Re: Moving to freebsd firewall for a small DataCenter network

2008-09-23 Thread Nejc Škoberne
I think monowall is what you are looking for. Or his more advanced brother - pfSense. Bye, Nejc ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL

Re: Proxying broadcasts? SOLVED

2008-08-28 Thread Nejc Škoberne
Hey, The simple answer is no: if you want subnet-local broadcast traffic to be received, then your DB servers and your clients need to be on the same subnet. Routers are designed and required to not propagate broadcast traffic, although you could switch to doing bridging rather than

Proxying broadcasts?

2008-08-27 Thread Nejc Škoberne
Hello, I have a central FreeBSD 7.0 router running pf with SERVERS and USERS1 and USERS2 networks attached to it. I also have some Sybase SQL servers on SERVERS network, which use broadcasts to announce themselves to the network. Before, when there were no separate segments, everything worked

Re: no toe capability on...

2008-08-02 Thread Nejc Škoberne
Hey, no toe capability on 0xc2e66400 Looks like this is was fixed 7/31/2008: http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/netinet/tcp_offload.c.diff?r1=texttr1=1.4.2.1r2=texttr2=1.4.2.2 That was fast! Bye, Nejc ___ freebsd-questions@freebsd.org

Re: Building a FreeBSD based mail server

2008-08-01 Thread Nejc Škoberne
Hello, mailserver. However, never having done this before myself, I was wondering if anyone here had any useful comments about this guide, particularly if you think it's missing any key points that will leave me cursing at my monitor late one night. I'm currently planning on using FreeBSD

pf randomly blocks specific packets?

2008-07-29 Thread Nejc Škoberne
Hello, I have a FreeBSD 7.0 system with jails (and services in them). In one of the jails there is an Apache server, which also runs on the host system (and forwards traffic using mod_proxy to the jailed Apache). Everything works as expected, I only have problems with pf which seems to block

FreeBSD and ECC memory?

2008-07-25 Thread Nejc Škoberne
Hello, I am buying hardware for a FreeBSD server and me and my friend argue about whether or not to by ECC RAM for the server. It is a HP ProLiant ML110 G4 machine and currently it has 2 x 512 HP DDR2 ECC memory. My friend says buying ECC memory is not wise, because we would not profit from it

Re: mounting ext2fs partitions on FBSD7 ( third time a charm?)

2008-07-05 Thread Nejc Škoberne
Hey, Have you, by any chance, tried and suceded at mounting ext2fs on FBSD7? If you did, at least I'd know that it _is_ possible :s It is possible, although I haven't used this on FreeBSD 7.0 yet (only on 5.x and 6.x releases). I'd also try this: mkdir /mnttest mount -t ext2fs /dev/ad0s8

Re: mounting ext2fs partitions on FBSD7 ( third time a charm?)

2008-07-05 Thread Nejc Škoberne
Hey, ls -la / | grep mnttest Can you paste output of this command? sysid 5 (0x05),(Extended DOS) start 102398310, size 106446690 (51975 Meg), flag 0 beg: cyl 1023/ head 0/ sector 1; end: cyl 1023/ head 254/ sector 63 So the partition you're trying to mount is under an

Re: geom_raid5

2008-07-04 Thread Nejc Škoberne
where to get the source? http://perforce.freebsd.org/depotTreeBrowser.cgi?FSPC=//depot/user/riddick Looks like the site where I got it from (http://home.tiscali.de/cmdr_faako/geom_raid5-eff.tbz) doesn't exist anymore. Bye, Nejc ___

re0: PHY write failed - RTL8110SB problem

2008-07-02 Thread Nejc Škoberne
Hello, my network card is failing - dmesg is full of this: re0: PHY write failed re0: reset never completed! re0: reset never completed! re0: PHY write failed re0: reset never completed! re0: PHY write failed re0: link state changed to DOWN re0: link state changed to DOWN re0: reset never

Re: Strange Out of disk space

2008-06-23 Thread Nejc Škoberne
Hey, My guess is that something has mmap-ed a HUGE chunk of disk space. If I reboot the space is freed. Much more likely is that some program has deleted a large file, while still holding it open. Usual suspect is some kind of log file, or temporary file. I also had a similar problem,

Re: FreeBSD fdisk how to?

2008-06-21 Thread Nejc Škoberne
Hi, Well, fdisk(8) is somewhat cumbersome to use. Personally I tend to invoke sysinstall(8) to create new slices (can be done after install too.) Much easier to use. OT, but: does sysinstall's fdisk also support gmirror and gstripe devices? Or do I need to use fdisk to make slices there?

Small/medium business server platform

2008-06-16 Thread Nejc Škoberne
Hello, I am a final year student of Faculty of computer and information science from Slovenia. I've also been a Linux/BSD system/network administrator for quite some years now. I am starting to write my thesis and I am looking for good ideas. I am mostly interested in small/medium business

Re: Openvpn on FreeBSD 7

2008-06-11 Thread Nejc Škoberne
Hey, Set it with sysctl inet.inet.ip.forwarding=1 or Alternatively set it by adding this to /etc/sysctl.conf net.inet.ip.forwarding=1 I guess more proper way of doing this is adding: gateway_enable=YES into /etc/rc.conf? I don't have any sysctl custom configuration in my sysctl.conf and

Re: Openvpn on FreeBSD 7

2008-06-10 Thread Nejc Škoberne
Hey, I was using it because I could then assign my laptop the same IP easily through my router (a separate device with DHCP) and also have hostnames pushed through DHCP. But I imagine in my case I could do the same thing with a tunnel. Actually I don't think you can do the same thing with a

Re: FreeBSD 7 on Windows 2008 (Hyper-V)

2008-06-09 Thread Nejc Škoberne
Hello, I am also (very) interested in running FreeBSD under HyperV since HyperV will liberate itself from Windows Server soon after the final release (it will not depend on an preliminary Windows Server installation but will be standalone and practically free of charge, which makes it (for me)

Re: Openvpn on FreeBSD 7

2008-06-09 Thread Nejc Škoberne
Hey, I recently upgraded a machine from FreeBSD 6.3 to 7.0. Everything is working fine except for the OpenVPN server. I had it set up with a bridge configuration, but now even with a basic tunnel I can't get successful ping across the VPN. I can make a connection from both Linux and OS X but

HylaFAX in FreeBSD jail?

2008-06-05 Thread Nejc Škoberne
Hello, anyone tried running HylaFAX in a FreeBSD jail? Does it work? Thanks, Nejc ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: RAID 0+1

2008-05-23 Thread Nejc Škoberne
Hey, don't use gmirror and atacontrol at the same time. Use one or the other. I don't. As I said: Then I would merge the second slice of all 4 drives into a 0+1 array (first gstriping and then gmirroring them). I somehow succeeded this, but I also get a WARNING when booting the system:

RAID 0+1

2008-05-22 Thread Nejc Škoberne
Hello, I have FreeBSD 7.0 and 4 250GB SATA disks and I would like to make one big 500GB 0+1 RAID array. My hardware is HP ProLiant ML110G5. First I tried creating ATA RAID arrays with BIOS tools, but FreeBSD wouldn't recognize the arrays. Than I decided to create the RAID-0 arrays with

Re: VLAN Trunking with Freebsd

2008-04-27 Thread Nejc Škoberne
Hey, I am sure this topic has been discussed before, however, I have been coming across unanswered inquiries within the last two months about possibly using the trunking aspect of 802.1q standard network routing, with only freebsd. I have attempted to create mulitple vlan interfaces and

Re: FreeBSD 7.0 jail and Samba 3

2008-04-24 Thread Nejc Škoberne
Hey, What does your ifconfig line read from /etc/rc.conf (the alias line) ifconfig_rl0=192.168.15.198 netmask 255.255.255.0 ifconfig_rl0_alias0=192.168.15.201 netmask 255.255.255.0 defaultrouter=192.168.15.1 jail_enable=YES jail_sysvipc_allow=YES jail_socket_unixiproute_only=NO

Re: FreeBSD 7.0 jail and Samba 3

2008-04-24 Thread Nejc Škoberne
Hey, ifconfig_rl0_alias0=192.168.15.201 netmask 255.255.255.0 the mask of an alias ipadres needs to be 32 bits. I do not now if this solves your problem but it needs to be 32 bits. ifconfig_rl0_alias0=192.168.15.201 netmask 255.255.255.255 I tried with 24 bits - it doesn't work one way or

Re: FreeBSD 7.0 jail and Samba 3

2008-04-23 Thread Nejc Škoberne
Hey, OK.. if it is running inside your jail it doesnt respond to WINS broadcasts (request for NETBIOS Names.. oi, who is Machine on this subnet???), if it is not running in your jail, it is. I wouldn't say WINS broadcasts but NetBIOS broadcasts, yes. Machine is jailed Samba 3 server - I want

Re: FreeBSD 7.0 jail and Samba 3

2008-04-23 Thread Nejc Škoberne
Hi, This is nota n issue with samba it is a name resolve issue. Then why is Samba replying to NetBIOS broadcasts very nicely when I put it outside jail (with the same configuration)? As far as I understand Samba also provides resolving - NetBIOS resolving via its nmbd. If you add in

Re: FreeBSD 7.0 jail and Samba 3

2008-04-23 Thread Nejc Škoberne
Hi, I'm not sending this message to the list as I've not been following the discussion; I just skimmed thru it. I hope you don't mind that I sent it to the list too. I would check too things, a) a firewall (sorry if this has been talked about, as I said I didn't read it all) or b) enable

Re: FreeBSD 7.0 jail and Samba 3

2008-04-22 Thread Nejc Škoberne
Hey Johan, I think you will need to remove 127.0.0.1 Just use 192.168.1.2/24 There is no 127.0.0.1 on a jailed system I have done so - I still can't do smbclient //machine from another box to the jailed Samba. If I put the Samba out of the jail (same version, same config) it works as it

Re: FreeBSD 7.0 jail and Samba 3

2008-04-22 Thread Nejc Škoberne
Hey Johan, Well i use ezjail for my jails, i leave everything else standard, but have the same sysctl value's This is my smb.conf (it is a fileserver as member of a domain for my domain). [global] ... wins server = hz2-serv.mydomain.local This is why it works for you. You use external

Re: FreeBSD 7.0 jail and Samba 3

2008-04-17 Thread Nejc Škoberne
Hey again, I am trying to get latest Samba running under FreeBSD 7.0 jail environment. I happen to have problems with visibility of the Samba server on the network - I cannot connect to it using its NetBIOS name. To be able to run nmbd, I have to use the interfaces parameter in smb.conf like

FreeBSD 7.0 jail and Samba 3

2008-04-03 Thread Nejc Škoberne
Hello, I am trying to get latest Samba running under FreeBSD 7.0 jail environment. I happen to have problems with visibility of the Samba server on the network - I cannot connect to it using its NetBIOS name. To be able to run nmbd, I have to use the interfaces parameter in smb.conf like

Re: restore in Fixit mode

2008-03-27 Thread Nejc Škoberne
Hi Douglas, That's the problem all right (got bit years ago by it). It's been a while but if you've got a /tmp partition, mount it over the memory file system /tmp so restore can lay off what it needs there. Or make a memory file system backed by swap. Thanks for this one, it solved my

Re: RAID on HP ML110 G5

2008-03-25 Thread Nejc Škoberne
Hey Tom, I would like to run FreeBSD 7 on a HP ML110 G5. I understand from past posts to this list that the ML110 series is FreeBSD friendly, but what about RAID 1 using the on-board SATA controller? Will this work and how do you set this up? I have just configured a ML110G5 with FreeBSD 7

Re: my brother is making me learn FreeBSD...

2008-03-20 Thread Nejc Škoberne
everything you run on windows can be run on Freebsd and more. Huh? AFAIK FreeBSD can not act as a domain controller for an Microsoft AD. And this is something you would need in a company full of Windows boxen. And don't tell me I can throw away Windows and install FreeBSD on hundreds of clients

Replacing Windows with FreeBSD (was: my brother is making me learn FreeBSD...)

2008-03-20 Thread Nejc Škoberne
Hey Patrick, AD is nothing more than a big database accessible over LDAP. You connect to the LDAP database, and when you are authenticated you get a kerberos token. Clients use SRV records to check for AD services. SRV Records are supported by BIND. It is possible to run AD and have your

Re: Linux virtualized on FreeBSD

2008-02-13 Thread Nejc Škoberne
Hey, turn on linux emulation, use jail, just start directory with all linux progs and libs. well, it makes sense for me because I need to run Sybase ASA server, which only runs on GNU/Linux. However, are you sure that this would work? I think Sybase still needs genuine Linux kernel to run.

Linux virtualized on FreeBSD

2008-02-12 Thread Nejc Škoberne
Hi, I guess this is not possible yet? To run Linux virtualized on FreeBSD? I can see, that Xen only runs as guest on FreeBSD at this time. Thanks, Nejc ___ freebsd-questions@freebsd.org mailing list

nCipher HSM support

2007-11-18 Thread Nejc Škoberne
Hello, I couldn't find any info on nCipher HSM support under FreeBSD. So, (how?) does FreeBSD support nCipher HSM cards? Thanks, Nejc ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To

GEOM_MIRROR: Device gm0: provider ad0 disconnected

2007-07-27 Thread Nejc Škoberne
Hello, I have a FreeBSD 5.3 system with two IDE disks. This is the dmesg at boot time: ad0: 117246MB Maxtor 6B120P0/BAH41G10 [238216/16/63] at ata0-master UDMA100 ad2: 117246MB Maxtor 6Y120L0/YAR41BW0 [238216/16/63] at ata1-master UDMA100 GEOM_MIRROR: Device gm0 created (id=2190829866).

Agere ET1310B (ST Lab gigabit LAN card)

2007-07-25 Thread Nejc Škoberne
Hello, I just bought this ethernet card for my ProLiant ML110G4 machine but FreeBSD doesn't recognize it. After some Googling I guess it is not supported at all. Am I right? pciconf -v -l says this: [EMAIL PROTECTED]:0:0: class=0x02 card=0xed0011c1 chip=0xed0011c1 rev=0x02 hdr=0x00

make package-recursive

2007-07-10 Thread Nejc Škoberne
Hello, I would like to create a custom set of packages, so that they will be installable to my other FreeBSD boxen. As I understand, I have to use 'make package-recursive', but I have some problems with it: 1. Is there a way to tell 'make package-recursive' not to _install_ package, but

BIND to listen on all interfaces?

2007-07-03 Thread Nejc Škoberne
Hello, I am running BIND (from base system) on my FreeBSD 5.3 machine. The box is connected to outer world via ADSL connection (tun0 device). If the named is started when the machine is connected to the internet, then everything is OK, I get this by saying netstat -n -a: udp4 0 0

NetMos NM9805 problems

2007-06-11 Thread Nejc Škoberne
Hello, I have FreeBSD 6.2 system with MosChip NM9805 card (additional parallel port): [EMAIL PROTECTED]:4:0: class=0x078000 card=0x00101000 chip=0x98059710 rev=0x01 hdr=0x00 vendor = 'MosChip Semiconductors (Was: Netmos Technology)' device = 'Nm9805 Parallel Port Adapter'

UTF-8 in console

2007-04-04 Thread Nejc Škoberne
Hello, I am have many FreeBSD 5.x and 6.x servers installed and I have this in my /etc/profile: LANG=sl_SI.UTF-8; export LANG MM_CHARSET=UTF-8; export MM_CHARSET because I am using UTF-8 encoding with PuTTY. It works with most applications but not with dialog. For example, I get this when

Re: FreeBSD on IBM Blade HS21

2007-03-30 Thread Nejc Škoberne
Hello, Ye, by installing the system with the timeout (i.e. just wait it out), then building a kernel without umass at the first opportunity. Still no luck. Today, I tried waiting till the timeout expired, but what happened was, that in the middle of probing, the machine got rebooted. It was

Re: FreeBSD on IBM Blade HS21

2007-03-29 Thread Nejc Škoberne
Hello, Try waiting about 30 minutes, there was a nasty timeout problem here when I tried it - you might have the same. Google for my posts on freebsd-stable mailing list. Okay, it really seems it's the nasty timeout I am facing (I booted into the verbose mode and it's the controller which

FreeBSD on IBM Blade HS21

2007-03-27 Thread Nejc Škoberne
Hello, today I tried to migrate a FreeBSD 6.1 installation from an ordinary PC machine to an IBM Blade HS21 server. The server is a brand new machine with two Dual Core Xeon 5130 processors, two 72GB SAS drives. When I try to boot FreeBSD (either from USB disk with the installation I am trying

Re: FreeBSD on IDE Flash disk drive

2007-03-12 Thread Nejc Škoberne
Hi Paul, I am booting from a 512MB CF card, and run /var and /tmp from a RAM drive. Upon startup, the CF card /var and /tmp dir. are copied into the ram drives, the rest is Read Only. When it shuts down (not very often), the ram drive contents are copied back to the CF card. You could backup

FreeBSD on IDE Flash disk drive

2007-03-09 Thread Nejc Škoberne
Hello, I plan to install a FreeBSD 6.2 router/gateway/DHCP server on a EPIA box with 1GB Transcend IDE Flash drive. Since Transcend says that this device is capable of 10,000 insertion/removal cycles I assume that I must minimize the number of writes to the drive. It is okay with me if I have to

Re: FreeBSD on IDE Flash disk drive

2007-03-09 Thread Nejc Škoberne
Hey, this device is capable of 10,000 insertion/removal cycles I assume Sorry for replying my own post, but now I fould out that this actually means how many times can I insert/remove the module into/from the motherboard. Actually the number I am interested in is much higher: 2,000,000

Re: FreeBSD on IDE Flash disk drive

2007-03-09 Thread Nejc Škoberne
Hello Derek, You will want the swap to some other device such a a regular hard drive. A flash drive can get worn out cells and fail. Also when just reading the flash drive? I would like to write to it only when it is absolutely necessary (configuration change). I think 2 million

Re: FreeBSD on IDE Flash disk drive

2007-03-09 Thread Nejc Škoberne
Hi, m0n0wall gets around this by running out of RAM after booting from flash (or CD, or hard disk): Yes, I know both m0n0wall and pfSense, but I prefer a custom FreeBSD installation since I have developed some custom scripts which I would like to use. This is what I am trying to do now -

Colored output of make search in /usr/ports

2007-02-27 Thread Nejc Škoberne
Hello, I just realized that having a colored output of make search command issued in /usr/ports would be very helpful. So that different fields would be colored differently and thus easier to read. What do you think? Bye, Nejc smime.p7s Description: S/MIME Cryptographic Signature

Device gm0 destroyed?

2007-02-15 Thread Nejc Škoberne
Hello, I have a FreeBSD 5.3 system with ATA disk drives. I have created a mirror using these commands: # gmirror label -v -b round-robin gm0 /dev/ad0 # modified /etc/fstab # shutdown -r now # gmirror insert gm0 /dev/ad2 After a year, one of the disk failed. When it failed, the kernel crashed

em(1) 6.2.9 driver on FreeBSD 5.5?

2007-02-08 Thread Nejc Škoberne
Hello, I have a HP ProLiant server with Intel PCI express gigabit ethernet card. Relevant output of pciconf -v -l: [EMAIL PROTECTED]:0:0: class=0x02 card=0x10838086 chip=0x10b98086 rev=0x06 hdr=0x00 vendor = 'Intel Corporation' class= network subclass = ethernet I have

Re: Why is sysinstall considered end-of-life?

2007-01-11 Thread Nejc Škoberne
Hey, Please leave that to the desktop oriented BSD distributions. I wonder how many server admins would like to see an X based installer. Not me. Bye, Nejc smime.p7s Description: S/MIME Cryptographic Signature

Simple DoS

2007-01-10 Thread Nejc Škoberne
Hello, yesterday one of our clients did something interesting (stupid): they connected both ends of an UTP cable to the same switch, to which our FreeBSD server was also connected. The server was immediately completely unresponsive from yesterday evening until this morning, when our tech guy