SSH / D-Link Router
My problem is that ssh and telnet don't work. I get as far as the Password prompt, I type it in, and then ssh freezes for a couple of minutes until it probably goes in timeout and gives up. I came across this after a new installation. I googled about and on some advice tried adding the remote IP to hosts on the server. SSH then worked fine. Funny thing is on the next install SSH worked straight away. At install time theres a question (I answer yes to and then no) to do with inetd. I cant say exactly but I am sure I answered that differently last time even though I said yes to enabling the SSH deamon on both occasions. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: startkde
hello Eric, After installed the X window system and KDE I created the file ~/.xinitrc which contains; exec startkde after I created the file I could use startx to run KDE. I then setup KDM by editing the file /usr/X11R6/lib/X11/xdm/Xsession. I added the following to the file; case $# in 1) case $1 in kde) exec /usr/local/bin/startkde ;; failsafe) exec xtem -geometry 80x24-0-0 ;; esac esac Finally I added the following to /usr/X11R6/lib/X11/xdm/Xsetup_0; /usr/local/bin/kdmdesktop KDM loads but when I log in nothing happens, I just end up back at the login screen. This is all the info I can think of. If I missed any please let me know. Thanks again Brett On Thursday 17 June 2004 23:36, Brett Wiggins wrote: hello, I am having some problems with startkde. I have looked through the mailing list archive and the handbook and am still stuck. I set up my machine to run KDE as per the handbook chapter on the X window system. When I type startx KDE runs fine, when I type startkde I get the following output; Brett, startkde isn't working, because X11 has not be started yet, so there are no sessions for it to connect to.This is, iirc, the normal behavior. Generally, people could start a generic x session and run startkde from an xterm in that session. Having an exec startkde in your .xinitrc file just basically does this for you. As far as your other problem, we'd need more information about your setup. What did you do/not do to get kdm working. Give us the info and we should be able to help you. -- Eric F Crist Keep your pecker hard and your powder dry, and the world WILL turn. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
FBSD 4.10 - kernel TCP_SIGNATURE requirements
Greetings, I'm trying to find somebody who has been able to compile the TCP_SIGNATURE kernel option into their kernel successfully, to determine what dependencies exist for it to work properly. Background information, I installed a fresh copy on an i386 machine from the i386 ISO on the primary ftp server, with a Developer profile (full source without games/X-Windows). I have the output of where the kernel dumps, but I don't believe it would be of much help in this email. Any help would be greatly appriciated. thanks, charles ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: [A bit OT]Re: New user questions :)
On Thu, 17 Jun 2004 10:27 am, Jorn Argelo wrote: That advice may be OK for some things, but it doesn't make sense to make yourself compile such behemoths as Openoffice and etc unless you are in to pain and suffering for your entertainment. Heh, that's true. Though let's be honest, you have to try everything once, don't you think? I got no problems compiling KDE, but I don't really prefer using OOo. I'll use KOffice instead. May you have much good fortune! On my experience, you'll need it. It might depend on the system, but I have found that KWord crashes every time you use Save As and KSpread won't save AT ALL. Interestingly, Knoppix - which is a pretty comprehensive stand-alone Debian Linux system - ships with Open Office, but without KOffice, even though it uses KDE as its GUI. OO just WORKS without any hassles I know of. YMMV -- Regards, Brian ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
[FreeBSD]
I'm trying to configure my ftpd so I can access the http server from another computer. (for uploading web pages) According to The Complete FreeBSD (I am a complete newby) I need to add a line to my /etc/rc.local file I don't have one. I have a /etc/rc.conf Are they the same? Or do I need a new file? Next question The line I need to add ??? echo ftpd ftpd -a -D xxx.xxx.xxx (to restrict address to only one) (from what I gleaned from ftpd(8) of the manual) Later, Leon A fanatic is one who can't change his mind and won't change the subject. Sir Winston Churchill ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
usb audio
i have a Sony Vaio PCG-GRZ660, the onboard audio is a Yamaha AC-XG Sound Card. I also have an external creative labs USB Sound Card that i got working with device pcm in my kernel. The problem i am having is that the audio jumps and skips alot and isnt stable. does anyone know any suggestions?? the /dev/sndstat line is pcm0: USB Audio at addr ? (1p/0r/0v channels) pcm1: Intel ICH3 (82801CA) at io 0x1c00, 0x18c0 irq 9 bufsz 16384 (1p/1r/0v channels duplex) ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: [FreeBSD]: how to setup ftpd server?
LW Ellis wrote: I'm trying to configure my ftpd so I can access the http server from another computer. (for uploading web pages) According to The Complete FreeBSD (I am a complete newby) I need to add a line to my /etc/rc.local file I don't have one. I have a /etc/rc.conf Are they the same? Or do I need a new file? Next question The line I need to add ??? echo ftpd ftpd -a -D xxx.xxx.xxx (to restrict address to only one) (from what I gleaned from ftpd(8) of the manual) Please use a more appropriate subject for your questions!! --- Why are you not using inetd.conf for that? Then you don't need the rc.local file at all! I suppose, you have inetd running, unless in /etc/rc.conf you have a line like inetd_enable=NO FreeBSD 4 enables by default the inetd server. Then edit /etc/inetd.conf, and uncomment this line: #ftpstream tcp nowait root/usr/libexec/ftpd ftpd -l Next, restart inetd by sending the HUP signal to the executable: # kill -HUP pid-of-inetd (you know how to find the pid of the inetd daemon, don't you?) For security, edit /etc/hosts.allow; in your case: ftpd : xxx.xxx.xxx : allow ALL : ALL : deny The last line denies access to everything else, so that all lines below will have no effect. -- Once you've got this up and running, consider at a later stage to investigate how to use 'secure ftp', or sftp. This needs a different configuration and has nothing to do with above settings. It is much more secure (at least people say so). Regards, Rob. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: SSH / D-Link Router
Which d-link router is this that you were using? the 504T being talked about has only been out since march this year an install that worked on a previous router (for pop/smtp, never tried ssh) didn't work on this d-link. We are going to be testing this at work talking to d-link (as a reseller) if we find a problem. Graham Bentley wrote: I came across this after a new installation. I googled about and on some advice tried adding the remote IP to hosts on the server. SSH then worked fine. Funny thing is on the next install SSH worked straight away. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: [FreeBSD]
On 18 Jun 2004 at 0:48, LW Ellis wrote: Good morning! I'm trying to configure my ftpd so I can access the http server from another computer. (for uploading web pages) According to The Complete FreeBSD (I am a complete newby) I need to add a line to my /etc/rc.local file I don't have one. I have a /etc/rc.conf Are they the same? Or do I need a new file? I do not think this applies any more. The only thing you have got to do after a fresh install (if you did not do it during the install) is to edit /etc/inetd.conf On line 7, remove the # (comment) on the line starting with #ftp stream tcp and your ftp server should be up and running after a restart. You may also check that your /etc/rc.conf contains the line inetd_enable=YES Next question The line I need to add ??? echo ftpd ftpd -a -D xxx.xxx.xxx (to restrict address to only one) (from what I gleaned from ftpd(8) of the manual) Seems like some fine tuning you can safely save for a later time. -Kjell Later, Leon ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: [FreeBSD] Ftp Server
Good morning (very late at nite for me) Kjell And thanx to you!!! I solved my httpd problem with your help. And installed PHP with much trouble. I removed that hash #, And I can access FTP OK, but I need to point the ftp to the right directory /usr/local/www/data (I believe) How do I do this? ftp stream tcp nowait root /usr/libexec/ftpd ftpd -l Leon ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: [FreeBSD] Ftp Server
Sounds OK, but I am a complete newby.. I couldn't find anything in the book I have about that. This set up is on a local network, no access outside the network. I'm trying to set up a testing server. And need to access it from within the network to publish webpages Please point me in the right direction Thanx Leon Set the user's home directory (of the user you want to transfer the data with) to that directory. Of course, you need write rights there. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: [FreeBSD] Ftp Server
but I need to point the ftp to the right directory /usr/local/www/data (I believe) How do I do this? Set the home directory of that user to /usr/local/www/data. Use 'vipw' to edit the password file directly. -- Cordula's Web. http://www.cordula.ws/ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: firefox not launching since upgrade to 0.9_1
On Thu, 17 Jun 2004 00:36:14 -0400 [EMAIL PROTECTED] wrote: would anyone have ideas about what might be causing this? According to someone who had a similar (the same?) problem, you've have to remove the file prefs.js from your profiles directory and it should work again. Hope this helps! :-) Bye Marc -- And what rough beast, its hour come round at last, Slouches towards Bethlehem to be born? W.B. Yeats, The Second Coming ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: firefox not launching since upgrade to 0.9_1
On Thu, 17 Jun 2004 15:47:02 +0200 gaf [EMAIL PROTECTED] wrote: [firefox woes] Firefox 0.9 won´t load under XP either. Try removing prefs.js from your %APPDATA%\Mozilla\Firefox\Profiles\something directory, that should get firefox running again. Bye Marc -- And what rough beast, its hour come round at last, Slouches towards Bethlehem to be born? W.B. Yeats, The Second Coming ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
IPFW log results analysis
Is there a tool for FBSD like logwatch on Linux, which can provide a detailed but still somehow summarized output based on the logging results of IPFW. I mean more detailed than this from the daily security run: 02010557 48486 deny log ip from any to any out 1 1026 49716 deny ip from any to any in setup 10003 3859828227 deny ip from any to any in ... and more like this. ### Logged packets on interface eth0: From 4.10.38.220 (4.10.38.220). To 212.146.89.141 (212.146.89.141). Service: 2745 (tcp/2745) (,eth0,none) - 3 packet(s) Total of 3 packet(s). Total of 3 packet(s). From 4.10.95.247 (4.10.95.247). To 212.146.89.140 (212.146.89.140). Service: swat (tcp/901) (,eth0,none) - 1 packet(s) Total of 1 packet(s). To 212.146.89.141 (212.146.89.141). Service: swat (tcp/901) (,eth0,none) - 1 packet(s) Total of 1 packet(s). Total of 2 packet(s). ### Thanks Uwe Kolsch ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
ImageMagick
Hi, I am trying to install IM from the ports collection and have come across this showstopper. src/contrib.mak:8684: warning: ignoring old commands for target `obj/stp.dev' src/gnudevs.mak:84: warning: overriding commands for target `obj/gdevstp.o' src/contrib.mak:8688: warning: ignoring old commands for target `obj/gdevstp.o' src/gnudevs.mak:94: warning: overriding commands for target `obj/cdj670.dev' src/contrib.mak:8310: warning: ignoring old commands for target `obj/cdj670.dev' src/gnudevs.mak:99: warning: overriding commands for target `obj/cdj850.dev' src/contrib.mak:8313: warning: ignoring old commands for target `obj/cdj850.dev' src/gnudevs.mak:104: warning: overriding commands for target `obj/cdj890.dev' src/contrib.mak:8319: warning: ignoring old commands for target `obj/cdj890.dev' src/gnudevs.mak:109: warning: overriding commands for target `obj/cdj1600.dev' src/contrib.mak:8322: warning: ignoring old commands for target `obj/cdj1600.dev' src/gnudevs.mak:113: warning: overriding commands for target `obj/gdevcd8.o' src/contrib.mak:8326: warning: ignoring old commands for target `obj/gdevcd8.o' src/gnudevs.mak:125: warning: overriding commands for target `obj/cdj880.dev' src/contrib.mak:8316: warning: ignoring old commands for target `obj/cdj880.dev' ./obj/genconf ./obj/devs.tr -h ./obj/gconfxx.h -p %ss -pl -l%ss -pL -L%ss -ol ./obj/ld.tr Can't read ./obj/lvga256.dev. gmake: *** [obj/ld.tr] Error 1 *** Error code 2 So as far as I can tell having run locate.updatedb the referenced file it's complaining about doesn't exist. Can anyone point me in the right direction to get this installed? I have in the past installed this program from ports and had no issues. Thanks in Advance LukeK -- Luke Kearney [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
login troubles (password prompt is slow to appear)
Hello, I'm new to FreeBSD and am trying to work on a remote server. I started out with 5.2, but it was a NIGHTMARE trying to install the combination of software I want, because certain ports didn't work, certain packages didn't work, and I had to use older versions than what I wanted sometimes. In configuring the system, I had to reinstall Python. From that moment on I have had the following problem: Connecting via SSH displays the login prompt immediately, but after typing a username it takes between 30 seconds to 60+ for the password prompt to appear. Sometimes Putty times out waiting for a connection. Blaming 5.2 for my problems, I had the drive wiped and 4.9 installed... and the password prompt still takes forever to appear. Anyone know what's going on? I heard something about FreeBSD doing a DNS on every connecting IP and that adding my IP (which is unfortunately not static) to etc/hosts would bypass the lookup... but it still takes a long time. For about 2 weeks before I screwed up the system, I could SSH in with no problems. What's odd is that a fresh install of 4.9 is doing the same thing. Any help or suggestions are appreciated. Rockford ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: [FreeBSD] Ftp Server
I do not quite see the problem. Are you running your FTP program on a Windows PC trying to access the ftp server on the FreeBSD PC? If that is the case you use the FTP program (I use CuteFTP or WS_FTP) on the Windows PC to navigate to the desired folder on the FreeBSD PC Then you will be able to download most files to your Windows PC. But what you can upload will depend upon permissions and what user you logged in as. Kjell It won't let me above the default FTP folder. I use Dreamwever, but I tried with Front page, and WS_FTP, and none could get above the default folder. I've been reading my book, and the FTP(8) man pages, maybe I need to run the FTPD utility. Apparently it is sent up only as anonymous FTP... I never askes for a user name or password. PS I meant to say I installed PHP with OUT any trouble. Leon ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: IPFW log results analysis
On 2004-06-18 10:43, Uwe Kolsch [EMAIL PROTECTED] wrote: Is there a tool for FBSD like logwatch on Linux, which can provide a detailed but still somehow summarized output based on the logging results of IPFW. I mean more detailed than this from the daily security run: 02010557 48486 deny log ip from any to any out 1 1026 49716 deny ip from any to any in setup 10003 3859828227 deny ip from any to any in ... and more like this. You can always write your own shell scripts to parse ipfw logs ;-) I haven't heard of any summarizing tools, but if you feel that scripting your own is too much it shouldn't be too hard to roll a few custom scripts if you tell me what you're looking for in such a report. - Giorgos ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: IPFW log results analysis
Jow, Giorgos Keramidas wrote: On 2004-06-18 10:43, Uwe Kolsch [EMAIL PROTECTED] wrote: Is there a tool for FBSD like logwatch on Linux, which can provide a detailed but still somehow summarized output based on the logging results of IPFW. I mean more detailed than this from the daily security run: 02010557 48486 deny log ip from any to any out 1 1026 49716 deny ip from any to any in setup 10003 3859828227 deny ip from any to any in ... and more like this. You can always write your own shell scripts to parse ipfw logs ;-) I haven't heard of any summarizing tools, but if you feel that scripting your own is too much it shouldn't be too hard to roll a few custom scripts if you tell me what you're looking for in such a report. You can send your daily logs to dshield.org and they will give a daily overview over what you send. They will use your information to do ' distributed IDS '. That means if you get port probed and the person doing that hits your network and other networks regularly, there will be a warning send out to the ISP that this person is being very abusive. I use it myself, giving a match on my external interface and it will send just that. Perhaps you can view their script, (perl), and adopt it to create the summary yourself. - Giorgos Cheers -- Kind regards, Remko Lodder |[EMAIL PROTECTED] Reporter DSINet|[EMAIL PROTECTED] Projectleader Mostly-Harmless |[EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: IPFW log results analysis
-Original Message- From: Giorgos Keramidas [mailto:[EMAIL PROTECTED] Sent: 18 June 2004 11:34 AM To: Uwe Kolsch Cc: [EMAIL PROTECTED] Subject: Re: IPFW log results analysis On 2004-06-18 10:43, Uwe Kolsch [EMAIL PROTECTED] wrote: Is there a tool for FBSD like logwatch on Linux, which can provide a detailed but still somehow summarized output based on the logging results of IPFW. I mean more detailed than this from the daily security run: 02010557 48486 deny log ip from any to any out 1 1026 49716 deny ip from any to any in setup 10003 3859828227 deny ip from any to any in ... and more like this. You can always write your own shell scripts to parse ipfw logs ;-) And how do I use a keyboard? I haven't heard of any summarizing tools, but if you feel that scripting your own is too much it shouldn't be too hard to roll a few custom scripts if you tell me what you're looking for in such a report. - Giorgos ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: IPFW log results analysis
Uwe Kolsch wrote: And how do I use a keyboard? connect it to a computer and start typing the letters you wish :) Or perhaps another person on this list wrote a summary tool already... Someone -- Kind regards, Remko Lodder |[EMAIL PROTECTED] Reporter DSINet|[EMAIL PROTECTED] Projectleader Mostly-Harmless |[EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: portsdb -Uu trouble in www/mod_auth_check
On Wed, 16 Jun 2004 10:46:01 -0500 Guillermo Garc_a-Rojas [EMAIL PROTECTED] wrote: Ooops! Today the problem disapeared itself. I didn't anything else to fix it. Same problem. I was using a refuse file. So I stop using it and the problem disapeared. On Wed, 16 Jun 2004 19:02:55 +0400, Alexey Karguine [EMAIL PROTECTED] wrote: Hello! I have FreeBSD 4.10 machine. Every night this machine sinchronizes the ports-tree using cvsup by the cron and runs 'portsdb -Uu'. One week ago i recieved this letter from the cron daemon: -- cut -- Updating the ports index ... Generating INDEX.tmp - please wait..mod_auth_pwcheck-1.1: /usr/ports//apache13 non-existent -- dependency list incomplete === www/mod_auth_pwcheck failed *** Error code 1 1 error Before reporting this error, verify that you are running a supported version of FreeBSD (see http://www.FreeBSD.org/ports/) and that you have a complete and up-to-date ports collection (INDEX builds are not supported with partial or out-of-date ports collections). If so, then report the failure to [EMAIL PROTECTED] together with relevant details of your ports configuration (including FreeBSD version, environment and /etc/make.conf settings). *** Error code 1 Stop in /usr/ports. *** Error code 1 Stop in /usr/ports. failed to generate INDEX! portsdb: index generation error -- cut -- I tried to 'portupgrade -f portupgrade' and to manually cvsuping ports-tree. That steps didn't give any results. What can I do to fix this problem. Thanks! P.S. Sorry for my english, I'm not real englishman. =) --bm ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] --bm ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
copy or listing problem
Hello I use freebsd4.9 I have thousands of files in my any directory. and I need to copy them to another directory. but when I started to copy them I got error as below; /bin/cp: Argument list too long. Do I have to copy them in pieces ? What shall I do ? Thanks ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Problems installing FreeBSD with 3ware 9500S-4LP
Hi, finally i received my new raid-controller, bu i have problems installing FreeBSD on it :/ I tried different releases and current snapshots... 5.1-Release w ACPI: Loading twa.ko (binary distribution of 3ware.com for 5.2) in sysinstall failes. w/o ACPI: same as w ACPI. 5.2-Release w ACPI: loaded twa.ko in sysinstall. install went ok, on next reboot it just halts after BTX-Loader. I cannot load twa.ko in loader. w/o ACPI: same as w ACPI. 5.2.1-Release identical to 5.2 Release. 5.2-CURRENT-20040420 w ACPI: install went ok, on next reboot the following message scrolls the screen and it reboots: Console internal keyboard/video (or sth. like that) w/o ACPI: same as w ACPI. 5.2-CURRENT-20040504 identical to 5.2-CURRENT-20040420 5.2-CURRENT-20040617 identical to 5.2-CURRENT-20040420 I attached a normal and a verbose-dmesg. As I'm new to BSD i don't know what to do now. Thanks, Patrick -- === Patrick Hurrelmann | Programming today is a race between software Mannheim, Germany | engineers striving to build bigger and better | idiot-proof programs, and the Universe trying outi at bytephobia.de | to produce bigger and better idiots. So far, www.bytephobia.de | the Universe is winning. - Rich Cook dmesg.txt Description: Binary data dmesg_verbose.txt Description: Binary data ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: IPFW log results analysis
On 2004-06-18 12:45, Remko Lodder [EMAIL PROTECTED] wrote: Uwe Kolsch wrote: And how do I use a keyboard? connect it to a computer and start typing the letters you wish :) Or perhaps another person on this list wrote a summary tool already... Someone I have a few summarizing scripts at home, that list various interesting things like: Unique hosts blocked (name or address if DNS fails). Unique ports blocked and number of hits. Unique hosts that hit a port and number of hits. I just didn't know if *this* is what the OP wanted. - Giorgos ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: copy or listing problem
Yavuz Malak wrote: Hello I use freebsd4.9 I have thousands of files in my any directory. and I need to copy them to another directory. but when I started to copy them I got error as below; /bin/cp: Argument list too long. Do I have to copy them in pieces ? What shall I do ? Thanks Greetings! You could do it with a shell script: [SOF] #!/bin/sh for file in * do if [ -f $file ] then cp $file $target_dir #Define $target_dir yourself fi done [EOF] This will only do files, not directories or other special files. If you want to copy directories as well, the script will quickly grow bigger. Read man sh for more (maybe even too much) info on how to do anything with scripts. -Henrik W Lund ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Warning: E-mail viruses detected
Our virus detector has just been triggered by a message you sent:- To: [EMAIL PROTECTED] Subject: Re: Your archive Date: Fri Jun 18 13:56:40 2004 One or more of the attachments (your_archive.pif) are on the list of unacceptable attachments for this site and will not have been delivered. Consider renaming the files or putting them into a zip file to avoid this constraint. The virus detector said this about the message: Report: Shortcuts to MS-Dos programs are very dangerous in email (your_archive.pif) -- MailScanner Email Virus Scanner www.mailscanner.info Mailscanner thanks transtec Computers for their support ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
about cross-compiling
Hi all, I don't know How to cross-compiling FreeBSD for ia64 on i386 system.Please help me. Regards, Annie _ MSN Explorer: http://explorer.msn.com/lccn/ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Ethereal + gtk + glib installation in freeBSD-4.7
hi all, i have a problem in intallation of glib-1.2.0 ,i have got the source code of glib-1.2.0, in the glib-1.2.20 directory i issued following : 1. ./configure 2. make this gives erroro message : ln : libgplugin_a.la : Operation not supported plz let me know why this error comes and how to remove it... Also tell me the steps to install ethereal ( from source code) on freeBSD-4.7.. Thanx Rgds, Manish _ Looking for something? Cant find it anywhere? http://go.msnserver.com/IN/50756.asp Log onto baazee.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Can I cross compile FreeBSD?
Hi, I've installed FreeBSD-i386.And I want to cross compile FreeBSD for ia64 on i386, how should I do? Regards, Annie _ MSN Messenger: http://messenger.msn.com/cn ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
identifying single drives on hardware RAID0
Hi all, Probably a dumb question here : but I want to identify a specific drive in RAID0 config, but only the logical drive is reported dmesg. Is this even possible ? Thanks in advance, Ruben ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Sendmail for Large Sites
How well does the administration of Sendmail scale up to sites serving as many as 25,000 users? At this moment, everything is more or less on the table, but what I envision is 25,000 work stations or so, each using Microsoft Outlook and several Sendmail servers serving the multitudes. We might use dns-based round-robin load balancing for all I know. This is all simply a mental exercise at this point, but the hardware is already in place running a commercial package which may have to be replaced if it can't be made to perform properly and soon. I am mainly interested in Sendmail's capacity at this time in order to suggest it as a possibility if it is realistic to do so. There are other considerations such as the facts that all incoming and outgoing messages are checked for malicious attachments. ldap is used to drive the setting of customer mail delivery preferences and even their user ID choice. To use an American vernacular, it is a tall order. Many thanks. Martin McCormick WB5AGZ Stillwater, OK OSU Information Technology Division Network Operations Group ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: IPSec Routing and Interfaces, ping problem (solved!?)
On Fri, 18 Jun 2004, Andre Rein wrote: I'm able to ping 10.0.0.1 now from my vpnclient and ping the vpnclient from 10.0.0.1 without any trouble. The only problem I get, is to ping the vpnclient from the vpnserver. It won't work. So how should I setup the server to ping the client? Am I just blind and don't see my mistake? think I found a workaround. I tried: ifconfig gif1 create ifconfig gif1 inet 10.0.0.124 192.168.10.1 netmask 255.255.255.252 Without the gifconfig officialip officialip thing Now i can add my route: route add -net 192.168.10/30 192.168.1.1 and pinging from the VPN Server to the other network works fine. don't know if it's a awesome solution, but it works ... gruss/regards Andre -- And some greetings from the Toaster Plata Verata Nectu ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
freebsd and dns
Hi all, I hope someone out there can give me a hand with this important query!! My company has a freebsd server that is used as a secondary DNS server. Our ISP also get our DNS entries from this server (they shadow them on thier servers). Since this morning, no-one has been able to send email to us, connect via vpn or anything else for that matter. External connections from the company are workign fine (i.e. we can send emails - just not recieve them!) Our ISP has said that they have checked and their shadow dns servers have no information in them. They have attempted to pick up this information from my freebsd server but supposedly this has returned no information. I have looked in the /usr/local/etc/namedb directory and can see 2 fioles that contain the dns information: db.company.co.uk.external and db.company.co.uk.internal Is there anything I have to do to get these picked up? My freebsd/unix knowledge is basic unfortunatley. Is it maybe that the dns service is not started? Am I looking in the wrong place for the DNS files? Any help greatly appreciated Best regards Brad _ It's fast, it's easy and it's free. Get MSN Messenger today! http://www.msn.co.uk/messenger ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Ethereal + gtk + glib installation in freeBSD-4.7
Manish Gautam [EMAIL PROTECTED] wrote: hi all, i have a problem in intallation of glib-1.2.0 ,i have got the source code of glib-1.2.0, in the glib-1.2.20 directory i issued following : Is there a reason you are trying to compile yourself instead of just using the ports? 1. ./configure 2. make this gives erroro message : ln : libgplugin_a.la : Operation not supported plz let me know why this error comes and how to remove it... Also tell me the steps to install ethereal ( from source code) on freeBSD-4.7.. cd /usr/ports/net/ethereal make install clean -- Bill Moran Potential Technologies http://www.potentialtech.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
how to processi log files before rotation.
2 questions ... 1. Where is the right, or standard place to save shell scripts that I want to use for administrative, or any other tasks. Some place on the path I suppose. 2. I'd like to process my maillog and maillog.*.gz files just before the maillog it is rotated into maillog.1.gz and maillog.7.gz is discarded. I've written a couple of simple scripts to process the files and report the number total number of messages blocked with the DNSBL filters for today and the last 7 days, as well as the numbers for each of the DNSBL lists that I use. It also processes the maillog file and produces a total number blocked for each user and emails that and a list of the messages blocked to that user so that the user can check to make sure that they are not missing good email. I'd like to schedule the DNSBL status scripts to run every night just before the maillog rotation happens. I've found where in the /etc/crontab the log file rotation is scheduled, but I don't know if there is a way to ensure that my status scripts start, and run to completion before the logfile rotation starts. As a test I added a couple of lines to run every 2 minutes to see what order they executed in and found that the order of the lines in crontab doesn't guarantee order of execution ... or at least completion of the commands. The commands I added were more or less as follows: */2 * * * * root /root/dnsblstat */2 * * * * root mail -s test line 1 my_email_addr */2 * * * * root mail -s test line 2 my_email_addr What I found was that the dnsblstat never completed before the two following email commands, and sometimes the test line 2 email came in before the test line 1. As a brute force approach, I could schedule the dnsblstat to run some number of minutes before midnight, to make sure it completed before the log files were rotated out from under it, but then I might miss a few discards, and I wanted to show each user every email that was discarded. A different approach would be to process the maillog.1.gz file after it is created, and to collect statistics for today and the last 6 days instead of today and the last 7 days. I sure this is a standard problem with a correct solution, so how do you guys handle it? Thanks, Cla. (sorry for the verbosity) ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: freebsd and dns
Hi, ps -auxw| grep named and see if its running. Hi all, I hope someone out there can give me a hand with this important query!! My company has a freebsd server that is used as a secondary DNS server. Our ISP also get our DNS entries from this server (they shadow them on thier servers). Since this morning, no-one has been able to send email to us, connect via vpn or anything else for that matter. External connections from the company are workign fine (i.e. we can send emails - just not recieve them!) Our ISP has said that they have checked and their shadow dns servers have no information in them. They have attempted to pick up this information from my freebsd server but supposedly this has returned no information. I have looked in the /usr/local/etc/namedb directory and can see 2 fioles that contain the dns information: db.company.co.uk.external and db.company.co.uk.internal Is there anything I have to do to get these picked up? My freebsd/unix knowledge is basic unfortunatley. Is it maybe that the dns service is not started? Am I looking in the wrong place for the DNS files? Any help greatly appreciated Best regards Brad _ It's fast, it's easy and it's free. Get MSN Messenger today! http://www.msn.co.uk/messenger ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: freebsd and dns
Hi, don't meant to discomfort you, but is it by any chance a bit of an older version of bind 8? In that case, some Evil Person [tm] may have had his or her wicked ways with your machine. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: freebsd and dns
Bradley McGuigan [EMAIL PROTECTED] wrote: I hope someone out there can give me a hand with this important query!! My company has a freebsd server that is used as a secondary DNS server. Our ISP also get our DNS entries from this server (they shadow them on thier servers). Since this morning, no-one has been able to send email to us, connect via vpn or anything else for that matter. External connections from the company are workign fine (i.e. we can send emails - just not recieve them!) Our ISP has said that they have checked and their shadow dns servers have no information in them. They have attempted to pick up this information from my freebsd server but supposedly this has returned no information. I have looked in the /usr/local/etc/namedb directory and can see 2 fioles that contain the dns information: db.company.co.uk.external and db.company.co.uk.internal Is there anything I have to do to get these picked up? I assume it was working before? Did you change anything? My freebsd/unix knowledge is basic unfortunatley. Nothing quite as frustrating as being expected to admin a system you know very little about! Is it maybe that the dns service is not started? At the console, enter sockstat -4 | grep 53. If that displays lines showing named listening on interfaces, then it's running, if not, then it's failed. Check /var/log/messages for information about bind starting up or shutting down. This isn't the _solution_ to your problem, but if bind isn't started, rebooting the machine should cause it to restart. Just log in as root and enter reboot If that gets things working again, then you need to do some hunting to figure out why named stopped. If named just won't start, check /var/log/messages for lines about named. The most common problem I see with this is that people change the config files, and make a typo and named then doesn't start, or refuses to load certain DNS zones. /var/log/messages will have details about what syntax errors were encountered in this case. Am I looking in the wrong place for the DNS files? Possibly. Bind config files are usually in /etc/namedb on FreeBSD. But if a different version of Bind was installed from ports, the location you describe would be correct for its config. -- Bill Moran Potential Technologies http://www.potentialtech.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: freebsd and dns
you can make it running with named -g but then, if you reboot the machine you will have start it again. Take a look in the Handbook and see how to start services at boot time. Renato, Many thanks for your quick response. This is obviously what the problem is as I can now see that it is not running. Are you please able to provide me with the command to start named? Many thanks Brad From: Renato Marques [EMAIL PROTECTED] To: Bradley McGuigan [EMAIL PROTECTED],[EMAIL PROTECTED] Subject: Re: freebsd and dns Date: Fri, 18 Jun 2004 09:46:56 -0300 Hi, ps -auxw| grep named and see if its running. Hi all, I hope someone out there can give me a hand with this important query!! My company has a freebsd server that is used as a secondary DNS server. Our ISP also get our DNS entries from this server (they shadow them on thier servers). Since this morning, no-one has been able to send email to us, connect via vpn or anything else for that matter. External connections from the company are workign fine (i.e. we can send emails - just not recieve them!) Our ISP has said that they have checked and their shadow dns servers have no information in them. They have attempted to pick up this information from my freebsd server but supposedly this has returned no information. I have looked in the /usr/local/etc/namedb directory and can see 2 fioles that contain the dns information: db.company.co.uk.external and db.company.co.uk.internal Is there anything I have to do to get these picked up? My freebsd/unix knowledge is basic unfortunatley. Is it maybe that the dns service is not started? Am I looking in the wrong place for the DNS files? Any help greatly appreciated Best regards Brad _ It's fast, it's easy and it's free. Get MSN Messenger today! http://www.msn.co.uk/messenger ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] _ Express yourself with cool new emoticons http://www.msn.co.uk/specials/myemo ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: natd firewall settings for vpn
Jim Freeze [EMAIL PROTECTED] wrote:
I am trying to configure my firewall to allow packets through
for a VPN connection. I am running FBSD 5.2 as my router and am trying
to connect my laptop from behind the router to our work computer.
The laptop is running OSX 10.3.4 with a Nortel Networks client
made by Apani.
The VPN connection works when the laptop is connected directly
to my DSL modem or when behind the gateway when I set the
firewall type to 'open'.
Support at Apani says that I need to open port 500 and
allow protocols 50 and 51 (whatever that means).
I found the firewall settings below from the archive and have
implemented them before the divert statement (after also)
but with no luck.
# Allow IPSec clients to run behind firewall
# --- ISAKMP - allow key exchange over UDP 500
${fwcmd} add pass udp from ${inet}:${imask} to any 500 in recv ${iif}
${fwcmd} add pass udp from ${oip} to any 500 out xmit ${oif}
${fwcmd} add pass udp from any 500 to ${inet}:${imask} in recv ${oif}
${fwcmd} add pass udp from any 500 to ${inet}:${imask} out xmit ${iif}
# --- ESP - allow protocol 50 (ESP) for everyone ;-)
${fwcmd} add pass esp from any to any
Does anyone have a firewall with a working nortel client behind it.
I would greatly appreciate any help.
Try adding a rule add pass ah from any to any ... that's protocol 51.
(not really an expert or anything, but just happened to notice that missing)
--
Bill Moran
Potential Technologies
http://www.potentialtech.com
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
kdm questions
hello (again), I am still having some problems with kdm, I have searched (again) the archives and the handbook. Below are the steps I took, files I edited during setup. After I installed the X window system and KDE I created the file ~/.xinitrc which contains; exec startkde after I created the file I could use startx to run KDE. I then setup KDM by editing the file /usr/X11R6/lib/X11/xdm/Xsession. I added the following to the file; case $# in 1) case $1 in kde) exec /usr/local/bin/startkde ;; failsafe) exec xtem -geometry 80x24-0-0 ;; esac esac Finally I added the following to /usr/X11R6/lib/X11/xdm/Xsetup_0; /usr/local/bin/kdmdesktop KDM loads but when I log in nothing happens, I just end up back at the login screen. This is all the info I can think of. If I missed any please let me know. Thanks again Brett ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
download
please can I download FreeBSD for free without paying? where and how can i get FreeBSD - ALL-NEW Yahoo! Messenger - so many all-new ways to express yourself ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: download
Yes its free. You can download it via ftp: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mirrors- ftp.html On Jun 18, 2004, at 9:11 AM, Major Hosea wrote: please can I download FreeBSD for free without paying? where and how can i get FreeBSD - ALL-NEW Yahoo! Messenger - so many all-new ways to express yourself ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] Lucas Holt [EMAIL PROTECTED] FoolishGames.com (Jewel Fan Site) JustJournal.com (Free blogging) ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: download
hey :) please can I download FreeBSD for free without paying? where and how can i get FreeBSD Try this website. It should have all the info you need to download freeBSD http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mirrors.html Hope this helps. Brett ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Tuneable Parameters
Richard Burnett-Godfree [EMAIL PROTECTED] writes: I am trying to port software currently running on hp-ux to freeBSD 4.9. The application I have will normally run for large numbers of users accessing database applications. On hp-ux to enable reasonable user numbers with large numbers of files open I would normally tune MAXFILES No files per process MAXFILES_LIM System level max files per process MAXUPRC Max no user processes MAXUSERS Used by kernel generation to calc tables sizes NFILE Max no files open NFLOCKS Max no file locks NINODEMax no inodes open NPTY Max no of virtual telnet devices Where do these exist in FreeBSD or do I not worry about these type of things. I would normally experience 'unable to fork process' or issues with performance as unix files are opened and accessed dynamically on a 'least recently used' basis based on the size of some of these tables. See man tuning but the process limits (see limit(1)) are not, by default, restrictive. If your box has a lot of memory (which it sounds like it should), then leaving maxusers at the default of 0 (i.e., auto-tuning at boot time) may well be okay for you. Of course, that means you'd need to check the number of file handles to see if that's sufficient (it looks like the bottleneck for this application). Although those are affected by maxusers, they can be specified explicitly to override what maxusers would set them to. -- Lowell Gilbert, embedded/networking software engineer, Boston area http://be-well.ilk.org:8088/~lowell/ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: using apm to power a system down, 5.x
dave [EMAIL PROTECTED] writes: Yes, there is a kernel apm module. I've also disabled acpi via device.hints, and enabled apm via that file as well. I've also put apm_enable in rc.conf. Is this overkill? Is the kernel module *loaded*? [I fixed up my scratch machine and this seems to work there, with the same kind of configuration, but I built APM into the kernel on that machine.] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: firefox not launching since upgrade to 0.9_1
I had the same problem. And even though it says you don't have to run it as root first any longer, it did help. ;-) GH On Thu, Jun 17, 2004 at 12:36:14AM -0400, [EMAIL PROTECTED] wrote: hello all, problems since portupgrading firefox. i deleted all .mozilla .phoenix directories from $HOME. uname -a FreeBSD 4.10-RELEASE Thu May 27 13:51:30 EDT 2004 i386 pkg_info | grep -i fire firefox-0.9_1 Web browser based on the browser portion of Mozilla # firefox -- we no longer need to launch 1st time as root, but... (firefox-bin:87415): Gtk-WARNING **: cannot open display: firefox *** loading the extensions datasource *** loading the extensions datasource *** loading the extensions datasource -- same message repeats endlessly and cpu is maxed out -- *** loading the extensions datasource *** loading the extensions datasource *** loading the extensions datasource ^C would anyone have ideas about what might be causing this? thanks, epi ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Sendmail and /var/spool/mqueue
Charles Swiger [EMAIL PROTECTED] wrote: On Jun 17, 2004, at 2:39 PM, Bill Moran wrote: What does it mean when I have a lot of files in /var/spool/mqueue? I don't really understand what that particular queue is for. That is the queue of unsent messages which sendmail will periodicly attempt to resend (every four hours, by default). You can try to flush them via sendmail -v -q. I appreciate the input, Chuck, but now I'm more confused. When I did this, folks suddenly started receiving emails from two years ago. I'm a bit confused as to _why_ sendmail would hang on to mails from years ago without either delivering them or bouncing them? Could the queue have been corrupt? Caused quite a stir, actually ... folks were getting order requests from a year ago. This client is not having any problems getting/sending mail, and the mailq command only shows one mail in the queue, but I have 3867 files in this directory. Hmm. Sendmail tends to accumulate spam-related bounces which can't be delivered because the spam used forged headers, and I've seen some signs that sendmail doesn't always manage to clean up the queue files of such messages after they can't be delivered for 5 days. [ I seem to recall that the sendmail operations guide recommends moving mqueue to oqueue, creating a new mqueue, and then processing the oqueue by hand. Once that is completed, delete oqueue and any leftover files ] I think this is a good argument for Postfix ... -- Bill Moran Potential Technologies http://www.potentialtech.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: natd firewall settings for vpn
On 2004-06-18T00:11:03-0500, Jim Freeze wrote:
Hi
I am trying to configure my firewall to allow packets through
for a VPN connection. I am running FBSD 5.2 as my router and am trying
to connect my laptop from behind the router to our work computer.
The laptop is running OSX 10.3.4 with a Nortel Networks client
made by Apani.
The VPN connection works when the laptop is connected directly
to my DSL modem or when behind the gateway when I set the
firewall type to 'open'.
Support at Apani says that I need to open port 500 and
allow protocols 50 and 51 (whatever that means).
Protocol 50 is ESP, or encapsulating security payload
Protocol 51 is AH, or authentication header
The trick here with NAT is that AH will build a checksum of the IP
header, which includes the private IP address of your laptop. Since NAT
changes this IP address, the destination will dump the packet since the
AH checksum will fail.
When the laptop is behind the gateway, are you using private addresses
on the LAN while running NATD with the 'open' rule set? If yes, then
you aren't using AH, but only ESP.
I found the firewall settings below from the archive and have
implemented them before the divert statement (after also)
but with no luck.
# Allow IPSec clients to run behind firewall
# --- ISAKMP - allow key exchange over UDP 500
${fwcmd} add pass udp from ${inet}:${imask} to any 500 in recv ${iif}
${fwcmd} add pass udp from ${oip} to any 500 out xmit ${oif}
${fwcmd} add pass udp from any 500 to ${inet}:${imask} in recv ${oif}
${fwcmd} add pass udp from any 500 to ${inet}:${imask} out xmit ${iif}
# --- ESP - allow protocol 50 (ESP) for everyone ;-)
${fwcmd} add pass esp from any to any
Does anyone have a firewall with a working nortel client behind it.
I would greatly appreciate any help.
Yep, I use a Nortel Extranet Client each and every day behind my FreeBSD
firewall/router, which runs IPFW2 with NATD. The rules that you have
above look ok. Have you tried setting up a static NAT translation in
/etc/natd.conf for inbound UDP/500? Something like...
redirect_port udp 192.168.1.1:500 500
where 192.168.1.1 is the IP addr of your laptop. Also, here are the
relevant rules from my rc.firewall:
${fwcmd} add 5000 divert natd all from any to any via ${wan_if}
#
${fwcmd} add 42000 queue 70 esp from any to any in recv ${wan_if}
${fwcmd} add queue 80 esp from any to any out xmit ${wan_if}
${fwcmd} add queue 50 esp from any to any in recv ${lan_if}
${fwcmd} add queue 60 esp from any to any out xmit ${lan_if}
#
${fwcmd} add 43000 queue 50 udp from ${lan_net}/${lan_mask} to any dst-port 500 in
recv ${lan_if}
${fwcmd} add queue 80 udp from ${wan_ip} to any dst-port 500 out xmit ${wan_if}
${fwcmd} add queue 70 udp from any to ${lan_net}/${lan_mask} src-port 500 in recv
${wan_if}
${fwcmd} add queue 60 udp from any to ${lan_net}/${lan_mask} src-port 500 out xmit
${lan_if}
*NOTE* that the ESP and ISAKMP rules come AFTER the divert rule.
--
Mike
perl -e 'print unpack(u,88V]N=%C=\!I;F9O(EN(AE861EG,*);'
pgp4cYeKOyD6V.pgp
Description: PGP signature
Starting Apache on 4.10 stable at boot time
Hi all, I moved our work server over from 5.2 release to 4.10 stable. All seems fine except for some reason apache (apache-1.3.31_2) doesn't sart automatically at boot time. Does starting apache at boot time differ on 4.10 to 5.2? I have the apache.sh script in rc.d/ and it has correct privileges. What am in missing? Thanks, Gareth __ Herbalife Independent Distributor http://www.healthiest.co.za ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Starting Apache on 4.10 stable at boot time
On Fri, 18 Jun 2004, Gareth Bailey wrote: Does starting apache at boot time differ on 4.10 to 5.2? I have the apache.sh script in rc.d/ and it has correct privileges. Anything in /var/log/httpd_error_log ? In particular check any critical erros from mod_unique_id about (reverse) resolution of host names. Dw. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Starting Apache on 4.10 stable at boot time
On 2004-06-18T16:37:47+0200, Gareth Bailey wrote: Hi all, I moved our work server over from 5.2 release to 4.10 stable. All seems fine except for some reason apache (apache-1.3.31_2) doesn't sart automatically at boot time. Does starting apache at boot time differ on 4.10 to 5.2? I have the apache.sh script in rc.d/ and it has correct privileges. What am in missing? cd /usr/ports/www/apache13 cat pkg-message -- Mike perl -e 'print unpack(u,88V]N=%C=\!I;F9O(EN(AE861EG,*);' pgpRhQg1c2yfU.pgp Description: PGP signature
Compiling problem
Hi I try to compile a big soft : OpenCascade5.1 The compilation don't work. Where can I have some help (I'm sysadmin, not a developper). Regards. AS. -- Albert SHIH Universite de Paris 7 (Denis DIDEROT) U.F.R. de Mathematiques. Heure local/Local time: Fri Jun 18 16:51:57 CEST 2004 ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: copy or listing problem
On 2004-06-18 13:23, Henrik W Lund [EMAIL PROTECTED] wrote: Yavuz Ma?lak wrote: Hello I use freebsd4.9 I have thousands of files in my any directory. and I need to copy them to another directory. but when I started to copy them I got error as below; /bin/cp: Argument list too long. You could do it with a shell script: [SOF] #!/bin/sh for file in * do if [ -f $file ] then cp $file $target_dir #Define $target_dir yourself fi done [EOF] Please note that this is very likely to fail at the expansion of `for file in *' in very much the same way as `cp *' fails. A better alternative is to start copying one level up or use xargs(1): find . -maxdepth 1 | xargs -J '@' cp -Rp '@' /destination/path or something similar. - Giorgos ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
5.3 NCP ?
Hello Daemonisers um I wonder does anyone know when NCP support might be restored to the 5. series? If as seems it's a gcc compatibility thing that needs working through, I would be happy to run makes and report chokes typos etc.. I'm not a gcc guru but have fixed the odd silly in source files on apps, also I have a working marsnwe from 4.x which I can test against. PS am not offering to take over maintenance of Novell emulation, just a frustrated user with some skills in the programming district 8-D HTH David Denny david at chavin full stop net ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Sendmail and /var/spool/mqueue
On Fri, Jun 18, 2004 at 09:57:22AM -0400, Bill Moran wrote: Charles Swiger [EMAIL PROTECTED] wrote: On Jun 17, 2004, at 2:39 PM, Bill Moran wrote: What does it mean when I have a lot of files in /var/spool/mqueue? I don't really understand what that particular queue is for. That is the queue of unsent messages which sendmail will periodicly attempt to resend (every four hours, by default). You can try to flush them via sendmail -v -q. I appreciate the input, Chuck, but now I'm more confused. When I did this, folks suddenly started receiving emails from two years ago. I'm a bit confused as to _why_ sendmail would hang on to mails from years ago without either delivering them or bouncing them? Could the queue have been corrupt? Sounds like you aren't running a sendmail process to flush the queue regularly. Which means that any message that cannot be delivered immediately will be stuck into the /var/spool/mqueue directory and forgotten about. Look at /var/run/sendmail.pid -- the second line shows what command line sendmail was started with. Typically it will be something like: /usr/sbin/sendmail -L sm-mta -bd -q30m (You can't use ps(1) to extract this information, because sendmail is one of those programs that futzes with its argv[][] array as it runs) Unless you have a -qNNN flag in there somewhere, sendmail won't be processing any queued messages for you. Set this using the 'sendmail_flags' variable in /etc/rc.conf if necessary, although the value I've shown is the default. The trailing bit '30m' is how frequently sendmail attempts to run the queue -- somewhere between 15m and 30m is best: don't be tempted to set it too short, or you'll not give any correspondents enough time to sort out any problems their end before you try re-sending. If you end up with a load of messages stuck in /var/spool/clientmqueue, you've got a similar problem with not running a MSP queue daemon. The case is exactly analogous, except that the sendmail flags are in /var/spool/clientmqueue/sm-client.pid and should read: /usr/sbin/sendmail -L sm-msp-queue -Ac -q30m and you need to set 'sendmail_msp_queue_flags' in /etc/rc.conf to override them. Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK pgpS2gOtTf39q.pgp Description: PGP signature
Re: copy or listing problem
On Fri, Jun 18, 2004 at 05:58:18PM +0300, Giorgos Keramidas wrote: On 2004-06-18 13:23, Henrik W Lund [EMAIL PROTECTED] wrote: Yavuz Ma?lak wrote: Hello I use freebsd4.9 I have thousands of files in my any directory. and I need to copy them to another directory. but when I started to copy them I got error as below; /bin/cp: Argument list too long. You could do it with a shell script: [SOF] #!/bin/sh for file in * do if [ -f $file ] then cp $file $target_dir #Define $target_dir yourself fi done [EOF] Please note that this is very likely to fail at the expansion of `for file in *' in very much the same way as `cp *' fails. A better alternative is to start copying one level up or use xargs(1): find . -maxdepth 1 | xargs -J '@' cp -Rp '@' /destination/path or something similar. # find . -depth -print0 | cpio -p0dmu /destination/path Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK pgpc5TtyJGEZi.pgp Description: PGP signature
Re: Sendmail and /var/spool/mqueue
Matthew Seaman [EMAIL PROTECTED] wrote: On Fri, Jun 18, 2004 at 09:57:22AM -0400, Bill Moran wrote: Charles Swiger [EMAIL PROTECTED] wrote: On Jun 17, 2004, at 2:39 PM, Bill Moran wrote: What does it mean when I have a lot of files in /var/spool/mqueue? I don't really understand what that particular queue is for. That is the queue of unsent messages which sendmail will periodicly attempt to resend (every four hours, by default). You can try to flush them via sendmail -v -q. I appreciate the input, Chuck, but now I'm more confused. When I did this, folks suddenly started receiving emails from two years ago. I'm a bit confused as to _why_ sendmail would hang on to mails from years ago without either delivering them or bouncing them? Could the queue have been corrupt? Sounds like you aren't running a sendmail process to flush the queue regularly. Which means that any message that cannot be delivered immediately will be stuck into the /var/spool/mqueue directory and forgotten about. Look at /var/run/sendmail.pid -- the second line shows what command line sendmail was started with. Typically it will be something like: /usr/sbin/sendmail -L sm-mta -bd -q30m (You can't use ps(1) to extract this information, because sendmail is one of those programs that futzes with its argv[][] array as it runs) Unless you have a -qNNN flag in there somewhere, sendmail won't be processing any queued messages for you. Set this using the 'sendmail_flags' variable in /etc/rc.conf if necessary, although the value I've shown is the default. The trailing bit '30m' is how frequently sendmail attempts to run the queue -- somewhere between 15m and 30m is best: don't be tempted to set it too short, or you'll not give any correspondents enough time to sort out any problems their end before you try re-sending. If you end up with a load of messages stuck in /var/spool/clientmqueue, you've got a similar problem with not running a MSP queue daemon. The case is exactly analogous, except that the sendmail flags are in /var/spool/clientmqueue/sm-client.pid and should read: /usr/sbin/sendmail -L sm-msp-queue -Ac -q30m and you need to set 'sendmail_msp_queue_flags' in /etc/rc.conf to override them. Thanks a lot Matthew. All these appear correct (exactly) with what you show. It makes it all the more mystery why these messages are getting hung up. I'm going to keep an eye on the server for a while and see if I can figure anything out. -- Bill Moran Potential Technologies http://www.potentialtech.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: [FreeBSD] pkg_add help
Can someone point me in the right direction. I have a package I downloaded from FreeBSD.org thru Konqueor. It ends with .tbz I could not find this package in the ports collection thru stand/sysinstall My two questions are I need to extract this file Where And then how do I install, make install didn't work. Presuming you downloaded the right version for the versin of FreeBSD you are on - .tbz files start in 5., try just putting it in /usr/local/whatever_the_name_is and doing pkg_add whatever_the_name_is.tbz jerry Thanx in advance. Later, Leon A fanatic is one who can't change his mind and won't change the subject. Sir Winston Churchill ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
New AOpen AX4SPE-UN Motherboard fails to boot ...
I've been running an AX4B-533 motherboard for the longest time, but, in order to make use of an SATA drive I just bought, I figured I'd upgrade the motherboard instead of buying an interface card ... got the motherboard, transfer'd all my old components to the new one ... and boot hangs. I can get to the BIOS, it recognizes my drives ... it gets to the boot blocks, where I can hit F1 to go to FreeBSD ... then it just sits there indefinitely ... I know that hitting F1 has done something, since the screen scrolls up a couple of lines, same as when it boots normally, but instead of getting that 'twirling -' that I would expect, nothing ... Has anyone had experience with the AX4SPE-UN board? Is there something semi-obvious I should be trying? A BIOS setting that I need to change from the default maybe? The system is running -CURRENT last updated on June 11th ... Thanks ... Marc G. Fournier Hub.Org Networking Services (http://www.hub.org) Email: [EMAIL PROTECTED] Yahoo!: yscrappy ICQ: 7615664 ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: copy or listing problem
Hello I use freebsd4.9 I have thousands of files in my any directory. and I need to copy them to another directory. but when I started to copy them I got error as below; /bin/cp: Argument list too long. You didn't include the command you used, but I it was something like:cp * /otherdir/. That '*' on there makes the shell feed it all the file names on the command line. eg, the globbing function adds in all the file names before it is handed over to the cp command and since there are huge numbers of files, it makes the command line too long. Do I have to copy them in pieces ? You can try that. When I am too lazy or foggy to think up a find or script segment I often do something like: cp a* /otherdir/. cp b* /otherdir/. etc, But, it is possible for there to be too many files in some alphabet clumps even for that. A couple of other people have suggested pairing a find with the copy. That is the officially good way to go, but find can seem tricky to use at times. jerry What shall I do ? Thanks ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
perl script code
I have this
#(Scan line for word abuse,);
if ((/([EMAIL PROTECTED])\s/) || (/([EMAIL PROTECTED])\s/))
{
if (${1} eq [EMAIL PROTECTED]) { $abuse_email =
[EMAIL PROTECTED]; next; }
if (${1} eq [EMAIL PROTECTED]) { $abuse_email =
[EMAIL PROTECTED]; next; }
if (${1} eq [EMAIL PROTECTED]) { $abuse_email =
[EMAIL PROTECTED]; next; }
if (${1} eq [EMAIL PROTECTED]) { $abuse_email =
[EMAIL PROTECTED]; next; }
if (${1} eq [EMAIL PROTECTED]) { $abuse_email =
[EMAIL PROTECTED]; next; }
if (${1} eq [EMAIL PROTECTED]) { $abuse_email =
[EMAIL PROTECTED]; next; }
if ((${1} =~ /[EMAIL PROTECTED]/i) || (${1} =~ /[EMAIL PROTECTED]/i))
{
next;
}
else
{
$abuse_email = ${1};
debug(abuse_email body = $abuse_email\n);
}
}
How can I rewrite the
if (${1} eq [EMAIL PROTECTED]) { $abuse_email =
[EMAIL PROTECTED]; next; }
if (${1} eq [EMAIL PROTECTED]) { $abuse_email =
[EMAIL PROTECTED]; next; }
if (${1} eq [EMAIL PROTECTED]) { $abuse_email =
[EMAIL PROTECTED]; next; }
if (${1} eq [EMAIL PROTECTED]) { $abuse_email =
[EMAIL PROTECTED]; next; }
if (${1} eq [EMAIL PROTECTED]) { $abuse_email =
[EMAIL PROTECTED]; next; }
if (${1} eq [EMAIL PROTECTED]) { $abuse_email =
[EMAIL PROTECTED]; next; }
part so I can check the last position of what ever is found for \
/ ) } ] and delete those unwanted characters from value that gets
loaded into $abuse_email???
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Starting Apache on 4.10 stable at boot time
On 18 Jun 2004 at 10:42, Michael W. Oliver wrote: On 2004-06-18T16:37:47+0200, Gareth Bailey wrote: Hi all, I moved our work server over from 5.2 release to 4.10 stable. All seems fine except for some reason apache (apache-1.3.31_2) doesn't sart automatically at boot time. Does starting apache at boot time differ on 4.10 to 5.2? I have the apache.sh script in rc.d/ and it has correct privileges. What am in missing? cd /usr/ports/www/apache13 cat pkg-message -- Mike perl -e 'print unpack(u,88V]N=%C=\!I;F9O(EN(AE861EG,*);' Do you have apache_start=YES in /etc/rc.conf ? ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: vinum setup
thanx Greg, you're right as always. I booted into single user from start up and sure enough everything was editable then. I got another problem though. I set up 2 disks for vinum and want to allocate exisiting partitions to vinum mirrored volumes. I left 16 blocks at the begining, moved first partition ( swap ) to 281, recalculated offsets in vinum config with -16, run vinum config, everything's peachy, drives rebuild, fsck sees no errors, I edit fstab, reboot, vinum module loads but root can not be mounted as a vinum device, I still have to manually specify my regular root ( /dev/das1a ) partition. dmesg output below and vinum/disklabel too. thanx a million. Greg for US president :) Mounting root from ufs:/dev/vinum/root missing unit number setrootbyname failed ffs_mountroot: can't find rootvp Root mount failed: 6 disklabel ( similar for both disks ) - a: 21094400 21094404.2BSD 2048 1638489 # (Cyl. 131*- 1444*) b: 2109159 281 swap# (Cyl.0*- 131*) c: 1562481270unused0 0# (Cyl.0 - 9725*) e: 133044287 232038404.2BSD 2048 1638489 # (Cyl. 1444*- 9725*) h: 156248111 16 vinum # (Cyl.0*- 9725*) vinum -- drive a device /dev/ad2s1h drive b device /dev/ad3s1h volume root plex org concat sd length 21094400s driveoffset 2109424s drive a plex org concat sd length 21094400s driveoffset 2109424s drive volume home plex org concat sd length 133044287s driveoffset 23203824s drive a plex org concat sd length 133044287s driveoffset 23203824s drive b On Fri, 18 Jun 2004, Greg 'groggy' Lehey wrote: [Format recovered--see http://www.lemis.com/email/email-format.html] Output wrapped. On Thursday, 17 June 2004 at 12:04:01 -0400, synrat wrote: 4.8 I'm trying to setup partitions for vinum. I am in single user mode, but every time I try to modify swap size to accomodate for vinum confuration I get disklabel: ioctl DIOCWDINFO: open partition would move or shrink re-edit the label? [y] #size offsetfstype [fsize bsize bps/cpg] a: 21094400 21094404.2BSD 2048 1638489 # (Cyl. 131*- 1444*) b: 2109000 430 swap# (Cyl.0 - 131*) c: 1562481270unused0 0# (Cyl.0 - 9725*) e: 133044287 232038404.2BSD 2048 1638489 # (Cyl. 1444*- 9725*) h: 156248111 16 vinum # (Cyl.0*- 9725*) You can't change open partitions. You also can't unmount swap. If you go from multi-user to single user mode, the swap remains mounted. You'll need to boot to single user mode to do that. If this doesn't answer your question, more details, please, including any log messages. Please don't wrap them. Greg -- When replying to this message, please copy the original recipients. If you don't, I may ignore the reply or reply to the original recipients. For more information, see http://www.lemis.com/questions.html Note: I discard all HTML mail unseen. Finger [EMAIL PROTECTED] for PGP public key. See complete headers for address and phone numbers. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
more kdm questions
hello again, Did you set the hostname ? This is going to sound like a stupid question but how do I set the hostname? I searched the archive for 'kdm hostname' and found nothing. Thanks again Brett hello (again), I am still having some problems with kdm, I have searched (again) the archives and the handbook. Below are the steps I took, files I edited during setup. After I installed the X window system and KDE I created the file ~/.xinitrc which contains; exec startkde after I created the file I could use startx to run KDE. I then setup KDM by editing the file /usr/X11R6/lib/X11/xdm/Xsession. I added the following to the file; case $# in 1) case $1 in kde) exec /usr/local/bin/startkde ;; failsafe) exec xtem -geometry 80x24-0-0 ;; esac esac Finally I added the following to /usr/X11R6/lib/X11/xdm/Xsetup_0; /usr/local/bin/kdmdesktop KDM loads but when I log in nothing happens, I just end up back at the login screen. This is all the info I can think of. If I missed any please let me know. Thanks again Brett ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
kernel support for old PC
Dear FreeBSD users I would like to boot and use the latest freebsd distribution available on an old i386 Pentium PC with no ATAPI nor IDE disk controller. My configuration is DPT smartcache III SCSI controller on ISA bus SCSI CD-ROM and disks Ethernet 3com 3C509 on ISA bus The 5.2.1 distribution officially support all these stuffs, unfortunately I cannot configure any kernel because I cannot install any disk ! Could you please help me ? Is there a site where one can download pre-configured kernels on standard 1.44Mb floppy disk ? Thank you for your help. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: perl script code
On Fri, Jun 18, 2004, JJB wrote:
I have this
#(Scan line for word abuse,);
if ((/([EMAIL PROTECTED])\s/) || (/([EMAIL PROTECTED])\s/))
{
if (${1} eq [EMAIL PROTECTED]) { $abuse_email =
[EMAIL PROTECTED]; next; }
if (${1} eq [EMAIL PROTECTED]) { $abuse_email =
[EMAIL PROTECTED]; next; }
if (${1} eq [EMAIL PROTECTED]) { $abuse_email =
[EMAIL PROTECTED]; next; }
if (${1} eq [EMAIL PROTECTED]) { $abuse_email =
[EMAIL PROTECTED]; next; }
if (${1} eq [EMAIL PROTECTED]) { $abuse_email =
[EMAIL PROTECTED]; next; }
if (${1} eq [EMAIL PROTECTED]) { $abuse_email =
[EMAIL PROTECTED]; next; }
if ((${1} =~ /[EMAIL PROTECTED]/i) || (${1} =~ /[EMAIL PROTECTED]/i))
{
next;
}
else
{
$abuse_email = ${1};
debug(abuse_email body = $abuse_email\n);
}
}
How can I rewrite the
if (${1} eq [EMAIL PROTECTED]) { $abuse_email =
[EMAIL PROTECTED]; next; }
if (${1} eq [EMAIL PROTECTED]) { $abuse_email =
[EMAIL PROTECTED]; next; }
if (${1} eq [EMAIL PROTECTED]) { $abuse_email =
[EMAIL PROTECTED]; next; }
if (${1} eq [EMAIL PROTECTED]) { $abuse_email =
[EMAIL PROTECTED]; next; }
if (${1} eq [EMAIL PROTECTED]) { $abuse_email =
[EMAIL PROTECTED]; next; }
if (${1} eq [EMAIL PROTECTED]) { $abuse_email =
[EMAIL PROTECTED]; next; }
part so I can check the last position of what ever is found for \
/ ) } ] and delete those unwanted characters from value that gets
loaded into $abuse_email???
This type of thing is generally better handled using a hash for
the test, something like:
# This just loads 1 into the hash for each address. One might
# want to generalize by mapping to the real abuse address.
my %addrmap = map { $_, 1 } qw(
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
);
# $1 will be all no-whitespace after the ``@''
if(/abuse\@(\S+) $addrmap{$1) {
($abuse_email = $1) =~ s/*$//; # strip trailing ''(s)
}
...
Bill
--
INTERNET: [EMAIL PROTECTED] Bill Campbell; Celestial Software LLC
UUCP: camco!bill PO Box 820; 6641 E. Mercer Way
FAX:(206) 232-9186 Mercer Island, WA 98040-0820; (206) 236-1676
URL: http://www.celestial.com/
``Virtually everything is under federal control nowadays except the
federal budget.''
-- Herman E. Talmadge, 1975
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Starting Apache on 4.10 stable at boot time
On Fri, Jun 18, 2004 at 10:42:55AM -0400, Michael W. Oliver wrote: On 2004-06-18T16:37:47+0200, Gareth Bailey wrote: I moved our work server over from 5.2 release to 4.10 stable. All seems fine except for some reason apache (apache-1.3.31_2) doesn't sart automatically at boot time. Does starting apache at boot time differ on 4.10 to 5.2? I have the apache.sh script in rc.d/ and it has correct privileges. What am in missing? cd /usr/ports/www/apache13 cat pkg-message I'm also having this problem actually and I can't figure it out. Yes, I read the pkg-message and put the apache_enable=YES into /etc/rc.conf, but it seems like apache.sh never gets run at boot. I've checked all the seemingly-obvious things like the permissions etc. It will start if I do: # /usr/local/etc/rc.d/apache.sh start Since I obviously don't boot that often I haven't had chance to investigate further.. -- http://freebsdwiki.org/ - Encrypted mail welcome - keyid 0xBF15490B Last year I went fishing with Salvador Dali. He was using a dotted line. He caught every other fish. -- Steven Wright pgpHSytY957Vx.pgp Description: PGP signature
Re: kernel support for old PC
Is there a site where one can download pre-configured kernels on standard 1.44Mb floppy disk ? Sure. You can start the install from floppy, then do the actual installation of the system over FTP. You can find the info you need to do this here: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/install-pre.html Down near the bottom of the page explains how to aquire the floppies, and how to properly get the images over to the disks themselves. Cheers, Steve Thank you for your help. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] -- Steve Bertrand Senior Systems/Network Manager eagle.ca Internet www.eagle.ca [EMAIL PROTECTED] t: 905.373.9313 ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: [A bit OT]Re: New user questions :)
Brian Astill wrote: On Thu, 17 Jun 2004 10:27 am, Jorn Argelo wrote: That advice may be OK for some things, but it doesn't make sense to make yourself compile such behemoths as Openoffice and etc unless you are in to pain and suffering for your entertainment. Heh, that's true. Though let's be honest, you have to try everything once, don't you think? I got no problems compiling KDE, but I don't really prefer using OOo. I'll use KOffice instead. May you have much good fortune! On my experience, you'll need it. It might depend on the system, but I have found that KWord crashes every time you use Save As and KSpread won't save AT ALL. That's interesting. KOffice worked just fine here. I never had any problems with it. The only minor thing that irritated me was the limited choice of fonts, but that's it. Interestingly, Knoppix - which is a pretty comprehensive stand-alone Debian Linux system - ships with Open Office, but without KOffice, even though it uses KDE as its GUI. The main reason is, I think, because OOo can save files into Bill's extension, and KOffice can't. Perhaps the developers of Knoppix encountered several problems using KOffice as well. OO just WORKS without any hassles I know of. It's not a bad program, no. But the thing I really hate about it is that you need a working java eviroment to let it work, even if you install it without java support. I haven't really tried the package thing though, I compiled it from source from the ports tree. Cheers, Jorn ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Sendmail for Large Sites
Martin McCormick wrote: How well does the administration of Sendmail scale up to sites serving as many as 25,000 users? On my traineeship we used two sendmail servers (a mail in and a mail out, both connected to an anti virus machine and then send to an Exchange server, where the actual mail gathered), and it worked just fine. This was used for about 2000-3000 users. These machines were running Solaris 8 though, but that doesn't really matter. When you used top, the machines only had a server load of 1.85 or something. Some peeks up to 2.00, but not extreme high values. These were running on an UltraSPARC II or III (can't recall clearly, but they were quite old). Ironicly enough, the two Solaris machines always worked without giving a kick, and the Exchange enviroment was always a problem. So in other words, these machines were merely gateways, but all the mails from all the locations all over Europe passed trough those two machines. I'm not really sure if you're planning to use a POP or IMAP daemon (not sure either if you can fetch mail from a mailserver using LDAP) on those machines as well, but if that's the case you'll need some heavier machines. Do note that Sendmail recenly comes to the news with some major security exploits, so perhaps Postfix or Qmail is a better option. Cheers, Jorn ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
How to get best results from FreeBSD-questions
How to get the best results from FreeBSD questions. === Last update $Date: 2003/03/09 22:09:31 $ This is a regular posting to the FreeBSD questions mailing list. If you got it in answer to a message you sent, it means that the sender thinks that at least one of the following things was wrong with your message: - You left out a subject line, or the subject line was not appropriate. - You formatted it in such a way that it was difficult to read. - You asked more than one unrelated question in one message. - You sent out a message with an incorrect date, time or time zone. - You sent out the same message more than once. - You sent an 'unsubscribe' message to FreeBSD-questions. If you have done any of these things, there is a good chance that you will get more than one copy of this message from different people. Read on, and your next message will be more successful. This document is also available on the web at http://www.lemis.com/questions.html. = Contents: I:Introduction II: How to unsubscribe from FreeBSD-questions III: Should I ask -questions, -newbies or -hackers? IV: How to submit a question to FreeBSD-questions V:How to answer a question to FreeBSD-questions I: Introduction === This is a regular posting aimed to help both those seeking advice from FreeBSD-questions (the newcomers), and also those who answer the questions (the hackers). Note that the term hacker has nothing to do with breaking into other people's computers. The correct term for the latter activity is cracker, but the popular press hasn't found out yet. The FreeBSD hackers disapprove strongly of cracking security, and have nothing to do with it. In the past, there has been some friction which stems from the different viewpoints of the two groups. The newcomers accused the hackers of being arrogant, stuck-up, and unhelpful, while the hackers accused the newcomers of being stupid, unable to read plain English, and expecting everything to be handed to them on a silver platter. Of course, there's an element of truth in both these claims, but for the most part these viewpoints come from a sense of frustration. In this document, I'd like to do something to relieve this frustration and help everybody get better results from FreeBSD-questions. In the following section, I recommend how to submit a question; after that, we'll look at how to answer one. II: How to unsubscribe from FreeBSD-questions == When you subscribed to FreeBSD-questions, you got a welcome message from [EMAIL PROTECTED] In this message, amongst other things, it told you how to unsubscribe. Here's a typical message: Welcome to the freebsd-questions mailing list! If you ever want to remove yourself from this mailing list, you can send mail to [EMAIL PROTECTED] with the following command in the body of your email message: unsubscribe freebsd-questions Greg Lehey [EMAIL PROTECTED] Here's the general information for the list you've subscribed to, in case you don't already have it: FREEBSD-QUESTIONS User questions This is the mailing list for questions about FreeBSD. You should not send how to questions to the technical lists unless you consider the question to be pretty technical. Normally, unsubscribing is even simpler than the message suggests: you don't need to specify your mail ID unless it is different from the one which you specified when you subscribed. If Majordomo replies and tells you (incorrectly) that you're not on the list, this may mean one of two things: 1. You have changed your mail ID since you subscribed. That's where keeping the original message from majordomo comes in handy. For example, the sample message above shows my mail ID as [EMAIL PROTECTED] Since then, I have changed it to [EMAIL PROTECTED] If I were to try to remove [EMAIL PROTECTED] from the list, it would fail: I would have to specify the name with which I joined. 2. You're subscribed to a mailing list which is subscribed to FreeBSD-questions. If that's the case, you'll have to figure out which one it is and get your name taken off that one. If you're not sure which one it might be, check the headers of the messages you receive from freebsd-questions: maybe there's a clue there. If you've done all this, and you still can't figure out what's going on, send a message to [EMAIL PROTECTED], and he will sort things out for you. Don't send a message to FreeBSD-questions: they can't help you. III: Should I ask -questions, -newbies or -hackers? === Two mailing lists handle general questions about FreeBSD, FreeBSD-questions and FreeBSD-hackers. In addition, the FreeBSD-newbies list caters
The Complete FreeBSD: errata and addenda
The trouble with books is that you can't update them the way you can a web page or any other online documentation. The result is that most leading edge computer books are out of date almost before they are printed. Unfortunately, The Complete FreeBSD, published by O'Reilly, is no exception. Inevitably, a number of bugs and changes have surfaced. The Complete FreeBSD has been through a total of five editions, including its predecessor Installing and Running FreeBSD. Two of these have been reprinted with corrections. I maintain a series of errata pages. Start at http://www.lemis.com/errata-4.html to find out how to get the errata information. Have you found a problem with the book, or maybe something confusing? Please let me know: I'm constantly updating it. Greg ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Sendmail for Large Sites
On 18/06/04 06:13 -0500, Martin McCormick wrote: There are other considerations such as the facts that all incoming and outgoing messages are checked for malicious attachments. ldap is used to drive the setting of customer mail delivery preferences and even their user ID choice. Hi Martin, Sendmail and Postfix can do the virus scanning. You're going to need some serious firepower to scan all attachments for 25000 users. Cheers, Jason ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: more kdm questions
Brett Wiggins [EMAIL PROTECTED] wrote: Did you set the hostname ? This is going to sound like a stupid question but how do I set the hostname? I searched the archive for 'kdm hostname' and found nothing. Set the hostname for the machine. For temporary (and testing) you can use the hostname command from a shell prompt. To get it set for good, add a line like: hostname=my.host.name in /etc/rc.conf Make sure that the name you choose is either in DNS, or you enter a matching record in /etc/hosts. Otherwise, you'll have problems with applications running slowly, or not starting at all because they try to verify the hostname. Thanks again Brett hello (again), I am still having some problems with kdm, I have searched (again) the archives and the handbook. Below are the steps I took, files I edited during setup. After I installed the X window system and KDE I created the file ~/.xinitrc which contains; exec startkde after I created the file I could use startx to run KDE. I then setup KDM by editing the file /usr/X11R6/lib/X11/xdm/Xsession. I added the following to the file; case $# in 1) case $1 in kde) exec /usr/local/bin/startkde ;; failsafe) exec xtem -geometry 80x24-0-0 ;; esac esac Finally I added the following to /usr/X11R6/lib/X11/xdm/Xsetup_0; /usr/local/bin/kdmdesktop KDM loads but when I log in nothing happens, I just end up back at the login screen. This is all the info I can think of. If I missed any please let me know. Thanks again Brett ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] -- Bill Moran Potential Technologies http://www.potentialtech.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Sendmail for Large Sites
On Jun 18, 2004, at 7:13 AM, Martin McCormick wrote: How well does the administration of Sendmail scale up to sites serving as many as 25,000 users? Sendmail is fine for the task, as the main issues to be concerned about have more to due with user-agents reading the mail (as in, your POP and IMAP servers), and how mailboxes are kept, than with the MTA and SMTP-level issues. I am mainly interested in Sendmail's capacity at this time in order to suggest it as a possibility if it is realistic to do so. Sure, sendmail can solve the problem as specified. Let me mention a book by Nick Christenson, SENDMAIL Performance Tuning, ISBN 0-321-11570-8, because it would certainly help you, and because it has a section worth quoting here on page 10: --- 1.7 Email System Profiling More times than I care to remember, I've had a conversation with someone trying to specify an email system that went like the following: Them: I need to build an email server using Sun equipment that will handle X number of users. What hardware should I buy? Me: Well, that completely depends. Them: On what? Me: On their usage profiles. How many messages does each person send and receive each day? What is the average message size? How fast is your Internet connection? What percentage of your peak day's total traffic occur during the peak hour? [ ... ] When it comes to email servers, it seems that just about the only information anyone can obtain from a prospective client is the number of users. Unfortunately for performance purposes, this figure is just about the least useful metric for evaluating email service load. There are other considerations such as the facts that all incoming and outgoing messages are checked for malicious attachments. ldap is used to drive the setting of customer mail delivery preferences and even their user ID choice. Cyrus' IMAP and SASL software will play friendly with LDAP, as will sendmail itself. amavisd + clamav is a good solution for scanning mail for viruses and the like. You should strongly consider using maildir rather than mbox-style mail delivery. You might want to consider postfix instead of sendmail. -- -Chuck ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Odd performance issues - fxp vs xl?
Guys, I recently had a little run-in with lightning during a recent thunderstorm - which destroyed my FreeBSD based router (along with a good chunk of my home automation system...) The machine had a VIA EPIA mainboard with a 933MHz processor. I had two 3Com 3C905C-TX boards installed for the router, and used the local vr interface for monitoring (although it was mostly unused). The machine had a 40GB ATA hard disk, and 128MB of RAM. It performed quite well as a router up until the storm. The machine ran a custom compiled version of FreeBSD 4.8, and I used ipfilter/ipnat for routing. Now, I have a new machine with a Tyan S2425 mainboard, and a 850MHz Pentium III processor. The Tyan board has two Intel 10/100 Pro (fxp) interfaces onboard. The system has an 18GB Ultrawide SCSI drive and Adaptec 29160UW controller - and 256MB of RAM. (it was a workstation before being pressed into service as a router). This machine had just been upgraded to FreeBSD 4.10-REL - and I recently recompiled again to add some IPFILTER options. The trouble is, the new machine routes much slower than the original. Even text based (ssh) traffic appears slower. X apps are always a bit slow, and I could always see the refreshes, but it takes forever now. I replicated as much of the configuration from the original machine as I could (same ipf.rules, ipnat.rules, sysctl.conf, etc). The new machine runs an identical software set (dhcpd, sshd, etc). As far as I know, nothing is consuming an inordinate amount of CPU time. In theory, the new machine is better all around. More RAM, faster CPU, etc - so I am a little confused as to what the problem could be? It seems as though the network adapters could be the issue, but this is a broadband link 3Mb/s peak from comcast - to a 10/100 adapter??? I did enable the downloadable firmware for the internal network interface (link0), but turning it on or off doesn't seem to make a difference. Any ideas? Thanks, -Seth ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: more kdm questions
Hi: Did you remember to change the line in /etc/ttys From: ttyv8 /usr/X11R6/bin/xdm -nodaemon xterm off secure To: ttyv8 /usr/X11R6/bin/kdm -nodaemon xterm on secure You can look at section 5.6.2 in the FreeBSD Handbook for more details. Also if you have any other troubles, then you may want to askk at the Kde FreeBSD site http://freebsd.kde.org/. Those pople are quite freindly and helpful. -- Original message from Bill Moran : -- Brett Wiggins wrote: Did you set the hostname ? This is going to sound like a stupid question but how do I set the hostname? I searched the archive for 'kdm hostname' and found nothing. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Kernel build error
I am trying to build a new kernel after csvuping a 4.10 box error --config: line 69: fdc 0 not defined *** Error code 1 lines from config file # Floppy drives device fdc0at isa? port IO_FD1 irq 6 drq 2 device fd0 at fdc0 drive 0 I had built a new kernel on 4.10 with the same lines. It has been working fine. any ideas? ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
undefined reference to 'ngettext'
I'm trying to install xfce4 as my desktop manager on FreeBSD 4.10-STABLE. But when I try this from the ports I get an error message (this actually happens when I try to install everything that needs GTK so not only xfce4): ... ./.libs/libgdk_pixbuf-2.0.so: undefined reference to 'ngettext' *** Error code 1 ... Because of this I can't install a lot of programs because it seems that a lot of them use GTK. Has anyone had this problem before? Thanks in advance, Marco -- Plaese porrf raed. -- Prof. Michael O'Longhlin, S.U.N.Y. Purchase ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: more kdm questions
Forgot to cc the list -Original Message- From: Ruben Bloemgarten [mailto:[EMAIL PROTECTED] Sent: Friday, June 18, 2004 8:13 PM To: 'Brett Wiggins' Subject: RE: more kdm questions # vi /etc/rc.conf Add hostname=yourhostname to the file Reboot will make the change permanent. For a temprary hostname : #hostname yourhostname To verify if the hostname was set : #hostname The hostname is not related to X nor xdm/gdm/kdm, but is a system parameter. Many applications will not function properly or at all without the machine knowing who it is. Xdm/kdm/gdm are amongst those appz that won't work without the hostname. Also, I always take the xinitrc template from /usr/X11R6/lib/X11/xinit, copy it to my home directory and modify at will. Good luck. -Original Message- From: Brett Wiggins [mailto:[EMAIL PROTECTED] Sent: Friday, June 18, 2004 6:21 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: more kdm questions hello again, Did you set the hostname ? This is going to sound like a stupid question but how do I set the hostname? I searched the archive for 'kdm hostname' and found nothing. Thanks again Brett hello (again), I am still having some problems with kdm, I have searched (again) the archives and the handbook. Below are the steps I took, files I edited during setup. After I installed the X window system and KDE I created the file ~/.xinitrc which contains; exec startkde after I created the file I could use startx to run KDE. I then setup KDM by editing the file /usr/X11R6/lib/X11/xdm/Xsession. I added the following to the file; case $# in 1) case $1 in kde) exec /usr/local/bin/startkde ;; failsafe) exec xtem -geometry 80x24-0-0 ;; esac esac Finally I added the following to /usr/X11R6/lib/X11/xdm/Xsetup_0; /usr/local/bin/kdmdesktop KDM loads but when I log in nothing happens, I just end up back at the login screen. This is all the info I can think of. If I missed any please let me know. Thanks again Brett ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Sendmail for Large Sites
My thanks to everybody who answered my questions. If we end up doing major revisions to our present mail system, I will have this information to contribute to the discussion. My experience with sendmail is very positive, but very limited. I am well aware that one person receiving a couple of hundred messages a day on one work station is no indicator of how the same MTA might work when hundreds of thousands of messages and bounces are roaring around the mail server every day. Again, thank you all. Martin McCormick WB5AGZ Stillwater, OK OSU Information Technology Division Network Operations Group ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: vinum setup
nevermind. I figured this out. still, Greg is one smart guy :). I just wish disklabel was at least a bit more user friendly. Every time I use it I have to understand it all over :) /boot/loader.conf vinum_load=YES vinum.root=root vinum.drives=/dev/ad2 /dev/ad3 synrat wrote: thanx Greg, you're right as always. I booted into single user from start up and sure enough everything was editable then. I got another problem though. I set up 2 disks for vinum and want to allocate exisiting partitions to vinum mirrored volumes. I left 16 blocks at the begining, moved first partition ( swap ) to 281, recalculated offsets in vinum config with -16, run vinum config, everything's peachy, drives rebuild, fsck sees no errors, I edit fstab, reboot, vinum module loads but root can not be mounted as a vinum device, I still have to manually specify my regular root ( /dev/das1a ) partition. dmesg output below and vinum/disklabel too. thanx a million. Greg for US president :) Mounting root from ufs:/dev/vinum/root missing unit number setrootbyname failed ffs_mountroot: can't find rootvp Root mount failed: 6 disklabel ( similar for both disks ) - a: 21094400 21094404.2BSD 2048 1638489 # (Cyl. 131*- 1444*) b: 2109159 281 swap# (Cyl.0*- 131*) c: 1562481270unused0 0# (Cyl.0 - 9725*) e: 133044287 232038404.2BSD 2048 1638489 # (Cyl. 1444*- 9725*) h: 156248111 16 vinum # (Cyl.0*- 9725*) vinum -- drive a device /dev/ad2s1h drive b device /dev/ad3s1h volume root plex org concat sd length 21094400s driveoffset 2109424s drive a plex org concat sd length 21094400s driveoffset 2109424s drive volume home plex org concat sd length 133044287s driveoffset 23203824s drive a plex org concat sd length 133044287s driveoffset 23203824s drive b On Fri, 18 Jun 2004, Greg 'groggy' Lehey wrote: [Format recovered--see http://www.lemis.com/email/email-format.html] Output wrapped. On Thursday, 17 June 2004 at 12:04:01 -0400, synrat wrote: 4.8 I'm trying to setup partitions for vinum. I am in single user mode, but every time I try to modify swap size to accomodate for vinum confuration I get disklabel: ioctl DIOCWDINFO: open partition would move or shrink re-edit the label? [y] #size offsetfstype [fsize bsize bps/cpg] a: 21094400 21094404.2BSD 2048 1638489 # (Cyl. 131*- 1444*) b: 2109000 430 swap# (Cyl.0 - 131*) c: 1562481270unused0 0# (Cyl.0 - 9725*) e: 133044287 232038404.2BSD 2048 1638489 # (Cyl. 1444*- 9725*) h: 156248111 16 vinum # (Cyl.0*- 9725*) You can't change open partitions. You also can't unmount swap. If you go from multi-user to single user mode, the swap remains mounted. You'll need to boot to single user mode to do that. If this doesn't answer your question, more details, please, including any log messages. Please don't wrap them. Greg -- When replying to this message, please copy the original recipients. If you don't, I may ignore the reply or reply to the original recipients. For more information, see http://www.lemis.com/questions.html Note: I discard all HTML mail unseen. Finger [EMAIL PROTECTED] for PGP public key. See complete headers for address and phone numbers. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Kernel build error
Mark wrote: I am trying to build a new kernel after csvuping a 4.10 box error --config: line 69: fdc 0 not defined *** Error code 1 lines from config file # Floppy drives device fdc0at isa? port IO_FD1 irq 6 drq 2 device fd0 at fdc0 drive 0 I had built a new kernel on 4.10 with the same lines. It has been working fine. any ideas? Umm, I believe you shouldn't add the 0's. So just type fd and fdc. The 0 just represents the master drive (so 1 is the slave drive). If you have two floppy drives for instance, you will have fd0 and fd1, and of course its respective slices. Cheers, Jorn ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
any use to build from source?
Hi all, I must say that I was initially interested in the idea of building software from source - but I am kind of loosing it. Certainly, it allows you to compile with the compiler options you want, you are able to optimize the binaries for your CPU, but: does it really matter? Are the speed improvements really visible? Dependencies was another argument: you compile with the correct headers of dependant files, well... is that really so? If you upgraded the dependant binaries, wouldn't you get the same effect? One certain drawback of compiling from source is the compilation time. Large packages like KDE or OpenOffice take ages, so you can't just quickly upgrade a whole system, or a large part of it. I might add that I am more the typical desktop user, not using my machines for real and specific server apps. So, my question is basically: did you, in your experience, find that compiling from source *really* has any serious advantages that make up for the time it takes? -PU ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
3 servers using jails
Hi all, I've got 3 devices that I would like to consolodate. Box A - IPFW/Nat gateway for corporate use. Box B - Squid/Dansguardian content filter (my use) Box C - Qmail/vpopmail (multiple domain) mailhub All three boxes are at separate locations. What I would like to do is implement a system (at the company Box A is at) that can house all three servers in one box. This is what I'd like to achieve: - Route/filter packets from corporate LAN to Internet - Continue to use the content filter/proxy for my family - Forward corporate LAN http traffic through the proxy - Continue to use the mailhub for everyone that is using it now I am curious to know if this can be jailed. 2 jails plus the main system, one with each virtual server mentioned above. If I can, will this be possible: - 1 public IP serving each server - ability to ipfw fwd all http traffic from the corporate LAN over to the virtual server running the proxy (on it's own public IP), as to deny certain web traffic - ability to use the proxy (again, with it's own public IP) from my house - have the mailhub on it's own public IP in it's own jail (or within the main system itself) - be able to use IPFW to control access, filter traffic for all jails by using each interfaces IP address as if there was no jails I hope I have been clear and consice. Please advise if further clarification is neccesary, and thanks in advance for any advice. ~sb ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
any use to build from source?
Hi all, I must say that I was initially interested in the idea of building software from source - but I am kind of loosing it. Certainly, it allows you to compile with the compiler options you want, you are able to optimize the binaries for your CPU, but: does it really matter? Are the speed improvements really visible? Dependencies was another argument: you compile with the correct headers of dependant files, well... is that really so? If you upgraded the dependant binaries, wouldn't you get the same effect? One certain drawback of compiling from source is the compilation time. Large packages like KDE or OpenOffice take ages, so you can't just quickly upgrade a whole system, or a large part of it. I might add that I am more the typical desktop user, not using my machines for real and specific server apps. So, my question is basically: did you, in your experience, find that compiling from source *really* has any serious advantages that make up for the time it takes? -PU ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Dying disk?
Hey *, I can't quite figure out if this is a dire warning. I hope not since I can't convince my hard drives to stop failing ... sigh. The machine still works fine and has no data worth worrying about, but it'd be nice to know ... From dmesg: acd0: FAILURE - READ_BIG status=51READY,DSC,ERROR sensekey=ILLEGAL REQUEST error=0 acd0: FAILURE - READ_BIG status=51READY,DSC,ERROR sensekey=ILLEGAL REQUEST error=0 acd0: FAILURE - READ_BIG status=51READY,DSC,ERROR sensekey=ILLEGAL REQUEST error=0 acd0: FAILURE - READ_BIG status=51READY,DSC,ERROR sensekey=ILLEGAL REQUEST error=0 acd0: FAILURE - READ_BIG status=51READY,DSC,ERROR sensekey=ILLEGAL REQUEST error=0 acd0: FAILURE - READ_BIG status=51READY,DSC,ERROR sensekey=ILLEGAL REQUEST error=0 Mounting root from ufs:/dev/ad0s1a = --- With a few exceptions, secrecy is deeply incompatible with democracy and with science. --Carl Sagan --- __ Do you Yahoo!? Yahoo! Mail - You care about security. So do we. http://promotions.yahoo.com/new_mail ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: more kdm questions
You don't need do this to get kdm working. Only if you want it to start at boot. I suggest you do this when you get kdm working properly, not before. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Friday, June 18, 2004 8:01 PM To: [EMAIL PROTECTED] Subject: Re: more kdm questions Hi: Did you remember to change the line in /etc/ttys From: ttyv8 /usr/X11R6/bin/xdm -nodaemon xterm off secure To: ttyv8 /usr/X11R6/bin/kdm -nodaemon xterm on secure You can look at section 5.6.2 in the FreeBSD Handbook for more details. Also if you have any other troubles, then you may want to askk at the Kde FreeBSD site http://freebsd.kde.org/. Those pople are quite freindly and helpful. -- Original message from Bill Moran : -- Brett Wiggins wrote: Did you set the hostname ? This is going to sound like a stupid question but how do I set the hostname? I searched the archive for 'kdm hostname' and found nothing. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Dying disk?
acd0: FAILURE - READ_BIG status=51READY,DSC,ERROR sensekey=ILLEGAL REQUEST error=0 I believe that acd0 would be your CD Rom drive. I don't know what the error means, but it appears to have something to do with the CD system. Steve acd0: FAILURE - READ_BIG status=51READY,DSC,ERROR sensekey=ILLEGAL REQUEST error=0 acd0: FAILURE - READ_BIG status=51READY,DSC,ERROR sensekey=ILLEGAL REQUEST error=0 acd0: FAILURE - READ_BIG status=51READY,DSC,ERROR sensekey=ILLEGAL REQUEST error=0 acd0: FAILURE - READ_BIG status=51READY,DSC,ERROR sensekey=ILLEGAL REQUEST error=0 acd0: FAILURE - READ_BIG status=51READY,DSC,ERROR sensekey=ILLEGAL REQUEST error=0 Mounting root from ufs:/dev/ad0s1a = --- With a few exceptions, secrecy is deeply incompatible with democracy and with science. --Carl Sagan --- __ Do you Yahoo!? Yahoo! Mail - You care about security. So do we. http://promotions.yahoo.com/new_mail ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Dying disk?
twig les [EMAIL PROTECTED] wrote: Hey *, I can't quite figure out if this is a dire warning. I hope not since I can't convince my hard drives to stop failing ... sigh. The machine still works fine and has no data worth worrying about, but it'd be nice to know ... From dmesg: acd0: FAILURE - READ_BIG status=51READY,DSC,ERROR sensekey=ILLEGAL REQUEST error=0 acd0: FAILURE - READ_BIG status=51READY,DSC,ERROR sensekey=ILLEGAL REQUEST error=0 acd0: FAILURE - READ_BIG status=51READY,DSC,ERROR sensekey=ILLEGAL REQUEST error=0 acd0: FAILURE - READ_BIG status=51READY,DSC,ERROR sensekey=ILLEGAL REQUEST error=0 acd0: FAILURE - READ_BIG status=51READY,DSC,ERROR sensekey=ILLEGAL REQUEST error=0 acd0: FAILURE - READ_BIG status=51READY,DSC,ERROR sensekey=ILLEGAL REQUEST error=0 Mounting root from ufs:/dev/ad0s1a Looks like a CD-ROM is failing. Do you have the master/slave jumpers correct? -- Bill Moran Potential Technologies http://www.potentialtech.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: [FreeBSD] Ftp Server SOLVED
Kjell, Jan, all others I guess I was looking at the problem to closely last nite... I got it working first thing today. Thanx for all your help Leon ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Dying disk?
Wow I feel like a moron. I'll check the jumper settings on my *cdrom*. Thnx for the boot to the head. --- Bill Moran [EMAIL PROTECTED] wrote: twig les [EMAIL PROTECTED] wrote: Hey *, I can't quite figure out if this is a dire warning. I hope not since I can't convince my hard drives to stop failing ... sigh. The machine still works fine and has no data worth worrying about, but it'd be nice to know ... From dmesg: acd0: FAILURE - READ_BIG status=51READY,DSC,ERROR sensekey=ILLEGAL REQUEST error=0 acd0: FAILURE - READ_BIG status=51READY,DSC,ERROR sensekey=ILLEGAL REQUEST error=0 acd0: FAILURE - READ_BIG status=51READY,DSC,ERROR sensekey=ILLEGAL REQUEST error=0 acd0: FAILURE - READ_BIG status=51READY,DSC,ERROR sensekey=ILLEGAL REQUEST error=0 acd0: FAILURE - READ_BIG status=51READY,DSC,ERROR sensekey=ILLEGAL REQUEST error=0 acd0: FAILURE - READ_BIG status=51READY,DSC,ERROR sensekey=ILLEGAL REQUEST error=0 Mounting root from ufs:/dev/ad0s1a Looks like a CD-ROM is failing. Do you have the master/slave jumpers correct? -- Bill Moran Potential Technologies http://www.potentialtech.com = --- With a few exceptions, secrecy is deeply incompatible with democracy and with science. --Carl Sagan --- __ Do you Yahoo!? Take Yahoo! Mail with you! Get it on your mobile phone. http://mobile.yahoo.com/maildemo ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: natd firewall settings for vpn
Protocol 50 is ESP, or encapsulating security payload
Protocol 51 is AH, or authentication header
Ok, thanks.
The trick here with NAT is that AH will build a checksum of the IP
header, which includes the private IP address of your laptop. Since NAT
changes this IP address, the destination will dump the packet since the
AH checksum will fail.
When the laptop is behind the gateway, are you using private addresses
on the LAN while running NATD with the 'open' rule set? If yes, then
you aren't using AH, but only ESP.
I'm not sure what you are driving at here.
I think the answer is yes. The IP of clients on my LAN
are 192.168.0.x.
As far as the 'open' rule is concerned, I just used that to
test if Contivity worked. I'm not sure what you mean by not using AH.
When using the 'open' firewall ruleset, I did not have to
add any rules for ESP or AH.
Yep, I use a Nortel Extranet Client each and every day behind my FreeBSD
firewall/router, which runs IPFW2 with NATD. The rules that you have
above look ok. Have you tried setting up a static NAT translation in
/etc/natd.conf for inbound UDP/500? Something like...
redirect_port udp 192.168.1.1:500 500
where 192.168.1.1 is the IP addr of your laptop. Also, here are the
relevant rules from my rc.firewall:
Would I use this in addition to the firewall rules?
${fwcmd} add 5000 divert natd all from any to any via ${wan_if}
#
${fwcmd} add 42000 queue 70 esp from any to any in recv ${wan_if}
${fwcmd} add queue 80 esp from any to any out xmit ${wan_if}
${fwcmd} add queue 50 esp from any to any in recv ${lan_if}
${fwcmd} add queue 60 esp from any to any out xmit ${lan_if}
#
${fwcmd} add 43000 queue 50 udp from ${lan_net}/${lan_mask} to any
dst-port=
500 in recv ${lan_if}
${fwcmd} add queue 80 udp from ${wan_ip} to any dst-port 500 out xmit
${wan=
_if}
${fwcmd} add queue 70 udp from any to ${lan_net}/${lan_mask} src-port
500 i=
n recv ${wan_if}
${fwcmd} add queue 60 udp from any to ${lan_net}/${lan_mask} src-port
500 o=
ut xmit ${lan_if}
*NOTE* that the ESP and ISAKMP rules come AFTER the divert rule.
These rules look a little different. Should adding the AH be all I
need or do I need to replace my rules with the one you list above?
--
Jim Freeze
Anarchy may not be the best form of government, but it's better than no
government at all.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Logging the message body from an MTA
On Thu, Jun 17, 2004 at 11:22:44PM +, Lonnie Santella wrote: I need to log the message body of incoming and outgoing messages on my FreeBSD 5.2.1 Release server. I'm running Exim right now, but I really don't have a preference of MTA. The main thing is I need to facilitate the logging of message bodies. I don't know about Exim, but since you don't care switching MTA, Postfix has an always_bcc option. Every mail processed by Postfix (both incoming and outgoing) will be forwarded to that address. You could then make that address use procmail or some other pipe to store the e-mail in your database. GH I don't want to flood you with too many details, but we want to archive messages (including message body) to a MySQL database, so that we can quickly run queries and review messages from months/years ago - no matter who's mailbox it ended up in. To accomplish this, we need to first log the message body somehow... anyhow... then commit the logs to the MySQL database. I'd settle for learning how to do the first step. I've read through Exim docs and Sendmail docs, as well as various newsgroups - plenty of info on logging various data - but nothing on message bodies. I posted a message to the Exim news group - but no luck there. I'm not set on Exim - I just want to log message bodies. Any help or a push in the right direction would be GREATLY appreciated. Thanks, Lonnie ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: startkde
On Friday 18 June 2004 00:58, Brett Wiggins wrote: hello Eric, After installed the X window system and KDE I created the file ~/.xinitrc which contains; exec startkde after I created the file I could use startx to run KDE. I then setup KDM by editing the file /usr/X11R6/lib/X11/xdm/Xsession. I added the following to the file; Brett, if you can, change that file back to its original contents. IIRC, you simply need to edit this line in /etc/ttys: ttyv8 /usr/X11R6/bin/xdm -nodaemon xterm off secure Change it to read: ttyv8 /usr/local/bin/kdm xterm on secure This should start everything for you! I'm going to test it now to be sure, but I think that's right. HTH -- Eric F Crist Keep your pecker hard and your powder dry, and the world WILL turn. pgpK0g1CCiXS0.pgp Description: signature
perl ?
I have $email field that sometimes may not end with alpha character.
How would I codeif (last position of $email != alpha) { replace
last pos of $email with blank }
Or any other coding method to strip off non alpha from $email field
if present.
Thanks
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
4.10 stable: xfree86 driver for ati rage xl chipset?
Hi All: I've been trying to install xfree86 at the same time I'm installing 4.10 stable. The graphical configuration tool comes up fine, but when I try to specify the adapter, there's nothing in the list that refers to ATI at all. If I try to select the default vga adapter, after the config is written and xfree86 attempts to load, my video doesn't work at all. Is there a way to drop out of xfree86 at this point, even before install has completed? I can't proceed to complete the install at this point. Or should I be skipping configuration of xfree86 at this point and do it after FreeBSD is installed? TIA, Andrew ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
