professional to set it up for you.
-or-
2) Contract with a knowledgable operator to host your zones on *their*
servers.
or
3) Find a fellow student locally who has figured it out and is willing
to look over your files with you until you get it.
--Jon Radel
j...@radel.com
in-addr.arpa.
Judging from the complaint about RR type 'Serial' you've still got
uncommented-out garbage floating around.
Fix all that and it'll get better. Better yet, compare what you've got
against what's in the documentation and think a bit about what it *means*.
The question, of course, is how did you manage to completely break this
since the last go around, where I believe you had the NS records working?
--Jon Radel
j...@radel.com
Serial, Refresh, Retry, Expire, Neg. cache TTL
extraneous garbage
Etc. You're pretty close and it should work fine after you clean up
your syntax a bit.
--Jon Radel
j...@radel.com
speed to that of one interface. The transmit algorithm
attempts to use as much information as it can to distinguish different
traffic flows and balance across the available interfaces."
Has use of Gig ethernet been considered?
--
--Jon Radel
j...@radel.com
nding test data between a single source
and single destination address pair are you?
--
--Jon Radel
j...@radel.com
self, sent us all just a few minutes ago.
--
--Jon Radel
j...@radel.com
as to what's in pf.conf, I could offer only the
vaguest guesses based in part on my judged competence of the author of
your pf.conf. Since your pf.conf appears to have possibly destroyed
your e-mail infrastructure, the preliminary assessment is a bit shaky.
--
--Jon Radel
j...@radel.com
P speakers
that you expect to get e-mail from on a regular basis, even if you do
throttling of SMTP connections in general. Much less messy....
--
--Jon Radel
j...@radel.com
!
BTW, pfctl is the program for controlling the firewall. The actual
firewall is generally referred to as pf.
So if you just turn PF off for a bit, does e-mail suddenly flow?
--
--Jon Radel
j...@radel.com
ion (look to the network stuff) and the e-mail server giving you
an error response rejecting your attempt to transfer mail or just
quietly loosing the mail (look to the e-mail servers).
--
--Jon Radel
j...@radel.com
reful out there.
--Jon Radel
j...@radel.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
g said that I'm ready for somebody to remind me of some
obscure attack that uses ICMP for more than information gathering. :-)
--Jon Radel
j...@radel.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/fr
the file from
scratch...
What am I missing here?
Have you tried with all firewalling on the machine turned off?
[My apologies if this has been covered earlier in the thread and I
missed it.]
--Jon Radel
j...@radel.com
___
freebsd-questi
" and pay cash every time you surf the web.
--Jon Radel
j...@radel.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
On 9/16/11 1:37 PM, David Demelier wrote:
For me, I have tested a lot of client mails and I was always able to
write text under the last message. And even microsoft outlook.
Though your current client does appear to keep you from trimming.
--
--Jon Radel
j...@radel.com
g and what you think the results mean.
To recap: Cut and paste what's actually happening, not your summary of same.
--
--Jon Radel
j...@radel.com
sh to tell
you, which they completely loose track of by they time they send you a
nice sanitized statement way up top..... ;-)
--Jon Radel
j...@radel.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freeb
ny case should probably be to do some packet sniffing to
confirm that packets from the outside world to the new address actually
get to you in the first place. Or have you confirmed this from DNS logs
or something else?
--Jon Radel
j...@radel.com
_
On 6/21/11 6:41 AM, Damien Fleuriot wrote:
On 6/21/11 2:32 AM, Jerome Herman wrote:
On 21/06/2011 00:13, Jon Radel wrote:
So depending on the client route, packets from a given IP address can
land on either interface. Actually two clients nated behind the same
public address might end up
network.
I would suspect that he has stateful firewalls and/or anti-spoofing
rules upstream from him that keep him from replying to everything out a
single interface. If it weren't for that, I suspect we wouldn't be
having this discussion.
--Jon Radel
j...@radel.com
__
g:
Yes, if you've got a single network and are renumbering it. As I
understand it, the OP has 2 networks, which is an entirely different
matter.
--Jon Radel
j...@radel.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mail
comes in on NIC A, add an entry to the
state table indicating that any reply packets should physically go out
NIC A and should be passed to the next hop at adress $gw_a.
WARNING: I use PF primarily on OpenBSD so sometimes get caught out on
the subtle differences to the FreeBSD ve
duplicate no less.
Next time please:
1) tell us what you actually mean by "will not reach"
2) keep in mind that some mailing lists greylist incoming mail
In other words, be specific and patient.
--Jon Radel
j...@radel.com
___
freebsd
ying for patents, registering copyrights, etc., etc., etc. work vary
from country to country, sometimes rather wildly.
--Jon Radel
j...@radel.com
Adding terribly to the noise, once and only once
___
freebsd-questions@freebsd.org mailing list
http
r and said, "Wait,
we've been assuming the switch works, what if it isn't."
BTW, Gary, Linksys=Cisco is pretty much just a marketing thing and not a
technology thing.
--Jon Radel
___
freebsd-questions@freebsd.org mailing list
il thinks the e-mail came
from and where it thinks it sent it.
Or you could start by telling us HOW you detected this problem.
--Jon Radel
j...@radel.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freeb
ting confused as to what it meant for Linux
to be "free?"
BTW, I believe this discussion belongs over in the discussion list, as
it has nothing to do with FreeBSD, so I will sin no more after this.
--Jon Radel
j...@radel.com
___
freebsd-questio
etimes the shell
simply refuses to do it.
This no doubt the wrong place for simple questions like these so someone PLEASE
tell me where better to go. Thank you.
Remember that for the really basic stuff, Unix is Unix is Linux, so any
tutorial you find with a google search or two would a
s email, the first time it got caught by
SpamAssassin. Maybe because a link in my signature.
We got both on the list.
--Jon Radel
j...@radel.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
T
iguration choice, a
user that screws up big time, or a "back door" to the data, than a
successful "technical" attack against TSL or SSH.
--Jon Radel
j...@radel.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org
g:8080/
grab a torrent file using HTTP and use a BitTorrent client to get what
you need. Unless, of course, your local firewall/network/ISP/etc blocks
BitTorrent also.
--Jon Radel
j...@radel.com
___
freebsd-questions@freebsd.org mailing list
http://li
ion. They
will also provide all servers and allow use of their dashboard for
maintaining records as a different option.
Don't top-post in this neighborhood, please.
--
--Jon Radel
j...@radel.com
ave happy, productive lives doing something useful.
But, no, you had to move up the heat death of the universe by 3 seconds.
--
--Jon Radel
j...@radel.com
com.
41 PTR virtcent19.summitnjhome.com.
--
--Jon Radel
j...@radel.com
reverse zone; give or take how you connect to the rest of the DNS.
What messages about zones loading did you get when you restarted bind?
Where there any crabby comments in the log file about not loading
master/summitnjhome-reverse.db due to error(s)? Was that file mentioned
at all?
--Jon Radel
. And
why did you change
> zone "1.168.192.in-addr.arpa" { type master; file
> >> "/etc/named/master/summitnjhome-reverse.db"
> >> };
>
to
zone "192.in-addr.arpa" { type master; file
"master/summitjnhome-reverse.db"; };
when your PTR lines only give the last octet? Where do you expect the
"168.1" to come from?
--Jon Radel
j...@radel.com
ongly suspect you could
negotiate an exception to that
--
--Jon Radel
j...@radel.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-question
arlgates.net/nanae/rulesofspam.shtmld>
I would, except all I keep getting are:
404 - Not Found
error messages.
Remove the spurious "d" from the end of the URL.
--
--Jon Radel
j...@radel.com
___
freebsd-questions@freebsd.org mailing list
h
ying to start both of them. Do you have named files in both
/etc/rc.d and /usr/local/etc/rc.d?
--
--Jon Radel
j...@radel.com
specific question which I
can't discern.
--
--Jon Radel
j...@radel.com
uch as for off-site backup,
and you trust the physical security for the computer a lot more than you
trust the courier and/or storage site
Of course, I would agree that that's probably not what the OP has in
mind. :-)
--
--Jon Radel
j...@radel.com
, but also send it to another
command for processing.
Think T, not Y, and then type
man tee
which I suspect does exactly what you want.
--
--Jon Radel
j...@radel.com
the FreeBSD mailing list: lie. From: address that of somebody you
discussed that topic with on the mailing list: lie. Date:: lie. All
lies with one goal, to get you to click through on a URL that is *not*
(another lie, get it?) in your self-interest to visit.
--
--Jon Radel
j...@radel.com
ported by DNSCog appear to be bogus. They've got
some bugs related to cases where a nameserver has a name in the domain
in question. (And also some bugs related to nameservers which are
reachable by both ipv4 and ipv6, but that doesn't apply to you.)
--
--Jon Radel
j...@radel.com
= 3139940352 (2994 MB)
is a stick bad perhaps?
Start by reading
http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/faq/compatibility-memory.html
If that doesn't cover it, come back here and include a little
information about the version of FreeBSD and the hardware you're using.
--
--J
;t think
things are completely broken. Actually they're less broken than Gary's
DNS frequently is; it gets discussed on a regular basis for a reason.
So is the last octet of ns1.thought.org's address 209 or 210? ;-)
--
--Jon Radel
j...@radel.com
Consistency is the hobgoblin of little minds.
d the id_rsa file lives on your laptop, all nicely secured
with a passphrase in case somebody steals your laptop.
--Jon Radel
j...@radel.com
ufficient information to write a driver is available to any
FreeBSD programmer with permission to use it to write an open source driver.
--
--Jon Radel
j...@radel.com
oing visibility that
others have reported. Basically, you don't exist a third of the time.
You need to make sure that all the nameservers you list with your
registrar are actually admitting to your existence and are getting
up-to-date data. I recall having this conversation with you be
I find that slightly
easier to keep track of.
There are many ways to skin this cat....
--
--Jon Radel
j...@radel.com
or. Recall from the OP's
description: "saying relaying was denied in 17 separate tests."
The above also can be an issue if you do the test from an IP address
that the SMTP server has been configured to treat as "trusted."
--Jon Radel
j...@radel.com
?
Because Daylight Saving Time will be over by 1/3/2011? Does it still
happen if you use a
statically entered time stamp that's during Daylight Saving?
--
--Jon Radel
j...@radel.com
tting blocked part of a
connection? Are you sure the blocked packets are actually a legitimate
first packet, with the appropriate flags set, or is the "flags S/SA"
portion of your rule not matching?
--
--Jon Radel
j...@radel.com
nly
change in the system I can think of is that I replaced pf with ipfw.
I doubt that has anything to do with it.
Unless the change blocked access to DNS and reverse DNS was being used
to look up the system name.
--
--Jon Radel
j...@radel.com
ot/.ssh/id_rsa.pub have a passphrase on it?
--
--Jon Radel
j...@radel.com
OS X 10.4.11.
Upgrade to Mac OS 10.5.8 if your hardware supports it. It's still
getting more attention from Apple.
--
--Jon Radel
j...@radel.com
or
somebody to please write him a more detailed howto for booting Debian on
a device. Especially since he put no effort into explaining what he'd
tried and what had gone wrong. You know, the usual stuff to show you're
not joking.asking in the right forum, being specific, etc.,
douche fag fucktard ignoramus dumbo dimwit dope dodo
blockhead doofus dumbbell dunderhead tool nitwit dullard foolish fat
annoying
Which must be why the X for Dummies series of books sells so well in the
U.S., eh?
--Jon Radel
___
freebsd-questions
eling in your stomach when you realize you've just partitioned
the wrong drive much less ugly. :-)
--Jon Radel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail t
On 4/2/10 11:49 AM, David Allen wrote:
On 4/2/10, Jon Radel wrote:
On 4/2/10 8:33 AM, David Allen wrote:
Secondly, it seems the cause of the OP's problem was a delay associated
with an IDENT query. Specificially
confTO_IDENT Timeout.ident [5s] The timeout waiting
d), so trying to figure out why
they make sense based solely on what Linux does can be futile. ;-)
--
--Jon Radel
j...@radel.com
7.0 server.
Unless they've moved things around since 7.0, you probably want to make
sure that you've not messed with the ifconfig_lo0 line in
/etc/defaults/rc.conf.
My apologies if that config stuff has changed in the latest; I don't
have access to the latest right now.
--
--Jon Radel
j...@radel.com
e kept up to date with your SSL libraries. :-)
--Jon Radel
j...@radel.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
mezone/
>
See also the distinction between %t and %T at
http://wiki.squid-cache.org/Features/CustomErrors
--
--Jon Radel
j...@radel.com
On 2/27/10 1:31 PM, Programmer In Training wrote:
On 02/27/10 12:22, Jon Radel wrote:
On 2/27/10 2:58 AM, Matthew Seaman wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 27/02/2010 24:50:54, Citra Cool wrote:
can i selling free bsd for my profit??
is it legal??
In a word, yes
this applies in a couple countries where they have
rather draconian laws about selling software that supports any
type of encryption? It's a big world out there, with many
interesting laws.
--
--Jon Radel
j...@radel.com
ing us how he had plugged
a monitor into the server, so we're several degrees removed from reality
by this point.
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
ratum is going to be one higher than the stratum
of the server you're synchronized against, and you rather have to go out
of your way to override that.
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
Do you get an error message? Does
it hang? What?
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
assuming he
doesn't just wave his hands and tell you plug your phone in "here" and
go away.
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
related patches you're missing.
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
registrar and in NS records in your dns zone.
With those two steps, dns as a whole will become a bit more resilient
for you.
--Jon Radel
j...@radel.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-qu
ur nameserver
is up and running.
What happens if you restart just your mailserver at this time?
If that doesn't resolve the matter, give us some details about where
your nameserver and mailserver live, and give us the contents of
/etc/resolv.conf on the mailserver, and tell us for which e-
the MAC address
information as well if things appear to be really odd.
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
ght.org.
thought.org.38400 IN NS ns1.localhostservices.net.
thought.org.38400 IN NS ns2.secondary.com.
thought.org.38400 IN NS a.ns.celestial.com.
Fix your DNS!
--Jon Radel
___
freebsd-questions
ot;/etc/rc.d/sshd keygen". In all cases that I know of, it's just the
ssh-keygen program being run on your behalf.
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
used, and really not that
confusing once you pay attention. (My apologies to anyone else who
discussed this earlier; I found it difficult to read every message in
this thread.)
BTW, it's hard for me, personally, to take seriously anyone who quotes
in full, with no trimming, somethin
epting time data
from the Windows server at least on some level.
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
verything to do with starting off almost 10 minutes off
and a config file that says to never make a step correction larger than
1 second and to panic if you see an offset of over 1 second.
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
oing to have to tell us what you mean by "hook up my
machines to the machine running the ntp server."
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
ust can't get general purpose disks that small anymoreI'd think
that assuming everyone had at least 10 GB disks at this point would be
reasonable.
I'm all for increased defaults.
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
es by brute force, so these
days many servers don't give you a hint unless you actually send some
mail. Some don't even give you a hint then, simply black holing the
mail if the address is incorrect.
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
states this phrase. These
days the footnote is a bit more firm:
Actual mileage will vary.
See http://www.urbandictionary.com/define.php?term=YMMV or Google for more.
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
Mark Stapper wrote:
besides.. 0x80!=0200
it's 0200 octal which is 128 decimal...
Might be why it doesn't work for you.
Don't mess with his head. ;-)
0200 = 0x80 = 128
200 octal = 80 hex = 128 decimal
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
and do an
inline post of src and example use.
Do you mean something like
rm `grep -l S *`
or am I completely missing the point of what you're trying to do?
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
/books/handbook/mail.html
Once you've decided which e-mail server you wish to use and what you
want it to do, feel free to come back with specific questions if things
go wrong or specific steps remain obscure.
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
n the example.com zone so that recursive lookups can find that
one critical address and access the mydomain zone. That's the glue record.
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
When BIND offers (and makes good on) a $1,000 bug bounty, I'll be happy
to consider its security model the equal of djbdns.
It's nice to see that their marketing efforts work on somebody.
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
ive dns servers for your domain on a different server, while
on your web server you run a light-weight caching dns server reachable
only on the loopback interface.
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
Daniel Underwood wrote:
I'm very interested to see the spread of opinion about Linux
distributions from FreeBSD fans.
Why?
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
former is that it's probably, other things being equal, less likely to
be properly maintained and monitored.
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
any junior
admins on shift 3 or comply with any best practices that he thinks are
silly because it's all about him on his network" conversation on this
list before. A rehash would be tedious.
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
to
actually enforce a license are probably completely out of line with the
value of the network utilities that you want to share.
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
"root" in bold and red text.
How come su'ing doesn't seem to effect everything in the
/root/.bash_profile file?
Thanks,
Daniel
Read the man page on the distinction between
su
and
su -
the latter probably being what you want to use.
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
the lay of the land the last time I was forced to pay
close attention to Microsoft e-mail clients.
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
d the FreeBSD Project with FreeBSD Mall in
his mind. The latter, of course, has subscriptions available for their
CD/DVD sets.
Dear OP: They're not the same organization, though to the best of my
knowledge, they're on quite good terms with each other.
--
--Jon Radel
j...@radel.
in power of the printer. Things are relatively easy if you
have a printer which directly accepts PostScript. Unfortunately, this
is not the case with an HP OfficeJet 4110, hence all the extra bits and
fiddling.
But you can actually print from FreeBSD. I've seen it with my very own
eyes. :-)
ar that ntpdate is depreciated and on its way out.
Or you could just run ntpd as a daemon to maintain your time.
--
--Jon Radel
j...@radel.com
smime.p7s
Description: S/MIME Cryptographic Signature
Wojciech Puchar wrote:
how to change password for account non-interactively from
commandline/shell script?
expect
http://en.wikipedia.org/wiki/Expect
is a more general purpose solution in that problem space, though
obviously more effort in this specific case.
--
--Jon Radel
j
one the system clock is set to. Now, if you were to
tell us that your system isn't set to EST (or current equivalent), then
this becomes a more interesting conversation
Or is your question how to reset the time zone for your overall system?
--
--Jon Radel
j...@radel.com
smime.p7
1 - 100 of 149 matches
Mail list logo