Re: Firewall config non-intuitiveness

2002-01-27 Thread Crist J. Clark
Warner, if the proposed change were to be made, you could get the same effect by doing, firewall_enable=YES firewall_script=/dev/null Which I think more accurately describes the behavior you want (if someone were to browse the rc.conf and try to understand your configuration, they'd be more

Re: double fault with vinum and 4.5 RC3

2002-01-27 Thread Martin Blapp
Hi Greg. As I've mentioned elsewhere, this is seriously suboptimal. The mirror command is a toy for people getting used to Vinum. You want Why is this suboptimal ? It's fast done. It seems to work. Else you have to say: not supported, since it can panic your machine. a proper config

Re: double fault with vinum and 4.5 RC3

2002-01-27 Thread Martin Blapp
Hi all, I tried looking, but the net connection was terrible. Anyway, I've been able to reproduce it here, and I have a patch which should make it go away: Just tried the patch and it fixes my problem completly. Thanks Thomas for the excelent work you've done. And thank you Greg for

which dumps core on 4.5-RC2

2002-01-27 Thread Jens Rehsack
Hi there, on my just installed DSL-Router based on FreeBSD 4.5-RC2 iso image with a new compiled kernel (added NETGRAPH, removed IPv6): which abc results in showing the full path and terminates with illegal instruction: core dumped My System is: AMD 5x86, 100MHz 16 MB RAM 3G HD 2x

Re: which dumps core on 4.5-RC2

2002-01-27 Thread Jan Schlesner
Hi, On Sun, Jan 27, 2002 at 11:31:47AM +0100, Jens Rehsack wrote: on my just installed DSL-Router based on FreeBSD 4.5-RC2 iso image with a new compiled kernel (added NETGRAPH, removed IPv6): which abc results in showing the full path and terminates with illegal instruction: core dumped

Re: which dumps core on 4.5-RC2

2002-01-27 Thread Jens Rehsack
Hi Jan, from the cvsup-Sources I do not have a problem, too. But on this machine I do not want to compile world, because the 16MB results in 8 hours kernel compile, so I decided to keep the sources from CD. Jens Jan Schlesner wrote: Hi, On Sun, Jan 27, 2002 at 11:31:47AM +0100, Jens

FS corruption w/softupdates on 4.5-RC ?

2002-01-27 Thread Phil Homewood
A system recently upgraded from a 6 month old 4.3-STABLE image appears to be suddenly experiencing massive FS corruption (or fsck is very confused when checking a readonly-mounted FS.) I've been following what seem to be a lot of dead-ends on this, but seem to have tracked it down to the

Re: FS corruption w/softupdates on 4.5-RC ?

2002-01-27 Thread Phil Homewood
Phil Homewood wrote: Attached is a copy of my dmesg and kernel config. Well, it would have been, if I hadn't been distracted by... ooh, shiny... Um, yeah. Here it is. (Also another point: UFS_DIRHASH appears to make no difference.) Copyright (c) 1992-2002 The FreeBSD Project. Copyright (c)

Re: Firewall config non-intuitiveness

2002-01-27 Thread M. Warner Losh
In message: [EMAIL PROTECTED] Crist J. Clark [EMAIL PROTECTED] writes: : Warner, if the proposed change were to be made, you could get the same : effect by doing, : : firewall_enable=YES : firewall_script=/dev/null : : Which I think more accurately describes the behavior you

Re: which dumps core on 4.5-RC2

2002-01-27 Thread Jan Schlesner
Hi Jens, On Sun, Jan 27, 2002 at 11:31:47AM +0100, Jens Rehsack wrote: on my just installed DSL-Router based on FreeBSD 4.5-RC2 iso image with a new compiled kernel (added NETGRAPH, removed IPv6): which abc results in showing the full path and terminates with illegal instruction: core

Re: double fault with vinum and 4.5 RC3

2002-01-27 Thread Martin Blapp
Greg, As I've mentioned elsewhere, this is seriously suboptimal. The mirror command is a toy for people getting used to Vinum. You want a proper config file. Then create one drive per spindle, and choose your subdisk sizes to match what you want. Specifically, your config file should

Re: double fault with vinum and 4.5 RC3

2002-01-27 Thread Greg Lehey
On Thursday, 24 January 2002 at 19:14:10 +0100, Martin Blapp wrote: ... unfortunatly I'm not able to recover from a simulated disk-crash. Here is what I made: Two disks: da0, da0, both 35GB 1) Installed FreeBSD on da0s1a 2) mount so single user mode dd bs=4096k if=/dev/da0 of=/dev/da1

Re: double fault with vinum and 4.5 RC3

2002-01-27 Thread Greg Lehey
On Sunday, 27 January 2002 at 19:53:52 +0100, Martin Blapp wrote: I just got another panic while executing; vinum resetconfig Why are you using resetconfig? It's almost never needed. Fatal trap 12: page fault while in kernel mode fault virtual address = 0x28 fault code =

Re: double fault with vinum and 4.5 RC3

2002-01-27 Thread Greg Lehey
On Sunday, 27 January 2002 at 0:37:09 +0100, Thomas Moestl wrote: On Fri, 2002/01/25 at 11:38:31 +0100, Martin Blapp wrote: vinum create /root/configfile twice ! makes STABLE 4.5RC3 crashing with a double fault. I guess we should fix that. I'm makeing now a debug kernel. I've had a quick

Re: Firewall config non-intuitiveness

2002-01-27 Thread Mike Meyer
Gerhard Sittig [EMAIL PROTECTED] types: On Sun, Jan 27, 2002 at 11:57 -0600, David Syphers wrote: [ ... surprise ... ] As others have pointed out this behavior is documented, but we must remember that a variable name itself is the most important and immediate documentation. And having

Re: Firewall config non-intuitiveness

2002-01-27 Thread Crist J. Clark
On Sun, Jan 27, 2002 at 10:27:48AM -0700, M. Warner Losh wrote: [snip] Right now what I have works. You are changing the semantics of a security related feature of the system in such a way that after this change what I have will not work. I agree that your work around will allow me to

Re: double fault with vinum and 4.5 RC3

2002-01-27 Thread Greg Lehey
On Sunday, 27 January 2002 at 19:46:28 +0100, Martin Blapp wrote: Uhh, what I'm doing wrong ? cat configfile snip The config file looks fine. # vinum create configfile 2: drive vinumdrive2 device /dev/da1s1e ** 2 : Invalid argument D vinumdrive1 State: up Device

Re: Firewall config non-intuitiveness

2002-01-27 Thread John R. Long
I have to go along with common sense and logic with this one. I was once burnt by it about 2 years ago. I compiled it in and set it to NO in .rc and nothing going thru. Strange, NO means no right?, it is a control knob to the kernel so NO must disable it right?. And disabled means the same as not

Re: double fault with vinum and 4.5 RC3

2002-01-27 Thread Martin Blapp
Hi Greg, So it seems. I've heard of this in a couple of cases. It would be interesting to see the log output, but if I understand you correctly you have since found a way to work around the problem. I suspect that there was something in the disk label which confused the issue, but it

Re: double fault with vinum and 4.5 RC3

2002-01-27 Thread David W. Chapman Jr.
I still don't know why you're switching jumpers. That's not needed. But it doesn't change anything. wouldn't he have to change the scsi id's if id 1 was set to boot in the controller and drive 1 no longer exists. I suppose he could change the boot id in the scsi adapters bios as well. --

Re: double fault with vinum and 4.5 RC3

2002-01-27 Thread Greg Lehey
On Sunday, 27 January 2002 at 19:12:59 -0600, David W. Chapman Jr. wrote: I still don't know why you're switching jumpers. That's not needed. But it doesn't change anything. wouldn't he have to change the scsi id's if id 1 was set to boot in the controller and drive 1 no longer exists. I

Re: Firewall config non-intuitiveness

2002-01-27 Thread Nate Williams
See above. It can easily be done in a more standard way. (One can argue that the '-z' should be the default flag, but so far I've failed to convince Warner of this fact. :) :) Forgive me if I'm mistaken, but the pccard_ether script (when last I looked at it) seems to assume exactly

Re: Firewall config non-intuitiveness

2002-01-27 Thread Michael Sierchio
Nate Williams wrote: See above. It can easily be done in a more standard way. (One can argue that the '-z' should be the default flag, but so far I've failed to convince Warner of this fact. :) :) Forgive me if I'm mistaken, but the pccard_ether script (when last I looked at

Re: Firewall config non-intuitiveness

2002-01-27 Thread Nate Williams
See above. It can easily be done in a more standard way. (One can argue that the '-z' should be the default flag, but so far I've failed to convince Warner of this fact. :) :) Forgive me if I'm mistaken, but the pccard_ether script (when last I looked at it) seems to assume

Re: Firewall config non-intuitiveness

2002-01-27 Thread Michael Sierchio
Michael Sierchio wrote: Nate Williams wrote: See above. It can easily be done in a more standard way. (One can argue that the '-z' should be the default flag, but so far I've failed to convince Warner of this fact. :) :) Forgive me if I'm mistaken, but the pccard_ether