Re: IPFW via command problem

2003-12-14 Thread Jaime
On Sunday, December 14, 2003, at 01:49  AM, Ian Moore wrote:
# Allow outgoing pings
${fwcmd} add pass icmp from any to any icmptypes 8 out via ${oif}
${fwcmd} add pass icmp from any to any icmptypes 0 in via ${oif}
where I have defined ${oif} as
oif=xl1
where xl1 is my external interface
The above lines don't allow pings to the outside world, but if I 
comment out
via ${oif} then it does allow them.
	I'd have to know more about your firewall to be certain, but it looks 
kind of like you've over-looked the IFPW rules that would be needed by 
your internal interface.  If the external interface allows pings but 
the internal doesn't, then it won't let pings pass through the box.  
They will be stopped at the internal interface on their way from your 
internal workstation to the firewall.

Hope that helps,
Jaime
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: IPFW via command problem

2003-12-14 Thread imoore
Jaime writes: 

On Sunday, December 14, 2003, at 01:49  AM, Ian Moore wrote:
# Allow outgoing pings
${fwcmd} add pass icmp from any to any icmptypes 8 out via ${oif}
${fwcmd} add pass icmp from any to any icmptypes 0 in via ${oif} 

where I have defined ${oif} as
oif=xl1
where xl1 is my external interface 

The above lines don't allow pings to the outside world, but if I comment 
out
via ${oif} then it does allow them.
	I'd have to know more about your firewall to be certain, but it looks 
kind of like you've over-looked the IFPW rules that would be needed by 
your internal interface.  If the external interface allows pings but the 
internal doesn't, then it won't let pings pass through the box.  They will 
be stopped at the internal interface on their way from your internal 
workstation to the firewall. 

Hope that helps,
Jaime 

Perhaps I should have posted the whole script, though you can see it at the 
web site I mentioned. There is a rule just before those 2 to allow icmp on 
the internal interface:
# Allow all ICMP packets on internal interface
${fwcmd} add pass icmp from any to any via ${iif} 

Here is my config in full, except for the external address  dns addresses: 

# Suck in the configuration variables.
if [ -r /etc/defaults/rc.conf ]; then
  . /etc/defaults/rc.conf
  source_rc_confs
elif [ -r /etc/rc.conf ]; then
  . /etc/rc.conf
fi 

if [ -n ${1} ]; then
  firewall_type=${1}
fi 

# Firewall program
fwcmd=/sbin/ipfw 

# Outside interface network and netmask and ip
oif=xl1
onet=x.x.x.0
omask=255.255.255.0
oip=x.x.x.y 

# Inside interface network and netmask and ip
iif=xl0
inet=192.168.0.0
imask=255.255.255.0
iip=192.168.0.9 

# My ISP's DNS servers
dns1=z.z.z.z
dns2=y.y.y.y 

# Flush previous rules
${fwcmd} -f flush 

# Allow loopbacks, deny imposters
${fwcmd} add 100 pass all from any to any via lo0
${fwcmd} add 200 deny all from any to 127.0.0.0/8 

# If you're using 'options BRIDGE', uncomment the following line to pass ARP
${fwcmd} add 300 pass udp from 0.0.0.0 2054 to 0.0.0.0 

# Stop spoofing
${fwcmd} add deny all from ${inet}:${imask} to any in via ${oif}
${fwcmd} add deny all from ${onet}:${omask} to any in via ${iif} 

# Stop RFC1918 nets on the outside interface
${fwcmd} add deny all from any to 10.0.0.0/8 via ${oif}
${fwcmd} add deny all from any to 172.16.0.0/12 via ${oif}
${fwcmd} add deny all from any to 192.168.0.0/16 via ${oif} 

# Stop draft-manning-dsua-03.txt (1 May 2000) nets (includes RESERVED-1,
# DHCP auto-configuration, NET-TEST, MULTICAST (class D), and class E)
# on the outside interface
${fwcmd} add deny all from any to 0.0.0.0/8 via ${oif}
${fwcmd} add deny all from any to 169.254.0.0/16 via ${oif}
${fwcmd} add deny all from any to 192.0.2.0/24 via ${oif}
${fwcmd} add deny all from any to 224.0.0.0/4 via ${oif}
${fwcmd} add deny all from any to 240.0.0.0/4 via ${oif} 

# Network Address Translation.  This rule is placed here deliberately
# so that it does not interfere with the surrounding address-checking
# rules.  If for example one of your internal LAN machines had its IP
# address set to 192.0.2.1 then an incoming packet for it after being
# translated by natd(8) would match the `deny' rule above.  Similarly
# an outgoing packet originated from it before being translated would
# match the `deny' rule below.
${fwcmd} add divert natd all from any to any via ${natd_interface} 

# Stop RFC1918 nets on the outside interface
${fwcmd} add deny all from 10.0.0.0/8 to any via ${oif}
${fwcmd} add deny all from 172.16.0.0/12 to any via ${oif}
${fwcmd} add deny all from 192.168.0.0/16 to any via ${oif} 

# Stop draft-manning-dsua-03.txt (1 May 2000) nets (includes RESERVED-1,
# DHCP auto-configuration, NET-TEST, MULTICAST (class D), and class E)
# on the outside interface
${fwcmd} add deny all from 0.0.0.0/8 to any via ${oif}
${fwcmd} add deny all from 169.254.0.0/16 to any via ${oif}
${fwcmd} add deny all from 192.0.2.0/24 to any via ${oif}
${fwcmd} add deny all from 224.0.0.0/4 to any via ${oif}
${fwcmd} add deny all from 240.0.0.0/4 to any via ${oif} 

# Allow established connections with minimal overhead
${fwcmd} add pass tcp from any to any established 

# Allow IP fragments to pass through
${fwcmd} add pass all from any to any frag 

### TCP RULES 

# HTTP - Allow access to our web server
${fwcmd} add pass tcp from any to any 80 setup
${fwcmd} add pass tcp from any to any 25 setup 

# FTP - Allow incoming data channel for outgoing connections,
# reject  log all incoming control connections
${fwcmd} add pass tcp from any 20 to any 1024-65535 setup
${fwcmd} add deny log tcp from any to any 21 in via ${oif} setup 

# SSH Login - Allow  Log all incoming
${fwcmd} add pass log tcp from any to any 22 in via ${oif} setup 

# IDENT - Reset incoming connections
${fwcmd} add reset tcp from any to any 113 in via ${oif} setup 

# RejectLog all setup of incoming connections from the outside
${fwcmd} add deny log tcp from any to any in via ${oif} 

Re: Page faults every few days

2003-12-14 Thread Jaime
On Sunday, December 14, 2003, at 01:40  AM, Gautam Gopalakrishnan wrote:
On Sun, Dec 14, 2003 at 12:19:19AM -0500, Jaime wrote:
	Its probably SpamAssassin, which is run against every incoming
message.  This causes it to have lots of copies in memory at once and
to run/quit very often.  I don't think that updating Perl will help (I
don't see why a user-space process would interfere with kernel 
resource
management.) and I has updated SpamAssassin several times since the
problem began.
You probably know, maybe spamd is better than invoking
so many perl instances
	This is actually what I'm doing.  However, spamd is a perl process.

zeus:jkikpoleps auxww|grep spamd
root   822  0.0  3.8 21112 9924  ??  Is   Tue09AM   2:15.08 
/usr/local/bin/spamd -a -c -d (perl5.00503)

	Odd For once we have less than 5 spamd processes running 
concurrently.  I guess that is what happens at a public school as 
nearly 3am on a Sunday morning.  :)

			Jaime

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


The FreeBSD Diary: 2003-11-23 - 2003-12-13

2003-12-14 Thread Dan Langille
The FreeBSD Diary contains a large number of practical 
examples and how-to guides.  This message is posted weekly
to [EMAIL PROTECTED] with the aim of letting people
know what's available on the website.  Before you post a question
here it might be a good idea to first search the mailing list 
archives http://www.freebsd.org/search/search.html#mailinglists 
and/or The FreeBSD Diary http://www.freebsddiary.org/. 


-- 
Dan Langille - DVL Software Limited
The FreeBSD Diary - http://www.FreeBSDDiary.org/ - practical examples
FreshPorts- http://www.FreshPorts.org/   - the place for ports
FreshSource   - http://www.FreshSource.org/  - the place for source

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Page faults every few days

2003-12-14 Thread Kent Stewart
On Saturday 13 December 2003 11:52 pm, Jaime wrote:
 On Sunday, December 14, 2003, at 01:40  AM, Gautam Gopalakrishnan wrote:
  On Sun, Dec 14, 2003 at 12:19:19AM -0500, Jaime wrote:
 Its probably SpamAssassin, which is run against every incoming
  message.  This causes it to have lots of copies in memory at once and
  to run/quit very often.  I don't think that updating Perl will help (I
  don't see why a user-space process would interfere with kernel
  resource
  management.) and I has updated SpamAssassin several times since the
  problem began.
 
  You probably know, maybe spamd is better than invoking
  so many perl instances

   This is actually what I'm doing.  However, spamd is a perl process.

 zeus:jkikpoleps auxww|grep spamd
 root   822  0.0  3.8 21112 9924  ??  Is   Tue09AM   2:15.08
 /usr/local/bin/spamd -a -c -d (perl5.00503)

   Odd For once we have less than 5 spamd processes running
 concurrently.  I guess that is what happens at a public school as
 nearly 3am on a Sunday morning.  :)


Well, there is this piece of info in /usr/src/UPDATING

20030904:
Between August 9th and August 30th, a bug existed in the i386
virtual memory system which could cause panics under load.
Anyone running a kernel built between those dates is advised
to update at the earliest possible convenience.

As some one suggested earlier, I think you should read the above item very 
closely.

Kent

-- 
Kent Stewart
Richland, WA

http://users.owt.com/kstewart/index.html

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Page faults every few days

2003-12-14 Thread jaime
On Sun, 14 Dec 2003, Kent Stewart wrote:
 Well, there is this piece of info in /usr/src/UPDATING

 20030904:
 Between August 9th and August 30th, a bug existed in the i386
 virtual memory system which could cause panics under load.
 Anyone running a kernel built between those dates is advised
 to update at the earliest possible convenience.

How'd I miss that?!  OK, this is very useful and I really
appreciate it.  Its just that I was sure that:
1) The panics started before then
2) I read UPDATING

I'm obviously wrong on #2, so now I'm less certain about #1.  I'll
get on this a.s.a.p. and see what it does.

Thanks,
Jaime
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Page faults every few days

2003-12-14 Thread Kent Stewart
On Sunday 14 December 2003 01:16 am, [EMAIL PROTECTED] wrote:
 On Sun, 14 Dec 2003, Kent Stewart wrote:
  Well, there is this piece of info in /usr/src/UPDATING
 
  20030904:
  Between August 9th and August 30th, a bug existed in the i386
  virtual memory system which could cause panics under load.
  Anyone running a kernel built between those dates is advised
  to update at the earliest possible convenience.

   How'd I miss that?!  OK, this is very useful and I really
 appreciate it.  Its just that I was sure that:
 1) The panics started before then
 2) I read UPDATING

   I'm obviously wrong on #2, so now I'm less certain about #1.  I'll
 get on this a.s.a.p. and see what it does.


You could have been seeing them; however, I think a point you should remember 
is that when you are having problems, you have to get to an environment that 
someone can reproduce to duplicate your problem. You probably can't do that 
on a prerelease. I know I couldn't be talked into going back with the system 
I do tests on. It is also much more likely that some one is running something 
like RELENG_4_9 or a current -stable. They really don't have to do anything 
other than simulate your load and see if the system panics.

I would have bet anything from a flaky power supply to cooling fans until I 
saw the notice in UPDATING. I had several machines running kernels created 
during that period and none of them paniced but IIRC, there were a number of 
them panicing at the time. I place more creadence on your failure than my 
successes.

Kent

-- 
Kent Stewart
Richland, WA

http://users.owt.com/kstewart/index.html

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


How to find out which drive isdown?

2003-12-14 Thread Joachim Dagerot
I'm not sure if I'm brave or just stupid, but I have running my
complex freeBSD for several years now, every week something is tuned,
installed or tweaked, however, I'm not very good on computers! :-\ My
problem:



I have seven disks in my cabinett, three of them builds a vinum RAID-5
plex.

One of the disks in the RAID is down according to vinum list.

I could use some honts on how to determine which physical disk is
named what in my system, is there a good path to follow by disconnect
one, write down whats left and then re-connect it and connect another
one?

WHich command is best to use to get a list of all connected disks? I
use ls /dev/ by now.


Also if there is something else I should consider in this case, please
don't hesitate to correct and guide me.

Thanks in advance,

Joachim

-
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Need help: HyperThreading-CPU + FreeBSD-Stable + Multi-threading

2003-12-14 Thread Stefan Cars
Hi!

That was removed, it's not in 4.9!

/ Stefan 

-Original Message-
From: Minnesota Slinky [mailto:[EMAIL PROTECTED] 
Sent: den 14 december 2003 01:13
To: 'Stefan Cars'; 'Rob'
Cc: [EMAIL PROTECTED]
Subject: RE: Need help: HyperThreading-CPU + FreeBSD-Stable +
Multi-threading

I _believe_ there is an options HT #for HyperThreading

In the kernel configuration.

HTH

Eric F Crist
President
AdTech Integrated Systems, Inc
(612) 998-3588
 


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Stefan Cars
Sent: Saturday, December 13, 2003 1:58 PM
To: 'Rob'
Cc: [EMAIL PROTECTED]
Subject: RE: Need help: HyperThreading-CPU + FreeBSD-Stable +
Multi-threading


Hi!

This is strange, my system doesn't even show mchdep.hlt_logical_cpus,
very weird. My system have HT

/S 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rob
Sent: den 12 december 2003 15:58
To: [EMAIL PROTECTED]
Subject: Need help: HyperThreading-CPU + FreeBSD-Stable +
Multi-threading


Hello,

Recently I've got a new PC: P4 Titan 2.6 GHz.
It says in the brochure that it has HyperThreading, which I think is
somehow related to the HyperThread thing in the FreeBSD kernel, right?

I know there's this message in /usr/src/UPDATING, which unfortunately
does not clear up the matter for me.

So let me recap what I believe to understand:

For utilizing the advantages of this HyperThreading stuff for users, I
need in the kernel configuration:
   optionsSMP# Symmetric MultiProcessor Kernel
   optionsAPIC_IO# Symmetric (APIC) I/O

Furthermore, I need to set machdep.hlt_logical_cpus to 0 (zero). How
do I add this to the loader so that it is set to zero at every boot
up? Should I simply add to my /boot/loader.conf a line like:

   machdep.hlt_logical_cpus=0

After that, I'm done with the hyperthreading?

Thanks,
Rob.

PS: if you're in the mood, I would appreciate a few words on what this
HyperThreading is about and what advantages I can expect. Thanks too!

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
[EMAIL PROTECTED]

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
[EMAIL PROTECTED]


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


No Carrier 802.11b FreeBsd 5.1 Avaya Texas Instruments

2003-12-14 Thread Darryl Barlow
I have installed FreeBSD on a Desktop Machine with a
TI 1410 PCI Cardbus 
Bridge and an Avaya Silver Wireless Network Card.  The
card connects 
perfectly to a D-Link Access Point in Debian and even
in Windows XP.  
However, in FreeBSD there is no carrier no matter
what I seem to try.

Troubleshooting help would be much appreciated.

Device seems to come up with:

ifconfig wi0 inet 192.168.4.8 netmask 255.255.255.0
ssid HOME wepmode ON 
wepkey 1234567890


dmesg is as follows:

Copyright (c) 1992-2003 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989,
1991, 1992, 1993, 1994
The Regents of the University of California.
All rights reserved.
FreeBSD 5.1-RELEASE #0: Thu Jun  5 02:55:42 GMT 2003
   
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC
Preloaded elf kernel /boot/kernel/kernel at
0xc06d4000.
Preloaded elf module /boot/kernel/acpi.ko at
0xc06d421c.
Timecounter i8254  frequency 1193182 Hz
Timecounter TSC  frequency 1199664705 Hz
CPU: AMD Athlon(tm) Processor (1199.66-MHz 686-class
CPU)
  Origin = AuthenticAMD  Id = 0x642  Stepping = 2
 
Features=0x183f9ffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR
  AMD Features=0xc044RSVD,AMIE,DSP,3DNow!
real memory  = 134135808 (127 MB)
avail memory = 122912768 (117 MB)
Pentium Pro MTRR support enabled
npx0: math processor on motherboard
npx0: INT 16 interface
acpi0: ASUS   A7V-133  on motherboard
pcibios: BIOS version 2.10
Using $PIR table, 9 entries at 0xc00f1720
acpi0: power button is handled as a fixed feature
programming model.
Timecounter ACPI-fast  frequency 3579545 Hz
acpi_timer0: 24-bit timer at 3.579545MHz port
0xe408-0xe40b on acpi0
acpi_cpu0: CPU on acpi0
acpi_button0: Power Button on acpi0
pcib0: ACPI Host-PCI bridge port 0xcf8-0xcff on
acpi0
pci0: ACPI PCI bus on pcib0
agp0: VIA 82C8363 (Apollo KT133A) host to PCI bridge
mem 
0xe600-0xe7ff at device 0.0 on pci0
pcib1: PCI-PCI bridge at device 1.0 on pci0
pci1: PCI bus on pcib1
pci1: display, VGA at device 0.0 (no driver
attached)
isab0: PCI-ISA bridge at device 4.0 on pci0
isa0: ISA bus on isab0
atapci0: VIA 82C686B UDMA100 controller port
0xd800-0xd80f at device 4.1 on 
pci0
ata0: at 0x1f0 irq 14 on atapci0
ata1: at 0x170 irq 15 on atapci0
uhci0: VIA 83C572 USB controller port 0xd400-0xd41f
irq 9 at device 4.2 on 
pci0
usb0: VIA 83C572 USB controller on uhci0
usb0: USB revision 1.0
uhub0: VIA UHCI root hub, class 9/0, rev 1.00/1.00,
addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1: VIA 83C572 USB controller port 0xd000-0xd01f
irq 9 at device 4.3 on 
pci0
usb1: VIA 83C572 USB controller on uhci1
usb1: USB revision 1.0
uhub1: VIA UHCI root hub, class 9/0, rev 1.00/1.00,
addr 1
uhub1: 2 ports with 2 removable, self powered
pci0: multimedia at device 9.0 (no driver attached)
cbb0: TI1410 PCI-CardBus Bridge at device 10.0 on
pci0
cardbus0: CardBus bus on cbb0
pccard0: 16-bit PCCard bus on cbb0
pcib0: slot 10 INTA is routed to irq 5
rl0: RealTek 8139 10/100BaseTX port 0xa400-0xa4ff
mem 0xd500-0xd5ff 
at device 11.0 on pci0
rl0: Realtek 8139B detected. Warning, this may be
unstable in autoselect mode
pcib0: slot 11 INTA is routed to irq 10
rl0: Ethernet address: 00:50:bf:27:7b:64
miibus0: MII bus on rl0
rlphy0: RealTek internal media interface on miibus0
rlphy0:  10baseT, 10baseT-FDX, 100baseTX,
100baseTX-FDX, auto
pci0: multimedia, audio at device 12.0 (no driver
attached)
sym0: 810a port 0x9800-0x98ff mem
0xd480-0xd48000ff irq 9 at device 13.0 
on pci0
sym0: Symbios NVRAM, ID 7, Fast-10, SE, parity
checking
sym0: open drain IRQ line driver
sym0: using LOAD/STORE-based firmware.
atapci1: Promise PDC20265 UDMA100 controller port 
0x8000-0x803f,0x8400-0x8403,0x8800-0x8807,0x9000-0x9003,0x9400-0x9407
mem 
0xd400-0xd401 irq 10 at device 17.0 on pci0
ata2: at 0x9400 on atapci1
ata3: at 0x8800 on atapci1
fdc0: Enhanced floppy controller (i82077, NE72065 or
clone) port 
0x3f7,0x3f2-0x3f5 irq 6 drq 2 on acpi0
fdc0: FIFO enabled, 8 bytes threshold
fd0: 1440-KB 3.5 drive on fdc0 drive 0
ppc0 port 0x778-0x77b,0x378-0x37f irq 7 drq 3 on acpi0
ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in
COMPATIBLE mode
ppc0: FIFO with 16/16/8 bytes threshold
ppbus0: Parallel port bus on ppc0
plip0: PLIP network interface on ppbus0
lpt0: Printer on ppbus0
lpt0: Interrupt-driven port
ppi0: Parallel I/O on ppbus0
sio0 port 0x3f8-0x3ff irq 4 on acpi0
sio0: type 16550A
sio1 port 0x2f8-0x2ff irq 3 on acpi0
sio1: type 16550A
atkbdc0: Keyboard controller (i8042) port 0x64,0x60
irq 1 on acpi0
atkbd0: AT Keyboard flags 0x1 irq 1 on atkbdc0
kbd0 at atkbd0
psm0: PS/2 Mouse irq 12 on atkbdc0
psm0: model MouseMan+, device ID 0
orm0: Option ROM at iomem 0xcc000-0xcdfff on isa0
pmtimer0 on isa0
sc0: System console at flags 0x100 on isa0
sc0: VGA 16 virtual consoles, flags=0x300
vga0: Generic ISA VGA at port 0x3c0-0x3df iomem
0xa-0xb on isa0
Timecounters tick every 10.000 msec
acpi_cpu: throttling enabled, 16 steps (100% to 6.2%),
currently 

SMP-stability with 5.2

2003-12-14 Thread Stefan Cars
Hi!

How good is the SMP-stability on 5.2. I'm currently running 4.9 on some
non-critical servers and I'm thinking of installing 5.2, how good is the
SMPng now ?

/ Stefan

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


problems after upgrade 5.1 5.2 RC1

2003-12-14 Thread martin vana
Hi,
after binary upgrade from 5.1 to 5.2 RC1 I've encoutered some non-critical 
misbehaviour of my box, 
after executing mount :

/home/vana#mount
 on  ()
 on  ()
 on  ()
 on  ()
 on  ()
 on  ()

and  fsck:

/home/vana#fsck -y
/libexec/ld-elf.so.1: fsck: Undefined symbol execvP


Whole system works just fine but these two things scares me a bit,
anyone experienced the same?

thank you
Martin Vana

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Where do I put options to ports make directives?

2003-12-14 Thread stan
I'm rebuilding a machine that suffred a root disk crash. I can't seem to
find the place to put the optiosn I pass to various port's make install
comands (as defines), so they will be reused, when I use portupgrade to
keep them up to date.

Where is thsi file?

-- 
They that would give up essential liberty for temporary safety deserve
neither liberty nor safety.
-- Benjamin Franklin
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Where do I put options to ports make directives?

2003-12-14 Thread Jez Hancock
On Sun, Dec 14, 2003 at 09:28:55AM -0500, stan wrote:
 I'm rebuilding a machine that suffred a root disk crash. I can't seem to
 find the place to put the optiosn I pass to various port's make install
 comands (as defines), so they will be reused, when I use portupgrade to
 keep them up to date.
 
 Where is thsi file?
/usr/local/etc/pkgtools.conf

The manpage for pkgtools.conf(1) has some info on it and as it goes I added
something to my blog about it yesterday:

http://jez.hancock-family.com/archives/15_Portupgrade_and_usrlocaletcpkgtoolsconf.html

HTH.

-- 
Jez Hancock
 - System Administrator / PHP Developer

http://munk.nu/
http://jez.hancock-family.com/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


NIS authontication problem.

2003-12-14 Thread Hossein
Hello every body;
In our department we are going to use a 5.1 Stable FreeBSD, and it 
must run NIS client to authonticate the users through a Linux NIS server.
The ypbind works well and when I do ypcat passwd I get the 
enteries in the passwd of the NIS server. I added the correct lines to 
passwd.master and group according to the handbook. But no user can log in 
and in the /var/log/auth.log it apears that the password is not corect. 
The students here would be very happy to be able to use the BSD 
Shell, and I thank you in advance.

Yours,
Mohammad H. Falaki.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Nvidia vs SMP/apic

2003-12-14 Thread Josh Paetzel
On Sun, Dec 14, 2003 at 04:34:13PM +1100, matti k wrote:
 I have a problem whereby the nvidia drivers cause my system to
 hang/reboot a few seconds after startx. I have discovered that
 disabling the SMP/apic lines in the kernel fixes the problem. This
 occurs on 5.2-CURRENT and 4.9-RELEASE.
 
 I first noticed this problem after a motherboard swap. The old
 motherboard was a Tyan Tiger MP and it was running 5.1-CURRENT at the
 time and nvidia drivers were working fine with SMP kernel. The
 motherboard died so I replaced it with a MSI K7D Master-L (MPX
 chipset). After that the nvidia drivers stopped working if SMP kernel
 enabled.
 
 I have tried NO_MIXED_MODE, disabling acpi and a lot of other BIOS
 options but no luck. I don't know if this is an nvidia driver issue or
 a problem with this particular motherboard/chipset. Any help
 appreciated. Thanks.
 

I just upgraded my single socket A gigabyte GA-VAXP motherboard to a 
dual socket A gigabyte GA-DPXDW+ yesterday.  This motherboard is also
using the MPX chipset.  I am having the same issue:  As soon as I 
enable SMP and apic in the kernel the nvidia drivers lock up.  This 
wouldn't be such a big deal to me, except I need the nvidia drivers to
use both heads on my video card (at least as far as I know)  I'm attaching
a dmesg both with and without SMP enabled, as well as a copy of my 
kernel config file, (I'm just toggling between SMP in there) and a copy
of my XF86Config (Once again, just toggling between the nv and nvidia
driver)  I can give someone a shell on this box if it will help 
troubleshoot, otherwise I can provide more information as needed.

FreeBSD twinathlon.tcbug.org 5.2-CURRENT FreeBSD 5.2-CURRENT #4: 
Sun Dec 14 09:08:14 GMT 2003 
[EMAIL PROTECTED]:/usr/src/sys/i386/compile/TWINATHLON  i386


Thanks, 
Josh Paetzel
[EMAIL PROTECTED]


#
# GENERIC -- Generic kernel configuration file for FreeBSD/i386
#
# For more information on this file, please read the handbook section on
# Kernel Configuration Files:
#
#http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig-config.html
#
# The handbook is also available locally in /usr/share/doc/handbook
# if you've installed the doc distribution, otherwise always see the
# FreeBSD World Wide Web server (http://www.FreeBSD.org/) for the
# latest information.
#
# An exhaustive list of options and more detailed explanations of the
# device lines is also present in the ../../conf/NOTES and NOTES files. 
# If you are in doubt as to the purpose or necessity of a line, check first 
# in NOTES.
#
# $FreeBSD: src/sys/i386/conf/GENERIC,v 1.384.2.2 2003/05/31 15:18:41 scottl Exp $

machine i386
cpu I686_CPU
ident   TWINATHLON

#To statically compile in device wiring instead of /boot/device.hints
#hints  GENERIC.hints #Default places to look for devices.

#makeoptionsDEBUG=-g#Build kernel with gdb(1) debug symbols

options SCHED_4BSD  #4BSD scheduler
options INET#InterNETworking
options INET6   #IPv6 communications protocols
options FFS #Berkeley Fast Filesystem
options SOFTUPDATES #Enable FFS soft updates support
options UFS_ACL #Support for access control lists
options UFS_DIRHASH #Improve performance on big directories
options MD_ROOT #MD is a potential root device
options NFSCLIENT   #Network Filesystem Client
options NFSSERVER   #Network Filesystem Server
options NFS_ROOT#NFS usable as root device, requires NFSCLIENT
options MSDOSFS #MSDOS Filesystem
options CD9660  #ISO 9660 Filesystem
options PROCFS  #Process filesystem (requires PSEUDOFS)
options PSEUDOFS#Pseudo-filesystem framework
options COMPAT_43   #Compatible with BSD 4.3 [KEEP THIS!]
options COMPAT_FREEBSD4 #Compatible with FreeBSD4
options SCSI_DELAY=15000#Delay (in ms) before probing SCSI
options KTRACE  #ktrace(1) support
options SYSVSHM #SYSV-style shared memory
options SYSVMSG #SYSV-style message queues
options SYSVSEM #SYSV-style semaphores
options _KPOSIX_PRIORITY_SCHEDULING #Posix P1003_1B real-time extensions
options KBD_INSTALL_CDEV# install a CDEV entry in /dev
options AHC_REG_PRETTY_PRINT# Print register bitfields in debug
# output.  Adds ~128k to driver.
options AHD_REG_PRETTY_PRINT# Print register bitfields in debug
# output.  Adds ~215k to driver.

# Debugging for use in -current
#optionsDDB #Enable the kernel 

[no subject]

2003-12-14 Thread Vladimir
Hello, all

   How i can send message to current maillist? I have try send to
   [EMAIL PROTECTED] and to [EMAIL PROTECTED] but i recive
   only messages like this:
   [EMAIL PROTECTED] : FAILED (permanent error): RCPT response unsuccessful
   [EMAIL PROTECTED] : FAILED (permanent error): RCPT response unsuccessful

   I try send this message:
I install 5.1-Release and use it some time. Then i make cvsup to
  current and rebuild world. Now i coud not use my 2 hdd because on
  load FreeBSD can see only one hdd. I have 2 hdd ad0 and ad1. ad0
  with WinXP and ad1 with FreeBSD. When i say in bios to boot from my
  hdd1 (ad1) freebsd hangs on boot because my ad1 became ad0 and my
  hdd0 disappear. When i unpluged my hdd0 and leave ad1 as slave and
  boot with generic kernel alls work fine, but when i boot using my
  kernel ad1 became ad0. How to fix this bug?

  My kernel:
  ---
machine i386
profile 2
maxusers20
cpu I686_CPU# aka Pentium Pro(tm)
ident   GL_haba
options SCHED_4BSD  #4BSD scheduler
options INET#InterNETworking
options INET6
options FFS #Berkeley Fast Filesystem
options SOFTUPDATES #Enable FFS soft updates support
options UFS_ACL #Support for access control lists
options NFSCLIENT   #Network Filesystem Client
options NFSSERVER   #Network Filesystem Server
options MSDOSFS #MSDOS Filesystem
options CD9660  #ISO 9660 Filesystem
options PROCFS  #Process filesystem (requires PSEUDOFS)
options PSEUDOFS#Pseudo-filesystem framework
options COMPAT_43   #Compatible with BSD 4.3 [KEEP THIS!]
options COMPAT_FREEBSD4 #Compatible with FreeBSD4
options SYSVSHM #SYSV-style shared memory
options SYSVMSG #SYSV-style message queues
options SYSVSEM #SYSV-style semaphores
options KBD_INSTALL_CDEV# install a CDEV entry in /dev
options HZ=1000
options IPSEC
options IPX
options IPXIP
options HPFS
options NTFS
options SMBFS
options COMPAT_SUNOS
options NETSMB
options LIBMCHAIN
options LIBICONV
options LINPROCFS
options FB_INSTALL_CDEV # install a CDEV entry in /dev
options PECOFF_SUPPORT
options COMPAT_LINUX
options COMPAT_AOUT
device  apic
device  acpi
device  agp #+
device  ata #+
device  atadisk #+  # ATA disk drives
device  atapicd #+  # ATAPI CDROM drives
device  atapifd #+  # ATAPI floppy drives
device  atkbdc  #+  # AT keyboard controller
device  atkbd   #+  # AT keyboard
device  bpf #+  # Berkeley packet filter
device  cardbus #+
device  eisa #+
device  ether   #+  # Ethernet support
device  fdc #+
device  gzip
device  isa #+
device  loop#+  # Network loopback
device  lpt #+  # Printer
device  md  #+  # Memory disks
device  miibus  #+  # MII bus support
device  npx #+
device  pccard #+   # PC Card (16-bit) bus
device  pci #+
device  pcm #+
device  plip
device  ppi
device  ppbus #+# Parallel port bus (required)
device  ppc #+
device  psm #+  # PS/2 mouse
device  pmtimer
device  pty #+  # Pseudo-ttys (telnet etc)
device  radeondrm #+
device  random #+   # Entropy device
device  rl #+   # RealTek 8129/8139
device  sc #+
device  sio #+  # 8250, 16[45]50 based serial ports
device  sl  #+  # Kernel SLIP
device  splash #+
device  tun #+  # Packet tunnel.
device  uhci#+  # UHCI PCI-USB interface
device  usb #+  # USB Bus (required)
device  vga #+  # VGA video card driver
---

When i use my kernel:
---
ad0: 38166MB ST340810A [77545/16/63] at ata0-master UDMA100
acd0: CDRW _NEC CD-RW NR-9300A at ata1-slave PIO4
Mounting root from ufs:/dev/ad1s2a
setrootbyname failed
ffs_mountroot: can't find rootvp
Root mount failed: 6
---

When i use generic kernel:
---
ad1: 38166MB ST340810A [77545/16/63] at ata0-master UDMA100
acd0: CDRW _NEC CD-RW NR-9300A at ata1-slave PIO4
Mounting root from ufs:/dev/ad1s2a
setrootbyname failed
ffs_mountroot: can't find rootvp
Root mount failed: 6
---   
   
-- 
Regards,
 Vladimir  mailto:[EMAIL PROTECTED]

___
[EMAIL 

memory categories

2003-12-14 Thread Benjamin Lutz
I'm trying to understand what FreeBSD uses its memory for.
Unfortunately, I've not been able to find documentation that answers all
my questions, so I'm hoping someone on this list can answer them.

Let's start with top(1)'s memory categories:

Free: Not used for any purpose. (vm.stats.vm.v_free_count)

Active: Used by userland programs. (vm.stats.vm.v_active_count)

Cache: Well, this obviously caches something... but what? Filesystem?
(vm.stats.vm.v_cache_count)

Inactive: This seems to be the biggest chunk of memory on my system.
What exactly is the meaning of this? Someone explained it as memory
that a program has grabbed that isn't currently being used. It can be
swapped to disk if RAM is needed by other programs.. How does the
system know that this memory is not being used? Is this the difference
between the RES and SIZE colums in top(1)'s output?
(vm.stats.vm.v_inactive_count)

Wired: I've only been able to figure out that this is memory that's
being actively used and that cannot be relocated in any way. Could
someone explain this in a bit more detail? What exactly is the
difference between active and wired memory? (vm.stats.vm.v_wired_count)

Buf: I'm puzzled... If I add up Free, Active, Cache, Inactive, Wired and
Buf, I get more memory than I have physically installed. I could not
find a sysctl that represents this value. Also, .v_free_count,
v_active_count, v_cache_count, v_inactive_count and v_wired_count add up
to vm.stats.vm.v_page_count... where does this Buf come from?

And some more questions: On my system, these sysctls have these values:
hw.physmem = 1064734720 = 1015.410MB
hw.usermem: 947351552 = 903.465MB
hw.availpages = 259945
vm.stats.vm.v_page_count: 255299
vm.stats.vm.v_page_size: 4096
hw.availpages * .v_page_size = 1064734720 = 1015.410MB
.v_page_count * .v_page_size = 1045704704 = 997.262MB

I have 1024MB of RAM installed. Why is hw.physmem inaccurate? And why
is .v_page_count * .v_page_size less than hw.physmem? Is the difference
between hw.physmem and hw.usermem used for the kernel? If yes, 112MB
seems to be a huge amount?

Phew... quite a few questions... Let's see what answers you can give me!

Benjamin


pgp0.pgp
Description: PGP signature


Re: NIS authontication problem.

2003-12-14 Thread Tillman Hodgson
On Sun, Dec 14, 2003 at 06:13:39PM -0500, Hossein wrote:
 Hello every body;
   In our department we are going to use a 5.1 Stable FreeBSD, and it 
 must run NIS client to authonticate the users through a Linux NIS server.
   The ypbind works well and when I do ypcat passwd I get the 
 enteries in the passwd of the NIS server. I added the correct lines to 
 passwd.master and group according to the handbook. But no user can log in 
 and in the /var/log/auth.log it apears that the password is not corect. 

I haven't tried integrating non-BSD'ish machines into one of my NIS
domains, but it occurs to me that the /etc/shadow vs /etc/master.passwd
difference could cause /etc/passwd to propogate without actually
distributing the passwords. You might want to investigate
compatibility modes and so forth.

-T


-- 
Speak the truth.  That is always much easier, and is often the most powerful 
argument.
- Bene Gesserit Axiom
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: problems after upgrade 5.1 5.2 RC1

2003-12-14 Thread Kris Kennaway
On Sun, Dec 14, 2003 at 02:27:08PM +0100, martin vana wrote:
 Hi,
 after binary upgrade from 5.1 to 5.2 RC1 I've encoutered some non-critical 
 misbehaviour of my box, 
 after executing mount :
 
 /home/vana#mount
  on  ()
  on  ()
  on  ()
  on  ()
  on  ()
  on  ()
 
 and  fsck:
 
 /home/vana#fsck -y
 /libexec/ld-elf.so.1: fsck: Undefined symbol execvP
 
 
 Whole system works just fine but these two things scares me a bit,
 anyone experienced the same?

Do you have some old executables in your path that are superceding the
system versions?

Try 'which mount' and 'which fsck'

Kris


pgp0.pgp
Description: PGP signature


Re: memory categories

2003-12-14 Thread Lowell Gilbert
Benjamin Lutz [EMAIL PROTECTED] writes:

 Let's start with top(1)'s memory categories:

Please read the FAQ entry What do the various memory states displayed
by top mean? and see if which of your questions remain unanswered.
 http://www.freebsd.org/doc/en_US.ISO8859-1/books/faq/admin.html#TOP-MEMORY-STATES
-- 
Lowell Gilbert, embedded/networking software engineer, Boston area: 
resume/CV at http://be-well.ilk.org:8088/~lowell/resume/
username/password public
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: 4.9 floppy install help

2003-12-14 Thread Toomas Aas
 i have Award Modular BIOS v 4.41 PG (c) 1984-96 (cd-rom Bootable),
 Pent 133Mhz 1.2 Gig and 32 Megs 3com nic. no mouse.
 i downloaded 4.9 in 2 .iso images and setup some floppies for booting.
 the Kern.flp disk executes fine and asks for Mfsroot.flp. but this disks 
 returns
 zf_read unexpected EOF and prompts a shutdown or reboot.

Maybe I'm missing something, but if you already downloaded the ISOs and 
your machine can boot from CD-ROM, why bother with floppies at all?
--
Toomas Aas | [EMAIL PROTECTED] | http://www.raad.tartu.ee/~toomas/
* No, `Eureka' is Greek for `This bath is too hot.'

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


trouble: ipnat simultaneously icmp traffic from many NATed computers

2003-12-14 Thread
Hello!

Sorry for my bad english

We have router on FreeBSD 4.8-RELEASE (IP Filter: v3.4.31)and want to
NAT our LAN. We have 3 computer at LAN - 192.168.0.2,
192.168.0.3,192.168.0.4. We put the rule to ipnat.rules:
/etc/ipnat.rules
 map rl0 192.168.0.0/26 - 195.112.113.242/32
So all work all right, but when we try ping one remote_host from two
computers simultaneously we have that only first computer can do this.

Our router settings:
--
%ifconfig
rl0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
inet X.X.X.242 netmask 0xfff0 broadcast X.X.X.255
ether 00:c0:26:a3:35:61
media: Ethernet autoselect (10baseT/UTP)
status: active
rl1: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
inet 192.168.0.1 netmask 0xff80 broadcast 192.168.0.127
ether 00:c0:26:a3:3a:df
media: Ethernet autoselect (100baseTX full-duplex)
status: active

%more /etc/ipf.rules
pass in quick on rl0 from any to any
pass in quick on rl1 from any to any

%more /etc/ipnat.rules
 map rl0 192.168.0.0/26 - 195.112.113.242/32
--

as I look ipnat -l I see that ipnat map the first icmp ping
192.168.0.2 -x.x.x.x and not map another from 192.168.0.3. Then I look
%tcpdump -i rl0
WOW! I see outgouing icmp echo request from 192.168.0.3!!! Ok, I'ts a
my trouble, ipnat want more then one external ip to nat two ipcm from
different host. Let's go:

add new rule into ipnat.rules:
%more /etc/ipnat.rules
map rl0 192.168.0.0/26 - 195.112.113.244/30

%ifconfig rl0 X.X.X.245 netmask 255.255.255.255 alias
%ifconfig rl0 X.X.X.246 netmask 255.255.255.255 alias

reload ipnat rules:
%ipnat -CF -f /etc/ipnat.rules
ok! Now I can ping remote_host from 195.168.0.2 and 195.168.0.3
simultaneously! ipnat -l shows:
192.168.0.2-x.x.x.245
192.168.0.2-x.x.x.246

Then I go to the 192.168.0.4 machine and do
ping -t remote_host
BANG! Router is down. I stop ping at all 3 hosts. Router is down and
even local console dont react. Only Reset key can do some. Why this
happend?

What is this? How can I configure FreeBSD to ping remote_host
simultaneously from any count of NATed computers? We really need do
this! (We are small ISP, and have monitor programs that monitor some our
equipment by icmp ping command and connect to some it services.
Now when we NAT our office LAN we cannot simultaneously monitor our
equipment from many point!)

Can you some help to us?

Once again sorry for my bad english
-- 
Best regards, Mike
mailto:[EMAIL PROTECTED]

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


ntpd problem

2003-12-14 Thread Mathieu Arnold
Hi,

I have a few routers who don't have any 127.0.0.1, because their loopback has
a a routable address so that I can use an IGP with them.
Now, I guess that's the reason why ntpd is not working, and I was wondering
how I could do have it work with another IP, I guess I'll have to add some
config directive to tell it that it's internal ref clock is not 127.0.0.1,
what I hope is that it's not hard coded in it, if that is, I'll have to
create an lo1 with 127.0.0.1, but I'd rather not.

-- 
Mathieu Arnold
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: problems after upgrade 5.1 5.2 RC1

2003-12-14 Thread martin vana
On Sun, 14 Dec 2003 08:47:44 -0800
Kris Kennaway [EMAIL PROTECTED] wrote:

 On Sun, Dec 14, 2003 at 02:27:08PM +0100, martin vana wrote:
  Hi,
  after binary upgrade from 5.1 to 5.2 RC1 I've encoutered some non-critical 
  misbehaviour of my box, 
  after executing mount :
  
  /home/vana#mount
   on  ()
   on  ()
   on  ()
   on  ()
   on  ()
   on  ()
  
  and  fsck:
  
  /home/vana#fsck -y
  /libexec/ld-elf.so.1: fsck: Undefined symbol execvP
  
  
  Whole system works just fine but these two things scares me a bit,
  anyone experienced the same?
 
 Do you have some old executables in your path that are superceding the
 system versions?
 
 Try 'which mount' and 'which fsck'
 
 Kris
it might be possible that upgrade went something wrong but:

/home/vanawhich fsck
/sbin/fsck

/home/vanawhich mount
/sbin/mount


 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


magicfilter in FBSD 5.2 not working correctly

2003-12-14 Thread Hartmann, O.
Dear Sir.

Due to my bad English I will try to explain what kind of malfunktion I discovered
in the newest magicfilter 1.2 stuff. Prior to this malfunktion, I used magicfilter
in the desired way - fully functioning!

Base system is a FreeBSD 5.2-RC box acting as printserver for a couple of HP
network attached printers. Most of them are real PostScript printers with
Duplex facility and some colour printers have more than one paper tray which need
to be selected individually due to some transparencies inside some trays.

Here my specific problem.

I compiled ghostscript-gnu 7.07 from the ports and all the necessary stuff. I
also compiled a2ps-a4, psutils-a4 and magicfilter 1.2 as it is in the most recent
version.

My intention is to have one line for each PostScript printer which sets specific
PS parameters for each print queue, for example select tray 2 for transparencies or
coloured plain papers or select whether the document should be printed duplexed or
simplex (several scientific reports need to be printed simplex, others duplex).

For this reason I wrote a magicfilter-filter file with this entry:


 example --
# lj4600-00-05-162-auto-s-filter

0 %!filter /usr/local/bin/psset -q 
--setpagedevice=LanguageLevel:3;Duplex:false;Tumble:false
0 \004%!filter /usr/local/bin/psset -q 
--setpagedevice=LanguageLevel:3;Duplex:false;Tumble:false

for automatic tray selection, simplex print.

Another filter file shows


 example --
# lj4600-00-05-162-auto-d-filter

0 %!filter /usr/local/bin/psset -q 
--setpagedevice=LanguageLevel:3;Duplex:true;Tumble:false
0 \004%!filter /usr/local/bin/psset -q 
--setpagedevice=LanguageLevel:3;Duplex:true;Tumble:false

the same for duplex. I have three more with the --setpagedevice=MediaPosition:XX otion 
set to select the
tray. This works with original PS-documents great! And I confirm: with PS documents I 
can do everything
I want!

So, now I need to print PDF and plain ASCII and I did this before on FreeBSD 4.8 boxes 
with magicfilter 1.1
by adding a line at the end like this:

0 %PDF  fpipe `/usr/local/bin/pdf2ps  $FILE - 2/dev/null`

for converting PDF to PS files an reinject the output into the magicfilter to be 
printed
regarding to the PS-tags above (simplex, duplex, tray select and so on).

Another in the past working tag for plain ASCII conversion was this line:

-
default   pipe/usr/local/bin/a2ps -q -R --columns=1 -B -j --ppd -k 
--prologue=color -o -

(on a colour printer system).

I got output with borderlines and appropriate to the PS-tags above I could print 
duplex or simplex or
selective trays.


And this does not work anymore!


Every printer I examinded (HP LJ4000, LJ4100DTN, CLJ4500, 2x CLJ4600DTN, LJ III, 
LJ1100) I realized,
that the printed file was piped into the print queue as is, unconversted, unprocessed!

I reduced several magicfilter filter files up to four lines, the two for PostScript, 
one for PDF and
the last 'default' for conversion with a2ps to print stupdi ASCII plain text as PS 
data.


At last I will report, that I first used a working environment (printer setup, queue 
setup, magicfilter
setup, then I upgraded to FreeBSD 5.1 and the new magic filter stuff and since then 
nothing worked
as expected.
Another point seems to be that magicfilter isn't capable to inherit the ENVIRONMENT, 
so /usr/local/bin
is completely unknown if some filters like 'fixps' are needed. magicfilter should 
incorporate this
path, otherwise we need to link each needed program to /usr/bin and that's stupid 
stuff.


It would be nice if someone has some solutions out here.

By the way:

This works fine on stupid non-PS printers:


- HP DJ 1120C A3 format printer 
# dj1120-00-05-273-auto-s-filter

# PostScript
0 %! filter /usr/local/bin/gs -q -dSAFER -dNOPAUSE -r300 -sDEVICE=cdj550 
-sOutputFile=- -
0 \004%! filter /usr/local/bin/gs -q -dSAFER -dNOPAUSE -r300 -sDEVICE=cdj550 
-sOutputFile=- -

# Acrobat PDF
0 %PDF  ffilter /usr/local/bin/gs -q -dSAFER -dNOPAUSE -r300 -sPAPERSIZE=a3 
-sDEVICE=cdj550 -sOutputFile=-
$FILE -c
quit

--

hope this helps. Many thanks for staying up to the end of my report and have patience.

Oliver



--
MfG
O. Hartmann

[EMAIL PROTECTED]
--
Systemadministration des Institutes fuer Physik der Atmosphaere (IPA)
--
Johannes Gutenberg Universitaet Mainz
Becherweg 21
55099 Mainz

Tel: +496131/3924662 (Maschinenraum)
Tel: +496131/3924144 (Buero)
FAX: +496131/3923532
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


I can't mount dos formatted 1.44mb floppy in FreeBSD 5.0

2003-12-14 Thread nil ban

Hello,

Plz tell me how I'll be able to mount 1.44mb dos
formatted(fat filesystem) floppy.  Whenever I give the
command #mount -t msdos /dev/fd0 /mnt/floppy,
I get the following promt; 
msdosfs: /dev/fd0: Input/output error.
I also wrote msdosfs instead of msdos and try other
floppies but the result is same.  I can read and write
in those floppies in windows so I think the floppies
are not defective.

And plz tell me how to format floppy with 
FAT and UFS.

Thanks  Regards

__
Do you Yahoo!?
New Yahoo! Photos - easier uploading and sharing.
http://photos.yahoo.com/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


I can't mount dos formatted 1.44mb floppy in FreeBSD 5.0

2003-12-14 Thread nil ban
Hello,

Plz tell me how I'll be able to mount 1.44mb dos
formatted(fat filesystem) floppy.  Whenever I give the
command #mount -t msdos /dev/fd0 /mnt/floppy,
I get the following promt; 
msdosfs: /dev/fd0: Input/output error.
I also wrote msdosfs instead of msdos and try other
floppies but the result is same.  I can read and write
in those floppies in windows so I think the floppies
are not defective.

And plz tell me how to format floppy with FAT and 
UFS.

Thanks  Regards
Trumvect

__
Do you Yahoo!?
New Yahoo! Photos - easier uploading and sharing.
http://photos.yahoo.com/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ntpd problem

2003-12-14 Thread Josh Paetzel
On Sun, Dec 14, 2003 at 06:36:31PM +0100, Mathieu Arnold wrote:
 Hi,
 
 I have a few routers who don't have any 127.0.0.1, because their loopback has
 a a routable address so that I can use an IGP with them.
 Now, I guess that's the reason why ntpd is not working, and I was wondering
 how I could do have it work with another IP, I guess I'll have to add some
 config directive to tell it that it's internal ref clock is not 127.0.0.1,
 what I hope is that it's not hard coded in it, if that is, I'll have to
 create an lo1 with 127.0.0.1, but I'd rather not.
 
 -- 
 Mathieu Arnold

from /usr/src/contrib/ntp/ntpd/ntp_intres.c

/*
 * Big hack attack
 */
#define LOCALHOST   0x7f01  /* 127.0.0.1, in hex, of course */


I think that's your answer right there. :-/

Josh Paetzel

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: I can't mount dos formatted 1.44mb floppy in FreeBSD 5.0

2003-12-14 Thread Josh Paetzel
On Sun, Dec 14, 2003 at 10:14:48AM -0800, nil ban wrote:
 
 Hello,
 
 Plz tell me how I'll be able to mount 1.44mb dos
 formatted(fat filesystem) floppy.  Whenever I give the
 command #mount -t msdos /dev/fd0 /mnt/floppy,
 I get the following promt; 
 msdosfs: /dev/fd0: Input/output error.
 I also wrote msdosfs instead of msdos and try other
 floppies but the result is same.  I can read and write
 in those floppies in windows so I think the floppies
 are not defective.
 
 And plz tell me how to format floppy with 
 FAT and UFS.
 
 Thanks  Regards
 

For starters, I would install the /usr/ports/emulators/mtools port.  This 
allows you to format, read, and write to floppies like you would from DOS.

For using floppies under FreeBSD you may want to take a look at the following
handbook page: 

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/floppies.html

Thanks, 
Josh Paetzel

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: confirm 817357904d84cd1e47a2ecea977498053e7e7f69

2003-12-14 Thread dick hoogendijk
On Sun, 14 Dec 2003 08:39:16 -0800
[EMAIL PROTECTED] wrote:

 Your membership in the mailing list freebsd-questions has been
 disabled due to excessive bounces The last bounce received from you
 was dated 14-Dec-2003.  You will not get any more messages from this
 list until you re-enable your membership.  You will receive 3 more
 reminders like this before your membership in the list is deleted.
 
 To re-enable your membership, you can simply respond to this message
 (leaving the Subject: line intact), or visit the confirmation page at
 
 
 http://lists.freebsd.org/mailman/confirm/freebsd-questions/817357904d84cd1e47a2ecea977498053e7e7f69
 
 
 You can also visit your membership page at
 
 http://lists.freebsd.org/mailman/options/freebsd-questions/dick%40nagual.st
 
 
 On your membership page, you can change various delivery options such
 as your email address and whether you get digests or not.  As a
 reminder, your membership password is
 
 uvogdo
 
 If you have any questions or problems, you can contact the list owner
 at
 
 [EMAIL PROTECTED]


-- 
dick -- http://www.nagual.st/ -- PGP/GnuPG key: F86289CE
++ Running FreeBSD 4.9 ++ Debian GNU/Linux (Woody)
+ Nai tiruvantel ar vayuvantel i Valar tielyanna nu vilja
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


5.2 install problem (pc card)

2003-12-14 Thread Dan Rue
Hi, 
If I install FreeBSD 4.9 on my IBM 600x thinkpad, it prompts me for
kernel config, and then detects my pcmcia network card, allowing me to
do a net install.  

However, I would like to give 5.2 a whirl, but it does not detect my
card, and I can not find where to set it up.  I have looked online,
tried google, all with no success.  I did read on the 5.2 early adopters
doc that they changed the way the kernel config works, and I am
wondering if that is related.  

TIA, 
dan
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Edit handbook.

2003-12-14 Thread Simon Barner
 http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/smtp-auth.html
 
 It would be nice if you could add a point between points 3 and 4 on this
 page which says...
 
 If you haven't done a make world, do:
 
 cd /usr/src/lib/libsmutil
 make depend
 make obj
 make
 cd /usr/src/lib/libsm
 make depend
 make obj
 make
 
 Then you can build sendmail.
 
 Otherwise it won't let you. It took me ages to find this out since I'm a
 novice with FreeBSD. This might help other people.

Could you please file a problem report, otherwise your information will
probably get lost.

In case you aren't familiar with problem reports and the send-pr(1)
tool, you can find some hints here:

http://www.freebsd.org/doc/en_US.ISO8859-1/articles/problem-reports/


Simon


signature.asc
Description: Digital signature


Re: How to find out which drive isdown?

2003-12-14 Thread Dan Nelson
In the last episode (Dec 14), Joachim Dagerot said:
 I have seven disks in my cabinett, three of them builds a vinum
 RAID-5 plex.
 
 One of the disks in the RAID is down according to vinum list.
 
 I could use some honts on how to determine which physical disk is
 named what in my system, is there a good path to follow by disconnect
 one, write down whats left and then re-connect it and connect another
 one?

Vunum ld will list the disks and their status.  If you're not sure
which physical disk is da1, you'll probably have to look at the
jumper settings on each drive.  Another option is to run something like
camcontrol stop da1; camcontrol start da1 or dd if=/dev/da1
of=/dev/null, and see which disk's activity LED lights up.

http://www.vinumvm.org/vinum/replacing-drive.html has some instructions
on swapping out a failed drive.

-- 
Dan Nelson
[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: NIS authontication problem.

2003-12-14 Thread Dan Nelson
In the last episode (Dec 14), Hossein said:
   In our department we are going to use a 5.1 Stable FreeBSD, and
 it must run NIS client to authonticate the users through a Linux NIS
 server.
   The ypbind works well and when I do ypcat passwd I get the
 enteries in the passwd of the NIS server. I added the correct lines
 to passwd.master and group according to the handbook. But no user can
 log in and in the /var/log/auth.log it apears that the password is
 not corect.

If you edited passwd.master directly, you may need to run pwd_mkdb to
rebuild the spwd.db and pwd.db database files that the system uses. 
The vipw command does this automatically.  

Does finger somenisuser on the client print the right info?

-- 
Dan Nelson
[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to find out which drive isdown?

2003-12-14 Thread John Ekins
On Sun, 14 Dec 2003 14:27:23 -0600
Dan Nelson [EMAIL PROTECTED] wrote:

[snipped]
- Vunum ld will list the disks and their status.  If you're not sure
- which physical disk is da1, you'll probably have to look at the
- jumper settings on each drive. 

If you can see the serial numbers on the drives how about...

bilko# camcontrol devlist
SEAGATE ST318406LC 010A  at scbus0 target 0 lun 0 (pass0,da0)
SEAGATE ST318406LC 010A  at scbus0 target 1 lun 0 (pass1,da1)
SEAGATE ST318406LC 010A  at scbus0 target 2 lun 0 (pass2,da2)

then...

bilko# camcontrol inquiry 0:0:0
pass0: SEAGATE ST318406LC 010A Fixed Direct Access SCSI-3 device 
pass0: Serial Number 3FE294G67342CTJN
pass0: 160.000MB/s transfers (80.000MHz, offset 63, 16bit), Tagged Queueing
Enabled

-  Dan Nelson

Cheers,
John.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: I can't mount dos formatted 1.44mb floppy in FreeBSD 5.0

2003-12-14 Thread fbsd_user
Use this command
mount_msdos /dev/fd0 /mnt
cd /mnt
ls


not your command
mount -t msdos /dev/fd0 /mnt/floppy,


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of nil ban
Sent: Sunday, December 14, 2003 1:21 PM
To: [EMAIL PROTECTED]
Subject: I can't mount dos formatted 1.44mb floppy in FreeBSD 5.0

Hello,

Plz tell me how I'll be able to mount 1.44mb dos
formatted(fat filesystem) floppy.  Whenever I give the
command #mount -t msdos /dev/fd0 /mnt/floppy,
I get the following promt;
msdosfs: /dev/fd0: Input/output error.
I also wrote msdosfs instead of msdos and try other
floppies but the result is same.  I can read and write
in those floppies in windows so I think the floppies
are not defective.

And plz tell me how to format floppy with FAT and
UFS.

Thanks  Regards
Trumvect

__
Do you Yahoo!?
New Yahoo! Photos - easier uploading and sharing.
http://photos.yahoo.com/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
[EMAIL PROTECTED]

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


POP3 server.

2003-12-14 Thread fbsd_user
Does FBSD have an built in preconfigured pop3 server?
A pop3 server that's part of the FBSD basic install?
I know qpopper is in the ports.

Thanks

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


ipnat+ipfw + 3 gateways

2003-12-14 Thread hugle
hello all.
I'm trying to to smth like load balancing between 3 interfaces using
ipnat and ipfw

my gw's are:
213.252.192.161 on fxp0 with 213.252.192.162
213.252.192.141 on vlan0 with 213.252.192.142
212.59.9.1  on rl1 with 212.59.9.59


the ruleset i have is:
in ipfw:
ipfw add 1001 fwd 213.252.192.141 ip from 213.252.192.142 to any
ipfw add 1002 fwd 213.252.192.161 ip from 213.252.192.162 to any
ipfw add 1003 fwd 212.59.9.1 ip from 212.59.9.59 to any

and ipnat.rules
#games gw
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 53 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6111 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6112 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6113 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6114 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6115 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6116 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6117 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6118 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6119 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 4000 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port =  - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 7787 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 7877 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 7887 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 27005 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 27015 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 27960 - 213.252.192.142/32

#mail/web/irc/icq
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 22 - 213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 25 - 213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 79 - 213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 81 - 213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 110 - 213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 443 - 213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 2082 - 213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 5050 - 213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 5190 - 213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 1863 - 213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6667 - 213.252.192.162/32

#all other traffic go via gw3
map rl1 from 192.168.0.0/16 ! to 192.168.0.0/16 - 212.59.9.59/32
--
I think there is smth wrong with my IPNAT rules.
i'm probably doing smth wrong with those ports...
Could anyone help me ?
Thanks
-- 
Best regards,Hugle

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: POP3 server.

2003-12-14 Thread hugle
f Does FBSD have an built in preconfigured pop3 server?
f A pop3 server that's part of the FBSD basic install?
f I know qpopper is in the ports.
courier-imap has both POP3 and IMAP servers I think.

f Thanks

f ___
f [EMAIL PROTECTED] mailing list
f http://lists.freebsd.org/mailman/listinfo/freebsd-questions
f To unsubscribe, send any mail to
f [EMAIL PROTECTED]



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


gnome2-lite build fails

2003-12-14 Thread r t g tan
Hi,

Im getting the following output when I try
to make install the gnome2-lite meta-port,
for the build of mozilla-gtk2..

checking for minimum required perl version = 5.004... 5.00503
checking for full perl installation... no
configure error: Cannot find Config.pm or $Config{archlib}. A full
perl installation is required.

How can I solve this?

Tnx,

Note: I have perl v5.8.2 installed.
-- 
robert t g tan



pgp0.pgp
Description: PGP signature


Re: gnome2-lite build fails

2003-12-14 Thread Gautam Gopalakrishnan
On Sun, Dec 14, 2003 at 11:54:41PM +0100, r t g tan wrote:
 Hi,
 
   checking for minimum required perl version = 5.004... 5.00503
   checking for full perl installation... no
   configure error: Cannot find Config.pm or $Config{archlib}. A full
   perl installation is required.

Have you run use.perl port after installing 5.8.2? 

Gautam

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: ipnat+ipfw + 3 gateways

2003-12-14 Thread fbsd_user
I think you are confused. IPNAT is part of ipfilter firewall  and
IPFW is an different firewall who has his own NATD function. You can
not use one part from one and the other part from the other one.
They work as an set,  IPNAT/IPFILTER or IPFW/NATD. Your best bet is
to use IPNAT and it's firewall IPFILTER.

http://www.obfuscation.org/ipf/ipf-howto.html#TOC_1


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of hugle
Sent: Monday, December 15, 2003 3:42 AM
To: [EMAIL PROTECTED]
Subject: ipnat+ipfw + 3 gateways

hello all.
I'm trying to to smth like load balancing between 3 interfaces using
ipnat and ipfw

my gw's are:
213.252.192.161 on fxp0 with 213.252.192.162
213.252.192.141 on vlan0 with 213.252.192.142
212.59.9.1  on rl1 with 212.59.9.59


the ruleset i have is:
in ipfw:
ipfw add 1001 fwd 213.252.192.141 ip from 213.252.192.142 to any
ipfw add 1002 fwd 213.252.192.161 ip from 213.252.192.162 to any
ipfw add 1003 fwd 212.59.9.1 ip from 212.59.9.59 to any

and ipnat.rules
#games gw
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 53 -
213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6111 -
213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6112 -
213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6113 -
213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6114 -
213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6115 -
213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6116 -
213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6117 -
213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6118 -
213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6119 -
213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 4000 -
213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port =  -
213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 7787 -
213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 7877 -
213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 7887 -
213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 27005 -
213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 27015 -
213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 27960 -
213.252.192.142/32

#mail/web/irc/icq
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 22 -
213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 25 -
213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 79 -
213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 81 -
213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 110 -
213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 443 -
213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 2082 -
213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 5050 -
213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 5190 -
213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 1863 -
213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6667 -
213.252.192.162/32

#all other traffic go via gw3
map rl1 from 192.168.0.0/16 ! to 192.168.0.0/16 - 212.59.9.59/32
--
I think there is smth wrong with my IPNAT rules.
i'm probably doing smth wrong with those ports...
Could anyone help me ?
Thanks
--
Best regards,Hugle

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
[EMAIL PROTECTED]

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


How to list all packages in a given category?

2003-12-14 Thread Chris Pressey
Hi all,

Apologies in advance if this is a stupid question, but I couldn't find
anything relevant in the man pages or with Google:

How can I list all the packages I have installed in a certain category?

I'm thinking it should be something like 'pkg_info -C games', but AFAICT
pkg_info doesn't have any such option like that.

TIA,
-Chris
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ipnat+ipfw + 3 gateways

2003-12-14 Thread Tillman Hodgson
On Sun, Dec 14, 2003 at 06:01:08PM -0500, fbsd_user wrote:
 I think you are confused. IPNAT is part of ipfilter firewall  and
 IPFW is an different firewall who has his own NATD function. You can
 not use one part from one and the other part from the other one.
 They work as an set,  IPNAT/IPFILTER or IPFW/NATD. Your best bet is
 to use IPNAT and it's firewall IPFILTER.

Not necessarily true. I'm using IPF for packet filtering, IPNAT for NAT,
and IPFW for traffic shaping on the same firewall.

The order that a packet is mangled becomes important, but that's solved
simply by being careful when designing the firewall.

-T


-- 
Draw bamboos for ten years, become a bamboo, then forget all about bamboos
when you are drawing.
Georges Duthuit
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to list all packages in a given category?

2003-12-14 Thread Gautam Gopalakrishnan
On Sun, Dec 14, 2003 at 03:27:47PM -0800, Chris Pressey wrote:
 Hi all,
 
 Apologies in advance if this is a stupid question, but I couldn't find
 anything relevant in the man pages or with Google:
 
 How can I list all the packages I have installed in a certain category?
 
 I'm thinking it should be something like 'pkg_info -C games', but AFAICT
 pkg_info doesn't have any such option like that.

pkg_info -o '*' | grep ^games

hth
Gautam


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


null device in linux jail root

2003-12-14 Thread Charles Howse
Hi,

I installed Linux compatibility when I installed FBSD 4.8, but I've never 
really done anything with it.

While portupgrading , I was presented with a prompt that I don't know how to 
respond to:

You need to create the null device in your jail root environment.
Run the following commands outside the jail root environment,
and then press enter:
mkdir -m 0755 -p Jail Root dir/dev
rm -f Jail Root dir//compat/linux/dev/null
mknod Jail Root dir//compat/linux/dev/null c 2 2
chmod 666 Jail Root dir//compat/linux/dev/null

I found that this prompt comes from the makefile in the linux-base port, which 
I don't have access to at the moment, so I can't quote it exactly.

Clueless, I just pressed enter at the prompt, thinking I could always go back 
and do it later, or deinstall the port and reinstall it when I learn what to 
do.  

I know what a jail is, but how do I know what my Jail Root dir is?
Also, why the double slashes in the last 3 lines?  What do they mean?

What is the proper way to deal with this prompt?

-- 
Thanks,
Charles

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: How to list all packages in a given category?

2003-12-14 Thread Jez Hancock
On Sun, Dec 14, 2003 at 03:27:47PM -0800, Chris Pressey wrote:
 Apologies in advance if this is a stupid question, but I couldn't find
 anything relevant in the man pages or with Google:
mail list archives are a good bet too (MARC for example) :P

 How can I list all the packages I have installed in a certain category?
pkg_info -ao will list all packages including the origin path of the
port (the part of the ports tree it was originally installed from), so
as a hack you could do something like:

pkg_info -ao | grep -B 3 net

to list all packages in the 'net' category. With a bit of scripting you
could even make it a bit more readable.

the -O option is close but a bit awkward:

[23:40:45] [EMAIL PROTECTED] /root# pkg_info -O databases/mysql323-client
The following installed package(s) has databases/mysql323-client origin:
mysql-client-3.23.58

unfortunately it doesn't let you do '-O databases' alone.

-- 
Jez Hancock
 - System Administrator / PHP Developer

http://munk.nu/
http://jez.hancock-family.com/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: POP3 server.

2003-12-14 Thread Lowell Gilbert
fbsd_user [EMAIL PROTECTED] writes:

 Does FBSD have an built in preconfigured pop3 server?
 A pop3 server that's part of the FBSD basic install?

No.

 I know qpopper is in the ports.

And many others as well.

-- 
Lowell Gilbert, embedded/networking software engineer, Boston area: 
resume/CV at http://be-well.ilk.org:8088/~lowell/resume/
username/password public
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


php5 compile fail

2003-12-14 Thread Aleksander Rozman - Andy
Hi !

I am having weird problem. I tried to install php5 but it seems that 
FreeBSD has some stuff missing. In resolv.h, we are mising 4 aliases 
res_ninit, res_nmkquery, res_nsend, res_nclose. I was working with some 
people on php site, to disover why my compile fails and we came to this 
conclusion, that FreeBSD is missing this aliases. Did anybody else have the 
same problem? How did you solve it?

Take care,
Andy


**
*  Aleksander Rozman - Andy  * Fandoms:  E2:EA, SAABer, Trekkie, Earthie *
* [EMAIL PROTECTED] * Sentinel, BH 90210, True's Trooper,   *
*[EMAIL PROTECTED]   * Heller's Angel, Questie, Legacy, PO5, *
* Maribor, Slovenia (Europe) * Profiler, Buffy (Slayerete), Pretender*
* ICQ-UIC: 4911125   *
* PGP key available  *http://www.atechnet.dhs.org/~andy/ *
**
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: ipnat+ipfw + 3 gateways

2003-12-14 Thread fbsd_user
What do you think IPF is? That's the utility name used to load
filter rules into IPFILTER.
So you are doing just what I said.   The original poster said
nothing about doing traffic shaping.
IPNAT will not function with out IPFILTER rules. At lease  pass  in
all on all interfaces. He listed none in his post.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Tillman
Hodgson
Sent: Sunday, December 14, 2003 6:38 PM
To: [EMAIL PROTECTED]
Subject: Re: ipnat+ipfw + 3 gateways

On Sun, Dec 14, 2003 at 06:01:08PM -0500, fbsd_user wrote:
 I think you are confused. IPNAT is part of ipfilter firewall  and
 IPFW is an different firewall who has his own NATD function. You
can
 not use one part from one and the other part from the other one.
 They work as an set,  IPNAT/IPFILTER or IPFW/NATD. Your best bet
is
 to use IPNAT and it's firewall IPFILTER.

Not necessarily true. I'm using IPF for packet filtering, IPNAT for
NAT,
and IPFW for traffic shaping on the same firewall.

The order that a packet is mangled becomes important, but that's
solved
simply by being careful when designing the firewall.

-T


--
Draw bamboos for ten years, become a bamboo, then forget all about
bamboos
when you are drawing.
Georges Duthuit
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
[EMAIL PROTECTED]

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ipnat+ipfw + 3 gateways

2003-12-14 Thread Tillman Hodgson
On Sun, Dec 14, 2003 at 07:23:26PM -0500, fbsd_user wrote:
 What do you think IPF is? That's the utility name used to load
 filter rules into IPFILTER.
 So you are doing just what I said.   The original poster said
 nothing about doing traffic shaping.
 IPNAT will not function with out IPFILTER rules. At lease  pass  in
 all on all interfaces. He listed none in his post.

Unlike IPFW, IPF defaults to open (thus the reason for the
IPFILTER_DEFAULT_BLOCK kernel option). Thus IPF won't be blocking any of
the packets that IPNAT is NATing. For example, when I issue a `ipf -F
a`, my IPNAT rules continue to function normally.

-T


-- 
The person who takes the banal and ordinary and illuminates it in a new way can 
terrify.  We do not want our ideas changed.  We feel threatened by such 
demands.  I already know the important things! we say.  Then Changer comes 
and throws our old ideas away.
- The Zensufi Master
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


SUID program elimination / Bandwidth limitation

2003-12-14 Thread mike
I am securing a machine for my new job, and I need to obviously, find and
eliminate all suid programs. This should not be too difficult on a
developer only install, and hitting a man page should be the most
difficult task of finding out how to find and -s these programs. (Hell if
you want to save me that too, I wont complain.) My problem is, I know
there are programs that *need* to be suid, and I dont want to break the
system. I got a few, like passwd, but if someone here could write the ones
they know as well, so I dont overlook them and find them for the next two
months, it would be nifty keen of them, and it would make me feel all warm
inside, what, with it being christmas and all. Also, what's good software
to use for bandwidth limitation of the users on your FreeBSD server(s)?

Very lastly, I mirror this list for my website, but I am not on the list.
Please email me directly. Thanks.


-- 
Founder/WebMaster/ The unixhideout network
http://www.unixhideout.com
mike[AT]unixhideout.com


I have replaced the @ character in my email with [AT] to stop SPAM robots
from getting my email address off of various websites and/or archived
mailing lists I am subscribed to and using it to SPAM me. Depending on
your email client, if you want to email me back, you must replace [AT]
back with @ if you want the email to go through correctly.
-


-
Get your free @UnixHideout.com email address today.
   The UnixHideout network
http://www.unixhideout.com/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


(no subject)

2003-12-14 Thread Bobber Cheng


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


[no subject]

2003-12-14 Thread Bobber Cheng


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Sending email via PHP mail command in jail

2003-12-14 Thread Brent Wiese
I have a 4.9 system running various jails.

My clients want to be able to send confirmation emails via PHP's mail()
command.

Postfix doesn't seem to install right in the jail.

I found a program called mini-sendmail and compiled it to use a relay server
I have... It works fine from command line, but terminates oddly when called
from php.

Any suggestions?

I don't need an SMTP daemon running, just the ability to send confirmation
messages. Like I mentioned above, I have a relay box I can use if the
solution is something like mini-sendmail.

Thanks,
Brent


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Jdk 1.4.2 + FreeBSD 5.1 = applet fails

2003-12-14 Thread Ricardo Britto
Greetings!

I've just installed jdk1.4.2 via ports on my FreeBSD 5.1. I've already
tested java compiler and interpreter and seems to be ok. Also, I have
run an applet demo that is included with jdk - ok!

But the problem is when I try to open an applet in a remote site (ICQ
Go! for example). It always fails on opening and create a java core
dump file. I've already tested with Konqueror, Opera, Mozilla and
Mozilla Firebird browsers: all can run applets locally (except for opera).

There are some messages that appear. One example in Opera (with the
option -javadebug):

opera: [java] failed to load libawt.so:
/usr/local/jdk1.4.2/jre/lib/i386//libawt.so: Undefined symbol __xuname
opera: [java] failed to load libjawt.so:
/usr/local/jdk1.4.2/jre/lib/i386//libawt.so: Undefined symbol __xuname
opera: [java] failed to load a suitable awt library.  Java will not work

I searched in internet and found that some people are having the some
problem, but no solutions had been provided.

Any suggestions?

PS: I've already tried to install:
diablojdk (doesn't run on free 5.1)
linux-ibm-jdk14 (errors)


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


forwarding mail with sendmail

2003-12-14 Thread Ben Gnoinski
Hello I was just wondering if it was possible to forward e-mail messages using 
sendmail. If it is not possible could you give me an alternate solution in which I 
could transfer the e-mails to another e-mail account. Thank you for your time.

Ben Gnoinski
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: forwarding mail with sendmail

2003-12-14 Thread Jonathan T. Sage
Ben Gnoinski wrote:

Hello I was just wondering if it was possible to forward e-mail messages using sendmail. If it is not possible could you give me an alternate solution in which I could transfer the e-mails to another e-mail account. Thank you for your time.

Ben Gnoinski
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
take a look at 'man aliases' or google '.forward'  .forward is a file in 
your home directory that will forward all messages to the address(es) 
listed in that file.

~j

--
Jonathan T. Sage
Lighting  Scenic Design
Professional Web Design
[HTTP://www.theatre.msu.edu]
[EMAIL PROTECTED]
[PGP: 182C CF3F 93A9 1DAA 2EBE  D4D5 A159 96D9 452E A7F1]


pgp0.pgp
Description: PGP signature


Re[2]: ipnat+ipfw + 3 gateways

2003-12-14 Thread hugle
TH On Sun, Dec 14, 2003 at 07:23:26PM -0500, fbsd_user wrote:
 What do you think IPF is? That's the utility name used to load
 filter rules into IPFILTER.
 So you are doing just what I said.   The original poster said
 nothing about doing traffic shaping.
 IPNAT will not function with out IPFILTER rules. At lease  pass  in
 all on all interfaces. He listed none in his post.

TH Unlike IPFW, IPF defaults to open (thus the reason for the
TH IPFILTER_DEFAULT_BLOCK kernel option). Thus IPF won't be blocking any of
TH the packets that IPNAT is NATing. For example, when I issue a `ipf -F
TH a`, my IPNAT rules continue to function normally.

TH -T



As for now my rules are default to allow.
But I can't understand, why I can't use forward.
As i know, NAT is done before forwarding, so firstly packets, get
NAT'ed, and after they are forwarded to needed gateway.
I had these king of rules in ipfw+natd using fwd rules. So I thought
there is a must to use forward rule , but didn't find rule like
forward in IPF.

Actually it doesn't mather to me if it will be using ipnat+ipfw ar
ipnat+ipf.
THe main reason WHY i'm doing that is because of oidentd doesnt' work
with NATD.
but i've also heard that ipnat has better pperformanse as it runs in
kernel space (not user space like natd do).


now about this script.
The result I came to (depending on this FAQ
http://www.obfuscation.org/ipf/ipf-howto.html#TOC_1)
was to just remove ipfw rules (default to allow)

#gw2
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 53 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6111 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6112 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6113 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6114 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6115 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6116 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6117 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6118 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6119 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 4000 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port =  - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 7787 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 7877 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 7887 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 27005 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 27015 - 213.252.192.142/32
map vlan0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 27960 - 213.252.192.142/32

#gw1
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 22 - 213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 25 - 213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 79 - 213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 81 - 213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 110 - 213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 443 - 213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 2082 - 213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 5050 - 213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 5190 - 213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 1863 - 213.252.192.162/32
map fxp0 from 192.168.0.0/16 ! to 192.168.0.0/16 port = 6667 - 213.252.192.162/32
map fxp0 from 192.168.0.0/16 to 213.226.139.46 port = 7000 - 213.252.192.162/32

#all other traffic go via gw3
map rl1 from 192.168.0.0/16 ! to 192.168.0.0/16 - 212.59.9.59/32

default route is: 213.252.192.161

in MY opinion these rules should WORK. but as it seems, they don't

Any ideas?
Thanks, Jarek


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re[2]: ipnat+ipfw + 3 gateways

2003-12-14 Thread hugle
btw, why should i use forward?
cause system has ONE deufalt route, so if i nat via otehr interface,
teh packets don't know to wwhch GW they have to go.

So maybe i need to add default gateways to other interfaces ?

so i have:
default gw is 213.252.192.161
and default gw for 213.252.192.142 is 213.252.192.141
and deafult gw for 212.59.9.59 is 212.59.9.1

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]