. And you have to read it all to make sure you have the global
> view. Not really a good start.
> It is OK to forget to mention a thing or two, discarding what you think is
> irrelevant to the problem at hand, but it is not OK to force people who are
> trying to help you to read 50+ posts to learn about the basics of your
> installation.
>

Granted. Nevertheless, the EzJail part (which I admit was a very
important piece of information) was left out my first and second post
was in fact established in the third post, so it was quite early in
the thread.

I think that it is not hard to put yourself in my shoes, and
understand that in a moment of crisis, your first priority is NOT
articulating the most complete and technical bug report you can. On
the contrary, it's a cry for help from your peer users to see if you
can gain some insight on solving the problem as quickly as possible.

> What is even more irritating is the fact that Alejandro Imass ignores pretty
> much anything that would leads toward a human mistake. Most posts implying a
> possible bad use of jails/nullfs/ezjail are ignored or answered by a simple
> "I have done everything by the book".  Now from my experience someone with 6
> servers, each containing multiple jails will not do everything by the book
> every time. It might be that Alejandro is exceptional, but it is more likely

Well, we do run everything by the book, precisely to avoid problems.
We find one recipe that works and stick to it like religion. I have
only used EzJail commands and **normal** use of EzJail. I am not
expected to know _extactly_ how it works, I trust that to the experts
in each field. As a user I am only expected to RTFM, and use it
accordingly.

Again let me remind everyone here, this list is precisely for that:
FreeBSD ***GENERAL QUESTIONS***. It is NOT a technical list. When you
and Robert Bonobi and everyone elese here subscribed to this
particular list, it should have been pretty clear:

- General lists: The following are general lists which anyone is free
(and encouraged) to join:
- freebsd-questions: User questions and technical support
- About freebsd-questions English (USA) :This is the mailing list for
questions about FreeBSD. You should not send "how to" questions to the
technical lists unless you consider the question to be pretty
technical.

So I am entitled to post general questions and provide information as
I see it fit, or if an expert on the list may ask for more. When I
posted the first few posts, that's all the information I had, if you
thought you needed more information, then you should have said so, but
instead your personal guess is a priori judgment call, which I found
almost as insulting as all of Bonobi's posts and I simply ignored you.

In retrospective, and after re-reading you first post and this one, I
can understand that having left EzJail out in the first post was a key
piece of information that would have probably caused you to answer
very differently, so I can somewhat justify your initial post, but to
me at that moment, you should have already known I was using EzJail.

> that at least one if not more of these jails were not made "by the book".
> Nothing to blame anyone in here, we all get tired/bored/overconfident
> sometime - but refusing to admit the very possibility of a human mistake
> won't help at all in finding a solution. Reading the thread I realized that
> my suggestion that he might have over

Re: UFS Crash and directories now missing

2012-05-03 Thread Alejandro Imass
On Thu, May 3, 2012 at 9:35 AM, Robert Bonomi  wrote:
>
> Alejandro Imass  wrote:
>
> [ megasnip ]
>
>> > Things to investigate :
>> > - When was the last time this box was rebooted normally ? Did it went fine 
>> > ?
>>
>> After I moved the jails to the right place I archived the jails with
>> ezjail-admin and rebooted the server several times, and everything
>> worked as expected.
>
> Rephrasing -- when was the last time _before_the_problem_was_discovered_
> that the machine was re-booted?
>

The jails moved Friday 27th so the last reboot before that was Apr 4
and before Feb 29

Feb 29 10:18:46 nune reboot: rebooted by aimass
Apr  4 19:45:03 nune reboot: rebooted by aimass
Apr 27 19:47:06 nune reboot: rebooted by aimass
Apr 28 02:03:57 nune reboot: rebooted by aimass

>> > Were the jails created at this time ?
>>
>> No. Most of these jails have been operational for over a year on this
>> server without any incidents.
>
> Clarifying the question -- were the jails created at the time of the last
> _prior_ reboot?  i.e., had the machine been re-booted successfully _after_
> the jails were installed, or was this the _first_ such reboot?
>

No not at all. Most of these jails were created last year, but here is
the detail. cmm_php52_1 is the problematic jail with the MySQL, you
will see a recent date in the config file because I recently added
some cpuset as a band-aid to limit the jail's ability to bring down
the whole system, leaving at least a couple of CPUs free to be able to
ssh and shut it down. There is however a new jail corcaribe_php53 and
was the reason we rebboted the server on Apr 4th, just to make sure
that eveything would boot OK after reboot.

-rw-r--r--  1 root  wheel   917 Feb 16  2011 cat58base
-rw-r--r--  1 root  wheel   917 Apr 29  2011 cm_idvida
-rw-r--r--  1 root  wheel   937 Apr  3  2011 cm_website
-rw-r--r--  1 root  wheel   960 May  2 09:48 cmm_php52_1
-rw-r--r--  1 root  wheel  1037 Apr  4 20:00 corcaribe_php53
-rw-r--r--  1 root  wheel   950 Feb 16  2011 http_proxy
-rw-r--r--  1 root  wheel   917 Aug  3  2011 mcs_cat58
-rw-r--r--  1 root  wheel   917 Feb 10  2011 php52base
-rw-r--r--  1 root  wheel   917 Feb 12  2011 php53base
-rw-r--r--  1 root  wheel   877 Dec 27 20:33 pyugmao
-rw-r--r--  1 root  wheel   877 Mar 21 22:03 testbed
-rw-r--r--  1 root  wheel  1017 May 13  2011 yabarana_cat58
-rw-r--r--  1 root  wheel  1017 Feb 13  2011 yabarana_php52
-rw-r--r--  1 root  wheel  1017 Feb 13  2011 yabarana_php53


> It appears you misunderstood the 'at this time' reference -- it did ot
> mean 'at the time of the incident', but  'at the time of the last prior
> reboot'.  If English is not your primary language, it is an understandable
> misread.
>
>> As I told you earlier, this server has been running for over a year
>> and we have rebooted many times.
>
> I don't believe you ever mentioed that particular point (multiple
> successful reboots after istallation) before.  Repeating a prior
> question, _how_long_ before the problem showed up was the most recent
> re-boot?  (Doesn't have to be exact -- an 'order of magnitude' estimate
> [a day, a week, a month, several months] is sufficient.)
>

Apr 4th

>>                                  If there are such problems they exist
>> by using the EzJail commands and I find this unlikely.
>
> What you 'find unlikely' is irrelevant.  The entire situation is 'unlikely',
> yet it happened.  So one -has- to look at unlikely things.  
>

funny

>> here is the mount output is that's of any help:
>
> [ first disk, and 'fdescfs', and 'procfs' references removed, for clarity ]
>
>> /dev/ad6s1.journal on /usr/jails (ufs, asynchronous, local, gjournal)
>> /usr/jails/basejail on /usr/jails/yabarana-php53/basejail (nullfs,
[...]

>
> Yes, that is a good start at useful detail.  It is, presumably, _after_
> the problem, and _after_ you had restored things to their proper places.
>

Yes.

> Is it safe to  assume that you do -not- have such a 'mount' output from
> some time 'before' the problem?  ( There's no rational reason why you
> -would- have such, but _if_ it existed, and there were any differences
> between 'then' and 'now', it could be very informative.)
>

No, but from what I remember it's mostly very similar. I can pull off
similar mount statement from other server(s) where we run similar
set-ups and that have never failed if needed.

> Aother critical piece of information is what diretories -- by full path
> name -- disappeared from 'where they were', and where -- by full path name,
> again -- did you find them, and _with_what_names_?   If every

Re: UFS Crash and directories now missing

2012-05-03 Thread Alejandro Imass
On Thu, May 3, 2012 at 12:05 PM, jb  wrote:
> Alejandro Imass  p2ee.org> writes:
>
>> ...
>> devfs on /usr/jails/cmm-php52-1/dev (devfs, local, multilabel)
>> ...
>> /usr/jails/basejail on /usr/jails/cmm-php52-1/basejail (nullfs, local,
>> read-only)
>> fdescfs on /usr/jails/cmm-php52-1/dev/fd (fdescfs)
>> procfs on /usr/jails/cmm-php52-1/proc (procfs, local)
>
> There is one thing that looks like an anomaly.
> For each jail, should the master template basejail be mounted into it first,
> followed by /dev and anything else in there ?
>
> /usr/jails/basejail on /usr/jails/cmm-php52-1/basejail (nullfs, local,
> read-only)
> devfs on /usr/jails/cmm-php52-1/dev (devfs, local, multilabel)
> fdescfs on /usr/jails/cmm-php52-1/dev/fd (fdescfs)
> procfs on /usr/jails/cmm-php52-1/proc (procfs, local)
>
> Does it matter ?

I have no idea, but cmm-php52-1 is in fact the problematic jail with
the MySQL problem.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-05-03 Thread Alejandro Imass
On Thu, May 3, 2012 at 1:40 PM, jb  wrote:
> Alejandro Imass  p2ee.org> writes:
>
>> ...
>> I have no idea, but cmm-php52-1 is in fact the problematic jail with
>> the MySQL problem.
>
> Could you please include displays of
> 1. your troubled machine's
>   $ cat /etc/fstab
>   Note: you already showed us 'mount' output.
> 2. your other trouble-free server's
>   $ cat /etc/fstab
>   $ mount
>

The fstab was in a previous mail but here it is again...

>From the troubled server:
# DeviceMountpoint  FStype  Options DumpPass#
/dev/ad4s1b noneswapsw  0   0
/dev/ad4s1a /   ufs rw  1   1
/dev/ad4s1d /tmpufs rw  2   2
/dev/ad4s1f /usrufs rw  2   2
/dev/ad4s1e /varufs rw  2   2
/dev/ad6s1.journal  /usr/jails  ufs rw,async2   2
/dev/cd0/cdrom  cd9660  ro,noauto   0   0

>From a good server (single disk machine):
/dev/ad4s1b noneswapsw  0   0
/dev/ad4s1a /   ufs rw  1   1
/dev/ad4s1d /tmpufs rw  2   2
/dev/ad4s1f.journal /usrufs rw,async
 2   2
/dev/ad4s1e /varufs rw  2   2

/dev/ad4s1a on / (ufs, local)
devfs on /dev (devfs, local, multilabel)
/dev/ad4s1d on /tmp (ufs, local, soft-updates)
/dev/ad4s1f.journal on /usr (ufs, asynchronous, local, gjournal)
/dev/ad4s1e on /var (ufs, local, soft-updates)
/usr/jails/basejail on /usr/jails/httpProxy/basejail (nullfs, local, read-only)
devfs on /usr/jails/httpProxy/dev (devfs, local, multilabel)
fdescfs on /usr/jails/httpProxy/dev/fd (fdescfs)
procfs on /usr/jails/httpProxy/proc (procfs, local)
/usr/jails/basejail on /usr/jails/cat58base/basejail (nullfs, local, read-only)
devfs on /usr/jails/cat58base/dev (devfs, local, multilabel)
fdescfs on /usr/jails/cat58base/dev/fd (fdescfs)
procfs on /usr/jails/cat58base/proc (procfs, local)
/usr/jails/basejail on /usr/jails/watwkyTesting/basejail (nullfs,
local, read-only)
devfs on /usr/jails/watwkyTesting/dev (devfs, local, multilabel)
fdescfs on /usr/jails/watwkyTesting/dev/fd (fdescfs)
procfs on /usr/jails/watwkyTesting/proc (procfs, local)
/usr/jails/basejail on /usr/jails/mta1/basejail (nullfs, local, read-only)
devfs on /usr/jails/mta1/dev (devfs, local, multilabel)
fdescfs on /usr/jails/mta1/dev/fd (fdescfs)
procfs on /usr/jails/mta1/proc (procfs, local)
/usr/jails/basejail on /usr/jails/migdev/basejail (nullfs, local, read-only)
devfs on /usr/jails/migdev/dev (devfs, local, multilabel)
fdescfs on /usr/jails/migdev/dev/fd (fdescfs)
procfs on /usr/jails/migdev/proc (procfs, local)








> jb
>
>
>
>
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-05-09 Thread Alejandro Imass
On Thu, May 3, 2012 at 1:14 PM, Alejandro Imass  wrote:
> On Thu, May 3, 2012 at 9:35 AM, Robert Bonomi  
> wrote:
>>

[...]

>> One comment: for 'defensive' purposes it would be useful to break ad6 up
>> into two slices, putting 'basejail' in it's own slice.  Then, for production
>> use, that slice can be mounted RO, and with the 'system immutable' flag
>> set on everything in that filesystem.
>>
>
> Yes. From one of your posts that became somewhat clear to me: Having
> all the jails on a single 150GB slice seems like a bad idea.
>

For your recommendation above, what are the advantages or differences
of slicing the disk versus partitioning on a single slice?

Thanks,

-- 
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-05-09 Thread Alejandro Imass
On Wed, May 9, 2012 at 8:53 AM, Erich Dollansky
 wrote:
> Hi,
>
> On Wednesday 09 May 2012 18:57:06 Alejandro Imass wrote:
>> On Thu, May 3, 2012 at 1:14 PM, Alejandro Imass  wrote:
>> > On Thu, May 3, 2012 at 9:35 AM, Robert Bonomi  
>> > wrote:
>> >>
>>
>> [...]
>>
>> >> One comment: for 'defensive' purposes it would be useful to break ad6 up
>> >> into two slices, putting 'basejail' in it's own slice.  Then, for 
>> >> production
>> >> use, that slice can be mounted RO, and with the 'system immutable' flag
>> >> set on everything in that filesystem.
>> >>
>> >
>> > Yes. From one of your posts that became somewhat clear to me: Having
>> > all the jails on a single 150GB slice seems like a bad idea.
>> >
>>
>> For your recommendation above, what are the advantages or differences
>> of slicing the disk versus partitioning on a single slice?
>>
> it could be a misunderstanding. What is a partition? What is a slice. I have 
> to look always into the handbook. Anyway, as long the OS see different units 
> which have to be mounted independent of each other, it all does not matter 
> what is what.
>

I meant in Unix terms of course. Slice is slice (partition in other
OS) and partition a thru h

The question is if it has any advantage of using a slice to mount the
basejail in RO as opposed to doing the same thing on a partition.

Thanks,

-- 
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-05-10 Thread Alejandro Imass
On Tue, May 1, 2012 at 1:58 AM, Robert Bonomi  wrote:
>

[...]

> Reading _both_ of McKusick's  "Design of .." books, and the 'Unix System
> Admininstration Handbook', by Nemeth, et al.  is a good _start_.
>

I just bought the FreeBSD one only unless there is a reason I should
read the older 4.4BSD ?

Regarding Nemeth's I am undecided between the 4th (Unix & Linux) or
the 3rd. Please advise.

Thanks,

-- 
Alejandro Imass

> Having a bunch of the books from O'Reilley & Assoc. (<http://www.ora.com>),
> especially for 'standard' tools that you need to get the most out of, is
> also highly recommended.
>
> Disclaimer:  I know a lot of the authors of those books, persoally.
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-05-11 Thread Alejandro Imass
On Thu, May 10, 2012 at 9:29 PM, Edward M  wrote:
> On 05/10/2012 03:45 PM, Alejandro Imass wrote:
>>
>> Regarding Nemeth's I am undecided between the 4th (Unix&  Linux) or
>> the 3rd. Please advise.
>
>
>    i purchased the third edition because I took a look  in the 4th the table
> of contents
>     and it appears  anything   FreeBSD related   was remove and it only
> focuses on: Solaris
>    Linux( red hat ubuntu) and AIX. However third edition mentions BSDs
>

Yep, agreed. 3rd edition it is.

Thanks,

-- 
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: UFS Crash and directories now missing

2012-05-11 Thread Alejandro Imass
On Wed, May 9, 2012 at 9:48 AM, Polytropon  wrote:
> On Wed, 9 May 2012 09:30:37 -0400, Alejandro Imass wrote:
>> On Wed, May 9, 2012 at 8:53 AM, Erich Dollansky
>>  wrote:
>> >> For your recommendation above, what are the advantages or differences
>> >> of slicing the disk versus partitioning on a single slice?
>> >>
>> > it could be a misunderstanding. What is a partition? What is a slice. I 
>> > have to look always into the handbook. Anyway, as long the OS see 
>> > different units which have to be mounted independent of each other, it all 
>> > does not matter what is what.
>> >
>>
>> I meant in Unix terms of course. Slice is slice (partition in other
>> OS) and partition a thru h
>>
>> The question is if it has any advantage of using a slice to mount the
>> basejail in RO as opposed to doing the same thing on a partition.
>
> The answer is: It it not possible. :-)
>
> You cannot mount a slice.
>
> Given the BSD terminology: A slice _has_ to contain partitions.
> You cannot format a slice, you can only format partitions. A
> formatted partition carries a UFS file system. (However, it's
> possible to omit the slice, and partition the whole disk instead,
> this is called "dedicated mode"). A third method is formatting
> the whole disk ("the 'c' device"), in that case the 'c' is omitted.
>
> The _only_ time you can mount a slice is when it is used in its
> common meaning, being a "DOS primary partition"; in this case,
> a FAT or NTFS file system will be placed directly into a slice,
> as those do not support any (BSD-style) partitioning.
>
> /dev/ad0        -> the disk
> /dev/ad0s1      -> 1st slice
> /dev/ad0s1a     -> 1st partition on 1st slice
>                   THIS is something you can mount.
> -or-
> /dev/ad0a       -> 1st partition on disk ("dedicated")
>                   THIS can also be mounted.
> -or-
> /dev/ad0        -> the whole disk (equals /dev/ad0c)
>                   Even THIS can be mounted.
>
> In case I'm misunderstanding your question, could you alter the
> expression?
>

Thanks. The question was more advantages of a single slice + single
partition versus a slice and multiple partitions, for mounting the
EzJail basejail in RO mode.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Is this something we (as consumers of FreeBSD) need to be aware of?

2012-06-06 Thread Alejandro Imass
On Wed, Jun 6, 2012 at 3:52 PM, Dave U. Random
 wrote:
> Polytropon  wrote:
>
>> On Wed, 06 Jun 2012 11:47:11 +0100, Matthew Seaman wrote:
>> > Having to pay Verisign instead of Microsoft makes no difference: the
>> > point is why should I have to pay anything to a third party in order to
>> > run whatever OS I want on a piece of hardware I own?
>
> It's time to dump the Intel/Microshaft mafia forever. FreeBSD, OpenBSD,
> NetBSD, and even Linux have ports to many platforms. Why stay on Intel? It's
> an overgrown ugly mess.
>
> We need to stop buying Intel mafiaware with preinstalled Microshaft mafiware
> and run a free (or in the case of Linux "apparently free") OS on free
> hardware.
>

But this is more to do with the BIOS than with Intel as such. Wasn't
there a FreeBIOS, later LinuxBIOS, now coreboot I believe..?
So replacing the BIOS entirely wouldn't suffice to override all this nonsense?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: text format

2012-06-11 Thread Alejandro Imass
On Mon, Jun 11, 2012 at 5:57 PM, i pwn  wrote:
> hi, sometime ago i asked a question about how to format a text, some people
> told me to use groff, but i would like to know how was file
> http://ipwn.altervista.org/files/Stoll,%20Clifford%20-%20The%20Cuckoo%27s%20Egg.txt
> fomatted.
> thanks in advance.

Most probably nroff / groff

Take a look at the info from the authoring tools at rfceditor:

http://www.rfc-editor.org/formatting.html
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Sendmail and Postfix

2012-06-23 Thread Alejandro Imass
On Fri, Jun 22, 2012 at 8:15 PM, Robert Bonomi  wrote:
>> From owner-freebsd-questi...@freebsd.org  Fri Jun 22 13:47:20 2012
>> To: freebsd-questions@freebsd.org
>> Date: Fri, 22 Jun 2012 13:41:46 -0500
>> From: Mark Felder 
>> Subject: Re: Sendmail and Postfix
>>
>> When you installed Postfix did you allow it to update the entries in
>> /etc/mail/mailer.conf ? If so, I wouldn't worry about the mailq binary
>> that came with the system; it's ignored.
>
> For SendMail, mailq is just a symlink to the SendMail executable.
>
> the "mail.conf" stuff (to use a polite word) installs it's own executable(s)
> under all the 'common' names that SendMail is invoked as.  These
> executables look at /etc/mailer.conf, and invoke the appropiate executable
> for the mailer that you have seleccted in mailer.conf.
>

mailer.conf is usually modified my the Postfix port and I am not sure
but I think the option is checked by default.

The lines to add to rc.conf to de-activate Sendmail and usu Postfix on
the base system are:

sendmail_enable="NO"
sendmail_submit_enable="NO"
sendmail_outbound_enable="NO"
sendmail_msp_queue_enable="NO"
postfix_enable="YES"

-- 
Alejandro Imass


> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Modifying Sendmail's Configuration the Correct way.

2011-04-20 Thread Alejandro Imass
On Wed, Apr 20, 2011 at 2:47 PM, Martin McCormick
 wrote:
>        The /etc/mail/sendmail.cf file very clearly tells one
> not to edit it directly so I edited the


Hey Martin, this might not be the exact answer you're looking for but
I despise sendmail but *love* FreeBSD so here are my $0.02:


1) edit your /etc/rc.conf

sendmail_enable="NO"
sendmail_submit_enable="NO"
sendmail_outbound_enable="NO"
sendmail_msp_queue_enable="NO"
postfix_enable="YES"

2) cd /usr/ports/mail/postfix
make install clean

Play close attention to all messages, remember to regenerate the
aliases with newalias and let the script modify your mailer.conf to
enable postfix and say yes.

In case you forget here is my /etc/mail/mailer.conf

# Execute the Postfix sendmail program, named /usr/local/sbin/sendmail
#
sendmail/usr/local/sbin/sendmail
send-mail   /usr/local/sbin/sendmail
mailq   /usr/local/sbin/sendmail
newaliases  /usr/local/sbin/sendmail

then /usr/local/etc/rc.d/postfix start

Enjoy! http://www.postfix.org

There have been many requests to let us choose our favorite MTA for
the base system. It seems things are moving in that direction since
you will notice an option in the make config of the newer postfix
versions it says to install postfix in the base. Right now I would
avoid this, (other maybe other can comment more on this option) but
hopefully in the future those of use that don't like sendmail can
avoid it's use.

best,
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Ezjail and Flavours

2011-04-29 Thread Alejandro Imass
Hi,

I've been using flavors for a while but only simple stuff like /etc and /pkg

So what I have is a bunch of base jails where I just install ports and
the copythe packages over to the flavours.

Now I want to create a Perl Catalyst base jail, but something I
installed via ports and others via CPAN.

Question: what gets executed first with EzJail? the pkg installation
or the file copy?

Mi idea is to soft-link the complete /usr/local directory of the
compiling jail in the specific flavour so after the packages get
installed I can just copy everything else over /usr/local
It should be pretty safe either way I guess but probably there are
people with a lot more experience with EzJail here ;-)

Thanks!

--
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Ezjail and Flavours

2011-04-29 Thread Alejandro Imass
On Fri, Apr 29, 2011 at 3:46 PM, Alejandro Imass  wrote:
> Hi,
>

Answering myself here...

[snip]

> Mi idea is to soft-link the complete /usr/local directory of the
> compiling jail in the specific flavour so after the packages get
> installed I can just copy everything else over /usr/local
> It should be pretty safe either way I guess but probably there are
> people with a lot more experience with EzJail here ;-)
>

Did DID NOT work :-(

First, Ezjail copies first and installs the packages on first start of
the jail. I knew this but had forgotten so it is logical that first
copy the pkg install, duh!

Second, EzJail just copies the soft link and this of course will not
work just like that for obvious security reasons.

I erased the jail and tried a second time...

So here is what I did and seems to work:

1) Create your jail flavour standard with packages and all
2) Start the jail. This will install packages
3) Stop the jail
4) Copy the entire /usr/local of your compile jail to your new jail
5) Start the working jail

This seems easy enough and seems to be working perfectly!

What I have is different flavors of compiling jails: php52, php53,
catalyst 5.8, apache22, etc. Those are never used for production. Only
to compile and generate the packages for the EzJail flavours.

The other option would be to phisically copy the contents of
/usr/local to the flavour but I think it's a better idea to let the
packages install and _then_ copy /usr/local over that.

Anyway, it's working so cool!

Man, FBSD really rocks! Regardless of the thousands of technical
benefits, the clean cut separation of system and applications, _and_
Jails is to me, one the greatest things about FBSD.

--
Alejandro Imass

> Thanks!
>
> --
> Alejandro Imass
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Monthly Login Accounting Report - What do the numbers mean?

2011-05-01 Thread Alejandro Imass
> Doing login accounting:
>total  726.98
>aimass 508.96
>cctun  216.80
>cmm  0.84
>delco0.37
>hugo 0.01
>

What do these numbers mean? Is it login times? How can you login 0.01
times??? I know for a fact that in April hugo logged in exactly 1 time
to do an scp of a large file. Are these numbers percentages ? guess
not because there would be no total!

Thanks,

--
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: rox-fm

2011-05-04 Thread Alejandro Imass
On Wed, May 4, 2011 at 7:45 PM, Daniel C. Dowse  wrote:
> On  Wed, 04 May 2011 23:33:18 +, pwnedomina  wrote:
>>Em 04-05-2011 20:49, Daniel C. Dowse escreveu:
[...]

> please always check that the recipient is the mailing list and not the one 
> that
> answered your question.
>
>

Yeah, this is a pain in the ass, and it's really not the OP's fault
entirely.  It's a simple mailman config option but I think it's an
idiosyncrasy thing about open lists, blah, blah, blah. The easiest way
is to ALWAYS HIT REPLY ALL, and the figure out who the mail is going
to. IMHO it should ALWAYS be the list ONLY, but many list admins use
it the way it's set-up here on the general questions list, why tf it
beats me, but it's really annoying.

I wish someone could clearly explain why the reply-to field should
ONLY have the mailing-list address, or at least have as the default
address and not the other way around as it is here!

Best,

--
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: rox-fm

2011-05-05 Thread Alejandro Imass
On Thu, May 5, 2011 at 4:35 PM, David Brodbeck  wrote:
> On Wed, May 4, 2011 at 7:50 PM, Alejandro Imass  wrote:
>> I wish someone could clearly explain why the reply-to field should
>> ONLY have the mailing-list address, or at least have as the default
>> address and not the other way around as it is here!
>
> This is one of the all-time great religious wars of the internet, on
> par with vi vs. Emacs and top-posting vs. bottom-posting.
>
> See http://marc.merlins.org/netrants/reply-to-harmful.html for one
> side of the argument, and
> http://www.metasystema.net/essays/reply-to.html for the other side.
>

Man, that's hilarious! Using the same rhetoric but backwards!

Very cool read... and I was even kinda shy to ask, I mean so many
years on lists and I'd thought I had heard something on this respect
but never imagined it was actually a religious point.

Thanks again,

--
Alejandro
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Newbie Needing Help

2011-05-08 Thread Alejandro Imass
On Sun, May 8, 2011 at 8:17 PM, John or Judy Hixson
 wrote:
> At the risk of being told to get out of here and never come back (until you 
> know enough to not need to come back), I need help on some very elementary 
> stuff. I haven't found anywhere else to ask these questions and am therefore 
> taking my chances.
>


Hey John welcome to FreeBSD. Good honest questions are almost always
answered. If you try to be a smart ass your newbiness will shine right
through and people will avoid you. But making simple honest questions
like you've done will get you help here for sure.

FreeBSD is much like any Unix so may I suggest you first read on some
generic Unix, and mostly anything in that respect will apply to
FreeBSD, Linux and any and all Unixes, mostly anyway.

The first need to change is your Windoze vocabulary, so the "command
line" is called a "shell". Next you will need to eventually master a
text editor. The are literally hundreds of text-editor in the Unix
world but there are two predominant editor cultures: the vi guys and
the Emacs people.


In Unix, freeBSD and the Linux world there seem to be these
tribal/religious wars about things: vi vs. emacs, gnome vs. kde, MySQL
v.s PostgreSQL, anything vs. sendmail, top posting vs. bottom posting,
etc. etc. etc. In almost everything you will find zealots in the *NIX
world.


I am an Emacs fan myself, but you will need to learn vi regardless of
the editor you later decide to use. This is because vi is installed as
part of the base system in almost all *nix flavors. You will probably
even need vi to configure your base system in order to install
anything else, so do yourself a favor and get a vi tutorial. The same
goes with pagers: "less" is is better than "more" (pun intended) but
more will probably be part of any Unix system whereas less will
probably need to installed unless you are in the Linux world where
less is actually more, or is it less ? ;-)

Anyway, get yourself a tutorial and soft introduction on Unix in
general, and on vi so you can move around. I think that Chapter 3 of
the FBSD Handbook does a great job:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/basics.html

Good luck,

--
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Established method to enable suid scripts?

2011-05-11 Thread Alejandro Imass
On Wed, May 11, 2011 at 10:14 AM, Jerry McAllister  wrote:
> On Tue, May 10, 2011 at 05:54:04PM -0700, Chris Telting wrote:
>
>> I've googled for over an hour.

As other have said suiding on scripts is not allowed in modern
versions of Unix. What I do for example, is create small C programs
suid them and use those special suid execs to do special stuff. For
example, if I need to erase some files created by the mysql daemon
process I will create a C exec called suidrm and have it suid to the
mysql owner so I can remove the temp files from an Apache CGI for
example. Any suid exec should be carefully evaluated and meant for one
specific thing, and avoid suiding to root if at all possible. If you
must you can copy the exec with a different name and suid it for a
specific purpose with a specific user, preferably not root.

Anyway, with the simple C program wrapper approach I have solved many
things like what you're trying to do.

Best,

--
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Established method to enable suid scripts?

2011-05-13 Thread Alejandro Imass
On Fri, May 13, 2011 at 6:07 AM, Chris Telting
 wrote:
> On 05/13/2011 01:32, krad wrote:
[...]
> me ask you.. is "sudo ping" acceptable? Please explain the logical reason
> why not. It would be the preferred method if suid didn't exist and sudo was
> part of the base system.

The sudo versus suid theme is discussed ad-nauseam in many lists and
forums, as well as the C wrappers for doing stuff suid.
IMHO, however, sudo can give you more granular control though
paradoxically relies on suid itself.
The question here is why make the whole freaking interpreter suid when
you can granularly control the specific script.
Anyway, I would personally use a wrapper or sudo.

Cheers,

--
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Established method to enable suid scripts?

2011-05-14 Thread Alejandro Imass
On Sat, May 14, 2011 at 3:09 PM, Randal L. Schwartz
 wrote:
>> "Pan" == Pan Tsu  writes:

[...]

> (Untested) why not just "#!/usr/local/bin/sudo" ?  It'll be given the
> filename as an argument.

Precisely. I think this thread should be forked to something like
"suid versus sudo for scripts"?

I second the sudo idea instead of suiding the interpreter, and it's a
better solution to the one I have used in the past like C-wrapping and
suiding specific operations.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Over-whelmed by ports and package tools

2011-05-19 Thread Alejandro Imass
On Thu, May 19, 2011 at 9:23 PM, Xn Nooby  wrote:
> It is hard for me to tell what tools I should be using to work with
> ports and packages.  I was trying to set up a 64bit 8.2 machine as a
> desktop environment, with Firefox 4 and Flash installed.  It looked
> like I was going to need to track the 8.x stable branch in order to
> get a Firefox package, and I was having some problems pinning down
> which version of Flash I should use (they have a new version since 8l2


Great question. The is no best prctice as such and it mostly depends
on your use of FreeBSD. If it's a workstation you probably want to
install most things via binary packages instead of ports. FreeBSD is
so amazing that it does not matter which way you install them, the pkg
database will not care. You can add a package and the remove by port
and vice-versa. cvsup and all that is mostly used nowadays by mere
mortals for building the world and upgrading.

if you are going to use FreeBSD as a server you arel probably be
better off compiling everything to your exact needs. Precompiled
binary packages are built with standard default options: i.e. probably
either over-bloated with unnecessary features and security holes, or
other times lack the functionality you will require. I would
personally never compile Gnome, Open Office and these great big
packages for several reasons but primarily because it's a waste of
time, and the default compilation options are usually good for the
average use.

Also, please take a look at PC BSD which derives directly from FreeBSD
but it's targeted for the PC/Workstation/laptop world. It's somewhat
akin to Ubuntu and Debian. I think PC BSD is great for workstation use
whereas FreeBSD is great for servers. I use FreeBSD for both but use
binary packages for the big fat GUI applications and compile
everything else.

Best,

--
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Over-whelmed by ports and package tools

2011-05-19 Thread Alejandro Imass
On Thu, May 19, 2011 at 10:06 PM, Alejandro Imass  wrote:
> On Thu, May 19, 2011 at 9:23 PM, Xn Nooby  wrote:
>> It is hard for me to tell what tools I should be using to work with
[..]

> and vice-versa. cvsup and all that is mostly used nowadays by mere
> mortals for building the world and upgrading.
>


Also try to go with portsnap for ports IMHO it's the path of least
resistance ;-)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Over-whelmed by ports and package tools

2011-05-20 Thread Alejandro Imass
On Fri, May 20, 2011 at 10:26 AM, Xn Nooby  wrote:
>> Also try to go with portsnap for ports IMHO it's the path of least
>> resistance ;-)
>
> I will try portsnap, and read about the pkgdb database.  If all these
> tools ultimately resolve to pkgdb, I will try to learn about that.
>
> I have tried PC-BSD, and look forward to version 9.0.  I really don't
> like KDE, though.  I hear some rumblings about a Gnome developer

Jajajaja. THAT IS EXACTLY why I don't use PC-BSD !

> wanting to drop BSD support, so maybe I better start liking KDE.
> PC-BSD seems to have done a great job reproducing the way Mac's
> install software, by using self-contained bundles (PBI's). And next
> version of PBI is supposed to not need a GUI. I'm sure I will be
> trying the next version PC-BSD. Hopefully to be released soon.
>
> thanks!
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Hardware Recovery Company

2011-05-20 Thread Alejandro Imass
Hi folks,

I recently sent a hard drive to be recovered and I think they just
ripped me off. I have the back-up drive and believe it or not it has
the same exact symptoms and won't mount. So I want to send both drives
to a REAL AND TRUSTED LAB for 2 things:

1) Forensics on the supposed head-replecement mumbo-jumbo/scam crap of
the other lab
2) Recovery of the data of the back-up drive

I guess this only happens once in a lifetime when both drives die, but
I can't risk the second drive to a non-certified lab.

I really trust the people on this list so hopefully you can point me
to a real and non-bullshit lab that can really recover data.

It would be nice to know if the lab can actually do #1 and certify my
concerns and willing to testify in court because I want to press legal
charges against the other lab if they in fact ripped me off and
jeopardized my data. But if they can't I still need to recover the
data! HELP!

Thanks beforehand !

--
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


[OT] Re: Hardware Recovery Company

2011-05-20 Thread Alejandro Imass
On Fri, May 20, 2011 at 11:08 AM, Alejandro Imass  wrote:
> Hi folks,
>
> I recently sent a hard drive to be recovered and I think they just
> ripped me off. I have the back-up drive and believe it or not it has
> the same exact symptoms and won't mount. So I want to send both drives
> to a REAL AND TRUSTED LAB for 2 things:


Sorry people, forgot the OT

Thanks!
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: perl-threaded

2011-05-23 Thread Alejandro Imass
Not necessarily, many cpan modules are either thread unaware/innocuous
or thread safe, though there are exceptions.
I have re-compiled Perl with threads with pre-installed libraries and
never had a problem.

You will surely know which things fail when they blow-up or leak you
to death, when you use threading of course. Especially long-running
software like mod_perl. But for that, you always have
maxrequestsperchild ;-)

Now that I mention it, mod_perl would probably need rebuilding IMHO
just to be on the safe side, wherever _that_ is with threads ;-)

Joking aside, I have scaled tremendously with apache mod_perl +
mod_worker a rare but exquisite high-scale Web software recipe.


Best

--
Alejandro Imass

On Mon, May 23, 2011 at 4:20 PM, Jamie Paul Griffin  wrote:
> I have rebuilt my perl5.14 with threading support. do I need to rebuild my 
> perl-linked ports again now i've made this change?
>
>        jamie
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Hardware Recovery Company

2011-05-23 Thread Alejandro Imass
On Sat, May 21, 2011 at 3:14 PM, Julian H. Stacey  wrote:
> Hi,
> Reference:
>> From:         Alejandro Imass 
>> Date:         Fri, 20 May 2011 11:08:21 -0400
>> Message-id:   
[...]

> Announcing you'r thinking if suing the 1st rescuer,
> might make some people might be nervous in being 2nd rescuer.
>



Yeah, really didn't think of that, I'm just so pissed that I think
we're willing to pay the extra forensic work to find out. You know,
when you have that feeling that someone took you as stupid, and these
cases of desperation people tend to make mistakes like I did, instead
of doing some background search, you immediately fall victim of con
artists, like I __just know__ these guys are.

I mean the flashy Web site, the first google sponsored link, the
insistence on not dropping off the dirve (which I did and really did
not feel comfortable with the installations, you know, but with the
desperation we all tend to fall victims to these fraudulent mock ups),
I guess I just wanted to be wrong. Then the technical mumbo-jumbo, the
long delays, you know it all adds up man. I honestly think these
people ripped me off _a lot of money_ that you have to commit up
front. It's just a freaking scam and I would like to blow their cover
and shut the down. We should never let people screw us like this.


> You could look at man fsdb
>

It's a clear hardware failure.

> Cheers,
> Julian
> --
> Julian Stacey, BSD Unix Linux C Sys Eng Consultants Munich http://berklix.com
>  Mail plain text;  Not quoted-printable, Not HTML, Not base 64.
>  Reply below text sections not at top, to avoid breaking cumulative context.
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Urgent: Under attack - need tcpdrop help

2011-05-24 Thread Alejandro Imass
On Tue, May 24, 2011 at 4:29 PM, Andy Wodfer  wrote:
> Hi,
> One of my FreeBSD servers is currently being attacked (DDOS) and I'm
> blocking IP addresses in my firewall. However, there are a large number of
> hung tcp connections and I want them gone.
>

I know it's not what you're asking but for the future try fail2ban. I
can gladly post a simple how to here for FreeBSD.

It's a very simple solution but I have been keeping off pests quite
well with fail2ban. I think it's an awesome and simple framework to
automatically ban IPs and they just move on to the th next server. In
fact you can see the bannings diminish in time as they are the one
that get tired ;-)

Good luck,

--
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: How to restrict jail's network access?

2011-06-08 Thread Alejandro Imass
On Wed, Jun 8, 2011 at 10:50 AM, Erik Nørgaard  wrote:
> Hi:
>
> I'm planning to move services to run in jails. Two jails:
>
> 1: Mail related: postfix, cyrus imap and openldap
> 2: Web related: apache and postgresql
>
> No service should be able to connect out of the jail to remote hosts, except
> for postfix that need to connect out to port 25 for delivery to other
> domains.
>

Jails usually run in a private network by default, each has a private
IP which is alias of the lo device
In fact you usually have explictly NAT ports from the base system to the Jails.

Try EzJail (yep. easy piecy as it's name suggests) and check-out these
references:

http://erdgeist.org/arts/software/ezjail/
http://www.freebsddiary.org/ezjail.php
http://www.scottro.net/qnd/qnd-ezjail.html
http://www.bsdguides.org/guides/freebsd/security/manage_jails


Best,

--
Alejandro Imass

P.S. you can always hire you initial set-up/training, I'm sure many
here would be more than happy to do so ;-)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Perl Libs in FreeBSD CPAN and Ports

2011-07-13 Thread Alejandro Imass
Hello,

I generally use the CPAN shell mainly to get the latest version of
CPAN modules but for modules that use XS I usually prefer using the
port. Ports also seem to have pretty good versions of everything and I
use these 2 mechanisms interchangeably.
Anyway, my question is really to learn more on how these ports are
maintained, etc. For example, in Debian Linux they have a Debian Perl
policy, is there such a policy or something similar in FreeBSD so I
can further read-up on the matter?

Thanks,

--
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Multimedia

2011-07-16 Thread Alejandro Imass
I use FBSD mainly as a server so I don't have much experience on these
devices for FBSD. This is just an idea, but maybe with this WinTV
stuff you may have better luck using the Linux compatibility layer
(take advantage of software and drivers for V4L UVC, etc.). People run
stuff like Skype through that and it seems to work very well albeit a
small performance penalty. Before going through the trouble, make sure
it actually works in Linux and then figure out if the linuxator layer
can actually help you out.

On Sat, Jul 16, 2011 at 12:28 AM, hasanhasanli Hasan
 wrote:
>
>
> Hello everybody
> I want to install driver
> Hauppauge WinTV PVR 250 for FreeBSD. I try for any version FreeBSD 7.4 and 
> 8.2. I can't install it.
> I have done following:
> In Kernel I added next lines:
>
> device  bktr
> device  iicbus
> device  iicbb
> device  smbus
>
> then I have donecd
> cp hcwPVRP2.sys /usr/ports/distfiles
> cd /usr/ports/multimedia/pvr250/
> make install
>
> Port was installed ok didn't appeared any mistake.
> But I can't see any driver cxm
> # pciconf -lv
>
>
> none2@pci0:4:5:0:   class=0x04 card=0x48010070 chip=0x0803 
> rev=0x01 hdr=0x00
>     vendor = 'Conexant Inc (Was: Globespan, ICompression Inc)'
>     device = 'iTVC15/CX23415 MPEG Codec'
>     class  = multimedia
>     subclass   = vidHelp me pleave
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: How to sync a file on FreeBSD?

2011-07-22 Thread Alejandro Imass
If you used fsync it should write to permanent storage immediately,
and it's no longer the OS' problem. If it's not flushing immediately,
maybe the mystery is at the filesystem level or even hardware, both of
which you didn't provide. When you say 'users' are they looking at the
file via NFS or HTTP? if the latter they could be seeing a cached copy
(proxy, browser, etc.).


On Fri, Jul 22, 2011 at 2:44 AM, Unga  wrote:
> Hi all
>
> How to sync a file on FreeBSD (esp. on 8.1) to disk?
>
> I used fsync(2), but does not immediately flush to disk.
>
> I want my writing to a file (a log file) immediately available to other users 
> to read.
>
> Best regards
> Unga
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Why does Perl ExtUtils::MakeMaker install hang on FBSD Jail?

2011-08-04 Thread Alejandro Imass
Hi,

This post is related to this Perlmonks discussion:

http://perlmonks.org/?node_id=918414

But this particular post has to do with the FBSD part of the thread

The MakeMaker build hangs in the test: INSTALL_BASE.t

In this line, it never seems to return from the run() sub:

my $install_out = run("$make install");

If you eliminate this test, everything else works fine and you can
carry on with your business. The modules builds fine in the root
server where the jails are derived from so I'm guessing it has to do
with the way Jails handles that particular make install of Big-Dummy.
This is because I've tried to debug this and run() works correctly
several times before this line. So it is *very* wierd. But I can't be
the only person using the CPAN shell on an Jail !

Thanks

--
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: more information

2011-08-05 Thread Alejandro Imass
On Thu, Aug 4, 2011 at 9:18 PM, zareena crisostomo
 wrote:
> Please help me with my research work..I'm working on Freebsd as my OS. Tnx.
>


So, please clarify. You want us to do your homework assignment? But how can we?
You sent a proprietary format and it's locked, so we can't even cut
and paste to answer the assignment for you!

I wonder what Ms. Nancy M. Flores would think of your "research"
techniques! Sadly, none of your college of IT have their e-mails
posted.

Let's see. You were able to post on this list, so obviously you know
how to STFW, and you obviously know how to read.

So here, RTFM:

http://www.freebsd.org/docs.html

Then, after you actually install and try FreeBSD, and if you have any
_specific_ questions, then come back here with ONE (1) question per
e-mail.

You may be wondering why such a hostile reaction from many people
here. This will answer _that_ question:

http://www.catb.org/~esr/faqs/smart-questions.html

Best,

--
Alejandro Imass


>
>
> Zareena C. Bohol
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: more information

2011-08-05 Thread Alejandro Imass
On Fri, Aug 5, 2011 at 11:00 AM, Chad Perrin  wrote:
> On Fri, Aug 05, 2011 at 10:47:54AM -0400, Alejandro Imass wrote:
>
> . . . a bunch of stuff.
>
> I had no interest in reading the attached PDF until I saw the message by
> Alejandro Imass.  Now that I've read it, I can only think that if one
> takes the tasks described in that PDF literally and seriously the project
> must be the equivalent of a Master's thesis.  Holy crap.  That's a lot of
> work, and if someone does a good job on that set of tasks for FreeBSD,
> that person should end up knowing more than me about FreeBSD despite
> having spent six years using it so far.
>
> I hope this isn't some two-week project.
>

Ja! Especially fun will be cutting and pasting sections II.a and b.

Here you go, Zareena, all you need to do is divide this list about
30/70 into points IIa and IIb, I'm sure your teacher's won't know the
difference which goes where:

http://www.freebsd.org/ports/master-index.html

What's sad IMHO is that IT Colleges world-wide, not in the OP's
country, have gotten so pirate, that they don't really teach
computing, but rather create "users" maybe analogous to
Agricultural schools which teach the techniques and legal aspects of
cross-pollination for planting with Monsanto seeds.

Anyway, the fact that the teacher assigned this student FreeBSD at
least is a sign of hope ;-) but on the other hand it's no wonder why
the largest IT companies in the world were formed by University
drop-outs...

The curriculum is probably OK, for example as you said, if this
assignment would be taken seriously but you can clearly see the
attitude of students which is probably an x-ray into his college.

Then again, I think the FBSD Handbook is even more complete than this
homework assignment.

Cheers!

--
Alejandro Imass

> --
> Chad Perrin [ original content licensed OWL: http://owl.apotheon.org ]
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: more information

2011-08-05 Thread Alejandro Imass
On Fri, Aug 5, 2011 at 11:43 AM, Jerry  wrote:
> On Fri, 5 Aug 2011 10:47:54 -0400
> Alejandro Imass articulated:
>
[...]

>
> For Christ's sake, he posted a simple assignment outline, more than
> likely the original one he received and asked for help with it.
> Obviously, part of the problem can be attributed to language. I assume
> someone besides myself noticed where the assignment originated from.

Everyone reacts from his or her particular perception. The assignment
is in plain English so I doubt the problem is language related, so in
my perception, the question is laziness.
And you have to respect that.

> All he did was ask for some assistance; not for someone to do the actual
> assignment. Perhaps he could have worded it different; however, anyone
> with an IQ over 2 would have been aware of what his intent was.
>

Exactly my point, thanks:

With my humble IQ of 2, his e-mail reads "Please do my homework for me".

> Personally, if I was his instructor, I would give him high marks on
> initiative for going straight to the source and seeking answers. I am

It's a good thing you are not! IMHO awarding laziness is not a good thing.

> assuming that you actually have some education, basket weaving doesn't
> count, and have received assignments that required obtaining facts,
> etcetera. It would have been so much easier and pleasant to have simple
> listed a few links to documentation that he might be able to use rather
> than attacking the OP in a condescending manner.
>

The only one attacking here, my friend, is you.

My mail was very straight forward: go do your homework first; then
come back and ask some intelligent question.

I would gladly accept you criticism if I hadn't pointed the OP in the
right direction.

But if it's a question of "style" then the question becomes, where did
you get your education? because any of my teachers would have done the
same or worse:
"go away and come back with a specific question; don't come here with
you assignment and expect me to do it for you!", "but here, read this
and then come back"

> If you are really looking for e-mail addresses, start here:
> <http://www.uc-bcf.edu.ph/>. When you e-mail his instructors, please
> CC me as well. I really want to see how this is going to turn out for
> you. Be sure to include the OP's original post to this list as well.
>

Yeah well you should have looked yourself first, the faculty staff is
here: http://www.uc-bcf.edu.ph/Programs/Faculty?College=CITCS
And, as I stated in my original reply, they don't post their mails. I
do my homework first.

--
Alejandro

> --
> Jerry ✌
> jerry+f...@seibercom.net
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: more information

2011-08-05 Thread Alejandro Imass
On Fri, Aug 5, 2011 at 1:00 PM, Jerry  wrote:
> On Fri, 5 Aug 2011 12:17:13 -0400
> Alejandro Imass articulated:
>
>> On Fri, Aug 5, 2011 at 11:43 AM, Jerry  wrote:
>> > On Fri, 5 Aug 2011 10:47:54 -0400
>> > Alejandro Imass articulated:
>> >
[...]

> least the the majority of this community can ascertain what the OP
> was trying to convey.
>

Oh, so you speak on the majority of this community? Who seconds you?
The fact is that there were 5 answers to the OP's questions 4 of which
agree with me.
So it is you that is wrong, and have anger management issues.

[...]

> Interesting! "Do" != "Help" You do have a serious IQ deficiency. So,

Man, you should really read up on nettiquette. What the fuck is all
this personal insulting bullshit?

Have I insulted you or the OP?

Have YOU ever had an IQ test? You seem so obsessed with it, maybe you
should get one. and get a psycho exam while you're at it.

BTW, in fact my IQ  was formally tested as part of hiring process in
2005, and that was before I discovered FBSD - imagine what it is now

Sorry to disappoint you, but mine was actually not 2 but rather 133,
that's 3 points higher than the highest average of 95% of the
population.


> using your interpretation, the next time someone posts asking for help
> with a problem they have encountered with FreeBSD, you are going to
> assume that they want you to actually fix it for them rather then give
> them some verbal assistance or a link to a possible fix? Pathetic to
> say the least.
>

[...]


> Really, it took me just seconds to find this address:
> . I have just sent a message to that address
> requesting that it be routed to his instructor, Ms. Nancy M. Flores

If you would actually do your homework instead of all this
inflammatory material, Nacy Flores is the Dean of the IT College. It
was just a pun, a joke, get it?

is your brain even capable of comprehending a little humor?

> requesting clarification on this assignment, particularly whether it is
> considered outside the bounds of the assignment to contact the FreeBSD
> mailing list directly. I included the OP's original post to this group
> so as to eliminate any confusion on her part.
>

what is your problem man? why are you so angry and making this personal?


--
Alejandro

> --
> Jerry ✌
> jerry+f...@seibercom.net
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: more information

2011-08-05 Thread Alejandro Imass
On Fri, Aug 5, 2011 at 1:37 PM, Gary Gatten  wrote:
> If I find someone with an IQ of 160+ and they ask everyone to play nice, will 
> you?  Mine is only 140 something so I don't feel qualified to take this task 
> on myself.  It would be nice though if someone took such offense to a post 
> they would simply ignore it > or contact OP offline.  Seem 50% of the content 
> here is b!itching.  Now sometimes, and perhaps most times, it serves as a 
> source of entertainment for me.  Others it's just annoying  - such as now.  
> With all this brain power and apparently spare time, > > can anyone tell me 
> how to get back all the money I've lost in the market over the last 3 years?  
> Or, perhaps in the last 3 days?  I would like some "help" with that!

Here are some ideas:

- Convince Americans to use their Debit cards instead of credit
- Follow Thomas Jefferson's advice and dissolve the Fed
- Re-read the Keynes v Hayek published inthe NY Times in 1932
- Do something about Bernard von NotHaus
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: extracting text from docx files

2011-08-09 Thread Alejandro Imass
On Tue, Aug 9, 2011 at 3:57 PM, Antonio Olivares
 wrote:
>> But if you really, really need to read docx, you can try the web
>> application from Microsoft. A few months ago, I got also a lot of docx
>> and I opend it with the microsoft web app; this worked for me to extract
>> the information...
>>

just a thought here but if docx is XML why not just find/build some
XSLT that extracts what you need into another format?
you probably have libxml2 and libxslt already in your system, and the
command line utility: xsltproc
there are probably already existing XSLT to transform to RTF and plain text.

--
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: FreeBSD supported versions (UNCLASSIFIED)

2011-08-10 Thread Alejandro Imass
On Wed, Aug 10, 2011 at 7:26 PM, Wright, Jonathon Mr CTR US USA
USARPAC  wrote:
> Classification: UNCLASSIFIED
> Caveats: FOUO
>
> TWIMC,
>
> How do I know as an admin of my FreeBSD server that the version I am running 
> is supported via automated fashion?

In my experience with FBSD they are supported for a very long time, no
worries there. But it's usually best to stay no more than 2 major
releases.
Example current is 8.2, I wouldn't have any 6.x systems today but
there are people that have because that particular version may provide
some specific thing to them. It's the same way that people still use
Apache 1.3 for whatever reason.
Personally, I only have 7.x and 8.x servers and I only use RELEASE
versions, but YMMV of course.

> I'm trying to find a way to do this through a script of sorts so that when 
> the date comes, I'm alerted that I need to upgrade.
>

FBSD is so awesome that all you have to is .forward root mail to your
admin account and automated scripts will tell you about outdated
ports, security patches, vulnerability notes, state of your network,
hard drives and many more things. These crons and scripts are already
part of any standard FBSD installations.

> For example on this link: http://www.freebsd.org/security/#sup
> It has a table with dates / versions.
> How can I query this through the ports tree / or other means?

You don't need to. just wait for the mails I mentioned above and take
action from there!


Best,

--
Alejandro Imass

>
> V/R,
> Jonathon
>
>
>
> Jonathon Wright   CISSP, MSIS, SSCP, BSIT
> RCERT PACIFIC - Architecture Cell
> Contractor, Quantum Research
> (808) 438-1094
>
>
>
> Classification: UNCLASSIFIED
> Caveats: FOUO
>
>
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


ports make search not working in jails

2011-08-11 Thread Alejandro Imass
Hi,

I have been using Jails and EzJail for a while now and everything
works perfectly except for make search in the ports collection insisde
a jail.

Otherwise the ports provided by the basejail works perfectly but I get
this error when I try make search:

The search target requires INDEX-8. Please run make index or make fetchindex.

I tried all the normal steps that you would take in a normal
environment but nothing seems to work. It must be something
specifically related to Jails IMHO.

Thanks in advance for any ideas!

--
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: ports make search not working in jails

2011-08-11 Thread Alejandro Imass
On Thu, Aug 11, 2011 at 10:15 AM, Alejandro Imass  wrote:
> Hi,
>
> I have been using Jails and EzJail for a while now and everything
> works perfectly except for make search in the ports collection insisde
> a jail.
>

Never mind. It's a specific couple of jails that doesn't work and I
never tried to fetchindex again.
I tried in other servers and jails and make fetchindex works perfectly.

Thanks!

--
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: ports make search not working in jails

2011-08-11 Thread Alejandro Imass
On Thu, Aug 11, 2011 at 7:38 PM, Jason Helfman  wrote:
> On Thu, Aug 11, 2011 at 11:05:14AM -0400, Alejandro Imass thus spake:
>>
>> On Thu, Aug 11, 2011 at 10:15 AM, Alejandro Imass  wrote:
>>>
[...]

>> Never mind. It's a specific couple of jails that doesn't work and I
>> never tried to fetchindex again.
>> I tried in other servers and jails and make fetchindex works perfectly.
>>
>> Thanks!
>>
>
> But does make search now work?
>

Yes, absolutely!

--
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Poll on server attacks

2011-08-13 Thread Alejandro Imass
Hi all,

The purpose of this thread is to get some feedback on actions that
admins here are taking to deal with ever increasing attacks on
servers.

I have relied heavily on fail2ban it's really effective and
frustrating for crakers, and the notifications help you initiate your
inspection workflows.

But of course, it doesn't solve all the problems and way too passive
for massive attacks on some services like Asterisk.

So lately I have opted to simply close down IP block massively using
the lists from wizcraft. I know it's a bit extreme but I've had to
block all chinese, russian and nigerian ip blocks. And we're still
evaluating closing off many other blocks from other lists as well.

Is anyone else using such desperate measures?

BTW I created an automated script in Perl that works with wizcraft's
lists if anyone is interested I can post somewhere...

My question is are any of you following up on US, Canadian, and European ISPs?
Is it actually useful follow up and write to the abuse addresses?
What type of feedback do you get?
Do you use any other authority?
Does it make sense to report to Local Police, DoD, FBI, CIA ?
Do you help feed maintain gray/black lists?

Up to now I just write to the abuse addresses as part of my follow-up
from the fail2ban and my own log evaluations. My response rate from
ISPs has been very low, though it's very gratifying to see that some
have ticket systems, and that a few actually respond, care and take
action. The majority though, are simply deaf so I've been thinking of
pursuing the matter with police and legal authorities, at least for
US, Canada and Europe.

I can't believe that the majority of ISPs simple ignore my petitions
to follow-up on their client's (or employee) abuse. I would like these
people to at least be responsible and cover the enormous
administrative costs. We are 2 admins in our company and we only have
a few servers! I can't begin to imagine what companies with larger
server farms have to through every day, and the enormous costs the
face to fight off attackers. And that's not counting SPAM, which is a
major headache for any organization today. IANA doesn't get involved
so I think that at least where we have legal power within our reach,
some legal action may get ISPs into being a bit more serious about
keeping their networks safe.

What do you think about pursuing matters into the police and legal system?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Poll on server attacks

2011-08-13 Thread Alejandro Imass
On Sat, Aug 13, 2011 at 4:40 PM, Jerry  wrote:
> On Sat, 13 Aug 2011 15:43:02 -0400
> Alejandro Imass articulated:
>
[...]

> Personally, I prefer: <https://www.countryipblocks.net/>. It is just a
> matter of personal taste I guess.
>

Thanks for the information, they look like a great option.

We are still evaluating all our options for block lists, but for sure
it's one of the measures we started taking recently.
We really avoided for years the idea of blocking any country as such,
because it seems that is unfair to the legitimate Internauts in those
countries, but sadly it has come down to that.

[...]

>
> About as useful as attempting to build a time machine in my basement.
>

Works for Stewe Griffin!

> Knujon <http://www.knujon.com/> is basically a one man operation that
> has made huge strides in discovering criminal activity among registrars,
> etcetera. You might want to investigate them further. They are always
> looking for help.
>

That looks very cool. Definitively worth collaborating with!

> Just for my own morbid curiosity, what are these "enormous costs" that
> you refer to? You are not buying new hard ware I assume. If you are
> using FOSS then there is little or no software cost involved. Other
> than paying for someone's time, something that would be happening
> anyway, what "enormous cost" comes into play?
>

We're a tiny 10 people operation and we manage about half a dozen
servers. We have one dedicate sysadmin, and even so I have to dedicate
at least 20% of my time to the security issues. This does not count DB
maintenance and overall health checks of the platform. About 50% or
more of my admin's time goes into fine tuning our security measures,
security patches, etc. - that plus about 20% of my time which I could
be doing much more productive stuff. For such a small company to me
that is a huge cost! You could say that maybe probably don't have all
the security expertise, and that's why we invest so much human time
into this, but whichever way it's still a lot of lost money. I think
that hiring this out would probably be more expensive and in my
experience these security "experts" many time know less than we do -
especially when it comes down to our FBSD servers!

I can only image how this is affecting companies that are much larger
than us. Well that is, if they really take care and analyze attacks
and logs, or maybe they hire fewer but more expert security teams...
probably, but it's still very costly IMHO.

--
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


linux-perl ?

2011-08-14 Thread Alejandro Imass
Hi,

I've been searching list archives regarding an old thread that talks
about perl dbd oracle on fbsd:

http://lists.freebsd.org/pipermail/freebsd-database/2006-October/000465.html

My problem is not exactly the same but I need to proxy a specific
proprietary perl library that uses xs and was built for linux.
I agree with the conclusion of the thread, and I doubt there is a way
that fbsd perl would be able to work with this lib directly.

So, I was thinking of installing this "linux-perl" on compat and just
proxy the lib methods via a daemon (even simple http web service) so I
can use the lib through fbsd perl by mean of lwp, for example.

This "linux-perl" is mentioned in the thread several times but I don't
seem to find information about this anywhere else in the archive, and
perl doesn't seem to be in the f10 compats either.

I've STFW and I can't seem to find any other obvious reference to this
linux-perl stuff.

So what is this linux-perl they are talking about in this thread?

Does anybody know how I can build/install a perl 5.10 or above that
can run in the f10 compat layer?

TIA!

--
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Poll on server attacks

2011-08-14 Thread Alejandro Imass
On Sun, Aug 14, 2011 at 5:16 AM, Bill Tillman  wrote:
>
>
> --- On Sat, 8/13/11, Alejandro Imass  wrote:
>
>
> From: Alejandro Imass 
> Subject: Re: Poll on server attacks
> To: "FreeBSD" 
> Date: Saturday, August 13, 2011, 7:57 PM
>
>

[...]

> I, like Jerry would also question your definition of enormous costs. I see 
> attacks at my servers every day. But those are merely attempts to hack in and 
> if you don't have actual breaches into your server then you're ok.

There you go! How do you actually know if you've had actual breaches
if you don't follow up on the logs and spend actual __hours__ doing
that? How do you know your servers are not root-kitted? I had an
experience with a Linux server once and it was root-kitted for a long
time before we ever noticed. It was only after following up an attack
that was reported to us by another party from our server that we
actually realized that server was compromised.

How do you really know how secure your servers are if you don't spend
time testing with nmap, nessus, etc. ? Following up un security
patches, etc. That, at least in our case has become time consuming it
may not be every day, but on average it does take a lot of man hours.
For a small company like our it's become a real cost issue.

> major breach and that was due to my failure to plug an obvious hole in my 
> Asterisk dial plan.

It great you bring Asterisk up. For example, we've used sipvicious to
test our asterisk server and then couple of days ago I get a call at
2am from a sipvicious attack something we couldn't replicate
ourselves, at least not immediately. In fact, this particular Asterisk
attack took us _many_ hours to figure out and made us decide to block
massive China, Russia and Nigerian, ip blocks, and motivated me to
write the thread in the first place! Having to stop some other
productive activity, and spending a day or day and half figuring out
some new form of attack is *very* costly for us at least.

And the same thing goes for every other thing we have running on the
servers. Everything has different types of holes, and every time there
is a new wave or "fever" on attacks on something: phpmyadmin, rsync,
subversion, mediawiki, apache, php, asterisk or what have you, then
it's more and more hours poured into patching, testing, analyzing.
Furthermore if you have Jails you may have different versions of these
services with different security vulnerabilities.

If you and Jerry are not spending a lot of time on these things, well
good for you! I guess, but we do.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Getting __errno_location when loading Perl XS module on FreeBSD

2011-08-16 Thread Alejandro Imass
Hello

I'm compiling a proprietary lib on FreeBSD that offers a Perl API via
XS. The package comes with an ar archive for Linux 64 but I need to
compile it and run it on FreeBSD. FreeBSD make process makes no
complaints about the object files in the ar in the make process, and
everything makes without an error.

The lib compiles fine, but when the dynaloader is loading I get:

/libexec/ld-elf.so.1: (undisclosed).so: Undefined symbol "__errno_location"

Is this ld-elf complaining that it does not find the symbol in
(undisclosed), or is it (undisclosed) not finding the symbol in it's
dependencies?

I've been trying to learn more about __errno_location but some say
it's relates to the pthreads lib, some that it's libm and should be
defined in errno.h, but nope, it's not defined in any .h in Linux or
FreeBSD!

As you can see, the lib build fine and satisfies all dependencies.
Shouldn't the undefined symbol pop-up during linking of the shared
object (during creation) instead than on dynamic linking?

ldd blib/arch/auto/.so blib/arch/auto/Gateway/Gateway.so:
libcurl.so.6 => /usr/local/lib/libcurl.so.6 (0x800c0) libssl.so.6
=> /usr/lib/libssl.so.6 (0x800d54000) libstdc++.so.6 =>
/usr/lib/libstdc++.so.6 (0x800ea7000) libm.so.5 => /lib/libm.so.5
(0x8010b7000) libgcc_s.so.1 => /lib/libgcc_s.so.1 (0x8011d7000)
libc.so.7 => /lib/libc.so.7 (0x800647000) libcrypto.so.6 =>
/lib/libcrypto.so.6 (0x8012e5000) libz.so.5 => /lib/libz.so.5
(0x801585000)
[download]

Thanks in advance for any comments.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: odd regression in the linux emulator.

2011-08-16 Thread Alejandro Imass
This was originally brought up in January:

http://freebsd.1045724.n5.nabble.com/odd-regression-in-the-linux-emulator-td4112202.html#a4112206

Reading the thread it should have been fixed by now, But I have the
same exact problem using:

linux_base-gentoo-stage3-20110614
8.2-RELEASE
All my ports are updated and linux-gentoo-make has the same exact
FUTEX problems.

Is there any workaround, path or some other way to fix this?

TIA

--
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: looking for help

2011-08-16 Thread Alejandro Imass
On Tue, Aug 16, 2011 at 3:46 PM, M.Hafez  wrote:
>
>
> hello;
>
> i do not have big idea abotu freeBSD , this is the first time i am using that,
>i do not want to lean any thing about freeBSD,

This is probably a language thing but it doesn't come on too great on
your behalf.
Posting on a FBSD and not wanting to learn about FBSD is kind of an oxymoron

>i just want to using it to build a supper computer using MPI libraries,
>that to run octave application (matlab  like) to increase the process speedup 
>, i hope i can find steps to do so ,

There are many articles on the Web about Beowulf with FreeBSD. I found
this one useful:

http://blizzard.rwic.und.edu/~nordlie/miniwulf/

But again, the information is out there just STFW and then come back
with specific questions.

Cheers!

--
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: ports make search not working in jails

2011-08-18 Thread Alejandro Imass
On Thu, Aug 11, 2011 at 7:38 PM, Jason Helfman  wrote:
> On Thu, Aug 11, 2011 at 11:05:14AM -0400, Alejandro Imass thus spake:
>>
>> On Thu, Aug 11, 2011 at 10:15 AM, Alejandro Imass  wrote:
>>>
>>> Hi,

[...]

>
> But does make search now work?
>


Today I noticed something interesting...

If you SSH to the jail you get this when you try to make fetchindex:

fetch: /var/ports/INDEX-8.bz2: open(): No such file or directory

But is you jexec to the jail as root from the host then it fetches the
index without any problems.
It may be related to EzJail only because of  the way it sets up the
ports tree, the basejail and all that.
But it may help other people with similar problems when using ports
make search in jails.

--

Alejandro Imass


> -jgh
>
> --
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: new to os

2011-08-18 Thread Alejandro Imass
On Thu, Aug 18, 2011 at 7:21 PM, Polytropon  wrote:

[...]

> Furthermore, I always thought the TRS-80 ran CP/M, not DOS,
> but I could be wrong as I (1st) didn't do any research on
> it (first sin!) and (2nd) don't own one so I could check.
>

They ran many things. I had several, even an older TRS-80 Model 16,
rarely knon. It had a passive backplane and 2 mother-boards. One was
the traditiona Z-80 board which if I remember correctly had 2 Z-80s in
a design similar to the Epson QX10. It also came with a second board
with a 16bit Motorola 68000 ! You would first boot in CPM the Z80
board and the insert the Boot 16 disk which would boot-up the 68K.It
was an icredible machine and software for both processors. I don't
know exactly what the 68K board ran because it was kinda user-space
boot.

I also had the TRS-80 Color Computers which booted in BASIC, and
finally the later series in the late eighties had DOS. I has one of
those as well.

--
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Enabling gjournal without destroying a filesystem?

2011-08-19 Thread Alejandro Imass
On Fri, Aug 19, 2011 at 1:30 PM, Patrick Lamaiziere
 wrote:
> Le Thu, 18 Aug 2011 17:43:41 -0500,
> "Conrad J. Sabatier"  a écrit :
>
> Hello,
>
>> I'm assuming there are definite advantages to using gjournal over
>> softupdates?
>

http://www.usenix.org/event/usenix2000/general/seltzer.html

> If the file system is large, it avoids a "very long" fsck.
> I use gjournal since 7.2 and never had any problem (and I always
> shutdown my small soekris box by removing the power plug...)
>
> Regards.
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: new to os

2011-08-19 Thread Alejandro Imass
On Fri, Aug 19, 2011 at 3:03 PM, Al Plant  wrote:
> per...@pluto.rain.com wrote:
>>
[...]

> Aloha all:
>
> Thanks for the many helpful suggestions for WP5 (was ancestor of WP 7 - 8 I
> think).
>
> I'll have plenty ideas to try.
>


Funny thing is that the OP never replied!

--
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: A quality operating system

2011-08-21 Thread Alejandro Imass
don't need
> it" persists even there. With the graphic design of the website I have
> no problem, but the arrangement of resources on it reflects a lack of
> presence of mind, or paying attention to the user experience.
>

What breaks? Where?

>
> All of this adds up to a quality operating system in theory that does
> not translate into quality in reality.
>

By this part of your post I think you boss simply doesn't like FreeBSD
period. You don't have to come here and make up all this stuff just to
justify that. Heck I may have my problems with several people here,
but that doesn't make go ranting out about FreeBSd as a whole, not
even about the specific individuals one may have problems with. In all
honest truth this whole post is begging to show signs of a wimpy
attitude, probably not yours since you obviously had the balls to post
it here, but maybe from you boss who perhaps got some RTFM or STWF and
then left whining against the poor Beastie.

> You alienate users and place the burden upon them to sort through your
> mess, then sneer at them.
>

You give me an example of this claim, and a few weeks on this won't
cut it. I think you best go to the archives and get a feel for a
general tone of this list.

I personally told some college student a few weeks ago to go do his
homework and it cost me a discussion with a couple of members here,
and I will do it again. FreeBSD's list is IMHO much more tolerant than
_many_ other places I share my time in. In fact, every time there is a
newbie on the radar they get overwhelming responses. The fact, that I
had an altercation with a couple of people doesn't mean that it's an
overall problem. In fact, given enough time, these altercations
actually produce strong bonds between members because they respect
each other.

> You alienate business, professional and artistic users with your
> insistence on hobbyism. These people have full lives; 48 hour sessions
> of trying to configure audio drivers, network cards or drive arrays
> are not in their interest.
>

I think that these comments are fallacious and bad intended. This is
NOTHING like the FBSD community I've worked with for several years.
And I work with both Spanish and English-speaking FBSD communities.


> Even when you get big parts of the operating system correct, it's the
> thousand little details that have been forgotten, ignored or snootily
> written off that add up to many hours of frustration for the end user.
> This is not necessary frustration, and they get nothing out of it. It
> seems to exist because of the emotional and social attitudes of the
> FreeBSD team.
>

Please, you must post clear examples of this. because it's hard for me
to understand these claims. What are these thousand of little details
and where and how do they manifest themselves?


>
> Sadly, Ron is right. FreeBSD is not right for us, or any others who
> care about using an operating system as a means to an end. FreeBSD is
> a hobby and you have to use it because you like using it for the
> purpose of using it, and anything else will be incidental.
>

You don't strike me like the type who would suck up to their bosses,
but towards the end of your post I have my doubts.

I think it's time that Ron posts directly and trade some facts about
all these claims. Preferably one post per fact at a time like
Netiquette indicates.

In other words, post a question, which is after all what this list is
for. One question, one subject, one e-mail, so people that have
different interests can answer accordingly.


> That is the condition of FreeBSD now. If these criticisms were taken
> seriously, I believe the situation could change, and I hope it does.
>

These are not criticisms but rather seems like a FUD/rant.

Please post one question, one topic per email and I promise to answer each one.


Best,

--
Alejandro imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


ssh via NAT slow on _some_ connections only

2011-08-22 Thread Alejandro Imass
Hi folks,

This is *very* weird but it's consistent.

Most of my servers run with jailed services and I access the jails
directly with NAT to a private network where the jails run.

Jails network are just aliases of lo0 liske so:


lo0: flags=8049 metric 0 mtu 16384
options=3
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
inet6 ::1 prefixlen 128
inet 127.0.0.1 netmask 0xff00
inet 192.168.101.1 netmask 0xff00
inet 192.168.101.80 netmask 0xff00
inet 192.168.101.101 netmask 0xff00
[etc.]
inet 192.168.101.123 netmask 0xff00

Then in natd.conf I have nats defined like so:

redirect_port tcp 192.168.101.123:22 12322

At first _all_  my NATed ssh connections were slow until I added -tso
to the main nic ifconfig. So this -tco switch is something that I've
had to add to all my nics for NAT to work properly:

em0: flags=8843 metric 0 mtu 1500

options=209b

Nevertheless, _some_ specific networks are still very slow with NATed ssh.

So for example, I access the server from my home network and I can't
even notice any difference between non-NAT and NATed connections. But
we have one specific remote location where the NATed connections are
really slow.
It's not their network because if they first login to the base server
(no NAT) and _then_ ssh to the private IP, then the performance is
perfect. The issue is only when on the natted port.

In other words: if they ssh -p 12322 like the example above it's
painfully slow, but if they first ssh to the base server and then ssh
to the private IP, the performance is great. This is the exact same
performance issue we were getting before the -tco param, so maybe
there are other flags that affect NAT performance? maybe on that
location's router? Wouldn't this affect the normal ssh connections,
why only the NAT ports have problems?

I really want to avoid to replicate the users in the base system, so
there must be something else that can be done to fix this.
Again, -tco helped a lot but for these particular locations there is
still some problem with the NATed connections we haven't been able to
figure out.

Anyone have any ideas on what could be going on here?

Thanks,

--
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


[OT] pfSense Book Publisher

2011-09-02 Thread Alejandro Imass
Hi,

Anybody know the editorial/publisher of the psSense book?

Thanks,

--
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: [OT] pfSense Book Publisher

2011-09-02 Thread Alejandro Imass
On Fri, Sep 2, 2011 at 4:56 PM, Jerry  wrote:
> On Fri, 2 Sep 2011 16:33:22 -0400
> Alejandro Imass articulated:
>
>> Hi,
>>
>> Anybody know the editorial/publisher of the psSense book?
>
> Which one? Perhaps you might want to start here:
>
> <http://www.amazon.com/s/ref=nb_sb_noss?url=search-alias%3Dstripbooks&field-keywords=pfsense&x=0&y=0>
>

Thanks. I knew it was published in Amazon but I want to purchase
another format other than Kindle because I use B&N's nook.
I want to locate the publisher to see if they have other formats like
ePub or PDF.


> BTW, your "sig delimiter" is not followed by a "space" effectively
> making it useless.
>

Thanks, let's see if it works now:

-- 
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: [OT] pfSense Book Publisher

2011-09-05 Thread Alejandro Imass
On Sun, Sep 4, 2011 at 1:31 PM, Steven Friedrich
 wrote:
> Product Details
>

Thank you!

-- 
Alejandro Imass
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Need an audio multicasting solution

2011-09-09 Thread Alejandro Imass
On Fri, Sep 9, 2011 at 2:21 AM, Victor Sudakov  wrote:
> Colleagues,
>
> I need a solution to read sound from a soundcard (/dev/dsp) and
> multicast it into the network, for the multicast audio stream to be
> played on FreeBSD, Linux and Windows workstations. No sophisticated
> codecs needed, plain PCM would do.
>
> Can you advise something? I know that in theory there are many ways to
> implement this, but I am especially interested in personal first-hand
> experience, success stories or good white papers. Please no
> lmgtfu-type replies. Thanks very much in advance.
>

I doubt people in this list are the lmgtfu type!

I use Icecast on FBSD and it works great.

For the client though we use Ubuntu with idjc and Jack.

Probably Jack works well on FBSD
(http://www.freebsd.org/cgi/cvsweb.cgi/ports/audio/jack_mixer/) and
you could run everything on a single node, but from my experience with
Jack on Linux, it probably ain't gonna be easy.

Nevertheless, the _usual_ way is having your *cast daemon on a server
with ample bandwidth and the client(s) is separate node.

For us, the Icecast FBSD server + idjc/Jack on Linux is a great
combination but YMMV.

Regards,

-- 
Alejandro Imass


> --
> Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
> sip:suda...@sibptus.tomsk.ru
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Need an audio multicasting solution

2011-09-13 Thread Alejandro Imass
On Sun, Sep 11, 2011 at 1:14 PM, Victor Sudakov  wrote:
> Alejandro Imass wrote:
>> >
>> > I need a solution to read sound from a soundcard (/dev/dsp) and

[...]

> Alejandro, correct me if I am wrong but AFAIK Icecast works with mp3

Yep, actually ogg Vorbis and Theora basically and also MP3 ano other
over shoutcast, AFAIK,

> files. Can it really read audio from /dev/dsp? I don't need mp3, I

Icecast needs a "source client" to feed the stream. I use Internet DJ
on a separate machine to feed to the Icecast server and distribute
from there to almost any player.

[...]

-- 
Alejandro
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


  1   2   3   >