Does the image on isc.portsnap.freebsd.org have a virus?

2013-07-31 Thread Chris H
Greetings, I know this sounds crazy, and apologies if I am. But I have 2 RELENG_8 servers; 1 amd64, and 1 i386. about 3 wks ago, I migrated from cv(sup) updating, to svn on the amd64 box. After removing cv(sup) related folders, and the ports folder, I used: portsnap fetch After the fetch

Re: Bind in FreeBSD, security advisories

2013-07-31 Thread Shane Ambler
On 31/07/2013 01:31, Daniel Kalchev wrote: But here is an idea: Remove BIND from HEAD overnight and see how many will complain ;-) If nobody complains, don't put it back in. Or change the default to off. If you want bind add WITH_BIND=yes to src.conf It's hard to say FreeBSD is a safe and

Re: Bind in FreeBSD, security advisories

2013-07-31 Thread sthaug
Considering the topic, and how many times it's come up. I'm not sure that's a nything to be proud of. ;) Given not all CVE's are created equal and given the amount of internal self consistancy checks (all of which kill the server if they don't pass (and push the CVSS score to 7.x))

Re: Strange sendmail behaviour after upgrade to 9.1-BETA2

2013-07-31 Thread Pavel Timofeev
As I can see official intruction for upgrading says to do three times of freebsd-update install (between reboots). But I did two because at third time my system says No updates are available to install. Run '/usr/sbin/freebsd-update fetch' first. 2013/7/30 Pavel Timofeev tim...@gmail.com: Sorry,

Problem with zfsloader on 9.2-BETA2

2013-07-31 Thread J David
In order to test ZFS on the upcoming 9.2 release, we upgraded a non-production 8.4 root-on-ZFS fileserver to 9.2-BETA2. The result was a non-bootable system. The first problem was gptzfsboot, but that was our fault… it never got upgraded when we switched to feature flags. So some time with the

Re: Bind in FreeBSD, security advisories

2013-07-31 Thread Dag-Erling Smørgrav
David Demelier demelier.da...@gmail.com writes: For years, a lot of security advisories have been present for bind. I'm just guessing if it's not a good idea to remove bind from base? There are plans to do so. It's not as trivial as people seem to think. DES -- Dag-Erling Smørgrav -

/usr/bin/ld: warning: creating a DT_TEXTREL in a shared object after freebsd-update

2013-07-31 Thread Alex Povolotsky
Hello I've updated (with freebsd-update) an old 7.3 to 9.1-RELEASE and now I cannot build at least one port. ports-mgmt/pkg === Building for pkg-1.1.4_1 sed -e 's,%%PKGVERSION%%,1.1.4,' Doxyfile.in Doxyfile === external (all) === external/sqlite (all) Warning: Object directory not changed

Re: 9.2-BETA2 - Problem with newsyslog

2013-07-31 Thread Henri Hennebert
On 07/29/2013 11:18, Henri Hennebert wrote: Hello, My entry for newsyslog in /etc/crontab is: 0 * * * * rootnewsyslog -t \%Y-\%m-\%d_\%H:\%M And I get: newsyslog: Could not convert time string to time value: No such file or directory I try to use the newsyslog from head

Re: Problem with zfsloader on 9.2-BETA2

2013-07-31 Thread Trond Endrestøl
On Wed, 31 Jul 2013 03:49-0400, J David wrote: In order to test ZFS on the upcoming 9.2 release, we upgraded a non-production 8.4 root-on-ZFS fileserver to 9.2-BETA2. The result was a non-bootable system. The first problem was gptzfsboot, but that was our fault? it never got upgraded when

Re: Strange sendmail behaviour after upgrade to 9.1-BETA2

2013-07-31 Thread Pavel Timofeev
Looks like my sendmail uses only IPv6 to resolve mx server dns name to ip address. 14:59:50.793338 IP reticulum.xxx.ru.19032 hercules.xxx.ru.domain: 53417+ ? xxx.ru. (24) [13/98] 14:59:50.793662 IP hercules.xxx.ru.domain

Re: Bind in FreeBSD, security advisories

2013-07-31 Thread Daniel Kalchev
On 31.07.13 09:38, Shane Ambler wrote: On 31/07/2013 01:31, Daniel Kalchev wrote: But here is an idea: Remove BIND from HEAD overnight and see how many will complain ;-) If nobody complains, don't put it back in. Or change the default to off. If you want bind add WITH_BIND=yes to src.conf

Re: Bind in FreeBSD, security advisories

2013-07-31 Thread Mark Felder
On Wed, Jul 31, 2013, at 6:15, Daniel Kalchev wrote: On 31.07.13 09:38, Shane Ambler wrote: For something that needs to be constantly updated in between system updates then ports is the place to install it from. You don't have to update BIND constantly, especially if you are not

Re: Strange sendmail behaviour after upgrade to 9.1-BETA2

2013-07-31 Thread Pavel Timofeev
I wanted to say that sendmail asks only (IPv6) record of mx server, but not A (IPv4). Any ideas? 2013/7/31 Pavel Timofeev tim...@gmail.com: Looks like my sendmail uses only IPv6 to resolve mx server dns name to ip address. 14:59:50.793338 IP reticulum.xxx.ru.19032

Re: Does the image on isc.portsnap.freebsd.org have a virus?

2013-07-31 Thread Shane Ambler
On 31/07/2013 15:44, Chris H wrote: Greetings, I know this sounds crazy, and apologies if I am. But I have 2 RELENG_8 servers; 1 amd64, and 1 i386. about 3 wks ago, I migrated from cv(sup) updating, to svn on the amd64 box. After removing cv(sup) related folders, and the ports folder, I

Re: Bind in FreeBSD, security advisories

2013-07-31 Thread Erwin Lansing
On Wed, Jul 31, 2013 at 07:22:20AM -0500, Mark Felder wrote: Let's take a moment and consider the state of the internet and DNS attacks. The RRL and RPZ2 patchsets[1] are newer developments that successfully add additional security and features to BIND. It was also recently announced that

Re: Bind in FreeBSD, security advisories

2013-07-31 Thread Mark Felder
On Wed, Jul 31, 2013, at 7:37, Erwin Lansing wrote: 3rd party, and especially those that are still being distributed as experimental, will not be part of the base BIND code. It will only contain a direct import from the vendor sources. I agree, experimental patches have no place in base.

Re: Strange sendmail behaviour after upgrade to 9.1-BETA2

2013-07-31 Thread Matthew Seaman
On 31/07/2013 13:24, Pavel Timofeev wrote: I wanted to say that sendmail asks only (IPv6) record of mx server, but not A (IPv4). Any ideas? ip6addrctl(8) perhaps? Also check /etc/rc.d/ip6addrctl and the variables used by that script in /etc/defaults/rc.conf which you can use to set

Re: Strange sendmail behaviour after upgrade to 9.1-BETA2

2013-07-31 Thread Pavel Timofeev
I've just installed new fresh 9.2-BETA2 amd64 on another machine. Same behaviour - Sendmail asks DNS only for record of mx server. We don't use IPv6 in our company. 2013/7/31 Pavel Timofeev tim...@gmail.com: I wanted to say that sendmail asks only (IPv6) record of mx server, but not A

Re: Bind in FreeBSD, security advisories

2013-07-31 Thread Daniel Kalchev
On 31.07.13 15:22, Mark Felder wrote: On Wed, Jul 31, 2013, at 6:15, Daniel Kalchev wrote: On 31.07.13 09:38, Shane Ambler wrote: For something that needs to be constantly updated in between system updates then ports is the place to install it from. You don't have to update BIND constantly,

Booting FreeBSD with Syslinux

2013-07-31 Thread Daniel O'Connor
Hi, I am trying to make a FreeBSD 9.2 hybrid image (ie ISO USB from the same file) and as part of that I need to use syslinux. Unfortunately I can't get Syslinux's mboot.c32 to run the kernel or loader as suggested at http://www.syslinux.org/wiki/index.php/Mboot.c32 - it reports Invalid

Re: Booting FreeBSD with Syslinux

2013-07-31 Thread Alexander Yerenkow
You could see at mine experience long long time ago: http://trac.pcbsd.org/wiki/UsbFatBoot Maybe it's still relevant :) 2013/7/31 Daniel O'Connor docon...@gsoft.com.au Hi, I am trying to make a FreeBSD 9.2 hybrid image (ie ISO USB from the same file) and as part of that I need to use

Re: Booting FreeBSD with Syslinux

2013-07-31 Thread Rick Miller
On Wed, Jul 31, 2013 at 9:38 AM, Daniel O'Connor docon...@gsoft.com.au wrote: Hi, I am trying to make a FreeBSD 9.2 hybrid image (ie ISO USB from the same file) and as part of that I need to use syslinux. Unfortunately I can't get Syslinux's mboot.c32 to run the kernel or loader as

Re: Does the image on isc.portsnap.freebsd.org have a virus?

2013-07-31 Thread Chris H
Greetings, and thank you for your response. On 31/07/2013 15:44, Chris H wrote: Greetings, I know this sounds crazy, and apologies if I am. But I have 2 RELENG_8 servers; 1 amd64, and 1 i386. about 3 wks ago, I migrated from cv(sup) updating, to svn on the amd64 box. After removing

Re: Bind in FreeBSD, security advisories

2013-07-31 Thread David Magda
On Wed, July 31, 2013 02:55, sth...@nethelp.no wrote: I'm also more than a little surprised about people dragging out sendmail as a shining example of *good* (bug-free?) software. Does nobody remember any history here? It wasn't *that* many years ago that we seemed to have

Re: Does the image on isc.portsnap.freebsd.org have a virus?

2013-07-31 Thread Shane Ambler
On 01/08/2013 00:28, Chris H wrote: In the first instance, /usr/ports was removed (before initiating portsnap). But before the second attempt, I performed a mkdir /usr/ports. But in the end, the results were the same; portsnap fetch fetched the image, verified the image, extracted to

Re: Problem with zfsloader on 9.2-BETA2

2013-07-31 Thread J David
On Wed, Jul 31, 2013 at 5:20 AM, Trond Endrestøl trond.endres...@fagskolen.gjovik.no wrote: I'm curious as to why you use da?p1 as the freebsd-zfs partitions. Those are whole-disk partitions. Where does the freebsd-boot partition reside? da?p2? Only the log and cache disks have boot and swap

Re: Booting FreeBSD with Syslinux

2013-07-31 Thread Teske, Devin
On Jul 31, 2013, at 6:38 AM, Daniel O'Connor wrote: Hi, I am trying to make a FreeBSD 9.2 hybrid image (ie ISO USB from the same file) and as part of that I need to use syslinux. Unfortunately I can't get Syslinux's mboot.c32 to run the kernel or loader as suggested at

Re: Strange sendmail behaviour after upgrade to 9.1-BETA2

2013-07-31 Thread J David
On Wed, Jul 31, 2013 at 8:54 AM, Pavel Timofeev tim...@gmail.com wrote: I've just installed new fresh 9.2-BETA2 amd64 on another machine. Same behavior - Sendmail asks DNS only for record of mx server. We also noticed one of our machines suddenly started using IPv6 to send outbound email

Re: Does the image on isc.portsnap.freebsd.org have a virus?

2013-07-31 Thread Chris H
On 01/08/2013 00:28, Chris H wrote: In the first instance, /usr/ports was removed (before initiating portsnap). But before the second attempt, I performed a mkdir /usr/ports. But in the end, the results were the same; portsnap fetch fetched the image, verified the image, extracted to

Re: Booting FreeBSD with Syslinux

2013-07-31 Thread Daniel O'Connor
On 01/08/2013, at 1:45, Teske, Devin devin.te...@fisglobal.com wrote: Has anyone had any success with this? Absolutely. You can download and dissect the following to show you how it's done... http://druidbsd.sourceforge.net/download.shtml#FreeBSD_Druid It uses syslinux, as you can

RE: Booting FreeBSD with Syslinux

2013-07-31 Thread dteske
-Original Message- From: owner-freebsd-sta...@freebsd.org [mailto:owner-freebsd- sta...@freebsd.org] On Behalf Of Daniel O'Connor Sent: Wednesday, July 31, 2013 4:32 PM To: Devin Teske Cc: freebsd-stable stable Subject: Re: Booting FreeBSD with Syslinux On 01/08/2013, at

Re: Booting FreeBSD with Syslinux

2013-07-31 Thread Daniel O'Connor
On 01/08/2013, at 9:04, dte...@freebsd.org wrote: Have you tried mboot? No I have not. Do you know anyone that has got it to work? Supposedly someone got it to work because there is an entry in the syslinux wiki http://www.syslinux.org/wiki/index.php/Mboot.c32#FreeBSD_example That was

Re: Booting FreeBSD with Syslinux

2013-07-31 Thread Adam Vande More
On Wed, Jul 31, 2013 at 6:43 PM, Daniel O'Connor docon...@gsoft.com.auwrote: That was for 7.x though, maybe the kernel has changed a bit. It doesn't say that at all. Nor does it say the exact release(even major branch isn't mentioned) which was confirmed to work, when or if it was tried, the

Re: Booting FreeBSD with Syslinux

2013-07-31 Thread Daniel O'Connor
On 01/08/2013, at 9:41, Adam Vande More amvandem...@gmail.com wrote: On Wed, Jul 31, 2013 at 6:43 PM, Daniel O'Connor docon...@gsoft.com.au wrote: That was for 7.x though, maybe the kernel has changed a bit. It doesn't say that at all. Nor does it say the exact release(even major

Re: Booting FreeBSD with Syslinux

2013-07-31 Thread Warren Block
On Thu, 1 Aug 2013, Daniel O'Connor wrote: On 01/08/2013, at 9:04, dte...@freebsd.org wrote: Have you tried mboot? No I have not. Do you know anyone that has got it to work? Supposedly someone got it to work because there is an entry in the syslinux wiki

Re: Booting FreeBSD with Syslinux

2013-07-31 Thread Daniel O'Connor
On 01/08/2013, at 12:15, Warren Block wbl...@wonkity.com wrote: Supposedly someone got it to work because there is an entry in the syslinux wiki http://www.syslinux.org/wiki/index.php/Mboot.c32#FreeBSD_example I'm following the threads on both lists, and that example looks more like a

Re: Problem with zfsloader on 9.2-BETA2

2013-07-31 Thread Shane Ambler
On 01/08/2013 01:42, J David wrote: =34 1953525101 da2 GPT (931G) 34 222 - free - (111k) 256 19535084951 freebsd-zfs (931G) 1953508751 163849 !6a945a3b-1dd2-11b2-99a6-080020736631 (8.0M) da3 - da7 are identical to da2. So

Re: Problem with zfsloader on 9.2-BETA2

2013-07-31 Thread J David
On Wed, Jul 31, 2013 at 11:36 PM, Shane Ambler free...@shaneware.biz wrote: I think that 8M partition looks weird. It looks like a leftover from a previous config? We leave some space at the end of drives in case we need to change drive vendors. Sometimes vendor A's drives are a few sectors