Digitally Signed Binaries w/ Kernel support, etc.

2008-04-02 Thread Forrest Aldrich
Does FreeBSD have support for digitally signed binary checking, similar to what Linux has with bsign and DigSig, where system binaries are signed and this signature is verified before being run in the kernel? This would be very useful to have to further tighen-down the system. Thanks.

Order of devices listed in ifconfig

2006-08-21 Thread Forrest Aldrich
I'm certain I read up on this somewhere before... When you install a FreeBSD system (6.1 here), the devices don't always configure in order. For example, I have a few Dell PowerEdge systems, upon which 2 are FreeBSD The devices would normally appear in order (similar to Linux) where

Error in ntpd manpage

2006-08-16 Thread Forrest Aldrich
There is an error in the NTPD manpage. The option -L means do NOT listen to Virtual IPs the present manpage (FreeBSD-6.1-STABLE) says: -L Listen to virtual IPs. looking at the code in /usr/src/contrib/ntpd/cmd_args.c shows this: /* * Definitions of things either imported

Kerberos5 on 6.1

2006-06-13 Thread Forrest Aldrich
I have FreeBSD-6.1 and it appears the default installation has a full complement of Kerberos5. But, /usr/src/kerberos5/README states: This subtree is world-exportable, as it does not contain any cryptographic code. At the time of writing, it did not even contain source code, only

dhclient wedged

2006-01-21 Thread Forrest Aldrich
I reported this problem a few OS versions back... pre-6. I'm on FreeBSD-6-STABLE, and I've found the dhclient once again wedged in a mode that was eating a lot of CPU. The solution is to kill it, and restart. I'm on Comcast's network, so I don't really know if their DHCP server is doing

sendmail_enable=NO

2005-12-31 Thread Forrest Aldrich
Isn't this supposed to tell FreeBSD not to start up the sendmail daemon processes? It doesn't on my system, just confirmed this via a new system build. FYI. FreeBSD-6.0 _F ___ freebsd-stable@freebsd.org mailing list

Re: device em0 not showing up at boot

2005-11-29 Thread Forrest Aldrich
Jack Vogel wrote: On 11/29/05, *Mike Tancsa* [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: At 09:29 AM 29/11/2005, Lowell Gilbert wrote: Forrest Aldrich [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] writes: I have an older PC (Compaq AP200) that I'm running FreeBSD

device em0 not showing up at boot

2005-11-28 Thread Forrest Aldrich
I have an older PC (Compaq AP200) that I'm running FreeBSD-6.0 on. I have an Intel Gigabit interface installed in one of the PCI slots, along with another dual 10/100 Intel in another. The em0 device does not show up at boot time, and therefore the firewall rules fail. However, if I go in

Tarpitting Spam Traffic using PF...

2005-02-19 Thread Forrest Aldrich
I read about the spamd redirect in pf.conf. However, I wonder if it might be useful to set up a redirect to something like this: http://www.fresh.files2.serveftp.net/smtarpit/ I suppose it doesn't make a difference, but I do want to make it extremely painful for any spammers. What are other

PF rule statistics (hits) on individual rules....

2005-01-22 Thread Forrest Aldrich
I'm migrating one of my systems to PF from IPFW. In so doing and planning, I've reviewed the manpages and some online docs. I've become dependent upon ipfw -t to determine hits on various spam rules I've implemented - some of them large lists of /24's. I've not been able to determine that there

SATA on FreeBSD-4.x

2004-05-14 Thread Forrest Aldrich
Is there an issue with SATA drives (Silicon Image controller) on FreeBSD-4.x? I'm able to see only the master drives on 4.10 and 4.9 -- whereas, on 5.x I'm able to see both the master and slave drives. _F ___ [EMAIL PROTECTED] mailing list

problems with groff

2003-09-10 Thread Forrest Aldrich
Why would this be happening, and how can I fix this - the man subsystem hasn't been working because of this for a while. This is FreeBSD-4.9-Prerelease: # gdb man man GNU gdb 4.18 (FreeBSD) This GDB was configured as i386-unknown-freebsd...(no debugging symbols found)... /usr/share/tmac/man:

CVSup Delete failures

2002-12-05 Thread Forrest Aldrich
FYI, over the last few days, I've been seeing this error while doing a CVSUP of the code for both FreeBSD-STABLE (4.7) and Current: Delete src/contrib/gcc/INSTALL Cannot delete /usr/local/src/freebsd/5.0/src/contrib/gcc/INSTALL: Directory not empty If I manually delete that directory, it gets

Kernel compile problems....

2002-10-29 Thread Forrest Aldrich
I installed a system recently from the latest 4.7 ISO images.When compiling a new kernel, the system initially froze and disconnected all users - then reconvened. No log messages (strange). I'm now able to get (with syslog *.*) this info: [ from SYSLOG ] Oct 29 22:15:00 m25

Kernel compile problems.... 2

2002-10-29 Thread Forrest Aldrich
In follow-up to my own post... I've done a CVSUP this evening, and have tried this again. The system will compile to a certain point, then freeze (ie: disconnect me, I'm on ssh). I get this message again: Oct 29 22:15:00 m25 /usr/sbin/cron[11442]: (root) CMD (/usr/libexec/atrun) Oct 29

Support for INTEL high-end server cards

2002-04-01 Thread Forrest Aldrich
Is there support somewhere for the high-end Intel (fxp) server optimized network cards? This one I have has the Intel i960 chip, the model number might be 687231-006. I ask because the lastest FreeBSD 4.5 snapshot installation did not pick up this card, so I used a lower-end 3com. Thanks.

World build failure

2001-01-25 Thread Forrest Aldrich
Make world is failing on /usr/src/games/morse (despite my telling make.conf not to build games). Can someone please fix this. To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-stable" in the body of the message

TTY console

2001-01-19 Thread Forrest Aldrich
I have a Dell PowerEdge server. Using FreeBSD-4.2 (recently built and updated), I can only force the serial console IF I have a keyboard plugged in. It doesn't matter what flags I use -P -D -h or just -h. Is this a bug, or? _F To Unsubscribe: send mail to [EMAIL PROTECTED] with