accessing an outside IP from inside a NAT net

2001-01-19 Thread Ian Kallen
I'd like a hand figuring out how to access resources on the internal side of a NAT net from within it without doing something kludgey with DNS. i.e. suppose I run natd with a configuration like this: # begin /etc/natd.conf use_sockets same_ports port 8668 deny_incoming no log redirect_port tcp 1

kernel resource tracking/controlling

2001-01-19 Thread Amos Blackman
I've been digging through a lot of unfamiliar code trying to figure this out on my own, and have decided it would be more efficient to see if there's an expert around. :) I'm trying to implement a kernel resource tracking/controlling system in as general a manner as possible. Essentially, for an

What must be provided by an init for ncurses?

2001-01-19 Thread Alexander Langer
Hello! Libh uses TVision which uses ncurses. I have written a *simple* init which opens /dev/ttyv0. printf() and alikes work, but ncurses does not ("Error opening terminal"). I wonder if anyoen can tell me what my simple init must provide as well to make ncurses running. I have a /etc/termcap

Re: Protections on inetd (and /sbin/* /usr/sbin/* in general)

2001-01-19 Thread Dag-Erling Smorgrav
Tony Finch <[EMAIL PROTECTED]> writes: > Apache itself has support for setting resource limits, although I > agree that in many cases you may want them to be different between the > httpd and the CGIs. You most emphatically do not want to do that. You want the CGI to run with its owner's resource

Re: a couple of patches for cvs

2001-01-19 Thread Akinori MUSHA
The following patch was also needed... --- gnu/usr.bin/cvs/cvs/Makefile.orig Fri Jan 19 14:58:23 2001 +++ gnu/usr.bin/cvs/cvs/MakefileFri Jan 19 15:03:10 2001 @@ -26,8 +26,8 @@ CFLAGS+= -I${.CURDIR} -I${.CURDIR}/../lib -DHAVE_CONFIG_H \ -I${CVSDIR}/src -I${CVSDIR}/lib -I${CVSD

Re: accessing an outside IP from inside a NAT net

2001-01-19 Thread Gordon Tetlow
On Fri, 19 Jan 2001, Ian Kallen wrote: > Now if the DNS for the web server www.foo.com running on 10.0.0.128 > directs a browser on the 10.0.0.0 net to 206.169.18.10, it doesn't get > routed back to 10.0.0.128; it just hangs (I'm acutally not sure what's > happening there, the connction never suc

Kernel memory allocation bug ...

2001-01-19 Thread Xavier Galleri
Hi everybody, This mail is related to the 'Need help for crash dump analysis' mail serie and the more recent 'Information on kernel crash dump analysis' mail. I have achieved to (manually) get a stack dump by getting my 'curpcb' value at the time I call MALLOC and then issuing 'info frame' and

Re: Kernel memory allocation bug ...

2001-01-19 Thread Peter Wemm
Xavier Galleri wrote: > Hi everybody, > > This mail is related to the 'Need help for crash dump analysis' mail > serie and the more recent 'Information on kernel crash dump analysis' mail. What kernel version again? Any unusual options? (eg: SMP etc) Cheers, -Peter -- Peter Wemm - [EMAIL PRO

Re: Clustering FreeBSD

2001-01-19 Thread Brooks Davis
On Thu, Jan 18, 2001 at 10:41:15PM -0700, Russell L. Carter wrote: > Nowadays, you'd want to "globus ify" things, rather than > use use PVM. For those who want a simple, stupid way to do this, making an MPI application is a convenient first step. MPI is pretty similar to PVM except that I don't

Re: Kernel memory allocation bug ...

2001-01-19 Thread Xavier Galleri
Peter Wemm wrote: > Xavier Galleri wrote: > >> Hi everybody, >> >> This mail is related to the 'Need help for crash dump analysis' mail >> serie and the more recent 'Information on kernel crash dump analysis' mail. > > > What kernel version again? Any unusual options? (eg: SMP etc) > > Ch

How can I stop HDD or LCD Display ?

2001-01-19 Thread Takanori Watanabe
Hi, My laptop seems to be transition to S1 sleep. But HDD and LCD did not suspend I think driver or userland program should catch suspend request and send power off request to the devices. How can I do it? For display, it seems that request Xserver to invoke DPMS,but how about console? Fo

Re: Patch to fix "make buildkernel requires full obj directory" mistake

2001-01-19 Thread Josef Karthauser
On Fri, Jan 19, 2001 at 07:43:50PM +1300, Dan Langille wrote: > On 18 Jan 2001, at 20:13, Warner Losh wrote: > > Either we change the handbook to make it clear, as I hope my patch[1] > does, or we fix buildkernel so it works as advertised in the handbook. I > don't mind either solution. > Do

Re: Patch to fix "make buildkernel requires full obj directory" mistake

2001-01-19 Thread Josef Karthauser
On Fri, Jan 19, 2001 at 07:43:50PM +1300, Dan Langille wrote: > > answered one too many questions that boil down to "just rebuild the > > world and stop arguing with me, things will start to work". > > Either we change the handbook to make it clear, as I hope my patch[1] > does, or we fix buildk

'naive' programs on ng_socket's

2001-01-19 Thread Harti Brandt
Hi, I try to use the feature described in the ng_socket man page - writing to a ng_socket node that has excatly one hook attached. This appears not to work. I use NgMkSockNode(NULL, &cs, &ds) to create my node, then I NGM_CONNECT it to another node. If I now write to the data socket, I get a EDE

Re: Clustering FreeBSD

2001-01-19 Thread Ronald G Minnich
On Fri, 19 Jan 2001, Brooks Davis wrote: > For those who want a simple, stupid way to do this, making an MPI > application is a convenient first step. MPI is pretty similar to PVM > except that I don't know of anyone in the high performance computing > community that still uses PVM for new appli

startx /dev/mem problem

2001-01-19 Thread Chris Stenton
I have just put on a clean 4.2-stable and freebsd 4 installation onto a machine and am unable to start X via the startx command as an ordinary user. I get the following error (==) ModulePath set to "/usr/X11R6/lib/modules" (WW) checkDevMem: failed to open /dev/mem (Permission denied)

Re: Clustering FreeBSD

2001-01-19 Thread Wes Peters
"Russell L. Carter" wrote: > > %Uwe Pierau wrote: > %> > %> Jamie Heckford wrote: > %> # Hi, > %> # Does anyone have any details of Open Source, or software included > %> # with FreeBSD that allows the clustering of FreeBSD? > %> > %> Maybe you mean something like this... > %> http://ac

Re: Clustering FreeBSD

2001-01-19 Thread Paul Marquis
This link appears broken. Typo perhaps? Ronald G Minnich wrote: > See it at http://www.lanl.gov/~rminnich/. -- Paul Marquis [EMAIL PROTECTED] To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-hackers" in the body of the message

Re: Clustering FreeBSD

2001-01-19 Thread Ronald G Minnich
Sorry, the wrong URL. http://www.acl.lanl.gov/~rminnich ron To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-hackers" in the body of the message

New (Superalan.NeT - Turkiyedeki En Genis Icerikli Internet)

2001-01-19 Thread Yonetici
Turkiyenin En Gnis icerikli sitesi http://www.Superalan.net Bu Sitede Yok Yok... iþte listemiz... *) Super Cep Bölümü: SMS, Melodi ve Cep Hileleri Cep telefonlarý Hakkýnda Herþey ( Radyasyon miktarlarý vb... ) *) Eglence Bölümü: Çizgi Filmler ( Flash ), Bizim City (Flash Bizimcity Cizgi Filmle

Re: kernel resource tracking/controlling

2001-01-19 Thread Mike Smith
The short answer to your question is "no". You might want to talk to the TrustedBSD people, though, since the access control mechanisms are effectively the authentication side of resource control, and the gates that they are implementing could become part of a wider "resource" management infra

Re: Permissions on crontab..

2001-01-19 Thread Lyndon Nerenberg
> "Michael" == Michael Bacarella <[EMAIL PROTECTED]> writes: Michael> Ideally, crontab wouldn't be suid/gid _anything_ and Michael> users own their own crontab file, but perhaps I've said Michael> too much. :) Where, exactly, would you store the users crontab file? It can't go i

Re: Patch to fix "make buildkernel requires full obj directory" mistake

2001-01-19 Thread Josef Karthauser
On Thu, Jan 18, 2001 at 08:13:57PM -0700, Warner Losh wrote: > > I thought that crunchgen dealt with the .o's that were created in the > buildworld process. It looks like it rebuilds them itself in a > whacked out way to make the whole thing work. No - it looks at the original Makefile to deter

Re: Patch to fix "make buildkernel requires full obj directory" mistake

2001-01-19 Thread Warner Losh
In message <[EMAIL PROTECTED]> Neil Blakey-Milner writes: : I've kept on forgetting to apply a patch similar to this one. I'm annoncing my intention to commit this patch this weekend unless someone objects. It tilts the balance a little far in the dangerous direction for the upgrade customers, b

Re: Protections on inetd (and /sbin/* /usr/sbin/* in general)

2001-01-19 Thread Matt Dillon
A jailed environment will certainly help prevent them from breaking root, but keep in mind that the server side scripts already need to have read (and probably write) access to much of the data associated with the web site in order to operate the web site. You can do only so m

subscribe

2001-01-19 Thread Jamie Bush
  Jamie Bush I.T. Administrator V.G. Reed and Sons, Inc. 1002 S. Twelfth Street Louisville, KY 40210 502-560-0166  

Re: accessing an outside IP from inside a NAT net

2001-01-19 Thread Ian Kallen
Hmm, I tried that now. I can ping from one subnet to the other, the redirect_port directive appears to be working (at least outside machines can access the internal IP/port combination correctly). But the client subnet still cannot reach the server subnet via the public IP. The servers and clie

Re: accessing an outside IP from inside a NAT net

2001-01-19 Thread Nick Rogness
On Fri, 19 Jan 2001, Ian Kallen wrote: > > I'd like a hand figuring out how to access resources on the internal side > of a NAT net from within it without doing something kludgey with DNS. > i.e. suppose I run natd with a configuration like this: > > # begin /etc/natd.conf > use_sockets > same_

Re: how to test out cron.c changes? (was: cvs commit: src/etc crontab)

2001-01-19 Thread Matt Dillon
:I'm just editing the PR with the cron patches to "catch up" with :OpenBSD in this respect (stating that it doesn't handle DST, but :has benefits whenever one's clock is jumping or cron waking up :too late and _could_ be extended to handle DST). Therein I :suggest to :- not touch current cron at

Re: Protections on inetd (and /sbin/* /usr/sbin/* in general)

2001-01-19 Thread Dag-Erling Smorgrav
Matt Dillon <[EMAIL PROTECTED]> writes: > The real problem here is the CGI script / server-side design allowing > the breakin in the first place. That's not a fixable problem when the customer is meant to provide his own scripts. I've worked on such a scenario before; we managed to chroo

Re: Patch to fix "make buildkernel requires full obj directory" mistake

2001-01-19 Thread Dima Dorfman
> Like lots of people who use FreeBSD rather than tinker with it, > I have never done "make any-kind-of-world" and never expect to. > I create a kernel config with my stuff in it, and do config, > make, make install. I trust this is not going to be broken? This is not broken, and will not be bro

(fwd) libh disk editor

2001-01-19 Thread Alexander Langer
Hi! I'm forwarding this here for those of you who might have missed it on cvs-all/committers. This is libh's version of the disk-editor. Note that it is alpha-software, so be careful with use. Some dialogs (e.g. the "About"-dialog) just don't work, but you will notice this. At least, it is a n

Re: startx /dev/mem problem

2001-01-19 Thread Dima Dorfman
> Fatal server error: > xf86OpenConsole: Server must be suid root As it says, the server must be run setuid to root. Old versions of XFree86 (3.x.y) installed all servers setuid to root by default. This is a security hazard. XFree86 4.0.x do not install them setuid to root. You either need to

RE: ISR not triggered upon the interrupts and OS hangs

2001-01-19 Thread Howie Xu
Hi Mike et al., The bug was solved and it was because the BIOS advertises wrong interrupt line. It should be 5, not 12. So I registered ISR for line 12, of course never triggered. On the other hand, if no one registers for an interrupt line, how come the OS just hangs, is this a feature or bug?

Re: ISR not triggered upon the interrupts and OS hangs

2001-01-19 Thread Mike Smith
> The bug was solved and it was because the BIOS advertises wrong interrupt > line. It should be 5, not 12. So I registered ISR for line 12, of course > never triggered. Er, can you be more specific here? Where is the interrupt line "advertised"? Is the BIOS incorrectly populating the intline

Re: startx /dev/mem problem

2001-01-19 Thread Dag-Erling Smorgrav
Chris Stenton <[EMAIL PROTECTED]> writes: > Fatal server error: > xf86OpenConsole: Server must be suid root This is your clue. DES -- Dag-Erling Smorgrav - [EMAIL PROTECTED] To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-hac

RE: ISR not triggered upon the interrupts and OS hangs

2001-01-19 Thread Howie Xu
I am developing a device driver for a network processor. Using pci_cfgread(intline), I read intline 12, but after using DDB to debug the situation, I was convinced that the device actually generates inline 5. After registering my ISR with intline 5, everything is perfect now. Btw, the device was

Re: Protections on inetd (and /sbin/* /usr/sbin/* in general)

2001-01-19 Thread Andy Farkas
I've said it before, and I'll say it again: http://www.FreeBSD.org/cgi/query-pr.cgi?pr=13606 > Tony Finch <[EMAIL PROTECTED]> writes: > > Apache itself has support for setting resource limits, although I > > agree that in many cases you may want them to be different between the > > httpd an

Re: accessing an outside IP from inside a NAT net

2001-01-19 Thread Ian Kallen
Well, I've been fiddling with the ipfw syntax, I thought this would do it /sbin/ipfw add divert 80 all from 10.0.0.128/25 to 206.169.18.10 via ep0 but that ain't it. 10.0.0.128/25 has servers, 10.0.0.0/25 has clients, both gateways 10.0.0.1 and 10.0.0.129 run off ep0... yes, I've been reading th

Re: Clustering FreeBSD

2001-01-19 Thread Russell L. Carter
%> No it would not! Back in '94 I ported dmake to FreeBSD %> and built just about every numerics package out there %> on a 4 CPU cluster. Worked fine, but not much in overall %> speedup, because... tadum! Where do you get the source %> files, and how do you get the objs back :-) Not low %> lat

Re: accessing an outside IP from inside a NAT net

2001-01-19 Thread Nick Rogness
On Fri, 19 Jan 2001, Ian Kallen wrote: > Well, I've been fiddling with the ipfw syntax, I thought this would do it > /sbin/ipfw add divert 80 all from 10.0.0.128/25 to 206.169.18.10 via ep0 > but that ain't it. > > 10.0.0.128/25 has servers, 10.0.0.0/25 has clients, both gateways > 10.0.0.1 and

Re: accessing an outside IP from inside a NAT net

2001-01-19 Thread Nick Rogness
On Fri, 19 Jan 2001, Ian Kallen wrote: > Well, I've been fiddling with the ipfw syntax, I thought this would do it > /sbin/ipfw add divert 80 all from 10.0.0.128/25 to 206.169.18.10 via ep0 > but that ain't it. > > 10.0.0.128/25 has servers, 10.0.0.0/25 has clients, both gateways > 10.0.0.1 and

Re: accessing an outside IP from inside a NAT net

2001-01-19 Thread Nick Rogness
On Fri, 19 Jan 2001, Ian Kallen wrote: > Well, I've been fiddling with the ipfw syntax, I thought this would do it > /sbin/ipfw add divert 80 all from 10.0.0.128/25 to 206.169.18.10 via ep0 > but that ain't it. > > 10.0.0.128/25 has servers, 10.0.0.0/25 has clients, both gateways > 10.0.0.1 and

Re: accessing an outside IP from inside a NAT net

2001-01-19 Thread Ian Kallen
Cool, thanks. Yes, there's now two subnets on the internal network. I changed the IP on the backend here's the config details: # /etc/rc.conf excerpt ifconfig_ed0="inet 206.169.18.10 netmask 255.255.255.0" ifconfig_ep0="inet 10.0.0.1 netmask 255.255.255.128" ifconfig_ep0_alias0="inet 10.0.0.1