natd bug with pptp, hack fix, question

2000-09-26 Thread David G. Andersen
With natd+ipfw, I was setting up a front-end firewall for a client. The firewall has several real IP addresses (we'll call them 10.0.0.1 and 10.0.0.2) and two MS PPTP servers behind it. 10.0.0.1 10.0.0.2 World- | firewall | - PPTP-1 192.168.1.1

Re: Default users and the passwords

2001-01-23 Thread David G. Andersen
Lo and behold, Guillermo Leandro once said: > > Hi everybody! > > FreeBSD, like almost all Unix OS, has other default users, like uucp, > operator, etc. Since this users cames with the FreeBSD distribution, where > can I find their passwords? They don't have passwords. /etc/master.passwd

Re: finger/fingerd & home directory permissions

2001-08-08 Thread David G Andersen
Lo and behold, Yar Tikhiy once said: > > In the case of local access, it's no problem, since anyone may read > /etc/passwd directly. OTOH, letting remote folks peek at user > information even if the user wants to hide himself is a bad thing. > > The issue I'd like to submit to discussion is what

Changing socket buffer timeout to a u_long?

2002-11-21 Thread David G. Andersen
Are there compelling reasons not to change the socket buffer timeout to a u_long from a u_short? This variable stores the number of ticks before the socket operation times out. At present, the maximum SO_RCVTIMEO or SO_SNDTIMEO value one can set is SHRT_MAX / hz. With a 100Hz kernel, this comes

Re: Which device should I make with this error?

1999-07-13 Thread David G. Andersen
Lo and Behold, eT said: > During a make release for 3.2-RELEASE I get the following error: > > vnconfig: open: Device not configured > *** Error code 1 > > What does this mean and how do I fix it? It means you don't have any vnode devices configured in your kernel. What, you ask, is a vnode dis

Re: tee option on ipfw?

1999-07-19 Thread David G Andersen
The 'tee' behavior can be pretty easily emulated, however. a) use bpfilter - it automatically does a copy type thing. b) Use a little divert socket program which simply does: len = recvfrom(divert_socket, packetbuf, sizeof(packetbuf), 0, (struct sockaddr *)&from, &fromle

Re: Replace/rewrite reverse.c for tail(1)

1999-07-29 Thread David G. Andersen
Er, the original TAC was a BSD utility which was rewritten by Jay Lepreau at Utah (who also happens to be my boss)... The source for it that I have sitting around (1986) doesn't actually list a copyright, but I'm fairly sure that we're in control of the copyright for that version. The authors are

Re: Change to /sys/net/if.c & /sys/dev/syscons/syscons.c

1999-08-20 Thread David G Andersen
For the record, I'd love to see this made official, and under normal (not just verbose) logging. -Dave Lo and behold, Cillian Sharkey once said: > > Hi, > > change to /sys/net/if.c which will print out > "xxN: promiscuous mode disabled" msg to match its > equiv. "xxN: promiscuous mode enable

Re: lpd woes ... missing feature that different printer share same spool

1999-05-26 Thread David G. Andersen
Thankfully, the problem isn't in lpd, it's in chkprintcap. Index: chkprintcap.c === RCS file: /n/marker/usr/lsrc/FreeBSD/CVS/src/usr.sbin/lpr/chkprintcap/chkprintcap.c,v retrieving revision 1.2 diff -c -r1.2 chkprintcap.c *** chkprin

Re: Which device should I make with this error?

1999-07-13 Thread David G. Andersen
Lo and Behold, eT said: > During a make release for 3.2-RELEASE I get the following error: > > vnconfig: open: Device not configured > *** Error code 1 > > What does this mean and how do I fix it? It means you don't have any vnode devices configured in your kernel. What, you ask, is a vnode di

Re: tee option on ipfw?

1999-07-19 Thread David G Andersen
The 'tee' behavior can be pretty easily emulated, however. a) use bpfilter - it automatically does a copy type thing. b) Use a little divert socket program which simply does: len = recvfrom(divert_socket, packetbuf, sizeof(packetbuf), 0, (struct sockaddr *)&from, &froml

Re: Replace/rewrite reverse.c for tail(1)

1999-07-29 Thread David G. Andersen
Er, the original TAC was a BSD utility which was rewritten by Jay Lepreau at Utah (who also happens to be my boss)... The source for it that I have sitting around (1986) doesn't actually list a copyright, but I'm fairly sure that we're in control of the copyright for that version. The authors ar

Re: Change to /sys/net/if.c & /sys/dev/syscons/syscons.c

1999-08-20 Thread David G Andersen
For the record, I'd love to see this made official, and under normal (not just verbose) logging. -Dave Lo and behold, Cillian Sharkey once said: > > Hi, > > change to /sys/net/if.c which will print out > "xxN: promiscuous mode disabled" msg to match its > equiv. "xxN: promiscuous mode enabl

Re: Idea: disposable memory

1999-09-23 Thread David G Andersen
Lo and behold, Kevin Day once said: > > > I don't think MADV_FREE is what I want, since it makes my memory go away > very quickly, *and* I have no way of knowing that the kernel did it. You do have a way of knowing the kernel did it - your memory is suddenly full of zeros. You don't have an

Re: Netscape Bus Error

1999-10-05 Thread David G Andersen
It most likely is. I've found a pretty reliable way to crash Netscape 4.6 and 4.7-freebsd (either us or export): Open two windows, and visit slashdot in both of them. Don't ask me _why_ it works, but it does. :) It causes the BSDI version to hang and chew CPU. The linux and windoze versions o